Function at 0x140050740
Capabilities:
Check for time delay via gettickcount
Create thread
Enumerate processes
Execute command
Log keystrokes via polling
Set registry value
Terminate process
Terminate process by name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x578]
sub rsp, 0x650
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140124080]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
xorps xmm0, xmm0
mov dword [rbp - 0x80], 0
mov r8d, recv
mov qword [rbp - 0x50], 0
lea rdx, str.BstkSVC.exe
mov qword [rbp - 0x48], 0
lea rcx, [rbp - 0x60]
movups xmmword [rbp - 0x60], xmm0
call fcn.1400559a0
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140050894
lea rdx, [rbp + 0x260]
mov dword [rbp + 0x260], pe_nt_image_headers64
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14005088b
mov rsi, qword [rbp - 0x48]
mov rbx, qword [rbp - 0x50]
mov r14, qword [rbp - 0x60]
nop
lea rcx, [rbp + 0x28c]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140050840
cmp rsi, 0xf
lea rcx, [rbp - 0x60]
cmova rcx, r14
cmp rbx, rax
jne 0x140050877
test rbx, rbx
je 0x1400508a6
mov r8, rbx
lea rdx, [rbp + 0x28c]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
jne 0x1400508a6
lea rdx, [rbp + 0x260]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140050830
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x60]
call fcn.140055220
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x60]
call fcn.140055220
lea rcx, str.dnsapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x140768c70], rax
lea rdx, str.DnsFlushResolverCache
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x1400508ee
mov rcx, qword [0x140768c70]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
xor esi, esi
xor ecx, ecx
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rsi
mov dword [rbp + 0x150], 0x50
mov dword [rbp + 0x154], 0x40
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x198], rsi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm0
lea rbx, [0x14010a1b0]
movdqa xmmword [rbp + 0x180], xmm1
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x190], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x168]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x190]
mov r8, rbx
mov qword [rsp + 0x58], rsi
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x118], rax
mov r13, rax
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x140768ea0], rax
mov rcx, rax
test rax, rax
je 0x140053cd1
lea rdx, [0x140768ea8]
mov qword [0x140768eb0], rsi
mov qword [rsp + 0x30], rdx
mov r9, r13
lea rdx, [0x140768eb0]
mov qword [0x140768ebc], rsi
mov qword [rsp + 0x28], rdx
mov r8d, 1
mov dword [0x140768ec4], esi
xor edx, edx
mov qword [0x140768ecc], rsi
mov dword [0x140768ed4], esi
mov qword [0x140768ee4], rsi
mov dword [0x140768ed8], 1
mov dword [0x140768ec8], 1
mov dword [0x140768eb8], esi
mov dword [0x140768edc], 1
mov dword [0x140768ee0], 0x50
mov dword [0x140768eec], 1
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x140053cca
xorps xmm0, xmm0
lea rdx, [rbp + 0x3f8]
mov rcx, r13
movups xmmword [rbp + 0x3f8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
xor edx, edx
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r13
call qword [sym.imp.USER32.dll_UpdateWindow]
mov r12, qword [0x140768af0]
test r12, r12
je 0x140050ab1
inc dword [r12 + 0xfc]
mov ecx, 0x6038
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140050acd
xor edx, edx
mov rcx, rax
call fcn.140004bf0
jmp 0x140050ad0
mov rax, rsi
mov qword [0x140768af0], rax
call fcn.140009360
test r12, r12
je 0x140050aea
mov qword [0x140768af0], r12
jmp 0x140050af1
mov r12, qword [0x140768af0]
or dword [r12 + 8], 0x400
mov r10, qword [r12 + 0x58]
mov qword [r12 + 0x20], rsi
call fcn.14003a1d0
movss xmm6, dword [0x14010cca4]
mov rcx, r10
movaps xmm2, xmm6
mov qword [rsp + 0x20], rax
call fcn.1400381b0
mov r10, qword [r12 + 0x58]
call fcn.14003a1d0
mov rcx, r10
mov qword [rsp + 0x20], rax
movaps xmm2, xmm6
call fcn.1400381b0
mov rcx, qword [0x140768ea8]
lea rdx, [0x140760f90]
mov qword [0x140768b10], rax
mov r9d, 0x5c
lea rax, [0x140768c60]
mov r8d, 0x329d
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], Ordinal_79
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov rcx, qword [r12 + 0x58]
lea rbx, [0x140107e78]
movss xmm12, dword [0x14010cc1c]
lea rdx, [rbp + 0x260]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x420], xmm2
mov qword [rbp + 0x490], rax
lea rax, [0x140764230]
movups xmmword [rbp + 0x460], xmm2
mov dword [rbp + 0x428], 3
mov edi, 0xffff
movups xmmword [rbp + 0x410], xmm2
mov byte [rbp + 0x41c], 1
movaps xmm0, xmmword [rbp + 0x410]
movaps xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x450], xmm2
mov dword [rbp + 0x42c], 1
movaps xmm1, xmmword [rbp + 0x420]
movaps xmmword [rbp + 0x270], xmm1
movaps xmmword [rbp + 0x290], xmm2
mov dword [rbp + 0x454], 0x7f7fffff
movaps xmm0, xmmword [rbp + 0x450]
movaps xmmword [rbp + 0x2a0], xmm0
movsd xmm0, qword [rbp + 0x490]
mov dword [rbp + 0x460], 0x3f800000
mov word [rbp + 0x464], di
movaps xmm1, xmmword [rbp + 0x460]
movsd qword [rbp + 0x2e0], xmm0
movaps xmmword [rbp + 0x280], xmm2
movaps xmmword [rbp + 0x2b0], xmm1
movaps xmmword [rbp + 0x2c0], xmm2
movaps xmmword [rbp + 0x2d0], xmm2
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x268], 0x2e94
mov dword [rbp + 0x274], 0x42000000
mov qword [rbp + 0x298], rbx
call fcn.140037f30
xorps xmm2, xmm2
mov qword [rbp + 0x128], rax
mov r15, rax
xor eax, eax
movups xmmword [rbp + 0x410], xmm2
mov qword [rbp + 0x490], rax
mov byte [rbp + 0x41c], 1
movups xmmword [rbp + 0x420], xmm2
movups xmmword [rbp + 0x450], xmm2
movups xmmword [rbp + 0x460], xmm2
movaps xmm0, xmmword [rbp + 0x410]
lea rax, [0x14073ffb0]
mov rcx, qword [r12 + 0x58]
lea rdx, [rbp + 0x260]
movaps xmmword [rbp + 0x260], xmm0
movaps xmmword [rbp + 0x290], xmm2
mov dword [rbp + 0x428], 3
mov dword [rbp + 0x42c], 1
movaps xmm1, xmmword [rbp + 0x420]
movaps xmmword [rbp + 0x270], xmm1
mov dword [rbp + 0x454], 0x7f7fffff
movaps xmm0, xmmword [rbp + 0x450]
movaps xmmword [rbp + 0x2a0], xmm0
movsd xmm0, qword [rbp + 0x490]
mov dword [rbp + 0x460], 0x3f800000
mov word [rbp + 0x464], di
movaps xmm1, xmmword [rbp + 0x460]
movsd qword [rbp + 0x2e0], xmm0
movaps xmmword [rbp + 0x280], xmm2
movaps xmmword [rbp + 0x2b0], xmm1
movaps xmmword [rbp + 0x2c0], xmm2
movaps xmmword [rbp + 0x2d0], xmm2
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x268], 0x20fe0
mov dword [rbp + 0x274], 0x420c0000
mov qword [rbp + 0x298], rbx
call fcn.140037f30
mov rcx, qword [r12 + 0x58]
lea rdx, [rbp + 0x260]
xorps xmm2, xmm2
mov qword [rbp + 0x120], rax
movups xmmword [rbp + 0x420], xmm2
mov r14, rax
xor eax, eax
movups xmmword [rbp + 0x460], xmm2
mov qword [rbp + 0x490], rax
lea rax, [0x140124120]
movups xmmword [rbp + 0x410], xmm2
mov byte [rbp + 0x41c], 1
movaps xmm0, xmmword [rbp + 0x410]
movaps xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x450], xmm2
mov dword [rbp + 0x428], 3
movaps xmmword [rbp + 0x290], xmm2
mov dword [rbp + 0x42c], 1
movaps xmm1, xmmword [rbp + 0x420]
movaps xmmword [rbp + 0x270], xmm1
mov dword [rbp + 0x454], 0x7f7fffff
movaps xmm0, xmmword [rbp + 0x450]
movaps xmmword [rbp + 0x2a0], xmm0
movsd xmm0, qword [rbp + 0x490]
mov dword [rbp + 0x460], 0x3f800000
mov word [rbp + 0x464], di
movaps xmm1, xmmword [rbp + 0x460]
movsd qword [rbp + 0x2e0], xmm0
movaps xmmword [rbp + 0x280], xmm2
movaps xmmword [rbp + 0x2b0], xmm1
movaps xmmword [rbp + 0x2c0], xmm2
movaps xmmword [rbp + 0x2d0], xmm2
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x268], 0x178ec
mov dword [rbp + 0x274], 0x41b80000
mov qword [rbp + 0x298], rbx
call fcn.140037f30
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x420], xmm2
mov dword [rbp + 0x428], 3
movups xmmword [rbp + 0x410], xmm2
mov byte [rbp + 0x41c], 1
movaps xmm0, xmmword [rbp + 0x410]
movups xmmword [rbp + 0x460], xmm2
mov dword [rbp + 0x42c], 1
movaps xmm1, xmmword [rbp + 0x420]
movups xmmword [rbp + 0x450], xmm2
mov qword [rbp + 0x490], rax
movaps xmmword [rbp + 0x260], xmm0
movaps xmmword [rbp + 0x270], xmm1
mov dword [rbp + 0x454], 0x7f7fffff
mov dword [rbp + 0x460], 0x3f800000
mov word [rbp + 0x464], di
movaps xmm0, xmmword [rbp + 0x450]
lea rax, [0x14013ba10]
movaps xmm1, xmmword [rbp + 0x460]
lea rdx, [rbp + 0x260]
mov rcx, qword [r12 + 0x58]
movaps xmmword [rbp + 0x2a0], xmm0
movsd xmm0, qword [rbp + 0x490]
movaps xmmword [rbp + 0x290], xmm2
movsd qword [rbp + 0x2e0], xmm0
movaps xmmword [rbp + 0x280], xmm2
movaps xmmword [rbp + 0x2b0], xmm1
movaps xmmword [rbp + 0x2c0], xmm2
movaps xmmword [rbp + 0x2d0], xmm2
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x268], 0xb98
mov dword [rbp + 0x274], 0x41b00000
mov qword [rbp + 0x298], rbx
call fcn.140037f30
xor ecx, ecx
mov qword [0x140768b18], rax
call fcn.140033cf0
test dword [r12 + 8], 0x400
movdqa xmm1, xmmword [0x14010d190]
mov rax, qword [0x140768af0]
movups xmmword [rbp - 0x60], xmm1
je 0x140051041
movdqa xmm0, xmmword [0x14010d180]
mov dword [rax + 0x393c], 0x40400000
mov dword [rax + 0x3934], 0x41000000
mov dword [rax + 0x3938], 0x41000000
mov qword [rax + 0x3900], rsi
movups xmmword [rax + 0x39f4], xmm0
xorps xmm0, xmm0
movups xmmword [rax + 0x3a24], xmm0
movdqa xmm0, xmmword [0x14010d2f0]
movups xmmword [rax + 0x39d4], xmm0
movups xmmword [rax + 0x3a44], xmm1
mov rcx, r13
call fcn.14003db50
mov rbx, qword [0x140768af0]
mov rdi, qword [0x140768ea8]
test rbx, rbx
je 0x140051062
inc dword [rbx + 0xfc]
mov ecx, Ordinal_41
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140051091
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rsi
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x140051094
mov rax, rsi
or dword [rbx + 0xc], 0x1008
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x98], rcx
mov rcx, rdi
mov qword [rbx + 0xa8], rax
mov qword [rax], rdi
mov rax, qword [rdi]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [rbx + 8], 0x400
je 0x140051112
mov rax, qword [0x140768af0]
lea rcx, [fcn.14003d7f0]
mov qword [rax + 0x3890], rcx
lea rcx, [fcn.14003d8d0]
mov qword [rax + 0x3898], rcx
lea rcx, [0x14003d950]
mov qword [rax + 0x38a0], rcx
lea rcx, [0x14003d9c0]
mov qword [rax + 0x38a8], rcx
lea rcx, [0x14003db20]
mov qword [rax + 0x38b0], rcx
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x398]
mov ecx, 8
movss xmm9, dword [0x14010cbd4]
add eax, 0xfffffcf4
movd xmm6, eax
mov eax, dword [rbp + 0x39c]
add eax, 0xfffffdf8
cvtdq2ps xmm6, xmm6
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm6, xmm9
mulss xmm8, xmm9
movss dword [rbp - 0x7c], xmm6
movss dword [rbp - 0x78], xmm8
call fcn.1400e9780
lea rcx, [0x140050680]
mov r9, rax
lea r8, [0x140056240]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x228]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x220], rax
test rax, rax
je 0x140053cb8
cmp dword [rbp + 0x228], esi
je 0x140053cac
movaps xmm0, xmmword [rbp + 0x220]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053cac
movss xmm7, dword [0x14010cc98]
xorps xmm1, xmm1
movss xmm14, dword [0x14010cb8c]
xorps xmm0, xmm0
movss xmm13, dword [0x14010ccd8]
xorps xmm11, xmm11
movss xmm10, dword [0x14010ccc8]
movss xmm15, dword [0x14010cd64]
movdqa xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x3a0], xmm1
movups xmmword [rbp + 0x3b0], xmm1
movups xmmword [rbp + 0x3c0], xmm1
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x3a0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140051271
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140053a5f
mov rax, qword [0x140768af0]
test rax, rax
je 0x140051286
mov rcx, qword [rax + 0xa8]
jmp 0x140051289
mov rcx, rsi
cmp qword [rcx + 0x18], 0
jne 0x140051295
call fcn.14003d650
call fcn.14003ec50
call fcn.14000bf60
mov rax, qword [0x140768af0]
lea rdx, [0x14010a1d8]
xor ecx, ecx
or dword [rax + 0x48d8], 0x43
movss dword [rax + 0x48ec], xmm6
movss dword [rax + 0x48f0], xmm8
mov qword [rax + 0x48f4], 0
mov dword [rax + 0x48dc], 2
mov byte [rax + 0x4914], 1
mov dword [rax + 0x48fc], 0x44430000
mov dword [rax + 0x4900], 0x44020000
mov dword [rax + 0x48e0], 1
mov dword [rax + 0x4938], 0x3f800000
call qword [sym.imp.USER32.dll_FindWindowA]
mov ecx, 0x24
mov rbx, rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140051331
mov edx, 6
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14005089d
mov rax, qword [0x140768af0]
or dword [rax + 0x48d8], 2
cmp byte [0x140768b06], 0
mov dword [rax + 0x48fc], 0x44160000
mov dword [rax + 0x4900], 0x43c80000
mov dword [rax + 0x48e0], 1
jne 0x140051afa
mov r8d, Ordinal_301
lea rdx, [0x14013ba0d]
lea rcx, [0x14010a1d8]
call fcn.140012230
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400513a4
call fcn.14004e8a0
lea rdx, [0x14010a1d8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
xor ecx, ecx
mov dword [rsp + 0x20], reloc.WS2_32.dll_ntohs
mov r9d, 0x208
mov r8d, 0x30c
mov rbx, rax
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov r8d, 1
mov rcx, rbx
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x140768af0]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rcx + 0x3ff8]
movsd xmm0, qword [rax + 0x50]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movsd qword [rbp + 0x1c0], xmm0
mov rcx, qword [rax + 0x38]
mov rbx, qword [rax + 0x300]
call fcn.14000afa0
movss xmm0, dword [0x140768c48]
ucomiss xmm0, xmm11
jp 0x14005145b
jne 0x14005145b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140768c48], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x140768c48]
xorps xmm1, xmm1
mov rcx, qword [0x140768af0]
addss xmm0, xmm7
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005150a
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x140768c68]
je 0x1400514d0
movss xmm2, dword [0x14010cc00]
comiss xmm2, xmm1
jbe 0x1400514c2
movaps xmm0, xmm14
divss xmm0, dword [rcx + 0xe8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x140768c68], xmm1
comiss xmm1, xmm2
jb 0x140051500
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140051500
comiss xmm1, xmm11
jbe 0x1400514f3
movaps xmm0, xmm14
divss xmm0, dword [rcx + 0xe8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x140768c68], xmm1
comiss xmm11, xmm1
jb 0x140051500
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x140768c48], 0
cmp byte [0x140768b3c], 0
movss xmm1, dword [0x140768b34]
je 0x14005154d
comiss xmm12, xmm1
jbe 0x14005153e
movaps xmm0, xmm14
divss xmm0, dword [rcx + 0xe8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x140768b34], xmm1
comiss xmm1, xmm12
jb 0x14005157d
mov byte [0x140768b3c], 0
jmp 0x14005157d
comiss xmm1, xmm11
jbe 0x140051570
movaps xmm0, xmm14
divss xmm0, dword [rcx + 0xe8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x140768b34], xmm1
comiss xmm11, xmm1
jb 0x14005157d
mov byte [0x140768c3f], 0
mov rax, qword [rcx + 0x3ff8]
lea r9, [rbp - 0x38]
lea r8, [rbp - 0x30]
mov dword [rbp - 0x38], 0x3f800000
lea rdx, [rbp - 0x28]
mov dword [rbp - 0x34], 0x3f800000
mov qword [rbp - 0x30], 0
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
mov dword [rbp - 0x28], 0x43340000
mov dword [rbp - 0x24], 0x43340000
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x14010cce8]
addss xmm1, xmm10
movss dword [rax + 0x13c], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
movdqa xmm0, xmmword [0x14010d330]
movss dword [rax + 0x138], xmm1
lea rax, [rbp + 0x1c8]
mov rcx, qword [0x140768c60]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1a0]
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rsp + 0x20], rax
call fcn.140044290
mov rcx, r15
call fcn.140015aa0
mov rcx, qword [0x140768af0]
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x420c0000
mov dword [rbp - 0x1c], 0x420c0000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x14010cd34]
movss dword [rax + 0x138], xmm0
call fcn.1400020a0
test al, al
jne 0x14005089d
call fcn.140015b40
cmp byte [0x140768c3f], 0
mov rax, qword [0x140768af0]
mov rcx, qword [rax + 0x3ff8]
mov byte [rcx + 0xed], 1
je 0x1400517c0
movss xmm0, dword [0x140768b34]
lea r8, [0x140768e18]
cmp qword [0x140768e30], 0xf
lea rcx, [rbp + 0xe8]
movss dword [rbp + 0xf4], xmm0
cmova r8, qword [0x140768e18]
mov dword [rbp + 0xe8], 0x3f800000
mov dword [rbp + 0xec], 0x3f800000
mov dword [rbp + 0xf0], 0x3f800000
call fcn.140006d10
movss xmm1, dword [rbp + 0x1c4]
mov r9d, eax
movss xmm0, dword [rbp + 0x1c0]
addss xmm1, dword [0x14010cd1c]
addss xmm0, dword [0x14010cca8]
movss dword [rbp - 0x14], xmm1
movss dword [rbp - 0x18], xmm0
test eax, 0xff000000
je 0x1400517c0
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x140051760
add rcx, r8
cmp r8, rcx
je 0x1400517c0
mov rax, qword [rbx + 0x38]
mov rdx, rbx
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x1a0]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x18]
movups xmmword [rbp + 0x1a0], xmm0
call fcn.14003b1c0
call fcn.140018d80
mov rbx, qword [0x140768af0]
lea rdx, [rbp - 0x10]
mov ecx, reloc.WS2_32.dll_ntohl
mov dword [rbp], 0x43fa0000
mov dword [rbp + 4], 0x43fa0000
mov dword [rbp - 0x10], 0x41200000
mov rax, qword [rbx + 0x3ff8]
mov dword [rbp - 0xc], 0x40a00000
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x3ff8]
movss xmm1, dword [rax + 0x54]
movss xmm0, dword [rax + 0x50]
subss xmm1, dword [rax + 0xbc]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm1, dword [0x14010ccf4]
addss xmm0, dword [0x14010cd14]
movss dword [rax + 0x13c], xmm1
movss dword [rax + 0x138], xmm0
mov rax, qword [rbx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rbx + 0x3ff8]
call fcn.1400072c0
lea rdx, [rbp - 8]
mov dword [rbp - 8], 0x41200000
mov ecx, 2
mov dword [rbp - 4], 0x41700000
call fcn.1400072c0
movsxd r8, dword [rbx + 0x128]
lea rcx, [0x140107e00]
mov rax, qword [rbx + 0x130]
xor edx, edx
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400518be
lea r8, [0x140107e00]
mov edx, listen
mov ecx, eax
call fcn.14002b310
lea r8, [rbp]
mov edx, edi
call fcn.140002700
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 8]
mov qword [rsp + 0x30], rsi
lea rdi, [0x140768b40]
mov dword [rsp + 0x28], esi
lea rdx, str.Discord_ID
mov r8, rdi
mov qword [rsp + 0x20], rax
mov r9d, 0xff
mov dword [rbp + 8], 0x437a0000
lea rcx, str.Username
mov dword [rbp + 0xc], 0x42200000
call fcn.1400475d0
mov rcx, qword [0x140768af0]
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x10], 0x437a0000
mov dword [rbp + 0x14], 0x42100000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm10
movss dword [rax + 0x13c], xmm0
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x14010cc8c]
movss dword [rax + 0x138], xmm0
call fcn.140001550
test al, al
je 0x140051aeb
lea rcx, [0x140768d10]
call fcn.140057170
xorps xmm0, xmm0
mov qword [rbp + 0x1b0], rsi
mov r8d, 6
mov qword [rbp + 0x1b8], rsi
lea rdx, str.ffpriv
lea rcx, [rbp + 0x1a0]
movups xmmword [rbp + 0x1a0], xmm0
call fcn.1400559a0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e8]
call fcn.140054f60
xorps xmm0, xmm0
mov qword [rbp + 0x250], rsi
movups xmmword [rbp + 0x240], xmm0
mov rbx, rax
mov qword [rbp + 0x258], rsi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140051a20
mov rdx, rdi
lea rcx, [rbp + 0x240]
call fcn.1400559a0
mov r8, rbx
lea rdx, [rbp + 0x240]
lea rcx, [0x140768d10]
call fcn.1400579f0
cmp byte [0x140768e78], 0
je 0x140051ad1
lea rdx, [0x140768df8]
lea rcx, [rbp + 0x1e8]
call fcn.140054f60
cmp qword [rbp + 0x1b8], 0xf
lea rdx, [rbp + 0x1a0]
mov r8, qword [rbp + 0x1f8]
lea rcx, [rbp + 0x1e8]
cmova rdx, qword [rbp + 0x1a0]
cmp qword [rbp + 0x200], 0xf
cmova rcx, qword [rbp + 0x1e8]
cmp r8, qword [rbp + 0x1b0]
jne 0x140051ac3
test r8, r8
je 0x140051abc
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
je 0x140051ac3
mov byte [0x140768b06], 1
lea rcx, [rbp + 0x1e8]
call fcn.140055220
jmp 0x140051adf
mov byte [0x140768c3f], 1
mov byte [0x140768b3c], 1
lea rcx, [rbp + 0x1a0]
call fcn.140055220
call fcn.140002ab0
call fcn.140018eb0
call fcn.140015310
cmp byte [0x140768b05], 0
je 0x140051be3
xor ecx, ecx
cmp byte [0x140768c4f], cl
je 0x140051b77
mov qword [rbp + 0x140], rsi
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x140]
xor edx, edx
lea r9, [0x1400f0020]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400f0030]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140051bdd
mov rax, qword [rbp + 0x140]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x140]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x140]
jmp 0x140051bd7
mov qword [rbp + 0x148], rsi
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x148]
xor edx, edx
lea r9, [0x1400f0020]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400f0030]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140051bdd
mov rax, qword [rbp + 0x148]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x148]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x148]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x140768c4c], 0
je 0x140051c13
cmp byte [0x140768c52], 0
je 0x140051c02
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x140051c0a
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x140768b06], 0
je 0x140053834
mov rax, qword [0x140768af0]
lea rdx, [0x14013ba0d]
mov r8d, Ordinal_301
lea rcx, [0x14010a1d8]
or dword [rax + 0x48d8], 2
mov dword [rax + 0x48fc], 0x442a0000
mov dword [rax + 0x4900], 0x44020000
mov dword [rax + 0x48e0], 1
call fcn.140012230
mov r8d, recv
mov byte [0x140768c3f], 1
lea rdx, str.dns_cleaned
mov byte [0x140768b3c], 1
lea rcx, [0x1407672e0]
call fcn.140055280
mov rsi, qword [0x140768af0]
lea rcx, str.user32.dll
mov dword [rsi + 0x3900], 0
mov dword [rsi + 0x3904], 0x41200000
mov dword [rsi + 0x3944], 0x41200000
mov dword [rsi + 0x3948], 0x41200000
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140051d2c
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140051d23
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x1a0]
mov qword [rbp + 0x1d0], rcx
lea rdx, [rbp + 0x1c8]
mov rcx, r13
mov dword [rbp + 0x1c8], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1d8], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140051d3a
call fcn.14004e8a0
mov rcx, qword [0x140768af0]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movsd xmm0, qword [rax + 0x50]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movsd qword [rbp + 0x1c0], xmm0
mov rcx, qword [rax + 0x38]
mov rdi, qword [rax + 0x300]
call fcn.14000afa0
mov rcx, r15
mov r13, rax
call fcn.140015aa0
mov rdx, qword [0x140768af0]
movss xmm8, dword [0x14010cc84]
mov dword [rbp + 0x18], 0x420c0000
mov dword [rbp + 0x1c], 0x420c0000
mov rcx, qword [rdx + 0x3ff8]
mov byte [rcx + 0xed], 1
mov rcx, qword [rdx + 0x3ff8]
lea rdx, [rbp + 0x18]
movss xmm1, dword [rcx + 0x50]
movss xmm0, dword [rcx + 0x54]
subss xmm1, dword [rcx + 0xb8]
subss xmm0, dword [rcx + 0xbc]
mov byte [rcx + 0x179], 1
addss xmm1, xmm8
addss xmm0, dword [0x14010cd20]
movss dword [rcx + 0x138], xmm1
movss dword [rcx + 0x13c], xmm0
call fcn.1400020a0
test al, al
jne 0x14005089d
call fcn.140015b40
movss xmm0, dword [0x140768c48]
ucomiss xmm0, xmm11
jp 0x140051e47
jne 0x140051e47
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140768c48], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x140768c48]
xorps xmm1, xmm1
mov r8, qword [0x140768af0]
addss xmm0, xmm7
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
movss xmm1, dword [0x140768c68]
jbe 0x140051ef4
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140051eb9
movss xmm2, dword [0x14010cc00]
comiss xmm2, xmm1
jbe 0x140051eab
movaps xmm0, xmm14
divss xmm0, dword [r8 + 0xe8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x140768c68], xmm1
comiss xmm1, xmm2
jb 0x140051eea
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140051eea
comiss xmm1, xmm11
jbe 0x140051edd
movaps xmm0, xmm14
divss xmm0, dword [r8 + 0xe8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x140768c68], xmm1
comiss xmm11, xmm1
jb 0x140051eea
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x140768c48], 0
lea rcx, [rbp + 0xf8]
movss dword [rbp + 0x104], xmm1
mov dword [rbp + 0xf8], 0x3ec7ae14
mov dword [rbp + 0xfc], 0x3eb33333
mov dword [rbp + 0x100], 0x3f800000
call fcn.140006d10
mov rcx, qword [r8 + 0x3ff8]
lea rdx, [rbp + 0x20]
movss xmm3, dword [0x14010cd54]
xor r15d, r15d
movss xmm2, dword [r8 + 0x3d58]
mov ebx, eax
mov qword [rsp + 0x38], r15
lea rax, str.NYACHE_CLIENT
movss xmm6, dword [rcx + 0x58]
mov rcx, qword [r8 + 0x3d50]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm15
call fcn.14003adb0
movss xmm0, dword [rbp + 0x20]
mov rcx, r14
movss xmm10, dword [rbp + 0x1c4]
addss xmm0, dword [0x14010cc14]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x20], xmm1
subss xmm6, xmm1
movaps xmm1, xmm10
addss xmm1, xmm7
mulss xmm6, xmm9
movss xmm9, dword [rbp + 0x1c0]
movss dword [rbp + 0x2c], xmm1
movaps xmm0, xmm9
addss xmm0, xmm6
movss dword [rbp + 0x28], xmm0
test ebx, 0xff000000
je 0x140052031
test r14, r14
jne 0x140051fdf
mov rax, qword [r13 + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [r13 + 0x88]
mov byte [rsp + 0x48], r15b
lea rax, [0x14010a245]
movss dword [rsp + 0x40], xmm11
lea r9, [rbp + 0x28]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm7
lea rax, str.NYACHE_CLIENT
mov rdx, r13
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
movups xmmword [rbp + 0x1a0], xmm0
call fcn.14003b1c0
movups xmm7, xmmword [rbp - 0x60]
lea rcx, [rbp + 0x1a0]
movups xmmword [rbp + 0x1a0], xmm7
call fcn.140006d10
movaps xmm0, xmm9
mov dword [rsp + 0x28], Ordinal_50
addss xmm0, dword [0x14010cd38]
movaps xmm6, xmm10
movss dword [rsp + 0x20], xmm8
addss xmm6, dword [0x14010ccc0]
movaps xmm1, xmm10
lea r8, [rbp + 0x30]
addss xmm1, xmm11
mov r9d, eax
movss dword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x38]
movaps xmm0, xmm9
mov rcx, rdi
addss xmm0, xmm11
movss dword [rbp + 0x34], xmm6
movss dword [rbp + 0x3c], xmm1
movss dword [rbp + 0x38], xmm0
call fcn.1400370a0
lea rcx, [rbp + 0x1a0]
movups xmmword [rbp + 0x1a0], xmm7
call fcn.140006d10
movaps xmm1, xmm10
movss dword [rbp + 0x4c], xmm6
addss xmm1, dword [0x14010cd28]
movaps xmm0, xmm9
movss dword [rsp + 0x20], xmm12
addss xmm0, dword [0x14010ccf8]
mov r9d, eax
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x48]
mov rcx, r13
movss dword [rbp + 0x44], xmm1
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x48], xmm0
call fcn.140036e30
lea rdx, [rbp + 0x50]
mov dword [rbp + 0x50], 0x40e00000
mov ecx, reloc.WS2_32.dll_ntohl
mov dword [rbp + 0x54], 0x40e00000
call fcn.1400072c0
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm1, dword [rax + 0x54]
movss xmm0, dword [rax + 0x50]
subss xmm1, dword [rax + 0xbc]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm1, dword [0x14010ccd0]
addss xmm0, dword [0x14010cc74]
movss dword [rax + 0x13c], xmm1
movss dword [rax + 0x138], xmm0
call fcn.140018d80
cmp dword [0x140768b28], 1
lea r9, [rbp + 0x58]
lea r8, [0x14010a248]
mov dword [rbp + 0x58], 0x431d0000
sete cl
mov dword [rbp + 0x5c], 0x420c0000
lea rdx, [0x140106a0c]
call fcn.140002da0
test al, al
je 0x1400521bf
mov eax, 1
mov dword [0x140768b28], eax
jmp 0x1400521c5
mov eax, dword [0x140768b28]
cmp eax, 2
mov dword [rbp + 0x60], 0x431d0000
lea r9, [rbp + 0x60]
mov dword [rbp + 0x64], 0x420c0000
sete cl
lea r8, str.Visuals
lea rdx, [0x140106a14]
call fcn.140002da0
test al, al
je 0x140052201
mov eax, 2
mov dword [0x140768b28], eax
jmp 0x140052207
mov eax, dword [0x140768b28]
cmp eax, 3
mov dword [rbp + 0x68], 0x431d0000
lea r9, [rbp + 0x68]
mov dword [rbp + 0x6c], 0x420c0000
sete cl
lea r8, str.Weapon
lea rdx, [0x140106a1c]
call fcn.140002da0
test al, al
je 0x140052243
mov eax, 3
mov dword [0x140768b28], eax
jmp 0x140052249
mov eax, dword [0x140768b28]
cmp eax, 4
mov dword [rbp + 0x70], 0x431d0000
lea r9, [rbp + 0x70]
mov dword [rbp + 0x74], 0x420c0000
sete cl
lea r8, str.Misc
lea rdx, [0x140106a20]
call fcn.140002da0
test al, al
je 0x140052285
mov eax, 4
mov dword [0x140768b28], eax
jmp 0x14005228b
mov eax, dword [0x140768b28]
cmp eax, 5
mov dword [rbp + 0x78], 0x431d0000
lea r9, [rbp + 0x78]
mov dword [rbp + 0x7c], 0x420c0000
sete cl
lea r8, str.Settings
lea rdx, [0x140106a18]
call fcn.140002da0
test al, al
je 0x1400522c4
mov dword [0x140768b28], 5
call fcn.140018eb0
mov ecx, 1
call fcn.140007350
mov eax, dword [0x140768b24]
mov edi, dword [0x140768b28]
cmp edi, eax
jne 0x1400522e9
movaps xmm1, xmm12
jmp 0x1400522ed
movaps xmm1, xmm15
mov rbx, qword [0x140768af0]
movss xmm8, dword [rbx + 0x18]
movaps xmm0, xmm8
mulss xmm0, dword [0x14010cc68]
mulss xmm0, xmm1
addss xmm0, dword [0x140768c40]
comiss xmm11, xmm0
jbe 0x14005231e
movaps xmm6, xmm11
jmp 0x140052326
movaps xmm6, xmm12
minss xmm6, xmm0
movss dword [0x140768c40], xmm6
cmp edi, eax
jne 0x140052338
movaps xmm7, xmm12
jmp 0x14005233c
movaps xmm7, xmm15
movss xmm0, dword [0x14010cd18]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x140768c44]
comiss xmm11, xmm0
jbe 0x140052366
movaps xmm1, xmm11
jmp 0x14005236e
movaps xmm1, xmm12
minss xmm1, xmm0
ucomiss xmm6, xmm11
movss dword [0x140768c44], xmm1
jp 0x14005238c
jne 0x14005238c
ucomiss xmm1, xmm11
jp 0x14005238c
jne 0x14005238c
mov dword [0x140768b24], edi
mov rax, qword [rbx + 0x3ff8]
lea rcx, [rbx + 0x4978]
movss xmm7, dword [0x14010ccd4]
lea rdx, [rbp + 0x130]
movss xmm8, dword [0x14010cd04]
mov dword [rbp + 0x130], r15d
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x3ff8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm8
addss xmm1, xmm7
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
movss xmm0, dword [rbx + 0x38f8]
mulss xmm6, dword [rsi + 0x38f8]
movss dword [rbp + 0x134], xmm0
call fcn.14002be40
movabs rcx, 0x7fffffffffffffff
movss dword [rbx + 0x38f8], xmm6
mov r15, qword [0x1407672f0]
mov rax, rcx
sub rax, r15
cmp rax, 7
jb 0x140053d24
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea r14, [0x1407672e0]
lea rsi, [r15 + 7]
mov edi, reloc.WS2_32.dll_ntohs
cmova r14, qword [0x1407672e0]
lea rbx, [rbp + 0x240]
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
cmp rsi, rdi
jbe 0x1400524fa
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x14005249c
movabs rax, 0x8000000000000000
mov rdi, rcx
add rax, 0x27
jmp 0x1400524cc
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400524b6
xor ebx, ebx
jmp 0x1400524f3
cmp rcx, 0x1000
jb 0x1400524eb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140053d2a
mov rcx, rax
call fcn.1400e9780
test rax, rax
je 0x140053a6e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400524f3
call fcn.1400e9780
mov rbx, rax
mov qword [rbp + 0x240], rbx
mov rcx, qword [str.Status:]
mov r8, r15
mov qword [rbp + 0x250], rsi
mov rdx, r14
mov qword [rbp + 0x258], rdi
mov dword [rbx], ecx
movzx ecx, word [0x14010a264]
mov word [rbx + 4], cx
lea rcx, [rbx + 7]
movzx eax, byte [0x14010a266]
mov byte [rbx + 6], al
call sub.VCRUNTIME140.dll_memcpy
cmp byte [0x140768b3c], 0
movss xmm1, dword [0x140768b34]
mov byte [rsi + rbx], 0
je 0x140052659
comiss xmm12, xmm1
jbe 0x140052578
mov rax, qword [0x140768af0]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xe8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x140768b34], xmm1
comiss xmm1, xmm12
jb 0x140052585
mov byte [0x140768b3c], 0
cmp byte [0x140768c3f], 0
je 0x14005269b
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea r8, [0x1407672e0]
lea rcx, [rbp + 0x108]
movss dword [rbp + 0x114], xmm1
cmova r8, qword [0x1407672e0]
mov dword [rbp + 0x108], 0x3e4ccccd
mov dword [rbp + 0x10c], 0x3f800000
mov dword [rbp + 0x110], 0x3e4ccccd
call fcn.140006d10
addss xmm9, xmm8
mov r9d, eax
addss xmm10, dword [0x14010cd24]
movss dword [rbp + 0x80], xmm9
movss dword [rbp + 0x84], xmm10
test eax, 0xff000000
je 0x14005276a
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], 0
jne 0x140052610
add rcx, r8
cmp r8, rcx
je 0x14005276a
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x1a0]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x80]
jmp 0x140052746
comiss xmm1, xmm11
jbe 0x14005268a
mov rax, qword [0x140768af0]
movss xmm0, dword [0x14010cb88]
divss xmm0, dword [rax + 0xe8]
mulss xmm0, dword [0x14010ccbc]
subss xmm1, xmm0
movss dword [0x140768b34], xmm1
comiss xmm11, xmm1
jb 0x140052585
mov byte [0x140768c3f], 0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea r8, [0x1407672e0]
lea rcx, [rbp - 0x70]
movss dword [rbp - 0x64], xmm1
cmova r8, qword [0x1407672e0]
mov dword [rbp - 0x70], 0x3f800000
mov dword [rbp - 0x6c], 0x3e4ccccd
mov dword [rbp - 0x68], 0x3e4ccccd
call fcn.140006d10
addss xmm9, xmm8
mov r9d, eax
addss xmm10, dword [0x14010cd24]
movss dword [rbp + 0x88], xmm9
movss dword [rbp + 0x8c], xmm10
test eax, 0xff000000
je 0x14005276a
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], 0
jne 0x140052706
add rcx, r8
cmp r8, rcx
je 0x14005276a
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x1a0]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x88]
mov rax, qword [r13 + 0x38]
mov rdx, r13
movups xmm0, xmmword [r13 + 0x88]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
movups xmmword [rbp + 0x1a0], xmm0
call fcn.14003b1c0
mov eax, dword [0x140768b24]
cmp eax, 1
jne 0x140052867
call fcn.140018d80
mov rcx, qword [0x140768af0]
xor edx, edx
mov dword [rbp + 0x90], 0x43f00000
mov dword [rbp + 0x94], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Aims
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400527ef
lea r8, str.Aims
mov edx, listen
mov ecx, eax
call fcn.14002b310
xor esi, esi
lea r8, [rbp + 0x90]
mov edx, edi
mov dword [rsp + 0x20], esi
lea rcx, str.Aims
call fcn.14000ef90
lea rdx, [0x140768c50]
lea rcx, str.Aimbot_New
call fcn.140003670
lea rdx, [0x140768c56]
mov byte [0x140768b30], al
lea rcx, str.Aimbot___Legit
call fcn.140003670
lea rdx, [0x140768c55]
mov byte [0x140768c5c], al
lea rcx, str.Aimbot___Scope
call fcn.140003670
mov byte [0x140768c5b], al
call fcn.14000f190
call fcn.140018eb0
mov eax, dword [0x140768b24]
jmp 0x140052869
xor esi, esi
cmp eax, 2
jne 0x140052ab5
call fcn.140018d80
mov rcx, qword [0x140768af0]
xor edx, edx
mov dword [rbp + 0x98], 0x43f00000
mov dword [rbp + 0x9c], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Visuals
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400528e8
lea r8, str.Visuals
mov edx, listen
mov ecx, eax
call fcn.14002b310
lea r8, [rbp + 0x98]
mov dword [rsp + 0x20], esi
mov edx, edi
lea rcx, str.Visuals
call fcn.14000ef90
mov rcx, qword [0x140768af0]
lea rdx, [rbp + 0xa0]
movss xmm6, dword [0x14010cc40]
mov dword [rbp + 0xa0], 0x43e90000
mov dword [rbp + 0xa4], 0x42200000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm12
movss dword [rax + 0x13c], xmm0
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Load_Chams
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
call fcn.140001b00
test al, al
je 0x140052a4d
mov ecx, 1
call fcn.1400e9780
lea rcx, [rbp + 0x218]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140056270]
xor ecx, ecx
mov dword [rsp + 0x20], esi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x210], rax
test rax, rax
je 0x140053a88
cmp dword [rbp + 0x218], 0
je 0x140053a7c
movaps xmm0, xmmword [rbp + 0x210]
lea rcx, [rbp + 0x1a0]
movdqa xmmword [rbp + 0x1a0], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053a7c
xorps xmm0, xmm0
lea r8, str.start
mov r9d, 0x40
movdqa xmmword [rbp + 0x210], xmm0
lea rdx, str.Chams_Loaded
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [rbp + 0x218], 0
jne 0x140053a75
mov rcx, qword [0x140768af0]
lea rdx, [0x140768c51]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Enabled
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm13
movss dword [rax + 0x13c], xmm0
call fcn.140003670
mov byte [0x140768b38], al
call fcn.14000f190
call fcn.140018eb0
mov eax, dword [0x140768b24]
jmp 0x140052abd
movss xmm6, dword [0x14010cc40]
cmp eax, 3
jne 0x140052b97
call fcn.140018d80
mov rcx, qword [0x140768af0]
xor edx, edx
mov dword [rbp + 0xa8], 0x43f00000
mov dword [rbp + 0xac], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Weapons
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140052b3c
lea r8, str.Weapons
mov edx, listen
mov ecx, eax
call fcn.14002b310
lea r8, [rbp + 0xa8]
mov dword [rsp + 0x20], esi
mov edx, edi
lea rcx, str.Weapons
call fcn.14000ef90
lea rdx, [0x140768c4e]
lea rcx, str.No_Recoil
call fcn.140003670
lea rdx, [0x140768c53]
mov byte [0x140768b04], al
lea rcx, str.Precision
call fcn.140003670
mov byte [0x140768c59], al
call fcn.14000f190
call fcn.140018eb0
mov eax, dword [0x140768b24]
cmp eax, 4
jne 0x140052eab
call fcn.140018d80
mov rcx, qword [0x140768af0]
xor edx, edx
mov dword [rbp + 0xb0], 0x43f00000
mov dword [rbp + 0xb4], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Misc
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140052c16
lea r8, str.Misc
mov edx, listen
mov ecx, eax
call fcn.14002b310
lea r8, [rbp + 0xb0]
mov dword [rsp + 0x20], esi
mov edx, edi
lea rcx, str.Misc
call fcn.14000ef90
mov rcx, qword [0x140768af0]
lea rdx, [rbp + 0xb8]
mov dword [rbp + 0xb8], 0x43e90000
mov dword [rbp + 0xbc], 0x42200000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm12
movss dword [rax + 0x13c], xmm0
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Enable_Ant_Crash
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
call fcn.140001b00
test al, al
je 0x140052cda
cmp byte [0x140768b22], 0
sete byte [0x140768b22]
mov rcx, qword [0x140768af0]
lea rdx, [0x140768c54]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Anti_Ban
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm7
movss dword [rax + 0x13c], xmm0
call fcn.140003670
mov rcx, qword [0x140768af0]
lea rdx, [rbp + 0xc0]
movss xmm10, dword [0x14010cc38]
mov byte [0x140768c5a], al
mov dword [rbp + 0xc0], 0x43e90000
mov rax, qword [rcx + 0x3ff8]
mov dword [rbp + 0xc4], 0x42200000
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm10
movss dword [rax + 0x138], xmm0
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Enable_Net
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x14010cce4]
movss dword [rax + 0x13c], xmm0
call fcn.140001b00
test al, al
je 0x140052e99
cmp byte [0x140768b3f], 0
je 0x140052e16
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
jmp 0x140052e85
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x140768b3f], 0
sete byte [0x140768b3f]
call fcn.14000f190
call fcn.140018eb0
mov eax, dword [0x140768b24]
jmp 0x140052eb4
movss xmm10, dword [0x14010cc38]
cmp eax, 5
jne 0x140053658
call fcn.140018d80
mov rcx, qword [0x140768af0]
xor edx, edx
mov dword [rbp + 0xc8], 0x440e0000
mov dword [rbp + 0xcc], 0x42c80000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Login_Information
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140052f33
lea r8, str.Login_Information
mov edx, listen
mov ecx, eax
call fcn.14002b310
lea r8, [rbp + 0xc8]
mov dword [rsp + 0x20], esi
mov edx, edi
lea rcx, str.Login_Information
call fcn.14000ef90
xorps xmm0, xmm0
mov qword [rbp + 0x1f8], rsi
mov r8d, 8
mov qword [rbp + 0x200], rsi
lea rdx, str.Expiry:
lea rcx, [rbp + 0x1e8]
movups xmmword [rbp + 0x1e8], xmm0
call fcn.1400559a0
xorps xmm0, xmm0
lea rcx, [rbp + 0x260]
xor eax, eax
xor edx, edx
mov r8d, 0xf8
mov dword [rbp + 0x3f0], eax
movups xmmword [rbp + 0x3d0], xmm0
movups xmmword [rbp + 0x3e0], xmm0
call sub.VCRUNTIME140.dll_memset
lea rax, [0x14010a548]
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x2f8]
lea rax, [0x14010a460]
mov qword [rbp + 0x270], rax
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
or dword [rbp - 0x80], 1
lea rdx, [rbp + 0x278]
xor r8d, r8d
lea rcx, [rbp + 0x260]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp + 0x260]
lea r13, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x260], r13
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x25c], edx
lea rcx, [rbp + 0x278]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
cmp qword [0x140768db0], 0xf
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov r8, qword [0x140768da8]
lea rdx, [0x140768d98]
cmova rdx, qword [0x140768d98]
lea rcx, [rbp + 0x278]
xor r9d, r9d
mov qword [rbp + 0x278], rax
call fcn.140055460
lea rax, [rbp + 0x3d0]
mov qword [rbp + 0x1a0], rax
lea rax, str._Y__m__dT_H:_M:_S
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x1b0], rax
nop dword [rax + rax]
inc rax
cmp byte [rax], 0
jne 0x140053090
lea rdx, [rbp + 0x1a0]
mov qword [rbp + 0x1b0], rax
lea rcx, [rbp + 0x260]
call fcn.140055700
lea r9, [rbp + 0x3d0]
mov edx, 0x50
lea r8, str._d__m__Y
lea rcx, [rbp + 0x410]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rax, [rbp + 0x410]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400530e0
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x1e8]
call fcn.1400553e0
mov r14, qword [0x140768d88]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 6
jb 0x140053d36
cmp qword [0x140768d90], 0xf
lea r15, [0x140768d78]
mov qword [rbp + 0x1d8], rsi
lea rbx, [rbp + 0x1c8]
cmova r15, qword [0x140768d78]
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1e0], rsi
xorps xmm0, xmm0
lea rsi, [r14 + 6]
movups xmmword [rbp + 0x1c8], xmm0
cmp rsi, rdi
jbe 0x1400531df
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x140053181
movabs rax, 0x8000000000000000
mov rdi, rcx
add rax, 0x27
jmp 0x1400531b1
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14005319b
xor ebx, ebx
jmp 0x1400531d8
cmp rcx, 0x1000
jb 0x1400531d0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140053d30
mov rcx, rax
call fcn.1400e9780
test rax, rax
je 0x140053a9a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400531d8
call fcn.1400e9780
mov rbx, rax
mov qword [rbp + 0x1c8], rbx
mov ecx, dword [str.HWID:]
mov r8, r14
mov qword [rbp + 0x1d8], rsi
mov rdx, r15
mov qword [rbp + 0x1e0], rdi
mov dword [rbx], ecx
movzx ecx, word [0x14010a378]
mov word [rbx + 4], cx
lea rcx, [rbx + 6]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [0x140768af0]
movss xmm6, dword [0x14010ccb0]
mov byte [rbx + rsi], 0
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, [rbp + 0x1e8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
cmp qword [rbp + 0x200], 0xf
cmova rcx, qword [rbp + 0x1e8]
call fcn.1400426b0
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, [rbp + 0x1c8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
cmp qword [rbp + 0x1e0], 0xf
cmova rcx, qword [rbp + 0x1c8]
call fcn.1400426b0
lea rcx, [rbp + 0x1c8]
call fcn.140055220
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x260], r13
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x25c], edx
lea rcx, [rbp + 0x278]
call fcn.140054c60
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1e8]
call fcn.140055220
call fcn.14000f190
mov rcx, qword [0x140768af0]
xor edx, edx
mov dword [rbp + 0xd0], 0x43f00000
mov dword [rbp + 0xd4], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Settings
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140006780
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400533aa
lea r8, str.Settings
mov edx, listen
mov ecx, eax
call fcn.14002b310
xor esi, esi
lea r8, [rbp + 0xd0]
mov edx, edi
mov dword [rsp + 0x20], esi
lea rcx, str.Settings
call fcn.14000ef90
lea rdx, [0x140768c52]
lea rcx, str.Stream_Mode
call fcn.140003670
lea rdx, [0x140768c4f]
mov byte [0x140768c4c], al
lea rcx, str.Hide_Taskbar
call fcn.140003670
mov rcx, qword [0x140768af0]
mov byte [0x140768b05], al
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
cmp byte [rax + 0xf0], sil
jne 0x14005343a
movaps xmm1, xmm15
mov qword [rbp + 0xd8], rsi
lea rcx, [rbp + 0xd8]
call fcn.140018890
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
lea rdx, [rbp + 0xe0]
mov dword [rbp + 0xe0], 0x43e90000
mov dword [rbp + 0xe4], 0x42200000
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Load_Bypass
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm10
movss dword [rax + 0x138], xmm0
call fcn.140001b00
test al, al
jne 0x14005089d
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
cmp byte [rax + 0xf0], sil
jne 0x1400534dc
movaps xmm1, xmm15
mov qword [rbp - 0x40], rsi
lea rcx, [rbp - 0x40]
call fcn.140018890
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
lea rdx, [0x14013ba0c]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Particles
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x14010ccfc]
movss dword [rax + 0x13c], xmm0
call fcn.140003670
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Minimize_Process:
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
call fcn.1400426b0
movaps xmm1, xmm15
movaps xmm0, xmm11
call fcn.140018bb0
movdqa xmm7, xmmword [0x14010d320]
lea rcx, [rbp + 0x1a0]
lea rdx, str.HOME
movups xmmword [rbp + 0x1a0], xmm7
call fcn.1400427f0
mov rcx, qword [0x140768af0]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Close_Process:
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
call fcn.1400426b0
movaps xmm1, xmm15
movaps xmm0, xmm11
call fcn.140018bb0
mov rdx, qword [0x140768af0]
lea rcx, [rbp + 0x1a0]
movups xmmword [rbp + 0x1a0], xmm7
mov rax, qword [rdx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rdx + 0x3ff8]
lea rdx, [0x14010a3f0]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x14010cd00]
movss dword [rax + 0x138], xmm0
call fcn.1400427f0
call fcn.14000f190
call fcn.140018eb0
mov ecx, 1
call fcn.140007350
cmp byte [0x140768c5a], 0
jne 0x140053773
cmp byte [0x140768b04], 0
jne 0x140053773
cmp byte [0x140768b30], 0
jne 0x140053773
cmp byte [0x140768b31], 0
jne 0x140053773
cmp byte [0x140768c5c], 0
jne 0x140053773
cmp byte [0x140768c5b], 0
jne 0x140053773
cmp byte [0x140768b02], 0
jne 0x140053773
cmp byte [0x140768b23], 0
jne 0x140053773
cmp byte [0x140768b21], 0
jne 0x140053773
cmp byte [0x140768b03], 0
jne 0x140053773
cmp byte [0x140768b3e], 0
jne 0x140053773
cmp byte [0x140768b20], 0
jne 0x140053773
cmp byte [0x140768b3b], 0
jne 0x140053773
cmp byte [0x140768c58], 0
jne 0x140053773
cmp byte [0x140768c59], 0
jne 0x140053773
cmp byte [0x140768b07], 0
jne 0x140053773
cmp byte [0x140768b3a], 0
jne 0x140053773
cmp byte [0x140768b3d], 0
jne 0x140053773
cmp byte [0x140768b33], 0
jne 0x140053773
cmp byte [0x140768b01], 0
jne 0x140053773
cmp byte [0x140768b39], 0
jne 0x140053773
cmp byte [0x140768b38], 0
jne 0x140053773
cmp byte [0x140768b32], 0
jne 0x140053773
cmp byte [0x140768c4d], 0
jne 0x140053773
cmp byte [0x140768c57], 0
je 0x1400537f7
mov ecx, 8
call fcn.1400e9780
lea rcx, [0x140054140]
mov r9, rax
lea r8, [0x140056240]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x238]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x230], rax
test rax, rax
je 0x140053aad
cmp dword [rbp + 0x238], 0
je 0x140053aa1
movaps xmm0, xmmword [rbp + 0x230]
lea rcx, [rbp + 0x1a0]
movdqa xmmword [rbp + 0x1a0], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053aa1
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x230], xmm0
lea rcx, [rbp + 0x240]
call fcn.140055220
call fcn.140015310
movss xmm7, dword [0x14010cc98]
movss xmm6, dword [rbp - 0x7c]
movss xmm8, dword [rbp - 0x78]
movss xmm9, dword [0x14010cbd4]
movss xmm10, dword [0x14010ccc8]
mov r13, qword [rbp + 0x118]
mov rcx, qword [0x140768c70]
lea rdx, str.DnsFlushResolverCache
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14005387a
call rax
test eax, eax
je 0x14005387a
mov r8d, recv
mov byte [0x140768c3f], 1
lea rdx, str.dns_cleaned
mov byte [0x140768b3c], 1
lea rcx, [0x1407672e0]
call fcn.140055280
mov rcx, qword [0x140768c70]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.14000e0a0
mov rcx, qword [0x140768ea8]
mov r9d, 3
mov dword [rsp + 0x30], esi
xor r8d, r8d
movss dword [rsp + 0x28], xmm12
xor edx, edx
mov dword [rsp + 0x20], 0xffffffff
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x140768ea8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140053909
call fcn.14000e610
mov rax, qword [0x140768af0]
mov rcx, qword [rax + 0x49f8]
mov rax, qword [rcx]
mov rcx, rsi
add rax, 0xa8
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14003ce40
mov rcx, qword [0x140768ea8]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r12 + 8], 0x400
je 0x1400539ec
call fcn.140021af0
mov rbx, qword [0x140768af0]
mov r14d, 1
mov eax, dword [rbx + 0x38c8]
cmp eax, r14d
jle 0x14005398e
mov esi, 8
nop word [rax + rax]
mov rax, qword [rbx + 0x38d0]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x14005397a
mov rax, qword [rbx + 0x3868]
test rax, rax
je 0x140053967
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38a8]
test rax, rax
je 0x14005397a
xor edx, edx
mov rcx, rdi
call rax
mov eax, dword [rbx + 0x38c8]
inc r14d
add rsi, 8
cmp r14d, eax
jl 0x140053940
xor esi, esi
mov r14d, 1
cmp eax, r14d
jle 0x1400539ec
mov esi, 8
nop
mov rax, qword [rbx + 0x38d0]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x1400539da
mov rax, qword [rbx + 0x3870]
test rax, rax
je 0x1400539c7
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38b0]
test rax, rax
je 0x1400539da
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x38c8]
jl 0x1400539a0
xor esi, esi
mov rcx, qword [0x140768ea8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140053a48
mov rcx, qword [0x140768ea8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140053a48
mov rbx, qword [0x140768ea8]
call fcn.14003d700
mov rax, qword [rbx]
lea rdx, [0x140768eb0]
mov rcx, rbx
call qword [rax + 0x80]
call fcn.14003d650
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140053abf
mov r14, qword [rbp + 0x120]
mov r15, qword [rbp + 0x128]
cmp dword [rbp + 0x3a8], 0x12
jne 0x140051231
jmp 0x140053ac9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x218], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x238], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x3a8], reloc.WS2_32.dll_select
mov rbx, qword [0x140768af0]
test rbx, rbx
je 0x140053ade
mov rdi, qword [rbx + 0xa8]
jmp 0x140053ae1
mov rdi, rsi
call fcn.1400220f0
call fcn.14003d700
mov rcx, qword [rdi]
test rcx, rcx
je 0x140053af9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140768af0]
mov qword [rbx + 0x98], rsi
mov qword [rbx + 0xa8], rsi
test rax, rax
je 0x140053b19
dec dword [rax + 0xfc]
mov rdx, qword [0x140768af8]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x140768af0]
test rbx, rbx
je 0x140053b3d
mov rdi, qword [rbx + 0xa0]
jmp 0x140053b40
mov rdi, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.1400220f0
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140053b6c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140768af0]
mov qword [rbx + 0x90], rsi
mov qword [rbx + 0xa0], rsi
test rax, rax
je 0x140053b8c
dec dword [rax + 0xfc]
mov rdx, qword [0x140768af8]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x140768af0]
mov qword [0x140768af0], rbx
call fcn.1400097e0
mov qword [0x140768af0], rsi
test rbx, rbx
je 0x140053be3
mov rcx, rbx
call fcn.14002ccb0
mov rax, qword [0x140768af0]
test rax, rax
je 0x140053bd4
dec dword [rax + 0xfc]
mov rdx, qword [0x140768af8]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rcx, qword [0x140768ea8]
test rcx, rcx
je 0x140053bfc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140768ea8], rsi
mov rcx, qword [0x140768ea0]
test rcx, rcx
je 0x140053c15
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140768ea0], rsi
mov rcx, r13
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x190]
call qword [sym.imp.USER32.dll_UnregisterClassA]
cmp dword [rbp + 0x228], 0
je 0x140053c42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor eax, eax
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.1400e9640
lea r11, [rsp + 0x650]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x228], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rcx, qword [0x140768ea0]
mov rdx, qword [0x140768ea8]
test rdx, rdx
je 0x140053cf4
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140768ea0]
mov qword [0x140768ea8], rsi
test rcx, rcx
je 0x140053d06
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140768ea0], rsi
mov rdx, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x190]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x140053c44
call fcn.14004e850
int3
call fcn.140001490
int3
call fcn.140001490
int3
call fcn.14004e850
int3