Function at 0x1400684a0
Capabilities:
Create process on windows
Create thread
Log keystrokes via polling
Self delete

Disassembly:
push rbp
push rbx
push rdi
push r15
lea rbp, [rsp - 0x3f8]
sub rsp, 0x4f8
mov rax, qword [0x140103540]
xor rax, rsp
mov qword [rbp + 0x340], rax
lea rcx, [0x1400cf020]
call fcn.14000a470
call fcn.14006b2e0
call fcn.14006d540
xor edi, edi
lea r8, [0x140067d10]
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rax, [0x1400683e0]
mov dword [rbp + 0x200], 0x50
xor ecx, ecx
mov qword [rbp + 0x208], rax
mov dword [rbp + 0x204], 0x40
mov qword [rbp + 0x210], rdi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x248], rdi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x220], xmm0
lea rbx, str.__________reported__T____
movdqa xmmword [rbp + 0x230], xmm1
lea rcx, [rbp + 0x200]
mov qword [rbp + 0x218], rax
mov qword [rbp + 0x240], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x218]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x240]
mov r8, rbx
mov qword [rsp + 0x58], rdi
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea ecx, [rdi + 0x20]
mov qword [0x1401049b0], rax
mov rbx, rax
call sub.d3d9.dll_Direct3DCreate9
mov qword [0x140104a00], rax
mov rcx, rax
lea r15d, [rdi + 1]
test rax, rax
je 0x14006a11f
lea rdx, [0x1401049b8]
mov qword [0x1401049c0], rdi
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x1401049c0]
mov qword [0x1401049cc], rdi
mov qword [rsp + 0x28], rdx
mov r8d, r15d
mov dword [0x1401049d4], edi
xor edx, edx
mov qword [0x1401049dc], rdi
mov dword [0x1401049e4], edi
mov qword [0x1401049f4], rdi
mov dword [0x1401049e8], r15d
mov dword [0x1401049d8], r15d
mov dword [0x1401049c8], edi
mov dword [0x1401049ec], r15d
mov dword [0x1401049f0], 0x50
mov dword [0x1401049fc], r15d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x14006a118
mov rcx, qword [0x1401049b0]
xor edx, edx
mov qword [rsp + 0x520], rsi
mov qword [rsp + 0x528], r12
mov qword [rsp + 0x530], r13
mov qword [rsp + 0x4f0], r14
movaps xmmword [rsp + 0x4e0], xmm6
movaps xmmword [rsp + 0x4d0], xmm7
movaps xmmword [rsp + 0x4c0], xmm8
movaps xmmword [rsp + 0x4b0], xmm9
movaps xmmword [rsp + 0x4a0], xmm10
movaps xmmword [rsp + 0x490], xmm11
movaps xmmword [rsp + 0x480], xmm12
movaps xmmword [rsp + 0x470], xmm13
movaps xmmword [rsp + 0x460], xmm14
movaps xmmword [rsp + 0x450], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401049b0]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.140015060
call fcn.140022e80
mov r14, rax
call fcn.140023530
mov rsi, rax
call fcn.140023530
or dword [r14], 0x400
xor ecx, ecx
mov qword [r14 + 0x18], rdi
call fcn.140041aa0
test dword [r14], 0x400
je 0x140068744
mov dword [rsi + 0xc], edi
mov dword [rsi + 0xec], 0x3f800000
xor ecx, ecx
call fcn.140041aa0
movaps xmm1, xmmword [0x1400accc0]
lea rcx, [rbp + 0x2b0]
movaps xmm0, xmmword [0x1400b03a0]
mov qword [rsi], 0x3f800000
mov dword [rsi + 0xc], 0x40000000
mov dword [rsi + 0x3c], 0x40800000
mov dword [rsi + 0x40], 0x40400000
mov dword [rsi + 8], edi
mov dword [rsi + 0x54], 0x40c00000
mov dword [rsi + 0x58], 0x40c00000
mov dword [rsi + 0x4c], 0x41000000
mov dword [rsi + 0x50], 0x41200000
mov dword [rsi + 0x30], edi
mov dword [rsi + 0x34], 0x3f800000
mov dword [rsi + 0x44], 0x40000000
mov dword [rsi + 0x6c], 0x41700000
mov dword [rsi + 0x70], 0x41100000
mov dword [rsi + 0x74], 0x40a00000
mov dword [rsi + 0x78], 0x40b00000
movups xmmword [rsi + 0x200], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x1400b0390]
movups xmmword [rsi + 0x180], xmm1
movups xmmword [rsi + 0x190], xmm1
movaps xmm1, xmmword [0x1400b0370]
movups xmmword [rsi + 0x240], xmm1
movaps xmm1, xmmword [0x1400b0350]
movups xmmword [rsi + 0x260], xmm0
movaps xmm0, xmmword [0x1400b0360]
movups xmmword [rsi + 0x250], xmm1
movaps xmm1, xmmword [0x1400b03a0]
movups xmmword [rsi + 0x170], xmm0
movaps xmm0, xmm1
movups xmmword [rsi + 0x150], xmm1
movups xmmword [rsi + 0x160], xmm1
movaps xmm1, xmmword [0x1400b0400]
movups xmmword [rsi + 0x210], xmm1
movaps xmm1, xmmword [0x1400b03e0]
movups xmmword [rsi + 0x220], xmm0
movaps xmm0, xmmword [0x1400b03b0]
movups xmmword [rsi + 0x230], xmm1
movaps xmm1, xmmword [0x1400b0400]
movups xmmword [rsi + 0x270], xmm0
movaps xmm0, xmmword [0x1400b03c0]
movups xmmword [rsi + 0x280], xmm1
movups xmmword [rsi + 0x290], xmm0
call fcn.140036e30
mov dword [rbp + 0x2c8], r15d
mov dword [rbp + 0x2cc], r15d
mov byte [rbp + 0x2d0], r15b
mov rbx, qword [r14 + 0xa0]
mov rcx, rbx
call fcn.14003b5f0
movss xmm8, dword [0x1400a7a98]
lea rdx, [0x140102cc0]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm8
mov r8d, 0x6e8
mov qword [rsp + 0x20], rdi
mov rcx, rbx
call fcn.140038830
movss xmm2, dword [0x1400a7a94]
lea rdx, str.C:WindowsFontsArialbd.ttf
mov rcx, qword [r14 + 0xa0]
xor r9d, r9d
mov qword [rbp + 0x1d8], rax
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
movss xmm7, dword [0x1400acb64]
lea rdx, str.C:WindowsFontsArialbd.ttf
mov rcx, qword [r14 + 0xa0]
movaps xmm2, xmm7
xor r9d, r9d
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
movss xmm2, dword [0x1400a7a90]
lea rdx, str.C:WindowsFontsArialbd.ttf
xor r9d, r9d
mov qword [rsp + 0x20], rdi
mov rcx, qword [r14 + 0xa0]
call fcn.1400380e0
movss xmm6, dword [0x1400a7a9c]
lea rdx, str.C:WindowsFontsAriblk.ttf
mov rcx, qword [r14 + 0xa0]
movaps xmm2, xmm6
xor r9d, r9d
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
movss xmm2, dword [0x1400a7a88]
lea rdx, str.C:WindowsFontsArialbd.ttf
mov rcx, qword [r14 + 0xa0]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
mov rcx, qword [r14 + 0xa0]
lea rdx, str.C:WindowsFontsArialbd.ttf
xor r9d, r9d
mov qword [rsp + 0x20], rdi
movaps xmm2, xmm6
call fcn.1400380e0
mov rcx, qword [r14 + 0xa0]
lea rdx, str.C:WindowsFontsArialbd.ttf
xor r9d, r9d
mov qword [rbp + 0x1e0], rax
movaps xmm2, xmm7
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
movss xmm2, dword [0x1400b0318]
lea rdx, str.C:WindowsFontsArialbd.ttf
mov rcx, qword [r14 + 0xa0]
xor r9d, r9d
mov r15, rax
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
mov rcx, qword [r14 + 0xa0]
lea rdx, str.C:WindowsFontsArialbd.ttf
xor r9d, r9d
mov qword [rbp + 0x1e8], rax
movaps xmm2, xmm8
mov qword [rsp + 0x20], rdi
call fcn.1400380e0
mov rcx, qword [0x1401049b0]
call fcn.14004b560
mov rcx, qword [0x1401049b8]
call fcn.14004a070
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x298]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r12d, dword [0x1401051f8]
xorps xmm0, xmm0
mov r13, qword gs:[0x58]
movss xmm10, dword [0x1400a7a48]
movss xmm14, dword [0x1400b034c]
movss xmm13, dword [0x1400b0348]
movss xmm9, dword [0x1400a7ac8]
movss xmm12, dword [0x1400b0324]
movss xmm15, dword [0x1400a7a74]
movss xmm11, dword [0x1400b032c]
movss xmm6, dword [0x1400b0334]
movss xmm7, dword [0x1400b0340]
movups xmmword [rbp + 0x268], xmm0
movups xmmword [rbp + 0x278], xmm0
movups xmmword [rbp + 0x288], xmm0
mov ebx, 4
call fcn.14006c120
cmp al, 1
jne 0x140068ba8
cmp byte [0x1400cf0b4], al
jne 0x140068ba8
mov ebx, edi
call fcn.14006b210
test eax, eax
js 0x140068ba3
nop
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140068b88
call fcn.14006bc30
test al, al
jne 0x140068b79
mov ecx, ebx
call fcn.14006ea00
cvttsd2si eax, xmm0
mov ecx, ebx
movd xmm8, eax
cvtdq2ps xmm8, xmm8
call fcn.14006e520
mov ecx, ebx
cvttsd2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
call fcn.14006b540
cvtsd2ss xmm0, xmm0
call fcn.14006d4e0
movd xmm6, eax
cvtdq2pd xmm6, xmm6
call fcn.14006b690
cvtsd2ss xmm0, xmm0
call fcn.14006d4e0
movaps xmm3, xmm8
movaps xmm2, xmm7
movaps xmm1, xmm6
movd xmm0, eax
cvtdq2pd xmm0, xmm0
call fcn.14006bfb0
mov ecx, ebx
call fcn.14006bc80
inc ebx
call fcn.14006b210
cmp ebx, eax
jle 0x140068af0
movss xmm8, dword [0x1400a7a98]
xor edi, edi
movss xmm6, dword [0x1400b0334]
movss xmm7, dword [0x1400b0340]
mov ebx, 4
mov eax, 1
lea rcx, [rbp + 0x268]
xor r9d, r9d
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140068be9
lea rcx, [rbp + 0x268]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x268]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14006a020
call fcn.14004a240
call fcn.14004b880
call fcn.14002a0d0
xor edx, edx
mov dword [rbp - 0x68], 0x44034000
lea rcx, [rbp - 0x68]
mov dword [rbp - 0x64], 0x43c68000
call fcn.1400302a0
movaps xmm0, xmm10
call fcn.1400301e0
mov ecx, dword [0x1400cf064]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140068c3c
cmp byte [0x1400cf0ce], 0
sete al
mov byte [0x1400cf0ce], al
jmp 0x140068c43
movzx eax, byte [0x1400cf0ce]
test al, al
je 0x140069f22
mov r8d, 0x12b
lea rdx, [0x1400e3c5c]
lea rcx, str.Sakura
call fcn.14000e930
mov rdi, qword [r13 + r12*8]
mov eax, dword [rbx + rdi]
cmp dword [0x140104b1c], eax
jg 0x14006a1c8
mov eax, dword [rbx + rdi]
cmp dword [0x140104b24], eax
jg 0x14006a187
call fcn.140012df0
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x60], 0x40a00000
mov dword [rbp - 0x5c], 0x41000000
call fcn.14002fad0
mov rcx, qword [rbp + 0x1d8]
call fcn.14002bb60
movaps xmm0, xmmword [0x1400b0380]
lea rdx, [0x1400b002c]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call fcn.140065e40
call fcn.14002b660
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.14002f280
mov rcx, qword [rbp + 0x1e0]
call fcn.14002bb60
lea rcx, [rbp - 0x58]
mov dword [rbp - 0x58], 0x41a00000
mov dword [rbp - 0x54], 0x40a00000
call fcn.14002fad0
movaps xmm0, xmmword [0x1400b03d0]
lea rdx, [0x1400a081d]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call fcn.140065e40
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14002f280
movaps xmm0, xmmword [0x1400b03f0]
lea rdx, str.Sakura
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call fcn.140065e40
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14002f280
movaps xmm0, xmmword [0x1400b03d0]
lea rdx, [0x1400a081d]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call fcn.140065e40
call fcn.14002b660
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0xc1200000
mov dword [rbp - 0x4c], 0x423c0000
call fcn.14002fad0
lea rcx, [rbp + 0x1f0]
call fcn.140022830
movss xmm0, dword [rax]
addss xmm0, xmm0
unpcklps xmm0, xmm15
movq rcx, xmm0
call fcn.140067f70
lea rdx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x41200000
mov ecx, 0xd
mov dword [rbp - 0x44], 0x40800000
call fcn.14002c1e0
mov rcx, qword [rbp + 0x1e8]
call fcn.14002bb60
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x43d20000
mov dword [rbp - 0x3c], 0x40e00000
call fcn.14002fad0
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x38], 0
lea rcx, str.Keybinds
call fcn.140054b80
mov ecx, dword [0x1400cf060]
test al, al
mov ebx, 1
mov dword [rbp - 0x80], 0x43a28000
cmovne ecx, ebx
mov dword [rbp - 0x7c], 0x40e00000
mov dword [0x1400cf060], ecx
lea rcx, [rbp - 0x80]
call fcn.14002fad0
lea rdx, [rbp - 0x28]
mov qword [rbp - 0x28], 0
lea rcx, str.Settings
call fcn.140054b80
mov ecx, dword [0x1400cf060]
test al, al
mov edi, 0
cmovne ecx, edi
mov dword [0x1400cf060], ecx
call fcn.14002b660
mov ecx, ebx
call fcn.14002b990
call fcn.140020160
call fcn.14006b2e0
call fcn.14006d540
mov ecx, dword [0x1400cf060]
test ecx, ecx
je 0x140069728
sub ecx, ebx
je 0x1400691a6
cmp ecx, 2
jne 0x140069f1d
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x40a00000
mov dword [rbp - 0x1c], 0x42340000
call fcn.14002fad0
xor r9d, r9d
mov dword [rbp - 0x18], 0x43dc0000
xor r8d, r8d
mov dword [rbp - 0x14], 0x43888000
lea rdx, [rbp - 0x18]
lea rcx, str.configs
call fcn.140011bd0
call fcn.140012df0
call fcn.14006b2e0
call fcn.14006d540
mov rcx, r15
call fcn.14002bb60
movsxd rcx, dword [0x1401033ac]
mov rax, 0xffffffffffffffff
mov rdx, qword [0x1400cf048]
sub rdx, qword [0x1400cf040]
sar rdx, 5
cmp rcx, rdx
mov dword [rbp - 0x10], 0x41200000
mov dword [rbp - 0xc], 0x41200000
cmovae ecx, eax
mov dword [0x1401033ac], ecx
lea rcx, [rbp - 0x10]
call fcn.14002fad0
movaps xmm0, xmm11
call fcn.1400301c0
mov rax, qword [0x1400cf048]
lea r9, [0x1400cf040]
sub rax, qword [0x1400cf040]
lea r8, [0x140067cf0]
sar rax, 5
lea rdx, [0x1401033ac]
mov dword [rsp + 0x28], 5
lea rcx, str.Includes::config_list
mov dword [rsp + 0x20], eax
call fcn.14005f330
test al, al
je 0x140068fb6
movsxd rax, dword [0x1401033ac]
cmp eax, 0xffffffff
je 0x140068fb6
mov r8, rax
shl r8, 5
add r8, qword [0x1400cf040]
cmp qword [r8 + 0x18], 0x10
jb 0x140068fa0
mov r8, qword [r8]
lea rbx, [0x140104b28]
mov edx, 0x20
mov rcx, rbx
call fcn.140083d18
jmp 0x140068fbd
lea rbx, [0x140104b28]
movaps xmm0, xmm11
call fcn.1400301c0
mov r9d, 0x20
mov qword [rsp + 0x28], rdi
mov r8d, r9d
mov qword [rsp + 0x20], rdi
mov rdx, rbx
lea rcx, str.Includes::config_name
call fcn.14005bef0
test al, al
je 0x14006903e
cmp dword [0x1401033ac], 0xffffffff
je 0x14006903e
mov qword [rsp + 0x60], rdi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
nop
inc r8
cmp byte [rbx + r8], dil
jne 0x140069010
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140008800
movsxd rdx, dword [0x1401033ac]
lea r8, [rsp + 0x60]
lea rcx, [0x1400cf020]
call fcn.140009f70
lea rdx, [rbp - 8]
mov qword [rbp - 8], rdi
lea rcx, str.Create
call fcn.140054b80
test al, al
je 0x140069097
mov qword [rsp + 0x60], rdi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
inc r8
cmp byte [rbx + r8], dil
jne 0x140069070
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140008800
lea rdx, [rsp + 0x60]
lea rcx, [0x1400cf020]
call fcn.1400084c0
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.14002f280
lea rdx, [rbp]
mov qword [rbp], rdi
lea rcx, str.Reset
call fcn.140054b80
test al, al
je 0x1400690c7
lea rcx, [0x1400cf020]
call fcn.14000a150
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.14002f280
lea rdx, [rbp + 8]
mov qword [rbp + 8], rdi
lea rcx, str.Refresh
call fcn.140054b80
test al, al
je 0x1400690f7
lea rcx, [0x1400cf020]
call fcn.14000a470
cmp dword [0x1401033ac], 0xffffffff
jle 0x140069f0e
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], rdi
lea rcx, str.Save
call fcn.140054b80
test al, al
je 0x14006912f
movsxd rdx, dword [0x1401033ac]
lea rcx, [0x1400cf020]
call fcn.14000a5c0
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.14002f280
lea rdx, [rbp + 0x18]
mov qword [rbp + 0x18], rdi
lea rcx, str.Load
call fcn.140054b80
test al, al
je 0x140069166
movsxd rdx, dword [0x1401033ac]
lea rcx, [0x1400cf020]
call fcn.140009300
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.14002f280
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x30], rdi
lea rcx, str.Delete
call fcn.140054b80
test al, al
je 0x140069f0e
movsxd rdx, dword [0x1401033ac]
lea rcx, [0x1400cf020]
call fcn.140009da0
jmp 0x140069f0e
call fcn.14006b2e0
call fcn.14006d540
lea rcx, [rbp + 0x20]
mov dword [rbp + 0x20], 0x40a00000
mov dword [rbp + 0x24], 0x42340000
call fcn.14002fad0
xor r9d, r9d
mov dword [rbp + 0x28], 0x438ac000
xor r8d, r8d
mov dword [rbp + 0x2c], 0x43ae0000
lea rdx, [rbp + 0x28]
lea rcx, str.keys
call fcn.140011bd0
call fcn.140012df0
mov rcx, r15
call fcn.14002bb60
lea rcx, [rbp + 0x30]
mov dword [rbp + 0x30], 0x40800000
mov dword [rbp + 0x34], 0x40a00000
call fcn.14002fad0
lea r8, [rbp + 0x38]
mov dword [rbp + 0x38], 0x43480000
lea rdx, [0x1400cf074]
mov dword [rbp + 0x3c], 0x41a00000
lea rcx, [0x1400aff78]
call fcn.14005ee80
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x40800000
mov dword [rbp + 0x44], 0x42340000
call fcn.14002fad0
lea r8, [rbp + 0x48]
mov dword [rbp + 0x48], 0x43480000
lea rdx, [0x1400cf078]
mov dword [rbp + 0x4c], 0x41a00000
lea rcx, [0x1400b01e0]
call fcn.14005ee80
lea rcx, [rbp + 0x50]
mov dword [rbp + 0x50], 0x40800000
mov dword [rbp + 0x54], 0x42aa0000
call fcn.14002fad0
lea r8, [rbp + 0x58]
mov dword [rbp + 0x58], 0x43480000
lea rdx, [0x1400cf07c]
mov dword [rbp + 0x5c], 0x41a00000
lea rcx, [0x1400b01e4]
call fcn.14005ee80
lea rcx, [rbp + 0x60]
mov dword [rbp + 0x60], 0x40800000
mov dword [rbp + 0x64], 0x42fa0000
call fcn.14002fad0
lea r8, [rbp + 0x68]
mov dword [rbp + 0x68], 0x43480000
lea rdx, [0x1400cf080]
mov dword [rbp + 0x6c], 0x41a00000
lea rcx, [0x1400b01e8]
call fcn.14005ee80
lea rcx, [rbp + 0x70]
mov dword [rbp + 0x70], 0x40800000
mov dword [rbp + 0x74], 0x43250000
call fcn.14002fad0
lea r8, [rbp + 0x78]
mov dword [rbp + 0x78], 0x43480000
lea rdx, [0x1400cf084]
mov dword [rbp + 0x7c], 0x41a00000
lea rcx, [0x1400b01f0]
call fcn.14005ee80
lea rcx, [rbp + 0x80]
mov dword [rbp + 0x80], 0x40800000
mov dword [rbp + 0x84], 0x434d0000
call fcn.14002fad0
lea r8, [rbp + 0x88]
mov dword [rbp + 0x88], 0x43480000
lea rdx, [0x1400cf088]
mov dword [rbp + 0x8c], 0x41a00000
lea rcx, [0x1400b01f8]
call fcn.14005ee80
lea rcx, [rbp + 0x90]
mov dword [rbp + 0x90], 0x40800000
mov dword [rbp + 0x94], 0x43750000
call fcn.14002fad0
mov dword [rbp + 0x98], 0x43480000
lea r8, [rbp + 0x98]
mov dword [rbp + 0x9c], 0x41a00000
lea rdx, [0x1400cf08c]
lea rcx, [0x1400b01fc]
call fcn.14005ee80
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0xa0], 0x40800000
mov dword [rbp + 0xa4], 0x438e8000
call fcn.14002fad0
lea r8, [rbp + 0xa8]
mov dword [rbp + 0xa8], 0x43480000
lea rdx, [0x1400cf0ac]
mov dword [rbp + 0xac], 0x41a00000
lea rcx, [0x1400b0200]
call fcn.14005ee80
lea rcx, [rbp + 0xb0]
mov dword [rbp + 0xb0], 0x40800000
mov dword [rbp + 0xb4], 0x43a28000
call fcn.14002fad0
lea r8, [rbp + 0xb8]
mov dword [rbp + 0xb8], 0x43480000
lea rdx, [0x1400cf0b0]
mov dword [rbp + 0xbc], 0x41a00000
lea rcx, [0x1400b0204]
call fcn.14005ee80
lea rcx, [rbp + 0xc0]
mov dword [rbp + 0xc0], 0x40800000
mov dword [rbp + 0xc4], 0x43b68000
call fcn.14002fad0
lea r8, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x43480000
lea rdx, [0x1400cf0a4]
mov dword [rbp + 0xcc], 0x41a00000
lea rcx, [0x1400b0208]
call fcn.14005ee80
lea rcx, [rbp + 0xd0]
mov dword [rbp + 0xd0], 0x40800000
mov dword [rbp + 0xd4], 0x43ca8000
call fcn.14002fad0
lea r8, [rbp + 0xd8]
mov dword [rbp + 0xd8], 0x43480000
lea rdx, [0x1400cf0a8]
mov dword [rbp + 0xdc], 0x41a00000
lea rcx, str.Simple
call fcn.14005ee80
lea rcx, [rbp + 0xe0]
mov dword [rbp + 0xe0], 0x40800000
mov dword [rbp + 0xe4], 0x43de8000
call fcn.14002fad0
lea r8, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x43480000
lea rdx, [0x1400cf094]
mov dword [rbp + 0xec], 0x41a00000
lea rcx, [0x1400b0218]
call fcn.14005ee80
lea rcx, [rbp + 0xf0]
mov dword [rbp + 0xf0], 0x40800000
mov dword [rbp + 0xf4], 0x43f28000
call fcn.14002fad0
lea r8, [rbp + 0xf8]
mov dword [rbp + 0xf8], 0x43480000
lea rdx, [0x1400cf098]
mov dword [rbp + 0xfc], 0x41a00000
lea rcx, str.Mz_Boost
call fcn.14005ee80
lea rcx, [rbp + 0x100]
mov dword [rbp + 0x100], 0x40800000
mov dword [rbp + 0x104], 0x44034000
call fcn.14002fad0
lea r8, [rbp + 0x108]
mov dword [rbp + 0x108], 0x43480000
lea rdx, [0x1400cf09c]
mov dword [rbp + 0x10c], 0x41a00000
lea rcx, str.Mz_Break
call fcn.14005ee80
call fcn.14002b660
call fcn.140020160
call fcn.14001f3c0
lea rcx, [rbp + 0x110]
mov dword [rbp + 0x110], 0x438bc000
mov dword [rbp + 0x114], 0x42340000
call fcn.14002fad0
xor r9d, r9d
mov dword [rbp + 0x118], 0x436d8000
xor r8d, r8d
mov dword [rbp + 0x11c], 0x43ae0000
lea rdx, [rbp + 0x118]
lea rcx, str.keys1
call fcn.140011bd0
call fcn.140012df0
mov rcx, r15
call fcn.14002bb60
lea rcx, [rbp + 0x120]
mov dword [rbp + 0x120], 0x40a00000
mov dword [rbp + 0x124], 0x43a20000
call fcn.14002fad0
lea rdx, [rbp + 0x128]
mov qword [rbp + 0x128], rdi
lea rcx, str.Support
call fcn.140054b80
test al, al
je 0x1400696ab
mov dword [rsp + 0x28], ebx
lea r8, str.https:__discord.gg_rustscripts
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x41700000
mov dword [rbp + 0x134], 0x41700000
call fcn.14002fad0
lea rdx, [0x1400cf0b6]
lea rcx, str.Auto_Detect_Weapon
call fcn.1400553e0
lea rcx, str._May_Be_Buggy_
call fcn.140065e10
lea rcx, [rbp + 0x138]
mov dword [rbp + 0x138], 0x42a00000
mov dword [rbp + 0x13c], 0x43390000
call fcn.14002fad0
lea rdx, [rsi + 0xc0]
mov r8d, 0x100002
lea rcx, str.Color
call fcn.140057580
jmp 0x140069f0e
call fcn.14006b2e0
call fcn.14006d540
lea rcx, [rbp + 0x140]
mov dword [rbp + 0x140], edi
mov dword [rbp + 0x144], 0x41c80000
call fcn.14002fad0
xor r9d, r9d
mov dword [rbp + 0x148], 0x43818000
xor r8d, r8d
mov dword [rbp + 0x14c], 0x43b08000
lea rdx, [rbp + 0x148]
lea rcx, str.recoil
call fcn.140011bd0
call fcn.140012df0
mov rcx, r15
call fcn.14002bb60
lea rcx, [rbp + 0x150]
mov dword [rbp + 0x150], 0x41d80000
mov dword [rbp + 0x154], 0x42340000
call fcn.14002fad0
movaps xmm0, xmm6
call fcn.1400301c0
mov r9d, 8
mov dword [rsp + 0x20], 0x20
lea r8, [0x1401033b0]
lea rdx, [0x1400cf0d4]
lea rcx, str.weapons
call fcn.140059800
lea rcx, [rbp + 0x158]
mov dword [rbp + 0x158], 0x41d00000
mov dword [rbp + 0x15c], 0x41c80000
call fcn.14002fad0
lea rcx, str.Weapon
call fcn.140065e10
lea rcx, [rbp + 0x160]
mov dword [rbp + 0x160], 0x41d80000
mov dword [rbp + 0x164], 0x42b40000
call fcn.14002fad0
movaps xmm0, xmm6
call fcn.1400301c0
mov r9d, 5
mov dword [rsp + 0x20], 0x20
lea r8, [0x1401033f0]
lea rdx, [0x1400cf0d8]
lea rcx, str.sights
call fcn.140059800
lea rcx, [rbp + 0x168]
mov dword [rbp + 0x168], 0x41d00000
mov dword [rbp + 0x16c], 0x428c0000
call fcn.14002fad0
lea rcx, str.Barrel_Attatchment
call fcn.140065e10
lea rcx, [rbp + 0x170]
mov dword [rbp + 0x170], 0x41d80000
mov dword [rbp + 0x174], 0x43070000
call fcn.14002fad0
movaps xmm0, xmm6
call fcn.1400301c0
mov r9d, 4
mov dword [rsp + 0x20], 0x20
lea r8, [0x140103418]
lea rdx, [0x1400cf0dc]
lea rcx, str.barrels
call fcn.140059800
lea rcx, [rbp + 0x178]
mov dword [rbp + 0x178], 0x41d00000
mov dword [rbp + 0x17c], 0x42e60000
call fcn.14002fad0
lea rcx, str.Scope_Attatchment
call fcn.140065e10
lea rcx, [rbp + 0x180]
mov dword [rbp + 0x180], 0x41d80000
mov dword [rbp + 0x184], 0x43200000
call fcn.14002fad0
lea rcx, str.Sensitivity
call fcn.140065e10
lea rcx, [rbp + 0x188]
mov dword [rbp + 0x188], 0x425c0000
mov dword [rbp + 0x18c], 0x43200000
call fcn.14002fad0
lea rcx, str._________________FOV
call fcn.140065e10
lea rcx, [rbp + 0x190]
mov dword [rbp + 0x190], 0x41d80000
mov dword [rbp + 0x194], 0x43340000
call fcn.14002fad0
movss xmm0, dword [0x1400a7aa4]
call fcn.1400301c0
movss xmm3, dword [0x1400a082c]
lea rbx, str._0.3f
xorps xmm2, xmm2
mov dword [rsp + 0x28], edi
lea rdx, [0x1400cf058]
mov qword [rsp + 0x20], rbx
lea rcx, str.Sens
call fcn.14005b860
movss xmm0, dword [0x1400b0320]
movaps xmm1, xmm9
call fcn.14002f280
movss xmm0, dword [0x1400afea4]
call fcn.1400301c0
movss xmm3, dword [0x1400a082c]
lea rdx, [0x1400cf05c]
xorps xmm2, xmm2
mov dword [rsp + 0x28], edi
lea rcx, str.Fov
mov qword [rsp + 0x20], rbx
call fcn.14005b860
lea rdx, [0x1400cf0b5]
lea rcx, [0x1400b00f0]
call fcn.1400553e0
lea rdx, [0x1400cf0b7]
lea rcx, [0x1400b0100]
call fcn.1400553e0
lea rdx, [0x1400cf0b4]
lea rcx, str.Control_Recoil
call fcn.1400553e0
lea rcx, [rbp + 0x198]
mov dword [rbp + 0x198], 0x420c0000
mov dword [rbp + 0x19c], 0x43510000
call fcn.14002fad0
lea rcx, str.Legit_Mode
call fcn.140065e10
lea rcx, [rbp + 0x1a0]
mov dword [rbp + 0x1a0], 0x420c0000
mov dword [rbp + 0x1a4], 0x43690000
call fcn.14002fad0
lea rcx, str.Control_Hipfire
call fcn.140065e10
movsxd rcx, dword [0x1401033a8]
mov rdx, qword [0x1400cf048]
sub rdx, qword [0x1400cf040]
sar rdx, 5
cmp rcx, rdx
cmovae ecx, edi
mov dword [0x1401033a8], ecx
call fcn.14002b660
lea rcx, [rbp + 0x260]
call fcn.1400239f0
call fcn.1400239c0
mov rbx, rax
call fcn.1400225c0
call fcn.140022960
movss xmm1, dword [rbp + 0x264]
lea rcx, [rsp + 0x60]
movss xmm2, dword [rbp + 0x260]
movaps xmm0, xmm1
addss xmm0, dword [0x1400afe9c]
addss xmm2, dword [0x1400b0344]
addss xmm1, dword [0x1400b033c]
movss dword [rbp + 0x254], xmm0
movaps xmm0, xmmword [0x1400acde0]
movups xmmword [rsp + 0x60], xmm0
movss dword [rbp + 0x250], xmm2
movss dword [rbp + 0x258], xmm2
movss dword [rbp + 0x25c], xmm1
call fcn.140014ce0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x258]
mov rcx, rbx
lea rdx, [rbp + 0x250]
call fcn.140038cf0
movss xmm2, dword [rbp + 0x260]
lea rcx, [rsp + 0x60]
movss xmm1, dword [rbp + 0x264]
movaps xmm0, xmm2
addss xmm1, dword [0x1400afea0]
addss xmm0, xmm8
addss xmm2, xmm7
movss dword [rbp + 0x254], xmm1
movss dword [rbp + 0x250], xmm0
movaps xmm0, xmmword [0x1400acde0]
movups xmmword [rsp + 0x60], xmm0
movss dword [rbp + 0x258], xmm2
movss dword [rbp + 0x25c], xmm1
call fcn.140014ce0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x258]
mov rcx, rbx
lea rdx, [rbp + 0x250]
call fcn.140038cf0
movss xmm2, dword [rbp + 0x260]
lea rcx, [rsp + 0x60]
movss xmm1, dword [rbp + 0x264]
movaps xmm0, xmm2
addss xmm1, dword [0x1400b031c]
addss xmm0, xmm8
addss xmm2, xmm7
movss dword [rbp + 0x254], xmm1
movss dword [rbp + 0x250], xmm0
movaps xmm0, xmmword [0x1400acde0]
movups xmmword [rsp + 0x60], xmm0
movss dword [rbp + 0x258], xmm2
movss dword [rbp + 0x25c], xmm1
call fcn.140014ce0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x258]
mov rcx, rbx
lea rdx, [rbp + 0x250]
call fcn.140038cf0
movss xmm2, dword [rbp + 0x260]
lea rcx, [rsp + 0x60]
movss xmm1, dword [rbp + 0x264]
movaps xmm0, xmm2
addss xmm1, dword [0x1400b0328]
addss xmm0, xmm8
addss xmm2, xmm7
movss dword [rbp + 0x254], xmm1
movss dword [rbp + 0x250], xmm0
movaps xmm0, xmmword [0x1400acde0]
movups xmmword [rsp + 0x60], xmm0
movss dword [rbp + 0x258], xmm2
movss dword [rbp + 0x25c], xmm1
call fcn.140014ce0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x258]
mov rcx, rbx
lea rdx, [rbp + 0x250]
call fcn.140038cf0
movss xmm2, dword [rbp + 0x260]
lea rcx, [rsp + 0x60]
movss xmm1, dword [rbp + 0x264]
movaps xmm0, xmm2
addss xmm1, dword [0x1400b0330]
addss xmm2, dword [0x1400b0338]
addss xmm0, xmm8
movss dword [rbp + 0x254], xmm1
movss dword [rbp + 0x258], xmm2
movss dword [rbp + 0x250], xmm0
movaps xmm0, xmmword [0x1400acde0]
movups xmmword [rsp + 0x60], xmm0
movss dword [rbp + 0x25c], xmm1
call fcn.140014ce0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x258]
mov rcx, rbx
lea rdx, [rbp + 0x250]
call fcn.140038cf0
call fcn.140020160
call fcn.14001f3c0
lea rcx, [rbp + 0x1a8]
mov dword [rbp + 0x1a8], 0x4385c000
mov dword [rbp + 0x1ac], 0x42340000
call fcn.14002fad0
xor r9d, r9d
mov dword [rbp + 0x1b0], 0x43778000
xor r8d, r8d
mov dword [rbp + 0x1b4], 0x439c8000
lea rdx, [rbp + 0x1b0]
lea rcx, str.recoil1
call fcn.140011bd0
call fcn.140012df0
mov rcx, r15
call fcn.14002bb60
lea rcx, [rbp + 0x1b8]
mov dword [rbp + 0x1b8], 0x41200000
mov dword [rbp + 0x1bc], 0x41c80000
call fcn.14002fad0
movss xmm0, dword [0x1400a7aac]
call fcn.1400301c0
movss xmm3, dword [0x1400a7a8c]
lea rbx, str.__.1f
movaps xmm2, xmm10
mov dword [rsp + 0x28], edi
lea rdx, [0x1400cf0bc]
mov qword [rsp + 0x20], rbx
lea rcx, str.control_X
call fcn.140062630
movss xmm0, dword [0x1400a7aac]
call fcn.1400301c0
movss xmm3, dword [0x1400a7a8c]
lea rdx, [0x1400cf0c0]
movaps xmm2, xmm10
mov dword [rsp + 0x28], edi
lea rcx, str.control_Y
mov qword [rsp + 0x20], rbx
call fcn.140062630
lea r8, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], 0x42c80000
lea rdx, [0x1400cf068]
mov dword [rbp + 0x1c4], 0x41900000
lea rcx, str.Close_Bind
call fcn.14005ee80
lea r8, [rbp + 0x1c8]
mov dword [rbp + 0x1c8], 0x42c80000
lea rdx, [0x1400cf064]
mov dword [rbp + 0x1cc], 0x41900000
lea rcx, str.Hide_Bind
call fcn.14005ee80
call fcn.140062ba0
lea rcx, str.discord.gg_rustscripts
call fcn.140065e10
lea rcx, [rbp + 0x1d0]
mov dword [rbp + 0x1d0], 0x435c0000
mov dword [rbp + 0x1d4], 0x41e00000
call fcn.14002fad0
lea rcx, [0x1400a788c]
call fcn.140065e10
lea rcx, [rbp - 0x78]
mov dword [rbp - 0x78], 0x435c0000
mov dword [rbp - 0x74], 0x42640000
call fcn.14002fad0
lea rcx, [0x1400a7888]
call fcn.140065e10
lea rcx, [rbp - 0x70]
mov dword [rbp - 0x70], 0x41200000
mov dword [rbp - 0x6c], 0x40c00000
call fcn.14002fad0
lea rcx, str.Recoil_Control_Amount
call fcn.140065e10
call fcn.14002b660
call fcn.140020160
call fcn.14001f3c0
call fcn.14001ef80
call fcn.14001f7c0
mov rcx, qword [0x1401049b8]
mov r9d, 3
mov dword [rsp + 0x30], edi
xor r8d, r8d
movss dword [rsp + 0x28], xmm10
xor edx, edx
mov dword [rsp + 0x20], edi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1401049b8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140069f87
call fcn.14002c390
call fcn.1400228b0
mov rcx, rax
call fcn.14004a250
mov rcx, qword [0x1401049b8]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r14], 0x400
je 0x140069f9e
call fcn.140032e50
xor edx, edx
xor ecx, ecx
call fcn.14002cfe0
mov rcx, qword [0x1401049b8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14006a017
mov rcx, qword [0x1401049b8]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14006a017
call fcn.14004a110
mov rcx, qword [0x1401049b8]
lea rdx, [0x1401049c0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14006a012
mov r8d, 0x3c
lea rdx, str.D:_reportMain.hpp
lea rcx, [0x1400a17a8]
call fcn.140079664
call fcn.140049cb0
cmp byte [0x1400e3c5c], 0
je 0x14006a02e
cmp dword [rbp + 0x270], 0x12
je 0x14006a038
jmp 0x140068ac2
mov dword [rbp + 0x270], 0x12
call fcn.14004adf0
call fcn.14004bfc0
xor ecx, ecx
call fcn.140015520
mov rcx, qword [0x1401049b8]
movaps xmm15, xmmword [rsp + 0x450]
movaps xmm14, xmmword [rsp + 0x460]
movaps xmm13, xmmword [rsp + 0x470]
movaps xmm12, xmmword [rsp + 0x480]
movaps xmm11, xmmword [rsp + 0x490]
movaps xmm10, xmmword [rsp + 0x4a0]
movaps xmm9, xmmword [rsp + 0x4b0]
movaps xmm8, xmmword [rsp + 0x4c0]
movaps xmm7, xmmword [rsp + 0x4d0]
movaps xmm6, xmmword [rsp + 0x4e0]
mov r14, qword [rsp + 0x4f0]
mov r13, qword [rsp + 0x530]
mov r12, qword [rsp + 0x528]
mov rsi, qword [rsp + 0x520]
test rcx, rcx
je 0x14006a0da
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1401049b8], rdi
mov rcx, qword [0x140104a00]
test rcx, rcx
je 0x14006a0f3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140104a00], rdi
mov rcx, qword [0x1401049b0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x218]
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
jmp 0x14006a16b
mov rcx, qword [0x140104a00]
mov rdx, qword [0x1401049b8]
test rdx, rdx
je 0x14006a142
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov rcx, qword [0x140104a00]
mov qword [0x1401049b8], rdi
test rcx, rcx
je 0x14006a154
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [0x140104a00], rdi
mov rdx, qword [rbp + 0x218]
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, r15d
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.140070fc0
add rsp, 0x4f8
pop r15
pop rdi
pop rbx
pop rbp
ret
lea rcx, [0x140104b24]
call fcn.140071464
cmp dword [0x140104b24], 0xffffffff
jne 0x140068c87
movss xmm0, dword [0x1400fa004]
lea rcx, [0x140104b24]
mulss xmm0, xmm13
cvttss2si eax, xmm0
mov dword [0x140104b20], eax
call fcn.140071404
jmp 0x140068c87
lea rcx, [0x140104b1c]
call fcn.140071464
cmp dword [0x140104b1c], 0xffffffff
jne 0x140068c78
movss xmm0, dword [0x1400fa004]
lea rcx, [0x140104b1c]
mulss xmm0, xmm14
cvttss2si eax, xmm0
mov dword [0x140104b18], eax
call fcn.140071404
jmp 0x140068c78