Function at 0x140019840
Capabilities:
Create process on windows
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x250
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm11
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401c4080]
xor rax, rsp
mov qword [rbp + 0x190], rax
xor r15d, r15d
movss xmm0, dword [0x1401cd6cc]
movss xmm1, dword [0x1401cd6d0]
mov rax, qword [0x1401ceac8]
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], 1
or dword [rax + 0x47b8], 3
mov qword [rax + 0x47c8], r15
mov qword [rax + 0x47d0], r15
mov dword [rax + 0x47bc], 1
movabs rax, 0xbb09c67bd95bb5a1
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0x4d4a0b13b673d988
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movabs r13, 0xfe29b508b82bcce3
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
movabs r12, 0x4d266a7dc416adf0
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x120], xmm0
xor edx, edx
mov r8d, 0x3f
lea rcx, [rbp + 0x120]
call fcn.140031910
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14001b035
mov r14, qword [0x1401ceac8]
mov rax, qword [r14 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [r14 + 0x3ed8]
mov rsi, qword [rax + 0x298]
mov byte [rax + 0xb8], 1
mov rax, qword [r14 + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a9060]
movss xmm6, dword [0x1401a9084]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm11, dword [0x1401a90ac]
movss xmm2, dword [0x1401a90c0]
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq r8, xmm0
movaps xmm1, xmm2
unpcklps xmm1, xmm2
movq rdx, xmm1
mov rcx, qword [0x1401cd748]
call fcn.140015610
xor ecx, ecx
call fcn.14002b6f0
test al, al
je 0x140019a7b
xor ecx, ecx
call fcn.140037da0
movups xmm0, xmmword [0x1402048e0]
movups xmmword [rbp + 0x100], xmm0
lea rdx, str.Optimiza_el_emulador_para_PCs_de_ntodas_las_gamas._nDesactiva_procesos_innecesarios__mejora_el_nrendimiento_y_mantiene_el_Wi_Fi_estable._nAumenta_FPS_y_fluidez_en_el_juego._n_n___________________n_nOptimizes_the_emulator_for_nall_PC_tiers._nDisables_unnecessary_processes__nboosts_performance__and_keeps_Wi_Fi_stable._nIncreases_FPS_and_game_fluidity.
lea rcx, [rbp + 0x100]
call fcn.140054190
call fcn.140033b20
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140034ef0
lea rbx, [0x1401cd650]
test al, al
je 0x140019b2a
xor ecx, ecx
call fcn.14002b6f0
test al, al
je 0x140019b2a
mov ecx, 8
call fcn.14012edb0
mov qword [rax], rbx
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140025590]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x140019d3f
cmp dword [rbp + 0xa8], 0
je 0x140019d33
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140019d33
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a90c8]
addss xmm0, dword [0x1401a90e8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [0x1401a90a0]
movaps xmm0, xmm1
unpcklps xmm0, xmm1
movq r8, xmm0
movss xmm1, dword [0x1401a9140]
unpcklps xmm1, xmm6
movq rdx, xmm1
mov rcx, qword [0x1401cd730]
call fcn.14005c8e0
xor ecx, ecx
call fcn.14002b6f0
test al, al
je 0x140019bee
xor ecx, ecx
call fcn.140037da0
movups xmm0, xmmword [0x1402048e0]
movups xmmword [rbp + 0x100], xmm0
lea rdx, str.If_you_close_the_APK_bypass__nthe_emulator_will_close_as_well._n_nSi_cierras_el_bypass_APK__nel_emulador_tambien_se_cerrara.
lea rcx, [rbp + 0x100]
call fcn.140054190
call fcn.140033b20
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140034ef0
test al, al
je 0x140019c0d
xor ecx, ecx
call fcn.14002b6f0
test al, al
jne 0x14001b035
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm6
xorps xmm6, xmm6
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, [0x1401a02a8]
call fcn.14005d320
test al, al
je 0x140019daa
xor edx, edx
cmp byte [0x1401ceab1], dl
je 0x140019d52
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
jmp 0x140019da2
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xa8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, str.netsh_advfirewall_firewall_delete_rule_name_FF_Block_In1_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_name_FF_Block_In2_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_name_FF_Block_In3_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_name_FF_Block_In6_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_name_FF_Block_In4_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_name_FF_Block_In5_
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WinExec]
movabs rdi, 0x694ebb232ac1e84a
movss xmm8, dword [0x1401a9188]
cmp byte [0x140204d64], 0
jne 0x14001ad72
call fcn.14000ef80
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a90ec]
movss xmm7, dword [0x1401a90d0]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
call fcn.1400372a0
movabs rax, 0xa509c67bd95bb5a1
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0x4d266a7d997dddb1
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x120], xmm0
movabs rax, 0x8e40c76bcb49b9b0
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
movabs rax, 0x4d266a47aa79c484
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xe0]
call fcn.14005cb20
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x140019f86
mov qword [rbp + 0xa0], 0
movaps xmm1, xmm8
lea rcx, [rbp + 0xa0]
call fcn.140036dc0
movabs rax, 0xfe29b5088905ffb5
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x120], xmm0
movabs rax, 0xc447da61cb59a9b5
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xe0]
call fcn.14005cb20
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14001a0c3
mov qword [rbp + 0xa0], 0
movaps xmm1, xmm8
lea rcx, [rbp + 0xa0]
call fcn.140036dc0
lea rdx, [0x1401ffff8]
lea rcx, [rbp + 0x80]
call fcn.140004f10
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14001a0e6
mov rcx, qword [rax]
xor edx, edx
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rdi, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14001a131
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14001a12c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a2aa
mov rcx, r8
call fcn.14012edf4
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov qword [rbp + 0xa0], rdi
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rbp + 0x30]
movaps xmmword [rbp + 0x60], xmm1
mov eax, dword [rbp + 0x40]
mov dword [rbp + 0x70], eax
lea r9, [rbp + 0x50]
lea r8, str._m__d__y
mov edx, 0x50
lea rcx, [rbp + 0x140]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], r15
lea rax, [rbp + 0x140]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14001a1b4
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0xc0]
call fcn.1400028e0
nop
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rdx, qword [rbp + 0xc0]
movabs rax, 0xfe29cc7ad15bb4a6
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x120], xmm0
lea rcx, [rbp + 0x120]
call fcn.14005cb20
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14001a2b6
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a2b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a2b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012edf4
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc0], 0
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a9124]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0xa0], 0x438c0000
mov dword [rbp + 0xa4], 0x420c0000
movabs rax, 0x876b957cca4ab8b0
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc0], rax
movabs rax, 0x1d67315db765cc80
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc8], rax
movabs rax, 0xde4f1686549f55f6
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd0], rax
movabs rcx, 0x694ebb232ac1e84a
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], r13
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xe0], r12
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x108], rax
movabs rax, 0xde4f1686549f08bd
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.14005c060
test al, al
je 0x14001a5a2
cmp byte [0x1402047d8], 0
jne 0x14001a4e2
mov ecx, 1
call fcn.14012edb0
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x1400254e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14001a570
cmp dword [rbp + 0xa8], 0
je 0x14001a564
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001a564
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov byte [0x1402047d8], 1
mov ecx, 8
call fcn.14012edb0
lea rdi, [0x1401cd650]
mov qword [rax], rdi
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x1400255c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14001a58f
cmp dword [rbp + 0x128], 0
je 0x14001a583
movaps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001a583
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
jmp 0x14001a5a9
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xa8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x128], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdi, [0x1401cd650]
xor ecx, ecx
call fcn.14002b6f0
test al, al
je 0x14001a5e1
xor ecx, ecx
call fcn.140037da0
movups xmm0, xmmword [0x1402048e0]
movups xmmword [rbp + 0x100], xmm0
lea rdx, str.Enabled_in_Emulators_Home_n_n_n32_bit_and_64_bit_support_n_nHabilitar_en_la_pantalla_de_inicio_del_emulador_n_nSoporte_para_32_bit_y_64_bit_n_nTurn_on__ADB_
lea rcx, [rbp + 0x100]
call fcn.140054190
call fcn.140033b20
mov dword [rbp + 0xa0], 0x438c0000
mov dword [rbp + 0xa4], 0x420c0000
movabs rax, 0xbb09c67bd95bb5a1
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc0], rax
movabs rax, 0x6d540509a57ad89d
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc8], rax
movabs rax, 0xde4f16db1fcf49e6
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd0], rax
movabs rcx, 0x694ebb232ac1e84a
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], r13
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xe0], r12
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x108], rax
movabs rax, 0xde4f1686549f08bd
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.14005c060
test al, al
je 0x14001a78a
mov ecx, 8
call fcn.14012edb0
mov qword [rax], rdi
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x1400255f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14001b003
cmp dword [rbp + 0x128], 0
je 0x14001aff7
movaps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001aff7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
xor ecx, ecx
call fcn.14002b6f0
test al, al
je 0x14001a7c2
xor ecx, ecx
call fcn.140037da0
movups xmm0, xmmword [0x1402048e0]
movups xmmword [rbp + 0x100], xmm0
lea rdx, str.Enable_in_the_loading_bar_after_nthe_Garena_logo_n_nHabilitar_en_la_barra_de_cargas_ndespues_del_logo_de_Garena
lea rcx, [rbp + 0x100]
call fcn.140054190
call fcn.140033b20
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a913c]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0xa0], 0x438c0000
mov dword [rbp + 0xa4], 0x420c0000
movabs rax, 0x9b7b9566d94ea0a0
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc0], rax
movabs rax, 0x1d67315db064c280
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc8], rax
movabs rax, 0xde4f1686549f55f6
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd0], rax
movabs rcx, 0x694ebb232ac1e84a
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], r13
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xe0], r12
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x108], rax
movabs rax, 0xde4f1686549f08bd
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.14005c060
test al, al
je 0x14001a9c4
mov ecx, 8
call fcn.14012edb0
mov qword [rax], rdi
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140025650]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14001b022
cmp dword [rbp + 0x128], 0
je 0x14001b016
movaps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001b016
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
xor ecx, ecx
call fcn.14002b6f0
test al, al
je 0x14001a9fc
xor ecx, ecx
call fcn.140037da0
movups xmm0, xmmword [0x1402048e0]
movups xmmword [rbp + 0x100], xmm0
lea rdx, str.Enabled_in_Login_Screen_n_nHabilitar_en_la_pantalla_de_ninicio_de_sesion_n_nUsing_the_Block_nRed_tool_n_nUsando_la_herramienta_nBlock_Red_n_n32_bit_and_64_bit_nsupport_n_nSoporte_para_n32_bit_y_64_bit
lea rcx, [rbp + 0x100]
call fcn.140054190
call fcn.140033b20
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x20]
subss xmm2, dword [rax + 0x84]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm2, dword [0x1401a90f0]
addss xmm1, dword [0x1401a90f0]
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
call fcn.1400372a0
movabs rdi, 0x8d5ad478c169ecc3
mov qword [rbp + 0xe0], rdi
mov rax, qword [rbp + 0xe0]
mov qword [rbp], rax
movabs rax, 0x4d266a7daf66ecd0
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xe0], r13
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xe0], r12
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x1401a96e0]
movups xmmword [rbp + 0x100], xmm1
lea rcx, [rbp + 0x100]
call fcn.1400280a0
mov r8d, eax
mov dword [rbp + 0xa0], 0x42fe0000
mov dword [rbp + 0xa4], 0x41700000
mov rcx, qword [r14 + 0x38]
mov rdx, qword [rcx + 0x60]
mov rcx, qword [rdx + 8]
movss xmm7, dword [0x1401a90a4]
test eax, 0xff000000
je 0x14001aba0
lea rdx, [rbp]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x14001ab30
lea rdx, [rbp]
add rdx, rax
lea rax, [rbp]
cmp rax, rdx
je 0x14001aba0
test rcx, rcx
jne 0x14001ab56
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rsi + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
mov qword [rsp + 0x38], rdx
lea rax, [rbp]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0xa0]
movaps xmm2, xmm7
mov rdx, rsi
call fcn.14004e580
mov qword [rbp + 0xe0], rdi
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x10], rax
movabs rax, 0x4d266a7daf66ecd0
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0xe0], r13
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xe0], r12
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1401a9580]
movups xmmword [rbp + 0x100], xmm1
lea rcx, [rbp + 0x100]
call fcn.1400280a0
mov r9d, eax
mov dword [rbp + 0xa0], 0x43010000
mov dword [rbp + 0xa4], 0x41700000
mov rcx, qword [r14 + 0x38]
mov rdx, qword [rcx + 0x60]
mov rcx, qword [rdx + 8]
test eax, 0xff000000
je 0x14001acc2
lea rax, [rbp + 0x10]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001ac52
lea r8, [rbp + 0x10]
add r8, rbx
lea rax, [rbp + 0x10]
cmp rax, r8
je 0x14001acc2
test rcx, rcx
jne 0x14001ac78
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rsi + 0x88]
movups xmmword [rbp + 0x100], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
mov qword [rsp + 0x38], r8
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0xa0]
movaps xmm2, xmm7
mov rdx, rsi
call fcn.14004e580
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, dword [0x1401a90e8]
addss xmm0, dword [0x1401a90c8]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
movss xmm1, dword [0x1401a90c4]
movss xmm2, dword [0x1401a90d4]
movaps xmm0, xmm1
unpcklps xmm0, xmm1
movq r8, xmm0
movss xmm1, dword [0x1401a910c]
unpcklps xmm1, xmm2
movq rdx, xmm1
mov rcx, qword [0x1401cd728]
call fcn.14005c8e0
call fcn.1400373d0
cmp byte [0x140204d64], 0
je 0x14001afae
movabs rdi, 0x694ebb232ac1e84a
call fcn.14000ef80
movss xmm1, dword [0x1401a9010]
cmp byte [0x140204d64], 0
je 0x14001ad8c
movaps xmm8, xmm1
mov rbx, qword [0x1401ceac8]
movss xmm0, dword [rbx + 0x18]
movss xmm7, dword [0x1401a8fdc]
mulss xmm0, xmm7
mulss xmm0, xmm8
addss xmm0, dword [0x140204810]
comiss xmm6, xmm0
ja 0x14001adbd
movaps xmm6, xmm1
minss xmm6, xmm0
movss dword [0x140204810], xmm6
mulss xmm6, dword [rbx + 0x37c8]
mov dword [rbp + 0xe0], r15d
movss xmm0, dword [rbx + 0x37c8]
movss dword [rbp + 0xe4], xmm0
lea rcx, [rbx + 0x4838]
lea rdx, [rbp + 0xe0]
call fcn.14003edd0
movss dword [rbx + 0x37c8], xmm6
movss xmm4, dword [0x1401cd6cc]
mulss xmm4, xmm7
movss xmm3, dword [0x1401cd6d0]
mulss xmm3, xmm7
mov rcx, qword [0x1401ceac8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm2, dword [rax + 0x24]
subss xmm2, dword [rax + 0x88]
subss xmm4, dword [0x1401a90b4]
addss xmm4, xmm1
subss xmm3, dword [0x1401a90b4]
addss xmm3, xmm2
movss dword [rax + 0x100], xmm4
movss dword [rax + 0x104], xmm3
mov byte [rax + 0x141], 1
movdqa xmm0, xmmword [0x1401a96e0]
movups xmmword [rbp + 0x100], xmm0
movabs rax, 0xb25bd066d642bcb0
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc0], rax
movabs rax, 0x3947090ead78c095
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xc8], rax
movabs rax, 0xde4f1686549f08d8
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xe0], rdi
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], r13
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xe0], r12
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x128], rax
movabs rax, 0xde4f1686549f08bd
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xe0], rdi
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm2, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xc0], ymm2
vmovss xmm3, dword [0x1401a9058]
vmovss dword [rsp + 0x20], xmm3
lea r9, [rbp + 0x100]
vmovss xmm2, dword [0x1401a902c]
vmovaps xmm1, xmm11
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.14000df00
mov ecx, 1
call fcn.140028340
call fcn.140017420
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.14012ed90
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm11, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x128], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x128], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140015520
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3