Function at 0x140008f60
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Log keystrokes via polling
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x550
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400d5080]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
xor r12d, r12d
lea rcx, [0x140121db0]
call fcn.140055dc0
lea rcx, [0x140121db0]
call fcn.140053210
xor ecx, ecx
test al, al
je 0x140009014
mov r9d, 0x40
xor r8d, r8d
lea rdx, str.Usted__ha_sido_Baneado_por_intento_de_Crackeo_
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov dword [rbp + 0x260], 0x50
mov dword [rbp + 0x264], 0x40
lea rax, [0x140002a80]
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], r12
mov qword [rbp + 0x278], r12
mov edx, 0x7f00
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x280], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x290], r12
lea rax, str.ImGui
mov qword [rbp + 0x298], rax
lea rax, str.Example
mov qword [rbp + 0x2a0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x2a8], rax
lea rcx, [rbp + 0x260]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xff]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
sub eax, 0xc3
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 0x1fe
mov dword [rsp + 0x30], 0x186
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
xor r8d, r8d
mov rdx, qword [rbp + 0x2a0]
mov ecx, 0x80088
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140121bd8], rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400c55f0]
movdqu xmmword [rbp + 0x360], xmm0
lea rdx, [rbp + 0x360]
mov rcx, qword [0x140121bd8]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
movups xmmword [0x1401220d8], xmm0
lea rdx, [0x1401220d8]
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x1a4], r12
mov qword [rbp + 0x1b8], 2
mov qword [rbp + 0x1d0], 2
mov qword [rbp + 0x190], r12
mov dword [rbp + 0x1a0], Ordinal_33
mov dword [rbp + 0x198], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x19c], r13d
mov dword [rbp + 0x1b4], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x140121bd8]
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1ac], r13
mov qword [rbp + 0x1c8], r13
mov dword [rbp + 0x220], 0xb000
mov dword [rbp + 0x224], 0xa000
lea rbx, [0x1401228a0]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x228]
mov qword [rsp + 0x50], rax
lea rdi, [0x140122160]
mov qword [rsp + 0x48], rdi
lea rsi, [0x140122158]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x1400092f1
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x228]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, ecx
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14000d3ed
call fcn.140002a10
mov edx, 0xa
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140121ce8]
test rbx, rbx
je 0x14000932f
inc dword [rbx + 0xf4]
mov ecx, 0x5e00
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x2d8], rax
lea rcx, [rsp + 0x60]
mov qword [rbp + 0x2d0], rcx
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140009363
xor edx, edx
mov rcx, rax
call fcn.14000e530
jmp 0x140009366
mov rax, r12
mov qword [0x140121ce8], rax
call fcn.1400120b0
test rbx, rbx
je 0x140009380
mov qword [0x140121ce8], rbx
jmp 0x140009387
mov rbx, qword [0x140121ce8]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov r14d, 0xffff
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
lea rdi, [0x1400d59f0]
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x78], 0x26a20
mov dword [rbp - 0x7c], 0x41b00000
lea rsi, [0x1400c4ca0]
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x78], 0x26a20
mov dword [rbp - 0x7c], 0x41b00000
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x78], 0x26a20
mov dword [rbp - 0x7c], 0x41900000
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
mov qword [0x1401228e0], rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x78], 0x26a20
mov dword [rbp - 0x7c], 0x41e00000
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
lea rax, [0x1401200d0]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], 0xb80
mov dword [rbp - 0x7c], 0x41a00000
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
lea rax, [0x14011d3f0]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], 0x824
mov dword [rbp - 0x7c], 0x41a00000
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov byte [rbp + 0x19c], 1
mov dword [rbp + 0x1a8], 3
mov dword [rbp + 0x1ac], r13d
mov dword [rbp + 0x1d4], 0x7f7fffff
mov dword [rbp + 0x1e0], 0x3f800000
mov word [rbp + 0x1e4], r14w
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
lea rax, [0x1400fc410]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], 0x20fe0
mov dword [rbp - 0x7c], 0x41700000
mov qword [rbp - 0x58], rsi
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
mov r15, rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
movups xmmword [rbp + 0x1b0], xmm2
movups xmmword [rbp + 0x1c0], xmm2
movups xmmword [rbp + 0x1d0], xmm2
movups xmmword [rbp + 0x1e0], xmm2
movups xmmword [rbp + 0x1f0], xmm2
movups xmmword [rbp + 0x200], xmm2
mov qword [rbp + 0x210], rax
mov dword [rbp + 0x1d4], 0x7f7fffff
mov word [rbp + 0x1e4], r14w
mov byte [rbp + 0x1b0], al
mov byte [rbp + 0x19c], al
mov eax, 5
mov dword [rbp + 0x1a8], eax
mov dword [rbp + 0x1ac], eax
mov dword [rbp + 0x1e0], 0x3f99999a
lea rcx, [0x1400c3e10]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm2
movups xmmword [rbp - 0x20], xmm2
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp - 0x10], xmm0
lea rax, [0x1400d5110]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], 0x8d8
mov dword [rbp - 0x7c], 0x41c00000
mov qword [rbp - 0x58], rcx
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140036000
xor ecx, ecx
call fcn.14002ef30
mov rsi, qword [0x140121bd8]
mov rdi, qword [0x140121ce8]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140009c8d
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140009c8d
mov rax, qword [0x140121ce8]
test rax, rax
je 0x140009b73
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140009ba0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov qword [rbx + 0x40], rax
jmp 0x140009ba3
mov rbx, r12
mov qword [rdi + 0x98], rbx
lea rax, [0x1400c51b8]
mov qword [rdi + 0x88], rax
or dword [rdi + 0xc], 6
mov qword [rbx], rsi
mov rax, qword [rbp + 0x2d8]
mov qword [rbx + 0x20], rax
mov rax, qword [rbp + 0x2d0]
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x28], 9
mov rax, qword [0x140121ce8]
mov rax, qword [rax + 0x48a8]
mov rcx, qword [rax]
mov qword [rcx + 0x28], rsi
mov byte [rbx + 0x2d], 1
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x2e0], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x2e8], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x2f0], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x2f8], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x300], rax
mov rdi, r12
nop
mov rcx, qword [rbp + rdi*8 + 0x2e0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140009c61
inc rdi
cmp rdi, 5
jl 0x140009c40
jmp 0x140009c8d
mov qword [rbx + 0x30], rsi
lea rdx, str.XInputGetCapabilities
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x38], rax
lea rdx, str.XInputGetState
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x40], rax
mov r14, qword [0x1401228a0]
mov rsi, qword [0x140122160]
mov rdi, qword [0x140121ce8]
test rdi, rdi
je 0x140009cad
inc dword [rdi + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140009cee
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140009cf1
mov rbx, r12
mov qword [rdi + 0xa0], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x90], rax
or dword [rdi + 0xc], 8
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x228], r12
mov qword [rbp + 0x250], r12
mov rax, qword [rsi]
lea r8, [rbp + 0x220]
lea rdx, [0x1400c5188]
mov rcx, rsi
call qword [rax]
test eax, eax
jne 0x140009d89
mov rcx, qword [rbp + 0x220]
mov rax, qword [rcx]
lea r8, [rbp + 0x228]
lea rdx, [0x1400c5198]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140009d89
mov rcx, qword [rbp + 0x228]
mov rax, qword [rcx]
lea r8, [rbp + 0x250]
lea rdx, [0x1400c51a8]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140009d89
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x250]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x220]
test rcx, rcx
je 0x140009d9b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x228]
test rcx, rcx
je 0x140009dad
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x140121ce8]
mov dword [rax + 0x381c], 0x40a00000
mov dword [rax + 0x3820], 0x40400000
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x37f0], 0x40000000
mov dword [rax + 0x3818], r12d
mov qword [rax + 0x37e8], r12
mov dword [rax + 0x3810], 0x41200000
mov dword [rax + 0x38a8], r12d
xor r14b, r14b
lea rsi, [0x140121be0]
movss xmm11, dword [0x1400c54dc]
xorps xmm10, xmm10
movss xmm9, dword [0x1400c5534]
movss xmm12, dword [0x1400c549c]
movss xmm13, dword [0x1400c5440]
movss xmm14, dword [0x1400c5538]
movss xmm15, dword [0x1400c55b0]
lea rbx, [0x140121bd0]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x190]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140009ed0
nop dword [rax + rax]
lea rcx, [rbp + 0x190]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x190]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx r14d, r14b
cmp dword [rbp + 0x198], 0x12
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x190]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140009e80
test r14b, r14b
jne 0x14000d119
mov rax, qword [0x140121ce8]
test rax, rax
je 0x140009ee5
mov rcx, qword [rax + 0xa0]
jmp 0x140009ee8
mov rcx, r12
cmp qword [rcx + 0x48], 0
jne 0x140009ef4
call fcn.14003bb50
call fcn.14003c980
call fcn.140014670
cmp byte [0x140121cfb], 0
jne 0x140009f94
mov qword [rbp + 0x2e0], 0xffffffffffffffff
mov qword [rbp + 0x2e8], 0xffffffffffffffff
mov qword [rbp + 0x2f0], 0xffffffffffffffff
mov qword [rbp + 0x2f8], 0xffffffffffffffff
mov dword [rbp + 0x300], 0xffffffff
mov qword [rbp + 0x304], 0xfffffffffffffffd
mov dword [rbp + 0x30c], 0xffffffff
mov qword [rbp + 0x310], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x2e0]
mov r8d, 0x24ad
lea rdx, [0x14011dc20]
mov rcx, qword [0x140122160]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov byte [0x140121cfb], 1
mov rax, qword [0x140121ce8]
mov dword [rax + 0x47c8], 0x43c30000
mov dword [rax + 0x47cc], 0x43ff0000
mov dword [rax + 0x47b0], r13d
or dword [rax + 0x47a8], 3
mov qword [rax + 0x47b8], r12
mov qword [rax + 0x47c0], r12
mov dword [rax + 0x47ac], r13d
xor edx, edx
mov r8d, 0x20ab
lea rcx, str.General
call fcn.140019cc0
call fcn.140002730
lea rdx, [0x1401220d8]
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [0x1401228a8]
mov rcx, qword [0x140121bc8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
mov rdi, qword [rax + 0x290]
movsd xmm6, qword [rax + 0x18]
movdqa xmm0, xmmword [0x1400c59c0]
movups xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call fcn.140010460
movaps xmm7, xmm6
shufps xmm7, xmm7, 0x55
movsd qword [rbp + 0x2b0], xmm6
movaps xmm1, xmm7
addss xmm1, dword [0x1400c557c]
movss xmm8, dword [rbp + 0x2b0]
movaps xmm0, xmm8
addss xmm0, dword [0x1400c5574]
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm1
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0x2b0]
mov rcx, rdi
call fcn.1400322e0
call fcn.1400054a0
mov rbx, qword [0x140121ce8]
movss xmm1, dword [rbx + 0x18]
mulss xmm1, dword [0x1400c5500]
cmp byte [0x140121ba4], 0
je 0x14000a0f0
movaps xmm0, xmm10
jmp 0x14000a0f8
movss xmm0, dword [0x1400c54b0]
movss xmm6, dword [0x140121ba8]
subss xmm0, xmm6
mulss xmm0, xmm1
addss xmm6, xmm0
movss dword [0x140121ba8], xmm6
lea rcx, [rbx + 0x4828]
movss xmm0, dword [rbx + 0x37e0]
mov dword [rbp + 0x180], r12d
movss dword [rbp + 0x184], xmm0
lea rdx, [rbp + 0x180]
call fcn.140026b80
movss dword [rbx + 0x37e0], xmm6
mov byte [0x140121cfc], 1
mov byte [0x140121ba4], 0
lea rcx, [0x140120dc0]
call fcn.140010460
addss xmm8, dword [0x1400c5588]
movss dword [rbp + 0x110], xmm8
addss xmm7, xmm9
movss dword [rbp + 0x114], xmm7
mov dword [rsp + 0x28], Ordinal_50
movss xmm0, dword [0x1400c54c4]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x2b0]
mov rcx, rdi
call fcn.1400322e0
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x48a8]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.140013c30
movss xmm0, dword [0x140122104]
ucomiss xmm0, xmm10
jp 0x14000a204
jne 0x14000a204
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140122104], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss xmm0, dword [0x140122104]
addss xmm0, dword [0x1400c5508]
comiss xmm1, xmm0
jbe 0x14000a2b8
movss xmm1, dword [0x1401220d0]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14000a277
comiss xmm12, xmm1
jbe 0x14000a268
movaps xmm0, xmm13
mov rax, qword [0x140121ce8]
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm14
addss xmm1, xmm0
movss dword [0x1401220d0], xmm1
comiss xmm1, xmm12
jb 0x14000a2ae
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x14000a2ae
comiss xmm1, xmm10
jbe 0x14000a2a1
movaps xmm0, xmm13
mov rax, qword [0x140121ce8]
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [0x1401220d0], xmm1
comiss xmm10, xmm1
jb 0x14000a2ae
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x140122104], 0
mov rcx, r15
call fcn.14001c9c0
movabs rax, 0x60ae70479de75d1f
mov qword [rbp + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
mov qword [rbp + 0x120], rax
movabs rax, 0xa66187af7518b9e7
mov qword [rbp + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
mov qword [rbp + 0x128], rax
movabs rdi, 0x25fd500ec7ac0853
mov qword [rbp + 0x2b0], rdi
mov rax, qword [rbp + 0x2b0]
mov qword [rbp + 0x370], rax
movabs rax, 0xa661defb3c4aeca4
mov qword [rbp + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x120], xmm0
mov rax, qword [0x140121ce8]
mov qword [rsp + 0x30], r12
lea rcx, [rbp + 0x120]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x1400c55a4]
movss xmm2, dword [rax + 0x3c20]
lea rdx, [rbp + 0xb8]
mov rcx, qword [rax + 0x3c18]
call fcn.140039c20
movss xmm0, dword [rbp + 0xb8]
addss xmm0, dword [0x1400c54a8]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xb8], xmm1
movss xmm0, dword [0x1400d5108]
movss xmm8, dword [0x1400c547c]
mulss xmm0, xmm8
mulss xmm1, xmm8
subss xmm0, xmm1
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x41980000
lea rcx, [0x140120d80]
call fcn.140010460
mov eax, eax
xorps xmm7, xmm7
cvtsi2ss xmm7, rax
movss dword [rbp + 0x130], xmm7
movss dword [rbp + 0x134], xmm7
movss dword [rbp + 0x138], xmm7
movss xmm6, dword [0x1401220d0]
movss dword [rbp + 0x13c], xmm6
lea rcx, [rbp + 0x130]
call fcn.140010460
mov ebx, eax
movss dword [rbp + 0x170], xmm7
movss dword [rbp + 0x174], xmm7
movss dword [rbp + 0x178], xmm7
movss dword [rbp + 0x17c], xmm6
lea rcx, [rbp + 0x170]
call fcn.140010460
mov edx, eax
movabs rax, 0x76dd3974acd94473
mov qword [rbp + 0x2b0], rax
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x140], rcx
movabs rax, 0xa618aa924e3f8fc1
mov qword [rbp + 0x2b0], rax
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x148], rcx
mov qword [rbp + 0x2b0], rdi
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x380], rcx
movabs rax, 0xa661defb3c4aeca4
mov qword [rbp + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp + 0x140], xmm0
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm9
mov r8d, ebx
lea rcx, [rbp + 0x140]
call fcn.14003fe40
call fcn.14001ca60
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14000acaa
cmp byte [0x1401228d8], 0
jne 0x14000b5a4
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm7, dword [0x1400c553c]
addss xmm1, xmm7
addss xmm0, dword [0x1400c5514]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
mov dword [rbp + 0xc8], 0x43b40000
mov dword [rbp + 0xcc], 0x43f50000
lea rdx, [rbp + 0xc8]
call fcn.1400170e0
mov rbx, qword [0x140121ce8]
mov qword [rsp + 0x30], r12
lea rax, str.LUKZI_SECURITY
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x1400c55a4]
movss xmm2, dword [rbx + 0x3c20]
lea rdx, [rbp + 0xd0]
mov rcx, qword [rbx + 0x3c18]
call fcn.140039c20
movss xmm0, dword [rbp + 0xd0]
addss xmm0, dword [0x1400c54a8]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xd0], xmm1
mulss xmm1, xmm8
movss xmm0, dword [0x1400c5560]
subss xmm0, xmm1
subss xmm0, xmm10
movss dword [rbp + 0xd8], xmm0
mov dword [rbp + 0xdc], 0x42340000
movss xmm0, dword [0x140122bb8]
movss dword [rbp + 0x150], xmm0
movss xmm1, dword [0x140122bbc]
movss dword [rbp + 0x154], xmm1
movss xmm0, dword [0x140122bc0]
movss dword [rbp + 0x158], xmm0
movss xmm6, dword [rbx + 0x37e0]
movaps xmm1, xmm6
mulss xmm1, dword [0x140122bc4]
movss dword [rbp + 0x15c], xmm1
lea rcx, [rbp + 0x150]
call fcn.140010460
mov ebx, eax
movss xmm0, dword [0x140122b98]
movss dword [rbp + 0x160], xmm0
movss xmm1, dword [0x140122b9c]
movss dword [rbp + 0x164], xmm1
movss xmm0, dword [0x140122ba0]
movss dword [rbp + 0x168], xmm0
mulss xmm6, dword [0x140122ba4]
movss dword [rbp + 0x16c], xmm6
lea rcx, [rbp + 0x160]
call fcn.140010460
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x20], rcx
movss xmm3, dword [0x1400c5558]
mov r8d, ebx
mov edx, eax
lea rcx, str._LOGIN_
call fcn.14003fe40
mov rcx, qword [0x140121ce8]
movss xmm0, dword [rcx + 0x3830]
mulss xmm0, xmm8
movss xmm3, dword [0x1400d510c]
mulss xmm3, xmm8
subss xmm3, dword [0x1400c5554]
addss xmm0, xmm0
subss xmm3, xmm0
movss xmm2, dword [0x1400d5108]
mulss xmm2, xmm8
subss xmm2, dword [0x1400c555c]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0xf8], xmm2
movss dword [rax + 0xfc], xmm3
mov byte [rax + 0x139], 1
call fcn.14001f9d0
mov dword [rbp + 0xe0], 0x438c0000
mov dword [rbp + 0xe4], 0x420c0000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_recv
lea rdi, [0x140121c60]
mov r8, rdi
lea rdx, str.Login
lea rcx, [0x1400be768]
call fcn.140046100
mov dword [rbp + 0xe8], 0x438c0000
mov dword [rbp + 0xec], 0x420c0000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rsi
lea rdx, str.Password
lea rcx, [0x1400be77c]
call fcn.140046100
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xb3], 0
jne 0x14000a87e
mov qword [rbp + 0xf0], 0
movaps xmm1, xmm15
lea rcx, [rbp + 0xf0]
call fcn.14001f490
mov rcx, qword [0x140121ce8]
movups xmm0, xmmword [rcx + 0x38b4]
movups xmmword [rbp + 0x2c0], xmm0
lea rdx, str.I_dont_have_an_account_
lea rcx, [rbp + 0x2c0]
call fcn.14003f630
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14001d5b0
test al, al
je 0x14000a9f2
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000a8ff
cmp byte [rcx + 0x48f2], 0
jne 0x14000a8ff
test byte [rcx + 0x4770], 4
jne 0x14000a9f2
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000a9f2
test eax, eax
jne 0x14000a9cc
jmp 0x14000a9f2
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000a9f2
cmp qword [rcx + 0x3ed8], r9
je 0x14000a91e
test al, al
jns 0x14000a9f2
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000a943
cmp eax, dword [rcx + 0x476c]
je 0x14000a943
cmp byte [rcx + 0x3f3d], 0
jne 0x14000a943
cmp eax, dword [r9 + 0x74]
jne 0x14000a9f2
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000a9ad
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000a9ad
cmp byte [rdx + 0xaf], 0
je 0x14000a9ad
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000a9ad
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000a982
bt r8d, 0x1a
jae 0x14000a9ad
cmp qword [rax + 0x370], rdx
je 0x14000a9ad
nop dword [rax + rax]
cmp rax, rdx
je 0x14000a9ad
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000a990
test dword [rcx + 0x4770], 0x100
je 0x14000a9f2
test byte [rcx + 0x4770], 4
jne 0x14000a9f2
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000a9cc
cmp byte [r9 + 0xb0], 0
jne 0x14000a9f2
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__chat.whatsapp.com_CQqghGNwLur0JMT6SlKa9T
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rbp + 0xf8], 0x438c0000
mov dword [rbp + 0xfc], 0x420c0000
lea rdx, [rbp + 0xf8]
call fcn.140040180
test al, al
je 0x14000ac98
lea rax, [rbp + 0x230]
mov qword [rbp + 0x2b0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r12
mov qword [rbp + 0x248], r12
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rsi + rbx], 0
jne 0x14000aa47
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x14000d46e
cmp rbx, 0xf
ja 0x14000aa9a
mov qword [rbp + 0x240], rbx
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rsi
lea rcx, [rbp + 0x230]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x230], 0
jmp 0x14000ab43
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
jbe 0x14000aab9
mov rsi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000aaea
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000aad4
mov rdi, r12
jmp 0x14000ab11
cmp rcx, 0x1000
jb 0x14000ab09
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d474
mov rcx, rax
call fcn.1400ab110
test rax, rax
je 0x14000d238
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000ab11
call fcn.1400ab110
mov rdi, rax
mov qword [rbp + 0x230], rdi
mov qword [rbp + 0x240], rbx
mov qword [rbp + 0x248], rsi
mov r8, rbx
lea rdx, [0x140121be0]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea rdi, [0x140121c60]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], r12
mov qword [rbp + 0x2f8], r12
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14000ab62
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x14000d480
cmp rbx, 0xf
ja 0x14000abb5
mov qword [rbp + 0x2f0], rbx
mov qword [rbp + 0x2f8], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp + 0x2e0]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x2e0], 0
jmp 0x14000ac57
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
jbe 0x14000abd4
mov rsi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000ac05
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000abef
mov rdi, r12
jmp 0x14000ac2c
cmp rcx, 0x1000
jb 0x14000ac24
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d47a
mov rcx, rax
call fcn.1400ab110
test rax, rax
je 0x14000d238
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000ac2c
call fcn.1400ab110
mov rdi, rax
mov qword [rbp + 0x2e0], rdi
mov qword [rbp + 0x2f0], rbx
mov qword [rbp + 0x2f8], rsi
mov r8, rbx
lea rdx, [0x140121c60]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea r8, [rbp + 0x230]
lea rdx, [rbp + 0x2e0]
lea rcx, [0x140121db0]
call fcn.140057580
lea rsi, [0x140121be0]
cmp byte [0x140121fc8], 0
je 0x14000ac91
mov byte [0x1401228d8], 1
mov dword [reloc.WS2_32.dll_accept], r12d
jmp 0x14000ac98
mov byte [0x1401228d8], 0
call fcn.14001fb00
call fcn.140017180
mov eax, dword [reloc.WS2_32.dll_accept]
jmp 0x14000acb2
movss xmm7, dword [0x1400c553c]
test eax, eax
jne 0x14000b5a4
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm7
addss xmm0, dword [0x1400c5514]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
mov dword [rbp + 0x100], 0x43aa0000
mov dword [rbp + 0x104], 0x43f50000
lea rdx, [rbp + 0x100]
call fcn.1400170e0
mov dword [rbp + 0x108], 0x43aa0000
mov dword [rbp + 0x10c], 0x435c0000
mov rbx, qword [0x140121ce8]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.AIM_MENU_X____SENSI_REYES
call fcn.14000fed0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000ad9e
lea r8, str.AIM_MENU_X____SENSI_REYES
mov edx, ntohs
mov ecx, eax
call fcn.140026510
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x108]
mov edx, edi
lea rcx, str.AIM_MENU_X____SENSI_REYES
call fcn.140041950
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm9
addss xmm0, xmm11
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f9d0
xor r9d, r9d
lea r8, str.Apply_In_Each_Match
lea rdx, [0x1401220f2]
lea rcx, str.Aimbot_Externall
call fcn.140042540
test al, al
je 0x14000aec4
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140007f50]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000d249
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x58], 0
je 0x14000d23f
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d23f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp + 0x50], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000af10
cmp byte [rcx + 0x48f2], 0
jne 0x14000af10
test byte [rcx + 0x4770], 4
jne 0x14000aff4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000aff4
test eax, eax
jne 0x14000afdc
jmp 0x14000aff4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000aff4
cmp qword [rcx + 0x3ed8], r9
je 0x14000af2f
test al, al
jns 0x14000aff4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000af54
cmp eax, dword [rcx + 0x476c]
je 0x14000af54
cmp byte [rcx + 0x3f3d], 0
jne 0x14000af54
cmp eax, dword [r9 + 0x74]
jne 0x14000aff4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000afbd
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000afbd
cmp byte [rdx + 0xaf], 0
je 0x14000afbd
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000afbd
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000af93
bt r8d, 0x1a
jae 0x14000afbd
cmp qword [rax + 0x370], rdx
je 0x14000afbd
nop dword [rax]
cmp rax, rdx
je 0x14000afbd
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000afa0
test dword [rcx + 0x4770], 0x100
je 0x14000aff4
test byte [rcx + 0x4770], 4
jne 0x14000aff4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000afdc
cmp byte [r9 + 0xb0], 0
jne 0x14000aff4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Each_Match_
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, [0x1400be848]
lea rdx, [0x1401220fd]
lea rcx, str.Aimbot_Obb_V1
call fcn.140042540
test al, al
je 0x14000b0a1
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x1400087c0]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14000d263
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x68], 0
je 0x14000d259
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d259
xorps xmm0, xmm0
movaps xmmword [rbp + 0x60], xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b0ed
cmp byte [rcx + 0x48f2], 0
jne 0x14000b0ed
test byte [rcx + 0x4770], 4
jne 0x14000b1d4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b1d4
test eax, eax
jne 0x14000b1bc
jmp 0x14000b1d4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b1d4
cmp qword [rcx + 0x3ed8], r9
je 0x14000b10c
test al, al
jns 0x14000b1d4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b131
cmp eax, dword [rcx + 0x476c]
je 0x14000b131
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b131
cmp eax, dword [r9 + 0x74]
jne 0x14000b1d4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b19d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b19d
cmp byte [rdx + 0xaf], 0
je 0x14000b19d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b19d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b170
bt r8d, 0x1a
jae 0x14000b19d
cmp qword [rax + 0x370], rdx
je 0x14000b19d
nop dword [rax]
cmp rax, rdx
je 0x14000b19d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b180
test dword [rcx + 0x4770], 0x100
je 0x14000b1d4
test byte [rcx + 0x4770], 4
jne 0x14000b1d4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b1bc
cmp byte [r9 + 0xb0], 0
jne 0x14000b1d4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Traning_Ground__
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.Apply_In_Traning_Ground
lea rdx, [0x1401220f3]
lea rcx, str.AIM_AWM_SCOPE
call fcn.140042540
test al, al
je 0x14000b281
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140007fa0]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x14000d27d
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x78], 0
je 0x14000d273
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d273
xorps xmm0, xmm0
movaps xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b2cd
cmp byte [rcx + 0x48f2], 0
jne 0x14000b2cd
test byte [rcx + 0x4770], 4
jne 0x14000b3b4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b3b4
test eax, eax
jne 0x14000b39c
jmp 0x14000b3b4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b3b4
cmp qword [rcx + 0x3ed8], r9
je 0x14000b2ec
test al, al
jns 0x14000b3b4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b311
cmp eax, dword [rcx + 0x476c]
je 0x14000b311
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b311
cmp eax, dword [r9 + 0x74]
jne 0x14000b3b4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b37d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b37d
cmp byte [rdx + 0xaf], 0
je 0x14000b37d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b37d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b350
bt r8d, 0x1a
jae 0x14000b37d
cmp qword [rax + 0x370], rdx
je 0x14000b37d
nop dword [rax]
cmp rax, rdx
je 0x14000b37d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b360
test dword [rcx + 0x4770], 0x100
je 0x14000b3b4
test byte [rcx + 0x4770], 4
jne 0x14000b3b4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b39c
cmp byte [r9 + 0xb0], 0
jne 0x14000b3b4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Traning_Ground_
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, [0x1400be848]
lea rdx, [0x1401220f0]
lea rcx, str.Awm_Fast_Switch
call fcn.140042540
test al, al
je 0x14000b473
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x1400086a0]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x14000d297
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x98], 0
je 0x14000d28d
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d28d
xorps xmm0, xmm0
movaps xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0x90], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b4bf
cmp byte [rcx + 0x48f2], 0
jne 0x14000b4bf
test byte [rcx + 0x4770], 4
jne 0x14000b5a4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b5a4
test eax, eax
jne 0x14000b58c
jmp 0x14000b5a4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b5a4
cmp qword [rcx + 0x3ed8], r9
je 0x14000b4de
test al, al
jns 0x14000b5a4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b503
cmp eax, dword [rcx + 0x476c]
je 0x14000b503
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b503
cmp eax, dword [r9 + 0x74]
jne 0x14000b5a4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b56d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b56d
cmp byte [rdx + 0xaf], 0
je 0x14000b56d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b56d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b542
bt r8d, 0x1a
jae 0x14000b56d
cmp qword [rax + 0x370], rdx
je 0x14000b56d
nop dword [rax + rax]
cmp rax, rdx
je 0x14000b56d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b550
test dword [rcx + 0x4770], 0x100
je 0x14000b5a4
test byte [rcx + 0x4770], 4
jne 0x14000b5a4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b58c
cmp byte [r9 + 0xb0], 0
jne 0x14000b5a4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Traning_Ground__
call fcn.14003f530
call fcn.14001c300
call fcn.14001fb00
call fcn.140017180
mov dword [rsp + 0x68], 0x43aa0000
mov dword [rsp + 0x6c], 0x435c0000
mov rbx, qword [0x140121ce8]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.VISUAL_MENU_X____SENSI_REYES
call fcn.14000fed0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000b618
lea r8, str.VISUAL_MENU_X____SENSI_REYES
mov edx, ntohs
mov ecx, eax
call fcn.140026510
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rsp + 0x68]
mov edx, edi
lea rcx, str.VISUAL_MENU_X____SENSI_REYES
call fcn.140041950
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm9
addss xmm0, xmm11
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f9d0
xor r9d, r9d
lea r8, str.IN_LOBBY_IN_GAME
lea rdx, [0x1401220fb]
lea rcx, str.CHAMS_MENU
call fcn.140042540
test al, al
je 0x14000b6b5
call fcn.140008b90
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b701
cmp byte [rcx + 0x48f2], 0
jne 0x14000b701
test byte [rcx + 0x4770], 4
jne 0x14000b7e4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b7e4
test eax, eax
jne 0x14000b7cc
jmp 0x14000b7e4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b7e4
cmp qword [rcx + 0x3ed8], r9
je 0x14000b720
test al, al
jns 0x14000b7e4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b745
cmp eax, dword [rcx + 0x476c]
je 0x14000b745
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b745
cmp eax, dword [r9 + 0x74]
jne 0x14000b7e4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b7ad
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b7ad
cmp byte [rdx + 0xaf], 0
je 0x14000b7ad
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b7ad
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b784
bt r8d, 0x1a
jae 0x14000b7ad
cmp qword [rax + 0x370], rdx
je 0x14000b7ad
nop dword [rax]
cmp rax, rdx
je 0x14000b7ad
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b790
test dword [rcx + 0x4770], 0x100
je 0x14000b7e4
test byte [rcx + 0x4770], 4
jne 0x14000b7e4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b7cc
cmp byte [r9 + 0xb0], 0
jne 0x14000b7e4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Lobby__
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.IN_LOBBY
lea rdx, [0x1401220f5]
lea rcx, str.Camara_Left_Safe
call fcn.140042540
test al, al
je 0x14000b891
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140008410]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14000d2b4
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x38], 0
je 0x14000d2aa
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d2aa
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b8dd
cmp byte [rcx + 0x48f2], 0
jne 0x14000b8dd
test byte [rcx + 0x4770], 4
jne 0x14000b9c4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b9c4
test eax, eax
jne 0x14000b9ac
jmp 0x14000b9c4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b9c4
cmp qword [rcx + 0x3ed8], r9
je 0x14000b8fc
test al, al
jns 0x14000b9c4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b921
cmp eax, dword [rcx + 0x476c]
je 0x14000b921
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b921
cmp eax, dword [r9 + 0x74]
jne 0x14000b9c4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b98d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b98d
cmp byte [rdx + 0xaf], 0
je 0x14000b98d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b98d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b960
bt r8d, 0x1a
jae 0x14000b98d
cmp qword [rax + 0x370], rdx
je 0x14000b98d
nop dword [rax]
cmp rax, rdx
je 0x14000b98d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b970
test dword [rcx + 0x4770], 0x100
je 0x14000b9c4
test byte [rcx + 0x4770], 4
jne 0x14000b9c4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b9ac
cmp byte [r9 + 0xb0], 0
jne 0x14000b9c4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Lobby__
call fcn.14003f530
call fcn.14001c300
call fcn.14001fb00
call fcn.140017180
mov dword [rbp + 0x2d0], 0x43aa0000
mov dword [rbp + 0x2d4], 0x435c0000
mov rbx, qword [0x140121ce8]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.POWER_X____LUKZI_SECURITY
call fcn.14000fed0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000ba3c
lea r8, str.POWER_X____LUKZI_SECURITY
mov edx, ntohs
mov ecx, eax
call fcn.140026510
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x2d0]
mov edx, edi
lea rcx, str.POWER_X____LUKZI_SECURITY
call fcn.140041950
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm0, xmm11
addss xmm1, xmm9
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f9d0
xor r9d, r9d
lea r8, str.BLOQUEA_EL_INTERNET_DEL_EMULADOR_
lea rdx, [0x140121bc6]
lea rcx, str.BLOCK_INTERNET_X
call fcn.140042540
test al, al
je 0x14000bbed
xor edx, edx
cmp byte [0x140121bc6], 1
jne 0x14000bb95
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
jmp 0x14000bbe5
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WinExec]
xor r9d, r9d
lea r8, str.IN_LOGIN_
lea rdx, [0x1401220ed]
lea rcx, str.FIX_DAMAGE_GIRL_X
call fcn.140042540
test al, al
je 0x14000bcac
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140008640]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14000d2ce
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0xa8], 0
je 0x14000d2c4
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d2c4
xorps xmm0, xmm0
movaps xmmword [rbp + 0xa0], xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000bcf8
cmp byte [rcx + 0x48f2], 0
jne 0x14000bcf8
test byte [rcx + 0x4770], 4
jne 0x14000bdd8
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000bdd8
test eax, eax
jne 0x14000bdc0
jmp 0x14000bdd8
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000bdd8
cmp qword [rcx + 0x3ed8], r9
je 0x14000bd17
test al, al
jns 0x14000bdd8
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000bd3c
cmp eax, dword [rcx + 0x476c]
je 0x14000bd3c
cmp byte [rcx + 0x3f3d], 0
jne 0x14000bd3c
cmp eax, dword [r9 + 0x74]
jne 0x14000bdd8
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000bda1
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000bda1
cmp byte [rdx + 0xaf], 0
je 0x14000bda1
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000bda1
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000bd7b
bt r8d, 0x1a
jae 0x14000bda1
cmp qword [rax + 0x370], rdx
je 0x14000bda1
cmp rax, rdx
je 0x14000bda1
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000bd84
test dword [rcx + 0x4770], 0x100
je 0x14000bdd8
test byte [rcx + 0x4770], 4
jne 0x14000bdd8
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000bdc0
cmp byte [r9 + 0xb0], 0
jne 0x14000bdd8
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Login__
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.IN_LOGIN_
lea rdx, [0x1401220e9]
lea rcx, str.Anticheat_X
call fcn.140042540
test al, al
je 0x14000be97
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140008820]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x14000d2eb
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x88], 0
je 0x14000d2e1
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d2e1
xorps xmm0, xmm0
movaps xmmword [rbp + 0x80], xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000bee3
cmp byte [rcx + 0x48f2], 0
jne 0x14000bee3
test byte [rcx + 0x4770], 4
jne 0x14000bfc4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000bfc4
test eax, eax
jne 0x14000bfac
jmp 0x14000bfc4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000bfc4
cmp qword [rcx + 0x3ed8], r9
je 0x14000bf02
test al, al
jns 0x14000bfc4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000bf27
cmp eax, dword [rcx + 0x476c]
je 0x14000bf27
cmp byte [rcx + 0x3f3d], 0
jne 0x14000bf27
cmp eax, dword [r9 + 0x74]
jne 0x14000bfc4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000bf8d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000bf8d
cmp byte [rdx + 0xaf], 0
je 0x14000bf8d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000bf8d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000bf66
bt r8d, 0x1a
jae 0x14000bf8d
cmp qword [rax + 0x370], rdx
je 0x14000bf8d
nop
cmp rax, rdx
je 0x14000bf8d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000bf70
test dword [rcx + 0x4770], 0x100
je 0x14000bfc4
test byte [rcx + 0x4770], 4
jne 0x14000bfc4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000bfac
cmp byte [r9 + 0xb0], 0
jne 0x14000bfc4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Login__
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.IN_LOGIN_
lea rdx, [0x1401220ec]
lea rcx, str.BYPASS_EMULATOR_X
call fcn.140042540
test al, al
je 0x14000c071
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140008460]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x14000d308
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x28], 0
je 0x14000d2fe
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d2fe
xorps xmm0, xmm0
movaps xmmword [rbp + 0x20], xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c0bd
cmp byte [rcx + 0x48f2], 0
jne 0x14000c0bd
test byte [rcx + 0x4770], 4
jne 0x14000c1a4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c1a4
test eax, eax
jne 0x14000c18c
jmp 0x14000c1a4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c1a4
cmp qword [rcx + 0x3ed8], r9
je 0x14000c0dc
test al, al
jns 0x14000c1a4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c101
cmp eax, dword [rcx + 0x476c]
je 0x14000c101
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c101
cmp eax, dword [r9 + 0x74]
jne 0x14000c1a4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c16d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c16d
cmp byte [rdx + 0xaf], 0
je 0x14000c16d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c16d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c140
bt r8d, 0x1a
jae 0x14000c16d
cmp qword [rax + 0x370], rdx
je 0x14000c16d
nop dword [rax]
cmp rax, rdx
je 0x14000c16d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c150
test dword [rcx + 0x4770], 0x100
je 0x14000c1a4
test byte [rcx + 0x4770], 4
jne 0x14000c1a4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c18c
cmp byte [r9 + 0xb0], 0
jne 0x14000c1a4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Login__
call fcn.14003f530
call fcn.14001c300
call fcn.14001fb00
call fcn.140017180
mov dword [rbp + 0x2d8], 0x43aa0000
mov dword [rbp + 0x2dc], 0x435c0000
mov rbx, qword [0x140121ce8]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.EXTERNAL_____LUKZI_SECURITY
call fcn.14000fed0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000c21c
lea r8, str.EXTERNAL_____LUKZI_SECURITY
mov edx, ntohs
mov ecx, eax
call fcn.140026510
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x2d8]
mov edx, edi
lea rcx, str.EXTERNAL_____LUKZI_SECURITY
call fcn.140041950
mov rcx, qword [0x140121ce8]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm9
addss xmm0, xmm11
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f9d0
xor r9d, r9d
lea r8, str.IN_Traning_
lea rdx, [0x1401220ee]
lea rcx, str.Fast_Reload
call fcn.140042540
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c2fe
cmp byte [rcx + 0x48f2], 0
jne 0x14000c2fe
test byte [rcx + 0x4770], 4
jne 0x14000c3e4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c3e4
test eax, eax
jne 0x14000c3cc
jmp 0x14000c3e4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c3e4
cmp qword [rcx + 0x3ed8], r9
je 0x14000c31d
test al, al
jns 0x14000c3e4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c342
cmp eax, dword [rcx + 0x476c]
je 0x14000c342
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c342
cmp eax, dword [r9 + 0x74]
jne 0x14000c3e4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c3ad
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c3ad
cmp byte [rdx + 0xaf], 0
je 0x14000c3ad
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c3ad
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c381
bt r8d, 0x1a
jae 0x14000c3ad
cmp qword [rax + 0x370], rdx
je 0x14000c3ad
nop word [rax + rax]
cmp rax, rdx
je 0x14000c3ad
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c390
test dword [rcx + 0x4770], 0x100
je 0x14000c3e4
test byte [rcx + 0x4770], 4
jne 0x14000c3e4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c3cc
cmp byte [r9 + 0xb0], 0
jne 0x14000c3e4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Traning__
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.IN_Traning_
lea rdx, [0x1401220ef]
lea rcx, str.No__Recoil
call fcn.140042540
test al, al
je 0x14000c491
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x1400084b0]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000d322
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x18], 0
je 0x14000d318
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d318
xorps xmm0, xmm0
movaps xmmword [rbp + 0x10], xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c4dd
cmp byte [rcx + 0x48f2], 0
jne 0x14000c4dd
test byte [rcx + 0x4770], 4
jne 0x14000c5c4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c5c4
test eax, eax
jne 0x14000c5ac
jmp 0x14000c5c4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c5c4
cmp qword [rcx + 0x3ed8], r9
je 0x14000c4fc
test al, al
jns 0x14000c5c4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c521
cmp eax, dword [rcx + 0x476c]
je 0x14000c521
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c521
cmp eax, dword [r9 + 0x74]
jne 0x14000c5c4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c58d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c58d
cmp byte [rdx + 0xaf], 0
je 0x14000c58d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c58d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c560
bt r8d, 0x1a
jae 0x14000c58d
cmp qword [rax + 0x370], rdx
je 0x14000c58d
nop dword [rax]
cmp rax, rdx
je 0x14000c58d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c570
test dword [rcx + 0x4770], 0x100
je 0x14000c5c4
test byte [rcx + 0x4770], 4
jne 0x14000c5c4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c5ac
cmp byte [r9 + 0xb0], 0
jne 0x14000c5c4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_in_Lobby__
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.IN_Lobby_
lea rdx, [0x1401220f9]
lea rcx, str.Speed_10x___Safe
call fcn.140042540
test al, al
je 0x14000c671
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x140008500]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14000d33c
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x48], 0
je 0x14000d332
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d332
xorps xmm0, xmm0
movaps xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x40], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c6bd
cmp byte [rcx + 0x48f2], 0
jne 0x14000c6bd
test byte [rcx + 0x4770], 4
jne 0x14000c7a4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c7a4
test eax, eax
jne 0x14000c78c
jmp 0x14000c7a4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c7a4
cmp qword [rcx + 0x3ed8], r9
je 0x14000c6dc
test al, al
jns 0x14000c7a4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c701
cmp eax, dword [rcx + 0x476c]
je 0x14000c701
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c701
cmp eax, dword [r9 + 0x74]
jne 0x14000c7a4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c76d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c76d
cmp byte [rdx + 0xaf], 0
je 0x14000c76d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c76d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c740
bt r8d, 0x1a
jae 0x14000c76d
cmp qword [rax + 0x370], rdx
je 0x14000c76d
nop dword [rax]
cmp rax, rdx
je 0x14000c76d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c750
test dword [rcx + 0x4770], 0x100
je 0x14000c7a4
test byte [rcx + 0x4770], 4
jne 0x14000c7a4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c78c
cmp byte [r9 + 0xb0], 0
jne 0x14000c7a4
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__DONT_USE_NOT_SAFE_____
call fcn.14003f530
call fcn.14001c300
xor r9d, r9d
lea r8, str.IN_Lobby_
lea rdx, [0x1401220fa]
lea rcx, str.Bypass_Wallhack
call fcn.140042540
test al, al
je 0x14000c851
mov ecx, 8
call fcn.1400ab110
lea rcx, [0x1400085f0]
mov qword [rax], rcx
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x14000d356
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 8], 0
je 0x14000d34c
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d34c
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movdqa xmmword [rbp], xmm0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c89d
cmp byte [rcx + 0x48f2], 0
jne 0x14000c89d
test byte [rcx + 0x4770], 4
jne 0x14000c984
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c984
test eax, eax
jne 0x14000c96c
jmp 0x14000c984
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c984
cmp qword [rcx + 0x3ed8], r9
je 0x14000c8bc
test al, al
jns 0x14000c984
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c8e1
cmp eax, dword [rcx + 0x476c]
je 0x14000c8e1
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c8e1
cmp eax, dword [r9 + 0x74]
jne 0x14000c984
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c94d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c94d
cmp byte [rdx + 0xaf], 0
je 0x14000c94d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c94d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c920
bt r8d, 0x1a
jae 0x14000c94d
cmp qword [rax + 0x370], rdx
je 0x14000c94d
nop dword [rax]
cmp rax, rdx
je 0x14000c94d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c930
test dword [rcx + 0x4770], 0x100
je 0x14000c984
test byte [rcx + 0x4770], 4
jne 0x14000c984
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c96c
cmp byte [r9 + 0xb0], 0
jne 0x14000c984
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_In_Lobby__
call fcn.14003f530
call fcn.14001c300
lea r9, [0x140122898]
lea r8, str.Enabled_in_Match
lea rdx, [0x140121bc2]
lea rcx, str.WallHack
call fcn.140042540
mov byte [0x140121bc0], al
mov ecx, dword [0x140122898]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000cb0c
cmp byte [0x140121ce0], 0
jne 0x14000cb13
mov byte [0x140121ce0], 1
cmp byte [0x140121bc3], 0
sete al
mov byte [0x140121bc3], al
mov rcx, r13
test al, al
je 0x14000ca7f
call fcn.1400ab110
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x328]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e220]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x320], rax
test rax, rax
je 0x14000d370
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x328], 0
je 0x14000d366
movaps xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d366
xorps xmm0, xmm0
movaps xmmword [rbp + 0x320], xmm0
movdqa xmmword [rbp + 0x320], xmm0
jmp 0x14000cb13
call fcn.1400ab110
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x338]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e220]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x330], rax
test rax, rax
je 0x14000d397
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x338], 0
je 0x14000d38d
movaps xmm0, xmmword [rbp + 0x330]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d383
xorps xmm0, xmm0
movaps xmmword [rbp + 0x330], xmm0
movdqa xmmword [rbp + 0x330], xmm0
jmp 0x14000cb13
mov byte [0x140121ce0], 0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000cb5f
cmp byte [rcx + 0x48f2], 0
jne 0x14000cb5f
test byte [rcx + 0x4770], 4
jne 0x14000cc44
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000cc44
test eax, eax
jne 0x14000cc2c
jmp 0x14000cc44
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000cc44
cmp qword [rcx + 0x3ed8], r9
je 0x14000cb7e
test al, al
jns 0x14000cc44
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000cba3
cmp eax, dword [rcx + 0x476c]
je 0x14000cba3
cmp byte [rcx + 0x3f3d], 0
jne 0x14000cba3
cmp eax, dword [r9 + 0x74]
jne 0x14000cc44
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000cc0d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000cc0d
cmp byte [rdx + 0xaf], 0
je 0x14000cc0d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000cc0d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000cbe2
bt r8d, 0x1a
jae 0x14000cc0d
cmp qword [rax + 0x370], rdx
je 0x14000cc0d
nop dword [rax + rax]
cmp rax, rdx
je 0x14000cc0d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000cbf0
test dword [rcx + 0x4770], 0x100
je 0x14000cc44
test byte [rcx + 0x4770], 4
jne 0x14000cc44
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000cc2c
cmp byte [r9 + 0xb0], 0
jne 0x14000cc44
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_In_Game__
call fcn.14003f530
call fcn.14001c300
lea r9, [0x1401220d4]
lea r8, str.Enabled_in_Match
lea rdx, [0x140121bc5]
lea rcx, str.Speed_Hack_On_Off
call fcn.140042540
mov byte [0x140121bc7], al
mov ecx, dword [0x1401220d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000cdcc
cmp byte [0x140121bc1], 0
jne 0x14000cdd3
mov byte [0x140121bc1], 1
cmp byte [0x140121bc4], 0
sete al
mov byte [0x140121bc4], al
mov rcx, r13
test al, al
je 0x14000cd3f
call fcn.1400ab110
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x348]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e250]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x340], rax
test rax, rax
je 0x14000d3b4
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x348], 0
je 0x14000d3aa
movaps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d3aa
xorps xmm0, xmm0
movaps xmmword [rbp + 0x340], xmm0
movdqa xmmword [rbp + 0x340], xmm0
jmp 0x14000cdd3
call fcn.1400ab110
mov qword [rbp + 0x2b0], rax
lea rcx, [rbp + 0x358]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e250]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x350], rax
test rax, rax
je 0x14000d3d1
mov qword [rbp + 0x2b0], r12
cmp dword [rbp + 0x358], 0
je 0x14000d3c7
movaps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d3c7
xorps xmm0, xmm0
movaps xmmword [rbp + 0x350], xmm0
movdqa xmmword [rbp + 0x350], xmm0
jmp 0x14000cdd3
mov byte [0x140121bc1], 0
mov rcx, qword [0x140121ce8]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000ce1f
cmp byte [rcx + 0x48f2], 0
jne 0x14000ce1f
test byte [rcx + 0x4770], 4
jne 0x14000cf04
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000cf04
test eax, eax
jne 0x14000ceec
jmp 0x14000cf04
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000cf04
cmp qword [rcx + 0x3ed8], r9
je 0x14000ce3e
test al, al
jns 0x14000cf04
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000ce63
cmp eax, dword [rcx + 0x476c]
je 0x14000ce63
cmp byte [rcx + 0x3f3d], 0
jne 0x14000ce63
cmp eax, dword [r9 + 0x74]
jne 0x14000cf04
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000cecd
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000cecd
cmp byte [rdx + 0xaf], 0
je 0x14000cecd
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000cecd
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000cea2
bt r8d, 0x1a
jae 0x14000cecd
cmp qword [rax + 0x370], rdx
je 0x14000cecd
nop dword [rax + rax]
cmp rax, rdx
je 0x14000cecd
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000ceb0
test dword [rcx + 0x4770], 0x100
je 0x14000cf04
test byte [rcx + 0x4770], 4
jne 0x14000cf04
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000ceec
cmp byte [r9 + 0xb0], 0
jne 0x14000cf04
xor ecx, ecx
call fcn.1400204c0
lea rcx, str.__Apply_In_Game__
call fcn.14003f530
call fcn.14001c300
call fcn.14001fb00
call fcn.140017180
call fcn.14001fb00
call fcn.140017180
mov ecx, r13d
call fcn.1400107c0
call fcn.1400021f0
call fcn.14001c300
mov rdi, qword [0x140121bd8]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14000cfa2
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000cf99
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp + 0x2c0], xmm0
mov dword [rbp + 0x230], reloc.WS2_32.dll_send
lea rcx, [rbp + 0x2c0]
mov qword [rbp + 0x238], rcx
mov dword [rbp + 0x240], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x230]
mov rcx, rdi
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000cfbf
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1400d5104]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000cfdc
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1400d5104]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14000d3e4
mov rax, qword [0x140121ce8]
movss xmm0, dword [rax + 0x18]
mulss xmm0, dword [0x1400c54f8]
mov ecx, dword [0x140120d00]
cmp ecx, 0xff
jg 0x14000d01f
cmp byte [reloc.WS2_32.dll_accept], 0
mov eax, Ordinal_301
jne 0x14000d022
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x140120d00], r8d
cmp r8d, 0xff
jle 0x14000d05f
mov dword [0x140120d00], 0xff
mov r8d, 0xff
xor edx, edx
mov r9d, 2
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, r12d
cmp dword [0x140120d00], r12d
mov eax, 5
cmovg edx, eax
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140016690
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
mov rcx, qword [0x1401228a0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140122150]
mov edx, r13d
call qword [rax + 0x108]
mov rcx, qword [0x1401228a0]
mov rax, qword [rcx]
lea r8, [rbp + 0x390]
mov rdx, qword [0x140122150]
call qword [rax + 0x190]
mov rax, qword [0x140121ce8]
mov rcx, qword [rax + 0x48a8]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r12
cmp byte [rax], r12b
cmovne rcx, rax
call fcn.14003b0e0
mov rcx, qword [0x140122158]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r13d
call qword [rax + 0x40]
jmp 0x140009e53
mov rdi, qword [0x140121ce8]
test rdi, rdi
je 0x14000d12e
mov rbx, qword [rdi + 0xa0]
jmp 0x14000d131
mov rbx, r12
call fcn.14003c090
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14000d145
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d153
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000d162
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rdi + 0x90], r12
mov qword [rdi + 0xa0], r12
mov rax, qword [0x140121ce8]
test rax, rax
je 0x14000d182
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140121ce8]
test rax, rax
je 0x14000d1a0
mov rbx, qword [rax + 0x98]
jmp 0x14000d1a3
mov rbx, r12
lea rdi, [rax + 8]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14000d1bd
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140121ce8]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
test rax, rax
je 0x14000d1d6
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140121ce8]
mov qword [0x140121ce8], rbx
call fcn.140012490
mov qword [0x140121ce8], r12
test rbx, rbx
je 0x14000d221
mov rcx, rbx
call fcn.140027740
mov rax, qword [0x140121ce8]
test rax, rax
je 0x14000d218
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140002990
mov rcx, qword [0x140121bd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x14000d3f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x68], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x78], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x98], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x38], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xa8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x88], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x18], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x328], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x338], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x348], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x358], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140002990
mov rdx, qword [rbp + 0x278]
mov rcx, qword [rbp + 0x2a0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.1400ab0f0
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400021b0
int3
call fcn.140001fa0
nop
call fcn.140001fa0
nop
call fcn.1400021b0
int3