Function at 0x140005510
Capabilities:
Allocate or change rwx memory
Create process on windows
Create thread
Execute command
Execute shellcode via indirect call
Inject thread
Query environment variable
Self delete
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x1300]
mov eax, 0x1400
call fcn.1400bce10
sub rsp, rax
movaps xmmword [rsp + 0x13f0], xmm7
mov rax, qword [0x1401f5bb8]
xor rax, rsp
mov qword [rbp + 0x12e0], rax
cmp byte [0x1401f64f0], 0
je 0x14000a397
mov qword [rsp + 0x78], 0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss xmm0, dword [0x14012301c]
mulss xmm0, dword [0x1400c0e04]
subss xmm7, xmm0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x140123018]
mulss xmm0, dword [0x1400c0e04]
subss xmm1, xmm0
movss dword [rbp - 0x80], xmm1
movss dword [rbp - 0x7c], xmm7
lea r8, [rsp + 0x78]
mov r12d, 2
mov edx, r12d
lea rcx, [rbp - 0x80]
call fcn.14002fd90
movss xmm0, dword [0x140123018]
movss dword [rbp - 0x78], xmm0
movss xmm1, dword [0x14012301c]
movss dword [rbp - 0x74], xmm1
xor edx, edx
lea rcx, [rbp - 0x78]
call fcn.14002fe30
lea r8d, [r12 + 0x29]
lea rdx, [0x1401f64f0]
mov rcx, qword [str.Drip_Client___Cracked_By_Device_777]
call fcn.14000f200
call fcn.140023b00
mov rbx, rax
lea rcx, [rbp + 0xb40]
call fcn.140023b30
lea rcx, [rbp + 0xb48]
call fcn.140023b50
call fcn.1400235d0
movaps xmm0, xmmword [0x1400c2710]
movups xmmword [rbp + 0x620], xmm0
lea rcx, [rbp + 0x620]
call fcn.140015420
movss xmm1, dword [rbp + 0xb44]
addss xmm1, dword [0x1400c2690]
movss xmm0, dword [rbp + 0xb48]
addss xmm0, dword [rbp + 0xb40]
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm1
mov dword [rsp + 0x28], 0xc0
movss xmm0, dword [0x1400c0db4]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0xb40]
mov rcx, rbx
call fcn.140039620
mov dword [rbp - 0x68], 0x41c80000
movss xmm1, dword [0x1400c26d4]
movss dword [rbp - 0x64], xmm1
lea rcx, [rbp - 0x68]
call fcn.14002fa50
xorps xmm0, xmm0
movups xmmword [rbp + 0x630], xmm0
movaps xmm1, xmmword [0x1400c2750]
movups xmmword [rbp + 0x640], xmm1
movss xmm7, dword [0x1400c0d94]
mov dword [rbp - 0x60], 0x3f800000
mov dword [rbp - 0x5c], 0x3f800000
mov qword [rbp - 0x58], 0
mov dword [rbp - 0x50], 0x431c0000
mov dword [rbp - 0x4c], 0x431c0000
lea rax, [rbp + 0x630]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x640]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x50]
mov rcx, qword [0x1401f6860]
call fcn.140050510
mov dword [rbp - 0x48], 0x43480000
movss xmm1, dword [0x1400c2680]
movss dword [rbp - 0x44], xmm1
lea rcx, [rbp - 0x48]
call fcn.14002fa50
call fcn.1400132e0
cmp dword [section..data], r12d
sete dl
lea rcx, str.Lite
call fcn.140002120
mov ecx, dword [section..data]
test al, al
cmovne ecx, r12d
mov dword [section..data], ecx
call fcn.140020870
mov eax, dword [section..data]
test eax, eax
jne 0x140005bb0
mov dword [rbp - 0x40], 0x41f00000
mov dword [rbp - 0x3c], 0x42960000
lea rcx, [rbp - 0x40]
call fcn.14002fa50
mov dword [rbp - 0x38], 0x432f0000
mov dword [rbp - 0x34], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x38]
lea rcx, str.cuzinhu1
call fcn.140011ee0
mov dword [rbp - 0x30], 0x3f800000
mov dword [rbp - 0x2c], 0x41200000
lea rcx, [rbp - 0x30]
call fcn.14002fa50
mov dword [rbp - 0x28], 0x40400000
mov dword [rbp - 0x24], 0x40400000
lea rdx, [rbp - 0x28]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp - 0x20], 0x40a00000
mov dword [rbp - 0x1c], 0x40a00000
lea rdx, [rbp - 0x20]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6870]
lea rcx, str.Aimbot___Head1
call fcn.1400015d0
mov byte [0x1401f6180], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp - 0x18], 0x40400000
mov dword [rbp - 0x14], 0x40400000
lea rdx, [rbp - 0x18]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp - 0x10], 0x40a00000
mov dword [rbp - 0xc], 0x40a00000
lea rdx, [rbp - 0x10]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6871]
lea rcx, str.Aimbot___Neck1
call fcn.1400015d0
mov byte [0x1401f6181], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp - 8], 0x40400000
mov dword [rbp - 4], 0x40400000
lea rdx, [rbp - 8]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp], 0x40a00000
mov dword [rbp + 4], 0x40a00000
lea rdx, [rbp]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6872]
lea rcx, str.Aimbot___Scope1
call fcn.1400015d0
mov byte [0x1401f6182], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 8], 0x40400000
mov dword [rbp + 0xc], 0x40400000
lea rdx, [rbp + 8]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp + 0x10], 0x40a00000
mov dword [rbp + 0x14], 0x40a00000
lea rdx, [rbp + 0x10]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6873]
lea rcx, str.Aimbot___Sniper1
call fcn.1400015d0
mov byte [0x1401f6183], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
call fcn.14001fb10
mov dword [rsp + 0x58], 0x41f00000
mov dword [rsp + 0x5c], 0x43610000
lea rcx, [rsp + 0x58]
call fcn.14002fa50
mov dword [rbp + 0x20], 0x43480000
mov dword [rbp + 0x24], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, str.cuzinhu2
call fcn.140011ee0
mov dword [rbp + 0x28], 0x3f800000
mov dword [rbp + 0x2c], 0x41200000
lea rcx, [rbp + 0x28]
call fcn.14002fa50
mov dword [rbp + 0x30], 0x40400000
mov dword [rbp + 0x34], 0x40400000
lea rdx, [rbp + 0x30]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp + 0x38], 0x40a00000
mov dword [rbp + 0x3c], 0x40a00000
lea rdx, [rbp + 0x38]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6874]
lea rcx, str.Bypass___Emulator1
call fcn.1400015d0
mov byte [0x1401f6184], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x40], 0x40400000
mov dword [rbp + 0x44], 0x40400000
lea rdx, [rbp + 0x40]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp + 0x48], 0x40a00000
mov dword [rbp + 0x4c], 0x40a00000
lea rdx, [rbp + 0x48]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6875]
lea rcx, str.Magic____Bullets1
call fcn.1400015d0
mov byte [0x1401f6185], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x50], 0x40400000
mov dword [rbp + 0x54], 0x40400000
lea rdx, [rbp + 0x50]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp + 0x58], 0x40a00000
mov dword [rbp + 0x5c], 0x40a00000
lea rdx, [rbp + 0x58]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6877]
lea rcx, str.Aimfov___Full1
call fcn.1400015d0
mov byte [0x1401f6187], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x60], 0x40400000
mov dword [rbp + 0x64], 0x40400000
lea rdx, [rbp + 0x60]
lea ecx, [r12 + 8]
call fcn.14002be10
mov dword [rbp + 0x68], 0x40a00000
mov dword [rbp + 0x6c], 0x40a00000
lea rdx, [rbp + 0x68]
lea ecx, [r12 + 0xc]
call fcn.14002be10
lea rdx, [0x1401f6876]
lea rcx, str.Aimfov___Legit1
call fcn.1400015d0
mov byte [0x1401f6186], al
lea ecx, [r12 - 1]
call fcn.14002b750
lea ecx, [r12 - 1]
call fcn.14002b750
call fcn.14001fb10
mov eax, dword [section..data]
cmp eax, 1
jne 0x140005ef3
mov dword [rbp + 0x70], 0x41f00000
mov dword [rbp + 0x74], 0x42960000
lea rcx, [rbp + 0x70]
call fcn.14002fa50
mov dword [rbp + 0x78], 0x432f0000
mov dword [rbp + 0x7c], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x78]
lea rcx, [0x1400c1360]
call fcn.140011ee0
mov dword [rbp + 0x80], 0x3f800000
mov dword [rbp + 0x84], 0x41200000
lea rcx, [rbp + 0x80]
call fcn.14002fa50
mov dword [rbp + 0x88], 0x40400000
mov dword [rbp + 0x8c], 0x40400000
lea rdx, [rbp + 0x88]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x90], 0x40a00000
mov dword [rbp + 0x94], 0x40a00000
lea rdx, [rbp + 0x90]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6878]
lea rcx, [0x1400c1370]
call fcn.1400015d0
mov byte [0x1401f6188], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x98], 0x40400000
mov dword [rbp + 0x9c], 0x40400000
lea rdx, [rbp + 0x98]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0xa0], 0x40a00000
mov dword [rbp + 0xa4], 0x40a00000
lea rdx, [rbp + 0xa0]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6879]
lea rcx, str.Fast_Fire
call fcn.1400015d0
mov byte [0x1401f6189], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0xa8], 0x40400000
mov dword [rbp + 0xac], 0x40400000
lea rdx, [rbp + 0xa8]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0xb0], 0x40a00000
mov dword [rbp + 0xb4], 0x40a00000
lea rdx, [rbp + 0xb0]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f687a]
lea rcx, str.Aimlock
call fcn.1400015d0
mov byte [0x1401f618a], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0xb8], 0x40400000
mov dword [rbp + 0xbc], 0x40400000
lea rdx, [rbp + 0xb8]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0xc0], 0x40a00000
mov dword [rbp + 0xc4], 0x40a00000
lea rdx, [rbp + 0xc0]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f687b]
lea rcx, str.GloWall_Skin
call fcn.1400015d0
mov byte [0x1401f618b], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov dword [rbp + 0xc8], 0x41f00000
mov dword [rbp + 0xcc], 0x43610000
lea rcx, [rbp + 0xc8]
call fcn.14002fa50
mov dword [rbp + 0xd0], 0x43480000
mov dword [rbp + 0xd4], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xd0]
lea rcx, str.cuzinho4
call fcn.140011ee0
mov dword [rbp + 0x18], 0x3f800000
mov dword [rbp + 0x1c], 0x41200000
lea rcx, [rbp + 0x18]
call fcn.14002fa50
mov dword [rbp + 0xd8], 0x40400000
mov dword [rbp + 0xdc], 0x40400000
lea rdx, [rbp + 0xd8]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0xe0], 0x40a00000
mov dword [rbp + 0xe4], 0x40a00000
lea rdx, [rbp + 0xe0]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f687c]
lea rcx, str.Lock_Head
call fcn.1400015d0
mov byte [0x1401f618c], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov eax, dword [section..data]
cmp eax, r12d
jne 0x14000663a
movss xmm0, dword [0x1400c26c0]
movss dword [rbp + 0xe8], xmm0
mov dword [rbp + 0xec], 0x42960000
lea rcx, [rbp + 0xe8]
call fcn.14002fa50
mov dword [rbp + 0xf0], 0x432f0000
mov dword [rbp + 0xf4], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xf0]
lea rcx, str.cuzinho4
call fcn.140011ee0
mov dword [rbp + 0xf8], 0x3f800000
mov dword [rbp + 0xfc], 0x41200000
lea rcx, [rbp + 0xf8]
call fcn.14002fa50
mov dword [rbp + 0x100], 0x40400000
mov dword [rbp + 0x104], 0x40400000
lea rdx, [rbp + 0x100]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x108], 0x40a00000
mov dword [rbp + 0x10c], 0x40a00000
lea rdx, [rbp + 0x108]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f687d]
lea rcx, str.Bala_Magica
call fcn.1400015d0
mov byte [0x1401f618d], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x110], 0x40400000
mov dword [rbp + 0x114], 0x40400000
lea rdx, [rbp + 0x110]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x118], 0x40a00000
mov dword [rbp + 0x11c], 0x40a00000
lea rdx, [rbp + 0x118]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6890]
lea rcx, [0x1400c13d4]
call fcn.1400015d0
mov byte [0x1401f61a0], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x120], 0x40400000
mov dword [rbp + 0x124], 0x40400000
lea rdx, [rbp + 0x120]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x128], 0x40a00000
mov dword [rbp + 0x12c], 0x40a00000
lea rdx, [rbp + 0x128]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f687f]
lea rcx, [0x1400c13dc]
call fcn.1400015d0
mov byte [0x1401f618f], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x130], 0x40400000
mov dword [rbp + 0x134], 0x40400000
lea rdx, [rbp + 0x130]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x138], 0x40a00000
mov dword [rbp + 0x13c], 0x40a00000
lea rdx, [rbp + 0x138]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6880]
lea rcx, [0x1400c13e8]
call fcn.1400015d0
mov byte [0x1401f6190], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov dword [rbp + 0x140], 0x41f00000
mov dword [rbp + 0x144], 0x43610000
lea rcx, [rbp + 0x140]
call fcn.14002fa50
mov dword [rbp + 0x148], 0x43480000
mov dword [rbp + 0x14c], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x148]
lea rcx, str.cuzinho5
call fcn.140011ee0
mov dword [rbp + 0x150], 0x3f800000
mov dword [rbp + 0x154], 0x41200000
lea rcx, [rbp + 0x150]
call fcn.14002fa50
mov dword [rbp + 0x158], 0x40400000
mov dword [rbp + 0x15c], 0x40400000
lea rdx, [rbp + 0x158]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x160], 0x40a00000
mov dword [rbp + 0x164], 0x40a00000
lea rdx, [rbp + 0x160]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6881]
lea rcx, [0x1400c1408]
call fcn.1400015d0
mov byte [0x1401f6191], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x168], 0x40400000
mov dword [rbp + 0x16c], 0x40400000
lea rdx, [rbp + 0x168]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x170], 0x40a00000
mov dword [rbp + 0x174], 0x40a00000
lea rdx, [rbp + 0x170]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6882]
lea rcx, [0x1400c1370]
call fcn.1400015d0
mov byte [0x1401f6192], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x178], 0x40400000
mov dword [rbp + 0x17c], 0x40400000
lea rdx, [rbp + 0x178]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x180], 0x40a00000
mov dword [rbp + 0x184], 0x40a00000
lea rdx, [rbp + 0x180]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6883]
lea rcx, [0x1400c1418]
call fcn.1400015d0
mov byte [0x1401f6193], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x188], 0x40400000
mov dword [rbp + 0x18c], 0x40400000
lea rdx, [rbp + 0x188]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x190], 0x40a00000
mov dword [rbp + 0x194], 0x40a00000
lea rdx, [rbp + 0x190]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6884]
lea rcx, [0x1400c1428]
call fcn.1400015d0
mov byte [0x1401f6194], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov dword [rbp + 0x198], 0x41f00000
mov dword [rbp + 0x19c], 0x42960000
lea rcx, [rbp + 0x198]
call fcn.14002fa50
mov dword [rbp + 0x1a0], 0x43480000
mov dword [rbp + 0x1a4], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1a0]
lea rcx, [0x1400c1438]
call fcn.140011ee0
mov dword [rbp + 0x1a8], 0x3f800000
mov dword [rbp + 0x1ac], 0x41200000
lea rcx, [rbp + 0x1a8]
call fcn.14002fa50
mov dword [rbp + 0x1b0], 0x40400000
mov dword [rbp + 0x1b4], 0x40400000
lea rdx, [rbp + 0x1b0]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x1b8], 0x40a00000
mov dword [rbp + 0x1bc], 0x40a00000
lea rdx, [rbp + 0x1b8]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6885]
lea rcx, str.Antena___Hand
call fcn.1400015d0
mov byte [0x1401f6195], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x1c0], 0x40400000
mov dword [rbp + 0x1c4], 0x40400000
lea rdx, [rbp + 0x1c0]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x1c8], 0x40a00000
mov dword [rbp + 0x1cc], 0x40a00000
lea rdx, [rbp + 0x1c8]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6886]
lea rcx, [0x1400c1458]
call fcn.1400015d0
mov byte [0x1401f6196], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x1d0], 0x40400000
mov dword [rbp + 0x1d4], 0x40400000
lea rdx, [rbp + 0x1d0]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x1d8], 0x40a00000
mov dword [rbp + 0x1dc], 0x40a00000
lea rdx, [rbp + 0x1d8]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6888]
lea rcx, str.Fast_Switch
call fcn.1400015d0
mov byte [0x1401f6198], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x1e0], 0x40400000
mov dword [rbp + 0x1e4], 0x40400000
lea rdx, [rbp + 0x1e0]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x1e8], 0x40a00000
mov dword [rbp + 0x1ec], 0x40a00000
lea rdx, [rbp + 0x1e8]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6887]
lea rcx, str.Antena_F___Hand
call fcn.1400015d0
mov byte [0x1401f6197], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov eax, dword [section..data]
cmp eax, 3
jne 0x140006b0d
mov dword [rbp + 0x1f0], 0x41f00000
mov dword [rbp + 0x1f4], 0x42960000
lea rcx, [rbp + 0x1f0]
call fcn.14002fa50
mov dword [rbp + 0x1f8], 0x432f0000
mov dword [rbp + 0x1fc], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1f8]
lea rcx, [0x1400c1488]
call fcn.140011ee0
mov dword [rbp + 0x200], 0x3f800000
mov dword [rbp + 0x204], 0x41200000
lea rcx, [rbp + 0x200]
call fcn.14002fa50
mov dword [rbp + 0x208], 0x40400000
mov dword [rbp + 0x20c], 0x40400000
lea rdx, [rbp + 0x208]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x210], 0x40a00000
mov dword [rbp + 0x214], 0x40a00000
lea rdx, [rbp + 0x210]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6889]
lea rcx, [0x1400c13d4]
call fcn.1400015d0
mov byte [0x1401f6199], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x218], 0x40400000
mov dword [rbp + 0x21c], 0x40400000
lea rdx, [rbp + 0x218]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x220], 0x40a00000
mov dword [rbp + 0x224], 0x40a00000
lea rdx, [rbp + 0x220]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f688a]
lea rcx, str.Fly_Underground
call fcn.1400015d0
mov byte [0x1401f619a], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x228], 0x40400000
mov dword [rbp + 0x22c], 0x40400000
lea rdx, [rbp + 0x228]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x230], 0x40a00000
mov dword [rbp + 0x234], 0x40a00000
lea rdx, [rbp + 0x230]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f688b]
lea rcx, str.Car_Speed
call fcn.1400015d0
mov byte [0x1401f619b], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x238], 0x40400000
mov dword [rbp + 0x23c], 0x40400000
lea rdx, [rbp + 0x238]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x240], 0x40a00000
mov dword [rbp + 0x244], 0x40a00000
lea rdx, [rbp + 0x240]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f688c]
lea rcx, str.Alok_Fix
call fcn.1400015d0
mov byte [0x1401f619c], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov dword [rbp + 0x248], 0x41f00000
mov dword [rbp + 0x24c], 0x43610000
lea rcx, [rbp + 0x248]
call fcn.14002fa50
mov dword [rbp + 0x250], 0x43480000
mov dword [rbp + 0x254], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x250]
lea rcx, [0x1400c14c8]
call fcn.140011ee0
mov dword [rbp + 0x258], 0x3f800000
mov dword [rbp + 0x25c], 0x41200000
lea rcx, [rbp + 0x258]
call fcn.14002fa50
mov dword [rbp + 0x260], 0x40400000
mov dword [rbp + 0x264], 0x40400000
lea rdx, [rbp + 0x260]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x268], 0x40a00000
mov dword [rbp + 0x26c], 0x40a00000
lea rdx, [rbp + 0x268]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f688d]
lea rcx, str.Running_Medkit
call fcn.1400015d0
mov byte [0x1401f619d], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x270], 0x40400000
mov dword [rbp + 0x274], 0x40400000
lea rdx, [rbp + 0x270]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x278], 0x40a00000
mov dword [rbp + 0x27c], 0x40a00000
lea rdx, [rbp + 0x278]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f688e]
lea rcx, str.Fast_Medkit
call fcn.1400015d0
mov byte [0x1401f619e], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
movaps xmm0, xmm7
call fcn.14002fad0
mov dword [rbp + 0x280], 0x40400000
mov dword [rbp + 0x284], 0x40400000
lea rdx, [rbp + 0x280]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x288], 0x40a00000
mov dword [rbp + 0x28c], 0x40a00000
lea rdx, [rbp + 0x288]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f688f]
lea rcx, str.Climb_Wall
call fcn.1400015d0
mov byte [0x1401f619f], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
mov dword [rbp + 0x290], 0x40400000
mov dword [rbp + 0x294], 0x40400000
lea rdx, [rbp + 0x290]
mov ecx, 0xa
call fcn.14002be10
mov dword [rbp + 0x298], 0x40a00000
mov dword [rbp + 0x29c], 0x40a00000
lea rdx, [rbp + 0x298]
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.14002be10
lea rdx, [0x1401f6890]
lea rcx, str.Ze_PeDraO
call fcn.1400015d0
mov byte [0x1401f61a0], al
mov ecx, 1
call fcn.14002b750
mov ecx, 1
call fcn.14002b750
call fcn.14001fb10
mov eax, dword [section..data]
xor r15d, r15d
cmp eax, 4
jne 0x140007428
mov dword [rbp + 0x2a0], 0x41f00000
mov dword [rbp + 0x2a4], 0x42960000
lea rcx, [rbp + 0x2a0]
call fcn.14002fa50
mov dword [rbp + 0x2a8], 0x43610000
mov dword [rbp + 0x2ac], 0x43160000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2a8]
lea rcx, str.cuzinhu112
call fcn.140011ee0
mov dword [rbp + 0x2b0], 0x3f800000
mov dword [rbp + 0x2b4], 0x41200000
lea rcx, [rbp + 0x2b0]
call fcn.14002fa50
mov dword [rbp + 0x2b8], 0x40400000
mov dword [rbp + 0x2bc], 0x40400000
lea rdx, [rbp + 0x2b8]
lea ecx, [r15 + 0xa]
call fcn.14002be10
mov dword [rsp + 0x60], 0x40a00000
mov dword [rsp + 0x64], 0x40a00000
lea rdx, [rsp + 0x60]
lea ecx, [r15 + 0xe]
call fcn.14002be10
lea rdx, [0x1401f6891]
lea rcx, str.Stream_Mode
call fcn.1400015d0
lea ecx, [r15 + 1]
call fcn.14002b750
lea ecx, [r15 + 1]
call fcn.14002b750
mov dword [rsp + 0x68], 0x42f00000
movss xmm0, dword [0x1400c2684]
movss dword [rsp + 0x6c], xmm0
lea rdx, [rsp + 0x68]
lea rcx, str.Destruct
call fcn.14004ef10
test al, al
je 0x14000737f
lea rcx, str.del__s__f__q__temp_.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q_C:WINDOWSPrefetch
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__S__Q_C:WINDOWSPrefetch
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q_C:Users_username_AppDataLocalCrashDumps_.dmp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.deltree__y_c:windows_tempor1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.deltree__y_c:windows_temp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.deltree__y_c:windows_tmp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.deltree__y_c:windows_ff.tmp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.deltree__y_c:windowshistory
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.deltree__y_c:windowscookies
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_Dusmsvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_pcasvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_dps
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_sysmain
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_bam
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__q_C:Users_username_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q_C:Users_username_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__q_C:Users_username_AppDataRoamingMicrosoftWindowsRecentCustomDestinations
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q_C:Users_username_AppDataRoamingMicrosoftWindowsRecentCustomDestinations
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_start_pcasvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_start_dps
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_start_sysmain
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_start_bam
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_deletejournal__n_c:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_deletejournal__n_d:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_deletejournal__n_e:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_deletejournal__n_f:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_deletejournal__d_c:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_createJournal_m__2147483648_a__1_C:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_createJournal_m__2147483648_a__1_D:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_createJournal_m__2147483648_a__1_E:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_usn_createJournal_m__2147483648_a__1_F:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__q_C:WindowsSystem32RenamedFiles.txt
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__q_C:WindowsSystem32DeletedFiles.txt
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSoftwareGuna___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWARE7___ZipFM___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSaveMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFileExts___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREWinRARArcHistory___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsageAppSwitched___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerRecentDocs___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRULegacy___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32FirstFolder___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32CIDSizeMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsShellBagMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsShellBags___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsShellBags___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsShellBagMRU___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsShellMuiCache___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession_ManagerAppCompatCache___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSession_ManagerAppCompatCache___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsageAppSwitched___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsageShowJumpView___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftDirectInput___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerTypedPaths___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionAppletsRegedit___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_LOCAL_MACHINESYSTEMMountedDevices___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_DELETE__HKEY_LOCAL_MACHINESYSTEMControlSet001Services_bamStateUserSettings___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xcc0], xmm0
movups xmmword [rbp + 0xcd0], xmm0
movups xmmword [rbp + 0xce0], xmm0
movups xmmword [rbp + 0xcf0], xmm0
movups xmmword [rbp + 0xd00], xmm0
movups xmmword [rbp + 0xd10], xmm0
mov qword [rbp + 0xd20], rax
movups xmmword [rbp + 0xb50], xmm0
mov qword [rbp + 0xb60], rax
mov r8d, 0x104
lea rdx, [rbp + 0xfc0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea r9, [rbp + 0xfc0]
lea r8, str.cmd.exe__C_ping_1.1.1.1__n_1__w_3000___Nul__Del__f__q___s_
mov edx, 0x208
lea rcx, [rbp + 0x10d0]
call fcn.14000b700
lea rax, [rbp + 0xb50]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xcc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x10d0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rbp + 0xb58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xb50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0xd30], WSAGetLastError
xorps xmm0, xmm0
movups xmmword [rbp + 0xd38], xmm0
movups xmmword [rbp + 0xd48], xmm0
movups xmmword [rbp + 0xd58], xmm0
movups xmmword [rbp + 0xd68], xmm0
movups xmmword [rbp + 0xd78], xmm0
movups xmmword [rbp + 0xd88], xmm0
lea rax, [rbp + 0xb68]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xd30]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000044
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.explorer.exe
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x1400072c8
mov rcx, qword [rbp + 0xb70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rbp + 0xb68]
test rsi, rsi
je 0x1400072c8
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x1b0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r14, rax
test rax, rax
jne 0x14000719d
mov rcx, rsi
jmp 0x1400072c2
lea rdi, [rax + 0x80]
lea rcx, [0x1400c1098]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
lea rdx, str.WaitForSingleObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xb80], rax
lea rdx, [0x1400c10c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xb88], rax
lea rdx, str.ExitProcess
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xb98], rax
lea rdx, str.DeleteFileA
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xb90], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
lea r9, [rbp + 0xba0]
mov r8, rsi
mov rdx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov r8d, 0x104
lea rdx, [rbp + 0xba8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rsp + 0x20], r15
mov r9d, 0x80
lea r8, [0x14000b570]
mov rdx, r14
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r15
mov r9d, 0x130
lea r8, [rbp + 0xb80]
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0xcb0], r15d
lea rax, [rbp + 0xcb0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rdi
mov r9, r14
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x1400072c8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x104
lea rdx, [rbp + 0xda0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14000737f
mov r8d, 0x104
lea rdx, [rbp + 0xda0]
lea rcx, [rbp + 0xda0]
call qword [sym.imp.KERNEL32.dll_GetShortPathNameA]
test eax, eax
je 0x14000737f
lea rdx, str._c_del
lea rcx, [rbp + 0xeb0]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rdx, [rbp + 0xda0]
lea rcx, [rbp + 0xeb0]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, str.____NUL
lea rcx, [rbp + 0xeb0]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov r8d, 0x104
lea rdx, [rbp + 0xda0]
lea rcx, str.ComSpec
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x14000737f
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xeb0]
lea r8, [rbp + 0xda0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm0, xmm7
call fcn.14002fad0
lea rcx, str.Hide_Process_Key:
call fcn.140058b90
movss xmm1, dword [0x1400c0dc0]
xorps xmm0, xmm0
call fcn.14002f130
movss xmm0, dword [0x1400c26a0]
call fcn.14002fad0
movaps xmm2, xmmword [0x1400c2740]
movups xmmword [rbp + 0x650], xmm2
lea rdx, str.INSERT
lea rcx, [rbp + 0x650]
call fcn.140058bc0
movaps xmm0, xmm7
call fcn.14002fad0
lea rcx, str.Close_Process:
call fcn.140058b90
movss xmm1, dword [0x1400c0dc0]
xorps xmm0, xmm0
call fcn.14002f130
movss xmm0, dword [0x1400c269c]
call fcn.14002fad0
movaps xmm0, xmmword [0x1400c2740]
movups xmmword [rbp + 0x660], xmm0
lea rdx, [0x1400c2578]
lea rcx, [rbp + 0x660]
call fcn.140058bc0
call fcn.14001fb10
movabs rsi, 0x140737488355327
cmp byte [0x1401f6180], r15b
je 0x14000765a
mov ecx, reloc.WS2_32.dll_recvfrom
cmp byte [0x1401f6870], r15b
je 0x140007558
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000747f
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x48005f
mov dword [rax + 0xc], 0x610065
mov byte [rax + 0x10], 0x64
jmp 0x140007482
mov rdi, r15
mov ecx, reloc.WS2_32.dll_gethostname
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400074fb
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x48005f
mov dword [rax + 0xc], 0x700069
mov dword [rax + 0x10], 0x3f3f3f73
mov dword [rax + 0x14], 0x3f3f3f3f
mov dword [rax + 0x18], 0x3f3f3f3f
mov dword [rax + 0x1c], 0x3f3f3f3f
mov dword [rax + 0x20], 0x3f3f3f3f
mov dword [rax + 0x24], 9
mov dword [rax + 0x28], 0x6f0062
mov dword [rax + 0x2c], 0x65006e
mov dword [rax + 0x30], 0x48005f
mov dword [rax + 0x34], 0x610065
mov byte [rax + 0x38], 0x64
jmp 0x1400074fe
mov rbx, r15
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x3f0], r15
mov qword [rbp + 0x3f8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Aimbot___Head
lea rcx, [rbp + 0x3e0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x3e0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x14000765a
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007586
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x48005f
mov dword [rax + 0xc], 0x700069
mov byte [rax + 0x10], reloc.WS2_32.dll_WSAStartup
jmp 0x140007589
mov rdi, r15
mov ecx, reloc.WS2_32.dll_gethostname
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007602
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x48005f
mov dword [rax + 0xc], 0x610065
mov dword [rax + 0x10], 0x3f3f3f64
mov dword [rax + 0x14], 0x3f3f3f3f
mov dword [rax + 0x18], 0x3f3f3f3f
mov dword [rax + 0x1c], 0x3f3f3f3f
mov dword [rax + 0x20], 0x3f3f3f3f
mov dword [rax + 0x24], 9
mov dword [rax + 0x28], 0x6f0062
mov dword [rax + 0x2c], 0x65006e
mov dword [rax + 0x30], 0x48005f
mov dword [rax + 0x34], 0x610065
mov byte [rax + 0x38], 0x64
jmp 0x140007605
mov rbx, r15
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x410], r15
mov qword [rbp + 0x418], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Aimbot___Head
lea rcx, [rbp + 0x400]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x400]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6181], 0
je 0x140007882
mov ecx, reloc.WS2_32.dll_recvfrom
cmp byte [0x1401f6871], 0
je 0x140007780
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400076a7
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x4e005f
mov dword [rax + 0xc], 0x630065
mov byte [rax + 0x10], 0x6b
jmp 0x1400076aa
mov rdi, r15
mov ecx, reloc.WS2_32.dll_gethostname
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007723
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x48005f
mov dword [rax + 0xc], 0x700069
mov dword [rax + 0x10], 0x3f3f3f73
mov dword [rax + 0x14], 0x3f3f3f3f
mov dword [rax + 0x18], 0x3f3f3f3f
mov dword [rax + 0x1c], 0x3f3f3f3f
mov dword [rax + 0x20], 0x3f3f3f3f
mov dword [rax + 0x24], 9
mov dword [rax + 0x28], 0x6f0062
mov dword [rax + 0x2c], 0x65006e
mov dword [rax + 0x30], 0x48005f
mov dword [rax + 0x34], 0x610065
mov byte [rax + 0x38], 0x64
jmp 0x140007726
mov rbx, r15
mov qword [rbp + 0x420], r15
mov qword [rbp + 0x430], r15
mov qword [rbp + 0x438], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Aimbot___Neck
lea rcx, [rbp + 0x420]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x420]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140007882
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400077ae
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x48005f
mov dword [rax + 0xc], 0x700069
mov byte [rax + 0x10], reloc.WS2_32.dll_WSAStartup
jmp 0x1400077b1
mov rdi, r15
mov ecx, reloc.WS2_32.dll_gethostname
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000782a
mov dword [rax], 0x6f0062
mov dword [rax + 4], 0x65006e
mov dword [rax + 8], 0x4e005f
mov dword [rax + 0xc], 0x630065
mov dword [rax + 0x10], 0x3f3f3f6b
mov dword [rax + 0x14], 0x3f3f3f3f
mov dword [rax + 0x18], 0x3f3f3f3f
mov dword [rax + 0x1c], 0x3f3f3f3f
mov dword [rax + 0x20], 0x3f3f3f3f
mov dword [rax + 0x24], 9
mov dword [rax + 0x28], 0x6f0062
mov dword [rax + 0x2c], 0x65006e
mov dword [rax + 0x30], 0x48005f
mov dword [rax + 0x34], 0x610065
mov byte [rax + 0x38], 0x64
jmp 0x14000782d
mov rbx, r15
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x450], r15
mov qword [rbp + 0x458], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Aimbot___Neck
lea rcx, [rbp + 0x440]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x440]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6182], 0
je 0x140007a26
mov ecx, reloc.WS2_32.dll_select
cmp byte [0x1401f6872], 0
je 0x140007966
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400078d1
mov dword [rax], 0x42a0
mov dword [rax + 4], 0xb1e03fc0
mov dword [rax + 8], 0xffff
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x1400078d4
mov rbx, r15
mov ecx, reloc.WS2_32.dll_select
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007909
mov dword [rax], 0x42a0
mov dword [rax + 4], 0x33333fc0
mov dword [rax + 8], 0x4013
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x14000790c
mov rdi, r15
mov qword [rbp + 0x460], r15
mov qword [rbp + 0x470], r15
mov qword [rbp + 0x478], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Aimbot___Scope
lea rcx, [rbp + 0x460]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x460]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140007a26
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007996
mov dword [rax], 0x42a0
mov dword [rax + 4], 0xb1e03fc0
mov dword [rax + 8], 0xffff
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x140007999
mov rbx, r15
mov ecx, reloc.WS2_32.dll_select
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400079ce
mov dword [rax], 0x42a0
mov dword [rax + 4], 0x33333fc0
mov dword [rax + 8], 0x4013
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x1400079d1
mov rdi, r15
mov qword [rbp + 0x480], r15
mov qword [rbp + 0x490], r15
mov qword [rbp + 0x498], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Aimbot___Scope
lea rcx, [rbp + 0x480]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x480]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6183], 0
je 0x140007c66
mov ecx, 0x34
cmp byte [0x1401f6873], 0
je 0x140007b58
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007a9c
mov qword [rax], 0
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140007a9f
mov rbx, r15
mov ecx, 0x34
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007afb
mov qword [rax], 1
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140007afe
mov rdi, r15
mov qword [rbp + 0x2c0], r15
mov qword [rbp + 0x2d0], r15
mov qword [rbp + 0x2d8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Aimbot___Sniper
lea rcx, [rbp + 0x2c0]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140007c66
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007baf
mov qword [rax], 1
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140007bb2
mov rbx, r15
mov ecx, 0x34
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007c0e
mov qword [rax], 0
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140007c11
mov rdi, r15
mov qword [rbp + 0x4c0], r15
mov qword [rbp + 0x4d0], r15
mov qword [rbp + 0x4d8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Aimbot___Sniper
lea rcx, [rbp + 0x4c0]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x4c0]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6184], 0
je 0x140007dc6
mov ecx, 7
cmp byte [0x1401f6874], 0
je 0x140007d28
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007ca4
mov dword [rax], 0xe59010
mov word [rax + 4], 0x20f0
mov byte [rax + 6], 0xe3
jmp 0x140007ca7
mov rdi, r15
mov ecx, 7
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007ccb
mov dword [rax], 0xae59010
mov word [rax + 4], 0xa000
mov byte [rax + 6], 0xe3
jmp 0x140007cce
mov rbx, r15
mov qword [rbp + 0x4e0], r15
mov qword [rbp + 0x4f0], r15
mov qword [rbp + 0x4f8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Bypass___Emulator
lea rcx, [rbp + 0x4e0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x4e0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140007dc6
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007d47
mov dword [rax], 0xe59010
mov word [rax + 4], 0x20f0
mov byte [rax + 6], 0xe3
jmp 0x140007d4a
mov rdi, r15
mov ecx, 7
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007d6e
mov dword [rax], 0xae59010
mov word [rax + 4], 0xa000
mov byte [rax + 6], 0xe3
jmp 0x140007d71
mov rbx, r15
mov qword [rbp + 0x500], r15
mov qword [rbp + 0x510], r15
mov qword [rbp + 0x518], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Bypass___Emulator
lea rcx, [rbp + 0x500]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x500]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6185], 0
je 0x140007f46
mov ecx, reloc.WS2_32.dll_listen
cmp byte [0x1401f6875], 0
je 0x140007e98
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007e0c
mov dword [rax], 0x80000000
mov dword [rax + 4], 0x2d48303f
mov dword [rax + 8], 0xa04001e9
mov byte [rax + 0xc], 0xe1
jmp 0x140007e0f
mov rbx, r15
mov ecx, reloc.WS2_32.dll_listen
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007e3b
mov dword [rax], 0x27c5ac00
mov dword [rax + 4], 0x2d483037
mov dword [rax + 8], 0xa04001e9
mov byte [rax + 0xc], 0xe1
jmp 0x140007e3e
mov rdi, r15
mov qword [rbp + 0x520], r15
mov qword [rbp + 0x530], r15
mov qword [rbp + 0x538], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Magic_Bullets
lea rcx, [rbp + 0x520]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x520]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140007f46
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007ebf
mov dword [rax], 0x27c5ac00
mov dword [rax + 4], 0x2d483037
mov dword [rax + 8], 0xa04001e9
mov byte [rax + 0xc], 0xe1
jmp 0x140007ec2
mov rbx, r15
mov ecx, reloc.WS2_32.dll_listen
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007eee
mov dword [rax], 0x80000000
mov dword [rax + 4], 0x2d48303f
mov dword [rax + 8], 0xa04001e9
mov byte [rax + 0xc], 0xe1
jmp 0x140007ef1
mov rdi, r15
mov qword [rbp + 0x540], r15
mov qword [rbp + 0x550], r15
mov qword [rbp + 0x558], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Magic_Bullets
lea rcx, [rbp + 0x540]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x540]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6187], 0
je 0x1400080f2
mov ecx, Ordinal_26
cmp byte [0x1401f6877], 0
je 0x14000802e
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140007f91
mov qword [rax], 0xffffffffffe17b80
mov qword [rax + 8], 0xffffffffffe17b80
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x140007f94
mov rbx, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140007fd1
mov dword [rax], 0x3f0147ae
mov dword [rax + 4], 0x3efd70a4
mov dword [rax + 8], 0x3f0147ae
mov dword [rax + 0xc], 0x3ee147ae
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x140007fd4
mov rdi, r15
mov qword [rbp + 0x560], r15
mov qword [rbp + 0x570], r15
mov qword [rbp + 0x578], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Aimfov___Full
lea rcx, [rbp + 0x560]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x560]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400080f2
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008066
mov dword [rax], 0x3f0147ae
mov dword [rax + 4], 0x3efd70a4
mov dword [rax + 8], 0x3f0147ae
mov dword [rax + 0xc], 0x3ee147ae
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x140008069
mov rbx, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000809a
mov qword [rax], 0xffffffffffe17b80
mov qword [rax + 8], 0xffffffffffe17b80
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x14000809d
mov rdi, r15
mov qword [rbp + 0x580], r15
mov qword [rbp + 0x590], r15
mov qword [rbp + 0x598], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Aimfov___Full
lea rcx, [rbp + 0x580]
call fcn.14000b820
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x580]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6186], 0
je 0x1400082e2
mov ecx, Ordinal_33
cmp byte [0x1401f6876], 0
je 0x1400081fc
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008154
mov dword [rax], 0xaeffffff
mov dword [rax + 4], 0x293ee147
mov dword [rax + 8], 0x143f0f5c
mov dword [rax + 0xc], 0xf6ffffff
mov qword [rax + 0x10], 0x3f1c28
mov dword [rax + 0x18], 0x3fc000
mov word [rax + 0x1c], 0
mov byte [rax + 0x1e], 0
jmp 0x140008157
mov rdi, r15
mov ecx, Ordinal_33
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000819f
mov dword [rax], 0xae3f0147
mov dword [rax + 4], 0x293ee147
mov dword [rax + 8], 0x143f0f5c
mov dword [rax + 0xc], 0xf63ec7ae
mov qword [rax + 0x10], 0x3f1c28
mov dword [rax + 0x18], 0x3fc000
mov word [rax + 0x1c], 0
mov byte [rax + 0x1e], 0
jmp 0x1400081a2
mov rbx, r15
mov qword [rbp + 0x5a0], r15
mov qword [rbp + 0x5b0], r15
mov qword [rbp + 0x5b8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Aimfov___Legit
lea rcx, [rbp + 0x5a0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x5a0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400082e2
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000823f
mov dword [rax], 0xae3f0147
mov dword [rax + 4], 0x293ee147
mov dword [rax + 8], 0x143f0f5c
mov dword [rax + 0xc], 0xf63ec7ae
mov qword [rax + 0x10], 0x3f1c28
mov dword [rax + 0x18], 0x3fc000
mov word [rax + 0x1c], 0
mov byte [rax + 0x1e], 0
jmp 0x140008242
mov rdi, r15
mov ecx, Ordinal_33
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000828a
mov dword [rax], 0xaeffffff
mov dword [rax + 4], 0x293ee147
mov dword [rax + 8], 0x143f0f5c
mov dword [rax + 0xc], 0xf6ffffff
mov qword [rax + 0x10], 0x3f1c28
mov dword [rax + 0x18], 0x3fc000
mov word [rax + 0x1c], 0
mov byte [rax + 0x1e], 0
jmp 0x14000828d
mov rbx, r15
mov qword [rbp + 0x5c0], r15
mov qword [rbp + 0x5d0], r15
mov qword [rbp + 0x5d8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Aimfov___Legit
lea rcx, [rbp + 0x5c0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x5c0]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6188], 0
je 0x1400084ce
mov ecx, reloc.WLDAP32.dll_Ordinal_27
cmp byte [0x1401f6878], 0
je 0x1400083ea
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008343
mov dword [rax], 0xed9f0a03
mov dword [rax + 4], 0xee010a10
mov dword [rax + 8], 0xee810a00
mov dword [rax + 0xc], 0xee100a10
mov dword [rax + 0x10], 0xe8bd8c10
mov dword [rax + 0x14], 0
mov word [rax + 0x18], 0x48f0
mov byte [rax + 0x1a], reloc.WLDAP32.dll_Ordinal_45
jmp 0x140008346
mov rdi, r15
mov ecx, reloc.WLDAP32.dll_Ordinal_27
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000838d
mov dword [rax], 0xed9f0a03
mov dword [rax + 4], 0xee010a10
mov dword [rax + 8], 0xee810a00
mov dword [rax + 0xc], 0xee100a10
mov dword [rax + 0x10], 0xe8bd8c10
mov dword [rax + 0x14], 0x447a0000
mov word [rax + 0x18], 0x48f0
mov byte [rax + 0x1a], reloc.WLDAP32.dll_Ordinal_45
jmp 0x140008390
mov rbx, r15
mov qword [rbp + 0x5e0], r15
mov qword [rbp + 0x5f0], r15
mov qword [rbp + 0x5f8], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, [0x1400c1370]
lea rcx, [rbp + 0x5e0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x5e0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400084ce
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000842c
mov dword [rax], 0xed9f0a03
mov dword [rax + 4], 0xee010a10
mov dword [rax + 8], 0xee810a00
mov dword [rax + 0xc], 0xee100a10
mov dword [rax + 0x10], 0xe8bd8c10
mov dword [rax + 0x14], 0x447a0000
mov word [rax + 0x18], 0x48f0
mov byte [rax + 0x1a], reloc.WLDAP32.dll_Ordinal_45
jmp 0x14000842f
mov rdi, r15
mov ecx, reloc.WLDAP32.dll_Ordinal_27
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008476
mov dword [rax], 0xed9f0a03
mov dword [rax + 4], 0xee010a10
mov dword [rax + 8], 0xee810a00
mov dword [rax + 0xc], 0xee100a10
mov dword [rax + 0x10], 0xe8bd8c10
mov dword [rax + 0x14], 0
mov word [rax + 0x18], 0x48f0
mov byte [rax + 0x1a], reloc.WLDAP32.dll_Ordinal_45
jmp 0x140008479
mov rbx, r15
mov qword [rbp + 0x600], r15
mov qword [rbp + 0x610], r15
mov qword [rbp + 0x618], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, [0x1400c1370]
lea rcx, [rbp + 0x600]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x600]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6189], 0
je 0x140008606
mov ecx, 4
cmp byte [0x1401f6879], 0
je 0x14000857c
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008502
mov dword [rax], 0xbf800000
jmp 0x140008505
mov rdi, r15
mov ecx, 4
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000851f
mov dword [rax], 0x3e4ccccd
jmp 0x140008522
mov rbx, r15
mov qword [rbp + 0x2e0], r15
mov qword [rbp + 0x2f0], r15
mov qword [rbp + 0x2f8], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, str.Fast_Fire
lea rcx, [rbp + 0x2e0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x2e0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140008606
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008591
mov dword [rax], 0x3e4ccccd
jmp 0x140008594
mov rdi, r15
mov ecx, 4
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400085ae
mov dword [rax], 0xbf800000
jmp 0x1400085b1
mov rbx, r15
mov qword [rbp + 0x300], r15
mov qword [rbp + 0x310], r15
mov qword [rbp + 0x318], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, str.Fast_Fire
lea rcx, [rbp + 0x300]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x300]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f618a], 0
je 0x14000875a
mov ecx, 8
cmp byte [0x1401f687a], 0
je 0x1400086c2
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008641
mov dword [rax], 0xe92d4c70
mov dword [rax + 4], 0xe18db010
jmp 0x140008644
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008665
mov dword [rax], 0x464c457f
mov dword [rax + 4], 0x10101
jmp 0x140008668
mov rbx, r15
mov qword [rbp + 0x320], r15
mov qword [rbp + 0x330], r15
mov qword [rbp + 0x338], reloc.WS2_32.dll_ntohs
mov r8d, 7
lea rdx, str.Aimlock
lea rcx, [rbp + 0x320]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x320]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x14000875a
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400086de
mov dword [rax], 0x464c457f
mov dword [rax + 4], 0x10101
jmp 0x1400086e1
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008702
mov dword [rax], 0xe92d4c70
mov dword [rax + 4], 0xe18db010
jmp 0x140008705
mov rbx, r15
mov qword [rbp + 0x340], r15
mov qword [rbp + 0x350], r15
mov qword [rbp + 0x358], reloc.WS2_32.dll_ntohs
mov r8d, 7
lea rdx, str.Aimlock
lea rcx, [rbp + 0x340]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x340]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f618b], 0
je 0x1400088ae
mov ecx, 8
cmp byte [0x1401f687b], 0
je 0x140008816
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008795
mov dword [rax], 0xbeac8844
mov dword [rax + 4], 0xbf1e07c9
jmp 0x140008798
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400087b9
mov dword [rax], 0x3f8147ae
mov dword [rax + 4], 0x3f8147ae
jmp 0x1400087bc
mov rbx, r15
mov qword [rbp + 0x360], r15
mov qword [rbp + 0x370], r15
mov qword [rbp + 0x378], reloc.WS2_32.dll_ntohs
mov r8d, 8
lea rdx, str.Glo_Wall
lea rcx, [rbp + 0x360]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x360]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400088ae
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008832
mov dword [rax], 0x3f8147ae
mov dword [rax + 4], 0x3f8147ae
jmp 0x140008835
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008856
mov dword [rax], 0xbeac8844
mov dword [rax + 4], 0xbf1e07c9
jmp 0x140008859
mov rbx, r15
mov qword [rbp + 0x380], r15
mov qword [rbp + 0x390], r15
mov qword [rbp + 0x398], reloc.WS2_32.dll_ntohs
mov r8d, 8
lea rdx, str.Glo_Wall
lea rcx, [rbp + 0x380]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x380]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f618c], 0
je 0x140008a02
mov ecx, 8
cmp byte [0x1401f687c], 0
je 0x14000896a
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400088e9
mov dword [rax], 0x464c457f
mov dword [rax + 4], 0x10101
jmp 0x1400088ec
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000890d
mov dword [rax], 0xe92d4c70
mov dword [rax + 4], 0xe18db010
jmp 0x140008910
mov rbx, r15
mov qword [rbp + 0x3a0], r15
mov qword [rbp + 0x3b0], r15
mov qword [rbp + 0x3b8], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, str.Lock_Head
lea rcx, [rbp + 0x3a0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x3a0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140008a02
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008986
mov dword [rax], 0x464c457f
mov dword [rax + 4], 0x10101
jmp 0x140008989
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400089aa
mov dword [rax], 0xe92d4c70
mov dword [rax + 4], 0xe18db010
jmp 0x1400089ad
mov rbx, r15
mov qword [rbp + 0x3c0], r15
mov qword [rbp + 0x3d0], r15
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, str.Lock_Head
lea rcx, [rbp + 0x3c0]
call fcn.14000b820
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x3c0]
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6195], 0
je 0x140008b23
cmp byte [0x1401f6885], 0
je 0x140008ab1
mov rcx, r12
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008a33
mov word [rax], 0x437a
jmp 0x140008a36
mov rdi, r15
mov ecx, 0xa
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008a5d
mov dword [rax], 0xcd9d3f80
mov dword [rax + 4], 0xc0533e7e
mov word [rax + 8], 0x3f77
jmp 0x140008a60
mov rbx, r15
mov qword [rbp + 0x4a0], r15
mov qword [rbp + 0x4b0], r15
mov qword [rbp + 0x4b8], reloc.WS2_32.dll_ntohs
lea rdx, str.Antena____Hand
lea rcx, [rbp + 0x4a0]
call fcn.14000b800
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x4a0]
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140008b23
mov ecx, 3
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008ace
mov word [rax], 0x3f80
mov byte [rax + 2], 0x9d
jmp 0x140008ad1
mov rdi, r15
mov ecx, 3
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008aee
mov word [rax], 0x437a
mov byte [rax + 2], 0x9d
jmp 0x140008af1
mov rbx, r15
lea rdx, str.Antena____Hand
lea rcx, [rbp + 0x770]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6197], 0
je 0x140008c41
cmp byte [0x1401f6887], 0
je 0x140008bbf
mov rcx, r12
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008b54
mov word [rax], 0x437a
jmp 0x140008b57
mov rdi, r15
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008b85
mov dword [rax], 0xf2313f80
mov dword [rax + 4], 0x55603e99
mov dword [rax + 8], 0x3985bf6d
mov word [rax + 0xc], 0x3e65
jmp 0x140008b88
mov rbx, r15
lea rdx, str.Antena_Female___Hand
lea rcx, [rbp + 0x790]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140008c41
mov ecx, 9
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008be4
mov dword [rax], 0x3ecbee53
mov dword [rax + 4], 0x3f800000
mov byte [rax + 8], Ordinal_50
jmp 0x140008be7
mov rdi, r15
mov ecx, 9
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008c0c
mov dword [rax], 0x3ecbee53
mov dword [rax + 4], 0x437a0000
mov byte [rax + 8], Ordinal_50
jmp 0x140008c0f
mov rbx, r15
lea rdx, str.Antena_Female___Hand
lea rcx, [rbp + 0x7b0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6196], 0
je 0x140008d70
cmp byte [0x1401f6886], 0
je 0x140008ce8
mov ecx, 8
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008c7c
mov dword [rax], 0xe3440080
mov dword [rax + 4], 0xe12eff1e
jmp 0x140008c7f
mov rdi, r15
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008cae
mov dword [rax], 0xe92d4c70
mov dword [rax + 4], 0xe28db010
mov dword [rax + 8], 0xe1a04001
mov dword [rax + 0xc], 0xe1a05000
jmp 0x140008cb1
mov rbx, r15
lea rdx, [0x1400c1458]
lea rcx, [rbp + 0x7d0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140008d70
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008d17
mov dword [rax], 0xe92d4c70
mov dword [rax + 4], 0xe28db010
mov dword [rax + 8], 0xe1a04001
mov dword [rax + 0xc], 0xe1a05000
jmp 0x140008d1a
mov rbx, r15
mov ecx, 8
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008d3b
mov dword [rax], 0xe3440080
mov dword [rax + 4], 0xe12eff1e
jmp 0x140008d3e
mov rdi, r15
lea rdx, [0x1400c1458]
lea rcx, [rbp + 0x7f0]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6198], 0
je 0x140008ee9
cmp byte [0x1401f6888], 0
je 0x140008e3c
mov ecx, 8
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008dab
mov dword [rax], 0x3db851ec
mov dword [rax + 4], 0x3cf5c28f
jmp 0x140008dae
mov rdi, r15
mov ecx, Ordinal_46
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008e02
mov dword [rax], 0x3f3f3f3f
mov qword [rax + 4], 0x3e800000
mov dword [rax + 0xc], 0x3f3f3f3f
mov dword [rax + 0x10], 0x3f3f3f3f
mov dword [rax + 0x14], 0x3f3f3f3f
mov dword [rax + 0x18], 0x3f3f3f3f
mov qword [rax + 0x1c], 0x3f3f3f3f
mov dword [rax + 0x24], 0
mov dword [rax + 0x28], 0x3f800000
jmp 0x140008e05
mov rbx, r15
lea rdx, str.Fast_Switch
lea rcx, [rbp + 0x810]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140008ee9
mov ecx, Ordinal_46
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008e90
mov dword [rax], 0x3f3f3f3f
mov qword [rax + 4], 0x3e800000
mov dword [rax + 0xc], 0x3f3f3f3f
mov dword [rax + 0x10], 0x3f3f3f3f
mov dword [rax + 0x14], 0x3f3f3f3f
mov dword [rax + 0x18], 0x3f3f3f3f
mov qword [rax + 0x1c], 0x3f3f3f3f
mov dword [rax + 0x24], 0
mov dword [rax + 0x28], 0x3f800000
jmp 0x140008e93
mov rbx, r15
mov ecx, 8
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008eb4
mov dword [rax], 0x3db851ec
mov dword [rax + 4], 0x3cf5c28f
jmp 0x140008eb7
mov rdi, r15
lea rdx, str.Fast_Switch
lea rcx, [rbp + 0x830]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6191], 0
je 0x1400090a3
cmp byte [0x1401f6881], 0
je 0x140008fb3
mov ecx, 1
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140008f1a
mov byte [rax], 0
jmp 0x140008f1d
mov rdi, r15
mov ecx, 0x34
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140008f79
mov qword [rax], 1
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140008f7c
mov rbx, r15
lea rdx, str.Aimbot___Sniper
lea rcx, [rbp + 0x850]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400090a3
mov ecx, 0x34
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000900f
mov qword [rax], 1
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140009012
mov rdi, r15
mov ecx, 0x34
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000906e
mov qword [rax], 0
mov dword [rax + 8], 0
mov dword [rax + 0xc], 0x3f3f3f3f
mov qword [rax + 0x10], reloc.WLDAP32.dll_Ordinal_200
mov qword [rax + 0x18], 0
mov dword [rax + 0x20], 0
mov dword [rax + 0x24], 5
mov dword [rax + 0x28], 1
mov dword [rax + 0x2c], 0x3fb5c28f
mov dword [rax + 0x30], 1
jmp 0x140009071
mov rbx, r15
lea rdx, str.Aimbot___Sniper
lea rcx, [rbp + 0x870]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6192], 0
je 0x1400091c5
cmp byte [0x1401f6882], 0
je 0x140009135
mov rcx, r12
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400090d0
mov word [rax], 0
jmp 0x1400090d3
mov rdi, r15
mov ecx, ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400090fb
mov dword [rax], 0x48f0447a
mov dword [rax + 4], 0xb010e92d
mov dword [rax + 8], 0x8b02e28d
jmp 0x1400090fe
mov rbx, r15
lea rdx, [0x1400c1370]
lea rcx, [rbp + 0x890]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400091c5
mov ecx, reloc.WS2_32.dll_listen
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009161
mov dword [rax], 0xf0447a00
mov dword [rax + 4], 0x10e92d48
mov dword [rax + 8], 0x2e28db0
mov byte [rax + 0xc], 0x8b
jmp 0x140009164
mov rdi, r15
mov ecx, reloc.WS2_32.dll_listen
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009190
mov dword [rax], 0xf0000000
mov dword [rax + 4], 0x10e92d48
mov dword [rax + 8], 0x2e28db0
mov byte [rax + 0xc], 0x8b
jmp 0x140009193
mov rbx, r15
lea rdx, [0x1400c1370]
lea rcx, [rbp + 0x8b0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6193], 0
je 0x140009325
cmp byte [0x1401f6883], 0
je 0x140009273
mov ecx, 4
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400091f9
mov dword [rax], 0x41200000
jmp 0x1400091fc
mov rdi, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009239
mov dword [rax], 0x358637bd
mov dword [rax + 4], 0xe3510000
mov dword [rax + 8], 0x15911004
mov dword [rax + 0xc], 0x3a01000
mov dword [rax + 0x10], 0xe5801024
mov dword [rax + 0x14], 0xe12fff1e
jmp 0x14000923c
mov rbx, r15
lea rdx, str.Night_Mode
lea rcx, [rbp + 0x8d0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009325
mov ecx, Ordinal_26
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400092b0
mov dword [rax], 0x358637bd
mov dword [rax + 4], 0xe3510000
mov dword [rax + 8], 0x15911004
mov dword [rax + 0xc], 0x3a01000
mov dword [rax + 0x10], 0xe5801024
mov dword [rax + 0x14], 0xe12fff1e
jmp 0x1400092b3
mov rbx, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400092f0
mov dword [rax], 0x41200000
mov dword [rax + 4], 0xe3510000
mov dword [rax + 8], 0x15911004
mov dword [rax + 0xc], 0x3a01000
mov dword [rax + 0x10], 0xe5801024
mov dword [rax + 0x14], 0xe12fff1e
jmp 0x1400092f3
mov rdi, r15
lea rdx, str.Night_Mode
lea rcx, [rbp + 0x8f0]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6194], 0
je 0x140009483
mov ecx, reloc.WS2_32.dll_select
cmp byte [0x1401f6884], 0
je 0x1400093e6
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009374
mov dword [rax], 0x42a0
mov dword [rax + 4], 0xb1e03fc0
mov dword [rax + 8], 0xffff
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x140009377
mov rdi, r15
mov ecx, reloc.WS2_32.dll_select
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400093ac
mov dword [rax], 0x42a0
mov dword [rax + 4], 0x33333fc0
mov dword [rax + 8], 0x4013
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x1400093af
mov rbx, r15
lea rdx, [0x1400c1428]
lea rcx, [rbp + 0x910]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009483
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009416
mov dword [rax], 0x42a0
mov dword [rax + 4], 0x33333fc0
mov dword [rax + 8], 0x4013
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x140009419
mov rdi, r15
mov ecx, reloc.WS2_32.dll_select
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000944e
mov dword [rax], 0x42a0
mov dword [rax + 4], 0xb1e03fc0
mov dword [rax + 8], 0xffff
mov dword [rax + 0xc], 0x3fc0
mov word [rax + 0x10], 0x3f80
jmp 0x140009451
mov rbx, r15
lea rdx, [0x1400c1428]
lea rcx, [rbp + 0x930]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f618d], 0
je 0x140009581
cmp byte [0x1401f687d], 0
je 0x140009511
mov ecx, 4
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400094b3
mov dword [rax], 0x3f800000
jmp 0x1400094b6
mov rdi, r15
mov ecx, 7
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400094da
mov dword [rax], 0x3727c5ac
mov word [rax + 4], 0x4830
mov byte [rax + 6], reloc.WLDAP32.dll_Ordinal_45
jmp 0x1400094dd
mov rbx, r15
lea rdx, str.Bala_Magica
lea rcx, [rbp + 0x950]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009581
mov ecx, 5
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000952f
mov dword [rax], 0x3727c5ac
mov byte [rax + 4], Ordinal_50
jmp 0x140009532
mov rbx, r15
mov ecx, 4
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000954c
mov dword [rax], 0x3f800000
jmp 0x14000954f
mov rdi, r15
lea rdx, str.Bala_Magica
lea rcx, [rbp + 0x970]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f618e], 0
je 0x14000968d
cmp byte [0x1401f6890], 0
je 0x140009613
mov ecx, ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400095bf
mov dword [rax], 0x6d9dfa0d
mov dword [rax + 4], 0x6d9dfa0d
mov dword [rax + 8], 0x6d9dfa0d
jmp 0x1400095c2
mov rbx, r15
mov ecx, 4
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400095dc
mov dword [rax], 0xed9dfa0d
jmp 0x1400095df
mov rdi, r15
lea rdx, [0x1400c13d4]
lea rcx, [rbp + 0x990]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x14000968d
mov ecx, 4
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000962d
mov dword [rax], 0xed9dfa0d
jmp 0x140009630
mov rdi, r15
mov ecx, ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009658
mov dword [rax], 0x6d9dfa0d
mov dword [rax + 4], 0x6d9dfa0d
mov dword [rax + 8], 0x6d9dfa0d
jmp 0x14000965b
mov rbx, r15
lea rdx, str.Wall_Hack
lea rcx, [rbp + 0x9b0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f618f], 0
je 0x1400097f3
mov ecx, Ordinal_26
cmp byte [0x1401f687f], 0
je 0x140009752
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400096d8
mov qword [rax], 0xffffffffffe17b80
mov qword [rax + 8], 0xffffffffffe17b80
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x1400096db
mov rbx, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009718
mov dword [rax], 0x3f0147ae
mov dword [rax + 4], 0x3efd70a4
mov dword [rax + 8], 0x3f0147ae
mov dword [rax + 0xc], 0x3ee147ae
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x14000971b
mov rdi, r15
lea rdx, str.Aimfov___360
lea rcx, [rbp + 0x9d0]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x1400097f3
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000978a
mov dword [rax], 0x3f0147ae
mov dword [rax + 4], 0x3efd70a4
mov dword [rax + 8], 0x3f0147ae
mov dword [rax + 0xc], 0x3ee147ae
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x14000978d
mov rbx, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400097be
mov qword [rax], 0xffffffffffe17b80
mov qword [rax + 8], 0xffffffffffe17b80
mov dword [rax + 0x10], 0x3f0f5c29
mov dword [rax + 0x14], 0x3ec7ae14
jmp 0x1400097c1
mov rdi, r15
lea rdx, str.Aimfov___360
lea rcx, [rbp + 0x9f0]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6190], 0
je 0x140009955
mov ecx, reloc.WS2_32.dll_sendto
cmp byte [0x1401f6880], 0
je 0x1400098b6
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009843
mov dword [rax], 0xe3a00001
mov dword [rax + 4], 0xe12fff1e
mov dword [rax + 8], 0xf4b55515
mov dword [rax + 0xc], 0xf6141967
mov dword [rax + 0x10], 0xf6b50515
jmp 0x140009846
mov rbx, r15
mov ecx, reloc.WS2_32.dll_sendto
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000987c
mov dword [rax], 0xfc385d25
mov dword [rax + 4], 0xf798a51d
mov dword [rax + 8], 0xf4b55515
mov dword [rax + 0xc], 0xf6141967
mov dword [rax + 0x10], 0xf6b50515
jmp 0x14000987f
mov rdi, r15
lea rdx, [0x1400c13e8]
lea rcx, [rbp + 0xa10]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009955
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400098e7
mov dword [rax], 0xfc385d25
mov dword [rax + 4], 0xf798a51d
mov dword [rax + 8], 0xf4b55515
mov dword [rax + 0xc], 0xf6141967
mov dword [rax + 0x10], 0xf6b50515
jmp 0x1400098ea
mov rbx, r15
mov ecx, reloc.WS2_32.dll_sendto
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009920
mov dword [rax], 0xe3a00001
mov dword [rax + 4], 0xe12fff1e
mov dword [rax + 8], 0xf4b55515
mov dword [rax + 0xc], 0xf6141967
mov dword [rax + 0x10], 0xf6b50515
jmp 0x140009923
mov rdi, r15
lea rdx, [0x1400c13e8]
lea rcx, [rbp + 0xa30]
call fcn.140002e60
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f6199], 0
je 0x140009aa7
mov ecx, reloc.WS2_32.dll_ntohs
cmp byte [0x1401f6889], 0
je 0x140009a10
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x1400099a1
mov dword [rax], 0x40800000
mov dword [rax + 4], 0x3f000000
mov dword [rax + 8], 0x42340000
mov word [rax + 0xc], 0xcccd
mov byte [rax + 0xe], 0xcc
jmp 0x1400099a4
mov rdi, r15
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x1400099d6
mov dword [rax], 0x3e99999a
mov dword [rax + 4], 0x3f000000
mov dword [rax + 8], 0x42340000
mov word [rax + 0xc], 0xcccd
mov byte [rax + 0xe], 0xcc
jmp 0x1400099d9
mov rbx, r15
lea rdx, [0x1400c2670]
lea rcx, [rbp + 0xa50]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009aa7
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009a3d
mov dword [rax], 0x3e99999a
mov dword [rax + 4], 0x3f000000
mov dword [rax + 8], 0x42340000
mov word [rax + 0xc], 0xcccd
mov byte [rax + 0xe], 0xcc
jmp 0x140009a40
mov rdi, r15
mov ecx, reloc.WS2_32.dll_ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009a72
mov dword [rax], 0x40800000
mov dword [rax + 4], 0x3f000000
mov dword [rax + 8], 0x42340000
mov word [rax + 0xc], 0xcccd
mov byte [rax + 0xe], 0xcc
jmp 0x140009a75
mov rbx, r15
lea rdx, [0x1400c2670]
lea rcx, [rbp + 0xa70]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f619a], 0
je 0x140009bae
mov ecx, 8
cmp byte [0x1401f688a], 0
je 0x140009b39
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009ade
mov dword [rax], 0x40a00000
mov dword [rax + 4], 0x40a00000
jmp 0x140009ae1
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009b02
mov dword [rax], 0x3da3d70a
mov dword [rax + 4], 0x3e99999a
jmp 0x140009b05
mov rbx, r15
lea rdx, str.Fly_Underground
lea rcx, [rbp + 0xa90]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009bae
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009b55
mov dword [rax], 0x3da3d70a
mov dword [rax + 4], 0x3e99999a
jmp 0x140009b58
mov rdi, r15
mov ecx, 8
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009b79
mov dword [rax], 0x40a00000
mov dword [rax + 4], 0x40a00000
jmp 0x140009b7c
mov rbx, r15
lea rdx, str.Fly_Underground
lea rcx, [rbp + 0xab0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f619b], 0
je 0x140009cd4
mov ecx, 0xa
cmp byte [0x1401f688b], 0
je 0x140009c53
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009bef
mov dword [rax], 0x3fe147ae
mov dword [rax + 4], 0x40400000
mov word [rax + 8], 0x851f
jmp 0x140009bf2
mov rdi, r15
mov ecx, 0xa
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009c19
mov dword [rax], 0x3f333333
mov dword [rax + 4], 0x40400000
mov word [rax + 8], 0x851f
jmp 0x140009c1c
mov rbx, r15
lea rdx, str.Car_Speed
lea rcx, [rbp + 0xad0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009cd4
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009c75
mov dword [rax], 0x3f333333
mov dword [rax + 4], 0x40400000
mov word [rax + 8], 0x851f
jmp 0x140009c78
mov rdi, r15
mov ecx, 0xa
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009c9f
mov dword [rax], 0x3fe147ae
mov dword [rax + 4], 0x40400000
mov word [rax + 8], 0x851f
jmp 0x140009ca2
mov rbx, r15
lea rdx, str.Car_Speed
lea rcx, [rbp + 0xaf0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f619c], 0
je 0x140009e7e
mov ecx, Ordinal_30
cmp byte [0x1401f688c], 0
je 0x140009dbb
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009d36
mov dword [rax], 0x1303e0a9
mov dword [rax + 4], 0xc24ff4aa
mov dword [rax + 8], 0x1f0040a8
mov dword [rax + 0xc], 0x5f03c0d6
mov dword [rax + 0x10], 0x14ff4d6
mov dword [rax + 0x14], 0x27bfda9
mov dword [rax + 0x18], 0x83fda9
mov byte [rax + 0x1c], 0x91
jmp 0x140009d39
mov rdi, r15
mov ecx, Ordinal_30
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009d81
mov dword [rax], 0x1303e0a9
mov dword [rax + 4], 0xc24ff4aa
mov dword [rax + 8], 0x1f0040a8
mov dword [rax + 0xc], 0x1d0ff5d6
mov dword [rax + 0x10], 0x14ff4f8
mov dword [rax + 0x14], 0x27bfda9
mov dword [rax + 0x18], 0x83fda9
mov byte [rax + 0x1c], 0x91
jmp 0x140009d84
mov rbx, r15
lea rdx, str.Alok_Fix
lea rcx, [rbp + 0xb10]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009e7e
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009dfe
mov dword [rax], 0x1303e0a9
mov dword [rax + 4], 0xc24ff4aa
mov dword [rax + 8], 0x1f0040a8
mov dword [rax + 0xc], 0x1d0ff5d6
mov dword [rax + 0x10], 0x14ff4f8
mov dword [rax + 0x14], 0x27bfda9
mov dword [rax + 0x18], 0x83fda9
mov byte [rax + 0x1c], 0x91
jmp 0x140009e01
mov rdi, r15
mov ecx, Ordinal_30
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009e49
mov dword [rax], 0x1303e0a9
mov dword [rax + 4], 0xc24ff4aa
mov dword [rax + 8], 0x1f0040a8
mov dword [rax + 0xc], 0x5f03c0d6
mov dword [rax + 0x10], 0x14ff4d6
mov dword [rax + 0x14], 0x27bfda9
mov dword [rax + 0x18], 0x83fda9
mov byte [rax + 0x1c], 0x91
jmp 0x140009e4c
mov rbx, r15
lea rdx, str.Alok_Fix
lea rcx, [rbp + 0x670]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f619d], 0
je 0x140009fe0
mov ecx, reloc.WS2_32.dll_sendto
cmp byte [0x1401f688d], 0
je 0x140009f41
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009ece
mov dword [rax], 0x2b34c8c
mov dword [rax + 4], 0x2b34a70
mov dword [rax + 8], 0xe3a00000
mov dword [rax + 0xc], 0xe12fff1e
mov dword [rax + 0x10], 0xe24dd010
jmp 0x140009ed1
mov rdi, r15
mov ecx, reloc.WS2_32.dll_sendto
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009f07
mov dword [rax], 0x2b34c8c
mov dword [rax + 4], 0x2b34a70
mov dword [rax + 8], 0xe92d4df0
mov dword [rax + 0xc], 0xe28db018
mov dword [rax + 0x10], 0xe24dd010
jmp 0x140009f0a
mov rbx, r15
lea rdx, str.Running_Medkit
lea rcx, [rbp + 0x690]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x140009fe0
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x140009f72
mov dword [rax], 0x2b34c8c
mov dword [rax + 4], 0x2b34a70
mov dword [rax + 8], 0xe92d4df0
mov dword [rax + 0xc], 0xe28db018
mov dword [rax + 0x10], 0xe24dd010
jmp 0x140009f75
mov rdi, r15
mov ecx, reloc.WS2_32.dll_sendto
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x140009fab
mov dword [rax], 0x2b34c8c
mov dword [rax + 4], 0x2b34a70
mov dword [rax + 8], 0xe3a00000
mov dword [rax + 0xc], 0xe12fff1e
mov dword [rax + 0x10], 0xe24dd010
jmp 0x140009fae
mov rbx, r15
lea rdx, str.Running_Medkit
lea rcx, [rbp + 0x6b0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f619e], 0
je 0x14000a10a
mov ecx, ntohs
cmp byte [0x1401f688e], 0
je 0x14000a087
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000a022
mov dword [rax], Ordinal_79
mov dword [rax + 4], 0x40a00000
mov dword [rax + 8], 0x40400000
jmp 0x14000a025
mov rdi, r15
mov ecx, ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000a04d
mov dword [rax], Ordinal_79
mov dword [rax + 4], 0x40a00000
mov dword [rax + 8], 0x40800000
jmp 0x14000a050
mov rbx, r15
lea rdx, str.Fast_Medkit
lea rcx, [rbp + 0x6d0]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x14000a10a
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000a0aa
mov dword [rax], Ordinal_79
mov dword [rax + 4], 0x40a00000
mov dword [rax + 8], 0x40800000
jmp 0x14000a0ad
mov rdi, r15
mov ecx, ntohs
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000a0d5
mov dword [rax], Ordinal_79
mov dword [rax + 4], 0x40a00000
mov dword [rax + 8], 0x40400000
jmp 0x14000a0d8
mov rbx, r15
lea rdx, str.Fast_Medkit
lea rcx, [rbp + 0x710]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f619f], 0
je 0x14000a240
mov ecx, Ordinal_26
cmp byte [0x1401f688f], 0
je 0x14000a1b7
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000a14f
mov qword [rax], 0x461c3c00
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0x1000100
jmp 0x14000a152
mov rdi, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000a17d
mov qword [rax], 0x3e99999a
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0x1000100
jmp 0x14000a180
mov rbx, r15
lea rdx, str.Climb_Wall
lea rcx, [rbp + 0x730]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000ae90
jmp 0x14000a240
call fcn.1400bce60
mov rdi, rax
test rax, rax
je 0x14000a1dd
mov qword [rax], 0x3e99999a
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0x1000100
jmp 0x14000a1e0
mov rdi, r15
mov ecx, Ordinal_26
call fcn.1400bce60
mov rbx, rax
test rax, rax
je 0x14000a20b
mov qword [rax], 0x461c3c00
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0x1000100
jmp 0x14000a20e
mov rbx, r15
lea rdx, str.Climb_Wall
lea rcx, [rbp + 0x750]
call fcn.140002e60
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rsi
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401f61a8]
call fcn.14000b990
cmp byte [0x1401f61a0], 0
je 0x14000a25e
cmp byte [0x1401f6890], 0
je 0x14000a25e
lea rcx, [0x1401f61a8]
call fcn.14000a700
cmp byte [0x1401f6891], 0
je 0x14000a2e1
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rbp + 0xb38], r15
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0xb38]
mov qword [rsp + 0x20], rax
lea r9, [0x140103938]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x140103948]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14000a358
mov rax, qword [rbp + 0xb38]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
mov rcx, qword [rbp + 0xb38]
call rbx
mov rcx, qword [rbp + 0xb38]
jmp 0x14000a352
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rbp + 0xb30], r15
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0xb30]
mov qword [rsp + 0x20], rax
lea r9, [0x140103938]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x140103948]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14000a358
mov rax, qword [rbp + 0xb30]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
mov rcx, qword [rbp + 0xb30]
call rbx
mov rcx, qword [rbp + 0xb30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov dword [rsp + 0x70], 0x41c80000
movss xmm0, dword [0x1400c26c4]
movss dword [rsp + 0x74], xmm0
lea rcx, [rsp + 0x70]
call fcn.14002fa50
lea rcx, [0x1401f6830]
call fcn.14000b980
mov rcx, rax
call fcn.140058b90
call fcn.14001f5e0
mov rcx, qword [rbp + 0x12e0]
xor rcx, rsp
call fcn.1400bcd30
lea r11, [rsp + 0x1400]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret