Function at 0x1400087b0
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Log keystrokes via polling
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xae8]
sub rsp, 0xbc0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400d6080]
xor rax, rsp
mov qword [rbp + 0xa10], rax
xor r12d, r12d
lea rcx, [0x140122e10]
call fcn.140056060
lea rcx, [0x140122e10]
call fcn.1400534b0
xor ecx, ecx
test al, al
je 0x140008864
mov r9d, 0x40
xor r8d, r8d
lea rdx, str.Usted__ha_sido_Baneado_por_intento_de_Crackeo_
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov dword [rbp + 0x7f0], 0x50
mov dword [rbp + 0x7f4], 0x40
lea rax, [0x140002b70]
mov qword [rbp + 0x7f8], rax
mov qword [rbp + 0x800], r12
mov qword [rbp + 0x808], r12
mov edx, 0x7f00
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x810], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x818], rax
mov qword [rbp + 0x820], r12
lea rax, str.ImGui
mov qword [rbp + 0x828], rax
lea rax, str.Example
mov qword [rbp + 0x830], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x838], rax
lea rcx, [rbp + 0x7f0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xff]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
sub eax, 0xc3
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 0x1fe
mov dword [rsp + 0x30], 0x186
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
xor r8d, r8d
mov rdx, qword [rbp + 0x830]
mov ecx, 0x80088
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140122bf8], rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400c6690]
movdqu xmmword [rbp + 0x980], xmm0
lea rdx, [rbp + 0x980]
mov rcx, qword [0x140122bf8]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
movups xmmword [0x140123138], xmm0
lea rdx, [0x140123138]
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x7b4], r12
mov qword [rbp + 0x7c8], 2
mov qword [rbp + 0x7e0], 2
mov qword [rbp + 0x7a0], r12
mov dword [rbp + 0x7b0], Ordinal_33
mov dword [rbp + 0x7a8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x7ac], r13d
mov dword [rbp + 0x7c4], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x140122bf8]
mov qword [rbp + 0x7d0], rax
mov qword [rbp + 0x7bc], r13
mov qword [rbp + 0x7d8], r13
mov dword [rbp + 0x9d0], 0xb000
mov dword [rbp + 0x9d4], 0xa000
lea rbx, [0x140123918]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x860]
mov qword [rsp + 0x50], rax
lea rdi, [0x1401231d8]
mov qword [rsp + 0x48], rdi
lea rsi, [0x1401231d0]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x7a0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x9d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x140008b3a
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x860]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x7a0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x9d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, ecx
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14000d2e3
call fcn.140002b00
mov edx, 0xa
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140122d88]
test rbx, rbx
je 0x140008b78
inc dword [rbx + 0xf4]
mov ecx, 0x5e00
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x60], rax
lea rcx, [rbp - 0x80]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rax
test rax, rax
je 0x140008ba5
xor edx, edx
mov rcx, rax
call fcn.14000e440
jmp 0x140008ba8
mov rax, r12
mov qword [0x140122d88], rax
call fcn.140011fb0
test rbx, rbx
je 0x140008bc2
mov qword [0x140122d88], rbx
jmp 0x140008bc9
mov rbx, qword [0x140122d88]
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x370], xmm2
movups xmmword [rbp + 0x380], xmm2
movups xmmword [rbp + 0x390], xmm2
movups xmmword [rbp + 0x3a0], xmm2
movups xmmword [rbp + 0x3b0], xmm2
movups xmmword [rbp + 0x3c0], xmm2
movups xmmword [rbp + 0x3d0], xmm2
movups xmmword [rbp + 0x3e0], xmm2
mov qword [rbp + 0x3f0], rax
mov byte [rbp + 0x37c], 1
mov dword [rbp + 0x388], 3
mov dword [rbp + 0x38c], r13d
mov dword [rbp + 0x3b4], 0x7f7fffff
mov dword [rbp + 0x3c0], 0x3f800000
mov r14d, 0xffff
mov word [rbp + 0x3c4], r14w
movups xmm0, xmmword [rbp + 0x370]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x380]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x3b0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x3c0]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x10], xmm0
lea rdi, [0x1400d69f0]
mov qword [rbp - 0x70], rdi
mov dword [rbp - 0x68], 0x26a20
mov dword [rbp - 0x5c], 0x41b00000
lea rsi, [0x1400c5d40]
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x400], xmm2
movups xmmword [rbp + 0x410], xmm2
movups xmmword [rbp + 0x420], xmm2
movups xmmword [rbp + 0x430], xmm2
movups xmmword [rbp + 0x440], xmm2
movups xmmword [rbp + 0x450], xmm2
movups xmmword [rbp + 0x460], xmm2
movups xmmword [rbp + 0x470], xmm2
mov qword [rbp + 0x480], rax
mov byte [rbp + 0x40c], 1
mov dword [rbp + 0x418], 3
mov dword [rbp + 0x41c], r13d
mov dword [rbp + 0x444], 0x7f7fffff
mov dword [rbp + 0x450], 0x3f800000
mov word [rbp + 0x454], r14w
movups xmm0, xmmword [rbp + 0x400]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x410]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x440]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x450]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x480]
movsd qword [rbp + 0x10], xmm0
mov qword [rbp - 0x70], rdi
mov dword [rbp - 0x68], 0x26a20
mov dword [rbp - 0x5c], 0x41b00000
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x490], xmm2
movups xmmword [rbp + 0x4a0], xmm2
movups xmmword [rbp + 0x4b0], xmm2
movups xmmword [rbp + 0x4c0], xmm2
movups xmmword [rbp + 0x4d0], xmm2
movups xmmword [rbp + 0x4e0], xmm2
movups xmmword [rbp + 0x4f0], xmm2
movups xmmword [rbp + 0x500], xmm2
mov qword [rbp + 0x510], rax
mov byte [rbp + 0x49c], 1
mov dword [rbp + 0x4a8], 3
mov dword [rbp + 0x4ac], r13d
mov dword [rbp + 0x4d4], 0x7f7fffff
mov dword [rbp + 0x4e0], 0x3f800000
mov word [rbp + 0x4e4], r14w
movups xmm0, xmmword [rbp + 0x490]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x4a0]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x4d0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x4e0]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x510]
movsd qword [rbp + 0x10], xmm0
mov qword [rbp - 0x70], rdi
mov dword [rbp - 0x68], 0x26a20
mov dword [rbp - 0x5c], 0x41900000
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov qword [0x140123958], rax
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x520], xmm2
movups xmmword [rbp + 0x530], xmm2
movups xmmword [rbp + 0x540], xmm2
movups xmmword [rbp + 0x550], xmm2
movups xmmword [rbp + 0x560], xmm2
movups xmmword [rbp + 0x570], xmm2
movups xmmword [rbp + 0x580], xmm2
movups xmmword [rbp + 0x590], xmm2
mov qword [rbp + 0x5a0], rax
mov byte [rbp + 0x52c], 1
mov dword [rbp + 0x538], 3
mov dword [rbp + 0x53c], r13d
mov dword [rbp + 0x564], 0x7f7fffff
mov dword [rbp + 0x570], 0x3f800000
mov word [rbp + 0x574], r14w
movups xmm0, xmmword [rbp + 0x520]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x530]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x560]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x570]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x5a0]
movsd qword [rbp + 0x10], xmm0
mov qword [rbp - 0x70], rdi
mov dword [rbp - 0x68], 0x26a20
mov dword [rbp - 0x5c], 0x41e00000
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x5b0], xmm2
movups xmmword [rbp + 0x5c0], xmm2
movups xmmword [rbp + 0x5d0], xmm2
movups xmmword [rbp + 0x5e0], xmm2
movups xmmword [rbp + 0x5f0], xmm2
movups xmmword [rbp + 0x600], xmm2
movups xmmword [rbp + 0x610], xmm2
movups xmmword [rbp + 0x620], xmm2
mov qword [rbp + 0x630], rax
mov byte [rbp + 0x5bc], 1
mov dword [rbp + 0x5c8], 3
mov dword [rbp + 0x5cc], r13d
mov dword [rbp + 0x5f4], 0x7f7fffff
mov dword [rbp + 0x600], 0x3f800000
mov word [rbp + 0x604], r14w
movups xmm0, xmmword [rbp + 0x5b0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x5c0]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x5f0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x600]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x630]
movsd qword [rbp + 0x10], xmm0
lea rax, [0x1401210d0]
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x68], 0xb80
mov dword [rbp - 0x5c], 0x41a00000
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x640], xmm2
movups xmmword [rbp + 0x650], xmm2
movups xmmword [rbp + 0x660], xmm2
movups xmmword [rbp + 0x670], xmm2
movups xmmword [rbp + 0x680], xmm2
movups xmmword [rbp + 0x690], xmm2
movups xmmword [rbp + 0x6a0], xmm2
movups xmmword [rbp + 0x6b0], xmm2
mov qword [rbp + 0x6c0], rax
mov byte [rbp + 0x64c], 1
mov dword [rbp + 0x658], 3
mov dword [rbp + 0x65c], r13d
mov dword [rbp + 0x684], 0x7f7fffff
mov dword [rbp + 0x690], 0x3f800000
mov word [rbp + 0x694], r14w
movups xmm0, xmmword [rbp + 0x640]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x650]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x680]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x690]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x6c0]
movsd qword [rbp + 0x10], xmm0
lea rax, [0x14011e3f0]
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x68], 0x824
mov dword [rbp - 0x5c], 0x41a00000
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov rcx, qword [rbx + 0x58]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x6d0], xmm2
movups xmmword [rbp + 0x6e0], xmm2
movups xmmword [rbp + 0x6f0], xmm2
movups xmmword [rbp + 0x700], xmm2
movups xmmword [rbp + 0x710], xmm2
movups xmmword [rbp + 0x720], xmm2
movups xmmword [rbp + 0x730], xmm2
movups xmmword [rbp + 0x740], xmm2
mov qword [rbp + 0x750], rax
mov byte [rbp + 0x6dc], 1
mov dword [rbp + 0x6e8], 3
mov dword [rbp + 0x6ec], r13d
mov dword [rbp + 0x714], 0x7f7fffff
mov dword [rbp + 0x720], 0x3f800000
mov word [rbp + 0x724], r14w
movups xmm0, xmmword [rbp + 0x6d0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x6e0]
movups xmmword [rbp - 0x60], xmm1
movups xmmword [rbp - 0x50], xmm2
movups xmmword [rbp - 0x40], xmm2
movups xmm0, xmmword [rbp + 0x710]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x720]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x750]
movsd qword [rbp + 0x10], xmm0
lea rax, [0x1400fd410]
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x68], 0x20fe0
mov dword [rbp - 0x5c], 0x41700000
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x70]
call fcn.140035f30
mov r15, rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x2b0], xmm2
movups xmmword [rbp + 0x2c0], xmm2
movups xmmword [rbp + 0x2d0], xmm2
movups xmmword [rbp + 0x2e0], xmm2
movups xmmword [rbp + 0x2f0], xmm2
movups xmmword [rbp + 0x300], xmm2
movups xmmword [rbp + 0x310], xmm2
movups xmmword [rbp + 0x320], xmm2
mov qword [rbp + 0x330], rax
mov dword [rbp + 0x2f4], 0x7f7fffff
mov word [rbp + 0x304], r14w
mov byte [rbp + 0x2d0], al
mov byte [rbp + 0x2bc], al
mov eax, 5
mov dword [rbp + 0x2c8], eax
mov dword [rbp + 0x2cc], eax
mov dword [rbp + 0x300], 0x3f99999a
lea rcx, [0x1400c4e80]
mov qword [rbp + 0x2e8], rcx
movups xmm0, xmmword [rbp + 0x2b0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp + 0x2c0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rbp + 0x2d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x2e0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [rbp + 0x2f0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp + 0x300]
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm2
movups xmmword [rbp], xmm2
movsd xmm0, qword [rbp + 0x330]
movsd qword [rbp + 0x10], xmm0
lea rax, [0x1400d6110]
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x68], 0x8d8
mov dword [rbp - 0x5c], 0x41c00000
mov qword [rbp - 0x38], rcx
lea rdx, [rbp - 0x70]
mov rcx, qword [rbx + 0x58]
call fcn.140035f30
xor ecx, ecx
call fcn.14002ee50
mov rsi, qword [0x140122bf8]
mov rdi, qword [0x140122d88]
lea rcx, [rbp + 0x978]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1400094ad
lea rcx, [rbp + 0x938]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400094ad
mov rax, qword [0x140122d88]
test rax, rax
je 0x140009395
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400093c2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov qword [rbx + 0x40], rax
jmp 0x1400093c5
mov rbx, r12
mov qword [rdi + 0x98], rbx
lea rax, [0x1400c6258]
mov qword [rdi + 0x88], rax
or dword [rdi + 0xc], 6
mov qword [rbx], rsi
mov rax, qword [rbp + 0x978]
mov qword [rbx + 0x20], rax
mov rax, qword [rbp + 0x938]
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x28], 9
mov rax, qword [0x140122d88]
mov rax, qword [rax + 0x48a8]
mov rcx, qword [rax]
mov qword [rcx + 0x28], rsi
mov byte [rbx + 0x2d], 1
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x340], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x348], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x350], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x358], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x360], rax
mov rdi, r12
mov rcx, qword [rbp + rdi*8 + 0x340]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140009481
inc rdi
cmp rdi, 5
jl 0x140009460
jmp 0x1400094ad
mov qword [rbx + 0x30], rsi
lea rdx, str.XInputGetCapabilities
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x38], rax
lea rdx, str.XInputGetState
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x40], rax
mov r14, qword [0x140123918]
mov rsi, qword [0x1401231d8]
mov rdi, qword [0x140122d88]
test rdi, rdi
je 0x1400094cd
inc dword [rdi + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x14000950e
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140009511
mov rbx, r12
mov qword [rdi + 0xa0], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x90], rax
or dword [rdi + 0xc], 8
mov qword [rbp + 0x780], r12
mov qword [rbp + 0x788], r12
mov qword [rbp + 0x790], r12
mov rax, qword [rsi]
mov r9, qword [rax]
lea r8, [rbp + 0x780]
lea rdx, [0x1400c6228]
mov rcx, rsi
call r9
test eax, eax
jne 0x1400095b5
mov rcx, qword [rbp + 0x780]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
lea r8, [rbp + 0x788]
lea rdx, [0x1400c6238]
call r9
test eax, eax
jne 0x1400095b5
mov rcx, qword [rbp + 0x788]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
lea r8, [rbp + 0x790]
lea rdx, [0x1400c6248]
call r9
test eax, eax
jne 0x1400095b5
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x790]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x780]
test rcx, rcx
je 0x1400095c7
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x788]
test rcx, rcx
je 0x1400095d9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x140122d88]
movss xmm10, dword [0x1400c657c]
movss xmm1, dword [0x1400c656c]
movaps xmm0, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0x381c], xmm0
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x37f0], 0x40000000
mov dword [rax + 0x3818], r12d
xorps xmm8, xmm8
xorps xmm0, xmm0
unpcklps xmm0, xmm8
movsd qword [rax + 0x37e8], xmm0
mov dword [rax + 0x3810], 0x41200000
mov dword [rax + 0x38a8], r12d
xor r14b, r14b
lea rsi, [0x140122c80]
movss xmm15, dword [0x1400c6614]
movss xmm9, dword [0x1400c65d4]
movss xmm11, dword [0x1400c653c]
movss xmm12, dword [0x1400c64e0]
movss xmm13, dword [0x1400c65d8]
movss xmm14, dword [0x1400c6650]
movss xmm7, dword [0x1400c651c]
lea rbx, [0x140122bf0]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x9a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140009710
lea rcx, [rbp + 0x9a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x9a0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx r14d, r14b
cmp dword [rbp + 0x9a8], 0x12
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x9a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400096c0
test r14b, r14b
jne 0x14000cfdf
mov rax, qword [0x140122d88]
test rax, rax
je 0x140009725
mov rcx, qword [rax + 0xa0]
jmp 0x140009728
mov rcx, r12
cmp qword [rcx + 0x48], 0
jne 0x140009734
call fcn.14003ba80
call fcn.14003c8b0
call fcn.1400145d0
cmp byte [0x140122d9b], 0
jne 0x1400097d4
mov qword [rbp + 0x940], 0xffffffffffffffff
mov qword [rbp + 0x948], 0xffffffffffffffff
mov qword [rbp + 0x950], 0xffffffffffffffff
mov qword [rbp + 0x958], 0xffffffffffffffff
mov dword [rbp + 0x960], 0xffffffff
mov qword [rbp + 0x964], 0xfffffffffffffffd
mov dword [rbp + 0x96c], 0xffffffff
mov qword [rbp + 0x970], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x940]
mov r8d, 0x24ad
lea rdx, [0x14011ec20]
mov rcx, qword [0x1401231d8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov byte [0x140122d9b], 1
movss xmm6, dword [0x1400c661c]
mov rcx, qword [0x140122d88]
movaps xmm0, xmm15
unpcklps xmm0, xmm6
movsd qword [rcx + 0x47c8], xmm0
mov dword [rcx + 0x47b0], r13d
or dword [rcx + 0x47a8], 3
movaps xmm0, xmm8
unpcklps xmm0, xmm8
movsd qword [rcx + 0x47b8], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm8
movsd qword [rcx + 0x47c0], xmm0
mov dword [rcx + 0x47ac], r13d
xor edx, edx
mov r8d, 0x20ab
lea rcx, str.General
call fcn.140019bf0
call fcn.140002820
lea rdx, [0x140123138]
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [0x140123920]
mov rcx, qword [0x140122be8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
mov rdi, qword [rax + 0x290]
movsd xmm0, qword [rax + 0x18]
movsd qword [rbp + 0x858], xmm0
movdqa xmm0, xmmword [0x1400c6a80]
movups xmmword [rbp + 0x770], xmm0
lea rcx, [rbp + 0x770]
call fcn.140010370
movss xmm1, dword [rbp + 0x85c]
addss xmm1, xmm6
movss xmm0, dword [rbp + 0x858]
addss xmm0, xmm15
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xcc], xmm1
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x858]
mov rcx, rdi
call fcn.140032200
call fcn.140004d70
mov rbx, qword [0x140122d88]
movss xmm1, dword [rbx + 0x18]
mulss xmm1, dword [0x1400c65a0]
cmp byte [0x140122bc4], 0
je 0x140009937
movaps xmm0, xmm8
jmp 0x14000993f
movss xmm0, dword [0x1400c6550]
movss xmm6, dword [0x140122bc8]
subss xmm0, xmm6
mulss xmm0, xmm1
addss xmm6, xmm0
movss dword [0x140122bc8], xmm6
lea rcx, [rbx + 0x4828]
movss xmm0, dword [rbx + 0x37e0]
mov dword [rbp + 0x298], r12d
movss dword [rbp + 0x29c], xmm0
lea rdx, [rbp + 0x298]
call fcn.140026aa0
movss dword [rbx + 0x37e0], xmm6
mov byte [0x140122d9c], 1
mov byte [0x140122bc4], 0
lea rcx, [0x140121de0]
call fcn.140010370
movss xmm1, dword [rbp + 0x85c]
addss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [0x1400c6628]
movss dword [rbp + 0xd0], xmm0
movss dword [rbp + 0xd4], xmm1
mov dword [rsp + 0x28], Ordinal_50
movss xmm0, dword [0x1400c6564]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x858]
mov rcx, rdi
call fcn.140032200
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x48a8]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.140013b30
movss xmm0, dword [0x14012317c]
ucomiss xmm0, xmm8
jp 0x140009a59
jne 0x140009a59
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14012317c], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss xmm0, dword [0x14012317c]
addss xmm0, dword [0x1400c65a8]
comiss xmm1, xmm0
jbe 0x140009b0d
movss xmm1, dword [0x140123130]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140009acc
comiss xmm11, xmm1
jbe 0x140009abd
movaps xmm0, xmm12
mov rax, qword [0x140122d88]
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x140123130], xmm1
comiss xmm1, xmm11
jb 0x140009b03
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140009b03
comiss xmm1, xmm8
jbe 0x140009af6
movaps xmm0, xmm12
mov rax, qword [0x140122d88]
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x140123130], xmm1
comiss xmm8, xmm1
jb 0x140009b03
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x14012317c], 0
mov rcx, r15
call fcn.14001c8f0
movabs rax, 0xc4776448dde5e739
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x280], rax
movabs rax, 0x97938bf4473e92af
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x288], rax
movabs rdi, 0x8c34440187aeb275
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x9e0], rax
movabs rax, 0x97938bf4146ad3ea
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x9e8], rax
movdqa xmm0, xmmword [rbp + 0x9e0]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x280], xmm0
mov rax, qword [0x140122d88]
mov qword [rsp + 0x30], r12
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm14
movss xmm3, dword [0x1400c6644]
movss xmm2, dword [rax + 0x3c20]
lea rdx, [rbp + 0x28]
mov rcx, qword [rax + 0x3c18]
call fcn.140039b50
movss xmm0, dword [rbp + 0x28]
addss xmm0, dword [0x1400c6548]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x28], xmm1
movss xmm0, dword [0x1400d6108]
mulss xmm0, xmm7
mulss xmm1, xmm7
subss xmm0, xmm1
movss dword [rbp + 0xd8], xmm0
mov dword [rbp + 0xdc], 0x41980000
lea rcx, [0x140121da0]
call fcn.140010370
mov eax, eax
xorps xmm7, xmm7
cvtsi2ss xmm7, rax
movss dword [rbp + 0x240], xmm7
movss dword [rbp + 0x244], xmm7
movss dword [rbp + 0x248], xmm7
movss xmm6, dword [0x140123130]
movss dword [rbp + 0x24c], xmm6
lea rcx, [rbp + 0x240]
call fcn.140010370
mov ebx, eax
movss dword [rbp + 0x270], xmm7
movss dword [rbp + 0x274], xmm7
movss dword [rbp + 0x278], xmm7
movss dword [rbp + 0x27c], xmm6
lea rcx, [rbp + 0x270]
call fcn.140010370
mov edx, eax
movabs rax, 0xcf140d5bccfbfe55
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x260], rcx
movabs rax, 0x97938ba7402b96a2
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x268], rcx
mov qword [rsp + 0x60], rdi
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x9f0], rcx
movabs rax, 0x97938bf4146ad3ea
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x9f8], rax
movdqa xmm0, xmmword [rbp + 0x260]
xorps xmm0, xmmword [rbp + 0x9f0]
movdqa xmmword [rbp + 0x260], xmm0
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm9
mov r8d, ebx
lea rcx, [rbp + 0x260]
call fcn.14003fd80
call fcn.14001c990
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14000a97b
cmp byte [0x140123950], 0
jne 0x14000b47b
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, dword [0x1400c65dc]
addss xmm0, dword [0x1400c65b4]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
mov dword [rbp + 0xe0], 0x43b40000
mov dword [rbp + 0xe4], 0x43f50000
lea rdx, [rbp + 0xe0]
call fcn.140017020
mov rbx, qword [0x140122d88]
mov qword [rsp + 0x30], r12
lea rax, str.LUKZI_CHEATS
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm14
movss xmm3, dword [0x1400c6644]
movss xmm2, dword [rbx + 0x3c20]
lea rdx, [rbp + 0x20]
mov rcx, qword [rbx + 0x3c18]
call fcn.140039b50
movss xmm0, dword [rbp + 0x20]
addss xmm0, dword [0x1400c6548]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x20], xmm1
movss xmm7, dword [0x1400c651c]
mulss xmm1, xmm7
movss xmm0, dword [0x1400c6600]
subss xmm0, xmm1
subss xmm0, xmm8
movss dword [rbp + 0xe8], xmm0
mov dword [rbp + 0xec], 0x42340000
movss xmm0, dword [0x140123c38]
movss dword [rbp + 0x250], xmm0
movss xmm1, dword [0x140123c3c]
movss dword [rbp + 0x254], xmm1
movss xmm0, dword [0x140123c40]
movss dword [rbp + 0x258], xmm0
movss xmm6, dword [rbx + 0x37e0]
movaps xmm1, xmm6
mulss xmm1, dword [0x140123c44]
movss dword [rbp + 0x25c], xmm1
lea rcx, [rbp + 0x250]
call fcn.140010370
mov ebx, eax
movss xmm0, dword [0x140123c18]
movss dword [rbp + 0x230], xmm0
movss xmm1, dword [0x140123c1c]
movss dword [rbp + 0x234], xmm1
movss xmm0, dword [0x140123c20]
movss dword [rbp + 0x238], xmm0
mulss xmm6, dword [0x140123c24]
movss dword [rbp + 0x23c], xmm6
lea rcx, [rbp + 0x230]
call fcn.140010370
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x20], rcx
movss xmm3, dword [0x1400c65f8]
mov r8d, ebx
mov edx, eax
lea rcx, str.__Welcome_Back___
call fcn.14003fd80
mov rcx, qword [0x140122d88]
movss xmm0, dword [rcx + 0x3830]
mulss xmm0, xmm7
movss xmm3, dword [0x1400d610c]
mulss xmm3, xmm7
subss xmm3, dword [0x1400c65f4]
addss xmm0, xmm0
subss xmm3, xmm0
movss xmm2, dword [0x1400d6108]
mulss xmm2, xmm7
subss xmm2, dword [0x1400c65fc]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0xf8], xmm2
movss dword [rax + 0xfc], xmm3
mov byte [rax + 0x139], 1
call fcn.14001f900
mov dword [rbp + 0xf0], 0x438c0000
mov dword [rbp + 0xf4], 0x420c0000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x140122d00]
lea rdx, str.Login
lea rcx, [0x1400bf704]
call fcn.1400460e0
mov dword [rbp + 0xf8], 0x438c0000
mov dword [rbp + 0xfc], 0x420c0000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rsi
lea rdx, str.Password
lea rcx, [0x1400bf714]
call fcn.1400460e0
mov dword [rbp + 0x100], 0x438c0000
mov dword [rbp + 0x104], 0x420c0000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_30
lea rdi, [0x140122c00]
mov r8, rdi
lea rdx, str.Licesne_Key
lea rcx, [0x1400bf724]
call fcn.1400460e0
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xb3], 0
jne 0x14000a0e5
mov qword [rbp + 0x108], 0
movaps xmm1, xmm14
lea rcx, [rbp + 0x108]
call fcn.14001f3c0
mov rcx, qword [0x140122d88]
movups xmm0, xmmword [rcx + 0x38b4]
movups xmmword [rsp + 0x70], xmm0
lea rdx, str.I_dont_have_an_account_
lea rcx, [rsp + 0x70]
call fcn.14003f570
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14001d4e0
test al, al
je 0x14000a252
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000a162
cmp byte [rcx + 0x48f2], 0
jne 0x14000a162
test byte [rcx + 0x4770], 4
jne 0x14000a252
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000a252
test eax, eax
jne 0x14000a22c
jmp 0x14000a252
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000a252
cmp qword [rcx + 0x3ed8], r9
je 0x14000a181
test al, al
jns 0x14000a252
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000a1a6
cmp eax, dword [rcx + 0x476c]
je 0x14000a1a6
cmp byte [rcx + 0x3f3d], 0
jne 0x14000a1a6
cmp eax, dword [r9 + 0x74]
jne 0x14000a252
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000a20d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000a20d
cmp byte [rdx + 0xaf], 0
je 0x14000a20d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000a20d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000a1e5
bt r8d, 0x1a
jae 0x14000a20d
cmp qword [rax + 0x370], rdx
je 0x14000a20d
nop
cmp rax, rdx
je 0x14000a20d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000a1f0
test dword [rcx + 0x4770], 0x100
je 0x14000a252
test byte [rcx + 0x4770], 4
jne 0x14000a252
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000a22c
cmp byte [r9 + 0xb0], 0
jne 0x14000a252
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.gg_SShsRyZQ
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rbp + 0x110], 0x438c0000
mov dword [rbp + 0x114], 0x420c0000
lea rdx, [rbp + 0x110]
lea rcx, str.Launch
call fcn.1400400c0
test al, al
je 0x14000a544
lea rax, [rbp + 0x60]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rsi + rbx], 0
jne 0x14000a2a0
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x14000d364
cmp rbx, 0xf
ja 0x14000a2e7
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rsi
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x60], 0
jmp 0x14000a38a
mov rsi, rbx
or rsi, 0xf
cmp rsi, rdi
jbe 0x14000a306
mov rsi, rdi
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000a337
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000a321
mov rdi, r12
jmp 0x14000a35e
cmp rcx, 0x1000
jb 0x14000a356
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d376
mov rcx, rax
call fcn.1400ac110
test rax, rax
je 0x14000d10c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a35e
call fcn.1400ac110
mov rdi, rax
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], rsi
mov r8, rbx
lea rdx, [0x140122c80]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
movabs rdi, 0x7fffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], r12
mov rbx, 0xffffffffffffffff
lea rcx, [0x140122d00]
inc rbx
cmp byte [rcx + rbx], 0
jne 0x14000a3b0
cmp rbx, rdi
ja 0x14000d370
cmp rbx, 0xf
ja 0x14000a3f9
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rcx
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x80], 0
jmp 0x14000a49b
mov rsi, rbx
or rsi, 0xf
cmp rsi, rdi
jbe 0x14000a418
mov rsi, rdi
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000a449
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000a433
mov rdi, r12
jmp 0x14000a470
cmp rcx, 0x1000
jb 0x14000a468
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d36a
mov rcx, rax
call fcn.1400ac110
test rax, rax
je 0x14000d0fe
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a470
call fcn.1400ac110
mov rdi, rax
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], rsi
mov r8, rbx
lea rdx, [0x140122d00]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x80]
lea rcx, [0x140122e10]
call fcn.140057820
cmp byte [0x140123028], 0
je 0x14000a4cb
mov byte [0x140123950], 1
mov dword [reloc.WS2_32.dll_accept], r12d
jmp 0x14000a53d
mov byte [0x140123950], 0
mov ebx, 5
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__www.youtube.com_watch_vV_BKgnB5Uwk
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__www.youtube.com_watch_vV_BKgnB5Uwk
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__www.youtube.com_watch_vV_BKgnB5Uwk
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdi, [0x140122c00]
mov dword [rbp + 0x118], 0x438c0000
mov dword [rbp + 0x11c], 0x420c0000
lea rdx, [rbp + 0x118]
lea rcx, str.Register
call fcn.1400400c0
test al, al
je 0x14000a964
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x290], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], r12
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14000a5a0
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x14000d364
cmp rbx, 0xf
ja 0x14000a5f7
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov r8, rbx
lea rdx, [0x140122c00]
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0xa0], 0
jmp 0x14000a6a3
mov rsi, rbx
or rsi, 0xf
cmp rsi, rdi
jbe 0x14000a616
mov rsi, rdi
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000a647
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000a631
mov rdi, r12
jmp 0x14000a66e
cmp rcx, 0x1000
jb 0x14000a666
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d376
mov rcx, rax
call fcn.1400ac110
test rax, rax
je 0x14000d10c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a66e
call fcn.1400ac110
mov rdi, rax
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rsi
mov r8, rbx
lea rdx, [0x140122c00]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
movabs rdi, 0x7fffffffffffffff
lea rax, [rbp + 0x130]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov rbx, 0xffffffffffffffff
lea rcx, [0x140122c80]
inc rbx
cmp byte [rcx + rbx], 0
jne 0x14000a6d5
cmp rbx, rdi
ja 0x14000d38e
cmp rbx, 0xf
ja 0x14000a71e
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rcx
lea rcx, [rbp + 0x130]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x130], 0
jmp 0x14000a7ca
mov rsi, rbx
or rsi, 0xf
cmp rsi, rdi
jbe 0x14000a73d
mov rsi, rdi
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000a76e
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000a758
mov rdi, r12
jmp 0x14000a795
cmp rcx, 0x1000
jb 0x14000a78d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d37c
mov rcx, rax
call fcn.1400ac110
test rax, rax
je 0x14000d105
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a795
call fcn.1400ac110
mov rdi, rax
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], rsi
mov r8, rbx
lea rdx, [0x140122c80]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
movabs rdi, 0x7fffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], r12
mov rbx, 0xffffffffffffffff
lea rcx, [0x140122d00]
inc rbx
cmp byte [rcx + rbx], 0
jne 0x14000a7f0
cmp rbx, rdi
ja 0x14000d388
cmp rbx, 0xf
ja 0x14000a839
mov qword [rbp + 0x160], rbx
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov r8, rbx
mov rdx, rcx
lea rcx, [rbp + 0x150]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x150], 0
jmp 0x14000a8db
mov rsi, rbx
or rsi, 0xf
cmp rsi, rdi
jbe 0x14000a858
mov rsi, rdi
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000a889
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000a873
mov rdi, r12
jmp 0x14000a8b0
cmp rcx, 0x1000
jb 0x14000a8a8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d382
mov rcx, rax
call fcn.1400ac110
test rax, rax
je 0x14000d10c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a8b0
call fcn.1400ac110
mov rdi, rax
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x160], rbx
mov qword [rbp + 0x168], rsi
mov r8, rbx
lea rdx, [0x140122d00]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea r9, [rbp + 0xa0]
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x150]
lea rcx, [0x140122e10]
call fcn.140059b60
mov ebx, 5
xor r9d, r9d
lea r8, str.https:__discord.gg_PZUMyG3P
lea rdx, str.open
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r12
cmp byte [0x140123028], cl
je 0x14000a935
mov byte [0x140123950], 1
mov dword [reloc.WS2_32.dll_accept], r12d
jmp 0x14000a93c
mov byte [0x140123950], 0
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.gg_PZUMyG3P
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.14001fa30
call fcn.1400170c0
mov eax, dword [reloc.WS2_32.dll_accept]
lea rsi, [0x140122c80]
test eax, eax
jne 0x14000b47b
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, dword [0x1400c65dc]
addss xmm0, dword [0x1400c65b4]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
mov dword [rbp + 0x120], 0x43aa0000
mov dword [rbp + 0x124], 0x43f50000
lea rdx, [rbp + 0x120]
call fcn.140017020
mov dword [rbp + 0x128], 0x43aa0000
mov dword [rbp + 0x12c], 0x438c0000
mov rbx, qword [0x140122d88]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.AIM_MENU_X____LUKZI_CHEATS
call fcn.14000fde0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000aa6b
lea r8, str.AIM_MENU_X____LUKZI_CHEATS
mov edx, ntohs
mov ecx, eax
call fcn.140026430
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x128]
mov edx, edi
lea rcx, str.AIM_MENU_X____LUKZI_CHEATS
call fcn.1400418b0
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm9
addss xmm0, xmm10
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f900
mov ecx, dword [0x140123960]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 5
je 0x14000ab8e
mov qword [rbp + 0x890], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x1400078e0]
mov qword [rax], rcx
mov qword [rbp + 0x890], rax
lea rcx, [rbp + 0x188]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x180], rax
test rax, rax
je 0x14000d11d
mov qword [rbp + 0x890], r12
cmp dword [rbp + 0x188], 0
je 0x14000d113
movaps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d113
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x180], xmm0
lea r9, [0x140123960]
lea r8, str.Apply_in_Every_Match
lea rdx, [0x140123152]
lea rcx, str.Aimbot_Head___Safe
call fcn.140042520
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000abfb
cmp byte [rcx + 0x48f2], 0
jne 0x14000abfb
test byte [rcx + 0x4770], 4
jne 0x14000acdb
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000acdb
test eax, eax
jne 0x14000acc3
jmp 0x14000acdb
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000acdb
cmp qword [rcx + 0x3ed8], r9
je 0x14000ac1a
test al, al
jns 0x14000acdb
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000ac3f
cmp eax, dword [rcx + 0x476c]
je 0x14000ac3f
cmp byte [rcx + 0x3f3d], 0
jne 0x14000ac3f
cmp eax, dword [r9 + 0x74]
jne 0x14000acdb
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000aca4
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000aca4
cmp byte [rdx + 0xaf], 0
je 0x14000aca4
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000aca4
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000ac7e
bt r8d, 0x1a
jae 0x14000aca4
cmp qword [rax + 0x370], rdx
je 0x14000aca4
cmp rax, rdx
je 0x14000aca4
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000ac87
test dword [rcx + 0x4770], 0x100
je 0x14000acdb
test byte [rcx + 0x4770], 4
jne 0x14000acdb
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000acc3
cmp byte [r9 + 0xb0], 0
jne 0x14000acdb
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Amazon_ff_
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.Apply_InLogin__Only_Amazon_FF_
lea rdx, [0x140123155]
lea rcx, str.Aimbot_Login____Safe
call fcn.140042520
test al, al
je 0x14000ad96
mov qword [rbp + 0x898], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007df0]
mov qword [rax], rcx
mov qword [rbp + 0x898], rax
lea rcx, [rbp + 0x198]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x190], rax
test rax, rax
je 0x14000d13a
mov qword [rbp + 0x898], r12
cmp dword [rbp + 0x198], 0
je 0x14000d130
movaps xmm0, xmmword [rbp + 0x190]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d130
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x190], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000ade2
cmp byte [rcx + 0x48f2], 0
jne 0x14000ade2
test byte [rcx + 0x4770], 4
jne 0x14000aec4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000aec4
test eax, eax
jne 0x14000aeac
jmp 0x14000aec4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000aec4
cmp qword [rcx + 0x3ed8], r9
je 0x14000ae01
test al, al
jns 0x14000aec4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000ae26
cmp eax, dword [rcx + 0x476c]
je 0x14000ae26
cmp byte [rcx + 0x3f3d], 0
jne 0x14000ae26
cmp eax, dword [r9 + 0x74]
jne 0x14000aec4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000ae8d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000ae8d
cmp byte [rdx + 0xaf], 0
je 0x14000ae8d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000ae8d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000ae65
bt r8d, 0x1a
jae 0x14000ae8d
cmp qword [rax + 0x370], rdx
je 0x14000ae8d
nop
cmp rax, rdx
je 0x14000ae8d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000ae70
test dword [rcx + 0x4770], 0x100
je 0x14000aec4
test byte [rcx + 0x4770], 4
jne 0x14000aec4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000aeac
cmp byte [r9 + 0xb0], 0
jne 0x14000aec4
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Amazon_ff_
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, [0x1400bf870]
lea rdx, [0x140123153]
lea rcx, str._Sniper_Scope
call fcn.140042520
test al, al
je 0x14000af7f
mov qword [rbp + 0x8a0], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x1400078f0]
mov qword [rax], rcx
mov qword [rbp + 0x8a0], rax
lea rcx, [rbp + 0x1b8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1b0], rax
test rax, rax
je 0x14000d157
mov qword [rbp + 0x8a0], r12
cmp dword [rbp + 0x1b8], 0
je 0x14000d14d
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d14d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000afcb
cmp byte [rcx + 0x48f2], 0
jne 0x14000afcb
test byte [rcx + 0x4770], 4
jne 0x14000b0ab
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b0ab
test eax, eax
jne 0x14000b093
jmp 0x14000b0ab
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b0ab
cmp qword [rcx + 0x3ed8], r9
je 0x14000afea
test al, al
jns 0x14000b0ab
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b00f
cmp eax, dword [rcx + 0x476c]
je 0x14000b00f
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b00f
cmp eax, dword [r9 + 0x74]
jne 0x14000b0ab
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b074
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b074
cmp byte [rdx + 0xaf], 0
je 0x14000b074
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b074
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b04e
bt r8d, 0x1a
jae 0x14000b074
cmp qword [rax + 0x370], rdx
je 0x14000b074
cmp rax, rdx
je 0x14000b074
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b057
test dword [rcx + 0x4770], 0x100
je 0x14000b0ab
test byte [rcx + 0x4770], 4
jne 0x14000b0ab
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b093
cmp byte [r9 + 0xb0], 0
jne 0x14000b0ab
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Traning_Ground_
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.Apply_In_Traning_Ground
lea rdx, [0x140123150]
lea rcx, str.Snipers__Fast_Switch
call fcn.140042520
test al, al
je 0x14000b166
mov qword [rbp + 0x8b0], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007ef0]
mov qword [rax], rcx
mov qword [rbp + 0x8b0], rax
lea rcx, [rbp + 0x1c8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1c0], rax
test rax, rax
je 0x14000d174
mov qword [rbp + 0x8b0], r12
cmp dword [rbp + 0x1c8], 0
je 0x14000d16a
movaps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d16a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b1b2
cmp byte [rcx + 0x48f2], 0
jne 0x14000b1b2
test byte [rcx + 0x4770], 4
jne 0x14000b294
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b294
test eax, eax
jne 0x14000b27c
jmp 0x14000b294
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b294
cmp qword [rcx + 0x3ed8], r9
je 0x14000b1d1
test al, al
jns 0x14000b294
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b1f6
cmp eax, dword [rcx + 0x476c]
je 0x14000b1f6
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b1f6
cmp eax, dword [r9 + 0x74]
jne 0x14000b294
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b25d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b25d
cmp byte [rdx + 0xaf], 0
je 0x14000b25d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b25d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b235
bt r8d, 0x1a
jae 0x14000b25d
cmp qword [rax + 0x370], rdx
je 0x14000b25d
nop
cmp rax, rdx
je 0x14000b25d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b240
test dword [rcx + 0x4770], 0x100
je 0x14000b294
test byte [rcx + 0x4770], 4
jne 0x14000b294
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b27c
cmp byte [r9 + 0xb0], 0
jne 0x14000b294
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Traning_Ground__
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.Apply_In_Traning_Ground
lea rdx, [0x140123167]
lea rcx, str.M82B__Locatio__Ammo
call fcn.140042520
test al, al
je 0x14000b34f
mov qword [rbp + 0x8e0], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007f00]
mov qword [rax], rcx
mov qword [rbp + 0x8e0], rax
lea rcx, [rbp + 0x1e8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1e0], rax
test rax, rax
je 0x14000d191
mov qword [rbp + 0x8e0], r12
cmp dword [rbp + 0x1e8], 0
je 0x14000d187
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d187
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b39b
cmp byte [rcx + 0x48f2], 0
jne 0x14000b39b
test byte [rcx + 0x4770], 4
jne 0x14000b47b
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b47b
test eax, eax
jne 0x14000b463
jmp 0x14000b47b
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b47b
cmp qword [rcx + 0x3ed8], r9
je 0x14000b3ba
test al, al
jns 0x14000b47b
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b3df
cmp eax, dword [rcx + 0x476c]
je 0x14000b3df
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b3df
cmp eax, dword [r9 + 0x74]
jne 0x14000b47b
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b444
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b444
cmp byte [rdx + 0xaf], 0
je 0x14000b444
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b444
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b41e
bt r8d, 0x1a
jae 0x14000b444
cmp qword [rax + 0x370], rdx
je 0x14000b444
cmp rax, rdx
je 0x14000b444
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b427
test dword [rcx + 0x4770], 0x100
je 0x14000b47b
test byte [rcx + 0x4770], 4
jne 0x14000b47b
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b463
cmp byte [r9 + 0xb0], 0
jne 0x14000b47b
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Traning_Ground__
call fcn.14003f470
call fcn.14001c230
call fcn.14001fa30
call fcn.1400170c0
mov dword [rbp + 0x1a0], 0x43aa0000
mov dword [rbp + 0x1a4], 0x43340000
mov rbx, qword [0x140122d88]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.VISUAL_MENU_X____LUKZI_CHEATS
call fcn.14000fde0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000b4f3
lea r8, str.VISUAL_MENU_X____LUKZI_CHEATS
mov edx, ntohs
mov ecx, eax
call fcn.140026430
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x1a0]
mov edx, edi
lea rcx, str.VISUAL_MENU_X____LUKZI_CHEATS
call fcn.1400418b0
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
addss xmm0, xmm9
addss xmm1, xmm10
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov byte [rax + 0x139], 1
call fcn.14001f900
xor r9d, r9d
lea r8, str.IN_LOBBY_IN_GAME
lea rdx, [0x14012315b]
lea rcx, str.CHAMS_MENU
call fcn.140042520
test al, al
je 0x14000b592
call fcn.140008430
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b5de
cmp byte [rcx + 0x48f2], 0
jne 0x14000b5de
test byte [rcx + 0x4770], 4
jne 0x14000b6c4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b6c4
test eax, eax
jne 0x14000b6ac
jmp 0x14000b6c4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b6c4
cmp qword [rcx + 0x3ed8], r9
je 0x14000b5fd
test al, al
jns 0x14000b6c4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b622
cmp eax, dword [rcx + 0x476c]
je 0x14000b622
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b622
cmp eax, dword [r9 + 0x74]
jne 0x14000b6c4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b68d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b68d
cmp byte [rdx + 0xaf], 0
je 0x14000b68d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b68d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b661
bt r8d, 0x1a
jae 0x14000b68d
cmp qword [rax + 0x370], rdx
je 0x14000b68d
nop word [rax + rax]
cmp rax, rdx
je 0x14000b68d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b670
test dword [rcx + 0x4770], 0x100
je 0x14000b6c4
test byte [rcx + 0x4770], 4
jne 0x14000b6c4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b6ac
cmp byte [r9 + 0xb0], 0
jne 0x14000b6c4
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Lobby__
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.IN_LOGIN_
lea rdx, [0x140123149]
lea rcx, str._Camara_Left_Safe
call fcn.140042520
test al, al
je 0x14000b77f
mov qword [rbp + 0x8e8], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140008010]
mov qword [rax], rcx
mov qword [rbp + 0x8e8], rax
lea rcx, [rbp + 0x1f8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1f0], rax
test rax, rax
je 0x14000d1ae
mov qword [rbp + 0x8e8], r12
cmp dword [rbp + 0x1f8], 0
je 0x14000d1a4
movaps xmm0, xmmword [rbp + 0x1f0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d1a4
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1f0], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b7cb
cmp byte [rcx + 0x48f2], 0
jne 0x14000b7cb
test byte [rcx + 0x4770], 4
jne 0x14000b8ab
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000b8ab
test eax, eax
jne 0x14000b893
jmp 0x14000b8ab
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000b8ab
cmp qword [rcx + 0x3ed8], r9
je 0x14000b7ea
test al, al
jns 0x14000b8ab
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b80f
cmp eax, dword [rcx + 0x476c]
je 0x14000b80f
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b80f
cmp eax, dword [r9 + 0x74]
jne 0x14000b8ab
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000b874
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000b874
cmp byte [rdx + 0xaf], 0
je 0x14000b874
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000b874
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000b84e
bt r8d, 0x1a
jae 0x14000b874
cmp qword [rax + 0x370], rdx
je 0x14000b874
cmp rax, rdx
je 0x14000b874
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000b857
test dword [rcx + 0x4770], 0x100
je 0x14000b8ab
test byte [rcx + 0x4770], 4
jne 0x14000b8ab
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000b893
cmp byte [r9 + 0xb0], 0
jne 0x14000b8ab
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Login__
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.Apply_In_Login
lea rdx, [0x140123162]
lea rcx, str.Guest_Reset
call fcn.140042520
test al, al
je 0x14000b966
mov qword [rbp + 0x8f0], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007f10]
mov qword [rax], rcx
mov qword [rbp + 0x8f0], rax
lea rcx, [rbp + 0x218]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x210], rax
test rax, rax
je 0x14000d1cb
mov qword [rbp + 0x8f0], r12
cmp dword [rbp + 0x218], 0
je 0x14000d1c1
movaps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d1c1
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x210], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000b9b2
cmp byte [rcx + 0x48f2], 0
jne 0x14000b9b2
test byte [rcx + 0x4770], 4
jne 0x14000ba94
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000ba94
test eax, eax
jne 0x14000ba7c
jmp 0x14000ba94
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000ba94
cmp qword [rcx + 0x3ed8], r9
je 0x14000b9d1
test al, al
jns 0x14000ba94
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000b9f6
cmp eax, dword [rcx + 0x476c]
je 0x14000b9f6
cmp byte [rcx + 0x3f3d], 0
jne 0x14000b9f6
cmp eax, dword [r9 + 0x74]
jne 0x14000ba94
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000ba5d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000ba5d
cmp byte [rdx + 0xaf], 0
je 0x14000ba5d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000ba5d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000ba35
bt r8d, 0x1a
jae 0x14000ba5d
cmp qword [rax + 0x370], rdx
je 0x14000ba5d
nop
cmp rax, rdx
je 0x14000ba5d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000ba40
test dword [rcx + 0x4770], 0x100
je 0x14000ba94
test byte [rcx + 0x4770], 4
jne 0x14000ba94
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000ba7c
cmp byte [r9 + 0xb0], 0
jne 0x14000ba94
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_In_Login__
call fcn.14003f470
call fcn.14001c230
call fcn.14001fa30
call fcn.1400170c0
mov dword [rbp + 0x1d0], 0x43aa0000
mov dword [rbp + 0x1d4], 0x435c0000
mov rbx, qword [0x140122d88]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.POWER_X____LUKZI_CHEATS
call fcn.14000fde0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000bb0c
lea r8, str.POWER_X____LUKZI_CHEATS
mov edx, ntohs
mov ecx, eax
call fcn.140026430
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x1d0]
mov edx, edi
lea rcx, str.POWER_X____LUKZI_CHEATS
call fcn.1400418b0
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm9
addss xmm0, xmm10
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f900
xor r9d, r9d
lea r8, str.BLOCK_ONLY_EMULATOR_NETWORK__
lea rdx, [0x140122be6]
lea rcx, str.BLOCK_INTERNET_X
call fcn.140042520
test al, al
je 0x14000bcbd
xor edx, edx
cmp byte [0x140122be6], 1
jne 0x14000bc65
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
jmp 0x14000bcb5
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WinExec]
xor r9d, r9d
lea r8, str.IN_LOGIN_
lea rdx, [0x14012314d]
lea rcx, str.FIX_DAMAGE_GIRL___SOON
call fcn.140042520
test al, al
je 0x14000bd78
mov qword [rbp + 0x8f8], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007ee0]
mov qword [rax], rcx
mov qword [rbp + 0x8f8], rax
lea rcx, [rbp + 0x228]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x220], rax
test rax, rax
je 0x14000d1e8
mov qword [rbp + 0x8f8], r12
cmp dword [rbp + 0x228], 0
je 0x14000d1de
movaps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d1de
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x220], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000bdc4
cmp byte [rcx + 0x48f2], 0
jne 0x14000bdc4
test byte [rcx + 0x4770], 4
jne 0x14000bea4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000bea4
test eax, eax
jne 0x14000be8c
jmp 0x14000bea4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000bea4
cmp qword [rcx + 0x3ed8], r9
je 0x14000bde3
test al, al
jns 0x14000bea4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000be08
cmp eax, dword [rcx + 0x476c]
je 0x14000be08
cmp byte [rcx + 0x3f3d], 0
jne 0x14000be08
cmp eax, dword [r9 + 0x74]
jne 0x14000bea4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000be6d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000be6d
cmp byte [rdx + 0xaf], 0
je 0x14000be6d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000be6d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000be47
bt r8d, 0x1a
jae 0x14000be6d
cmp qword [rax + 0x370], rdx
je 0x14000be6d
cmp rax, rdx
je 0x14000be6d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000be50
test dword [rcx + 0x4770], 0x100
je 0x14000bea4
test byte [rcx + 0x4770], 4
jne 0x14000bea4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000be8c
cmp byte [r9 + 0xb0], 0
jne 0x14000bea4
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_Login__
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.Apply_In_Login
lea rdx, [0x14012315d]
lea rcx, str.BYPASS_EMUALTOR
call fcn.140042520
test al, al
je 0x14000bf50
mov qword [rbp + 0x900], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140008000]
mov qword [rax], rcx
mov qword [rbp + 0x900], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14000d205
mov qword [rbp + 0x900], r12
cmp dword [rbp + 0x38], 0
je 0x14000d1fb
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d1fb
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000bf9c
cmp byte [rcx + 0x48f2], 0
jne 0x14000bf9c
test byte [rcx + 0x4770], 4
jne 0x14000c07c
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c07c
test eax, eax
jne 0x14000c064
jmp 0x14000c07c
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c07c
cmp qword [rcx + 0x3ed8], r9
je 0x14000bfbb
test al, al
jns 0x14000c07c
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000bfe0
cmp eax, dword [rcx + 0x476c]
je 0x14000bfe0
cmp byte [rcx + 0x3f3d], 0
jne 0x14000bfe0
cmp eax, dword [r9 + 0x74]
jne 0x14000c07c
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c045
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c045
cmp byte [rdx + 0xaf], 0
je 0x14000c045
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c045
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c01f
bt r8d, 0x1a
jae 0x14000c045
cmp qword [rax + 0x370], rdx
je 0x14000c045
cmp rax, rdx
je 0x14000c045
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c028
test dword [rcx + 0x4770], 0x100
je 0x14000c07c
test byte [rcx + 0x4770], 4
jne 0x14000c07c
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c064
cmp byte [r9 + 0xb0], 0
jne 0x14000c07c
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__NEED_TO_APPLY_AFTER_THE_BLOCK_INTERNET__
call fcn.14003f470
call fcn.14001c230
call fcn.14001fa30
call fcn.1400170c0
mov dword [rbp + 0x200], 0x43aa0000
mov dword [rbp + 0x204], 0x43a00000
mov rbx, qword [0x140122d88]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.EXTERNAL_____LUKZI_CHEATS
call fcn.14000fde0
mov edi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x14000c0f4
lea r8, str.EXTERNAL_____LUKZI_CHEATS
mov edx, ntohs
mov ecx, eax
call fcn.140026430
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x200]
mov edx, edi
lea rcx, str.EXTERNAL_____LUKZI_CHEATS
call fcn.1400418b0
mov rcx, qword [0x140122d88]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm1, xmm9
addss xmm0, xmm10
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14001f900
xor r9d, r9d
lea r8, str.IN_Traning_
lea rdx, [0x14012314f]
lea rcx, str.No__Recoil_Safe
call fcn.140042520
test al, al
je 0x14000c19e
mov edx, 0x1f4
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c1ea
cmp byte [rcx + 0x48f2], 0
jne 0x14000c1ea
test byte [rcx + 0x4770], 4
jne 0x14000c2ca
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c2ca
test eax, eax
jne 0x14000c2b2
jmp 0x14000c2ca
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c2ca
cmp qword [rcx + 0x3ed8], r9
je 0x14000c209
test al, al
jns 0x14000c2ca
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c22e
cmp eax, dword [rcx + 0x476c]
je 0x14000c22e
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c22e
cmp eax, dword [r9 + 0x74]
jne 0x14000c2ca
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c293
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c293
cmp byte [rdx + 0xaf], 0
je 0x14000c293
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c293
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c26d
bt r8d, 0x1a
jae 0x14000c293
cmp qword [rax + 0x370], rdx
je 0x14000c293
cmp rax, rdx
je 0x14000c293
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c276
test dword [rcx + 0x4770], 0x100
je 0x14000c2ca
test byte [rcx + 0x4770], 4
jne 0x14000c2ca
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c2b2
cmp byte [r9 + 0xb0], 0
jne 0x14000c2ca
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_GAME__
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.IN_Traning_
lea rdx, [0x140123162]
lea rcx, str.Fast_Reload
call fcn.140042520
test al, al
je 0x14000c376
mov qword [rbp + 0x908], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007e00]
mov qword [rax], rcx
mov qword [rbp + 0x908], rax
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14000d21f
mov qword [rbp + 0x908], r12
cmp dword [rbp + 0x48], 0
je 0x14000d215
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d215
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c3c2
cmp byte [rcx + 0x48f2], 0
jne 0x14000c3c2
test byte [rcx + 0x4770], 4
jne 0x14000c4a4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c4a4
test eax, eax
jne 0x14000c48c
jmp 0x14000c4a4
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c4a4
cmp qword [rcx + 0x3ed8], r9
je 0x14000c3e1
test al, al
jns 0x14000c4a4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c406
cmp eax, dword [rcx + 0x476c]
je 0x14000c406
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c406
cmp eax, dword [r9 + 0x74]
jne 0x14000c4a4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c46d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c46d
cmp byte [rdx + 0xaf], 0
je 0x14000c46d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c46d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c445
bt r8d, 0x1a
jae 0x14000c46d
cmp qword [rax + 0x370], rdx
je 0x14000c46d
nop
cmp rax, rdx
je 0x14000c46d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c450
test dword [rcx + 0x4770], 0x100
je 0x14000c4a4
test byte [rcx + 0x4770], 4
jne 0x14000c4a4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c48c
cmp byte [r9 + 0xb0], 0
jne 0x14000c4a4
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_in_GAME__
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.In_Game
lea rdx, [0x14012315f]
lea rcx, str.Fast_Landing
call fcn.140042520
test al, al
je 0x14000c55f
mov qword [rbp + 0x8a8], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007ec0]
mov qword [rax], rcx
mov qword [rbp + 0x8a8], rax
lea rcx, [rbp + 0x178]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x170], rax
test rax, rax
je 0x14000d239
mov qword [rbp + 0x8a8], r12
cmp dword [rbp + 0x178], 0
je 0x14000d22f
movaps xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d22f
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x170], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c5ab
cmp byte [rcx + 0x48f2], 0
jne 0x14000c5ab
test byte [rcx + 0x4770], 4
jne 0x14000c68b
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c68b
test eax, eax
jne 0x14000c673
jmp 0x14000c68b
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c68b
cmp qword [rcx + 0x3ed8], r9
je 0x14000c5ca
test al, al
jns 0x14000c68b
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c5ef
cmp eax, dword [rcx + 0x476c]
je 0x14000c5ef
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c5ef
cmp eax, dword [r9 + 0x74]
jne 0x14000c68b
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c654
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c654
cmp byte [rdx + 0xaf], 0
je 0x14000c654
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c654
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c62e
bt r8d, 0x1a
jae 0x14000c654
cmp qword [rax + 0x370], rdx
je 0x14000c654
cmp rax, rdx
je 0x14000c654
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c637
test dword [rcx + 0x4770], 0x100
je 0x14000c68b
test byte [rcx + 0x4770], 4
jne 0x14000c68b
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c673
cmp byte [r9 + 0xb0], 0
jne 0x14000c68b
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__DONT_USE_MAIN_ID__NOT_SAFE___
call fcn.14003f470
call fcn.14001c230
xor r9d, r9d
lea r8, str.Dont_Use_Main_ID_
lea rdx, [0x14012315a]
lea rcx, str.Bypass_Wallhack
call fcn.140042520
test al, al
je 0x14000c737
mov qword [rbp + 0x910], r12
mov ecx, 8
call fcn.1400ac110
lea rcx, [0x140007ed0]
mov qword [rax], rcx
mov qword [rbp + 0x910], rax
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000d256
mov qword [rbp + 0x910], r12
cmp dword [rbp + 0x58], 0
je 0x14000d24c
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d24c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000c783
cmp byte [rcx + 0x48f2], 0
jne 0x14000c783
test byte [rcx + 0x4770], 4
jne 0x14000c864
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000c864
test eax, eax
jne 0x14000c84c
jmp 0x14000c864
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000c864
cmp qword [rcx + 0x3ed8], r9
je 0x14000c7a2
test al, al
jns 0x14000c864
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000c7c7
cmp eax, dword [rcx + 0x476c]
je 0x14000c7c7
cmp byte [rcx + 0x3f3d], 0
jne 0x14000c7c7
cmp eax, dword [r9 + 0x74]
jne 0x14000c864
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000c82d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000c82d
cmp byte [rdx + 0xaf], 0
je 0x14000c82d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000c82d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000c806
bt r8d, 0x1a
jae 0x14000c82d
cmp qword [rax + 0x370], rdx
je 0x14000c82d
nop
cmp rax, rdx
je 0x14000c82d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000c810
test dword [rcx + 0x4770], 0x100
je 0x14000c864
test byte [rcx + 0x4770], 4
jne 0x14000c864
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000c84c
cmp byte [r9 + 0xb0], 0
jne 0x14000c864
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__Apply_In_Lobby__
call fcn.14003f470
call fcn.14001c230
lea r9, [0x140123910]
lea r8, str.Dont_Use_Main_ID_
lea rdx, [0x140122be2]
lea rcx, str.WALLHACK_EXTREME
call fcn.140042520
mov byte [0x140122be0], al
mov ecx, dword [0x140123910]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000c9e4
cmp byte [0x140122d80], 0
jne 0x14000c9eb
mov byte [0x140122d80], 1
cmp byte [0x140122be3], 0
sete al
mov byte [0x140122be3], al
mov rcx, r13
test al, al
je 0x14000c95b
mov qword [rbp + 0x918], r12
call fcn.1400ac110
mov qword [rbp + 0x918], rax
lea rcx, [rbp + 0x8c8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e130]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x8c0], rax
test rax, rax
je 0x14000d270
mov qword [rbp + 0x918], r12
cmp dword [rbp + 0x8c8], 0
je 0x14000d266
movaps xmm0, xmmword [rbp + 0x8c0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d266
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x8c0], xmm0
jmp 0x14000c9eb
mov qword [rbp + 0x920], r12
call fcn.1400ac110
mov qword [rbp + 0x920], rax
lea rcx, [rbp + 0x8d8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e130]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x8d0], rax
test rax, rax
je 0x14000d28d
mov qword [rbp + 0x920], r12
cmp dword [rbp + 0x8d8], 0
je 0x14000d283
movaps xmm0, xmmword [rbp + 0x8d0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d283
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x8d0], xmm0
jmp 0x14000c9eb
mov byte [0x140122d80], 0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000ca37
cmp byte [rcx + 0x48f2], 0
jne 0x14000ca37
test byte [rcx + 0x4770], 4
jne 0x14000cb17
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000cb17
test eax, eax
jne 0x14000caff
jmp 0x14000cb17
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000cb17
cmp qword [rcx + 0x3ed8], r9
je 0x14000ca56
test al, al
jns 0x14000cb17
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000ca7b
cmp eax, dword [rcx + 0x476c]
je 0x14000ca7b
cmp byte [rcx + 0x3f3d], 0
jne 0x14000ca7b
cmp eax, dword [r9 + 0x74]
jne 0x14000cb17
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000cae0
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000cae0
cmp byte [rdx + 0xaf], 0
je 0x14000cae0
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000cae0
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000caba
bt r8d, 0x1a
jae 0x14000cae0
cmp qword [rax + 0x370], rdx
je 0x14000cae0
cmp rax, rdx
je 0x14000cae0
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000cac3
test dword [rcx + 0x4770], 0x100
je 0x14000cb17
test byte [rcx + 0x4770], 4
jne 0x14000cb17
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000caff
cmp byte [r9 + 0xb0], 0
jne 0x14000cb17
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__DONT_USE_MAIN_ID___NO_GARRENTY___
call fcn.14003f470
call fcn.14001c230
lea r9, [0x140123134]
lea r8, str.Dont_Use_Main_ID_
lea rdx, [0x140122be5]
lea rcx, str.Speed_Hack_20_X_On_Off
call fcn.140042520
mov byte [0x140122be7], al
mov ecx, dword [0x140123134]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000cc97
cmp byte [0x140122be1], 0
jne 0x14000cc9e
mov byte [0x140122be1], 1
cmp byte [0x140122be4], 0
sete al
mov byte [0x140122be4], al
mov rcx, r13
test al, al
je 0x14000cc0e
mov qword [rbp + 0x928], r12
call fcn.1400ac110
mov qword [rbp + 0x928], rax
lea rcx, [rbp + 0x888]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e160]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x880], rax
test rax, rax
je 0x14000d2aa
mov qword [rbp + 0x928], r12
cmp dword [rbp + 0x888], 0
je 0x14000d2a0
movaps xmm0, xmmword [rbp + 0x880]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d2a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x880], xmm0
jmp 0x14000cc9e
mov qword [rbp + 0x930], r12
call fcn.1400ac110
mov qword [rbp + 0x930], rax
lea rcx, [rbp + 0x878]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14000e160]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x870], rax
test rax, rax
je 0x14000d2c7
mov qword [rbp + 0x930], r12
cmp dword [rbp + 0x878], 0
je 0x14000d2bd
movaps xmm0, xmmword [rbp + 0x870]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d2bd
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x870], xmm0
jmp 0x14000cc9e
mov byte [0x140122be1], 0
mov rcx, qword [0x140122d88]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], 0
je 0x14000ccea
cmp byte [rcx + 0x48f2], 0
jne 0x14000ccea
test byte [rcx + 0x4770], 4
jne 0x14000cdca
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14000cdca
test eax, eax
jne 0x14000cdb2
jmp 0x14000cdca
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x14000cdca
cmp qword [rcx + 0x3ed8], r9
je 0x14000cd09
test al, al
jns 0x14000cdca
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14000cd2e
cmp eax, dword [rcx + 0x476c]
je 0x14000cd2e
cmp byte [rcx + 0x3f3d], 0
jne 0x14000cd2e
cmp eax, dword [r9 + 0x74]
jne 0x14000cdca
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14000cd93
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14000cd93
cmp byte [rdx + 0xaf], 0
je 0x14000cd93
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14000cd93
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14000cd6d
bt r8d, 0x1a
jae 0x14000cd93
cmp qword [rax + 0x370], rdx
je 0x14000cd93
cmp rax, rdx
je 0x14000cd93
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14000cd76
test dword [rcx + 0x4770], 0x100
je 0x14000cdca
test byte [rcx + 0x4770], 4
jne 0x14000cdca
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14000cdb2
cmp byte [r9 + 0xb0], 0
jne 0x14000cdca
xor ecx, ecx
call fcn.1400203f0
lea rcx, str.__After_Every_Match_Restart_The_Panel__
call fcn.14003f470
call fcn.14001c230
call fcn.14001fa30
call fcn.1400170c0
call fcn.14001fa30
call fcn.1400170c0
mov ecx, r13d
call fcn.1400106d0
call fcn.1400022e0
call fcn.14001c230
mov rdi, qword [0x140122bf8]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14000ce68
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000ce5f
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp + 0x990], xmm0
mov dword [rbp + 0x840], reloc.WS2_32.dll_send
lea rcx, [rbp + 0x990]
mov qword [rbp + 0x848], rcx
mov dword [rbp + 0x850], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x840]
mov rcx, rdi
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000ce85
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1400d6104]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000cea2
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1400d6104]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14000d2da
mov rax, qword [0x140122d88]
movss xmm0, dword [rax + 0x18]
mulss xmm0, dword [0x1400c6598]
mov ecx, dword [0x140121d20]
cmp ecx, 0xff
jg 0x14000cee5
cmp byte [reloc.WS2_32.dll_accept], 0
mov eax, Ordinal_301
jne 0x14000cee8
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x140121d20], r8d
cmp r8d, 0xff
jle 0x14000cf25
mov dword [0x140121d20], 0xff
mov r8d, 0xff
xor edx, edx
mov r9d, 2
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, r12d
cmp dword [0x140121d20], r12d
mov eax, 5
cmovg edx, eax
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.1400165e0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa00], xmm0
mov rcx, qword [0x140123918]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1401231c8]
mov edx, r13d
call qword [rax + 0x108]
mov rcx, qword [0x140123918]
mov rax, qword [rcx]
lea r8, [rbp + 0xa00]
mov rdx, qword [0x1401231c8]
call qword [rax + 0x190]
mov rax, qword [0x140122d88]
mov rcx, qword [rax + 0x48a8]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r12
cmp byte [rax], r12b
cmovne rcx, rax
call fcn.14003b010
mov rcx, qword [0x1401231d0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r13d
call qword [rax + 0x40]
jmp 0x140009693
mov rdi, qword [0x140122d88]
test rdi, rdi
je 0x14000cff4
mov rbx, qword [rdi + 0xa0]
jmp 0x14000cff7
mov rbx, r12
call fcn.14003bfc0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14000d00b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d019
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000d028
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rdi + 0x90], r12
mov qword [rdi + 0xa0], r12
mov rax, qword [0x140122d88]
test rax, rax
je 0x14000d048
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140122d88]
test rax, rax
je 0x14000d066
mov rbx, qword [rax + 0x98]
jmp 0x14000d069
mov rbx, r12
lea rdi, [rax + 8]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14000d083
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140122d88]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
test rax, rax
je 0x14000d09c
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140122d88]
mov qword [0x140122d88], rbx
call fcn.140012390
mov qword [0x140122d88], r12
test rbx, rbx
je 0x14000d0e7
mov rcx, rbx
call fcn.140027660
mov rax, qword [0x140122d88]
test rax, rax
je 0x14000d0de
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140002a80
mov rcx, qword [0x140122bf8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x14000d2e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x188], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x198], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1b8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1c8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1e8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1f8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x218], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x228], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x38], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x178], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x8c8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x8d8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x888], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x878], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140002a80
mov rdx, qword [rbp + 0x808]
mov rcx, qword [rbp + 0x830]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [rbp + 0xa10]
xor rcx, rsp
call fcn.1400ac0f0
lea r11, [rsp + 0xbc0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400022a0
nop
call fcn.140002090
nop
call fcn.1400022a0
nop
call fcn.140002090
nop
call fcn.140002090
nop
call fcn.140002090
int3
call fcn.1400022a0
nop
call fcn.1400022a0
int3