Function at 0x140044170
Capabilities:
Create process on windows
Create thread
Download url
Execute command
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0x960]
sub rsp, 0xa60
lea rdx, [rbp + 0x330]
lea rdx, [rdx + 0x80]
lea rbx, [0x140000000]
movups xmm0, xmmword [rbx + 0x14d9d0]
lea rcx, [rbx + 0x14d9d0]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea r8, str.C:WindowsSystem32kernel32.dll
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0x580]
mov byte [rdx + 0x38], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r12d, r12d
lea r8, [rbp + 0x580]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, [rbp + 0x330]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x14da90]
lea rax, [rbx + 0x14da90]
mov edx, 0x104
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x4b0]
movups xmmword [rcx], xmm0
lea r8, str.C:WindowsSystem32charme_compressed.dll
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx - 0x10], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0xb0]
movzx eax, word [rax + 0xc0]
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm1
mov word [rcx + 0x40], ax
lea rcx, [rbp + 0x690]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x690]
xor ecx, ecx
lea rdx, [rbp + 0x4b0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, [rbp + 0x3f0]
movups xmm0, xmmword [rbx + 0x14db60]
lea rcx, [rbx + 0x14db60]
mov edx, 0x104
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov qword [r8 + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0x7a0]
mov byte [r8 + 0x38], al
lea r8, str.C:WindowsSystem32kernel64.dll
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x7a0]
xor ecx, ecx
lea rdx, [rbp + 0x3f0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.14003f3e0
mov rcx, rax
call fcn.14003f6b0
test eax, eax
je 0x140044413
mov r8d, eax
mov dword [0x140170158], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140170160], rax
call fcn.14003f3e0
mov rcx, rax
call fcn.14003f6b0
test eax, eax
je 0x140044446
mov r8d, eax
mov dword [0x140170158], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140170160], rax
test rax, rax
jne 0x14004445f
mov r8d, Ordinal_26
lea rdx, str.Status:_No_Process_Found_
lea rcx, [0x14016f258]
call fcn.14003ac70
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x78]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14004746a
mov rcx, qword [rbp - 0x78]
lea rax, [rbp - 0x80]
mov r9d, 4
mov dword [rsp + 0x78], r12d
lea r8, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x10]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14004746a
cmp dword [rsp + 0x78], r12d
setne al
test al, al
je 0x14004746a
mov qword [rsp + 0x28], r12
lea r8, [0x140047750]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
mov qword [rsp + 0xa50], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003fce0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040ac0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140042b70]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400432b0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040ee0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140042fa0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040ee0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040ee0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140043b90]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140041010]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov dword [rsp + 0x20], r12d
lea r8, [0x140040ee0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040f00]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400433d0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040ee0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140041150]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140042980]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140041be0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140042430]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140043860]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140043a70]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400430f0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140043e10]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003f3e0
mov rcx, rax
call fcn.14003f6b0
lea rcx, [0x1401701d0]
call fcn.1400bcb70
cmp byte [0x1401703e8], r12b
jne 0x1400447c0
lea rcx, [0x1401703f0]
call fcn.14003aa30
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x140047510]
mov qword [rsp + 0xa88], rdi
mov edx, 0x7f00
mov qword [rbp + 0x2a8], rax
xor ecx, ecx
mov qword [rsp + 0xa90], r13
mov dword [rbp + 0x2a0], 0x50
mov dword [rbp + 0x2a4], 0x40
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x2c0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2c8], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x2d8], rax
lea rax, str.WipX_Corp
mov qword [rbp + 0x2e0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x2a0]
mov qword [rbp + 0x2e8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xd2]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
lea r8, [0x14014dc84]
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x2e0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x1a4
sar eax, 1
sub eax, 0x96
mov dword [rsp + 0x30], Ordinal_301
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x1401700e0], rax
lea edx, [r13 - 0x15]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x1401700e0]
lea edx, [r13 - 0x15]
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1401700e0]
lea r9d, [r13 + 1]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdi, qword [0x1401700e0]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140044994
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14004498b
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp - 0x68]
mov qword [rbp + 0x288], rcx
lea rdx, [rbp + 0x280]
mov rcx, rdi
mov dword [rbp + 0x280], reloc.WS2_32.dll_send
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp + 0x290], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x14014ed50]
lea rdx, [rbp + 0x318]
mov rcx, qword [0x1401700e0]
movdqu xmmword [rbp + 0x318], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1401700e0]
lea rdx, [0x1401700f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x1401700e0]
lea rcx, [rsp + 0x68]
mov qword [rbp + 0x220], rax
xor r9d, r9d
lea rax, [0x1401704b8]
mov qword [rbp + 0x204], r12
mov qword [rsp + 0x58], rax
xor r8d, r8d
lea rax, [rbp - 0x80]
mov qword [rbp + 0x218], 2
mov qword [rsp + 0x50], rax
mov edx, r13d
lea rax, [0x1401704b0]
mov qword [rbp + 0x230], 2
mov qword [rsp + 0x48], rax
lea rax, [0x1401704a8]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov qword [rbp + 0x1f0], r12
mov dword [rbp + 0x200], Ordinal_33
mov dword [rbp + 0x1f8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x1fc], r13d
mov dword [rbp + 0x214], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x20c], r13
mov qword [rbp + 0x228], r13
mov dword [rsp + 0x68], 0xb000
mov dword [rsp + 0x6c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140044aca
call fcn.140047490
mov rdx, qword [rbp + 0x2b8]
mov rcx, qword [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r13d
jmp 0x14004743d
mov rcx, qword [0x1401704a8]
lea r9, [rsp + 0x60]
mov qword [rsp + 0xa80], rsi
lea r8, [0x14014eb18]
mov qword [rsp + 0xa58], r14
xor edx, edx
movaps xmmword [rsp + 0xa40], xmm6
mov rax, qword [rcx]
movaps xmmword [rsp + 0xa30], xmm7
movaps xmmword [rsp + 0xa20], xmm8
movaps xmmword [rsp + 0xa10], xmm9
movaps xmmword [rsp + 0xa00], xmm10
movaps xmmword [rsp + 0x9f0], xmm11
movaps xmmword [rsp + 0x9e0], xmm12
movaps xmmword [rsp + 0x9d0], xmm13
movaps xmmword [rsp + 0x9c0], xmm14
movaps xmmword [rsp + 0x9b0], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x1401704b0]
lea r9, [0x140170498]
mov rdx, qword [rsp + 0x60]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1401700e0]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401700e0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140170080]
test rbx, rbx
je 0x140044ba5
inc dword [rbx + 0xf4]
mov ecx, 0x5dd8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140044bc1
xor edx, edx
mov rcx, rax
call fcn.140001b00
jmp 0x140044bc4
mov rax, r12
mov qword [0x140170080], rax
call fcn.140006290
test rbx, rbx
je 0x140044bde
mov qword [0x140170080], rbx
jmp 0x140044be5
mov rbx, qword [0x140170080]
test rbx, rbx
jne 0x140044c0b
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140170080]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
movss xmm15, dword [0x14014ed0c]
xor eax, eax
movups xmmword [rbp + 0x200], xmm6
mov qword [rbp + 0x270], rax
mov eax, 0xffff
movups xmmword [rbp + 0x230], xmm6
mov dword [rbp + 0x208], 3
movups xmmword [rbp + 0x240], xmm6
mov dword [rbp + 0x20c], r13d
movups xmmword [rbp + 0x1f0], xmm6
mov byte [rbp + 0x1fc], r13b
mov dword [rbp + 0x234], 0x7f7fffff
mov dword [rbp + 0x240], 0x3f800000
mov word [rbp + 0x244], ax
mov dword [rbp + 0x23c], 0x10c
cmp byte [rsi + 0x18], r12b
je 0x140044ca2
mov r8d, 0x89b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x1f0]
movaps xmm8, xmmword [rbp + 0x200]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x230]
movaps xmm10, xmmword [rbp + 0x240]
movsd xmm11, qword [rbp + 0x270]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140044d17
mov r8d, 0x89d
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x140166110]
mov dword [rbp - 0x48], 0x8574
lea r14, [0x14014b248]
mov qword [rbp - 0x50], r15
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x18], r14
mov rcx, rsi
mov dword [rbp - 0x3c], 0x41b00000
call fcn.140025ff0
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r12b
je 0x140044d6b
mov r8d, 0x89b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140044db3
mov r8d, 0x89d
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rsi
mov dword [rbp - 0x48], 0x8574
mov dword [rbp - 0x3c], 0x41a00000
mov qword [rbp - 0x18], r14
call fcn.140025ff0
mov rsi, qword [rbx + 0x58]
mov qword [0x140170090], rax
cmp byte [rsi + 0x18], r12b
je 0x140044e00
mov r8d, 0x89b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140044e48
mov r8d, 0x89d
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x14016e690]
mov dword [rbp - 0x48], 0xb98
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rsi
mov dword [rbp - 0x3c], 0x41b00000
mov qword [rbp - 0x18], r14
call fcn.140025ff0
mov rbx, qword [rbx + 0x58]
cmp byte [rbx + 0x18], r12b
je 0x140044e95
mov r8d, 0x89b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140044edd
mov r8d, 0x89d
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rbx
mov dword [rbp - 0x48], 0xb98
mov dword [rbp - 0x3c], 0x41880000
mov qword [rbp - 0x18], r14
call fcn.140025ff0
xor ecx, ecx
call fcn.140020a40
mov rbx, qword [0x140170080]
mov rsi, qword [0x1401700e0]
test rbx, rbx
jne 0x140044f3a
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140170080]
cmp qword [rbx + 0x98], r12
je 0x140044f5d
mov r8d, 0x75
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1400450cd
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400450cd
mov rax, qword [0x140170080]
test rax, rax
je 0x140044f93
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x140044fc0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x140044fc3
mov rdi, r12
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x140170080]
mov qword [rdi], rsi
mov rax, qword [rbp - 0x78]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp - 0x70]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x4870], r12d
jg 0x140045020
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r12
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x2f0], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x2f8], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x300], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x308], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x310], rax
mov byte [rdi + 0x2d], r13b
nop dword [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0x2f0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x1400450a1
inc rbx
cmp rbx, 5
jl 0x140045080
jmp 0x1400450cd
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x140170080]
mov r14, qword [0x1401704b8]
mov rsi, qword [0x1401704b0]
test rax, rax
jne 0x140045108
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r12
je 0x140045136
mov r8d, 0x221
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
test rax, rax
je 0x140045141
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140045182
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140045185
mov rbx, r12
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rsp + 0x60]
mov qword [rdi + 0x98], rbx
lea rdx, [0x14014ccc0]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
call qword [rax]
test eax, eax
jne 0x14004520b
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [0x14014ccd0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14004520b
mov rcx, qword [rsp + 0x70]
lea r8, [rsp + 0x68]
lea rdx, [0x14014cce0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14004520b
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rsp + 0x68]
mov qword [rbx + 0x10], rax
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14004521b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14004522b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.140040630
movss xmm9, dword [0x14014eb68]
lea r15, [0x1401703f0]
movss xmm14, dword [0x14014ec60]
lea rdi, str.KR_QuantumShadow_Aimbot_Plan
movss xmm12, dword [0x14014ed20]
xor r14b, r14b
movss xmm13, dword [0x14014eb98]
xorps xmm8, xmm8
movss xmm11, dword [0x14014ec54]
movss xmm10, dword [0x14014ec4c]
movss xmm6, dword [0x14014ece8]
lea rcx, [rbp + 0x1f0]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
mov esi, 5
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140045310
nop dword [rax]
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1f8], 0x12
lea rcx, [rbp + 0x1f0]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400452c0
test r14b, r14b
jne 0x14004720d
mov rbx, qword [0x140170080]
test rbx, rbx
je 0x14004532a
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140045347
jmp 0x14004532d
mov rbx, r12
mov r8d, 0x250
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r12
jne 0x140045352
call fcn.14003c6e0
call fcn.14003d890
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140045375
cmp byte [reloc.WS2_32.dll_accept], r12b
sete byte [0x14016f2bc]
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14004547b
cmp byte [0x14017010f], r12b
je 0x14004547b
cmp byte [0x140170109], r12b
je 0x140045409
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x80], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x80]
mov r8d, r13d
lea r9, [0x140115fd0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140115fe0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140045475
mov rax, qword [rbp - 0x80]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x80]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x80]
jmp 0x14004546f
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x78], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x78]
mov r8d, r13d
lea r9, [0x140115fd0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140115fe0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140045475
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x78]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 0x7a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400454f7
cmp byte [0x14017009d], r12b
je 0x1400454f7
cmp byte [0x140170102], r12b
je 0x1400454f7
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016f258]
call fcn.14003ac70
mov rax, qword [0x140170080]
test rax, rax
jne 0x140045524
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x14016f2b8]
mulss xmm0, dword [0x14014ec40]
cmp ecx, 0xff
jg 0x14004554d
cmp byte [reloc.WS2_32.dll_accept], r12b
mov eax, Ordinal_301
jne 0x140045550
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x14016f2b8], r8d
cmp r8d, 0xff
jle 0x14004558d
mov dword [0x14016f2b8], 0xff
mov r8d, 0xff
mov rcx, qword [0x1401700e0]
xor edx, edx
lea r9d, [rdx + 2]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x14016f2b8], r12d
mov edx, r12d
mov rcx, qword [0x1401700e0]
cmovg edx, esi
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140008af0
movzx eax, byte [0x140170151]
test al, al
jne 0x140045d07
mov rax, qword [0x140170080]
test rax, rax
jne 0x1400455fb
mov r8d, 0xb67
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
mov dword [rax + 0x37f0], 0x41200000
xor edx, edx
mov dword [rax + 0x380c], 0x41200000
mov r8d, 0x20bb
mov dword [rax + 0x37e8], r12d
mov rcx, rdi
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x37f4], r12d
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x382c], r12
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movss xmm1, dword [0x14016f228]
movss xmm2, dword [0x14016f22c]
movss xmm3, dword [0x14016f230]
mov dword [rbp + 0x1cc], 0x3f800000
movups xmm0, xmmword [rbp + 0x1c0]
mov dword [rbp + 0x1dc], 0x3f800000
movss xmm0, xmm1
mulss xmm1, xmm9
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
mulss xmm2, xmm9
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
mulss xmm3, xmm9
shufps xmm0, xmm0, 0xc9
movups xmmword [0x1401707b8], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmm0, xmmword [rbp + 0x1d0]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [0x1401708c8], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43960000
mov dword [rax + 0x479c], 0x43d20000
mov dword [rax + 0x4780], r13d
movups xmmword [rbp + 0x1d0], xmm0
call fcn.14000ebe0
mov rcx, qword [0x1401700e0]
lea rdx, [0x1401700f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
movss xmm1, dword [rax + 0x1c]
jp 0x140045750
jne 0x140045750
ucomiss xmm1, xmm8
jp 0x140045750
je 0x1400457c2
movd xmm0, dword [0x1401700f4]
mov r9d, Ordinal_301
mov rcx, qword [0x1401700e0]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
addss xmm0, xmm1
movd xmm1, dword [0x1401700f0]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x140170080]
lea rdx, [rbp + 0x118]
xor r8d, r8d
mov qword [rbp + 0x118], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124c0
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016f258]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, xmm14
addss xmm0, xmm6
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14016f258]
call fcn.14002ec40
mov r8, qword [0x140170080]
lea rcx, [rbp + 0x1e0]
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14017057c]
movss xmm0, dword [0x140170578]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x1e4], xmm1
movss xmm1, dword [0x140170584]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0x1e0], xmm0
movss xmm0, dword [0x140170580]
movss dword [rbp + 0x1ec], xmm1
movss dword [rbp + 0x1e8], xmm0
call fcn.140003fd0
movss xmm2, dword [r8 + 0x3c00]
lea rdx, [rbp + 0x120]
mov rcx, qword [r8 + 0x3bf8]
movaps xmm3, xmm15
mov qword [rsp + 0x30], r12
mov esi, eax
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm12
call fcn.1400289c0
movss xmm0, dword [rbp + 0x120]
mov rdi, qword [0x140170080]
addss xmm0, xmm13
mov dword [rbp + 0x12c], 0x41400000
mov rax, qword [rdi + 0x3ea0]
cvttss2si ecx, xmm0
movss xmm0, dword [rax + 0x20]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x120], xmm1
subss xmm0, xmm1
mulss xmm0, xmm9
addss xmm0, xmm8
movss dword [rbp + 0x128], xmm0
test esi, 0xff000000
je 0x1400459cc
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14004596c
mov r8d, 0x65b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x14014dd7c]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x128]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.KR_QuantumShadow_Aimbot_Plan
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x40], xmm0
call fcn.140028be0
mov rdi, qword [0x140170080]
movss xmm6, dword [0x14014ece8]
cmp dword [rdi + 0x4870], r12d
jg 0x1400459ef
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008160
movss xmm1, dword [0x14017058c]
mov r10, rax
movss xmm0, dword [0x140170588]
mov rcx, qword [0x140170080]
movss dword [rbp + 0x144], xmm1
movss xmm1, dword [0x140170594]
movss dword [rbp + 0x140], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x140]
mov dword [rbp + 0x130], 0x43960000
movss xmm0, dword [0x140170590]
movss dword [rbp + 0x148], xmm0
movss dword [rbp + 0x14c], xmm1
mov dword [rbp + 0x134], 0x42340000
mov qword [rbp + 0x138], r12
call fcn.140003fd0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x138]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x130]
mov rcx, r10
call fcn.140024a50
mov rbx, qword [0x140170080]
cmp dword [rbx + 0x4870], r12d
jg 0x140045ad2
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008160
movaps xmm0, xmmword [0x14014eed0]
lea rcx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
mov r10, rax
mov dword [rbp + 0x60], 0x43960000
mov dword [rbp + 0x64], 0x43d20000
mov dword [rbp + 0x68], r12d
mov dword [rbp + 0x6c], 0x42340000
call fcn.140003fd0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x68]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x60]
mov rcx, r10
call fcn.140024a50
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x140047461
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, xmm14
addss xmm0, dword [0x14014ec94]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140016020
lea rdx, [rbp + 0x70]
mov dword [rbp + 0x70], 0x43898000
lea rcx, str.Login
mov dword [rbp + 0x74], 0x43e28000
call fcn.14000bde0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x78]
mov qword [rsp + 0x30], r12
lea r8, [0x140170110]
mov dword [rsp + 0x28], r12d
lea rcx, str.Username00
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x78], r12
call fcn.140034320
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [0x1401700a0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Password.00
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x80], r12
call fcn.140034320
lea rdx, [rbp + 0x88]
mov dword [rbp + 0x88], 0x43480000
lea rcx, str.Login
mov dword [rbp + 0x8c], 0x42200000
call fcn.14002f620
test al, al
je 0x140045ce5
lea rdx, [0x1401700a0]
lea rcx, [rbp + 0x40]
call fcn.14003ab30
lea rdx, [0x140170110]
mov rbx, rax
lea rcx, [rbp + 0x2f0]
call fcn.14003ab30
mov r8, rbx
lea rcx, [0x1401701d0]
mov rdx, rax
call fcn.1400be240
cmp byte [0x1401703e8], r12b
jne 0x140045cb3
mov byte [0x140170151], r13b
jmp 0x140045ce5
cmp qword [0x140170408], 0xf
mov rdx, r15
mov r8, 0xffffffffffffffff
cmova rdx, qword [0x1401703f0]
nop dword [rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x140045cd0
lea rcx, [0x14016f258]
call fcn.14003ac70
call fcn.14000bef0
call fcn.140016170
call fcn.1400402f0
call fcn.1400115c0
movzx eax, byte [0x140170151]
lea rdi, str.KR_QuantumShadow_Aimbot_Plan
cmp al, r13b
jne 0x140047161
mov rax, qword [0x140170080]
test rax, rax
jne 0x140045d3d
mov r8d, 0xb67
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
mov dword [rax + 0x37f0], 0x41200000
xor edx, edx
mov dword [rax + 0x380c], 0x41200000
mov r8d, 0x20bb
mov dword [rax + 0x37e8], r12d
mov rcx, rdi
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x37f4], r12d
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x382c], r12
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movss xmm1, dword [0x14016f228]
movss xmm2, dword [0x14016f22c]
movss xmm3, dword [0x14016f230]
mov dword [rbp + 0x15c], 0x3f800000
movups xmm0, xmmword [rbp + 0x150]
mov dword [rbp + 0x16c], 0x3f800000
movss xmm0, xmm1
mulss xmm1, xmm9
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
mulss xmm2, xmm9
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
mulss xmm3, xmm9
shufps xmm0, xmm0, 0xc9
movups xmmword [0x1401707b8], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmm0, xmmword [rbp + 0x160]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [0x1401708c8], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43960000
mov dword [rax + 0x479c], 0x43d20000
mov dword [rax + 0x4780], r13d
movups xmmword [rbp + 0x160], xmm0
call fcn.14000ebe0
cmp byte [0x14017007a], r12b
lea rdx, [0x1401700f0]
mov rcx, qword [0x1401700e0]
jne 0x14004664a
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
movss xmm1, dword [rax + 0x1c]
jp 0x140045e9f
jne 0x140045e9f
ucomiss xmm1, xmm8
jp 0x140045e9f
je 0x140045f11
movd xmm0, dword [0x1401700f4]
mov r9d, Ordinal_301
mov rcx, qword [0x1401700e0]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
addss xmm0, xmm1
movd xmm1, dword [0x1401700f0]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x140170080]
lea rdx, [rbp + 0x90]
xor r8d, r8d
mov qword [rbp + 0x90], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124c0
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016f258]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, xmm14
addss xmm0, xmm6
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14016f258]
call fcn.14002ec40
mov r9, qword [0x140170080]
lea rcx, [rbp + 0x170]
mov rax, qword [r9 + 0x3ea0]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14017057c]
movss xmm0, dword [0x140170578]
mov r8, qword [r9 + 0x3ea0]
movss dword [rbp + 0x174], xmm1
movss xmm1, dword [0x140170584]
mulss xmm1, dword [r9 + 0x37e0]
mov rbx, qword [r8 + 0x290]
movss dword [rbp + 0x170], xmm0
movss xmm0, dword [0x140170580]
movss dword [rbp + 0x17c], xmm1
movss dword [rbp + 0x178], xmm0
call fcn.140003fd0
movss xmm2, dword [r9 + 0x3c00]
lea rdx, [rbp + 0x98]
mov rcx, qword [r9 + 0x3bf8]
movaps xmm3, xmm15
movss xmm6, dword [r8 + 0x20]
mov esi, eax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm12
call fcn.1400289c0
movss xmm0, dword [rbp + 0x98]
mov dword [rbp + 0xa4], 0x41400000
addss xmm0, xmm13
cvttss2si ecx, xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x98], xmm1
subss xmm6, xmm1
mulss xmm6, xmm9
addss xmm6, xmm8
movss dword [rbp + 0xa0], xmm6
test esi, 0xff000000
je 0x140046106
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x1400460ae
mov r8d, 0x65b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x14014dd7c]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0xa0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.KR_QuantumShadow_Aimbot_Plan
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x40], xmm0
call fcn.140028be0
lea rdi, str.KR_QuantumShadow_Aimbot_Plan
mov rbx, qword [0x140170080]
cmp dword [rbx + 0x4870], r12d
jg 0x140046130
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008160
movss xmm1, dword [0x14017058c]
mov r10, rax
movss xmm0, dword [0x140170588]
mov rcx, qword [0x140170080]
movss dword [rbp + 0x184], xmm1
movss xmm1, dword [0x140170594]
movss dword [rbp + 0x180], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x180]
mov dword [rbp + 0xa8], 0x43960000
movss xmm0, dword [0x140170590]
movss dword [rbp + 0x188], xmm0
movss dword [rbp + 0x18c], xmm1
mov dword [rbp + 0xac], 0x42340000
mov qword [rbp + 0xb0], r12
call fcn.140003fd0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0xb0]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xa8]
mov rcx, r10
call fcn.140024a50
mov rbx, qword [0x140170080]
cmp dword [rbx + 0x4870], r12d
jg 0x140046213
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008160
movaps xmm0, xmmword [0x14014eed0]
lea rcx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
mov r10, rax
mov dword [rbp + 0xb8], 0x43960000
mov dword [rbp + 0xbc], 0x43d20000
mov dword [rbp + 0xc0], r12d
mov dword [rbp + 0xc4], 0x42340000
call fcn.140003fd0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0xc0]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xb8]
mov rcx, r10
call fcn.140024a50
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x140047461
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, dword [0x14014ebfc]
addss xmm0, dword [0x14014ec94]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140016020
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x43910000
lea rcx, str.List_Of_Magics
mov dword [rbp + 0xcc], 0x43e28000
call fcn.14000bde0
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x14004635a
cmp qword [rcx + 0x4ae8], r12
je 0x140046366
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xd4], 0x42200000
lea rdx, [rbp + 0xd0]
lea rcx, str.External_Aimbot
movss dword [rbp + 0xd0], xmm0
call fcn.14002f620
test al, al
je 0x1400463c9
call fcn.14003f3e0
mov rcx, rax
call fcn.14003f6b0
test eax, eax
je 0x1400463c2
mov r8d, eax
mov dword [0x140170158], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140170160], rax
mov byte [0x140170474], r13b
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x1400463fa
cmp qword [rcx + 0x4ae8], r12
je 0x140046406
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xdc], 0x42200000
lea rdx, [rbp + 0xd8]
lea rcx, str.Chams_Transparent
movss dword [rbp + 0xd8], xmm0
call fcn.14002f620
test al, al
je 0x1400464b8
call fcn.14003f3e0
mov rcx, rax
call fcn.14003f6b0
test eax, eax
je 0x140046466
mov r8d, eax
mov dword [0x140170158], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140170160], rax
lea rdx, str.C:WindowsSystem32kernel32.dll
call fcn.140043f50
test al, al
je 0x14004648f
mov r8d, Ordinal_45
lea rdx, str.Transparent_Chams_:__Successfully_applied_
lea rcx, [0x14016f258]
call fcn.14003ac70
lea rdx, str.C:WindowsSystem32charme_compressed.dll
call fcn.140043f50
test al, al
je 0x1400464b8
mov r8d, Ordinal_45
lea rdx, str.Transparent_Chams_:__Successfully_applied_
lea rcx, [0x14016f258]
call fcn.14003ac70
mov rcx, qword [0x140170080]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x1400464e9
cmp qword [rcx + 0x4ae8], r12
je 0x1400464f5
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xe4], 0x42200000
lea rdx, [rbp + 0xe0]
lea rcx, str.Reset_Guest_Account
movss dword [rbp + 0xe0], xmm0
call fcn.14002f620
mov rcx, qword [0x140170080]
mov byte [0x14017007f], al
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x140046556
cmp qword [rcx + 0x4ae8], r12
je 0x140046562
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xec], 0x42200000
lea rdx, [rbp + 0xe8]
lea rcx, str.BUY_NOW
movss dword [rbp + 0xe8], xmm0
call fcn.14002f620
test al, al
je 0x140046609
mov ebx, 5
lea r8, str.https:__discord.gg_seBFqakC3J
mov dword [rsp + 0x28], ebx
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor r9d, r9d
mov dword [rsp + 0x28], ebx
lea r8, str.https:__www.facebook.com_profile.php_id100095477834713mibextidb06tZ0
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor r9d, r9d
mov dword [rsp + 0x28], ebx
lea r8, str.https:__wa.me_message_PHT6QOZCGFMTN1
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor r9d, r9d
mov dword [rsp + 0x28], ebx
lea r8, str._https:__t.me_kashi909090
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, [0x140170109]
lea rcx, str.Stream_Mode
call fcn.140030d20
mov r8d, 0x20108
mov byte [0x14017010f], al
lea rdx, [0x14016f228]
lea rcx, str.Change_Theme_Color0
call fcn.140036d90
call fcn.14000bef0
call fcn.140016170
jmp 0x140046cba
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r9, qword [0x140170080]
mov rax, qword [r9 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
movss xmm1, dword [rax + 0x1c]
jp 0x140046678
jne 0x140046678
ucomiss xmm1, xmm8
jp 0x140046678
je 0x1400466ea
movd xmm0, dword [0x1401700f4]
mov r9d, Ordinal_301
mov rcx, qword [0x1401700e0]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
addss xmm0, xmm1
movd xmm1, dword [0x1401700f0]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x140170080]
lea rdx, [rbp + 0xf0]
xor r8d, r8d
mov qword [rbp + 0xf0], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124c0
mov r9, qword [0x140170080]
mov rax, qword [r9 + 0x3ea0]
lea rcx, [rbp + 0x190]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14017057c]
movss xmm0, dword [0x140170578]
mov r8, qword [r9 + 0x3ea0]
movss dword [rbp + 0x194], xmm1
movss xmm1, dword [0x140170584]
mulss xmm1, dword [r9 + 0x37e0]
mov rbx, qword [r8 + 0x290]
movss dword [rbp + 0x190], xmm0
movss xmm0, dword [0x140170580]
movss dword [rbp + 0x19c], xmm1
movss dword [rbp + 0x198], xmm0
call fcn.140003fd0
movss xmm2, dword [r9 + 0x3c00]
lea rdx, [rbp + 0xf8]
mov rcx, qword [r9 + 0x3bf8]
movaps xmm3, xmm15
movss xmm6, dword [r8 + 0x20]
mov esi, eax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm12
call fcn.1400289c0
movss xmm0, dword [rbp + 0xf8]
mov dword [rbp + 0x104], 0x41400000
addss xmm0, xmm13
cvttss2si ecx, xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xf8], xmm1
subss xmm6, xmm1
mulss xmm6, xmm9
addss xmm6, xmm8
movss dword [rbp + 0x100], xmm6
test esi, 0xff000000
je 0x140046870
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x140046818
mov r8d, 0x65b
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x14014dd7c]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x100]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.KR_QuantumShadow_Aimbot_Plan
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x40], xmm0
call fcn.140028be0
lea rdi, str.KR_QuantumShadow_Aimbot_Plan
mov rbx, qword [0x140170080]
cmp dword [rbx + 0x4870], r12d
jg 0x14004689a
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008160
movss xmm1, dword [0x14017058c]
mov r10, rax
movss xmm0, dword [0x140170588]
mov rcx, qword [0x140170080]
movss dword [rbp + 0x1a4], xmm1
movss xmm1, dword [0x140170594]
movss dword [rbp + 0x1a0], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x1a0]
mov dword [rbp + 0x108], 0x43960000
movss xmm0, dword [0x140170590]
movss dword [rbp + 0x1a8], xmm0
movss dword [rbp + 0x1ac], xmm1
mov dword [rbp + 0x10c], 0x42340000
mov qword [rbp + 0x110], r12
call fcn.140003fd0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x110]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x108]
mov rcx, r10
call fcn.140024a50
mov rbx, qword [0x140170080]
cmp dword [rbx + 0x4870], r12d
jg 0x14004697d
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008160
movaps xmm0, xmmword [0x14014eed0]
lea rcx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
mov r10, rax
mov dword [rbp - 0x70], 0x43960000
mov dword [rbp - 0x6c], 0x43d20000
mov dword [rbp - 0x78], r12d
mov dword [rbp - 0x74], 0x42340000
call fcn.140003fd0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp - 0x78]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp - 0x70]
mov rcx, r10
call fcn.140024a50
mov rbx, qword [0x140170080]
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rbx + 0x18]
addss xmm1, xmm1
movss xmm6, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
addss xmm1, dword [0x140170974]
comiss xmm8, xmm1
jbe 0x140046a1c
movaps xmm0, xmm8
jmp 0x140046a28
movss xmm0, dword [0x14014eba0]
minss xmm0, xmm1
mulss xmm0, dword [rbx + 0x37e0]
movss dword [0x140170974], xmm0
cmp dword [rbx + 0x4870], r12d
jg 0x140046a5b
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.140008160
addss xmm6, dword [0x14014ecc0]
mov rcx, qword gs:[0x58]
mov rbx, rax
addss xmm7, dword [0x14014ecdc]
mov eax, 4
mov rcx, qword [rcx]
movss dword [rsp + 0x68], xmm6
movups xmm6, xmmword [0x1401707b8]
mov edx, dword [rax + rcx]
cmp dword [0x140170970], edx
movss dword [rsp + 0x6c], xmm7
jle 0x140046ae5
lea rcx, [0x140170970]
call fcn.140111cf4
cmp dword [0x140170970], 0xffffffff
jne 0x140046ae5
movaps xmm0, xmmword [0x14014ef20]
lea rcx, [0x140170970]
movups xmmword [0x140170960], xmm0
call fcn.140111c88
mov rax, qword [0x140170080]
test rax, rax
jne 0x140046b12
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
movss xmm3, dword [0x14014ec28]
lea rdx, [rsp + 0x68]
movss xmm2, dword [rax + 0x18]
movaps xmm0, xmm3
mulss xmm2, dword [0x14014ebd0]
mov rcx, rbx
mov dword [rsp + Ordinal_41], 0x28
subss xmm0, dword [0x1401704cc]
movss dword [rsp + 0x20], xmm3
movaps xmm3, xmm8
mov dword [rbx + 0x78], r12d
mulss xmm2, xmm0
addss xmm2, dword [0x1401704cc]
movss dword [0x1401704cc], xmm2
movss xmm2, dword [0x14014ec94]
call fcn.140023be0
movss xmm1, dword [0x140170964]
lea rcx, [rbp + 0x1b0]
movss xmm0, dword [0x140170960]
mov rax, qword [0x140170080]
movss dword [rbp + 0x1b4], xmm1
movss xmm1, dword [0x14017096c]
movss dword [rbp + 0x1b0], xmm0
mulss xmm1, dword [rax + 0x37e0]
movss xmm0, dword [0x140170968]
movss dword [rbp + 0x1b8], xmm0
movss dword [rbp + 0x1bc], xmm1
call fcn.140003fd0
movss xmm0, dword [0x14014ec40]
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140022400
movss xmm3, dword [0x1401704cc]
lea rdx, [rsp + 0x68]
movss xmm2, dword [0x14014ec94]
movaps xmm0, xmm3
addss xmm0, dword [0x14014ec1c]
addss xmm3, dword [0x14014ebf4]
mov dword [rsp + Ordinal_41], 0x28
mov rcx, rbx
mov dword [rbx + 0x78], r12d
movss dword [rsp + 0x20], xmm0
call fcn.140023be0
mov rax, qword [0x140170080]
lea rcx, [rbp - 0x68]
movaps xmm0, xmm6
movss dword [rbp - 0x68], xmm6
movaps xmm1, xmm6
shufps xmm0, xmm6, 0x55
shufps xmm1, xmm6, 0xaa
shufps xmm6, xmm6, 0xff
mulss xmm6, dword [rax + 0x37e0]
movss dword [rbp - 0x64], xmm0
movss dword [rbp - 0x60], xmm1
movss dword [rbp - 0x5c], xmm6
call fcn.140003fd0
movss xmm0, dword [0x14014ec40]
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140022400
movss xmm0, dword [0x1401704cc]
comiss xmm0, dword [0x14014ec0c]
mov dword [rbx + 0x78], r12d
jb 0x140046cba
mov dword [0x1401704cc], r12d
cmp byte [0x140170150], r12b
je 0x140046da5
cmp byte [0x14017010a], r12b
je 0x140046d58
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Internet_Block:_Enabled
jmp 0x140046d99
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Internet_Block:_Disabled
lea rcx, [0x14016f258]
call fcn.14003ac70
cmp byte [0x14017009d], r12b
je 0x140046e08
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016f258]
call fcn.14003ac70
cmp byte [0x140170152], r12b
je 0x140046ee2
mov r8d, dword [0x140170470]
xor edx, edx
cmp byte [0x14017010b], r12b
mov ecx, 0xc00
je 0x140046e82
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046e73
cmp byte [0x14017007c], r12b
mov rcx, rax
jne 0x140046e59
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140046e6a
mov byte [0x14017007c], r13b
jmp 0x140046e6a
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140046e6a
mov byte [0x14017007c], r12b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Process_:_Paused
jmp 0x140046ed6
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046ec9
cmp byte [0x14017007c], r12b
mov rcx, rax
jne 0x140046eaf
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140046ec0
mov byte [0x14017007c], r13b
jmp 0x140046ec0
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140046ec0
mov byte [0x14017007c], r12b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Process_:_Resumed
lea rcx, [0x14016f258]
call fcn.14003ac70
cmp byte [0x14017010c], r12b
je 0x140046ef2
mov byte [0x1401704a5], r13b
cmp byte [0x140170099], r12b
je 0x140046f0b
cmp byte [0x1401700ee], r12b
je 0x140046f0b
mov byte [0x140170474], r13b
cmp byte [0x14017007b], r12b
je 0x140046f24
cmp byte [0x1401700eb], r12b
je 0x140046f24
mov byte [0x140170153], r13b
cmp byte [0x14017007e], r12b
je 0x140046f3d
cmp byte [0x1401700ed], r12b
je 0x140046f3d
mov byte [0x140170477], r13b
cmp byte [0x1401700e8], r12b
je 0x140046f56
cmp byte [0x140170105], r12b
je 0x140046f56
mov byte [0x140170154], r13b
cmp byte [0x140170079], r12b
je 0x140046f6f
cmp byte [0x1401700ea], r12b
je 0x140046f6f
mov byte [0x1401704a2], r13b
cmp byte [0x14017009b], r12b
je 0x140046f88
cmp byte [0x140170100], r12b
je 0x140046f88
mov byte [0x140170157], r13b
cmp byte [0x14017009f], r12b
je 0x140046fa1
cmp byte [0x140170104], r12b
je 0x140046fa1
mov byte [0x1401704a4], r13b
cmp byte [0x14017010d], r12b
je 0x140046fba
cmp byte [0x140170107], r12b
je 0x140046fba
mov byte [0x140170155], r13b
cmp byte [0x14017009e], r12b
je 0x140046fd3
cmp byte [0x140170103], r12b
je 0x140046fd3
mov byte [0x1401704a6], r13b
cmp byte [0x1401700e9], r12b
je 0x140046fec
cmp byte [0x140170106], r12b
je 0x140046fec
mov byte [0x140170475], r13b
cmp byte [0x14017007f], r12b
je 0x140046ffc
mov byte [0x1401704a3], r13b
cmp byte [0x14017009a], r12b
je 0x140047015
cmp byte [0x1401700ef], r12b
je 0x140047015
mov byte [0x140170156], r13b
cmp byte [0x14017010e], r12b
je 0x14004702e
cmp byte [0x140170108], r12b
je 0x14004702e
mov byte [0x1401704a0], r13b
cmp byte [0x14017010f], r12b
je 0x140047125
cmp byte [0x140170109], r12b
je 0x1400470b3
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x70], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x70]
mov r8d, r13d
lea r9, [0x140115fd0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140115fe0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14004711f
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x70]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x70]
jmp 0x140047119
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x60], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x60]
mov r8d, r13d
lea r9, [0x140115fd0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140115fe0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14004711f
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x14017007d], r12b
je 0x14004713e
cmp byte [0x1401700ec], r12b
je 0x14004713e
mov byte [0x140170476], r13b
cmp byte [0x14017009c], r12b
je 0x140047157
cmp byte [0x140170101], r12b
je 0x140047157
mov byte [0x1401704a1], r13b
call fcn.1400402f0
call fcn.1400115c0
call fcn.14000b170
mov rcx, qword [0x1401704b8]
lea r8, [0x140170498]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x280], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1401704b8]
lea r8, [rbp + 0x280]
mov rdx, qword [0x140170498]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140170080]
cmp dword [rbx + 0x4870], r12d
jg 0x1400471d5
mov r8d, 0x6ff
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.14003bc80
mov rcx, qword [0x1401704a8]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x14004528e
mov rbx, qword [0x140170080]
test rbx, rbx
je 0x140047227
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14004724b
jmp 0x14004722a
mov rdi, r12
mov r8d, 0x241
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140170080]
test rbx, rbx
jne 0x140047271
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140170080]
call fcn.14003cc10
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140047285
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140047293
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400472a2
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140170080]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
test rax, rax
je 0x1400472c2
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140170080]
test rax, rax
je 0x1400472e5
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140047309
jmp 0x1400472e8
mov rbx, r12
mov r8d, 0xa7
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
test rax, rax
jne 0x14004732f
mov r8d, 0xfd8
lea rdx, str.C:Usershabib_ahammedDesktopmain_projectmain_projectInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140170080]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140047349
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140170080]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
test rax, rax
je 0x140047362
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140170080]
mov qword [0x140170080], rbx
call fcn.140006660
mov qword [0x140170080], r12
test rbx, rbx
je 0x1400473ad
mov rcx, rbx
call fcn.14001fa20
mov rax, qword [0x140170080]
test rax, rax
je 0x1400473a4
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140047490
mov rcx, qword [0x1401700e0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x2b8]
mov rcx, qword [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm14, xmmword [rsp + 0x9c0]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x9d0]
movaps xmm12, xmmword [rsp + 0x9e0]
movaps xmm11, xmmword [rsp + 0x9f0]
movaps xmm10, xmmword [rsp + 0xa00]
movaps xmm9, xmmword [rsp + 0xa10]
movaps xmm8, xmmword [rsp + 0xa20]
movaps xmm7, xmmword [rsp + 0xa30]
movaps xmm6, xmmword [rsp + 0xa40]
mov rsi, qword [rsp + 0xa80]
mov r14, qword [rsp + 0xa58]
movaps xmm15, xmmword [rsp + 0x9b0]
mov rdi, qword [rsp + 0xa88]
mov r13, qword [rsp + 0xa90]
mov r15, qword [rsp + 0xa50]
add rsp, 0xa60
pop r12
pop rbx
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
lea rdx, str.____Run_the_program_as_admin
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3