Function at 0x1400647a0
Capabilities:
Contain obfuscated stackstrings
Hide graphical window
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x618]
sub rsp, 0x6f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1401a4080]
xor rax, rsp
mov qword [rbp + 0x548], rax
xor r15d, r15d
mov dword [rsp + 0x60], r15d
mov dword [rbp + 0x3e8], r15d
mov qword [rbp + 0x3a0], r15
mov dword [rbp + 0x390], 0x50
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rbp + 0x3c0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x3b8], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x3b0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x3d8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x3a8], rax
lea rax, [0x140067b40]
mov qword [rbp + 0x398], rax
lea rax, [0x140185c94]
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x3c8], r15
mov dword [rbp + 0x394], 3
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r15
mov rcx, qword [rbp + 0x3a8]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0x80000000
lea r8, str.isanigger
mov rdx, qword [rbp + 0x3d0]
mov ecx, 0x8000028
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rsi, rax
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x304], r15
mov qword [rbp + 0x318], 2
mov qword [rbp + 0x330], 2
mov qword [rbp + 0x2f0], r15
mov dword [rbp + 0x300], Ordinal_32
mov dword [rbp + 0x2f8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x2fc], 1
mov dword [rbp + 0x314], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x320], rax
mov qword [rbp + 0x30c], 1
mov qword [rbp + 0x328], 1
mov dword [rbp + 0x520], 0xb000
mov dword [rbp + 0x524], 0xa000
lea rbx, [0x1401be728]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x410]
mov qword [rsp + 0x50], rax
lea rdi, [0x1401be720]
mov qword [rsp + 0x48], rdi
lea r14, [0x1401be718]
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x520]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x140064a7a
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x410]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x520]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x1400679ba
call fcn.140067ad0
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1401be258]
mov rdx, qword [0x1401be260]
mov ecx, 0x61a8
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, rax
mov r8, qword [0x1401be258]
test r8, r8
je 0x140064b25
mov r10d, dword [r8 + 0x3f70]
movsx rax, word [r8 + 0x6058]
lea rdx, [r8 + 0x605c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140064b1a
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6058], cx
movsx rax, cx
lea rdx, [r8 + 0x605c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r15d
inc word [rdx + 4]
inc dword [r8 + 0x6050]
mov qword [rbp + 0x1b0], r9
lea rax, [rsp + 0x64]
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x30], r9
test r9, r9
je 0x140064b4d
xor edx, edx
mov rcx, r9
call fcn.140032d50
jmp 0x140064b50
mov rax, r15
mov qword [0x1401be258], rax
call fcn.140036f00
test rbx, rbx
je 0x140064b6a
mov qword [0x1401be258], rbx
jmp 0x140064b71
mov rbx, qword [0x1401be258]
or dword [rbx + 8], 3
xor ecx, ecx
call fcn.14004cd30
mov rcx, rsi
call fcn.140056820
call fcn.140056650
xorps xmm10, xmm10
movups xmmword [rbp + 0x2f0], xmm10
movups xmmword [rbp + 0x300], xmm10
movaps xmmword [rbp + 0x310], xmm10
movaps xmmword [rbp + 0x320], xmm10
movups xmmword [rbp + 0x330], xmm10
movups xmmword [rbp + 0x340], xmm10
movaps xmmword [rbp + 0x350], xmm10
movaps xmmword [rbp + 0x360], xmm10
movaps xmmword [rbp + 0x370], xmm10
mov byte [rbp + 0x2fc], 1
mov dword [rbp + 0x308], 2
mov dword [rbp + 0x30c], 1
mov dword [rbp + 0x334], 0x7f7fffff
movss xmm11, dword [0x14018645c]
mov dword [rbp + 0x340], 0x3f800000
mov dword [rbp + 0x344], 0x3f800000
mov eax, 0xffff
mov word [rbp + 0x348], ax
mov dword [rbp + 0x33c], 0x204
movaps xmm9, xmmword [rbp + 0x2f0]
movaps xmmword [rbp + 0x60], xmm9
movaps xmm8, xmmword [rbp + 0x300]
movaps xmmword [rbp + 0x70], xmm8
movaps xmmword [rbp + 0x80], xmm10
movaps xmmword [rbp + 0x90], xmm10
movaps xmm7, xmmword [rbp + 0x330]
movaps xmmword [rbp + 0xa0], xmm7
movaps xmm6, xmmword [rbp + 0x340]
movaps xmmword [rbp + 0xb0], xmm6
movaps xmmword [rbp + 0xc0], xmm10
movaps xmmword [rbp + 0xd0], xmm10
movaps xmmword [rbp + 0xe0], xmm10
lea rdi, [0x1401a41a0]
mov qword [rbp + 0x60], rdi
mov dword [rbp + 0x68], 0x133ec
mov dword [rbp + 0x74], 0x41600000
lea r14, [0x140185450]
mov qword [rbp + 0x98], r14
lea rdx, [rbp + 0x60]
mov rcx, qword [rbx + 0x38]
call fcn.1400514e0
movaps xmmword [rbp + 0x60], xmm9
movaps xmmword [rbp + 0x70], xmm8
movaps xmmword [rbp + 0x80], xmm10
movaps xmmword [rbp + 0x90], xmm10
movaps xmmword [rbp + 0xa0], xmm7
movaps xmmword [rbp + 0xb0], xmm6
movaps xmmword [rbp + 0xc0], xmm10
movaps xmmword [rbp + 0xd0], xmm10
movaps xmmword [rbp + 0xe0], xmm10
mov qword [rbp + 0x60], rdi
mov dword [rbp + 0x68], 0x133ec
mov dword [rbp + 0x74], 0x41400000
mov qword [rbp + 0x98], r14
lea rdx, [rbp + 0x60]
mov rcx, qword [rbx + 0x38]
call fcn.1400514e0
mov qword [0x1401be738], rax
movaps xmmword [rbp + 0x60], xmm9
movaps xmmword [rbp + 0x70], xmm8
movaps xmmword [rbp + 0x80], xmm10
movaps xmmword [rbp + 0x90], xmm10
movaps xmmword [rbp + 0xa0], xmm7
movaps xmmword [rbp + 0xb0], xmm6
movaps xmmword [rbp + 0xc0], xmm10
movaps xmmword [rbp + 0xd0], xmm10
movaps xmmword [rbp + 0xe0], xmm10
lea rdi, [0x1401b7cd0]
mov qword [rbp + 0x60], rdi
mov dword [rbp + 0x68], 0x688
mov dword [rbp + 0x74], 0x41200000
mov qword [rbp + 0x98], r14
lea rdx, [rbp + 0x60]
mov rcx, qword [rbx + 0x38]
call fcn.1400514e0
mov qword [0x1401be748], rax
movaps xmmword [rbp + 0x60], xmm9
movaps xmmword [rbp + 0x70], xmm8
movaps xmmword [rbp + 0x80], xmm10
movaps xmmword [rbp + 0x90], xmm10
movaps xmmword [rbp + 0xa0], xmm7
movaps xmmword [rbp + 0xb0], xmm6
movaps xmmword [rbp + 0xc0], xmm10
movaps xmmword [rbp + 0xd0], xmm10
movaps xmmword [rbp + 0xe0], xmm10
mov qword [rbp + 0x60], rdi
mov dword [rbp + 0x68], 0x688
mov dword [rbp + 0x74], 0x41400000
mov qword [rbp + 0x98], r14
lea rdx, [rbp + 0x60]
mov rcx, qword [rbx + 0x38]
call fcn.1400514e0
xor r13b, r13b
mov dword [rbp + 0x410], r13d
mov bl, 1
mov byte [rsp + 0x64], bl
lea r14, [0x1401beb40]
movss xmm14, dword [0x140186500]
movdqa xmm15, xmmword [0x1401865f0]
movss xmm13, dword [0x1401865b8]
movss xmm12, dword [0x140186424]
mov edi, 1
nop word [rax + rax]
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140064ec6
nop dword [rax]
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx r13d, r13b
cmp dword [rbp + 0x4d8], 0x12
cmove r13d, edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140064e70
mov dword [rbp + 0x410], r13d
test r13b, r13b
jne 0x1400676a6
mov r8d, dword [0x1401be708]
test r8d, r8d
je 0x140064f7c
mov r9d, dword [0x1401be70c]
test r9d, r9d
je 0x140064f7c
mov rcx, qword [0x1401be710]
test rcx, rcx
je 0x140064f0d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be710], r15
mov r8d, dword [0x1401be708]
mov r9d, dword [0x1401be70c]
mov rcx, qword [0x1401be718]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor edx, edx
call qword [rax + 0x68]
mov dword [0x1401be70c], r15d
mov dword [0x1401be708], r15d
mov rcx, qword [0x1401be718]
mov rax, qword [rcx]
lea r9, [rbp + 0x380]
lea r8, [0x140186010]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1401be720]
mov rax, qword [rcx]
lea r9, [0x1401be710]
xor r8d, r8d
mov rdx, qword [rbp + 0x380]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x380]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064f94
test bl, bl
sete bl
mov byte [rsp + 0x64], bl
mov rax, qword [0x1401be258]
test rax, rax
je 0x140064fa9
mov rcx, qword [rax + 0x98]
jmp 0x140064fac
mov rcx, r15
cmp qword [rcx + 0x48], 0
jne 0x140064fb8
call fcn.140055ff0
call fcn.140057230
call fcn.140039610
mov dword [rbp - 0x50], 0x65766f16
mov dword [rbp - 0x4c], 0x79616c72
mov byte [rbp - 0x48], 0
xor edx, edx
mov r8d, 0xab
lea rcx, [rbp - 0x4f]
call fcn.14003f040
call fcn.14001c980
call fcn.140041470
test bl, bl
je 0x14006754e
mov qword [rbp + 0x2f0], 0xffffffffffffffff
mov qword [rbp + 0x2f8], 0xffffffffffffffff
mov qword [rbp + 0x300], 0xffffffffffffffff
mov qword [rbp + 0x308], 0xffffffffffffffff
mov dword [rbp + 0x310], 0xffffffff
mov qword [rbp + 0x314], 0xfffffffffffffffd
mov dword [rbp + 0x31c], 0xffffffff
mov qword [rbp + 0x320], r15
cmp qword [0x1401be760], 0
jne 0x14006508a
mov qword [rsp + 0x30], r15
lea rax, [0x1401be760]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2f0]
mov r8d, 0x736
lea rdx, [0x1401b7590]
mov rcx, qword [0x1401be720]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401beb60], 0
jne 0x1400650cb
mov qword [rsp + 0x30], r15
lea rax, [0x1401beb60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2f0]
mov r8d, 0x8de
lea rdx, [0x1401b8360]
mov rcx, qword [0x1401be720]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401beb68], 0
jne 0x14006510c
mov qword [rsp + 0x30], r15
lea rax, [0x1401beb68]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2f0]
mov r8d, 0x8de
lea rdx, [0x1401b8c3e]
mov rcx, qword [0x1401be720]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401beb70], 0
jne 0x14006514d
mov qword [rsp + 0x30], r15
lea rax, [0x1401beb70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2f0]
mov r8d, 0x8de
lea rdx, [0x1401b951c]
mov rcx, qword [0x1401be720]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401beb78], 0
jne 0x14006518e
mov qword [rsp + 0x30], r15
lea rax, [0x1401beb78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x2f0]
mov r8d, 0x8de
lea rdx, [0x1401b9dfa]
mov rcx, qword [0x1401be720]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1401be258]
mov eax, dword [rcx + 0x49c8]
or eax, 2
mov dword [rcx + 0x49c8], eax
movsd xmm0, qword [0x1401bcb98]
movsd qword [rcx + 0x49e8], xmm0
mov dword [rcx + 0x49d0], edi
or eax, 1
mov dword [rcx + 0x49c8], eax
mov dword [rcx + 0x49d8], 0x440c0000
mov qword [rcx + 0x49dc], 0x43910000
mov dword [rcx + 0x49e4], r15d
mov dword [rcx + 0x49cc], 2
mov dword [rbp - 0x60], 0x65766f7d
mov dword [rbp - 0x5c], 0x79616c72
mov byte [rbp - 0x58], 0
xor edx, edx
mov r8d, 0x20ab
lea rcx, [rbp - 0x5f]
call fcn.14003f040
mov rdi, qword [0x1401be258]
mov rax, qword [rdi + 0x4018]
movsd xmm0, qword [rax + 0x28]
movsd qword [rbp + 0x3e0], xmm0
movss xmm9, dword [rax + 0x30]
movss xmm8, dword [rax + 0x34]
mov byte [rax + 0xc0], 1
mov rax, qword [rdi + 0x4018]
mov rbx, qword [rax + 0x2a8]
movss xmm0, dword [0x1401be758]
movss dword [rdi + 0x38f8], xmm0
movss xmm1, dword [0x1401be75c]
movss dword [rdi + 0x38fc], xmm1
movss xmm0, dword [0x1401be768]
movss dword [rdi + 0x3904], xmm0
mov dword [rdi + 0x3900], 0x41400000
mov dword [rdi + 0x393c], 0x41a00000
mov dword [rdi + 0x3940], 0x41a00000
mov eax, dword [0x1401be770]
cmp eax, dword [0x1401be76c]
jne 0x1400652aa
movaps xmm1, xmm11
jmp 0x1400652ae
movaps xmm1, xmm13
movss xmm0, dword [0x1401864c8]
divss xmm0, dword [rdi + 0xd4]
mulss xmm0, xmm1
addss xmm0, dword [0x1401be740]
comiss xmm10, xmm0
jbe 0x1400652d6
movaps xmm1, xmm10
jmp 0x1400652de
movaps xmm1, xmm11
minss xmm1, xmm0
movss dword [0x1401be740], xmm1
ucomiss xmm1, xmm10
jp 0x1400652f4
jne 0x1400652f4
mov dword [0x1401be76c], eax
movss xmm0, dword [0x1401be9a8]
movss dword [rbp + 0x238], xmm0
movss xmm1, dword [0x1401be9ac]
movss dword [rbp + 0x23c], xmm1
movss xmm0, dword [0x1401be9b0]
movss dword [rbp + 0x240], xmm0
movss xmm1, dword [0x1401be9b4]
mulss xmm1, dword [rdi + 0x38f0]
movss dword [rbp + 0x244], xmm1
lea rcx, [rbp + 0x238]
call fcn.140035040
movss xmm6, dword [rbp + 0x3e4]
movaps xmm1, xmm6
addss xmm1, xmm8
movss xmm7, dword [rbp + 0x3e0]
movaps xmm0, xmm7
addss xmm0, xmm9
movss dword [rbp + 0x1c0], xmm0
movss dword [rbp + 0x1c4], xmm1
mov dword [rsp + 0x28], r15d
movss xmm0, dword [0x1401864e8]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x3e0]
mov rcx, rbx
call fcn.140050030
mov rax, qword [0x1401be258]
movss xmm0, dword [0x1401bea68]
movss dword [rbp + 0x248], xmm0
movss xmm1, dword [0x1401bea6c]
movss dword [rbp + 0x24c], xmm1
movss xmm0, dword [0x1401bea70]
movss dword [rbp + 0x250], xmm0
movss xmm1, dword [0x1401bea74]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x254], xmm1
lea rcx, [rbp + 0x248]
call fcn.140035040
subss xmm8, xmm14
movaps xmm0, xmm6
addss xmm0, xmm8
movaps xmm8, xmm7
addss xmm8, dword [0x140186558]
movss dword [rbp + 0x1c8], xmm8
movss dword [rbp + 0x1cc], xmm0
movaps xmm1, xmm6
addss xmm1, xmm14
movaps xmm0, xmm7
addss xmm0, xmm14
movss dword [rbp + 0x1d0], xmm0
movss dword [rbp + 0x1d4], xmm1
mov dword [rsp + 0x28], r15d
movss xmm0, dword [0x1401864e8]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x1c8]
lea rdx, [rbp + 0x1d0]
mov rcx, rbx
call fcn.140050030
mov dword [rbp + 0x1d8], 0x3f800000
mov dword [rbp + 0x1dc], 0x3f800000
mov qword [rbp + 0x1e0], 0
movaps xmm1, xmm6
addss xmm1, dword [0x14018654c]
movaps xmm0, xmm7
addss xmm0, dword [0x14018654c]
movss dword [rbp + 0x1e8], xmm0
movss dword [rbp + 0x1ec], xmm1
movaps xmm2, xmm6
movss xmm9, dword [0x14018652c]
addss xmm2, xmm9
movaps xmm0, xmm7
addss xmm0, xmm9
movss dword [rbp + 0xf0], xmm0
movss dword [rbp + 0xf4], xmm2
mov rdx, qword [0x1401be760]
cmp rdx, qword [rbx + 0x98]
setne sil
je 0x140065500
mov rcx, rbx
call fcn.14004d900
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.14004d980
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp + 0x1d8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1e0]
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call fcn.14004daa0
test sil, sil
je 0x140065574
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14006555c
mov rax, r15
jmp 0x140065565
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rbx + 0x98], rax
mov rcx, rbx
call fcn.14004d6c0
mov rax, qword [0x1401be258]
movss xmm0, dword [0x1401bea68]
movss dword [rbp + 0x218], xmm0
movss xmm1, dword [0x1401bea6c]
movss dword [rbp + 0x21c], xmm1
movss xmm0, dword [0x1401bea70]
movss dword [rbp + 0x220], xmm0
movss xmm1, dword [0x1401be740]
mulss xmm1, dword [rax + 0x38f0]
mulss xmm1, dword [0x1401bea74]
movss dword [rbp + 0x224], xmm1
lea rcx, [rbp + 0x218]
call fcn.140035040
movss xmm2, dword [rdi + 0x3940]
addss xmm2, dword [0x140186544]
movd xmm0, dword [0x1401be76c]
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, dword [0x140186574]
movaps xmm0, xmm6
addss xmm0, xmm1
addss xmm7, dword [0x140186568]
movss dword [rbp + 0xf8], xmm7
movss dword [rbp + 0xfc], xmm0
addss xmm2, dword [0x140186564]
movaps xmm0, xmm6
addss xmm0, xmm2
movss dword [rbp + 0x100], xmm8
movss dword [rbp + 0x104], xmm0
mov dword [rsp + 0x28], r15d
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, rbx
call fcn.140050030
mov rax, qword [0x1401be258]
movss xmm0, dword [0x1401be9a8]
movss dword [rbp + 0x258], xmm0
movss xmm1, dword [0x1401be9ac]
movss dword [rbp + 0x25c], xmm1
movss xmm0, dword [0x1401be9b0]
movss dword [rbp + 0x260], xmm0
movss xmm1, dword [0x1401be9b4]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x264], xmm1
lea rcx, [rbp + 0x258]
call fcn.140035040
movss xmm2, dword [rdi + 0x3940]
addss xmm2, dword [0x140186544]
movd xmm0, dword [0x1401be76c]
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, dword [0x140186568]
movaps xmm0, xmm6
addss xmm0, xmm1
movss dword [rbp + 0x108], xmm7
movss dword [rbp + 0x10c], xmm0
addss xmm2, dword [0x140186560]
movaps xmm0, xmm6
addss xmm0, xmm2
movss dword [rbp + 0x110], xmm8
movss dword [rbp + 0x114], xmm0
mov dword [rsp + 0x28], r15d
movss xmm0, dword [0x1401864dc]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.140050030
mov rax, qword [0x1401be258]
movss xmm0, dword [0x1401be9a8]
movss dword [rbp + 0x208], xmm0
movss xmm1, dword [0x1401be9ac]
movss dword [rbp + 0x20c], xmm1
movss xmm0, dword [0x1401be9b0]
movss dword [rbp + 0x210], xmm0
movss xmm1, dword [0x1401be9b4]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rbp + 0x214], xmm1
lea rcx, [rbp + 0x208]
call fcn.140035040
movss xmm2, dword [rdi + 0x3940]
addss xmm2, dword [0x140186544]
movd xmm0, dword [0x1401be76c]
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, dword [0x140186578]
movaps xmm0, xmm6
addss xmm0, xmm1
movss dword [rbp + 0x118], xmm7
movss dword [rbp + 0x11c], xmm0
addss xmm2, dword [0x140186570]
addss xmm6, xmm2
movss dword [rbp + 0x120], xmm8
movss dword [rbp + 0x124], xmm6
mov dword [rsp + 0x28], r15d
movss xmm0, dword [0x1401864dc]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x120]
mov rcx, rbx
call fcn.140050030
mov rcx, qword [0x1401be258]
mov rax, qword [rcx + 0x4018]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4018]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
movss xmm6, dword [0x140186568]
addss xmm1, xmm6
addss xmm0, xmm9
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
call fcn.140044f20
mov ebx, r15d
mov rdi, r15
lea r13, [0x1401beb60]
lea r12, str.Aimbot
nop dword [rax]
mov r8d, ebx
mov rdx, qword [rdi + r13]
mov rcx, qword [rdi + r12]
call fcn.140028d70
inc ebx
lea rdi, [rdi + 8]
cmp ebx, 4
jl 0x1400658b0
mov r12d, dword [rsp + 0x60]
mov r13d, dword [rbp + 0x410]
call fcn.140045060
mov rcx, qword [0x1401be258]
mov rax, qword [rcx + 0x4018]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4018]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm6
addss xmm1, xmm14
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
movss xmm0, dword [0x1401bea48]
movss dword [rbp + 0x228], xmm0
movss xmm1, dword [0x1401bea4c]
movss dword [rbp + 0x22c], xmm1
movss xmm0, dword [0x1401bea50]
movss dword [rbp + 0x230], xmm0
movss xmm1, dword [0x1401bea54]
mulss xmm1, dword [rcx + 0x38f0]
movss dword [rbp + 0x234], xmm1
lea rcx, [rbp + 0x228]
call fcn.140035040
mov edx, eax
mov ecx, 3
call fcn.140035370
mov rbx, qword [0x1401be258]
lea rcx, [rbx + 0x4a50]
movss xmm0, dword [rbx + 0x391c]
mov dword [rbp + 0x270], 7
movss dword [rbp + 0x274], xmm0
lea rdx, [rbp + 0x270]
call fcn.14004bbc0
mov dword [rbx + 0x391c], 0x41400000
mov rbx, qword [0x1401be258]
lea rcx, [rbx + 0x4a50]
movss xmm1, dword [rbx + 0x38f8]
movss xmm0, dword [rbx + 0x38fc]
mov dword [rbp + 0x1f0], 2
movss dword [rbp + 0x1f4], xmm1
movss dword [rbp + 0x1f8], xmm0
lea rdx, [rbp + 0x1f0]
call fcn.14004bbc0
mov dword [rbx + 0x38f8], 0x41500000
mov dword [rbx + 0x38fc], 0x41a00000
mov rbx, qword [0x1401be258]
lea rcx, [rbx + 0x4a50]
movss xmm1, dword [rbx + 0x393c]
movss xmm0, dword [rbx + 0x3940]
mov dword [rbp + 0x1fc], reloc.WS2_32.dll_ntohl
movss dword [rbp + 0x200], xmm1
movss dword [rbp + 0x204], xmm0
lea rdx, [rbp + 0x1fc]
call fcn.14004bbc0
mov dword [rbx + 0x393c], 0x42380000
mov dword [rbx + 0x3940], 0x41f00000
call fcn.14003bd30
movss xmm1, dword [0x1401be740]
xor ecx, ecx
call fcn.140035440
mov eax, dword [0x1401be76c]
test eax, eax
jne 0x140065e76
call fcn.140044f20
mov qword [rbp + 0x128], 0
mov dword [rbp - 0x70], 0x6e65472c
mov dword [rbp - 0x6c], 0x6c617265
mov byte [rbp - 0x68], 0
lea rdx, [rbp + 0x128]
lea rcx, [rbp - 0x6f]
call fcn.140029370
lea rdx, [0x1401be1a7]
lea rcx, str.Enable_aimbot
call fcn.140029b30
lea rdx, [0x1401ba758]
lea rcx, str.Aimbot_key
call fcn.1400635d0
lea rdx, [0x1401be19c]
lea rcx, str.Sticky_aimbot
call fcn.140029b30
lea rdx, [0x1401be1d2]
lea rcx, str.Use_FOV
call fcn.140029b30
call fcn.140029850
call fcn.140045060
movaps xmm1, xmm13
movaps xmm0, xmm10
call fcn.140044d60
call fcn.140044f20
mov qword [rbp + 0x130], 0
mov dword [rbp - 0x40], 0x74655316
mov dword [rbp - 0x3c], 0x676e6974
mov word [rbp - 0x38], reloc.WS2_32.dll_WSAStartup
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x3f]
call fcn.140029370
lea rax, str.Mouse
mov qword [rbp + 0x528], rax
lea rax, str.Camera
mov qword [rbp + 0x530], rax
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0x528]
lea rdx, [0x1401be198]
lea rcx, str.Aimbot_type
call fcn.14002bf20
lea rax, str.Head
mov qword [rbp + 0x500], rax
lea rax, str.Torso
mov qword [rbp + 0x508], rax
lea rax, str.RootPart
mov qword [rbp + 0x510], rax
mov dword [rsp + 0x20], 3
lea r9, [rbp + 0x500]
lea rdx, [0x1401be1a0]
lea rcx, str.Target
call fcn.14002bf20
lea rdx, [0x1401be197]
lea rcx, str.Enable_Teamcheck
call fcn.140029b30
lea rdx, [0x1401be1c4]
lea rcx, str.Enable_Aim_At_Closest_part
call fcn.140029b30
lea rdx, [0x1401be1a4]
lea rcx, str.Enable_prediction
call fcn.140029b30
lea rbx, str._.2f
cmp byte [0x1401be1a4], 0
je 0x140065cca
mov dword [rbp + 0x3e8], 0x41200000
mov dword [rbp + 0x3e0], 0x3f800000
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x3e8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e0]
lea r8, [0x1401a416c]
mov edx, 8
lea rcx, str.Prediction_X
call fcn.14002a270
mov dword [rbp + 0x3e0], 0x41200000
mov dword [rbp + 0x3e8], 0x3f800000
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, [0x1401a4164]
mov edx, 8
lea rcx, str.Prediction_Y
call fcn.14002a270
lea rdx, [0x1401beb38]
cmp dword [0x1401be198], 0
je 0x140065d13
lea rcx, str.Enable_camera_smoothness
call fcn.140029b30
cmp byte [0x1401beb38], 0
je 0x140065d6c
mov dword [rbp + 0x3e0], 0x42340000
mov dword [rbp + 0x3e8], 0x3f800000
lea r8, [0x1401a4170]
lea rcx, str.camera_smoothness
jmp 0x140065d4a
lea rcx, str.Enable_mouse_sensitivity
call fcn.140029b30
cmp byte [0x1401beb38], 0
je 0x140065d6c
mov dword [rbp + 0x3e0], 0x40000000
mov dword [rbp + 0x3e8], 0x3f000000
lea r8, [0x1401a4174]
lea rcx, str.mouse_sensitivity
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
mov edx, 8
call fcn.14002a270
call fcn.140029850
mov qword [rbp + 0x138], 0
lea rdx, [rbp + 0x138]
lea rcx, str.Additional
call fcn.140029370
lea rdx, [0x1401be1d1]
lea rcx, str.Show_FOV
call fcn.140029b30
mov dword [rbp + 0x3e0], 0x3e8
mov dword [rbp + 0x3e8], r15d
lea rbx, [0x1401852bc]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, [0x1401a4168]
mov edx, 4
lea rcx, str.FOV_size
call fcn.14002a270
mov dword [rbp + 0x3e0], 0x3e8
mov dword [rbp + 0x3e8], r15d
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, reloc.WLDAP32.dll_Ordinal_50
mov edx, 4
lea rcx, str.FOV_sides
call fcn.14002a270
mov rax, qword [0x1401be258]
mov r8, qword [rax + 0x4018]
cmp byte [r8 + 0xc3], 0
jne 0x1400674de
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1b8], 0
je 0x140065e68
neg edx
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm11
call fcn.14005b720
jmp 0x1400674de
cmp eax, 1
jne 0x140065f9c
call fcn.140044f20
mov qword [rbp + 0x140], 0
mov dword [rbp - 0x10], 0x726f4e2a
mov dword [rbp - 0xc], 0x206c616d
mov dword [rbp - 8], 0x505345
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0xf]
call fcn.140029370
lea rdx, [0x1401be1d0]
lea rcx, str.Show_ESP
call fcn.140029b30
lea rdx, [0x1401be1c7]
lea rcx, str.Show_box
call fcn.140029b30
lea rdx, [0x1401be1c5]
lea rcx, str.Show_dot
call fcn.140029b30
lea rdx, [0x1401be1c6]
lea rcx, str.Show_Name
call fcn.140029b30
call fcn.140029850
call fcn.140045060
movaps xmm1, xmm13
movaps xmm0, xmm10
call fcn.140044d60
call fcn.140044f20
mov qword [rbp + 0x148], 0
mov dword [rbp - 0x30], 0x7465537b
mov dword [rbp - 0x2c], 0x676e6974
mov word [rbp - 0x28], reloc.WS2_32.dll_WSAStartup
lea rdx, [rbp + 0x148]
lea rcx, [rbp - 0x2f]
call fcn.140029370
lea rax, str.2D_Box
mov qword [rbp + 0x500], rax
lea rax, str.3D_Box
mov qword [rbp + 0x508], rax
lea rax, str.2D_Kitten_Box
mov qword [rbp + 0x510], rax
mov dword [rsp + 0x20], 3
lea r9, [rbp + 0x500]
lea rdx, [0x1401be1d4]
lea rcx, str.Box_Type
call fcn.14002bf20
jmp 0x1400674de
cmp eax, 2
jne 0x140066977
call fcn.140044f20
mov qword [rbp + 0x150], 0
mov dword [rbp - 0x80], 0x616c502f
mov dword [rbp - 0x7c], 0x73726579
mov byte [rbp - 0x78], 0
lea rdx, [rbp + 0x150]
lea rcx, [rbp - 0x7f]
call fcn.140029370
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8d, 7
lea rdx, str.Players
lea rcx, [rbp + 0x3f0]
call fcn.14000d680
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x1a8]
lea rcx, [0x1401be1b8]
call fcn.14006abf0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401beb80], eax
jle 0x14006606b
lea rcx, [0x1401beb80]
call fcn.1401434a8
cmp dword [0x1401beb80], 0xffffffff
jne 0x14006606b
lea rcx, [0x140149950]
call fcn.1401433a4
lea rcx, [0x1401beb80]
call fcn.14014343c
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x430], xmm1
mov qword [rbp + 0x440], r15
movdqu xmmword [rbp + 0x500], xmm1
mov qword [rbp + 0x510], r15
or r12d, 0x40
mov dword [rbp + 0x3e8], r12d
mov rcx, qword [rbp + 0x1a8]
test rcx, rcx
je 0x140066118
add rcx, 0x50
call fcn.14006b310
mov rbx, rax
test rax, rax
je 0x140066118
lea rcx, [rax + 8]
call fcn.14006b310
mov rdi, rax
mov rcx, rbx
call fcn.14006b310
mov rbx, rax
cmp rax, rdi
je 0x140066118
mov rcx, rbx
call fcn.14006b310
mov qword [rbp + 0x3e0], rax
mov rdx, qword [rbp + 0x508]
cmp rdx, qword [rbp + 0x510]
je 0x1400660fc
mov qword [rdx], rax
add qword [rbp + 0x508], 8
jmp 0x14006610f
lea r8, [rbp + 0x3e0]
lea rcx, [rbp + 0x500]
call fcn.140017f70
add rbx, 0x10
cmp rbx, rdi
jne 0x1400660d0
mov r12d, r15d
mov dword [rsp + 0x60], r15d
mov rdi, qword [rbp + 0x500]
mov rsi, qword [rbp + 0x508]
cmp rdi, rsi
je 0x140066269
nop word [rax + rax]
mov rbx, qword [rdi]
or r12d, 4
mov dword [rsp + 0x60], r12d
lea rcx, [rbx + 0x48]
call fcn.14006b310
test rax, rax
je 0x140066171
lea rcx, [rbx + 0x48]
call fcn.14006b310
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.14006aac0
jmp 0x1400661b1
mov dword [rsp + 0x68], 0x3f3f40
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], r15
lea rax, [rsp + 0x69]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140066194
lea rdx, [rsp + 0x69]
lea rcx, [rbp + 0x38]
call fcn.14000d680
mov dword [rsp + 0x60], r12d
mov rdx, qword [rbp + 0x438]
cmp rdx, qword [rbp + 0x440]
je 0x1400661f9
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r15
mov qword [rdx + 0x18], r15
movups xmm0, xmmword [rbp + 0x38]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x48]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp + 0x48], r15
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x50], rax
mov byte [rbp + 0x38], 0
add qword [rbp + 0x438], 0x20
jmp 0x14006620d
lea r8, [rbp + 0x38]
lea rcx, [rbp + 0x430]
call fcn.1400684a0
mov rax, qword [rbp + 0x50]
cmp rax, 0xf
jbe 0x140066245
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066240
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676bb
call fcn.1401433c4
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x38], 0
add rdi, 8
cmp rdi, rsi
jne 0x140066140
mov rdi, qword [rbp + 0x500]
test rdi, rdi
je 0x1400662c3
mov rax, qword [rbp + 0x510]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400662a9
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676c2
mov rcx, rdi
call fcn.1401433c4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x500], xmm0
mov qword [rbp + 0x510], r15
mov edi, r15d
mov rsi, qword [rbp + 0x438]
mov rbx, qword [rbp + 0x430]
cmp rbx, rsi
je 0x1400663e5
mov dword [rbp + 0x15c], 0
mov rdx, qword [0x1401be258]
lea r13, [0x1401bcb78]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140066302
mov rcx, qword [rbx]
mov rax, qword [rdx + 0x4018]
movss xmm0, dword [rax + 0x30]
subss xmm0, dword [rdx + 0x393c]
mulss xmm0, xmm12
movss dword [rbp + 0x158], xmm0
lea rdx, [rbp + 0x158]
call fcn.14002ea50
test al, al
je 0x140066351
cmp r13, rbx
je 0x140066351
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140066345
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, r13
call fcn.1400199b0
inc edi
mov rdx, qword [0x1401be258]
test dil, 1
je 0x1400663d1
mov rcx, qword [rbp + 0x438]
sub rcx, qword [rbp + 0x430]
sar rcx, 5
movsxd rax, edi
cmp rax, rcx
je 0x1400663d1
mov rcx, qword [rdx + 0x4018]
cmp byte [rcx + 0xc3], 0
jne 0x1400663d1
movss xmm0, dword [rdx + 0x393c]
addss xmm0, dword [rcx + 0x118]
movss dword [rcx + 0x110], xmm0
mov eax, dword [rcx + 0x11c]
mov dword [rcx + 0x114], eax
movsd xmm0, qword [rcx + 0x140]
movsd qword [rcx + 0x138], xmm0
mov eax, dword [rcx + 0x14c]
mov dword [rcx + 0x148], eax
mov byte [rcx + 0x150], 1
add rbx, 0x20
cmp rbx, rsi
jne 0x1400662f5
mov r13d, dword [rbp + 0x410]
mov qword [rbp + 0x160], 0
lea rdx, [rbp + 0x160]
lea rcx, str.Spectate
call fcn.14002ea50
test al, al
je 0x140066437
mov rcx, qword [0x1401be1b0]
add rcx, 0x100
call fcn.14006b310
lea rsi, [0x1401bcb78]
mov rdx, rsi
lea rcx, [rbp + 0x10]
call fcn.140009ec0
mov rdx, rax
call fcn.14006aea0
jmp 0x14006643e
lea rsi, [0x1401bcb78]
mov qword [rbp + 0x168], 0
lea rdx, [rbp + 0x168]
lea rcx, str.Unspectate
call fcn.14002ea50
test al, al
je 0x140066592
mov rcx, qword [0x1401be1b0]
add rcx, 0x100
call fcn.14006b310
mov rcx, qword [0x1401be1b0]
add rcx, 0x100
call fcn.14006b310
lea rcx, [rax + 0x298]
call fcn.14006b310
mov qword [rbp + 0x3e0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8d, 8
lea rdx, str.Humanoid
lea rcx, [rbp + 0x3f0]
call fcn.14000d680
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x3e0]
call fcn.14006abf0
mov rdi, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
mov qword [rbp + 0x510], r15
mov qword [rbp + 0x518], r15
mov r8d, 9
lea rdx, str.Workspace
lea rcx, [rbp + 0x500]
call fcn.14000d680
lea r8, [rbp + 0x500]
lea rdx, [rbp + 0x2c8]
lea rcx, [0x1401be1b8]
call fcn.14006abf0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x450], xmm0
mov qword [rbp + 0x460], r15
mov qword [rbp + 0x468], r15
mov r8d, 6
lea rdx, str.Camera
lea rcx, [rbp + 0x450]
call fcn.14000d680
lea r8, [rbp + 0x450]
lea rdx, [rbp + 0x2d0]
mov rcx, rbx
call fcn.14006abf0
mov rcx, qword [rax]
add rcx, 0xc0
mov rdx, rdi
call fcn.14006b3b0
mov qword [rbp + 0x170], 0
lea rdx, [rbp + 0x170]
lea rcx, str.Teleport
call fcn.14002ea50
test al, al
je 0x1400665dc
mov rcx, qword [0x1401be1b0]
add rcx, 0x100
call fcn.14006b310
mov rdx, rsi
lea rcx, [rbp + 0x10]
call fcn.140009ec0
mov rdx, rax
call fcn.14006b030
nop
lea rcx, [rbp + 0x430]
call fcn.14001f430
call fcn.140029850
mov rax, qword [0x1401be258]
mov rcx, qword [rax + 0x4018]
cmp byte [rcx + 0xc3], 0
jne 0x14006664b
movss xmm0, dword [rax + 0x393c]
addss xmm0, dword [rcx + 0x118]
movss dword [rcx + 0x110], xmm0
mov eax, dword [rcx + 0x11c]
mov dword [rcx + 0x114], eax
movsd xmm0, qword [rcx + 0x140]
movsd qword [rcx + 0x138], xmm0
mov eax, dword [rcx + 0x14c]
mov dword [rcx + 0x148], eax
mov byte [rcx + 0x150], 1
mov qword [rbp + 0x1b8], 0
mov dword [rbp - 0x20], 0x61684344
mov dword [rbp - 0x1c], 0x74636172
mov word [rbp - 0x18], 0x7265
mov byte [rbp - 0x16], 0
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp - 0x1f]
call fcn.140029370
mov dword [rbp + 0x3e0], 0x43310000
mov dword [rbp + 0x3e8], 0x428c0000
lea rax, str._.2f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, [0x1401a413c]
mov edx, 8
lea rcx, str.FOV_Value
call fcn.14002a270
mov qword [rbp + 0x178], 0
lea rdx, [rbp + 0x178]
lea rcx, str.Set_Fov
call fcn.14002ea50
test al, al
je 0x1400667af
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8d, 9
lea rdx, str.Workspace
lea rcx, [rbp + 0x3f0]
call fcn.14000d680
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x2d8]
lea rcx, [0x1401be1b8]
call fcn.14006abf0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
mov qword [rbp + 0x510], r15
mov qword [rbp + 0x518], r15
mov r8d, 6
lea rdx, str.Camera
lea rcx, [rbp + 0x500]
call fcn.14000d680
lea r8, [rbp + 0x500]
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call fcn.14006abf0
movss xmm1, dword [0x1401a413c]
mulss xmm1, dword [0x1401864b4]
divss xmm1, dword [0x14018656c]
mov rcx, qword [rbp + 0x1b0]
add rcx, 0x138
call fcn.14006b450
lea rdx, [0x1401be18c]
lea rcx, str.Exploits__May_Cause_Lag_
call fcn.140029b30
mov rax, qword [0x1401be258]
mov r8, qword [rax + 0x4018]
cmp byte [r8 + 0xc3], 0
jne 0x140066804
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1b8], 0
je 0x1400667fb
neg edx
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm11
call fcn.14005b720
cmp byte [0x1401be18c], 0
je 0x1400674de
lea rdx, [0x1401be18e]
lea rcx, str.Enable_CFrame_speed
call fcn.140029b30
lea rdx, [0x1401ba708]
lea rcx, str.CFrame_key
call fcn.1400635d0
mov dword [rbp + 0x3e0], reloc.WLDAP32.dll_Ordinal_50
mov ebx, 1
mov dword [rbp + 0x3e8], ebx
lea rsi, [0x1401852bc]
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, [0x1401a4130]
mov edx, 4
lea rcx, str.CFrame_speed_value
call fcn.14002a270
lea rdx, [0x1401be18f]
lea rcx, str.Enable_Fly
call fcn.140029b30
lea rdx, [0x1401ba6f0]
lea rcx, str.Fly_key
call fcn.1400635d0
mov dword [rbp + 0x3e0], 0xa
mov dword [rbp + 0x3e8], ebx
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, [0x1401a4134]
mov edx, 4
lea rcx, str.Fly_speed_value
call fcn.14002a270
lea rdx, [0x1401be187]
lea rcx, str.Enable_Mass_TP
call fcn.140029b30
lea rax, str.Seconds
mov qword [rbp + 0x500], rax
lea rax, str.Milliseconds
mov qword [rbp + 0x508], rax
lea rax, str.Microseconds
mov qword [rbp + 0x510], rax
lea r9, [rbp + 0x500]
call fcn.14005c820
mov dword [rbp + 0x3e0], 0xa
mov dword [rbp + 0x3e8], ebx
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3e8]
lea r8, [0x1401a4138]
mov edx, 4
lea rcx, str.Mass_TP_Speed
call fcn.14002a270
jmp 0x1400674de
cmp eax, 3
jne 0x1400674e8
call fcn.140044f20
mov qword [rbp + 0x180], 0
mov dword [rbp], 0x6e6f4326
mov dword [rbp + 4], 0x75676966
mov dword [rbp + 8], 0x69746172
mov word [rbp + 0xc], 0x6e6f
mov byte [rbp + 0xe], 0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 1]
call fcn.140029370
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x500], xmm1
mov qword [rbp + 0x510], r15
lea rcx, [rbp + 0x10]
call fcn.140064340
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1400669e9
mov rax, qword [rax]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], rcx
call fcn.14014289c
movaps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x450], xmm0
lea r8, [rbp + 0x450]
mov edx, eax
lea rcx, [rbp + 0x3f0]
call fcn.140003250
or r12d, 0x180
mov dword [rsp + 0x60], r12d
mov dword [rbp + 0x3e8], r12d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x420], xmm0
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x420]
call fcn.140067d40
test eax, eax
jne 0x140067a9c
mov rdx, qword [rbp + 0x408]
cmp rdx, 7
jbe 0x140066a9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066a9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676c9
call fcn.1401433c4
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], 7
mov word [rbp + 0x3f0], r15w
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140066af4
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066aef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676d0
call fcn.1401433c4
xorps xmm0, xmm0
movups xmmword [rbp + 0x450], xmm0
mov rsi, qword [rbp + 0x428]
test rsi, rsi
je 0x140066b21
lock inc dword [rsi + 8]
mov rsi, qword [rbp + 0x428]
mov r12d, dword [rbp + 0x3e8]
mov dword [rsp + 0x60], r12d
movaps xmm0, xmmword [rbp + 0x420]
movdqa xmmword [rbp + 0x450], xmm0
test rsi, rsi
je 0x140066b4c
lock inc dword [rsi + 8]
mov rsi, qword [rbp + 0x428]
mov r12d, dword [rbp + 0x3e8]
mov dword [rsp + 0x60], r12d
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x430], xmm1
test rsi, rsi
je 0x140066bae
mov eax, 0xffffffff
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x140066b9b
mov rbx, qword [rbp + 0x428]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140066b9b
mov rsi, qword [rbp + 0x428]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x140066ba2
mov rsi, qword [rbp + 0x428]
mov r12d, dword [rbp + 0x3e8]
mov dword [rsp + 0x60], r12d
cmp qword [rbp + 0x420], 0
je 0x140066fd6
mov rdi, qword [rbp + 0x450]
nop dword [rax]
nop word [rax + rax]
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x490]
call fcn.140009b30
nop
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 7
cmova rcx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x4a0]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140062310
cmp rax, rdx
je 0x140066c4c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140066c1f
cmp cx, 0x2f
jne 0x140066c28
add rax, 2
cmp rax, rdx
jne 0x140066c10
cmp rax, rdx
je 0x140066c4c
nop dword [rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x140066c4c
cmp cx, 0x2f
je 0x140066c4c
mov rbx, r8
cmp rax, r8
jne 0x140066c30
mov r8d, Ordinal_60
mov rcx, rbx
call fcn.140143010
cmp rbx, rax
je 0x140066c97
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x140066c97
cmp word [rdx], 0x2e
jne 0x140066c7f
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x140066c9a
cmp word [rcx], 0x2e
jne 0x140066c9a
jmp 0x140066c97
sub rdx, 2
cmp rbx, rdx
je 0x140066c97
cmp word [rdx], 0x2e
je 0x140066c9a
sub rdx, 2
cmp rbx, rdx
jne 0x140066c88
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
mov r8, rax
lea rcx, [rbp + 0x3f0]
call fcn.14000d1c0
or r12d, 0x38
mov dword [rsp + 0x60], r12d
mov dword [rbp + 0x3e8], r12d
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0x3f0]
call fcn.1400626a0
nop
mov rdx, qword [rbp + 0x408]
cmp rdx, 7
jbe 0x140066d31
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066d2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676d7
call fcn.1401433c4
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], 7
mov word [rbp + 0x3f0], r15w
lea rcx, [rbp + 0x470]
mov rax, qword [rbp + 0x488]
cmp rax, 0xf
cmova rcx, qword [rbp + 0x470]
cmp qword [rbp + 0x480], 4
jne 0x140066f20
cmp dword [rcx], 0x6766632e
jne 0x140066f20
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x2e0]
call fcn.140003c00
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2b0], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rbp + 0x2b0]
test edx, edx
je 0x140066db6
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140067ab2
cmp ecx, 3
je 0x140066f19
lea rcx, [rdi + 0x20]
lea rdx, [rbp + 0x10]
call fcn.1400626a0
mov rbx, rax
lea rcx, [rbp + 0x290]
call fcn.140064340
nop
mov r8, qword [rax + 0x10]
inc r8
lea rdx, [rbp + 0x3f0]
mov rcx, rbx
call fcn.140067bf0
nop
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x140066e34
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066e2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676de
call fcn.1401433c4
mov qword [rbp + 0x2a0], r15
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x290], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140066e88
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066e83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676e5
call fcn.1401433c4
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
mov rax, qword [rbp + 0x508]
cmp rax, qword [rbp + 0x510]
je 0x140066ec1
lea rdx, [rbp + 0x3f0]
mov rcx, rax
call fcn.140009ec0
add qword [rbp + 0x508], 0x20
jmp 0x140066ed8
lea r8, [rbp + 0x3f0]
mov rdx, rax
lea rcx, [rbp + 0x500]
call fcn.140068730
nop
mov rdx, qword [rbp + 0x408]
cmp rdx, 0xf
jbe 0x140066f19
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066f14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676ec
call fcn.1401433c4
mov rax, qword [rbp + 0x488]
cmp rax, 0xf
jbe 0x140066f5b
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066f56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676f3
call fcn.1401433c4
mov qword [rbp + 0x480], r15
mov qword [rbp + 0x488], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x470], 0
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 7
jbe 0x140066fba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066fb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676fa
call fcn.1401433c4
lea rcx, [rbp + 0x450]
call fcn.140062f30
mov rdi, qword [rbp + 0x450]
test rdi, rdi
jne 0x140066bd0
mov rcx, qword [rbp + 0x458]
test rcx, rcx
je 0x14006702f
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14006701c
mov rbx, qword [rbp + 0x458]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14006701c
mov rcx, qword [rbp + 0x458]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r12d, dword [rbp + 0x3e8]
mov dword [rsp + 0x60], r12d
mov rsi, qword [rbp + 0x428]
test rsi, rsi
je 0x14006707a
mov eax, 0xffffffff
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x14006706e
mov rbx, qword [rbp + 0x428]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14006706e
mov rcx, qword [rbp + 0x428]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r12d, dword [rbp + 0x3e8]
mov dword [rsp + 0x60], r12d
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401beb84], eax
jle 0x14006720f
lea rcx, [0x1401beb84]
call fcn.1401434a8
cmp dword [0x1401beb84], 0xffffffff
jne 0x14006720f
mov rdx, qword [rbp + 0x500]
cmp rdx, qword [rbp + 0x508]
jne 0x1400670fe
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], r15
xor r8d, r8d
lea rdx, [0x140174a38]
lea rcx, [rbp + 0x3f0]
call fcn.14000d680
lea rax, [rbp + 0x3f0]
or r12d, 1
jmp 0x14006710b
lea rcx, [rbp + 0x10]
call fcn.140009ec0
or r12d, 2
mov dword [rsp + 0x60], r12d
xorps xmm0, xmm0
movups xmmword [0x1401beb40], xmm0
mov qword [0x1401beb50], r15
mov qword [0x1401beb58], r15
movups xmm0, xmmword [rax]
movups xmmword [0x1401beb40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x1401beb50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
test r12b, 2
je 0x1400671a6
and r12d, 0xfffffffd
mov dword [rsp + 0x60], r12d
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140067196
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067191
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067701
call fcn.1401433c4
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
test r12b, 1
je 0x1400671f6
and r12d, 0xfffffffe
mov dword [rsp + 0x60], r12d
mov rdx, qword [rbp + 0x408]
cmp rdx, 0xf
jbe 0x1400671f6
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400671f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067708
call fcn.1401433c4
lea rcx, [0x1401498e0]
call fcn.1401433a4
nop
lea rcx, [0x1401beb84]
call fcn.14014343c
mov rax, qword [rbp + 0x508]
mov rdx, qword [rbp + 0x500]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140067359
xor r14d, r14d
lea rcx, [r14 + rdx]
cmp qword [rcx + 0x10], 0
je 0x140067331
mov qword [rbp + 0x188], 0
cmp qword [rcx + 0x18], 0xf
jbe 0x140067254
mov rcx, qword [rcx]
lea rdx, [rbp + 0x188]
call fcn.14002ea50
mov rdx, qword [rbp + 0x500]
test al, al
je 0x140067331
add rdx, r14
lea rbx, [0x1401beb40]
cmp rbx, rdx
je 0x140067294
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14006728c
mov rdx, qword [rdx]
mov rcx, rbx
call fcn.1400199b0
mov rcx, rbx
mov rbx, qword [0x1401beb40]
mov rdi, qword [0x1401beb58]
cmp rdi, 0xf
cmova rcx, rbx
mov qword [rsp + 0x20], 4
lea r9, str..cfg
xor r8d, r8d
mov rsi, qword [0x1401beb50]
mov rdx, rsi
call fcn.14000d2f0
cmp rax, 0xffffffffffffffff
je 0x140067306
cmp rsi, rax
jb 0x140067ac3
mov qword [0x1401beb50], rax
lea rcx, [0x1401beb40]
cmp rdi, 0xf
cmova rcx, rbx
mov byte [rcx + rax], 0
mov rdi, qword [0x1401beb58]
mov rbx, qword [0x1401beb40]
lea r8, [0x1401beb40]
cmp rdi, 0xf
cmova r8, rbx
mov edx, 0x100
mov r9d, edx
lea rcx, [0x1401be270]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov rdx, qword [rbp + 0x500]
inc r15d
add r14, 0x20
mov rcx, qword [rbp + 0x508]
sub rcx, rdx
sar rcx, 5
movsxd rax, r15d
cmp rax, rcx
jb 0x140067230
lea r14, [0x1401beb40]
mov qword [rbp + 0x190], 0
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp + 0x190]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x1401be270]
xor edx, edx
lea rcx, str.Config_Name
call fcn.14002c0d0
mov qword [rbp + 0x198], r15
mov dword [rbp + 0x520], 0x6572434e
mov dword [rbp + 0x524], 0x657461
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x521]
call fcn.14002ea50
test al, al
je 0x1400673db
lea rcx, [0x1401be270]
call fcn.14006cbb0
mov qword [rbp + 0x1a0], r15
mov dword [rsp + 0x6c], 0x616f4c58
mov word [rsp + 0x70], 0x64
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x6d]
call fcn.14002ea50
test al, al
je 0x14006741f
mov rcx, r14
cmp qword [0x1401beb58], 0xf
cmova rcx, qword [0x1401beb40]
call fcn.140071010
nop
lea rcx, [rbp + 0x500]
call fcn.14001f430
call fcn.140029850
mov rax, qword [0x1401be258]
mov rcx, qword [rax + 0x4018]
cmp byte [rcx + 0xc3], 0
jne 0x14006748e
movss xmm0, dword [rax + 0x393c]
addss xmm0, dword [rcx + 0x118]
movss dword [rcx + 0x110], xmm0
mov eax, dword [rcx + 0x11c]
mov dword [rcx + 0x114], eax
movsd xmm0, qword [rcx + 0x140]
movsd qword [rcx + 0x138], xmm0
mov eax, dword [rcx + 0x14c]
mov dword [rcx + 0x148], eax
mov byte [rcx + 0x150], 1
mov qword [rbp + 0x30], 0
mov dword [rsp + 0x74], 0x68744f13
mov word [rsp + 0x78], 0x7265
mov byte [rsp + 0x7a], 0
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x75]
call fcn.140029370
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Enable_Performance_Mode
call fcn.140029b30
lea rdx, [0x1401be195]
lea rcx, str.Hide_Console
call fcn.140029b30
call fcn.140029850
call fcn.140045060
mov edi, 1
mov ecx, edi
call fcn.1400354c0
call fcn.14003c1e0
mov r8, qword [0x1401be258]
movsxd rax, dword [r8 + 0x4a40]
cmp eax, edi
jl 0x140067533
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a48]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a40]
mov ecx, 3
call fcn.1400354c0
call fcn.140041470
mov rsi, qword [rbp + 0x268]
movzx ebx, byte [rsp + 0x64]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [0x1401be268], rax
mov rcx, rax
cmp byte [0x1401be195], 0
je 0x14006756b
xor edx, edx
jmp 0x140067570
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400675a7
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x4000
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov edx, 0xffffffec
mov rcx, rsi
test bl, bl
je 0x1400675e5
mov r8d, 0x80088
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqu xmmword [rbp + 0x4b0], xmm15
lea rdx, [rbp + 0x4b0]
jmp 0x140067615
mov r8d, 0x800a8
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqu xmmword [rbp + 0x4c0], xmm15
lea rdx, [rbp + 0x4c0]
mov rcx, rsi
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
call fcn.14003b610
xorps xmm0, xmm0
movups xmmword [rbp + 0x538], xmm0
mov rcx, qword [0x1401be728]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1401be710]
mov edx, edi
call qword [rax + 0x108]
mov rcx, qword [0x1401be728]
mov rax, qword [rcx]
lea r8, [rbp + 0x538]
mov rdx, qword [0x1401be710]
call qword [rax + 0x190]
mov rax, qword [0x1401be258]
mov rcx, qword [rax + 0x4ae0]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r15
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140055580
mov rcx, qword [0x1401be718]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, edi
call qword [rax + 0x40]
test r13b, r13b
je 0x140064e50
mov rbx, qword [0x1401be258]
test rbx, rbx
je 0x14006770f
mov rdi, qword [rbx + 0x98]
jmp 0x140067712
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdi, r15
call fcn.140056530
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140067726
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140067734
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140067743
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x88], r15
mov qword [rbx + 0x98], r15
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x1401be258]
test r8, r8
je 0x1400677c4
mov r9d, dword [r8 + 0x3f70]
movsx rdx, word [r8 + 0x6058]
lea rcx, [r8 + 0x605c]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400677b9
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6058], cx
movsx rax, cx
lea rcx, [r8 + 0x605c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6054]
mov rdx, qword [0x1401be260]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov r8, qword [0x1401be258]
test r8, r8
je 0x1400677e8
mov rdi, qword [r8 + 0x90]
jmp 0x1400677eb
mov rdi, r15
lea rbx, [r8 + 8]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x140067805
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x1401be258]
mov qword [rbx + 0x78], r15
mov qword [rbx + 0x88], r15
and dword [rbx + 4], 0xfffffff8
test r8, r8
je 0x14006787c
mov r9d, dword [r8 + 0x3f70]
movsx rdx, word [r8 + 0x6058]
lea rcx, [rdx*8 + 0x605c]
add rcx, r8
cmp dword [rcx], r9d
je 0x140067871
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6058], cx
movsx rax, cx
lea rcx, [rax*8 + 0x605c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6054]
mov rdx, qword [0x1401be260]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x1401be258]
mov qword [0x1401be258], rbx
call fcn.140037380
mov qword [0x1401be258], r15
test rbx, rbx
je 0x140067935
mov rcx, rbx
call fcn.14004c870
mov r8, qword [0x1401be258]
test r8, r8
je 0x140067926
mov r9d, dword [r8 + 0x3f70]
movsx r10, word [r8 + 0x6058]
lea rdx, [r8 + 0x605c]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14006791b
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6058], cx
movsx rax, cx
lea rdx, [r8 + 0x605c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x6054]
mov rdx, qword [0x1401be260]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rcx, qword [0x1401be710]
test rcx, rcx
je 0x14006794e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be710], r15
mov rcx, qword [0x1401be718]
test rcx, rcx
je 0x140067967
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be718], r15
mov rcx, qword [0x1401be728]
test rcx, rcx
je 0x140067980
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be728], r15
mov rcx, qword [0x1401be720]
test rcx, rcx
je 0x140067999
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be720], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x3a8]
lea rcx, [0x140185ca8]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor al, al
jmp 0x140067a34
mov rcx, qword [0x1401be710]
test rcx, rcx
je 0x1400679d3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be710], r15
mov rcx, qword [0x1401be718]
test rcx, rcx
je 0x1400679ec
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be718], r15
mov rcx, qword [0x1401be728]
test rcx, rcx
je 0x140067a05
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be728], r15
mov rcx, qword [0x1401be720]
test rcx, rcx
je 0x140067a1e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401be720], r15
mov rdx, qword [rbp + 0x3a8]
lea rcx, [0x140185ca8]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov al, 1
mov rcx, qword [rbp + 0x548]
xor rcx, rsp
call fcn.140143120
lea r11, [rsp + 0x6f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp + 0x3f0]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140003b30
nop
lea r8, [rdi + 0x20]
lea rcx, str.status
call fcn.140003b30
nop
call fcn.14000c1a0
int3