Function at 0x14004bdd0
Capabilities:
Check if file exists
Create thread
Execute command
Inject thread
Log keystrokes via polling
Set registry value
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x1410]
mov eax, 0x1510
call fcn.140120630
sub rsp, rax
lea rcx, str.C:Program_FilesCheat_Engine_7.5
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
xor ecx, ecx
cmp eax, 1
jne 0x14004be22
xor r9d, r9d
lea rdx, str.CRAKING_SOFTWARE_DETECTED___
xor r8d, r8d
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x14f8], r14
lea r8, [0x14004bda0]
xor r14d, r14d
xor r9d, r9d
mov qword [rsp + 0x28], r14
xor edx, edx
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [r14 + 0x2e]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004be60
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140258530]
call fcn.1400c9c50
cmp byte [0x140258748], r14b
jne 0x14004bea6
lea rcx, [0x140258750]
call fcn.1400441b0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x1520], rbx
lea rax, [0x140052020]
mov qword [rsp + 0x1528], rsi
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0x1530], rdi
mov qword [rbp + 0x168], rax
mov dword [rbp + 0x160], 0x50
mov dword [rbp + 0x164], 0x40
mov qword [rbp + 0x170], r14
mov qword [rbp + 0x178], r14
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x180], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, [0x14015bf68]
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x188], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x1a0], rdi
xor ecx, ecx
mov qword [rbp + 0x198], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x160]
mov qword [rbp + 0x1a8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov esi, 1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r14
mov r9d, 0x80000000
mov qword [rsp + 0x50], r14
cdq
mov qword [rsp + 0x48], r14
sub eax, edx
mov rdx, qword [rbp + 0x1a0]
mov r8, rdi
mov qword [rsp + 0x40], r14
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
movdqa xmm0, xmmword [0x14015dc40]
lea rdx, [rbp + 0x1148]
mov rcx, rax
mov qword [0x1402581c0], rax
movdqu xmmword [rbp + 0x1148], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1402581c0]
lea rdx, [0x1402581d0]
xorps xmm0, xmm0
movups xmmword [0x1402581d0], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1402581c0]
call fcn.140051e10
test al, al
jne 0x14004c03d
call fcn.140051fa0
mov rdx, qword [rbp + 0x178]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, esi
jmp 0x140051ddf
mov rcx, qword [0x1402581c0]
mov edx, 0xa
mov qword [rsp + 0x1500], r13
movaps xmmword [rsp + 0x14e0], xmm6
movaps xmmword [rsp + 0x14a0], xmm10
movaps xmmword [rsp + 0x1490], xmm11
movaps xmmword [rsp + 0x1480], xmm12
movaps xmmword [rsp + 0x1470], xmm13
movaps xmmword [rsp + 0x1460], xmm14
movaps xmmword [rsp + 0x1450], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1402581c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.140016c00
xor ecx, ecx
call fcn.140006310
call fcn.140008290
lea rcx, [rbp + 0x12c0]
mov rdi, rax
or dword [rax], 3
call fcn.14002a110
mov dword [rbp + 0x130c], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d5d0
movss xmm6, dword [0x14015db18]
lea rdx, [0x140175120]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0x12c0]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac10
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402581b0], rax
call fcn.14002d5d0
movss xmm3, dword [0x14015db10]
lea rdx, [0x140175120]
mov qword [rsp + 0x28], rax
mov r8d, 0x26368
lea rax, [rbp + 0x12c0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac10
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d5d0
movss xmm3, dword [0x14015db30]
lea rdx, [0x1402556f0]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0x12c0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac10
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x140258130], rax
call fcn.14002d5d0
mov qword [rsp + 0x28], rax
lea rdx, [0x14022fd90]
lea rax, [rbp + 0x12c0]
movaps xmm3, xmm6
mov r8d, 0x25958
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002ac10
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x140258128], rax
call fcn.14002d5d0
mov qword [rsp + 0x28], rax
movss xmm3, dword [0x14015db38]
lea rax, [rbp + 0x12c0]
mov r8d, 0x25958
mov qword [rsp + 0x20], rax
lea rdx, [0x14022fd90]
mov rcx, rbx
call fcn.14002ac10
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402581b8], rax
call fcn.14002d5d0
movss xmm6, dword [0x14015db24]
lea rdx, [0x140256630]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0x12c0]
mov r8d, 0x954
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac10
cmp qword [0x140258198], r14
mov qword [0x140258120], rax
jne 0x14004c2c9
mov rcx, qword [0x140258808]
lea rax, [0x140258198]
mov qword [rsp + 0x30], r14
lea r9, [0x140256fe8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c9620]
mov rax, qword [0x1402581e0]
mov r8d, 0x67c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140258188], r14
jne 0x14004c310
mov rcx, qword [0x140258808]
lea rax, [0x140258188]
mov qword [rsp + 0x30], r14
lea r9, [0x140256fe8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14019b490]
mov rax, qword [0x1402581e0]
mov r8d, 0x2df5b
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402581a0], r14
jne 0x14004c357
mov rcx, qword [0x140258808]
lea rax, [0x1402581a0]
mov qword [rsp + 0x30], r14
lea r9, [0x140256fe8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c9ca0]
mov rax, qword [0x1402581e0]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140258190], r14
jne 0x14004c39e
mov rcx, qword [0x140258808]
lea rax, [0x140258190]
mov qword [rsp + 0x30], r14
lea r9, [0x140256fe8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c93f0]
mov rax, qword [0x1402581e0]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402581a8], r14
jne 0x14004c3e5
mov rcx, qword [0x140258808]
lea rax, [0x1402581a8]
mov qword [rsp + 0x30], r14
lea r9, [0x140256fe8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c9d80]
mov rax, qword [0x1402581e0]
mov r8d, 0x66001
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1402581c0]
call fcn.1400467b0
mov rdx, qword [0x140258810]
mov rcx, qword [0x140258808]
call fcn.1400462e0
xorps xmm11, xmm11
lea rcx, [rbp + 0x1270]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm11
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001690
movss xmm14, dword [0x14015dc1c]
xor r13b, r13b
movss xmm15, dword [0x14015daa4]
movss xmm10, dword [0x14015db64]
movss xmm13, dword [0x14015da54]
movss xmm12, dword [0x14015dabc]
mov qword [rsp + 0x1508], r12
mov qword [rsp + 0x14f0], r15
movaps xmmword [rsp + 0x14d0], xmm7
movaps xmmword [rsp + 0x14c0], xmm8
movaps xmmword [rsp + 0x14b0], xmm9
nop
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
lea rcx, [rbp + 0x1230]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004c4ef
nop dword [rax]
lea rcx, [rbp + 0x1230]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1230]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1238], 0x12
lea rcx, [rbp + 0x1230]
movzx r13d, r13b
cmove r13d, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004c4a0
test r13b, r13b
jne 0x140051d1b
call fcn.140008290
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm2, dword [rax + 0x10]
mulss xmm2, dword [0x14015db08]
je 0x14004c514
movss xmm1, dword [0x14015db98]
jmp 0x14004c518
movaps xmm1, xmm11
movss xmm0, dword [0x1402581cc]
call fcn.140054190
movss dword [0x1402581cc], xmm0
call fcn.140008290
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm2, dword [rax + 0x10]
mulss xmm2, dword [0x14015db08]
je 0x14004c568
movss xmm0, dword [0x1402581cc]
comiss xmm0, dword [0x14015db94]
jb 0x14004c568
movss xmm9, dword [0x14015da8c]
movaps xmm1, xmm9
jmp 0x14004c575
movss xmm9, dword [0x14015da8c]
movaps xmm1, xmm14
movss xmm0, dword [0x1402581c8]
call fcn.140054190
movss dword [0x1402581c8], xmm0
call fcn.140046550
call fcn.1400473f0
call fcn.140008c60
call fcn.140004550
movaps xmm2, xmm11
lea rcx, [rbp + 0x10f8]
movaps xmm1, xmm11
mov r15, rax
call fcn.140001680
movaps xmm2, xmm6
lea rcx, [rbp + 0x1180]
movaps xmm1, xmm6
movsd xmm0, qword [rax]
movsd qword [r15 + 8], xmm0
mov dword [r15 + 0x14], r14d
call fcn.140001680
lea r12, [r15 + 0x4c]
movsd xmm0, qword [rax]
movzx eax, byte [0x14025810a]
movsd qword [r12], xmm0
mov dword [r15 + 0x74], 0x41000000
test al, al
jne 0x14004d0be
movaps xmm2, xmm11
lea rcx, [rbp + 0x1190]
movaps xmm1, xmm11
call fcn.140001680
movaps xmm2, xmm11
lea rcx, [rbp + 0x1198]
movaps xmm1, xmm11
mov rbx, rax
call fcn.140001680
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140013460
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x11a0]
movaps xmm2, xmm11
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea rdx, [rbp + 0x100]
mov r8, rax
movsd qword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x11a8]
call fcn.140048920
mov rcx, rax
xor edx, edx
call fcn.1400134f0
xor edx, edx
lea rcx, str.SAKIB_CHEAT
mov r8d, 0x202b
call fcn.14000f610
call fcn.14004b720
lea rcx, [rsp + 0x78]
call fcn.140013170
lea rcx, [rbp + 0x11b0]
call fcn.140013170
call fcn.140004550
movsd xmm0, qword [rax + 0x4c]
movsd qword [rbp - 0x78], xmm0
call fcn.1400084d0
lea rcx, [0x140259010]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x11b8]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0x130]
lea rdx, [rsp + 0x78]
movsd qword [rbp + 0x130], xmm0
lea rcx, [rbp + 0x11c0]
mov rbx, rax
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0x11c8]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x28], r14d
mov r9d, edi
mov r8, rax
movss dword [rsp + 0x20], xmm0
mov rcx, rsi
call fcn.1400266c0
call fcn.1400084d0
lea rcx, [0x140258f80]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x11d0]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0x140]
movsd qword [rbp + 0x140], xmm0
lea rdx, [rsp + 0x78]
mov rbx, rax
lea rcx, [rbp + 0x11e0]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0x11e8]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x78]
movss dword [rsp + 0x30], xmm9
mov r9d, edi
mov dword [rsp + 0x28], r14d
mov r8, rax
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
call fcn.1400265b0
call fcn.140013570
mov r14d, dword [rax + 0x20]
call fcn.140013570
lea rcx, [0x140259010]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x11f0]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea rdx, [rbp + 0x148]
mov r8, rax
movsd qword [rbp + 0x148], xmm0
lea rcx, [rbp + 0x11f8]
call fcn.140048920
movaps xmm2, xmm9
lea rcx, [rbp + 0x1200]
movaps xmm1, xmm9
mov rbx, rax
call fcn.140001680
movss xmm0, dword [0x14015db08]
xor ecx, ecx
movss dword [rsp + 0x30], xmm15
mov r9d, edi
mov dword [rsp + 0x28], ecx
mov r8, rbx
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
mov rdx, rax
call fcn.1400265b0
mov edx, reloc.WS2_32.dll_ntohl
mov dword [rsp + 0x20], 0xff
mov r8d, edx
lea rcx, [rbp + 0x1280]
lea r9d, [rdx + 1]
call fcn.1400016c0
mov rcx, rax
call fcn.140033c80
lea rcx, [0x140258f40]
mov esi, eax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1208]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea rdx, [rbp + 0x150]
mov r8, rax
movsd qword [rbp + 0x150], xmm0
lea rcx, [rbp + 0x1210]
call fcn.140048920
movss xmm1, dword [0x14015da8c]
lea rcx, [rbp + 0x1218]
movaps xmm2, xmm1
movss xmm8, dword [rax]
movss xmm9, dword [rax + 4]
call fcn.140001680
movss xmm6, dword [rax]
movss xmm7, dword [rax + 4]
call fcn.140013570
mov ebx, dword [rax + 0x20]
call fcn.140013570
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], edi
unpcklps xmm6, xmm7
mov r8d, ebx
unpcklps xmm8, xmm9
movq r9, xmm6
mov edx, r14d
movsd qword [rsp + 0x20], xmm8
mov rcx, rax
call fcn.140029c80
call fcn.140013570
lea rcx, [rbp + 0xc0]
mov rdi, rax
call fcn.140013170
lea rcx, [rbp + 0x1220]
call fcn.140013320
lea rcx, [rbp + 0xd70]
mov rbx, rax
call fcn.140013170
mov r8, rbx
lea rcx, [rbp + 0x158]
mov rdx, rax
call fcn.140048920
lea rcx, [0x1402590c0]
call fcn.140004590
movss xmm0, dword [0x14015dacc]
lea r8, [rbp + 0x158]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0xc0]
movss xmm0, dword [0x14015db04]
mov r9d, eax
mov dword [rsp + 0x28], 0xf0
mov rcx, rdi
movss dword [rsp + 0x20], xmm0
call fcn.1400265b0
call fcn.1400084d0
lea rcx, [0x140259010]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xd78]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0xc8]
lea rdx, [rsp + 0x78]
movsd qword [rbp + 0xc8], xmm0
lea rcx, [rbp + 0xf90]
mov rbx, rax
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xd80]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x78]
xor r14d, r14d
mov r9d, edi
mov dword [rsp + 0x28], r14d
mov r8, rax
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
call fcn.1400266c0
call fcn.1400084d0
lea rcx, [0x140258f80]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xd88]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0xd0]
lea rdx, [rsp + 0x78]
movsd qword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0xd90]
mov rbx, rax
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xd98]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x78]
movss xmm9, dword [0x14015da8c]
mov r9d, edi
movss dword [rsp + 0x30], xmm9
mov r8, rax
mov dword [rsp + 0x28], r14d
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
call fcn.1400265b0
movss xmm2, dword [0x14015dbc0]
lea rcx, [rbp + 0xda0]
movss xmm1, dword [0x14015db5c]
call fcn.140001680
mov rcx, rax
call fcn.140017310
call fcn.140017650
movss xmm2, dword [0x14015da4c]
lea rcx, [rbp + 0xda8]
movaps xmm1, xmm11
call fcn.140001680
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xdb0]
movaps xmm2, xmm11
mov rsi, rax
call fcn.140001680
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xdb8]
movaps xmm1, xmm10
mov rdi, rax
call fcn.140001680
lea r8, [rbp - 0x78]
mov rbx, rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xdc0]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xdc8]
mov rdx, rax
call fcn.140048920
mov r8, rdi
lea rcx, [rbp + 0xdd0]
mov rdx, rax
call fcn.140048920
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xdd8]
movss xmm1, dword [rbp - 0x78]
mov rbx, rax
movss xmm7, dword [0x14015db7c]
addss xmm1, xmm10
subss xmm2, xmm7
call fcn.140001680
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xde0]
call fcn.140048920
mov qword [rsp + 0x30], r14
lea r8, str.Status:
mov qword [rsp + 0x28], rsi
xor r9d, r9d
mov rdx, rbx
mov qword [rsp + 0x20], r14
mov rcx, rax
call fcn.140005540
movss xmm2, dword [0x14015da58]
lea rcx, [rbp + 0xde8]
movaps xmm1, xmm11
call fcn.140001680
lea rcx, [0x140257330]
mov rsi, rax
call fcn.1400441b0
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xdf0]
movaps xmm2, xmm11
mov r14, rax
call fcn.140001680
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xdf8]
mov rdi, rax
movaps xmm1, xmm10
call fcn.140001680
lea r8, [rbp - 0x78]
mov rbx, rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xe00]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xe08]
mov rdx, rax
call fcn.140048920
mov r8, rdi
lea rcx, [rbp + 0xe10]
mov rdx, rax
call fcn.140048920
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xe18]
movss xmm1, dword [rbp - 0x78]
subss xmm2, xmm7
addss xmm1, xmm10
mov rbx, rax
call fcn.140001680
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xe20]
call fcn.140048920
xor ecx, ecx
xor r9d, r9d
mov qword [rsp + 0x30], rcx
mov r8, r14
mov qword [rsp + 0x28], rsi
mov rdx, rbx
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140005540
call fcn.140008290
movss xmm0, dword [0x140258b54]
addss xmm0, dword [rax + 0x10]
movss dword [0x140258b54], xmm0
addss xmm0, xmm0
call fcn.140048960
call fcn.140048950
lea rcx, [rbp - 0x58]
movaps xmm6, xmm0
call fcn.140001670
lea rcx, [rbp - 0x60]
call fcn.140001670
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0xe0]
call fcn.140048920
movss xmm1, dword [rbp - 0x60]
lea rcx, [rbp + 0xe28]
mulss xmm1, xmm13
movaps xmm2, xmm11
addss xmm1, xmm11
addss xmm1, dword [0x14015dba4]
call fcn.140001680
movss xmm8, dword [0x14015db4c]
lea rcx, [rbp + 0xe30]
movss xmm1, dword [0x14015dbd0]
movaps xmm2, xmm8
mov rdi, rax
call fcn.140001680
lea r8, [rbp - 0x60]
mov rbx, rax
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0xe38]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xe40]
mov rdx, rax
call fcn.140048920
mov r8, rdi
lea rcx, [rbp + 0xd8]
mov rdx, rax
call fcn.140048920
movaps xmm3, xmm9
movss dword [rsp + 0x20], xmm6
movaps xmm2, xmm9
lea rcx, [rbp + 0x1290]
movaps xmm1, xmm9
call fcn.140001690
mov rcx, rax
call fcn.140004590
mov rcx, qword [0x1402581b8]
mov ebx, eax
call fcn.140012e10
mov edx, ebx
xor ecx, ecx
call fcn.1400045d0
movaps xmm2, xmm13
lea rcx, [rbp + 0xe48]
movaps xmm1, xmm9
call fcn.140001680
xor r14d, r14d
lea r8, str.SAKIB_CHEATS
mov qword [rsp + 0x30], r14
lea rdx, [rbp + 0xd8]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0xe0]
xor r9d, r9d
mov qword [rsp + 0x20], r14
call fcn.140005540
mov esi, 1
mov ecx, esi
call fcn.1400046a0
call fcn.140012eb0
movss xmm1, dword [0x14015db60]
lea rcx, [rbp + 0xe50]
movaps xmm2, xmm7
call fcn.140001680
mov rcx, rax
call fcn.140017310
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8d, [r14 + 0x40]
mov qword [rsp + 0x20], r14
lea rdx, [0x140258210]
lea rcx, str.Username
call fcn.140039ca0
mov r9d, 0x8000
mov qword [rsp + 0x28], r14
lea r8d, [r14 + 0x40]
mov qword [rsp + 0x20], r14
lea rdx, [0x140258140]
lea rcx, str.Password
call fcn.140039ca0
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8d, [r14 + 0x40]
mov qword [rsp + 0x20], r14
lea rdx, [0x140258250]
lea rcx, [0x14015bfc4]
call fcn.140039ca0
movss xmm6, dword [0x14015dbd4]
lea rcx, [rbp + 0xe58]
movss xmm1, dword [0x14015dbbc]
movaps xmm2, xmm6
call fcn.140001680
mov rcx, rax
call fcn.140017310
movss xmm7, dword [0x14015dba8]
lea rcx, [rbp + 0xe60]
movaps xmm1, xmm7
movaps xmm2, xmm8
call fcn.140001680
mov rdx, rax
lea rcx, str.Login
call fcn.1400366b0
test al, al
je 0x14004cfd8
lea rdx, [0x140258140]
lea rcx, [rbp + 0x1b0]
call fcn.140044240
lea rdx, [0x140258210]
mov rbx, rax
lea rcx, [rbp + 0x1d8]
call fcn.140044240
mov r8, rbx
lea rcx, [0x140258530]
mov rdx, rax
call fcn.1400cb320
cmp byte [0x140258748], r14b
jne 0x14004cfbb
mov byte [0x14025810a], sil
jmp 0x14004cfd8
lea rcx, [0x140258750]
call fcn.1400441b0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movaps xmm1, xmm14
movaps xmm0, xmm11
call fcn.140017260
movss xmm1, dword [0x14015dbe8]
lea rcx, [rbp + 0xe68]
movaps xmm2, xmm6
call fcn.140001680
mov rcx, rax
call fcn.140017310
movaps xmm2, xmm8
lea rcx, [rbp + 0xe70]
movaps xmm1, xmm7
call fcn.140001680
mov rdx, rax
lea rcx, str.Register
call fcn.1400366b0
test al, al
je 0x14004d0a8
lea rdx, [0x140258250]
lea rcx, [rbp + 0x1d8]
call fcn.140044240
lea rdx, [0x140258140]
mov rdi, rax
lea rcx, [rbp + 0x1b0]
call fcn.140044240
lea rdx, [0x140258210]
mov rbx, rax
lea rcx, [rbp + 0x48]
call fcn.140044240
mov r9, rdi
lea rcx, [0x140258530]
mov r8, rbx
mov rdx, rax
call fcn.1400cd660
cmp byte [0x140258748], r14b
jne 0x14004d0a1
lea rcx, [0x140258750]
call fcn.1400441b0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x14025810a], sil
call fcn.1400177a0
call fcn.14004b5d0
call fcn.140011e30
movzx eax, byte [0x14025810a]
cmp al, 1
jne 0x140051ca6
movaps xmm2, xmm11
lea rcx, [rbp + 0xe78]
movaps xmm1, xmm11
call fcn.140001680
movaps xmm2, xmm11
lea rcx, [rbp + 0xe80]
movaps xmm1, xmm11
mov rbx, rax
call fcn.140001680
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140013460
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xe88]
movaps xmm2, xmm11
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea rdx, [rbp + 0xe8]
mov r8, rax
movsd qword [rbp + 0xe8], xmm0
lea rcx, [rbp + 0xe90]
call fcn.140048920
mov rcx, rax
xor edx, edx
call fcn.1400134f0
xor edx, edx
lea rcx, str.SAKIB_CHEAT
mov r8d, 0x202b
call fcn.14000f610
call fcn.14004b720
lea rcx, [rsp + 0x68]
call fcn.140013170
lea rcx, [rbp + 0xe98]
call fcn.140013170
call fcn.140004550
movsd xmm0, qword [rax + 0x4c]
movsd qword [rsp + 0x70], xmm0
call fcn.1400084d0
lea rcx, [0x140259010]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xea0]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0xf0]
lea rdx, [rsp + 0x68]
movsd qword [rbp + 0xf0], xmm0
lea rcx, [rbp + 0xea8]
mov rbx, rax
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xeb0]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x28], r14d
mov r9d, edi
mov r8, rax
movss dword [rsp + 0x20], xmm0
mov rcx, rsi
call fcn.1400266c0
call fcn.1400084d0
lea rcx, [0x140258f80]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xeb8]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0xf8]
movsd qword [rbp + 0xf8], xmm0
lea rdx, [rsp + 0x68]
mov rbx, rax
lea rcx, [rbp + 0xec0]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xec8]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x68]
movss dword [rsp + 0x30], xmm9
mov r9d, edi
mov dword [rsp + 0x28], r14d
mov r8, rax
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
call fcn.1400265b0
call fcn.140013570
mov r14d, dword [rax + 0x20]
call fcn.140013570
lea rcx, [0x140259010]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xed0]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea rdx, [rbp + 0x138]
mov r8, rax
movsd qword [rbp + 0x138], xmm0
lea rcx, [rbp + 0xed8]
call fcn.140048920
movaps xmm2, xmm9
lea rcx, [rbp + 0xee0]
movaps xmm1, xmm9
mov rbx, rax
call fcn.140001680
movss xmm0, dword [0x14015db08]
xor ecx, ecx
movss dword [rsp + 0x30], xmm15
mov r9d, edi
mov dword [rsp + 0x28], ecx
mov r8, rbx
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
mov rdx, rax
call fcn.1400265b0
mov edx, reloc.WS2_32.dll_ntohl
mov dword [rsp + 0x20], 0xff
mov r8d, edx
lea rcx, [rbp + 0x12a0]
lea r9d, [rdx + 1]
call fcn.1400016c0
mov rcx, rax
call fcn.140033c80
lea rcx, [0x140258f40]
mov esi, eax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xee8]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea rdx, [rbp + 0x108]
mov r8, rax
movsd qword [rbp + 0x108], xmm0
lea rcx, [rbp + 0xef0]
call fcn.140048920
movss xmm1, dword [0x14015da8c]
lea rcx, [rbp + 0xef8]
movaps xmm2, xmm1
movss xmm8, dword [rax]
movss xmm9, dword [rax + 4]
call fcn.140001680
movss xmm6, dword [rax]
movss xmm7, dword [rax + 4]
call fcn.140013570
mov ebx, dword [rax + 0x20]
call fcn.140013570
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], edi
unpcklps xmm6, xmm7
mov r8d, ebx
unpcklps xmm8, xmm9
movq r9, xmm6
mov edx, r14d
movsd qword [rsp + 0x20], xmm8
mov rcx, rax
call fcn.140029c80
lea rcx, [0x1402590b0]
call fcn.140004590
mov edx, eax
xor ecx, ecx
call fcn.1400045d0
movss xmm2, dword [0x14015da4c]
lea rcx, [rbp + 0xf00]
movaps xmm1, xmm11
call fcn.140001680
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xf08]
movaps xmm2, xmm11
mov rsi, rax
call fcn.140001680
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xf10]
movaps xmm1, xmm10
mov rdi, rax
call fcn.140001680
lea r8, [rsp + 0x70]
mov rbx, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xf18]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xf20]
mov rdx, rax
call fcn.140048920
mov r8, rdi
lea rcx, [rbp + 0xf28]
mov rdx, rax
call fcn.140048920
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xf30]
movss xmm1, dword [rsp + 0x70]
mov rbx, rax
subss xmm2, dword [0x14015db7c]
addss xmm1, xmm10
call fcn.140001680
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xf38]
call fcn.140048920
xor ecx, ecx
lea r8, str.Status:
mov qword [rsp + 0x30], rcx
xor r9d, r9d
mov qword [rsp + 0x28], rsi
mov rdx, rbx
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140005540
movss xmm2, dword [0x14015da58]
lea rcx, [rbp + 0xf40]
movaps xmm1, xmm11
call fcn.140001680
lea rcx, [0x140257330]
mov rsi, rax
call fcn.1400441b0
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xf48]
movaps xmm2, xmm11
mov r14, rax
call fcn.140001680
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0xf50]
movaps xmm1, xmm10
mov rdi, rax
call fcn.140001680
mov rbx, rax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x11d8]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0x1178]
mov rdx, rax
call fcn.140048920
mov r8, rdi
lea rcx, [rbp + 0x1170]
mov rdx, rax
call fcn.140048920
movss xmm2, dword [0x140257024]
lea rcx, [rbp + 0x1168]
movss xmm1, dword [rsp + 0x70]
mov rbx, rax
subss xmm2, dword [0x14015db7c]
addss xmm1, xmm10
call fcn.140001680
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xfe0]
call fcn.140048920
xor ecx, ecx
xor r9d, r9d
mov qword [rsp + 0x30], rcx
mov r8, r14
mov qword [rsp + 0x28], rsi
mov rdx, rbx
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140005540
call fcn.140008290
movss xmm0, dword [0x140258b5c]
addss xmm0, dword [rax + 0x10]
movss dword [0x140258b5c], xmm0
addss xmm0, xmm0
call fcn.140048960
call fcn.140048950
xor r9d, r9d
movss dword [rsp + 0x20], xmm14
xor r8d, r8d
lea rdx, str.SAKIB_CHEAT
lea rcx, [rbp + 0xfd8]
movaps xmm6, xmm0
call fcn.14000b910
call fcn.140013150
movss xmm9, dword [0x14015da8c]
lea rcx, [rbp + 0x12b0]
movaps xmm3, xmm9
movss dword [rsp + 0x20], xmm6
movaps xmm2, xmm9
movaps xmm1, xmm9
call fcn.140001690
mov rcx, rax
call fcn.140004590
mov rcx, qword [0x1402581b8]
mov ebx, eax
call fcn.140012e10
mov edx, ebx
xor ecx, ecx
call fcn.1400045d0
movss xmm7, dword [0x14015db24]
lea rcx, [rbp + 0xfd0]
movss xmm1, dword [0x14015dbc8]
movaps xmm2, xmm7
call fcn.140001680
mov r9b, 1
lea rdx, str.SAKIB_CHEAT
xor r8d, r8d
mov rcx, qword [rax]
call fcn.140004a70
mov ecx, 1
call fcn.1400046a0
call fcn.140012eb0
mov edx, 0xff645d5a
xor ecx, ecx
call fcn.1400045d0
movaps xmm2, xmm13
lea rcx, [rbp + 0xfc8]
movaps xmm1, xmm9
call fcn.140001680
movss xmm1, dword [rsp + 0x70]
mov rsi, rax
movss xmm6, dword [0x14015dc28]
lea rcx, [rbp + 0xfc0]
mulss xmm1, xmm13
movaps xmm2, xmm6
addss xmm1, dword [0x1402581cc]
addss xmm1, dword [0x14015db78]
call fcn.140001680
movss xmm2, dword [0x14015db6c]
lea rcx, [rbp + 0x1140]
movaps xmm1, xmm10
mov rdi, rax
call fcn.140001680
lea r8, [rsp + 0x70]
mov rbx, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xfe8]
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0xff0]
mov rdx, rax
call fcn.140048920
mov r8, rdi
lea rcx, [rbp + 0xff8]
mov rdx, rax
call fcn.140048920
movss xmm1, dword [0x14015db3c]
lea rcx, [rbp + 0x1000]
movaps xmm2, xmm7
mov rbx, rax
call fcn.140001680
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x1008]
call fcn.140048920
mov rdx, rax
lea r8, [rsp + 0x70]
lea rcx, [rbp + 0x1010]
call fcn.140048920
xor r14d, r14d
lea r8, str.Dev_By_sakib022
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov qword [rsp + 0x28], rsi
mov rdx, rbx
mov rcx, rax
mov qword [rsp + 0x20], r14
call fcn.140005540
lea ecx, [r14 + 1]
call fcn.1400046a0
movaps xmm2, xmm15
lea rcx, [rbp + 0x1018]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1020]
addss xmm1, dword [0x14015dbe0]
movaps xmm2, xmm6
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0x1028]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x1030]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm10
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, [0x14015bff0]
lea rcx, [0x14014e88a]
call fcn.14000c560
mov rcx, qword [0x1402581b0]
call fcn.140012e10
lea rax, str.Bluestacks_4
mov dword [rsp + 0x20], 8
mov qword [rbp + 0x650], rax
lea r9d, [r14 + 8]
lea rax, str.Bluestacks_5
mov qword [rbp + 0x658], rax
lea r8, [rbp + 0x650]
lea rax, str.MSI_App_Player
mov qword [rbp + 0x660], rax
lea rdx, [0x140258e80]
lea rax, str.LD_Player
mov qword [rbp + 0x668], rax
lea rcx, str.Emulator_Select
lea rax, str.Smart_Gaga
mov qword [rbp + 0x670], rax
lea rax, str.Game_Loop
mov qword [rbp + 0x678], rax
lea rax, str.Nox_Player
mov qword [rbp + 0x680], rax
lea rax, str.MEmu_Play
mov qword [rbp + 0x688], rax
call fcn.140039c80
call fcn.140012eb0
call fcn.14000c680
lea ecx, [r14 + 1]
call fcn.1400046a0
call fcn.140013570
lea rcx, [rbp + 0x118]
mov rdi, rax
call fcn.140013170
lea rcx, [rbp + 0x1038]
call fcn.140013320
lea rcx, [rbp + 0x1040]
mov rbx, rax
call fcn.140013170
mov r8, rbx
lea rcx, [rbp + 0x110]
mov rdx, rax
call fcn.140048920
lea rcx, [0x1402590c0]
call fcn.140004590
movss xmm0, dword [0x14015dacc]
lea r8, [rbp + 0x110]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0x118]
movss xmm0, dword [0x14015db04]
mov r9d, eax
mov dword [rsp + 0x28], 0xf0
mov rcx, rdi
movss dword [rsp + 0x20], xmm0
call fcn.1400265b0
call fcn.1400084d0
lea rcx, [0x140259010]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1048]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0x120]
lea rdx, [rsp + 0x68]
movsd qword [rbp + 0x120], xmm0
lea rcx, [rbp + 0x1050]
mov rbx, rax
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0x1058]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x28], r14d
mov r9d, edi
mov r8, rax
movss dword [rsp + 0x20], xmm0
mov rcx, rsi
call fcn.1400266c0
call fcn.1400084d0
lea rcx, [0x140258f80]
mov rsi, rax
call fcn.140004590
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1060]
movaps xmm2, xmm11
mov edi, eax
call fcn.140001680
movsd xmm0, qword [0x140257020]
lea r8, [rbp + 0x128]
lea rdx, [rsp + 0x68]
movsd qword [rbp + 0x128], xmm0
lea rcx, [rbp + 0x1068]
mov rbx, rax
call fcn.140048920
mov r8, rbx
lea rcx, [rbp + 0x1070]
mov rdx, rax
call fcn.140048920
movss xmm0, dword [0x14015db08]
lea rdx, [rsp + 0x68]
movss dword [rsp + 0x30], xmm9
mov r9d, edi
mov dword [rsp + 0x28], r14d
mov r8, rax
mov rcx, rsi
movss dword [rsp + 0x20], xmm0
call fcn.1400265b0
movss xmm2, dword [rsp + 0x74]
lea rax, [0x1401503d4]
movss xmm1, dword [rsp + 0x70]
lea rsi, [0x1401503cc]
addss xmm1, dword [0x14015db20]
mov qword [rbp + 0x1b0], rax
lea rcx, [rbp + 0x1078]
mulss xmm2, xmm15
lea rax, [0x1401503d0]
mov qword [rbp + 0x1b8], rax
lea rax, [0x1401503c4]
mov qword [rbp + 0x1c0], rax
lea rax, [0x1401503c8]
mov qword [rbp + 0x1c8], rax
lea rax, str.Aimbot
mov qword [rbp + 0x1d8], rax
addss xmm2, xmm10
lea rax, str.Visuals
mov qword [rbp + 0x1d0], rsi
mov qword [rbp + 0x1e0], rax
lea rax, str.Plugins
mov qword [rbp + 0x1e8], rax
lea rax, str.Protect
mov qword [rbp + 0x1f0], rax
lea rax, str.Extra
addss xmm2, dword [0x14015db28]
mov qword [rbp + 0x1f8], rax
lea rax, str.Target__assist
mov qword [rbp + 0x48], rax
lea rax, str.Location__view
mov qword [rbp + 0x50], rax
lea rax, str.Advanced__misc
mov qword [rbp + 0x58], rax
lea rax, str.Bypass__undetected
mov qword [rbp + 0x60], rax
lea rax, str.Other_Vip_Cheats
mov qword [rbp + 0x68], rax
call fcn.140001680
mov rcx, rax
call fcn.140017310
call fcn.140017650
mov ebx, r14d
mov edi, r14d
nop dword [rax]
movss xmm0, dword [0x1402581cc]
lea rax, [rbp - 0x50]
addss xmm0, dword [0x14015db44]
cmp ebx, dword [0x140258b50]
mov r9, qword [rbp + rdi + 0x48]
mov r8, qword [rbp + rdi + 0x1d8]
sete cl
mov rdx, qword [rbp + rdi + 0x1b0]
movss dword [rbp - 0x50], xmm0
mov dword [rbp - 0x4c], 0x420c0000
mov qword [rsp + 0x20], rax
call fcn.140035700
test al, al
je 0x14004dc82
mov dword [0x140258b50], ebx
inc ebx
add rdi, 8
cmp ebx, 5
jb 0x14004dc30
call fcn.1400177a0
movss xmm0, dword [rsp + 0x70]
lea rcx, [rbp - 0x48]
movss xmm1, dword [rsp + 0x74]
addss xmm0, dword [0x14015daf8]
addss xmm1, dword [0x14015dafc]
movss dword [rbp - 0x48], xmm0
movss dword [rbp - 0x44], xmm1
call fcn.140017310
mov rdx, qword [0x140258110]
mov rax, qword [rdx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3ef8]
movss xmm1, dword [0x140258f04]
movss xmm0, dword [0x140258f00]
movss dword [rbp + 0x84], xmm1
mov rcx, qword [rax + 0x298]
movss xmm1, dword [0x140258f0c]
mulss xmm1, dword [rdx + 0x37d0]
mov eax, dword [rcx + 0x20]
lea rcx, [rbp + 0x80]
movss dword [rbp + 0x80], xmm0
movss xmm0, dword [0x140258f08]
movss dword [rbp + 0x88], xmm0
movss dword [rbp + 0x8c], xmm1
mov dword [0x140258200], eax
call fcn.140003e50
mov rdx, qword [0x1402581a8]
lea r9, [rbp - 0x38]
mov dword [rsp + 0x28], eax
lea r8, [rbp - 0x30]
lea rax, [rbp - 0x40]
mov dword [rbp - 0x40], 0x3f800000
mov ecx, 1
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x3c], 0x3f800000
mov qword [rbp - 0x38], r14
mov dword [rbp - 0x30], 0x420c0000
mov dword [rbp - 0x2c], 0x420c0000
call fcn.140037400
test al, al
je 0x14004dd99
cmp byte [reloc.WS2_32.dll_accept], r14b
sete byte [0x140175110]
lea rcx, [rbp + 0x1080]
call fcn.14004b2a0
movss xmm0, dword [0x1402581c8]
mulss xmm0, dword [0x14015daa0]
movss xmm2, dword [rax + 4]
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.14004b400
call fcn.1400084d0
movss xmm1, dword [0x140259024]
mov rbx, rax
mov rcx, qword [0x140258110]
movss xmm0, dword [0x140259020]
movss dword [rbp + 0x74], xmm1
movss xmm1, dword [0x14025902c]
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x70]
movss dword [rbp + 0x70], xmm0
movss xmm0, dword [0x140259028]
movss dword [rbp + 0x7c], xmm1
movss dword [rbp + 0x78], xmm0
call fcn.140003e50
movss xmm4, dword [rsp + 0x74]
lea r8, [rbp - 0x28]
movss xmm6, dword [rsp + 0x68]
lea rdx, [rbp - 0x20]
movss xmm2, dword [0x140257024]
movaps xmm0, xmm6
addss xmm0, dword [rsp + 0x70]
subss xmm2, xmm10
mov dword [rsp + 0x28], r14d
movaps xmm1, xmm4
addss xmm6, xmm11
addss xmm1, dword [rsp + 0x6c]
mov r9d, eax
mov rcx, rbx
addss xmm0, xmm10
addss xmm6, dword [rsp + 0x70]
addss xmm0, dword [0x1402581cc]
movss dword [rbp - 0x20], xmm6
movss dword [rbp - 0x28], xmm0
movaps xmm0, xmm4
mulss xmm0, dword [0x14015daac]
subss xmm2, xmm0
movaps xmm0, xmm4
subss xmm0, xmm7
addss xmm2, xmm1
addss xmm0, dword [rsp + 0x6c]
addss xmm2, xmm11
addss xmm0, xmm4
movss dword [rbp - 0x24], xmm2
movss dword [rbp - 0x1c], xmm0
movss xmm0, dword [0x14015dad4]
movss dword [rsp + 0x20], xmm0
call fcn.1400266c0
call fcn.1400084d0
movss xmm1, dword [0x140258f94]
mov rbx, rax
mov rcx, qword [0x140258110]
movss xmm0, dword [0x140258f90]
movss dword [rbp + 0xb4], xmm1
movss xmm1, dword [0x140258f9c]
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0xb0]
movss dword [rbp + 0xb0], xmm0
movss xmm0, dword [0x140258f98]
movss dword [rbp + 0xbc], xmm1
movss dword [rbp + 0xb8], xmm0
call fcn.140003e50
movss xmm6, dword [rsp + 0x68]
movss xmm4, dword [rsp + 0x74]
movaps xmm0, xmm6
addss xmm0, dword [rsp + 0x70]
movss xmm2, dword [0x140257024]
subss xmm2, xmm10
addss xmm0, xmm10
addss xmm0, dword [0x1402581cc]
movss dword [rbp - 0x18], xmm0
movaps xmm0, xmm4
mulss xmm0, dword [0x14015daac]
subss xmm2, xmm0
movss dword [rsp + 0x30], xmm9
movaps xmm0, xmm4
mov dword [rsp + 0x28], r14d
subss xmm0, xmm7
movaps xmm1, xmm4
addss xmm1, dword [rsp + 0x6c]
addss xmm6, xmm11
mov r9d, eax
lea r8, [rbp - 0x18]
mov rcx, rbx
lea rdx, [rbp - 0x10]
addss xmm0, dword [rsp + 0x6c]
addss xmm2, xmm1
addss xmm6, dword [rsp + 0x70]
addss xmm0, xmm4
addss xmm2, xmm11
movss dword [rbp - 0x10], xmm6
movss dword [rbp - 0xc], xmm0
movss xmm0, dword [0x14015dad4]
movss dword [rsp + 0x20], xmm0
movss dword [rbp - 0x14], xmm2
call fcn.1400265b0
call fcn.1400084d0
movss xmm1, dword [0x140259024]
mov rbx, rax
mov rcx, qword [0x140258110]
movss xmm0, dword [0x140259020]
movss dword [rbp + 0xa4], xmm1
movss xmm1, dword [0x14025902c]
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0xa0]
movss dword [rbp + 0xa0], xmm0
movss xmm0, dword [0x140259028]
movss dword [rbp + 0xac], xmm1
movss dword [rbp + 0xa8], xmm0
call fcn.140003e50
movss xmm7, dword [rsp + 0x74]
lea r8, [rbp - 8]
movss xmm4, dword [rsp + 0x68]
lea rdx, [rbp]
movss xmm5, dword [0x140257024]
movaps xmm0, xmm4
addss xmm0, dword [rsp + 0x70]
movaps xmm1, xmm5
mov dword [rsp + 0x28], r14d
subss xmm5, xmm10
movaps xmm6, xmm7
mulss xmm6, xmm15
addss xmm4, xmm11
mov r9d, eax
mov rcx, rbx
addss xmm0, xmm10
subss xmm1, xmm6
addss xmm4, dword [rsp + 0x70]
subss xmm5, xmm6
addss xmm0, dword [0x1402581cc]
movss dword [rbp], xmm4
addss xmm5, dword [rsp + 0x6c]
movss dword [rbp - 8], xmm0
movaps xmm0, xmm7
addss xmm0, dword [rsp + 0x6c]
addss xmm5, xmm7
addss xmm1, xmm0
movss xmm0, dword [0x14015dad4]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 4], xmm5
addss xmm1, xmm11
movss dword [rbp - 4], xmm1
call fcn.1400266c0
call fcn.1400084d0
movss xmm0, dword [0x140258f90]
mov rbx, rax
movss xmm1, dword [0x140258f94]
mov rcx, qword [0x140258110]
movss dword [rbp + 0x94], xmm1
movss xmm1, dword [0x140258f9c]
movss dword [rbp + 0x90], xmm0
movss xmm0, dword [0x140258f98]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x98], xmm0
lea rcx, [rbp + 0x90]
movss dword [rbp + 0x9c], xmm1
call fcn.140003e50
movss xmm7, dword [rsp + 0x74]
lea r8, [rbp + 8]
movss xmm4, dword [rsp + 0x68]
lea rdx, [rbp + 0x10]
movss xmm5, dword [0x140257024]
movaps xmm0, xmm4
addss xmm0, dword [rsp + 0x70]
movaps xmm1, xmm5
movss dword [rsp + 0x30], xmm9
subss xmm5, xmm10
mov dword [rsp + 0x28], r14d
movaps xmm6, xmm7
addss xmm4, xmm11
mulss xmm6, xmm15
mov r9d, eax
mov rcx, rbx
addss xmm0, xmm10
addss xmm4, dword [rsp + 0x70]
subss xmm1, xmm6
subss xmm5, xmm6
addss xmm0, dword [0x1402581cc]
movss dword [rbp + 0x10], xmm4
addss xmm5, dword [rsp + 0x6c]
movss dword [rbp + 8], xmm0
movaps xmm0, xmm7
addss xmm0, dword [rsp + 0x6c]
addss xmm5, xmm7
addss xmm1, xmm0
movss xmm0, dword [0x14015dad4]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x14], xmm5
addss xmm1, xmm11
movss dword [rbp + 0xc], xmm1
call fcn.1400265b0
mov rcx, qword [0x140258110]
mov edx, 0xff
mov r9d, edx
mov dword [rsp + 0x20], 0xff
mov r8d, edx
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
lea rcx, [rbp + 0x1260]
mov rbx, qword [rax + 0x298]
call fcn.1400016c0
mov rcx, rax
call fcn.140003e50
movss xmm8, dword [0x14015db10]
movss xmm7, dword [rsp + 0x74]
movss xmm4, dword [rsp + 0x68]
movaps xmm6, xmm7
movss xmm5, dword [0x140257024]
movaps xmm0, xmm4
addss xmm0, dword [rsp + 0x70]
movaps xmm1, xmm5
mulss xmm6, xmm15
mov dword [rbp + 0x18], 0x3f800000
subss xmm5, xmm10
mov dword [rbp + 0x1c], 0x3f800000
addss xmm4, xmm11
mov qword [rbp + 0x20], r14
addss xmm0, xmm10
subss xmm1, xmm6
subss xmm5, xmm6
addss xmm4, dword [rsp + 0x70]
subss xmm0, xmm8
addss xmm5, dword [rsp + 0x6c]
addss xmm4, xmm8
movss dword [rbp + 0x28], xmm0
movaps xmm0, xmm7
addss xmm0, dword [rsp + 0x6c]
addss xmm5, xmm7
movss dword [rbp + 0x30], xmm4
addss xmm1, xmm0
addss xmm5, xmm8
subss xmm1, xmm8
movss dword [rbp + 0x34], xmm5
movss dword [rbp + 0x2c], xmm1
mov rdx, qword [0x140258198]
lea r9, [rbp + 0x28]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x30]
lea rax, [rbp + 0x18]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
call fcn.140026ca0
mov ecx, dword [0x140258820]
mov ebx, dword [0x140258b50]
cmp ebx, ecx
jne 0x14004e314
movaps xmm6, xmm9
jmp 0x14004e318
movaps xmm6, xmm14
mov rax, qword [0x140258110]
test rax, rax
jne 0x14004e351
mov r8d, 0x1033
lea rdx, str.C:UsersSakibDocumentsSAKIB_CHEAT_PREMIUMSAKIB_CHEAT_PREMIUMimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [0x140258820]
mov rax, qword [0x140258110]
mov ebx, dword [0x140258b50]
movss xmm8, dword [rax + 0x18]
movaps xmm0, xmm8
mulss xmm0, xmm12
mulss xmm0, xmm6
addss xmm0, dword [0x140258b58]
comiss xmm11, xmm0
jbe 0x14004e378
movaps xmm6, xmm11
jmp 0x14004e380
movaps xmm6, xmm9
minss xmm6, xmm0
movss dword [0x140258b58], xmm6
cmp ebx, ecx
jne 0x14004e392
movaps xmm7, xmm9
jmp 0x14004e396
movaps xmm7, xmm14
movss xmm0, dword [0x14015dbd8]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x14025980c]
comiss xmm11, xmm0
jbe 0x14004e3c0
movaps xmm1, xmm11
jmp 0x14004e3c8
movaps xmm1, xmm9
minss xmm1, xmm0
ucomiss xmm6, xmm11
movss dword [0x14025980c], xmm1
jp 0x14004e3e6
jne 0x14004e3e6
ucomiss xmm1, xmm11
jp 0x14004e3e6
jne 0x14004e3e6
mov dword [0x140258820], ebx
mulss xmm6, dword [r15]
xor ecx, ecx
movaps xmm1, xmm6
call fcn.140004770
mov eax, dword [0x140258b50]
test eax, eax
jne 0x14004ed00
movaps xmm2, xmm15
lea rcx, [rbp + 0x1088]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1090]
addss xmm1, xmm10
movaps xmm2, xmm10
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0x1098]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x10a0]
movss xmm0, dword [r12]
subss xmm1, xmm10
movss xmm6, dword [0x14015dba0]
mulss xmm0, xmm12
movaps xmm2, xmm6
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
lea rdi, [0x1401503c4]
mov dword [rsp + 0x20], r14d
mov rcx, rdi
lea rdx, str.AIMBOT
mov r8, rax
xor r9d, r9d
call fcn.14000c560
mov r8b, 1
lea rdx, [0x140259808]
lea rcx, str.Aimbot_Ingame_V5
call fcn.140033cb0
mov ecx, dword [0x140259808]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004e540
cmp dword [0x140259808], r14d
je 0x14004e540
cmp byte [0x1402581f3], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
sete al
mov byte [0x1402581f3], al
test al, al
je 0x14004e51c
lea rcx, [rbp + 0x470]
call fcn.1400541a0
lea rcx, [rbp + 0x470]
call fcn.140048a70
lea rcx, [rbp + 0x470]
jmp 0x14004e53b
lea rcx, [rbp + 0x480]
call fcn.1400541a0
lea rcx, [rbp + 0x480]
call fcn.140048a70
lea rcx, [rbp + 0x480]
call fcn.140048a50
mov r8b, 1
lea rdx, [0x140259800]
lea rcx, str.Aimbot_Ingame_V6
call fcn.140033cb0
mov ecx, dword [0x140259800]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004e5d2
cmp dword [0x140259800], r14d
je 0x14004e5d2
cmp byte [0x1402581f3], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
sete al
mov byte [0x1402581f3], al
test al, al
je 0x14004e5ae
lea rcx, [rbp + 0x490]
call fcn.140054210
lea rcx, [rbp + 0x490]
call fcn.140048a70
lea rcx, [rbp + 0x490]
jmp 0x14004e5cd
lea rcx, [rbp + 0x4a0]
call fcn.140054210
lea rcx, [rbp + 0x4a0]
call fcn.140048a70
lea rcx, [rbp + 0x4a0]
call fcn.140048a50
mov r8b, 1
lea rdx, [0x140259810]
lea rcx, str.Aimbot_Ingame_V7
call fcn.140033cb0
mov ecx, dword [0x140259810]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004e664
cmp dword [0x140259810], r14d
je 0x14004e664
cmp byte [0x1402581f3], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
sete al
mov byte [0x1402581f3], al
test al, al
je 0x14004e640
lea rcx, [rbp + 0x4b0]
call fcn.140054280
lea rcx, [rbp + 0x4b0]
call fcn.140048a70
lea rcx, [rbp + 0x4b0]
jmp 0x14004e65f
lea rcx, [rbp + 0x200]
call fcn.140054280
lea rcx, [rbp + 0x200]
call fcn.140048a70
lea rcx, [rbp + 0x200]
call fcn.140048a50
mov r8b, 1
lea rdx, [0x140259804]
lea rcx, str.Aimbot_Drag_Ingame
call fcn.140033cb0
mov ecx, dword [0x140259800]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004e6f6
cmp dword [0x140259804], r14d
je 0x14004e6f6
cmp byte [0x1402581fa], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
sete al
mov byte [0x1402581fa], al
test al, al
je 0x14004e6d2
lea rcx, [rbp + 0x210]
call fcn.1400542f0
lea rcx, [rbp + 0x210]
call fcn.140048a70
lea rcx, [rbp + 0x210]
jmp 0x14004e6f1
lea rcx, [rbp + 0x220]
call fcn.1400542f0
lea rcx, [rbp + 0x220]
call fcn.140048a70
lea rcx, [rbp + 0x220]
call fcn.140048a50
call fcn.14000c680
movaps xmm2, xmm15
lea rcx, [rbp + 0x10a8]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x10b0]
movss xmm7, dword [0x14015dbcc]
addss xmm1, xmm10
movaps xmm2, xmm7
mov rbx, rax
call fcn.140001680
movss xmm1, dword [rbx + 4]
lea rcx, [rbp + 0x38]
movss xmm0, dword [rbx]
addss xmm1, dword [rax + 4]
addss xmm0, dword [rax]
movss dword [rbp + 0x3c], xmm1
movss dword [rbp + 0x38], xmm0
call fcn.140017310
movss xmm1, dword [0x140257020]
lea r8, [rbp + 0x40]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
lea rdx, str.AIM_SCOPE
xor r9d, r9d
mov dword [rbp + 0x44], 0x433e0000
mov rcx, rsi
mov dword [rsp + 0x20], r14d
subss xmm1, xmm0
mulss xmm1, xmm13
movss dword [rbp + 0x40], xmm1
call fcn.14000c560
lea rdx, [0x1402581ee]
lea rcx, str.Aim_Scope_2X
call fcn.140037610
mov byte [0x140258182], al
test al, al
je 0x14004e817
cmp byte [0x1402581ee], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004e7f3
lea rcx, [rbp + 0x230]
call fcn.140054360
lea rcx, [rbp + 0x230]
call fcn.140048a70
lea rcx, [rbp + 0x230]
jmp 0x14004e812
lea rcx, [rbp + 0x240]
call fcn.140054360
lea rcx, [rbp + 0x240]
call fcn.140048a70
lea rcx, [rbp + 0x240]
call fcn.140048a50
lea rdx, [0x1402581ee]
lea rcx, str.Aim_Scope_4X
call fcn.140037610
mov byte [0x14025813e], al
test al, al
je 0x14004e88c
cmp byte [0x1402581ee], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004e868
lea rcx, [rbp + 0x250]
call fcn.140054360
lea rcx, [rbp + 0x250]
call fcn.140048a70
lea rcx, [rbp + 0x250]
jmp 0x14004e887
lea rcx, [rbp + 0x260]
call fcn.140054360
lea rcx, [rbp + 0x260]
call fcn.140048a70
lea rcx, [rbp + 0x260]
call fcn.140048a50
lea rdx, [0x1402581ee]
lea rcx, str.Jump_Aimbot
call fcn.140037610
mov byte [0x14025813d], al
test al, al
je 0x14004e901
cmp byte [0x1402581ee], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004e8dd
lea rcx, [rbp + 0x270]
call fcn.140054360
lea rcx, [rbp + 0x270]
call fcn.140048a70
lea rcx, [rbp + 0x270]
jmp 0x14004e8fc
lea rcx, [rbp + 0x280]
call fcn.140054360
lea rcx, [rbp + 0x280]
call fcn.140048a70
lea rcx, [rbp + 0x280]
call fcn.140048a50
lea rdx, [0x1402581ee]
lea rcx, str.Scope_Tracking
call fcn.140037610
mov byte [0x14025813c], al
test al, al
je 0x14004e976
cmp byte [0x1402581ee], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004e952
lea rcx, [rbp + 0x290]
call fcn.140054360
lea rcx, [rbp + 0x290]
call fcn.140048a70
lea rcx, [rbp + 0x290]
jmp 0x14004e971
lea rcx, [rbp + 0x2a0]
call fcn.140054360
lea rcx, [rbp + 0x2a0]
call fcn.140048a70
lea rcx, [rbp + 0x2a0]
call fcn.140048a50
call fcn.14000c680
call fcn.1400177a0
movaps xmm1, xmm14
movaps xmm0, xmm11
call fcn.140017260
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x10b8]
movss xmm0, dword [r12]
subss xmm1, xmm10
movss xmm2, dword [0x14015db90]
mulss xmm0, xmm12
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.AIM_SNIPER
mov rcx, rsi
call fcn.14000c560
lea rdx, [0x1402581f0]
lea rcx, str.Aim_All_Sniper__New_
call fcn.140037610
mov byte [0x14025813f], al
test al, al
je 0x14004ea56
cmp byte [0x1402581f0], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004ea32
lea rcx, [rbp + 0x2b0]
call fcn.1400543d0
lea rcx, [rbp + 0x2b0]
call fcn.140048a70
lea rcx, [rbp + 0x2b0]
jmp 0x14004ea51
lea rcx, [rbp + 0x2c0]
call fcn.1400543d0
lea rcx, [rbp + 0x2c0]
call fcn.140048a70
lea rcx, [rbp + 0x2c0]
call fcn.140048a50
lea rdx, [0x1402581f1]
lea rcx, str.Quick_Change_Switch__New_
call fcn.140037610
mov byte [0x140258180], al
test al, al
je 0x14004eacb
cmp byte [0x1402581f1], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004eaa7
lea rcx, [rbp + 0x2d0]
call fcn.140054440
lea rcx, [rbp + 0x2d0]
call fcn.140048a70
lea rcx, [rbp + 0x2d0]
jmp 0x14004eac6
lea rcx, [rbp + 0x2e0]
call fcn.140054440
lea rcx, [rbp + 0x2e0]
call fcn.140048a70
lea rcx, [rbp + 0x2e0]
call fcn.140048a50
lea rdx, [0x1402581fd]
lea rcx, str.Sniper_Scope__New_
call fcn.140037610
mov byte [0x140258206], al
test al, al
je 0x14004eb40
cmp byte [0x1402581fd], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004eb1c
lea rcx, [rbp + 0x2f0]
call fcn.1400544b0
lea rcx, [rbp + 0x2f0]
call fcn.140048a70
lea rcx, [rbp + 0x2f0]
jmp 0x14004eb3b
lea rcx, [rbp + 0x300]
call fcn.1400544b0
lea rcx, [rbp + 0x300]
call fcn.140048a70
lea rcx, [rbp + 0x300]
call fcn.140048a50
call fcn.14000c680
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x10c0]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm6
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.AIM_RAGE
mov rcx, rdi
call fcn.14000c560
lea rdx, [0x1402581f2]
lea rcx, str.Aim_Fov__Full_
call fcn.140037610
mov byte [0x140258181], al
test al, al
je 0x14004ec04
cmp byte [0x1402581f2], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004ebe0
lea rcx, [rbp + 0x310]
call fcn.140054520
lea rcx, [rbp + 0x310]
call fcn.140048a70
lea rcx, [rbp + 0x310]
jmp 0x14004ebff
lea rcx, [rbp + 0x320]
call fcn.140054520
lea rcx, [rbp + 0x320]
call fcn.140048a70
lea rcx, [rbp + 0x320]
call fcn.140048a50
lea rdx, [0x1402581f2]
lea rcx, str.Aim_Fov__Right_and_left_
call fcn.140037610
mov byte [0x140258181], al
test al, al
je 0x14004ec79
cmp byte [0x1402581f2], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004ec55
lea rcx, [rbp + 0x330]
call fcn.140054520
lea rcx, [rbp + 0x330]
call fcn.140048a70
lea rcx, [rbp + 0x330]
jmp 0x14004ec74
lea rcx, [rbp + 0x340]
call fcn.140054520
lea rcx, [rbp + 0x340]
call fcn.140048a70
lea rcx, [rbp + 0x340]
call fcn.140048a50
lea rdx, [0x1402581f2]
lea rcx, str.Aim_Fov__Up_and_down_
call fcn.140037610
mov byte [0x140258181], al
test al, al
je 0x14004ecee
cmp byte [0x1402581f2], r14b
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], r14b
je 0x14004ecca
lea rcx, [rbp + 0x350]
call fcn.140054520
lea rcx, [rbp + 0x350]
call fcn.140048a70
lea rcx, [rbp + 0x350]
jmp 0x14004ece9
lea rcx, [rbp + 0x360]
call fcn.140054520
lea rcx, [rbp + 0x360]
call fcn.140048a70
lea rcx, [rbp + 0x360]
call fcn.140048a50
call fcn.14000c680
call fcn.1400177a0
mov eax, dword [0x140258b50]
jmp 0x14004ed17
movss xmm6, dword [0x14015dba0]
lea rdi, [0x1401503c4]
movss xmm7, dword [0x14015dbcc]
cmp eax, 1
jne 0x14004f945
movaps xmm2, xmm15
lea rcx, [rbp + 0x10c8]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x10d0]
addss xmm1, xmm10
movaps xmm2, xmm10
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0x10d8]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x10e0]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm6
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.ESP_PLAYER
mov rcx, rdi
call fcn.14000c560
lea rdx, [0x1402581f5]
lea rcx, str.Vip_Chams_Menu
call fcn.140037610
mov byte [0x140258184], al
test al, al
je 0x14004efdb
cmp byte [0x1402581f5], r14b
je 0x14004efdb
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14004eef1
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32D3D11_Overlay_ImGui.dll
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x14004eec3
lea r8, str.https:__drive.usercontent.google.com_download_id1IQHfCzX7pbgE1jJoUqcHYlAS8TAlcu3vexportdownloadauthuser0
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14004eeac
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
xor r14d, r14d
call qword [0x14015e038]
jmp 0x14004ef14
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004ef14
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x14004efdb
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14004efdb
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, Ordinal_45
mov qword [rsp + 0x20], r14
mov rdx, rax
lea r8, str.C:WindowsSystem32D3D11_Overlay_ImGui.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r14
xor edx, edx
mov dword [rsp + 0x28], r14d
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x14004efbb
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Vip_Champs_Menu_Opened
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, [0x1402581f7]
lea rcx, str.Vip_Chams_2.0
call fcn.140037610
mov byte [0x140258186], al
test al, al
je 0x14004f1fa
cmp byte [0x1402581f7], 0
je 0x14004f1fa
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14004f10d
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32ChamsMenu2.0.dll
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x14004f0df
lea r8, str.https:__drive.usercontent.google.com_download_id1BudRSU3gFoTwp9eJFu7kIx6I2empr7QEexportdownloadauthuser0
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14004f0cb
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f130
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f130
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x14004f1fa
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14004f1fa
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
xor r15d, r15d
lea r8, str.C:WindowsSystem32ChamsMenu2.0.dll
mov rdx, rax
mov qword [rsp + 0x20], r15
mov rcx, rdi
mov rbx, rax
lea r9d, [r15 + 0x25]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r15
xor edx, edx
mov dword [rsp + 0x28], r15d
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x14004f1d8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Vip_Champs_Menu_Opened
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x14004f1fd
xor r15d, r15d
lea rdx, [0x1402581fe]
lea rcx, str.RGB_Champs
call fcn.140037610
mov byte [0x140258207], al
test al, al
je 0x14004f7f6
cmp byte [0x1402581fe], 0
je 0x14004f7f6
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14004f32f
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32FX_3D_GLOW_1.dll
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x14004f301
lea r8, str.https:__cdn.discordapp.com_attachments_1230416534204186694_1230728529872945185_FX_3D_GLOW_1.dll_ex66346043is6621eb43hm03fe92bd2a6d15c258d3e30f1f3f93d885be99f3eb849049a3be785b485b3093
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14004f2ed
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f352
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f352
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14004f456
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32FX_CHAMS.dll
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x14004f428
lea r8, str.https:__cdn.discordapp.com_attachments_1230416534204186694_1230828541617377340_FX_CHAMS.dll_ex662399e8is66224868hm7df794881a07055734cb7c501a7f4f33c6b43cf020a2322db2c92226768c0b84
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14004f414
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f479
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f479
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14004f57d
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32FX_RGBBOX.dll
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x14004f54f
lea r8, str.https:__cdn.discordapp.com_attachments_1230416534204186694_1230828541168455810_FX_RGBBOX.dll_ex6634bd67is66224867hmb59009cf4ee1f4d14afe19d0ecd05872bcf52ec1d1ca37da6adfcada868632d0
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14004f53b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f5a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004f5a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
lea rcx, str.HD_Player.exe
mov ebx, eax
call fcn.14004b1f0
lea rcx, str.HD_Player.exe
mov esi, eax
call fcn.14004b1f0
mov r14d, eax
test ebx, ebx
je 0x14004f662
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14004f662
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, Ordinal_41
mov qword [rsp + 0x20], r15
mov rdx, rax
lea r8, str.C:WindowsSystem32FX_3D_GLOW_1.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r15
xor edx, edx
mov dword [rsp + 0x28], r15d
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x14004f662
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], 5
lea rcx, [rbp + 0x10e8]
call fcn.140054590
mov rcx, rax
call fcn.1400545a0
test esi, esi
je 0x14004f718
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14004f718
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, reloc.WLDAP32.dll_Ordinal_33
mov qword [rsp + 0x20], r15
mov rdx, rax
lea r8, str.C:WindowsSystem32FX_CHAMS.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r15
xor edx, edx
mov dword [rsp + 0x28], r15d
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x14004f718
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], 5
lea rcx, [rbp + 0x10f0]
call fcn.140054590
mov rcx, rax
call fcn.1400545a0
test r14d, r14d
je 0x14004f7f6
mov r8d, r14d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14004f7f6
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
xor r14d, r14d
lea r8, str.C:WindowsSystem32FX_RGBBOX.dll
mov rdx, rax
mov qword [rsp + 0x20], r14
mov rcx, rdi
mov rbx, rax
lea r9d, [r14 + 0x22]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r14
xor edx, edx
mov dword [rsp + 0x28], r14d
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x14004f7d4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.RGB_Champs_Activated
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x14004f7f9
xor r14d, r14d
call fcn.14000c680
movaps xmm2, xmm15
lea rcx, [rbp + 0x1228]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1100]
addss xmm1, xmm10
movaps xmm2, xmm7
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0x1108]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x1110]
movss xmm0, dword [r12]
subss xmm1, xmm10
movss xmm2, dword [0x14015dba8]
mulss xmm0, xmm12
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
lea r15, [0x1401503d0]
mov dword [rsp + 0x20], r14d
mov rcx, r15
lea rdx, str.VIEW
mov r8, rax
xor r9d, r9d
call fcn.14000c560
lea rdx, [0x1402581f6]
lea rcx, str.Camera_Hack
call fcn.140037610
mov byte [0x140258185], al
test al, al
je 0x14004f915
cmp byte [0x1402581f6], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x14004f8f1
lea rcx, [rbp + 0x370]
call fcn.140054680
lea rcx, [rbp + 0x370]
call fcn.140048a70
lea rcx, [rbp + 0x370]
jmp 0x14004f910
lea rcx, [rbp + 0x380]
call fcn.140054680
lea rcx, [rbp + 0x380]
call fcn.140048a70
lea rcx, [rbp + 0x380]
call fcn.140048a50
call fcn.14000c680
call fcn.1400177a0
movaps xmm1, xmm14
movaps xmm0, xmm11
call fcn.140017260
call fcn.140017650
call fcn.1400177a0
mov eax, dword [0x140258b50]
lea rsi, [0x1401503cc]
jmp 0x14004f94c
lea r15, [0x1401503d0]
cmp eax, 2
jne 0x14004fef5
movaps xmm2, xmm15
lea rcx, [rbp + 0x1118]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0x1120]
addss xmm1, xmm10
movaps xmm2, xmm10
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0x1128]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x1130]
movss xmm0, dword [r12]
subss xmm1, xmm10
movss xmm7, dword [0x14015db98]
mulss xmm0, xmm12
movaps xmm2, xmm7
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.ADVANCED
lea rcx, [0x1401503c4]
call fcn.14000c560
lea rdx, [0x140258187]
lea rcx, str.No_Recoil
call fcn.140037610
mov byte [0x140258109], al
test al, al
je 0x14004fa72
cmp byte [0x140258187], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x14004fa4e
lea rcx, [rbp + 0x390]
call fcn.1400546f0
lea rcx, [rbp + 0x390]
call fcn.140048a70
lea rcx, [rbp + 0x390]
jmp 0x14004fa6d
lea rcx, [rbp + 0x3a0]
call fcn.1400546f0
lea rcx, [rbp + 0x3a0]
call fcn.140048a70
lea rcx, [rbp + 0x3a0]
call fcn.140048a50
lea rdx, [0x1402581e9]
lea rcx, str.No_Reload
call fcn.140037610
mov byte [0x14025810b], al
test al, al
je 0x14004fae7
cmp byte [0x1402581e9], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x14004fac3
lea rcx, [rbp + 0x3b0]
call fcn.140054760
lea rcx, [rbp + 0x3b0]
call fcn.140048a70
lea rcx, [rbp + 0x3b0]
jmp 0x14004fae2
lea rcx, [rbp + 0x3c0]
call fcn.140054760
lea rcx, [rbp + 0x3c0]
call fcn.140048a70
lea rcx, [rbp + 0x3c0]
call fcn.140048a50
call fcn.14000c680
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0x1138]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm7
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.MISC
mov rcx, r15
call fcn.14000c560
lea rdx, [0x1402581ec]
lea rcx, str.Magic_Bullet_v2
call fcn.140037610
mov byte [0x14025810e], al
test al, al
je 0x14004fbab
cmp byte [0x1402581ec], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x14004fb87
lea rcx, [rbp + 0x3d0]
call fcn.1400547d0
lea rcx, [rbp + 0x3d0]
call fcn.140048a70
lea rcx, [rbp + 0x3d0]
jmp 0x14004fba6
lea rcx, [rbp + 0x3e0]
call fcn.1400547d0
lea rcx, [rbp + 0x3e0]
call fcn.140048a70
lea rcx, [rbp + 0x3e0]
call fcn.140048a50
lea rdx, [0x1402581ea]
lea rcx, str.Macro_v6__Lobby_
call fcn.140037610
mov byte [0x14025810c], al
test al, al
je 0x14004fd43
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14004fcd3
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32Microsoft121.exe
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x14004fca5
lea r8, str.https:__drive.usercontent.google.com_download_id1KTObqHP5Ygnp7Acfu4DXtxh5ruQx7QLOexportdownloadauthuser0confirmtuuid0c8d81f1_4cea_489d_a9c9_7b2ef6cff8e0atAPZUnTViZQZFdKxB2d1bH3zHP9BW_3A1715243023026
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14004fc8e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
xor r14d, r14d
call qword [0x14015e038]
jmp 0x14004fcf6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14004fcf6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x14004fd1c
lea rcx, str.C:WindowsSystem32Microsoft121.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Macro_Injected
jmp 0x14004fd23
lea rdx, [0x14015c8f0]
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rsi, [0x1401503cc]
call fcn.14000c680
call fcn.1400177a0
movaps xmm1, xmm14
movaps xmm0, xmm11
call fcn.140017260
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0xf58]
movss xmm0, dword [r12]
subss xmm1, xmm10
movss xmm2, dword [0x14015dbdc]
mulss xmm0, xmm12
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, [0x14015c8f8]
mov rcx, rsi
call fcn.14000c560
lea rdx, [0x1402581fc]
lea rcx, str.Camera_UP_Bypass___Lobby
call fcn.140037610
mov byte [0x140258205], al
test al, al
je 0x14004fe23
cmp byte [0x1402581fc], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x14004fdff
lea rcx, [rbp + 0x3f0]
call fcn.140054840
lea rcx, [rbp + 0x3f0]
call fcn.140048a70
lea rcx, [rbp + 0x3f0]
jmp 0x14004fe1e
lea rcx, [rbp + 0x400]
call fcn.140054840
lea rcx, [rbp + 0x400]
call fcn.140048a70
lea rcx, [rbp + 0x400]
call fcn.140048a50
lea rdx, [0x1402581ed]
lea rcx, str.Camera_UP___Ingame
call fcn.140037610
mov byte [0x14025810f], al
test al, al
je 0x14004fe98
cmp byte [0x1402581ed], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x14004fe74
lea rcx, [rbp + 0x410]
call fcn.1400548b0
lea rcx, [rbp + 0x410]
call fcn.140048a70
lea rcx, [rbp + 0x410]
jmp 0x14004fe93
lea rcx, [rbp + 0x420]
call fcn.1400548b0
lea rcx, [rbp + 0x420]
call fcn.140048a70
lea rcx, [rbp + 0x420]
call fcn.140048a50
mov r8b, 1
lea rdx, [0x140259190]
lea rcx, str.Hide_Panel
call fcn.140033cb0
mov ecx, dword [0x140259190]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004fee5
mov rcx, qword [0x1402581c0]
call qword [sym.imp.USER32.dll_IsWindowVisible]
mov rcx, qword [0x1402581c0]
test eax, eax
je 0x14004feda
xor edx, edx
jmp 0x14004fedf
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000c680
call fcn.1400177a0
mov eax, dword [0x140258b50]
cmp eax, 3
jne 0x140050921
movaps xmm2, xmm15
lea rcx, [rbp + 0xf60]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xf68]
addss xmm1, xmm10
movaps xmm2, xmm10
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0xf70]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0xf78]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm6
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.SECURITY
mov rcx, r15
call fcn.14000c560
mov r8b, 1
lea rdx, [0x1402594d0]
lea rcx, str.Stream_Mode
call fcn.140033cb0
mov ecx, dword [0x1402594d0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400500e0
cmp dword [0x1402594d0], 0
je 0x1400500e0
cmp byte [0x1402581fb], 0
sete al
mov byte [0x1402581fb], al
test al, al
je 0x14005005f
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x70], r14
call qword [sym.imp.ole32.dll_CoInitialize]
xor edx, edx
lea rax, [rbp - 0x70]
lea r9, [0x140123ed0]
mov qword [rsp + 0x20], rax
lea rcx, [0x140123ee0]
lea r8d, [rdx + 1]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140050050
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x70]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, str.Stream_Mode_Enabled
jmp 0x1400500d4
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x68], r14
call qword [sym.imp.ole32.dll_CoInitialize]
xor edx, edx
lea rax, [rbp - 0x68]
lea r9, [0x140123ed0]
mov qword [rsp + 0x20], rax
lea rcx, [0x140123ee0]
lea r8d, [rdx + 1]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x1400500c7
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x68]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, str.Stream_Mode_disabled
lea rcx, [0x140257330]
call fcn.1400441c0
lea rdx, [0x1402581f8]
lea rcx, str.Internet_Block
call fcn.140037610
mov byte [0x1402581ff], al
test al, al
je 0x1400503ed
cmp byte [0x1402581f8], 0
mov ecx, 3
je 0x14005027e
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x140050213
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32IntetnetBlock.bat
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x1400501de
lea r8, str.https:__cdn.discordapp.com_attachments_1233780962958245898_1233781042540970036_IntetnetBlock.bat_ex6631a363is663051e3hm854073cd874144b9dc820f40f161ee787d8fdcd00d0f9dee9e0602e0d6d23428
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x1400501d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor r14d, r14d
jmp 0x140050201
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
lea rsi, [0x1401503cc]
jmp 0x140050236
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x140050272
lea rcx, str.C:WindowsSystem32IntetnetBlock.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Internet_Blocked
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
jmp 0x1400503e7
lea rdx, str.Failed_to_Internet_Block
jmp 0x1400503d1
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x14005037e
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32Resume_Internet.bat
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x140050349
lea r8, str.https:__cdn.discordapp.com_attachments_1233780962958245898_1233781042167545907_Resume_Internet.bat_ex6631a362is663051e2hm664dfd9855d21cb33b3c8c021d9fd4810995ccce18663ede7bc3910ffd8841b8
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x14005033b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor r14d, r14d
jmp 0x14005036c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
lea rsi, [0x1401503cc]
jmp 0x1400503a1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x1400503ca
lea rcx, str.C:WindowsSystem32Resume_Internet.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Internet_Resumed
jmp 0x14005025a
lea rdx, str.Failed_to_Internet_Resume
lea rcx, [0x140257330]
call fcn.1400441c0
mov ecx, 0x190
mov edx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.14000c680
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0xf80]
movss xmm0, dword [r12]
subss xmm1, xmm10
movss xmm7, dword [0x14015db70]
mulss xmm0, xmm12
movaps xmm2, xmm7
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.CLEANUP
mov rcx, rsi
call fcn.14000c560
lea rdx, [0x1402581f9]
lea rcx, str.Clean_PC__New_
call fcn.140037610
mov byte [0x140258204], al
test al, al
je 0x1400505f6
cmp byte [0x1402581f9], 0
je 0x1400505f6
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x140050577
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32ClearTemp.bat
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x140050542
lea r8, str.https:__cdn.discordapp.com_attachments_1220754144986529923_1232395431020073083_ClearTemp.bat_ex6631deefis66308d6fhmf38d4cedbec411cd248bc74865b46e19375d2505356b2956a873d50fbfaa076e
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x140050534
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor r14d, r14d
jmp 0x140050565
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
lea rsi, [0x1401503cc]
jmp 0x14005059a
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x1400505d3
lea rcx, str.C:WindowsSystem32ClearTemp.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.PC_Cleaned_Successfull
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
jmp 0x1400505f0
lea rdx, str.Failed_to_PC_Clean
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x7d0
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, [0x1402581eb]
lea rcx, str.Emulator_Lag_Fix__New_
call fcn.140037610
mov byte [0x14025810d], al
test al, al
je 0x1400507b1
cmp byte [0x1402581eb], 0
je 0x1400507b1
mov ecx, 3
call qword [0x14015e050]
call qword [fcn.1400d1d90]
mov rdi, rax
test rax, rax
je 0x140050728
lea rdx, [0x14015c33c]
lea rcx, str.C:WindowsSystem32CleanPCandEmulador.bat
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
je 0x1400506fa
lea r8, str.https:__cdn.discordapp.com_attachments_1220754144986529923_1232395553598607503_CleanPCandEmulador.bat_ex6631df0cis66308d8chme471c0e3b5ece3a4c3c6ba82a6dd96fdb31c4e21e589df3196556e797a3b5ad2
mov edx, 0x2712
mov rcx, rdi
call qword [str.0F_r_]
lea r8, [0x14004b290]
mov edx, 0x4e2b
mov rcx, rdi
call qword [str.0F_r_]
mov r8, rsi
mov edx, 0x2711
mov rcx, rdi
call qword [str.0F_r_]
mov rcx, rdi
call qword [fcn.1400d1e50]
mov r14d, eax
test eax, eax
je 0x1400506e6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download:
call fcn.140053f80
mov ecx, r14d
mov rbx, rax
call qword [fcn.1400d1480]
mov rdx, rax
mov rcx, rbx
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14005074b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_file_for_writing.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [0x14015e038]
jmp 0x14005074b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_initialize_libcurl.
call fcn.140053f80
lea rdx, [0x140054150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.HD_Player.exe
call fcn.14004b1f0
test eax, eax
je 0x140050784
lea rcx, str.C:WindowsSystem32CleanPCandEmulador.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Emulator_Lag_Fixed
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
jmp 0x1400507a1
lea rdx, str.Failed
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x7d0
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
xor r14d, r14d
lea rsi, [0x1401503cc]
call fcn.14000c680
call fcn.1400177a0
movaps xmm1, xmm14
movaps xmm0, xmm11
call fcn.140017260
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0xf88]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm6
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.ANTI_DETECT
mov rcx, rsi
call fcn.14000c560
lea rdx, [0x1402581f4]
lea rcx, str.Guest_Reset__New_
call fcn.140037610
mov byte [0x140258183], al
test al, al
je 0x14005088c
cmp byte [0x1402581f4], 0
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], 0
je 0x140050868
lea rcx, [rbp + 0x430]
call fcn.140054920
lea rcx, [rbp + 0x430]
call fcn.140048a70
lea rcx, [rbp + 0x430]
jmp 0x140050887
lea rcx, [rbp + 0x440]
call fcn.140054920
lea rcx, [rbp + 0x440]
call fcn.140048a70
lea rcx, [rbp + 0x440]
call fcn.140048a50
movups xmm0, xmmword [0x1402590c0]
movups xmmword [rbp + 0x450], xmm0
call fcn.140038110
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [rbp + 0x450]
lea rcx, str.Change_Theme_Color
call fcn.140040950
test al, al
je 0x1400508ca
movups xmm0, xmmword [rbp + 0x450]
movups xmmword [0x1402590c0], xmm0
movups xmm0, xmmword [0x140258ea0]
movups xmmword [rbp + 0x460], xmm0
call fcn.140038110
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [rbp + 0x460]
lea rcx, str.Change_Text_Color
call fcn.140040950
test al, al
je 0x14005090f
movups xmm0, xmmword [rbp + 0x460]
movups xmmword [0x140258ea0], xmm0
movups xmmword [0x140258eb0], xmm0
call fcn.14000c680
call fcn.1400177a0
mov eax, dword [0x140258b50]
jmp 0x140050929
movss xmm7, dword [0x14015db70]
cmp eax, 4
jne 0x140051c90
movaps xmm2, xmm15
lea rcx, [rbp + 0x1188]
mov rdx, r12
call fcn.140048900
movss xmm1, dword [0x1402581cc]
lea rcx, [rbp + 0xf98]
addss xmm1, xmm10
movaps xmm2, xmm10
mov rbx, rax
call fcn.140001680
mov r8, rbx
lea rcx, [rbp + 0xfa0]
mov rdx, rax
call fcn.140048920
mov rcx, rax
call fcn.140017310
call fcn.140017650
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0xfa8]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm6
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.GENERAL
mov rcx, r15
call fcn.14000c560
lea rdx, [0x1402581e8]
lea rcx, str.Stream_Mode
call fcn.140037610
lea rdx, [0x1402587f0]
lea rcx, str.Hide_Icon
call fcn.140037610
lea rdx, [0x1402587f0]
lea rcx, str.Top_Most
call fcn.140037610
call fcn.14000c680
movss xmm1, dword [0x140257020]
lea rcx, [rbp + 0xfb0]
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
movaps xmm2, xmm7
subss xmm1, xmm0
mulss xmm1, xmm13
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.HOT_KEY
mov rcx, r15
call fcn.14000c560
mov rcx, qword [0x1402581b0]
call fcn.140012e10
lea rcx, str.Press_Insert_:___Hide_Show__
call fcn.140034d30
call fcn.140012eb0
lea rdx, [0x1402587f0]
lea rcx, str.Press_Insert_:___Hide_Show__
call fcn.140037610
lea rdx, [0x1402587f0]
lea rcx, str.Press_Delete_:___Close_App__
call fcn.140037610
call fcn.14000c680
call fcn.1400177a0
movaps xmm1, xmm14
movaps xmm0, xmm11
call fcn.140017260
call fcn.140017650
movss xmm1, dword [0x140257020]
movaps xmm2, xmm6
movss xmm0, dword [r12]
subss xmm1, xmm10
mulss xmm0, xmm12
subss xmm1, xmm0
mulss xmm1, xmm13
lea rcx, [rbp + 0xfb8]
call fcn.140001680
mov r8, rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rdx, str.FAKE_LAG
mov rcx, rsi
call fcn.14000c560
lea rax, str.0.5_Sec
mov dword [rsp + 0x20], 5
mov qword [rbp + 0x48], rax
lea r8, [rbp + 0x48]
lea rax, str.1_Sec
mov r9d, 5
mov qword [rbp + 0x50], rax
lea rdx, [0x140258e84]
lea rax, str.2_Sec
mov qword [rbp + 0x58], rax
lea rcx, str.Fake_Lag_Time
lea rax, str.3_Sec
mov qword [rbp + 0x60], rax
lea rax, str.5_Sec
mov qword [rbp + 0x68], rax
call fcn.140039c80
mov r8b, 1
lea rdx, [0x140259330]
lea rcx, str.Fake_Lag
call fcn.140033cb0
mov ecx, dword [0x140259330]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140051c86
cmp dword [0x140259330], 0
je 0x140051c86
cmp byte [0x1402581ef], 0
lea r12, str._shift__0
lea r15, str.set_RULE_NAMETemporaryBlock1
sete al
lea rdi, str.netsh_advfirewall_firewall_add_rule_name__RULE_NAME___dirin_actionblock_profileany_program__PROGRAM__
mov byte [0x1402581ef], al
lea rsi, str.netsh_advfirewall_firewall_add_rule_name__RULE_NAME___dirout_actionblock_profileany_program__PROGRAM__
test al, al
mov eax, dword [0x140258e84]
je 0x140051425
test eax, eax
jne 0x140050d71
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0x740], r12
mov qword [rbp + 0x750], rax
lea rbx, [rbp + 0x740]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0x748], r15
mov qword [rbp + 0x770], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0x788], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0x790], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0x7a8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0x7b0], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0x7b8], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0x7d0], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0x7d8], rax
mov qword [rbp + 0x758], rdi
mov qword [rbp + 0x760], rsi
mov qword [rbp + 0x768], r15
mov qword [rbp + 0x778], rdi
mov qword [rbp + 0x780], rsi
mov qword [rbp + 0x798], rdi
mov qword [rbp + 0x7a0], rsi
mov qword [rbp + 0x7c0], rdi
mov qword [rbp + 0x7c8], rsi
mov qword [rbp + 0x7e0], rdi
mov qword [rbp + 0x7e8], rsi
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x7f0]
add rbx, 8
cmp rbx, rax
jne 0x140050cb4
lea rdx, str.Fake_Lag_0.5_Sec
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x4e8], rax
lea rbx, [rbp + 0x4e8]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x4f0], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x4f8], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x500], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x508], rax
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x510]
add rbx, 8
cmp rbx, rax
jne 0x140050d45
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 1
jne 0x140050f23
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0x7f0], r12
mov qword [rbp + 0x800], rax
lea rbx, [rbp + 0x7f0]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0x7f8], r15
mov qword [rbp + 0x820], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0x838], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0x840], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0x858], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0x860], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0x868], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0x880], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0x888], rax
mov qword [rbp + 0x808], rdi
mov qword [rbp + 0x810], rsi
mov qword [rbp + 0x818], r15
mov qword [rbp + 0x828], rdi
mov qword [rbp + 0x830], rsi
mov qword [rbp + 0x848], rdi
mov qword [rbp + 0x850], rsi
mov qword [rbp + 0x870], rdi
mov qword [rbp + 0x878], rsi
mov qword [rbp + 0x890], rdi
mov qword [rbp + 0x898], rsi
nop word [rax + rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x8a0]
add rbx, 8
cmp rbx, rax
jne 0x140050e60
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_1_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x4c0], rax
lea rbx, [rbp + 0x4c0]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x4c8], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x4d0], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x4d8], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x4e0], rax
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x4e8]
add rbx, 8
cmp rbx, rax
jne 0x140050ef7
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 2
jne 0x1400510d3
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0x8a0], r12
mov qword [rbp + 0x8b0], rax
lea rbx, [rbp + 0x8a0]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0x8a8], r15
mov qword [rbp + 0x8d0], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0x8e8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0x8f0], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0x908], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0x910], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0x918], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0x930], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0x938], rax
mov qword [rbp + 0x8b8], rdi
mov qword [rbp + 0x8c0], rsi
mov qword [rbp + 0x8c8], r15
mov qword [rbp + 0x8d8], rdi
mov qword [rbp + 0x8e0], rsi
mov qword [rbp + 0x8f8], rdi
mov qword [rbp + 0x900], rsi
mov qword [rbp + 0x920], rdi
mov qword [rbp + 0x928], rsi
mov qword [rbp + 0x940], rdi
mov qword [rbp + 0x948], rsi
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x950]
add rbx, 8
cmp rbx, rax
jne 0x140051010
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_2_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x510], rax
lea rbx, [rbp + 0x510]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x518], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x520], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x528], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x530], rax
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x538]
add rbx, 8
cmp rbx, rax
jne 0x1400510a7
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 3
jne 0x140051283
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0x950], r12
mov qword [rbp + 0x960], rax
lea rbx, [rbp + 0x950]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0x958], r15
mov qword [rbp + 0x980], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0x998], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0x9a0], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0x9b8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0x9c0], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0x9c8], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0x9e0], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0x9e8], rax
mov qword [rbp + 0x968], rdi
mov qword [rbp + 0x970], rsi
mov qword [rbp + 0x978], r15
mov qword [rbp + 0x988], rdi
mov qword [rbp + 0x990], rsi
mov qword [rbp + 0x9a8], rdi
mov qword [rbp + 0x9b0], rsi
mov qword [rbp + 0x9d0], rdi
mov qword [rbp + 0x9d8], rsi
mov qword [rbp + 0x9f0], rdi
mov qword [rbp + 0x9f8], rsi
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0xa00]
add rbx, 8
cmp rbx, rax
jne 0x1400511c0
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_3_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x538], rax
lea rbx, [rbp + 0x538]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x540], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x548], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x550], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x558], rax
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x560]
add rbx, 8
cmp rbx, rax
jne 0x140051257
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 4
jne 0x140051c86
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0xa00], r12
mov qword [rbp + 0xa10], rax
lea rbx, [rbp + 0xa00]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0xa08], r15
mov qword [rbp + 0xa30], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0xa48], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0xa50], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0xa68], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0xa70], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0xa78], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0xa90], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0xa98], rax
mov qword [rbp + 0xa18], rdi
mov qword [rbp + 0xa20], rsi
mov qword [rbp + 0xa28], r15
mov qword [rbp + 0xa38], rdi
mov qword [rbp + 0xa40], rsi
mov qword [rbp + 0xa58], rdi
mov qword [rbp + 0xa60], rsi
mov qword [rbp + 0xa80], rdi
mov qword [rbp + 0xa88], rsi
mov qword [rbp + 0xaa0], rdi
mov qword [rbp + 0xaa8], rsi
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0xab0]
add rbx, 8
cmp rbx, rax
jne 0x140051370
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_5_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x560], rax
lea rbx, [rbp + 0x560]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x568], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x570], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x578], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x580], rax
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x588]
add rbx, 8
cmp rbx, rax
jne 0x140051407
jmp 0x140051c79
test eax, eax
jne 0x1400515cd
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0xab0], r12
mov qword [rbp + 0xac0], rax
lea rbx, [rbp + 0xab0]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0xab8], r15
mov qword [rbp + 0xae0], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0xaf8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0xb00], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0xb18], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0xb20], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0xb28], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0xb40], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0xb48], rax
mov qword [rbp + 0xac8], rdi
mov qword [rbp + 0xad0], rsi
mov qword [rbp + 0xad8], r15
mov qword [rbp + 0xae8], rdi
mov qword [rbp + 0xaf0], rsi
mov qword [rbp + 0xb08], rdi
mov qword [rbp + 0xb10], rsi
mov qword [rbp + 0xb30], rdi
mov qword [rbp + 0xb38], rsi
mov qword [rbp + 0xb50], rdi
mov qword [rbp + 0xb58], rsi
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0xb60]
add rbx, 8
cmp rbx, rax
jne 0x140051510
lea rdx, str.Fake_Lag_0.5_Sec
lea rcx, [0x140257330]
call fcn.1400441c0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x588], rax
lea rbx, [rbp + 0x588]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x590], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x598], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x5a0], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x5a8], rax
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x5b0]
add rbx, 8
cmp rbx, rax
jne 0x1400515a1
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 1
jne 0x14005177c
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0xb60], r12
mov qword [rbp + 0xb70], rax
lea rbx, [rbp + 0xb60]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0xb68], r15
mov qword [rbp + 0xb90], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0xba8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0xbb0], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0xbc8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0xbd0], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0xbd8], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0xbf0], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0xbf8], rax
mov qword [rbp + 0xb78], rdi
mov qword [rbp + 0xb80], rsi
mov qword [rbp + 0xb88], r15
mov qword [rbp + 0xb98], rdi
mov qword [rbp + 0xba0], rsi
mov qword [rbp + 0xbb8], rdi
mov qword [rbp + 0xbc0], rsi
mov qword [rbp + 0xbe0], rdi
mov qword [rbp + 0xbe8], rsi
mov qword [rbp + 0xc00], rdi
mov qword [rbp + 0xc08], rsi
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0xc10]
add rbx, 8
cmp rbx, rax
jne 0x1400516b6
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_1_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x5b0], rax
lea rbx, [rbp + 0x5b0]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x5b8], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x5c0], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x5c8], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x5d0], rax
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x5d8]
add rbx, 8
cmp rbx, rax
jne 0x140051750
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 2
jne 0x14005192c
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0xc10], r12
mov qword [rbp + 0xc20], rax
lea rbx, [rbp + 0xc10]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0xc18], r15
mov qword [rbp + 0xc40], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0xc58], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0xc60], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0xc78], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0xc80], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0xc88], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0xca0], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0xca8], rax
mov qword [rbp + 0xc28], rdi
mov qword [rbp + 0xc30], rsi
mov qword [rbp + 0xc38], r15
mov qword [rbp + 0xc48], rdi
mov qword [rbp + 0xc50], rsi
mov qword [rbp + 0xc68], rdi
mov qword [rbp + 0xc70], rsi
mov qword [rbp + 0xc90], rdi
mov qword [rbp + 0xc98], rsi
mov qword [rbp + 0xcb0], rdi
mov qword [rbp + 0xcb8], rsi
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0xcc0]
add rbx, 8
cmp rbx, rax
jne 0x140051865
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_2_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x5d8], rax
lea rbx, [rbp + 0x5d8]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x5e0], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x5e8], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x5f0], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x5f8], rax
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x600]
add rbx, 8
cmp rbx, rax
jne 0x140051900
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 3
jne 0x140051adc
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0xcc0], r12
mov qword [rbp + 0xcd0], rax
lea rbx, [rbp + 0xcc0]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0xcc8], r15
mov qword [rbp + 0xcf0], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0xd08], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0xd10], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0xd28], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0xd30], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0xd38], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0xd50], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0xd58], rax
mov qword [rbp + 0xcd8], rdi
mov qword [rbp + 0xce0], rsi
mov qword [rbp + 0xce8], r15
mov qword [rbp + 0xcf8], rdi
mov qword [rbp + 0xd00], rsi
mov qword [rbp + 0xd18], rdi
mov qword [rbp + 0xd20], rsi
mov qword [rbp + 0xd40], rdi
mov qword [rbp + 0xd48], rsi
mov qword [rbp + 0xd60], rdi
mov qword [rbp + 0xd68], rsi
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0xd70]
add rbx, 8
cmp rbx, rax
jne 0x140051a15
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_3_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x600], rax
lea rbx, [rbp + 0x600]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x608], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x610], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x618], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x620], rax
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x628]
add rbx, 8
cmp rbx, rax
jne 0x140051ab0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x140258e84]
cmp eax, 4
jne 0x140051c86
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_nxtHD_Player.exe
mov qword [rbp + 0x690], r12
mov qword [rbp + 0x6a0], rax
lea rbx, [rbp + 0x690]
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi5HD_Player.exe
mov qword [rbp + 0x698], r15
mov qword [rbp + 0x6c0], rax
lea rax, str.set_RULE_NAMETemporaryBlock2
mov qword [rbp + 0x6d8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacksHD_Player.exe
mov qword [rbp + 0x6e0], rax
lea rax, str.set_RULE_NAMETemporaryBlock3
mov qword [rbp + 0x6f8], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2Bluestacks.exe
mov qword [rbp + 0x700], rax
lea rax, str.set_PROGRAMC:Program_FilesBlueStacks_msi2HD_Player.exe
mov qword [rbp + 0x708], rax
lea rax, str.set_RULE_NAMETemporaryBlock4
mov qword [rbp + 0x720], rax
lea rax, str.set_PROGRAMC:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
mov qword [rbp + 0x728], rax
mov qword [rbp + 0x6a8], rdi
mov qword [rbp + 0x6b0], rsi
mov qword [rbp + 0x6b8], r15
mov qword [rbp + 0x6c8], rdi
mov qword [rbp + 0x6d0], rsi
mov qword [rbp + 0x6e8], rdi
mov qword [rbp + 0x6f0], rsi
mov qword [rbp + 0x710], rdi
mov qword [rbp + 0x718], rsi
mov qword [rbp + 0x730], rdi
mov qword [rbp + 0x738], rsi
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x740]
add rbx, 8
cmp rbx, rax
jne 0x140051bc5
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Fake_Lag_5_Sec
lea rcx, [0x140257330]
call fcn.140044410
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x628], rax
lea rbx, [rbp + 0x628]
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
mov qword [rbp + 0x630], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
mov qword [rbp + 0x638], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
mov qword [rbp + 0x640], rax
lea rax, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe_
mov qword [rbp + 0x648], rax
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rbp + 0x650]
add rbx, 8
cmp rbx, rax
jne 0x140051c60
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.14000c680
call fcn.1400177a0
mov esi, 1
mov ecx, esi
call fcn.140004920
call fcn.14004b5d0
call fcn.140011e30
call fcn.14000b450
mov rcx, qword [0x140258810]
lea r8, [0x1402587f8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x1158], xmm0
mov edx, esi
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x140258810]
lea r8, [rbp + 0x1158]
mov rdx, qword [0x1402587f8]
mov rax, qword [rcx]
call qword [rax + 0x190]
call fcn.1400082d0
mov rcx, rax
call fcn.140045210
mov rcx, qword [0x140258800]
xor r8d, r8d
mov edx, esi
mov rax, qword [rcx]
call qword [rax + 0x40]
movss xmm6, dword [0x14015db24]
jmp 0x14004c480
call fcn.140046470
call fcn.1400467c0
mov rbx, qword [0x140258110]
mov qword [0x140258110], rbx
call fcn.140006790
mov rcx, rbx
mov qword [0x140258110], r14
call fcn.1400217b0
call fcn.140051fa0
mov rcx, qword [0x1402581c0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x178]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x1450]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x1460]
movaps xmm13, xmmword [rsp + 0x1470]
movaps xmm12, xmmword [rsp + 0x1480]
movaps xmm11, xmmword [rsp + 0x1490]
movaps xmm10, xmmword [rsp + 0x14a0]
movaps xmm9, xmmword [rsp + 0x14b0]
movaps xmm8, xmmword [rsp + 0x14c0]
movaps xmm7, xmmword [rsp + 0x14d0]
movaps xmm6, xmmword [rsp + 0x14e0]
mov r15, qword [rsp + 0x14f0]
mov r13, qword [rsp + 0x1500]
mov r12, qword [rsp + 0x1508]
mov rdi, qword [rsp + 0x1530]
mov rsi, qword [rsp + 0x1528]
mov rbx, qword [rsp + 0x1520]
mov r14, qword [rsp + 0x14f8]
add rsp, 0x1510
pop rbp
ret