Function at 0x140058b00
Capabilities:
Enumerate processes
Log keystrokes via polling
Terminate process

Disassembly:
mov r11, rsp
push rbp
push rbx
push r12
push r13
push r14
lea rbp, [r11 - 0x688]
sub rsp, 0x760
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
mov rax, qword [0x140111ec0]
xor rax, rsp
mov qword [rbp + 0x638], rax
mov ecx, dword [0x1401394f8]
mov qword [r11 + 0x18], r15
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140058b56
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140184083]
call fcn.140058790
mov rdx, qword [0x140187620]
lea rcx, str.Tabs
xor r12d, r12d
mov r8d, 0xa7
mov dword [rdx + 0x4ee8], 0xffffffff
movss xmm0, dword [rdx + 0x14]
movss xmm1, dword [rdx + 0x10]
subss xmm0, dword [0x1400feef0]
subss xmm1, dword [0x1400feecc]
or dword [rdx + 0x4a00], 3
mov qword [rdx + 0x4a18], r12
mov dword [rdx + 0x4a04], 1
mulss xmm0, dword [0x1400fed3c]
mov dword [rdx + 0x4a20], 0x42dc0000
movss dword [rdx + 0x4a10], xmm1
mov dword [rdx + 0x4a24], 0x43c80000
movss dword [rdx + 0x4a14], xmm0
mov dword [rdx + 0x4a08], 1
xor edx, edx
call fcn.14000fb20
mov rcx, qword [0x140187620]
movdqa xmm0, xmmword [0x1400ff390]
movups xmmword [rbp + 0x620], xmm0
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
lea rcx, [rbp + 0x620]
mov r10, qword [rax + 0x2a8]
mov qword [rsp + 0x40], r10
movss xmm2, dword [rax + 0x110]
movss xmm3, dword [rax + 0x114]
movaps xmm1, xmm2
addss xmm1, dword [0x1400feec8]
movss dword [rbp + 0x614], xmm3
movss dword [rbp + 0x618], xmm2
movss dword [rbp + 0x61c], xmm3
movss dword [rbp + 0x610], xmm1
call fcn.140005680
movss xmm0, dword [0x1400fee24]
lea r8, [rbp + 0x610]
mov r9d, eax
movss dword [rsp + 0x20], xmm0
lea rdx, [rbp + 0x618]
mov rcx, r10
call fcn.14002a150
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x114]
subss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rax + 0x90]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov rcx, qword [0x140187660]
addss xmm1, dword [0x1400fee6c]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
call fcn.140012550
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
xorps xmm6, xmm6
mov dword [rbp + 0x620], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b1c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x15
je 0x140058d3a
movups xmmword [rbx + 0x3b1c], xmm6
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff1d0]
mov dword [rbp + 0x620], socket
movups xmm0, xmmword [rbx + 0x3b2c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x16
je 0x140058d84
movups xmmword [rbx + 0x3b2c], xmm6
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
mov dword [rbp + 0x620], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b3c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x17
je 0x140058dc6
movups xmmword [rbx + 0x3b3c], xmm6
lea rax, [rsp + 0x40]
xor r8d, r8d
lea rdx, str.Aiming
mov qword [rbp + 0x610], rax
lea rcx, [rbp + 0x610]
call fcn.14005aff0
mov r8d, 7
lea rdx, str.Misc_Aim
lea rcx, [rbp + 0x610]
call fcn.14005aff0
mov r8d, 2
lea rdx, str.Visuals
lea rcx, [rbp + 0x610]
call fcn.14005aff0
mov r8d, 8
lea rdx, str.Radar
lea rcx, [rbp + 0x610]
call fcn.14005aff0
mov r8d, 4
lea rdx, str.Extra
lea rcx, [rbp + 0x610]
call fcn.14005aff0
mov r8, qword [0x140187620]
mov r13d, 3
mov r9d, r13d
mov eax, dword [r8 + 0x4a78]
cmp eax, r13d
jge 0x140058e70
mov r9d, eax
test eax, eax
jle 0x140058ea9
nop
mov rcx, qword [r8 + 0x4a80]
dec r9d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
mov eax, dword [r8 + 0x4a78]
test r9d, r9d
jg 0x140058e70
mov qword [rsp + 0x790], rsi
mov qword [rsp + 0x798], rdi
call fcn.1400125f0
call fcn.140011e90
mov eax, dword [0x140187670]
lea r14, [0x1400f7c1c]
movss xmm7, dword [0x1400fef4c]
lea r15, str._.3f
test eax, eax
jne 0x140059bd6
mov rax, qword [0x140187620]
lea rcx, str.Aiming_Settings________________________________________________________discord.gg_seyrix
xor edx, edx
mov r8d, 0x2a
or dword [rax + 0x4a00], 2
mov dword [rax + 0x4a20], 0x44228000
mov dword [rax + 0x4a24], 0x43fa0000
mov dword [rax + 0x4a08], 1
call fcn.14000fb20
mov rcx, qword [0x140187660]
lea rax, str.Head
mov qword [rbp + 0x620], rax
lea rax, str.Neck
mov qword [rbp + 0x628], rax
lea rax, str.Chest
mov qword [rbp + 0x630], rax
call fcn.140012550
cmp dword [0x140187670], r12d
jne 0x140059bcb
mov edx, r12d
lea rcx, str._Rifle
nop dword [rax]
nop dword [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r12b
jne 0x140058f87
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], r12b
jne 0x140058f80
mov dword [rsp + 0x20], edx
lea r9, str._Rifle
lea rdx, [0x140187a68]
lea r8, [0x140037b30]
lea rcx, str.Weapon:
call fcn.140037b70
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
mov eax, dword [0x140187a68]
test eax, eax
jne 0x140059224
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x14005901e
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x140059052
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x618]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x610]
mov qword [rsp + 0x20], rax
lea r8, [0x1401394f0]
mov dword [rbp + 0x618], 0x15e
mov edx, 4
mov dword [rbp + 0x610], 0xa
lea rcx, str.Rifle_Fov
call fcn.140038ef0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x1400590dd
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401864c0]
mov dword [rbp + 0x610], 0x420c0000
mov edx, 8
mov dword [rbp + 0x618], 0x40a00000
lea rcx, str.Rifle_Smooth
call fcn.140038ef0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x14005915c
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
lea rdx, [0x140111f5a]
lea rcx, str.Enable_Aim
call fcn.140035ab0
lea rdx, [0x1401840b2]
lea rcx, str.Ignore_Knocked
call fcn.140035ab0
lea rdx, [0x140111f59]
lea rcx, str.Ignore_Team
call fcn.140035ab0
lea rdx, [0x140184023]
lea rcx, str.Visible_Only
call fcn.140035ab0
lea rdx, [0x140184020]
lea rcx, str.Prediction
call fcn.140035ab0
lea rdx, [0x14018765e]
lea rcx, str.Prediction_Dot
call fcn.140035ab0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401840a8]
mov dword [rbp + 0x610], 0x12c
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Max_Dist
call fcn.140038ef0
mov eax, dword [0x140187a68]
cmp eax, 1
jne 0x14005943a
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x140059268
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184040]
mov dword [rbp + 0x610], 0x15e
mov edx, 4
mov dword [rbp + 0x618], 0xa
lea rcx, str.Pump_Fov
call fcn.140038ef0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x1400592f3
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401864c8]
mov dword [rbp + 0x610], 0x420c0000
mov edx, 8
mov dword [rbp + 0x618], 0x40a00000
lea rcx, str.Pump_Smooth
call fcn.140038ef0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x140059372
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
lea rdx, [0x1401840b5]
lea rcx, str.Enable_Aim
call fcn.140035ab0
lea rdx, [0x140111f5f]
lea rcx, str.Ignore_Knocked
call fcn.140035ab0
lea rdx, [0x1401840b1]
lea rcx, str.Ignore_Team
call fcn.140035ab0
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Visible_Only
call fcn.140035ab0
lea rdx, [0x140111f5d]
lea rcx, str.Prediction
call fcn.140035ab0
lea rdx, [0x14018761a]
lea rcx, str.Prediction_Dot
call fcn.140035ab0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184038]
mov dword [rbp + 0x610], 0x12c
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Max_Dist
call fcn.140038ef0
mov eax, dword [0x140187a68]
cmp eax, 2
jne 0x140059650
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x14005947e
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401840ac]
mov dword [rbp + 0x610], 0x15e
mov edx, 4
mov dword [rbp + 0x618], 0xa
lea rcx, str.Smg_Fov
call fcn.140038ef0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x140059509
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x14018403c]
mov dword [rbp + 0x610], 0x420c0000
mov edx, 8
mov dword [rbp + 0x618], 0x40a00000
lea rcx, str.Smg_Smooth
call fcn.140038ef0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x140059594
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rdx, [0x140111f5e]
lea rcx, str.Enable_Aim
call fcn.140035ab0
lea rdx, [0x1401840b3]
lea rcx, str.Ignore_Knocked
call fcn.140035ab0
lea rdx, [0x140184093]
lea rcx, str.Ignore_Team
call fcn.140035ab0
lea rdx, [0x140111f5c]
lea rcx, str.Visible_Only
call fcn.140035ab0
lea rdx, [0x1401840b0]
lea rcx, str.Prediction
call fcn.140035ab0
lea rdx, [0x14018765c]
lea rcx, str.Prediction_Dot
call fcn.140035ab0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401864c4]
mov dword [rbp + 0x610], 0x12c
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Max_Dist
call fcn.140038ef0
mov eax, dword [0x140187a68]
cmp eax, r13d
jne 0x140059860
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x140059694
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401840ac]
mov dword [rbp + 0x610], 0x15e
mov edx, 4
mov dword [rbp + 0x618], 0xa
lea rcx, str.Smg_Fov
call fcn.140038ef0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x14005971f
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x14018403c]
mov dword [rbp + 0x610], 0x420c0000
mov edx, 8
mov dword [rbp + 0x618], 0x40a00000
lea rcx, str.Smg_Smooth
call fcn.140038ef0
mov rdx, qword [0x140187620]
mov rax, qword [rdx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rdx + 0x4000]
cmp byte [rax + 0xc3], r12b
jne 0x1400597aa
movaps xmm1, xmm7
mov qword [rbp + 0x610], r12
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rdx, [0x140184022]
lea rcx, str.Enable_Aim
call fcn.140035ab0
lea rdx, [0x140111f58]
lea rcx, str.Ignore_Knocked
call fcn.140035ab0
lea rdx, [0x1401840b4]
lea rcx, str.Ignore_Team
call fcn.140035ab0
lea rdx, [0x140184021]
lea rcx, str.Visible_Only
call fcn.140035ab0
lea rdx, [0x140111f5b]
lea rcx, str.Prediction
call fcn.140035ab0
lea rdx, [0x140187619]
lea rcx, str.Prediction_Dot
call fcn.140035ab0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401394f4]
mov dword [rbp + 0x610], 0x12c
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Max_Dist
call fcn.140038ef0
lea rdx, [0x140184026]
lea rcx, str.Legit_Aim
call fcn.140035ab0
lea rdx, [0x140184025]
lea rcx, str.Ignore_Team
call fcn.140035ab0
movsxd rax, dword [0x140187680]
xor edx, edx
mov r12, qword [0x140187620]
cmp eax, 2
ja 0x1400598a3
mov rdx, qword [rbp + rax*8 + 0x620]
lea rcx, str.Hitbox
call fcn.140037130
test al, al
je 0x140059baf
mov rax, qword [rbp + 0x620]
lea rdi, str.Unknown_item
xor r14b, r14b
mov rsi, rdi
test rax, rax
cmovne rsi, rax
mov rax, qword [0x140187620]
xor edx, edx
mov rbx, qword [rax + 0x4000]
mov rcx, rbx
call fcn.140008dc0
add rbx, 0x100
mov r15d, eax
mov r8d, dword [rbx + 4]
mov ecx, dword [rbx]
cmp ecx, r8d
jne 0x140059927
inc ecx
test r8d, r8d
je 0x140059913
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x140059918
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.14001f590
movsxd rdx, dword [rbx]
lea r9, [rbp + 0x610]
mov rax, qword [rbx + 8]
mov rcx, rsi
mov qword [rbp + 0x610], 0
mov dword [rax + rdx*4], r15d
inc dword [rbx]
cmp dword [0x140187680], 0
sete bl
movzx edx, bl
call fcn.140044cc0
test al, al
je 0x140059975
cmp dword [0x140187680], 0
je 0x140059975
mov r14b, 1
mov dword [0x140187680], 0
test bl, bl
je 0x14005997e
call fcn.140012b60
mov rbx, qword [0x140187620]
mov rsi, rdi
mov edx, 1
mov rax, qword [rbx + 0x4000]
dec dword [rax + 0x100]
mov rax, qword [rbp + 0x628]
mov rbx, qword [rbx + 0x4000]
test rax, rax
mov rcx, rbx
cmovne rsi, rax
call fcn.140008dc0
add rbx, 0x100
mov r15d, eax
mov r8d, dword [rbx + 4]
mov ecx, dword [rbx]
cmp ecx, r8d
jne 0x1400599f4
inc ecx
test r8d, r8d
je 0x1400599e0
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x1400599e5
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.14001f590
movsxd rdx, dword [rbx]
lea r9, [rbp + 0x610]
mov rax, qword [rbx + 8]
mov rcx, rsi
mov dword [rax + rdx*4], r15d
inc dword [rbx]
cmp dword [0x140187680], 1
sete bl
movzx edx, bl
call fcn.140044cc0
test al, al
je 0x140059a37
cmp dword [0x140187680], 1
je 0x140059a37
mov r14b, 1
mov dword [0x140187680], 1
test bl, bl
je 0x140059a40
call fcn.140012b60
mov rbx, qword [0x140187620]
mov edx, 2
mov rax, qword [rbx + 0x4000]
dec dword [rax + 0x100]
mov rax, qword [rbp + 0x630]
mov rbx, qword [rbx + 0x4000]
test rax, rax
mov rcx, rbx
cmovne rdi, rax
call fcn.140008dc0
add rbx, 0x100
mov esi, eax
mov r8d, dword [rbx + 4]
mov ecx, dword [rbx]
cmp ecx, r8d
jne 0x140059ab2
inc ecx
test r8d, r8d
je 0x140059a9e
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x140059aa3
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.14001f590
movsxd rdx, dword [rbx]
lea r9, [rbp + 0x610]
mov rax, qword [rbx + 8]
mov rcx, rdi
mov dword [rax + rdx*4], esi
inc dword [rbx]
cmp dword [0x140187680], 2
sete bl
movzx edx, bl
call fcn.140044cc0
test al, al
je 0x140059af4
cmp dword [0x140187680], 2
je 0x140059af4
mov r14b, 1
mov dword [0x140187680], 2
test bl, bl
je 0x140059afd
call fcn.140012b60
mov rbx, qword [0x140187620]
mov rax, qword [rbx + 0x4000]
dec dword [rax + 0x100]
mov rcx, qword [rbx + 0x4000]
cmp qword [rbx + 0x4b18], rcx
jne 0x140059b45
cmp byte [rbx + 0x4bc1], 0
je 0x140059b45
cmp dword [rbx + 0x4b68], 0
jne 0x140059b45
mov eax, dword [rbx + 0x4bc4]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4bc4], eax
test dword [rcx + 0x14], 0x1000000
je 0x140059b55
mov byte [rbx + 0x3f66], 1
call fcn.140011e90
dec dword [rbx + 0x5e28]
mov byte [rbx + 0x3f66], 0
test r14b, r14b
je 0x140059ba1
mov rax, qword [0x140187620]
cmp word [rax + 0x5eb6], 0
jg 0x140059ba1
mov ecx, dword [rax + 0x4064]
cmp ecx, dword [r12 + 0x49b0]
je 0x140059b91
test ecx, ecx
jne 0x140059b9a
mov word [rax + 0x4074], 0x101
or dword [rax + 0x49b8], 4
lea r14, [0x1400f7c1c]
lea r15, str._.3f
mov r8d, dword [0x140187aa8]
lea rdx, [0x14004c0f0]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.14004c1e0
xor r12d, r12d
call fcn.140011e90
mov eax, dword [0x140187670]
cmp eax, 2
jne 0x14005a46d
mov rax, qword [0x140187620]
lea rcx, str.Visual_Settings________________________________________________________discord.gg_seyrix
xor edx, edx
mov r8d, 0x2a
or dword [rax + 0x4a00], 2
mov dword [rax + 0x4a20], 0x44228000
mov dword [rax + 0x4a24], 0x43e10000
mov dword [rax + 0x4a08], 1
call fcn.14000fb20
mov rcx, qword [0x140187620]
xor edx, edx
mov qword [rbp + 0x610], 0x43340000
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
lea rcx, str.Visuals__1_
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x404c], eax
jne 0x140059c87
lea r8, str.Visuals__1_
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov r9d, 1
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, edi
lea rcx, str.Visuals__1_
call fcn.14000c810
lea rdx, [0x140187694]
lea rcx, [0x1400fc814]
call fcn.140035ab0
lea rdx, [0x140187687]
lea rcx, str.Filled_Box
call fcn.140035ab0
lea rdx, [0x140187685]
lea rcx, str.Skeleton
call fcn.140035ab0
lea rdx, [0x140184092]
lea rcx, str.Distance
call fcn.140035ab0
lea rdx, [0x140184091]
lea rcx, str.Username
call fcn.140035ab0
lea rdx, [0x140187696]
lea rcx, str.Platform
call fcn.140035ab0
lea rdx, [0x140187692]
lea rcx, str.Team_ID
call fcn.140035ab0
lea rdx, [0x140187698]
lea rcx, str.Kills
call fcn.140035ab0
lea rdx, [0x140187691]
lea rcx, str.Render_Count
call fcn.140035ab0
lea rdx, [0x140187690]
lea rcx, str.Rank
call fcn.140035ab0
lea rdx, [0x140184090]
lea rcx, str.Weapon
call fcn.140035ab0
lea rdx, [0x140187686]
lea rcx, str.Snaplines
call fcn.140035ab0
lea rdx, [0x140187693]
lea rcx, str.OOF_Arrows
call fcn.140035ab0
lea rdx, [0x140187697]
lea rcx, str.Target_Text
call fcn.140035ab0
call fcn.14000cbd0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140015b10
mov rcx, qword [0x140187620]
xor edx, edx
mov qword [rbp + 0x610], 0x43340000
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
lea rcx, str.Visuals__2_
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x404c], eax
jne 0x140059e29
lea r8, str.Visuals__2_
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov r9d, 1
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, edi
lea rcx, str.Visuals__2_
call fcn.14000c810
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184098]
mov dword [rbp + 0x610], 0xa
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Skeleton_Thickness
call fcn.140038ef0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], 0
jne 0x140059ecc
movaps xmm1, xmm7
mov qword [rbp + 0x610], 0
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184094]
mov dword [rbp + 0x610], 0xa
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Box_Thickness
call fcn.140038ef0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], 0
jne 0x140059f4f
movaps xmm1, xmm7
mov qword [rbp + 0x610], 0
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rdx, [0x140187695]
lea rcx, str.Skeleton_Outline
call fcn.140035ab0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], 0
jne 0x140059fa1
movaps xmm1, xmm7
mov qword [rbp + 0x610], 0
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rdx, [0x140187684]
lea rcx, str.Box_Outline
call fcn.140035ab0
mov rcx, qword [0x140187620]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], 0
jne 0x140059ff3
movaps xmm1, xmm7
mov qword [rbp + 0x610], 0
lea rcx, [rbp + 0x610]
call fcn.1400159a0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x14018408c]
mov dword [rbp + 0x610], 0x41700000
mov edx, 8
mov dword [rbp + 0x618], 0x3f800000
lea rcx, str.Arrow_Size
call fcn.140038ef0
call fcn.14000cbd0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140015b10
mov rcx, qword [0x140187620]
xor edx, edx
mov qword [rbp + 0x610], 0x43340000
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
lea rcx, str.Visuals__3_
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x404c], eax
jne 0x14005a0af
lea r8, str.Visuals__3_
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov r9d, 1
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, edi
lea rcx, str.Visuals__3_
call fcn.14000c810
lea rcx, str.Visible_Color
call fcn.1400341e0
movups xmm1, xmmword [0x140184058]
lea r9, [rbp + 0x610]
mov dword [rbp + 0x610], 0x42480000
mov r8d, 2
mov dword [rbp + 0x614], 0x41700000
lea rdx, [rsp + 0x40]
lea rcx, str.VisibleColor
movups xmmword [rsp + 0x40], xmm1
call fcn.140043560
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140013880
test al, al
je 0x14005a1af
xor ecx, ecx
call fcn.1400091c0
test al, al
je 0x14005a1af
mov rsi, qword [0x140187620]
lea rcx, str.Color_Picker_for_Visible_Color
xor edx, edx
mov rbx, qword [rsi + 0x4000]
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x404c], eax
jne 0x14005a187
lea r8, str.Color_Picker_for_Visible_Color
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
test byte [rsi + 0x604c], 4
je 0x14005a1a6
mov r8d, edi
lea rdx, str.Color_Picker_for_Visible_Color
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001d8e0
xor edx, edx
mov ecx, edi
call fcn.140016ca0
mov rbx, qword [0x140187620]
mov eax, dword [rbx + 0x4ae8]
cmp dword [rbx + 0x4ad8], eax
jg 0x14005a1d0
mov dword [rbx + 0x4a00], r12d
jmp 0x14005a296
mov rbx, qword [rbx + 0x4000]
lea rcx, str.Color_Picker_for_Visible_Color
xor edx, edx
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x404c], eax
jne 0x14005a218
lea r8, str.Color_Picker_for_Visible_Color
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov ecx, edi
call fcn.1400172d0
test al, al
je 0x14005a296
xor r9d, r9d
lea rdx, [0x140184058]
mov r8d, 2
lea rcx, str.VisibleColorPicker
call fcn.140041110
mov rbx, qword [0x140187620]
mov rcx, qword [rbx + 0x4000]
cmp qword [rbx + 0x4b18], rcx
jne 0x14005a27a
cmp byte [rbx + 0x4bc1], 0
je 0x14005a27a
cmp dword [rbx + 0x4b68], 0
jne 0x14005a27a
mov eax, dword [rbx + 0x4bc4]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4bc4], eax
test dword [rcx + 0x14], 0x1000000
je 0x14005a28a
mov byte [rbx + 0x3f66], 1
call fcn.140011e90
mov byte [rbx + 0x3f66], 0
lea rcx, str.Invisible_Color
call fcn.1400341e0
movups xmm0, xmmword [0x140184048]
lea r9, [rbp + 0x610]
mov dword [rbp + 0x610], 0x42480000
mov r8d, 2
mov dword [rbp + 0x614], 0x41700000
lea rdx, [rsp + 0x40]
lea rcx, str.InvisibleColor
movups xmmword [rsp + 0x40], xmm0
call fcn.140043560
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140013880
test al, al
je 0x14005a376
xor ecx, ecx
call fcn.1400091c0
test al, al
je 0x14005a376
mov rsi, qword [0x140187620]
lea rcx, str.Color_Picker_for_Invisible_Color
xor edx, edx
mov rbx, qword [rsi + 0x4000]
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x404c], eax
jne 0x14005a34e
lea r8, str.Color_Picker_for_Invisible_Color
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
test byte [rsi + 0x604c], 4
je 0x14005a36d
mov r8d, edi
lea rdx, str.Color_Picker_for_Invisible_Color
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001d8e0
xor edx, edx
mov ecx, edi
call fcn.140016ca0
mov rbx, qword [0x140187620]
mov eax, dword [rbx + 0x4ae8]
cmp dword [rbx + 0x4ad8], eax
jg 0x14005a397
mov dword [rbx + 0x4a00], r12d
jmp 0x14005a45d
mov rbx, qword [rbx + 0x4000]
lea rcx, str.Color_Picker_for_Invisible_Color
xor edx, edx
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x404c], eax
jne 0x14005a3df
lea r8, str.Color_Picker_for_Invisible_Color
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov ecx, edi
call fcn.1400172d0
test al, al
je 0x14005a45d
xor r9d, r9d
lea rdx, [0x140184048]
mov r8d, 2
lea rcx, str.InvisibleColorPicker
call fcn.140041110
mov rbx, qword [0x140187620]
mov rcx, qword [rbx + 0x4000]
cmp qword [rbx + 0x4b18], rcx
jne 0x14005a441
cmp byte [rbx + 0x4bc1], 0
je 0x14005a441
cmp dword [rbx + 0x4b68], 0
jne 0x14005a441
mov eax, dword [rbx + 0x4bc4]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4bc4], eax
test dword [rcx + 0x14], 0x1000000
je 0x14005a451
mov byte [rbx + 0x3f66], 1
call fcn.140011e90
mov byte [rbx + 0x3f66], 0
call fcn.14000cbd0
call fcn.140011e90
mov eax, dword [0x140187670]
cmp eax, 7
jne 0x14005a5e9
mov rax, qword [0x140187620]
lea rcx, str.Misc_Aim_Settings________________________________________________________discord.gg_seyrix
xor edx, edx
mov r8d, 0x2a
or dword [rax + 0x4a00], 2
mov dword [rax + 0x4a20], 0x44228000
mov dword [rax + 0x4a24], 0x43e10000
mov dword [rax + 0x4a08], 1
call fcn.14000fb20
mov rcx, qword [0x140187620]
mov qword [rbp + 0x610], 0
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rdx, qword [rcx + 0x4000]
mov rax, qword [rdx + 0x108]
movsxd rcx, dword [rdx + 0x100]
mov ebx, dword [rax + rcx*4 - 4]
mov rax, qword [rdx]
cmp dword [rax + 0x404c], ebx
jne 0x14005a50d
lea r8, [0x1400f6bcf]
mov edx, ntohs
mov ecx, ebx
call fcn.14001dcd0
xor r9d, r9d
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, ebx
lea rcx, [0x1400f6bcf]
call fcn.14000c810
lea rdx, [0x14018765f]
lea rcx, str.Enable_Triggerbot
call fcn.140035ab0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184068]
mov dword [rbp + 0x610], 0x64
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Trigger_Dist
call fcn.140038ef0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184070]
mov dword [rbp + 0x610], 0x64
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Trigger_Speed
call fcn.140038ef0
mov r8d, dword [0x140187678]
lea rdx, [0x14004c140]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.14004c1e0
call fcn.140011e90
mov eax, dword [0x140187670]
cmp eax, 8
jne 0x14005a6b6
mov rax, qword [0x140187620]
lea rcx, str.Radar_Settings________________________________________________________discord.gg_seyrix
xor edx, edx
mov r8d, 0x2a
or dword [rax + 0x4a00], 2
mov dword [rax + 0x4a20], 0x44228000
mov dword [rax + 0x4a24], 0x43e10000
mov dword [rax + 0x4a08], 1
call fcn.14000fb20
lea rdx, [0x14018769b]
lea rcx, str.Radar_Enable
call fcn.140035ab0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x1401840a4]
mov dword [rbp + 0x610], 0x43fa0000
mov edx, 8
mov dword [rbp + 0x618], 0x40a00000
lea rcx, str.Radar_Size
call fcn.140038ef0
movdqa xmm0, xmmword [0x1400ff490]
lea rdx, str.Press_J_to_move_the_Radar_with_your_Mouse_
lea rcx, [rbp + 0x620]
movups xmmword [rbp + 0x620], xmm0
call fcn.140034250
call fcn.140011e90
mov eax, dword [0x140187670]
mov r15, qword [rsp + 0x7a0]
cmp eax, 4
jne 0x14005afad
mov rax, qword [0x140187620]
lea rcx, str.Extra_Settings________________________________________________________discord.gg_seyrix
xor edx, edx
mov r8d, 0x2a
or dword [rax + 0x4a00], 2
mov dword [rax + 0x4a20], 0x44228000
mov dword [rax + 0x4a24], 0x43e10000
mov dword [rax + 0x4a08], 1
call fcn.14000fb20
mov rcx, qword [0x140187620]
xor edx, edx
mov qword [rbp + 0x610], 0x43520000
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
lea rcx, str.Extra_Settings
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x404c], eax
jne 0x14005a76f
lea r8, str.Extra_Settings
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov r9d, 1
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, edi
lea rcx, str.Extra_Settings
call fcn.14000c810
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
lea rax, [rbp + 0x610]
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0x618]
mov qword [rsp + 0x20], rax
lea r8, [0x140184044]
mov dword [rbp + 0x610], 0x1f4
mov edx, 4
mov dword [rbp + 0x618], 1
lea rcx, str.Cache_Delay
call fcn.140038ef0
lea rdx, [0x140187709]
lea rcx, str.Use_RT_for_Aim
call fcn.140035ab0
lea rdx, [0x14018770a]
lea rcx, str.Use_LT_for_Aim
call fcn.140035ab0
movdqa xmm0, xmmword [0x1400ff420]
lea rdx, str.Press_the_Button_to_Quit_
lea rcx, [rbp + 0x620]
movups xmmword [rbp + 0x620], xmm0
call fcn.140034250
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff380]
mov dword [rbp + 0x620], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b1c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x15
je 0x14005a871
movups xmmword [rbx + 0x3b1c], xmm6
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff3d0]
mov dword [rbp + 0x620], socket
movups xmm0, xmmword [rbx + 0x3b2c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x16
je 0x14005a8bb
movups xmmword [rbx + 0x3b2c], xmm6
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff350]
mov dword [rbp + 0x620], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b3c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x17
je 0x14005a905
movups xmmword [rbx + 0x3b3c], xmm6
lea rcx, str.Unload_Cheat
call fcn.140034bd0
test al, al
je 0x14005ab6f
mov rcx, qword [0x140187688]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
mov ecx, reloc.WS2_32.dll_ntohs
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14005a9eb
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14005a9e2
lea rsi, str.CrosshairX.exe
nop word [rax + rax]
lea rdx, [rsp + 0x7c]
mov rcx, 0xffffffffffffffff
nop dword [rax]
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [rsi + rcx*2 + 2]
jne 0x14005a9d0
add rcx, 2
cmp rcx, 0xf
je 0x14005a9a2
movzx eax, word [rdx + rcx*2]
cmp ax, word [rsi + rcx*2]
je 0x14005a980
jmp 0x14005a9d0
mov r8d, dword [rsp + 0x58]
xor edx, edx
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14005a9d0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x14005a970
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, reloc.WS2_32.dll_ntohs
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14005aaaf
lea rdx, [rbp + 0x190]
mov dword [rbp + 0x190], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14005aaa6
lea rsi, str.MalwareBytes.exe
nop
lea rdx, [rbp + 0x1bc]
mov rcx, 0xffffffffffffffff
nop
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [rsi + rcx*2 + 2]
jne 0x14005aa92
add rcx, 2
cmp rcx, 0x11
je 0x14005aa62
movzx eax, word [rdx + rcx*2]
cmp ax, word [rsi + rcx*2]
je 0x14005aa40
jmp 0x14005aa92
mov r8d, dword [rbp + 0x198]
xor edx, edx
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14005aa92
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x190]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x14005aa30
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, reloc.WS2_32.dll_ntohs
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14005ab6f
lea rdx, [rbp + 0x3d0]
mov dword [rbp + 0x3d0], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14005ab66
lea rsi, str.MalwareBytes_protected.exe
lea rdx, [rbp + 0x3fc]
mov rcx, 0xffffffffffffffff
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [rsi + rcx*2 + 2]
jne 0x14005ab52
add rcx, 2
cmp rcx, 0x1b
je 0x14005ab22
movzx eax, word [rdx + rcx*2]
cmp ax, word [rsi + rcx*2]
je 0x14005ab00
jmp 0x14005ab52
mov r8d, dword [rbp + 0x3d8]
xor edx, edx
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14005ab52
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x3d0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x14005aaf2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [0x140187620]
mov r9d, r13d
mov eax, dword [r8 + 0x4a78]
cmp eax, r13d
jge 0x14005ab90
mov r9d, eax
test eax, eax
jle 0x14005abc9
nop dword [rax]
mov rcx, qword [r8 + 0x4a80]
dec r9d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
mov eax, dword [r8 + 0x4a78]
test r9d, r9d
jg 0x14005ab90
movdqa xmm0, xmmword [0x1400ff420]
lea rdx, str.Change_Menu_Key__Current_F2_
lea rcx, [rbp + 0x620]
movups xmmword [rbp + 0x620], xmm0
call fcn.140034250
mov r8d, dword [0x140187aac]
lea rdx, [0x14004c190]
mov ecx, dword [0x1401394f8]
call fcn.14004c1e0
call fcn.14000cbd0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140015b10
mov rcx, qword [0x140187620]
xor edx, edx
mov qword [rbp + 0x610], 0x43520000
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
lea rcx, str.Misc_Settings
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x404c], eax
jne 0x14005ac7c
lea r8, str.Misc_Settings
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov r9d, 1
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, edi
lea rcx, str.Misc_Settings
call fcn.14000c810
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
lea rdx, [0x14018769a]
lea rcx, str.Vsync
call fcn.140035ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140015b10
lea rcx, [0x1400f7c20]
call fcn.140034340
xor ecx, ecx
call fcn.1400091c0
test al, al
je 0x14005acf5
xor ecx, ecx
call fcn.140016a50
lea rcx, str.Vsync_syncs_the_Cheat_FPS_with_your_Monitor_so_it_has_the_best_Performance
call fcn.1400341e0
call fcn.140011e90
lea rdx, [0x14018761f]
lea rcx, str.Show_FPS
call fcn.140035ab0
lea rdx, [0x14018767f]
lea rcx, str.Performance_Mode
call fcn.140035ab0
call fcn.14000cbd0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140015b10
mov rcx, qword [0x140187620]
xor edx, edx
mov qword [rbp + 0x610], 0x43520000
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4000]
lea rcx, str.Config
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140005010
mov r8, qword [rbx]
mov edi, eax
cmp dword [r8 + 0x404c], eax
jne 0x14005ad94
lea r8, str.Config
mov edx, ntohs
mov ecx, eax
call fcn.14001dcd0
mov r9d, 1
mov dword [rsp + 0x20], r12d
lea r8, [rbp + 0x610]
mov edx, edi
lea rcx, str.Config
call fcn.14000c810
lea rcx, [0x1400f6bcf]
call fcn.1400341e0
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff380]
mov dword [rbp + 0x620], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b1c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x15
je 0x14005ae0a
movups xmmword [rbx + 0x3b1c], xmm6
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff3d0]
mov dword [rbp + 0x620], socket
movups xmm0, xmmword [rbx + 0x3b2c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x16
je 0x14005ae54
movups xmmword [rbx + 0x3b2c], xmm6
mov rbx, qword [0x140187620]
lea rdx, [rbp + 0x620]
movdqa xmm6, xmmword [0x1400ff350]
mov dword [rbp + 0x620], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b3c]
lea rcx, [rbx + 0x4a78]
movups xmmword [rbp + 0x624], xmm0
call fcn.14001e8f0
cmp dword [rbx + 0x4a74], 0x17
je 0x14005ae9e
movups xmmword [rbx + 0x3b3c], xmm6
lea rcx, str.Save_Config
call fcn.140034bd0
test al, al
je 0x14005aec8
lea rcx, str.C:config.txt
call fcn.140054c10
mov byte [0x140187bc8], 1
mov byte [0x140187bc9], 0
lea rcx, str.Load_Config
call fcn.140034bd0
test al, al
je 0x14005aef7
lea rcx, str.C:config.txt
call fcn.1400558d0
xor r9b, r9b
mov byte [0x140187bc9], 1
mov byte [0x140187bc8], r9b
jmp 0x14005aeff
movzx r9d, byte [0x140187bc8]
mov r8, qword [0x140187620]
mov eax, dword [r8 + 0x4a78]
cmp eax, r13d
jge 0x14005af20
mov r13d, eax
test eax, eax
jle 0x14005af59
nop dword [rax]
mov rcx, qword [r8 + 0x4a80]
dec r13d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
mov eax, dword [r8 + 0x4a78]
test r13d, r13d
jg 0x14005af20
movdqa xmm6, xmmword [0x1400ff260]
test r9b, r9b
je 0x14005af80
lea rdx, str.Config_saved_successfully
lea rcx, [rbp + 0x620]
movups xmmword [rbp + 0x620], xmm6
call fcn.140034250
cmp byte [0x140187bc9], 0
je 0x14005afa3
lea rdx, str.Config_loaded_successfully
lea rcx, [rbp + 0x620]
movups xmmword [rbp + 0x620], xmm6
call fcn.140034250
call fcn.14000cbd0
call fcn.140011e90
mov rdi, qword [rsp + 0x798]
mov rsi, qword [rsp + 0x790]
mov rcx, qword [rbp + 0x638]
xor rcx, rsp
call fcn.1400d59a0
movaps xmm6, xmmword [rsp + 0x750]
movaps xmm7, xmmword [rsp + 0x740]
add rsp, 0x760
pop r14
pop r13
pop r12
pop rbx
pop rbp
ret