Function at 0x140007d90
Capabilities:
Execute command
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x260
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1400c4040]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov edx, 0x1e
lea rcx, [rbp + 0x100]
call fcn.140006d00
nop
lea rcx, [rbp + 0x100]
call fcn.140007cd0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.Color_0F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, str._ThunderAimV2_____Loading_Started_n
call fcn.140003e90
lea rcx, [rbp - 0x40]
call fcn.140006e40
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rdi, qword [rbp - 0x30]
sub rax, rdi
cmp rax, 0xb
jb 0x140009de9
lea rax, [rbp - 0x40]
mov r12, qword [rbp - 0x40]
mov r13, qword [rbp - 0x28]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r15, [rdi + 0xb]
mov r14d, 0xf
mov ebx, r14d
lea rsi, [rsp + 0x60]
movabs rdx, 0x8000000000000000
mov r8d, 0x16
cmp r15, rbx
jbe 0x140007f03
mov rbx, r15
or rbx, r14
cmp rbx, rcx
jbe 0x140007ec5
mov rbx, rcx
lea rax, [rdx + 0x27]
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x140008067
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140007ef9
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140007ed9
xor esi, esi
jmp 0x140007efe
cmp rcx, 0x1000
jb 0x140007ef1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d00
jmp 0x140007ea6
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Crash_Logs]
movsd qword [rsi + rdi], xmm0
movzx eax, word [0x14009d328]
mov word [rsi + rdi + 8], ax
movzx eax, byte [0x14009d32a]
mov byte [rsi + rdi + 0xa], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140004aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400c40d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x14000800b
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000801c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008017
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008017
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140009d06
jmp 0x140007fcb
call fcn.140092320
movdqa xmm6, xmmword [0x1400b1170]
movdqu xmmword [rsp + 0x50], xmm6
xor r8d, r8d
mov word [rsp + 0x40], r8w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140008076
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000806e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000806e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
xor r8d, r8d
test bl, bl
je 0x140008278
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r14
lea rsi, [rsp + 0x60]
cmp r15, rbx
jbe 0x14000813c
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x1400080f7
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x14000826c
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140008132
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140008112
mov rsi, r8
jmp 0x140008137
cmp rcx, 0x1000
jb 0x14000812a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d1d
jmp 0x1400080d8
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Crash_Logs]
movsd qword [rdi + rsi], xmm0
movzx eax, word [0x14009d328]
mov word [rdi + rsi + 8], ax
movzx eax, byte [0x14009d32a]
mov byte [rdi + rsi + 0xa], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140004aa0
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.140093158
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140009def
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140008229
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008224
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008224
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqu xmmword [rsp + 0x50], xmm6
xor r8d, r8d
mov word [rsp + 0x40], r8w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000827b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008273
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
xor r8d, r8d
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r14
lea rsi, [rsp + 0x60]
cmp r15, rbx
jbe 0x140008339
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x1400082f4
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x140008453
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000832f
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000830f
mov rsi, r8
jmp 0x140008334
cmp rcx, 0x1000
jb 0x140008327
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d23
jmp 0x1400082d5
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Crash_Logs]
movsd qword [rdi + rsi], xmm0
movzx eax, word [0x14009d328]
mov word [rdi + rsi + 8], ax
movzx eax, byte [0x14009d32a]
mov byte [rdi + rsi + 0xa], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x20]
call fcn.140004aa0
mov rdx, qword [0x1400ffac0]
cmp rdx, 7
jbe 0x1400083fc
mov rcx, qword [0x1400ffaa8]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400083f7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000845a
mov rcx, r8
call fcn.140092320
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [0x1400ffaa8], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [0x1400ffab8], xmm1
movdqu xmmword [rbp + 0x30], xmm6
xor r8d, r8d
mov word [rbp + 0x20], r8w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140008469
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008461
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008461
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140092320
xor r8d, r8d
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r14
lea rsi, [rsp + 0x60]
cmp r15, rbx
jbe 0x140008527
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x1400084e2
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x140008681
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000851d
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400084fd
mov rsi, r8
jmp 0x140008522
cmp rcx, 0x1000
jb 0x140008515
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d29
jmp 0x1400084c3
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ThunderAim]
movsd qword [rdi + rsi], xmm0
movzx eax, word [0x14009d338]
mov word [rdi + rsi + 8], ax
movzx eax, byte [0x14009d33a]
mov byte [rdi + rsi + 0xa], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140004aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400c40d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x14000862f
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140008640
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000863b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000863b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140009d2f
jmp 0x1400085ef
call fcn.140092320
movdqu xmmword [rsp + 0x50], xmm6
xor eax, eax
mov word [rsp + 0x40], ax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000868d
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008688
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008688
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x1400086dc
lea r8, str.ThunderAim
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.14000b450
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.14000bd90
nop
lea rcx, [rbp]
call fcn.140006850
nop
lea rcx, [rbp]
call fcn.140005170
nop
lea rcx, [rbp - 0x60]
call fcn.14000ae20
mov r13, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x30]
mov r12, qword [rbp - 0x40]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 0x13
jb 0x140009e05
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r15, [rdi + 0x13]
mov rbx, r14
lea rsi, [rsp + 0x60]
cmp r15, rbx
jbe 0x1400087ad
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140008769
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x140008905
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400087a3
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140008783
xor esi, esi
jmp 0x1400087a8
cmp rcx, 0x1000
jb 0x14000879b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d46
jmp 0x14000874a
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimconfigs]
movups xmmword [rsi + rdi], xmm0
movzx eax, word [0x14009d350]
mov word [rsi + rdi + 0x10], ax
movzx eax, byte [0x14009d352]
mov byte [rsi + rdi + 0x12], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140004aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea r15, [0x1400c40d8]
mov qword [rsp + 0x28], r15
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x1400088b3
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400088c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400088bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140009d4c
jmp 0x140008873
call fcn.140092320
movdqu xmmword [rsp + 0x50], xmm6
xor esi, esi
mov word [rsp + 0x40], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140008911
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000890c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000890c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x140008960
lea r8, str.ThunderAimconfigs
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.14000b450
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.14000bd90
nop
lea rcx, [rbp]
call fcn.140006850
nop
lea rcx, [rbp]
call fcn.140005170
nop
lea rcx, [rbp - 0x60]
call fcn.14000ae20
mov r13, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x30]
mov r12, qword [rbp - 0x40]
lea rcx, [rbp + 0x120]
call fcn.140004100
nop
mov r8d, 0x13
lea rdx, str.ThunderAimconfigs
mov rcx, rax
call fcn.14000b380
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140004aa0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
mov qword [rsp + 0x28], r15
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140008a6b
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140008a7c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008a77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140009d63
jmp 0x140008a2d
call fcn.140092320
movdqu xmmword [rbp - 0x70], xmm6
mov word [rbp - 0x80], si
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140008ac5
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ac0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008ac0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1190]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140008b1c
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008b17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x140009074
lea r8, str.ThunderAimconfigs
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xe0]
call fcn.14000b450
nop
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14000bd90
nop
lea rcx, [rbp]
call fcn.140004100
nop
mov r8d, 0x13
lea rdx, str.ThunderAimconfigs
mov rcx, rax
call fcn.14000b380
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x80]
call fcn.140004aa0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x80]
call fcn.140007030
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x140008c31
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqu xmmword [rbp + 0x90], xmm6
mov word [rbp + 0x80], si
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140008c7e
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c79
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1190]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140008cd5
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008cc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008cc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1190]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140008d27
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008d22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008d22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqu xmmword [rbp + 0xd0], xmm6
mov word [rbp + 0xc0], si
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140008d7a
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008d75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008d75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
lea rcx, [rbp - 0x20]
call fcn.140004100
nop
mov r8d, 0xb
lea rdx, str.ThunderAim
mov rcx, rax
call fcn.14000b380
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0xa0]
call fcn.140004aa0
nop
lea rcx, [rbp + 0xa0]
call fcn.140006ab0
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x140008e58
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008e53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008e53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqu xmmword [rbp + 0xb0], xmm6
mov word [rbp + 0xa0], si
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140008ea5
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ea0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008ea0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1190]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140008ef4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008eef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008eef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
lea rcx, [rbp - 0x60]
call fcn.140004100
nop
mov r8d, 0xb
lea rdx, str.ThunderAim
mov rcx, rax
call fcn.14000b380
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], 0
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x20]
call fcn.140004aa0
nop
lea rcx, [rbp + 0x20]
call fcn.140006720
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140008fce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008fc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008fc9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqu xmmword [rbp + 0x30], xmm6
mov word [rbp + 0x20], si
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140009017
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009012
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009012
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1190]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140009068
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009063
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009063
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
mov r12, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x28]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 0x23
jb 0x140009cfa
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [rdi + 0x23]
mov rbx, r14
lea rsi, [rsp + 0x40]
cmp r15, rbx
jbe 0x140009145
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140009101
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x1400092a3
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000913b
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000911b
xor esi, esi
jmp 0x140009140
cmp rcx, 0x1000
jb 0x140009133
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d79
jmp 0x1400090e2
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimBYPASS_FOREGROUNDWINDOW]
movups xmmword [rsi + rdi], xmm0
movups xmm1, xmmword [0x14009d368]
movups xmmword [rsi + rdi + 0x10], xmm1
movzx eax, word [0x14009d378]
mov word [rsi + rdi + 0x20], ax
movzx eax, byte [0x14009d37a]
mov byte [rsi + rdi + 0x22], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140004aa0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400c40d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140009253
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140009264
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000925f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000925f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140009d7f
jmp 0x140009215
call fcn.140092320
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400092af
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400092aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x1400092dd
lea rdx, str.____Detected_Custom_Setting____BYPASS_FOREGROUNDWINDOW
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x140172bbc], 1
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [rdi + 0x1d]
mov rbx, r14
lea rsi, [rsp + 0x40]
cmp r15, rbx
jbe 0x14000939e
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x14000935a
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x1400094fc
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140009394
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140009374
xor esi, esi
jmp 0x140009399
cmp rcx, 0x1000
jb 0x14000938c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009d95
jmp 0x14000933b
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimENABLE_DEBUG_MODE]
movups xmmword [rdi + rsi], xmm0
movsd xmm0, qword [0x14009d3c8]
movsd qword [rdi + rsi + 0x10], xmm0
mov eax, dword [0x14009d3d0]
mov dword [rdi + rsi + 0x18], eax
movzx eax, byte [0x14009d3d4]
mov byte [rdi + rsi + 0x1c], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140004aa0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400c40d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x1400094ac
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400094bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400094b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400094b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140009d9b
jmp 0x14000946e
call fcn.140092320
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140009508
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009503
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009503
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x140009536
lea rdx, str.____Detected_Custom_Setting____ENABLE_DEBUG_MODE
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x140172b9e], 1
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [rdi + 0x1f]
mov rbx, r14
lea rsi, [rsp + 0x40]
cmp r15, rbx
jbe 0x1400095f7
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x1400095b3
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x140009761
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400095ed
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400095cd
xor esi, esi
jmp 0x1400095f2
cmp rcx, 0x1000
jb 0x1400095e5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009db1
jmp 0x140009594
call fcn.140091dd0
mov rsi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimBLOCK_DRIVER_UNLOAD]
movups xmmword [rdi + rsi], xmm0
movsd xmm0, qword [0x14009d420]
movsd qword [rdi + rsi + 0x10], xmm0
mov eax, dword [0x14009d428]
mov dword [rdi + rsi + 0x18], eax
movzx eax, word [0x14009d42c]
mov word [rdi + rsi + 0x1c], ax
movzx eax, byte [0x14009d42e]
mov byte [rdi + rsi + 0x1e], al
mov byte [rsi + r15], 0
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140004aa0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400c40d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140009711
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140009722
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000971d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000971d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140009db7
jmp 0x1400096d3
call fcn.140092320
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000976d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009768
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009768
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x14000979b
lea rdx, str.____Detected_Custom_Setting____BLOCK_DRIVER_UNLOAD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x140172b9f], 1
lea r15, [rbp - 0x40]
cmp r13, 0xf
cmova r15, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rsi, [rdi + 0x1c]
lea rbx, [rsp + 0x40]
cmp rsi, 0xf
jbe 0x140009850
mov r14, rsi
or r14, 0xf
movabs rax, 0x7fffffffffffffff
cmp r14, rax
jbe 0x140009811
mov r14, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140091dd0
test rax, rax
je 0x1400099a2
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000984b
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x14000982b
xor eax, eax
jmp 0x140009848
cmp rcx, 0x1000
jb 0x140009843
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009dcd
jmp 0x1400097f2
call fcn.140091dd0
mov rbx, rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimSPOOF_UNBAN_BETA]
movups xmmword [rdi + rbx], xmm0
movsd xmm0, qword [0x14009d478]
movsd qword [rdi + rbx + 0x10], xmm0
mov eax, dword [0x14009d480]
mov dword [rdi + rbx + 0x18], eax
mov byte [rbx + rsi], 0
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140092ef8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140004aa0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.140006770
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400c40d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140009952
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140009963
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000995e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000995e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140009dd3
jmp 0x140009914
call fcn.140092320
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400099ae
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400099a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400099a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
test bl, bl
je 0x140009c17
lea rdx, str.____Spoofing...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xe0]
call fcn.140007ce0
nop
lea r8, str.RobloxGlobalBasicSettings_13.xml
mov rdx, rax
lea rcx, [rbp]
call fcn.14000b5a0
nop
lea rcx, [rbp + 0xe0]
call fcn.14000ae20
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.14000bd90
nop
lea rcx, [rbp - 0x60]
call fcn.1400066b0
movzx ebx, al
lea rcx, [rbp - 0x60]
call fcn.140005170
test bl, bl
je 0x140009a4e
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.14000bd90
nop
lea rcx, [rbp - 0x60]
call fcn.140006720
nop
lea rcx, [rbp - 0x60]
call fcn.140005170
lea rdx, str.SystemReg
lea rcx, [rbp - 0x20]
call fcn.14000aae0
nop
lea rdx, str.SYSTEMCurrentControlSetControl
lea rcx, [rbp - 0x60]
call fcn.14000aae0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.140029f20
nop
lea rcx, [rbp - 0x60]
call fcn.140005170
nop
lea rcx, [rbp - 0x20]
call fcn.140005170
lea rdx, str.UUID
lea rcx, [rbp - 0x20]
call fcn.140007b80
nop
lea rdx, str.Win32_ComputerSystemProduct
lea rcx, [rbp - 0x60]
call fcn.140007b80
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.14002c2e0
nop
lea rcx, [rbp - 0x60]
call fcn.14000ae20
nop
lea rcx, [rbp - 0x20]
call fcn.14000ae20
lea rdx, str.SerialNumber
lea rcx, [rbp - 0x20]
call fcn.140007b80
nop
lea rdx, str.Win32_PhysicalMemory
lea rcx, [rbp - 0x60]
call fcn.140007b80
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.14002c2e0
nop
lea rcx, [rbp - 0x60]
call fcn.14000ae20
nop
lea rcx, [rbp - 0x20]
call fcn.14000ae20
call fcn.14002d980
lea rdx, str.MachineGuid
lea rcx, [rbp - 0x20]
call fcn.14000aae0
nop
lea rdx, str.SOFTWAREMicrosoftCryptography
lea rcx, [rbp - 0x60]
call fcn.14000aae0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.140029f20
nop
lea rcx, [rbp - 0x60]
call fcn.140005170
nop
lea rcx, [rbp - 0x20]
call fcn.140005170
lea rdx, str.LastLoggedOnUser
lea rcx, [rbp - 0x20]
call fcn.14000aae0
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionAuthenticationLogonUI
lea rcx, [rbp - 0x60]
call fcn.14000aae0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.140029f20
nop
lea rcx, [rbp - 0x60]
call fcn.140005170
nop
lea rcx, [rbp - 0x20]
call fcn.140005170
lea rdx, str.RegisteredOwner
lea rcx, [rbp - 0x20]
call fcn.14000aae0
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rbp - 0x60]
call fcn.14000aae0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.140029f20
nop
lea rcx, [rbp - 0x60]
call fcn.140005170
nop
lea rcx, [rbp - 0x20]
call fcn.140005170
call fcn.14002b440
lea rdx, str.____Spoofing_Done.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp]
call fcn.14000ae20
lea rcx, [0x1400074d0]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.140017d90
lea rcx, str.ThunderAimV2____press_enter_to_close_cheat_n
call fcn.140003e90
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
cmp r13, 0xf
jbe 0x140009c7f
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140009c76
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009c76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140092320
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140009cc3
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009cbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009cbe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.140091db0
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400040e0
nop
call fcn.140004040
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.140004040
int3
call fcn.140004040
int3
call fcn.140004040
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.140004040
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.140004040
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.140004040
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.140004040
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.140004040
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140005d90
nop
call fcn.1400040e0
nop
shr rdx, 0x20
lea r8, [rsp + 0x40]
lea rcx, str.create_directory
call fcn.140005ca0
nop
call fcn.1400040e0
int3