Function at 0x140001bf0
Capabilities:
Enumerate processes
Execute command
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor r12d, r12d
lea rcx, [0x1400065a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.mode_70_12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._Prss_0K_Bypass_Script_Zc_AnntiCh3at
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
mov r9d, 0x40
lea r8, [0x14000663c]
lea rdx, str._nENG__n_n_Zc_Hitbox_detection_operation
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [0x1400065a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str._e_37m_e_97m_e_37m__e_37mScanning_e_36mAntiCheat_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
movdqa xmm1, xmmword [0x140006e20]
movdqu xmmword [rbp + 0x38], xmm1
movsd xmm0, qword [str.Zc_AntiHitbox]
movsd qword [rbp + 0x28], xmm0
mov eax, dword [0x140006688]
mov dword [rbp + 0x30], eax
movzx eax, byte [0x14000668c]
mov byte [rbp + 0x34], al
mov byte [rbp + 0x35], r12b
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov qword [rbp], r12
mov edx, 0xd
lea rcx, [rbp - 0x10]
call fcn.140003ca0
mov r8d, 0xd
lea rdx, [rbp + 0x28]
mov rbx, qword [rbp - 0x10]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0xd]
mov qword [rbp - 8], rax
mov dword [rbp - 0x68], 0xffffffff
call fcn.1400013f0
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
jne 0x140001d7f
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str._e_37m_e_97m_e_37m__Failed_to_open_process._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003570
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rax
lea r8, [rbp - 0x10]
mov rdx, r14
lea rcx, [rbp - 0x28]
call fcn.1400018e0
nop
mov rbx, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x20]
cmp rbx, rsi
jne 0x140001e00
lea rdx, [0x1400066c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.____Pattern_Not_Found_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x28]
cmp rbx, rsi
je 0x140001e94
nop word [rax + rax]
mov rdi, qword [rbx]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp - 0x68]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140001e6e
lea rdx, str.Failed_to_write_memory_at_address:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003570
lea rdx, [0x1400011c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001e87
lea rcx, [0x1400065a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003750
add rbx, 8
cmp rbx, rsi
jne 0x140001e00
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.__e_37m___Successfully_Bypass_e_32mAntiCheate_37m_Next_to_SetHotkey_in_e_31m3e_37m_seconds_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rcx, [rsp + 0x48]
call fcn.1400011e0
movabs rdx, 0x7fffffff4d2fa1ff
mov ecx, 0xb2d05e00
movabs r8, 0x7fffffffffffffff
mov rax, qword [rsp + 0x48]
cmp rax, rdx
jge 0x140001f0d
add rcx, rax
mov qword [rsp + 0x40], rcx
jmp 0x140001f12
mov qword [rsp + 0x40], r8
lea rcx, [rsp + 0x40]
call fcn.1400040c0
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.e_32m___________________________1._e_32mToggle
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.e_93m___________________________2._e_93mHolde_0me_37m___e_96mHead_Doesn_Float_e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.e_37mSelect_Mode____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp - 0x30]
dec eax
cmp eax, 1
jbe 0x140001ff9
mov ebx, 1
jmp 0x140002fe3
lea rcx, [0x1400065a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.mode_70_12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.e_37m____________________e_4me_90mCh3at_level_head_lock_as_you_wishe_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.e_32m___________________________1._e_32mLow
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.e_93m___________________________2._e_93mMediume_37m___e_32mRecommended_e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.e_91m___________________________3._e_91mHigh
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, str.e_37mSelect_Ch3at_level____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [rbp - 0x2c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
lea rcx, [0x1400065a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.mode_70_15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140002214
mov dword [rbp + 0x50], 0x238
lea rdx, [rbp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14000220b
nop dword [rax]
lea rdx, [0x1400065a0]
lea rcx, [rbp + 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x1400022c8
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400021e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x140006598]
lea rcx, [rbp + 8]
call fcn.1400032e0
nop
call fcn.1400012c0
test eax, eax
je 0x140002fac
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x140002f8b
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov rsi, r12
mov qword [rsp + 0x58], r12
mov qword [rbp - 0x38], r12
movdqu xmmword [rbp - 0x60], xmm1
mov r15, r12
mov qword [rbp - 0x50], r12
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
mov ecx, dword [rbp - 0x2c]
sub ecx, 1
je 0x140002631
sub ecx, 1
je 0x140002484
cmp ecx, 1
je 0x1400022d7
mov r9d, 0x10
lea r8, [0x140006b40]
lea rdx, str.Invalid_Option_Selected
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 1
mov r13, qword [rbp - 0x48]
mov r12, qword [rbp - 0x60]
jmp 0x140002e14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x7c]
jmp 0x14000221b
lea rdx, str.e_37m___________________e_90mValue_Step_High_Successful_e_37m_e_32m1_2e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [0x140006da0]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400015a0
lea rcx, [rbp - 0x48]
cmp rcx, rax
je 0x140002340
mov r13, qword [rax]
mov qword [rbp - 0x48], r13
mov r14, qword [rax + 8]
mov qword [rbp - 0x40], r14
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
mov qword [rbp - 0x38], rcx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
jmp 0x140002348
mov r14, qword [rbp - 0x40]
mov r13, qword [rbp - 0x48]
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140002398
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002393
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002393
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
lea rdx, str.e_37m___________________e_90mValue_Step_High_Successful_e_37m_e_32m2_2e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [0x140006cf0]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400015a0
lea rcx, [rbp - 0x60]
cmp rcx, rax
je 0x1400023fe
mov r12, qword [rax]
mov qword [rbp - 0x60], r12
mov rsi, qword [rax + 8]
mov qword [rbp - 0x58], rsi
mov rcx, qword [rax + 0x10]
mov qword [rbp - 0x50], rcx
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
jmp 0x140002406
mov rsi, qword [rbp - 0x58]
mov r12, qword [rbp - 0x60]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140002451
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000244c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000244c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
lea rax, [0x140006db0]
mov qword [rbp - 0x78], rax
lea rax, [0x140006d00]
mov qword [rsp + 0x78], rax
lea r15, [0x140006dc0]
mov qword [rsp + 0x40], r15
lea r15, [0x140006d48]
mov qword [rbp - 0x80], r15
jmp 0x1400027c2
lea rdx, str.e_37m___________________e_90mValue_Step_Medium_Successful_e_37m_e_32m1_2e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [0x140006d38]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400015a0
lea rcx, [rbp - 0x48]
cmp rcx, rax
je 0x1400024ed
mov r13, qword [rax]
mov qword [rbp - 0x48], r13
mov r14, qword [rax + 8]
mov qword [rbp - 0x40], r14
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
mov qword [rbp - 0x38], rcx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
jmp 0x1400024f5
mov r14, qword [rbp - 0x40]
mov r13, qword [rbp - 0x48]
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140002545
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002540
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002540
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
lea rdx, str.e_37m___________________e_90mValue_Step_Medium_Successful_e_37m_e_32m2_2e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [0x140006d10]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400015a0
lea rcx, [rbp - 0x60]
cmp rcx, rax
je 0x1400025ab
mov r12, qword [rax]
mov qword [rbp - 0x60], r12
mov rsi, qword [rax + 8]
mov qword [rbp - 0x58], rsi
mov rcx, qword [rax + 0x10]
mov qword [rbp - 0x50], rcx
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
jmp 0x1400025b3
mov rsi, qword [rbp - 0x58]
mov r12, qword [rbp - 0x60]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400025fe
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400025f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
lea rax, [0x140006d90]
mov qword [rbp - 0x78], rax
lea rax, [0x140006d70]
mov qword [rsp + 0x78], rax
lea r15, [0x140006d80]
mov qword [rsp + 0x40], r15
lea rax, [0x140006d28]
mov qword [rbp - 0x80], rax
jmp 0x1400027c2
lea rdx, str.e_37m___________________e_90mValue_Step_Low_Successful_e_37m_e_32m1_2e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [0x140006d58]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400015a0
lea rcx, [rbp - 0x48]
cmp rcx, rax
je 0x14000269a
mov r13, qword [rax]
mov qword [rbp - 0x48], r13
mov r14, qword [rax + 8]
mov qword [rbp - 0x40], r14
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
mov qword [rbp - 0x38], rcx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
jmp 0x1400026a2
mov r14, qword [rbp - 0x40]
mov r13, qword [rbp - 0x48]
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400026f2
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
lea rdx, str.e_37m___________________e_90mValue_Step_Low_Successful_e_37m_e_32m2_2e_37m_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140003920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [0x140006d58]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400015a0
lea rcx, [rbp - 0x60]
cmp rcx, rax
je 0x140002758
mov r12, qword [rax]
mov qword [rbp - 0x60], r12
mov rsi, qword [rax + 8]
mov qword [rbp - 0x58], rsi
mov rcx, qword [rax + 0x10]
mov qword [rbp - 0x50], rcx
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
jmp 0x140002760
mov rsi, qword [rbp - 0x58]
mov r12, qword [rbp - 0x60]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400027ab
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
lea rax, [0x140006de0]
mov qword [rbp - 0x78], rax
lea rax, [0x140006dd0]
mov qword [rsp + 0x40], rax
lea rcx, [0x1400065a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [0x140006644]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003960
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
mov r8, qword [rbp + 0x18]
mov rcx, rax
call fcn.140004200
lea rdx, [0x140003b30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.e_90m___________________Setting_Hotkey_:_e_37m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
lea rdx, [rsp + 0x31]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003b70
movsx ecx, byte [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov dword [rsp + 0x50], eax
lea rdx, str.e_32m___________________Enjoy_Your_Game_Used_My_e_33mCheat.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003570
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov r9, rax
cmp rbx, 0x989680
jne 0x1400028de
imul rcx, r9, 0x64
jmp 0x140002957
cmp rbx, 0x16e3600
jne 0x14000293c
movabs r10, 0xb2f4fc0794908cf3
mov rax, r10
imul r9
add rdx, r9
sar rdx, 0x18
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
imul r8, rdx, 0x3b9aca00
imul rcx, rdx, 0x16e3600
sub r9, rcx
imul rcx, r9, 0x3b9aca00
mov rax, r10
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rcx, rdx
shr rcx, 0x3f
add rcx, rdx
add rcx, r8
jmp 0x140002957
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rcx, rax
movabs rax, 0x7fffffff4d2fa1ff
cmp rcx, rax
jge 0x140002970
mov eax, 0xb2d05e00
add rax, rcx
jmp 0x14000297a
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.1400040c0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor bl, bl
mov byte [rsp + 0x31], bl
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140002df0
movzx r15d, bl
call fcn.1400012c0
test eax, eax
je 0x140002e5d
mov eax, dword [rbp - 0x30]
cmp eax, 1
jne 0x140002be2
movsx ecx, byte [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140002bd8
cmp byte [rsp + 0x31], 0
jne 0x140002d9f
test bl, bl
sete al
mov byte [rsp + 0x30], al
mov byte [rsp + 0x31], 1
mov rbx, r13
cmp r13, r14
je 0x140002b08
test r15b, r15b
jne 0x140002a51
mov r13, qword [rsp + 0x78]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, r14
jne 0x140002a20
mov r13, qword [rsp + 0x38]
jmp 0x140002b11
mov r13, qword [rbp - 0x78]
nop word [rax + rax]
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, r14
jne 0x140002a60
mov r13, qword [rsp + 0x38]
movzx eax, byte [0x14000970c]
test al, al
je 0x140002aaf
mov edx, 0x1f4
mov ecx, 0x55
call qword [sym.imp.KERNEL32.dll_Beep]
xor al, al
mov byte [0x14000970c], al
mov rbx, r12
cmp r12, rsi
je 0x140002ba3
test r15b, r15b
jne 0x140002b33
mov r13, qword [rbp - 0x80]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, rsi
jne 0x140002ad0
movzx eax, byte [0x14000970c]
mov r13, qword [rsp + 0x38]
jmp 0x140002ba8
test r15b, r15b
jne 0x140002a8c
movzx eax, byte [0x14000970c]
test al, al
jne 0x140002aaf
mov edx, 0x258
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
mov al, 1
jmp 0x140002aa9
mov r13, qword [rsp + 0x40]
nop dword [rax + rax]
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, rsi
jne 0x140002b40
movzx eax, byte [0x14000970c]
mov r13, qword [rsp + 0x38]
test al, al
je 0x140002b8e
mov edx, 0x1f4
mov ecx, 0x55
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [0x14000970c], 0
mov edx, 0xc8
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x140002d9a
test r15b, r15b
jne 0x140002b73
test al, al
jne 0x140002bc3
mov edx, 0x258
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [0x14000970c], 1
mov edx, 0xc8
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x140002d9a
mov byte [rsp + 0x31], 0
jmp 0x140002d9f
cmp eax, 2
jne 0x140002d9f
movsx ecx, byte [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140002cd3
test bl, bl
jne 0x140002d9f
mov byte [rsp + 0x30], 1
mov rbx, r13
xor r15d, r15d
cmp r13, r14
je 0x140002c48
mov r13, qword [rsp + 0x78]
nop dword [rax]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, r14
jne 0x140002c20
mov r13, qword [rsp + 0x38]
movzx eax, byte [0x14000970c]
test al, al
jne 0x140002c6b
mov edx, 0x258
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
mov al, 1
mov byte [0x14000970c], al
mov rbx, r12
cmp r12, rsi
je 0x140002caf
mov r13, qword [rbp - 0x80]
nop word [rax + rax]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, rsi
jne 0x140002c80
movzx eax, byte [0x14000970c]
mov r13, qword [rsp + 0x38]
test al, al
jne 0x140002d9a
mov edx, 0x258
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [0x14000970c], 1
jmp 0x140002d9a
test bl, bl
je 0x140002d9f
xor al, al
mov byte [rsp + 0x30], al
xor r15d, r15d
cmp r13, r14
je 0x140002d18
mov rbx, r13
mov r13, qword [rbp - 0x78]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, r14
jne 0x140002cf0
mov r13, qword [rsp + 0x38]
movzx eax, byte [0x14000970c]
test al, al
je 0x140002d3b
mov edx, 0x1f4
mov ecx, 0x55
call qword [sym.imp.KERNEL32.dll_Beep]
xor al, al
mov byte [0x14000970c], al
cmp r12, rsi
je 0x140002d7f
mov rbx, r12
mov r13, qword [rsp + 0x40]
nop dword [rax + rax]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r13
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, rsi
jne 0x140002d50
movzx eax, byte [0x14000970c]
mov r13, qword [rsp + 0x38]
test al, al
je 0x140002d9a
mov edx, 0x1f4
mov ecx, 0x55
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [0x14000970c], 0
movzx ebx, byte [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400011e0
mov rax, qword [rbp - 0x70]
movabs rcx, 0x7ffffffffa0a1eff
cmp rax, rcx
jge 0x140002dc3
add rax, 0x5f5e100
jmp 0x140002dcd
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.1400040c0
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400029b4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0xc8
mov ecx, 0x82
call qword [sym.imp.KERNEL32.dll_Beep]
xor ebx, ebx
mov rsi, qword [rsp + 0x58]
mov r15, qword [rbp - 0x50]
test r12, r12
je 0x140002f3f
sub r15, r12
sar r15, 3
lea rdx, [r15*8]
mov rax, r12
cmp rdx, 0x1000
jb 0x140002f36
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r12, r12
je 0x140002ea0
mov rax, qword [rbp - 0x50]
sub rax, r12
sar rax, 3
lea rdx, [rax*8]
mov rax, r12
cmp rdx, 0x1000
jb 0x140002e97
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002e56
mov rcx, r12
call fcn.1400046b0
nop
test r13, r13
je 0x140002ee6
mov rax, qword [rsp + 0x58]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x140002ede
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f74
mov rcx, r13
call fcn.1400046b0
xor r12d, r12d
mov ebx, r12d
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x140002fd2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fcd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r12
call fcn.1400046b0
nop
test r13, r13
je 0x140002f83
sub rsi, r13
sar rsi, 3
lea rdx, [rsi*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x140002f7b
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.1400046b0
xor r12d, r12d
jmp 0x140002eec
mov r9d, 0x10
lea r8, [0x140006530]
lea rdx, str.Failed_To_Process
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140002ee9
mov r9d, 0x10
lea r8, [0x140006530]
lea rdx, str.Process_Not_Found
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140002ee9
call fcn.1400046b0
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r12w
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x140003038
mov rax, qword [rbp - 0x18]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003027
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003027
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
mov qword [rbp - 0x28], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140003076
mov rdx, qword [rbp]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003070
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003070
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x1400030b4
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400030af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400046b0
mov eax, ebx
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.140004690
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret