Function at 0x1800586d0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov rax, qword [0x180141080]
xor rax, rsp
mov qword [rbp + 0x240], rax
lea r9, str.MyEvent
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x180058736
mov r9d, 0x40
lea r8, str.Information
lea rdx, str.DD_running...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x18005adfc
mov qword [rsp + 0x3a8], rsi
call fcn.1800584b0
test eax, eax
jne 0x18005876c
xor r9d, r9d
lea r8, [0x180133cfc]
lea rdx, [0x180133d00]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x3a0], rbx
mov r8d, eax
mov rbx, qword [0x180141a20]
xor edx, edx
mov qword [rsp + 0x3b0], rdi
mov ecx, 0x1fffff
mov qword [rsp + 0x378], r14
mov dword [rbx + 0x10], eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov edx, 0xe0c36e0
mov qword [rbx + 8], rax
call fcn.18000ae50
mov edi, eax
lea edx, [rax + 0x8fe9514]
call fcn.18000ae50
lea edx, [rdi + 0x8c5e224]
lea ebx, [rax + 0x3c]
call fcn.18000ae50
add eax, 0x88
mov dword [0x1801419b8], ebx
mov dword [0x1801419a8], eax
lea eax, [rdi + 0x8fd0830]
mov dword [0x180141984], eax
test eax, eax
jne 0x180058801
xor r9d, r9d
lea r8, str.Go_to_tab_FIX___FIX_MEM_
lea rdx, str.GAME_NOT_FOUND___Game_runnig...___n___The_problem_may_be_with_anticheat_from_another_game_or_you_did_the_wrong_instructions.__n_n__GAME_CH
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [0x180141a28]
lea r8, str.subWin
xor r9d, r9d
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowExW]
xorps xmm0, xmm0
lea rdx, [0x1801419f8]
mov rcx, rax
movups xmmword [0x1801419f8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x180141a00]
lea rbx, reloc.WLDAP32.dll_Ordinal_32
sub eax, dword [0x1801419f8]
lea rcx, [rbp + 0x1c0]
mov dword [0x180141a30], eax
xor r14d, r14d
mov eax, dword [0x180141a04]
xorps xmm0, xmm0
sub eax, dword [0x1801419fc]
mov dword [0x180141a1c], eax
lea rax, [0x1800585f0]
mov qword [rbp + 0x1c8], rax
mov dword [rbp + 0x1c0], 0x50
mov dword [rbp + 0x1c4], 3
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], r14
movdqa xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], rbx
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], r14
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [0x180141a1c]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r14
mov r8, rbx
mov qword [rsp + 0x50], r14
mov rdx, rbx
mov qword [rsp + 0x48], r14
mov ecx, 0xa0
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], eax
mov eax, dword [0x180141a30]
mov dword [rsp + 0x30], eax
mov eax, dword [0x1801419fc]
mov dword [rsp + 0x28], eax
mov eax, dword [0x1801419f8]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x180141a08], rax
test rax, rax
je 0x18005addc
mov qword [rbp + 0x160], rax
lea rbx, [0x180141a78]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
lea rdi, [0x180141a70]
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x130]
mov esi, 1
mov qword [rsp + 0x370], r15
lea r15, [0x180141a60]
mov qword [rbp + 0x144], r14
mov qword [rsp + 0x40], r15
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x228]
mov dword [rsp + 0x28], 2
mov edx, esi
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x158], 2
mov qword [rbp + 0x170], 2
mov qword [rbp + 0x130], r14
mov dword [rbp + 0x140], Ordinal_30
mov dword [rbp + 0x138], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x13c], esi
mov dword [rbp + 0x154], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x14c], rsi
mov qword [rbp + 0x168], rsi
mov dword [rbp + 0x228], 0xb000
mov dword [rbp + 0x22c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x180058a6c
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x130]
mov qword [rsp + 0x40], r15
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, 5
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x228]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x180058a90
call fcn.180058570
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, esi
jmp 0x18005add4
mov rcx, qword [0x180141a60]
lea r9, [rbp + 0x128]
mov qword [rsp + 0x388], r12
lea r8, [0x180134428]
mov qword [rsp + 0x380], r13
xor edx, edx
movaps xmmword [rsp + 0x360], xmm6
mov rax, qword [rcx]
movaps xmmword [rsp + 0x350], xmm7
call qword [rax + 0x48]
mov rcx, qword [0x180141a70]
lea r9, [0x180141a58]
mov rdx, qword [rbp + 0x128]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
movdqa xmm0, xmmword [0x180134660]
mov r9d, 2
mov rcx, qword [0x180141a08]
mov r8b, 0xff
xor edx, edx
movdqu xmmword [rbp + 0x218], xmm0
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, qword [0x180141a08]
lea rdx, [rbp + 0x218]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov eax, dword [0x180141a1c]
mov rdx, 0xffffffffffffffff
mov r9d, dword [0x1801419fc]
mov r8d, dword [0x1801419f8]
mov rcx, qword [0x180141a08]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], eax
mov eax, dword [0x180141a30]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [0x180141a08]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x180141a08]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdi, qword [0x1801419e0]
mov ecx, 0x6198
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [0x1801419e0]
mov r11, rax
test r8, r8
je 0x180058c13
movsx r10, word [r8 + 0x6048]
lea rdx, [r8 + 0x604c]
mov r9d, dword [r8 + 0x3f60]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x180058c08
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x604c]
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r14d
inc word [rdx + 4]
inc dword [r8 + 0x6040]
test r11, r11
je 0x180058c24
xor edx, edx
mov rcx, r11
call fcn.180013a70
jmp 0x180058c27
mov rax, r14
mov qword [0x1801419e0], rax
call fcn.1800182a0
test rdi, rdi
je 0x180058c41
mov qword [0x1801419e0], rdi
jmp 0x180058c48
mov rdi, qword [0x1801419e0]
mov dword [rdi + 0x38f8], 0x41700000
mov dword [rdi + 0x38fc], 0x41700000
mov dword [rdi + 0x3900], 0x40e00000
mov dword [rdi + 0x392c], 0x40a00000
mov dword [rdi + 0x3930], 0x40a00000
mov dword [rdi + 0x3934], 0x40e00000
mov dword [rdi + 0x393c], 0x41400000
mov dword [rdi + 0x3940], 0x41000000
mov dword [rdi + 0x3944], 0x41000000
mov dword [rdi + 0x3948], 0x40c00000
mov dword [rdi + 0x395c], 0x41c80000
mov dword [rdi + 0x3964], 0x41700000
mov dword [rdi + 0x3968], 0x41100000
mov dword [rdi + 0x396c], 0x41a00000
mov dword [rdi + 0x3970], 0x41400000
mov dword [rdi + 0x3924], 0x40e00000
movdqa xmm7, xmmword [0x180134920]
movdqa xmm4, xmmword [0x180134970]
movdqa xmm2, xmmword [0x1801349b0]
movdqa xmm3, xmmword [0x1801347a0]
movdqa xmm6, xmmword [0x180134900]
movdqa xmm0, xmmword [0x180134a80]
movdqa xmm1, xmmword [0x1801349f0]
movdqa xmm5, xmmword [0x180134a50]
movups xmmword [rdi + 0x39d4], xmm0
movdqa xmm0, xmmword [0x180134820]
movups xmmword [rdi + 0x39f4], xmm0
movdqa xmm0, xmmword [0x180134760]
movups xmmword [rdi + 0x3a24], xmm0
movdqa xmm0, xmmword [0x1801347d0]
movups xmmword [rdi + 0x3a94], xmm0
movdqa xmm0, xmmword [0x1801347e0]
movups xmmword [rdi + 0x39e4], xmm1
movdqa xmm1, xmmword [0x1801346b0]
movups xmmword [rdi + 0x3ab4], xmm0
movdqa xmm0, xmmword [0x1801349c0]
movups xmmword [rdi + 0x3a34], xmm1
movdqa xmm1, xmmword [0x180134910]
movups xmmword [rdi + 0x3ad4], xmm0
movdqa xmm0, xmmword [0x180134a20]
movups xmmword [rdi + 0x3aa4], xmm1
movdqa xmm1, xmmword [0x180134980]
movups xmmword [rdi + 0x3b14], xmm0
movdqa xmm0, xmmword [0x180134940]
movups xmmword [rdi + 0x3ac4], xmm1
movdqa xmm1, xmmword [0x180134a00]
movups xmmword [rdi + 0x3b54], xmm0
movups xmmword [rdi + 0x3ae4], xmm1
movdqa xmm1, xmmword [0x1801349d0]
movups xmmword [rdi + 0x3a54], xmm2
movups xmmword [rdi + 0x3b34], xmm2
movdqa xmm2, xmmword [0x1801348b0]
movups xmmword [rdi + 0x3a04], xmm7
movups xmmword [rdi + 0x3a14], xmm7
movups xmmword [rdi + 0x3a44], xmm4
movups xmmword [rdi + 0x3a64], xmm3
movups xmmword [rdi + 0x3a74], xmm6
movups xmmword [rdi + 0x3a84], xmm6
movups xmmword [rdi + 0x3af4], xmm5
movups xmmword [rdi + 0x3b04], xmm5
movups xmmword [rdi + 0x3b24], xmm4
movups xmmword [rdi + 0x3b44], xmm3
movups xmmword [rdi + 0x3b64], xmm4
movups xmmword [rdi + 0x3b74], xmm3
movups xmm0, xmmword [rdi + 0x3a24]
movups xmmword [rdi + 0x3b94], xmm1
movdqa xmm1, xmmword [0x180134800]
movups xmmword [rdi + 0x3b84], xmm0
xorps xmm0, xmm0
movups xmmword [rdi + 0x3bb4], xmm0
movdqa xmm0, xmmword [0x180134860]
movups xmmword [rdi + 0x3be4], xmm0
movdqa xmm0, xmmword [0x180134950]
movups xmmword [rdi + 0x3bc4], xmm1
movdqa xmm1, xmmword [0x180134870]
movups xmmword [rdi + 0x3c04], xmm0
movups xmmword [rdi + 0x3ba4], xmm2
movups xmmword [rdi + 0x3bd4], xmm2
movups xmmword [rdi + 0x3bf4], xmm1
movups xmmword [rdi + 0x3c14], xmm6
movups xmmword [rdi + 0x3c24], xmm7
movdqa xmm0, xmmword [0x180134a10]
movdqa xmm1, xmmword [0x1801349a0]
mov rcx, qword [0x180141a08]
movups xmmword [rdi + 0x3c34], xmm0
movdqa xmm0, xmmword [0x1801348e0]
movups xmmword [rdi + 0x3c54], xmm0
movdqa xmm0, xmmword [0x180134790]
movups xmmword [rdi + 0x3c44], xmm1
movdqa xmm1, xmmword [0x1801348d0]
movups xmmword [rdi + 0x3cc4], xmm0
movdqa xmm0, xmmword [0x180134a70]
movups xmmword [rdi + 0x3c64], xmm1
movdqa xmm1, xmmword [0x180134830]
movups xmmword [rdi + 0x3ce4], xmm0
movdqa xmm0, xmmword [0x180134740]
movups xmmword [rdi + 0x3cf4], xmm1
movdqa xmm1, xmmword [0x180134780]
movups xmmword [rdi + 0x3d04], xmm0
movups xmmword [rdi + 0x3cd4], xmm5
movups xmmword [rdi + 0x3d14], xmm1
call fcn.180042540
call fcn.180042370
xorps xmm2, xmm2
lea rdx, [rbp + 0x90]
xorps xmm6, xmm6
movaps xmmword [rbp + 0xb0], xmm2
xor eax, eax
movaps xmmword [rbp + 0xc0], xmm2
movups xmmword [rbp + 0x10], xmm2
mov ecx, 0xffff
mov qword [rbp + 0x80], rax
movups xmmword [rbp + 0x50], xmm2
mov word [rbp + 0x54], cx
movups xmmword [rbp], xmm2
mov byte [rbp + 0xc], al
movaps xmm0, xmmword [rbp]
movaps xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0x40], xmm2
mov qword [rbp + 0x1b0], rax
lea rax, [0x1801052f0]
movups xmmword [rbp + 0x180], xmm6
mov word [rbp + 0x184], cx
mov rcx, qword [rdi + 0x38]
movups xmmword [rbp + 0x140], xmm6
mov dword [rbp + 0x18], 2
movups xmmword [rbp + 0x170], xmm6
mov dword [rbp + 0x1c], esi
movaps xmm1, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0xa0], xmm1
movups xmmword [rbp + 0x130], xmm6
mov dword [rbp + 0x44], 0x7f7fffff
movaps xmm0, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0xd0], xmm0
movsd xmm0, qword [rbp + 0x80]
movups xmmword [rbp + 0x150], xmm6
mov dword [rbp + 0x50], 0x3f800000
movaps xmm1, xmmword [rbp + 0x50]
movsd qword [rbp + 0x110], xmm0
mov byte [rbp + 0x13c], sil
mov dword [rbp + 0x174], 0x7f7fffff
mov dword [rbp + 0x180], 0x3f800000
mov byte [rbp + 0x178], sil
mov byte [rbp + 0x150], sil
mov dword [rbp + 0x148], 3
mov dword [rbp + 0x14c], 3
movaps xmmword [rbp + 0xe0], xmm1
movaps xmmword [rbp + 0xf0], xmm2
movaps xmmword [rbp + 0x100], xmm2
mov qword [rbp + 0x90], rax
mov dword [rbp + 0x98], 0x225bc
mov dword [rbp + 0xa4], 0x41700000
call fcn.18003c3e0
mov r12, qword [rdi + 0x38]
mov ecx, 0x286ac
call fcn.18001a120
mov r15, rax
lea rax, [0x1800e6c50]
mov qword [0x180141a38], rax
mov qword [0x180141a48], r15
lea r14, [r15 + 0x286ac]
mov qword [0x180141a40], r14
lea rbx, [0x1800e6c60]
mov qword [0x180141a50], r15
mov rcx, rbx
call fcn.180040710
movaps xmm7, xmmword [rsp + 0x350]
cmp rax, rbx
je 0x18005910e
cmp qword [0x180141a50], r14
ja 0x18005910e
mov rcx, rax
mov rbx, rax
call fcn.180040710
cmp rax, rbx
jne 0x1800590f5
movaps xmm0, xmmword [rbp + 0x130]
lea rax, [0x180134438]
movaps xmm2, xmmword [rbp + 0x140]
lea rdx, [rbp]
movaps xmm3, xmmword [rbp + 0x150]
mov rcx, r12
movaps xmm4, xmmword [rbp + 0x170]
movaps xmm5, xmmword [rbp + 0x180]
movsd xmm1, qword [rbp + 0x1b0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmmword [rbp + 0x10], xmm2
movaps xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x9c], sil
movaps xmm0, xmmword [rbp + 0x90]
movaps xmmword [rbp], xmm0
mov qword [rbp], r15
mov dword [rbp + 8], 0x286ac
movaps xmmword [rbp + 0x20], xmm3
movaps xmmword [rbp + 0x40], xmm4
movaps xmmword [rbp + 0x50], xmm5
movaps xmmword [rbp + 0x60], xmm6
movaps xmmword [rbp + 0x70], xmm6
movsd qword [rbp + 0x80], xmm1
mov dword [rbp + 0x14], 0x41700000
mov qword [rbp + 0x38], rax
call fcn.18003c3e0
mov rcx, qword [rdi + 0x38]
call fcn.18003c750
mov rcx, qword gs:[0x58]
mov edx, dword [0x180141904]
mov edi, 4
mov qword [rbp - 8], rax
mov rbx, qword [rcx + rdx*8]
mov ecx, dword [rbx + rdi]
cmp dword [0x180141ac0], ecx
jle 0x18005921d
lea rcx, [0x180141ac0]
call fcn.1800a1820
cmp dword [0x180141ac0], 0xffffffff
jne 0x18005921d
movdqa xmm1, xmmword [0x180134690]
lea rcx, [0x1800a3660]
xorps xmm0, xmm0
movups xmmword [0x180141af0], xmm0
mov byte [0x180141af0], 0
movdqu xmmword [0x180141b00], xmm1
call fcn.1800a1c2c
lea rcx, [0x180141ac0]
call fcn.1800a17b4
mov eax, dword [rbx + rdi]
cmp dword [0x180141ac4], eax
jle 0x180059276
lea rcx, [0x180141ac4]
call fcn.1800a1820
cmp dword [0x180141ac4], 0xffffffff
jne 0x180059276
movdqa xmm1, xmmword [0x180134690]
lea rcx, [0x1800a35f0]
xorps xmm0, xmm0
movups xmmword [0x180141b10], xmm0
mov byte [0x180141b10], 0
movdqu xmmword [0x180141b20], xmm1
call fcn.1800a1c2c
lea rcx, [0x180141ac4]
call fcn.1800a17b4
mov eax, dword [rbx + rdi]
cmp dword [0x180141ae8], eax
jle 0x1800592cf
lea rcx, [0x180141ae8]
call fcn.1800a1820
cmp dword [0x180141ae8], 0xffffffff
jne 0x1800592cf
movdqa xmm1, xmmword [0x180134690]
lea rcx, [0x1800a3580]
xorps xmm0, xmm0
movups xmmword [0x180141ac8], xmm0
mov byte [0x180141ac8], 0
movdqu xmmword [0x180141ad8], xmm1
call fcn.1800a1c2c
lea rcx, [0x180141ae8]
call fcn.1800a17b4
movss xmm6, dword [0x180134638]
xor dil, dil
xor ebx, ebx
mov byte [rsp + 0x60], dil
xor r12b, r12b
mov byte [rsp + 0x61], dil
xor r13b, r13b
mov byte [rsp + 0x63], dil
mov byte [rbp + 0x210], dil
mov r15d, ebx
xor r14b, r14b
mov byte [rsp + 0x62], sil
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
lea rcx, [rbp + 0x130]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x18005936f
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x138], 0x12
lea rcx, [rbp + 0x130]
movzx r14d, r14b
cmove r14d, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x180059320
test r14b, r14b
jne 0x18005ab69
mov r8d, dword [0x180141a34]
test r8d, r8d
je 0x180059421
mov r9d, dword [0x180141a68]
test r9d, r9d
je 0x180059421
mov rcx, qword [0x180141a58]
test rcx, rcx
je 0x1800593b6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov r8d, dword [0x180141a34]
mov r9d, dword [0x180141a68]
mov qword [0x180141a58], rbx
mov rcx, qword [0x180141a60]
xor edx, edx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov rax, qword [rcx]
call qword [rax + 0x68]
mov rcx, qword [0x180141a60]
lea r9, [rbp + 0x128]
lea r8, [0x180134428]
mov dword [0x180141a68], ebx
xor edx, edx
mov dword [0x180141a34], ebx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [0x180141a70]
lea r9, [0x180141a58]
mov rdx, qword [rbp + 0x128]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1801419e0]
test rax, rax
je 0x180059436
mov rcx, qword [rax + 0x98]
jmp 0x180059439
mov rcx, rbx
cmp qword [rcx + 0x48], 0
jne 0x180059445
call fcn.180041e50
call fcn.180042f50
call fcn.18001ab60
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test sil, al
je 0x18005957b
test r15d, r15d
jne 0x1800594f4
cmp byte [0x180141935], r15b
mov edx, 0xffffffec
mov rbx, qword [0x180141a08]
mov rcx, rbx
je 0x1800594b7
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xffffffec
mov rcx, rbx
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
xor r13b, r13b
cmp byte [0x180141935], r13b
sete al
mov byte [0x180141935], al
jmp 0x180059579
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xffffffec
mov rcx, rbx
btr eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [0x180141935], 0
movzx r13d, sil
sete al
mov byte [0x180141935], al
jmp 0x180059579
cmp r15d, esi
jne 0x18005957b
cmp byte [0x180141935], 0
mov edx, 0xffffffec
mov rbx, qword [0x180141a08]
mov rcx, rbx
je 0x180059543
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xffffffec
mov rcx, rbx
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
cmp byte [0x180141935], 0
sete byte [0x180141935]
xor r12b, r12b
jmp 0x180059579
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xffffffec
mov rcx, rbx
btr eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [0x180141935], 0
movzx r12d, sil
sete byte [0x180141935]
xor ebx, ebx
mov rax, qword [0x1801419e0]
or dword [rax + 0x49b8], 2
cmp byte [rsp + 0x62], 0
mov dword [rax + 0x49d8], 0x43fa0000
mov dword [rax + 0x49dc], 0x43a50000
mov dword [rax + 0x49c0], esi
je 0x1800596eb
mov r8d, 0x102
lea rdx, [rbp + 0x210]
lea rcx, str.DD_ESP_PUBGM___F5_SHOW___HIDE_MENU
call fcn.1800203d0
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x41700000
mov ecx, ntohl
mov dword [rbp - 0x7c], 0x40e00000
call fcn.1800167d0
lea rcx, str.Language_Menu
call fcn.180046100
call fcn.1800260a0
call fcn.1800260a0
mov rcx, qword [rbp - 8]
call fcn.180022e60
test r15d, r15d
lea rcx, str.English
sete dl
call fcn.1800484a0
test al, al
mov ecx, ebx
cmove ecx, r15d
cmp ecx, esi
mov r15d, ecx
lea rcx, str.Ting_Vit____updating..
sete dl
call fcn.1800484a0
test al, al
cmovne r15d, esi
call fcn.180022f00
call fcn.1800261e0
xor ecx, ecx
call fcn.180019cb0
test al, al
je 0x180059657
lea rcx, str.Select_language
call fcn.180026ea0
lea rdx, [rbp - 0x78]
mov dword [rbp - 0x78], 0x42de0000
mov ecx, ntohl
mov dword [rbp - 0x74], 0x41500000
call fcn.1800167d0
lea rcx, [0x180132e98]
call fcn.180046100
xor r8d, r8d
mov qword [rbp - 0x70], 0
lea rdx, [rbp - 0x70]
lea rcx, str.Contine
call fcn.180046a80
test al, al
je 0x1800596dd
test r15d, r15d
jne 0x1800596b9
xor r12b, r12b
mov byte [rsp + 0x61], sil
xor dil, dil
movzx r13d, sil
mov byte [rsp + 0x60], dil
jmp 0x1800596d3
cmp r15d, esi
jne 0x1800596d3
xor r13b, r13b
mov byte [rsp + 0x60], sil
mov byte [rsp + 0x61], r13b
movzx r12d, sil
movzx edi, sil
mov byte [rsp + 0x63], sil
mov byte [rsp + 0x62], 0
mov ecx, esi
call fcn.180016860
mov rax, qword [0x1801419e0]
or dword [rax + 0x49b8], 2
cmp byte [rsp + 0x61], 0
mov dword [rax + 0x49d8], 0x44228000
mov dword [rax + 0x49dc], 0x43c80000
mov dword [rax + 0x49c0], esi
je 0x18005a144
test r13b, r13b
je 0x18005a144
mov r8d, 0x108
lea rdx, [rbp + 0x210]
lea rcx, str.F5___HIDE___SHOW_MENU
call fcn.1800203d0
mov rbx, qword [0x1801419e0]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x68], 3
movups xmm0, xmmword [rbx + 0x3a04]
lea rcx, [rbx + 0x4a30]
movups xmmword [rsp + 0x6c], xmm0
call fcn.18002ee80
mov rcx, qword [0x1801419e0]
xorps xmm0, xmm0
movups xmmword [rbx + 0x3a04], xmm0
xor edx, edx
mov dword [rbp - 0x68], 0x43480000
mov dword [rbp - 0x64], 0x43c80000
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], sil
mov rbx, qword [rcx + 0x4008]
lea rcx, str.LeftSide
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180015c00
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4054], eax
jne 0x1800597da
lea r8, str.LeftSide
mov edx, ntohl
mov ecx, eax
call fcn.18002e260
lea r8, [rbp - 0x68]
mov dword [rsp + 0x20], 0
mov edx, edi
lea rcx, str.LeftSide
call fcn.18001d280
lea rax, [0x180133e54]
mov qword [rbp - 0x28], rax
lea rax, str.Aimbot
mov qword [rbp - 0x20], rax
lea rax, str.Memory
mov qword [rbp - 0x18], rax
lea rax, str.EXIT_SAFE
mov qword [rbp - 0x10], rax
call fcn.1800260a0
xor ebx, ebx
mov dword [rbp - 0x60], 0x432a0000
mov dword [rbp - 0x5c], 0x41f00000
lea rdi, [rbp - 0x28]
nop dword [rax]
mov rcx, qword [rdi]
lea rdx, [rbp - 0x60]
xor r8d, r8d
call fcn.180046a80
test al, al
je 0x180059859
mov dword [0x180141ab4], ebx
inc ebx
add rdi, 8
cmp ebx, 4
jb 0x180059840
call fcn.1800261e0
call fcn.18001d520
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.180025db0
call fcn.1800260a0
mov rbx, qword [0x1801419e0]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x68], 3
movups xmm0, xmmword [rbx + 0x3a04]
lea rcx, [rbx + 0x4a30]
movups xmmword [rsp + 0x6c], xmm0
call fcn.18002ee80
mov rcx, qword [0x1801419e0]
xorps xmm0, xmm0
movups xmmword [rbx + 0x3a04], xmm0
xor edx, edx
mov dword [rbp - 0x58], 0x43cd0000
mov dword [rbp - 0x54], 0x43aa0000
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], sil
mov rbx, qword [rcx + 0x4008]
lea rcx, str.RightSide
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180015c00
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4054], eax
jne 0x18005991f
lea r8, str.RightSide
mov edx, ntohl
mov ecx, eax
call fcn.18002e260
xor ebx, ebx
lea r8, [rbp - 0x58]
mov edx, edi
mov dword [rsp + 0x20], ebx
lea rcx, str.RightSide
call fcn.18001d280
mov eax, dword [0x180141ab4]
test eax, eax
jne 0x180059e8b
lea rcx, [0x180132e98]
call fcn.180046100
mov rax, qword [0x1801419e0]
lea rcx, str.Application____.1f_FPS_
movss xmm1, dword [rax + 0xd4]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ON_VSync
add rdx, 0x45
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.DD_Esp
add rdx, 0x3b
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov r8, qword [0x180141a10]
lea rax, [rbp + 0x120]
add r8, 8
mov dword [rbp + 0x120], 0x2bc
lea r9, [rbp + 0x228]
mov dword [rbp + 0x228], reloc.WLDAP32.dll_Ordinal_200
lea rcx, [0x180133eb4]
mov qword [rsp + 0x20], rax
call fcn.18004a280
lea rcx, str.Distance___Player__Vehilce__Items
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Items
add rdx, 0xf
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Items_Distance
add rdx, 0x23
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Items_other
add rdx, 0x1d8
mov r8d, Ordinal_35
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Crosshair
add rdx, 0x3a
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Crosshair
add rdx, 0x198
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, [0x180132450]
add rdx, 0x1a
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Esp_V
add rdx, 0x1f8
mov r8d, Ordinal_35
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Vehicle
add rdx, 0x1b
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Vehicle_Distance
add rdx, 0x24
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.HP_Bar
add rdx, 0x1d
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.HP_Number
add rdx, 0x1f
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_Box
add rdx, 0x11
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_Box
add rdx, 0x148
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_Visual
add rdx, 0x14
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_Visual
add rdx, 0x158
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Line
add rdx, 0x10
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Line
add rdx, 0x138
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Snap_Line
add rdx, 0x13
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Snap_Line
add rdx, 0x128
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Skeleton
add rdx, 0x12
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Skeleton
add rdx, 0x1b8
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Weapon
add rdx, 0x15
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Weapon
add rdx, 0x188
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Name
add rdx, 0x1c
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Name
add rdx, 0x168
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ID_Team
add rdx, 0x20
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.ID_Team
add rdx, 0x1e8
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Distance
add rdx, 0x22
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Distance_color
add rdx, 0x178
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Nation
add rdx, 0x21
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Lootbox
add rdx, 0x16
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Grenade_warning
add rdx, 0x19
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Distance_Lootbox
add rdx, 0x17
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Nearby
add rdx, 0x18
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
jmp 0x18005a135
cmp eax, esi
jne 0x180059fef
mov rdx, qword [0x180141a10]
lea rcx, str.AIMBOT
add rdx, 0x25
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, [0x18013400c]
add rdx, 0x2c
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, [0x18013400c]
add rdx, 0x1c8
mov r8d, 0xa2
call fcn.180051380
mov r8, qword [0x180141a10]
lea rax, [rbp + 0x228]
add r8, 0x34
mov dword [rbp + 0x228], Ordinal_301
lea r9, [rbp + 0x120]
mov dword [rbp + 0x120], reloc.WLDAP32.dll_Ordinal_50
lea rcx, str.Size_FOV
mov qword [rsp + 0x20], rax
call fcn.18004a280
mov r8, qword [0x180141a10]
lea rax, [rbp + 0x228]
add r8, 0x30
mov dword [rbp + 0x228], reloc.WLDAP32.dll_Ordinal_30
lea r9, [rbp + 0x120]
mov dword [rbp + 0x120], ebx
lea rcx, str.Low_Speed
mov qword [rsp + 0x20], rax
call fcn.18004a280
mov r8, qword [0x180141a10]
lea rax, [0x180132e9c]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x120]
lea rax, [rbp + 0x228]
mov dword [rbp + 0x228], 0x64
add r8, 0x28
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x120], esi
call fcn.18004af50
mov rdx, qword [0x180141a10]
lea rcx, str.Aim_Head__remove_the_tik_aim_in_the_Middle
add rdx, 0x38
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Aim__Knock
add rdx, 0x39
call fcn.180047de0
lea rcx, str._n_1__Left_Mouse
call fcn.180046100
lea rcx, str._n_2__Right_Mouse
call fcn.180046100
lea rcx, str._n_160__Left_Shift
call fcn.180046100
jmp 0x18005a135
cmp eax, 2
jne 0x18005a0ee
mov rdx, qword [0x180141a10]
lea rcx, str.No_recoil_25_
add rdx, 0xe
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.No_recoil_50__
add rdx, 2
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
lea rcx, str.__Risk__
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.No_recoil
inc rdx
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.No_fist_bullet
add rdx, 0xc
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.No_shake
add rdx, 0xd
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
lea rcx, str.__BAN__
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Fast_shot
add rdx, 4
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Instant_hit
add rdx, 3
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
jmp 0x18005a135
cmp eax, 3
jne 0x18005a135
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x42de0000
mov ecx, ntohl
mov dword [rbp - 0x4c], 0x41500000
call fcn.1800167d0
xor r8d, r8d
mov qword [rbp - 0x48], rbx
lea rdx, [rbp - 0x48]
lea rcx, str.EXIT
call fcn.180046a80
test al, al
jne 0x18005ae14
mov ecx, esi
call fcn.180016860
call fcn.18001d520
call fcn.1800226e0
movzx edi, byte [rsp + 0x60]
test dil, dil
je 0x18005aab8
test r12b, r12b
je 0x18005aab8
mov r8d, 0x108
lea rdx, [rbp + 0x210]
lea rcx, str.F5___N___HIN_MENU
call fcn.1800203d0
mov rbx, qword [0x1801419e0]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x68], 3
movups xmm0, xmmword [rbx + 0x3a04]
lea rcx, [rbx + 0x4a30]
movups xmmword [rsp + 0x6c], xmm0
call fcn.18002ee80
mov rcx, qword [0x1801419e0]
xorps xmm0, xmm0
movups xmmword [rbx + 0x3a04], xmm0
xor edx, edx
mov dword [rbp - 0x40], 0x43480000
mov dword [rbp - 0x3c], 0x43c80000
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], sil
mov rbx, qword [rcx + 0x4008]
lea rcx, str.LeftSide
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180015c00
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4054], eax
jne 0x18005a210
lea r8, str.LeftSide
mov edx, ntohl
mov ecx, eax
call fcn.18002e260
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], 0
mov edx, edi
lea rcx, str.LeftSide
call fcn.18001d280
lea rax, [0x180133e54]
mov qword [rbp - 0x28], rax
lea rax, str.Aimbot
mov qword [rbp - 0x20], rax
lea rax, str.Memory
mov qword [rbp - 0x18], rax
call fcn.1800260a0
xor ebx, ebx
mov dword [rbp - 0x38], 0x432a0000
mov dword [rbp - 0x34], 0x41f00000
lea rdi, [rbp - 0x28]
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rdi]
lea rdx, [rbp - 0x38]
xor r8d, r8d
call fcn.180046a80
test al, al
je 0x18005a289
mov dword [0x180141ab0], ebx
inc ebx
add rdi, 8
cmp ebx, 3
jb 0x18005a270
call fcn.1800261e0
call fcn.18001d520
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.180025db0
call fcn.1800260a0
mov rbx, qword [0x1801419e0]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x68], 3
movups xmm0, xmmword [rbx + 0x3a04]
lea rcx, [rbx + 0x4a30]
movups xmmword [rsp + 0x6c], xmm0
call fcn.18002ee80
mov rcx, qword [0x1801419e0]
xorps xmm0, xmm0
movups xmmword [rbx + 0x3a04], xmm0
xor edx, edx
mov dword [rbp - 0x30], 0x43cd0000
mov dword [rbp - 0x2c], 0x43aa0000
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], sil
mov rbx, qword [rcx + 0x4008]
lea rcx, str.RightSide
movsxd rax, dword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180015c00
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4054], eax
jne 0x18005a34f
lea r8, str.RightSide
mov edx, ntohl
mov ecx, eax
call fcn.18002e260
xor ebx, ebx
lea r8, [rbp - 0x30]
mov edx, edi
mov dword [rsp + 0x20], ebx
lea rcx, str.RightSide
call fcn.18001d280
mov eax, dword [0x180141ab0]
test eax, eax
jne 0x18005a84d
lea rcx, [0x180132e98]
call fcn.180046100
mov rax, qword [0x1801419e0]
lea rcx, str.Application____.1f_FPS_
movss xmm1, dword [rax + 0xd4]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ON_VSync
add rdx, 0x45
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.DD_Esp
add rdx, 0x3b
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, [0x180132450]
add rdx, 0x1a
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Esp_V
add rdx, 0x1f8
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Phng_tin
add rdx, 0x1b
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khong_cch_Phng_tin
add rdx, 0x24
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ng_Mu
add rdx, 0x1d
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.S_mu
add rdx, 0x1f
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Vt_phm
add rdx, 0xf
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khong_cch_vt_phm
add rdx, 0x23
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Mu_vt_phm_khc
add rdx, 0x1d8
mov r8d, Ordinal_35
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Tm_o
add rdx, 0x3a
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Tm_o
add rdx, 0x198
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_Hp
add rdx, 0x11
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_Hp
add rdx, 0x148
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_4_gc
add rdx, 0x14
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.ESP_4_gc
add rdx, 0x158
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Line
add rdx, 0x10
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Line
add rdx, 0x138
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Snap_Line
add rdx, 0x13
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Snap_Line
add rdx, 0x128
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Khung_Xng
add rdx, 0x12
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khung_Xng
add rdx, 0x1b8
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Sng_cm
add rdx, 0x15
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Sng_cm
add rdx, 0x188
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, [0x180134254]
add rdx, 0x1c
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, [0x180134254]
add rdx, 0x168
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.ID_Team
add rdx, 0x20
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.ID_Team
add rdx, 0x1e8
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Khong_cch
add rdx, 0x22
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khong_cch_color
add rdx, 0x178
mov r8d, 0xa2
call fcn.180051380
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Nc
add rdx, 0x21
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Lootbox
add rdx, 0x16
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Khong_cch_Lootbox
add rdx, 0x17
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Cnh_bo_lu_n
add rdx, 0x19
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Tng_ch_xung_quanh
add rdx, 0x18
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
jmp 0x18005aa9d
cmp eax, esi
jne 0x18005a9ac
mov rdx, qword [0x180141a10]
lea rcx, str.AIMBOT
add rdx, 0x25
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Vng_aimbot
add rdx, 0x2c
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Vng_aimbot
add rdx, 0x1c8
mov r8d, 0xa2
call fcn.180051380
mov r8, qword [0x180141a10]
lea rax, [rbp + 0x228]
add r8, 0x34
mov dword [rbp + 0x228], Ordinal_301
lea r9, [rbp + 0x120]
mov dword [rbp + 0x120], reloc.WLDAP32.dll_Ordinal_50
lea rcx, str.Khong
mov qword [rsp + 0x20], rax
call fcn.18004a280
mov r8, qword [0x180141a10]
lea rax, [rbp + 0x228]
add r8, 0x30
mov dword [rbp + 0x228], reloc.WLDAP32.dll_Ordinal_30
lea r9, [rbp + 0x120]
mov dword [rbp + 0x120], ebx
lea rcx, str.Gim__nhanh
mov qword [rsp + 0x20], rax
call fcn.18004a280
mov r8, qword [0x180141a10]
lea rax, [0x180132e9c]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x120]
lea rax, [rbp + 0x228]
mov dword [rbp + 0x228], 0x64
add r8, 0x28
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x120], esi
call fcn.18004af50
mov rdx, qword [0x180141a10]
lea rcx, str.Aim__u__b_tik_aim_gia
add rdx, 0x38
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Aim__Knock
add rdx, 0x39
call fcn.180047de0
lea rcx, str._n_1__Chut_tri
call fcn.180046100
lea rcx, str._n_2__Chut_phi
call fcn.180046100
lea rcx, str._n_160__Shift_tri
jmp 0x18005aaa4
cmp eax, 2
jne 0x18005aaa9
mov rdx, qword [0x180141a10]
lea rcx, str.Khng_git_25__
add rdx, 0xe
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khng_git_50__
add rdx, 2
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
lea rcx, str.__Risk__
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Khng_git
inc rdx
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khng_git_vin_u
add rdx, 0xc
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, str.Khng_rung
add rdx, 0xd
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
lea rcx, str.__BAN__
call fcn.180046100
lea rcx, [0x180132e98]
call fcn.180046100
mov rdx, qword [0x180141a10]
lea rcx, str.Bn_nhanh
add rdx, 4
call fcn.180047de0
mov rdx, qword [0x180141a10]
lea rcx, [0x180134410]
add rdx, 3
call fcn.180047de0
lea rcx, [0x180132e98]
call fcn.180046100
call fcn.18001d520
call fcn.1800226e0
movzx edi, byte [rsp + 0x60]
cmp byte [rsp + 0x63], 0
je 0x18005aace
mov rcx, qword [0x180141a10]
mov byte [rcx], sil
call fcn.180003890
call fcn.18001cb60
mov rcx, qword [0x180141a78]
lea r8, [0x180141a58]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x230], xmm0
mov edx, esi
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x180141a78]
lea r8, [rbp + 0x230]
mov rdx, qword [0x180141a58]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x1801419e0]
mov rcx, qword [rax + 0x4ad0]
mov rax, qword [rcx]
mov rcx, rbx
add rax, 0x48
cmp byte [rax], 0
cmovne rcx, rax
call fcn.1800411f0
mov rax, qword [0x180141a10]
xor r8d, r8d
mov rcx, qword [0x180141a60]
cmp byte [rax + 0x45], r8b
mov rax, qword [rcx]
je 0x18005ab5f
mov edx, esi
call qword [rax + 0x40]
jmp 0x180059303
xor edx, edx
call qword [rax + 0x40]
jmp 0x180059303
mov rbx, qword [0x1801419e0]
xor esi, esi
test rbx, rbx
je 0x18005ab80
mov rdi, qword [rbx + 0x98]
jmp 0x18005ab83
mov rdi, rsi
call fcn.180042250
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x18005ab97
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x18005aba5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x18005abb4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x1801419e0]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
test r8, r8
je 0x18005ac35
movsx rdx, word [r8 + 0x6048]
lea rcx, [r8 + 0x604c]
mov r9d, dword [r8 + 0x3f60]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x18005ac2a
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rcx, [r8 + 0x604c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6044]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x1801419e0]
test r8, r8
je 0x18005ac53
mov rdi, qword [r8 + 0x90]
jmp 0x18005ac56
mov rdi, rsi
mov rcx, qword [rdi + 0x38]
lea rbx, [r8 + 8]
test rcx, rcx
je 0x18005ac70
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x1801419e0]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], rsi
mov qword [rbx + 0x88], rsi
test r8, r8
je 0x18005ace7
movsx rdx, word [r8 + 0x6048]
mov r9d, dword [r8 + 0x3f60]
lea rcx, [rdx*8 + 0x604c]
add rcx, r8
cmp dword [rcx], r9d
je 0x18005acdc
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rcx, [rax*8 + 0x604c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x6044]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1801419e0]
mov qword [0x1801419e0], rbx
call fcn.180018720
mov qword [0x1801419e0], rsi
test rbx, rbx
je 0x18005ad94
mov rcx, rbx
call fcn.18002fdb0
mov r8, qword [0x1801419e0]
test r8, r8
je 0x18005ad8b
movsx r10, word [r8 + 0x6048]
lea rdx, [r8 + 0x604c]
mov r9d, dword [r8 + 0x3f60]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x18005ad80
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x604c]
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x6044]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.180058570
mov rcx, qword [0x1801419f0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r13, qword [rsp + 0x380]
xor eax, eax
mov r12, qword [rsp + 0x388]
movaps xmm6, xmmword [rsp + 0x360]
mov r15, qword [rsp + 0x370]
mov rdi, qword [rsp + 0x3b0]
mov rbx, qword [rsp + 0x3a0]
mov r14, qword [rsp + 0x378]
mov rsi, qword [rsp + 0x3a8]
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.1800a1750
add rsp, 0x390
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3