Function at 0x140055fb0
Capabilities:
Check for time delay via gettickcount
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Create thread
Download url
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
push rbp
push r12
push r15
lea rbp, [rsp - 0xc30]
sub rsp, 0xd30
xor r12d, r12d
lea rcx, [0x1401673d0]
mov r15d, r12d
mov dword [rbp - 0x68], r12d
call fcn.14006d590
lea rcx, [0x1401673d0]
call fcn.14006a350
test al, al
jne 0x14005ad61
call fcn.140050920
mov rdx, rax
call fcn.14004ff50
test eax, eax
je 0x14005601d
mov r8d, eax
mov dword [0x1401672e0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401672e8], rax
call fcn.140050920
mov rdx, rax
call fcn.14004ff50
test eax, eax
je 0x14005604b
mov r8d, eax
mov dword [0x1401672e0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401672e8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp + 0x1e8]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14005ad3d
mov rcx, qword [rbp + 0x1e8]
lea rax, [rbp + 0x1e0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x70]
mov dword [rbp - 0x70], r12d
mov edx, reloc.WS2_32.dll_sendto
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14005ad3d
cmp dword [rbp - 0x70], r12d
setne al
test al, al
je 0x14005ad3d
call fcn.14004e140
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x14004cc00]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x118]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x110], rax
test rax, rax
je 0x14005ad2a
mov qword [rsp + 0xd28], r13
mov r13d, 1
mov qword [rsp + 0xd50], rbx
mov qword [rsp + 0xd58], rsi
mov qword [rsp + 0xd60], rdi
mov qword [rsp + 0xd20], r14
movaps xmmword [rsp + 0xd10], xmm6
movaps xmmword [rsp + 0xd00], xmm7
movaps xmmword [rsp + 0xcf0], xmm8
movaps xmmword [rsp + 0xce0], xmm9
movaps xmmword [rsp + 0xcd0], xmm10
movaps xmmword [rsp + 0xcc0], xmm11
movaps xmmword [rsp + 0xcb0], xmm12
movaps xmmword [rsp + 0xca0], xmm13
movaps xmmword [rsp + 0xc90], xmm14
movaps xmmword [rsp + 0xc80], xmm15
cmp dword [rbp + 0x118], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x110]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x110], xmm0
call fcn.14004cc60
movzx eax, word [0x1400e76e0]
lea r8, [rbp + 0x5c0]
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_yassine12345_UI_uy_main_0704.WAV]
lea rdx, [rbp + 0x720]
movaps xmm1, xmmword [0x1400e76b0]
xor r9d, r9d
movaps xmmword [rbp + 0x720], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400e76c0]
mov word [rbp + 0x760], ax
movzx eax, byte [0x1400e76e2]
movaps xmmword [rbp + 0x740], xmm0
movups xmm0, xmmword [str.C:Windows0704.wav]
mov byte [rbp + 0x762], al
mov eax, dword [0x1400e76f8]
movaps xmmword [rbp + 0x730], xmm1
movaps xmm1, xmmword [0x1400e76d0]
movups xmmword [rbp + 0x5c0], xmm0
mov dword [rbp + 0x5d0], eax
movaps xmmword [rbp + 0x750], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_ziitx_xactivar_main_xactivar.wav]
lea r8, [rbp + 0x5e8]
movaps xmm1, xmmword [0x1400e7710]
lea rdx, [rbp + 0x770]
movzx eax, word [0x1400e7740]
xor r9d, r9d
movaps xmmword [rbp + 0x770], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400e7720]
movaps xmmword [rbp + 0x790], xmm0
movups xmm0, xmmword [str.C:Windowsxactivar.wav]
mov word [rbp + 0x7b0], ax
movzx eax, byte [0x1400e7742]
movups xmmword [rbp + 0x5e8], xmm0
mov byte [rbp + 0x7b2], al
movsd xmm0, qword [0x1400e6da8]
movaps xmmword [rbp + 0x780], xmm1
movaps xmm1, xmmword [0x1400e7730]
movsd qword [rbp + 0x5f8], xmm0
movaps xmmword [rbp + 0x7a0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.140050020
call fcn.140050020
mov rdx, rax
call fcn.14004ff50
test eax, eax
je 0x14005630d
mov r8d, eax
mov dword [0x1401672f0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401672f8], rax
call fcn.140050020
call fcn.140050020
mov rdx, rax
call fcn.14004ff50
test eax, eax
je 0x14005640e
mov r8d, eax
mov dword [0x1401672f0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401672f8], rax
test rax, rax
je 0x14005640e
mov eax, dword [0x1400e7768]
lea r8, [rbp + 0x1a0]
movups xmm1, xmmword [0x140144bb8]
mov qword [rbp + 0x1b0], reloc.WS2_32.dll_ntohs
lea rdx, [rbp + 0x2a0]
xorps xmm0, xmm0
mov qword [rbp + 0x1b8], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1a8], eax
movzx eax, word [0x1400e776c]
movsd xmm0, qword [str.Emulator_Found_]
mov word [rbp + 0x1ac], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
movsd qword [rbp + 0x1a0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x1ae], al
movzx eax, byte [0x1400e7410]
movsd xmm0, qword [0x1400e7408]
mov byte [rbp + 0x2a8], al
mov byte [rbp + 0x1af], r12b
mov qword [rbp + 0x2b0], 9
mov qword [rbp + 0x2b8], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x2a9], r12b
movdqa xmmword [rbp - 0x80], xmm1
jmp 0x1400564bd
movups xmm6, xmmword [0x140144bb8]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x4c8], r12
call fcn.1400c5610
movups xmm0, xmmword [str.Emulator_Not_Found_]
mov qword [rbp + 0x4c0], rax
lea r8, [rbp + 0x4c0]
mov qword [rbp + 0x4d0], reloc.WS2_32.dll_send
lea rdx, [rbp + 0x2c0]
mov qword [rbp + 0x4d8], Ordinal_35
movups xmmword [rax], xmm0
movzx ecx, word [0x1400e7758]
mov word [rax + 0x10], cx
xorps xmm0, xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], r12b
movzx eax, byte [0x1400e7410]
movups xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], 9
movsd xmm0, qword [0x1400e7408]
movsd qword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2c8], al
mov byte [rbp + 0x2c9], r12b
movdqa xmmword [rbp - 0x80], xmm6
lea r9, [rbp - 0x80]
call fcn.14004bcb0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x140146228], rax
test rax, rax
jne 0x140056661
movups xmm6, xmmword [0x140144bb8]
mov ecx, Ordinal_50
mov qword [rbp + 0x4e8], r12
call fcn.1400c5610
movups xmm0, xmmword [str._Failed_to_create_mutex._Error_code]
mov qword [rbp + 0x4e0], rax
lea r9, [rbp - 0x80]
mov qword [rbp + 0x4f0], Ordinal_45
lea r8, [rbp + 0x4e0]
mov qword [rbp + 0x4f8], Ordinal_50
lea rdx, [rbp + 0x2e0]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400e7780]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm6
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400e7790]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], r12b
movzx eax, byte [0x1400e7410]
movups xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], 9
movsd xmm0, qword [0x1400e7408]
movsd qword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2e8], al
mov byte [rbp + 0x2e9], r12b
call fcn.14004bcb0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_mutex._Error_code:
call fcn.14005ef30
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14005f110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, r13d
movaps xmm14, xmmword [rsp + 0xc90]
movaps xmm13, xmmword [rsp + 0xca0]
movaps xmm12, xmmword [rsp + 0xcb0]
movaps xmm11, xmmword [rsp + 0xcc0]
movaps xmm10, xmmword [rsp + 0xcd0]
movaps xmm9, xmmword [rsp + 0xce0]
movaps xmm8, xmmword [rsp + 0xcf0]
movaps xmm7, xmmword [rsp + 0xd00]
movaps xmm6, xmmword [rsp + 0xd10]
mov r14, qword [rsp + 0xd20]
mov rbx, qword [rsp + 0xd50]
mov rdi, qword [rsp + 0xd60]
mov rsi, qword [rsp + 0xd58]
movaps xmm15, xmmword [rsp + 0xc80]
mov r13, qword [rsp + 0xd28]
add rsp, 0xd30
pop r15
pop r12
pop rbp
ret
mov qword [rsp + 0x28], r12
lea r8, [0x140055b00]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140055b00]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x1400566ee
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_thread._Error_code:
call fcn.14005ef30
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14005f110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x140146228]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400565d1
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140146228]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140055720]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x1401673d0]
call fcn.14006d590
lea rax, [0x14004fe20]
mov dword [rbp + 0x250], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x258], rax
xor ecx, ecx
mov dword [rbp + 0x254], 0x40
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x270], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea r14, str.SAM_X_tre
mov qword [rbp + 0x280], r12
mov edx, 0x7f00
mov qword [rbp + 0x278], rax
xor ecx, ecx
mov qword [rbp + 0x288], r14
mov qword [rbp + 0x290], r14
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x250]
mov qword [rbp + 0x298], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140144b04]
mov ecx, r13d
cvttss2si esi, dword [0x140144b00]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140144b04]
xor ecx, ecx
movss xmm15, dword [0x1400e8560]
cdq
sub eax, edx
mulss xmm0, xmm15
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140144b00]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r12
cdq
mov qword [rsp + 0x50], r12
sub eax, edx
mov rdx, qword [rbp + 0x290]
mov r8, r14
mov qword [rsp + 0x48], r12
xor ecx, ecx
mov qword [rsp + 0x40], r12
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm15
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140146240], rax
mov rcx, rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x140146240]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140146240]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400e8720]
lea rdx, [rbp + 0x668]
mov rcx, qword [0x140146240]
movdqu xmmword [rbp + 0x668], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
cvttss2si r9d, dword [0x140144b04]
mov dword [rsp + 0x28], 0xa
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0xa
cvttss2si r8d, dword [0x140144b00]
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x140146240]
mov r8d, r13d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x140146240]
lea rdx, [0x140146250]
xorps xmm0, xmm0
movups xmmword [0x140146250], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140146240]
lea rbx, [0x14016ba68]
mov qword [rsp + 0x58], rbx
lea rdi, [0x14016ba60]
mov qword [rbp + 0x230], rax
lea rsi, [0x14016ba50]
lea rax, [rbp - 0x38]
mov qword [rbp + 0x214], r12
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x200]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r13d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x28]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x228], 2
mov qword [rbp + 0x240], 2
mov qword [rbp + 0x200], r12
mov dword [rbp + 0x210], Ordinal_35
mov dword [rbp + 0x208], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x20c], r13d
mov dword [rbp + 0x224], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x21c], r13
mov qword [rbp + 0x238], r13
mov dword [rbp - 0x28], 0xb000
mov dword [rbp - 0x24], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x140056a6f
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x38]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x200]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x28]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14005ad02
mov rcx, qword [0x14016ba50]
lea r9, [rbp + 0x10]
lea r8, [0x1400e63e8]
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [0x14016ba60]
lea r9, [0x14016ba48]
mov rdx, qword [rbp + 0x10]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140146240]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140146240]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.1400067b0
call fcn.140008760
movss xmm3, dword [0x1400e8630]
lea rdi, [0x1400e4c80]
mov qword [rsp + 0x28], rdi
lea rdx, [0x14011c100]
mov r8d, 0x26a20
mov qword [rsp + 0x20], r12
mov rcx, qword [rax + 0x50]
mov rbx, rax
call fcn.140030050
movss xmm3, dword [0x1400e8640]
lea rdx, [0x1400fb120]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x20fe0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.140030050
movss xmm3, dword [0x1400e8628]
lea rdx, [0x14011c100]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x26a20
mov qword [rsp + 0x28], rdi
mov qword [0x14016ce98], rax
mov qword [rsp + 0x20], r12
call fcn.140030050
movss xmm3, dword [0x1400e862c]
lea rdx, [0x140142b20]
mov rcx, qword [rbx + 0x50]
mov r8d, 0xb80
mov qword [rsp + 0x28], rdi
mov qword [0x14016ba90], rax
mov qword [rsp + 0x20], r12
call fcn.140030050
xor ecx, ecx
mov qword [0x14016ba88], rax
call fcn.140028350
call fcn.140049950
call fcn.1400496e0
call fcn.140004a80
movss xmm1, dword [0x1400e85d4]
xorps xmm10, xmm10
movss xmm0, dword [0x1400e85e4]
xor r14b, r14b
movss xmm8, dword [0x1400e8698]
movss xmm12, dword [0x1400e8658]
movss xmm13, dword [0x1400e8584]
movss xmm14, dword [0x1400e8520]
movss xmm11, dword [0x1400e8668]
unpcklps xmm0, xmm1
movsd qword [rax + 0x3c], xmm0
xorps xmm0, xmm0
mov dword [rax + 0x44], 0x3f800000
mov qword [rax + 0x10], 0x40000000
mov dword [rax + 0x38], r12d
unpcklps xmm0, xmm10
movsd qword [rax + 8], xmm0
mov dword [rax + 0x30], 0x41200000
mov dword [rax + 0xc8], r12d
movss xmm6, dword [0x1400e8620]
lea rcx, [rbp + 0x6e8]
movss xmm9, dword [0x1400e86b4]
lea rbx, [0x1400534d0]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
movabs rsi, 0x7ffffffffffffff
movabs rdi, 0x7fffffffffffffff
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140056cd0
nop
lea rcx, [rbp + 0x6e8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x6e8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x6f0], 0x12
lea rcx, [rbp + 0x6e8]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140056c80
test r14b, r14b
jne 0x14005ac07
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x14005acf9
mov ecx, dword [0x14014626c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140056ea0
cmp byte [0x140147288], r12b
jne 0x140056ea0
mov edx, 0x384
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movsxd rbx, dword [0x140146234]
lea rcx, [rbp + 0x1f8]
call fcn.14004bbd0
mov rcx, qword [rbp + 0x1f8]
mov qword [rbp - 0x20], rcx
test rbx, rbx
jle 0x140056e0d
imul rdx, rbx, 0x3b9aca00
mov rax, rdi
sub rax, rdx
cmp rcx, rax
jge 0x140056e09
lea rax, [rdx + rcx]
mov qword [rbp - 0x20], rax
jmp 0x140056e0d
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.1400601c0
mov edx, 0x384
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rulall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov ecx, 2
mov byte [0x140147288], r13b
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x140147288], r12b
lea rbx, [0x1400534d0]
mov ecx, dword [0x140146248]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140056f2b
mov ecx, 8
call fcn.1400c5610
lea rcx, [rbp + 0x138]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140060b70]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
mov qword [rax], rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x14005ac43
cmp dword [rbp + 0x138], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x130]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov ecx, dword [0x14014624c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140056fc1
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140052e20]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x140], rax
test rax, rax
je 0x14005ac56
cmp dword [rbp + 0x148], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x140]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov ecx, dword [0x140146220]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057057
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140055250]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14005ac69
cmp dword [rbp + 0x158], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x150]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
mov ecx, dword [0x140146140]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400570ed
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140052820]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x168]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x160], rax
test rax, rax
je 0x14005ac7c
cmp dword [rbp + 0x168], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x160]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov ecx, dword [0x140146190]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057183
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140051e60]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14005ac8f
cmp dword [rbp + 0x128], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x120]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov ecx, dword [0x140146230]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057219
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140051630]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x178]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x170], rax
test rax, rax
je 0x14005aca2
cmp dword [rbp + 0x178], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x170]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x170], xmm0
mov ecx, dword [0x140146268]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400572af
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140051a30]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x188]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x180], rax
test rax, rax
je 0x14005acb5
cmp dword [rbp + 0x188], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x180]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x180], xmm0
mov ecx, dword [0x140146194]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140057345
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140053990]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x198]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x190], rax
test rax, rax
je 0x14005acc8
cmp dword [rbp + 0x198], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp + 0x190]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x190], xmm0
mov ecx, dword [0x140146148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400573c8
mov ecx, 8
call fcn.1400c5610
lea rcx, [0x140054e20]
mov r9, rax
lea r8, [0x140060b70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x14005acdb
cmp dword [rbp + 8], r12d
je 0x14005ad20
movaps xmm0, xmmword [rbp]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005ad20
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov rbx, qword [0x140146120]
test rbx, rbx
je 0x1400573e2
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x1400573ff
jmp 0x1400573e5
mov rbx, r12
mov r8d, 0x250
lea rdx, [0x1400e58a0]
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r12
jne 0x14005740a
call fcn.140049070
call fcn.14004a760
call fcn.1400090e0
lea rdx, [0x140167510]
lea rcx, [rbp + 0x450]
call fcn.14005e020
lea rdx, [0x140167550]
lea rcx, [rbp + 0x430]
call fcn.14005e020
mov rdi, qword [0x1401675b8]
xorps xmm0, xmm0
sub rdi, qword [0x1401675b0]
sar rdi, 5
mov qword [rbp - 0x40], r12
movdqu xmmword [rbp - 0x50], xmm0
test rdi, rdi
je 0x14005750b
cmp rdi, rsi
ja 0x14005ad5b
shl rdi, 5
test rdi, rdi
jne 0x140057478
mov rbx, r12
jmp 0x1400574b5
cmp rdi, 0x1000
jb 0x1400574aa
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14005ad67
call fcn.1400c5610
test rax, rax
je 0x14005acf2
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400574b5
mov rcx, rdi
call fcn.1400c5610
mov rbx, rax
mov rsi, qword [0x1401675b8]
lea rcx, [rdi + rbx]
mov rdi, qword [0x1401675b0]
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rcx
cmp rdi, rsi
je 0x1400574f8
nop dword [rax + rax]
mov rdx, rdi
mov rcx, rbx
call fcn.14005e020
add rbx, 0x20
add rdi, 0x20
cmp rdi, rsi
jne 0x1400574e0
lea r8, [rbp - 0x50]
mov rdx, rbx
mov rcx, rbx
call fcn.14005fb30
mov qword [rbp - 0x48], rbx
lea rdx, [0x1401675c8]
lea rcx, [rbp + 0x1c0]
call fcn.14005e020
cmp qword [rbp + 0x1d8], 0xf
lea rcx, [rbp + 0x1c0]
cmova rcx, qword [rbp + 0x1c0]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp + 0x1f0], rcx
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str._d__m__Y____H:_M
mov edx, reloc.WS2_32.dll_sendto
mov r9, rax
lea rcx, [rbp + 0x8b0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov rcx, qword [0x140146120]
movaps xmm0, xmm10
movss xmm1, dword [0x1400e86a4]
xor edx, edx
unpcklps xmm0, xmm10
mov r8d, 0x20ab
movsd qword [rcx + 0x47b8], xmm0
movaps xmm0, xmm10
unpcklps xmm0, xmm10
movsd qword [rcx + 0x47c0], xmm0
movaps xmm0, xmm8
mov dword [rcx + 0x47ac], r13d
or dword [rcx + 0x47a8], 3
unpcklps xmm0, xmm1
movsd qword [rcx + 0x47c8], xmm0
mov dword [rcx + 0x47b0], r13d
lea rcx, str.General
call fcn.14000f0f0
mov rcx, qword [0x140146120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
mov qword [0x14016ba78], rax
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x678]
movsd xmm0, qword [rax + 0x18]
mov rsi, qword [rax + 0x290]
movsd qword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x1400e89c0]
movups xmmword [rbp + 0x678], xmm0
call fcn.140004380
movss xmm0, dword [rsp + 0x70]
lea r8, [rbp + 0x28]
movss xmm1, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
addss xmm0, dword [0x140144b00]
addss xmm1, dword [0x140144b04]
movss xmm7, dword [0x1400e85c8]
mov r9d, eax
mov dword [rsp + 0x28], r12d
mov rcx, rsi
movss dword [rsp + 0x20], xmm7
movss dword [rbp + 0x28], xmm0
movss dword [rbp + 0x2c], xmm1
call fcn.14002b7f0
cmp dword [0x14016ba58], r13d
jne 0x140059f93
movss xmm3, dword [rsp + 0x70]
lea rcx, [0x140144b28]
movss xmm2, dword [rsp + 0x74]
movaps xmm0, xmm3
movaps xmm1, xmm2
addss xmm0, xmm9
addss xmm1, dword [0x1400e8654]
addss xmm3, xmm10
addss xmm2, xmm12
movss dword [rbp + 0x30], xmm0
movss dword [rbp + 0x34], xmm1
movss dword [rbp + 0x38], xmm3
movss dword [rbp + 0x3c], xmm2
call fcn.140004380
mov r9d, eax
mov dword [rsp + 0x28], r12d
lea rdx, [rbp + 0x38]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x30]
mov rcx, rsi
call fcn.14002b7f0
movdqa xmm0, xmmword [0x1400e8ca0]
lea rcx, [rbp + 0x688]
movups xmmword [rbp + 0x688], xmm0
call fcn.140004380
movss xmm3, dword [rsp + 0x70]
lea r9, [rbp + 0x50]
movss xmm2, dword [rsp + 0x74]
lea r8, [rbp + 0x58]
mov rdx, qword [0x140146238]
movaps xmm0, xmm3
addss xmm3, dword [0x1400e8600]
mov dword [rsp + 0x30], eax
addss xmm0, xmm6
movaps xmm1, xmm2
mov dword [rbp + 0x40], 0x3f800000
addss xmm1, dword [0x1400e863c]
addss xmm2, dword [0x1400e85e4]
lea rax, [rbp + 0x40]
movss dword [rbp + 0x58], xmm3
mov qword [rsp + 0x28], rax
mov rcx, rsi
lea rax, [rbp + 0x48]
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm1
movss dword [rbp + 0x5c], xmm2
mov dword [rbp + 0x44], 0x3f800000
mov qword [rbp + 0x48], r12
mov qword [rsp + 0x20], rax
call fcn.14002bdd0
mov rcx, qword [0x140146120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x698]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e8690]
addss xmm1, dword [0x1400e85e4]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
xorps xmm0, xmm0
mov byte [rax + 0x139], r13b
movups xmmword [rbp + 0x698], xmm0
mov qword [rbp + 0x60], 0x41c80000
call fcn.140004380
xorps xmm0, xmm0
lea rcx, [rbp + 0x6a8]
movups xmmword [rbp + 0x6a8], xmm0
mov r9d, eax
call fcn.140004380
mov rdx, qword [rbp - 0x50]
cmp qword [rdx + 0x18], 0xf
jbe 0x14005782b
mov rdx, qword [rdx]
lea rcx, [rbp + 0x60]
mov r8d, eax
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm10
call fcn.14002fa40
movss xmm0, dword [0x14016ba3c]
ucomiss xmm0, xmm10
jp 0x14005786b
jne 0x14005786b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14016ba3c], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14016ba3c]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm6
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140057924
cmp byte [reloc.WS2_32.dll_accept], r12b
movss xmm1, dword [0x14016ba38]
je 0x1400578e0
comiss xmm13, xmm1
jbe 0x1400578d1
call fcn.140008760
movss xmm1, dword [0x14016ba38]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
addss xmm1, xmm0
movss dword [0x14016ba38], xmm1
comiss xmm1, xmm13
jb 0x14005791d
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x14005791d
comiss xmm1, xmm10
jbe 0x140057910
call fcn.140008760
movss xmm1, dword [0x14016ba38]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
subss xmm1, xmm0
movss dword [0x14016ba38], xmm1
comiss xmm10, xmm1
jb 0x14005791d
mov byte [reloc.WS2_32.dll_accept], r13b
mov dword [0x14016ba3c], r12d
mov rcx, qword [0x14016ce98]
mov rdi, qword [0x140146120]
mov rbx, rcx
mov qword [rsp + 0x60], rcx
test rcx, rcx
jne 0x14005797b
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x140057973
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], r12d
jg 0x14005796c
mov r8d, 0x6fc
lea rdx, [0x1400d97a0]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov rbx, rcx
call fcn.1400124d0
lea rcx, [rdi + 0x4838]
lea rdx, [rsp + 0x60]
call fcn.14001f8c0
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140028fa0
movss xmm0, dword [0x14016ba38]
lea rcx, [rbp - 0x80]
movss dword [rbp - 0x74], xmm0
mov dword [rbp - 0x80], 0x437f0000
mov dword [rbp - 0x7c], 0x437f0000
mov dword [rbp - 0x78], 0x437f0000
call fcn.140004380
movss xmm9, dword [rsp + 0x70]
lea rcx, str.SAM_X_TER
movss xmm0, dword [0x1400e86e4]
lea rdx, [rbp - 0x18]
movss xmm3, dword [0x1400e86d0]
movaps xmm7, xmm9
addss xmm7, xmm8
mov qword [rsp + 0x30], r12
movss xmm8, dword [rsp + 0x74]
addss xmm9, xmm10
movaps xmm6, xmm8
mov qword [rsp + 0x28], rcx
subss xmm6, dword [0x1400e8648]
addss xmm8, dword [0x1400e866c]
mov edi, eax
movss dword [rsp + 0x20], xmm0
mov rax, qword [0x140146120]
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.140034d10
movss xmm0, dword [rbp - 0x18]
subss xmm7, xmm9
subss xmm6, xmm8
addss xmm0, dword [0x1400e8594]
mulss xmm7, xmm15
mulss xmm6, xmm15
addss xmm9, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [rbp - 0x14]
addss xmm8, xmm6
mulss xmm0, xmm15
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x6c], xmm8
movss dword [rbp - 0x18], xmm1
mulss xmm1, xmm15
subss xmm9, xmm1
movss dword [rbp + 0x68], xmm9
test edi, 0xff000000
je 0x140057b44
mov rax, qword [rsi + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rsi + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x140057af4
mov r8d, 0x64d
lea rdx, [0x1400e3d90]
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e8199]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x68]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.SAM_X_TER
mov rdx, rsi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f30
call fcn.140012600
mov rcx, qword [0x140146120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [0x140144ab8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e8610]
addss xmm1, dword [0x1400e86a0]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x140144ab8]
call fcn.1400382e0
mov rcx, qword [0x140146120]
lea rdx, str.Tabs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e8610]
addss xmm1, dword [0x1400e8660]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x70], 0x42700000
mov dword [rbp + 0x74], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x70]
lea rcx, str.Tabs
call fcn.14000bf90
xor r8d, r8d
lea rcx, [0x1400e819c]
call fcn.14003b650
mov r8d, 2
lea rcx, [0x1400e81a0]
call fcn.14003b650
mov r8d, 3
lea rcx, [0x1400db790]
call fcn.14003b650
mov r8d, r13d
lea rcx, [0x1400e81a4]
call fcn.14003b650
mov r8d, 4
lea rcx, [0x1400db794]
call fcn.14003b650
call fcn.14000c2f0
mov eax, dword [0x14016ba40]
test eax, eax
jne 0x140058256
mov rcx, qword [0x140146120]
lea rdx, str.General
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x78], 0x43960000
mov dword [rbp + 0x7c], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x78]
lea rcx, str.General
call fcn.14000bf90
lea r9, [0x14014624c]
lea r8, [0x1400e81a8]
lea rdx, [0x14014619b]
lea rcx, str.Aimbot_90_
call fcn.14003a110
mov byte [0x140146224], al
test al, al
je 0x140057db0
cmp byte [0x14014619b], r12b
je 0x140057db0
lea rcx, [rbp + 0x360]
call fcn.14005f3c0
lea rcx, [rbp + 0x360]
call fcn.14004c340
cmp dword [rbp + 0x368], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140057dfc
cmp byte [rcx + 0x48f2], r12b
jne 0x140057dfc
test byte [rcx + 0x4770], 4
jne 0x140057ee3
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140057ee3
test eax, eax
jne 0x140057ecb
jmp 0x140057ee3
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140057ee3
cmp qword [rcx + 0x3ed8], r9
je 0x140057e1c
test al, al
jns 0x140057ee3
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057e41
cmp eax, dword [rcx + 0x476c]
je 0x140057e41
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057e41
cmp eax, dword [r9 + 0x74]
jne 0x140057ee3
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140057ead
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057ead
cmp byte [rdx + 0xaf], r12b
je 0x140057ead
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057ead
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140057e80
bt r8d, 0x1a
jae 0x140057ead
cmp qword [rax + 0x370], rdx
je 0x140057ead
nop dword [rax]
cmp rax, rdx
je 0x140057ead
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057e90
test dword [rcx + 0x4770], 0x100
je 0x140057ee3
test byte [rcx + 0x4770], 4
jne 0x140057ee3
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140057ecb
cmp byte [r9 + 0xb0], r12b
jne 0x140057ee3
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Match
call fcn.1400382e0
call fcn.140017700
lea r9, [0x140146140]
lea r8, str.Apply_in_Each_Match
lea rdx, [0x14014619f]
lea rcx, str.Aimbotdrag
call fcn.14003a110
mov byte [0x140146226], al
test al, al
je 0x140057f3c
cmp byte [0x14014619f], r12b
je 0x140057f3c
lea rcx, [rbp + 0x370]
call fcn.14005f430
lea rcx, [rbp + 0x370]
call fcn.14004c340
cmp dword [rbp + 0x378], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140057f88
cmp byte [rcx + 0x48f2], r12b
jne 0x140057f88
test byte [rcx + 0x4770], 4
jne 0x140058099
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058099
test eax, eax
jne 0x140058050
jmp 0x140058099
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058099
cmp qword [rcx + 0x3ed8], r9
je 0x140057fa8
test al, al
jns 0x140058099
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057fcd
cmp eax, dword [rcx + 0x476c]
je 0x140057fcd
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057fcd
cmp eax, dword [r9 + 0x74]
jne 0x140058099
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058032
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058032
cmp byte [rdx + 0xaf], r12b
je 0x140058032
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058032
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005800c
bt r8d, 0x1a
jae 0x140058032
cmp qword [rax + 0x370], rdx
je 0x140058032
cmp rax, rdx
je 0x140058032
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058015
test dword [rcx + 0x4770], 0x100
je 0x140058099
test byte [rcx + 0x4770], 4
jne 0x140058099
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058050
cmp byte [r9 + 0xb0], r12b
jne 0x140058099
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Each_Match
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058094
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x14014619a]
lea rcx, str.SCOPE_TRAKING
call fcn.14003a110
mov byte [0x14014611f], al
test al, al
je 0x1400580ee
cmp byte [0x14014619a], r12b
je 0x1400580ee
lea rcx, [rbp + 0x380]
call fcn.14005f4a0
lea rcx, [rbp + 0x380]
call fcn.14004c340
cmp dword [rbp + 0x388], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005813a
cmp byte [rcx + 0x48f2], r12b
jne 0x14005813a
test byte [rcx + 0x4770], 4
jne 0x14005824b
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005824b
test eax, eax
jne 0x140058202
jmp 0x14005824b
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005824b
cmp qword [rcx + 0x3ed8], r9
je 0x14005815a
test al, al
jns 0x14005824b
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005817f
cmp eax, dword [rcx + 0x476c]
je 0x14005817f
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005817f
cmp eax, dword [r9 + 0x74]
jne 0x14005824b
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400581e4
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400581e4
cmp byte [rdx + 0xaf], r12b
je 0x1400581e4
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400581e4
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400581be
bt r8d, 0x1a
jae 0x1400581e4
cmp qword [rax + 0x370], rdx
je 0x1400581e4
cmp rax, rdx
je 0x1400581e4
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400581c7
test dword [rcx + 0x4770], 0x100
je 0x14005824b
test byte [rcx + 0x4770], 4
jne 0x14005824b
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058202
cmp byte [r9 + 0xb0], r12b
jne 0x14005824b
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Each_Match
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058246
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
call fcn.14000c2f0
mov eax, dword [0x14016ba40]
cmp eax, 2
jne 0x1400587f2
mov rcx, qword [0x140146120]
lea rdx, str.RAGE
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x80], 0x43960000
mov dword [rbp + 0x84], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x80]
lea rcx, str.RAGE
call fcn.14000bf90
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014614d]
lea rcx, str.Sniper_No_Scope
call fcn.14003a110
mov byte [0x14014611a], al
test al, al
je 0x140058355
cmp byte [0x14014614d], r12b
je 0x140058355
lea rcx, [rbp + 0x390]
call fcn.14005f510
lea rcx, [rbp + 0x390]
call fcn.14004c340
cmp dword [rbp + 0x398], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x1400583a1
cmp byte [rcx + 0x48f2], r12b
jne 0x1400583a1
test byte [rcx + 0x4770], 4
jne 0x1400584b4
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400584b4
test eax, eax
jne 0x14005846b
jmp 0x1400584b4
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400584b4
cmp qword [rcx + 0x3ed8], r9
je 0x1400583c1
test al, al
jns 0x1400584b4
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400583e6
cmp eax, dword [rcx + 0x476c]
je 0x1400583e6
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400583e6
cmp eax, dword [r9 + 0x74]
jne 0x1400584b4
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005844d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005844d
cmp byte [rdx + 0xaf], r12b
je 0x14005844d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005844d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140058425
bt r8d, 0x1a
jae 0x14005844d
cmp qword [rax + 0x370], rdx
je 0x14005844d
nop
cmp rax, rdx
je 0x14005844d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058430
test dword [rcx + 0x4770], 0x100
je 0x1400584b4
test byte [rcx + 0x4770], 4
jne 0x1400584b4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005846b
cmp byte [r9 + 0xb0], r12b
jne 0x1400584b4
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Match
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400584af
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014619d]
lea rcx, str.Sniper_Scope
call fcn.14003a110
mov byte [0x140146134], al
test al, al
je 0x140058509
cmp byte [0x14014619d], r12b
je 0x140058509
lea rcx, [rbp + 0x3a0]
call fcn.14005f580
lea rcx, [rbp + 0x3a0]
call fcn.14004c340
cmp dword [rbp + 0x3a8], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058555
cmp byte [rcx + 0x48f2], r12b
jne 0x140058555
test byte [rcx + 0x4770], 4
jne 0x140058666
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058666
test eax, eax
jne 0x14005861d
jmp 0x140058666
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058666
cmp qword [rcx + 0x3ed8], r9
je 0x140058575
test al, al
jns 0x140058666
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005859a
cmp eax, dword [rcx + 0x476c]
je 0x14005859a
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005859a
cmp eax, dword [r9 + 0x74]
jne 0x140058666
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400585ff
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400585ff
cmp byte [rdx + 0xaf], r12b
je 0x1400585ff
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400585ff
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400585d9
bt r8d, 0x1a
jae 0x1400585ff
cmp qword [rax + 0x370], rdx
je 0x1400585ff
cmp rax, rdx
je 0x1400585ff
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400585e2
test dword [rcx + 0x4770], 0x100
je 0x140058666
test byte [rcx + 0x4770], 4
jne 0x140058666
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005861d
cmp byte [r9 + 0xb0], r12b
jne 0x140058666
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Match
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058661
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014619e]
lea rcx, str.Quick_Switch_V2
call fcn.14003a110
mov byte [0x140146136], al
test al, al
je 0x1400586bb
cmp byte [0x14014619e], r12b
je 0x1400586bb
lea rcx, [rbp + 0x3b0]
call fcn.14005f5f0
lea rcx, [rbp + 0x3b0]
call fcn.14004c340
cmp dword [rbp + 0x3b8], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058707
cmp byte [rcx + 0x48f2], r12b
jne 0x140058707
test byte [rcx + 0x4770], 4
jne 0x1400587e7
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400587e7
test eax, eax
jne 0x1400587cf
jmp 0x1400587e7
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400587e7
cmp qword [rcx + 0x3ed8], r9
je 0x140058727
test al, al
jns 0x1400587e7
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005874c
cmp eax, dword [rcx + 0x476c]
je 0x14005874c
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005874c
cmp eax, dword [r9 + 0x74]
jne 0x1400587e7
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400587b1
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400587b1
cmp byte [rdx + 0xaf], r12b
je 0x1400587b1
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400587b1
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005878b
bt r8d, 0x1a
jae 0x1400587b1
cmp qword [rax + 0x370], rdx
je 0x1400587b1
cmp rax, rdx
je 0x1400587b1
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058794
test dword [rcx + 0x4770], 0x100
je 0x1400587e7
test byte [rcx + 0x4770], 4
jne 0x1400587e7
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x1400587cf
cmp byte [r9 + 0xb0], r12b
jne 0x1400587e7
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Match
call fcn.1400382e0
call fcn.140017700
call fcn.14000c2f0
mov eax, dword [0x14016ba40]
cmp eax, r13d
jne 0x140058e95
mov rcx, qword [0x140146120]
lea rdx, str.Visual
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x88], 0x43960000
mov dword [rbp + 0x8c], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x88]
lea rcx, str.Visual
call fcn.14000bf90
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x14014614f]
lea rcx, str.ENABLE_ESP
call fcn.14003a110
mov byte [0x14014611c], al
test al, al
je 0x140058916
cmp byte [0x14014614f], r12b
je 0x140058916
lea rcx, [rbp + 0x3d0]
call fcn.14005f660
lea rcx, [rbp + 0x3d0]
call fcn.14004c340
lea rcx, [rbp + 0x3c0]
call fcn.14005f6d0
lea rcx, [rbp + 0x3c0]
call fcn.14004c340
cmp dword [rbp + 0x3c8], r12d
jne 0x14005aceb
cmp dword [rbp + 0x3d8], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058962
cmp byte [rcx + 0x48f2], r12b
jne 0x140058962
test byte [rcx + 0x4770], 4
jne 0x140058a74
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058a74
test eax, eax
jne 0x140058a2b
jmp 0x140058a74
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058a74
cmp qword [rcx + 0x3ed8], r9
je 0x140058982
test al, al
jns 0x140058a74
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400589a7
cmp eax, dword [rcx + 0x476c]
je 0x1400589a7
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400589a7
cmp eax, dword [r9 + 0x74]
jne 0x140058a74
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058a0d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058a0d
cmp byte [rdx + 0xaf], r12b
je 0x140058a0d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058a0d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400589e6
bt r8d, 0x1a
jae 0x140058a0d
cmp qword [rax + 0x370], rdx
je 0x140058a0d
nop
cmp rax, rdx
je 0x140058a0d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400589f0
test dword [rcx + 0x4770], 0x100
je 0x140058a74
test byte [rcx + 0x4770], 4
jne 0x140058a74
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058a2b
cmp byte [r9 + 0xb0], r12b
jne 0x140058a74
xor ecx, ecx
call fcn.140017560
lea rcx, str.Open_In_Emulators
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058a6f
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x140146198]
lea rcx, str.Chams_Menu_V1
call fcn.14003a110
mov byte [0x14014611d], al
test al, al
je 0x140058ac9
cmp byte [0x140146198], r12b
je 0x140058ac9
lea rcx, [rbp + 0x3e0]
call fcn.14005f740
lea rcx, [rbp + 0x3e0]
call fcn.14004c340
cmp dword [rbp + 0x3e8], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058b15
cmp byte [rcx + 0x48f2], r12b
jne 0x140058b15
test byte [rcx + 0x4770], 4
jne 0x140058c26
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058c26
test eax, eax
jne 0x140058bdd
jmp 0x140058c26
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058c26
cmp qword [rcx + 0x3ed8], r9
je 0x140058b35
test al, al
jns 0x140058c26
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140058b5a
cmp eax, dword [rcx + 0x476c]
je 0x140058b5a
cmp byte [rcx + 0x3f3d], r12b
jne 0x140058b5a
cmp eax, dword [r9 + 0x74]
jne 0x140058c26
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058bbf
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058bbf
cmp byte [rdx + 0xaf], r12b
je 0x140058bbf
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058bbf
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140058b99
bt r8d, 0x1a
jae 0x140058bbf
cmp qword [rax + 0x370], rdx
je 0x140058bbf
cmp rax, rdx
je 0x140058bbf
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058ba2
test dword [rcx + 0x4770], 0x100
je 0x140058c26
test byte [rcx + 0x4770], 4
jne 0x140058c26
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058bdd
cmp byte [r9 + 0xb0], r12b
jne 0x140058c26
xor ecx, ecx
call fcn.140017560
lea rcx, str.Open_In_Emulators
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058c21
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x14014614c]
lea rcx, str.Chams_Menu_V2
call fcn.14003a110
mov byte [0x140146119], al
test al, al
je 0x140058c7b
cmp byte [0x14014614c], r12b
je 0x140058c7b
lea rcx, [rbp + 0x3f0]
call fcn.14005f7b0
lea rcx, [rbp + 0x3f0]
call fcn.14004c340
cmp dword [rbp + 0x3f8], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058cc7
cmp byte [rcx + 0x48f2], r12b
jne 0x140058cc7
test byte [rcx + 0x4770], 4
jne 0x140058dd8
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058dd8
test eax, eax
jne 0x140058d8f
jmp 0x140058dd8
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058dd8
cmp qword [rcx + 0x3ed8], r9
je 0x140058ce7
test al, al
jns 0x140058dd8
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140058d0c
cmp eax, dword [rcx + 0x476c]
je 0x140058d0c
cmp byte [rcx + 0x3f3d], r12b
jne 0x140058d0c
cmp eax, dword [r9 + 0x74]
jne 0x140058dd8
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058d71
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058d71
cmp byte [rdx + 0xaf], r12b
je 0x140058d71
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058d71
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140058d4b
bt r8d, 0x1a
jae 0x140058d71
cmp qword [rax + 0x370], rdx
je 0x140058d71
cmp rax, rdx
je 0x140058d71
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058d54
test dword [rcx + 0x4770], 0x100
je 0x140058dd8
test byte [rcx + 0x4770], 4
jne 0x140058dd8
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140058d8f
cmp byte [r9 + 0xb0], r12b
jne 0x140058dd8
xor ecx, ecx
call fcn.140017560
lea rcx, str.Open_In_Emulators
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058dd3
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
call fcn.14000c2f0
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_Xbest_X_tre_V1
movss xmm6, dword [0x1400e8680]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm6
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x90], 0x43960000
mov dword [rbp + 0x94], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x90]
lea rcx, str.Checkbox_Xbest_X_tre_V1
call fcn.14000bf90
call fcn.14000c2f0
mov eax, dword [0x14016ba40]
jmp 0x140058e9d
movss xmm6, dword [0x1400e8680]
cmp eax, 3
jne 0x14005938f
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_Xbest_X_tre_V1
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm6
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x98], 0x43960000
mov dword [rbp + 0x9c], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x98]
lea rcx, str.Checkbox_Xbest_X_tre_V1
call fcn.14000bf90
call fcn.14000c2f0
mov eax, dword [0x14016ba40]
cmp eax, 3
jne 0x14005938f
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_SAM_X_tre_V2
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xa0], 0x43960000
mov dword [rbp + 0xa4], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xa0]
lea rcx, str.Checkbox_SAM_X_tre_V2
call fcn.14000bf90
lea rax, [0x1400de8dc]
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x68]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x30], 5
lea r8, [0x140146234]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 0x68], r12d
lea rcx, str.Fake_Lag
call fcn.14003cc10
mov rdx, qword [0x140146120]
mov r9, qword [rdx + 0x3ed0]
cmp byte [rdx + 0x48f3], r12b
je 0x14005908e
cmp byte [rdx + 0x48f2], r12b
jne 0x14005908e
test byte [rdx + 0x4770], 4
jne 0x1400591a4
mov eax, dword [rdx + 0x48b8]
cmp eax, dword [rdx + 0x476c]
jne 0x1400591a4
test eax, eax
jne 0x14005915b
jmp 0x1400591a4
mov eax, dword [rdx + 0x4774]
test r13b, al
je 0x1400591a4
cmp qword [rdx + 0x3ed8], r9
je 0x1400590ae
test al, al
jns 0x1400591a4
mov eax, dword [rdx + 0x3f30]
test eax, eax
je 0x1400590d3
cmp eax, dword [rdx + 0x476c]
je 0x1400590d3
cmp byte [rdx + 0x3f3d], r12b
jne 0x1400590d3
cmp eax, dword [r9 + 0x74]
jne 0x1400591a4
mov rcx, qword [rdx + 0x48b0]
test rcx, rcx
je 0x14005913d
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x14005913d
cmp byte [rcx + 0xaf], r12b
je 0x14005913d
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x14005913d
mov r8d, dword [rcx + 0xc]
bt r8d, 0x1b
jb 0x140059112
bt r8d, 0x1a
jae 0x14005913d
cmp qword [rax + 0x370], rcx
je 0x14005913d
nop dword [rax + rax]
cmp rax, rcx
je 0x14005913d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059120
test dword [rdx + 0x4770], 0x100
je 0x1400591a4
test byte [rdx + 0x4770], 4
jne 0x1400591a4
mov eax, dword [r9 + 0x74]
cmp dword [rdx + 0x476c], eax
jne 0x14005915b
cmp byte [r9 + 0xb0], r12b
jne 0x1400591a4
xor ecx, ecx
call fcn.140017560
lea rcx, str.SECOND_OF_FAKE_LAG
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005919f
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
lea r9, [0x14014626c]
lea r8, str.Apply_in_Each_Match
lea rdx, [0x14014614e]
lea rcx, str.FAKE_LAG
call fcn.14003a110
lea r9, [0x140146194]
mov byte [0x14014611b], al
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140146199]
lea rcx, str.SPEED_X20_ON
call fcn.14003a110
mov byte [0x14014611e], al
test al, al
je 0x140059224
cmp byte [0x140146199], r12b
je 0x140059224
lea rcx, [rbp + 0x400]
call fcn.14005f820
lea rcx, [rbp + 0x400]
call fcn.14004c340
cmp dword [rbp + 0x408], r12d
jne 0x14005aceb
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059270
cmp byte [rcx + 0x48f2], r12b
jne 0x140059270
test byte [rcx + 0x4770], 4
jne 0x140059384
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059384
test eax, eax
jne 0x14005933b
jmp 0x140059384
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059384
cmp qword [rcx + 0x3ed8], r9
je 0x140059290
test al, al
jns 0x140059384
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400592b5
cmp eax, dword [rcx + 0x476c]
je 0x1400592b5
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400592b5
cmp eax, dword [r9 + 0x74]
jne 0x140059384
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005931d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005931d
cmp byte [rdx + 0xaf], r12b
je 0x14005931d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005931d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400592f4
bt r8d, 0x1a
jae 0x14005931d
cmp qword [rax + 0x370], rdx
je 0x14005931d
nop dword [rax]
cmp rax, rdx
je 0x14005931d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059300
test dword [rcx + 0x4770], 0x100
je 0x140059384
test byte [rcx + 0x4770], 4
jne 0x140059384
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005933b
cmp byte [r9 + 0xb0], r12b
jne 0x140059384
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_GAME
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005937f
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
call fcn.14000c2f0
mov eax, dword [0x14016ba40]
cmp eax, 4
jne 0x140059a70
mov rcx, qword [0x140146120]
lea rdx, str.Checkbox_Xbest_X_tre_V2
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xa8], 0x43960000
mov dword [rbp + 0xac], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xa8]
lea rcx, str.Checkbox_Xbest_X_tre_V2
call fcn.14000bf90
xor r9d, r9d
lea r8, str.Apply_in_Login
lea rdx, [0x140146225]
lea rcx, str.Stop_Internet
call fcn.14003a110
mov rdx, qword [0x140146120]
movzx r10d, al
mov byte [0x140146137], al
mov r9, qword [rdx + 0x3ed0]
cmp byte [rdx + 0x48f3], r12b
je 0x1400594af
cmp byte [rdx + 0x48f2], r12b
jne 0x1400594af
test byte [rdx + 0x4770], 4
jne 0x1400595cc
mov eax, dword [rdx + 0x48b8]
cmp eax, dword [rdx + 0x476c]
jne 0x1400595cc
test eax, eax
jne 0x14005957b
jmp 0x1400595cc
mov eax, dword [rdx + 0x4774]
test r13b, al
je 0x1400595cc
cmp qword [rdx + 0x3ed8], r9
je 0x1400594cf
test al, al
jns 0x1400595cc
mov eax, dword [rdx + 0x3f30]
test eax, eax
je 0x1400594f4
cmp eax, dword [rdx + 0x476c]
je 0x1400594f4
cmp byte [rdx + 0x3f3d], r12b
jne 0x1400594f4
cmp eax, dword [r9 + 0x74]
jne 0x1400595cc
mov rcx, qword [rdx + 0x48b0]
test rcx, rcx
je 0x14005955d
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x14005955d
cmp byte [rcx + 0xaf], r12b
je 0x14005955d
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x14005955d
mov r8d, dword [rcx + 0xc]
bt r8d, 0x1b
jb 0x140059533
bt r8d, 0x1a
jae 0x14005955d
cmp qword [rax + 0x370], rcx
je 0x14005955d
nop dword [rax]
cmp rax, rcx
je 0x14005955d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140059540
test dword [rdx + 0x4770], 0x100
je 0x1400595cc
test byte [rdx + 0x4770], 4
jne 0x1400595cc
mov eax, dword [r9 + 0x74]
cmp dword [rdx + 0x476c], eax
jne 0x14005957b
cmp byte [r9 + 0xb0], r12b
jne 0x1400595cc
xor ecx, ecx
call fcn.140017560
lea rcx, str.Apply_in_Login
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400595bf
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
movzx r10d, byte [0x140146137]
test r10b, r10b
je 0x140059757
xor edx, edx
cmp byte [0x140146225], r12b
je 0x1400596b9
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140144bb8]
lea rdx, str.Desactivado_Internet_
lea rcx, [rbp + 0xa68]
call fcn.140047160
lea rcx, [rbp + 0x8c8]
jmp 0x140059732
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140144bb8]
lea rdx, str.Activado_Internet_
lea rcx, [rbp + 0x8e8]
call fcn.140047160
lea rcx, [rbp + 0x908]
lea rdx, str.Notification
mov rbx, rax
call fcn.140047160
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bcb0
xor r9d, r9d
lea r8, str.Hide_From_Screenshare
lea rdx, [0x14014619c]
lea rcx, str.Streamer_Mode
call fcn.14003a110
mov byte [0x140146135], al
test al, al
je 0x1400598ee
cmp byte [0x14014619c], r12b
movups xmm6, xmmword [0x140144bb8]
je 0x140059842
lea rdx, str.Streamer_Mode_Activated
lea rcx, [rbp + 0x928]
call fcn.140047160
lea rdx, [0x1400e7408]
mov rbx, rax
lea rcx, [rbp + 0x948]
call fcn.140047160
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bcb0
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x60], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x60]
mov r8d, r13d
lea r9, [0x1400cb080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400cb090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x1400598e8
mov rax, qword [rbp - 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x60]
jmp 0x1400598e2
lea rdx, str.Streamer_Mode_Removed
lea rcx, [rbp + 0x968]
call fcn.140047160
lea rdx, [0x1400e7408]
mov rbx, rax
lea rcx, [rbp + 0x988]
call fcn.140047160
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bcb0
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x58], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x58]
mov r8d, r13d
lea r9, [0x1400cb080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400cb090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x1400598e8
mov rax, qword [rbp - 0x58]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x58]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [0x140146120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005993a
cmp byte [rcx + 0x48f2], r12b
jne 0x14005993a
test byte [rcx + 0x4770], 4
jne 0x140059a4b
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059a4b
test eax, eax
jne 0x140059a02
jmp 0x140059a4b
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059a4b
cmp qword [rcx + 0x3ed8], r9
je 0x14005995a
test al, al
jns 0x140059a4b
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005997f
cmp eax, dword [rcx + 0x476c]
je 0x14005997f
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005997f
cmp eax, dword [r9 + 0x74]
jne 0x140059a4b
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400599e4
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400599e4
cmp byte [rdx + 0xaf], r12b
je 0x1400599e4
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400599e4
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400599be
bt r8d, 0x1a
jae 0x1400599e4
cmp qword [rax + 0x370], rdx
je 0x1400599e4
cmp rax, rdx
je 0x1400599e4
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400599c7
test dword [rcx + 0x4770], 0x100
je 0x140059a4b
test byte [rcx + 0x4770], 4
jne 0x140059a4b
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140059a02
cmp byte [r9 + 0xb0], r12b
jne 0x140059a4b
xor ecx, ecx
call fcn.140017560
lea rcx, str.Hide_From_Screenshare
call fcn.1400382e0
mov rax, qword [0x140146120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140059a46
mov r8d, 0x26d8
lea rdx, [0x1400d99c0]
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011a90
lea r9, [0x1400d9eaa]
mov r8d, 2
lea rdx, [0x140144bb8]
lea rcx, str.Particles_Color
call fcn.140042b50
call fcn.14000c2f0
movss xmm8, dword [0x1400e8698]
call fcn.14004f730
call fcn.14004f430
call fcn.14004be40
mov rcx, qword [0x140146120]
lea rdx, [rbp + 0x108]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, str.Move_detector
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
movss xmm0, dword [0x140144b00]
movss xmm1, dword [0x140144b04]
movss dword [rbp + 0x108], xmm0
movss dword [rbp + 0x10c], xmm1
call fcn.1400392b0
mov rax, qword [0x140146120]
mov ecx, dword [rax + 0x3f30]
test ecx, ecx
je 0x140059bb8
cmp ecx, dword [rax + 0x476c]
jne 0x140059bb8
mov rcx, qword [0x140146240]
lea rdx, [0x140146250]
call qword [sym.imp.USER32.dll_GetWindowRect]
movss xmm6, dword [0x1400e86e4]
lea rcx, [rbp + 0x658]
cvttss2si edi, dword [0x140144b04]
cvttss2si esi, dword [0x140144b00]
movaps xmm2, xmm6
call fcn.140013970
movd xmm0, dword [0x140146254]
lea rcx, [rbp + 0x660]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm6
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140013970
mov r9d, esi
mov rcx, qword [0x140146240]
mov r8d, ebx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x140146250]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.140011a90
mov rdi, qword [0x140146240]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140059c35
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140059c2c
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x6b8]
mov qword [rbp + 0x498], rcx
lea rdx, [rbp + 0x490]
mov rcx, rdi
mov dword [rbp + 0x490], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x6b8], xmm0
mov dword [rbp + 0x4a0], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0xf
jbe 0x140059c76
mov rcx, qword [rbp + 0x1c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059c71
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005acf2
call fcn.1400c595c
mov rcx, qword [rbp - 0x50]
mov qword [rbp + 0x1d0], r12
mov qword [rbp + 0x1d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c0], r12b
test rcx, rcx
je 0x140059d4b
mov rsi, qword [rbp - 0x48]
cmp rcx, rsi
je 0x140059d0a
lea rbx, [rcx + 0x18]
nop dword [rax]
mov rdx, qword [rbx]
cmp rdx, 0xf
jbe 0x140059cea
mov rcx, qword [rbx - 0x18]
inc rdx
cmp rdx, 0x1000
jb 0x140059ce5
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005acf2
mov rcx, r8
call fcn.1400c595c
mov qword [rbx - 8], r12
mov qword [rbx], reloc.WS2_32.dll_ntohs
mov byte [rbx - 0x18], r12b
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rsi
jne 0x140059cb0
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x40]
mov rax, rcx
sub rdx, rcx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x140059d3a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005acf2
call fcn.1400c595c
xorps xmm0, xmm0
mov qword [rbp - 0x40], r12
movdqu xmmword [rbp - 0x50], xmm0
mov rdx, qword [rbp + 0x448]
cmp rdx, 0xf
jbe 0x140059d8c
mov rcx, qword [rbp + 0x430]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059d87
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005acf2
call fcn.1400c595c
mov rdx, qword [rbp + 0x468]
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x430], r12b
cmp rdx, 0xf
jbe 0x140059de6
mov rcx, qword [rbp + 0x450]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059de1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005acf2
call fcn.1400c595c
mov ecx, reloc.WLDAP32.dll_Ordinal_45
mov qword [rbp + 0x460], r12
mov qword [rbp + 0x468], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x450], r12b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140059e1d
cmp byte [reloc.WS2_32.dll_accept], r12b
sete byte [0x140144af8]
mov rax, qword [0x140146120]
test rax, rax
jne 0x140059e4a
mov r8d, 0xfe3
lea rdx, [0x1400d99c0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140146120]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x1400fb110]
mulss xmm0, dword [0x1400e8604]
cmp ecx, 0xff
jg 0x140059e73
cmp byte [reloc.WS2_32.dll_accept], r12b
mov eax, Ordinal_301
jne 0x140059e76
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x1400fb110], r8d
cmp r8d, 0xff
jle 0x140059eb3
mov dword [0x1400fb110], 0xff
mov r8d, 0xff
mov rcx, qword [0x140146240]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x1400fb110], r12d
mov edx, r12d
mov rcx, qword [0x140146240]
mov eax, 5
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000b7b0
mov rcx, qword [0x14016ba68]
lea r8, [0x14016ba48]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x6c8], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14016ba68]
lea r8, [rbp + 0x6c8]
mov rdx, qword [0x14016ba48]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140146120]
cmp dword [rbx + 0x48a0], r12d
jg 0x140059f5b
mov r8d, 0x6fc
lea rdx, [0x1400d97a0]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.1400485f0
mov rcx, qword [0x14016ba50]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x140056c35
movss xmm0, dword [rsp + 0x70]
lea rcx, [0x140144bc8]
movss xmm1, dword [rsp + 0x74]
addss xmm0, xmm9
addss xmm1, dword [0x1400e86a8]
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm1
call fcn.140004380
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x70]
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0xb0]
mov rcx, rsi
call fcn.14002b7f0
movss xmm0, dword [rsp + 0x70]
lea rcx, [0x140144bc8]
movss xmm1, dword [rsp + 0x74]
addss xmm0, xmm9
addss xmm1, dword [0x1400e86a8]
movss dword [rbp + 0xb8], xmm0
movss dword [rbp + 0xbc], xmm1
call fcn.140004380
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x70]
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0xb8]
mov rcx, rsi
call fcn.14002b7f0
movss xmm0, dword [0x14016ba3c]
ucomiss xmm0, xmm10
jp 0x14005a06f
jne 0x14005a06f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14016ba3c], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14016ba3c]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm6
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005a128
cmp byte [reloc.WS2_32.dll_accept], r12b
movss xmm1, dword [0x14016ba38]
je 0x14005a0e4
comiss xmm13, xmm1
jbe 0x14005a0d5
call fcn.140008760
movss xmm1, dword [0x14016ba38]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
addss xmm1, xmm0
movss dword [0x14016ba38], xmm1
comiss xmm1, xmm13
jb 0x14005a121
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x14005a121
comiss xmm1, xmm10
jbe 0x14005a114
call fcn.140008760
movss xmm1, dword [0x14016ba38]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
subss xmm1, xmm0
movss dword [0x14016ba38], xmm1
comiss xmm10, xmm1
jb 0x14005a121
mov byte [reloc.WS2_32.dll_accept], r13b
mov dword [0x14016ba3c], r12d
mov rcx, qword [0x14016ce98]
mov rdi, qword [0x140146120]
mov rbx, rcx
mov qword [rsp + 0x60], rcx
test rcx, rcx
jne 0x14005a17f
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x14005a177
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], r12d
jg 0x14005a170
mov r8d, 0x6fc
lea rdx, [0x1400d97a0]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov rbx, rcx
call fcn.1400124d0
lea rcx, [rdi + 0x4838]
lea rdx, [rsp + 0x60]
call fcn.14001f8c0
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140028fa0
movdqa xmm0, xmmword [0x1400e8cc0]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call fcn.140004380
movss xmm9, dword [rsp + 0x70]
lea rcx, str.SAM_X_TER
movss xmm0, dword [0x1400e86e4]
lea rdx, [rbp - 0x10]
movss xmm3, dword [0x1400e86d0]
movaps xmm7, xmm9
addss xmm7, xmm8
mov qword [rsp + 0x30], r12
movss xmm8, dword [rsp + 0x74]
addss xmm9, xmm10
movaps xmm6, xmm8
mov qword [rsp + 0x28], rcx
subss xmm6, dword [0x1400e8644]
addss xmm8, dword [0x1400e866c]
mov edi, eax
movss dword [rsp + 0x20], xmm0
mov rax, qword [0x140146120]
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.140034d10
movss xmm0, dword [rbp - 0x10]
subss xmm7, xmm9
subss xmm6, xmm8
addss xmm0, dword [0x1400e8594]
mulss xmm7, xmm15
mulss xmm6, xmm15
addss xmm9, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [rbp - 0xc]
addss xmm8, xmm6
mulss xmm0, xmm15
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xc4], xmm8
movss dword [rbp - 0x10], xmm1
mulss xmm1, xmm15
subss xmm9, xmm1
movss dword [rbp + 0xc0], xmm9
test edi, 0xff000000
je 0x14005a33d
mov rax, qword [rsi + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rsi + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x14005a2ea
mov r8d, 0x64d
lea rdx, [0x1400e3d90]
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e8199]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0xc0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.SAM_X_TER
mov rdx, rsi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034f30
call fcn.140012600
movss xmm3, dword [rsp + 0x70]
lea rcx, [0x140144b28]
movss xmm2, dword [rsp + 0x74]
movaps xmm0, xmm3
movss xmm8, dword [0x1400e8698]
addss xmm3, xmm10
movaps xmm1, xmm2
addss xmm0, xmm8
addss xmm1, dword [0x1400e8654]
addss xmm2, xmm12
movss dword [rbp + 0xd0], xmm3
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xcc], xmm1
movss dword [rbp + 0xd4], xmm2
call fcn.140004380
mov r9d, eax
mov dword [rsp + 0x28], r12d
lea rdx, [rbp + 0xd0]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xc8]
mov rcx, rsi
call fcn.14002b7f0
mov rcx, qword [0x140146120]
lea rdx, str.Inputs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm12
addss xmm1, dword [0x1400e8670]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xd8], 0x43960000
mov dword [rbp + 0xdc], 0x438c0000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007ce0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xd8]
lea rcx, str.Inputs
call fcn.14000bf90
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x30], r12
lea rbx, [0x1401461e0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Username
mov r8, rbx
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov dword [rbp + 0xe0], 0x43960000
xor edx, edx
mov dword [rbp + 0xe4], 0x42480000
call fcn.14003ffd0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x30], r12
lea rdi, [0x1401461a0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Password
mov r8, rdi
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov dword [rbp + 0xe8], 0x43960000
xor edx, edx
mov dword [rbp + 0xec], 0x42480000
call fcn.14003ffd0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rbp + 0xf0], 0x43960000
mov dword [rbp + 0xf4], 0x42480000
lea rsi, [0x140146150]
mov qword [rsp + 0x20], rax
mov r8, rsi
lea rcx, str.License
mov r9d, 0x40
xor edx, edx
call fcn.14003ffd0
lea rdx, [rbp + 0xf8]
mov dword [rbp + 0xf8], 0x437a0000
lea rcx, str.Login
mov dword [rbp + 0xfc], 0x42480000
call fcn.140038bf0
test al, al
je 0x14005a90e
xorps xmm0, xmm0
mov qword [rbp + 0x510], r12
movups xmmword [rbp + 0x500], xmm0
mov qword [rbp + 0x518], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], r12b
jne 0x14005a5a1
mov rdx, rdi
lea rcx, [rbp + 0x500]
call fcn.140047840
xorps xmm0, xmm0
mov qword [rbp + 0x530], r12
movups xmmword [rbp + 0x520], xmm0
mov qword [rbp + 0x538], r12
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], r12b
jne 0x14005a5e0
mov rdx, rbx
lea rcx, [rbp + 0x520]
call fcn.140047840
lea r8, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea rcx, [0x1401673d0]
call fcn.140070450
cmp byte [0x140167600], r12b
je 0x14005a8b9
mov edx, 0x20001
lea rcx, str.C:Windows0704.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
movups xmm6, xmmword [0x140144bb8]
lea rcx, [0x140167608]
mov dword [0x14016ba58], r13d
call fcn.140047060
mov rdx, rax
lea rcx, [rbp + 0x9a8]
call fcn.140047160
movzx ecx, byte [0x1400e8198]
lea r9, [rsp + 0x60]
xorps xmm0, xmm0
mov qword [rbp + 0x310], 9
movups xmmword [rbp + 0x300], xmm0
lea rdx, [rbp + 0x300]
mov r8, rax
movsd xmm0, qword [str.SAM_X_TER]
movsd qword [rbp + 0x300], xmm0
mov qword [rbp + 0x318], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x308], cl
mov byte [rbp + 0x309], r12b
movdqa xmmword [rsp + 0x60], xmm6
call fcn.14004bcb0
lea rcx, [rbp + 0x470]
call fcn.140055b50
lea rax, [0x1400e64e0]
lea rcx, [rbp + 0x848]
mov qword [rbp + 0x7c0], rax
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r9d, r9d
lea rdx, [rbp + 0x7c8]
xor r8d, r8d
lea rcx, [rbp + 0x7c0]
or r15d, r13d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rbp + 0x7c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x7c0], rax
mov rax, qword [rbp + 0x7c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x7bc], edx
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x830], r12
lea rdx, str.Loged_in_C___n_n
mov qword [rbp + 0x7c8], rax
lea rcx, [rbp + 0x7c0]
mov dword [rbp + 0x838], 4
call fcn.14005ef30
cmp qword [rbp + 0x488], 0xf
lea rdx, [rbp + 0x470]
mov r8, qword [rbp + 0x480]
mov rcx, rax
cmova rdx, qword [rbp + 0x470]
call fcn.140060430
mov ecx, dword [rbp + 0x838]
xorps xmm0, xmm0
mov eax, ecx
mov qword [rbp + 0x420], r12
and al, 0x22
mov qword [rbp + 0x428], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x410], xmm0
mov byte [rbp + 0x410], r12b
movups xmmword [rbp + 0x4a8], xmm0
cmp al, 2
je 0x14005a824
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x14005a81e
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
lea rcx, [rbp + 0x7c8]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, qword [rbp + 0x830]
lea rcx, [rbp + 0x7c8]
mov rbx, rax
cmovb rbx, qword [rbp + 0x830]
sub rbx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x14005a86e
mov ecx, dword [rbp + 0x838]
test cl, 4
jne 0x14005a860
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x14005a860
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbp + 0x7c8]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x14005a86e
mov rbx, qword [rbp + 0x4b0]
mov rdi, qword [rbp + 0x4a8]
test rdi, rdi
je 0x14005a885
mov r8, rbx
lea rcx, [rbp + 0x410]
mov rdx, rdi
call fcn.14005e910
lea rdx, [rbp + 0x410]
lea rcx, [0x1401673d0]
call fcn.14006fb60
lea rcx, [rbp + 0x7c0]
call fcn.14005cce0
lea rcx, [rbp + 0x470]
call fcn.140047070
lea rdi, [0x1401461a0]
jmp 0x14005a907
movups xmm6, xmmword [0x140144bb8]
lea rcx, [0x140167608]
call fcn.140047060
mov rdx, rax
lea rcx, [rbp + 0x9c8]
call fcn.140047160
lea rdx, [0x1400e7408]
mov rbx, rax
lea rcx, [rbp + 0x9e8]
call fcn.140047160
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bcb0
lea rbx, [0x1401461e0]
lea rdx, [rbp + 0x100]
mov dword [rbp + 0x100], 0x437a0000
lea rcx, str.Register
mov dword [rbp + 0x104], 0x42480000
call fcn.140038bf0
test al, al
je 0x14005abfd
xorps xmm0, xmm0
mov qword [rbp + 0x550], r12
movups xmmword [rbp + 0x540], xmm0
mov qword [rbp + 0x558], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rsi + r8], r12b
jne 0x14005a960
mov rdx, rsi
lea rcx, [rbp + 0x540]
call fcn.140047840
xorps xmm0, xmm0
mov qword [rbp + 0x570], r12
movups xmmword [rbp + 0x560], xmm0
mov qword [rbp + 0x578], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], r12b
jne 0x14005a997
mov rdx, rdi
lea rcx, [rbp + 0x560]
call fcn.140047840
xorps xmm0, xmm0
mov qword [rbp + 0x590], r12
movups xmmword [rbp + 0x580], xmm0
mov qword [rbp + 0x598], r12
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rbx + r8], r12b
jne 0x14005a9d0
mov rdx, rbx
lea rcx, [rbp + 0x580]
call fcn.140047840
lea r9, [rbp + 0x540]
lea r8, [rbp + 0x560]
lea rdx, [rbp + 0x580]
lea rcx, [0x1401673d0]
call fcn.1400729e0
cmp byte [0x140167600], r12b
je 0x14005ab49
mov edx, 0x20001
lea rcx, str.C:Windows0704.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
movups xmm6, xmmword [0x140144bb8]
lea rcx, [0x140167608]
call fcn.140047060
mov rdx, rax
lea rcx, [rbp + 0xa08]
call fcn.140047160
lea rdx, str.SAM_X_TER
mov rbx, rax
lea rcx, [rbp + 0xa28]
call fcn.140047160
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004bcb0
lea rcx, [rbp + 0x320]
mov dword [0x14016ba58], r13d
call fcn.140055b50
lea rcx, [rbp + 0xa90]
call fcn.14005d470
lea rdx, str.USER_IS_REGESTER___n_n
lea rcx, [rbp + 0xa90]
call fcn.14005ef30
mov rcx, rax
lea rdx, [rbp + 0x320]
call fcn.14005f890
lea rdx, [rbp + 0xa48]
lea rcx, [rbp + 0xa90]
call fcn.14005d3c0
mov rdx, rax
lea rcx, [0x1401673d0]
call fcn.14006fb60
lea rcx, [rbp + 0xa90]
call fcn.14005cce0
mov rdx, qword [rbp + 0x338]
cmp rdx, 0xf
jbe 0x14005ab26
mov rcx, qword [rbp + 0x320]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ab21
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005acf2
call fcn.1400c595c
mov qword [rbp + 0x330], r12
mov qword [rbp + 0x338], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x320], r12b
call fcn.14000c2f0
jmp 0x140059a79
cmp qword [0x140167620], 0xf
lea rdx, [0x140167608]
movups xmm6, xmmword [0x140144bb8]
cmova rdx, qword [0x140167608]
mov r8, 0xffffffffffffffff
xorps xmm0, xmm0
mov qword [rbp + 0x5b0], r12
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rbp + 0x5b8], r12
inc r8
cmp byte [rdx + r8], r12b
jne 0x14005ab86
lea rcx, [rbp + 0x5a0]
call fcn.140047840
movzx eax, byte [0x1400e7410]
lea r9, [rsp + 0x60]
xorps xmm0, xmm0
mov qword [rbp + 0x350], 9
movups xmmword [rbp + 0x340], xmm0
lea r8, [rbp + 0x5a0]
mov qword [rbp + 0x358], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [0x1400e7408]
lea rdx, [rbp + 0x340]
movsd qword [rbp + 0x340], xmm0
mov byte [rbp + 0x348], al
mov byte [rbp + 0x349], r12b
movdqa xmmword [rsp + 0x60], xmm6
call fcn.14004bcb0
call fcn.14000c2f0
jmp 0x140059a79
call fcn.140049870
call fcn.140049b60
call fcn.140006830
call fcn.14004fda0
mov rcx, qword [0x140146240]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x290]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x1400565d4
mov ecx, 6
mov dword [rbp + 0x138], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x148], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x158], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x168], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x128], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x178], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x188], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x198], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14004fda0
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x290]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x1400565d1
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x118], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor r9d, r9d
lea rdx, str.Run_the_program_as_admin_By_SAM_X_tre__
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14004bbb0
int3
call fcn.140055df0
int3
call fcn.140002e80
int3