Function at 0x140056810
Capabilities:
Create http request
Create process on windows
Create thread
Download and write a file
Execute command
Log keystrokes via polling
Read data from internet
Receive and write data from server to client
Receive data
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x2628]
mov eax, 0x2728
call fcn.140126290
sub rsp, rax
call fcn.14004da40
mov rdx, rax
lea rcx, [0x1402baeb0]
call fcn.14004eae0
call fcn.14004da40
mov rdx, rax
lea rcx, [0x1402baeb0]
call fcn.14004eae0
test eax, eax
jne 0x1400568b4
lea r9, str.No_Process_Found_
mov edx, 3
mov r8d, 0xfa0
lea rcx, [rbp + 0x560]
call fcn.14004cb70
mov rax, qword [0x1402b9f58]
cmp rax, qword [0x1402b9f60]
je 0x1400568a5
mov r8d, 0x2010
lea rdx, [rbp + 0x560]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402b9f58], 0x2010
jmp 0x1400568b4
lea r8, [rbp + 0x560]
mov rdx, rax
call fcn.14005c5d0
xor r13d, r13d
lea r8, [0x140050f60]
mov qword [rsp + 0x28], r13
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], r13d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140054530]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x1400551f0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140055580]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x1400558f0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140055bd0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140055ee0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140051270]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140056210]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140054910]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140056530]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
xor r9d, r9d
mov dword [rsp + 0x20], r13d
lea r8, [0x140054f00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140054c00]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140052120]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x1400534c0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140052410]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140051ac0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140051e40]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140052820]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x1402bb070]
call fcn.140067260
xor ecx, ecx
cmp byte [0x1402bb288], r13b
jne 0x140056b2f
xor r9d, r9d
lea rdx, str.Couldnt_Connect_To_KeyAuth_
xor r8d, r8d
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x2740], rbx
lea rax, [0x14005b7a0]
mov qword [rsp + 0x2748], rsi
mov edx, 0x7f00
mov qword [rsp + 0x2750], rdi
mov qword [rsp + 0x2720], r12
mov qword [rsp + 0x2718], r14
mov dword [rbp + 0x4f0], 0x50
mov dword [rbp + 0x4f4], 0x40
mov qword [rbp + 0x4f8], rax
mov qword [rbp + 0x500], r13
mov qword [rbp + 0x508], r13
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x510], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x520], r13
mov qword [rbp + 0x518], rax
xor ecx, ecx
lea rax, [0x140162c58]
mov qword [rbp + 0x528], rax
mov qword [rbp + 0x530], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x4f0]
mov qword [rbp + 0x538], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov edi, 1
mov ecx, edi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x131]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r13
lea r8, str.NATCHO_CHEAT
mov qword [rsp + 0x50], r13
cdq
mov qword [rsp + 0x48], r13
sub eax, edx
mov rdx, qword [rbp + 0x530]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r13
xor ecx, ecx
mov dword [rsp + 0x38], 0x262
sar eax, 1
sub eax, 0x1e0
mov dword [rsp + 0x30], 0x3c0
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp + 0x230], rax
mov edx, 0xffffffec
mov r12, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, r12
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140163a10]
lea rdx, [rbp + 0x540]
mov rcx, r12
movdqu xmmword [rbp + 0x540], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp - 0x18]
mov rcx, r12
movups xmmword [rbp - 0x18], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x434], r13
mov qword [rbp + 0x448], 2
lea rax, [rbp - 0x80]
mov qword [rbp + 0x460], 2
lea rbx, [0x1402bb368]
mov qword [rbp + 0x420], r13
mov qword [rsp + 0x58], rbx
lea rsi, [0x1402bb358]
mov qword [rsp + 0x50], rax
lea r14, [0x1402bb350]
mov qword [rsp + 0x48], rsi
lea rax, [rbp + 0x420]
mov qword [rsp + 0x40], r14
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rsp + 0x70]
mov dword [rsp + 0x28], 2
mov edx, edi
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x430], Ordinal_33
mov dword [rbp + 0x428], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x42c], edi
mov dword [rbp + 0x444], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x450], r12
mov qword [rbp + 0x43c], rdi
mov qword [rbp + 0x458], rdi
mov dword [rsp + 0x70], 0xb000
mov dword [rsp + 0x74], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x140056df9
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x80]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rsi
lea rax, [rbp + 0x420]
mov qword [rsp + 0x40], r14
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, 5
mov dword [rsp + 0x30], 7
lea rax, [rsp + 0x70]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140056e1d
call fcn.14005b720
mov rdx, qword [rbp + 0x508]
mov rcx, qword [rbp + 0x530]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, edi
jmp 0x14005b64d
mov rcx, qword [0x1402bb350]
lea r9, [rbp - 0x70]
mov qword [rsp + 0x2710], r15
lea r8, [0x1401637a0]
movaps xmmword [rsp + 0x2700], xmm6
xor edx, edx
movaps xmmword [rsp + 0x26f0], xmm7
mov rax, qword [rcx]
movaps xmmword [rsp + 0x26e0], xmm8
movaps xmmword [rsp + 0x26d0], xmm9
movaps xmmword [rsp + 0x26c0], xmm10
movaps xmmword [rsp + 0x26b0], xmm11
movaps xmmword [rsp + 0x26a0], xmm12
movaps xmmword [rsp + 0x2690], xmm13
movaps xmmword [rsp + 0x2680], xmm14
call qword [rax + 0x48]
mov rcx, qword [0x1402bb358]
lea r9, [0x1402bb348]
mov rdx, qword [rbp - 0x70]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1402bad40]
test rbx, rbx
je 0x140056edc
inc dword [rbx + 0xf4]
mov rdx, qword [0x1402bad30]
mov ecx, 0x5e50
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140056efe
xor edx, edx
mov rcx, rax
call fcn.1400019e0
jmp 0x140056f01
mov rax, r13
mov qword [0x1402bad40], rax
call fcn.140006190
test rbx, rbx
je 0x140056f1b
mov qword [0x1402bad40], rbx
jmp 0x140056f22
mov rbx, qword [0x1402bad40]
test rbx, rbx
jne 0x140056f48
mov r8d, 0x1031
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402bad40]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
or dword [rbx + 8], 3
xor eax, eax
movups xmmword [rbp + 0x430], xmm6
mov qword [rbp + 0x4a0], rax
mov eax, 0xffff
movups xmmword [rbp + 0x460], xmm6
mov dword [rbp + 0x438], 3
movups xmmword [rbp + 0x470], xmm6
mov dword [rbp + 0x43c], edi
movups xmmword [rbp + 0x420], xmm6
mov byte [rbp + 0x42c], dil
mov dword [rbp + 0x464], 0x7f7fffff
mov dword [rbp + 0x470], 0x3f800000
mov word [rbp + 0x474], ax
mov dword [rbp + 0x46c], 0x10c
cmp byte [rsi + 0x18], r13b
je 0x140056fd9
mov r8d, 0xb89
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x420]
movaps xmm8, xmmword [rbp + 0x430]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x460]
movaps xmm10, xmmword [rbp + 0x470]
movsd xmm11, qword [rbp + 0x4a0]
movaps xmmword [rbp + 0x560], xmm7
movaps xmmword [rbp + 0x570], xmm8
movaps xmmword [rbp + 0x580], xmm6
movaps xmmword [rbp + 0x590], xmm6
movaps xmmword [rbp + 0x5a0], xmm9
movaps xmmword [rbp + 0x5b0], xmm10
movaps xmmword [rbp + 0x5c0], xmm6
movaps xmmword [rbp + 0x5d0], xmm6
movsd qword [rbp + 0x5e0], xmm11
test rdi, rdi
je 0x140057069
mov r8d, 0xb8b
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14026d670]
mov dword [rbp + 0x568], 0x4ba44
lea r14, [0x140160180]
mov qword [rbp + 0x560], rax
lea rdx, [rbp + 0x560]
mov qword [rbp + 0x598], r14
mov rcx, rsi
mov dword [rbp + 0x574], 0x41880000
call fcn.140030b10
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r13b
je 0x1400570cc
mov r8d, 0xb89
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x560], xmm7
movaps xmmword [rbp + 0x570], xmm8
movaps xmmword [rbp + 0x580], xmm6
movaps xmmword [rbp + 0x590], xmm6
movaps xmmword [rbp + 0x5a0], xmm9
movaps xmmword [rbp + 0x5b0], xmm10
movaps xmmword [rbp + 0x5c0], xmm6
movaps xmmword [rbp + 0x5d0], xmm6
movsd qword [rbp + 0x5e0], xmm11
test rdi, rdi
je 0x14005712f
mov r8d, 0xb8b
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14017c740]
mov dword [rbp + 0x568], 0x4d2c4
lea rdx, [rbp + 0x560]
mov qword [rbp + 0x560], rax
mov rcx, rsi
mov dword [rbp + 0x574], 0x41880000
mov qword [rbp + 0x598], r14
call fcn.140030b10
mov rbx, qword [rbx + 0x58]
mov qword [0x1402bad50], rax
cmp byte [rbx + 0x18], r13b
je 0x140057192
mov r8d, 0xb89
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x560], xmm7
movaps xmmword [rbp + 0x570], xmm8
movaps xmmword [rbp + 0x580], xmm6
movaps xmmword [rbp + 0x590], xmm6
movaps xmmword [rbp + 0x5a0], xmm9
movaps xmmword [rbp + 0x5b0], xmm10
movaps xmmword [rbp + 0x5c0], xmm6
movaps xmmword [rbp + 0x5d0], xmm6
movsd qword [rbp + 0x5e0], xmm11
test rdi, rdi
je 0x1400571f5
mov r8d, 0xb8b
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1402b92c0]
mov dword [rbp + 0x568], 0xb18
lea rdx, [rbp + 0x560]
mov qword [rbp + 0x560], rax
mov rcx, rbx
mov dword [rbp + 0x574], 0x41700000
mov qword [rbp + 0x598], r14
call fcn.140030b10
xor ecx, ecx
mov qword [0x1402bae08], rax
call fcn.140029250
cmp qword [0x1402bad90], r13
mov qword [rbp + 0x78], 0xffffffffffffffff
mov qword [rbp + 0x80], 0xffffffffffffffff
mov qword [rbp + 0x88], 0xffffffffffffffff
mov qword [rbp + 0x90], 0xffffffffffffffff
mov dword [rbp + 0x98], 0xffffffff
mov qword [rbp + 0x9c], 0xfffffffffffffffd
mov dword [rbp + 0xa4], 0xffffffff
mov qword [rbp + 0xa8], r13
jne 0x1400572c7
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad90]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x14026c270]
mov r8d, 0x249
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bada0], r13
jne 0x140057304
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bada0]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x14026d480]
mov r8d, 0x1e8
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad80], r13
jne 0x140057341
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad80]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c9a10]
mov r8d, 0x193
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bada8], r13
jne 0x14005737e
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bada8]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402b90c0]
mov r8d, 0x1f7
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad88], r13
jne 0x1400573bb
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad88]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c9bb0]
mov r8d, 0xa26be
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad60], r13
jne 0x1400573f8
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad60]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402b9de0]
mov r8d, 0x100
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad58], r13
jne 0x140057435
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad58]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x14017c2b0]
mov r8d, 0x243
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad78], r13
jne 0x140057472
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad78]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x14017c500]
mov r8d, 0x23f
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad98], r13
jne 0x1400574af
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad98]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x14026c4c0]
mov r8d, 0xfbe
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bad70], r13
jne 0x1400574ec
mov rcx, qword [0x1402bb358]
lea rax, [0x1402bad70]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x14017b110]
mov r8d, 0x1192
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, r12
call fcn.14004a8e0
mov rax, qword [0x1402bad40]
mov r14, qword [0x1402bb368]
mov rsi, qword [0x1402bb358]
test rax, rax
jne 0x14005752f
mov r8d, 0x1031
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bad40]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r13
je 0x14005755d
mov r8d, 0x221
lea rdx, str.C:UsersNATCHODesktopcheat_natcho_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bad40]
test rax, rax
je 0x140057568
inc dword [rax + 0xf4]
mov rdx, qword [0x1402bad30]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x1400575af
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x1400575b2
mov rbx, r13
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x40]
mov qword [rdi + 0x98], rbx
lea rdx, [0x140161a80]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov qword [rbp + 0x238], r13
call qword [rax]
test eax, eax
jne 0x140057638
mov rcx, qword [rbp - 0x40]
lea r8, [rbp - 0x38]
lea rdx, [0x140161a90]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140057638
mov rcx, qword [rbp - 0x38]
lea r8, [rbp + 0x238]
lea rdx, [0x140161aa0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140057638
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x238]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140057647
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x140057656
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movzx ebx, byte [rsp + 0x60]
xor r15b, r15b
movzx edi, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movss xmm12, dword [0x140163820]
movss xmm14, dword [0x14016381c]
movss xmm13, dword [0x140163874]
mov dword [rbp - 0x80], r15d
movaps xmmword [rsp + 0x2670], xmm15
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x420]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140057738
mov ebx, 1
nop word [rax + rax]
lea rcx, [rbp + 0x420]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x420]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x428], 0x12
lea rcx, [rbp + 0x420]
movzx r15d, r15b
cmove r15d, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400576e0
movzx ebx, byte [rsp + 0x60]
mov dword [rbp - 0x80], r15d
test r15b, r15b
jne 0x14005b40f
mov r15, qword [0x1402bad40]
test r15, r15
je 0x140057752
mov r15, qword [r15 + 0xa0]
test r15, r15
jne 0x14005776f
jmp 0x140057755
mov r15, r13
mov r8d, 0x251
lea rdx, str.C:UsersNATCHODesktopcheat_natcho_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [r15 + 0x48], 0
jne 0x14005777b
call fcn.14004a270
call fcn.14004b660
call fcn.140008930
mov r13, qword [0x1402bad40]
test r13, r13
jne 0x1400577b2
mov r8d, 0xba2
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r13, qword [0x1402bad40]
mov dword [r13 + 0x381c], 0x41a00000
lea rcx, str.Menu
mov dword [r13 + 0x3820], 0x41a00000
xor eax, eax
mov qword [r13 + 0x37d8], rax
xor edx, edx
mov dword [r13 + 0x37e4], eax
mov r8d, 0x20bb
mov dword [r13 + 0x3844], 0x41000000
movss xmm0, dword [0x1402b9f40]
movss xmm1, dword [str._O_]
movss dword [0x1402bbaa8], xmm0
movss xmm0, dword [0x1402b9f48]
movss dword [0x1402bbab0], xmm0
movss dword [0x1402bbaac], xmm1
mov dword [0x1402bbab4], 0x3f800000
or dword [r13 + 0x47d0], 2
mov dword [r13 + 0x47f0], 0x44700000
mov dword [r13 + 0x47f4], 0x44188000
mov dword [r13 + 0x47d8], 1
call fcn.14000f4d0
call fcn.140050880
mov rax, qword [0x1402bad40]
lea rdx, [rbp - 0x18]
mov rcx, qword [rax + 0x3ef8]
mov byte [rcx + 0xb8], 1
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r15, qword [0x1402bad40]
xorps xmm15, xmm15
mov rax, qword [r15 + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm15
jp 0x1400578ad
jne 0x1400578ad
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm15
jp 0x1400578ad
je 0x14005791d
movd xmm0, dword [rbp - 0x14]
mov r9d, 0x3c0
movd xmm1, dword [rbp - 0x18]
mov rcx, r12
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x262
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x24]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x1402bad40]
lea rdx, [rbp + 0x240]
xor r8d, r8d
mov qword [rbp + 0x240], 0
mov rcx, qword [rax + 0x3ef8]
call fcn.140013130
mov r15, qword [0x1402bad40]
mov rax, qword [r15 + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movsd xmm0, qword [rax + 0x20]
movss xmm6, dword [rax + 0x250]
movss xmm7, dword [rax + 0x254]
subss xmm7, dword [rax + 0x24]
movsd qword [rbp - 0x78], xmm0
movss xmm0, dword [rax + 0x20]
subss xmm6, xmm0
jne 0x140057960
cmp qword [r15 + 0x4b38], 0
je 0x14005796c
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x140057990
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb3c]
mov r10, rax
movss xmm0, dword [0x1402bbb38]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x3a4], xmm1
movss xmm1, dword [0x1402bbb44]
movss dword [rbp + 0x3a0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x3a0]
movss xmm0, dword [0x1402bbb40]
movss dword [rbp + 0x3a8], xmm0
movss dword [rbp + 0x3ac], xmm1
call fcn.140003e30
movss xmm10, dword [rbp - 0x78]
lea r8, [rbp + 0x290]
movss xmm11, dword [rbp - 0x74]
lea rdx, [rbp - 0x78]
movaps xmm0, xmm10
mov dword [rsp + 0x28], 0
addss xmm0, xmm6
movaps xmm1, xmm11
addss xmm1, xmm7
mov r9d, eax
mov rcx, r10
movss dword [rbp + 0x290], xmm0
movss xmm0, dword [0x1401638c4]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x294], xmm1
call fcn.14002cb70
mov r8, qword [0x1402bad40]
lea rcx, [rbp + 0x3b0]
mov rax, qword [r8 + 0x3ef8]
movsd xmm1, qword [rax + 0x28]
movsd xmm7, qword [rax + 0x20]
movaps xmm0, xmm1
movss xmm8, dword [rax + 0x20]
movaps xmm6, xmm7
movss xmm9, dword [rax + 0x24]
shufps xmm0, xmm0, 0x55
movsd qword [rsp + 0x70], xmm7
addss xmm7, xmm1
movsd qword [rsp + 0x70], xmm1
movss xmm1, dword [0x1402bbaac]
movss dword [rbp + 0x3b4], xmm1
movss xmm1, dword [0x1402bbab4]
mulss xmm1, dword [r8 + 0x37d0]
shufps xmm6, xmm6, 0x55
addss xmm6, xmm0
movss xmm0, dword [0x1402bbaa8]
movss dword [rbp + 0x3b0], xmm0
movss xmm0, dword [0x1402bbab0]
movss dword [rbp + 0x3bc], xmm1
movss dword [rbp + 0x3b8], xmm0
call fcn.140003e30
mov rcx, qword [r8 + 0x3ef8]
mov r12d, eax
mov byte [rcx + 0xb8], 1
mov rcx, qword [r8 + 0x3ef8]
mov r15, qword [rcx + 0x298]
test eax, 0xff000000
je 0x140057bf7
test byte [r15 + 0x30], 1
addss xmm9, xmm12
movss xmm3, dword [0x140163894]
addss xmm8, xmm12
mov dword [rsp + 0x20], 0xf0
mov rcx, r15
je 0x140057b83
subss xmm6, xmm12
movss dword [rbp + 0x2a0], xmm8
subss xmm7, xmm12
movss dword [rbp + 0x2a4], xmm9
lea r8, [rbp + 0x298]
lea rdx, [rbp + 0x2a0]
movss dword [rbp + 0x29c], xmm6
movss dword [rbp + 0x298], xmm7
jmp 0x140057bbd
subss xmm6, xmm14
movss dword [rbp + 0x2b0], xmm8
subss xmm7, xmm14
movss dword [rbp + 0x2b4], xmm9
lea r8, [rbp + 0x2a8]
lea rdx, [rbp + 0x2b0]
movss dword [rbp + 0x2ac], xmm6
movss dword [rbp + 0x2a8], xmm7
call fcn.14002c4c0
mov r8d, dword [r15 + 0x78]
mov r9d, r12d
mov rdx, qword [r15 + 0x80]
mov rcx, r15
movss dword [rsp + 0x28], xmm13
mov dword [rsp + 0x20], 1
call fcn.14002a620
mov r8, qword [0x1402bad40]
xor r12d, r12d
mov dword [r15 + 0x78], r12d
jmp 0x140057bfa
xor r12d, r12d
cmp byte [0x1402badb9], 0
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [r8 + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, dword [0x140163970]
addss xmm2, dword [0x140163990]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, xmm3
addss xmm0, xmm2
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
jne 0x14005894e
call fcn.1400170f0
mov rcx, qword [0x1402bad40]
lea r15, [0x140162448]
mov rdx, r15
mov qword [rbp + 0x2b8], 0
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rcx, qword [rcx + 0x3ef8]
call fcn.140007680
mov edx, eax
mov dword [rsp + 0x20], 0x10000
xor r9d, r9d
lea r8, [rbp + 0x2b8]
mov rcx, r15
call fcn.14000c260
movss xmm8, dword [0x1401639a8]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x38], r12
lea r8, [0x1402badc0]
movaps xmm0, xmm8
mov qword [rsp + 0x30], r12
subss xmm0, dword [r13 + 0x37d8]
mov dword [rsp + 0x28], r12d
lea rdx, str.Username
mov r9d, 0x40
mov dword [rbp + 0xb4], 0x42200000
lea rcx, str.Username01
mov qword [rsp + 0x20], rax
movss dword [rbp + 0xb0], xmm0
call fcn.140040e90
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xb8]
movaps xmm0, xmm8
mov qword [rsp + 0x30], r12
subss xmm0, dword [r13 + 0x37d8]
mov dword [rsp + 0x28], r12d
lea r8, [0x1402bae30]
mov r9d, 0x40
mov dword [rbp + 0xbc], 0x42200000
lea rdx, str.Password
mov qword [rsp + 0x20], rax
lea rcx, str.Password01
movss dword [rbp + 0xb8], xmm0
call fcn.140040e90
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xc0]
movaps xmm0, xmm8
mov qword [rsp + 0x30], r12
subss xmm0, dword [r13 + 0x37d8]
mov dword [rsp + 0x28], r12d
lea r8, [0x1402bae70]
mov r9d, 0x40
mov dword [rbp + 0xc4], 0x42200000
lea rdx, [0x140162cd4]
mov qword [rsp + 0x20], rax
lea rcx, str.Key01
movss dword [rbp + 0xc0], xmm0
call fcn.140040e90
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x43fa0000
lea rcx, str.Login
mov dword [rbp + 0xcc], 0x42200000
call fcn.14003b9e0
test al, al
je 0x1400582b1
lea rdx, [0x1402bae30]
lea rcx, [rbp + 0x4d0]
call fcn.140048910
lea rdx, [0x1402badc0]
mov r15, rax
lea rcx, [rbp + 0x2c0]
call fcn.140048910
mov r8, r15
lea rcx, [0x1402bb070]
mov rdx, rax
call fcn.140068930
cmp byte [0x1402bb288], 0
je 0x14005828c
xorps xmm0, xmm0
mov qword [rbp + 0x68], r12
mov ecx, 0xc0
mov qword [rbp + 0x70], r12
movups xmmword [rbp + 0x58], xmm0
call fcn.140125a54
mov qword [rbp + 0x58], rax
lea rcx, str.https:__cdn.discordapp.com_attachments_1279218047822856362_1285353849212637296_WELCOM.wav_ex66e9f68eis66e8a50ehmd16821fb064158b204cebfb3793b6ee34ef9d356986206b900f1d689a36fa01c
movups xmm0, xmmword [rcx]
mov qword [rbp + 0x68], 0xb6
mov r8, rax
mov qword [rbp + 0x70], 0xbf
lea rdx, [rax + 0x80]
movups xmmword [rax], xmm0
xor r9d, r9d
mov dword [rsp + 0x20], r12d
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x20], xmm0
mov eax, dword [rcx + 0xb0]
mov dword [rdx + 0x30], eax
xorps xmm0, xmm0
movzx eax, word [rcx + 0xb4]
lea rcx, str.Download_File
mov word [rdx + 0x34], ax
mov edx, 1
mov byte [r8 + 0xb6], 0
xor r8d, r8d
movzx eax, word [0x140162db0]
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], 0xa
movsd xmm0, qword [str.WELCOM.wav]
movsd qword [rbp + 0x38], xmm0
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rsp + 0x70], rax
mov r12, rax
test rax, rax
je 0x140057fbb
cmp qword [rbp + 0x70], 0xf
lea rdx, [rbp + 0x58]
mov qword [rsp + 0x28], 0
mov rcx, rax
cmova rdx, qword [rbp + 0x58]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r15, rax
test rax, rax
jne 0x140058032
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14005bf30
lea rdx, [0x14005bef0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15d, 1
lea r9, str.Logged_In__Welcome
mov edx, r15d
lea rcx, [rbp + 0x560]
mov r8d, 0xfa0
call fcn.14004cb70
mov rax, qword [0x1402b9f58]
cmp rax, qword [0x1402b9f60]
je 0x140058108
mov r8d, 0x2010
lea rdx, [rbp + 0x560]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402b9f58], 0x2010
jmp 0x140058117
cmp qword [rbp + 0x50], 0xf
lea rcx, [rbp + 0x38]
lea rdx, [0x1401623c8]
cmova rcx, qword [rbp + 0x38]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r12, rax
mov rcx, r15
test rax, rax
jne 0x140058068
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
jmp 0x140057fb5
lea r9, [rbp - 0x68]
mov r8d, 0x1000
lea rdx, [rbp + 0x560]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400580d1
mov r14d, 1
nop dword [rax]
mov eax, dword [rbp - 0x68]
test eax, eax
je 0x1400580cb
mov r8d, eax
lea rcx, [rbp + 0x560]
mov r9, r12
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
lea r9, [rbp - 0x68]
mov r8d, 0x1000
lea rdx, [rbp + 0x560]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140058090
movzx r14d, byte [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, str.WELCOM.wav
mov r8d, 0x20001
call qword [sym.imp.WINMM.dll_PlaySoundA]
jmp 0x140057fd7
lea r8, [rbp + 0x560]
mov rdx, rax
call fcn.14005c5d0
xorps xmm0, xmm0
mov byte [0x1402badb9], r15b
xor r12d, r12d
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], r12
call fcn.140125a54
movups xmm0, xmmword [str.https:__discord.gg_daDvjNjSBS]
mov qword [rbp + 0x18], rax
lea r8, [rbp + 0x18]
mov qword [rbp + 0x30], Ordinal_33
mov rdx, rax
mov qword [rbp + 0x28], Ordinal_33
movups xmmword [rax], xmm0
mov dword [rsp + 0x28], r15d
movsd xmm0, qword [0x140162e08]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140162e10]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x140162e14]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], r12b
lea rdx, str.open
cmp qword [rbp + 0x30], 0xf
mov qword [rsp + 0x20], r12
cmova r8, qword [rbp + 0x18]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x1400581e4
mov rcx, qword [rbp + 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400581df
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b680
call fcn.140125da8
mov rdx, qword [rbp + 0x50]
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x18], r12b
cmp rdx, 0xf
jbe 0x14005822f
mov rcx, qword [rbp + 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005822a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b687
call fcn.140125da8
mov rdx, qword [rbp + 0x70]
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x38], r12b
cmp rdx, 0xf
jbe 0x14005827a
mov rcx, qword [rbp + 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058275
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b687
call fcn.140125da8
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], r12b
jmp 0x1400582b1
cmp qword [0x1402bb2a8], 0xf
lea rdx, [0x1402bb290]
cmova rdx, qword [0x1402bb290]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r15, qword [0x1402bad40]
mov rax, qword [r15 + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movss xmm7, dword [rax + 0x254]
movss xmm0, dword [rax + 0x20]
movss xmm6, dword [rax + 0x250]
subss xmm7, dword [rax + 0x24]
subss xmm6, xmm0
jne 0x1400582f1
cmp qword [r15 + 0x4b38], 0
je 0x1400582fd
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x140058321
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb3c]
mov r10, rax
movss xmm0, dword [0x1402bbb38]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x3c4], xmm1
movss xmm1, dword [0x1402bbb44]
movss dword [rbp + 0x3c0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x3c0]
movss xmm0, dword [0x1402bbb40]
movss dword [rbp + 0x3c8], xmm0
movss dword [rbp + 0x3cc], xmm1
call fcn.140003e30
movaps xmm0, xmm10
mov dword [rsp + 0x28], r12d
addss xmm0, xmm6
movaps xmm1, xmm11
addss xmm1, xmm7
mov r9d, eax
lea r8, [rbp + 0xd0]
mov rcx, r10
lea rdx, [rbp - 0x78]
movss dword [rbp + 0xd0], xmm0
movss xmm0, dword [0x1401638c4]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0xd4], xmm1
call fcn.14002cb70
movss xmm1, dword [0x1402bbaac]
lea rcx, [rbp + 0x3d0]
movss xmm0, dword [0x1402bbaa8]
mov r8, qword [0x1402bad40]
movss dword [rbp + 0x3d4], xmm1
movss xmm1, dword [0x1402bbab4]
movss dword [rbp + 0x3d0], xmm0
mulss xmm1, dword [r8 + 0x37d0]
movss xmm0, dword [0x1402bbab0]
movss dword [rbp + 0x3d8], xmm0
movss dword [rbp + 0x3dc], xmm1
call fcn.140003e30
movss xmm0, dword [0x1401639f0]
lea rdx, [rbp - 0x30]
movss xmm3, dword [0x1401639dc]
mov r15d, eax
movss xmm2, dword [r8 + 0x3c20]
lea rax, [0x1401548ba]
mov rcx, qword [r8 + 0x3c18]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.140035a80
movss xmm0, dword [rbp - 0x30]
lea r8, [0x1401548ba]
addss xmm0, dword [0x14016384c]
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x1401639d0]
mov rcx, qword [0x1402bad50]
mov dword [rsp + 0x20], r15d
cvttss2si eax, xmm0
movss xmm0, dword [r13 + 0x3820]
movaps xmm3, xmm0
addss xmm3, dword [0x1401639c8]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
subss xmm2, xmm1
movss dword [rbp - 0x30], xmm1
movss xmm1, dword [0x1401638fc]
subss xmm3, dword [rbp - 0x2c]
mulss xmm2, xmm12
addss xmm10, xmm2
mulss xmm3, xmm12
addss xmm11, xmm3
unpcklps xmm10, xmm11
movq r9, xmm10
call fcn.14003a530
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140058528
cmp byte [0x1402bb6a0], 0
sete byte [0x1402bb6a0]
cmp qword [0x1402bad40], 0
jne 0x14005854c
mov r8d, 0xba2
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0xd8]
mov dword [rbp + 0xd8], 0x43fa0000
lea rcx, str.Register
mov dword [rbp + 0xdc], 0x42200000
call fcn.14003b9e0
test al, al
je 0x140058937
lea rdx, [0x1402bae70]
lea rcx, [rbp + 0x4d0]
call fcn.140048910
lea rdx, [0x1402bae30]
mov r12, rax
lea rcx, [rbp + 0x2c0]
call fcn.140048910
lea rdx, [0x1402badc0]
mov r15, rax
lea rcx, [rbp + 0x3f0]
call fcn.140048910
mov r9, r12
lea rcx, [0x1402bb070]
mov r8, r15
mov rdx, rax
call fcn.14006ac70
cmp byte [0x1402bb288], 0
je 0x14005890f
xorps xmm0, xmm0
xor r15d, r15d
mov ecx, 0xc0
mov qword [rbp - 0x50], r15
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], r15
call fcn.140125a54
mov qword [rbp - 0x60], rax
lea rcx, str.https:__cdn.discordapp.com_attachments_1279218047822856362_1285353849212637296_WELCOM.wav_ex66e9f68eis66e8a50ehmd16821fb064158b204cebfb3793b6ee34ef9d356986206b900f1d689a36fa01c
movups xmm0, xmmword [rcx]
mov qword [rbp - 0x50], 0xb6
mov r8, rax
mov qword [rbp - 0x48], 0xbf
lea rdx, [rax + 0x80]
movups xmmword [rax], xmm0
xor r9d, r9d
mov dword [rsp + 0x20], r15d
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x20], xmm0
mov eax, dword [rcx + 0xb0]
mov dword [rdx + 0x30], eax
xorps xmm0, xmm0
movzx eax, word [rcx + 0xb4]
lea rcx, str.Download_File
mov word [rdx + 0x34], ax
mov edx, 1
mov byte [r8 + 0xb6], r15b
xor r8d, r8d
movzx eax, word [0x140162db0]
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], 0xa
movsd xmm0, qword [str.WELCOM.wav]
movsd qword [rbp - 8], xmm0
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov word [rbp], ax
mov byte [rbp + 2], r15b
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rsp + 0x70], rax
mov r12, rax
test rax, rax
je 0x14005872e
cmp qword [rbp - 0x48], 0xf
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x28], r15
mov rcx, rax
cmova rdx, qword [rbp - 0x60]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r15, rax
test rax, rax
jne 0x1400587a1
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14005bf30
lea rdx, [0x14005bef0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r9, str.Logged_In__Welcome
mov edx, 1
mov r8d, 0xfa0
lea rcx, [rbp + 0x560]
call fcn.14004cb70
mov rax, qword [0x1402b9f58]
cmp rax, qword [0x1402b9f60]
je 0x14005886e
mov r8d, 0x2010
lea rdx, [rbp + 0x560]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402b9f58], 0x2010
jmp 0x14005887d
cmp qword [rbp + 0x10], 0xf
lea rcx, [rbp - 8]
lea rdx, [0x1401623c8]
cmova rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r12, rax
mov rcx, r15
test rax, rax
jne 0x1400587d7
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
jmp 0x140058728
lea r9, [rbp - 0x64]
mov r8d, 0x1000
lea rdx, [rbp + 0x560]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140058837
mov ebx, 1
mov eax, dword [rbp - 0x64]
test eax, eax
je 0x140058832
mov r8d, eax
lea rcx, [rbp + 0x560]
mov r9, r12
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
lea r9, [rbp - 0x64]
mov r8d, 0x1000
lea rdx, [rbp + 0x560]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400587f7
movzx ebx, byte [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, str.WELCOM.wav
mov r8d, 0x20001
call qword [sym.imp.WINMM.dll_PlaySoundA]
jmp 0x14005874a
lea r8, [rbp + 0x560]
mov rdx, rax
call fcn.14005c5d0
mov rdx, qword [rbp + 0x10]
mov byte [0x1402badb9], 1
cmp rdx, 0xf
jbe 0x1400588bf
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400588ba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b68e
call fcn.140125da8
mov rdx, qword [rbp - 0x48]
xor r12d, r12d
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 8], r12b
cmp rdx, 0xf
jbe 0x140058937
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058908
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b68e
call fcn.140125da8
jmp 0x140058937
cmp qword [0x1402bb2a8], 0xf
lea rdx, [0x1402bb290]
cmova rdx, qword [0x1402bb290]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r12d, r12d
call fcn.14000c600
call fcn.140017240
cmp byte [0x1402badb9], 0
je 0x14005af9b
mov r15, qword [rbp + 0x230]
lea rdx, [rbp - 0x18]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1402bad40]
mov rax, qword [rcx + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm15
jp 0x14005898a
jne 0x14005898a
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm15
jp 0x14005898a
je 0x1400589fa
movd xmm0, dword [rbp - 0x14]
mov r9d, 0x3c0
movd xmm1, dword [rbp - 0x18]
mov rcx, r15
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x262
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x24]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x1402bad40]
lea rdx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rbp + 0xe0], 0
mov rcx, qword [rax + 0x3ef8]
call fcn.140013130
mov rcx, qword [0x1402bad40]
mov rax, qword [rcx + 0x3ef8]
lea rdx, str.__________________________________________________Dev:_NATCHO_X_CHEAT
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
lea rcx, [rsp + 0x70]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, dword [0x1401639b4]
addss xmm1, dword [0x1401639b0]
movss dword [rax + 0x100], xmm0
movdqa xmm0, xmmword [0x140163bb0]
movups xmmword [rsp + 0x70], xmm0
movss dword [rax + 0x104], xmm1
call fcn.14003a4b0
mov r15, qword [0x1402bad40]
mov rax, qword [r15 + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movsd xmm0, qword [rax + 0x20]
movss xmm13, dword [rax + 0x254]
movss xmm9, dword [rax + 0x250]
subss xmm13, dword [rax + 0x24]
movsd qword [rsp + 0x70], xmm0
movss xmm0, dword [rax + 0x20]
subss xmm9, xmm0
jne 0x140058abd
cmp qword [r15 + 0x4b38], 0
je 0x140058acb
movss xmm9, dword [rax + 0x220]
subss xmm9, xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x140058aef
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb3c]
mov r10, rax
movss xmm0, dword [0x1402bbb38]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x3e4], xmm1
movss xmm1, dword [0x1402bbb44]
movss dword [rbp + 0x3e0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x3e0]
movss xmm0, dword [0x1402bbb40]
movss dword [rbp + 0x3e8], xmm0
movss dword [rbp + 0x3ec], xmm1
call fcn.140003e30
movss xmm0, dword [0x1401638c4]
lea r8, [rbp + 0xe8]
movss xmm7, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
movss xmm10, dword [rsp + 0x70]
movaps xmm15, xmm7
movaps xmm14, xmm10
mov dword [rsp + 0x28], r12d
addss xmm15, xmm13
movss dword [rsp + 0x20], xmm0
addss xmm14, xmm9
mov r9d, eax
mov rcx, r10
movss dword [rbp + 0xec], xmm15
movss dword [rbp + 0xe8], xmm14
call fcn.14002cb70
mov r15, qword [0x1402bad40]
lea rcx, [rbp + 0x410]
mov rax, qword [r15 + 0x3ef8]
movsd xmm1, qword [rax + 0x28]
movsd xmm8, qword [rax + 0x20]
movaps xmm0, xmm1
movss xmm11, dword [rax + 0x20]
movaps xmm6, xmm8
movss xmm12, dword [rax + 0x24]
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x78], xmm8
addss xmm8, xmm1
movsd qword [rbp - 0x78], xmm1
movss xmm1, dword [0x1402bbaac]
movss dword [rbp + 0x414], xmm1
movss xmm1, dword [0x1402bbab4]
mulss xmm1, dword [r15 + 0x37d0]
shufps xmm6, xmm6, 0x55
addss xmm6, xmm0
movss xmm0, dword [0x1402bbaa8]
movss dword [rbp + 0x410], xmm0
movss xmm0, dword [0x1402bbab0]
movss dword [rbp + 0x41c], xmm1
movss dword [rbp + 0x418], xmm0
call fcn.140003e30
mov rcx, qword [r15 + 0x3ef8]
mov dword [rbp - 0x78], eax
mov byte [rcx + 0xb8], 1
mov rcx, qword [r15 + 0x3ef8]
mov r12, qword [rcx + 0x298]
test eax, 0xff000000
je 0x140058d76
test byte [r12 + 0x30], 1
mov rcx, r12
movss xmm0, dword [0x140163820]
movss xmm3, dword [0x14016389c]
addss xmm12, xmm0
addss xmm11, xmm0
mov dword [rsp + 0x20], 0xf0
je 0x140058cf0
subss xmm6, xmm0
movss dword [rbp + 0xf8], xmm11
subss xmm8, xmm0
movss dword [rbp + 0xfc], xmm12
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0xf8]
movss dword [rbp + 0xf4], xmm6
movss dword [rbp + 0xf0], xmm8
jmp 0x140058d32
subss xmm6, dword [0x14016381c]
subss xmm8, dword [0x14016381c]
movss dword [rbp + 0x108], xmm11
lea r8, [rbp + 0x100]
movss dword [rbp + 0x10c], xmm12
lea rdx, [rbp + 0x108]
movss dword [rbp + 0x104], xmm6
movss dword [rbp + 0x100], xmm8
call fcn.14002c4c0
movss xmm0, dword [0x140163894]
mov rcx, r12
mov r9d, dword [rbp - 0x78]
mov r8d, dword [r12 + 0x78]
mov rdx, qword [r12 + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
call fcn.14002a620
mov r15, qword [0x1402bad40]
mov dword [r12 + 0x78], 0
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [r15 + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, dword [0x140163970]
addss xmm2, dword [0x140163990]
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
movss xmm0, dword [rax + 0x24]
movss xmm1, dword [rax + 0x20]
subss xmm0, dword [rax + 0x88]
subss xmm1, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm3, xmm0
addss xmm1, xmm2
movss dword [rax + 0x104], xmm3
movss dword [rax + 0x100], xmm1
cmp dword [r15 + 0x48c8], 0
jg 0x140058e11
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb3c]
mov r10, rax
movss xmm0, dword [0x1402bbb38]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x2e4], xmm1
movss xmm1, dword [0x1402bbb44]
movss dword [rbp + 0x2e0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x2e0]
movss xmm0, dword [0x1402bbb40]
movss dword [rbp + 0x2e8], xmm0
movss dword [rbp + 0x2ec], xmm1
call fcn.140003e30
movss xmm0, dword [0x1401638c4]
lea r8, [rbp + 0x110]
xor r12d, r12d
movss dword [rbp + 0x110], xmm14
mov dword [rsp + 0x28], r12d
lea rdx, [rsp + 0x70]
mov r9d, eax
movss dword [rsp + 0x20], xmm0
mov rcx, r10
movss dword [rbp + 0x114], xmm15
call fcn.14002cb70
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x140058ef0
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb4c]
mov r10, rax
movss xmm0, dword [0x1402bbb48]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x2f4], xmm1
movss xmm1, dword [0x1402bbb54]
movss dword [rbp + 0x2f0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x2f0]
movss xmm0, dword [0x1402bbb50]
movss dword [rbp + 0x2f8], xmm0
movss dword [rbp + 0x2fc], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x3820]
lea r8, [rbp + 0x118]
movss xmm11, dword [0x140163934]
lea rdx, [rbp + 0x120]
movss xmm14, dword [0x140163978]
movaps xmm0, xmm2
addss xmm0, xmm11
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm7
movaps xmm6, xmm10
addss xmm6, xmm14
mov r9d, eax
mov rcx, r10
addss xmm1, xmm0
movaps xmm0, xmm10
addss xmm0, dword [r13 + 0x381c]
movss dword [rbp + 0x118], xmm6
movss dword [rbp + 0x11c], xmm1
movaps xmm1, xmm7
addss xmm1, xmm2
movss dword [rbp + 0x120], xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x124], xmm1
call fcn.14002cb70
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x140059023
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbabc]
mov r10, rax
movss xmm0, dword [0x1402bbab8]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x304], xmm1
movss xmm1, dword [0x1402bbac4]
movss dword [rbp + 0x300], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x300]
movss xmm0, dword [0x1402bbac0]
movss dword [rbp + 0x308], xmm0
movss dword [rbp + 0x30c], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x3820]
lea r8, [rbp + 0x128]
movss xmm12, dword [0x140163854]
lea rdx, [rbp + 0x130]
movaps xmm0, xmm2
movss dword [rsp + 0x30], xmm12
addss xmm0, xmm11
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm7
movss dword [rbp + 0x128], xmm6
addss xmm1, xmm2
mov r9d, eax
mov rcx, r10
addss xmm0, xmm7
movss dword [rbp + 0x134], xmm1
movss dword [rbp + 0x12c], xmm0
movaps xmm0, xmm10
addss xmm0, dword [r13 + 0x381c]
movss dword [rbp + 0x130], xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
call fcn.14002ca60
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x140059148
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb4c]
mov r10, rax
movss xmm0, dword [0x1402bbb48]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x314], xmm1
movss xmm1, dword [0x1402bbb54]
movss dword [rbp + 0x310], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x310]
movss xmm0, dword [0x1402bbb50]
movss dword [rbp + 0x318], xmm0
movss dword [rbp + 0x31c], xmm1
call fcn.140003e30
movss xmm3, dword [r13 + 0x3820]
lea r8, [rbp + 0x138]
movaps xmm1, xmm13
mov dword [rsp + 0x28], r12d
subss xmm1, xmm3
movss dword [rbp + 0x138], xmm6
movaps xmm0, xmm7
lea rdx, [rbp + 0x140]
movaps xmm8, xmm10
xorps xmm15, xmm15
addss xmm8, xmm15
movaps xmm2, xmm7
mov r9d, eax
mov rcx, r10
addss xmm0, xmm1
movaps xmm1, xmm3
addss xmm1, xmm11
movss dword [rbp + 0x13c], xmm0
movaps xmm0, xmm8
addss xmm0, dword [r13 + 0x381c]
addss xmm2, xmm1
movss dword [rbp + 0x140], xmm0
movss xmm0, dword [0x1401638c0]
addss xmm2, xmm3
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x144], xmm2
call fcn.14002cb70
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x140059279
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbabc]
mov r10, rax
movss xmm0, dword [0x1402bbab8]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x324], xmm1
movss xmm1, dword [0x1402bbac4]
movss dword [rbp + 0x320], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x320]
movss xmm0, dword [0x1402bbac0]
movss dword [rbp + 0x328], xmm0
movss dword [rbp + 0x32c], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x3820]
lea r8, [rbp + 0x148]
addss xmm8, dword [r13 + 0x381c]
movaps xmm0, xmm13
movss dword [rsp + 0x30], xmm12
subss xmm0, xmm2
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm7
movss dword [rbp + 0x148], xmm6
mov r9d, eax
lea rdx, [rbp + 0x150]
mov rcx, r10
movss dword [rbp + 0x150], xmm8
addss xmm1, xmm0
movaps xmm0, xmm2
addss xmm0, xmm11
movss dword [rbp + 0x14c], xmm1
movaps xmm1, xmm7
addss xmm1, xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
addss xmm1, xmm2
movss dword [rbp + 0x154], xmm1
call fcn.14002ca60
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x1400593a1
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb4c]
mov r10, rax
movss xmm0, dword [0x1402bbb48]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x334], xmm1
movss xmm1, dword [0x1402bbb54]
movss dword [rbp + 0x330], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x330]
movss xmm0, dword [0x1402bbb50]
movss dword [rbp + 0x338], xmm0
movss dword [rbp + 0x33c], xmm1
call fcn.140003e30
movss xmm4, dword [r13 + 0x381c]
lea r8, [rbp + 0x158]
movss xmm5, dword [r13 + 0x3820]
addss xmm6, xmm4
movaps xmm0, xmm4
mov dword [rsp + 0x28], r12d
addss xmm0, xmm4
movaps xmm8, xmm7
movaps xmm2, xmm9
addss xmm8, xmm15
movaps xmm3, xmm5
lea rdx, [rbp + 0x160]
addss xmm3, xmm11
movss dword [rbp + 0x160], xmm6
movaps xmm1, xmm7
mov r9d, eax
subss xmm2, xmm0
mov rcx, r10
movaps xmm0, xmm10
addss xmm1, xmm3
subss xmm2, xmm11
movss dword [rbp + 0x15c], xmm1
addss xmm0, xmm2
movss dword [rbp + 0x158], xmm0
movaps xmm0, xmm8
addss xmm0, xmm5
movss dword [rbp + 0x164], xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
call fcn.14002cb70
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x1400594df
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbabc]
mov r10, rax
movss xmm0, dword [0x1402bbab8]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x344], xmm1
movss xmm1, dword [0x1402bbac4]
movss dword [rbp + 0x340], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x340]
movss xmm0, dword [0x1402bbac0]
movss dword [rbp + 0x348], xmm0
movss dword [rbp + 0x34c], xmm1
call fcn.140003e30
movss xmm5, dword [r13 + 0x381c]
lea r8, [rbp + 0x168]
movss xmm4, dword [r13 + 0x3820]
lea rdx, [rbp + 0x170]
movaps xmm0, xmm5
movss dword [rsp + 0x30], xmm12
addss xmm0, xmm5
mov dword [rsp + 0x28], r12d
movaps xmm2, xmm9
movaps xmm3, xmm4
addss xmm3, xmm11
movaps xmm1, xmm7
mov r9d, eax
mov rcx, r10
subss xmm2, xmm0
movaps xmm0, xmm10
addss xmm1, xmm3
subss xmm2, xmm11
movss dword [rbp + 0x16c], xmm1
addss xmm0, xmm2
movaps xmm2, xmm10
addss xmm2, xmm14
movss dword [rbp + 0x168], xmm0
movaps xmm0, xmm8
addss xmm0, xmm4
addss xmm5, xmm2
movss dword [rbp + 0x174], xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x170], xmm5
call fcn.14002ca60
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x140059624
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbb4c]
mov r10, rax
movss xmm0, dword [0x1402bbb48]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x354], xmm1
movss xmm1, dword [0x1402bbb54]
movss dword [rbp + 0x350], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x350]
movss xmm0, dword [0x1402bbb50]
movss dword [rbp + 0x358], xmm0
movss dword [rbp + 0x35c], xmm1
call fcn.140003e30
movss xmm4, dword [r13 + 0x381c]
lea r8, [rbp + 0x178]
movss xmm3, dword [r13 + 0x3820]
lea rdx, [rbp + 0x180]
movaps xmm1, xmm9
mov dword [rsp + 0x28], r12d
subss xmm1, xmm4
movaps xmm2, xmm3
addss xmm2, xmm11
movaps xmm0, xmm10
mov r9d, eax
mov rcx, r10
addss xmm0, xmm1
movaps xmm1, xmm7
addss xmm1, xmm2
movaps xmm2, xmm10
movss dword [rbp + 0x178], xmm0
movaps xmm0, xmm4
addss xmm0, xmm4
movss dword [rbp + 0x17c], xmm1
movaps xmm1, xmm9
subss xmm1, xmm0
movaps xmm0, xmm8
addss xmm0, xmm3
subss xmm1, xmm11
movss dword [rbp + 0x184], xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
addss xmm2, xmm1
addss xmm4, xmm2
movss dword [rbp + 0x180], xmm4
call fcn.14002cb70
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], r12d
jg 0x140059769
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402bbabc]
mov r10, rax
movss xmm0, dword [0x1402bbab8]
mov rcx, qword [0x1402bad40]
movss dword [rbp + 0x364], xmm1
movss xmm1, dword [0x1402bbac4]
movss dword [rbp + 0x360], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x360]
movss xmm0, dword [0x1402bbac0]
movss dword [rbp + 0x368], xmm0
movss dword [rbp + 0x36c], xmm1
call fcn.140003e30
movss xmm3, dword [r13 + 0x381c]
lea r8, [rbp + 0x188]
movss xmm4, dword [r13 + 0x3820]
lea rdx, [rbp + 0x190]
movaps xmm0, xmm4
movss dword [rsp + 0x30], xmm12
addss xmm0, xmm11
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm7
movaps xmm2, xmm9
subss xmm2, xmm3
mov r9d, eax
mov rcx, r10
addss xmm1, xmm0
movaps xmm0, xmm10
addss xmm0, xmm2
movaps xmm2, xmm9
movss dword [rbp + 0x18c], xmm1
movaps xmm1, xmm3
addss xmm1, xmm3
movss dword [rbp + 0x188], xmm0
movaps xmm0, xmm10
subss xmm2, xmm1
subss xmm2, xmm11
addss xmm0, xmm2
addss xmm3, xmm0
movaps xmm0, xmm8
addss xmm0, xmm4
movss dword [rbp + 0x190], xmm3
movss dword [rbp + 0x194], xmm0
movss xmm0, dword [0x1401638c0]
movss dword [rsp + 0x20], xmm0
call fcn.14002ca60
mov rcx, qword [0x1402bad40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
movss xmm1, dword [0x1402bbaac]
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [0x1402bbaa8]
movss dword [rbp + 0x374], xmm1
movss xmm1, dword [0x1402bbab4]
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x370]
mov r10, qword [rax + 0x298]
movss dword [rbp + 0x370], xmm0
movss xmm0, dword [0x1402bbab0]
movss dword [rbp + 0x37c], xmm1
movss dword [rbp + 0x378], xmm0
call fcn.140003e30
movss xmm4, dword [r13 + 0x3820]
movaps xmm1, xmm9
movss xmm3, dword [r13 + 0x381c]
movaps xmm0, xmm4
movss xmm5, dword [0x1401638e0]
addss xmm0, xmm11
subss xmm1, xmm3
mov dword [rbp + 0x198], 0x3f800000
movaps xmm2, xmm7
mov dword [rbp + 0x19c], 0x3f800000
mov qword [rbp + 0x1a0], r12
addss xmm2, xmm0
movaps xmm0, xmm10
addss xmm0, xmm1
mov rdx, qword [0x1402bad80]
subss xmm0, xmm5
mov dword [rsp + 0x30], eax
addss xmm8, xmm4
movaps xmm1, xmm9
subss xmm2, xmm5
lea rax, [rbp + 0x198]
mov rcx, r10
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1a8]
movss dword [rbp + 0x1a8], xmm0
lea rax, [rbp + 0x1a0]
movaps xmm0, xmm3
mov qword [rsp + 0x20], rax
addss xmm0, xmm3
movss dword [rbp + 0x1ac], xmm2
addss xmm8, xmm5
lea r8, [rbp + 0x1b0]
subss xmm1, xmm0
movaps xmm0, xmm10
movss dword [rbp + 0x1b4], xmm8
subss xmm1, xmm11
addss xmm0, xmm1
addss xmm0, xmm3
addss xmm0, xmm5
movss dword [rbp + 0x1b0], xmm0
call fcn.14002d150
movss xmm1, dword [0x1402bbaac]
lea rcx, [rbp + 0x380]
movss xmm0, dword [0x1402bbaa8]
mov r8, qword [0x1402bad40]
movss dword [rbp + 0x384], xmm1
movss xmm1, dword [0x1402bbab4]
movss dword [rbp + 0x380], xmm0
mulss xmm1, dword [r8 + 0x37d0]
movss xmm0, dword [0x1402bbab0]
movss dword [rbp + 0x388], xmm0
movss dword [rbp + 0x38c], xmm1
call fcn.140003e30
movss xmm6, dword [0x1401639f0]
lea rdx, [rbp - 0x28]
movss xmm3, dword [0x1401639dc]
mov r15d, eax
movss xmm2, dword [r8 + 0x3c20]
lea rax, [0x140162448]
mov rcx, qword [r8 + 0x3c18]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
call fcn.140035a80
movss xmm0, dword [rbp - 0x28]
lea r8, [0x140162448]
addss xmm0, dword [0x14016384c]
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x14016396c]
movss xmm12, dword [0x140163820]
mov rcx, qword [0x1402bad50]
cvttss2si eax, xmm0
mov dword [rsp + 0x20], r15d
movss xmm0, dword [r13 + 0x3820]
movaps xmm3, xmm0
addss xmm3, dword [0x14016392c]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
movaps xmm0, xmm10
subss xmm2, xmm1
movss dword [rbp - 0x28], xmm1
movaps xmm1, xmm7
subss xmm3, dword [rbp - 0x24]
mulss xmm2, xmm12
mulss xmm3, xmm12
addss xmm0, xmm2
addss xmm1, xmm3
unpcklps xmm0, xmm1
movss xmm1, dword [0x1401638fc]
movq r9, xmm0
call fcn.14003a530
movss xmm0, dword [0x1402bbaa8]
mov r8, qword [0x1402bad40]
movss dword [rbp + 0x390], xmm0
movss xmm1, dword [0x1402bbaac]
lea rcx, [rbp + 0x390]
movss xmm0, dword [0x1402bbab0]
movss dword [rbp + 0x394], xmm1
movss xmm1, dword [0x1402bbab4]
mulss xmm1, dword [r8 + 0x37d0]
movss dword [rbp + 0x398], xmm0
movss dword [rbp + 0x39c], xmm1
call fcn.140003e30
movss xmm3, dword [0x1401639dc]
lea rdx, [rbp - 0x70]
movss xmm2, dword [r8 + 0x3c20]
mov r15d, eax
mov rcx, qword [r8 + 0x3c18]
lea rax, [0x140162448]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
call fcn.140035a80
movss xmm0, dword [rbp - 0x70]
lea r8, [0x140162448]
addss xmm0, dword [0x14016384c]
movss xmm3, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x14016396c]
mov rcx, qword [0x1402bad50]
cvttss2si eax, xmm0
mov dword [rsp + 0x20], r15d
movaps xmm0, xmm3
addss xmm0, dword [0x14016392c]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
subss xmm2, xmm1
movss dword [rbp - 0x70], xmm1
movss xmm1, dword [0x1401638fc]
subss xmm3, dword [rbp - 0x6c]
mulss xmm2, xmm12
addss xmm10, xmm2
mulss xmm3, xmm12
addss xmm7, xmm3
unpcklps xmm10, xmm7
movq r9, xmm10
call fcn.14003a530
movss xmm3, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
mov rcx, qword [0x1402bad40]
addss xmm2, xmm2
movss xmm7, dword [0x140163874]
mulss xmm3, xmm7
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm11
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm3, xmm0
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm3
call fcn.1400170f0
movss xmm1, dword [r13 + 0x381c]
lea r9, [rbp + 0x1b8]
cmp dword [0x1402bb6a8], r12d
lea r8, str.AIMBOT
mov rdx, qword [0x1402bad90]
movaps xmm0, xmm14
mulss xmm1, xmm7
sete cl
mov dword [rbp + 0x1bc], 0x420c0000
subss xmm0, xmm1
movss dword [rbp + 0x1b8], xmm0
call fcn.14003b010
test al, al
je 0x140059d1b
mov eax, r12d
mov dword [0x1402bb6a8], eax
jmp 0x140059d21
mov eax, dword [0x1402bb6a8]
movss xmm1, dword [r13 + 0x381c]
lea r9, [rbp + 0x1c0]
mov rdx, qword [0x1402bada0]
lea r8, str.VISUAL
mulss xmm1, xmm7
movaps xmm0, xmm14
cmp eax, 1
mov dword [rbp + 0x1c4], 0x420c0000
sete cl
subss xmm0, xmm1
movss dword [rbp + 0x1c0], xmm0
call fcn.14003b010
test al, al
je 0x140059d79
mov eax, 1
mov dword [0x1402bb6a8], eax
jmp 0x140059d7f
mov eax, dword [0x1402bb6a8]
movss xmm1, dword [r13 + 0x381c]
lea r9, [rbp + 0x1c8]
mov rdx, qword [0x1402bada8]
lea r8, str.SETTINGS
mulss xmm1, xmm7
movaps xmm0, xmm14
cmp eax, 2
mov dword [rbp + 0x1cc], 0x420c0000
sete cl
subss xmm0, xmm1
movss dword [rbp + 0x1c8], xmm0
call fcn.14003b010
test al, al
je 0x140059dd4
mov dword [0x1402bb6a8], 2
call fcn.140017240
mov edx, dword [0x1402bb6a8]
mov eax, dword [0x1402badb0]
movss xmm10, dword [0x140163854]
cmp edx, eax
jne 0x140059df6
movaps xmm6, xmm10
mov rcx, qword [0x1402bad40]
test rcx, rcx
jne 0x140059e2f
mov r8d, 0x1031
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [0x1402bb6a8]
mov eax, dword [0x1402badb0]
mov rcx, qword [0x1402bad40]
movss xmm0, dword [rcx + 0x18]
movss xmm8, dword [0x140163884]
mulss xmm0, xmm8
mulss xmm0, xmm6
addss xmm0, dword [0x1402bae00]
comiss xmm15, xmm0
jbe 0x140059e59
xorps xmm1, xmm1
jmp 0x140059e61
movaps xmm1, xmm10
minss xmm1, xmm0
ucomiss xmm1, xmm15
movss dword [0x1402bae00], xmm1
jp 0x140059e89
jne 0x140059e89
movss xmm0, dword [0x1402bae10]
ucomiss xmm0, xmm15
jp 0x140059e89
jne 0x140059e89
mov eax, edx
mov dword [0x1402badb0], edx
test edx, edx
jne 0x14005a508
test eax, eax
jne 0x14005af89
movss xmm0, dword [r13 + 0x3820]
mov rax, qword [rcx + 0x3ef8]
movaps xmm3, xmm0
movss xmm2, dword [r13 + 0x381c]
addss xmm3, xmm11
addss xmm2, xmm14
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, xmm3
addss xmm0, xmm2
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.1400170f0
movss xmm0, dword [r13 + 0x3820]
lea rdx, [rbp + 0x1d0]
mov rcx, qword [0x1402bad40]
movaps xmm2, xmm13
movss xmm1, dword [r13 + 0x381c]
movss xmm6, dword [0x14016391c]
mulss xmm0, xmm8
mov rax, qword [rcx + 0x3ef8]
mulss xmm1, xmm7
mov dword [rbp + 0x1d0], 0x41200000
addss xmm0, xmm11
mov dword [rbp + 0x1d4], 0x41200000
mov byte [rax + 0xb8], 1
mov r15, qword [rcx + 0x3ef8]
addss xmm1, xmm14
mov ecx, 2
subss xmm2, xmm0
movaps xmm0, xmm9
subss xmm0, xmm1
mulss xmm2, xmm12
mulss xmm0, xmm12
subss xmm2, xmm6
movss dword [rbp + 0x1d8], xmm0
movss dword [rbp + 0x1dc], xmm2
call fcn.1400047a0
lea rdx, str.External_Menu
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x1d8]
lea rcx, str.External_Menu
call fcn.14000ba90
mov r9b, 1
lea r8, [0x1402bb6a4]
lea rdx, [0x1402bb334]
lea rcx, str.Aimbot___External_Key
call fcn.140038bf0
mov ecx, dword [0x1402bb334]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r15d, 1
test r15b, al
je 0x14005a121
cmp byte [0x1402badba], r12b
jne 0x14005a11a
cmp byte [0x1402bae20], r12b
mov ecx, r15d
mov byte [0x1402badba], r15b
sete al
mov byte [0x1402bae20], al
test al, al
je 0x14005a0a6
call fcn.140125a54
lea rcx, [rbp + 0x258]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x14005c810]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x250], rax
test rax, rax
je 0x14005b69f
cmp dword [rbp + 0x258], r12d
je 0x14005b695
movaps xmm0, xmmword [rbp + 0x250]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005b695
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x250], xmm0
jmp 0x14005a121
call fcn.140125a54
lea rcx, [rbp + 0x268]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x14005c810]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x260], rax
test rax, rax
je 0x14005b6bc
cmp dword [rbp + 0x268], r12d
je 0x14005b6b2
movaps xmm0, xmmword [rbp + 0x260]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005b6b2
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x260], xmm0
jmp 0x14005a121
mov byte [0x1402badba], r12b
mov ecx, dword [0x1402bb338]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005a24f
cmp byte [0x1402bae2a], r12b
jne 0x14005a248
cmp byte [0x1402bae22], r12b
mov rcx, r15
mov byte [0x1402bae2a], 1
sete al
mov byte [0x1402bae22], al
test al, al
je 0x14005a1d4
call fcn.140125a54
lea rcx, [rbp + 0x278]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x14005c840]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x270], rax
test rax, rax
je 0x14005b6d9
cmp dword [rbp + 0x278], r12d
je 0x14005b6cf
movaps xmm0, xmmword [rbp + 0x270]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005b6cf
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x270], xmm0
jmp 0x14005a24f
call fcn.140125a54
lea rcx, [rbp + 0x288]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x14005c840]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x280], rax
test rax, rax
je 0x14005b6f6
cmp dword [rbp + 0x288], r12d
je 0x14005b6ec
movaps xmm0, xmmword [rbp + 0x280]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005b6ec
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x280], xmm0
jmp 0x14005a24f
mov byte [0x1402bae2a], r12b
call fcn.14000bf20
movss xmm0, dword [r13 + 0x3820]
lea rdx, [rbp + 0x1e0]
movss xmm2, dword [r13 + 0x381c]
movaps xmm3, xmm0
mov r15, qword [0x1402bad40]
addss xmm2, xmm14
movss xmm10, dword [0x1401639a0]
mov ecx, 2
addss xmm3, xmm10
mov dword [rbp + 0x1e0], 0x41200000
mov dword [rbp + 0x1e4], 0x41200000
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm2, xmm0
movaps xmm0, xmm9
addss xmm3, xmm1
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm3
movss xmm1, dword [r13 + 0x381c]
mov rax, qword [r15 + 0x3ef8]
mulss xmm1, xmm7
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x1e8], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x1ec], xmm0
call fcn.1400047a0
lea rdx, str.EXPLOIT_HACKS_MENU
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x1e8]
lea rcx, str.EXPLOIT_HACKS_MENU
call fcn.14000ba90
call fcn.14000bf20
movss xmm0, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
movaps xmm3, xmm0
mov r15, qword [0x1402bad40]
addss xmm3, xmm11
addss xmm2, dword [0x1401639ac]
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm3, xmm0
movaps xmm0, xmm9
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm3
movss xmm1, dword [r13 + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x1f8], xmm0
mov rax, qword [r15 + 0x3ef8]
lea rdx, [rbp + 0x1f0]
movaps xmm0, xmm13
mov dword [rbp + 0x1f0], 0x41200000
subss xmm0, xmm1
mov dword [rbp + 0x1f4], 0x41200000
mov ecx, 2
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x1fc], xmm0
call fcn.1400047a0
lea rdx, str.Sniper_Menu
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x1f8]
lea rcx, str.Sniper_Menu
call fcn.14000ba90
lea rdx, [0x1402bae05]
lea rcx, str.Sniper_Scope___Traning
call fcn.14003d2a0
lea rdx, [0x1402bae1a]
mov byte [0x1402bad3d], al
lea rcx, str.Fast_Switch___Traning
call fcn.14003d2a0
mov byte [0x1402badb6], al
call fcn.14000bf20
call fcn.140017240
mov edx, dword [0x1402bb6a8]
mov eax, dword [0x1402badb0]
mov rcx, qword [0x1402bad40]
jmp 0x14005a519
movss xmm6, dword [0x14016391c]
movss xmm10, dword [0x1401639a0]
cmp edx, 1
jne 0x14005a6d7
cmp eax, edx
jne 0x14005af89
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [rcx + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, xmm11
addss xmm2, xmm14
mov byte [rax + 0xb8], dl
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm0
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm0, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], dl
addss xmm2, xmm0
addss xmm3, xmm1
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm3
call fcn.1400170f0
movss xmm1, dword [r13 + 0x381c]
lea rdx, [rbp + 0x200]
mov rcx, qword [0x1402bad40]
movaps xmm0, xmm9
mulss xmm1, xmm7
mov dword [rbp + 0x200], 0x41200000
mov dword [rbp + 0x204], 0x41200000
mov rax, qword [rcx + 0x3ef8]
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [rcx + 0x3ef8]
mov ecx, 2
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x208], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x20c], xmm0
call fcn.1400047a0
lea rdx, str.CHAMS
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x208]
lea rcx, str.CHAMS
call fcn.14000ba90
lea rdx, [0x1402bae1b]
lea rcx, str.Chams_Menu___Lobby
call fcn.14003d2a0
lea rdx, [0x1402bae26]
mov byte [0x1402badb7], al
lea rcx, str.Chams_3D___Lobby
call fcn.14003d2a0
lea rdx, [0x1402bae1d]
mov byte [0x1402bae2e], al
lea rcx, str.Esp_Line___3D
call fcn.14003d2a0
lea rdx, [0x1402bae1e]
mov byte [0x1402badbb], al
lea rcx, str.3D_Blue
call fcn.14003d2a0
mov byte [0x1402badbc], al
call fcn.14000bf20
call fcn.140017240
mov edx, dword [0x1402bb6a8]
mov eax, dword [0x1402badb0]
mov rcx, qword [0x1402bad40]
cmp edx, 2
jne 0x14005af89
cmp eax, edx
jne 0x14005af89
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [rcx + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, xmm11
addss xmm2, xmm14
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm0
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm0, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm2, xmm0
addss xmm3, xmm1
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm3
call fcn.1400170f0
movss xmm1, dword [r13 + 0x381c]
lea rdx, [rbp + 0x210]
mov rcx, qword [0x1402bad40]
movaps xmm0, xmm9
mulss xmm1, xmm7
mov dword [rbp + 0x210], 0x41200000
mov dword [rbp + 0x214], 0x41200000
mov rax, qword [rcx + 0x3ef8]
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [rcx + 0x3ef8]
mov ecx, 2
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x218], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x21c], xmm0
call fcn.1400047a0
lea rdx, str.Settings
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x218]
lea rcx, str.Settings
call fcn.14000ba90
lea rdx, [0x1402bae23]
lea rcx, str.Block__Unblock_Internet
call fcn.14003d2a0
lea rdx, [0x1402bae1c]
mov byte [0x1402bae2b], al
lea rcx, str.Reset_Guest___Login
call fcn.14003d2a0
mov r8d, 0x30120
mov byte [0x1402badb8], al
lea rdx, [0x1402b9f40]
lea rcx, str.Color_Changer
call fcn.140045050
call fcn.14000bf20
movss xmm3, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
movaps xmm0, xmm3
mov r15, qword [0x1402bad40]
addss xmm0, xmm10
addss xmm2, xmm14
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm0, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
addss xmm2, xmm0
addss xmm3, xmm1
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm3
mov byte [rax + 0x141], 1
lea rdx, [rbp + 0x220]
movss xmm0, dword [r13 + 0x381c]
mov ecx, 2
mov rax, qword [r15 + 0x3ef8]
mulss xmm0, xmm7
mov dword [rbp + 0x220], 0x41200000
mov dword [rbp + 0x224], 0x41200000
addss xmm0, xmm14
subss xmm9, xmm0
movss xmm0, dword [r13 + 0x3820]
mulss xmm0, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
addss xmm0, xmm11
mulss xmm9, xmm12
movss dword [rbp + 0x228], xmm9
subss xmm13, xmm0
mulss xmm13, xmm12
subss xmm13, xmm6
movss dword [rbp + 0x22c], xmm13
call fcn.1400047a0
lea rdx, str.Account_Infos
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x228]
lea rcx, str.Account_Infos
call fcn.14000ba90
mov rcx, qword [0x1402bad40]
movabs r15, 0x7fffffffffffffff
movss xmm7, dword [0x1401638cc]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140163894]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402bb1c0]
sub rax, rcx
cmp rax, 0xa
jb 0x14005b710
cmp qword [0x1402bb1c8], 0xf
lea rax, [0x1402bb1b0]
mov qword [rsp + 0x30], rcx
lea r9, str.Username:
cmova rax, qword [0x1402bb1b0]
lea r8, [0x1402bb1b0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x4d0]
movzx edx, dil
mov qword [rsp + 0x20], 0xa
call fcn.140048fc0
cmp qword [rbp + 0x4e8], 0xf
lea rdx, [rbp + 0x4d0]
movdqa xmm6, xmmword [0x140163c20]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x4d0]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a4b0
mov rcx, qword [0x1402bad40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x14016395c]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402bb180]
sub rax, rcx
cmp rax, 0xa
jb 0x14005b710
cmp qword [0x1402bb188], 0xf
lea rax, [0x1402bb170]
mov qword [rsp + 0x30], rcx
lea r9, str.Versions:
cmova rax, qword [0x1402bb170]
lea r8, [0x1402bb170]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x2c0]
movzx edx, sil
mov qword [rsp + 0x20], 0xa
call fcn.140048fc0
cmp qword [rbp + 0x2d8], 0xf
lea rdx, [rbp + 0x2c0]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x2c0]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a4b0
mov rcx, qword [0x1402bad40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140163948]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402bb200]
sub rax, rcx
cmp rax, 6
jb 0x14005b710
cmp qword [0x1402bb208], 0xf
lea rax, [0x1402bb1f0]
mov qword [rsp + 0x30], rcx
lea r9, str.HWID:
cmova rax, qword [0x1402bb1f0]
lea r8, [0x1402bb1f0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x3f0]
movzx edx, r14b
mov qword [rsp + 0x20], 6
call fcn.140048fc0
cmp qword [rbp + 0x408], 0xf
lea rdx, [rbp + 0x3f0]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x3f0]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a4b0
mov rcx, qword [0x1402bad40]
lea rdx, [0x1402bb268]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
lea rcx, [rbp - 0x60]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140163918]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.14005bcb0
cmp qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
cmova rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp - 0x20], rcx
lea rcx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str.Expiry:__d__m__Y
mov edx, reloc.WS2_32.dll_sendto
mov r9, rax
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
cmp qword [rbp - 0x48], 0xf
lea r8, [rbp - 0x60]
lea rdx, [rbp - 8]
cmova r8, qword [rbp - 0x60]
lea rcx, [rsp + 0x70]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a4b0
mov rcx, qword [0x1402bad40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140163938]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402bb1e0]
sub rax, rcx
cmp rax, 4
jb 0x14005b710
cmp qword [0x1402bb1e8], 0xf
lea rax, [0x1402bb1d0]
mov qword [rsp + 0x30], rcx
lea r9, str.IP:
cmova rax, qword [0x1402bb1d0]
lea r8, [0x1402bb1d0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x4b0]
movzx edx, bl
mov qword [rsp + 0x20], 4
call fcn.140048fc0
cmp qword [rbp + 0x4c8], 0xf
lea rdx, [rbp + 0x4b0]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x4b0]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a4b0
mov rdx, qword [rbp + 0x4c8]
cmp rdx, 0xf
jbe 0x14005ae26
mov rcx, qword [rbp + 0x4b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ae21
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b709
call fcn.140125da8
mov rdx, qword [rbp - 0x48]
mov qword [rbp + 0x4c0], r12
mov qword [rbp + 0x4c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4b0], r12b
cmp rdx, 0xf
jbe 0x14005ae7a
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ae75
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b709
call fcn.140125da8
mov rdx, qword [rbp + 0x408]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], r12b
cmp rdx, 0xf
jbe 0x14005aecb
mov rcx, qword [rbp + 0x3f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005aec6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b709
call fcn.140125da8
mov rdx, qword [rbp + 0x2d8]
mov qword [rbp + 0x400], r12
mov qword [rbp + 0x408], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3f0], r12b
cmp rdx, 0xf
jbe 0x14005af25
mov rcx, qword [rbp + 0x2c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005af20
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b709
call fcn.140125da8
mov rdx, qword [rbp + 0x4e8]
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2c0], r12b
cmp rdx, 0xf
jbe 0x14005af7f
mov rcx, qword [rbp + 0x4d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005af7a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b709
call fcn.140125da8
call fcn.14000bf20
call fcn.140017240
movss xmm13, dword [0x140163874]
movss xmm14, dword [0x14016381c]
call fcn.140011cd0
call fcn.14004cc50
cmp byte [0x1402bad6d], 0
je 0x14005afbe
cmp byte [0x1402bae15], 0
je 0x14005afbe
mov byte [0x1402bb341], 1
cmp byte [0x1402bad3b], 0
je 0x14005afd5
cmp byte [0x1402badbf], 0
je 0x14005afd5
call fcn.14004dd30
cmp byte [0x1402bad3d], 0
je 0x14005afee
cmp byte [0x1402bae05], 0
je 0x14005afee
mov byte [0x1402bb345], 1
cmp byte [0x1402bad39], 0
je 0x14005b007
cmp byte [0x1402badbd], 0
je 0x14005b007
mov byte [0x1402bb33e], 1
cmp byte [0x1402bad6e], 0
je 0x14005b020
cmp byte [0x1402bae16], 0
je 0x14005b020
mov byte [0x1402bb331], 1
cmp byte [0x1402bad3f], 0
je 0x14005b039
cmp byte [0x1402bae07], 0
je 0x14005b039
mov byte [0x1402bb343], 1
cmp byte [0x1402bae29], 0
je 0x14005b052
cmp byte [0x1402bae21], 0
je 0x14005b052
mov byte [0x1402bb346], 1
cmp byte [0x1402badb6], 0
je 0x14005b06b
cmp byte [0x1402bae1a], 0
je 0x14005b06b
mov byte [0x1402bb347], 1
cmp byte [0x1402bae28], 0
je 0x14005b082
cmp byte [0x1402bae20], 0
je 0x14005b082
call fcn.14004f060
cmp byte [0x1402bad3a], 0
je 0x14005b09b
cmp byte [0x1402badbe], 0
je 0x14005b09b
mov byte [0x1402bb333], 1
cmp byte [0x1402bae27], 0
je 0x14005b0b4
cmp byte [0x1402bae1f], 0
je 0x14005b0b4
mov byte [0x1402bb344], 1
cmp byte [0x1402bad6f], 0
je 0x14005b0cd
cmp byte [0x1402bae17], 0
je 0x14005b0cd
mov byte [0x1402bb33c], 1
cmp byte [0x1402bae2c], 0
je 0x14005b0e6
cmp byte [0x1402bae24], 0
je 0x14005b0e6
mov byte [0x1402bb342], 1
cmp byte [0x1402bae2d], 0
je 0x14005b0ff
cmp byte [0x1402bae25], 0
je 0x14005b0ff
mov byte [0x1402bb33f], 1
cmp byte [0x1402bad3e], 0
je 0x14005b118
cmp byte [0x1402bae06], 0
je 0x14005b118
mov byte [0x1402bb330], 1
cmp byte [0x1402bae2e], 0
je 0x14005b12f
cmp byte [0x1402bae26], 0
je 0x14005b12f
call fcn.14004e510
cmp byte [0x1402badbb], 0
je 0x14005b146
cmp byte [0x1402bae1d], 0
je 0x14005b146
call fcn.14004e330
cmp byte [0x1402badbc], 0
je 0x14005b15d
cmp byte [0x1402bae1e], 0
je 0x14005b15d
call fcn.14004e700
cmp byte [0x1402badb7], 0
je 0x14005b174
cmp byte [0x1402bae1b], 0
je 0x14005b174
call fcn.14004e8f0
cmp byte [0x1402bae2b], 0
je 0x14005b2d1
cmp byte [0x1402bae23], 0
je 0x14005b249
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r13d, 1
lea r9, str.Internet_Block:_Enabled_
mov edx, r13d
lea rcx, [rbp + 0x560]
mov r8d, 0x2710
call fcn.14004cb70
mov rax, qword [0x1402b9f58]
cmp rax, qword [0x1402b9f60]
jne 0x14005b2af
lea r8, [rbp + 0x560]
mov rdx, rax
call fcn.14005c5d0
jmp 0x14005b2d7
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r13d, 1
lea r9, str.Internet_Block:_Disabled_
mov edx, r13d
lea rcx, [rbp + 0x560]
mov r8d, 0x2710
call fcn.14004cb70
mov rax, qword [0x1402b9f58]
cmp rax, qword [0x1402b9f60]
je 0x14005b235
mov r8d, 0x2010
lea rdx, [rbp + 0x560]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402b9f58], 0x2010
jmp 0x14005b2d7
mov r13d, 1
cmp byte [0x1402badb5], 0
je 0x14005b2f0
cmp byte [0x1402bae19], 0
je 0x14005b2f0
mov byte [0x1402bb33d], 1
cmp byte [0x1402bad6c], 0
je 0x14005b309
cmp byte [0x1402bae14], 0
je 0x14005b309
mov byte [0x1402bb362], 1
cmp byte [0x1402bad3c], 0
je 0x14005b322
cmp byte [0x1402bae04], 0
je 0x14005b322
mov byte [0x1402bb332], 1
cmp byte [0x1402badb8], 0
je 0x14005b33b
cmp byte [0x1402bae1c], 0
je 0x14005b33b
mov byte [0x1402bb360], 1
cmp byte [0x1402badb4], 0
je 0x14005b354
cmp byte [0x1402bae18], 0
je 0x14005b354
mov byte [0x1402bb361], 1
call fcn.14000b180
mov rcx, qword [0x1402bb368]
lea r8, [0x1402bb348]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x550], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1402bb368]
lea r8, [rbp + 0x550]
mov rdx, qword [0x1402bb348]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov r15, qword [0x1402bad40]
cmp dword [r15 + 0x48c8], 0
jg 0x14005b3c9
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.1400497f0
mov rcx, qword [0x1402bb350]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r15d, dword [rbp - 0x80]
xor r13d, r13d
mov r12, qword [rbp + 0x230]
jmp 0x1400576b0
mov rbx, qword [0x1402bad40]
test rbx, rbx
je 0x14005b429
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14005b44d
jmp 0x14005b42c
mov rdi, r13
mov r8d, 0x241
lea rdx, str.C:UsersNATCHODesktopcheat_natcho_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402bad40]
test rbx, rbx
jne 0x14005b473
mov r8d, 0x1031
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402bad40]
call fcn.14004a7a0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14005b487
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005b495
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14005b4a4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xfffffff7
mov rax, qword [0x1402bad40]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
test rax, rax
je 0x14005b4c8
dec dword [rax + 0xf4]
mov rdx, qword [0x1402bad30]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rax, qword [0x1402bad40]
test rax, rax
je 0x14005b4f1
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005b515
jmp 0x14005b4f4
mov rbx, r13
mov r8d, 0xb7
lea rdx, str.C:UsersNATCHODesktopcheat_natcho_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bad40]
test rax, rax
jne 0x14005b53b
mov r8d, 0x1031
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bad40]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14005b555
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1402bad40]
and dword [rdi + 4], 0xfffffff8
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
test rax, rax
je 0x14005b572
dec dword [rax + 0xf4]
mov rdx, qword [0x1402bad30]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x1402bad40]
mov qword [0x1402bad40], rbx
call fcn.140006590
mov qword [0x1402bad40], r13
test rbx, rbx
je 0x14005b5c9
mov rcx, rbx
call fcn.140021090
mov rax, qword [0x1402bad40]
test rax, rax
je 0x14005b5ba
dec dword [rax + 0xf4]
mov rdx, qword [0x1402bad30]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
call fcn.14005b720
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x508]
mov rcx, qword [rbp + 0x530]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x2670]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x2690]
movaps xmm12, xmmword [rsp + 0x26a0]
movaps xmm11, xmmword [rsp + 0x26b0]
movaps xmm10, xmmword [rsp + 0x26c0]
movaps xmm9, xmmword [rsp + 0x26d0]
movaps xmm8, xmmword [rsp + 0x26e0]
movaps xmm7, xmmword [rsp + 0x26f0]
movaps xmm6, xmmword [rsp + 0x2700]
mov r15, qword [rsp + 0x2710]
movaps xmm14, xmmword [rsp + 0x2680]
mov r12, qword [rsp + 0x2720]
mov rdi, qword [rsp + 0x2750]
mov rsi, qword [rsp + 0x2748]
mov rbx, qword [rsp + 0x2740]
mov r14, qword [rsp + 0x2718]
add rsp, 0x2728
pop r13
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x258], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x268], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x278], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x288], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140038a00
int3