Function at 0x1400011f0
Capabilities:
Create process on windows
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r15
push rbp
mov rbp, rsp
sub rsp, 0x30
lea rcx, str.Welcome
call fcn.140048f40
lea rcx, str.Made_By__0SD47_
call fcn.140048f40
mov rcx, qword [0x140069b20]
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], 0
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x140060a90]
movss dword [rax + 0x118], xmm1
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, str.Profile
movss xmm0, dword [rax + 0x134]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, dword [0x140060a6c]
maxss xmm0, xmm1
movss dword [rax + 0x11c], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140049860
xor r15d, r15d
test al, al
je 0x1400012f7
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.unknowncheats.me_forum_members_5464526.html
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x140069b20]
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], r15
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x140060a94]
movss dword [rax + 0x118], xmm1
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, str.UC.Me
movss xmm0, dword [rax + 0x134]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, dword [0x140060a74]
maxss xmm0, xmm1
movss dword [rax + 0x11c], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140049860
test al, al
je 0x1400013c8
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.unknowncheats.me
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x140069b20]
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], r15
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x140060a90]
movss dword [rax + 0x118], xmm1
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, str.Back___
movss xmm0, dword [rax + 0x134]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, dword [0x140060a64]
maxss xmm0, xmm1
movss dword [rax + 0x11c], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140049860
test al, al
je 0x14000147a
mov byte [0x1400692a0], r15b
mov rcx, qword [0x140069b20]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x1400014b4
movss xmm1, dword [0x140060acc]
lea rcx, [rbp + 0x10]
mov qword [rbp + 0x10], r15
call fcn.140018f90
cmp qword [0x140069278], 0x10
lea rdi, [0x140069260]
mov rbx, qword [0x140069270]
mov rcx, rdi
cmovae rcx, qword [0x140069260]
cmp rbx, 0xa
jne 0x1400014ee
mov r8, rbx
lea rdx, str.Registered
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000151e
cmp qword [0x140069278], 0x10
cmovae rdi, qword [0x140069260]
cmp rbx, 0x1a
jne 0x14000158f
mov r8, rbx
lea rdx, str.Unregistered___Unconfirmed
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000158f
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x10], r15d
mov dword [rbp + 0x14], 0x41200000
call fcn.14004b090
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], r15
lea rcx, str.Renew
call fcn.140049860
test al, al
je 0x140001570
mov dword [rsp + 0x28], 1
lea r8, str.http:__your_xenforo_forum_link_forum_index.php_register_
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.14000c1f0
test al, al
je 0x140001642
xor edx, edx
call fcn.140019ae0
lea rcx, str.Click_to_renew_your_subscription.
jmp 0x140001607
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x10], r15d
mov dword [rbp + 0x14], 0x41600000
call fcn.14004b090
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], r15
lea rcx, str.Load_cheat
call fcn.140049860
test al, al
je 0x1400015ee
mov dword [rsp + 0x28], 1
lea r8, str.BOLoadbo2.exe
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, str.taskkill__F__T__IM_UnknownCheats.me.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call fcn.14000c1f0
test al, al
je 0x140001642
xor edx, edx
call fcn.140019ae0
lea rcx, str.Click_to_load_cheat_
call fcn.140048f40
mov rax, qword [0x140069b20]
mov rcx, qword [rax + 0x1d18]
test dword [rcx + 0xc], 0x2000000
jne 0x14000163d
mov r8d, 0x2209
lea rdx, str.C:UsersAK3D_Objectsimgui_cheat_loader_mainimguiimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400176d0
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
add rsp, 0x30
pop rbp
ret