Function at 0x140005ae0
Capabilities:
Execute command
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x260
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1400ba040]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov edx, 0x1e
lea rcx, [rbp + 0x100]
call fcn.140004a80
nop
lea rcx, [rbp + 0x100]
call fcn.140005a20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.Color_0F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, str._ThunderAimV2_____Loading_Started_n
call fcn.140001be0
lea rcx, [rbp - 0x40]
call fcn.140004bc0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp - 0x30]
sub rax, rsi
cmp rax, 0xb
jb 0x140007ab8
lea rax, [rbp - 0x40]
mov r12, qword [rbp - 0x40]
mov r13, qword [rbp - 0x28]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r15, [rsi + 0xb]
mov r14d, 0xf
mov ebx, r14d
lea rdi, [rsp + 0x60]
movabs rdx, 0x8000000000000000
mov r8d, 0x16
cmp r15, rbx
jbe 0x140005c53
mov rbx, r15
or rbx, r14
cmp rbx, rcx
jbe 0x140005c15
mov rbx, rcx
lea rax, [rdx + 0x27]
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x140005dac
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005c49
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005c29
xor edi, edi
jmp 0x140005c4e
cmp rcx, 0x1000
jb 0x140005c41
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400079cf
jmp 0x140005bf6
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Crash_Logs]
movsd qword [rdi + rsi], xmm0
movzx eax, word [0x1400962c8]
mov word [rdi + rsi + 8], ax
movzx eax, byte [0x1400962ca]
mov byte [rdi + rsi + 0xa], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rbx, qword [rsp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.1400027f0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140005d50
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140005d61
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x1400079d5
jmp 0x140005d10
call fcn.14008cbd0
movdqa xmm6, xmmword [0x1400a9270]
movdqu xmmword [rsp + 0x50], xmm6
xor r8d, r8d
mov word [rsp + 0x40], r8w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140005dbb
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005db3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005db3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
xor r8d, r8d
test bl, bl
je 0x140005fb2
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r14
lea rdi, [rsp + 0x60]
cmp r15, rbx
jbe 0x140005e81
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140005e3c
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x140005fa6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005e77
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005e57
mov rdi, r8
jmp 0x140005e7c
cmp rcx, 0x1000
jb 0x140005e6f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400079ec
jmp 0x140005e1d
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Crash_Logs]
movsd qword [rsi + rdi], xmm0
movzx eax, word [0x1400962c8]
mov word [rsi + rdi + 8], ax
movzx eax, byte [0x1400962ca]
mov byte [rsi + rdi + 0xa], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rbx, qword [rsp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.1400027f0
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.14008da08
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140007abe
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140005f63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005f5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005f5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqu xmmword [rsp + 0x50], xmm6
xor r8d, r8d
mov word [rsp + 0x40], r8w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140005fb5
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005fad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
xor r8d, r8d
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r14
lea rdi, [rsp + 0x60]
cmp r15, rbx
jbe 0x140006073
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x14000602e
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x140006182
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140006069
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140006049
mov rdi, r8
jmp 0x14000606e
cmp rcx, 0x1000
jb 0x140006061
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400079f2
jmp 0x14000600f
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Crash_Logs]
movsd qword [rsi + rdi], xmm0
movzx eax, word [0x1400962c8]
mov word [rsi + rdi + 8], ax
movzx eax, byte [0x1400962ca]
mov byte [rsi + rdi + 0xa], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rbx, qword [rsp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x20]
call fcn.1400027f0
mov rdx, qword [0x1400f5ab0]
cmp rdx, 7
jbe 0x14000612b
mov rcx, qword [0x1400f5a98]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140006126
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006189
mov rcx, r8
call fcn.14008cbd0
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [0x1400f5a98], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [0x1400f5aa8], xmm1
movdqu xmmword [rbp + 0x30], xmm6
xor r8d, r8d
mov word [rbp + 0x20], r8w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140006198
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006190
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006190
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14008cbd0
xor r8d, r8d
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r14
lea rdi, [rsp + 0x60]
cmp r15, rbx
jbe 0x140006256
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140006211
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x1400063a5
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000624c
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000622c
mov rdi, r8
jmp 0x140006251
cmp rcx, 0x1000
jb 0x140006244
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400079f8
jmp 0x1400061f2
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ThunderAim]
movsd qword [rsi + rdi], xmm0
movzx eax, word [0x1400962d8]
mov word [rsi + rdi + 8], ax
movzx eax, byte [0x1400962da]
mov byte [rsi + rdi + 0xa], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rbx, qword [rsp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.1400027f0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140006353
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140006364
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000635f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000635f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x1400079fe
jmp 0x140006313
call fcn.14008cbd0
movdqu xmmword [rsp + 0x50], xmm6
xor eax, eax
mov word [rsp + 0x40], ax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400063b1
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x140006400
lea r8, str.ThunderAim
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.140009120
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.140009a50
nop
lea rcx, [rbp]
call fcn.1400045c0
nop
lea rcx, [rbp]
call fcn.140002ec0
nop
lea rcx, [rbp - 0x60]
call fcn.140008af0
mov r13, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x30]
mov r12, qword [rbp - 0x40]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x13
jb 0x140007ad4
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r15, [rsi + 0x13]
mov rbx, r14
lea rdi, [rsp + 0x60]
cmp r15, rbx
jbe 0x1400064d1
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000648d
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x140006620
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400064c7
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400064a7
xor edi, edi
jmp 0x1400064cc
cmp rcx, 0x1000
jb 0x1400064bf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007a15
jmp 0x14000646e
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimconfigs]
movups xmmword [rdi + rsi], xmm0
movzx eax, word [0x1400962f0]
mov word [rdi + rsi + 0x10], ax
movzx eax, byte [0x1400962f2]
mov byte [rdi + rsi + 0x12], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rbx, qword [rsp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.1400027f0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x1400065cc
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400065dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400065d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140007a1b
jmp 0x14000658c
call fcn.14008cbd0
movdqu xmmword [rsp + 0x50], xmm6
xor r15d, r15d
mov word [rsp + 0x40], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000662c
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006627
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006627
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x14000667b
lea r8, str.ThunderAimconfigs
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.140009120
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.140009a50
nop
lea rcx, [rbp]
call fcn.1400045c0
nop
lea rcx, [rbp]
call fcn.140002ec0
nop
lea rcx, [rbp - 0x60]
call fcn.140008af0
mov r13, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x30]
mov r12, qword [rbp - 0x40]
lea rcx, [rbp + 0x120]
call fcn.140001e50
nop
mov r8d, 0x13
lea rdx, str.ThunderAimconfigs
mov rcx, rax
call fcn.140009050
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r14
mov byte [rax], 0
mov rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rbx, qword [rsp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1400027f0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140006782
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140006793
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000678e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000678e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140007a32
jmp 0x140006744
call fcn.14008cbd0
movdqu xmmword [rbp - 0x70], xmm6
mov word [rbp - 0x80], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400067dd
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400067d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqa xmm0, xmmword [0x1400a9290]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140006834
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000682f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000682f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x140006d6f
lea r8, str.ThunderAimconfigs
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xe0]
call fcn.140009120
nop
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140009a50
nop
lea rcx, [rbp]
call fcn.140001e50
nop
mov r8d, 0x13
lea rdx, str.ThunderAimconfigs
mov rcx, rax
call fcn.140009050
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r14
mov byte [rax], 0
mov rdi, qword [rbp + 0x50]
lea rbx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rbx, qword [rbp + 0x40]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x80]
call fcn.1400027f0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x80]
call fcn.140004db0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x14000693e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006939
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006939
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqu xmmword [rbp + 0x90], xmm6
mov word [rbp + 0x80], r15w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14000698c
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006987
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006987
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqa xmm0, xmmword [0x1400a9290]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400069e3
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400069d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqa xmm0, xmmword [0x1400a9290]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140006a35
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqu xmmword [rbp + 0xd0], xmm6
mov word [rbp + 0xc0], r15w
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140006a89
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
lea rcx, [rbp - 0x20]
call fcn.140001e50
nop
mov r8d, 0xb
lea rdx, str.ThunderAim
mov rcx, rax
call fcn.140009050
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r14
mov byte [rax], 0
mov rdi, qword [rbp + 0x70]
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rbx, qword [rbp + 0x60]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0xa0]
call fcn.1400027f0
nop
lea rcx, [rbp + 0xa0]
call fcn.140004820
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x140006b5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqu xmmword [rbp + 0xb0], xmm6
mov word [rbp + 0xa0], r15w
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140006baa
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ba5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006ba5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqa xmm0, xmmword [0x1400a9290]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140006bf9
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006bf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
lea rcx, [rbp - 0x60]
call fcn.140001e50
nop
mov r8d, 0xb
lea rdx, str.ThunderAim
mov rcx, rax
call fcn.140009050
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r14
mov byte [rax], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rbx, qword [rsp + 0x40]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x20]
call fcn.1400027f0
nop
lea rcx, [rbp + 0x20]
call fcn.140004480
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140006cc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006cc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006cc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqu xmmword [rbp + 0x30], xmm6
mov word [rbp + 0x20], r15w
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140006d12
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
movdqa xmm0, xmmword [0x1400a9290]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140006d63
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
mov r12, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x28]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x23
jb 0x1400079c9
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [rsi + 0x23]
mov rbx, r14
lea rdi, [rsp + 0x40]
cmp r15, rbx
jbe 0x140006e40
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140006dfc
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x140006f93
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140006e36
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140006e16
xor edi, edi
jmp 0x140006e3b
cmp rcx, 0x1000
jb 0x140006e2e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007a48
jmp 0x140006ddd
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimBYPASS_FOREGROUNDWINDOW]
movups xmmword [rdi + rsi], xmm0
movups xmm1, xmmword [0x140096308]
movups xmmword [rdi + rsi + 0x10], xmm1
movzx eax, word [0x140096318]
mov word [rdi + rsi + 0x20], ax
movzx eax, byte [0x14009631a]
mov byte [rdi + rsi + 0x22], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rbx, qword [rsp + 0x40]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1400027f0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140006f43
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140006f54
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140007a4e
jmp 0x140006f05
call fcn.14008cbd0
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140006f9f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x140006fcd
lea rdx, str.____Detected_Custom_Setting____BYPASS_FOREGROUNDWINDOW
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009560
lea rdx, [0x140009b00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x1401689d3], 1
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [rsi + 0x1d]
mov rbx, r14
lea rdi, [rsp + 0x40]
cmp r15, rbx
jbe 0x14000708e
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x14000704a
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x1400071e1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140007084
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140007064
xor edi, edi
jmp 0x140007089
cmp rcx, 0x1000
jb 0x14000707c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007a64
jmp 0x14000702b
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimENABLE_DEBUG_MODE]
movups xmmword [rsi + rdi], xmm0
movsd xmm0, qword [0x140096368]
movsd qword [rsi + rdi + 0x10], xmm0
mov eax, dword [0x140096370]
mov dword [rsi + rdi + 0x18], eax
movzx eax, byte [0x140096374]
mov byte [rsi + rdi + 0x1c], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rbx, qword [rsp + 0x40]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1400027f0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140007191
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400071a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000719d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000719d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140007a6a
jmp 0x140007153
call fcn.14008cbd0
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400071ed
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400071e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400071e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x14000721b
lea rdx, str.____Detected_Custom_Setting____ENABLE_DEBUG_MODE
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009560
lea rdx, [0x140009b00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x1401689d1], 1
lea rax, [rbp - 0x40]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [rsi + 0x1f]
mov rbx, r14
lea rdi, [rsp + 0x40]
cmp r15, rbx
jbe 0x1400072dc
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140007298
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x14000743b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400072d2
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400072b2
xor edi, edi
jmp 0x1400072d7
cmp rcx, 0x1000
jb 0x1400072ca
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007a80
jmp 0x140007279
call fcn.14008c680
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, rsi
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimBLOCK_DRIVER_UNLOAD]
movups xmmword [rsi + rdi], xmm0
movsd xmm0, qword [0x1400963c0]
movsd qword [rsi + rdi + 0x10], xmm0
mov eax, dword [0x1400963c8]
mov dword [rsi + rdi + 0x18], eax
movzx eax, word [0x1400963cc]
mov word [rsi + rdi + 0x1c], ax
movzx eax, byte [0x1400963ce]
mov byte [rsi + rdi + 0x1e], al
mov byte [rdi + r15], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rbx, qword [rsp + 0x40]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1400027f0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x1400073eb
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400073fc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400073f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400073f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140007a86
jmp 0x1400073ad
call fcn.14008cbd0
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140007447
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007442
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007442
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x140007475
lea rdx, str.____Detected_Custom_Setting____BLOCK_DRIVER_UNLOAD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009560
lea rdx, [0x140009b00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x1401689d2], 1
lea r15, [rbp - 0x40]
cmp r13, 0xf
cmova r15, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rdi, [rsi + 0x1c]
lea rbx, [rsp + 0x40]
cmp rdi, 0xf
jbe 0x14000752a
mov r14, rdi
or r14, 0xf
movabs rax, 0x7fffffffffffffff
cmp r14, rax
jbe 0x1400074eb
mov r14, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14008c680
test rax, rax
je 0x140007671
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140007525
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x140007505
xor eax, eax
jmp 0x140007522
cmp rcx, 0x1000
jb 0x14000751d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007a9c
jmp 0x1400074cc
call fcn.14008c680
mov rbx, rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], r14
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ThunderAimSPOOF_UNBAN_BETA]
movups xmmword [rsi + rbx], xmm0
movsd xmm0, qword [0x140096418]
movsd qword [rsi + rbx + 0x10], xmm0
mov eax, dword [0x140096420]
mov dword [rsi + rbx + 0x18], eax
mov byte [rbx + rdi], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rbx, qword [rsp + 0x40]
call fcn.14008d7a8
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1400027f0
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.1400044d0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x20], ecx
lea rax, [0x1400ba0d8]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140007621
cmp eax, 1
setne bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140007632
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000762d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000762d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140007aa2
jmp 0x1400075e3
call fcn.14008cbd0
movdqu xmmword [rbp - 0x70], xmm6
xor eax, eax
mov word [rbp - 0x80], ax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000767d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007678
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007678
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
test bl, bl
je 0x1400078e6
lea rdx, str.____Spoofing...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009560
lea rdx, [0x140009b00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xe0]
call fcn.140005a30
nop
lea r8, str.RobloxGlobalBasicSettings_13.xml
mov rdx, rax
lea rcx, [rbp]
call fcn.140009270
nop
lea rcx, [rbp + 0xe0]
call fcn.140008af0
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.140009a50
nop
lea rcx, [rbp - 0x60]
call fcn.140004410
movzx ebx, al
lea rcx, [rbp - 0x60]
call fcn.140002ec0
test bl, bl
je 0x14000771d
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.140009a50
nop
lea rcx, [rbp - 0x60]
call fcn.140004480
nop
lea rcx, [rbp - 0x60]
call fcn.140002ec0
lea rdx, str.SystemReg
lea rcx, [rbp - 0x20]
call fcn.1400087b0
nop
lea rdx, str.SYSTEMCurrentControlSetControl
lea rcx, [rbp - 0x60]
call fcn.1400087b0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.1400265c0
nop
lea rcx, [rbp - 0x60]
call fcn.140002ec0
nop
lea rcx, [rbp - 0x20]
call fcn.140002ec0
lea rdx, str.UUID
lea rcx, [rbp - 0x20]
call fcn.1400058d0
nop
lea rdx, str.Win32_ComputerSystemProduct
lea rcx, [rbp - 0x60]
call fcn.1400058d0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.140028990
nop
lea rcx, [rbp - 0x60]
call fcn.140008af0
nop
lea rcx, [rbp - 0x20]
call fcn.140008af0
lea rdx, str.SerialNumber
lea rcx, [rbp - 0x20]
call fcn.1400058d0
nop
lea rdx, str.Win32_PhysicalMemory
lea rcx, [rbp - 0x60]
call fcn.1400058d0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.140028990
nop
lea rcx, [rbp - 0x60]
call fcn.140008af0
nop
lea rcx, [rbp - 0x20]
call fcn.140008af0
call fcn.14002a0b0
lea rdx, str.MachineGuid
lea rcx, [rbp - 0x20]
call fcn.1400087b0
nop
lea rdx, str.SOFTWAREMicrosoftCryptography
lea rcx, [rbp - 0x60]
call fcn.1400087b0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.1400265c0
nop
lea rcx, [rbp - 0x60]
call fcn.140002ec0
nop
lea rcx, [rbp - 0x20]
call fcn.140002ec0
lea rdx, str.LastLoggedOnUser
lea rcx, [rbp - 0x20]
call fcn.1400087b0
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionAuthenticationLogonUI
lea rcx, [rbp - 0x60]
call fcn.1400087b0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.1400265c0
nop
lea rcx, [rbp - 0x60]
call fcn.140002ec0
nop
lea rcx, [rbp - 0x20]
call fcn.140002ec0
lea rdx, str.RegisteredOwner
lea rcx, [rbp - 0x20]
call fcn.1400087b0
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rbp - 0x60]
call fcn.1400087b0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
call fcn.1400265c0
nop
lea rcx, [rbp - 0x60]
call fcn.140002ec0
nop
lea rcx, [rbp - 0x20]
call fcn.140002ec0
call fcn.140027ae0
lea rdx, str.____Spoofing_Done.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009560
lea rdx, [0x140009b00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp]
call fcn.140008af0
lea rcx, [0x140005220]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.140015070
lea rcx, str.ThunderAimV2____press_enter_to_close_cheat_n
call fcn.140001be0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
cmp r13, 0xf
jbe 0x14000794e
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140007945
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007945
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14008cbd0
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140007992
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000798d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000798d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008cbd0
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.14008c660
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001e30
nop
call fcn.140001d90
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001d90
int3
call fcn.140001d90
int3
call fcn.140001d90
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001d90
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001d90
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001d90
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001d90
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001d90
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.140003ae0
nop
call fcn.140001e30
nop
shr rdx, 0x20
lea r8, [rsp + 0x40]
lea rcx, str.create_directory
call fcn.1400039f0
nop
call fcn.140001e30
int3