Function at 0x1400f0e90
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Execute command
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x268]
sub rsp, 0x368
movaps xmmword [rsp + 0x350], xmm6
xor r15d, r15d
mov dword [rbp + 0x2b0], r15d
cmp byte [0x140437460], r15b
je 0x1400f26bf
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140437810], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140437814], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14025c56c
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], Ordinal_26
mov qword [rsp + 0x58], Ordinal_35
movups xmm0, xmmword [str.Waiting_for_fortnite.._n]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140277c90]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], r15b
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
cmp byte [0x140437460], r15b
je 0x1400f26bf
cmp qword [0x1404370f0], r15
jne 0x1400f0ff1
nop dword [rax]
mov al, 0x49
mov cl, 0x7f
mov dl, 0x63
mov r8b, 0x66
mov r9b, 0x7d
movzx r10d, r9b
mov r11b, 0x61
mov bl, reloc.WS2_32.dll_WSAStartup
mov dil, gethostname
mov sil, gethostname
xor r14d, r14d
xor al, 0xf
mov byte [rsp + 0x60], al
xor cl, 0x10
mov byte [rsp + 0x61], cl
xor dl, 0x11
mov byte [rsp + 0x62], dl
xor r8b, 0x12
mov byte [rsp + 0x63], r8b
xor r9b, 0x13
mov byte [rsp + 0x64], r9b
xor r10b, 0x14
mov byte [rsp + 0x65], r10b
xor r11b, 0x15
mov byte [rsp + 0x66], r11b
xor bl, 0x16
mov byte [rsp + 0x67], bl
xor dil, 0x17
mov byte [rsp + 0x68], dil
xor sil, 0x18
mov byte [rsp + 0x69], sil
mov byte [rsp + 0x6a], r14b
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1404370f0], rax
test rax, rax
je 0x1400f0f60
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14025c56c
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], reloc.WS2_32.dll_socket
mov qword [rsp + 0x58], Ordinal_35
movups xmm0, xmmword [str.Waiting_for_Drivers.._n]
movups xmmword [rax], xmm0
mov ecx, dword [0x140277cb0]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x140277cb4]
mov word [rax + 0x14], cx
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rax + 0x16], cl
mov byte [rax + 0x17], r15b
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
cmp byte [0x140437460], r15b
je 0x1400f26bf
lea rcx, [0x140437790]
call fcn.1400c9be0
test al, al
je 0x1400f26a1
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
mov ebx, r15d
cmp rax, 0xffffffffffffffff
je 0x1400f1120
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0x14]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x10], 0x238
lea rdx, [rbp + 0x10]
mov rcx, rdi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x1400f1117
lea rdx, [rbp + 0x3c]
lea rcx, str.FortniteClient_Win64_Shipping.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400f10d9
mov ebx, dword [rbp + 0x18]
jmp 0x1400f1117
lea rdx, [rbp + 0x10]
mov rcx, rdi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x1400f1117
nop dword [rax]
lea rdx, [rbp + 0x3c]
lea rcx, str.FortniteClient_Win64_Shipping.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
cmove ebx, dword [rbp + 0x18]
lea rdx, [rbp + 0x10]
mov rcx, rdi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x1400f10f0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140437228], ebx
mov edx, ebx
lea rcx, [0x140437790]
call fcn.1400cab30
test al, al
je 0x1400f26a1
cmp byte [0x140437460], r15b
je 0x1400f26bf
xor edx, edx
lea rcx, [0x140437790]
call fcn.1400ca9c0
mov qword [0x1404376d8], rax
test rax, rax
jne 0x1400f118f
lea rdx, str._Demonware___Error_code_0x3424__n
lea rcx, [rbp - 0x20]
call fcn.140046ad0
mov rcx, rax
call fcn.1400e07a0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140437790]
call fcn.1400cac40
test al, al
jne 0x1400f11cb
lea rdx, str._Demonware___Error_code_0x2524__n
lea rcx, [rbp - 0x20]
call fcn.140046ad0
mov rcx, rax
call fcn.1400e07a0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140276940]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x1402a600c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140109670
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], recvfrom
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str._Product__]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140277d60]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], r15b
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2b8], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 2
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov eax, 0x796c
mov word [rbp - 0x80], ax
mov byte [rbp - 0x7e], 0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14025c56c
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], reloc.WS2_32.dll_recv
mov qword [rsp + 0x58], Ordinal_35
movups xmm0, xmmword [str.Fortnite_Public_n]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.1401141c0
nop
lea rax, [rbp - 0x20]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.140113fe0
mov dword [rbp + 0x2b0], 1
lea r9, [fcn.1400438e0]
mov edx, Ordinal_41
mov r8d, 1
lea rcx, [rbp - 0x20]
call fcn.14025cc6c
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.1401098d0
mov dword [rbp + 0x2b0], r15d
lea rcx, [rsp + 0x70]
call fcn.140115750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], recvfrom
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str._Status___]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140277d88]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2b8], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 1
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
movzx eax, word [0x140273ecc]
mov byte [rbp - 0x80], al
mov byte [rbp - 0x7f], 0
mov dword [rsp + 0x4c], r15d
mov qword [rsp + 0x50], recvfrom
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Undetected_n]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140277d98]
mov word [rsp + 0x48], ax
movzx eax, byte [reloc.WS2_32.dll_ioctlsocket]
mov byte [rsp + 0x4a], al
mov byte [rsp + 0x4b], 0
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.1401141c0
nop
lea rax, [rbp - 0x20]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x60]
call fcn.140113fe0
mov dword [rbp + 0x2b0], 2
lea r9, [fcn.1400438e0]
mov edx, Ordinal_41
mov r8d, 1
lea rcx, [rbp - 0x20]
call fcn.14025cc6c
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1401098d0
nop
lea rcx, [rsp + 0x60]
call fcn.140115750
lea rdi, [0x1402747cc]
xorps xmm0, xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
mov r8d, reloc.WS2_32.dll_select
lea rdx, str._Subscription___
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
cmp byte [0x1404370bc], 1
jne 0x1400f1538
call fcn.140047180
lea rcx, [rbp - 0x80]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Lifetime_n
lea rcx, [rsp + 0x70]
call fcn.140110d20
nop
mov rdx, rax
mov rcx, rbx
call fcn.1401098d0
nop
lea rcx, [rsp + 0x70]
call fcn.140115750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], recvfrom
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str._Expiry___]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140277dd0]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Never_n
lea rcx, [rsp + 0x70]
call fcn.140110c20
nop
mov rdx, rax
mov rcx, rbx
call fcn.1401098d0
nop
lea rcx, [rsp + 0x70]
jmp 0x1400f16e2
call fcn.140047180
lea rcx, [rbp - 0x80]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.customer_n
lea rcx, [rsp + 0x70]
call fcn.140110d20
nop
mov rdx, rax
mov rcx, rbx
call fcn.1401098d0
nop
lea rcx, [rsp + 0x70]
call fcn.140115750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], recvfrom
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str._Expiry___]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140277dd0]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
mov r8, qword [0x140437210]
add r8, 0x20
mov rcx, qword [r8 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 1
jb 0x1400f26d8
mov r9, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400f15e9
mov r9, qword [r8]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
movzx edx, byte [rbp + 0x2b0]
lea rcx, [rbp - 0x20]
call fcn.140113c10
mov dword [rbp + 0x2b0], 4
lea rax, [rbp - 0x20]
mov qword [rbp + 0x2b8], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2c0], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 2
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov eax, 0x616c
mov word [rbp - 0x80], ax
mov byte [rbp - 0x7e], 0
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x40]
call fcn.140046b10
nop
lea r8, [rbp - 0x80]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1401141c0
nop
lea rax, [rbp - 0x60]
mov qword [rsp + 0x70], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x60]
call fcn.140113fe0
mov dword [rbp + 0x2b0], recvfrom
lea r9, [fcn.1400438e0]
mov edx, Ordinal_41
mov r8d, 1
lea rcx, [rbp - 0x60]
call fcn.14025cc6c
nop
lea rcx, [rbp - 0x20]
call fcn.1400438e0
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1401098d0
nop
lea rcx, [rsp + 0x60]
call fcn.140115750
mov rdx, rdi
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140109670
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str._Info___]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140277df8]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.If_the_Aimbot_Not_Work_Restart_The_Cheat_n
lea rcx, [rsp + 0x70]
call fcn.140110c20
nop
mov rdx, rax
mov rcx, rbx
call fcn.1401098d0
nop
lea rcx, [rsp + 0x70]
call fcn.140115750
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str._Info___]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140277df8]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
lea rcx, [rsp + 0x40]
call fcn.1400e07a0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Dont_Forgot_to_Vouch_in_the_discord_Server_n
lea rcx, [rsp + 0x70]
call fcn.140110c20
nop
mov rdx, rax
mov rcx, rbx
call fcn.1401098d0
nop
lea rcx, [rsp + 0x70]
call fcn.140115750
cmp byte [0x140437460], 0
je 0x1400f26bf
mov dword [rbp - 0x60], 0x76796a7a
mov dword [rbp - 0x5c], 0x7b747677
mov dword [rbp - 0x58], 0x585b3c2e
mov dword [rbp - 0x54], 0x6573572a
mov dword [rbp - 0x50], 0x7867626a
mov dword [rbp - 0x4c], 0x6a616f5c
mov dword [rbp - 0x48], 0x702e6375
mov dword [rbp - 0x44], 0x16387262
mov word [rbp - 0x40], 0x256c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3e], xmm0
mov qword [rbp - 0x2e], rax
mov dword [rbp - 0x26], eax
mov word [rbp - 0x22], ax
movabs rsi, 0x6b5aaefe5e071207
movabs r13, 0xe27458869ffc4281
movabs r14, 0x938b430b1fb17495
movabs r15, 0xf52c1118ddf81c0b
movabs r12, 0x3043600b9dff9709
movzx edi, byte [rbp + 0x2b0]
call fcn.140139bd0
mov rbx, qword [rax]
call fcn.140139be0
mov r8, qword [rax]
xor r11d, r11d
cmp r11, 0x40
jae 0x1400f24c8
movzx r10d, byte [rbp + r11 - 0x60]
movzx r9d, r10b
nop dword [rax]
cmp rbx, r11
ja 0x1400f24bf
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x1400f18cc
lea rcx, [r11 + r13]
mov rax, r10
and rax, rcx
imul rdi, rax, 0xfffffffffffffffe
add rdi, r10
add rdi, rcx
add dil, 0x79
jmp 0x1400f1906
je 0x1400f244a
lea rax, [r8 + 2]
cmp rbx, rax
je 0x1400f23e8
lea rax, [r8 + 3]
cmp rbx, rax
je 0x1400f23b0
lea rax, [r8 + 4]
cmp rbx, rax
je 0x1400f238e
lea rax, [r8 + 6]
cmp rbx, rax
je 0x1400f2339
movzx r9d, r10b
nop word [rax + rax]
cmp r8, r11
ja 0x1400f24b6
lea rcx, [r8 + 4]
cmp rbx, rcx
jae 0x1400f193e
lea rdx, [r11 + r14]
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x13
add dil, dl
jmp 0x1400f1990
lea rax, [r8 + 1]
cmp rbx, rax
je 0x1400f231d
lea rax, [r8 + 2]
cmp rbx, rax
je 0x1400f22fe
cmp rbx, rcx
je 0x1400f22e2
lea rax, [r8 + 7]
cmp rbx, rax
je 0x1400f229b
lea rax, [r8 + 6]
cmp rbx, rax
je 0x1400f227c
lea rax, [r8 + 3]
cmp rbx, rax
je 0x1400f2251
nop dword [rax + rax]
lea rax, [r8 + rbx]
cmp rax, r11
jbe 0x1400f1fbf
nop dword [rax]
lea rax, [r8 + 0x64]
cmp rbx, rax
je 0x1400f1fa1
lea rax, [r8 + 9]
cmp rbx, rax
je 0x1400f1f73
lea rax, [r8 + 0x200]
cmp rbx, rax
je 0x1400f1f48
lea rax, [r8 + 0x10]
cmp rbx, rax
je 0x1400f1f23
lea rax, [r8 + 3]
cmp rbx, rax
je 0x1400f1efb
lea rax, [r8 + 0x61]
cmp rbx, rax
je 0x1400f1ed6
lea rax, [r8 + 0x42]
cmp rbx, rax
je 0x1400f1eb1
lea rax, [r8 + 0x41]
cmp rbx, rax
je 0x1400f1e89
lea rax, [r8 + 0x80]
cmp rbx, rax
je 0x1400f1e55
lea rax, [r8 + 0xa]
cmp rbx, rax
je 0x1400f19a0
lea rbx, [r8 + 0x3e8]
lea r8, [rbx + 2]
lea rax, [r8 + 2]
cmp rbx, rax
jb 0x1400f2499
lea rax, [r8 + 0x1000]
cmp rbx, rax
jb 0x1400f247c
lea rax, [r8 + 0x40]
cmp rbx, rax
jb 0x1400f1b95
lea rax, [r8 + 6]
cmp rbx, rax
jb 0x1400f1b76
lea rax, [r8 + 0x5a]
cmp rbx, rax
jb 0x1400f1b57
lea rax, [r8 + 9]
cmp rbx, rax
jb 0x1400f1df9
lea rax, [r8 + 1]
cmp rbx, rax
jb 0x1400f1da6
lea rax, [r8 + 0x400]
cmp rbx, rax
jb 0x1400f1d59
lea rax, [r8 + 0x28]
cmp rbx, rax
jb 0x1400f1d2c
lea rax, [r8 + 0x61]
cmp rbx, rax
jb 0x1400f19a0
lea rbx, [r8 + 5]
lea r8, [rbx + 0x42]
lea rax, [r8 + 0x41]
cmp rbx, rax
ja 0x1400f1cf8
lea rax, [r8 + 0x80]
cmp rbx, rax
ja 0x1400f1cd0
lea rax, [r8 + 0xa]
cmp rbx, rax
ja 0x1400f1cab
lea rax, [r8 + 0x3e8]
cmp rbx, rax
ja 0x1400f1c86
lea rax, [r8 + 0x20]
cmp rbx, rax
ja 0x1400f1c5e
lea rax, [r8 + 4]
cmp rbx, rax
ja 0x1400f1c39
lea rax, [r8 + 0x7a]
cmp rbx, rax
ja 0x1400f1c0e
lea rax, [r8 + 6]
cmp rbx, rax
ja 0x1400f1bdd
lea rax, [r8 + 0x5a]
cmp rbx, rax
ja 0x1400f1bb4
lea rax, [r8 + 0x200]
cmp rbx, rax
ja 0x1400f19a0
lea rbx, [r8 + 1]
lea r8, [rbx + 0x10]
jmp 0x1400f19a0
lea rdx, [r11 + r15]
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x4d
add dil, dl
jmp 0x1400f1990
lea rdx, [r11 + r12]
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x3f
add dil, dl
jmp 0x1400f1910
lea rdx, [r11 + rsi]
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x31
add dil, dl
jmp 0x1400f18a0
movabs rdx, 0x9c5a1858fd8ba4a8
add rdx, r11
movzx eax, dl
and al, r10b
mov ecx, 0x34
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
movzx esi, r11b
jmp 0x1400f2357
movabs rdx, 0xd771674bbd931fa6
add rdx, r11
movzx eax, dl
and al, r10b
mov ecx, Ordinal_60
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r8
dec r11
inc r11
jmp 0x1400f1885
movabs rcx, 0x1288b63e7d9a9aa4
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x7c
dec r11
inc r11
jmp 0x1400f1885
movabs rdx, 0x4da005313da215a2
add rdx, r11
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x6e
jmp 0x1400f220d
movabs rcx, 0x88b75423fda990a0
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x60
add rbx, r8
jmp 0x1400f23cf
movabs rcx, 0xc3cea316bdb10b9e
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x52
jmp 0x1400f23cf
movabs rdx, 0xfee5f2097db8869c
add rdx, r11
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x44
jmp 0x1400f22b2
movabs rdx, 0x39fd40fc3dc0019a
add rdx, r11
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x36
add dil, dl
jmp 0x1400f2409
movabs rcx, 0x75148feefdc77c98
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x28
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
movabs rcx, 0x8ced54dddda3013
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
add dil, 0x7b
mov byte [rbp + r11 - 0x60], dil
inc r11
jmp 0x1400f1885
movabs rcx, 0x43e624409de1ab11
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x77
cmp r8, 2
jb 0x1400f1d4c
movzx esi, r11b
lea edx, [rsi + 0x66]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea edi, [rcx + rcx]
movzx r9d, r10b
jmp 0x1400f235a
movabs rcx, 0x7efd73335de9260f
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x69
cmp rbx, 6
jae 0x1400f21f3
lea rax, [r8 + 0x64]
cmp rbx, rax
jbe 0x1400f213f
lea edx, [r11 + 0x52]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 0x3e
add dil, dl
jmp 0x1400f1d79
movabs rcx, 0xba14c2261df0a10d
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x5b
lea rax, [r8 + rbx]
cmp rax, 0x400
je 0x1400f2237
lea rcx, [r8 + 3]
cmp rbx, rcx
jbe 0x1400f2099
lea edx, [r11 - 0x43]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 0x2b
add dil, dl
jmp 0x1400f1dc6
movabs rcx, 0x75439242be28bb7e
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x72
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
movabs rdx, 0xb05ae1357e30367c
add rdx, r11
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x64
add dil, dl
jmp 0x1400f2409
movabs rdx, 0xeb7230283e37b17a
add rdx, r11
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x56
jmp 0x1400f22b2
movabs rcx, 0x26897f1afe3f2c78
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x48
jmp 0x1400f23cf
movabs rcx, 0x61a0ce0dbe46a776
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x3a
add rbx, r8
jmp 0x1400f23cf
movabs rdx, 0x9cb81d007e4e2274
add rdx, r11
movzx eax, dl
and al, r10b
add al, al
movzx edi, r9b
sub dil, al
sub dil, 0x2c
jmp 0x1400f220d
movabs rcx, 0xd7cf6bf33e559d72
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x1e
dec r11
inc r11
jmp 0x1400f1885
movabs rcx, 0x12e6bae5fe5d1870
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x10
inc r8
dec r11
inc r11
jmp 0x1400f1885
movzx esi, r11b
lea ecx, [rsi + 0x6e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 2
jmp 0x1400f235a
lea rax, [r8 + 0x80]
cmp rbx, rax
jae 0x1400f1fe6
lea ecx, [r11 - 0x7f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
add dil, 0x79
jmp 0x1400f1e19
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400f2019
lea ecx, [r11 + 0x2a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x26
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x1400f203d
lea ecx, [r11 + 0x2e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x42
jmp 0x1400f22b5
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x1400f2064
lea ecx, [r11 + 0x32]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x5e
add rbx, r8
jmp 0x1400f23cf
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400f1e19
lea edx, [r11 + 0x38]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r8
dec r11
inc r11
jmp 0x1400f1885
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400f20c1
movzx esi, r11b
lea edx, [rsi - 0x41]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 0x39
jmp 0x1400f2353
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400f20ef
lea ecx, [r11 - 0x3f]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x47
inc r8
dec r11
inc r11
jmp 0x1400f1885
cmp rbx, rcx
jne 0x1400f2116
lea ecx, [r11 - 0x3d]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x55
dec r11
inc r11
jmp 0x1400f1885
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x1400f1dc6
lea ecx, [r11 - 0x37]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x7f
jmp 0x1400f23cf
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400f2173
lea ecx, [r11 + 0x54]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x4c
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400f219f
lea edx, [r11 + 0x56]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 0x5a
add dil, dl
movzx r9d, r10b
jmp 0x1400f2409
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x1400f21c4
lea ecx, [r11 + 0x5a]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x76
jmp 0x1400f23cf
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x1400f1d79
lea edx, [r11 + 0x5c]
movzx eax, r10b
and al, dl
mov ecx, 0x3e
sub cl, al
lea edi, [rcx + rcx]
add dil, r10b
add dil, dl
add rbx, r8
jmp 0x1400f23cf
lea edx, [r11 + 0x68]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x14
lea edi, [rcx + rcx]
movzx r9d, r10b
add dil, dl
lea edx, [r11 - 0x17]
movzx eax, r9b
and al, dl
add al, al
movzx ecx, dil
sub cl, al
sub cl, 0x5f
add cl, r9b
add cl, dl
mov byte [rbp + r11 - 0x60], cl
add rbx, r8
jmp 0x1400f23cf
lea edx, [r11 + 0x6a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea edi, [rcx + rcx]
movzx r9d, r10b
jmp 0x1400f22b2
lea ecx, [r11 - 0x59]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
add dil, 0x6f
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
lea edx, [r11 - 0x5b]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
add dil, 0x7d
add dil, dl
jmp 0x1400f2409
lea edx, [r11 - 0x5d]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 0x75
add dil, dl
lea edx, [r11 - 0x15]
movzx eax, r9b
and al, dl
add al, al
movzx ecx, r9b
sub cl, al
sub cl, 0x6d
add cl, dl
movzx eax, cl
mov byte [rbp + r11 - 0x60], al
inc r8
add rax, r8
sub r11, rax
jmp 0x1400f2409
lea ecx, [r11 - 0x5f]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x67
jmp 0x1400f23cf
lea ecx, [r11 - 0x61]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x59
add rbx, r8
jmp 0x1400f23cf
movzx esi, r11b
lea edx, [rsi - 0x69]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 0x21
jmp 0x1400f2357
movzx esi, r11b
lea edx, [rsi - 0x6d]
movzx eax, r10b
and al, dl
add al, al
movzx edi, r10b
sub dil, al
sub dil, 5
movzx r9d, r10b
add dil, dl
sub sil, 0x19
movzx eax, r9b
and al, sil
add al, al
sub r9b, al
sub sil, 0x51
add r9b, sil
mov byte [rbp + r11 - 0x60], r9b
movabs rsi, 0x6b5aaefe5e071207
inc r8
dec r11
inc r11
jmp 0x1400f1885
lea ecx, [r11 - 0x71]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edi, [rcx + r10]
add dil, 0x17
dec r11
inc r11
jmp 0x1400f1885
movabs rcx, 0xf6171cbb9fde5689
add rcx, r11
movzx eax, r10b
and al, cl
add al, al
sub cl, al
lea edi, [r10 + rcx]
add dil, 0x41
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x1400f1885
movabs rcx, 0x6c45baa11fed4c85
add rcx, r11
and r10b, cl
add r10b, r10b
movzx edi, r9b
sub dil, r10b
add dil, 0x5d
add dil, cl
lea edx, [r11 + 0x6c]
movzx eax, r9b
and al, dl
mov ecx, 6
sub cl, al
add cl, cl
add cl, r9b
add cl, dl
mov byte [rbp + r11 - 0x60], cl
inc rbx
mov rax, 0xffffffffffffffff
sub rax, rbx
add r11, rax
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
movabs rax, 0xa75d0993dff4c783
add rax, r11
and r10b, al
add r10b, r10b
sub r9b, r10b
lea edi, [rax + r9]
add dil, 0x6b
movzx eax, byte [rbp + r11 - 0x60]
add rax, r8
add r11, rax
inc r11
jmp 0x1400f1885
add r11b, 5
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edi, [r11 + r10]
sub dil, 0x23
jmp 0x1400f1882
add r11b, 3
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edi, [r11 + r10]
sub dil, 0x15
jmp 0x1400f1872
lea rdx, [rbp + 0x17cae4c]
jmp 0x1400f24cc
lea rdx, [rbp + 0x78f0cd]
jmp 0x1400f24cc
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.140046ad0
mov rcx, rax
call fcn.1400f0a80
xor r14d, r14d
mov edi, r14d
mov esi, r14d
movss xmm6, dword [0x14026cc74]
nop
movsxd rdx, esi
add rdx, qword [0x1404376d8]
mov qword [0x1404371b0], rdx
add rdx, 0x11fd3d78
mov qword [rbp + 0x2b0], r14
mov r9d, 8
lea r8, [rbp + 0x2b0]
lea rcx, [0x140437790]
call fcn.1400cadc0
mov qword [rbp + 0x2b8], r14
mov rbx, qword [rbp + 0x2b0]
lea rdx, [rbx + 0x30]
mov r9d, 8
lea r8, [rbp + 0x2b8]
lea rcx, [0x140437790]
call fcn.1400cadc0
test rbx, rbx
je 0x1400f2594
mov rdx, qword [rbp + 0x2b8]
test rdx, rdx
je 0x1400f2594
mov qword [rbp + 0x2b0], r14
add rdx, 0xc0
mov r9d, 8
lea r8, [rbp + 0x2b0]
lea rcx, [0x140437790]
call fcn.1400cadc0
cmp qword [rbp + 0x2b0], rbx
je 0x1400f25ac
inc edi
add esi, 0x1000
movd xmm0, edi
cvtdq2ps xmm0, xmm0
comiss xmm6, xmm0
ja 0x1400f24f0
mov rax, qword [0x1404371b0]
mov qword [0x1404376e0], rax
mov ecx, 1
call fcn.14025c56c
mov qword [rbp + 0x2b0], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14010ccf0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1400f26c8
lea rcx, [rsp + 0x60]
call fcn.140126fa0
nop
cmp dword [rsp + 0x68], 0
je 0x1400f2615
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rbx, qword [0x1404371d8]
mov rcx, rbx
call fcn.14012e3f0
test al, al
jne 0x1400f2684
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov r8d, listen
lea rdx, str.Overlay__
lea rcx, [rbp - 0x80]
call fcn.140047180
lea rcx, [rbp - 0x80]
call fcn.1400e07a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov r8d, 0x49
lea rdx, str.Info_The_overlay_cannot_load_Dont_press_anything_if_you_loading_the_cheat
lea rcx, [rbp - 0x80]
call fcn.140047180
lea rcx, [rbp - 0x80]
call fcn.1400e05a0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, rbx
call fcn.14012ffa0
mov rcx, rbx
call fcn.140134490
xor eax, eax
movaps xmm6, xmmword [rsp + 0x350]
add rsp, 0x368
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov dword [rsp + 0x68], r14d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.140045410
int3