Function at 0x140002990
Capabilities:
Access peb ldr_data
Check os version
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140115010]
xor rax, rsp
mov qword [rbp + 0x38], rax
xor r13d, r13d
mov rsi, qword [0x140115900]
mov qword [rsp + 0x60], rsi
mov r14, qword [0x140115888]
mov qword [rsp + 0x68], r14
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140115994], eax
jle 0x140002a38
lea rcx, [0x140115994]
call fcn.1400c1f6c
cmp dword [0x140115994], 0xffffffff
jne 0x140002a38
movss xmm0, dword [r14 + 0x3938]
movss dword [0x140115990], xmm0
lea rcx, [0x140115994]
call fcn.1400c1f00
mov rax, qword [0x140115888]
mov dword [rax + 0x4ab0], 0x3f79999a
or dword [rax + 0x4a50], 0x42
mov dword [rax + 0x4a70], 0x44354000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 1
mov r8d, 0x22
lea rdx, [0x140115171]
lea rcx, str.FiveM___EXTERNAL__
call fcn.140017010
mov rbx, qword [0x140115888]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x140002aae
cmp qword [rbx + 0x4e40], r13
lea rcx, [rdx + 0x26c]
je 0x140002ab5
lea rcx, [rdx + 0x23c]
movss xmm1, dword [rcx]
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp - 0x50], 0x43160000
movss dword [rbp - 0x4c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.SelectChild
call fcn.14000b190
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002b1c
lea r8, str.SelectChild
mov edx, 0xb
mov ecx, eax
call fcn.140025e50
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.SelectChild
call fcn.140013cb0
call fcn.1400425f0
mov ebx, r13d
mov rax, qword [0x1401158e8]
mov rdx, qword [0x1401158e0]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140002c01
mov dword [rbp - 0x4c], 0x420c0000
mov rdi, r13
cmp dword [0x14011592c], ebx
sete byte [rbp - 0x48]
mov rax, qword [0x140115888]
mov r8, qword [rax + 0x4040]
mov rcx, r8
cmp qword [r8 + 0x1c0], r13
jne 0x140002b9c
cmp qword [rax + 0x4e40], r13
jne 0x140002b9c
add rcx, 0x268
jmp 0x140002ba3
add rcx, 0x238
movss xmm0, dword [rcx]
subss xmm0, dword [r8 + 0x118]
movss dword [rbp - 0x50], xmm0
lea rcx, [rdx + rdi]
cmp qword [rcx + 0x18], 0x10
jb 0x140002bc3
mov rcx, qword [rcx]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
call fcn.1400083d0
test al, al
je 0x140002bda
mov dword [0x14011592c], ebx
inc ebx
add rdi, 0x20
mov rcx, qword [0x1401158e8]
mov rdx, qword [0x1401158e0]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x140002b66
call fcn.140014040
movss xmm6, dword [0x140104678]
movaps xmm1, xmm6
xorps xmm7, xmm7
xorps xmm0, xmm0
call fcn.14001da80
mov rbx, qword [0x140115888]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x140002c43
cmp qword [rbx + 0x4e40], r13
lea rcx, [rdx + 0x268]
je 0x140002c4a
lea rcx, [rdx + 0x238]
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
subss xmm1, dword [rdx + 0x11c]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.ContextChild
call fcn.14000b190
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002cbc
lea r8, str.ContextChild
mov edx, 0xb
mov ecx, eax
call fcn.140025e50
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.ContextChild
call fcn.140013cb0
cmp dword [0x14011592c], 3
je 0x140002ddf
mov rbx, qword [0x140115888]
mov rdx, qword [rbx + 0x4040]
mov r8, qword [rdx + 0x1c0]
test r8, r8
jne 0x140002d21
cmp qword [rbx + 0x4e40], r13
jne 0x140002d21
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
add rax, 0x268
jmp 0x140002d50
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
test r8, r8
jne 0x140002d4a
cmp qword [rbx + 0x4e40], r13
jne 0x140002d4a
add rax, 0x268
jmp 0x140002d50
add rax, 0x238
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x118]
mulss xmm0, dword [0x140104534]
subss xmm0, dword [0x1401045e0]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.LeftChild
call fcn.14000b190
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002dc5
lea r8, str.LeftChild
mov edx, 0xb
mov ecx, eax
call fcn.140025e50
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.LeftChild
call fcn.140013cb0
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002e14
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov ecx, dword [0x14011592c]
lea r15, str._.1f
movss xmm8, dword [0x140104574]
test ecx, ecx
je 0x140003e8a
sub ecx, 1
je 0x140003bc8
sub ecx, 1
je 0x1400039d8
sub ecx, 1
je 0x14000303c
cmp ecx, 1
jne 0x140004066
lea rcx, str.System
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140002eab
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140002e9b
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002ed9
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x1401151d0]
lea rcx, str.StreamProof
call fcn.140041500
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002f21
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
call fcn.1400425f0
lea rcx, str.Crosshair
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140002f7b
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140002f6b
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002fa9
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x1401151d1]
lea rcx, str.Crosshair
call fcn.140041500
mov dword [rbp - 0x40], 0xa
mov dword [rbp - 0x50], 1
lea rcx, str.CrosshairSize
call fcn.14003f390
lea rax, [0x140102074]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, [0x1401151d8]
mov edx, 4
lea rcx, str.SizeCH
call fcn.140044ff0
lea rdx, [rsi + 0x180]
xor r8d, r8d
lea rcx, str.ColorC
call fcn.14004c1b0
lea r9, str.Cross
lea rdx, [0x1401151d4]
lea rcx, str.TypeC
call fcn.140043b80
jmp 0x140004066
mov qword [rbp - 0x50], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r15, [0x140115950]
mov r8, r15
xor edx, edx
lea rcx, str.SerchPlayer
call fcn.140048240
mov qword [rbp - 0x50], r13
movss dword [rsp + 0x20], xmm7
lea r9, [rbp - 0x50]
call fcn.140037300
test al, al
je 0x1400039cc
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400030de
cmp byte [rbx + 0x237], r13b
je 0x1400030cc
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400030cc
cmp ecx, 0xffffffff
je 0x1400030c5
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400030d6
xorps xmm1, xmm1
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
lea rcx, str.Name
call fcn.14003f390
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003137
cmp byte [rbx + 0x237], r13b
je 0x140003125
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003125
cmp ecx, 0xffffffff
je 0x14000311e
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000312f
xorps xmm1, xmm1
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
lea rcx, str.Alive
call fcn.14003f390
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003190
cmp byte [rbx + 0x237], r13b
je 0x14000317e
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x14000317e
cmp ecx, 0xffffffff
je 0x140003177
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003188
xorps xmm1, xmm1
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
lea rcx, str.Vehicle
call fcn.14003f390
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400031e9
cmp byte [rbx + 0x237], r13b
je 0x1400031d7
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400031d7
cmp ecx, 0xffffffff
je 0x1400031d0
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400031e1
xorps xmm1, xmm1
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
lea rcx, str.Position
call fcn.14003f390
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003242
cmp byte [rbx + 0x237], r13b
je 0x140003230
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003230
cmp ecx, 0xffffffff
je 0x140003229
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000323a
xorps xmm1, xmm1
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
lea rcx, [0x140102020]
call fcn.14003f390
mov r12, qword [rsi + 0xf8]
mov qword [rbp - 0x40], r12
mov rdx, qword [rsi + 0x100]
mov qword [rbp - 0x50], rdx
cmp r12, rdx
je 0x1400039c7
movabs rsi, 0x8000000000000000
movabs r14, 0x7fffffffffffffff
mov rax, rdx
nop dword [rax]
nop dword [rax + rax]
mov rdx, qword [r12 + 0x10]
test rdx, rdx
je 0x1400034cd
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
add rdx, 0xfc
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x18]
mov rcx, qword [0x1401158d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r13
lea rax, [rbp + 0x18]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400032f0
cmp rbx, r14
ja 0x140004b38
mov qword [rbp - 0x18], 0xf
cmp rbx, 0x10
jae 0x14000332e
mov qword [rbp - 0x20], rbx
mov r8, rbx
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x30], 0
jmp 0x1400033ba
mov rdi, rbx
or rdi, 0xf
cmp rdi, r14
jbe 0x140003343
mov rdi, r14
lea rax, [rsi + 0x27]
jmp 0x14000336a
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140003389
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b3e
mov rcx, rax
call fcn.1400c1e90
test rax, rax
je 0x1400039b6
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000339b
test rcx, rcx
je 0x140003398
call fcn.1400c1e90
mov rsi, rax
jmp 0x14000339b
mov rsi, r13
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
mov r8, rbx
lea rdx, [rbp + 0x18]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], 0
mov r13, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x30]
lea rax, [0x14010202c]
cmp r15, rax
je 0x140003504
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [r15 + rdi], 0
jne 0x1400033e0
lea r14, [rbp - 0x30]
cmp r13, 0x10
setae byte [rbp - 0x48]
cmovae r14, rsi
mov rax, qword [rbp - 0x20]
cmp rdi, rax
ja 0x14000347b
test rdi, rdi
je 0x1400034fa
sub rax, rdi
lea r15, [rax + r14]
movsx r12d, byte [0x140115950]
lea r8, [r15 + 1]
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003477
nop word [rax + rax]
mov r8, rdi
lea rdx, [0x140115950]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400034ed
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003440
mov r12, qword [rbp - 0x40]
cmp byte [rbp - 0x48], 0
je 0x1400034b2
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400034aa
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039b6
mov rcx, rsi
call fcn.1400c1ecc
xor r13d, r13d
movabs r14, 0x7fffffffffffffff
movabs rsi, 0x8000000000000000
mov rax, qword [rbp - 0x50]
add r12, 0xf8
mov qword [rbp - 0x40], r12
cmp r12, rax
je 0x1400039bd
lea r15, [0x140115950]
jmp 0x140003290
sub rbx, r14
mov r12, qword [rbp - 0x40]
cmp rbx, 0xffffffffffffffff
je 0x14000347b
movabs r14, 0x7fffffffffffffff
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003559
cmp byte [rbx + 0x237], 0
je 0x14000353f
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x14000353f
cmp ecx, 0xffffffff
je 0x140003538
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003549
movaps xmm1, xmm7
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
mov rsi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x18]
lea rcx, [rbp - 0x30]
cmp r13, 0x10
cmovae rcx, rsi
call fcn.14003f390
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400035b7
cmp byte [rbx + 0x237], 0
je 0x1400035a5
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400035a5
cmp ecx, 0xffffffff
je 0x14000359e
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400035af
movaps xmm1, xmm7
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
movss xmm4, dword [r12 + 0x28]
lea rdi, [r12 + 0x30]
comiss xmm7, xmm4
jae 0x140003604
mov dword [rsp + 0x78], 0
movsd xmm3, qword [rdi]
movss xmm0, dword [rdi + 8]
movlhps xmm3, xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm7
xorps xmm2, xmm2
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x78]
movlhps xmm2, xmm0
cmpeqps xmm3, xmm2
movmskps eax, xmm3
and eax, 7
cmp al, 7
je 0x140003604
xor al, al
jmp 0x140003606
mov al, 1
lea rdx, [0x140102034]
test al, al
lea rsi, [0x140102030]
cmove rdx, rsi
comiss xmm7, xmm4
jae 0x14000366a
mov dword [rsp + 0x48], 0
movsd xmm3, qword [rdi]
movss xmm0, dword [rdi + 8]
movlhps xmm3, xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm7
xorps xmm2, xmm2
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x48]
movlhps xmm2, xmm0
cmpeqps xmm3, xmm2
movmskps eax, xmm3
and eax, 7
cmp al, 7
je 0x14000366a
movaps xmm0, xmmword [0x1401048a0]
movups xmmword [rsp + 0x7c], xmm0
lea rax, [rsp + 0x7c]
jmp 0x140003679
movaps xmm0, xmmword [0x140104890]
movups xmmword [rbp - 0x74], xmm0
lea rax, [rbp - 0x74]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.14003f400
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400036d6
cmp byte [rbx + 0x237], 0
je 0x1400036c4
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400036c4
cmp ecx, 0xffffffff
je 0x1400036bd
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400036ce
movaps xmm1, xmm7
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
mov rdx, qword [0x140115118]
add rdx, qword [r12]
mov byte [rbp - 0x48], 0
xor r13d, r13d
mov qword [rsp + 0x20], r13
lea r9d, [r13 + 1]
lea r8, [rbp - 0x48]
mov rcx, qword [0x1401158d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x48], 0x40
lea rbx, [0x140102034]
cmovne rbx, rsi
mov rdx, qword [0x140115118]
add rdx, qword [r12]
mov byte [rbp - 0x48], r13b
mov qword [rsp + 0x20], r13
lea r9d, [r13 + 1]
lea r8, [rbp - 0x48]
mov rcx, qword [0x1401158d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x48], 0x40
je 0x140003751
movaps xmm0, xmmword [0x1401048a0]
movups xmmword [rbp - 0x64], xmm0
lea rax, [rbp - 0x64]
jmp 0x140003762
movaps xmm0, xmmword [0x140104890]
movups xmmword [rsp + 0x50], xmm0
lea rax, [rsp + 0x50]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14003f400
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400037c2
cmp byte [rbx + 0x237], r13b
je 0x1400037b0
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400037b0
cmp ecx, 0xffffffff
je 0x1400037a9
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400037ba
movaps xmm1, xmm7
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
movss xmm3, dword [r12 + 0x38]
cvtps2pd xmm3, xmm3
movss xmm2, dword [r12 + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rdi]
cvtps2pd xmm1, xmm1
movq r9, xmm3
movq r8, xmm2
movq rdx, xmm1
lea rcx, str._.f___.f___.f
call fcn.14003f390
mov rax, qword [0x140115888]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003845
cmp byte [rbx + 0x237], r13b
je 0x140003833
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003833
cmp ecx, 0xffffffff
je 0x14000382c
mov rcx, rbx
call fcn.14003af70
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000383d
movaps xmm1, xmm7
call fcn.14003a330
xor edx, edx
mov rcx, rbx
call fcn.14003ada0
mov rsi, qword [rbp - 0x20]
mov rax, r14
sub rax, rsi
cmp rax, 0xa
jb 0x140004b4a
lea r15, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae r15, qword [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
lea r14, [rsi + 0xa]
mov ebx, 0xf
lea rdi, [rbp - 8]
cmp r14, rbx
jbe 0x140003909
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400038ad
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400038d4
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400038f3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b44
mov rcx, rax
call fcn.1400c1e90
test rax, rax
je 0x1400039af
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003905
test rcx, rcx
je 0x140003902
call fcn.1400c1e90
mov rdi, rax
jmp 0x140003905
mov rdi, r13
mov qword [rbp - 8], rdi
mov qword [rbp + 0x10], rbx
movsd xmm0, qword [str.Teleport]
movsd qword [rdi], xmm0
movzx eax, word [0x140102050]
mov word [rdi + 8], ax
lea rcx, [rdi + 0xa]
mov r8, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], r13b
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14000396f
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003969
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039af
call fcn.1400c1ecc
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400034b5
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039b6
call fcn.1400c1ecc
jmp 0x1400034b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rsi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
call fcn.140039990
lea r15, str._.1f
jmp 0x140004066
lea rcx, str.Visual
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003a2d
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003a1d
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003a5b
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x1401151b8]
lea rcx, [0x140101f84]
call fcn.140041500
lea rdx, [0x1401151b9]
lea rcx, str.NPC_ESP
call fcn.140041500
call fcn.1400425f0
mov r11, qword [0x140115888]
mov rax, qword [r11 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r11 + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003abb
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rcx, str.ESP_Options
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003b10
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003b00
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003b3e
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x1401151ba]
lea rcx, [0x140101f9c]
call fcn.140041500
lea rdx, [0x1401151bb]
lea rcx, str.BoxFilled
call fcn.140041500
lea rdx, [0x1401151bc]
lea rcx, str.Line
call fcn.140041500
lea rdx, [0x1401151bd]
lea rcx, str.Name
call fcn.140041500
lea rdx, [0x1401151be]
lea rcx, str.Skeleton
call fcn.140041500
lea rdx, [0x1401151bf]
lea rcx, str.Distance
call fcn.140041500
lea rdx, [0x1401151c0]
lea rcx, str.HealthBar
call fcn.140041500
jmp 0x140004066
lea rcx, str.Aimbot
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003c1d
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003c0d
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003c4b
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x140115198]
lea rcx, str.AimBot
call fcn.140041500
lea rdx, [0x14011519a]
lea rcx, str.Prediction
call fcn.140041500
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003ca6
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
call fcn.1400425f0
lea rcx, str.Aim_Options
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003d00
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003cf0
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003d2e
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x140115199]
lea rcx, str.Aim_at_NPC
call fcn.140041500
lea r9, str.Head
lea rdx, [0x1401151ac]
lea rcx, str.AimBone
call fcn.140043b80
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003d90
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
call fcn.1400425f0
lea rcx, [0x140101e24]
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003dea
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003dda
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003e18
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x14011519b]
lea rcx, str.DrawFOV
call fcn.140041500
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x42480000
lea rcx, [0x140101e24]
call fcn.14003f390
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x14011519c]
mov edx, 8
lea rcx, str.aim_fov
call fcn.140044ff0
lea rdx, [rsi + 0x170]
xor r8d, r8d
lea rcx, str.FOV_Color
call fcn.14004c1b0
jmp 0x140004066
lea rcx, str.Player
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003edf
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003ecf
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003f0d
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x1401151cc]
lea rcx, str.GodMode
call fcn.140041500
test al, al
je 0x140003f2b
mov byte [0x1401151cd], r13b
lea rdx, [0x1401151cd]
lea rcx, str.Heal_Me
call fcn.140041500
test al, al
je 0x140003f49
mov byte [0x1401151cc], r13b
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003f7e
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
call fcn.1400425f0
lea rcx, str.Weapon
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003fd8
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003fc8
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140004006
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rdx, [0x1401151ce]
lea rcx, str.NoRecoil
call fcn.140041500
lea rdx, [0x1401151cf]
lea rcx, str.NoSpread
call fcn.140041500
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140004061
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
call fcn.1400425f0
cmp dword [0x14011592c], 3
je 0x140004074
call fcn.140014040
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14001da80
cmp dword [0x14011592c], 3
je 0x140004149
mov rbx, qword [0x140115888]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], 0
jne 0x1400040b5
cmp qword [rbx + 0x4e40], 0
lea rcx, [rdx + 0x268]
je 0x1400040bc
lea rcx, [rdx + 0x238]
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
subss xmm1, dword [rdx + 0x11c]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.RightChild
call fcn.14000b190
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x14000412f
lea r8, str.RightChild
mov edx, 0xb
mov ecx, eax
call fcn.140025e50
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.RightChild
call fcn.140013cb0
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004182
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov ecx, dword [0x14011592c]
sub ecx, 1
je 0x1400045ea
sub ecx, 1
je 0x1400042e5
cmp ecx, 2
jne 0x140004291
lea rcx, str.Exit
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400041f9
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400041e9
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004232
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
mov rax, rdx
cmp qword [rdx + 0x1c0], 0
jne 0x140004258
cmp qword [rcx + 0x4e40], 0
jne 0x140004258
add rax, 0x268
jmp 0x14000425e
add rax, 0x238
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm0
mov dword [rbp - 0x4c], 0x41f00000
lea rdx, [rbp - 0x50]
lea rcx, str.Exit
call fcn.140040110
test al, al
je 0x140004291
mov byte [0x140115170], 0
cmp dword [0x14011592c], 3
je 0x14000429f
call fcn.140014040
call fcn.140014040
call fcn.140019620
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400c1e70
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.ESP_Setting
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x14000433b
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x14000432b
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000436d
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov dword [rbp - 0x50], 0x44fa0000
mov dword [rbp - 0x40], 0x42c80000
lea rcx, str.Distance
call fcn.14003f390
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x1401151c8]
mov edx, 8
lea rcx, str.Dist
call fcn.140044ff0
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400043f1
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004423
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea r9, str.Simple
lea rdx, [0x1401151c4]
lea rcx, str.BoxType
call fcn.140043b80
call fcn.1400425f0
mov r11, qword [0x140115888]
mov rax, qword [r11 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r11 + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000447b
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rcx, str.ESP_Colors
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400044d1
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400044c1
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004503
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rcx, str.Main_Color
call fcn.14003f4f0
lea rdx, [rsi + 0x120]
xor r8d, r8d
lea rcx, [0x14010219c]
call fcn.14004c1b0
lea rdx, [rsi + 0x130]
xor r8d, r8d
lea rcx, str.Player
call fcn.14004c1b0
lea rdx, [rsi + 0x140]
xor r8d, r8d
lea rcx, str.GodMode
call fcn.14004c1b0
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004591
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400045c3
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rcx, str.Sub_Color
call fcn.14003f4f0
lea rdx, [rsi + 0x160]
xor r8d, r8d
lea rcx, str.BoxFilled
call fcn.14004c1b0
jmp 0x140004291
lea rcx, str.Setting
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004640
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x140004630
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004672
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov dword [r14 + 0x3938], 0x40400000
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x42480000
lea rcx, [0x140101e24]
call fcn.14003f390
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x14011519c]
mov edx, 8
lea rcx, str.aim_fov
call fcn.140044ff0
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x40], 0x3f800000
lea rcx, str.Smooth
call fcn.14003f390
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x1401151a0]
mov edx, 8
lea rcx, str.aim_smt
call fcn.140044ff0
mov dword [rbp - 0x50], 0x43960000
mov dword [rbp - 0x40], 0x42480000
lea rcx, str.Distance
call fcn.14003f390
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x1401151a4]
mov edx, 8
lea rcx, str.aim_dist
call fcn.140044ff0
mov dword [rbp - 0x50], 0x453b8000
mov dword [rbp - 0x40], 0x447a0000
lea rcx, str.Predict
call fcn.14003f390
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x1401151a8]
mov edx, 8
lea rcx, str.aim_preditc
call fcn.140044ff0
movss xmm0, dword [0x140115990]
movss dword [r14 + 0x3938], xmm0
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400047de
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004810
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea r9, [0x140115090]
lea rdx, [0x1401151b0]
lea rcx, str.AimType
call fcn.140043b80
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004863
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
call fcn.1400425f0
lea rcx, str.KeyBind
call fcn.14003f390
mov rcx, qword [0x140115888]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400048be
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400048ae
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042690
mov rcx, qword [0x140115888]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400048f0
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rcx, str.1st_Key:
call fcn.14003f390
mov dword [rbp - 0x50], 0x43570000
mov dword [rbp - 0x4c], 0x41b40000
lea rdi, [0x140101a20]
lea rbx, str.__Press_Any_Key__
cmp dword [0x140115928], 1
jne 0x140004926
mov rcx, rbx
jmp 0x140004931
movsxd rax, dword [0x1401151e0]
mov rcx, qword [rdi + rax*8]
lea rdx, [rbp - 0x50]
call fcn.140040110
test al, al
je 0x1400049b9
mov dword [0x140115928], 1
mov ecx, 1
call fcn.1400c1e90
mov qword [rbp - 0x10], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140004e10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004b0a
cmp dword [rsp + 0x48], 0
je 0x140004afe
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140004afe
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x140104608]
call fcn.14001db30
lea r9, [0x140115050]
lea rdx, [0x1401151b4]
lea rcx, str.KeyMode
call fcn.140043b80
mov r9, qword [0x140115888]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004a51
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d910
lea rcx, str.2nd_Key:
call fcn.14003f390
mov dword [rbp - 0x50], 0x43570000
mov dword [rbp - 0x4c], 0x41b40000
cmp dword [0x140115928], 2
je 0x140004a7f
movsxd rax, dword [0x1401151e4]
mov rbx, qword [rdi + rax*8]
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.140040110
test al, al
je 0x140004291
mov dword [0x140115928], 2
mov ecx, 1
call fcn.1400c1e90
mov qword [rbp - 0x10], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140004ec0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004b27
cmp dword [rsp + 0x48], 0
je 0x140004b1b
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140004b1b
jmp 0x140004291
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140002970
int3
call fcn.140001510
nop
call fcn.140001510
int3
call fcn.140002970
int3