Function at 0x1800043d0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x180016378]
xor rax, rsp
mov qword [rbp + 0x78], rax
movabs rsi, 0x1423fe210
mov r13, qword [rsi]
mov rax, qword [r13 + 0xd0]
mov rcx, qword [rax + 0x48]
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov rax, qword [rcx]
mov r8, qword [rax + 0x470]
lea rdx, [rbp - 0x80]
call r8
mov rdi, qword [rbp - 0x80]
test al, al
cmove rdi, rbx
mov qword [rbp - 0x80], rdi
test rdi, rdi
je 0x180005333
mov rax, qword [rdi]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, rdi
call r8
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180005333
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x280]
mov rcx, rax
call rdx
mov r15, rax
test rax, rax
je 0x180005333
mov r12, qword [rax + 8]
test r12, r12
je 0x180005333
mov rax, qword [rdi + 0xd80]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180005333
mov r14, qword [r12 + 0xc8]
test r14, r14
je 0x180005333
mov rax, qword [rsi]
mov rcx, qword [rax + 0xd0]
mov rax, qword [rcx + 0x138]
mov qword [rbp - 0x78], rax
cmp qword [rdi + 0x18], rbx
je 0x180005333
cmp qword [r12 + 0xb0], rbx
je 0x180005333
mov rsi, qword [r13 + 0x40]
test rsi, rsi
je 0x180005333
mov r13, qword [r13 + 0x100]
test r13, r13
je 0x180005333
cmp dword [0x180016320], ebx
je 0x180004525
mov rcx, qword [r12 + 0x48]
mov eax, dword [0x180016324]
mov dword [rcx + 0x10], eax
cmp dword [0x180016300], ebx
je 0x1800045f9
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004563
mov rax, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x2a8
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_objects_helpers_special_moves_vault_50_20cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rsi
call qword [rax + 0x30]
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004595
mov rax, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x2a9
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_Objects_helpers_special_moves_vault_400_20cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rsi
call qword [rax + 0x30]
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800045c7
mov rax, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x2aa
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_Objects_helpers_special_moves_climb_380_200cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rsi
call qword [rax + 0x30]
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800045f9
mov rax, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x2aa
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_Objects_helpers_special_moves_climb_200_100cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rsi
call qword [rax + 0x30]
movss xmm8, dword [0x180013ff8]
cmp dword [0x1800162fc], ebx
je 0x180004637
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004637
mov rax, qword [r15]
mov rdx, qword [rax + 0x58]
mov rcx, r15
call rdx
movaps xmm2, xmm8
mov edx, 0x52
mov rcx, r14
call fcn.18000df30
xorps xmm6, xmm6
cmp dword [0x180016200], ebx
je 0x1800047b2
mov qword [rbp + 0x70], 0xf
mov qword [rbp + 0x68], 0xe
movsd xmm0, qword [str.Flashbang_Time]
movsd qword [rbp + 0x58], xmm0
mov eax, dword [0x180013a08]
mov dword [rbp + 0x60], eax
movzx eax, word [0x180013a0c]
mov word [rbp + 0x64], ax
mov byte [rbp + 0x66], bl
xor r9d, r9d
xorps xmm2, xmm2
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.18000de90
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov r8d, 0x1a
lea rdx, str.Flashbang_DifractionAmount
lea rcx, [rbp + 0x58]
call fcn.18000f270
xor r9d, r9d
xorps xmm2, xmm2
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.18000de90
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov r8d, 0x10
lea rdx, str.Flashbang_Active
lea rcx, [rbp + 0x58]
call fcn.18000f270
xor r9d, r9d
xorps xmm2, xmm2
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.18000de90
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov r8d, 0x1b
lea rdx, str.FilterRadialBlurring_Radius
lea rcx, [rbp + 0x58]
call fcn.18000f270
xor r9d, r9d
xorps xmm2, xmm2
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.18000de90
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov r8d, 0x1b
lea rdx, str.FilterRadialBlurring_Amount
lea rcx, [rbp + 0x58]
call fcn.18000f270
xor r9d, r9d
xorps xmm2, xmm2
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.18000de90
mov qword [rbp + 0x70], 0xf
mov qword [rbp + 0x68], 0xe
movsd xmm0, qword [str.Flashbang_Time]
movsd qword [rbp + 0x58], xmm0
mov eax, dword [0x180013a08]
mov dword [rbp + 0x60], eax
movzx eax, word [0x180013a0c]
mov word [rbp + 0x64], ax
mov byte [rbp + 0x66], bl
xor r9d, r9d
xorps xmm2, xmm2
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.18000de90
cmp dword [0x180016240], ebx
je 0x1800047ec
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800047ec
mov rax, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x3a
lea rdx, str.g_localActor.actor:SetInteractionAction__plant___6.0__0__
mov rcx, rsi
call qword [rax + 0x30]
cmp dword [0x1800162c0], ebx
je 0x180004826
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004826
mov rax, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x2aa
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_Objects_helpers_special_moves_climb_380_200cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rsi
call qword [rax + 0x30]
mov rax, qword [rsi]
mov r10, qword [rax + 0x30]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8d, 0x20
mov rcx, rsi
cmp dword [0x1800162e0], ebx
lea rdx, str.g_localActor:SetColliderMode_1__
jne 0x180004858
lea rdx, str.g_localActor:SetColliderMode_0__
call r10
cmp dword [0x18001628c], ebx
je 0x18000487c
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x180016290], ebx
je 0x180004899
movss xmm2, dword [0x180013f80]
mov edx, 0x6e
mov rcx, r14
call fcn.18000df30
cmp dword [0x180016110], ebx
je 0x180004a1a
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004a1a
mov ecx, 0x190
call fcn.18000fdc0
mov r9, rax
mov qword [rbp + 0x68], 0x181
mov qword [rbp + 0x70], 0x18f
mov rcx, rax
lea rdx, str.local_Entities__System.GetEntities____for_key__Entity_in_pairs_Entities__do_if_Entity.actor_then_if__Entity__g_localActor__or__Entity.actor:GetHealth_____0__or__g_gameRules.game:GetTeam_g_localActor.id___0_or_g_gameRules.game:GetTeam_Entity.id___g_gameRules.game:GetTeam_g_localActor.id___then_else_FeedbackSystem.AddMarker__hunt_enemy_global_spotting___Entity.id___end_end_end
mov r8d, 3
nop word [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub r8, 1
jne 0x1800048f0
movzx eax, byte [rdx]
mov byte [rcx], al
mov byte [r9 + 0x181], bl
mov qword [rbp + 0x58], r9
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x20]
call fcn.1800016a0
mov r15, rax
mov qword [rsp + 0x60], rax
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x180004974
mov rdx, qword [rax]
mov r10, qword [rsi]
mov qword [rsp + 0x20], rbx
lea r9, [0x180012310]
mov r8, qword [rax + 0x10]
mov rcx, rsi
call qword [r10 + 0x30]
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x1800049c5
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x1800049c0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180004a0e
mov rcx, r8
call fcn.18000fdfc
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x180004a1a
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004a15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004a15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18000fdfc
movss xmm7, dword [0x180013f2c]
cmp dword [0x180016318], 0
je 0x180004a32
mov eax, 0x52
jmp 0x180004a3b
mov eax, 1
movaps xmm8, xmm7
movaps xmm2, xmm8
mov edx, eax
mov rcx, r14
call fcn.18000df30
cmp dword [0x1800162d8], 0
je 0x180004a7a
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0xc0]
movd xmm1, dword [0x18001631c]
cvtdq2ps xmm1, xmm1
mov rax, qword [rcx]
mov rdx, qword [rax + 0x50]
call rdx
mov rax, qword [rdi + 0xd80]
cmp dword [0x1800162c8], 0
je 0x180004a94
movss xmm0, dword [0x180013f68]
jmp 0x180004a97
movaps xmm0, xmm6
movss dword [rax], xmm0
mov eax, ebx
cmp dword [0x180016278], ebx
sete al
mov r15, qword [rbp - 0x78]
mov dword [r15 + 0xf0], eax
cmp dword [0x1800160b0], 0
je 0x180004ac3
mov byte [r12 + 0xd4], 0
cmp dword [0x1800160fc], 0
je 0x180004b1e
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
lea rdx, str.ar34_mars
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180004b13
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
lea rdx, [0x180012324]
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180004b1e
mov dword [r15 + 0x140], 1
cmp dword [0x1800161fc], 0
je 0x180004b3d
mov dword [r15 + 0x848], 0x4e6e6b28
mov dword [r15 + 0x84c], 0x4e6e6b28
cmp dword [0x180016224], 0
je 0x180004b51
mov dword [r15 + 0x4c0], 0x51ba43b7
cmp dword [0x1800160c8], 0
je 0x180004b7a
movaps xmm2, xmm6
mov edx, 0x4a
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x4b
mov rcx, r14
call fcn.18000df30
cmp dword [0x180016208], 0
je 0x180004b98
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx]
mov r8, qword [rax + 0x58]
lea rdx, str.SHARMHOOK_FREE_v0.1
call r8
cmp dword [0x1800160a8], 0
je 0x180004bba
mov rax, qword [rsp + 0x48]
mov byte [rax + 0xb4], 0
mov qword [rax + 0xb8], rbx
mov dword [rax + 0xc0], ebx
cmp dword [0x1800162a8], 0
je 0x180004bc9
mov dword [rdi + 0x1008], ebx
cmp dword [0x180016074], 0
je 0x18000514f
movabs r15, 0x1423fe210
mov rax, qword [r15]
mov r13, qword [rax + 0x70]
test rax, rax
je 0x180005333
mov rcx, qword [rax + 0xe0]
mov rdx, qword [rax + 0xc0]
mov qword [rsp + 0x50], rdx
mov r8, qword [rax + 0x48]
mov qword [rsp + 0x60], r8
mov rax, qword [rcx]
mov rdx, qword [rax + 0xa8]
call rdx
mov rsi, rax
test rax, rax
je 0x180005333
mov rcx, qword [r15]
mov rdx, qword [rcx + 0xd0]
mov r15, qword [rdx + 0x48]
mov rdx, qword [r15]
mov r8, qword [rdx + 0x448]
mov rcx, r15
call r8
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180005333
mov rcx, r15
call fcn.180005690
mov r15, rax
test rax, rax
je 0x180005333
mov rcx, qword [rax]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, rax
call r8
test rax, rax
je 0x180005333
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x280]
mov rcx, rax
call rdx
test rax, rax
je 0x180005333
mov rax, qword [rax + 8]
test rax, rax
je 0x180005333
mov r12, qword [rax + 0xd0]
test r12, r12
je 0x180005333
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov r8, qword [rax + 0x38]
xor edx, edx
call r8
movss xmm1, dword [0x18001647c]
addss xmm1, xmm0
movss dword [0x18001647c], xmm1
movss xmm0, dword [0x180013f24]
movss dword [0x180016478], xmm0
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov r8, qword [rax + 0x3a8]
lea rdx, str.mat_head
call r8
mov rcx, qword [0x180016470]
call fcn.18000f500
mov rax, qword [rsp + 0x60]
movsd xmm1, qword [rax + 0x17c0]
mov eax, dword [rax + 0x17c8]
mov dword [rsp + 0x68], eax
movss dword [0x1800164b0], xmm1
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rsp + 0x60], xmm1
movss dword [0x1800164b4], xmm0
movss xmm0, dword [rsp + 0x68]
movss dword [0x1800164b8], xmm0
movzx eax, byte [r15 + 0xce4]
mov byte [0x1800164cc], al
mov dword [0x180016508], 1
mov qword [0x180016510], 0
mov dword [0x180016518], 0x3f800000
mov qword [0x1800164c0], 0
mov dword [0x1800164c8], 0x3f800000
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], rbx
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 8]
mov dword [rsp + 0x48], 1
lea rax, [rsp + 0x48]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.180001860
nop
mov eax, dword [0x180016354]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.180001860
nop
mov r15d, dword [0x180016120]
mov rcx, qword [0x180016488]
test rcx, rcx
je 0x180004e3d
cmp qword [0x180016498], 0
je 0x180004e3d
mov rax, qword [0x180016490]
mov qword [rcx], rax
mov rcx, qword [0x180016498]
call fcn.18000fdfc
mov qword [0x180016490], rbx
mov qword [0x180016488], r13
mov rax, qword [r13]
mov qword [0x180016490], rax
cmp qword [rax], 0
je 0x180004e87
mov rcx, rbx
nop
mov rcx, qword [rax + rcx]
call qword [sym.imp.KERNEL32.dll_IsBadCodePtr]
test eax, eax
jne 0x180004e87
inc rbx
lea rcx, [rbx*8]
mov rax, qword [0x180016490]
cmp qword [rax + rcx], 0
jne 0x180004e60
mov eax, 8
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.18000fe04
mov qword [0x180016498], rax
lea r8, [rbx*8]
mov rdx, qword [0x180016490]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [0x180016488]
mov rax, qword [0x180016498]
mov qword [rcx], rax
mov rax, qword [0x180016490]
mov rcx, qword [rax + 0x118]
mov rax, qword [0x180016498]
cmp r15d, 1
jne 0x180004efa
mov qword [0x180016480], rcx
lea rcx, [0x18000de70]
mov qword [rax + 0x118], rcx
mov rax, qword [rsi]
mov rdx, qword [rax + 0x30]
mov rcx, rsi
call rdx
mov rbx, rax
test rax, rax
je 0x1800050b7
nop dword [rax]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x178]
mov rcx, rbx
call rdx
test al, al
jne 0x18000509f
mov rax, qword [rbx]
mov rdx, qword [rax + 0x60]
mov rcx, rbx
call rdx
mov rax, qword [rbx]
mov rdx, qword [rax + 0x18]
mov rcx, rbx
call rdx
test rax, rax
je 0x18000509f
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov rax, qword [rbx]
mov r8, qword [rax + 0xc8]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call r8
cmp dword [0x180016268], 0
je 0x180004fdb
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004fdb
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x64], 0x4428ba96
mov dword [rbp - 0x54], 0x44309b41
mov dword [rbp - 0x44], 0x423b8000
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rax + 0x60], xmm0
cmp dword [0x180016270], 0
je 0x18000503d
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000503d
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x34], 0x4455fe95
mov dword [rbp - 0x24], 0x44a85ac4
mov dword [rbp - 0x14], 0x4296e906
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rax + 0x60], xmm0
cmp dword [0x180016274], 0
je 0x18000509f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000509f
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rbp + 0x10], xmm0
mov dword [rbp - 4], 0x44e234c4
mov dword [rbp + 0xc], 0x43d42186
mov dword [rbp + 0x1c], 0x42bf0528
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rbp + 0x10]
movups xmmword [rax + 0x60], xmm0
mov rax, qword [rsi]
mov rdx, qword [rax + 0x30]
mov rcx, rsi
call rdx
mov rbx, rax
test rax, rax
jne 0x180004f20
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x180005101
mov rax, qword [rbp + 0x50]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800050fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800050fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000fdfc
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x18000514b
mov rax, qword [rbp + 0x30]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005145
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180005145
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000fdfc
nop
mov r15, qword [rbp - 0x78]
cmp dword [0x1800160b8], 0
je 0x180005178
movaps xmm2, xmm6
mov edx, 0x61
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x61
mov rcx, r14
call fcn.18000df30
cmp dword [0x1800160d4], 0
je 0x180005191
movaps xmm2, xmm6
mov edx, 0x6e
mov rcx, r14
call fcn.18000df30
cmp dword [0x1800160b4], 0
je 0x1800051fa
movaps xmm2, xmm6
mov edx, 0x3a
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x3b
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x3f
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x55
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x56
mov rcx, r14
call fcn.18000df30
movaps xmm2, xmm6
mov edx, 0x57
mov rcx, r14
call fcn.18000df30
cmp dword [0x1800160d0], 0
je 0x180005213
movaps xmm2, xmm6
mov edx, 0x1f
mov rcx, r14
call fcn.18000df30
cmp dword [0x180016220], 0
je 0x180005239
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
setne dl
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0xd18]
cmp dword [0x180016218], 0
je 0x180005252
movaps xmm2, xmm6
mov edx, 0x68
mov rcx, r14
call fcn.18000df30
cmp dword [0x180016210], 0
je 0x1800052a8
mov ecx, 0x54
call qword [sym.imp.USER32.dll_GetKeyState]
mov dword [rsp + 0x38], 0x3f800000
mov dword [rsp + 0x3c], 0x3f800000
xor r8d, r8d
lea rdx, [rsp + 0x38]
test ax, ax
je 0x180005293
movss xmm0, dword [0x180013f5c]
movss dword [rsp + 0x40], xmm0
jmp 0x18000529b
mov dword [rsp + 0x40], 0x3f800000
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
cmp dword [0x18001620c], 0
je 0x1800052ec
cmp dword [0x180016214], 0
je 0x180005319
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x1800052d2
movss xmm7, dword [0x180014000]
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x3c], xmm7
movss dword [rsp + 0x40], xmm7
mov r8d, 1
jmp 0x180005307
mov dword [rsp + 0x38], 0x3f800000
mov dword [rsp + 0x3c], 0x3f800000
mov dword [rsp + 0x40], 0x3f800000
xor r8d, r8d
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
call qword [rax + pe_nt_image_headers64]
cmp dword [0x18001621c], 0
je 0x180005333
movd xmm0, dword [0x18001630c]
cvtdq2ps xmm0, xmm0
movss dword [r15 + 4], xmm0
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.1800102a0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret