Function at 0x180004820
Capabilities:
Enumerate processes
Get graphical window text
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x1c0
mov rax, qword [0x18008e070]
xor rax, rsp
mov qword [rsp + 0x198], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000485b
cmp byte [0x18008ec85], 0
sete byte [0x18008ec85]
mov qword [rsp + 0x1e0], rbx
mov ecx, 0x2e
mov qword [rsp + 0x1e8], rdi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ebp, ebp
bt ax, 0xf
lea r14d, [rbp + 1]
jae 0x180004927
xor edx, edx
mov dword [rsp + 0x50], 0x130
lea ecx, [rbp + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rsp + 0x50]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x180004913
lea rdi, str.dwm.exe
nop word [rax + rax]
mov rcx, rbp
lea rdx, [rsp + 0x7c]
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rdi + rcx - 1]
jne 0x1800049e0
cmp rcx, 8
jne 0x1800048d0
mov r8d, dword [rsp + 0x58]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x180004913
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180004a72
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x100
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
je 0x180004a67
lea rdx, str.STALCRAFT
lea rcx, [rsp + 0x50]
call fcn.18006c8c0
test eax, eax
jne 0x180004a67
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsZoomed]
mov rcx, rdi
test eax, eax
je 0x1800049fb
mov edx, 9
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0xfffffff0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xfffffff0
mov rcx, rdi
or eax, 0xc80000
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 0x27
xor r9d, r9d
mov dword [rsp + 0x28], ebp
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], ebp
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x180004a67
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1800048c0
jmp 0x180004913
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xfffffff0
mov rcx, rdi
and eax, 0xff37ffff
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, r14d
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x30], 0x27
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], ebx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 3
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18008ec85], r14b
jne 0x180006353
mov qword [rsp + 0x1f0], r12
mov ecx, 0x21
mov qword [rsp + 0x1b8], r13
mov qword [rsp + 0x1b0], r15
movaps xmmword [rsp + 0x1a0], xmm6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm6, dword [0x18008309c]
test r14b, al
je 0x180004ae3
movss xmm0, dword [0x18008ec80]
addss xmm0, xmm6
comiss xmm0, dword [0x1800830f0]
movss dword [0x18008ec80], xmm0
jbe 0x180004ade
mov dword [0x18008ec80], 0x3f666666
call fcn.180002d80
mov ecx, 0x22
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x180004b1f
movss xmm0, dword [0x18008ec80]
addss xmm0, dword [0x1800831c0]
comiss xmm6, xmm0
movss dword [0x18008ec80], xmm0
jbe 0x180004b1a
mov dword [0x18008ec80], 0x3d4ccccd
call fcn.180002d80
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
lea rbp, str.ESP_Box
lea r13, str.Tracers
lea r12, str.Distance
lea rbx, str.Draw_fov
lea rdi, [0x18007e0f4]
lea r14, str.NpcEsp
lea r15, str.Fill_Box
jae 0x180004db2
mov rcx, qword [0x18008ec90]
cmp rcx, rbp
jne 0x180004b8c
cmp byte [0x180090e24], 0
sete byte [0x180090e24]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, str.Barter_ESP
cmp rcx, rax
jne 0x180004bb2
cmp byte [0x180090e22], 0
sete byte [0x180090e22]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, [0x18007dbd4]
cmp rcx, rax
jne 0x180004bd8
cmp byte [0x180090e28], 0
sete byte [0x180090e28]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, str.Bags__Backpacks_
cmp rcx, rax
jne 0x180004bfe
cmp byte [0x180090e29], 0
sete byte [0x180090e29]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
cmp rcx, r13
jne 0x180004c1d
cmp byte [0x180090e23], 0
sete byte [0x180090e23]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
cmp rcx, r12
jne 0x180004c3c
cmp byte [0x180090e40], 0
sete byte [0x180090e40]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
cmp rcx, rbx
jne 0x180004c5b
cmp byte [0x180090e2a], 0
sete byte [0x180090e2a]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
cmp rcx, rdi
jne 0x180004c7a
cmp byte [0x180090e25], 0
sete byte [0x180090e25]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
cmp rcx, r14
jne 0x180004c99
cmp byte [0x180090e2c], 0
sete byte [0x180090e2c]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, str.Item_ESP
cmp rcx, rax
jne 0x180004cbf
cmp byte [0x180090e26], 0
sete byte [0x180090e26]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, str.Mob_ESP
cmp rcx, rax
jne 0x180004ce5
cmp byte [0x180090e21], 0
sete byte [0x180090e21]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
movzx eax, byte [0x180090e20]
lea rdx, str.Bind
cmp rcx, rdx
mov edx, 1
cmove eax, edx
mov byte [0x180090e20], al
lea rax, str.Predict
cmp rcx, rax
jne 0x180004d2a
cmp byte [0x180090e2e], 0
sete byte [0x180090e2e]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
cmp rcx, r15
jne 0x180004d49
cmp byte [0x180090e2f], 0
sete byte [0x180090e2f]
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, str.Head
cmp rcx, rax
jne 0x180004d78
cmp byte [0x18008ec84], 0
jne 0x180004d78
mov byte [0x180090e2b], 0
mov byte [0x18008ec84], 1
call fcn.180002d80
mov rcx, qword [0x18008ec90]
lea rax, str.Body
cmp rcx, rax
jne 0x180004da0
cmp byte [0x180090e2b], 0
jne 0x180004da0
mov byte [0x180090e2b], 1
mov byte [0x18008ec84], 0
call fcn.180002d80
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180004da0
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180004ed3
mov rcx, qword [0x18008ec90]
movzx edx, byte [0x180090e28]
cmp rcx, r14
jne 0x180004dfc
test dl, dl
mov rax, rdi
cmove rax, rcx
mov rcx, rax
cmp rax, r14
jne 0x180004dfc
test dl, dl
lea rax, [0x18007dbd4]
cmovne rax, rcx
mov rcx, rax
cmp rcx, rbp
lea r8, str.Barter_ESP
lea r9, str.Item_ESP
lea rax, [0x18007dbd4]
cmovne rax, rcx
mov rcx, r9
cmp rax, r8
lea r8, str.Bags__Backpacks_
cmovne rcx, rax
mov rax, rbp
cmp rcx, r13
cmovne rax, rcx
mov rcx, r13
cmp rax, r8
cmovne rcx, rax
mov rax, r8
lea r8, str.Mob_ESP
cmp rcx, r8
cmovne rax, rcx
mov rcx, r8
cmp rax, r9
lea r8, str.Body
cmovne rcx, rax
lea rax, str.Head
cmp rcx, r8
cmovne rax, rcx
mov qword [0x18008ec90], rax
cmp rax, r15
jne 0x180004e90
test dl, dl
lea rcx, [0x18007dbd4]
mov rax, rbx
cmove rax, rcx
mov qword [0x18008ec90], rax
cmp rax, r12
jne 0x180004ec1
movzx ecx, byte [0x180090e24]
mov rax, r15
test cl, cl
cmove rax, rbp
mov qword [0x18008ec90], rax
cmp rax, r12
jne 0x180004ec1
test cl, cl
mov rax, r15
cmove rax, rbp
mov qword [0x18008ec90], rax
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180004ec1
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180005032
mov rcx, qword [0x18008ec90]
movzx r8d, byte [0x180090e24]
cmp rcx, rdi
jne 0x180004f0a
test r8b, r8b
mov rax, r14
cmove rax, rcx
mov rcx, rax
lea rdx, str.Head
cmp rcx, rdx
lea r9, str.Bags__Backpacks_
lea rdx, str.Mob_ESP
lea rax, str.Body
cmovne rax, rcx
lea rcx, str.Item_ESP
cmp rax, rdx
cmovne rcx, rax
mov rax, rdx
cmp rcx, r9
mov rdx, r13
cmovne rax, rcx
mov rcx, r9
cmp rax, r13
cmovne rcx, rax
cmp rcx, rbp
cmovne rdx, rcx
cmp rdx, rdi
jne 0x180004f6b
test r8b, r8b
mov rax, rbp
cmovne rax, rdx
mov rdx, rax
lea rcx, [0x18007dbd4]
mov rax, rbp
cmp rdx, rcx
mov rcx, r9
cmovne rax, rdx
mov rdx, r12
cmp rax, r12
cmovne rcx, rax
cmp rcx, r15
cmovne rdx, rcx
lea rcx, str.Bind
mov qword [0x18008ec90], rdx
cmp rdx, rcx
jne 0x180004fd0
test r8b, r8b
mov rax, r14
cmove rax, rdx
mov qword [0x18008ec90], rax
mov rdx, rax
cmp rax, rcx
jne 0x180004fd0
test r8b, r8b
mov rax, rbp
cmovne rax, rdx
mov rdx, rax
mov qword [0x18008ec90], rax
cmp rdx, rbx
jne 0x180004fe6
test r8b, r8b
mov rdx, r15
cmove rdx, rbp
mov qword [0x18008ec90], rdx
lea rax, str.Predict
cmp rdx, rax
jne 0x180005003
test r8b, r8b
mov rdx, r14
cmove rdx, rbp
mov qword [0x18008ec90], rdx
cmp rdx, rdi
jne 0x180005020
test r8b, r8b
mov rax, r14
cmove rax, rdx
mov qword [0x18008ec90], rax
nop dword [rax]
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005020
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180005112
cmp qword [0x18008ec90], rbx
lea rdx, str.Barter_ESP
lea rcx, [0x18007dbd4]
cmovne rcx, qword [0x18008ec90]
lea rax, str.Item_ESP
cmp rcx, rdx
lea rdx, str.Body
cmovne rax, rcx
mov rcx, r13
cmp rax, r12
cmovne rcx, rax
mov rax, r12
cmp rcx, rdx
lea rdx, str.Predict
cmovne rax, rcx
mov rcx, rbx
cmp rax, rdi
cmovne rcx, rax
mov rax, rdi
cmp rcx, rdx
cmovne rax, rcx
mov rcx, rdx
lea rdx, str.Bind
cmp rax, rdx
mov rdx, rbp
cmovne rcx, rax
mov rax, r15
cmp rcx, r15
cmovne rdx, rcx
lea rcx, str.Head
cmp rdx, r14
cmovne rax, rdx
mov qword [0x18008ec90], rax
cmp rax, rcx
jne 0x180005100
cmp byte [0x180090e24], 0
mov rax, r14
cmove rax, rbp
mov qword [0x18008ec90], rax
nop word [rax + rax]
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005100
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180005232
mov rcx, qword [0x18008ec90]
lea rdx, str.Predict
movzx r8d, byte [0x180090e28]
cmp rcx, rdx
jne 0x180005154
test r8b, r8b
lea rax, str.Bind
cmove rax, rcx
mov rcx, rax
movzx r9d, byte [0x180090e24]
lea r10, str.Head
cmp rcx, rdi
mov rax, rdx
lea rdx, str.Item_ESP
cmovne rax, rcx
lea rcx, str.Barter_ESP
cmp rax, rdx
mov rdx, r10
cmovne rcx, rax
cmp rcx, r14
cmovne rdx, rcx
cmp rdx, rbp
jne 0x18000519e
test r9b, r9b
mov rax, r10
cmovne rax, rdx
mov rdx, rax
cmp rdx, r15
mov rax, r14
mov rcx, rdi
cmovne rax, rdx
cmp rax, rbx
cmovne rcx, rax
lea rax, [0x18007dbd4]
cmp rcx, rax
jne 0x1800051cb
test r8b, r8b
mov rax, rbx
cmove rax, rcx
mov rcx, rax
cmp rcx, r12
jne 0x1800051e1
test r8b, r8b
lea rax, str.Body
cmove rax, rcx
mov rcx, rax
cmp rcx, r13
mov rdx, r12
cmovne rdx, rcx
mov qword [0x18008ec90], rdx
test r9b, r9b
je 0x180005220
cmp rdx, r15
jne 0x180005209
test r8b, r8b
mov rax, r10
cmove rax, rdx
mov rdx, rax
cmp rdx, rbp
mov rax, r15
cmovne rax, rdx
mov qword [0x18008ec90], rax
nop word [rax + rax]
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005220
mov rax, qword [0x180090e50]
mov ecx, 1
movaps xmm0, xmmword [0x180083680]
movaps xmm1, xmmword [0x180083610]
or dword [rax + 0x1cf0], 2
mov dword [rax + 0x1d10], 0x43ff0000
mov dword [rax + 0x1d14], 0x43700000
mov dword [rax + 0x1cf8], ecx
mov dword [rax + 0x1568], 0x40800000
mov dword [rax + 0x1584], 0x40800000
mov dword [rax + 0x158c], 0x40800000
mov dword [rax + 0x159c], 0x40800000
mov dword [rax + 0x15d0], 0x40800000
mov dword [rax + 0x15d8], 0x40800000
mov dword [rax + 0x15e0], 0x40800000
mov dword [rax + 0x1578], 0x3f000000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1560], 0x41200000
mov dword [rax + 0x1564], 0x41200000
mov dword [rax + 0x1594], 0x40c00000
mov dword [rax + 0x1598], 0x40c00000
mov dword [rax + 0x15a4], 0x41000000
mov dword [rax + 0x15a8], 0x40800000
mov dword [rax + 0x15ac], 0x40800000
mov dword [rax + 0x15b0], 0x40800000
mov dword [rax + 0x15c4], 0x41a00000
mov dword [rax + 0x15cc], 0x41400000
mov dword [rax + 0x156c], 0x3f800000
mov dword [rax + 0x1588], 0x3f800000
mov dword [rax + 0x1590], 0x3f800000
mov dword [rax + 0x15a0], 0x3f800000
mov dword [rax + 0x15f8], 0x3f000000
mov dword [rax + 0x15fc], 0x3f000000
movups xmmword [rax + 0x1620], xmm0
movaps xmm0, xmmword [0x180083560]
movups xmmword [rax + 0x1640], xmm0
movaps xmm0, xmmword [0x1800834e0]
movups xmmword [rax + 0x1630], xmm1
xorps xmm1, xmm1
movups xmmword [rax + 0x1660], xmm0
movups xmmword [rax + 0x1650], xmm1
movaps xmm1, xmmword [0x180083370]
xorps xmm0, xmm0
movups xmmword [rax + 0x1680], xmm0
movaps xmm0, xmmword [0x180083320]
movups xmmword [rax + 0x1670], xmm1
movaps xmm1, xmmword [0x180083310]
movups xmmword [rax + 0x16a0], xmm0
movaps xmm0, xmmword [0x1800834a0]
movups xmmword [rax + 0x1690], xmm1
movaps xmm1, xmmword [0x180083420]
movups xmmword [rax + 0x16c0], xmm0
movaps xmm0, xmmword [0x180083280]
movups xmmword [rax + 0x16b0], xmm1
movaps xmm1, xmmword [0x1800834b0]
movups xmmword [rax + 0x16e0], xmm0
movaps xmm0, xmmword [0x1800833c0]
movups xmmword [rax + 0x16d0], xmm1
movaps xmm1, xmmword [0x180083460]
movups xmmword [rax + 0x1700], xmm0
movaps xmm0, xmmword [0x180083330]
movups xmmword [rax + 0x16f0], xmm1
movaps xmm1, xmmword [0x1800832b0]
movups xmmword [rax + 0x1720], xmm0
movaps xmm0, xmmword [0x180083380]
movups xmmword [rax + 0x1710], xmm1
movaps xmm1, xmmword [0x1800833e0]
movups xmmword [rax + 0x1740], xmm0
movaps xmm0, xmmword [0x1800833e0]
movups xmmword [rax + 0x1730], xmm1
movaps xmm1, xmmword [0x1800832c0]
movups xmmword [rax + 0x1760], xmm0
movaps xmm0, xmmword [0x180083450]
movups xmmword [rax + 0x1750], xmm1
movaps xmm1, xmmword [0x180083400]
movups xmmword [rax + 0x1780], xmm0
movaps xmm0, xmmword [0x180083350]
movups xmmword [rax + 0x1770], xmm1
movaps xmm1, xmmword [0x180083650]
movups xmmword [rax + 0x17a0], xmm0
movups xmmword [rax + 0x1790], xmm1
movaps xmm1, xmmword [0x180083480]
lea r8d, [rcx + 0x21]
movaps xmm0, xmmword [0x180083470]
lea rdx, [0x18008ec85]
movups xmmword [rax + 0x17b0], xmm1
lea rcx, str.KamiProject__Support_with_Conclav
movaps xmm1, xmmword [0x1800833d0]
movups xmmword [rax + 0x17c0], xmm0
movaps xmm0, xmmword [0x180083630]
movups xmmword [rax + 0x17d0], xmm1
movaps xmm1, xmmword [0x180083670]
movups xmmword [rax + 0x17e0], xmm0
movaps xmm0, xmmword [0x180083270]
movups xmmword [rax + 0x17f0], xmm1
movaps xmm1, xmmword [0x1800833f0]
movups xmmword [rax + 0x1800], xmm0
movaps xmm0, xmmword [0x1800834d0]
movups xmmword [rax + 0x1810], xmm1
movaps xmm1, xmmword [0x180083300]
movups xmmword [rax + 0x1820], xmm0
movaps xmm0, xmmword [0x1800834c0]
movups xmmword [rax + 0x1910], xmm1
movups xmmword [rax + 0x1920], xmm0
call fcn.1800180d0
lea rax, [0x18007dbd4]
cmp qword [0x18008ec90], rax
jne 0x1800055bb
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e28]
lea rcx, str.Aimbot
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x1800055ce
lea rdx, [0x180090e28]
lea rcx, str.Aimbot
call fcn.1800363d0
cmp byte [0x180090e28], 0
movss xmm6, dword [0x1800831d0]
je 0x180005c1e
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
cmp qword [0x18008ec90], rbx
jne 0x18000564c
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e2a]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000565b
lea rdx, [0x180090e2a]
mov rcx, rbx
call fcn.1800363d0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
cmp qword [0x18008ec90], rdi
jne 0x1800056c8
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e25]
lea rcx, str.NpcAim
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x1800056db
lea rdx, [0x180090e25]
lea rcx, str.NpcAim
call fcn.1800363d0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
lea rax, str.Predict
cmp qword [0x18008ec90], rax
jne 0x18000574f
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e2e]
lea rcx, str.AimDot
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005769
lea rdx, [0x180090e2e]
lea rcx, str.AimDot
call fcn.1800363d0
mov r8, qword [0x180090e50]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
or dword [r8 + 0x1cac], 1
movaps xmm1, xmm6
xorps xmm0, xmm0
mov dword [r8 + 0x1cb0], 0x42c80000
call fcn.18001ae40
cmp byte [0x180090e20], 1
jne 0x18000598f
mov edx, 0xff2d2d2d
mov ecx, 0x15
call fcn.180010340
mov edx, 0xff5353d4
mov ecx, 5
call fcn.180010340
xorps xmm1, xmm1
mov ecx, 0xc
call fcn.180010410
movss xmm1, dword [0x180083118]
mov ecx, 0xd
call fcn.180010410
lea rdx, [rsp + 0x180]
mov qword [rsp + 0x180], 0
lea rcx, [0x18007e190]
call fcn.180035340
mov r8, qword [0x180090e50]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1d60]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d60], eax
lea rax, [rcx - 2]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4]
movups xmm0, xmmword [rcx + rdx*4 + 4]
add rax, 0x162
lea rdx, [0x18007e810]
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
movsxd rax, dword [r8 + 0x1d70]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4 - 0xc]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x1800058d1
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x1800058b2
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x1800058d1
cmp eax, 2
jne 0x1800058d1
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 - 4]
mov dword [r10 + r8 + 0x155c], eax
movsxd rcx, dword [r8 + 0x1d70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d70], eax
lea rax, [rcx - 2]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x18000593d
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x18000591e
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x18000593d
cmp eax, 2
jne 0x18000593d
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 + 8]
mov dword [r10 + r8 + 0x155c], eax
dec dword [r8 + 0x1d70]
mov rdi, qword [0x180091028]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x180005985
mov ecx, dword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005975
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x180005953
call fcn.180002d80
jmp 0x180005c1e
mov eax, dword [rbx + 0x10]
mov dword [0x18008ec8c], eax
mov byte [0x180090e20], 0
call fcn.180002d80
jmp 0x180005c1e
lea rax, str.Bind
cmp qword [0x18008ec90], rax
jne 0x180005b33
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
xorps xmm1, xmm1
mov ecx, 0xc
call fcn.180010410
movss xmm1, dword [0x180083114]
mov ecx, 0xd
call fcn.180010410
lea rdx, [rsp + 0x180]
call fcn.18000cc20
mov edx, 0x12
mov rcx, qword [rax]
mov eax, dword [0x18008ec8c]
cmp qword [rcx + 0x18], 0
mov qword [rsp + 0x180], 0
cmove eax, edx
lea rdx, [rsp + 0x40]
mov dword [0x18008ec8c], eax
call fcn.18000cc20
lea rdx, [rsp + 0x180]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x18]
call fcn.180035340
mov r8, qword [0x180090e50]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
lea rdx, [0x18007e810]
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
movsxd rax, dword [r8 + 0x1d70]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4 - 0xc]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005abf
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005aa0
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005abf
cmp eax, 2
jne 0x180005abf
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 - 4]
mov dword [r10 + r8 + 0x155c], eax
movsxd rcx, dword [r8 + 0x1d70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d70], eax
lea rax, [rcx - 2]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005c17
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005b13
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005c17
cmp eax, 2
jne 0x180005c17
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 + 8]
jmp 0x180005c0f
mov edx, 0xff2d2d2d
mov ecx, 0x15
call fcn.180010340
xorps xmm1, xmm1
mov ecx, 0xc
call fcn.180010410
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x180], 0
call fcn.18000cc20
lea rdx, [rsp + 0x180]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x18]
call fcn.180035340
mov r8, qword [0x180090e50]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
lea rdx, [0x18007e810]
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
movsxd rax, dword [r8 + 0x1d70]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4 - 0xc]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005c17
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005bf8
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005c17
cmp eax, 2
jne 0x180005c17
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 - 4]
mov dword [r10 + r8 + 0x155c], eax
dec dword [r8 + 0x1d70]
cmp qword [0x18008ec90], rbp
jne 0x180005c7c
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e24]
mov rcx, rbp
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005c8b
lea rdx, [0x180090e24]
mov rcx, rbp
call fcn.1800363d0
cmp byte [0x180090e24], 0
je 0x180005d88
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
cmp qword [0x18008ec90], r15
jne 0x180005d01
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e2f]
mov rcx, r15
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005d10
lea rdx, [0x180090e2f]
mov rcx, r15
call fcn.1800363d0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
cmp qword [0x18008ec90], r14
jne 0x180005d79
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e2c]
mov rcx, r14
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005d88
lea rdx, [0x180090e2c]
mov rcx, r14
call fcn.1800363d0
cmp qword [0x18008ec90], r13
mov r15, qword [rsp + 0x1b0]
jne 0x180005dee
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e23]
mov rcx, r13
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005dfd
lea rdx, [0x180090e23]
mov rcx, r13
call fcn.1800363d0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
cmp qword [0x18008ec90], r12
mov r13, qword [rsp + 0x1b8]
jne 0x180005e6e
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e40]
mov rcx, r12
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005e7d
lea rdx, [0x180090e40]
mov rcx, r12
call fcn.1800363d0
mov r12, qword [rsp + 0x1f0]
lea rbx, str.Bags__Backpacks_
cmp qword [0x18008ec90], rbx
jne 0x180005eea
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e29]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005ef9
lea rdx, [0x180090e29]
mov rcx, rbx
call fcn.1800363d0
lea rbx, str.Mob_ESP
cmp qword [0x18008ec90], rbx
jne 0x180005f5e
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e21]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005f6d
lea rdx, [0x180090e21]
mov rcx, rbx
call fcn.1800363d0
lea rbx, str.Item_ESP
cmp qword [0x18008ec90], rbx
jne 0x180005fd2
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e26]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005fe1
lea rdx, [0x180090e26]
mov rcx, rbx
call fcn.1800363d0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001ae40
lea rbx, str.Barter_ESP
cmp qword [0x18008ec90], rbx
jne 0x180006051
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e22]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180006060
lea rdx, [0x180090e22]
mov rcx, rbx
call fcn.1800363d0
cmp byte [0x180090e28], 0
je 0x18000609f
movss xmm0, dword [0x1800830a4]
lea rax, [rsp + 0x190]
lea r9, [rsp + 0x180]
movss dword [rsp + 0x180], xmm0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x190], 0x3f666666
call fcn.180036c30
mov rcx, qword [0x180090e50]
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, dword [0x180083180]
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
cmp byte [0x180090e28], 0
je 0x18000634b
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
lea rcx, str.Aim_Target
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x18008318c]
addss xmm2, dword [0x180083160]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.180034a40
mov rcx, qword [0x180090e50]
lea rbx, str.Head
cmp qword [0x18008ec90], rbx
movss xmm6, dword [0x180083190]
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, xmm6
addss xmm2, dword [0x180083168]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
jne 0x180006254
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x18008ec84]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000626a
lea rdx, [0x18008ec84]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
mov rax, qword [r8 + 0x1c08]
lea rbx, str.Body
cmp qword [0x18008ec90], rbx
mov byte [rax + 0x90], 1
mov rax, qword [r8 + 0x1c08]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, xmm6
addss xmm2, dword [0x180083170]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
jne 0x18000633c
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010340
lea rdx, [0x180090e2b]
mov rcx, rbx
call fcn.1800363d0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000634b
lea rdx, [0x180090e2b]
mov rcx, rbx
call fcn.1800363d0
movaps xmm6, xmmword [rsp + 0x1a0]
mov rdi, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x198]
xor rcx, rsp
call fcn.18003fd30
add rsp, 0x1c0
pop r14
pop rsi
pop rbp
ret