Function at 0x180047600
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1690]
mov eax, 0x1790
call fcn.18004e8d0
sub rsp, rax
movaps xmmword [rsp + 0x1780], xmm6
movaps xmmword [rsp + 0x1770], xmm7
movaps xmmword [rsp + 0x1760], xmm8
movaps xmmword [rsp + 0x1750], xmm9
movaps xmmword [rsp + 0x1740], xmm10
movaps xmmword [rsp + 0x1730], xmm11
movaps xmmword [rsp + 0x1720], xmm12
movaps xmmword [rsp + 0x1710], xmm13
movaps xmmword [rsp + 0x1700], xmm14
movaps xmmword [rsp + 0x16f0], xmm15
mov rax, qword [0x180065040]
xor rax, rsp
mov qword [rbp + 0x15e0], rax
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rsi, rax
mov qword [rbp + 0x190], rax
cmp byte [0x180090c4c], r14b
je 0x18004a193
cmp byte [0x180090c52], r14b
je 0x180047704
call qword [0x180090a90]
mov rbx, rax
test rax, rax
je 0x18004770e
movss xmm6, dword [0x180065514]
mov r9, qword [0x180090a18]
lea r8d, [r14 - 1]
lea rdx, str.set_fieldOfView
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004770e
mov rax, qword [rax]
test rax, rax
je 0x18004770e
movaps xmm1, xmm6
mov rcx, rbx
call rax
jmp 0x18004770e
mov dword [0x180065514], 0x42480000
movss xmm9, dword [0x18005c1f0]
movss xmm11, dword [0x18005c22c]
cmp byte [0x1800652d2], r14b
je 0x18004784e
movups xmm0, xmmword [0x180058530]
movups xmmword [rsp + 0x70], xmm0
cmp byte [0x180090c56], r14b
je 0x180047774
movss xmm0, dword [0x180090e08]
movss dword [rsp + 0x70], xmm0
movss xmm1, dword [0x180090e0c]
movss dword [rsp + 0x74], xmm1
movss xmm0, dword [0x180090e10]
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x3f800000
mov r10, qword [0x180090ba8]
lea rcx, [rsp + 0x70]
call fcn.1800051c0
mov ebx, eax
movss xmm1, dword [0x180090e20]
movss xmm0, dword [0x180065530]
subss xmm1, xmm0
mulss xmm0, xmm11
addss xmm0, xmm1
movss dword [rsp + 0x58], xmm0
movss xmm0, dword [0x180090e24]
movss dword [rsp + 0x5c], xmm0
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x64], xmm0
movss xmm6, dword [0x18005c1f8]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
lea rcx, [r10 + 0x1de8]
call fcn.180023650
mov rcx, qword [0x180090ba8]
add rcx, 0x1de8
movss xmm2, dword [0x180090e24]
movss xmm1, dword [0x180065530]
subss xmm2, xmm1
mulss xmm1, xmm11
addss xmm1, xmm2
movss xmm0, dword [0x180090e20]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm2
movss dword [rsp + 0x20], xmm6
mov r9d, ebx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
call fcn.180023650
movss xmm10, dword [0x18005c1b8]
xorps xmm14, xmm14
cmp byte [0x1800650bc], r14b
je 0x1800479c0
mov r8, qword [0x180090ba8]
lea rbx, [r8 + 0x1de8]
movaps xmm0, xmmword [0x18005c500]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.1800051c0
mov edi, eax
movss xmm6, dword [0x180090e20]
movss dword [rsp + 0x58], xmm6
movss xmm7, dword [0x180090e24]
movss dword [rsp + 0x5c], xmm7
movss xmm8, dword [0x18005c26c]
test eax, 0xff000000
je 0x180047929
movss xmm2, dword [0x1800652dc]
subss xmm2, xmm10
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1800230c0
movss dword [rsp + 0x28], xmm9
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x80]
mov rdx, qword [rbx + 0x88]
mov rcx, rbx
call fcn.180021a80
mov dword [rbx + 0x80], r14d
movss xmm7, dword [0x180090e24]
movss xmm6, dword [0x180090e20]
mov r8, qword [0x180090ba8]
cmp byte [0x180090c2d], r14b
je 0x1800479c0
lea rbx, [r8 + 0x1de8]
movups xmm0, xmmword [0x180090e08]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.1800051c0
mov edi, eax
movss dword [rsp + 0x58], xmm6
movss dword [rsp + 0x5c], xmm7
test eax, 0xff000000
je 0x1800479c0
movss xmm2, dword [0x1800652dc]
subss xmm2, xmm10
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1800230c0
movss dword [rsp + 0x28], xmm9
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x80]
mov rdx, qword [rbx + 0x88]
mov rcx, rbx
call fcn.180021a80
mov dword [rbx + 0x80], r14d
mov rax, qword [0x180090e48]
mov rcx, qword [0x180090e40]
cmp rcx, rax
je 0x18004a180
mov r12, r14
mov qword [rbp - 0x78], r14
sub rax, rcx
sar rax, 3
test rax, rax
je 0x18004a180
movss xmm15, dword [rsp + 0x50]
movss xmm13, dword [rsp + 0x50]
movss xmm12, dword [rsp + 0x50]
movsd xmm7, qword [0x18005c230]
movss xmm8, dword [0x18005c2f4]
movss xmm6, dword [0x18005c208]
mov rsi, qword [0x180090e40]
mov rdi, qword [rsi + r12*8]
test rdi, rdi
je 0x180049d12
cmp rdi, qword [0x180090be8]
je 0x180049d12
mov rbx, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov r13, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x180049d12
mov rbx, qword [rsi + r12*8]
mov rdi, qword [0x180090af0]
mov rdx, qword [0x180090a60]
lea rcx, str.Animator
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
mov r14, rax
test rax, rax
je 0x180049d12
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [r13]
call r9
test rax, rax
je 0x180047acd
mov rax, qword [rax]
test rax, rax
je 0x180047acd
mov rcx, r13
call rax
movzx edi, al
jmp 0x180047ad0
xor dil, dil
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180047b01
mov rax, qword [rax]
test rax, rax
je 0x180047b01
mov rcx, r13
call rax
movzx ebx, al
jmp 0x180047b03
xor bl, bl
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsTeammate
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180047b31
mov rax, qword [rax]
test rax, rax
je 0x180047b31
mov rcx, r13
call rax
jmp 0x180047b33
xor al, al
test dil, dil
jne 0x180049d12
test bl, bl
jne 0x180049d12
cmp byte [0x1800650bf], bl
je 0x180047b54
test al, al
jne 0x180049d12
mov rax, qword [0x180090b10]
mov rcx, qword [rsi + r12*8]
call rax
test rax, rax
je 0x180049d12
mov qword [rbp + 0x1d4], 0
mov dword [rbp + 0x1d0], 0
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call qword [0x180090b60]
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.WeaponsController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
test rax, rax
je 0x180049d12
cmp byte [0x180090c4f], 0
je 0x180047bff
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.AddLevelsToAllWeapons
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180047bff
mov rax, qword [rax]
test rax, rax
je 0x180047bff
mov edx, 5
mov rcx, rbx
call rax
cmp byte [0x180090c51], 0
je 0x180047c6a
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.ApplyFireRateMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180047c37
mov rax, qword [rax]
test rax, rax
je 0x180047c37
movaps xmm1, xmm10
mov rcx, rbx
call rax
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.ApplyFireRateMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180047c6a
mov rax, qword [rax]
test rax, rax
je 0x180047c6a
movss xmm1, dword [0x18005c308]
mov rcx, rbx
call rax
cmp byte [0x180090bb6], 0
je 0x180047ca6
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.ApplyReloadSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180047ca6
mov rax, qword [rax]
test rax, rax
je 0x180047ca6
movss xmm1, dword [0x18005c25c]
mov rcx, rbx
call rax
cmp byte [0x180090c63], 0
je 0x180047d10
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.AddPercentageAmmoToAllWeapons
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180047cdd
mov rax, qword [rax]
test rax, rax
je 0x180047cdd
movaps xmm1, xmm6
mov rcx, rbx
call rax
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.AddPercentageAmmoToAllWeapons
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180047d10
mov rax, qword [rax]
test rax, rax
je 0x180047d10
movss xmm1, dword [0x18005c30c]
mov rcx, rbx
call rax
cmp byte [0x1800650b5], 0
je 0x180047f3d
mov r15, qword [0x180090c90]
mov rdi, qword [0x180090c88]
cmp rdi, r15
je 0x180047f3d
nop dword [rax]
nop dword [rax + rax]
mov ebx, dword [rdi]
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x180047d74
mov rax, qword [rax]
test rax, rax
je 0x180047d74
mov edx, ebx
mov rcx, r14
call rax
mov rsi, rax
jmp 0x180047d76
xor esi, esi
mov ebx, dword [rdi + 4]
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x180047dab
mov rax, qword [rax]
test rax, rax
je 0x180047dab
mov edx, ebx
mov rcx, r14
call rax
mov rbx, rax
jmp 0x180047dad
xor ebx, ebx
test rsi, rsi
je 0x180047f30
test rbx, rbx
je 0x180047f30
mov qword [rbp + 0x1f4], 0
mov dword [rbp + 0x1f0], 0
lea rdx, [rbp + 0x1f0]
mov rcx, rsi
call qword [0x180090b60]
mov qword [rbp + 0x204], 0
mov dword [rbp + 0x200], 0
lea rdx, [rbp + 0x200]
mov rcx, rbx
call qword [0x180090b60]
movsd xmm0, qword [rbp + 0x1f0]
movsd qword [rbp + 0x120], xmm0
mov eax, dword [rbp + 0x1f8]
mov dword [rbp + 0x128], eax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x120]
call fcn.1800425f0
test al, al
je 0x180047f30
movsd xmm0, qword [rbp + 0x200]
movsd qword [rbp + 0x130], xmm0
mov eax, dword [rbp + 0x208]
mov dword [rbp + 0x138], eax
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x130]
call fcn.1800425f0
test al, al
je 0x180047f30
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180047eab
mov rax, qword [rax]
test rax, rax
je 0x180047eab
mov rcx, r13
call rax
test al, al
jne 0x180047f30
mov r10, qword [0x180090ba8]
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss xmm0, dword [rbp + 0xd8]
movss dword [rbp + 0xe8], xmm0
movss xmm1, dword [rbp + 0xdc]
movss dword [rbp + 0xec], xmm1
movss xmm0, dword [rbp + 0xe0]
movss dword [rbp + 0xf0], xmm0
movss xmm1, dword [rbp + 0xe4]
movss dword [rbp + 0xf4], xmm1
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0xe8]
lea rdx, [rbp + 0xf0]
lea rcx, [r10 + 0x1d40]
call fcn.180023650
add rdi, 8
cmp rdi, r15
jne 0x180047d40
cmp byte [0x1800650b6], 0
je 0x1800480c3
movss xmm0, dword [rbp + 0x1d0]
movss dword [rbp + 0x110], xmm0
movss xmm1, dword [rbp + 0x1d4]
subss xmm1, dword [0x18005c1a0]
movss dword [rbp + 0x114], xmm1
movss xmm0, dword [rbp + 0x1d8]
movss dword [rbp + 0x118], xmm0
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x110]
call fcn.1800425f0
test al, al
je 0x1800480c3
movups xmm0, xmmword [0x180058540]
movups xmmword [rbp + 0x198], xmm0
cmp byte [0x180090c4d], 0
je 0x180047feb
movss xmm0, dword [0x180090e08]
movss dword [rbp + 0x198], xmm0
movss xmm1, dword [0x180090e0c]
movss dword [rbp + 0x19c], xmm1
movss xmm0, dword [0x180090e10]
movss dword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1a4], 0x3f800000
mov ecx, dword [0x180065528]
sub ecx, 1
je 0x18004805c
cmp ecx, 1
jne 0x1800480c3
mov r10, qword [0x180090ba8]
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss xmm0, dword [rbp - 0x70]
movss dword [rbp + 0xf8], xmm0
movss xmm1, dword [rbp - 0x6c]
movss dword [rbp + 0xfc], xmm1
movss xmm0, dword [0x180090e20]
movss dword [rbp + 0x100], xmm0
movss xmm1, dword [0x180090e24]
movss dword [rbp + 0x104], xmm1
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
jmp 0x1800480ae
mov r10, qword [0x180090ba8]
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss xmm0, dword [rbp - 0x70]
movss dword [rbp + 0x108], xmm0
movss xmm1, dword [rbp - 0x6c]
movss dword [rbp + 0x10c], xmm1
movss xmm0, dword [0x180090e20]
movss dword [rbp - 8], xmm0
movss xmm1, dword [0x180090e1c]
movss dword [rbp - 4], xmm1
lea r8, [rbp + 0x108]
lea rdx, [rbp - 8]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea rcx, [r10 + 0x1d40]
call fcn.180023650
cmp byte [0x1800652d1], 0
je 0x180048fef
mov r13, qword [0x180090ba8]
add r13, 0x1d40
mov qword [rbp + 0x198], r13
mov r15b, 1
mov r12, qword [0x180090c90]
mov rdi, qword [0x180090c88]
cmp rdi, r12
je 0x1800482dc
movss xmm14, dword [rsp + 0x50]
mov r13, qword [rbp - 0x80]
nop word [rax + rax]
mov ebx, dword [rdi]
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x180048144
mov rax, qword [rax]
test rax, rax
je 0x180048144
mov edx, ebx
mov rcx, r14
call rax
mov rsi, rax
jmp 0x180048146
xor esi, esi
mov ebx, dword [rdi + 4]
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x18004817b
mov rax, qword [rax]
test rax, rax
je 0x18004817b
mov edx, ebx
mov rcx, r14
call rax
mov rbx, rax
jmp 0x18004817d
xor ebx, ebx
test rsi, rsi
je 0x1800482bd
test rbx, rbx
je 0x1800482bd
mov qword [rbp - 0x64], 0
mov dword [rbp - 0x68], 0
lea rdx, [rbp - 0x68]
mov rcx, rsi
call qword [0x180090b60]
movsd xmm0, qword [rbp - 0x68]
movsd qword [rbp + 0x140], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rbp + 0x148], eax
lea rdx, [rbp]
lea rcx, [rbp + 0x140]
call fcn.1800425f0
test al, al
je 0x1800482bd
mov qword [rbp - 0x58], 0
mov dword [rbp - 0x5c], 0
lea rdx, [rbp - 0x5c]
mov rcx, rbx
call qword [0x180090b60]
movsd xmm0, qword [rbp - 0x5c]
movsd qword [rbp + 0x150], xmm0
mov eax, dword [rbp - 0x54]
mov dword [rbp + 0x158], eax
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x150]
call fcn.1800425f0
test al, al
je 0x1800482bd
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180048253
mov rax, qword [rax]
test rax, rax
je 0x180048253
mov rcx, r13
call rax
test al, al
jne 0x1800482bd
movss xmm3, dword [rbp + 4]
movss xmm4, dword [rbp]
test r15b, r15b
je 0x180048275
movaps xmm12, xmm4
movaps xmm13, xmm3
xor r15b, r15b
movaps xmm15, xmm4
movaps xmm14, xmm3
movaps xmm0, xmm4
minss xmm0, xmm12
movss xmm2, dword [rbp + 8]
movaps xmm12, xmm2
minss xmm12, xmm0
movaps xmm1, xmm3
minss xmm1, xmm13
movss xmm0, dword [rbp + 0xc]
movaps xmm13, xmm0
minss xmm13, xmm1
maxss xmm4, xmm15
movaps xmm15, xmm2
maxss xmm15, xmm4
maxss xmm3, xmm14
movaps xmm14, xmm0
maxss xmm14, xmm3
add rdi, 8
cmp rdi, r12
jne 0x180048110
movss dword [rsp + 0x50], xmm14
xorps xmm14, xmm14
mov r13, qword [rbp + 0x198]
mov eax, dword [0x180090c68]
cmp eax, 1
jne 0x18004834e
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss dword [rbp + 0x10], xmm15
movss xmm9, dword [rsp + 0x50]
movss dword [rbp + 0x14], xmm9
movss dword [rbp + 0x18], xmm12
movss dword [rbp + 0x1c], xmm13
movss dword [rsp + 0x30], xmm11
xor r14d, r14d
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x18]
mov rcx, r13
call fcn.1800237b0
jmp 0x180048620
test eax, eax
jne 0x180048616
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movaps xmm8, xmm12
movss xmm9, dword [0x18005c274]
addss xmm8, xmm9
movss dword [rbp + 0x20], xmm8
movss dword [rbp + 0x24], xmm13
movss dword [rbp + 0x28], xmm12
movss dword [rbp + 0x2c], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x28]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movaps xmm6, xmm13
addss xmm6, xmm9
movss dword [rbp + 0x30], xmm12
movss dword [rbp + 0x34], xmm6
movss dword [rbp + 0x38], xmm12
movss dword [rbp + 0x3c], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x38]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movaps xmm7, xmm15
subss xmm7, xmm9
movss dword [rbp + 0x40], xmm7
movss dword [rbp + 0x44], xmm13
movss dword [rbp + 0x48], xmm15
movss dword [rbp + 0x4c], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x48]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss dword [rbp + 0x50], xmm15
movss dword [rbp + 0x54], xmm6
movss dword [rbp + 0x58], xmm15
movss dword [rbp + 0x5c], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x58]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss dword [rbp + 0x60], xmm8
movss xmm9, dword [rsp + 0x50]
movss dword [rbp + 0x64], xmm9
movss dword [rbp + 0x68], xmm12
movss dword [rbp + 0x6c], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x68]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movaps xmm6, xmm9
subss xmm6, dword [0x18005c274]
movss dword [rbp + 0x70], xmm12
movss dword [rbp + 0x74], xmm6
movss dword [rbp + 0x78], xmm12
movss dword [rbp + 0x7c], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x78]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss dword [rbp + 0x80], xmm7
movss dword [rbp + 0x84], xmm9
movss dword [rbp + 0x88], xmm15
movss dword [rbp + 0x8c], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x88]
mov rcx, r13
call fcn.180023650
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss dword [rbp + 0x90], xmm15
movss dword [rbp + 0x94], xmm6
movss dword [rbp + 0x98], xmm15
movss dword [rbp + 0x9c], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x98]
mov rcx, r13
call fcn.180023650
movss xmm8, dword [0x18005c2f4]
jmp 0x18004861d
movss xmm9, dword [rsp + 0x50]
xor r14d, r14d
mov r12, qword [rbp - 0x78]
cmp byte [0x1800650b9], 0
je 0x180048a84
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180048a84
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rbx, qword [rbp - 0x80]
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180048698
mov rax, qword [rax]
test rax, rax
je 0x180048698
mov rcx, rbx
call rax
movzx ebx, al
jmp 0x18004869a
xor bl, bl
mov rcx, qword [0x180090de8]
call fcn.180010970
lea rdx, str.Real_Player
test bl, bl
lea rax, [0x18005c094]
cmovne rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.1800030f0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 6
jb 0x18004875c
lea rax, [r8 + 6]
mov qword [rbx + 0x10], rax
mov rdi, rbx
cmp rcx, 0xf
jbe 0x1800486f1
mov rdi, qword [rbx]
lea rax, [0x18005c0aa]
lea r15, str.User:
cmp rax, rdi
jbe 0x18004871f
lea rax, [rdi + r8]
cmp r15, rax
ja 0x18004871f
cmp rdi, r15
ja 0x180048717
mov rsi, r14
jmp 0x180048724
mov rsi, rdi
sub rsi, r15
jmp 0x180048724
mov esi, 6
inc r8
lea rcx, [rdi + 6]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 6
sub r8, rsi
lea rdx, [r15 + 6]
add rdx, rsi
lea rcx, [rdi + rsi]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180048781
mov qword [rsp + 0x28], 6
lea rax, str.User:
mov qword [rsp + 0x20], rax
mov edx, 6
mov rcx, rbx
call fcn.18004d3b0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r14
mov qword [rbp + 0x228], r14
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x210], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x220], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x1800487fe
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800487f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004a114
call fcn.18004db44
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], 0xf
mov byte [rbp + 0x1a8], 0
lea rax, [rbp + 0x210]
mov rcx, qword [rbp + 0x210]
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
cmova rax, rcx
mov rbx, qword [0x180090ba8]
movss xmm1, dword [rbx + 0x1910]
test rax, rax
jne 0x18004884e
movaps xmm0, xmm14
jmp 0x1800488b1
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x18005c31c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm8
movaps xmm2, xmm1
lea rdx, [rsp + 0x60]
mov rcx, qword [rbx + 0x1908]
call fcn.180028420
movss xmm0, dword [rsp + 0x60]
addss xmm0, dword [0x18005c1e8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [rsp + 0x64]
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x210]
movaps xmm7, xmm13
subss xmm7, xmm1
subss xmm7, dword [0x18005c27c]
movaps xmm6, xmm12
addss xmm6, xmm15
subss xmm6, xmm0
mulss xmm6, xmm10
lea rdi, [rbp + 0x210]
cmp rdx, 0xf
cmova rdi, rcx
movaps xmm0, xmmword [0x18005c500]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
mov r14d, eax
movss xmm8, dword [rbx + 0x1910]
mov rsi, qword [rbx + 0x1908]
test eax, 0xff000000
je 0x180048a20
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x180048921
add rbx, rdi
cmp rdi, rbx
je 0x180048a20
test rsi, rsi
jne 0x180048943
mov rax, qword [r13 + 0x38]
mov rsi, qword [rax + 8]
ucomiss xmm8, xmm14
jp 0x180048955
jne 0x180048955
mov rax, qword [r13 + 0x38]
movss xmm8, dword [rax + 0x10]
cmp dword [r13 + 0x70], 0
jg 0x180048976
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rdx, dword [r13 + 0x70]
mov rax, qword [r13 + 0x78]
mov rcx, qword [rsi + 0x48]
mov rax, qword [rax + rdx*8 - 8]
cmp qword [rcx + 8], rax
je 0x1800489a7
mov r8d, 0x485
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___TextureIdStack.back__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [r13 + 0x60], 0
jg 0x1800489c8
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [r13 + 0x60]
add rcx, rcx
mov rax, qword [r13 + 0x68]
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp + 0x198], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x198]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movq r9, xmm0
movaps xmm2, xmm8
mov rdx, r13
mov rcx, rsi
call fcn.180028640
call fcn.180010a30
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x180048a67
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180048a62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004a11b
call fcn.18004db44
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x228], 0xf
mov byte [rbp + 0x210], 0
cmp byte [0x180090c50], 0
je 0x180048fd1
mov rsi, qword [0x180090ba8]
add rsi, 0x1d40
addss xmm9, dword [0x18005c27c]
movaps xmm8, xmm15
subss xmm8, xmm12
mulss xmm8, xmm10
addss xmm8, xmm12
subss xmm8, dword [0x18005c298]
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerHealth
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov r14, rax
mov rcx, qword [0x180090e40]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x180090af0]
mov rdx, qword [0x180090a60]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test r14, r14
je 0x180048b4d
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_PlayerHealth
mov rcx, qword [r14]
call rax
test rax, rax
je 0x180048b4d
mov rax, qword [rax]
test rax, rax
je 0x180048b4d
mov rcx, r14
call rax
jmp 0x180048b51
movaps xmm0, xmm14
cvttss2si edx, xmm0
lea rcx, [rbp - 0x28]
call fcn.18004c9b0
nop
mov r8, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
sub rax, r8
cmp rax, 4
jb 0x180048bfa
lea rax, [r8 + 4]
mov qword [rbp - 0x18], rax
lea rbx, [rbp - 0x28]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x28]
lea rax, [0x18005c0d8]
lea r14, str.HP:
cmp rax, rbx
jbe 0x180048bb9
lea rax, [rbx + r8]
cmp r14, rax
ja 0x180048bb9
cmp rbx, r14
ja 0x180048bb1
xor edi, edi
jmp 0x180048bbe
mov rdi, rbx
sub rdi, r14
jmp 0x180048bbe
mov edi, 4
inc r8
lea rcx, [rbx + 4]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 4
sub r8, rdi
lea rdx, [r14 + 4]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x28]
jmp 0x180048c1d
mov qword [rsp + 0x28], 4
lea rax, str.HP:
mov qword [rsp + 0x20], rax
mov edx, 4
lea rcx, [rbp - 0x28]
call fcn.18004d3b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xor r14d, r14d
mov qword [rbp + 0x240], r14
mov qword [rbp + 0x248], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x240], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180048c97
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180048c92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004a122
call fcn.18004db44
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
movaps xmm0, xmmword [0x18005c490]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movaps xmm7, xmm9
addss xmm7, dword [0x18005c28c]
movaps xmm6, xmm8
addss xmm6, dword [0x18005c29c]
movss dword [rbp + 0xa0], xmm6
movss dword [rbp + 0xa4], xmm7
movss dword [rbp + 0xa8], xmm8
movss dword [rbp + 0xac], xmm9
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0xa8]
mov rcx, rsi
call fcn.1800238c0
movups xmm0, xmmword [0x18008ff90]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
movss dword [rbp + 0xb0], xmm6
movss dword [rbp + 0xb4], xmm7
movss dword [rbp + 0xb8], xmm8
movss dword [rbp + 0xbc], xmm9
movss xmm0, dword [0x18005c1f0]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xb8]
mov rcx, rsi
call fcn.1800237b0
lea rcx, [rbp + 0x230]
mov r8, qword [rbp + 0x230]
mov r9, qword [rbp + 0x248]
cmp r9, 0xf
cmova rcx, r8
mov rax, qword [0x180090ba8]
movss xmm1, dword [rax + 0x1910]
test rcx, rcx
jne 0x180048dcb
movaps xmm0, xmm14
jmp 0x180048e32
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rcx
movss xmm0, dword [0x18005c31c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x18005c2f4]
movaps xmm2, xmm1
lea rdx, [rsp + 0x58]
mov rcx, qword [rax + 0x1908]
call fcn.180028420
movss xmm0, dword [rsp + 0x58]
addss xmm0, dword [0x18005c1e8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [rsp + 0x5c]
mov r9, qword [rbp + 0x248]
mov r8, qword [rbp + 0x230]
movss xmm7, dword [0x18005c28c]
subss xmm7, xmm1
mulss xmm7, xmm10
addss xmm7, xmm9
movss xmm6, dword [0x18005c29c]
subss xmm6, xmm0
mulss xmm6, xmm10
addss xmm6, xmm8
lea rdi, [rbp + 0x230]
cmp r9, 0xf
cmova rdi, r8
movaps xmm0, xmmword [0x18005c500]
movups xmmword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800051c0
mov r15d, eax
test eax, 0xff000000
je 0x180048f9a
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x180048ea0
add rbx, rdi
cmp rdi, rbx
je 0x180048f9a
mov rax, qword [rsi + 0x38]
mov r14, qword [rax + 8]
movss xmm8, dword [rax + 0x10]
cmp dword [rsi + 0x70], 0
jg 0x180048ee3
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rdx, dword [rsi + 0x70]
mov rax, qword [rsi + 0x78]
mov rcx, qword [r14 + 0x48]
mov rax, qword [rax + rdx*8 - 8]
cmp qword [rcx + 8], rax
je 0x180048f14
mov r8d, 0x485
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___TextureIdStack.back__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [rsi + 0x60], 0
jg 0x180048f34
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rsi + 0x60]
add rcx, rcx
mov rax, qword [rsi + 0x68]
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp + 0x198], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x198]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movq r9, xmm0
movaps xmm2, xmm8
mov rdx, rsi
mov rcx, r14
call fcn.180028640
mov r9, qword [rbp + 0x248]
mov r8, qword [rbp + 0x230]
cmp r9, 0xf
jbe 0x180048fd1
lea rdx, [r9 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x180048fc9
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004a129
mov rcx, r8
call fcn.18004db44
movsd xmm7, qword [0x18005c230]
movss xmm8, dword [0x18005c2f4]
movss xmm9, dword [0x18005c1f0]
mov r13, qword [rbp - 0x80]
cmp byte [0x180090c57], 0
je 0x1800490de
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x180049058
mov rdx, qword [rax]
test rdx, rdx
je 0x180049058
mov rcx, r13
call rdx
jmp 0x18004905a
xor al, al
test rbx, rbx
je 0x180049d12
test al, al
je 0x180049d12
mov r14d, 0x20
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800490de
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], rax
mov dword [rbp + 0x1a8], 1
mov word [rbp + 0x1b0], r14w
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x1a8]
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_SendInput]
mov dword [rbp + 0x1b4], 2
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x1a8]
lea ecx, [r14 - 0x1f]
call qword [sym.imp.USER32.dll_SendInput]
mov rax, qword [0x180090e40]
mov rdi, qword [0x180090af0]
lea rcx, str.PlayerHealth
mov rbx, qword [rax + r12*8]
mov rax, qword [0x180090a60]
cmp byte [0x180090c61], 0
je 0x18004914f
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov rcx, qword [0x180090e40]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x180090af0]
mov rdx, qword [0x180090a60]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180049d12
test rsi, rsi
jmp 0x1800492b3
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004918f
mov rax, qword [rax]
test rax, rax
je 0x18004918f
mov rcx, r13
call rax
movzx r14d, al
jmp 0x180049192
xor r14b, r14b
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180049d12
test rsi, rsi
je 0x180049d12
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x1800491fb
mov rax, qword [rax]
test rax, rax
je 0x1800491fb
xor edx, edx
mov rcx, rsi
call rax
cmp byte [0x1800650bb], 0
je 0x1800492e6
test r14b, r14b
je 0x1800492e6
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerHealth
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x180049271
mov rax, qword [rax]
test rax, rax
je 0x180049271
mov rcx, r13
call rax
movzx r14d, al
jmp 0x180049274
xor r14b, r14b
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180049d12
test rsi, rsi
je 0x180049d12
test r14b, r14b
je 0x180049d12
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
mov rax, qword [0x180090a18]
call rax
test rax, rax
je 0x1800492e6
mov rax, qword [rax]
test rax, rax
je 0x1800492e6
mov dl, 1
mov rcx, rsi
call rax
cmp byte [0x180090c63], 0
je 0x1800492f9
mov dword [0x180090c58], 5
mov rax, qword [0x180090e40]
mov rdi, qword [0x180090af0]
lea rcx, str.vThirdPersonController
mov rbx, qword [rax + r12*8]
mov rax, qword [0x180090a60]
cmp byte [0x180090c54], 0
je 0x18004935a
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.SetGodMode
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180049396
mov r8, qword [rax]
test r8, r8
je 0x180049396
mov dl, 1
jmp 0x180049390
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.SetGodMode
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180049396
mov r8, qword [rax]
test r8, r8
je 0x180049396
xor edx, edx
mov rcx, rbx
call r8
cmp byte [0x1800650b7], 0
je 0x1800493fb
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.vThirdPersonController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.SetDiveState
mov rcx, qword [rax]
call r9
test rax, rax
je 0x1800493fb
mov r8, qword [rax]
test r8, r8
je 0x1800493fb
xor edx, edx
mov rcx, rbx
call r8
cmp byte [0x180090c5c], 0
je 0x1800497b4
mov rbx, qword [0x180090e40]
cmp rbx, qword [0x180090e48]
je 0x1800497bb
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1800497b4
xor r12d, r12d
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a8], xmm1
mov qword [rbp + 0x1b8], rax
mov r15, qword [0x180090e48]
mov r14, qword [0x180090e40]
cmp r14, r15
je 0x18004a130
nop
mov rdi, qword [r14]
test rdi, rdi
je 0x180049591
mov rbx, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x180049591
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [rax]
call r9
test rax, rax
je 0x1800494c8
mov rax, qword [rax]
test rax, rax
je 0x1800494c8
mov rcx, rbx
call rax
movzx esi, al
jmp 0x1800494cb
xor sil, sil
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x1800494fb
mov rax, qword [rax]
test rax, rax
je 0x1800494fb
mov rcx, rbx
call rax
movzx edi, al
jmp 0x1800494fe
xor dil, dil
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004952b
mov rax, qword [rax]
test rax, rax
je 0x18004952b
mov rcx, rbx
call rax
jmp 0x18004952d
xor al, al
test sil, sil
je 0x180049543
mov rax, qword [0x180090ac8]
mov rcx, rbx
call rax
mov r12, rax
jmp 0x180049591
test dil, dil
jne 0x180049591
test al, al
jne 0x180049591
mov rcx, rbx
call qword [0x180090ac8]
mov qword [rbp + 0x198], rax
test rax, rax
je 0x180049591
mov rdx, qword [rbp + 0x1b0]
cmp rdx, qword [rbp + 0x1b8]
je 0x18004957e
mov qword [rdx], rax
add qword [rbp + 0x1b0], 8
jmp 0x180049591
lea r8, [rbp + 0x198]
lea rcx, [rbp + 0x1a8]
call fcn.18004d060
add r14, 8
cmp r14, r15
jne 0x180049460
test r12, r12
je 0x18004a130
mov rcx, qword [rbp + 0x1a8]
cmp rcx, qword [rbp + 0x1b0]
je 0x18004a137
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x15d4], 0xffffffff
mov dword [rbp + 0x254], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x254], eax
inc rdx
cmp rdx, 0x270
jb 0x1800495e0
mov dword [rbp + 0x250], 0x270
mov rax, qword [rbp + 0x1b0]
mov rsi, qword [rbp + 0x1a8]
sub rax, rsi
sar rax, 3
dec eax
cmp eax, 0x80000000
jb 0x1800496c7
cmp eax, 0xffffffff
jne 0x1800496c7
lea r8, [rbp + 0x258]
mov r9d, 0x270
nop dword [rax]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x630]
shr edx, 1
xor ecx, edx
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x180049650
mov eax, dword [rbp + 0x250]
mov ecx, dword [rbp + rax*4 + 0x254]
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x15d4]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov r8d, ecx
shr r8d, 0x12
xor r8d, ecx
jmp 0x18004970f
lea ebx, [rax + 1]
lea rcx, [rbp + 0x250]
call fcn.18004d530
mov edi, ebx
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jae 0x18004970b
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp r8d, edx
jae 0x18004970b
lea rcx, [rbp + 0x250]
call fcn.18004d530
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jb 0x1800496f3
shr r8, 0x20
movsxd rax, r8d
mov rcx, qword [rsi + rax*8]
mov qword [rbp + 0x1e4], 0
mov dword [rbp + 0x1e0], 0
lea rdx, [rbp + 0x1e0]
call qword [0x180090b60]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
movsd xmm0, qword [rbp + 0x1e0]
movsd qword [rbp + 0x160], xmm0
mov eax, dword [rbp + 0x1e8]
mov dword [rbp + 0x168], eax
lea rdx, [rbp + 0x160]
mov rcx, r12
call qword [0x180090b80]
nop
mov rcx, qword [rbp + 0x1a8]
test rcx, rcx
je 0x1800497b4
mov rdx, qword [rbp + 0x1b8]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800497af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004a16b
call fcn.18004db44
mov rbx, qword [0x180090e40]
mov r12, qword [rbp - 0x78]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
mov rbx, qword [rbx + r12*8]
cmp byte [0x180090a87], 0
je 0x1800498af
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x180049824
mov rdx, qword [rax]
test rdx, rdx
je 0x180049824
mov rcx, r13
call rdx
movzx edi, al
jmp 0x180049827
xor dil, dil
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180049855
mov rax, qword [rax]
test rax, rax
je 0x180049855
mov rcx, r13
call rax
jmp 0x180049857
xor al, al
test rbx, rbx
je 0x180049d12
test al, al
jne 0x180049d12
test dil, dil
je 0x180049d12
movss xmm6, dword [0x1800652d8]
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.set_PlayerSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004996a
mov rax, qword [rax]
test rax, rax
je 0x18004996a
movaps xmm1, xmm6
jmp 0x180049965
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x1800498ee
mov rdx, qword [rax]
test rdx, rdx
je 0x1800498ee
mov rcx, r13
call rdx
movzx edi, al
jmp 0x1800498f1
xor dil, dil
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004991f
mov rax, qword [rax]
test rax, rax
je 0x18004991f
mov rcx, r13
call rax
jmp 0x180049921
xor al, al
test rbx, rbx
je 0x180049d12
test al, al
jne 0x180049d12
test dil, dil
je 0x180049d12
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.set_PlayerSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004996a
mov rax, qword [rax]
test rax, rax
je 0x18004996a
movaps xmm1, xmm9
mov rcx, rbx
call rax
mov rax, qword [0x180090e40]
mov rdi, qword [0x180090af0]
lea rcx, str.PlayerHealth
mov rbx, qword [rax + r12*8]
mov rax, qword [0x180090a60]
cmp byte [0x1800650bb], 0
je 0x180049a4d
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x1800499d7
mov rax, qword [rax]
test rax, rax
je 0x1800499d7
mov rcx, r13
call rax
movzx r14d, al
jmp 0x1800499da
xor r14b, r14b
mov rax, qword [0x180090e40]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180049d12
test rsi, rsi
je 0x180049d12
test r14b, r14b
je 0x180049d12
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x180049ac3
mov rax, qword [rax]
test rax, rax
je 0x180049ac3
mov dl, 1
jmp 0x180049abe
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov rcx, qword [0x180090e40]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x180090af0]
mov rdx, qword [0x180090a60]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180049d12
test rsi, rsi
je 0x180049d12
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x180049ac3
mov rax, qword [rax]
test rax, rax
je 0x180049ac3
xor edx, edx
mov rcx, rsi
call rax
cmp byte [0x1800650b8], 0
je 0x180049d12
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x180049b0e
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
lea rdx, [rbp + 0x198]
xor ecx, ecx
call qword [sym.imp.XINPUT1_3.dll_Ordinal_2]
test eax, eax
jne 0x180049d12
cmp byte [rbp + 0x19e], 0x1e
jbe 0x180049d12
xor r14d, r14d
mov r15d, r14d
movaps xmm11, xmm8
movss xmm9, dword [0x180090e18]
mulss xmm9, xmm10
movss xmm10, dword [0x180090e1c]
mulss xmm10, dword [0x18005c1b8]
movsxd rax, dword [0x18008ffa4]
cmp eax, 0xffffffff
je 0x180049d42
mov rcx, rax
mov rax, qword [0x180090e40]
mov rdi, qword [rax + rcx*8]
test rdi, rdi
je 0x180049cf6
mov rbx, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x180049cf6
mov eax, dword [0x180090c28]
test eax, eax
je 0x180049bc8
cmp eax, 1
jne 0x180049cf6
mov r9, qword [0x180090a18]
lea r8d, [r14 - 1]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call r9
test rax, rax
je 0x180049bfb
mov rax, qword [rax]
test rax, rax
je 0x180049bfb
lea edx, [r14 + 8]
jmp 0x180049bf3
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180049bfb
mov rax, qword [rax]
test rax, rax
je 0x180049bfb
mov edx, 0xb
mov rcx, rbx
call rax
mov r15, rax
test r15, r15
je 0x180049cf6
mov qword [rbp - 0x4c], r14
mov dword [rbp - 0x50], r14d
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [0x180090b60]
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0x178], eax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x170]
call fcn.1800425f0
test al, al
je 0x180049cf6
movss xmm8, dword [rbp + 0xc4]
movaps xmm0, xmm8
subss xmm0, xmm10
cvtps2pd xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm7, dword [rbp + 0xc0]
movaps xmm0, xmm7
subss xmm0, xmm9
cvtps2pd xmm0, xmm0
movsd xmm1, qword [0x18005c230]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x180049ca0
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x180049ca8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
movss xmm2, dword [0x18005c2f4]
comiss xmm2, xmm0
jbe 0x180049cf6
movaps xmm0, xmm9
movss xmm1, dword [0x1800652dc]
subss xmm0, xmm1
comiss xmm7, xmm0
jb 0x180049cf6
addss xmm9, xmm1
comiss xmm9, xmm7
jb 0x180049cf6
movaps xmm0, xmm10
subss xmm0, xmm1
comiss xmm8, xmm0
jb 0x180049cf6
addss xmm10, xmm1
comiss xmm10, xmm8
jae 0x180049f92
mov dword [0x18008ffa4], 0xffffffff
movss xmm10, dword [0x18005c1b8]
movss xmm11, dword [0x18005c22c]
inc r12
mov qword [rbp - 0x78], r12
mov rax, qword [0x180090e48]
sub rax, qword [0x180090e40]
sar rax, 3
cmp r12, rax
jae 0x18004a179
movss xmm9, dword [0x18005c1f0]
jmp 0x180047a03
mov esi, r14d
mov rax, qword [0x180090e48]
sub rax, qword [0x180090e40]
sar rax, 3
test rax, rax
je 0x180049cf6
movsd xmm14, qword [0x18005c230]
nop word [rax + rax]
mov rax, qword [0x180090e40]
mov rdi, qword [r14 + rax]
test rdi, rdi
je 0x180049f5e
mov rbx, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
test rax, rax
je 0x180049f5e
mov rbx, qword [0x180090af0]
mov rax, qword [0x180090a60]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x180049f5e
mov eax, dword [0x180090c28]
test eax, eax
je 0x180049e1e
cmp eax, 1
jne 0x180049f5e
mov r9, qword [0x180090a18]
lea r8d, [rax - 2]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call r9
test rax, rax
je 0x180049e53
mov rax, qword [rax]
test rax, rax
je 0x180049e53
mov edx, 8
mov rcx, rbx
call rax
mov rbx, rax
jmp 0x180049e55
mov rax, qword [0x180090a18]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180049e53
mov rax, qword [rax]
test rax, rax
je 0x180049e53
mov edx, 0xb
mov rcx, rbx
call rax
mov rbx, rax
jmp 0x180049e55
xor ebx, ebx
test rbx, rbx
je 0x180049f5e
mov qword [rbp - 0x40], 0
mov dword [rbp - 0x44], 0
lea rdx, [rbp - 0x44]
mov rcx, rbx
call qword [0x180090b60]
movsd xmm0, qword [rbp - 0x44]
movsd qword [rbp + 0x180], xmm0
mov eax, dword [rbp - 0x3c]
mov dword [rbp + 0x188], eax
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x180]
call fcn.1800425f0
test al, al
je 0x180049f5e
movss xmm8, dword [rbp + 0xcc]
movaps xmm0, xmm8
subss xmm0, xmm10
cvtps2pd xmm0, xmm0
movaps xmm1, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm7, dword [rbp + 0xc8]
movaps xmm0, xmm7
subss xmm0, xmm9
cvtps2pd xmm0, xmm0
movaps xmm1, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x180049efe
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x180049f06
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
comiss xmm11, xmm2
jbe 0x180049f5e
movaps xmm0, xmm9
movss xmm1, dword [0x1800652dc]
subss xmm0, xmm1
comiss xmm7, xmm0
jb 0x180049f5e
movaps xmm0, xmm9
addss xmm0, xmm1
comiss xmm0, xmm7
jb 0x180049f5e
movaps xmm0, xmm10
subss xmm0, xmm1
comiss xmm8, xmm0
jb 0x180049f5e
movaps xmm0, xmm10
addss xmm0, xmm1
comiss xmm0, xmm8
jb 0x180049f5e
movaps xmm11, xmm2
mov r15, rbx
mov dword [0x18008ffa4], esi
inc esi
add r14, 8
mov rdx, qword [0x180090e48]
sub rdx, qword [0x180090e40]
sar rdx, 3
movsxd rax, esi
cmp rax, rdx
jb 0x180049d70
xorps xmm14, xmm14
test r15, r15
je 0x180049cf6
xor r14d, r14d
mov qword [rbp - 0x34], 0
mov dword [rbp - 0x38], 0
lea rdx, [rbp - 0x38]
mov rcx, r15
call qword [0x180090b60]
movsd xmm0, qword [rbp - 0x38]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x78], eax
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x70]
call fcn.1800425f0
movss xmm10, dword [0x18005c1b8]
test al, al
je 0x180049d09
movss xmm6, dword [0x180090e1c]
movss xmm5, dword [0x180090e18]
movaps xmm1, xmm5
mulss xmm1, xmm10
movaps xmm4, xmm6
mulss xmm4, xmm10
movaps xmm3, xmm14
movaps xmm2, xmm14
movss xmm0, dword [0x18006552c]
mulss xmm0, dword [0x18005c320]
cvttss2si eax, xmm0
mov ecx, 3
sub ecx, eax
movss xmm0, dword [rbp + 0xd0]
ucomiss xmm0, xmm14
jp 0x18004a035
je 0x18004a08d
movss xmm7, dword [0x18005c550]
comiss xmm0, xmm1
jbe 0x18004a066
movaps xmm3, xmm1
subss xmm3, xmm0
xorps xmm3, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
addss xmm1, xmm3
comiss xmm1, xmm5
jbe 0x18004a095
movaps xmm3, xmm14
jmp 0x18004a095
comiss xmm1, xmm0
jbe 0x18004a095
movaps xmm3, xmm0
subss xmm3, xmm1
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
addss xmm1, xmm3
comiss xmm14, xmm1
jbe 0x18004a095
movaps xmm3, xmm14
jmp 0x18004a095
movss xmm7, dword [0x18005c550]
movss xmm0, dword [rbp + 0xd4]
ucomiss xmm0, xmm14
jp 0x18004a0a5
je 0x18004a0f3
comiss xmm0, xmm4
jbe 0x18004a0cb
movaps xmm2, xmm4
subss xmm2, xmm0
xorps xmm2, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm1, xmm6
jmp 0x18004a0ed
comiss xmm4, xmm0
jbe 0x18004a0f3
movaps xmm2, xmm0
subss xmm2, xmm4
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm14, xmm1
jbe 0x18004a0f3
movaps xmm2, xmm14
cvttss2si r8, xmm2
cvttss2si rdx, xmm3
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x180049d09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x1a8]
test rcx, rcx
je 0x18004a193
mov rdx, qword [rbp + 0x1b8]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004a172
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004a172
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004db44
jmp 0x18004a193
mov rsi, qword [rbp + 0x190]
mov eax, esi
sub eax, dword [0x180090df0]
cmp eax, 5
jbe 0x18004a193
mov dword [0x180090df0], esi
mov rcx, qword [rbp + 0x15e0]
xor rcx, rsp
call fcn.18004d770
lea r11, [rsp + 0x1790]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret