Function at 0x140002a90
Capabilities:
Access peb ldr_data
Check os version
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x140115040]
xor rax, rsp
mov qword [rbp + 0x38], rax
xor r13d, r13d
mov rsi, qword [0x140115980]
mov qword [rsp + 0x60], rsi
mov r14, qword [0x140115908]
mov qword [rsp + 0x68], r14
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140115a14], eax
jle 0x140002b44
lea rcx, [0x140115a14]
call fcn.1400c20dc
cmp dword [0x140115a14], 0xffffffff
jne 0x140002b44
movss xmm0, dword [r14 + 0x3938]
movss dword [0x140115a10], xmm0
lea rcx, [0x140115a14]
call fcn.1400c2070
mov rax, qword [0x140115908]
mov dword [rax + 0x4ab0], 0x3f79999a
or dword [rax + 0x4a50], 0x42
mov dword [rax + 0x4a70], 0x44354000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 1
mov r8d, 0x22
lea rdx, [0x1401151f1]
lea rcx, str.FiveM___EXTERNAL__
call fcn.140017960
mov rbx, qword [0x140115908]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x140002bba
cmp qword [rbx + 0x4e40], r13
lea rcx, [rdx + 0x268]
je 0x140002bc1
lea rcx, [rdx + 0x238]
movsd xmm0, qword [rcx]
movaps xmm1, xmm0
shufps xmm1, xmm1, 0x55
movsd qword [rbp - 0x50], xmm0
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp - 0x50], 0x42c80000
movss dword [rbp - 0x4c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.SelectChild
call fcn.14000bd00
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002c34
lea r8, str.SelectChild
mov edx, 0xb
mov ecx, eax
call fcn.1400268d0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.SelectChild
call fcn.140014680
mov ebx, r13d
mov rax, qword [0x140115968]
mov rdx, qword [0x140115960]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140002d20
mov dword [rbp - 0x4c], 0x420c0000
mov rdi, r13
nop dword [rax]
cmp dword [0x1401159ac], ebx
sete byte [rbp - 0x48]
mov rax, qword [0x140115908]
mov r8, qword [rax + 0x4040]
mov rcx, r8
cmp qword [r8 + 0x1c0], r13
jne 0x140002cb6
cmp qword [rax + 0x4e40], r13
jne 0x140002cb6
add rcx, 0x268
jmp 0x140002cbd
add rcx, 0x238
movsd xmm0, qword [rcx]
movsd qword [rbp - 0x40], xmm0
subss xmm0, dword [r8 + 0x118]
movss dword [rbp - 0x50], xmm0
lea rcx, [rdi + rdx]
cmp qword [rcx + 0x18], 0xf
jbe 0x140002ce2
mov rcx, qword [rcx]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
call fcn.140008ef0
test al, al
je 0x140002cf9
mov dword [0x1401159ac], ebx
inc ebx
add rdi, 0x20
mov rcx, qword [0x140115968]
mov rdx, qword [0x140115960]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x140002c80
call fcn.140014a10
movss xmm6, dword [0x140104698]
movaps xmm1, xmm6
xorps xmm7, xmm7
xorps xmm0, xmm0
call fcn.14001e2b0
mov rbx, qword [0x140115908]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x140002d62
cmp qword [rbx + 0x4e40], r13
lea rcx, [rdx + 0x268]
je 0x140002d69
lea rcx, [rdx + 0x238]
movsd xmm1, qword [rcx]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
subss xmm0, dword [rdx + 0x11c]
movsd qword [rbp - 0x50], xmm1
subss xmm1, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm1
movss dword [rbp - 0x4c], xmm0
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.ContextChild
call fcn.14000bd00
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002de2
lea r8, str.ContextChild
mov edx, 0xb
mov ecx, eax
call fcn.1400268d0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.ContextChild
call fcn.140014680
cmp dword [0x1401159ac], 3
je 0x140002f2a
mov rax, qword [0x140115908]
mov r8, qword [rax + 0x4040]
mov rcx, r8
mov r9, qword [r8 + 0x1c0]
test r9, r9
jne 0x140002e52
cmp qword [rax + 0x4e40], r13
jne 0x140002e52
movsd xmm0, qword [r8 + 0x268]
movaps xmm1, xmm0
shufps xmm1, xmm1, 0x55
movsd qword [rbp - 0x50], xmm0
subss xmm1, dword [r8 + 0x11c]
mov rdx, rcx
jmp 0x140002e7b
movsd xmm1, qword [r8 + 0x238]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x50], xmm1
subss xmm0, dword [r8 + 0x11c]
movaps xmm1, xmm0
mov rdx, rcx
test r9, r9
jne 0x140002e8d
cmp qword [rax + 0x4e40], r13
jne 0x140002e8d
add rdx, 0x268
jmp 0x140002e94
add rdx, 0x238
movsd xmm0, qword [rdx]
movsd qword [rbp - 0x50], xmm0
subss xmm0, dword [r8 + 0x118]
mulss xmm0, dword [0x140104554]
subss xmm0, dword [0x140104600]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
mov byte [r8 + 0xcc], 1
mov rbx, qword [rax + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.LeftChild
call fcn.14000bd00
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002f10
lea r8, str.LeftChild
mov edx, 0xb
mov ecx, eax
call fcn.1400268d0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.LeftChild
call fcn.140014680
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002f5f
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov ecx, dword [0x1401159ac]
lea r15, str._.1f
movss xmm8, dword [0x140104594]
test ecx, ecx
je 0x140003ff8
sub ecx, 1
je 0x140003d10
sub ecx, 1
je 0x140003b0d
sub ecx, 1
je 0x140003187
cmp ecx, 1
jne 0x1400041e7
lea rcx, str.System
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140002ff6
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140002fe6
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003024
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x140115251]
lea rcx, str.StreamProof
call fcn.140041970
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x14000306c
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
call fcn.140042a70
lea rcx, str.Crosshair
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x1400030c6
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x1400030b6
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x1400030f4
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x140115252]
lea rcx, str.Crosshair
call fcn.140041970
mov dword [rbp - 0x40], 0xa
mov dword [rbp - 0x50], 1
lea rcx, str.CrosshairSize
call fcn.14003f830
lea rax, [0x1401020b4]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, [0x140115258]
mov edx, 4
lea rcx, str.SizeCH
call fcn.1400453e0
lea rdx, [rsi + 0x180]
xor r8d, r8d
lea rcx, str.ColorC
call fcn.14004c7c0
lea r9, str.Cross
lea rdx, [0x140115254]
lea rcx, str.TypeC
call fcn.140043f90
jmp 0x1400041e7
mov qword [rbp - 0x50], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r15, [0x1401159d0]
mov r8, r15
xor edx, edx
lea rcx, str.SerchPlayer
call fcn.1400487a0
mov qword [rbp - 0x50], r13
movss dword [rsp + 0x20], xmm7
lea r9, [rbp - 0x50]
call fcn.1400374b0
test al, al
je 0x140003b01
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003229
cmp byte [rbx + 0x237], r13b
je 0x140003217
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003217
cmp ecx, 0xffffffff
je 0x140003210
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003221
xorps xmm1, xmm1
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
lea rcx, str.Name
call fcn.14003f830
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003282
cmp byte [rbx + 0x237], r13b
je 0x140003270
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003270
cmp ecx, 0xffffffff
je 0x140003269
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000327a
xorps xmm1, xmm1
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
lea rcx, str.Alive
call fcn.14003f830
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400032db
cmp byte [rbx + 0x237], r13b
je 0x1400032c9
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400032c9
cmp ecx, 0xffffffff
je 0x1400032c2
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400032d3
xorps xmm1, xmm1
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
lea rcx, str.Vehicle
call fcn.14003f830
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003334
cmp byte [rbx + 0x237], r13b
je 0x140003322
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003322
cmp ecx, 0xffffffff
je 0x14000331b
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000332c
xorps xmm1, xmm1
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
lea rcx, str.Position
call fcn.14003f830
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x14000338d
cmp byte [rbx + 0x237], r13b
je 0x14000337b
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x14000337b
cmp ecx, 0xffffffff
je 0x140003374
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003385
xorps xmm1, xmm1
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
lea rcx, [0x140102060]
call fcn.14003f830
mov r12, qword [rsi + 0xf8]
mov qword [rbp - 0x40], r12
mov rdx, qword [rsi + 0x100]
mov qword [rbp - 0x50], rdx
cmp r12, rdx
je 0x140003afc
movabs rsi, 0x8000000000000000
movabs r14, 0x7fffffffffffffff
movdqa xmm9, xmmword [0x140104a10]
movdqa xmm10, xmmword [0x140104a40]
mov rax, rdx
mov rdx, qword [r12 + 0x10]
test rdx, rdx
je 0x14000360e
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
add rdx, 0xfc
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x18]
mov rcx, qword [0x140115950]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r13
lea rax, [rbp + 0x18]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140003440
cmp rbx, r14
ja 0x140004c86
cmp rbx, 0xf
ja 0x14000347e
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
mov r8, rbx
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x30], 0
jmp 0x14000350a
mov rdi, rbx
or rdi, 0xf
cmp rdi, r14
jbe 0x140003493
mov rdi, r14
lea rax, [rsi + 0x27]
jmp 0x1400034c4
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400034ae
mov rsi, r13
jmp 0x1400034eb
cmp rcx, 0x1000
jb 0x1400034e3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004c8c
mov rcx, rax
call fcn.1400c2000
test rax, rax
je 0x140003aeb
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400034eb
call fcn.1400c2000
mov rsi, rax
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
mov r8, rbx
lea rdx, [rbp + 0x18]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov r13, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x30]
lea rax, [0x14010206c]
cmp r15, rax
je 0x140003645
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [r15 + rdi], 0
jne 0x140003530
lea r14, [rbp - 0x30]
cmp r13, 0xf
cmova r14, rsi
mov rax, qword [rbp - 0x20]
cmp rdi, rax
ja 0x1400035bc
test rdi, rdi
je 0x14000363b
sub rax, rdi
lea r15, [rax + r14]
movsx r12d, byte [0x1401159d0]
lea r8, [r15 + 1]
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400035b8
mov r8, rdi
lea rdx, [0x1401159d0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000362e
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003581
mov r12, qword [rbp - 0x40]
cmp r13, 0xf
jbe 0x1400035f3
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400035eb
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aeb
mov rcx, rsi
call fcn.1400c203c
xor r13d, r13d
movabs r14, 0x7fffffffffffffff
movabs rsi, 0x8000000000000000
mov rax, qword [rbp - 0x50]
add r12, 0xf8
mov qword [rbp - 0x40], r12
cmp r12, rax
je 0x140003af2
lea r15, [0x1401159d0]
jmp 0x1400033e1
sub rbx, r14
mov r12, qword [rbp - 0x40]
cmp rbx, 0xffffffffffffffff
je 0x1400035bc
movabs r14, 0x7fffffffffffffff
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x14000369a
cmp byte [rbx + 0x237], 0
je 0x140003680
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003680
cmp ecx, 0xffffffff
je 0x140003679
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000368a
movaps xmm1, xmm7
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
mov rsi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x18]
lea rcx, [rbp - 0x30]
cmp r13, 0xf
cmova rcx, rsi
call fcn.14003f830
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400036f8
cmp byte [rbx + 0x237], 0
je 0x1400036e6
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400036e6
cmp ecx, 0xffffffff
je 0x1400036df
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400036f0
movaps xmm1, xmm7
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
movss xmm4, dword [r12 + 0x28]
comiss xmm7, xmm4
jae 0x140003745
mov dword [rsp + 0x78], 0
movsd xmm3, qword [r12 + 0x30]
movss xmm0, dword [r12 + 0x38]
movlhps xmm3, xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm7
xorps xmm2, xmm2
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x78]
movlhps xmm2, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x140003745
xor al, al
jmp 0x140003747
mov al, 1
lea rdx, [0x140102074]
test al, al
lea rdi, [0x140102070]
cmove rdx, rdi
comiss xmm7, xmm4
jae 0x1400037aa
mov dword [rsp + 0x48], 0
movsd xmm3, qword [r12 + 0x30]
movss xmm0, dword [r12 + 0x38]
movlhps xmm3, xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm7
xorps xmm2, xmm2
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x48]
movlhps xmm2, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x1400037aa
movups xmmword [rsp + 0x7c], xmm10
lea rax, [rsp + 0x7c]
jmp 0x1400037b3
movups xmmword [rbp - 0x74], xmm9
lea rax, [rbp - 0x74]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.14003f8a0
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003810
cmp byte [rbx + 0x237], 0
je 0x1400037fe
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400037fe
cmp ecx, 0xffffffff
je 0x1400037f7
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003808
movaps xmm1, xmm7
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
mov rdx, qword [0x140115198]
add rdx, qword [r12]
mov byte [rbp - 0x48], 0
xor r13d, r13d
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x48]
mov rcx, qword [0x140115950]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x48], 0x40
lea rbx, [0x140102074]
cmovne rbx, rdi
mov rdx, qword [0x140115198]
add rdx, qword [r12]
mov byte [rbp - 0x48], r13b
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x48]
mov rcx, qword [0x140115950]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x48], 0x40
je 0x140003889
movups xmmword [rbp - 0x64], xmm10
lea rax, [rbp - 0x64]
jmp 0x140003894
movups xmmword [rsp + 0x50], xmm9
lea rax, [rsp + 0x50]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14003f8a0
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400038f4
cmp byte [rbx + 0x237], r13b
je 0x1400038e2
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400038e2
cmp ecx, 0xffffffff
je 0x1400038db
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400038ec
movaps xmm1, xmm7
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
movss xmm3, dword [r12 + 0x38]
cvtps2pd xmm3, xmm3
movss xmm2, dword [r12 + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [r12 + 0x30]
cvtps2pd xmm1, xmm1
movq r9, xmm3
movq r8, xmm2
movq rdx, xmm1
lea rcx, str._.f___.f___.f
call fcn.14003f830
mov rax, qword [0x140115908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x14000397a
cmp byte [rbx + 0x237], r13b
je 0x140003968
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003968
cmp ecx, 0xffffffff
je 0x140003961
mov rcx, rbx
call fcn.14003b4c0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003972
movaps xmm1, xmm7
call fcn.14003a8a0
xor edx, edx
mov rcx, rbx
call fcn.14003b2f0
mov rsi, qword [rbp - 0x20]
mov rax, r14
sub rax, rsi
cmp rax, 0xa
jb 0x140004c98
lea r15, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r15, qword [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
lea r14, [rsi + 0xa]
mov edi, 0xf
lea rbx, [rbp - 8]
cmp r14, rdi
jbe 0x140003a3e
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x1400039e2
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140003a13
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400039fd
mov rbx, r13
jmp 0x140003a3a
cmp rcx, 0x1000
jb 0x140003a32
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004c92
mov rcx, rax
call fcn.1400c2000
test rax, rax
je 0x140003ae4
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140003a3a
call fcn.1400c2000
mov rbx, rax
mov qword [rbp - 8], rbx
mov qword [rbp + 0x10], rdi
movsd xmm0, qword [str.Teleport]
movsd qword [rbx], xmm0
movzx ecx, word [0x140102090]
mov word [rbx + 8], cx
lea rcx, [rbx + 0xa]
mov r8, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], r13b
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140003aa4
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ae4
call fcn.1400c203c
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x1400035f6
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ada
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aeb
call fcn.1400c203c
jmp 0x1400035f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rsi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
call fcn.140039f30
lea r15, str._.1f
jmp 0x1400041e7
lea rcx, str.Visual
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003b62
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003b52
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003b90
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x140115238]
lea rcx, [0x140101fc4]
call fcn.140041970
lea rdx, [0x140115239]
lea rcx, str.NPC_ESP
call fcn.140041970
lea rdx, [0x140115241]
lea rcx, str.Visible_Check
call fcn.140041970
call fcn.140042a70
mov r11, qword [0x140115908]
mov rax, qword [r11 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r11 + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003c03
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rcx, str.ESP_Options
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003c58
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003c48
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003c86
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x14011523a]
lea rcx, [0x140101fdc]
call fcn.140041970
lea rdx, [0x14011523b]
lea rcx, str.BoxFilled
call fcn.140041970
lea rdx, [0x14011523c]
lea rcx, str.Line
call fcn.140041970
lea rdx, [0x14011523d]
lea rcx, str.Name
call fcn.140041970
lea rdx, [0x14011523e]
lea rcx, str.Skeleton
call fcn.140041970
lea rdx, [0x14011523f]
lea rcx, str.Distance
call fcn.140041970
lea rdx, [0x140115240]
lea rcx, str.HealthBar
call fcn.140041970
jmp 0x1400041e7
lea rcx, str.Aimbot
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003d65
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003d55
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003d93
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x140115218]
lea rcx, str.AimBot
call fcn.140041970
lea rdx, [0x14011521a]
lea rcx, str.Prediction
call fcn.140041970
lea rdx, [0x14011521c]
lea rcx, str.Visible_Check
call fcn.140041970
lea rdx, [0x14011521d]
lea rcx, str.Magic_Bullet
call fcn.140041970
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003e14
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
call fcn.140042a70
lea rcx, str.Aim_Options
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003e6e
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003e5e
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003e9c
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x140115219]
lea rcx, str.Aim_at_NPC
call fcn.140041970
lea r9, str.Head
lea rdx, [0x14011522c]
lea rcx, str.AimBone
call fcn.140043f90
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003efe
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
call fcn.140042a70
lea rcx, [0x140101e34]
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003f58
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003f48
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003f86
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x14011521b]
lea rcx, str.DrawFOV
call fcn.140041970
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x3f800000
lea rcx, [0x140101e34]
call fcn.14003f830
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140115220]
mov edx, 8
lea rcx, str.aim_fov
call fcn.1400453e0
lea rdx, [rsi + 0x170]
xor r8d, r8d
lea rcx, str.FOV_Color
call fcn.14004c7c0
jmp 0x1400041e7
lea rcx, str.Player
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x14000404d
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x14000403d
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x14000407b
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x14011524c]
lea rcx, str.GodMode
call fcn.140041970
test al, al
je 0x140004099
mov byte [0x14011524d], r13b
lea rdx, [0x14011524d]
lea rcx, str.Heal_Me
call fcn.140041970
test al, al
je 0x1400040b7
mov byte [0x14011524c], r13b
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x1400040ec
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
call fcn.140042a70
lea rcx, str.Weapon
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140004146
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140004136
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140004174
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rdx, [0x14011524e]
lea rcx, str.NoRecoil
call fcn.140041970
lea rdx, [0x14011524f]
lea rcx, str.NoSpread
call fcn.140041970
lea rdx, [0x140115250]
lea rcx, str.RangeBypass
call fcn.140041970
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x1400041e2
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
call fcn.140042a70
cmp dword [0x1401159ac], 3
je 0x1400041f5
call fcn.140014a10
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14001e2b0
cmp dword [0x1401159ac], 3
je 0x1400042d1
mov rbx, qword [0x140115908]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], 0
jne 0x140004236
cmp qword [rbx + 0x4e40], 0
lea rcx, [rdx + 0x268]
je 0x14000423d
lea rcx, [rdx + 0x238]
movsd xmm1, qword [rcx]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
subss xmm0, dword [rdx + 0x11c]
movsd qword [rbp - 0x10], xmm1
subss xmm1, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm1
movss dword [rbp - 0x4c], xmm0
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.RightChild
call fcn.14000bd00
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x1400042b7
lea r8, str.RightChild
mov edx, 0xb
mov ecx, eax
call fcn.1400268d0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.RightChild
call fcn.140014680
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000430a
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov ecx, dword [0x1401159ac]
sub ecx, 1
je 0x14000477c
sub ecx, 1
je 0x140004477
cmp ecx, 2
jne 0x140004419
lea rcx, str.Exit
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004381
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x140004371
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400043ba
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
mov rax, rdx
cmp qword [rdx + 0x1c0], 0
jne 0x1400043e0
cmp qword [rcx + 0x4e40], 0
jne 0x1400043e0
add rax, 0x268
jmp 0x1400043e6
add rax, 0x238
movsd xmm0, qword [rax]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm0
mov dword [rbp - 0x4c], 0x41f00000
lea rdx, [rbp - 0x50]
lea rcx, str.Exit
call fcn.140040570
test al, al
je 0x140004419
mov byte [0x1401151f0], 0
cmp dword [0x1401159ac], 3
je 0x140004427
call fcn.140014a10
call fcn.140014a10
call fcn.140019f50
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400c1fe0
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.ESP_Setting
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400044cd
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400044bd
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400044ff
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov dword [rbp - 0x50], 0x44fa0000
mov dword [rbp - 0x40], 0x42c80000
lea rcx, str.Distance
call fcn.14003f830
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140115248]
mov edx, 8
lea rcx, str.Dist
call fcn.1400453e0
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004583
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400045b5
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea r9, str.Simple
lea rdx, [0x140115244]
lea rcx, str.BoxType
call fcn.140043f90
call fcn.140042a70
mov r11, qword [0x140115908]
mov rax, qword [r11 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r11 + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000460d
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rcx, str.ESP_Colors
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004663
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x140004653
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004695
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rcx, str.Main_Color
call fcn.14003f990
lea rdx, [rsi + 0x120]
xor r8d, r8d
lea rcx, [0x1401021c4]
call fcn.14004c7c0
lea rdx, [rsi + 0x130]
xor r8d, r8d
lea rcx, str.Player
call fcn.14004c7c0
lea rdx, [rsi + 0x140]
xor r8d, r8d
lea rcx, str.GodMode
call fcn.14004c7c0
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004723
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004755
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rcx, str.Sub_Color
call fcn.14003f990
lea rdx, [rsi + 0x160]
xor r8d, r8d
lea rcx, str.BoxFilled
call fcn.14004c7c0
jmp 0x140004419
lea rcx, str.Setting
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400047d2
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400047c2
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004804
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov dword [r14 + 0x3938], 0x40400000
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x3f800000
lea rcx, [0x140101e34]
call fcn.14003f830
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140115220]
mov edx, 8
lea rcx, str.aim_fov
call fcn.1400453e0
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x40], 0x3f800000
lea rcx, str.Smooth
call fcn.14003f830
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140115224]
mov edx, 8
lea rcx, str.aim_smt
call fcn.1400453e0
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x42480000
lea rcx, str.Distance
call fcn.14003f830
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140115228]
mov edx, 8
lea rcx, str.aim_dist
call fcn.1400453e0
movss xmm0, dword [0x140115a10]
movss dword [r14 + 0x3938], xmm0
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000492c
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000495e
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea r9, [0x140115110]
lea rdx, [0x140115230]
lea rcx, str.AimType
call fcn.140043f90
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400049b1
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
call fcn.140042a70
lea rcx, str.KeyBind
call fcn.14003f830
mov rcx, qword [0x140115908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004a0c
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400049fc
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140042b10
mov rcx, qword [0x140115908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004a3e
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rcx, str.1st_Key:
call fcn.14003f830
mov dword [rbp - 0x50], 0x43570000
mov dword [rbp - 0x4c], 0x41b40000
lea rdi, [0x140101a30]
lea rbx, str.__Press_Any_Key__
cmp dword [0x1401159a8], 1
jne 0x140004a74
mov rcx, rbx
jmp 0x140004a7f
movsxd rax, dword [0x140115260]
mov rcx, qword [rdi + rax*8]
lea rdx, [rbp - 0x50]
call fcn.140040570
test al, al
je 0x140004b07
mov dword [0x1401159a8], 1
mov ecx, 1
call fcn.1400c2000
mov qword [rbp - 0x10], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140004f60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004c58
cmp dword [rsp + 0x48], 0
je 0x140004c4c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140004c4c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x14010462c]
call fcn.14001e360
lea r9, [0x1401150d0]
lea rdx, [0x140115234]
lea rcx, str.KeyMode
call fcn.140043f90
mov r9, qword [0x140115908]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004b9f
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001e140
lea rcx, str.2nd_Key:
call fcn.14003f830
mov dword [rbp - 0x50], 0x43570000
mov dword [rbp - 0x4c], 0x41b40000
cmp dword [0x1401159a8], 2
je 0x140004bcd
movsxd rax, dword [0x140115264]
mov rbx, qword [rdi + rax*8]
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.140040570
test al, al
je 0x140004419
mov dword [0x1401159a8], 2
mov ecx, 1
call fcn.1400c2000
mov qword [rbp - 0x10], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140005010]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004c75
cmp dword [rsp + 0x48], 0
je 0x140004c69
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140004c69
jmp 0x140004419
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140002a70
int3
call fcn.140001500
nop
call fcn.140001500
int3
call fcn.140002a70
int3