Function at 0x1800047b0
Capabilities:
Enumerate processes
Get graphical window text
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x1c0
mov rax, qword [0x18008e070]
xor rax, rsp
mov qword [rsp + 0x198], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800047eb
cmp byte [0x18008ec89], 0
sete byte [0x18008ec89]
mov qword [rsp + 0x1e0], rbx
mov ecx, 0x2e
mov qword [rsp + 0x1e8], rdi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ebp, ebp
bt ax, 0xf
lea r14d, [rbp + 1]
jae 0x1800048b7
xor edx, edx
mov dword [rsp + 0x50], 0x130
lea ecx, [rbp + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rsp + 0x50]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1800048a3
lea rdi, str.dwm.exe
nop word [rax + rax]
mov rcx, rbp
lea rdx, [rsp + 0x7c]
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rdi + rcx - 1]
jne 0x180004970
cmp rcx, 8
jne 0x180004860
mov r8d, dword [rsp + 0x58]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x1800048a3
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180004a02
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x100
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
je 0x1800049f7
lea rdx, str.STALCRAFT
lea rcx, [rsp + 0x50]
call fcn.18006cbd0
test eax, eax
jne 0x1800049f7
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsZoomed]
mov rcx, rdi
test eax, eax
je 0x18000498b
mov edx, 9
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0xfffffff0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xfffffff0
mov rcx, rdi
or eax, 0xc80000
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 0x27
xor r9d, r9d
mov dword [rsp + 0x28], ebp
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], ebp
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x1800049f7
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x180004850
jmp 0x1800048a3
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xfffffff0
mov rcx, rdi
and eax, 0xff37ffff
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, r14d
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x30], 0x27
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], ebx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 3
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x18008ec89], r14b
jne 0x180006527
mov qword [rsp + 0x1f0], r12
mov ecx, 0x21
mov qword [rsp + 0x1b8], r13
mov qword [rsp + 0x1b0], r15
movaps xmmword [rsp + 0x1a0], xmm6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm6, dword [0x1800830fc]
test r14b, al
je 0x180004a73
movss xmm0, dword [0x18008ec80]
addss xmm0, xmm6
comiss xmm0, dword [0x180083150]
movss dword [0x18008ec80], xmm0
jbe 0x180004a6e
mov dword [0x18008ec80], 0x3f666666
call fcn.180002d80
mov ecx, 0x22
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x180004aaf
movss xmm0, dword [0x18008ec80]
addss xmm0, dword [0x180083220]
comiss xmm6, xmm0
movss dword [0x18008ec80], xmm0
jbe 0x180004aaa
mov dword [0x18008ec80], 0x3d4ccccd
call fcn.180002d80
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
lea rbp, str.ESP_Box
lea r13, str.Bags__Backpacks_
lea r12, str.Distance
lea rbx, str.Draw_fov
lea rdi, [0x18007e134]
lea r14, str.NpcEsp
lea r15, str.Fill_Box
jae 0x180004db2
mov rcx, qword [0x18008ec98]
cmp rcx, rbp
jne 0x180004b1c
cmp byte [0x180090e25], 0
sete byte [0x180090e25]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Barter_ESP
cmp rcx, rax
jne 0x180004b42
cmp byte [0x180090e22], 0
sete byte [0x180090e22]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Artefact
cmp rcx, rax
jne 0x180004b68
cmp byte [0x180090e28], 0
sete byte [0x180090e28]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, [0x18007dbd4]
cmp rcx, rax
jne 0x180004b8e
cmp byte [0x180090e29], 0
sete byte [0x180090e29]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
cmp rcx, r13
jne 0x180004bad
cmp byte [0x180090e2a], 0
sete byte [0x180090e2a]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Tracers
cmp rcx, rax
jne 0x180004bd3
cmp byte [0x180090e23], 0
sete byte [0x180090e23]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
cmp rcx, r12
jne 0x180004bf2
cmp byte [0x180090e41], 0
sete byte [0x180090e41]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
cmp rcx, rbx
jne 0x180004c11
cmp byte [0x180090e2b], 0
sete byte [0x180090e2b]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
cmp rcx, rdi
jne 0x180004c30
cmp byte [0x180090e26], 0
sete byte [0x180090e26]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
cmp rcx, r14
jne 0x180004c4f
cmp byte [0x180090e2d], 0
sete byte [0x180090e2d]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Item_ESP
cmp rcx, rax
jne 0x180004c75
cmp byte [0x180090e27], 0
sete byte [0x180090e27]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Mob_ESP
cmp rcx, rax
jne 0x180004c9b
cmp byte [0x180090e21], 0
sete byte [0x180090e21]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
movzx eax, byte [0x180090e20]
lea rdx, str.Bind
cmp rcx, rdx
mov edx, 1
cmove eax, edx
mov byte [0x180090e20], al
lea rax, str.Predict
cmp rcx, rax
jne 0x180004ce0
cmp byte [0x180090e2f], 0
sete byte [0x180090e2f]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
cmp rcx, r15
jne 0x180004cff
cmp byte [0x180090e40], 0
sete byte [0x180090e40]
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Head
cmp rcx, rax
jne 0x180004d35
cmp byte [0x18008ec88], 0
jne 0x180004d35
mov byte [0x180090e2c], 0
mov byte [0x18008ec88], 1
mov byte [0x180090e24], 0
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Body
cmp rcx, rax
jne 0x180004d6b
cmp byte [0x180090e2c], 0
jne 0x180004d6b
mov byte [0x180090e2c], 1
mov byte [0x18008ec88], 0
mov byte [0x180090e24], 0
call fcn.180002d80
mov rcx, qword [0x18008ec98]
lea rax, str.Neck
cmp rcx, rax
jne 0x180004da0
cmp byte [0x180090e24], 0
jne 0x180004da0
mov byte [0x180090e2c], 0
mov byte [0x18008ec88], 0
mov byte [0x180090e24], 1
call fcn.180002d80
nop word [rax + rax]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180004da0
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180004ee4
mov rcx, qword [0x18008ec98]
movzx edx, byte [0x180090e29]
cmp rcx, r14
jne 0x180004dfc
test dl, dl
mov rax, rdi
cmove rax, rcx
mov rcx, rax
cmp rax, r14
jne 0x180004dfc
test dl, dl
lea rax, [0x18007dbd4]
cmovne rax, rcx
mov rcx, rax
cmp rcx, rbp
lea r8, str.Barter_ESP
lea r9, str.Item_ESP
lea rax, [0x18007dbd4]
cmovne rax, rcx
mov rcx, r9
cmp rax, r8
lea r8, str.Tracers
cmovne rcx, rax
mov rax, rbp
cmp rcx, r8
cmovne rax, rcx
mov rcx, r8
cmp rax, r13
lea r8, str.Mob_ESP
cmovne rcx, rax
mov rax, r13
cmp rcx, r8
cmovne rax, rcx
mov rcx, r8
cmp rax, r9
lea r8, str.Body
cmovne rcx, rax
lea rax, str.Head
cmp rcx, r8
cmovne rax, rcx
mov rcx, r8
lea r8, str.Neck
cmp rax, r8
cmovne rcx, rax
mov qword [0x18008ec98], rcx
cmp rcx, r15
jne 0x180004ea1
test dl, dl
lea rax, [0x18007dbd4]
mov rcx, rbx
cmove rcx, rax
mov qword [0x18008ec98], rcx
cmp rcx, r12
jne 0x180004ed2
movzx ecx, byte [0x180090e25]
mov rax, r15
test cl, cl
cmove rax, rbp
mov qword [0x18008ec98], rax
cmp rax, r12
jne 0x180004ed2
test cl, cl
mov rax, r15
cmove rax, rbp
mov qword [0x18008ec98], rax
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180004ed2
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180005052
mov rcx, qword [0x18008ec98]
movzx r8d, byte [0x180090e25]
cmp rcx, rdi
jne 0x180004f1b
test r8b, r8b
mov rax, r14
cmove rax, rcx
mov rcx, rax
lea rdx, str.Body
cmp rcx, rdx
lea rax, str.Neck
cmovne rax, rcx
mov rcx, rdx
lea rdx, str.Head
cmp rax, rdx
lea rdx, str.Mob_ESP
cmovne rcx, rax
lea rax, str.Item_ESP
cmp rcx, rdx
cmovne rax, rcx
mov rcx, rdx
cmp rax, r13
lea rdx, str.Tracers
cmovne rcx, rax
mov rax, r13
cmp rcx, rdx
cmovne rax, rcx
mov rcx, rdx
cmp rax, rbp
cmovne rcx, rax
cmp rcx, rdi
jne 0x180004f8d
test r8b, r8b
mov rax, rbp
cmovne rax, rcx
mov rcx, rax
lea rdx, [0x18007dbd4]
mov rax, rbp
cmp rcx, rdx
mov rdx, r12
cmovne rax, rcx
mov rcx, r13
cmp rax, r12
cmovne rcx, rax
cmp rcx, r15
cmovne rdx, rcx
lea rcx, str.Bind
mov qword [0x18008ec98], rdx
cmp rdx, rcx
jne 0x180004ff2
test r8b, r8b
mov rax, r14
cmove rax, rdx
mov qword [0x18008ec98], rax
mov rdx, rax
cmp rax, rcx
jne 0x180004ff2
test r8b, r8b
mov rax, rbp
cmovne rax, rdx
mov rdx, rax
mov qword [0x18008ec98], rax
cmp rdx, rbx
jne 0x180005008
test r8b, r8b
mov rdx, r15
cmove rdx, rbp
mov qword [0x18008ec98], rdx
lea rax, str.Predict
cmp rdx, rax
jne 0x180005025
test r8b, r8b
mov rdx, r14
cmove rdx, rbp
mov qword [0x18008ec98], rdx
cmp rdx, rdi
jne 0x180005040
test r8b, r8b
mov rax, r14
cmove rax, rdx
mov qword [0x18008ec98], rax
nop dword [rax + rax]
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005040
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180005152
cmp qword [0x18008ec98], rbx
lea rdx, str.Barter_ESP
lea rcx, [0x18007dbd4]
cmovne rcx, qword [0x18008ec98]
lea rax, str.Item_ESP
cmp rcx, rdx
cmovne rax, rcx
mov rcx, rdx
lea rdx, str.Artefact
cmp rax, rdx
lea rdx, str.Body
cmovne rcx, rax
lea rax, str.Tracers
cmp rcx, r12
cmovne rax, rcx
mov rcx, r12
cmp rax, rdx
lea rdx, str.Predict
cmovne rcx, rax
mov rax, rbx
cmp rcx, rdi
cmovne rax, rcx
mov rcx, rdi
cmp rax, rdx
cmovne rcx, rax
mov rax, rdx
lea rdx, str.Bind
cmp rcx, rdx
mov rdx, r15
cmovne rax, rcx
mov rcx, rbp
cmp rax, r15
cmovne rcx, rax
mov rax, r13
cmp rcx, r14
cmovne rdx, rcx
lea rcx, str.Neck
cmp rdx, rcx
lea rcx, str.Head
cmovne rax, rdx
mov qword [0x18008ec98], rax
cmp rax, rcx
jne 0x180005140
cmp byte [0x180090e25], 0
mov rax, r14
cmove rax, rbp
mov qword [0x18008ec98], rax
nop dword [rax]
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005140
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180005297
mov rdx, qword [0x18008ec98]
lea rcx, str.Predict
movzx r8d, byte [0x180090e29]
cmp rdx, rcx
jne 0x180005194
test r8b, r8b
lea rax, str.Bind
cmove rax, rdx
mov rdx, rax
cmp rdx, rdi
cmovne rcx, rdx
cmp rcx, r13
jne 0x1800051b1
test r8b, r8b
lea rax, str.Neck
cmove rax, rcx
mov rcx, rax
movzx r9d, byte [0x180090e25]
lea rdx, str.Barter_ESP
cmp rcx, rdx
lea rax, str.Artefact
lea r10, str.Head
cmovne rax, rcx
mov rcx, rdx
lea rdx, str.Item_ESP
cmp rax, rdx
mov rdx, r10
cmovne rcx, rax
cmp rcx, r14
cmovne rdx, rcx
cmp rdx, rbp
jne 0x180005202
test r9b, r9b
mov rax, r10
cmovne rax, rdx
mov rdx, rax
cmp rdx, r15
mov rax, r14
mov rcx, rdi
cmovne rax, rdx
cmp rax, rbx
cmovne rcx, rax
lea rax, [0x18007dbd4]
cmp rcx, rax
jne 0x18000522f
test r8b, r8b
mov rax, rbx
cmove rax, rcx
mov rcx, rax
cmp rcx, r12
jne 0x180005245
test r8b, r8b
lea rax, str.Body
cmove rax, rcx
mov rcx, rax
lea rax, str.Tracers
mov rdx, r12
cmp rcx, rax
cmovne rdx, rcx
mov qword [0x18008ec98], rdx
test r9b, r9b
je 0x180005285
cmp rdx, r15
jne 0x180005274
test r8b, r8b
mov rax, r10
cmove rax, rdx
mov rdx, rax
cmp rdx, rbp
mov rax, r15
cmovne rax, rdx
mov qword [0x18008ec98], rax
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x180005285
mov rax, qword [0x180090e50]
mov ecx, 1
movaps xmm0, xmmword [0x1800836e0]
movaps xmm1, xmmword [0x180083670]
or dword [rax + 0x1cf0], 2
mov dword [rax + 0x1d10], 0x43ff0000
mov dword [rax + 0x1d14], 0x43700000
mov dword [rax + 0x1cf8], ecx
mov dword [rax + 0x1568], 0x40800000
mov dword [rax + 0x1584], 0x40800000
mov dword [rax + 0x158c], 0x40800000
mov dword [rax + 0x159c], 0x40800000
mov dword [rax + 0x15d0], 0x40800000
mov dword [rax + 0x15d8], 0x40800000
mov dword [rax + 0x15e0], 0x40800000
mov dword [rax + 0x1578], 0x3f000000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1560], 0x41200000
mov dword [rax + 0x1564], 0x41200000
mov dword [rax + 0x1594], 0x40c00000
mov dword [rax + 0x1598], 0x40c00000
mov dword [rax + 0x15a4], 0x41000000
mov dword [rax + 0x15a8], 0x40800000
mov dword [rax + 0x15ac], 0x40800000
mov dword [rax + 0x15b0], 0x40800000
mov dword [rax + 0x15c4], 0x41a00000
mov dword [rax + 0x15cc], 0x41400000
mov dword [rax + 0x156c], 0x3f800000
mov dword [rax + 0x1588], 0x3f800000
mov dword [rax + 0x1590], 0x3f800000
mov dword [rax + 0x15a0], 0x3f800000
mov dword [rax + 0x15f8], 0x3f000000
mov dword [rax + 0x15fc], 0x3f000000
movups xmmword [rax + 0x1620], xmm0
movaps xmm0, xmmword [0x1800835c0]
movups xmmword [rax + 0x1640], xmm0
movaps xmm0, xmmword [0x180083540]
movups xmmword [rax + 0x1630], xmm1
xorps xmm1, xmm1
movups xmmword [rax + 0x1660], xmm0
movups xmmword [rax + 0x1650], xmm1
movaps xmm1, xmmword [0x1800833d0]
xorps xmm0, xmm0
movups xmmword [rax + 0x1680], xmm0
movaps xmm0, xmmword [0x180083380]
movups xmmword [rax + 0x1670], xmm1
movaps xmm1, xmmword [0x180083370]
movups xmmword [rax + 0x16a0], xmm0
movaps xmm0, xmmword [0x180083500]
movups xmmword [rax + 0x1690], xmm1
movaps xmm1, xmmword [0x180083480]
movups xmmword [rax + 0x16c0], xmm0
movaps xmm0, xmmword [0x1800832e0]
movups xmmword [rax + 0x16b0], xmm1
movaps xmm1, xmmword [0x180083510]
movups xmmword [rax + 0x16e0], xmm0
movaps xmm0, xmmword [0x180083420]
movups xmmword [rax + 0x16d0], xmm1
movaps xmm1, xmmword [0x1800834c0]
movups xmmword [rax + 0x1700], xmm0
movaps xmm0, xmmword [0x180083390]
movups xmmword [rax + 0x16f0], xmm1
movaps xmm1, xmmword [0x180083310]
movups xmmword [rax + 0x1720], xmm0
movaps xmm0, xmmword [0x1800833e0]
movups xmmword [rax + 0x1710], xmm1
movaps xmm1, xmmword [0x180083440]
movups xmmword [rax + 0x1740], xmm0
movaps xmm0, xmmword [0x180083440]
movups xmmword [rax + 0x1730], xmm1
movaps xmm1, xmmword [0x180083320]
movups xmmword [rax + 0x1760], xmm0
movaps xmm0, xmmword [0x1800834b0]
movups xmmword [rax + 0x1750], xmm1
movaps xmm1, xmmword [0x180083460]
movups xmmword [rax + 0x1780], xmm0
movaps xmm0, xmmword [0x1800833b0]
movups xmmword [rax + 0x1770], xmm1
movaps xmm1, xmmword [0x1800836b0]
movups xmmword [rax + 0x17a0], xmm0
movups xmmword [rax + 0x1790], xmm1
movaps xmm1, xmmword [0x1800834e0]
lea r8d, [rcx + 0x21]
movaps xmm0, xmmword [0x1800834d0]
lea rdx, [0x18008ec89]
movups xmmword [rax + 0x17b0], xmm1
lea rcx, str.KamiProject__Support_with_Conclav
movaps xmm1, xmmword [0x180083430]
movups xmmword [rax + 0x17c0], xmm0
movaps xmm0, xmmword [0x180083690]
movups xmmword [rax + 0x17d0], xmm1
movaps xmm1, xmmword [0x1800836d0]
movups xmmword [rax + 0x17e0], xmm0
movaps xmm0, xmmword [0x1800832d0]
movups xmmword [rax + 0x17f0], xmm1
movaps xmm1, xmmword [0x180083450]
movups xmmword [rax + 0x1800], xmm0
movaps xmm0, xmmword [0x180083530]
movups xmmword [rax + 0x1810], xmm1
movaps xmm1, xmmword [0x180083360]
movups xmmword [rax + 0x1820], xmm0
movaps xmm0, xmmword [0x180083520]
movups xmmword [rax + 0x1910], xmm1
movups xmmword [rax + 0x1920], xmm0
call fcn.1800183e0
lea rax, [0x18007dbd4]
cmp qword [0x18008ec98], rax
jne 0x180005620
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e29]
lea rcx, str.Aimbot
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005633
lea rdx, [0x180090e29]
lea rcx, str.Aimbot
call fcn.1800366e0
cmp byte [0x180090e29], 0
movss xmm6, dword [0x180083230]
je 0x180005c8b
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
cmp qword [0x18008ec98], rbx
jne 0x1800056b1
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e2b]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x1800056c0
lea rdx, [0x180090e2b]
mov rcx, rbx
call fcn.1800366e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
cmp qword [0x18008ec98], rdi
jne 0x18000572d
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e26]
lea rcx, str.NpcAim
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005740
lea rdx, [0x180090e26]
lea rcx, str.NpcAim
call fcn.1800366e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
lea rax, str.Predict
cmp qword [0x18008ec98], rax
jne 0x1800057b4
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e2f]
lea rcx, str.AimDot
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x1800057ce
lea rdx, [0x180090e2f]
lea rcx, str.AimDot
call fcn.1800366e0
mov r8, qword [0x180090e50]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
or dword [r8 + 0x1cac], 1
movaps xmm1, xmm6
xorps xmm0, xmm0
mov dword [r8 + 0x1cb0], 0x42c80000
call fcn.18001b150
cmp byte [0x180090e20], 1
jne 0x1800059fc
mov edx, 0xff2d2d2d
mov ecx, 0x15
call fcn.180010650
mov edx, 0xff5353d4
mov ecx, 5
call fcn.180010650
xorps xmm1, xmm1
mov ecx, 0xc
call fcn.180010720
movss xmm1, dword [0x180083178]
mov ecx, 0xd
call fcn.180010720
lea rdx, [rsp + 0x180]
mov qword [rsp + 0x180], 0
lea rcx, [0x18007e1d8]
call fcn.180035650
mov r8, qword [0x180090e50]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1d60]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d60], eax
lea rax, [rcx - 2]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4]
movups xmm0, xmmword [rcx + rdx*4 + 4]
add rax, 0x162
lea rdx, [0x18007e870]
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
movsxd rax, dword [r8 + 0x1d70]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4 - 0xc]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005936
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005917
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005936
cmp eax, 2
jne 0x180005936
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 - 4]
mov dword [r10 + r8 + 0x155c], eax
movsxd rcx, dword [r8 + 0x1d70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d70], eax
lea rax, [rcx - 2]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x1800059a2
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005983
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x1800059a2
cmp eax, 2
jne 0x1800059a2
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 + 8]
mov dword [r10 + r8 + 0x155c], eax
dec dword [r8 + 0x1d70]
mov rdi, qword [0x180091028]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x1800059f2
nop dword [rax + rax]
mov ecx, dword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x1800059e2
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1800059c0
call fcn.180002d80
jmp 0x180005c8b
mov eax, dword [rbx + 0x10]
mov dword [0x18008ec90], eax
mov byte [0x180090e20], 0
call fcn.180002d80
jmp 0x180005c8b
lea rax, str.Bind
cmp qword [0x18008ec98], rax
jne 0x180005ba0
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
xorps xmm1, xmm1
mov ecx, 0xc
call fcn.180010720
movss xmm1, dword [0x180083174]
mov ecx, 0xd
call fcn.180010720
lea rdx, [rsp + 0x180]
call fcn.18000cf30
mov edx, 0x12
mov rcx, qword [rax]
mov eax, dword [0x18008ec90]
cmp qword [rcx + 0x18], 0
mov qword [rsp + 0x180], 0
cmove eax, edx
lea rdx, [rsp + 0x40]
mov dword [0x18008ec90], eax
call fcn.18000cf30
lea rdx, [rsp + 0x180]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x18]
call fcn.180035650
mov r8, qword [0x180090e50]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
lea rdx, [0x18007e870]
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
movsxd rax, dword [r8 + 0x1d70]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4 - 0xc]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005b2c
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005b0d
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005b2c
cmp eax, 2
jne 0x180005b2c
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 - 4]
mov dword [r10 + r8 + 0x155c], eax
movsxd rcx, dword [r8 + 0x1d70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d70], eax
lea rax, [rcx - 2]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005c84
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005b80
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005c84
cmp eax, 2
jne 0x180005c84
mov eax, dword [r9 + rcx*4 + 4]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 + 8]
jmp 0x180005c7c
mov edx, 0xff2d2d2d
mov ecx, 0x15
call fcn.180010650
xorps xmm1, xmm1
mov ecx, 0xc
call fcn.180010720
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x180], 0
call fcn.18000cf30
lea rdx, [rsp + 0x180]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x18]
call fcn.180035650
mov r8, qword [0x180090e50]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
lea rdx, [0x18007e870]
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
movsxd rax, dword [r8 + 0x1d70]
mov r9, qword [r8 + 0x1d78]
lea rcx, [rax + rax*2]
movsxd rax, dword [r9 + rcx*4 - 0xc]
lea r11, [rax + rax*2]
cmp dword [rdx + r11*4], 8
mov r10d, dword [rdx + r11*4 + 8]
jne 0x180005c84
mov eax, dword [rdx + r11*4 + 4]
cmp eax, 1
jne 0x180005c65
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
jmp 0x180005c84
cmp eax, 2
jne 0x180005c84
mov eax, dword [r9 + rcx*4 - 8]
mov dword [r10 + r8 + 0x1558], eax
mov eax, dword [r9 + rcx*4 - 4]
mov dword [r10 + r8 + 0x155c], eax
dec dword [r8 + 0x1d70]
cmp qword [0x18008ec98], rbp
jne 0x180005ce9
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e25]
mov rcx, rbp
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005cf8
lea rdx, [0x180090e25]
mov rcx, rbp
call fcn.1800366e0
cmp byte [0x180090e25], 0
je 0x180005df5
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
cmp qword [0x18008ec98], r15
jne 0x180005d6e
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e40]
mov rcx, r15
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005d7d
lea rdx, [0x180090e40]
mov rcx, r15
call fcn.1800366e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
cmp qword [0x18008ec98], r14
jne 0x180005de6
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e2d]
mov rcx, r14
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005df5
lea rdx, [0x180090e2d]
mov rcx, r14
call fcn.1800366e0
mov r15, qword [rsp + 0x1b0]
lea rbx, str.Tracers
cmp qword [0x18008ec98], rbx
jne 0x180005e62
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e23]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005e71
lea rdx, [0x180090e23]
mov rcx, rbx
call fcn.1800366e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
cmp qword [0x18008ec98], r12
jne 0x180005eda
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e41]
mov rcx, r12
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005ee9
lea rdx, [0x180090e41]
mov rcx, r12
call fcn.1800366e0
cmp qword [0x18008ec98], r13
mov r12, qword [rsp + 0x1f0]
jne 0x180005f4f
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e2a]
mov rcx, r13
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005f5e
lea rdx, [0x180090e2a]
mov rcx, r13
call fcn.1800366e0
mov r13, qword [rsp + 0x1b8]
lea rbx, str.Mob_ESP
cmp qword [0x18008ec98], rbx
jne 0x180005fcb
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e21]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180005fda
lea rdx, [0x180090e21]
mov rcx, rbx
call fcn.1800366e0
lea rbx, str.Item_ESP
cmp qword [0x18008ec98], rbx
jne 0x18000603f
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e27]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000604e
lea rdx, [0x180090e27]
mov rcx, rbx
call fcn.1800366e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
lea rbx, str.Barter_ESP
cmp qword [0x18008ec98], rbx
jne 0x1800060be
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e22]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x1800060cd
lea rdx, [0x180090e22]
mov rcx, rbx
call fcn.1800366e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.18001b150
lea rbx, str.Artefact
cmp qword [0x18008ec98], rbx
jne 0x18000613d
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e28]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000614c
lea rdx, [0x180090e28]
mov rcx, rbx
call fcn.1800366e0
cmp byte [0x180090e29], 0
je 0x18000618b
movss xmm0, dword [0x180083104]
lea rax, [rsp + 0x190]
lea r9, [rsp + 0x180]
movss dword [rsp + 0x180], xmm0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x190], 0x3f666666
call fcn.180036f40
mov rcx, qword [0x180090e50]
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, dword [0x1800831e4]
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
cmp byte [0x180090e29], 0
je 0x18000651f
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
lea rcx, str.Aim_Target
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1800831ec]
addss xmm2, dword [0x1800831c0]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.180034d50
mov rcx, qword [0x180090e50]
lea rbx, str.Head
cmp qword [0x18008ec98], rbx
movss xmm6, dword [0x1800831f0]
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, xmm6
addss xmm2, dword [0x1800831c8]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
jne 0x180006340
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x18008ec88]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x180006356
lea rdx, [0x18008ec88]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
mov rax, qword [r8 + 0x1c08]
lea rbx, str.Body
cmp qword [0x18008ec98], rbx
mov byte [rax + 0x90], 1
mov rax, qword [r8 + 0x1c08]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, xmm6
addss xmm2, dword [0x1800831d0]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
jne 0x180006428
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e2c]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000643e
lea rdx, [0x180090e2c]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
mov rax, qword [r8 + 0x1c08]
lea rbx, str.Neck
cmp qword [0x18008ec98], rbx
mov byte [rax + 0x90], 1
mov rax, qword [r8 + 0x1c08]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, xmm6
addss xmm2, dword [0x1800831dc]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
jne 0x180006510
mov edx, 0xff00ffff
xor ecx, ecx
call fcn.180010650
lea rdx, [0x180090e24]
mov rcx, rbx
call fcn.1800366e0
mov r8, qword [0x180090e50]
movsxd rax, dword [r8 + 0x1d60]
mov rcx, qword [r8 + 0x1d68]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x162
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
jmp 0x18000651f
lea rdx, [0x180090e24]
mov rcx, rbx
call fcn.1800366e0
movaps xmm6, xmmword [rsp + 0x1a0]
mov rdi, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x198]
xor rcx, rsp
call fcn.180040040
add rsp, 0x1c0
pop r14
pop rsi
pop rbp
ret