Function at 0x140010dd0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb28]
sub rsp, 0xc00
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14010b0c0]
xor rax, rsp
mov qword [rbp + 0xa50], rax
mov r13, rdx
mov r12, qword [rdx + 8]
mov rdx, r12
lea rcx, [rbp + 0x9e0]
call fcn.14000bfb0
nop
mov rdx, r12
lea rcx, [rbp + 0x740]
call fcn.14000c090
nop
mov qword [rbp + 0x838], 0
mov dword [rbp + 0x840], 0
xorps xmm10, xmm10
movaps xmmword [rbp + 0x890], xmm10
xorps xmm11, xmm11
movaps xmmword [rbp + 0x8a0], xmm11
xorps xmm13, xmm13
movaps xmmword [rbp + 0x8b0], xmm13
mov qword [rbp + 0x8c0], 0
mov dword [rbp + 0x8c8], 0
xor r15d, r15d
mov qword [rbp + 0x8d0], r15
mov qword [rbp + 0x8d8], r15
mov qword [rbp + 0x878], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [r15 + 0x17]
lea rdx, str.dwLocalPlayerController
lea rcx, [rsp + 0x58]
call fcn.14000c3d0
lea rdx, [rsp + 0x58]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x7f0]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x7f0]
mov qword [rbp + 0x870], rdi
mov qword [rbp + 0x398], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
lea r8d, [r15 + 0xb]
lea rdx, str.dwPlantedC4
lea rcx, [rbp + 0x250]
call fcn.14000c3d0
lea rdx, [rbp + 0x250]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x9c8]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x9d0]
mov rdx, qword [rbp + 0x9c8]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x9d0]
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0x390], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [r15 + 0xc]
lea rdx, str.dwViewMatrix
lea rcx, [rsp + 0x58]
call fcn.14000c3d0
lea rdx, [rsp + 0x58]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0x40]
lea r8, [rbp + 0x910]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [r15 + 0xc]
lea rdx, str.dwViewAngles
lea rcx, [rsp + 0x58]
call fcn.14000c3d0
lea rdx, [rsp + 0x58]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rbp + 0x900], r15
mov dword [rbp + 0x908], r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0xc]
lea r8, [rbp + 0x900]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [r15 + 0xc]
lea rdx, str.dwViewAngles
lea rcx, [rsp + 0x58]
call fcn.14000c3d0
lea rdx, [rsp + 0x58]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [r15 + 0xc]
lea rdx, str.dwEntityList
lea rcx, [rsp + 0x58]
call fcn.14000c3d0
lea rdx, [rsp + 0x58]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x730]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r15
mov qword [rbp + 0x248], r15
lea r8d, [r15 + 0x11]
lea rdx, str.dwLocalPlayerPawn
lea rcx, [rbp + 0x230]
call fcn.14000c3d0
lea rdx, [rbp + 0x230]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x9c0]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x9c0]
mov qword [rbp + 0x880], rsi
cmp byte [0x14010bd2c], r15b
je 0x1400112e5
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss xmm8, dword [0x1400f6a48]
mulss xmm7, xmm8
lea ecx, [r15 + 1]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm8
mov rax, qword [0x14010eeb8]
mov rax, qword [rax + 0x48d8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140030270
mov rbx, rax
movaps xmm0, xmmword [0x1400f6d50]
movups xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.14002c230
mov edi, eax
movss xmm2, dword [0x14010bd28]
mulss xmm2, dword [0x1400f6afc]
movss dword [rbp + 0x7f8], xmm7
movss dword [rbp + 0x7fc], xmm6
test eax, 0xff000000
je 0x1400112de
comiss xmm8, xmm2
ja 0x1400112de
subss xmm2, xmm8
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
lea rdx, [rbp + 0x7f8]
mov rcx, rbx
call fcn.14004fdc0
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
movss xmm0, dword [0x1400f6a88]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14004e920
mov dword [rbx + 0x78], r15d
mov rdi, qword [rbp + 0x7f0]
movsd xmm15, qword [rbp + 0x8f0]
movaps xmm14, xmmword [rbp + 0x8c0]
movaps xmm6, xmmword [rbp + 0x880]
movaps xmm12, xmmword [rbp + 0x870]
movaps xmm9, xmmword [rbp + 0x8d0]
movaps xmm8, xmmword [rbp + 0x8e0]
cmp byte [0x14010bd21], r15b
je 0x140011358
movaps xmmword [rbp - 0x10], xmm12
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm10
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x20]
call fcn.14000ca20
cmp byte [0x14010bce0], r15b
je 0x1400114c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov r8d, 8
lea rdx, str.m_fFlags
lea rcx, [rsp + 0x58]
call fcn.14000c3d0
lea rdx, [rsp + 0x58]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rsi
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x738]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0x738]
mov dword [rbp + 0x8cc], ebx
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14001143d
test bl, 1
je 0x14001143d
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf0], r15
mov r8d, 4
lea rdx, str.jump
lea rcx, [rbp + 0xd8]
call fcn.14000c3d0
lea rdx, [rbp + 0xd8]
lea rcx, [0x14010f0a8]
call fcn.14000f1d0
mov dword [rbp + 0x738], 0x10001
jmp 0x14001148b
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf0], r15
mov r8d, 4
lea rdx, str.jump
lea rcx, [rbp + 0xd8]
call fcn.14000c3d0
lea rdx, [rbp + 0xd8]
lea rcx, [0x14010f0a8]
call fcn.14000f1d0
mov dword [rbp + 0x738], 0x100
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x738]
add rdx, r12
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm14, xmmword [rbp + 0x8c0]
cmp byte [0x14010bce1], r15b
je 0x140011543
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r15
mov qword [rbp + 0x288], r15
mov r8d, 0x11
lea rdx, str.m_flFlashDuration
lea rcx, [rbp + 0x270]
call fcn.14000c3d0
lea rdx, [rbp + 0x270]
lea rcx, [0x14010efe8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
mov dword [rbp + 0x820], r15d
movsxd rdx, eax
add rdx, rsi
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 4]
lea r8, [rbp + 0x820]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140011545
xor esi, esi
cmp byte [0x14010bce4], r15b
je 0x14001158a
movaps xmmword [rbp - 0x10], xmm12
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm10
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
lea rdx, [rbp - 0x10]
mov ecx, dword [0x14010bce8]
call fcn.1400267f0
cmp byte [0x14010bd22], r15b
je 0x1400115cc
movaps xmmword [rbp - 0x10], xmm12
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm10
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.14000cde0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x800], xmm1
mov qword [rbp + 0x810], rsi
mov r15d, esi
movsd xmm7, qword [0x1400f6ab8]
nop dword [rax]
mov dword [rbp + 0x9f0], r15d
mov ecx, r15d
and ecx, 0x7fff
shl ecx, 3
sar ecx, 9
mov rdx, qword [rbp + 0x9e0]
add rdx, 0x10
add rdx, rcx
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x9b8]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x9b8]
mov qword [rbp + 0x9f8], rcx
test rcx, rcx
je 0x140013023
mov eax, dword [rbp + 0x9f0]
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x9b0]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x9b0]
mov qword [rbp + 0xa00], rax
test rax, rax
je 0x140013023
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x9e0]
call fcn.1400809f0
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x1400116e5
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400116e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013590
call fcn.14008c81c
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8d, 0xd
lea rdx, str.m_hPlayerPawn
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef28]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0xa00]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x81c]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x81c]
mov dword [rbp + 0xa40], eax
mov dword [rbp + 0x740], eax
shr eax, 9
and eax, 0x3f
shl eax, 3
mov ecx, eax
mov rdx, qword [rbp + 0x748]
add rdx, 0x10
add rdx, rcx
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x9a8]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x9a8]
mov qword [rbp + 0x750], rcx
mov eax, dword [rbp + 0x740]
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x9a0]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x9a0]
mov qword [rbp + 0x758], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], rsi
mov qword [rbp + 0x200], rsi
mov r8d, 9
lea rdx, str.m_iHealth
lea rcx, [rbp + 0x1e8]
call fcn.14000c3d0
lea rdx, [rbp + 0x1e8]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0x758]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x818]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x818]
mov dword [rbp + 0x79c], eax
cmp byte [0x14010bce5], 0
je 0x1400118ba
lea rcx, [rbp + 0x9e0]
call fcn.1400805a0
test al, al
je 0x1400118ba
mov rax, qword [rbp + 0x808]
cmp rax, qword [rbp + 0x810]
je 0x1400118a4
lea rdx, [rbp + 0xa20]
mov rcx, rax
call fcn.14000dd50
add qword [rbp + 0x808], 0x20
jmp 0x1400118ba
lea r8, [rbp + 0xa20]
mov rdx, rax
lea rcx, [rbp + 0x800]
call fcn.140014ef0
mov rax, qword [rbp + 0x758]
cmp qword [0x14010ee60], rax
jne 0x1400118f3
cmp dword [rbp + 0x79c], 0
jle 0x1400118ec
cmp byte [0x14010bd23], 0
je 0x1400118f3
lea rcx, [rbp + 0x740]
call fcn.1400811d0
test eax, eax
jne 0x1400118f3
mov qword [0x14010ee60], rsi
mov eax, dword [rbp + 0x79c]
dec eax
cmp eax, 0x63
ja 0x140013023
lea rcx, [rbp + 0xa20]
cmp qword [rbp + 0xa38], 0xf
cmova rcx, qword [rbp + 0xa20]
lea rdx, str.DemoRecorder
call fcn.1400b8ff0
test eax, eax
je 0x140013023
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], rsi
mov qword [rbp + 0x2a8], rsi
mov r8d, 0xa
lea rdx, str.m_iTeamNum
lea rcx, [rbp + 0x290]
call fcn.14000c3d0
lea rdx, [rbp + 0x290]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rdi
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x998]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x998]
mov qword [rbp + 0x888], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], rsi
mov r8d, 0xa
lea rdx, str.m_iTeamNum
lea rcx, [rbp + 0x2b0]
call fcn.14000c3d0
lea rdx, [rbp + 0x2b0]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0xa00]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x990]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x990]
mov qword [rbp + 0xa10], rax
cmp rbx, rax
jne 0x140011a43
cmp byte [0x14010bce3], 0
je 0x140013023
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], rsi
mov r8d, 0x10
lea rdx, str.m_pGameSceneNode
lea rcx, [rbp + 0x2d0]
call fcn.14000c3d0
lea rdx, [rbp + 0x2d0]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0x758]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x988]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x988]
mov qword [rbp + 0x7e0], rdi
mov qword [rbp + 0x828], rdi
cmp byte [0x14010bde0], 0
je 0x140012a0e
mov eax, dword [rbp + 0x740]
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, qword [rbp + 0x750]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x980]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x980]
mov qword [rbp + 0x758], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], rsi
mov r8d, 0x11
lea rdx, str.dwLocalPlayerPawn
lea rcx, [rbp + 0x2f0]
call fcn.14000c3d0
lea rdx, [rbp + 0x2f0]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x978]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x978]
mov qword [rbp + 0x880], rsi
cmp rbx, rsi
je 0x140013021
lea rcx, [rbp + 0x740]
call fcn.140080ca0
movzx eax, ax
mov qword [0x1401101a8], rax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x740]
call fcn.140080e40
mov rbx, rax
lea rax, [0x14010cbe0]
cmp rax, rbx
je 0x140011c60
mov rdx, qword [0x14010cbf8]
cmp rdx, 0xf
jbe 0x140011c1e
inc rdx
mov rcx, qword [0x14010cbe0]
cmp rdx, 0x1000
jb 0x140011c19
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140013596
mov rcx, r8
call fcn.14008c81c
xor r14d, r14d
mov qword [0x14010cbf0], r14
mov qword [0x14010cbf8], 0xf
mov byte [0x14010cbe0], r14b
movups xmm0, xmmword [rbx]
movups xmmword [0x14010cbe0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x14010cbf0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x140011c63
xor r14d, r14d
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140011c9e
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011c99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013596
call fcn.14008c81c
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov r8d, 0xc
lea rdx, str.m_vOldOrigin
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef98]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rsi
mov qword [rbp + 0xc8], 0
mov dword [rbp + 0xd0], 0
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0xc]
lea r8, [rbp + 0xc8]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 0xc8]
movsd qword [rbp + 0x89c], xmm0
mov eax, dword [rbp + 0xd0]
mov dword [rbp + 0x8a4], eax
movsd qword [0x1401101b0], xmm0
mov dword [0x1401101b8], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
lea r8d, [rsi + 0xc]
lea rdx, str.m_vOldOrigin
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef98]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0x758]
mov qword [rbp - 0x34], rsi
mov dword [rbp - 0x2c], esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0xc]
lea r8, [rbp - 0x34]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x34]
movsd qword [rbp + 0x760], xmm0
mov ebx, dword [rbp - 0x2c]
mov dword [rbp + 0x768], ebx
movsd qword [0x140110198], xmm0
mov dword [0x1401101a0], ebx
movss xmm0, dword [rbp - 0x34]
subss xmm0, dword [0x1401101b0]
cvtps2pd xmm0, xmm0
movaps xmm1, xmm7
call fcn.1400b6200
movaps xmm6, xmm0
movss xmm1, dword [rbp - 0x30]
subss xmm1, dword [0x1401101b4]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm7
call fcn.1400b6200
movaps xmm7, xmm0
movd xmm1, ebx
subss xmm1, dword [0x1401101b8]
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x1400f6ab8]
call fcn.1400b6200
addsd xmm7, xmm6
addsd xmm7, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm7
ja 0x140011e35
xorps xmm0, xmm0
sqrtsd xmm0, xmm7
jmp 0x140011e3d
movaps xmm0, xmm7
call fcn.1400b8e68
cvtsd2ss xmm0, xmm0
cvttss2si ecx, xmm0
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x1401101bc], edx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8d, 0xc
lea rdx, str.m_vOldOrigin
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef98]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0x758]
mov qword [rbp + 0xbc], rsi
mov dword [rbp + 0xc4], esi
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp + 0xbc]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 0xbc]
movsd qword [rbp + 0x760], xmm0
mov eax, dword [rbp + 0xc4]
mov dword [rbp + 0x768], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8d, 0xc
lea rdx, str.m_modelState
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010eef8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
sub rdx, 0xffffffffffffff80
add rdx, rdi
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x970]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x970]
mov qword [rbp + 0x830], r14
mov eax, dword [rbp + 0x740]
movsd xmm0, qword [rbp + 0x760]
cmp byte [0x14010bde1], sil
je 0x140012802
mov dword [rbp + 0x450], eax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x458], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x460], rax
mov rax, qword [rbp + 0x758]
mov qword [rbp + 0x468], rax
movsd qword [rbp + 0x470], xmm0
mov eax, dword [rbp + 0x768]
mov dword [rbp + 0x478], eax
movsd xmm0, qword [rbp + 0x76c]
movsd qword [rbp + 0x47c], xmm0
mov eax, dword [rbp + 0x774]
mov dword [rbp + 0x484], eax
movsd xmm0, qword [rbp + 0x778]
movsd qword [rbp + 0x488], xmm0
mov eax, dword [rbp + 0x780]
mov dword [rbp + 0x490], eax
movsd xmm0, qword [rbp + 0x784]
movsd qword [rbp + 0x494], xmm0
mov eax, dword [rbp + 0x78c]
mov dword [rbp + 0x49c], eax
movsd xmm0, qword [rbp + 0x790]
movsd qword [rbp + 0x4a0], xmm0
mov eax, dword [rbp + 0x798]
mov dword [rbp + 0x4a8], eax
mov eax, dword [rbp + 0x79c]
mov dword [rbp + 0x4ac], eax
mov rax, qword [rbp + 0x7a0]
mov qword [rbp + 0x4b0], rax
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x4b8], rax
movzx eax, word [rbp + 0x7b0]
mov word [rbp + 0x4c0], ax
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp + 0x4c8]
call fcn.14000dd50
mov eax, dword [rbp + 0x7d8]
mov dword [rbp + 0x4e8], eax
mov eax, dword [rbp + 0x7dc]
mov dword [rbp + 0x4ec], eax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x4f0], rax
movaps xmmword [rbp - 0x10], xmm12
movaps xmm7, xmmword [rbp + 0x880]
movaps xmmword [rbp], xmm7
movaps xmm10, xmmword [rbp + 0x890]
movaps xmmword [rbp + 0x10], xmm10
movaps xmm11, xmmword [rbp + 0x8a0]
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x450]
call fcn.140081380
test al, al
je 0x140012270
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov rdi, qword [rbp + 0xa30]
lea rsi, [rbp + 0xa20]
cmp qword [rbp + 0xa38], 0xf
cmova rsi, qword [rbp + 0xa20]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1400135a8
cmp rdi, 0xf
ja 0x14001215d
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x58], xmm0
jmp 0x1400121f1
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14001217c
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400121a3
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400121c5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400135a2
mov rcx, rax
call fcn.14008c4d0
mov rcx, rax
test rax, rax
je 0x14001359c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400121d3
test rcx, rcx
je 0x1400121d1
call fcn.14008c4d0
jmp 0x1400121d3
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.1400b9980
movaps xmm0, xmmword [rbp + 0x910]
movaps xmmword [rbp + 0x100], xmm0
movaps xmm1, xmmword [rbp + 0x920]
movaps xmmword [rbp + 0x110], xmm1
movaps xmm0, xmmword [rbp + 0x930]
movaps xmmword [rbp + 0x120], xmm0
movaps xmm1, xmmword [rbp + 0x940]
movaps xmmword [rbp + 0x130], xmm1
movsd xmm0, qword [rbp + 0x760]
movsd qword [rbp + 0x210], xmm0
mov eax, dword [rbp + 0x768]
mov dword [rbp + 0x218], eax
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], r14
mov r9d, dword [rbp + 0x79c]
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x210]
call fcn.14001a8e0
xor esi, esi
mov r14, qword [rbp + 0xa8]
cmp byte [0x14010bebe], 0
je 0x140012440
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8d, 0x10
lea rdx, str.m_pGameSceneNode
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r14
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x968]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x968]
mov qword [rbp + 0x3b0], rbx
mov qword [rbp + 0x828], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8d, 0xe
lea rdx, str.m_vecAbsOrigin
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef18]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rbx
mov qword [rbp + 0xb0], 0
mov dword [rbp + 0xb8], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp + 0xb0]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm2, qword [rbp + 0xb0]
movaps xmm6, xmm2
mov eax, dword [rbp + 0xb8]
mov dword [rbp + 0x840], eax
movups xmm0, xmmword [rbp + 0x390]
movaps xmmword [rbp + 0x100], xmm0
movups xmm0, xmmword [rbp + 0x3a0]
movaps xmmword [rbp + 0x110], xmm0
movsd xmm0, qword [rbp + 0x3b0]
movsd qword [rbp + 0x120], xmm0
movaps xmmword [rbp - 0x10], xmm12
movaps xmmword [rbp], xmm7
movaps xmmword [rbp + 0x10], xmm10
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
movaps xmm0, xmmword [rbp + 0x910]
movaps xmmword [rbp - 0x80], xmm0
movaps xmm1, xmmword [rbp + 0x920]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm0, xmmword [rbp + 0x930]
movaps xmmword [rbp - 0x60], xmm0
movaps xmm1, xmmword [rbp + 0x940]
movaps xmmword [rbp - 0x50], xmm1
movsd qword [rbp - 0x20], xmm2
mov dword [rbp - 0x18], eax
lea r9, [rbp + 0x100]
lea r8, [rbp - 0x10]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.14001a590
movups xmm0, xmmword [rbp + 0x838]
movsd xmm0, xmm6
movups xmmword [rbp + 0x838], xmm0
cmp byte [0x14010bd20], 0
je 0x140012ffc
mov eax, dword [rbp + 0x740]
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, qword [rbp + 0x750]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x960]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x960]
mov qword [rbp + 0x758], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], rsi
mov qword [rbp + 0x328], rsi
mov r8d, 0x11
lea rdx, str.dwLocalPlayerPawn
lea rcx, [rbp + 0x310]
call fcn.14000c3d0
lea rdx, [rbp + 0x310]
lea rcx, [0x14010f008]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, r12
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x958]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x958]
mov qword [rbp + 0x880], rsi
cmp rbx, rsi
je 0x140013019
movaps xmm12, xmmword [rbp + 0x880]
cmp byte [0x14010bdac], 0
je 0x140012a1a
movsxd r8, dword [0x14010bd60]
shl r8, 5
add r8, qword [0x14010bd68]
lea rdx, [rbp + 0x648]
lea rcx, [0x14010bd80]
call fcn.14000e640
mov rcx, qword [rax]
mov edi, dword [rcx + 0x40]
movaps xmm6, xmmword [rbp + 0x910]
movaps xmm7, xmmword [rbp + 0x920]
movaps xmm8, xmmword [rbp + 0x930]
movaps xmm9, xmmword [rbp + 0x940]
mov rbx, qword [0x14010ee60]
mov eax, dword [rbp + 0x740]
mov dword [rbp + 0x4f8], eax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x508], rax
mov rax, qword [rbp + 0x758]
mov qword [rbp + 0x510], rax
movsd xmm0, qword [rbp + 0x760]
movsd qword [rbp + 0x518], xmm0
mov eax, dword [rbp + 0x768]
mov dword [rbp + 0x520], eax
movsd xmm0, qword [rbp + 0x76c]
movsd qword [rbp + 0x524], xmm0
mov eax, dword [rbp + 0x774]
mov dword [rbp + 0x52c], eax
movsd xmm0, qword [rbp + 0x778]
movsd qword [rbp + 0x530], xmm0
mov eax, dword [rbp + 0x780]
mov dword [rbp + 0x538], eax
movsd xmm0, qword [rbp + 0x784]
movsd qword [rbp + 0x53c], xmm0
mov eax, dword [rbp + 0x78c]
mov dword [rbp + 0x544], eax
movsd xmm0, qword [rbp + 0x790]
movsd qword [rbp + 0x548], xmm0
mov eax, dword [rbp + 0x798]
mov dword [rbp + 0x550], eax
mov eax, dword [rbp + 0x79c]
mov dword [rbp + 0x554], eax
mov rax, qword [rbp + 0x7a0]
mov qword [rbp + 0x558], rax
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x560], rax
movzx eax, word [rbp + 0x7b0]
mov word [rbp + 0x568], ax
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp + 0x570]
call fcn.14000dd50
mov eax, dword [rbp + 0x7d8]
mov dword [rbp + 0x590], eax
mov eax, dword [rbp + 0x7dc]
mov dword [rbp + 0x594], eax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x598], rax
movups xmm0, xmmword [r13]
movaps xmmword [rbp - 0x80], xmm0
movsd xmm1, qword [r13 + 0x10]
movsd qword [rbp - 0x70], xmm1
movaps xmmword [rbp + 0x350], xmm6
movaps xmmword [rbp + 0x360], xmm7
movaps xmmword [rbp + 0x370], xmm8
movaps xmmword [rbp + 0x380], xmm9
movaps xmm6, xmmword [rbp + 0x870]
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm12
movaps xmmword [rbp + 0x10], xmm10
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmm9, xmmword [rbp + 0x8d0]
movaps xmmword [rbp + 0x50], xmm9
movaps xmm8, xmmword [rbp + 0x8e0]
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
movups xmm0, xmmword [rbp + 0x828]
movaps xmmword [rbp + 0x100], xmm0
movups xmm0, xmmword [rbp + 0x838]
movaps xmmword [rbp + 0x110], xmm0
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x350]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x10]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x4f8]
lea rcx, [rbp + 0x680]
call fcn.1400135d0
mov rcx, qword [rax + 0x18]
mov qword [0x14010ee60], rcx
mov rdx, qword [rbp + 0x710]
cmp rdx, 0xf
jbe 0x1400127ce
inc rdx
mov rcx, qword [rbp + 0x6f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400135ae
call fcn.14008c81c
mov rcx, qword [0x14010ee60]
xor edi, edi
mov qword [rbp + 0x708], rdi
mov qword [rbp + 0x710], 0xf
mov byte [rbp + 0x6f8], dil
cmp rcx, qword [rbp + 0x758]
jne 0x140013019
mov qword [rbp + 0x758], rcx
jmp 0x140012a23
mov dword [rbp + 0x5a0], eax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x5a8], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x5b0], rax
mov rax, qword [rbp + 0x758]
mov qword [rbp + 0x5b8], rax
movsd qword [rbp + 0x5c0], xmm0
mov eax, dword [rbp + 0x768]
mov dword [rbp + 0x5c8], eax
movsd xmm0, qword [rbp + 0x76c]
movsd qword [rbp + 0x5cc], xmm0
mov eax, dword [rbp + 0x774]
mov dword [rbp + 0x5d4], eax
movsd xmm0, qword [rbp + 0x778]
movsd qword [rbp + 0x5d8], xmm0
mov eax, dword [rbp + 0x780]
mov dword [rbp + 0x5e0], eax
movsd xmm0, qword [rbp + 0x784]
movsd qword [rbp + 0x5e4], xmm0
mov eax, dword [rbp + 0x78c]
mov dword [rbp + 0x5ec], eax
movsd xmm0, qword [rbp + 0x790]
movsd qword [rbp + 0x5f0], xmm0
mov eax, dword [rbp + 0x798]
mov dword [rbp + 0x5f8], eax
mov eax, dword [rbp + 0x79c]
mov dword [rbp + 0x5fc], eax
mov rax, qword [rbp + 0x7a0]
mov qword [rbp + 0x600], rax
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x608], rax
movzx eax, word [rbp + 0x7b0]
mov word [rbp + 0x610], ax
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp + 0x618]
call fcn.14000dd50
mov eax, dword [rbp + 0x7d8]
mov dword [rbp + 0x638], eax
mov eax, dword [rbp + 0x7dc]
mov dword [rbp + 0x63c], eax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x640], rax
movaps xmmword [rbp - 0x10], xmm12
movaps xmm7, xmmword [rbp + 0x880]
movaps xmmword [rbp], xmm7
movaps xmm10, xmmword [rbp + 0x890]
movaps xmmword [rbp + 0x10], xmm10
movaps xmm11, xmmword [rbp + 0x8a0]
movaps xmmword [rbp + 0x20], xmm11
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x5a0]
call fcn.140081380
movzx ebx, al
lea rdx, [rbp + 0xa20]
lea rcx, [rbp + 0x658]
call fcn.14000dd50
movaps xmm0, xmmword [rbp + 0x910]
movaps xmmword [rbp + 0x100], xmm0
movaps xmm1, xmmword [rbp + 0x920]
movaps xmmword [rbp + 0x110], xmm1
movaps xmm0, xmmword [rbp + 0x930]
movaps xmmword [rbp + 0x120], xmm0
movaps xmm1, xmmword [rbp + 0x940]
movaps xmmword [rbp + 0x130], xmm1
movsd xmm0, qword [rbp + 0x760]
movsd qword [rbp + 0x220], xmm0
mov ecx, dword [rbp + 0x768]
mov dword [rbp + 0x228], ecx
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x20], r14
mov r9d, dword [rbp + 0x79c]
mov r8, rax
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x220]
call fcn.14001a8e0
jmp 0x140012270
movaps xmm7, xmmword [rbp + 0x880]
jmp 0x140012277
movaps xmm6, xmmword [rbp + 0x870]
xor edi, edi
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], rdi
mov qword [rbp + 0x348], rdi
mov r8d, 9
lea rdx, str.m_iHealth
lea rcx, [rbp + 0x330]
call fcn.14000c3d0
lea rdx, [rbp + 0x330]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0x758]
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x7f8]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x7f8]
mov dword [rbp + 0x79c], eax
dec eax
cmp eax, 0x63
ja 0x140013006
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov r8d, 0x10
lea rdx, str.m_pGameSceneNode
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010eed8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, qword [rbp + 0x758]
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x950]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x950]
mov qword [rbp + 0x7e0], rbx
mov qword [rbp + 0x828], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov r8d, 0xc
lea rdx, str.m_modelState
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010eef8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rcx, eax
lea rdx, [rbx + 0x80]
add rdx, rcx
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x730]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x730]
mov qword [rbp + 0x830], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor ebx, ebx
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
lea r8d, [rbx + 0x16]
lea rdx, str.m_vecLastClipCameraPos
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010efe8]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rsi
mov qword [rbp + 0x98], rbx
mov dword [rbp + 0xa0], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0x98]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 0x98]
movsd qword [rbp + 0x890], xmm0
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0x898], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
lea r8d, [rbx + 0xc]
lea rdx, str.m_vOldOrigin
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef98]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rsi
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x38], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp - 0x40]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp + 0x89c], xmm0
mov ebx, dword [rbp - 0x38]
mov dword [rbp + 0x8a4], ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea r8d, [rax + 0xf]
lea rdx, str.m_vecViewOffset
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef08]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rsi
mov qword [rbp + 0x80], 0
mov dword [rbp + 0x88], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x80]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x88]
movd xmm0, ebx
addss xmm2, xmm0
movss xmm1, dword [rbp + 0x84]
addss xmm1, dword [rbp - 0x3c]
movss xmm0, dword [rbp + 0x80]
addss xmm0, dword [rbp - 0x40]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x8a8], xmm0
movss dword [rbp + 0x8b0], xmm2
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea r8d, [rax + 7]
lea rdx, str.v_angle
lea rcx, [rbp - 0x80]
call fcn.14000c3d0
lea rdx, [rbp - 0x80]
lea rcx, [0x14010ef98]
call fcn.14000f1d0
mov rcx, rax
call fcn.14000f650
movsxd rdx, eax
add rdx, rsi
mov qword [rbp + 0x8c], 0
mov dword [rbp + 0x94], 0
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0xc]
lea r8, [rbp + 0x8c]
mov rcx, qword [0x14010ee70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 0x8c]
movsd qword [rbp + 0x8b4], xmm0
mov eax, dword [rbp + 0x94]
mov dword [rbp + 0x8bc], eax
cmp byte [0x14010bd23], sil
je 0x140012f86
mov eax, dword [rbp + 0x740]
mov dword [rbp + 0x140], eax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x150], rax
mov rax, qword [rbp + 0x758]
mov qword [rbp + 0x158], rax
movsd xmm0, qword [rbp + 0x760]
movsd qword [rbp + 0x160], xmm0
mov eax, dword [rbp + 0x768]
mov dword [rbp + 0x168], eax
movsd xmm0, qword [rbp + 0x76c]
movsd qword [rbp + 0x16c], xmm0
mov eax, dword [rbp + 0x774]
mov dword [rbp + 0x174], eax
movsd xmm0, qword [rbp + 0x778]
movsd qword [rbp + 0x178], xmm0
mov eax, dword [rbp + 0x780]
mov dword [rbp + 0x180], eax
movsd xmm0, qword [rbp + 0x784]
movsd qword [rbp + 0x184], xmm0
mov eax, dword [rbp + 0x78c]
mov dword [rbp + 0x18c], eax
movsd xmm0, qword [rbp + 0x790]
movsd qword [rbp + 0x190], xmm0
mov eax, dword [rbp + 0x798]
mov dword [rbp + 0x198], eax
mov eax, dword [rbp + 0x79c]
mov dword [rbp + 0x19c], eax
mov rax, qword [rbp + 0x7a0]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x1a8], rax
movzx eax, word [rbp + 0x7b0]
mov word [rbp + 0x1b0], ax
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp + 0x1b8]
call fcn.14000dd50
mov eax, dword [rbp + 0x7d8]
mov dword [rbp + 0x1d8], eax
mov eax, dword [rbp + 0x7dc]
mov dword [rbp + 0x1dc], eax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x1e0], rax
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm12
movaps xmm10, xmmword [rbp + 0x890]
movaps xmmword [rbp + 0x10], xmm10
movaps xmm11, xmmword [rbp + 0x8a0]
movaps xmmword [rbp + 0x20], xmm11
movaps xmm13, xmmword [rbp + 0x8b0]
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x60], xmm8
movsd qword [rbp + 0x70], xmm15
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x140]
call fcn.140081380
test al, al
je 0x140012ffc
jmp 0x140012f9e
movaps xmm10, xmmword [rbp + 0x890]
movaps xmm11, xmmword [rbp + 0x8a0]
movaps xmm13, xmmword [rbp + 0x8b0]
movaps xmmword [rbp + 0x3f0], xmm11
movaps xmmword [rbp + 0x3e0], xmm10
movaps xmmword [rbp + 0x3d0], xmm12
movaps xmmword [rbp + 0x3c0], xmm6
movaps xmmword [rbp + 0x400], xmm13
movaps xmmword [rbp + 0x410], xmm14
movaps xmmword [rbp + 0x420], xmm9
movaps xmmword [rbp + 0x430], xmm8
movsd qword [rbp + 0x440], xmm15
mov r9, rdi
mov r8, qword [rbp + 0x758]
lea rcx, [rbp + 0x3c0]
call fcn.14000c4d0
movsd xmm7, qword [0x1400f6ab8]
jmp 0x140013023
xor esi, esi
mov qword [0x14010ee60], rsi
movsd xmm7, qword [0x1400f6ab8]
jmp 0x140013023
movsd xmm7, qword [0x1400f6ab8]
xor esi, esi
inc r15d
cmp r15d, 0x40
jge 0x140013040
movaps xmm12, xmmword [rbp + 0x870]
mov rdi, qword [rbp + 0x7f0]
jmp 0x1400115f0
xorps xmm9, xmm9
xorps xmm6, xmm6
mov r15d, esi
mov rax, qword [rbp + 0x808]
mov rdx, qword [rbp + 0x800]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x1400132cd
mov r14, rsi
movss xmm7, dword [0x1400f6b48]
movss xmm8, dword [0x1400f6afc]
mov r12d, 0x16
nop dword [rax]
nop word [rax + rax]
lea rsi, [rdx + r14]
xorps xmm0, xmm0
movups xmmword [rbp + 0x848], xmm0
xor eax, eax
mov qword [rbp + 0x858], rax
mov qword [rbp + 0x860], rax
mov rdi, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x1400130bc
mov rsi, qword [rsi]
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x1400135c6
cmp rdi, 0xf
ja 0x1400130f7
mov qword [rbp + 0x858], rdi
mov eax, 0xf
mov qword [rbp + 0x860], rax
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x848], xmm0
jmp 0x14001318f
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140013116
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140013138
cmp rbx, 0x16
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001315a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400135ba
mov rcx, rax
call fcn.14008c4d0
mov rcx, rax
test rax, rax
je 0x1400135c0
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140013164
test rcx, rcx
je 0x140013164
call fcn.14008c4d0
mov qword [rbp + 0x848], rax
mov qword [rbp + 0x858], rdi
mov qword [rbp + 0x860], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.1400b9980
mov rax, qword [rbp + 0x860]
lea rbx, [rbp + 0x848]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x848]
movaps xmm2, xmm6
addss xmm2, xmm7
movaps xmm0, xmmword [0x1400f6d50]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm1, xmm8
unpcklps xmm1, xmm2
movsd qword [rbp + 0x730], xmm1
mov rax, qword [0x14010eeb8]
mov rax, qword [rax + 0x48d8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140030270
mov r8, rax
lea rcx, [rbp - 0x20]
call fcn.14002c230
mov r9d, eax
test eax, 0xff000000
je 0x14001325d
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rbx + rcx], 0
jne 0x140013200
add rcx, rbx
cmp rbx, rcx
je 0x14001325d
mov rax, qword [r8 + 0x38]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp - 0x20], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x730]
movss xmm2, dword [rax + 0x10]
mov rdx, r8
mov rcx, qword [rax + 8]
call fcn.140055e50
addss xmm6, xmm8
mov rdx, qword [rbp + 0x860]
cmp rdx, 0xf
jbe 0x1400132a3
inc rdx
mov rcx, qword [rbp + 0x848]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001329e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400135c0
call fcn.14008c81c
inc r15d
add r14, 0x20
mov rcx, qword [rbp + 0x808]
mov rdx, qword [rbp + 0x800]
sub rcx, rdx
sar rcx, 5
movsxd rax, r15d
cmp rax, rcx
jb 0x140013090
xor esi, esi
cmp byte [0x14010bce2], 0
je 0x14001347e
movaps xmm6, xmmword [rbp + 0x910]
movaps xmm7, xmmword [rbp + 0x920]
movaps xmm8, xmmword [rbp + 0x930]
movaps xmm9, xmmword [rbp + 0x940]
mov eax, dword [rbp + 0x740]
mov dword [rbp + 0x140], eax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x150], rax
mov rax, qword [rbp + 0x758]
mov qword [rbp + 0x158], rax
movsd xmm0, qword [rbp + 0x760]
movsd qword [rbp + 0x160], xmm0
mov eax, dword [rbp + 0x768]
mov dword [rbp + 0x168], eax
movsd xmm0, qword [rbp + 0x76c]
movsd qword [rbp + 0x16c], xmm0
mov eax, dword [rbp + 0x774]
mov dword [rbp + 0x174], eax
movsd xmm0, qword [rbp + 0x778]
movsd qword [rbp + 0x178], xmm0
mov eax, dword [rbp + 0x780]
mov dword [rbp + 0x180], eax
movsd xmm0, qword [rbp + 0x784]
movsd qword [rbp + 0x184], xmm0
mov eax, dword [rbp + 0x78c]
mov dword [rbp + 0x18c], eax
movsd xmm0, qword [rbp + 0x790]
movsd qword [rbp + 0x190], xmm0
mov eax, dword [rbp + 0x798]
mov dword [rbp + 0x198], eax
mov eax, dword [rbp + 0x79c]
mov dword [rbp + 0x19c], eax
mov rax, qword [rbp + 0x7a0]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x1a8], rax
movzx eax, word [rbp + 0x7b0]
mov word [rbp + 0x1b0], ax
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp + 0x1b8]
call fcn.14000dd50
mov eax, dword [rbp + 0x7d8]
mov dword [rbp + 0x1d8], eax
mov eax, dword [rbp + 0x7dc]
mov dword [rbp + 0x1dc], eax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x1e0], rax
movaps xmmword [rbp + 0x350], xmm6
movaps xmmword [rbp + 0x360], xmm7
movaps xmmword [rbp + 0x370], xmm8
movaps xmmword [rbp + 0x380], xmm9
movups xmm0, xmmword [rbp + 0x828]
movaps xmmword [rbp + 0x100], xmm0
movups xmm0, xmmword [rbp + 0x838]
movaps xmmword [rbp + 0x110], xmm0
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x140]
call fcn.140026a30
nop
lea rcx, [rbp + 0x800]
call fcn.14000de70
nop
mov rdx, qword [rbp + 0x7d0]
cmp rdx, 0xf
jbe 0x1400134cc
inc rdx
mov rcx, qword [rbp + 0x7b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400134c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400135b4
call fcn.14008c81c
mov qword [rbp + 0x7c8], rsi
mov qword [rbp + 0x7d0], 0xf
mov byte [rbp + 0x7b8], 0
mov rdx, qword [rbp + 0xa38]
cmp rdx, 0xf
jbe 0x140013522
inc rdx
mov rcx, qword [rbp + 0xa20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001351d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001358a
call fcn.14008c81c
mov rcx, qword [rbp + 0xa50]
xor rcx, rsp
call fcn.14008c4b0
lea r11, [rsp + 0xc00]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400934b8
nop
call fcn.1400934b8
nop
call fcn.1400934b8
int3
call fcn.1400934b8
int3
call fcn.14000ba10
int3
call fcn.14000bab0
int3
call fcn.1400934b8
nop
call fcn.1400934b8
nop
call fcn.14000ba10
int3
call fcn.1400934b8
int3
call fcn.14000bab0
int3