Function at 0x14004a260
Capabilities:
Enumerate process modules
Enumerate processes
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x888]
sub rsp, 0x960
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140060040]
xor rax, rsp
mov qword [rbp + 0x7b8], rax
xor r12d, r12d
mov r13d, r12d
mov dword [rsp + 0x60], r12d
mov r15, qword [0x140060820]
mov qword [rsp + 0x68], r15
test r15, r15
jne 0x14004a340
lea ecx, [r12 + 0x38]
call fcn.14004ef04
mov r15, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov qword [rax], r12
mov qword [rax + 8], r12
mov dword [rax + 0x10], 0xffffffff
mov qword [rax + 0x18], 0xffffffffffffffff
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], r12
mov qword [0x140060820], rax
lea rdi, str.cs2.exe
mov qword [rbp + 0x538], rdi
mov qword [rbp + 0x540], 7
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x284]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x280], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14004a3a0
lea rdx, [rbp + 0x280]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14004a3f6
nop
lea rcx, [rbp + 0x2ac]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], r12b
jne 0x14004a3b0
cmp rax, 7
jne 0x14004a3d9
mov r8, rax
lea rdx, [rbp + 0x2ac]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14004a8dc
lea rdx, [rbp + 0x280]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14004a3a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [r15 + 0x10]
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14004a48a
mov dword [rbp + 0x280], 0x238
lea rdx, [rbp + 0x280]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x14004a481
nop dword [rax]
lea rcx, [rbp + 0x2b0]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], r12b
jne 0x14004a440
cmp rax, 0xa
jne 0x14004a46d
mov r8, rax
lea rdx, [rbp + 0x2b0]
lea rcx, str.client.dll
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14004a92b
lea rdx, [rbp + 0x280]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x14004a430
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, r12
mov qword [rbp + 0x28], r14
cmp qword [0x140060820], r12
jne 0x14004a4e0
mov ecx, 0x38
call fcn.14004ef04
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov qword [rax], r12
mov qword [rax + 8], r12
mov dword [rax + 0x10], 0xffffffff
mov qword [rax + 0x18], 0xffffffffffffffff
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], r12
mov qword [0x140060820], rax
lea rcx, str.SkechWare_CS2_Free_External_Cheat
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.___SkechWare_CS2_Free_External_Cheat_n
call fcn.1400011a0
lea rcx, str.___unknowncheats.me_n
call fcn.1400011a0
lea rcx, str.___If_you_purchased_this_cheat__you_have_been_scammed._This_cheat_is_free_in_unknowncheats.me__n_n_n
call fcn.1400011a0
mov byte [0x14006091c], 1
mov byte [0x1400608f8], r12b
mov dword [0x140060830], 0x50
mov dword [0x140060834], 0x40
lea rax, [0x14004e330]
mov qword [0x140060838], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x140060848], rax
lea rsi, str.Skechware
mov qword [0x140060870], rsi
lea rcx, [0x140060830]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rdi, qword [0x140060848]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x80000000
mov r8, rsi
mov rdx, qword [0x140060870]
mov ecx, 0x800a8
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x140060890], rax
test rax, rax
jne 0x14004a5e7
lea rcx, str._x__Overlay_can_not_created_n
call fcn.1400011a0
mov rax, qword [0x140060890]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x538], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x5d8], xmm1
lea rdx, [rbp + 0x538]
mov rcx, qword [0x140060890]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rbp + 0x5d8]
mov rcx, qword [0x140060890]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x7a0], r12
lea rdx, [rbp + 0x7a0]
mov rcx, qword [0x140060890]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x7a0]
mov dword [rbp + 0x548], eax
mov eax, dword [rbp + 0x7a4]
mov dword [rbp + 0x54c], eax
mov eax, dword [rbp + 0x540]
mov dword [rbp + 0x550], eax
mov eax, dword [rbp + 0x544]
mov dword [rbp + 0x554], eax
lea rdx, [rbp + 0x548]
mov rcx, qword [0x140060890]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 5
mov rcx, qword [0x140060890]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140060890]
call qword [sym.imp.USER32.dll_UpdateWindow]
lea rcx, str.___Cheat_active__have_fun_t_n
call fcn.1400011a0
mov qword [rbp + 0x244], r12
mov qword [rbp + 0x258], 2
mov qword [rbp + 0x270], 2
mov ecx, 2
mov qword [rbp + 0x230], r12
mov dword [rbp + 0x240], 0x1c
mov dword [rbp + 0x238], 0x78
mov dword [rbp + 0x23c], 1
mov dword [rbp + 0x254], 0x20
mov rax, qword [0x140060890]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x24c], 1
mov qword [rbp + 0x268], 1
mov dword [rbp + 0x7a0], 0xb000
mov dword [rbp + 0x7a4], 0xa000
lea rbx, [0x140060888]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x4d8]
mov qword [rsp + 0x50], rax
lea rdi, [0x140060828]
mov qword [rsp + 0x48], rdi
lea rsi, [0x140060880]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x230]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], ecx
lea rax, [rbp + 0x7a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rcx - 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x14004a80b
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x4d8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x230]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x7a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14004a863
mov qword [rbp + 0x4c8], r12
mov rcx, qword [0x140060880]
mov rax, qword [rcx]
lea r9, [rbp + 0x4c8]
lea r8, [0x140058578]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x4c8]
test rdx, rdx
je 0x14004a863
mov rcx, qword [0x140060828]
mov rax, qword [rcx]
lea r9, [0x140060898]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x4c8]
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.14004e4b0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, rbx
je 0x14004a885
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [0x14006091c], r12b
je 0x14004d08c
mov edi, 0xff
movabs rsi, 0x4e94914effff
movsd xmm8, qword [0x140058650]
movabs r15, 0x7fffffffff1b1e3f
lea rcx, [rbp + 0x1f0]
call fcn.140047b70
mov rbx, qword [rbp + 0x1f0]
cmp rbx, r15
je 0x14004a940
setl al
test al, al
je 0x14004a940
add rbx, 0xe4e1c0
jmp 0x14004a94a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp + 0x288]
cmp ebx, 0xffffffff
je 0x14004a3f6
mov rcx, qword [r15 + 0x18]
test rcx, rcx
je 0x14004a903
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [rbp + 0x538]
movups xmmword [r15], xmm0
mov dword [r15 + 0x10], ebx
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [r15 + 0x18], rax
jmp 0x14004a3f6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, qword [rbp + 0x298]
jmp 0x14004a48d
movabs rbx, 0x7fffffffffffffff
movabs r15, 0x431bde82d7b634db
lea rcx, [rbp + 0x1f8]
call fcn.140047b70
mov rax, qword [rbp + 0x1f8]
cmp rbx, rax
je 0x14004a9bb
mov ecx, 1
cmovl ecx, edi
test cl, cl
jle 0x14004a9bb
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jg 0x14004a9af
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14004a9a6
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14004a954
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14004a954
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x690]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
mov r15, qword [rsp + 0x68]
je 0x14004aa1c
lea rcx, [rbp + 0x690]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x690]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x690]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004a9e1
mov rax, qword [0x140060800]
test rax, rax
je 0x14004aa31
mov rcx, qword [rax + 0x98]
jmp 0x14004aa34
mov rcx, r12
cmp qword [rcx + 0x48], 0
jne 0x14004aa40
call fcn.140030a30
call fcn.140031c70
call fcn.140008610
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004aa8b
cmp byte [0x1400608f8], 0
sete al
mov byte [0x1400608f8], al
mov edx, 0xffffffec
mov rcx, qword [0x140060890]
test al, al
mov r8d, 0xa0
jne 0x14004aa85
mov r8d, 0x800a8
call qword [sym.imp.USER32.dll_SetWindowLongA]
cmp byte [0x1400608c9], 0
je 0x14004cdf3
mov qword [rbp + 0x4c8], r12
lea rdx, [r14 + 0x1810fa8]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4c8]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x4c8]
mov qword [rbp + 0x7a0], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
mov qword [rsp + 0x20], r12
mov r9d, 0x40
lea r8, [rbp + 0x230]
lea rdx, [r14 + 0x1a085a0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + 0x4c3], 0
lea rdx, [rsi + 0x3c3]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x4c3]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x548], 0
mov dword [rbp + 0x550], 0
lea rdx, [rsi + 0x1274]
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x548]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
movups xmmword [rbp + 0x620], xmm0
movups xmmword [rbp + 0x630], xmm0
movups xmmword [rbp + 0x640], xmm0
mov qword [rsp + 0x20], r12
mov r9d, 0x40
lea r8, [rbp + 0x610]
lea rdx, [r14 + 0x1a085a0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x600], r12
lea rdx, [r14 + 0x19a63a0]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x600]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x600]
mov qword [rbp + 0x4c8], r14
mov ebx, r12d
mov dword [rsp + 0x64], ebx
lea rax, [r14 + 0x10]
nop dword [rax]
mov qword [rbp + 0x5f8], r12
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x5f8]
mov rdx, rax
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x5f8]
test rcx, rcx
je 0x14004cdcb
mov qword [rbp + 0x5f0], r12
mov eax, ebx
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x5f0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x5f0]
mov qword [rbp + 8], rdi
test rdi, rdi
je 0x14004cdcb
mov dword [rbp + 0x530], r12d
lea rdx, [rdi + 0x7dc]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x530]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0x530]
mov eax, ebx
test ebx, ebx
je 0x14004cdcb
mov qword [rbp + 0x4d0], r12
sar rax, 9
and eax, 0x3f
lea rax, [rax + 2]
lea rdx, [r14 + rax*8]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4d0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x5e8], r12
mov eax, ebx
and eax, 0x1ff
imul rdx, rax, 0x78
add rdx, qword [rbp + 0x4d0]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x5e8]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x5e8]
mov qword [rbp + 0x4e0], r14
cmp r14, rsi
je 0x14004cdc4
mov qword [rbp + 0x4f0], 0
mov dword [rbp + 0x4f8], 0
lea rdx, [r14 + 0x1274]
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x4f0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x4d0], r12
lea rdx, [r14 + 0x308]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4d0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x4d8], r12
mov rdx, qword [rbp + 0x4d0]
add rdx, 0x1f8
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4d8]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + 0x4c2], 0
lea rdx, [r14 + 0x3c3]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x4c2]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + 0x4c1], 0
lea rdx, [r14 + 0x324]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x4c1]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + 0x4c0], 0
lea rdx, [r14 + 0x22c0]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x4c0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x4c3]
cmp byte [rbp + 0x4c2], al
jne 0x14004ae5f
cmp byte [0x1400608ca], 0
je 0x14004cdc4
mov qword [rbp + 0x4d0], r12
lea rdx, [r14 + 0x12f0]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4d0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x4d8], r12
mov rdx, qword [rbp + 0x4d0]
add rdx, 0x360
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4d8]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x4d0], r12
mov rdx, qword [rbp + 0x4d8]
add rdx, 0xc28
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4d0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x670], xmm0
mov qword [rbp + 0x680], r12
mov qword [rbp + 0x688], 0xf
mov byte [rbp + 0x670], 0
movups xmmword [rbp + 0x558], xmm0
mov rbx, r12
mov qword [rbp + 0x568], rbx
mov esi, 0xf
mov qword [rbp + 0x570], rsi
mov byte [rbp + 0x558], 0
mov rdx, qword [rbp + 0x4d0]
test rdx, rdx
jne 0x14004af53
lea r8d, [rsi + 4]
lea rcx, [rbp + 0x670]
call fcn.14004d1a0
jmp 0x14004b1c2
xor eax, eax
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov dword [rbp + 0x1e0], eax
mov qword [rsp + 0x20], r12
lea r9d, [rax + 0x64]
lea r8, [rbp + 0x180]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm0, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x6c0], xmm0
movaps xmm1, xmmword [rbp + 0x190]
movaps xmmword [rbp + 0x6d0], xmm1
movaps xmm0, xmmword [rbp + 0x1a0]
movaps xmmword [rbp + 0x6e0], xmm0
movaps xmm1, xmmword [rbp + 0x1b0]
movaps xmmword [rbp + 0x6f0], xmm1
movaps xmm0, xmmword [rbp + 0x1c0]
movaps xmmword [rbp + 0x700], xmm0
movaps xmm1, xmmword [rbp + 0x1d0]
movaps xmmword [rbp + 0x710], xmm1
mov eax, dword [rbp + 0x1e0]
mov dword [rbp + 0x720], eax
mov r13d, r12d
mov r15, r12
mov r14, qword [rbp + 0x558]
nop dword [rax]
cmp r15, 0x64
jae 0x14004d16a
movzx r9d, byte [rbp + r15 + 0x6c0]
test r9b, r9b
je 0x14004b1aa
cmp rbx, rsi
jae 0x14004b056
lea rax, [rbx + 1]
mov qword [rbp + 0x568], rax
lea rax, [rbp + 0x558]
cmp rsi, 0xf
cmova rax, r14
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x14004b062
lea rcx, [rbp + 0x558]
call fcn.14004d7b0
mov eax, 7
mov edi, eax
mov rbx, qword [rbp + 0x568]
cmp rbx, rax
cmovb rdi, rbx
lea rcx, [rbp + 0x558]
mov rsi, qword [rbp + 0x570]
cmp rsi, 0xf
seta r12b
mov r14, qword [rbp + 0x558]
cmova rcx, r14
mov r8, rdi
cmp rdi, rax
cmova r8, rax
lea rdx, str.weapon_
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14004b19a
cmp rdi, 7
jne 0x14004b19a
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
xor eax, eax
mov qword [rbp + 0x218], rax
mov qword [rbp + 0x220], rax
cmp rbx, rdi
jb 0x14004d170
lea rax, [rbx - 7]
cmp rax, rbx
cmovb rbx, rax
lea rdx, [rbp + 0x558]
test r12b, r12b
cmovne rdx, r14
add rdx, rdi
mov r8, rbx
lea rcx, [rbp + 0x208]
call fcn.14004d6b0
or dword [rsp + 0x60], 0x40
mov rdx, qword [rbp + 0x570]
cmp rdx, 0xf
jbe 0x14004b154
inc rdx
mov rcx, qword [rbp + 0x558]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b14f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d077
call fcn.14004eb9c
movups xmm2, xmmword [rbp + 0x208]
movups xmmword [rbp + 0x558], xmm2
movups xmm1, xmmword [rbp + 0x218]
movups xmmword [rbp + 0x568], xmm1
mov qword [rbp + 0x220], 0xf
mov byte [rbp + 0x208], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rsi, xmm0
movq rbx, xmm1
movq r14, xmm2
inc r13d
inc r15
cmp r13d, 0x64
jb 0x14004b010
xor r12d, r12d
mov r13d, dword [rsp + 0x60]
mov r15, qword [rsp + 0x68]
mov r14, qword [rbp + 0x4e0]
mov rdi, qword [rbp + 8]
lea rcx, [rbp + 0x558]
call fcn.140048340
xorps xmm0, xmm0
movups xmmword [rbp + 0x598], xmm0
mov qword [rbp + 0x5a8], r12
mov qword [rbp + 0x5b0], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004b1f0
mov rdx, rax
lea rcx, [rbp + 0x598]
call fcn.14004d6b0
nop
mov qword [rbp + 0x4e0], r12
lea rdx, [rdi + 0x740]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x4e0]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x4e0]
test rdx, rdx
je 0x14004b2f3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov dword [rbp + 0x1e0], eax
mov qword [rsp + 0x20], r12
lea r9d, [rax + 0x64]
lea r8, [rbp + 0x180]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm0, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x730], xmm0
movaps xmm1, xmmword [rbp + 0x190]
movaps xmmword [rbp + 0x740], xmm1
movaps xmm0, xmmword [rbp + 0x1a0]
movaps xmmword [rbp + 0x750], xmm0
movaps xmm1, xmmword [rbp + 0x1b0]
movaps xmmword [rbp + 0x760], xmm1
movaps xmm0, xmmword [rbp + 0x1c0]
movaps xmmword [rbp + 0x770], xmm0
movaps xmm1, xmmword [rbp + 0x1d0]
movaps xmmword [rbp + 0x780], xmm1
mov eax, dword [rbp + 0x1e0]
mov dword [rbp + 0x790], eax
movss xmm0, dword [rbp + 0x4f0]
subss xmm0, dword [rbp + 0x548]
cvtps2pd xmm0, xmm0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
movss xmm1, dword [rbp + 0x4f4]
subss xmm1, dword [rbp + 0x54c]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm1, dword [rbp + 0x4f8]
subss xmm1, dword [rbp + 0x550]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm6
addsd xmm7, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm7
ja 0x14004b367
xorps xmm0, xmm0
sqrtsd xmm0, xmm7
jmp 0x14004b36f
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
cvttss2si ecx, xmm0
mov eax, 0x51eb851f
imul ecx
mov r12d, edx
sar r12d, 5
mov eax, r12d
shr eax, 0x1f
add r12d, eax
mov edx, r12d
lea rcx, [rbp - 0x68]
call fcn.14004d330
or r13d, 2
mov rdx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x50]
mov rax, r8
sub rax, rdx
lea rcx, [rbp - 0x68]
cmp rax, 2
jb 0x14004b3dd
lea rax, [rdx + 2]
mov qword [rbp - 0x58], rax
cmp r8, 0xf
cmova rcx, qword [rbp - 0x68]
movzx eax, word [0x140058338]
mov word [rdx + rcx], ax
mov byte [rdx + rcx + 2], 0
lea rax, [rbp - 0x68]
jmp 0x14004b3f5
mov eax, 2
mov qword [rsp + 0x20], rax
lea r9, [0x140058338]
mov edx, eax
call fcn.14004d920
xorps xmm0, xmm0
movups xmmword [rbp + 0x578], xmm0
xor ebx, ebx
mov qword [rbp + 0x588], rbx
mov qword [rbp + 0x590], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x578], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x588], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
or r13d, 1
mov dword [rsp + 0x60], r13d
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14004b476
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b471
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d04d
call fcn.14004eb9c
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
mov rcx, rbx
mov qword [rbp + 0x520], rbx
mov edx, 0xf
mov qword [rbp + 0x528], rdx
mov byte [rbp + 0x510], bl
mov edi, ebx
nop
cmp rbx, 0x64
jae 0x14004d176
movzx r9d, byte [rbp + rbx + 0x730]
test r9b, r9b
je 0x14004b51c
cmp rcx, rdx
jae 0x14004b4f6
lea rax, [rcx + 1]
mov qword [rbp + 0x520], rax
lea rax, [rbp + 0x510]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x510]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14004b502
lea rcx, [rbp + 0x510]
call fcn.14004d7b0
inc edi
inc rbx
mov rdx, qword [rbp + 0x528]
cmp edi, 0x64
jae 0x14004b51c
mov rcx, qword [rbp + 0x520]
jmp 0x14004b4b0
movzx ebx, byte [rbp + 0x4c1]
cmp bl, 1
jae 0x14004b6c2
cmp rdx, 0xf
jbe 0x14004b566
inc rdx
mov rcx, qword [rbp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b561
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d069
call fcn.14004eb9c
xor r12d, r12d
mov qword [rbp + 0x520], r12
mov qword [rbp + 0x528], 0xf
mov byte [rbp + 0x510], r12b
mov rdx, qword [rbp + 0x590]
cmp rdx, 0xf
jbe 0x14004b5c3
inc rdx
mov rcx, qword [rbp + 0x578]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b5be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d070
call fcn.14004eb9c
mov qword [rbp + 0x588], r12
mov qword [rbp + 0x590], 0xf
mov byte [rbp + 0x578], 0
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 0xf
jbe 0x14004b61d
inc rdx
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b618
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d077
call fcn.14004eb9c
mov qword [rbp + 0x5a8], r12
mov qword [rbp + 0x5b0], 0xf
mov byte [rbp + 0x598], 0
mov rdx, qword [rbp + 0x570]
cmp rdx, 0xf
jbe 0x14004b678
inc rdx
mov rcx, qword [rbp + 0x558]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b672
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d07e
call fcn.14004eb9c
nop
mov rdx, qword [rbp + 0x688]
cmp rdx, 0xf
jbe 0x14004cdbd
inc rdx
mov rcx, qword [rbp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b6b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d085
call fcn.14004eb9c
jmp 0x14004cdbd
mov qword [rbp + 0x500], 0
mov dword [rbp + 0x508], 0
lea rdx, [r14 + 0xc50]
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x500]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm5, dword [rbp + 0x500]
movss xmm7, dword [rbp + 0x4f0]
addss xmm5, xmm7
movss dword [rbp + 0x500], xmm5
movss xmm4, dword [rbp + 0x504]
movss xmm8, dword [rbp + 0x4f4]
addss xmm4, xmm8
movss dword [rbp + 0x504], xmm4
movss xmm6, dword [rbp + 0x508]
movss xmm9, dword [rbp + 0x4f8]
addss xmm6, xmm9
movss dword [rbp + 0x508], xmm6
movss xmm11, dword [rbp + 0x614]
mulss xmm11, xmm8
movss xmm12, dword [rbp + 0x610]
movaps xmm0, xmm12
mulss xmm0, xmm7
addss xmm11, xmm0
movss xmm13, dword [rbp + 0x618]
movaps xmm1, xmm13
mulss xmm1, xmm9
addss xmm11, xmm1
addss xmm11, dword [rbp + 0x61c]
movss xmm3, dword [rbp + 0x644]
mulss xmm3, xmm8
movss xmm14, dword [rbp + 0x640]
movaps xmm0, xmm14
mulss xmm0, xmm7
addss xmm3, xmm0
movss xmm15, dword [rbp + 0x648]
movaps xmm1, xmm15
mulss xmm1, xmm9
addss xmm3, xmm1
addss xmm3, dword [rbp + 0x64c]
movss xmm0, dword [0x1400585c4]
comiss xmm0, xmm3
ja 0x14004cc20
movss xmm2, dword [rbp + 0x624]
mulss xmm2, xmm8
movss xmm8, dword [rbp + 0x620]
movaps xmm0, xmm8
mulss xmm0, xmm7
addss xmm2, xmm0
movss xmm7, dword [rbp + 0x628]
movaps xmm1, xmm7
mulss xmm1, xmm9
addss xmm2, xmm1
movss xmm9, dword [rbp + 0x62c]
addss xmm2, xmm9
movss xmm10, dword [0x1400608a0]
mulss xmm10, dword [0x1400585f4]
mulss xmm11, xmm10
divss xmm11, xmm3
addss xmm11, xmm10
movss dword [rbp + 0x4d8], xmm11
movss xmm11, dword [0x1400608a4]
mulss xmm11, dword [0x1400585f4]
mulss xmm2, xmm11
divss xmm2, xmm3
movaps xmm3, xmm11
subss xmm3, xmm2
movss dword [rbp + 0x4d0], xmm3
movaps xmm0, xmm4
mulss xmm0, dword [rbp + 0x614]
mulss xmm12, xmm5
addss xmm0, xmm12
mulss xmm13, xmm6
addss xmm0, xmm13
addss xmm0, dword [rbp + 0x61c]
movaps xmm1, xmm4
mulss xmm1, dword [rbp + 0x644]
mulss xmm14, xmm5
addss xmm1, xmm14
mulss xmm15, xmm6
addss xmm1, xmm15
addss xmm1, dword [rbp + 0x64c]
movss xmm2, dword [0x1400585c4]
comiss xmm2, xmm1
ja 0x14004cc20
mulss xmm4, dword [rbp + 0x624]
mulss xmm8, xmm5
addss xmm4, xmm8
mulss xmm7, xmm6
addss xmm4, xmm7
addss xmm4, xmm9
movaps xmm13, xmm10
mulss xmm13, xmm0
divss xmm13, xmm1
addss xmm13, xmm10
movaps xmm0, xmm11
mulss xmm0, xmm4
divss xmm0, xmm1
movaps xmm14, xmm11
subss xmm14, xmm0
movaps xmm1, xmm14
subss xmm1, xmm3
movss xmm4, dword [0x140058880]
andps xmm1, xmm4
divss xmm1, dword [0x140058648]
movss xmm7, dword [0x1400585f4]
mulss xmm1, xmm7
movss xmm12, dword [rbp + 0x4d8]
movaps xmm0, xmm12
subss xmm0, xmm1
cvttss2si edx, xmm0
addss xmm1, xmm12
cvttss2si ecx, xmm1
cvttss2si eax, xmm14
movss dword [0x140060810], xmm3
xorps xmm2, xmm2
cvtsi2ss xmm2, eax
subss xmm2, dword [0x140058694]
movss dword [0x140060814], xmm2
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
movss dword [0x140060818], xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, edx
movss dword [0x14006081c], xmm1
movaps xmm15, xmm3
subss xmm15, xmm2
andps xmm15, xmm4
mov r13d, ebx
xorps xmm0, xmm0
cvtsi2ss xmm0, ebx
mulss xmm0, xmm15
divss xmm0, dword [0x1400586c4]
movaps xmm9, xmm15
subss xmm9, xmm0
movss dword [rbp + 0x4d8], xmm9
movzx eax, byte [rbp + 0x4c0]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, xmm15
divss xmm0, dword [0x1400586c4]
subss xmm15, xmm0
lea ecx, [rbx + 0x1e]
cmp ecx, 0x168
jne 0x14004ba16
xor ebx, ebx
jmp 0x14004ba22
mov eax, 0x88888889
mul ecx
mov ebx, edx
shr ebx, 5
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_trunc
cvttsd2si ecx, xmm0
sub ebx, ecx
mov esi, 1
sub esi, ebx
test ecx, ecx
je 0x14004ba80
sub ecx, 1
je 0x14004ba75
sub ecx, 1
je 0x14004ba6a
sub ecx, 1
je 0x14004ba5e
xor r15d, r15d
cmp ecx, 1
jne 0x14004ba85
mov r14d, ebx
mov esi, ecx
jmp 0x14004ba8b
xor r14d, r14d
mov r15d, esi
lea esi, [r14 + 1]
jmp 0x14004ba8b
xor r14d, r14d
lea r15d, [r14 + 1]
mov esi, ebx
jmp 0x14004ba8b
mov r14d, esi
xor esi, esi
lea r15d, [rsi + 1]
jmp 0x14004ba8b
mov r15d, ebx
xor esi, esi
mov r14d, 1
neg r14b
neg r15b
neg sil
cmp byte [0x1400608d2], 0
je 0x14004bd6d
mov eax, dword [0x1400608cc]
test eax, eax
jne 0x14004bb44
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov rdi, rax
movups xmm0, xmmword [0x140060100]
movups xmmword [rbp + 0x148], xmm0
lea rcx, [rbp + 0x148]
call fcn.140003c40
mov ebx, eax
movss dword [rbp + 0x18], xmm13
movss dword [rbp + 0x1c], xmm14
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x20], xmm0
mov dword [rbp + 0x24], 0
movss xmm10, dword [0x140058634]
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x20]
mov rcx, rdi
call fcn.140029460
jmp 0x14004bd76
cmp eax, 1
jne 0x14004bcaa
movaps xmm7, xmm14
subss xmm7, xmm11
movaps xmm6, xmm13
subss xmm6, xmm10
movaps xmm0, xmm7
divss xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_atanf
movaps xmm9, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
comiss xmm6, dword [0x140058588]
jb 0x14004bbb1
movaps xmm8, xmm0
mulss xmm8, dword [0x1400586b8]
addss xmm8, xmm10
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm9, xmm0
movss xmm10, dword [0x1400586b8]
mulss xmm9, xmm10
addss xmm9, xmm11
jmp 0x14004bbe2
mulss xmm0, dword [0x1400586b8]
movaps xmm8, xmm10
subss xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movss xmm10, dword [0x1400586b8]
mulss xmm0, xmm10
movaps xmm9, xmm11
subss xmm9, xmm0
mulss xmm6, xmm6
mulss xmm7, xmm7
addss xmm6, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm6
ja 0x14004bbff
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x14004bc07
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, xmm10
jb 0x14004bd5c
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movups xmm0, xmmword [0x140060100]
movups xmmword [rbp + 0x138], xmm0
lea rcx, [rbp + 0x138]
call fcn.140003c40
movss dword [rbp + 0x10], xmm8
movss dword [rbp + 0x14], xmm9
movss dword [rbp + 0x88], xmm13
movss dword [rbp + 0x8c], xmm14
movss xmm10, dword [0x140058634]
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x88]
mov rcx, r10
call fcn.140029460
movss xmm9, dword [rbp + 0x4d8]
movss xmm7, dword [0x1400585f4]
jmp 0x14004bd76
cmp eax, 2
jne 0x14004bd6d
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov rdi, rax
movups xmm0, xmmword [0x140060100]
movups xmmword [rbp + 0xd8], xmm0
lea rcx, [rbp + 0xd8]
call fcn.140003c40
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x48], xmm0
movss dword [rbp - 0x44], xmm6
movss dword [rbp - 0x40], xmm12
movss xmm0, dword [rbp + 0x4d0]
movss dword [rbp - 0x3c], xmm0
movss xmm10, dword [0x140058634]
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.140029460
jmp 0x14004bd76
movss xmm9, dword [rbp + 0x4d8]
movss xmm7, dword [0x1400585f4]
movss xmm10, dword [0x140058634]
cmp byte [0x1400608cb], 0
je 0x14004be1e
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movups xmm0, xmmword [0x140060110]
movups xmmword [rbp + 0x98], xmm0
lea rcx, [rbp + 0x98]
call fcn.140003c40
movss xmm0, dword [0x140060818]
movss dword [rbp - 0x30], xmm0
movss xmm1, dword [0x140060810]
movss dword [rbp - 0x2c], xmm1
movss xmm0, dword [0x14006081c]
movss dword [rbp - 0x28], xmm0
movss xmm1, dword [0x140060814]
movss dword [rbp - 0x24], xmm1
mov dword [rsp + 0x28], 0
xorps xmm11, xmm11
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x28]
mov rcx, r10
call fcn.1400296d0
jmp 0x14004be22
xorps xmm11, xmm11
cmp byte [0x1400608d5], 0
je 0x14004c033
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov rbx, rax
movss xmm0, dword [0x1400600b8]
movss dword [rbp + 0xc8], xmm0
movss xmm1, dword [0x1400600bc]
movss dword [rbp + 0xcc], xmm1
movss xmm0, dword [0x1400600c0]
movss dword [rbp + 0xd0], xmm0
mov dword [rbp + 0xd4], 0x3dcccccd
lea rcx, [rbp + 0xc8]
call fcn.140003c40
mov edi, eax
movd xmm6, r12d
cvtdq2ps xmm6, xmm6
mov ecx, 1
movss xmm8, dword [0x14005866c]
comiss xmm6, xmm8
mov eax, 3
cmova ecx, eax
comiss xmm6, dword [0x140058690]
mov r12d, 4
cmova ecx, r12d
comiss xmm10, xmm6
mov eax, 2
cmova ecx, eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss xmm2, dword [0x140058684]
subss xmm2, xmm0
movss dword [rbp - 0x18], xmm13
movss dword [rbp - 0x14], xmm14
test edi, 0xff000000
je 0x14004bf42
comiss xmm7, xmm2
ja 0x14004bf42
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.1400285f0
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140028070
mov dword [rbx + 0x78], 0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov rbx, rax
movups xmm0, xmmword [0x1400600b8]
movups xmmword [rbp + 0xb8], xmm0
lea rcx, [rbp + 0xb8]
call fcn.140003c40
mov edi, eax
mov ecx, 1
comiss xmm6, xmm8
mov eax, 3
cmova ecx, eax
comiss xmm6, dword [0x140058690]
cmova ecx, r12d
comiss xmm10, xmm6
mov eax, 2
cmova ecx, eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss xmm8, dword [0x140058684]
movaps xmm2, xmm8
subss xmm2, xmm0
movss dword [rbp - 0x38], xmm13
movss dword [rbp - 0x34], xmm14
test edi, 0xff000000
je 0x14004c03c
comiss xmm7, xmm2
ja 0x14004c03c
subss xmm2, xmm7
mov dword [rsp + 0x28], 0x1f
movss xmm0, dword [0x140058688]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
lea rdx, [rbp - 0x38]
mov rcx, rbx
call fcn.140028b10
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140027150
mov dword [rbx + 0x78], 0
jmp 0x14004c03c
movss xmm8, dword [0x140058684]
cmp byte [0x1400608d3], 0
je 0x14004c264
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
mov qword [rbp + 0xa8], 0
mov dword [rbp + 0xb0], 0
movss xmm0, dword [0x1400600e4]
movss dword [rbp + 0xb4], xmm0
lea rcx, [rbp + 0xa8]
call fcn.140003c40
movss xmm1, dword [0x140060810]
addss xmm1, xmm10
movss xmm0, dword [0x140060818]
addss xmm0, xmm10
movss dword [rbp + 0x90], xmm0
movss dword [rbp + 0x94], xmm1
movss xmm2, dword [0x140060814]
subss xmm2, xmm10
movss xmm0, dword [0x14006081c]
subss xmm0, xmm10
movss dword [rbp], xmm0
movss dword [rbp + 4], xmm2
movss dword [rsp + 0x30], xmm10
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x90]
lea rdx, [rbp]
mov rcx, r10
call fcn.1400295c0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
mov qword [rbp + 0xe8], 0
mov dword [rbp + 0xf0], 0
movss xmm0, dword [0x1400600e4]
movss dword [rbp + 0xf4], xmm0
lea rcx, [rbp + 0xe8]
call fcn.140003c40
movss xmm1, dword [0x140060810]
subss xmm1, xmm10
movss xmm0, dword [0x140060818]
subss xmm0, xmm10
movss dword [rbp - 8], xmm0
movss dword [rbp - 4], xmm1
movss xmm2, dword [0x140060814]
addss xmm2, xmm10
movss xmm0, dword [0x14006081c]
addss xmm0, xmm10
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm2
movss dword [rsp + 0x30], xmm10
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp - 8]
lea rdx, [rbp - 0x10]
mov rcx, r10
call fcn.1400295c0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movups xmm0, xmmword [0x1400600d8]
movups xmmword [rbp + 0xf8], xmm0
lea rcx, [rbp + 0xf8]
call fcn.140003c40
movss xmm0, dword [0x140060818]
movss dword [rbp + 0x30], xmm0
movss xmm1, dword [0x140060810]
movss dword [rbp + 0x34], xmm1
movss xmm0, dword [0x14006081c]
movss dword [rbp + 0x38], xmm0
movss xmm1, dword [0x140060814]
movss dword [rbp + 0x3c], xmm1
movss dword [rsp + 0x30], xmm10
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x38]
mov rcx, r10
call fcn.1400295c0
movss xmm14, dword [0x140058710]
movss xmm6, dword [0x1400586a8]
cmp byte [0x1400608d6], 0
je 0x14004c33a
lea rax, [rbp + 0x510]
cmp qword [rbp + 0x528], 0xf
cmova rax, qword [rbp + 0x510]
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm14
movaps xmm2, xmm6
lea rdx, [rbp + 0x40]
mov rcx, qword [0x1400608f0]
call fcn.14002e1d0
lea r9, [rbp + 0x510]
cmp qword [rbp + 0x528], 0xf
cmova r9, qword [rbp + 0x510]
movups xmm0, xmmword [0x140060120]
movups xmmword [rbp + 0x108], xmm0
movss xmm0, dword [0x140060814]
subss xmm0, dword [rbp + 0x44]
movss xmm13, dword [0x14005866c]
subss xmm0, xmm13
cvttss2si edx, xmm0
movups xmm0, xmmword [rbp + 0x108]
movdqa xmmword [rbp + 0x4e0], xmm0
movss xmm1, dword [rbp + 0x40]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
cvttss2si ecx, xmm0
lea r8, [rbp + 0x4e0]
call fcn.140047c50
jmp 0x14004c346
movss xmm13, dword [0x14005866c]
xor r12d, r12d
cmp byte [0x1400608d1], 0
je 0x14004c773
mov edx, r13d
lea rcx, [rsp + 0x78]
call fcn.14004d330
nop
mov r8, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
sub rax, r8
cmp rax, 4
jb 0x14004c400
lea rax, [r8 + 4]
mov qword [rbp - 0x78], rax
lea rbx, [rsp + 0x78]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x78]
lea rax, [0x140058340]
lea r13, str.HP:
cmp rax, rbx
jbe 0x14004c3be
lea rax, [rbx + r8]
cmp r13, rax
ja 0x14004c3be
cmp rbx, r13
ja 0x14004c3b6
mov rdi, r12
jmp 0x14004c3c3
mov rdi, rbx
sub rdi, r13
jmp 0x14004c3c3
mov edi, 4
inc r8
lea rcx, [rbx + 4]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r13
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 4
sub r8, rdi
lea rdx, [r13 + 4]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x78]
jmp 0x14004c422
mov eax, 4
mov qword [rsp + 0x28], rax
lea rcx, str.HP:
mov qword [rsp + 0x20], rcx
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.14004db90
xorps xmm0, xmm0
movups xmmword [rbp + 0x5b8], xmm0
mov qword [rbp + 0x5c8], r12
mov qword [rbp + 0x5d0], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5b8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5c8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r13d, dword [rsp + 0x60]
or r13d, 0x18
mov dword [rsp + 0x60], r13d
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14004c4a8
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c4a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d054
call fcn.14004eb9c
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
lea rax, [rbp + 0x5b8]
cmp qword [rbp + 0x5d0], 0xf
cmova rax, qword [rbp + 0x5b8]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm14
movaps xmm2, xmm6
lea rdx, [rbp + 0x200]
mov rcx, qword [0x1400608f0]
call fcn.14002e1d0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movaps xmm0, xmmword [0x1400587f0]
movups xmmword [rbp + 0x4e0], xmm0
lea rcx, [rbp + 0x4e0]
call fcn.140003c40
movss xmm1, dword [0x140060810]
addss xmm1, xmm10
movss xmm2, dword [0x14006081c]
movaps xmm0, xmm2
subss xmm0, dword [0x14005864c]
movss dword [rbp + 0x48], xmm0
movss dword [rbp + 0x4c], xmm1
movss xmm1, dword [0x140060814]
subss xmm1, xmm10
subss xmm2, xmm8
movss dword [rbp + 0x50], xmm2
movss dword [rbp + 0x54], xmm1
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x50]
mov rcx, r10
call fcn.1400296d0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movzx r8d, sil
movzx edx, r15b
movzx ecx, r14b
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
movss xmm0, dword [0x1400585a8]
mulss xmm8, xmm0
movss dword [rbp + 0x118], xmm8
movd xmm6, edx
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm0
movss dword [rbp + 0x11c], xmm6
movd xmm7, r8d
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm0
movss dword [rbp + 0x120], xmm7
mov dword [rbp + 0x124], 0x3f800000
lea rcx, [rbp + 0x118]
call fcn.140003c40
movss xmm2, dword [0x14006081c]
movaps xmm0, xmm2
subss xmm0, xmm13
movss dword [rbp + 0x58], xmm0
movss xmm0, dword [0x140060810]
movss dword [rbp + 0x5c], xmm0
movaps xmm1, xmm9
addss xmm1, dword [0x140060814]
subss xmm2, dword [0x14005867c]
movss dword [rbp + 0x60], xmm2
movss dword [rbp + 0x64], xmm1
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
mov rcx, r10
call fcn.1400296d0
lea r9, [rbp + 0x5b8]
cmp qword [rbp + 0x5d0], 0xf
cmova r9, qword [rbp + 0x5b8]
mov dword [rbp + 0x134], 0x3f800000
addss xmm9, dword [0x140060814]
addss xmm9, xmm10
cvttss2si edx, xmm9
movss xmm0, dword [0x14006081c]
subss xmm0, dword [0x140058694]
subss xmm0, dword [rbp + 0x200]
cvttss2si ecx, xmm0
movups xmm1, xmmword [rbp + 0x128]
movss xmm1, xmm8
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm6
shufps xmm1, xmm1, 0xc6
movss xmm1, xmm7
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp + 0x128], xmm1
movdqa xmmword [rbp + 0x4e0], xmm1
lea r8, [rbp + 0x4e0]
call fcn.140047c50
nop
mov rdx, qword [rbp + 0x5d0]
cmp rdx, 0xf
jbe 0x14004c758
inc rdx
mov rcx, qword [rbp + 0x5b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c753
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d05b
call fcn.14004eb9c
mov qword [rbp + 0x5c8], r12
mov qword [rbp + 0x5d0], 0xf
mov byte [rbp + 0x5b8], 0
jmp 0x14004c778
mov r13d, dword [rsp + 0x60]
cmp byte [0x1400608d0], 0
je 0x14004ca9e
movzx edx, byte [rbp + 0x4c0]
lea rcx, [rbp + 0x158]
call fcn.14004d330
nop
lea rbx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rbx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x168]
lea rsi, [0x1400516ff]
cmp rsi, rbx
jbe 0x14004c7d9
lea rax, [r8 + rbx]
cmp rsi, rax
ja 0x14004c7d9
cmp rbx, rsi
jbe 0x14004c7d9
mov rdi, rbx
sub rdi, rsi
jmp 0x14004c7dc
mov rdi, r12
inc r8
mov rdx, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
neg r8
lea rdx, [rdi + rsi]
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [rbp + 0x158]
movups xmmword [rbp + 0x650], xmm0
movups xmm1, xmmword [rbp + 0x168]
movups xmmword [rbp + 0x660], xmm1
or r13d, 0x24
mov dword [rsp + 0x60], r13d
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], 0xf
mov byte [rbp + 0x158], 0
lea rdx, [rbp + 0x650]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova rdx, rcx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdx
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm14
movss xmm7, dword [0x1400586a8]
movaps xmm2, xmm7
lea rdx, [rbp + 0x228]
mov rcx, qword [0x1400608f0]
call fcn.14002e1d0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movaps xmm0, xmmword [0x1400587f0]
movups xmmword [rbp + 0x4e0], xmm0
lea rcx, [rbp + 0x4e0]
call fcn.140003c40
movss xmm1, dword [0x140060810]
addss xmm1, xmm10
movss xmm2, dword [0x140060818]
movaps xmm0, xmm2
addss xmm0, dword [0x14005864c]
movss dword [rbp + 0x68], xmm0
movss dword [rbp + 0x6c], xmm1
movss xmm1, dword [0x140060814]
subss xmm1, xmm10
addss xmm2, dword [0x140058684]
movss dword [rbp + 0x70], xmm2
movss dword [rbp + 0x74], xmm1
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x70]
mov rcx, r10
call fcn.1400296d0
mov rax, qword [0x140060800]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007aa0
mov r10, rax
movaps xmm0, xmmword [0x140058850]
movups xmmword [rbp + 0x4e0], xmm0
lea rcx, [rbp + 0x4e0]
call fcn.140003c40
movss xmm2, dword [0x140060818]
movaps xmm0, xmm2
addss xmm0, xmm13
movss dword [rbp + 0x78], xmm0
movss xmm0, dword [0x140060810]
movss dword [rbp + 0x7c], xmm0
movaps xmm1, xmm15
addss xmm1, dword [0x140060814]
addss xmm2, dword [0x14005867c]
movss dword [rbp + 0x80], xmm2
movss dword [rbp + 0x84], xmm1
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x80]
mov rcx, r10
call fcn.1400296d0
lea r9, [rbp + 0x650]
cmp qword [rbp + 0x668], 0xf
cmova r9, qword [rbp + 0x650]
movaps xmm1, xmmword [0x140058850]
addss xmm15, dword [0x140060814]
addss xmm15, xmm10
cvttss2si edx, xmm15
movss xmm0, dword [0x140060818]
addss xmm0, dword [0x140058698]
cvttss2si ecx, xmm0
movdqa xmmword [rbp + 0x4e0], xmm1
lea r8, [rbp + 0x4e0]
call fcn.140047c50
nop
mov rdx, qword [rbp + 0x668]
cmp rdx, 0xf
jbe 0x14004ca83
inc rdx
mov rcx, qword [rbp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ca7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d062
call fcn.14004eb9c
mov qword [rbp + 0x660], r12
mov qword [rbp + 0x668], 0xf
mov byte [rbp + 0x650], 0
jmp 0x14004caa6
movss xmm7, dword [0x1400586a8]
lea rax, [rbp + 0x598]
cmp qword [rbp + 0x5b0], 0xf
cmova rax, qword [rbp + 0x598]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm14
movaps xmm2, xmm7
lea rdx, [rbp - 0x20]
mov rbx, qword [0x1400608f0]
mov rcx, rbx
call fcn.14002e1d0
movss xmm6, dword [0x1400585f4]
cmp byte [0x1400608d4], 0
je 0x14004cb66
lea r9, [rbp + 0x598]
cmp qword [rbp + 0x5b0], 0xf
cmova r9, qword [rbp + 0x598]
movups xmm0, xmmword [0x1400600c8]
movups xmmword [rbp + 0x5d8], xmm0
movss xmm0, dword [0x140060810]
addss xmm0, xmm13
cvttss2si edx, xmm0
movups xmm0, xmmword [rbp + 0x5d8]
movdqa xmmword [rbp + 0x4e0], xmm0
movss xmm1, dword [rbp - 0x20]
mulss xmm1, xmm6
movaps xmm0, xmm12
subss xmm0, xmm1
cvttss2si ecx, xmm0
lea r8, [rbp + 0x4e0]
call fcn.140047c50
mov rbx, qword [0x1400608f0]
cmp byte [0x1400608c8], 0
je 0x14004cc19
lea rax, [rbp + 0x578]
cmp qword [rbp + 0x590], 0xf
cmova rax, qword [rbp + 0x578]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm14
movaps xmm2, xmm7
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.14002e1d0
lea r9, [rbp + 0x578]
cmp qword [rbp + 0x590], 0xf
cmova r9, qword [rbp + 0x578]
movups xmm0, xmmword [0x140060130]
movups xmmword [rbp + 0x538], xmm0
movss xmm0, dword [rbp - 0x1c]
addss xmm0, dword [0x140060810]
addss xmm0, xmm13
cvttss2si edx, xmm0
movups xmm0, xmmword [rbp + 0x538]
movdqa xmmword [rbp + 0x4e0], xmm0
movss xmm1, dword [rsp + 0x70]
mulss xmm1, xmm6
subss xmm12, xmm1
cvttss2si ecx, xmm12
lea r8, [rbp + 0x4e0]
call fcn.140047c50
mov r15, qword [rsp + 0x68]
jmp 0x14004cc23
xor r12d, r12d
mov rdx, qword [rbp + 0x528]
cmp rdx, 0xf
jbe 0x14004cc64
inc rdx
mov rcx, qword [rbp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cc5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d069
call fcn.14004eb9c
mov qword [rbp + 0x520], r12
mov qword [rbp + 0x528], 0xf
mov byte [rbp + 0x510], 0
mov rdx, qword [rbp + 0x590]
cmp rdx, 0xf
jbe 0x14004ccbe
inc rdx
mov rcx, qword [rbp + 0x578]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ccb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d070
call fcn.14004eb9c
mov qword [rbp + 0x588], r12
mov qword [rbp + 0x590], 0xf
mov byte [rbp + 0x578], 0
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 0xf
jbe 0x14004cd18
inc rdx
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cd13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d077
call fcn.14004eb9c
mov qword [rbp + 0x5a8], r12
mov qword [rbp + 0x5b0], 0xf
mov byte [rbp + 0x598], 0
mov rdx, qword [rbp + 0x570]
cmp rdx, 0xf
jbe 0x14004cd73
inc rdx
mov rcx, qword [rbp + 0x558]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cd6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d07e
call fcn.14004eb9c
nop
mov rdx, qword [rbp + 0x688]
cmp rdx, 0xf
jbe 0x14004cdb4
inc rdx
mov rcx, qword [rbp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cdaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d085
call fcn.14004eb9c
movsd xmm8, qword [0x140058650]
mov rsi, qword [rbp + 0x7a0]
mov r14, qword [rbp + 0x4c8]
mov eax, dword [rsp + 0x64]
inc eax
mov dword [rsp + 0x64], eax
cmp eax, 0x40
mov ebx, eax
lea rax, [r14 + 0x10]
jl 0x14004ac00
mov edi, 0xff
movabs rsi, 0x4e94914effff
cmp byte [0x1400608f8], 0
je 0x14004cfba
mov rax, qword [0x140060800]
or dword [rax + 0x4a00], 2
mov dword [rax + 0x4a20], 0x43fa0000
mov dword [rax + 0x4a24], 0x43af0000
mov dword [rax + 0x4a08], 1
mov r8d, 0x23
lea rdx, [0x1400608f8]
lea rcx, str.SkechWare_CS2_External_Cheat
call fcn.14000def0
lea rcx, str.SkechWare_CS2_Free_External_Cheat_v1.0
call fcn.140034e80
lea rdx, [0x1400608c9]
lea rcx, str.ESP_Active
call fcn.140036c60
lea rdx, [0x1400608ca]
lea rcx, str.Team_Check
call fcn.140036c60
lea rdx, [0x1400608d3]
lea rcx, str.Box_Esp
call fcn.140036c60
lea rdx, [0x1400600d8]
lea rcx, [0x1400572bc]
call fcn.14004a020
lea rdx, [0x1400608cb]
lea rcx, str.Fill_Box
call fcn.140036c60
lea rdx, [0x140060110]
lea rcx, str.Fill
call fcn.14004a020
lea rdx, [0x1400608d6]
lea rcx, str.Name_Esp
call fcn.140036c60
lea rdx, [0x140060120]
lea rcx, str.Name
call fcn.14004a020
lea rdx, [0x1400608d5]
lea rcx, str.Head_Circle_Esp
call fcn.140036c60
lea rdx, [0x1400600b8]
lea rcx, str.HeadCircle
call fcn.14004a020
lea rdx, [0x1400608d1]
lea rcx, str.Health_Esp
call fcn.140036c60
lea rdx, [0x1400608d0]
lea rcx, str.Armor_Esp
call fcn.140036c60
lea rdx, [0x1400608d4]
lea rcx, str.Weapon_Name_Esp
call fcn.140036c60
lea rdx, [0x1400600c8]
lea rcx, str.Weapon_Name
call fcn.14004a020
lea rdx, [0x1400608c8]
lea rcx, str.Distance_Esp
call fcn.140036c60
lea rdx, [0x140060130]
lea rcx, str.Distance
call fcn.14004a020
lea rdx, [0x1400608d2]
lea rcx, str.Snapline_Esp
call fcn.140036c60
lea rdx, [0x140060100]
lea rcx, str.Snapline
call fcn.14004a020
cmp byte [0x1400608d2], 0
je 0x14004cfb5
call fcn.140038fc0
call fcn.140010570
call fcn.14000a540
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a8], xmm0
mov rcx, qword [0x140060888]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140060898]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140060888]
mov rax, qword [rcx]
lea r8, [rbp + 0x7a8]
mov rdx, qword [0x140060898]
call qword [rax + 0x190]
mov rax, qword [0x140060800]
mov rcx, qword [rax + 0x4b10]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r12
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14002ffd0
mov rcx, qword [0x140060880]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
cmp byte [0x14006091c], 0
je 0x14004d08c
mov r14, qword [rbp + 0x28]
jmp 0x14004a8aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004e7b0
mov rcx, qword [0x140060828]
test rcx, rcx
je 0x14004d0d3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140060888]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140060880]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140060898]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, str._____Released_Device_n
jmp 0x14004d0da
lea rcx, str._____Device_Not_Found_when_Exiting._n
call fcn.1400011a0
mov rcx, qword [0x140060890]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x140060848]
mov rcx, qword [0x140060870]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov rcx, qword [rbp + 0x7b8]
xor rcx, rsp
call fcn.14004ea00
lea r11, [rsp + 0x960]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14004d180
nop
call fcn.14004d310
nop
call fcn.14004d180
int3