Function at 0x180049490
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov r9, qword [0x18006cfb8]
xor edi, edi
cmp byte [0x18006e230], dil
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [r9 + 0x3ed8]
mov rbx, qword [rax + 0x288]
jne 0x180049521
mov qword [rsp + 0x28], rdi
lea r8, [0x180016090]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r9, qword [0x18006cfb8]
mov byte [0x18006e230], 1
mov rax, qword [r9 + 0x3ed8]
lea rcx, [rbp - 0x29]
movss xmm1, dword [r9 + 0x37f8]
xorps xmm10, xmm10
movss xmm11, dword [0x180062a00]
movss xmm12, dword [0x18006280c]
movss xmm8, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
mulss xmm1, xmm11
mov qword [rbp - 0x29], 0x3f149495
mov dword [rbp - 0x21], 0x3f800000
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm12
movss dword [rbp - 0x1d], xmm0
call fcn.180009c20
movss xmm2, dword [0x180062978]
movaps xmm0, xmm7
movss xmm6, dword [0x180062950]
movaps xmm9, xmm8
mov r8, qword [0x18006d128]
addss xmm0, xmm2
addss xmm9, xmm6
mov ecx, eax
movss dword [rbp + 0x6b], xmm0
movss dword [rbp + 0x67], xmm9
test eax, 0xff000000
je 0x180049625
test r8, r8
jne 0x1800495cc
mov rax, qword [rbx + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], dil
lea rax, [0x180062314]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x67]
mov qword [rsp + 0x38], rax
mov rdx, rbx
lea rax, str.Merlin_Ghost
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, r8
movups xmmword [rbp - 0x29], xmm0
call fcn.180030970
mov r8, qword [0x18006d128]
mov r9, qword [0x18006cfb8]
movss xmm1, dword [r9 + 0x37f8]
lea rcx, [rbp - 0x29]
mulss xmm1, xmm11
mov dword [rbp - 0x29], 0x3ef2f2f4
mov dword [rbp - 0x25], 0x3e7cfcfe
mov dword [rbp - 0x21], 0x3f5fdfe1
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm12
movss dword [rbp - 0x1d], xmm0
call fcn.180009c20
movss dword [rbp + 0x67], xmm9
movaps xmm0, xmm7
movss xmm9, dword [0x180062960]
mov ecx, eax
addss xmm0, dword [0x1800629a8]
movss dword [rbp + 0x6b], xmm0
test eax, 0xff000000
je 0x1800496f8
test r8, r8
jne 0x18004969b
mov rax, qword [rbx + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], dil
lea rax, [0x18006231e]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x67]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm9
lea rax, str.COMBAT
mov rdx, rbx
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, r8
movups xmmword [rbp - 0x29], xmm0
call fcn.180030970
mov r8, qword [0x18006d128]
mov r9, qword [0x18006cfb8]
movss xmm0, dword [r9 + 0x37f8]
lea rcx, [rbp - 0x29]
mulss xmm0, xmm11
mov dword [rbp - 0x29], 0x3ef2f2f4
mov dword [rbp - 0x25], 0x3e7cfcfe
mov dword [rbp - 0x21], 0x3f5fdfe1
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm12
movss dword [rbp - 0x1d], xmm1
call fcn.180009c20
movaps xmm0, xmm8
movaps xmm1, xmm7
addss xmm0, xmm6
mov ecx, eax
addss xmm1, dword [0x1800629f4]
movss dword [rbp + 0x67], xmm0
movss dword [rbp + 0x6b], xmm1
test eax, 0xff000000
je 0x1800497c9
test r8, r8
jne 0x18004976c
mov rax, qword [rbx + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], dil
lea rax, [0x180062328]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x67]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm9
lea rax, str.MOVEMENT
mov rdx, rbx
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, r8
movups xmmword [rbp - 0x29], xmm0
call fcn.180030970
mov r8, qword [0x18006d128]
mov r9, qword [0x18006cfb8]
movss xmm0, dword [r9 + 0x37f8]
lea rcx, [rbp - 0x29]
mulss xmm0, xmm11
mov dword [rbp - 0x29], 0x3ef2f2f4
mov dword [rbp - 0x25], 0x3e7cfcfe
mov dword [rbp - 0x21], 0x3f5fdfe1
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm12
movss dword [rbp - 0x1d], xmm1
call fcn.180009c20
addss xmm8, xmm6
mov ecx, eax
addss xmm7, dword [0x180062a10]
movss dword [rbp + 0x67], xmm8
movss dword [rbp + 0x6b], xmm7
test eax, 0xff000000
je 0x18004988e
test r8, r8
jne 0x180049838
mov rax, qword [rbx + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], dil
lea rax, [0x180062332]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x67]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm9
lea rax, str.OTHERS
mov rdx, rbx
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, r8
movups xmmword [rbp - 0x29], xmm0
call fcn.180030970
mov r9, qword [0x18006cfb8]
mov rax, qword [r9 + 0x3ed8]
lea rdx, str.KillAura
cmp dword [0x18006d4fc], edi
lea rcx, str.ktgv
sete r8b
mov byte [rax + 0x98], 1
mov rax, qword [r9 + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x1800629b4]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049924
mov dword [0x18006d4fc], edi
jmp 0x18004992a
mov edi, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
lea rdx, str.TpAura
cmp edi, 1
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x180062338]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x1800629cc]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x1800499c9
mov edx, 1
mov dword [0x18006d4fc], edx
jmp 0x1800499cf
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 2
lea rdx, str.AimBot
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x18006151c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x1800629e4]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049a6e
mov edx, 2
mov dword [0x18006d4fc], edx
jmp 0x180049a74
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 3
lea rdx, str.Glide
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x18006233c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x1800629fc]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049b13
mov edx, 3
mov dword [0x18006d4fc], edx
jmp 0x180049b19
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 4
lea rdx, str.Velocity
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x180062340]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x180062a04]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049bb8
mov edx, 4
mov dword [0x18006d4fc], edx
jmp 0x180049bbe
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 5
lea rdx, str.ClickTP
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x180062344]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x180062a0c]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049c5d
mov edx, 5
mov dword [0x18006d4fc], edx
jmp 0x180049c63
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 6
lea rdx, str.Misc
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x18006195c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x180062a1c]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049d02
mov edx, 6
mov dword [0x18006d4fc], edx
jmp 0x180049d08
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 7
lea rdx, [0x180062348]
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x180062354]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x180062a24]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049da7
mov edx, 7
mov dword [0x18006d4fc], edx
jmp 0x180049dad
mov edx, dword [0x18006d4fc]
mov rcx, qword [0x18006cfb8]
cmp edx, 8
lea rdx, str.Config
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x1800619f4]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, dword [0x180062a28]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18003dfa0
test al, al
je 0x180049e4c
mov eax, 8
mov dword [0x18006d4fc], eax
jmp 0x180049e52
mov eax, dword [0x18006d4fc]
cmp eax, 7
ja case.default.0x180049e6a
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x49edc]
add rcx, rdx
jmp rcx
call fcn.1800465a0
jmp case.default.0x180049e6a
call fcn.180046f30
jmp case.default.0x180049e6a
call fcn.180046a70
jmp case.default.0x180049e6a
call fcn.180047420
jmp case.default.0x180049e6a
call fcn.180047920
jmp case.default.0x180049e6a
call fcn.180047de0
jmp case.default.0x180049e6a
call fcn.1800485c0
jmp case.default.0x180049e6a
call fcn.1800482b0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop rbp
ret