Function at 0x140002970
Capabilities:
Access peb ldr_data
Check os version
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x140114040]
xor rax, rsp
mov qword [rbp + 0x38], rax
xor r13d, r13d
mov rsi, qword [0x140114980]
mov qword [rsp + 0x60], rsi
mov r14, qword [0x140114908]
mov qword [rsp + 0x68], r14
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140114a14], eax
jle 0x140002a24
lea rcx, [0x140114a14]
call fcn.1400c14ac
cmp dword [0x140114a14], 0xffffffff
jne 0x140002a24
movss xmm0, dword [r14 + 0x3938]
movss dword [0x140114a10], xmm0
lea rcx, [0x140114a14]
call fcn.1400c1440
mov rax, qword [0x140114908]
mov dword [rax + 0x4ab0], 0x3f79999a
or dword [rax + 0x4a50], 0x42
mov dword [rax + 0x4a70], 0x44354000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 1
mov r8d, 0x22
lea rdx, [0x1401141f1]
lea rcx, str._Fivem_External__discord.gg_nebulastore
call fcn.140016d90
mov rbx, qword [0x140114908]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x140002a9a
cmp qword [rbx + 0x4e40], r13
lea rcx, [rdx + 0x268]
je 0x140002aa1
lea rcx, [rdx + 0x238]
movsd xmm0, qword [rcx]
movaps xmm1, xmm0
shufps xmm1, xmm1, 0x55
movsd qword [rbp - 0x50], xmm0
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp - 0x50], 0x43160000
movss dword [rbp - 0x4c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.SelectChild
call fcn.14000b130
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002b14
lea r8, str.SelectChild
mov edx, 0xb
mov ecx, eax
call fcn.140025d00
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.SelectChild
call fcn.140013ab0
call fcn.140041ea0
mov ebx, r13d
mov rax, qword [0x140114968]
mov rdx, qword [0x140114960]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140002c00
mov dword [rbp - 0x4c], 0x420c0000
mov rdi, r13
nop
cmp dword [0x1401149ac], ebx
sete byte [rbp - 0x48]
mov rax, qword [0x140114908]
mov r8, qword [rax + 0x4040]
mov rcx, r8
cmp qword [r8 + 0x1c0], r13
jne 0x140002b96
cmp qword [rax + 0x4e40], r13
jne 0x140002b96
add rcx, 0x268
jmp 0x140002b9d
add rcx, 0x238
movsd xmm0, qword [rcx]
movsd qword [rbp - 0x40], xmm0
subss xmm0, dword [r8 + 0x118]
movss dword [rbp - 0x50], xmm0
lea rcx, [rdx + rdi]
cmp qword [rcx + 0x18], 0xf
jbe 0x140002bc2
mov rcx, qword [rcx]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
call fcn.140008320
test al, al
je 0x140002bd9
mov dword [0x1401149ac], ebx
inc ebx
add rdi, 0x20
mov rcx, qword [0x140114968]
mov rdx, qword [0x140114960]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x140002b60
call fcn.140013e40
movss xmm6, dword [0x140103698]
movaps xmm1, xmm6
xorps xmm7, xmm7
xorps xmm0, xmm0
call fcn.14001d6e0
mov rbx, qword [0x140114908]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x140002c42
cmp qword [rbx + 0x4e40], r13
lea rcx, [rdx + 0x268]
je 0x140002c49
lea rcx, [rdx + 0x238]
movsd xmm1, qword [rcx]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
subss xmm0, dword [rdx + 0x11c]
movsd qword [rbp - 0x50], xmm1
subss xmm1, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm1
movss dword [rbp - 0x4c], xmm0
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.ContextChild
call fcn.14000b130
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002cc2
lea r8, str.ContextChild
mov edx, 0xb
mov ecx, eax
call fcn.140025d00
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.ContextChild
call fcn.140013ab0
cmp dword [0x1401149ac], 3
je 0x140002e0a
mov rax, qword [0x140114908]
mov r8, qword [rax + 0x4040]
mov rcx, r8
mov r9, qword [r8 + 0x1c0]
test r9, r9
jne 0x140002d32
cmp qword [rax + 0x4e40], r13
jne 0x140002d32
movsd xmm0, qword [r8 + 0x268]
movaps xmm1, xmm0
shufps xmm1, xmm1, 0x55
movsd qword [rbp - 0x50], xmm0
subss xmm1, dword [r8 + 0x11c]
mov rdx, rcx
jmp 0x140002d5b
movsd xmm1, qword [r8 + 0x238]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x50], xmm1
subss xmm0, dword [r8 + 0x11c]
movaps xmm1, xmm0
mov rdx, rcx
test r9, r9
jne 0x140002d6d
cmp qword [rax + 0x4e40], r13
jne 0x140002d6d
add rdx, 0x268
jmp 0x140002d74
add rdx, 0x238
movsd xmm0, qword [rdx]
movsd qword [rbp - 0x50], xmm0
subss xmm0, dword [r8 + 0x118]
mulss xmm0, dword [0x140103554]
subss xmm0, dword [0x140103600]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
mov byte [r8 + 0xcc], 1
mov rbx, qword [rax + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.LeftChild
call fcn.14000b130
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x140002df0
lea r8, str.LeftChild
mov edx, 0xb
mov ecx, eax
call fcn.140025d00
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.LeftChild
call fcn.140013ab0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002e3f
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov ecx, dword [0x1401149ac]
lea r15, str._.1f
movss xmm8, dword [0x140103594]
test ecx, ecx
je 0x140003e9f
sub ecx, 1
je 0x140003bdd
sub ecx, 1
je 0x1400039ed
sub ecx, 1
je 0x140003067
cmp ecx, 1
jne 0x14000407b
lea rcx, str.System
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140002ed6
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140002ec6
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002f04
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x140114250]
lea rcx, str.StreamProof
call fcn.140040da0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002f4c
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
call fcn.140041ea0
lea rcx, str.Crosshair
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140002fa6
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140002f96
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140002fd4
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x140114251]
lea rcx, str.Crosshair
call fcn.140040da0
mov dword [rbp - 0x40], 0xa
mov dword [rbp - 0x50], 1
lea rcx, str.CrosshairSize
call fcn.14003ec60
lea rax, [0x14010109c]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, [0x140114258]
mov edx, 4
lea rcx, str.SizeCH
call fcn.140044810
lea rdx, [rsi + 0x180]
xor r8d, r8d
lea rcx, str.ColorC
call fcn.14004bbf0
lea r9, str.Cross
lea rdx, [0x140114254]
lea rcx, str.TypeC
call fcn.1400433c0
jmp 0x14000407b
mov qword [rbp - 0x50], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r15, [0x1401149d0]
mov r8, r15
xor edx, edx
lea rcx, str.SerchPlayer
call fcn.140047bd0
mov qword [rbp - 0x50], r13
movss dword [rsp + 0x20], xmm7
lea r9, [rbp - 0x50]
call fcn.1400368e0
test al, al
je 0x1400039e1
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003109
cmp byte [rbx + 0x237], r13b
je 0x1400030f7
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400030f7
cmp ecx, 0xffffffff
je 0x1400030f0
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003101
xorps xmm1, xmm1
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
lea rcx, str.Name
call fcn.14003ec60
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003162
cmp byte [rbx + 0x237], r13b
je 0x140003150
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003150
cmp ecx, 0xffffffff
je 0x140003149
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000315a
xorps xmm1, xmm1
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
lea rcx, str.Alive
call fcn.14003ec60
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400031bb
cmp byte [rbx + 0x237], r13b
je 0x1400031a9
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400031a9
cmp ecx, 0xffffffff
je 0x1400031a2
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400031b3
xorps xmm1, xmm1
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
lea rcx, str.Vehicle
call fcn.14003ec60
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x140003214
cmp byte [rbx + 0x237], r13b
je 0x140003202
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003202
cmp ecx, 0xffffffff
je 0x1400031fb
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000320c
xorps xmm1, xmm1
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
lea rcx, str.Position
call fcn.14003ec60
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x14000326d
cmp byte [rbx + 0x237], r13b
je 0x14000325b
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x14000325b
cmp ecx, 0xffffffff
je 0x140003254
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003265
xorps xmm1, xmm1
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
lea rcx, [0x140101048]
call fcn.14003ec60
mov r12, qword [rsi + 0xf8]
mov qword [rbp - 0x40], r12
mov rdx, qword [rsi + 0x100]
mov qword [rbp - 0x50], rdx
cmp r12, rdx
je 0x1400039dc
movabs rsi, 0x8000000000000000
movabs r14, 0x7fffffffffffffff
movdqa xmm9, xmmword [0x140103a40]
movdqa xmm10, xmmword [0x140103a70]
mov rax, rdx
mov rdx, qword [r12 + 0x10]
test rdx, rdx
je 0x1400034ee
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
add rdx, 0xfc
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x18]
mov rcx, qword [0x140114950]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r13
lea rax, [rbp + 0x18]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140003320
cmp rbx, r14
ja 0x140004b5e
cmp rbx, 0xf
ja 0x14000335e
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
mov r8, rbx
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x30], 0
jmp 0x1400033ea
mov rdi, rbx
or rdi, 0xf
cmp rdi, r14
jbe 0x140003373
mov rdi, r14
lea rax, [rsi + 0x27]
jmp 0x1400033a4
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14000338e
mov rsi, r13
jmp 0x1400033cb
cmp rcx, 0x1000
jb 0x1400033c3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b64
mov rcx, rax
call fcn.1400c13d0
test rax, rax
je 0x1400039cb
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400033cb
call fcn.1400c13d0
mov rsi, rax
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
mov r8, rbx
lea rdx, [rbp + 0x18]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], 0
mov r13, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x30]
lea rax, [0x140101054]
cmp r15, rax
je 0x140003525
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [r15 + rdi], 0
jne 0x140003410
lea r14, [rbp - 0x30]
cmp r13, 0xf
cmova r14, rsi
mov rax, qword [rbp - 0x20]
cmp rdi, rax
ja 0x14000349c
test rdi, rdi
je 0x14000351b
sub rax, rdi
lea r15, [rax + r14]
movsx r12d, byte [0x1401149d0]
lea r8, [r15 + 1]
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003498
mov r8, rdi
lea rdx, [0x1401149d0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000350e
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003461
mov r12, qword [rbp - 0x40]
cmp r13, 0xf
jbe 0x1400034d3
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400034cb
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039cb
mov rcx, rsi
call fcn.1400c140c
xor r13d, r13d
movabs r14, 0x7fffffffffffffff
movabs rsi, 0x8000000000000000
mov rax, qword [rbp - 0x50]
add r12, 0xf8
mov qword [rbp - 0x40], r12
cmp r12, rax
je 0x1400039d2
lea r15, [0x1401149d0]
jmp 0x1400032c1
sub rbx, r14
mov r12, qword [rbp - 0x40]
cmp rbx, 0xffffffffffffffff
je 0x14000349c
movabs r14, 0x7fffffffffffffff
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x14000357a
cmp byte [rbx + 0x237], 0
je 0x140003560
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003560
cmp ecx, 0xffffffff
je 0x140003559
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x14000356a
movaps xmm1, xmm7
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
mov rsi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x18]
lea rcx, [rbp - 0x30]
cmp r13, 0xf
cmova rcx, rsi
call fcn.14003ec60
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400035d8
cmp byte [rbx + 0x237], 0
je 0x1400035c6
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400035c6
cmp ecx, 0xffffffff
je 0x1400035bf
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400035d0
movaps xmm1, xmm7
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
movss xmm4, dword [r12 + 0x28]
comiss xmm7, xmm4
jae 0x140003625
mov dword [rsp + 0x78], 0
movsd xmm3, qword [r12 + 0x30]
movss xmm0, dword [r12 + 0x38]
movlhps xmm3, xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm7
xorps xmm2, xmm2
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x78]
movlhps xmm2, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x140003625
xor al, al
jmp 0x140003627
mov al, 1
lea rdx, [0x14010105c]
test al, al
lea rdi, [0x140101058]
cmove rdx, rdi
comiss xmm7, xmm4
jae 0x14000368a
mov dword [rsp + 0x48], 0
movsd xmm3, qword [r12 + 0x30]
movss xmm0, dword [r12 + 0x38]
movlhps xmm3, xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm7
xorps xmm2, xmm2
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x48]
movlhps xmm2, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x14000368a
movups xmmword [rsp + 0x7c], xmm10
lea rax, [rsp + 0x7c]
jmp 0x140003693
movups xmmword [rbp - 0x74], xmm9
lea rax, [rbp - 0x74]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.14003ecd0
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400036f0
cmp byte [rbx + 0x237], 0
je 0x1400036de
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400036de
cmp ecx, 0xffffffff
je 0x1400036d7
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400036e8
movaps xmm1, xmm7
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
mov rdx, qword [0x140114198]
add rdx, qword [r12]
mov byte [rbp - 0x48], 0
xor r13d, r13d
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x48]
mov rcx, qword [0x140114950]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x48], 0x40
lea rbx, [0x14010105c]
cmovne rbx, rdi
mov rdx, qword [0x140114198]
add rdx, qword [r12]
mov byte [rbp - 0x48], r13b
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x48]
mov rcx, qword [0x140114950]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x48], 0x40
je 0x140003769
movups xmmword [rbp - 0x64], xmm10
lea rax, [rbp - 0x64]
jmp 0x140003774
movups xmmword [rsp + 0x50], xmm9
lea rax, [rsp + 0x50]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14003ecd0
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x1400037d4
cmp byte [rbx + 0x237], r13b
je 0x1400037c2
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x1400037c2
cmp ecx, 0xffffffff
je 0x1400037bb
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x1400037cc
movaps xmm1, xmm7
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
movss xmm3, dword [r12 + 0x38]
cvtps2pd xmm3, xmm3
movss xmm2, dword [r12 + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [r12 + 0x30]
cvtps2pd xmm1, xmm1
movq r9, xmm3
movq r8, xmm2
movq rdx, xmm1
lea rcx, str._.f___.f___.f
call fcn.14003ec60
mov rax, qword [0x140114908]
mov rbx, qword [rax + 0x4e40]
test rbx, rbx
je 0x14000385a
cmp byte [rbx + 0x237], r13b
je 0x140003848
mov ecx, dword [rbx + 0x74]
lea eax, [rcx + 1]
cmp eax, dword [rbx + 0x6c]
jge 0x140003848
cmp ecx, 0xffffffff
je 0x140003841
mov rcx, rbx
call fcn.14003a8f0
mov edx, dword [rbx + 0x74]
inc edx
jmp 0x140003852
movaps xmm1, xmm7
call fcn.140039cd0
xor edx, edx
mov rcx, rbx
call fcn.14003a720
mov rsi, qword [rbp - 0x20]
mov rax, r14
sub rax, rsi
cmp rax, 0xa
jb 0x140004b70
lea r15, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r15, qword [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
lea r14, [rsi + 0xa]
mov edi, 0xf
lea rbx, [rbp - 8]
cmp r14, rdi
jbe 0x14000391e
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x1400038c2
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400038f3
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400038dd
mov rbx, r13
jmp 0x14000391a
cmp rcx, 0x1000
jb 0x140003912
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b6a
mov rcx, rax
call fcn.1400c13d0
test rax, rax
je 0x1400039c4
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000391a
call fcn.1400c13d0
mov rbx, rax
mov qword [rbp - 8], rbx
mov qword [rbp + 0x10], rdi
movsd xmm0, qword [str.Teleport]
movsd qword [rbx], xmm0
movzx ecx, word [0x140101078]
mov word [rbx + 8], cx
lea rcx, [rbx + 0xa]
mov r8, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], r13b
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140003984
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000397e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039c4
call fcn.1400c140c
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x1400034d6
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039cb
call fcn.1400c140c
jmp 0x1400034d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rsi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
call fcn.140039360
lea r15, str._.1f
jmp 0x14000407b
lea rcx, str.Visual
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003a42
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003a32
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003a70
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x140114238]
lea rcx, [0x140100fac]
call fcn.140040da0
lea rdx, [0x140114239]
lea rcx, str.NPC_ESP
call fcn.140040da0
call fcn.140041ea0
mov r11, qword [0x140114908]
mov rax, qword [r11 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r11 + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003ad0
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rcx, str.ESP_Options
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003b25
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003b15
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003b53
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x14011423a]
lea rcx, [0x140100fc4]
call fcn.140040da0
lea rdx, [0x14011423b]
lea rcx, str.BoxFilled
call fcn.140040da0
lea rdx, [0x14011423c]
lea rcx, str.Line
call fcn.140040da0
lea rdx, [0x14011423d]
lea rcx, str.Name
call fcn.140040da0
lea rdx, [0x14011423e]
lea rcx, str.Skeleton
call fcn.140040da0
lea rdx, [0x14011423f]
lea rcx, str.Distance
call fcn.140040da0
lea rdx, [0x140114240]
lea rcx, str.HealthBar
call fcn.140040da0
jmp 0x14000407b
lea rcx, str.Aimbot
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003c32
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003c22
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003c60
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x140114218]
lea rcx, str.AimBot
call fcn.140040da0
lea rdx, [0x14011421a]
lea rcx, str.Prediction
call fcn.140040da0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003cbb
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
call fcn.140041ea0
lea rcx, str.Aim_Options
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003d15
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003d05
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003d43
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x140114219]
lea rcx, str.Aim_at_NPC
call fcn.140040da0
lea r9, str.Head
lea rdx, [0x14011422c]
lea rcx, str.AimBone
call fcn.1400433c0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003da5
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
call fcn.140041ea0
lea rcx, [0x140100e34]
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003dff
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003def
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003e2d
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x14011421b]
lea rcx, str.DrawFOV
call fcn.140040da0
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x42480000
lea rcx, [0x140100e34]
call fcn.14003ec60
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x14011421c]
mov edx, 8
lea rcx, str.aim_fov
call fcn.140044810
lea rdx, [rsi + 0x170]
xor r8d, r8d
lea rcx, str.FOV_Color
call fcn.14004bbf0
jmp 0x14000407b
lea rcx, str.Player
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003ef4
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003ee4
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003f22
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x14011424c]
lea rcx, str.GodMode
call fcn.140040da0
test al, al
je 0x140003f40
mov byte [0x14011424d], r13b
lea rdx, [0x14011424d]
lea rcx, str.Heal_Me
call fcn.140040da0
test al, al
je 0x140003f5e
mov byte [0x14011424c], r13b
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140003f93
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
call fcn.140041ea0
lea rcx, str.Weapon
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], r13b
jne 0x140003fed
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], r13
je 0x140003fdd
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x14000401b
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rdx, [0x14011424e]
lea rcx, str.NoRecoil
call fcn.140040da0
lea rdx, [0x14011424f]
lea rcx, str.NoSpread
call fcn.140040da0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], r13b
jne 0x140004076
mov qword [rbp - 0x50], r13
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
call fcn.140041ea0
cmp dword [0x1401149ac], 3
je 0x140004089
call fcn.140013e40
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14001d6e0
cmp dword [0x1401149ac], 3
je 0x140004165
mov rbx, qword [0x140114908]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], 0
jne 0x1400040ca
cmp qword [rbx + 0x4e40], 0
lea rcx, [rdx + 0x268]
je 0x1400040d1
lea rcx, [rdx + 0x238]
movsd xmm1, qword [rcx]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
subss xmm0, dword [rdx + 0x11c]
movsd qword [rbp - 0x10], xmm1
subss xmm1, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm1
movss dword [rbp - 0x4c], xmm0
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.RightChild
call fcn.14000b130
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x14000414b
lea r8, str.RightChild
mov edx, 0xb
mov ecx, eax
call fcn.140025d00
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.RightChild
call fcn.140013ab0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000419e
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov ecx, dword [0x1401149ac]
sub ecx, 1
je 0x140004610
sub ecx, 1
je 0x14000430b
cmp ecx, 2
jne 0x1400042ad
lea rcx, str.Exit
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004215
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x140004205
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x14000424e
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
mov rax, rdx
cmp qword [rdx + 0x1c0], 0
jne 0x140004274
cmp qword [rcx + 0x4e40], 0
jne 0x140004274
add rax, 0x268
jmp 0x14000427a
add rax, 0x238
movsd xmm0, qword [rax]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x50], xmm0
mov dword [rbp - 0x4c], 0x41f00000
lea rdx, [rbp - 0x50]
lea rcx, str.Exit
call fcn.14003f9a0
test al, al
je 0x1400042ad
mov byte [0x1401141f0], 0
cmp dword [0x1401149ac], 3
je 0x1400042bb
call fcn.140013e40
call fcn.140013e40
call fcn.140019380
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400c13b0
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.ESP_Setting
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004361
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x140004351
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004393
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov dword [rbp - 0x50], 0x44fa0000
mov dword [rbp - 0x40], 0x42c80000
lea rcx, str.Distance
call fcn.14003ec60
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140114248]
mov edx, 8
lea rcx, str.Dist
call fcn.140044810
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004417
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004449
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea r9, str.Simple
lea rdx, [0x140114244]
lea rcx, str.BoxType
call fcn.1400433c0
call fcn.140041ea0
mov r11, qword [0x140114908]
mov rax, qword [r11 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r11 + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400044a1
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rcx, str.ESP_Colors
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400044f7
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400044e7
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004529
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rcx, str.Main_Color
call fcn.14003edc0
lea rdx, [rsi + 0x120]
xor r8d, r8d
lea rcx, [0x1401011c4]
call fcn.14004bbf0
lea rdx, [rsi + 0x130]
xor r8d, r8d
lea rcx, str.Player
call fcn.14004bbf0
lea rdx, [rsi + 0x140]
xor r8d, r8d
lea rcx, str.GodMode
call fcn.14004bbf0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400045b7
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x1400045e9
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rcx, str.Sub_Color
call fcn.14003edc0
lea rdx, [rsi + 0x160]
xor r8d, r8d
lea rcx, str.BoxFilled
call fcn.14004bbf0
jmp 0x1400042ad
lea rcx, str.Setting
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x140004666
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x140004656
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004698
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov dword [r14 + 0x3938], 0x40400000
mov dword [rbp - 0x50], 0x447a0000
mov dword [rbp - 0x40], 0x42480000
lea rcx, [0x140100e34]
call fcn.14003ec60
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x14011421c]
mov edx, 8
lea rcx, str.aim_fov
call fcn.140044810
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x40], 0x3f800000
lea rcx, str.Smooth
call fcn.14003ec60
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140114220]
mov edx, 8
lea rcx, str.aim_smt
call fcn.140044810
mov dword [rbp - 0x50], 0x43960000
mov dword [rbp - 0x40], 0x42480000
lea rcx, str.Distance
call fcn.14003ec60
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140114224]
mov edx, 8
lea rcx, str.aim_dist
call fcn.140044810
mov dword [rbp - 0x50], 0x453b8000
mov dword [rbp - 0x40], 0x447a0000
lea rcx, str.Predict
call fcn.14003ec60
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x140114228]
mov edx, 8
lea rcx, str.aim_preditc
call fcn.140044810
movss xmm0, dword [0x140114a10]
movss dword [r14 + 0x3938], xmm0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004804
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004836
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea r9, [0x140114110]
lea rdx, [0x140114230]
lea rcx, str.AimType
call fcn.1400433c0
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004889
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
call fcn.140041ea0
lea rcx, str.KeyBind
call fcn.14003ec60
mov rcx, qword [0x140114908]
mov rdx, qword [rcx + 0x4040]
cmp byte [rdx + 0xcf], 0
jne 0x1400048e4
mov r8d, dword [rdx + 0x1cc]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1c0], 0
je 0x1400048d4
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.140041f40
mov rcx, qword [0x140114908]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004916
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rcx, str.1st_Key:
call fcn.14003ec60
mov dword [rbp - 0x50], 0x43570000
mov dword [rbp - 0x4c], 0x41b40000
lea rdi, [0x140100a30]
lea rbx, str.__Press_Any_Key__
cmp dword [0x1401149a8], 1
jne 0x14000494c
mov rcx, rbx
jmp 0x140004957
movsxd rax, dword [0x140114260]
mov rcx, qword [rdi + rax*8]
lea rdx, [rbp - 0x50]
call fcn.14003f9a0
test al, al
je 0x1400049df
mov dword [0x1401149a8], 1
mov ecx, 1
call fcn.1400c13d0
mov qword [rbp - 0x10], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140004e40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004b30
cmp dword [rsp + 0x48], 0
je 0x140004b24
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140004b24
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x140103628]
call fcn.14001d790
lea r9, [0x1401140d0]
lea rdx, [0x140114234]
lea rcx, str.KeyMode
call fcn.1400433c0
mov r9, qword [0x140114908]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
cmp byte [rax + 0xcf], 0
jne 0x140004a77
mov qword [rbp - 0x50], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.14001d570
lea rcx, str.2nd_Key:
call fcn.14003ec60
mov dword [rbp - 0x50], 0x43570000
mov dword [rbp - 0x4c], 0x41b40000
cmp dword [0x1401149a8], 2
je 0x140004aa5
movsxd rax, dword [0x140114264]
mov rbx, qword [rdi + rax*8]
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.14003f9a0
test al, al
je 0x1400042ad
mov dword [0x1401149a8], 2
mov ecx, 1
call fcn.1400c13d0
mov qword [rbp - 0x10], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140004ef0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004b4d
cmp dword [rsp + 0x48], 0
je 0x140004b41
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140004b41
jmp 0x1400042ad
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140002950
int3
call fcn.140001500
nop
call fcn.140001500
int3
call fcn.140002950
int3