Function at 0x180048b00
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1850]
mov eax, 0x1950
call fcn.180051b00
sub rsp, rax
movaps xmmword [rsp + 0x1940], xmm6
movaps xmmword [rsp + 0x1930], xmm7
movaps xmmword [rsp + 0x1920], xmm8
movaps xmmword [rsp + 0x1910], xmm9
movaps xmmword [rsp + 0x1900], xmm10
movaps xmmword [rsp + 0x18f0], xmm11
movaps xmmword [rsp + 0x18e0], xmm12
movaps xmmword [rsp + 0x18d0], xmm13
movaps xmmword [rsp + 0x18c0], xmm14
movaps xmmword [rsp + 0x18b0], xmm15
mov rax, qword [0x180084040]
xor rax, rsp
mov qword [rbp + 0x17a0], rax
xor r12d, r12d
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rsi, rax
mov qword [rbp + 0x360], rax
cmp byte [0x1800af739], r12b
je 0x18004c492
cmp byte [0x1800af743], r12b
je 0x180048c05
call qword [0x1800af5a0]
mov rbx, rax
test rax, rax
je 0x180048c0f
movss xmm6, dword [0x1800842e0]
mov r9, qword [0x1800af528]
lea r8d, [r12 - 1]
lea rdx, str.set_fieldOfView
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180048c0f
mov rax, qword [rax]
test rax, rax
je 0x180048c0f
movaps xmm1, xmm6
mov rcx, rbx
call rax
jmp 0x180048c0f
mov dword [0x1800842e0], 0x42480000
movss xmm12, dword [0x180079a48]
movss xmm10, dword [0x180079a7c]
cmp byte [0x1800842d2], r12b
je 0x180048d5e
movups xmm0, xmmword [0x180075be0]
movups xmmword [rbp - 0x80], xmm0
cmp byte [0x1800af747], r12b
je 0x180048c85
movss xmm0, dword [0x1800af900]
movss xmm1, dword [0x1800af904]
movss xmm2, dword [0x1800af908]
mov dword [rbp - 0x74], 0x3f800000
movups xmm3, xmmword [rbp - 0x80]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp - 0x80], xmm3
movups xmmword [rbp - 0x80], xmm3
mov r10, qword [0x1800af6b8]
lea rcx, [rbp - 0x80]
call fcn.180005510
mov ebx, eax
movss xmm1, dword [0x1800af918]
movss xmm0, dword [0x1800842fc]
subss xmm1, xmm0
mulss xmm0, xmm10
addss xmm0, xmm1
movss dword [rsp + 0x58], xmm0
movss xmm0, dword [0x1800af91c]
movss dword [rsp + 0x5c], xmm0
movss dword [rsp + 0x68], xmm1
movss dword [rsp + 0x6c], xmm0
movss xmm6, dword [0x180079a50]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
lea rcx, [r10 + 0x1de8]
call fcn.180023960
mov rcx, qword [0x1800af6b8]
add rcx, 0x1de8
movss xmm2, dword [0x1800af91c]
movss xmm1, dword [0x1800842fc]
subss xmm2, xmm1
mulss xmm1, xmm10
addss xmm1, xmm2
movss xmm0, dword [0x1800af918]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x6c], xmm2
movss dword [rsp + 0x20], xmm6
mov r9d, ebx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
call fcn.180023960
xorps xmm11, xmm11
movss xmm9, dword [0x180079a10]
cmp byte [0x1800840bc], r12b
je 0x1800490e9
movss xmm7, dword [0x180079abc]
cmp byte [0x1800af6c5], r12b
je 0x180048e21
mov rbx, qword [0x1800af6b8]
movaps xmm0, xmmword [0x180079cf0]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov edi, eax
movss xmm0, dword [0x1800af918]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rsp + 0x5c], xmm1
test eax, 0xff000000
je 0x180048e21
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
movss xmm2, dword [0x1800842dc]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x1de8]
call fcn.1800233d0
mov r9d, edi
mov r8d, dword [rbx + 0x1e68]
mov rdx, qword [rbx + 0x1e70]
lea rcx, [rbx + 0x1de8]
call fcn.180022bf0
mov dword [rbx + 0x1e68], r12d
mov rbx, qword [0x1800af6b8]
movaps xmm0, xmmword [0x180079d20]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov edi, eax
movss xmm6, dword [0x1800842dc]
cvtps2pd xmm0, xmm6
movsd xmm8, qword [0x180079a70]
addsd xmm0, xmm8
cvtpd2ps xmm2, xmm0
movss xmm0, dword [0x1800af918]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rsp + 0x5c], xmm1
test eax, 0xff000000
je 0x180048ee3
subss xmm2, xmm9
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x1de8]
call fcn.1800233d0
movss dword [rsp + 0x28], xmm12
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x1e68]
mov rdx, qword [rbx + 0x1e70]
lea rcx, [rbx + 0x1de8]
call fcn.180021d90
mov dword [rbx + 0x1e68], r12d
movss xmm6, dword [0x1800842dc]
mov rbx, qword [0x1800af6b8]
movaps xmm0, xmmword [0x180079d70]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov edi, eax
movss xmm0, dword [0x1800af918]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rsp + 0x5c], xmm1
test eax, 0xff000000
je 0x180048f8b
subss xmm6, xmm9
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
movaps xmm2, xmm6
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x1de8]
call fcn.1800233d0
movss dword [rsp + 0x28], xmm12
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x1e68]
mov rdx, qword [rbx + 0x1e70]
lea rcx, [rbx + 0x1de8]
call fcn.180021d90
mov dword [rbx + 0x1e68], r12d
movss xmm6, dword [0x1800842dc]
mov rbx, qword [0x1800af6b8]
movaps xmm0, xmmword [0x180079d20]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov edi, eax
cvtps2pd xmm0, xmm6
subsd xmm0, xmm8
cvtpd2ps xmm2, xmm0
movss xmm0, dword [0x1800af918]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rsp + 0x5c], xmm1
test eax, 0xff000000
je 0x18004903c
subss xmm2, xmm9
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x1de8]
call fcn.1800233d0
movss dword [rsp + 0x28], xmm12
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x1e68]
mov rdx, qword [rbx + 0x1e70]
lea rcx, [rbx + 0x1de8]
call fcn.180021d90
mov dword [rbx + 0x1e68], r12d
movss xmm6, dword [0x1800842dc]
cmp byte [0x1800af71e], r12b
je 0x1800490e9
mov rbx, qword [0x1800af6b8]
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov edi, eax
movss xmm0, dword [0x1800af918]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rsp + 0x5c], xmm1
test eax, 0xff000000
je 0x1800490e9
subss xmm6, xmm9
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
movaps xmm2, xmm6
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x1de8]
call fcn.1800233d0
movss dword [rsp + 0x28], xmm12
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x1e68]
mov rdx, qword [rbx + 0x1e70]
lea rcx, [rbx + 0x1de8]
call fcn.180021d90
mov dword [rbx + 0x1e68], r12d
mov rax, qword [0x1800af940]
mov rcx, qword [0x1800af938]
cmp rcx, rax
je 0x18004c47f
mov qword [rsp + 0x50], r12
sub rax, rcx
sar rax, 3
test rax, rax
je 0x18004c47f
movss xmm7, dword [0x180079b58]
movss xmm6, dword [0x180079a60]
movss xmm8, dword [0x180079b44]
movss xmm15, dword [rsp + 0x60]
movss xmm14, dword [rsp + 0x60]
movss xmm13, dword [rsp + 0x60]
movss xmm12, dword [rsp + 0x60]
mov r15, r12
nop dword [rax]
mov rsi, qword [0x1800af938]
mov rdi, qword [rsi + r15*8]
test rdi, rdi
je 0x18004c01f
cmp rdi, qword [0x1800af6d8]
je 0x18004c01f
mov rbx, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov r13, rax
mov qword [rbp - 0x68], rax
test rax, rax
je 0x18004c01f
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsi + rax*8]
mov rdi, qword [0x1800af600]
mov rdx, qword [0x1800af570]
lea rcx, str.Animator
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
mov r14, rax
test rax, rax
je 0x18004c01a
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [r13]
call r9
test rax, rax
je 0x180049206
mov rax, qword [rax]
test rax, rax
je 0x180049206
mov rcx, r13
call rax
movzx edi, al
jmp 0x180049209
xor dil, dil
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004923a
mov rax, qword [rax]
test rax, rax
je 0x18004923a
mov rcx, r13
call rax
movzx ebx, al
jmp 0x18004923c
xor bl, bl
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsTeammate
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004926a
mov rax, qword [rax]
test rax, rax
je 0x18004926a
mov rcx, r13
call rax
jmp 0x18004926c
xor al, al
test dil, dil
jne 0x18004c01a
test bl, bl
jne 0x18004c01a
cmp byte [0x1800840bf], bl
je 0x18004928d
test al, al
jne 0x18004c01a
mov rax, qword [0x1800af620]
mov r15, qword [rsp + 0x50]
mov rcx, qword [rsi + r15*8]
call rax
test rax, rax
je 0x18004c01f
mov qword [rbp + 0x3b4], 0
mov dword [rbp + 0x3b0], 0
lea rdx, [rbp + 0x3b0]
mov rcx, rax
call qword [0x1800af670]
mov rax, qword [0x1800af938]
mov rbx, qword [rax + r15*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.WeaponsController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
test rax, rax
je 0x18004c01f
cmp byte [0x1800af740], 0
je 0x180049373
mov rcx, qword [0x1800af938]
mov rbx, qword [rcx + r15*8]
mov rdi, qword [0x1800af600]
mov rdx, qword [0x1800af570]
lea rcx, str.WeaponsController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
test rax, rax
je 0x18004c01f
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.AddLevelsToAllWeapons
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180049373
mov rax, qword [rax]
test rax, rax
je 0x180049373
mov edx, 0xa
mov rcx, rbx
call rax
cmp byte [0x1800af742], 0
je 0x1800493d9
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.ApplyFireRateMultiplier
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x1800493ab
mov rax, qword [rax]
test rax, rax
je 0x1800493ab
movaps xmm1, xmm9
mov rcx, rsi
call rax
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.ApplyFireRateMultiplier
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x1800493d9
mov rax, qword [rax]
test rax, rax
je 0x1800493d9
movaps xmm1, xmm7
mov rcx, rsi
call rax
cmp byte [0x1800af6c7], 0
je 0x180049415
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.ApplyReloadSpeedMultiplier
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x180049415
mov rax, qword [rax]
test rax, rax
je 0x180049415
movss xmm1, dword [0x180079aac]
mov rcx, rsi
call rax
cmp byte [0x1800af756], 0
je 0x18004947f
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.AddPercentageAmmoToAllWeapons
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004944c
mov rax, qword [rax]
test rax, rax
je 0x18004944c
movaps xmm1, xmm6
mov rcx, rsi
call rax
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.AddPercentageAmmoToAllWeapons
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004947f
mov rax, qword [rax]
test rax, rax
je 0x18004947f
movss xmm1, dword [0x180079b5c]
mov rcx, rsi
call rax
cmp byte [0x1800840b6], 0
je 0x180049732
movss xmm0, dword [rbp + 0x3b0]
movss dword [rbp + 0x2e0], xmm0
movss xmm1, dword [rbp + 0x3b4]
subss xmm1, dword [0x1800799f8]
movss dword [rbp + 0x2e4], xmm1
movss xmm0, dword [rbp + 0x3b8]
movss dword [rbp + 0x2e8], xmm0
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x2e0]
call fcn.1800427b0
test al, al
je 0x180049732
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180049510
mov rax, qword [rax]
test rax, rax
je 0x180049510
mov rcx, r13
call rax
test al, al
jne 0x18004c01f
movups xmm0, xmmword [0x1800aaff0]
movups xmmword [rsp + 0x70], xmm0
cmp byte [0x1800af73a], 0
je 0x180049557
movss xmm0, dword [0x1800af900]
movss dword [rsp + 0x70], xmm0
movss xmm1, dword [0x1800af904]
movss dword [rsp + 0x74], xmm1
movss xmm0, dword [0x1800af908]
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x3f800000
mov rbx, qword [0x1800af6b8]
add rbx, 0x1d40
movaps xmm0, xmmword [0x180079d20]
movups xmmword [rbp + 0x368], xmm0
mov ecx, dword [0x1800842e4]
sub ecx, 1
je 0x180049660
cmp ecx, 1
jne 0x180049732
lea rcx, [rbp + 0x368]
call fcn.180005510
movss xmm7, dword [rbp - 0x70]
movss dword [rbp + 0x290], xmm7
movss xmm6, dword [rbp - 0x6c]
movss dword [rbp + 0x294], xmm6
movss xmm0, dword [0x1800af918]
movss dword [rbp + 0x298], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rbp + 0x29c], xmm1
movss xmm9, dword [0x180079a9c]
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rbp + 0x290]
lea rdx, [rbp + 0x298]
mov rcx, rbx
call fcn.180023960
lea rcx, [rsp + 0x70]
call fcn.180005510
movss dword [rbp + 0x2a0], xmm7
movss dword [rbp + 0x2a4], xmm6
movss xmm0, dword [0x1800af918]
movss dword [rbp + 0x2a8], xmm0
movss xmm1, dword [0x1800af91c]
movss dword [rbp + 0x2ac], xmm1
movss xmm0, dword [0x180079a60]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x2a0]
lea rdx, [rbp + 0x2a8]
mov rcx, rbx
call fcn.180023960
jmp 0x18004973b
lea rcx, [rbp + 0x368]
call fcn.180005510
movss xmm7, dword [rbp - 0x70]
movss dword [rbp + 0x2b0], xmm7
movss xmm6, dword [rbp - 0x6c]
movss dword [rbp + 0x2b4], xmm6
movss xmm0, dword [0x1800af918]
movss dword [rbp + 0x2b8], xmm0
movss xmm1, dword [0x1800af914]
movss dword [rbp + 0x2bc], xmm1
movss xmm9, dword [0x180079a9c]
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rbp + 0x2b0]
lea rdx, [rbp + 0x2b8]
mov rcx, rbx
call fcn.180023960
lea rcx, [rsp + 0x70]
call fcn.180005510
movss dword [rbp + 0x2c0], xmm7
movss dword [rbp + 0x2c4], xmm6
movss xmm0, dword [0x1800af918]
movss dword [rbp + 0x2c8], xmm0
movss xmm1, dword [0x1800af914]
movss dword [rbp + 0x2cc], xmm1
movss xmm0, dword [0x180079a60]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x2c8]
mov rcx, rbx
call fcn.180023960
jmp 0x18004973b
movss xmm9, dword [0x180079a9c]
cmp byte [0x1800842d1], 0
je 0x18004afae
mov r12, qword [0x1800af6b8]
add r12, 0x1d40
mov qword [rsp + 0x70], r12
mov r15b, 1
mov r13, qword [0x1800af788]
mov rbx, qword [0x1800af780]
cmp rbx, r13
je 0x18004994f
mov r12, qword [rbp - 0x68]
nop dword [rax]
mov edi, dword [rbx]
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x1800497b4
mov rax, qword [rax]
test rax, rax
je 0x1800497b4
mov edx, edi
mov rcx, r14
call rax
mov rsi, rax
jmp 0x1800497b6
xor esi, esi
mov edi, dword [rbx + 4]
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x1800497eb
mov rax, qword [rax]
test rax, rax
je 0x1800497eb
mov edx, edi
mov rcx, r14
call rax
mov rdi, rax
jmp 0x1800497ed
xor edi, edi
test rsi, rsi
je 0x180049936
test rdi, rdi
je 0x180049936
mov qword [rbp - 0x5c], 0
mov dword [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
mov rcx, rsi
call qword [0x1800af670]
movsd xmm0, qword [rbp - 0x60]
movsd qword [rbp + 0x2f0], xmm0
mov eax, dword [rbp - 0x58]
mov dword [rbp + 0x2f8], eax
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x2f0]
call fcn.1800427b0
test al, al
je 0x180049936
mov qword [rbp - 0x50], 0
mov dword [rbp - 0x54], 0
lea rdx, [rbp - 0x54]
mov rcx, rdi
call qword [0x1800af670]
movsd xmm0, qword [rbp - 0x54]
movsd qword [rbp + 0x300], xmm0
mov eax, dword [rbp - 0x4c]
mov dword [rbp + 0x308], eax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x300]
call fcn.1800427b0
test al, al
je 0x180049936
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r12]
call rax
test rax, rax
je 0x1800498c6
mov rax, qword [rax]
test rax, rax
je 0x1800498c6
mov rcx, r12
call rax
test al, al
jne 0x180049936
movss xmm3, dword [rbp + 0x2d4]
movss xmm4, dword [rbp + 0x2d0]
test r15b, r15b
je 0x1800498ee
movaps xmm12, xmm4
movaps xmm13, xmm3
xor r15b, r15b
movaps xmm14, xmm4
movaps xmm15, xmm3
movaps xmm0, xmm4
minss xmm0, xmm12
movss xmm2, dword [rbp + 0x20]
movaps xmm12, xmm2
minss xmm12, xmm0
movaps xmm1, xmm3
minss xmm1, xmm13
movss xmm0, dword [rbp + 0x24]
movaps xmm13, xmm0
minss xmm13, xmm1
maxss xmm4, xmm14
movaps xmm14, xmm2
maxss xmm14, xmm4
maxss xmm3, xmm15
movaps xmm15, xmm0
maxss xmm15, xmm3
add rbx, 8
cmp rbx, r13
jne 0x180049780
movss dword [rsp + 0x60], xmm13
mov r12, qword [rsp + 0x70]
movaps xmm0, xmmword [0x180079d20]
movups xmmword [rsp + 0x70], xmm0
movaps xmm1, xmmword [0x180079d00]
movups xmmword [rbp + 0x368], xmm1
mov eax, dword [0x1800af758]
cmp eax, 1
jne 0x180049ad0
cmp byte [0x1800af752], 0
je 0x1800499c7
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x28], xmm14
movss dword [rbp + 0x2c], xmm15
movss dword [rbp + 0x30], xmm12
movss dword [rbp + 0x34], xmm13
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x30]
mov rcx, r12
call fcn.180023bd0
lea rcx, [rsp + 0x70]
call fcn.180005510
movss dword [rbp + 0x38], xmm14
movss dword [rbp + 0x3c], xmm15
movss dword [rbp + 0x40], xmm12
movss dword [rbp + 0x44], xmm13
movss dword [rsp + 0x30], xmm9
xor esi, esi
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x40]
mov rcx, r12
call fcn.180023ac0
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x48], xmm14
movss dword [rbp + 0x4c], xmm15
movss dword [rbp + 0x50], xmm12
movss dword [rbp + 0x54], xmm13
movss dword [rsp + 0x30], xmm10
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x50]
mov rcx, r12
call fcn.180023ac0
cmp byte [0x1800af71f], sil
je 0x18004a37c
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x58], xmm14
movss dword [rbp + 0x5c], xmm15
movss dword [rbp + 0x60], xmm12
movss dword [rbp + 0x64], xmm13
movss dword [rsp + 0x30], xmm10
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
mov rcx, r12
call fcn.180023ac0
jmp 0x18004a37c
test eax, eax
jne 0x18004a37a
cmp byte [0x1800af752], al
je 0x180049b26
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x68], xmm14
movss dword [rbp + 0x6c], xmm15
movss dword [rbp + 0x70], xmm12
movss dword [rbp + 0x74], xmm13
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x70]
mov rcx, r12
call fcn.180023bd0
lea rcx, [rsp + 0x70]
call fcn.180005510
mov ebx, eax
movaps xmm6, xmm12
addss xmm6, dword [0x180079ac4]
movss dword [rbp + 0x78], xmm6
movss dword [rbp + 0x7c], xmm13
movss dword [rbp + 0x80], xmm12
movss dword [rbp + 0x84], xmm13
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x80]
mov rcx, r12
call fcn.180023960
movaps xmm7, xmm13
addss xmm7, dword [0x180079ac4]
movss dword [rbp + 0x88], xmm12
movss dword [rbp + 0x8c], xmm7
movss dword [rbp + 0x90], xmm12
movss dword [rbp + 0x94], xmm13
movss dword [rsp + 0x20], xmm9
mov r9d, ebx
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x90]
mov rcx, r12
call fcn.180023960
movaps xmm8, xmm14
subss xmm8, dword [0x180079ac4]
movss dword [rbp + 0x98], xmm8
movss dword [rbp + 0x9c], xmm13
movss dword [rbp + 0xa0], xmm14
movss dword [rbp + 0xa4], xmm13
movss dword [rsp + 0x20], xmm9
mov r9d, ebx
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa0]
mov rcx, r12
call fcn.180023960
movss dword [rbp + 0xa8], xmm14
movss dword [rbp + 0xac], xmm7
movss dword [rbp + 0xb0], xmm14
movss dword [rbp + 0xb4], xmm13
movss dword [rsp + 0x20], xmm9
mov r9d, ebx
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0xb0]
mov rcx, r12
call fcn.180023960
movss dword [rbp + 0xb8], xmm6
movss dword [rbp + 0xbc], xmm15
movss dword [rbp + 0xc0], xmm12
movss dword [rbp + 0xc4], xmm15
movss dword [rsp + 0x20], xmm9
mov r9d, ebx
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xc0]
mov rcx, r12
call fcn.180023960
movaps xmm9, xmm15
subss xmm9, dword [0x180079ac4]
movss dword [rbp + 0xc8], xmm12
movss dword [rbp + 0xcc], xmm9
movss dword [rbp + 0xd0], xmm12
movss dword [rbp + 0xd4], xmm15
movss xmm0, dword [0x180079a9c]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0xd0]
mov rcx, r12
call fcn.180023960
movss dword [rbp + 0xd8], xmm8
movss dword [rbp + 0xdc], xmm15
movss dword [rbp + 0xe0], xmm14
movss dword [rbp + 0xe4], xmm15
movss xmm0, dword [0x180079a9c]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0xe0]
mov rcx, r12
call fcn.180023960
movss dword [rbp + 0xe8], xmm14
movss dword [rbp + 0xec], xmm9
movss dword [rbp + 0xf0], xmm14
movss dword [rbp + 0xf4], xmm15
movss xmm0, dword [0x180079a9c]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp + 0xe8]
lea rdx, [rbp + 0xf0]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0xf8], xmm6
movss dword [rbp + 0xfc], xmm13
movss dword [rbp + 0x100], xmm12
movss dword [rbp + 0x104], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x108], xmm12
movss dword [rbp + 0x10c], xmm7
movss dword [rbp + 0x110], xmm12
movss dword [rbp + 0x114], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x110]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x118], xmm8
movss dword [rbp + 0x11c], xmm13
movss dword [rbp + 0x120], xmm14
movss dword [rbp + 0x124], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x120]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x128], xmm14
movss dword [rbp + 0x12c], xmm7
movss dword [rbp + 0x130], xmm14
movss dword [rbp + 0x134], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x138], xmm6
movss dword [rbp + 0x13c], xmm15
movss dword [rbp + 0x140], xmm12
movss dword [rbp + 0x144], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0x140]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x148], xmm12
movss dword [rbp + 0x14c], xmm9
movss dword [rbp + 0x150], xmm12
movss dword [rbp + 0x154], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x150]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x158], xmm8
movss dword [rbp + 0x15c], xmm15
movss dword [rbp + 0x160], xmm14
movss dword [rbp + 0x164], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x160]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x168], xmm14
movss dword [rbp + 0x16c], xmm9
movss dword [rbp + 0x170], xmm14
movss dword [rbp + 0x174], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x168]
lea rdx, [rbp + 0x170]
mov rcx, r12
call fcn.180023960
cmp byte [0x1800af71f], 0
je 0x18004a371
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x178], xmm6
movss dword [rbp + 0x17c], xmm13
movss dword [rbp + 0x180], xmm12
movss dword [rbp + 0x184], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x178]
lea rdx, [rbp + 0x180]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x188], xmm12
movss dword [rbp + 0x18c], xmm7
movss dword [rbp + 0x190], xmm12
movss dword [rbp + 0x194], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x188]
lea rdx, [rbp + 0x190]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x198], xmm8
movss dword [rbp + 0x19c], xmm13
movss dword [rbp + 0x1a0], xmm14
movss dword [rbp + 0x1a4], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x198]
lea rdx, [rbp + 0x1a0]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x1a8], xmm14
movss dword [rbp + 0x1ac], xmm7
movss dword [rbp + 0x1b0], xmm14
movss dword [rbp + 0x1b4], xmm13
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x1a8]
lea rdx, [rbp + 0x1b0]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x1b8], xmm6
movss dword [rbp + 0x1bc], xmm15
movss dword [rbp + 0x1c0], xmm12
movss dword [rbp + 0x1c4], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x1c0]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x1c8], xmm12
movss dword [rbp + 0x1cc], xmm9
movss dword [rbp + 0x1d0], xmm12
movss dword [rbp + 0x1d4], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x1c8]
lea rdx, [rbp + 0x1d0]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x1d8], xmm8
movss dword [rbp + 0x1dc], xmm15
movss dword [rbp + 0x1e0], xmm14
movss dword [rbp + 0x1e4], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x1d8]
lea rdx, [rbp + 0x1e0]
mov rcx, r12
call fcn.180023960
movups xmm0, xmmword [0x1800af900]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x1e8], xmm14
movss dword [rbp + 0x1ec], xmm9
movss dword [rbp + 0x1f0], xmm14
movss dword [rbp + 0x1f4], xmm15
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x1f0]
mov rcx, r12
call fcn.180023960
movss xmm8, dword [0x180079b44]
xor esi, esi
mov r15, qword [rsp + 0x50]
cmp byte [0x1800840b9], 0
je 0x18004aa16
mov rax, qword [0x1800af938]
mov rbx, qword [rax + r15*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov r13, qword [rbp - 0x68]
test rax, rax
je 0x18004aa1a
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004a3f6
mov rax, qword [rax]
test rax, rax
je 0x18004a3f6
mov rcx, r13
call rax
movzx ebx, al
jmp 0x18004a3f8
xor bl, bl
mov rcx, qword [0x1800af8e0]
call fcn.180010c80
lea rdx, str.Real_Player
test bl, bl
lea rax, [0x1800798ec]
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x18004a430
lea rcx, [rbp - 0x20]
call fcn.180003250
nop
mov r8, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, r8
cmp rax, 6
jb 0x18004a4e0
lea rax, [r8 + 6]
mov qword [rbp - 0x10], rax
lea rbx, [rbp - 0x20]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x20]
lea rax, [0x180079902]
lea r15, str.User:
cmp rax, rbx
jbe 0x18004a49f
lea rax, [rbx + r8]
cmp r15, rax
ja 0x18004a49f
cmp rbx, r15
ja 0x18004a497
mov rdi, rsi
jmp 0x18004a4a4
mov rdi, rbx
sub rdi, r15
jmp 0x18004a4a4
mov edi, 6
inc r8
lea rcx, [rbx + 6]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 6
sub r8, rdi
lea rdx, [r15 + 6]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x20]
jmp 0x18004a503
mov qword [rsp + 0x28], 6
lea rax, str.User:
mov qword [rsp + 0x20], rax
mov edx, 6
lea rcx, [rbp - 0x20]
call fcn.180050010
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3a0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x18004a57a
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004a575
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c413
call fcn.180050d74
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
lea rax, [rbp + 0x390]
mov rcx, qword [rbp + 0x390]
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 0xf
cmova rax, rcx
mov rdi, qword [0x1800af6b8]
mov r10, qword [rdi + 0x1908]
movss xmm0, dword [rdi + 0x1910]
test rax, rax
jne 0x18004a5cb
movaps xmm1, xmm11
movaps xmm7, xmm0
jmp 0x18004a639
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss xmm1, dword [0x180079b6c]
movss dword [rsp + 0x20], xmm1
movaps xmm3, xmm8
movaps xmm2, xmm0
lea rdx, [rsp + 0x68]
mov rcx, r10
call fcn.180028730
movss xmm0, dword [rsp + 0x68]
addss xmm0, dword [0x180079a40]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x68], xmm1
movss xmm0, dword [rsp + 0x6c]
movss xmm7, dword [rdi + 0x1910]
mov r10, qword [rdi + 0x1908]
mov rdx, qword [rbp + 0x3a8]
mov rcx, qword [rbp + 0x390]
movaps xmm10, xmm13
subss xmm10, xmm0
subss xmm10, dword [0x180079acc]
movaps xmm9, xmm12
addss xmm9, xmm14
subss xmm9, xmm1
mulss xmm9, dword [0x180079a10]
add rdi, 0x1d40
movaps xmm0, xmmword [0x180079d20]
movups xmmword [rbp + 0x368], xmm0
lea r8, [rbp + 0x390]
cmp rdx, 0xf
cmova r8, rcx
lea rcx, [rbp + 0x368]
call fcn.180005510
mov ebx, eax
movaps xmm6, xmm10
movss xmm1, dword [0x180079a48]
subss xmm6, xmm1
movaps xmm8, xmm9
subss xmm8, xmm1
movaps xmm0, xmm9
subss xmm0, xmm1
movss dword [rbp + 0x1f8], xmm0
movss dword [rbp + 0x1fc], xmm6
mov qword [rsp + 0x40], rsi
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x1f8]
movaps xmm2, xmm7
mov rdx, r10
mov rcx, rdi
call fcn.180024090
lea rcx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 0xf
cmova rcx, qword [rbp + 0x390]
movaps xmm7, xmm9
addss xmm7, dword [0x180079a48]
movaps xmm0, xmm9
addss xmm0, dword [0x180079a48]
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm6
mov rax, qword [0x1800af6b8]
mov qword [rsp + 0x40], rsi
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x200]
movss xmm2, dword [rax + 0x1910]
mov rdx, qword [rax + 0x1908]
mov rcx, rdi
call fcn.180024090
lea rcx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 0xf
cmova rcx, qword [rbp + 0x390]
movaps xmm6, xmm10
addss xmm6, dword [0x180079a48]
movss dword [rbp + 0x208], xmm8
movss dword [rbp + 0x20c], xmm6
mov rax, qword [0x1800af6b8]
mov qword [rsp + 0x40], rsi
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x208]
movss xmm2, dword [rax + 0x1910]
mov rdx, qword [rax + 0x1908]
mov rcx, rdi
call fcn.180024090
lea rcx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 0xf
cmova rcx, qword [rbp + 0x390]
movss dword [rbp + 0x210], xmm7
movss dword [rbp + 0x214], xmm6
mov rax, qword [0x1800af6b8]
mov qword [rsp + 0x40], rsi
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x210]
movss xmm2, dword [rax + 0x1910]
mov rdx, qword [rax + 0x1908]
mov rcx, rdi
call fcn.180024090
lea rsi, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 0xf
cmova rsi, qword [rbp + 0x390]
movaps xmm0, xmmword [0x180079d70]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov r12d, eax
mov rcx, qword [0x1800af6b8]
movss xmm6, dword [rcx + 0x1910]
mov r15, qword [rcx + 0x1908]
test eax, 0xff000000
je 0x18004a9a4
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rsi + rbx], 0
jne 0x18004a8a7
add rbx, rsi
cmp rsi, rbx
je 0x18004a9a4
test r15, r15
jne 0x18004a8c9
mov rax, qword [rdi + 0x38]
mov r15, qword [rax + 8]
ucomiss xmm6, xmm11
jp 0x18004a8da
jne 0x18004a8da
mov rax, qword [rdi + 0x38]
movss xmm6, dword [rax + 0x10]
cmp dword [rdi + 0x70], 0
jg 0x18004a8fa
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rdx, dword [rdi + 0x70]
mov rax, qword [rdi + 0x78]
mov rcx, qword [r15 + 0x48]
mov rax, qword [rax + rdx*8 - 8]
cmp qword [rcx + 8], rax
je 0x18004a92b
mov r8d, 0x485
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___TextureIdStack.back__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [rdi + 0x60], 0
jg 0x18004a94b
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rdi + 0x60]
add rcx, rcx
mov rax, qword [rdi + 0x68]
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp + 0x368], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
lea rax, [rbp + 0x368]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movaps xmm0, xmm9
unpcklps xmm0, xmm10
movq r9, xmm0
movaps xmm2, xmm6
mov rdx, rdi
mov rcx, r15
call fcn.180028950
call fcn.180010d40
nop
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 0xf
jbe 0x18004a9eb
inc rdx
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004a9e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c41a
call fcn.180050d74
xor esi, esi
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], 0xf
mov byte [rbp + 0x390], sil
movss xmm10, dword [0x180079a7c]
mov r15, qword [rsp + 0x50]
jmp 0x18004aa1a
mov r13, qword [rbp - 0x68]
cmp byte [0x1800af741], 0
je 0x18004afb0
mov rsi, qword [0x1800af6b8]
add rsi, 0x1d40
movaps xmm9, xmm15
addss xmm9, dword [0x180079acc]
movaps xmm8, xmm14
subss xmm8, xmm12
mulss xmm8, dword [0x180079a10]
addss xmm8, xmm12
subss xmm8, dword [0x180079ae8]
mov rax, qword [0x1800af938]
mov rbx, qword [rax + r15*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerHealth
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov r15, rax
mov rcx, qword [0x1800af938]
mov rax, qword [rsp + 0x50]
mov rbx, qword [rcx + rax*8]
mov rdi, qword [0x1800af600]
mov rdx, qword [0x1800af570]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test r15, r15
je 0x18004ab04
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_PlayerHealth
mov rcx, qword [r15]
call rax
test rax, rax
je 0x18004aaf7
mov rax, qword [rax]
test rax, rax
je 0x18004aaf7
mov rcx, r15
call rax
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
jmp 0x18004ab07
movaps xmm0, xmm11
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
jmp 0x18004ab07
xorps xmm1, xmm1
cvtpd2ps xmm0, xmm1
cvttss2si edx, xmm0
lea rcx, [rbp]
call fcn.18004ecb0
nop
mov r8, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 4
jb 0x18004abb4
lea rax, [r8 + 4]
mov qword [rbp + 0x10], rax
lea rbx, [rbp]
cmp rcx, 0xf
cmova rbx, qword [rbp]
lea rax, [0x180079930]
lea r15, str.HP:
cmp rax, rbx
jbe 0x18004ab73
lea rax, [rbx + r8]
cmp r15, rax
ja 0x18004ab73
cmp rbx, r15
ja 0x18004ab6b
xor edi, edi
jmp 0x18004ab78
mov rdi, rbx
sub rdi, r15
jmp 0x18004ab78
mov edi, 4
inc r8
lea rcx, [rbx + 4]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 4
sub r8, rdi
lea rdx, [r15 + 4]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp]
jmp 0x18004abd7
mov qword [rsp + 0x28], 4
lea rax, str.HP:
mov qword [rsp + 0x20], rax
mov edx, 4
lea rcx, [rbp]
call fcn.180050010
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
xor ebx, ebx
mov qword [rbp + 0x400], rbx
mov qword [rbp + 0x408], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x3f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x400], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x18004ac4f
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ac4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c421
call fcn.180050d74
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
movaps xmm0, xmmword [0x180079d10]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movaps xmm7, xmm9
addss xmm7, dword [0x180079adc]
movaps xmm6, xmm8
addss xmm6, dword [0x180079aec]
movss dword [rbp + 0x218], xmm6
movss dword [rbp + 0x21c], xmm7
movss dword [rbp + 0x220], xmm8
movss dword [rbp + 0x224], xmm9
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x218]
lea rdx, [rbp + 0x220]
mov rcx, rsi
call fcn.180023bd0
movups xmm0, xmmword [0x1800ae920]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
movss dword [rbp + 0x228], xmm6
movss dword [rbp + 0x22c], xmm7
movss dword [rbp + 0x230], xmm8
movss dword [rbp + 0x234], xmm9
movss xmm0, dword [0x180079a48]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x228]
lea rdx, [rbp + 0x230]
mov rcx, rsi
call fcn.180023ac0
lea rcx, [rbp + 0x3f0]
mov r8, qword [rbp + 0x3f0]
mov r9, qword [rbp + 0x408]
cmp r9, 0xf
cmova rcx, r8
mov rax, qword [0x1800af6b8]
movss xmm1, dword [rax + 0x1910]
test rcx, rcx
jne 0x18004ad83
movaps xmm0, xmm11
jmp 0x18004adea
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rcx
movss xmm0, dword [0x180079b6c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x180079b44]
movaps xmm2, xmm1
lea rdx, [rsp + 0x58]
mov rcx, qword [rax + 0x1908]
call fcn.180028730
movss xmm0, dword [rsp + 0x58]
addss xmm0, dword [0x180079a40]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [rsp + 0x5c]
mov r9, qword [rbp + 0x408]
mov r8, qword [rbp + 0x3f0]
movss xmm7, dword [0x180079adc]
subss xmm7, xmm1
mulss xmm7, dword [0x180079a10]
addss xmm7, xmm9
movss xmm6, dword [0x180079aec]
subss xmm6, xmm0
mulss xmm6, dword [0x180079a10]
addss xmm6, xmm8
lea rdi, [rbp + 0x3f0]
cmp r9, 0xf
cmova rdi, r8
movaps xmm0, xmmword [0x180079d70]
movups xmmword [rbp + 0x368], xmm0
lea rcx, [rbp + 0x368]
call fcn.180005510
mov r12d, eax
test eax, 0xff000000
je 0x18004af5a
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x18004ae60
add rbx, rdi
cmp rdi, rbx
je 0x18004af5a
mov rax, qword [rsi + 0x38]
mov r15, qword [rax + 8]
movss xmm8, dword [rax + 0x10]
cmp dword [rsi + 0x70], 0
jg 0x18004aea3
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rdx, dword [rsi + 0x70]
mov rax, qword [rsi + 0x78]
mov rcx, qword [r15 + 0x48]
mov rax, qword [rax + rdx*8 - 8]
cmp qword [rcx + 8], rax
je 0x18004aed4
mov r8d, 0x485
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___TextureIdStack.back__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [rsi + 0x60], 0
jg 0x18004aef4
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rsi + 0x60]
add rcx, rcx
mov rax, qword [rsi + 0x68]
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp + 0x368], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x368]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movq r9, xmm0
movaps xmm2, xmm8
mov rdx, rsi
mov rcx, r15
call fcn.180028950
mov r9, qword [rbp + 0x408]
mov r8, qword [rbp + 0x3f0]
cmp r9, 0xf
jbe 0x18004af91
lea rdx, [r9 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18004af89
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c428
mov rcx, r8
call fcn.180050d74
xor esi, esi
mov qword [rbp + 0x400], rsi
mov qword [rbp + 0x408], 0xf
mov byte [rbp + 0x3f0], sil
jmp 0x18004afb0
xor esi, esi
cmp byte [0x1800840b5], 0
je 0x18004b2a6
mov r15, qword [0x1800af6b8]
add r15, 0x1d40
movaps xmm0, xmmword [0x180079d20]
movups xmmword [rbp + 0x368], xmm0
mov r12, qword [0x1800af788]
mov rbx, qword [0x1800af780]
cmp rbx, r12
je 0x18004b2a6
movss xmm13, dword [0x180079aa8]
jmp 0x18004b002
xor esi, esi
mov edi, dword [rbx]
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x18004b034
mov rax, qword [rax]
test rax, rax
je 0x18004b034
mov edx, edi
mov rcx, r14
call rax
mov rsi, rax
mov edi, dword [rbx + 4]
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x18004b069
mov rax, qword [rax]
test rax, rax
je 0x18004b069
mov edx, edi
mov rcx, r14
call rax
mov rdi, rax
jmp 0x18004b06b
xor edi, edi
test rsi, rsi
je 0x18004b292
test rdi, rdi
je 0x18004b292
mov qword [rbp + 0x3c4], 0
mov dword [rbp + 0x3c0], 0
lea rdx, [rbp + 0x3c0]
mov rcx, rsi
call qword [0x1800af670]
mov qword [rbp + 0x3d4], 0
mov dword [rbp + 0x3d0], 0
lea rdx, [rbp + 0x3d0]
mov rcx, rdi
call qword [0x1800af670]
movsd xmm0, qword [rbp + 0x3c0]
movsd qword [rbp + 0x310], xmm0
mov eax, dword [rbp + 0x3c8]
mov dword [rbp + 0x318], eax
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x310]
call fcn.1800427b0
test al, al
je 0x18004b292
movsd xmm0, qword [rbp + 0x3d0]
movsd qword [rbp + 0x320], xmm0
mov eax, dword [rbp + 0x3d8]
mov dword [rbp + 0x328], eax
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x320]
call fcn.1800427b0
test al, al
je 0x18004b292
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004b169
mov rax, qword [rax]
test rax, rax
je 0x18004b169
mov rcx, r13
call rax
test al, al
jne 0x18004b292
lea rcx, [rbp + 0x368]
call fcn.180005510
movss xmm6, dword [rbp + 0x238]
movss dword [rbp + 0x248], xmm6
movss xmm7, dword [rbp + 0x23c]
movss dword [rbp + 0x24c], xmm7
movss xmm8, dword [rbp + 0x240]
movss dword [rbp + 0x250], xmm8
movss xmm9, dword [rbp + 0x244]
movss dword [rbp + 0x254], xmm9
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x250]
mov rcx, r15
call fcn.180023960
movups xmm0, xmmword [0x1800aafe0]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.180005510
movss dword [rbp + 0x258], xmm6
movss dword [rbp + 0x25c], xmm7
movss dword [rbp + 0x260], xmm8
movss dword [rbp + 0x264], xmm9
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x258]
lea rdx, [rbp + 0x260]
mov rcx, r15
call fcn.180023960
cmp byte [0x1800af755], 0
je 0x18004b292
movups xmm0, xmmword [0x1800af900]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.180005510
movss dword [rbp + 0x268], xmm6
movss dword [rbp + 0x26c], xmm7
movss dword [rbp + 0x270], xmm8
movss dword [rbp + 0x274], xmm9
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x268]
lea rdx, [rbp + 0x270]
mov rcx, r15
call fcn.180023960
add rbx, 8
cmp rbx, r12
jne 0x18004b000
movss xmm13, dword [rsp + 0x60]
cmp byte [0x1800af74c], 0
je 0x18004b39a
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rax + rcx*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004b314
mov rdx, qword [rax]
test rdx, rdx
je 0x18004b314
mov rcx, r13
call rdx
jmp 0x18004b316
xor al, al
test rbx, rbx
je 0x18004bff8
test al, al
je 0x18004bff8
mov r14d, 0x20
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18004b39a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x368], xmm0
movups xmmword [rbp + 0x378], xmm0
mov qword [rbp + 0x388], rax
mov dword [rbp + 0x368], 1
mov word [rbp + 0x370], r14w
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x368]
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_SendInput]
mov dword [rbp + 0x374], 2
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x368]
lea ecx, [r14 - 0x1f]
call qword [sym.imp.USER32.dll_SendInput]
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rdi, qword [0x1800af600]
mov rbx, qword [rax + rcx*8]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerHealth
cmp byte [0x1800af753], 0
je 0x18004b415
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov rcx, qword [0x1800af938]
mov rax, qword [rsp + 0x50]
mov rbx, qword [rcx + rax*8]
mov rdi, qword [0x1800af600]
mov rdx, qword [0x1800af570]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004bff8
test rsi, rsi
jmp 0x18004b588
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004b455
mov rax, qword [rax]
test rax, rax
je 0x18004b455
mov rcx, r13
call rax
movzx r14d, al
jmp 0x18004b458
xor r14b, r14b
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rax + rcx*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004bff8
test rsi, rsi
je 0x18004bff8
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004b4c6
mov rax, qword [rax]
test rax, rax
je 0x18004b4c6
xor edx, edx
mov rcx, rsi
call rax
cmp byte [0x1800840bb], 0
je 0x18004b5bb
test r14b, r14b
je 0x18004b5bb
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rax + rcx*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerHealth
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004b541
mov rax, qword [rax]
test rax, rax
je 0x18004b541
mov rcx, r13
call rax
movzx r14d, al
jmp 0x18004b544
xor r14b, r14b
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rax + rcx*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004bff8
test rsi, rsi
je 0x18004bff8
test r14b, r14b
je 0x18004bff8
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
mov rax, qword [0x1800af528]
call rax
test rax, rax
je 0x18004b5bb
mov rax, qword [rax]
test rax, rax
je 0x18004b5bb
mov dl, 1
mov rcx, rsi
call rax
mov rax, qword [0x1800af938]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [0x1800af600]
lea rcx, str.vThirdPersonController
mov rbx, qword [rax + rsi*8]
mov rax, qword [0x1800af570]
cmp byte [0x1800af745], 0
je 0x18004b621
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.SetGodMode
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004b65d
mov r8, qword [rax]
test r8, r8
je 0x18004b65d
mov dl, 1
jmp 0x18004b657
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.SetGodMode
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004b65d
mov r8, qword [rax]
test r8, r8
je 0x18004b65d
xor edx, edx
mov rcx, rbx
call r8
cmp byte [0x1800840b7], 0
je 0x18004b6c2
mov rax, qword [0x1800af938]
mov rbx, qword [rax + rsi*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.vThirdPersonController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.SetDiveState
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004b6c2
mov r8, qword [rax]
test r8, r8
je 0x18004b6c2
xor edx, edx
mov rcx, rbx
call r8
cmp byte [0x1800af74d], 0
je 0x18004ba84
mov rbx, qword [0x1800af938]
cmp rbx, qword [0x1800af940]
je 0x18004ba8b
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004ba84
xor r12d, r12d
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x368], xmm1
mov qword [rbp + 0x378], rax
mov r15, qword [0x1800af940]
mov rsi, qword [0x1800af938]
cmp rsi, r15
je 0x18004c42f
nop word [rax + rax]
mov rdi, qword [rsi]
test rdi, rdi
je 0x18004b85e
mov rbx, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x18004b85e
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004b799
mov rax, qword [rax]
test rax, rax
je 0x18004b799
mov rcx, rbx
call rax
movzx r14d, al
jmp 0x18004b79c
xor r14b, r14b
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004b7cc
mov rax, qword [rax]
test rax, rax
je 0x18004b7cc
mov rcx, rbx
call rax
movzx edi, al
jmp 0x18004b7cf
xor dil, dil
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004b7fc
mov rax, qword [rax]
test rax, rax
je 0x18004b7fc
mov rcx, rbx
call rax
jmp 0x18004b7fe
xor al, al
test r14b, r14b
je 0x18004b814
mov rax, qword [0x1800af5d8]
mov rcx, rbx
call rax
mov r12, rax
jmp 0x18004b85e
test dil, dil
jne 0x18004b85e
test al, al
jne 0x18004b85e
mov rcx, rbx
call qword [0x1800af5d8]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x18004b85e
mov rdx, qword [rbp + 0x370]
cmp rdx, qword [rbp + 0x378]
je 0x18004b84d
mov qword [rdx], rax
add qword [rbp + 0x370], 8
jmp 0x18004b85e
lea r8, [rsp + 0x70]
lea rcx, [rbp + 0x368]
call fcn.18004fcc0
add rsi, 8
cmp rsi, r15
jne 0x18004b730
test r12, r12
je 0x18004c42f
mov rcx, qword [rbp + 0x368]
cmp rcx, qword [rbp + 0x370]
je 0x18004c436
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1794], 0xffffffff
mov dword [rbp + 0x414], eax
mov edx, 1
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x414], eax
inc rdx
cmp rdx, 0x270
jb 0x18004b8b0
mov dword [rbp + 0x410], 0x270
mov rax, qword [rbp + 0x370]
mov rsi, qword [rbp + 0x368]
sub rax, rsi
sar rax, 3
dec eax
cmp eax, 0x80000000
jb 0x18004b997
cmp eax, 0xffffffff
jne 0x18004b997
lea r8, [rbp + 0x418]
mov r9d, 0x270
nop dword [rax]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [r8 + 0x630]
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x18004b920
mov eax, dword [rbp + 0x410]
mov ecx, dword [rbp + rax*4 + 0x414]
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x1794]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov r8d, ecx
shr r8d, 0x12
xor r8d, ecx
jmp 0x18004b9df
lea ebx, [rax + 1]
lea rcx, [rbp + 0x410]
call fcn.180050190
mov edi, ebx
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jae 0x18004b9db
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp r8d, edx
jae 0x18004b9db
lea rcx, [rbp + 0x410]
call fcn.180050190
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jb 0x18004b9c3
shr r8, 0x20
movsxd rax, r8d
mov rcx, qword [rsi + rax*8]
mov qword [rbp + 0x3e4], 0
mov dword [rbp + 0x3e0], 0
lea rdx, [rbp + 0x3e0]
call qword [0x1800af670]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
movsd xmm0, qword [rbp + 0x3e0]
movsd qword [rbp + 0x330], xmm0
mov eax, dword [rbp + 0x3e8]
mov dword [rbp + 0x338], eax
lea rdx, [rbp + 0x330]
mov rcx, r12
call qword [0x1800af690]
nop
mov rcx, qword [rbp + 0x368]
test rcx, rcx
je 0x18004ba84
mov rdx, qword [rbp + 0x378]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ba7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c46a
call fcn.180050d74
mov rbx, qword [0x1800af938]
mov rax, qword [rsp + 0x50]
mov rdi, qword [0x1800af600]
lea rcx, str.PlayerController
mov rbx, qword [rbx + rax*8]
mov rax, qword [0x1800af570]
cmp byte [0x1800af6c4], 0
je 0x18004bb80
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004baf5
mov rax, qword [rax]
test rax, rax
je 0x18004baf5
mov rcx, r13
call rax
movzx edi, al
jmp 0x18004baf8
xor dil, dil
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004bb26
mov rax, qword [rax]
test rax, rax
je 0x18004bb26
mov rcx, r13
call rax
jmp 0x18004bb28
xor al, al
test rbx, rbx
je 0x18004bff8
test al, al
jne 0x18004bff8
test dil, dil
je 0x18004bff8
movss xmm6, dword [0x1800842d8]
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.set_PlayerSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004bc3f
mov rax, qword [rax]
test rax, rax
je 0x18004bc3f
movaps xmm1, xmm6
jmp 0x18004bc3a
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004bbbf
mov rax, qword [rax]
test rax, rax
je 0x18004bbbf
mov rcx, r13
call rax
movzx edi, al
jmp 0x18004bbc2
xor dil, dil
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004bbf0
mov rax, qword [rax]
test rax, rax
je 0x18004bbf0
mov rcx, r13
call rax
jmp 0x18004bbf2
xor al, al
test rbx, rbx
je 0x18004bff8
test al, al
jne 0x18004bff8
test dil, dil
je 0x18004bff8
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.set_PlayerSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004bc3f
mov rax, qword [rax]
test rax, rax
je 0x18004bc3f
movss xmm1, dword [0x180079a48]
mov rcx, rbx
call rax
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rdi, qword [0x1800af600]
mov rbx, qword [rax + rcx*8]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerHealth
cmp byte [0x1800840bb], 0
je 0x18004bd2c
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004bcb1
mov rax, qword [rax]
test rax, rax
je 0x18004bcb1
mov rcx, r13
call rax
movzx r14d, al
jmp 0x18004bcb4
xor r14b, r14b
mov rax, qword [0x1800af938]
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rax + rcx*8]
mov rdi, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004bff8
test rsi, rsi
je 0x18004bff8
test r14b, r14b
je 0x18004bff8
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004bda7
mov rax, qword [rax]
test rax, rax
je 0x18004bda7
mov dl, 1
jmp 0x18004bda2
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov rcx, qword [0x1800af938]
mov rax, qword [rsp + 0x50]
mov rbx, qword [rcx + rax*8]
mov rdi, qword [0x1800af600]
mov rdx, qword [0x1800af570]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004bff8
test rsi, rsi
je 0x18004bff8
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004bda7
mov rax, qword [rax]
test rax, rax
je 0x18004bda7
xor edx, edx
mov rcx, rsi
call rax
cmp byte [0x1800840b8], 0
je 0x18004bff8
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18004bdf2
xorps xmm0, xmm0
movups xmmword [rbp + 0x368], xmm0
lea rdx, [rbp + 0x368]
xor ecx, ecx
call qword [sym.imp.XINPUT1_3.dll_Ordinal_2]
test eax, eax
jne 0x18004bff8
cmp byte [rbp + 0x36e], 0x1e
jbe 0x18004bff8
xor r12d, r12d
mov r15d, r12d
movss xmm11, dword [0x180079b44]
movss xmm9, dword [0x1800af910]
mulss xmm9, dword [0x180079a10]
movss xmm10, dword [0x1800af914]
mulss xmm10, dword [0x180079a10]
movsxd rax, dword [0x1800ae940]
cmp eax, 0xffffffff
je 0x18004c050
mov rcx, rax
mov rax, qword [0x1800af938]
mov rdi, qword [rax + rcx*8]
test rdi, rdi
je 0x18004bfea
mov rbx, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x18004bfea
mov eax, dword [0x1800af718]
test eax, eax
je 0x18004beb7
cmp eax, 1
jne 0x18004bfea
mov r9, qword [0x1800af528]
lea r8d, [r12 - 1]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call r9
test rax, rax
je 0x18004beea
mov rax, qword [rax]
test rax, rax
je 0x18004beea
lea edx, [r12 + 8]
jmp 0x18004bee2
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004beea
mov rax, qword [rax]
test rax, rax
je 0x18004beea
mov edx, 0xb
mov rcx, rbx
call rax
mov r15, rax
test r15, r15
je 0x18004bfea
mov qword [rbp - 0x44], r12
mov dword [rbp - 0x48], r12d
lea rdx, [rbp - 0x48]
mov rcx, r15
call qword [0x1800af670]
movsd xmm0, qword [rbp - 0x48]
movsd qword [rbp + 0x340], xmm0
mov eax, dword [rbp - 0x40]
mov dword [rbp + 0x348], eax
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x340]
call fcn.1800427b0
test al, al
je 0x18004bfea
movss xmm8, dword [rbp + 0x27c]
movaps xmm0, xmm8
subss xmm0, xmm10
cvtps2pd xmm0, xmm0
movsd xmm1, qword [0x180079a80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm7, dword [rbp + 0x278]
movaps xmm0, xmm7
subss xmm0, xmm9
cvtps2pd xmm0, xmm0
movsd xmm1, qword [0x180079a80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x18004bf94
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x18004bf9c
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
movss xmm2, dword [0x180079b44]
comiss xmm2, xmm0
jbe 0x18004bfea
movaps xmm0, xmm9
movss xmm1, dword [0x1800842dc]
subss xmm0, xmm1
comiss xmm7, xmm0
jb 0x18004bfea
addss xmm9, xmm1
comiss xmm9, xmm7
jb 0x18004bfea
movaps xmm0, xmm10
subss xmm0, xmm1
comiss xmm8, xmm0
jb 0x18004bfea
addss xmm10, xmm1
comiss xmm10, xmm8
jae 0x18004c29c
mov dword [0x1800ae940], 0xffffffff
xorps xmm11, xmm11
movss xmm9, dword [0x180079a10]
movss xmm7, dword [0x180079b58]
movss xmm6, dword [0x180079a60]
movss xmm8, dword [0x180079b44]
mov r15, qword [rsp + 0x50]
inc r15
mov qword [rsp + 0x50], r15
mov rax, qword [0x1800af940]
sub rax, qword [0x1800af938]
sar rax, 3
cmp r15, rax
jae 0x18004c478
movss xmm10, dword [0x180079a7c]
jmp 0x180049150
mov esi, r12d
mov rax, qword [0x1800af940]
sub rax, qword [0x1800af938]
sar rax, 3
test rax, rax
je 0x18004bfea
mov r14, r12
movsd xmm13, qword [0x180079a80]
nop word [rax + rax]
mov rax, qword [0x1800af938]
mov rdi, qword [rax + r14]
test rdi, rdi
je 0x18004c268
mov rbx, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
test rax, rax
je 0x18004c268
mov rbx, qword [0x1800af600]
mov rax, qword [0x1800af570]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x18004c268
mov eax, dword [0x1800af718]
test eax, eax
je 0x18004c12e
cmp eax, 1
jne 0x18004c268
mov r9, qword [0x1800af528]
lea r8d, [rax - 2]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call r9
test rax, rax
je 0x18004c163
mov rax, qword [rax]
test rax, rax
je 0x18004c163
mov edx, 8
mov rcx, rbx
call rax
mov rbx, rax
jmp 0x18004c166
mov rax, qword [0x1800af528]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004c163
mov rax, qword [rax]
test rax, rax
je 0x18004c163
mov edx, 0xb
mov rcx, rbx
call rax
mov rbx, rax
jmp 0x18004c166
mov rbx, r12
test rbx, rbx
je 0x18004c268
mov qword [rbp - 0x38], r12
mov dword [rbp - 0x3c], r12d
lea rdx, [rbp - 0x3c]
mov rcx, rbx
call qword [0x1800af670]
movsd xmm0, qword [rbp - 0x3c]
movsd qword [rbp + 0x350], xmm0
mov eax, dword [rbp - 0x34]
mov dword [rbp + 0x358], eax
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x350]
call fcn.1800427b0
test al, al
je 0x18004c268
movss xmm8, dword [rbp + 0x284]
movaps xmm0, xmm8
subss xmm0, xmm10
cvtps2pd xmm0, xmm0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm7, dword [rbp + 0x280]
movaps xmm0, xmm7
subss xmm0, xmm9
cvtps2pd xmm0, xmm0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x18004c208
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x18004c210
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
comiss xmm11, xmm2
jbe 0x18004c268
movaps xmm0, xmm9
movss xmm1, dword [0x1800842dc]
subss xmm0, xmm1
comiss xmm7, xmm0
jb 0x18004c268
movaps xmm0, xmm9
addss xmm0, xmm1
comiss xmm0, xmm7
jb 0x18004c268
movaps xmm0, xmm10
subss xmm0, xmm1
comiss xmm8, xmm0
jb 0x18004c268
movaps xmm0, xmm10
addss xmm0, xmm1
comiss xmm0, xmm8
jb 0x18004c268
movaps xmm11, xmm2
mov r15, rbx
mov dword [0x1800ae940], esi
inc esi
add r14, 8
mov rdx, qword [0x1800af940]
sub rdx, qword [0x1800af938]
sar rdx, 3
movsxd rax, esi
cmp rax, rdx
jb 0x18004c080
movss xmm13, dword [rsp + 0x60]
test r15, r15
je 0x18004bfea
mov qword [rbp - 0x2c], r12
mov dword [rbp - 0x30], r12d
lea rdx, [rbp - 0x30]
mov rcx, r15
call qword [0x1800af670]
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [rbp - 0x28]
mov dword [rbp - 0x78], eax
lea rdx, [rbp + 0x288]
lea rcx, [rbp - 0x80]
call fcn.1800427b0
movss xmm9, dword [0x180079a10]
xorps xmm11, xmm11
test al, al
je 0x18004c001
movss xmm6, dword [0x1800af914]
movss xmm5, dword [0x1800af910]
movaps xmm1, xmm5
mulss xmm1, xmm9
movaps xmm4, xmm6
mulss xmm4, xmm9
xorps xmm3, xmm3
xorps xmm2, xmm2
movss xmm0, dword [0x1800842f8]
mulss xmm0, dword [0x180079b70]
cvttss2si eax, xmm0
mov ecx, 3
sub ecx, eax
movss xmm0, dword [rbp + 0x288]
ucomiss xmm0, xmm11
jp 0x18004c337
je 0x18004c38d
movss xmm7, dword [0x180079dc0]
comiss xmm0, xmm1
jbe 0x18004c367
movaps xmm3, xmm1
subss xmm3, xmm0
xorps xmm3, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
addss xmm1, xmm3
comiss xmm1, xmm5
jbe 0x18004c395
xorps xmm3, xmm3
jmp 0x18004c395
comiss xmm1, xmm0
jbe 0x18004c395
movaps xmm3, xmm0
subss xmm3, xmm1
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
addss xmm1, xmm3
comiss xmm11, xmm1
jbe 0x18004c395
xorps xmm3, xmm3
jmp 0x18004c395
movss xmm7, dword [0x180079dc0]
movss xmm0, dword [rbp + 0x28c]
ucomiss xmm0, xmm11
jp 0x18004c3a5
je 0x18004c3f2
comiss xmm0, xmm4
jbe 0x18004c3cb
movaps xmm2, xmm4
subss xmm2, xmm0
xorps xmm2, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm1, xmm6
jmp 0x18004c3ed
comiss xmm4, xmm0
jbe 0x18004c3f2
movaps xmm2, xmm0
subss xmm2, xmm4
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm11, xmm1
jbe 0x18004c3f2
xorps xmm2, xmm2
cvttss2si r8, xmm2
cvttss2si rdx, xmm3
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x18004c001
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x368]
test rcx, rcx
je 0x18004c492
mov rdx, qword [rbp + 0x378]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004c471
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004c471
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180050d74
jmp 0x18004c492
mov rsi, qword [rbp + 0x360]
mov eax, esi
sub eax, dword [0x1800af8e8]
cmp eax, 5
jbe 0x18004c492
mov dword [0x1800af8e8], esi
mov rcx, qword [rbp + 0x17a0]
xor rcx, rsp
call fcn.1800509a0
lea r11, [rsp + 0x1950]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret