Function at 0x1800489f0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x16b0]
mov eax, 0x17b0
call fcn.180050c00
sub rsp, rax
movaps xmmword [rsp + 0x17a0], xmm6
movaps xmmword [rsp + 0x1790], xmm7
movaps xmmword [rsp + 0x1780], xmm8
movaps xmmword [rsp + 0x1770], xmm9
movaps xmmword [rsp + 0x1760], xmm10
movaps xmmword [rsp + 0x1750], xmm11
movaps xmmword [rsp + 0x1740], xmm12
movaps xmmword [rsp + 0x1730], xmm13
movaps xmmword [rsp + 0x1720], xmm14
movaps xmmword [rsp + 0x1710], xmm15
mov rax, qword [0x180083040]
xor rax, rsp
mov qword [rbp + 0x1600], rax
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rsi, rax
mov qword [rbp + 0x1b0], rax
cmp byte [0x1800ae72d], r14b
je 0x18004b594
cmp byte [0x1800ae731], r14b
je 0x180048af4
call qword [0x1800ae590]
mov rbx, rax
test rax, rax
je 0x180048afe
movss xmm6, dword [0x1800832dc]
mov r9, qword [0x1800ae518]
lea r8d, [r14 - 1]
lea rdx, str.set_fieldOfView
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180048afe
mov rax, qword [rax]
test rax, rax
je 0x180048afe
movaps xmm1, xmm6
mov rcx, rbx
call rax
jmp 0x180048afe
mov dword [0x1800832dc], 0x42480000
movss xmm9, dword [0x1800789f0]
movss xmm11, dword [0x180078a1c]
cmp byte [0x1800832d2], r14b
je 0x180048c3e
movups xmm0, xmmword [0x180074be0]
movups xmmword [rsp + 0x70], xmm0
cmp byte [0x1800ae735], r14b
je 0x180048b64
movss xmm0, dword [0x1800ae8f0]
movss dword [rsp + 0x70], xmm0
movss xmm1, dword [0x1800ae8f4]
movss dword [rsp + 0x74], xmm1
movss xmm0, dword [0x1800ae8f8]
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x3f800000
mov r10, qword [0x1800ae6a8]
lea rcx, [rsp + 0x70]
call fcn.180005510
mov ebx, eax
movss xmm1, dword [0x1800ae908]
movss xmm0, dword [0x1800832fc]
subss xmm1, xmm0
mulss xmm0, xmm11
addss xmm0, xmm1
movss dword [rsp + 0x58], xmm0
movss xmm0, dword [0x1800ae90c]
movss dword [rsp + 0x5c], xmm0
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x64], xmm0
movss xmm6, dword [0x1800789f8]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
lea rcx, [r10 + 0x1de8]
call fcn.180023960
mov rcx, qword [0x1800ae6a8]
add rcx, 0x1de8
movss xmm2, dword [0x1800ae90c]
movss xmm1, dword [0x1800832fc]
subss xmm2, xmm1
mulss xmm1, xmm11
addss xmm1, xmm2
movss xmm0, dword [0x1800ae908]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm2
movss dword [rsp + 0x20], xmm6
mov r9d, ebx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
call fcn.180023960
movss xmm10, dword [0x1800789b8]
xorps xmm14, xmm14
cmp byte [0x1800830bb], r14b
je 0x180048db0
mov r8, qword [0x1800ae6a8]
lea rbx, [r8 + 0x1de8]
movaps xmm0, xmmword [0x180078ce0]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.180005510
mov edi, eax
movss xmm6, dword [0x1800ae908]
movss dword [rsp + 0x58], xmm6
movss xmm7, dword [0x1800ae90c]
movss dword [rsp + 0x5c], xmm7
movss xmm8, dword [0x180078a5c]
test eax, 0xff000000
je 0x180048d19
movss xmm2, dword [0x1800832e0]
subss xmm2, xmm10
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1800233d0
movss dword [rsp + 0x28], xmm9
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x80]
mov rdx, qword [rbx + 0x88]
mov rcx, rbx
call fcn.180021d90
mov dword [rbx + 0x80], r14d
movss xmm7, dword [0x1800ae90c]
movss xmm6, dword [0x1800ae908]
mov r8, qword [0x1800ae6a8]
cmp byte [0x1800ae70f], r14b
je 0x180048db0
lea rbx, [r8 + 0x1de8]
movups xmm0, xmmword [0x1800ae8f0]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.180005510
mov edi, eax
movss dword [rsp + 0x58], xmm6
movss dword [rsp + 0x5c], xmm7
test eax, 0xff000000
je 0x180048db0
movss xmm2, dword [0x1800832e0]
subss xmm2, xmm10
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1800233d0
movss dword [rsp + 0x28], xmm9
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x80]
mov rdx, qword [rbx + 0x88]
mov rcx, rbx
call fcn.180021d90
mov dword [rbx + 0x80], r14d
mov rax, qword [0x1800ae930]
mov rcx, qword [0x1800ae928]
cmp rcx, rax
je 0x18004b581
mov r12, r14
mov qword [rbp - 0x78], r14
sub rax, rcx
sar rax, 3
test rax, rax
je 0x18004b581
movss xmm15, dword [rsp + 0x50]
movss xmm13, dword [rsp + 0x50]
movss xmm12, dword [rsp + 0x50]
movsd xmm8, qword [0x180078a20]
movss xmm7, dword [0x180078ae4]
movss xmm6, dword [0x180078a08]
mov rsi, qword [0x1800ae928]
mov rdi, qword [rsi + r12*8]
test rdi, rdi
je 0x18004b11e
cmp rdi, qword [0x1800ae6c8]
je 0x18004b11e
mov rbx, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov r13, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x18004b11e
mov rbx, qword [rsi + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rdx, qword [0x1800ae560]
lea rcx, str.Animator
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
mov r14, rax
test rax, rax
je 0x18004b11e
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [r13]
call r9
test rax, rax
je 0x180048ebd
mov rax, qword [rax]
test rax, rax
je 0x180048ebd
mov rcx, r13
call rax
movzx edi, al
jmp 0x180048ec0
xor dil, dil
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180048ef1
mov rax, qword [rax]
test rax, rax
je 0x180048ef1
mov rcx, r13
call rax
movzx ebx, al
jmp 0x180048ef3
xor bl, bl
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsTeammate
mov rcx, qword [r13]
call rax
test rax, rax
je 0x180048f21
mov rax, qword [rax]
test rax, rax
je 0x180048f21
mov rcx, r13
call rax
jmp 0x180048f23
xor al, al
test dil, dil
jne 0x18004b11e
test bl, bl
jne 0x18004b11e
cmp byte [0x1800830bf], bl
je 0x180048f44
test al, al
jne 0x18004b11e
mov rax, qword [0x1800ae610]
mov rcx, qword [rsi + r12*8]
call rax
test rax, rax
je 0x18004b11e
mov qword [rbp + 0x1f4], 0
mov dword [rbp + 0x1f0], 0
lea rdx, [rbp + 0x1f0]
mov rcx, rax
call qword [0x1800ae660]
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.WeaponsController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
test rax, rax
je 0x18004b11e
cmp byte [0x1800ae730], 0
je 0x180049025
mov rcx, qword [0x1800ae928]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rdx, qword [0x1800ae560]
lea rcx, str.WeaponsController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
test rax, rax
je 0x18004b11e
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.AddLevelsToAllWeapons
mov rcx, qword [rax]
call r9
test rax, rax
je 0x180049025
mov rax, qword [rax]
test rax, rax
je 0x180049025
mov edx, 0xa
mov rcx, rbx
call rax
cmp byte [0x1800ae72f], 0
je 0x180049090
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.ApplyFireRateMultiplier
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004905d
mov rax, qword [rax]
test rax, rax
je 0x18004905d
movaps xmm1, xmm10
mov rcx, rsi
call rax
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.ApplyFireRateMultiplier
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x180049090
mov rax, qword [rax]
test rax, rax
je 0x180049090
movss xmm1, dword [0x180078af8]
mov rcx, rsi
call rax
cmp byte [0x1800ae6b5], 0
je 0x1800490cc
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.ApplyReloadSpeedMultiplier
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x1800490cc
mov rax, qword [rax]
test rax, rax
je 0x1800490cc
movss xmm1, dword [0x180078a4c]
mov rcx, rsi
call rax
cmp byte [0x1800ae743], 0
je 0x180049136
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.AddPercentageAmmoToAllWeapons
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x180049103
mov rax, qword [rax]
test rax, rax
je 0x180049103
movaps xmm1, xmm6
mov rcx, rsi
call rax
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.AddPercentageAmmoToAllWeapons
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x180049136
mov rax, qword [rax]
test rax, rax
je 0x180049136
movss xmm1, dword [0x180078afc]
mov rcx, rsi
call rax
cmp byte [0x1800830b6], 0
je 0x18004935d
mov r15, qword [0x1800ae778]
mov rdi, qword [0x1800ae770]
cmp rdi, r15
je 0x18004935d
nop word [rax + rax]
mov ebx, dword [rdi]
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x180049194
mov rax, qword [rax]
test rax, rax
je 0x180049194
mov edx, ebx
mov rcx, r14
call rax
mov rsi, rax
jmp 0x180049196
xor esi, esi
mov ebx, dword [rdi + 4]
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x1800491cb
mov rax, qword [rax]
test rax, rax
je 0x1800491cb
mov edx, ebx
mov rcx, r14
call rax
mov rbx, rax
jmp 0x1800491cd
xor ebx, ebx
test rsi, rsi
je 0x180049350
test rbx, rbx
je 0x180049350
mov qword [rbp + 0x204], 0
mov dword [rbp + 0x200], 0
lea rdx, [rbp + 0x200]
mov rcx, rsi
call qword [0x1800ae660]
mov qword [rbp + 0x214], 0
mov dword [rbp + 0x210], 0
lea rdx, [rbp + 0x210]
mov rcx, rbx
call qword [0x1800ae660]
movsd xmm0, qword [rbp + 0x200]
movsd qword [rbp + 0x140], xmm0
mov eax, dword [rbp + 0x208]
mov dword [rbp + 0x148], eax
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x140]
call fcn.1800427b0
test al, al
je 0x180049350
movsd xmm0, qword [rbp + 0x210]
movsd qword [rbp + 0x150], xmm0
mov eax, dword [rbp + 0x218]
mov dword [rbp + 0x158], eax
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x150]
call fcn.1800427b0
test al, al
je 0x180049350
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x1800492cb
mov rax, qword [rax]
test rax, rax
je 0x1800492cb
mov rcx, r13
call rax
test al, al
jne 0x180049350
mov r10, qword [0x1800ae6a8]
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss xmm0, dword [rbp + 0xf0]
movss dword [rbp + 0x100], xmm0
movss xmm1, dword [rbp + 0xf4]
movss dword [rbp + 0x104], xmm1
movss xmm0, dword [rbp + 0xf8]
movss dword [rbp + 0x108], xmm0
movss xmm1, dword [rbp + 0xfc]
movss dword [rbp + 0x10c], xmm1
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
lea rcx, [r10 + 0x1d40]
call fcn.180023960
add rdi, 8
cmp rdi, r15
jne 0x180049160
cmp byte [0x1800830b5], 0
je 0x180049520
movss xmm0, dword [rbp + 0x1f0]
movss dword [rbp + 0x130], xmm0
movss xmm1, dword [rbp + 0x1f4]
subss xmm1, dword [0x1800789a0]
movss dword [rbp + 0x134], xmm1
movss xmm0, dword [rbp + 0x1f8]
movss dword [rbp + 0x138], xmm0
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x130]
call fcn.1800427b0
test al, al
je 0x180049520
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x1800493ee
mov rax, qword [rax]
test rax, rax
je 0x1800493ee
mov rcx, r13
call rax
test al, al
jne 0x18004b11e
movups xmm0, xmmword [0x180074bf0]
movups xmmword [rbp + 0x1b8], xmm0
cmp byte [0x1800ae72e], 0
je 0x18004943f
movss xmm0, dword [0x1800ae8f0]
movss dword [rbp + 0x1b8], xmm0
movss xmm1, dword [0x1800ae8f4]
movss dword [rbp + 0x1bc], xmm1
movss xmm0, dword [0x1800ae8f8]
movss dword [rbp + 0x1c0], xmm0
mov dword [rbp + 0x1c4], 0x3f800000
mov ecx, dword [0x1800832e4]
sub ecx, 1
je 0x1800494b0
cmp ecx, 1
jne 0x180049520
mov r10, qword [0x1800ae6a8]
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss xmm0, dword [rbp - 0x70]
movss dword [rbp + 0x110], xmm0
movss xmm1, dword [rbp - 0x6c]
movss dword [rbp + 0x114], xmm1
movss xmm0, dword [0x1800ae908]
movss dword [rbp + 0x118], xmm0
movss xmm1, dword [0x1800ae90c]
movss dword [rbp + 0x11c], xmm1
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x118]
jmp 0x18004950b
mov r10, qword [0x1800ae6a8]
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss xmm0, dword [rbp - 0x70]
movss dword [rbp + 0x120], xmm0
movss xmm1, dword [rbp - 0x6c]
movss dword [rbp + 0x124], xmm1
movss xmm0, dword [0x1800ae908]
movss dword [rbp + 0x128], xmm0
movss xmm1, dword [0x1800ae904]
movss dword [rbp + 0x12c], xmm1
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x128]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea rcx, [r10 + 0x1d40]
call fcn.180023960
cmp byte [0x1800832d1], 0
je 0x18004a47f
mov r13, qword [0x1800ae6a8]
add r13, 0x1d40
mov qword [rbp + 0x1b8], r13
mov r15b, 1
mov r12, qword [0x1800ae778]
mov rdi, qword [0x1800ae770]
cmp rdi, r12
je 0x18004973c
movss xmm14, dword [rsp + 0x50]
mov r13, qword [rbp - 0x80]
nop word [rax + rax]
mov ebx, dword [rdi]
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x1800495a4
mov rax, qword [rax]
test rax, rax
je 0x1800495a4
mov edx, ebx
mov rcx, r14
call rax
mov rsi, rax
jmp 0x1800495a6
xor esi, esi
mov ebx, dword [rdi + 4]
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [r14]
call rax
test rax, rax
je 0x1800495db
mov rax, qword [rax]
test rax, rax
je 0x1800495db
mov edx, ebx
mov rcx, r14
call rax
mov rbx, rax
jmp 0x1800495dd
xor ebx, ebx
test rsi, rsi
je 0x18004971d
test rbx, rbx
je 0x18004971d
mov qword [rbp - 0x64], 0
mov dword [rbp - 0x68], 0
lea rdx, [rbp - 0x68]
mov rcx, rsi
call qword [0x1800ae660]
movsd xmm0, qword [rbp - 0x68]
movsd qword [rbp + 0x160], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rbp + 0x168], eax
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x160]
call fcn.1800427b0
test al, al
je 0x18004971d
mov qword [rbp - 0x58], 0
mov dword [rbp - 0x5c], 0
lea rdx, [rbp - 0x5c]
mov rcx, rbx
call qword [0x1800ae660]
movsd xmm0, qword [rbp - 0x5c]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [rbp - 0x54]
mov dword [rbp + 0x178], eax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x170]
call fcn.1800427b0
test al, al
je 0x18004971d
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call rax
test rax, rax
je 0x1800496b3
mov rax, qword [rax]
test rax, rax
je 0x1800496b3
mov rcx, r13
call rax
test al, al
jne 0x18004971d
movss xmm3, dword [rbp + 0x1c]
movss xmm4, dword [rbp + 0x18]
test r15b, r15b
je 0x1800496d5
movaps xmm12, xmm4
movaps xmm13, xmm3
xor r15b, r15b
movaps xmm15, xmm4
movaps xmm14, xmm3
movaps xmm0, xmm4
minss xmm0, xmm12
movss xmm2, dword [rbp + 0x20]
movaps xmm12, xmm2
minss xmm12, xmm0
movaps xmm1, xmm3
minss xmm1, xmm13
movss xmm0, dword [rbp + 0x24]
movaps xmm13, xmm0
minss xmm13, xmm1
maxss xmm4, xmm15
movaps xmm15, xmm2
maxss xmm15, xmm4
maxss xmm3, xmm14
movaps xmm14, xmm0
maxss xmm14, xmm3
add rdi, 8
cmp rdi, r12
jne 0x180049570
movss dword [rsp + 0x50], xmm14
xorps xmm14, xmm14
mov r13, qword [rbp + 0x1b8]
mov eax, dword [0x1800ae748]
cmp eax, 1
jne 0x1800497ae
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss dword [rbp + 0x28], xmm15
movss xmm9, dword [rsp + 0x50]
movss dword [rbp + 0x2c], xmm9
movss dword [rbp + 0x30], xmm12
movss dword [rbp + 0x34], xmm13
movss dword [rsp + 0x30], xmm11
xor r14d, r14d
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x30]
mov rcx, r13
call fcn.180023ac0
jmp 0x180049a9a
test eax, eax
jne 0x180049a90
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movaps xmm8, xmm12
movss xmm9, dword [0x180078a64]
addss xmm8, xmm9
movss dword [rbp + 0x38], xmm8
movss dword [rbp + 0x3c], xmm13
movss dword [rbp + 0x40], xmm12
movss dword [rbp + 0x44], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movaps xmm6, xmm13
addss xmm6, xmm9
movss dword [rbp + 0x48], xmm12
movss dword [rbp + 0x4c], xmm6
movss dword [rbp + 0x50], xmm12
movss dword [rbp + 0x54], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x50]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movaps xmm7, xmm15
subss xmm7, xmm9
movss dword [rbp + 0x58], xmm7
movss dword [rbp + 0x5c], xmm13
movss dword [rbp + 0x60], xmm15
movss dword [rbp + 0x64], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss dword [rbp + 0x68], xmm15
movss dword [rbp + 0x6c], xmm6
movss dword [rbp + 0x70], xmm15
movss dword [rbp + 0x74], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x70]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss dword [rbp + 0x78], xmm8
movss xmm9, dword [rsp + 0x50]
movss dword [rbp + 0x7c], xmm9
movss dword [rbp + 0x80], xmm12
movss dword [rbp + 0x84], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x80]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movaps xmm6, xmm9
subss xmm6, dword [0x180078a64]
movss dword [rbp + 0x88], xmm12
movss dword [rbp + 0x8c], xmm6
movss dword [rbp + 0x90], xmm12
movss dword [rbp + 0x94], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x90]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss dword [rbp + 0x98], xmm7
movss dword [rbp + 0x9c], xmm9
movss dword [rbp + 0xa0], xmm15
movss dword [rbp + 0xa4], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa0]
mov rcx, r13
call fcn.180023960
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss dword [rbp + 0xa8], xmm15
movss dword [rbp + 0xac], xmm6
movss dword [rbp + 0xb0], xmm15
movss dword [rbp + 0xb4], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0xb0]
mov rcx, r13
call fcn.180023960
movss xmm7, dword [0x180078ae4]
jmp 0x180049a97
movss xmm9, dword [rsp + 0x50]
xor r14d, r14d
mov r12, qword [rbp - 0x78]
cmp byte [0x1800830b8], 0
je 0x180049f16
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x180049f16
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rbx, qword [rbp - 0x80]
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x180049b12
mov rax, qword [rax]
test rax, rax
je 0x180049b12
mov rcx, rbx
call rax
movzx ebx, al
jmp 0x180049b14
xor bl, bl
mov rcx, qword [0x1800ae8d0]
call fcn.180010c80
lea rdx, str.Real_Player
test bl, bl
lea rax, [0x180078894]
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180049b50
lea rcx, [rbp - 0x28]
call fcn.180003250
nop
mov r8, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
sub rax, r8
cmp rax, 6
jb 0x180049c00
lea rax, [r8 + 6]
mov qword [rbp - 0x18], rax
lea rbx, [rbp - 0x28]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x28]
lea rax, [0x1800788aa]
lea rsi, str.User:
cmp rax, rbx
jbe 0x180049bbf
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x180049bbf
cmp rbx, rsi
ja 0x180049bb7
mov rdi, r14
jmp 0x180049bc4
mov rdi, rbx
sub rdi, rsi
jmp 0x180049bc4
mov edi, 6
inc r8
lea rcx, [rbx + 6]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 6
sub r8, rdi
lea rdx, [rsi + 6]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x28]
jmp 0x180049c23
mov qword [rsp + 0x28], 6
lea rax, str.User:
mov qword [rsp + 0x20], rax
mov edx, 6
lea rcx, [rbp - 0x28]
call fcn.18004f110
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x220], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x230], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180049c9a
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180049c95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b515
call fcn.18004fe74
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
lea rax, [rbp + 0x220]
mov rcx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
cmova rax, rcx
mov rbx, qword [0x1800ae6a8]
movss xmm1, dword [rbx + 0x1910]
test rax, rax
jne 0x180049ce1
movaps xmm0, xmm14
jmp 0x180049d43
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x180078b0c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm7
movaps xmm2, xmm1
lea rdx, [rsp + 0x60]
mov rcx, qword [rbx + 0x1908]
call fcn.180028730
movss xmm0, dword [rsp + 0x60]
addss xmm0, dword [0x1800789e8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [rsp + 0x64]
mov rdx, qword [rbp + 0x238]
mov rcx, qword [rbp + 0x220]
movaps xmm7, xmm13
subss xmm7, xmm1
subss xmm7, dword [0x180078a6c]
movaps xmm6, xmm12
addss xmm6, xmm15
subss xmm6, xmm0
mulss xmm6, xmm10
lea rdi, [rbp + 0x220]
cmp rdx, 0xf
cmova rdi, rcx
movaps xmm0, xmmword [0x180078ce0]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
mov r14d, eax
movss xmm8, dword [rbx + 0x1910]
mov rsi, qword [rbx + 0x1908]
test eax, 0xff000000
je 0x180049eb2
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x180049db3
add rbx, rdi
cmp rdi, rbx
je 0x180049eb2
test rsi, rsi
jne 0x180049dd5
mov rax, qword [r13 + 0x38]
mov rsi, qword [rax + 8]
ucomiss xmm8, xmm14
jp 0x180049de7
jne 0x180049de7
mov rax, qword [r13 + 0x38]
movss xmm8, dword [rax + 0x10]
cmp dword [r13 + 0x70], 0
jg 0x180049e08
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rdx, dword [r13 + 0x70]
mov rax, qword [r13 + 0x78]
mov rcx, qword [rsi + 0x48]
mov rax, qword [rax + rdx*8 - 8]
cmp qword [rcx + 8], rax
je 0x180049e39
mov r8d, 0x485
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___TextureIdStack.back__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [r13 + 0x60], 0
jg 0x180049e5a
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [r13 + 0x60]
add rcx, rcx
mov rax, qword [r13 + 0x68]
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp + 0x1b8], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movq r9, xmm0
movaps xmm2, xmm8
mov rdx, r13
mov rcx, rsi
call fcn.180028950
call fcn.180010d40
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x180049ef9
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180049ef4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b51c
call fcn.18004fe74
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x238], 0xf
mov byte [rbp + 0x220], 0
cmp byte [0x1800ae732], 0
je 0x18004a461
mov rsi, qword [0x1800ae6a8]
add rsi, 0x1d40
addss xmm9, dword [0x180078a6c]
movaps xmm8, xmm15
subss xmm8, xmm12
mulss xmm8, xmm10
addss xmm8, xmm12
subss xmm8, dword [0x180078a88]
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerHealth
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov r14, rax
mov rcx, qword [0x1800ae928]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rdx, qword [0x1800ae560]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test r14, r14
je 0x180049fdf
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_PlayerHealth
mov rcx, qword [r14]
call rax
test rax, rax
je 0x180049fdf
mov rax, qword [rax]
test rax, rax
je 0x180049fdf
mov rcx, r14
call rax
jmp 0x180049fe3
movaps xmm0, xmm14
cvttss2si edx, xmm0
lea rcx, [rbp - 8]
call fcn.18004ddb0
nop
mov r8, qword [rbp + 8]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
sub rax, r8
cmp rax, 4
jb 0x18004a08c
lea rax, [r8 + 4]
mov qword [rbp + 8], rax
lea rbx, [rbp - 8]
cmp rcx, 0xf
cmova rbx, qword [rbp - 8]
lea rax, [0x1800788d8]
lea r14, str.HP:
cmp rax, rbx
jbe 0x18004a04b
lea rax, [rbx + r8]
cmp r14, rax
ja 0x18004a04b
cmp rbx, r14
ja 0x18004a043
xor edi, edi
jmp 0x18004a050
mov rdi, rbx
sub rdi, r14
jmp 0x18004a050
mov edi, 4
inc r8
lea rcx, [rbx + 4]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 4
sub r8, rdi
lea rdx, [r14 + 4]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 8]
jmp 0x18004a0af
mov qword [rsp + 0x28], 4
lea rax, str.HP:
mov qword [rsp + 0x20], rax
mov edx, 4
lea rcx, [rbp - 8]
call fcn.18004f110
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xor r14d, r14d
mov qword [rbp + 0x260], r14
mov qword [rbp + 0x268], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x250], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x260], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18004a129
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004a124
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b523
call fcn.18004fe74
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
movaps xmm0, xmmword [0x180078c90]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movaps xmm7, xmm9
addss xmm7, dword [0x180078a7c]
movaps xmm6, xmm8
addss xmm6, dword [0x180078a8c]
movss dword [rbp + 0xb8], xmm6
movss dword [rbp + 0xbc], xmm7
movss dword [rbp + 0xc0], xmm8
movss dword [rbp + 0xc4], xmm9
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xc0]
mov rcx, rsi
call fcn.180023bd0
movups xmm0, xmmword [0x1800ad910]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
movss dword [rbp + 0xc8], xmm6
movss dword [rbp + 0xcc], xmm7
movss dword [rbp + 0xd0], xmm8
movss dword [rbp + 0xd4], xmm9
movss xmm0, dword [0x1800789f0]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0xd0]
mov rcx, rsi
call fcn.180023ac0
lea rcx, [rbp + 0x250]
mov r8, qword [rbp + 0x250]
mov r9, qword [rbp + 0x268]
cmp r9, 0xf
cmova rcx, r8
mov rax, qword [0x1800ae6a8]
movss xmm1, dword [rax + 0x1910]
test rcx, rcx
jne 0x18004a25d
movaps xmm0, xmm14
jmp 0x18004a2c4
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rcx
movss xmm0, dword [0x180078b0c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x180078ae4]
movaps xmm2, xmm1
lea rdx, [rsp + 0x58]
mov rcx, qword [rax + 0x1908]
call fcn.180028730
movss xmm0, dword [rsp + 0x58]
addss xmm0, dword [0x1800789e8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [rsp + 0x5c]
mov r9, qword [rbp + 0x268]
mov r8, qword [rbp + 0x250]
movss xmm7, dword [0x180078a7c]
subss xmm7, xmm1
mulss xmm7, xmm10
addss xmm7, xmm9
movss xmm6, dword [0x180078a8c]
subss xmm6, xmm0
mulss xmm6, xmm10
addss xmm6, xmm8
lea rdi, [rbp + 0x250]
cmp r9, 0xf
cmova rdi, r8
movaps xmm0, xmmword [0x180078ce0]
movups xmmword [rbp + 0x1b8], xmm0
lea rcx, [rbp + 0x1b8]
call fcn.180005510
mov r15d, eax
test eax, 0xff000000
je 0x18004a42a
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rdi + rbx], 0
jne 0x18004a330
add rbx, rdi
cmp rdi, rbx
je 0x18004a42a
mov rax, qword [rsi + 0x38]
mov r14, qword [rax + 8]
movss xmm8, dword [rax + 0x10]
cmp dword [rsi + 0x70], 0
jg 0x18004a373
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rdx, dword [rsi + 0x70]
mov rax, qword [rsi + 0x78]
mov rcx, qword [r14 + 0x48]
mov rax, qword [rax + rdx*8 - 8]
cmp qword [rcx + 8], rax
je 0x18004a3a4
mov r8d, 0x485
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___TextureIdStack.back__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [rsi + 0x60], 0
jg 0x18004a3c4
mov r8d, 0x505
lea rdx, str.C:UserscerisOneDriveDesktop1v1.lol_cheat__2_1v1.lol_cheat1v1.lol_cheatImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rsi + 0x60]
add rcx, rcx
mov rax, qword [rsi + 0x68]
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp + 0x1b8], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movq r9, xmm0
movaps xmm2, xmm8
mov rdx, rsi
mov rcx, r14
call fcn.180028950
mov r9, qword [rbp + 0x268]
mov r8, qword [rbp + 0x250]
cmp r9, 0xf
jbe 0x18004a461
lea rdx, [r9 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18004a459
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b52a
mov rcx, r8
call fcn.18004fe74
movsd xmm8, qword [0x180078a20]
movss xmm7, dword [0x180078ae4]
movss xmm9, dword [0x1800789f0]
mov r13, qword [rbp - 0x80]
cmp byte [0x1800ae737], 0
je 0x18004a56e
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004a4e8
mov rdx, qword [rax]
test rdx, rdx
je 0x18004a4e8
mov rcx, r13
call rdx
jmp 0x18004a4ea
xor al, al
test rbx, rbx
je 0x18004b11e
test al, al
je 0x18004b11e
mov r14d, 0x20
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18004a56e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1c8], xmm0
movups xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1c8], 1
mov word [rbp + 0x1d0], r14w
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x1c8]
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_SendInput]
mov dword [rbp + 0x1d4], 2
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x1c8]
lea ecx, [r14 - 0x1f]
call qword [sym.imp.USER32.dll_SendInput]
mov rax, qword [0x1800ae928]
mov rdi, qword [0x1800ae5f0]
lea rcx, str.PlayerHealth
mov rbx, qword [rax + r12*8]
mov rax, qword [0x1800ae560]
cmp byte [0x1800ae741], 0
je 0x18004a5df
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov rcx, qword [0x1800ae928]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rdx, qword [0x1800ae560]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004b11e
test rsi, rsi
jmp 0x18004a743
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004a61f
mov rax, qword [rax]
test rax, rax
je 0x18004a61f
mov rcx, r13
call rax
movzx r14d, al
jmp 0x18004a622
xor r14b, r14b
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004b11e
test rsi, rsi
je 0x18004b11e
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004a68b
mov rax, qword [rax]
test rax, rax
je 0x18004a68b
xor edx, edx
mov rcx, rsi
call rax
cmp byte [0x1800830bc], 0
je 0x18004a776
test r14b, r14b
je 0x18004a776
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerHealth
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004a701
mov rax, qword [rax]
test rax, rax
je 0x18004a701
mov rcx, r13
call rax
movzx r14d, al
jmp 0x18004a704
xor r14b, r14b
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004b11e
test rsi, rsi
je 0x18004b11e
test r14b, r14b
je 0x18004b11e
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
mov rax, qword [0x1800ae518]
call rax
test rax, rax
je 0x18004a776
mov rax, qword [rax]
test rax, rax
je 0x18004a776
mov dl, 1
mov rcx, rsi
call rax
cmp byte [0x1800ae743], 0
je 0x18004a789
mov dword [0x1800ae738], 5
mov rax, qword [0x1800ae928]
mov rdi, qword [0x1800ae5f0]
lea rcx, str.vThirdPersonController
mov rbx, qword [rax + r12*8]
mov rax, qword [0x1800ae560]
cmp byte [0x1800ae733], 0
je 0x18004a7ea
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.SetGodMode
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004a826
mov r8, qword [rax]
test r8, r8
je 0x18004a826
mov dl, 1
jmp 0x18004a820
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.SetGodMode
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004a826
mov r8, qword [rax]
test r8, r8
je 0x18004a826
xor edx, edx
mov rcx, rbx
call r8
cmp byte [0x1800830b7], 0
je 0x18004a88b
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.vThirdPersonController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.SetDiveState
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004a88b
mov r8, qword [rax]
test r8, r8
je 0x18004a88b
xor edx, edx
mov rcx, rbx
call r8
cmp byte [0x1800ae73c], 0
je 0x18004abbf
mov rbx, qword [0x1800ae928]
cmp rbx, qword [0x1800ae930]
je 0x18004abc6
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004abbf
xor r12d, r12d
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1c8], xmm1
mov qword [rbp + 0x1d8], rax
mov r15, qword [0x1800ae930]
mov r14, qword [0x1800ae928]
cmp r14, r15
je 0x18004b531
nop
mov rdi, qword [r14]
test rdi, rdi
je 0x18004aa21
mov rbx, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x18004aa21
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004a958
mov rax, qword [rax]
test rax, rax
je 0x18004a958
mov rcx, rbx
call rax
movzx esi, al
jmp 0x18004a95b
xor sil, sil
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004a98b
mov rax, qword [rax]
test rax, rax
je 0x18004a98b
mov rcx, rbx
call rax
movzx edi, al
jmp 0x18004a98e
xor dil, dil
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004a9bb
mov rax, qword [rax]
test rax, rax
je 0x18004a9bb
mov rcx, rbx
call rax
jmp 0x18004a9bd
xor al, al
test sil, sil
je 0x18004a9d3
mov rax, qword [0x1800ae5c8]
mov rcx, rbx
call rax
mov r12, rax
jmp 0x18004aa21
test dil, dil
jne 0x18004aa21
test al, al
jne 0x18004aa21
mov rcx, rbx
call qword [0x1800ae5c8]
mov qword [rbp + 0x1b8], rax
test rax, rax
je 0x18004aa21
mov rdx, qword [rbp + 0x1d0]
cmp rdx, qword [rbp + 0x1d8]
je 0x18004aa0e
mov qword [rdx], rax
add qword [rbp + 0x1d0], 8
jmp 0x18004aa21
lea r8, [rbp + 0x1b8]
lea rcx, [rbp + 0x1c8]
call fcn.18004edc0
add r14, 8
cmp r14, r15
jne 0x18004a8f0
test r12, r12
je 0x18004b531
mov rcx, qword [rbp + 0x1c8]
cmp rcx, qword [rbp + 0x1d0]
je 0x18004b538
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x15f4], 0xffffffff
mov dword [rbp + 0x274], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x274], eax
inc rdx
cmp rdx, 0x270
jb 0x18004aa70
mov dword [rbp + 0x270], 0x270
mov rax, qword [rbp + 0x1d0]
mov rsi, qword [rbp + 0x1c8]
sub rax, rsi
sar rax, 3
dec eax
cmp eax, 0x80000000
jb 0x18004aacf
cmp eax, 0xffffffff
jne 0x18004aacf
lea rcx, [rbp + 0x270]
call fcn.18004f290
mov ecx, eax
jmp 0x18004ab1a
lea ebx, [rax + 1]
lea rcx, [rbp + 0x270]
call fcn.18004f290
mov edi, ebx
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jae 0x18004ab16
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp ecx, edx
jae 0x18004ab16
nop dword [rax + rax]
lea rcx, [rbp + 0x270]
call fcn.18004f290
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jb 0x18004ab00
shr rcx, 0x20
movsxd rax, ecx
mov rcx, qword [rsi + rax*8]
mov qword [rbp + 0x244], 0
mov dword [rbp + 0x240], 0
lea rdx, [rbp + 0x240]
call qword [0x1800ae660]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
movsd xmm0, qword [rbp + 0x240]
movsd qword [rbp + 0x180], xmm0
mov eax, dword [rbp + 0x248]
mov dword [rbp + 0x188], eax
lea rdx, [rbp + 0x180]
mov rcx, r12
call qword [0x1800ae680]
nop
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x18004abbf
mov rdx, qword [rbp + 0x1d8]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004abba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b56c
call fcn.18004fe74
mov rbx, qword [0x1800ae928]
mov r12, qword [rbp - 0x78]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
mov rbx, qword [rbx + r12*8]
cmp byte [0x1800ae6b4], 0
je 0x18004acba
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004ac2f
mov rdx, qword [rax]
test rdx, rdx
je 0x18004ac2f
mov rcx, r13
call rdx
movzx edi, al
jmp 0x18004ac32
xor dil, dil
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004ac60
mov rax, qword [rax]
test rax, rax
je 0x18004ac60
mov rcx, r13
call rax
jmp 0x18004ac62
xor al, al
test rbx, rbx
je 0x18004b11e
test al, al
jne 0x18004b11e
test dil, dil
je 0x18004b11e
movss xmm6, dword [0x1800832d4]
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.set_PlayerSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004ad75
mov rax, qword [rax]
test rax, rax
je 0x18004ad75
movaps xmm1, xmm6
jmp 0x18004ad70
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rbx, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004acf9
mov rdx, qword [rax]
test rdx, rdx
je 0x18004acf9
mov rcx, r13
call rdx
movzx edi, al
jmp 0x18004acfc
xor dil, dil
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.get_IsBot
mov rcx, qword [r13]
call rax
test rax, rax
je 0x18004ad2a
mov rax, qword [rax]
test rax, rax
je 0x18004ad2a
mov rcx, r13
call rax
jmp 0x18004ad2c
xor al, al
test rbx, rbx
je 0x18004b11e
test al, al
jne 0x18004b11e
test dil, dil
je 0x18004b11e
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.set_PlayerSpeedMultiplier
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004ad75
mov rax, qword [rax]
test rax, rax
je 0x18004ad75
movaps xmm1, xmm9
mov rcx, rbx
call rax
mov rax, qword [0x1800ae928]
mov rdi, qword [0x1800ae5f0]
lea rcx, str.PlayerHealth
mov rbx, qword [rax + r12*8]
mov rax, qword [0x1800ae560]
cmp byte [0x1800830bc], 0
je 0x18004ae58
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov r9, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.IsMine
mov rcx, qword [r13]
call r9
test rax, rax
je 0x18004ade2
mov rax, qword [rax]
test rax, rax
je 0x18004ade2
mov rcx, r13
call rax
movzx r14d, al
jmp 0x18004ade5
xor r14b, r14b
mov rax, qword [0x1800ae928]
mov rbx, qword [rax + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004b11e
test rsi, rsi
je 0x18004b11e
test r14b, r14b
je 0x18004b11e
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004aece
mov rax, qword [rax]
test rax, rax
je 0x18004aece
mov dl, 1
jmp 0x18004aec9
call rax
mov rdx, rax
mov rcx, rbx
call rdi
mov rsi, rax
mov rcx, qword [0x1800ae928]
mov rbx, qword [rcx + r12*8]
mov rdi, qword [0x1800ae5f0]
mov rdx, qword [0x1800ae560]
lea rcx, str.PlayerController
call rdx
mov rdx, rax
mov rcx, rbx
call rdi
test rax, rax
je 0x18004b11e
test rsi, rsi
je 0x18004b11e
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.SetPlayerImmunity
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004aece
mov rax, qword [rax]
test rax, rax
je 0x18004aece
xor edx, edx
mov rcx, rsi
call rax
cmp byte [0x1800830b9], 0
je 0x18004b11e
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18004af19
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b8], xmm0
lea rdx, [rbp + 0x1b8]
xor ecx, ecx
call qword [sym.imp.XINPUT1_3.dll_Ordinal_2]
test eax, eax
jne 0x18004b11e
cmp byte [rbp + 0x1be], 0x1e
jbe 0x18004b11e
xor r14d, r14d
mov r15d, r14d
movaps xmm11, xmm7
movss xmm9, dword [0x1800ae900]
mulss xmm9, xmm10
movss xmm10, dword [0x1800ae904]
mulss xmm10, dword [0x1800789b8]
movsxd rax, dword [0x1800ad944]
cmp eax, 0xffffffff
je 0x18004b14e
mov rcx, rax
mov rax, qword [0x1800ae928]
mov rdi, qword [rax + rcx*8]
test rdi, rdi
je 0x18004b102
mov rbx, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x18004b102
mov eax, dword [0x1800ae708]
test eax, eax
je 0x18004afd3
cmp eax, 1
jne 0x18004b102
mov r9, qword [0x1800ae518]
lea r8d, [r14 - 1]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call r9
test rax, rax
je 0x18004b006
mov rax, qword [rax]
test rax, rax
je 0x18004b006
lea edx, [r14 + 8]
jmp 0x18004affe
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004b006
mov rax, qword [rax]
test rax, rax
je 0x18004b006
mov edx, 0xb
mov rcx, rbx
call rax
mov r15, rax
test r15, r15
je 0x18004b102
mov qword [rbp - 0x4c], r14
mov dword [rbp - 0x50], r14d
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [0x1800ae660]
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbp + 0x190], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0x198], eax
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x190]
call fcn.1800427b0
test al, al
je 0x18004b102
movss xmm7, dword [rbp + 0xd8]
movaps xmm0, xmm7
subss xmm0, xmm9
cvtps2pd xmm0, xmm0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm8, dword [rbp + 0xdc]
movaps xmm0, xmm8
subss xmm0, xmm10
cvtps2pd xmm0, xmm0
movsd xmm1, qword [0x180078a20]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x18004b0ac
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x18004b0b4
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
movss xmm2, dword [0x180078ae4]
comiss xmm2, xmm0
jbe 0x18004b102
movaps xmm0, xmm9
movss xmm1, dword [0x1800832e0]
subss xmm0, xmm1
comiss xmm7, xmm0
jb 0x18004b102
addss xmm9, xmm1
comiss xmm9, xmm7
jb 0x18004b102
movaps xmm0, xmm10
subss xmm0, xmm1
comiss xmm8, xmm0
jb 0x18004b102
addss xmm10, xmm1
comiss xmm10, xmm8
jae 0x18004b393
mov dword [0x1800ad944], 0xffffffff
movss xmm10, dword [0x1800789b8]
movss xmm11, dword [0x180078a1c]
inc r12
mov qword [rbp - 0x78], r12
mov rax, qword [0x1800ae930]
sub rax, qword [0x1800ae928]
sar rax, 3
cmp r12, rax
jae 0x18004b57a
movss xmm9, dword [0x1800789f0]
jmp 0x180048df3
mov esi, r14d
mov rax, qword [0x1800ae930]
sub rax, qword [0x1800ae928]
sar rax, 3
test rax, rax
je 0x18004b102
movsd xmm14, qword [0x180078a20]
mov rax, qword [0x1800ae928]
mov rdi, qword [r14 + rax]
test rdi, rdi
je 0x18004b35f
mov rbx, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.PlayerController
call rax
mov rdx, rax
mov rcx, rdi
call rbx
test rax, rax
je 0x18004b35f
mov rbx, qword [0x1800ae5f0]
mov rax, qword [0x1800ae560]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x18004b35f
mov eax, dword [0x1800ae708]
test eax, eax
je 0x18004b21f
cmp eax, 1
jne 0x18004b35f
mov r9, qword [0x1800ae518]
lea r8d, [rax - 2]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call r9
test rax, rax
je 0x18004b254
mov rax, qword [rax]
test rax, rax
je 0x18004b254
mov edx, 8
mov rcx, rbx
call rax
mov rbx, rax
jmp 0x18004b256
mov rax, qword [0x1800ae518]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004b254
mov rax, qword [rax]
test rax, rax
je 0x18004b254
mov edx, 0xb
mov rcx, rbx
call rax
mov rbx, rax
jmp 0x18004b256
xor ebx, ebx
test rbx, rbx
je 0x18004b35f
mov qword [rbp - 0x40], 0
mov dword [rbp - 0x44], 0
lea rdx, [rbp - 0x44]
mov rcx, rbx
call qword [0x1800ae660]
movsd xmm0, qword [rbp - 0x44]
movsd qword [rbp + 0x1a0], xmm0
mov eax, dword [rbp - 0x3c]
mov dword [rbp + 0x1a8], eax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x1a0]
call fcn.1800427b0
test al, al
je 0x18004b35f
movss xmm7, dword [rbp + 0xe0]
movaps xmm0, xmm7
subss xmm0, xmm9
cvtps2pd xmm0, xmm0
movaps xmm1, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm8, dword [rbp + 0xe4]
movaps xmm0, xmm8
subss xmm0, xmm10
cvtps2pd xmm0, xmm0
movaps xmm1, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x18004b2ff
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x18004b307
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
comiss xmm11, xmm2
jbe 0x18004b35f
movaps xmm0, xmm9
movss xmm1, dword [0x1800832e0]
subss xmm0, xmm1
comiss xmm7, xmm0
jb 0x18004b35f
movaps xmm0, xmm9
addss xmm0, xmm1
comiss xmm0, xmm7
jb 0x18004b35f
movaps xmm0, xmm10
subss xmm0, xmm1
comiss xmm8, xmm0
jb 0x18004b35f
movaps xmm0, xmm10
addss xmm0, xmm1
comiss xmm0, xmm8
jb 0x18004b35f
movaps xmm11, xmm2
mov r15, rbx
mov dword [0x1800ad944], esi
inc esi
add r14, 8
mov rdx, qword [0x1800ae930]
sub rdx, qword [0x1800ae928]
sar rdx, 3
movsxd rax, esi
cmp rax, rdx
jb 0x18004b171
xorps xmm14, xmm14
test r15, r15
je 0x18004b102
xor r14d, r14d
mov qword [rbp - 0x34], 0
mov dword [rbp - 0x38], 0
lea rdx, [rbp - 0x38]
mov rcx, r15
call qword [0x1800ae660]
movsd xmm0, qword [rbp - 0x38]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x78], eax
lea rdx, [rbp + 0xe8]
lea rcx, [rsp + 0x70]
call fcn.1800427b0
movss xmm10, dword [0x1800789b8]
test al, al
je 0x18004b115
movss xmm6, dword [0x1800ae904]
movss xmm5, dword [0x1800ae900]
movaps xmm1, xmm5
mulss xmm1, xmm10
movaps xmm4, xmm6
mulss xmm4, xmm10
movaps xmm3, xmm14
movaps xmm2, xmm14
movss xmm0, dword [0x1800832f8]
mulss xmm0, dword [0x180078b10]
cvttss2si eax, xmm0
mov ecx, 3
sub ecx, eax
movss xmm0, dword [rbp + 0xe8]
ucomiss xmm0, xmm14
jp 0x18004b436
je 0x18004b48e
movss xmm7, dword [0x180078d30]
comiss xmm0, xmm1
jbe 0x18004b467
movaps xmm3, xmm1
subss xmm3, xmm0
xorps xmm3, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
addss xmm1, xmm3
comiss xmm1, xmm5
jbe 0x18004b496
movaps xmm3, xmm14
jmp 0x18004b496
comiss xmm1, xmm0
jbe 0x18004b496
movaps xmm3, xmm0
subss xmm3, xmm1
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
addss xmm1, xmm3
comiss xmm14, xmm1
jbe 0x18004b496
movaps xmm3, xmm14
jmp 0x18004b496
movss xmm7, dword [0x180078d30]
movss xmm0, dword [rbp + 0xec]
ucomiss xmm0, xmm14
jp 0x18004b4a6
je 0x18004b4f4
comiss xmm0, xmm4
jbe 0x18004b4cc
movaps xmm2, xmm4
subss xmm2, xmm0
xorps xmm2, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm1, xmm6
jmp 0x18004b4ee
comiss xmm4, xmm0
jbe 0x18004b4f4
movaps xmm2, xmm0
subss xmm2, xmm4
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm14, xmm1
jbe 0x18004b4f4
movaps xmm2, xmm14
cvttss2si r8, xmm2
cvttss2si rdx, xmm3
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x18004b115
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x18004b594
mov rdx, qword [rbp + 0x1d8]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b573
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004b573
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004fe74
jmp 0x18004b594
mov rsi, qword [rbp + 0x1b0]
mov eax, esi
sub eax, dword [0x1800ae8d8]
cmp eax, 5
jbe 0x18004b594
mov dword [0x1800ae8d8], esi
mov rcx, qword [rbp + 0x1600]
xor rcx, rsp
call fcn.18004faa0
lea r11, [rsp + 0x17b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret