Function at 0x180004140
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
sub rsp, 0xc8
mov rax, qword [0x180016010]
xor rax, rsp
mov qword [rsp + 0x90], rax
cmp byte [0x1800167ca], 0
je 0x180004d05
mov rax, qword gs:[0x60]
mov qword [r11 + 8], rbx
mov qword [r11 - 8], rdi
mov qword [0x180016830], rcx
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180004207
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180004207
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xc225459d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180004202
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1800041e0
cmp r8d, 0x772d88bd
je 0x18000420c
test r9d, r9d
jne 0x1800041c0
mov rax, qword [rax]
jmp 0x180004190
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 1
add rax, r10
call rax
movaps xmm0, xmmword [0x180013f30]
lea r8, [rsp + 0x30]
test ax, ax
movaps xmmword [rsp + 0x30], xmm0
setne byte [0x180016838]
call fcn.180003000
test al, al
je 0x180004cf5
lea rax, [0x180013284]
mov qword [rsp + 0xd8], rbp
mov qword [rsp + 0x40], rax
lea rbp, str.Pickups
lea rax, str.Bones
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0x48], rax
lea rsi, str.Containers
lea rax, str.Player
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rax
lea rdi, [rsp + 0x40]
lea rax, str.Weakspots
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rax
xor ebx, ebx
lea rax, str.Radar
mov qword [rsp + 0x70], rax
lea rax, str.Exploits
mov qword [rsp + 0x78], rax
lea rax, str.World
mov qword [rsp + 0x80], rax
lea rax, str.Misc
mov qword [rsp + 0x88], rax
mov eax, dword [0x18001a7cc]
nop dword [rax]
movaps xmm0, xmmword [0x180013f10]
lea rdx, [rsp + 0x30]
mov rcx, qword [rdi]
cmp eax, ebx
movaps xmmword [rsp + 0x30], xmm0
sete r8b
call fcn.180003600
test al, al
je 0x18000431d
mov eax, ebx
mov dword [0x18001a7cc], ebx
jmp 0x180004323
mov eax, dword [0x18001a7cc]
inc ebx
add rdi, 8
cmp ebx, 0xa
jb 0x1800042f0
movaps xmmword [rsp + 0xb0], xmm6
test eax, eax
jne 0x180004440
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x1800167ef]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
lea rdx, [0x1800167cf]
lea rcx, str.Enable_Mouse
call fcn.1800038b0
lea rdx, [0x1800167f0]
lea rcx, str.Enable_Memory__No_Smoothness_
call fcn.1800038b0
cmp byte [0x1800167cf], 0
movss xmm6, dword [0x180013da4]
je 0x1800043cb
movss xmm2, dword [0x180013c64]
lea rdx, [0x180016064]
movaps xmm3, xmm6
lea rcx, str.Mouse_Smoothing
call fcn.180003ba0
cmp byte [0x1800167ef], 0
je 0x180004cdd
lea rdx, [0x1800167eb]
lea rcx, str.Vis_Check
call fcn.1800038b0
lea rdx, [0x1800167ee]
lea rcx, str.Target_Line
call fcn.1800038b0
lea rdx, [0x1800167ec]
lea rcx, str.Show_FOV_Circle
call fcn.1800038b0
lea rcx, str._FOV_Circle_Is_Bigger_In_Lobby_
call fcn.1800034a0
movss xmm3, dword [0x180013db8]
lea rdx, [0x180016068]
movaps xmm2, xmm6
lea rcx, str.FOV_Size
call fcn.180003ba0
jmp 0x180004cdd
cmp eax, 1
jne 0x1800044ba
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x180016060]
cvtpd2ps xmm1, xmm1
lea rcx, str.Head
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], al
movss dword [0x18001682c], xmm1
call fcn.1800038b0
lea rdx, [0x1800167cd]
lea rcx, str.Neck
call fcn.1800038b0
lea rdx, [0x1800167ce]
lea rcx, str.Torso
call fcn.1800038b0
lea rdx, [0x1800167cc]
lea rcx, str.Pelvis
call fcn.1800038b0
jmp 0x180004cdd
cmp eax, 2
jne 0x1800045d1
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x1800167f5]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable_Player_ESP
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
cmp byte [0x1800167f5], 0
je 0x180004cdd
lea rdx, [0x1800167f3]
lea rcx, str.2D_Box
call fcn.1800038b0
lea rdx, [0x1800167f6]
lea rcx, str.Cornered_Box
call fcn.1800038b0
cmp byte [0x18001681f], 0
jne 0x18000454a
lea rdx, [0x1800167f1]
lea rcx, str.Skeleton
call fcn.1800038b0
lea rdx, [0x1800167f8]
lea rcx, str.Distance
call fcn.1800038b0
lea rdx, [0x1800167f4]
lea rcx, str.Snapline
call fcn.1800038b0
lea rdx, [0x1800167f9]
lea rcx, str.Current_Weapon
call fcn.1800038b0
lea rdx, [0x1800167f7]
lea rcx, str.Username
call fcn.1800038b0
lea rdx, [0x1800167f2]
lea rcx, str.Eyes
call fcn.1800038b0
movss xmm3, dword [0x180013dc4]
lea rdx, [0x18001606c]
movss xmm2, dword [0x180013d8c]
lea rcx, str.Render_Distance
call fcn.180003ba0
jmp 0x180004cdd
movaps xmmword [rsp + 0xa0], xmm7
cmp eax, 3
jne 0x180004701
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x180016826]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable_Container_ESP
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
cmp byte [0x180016826], 0
je 0x180004cd5
lea rdx, [0x180016825]
lea rcx, str.Ignore_Opened
call fcn.1800038b0
lea rdx, [0x180016827]
lea rcx, str.Display_Distance
call fcn.1800038b0
lea rdx, [0x180016823]
lea rcx, str.Lines
call fcn.1800038b0
lea rdx, [0x180016820]
lea rcx, [0x180013494]
call fcn.1800038b0
lea rdx, [0x180016828]
lea rcx, str.Ammo_Box
call fcn.1800038b0
lea rdx, [0x180016822]
lea rcx, str.Coolers__Food
call fcn.1800038b0
lea rdx, [0x180016821]
lea rcx, [0x1800134c0]
call fcn.1800038b0
lea rdx, [0x180016824]
lea rcx, str.Others
call fcn.1800038b0
movss xmm7, dword [0x180013dbc]
lea rdx, [0x180016098]
movss xmm6, dword [0x180013d8c]
lea rcx, str.Render_Distance
movaps xmm3, xmm7
movaps xmm2, xmm6
call fcn.180003ba0
movaps xmm3, xmm7
lea rdx, [0x18001609c]
movaps xmm2, xmm6
lea rcx, str.Line_Offset
jmp 0x180004cd0
cmp eax, 4
jne 0x180004816
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x18001680f]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable_Pickup_ESP
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
cmp byte [0x18001680f], 0
je 0x180004cd5
lea rdx, [0x180016810]
lea rcx, str.Display_Distance
call fcn.1800038b0
lea rdx, [0x18001680d]
lea rcx, str.Common
call fcn.1800038b0
lea rdx, [0x180016809]
lea rcx, str.Uncommon
call fcn.1800038b0
lea rdx, [0x180016808]
lea rcx, str.Rare
call fcn.1800038b0
lea rdx, [0x18001680b]
lea rcx, str.Epic
call fcn.1800038b0
lea rdx, [0x18001680e]
lea rcx, str.Legendary
call fcn.1800038b0
lea rdx, [0x18001680a]
lea rcx, str.Mythic
call fcn.1800038b0
movss xmm7, dword [0x180013dbc]
lea rdx, [0x180016080]
movss xmm6, dword [0x180013d8c]
lea rcx, str.Render_Distance
movaps xmm3, xmm7
movaps xmm2, xmm6
call fcn.180003ba0
movaps xmm3, xmm7
lea rdx, [0x180016084]
movaps xmm2, xmm6
lea rcx, str.Line_Offset
jmp 0x180004cd0
cmp eax, 5
jne 0x1800048ab
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x18001681d]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable_Weakspot_ESP
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
cmp byte [0x18001681d], 0
je 0x180004cd5
lea rdx, [0x18001681b]
lea rcx, str.Weakspot_Aimbot
call fcn.1800038b0
cmp byte [0x1800167cb], 0
je 0x180004893
lea rdx, [0x180016818]
lea rcx, str.pSilent
call fcn.1800038b0
lea rdx, [0x18001681c]
lea rcx, str.Target_Line
call fcn.1800038b0
jmp 0x180004cd5
cmp eax, 6
jne 0x1800049db
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x180016814]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable_Radar
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
cmp byte [0x180016814], 0
je 0x180004cd5
lea rdx, [0x180016815]
lea rcx, str.Show_Line_Of_Sight
call fcn.1800038b0
lea rdx, [0x180016816]
lea rcx, str.Circle
call fcn.1800038b0
lea rdx, [0x180016811]
lea rcx, str.Players
call fcn.1800038b0
lea rdx, [0x180016817]
mov rcx, rsi
call fcn.1800038b0
lea rdx, [0x180016813]
mov rcx, rbp
call fcn.1800038b0
lea rdx, [0x180016812]
lea rcx, str.Vehicles
call fcn.1800038b0
movss xmm3, dword [0x180013dbc]
lea rdx, [0x180016088]
movss xmm2, dword [0x180013d8c]
lea rcx, str.Range_Distance
call fcn.180003ba0
movss xmm6, dword [0x180013dc0]
lea rdx, [0x180016094]
movaps xmm3, xmm6
lea rcx, str.Position_X
xorps xmm2, xmm2
call fcn.180003ba0
movaps xmm3, xmm6
lea rdx, [0x18001608c]
xorps xmm2, xmm2
lea rcx, str.Position_Y
call fcn.180003ba0
movss xmm3, dword [0x180013db4]
lea rdx, [0x180016090]
lea rcx, str.Size
jmp 0x180004ccd
cmp eax, 7
jne 0x180004afa
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x180016800]
cvtpd2ps xmm1, xmm1
lea rcx, str.No_Recoil
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
lea rdx, [0x180016802]
lea rcx, str.Double_Pump
call fcn.1800038b0
lea rdx, [0x180016807]
lea rcx, str.Player_Fly
call fcn.1800038b0
lea rdx, [0x180016803]
lea rcx, str.FOV_Changer
call fcn.1800038b0
lea rdx, [0x180016806]
lea rcx, str.Bullet_TP
call fcn.1800038b0
lea rdx, [0x180016801]
lea rcx, str.CarFly
call fcn.1800038b0
cmp byte [0x180016807], 0
movss xmm6, dword [0x180013c64]
movss xmm7, dword [0x180013da8]
je 0x180004aad
movaps xmm3, xmm7
lea rdx, [0x180016078]
movaps xmm2, xmm6
lea rcx, str.Player_Fly_Speed
call fcn.180003ba0
cmp byte [0x180016801], 0
je 0x180004acf
movaps xmm3, xmm7
lea rdx, [0x180016074]
movaps xmm2, xmm6
lea rcx, str.Vehicle_Fly_Speed
call fcn.180003ba0
cmp byte [0x180016803], 0
je 0x180004cd5
movss xmm3, dword [0x180013db0]
lea rdx, [0x18001607c]
movaps xmm2, xmm6
lea rcx, str.Custom_FOV
jmp 0x180004cd0
cmp eax, 8
jne 0x180004bc2
movsd xmm1, qword [0x18001a2a8]
lea rdx, [0x1800167fd]
cvtpd2ps xmm1, xmm1
lea rcx, str.Enable_World_ESP
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800038b0
cmp byte [0x1800167fd], 0
je 0x180004cd5
lea rdx, [0x1800167ff]
lea rcx, str.Display_Distance
call fcn.1800038b0
lea rdx, [0x1800167fb]
lea rcx, str.Vehicles
call fcn.1800038b0
lea rdx, [0x1800167fc]
lea rcx, str.Rifts
call fcn.1800038b0
lea rdx, [0x1800167fa]
lea rcx, str.Flags
call fcn.1800038b0
lea rdx, [0x1800167fe]
lea rcx, str.Traps
call fcn.1800038b0
movss xmm3, dword [0x180013dbc]
lea rdx, [0x180016070]
lea rcx, str.Render_Distance
jmp 0x180004ccd
cmp eax, 9
jne 0x180004cd5
movsd xmm1, qword [0x18001a2a8]
lea rcx, str.Made_By_Payson
cvtpd2ps xmm1, xmm1
mov dword [0x180016940], 0x43020000
mov byte [0x180016829], 1
movss dword [0x18001682c], xmm1
call fcn.1800034a0
lea rcx, str.SubZeroFN_Private___discord.gg_subz
call fcn.1800034a0
lea rdx, [0x18001681e]
lea rcx, str.Outlined_Text
call fcn.1800038b0
lea rdx, [0x1800167c9]
lea rcx, str.Outlines
call fcn.1800038b0
cmp byte [0x1800167c9], 0
movss xmm6, dword [0x180013d98]
je 0x180004c8a
movaps xmm3, xmm6
lea rdx, [0x18001604c]
xorps xmm2, xmm2
lea rcx, str.Outlines
call fcn.180003ba0
movaps xmm3, xmm6
lea rdx, [0x180016054]
xorps xmm2, xmm2
lea rcx, str.Skeleton_Outline
call fcn.180003ba0
movaps xmm3, xmm6
lea rdx, [0x180016048]
xorps xmm2, xmm2
lea rcx, str.Box_Outline
call fcn.180003ba0
movaps xmm3, xmm6
lea rdx, [0x180016050]
xorps xmm2, xmm2
lea rcx, str.Line_Thickness
call fcn.180003ba0
movaps xmm3, xmm6
lea rdx, [0x180016058]
xorps xmm2, xmm2
lea rcx, str.Skeleton_Thickness
call fcn.180003ba0
movaps xmm3, xmm6
lea rdx, [0x18001605c]
lea rcx, str.Box_Thickness
xorps xmm2, xmm2
call fcn.180003ba0
movaps xmm7, xmmword [rsp + 0xa0]
movaps xmm6, xmmword [rsp + 0xb0]
mov rsi, qword [rsp + 0xe0]
mov rbp, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1800106a0
add rsp, 0xc8
ret