Function at 0x1800e9da0
Capabilities:
Allocate or change rwx memory

Disassembly:
push rbp
push rdi
sub rsp, 0x9c8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x1aa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x18013ec00]
xor rax, rbp
mov qword [rbp + 0x998], rax
lea rcx, [0x18014f32b]
call fcn.1800eb6d0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x988], rax
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x990], rax
mov r9, qword [rbp + 0x988]
lea r8, [0x18012ad78]
lea rdx, str.CONIN_
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.ucrtbased.dll_freopen_s]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x988], rax
mov ecx, 1
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x990], rax
mov r9, qword [rbp + 0x988]
lea r8, [0x18012ad84]
lea rdx, str.CONOUT_
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.ucrtbased.dll_freopen_s]
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x988], rax
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov qword [rbp + 0x990], rax
mov r9, qword [rbp + 0x988]
lea r8, [0x18012ad84]
lea rdx, str.CONERR_
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.ucrtbased.dll_freopen_s]
movss xmm0, dword [0x18012b09c]
movss dword [rbp + 4], xmm0
movss xmm0, dword [0x18012b0a0]
movss dword [rbp + 0x24], xmm0
lea rax, str.client.dll
mov qword [rbp + 0x48], rax
lea rax, str.engine2.dll
mov qword [rbp + 0x68], rax
lea rax, str.particles.dll
mov qword [rbp + 0x88], rax
lea rax, str.BA_________F3_0F_11___________48_8D_0D_________E8_________48_85_C0_74
mov qword [rbp + 0xa8], rax
lea rax, str.48_8B_05_________48_8B_40_08_F3_0F_10_00_48_83_C4_38_C3_48_89
mov qword [rbp + 0xc8], rax
lea rax, str.48_8B_05_________48_8B_40_08_83_38_00_0F_85_________48_8B_03
mov qword [rbp + 0xe8], rax
lea rax, str.48_8B_05_________48_8B_40_08_80_38_00_74_04_B0_01_EB_02_32_C0_88
mov qword [rbp + 0x108], rax
lea rax, str.75___c6_44_24_____eb___48_8d_9e
mov qword [rbp + 0x128], rax
lea rax, str.41_____3A_D0_0F_84_________4D_______4D_______84_D2_74_3F
mov qword [rbp + 0x148], rax
lea rax, str.74_06_89_87_________44_38_B7
mov qword [rbp + 0x168], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rbp + 0x188], rax
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x1c8]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
cmp qword [rbp + 0x1a8], 0
je 0x1800e9fba
mov r9d, 0x18
lea r8, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x1a8]
mov rcx, qword [rbp + 0x188]
call sub.KERNEL32.dll_K32GetModuleInformation
test eax, eax
jne 0x1800e9fba
lea rcx, str.client_module_info_n
call fcn.1800eaf30
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x1f8], rax
lea rax, [rbp + 0x218]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
cmp qword [rbp + 0x1f8], 0
je 0x1800ea018
mov r9d, 0x18
lea r8, [rbp + 0x218]
mov rdx, qword [rbp + 0x1f8]
mov rcx, qword [rbp + 0x188]
call sub.KERNEL32.dll_K32GetModuleInformation
test eax, eax
jne 0x1800ea018
lea rcx, str.engine2_module_info_n
call fcn.1800eaf30
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x248], rax
lea rax, [rbp + 0x268]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
cmp qword [rbp + 0x248], 0
je 0x1800ea079
mov r9d, 0x18
lea r8, [rbp + 0x268]
mov rdx, qword [rbp + 0x248]
mov rcx, qword [rbp + 0x188]
call sub.KERNEL32.dll_K32GetModuleInformation
test eax, eax
jne 0x1800ea079
lea rcx, str.particles_module_info_n
call fcn.1800eaf30
mov rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x298], rax
mov eax, dword [rbp + 0x1d0]
mov rcx, qword [rbp + 0x298]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x2b8], rax
mov rax, qword [rbp + 0x218]
mov qword [rbp + 0x2d8], rax
mov eax, dword [rbp + 0x220]
mov rcx, qword [rbp + 0x2d8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x2f8], rax
mov rax, qword [rbp + 0x268]
mov qword [rbp + 0x318], rax
mov eax, dword [rbp + 0x270]
mov rcx, qword [rbp + 0x318]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x338], rax
mov r8, qword [rbp + 0x168]
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x298]
call fcn.1800e95b0
mov qword [rbp + 0x358], rax
cmp qword [rbp + 0x358], 0
jne 0x1800ea12a
lea rcx, str.check_signa_VBE_OFF_n
call fcn.1800eaf30
jmp 0x1800ea1a8
mov r8d, 0x30
lea rdx, [rbp + 0x378]
mov rcx, qword [rbp + 0x358]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
lea r9, [rbp + 0x39c]
mov r8d, 0x40
mov rdx, qword [rbp + 0x390]
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [rbp + 0x358]
movsx eax, byte [rax]
inc eax
mov rcx, qword [rbp + 0x358]
mov byte [rcx], al
lea r9, [rbp + 0x39c]
mov r8d, dword [rbp + 0x39c]
mov rdx, qword [rbp + 0x390]
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rcx, str.VBE_ON_n
call fcn.1800eaf30
mov r8, qword [rbp + 0x148]
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x318]
call fcn.1800e95b0
mov qword [rbp + 0x3c8], rax
cmp qword [rbp + 0x3c8], 0
jne 0x1800ea1e4
lea rcx, str.check_signa_PARTICLES_OFF_n
call fcn.1800eaf30
jmp 0x1800ea278
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x3e8], rax
lea r9, [rbp + 0x404]
mov r8d, 0x40
mov edx, 3
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, 3
mov rdx, qword [rbp + 0x3e8]
lea rcx, [rbp + 0x424]
call sub.VCRUNTIME140D.dll_memcpy
mov byte [rbp + 0x444], 0xb2
mov byte [rbp + 0x445], 1
mov byte [rbp + 0x446], 0x90
mov r8d, 3
lea rdx, [rbp + 0x444]
mov rcx, qword [rbp + 0x3e8]
call sub.VCRUNTIME140D.dll_memcpy
lea r9, [rbp + 0x404]
mov r8d, dword [rbp + 0x404]
mov edx, 3
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8, qword [rbp + 0x128]
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x298]
call fcn.1800e95b0
mov qword [rbp + 0x468], rax
cmp qword [rbp + 0x468], 0
jne 0x1800ea2b1
lea rcx, str.check_signa_MANA_OFF_n
call fcn.1800eaf30
jmp 0x1800ea32f
mov r8d, 0x30
lea rdx, [rbp + 0x488]
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
lea r9, [rbp + 0x4ac]
mov r8d, 0x40
mov rdx, qword [rbp + 0x4a0]
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [rbp + 0x468]
movsx eax, byte [rax]
inc eax
mov rcx, qword [rbp + 0x468]
mov byte [rcx], al
lea r9, [rbp + 0x4ac]
mov r8d, dword [rbp + 0x4ac]
mov rdx, qword [rbp + 0x4a0]
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rcx, str.MANA_ON_n
call fcn.1800eaf30
mov r8, qword [rbp + 0xa8]
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x298]
call fcn.1800e95b0
mov qword [rbp + 0x4d8], rax
cmp qword [rbp + 0x4d8], 0
jne 0x1800ea368
lea rcx, str.check_signa_CAMERA_OFF_n
call fcn.1800eaf30
jmp 0x1800ea39d
mov rax, qword [rbp + 0x4d8]
mov eax, dword [rax + 9]
mov dword [rbp + 0x4f4], eax
movsxd rax, dword [rbp + 0x4f4]
mov rcx, qword [rbp + 0x4d8]
movss xmm0, dword [rbp + 4]
movss dword [rcx + rax + 0xd], xmm0
lea rcx, str.CAMERA_ON_n
call fcn.1800eaf30
mov r8, qword [rbp + 0xc8]
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x298]
call fcn.1800e95b0
mov qword [rbp + 0x518], rax
cmp qword [rbp + 0x518], 0
jne 0x1800ea3d6
lea rcx, str.check_signa_FARZ_OFF_n
call fcn.1800eaf30
jmp 0x1800ea42f
mov rax, qword [rbp + 0x518]
mov eax, dword [rax + 3]
mov dword [rbp + 0x534], eax
movsxd rax, dword [rbp + 0x534]
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx + rax + 7]
mov qword [rbp + 0x558], rax
mov rax, qword [rbp + 0x558]
mov rax, qword [rax + 8]
mov qword [rbp + 0x578], rax
mov rax, qword [rbp + 0x578]
movss xmm0, dword [rbp + 0x24]
movss dword [rax - 8], xmm0
lea rcx, str.FARZ_ON_n
call fcn.1800eaf30
mov r8, qword [rbp + 0xe8]
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x298]
call fcn.1800e95b0
mov qword [rbp + 0x598], rax
cmp qword [rbp + 0x598], 0
jne 0x1800ea468
lea rcx, str.check_signa_FOW_OFF_n
call fcn.1800eaf30
jmp 0x1800ea4bb
mov rax, qword [rbp + 0x598]
mov eax, dword [rax + 3]
mov dword [rbp + 0x5b4], eax
movsxd rax, dword [rbp + 0x5b4]
mov rcx, qword [rbp + 0x598]
mov rax, qword [rcx + rax + 7]
mov qword [rbp + 0x5d8], rax
mov rax, qword [rbp + 0x5d8]
mov rax, qword [rax + 8]
mov qword [rbp + 0x5f8], rax
mov rax, qword [rbp + 0x5f8]
mov byte [rax - 8], 1
lea rcx, str.FOW_ON_n
call fcn.1800eaf30
mov r8, qword [rbp + 0x108]
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp + 0x2d8]
call fcn.1800e95b0
mov qword [rbp + 0x618], rax
cmp qword [rbp + 0x618], 0
jne 0x1800ea4f4
lea rcx, str.check_signa_FOG_OFF_n
call fcn.1800eaf30
jmp 0x1800ea547
mov rax, qword [rbp + 0x618]
mov eax, dword [rax + 3]
mov dword [rbp + 0x634], eax
movsxd rax, dword [rbp + 0x634]
mov rcx, qword [rbp + 0x618]
mov rax, qword [rcx + rax + 7]
mov qword [rbp + 0x658], rax
mov rax, qword [rbp + 0x658]
mov rax, qword [rax + 8]
mov qword [rbp + 0x678], rax
mov rax, qword [rbp + 0x678]
mov byte [rax - 8], 0
lea rcx, str.FOG_ON_n
call fcn.1800eaf30
lea rcx, str.Inject_ON_n
call fcn.1800eaf30
lea rcx, [rbp - 0x20]
lea rdx, [0x18012a750]
call fcn.1800eb4a0
mov rcx, qword [rbp + 0x998]
xor rcx, rbp
call fcn.1800eb970
lea rsp, [rbp + 0x9a8]
pop rdi
pop rbp
ret