Function at 0x1800ce6b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1e0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1802953c0]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov ecx, dword [0x18033b214]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r12d, r12d
movabs rsi, 0xd80958fc74e988a6
bt ax, 0xf
jae 0x1800ce9b6
mov dword [rbp - 0x40], 0x99b507ea
mov dword [rbp - 0x3c], 0x678b81b1
mov dword [rbp - 0x38], 0x4e875f73
mov dword [rbp - 0x34], 0x958a4a8f
mov dword [rbp - 0x30], 0x440e4788
mov dword [rbp - 0x2c], 0x84bd7bfd
mov dword [rbp - 0x28], 0x1b06d571
mov dword [rbp - 0x24], 0x5ef9fec4
mov dword [rbp - 0x20], 0x22d8fe39
mov dword [rbp - 0x1c], 0x99aeeb3b
mov dword [rbp - 0x18], 0x13532244
mov dword [rbp - 0x14], 0x2be6766b
mov dword [rbp - 0x10], 0xefe7e2df
mov dword [rbp - 0xc], 0xbfefff6d
mov dword [rbp - 8], 0x83bf0278
mov dword [rbp - 4], 0xaf113f99
mov dword [rbp], 0x9d07f764
mov dword [rbp + 4], 0x7fd62962
mov dword [rbp + 8], 0x1d073a89
mov dword [rbp + 0xc], 0x7846a318
mov dword [rbp + 0x10], 0xe284c527
mov dword [rbp + 0x14], 0x9d61e50f
mov dword [rbp + 0x18], 0x3656c8c1
mov dword [rbp + 0x1c], 0x5fc3c11
mov dword [rbp + 0x20], 0xc472fe2
mov dword [rbp + 0x24], 0x33058e22
mov dword [rbp + 0x28], 0xa284510b
mov dword [rbp + 0x2c], 0x4dd2dc56
mov dword [rbp + 0x30], 0xb1ca77b1
mov dword [rbp + 0x34], 0x687652ce
mov dword [rbp + 0x38], 0x42bf8a85
mov dword [rbp + 0x3c], 0x93e220bd
mov dword [rbp + 0x40], 0x2c3731d9
mov dword [rbp + 0x44], 0xfdbc8a50
mov dword [rbp + 0x48], 0x24b17070
mov dword [rbp + 0x4c], 0x60ec506
mov dword [rbp + 0x50], 0x34a67b97
mov dword [rbp + 0x54], 0xfdbadced
mov dword [rbp + 0x58], 0x23c9f95c
mov dword [rbp + 0x5c], 0x497facc3
mov dword [rbp + 0x60], 0xf9e6aa4b
mov dword [rbp + 0x64], 0x61012683
mov dword [rbp + 0x68], 0xc0a3098d
mov dword [rbp + 0x6c], 0xd205520e
mov dword [rbp + 0x70], 0xbfd21232
mov dword [rbp + 0x74], 0x7f229f94
mov dword [rbp + 0x78], 0x92a27487
mov dword [rbp + 0x7c], 0x83839c4
mov dword [rbp + 0x80], 0x7f7497e5
mov dword [rbp + 0x84], 0xa89cb99e
mov dword [rbp + 0x88], 0x3aabbbaa
mov dword [rbp + 0x8c], 0xc734385a
mov dword [rbp + 0x90], 0x787f0bb
mov dword [rbp + 0x94], 0x47757124
mov dword [rbp + 0x98], 0xd04c944d
mov dword [rbp + 0x9c], 0xaf3696a1
mov dword [rbp + 0xa0], 0x476bf155
mov dword [rbp + 0xa4], 0xb62d1f67
mov dword [rbp + 0xa8], 0x2b5ef5ec
mov dword [rbp + 0xac], 0xba536372
mov dword [rbp + 0xb0], 0x917f6c8c
mov dword [rbp + 0xb4], 0xa400593b
mov dword [rbp + 0xb8], 0x61ef6d49
mov dword [rbp + 0xbc], 0xfd40f185
mov ebx, r12d
lea rdi, [rbp - 0x40]
movabs r14, 0xb282dc6ebd803c75
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rsi
call fcn.1800ce2a0
mov ecx, dword [rax]
mov edx, dword [rdi]
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], r14
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], edx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed38], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], 0x270f
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed40], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed48], rax
mov dword [0x1802bec58], 4
call fcn.1800ce2a0
inc ebx
lea rdi, [rdi + 4]
cmp ebx, 0x40
jb 0x1800ce910
mov ecx, dword [0x18033b208]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800ce9da
call fcn.180083ca0
lea rcx, str.g_Car_Maxed
call fcn.1800b3a70
mov ecx, dword [0x18033b200]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xorps xmm6, xmm6
bt ax, 0xf
jae 0x1800ceb6c
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
movabs rax, 0x4f8644af03d0e0d6
mov qword [0x18033d960], rax
call fcn.1800ce2a0
mov ecx, dword [rax]
mov dword [0x1802bec68], r12d
movabs rax, 0x50fac3a3e030a6e1
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov ecx, dword [rax]
mov dword [0x1802bec68], r12d
movabs rax, 0x6094ad011a2ea87d
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov ebx, dword [rax]
mov dword [0x1802bec68], r12d
movabs rax, 0x115722b1b9c14c1c
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov dword [0x1802bec68], r12d
movabs rax, 0x953da1e1b12c0491
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov dword [0x1802bec68], r12d
movabs rax, 0x79d3b596fe44ee8b
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], r12d
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed38], rax
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
lea rcx, str.g_Car_Fixed
call fcn.1800b3a70
mov ecx, dword [0x18033b1dc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs rdi, 0x9a9112a0fe9a4713
bt ax, 0xf
jae 0x1800ced48
cmp byte [0x18033b14b], r12b
je 0x1800cebbf
call fcn.1801e2b10
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
movabs rax, 0xbd6e84632dd4cb3f
mov qword [0x18033d960], rax
call fcn.1800ce2a0
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rsi
call fcn.1800ce2a0
mov ebx, dword [rax]
mov dword [0x1802bec68], r12d
movabs rax, 0x997abd671d25ca0b
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [0x1802bed38], r12
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
cmp dword [rax], r12d
je 0x1800ced12
mov dword [0x1802bec68], r12d
movabs rax, 0x1f4ed342acefe62d
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [0x1802bed38], r12
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rsi
call fcn.1800ce2a0
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x48], r12d
movss xmm0, dword [0x18026c420]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss xmm0, dword [0x18026e5b4]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
mov edx, dword [rax]
lea rcx, str.scr_clown_appears
call fcn.1801e2940
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rdi
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [0x1802bed38], r12
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
mov ecx, dword [rax]
jmp 0x1800ced14
mov ecx, ebx
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
movss xmm3, dword [0x18026cd34]
movss xmm2, dword [0x18026f4b0]
movss xmm1, dword [0x18026f868]
call fcn.1800afe40
mov ecx, dword [0x18033b1e4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cee72
lea rcx, str.bruiser3
call fcn.1800aa030
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rsi
call fcn.1800ce2a0
mov ecx, dword [rax]
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rdi
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [0x1802bed38], r12
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
mov dword [0x1802bec58], r12d
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rsi
call fcn.1800ce2a0
mov ecx, dword [rax]
mov dword [0x1802bec68], r12d
mov qword [0x18033d960], rdi
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
mov qword [0x1802bed38], r12
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
mov ecx, dword [rax]
mov dword [0x1802bec68], r12d
movabs rax, 0x95a88f0b409cda47
mov qword [0x18033d960], rax
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1802bed30], rax
lea rax, str.Explosive
mov qword [0x1802bed38], rax
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
call fcn.180083ca0
lea rcx, str.wThe_bruiser_3_was_swapped_for_the_Elegy.
call fcn.1800b3a70
mov ecx, dword [0x18033b1f0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cee8a
call fcn.1800b3580
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c92c]
sub rax, rcx
cmp rax, 0x64
jb 0x1800ceee6
mov ecx, dword [0x18033b21c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800ceeda
cmp byte [0x18033370b], r12b
sete al
mov byte [0x18033370b], al
test al, al
lea rcx, str.g_Infinity_Ammo_On
jne 0x1800ceed5
lea rcx, str.r_Infinity_Ammo_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c92c], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c948]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cef42
mov ecx, dword [0x18033b218]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cef36
cmp byte [0x180333270], r12b
sete al
mov byte [0x180333270], al
test al, al
lea rcx, str.g_Explosive_Ammo_On
jne 0x1800cef31
lea rcx, str.r_Explosive_Ammo_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c948], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c94c]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cef9e
mov ecx, dword [0x18033b210]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cef92
cmp byte [0x1803334b6], r12b
sete al
mov byte [0x1803334b6], al
test al, al
lea rcx, str.g_Max_Armor_On
jne 0x1800cef8d
lea rcx, str.r_Max_Armor_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c94c], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c950]
sub rax, rcx
cmp rax, 0x64
jb 0x1800ceffa
mov ecx, dword [0x18033b20c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cefee
cmp byte [0x18033354c], r12b
sete al
mov byte [0x18033354c], al
test al, al
lea rcx, str.g_Max_Health_On
jne 0x1800cefe9
lea rcx, str.r_Max_Health_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c950], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c958]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cf056
mov ecx, dword [0x18033b204]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf04a
cmp byte [0x1803334b5], r12b
sete al
mov byte [0x1803334b5], al
test al, al
lea rcx, str.g_Car_God_Mode_On
jne 0x1800cf045
lea rcx, str.r_Car_God_Mode_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c958], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c964]
sub rax, rcx
cmp rax, 0x96
jb 0x1800cf0b4
mov ecx, dword [0x18033b1ec]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf0a8
cmp byte [0x18033b14a], r12b
sete al
mov byte [0x18033b14a], al
test al, al
lea rcx, str.g_God_Mode_On
jne 0x1800cf0a3
lea rcx, str.r_God_Mode_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c964], eax
mov dword [rsp + 0x60], 8
mov dword [rsp + 0x64], 0x189
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov edx, 2
lea rcx, [rbp - 0x60]
call fcn.1800ac460
mov rsi, qword [rbp - 0x60]
mov rax, qword [rsp + 0x60]
mov qword [rsi], rax
lea r14, [rsi + 8]
mov qword [rbp - 0x58], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
cmp rsi, r14
je 0x1800cf13a
sub r14, rsi
mov rdi, r14
sar rdi, 2
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.1800ac460
mov rbx, qword [rsp + 0x68]
mov r8, r14
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rbx, [rbx + rdi*4]
mov qword [rsp + 0x70], rbx
jmp 0x1800cf13f
mov rbx, qword [rsp + 0x70]
lea rax, [rsp + 0x68]
mov qword [rbp - 0x68], rax
movzx r15d, byte [0x18033b14a]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov r14, qword [rsp + 0x68]
cmp r14, rbx
je 0x1800cf199
mov rdi, rbx
sub rdi, r14
sar rdi, 2
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.1800ac460
sub rbx, r14
mov r8, rbx
mov rdx, r14
mov rbx, qword [rbp - 0x80]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi*4]
mov qword [rbp - 0x78], rax
lea rdx, [rbp - 0x80]
mov rcx, qword [0x18033d8b8]
call fcn.1800bd630
test rax, rax
jne 0x1800cf3f9
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1800cf1fa
mov rax, qword [rsp + 0x78]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800cf1f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800cf447
call fcn.1801e6b10
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c968]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cf256
mov ecx, dword [0x18033b1e0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf24a
cmp byte [0x180333705], 0
sete al
mov byte [0x180333705], al
test al, al
lea rcx, str.g_Super_Jump_On
jne 0x1800cf245
lea rcx, str.r_Super_Jump_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c968], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c954]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cf2b2
mov ecx, dword [0x18033b1f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf2a6
cmp byte [0x18033348d], 0
sete al
mov byte [0x18033348d], al
test al, al
lea rcx, str.g_Free_Cam_On
jne 0x1800cf2a1
lea rcx, str.r_Free_Cam_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c954], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c95c]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cf30e
mov ecx, dword [0x18033b1fc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf302
cmp byte [0x180333668], 0
sete al
mov byte [0x180333668], al
test al, al
lea rcx, str.g_No_Clip_On
jne 0x1800cf2fd
lea rcx, str.r_No_Clip_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c95c], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c960]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cf36a
mov ecx, dword [0x18033b1f8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf35e
cmp byte [0x180333713], 0
sete al
mov byte [0x180333713], al
test al, al
lea rcx, str.g_Fly_Car_On
jne 0x1800cf359
lea rcx, str.rFly_Car_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c960], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [0x18033c96c]
sub rax, rcx
cmp rax, 0x64
jb 0x1800cf3c6
mov ecx, dword [0x18033b1e8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1800cf3ba
cmp byte [0x18033371e], 0
sete al
mov byte [0x18033371e], al
test al, al
lea rcx, str.g_Never_Wanted_On
jne 0x1800cf3b5
lea rcx, str.r_Never_Wanted_Off
call fcn.1800b3a70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x18033c96c], eax
mov rdx, qword [rbp - 0x50]
sub rdx, rsi
and rdx, 0xfffffffffffffffc
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800cf44e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800cf44e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov byte [rax], r15b
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1800cf1fa
mov rax, qword [rsp + 0x78]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800cf1f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800cf1f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rsi
call fcn.1801e6b10
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.1801e6af0
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret