Function at 0x1800364e0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x180052040]
xor rax, rsp
mov qword [rbp - 0x18], rax
mov rax, qword [0x180055c00]
mov rax, qword [rax + 0x48a0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18000cf30
mov r14, rax
xor r8d, r8d
xor edx, edx
mov ecx, 0x208
call fcn.180015810
test al, al
je 0x1800365bf
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [0x180000000]
lea r8, [0x180035f40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800365bf
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12d, 1
mov r13d, dword [0x180055bcc]
mov rbx, qword gs:[0x58]
mov edi, 4
movss xmm12, dword [0x18004af80]
xorps xmm11, xmm11
movss xmm14, dword [0x18004af7c]
movss xmm13, dword [0x18004afb4]
movss xmm15, dword [0x18004afc0]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x180055cf0]
test rax, rax
je 0x180036d6d
mov edx, r12d
mov rcx, qword [0x180055cb8]
call rax
mov r15, rax
test rax, rax
je 0x180036d6d
mov rsi, qword [rbx + r13*8]
mov ecx, dword [rdi + rsi]
cmp dword [0x180055d58], ecx
jle 0x18003668d
lea rcx, [0x180055d58]
call fcn.18003a98c
cmp dword [0x180055d58], 0xffffffff
jne 0x18003668d
mov r9d, 0xa8a45978
lea r8, str.m_pEntity
mov edx, 0xb6dd442e
lea rcx, str.CEntityInstance
call fcn.180039310
mov qword [0x180055d48], rax
lea rcx, [0x180055d58]
call fcn.18003a920
mov rax, qword [0x180055d48]
mov rbx, qword [r15 + rax]
test rbx, rbx
je 0x180036d5f
mov eax, dword [rdi + rsi]
cmp dword [0x180055d40], eax
jle 0x1800366f2
lea rcx, [0x180055d40]
call fcn.18003a98c
cmp dword [0x180055d40], 0xffffffff
jne 0x1800366f2
mov r9d, 0xbfc1f33f
lea r8, str.m_designerName
mov edx, 0xae42345f
lea rcx, str.CEntityIdentity
call fcn.180039310
mov qword [0x180055d28], rax
lea rcx, [0x180055d40]
call fcn.18003a920
mov rax, qword [0x180055d28]
mov rcx, qword [rbx + rax]
test rcx, rcx
je 0x180036d5f
lea rdx, str.cs_player_controller
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180036d5f
mov eax, dword [rdi + rsi]
cmp dword [0x180055ce8], eax
jle 0x18003676b
lea rcx, [0x180055ce8]
call fcn.18003a98c
cmp dword [0x180055ce8], 0xffffffff
jne 0x18003676b
mov r9d, 0x3db3c8d0
lea r8, str.m_bPawnIsAlive
mov edx, 0x28ecd7a1
lea rcx, str.CCSPlayerController
call fcn.180039310
mov qword [0x180055cb0], rax
lea rcx, [0x180055ce8]
call fcn.18003a920
mov rax, qword [0x180055cb0]
cmp byte [r15 + rax], 0
je 0x180036d5f
mov eax, dword [rdi + rsi]
cmp dword [0x180055ce0], eax
jle 0x1800367ce
lea rcx, [0x180055ce0]
call fcn.18003a98c
cmp dword [0x180055ce0], 0xffffffff
jne 0x1800367ce
mov r9d, 0x7c628c1d
lea r8, str.m_hPawn
mov edx, 0x3979ff6e
lea rcx, str.CBasePlayerController
call fcn.180039310
mov qword [0x180055cc0], rax
lea rcx, [0x180055ce0]
call fcn.18003a920
mov rax, qword [0x180055cc0]
mov edx, dword [r15 + rax]
and edx, 0x7fff
mov rax, qword [0x180055cf0]
test rax, rax
je 0x180036d5f
mov rcx, qword [0x180055cb8]
call rax
test rax, rax
je 0x180036d5f
lea rdx, [rbp - 0x28]
mov rcx, rax
call fcn.180038b80
test al, al
je 0x180036d5f
movss xmm10, dword [rbp - 0x1c]
movss xmm6, dword [rbp - 0x20]
movss xmm9, dword [rbp - 0x24]
movss xmm8, dword [rbp - 0x28]
cmp byte [0x180055d79], 0
je 0x1800369b6
movaps xmm1, xmm10
movaps xmm0, xmm6
movaps xmm2, xmm9
mov dword [rsp + 0x20], 0
movaps xmm3, xmm11
mov rcx, r14
addss xmm2, xmm12
test byte [r14 + 0x30], 1
je 0x180036896
subss xmm1, xmm12
subss xmm0, xmm12
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm1
movaps xmm0, xmm8
addss xmm0, xmm12
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x6c], xmm2
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
jmp 0x1800368cb
subss xmm1, xmm14
subss xmm0, xmm14
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
movaps xmm0, xmm8
addss xmm0, xmm12
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm2
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x78]
call fcn.180029e60
movss dword [rsp + 0x28], xmm13
mov dword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, dword [r14 + 0x78]
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.180027fd0
mov dword [r14 + 0x78], 0
movaps xmm1, xmm10
addss xmm1, xmm13
movaps xmm0, xmm6
addss xmm0, xmm13
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
movaps xmm2, xmm9
subss xmm2, xmm13
movaps xmm0, xmm8
subss xmm0, xmm13
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm2
movss dword [rsp + 0x30], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff000000
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x78]
mov rcx, r14
call fcn.18002a3f0
movaps xmm1, xmm10
subss xmm1, xmm13
movaps xmm0, xmm6
subss xmm0, xmm13
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm1
movaps xmm2, xmm9
addss xmm2, xmm13
movaps xmm0, xmm8
addss xmm0, xmm13
movss dword [rbp - 0x68], xmm0
movss dword [rbp - 0x64], xmm2
movss dword [rsp + 0x30], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff000000
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x68]
mov rcx, r14
call fcn.18002a3f0
cmp byte [0x180055d78], 0
je 0x180036bc1
mov eax, dword [rdi + rsi]
cmp dword [0x180055ce4], eax
jle 0x180036a14
lea rcx, [0x180055ce4]
call fcn.18003a98c
cmp dword [0x180055ce4], 0xffffffff
jne 0x180036a14
mov r9d, 0xde63b6d1
lea r8, str.m_sSanitizedPlayerName
mov edx, 0x28ecd7a1
lea rcx, str.CCSPlayerController
call fcn.180039310
mov qword [0x180055cd8], rax
lea rcx, [0x180055ce4]
call fcn.18003a920
mov rax, qword [0x180055cd8]
mov rbx, qword [r15 + rax]
test rbx, rbx
je 0x180036bc1
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x180036a30
test rax, rax
je 0x180036bc1
mov rax, qword [0x180055c00]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rbx
movss xmm0, dword [0x18004b04c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x18004b040]
movss xmm2, dword [rax + 0x3c28]
lea rdx, [rsp + 0x58]
mov rcx, qword [rax + 0x3c20]
call fcn.18002deb0
movss xmm0, dword [rsp + 0x58]
addss xmm0, dword [0x18004afac]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x58], xmm1
movaps xmm0, xmm9
subss xmm0, dword [rsp + 0x5c]
subss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm6, xmm8
subss xmm6, xmm1
mulss xmm6, xmm12
cvttss2si eax, xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm2
addss xmm2, xmm13
addss xmm0, xmm13
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm2
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x180036b00
add rcx, rbx
cmp rbx, rcx
je 0x180036b5d
mov rax, qword [r14 + 0x38]
movups xmm0, xmmword [r14 + 0x88]
movups xmmword [rbp - 0x38], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0xff000000
lea r9, [rbp - 0x60]
movss xmm2, dword [rax + 0x10]
mov rdx, r14
mov rcx, qword [rax + 8]
call fcn.18002e0d0
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], 0
jne 0x180036b64
add rcx, rbx
cmp rbx, rcx
je 0x180036bc1
mov rax, qword [r14 + 0x38]
movups xmm0, xmmword [r14 + 0x88]
movups xmmword [rbp - 0x38], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0xffffffff
lea r9, [rbp - 0x58]
movss xmm2, dword [rax + 0x10]
mov rdx, r14
mov rcx, qword [rax + 8]
call fcn.18002e0d0
cmp byte [0x180055d7a], 0
je 0x180036d5f
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax + r13*8]
mov ecx, dword [rcx + rax]
cmp dword [0x180055cc8], ecx
jle 0x180036c31
lea rcx, [0x180055cc8]
call fcn.18003a98c
cmp dword [0x180055cc8], 0xffffffff
jne 0x180036c31
mov r9d, 0x96ca4790
lea r8, str.m_iPawnHealth
mov edx, 0x28ecd7a1
lea rcx, str.CCSPlayerController
call fcn.180039310
mov qword [0x180055cd0], rax
lea rcx, [0x180055cc8]
call fcn.18003a920
mov rax, qword [0x180055cd0]
mov edi, dword [r15 + rax]
cmp edi, 0x64
mov eax, 0x64
cmova edi, eax
movaps xmm7, xmm8
subss xmm7, dword [0x18004afd8]
subss xmm9, xmm11
subss xmm8, xmm15
cmp edi, 0x19
jl 0x180036c81
mov esi, 0xd7
cmp edi, 0x32
mov eax, 0x50
cmovg esi, eax
mov ebx, 0xc8
mov eax, 0xff
cmovg ebx, eax
jmp 0x180036c8b
mov esi, 0xff
mov ebx, 0x32
movaps xmm6, xmm10
subss xmm6, xmm9
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm6, xmm0
divss xmm6, dword [0x18004b00c]
movaps xmm0, xmm8
addss xmm0, xmm11
movss dword [rbp - 0x50], xmm0
movaps xmm0, xmm10
addss xmm0, xmm13
movss dword [rbp - 0x4c], xmm0
movaps xmm1, xmm7
subss xmm1, xmm11
movss dword [rbp - 0x48], xmm1
subss xmm9, xmm13
movss dword [rbp - 0x44], xmm9
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff000000
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
mov rcx, r14
call fcn.18002a500
test edi, edi
jle 0x180036d5f
subss xmm8, xmm13
movss dword [rbp - 0x40], xmm8
movss dword [rbp - 0x3c], xmm10
addss xmm7, xmm13
movss dword [rsp + 0x50], xmm7
maxss xmm6, xmm13
subss xmm10, xmm6
movss dword [rsp + 0x54], xmm10
or ebx, 0xffff0000
shl ebx, 8
or ebx, esi
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm11
mov r9d, ebx
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.18002a500
mov edi, 4
mov rbx, qword gs:[0x58]
inc r12d
cmp r12d, 0x40
jle 0x180036610
xor r8d, r8d
xor edx, edx
mov ecx, 0x209
call fcn.180015810
test al, al
je 0x180036d9f
cmp byte [0x180055548], 0
sete al
mov byte [0x180055548], al
jmp 0x180036da6
movzx eax, byte [0x180055548]
test al, al
je 0x180036e9e
mov rax, qword [0x180055c00]
movss xmm1, dword [rax + 0x10]
mulss xmm1, xmm12
movss xmm0, dword [rax + 0x14]
mulss xmm0, xmm12
or dword [rax + 0x47a0], 1
movss dword [rax + 0x47b0], xmm1
movss dword [rax + 0x47b4], xmm0
mov dword [rax + 0x47b8], 0x3f000000
mov dword [rax + 0x47bc], 0x3f000000
mov dword [rax + 0x47a4], 2
xor edx, edx
mov r8d, 0x40
lea rcx, [0x18004a918]
call fcn.1800125c0
lea rdx, [0x180055d79]
lea rcx, str.bounding_box
call fcn.180035370
lea rdx, [0x180055d78]
lea rcx, str.name
call fcn.180035370
lea rdx, [0x180055d7a]
lea rcx, str.health
call fcn.180035370
mov qword [rsp + 0x50], 0x43000000
lea rdx, [rsp + 0x50]
call fcn.1800345a0
test al, al
je 0x180036e99
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [0x180000000]
lea r8, [0x180035f40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180036e99
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1800148e0
mov rcx, qword [rbp - 0x18]
xor rcx, rsp
call fcn.18003a600
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret