Function at 0x180001ae0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get geographical location
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x18003d3b0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor r12d, r12d
cmp byte [0x18003d61e], r12b
je 0x180001b88
mov rax, qword [0x18003ed90]
mov byte [rax], r12b
mov rcx, qword [0x18003ed98]
movzx eax, byte [0x18003d630]
mov byte [rcx], al
movzx ecx, byte [0x18003d630]
mov rax, qword [0x18003eda0]
mov byte [rax], cl
movzx ecx, byte [0x18003d630]
mov rax, qword [0x18003eda8]
mov byte [rax], cl
movzx ecx, byte [0x18003d630]
mov rax, qword [0x18003edb0]
mov byte [rax], cl
movzx ecx, byte [0x18003d630]
mov rax, qword [0x18003edb8]
mov byte [rax], cl
mov rcx, qword [0x18003edc0]
movzx eax, byte [0x18003d638]
mov byte [rcx], al
mov ecx, dword [0x18003d634]
mov rax, qword [0x18003edc8]
mov dword [rax], ecx
mov rax, qword [0x18003edd0]
cmp byte [0x18003d620], r12b
je 0x180001c9e
mov byte [rax], 8
mov rax, qword [0x18003edd8]
mov byte [rax], 0x20
mov rbx, qword [0x18003ede0]
lea r9, [rbp - 0x39]
mov edx, 0x461
mov r8d, 0x40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8, rbx
lea rax, str.MP_ORIGINAL_MAPS
mov ecx, 8
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [r8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r8 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r8 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r8 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r8 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r8 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r8 - 0x10], xmm1
lea rax, [rax + 0x80]
sub rcx, 1
jne 0x180001bf0
movups xmm0, xmmword [rax]
movups xmmword [r8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r8 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r8 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r8 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r8 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r8 + 0x50], xmm1
movzx eax, byte [rax + 0x60]
mov byte [r8 + 0x60], al
lea r9, [rbp - 0x39]
mov r8d, dword [rbp - 0x39]
mov edx, 0x461
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x180001cab
mov byte [rax], r12b
mov rax, qword [0x18003edd8]
mov byte [rax], 0x20
mov ecx, dword [0x18003d8c0]
lea r14, str.Team_Deathmatch
mov rax, qword [str.Team_Deathmatch]
cmp rax, r14
cmove ecx, r12d
mov r15d, 0xd
lea rdi, str.Domination
cmp rax, rdi
cmove ecx, r15d
mov esi, 0x19
lea r11, str.Ground_War_Moshpit
cmp rax, r11
cmove ecx, esi
mov ebx, 0x25
lea r13, str.Ground_War_War
cmp rax, r13
cmove ecx, ebx
mov r10d, 0x24
lea r8, str.Shipment_24_7
cmp rax, r8
cmove ecx, r10d
mov r9d, 0x22
lea rdx, str.Throwback_Moshpit
cmp rax, rdx
cmove ecx, r9d
mov dword [0x18003d8c0], ecx
mov ecx, dword [0x18003d8c4]
mov rax, qword [str.Ground_War_Moshpit]
cmp rax, r14
cmove ecx, r12d
cmp rax, rdi
cmove ecx, r15d
cmp rax, r11
cmove ecx, esi
cmp rax, r13
cmove ecx, ebx
cmp rax, r8
cmove ecx, r10d
cmp rax, rdx
cmove ecx, r9d
mov dword [0x18003d8c4], ecx
lea rcx, [0x18003d410]
call fcn.1800034f0
lea ecx, [rsi + 0x57]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea ecx, [rsi + 0x5a]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea rsi, [rbx - 0x26]
lea r14, str._mm_skill_enabled_0_
lea r13, str._mm_throttling_enabled_0_
lea r15, str._mm_throttling_count_0_
lea r12, str._mm_server_advertise_time_10000_
test al, 1
je 0x180002744
cmp byte [0x18003d625], 0
je 0x1800022db
mov rdx, qword [str.mp_house]
lea rcx, [rbp - 0x79]
call fcn.1800038d0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0xc
jb 0x180001e65
lea rax, [r8 + 0xc]
mov qword [rbx + 0x10], rax
mov rdi, rbx
cmp rcx, 0x10
jb 0x180001df9
mov rdi, qword [rbx]
lea rax, [0x18003169c]
mov r12d, 0xc
lea r15, str._ui_mapname
cmp rax, rdi
jbe 0x180001e2d
lea rax, [rdi + r8]
cmp r15, rax
ja 0x180001e2d
cmp rdi, r15
ja 0x180001e25
xor r14d, r14d
jmp 0x180001e30
mov r14, rdi
sub r14, r15
jmp 0x180001e30
mov r14, r12
lea rcx, [rdi + 0xc]
inc r8
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + r14]
sub r12, r14
lea rdx, [r15 + 0xc]
add rdx, r14
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180001e8a
mov r12d, 0xc
mov qword [rsp + 0x28], r12
lea r15, str._ui_mapname
mov qword [rsp + 0x20], r15
mov edx, r12d
mov rcx, rbx
call fcn.1800032b0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0xf], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x1f], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x180001ef9
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001ef4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001ef4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002d31c
movdqa xmm0, xmmword [0x180037350]
movdqu xmmword [rbp - 0x69], xmm0
mov byte [rbp - 0x79], 0
mov rdx, qword [str.mp_house]
lea rcx, [rbp - 0x59]
call fcn.1800038d0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x1b
jb 0x180001fb5
lea rax, [r8 + 0x1b]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0x10
jb 0x180001f49
mov r14, qword [rbx]
lea rax, [0x1800316bb]
mov edi, 0x1b
lea r12, str._ui_mapvote_entrya_mapname
cmp rax, r14
jbe 0x180001f7c
lea rax, [r14 + r8]
cmp r12, rax
ja 0x180001f7c
cmp r14, r12
ja 0x180001f74
xor r15d, r15d
jmp 0x180001f7f
mov r15, r14
sub r15, r12
jmp 0x180001f7f
mov r15, rdi
lea rcx, [r14 + 0x1b]
inc r8
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + r15]
mov r8, rdi
sub r8, r15
lea rdx, [r12 + 0x1b]
add rdx, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180001fd8
mov edi, 0x1b
mov qword [rsp + 0x28], rdi
lea r12, str._ui_mapvote_entrya_mapname
mov qword [rsp + 0x20], r12
mov edx, edi
mov rcx, rbx
call fcn.1800032b0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x11], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 1], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x180002047
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002042
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002042
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002d31c
movdqa xmm0, xmmword [0x180037350]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov rdx, qword [str.mp_house]
lea rcx, [rbp - 0x79]
call fcn.1800038d0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x1b
jb 0x1800020fa
lea rax, [r8 + 0x1b]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0x10
jb 0x180002093
mov r14, qword [rbx]
lea rax, [0x1800316db]
lea r12, str._ui_mapvote_entryb_mapname
cmp rax, r14
jbe 0x1800020c1
lea rax, [r14 + r8]
cmp r12, rax
ja 0x1800020c1
cmp r14, r12
ja 0x1800020b9
xor r15d, r15d
jmp 0x1800020c4
mov r15, r14
sub r15, r12
jmp 0x1800020c4
mov r15, rdi
lea rcx, [r14 + 0x1b]
inc r8
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + r15]
sub rdi, r15
lea rdx, [r12 + 0x1b]
add rdx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180002119
mov qword [rsp + 0x28], rdi
lea r12, str._ui_mapvote_entryb_mapname
mov qword [rsp + 0x20], r12
mov rdx, rdi
mov rcx, rbx
call fcn.1800032b0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x21], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x180002188
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002183
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002183
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002d31c
movdqa xmm0, xmmword [0x180037350]
movdqu xmmword [rbp - 0x69], xmm0
mov byte [rbp - 0x79], 0
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rdx, qword [rbp + 0xf]
lea rdi, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rdi, qword [rbp - 0x11]
lea rbx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rbx, qword [rbp - 0x31]
call fcn.180003440
mov rdx, rdi
call fcn.180003440
mov rdx, rbx
call fcn.180003440
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x180002217
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002212
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002212
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002d31c
movdqa xmm0, xmmword [0x180037350]
movdqu xmmword [rbp - 0x21], xmm0
mov byte [rbp - 0x31], 0
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x180002266
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002261
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002261
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002d31c
movdqa xmm0, xmmword [0x180037350]
movdqu xmmword [rbp - 1], xmm0
mov byte [rbp - 0x11], 0
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x1800022b5
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800022b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800022b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002d31c
movdqa xmm0, xmmword [0x180037350]
movdqu xmmword [rbp + 0x1f], xmm0
mov byte [rbp + 0xf], 0
lea r14, str._mm_skill_enabled_0_
lea r15, str._mm_throttling_count_0_
lea r12, str._mm_server_advertise_time_10000_
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
inc rbx
cmp byte [rbx + r14], 0
jne 0x1800022f0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x18000231b
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r14
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp byte [rbx + r13], 0
jne 0x180002340
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x18000236b
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r13
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_search_weight_country_code_US_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002392
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x1800023b9
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._country_code_US_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x1800023e0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rbx + rcx]
cmp eax, dword [rdi + 8]
jae 0x180002407
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_countries_restricted_to_listen_servers_GB_US_
nop
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002430
movsxd rcx, dword [rdi + 0xc]
lea eax, [rbx + rcx]
cmp eax, dword [rdi + 8]
jae 0x180002457
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop word [rax + rax]
inc rbx
cmp byte [rbx + r13], 0
jne 0x180002480
movsxd rcx, dword [rdi + 0xc]
lea eax, [rbx + rcx]
cmp eax, dword [rdi + 8]
jae 0x1800024ab
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r13
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp byte [rbx + r15], 0
jne 0x1800024d0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rbx + rcx]
cmp eax, dword [rdi + 8]
jae 0x1800024fb
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r15
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp byte [rbx + r12], 0
jne 0x180002520
movsxd rcx, dword [rdi + 0xc]
lea eax, [rbx + rcx]
cmp eax, dword [rdi + 8]
jae 0x18000254b
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r12
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_server_acquire_interval_0_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002572
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002599
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_results_allow_unacceptable_qos_min_received_1_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x1800025c0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x1800025e7
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_results_allow_unacceptable_qos_max_unresponsive_1_
nop
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002610
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002637
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_ping_disparity_enabled_0_
nop
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002660
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002687
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
cmp byte [0x18003d626], 0
je 0x180002744
mov rcx, qword [0x18003ed80]
mov eax, dword [0x18003d8c4]
mov dword [rcx], eax
mov ecx, dword [0x18003d8c4]
mov rax, qword [0x18003ed88]
mov dword [rax], ecx
lea rax, str.Ground_War_War
mov ecx, 0xc1
cmp qword [str.Ground_War_Moshpit], rax
jne 0x1800026fb
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._raidmode_1_
nop dword [rax]
inc rbx
cmp byte [rbx + rdx], 0
jne 0x1800026f0
jmp 0x18000271b
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._raidmode_0_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002712
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002739
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002b26
cmp byte [0x18003d626], 0
je 0x18000276f
mov rcx, qword [0x18003ed80]
mov eax, dword [0x18003d8c0]
mov dword [rcx], eax
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
inc rbx
cmp byte [rbx + r14], 0
jne 0x180002784
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x1800027af
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r14
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop
inc rbx
cmp byte [rbx + r13], 0
jne 0x1800027d0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x1800027fb
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r13
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_search_weight_country_code_NA_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002822
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002849
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_countries_restricted_to_listen_servers_GB_NA_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002870
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002897
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop word [rax + rax]
inc rbx
cmp byte [rbx + r13], 0
jne 0x1800028c0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x1800028eb
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r13
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp byte [rbx + r15], 0
jne 0x180002910
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x18000293b
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r15
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp byte [rbx + r12], 0
jne 0x180002960
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x18000298b
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
mov rdx, r12
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_server_acquire_interval_0_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x1800029b2
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x1800029d9
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_results_allow_unacceptable_qos_min_received_1_
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002a00
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002a27
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_results_allow_unacceptable_qos_max_unresponsive_1_
nop
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002a50
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002a77
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rdi, qword [0x18003ee08]
mov rbx, rsi
lea rdx, str._mm_ping_disparity_enabled_0_
nop
inc rbx
cmp byte [rbx + rdx], 0
jne 0x180002aa0
movsxd rcx, dword [rdi + 0xc]
lea eax, [rcx + rbx]
cmp eax, dword [rdi + 8]
jae 0x180002ac7
lea eax, [rbx + 1]
movsxd r8, eax
add rcx, qword [rdi]
call qword [0x18003ee00]
add dword [rdi + 0xc], ebx
mov ecx, 0xc1
call qword [0x18003edf0]
mov ecx, 0xc1
call qword [0x18003ee20]
mov rbx, qword [0x18003ee08]
lea rdx, str._party_maxplayers_18_
nop dword [rax + rax]
inc rsi
cmp byte [rsi + rdx], 0
jne 0x180002af0
movsxd r9, dword [rbx + 0xc]
lea eax, [rsi + r9]
cmp eax, dword [rbx + 8]
jae 0x180002b1b
lea eax, [rsi + 1]
movsxd r8, eax
mov rcx, r9
add rcx, qword [rbx]
call qword [0x18003ee00]
add dword [rbx + 0xc], esi
mov ecx, 0xc1
call qword [0x18003edf0]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.18002d2d0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret