Function at 0x18003cdc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x268]
sub rsp, 0x330
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rax, qword [0x1800f5040]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x198], r8
mov r13, rdx
mov r12, rcx
xor edi, edi
mov esi, edi
mov dword [rsp + 0x5c], edi
movzx r15d, byte [0x1800f6566]
mov byte [rsp + 0x58], r15b
cmp qword [0x1800f6570], rsi
je 0x18003ce40
cmp qword [0x1800f6578], rsi
je 0x18003ce40
cmp qword [0x1800f6568], rsi
jne 0x18003ce59
mov qword [rbp + 0x190], 0x32
lea rcx, [rbp + 0x190]
call fcn.180044470
jmp 0x18003ce25
mov ebx, 0x16
cmp byte [0x1800f6560], sil
je 0x18003cf11
cmp byte [0x1800f6562], sil
jne 0x18003cf11
mov byte [0x1800f6562], 1
lea rcx, [0x1800b4ac0]
call fcn.1800389a0
lea rcx, [0x1800b4ac0]
call fcn.18003af30
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, ebx
lea rdx, str.Loaded_default_config_
lea rcx, [rbp + 0xe0]
call fcn.180034f20
nop
lea rcx, [rbp + 0xe0]
call fcn.18009eb10
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x18003cf11
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003cf0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003dc8a
call fcn.1800a12a4
cmp byte [0x1800f6858], 0
je 0x18003d630
mov byte [0x1800f6858], 0
mov rsi, qword [0x1800f6738]
mov qword [rsp + 0x50], rsi
mov rdi, qword [0x1800f6ad8]
lea r13, [0x1800f6ac8]
mov rbx, r13
cmp qword [0x1800f6ae0], 0xf
cmova rbx, qword [0x1800f6ac8]
call fcn.1800a0604
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rdi
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.1800331b0
nop
lea rcx, [rbp - 0x80]
call fcn.1800348c0
movzx ebx, al
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x18003cfbe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003cfb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003cfb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a12a4
test bl, bl
jne 0x18003d3bf
call fcn.1800a0604
lea rcx, str.C:_Windows_Fonts_
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], 0x11
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp + 0x100]
call fcn.1800331b0
mov dword [rsp + 0x5c], 0xf00000
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x1b0]
call fcn.180043e20
test eax, eax
jne 0x18003ed39
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x18003d06a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003d065
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003d065
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a12a4
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov rbx, qword [rbp + 0x1b8]
test rbx, rbx
je 0x18003d08b
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x1b8]
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x1c0], xmm0
test rbx, rbx
je 0x18003d0aa
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x1b8]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d0], xmm1
mov rdi, 0xffffffffffffffff
test rbx, rbx
je 0x18003d101
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18003d0fa
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18003d0fa
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
jmp 0x18003d101
mov rbx, qword [rbp + 0x1b8]
cmp qword [rbp + 0x1b0], 0
je 0x18003d341
mov rsi, qword [rbp + 0x1c0]
lea r14, str..ttf
call fcn.1800a0604
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], 4
lea r8, [rbp + 0xb0]
mov edx, eax
lea rcx, [rbp + 0x88]
call fcn.1800331b0
or dword [rsp + 0x5c], 0x6000
lea r15, [rsi + 0x20]
lea rdx, [rbp + 0x120]
mov rcx, r15
call fcn.180033850
lea rcx, [rbp + 0x88]
mov rsi, qword [rbp + 0x88]
mov r14, qword [rbp + 0xa0]
cmp r14, 7
cmova rcx, rsi
mov qword [rbp + 0xc0], rcx
mov rcx, qword [rbp + 0x98]
mov qword [rbp + 0xc8], rcx
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
mov rcx, rax
call fcn.180033640
mov r12d, eax
mov rdx, qword [rbp + 0x138]
cmp rdx, 7
jbe 0x18003d20b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003d1f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003d283
call fcn.1800a12a4
mov r14, qword [rbp + 0xa0]
mov rsi, qword [rbp + 0x88]
xor eax, eax
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], ax
cmp r14, 7
jbe 0x18003d25d
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18003d255
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003d28a
mov rcx, rsi
call fcn.1800a12a4
test r12d, r12d
je 0x18003d291
lea rcx, [rbp + 0x1c0]
call fcn.180034770
mov rsi, qword [rbp + 0x1c0]
test rsi, rsi
je 0x18003d336
jmp 0x18003d116
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
cmp qword [r15 + 0x18], 7
jbe 0x18003d29e
mov rcx, qword [r15]
mov rax, qword [r15 + 0x10]
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], rax
call fcn.1800a0604
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x150], xmm0
lea r8, [rbp + 0x150]
mov edx, eax
lea rcx, [rbp + 0x160]
call fcn.1800469f0
mov rdx, qword [0x1800f6ae0]
cmp rdx, 0xf
jbe 0x18003d31a
mov rcx, qword [0x1800f6ac8]
inc rdx
cmp rdx, 0x1000
jb 0x18003d315
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18003d480
mov rcx, r8
call fcn.1800a12a4
movups xmm0, xmmword [rbp + 0x160]
movups xmmword [0x1800f6ac8], xmm0
movups xmm1, xmmword [rbp + 0x170]
movups xmmword [0x1800f6ad8], xmm1
movzx r15d, byte [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x18003d388
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18003d381
mov rbx, qword [rbp + 0x1c8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18003d381
mov rcx, qword [rbp + 0x1c8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x1b8]
test rbx, rbx
je 0x18003d3bf
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18003d3bf
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x18003d3bf
mov rcx, qword [rbp + 0x1b8]
mov rax, qword [rcx]
call qword [rax + 8]
movss xmm2, dword [0x1800f50b4]
mulss xmm2, dword [0x1800dbf78]
mov rdx, r13
cmp qword [0x1800f6ae0], 0xf
cmova rdx, qword [0x1800f6ac8]
mov rcx, qword [rsi + 0x38]
call fcn.180081730
mov qword [0x1800f6570], rax
movss xmm2, dword [0x1800f50b4]
mulss xmm2, dword [0x1800dbf88]
mov rdx, r13
cmp qword [0x1800f6ae0], 0xf
cmova rdx, qword [0x1800f6ac8]
mov rcx, qword [rsi + 0x38]
call fcn.180081730
mov qword [0x1800f6578], rax
movss xmm2, dword [0x1800f50b4]
mulss xmm2, dword [0x1800dbf7c]
mov rdx, r13
cmp qword [0x1800f6ae0], 0xf
cmova rdx, qword [0x1800f6ac8]
mov rcx, qword [rsi + 0x38]
call fcn.180081730
mov qword [0x1800f6568], rax
mov rcx, qword [rsi + 0x38]
call fcn.180081e50
test r15b, r15b
je 0x18003d497
call fcn.1800889f0
mov rax, qword [0x1800f6738]
test rax, rax
je 0x18003d487
mov rcx, qword [rax + 0x98]
jmp 0x18003d489
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
cmp qword [rcx + 0x48], 0
jne 0x18003d4bf
call fcn.1800885f0
jmp 0x18003d4bf
call fcn.180087510
mov rax, qword [0x1800f6738]
test rax, rax
je 0x18003d4b1
mov rcx, qword [rax + 0x98]
jmp 0x18003d4b3
xor ecx, ecx
cmp qword [rcx + 0x40], 0
jne 0x18003d4bf
call fcn.180087140
call fcn.1800896e0
call fcn.180060660
mov rsi, qword [0x1800f6ad8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x17
jb 0x18003ed2d
cmp qword [0x1800f6ae0], 0xf
cmova r13, qword [0x1800f6ac8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rdi, [rsi + 0x17]
mov r14d, 0xf
lea rbx, [rsp + 0x60]
cmp rdi, r14
jbe 0x18003d59a
mov r14, rdi
or r14, 0xf
cmp r14, rcx
jbe 0x18003d55b
mov r14, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a0e20
test rax, rax
je 0x18003dc8a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18003d595
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x18003d584
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18003ed33
jmp 0x18003d53c
test rcx, rcx
je 0x18003d593
call fcn.1800a0e20
mov rbx, rax
jmp 0x18003d595
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [str.Changed_client_font_to]
movups xmmword [rbx], xmm0
mov eax, dword [0x1800b4af0]
mov dword [rbx + 0x10], eax
movzx eax, word [0x1800b4af4]
mov word [rbx + 0x14], ax
movzx eax, byte [0x1800b4af6]
mov byte [rbx + 0x16], al
lea rcx, [rbx + 0x17]
mov r8, rsi
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
lea rcx, [rsp + 0x60]
call fcn.18009eb10
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x18003ecef
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003d626
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003dc8a
call fcn.1800a12a4
jmp 0x18003ecef
mov rax, qword [0x1800f6590]
test rax, rax
je 0x18003d654
mov rax, qword [rax + 0x30]
cmp byte [rax + 0x50], 0
je 0x18003d654
cmp byte [0x1800f6dc8], 0
je 0x18003d654
call fcn.180036640
mov rax, qword [0x1800f6738]
test r15b, r15b
je 0x18003d67f
test rax, rax
je 0x18003d66e
mov rcx, qword [rax + 0x98]
jmp 0x18003d671
mov rcx, rdi
cmp qword [rcx + 0x48], 0
jne 0x18003d69c
call fcn.1800885f0
jmp 0x18003d69c
test rax, rax
je 0x18003d68d
mov rcx, qword [rax + 0x98]
jmp 0x18003d690
mov rcx, rdi
cmp qword [rcx + 0x40], 0
jne 0x18003d69c
call fcn.180087140
call fcn.1800896e0
call fcn.180060660
mov rcx, qword [0x1800f6570]
call fcn.180068b50
mov r14d, 0xf
xorps xmm9, xmm9
movss xmm7, dword [0x1800dc00c]
cmp byte [0x1800f6561], 0
je 0x18003dd1c
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], r14
mov byte [rbp - 0x60], 0
mov dword [rsp + 0x5c], 0x2000000
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov rbx, rdi
mov rcx, qword [0x1800f6c78]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x18003d766
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x18003d75f
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rsi, rax
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rdi, rax
mov rbx, qword [0x1800f6c70]
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
cmp rdi, rbx
cmovb rdi, rbx
sub rdi, rsi
mov rbx, rsi
jmp 0x18003d7ae
mov rcx, qword [0x1800f6c78]
test cl, 4
jne 0x18003d7f2
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x18003d7a9
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rsi, rax
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rdi, rax
sub rdi, rsi
mov rbx, rsi
jmp 0x18003d7ae
mov rsi, qword [rsp + 0x60]
test rbx, rbx
je 0x18003d7f0
mov rax, qword [rbp - 0x48]
cmp rdi, rax
ja 0x18003d7e1
lea rbx, [rbp - 0x60]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x60]
mov qword [rbp - 0x50], rdi
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18003d7f0
mov r9, rsi
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.180045270
xor edi, edi
mov esi, 0x1000000
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rcx, qword [rbp - 0x60]
xor r8d, r8d
xor edx, edx
call fcn.180065fe0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18003d84e
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003d849
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003d849
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a12a4
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.General
call fcn.18008cf40
test al, al
je 0x18003d872
mov dword [0x1800f50b0], edi
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Combat
call fcn.18008cf40
test al, al
je 0x18003d8a5
mov dword [0x1800f50b0], 1
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Visual
call fcn.18008cf40
test al, al
je 0x18003d8d8
mov dword [0x1800f50b0], 2
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Movement
call fcn.18008cf40
test al, al
je 0x18003d90b
mov dword [0x1800f50b0], 3
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Player
call fcn.18008cf40
test al, al
je 0x18003d93e
mov dword [0x1800f50b0], 4
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Exploit
call fcn.18008cf40
test al, al
je 0x18003d971
mov dword [0x1800f50b0], 5
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Configs
call fcn.18008cf40
test al, al
je 0x18003d9a4
mov dword [0x1800f50b0], 6
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Settings
call fcn.18008cf40
test al, al
je 0x18003d9da
mov eax, 7
mov dword [0x1800f50b0], eax
jmp 0x18003d9e0
mov eax, dword [0x1800f50b0]
cmp eax, 7
ja case.default.0x18003d9fd
cdqe
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x3ed48]
add rcx, r8
jmp rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 7
lea rdx, str.General
lea rcx, [rbp - 0x80]
call fcn.180034f20
nop
mov rdi, qword [0x1800fc150]
mov rbx, qword [0x1800fc148]
cmp rbx, rdi
je 0x18003da57
nop dword [rax + rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 1
jne 0x18003da4e
call fcn.1800410b0
add rbx, 8
cmp rbx, rdi
jne 0x18003da40
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18003dd17
inc rdx
mov rcx, qword [rbp - 0x80]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18003da91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003dc8a
call fcn.1800a12a4
jmp 0x18003dd17
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Combat
lea rcx, [rbp - 0x80]
call fcn.180034f20
nop
mov rdi, qword [0x1800fc150]
mov rbx, qword [0x1800fc148]
cmp rbx, rdi
je 0x18003daeb
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 2
jne 0x18003dae2
call fcn.1800410b0
add rbx, 8
cmp rbx, rdi
jne 0x18003dad4
jmp 0x18003da57
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Visual
lea rcx, [rbp - 0x80]
call fcn.180034f20
nop
mov rdi, qword [0x1800fc150]
mov rbx, qword [0x1800fc148]
cmp rbx, rdi
je 0x18003db47
nop dword [rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 3
jne 0x18003db3e
call fcn.1800410b0
add rbx, 8
cmp rbx, rdi
jne 0x18003db30
jmp 0x18003da57
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 8
lea rdx, str.Movement
lea rcx, [rbp - 0x80]
call fcn.180034f20
nop
mov rdi, qword [0x1800fc150]
mov rbx, qword [0x1800fc148]
cmp rbx, rdi
je 0x18003db9c
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 4
jne 0x18003db93
call fcn.1800410b0
add rbx, 8
cmp rbx, rdi
jne 0x18003db85
jmp 0x18003da57
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Player
lea rcx, [rbp - 0x80]
call fcn.180034f20
nop
mov rdi, qword [0x1800fc150]
mov rbx, qword [0x1800fc148]
cmp rbx, rdi
je 0x18003dbf7
nop word [rax + rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 5
jne 0x18003dbee
call fcn.1800410b0
add rbx, 8
cmp rbx, rdi
jne 0x18003dbe0
jmp 0x18003da57
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 7
lea rdx, str.Exploit
lea rcx, [rbp - 0x80]
call fcn.180034f20
nop
mov rdi, qword [0x1800fc150]
mov rbx, qword [0x1800fc148]
cmp rbx, rdi
je 0x18003dc4c
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 6
jne 0x18003dc43
call fcn.1800410b0
add rbx, 8
cmp rbx, rdi
jne 0x18003dc35
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18003dd17
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003da91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003da91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003f6b0
jmp 0x18003dd17
movzx ecx, r15b
call fcn.18003ed70
jmp 0x18003dd17
lea rcx, str.Welcome_to_Boykisser_Central__official_version___Happy_Modding_
call fcn.18008c630
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
movaps xmm4, xmmword [0x1800dc1d0]
movups xmmword [rsp + 0x60], xmm4
lea rdx, [0x1800b4b80]
lea rcx, [rsp + 0x60]
call fcn.18008c6a0
lea rcx, str.For_support_join
call fcn.18008c630
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006c220
movaps xmm4, xmmword [0x1800dc1d0]
movups xmmword [rsp + 0x60], xmm4
lea rdx, [0x1800b42c1]
lea rcx, [rsp + 0x60]
call fcn.18008c6a0
lea rcx, str.Please_select_a_category_above_to_use_the_menu...
call fcn.18008c630
call fcn.1800683f0
mov rax, qword [0x1800f6650]
test rax, rax
je 0x18003de20
mov rax, qword [rax + 0x30]
cmp byte [rax + 0x50], 0
je 0x18003de11
lea r15, [0x1800fba60]
mov qword [rbp + 0x190], r15
mov rcx, r15
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x18003dd61
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x1800fbaac]
cmp eax, 0x7fffffff
jne 0x18003dd82
dec eax
mov dword [0x1800fbaac], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rdi, qword [0x1800f7388]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18003dde0
lea rcx, [rbx + 0x10]
cmp qword [0x1800f65d0], 0
je 0x18003de08
lea rdx, [rcx + 0x18]
movss xmm0, dword [rcx + 0x3c]
movss dword [rsp + 0x30], xmm0
movzx eax, byte [rcx + 0x38]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], rdx
mov r9d, dword [rcx + 0x14]
movss xmm2, dword [rcx + 0x10]
movss xmm1, dword [rcx + 0xc]
call fcn.18004f4f0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
jne 0x18003dd91
mov rdi, qword [0x1800f7388]
mov rdx, rdi
call fcn.1800556e0
mov rax, qword [0x1800f7388]
mov qword [rax], rax
mov rax, qword [0x1800f7388]
mov qword [rax + 8], rax
mov qword [0x1800f7390], 0
mov rcx, r15
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp qword [0x1800f6638], 0
je 0x18003de20
call fcn.18004a0c0
mov rdi, qword [0x1800f9b20]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18003de51
nop
mov rcx, qword [rbx + 0x10]
mov rax, qword [rcx + 0x30]
cmp byte [rax + 0x50], 0
je 0x18003de46
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x10]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
jne 0x18003de30
call fcn.180068bf0
mov rcx, qword [0x1800f6578]
call fcn.180068b50
mov rax, qword [0x1800f6738]
movss xmm8, dword [rax + 0x3d38]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xor edi, edi
mov qword [rbp - 0x50], rdi
mov rcx, r14
mov qword [rbp - 0x48], rcx
mov byte [rbp - 0x60], dil
or esi, 8
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f6c78]
mov edx, edi
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003dedf
mov rax, qword [0x1800f6c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003dedf
mov rax, qword [0x1800f6c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f6c70]
cmovb rbx, qword [0x1800f6c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003df1b
test r8b, 4
jne 0x18003df4b
mov rax, qword [0x1800f6c40]
mov r8, qword [rax]
mov rbx, rdi
test r8, r8
je 0x18003df16
mov rax, qword [0x1800f6c20]
mov r9, qword [rax]
mov rax, qword [0x1800f6c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003df1b
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003df4b
cmp rbx, rcx
lea rcx, [rbp - 0x60]
ja 0x18003df3f
mov qword [rbp - 0x50], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x60], dil
jmp 0x18003df47
mov rdx, rbx
call fcn.180045270
mov rcx, qword [rbp - 0x48]
and esi, 0xfffffff7
or esi, 4
lea rdx, [rbp - 0x60]
mov r8, qword [rbp - 0x60]
cmp rcx, 0xf
cmova rdx, r8
mov rax, qword [0x1800f6738]
movss xmm6, dword [rax + 0x3d38]
test rdx, rdx
jne 0x18003df7b
movaps xmm7, xmm9
jmp 0x18003dfd3
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdx
movss dword [rsp + 0x20], xmm7
movss xmm3, dword [0x1800dbffc]
movaps xmm2, xmm6
lea rdx, [rsp + 0x50]
mov rcx, qword [rax + 0x3d30]
call fcn.180084b60
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x1800dbef4]
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss xmm6, dword [rsp + 0x54]
mov rcx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x60]
cmp rcx, 0xf
jbe 0x18003e00d
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003e005
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e005
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a12a4
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], r14
mov byte [rbp - 0x60], 0
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
movss xmm1, dword [0x1800dbf60]
addss xmm6, xmm1
addss xmm7, dword [0x1800dbf6c]
movss dword [rsp + 0x50], xmm7
movss dword [rsp + 0x54], xmm6
mov dword [rbp + 0x190], 0x40a00000
mov dword [rbp + 0x194], 0x40a00000
mov dword [rsp + 0x28], edi
movss dword [rsp + 0x20], xmm1
mov r9d, dword [0x1800da3a0]
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x190]
mov rcx, rax
call fcn.180080810
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rdi
mov r8, r14
mov qword [rbp - 0x28], r14
mov byte [rbp - 0x40], 0
or esi, 2
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov edx, dword [0x1800f6c78]
mov rcx, rdi
mov eax, edx
and al, 0x22
cmp al, 2
je 0x18003e11d
mov rax, qword [0x1800f6c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003e11d
mov rax, qword [0x1800f6c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f6c70]
cmovb rbx, qword [0x1800f6c70]
sub rbx, r9
mov rcx, r9
jmp 0x18003e158
test dl, 4
jne 0x18003e188
mov rax, qword [0x1800f6c40]
mov rdx, qword [rax]
mov rbx, rdi
test rdx, rdx
je 0x18003e153
mov rax, qword [0x1800f6c20]
mov r9, qword [rax]
mov rax, qword [0x1800f6c58]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x18003e158
mov r9, qword [rsp + 0x60]
test rcx, rcx
je 0x18003e188
lea rcx, [rbp - 0x40]
cmp rbx, r14
ja 0x18003e17c
mov qword [rbp - 0x30], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x40], 0
jmp 0x18003e184
mov rdx, rbx
call fcn.180045270
mov r8, qword [rbp - 0x28]
and esi, 0xfffffffd
or esi, 1
lea rdx, [rbp - 0x40]
mov rcx, qword [rbp - 0x40]
cmp r8, 0xf
cmova rdx, rcx
mov dword [rbp + 0x190], 0x41100000
mov dword [rbp + 0x194], 0x40800000
movaps xmm2, xmm8
mov rdi, 0xffffffffffffffff
mov rax, rdi
inc rax
cmp byte [rdx + rax], 0
jne 0x18003e1c0
add rax, rdx
cmp rdx, rax
je 0x18003e232
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e1e2
jne 0x18003e1e2
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084f70
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
cmp r8, 0xf
jbe 0x18003e269
lea rdx, [r8 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e264
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e264
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a12a4
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x28], r14
mov byte [rbp - 0x40], 0
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
mov rcx, r14
mov qword [rbp - 8], rcx
mov byte [rbp - 0x20], 0
or esi, 0x20
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f6c78]
xor edx, edx
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003e30a
mov rax, qword [0x1800f6c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003e30a
mov rax, qword [0x1800f6c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f6c70]
cmovb rbx, qword [0x1800f6c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003e345
test r8b, 4
jne 0x18003e375
mov rax, qword [0x1800f6c40]
mov r8, qword [rax]
xor ebx, ebx
test r8, r8
je 0x18003e340
mov rax, qword [0x1800f6c20]
mov r9, qword [rax]
mov rax, qword [0x1800f6c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003e345
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003e375
cmp rbx, rcx
lea rcx, [rbp - 0x20]
ja 0x18003e369
mov qword [rbp - 0x10], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x20], 0
jmp 0x18003e371
mov rdx, rbx
call fcn.180045270
mov rcx, qword [rbp - 8]
and esi, 0xffffffdf
or esi, 0x10
lea rdx, [rbp - 0x20]
mov r8, qword [rbp - 0x20]
cmp rcx, 0xf
cmova rdx, r8
mov dword [rbp + 0x190], 0x41100000
mov dword [rbp + 0x194], 0x40c00000
movaps xmm2, xmm8
mov rax, rdi
inc rax
cmp byte [rdx + rax], 0
jne 0x18003e3a6
add rax, rdx
cmp rdx, rax
je 0x18003e418
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e3c8
jne 0x18003e3c8
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084f70
mov rcx, qword [rbp - 8]
mov r8, qword [rbp - 0x20]
cmp rcx, 0xf
jbe 0x18003e452
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003e44a
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e44a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a12a4
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], r14
mov byte [rbp - 0x20], 0
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], 0
mov rcx, r14
mov qword [rbp + 0x18], rcx
mov byte [rbp], 0
bts esi, 9
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f6c78]
xor edx, edx
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003e4f4
mov rax, qword [0x1800f6c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003e4f4
mov rax, qword [0x1800f6c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f6c70]
cmovb rbx, qword [0x1800f6c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003e52f
test r8b, 4
jne 0x18003e55f
mov rax, qword [0x1800f6c40]
mov r8, qword [rax]
xor ebx, ebx
test r8, r8
je 0x18003e52a
mov rax, qword [0x1800f6c20]
mov r9, qword [rax]
mov rax, qword [0x1800f6c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003e52f
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003e55f
cmp rbx, rcx
lea rcx, [rbp]
ja 0x18003e553
mov qword [rbp + 0x10], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx], 0
jmp 0x18003e55b
mov rdx, rbx
call fcn.180045270
mov rcx, qword [rbp + 0x18]
btr esi, 9
bts esi, 8
lea rdx, [rbp]
mov r8, qword [rbp]
cmp rcx, 0xf
cmova rdx, r8
mov dword [rbp + 0x190], 0x41300000
mov dword [rbp + 0x194], 0x40800000
movaps xmm2, xmm8
mov rax, rdi
inc rax
cmp byte [rdx + rax], 0
jne 0x18003e592
add rax, rdx
cmp rdx, rax
je 0x18003e604
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e5b4
jne 0x18003e5b4
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084f70
mov rcx, qword [rbp + 0x18]
mov r8, qword [rbp]
cmp rcx, 0xf
jbe 0x18003e63e
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003e636
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e636
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a12a4
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x18], r14
mov byte [rbp], 0
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 0
mov rcx, r14
mov qword [rbp + 0x38], rcx
mov byte [rbp + 0x20], 0
bts esi, 7
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f6c78]
xor edx, edx
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003e6e0
mov rax, qword [0x1800f6c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003e6e0
mov rax, qword [0x1800f6c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f6c70]
cmovb rbx, qword [0x1800f6c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003e71b
test r8b, 4
jne 0x18003e74b
mov rax, qword [0x1800f6c40]
mov r8, qword [rax]
xor ebx, ebx
test r8, r8
je 0x18003e716
mov rax, qword [0x1800f6c20]
mov r9, qword [rax]
mov rax, qword [0x1800f6c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003e71b
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003e74b
cmp rbx, rcx
lea rcx, [rbp + 0x20]
ja 0x18003e73f
mov qword [rbp + 0x30], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x20], 0
jmp 0x18003e747
mov rdx, rbx
call fcn.180045270
mov rcx, qword [rbp + 0x38]
btr esi, 7
or esi, 0x40
lea rdx, [rbp + 0x20]
mov r8, qword [rbp + 0x20]
cmp rcx, 0xf
cmova rdx, r8
mov dword [rbp + 0x190], 0x41300000
mov dword [rbp + 0x194], 0x40c00000
movaps xmm2, xmm8
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x18003e780
add rax, rdx
cmp rdx, rax
je 0x18003e7f2
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e7a2
jne 0x18003e7a2
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084f70
mov rcx, qword [rbp + 0x38]
mov r8, qword [rbp + 0x20]
cmp rcx, 0xf
jbe 0x18003e82c
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003e824
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e824
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a12a4
xor ebx, ebx
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], r14
mov byte [rbp + 0x20], bl
mov rax, qword [0x1800f6590]
test rax, rax
je 0x18003ea82
mov rax, qword [rax + 0x30]
cmp byte [rax + 0x50], bl
je 0x18003ea82
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], r14
mov byte [rbp + 0x40], bl
bts esi, 0x13
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
xor esi, esi
mov ebx, esi
mov rcx, qword [0x1800f6c78]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x18003e90d
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x18003e906
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov r14, rax
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rsi, rax
mov rbx, qword [0x1800f6c70]
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
cmp rsi, rbx
cmovb rsi, rbx
sub rsi, r14
mov rbx, r14
jmp 0x18003e955
mov rcx, qword [0x1800f6c78]
test cl, 4
jne 0x18003e999
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x18003e950
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov r14, rax
lea rcx, [0x1800f6c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rsi, rax
sub rsi, r14
mov rbx, r14
jmp 0x18003e955
mov r14, qword [rsp + 0x60]
test rbx, rbx
je 0x18003e997
mov rax, qword [rbp + 0x58]
cmp rsi, rax
ja 0x18003e988
lea rbx, [rbp + 0x40]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x40]
mov qword [rbp + 0x50], rsi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x18003e997
mov r9, r14
mov rdx, rsi
lea rcx, [rbp + 0x40]
call fcn.180045270
xor esi, esi
lea rbx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rbx, qword [rbp + 0x40]
movss xmm1, dword [0x1800f672c]
call fcn.180035120
mov edx, eax
mov dword [rbp + 0x190], 0x41200000
mov dword [rbp + 0x194], 0x40a00000
test eax, 0xff000000
je 0x18003ea3d
inc rdi
cmp byte [rbx + rdi], 0
jne 0x18003e9d1
add rdi, rbx
cmp rbx, rdi
je 0x18003ea3d
mov rax, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e9f4
jne 0x18003e9f4
movss xmm8, dword [rax + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x190]
movaps xmm2, xmm8
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180084f70
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x18003ec5a
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003ec55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003ec55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [0x1800f6738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005fd10
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], r14
mov byte [rbp + 0x60], 0
bts esi, 0xc
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov edx, dword [0x1800f6c78]
xor esi, esi
mov ecx, esi
mov eax, edx
and al, 0x22
cmp al, 2
je 0x18003eb0d
mov rax, qword [0x1800f6c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003eb0d
mov rax, qword [0x1800f6c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f6c70]
cmovb rbx, qword [0x1800f6c70]
sub rbx, r9
mov rcx, r9
jmp 0x18003eb48
test dl, 4
jne 0x18003eb79
mov rax, qword [0x1800f6c40]
mov rdx, qword [rax]
mov rbx, rsi
test rdx, rdx
je 0x18003eb43
mov rax, qword [0x1800f6c20]
mov r9, qword [rax]
mov rax, qword [0x1800f6c58]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x18003eb48
mov r9, qword [rsp + 0x60]
test rcx, rcx
je 0x18003eb79
lea rcx, [rbp + 0x60]
cmp rbx, 0xf
ja 0x18003eb6d
mov qword [rbp + 0x70], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x60], sil
jmp 0x18003eb75
mov rdx, rbx
call fcn.180045270
mov r14, qword [rbp + 0x78]
lea rax, [rbp + 0x60]
mov rcx, qword [rbp + 0x60]
cmp r14, 0xf
cmova rax, rcx
mov dword [rbp + 0x190], 0x41200000
mov dword [rbp + 0x194], 0x40a00000
mov edx, dword [0x1800da3a4]
test edx, 0xff000000
je 0x18003ec23
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x18003ebb0
add rdi, rax
cmp rax, rdi
je 0x18003ec23
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003ebd3
jne 0x18003ebd3
movss xmm8, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x190]
movaps xmm2, xmm8
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084f70
mov r14, qword [rbp + 0x78]
mov rcx, qword [rbp + 0x60]
cmp r14, 0xf
jbe 0x18003ec5a
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003ec55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003ec55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a12a4
call fcn.180068bf0
call fcn.180062730
xor r9d, r9d
lea edx, [r9 + 1]
cmp byte [rsp + 0x58], r9b
je 0x18003ecb3
mov qword [rbp + 0x190], r12
mov rcx, qword [rbp + 0x198]
mov rax, qword [rcx]
lea r8, [rbp + 0x190]
call qword [rax + 0x108]
mov rax, qword [0x1800f6738]
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, rsi
call fcn.1800879d0
jmp 0x18003ecef
mov qword [rbp + 0x198], r12
mov rax, qword [r13]
lea r8, [rbp + 0x198]
mov rcx, r13
call qword [rax + 0xc0]
mov rax, qword [0x1800f6738]
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, rsi
call fcn.180086680
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.1800a0e00
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180032300
int3
call fcn.180032260
nop
lea r8, [rbp + 0x100]
mov edx, eax
call fcn.180034320
int3