Function at 0x1800052a0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov rax, qword [0x18008b340]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov qword [rbp - 0x19], rdx
mov rbx, rcx
mov qword [rbp - 0x11], r8
xor edi, edi
call fcn.180033340
call fcn.180034220
call fcn.1800183b0
call fcn.180012080
add rax, 0xc8
movaps xmm0, xmmword [0x1800548f0]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1800548d0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x180054890]
movups xmmword [rax + 0x20], xmm0
xorps xmm1, xmm1
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x180054850]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1800547a0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x180054790]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x180054800]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x180054810]
movups xmmword [rax + 0x80], xmm0
movaps xmm1, xmmword [0x1800548b0]
movups xmmword [rax + 0x90], xmm1
movaps xmm0, xmmword [0x180054860]
movups xmmword [rax + 0xa0], xmm0
movaps xmm1, xmmword [0x180054880]
movups xmmword [rax + 0xb0], xmm1
movups xmmword [rax + 0xc0], xmm0
movaps xmm1, xmmword [0x1800548a0]
movups xmmword [rax + 0xd0], xmm1
movaps xmm0, xmmword [0x180054800]
movups xmmword [rax + 0xe0], xmm0
movaps xmm1, xmmword [0x180054820]
movups xmmword [rax + 0xf0], xmm1
movaps xmm0, xmmword [0x180054830]
movups xmmword [rax + 0x100], xmm0
movaps xmm1, xmmword [0x180054840]
movups xmmword [rax + 0x110], xmm1
movaps xmm0, xmmword [0x1800548e0]
movups xmmword [rax + 0x120], xmm0
movaps xmm1, xmmword [0x180054820]
movups xmmword [rax + 0x130], xmm1
movaps xmm0, xmmword [0x180054840]
movups xmmword [rax + 0x140], xmm0
movaps xmm1, xmmword [0x180054800]
movups xmmword [rax + 0x150], xmm1
movaps xmm0, xmmword [0x180054810]
movups xmmword [rax + 0x160], xmm0
movaps xmm1, xmmword [0x1800548b0]
movups xmmword [rax + 0x170], xmm1
movaps xmm0, xmmword [0x1800547f0]
movups xmmword [rax + 0x180], xmm0
movaps xmm1, xmmword [0x1800547e0]
movups xmmword [rax + 0x190], xmm1
movaps xmm0, xmmword [0x1800547d0]
movups xmmword [rax + 0x1a0], xmm0
movaps xmm1, xmmword [0x1800547b0]
movups xmmword [rax + 0x1b0], xmm1
movaps xmm0, xmmword [0x1800547c0]
movups xmmword [rax + 0x1c0], xmm0
movaps xmm1, xmmword [0x1800548c0]
movups xmmword [rax + 0x1d0], xmm1
movaps xmm0, xmmword [0x1800547b0]
movups xmmword [rax + 0x1e0], xmm0
movaps xmm1, xmmword [0x1800547c0]
movups xmmword [rax + 0x1f0], xmm1
movaps xmm0, xmmword [0x1800548c0]
movups xmmword [rax + 0x200], xmm0
movaps xmm1, xmmword [0x180054870]
movups xmmword [rax + 0x260], xmm1
movaps xmm0, xmm1
movups xmmword [rax + 0x270], xmm1
movups xmmword [rax + 0x280], xmm1
movups xmmword [rax + 0x290], xmm1
movaps xmm1, xmmword [0x1800548b0]
movups xmmword [rax + 0x2f0], xmm1
movaps xmm0, xmmword [0x1800548e0]
movups xmmword [rax + 0x300], xmm0
call fcn.180012080
mov dword [rax + 0x6c], 0x41c80000
mov dword [rax + 0x74], 0x41700000
mov dword [rax + 0x7c], 0x41200000
mov dword [rax + 0x14], 0x3f800000
mov dword [rax + 0x30], 0x3f800000
mov dword [rax + 0x38], 0x3f800000
mov dword [rax + 0x10], 0x40800000
mov dword [rax + 0x2c], 0x40800000
mov dword [rax + 0x44], 0x40400000
mov dword [rax + 0x34], 0x40800000
mov dword [rax + 0x78], 0x41100000
mov dword [rax + 0x80], 0x40400000
mov dword [rax + 0x20], 0x3f000000
mov dword [rax + 0x24], 0x3f000000
cmp byte [rbx + 0x170], dil
je 0x180006840
mov eax, dword [0x18008b708]
cmp eax, 1
je 0x180005a67
cmp eax, 0xd
je 0x180005a67
add eax, 0xfffffffe
cmp eax, 1
ja 0x180006840
xor r8d, r8d
xor edx, edx
lea rcx, str.Lobby_Menu
call fcn.18000a6c0
test al, al
je 0x180005724
lea rdx, [0x180064072]
lea rcx, str.EmoteAll
call fcn.18003f160
lea rdx, [0x180064070]
lea rcx, str.AntiKick
call fcn.18003f160
lea rdx, [0x180064071]
lea rcx, str.AntiPassword
call fcn.18003f160
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.ForceStart
call fcn.18003e950
test al, al
je 0x180005611
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800070e0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005611
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.SetHost
call fcn.18003e950
test al, al
je 0x18000566d
call fcn.180007130
test rax, rax
je 0x18000566d
mov rdx, qword [0x18008b6f8]
add rdx, 0x1454a20
mov rcx, rax
call rdx
mov rdx, qword [0x18008b6f8]
add rdx, 0xbcbf50
mov rcx, rax
call rdx
mov r8, qword [0x18008ae08]
add r8, qword [0x18008b6f8]
mov rcx, rax
call r8
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.ForceHost
call fcn.18003e950
test al, al
je 0x1800056a9
mov rcx, qword [0x18008ae10]
add rcx, qword [0x18008b6f8]
call rcx
mov r8, qword [0x18008ae08]
add r8, qword [0x18008b6f8]
mov rcx, rax
call r8
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.UnlockALLSkins
call fcn.18003e950
test al, al
je 0x18000571f
mov rcx, qword [0x18008b6f8]
add rcx, 0x14fa306
lea r9, [rbp - 9]
mov edx, 2
lea r8d, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [0x18008b6f8]
mov byte [rax + 0x14fa306], 0x48
mov rax, qword [0x18008b6f8]
mov byte [rax + 0x14fa307], 1
mov rcx, qword [0x18008b6f8]
add rcx, 0x14fa306
lea r9, [rbp - 9]
mov r8d, dword [rbp - 9]
mov edx, 2
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
call fcn.18000f6d0
cmp dword [0x18008b708], 2
jne 0x180006840
xor r8d, r8d
xor edx, edx
lea rcx, str.Players
call fcn.18000a6c0
test al, al
je 0x180006840
mov r13, qword [0x180064088]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 0x19
jb 0x1800068a8
lea r12, [0x180064078]
cmp qword [0x180064090], 0x10
cmovae r12, qword [0x180064078]
mov qword [rbp - 1], rdi
mov qword [rbp + 0xf], rdi
mov qword [rbp + 0x17], rdi
lea r15, [r13 + 0x19]
mov ebx, 0xf
mov r14d, ebx
lea rsi, [rbp - 1]
cmp r15, rbx
jbe 0x18000581c
mov r14, r15
or r14, rbx
cmp r14, rcx
jbe 0x1800057b3
mov r14, rcx
jmp 0x1800057bf
mov eax, 0x16
cmp r14, rax
cmovb r14, rax
mov rcx, r14
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180005806
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800068ae
mov rcx, rax
call fcn.1800500c4
test rax, rax
je 0x180005a52
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180005818
test rcx, rcx
je 0x180005815
call fcn.1800500c4
mov rsi, rax
jmp 0x180005818
mov rsi, rdi
mov qword [rbp - 1], rsi
mov qword [rbp + 0xf], r15
mov qword [rbp + 0x17], r14
movups xmm0, xmmword [str.CurrentSelectedPlayerId:]
movups xmmword [rsi], xmm0
movsd xmm1, qword [0x1800546a0]
movsd qword [rsi + 0x10], xmm1
movzx eax, byte [0x1800546a8]
mov byte [rsi + 0x18], al
lea rcx, [rsi + 0x19]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], dil
lea rcx, [rbp - 1]
cmp qword [rbp + 0x17], 0x10
cmovae rcx, qword [rbp - 1]
call fcn.18004c650
call fcn.180048eb0
mov rax, qword [0x1800640d0]
mov rdx, qword [0x1800640c8]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x180005a0e
mov r15d, edi
mov r14, rdi
nop dword [rax]
nop dword [rax + rax]
mov rsi, qword [rdx + r14]
test rsi, rsi
je 0x1800059ed
mov qword [rbp - 9], 0
mov rcx, qword [rsi + 0x48]
test rcx, rcx
je 0x1800058fc
mov rax, qword [0x18008b6f8]
add rax, 0x480f50
call rax
test rax, rax
je 0x1800058fc
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x1800058fc
mov rax, qword [0x18008b6f8]
add rax, 0x4519680
call rax
lea rdx, [rbp - 0x39]
mov rcx, rax
call fcn.180002620
mov rax, qword [rbp - 0x21]
jmp 0x18000590f
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x29], rdi
mov rax, rbx
mov qword [rbp - 0x21], rbx
mov byte [rbp - 0x39], 0
lea rcx, [rbp - 0x39]
cmp rax, 0x10
cmovae rcx, qword [rbp - 0x39]
lea rdx, [rbp - 9]
call fcn.18003e950
movzx r12d, al
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x180005964
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000595f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005a59
call fcn.180050100
test r12b, r12b
je 0x1800059e6
mov rax, qword [0x18008b6f8]
add rax, 0x1459490
mov rcx, rsi
call rax
mov r8, qword [0x180064040]
add r8, qword [0x18008b6f8]
mov rcx, rax
call r8
lea rdx, [rbp - 0x39]
mov rcx, rax
call fcn.180002620
lea rdx, [rbp - 0x39]
lea rcx, [0x180064078]
call fcn.180004b70
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x1800059e6
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800059e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005a60
call fcn.180050100
mov rdx, qword [0x1800640c8]
inc r15d
add r14, 8
mov rcx, qword [0x1800640d0]
sub rcx, rdx
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x1800058a0
call fcn.18000f6d0
nop
mov rdx, qword [rbp + 0x17]
cmp rdx, 0x10
jb 0x180006840
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000683b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000683b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.18000a6c0
test al, al
je 0x180005bc4
lea rdx, [0x18008b9a1]
lea rcx, str.RainbowFlashlights
call fcn.18003f160
lea rdx, [0x18008b70c]
lea rcx, str.Enable_Snaplines
call fcn.18003f160
cmp byte [0x18008b70c], dil
je 0x180005b18
movss xmm1, dword [0x180054784]
xorps xmm0, xmm0
call fcn.18001daf0
mov r8d, 0x220
lea rdx, [0x180064098]
lea rcx, str.SnaplineColor
call fcn.1800400a0
lea rdx, [0x18008b9a0]
lea rcx, str.Rainbow
call fcn.18003f160
mov dword [rsp + 0x28], edi
lea rax, str.Line_Type:__i
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8d, [r9 - 1]
lea rdx, [0x18008ae60]
lea rcx, str.LineType
call fcn.180049920
mov r8d, 0x220
lea rdx, [0x1800640a8]
lea rcx, [0x180054468]
call fcn.1800400a0
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.SetAllFlashlightsColor
call fcn.18003e950
test al, al
je 0x180005b78
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004df0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005b78
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.SetLocalFlashlightColor
call fcn.18003e950
test al, al
je 0x180005bbf
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004e80]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005bbf
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.18000f6d0
xor r8d, r8d
xor edx, edx
lea rcx, str.PlayerControl
call fcn.18000a6c0
test al, al
je 0x180006544
xor edx, edx
lea rcx, str.tab1
call fcn.18003e470
test al, al
je 0x18000653f
xor r8d, r8d
xor edx, edx
lea rcx, str.Quick
call fcn.18003e8c0
test al, al
je 0x180005ea4
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.GiveInvincibility
call fcn.18003e950
test al, al
je 0x180005c5d
mov dword [0x18008b990], 0x1e
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005c5d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.TakeInvincibility
call fcn.18003e950
test al, al
je 0x180005cae
mov dword [0x18008b990], 0x1e
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005130]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005cae
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.TPHere
call fcn.18003e950
test al, al
je 0x180005cf5
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800081a0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005cf5
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.TPTo
call fcn.18003e950
test al, al
je 0x180005d3c
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180008280]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005d3c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Crash
call fcn.18003e950
test al, al
je 0x180005d83
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005110]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005d83
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.CrashOthers
call fcn.18003e950
test al, al
je 0x180005dca
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004f60]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005dca
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Kill
call fcn.18003e950
test al, al
je 0x180005e11
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180007590]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005e11
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.KillOthers
call fcn.18003e950
test al, al
je 0x180005e58
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800074a0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005e58
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.TPOthersHere
call fcn.18003e950
test al, al
je 0x180005e9f
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180008040]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005e9f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180044460
xor r8d, r8d
xor edx, edx
lea rcx, str.Buffs
call fcn.18003e8c0
test al, al
je 0x180006330
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.EnableGateControl
call fcn.18003e950
test al, al
je 0x180005f0e
mov dword [0x18008b990], 0x17
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005f0e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.DisableGateControl
call fcn.18003e950
test al, al
je 0x180005f5f
mov dword [0x18008b990], 0x17
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005130]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005f5f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.EnableNeighborDoorControl
call fcn.18003e950
test al, al
je 0x180005fb0
mov dword [0x18008b990], 0x21
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180005fb0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.DisableNeighborDoorControl
call fcn.18003e950
test al, al
je 0x180006001
mov dword [0x18008b990], 0x21
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005130]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006001
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Catch
call fcn.18003e950
test al, al
je 0x180006052
mov dword [0x18008b990], 3
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006052
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.StopCatch
call fcn.18003e950
test al, al
je 0x1800060a3
mov dword [0x18008b990], 3
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005130]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800060a3
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Knock
call fcn.18003e950
test al, al
je 0x1800060f4
mov dword [0x18008b990], 0xa
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800060f4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Revive
call fcn.18003e950
test al, al
je 0x180006145
mov dword [0x18008b990], 0xa
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005130]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006145
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Fear
call fcn.18003e950
test al, al
je 0x180006196
mov dword [0x18008b990], 0x34
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006196
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.ChaseFear
call fcn.18003e950
test al, al
je 0x1800061e7
mov dword [0x18008b990], 0x2e
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800061e7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Tomato
call fcn.18003e950
test al, al
je 0x180006238
mov dword [0x18008b990], 9
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Blind
call fcn.18003e950
test al, al
je 0x180006289
mov dword [0x18008b990], 0x1a
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006289
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Strength
call fcn.18003e950
test al, al
je 0x1800062da
mov dword [0x18008b990], 0x31
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800062da
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.SpeedUp
call fcn.18003e950
test al, al
je 0x18000632b
mov dword [0x18008b990], 0xe
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180004d50]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18000632b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180044460
xor r8d, r8d
xor edx, edx
lea rcx, str.EndMatch
call fcn.18003e8c0
test al, al
je 0x18000648e
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.END_Quest
call fcn.18003e950
test al, al
je 0x18000639a
mov dword [0x18008b990], 3
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800070a0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18000639a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.END_Children
call fcn.18003e950
test al, al
je 0x1800063eb
mov dword [0x18008b990], 1
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800070a0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800063eb
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.END_Neighbor
call fcn.18003e950
test al, al
je 0x180006438
mov dword [0x18008b990], edi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800070a0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006438
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.END_Time
call fcn.18003e950
test al, al
je 0x180006489
mov dword [0x18008b990], 2
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800070a0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006489
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180044460
xor r8d, r8d
xor edx, edx
lea rcx, str.Events
call fcn.18003e8c0
test al, al
je 0x18000653a
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Mayak
call fcn.18003e950
test al, al
je 0x1800064ee
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x1800051c0]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800064ee
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 9], rdi
lea rdx, [rbp - 9]
lea rcx, str.Rocket
call fcn.18003e950
test al, al
je 0x180006535
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r9, [0x180005210]
lea r8, [0x180008000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180006535
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180044460
call fcn.180044340
call fcn.18000f6d0
xor r8d, r8d
xor edx, edx
lea rcx, str.Players
call fcn.18000a6c0
test al, al
je 0x180006840
mov r15, qword [0x180064088]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x19
jb 0x1800068b4
lea r12, [0x180064078]
cmp qword [0x180064090], 0x10
cmovae r12, qword [0x180064078]
mov qword [rbp - 1], rdi
mov qword [rbp + 0xf], rdi
mov qword [rbp + 0x17], rdi
lea r14, [r15 + 0x19]
mov ebx, 0xf
lea rsi, [rbp - 1]
cmp r14, rbx
jbe 0x18000662d
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1800065c4
mov rbx, rcx
jmp 0x1800065d0
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180006617
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800068a2
mov rcx, rax
call fcn.1800500c4
test rax, rax
je 0x180006826
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180006629
test rcx, rcx
je 0x180006626
call fcn.1800500c4
mov rsi, rax
jmp 0x180006629
mov rsi, rdi
mov qword [rbp - 1], rsi
mov qword [rbp + 0xf], r14
mov qword [rbp + 0x17], rbx
movups xmm0, xmmword [str.CurrentSelectedPlayerId:]
movups xmmword [rsi], xmm0
movsd xmm1, qword [0x1800546a0]
movsd qword [rsi + 0x10], xmm1
movzx eax, byte [0x1800546a8]
mov byte [rsi + 0x18], al
lea rcx, [rsi + 0x19]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], dil
lea rcx, [rbp - 1]
cmp qword [rbp + 0x17], 0x10
cmovae rcx, qword [rbp - 1]
call fcn.18004c650
call fcn.180048eb0
mov rax, qword [0x1800640d0]
mov rdx, qword [0x1800640c8]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x1800067ee
mov rsi, rdi
mov rbx, qword [rdx + rsi]
test rbx, rbx
je 0x1800067ce
mov qword [rbp - 9], 0
mov rdx, qword [0x180064038]
add rdx, qword [0x18008b6f8]
mov rcx, rbx
call rdx
mov rcx, qword [rax + 0x20]
mov r8, qword [0x180064040]
add r8, qword [0x18008b6f8]
call r8
lea rdx, [rbp - 0x39]
mov rcx, rax
call fcn.180002620
nop
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rcx, qword [rbp - 0x39]
lea rdx, [rbp - 9]
call fcn.18003e950
movzx r14d, al
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x180006742
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000673d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000682d
call fcn.180050100
test r14b, r14b
je 0x1800067c7
mov r8, qword [0x180064038]
add r8, qword [0x18008b6f8]
mov rcx, rbx
call r8
mov rcx, qword [rax + 0x10]
mov r8, qword [0x180064040]
add r8, qword [0x18008b6f8]
call r8
lea rdx, [rbp - 0x39]
mov rcx, rax
call fcn.180002620
lea rdx, [rbp - 0x39]
lea rcx, [0x180064078]
call fcn.180004b70
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x1800067c7
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800067c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006834
call fcn.180050100
mov rdx, qword [0x1800640c8]
inc edi
add rsi, 8
mov rcx, qword [0x1800640d0]
sub rcx, rdx
sar rcx, 3
movsxd rax, edi
cmp rax, rcx
jb 0x1800066a2
call fcn.18000f6d0
nop
mov rdx, qword [rbp + 0x17]
cmp rdx, 0x10
jb 0x180006840
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000683b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000683b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180050100
lea rcx, [0x18008ac90]
call fcn.180007bd0
call fcn.18000fd40
call fcn.18001a5f0
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp - 0x11]
lea edx, [r9 + 1]
call qword [rax + 0x108]
call fcn.1800114d0
mov rcx, rax
call fcn.180033380
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1800505a0
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180002710
int3
call fcn.1800027c0
int3
call fcn.180002710
int3
call fcn.1800027c0
int3