Function at 0x18003c580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x268]
sub rsp, 0x330
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rax, qword [0x1800f3040]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x198], r8
mov r13, rdx
mov r12, rcx
xor edi, edi
mov esi, edi
mov dword [rsp + 0x5c], edi
movzx r15d, byte [0x1800f4566]
mov byte [rsp + 0x58], r15b
cmp qword [0x1800f4570], rsi
je 0x18003c600
cmp qword [0x1800f4578], rsi
je 0x18003c600
cmp qword [0x1800f4568], rsi
jne 0x18003c619
mov qword [rbp + 0x190], 0x32
lea rcx, [rbp + 0x190]
call fcn.180043c60
jmp 0x18003c5e5
mov ebx, 0x16
cmp byte [0x1800f4560], sil
je 0x18003c6d1
cmp byte [0x1800f4562], sil
jne 0x18003c6d1
mov byte [0x1800f4562], 1
lea rcx, [0x1800b3ac0]
call fcn.180038160
lea rcx, [0x1800b3ac0]
call fcn.18003a6f0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, ebx
lea rdx, str.Loaded_default_config_
lea rcx, [rbp + 0xe0]
call fcn.1800346e0
nop
lea rcx, [rbp + 0xe0]
call fcn.18009e1f0
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x18003c6d1
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003c6cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003d44a
call fcn.1800a0984
cmp byte [0x1800f4858], 0
je 0x18003cdf0
mov byte [0x1800f4858], 0
mov rsi, qword [0x1800f4738]
mov qword [rsp + 0x50], rsi
mov rdi, qword [0x1800f4ad8]
lea r13, [0x1800f4ac8]
mov rbx, r13
cmp qword [0x1800f4ae0], 0xf
cmova rbx, qword [0x1800f4ac8]
call fcn.18009fce4
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rdi
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.180032970
nop
lea rcx, [rbp - 0x80]
call fcn.180034080
movzx ebx, al
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x18003c77e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003c779
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003c779
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a0984
test bl, bl
jne 0x18003cb7f
call fcn.18009fce4
lea rcx, str.C:_Windows_Fonts_
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], 0x11
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp + 0x100]
call fcn.180032970
mov dword [rsp + 0x5c], 0xf00000
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x1b0]
call fcn.180043610
test eax, eax
jne 0x18003e4f9
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x18003c82a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003c825
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003c825
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a0984
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov rbx, qword [rbp + 0x1b8]
test rbx, rbx
je 0x18003c84b
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x1b8]
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x1c0], xmm0
test rbx, rbx
je 0x18003c86a
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x1b8]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d0], xmm1
mov rdi, 0xffffffffffffffff
test rbx, rbx
je 0x18003c8c1
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18003c8ba
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18003c8ba
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
jmp 0x18003c8c1
mov rbx, qword [rbp + 0x1b8]
cmp qword [rbp + 0x1b0], 0
je 0x18003cb01
mov rsi, qword [rbp + 0x1c0]
lea r14, str..ttf
call fcn.18009fce4
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], 4
lea r8, [rbp + 0xb0]
mov edx, eax
lea rcx, [rbp + 0x88]
call fcn.180032970
or dword [rsp + 0x5c], 0x6000
lea r15, [rsi + 0x20]
lea rdx, [rbp + 0x120]
mov rcx, r15
call fcn.180033010
lea rcx, [rbp + 0x88]
mov rsi, qword [rbp + 0x88]
mov r14, qword [rbp + 0xa0]
cmp r14, 7
cmova rcx, rsi
mov qword [rbp + 0xc0], rcx
mov rcx, qword [rbp + 0x98]
mov qword [rbp + 0xc8], rcx
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
mov rcx, rax
call fcn.180032e00
mov r12d, eax
mov rdx, qword [rbp + 0x138]
cmp rdx, 7
jbe 0x18003c9cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003c9b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ca43
call fcn.1800a0984
mov r14, qword [rbp + 0xa0]
mov rsi, qword [rbp + 0x88]
xor eax, eax
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], ax
cmp r14, 7
jbe 0x18003ca1d
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18003ca15
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ca4a
mov rcx, rsi
call fcn.1800a0984
test r12d, r12d
je 0x18003ca51
lea rcx, [rbp + 0x1c0]
call fcn.180033f30
mov rsi, qword [rbp + 0x1c0]
test rsi, rsi
je 0x18003caf6
jmp 0x18003c8d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
cmp qword [r15 + 0x18], 7
jbe 0x18003ca5e
mov rcx, qword [r15]
mov rax, qword [r15 + 0x10]
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], rax
call fcn.18009fce4
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x150], xmm0
lea r8, [rbp + 0x150]
mov edx, eax
lea rcx, [rbp + 0x160]
call fcn.1800461e0
mov rdx, qword [0x1800f4ae0]
cmp rdx, 0xf
jbe 0x18003cada
mov rcx, qword [0x1800f4ac8]
inc rdx
cmp rdx, 0x1000
jb 0x18003cad5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18003cc40
mov rcx, r8
call fcn.1800a0984
movups xmm0, xmmword [rbp + 0x160]
movups xmmword [0x1800f4ac8], xmm0
movups xmm1, xmmword [rbp + 0x170]
movups xmmword [0x1800f4ad8], xmm1
movzx r15d, byte [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x18003cb48
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18003cb41
mov rbx, qword [rbp + 0x1c8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18003cb41
mov rcx, qword [rbp + 0x1c8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x1b8]
test rbx, rbx
je 0x18003cb7f
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18003cb7f
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x18003cb7f
mov rcx, qword [rbp + 0x1b8]
mov rax, qword [rcx]
call qword [rax + 8]
movss xmm2, dword [0x1800f30b4]
mulss xmm2, dword [0x1800da2a8]
mov rdx, r13
cmp qword [0x1800f4ae0], 0xf
cmova rdx, qword [0x1800f4ac8]
mov rcx, qword [rsi + 0x38]
call fcn.180080e20
mov qword [0x1800f4570], rax
movss xmm2, dword [0x1800f30b4]
mulss xmm2, dword [0x1800da2b8]
mov rdx, r13
cmp qword [0x1800f4ae0], 0xf
cmova rdx, qword [0x1800f4ac8]
mov rcx, qword [rsi + 0x38]
call fcn.180080e20
mov qword [0x1800f4578], rax
movss xmm2, dword [0x1800f30b4]
mulss xmm2, dword [0x1800da2ac]
mov rdx, r13
cmp qword [0x1800f4ae0], 0xf
cmova rdx, qword [0x1800f4ac8]
mov rcx, qword [rsi + 0x38]
call fcn.180080e20
mov qword [0x1800f4568], rax
mov rcx, qword [rsi + 0x38]
call fcn.180081540
test r15b, r15b
je 0x18003cc57
call fcn.1800880e0
mov rax, qword [0x1800f4738]
test rax, rax
je 0x18003cc47
mov rcx, qword [rax + 0x98]
jmp 0x18003cc49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
cmp qword [rcx + 0x48], 0
jne 0x18003cc7f
call fcn.180087ce0
jmp 0x18003cc7f
call fcn.180086c00
mov rax, qword [0x1800f4738]
test rax, rax
je 0x18003cc71
mov rcx, qword [rax + 0x98]
jmp 0x18003cc73
xor ecx, ecx
cmp qword [rcx + 0x40], 0
jne 0x18003cc7f
call fcn.180086830
call fcn.180088dd0
call fcn.18005fd50
mov rsi, qword [0x1800f4ad8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x17
jb 0x18003e4ed
cmp qword [0x1800f4ae0], 0xf
cmova r13, qword [0x1800f4ac8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rdi, [rsi + 0x17]
mov r14d, 0xf
lea rbx, [rsp + 0x60]
cmp rdi, r14
jbe 0x18003cd5a
mov r14, rdi
or r14, 0xf
cmp r14, rcx
jbe 0x18003cd1b
mov r14, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a0500
test rax, rax
je 0x18003d44a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18003cd55
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x18003cd44
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18003e4f3
jmp 0x18003ccfc
test rcx, rcx
je 0x18003cd53
call fcn.1800a0500
mov rbx, rax
jmp 0x18003cd55
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [str.Changed_client_font_to]
movups xmmword [rbx], xmm0
mov eax, dword [0x1800b3af0]
mov dword [rbx + 0x10], eax
movzx eax, word [0x1800b3af4]
mov word [rbx + 0x14], ax
movzx eax, byte [0x1800b3af6]
mov byte [rbx + 0x16], al
lea rcx, [rbx + 0x17]
mov r8, rsi
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
lea rcx, [rsp + 0x60]
call fcn.18009e1f0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x18003e4af
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003cde6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003d44a
call fcn.1800a0984
jmp 0x18003e4af
mov rax, qword [0x1800f4590]
test rax, rax
je 0x18003ce14
mov rax, qword [rax + 0x30]
cmp byte [rax + 0x50], 0
je 0x18003ce14
cmp byte [0x1800f4dc8], 0
je 0x18003ce14
call fcn.180035e00
mov rax, qword [0x1800f4738]
test r15b, r15b
je 0x18003ce3f
test rax, rax
je 0x18003ce2e
mov rcx, qword [rax + 0x98]
jmp 0x18003ce31
mov rcx, rdi
cmp qword [rcx + 0x48], 0
jne 0x18003ce5c
call fcn.180087ce0
jmp 0x18003ce5c
test rax, rax
je 0x18003ce4d
mov rcx, qword [rax + 0x98]
jmp 0x18003ce50
mov rcx, rdi
cmp qword [rcx + 0x40], 0
jne 0x18003ce5c
call fcn.180086830
call fcn.180088dd0
call fcn.18005fd50
mov rcx, qword [0x1800f4570]
call fcn.180068240
mov r14d, 0xf
xorps xmm9, xmm9
movss xmm7, dword [0x1800da33c]
cmp byte [0x1800f4561], 0
je 0x18003d4dc
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], r14
mov byte [rbp - 0x60], 0
mov dword [rsp + 0x5c], 0x2000000
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov rbx, rdi
mov rcx, qword [0x1800f4c78]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x18003cf26
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x18003cf1f
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rsi, rax
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rdi, rax
mov rbx, qword [0x1800f4c70]
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
cmp rdi, rbx
cmovb rdi, rbx
sub rdi, rsi
mov rbx, rsi
jmp 0x18003cf6e
mov rcx, qword [0x1800f4c78]
test cl, 4
jne 0x18003cfb2
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x18003cf69
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rsi, rax
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rdi, rax
sub rdi, rsi
mov rbx, rsi
jmp 0x18003cf6e
mov rsi, qword [rsp + 0x60]
test rbx, rbx
je 0x18003cfb0
mov rax, qword [rbp - 0x48]
cmp rdi, rax
ja 0x18003cfa1
lea rbx, [rbp - 0x60]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x60]
mov qword [rbp - 0x50], rdi
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18003cfb0
mov r9, rsi
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.180044a60
xor edi, edi
mov esi, 0x1000000
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rcx, qword [rbp - 0x60]
xor r8d, r8d
xor edx, edx
call fcn.1800656d0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18003d00e
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003d009
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003d009
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a0984
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.General
call fcn.18008c630
test al, al
je 0x18003d032
mov dword [0x1800f30b0], edi
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Combat
call fcn.18008c630
test al, al
je 0x18003d065
mov dword [0x1800f30b0], 1
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Visual
call fcn.18008c630
test al, al
je 0x18003d098
mov dword [0x1800f30b0], 2
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Movement
call fcn.18008c630
test al, al
je 0x18003d0cb
mov dword [0x1800f30b0], 3
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Player
call fcn.18008c630
test al, al
je 0x18003d0fe
mov dword [0x1800f30b0], 4
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Exploit
call fcn.18008c630
test al, al
je 0x18003d131
mov dword [0x1800f30b0], 5
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Configs
call fcn.18008c630
test al, al
je 0x18003d164
mov dword [0x1800f30b0], 6
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Settings
call fcn.18008c630
test al, al
je 0x18003d19a
mov eax, 7
mov dword [0x1800f30b0], eax
jmp 0x18003d1a0
mov eax, dword [0x1800f30b0]
cmp eax, 7
ja case.default.0x18003d1bd
cdqe
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x3e508]
add rcx, r8
jmp rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 7
lea rdx, str.General
lea rcx, [rbp - 0x80]
call fcn.1800346e0
nop
mov rdi, qword [0x1800fa138]
mov rbx, qword [0x1800fa130]
cmp rbx, rdi
je 0x18003d217
nop dword [rax + rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 1
jne 0x18003d20e
call fcn.1800408b0
add rbx, 8
cmp rbx, rdi
jne 0x18003d200
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18003d4d7
inc rdx
mov rcx, qword [rbp - 0x80]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18003d251
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003d44a
call fcn.1800a0984
jmp 0x18003d4d7
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Combat
lea rcx, [rbp - 0x80]
call fcn.1800346e0
nop
mov rdi, qword [0x1800fa138]
mov rbx, qword [0x1800fa130]
cmp rbx, rdi
je 0x18003d2ab
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 2
jne 0x18003d2a2
call fcn.1800408b0
add rbx, 8
cmp rbx, rdi
jne 0x18003d294
jmp 0x18003d217
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Visual
lea rcx, [rbp - 0x80]
call fcn.1800346e0
nop
mov rdi, qword [0x1800fa138]
mov rbx, qword [0x1800fa130]
cmp rbx, rdi
je 0x18003d307
nop dword [rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 3
jne 0x18003d2fe
call fcn.1800408b0
add rbx, 8
cmp rbx, rdi
jne 0x18003d2f0
jmp 0x18003d217
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 8
lea rdx, str.Movement
lea rcx, [rbp - 0x80]
call fcn.1800346e0
nop
mov rdi, qword [0x1800fa138]
mov rbx, qword [0x1800fa130]
cmp rbx, rdi
je 0x18003d35c
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 4
jne 0x18003d353
call fcn.1800408b0
add rbx, 8
cmp rbx, rdi
jne 0x18003d345
jmp 0x18003d217
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Player
lea rcx, [rbp - 0x80]
call fcn.1800346e0
nop
mov rdi, qword [0x1800fa138]
mov rbx, qword [0x1800fa130]
cmp rbx, rdi
je 0x18003d3b7
nop word [rax + rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 5
jne 0x18003d3ae
call fcn.1800408b0
add rbx, 8
cmp rbx, rdi
jne 0x18003d3a0
jmp 0x18003d217
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 7
lea rdx, str.Exploit
lea rcx, [rbp - 0x80]
call fcn.1800346e0
nop
mov rdi, qword [0x1800fa138]
mov rbx, qword [0x1800fa130]
cmp rbx, rdi
je 0x18003d40c
mov rcx, qword [rbx]
cmp dword [rcx + 0x40], 6
jne 0x18003d403
call fcn.1800408b0
add rbx, 8
cmp rbx, rdi
jne 0x18003d3f5
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18003d4d7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003d251
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003d251
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003ee70
jmp 0x18003d4d7
movzx ecx, r15b
call fcn.18003e530
jmp 0x18003d4d7
lea rcx, str.Welcome_to_Boykisser_Central__official_version___Happy_Modding_
call fcn.18008bd20
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
movaps xmm4, xmmword [0x1800da500]
movups xmmword [rsp + 0x60], xmm4
lea rdx, [0x1800b3b80]
lea rcx, [rsp + 0x60]
call fcn.18008bd90
lea rcx, str.For_support_join
call fcn.18008bd20
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18006b910
movaps xmm4, xmmword [0x1800da500]
movups xmmword [rsp + 0x60], xmm4
lea rdx, [0x1800b32c1]
lea rcx, [rsp + 0x60]
call fcn.18008bd90
lea rcx, str.Please_select_a_category_above_to_use_the_menu...
call fcn.18008bd20
call fcn.180067ae0
mov rax, qword [0x1800f4650]
test rax, rax
je 0x18003d5e0
mov rax, qword [rax + 0x30]
cmp byte [rax + 0x50], 0
je 0x18003d5d1
lea r15, [0x1800f9a60]
mov qword [rbp + 0x190], r15
mov rcx, r15
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x18003d521
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x1800f9aac]
cmp eax, 0x7fffffff
jne 0x18003d542
dec eax
mov dword [0x1800f9aac], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rdi, qword [0x1800f5388]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18003d5a0
lea rcx, [rbx + 0x10]
cmp qword [0x1800f45d0], 0
je 0x18003d5c8
lea rdx, [rcx + 0x18]
movss xmm0, dword [rcx + 0x3c]
movss dword [rsp + 0x30], xmm0
movzx eax, byte [rcx + 0x38]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], rdx
mov r9d, dword [rcx + 0x14]
movss xmm2, dword [rcx + 0x10]
movss xmm1, dword [rcx + 0xc]
call fcn.18004ecd0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
jne 0x18003d551
mov rdi, qword [0x1800f5388]
mov rdx, rdi
call fcn.180054dd0
mov rax, qword [0x1800f5388]
mov qword [rax], rax
mov rax, qword [0x1800f5388]
mov qword [rax + 8], rax
mov qword [0x1800f5390], 0
mov rcx, r15
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp qword [0x1800f4638], 0
je 0x18003d5e0
call fcn.1800498a0
mov rdi, qword [0x1800f7b20]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18003d611
nop
mov rcx, qword [rbx + 0x10]
mov rax, qword [rcx + 0x30]
cmp byte [rax + 0x50], 0
je 0x18003d606
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x10]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
jne 0x18003d5f0
call fcn.1800682e0
mov rcx, qword [0x1800f4578]
call fcn.180068240
mov rax, qword [0x1800f4738]
movss xmm8, dword [rax + 0x3d38]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xor edi, edi
mov qword [rbp - 0x50], rdi
mov rcx, r14
mov qword [rbp - 0x48], rcx
mov byte [rbp - 0x60], dil
or esi, 8
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f4c78]
mov edx, edi
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003d69f
mov rax, qword [0x1800f4c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003d69f
mov rax, qword [0x1800f4c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f4c70]
cmovb rbx, qword [0x1800f4c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003d6db
test r8b, 4
jne 0x18003d70b
mov rax, qword [0x1800f4c40]
mov r8, qword [rax]
mov rbx, rdi
test r8, r8
je 0x18003d6d6
mov rax, qword [0x1800f4c20]
mov r9, qword [rax]
mov rax, qword [0x1800f4c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003d6db
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003d70b
cmp rbx, rcx
lea rcx, [rbp - 0x60]
ja 0x18003d6ff
mov qword [rbp - 0x50], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x60], dil
jmp 0x18003d707
mov rdx, rbx
call fcn.180044a60
mov rcx, qword [rbp - 0x48]
and esi, 0xfffffff7
or esi, 4
lea rdx, [rbp - 0x60]
mov r8, qword [rbp - 0x60]
cmp rcx, 0xf
cmova rdx, r8
mov rax, qword [0x1800f4738]
movss xmm6, dword [rax + 0x3d38]
test rdx, rdx
jne 0x18003d73b
movaps xmm7, xmm9
jmp 0x18003d793
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdx
movss dword [rsp + 0x20], xmm7
movss xmm3, dword [0x1800da32c]
movaps xmm2, xmm6
lea rdx, [rsp + 0x50]
mov rcx, qword [rax + 0x3d30]
call fcn.180084250
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x1800da224]
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss xmm6, dword [rsp + 0x54]
mov rcx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x60]
cmp rcx, 0xf
jbe 0x18003d7cd
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003d7c5
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003d7c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a0984
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], r14
mov byte [rbp - 0x60], 0
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
movss xmm1, dword [0x1800da290]
addss xmm6, xmm1
addss xmm7, dword [0x1800da29c]
movss dword [rsp + 0x50], xmm7
movss dword [rsp + 0x54], xmm6
mov dword [rbp + 0x190], 0x40a00000
mov dword [rbp + 0x194], 0x40a00000
mov dword [rsp + 0x28], edi
movss dword [rsp + 0x20], xmm1
mov r9d, dword [0x1800d93a0]
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x190]
mov rcx, rax
call fcn.18007ff00
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rdi
mov r8, r14
mov qword [rbp - 0x28], r14
mov byte [rbp - 0x40], 0
or esi, 2
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov edx, dword [0x1800f4c78]
mov rcx, rdi
mov eax, edx
and al, 0x22
cmp al, 2
je 0x18003d8dd
mov rax, qword [0x1800f4c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003d8dd
mov rax, qword [0x1800f4c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f4c70]
cmovb rbx, qword [0x1800f4c70]
sub rbx, r9
mov rcx, r9
jmp 0x18003d918
test dl, 4
jne 0x18003d948
mov rax, qword [0x1800f4c40]
mov rdx, qword [rax]
mov rbx, rdi
test rdx, rdx
je 0x18003d913
mov rax, qword [0x1800f4c20]
mov r9, qword [rax]
mov rax, qword [0x1800f4c58]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x18003d918
mov r9, qword [rsp + 0x60]
test rcx, rcx
je 0x18003d948
lea rcx, [rbp - 0x40]
cmp rbx, r14
ja 0x18003d93c
mov qword [rbp - 0x30], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x40], 0
jmp 0x18003d944
mov rdx, rbx
call fcn.180044a60
mov r8, qword [rbp - 0x28]
and esi, 0xfffffffd
or esi, 1
lea rdx, [rbp - 0x40]
mov rcx, qword [rbp - 0x40]
cmp r8, 0xf
cmova rdx, rcx
mov dword [rbp + 0x190], 0x41100000
mov dword [rbp + 0x194], 0x40800000
movaps xmm2, xmm8
mov rdi, 0xffffffffffffffff
mov rax, rdi
inc rax
cmp byte [rdx + rax], 0
jne 0x18003d980
add rax, rdx
cmp rdx, rax
je 0x18003d9f2
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003d9a2
jne 0x18003d9a2
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084660
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
cmp r8, 0xf
jbe 0x18003da29
lea rdx, [r8 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003da24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003da24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a0984
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x28], r14
mov byte [rbp - 0x40], 0
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
mov rcx, r14
mov qword [rbp - 8], rcx
mov byte [rbp - 0x20], 0
or esi, 0x20
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f4c78]
xor edx, edx
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003daca
mov rax, qword [0x1800f4c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003daca
mov rax, qword [0x1800f4c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f4c70]
cmovb rbx, qword [0x1800f4c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003db05
test r8b, 4
jne 0x18003db35
mov rax, qword [0x1800f4c40]
mov r8, qword [rax]
xor ebx, ebx
test r8, r8
je 0x18003db00
mov rax, qword [0x1800f4c20]
mov r9, qword [rax]
mov rax, qword [0x1800f4c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003db05
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003db35
cmp rbx, rcx
lea rcx, [rbp - 0x20]
ja 0x18003db29
mov qword [rbp - 0x10], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x20], 0
jmp 0x18003db31
mov rdx, rbx
call fcn.180044a60
mov rcx, qword [rbp - 8]
and esi, 0xffffffdf
or esi, 0x10
lea rdx, [rbp - 0x20]
mov r8, qword [rbp - 0x20]
cmp rcx, 0xf
cmova rdx, r8
mov dword [rbp + 0x190], 0x41100000
mov dword [rbp + 0x194], 0x40c00000
movaps xmm2, xmm8
mov rax, rdi
inc rax
cmp byte [rdx + rax], 0
jne 0x18003db66
add rax, rdx
cmp rdx, rax
je 0x18003dbd8
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003db88
jne 0x18003db88
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084660
mov rcx, qword [rbp - 8]
mov r8, qword [rbp - 0x20]
cmp rcx, 0xf
jbe 0x18003dc12
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003dc0a
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003dc0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a0984
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], r14
mov byte [rbp - 0x20], 0
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], 0
mov rcx, r14
mov qword [rbp + 0x18], rcx
mov byte [rbp], 0
bts esi, 9
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f4c78]
xor edx, edx
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003dcb4
mov rax, qword [0x1800f4c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003dcb4
mov rax, qword [0x1800f4c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f4c70]
cmovb rbx, qword [0x1800f4c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003dcef
test r8b, 4
jne 0x18003dd1f
mov rax, qword [0x1800f4c40]
mov r8, qword [rax]
xor ebx, ebx
test r8, r8
je 0x18003dcea
mov rax, qword [0x1800f4c20]
mov r9, qword [rax]
mov rax, qword [0x1800f4c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003dcef
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003dd1f
cmp rbx, rcx
lea rcx, [rbp]
ja 0x18003dd13
mov qword [rbp + 0x10], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx], 0
jmp 0x18003dd1b
mov rdx, rbx
call fcn.180044a60
mov rcx, qword [rbp + 0x18]
btr esi, 9
bts esi, 8
lea rdx, [rbp]
mov r8, qword [rbp]
cmp rcx, 0xf
cmova rdx, r8
mov dword [rbp + 0x190], 0x41300000
mov dword [rbp + 0x194], 0x40800000
movaps xmm2, xmm8
mov rax, rdi
inc rax
cmp byte [rdx + rax], 0
jne 0x18003dd52
add rax, rdx
cmp rdx, rax
je 0x18003ddc4
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003dd74
jne 0x18003dd74
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084660
mov rcx, qword [rbp + 0x18]
mov r8, qword [rbp]
cmp rcx, 0xf
jbe 0x18003ddfe
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003ddf6
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003ddf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a0984
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x18], r14
mov byte [rbp], 0
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 0
mov rcx, r14
mov qword [rbp + 0x38], rcx
mov byte [rbp + 0x20], 0
bts esi, 7
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov r8d, dword [0x1800f4c78]
xor edx, edx
mov eax, r8d
and al, 0x22
cmp al, 2
je 0x18003dea0
mov rax, qword [0x1800f4c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003dea0
mov rax, qword [0x1800f4c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f4c70]
cmovb rbx, qword [0x1800f4c70]
sub rbx, r9
mov rdx, r9
jmp 0x18003dedb
test r8b, 4
jne 0x18003df0b
mov rax, qword [0x1800f4c40]
mov r8, qword [rax]
xor ebx, ebx
test r8, r8
je 0x18003ded6
mov rax, qword [0x1800f4c20]
mov r9, qword [rax]
mov rax, qword [0x1800f4c58]
movsxd rbx, dword [rax]
add rbx, r8
sub rbx, r9
mov rdx, r9
jmp 0x18003dedb
mov r9, qword [rsp + 0x60]
test rdx, rdx
je 0x18003df0b
cmp rbx, rcx
lea rcx, [rbp + 0x20]
ja 0x18003deff
mov qword [rbp + 0x30], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x20], 0
jmp 0x18003df07
mov rdx, rbx
call fcn.180044a60
mov rcx, qword [rbp + 0x38]
btr esi, 7
or esi, 0x40
lea rdx, [rbp + 0x20]
mov r8, qword [rbp + 0x20]
cmp rcx, 0xf
cmova rdx, r8
mov dword [rbp + 0x190], 0x41300000
mov dword [rbp + 0x194], 0x40c00000
movaps xmm2, xmm8
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x18003df40
add rax, rdx
cmp rdx, rax
je 0x18003dfb2
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003df62
jne 0x18003df62
movss xmm2, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x80000000
lea r9, [rbp + 0x190]
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084660
mov rcx, qword [rbp + 0x38]
mov r8, qword [rbp + 0x20]
cmp rcx, 0xf
jbe 0x18003dfec
lea rdx, [rcx + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x18003dfe4
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003dfe4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.1800a0984
xor ebx, ebx
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], r14
mov byte [rbp + 0x20], bl
mov rax, qword [0x1800f4590]
test rax, rax
je 0x18003e242
mov rax, qword [rax + 0x30]
cmp byte [rax + 0x50], bl
je 0x18003e242
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], r14
mov byte [rbp + 0x40], bl
bts esi, 0x13
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
xor esi, esi
mov ebx, esi
mov rcx, qword [0x1800f4c78]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x18003e0cd
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x18003e0c6
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov r14, rax
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rsi, rax
mov rbx, qword [0x1800f4c70]
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
cmp rsi, rbx
cmovb rsi, rbx
sub rsi, r14
mov rbx, r14
jmp 0x18003e115
mov rcx, qword [0x1800f4c78]
test cl, 4
jne 0x18003e159
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x18003e110
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov r14, rax
lea rcx, [0x1800f4c08]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rsi, rax
sub rsi, r14
mov rbx, r14
jmp 0x18003e115
mov r14, qword [rsp + 0x60]
test rbx, rbx
je 0x18003e157
mov rax, qword [rbp + 0x58]
cmp rsi, rax
ja 0x18003e148
lea rbx, [rbp + 0x40]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x40]
mov qword [rbp + 0x50], rsi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x18003e157
mov r9, r14
mov rdx, rsi
lea rcx, [rbp + 0x40]
call fcn.180044a60
xor esi, esi
lea rbx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rbx, qword [rbp + 0x40]
movss xmm1, dword [0x1800f472c]
call fcn.1800348e0
mov edx, eax
mov dword [rbp + 0x190], 0x41200000
mov dword [rbp + 0x194], 0x40a00000
test eax, 0xff000000
je 0x18003e1fd
inc rdi
cmp byte [rbx + rdi], 0
jne 0x18003e191
add rdi, rbx
cmp rbx, rdi
je 0x18003e1fd
mov rax, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e1b4
jne 0x18003e1b4
movss xmm8, dword [rax + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x190]
movaps xmm2, xmm8
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180084660
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x18003e41a
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e415
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e415
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [0x1800f4738]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.18005f400
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], r14
mov byte [rbp + 0x60], 0
bts esi, 0xc
mov dword [rsp + 0x5c], esi
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov edx, dword [0x1800f4c78]
xor esi, esi
mov ecx, esi
mov eax, edx
and al, 0x22
cmp al, 2
je 0x18003e2cd
mov rax, qword [0x1800f4c48]
mov rbx, qword [rax]
test rbx, rbx
je 0x18003e2cd
mov rax, qword [0x1800f4c28]
mov r9, qword [rax]
cmp rbx, qword [0x1800f4c70]
cmovb rbx, qword [0x1800f4c70]
sub rbx, r9
mov rcx, r9
jmp 0x18003e308
test dl, 4
jne 0x18003e339
mov rax, qword [0x1800f4c40]
mov rdx, qword [rax]
mov rbx, rsi
test rdx, rdx
je 0x18003e303
mov rax, qword [0x1800f4c20]
mov r9, qword [rax]
mov rax, qword [0x1800f4c58]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x18003e308
mov r9, qword [rsp + 0x60]
test rcx, rcx
je 0x18003e339
lea rcx, [rbp + 0x60]
cmp rbx, 0xf
ja 0x18003e32d
mov qword [rbp + 0x70], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x60], sil
jmp 0x18003e335
mov rdx, rbx
call fcn.180044a60
mov r14, qword [rbp + 0x78]
lea rax, [rbp + 0x60]
mov rcx, qword [rbp + 0x60]
cmp r14, 0xf
cmova rax, rcx
mov dword [rbp + 0x190], 0x41200000
mov dword [rbp + 0x194], 0x40a00000
mov edx, dword [0x1800d93a4]
test edx, 0xff000000
je 0x18003e3e3
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x18003e370
add rdi, rax
cmp rax, rdi
je 0x18003e3e3
mov rcx, qword [r15 + 0x38]
ucomiss xmm8, xmm9
jp 0x18003e393
jne 0x18003e393
movss xmm8, dword [rcx + 0x10]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x190]
movaps xmm2, xmm8
mov rdx, r15
mov rcx, qword [rcx + 8]
call fcn.180084660
mov r14, qword [rbp + 0x78]
mov rcx, qword [rbp + 0x60]
cmp r14, 0xf
jbe 0x18003e41a
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e415
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003e415
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a0984
call fcn.1800682e0
call fcn.180061e20
xor r9d, r9d
lea edx, [r9 + 1]
cmp byte [rsp + 0x58], r9b
je 0x18003e473
mov qword [rbp + 0x190], r12
mov rcx, qword [rbp + 0x198]
mov rax, qword [rcx]
lea r8, [rbp + 0x190]
call qword [rax + 0x108]
mov rax, qword [0x1800f4738]
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, rsi
call fcn.1800870c0
jmp 0x18003e4af
mov qword [rbp + 0x198], r12
mov rax, qword [r13]
lea r8, [rbp + 0x198]
mov rcx, r13
call qword [rax + 0xc0]
mov rax, qword [0x1800f4738]
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, rsi
call fcn.180085d70
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.1800a04e0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180031ac0
int3
call fcn.180031a20
nop
lea r8, [rbp + 0x100]
mov edx, eax
call fcn.180033ae0
int3