Function at 0x180034840
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call
Log keystrokes via polling
Open clipboard
Write clipboard data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
mov rax, qword [0x18004d040]
xor rax, rsp
mov qword [rbp + 0x120], rax
xor r15d, r15d
mov esi, r15d
mov dword [rsp + 0x40], r15d
lea rdx, str.CryLog
lea rcx, [rbp + 0x78]
call fcn.180039c60
mov rcx, rax
call fcn.18003bd40
mov rdi, qword [0x18004e190]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x180034949
lea rdx, [rbx + 0x10]
lea rcx, [rbp + 0x58]
call fcn.180039d80
nop
lea rcx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rcx, qword [rbp + 0x58]
xor edx, edx
mov r8d, 1
call fcn.180028590
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x180034941
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003493c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800349a1
call fcn.18003c264
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1800348e0
call fcn.18000e500
movabs r13, 0xfffffffffffe
mov rbx, qword [0x18004e188]
test rbx, rbx
je 0x180034a96
mov rcx, qword [0x18004e288]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rdi, rax
test rax, rax
je 0x180034a96
mov rdx, qword [rbx]
mov rax, qword [rdx + 8]
lea rdx, [rax - 1]
cmp rdx, r13
ja 0x1800349a8
mov rcx, rbx
call rax
mov rdx, rax
jmp 0x1800349ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r15
mov rax, qword [rdi]
mov r8, qword [rax + 0x18]
mov rcx, rdi
call r8
test rax, rax
je 0x180034a96
mov rcx, qword [rax]
mov r8, qword [rcx + 0x238]
xor edx, edx
mov rcx, rax
call r8
mov rdi, rax
test rax, rax
je 0x180034a96
mov rcx, rax
call fcn.180032ba0
mov r14, rax
test rax, rax
je 0x180034a96
lea rdx, [rbp + 0x78]
mov rcx, rdi
call fcn.180032b70
nop
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0xc0]
call fcn.180039d80
mov rcx, rax
call fcn.180039c00
mov rbx, rax
lea rcx, [rbp + 0xc0]
call fcn.180001e10
cmp rbx, 0xffffffffffffffff
je 0x180034a8d
mov rcx, rdi
call fcn.180032ba0
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx + 0x18]
mov dword [rax + 0x28], r15d
mov dword [rax + 0x30], r15d
mov dword [rax + 8], 0x461c3c00
mov ecx, 0x46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180034a8d
movd xmm0, dword [0x18004d0a8]
cvtdq2ps xmm0, xmm0
call fcn.180034580
mov qword [0x18004dd80], rax
test rax, rax
je 0x180034a86
mov rax, qword [r14]
mov rdx, qword [rax + 0x60]
mov rcx, r14
call rdx
jmp 0x180034a8d
mov qword [0x18004dd80], r15
lea rcx, [rbp + 0x78]
call fcn.180001e10
xor r8d, r8d
xor edx, edx
lea rcx, str.Main_Menu
call fcn.18000c230
lea rdx, [0x18004d0a1]
lea rcx, [0x18004455c]
call fcn.18002a360
lea rdx, [0x18004d0ac]
lea rcx, [0x180044560]
call fcn.18002a360
lea rdx, [0x18004d0a3]
lea rcx, str.Show_infect_window
call fcn.18002a360
lea rdx, [0x18004dd61]
lea rcx, str.TP_to_Blood
call fcn.18002a360
mov dword [rbp + 0x10], 0x64
mov dword [rbp + 8], 1
mov dword [rsp + 0x30], r15d
lea rax, [0x18003fb04]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 8]
lea r8, [0x18004d0a8]
mov edx, 4
lea rcx, str.Aim_FOV
call fcn.18002af10
mov dword [rsp + 0x30], 0x20000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [0x18004d0a4]
mov edx, 8
lea rcx, str.Aim_Speed
call fcn.18002af10
lea rdx, [0x18004dd64]
lea rcx, str.Show_names:
call fcn.18002a360
lea rcx, str.DEBUG
call fcn.180031520
test al, al
je 0x180034daf
mov qword [rbp + 8], 0
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, str.Spectate
call fcn.180029520
test al, al
je 0x180034bbd
lea rdx, str.de_spectate
call fcn.180032180
mov qword [rbp + 8], 0
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, str.Lua_Debugger
call fcn.180029520
test al, al
je 0x180034be8
lea rdx, str.lua_debugger_show
call fcn.180032180
lea rdx, [0x18004d0a2]
lea rcx, str.Aimlock_:
call fcn.18002a360
mov qword [rbp + 8], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
mov r9d, 0x3e8
lea r8, [0x18004dda0]
xor edx, edx
lea rcx, str.Command
call fcn.18002d7f0
mov qword [rbp + 8], 0
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, str.Execute
call fcn.180029520
test al, al
je 0x180034d9c
lea rcx, [rbp + 0x38]
call fcn.180032110
lea rdx, [0x18004dda0]
lea rcx, [rbp + 0x78]
call fcn.180039c60
nop
mov r8b, 0x20
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x38]
call fcn.180031e60
nop
lea rcx, [rbp + 0x78]
call fcn.180001e10
mov rax, qword [rbp + 0x40]
cmp qword [rbp + 0x38], rax
jne 0x180034caf
lea rdx, [0x18004dda0]
lea rcx, [rbp - 0x18]
call fcn.180039c60
nop
mov esi, 1
jmp 0x180034cc9
lea rcx, [rbp + 0x38]
call fcn.180039500
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.180039d80
mov esi, 2
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.180039c30
nop
test sil, 2
je 0x180034cec
and esi, 0xfffffffd
lea rcx, [rbp + 0x78]
call fcn.180001e10
nop
test sil, 1
je 0x180034cfe
and esi, 0xfffffffe
lea rcx, [rbp - 0x18]
call fcn.180001e10
lea rcx, [rbp + 0xc0]
call fcn.180001e00
mov rdx, rax
call fcn.1800321a0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
lea r9, [rbp + 0x10]
mov edx, 1
mov r8d, 0x40
lea rcx, [rax + 0x247e03]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [rbx + 0x247e03], 0xeb
lea r9, [rbp + 0x10]
mov r8d, dword [rbp + 0x10]
mov edx, 1
lea rcx, [rbx + 0x247e03]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rdx, [0x18004dda0]
lea rcx, [rbp - 0x78]
call fcn.180039c60
nop
mov rcx, rax
call fcn.180001e00
mov rdx, rax
call fcn.180032180
nop
lea rcx, [rbp - 0x78]
call fcn.180001e10
nop
lea rcx, [rbp + 0xc0]
call fcn.180001e10
nop
lea rcx, [rbp + 0x38]
call fcn.180039530
lea rdx, [0x18004dd62]
lea rcx, [0x180044628]
call fcn.18002a360
mov rcx, qword [0x18004e288]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x228]
call rdx
mov qword [0x18004e188], rax
mov rcx, qword [0x18004e280]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x80]
call rdx
test rax, rax
jne 0x180034e0f
mov rax, qword [0x18004e1e0]
cmp rax, qword [0x18004e1e8]
je 0x180034df8
mov qword [0x18004e1e8], rax
mov rax, qword [0x18004e210]
cmp rax, qword [0x18004e218]
je 0x180034e0f
mov qword [0x18004e218], rax
mov ecx, 0x2e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180034f03
lea rcx, str.Game.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea r14, [rax + 0x2b12d0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov rdi, qword [0x18004e188]
lea rcx, str.Game.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1fdfc
call rax
mov r15, rax
lea rcx, str.Game.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0x26a8]
mov rdx, qword [rdi]
mov r8, qword [rdx + 8]
lea rdx, [r8 - 1]
cmp rdx, r13
ja 0x180034e8c
mov rcx, rdi
call r8
jmp 0x180034e8e
xor eax, eax
mov edx, eax
mov rcx, r15
call rbx
mov r15d, eax
mov rbx, qword [0x18004e188]
mov rcx, qword [0x18004e288]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xd0]
call r8
mov rdi, rax
test rax, rax
je 0x180034ee4
mov rax, qword [rbx]
mov rdx, qword [rax + 8]
lea rax, [rdx - 1]
cmp rax, r13
ja 0x180034ed5
mov rcx, rbx
call rdx
mov rdx, rax
jmp 0x180034ed7
xor edx, edx
mov rax, qword [rdi]
mov r8, qword [rax + 0x18]
mov rcx, rdi
call r8
mov byte [rsp + 0x20], 0xf
mov r9d, r15d
lea r8, [rbp + 0x100]
lea rdx, [rbx + 0xdc]
mov rcx, rax
call r14
xor r15d, r15d
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180034f6b
mov rax, qword [0x18004e188]
movsd xmm7, qword [rax + 0xdc]
movss xmm6, dword [rax + 0xe4]
addss xmm6, dword [0x1800449ac]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x18004dd98], eax
jae 0x180034f6b
movsd qword [rbp + 0x100], xmm7
movss dword [rbp + 0x108], xmm6
lea rdx, [rbp + 0x100]
call fcn.1800322f0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x1e
mov dword [0x18004dd98], eax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180034fd3
mov rax, qword [0x18004e188]
movsd xmm7, qword [rax + 0xdc]
movss xmm6, dword [rax + 0xe4]
addss xmm6, dword [0x180044a64]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x18004dd98], eax
jae 0x180034fd3
movsd qword [rbp + 0x100], xmm7
movss dword [rbp + 0x108], xmm6
lea rdx, [rbp + 0x100]
call fcn.1800322f0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x1e
mov dword [0x18004dd98], eax
mov rcx, qword [0x18004e280]
mov qword [rbp + 0x98], r15
mov rax, qword [rcx]
mov r8, qword [rax + 0x88]
lea rdx, [rbp + 0x98]
call r8
mov rbx, qword [rax]
mov qword [rbp + 0x100], rbx
mov r12d, 0xf
test rbx, rbx
je 0x1800356cf
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r12, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x1800356c9
mov rcx, rax
movss xmm14, dword [0x180044a58]
movsd xmm13, qword [0x1800449c8]
nop dword [rax]
lea rdx, str.DrankBloodBag
mov rcx, qword [rcx + 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180035249
mov r8, r12
mov rdx, qword [0x18004e1e8]
mov rcx, qword [0x18004e1e0]
call fcn.18003c0b0
cmp rax, qword [0x18004e1e8]
jne 0x180035249
lea rcx, [rbp + 0x38]
call fcn.180032110
lea rdx, [rbp + 0x38]
call fcn.180032540
nop
movaps xmm9, xmm14
mov rdi, r15
mov qword [rbp + 0x10], r15
mov rbx, qword [rbp + 0x38]
mov r15, qword [rbp + 0x40]
cmp rbx, r15
je 0x1800351c1
movss xmm10, dword [r12 + 0xdc]
movss xmm11, dword [r12 + 0xe4]
movss xmm12, dword [r12 + 0xe0]
nop dword [rax + rax]
mov r14, qword [rbx]
movaps xmm7, xmm10
subss xmm7, dword [r14 + 0xdc]
movaps xmm0, xmm11
subss xmm0, dword [r14 + 0xe4]
movaps xmm6, xmm12
subss xmm6, dword [r14 + 0xe0]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm8, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm7
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm8, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm8, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm8
ja 0x180035149
xorps xmm0, xmm0
sqrtsd xmm0, xmm8
jmp 0x180035152
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm9, xmm0
jbe 0x180035163
movaps xmm9, xmm0
mov rdi, r14
add rbx, 8
cmp rbx, r15
jne 0x1800350d0
mov qword [rbp + 0x10], rdi
test rdi, rdi
je 0x1800351c1
mov r8, rdi
mov rdx, qword [0x18004e218]
mov rcx, qword [0x18004e210]
call fcn.18003c0b0
mov rdx, qword [0x18004e218]
cmp rax, rdx
jne 0x1800351c1
cmp rdx, qword [0x18004e220]
je 0x1800351b1
mov qword [rdx], rdi
add qword [0x18004e218], 8
jmp 0x1800351c1
lea r8, [rbp + 0x10]
lea rcx, [0x18004e210]
call fcn.18003b720
mov rdx, qword [0x18004e1e8]
cmp rdx, qword [0x18004e1f0]
je 0x1800351de
mov qword [rdx], r12
add qword [0x18004e1e8], 8
jmp 0x1800351ef
lea r8, [rbp + 8]
lea rcx, [0x18004e1e0]
call fcn.18003b720
nop
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x180035246
mov rax, qword [rbp + 0x48]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035230
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035698
call fcn.18003c264
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x38], xmm0
xor r15d, r15d
mov qword [rbp + 0x48], r15
jmp 0x180035249
xor r15d, r15d
mov rcx, qword [0x18004e288]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rbx, rax
test rax, rax
je 0x180035671
mov rcx, qword [r12]
mov rax, qword [rcx + 8]
lea rcx, [rax - 1]
cmp rcx, r13
ja 0x180035283
mov rcx, r12
call rax
mov rdx, rax
jmp 0x180035286
mov rdx, r15
mov rax, qword [rbx]
mov r8, qword [rax + 0x18]
mov rcx, rbx
call r8
test rax, rax
je 0x180035671
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.180032900
nop
mov rbx, qword [rbp + 0x28]
test rbx, rbx
jne 0x1800352f6
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x180035671
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800352ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356c2
call fcn.18003c264
jmp 0x180035671
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], 4
mov ecx, 0xf
mov qword [rbp - 0x80], rcx
mov dword [rsp + 0x68], 0x69746559
mov byte [rsp + 0x6c], 0
or esi, 4
mov dword [rsp + 0x40], esi
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x18]
mov r14, qword [rbp + 0x18]
mov r13, qword [rbp + 0x30]
cmp r13, 0xf
cmova rcx, r14
cmp rbx, 4
jne 0x1800353bd
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800353bd
mov r15, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x48]
mov bl, 1
test sil, 0x40
je 0x1800354b3
and esi, 0xffffffbf
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x1800353a3
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003539e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003569f
call fcn.18003c264
mov qword [rbp + 0x68], 0
mov eax, 0xf
mov qword [rbp + 0x70], rax
mov byte [rbp + 0x58], 0
jmp 0x1800354b8
lea rcx, [rsp + 0x48]
call fcn.180001e70
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
mov r8d, 0xa
lea rdx, str.Experiment
lea rcx, [rsp + 0x48]
call fcn.18003aa70
nop
or esi, 8
mov dword [rsp + 0x40], esi
lea rdx, [rsp + 0x48]
mov rdi, qword [rsp + 0x48]
mov r15, qword [rsp + 0x60]
cmp r15, 0xf
cmova rdx, rdi
lea rcx, [rbp + 0x18]
cmp r13, 0xf
cmova rcx, r14
cmp rbx, qword [rsp + 0x58]
jne 0x18003542a
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180035359
lea rdx, str.Spider
lea rcx, [rbp - 0x58]
call fcn.180039c60
nop
or esi, 0x10
mov dword [rsp + 0x40], esi
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.18003a470
test al, al
jne 0x180035359
lea rdx, str.Werewolf
lea rcx, [rbp + 0xa0]
call fcn.180039c60
nop
or esi, 0x20
mov dword [rsp + 0x40], esi
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.18003a470
test al, al
jne 0x180035359
lea rdx, str.Vampire
lea rcx, [rbp + 0x58]
call fcn.180039c60
or esi, 0x40
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.18003a470
test al, al
jne 0x180035359
xor bl, bl
jmp 0x18003535b
mov eax, 0xf
test sil, 0x20
je 0x180035520
and esi, 0xffffffdf
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x180035507
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800354fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356a6
call fcn.18003c264
mov eax, 0xf
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xb8], rax
mov byte [rbp + 0xa0], 0
test sil, 0x10
je 0x180035579
and esi, 0xffffffef
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x180035569
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003555f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356ad
call fcn.18003c264
mov eax, 0xf
mov qword [rbp - 0x48], 0
mov qword [rbp - 0x40], rax
mov byte [rbp - 0x58], 0
test sil, 8
je 0x1800355be
and esi, 0xfffffff7
cmp r15, 0xf
jbe 0x1800355be
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800355b1
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356b4
mov rcx, rdi
call fcn.18003c264
mov eax, 0xf
test sil, 4
je 0x180035600
and esi, 0xfffffffb
cmp rax, 0xf
jbe 0x180035600
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800355fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356bb
call fcn.18003c264
test bl, bl
je 0x180035634
mov r8, r12
mov rdx, qword [0x18004e218]
mov rcx, qword [0x18004e210]
call fcn.18003c0b0
cmp rax, qword [0x18004e218]
jne 0x180035634
lea rdx, [rbp + 8]
lea rcx, [0x18004e210]
call fcn.180039480
nop
cmp r13, 0xf
jbe 0x180035667
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18003565f
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356c2
mov rcx, r14
call fcn.18003c264
movabs r13, 0xfffffffffffe
mov rbx, qword [rbp + 0x100]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r12, rax
mov rcx, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x1800356c9
xor r15d, r15d
jmp 0x180035040
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r12d, 0xf
mov rcx, qword [0x18004e280]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x80]
call rdx
mov r8, rax
lea r9, [rbp + 0x115]
test eax, eax
jns 0x180035740
neg r8d
nop dword [rax]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180035700
dec r9
mov byte [r9], 0x2d
jmp 0x18003576a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180035740
lea r8, [rbp + 0x115]
mov rdx, r9
lea rcx, [rbp - 0x38]
call fcn.180001e80
or esi, 0xc0000
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
sub rax, r8
mov r15d, 0x10
lea r14, str.Entities_count:
cmp rax, r15
jb 0x18003581a
lea rax, [r8 + 0x10]
mov qword [rbp - 0x28], rax
lea rbx, [rbp - 0x38]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x38]
lea rax, [0x180044680]
cmp rax, rbx
jbe 0x1800357de
lea rax, [rbx + r8]
cmp r14, rax
ja 0x1800357de
cmp rbx, r14
ja 0x1800357d6
xor edi, edi
jmp 0x1800357e1
mov rdi, rbx
sub rdi, r14
jmp 0x1800357e1
mov rdi, r15
inc r8
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r15, rdi
lea rdx, [r14 + 0x10]
add rdx, rdi
lea rcx, [rdi + rbx]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x38]
jmp 0x180035830
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov rdx, r15
lea rcx, [rbp - 0x38]
call fcn.18003bb50
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r12
mov byte [rax], dil
bts esi, 0x14
lea rcx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rcx, qword [rbp + 0x38]
call fcn.180028c20
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1800358b1
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800358ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800358ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003c264
movdqa xmm0, xmmword [0x180044aa0]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x180035900
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800358fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800358fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003c264
lea rcx, str.Players
call fcn.180031520
test al, al
je 0x180036058
lea rdx, [rbp + 0xa0]
call fcn.180032540
nop
mov r12, qword [rbp + 0xa0]
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0x100], rax
cmp r12, rax
je 0x180036006
movabs r14, 0xcccccccccccccccd
nop dword [rax]
mov r15, qword [r12]
mov rcx, qword [0x18004e288]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rbx, rax
mov rcx, qword [r15]
mov rdx, qword [rcx + 8]
lea rcx, [rdx - 1]
cmp rcx, r13
ja 0x180035984
mov rcx, r15
call rdx
mov rdx, rax
jmp 0x180035987
mov rdx, rdi
mov rax, qword [rbx]
mov r8, qword [rax + 0x18]
mov rcx, rbx
call r8
mov r13, rax
test rax, rax
je 0x180035fa4
mov qword [rbp + 8], 0
movss xmm1, dword [rax + 0x88]
cvtps2pd xmm1, xmm1
lea rcx, [rbp + 0x58]
call fcn.180031c30
bts esi, 0xa
mov rax, qword [r15]
mov rdx, qword [rax + 8]
lea rax, [rdx - 1]
movabs rcx, 0xfffffffffffe
cmp rax, rcx
ja 0x1800359e4
mov rcx, r15
call rdx
mov r8, rax
jmp 0x1800359e7
mov r8, rdi
lea r9, [rbp + 0x4d]
test r8, r8
jns 0x180035a40
neg r8
nop dword [rax]
nop word [rax + rax]
dec r9
mov rax, r14
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x180035a00
dec r9
mov byte [r9], 0x2d
jmp 0x180035a6a
dec r9
mov rax, r14
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x180035a40
lea r8, [rbp + 0x4d]
mov rdx, r9
lea rcx, [rbp + 0x78]
call fcn.180001e80
or esi, 0x1800
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp - 0x58]
call fcn.180039c60
mov r14, rax
mov r8, qword [rax + 0x10]
mov qword [rax + 0x10], r8
mov rbx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180035aa5
mov rbx, qword [rax]
lea rcx, [0x18003f830]
cmp rcx, rbx
jbe 0x180035ac5
lea rax, [rbx + r8]
cmp rcx, rax
ja 0x180035ac5
cmp rbx, rcx
jbe 0x180035ac5
mov rdi, rbx
sub rdi, rcx
inc r8
mov rdx, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
lea rdx, [0x18003f830]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
neg r8
lea rdx, [0x18003f830]
add rdx, rdi
lea rcx, [rdi + rbx]
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor edi, edi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [r14 + 0x10], rdi
mov ecx, 0xf
mov qword [r14 + 0x18], rcx
mov byte [r14], dil
bts esi, 0xf
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180035b79
lea rax, [rcx + 2]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x48]
mov word [rcx + rax], 0x203a
mov byte [rcx + rax + 2], dil
lea rax, [rsp + 0x48]
jmp 0x180035b98
mov qword [rsp + 0x20], 2
lea r9, [0x18004446c]
mov edx, 2
lea rcx, [rsp + 0x48]
call fcn.18003ad70
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov r14d, 0xf
mov qword [rax + 0x18], r14
mov byte [rax], 0
bts esi, 0x10
lea r9, [rbp + 0x78]
lea r8, [rbp + 0xc0]
lea rcx, [rbp + 0x18]
call fcn.18003af60
bts esi, 0x11
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x180035c24
lea rax, [rcx + 3]
mov qword [rbp + 0x28], rax
lea rbx, [rbp + 0x18]
cmp rdx, r14
cmova rbx, qword [rbp + 0x18]
add rbx, rcx
mov r8d, 3
lea rdx, [0x1800444f0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rax, [rbp + 0x18]
jmp 0x180035c42
mov qword [rsp + 0x20], 3
lea r9, [0x1800444f0]
mov edx, 3
lea rcx, [rbp + 0x18]
call fcn.18003ad70
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r14
mov byte [rax], 0
bts esi, 0xe
lea r9, [rbp + 0x58]
lea r8, [rbp - 0x18]
lea rcx, [rsp + 0x68]
call fcn.18003af60
bts esi, 0xd
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rcx, qword [rsp + 0x68]
xor r8d, r8d
lea rdx, [rbp + 8]
call fcn.180029520
movzx ebx, al
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x180035cd1
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035ccc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fc0
call fcn.18003c264
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], r14
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x180035d1b
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035d15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fc7
call fcn.18003c264
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x180035d56
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035d51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fce
call fcn.18003c264
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], r14
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x180035da4
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035d9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fd5
call fcn.18003c264
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x180035de1
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035ddc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fdc
call fcn.18003c264
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], r14
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x180035e2b
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035e26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fe3
call fcn.18003c264
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], r14
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x180035e76
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035e70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035fea
call fcn.18003c264
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x180035eb1
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035eac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035ff1
call fcn.18003c264
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], r14
mov byte [rbp + 0x58], 0
test bl, bl
je 0x180035f9a
mov qword [0x18004e188], r15
mov rdx, r13
lea rcx, [rbp - 0x78]
call fcn.18003a670
mov r14, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180035ee5
mov r14, qword [rax]
mov rdi, 0xffffffffffffffff
nop dword [rax]
lea rdi, [rdi + 1]
cmp byte [r14 + rdi], 0
jne 0x180035ef0
lea rdx, [rdi + 1]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rcx, rax
lea r8, [rdi + 1]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
call qword [sym.imp.USER32.dll_EmptyClipboard]
mov rdx, rbx
mov ecx, 1
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_CloseClipboard]
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x180035f87
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035f82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035ff8
call fcn.18003c264
xor edi, edi
mov qword [rbp - 0x68], rdi
mov eax, 0xf
mov qword [rbp - 0x60], rax
mov byte [rbp - 0x78], dil
movabs r14, 0xcccccccccccccccd
add r12, 8
cmp r12, qword [rbp + 0x100]
je 0x180035fff
movabs r13, 0xfffffffffffe
jmp 0x180035950
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r12, qword [rbp + 0xa0]
test r12, r12
je 0x180036052
mov rax, qword [rbp + 0xb0]
sub rax, r12
sar rax, 3
lea rdx, [rax*8]
mov rax, r12
cmp rdx, 0x1000
jb 0x18003604a
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003604a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.18003c264
mov r12d, 0xf
call fcn.18000e500
cmp qword [0x18004e188], 0
je 0x18003654f
cmp byte [0x18004d0a3], 0
je 0x18003654f
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], 8
mov qword [rbp + 0x70], r12
movabs rax, 0x6465746365666e69
mov qword [rbp + 0x58], rax
mov byte [rbp + 0x60], 0
lea rcx, [rbp + 0x58]
call fcn.18003bd40
lea rdx, [rbp + 0xa0]
call fcn.180032540
nop
mov r15, qword [rbp + 0xa0]
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0x98], rax
cmp r15, rax
je 0x180036507
movdqa xmm6, xmmword [0x180044c70]
nop dword [rax]
mov r13, qword [r15]
mov rcx, qword [0x18004e288]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rbx, rax
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
lea rcx, [rdx - 1]
movabs rax, 0xfffffffffffe
cmp rcx, rax
ja 0x18003611e
mov rcx, r13
call rdx
mov rdx, rax
jmp 0x180036121
mov rdx, rdi
mov rax, qword [rbx]
mov r8, qword [rax + 0x18]
mov rcx, rbx
call r8
mov rbx, rax
test rax, rax
je 0x1800364c2
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x180]
mov rcx, rax
call rdx
test al, al
jne 0x1800364c2
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov r14, rdi
mov qword [rbp + 0xf0], rdi
mov rdi, r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0xf8], r12
mov byte [rbp + 0xe0], al
lea rdx, [rbp + 0x78]
mov rcx, rbx
call fcn.180032900
lea rcx, [rbp + 0xe0]
cmp rcx, rax
je 0x1800361cc
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], r12
mov byte [rax], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rdi, xmm0
mov qword [rbp + 0x10], rdi
movq r14, xmm1
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x18003620a
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180036205
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800364d6
call fcn.18003c264
mov rcx, r13
call fcn.18003c030
mov r12, qword [rbp + 0xe0]
cmp rax, 2
jne 0x180036485
mov rdx, qword [r13 + 0x10]
lea rcx, [rbp - 0x78]
call fcn.180039c60
mov qword [rbp + 0x100], rax
movabs r9, 0x7fffffffffffffff
mov rcx, r9
sub rcx, r14
cmp rcx, 3
jb 0x1800365b4
lea rdx, [rbp + 0xe0]
cmp rdi, 0xf
cmova rdx, r12
mov qword [rbp + 8], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor r8d, r8d
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x60], r8
lea rax, [r14 + 3]
mov ebx, 0xf
lea rdi, [rsp + 0x48]
cmp rax, rbx
jbe 0x180036314
mov rbx, rax
or rbx, 0xf
cmp rbx, r9
jbe 0x1800362af
mov rbx, r9
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1800362e0
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1800362ca
mov rdi, r8
jmp 0x18003630f
cmp rcx, 0x1000
jb 0x1800362ff
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800365ba
mov rcx, rax
call fcn.18003c220
test rax, rax
je 0x1800364dd
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180036307
call fcn.18003c220
mov rdi, rax
mov rdx, qword [rbp + 8]
lea rax, [r14 + 3]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov r8, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x1800444f0]
mov word [r14 + rdi], ax
movzx eax, byte [0x1800444f2]
mov byte [r14 + rdi + 2], al
mov byte [rdi + r14 + 3], 0
bts esi, 0x15
mov r9, qword [rbp + 0x100]
lea r8, [rsp + 0x48]
lea rcx, [rbp + 0x18]
call fcn.18003af60
bts esi, 0x16
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1800363a1
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003639b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800364e4
call fcn.18003c264
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1800363dc
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800363d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800364eb
call fcn.18003c264
xor ebx, ebx
mov qword [rbp - 0x68], rbx
mov edi, 0xf
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x78], bl
mov r8, r13
mov rdx, qword [0x18004e218]
mov rcx, qword [0x18004e210]
call fcn.18003c0b0
cmp rax, qword [0x18004e218]
je 0x18003642f
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], rdi
cmova rdx, qword [rbp + 0x18]
movups xmmword [rbp + 0x100], xmm6
lea rcx, [rbp + 0x100]
call fcn.180028d20
jmp 0x180036442
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], rdi
cmova rcx, qword [rbp + 0x18]
call fcn.180028c20
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x180036479
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180036474
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800364f2
call fcn.18003c264
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rdi
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1800364bc
inc rdx
mov rax, r12
cmp rdx, 0x1000
jb 0x1800364b4
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800364f9
mov rcx, r12
call fcn.18003c264
mov r12d, 0xf
add r15, 8
cmp r15, qword [rbp + 0x98]
je 0x180036500
xor edi, edi
jmp 0x1800360e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r15, qword [rbp + 0xa0]
test r15, r15
je 0x18003654a
mov rdx, qword [rbp + 0xb0]
sub rdx, r15
and rdx, 0xfffffffffffffff8
mov rax, r15
cmp rdx, 0x1000
jb 0x180036542
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036542
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.18003c264
call fcn.18000e500
call fcn.1800371f0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.18003c200
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180001270
nop
call fcn.1800011d0
int3