Function at 0x1800ff170
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1803ca040]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r12, rcx
xor eax, eax
mov dword [rsp + 0x40], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
movaps xmm1, xmmword [str.first_played]
movups xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rbp + 0x10]
call fcn.1800bb920
nop
mov ecx, dword [0x1803ce1f0]
mov rax, qword gs:[0x58]
mov edx, 0x14
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x1803cc5a4], ecx
jg 0x1800ff856
mov r12, qword [r12]
cmp byte [r12], 1
jne 0x1800ff7e0
mov rax, qword [r12 + 8]
mov rdi, qword [rax]
mov qword [rsp + 0x40], rdi
mov rbx, qword [rdi + 8]
mov r13, rdi
mov r15, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x20]
mov r14, qword [rbp + 0x10]
cmp byte [rbx + 0x19], 0
jne 0x1800ff2af
nop dword [rax + rax]
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x10]
cmp r15, 0xf
cmova rdx, r14
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1800ff26e
mov rcx, qword [rcx]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.18020f020
test eax, eax
je 0x1800ff287
jns 0x1800ff292
mov al, 0xff
jmp 0x1800ff294
cmp rdi, rsi
jae 0x1800ff290
mov al, 0xff
jmp 0x1800ff294
jbe 0x1800ff29e
mov al, 1
test al, al
jns 0x1800ff29e
mov rbx, qword [rbx + 0x10]
jmp 0x1800ff2a4
mov r13, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1800ff250
mov rdi, qword [rsp + 0x40]
cmp byte [r13 + 0x19], 0
jne 0x1800ff7e8
lea rdx, [r13 + 0x20]
mov rbx, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1800ff2cc
mov rdx, qword [rdx]
lea rcx, [rbp + 0x10]
cmp r15, 0xf
cmova rcx, r14
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.18020f020
test eax, eax
je 0x1800ff2f1
jns 0x1800ff2fc
mov al, 0xff
jmp 0x1800ff2fe
cmp rsi, rbx
jae 0x1800ff2fa
mov al, 0xff
jmp 0x1800ff2fe
jbe 0x1800ff306
mov al, 1
test al, al
js 0x1800ff7e8
cmp r13, rdi
je 0x1800ff7e8
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.180120130
mov rdx, rax
lea rcx, [rbp]
call fcn.180117aa0
nop
cmp byte [rbp], 0
jne 0x1800ff33f
xor edx, edx
lea rcx, [rbp + 8]
call fcn.180120530
nop
jmp 0x1800ff7e0
lea rcx, [rbp]
call fcn.1801137e0
movsxd rsi, eax
movzx edx, byte [rbp]
lea rcx, [rbp + 8]
call fcn.180120530
nop
cmp esi, 0xffffffff
je 0x1800ff7e0
mov r8d, 1
lea rdx, [0x180287548]
lea rcx, [rbp - 0x50]
call fcn.180117fe0
mov r11, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x180284d10]
movdqu xmmword [rbp + 0x40], xmm1
mov byte [rbp + 0x30], 0
mov dword [rsp + 0x40], 1
movups xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1802878b0]
movdqu xmmword [rbp - 0x10], xmm1
mov word [rbp - 0x20], 0x20
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rdx, qword [rbp + 0x10]
mov r9, qword [rbp + 0x20]
add r9, rdx
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r8, qword [rbp + 0x10]
xor r15d, r15d
mov dword [rsp + 0x30], r15d
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r11
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.180110450
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1800ff435
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ff430
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ff887
call fcn.1801df658
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x1800ff470
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ff46b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ff88d
call fcn.1801df658
movups xmm0, xmmword [rbp + 0x30]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rbp + 0x40]
movups xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x180284d10]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdi, 0xffffffffffffffff
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x1800ff4dc
mov eax, edi
lock xadd dword [rcx + 0x2c], eax
cmp eax, 1
jne 0x1800ff4dc
mov rbx, qword [rbp - 0x50]
test rbx, rbx
je 0x1800ff4dc
nop word [rax + rax]
mov rcx, rbx
lea rax, [rbx + 0x10]
mov rbx, qword [rax]
mov qword [rax], r15
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
test rbx, rbx
jne 0x1800ff4c0
mov qword [rbp - 0x50], r15
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x1800ff505
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ff505
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rax, qword [rbp + 0x10]
movsx ecx, byte [rax]
call fcn.1801e8bcc
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rcx, qword [rbp + 0x10]
mov byte [rcx], al
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1801f0db8
movdqa xmm1, xmmword [0x180287a00]
movdqu xmmword [rbp - 0x20], xmm1
mov r8b, 0x5e
mov r9b, 0x28
movdqa xmm0, xmm1
psrldq xmm0, 1
movd ecx, xmm0
movd edx, xmm1
xor cl, dl
mov byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], dl
xor byte [rbp - 0x1d], dl
xor byte [rbp - 0x1c], dl
xor byte [rbp - 0x1b], dl
xor byte [rbp - 0x1a], dl
xor byte [rbp - 0x19], dl
xor byte [rbp - 0x18], dl
xor byte [rbp - 0x17], dl
xor byte [rbp - 0x16], dl
xor byte [rbp - 0x15], dl
xor byte [rbp - 0x14], dl
xor byte [rbp - 0x13], dl
xor byte [rbp - 0x12], dl
xor byte [rbp - 0x11], dl
xor r8b, dl
mov byte [rbp - 0x10], r8b
xor r9b, dl
mov byte [rbp - 0xf], r9b
mov byte [rbp - 0xe], 0
mov r9, rax
lea r8, [rbp - 0x1f]
mov edx, 0x1a
lea rcx, [rbp + 0x30]
call fcn.1801f120c
lea rax, [rbp - 0x50]
mov qword [rsp + 0x70], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x50]
call fcn.1800bc180
mov rsi, rax
mov qword [rbp - 0x28], rax
movups xmm6, xmmword [0x180285550]
mov byte [rbp], 0x79
mov cl, 2
mov dl, 4
movzx r8d, cl
movzx r9d, dl
mov r10b, 0x43
mov r11b, 0x59
movzx eax, cl
movzx ebx, dl
xor r14d, r14d
xor cl, 0x79
mov byte [rbp + 1], cl
xor dl, 0x79
mov byte [rbp + 2], dl
xor r8b, 0x79
mov byte [rbp + 3], r8b
xor r9b, 0x79
mov byte [rbp + 4], r9b
xor r10b, 0x79
mov byte [rbp + 5], r10b
xor r11b, 0x79
mov byte [rbp + 6], r11b
xor al, 0x79
mov byte [rbp + 7], al
xor bl, 0x79
mov byte [rbp + 8], bl
mov byte [rbp + 9], r14b
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
lea rax, [rbp + 1]
inc rdi
cmp byte [rax + rdi], r14b
jne 0x1800ff645
mov r8, rdi
lea rdx, [rbp + 1]
lea rcx, [rbp - 0x20]
call fcn.1800bb920
nop
movq qword [rsp + 0x78], xmm6
psrldq xmm6, 8
movq qword [rbp - 0x80], xmm6
mov rcx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1800ff67c
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp - 0x60], 0xcdd
lea rax, [rbp + 0x70]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x50]
call fcn.1801cc960
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1800ff740
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800ff73b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ff899
mov rcx, r8
call fcn.1801df658
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
lea rcx, [rbp + 0x50]
call fcn.1800bd200
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1800ff794
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ff78f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ff893
call fcn.1801df658
movdqa xmm0, xmmword [0x180284d10]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1800ff7e0
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ff7db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ff89f
call fcn.1801df658
mov r15, qword [rbp + 0x28]
mov r14, qword [rbp + 0x10]
cmp r15, 0xf
jbe 0x1800ff81b
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800ff813
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ff850
mov rcx, r14
call fcn.1801df658
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1801dfaa0
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1801e668c
nop
lea rcx, [0x1803cc5a4]
call fcn.1801dfb94
cmp dword [0x1803cc5a4], 0xffffffff
jne 0x1800ff213
mov byte [0x1803cc5a0], 0
lea rcx, [0x1803cc5a4]
call fcn.1801dfb28
jmp 0x1800ff213
call fcn.1801e668c
int3
call fcn.1801e668c
nop
call fcn.1801e668c
int3
call fcn.1801e668c
nop
call fcn.1801e668c
int3