Function at 0x18003f960
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [0x180058040]
xor rax, rsp
mov qword [rbp + 0xa0], rax
xor edi, edi
mov dword [rbp - 0x38], edi
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], 6
mov qword [rbp + 0x10], 0xf
mov eax, dword [str.CryLog]
mov dword [rbp - 8], eax
movzx eax, word [0x18004e9c0]
mov word [rbp - 4], ax
mov byte [rbp - 2], dil
lea rcx, [rbp - 8]
call fcn.180046680
mov rsi, qword [0x180058d20]
mov rbx, qword [rsi]
cmp rbx, rsi
je 0x18003fa7c
lea rdx, [rbx + 0x10]
lea rcx, [rbp - 8]
call fcn.180044ca0
nop
lea rcx, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rcx, qword [rbp - 8]
xor edx, edx
lea r8d, [rdx + 1]
call fcn.18002ab70
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18003fa71
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fa6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003fad4
call fcn.180046ba4
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
jne 0x18003fa12
call fcn.18000ee30
movabs r13, 0xfffffffffffe
mov rbx, qword [0x180058cb8]
test rbx, rbx
je 0x18003fcb8
mov rcx, qword [0x180058e18]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rsi, rax
test rax, rax
je 0x18003fcb8
mov rdx, qword [rbx]
mov rax, qword [rdx + 8]
lea rdx, [rax - 1]
cmp rdx, r13
ja 0x18003fadb
mov rcx, rbx
call rax
mov rdx, rax
jmp 0x18003fadd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor edx, edx
mov rax, qword [rsi]
mov r8, qword [rax + 0x18]
mov rcx, rsi
call r8
test rax, rax
je 0x18003fcb8
mov rcx, qword [rax]
mov r8, qword [rcx + 0x238]
xor edx, edx
mov rcx, rax
call r8
mov r14, rax
test rax, rax
je 0x18003fcb8
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x2d0]
mov rcx, rax
call rdx
mov r12, rax
test rax, rax
je 0x18003fcb8
mov rcx, qword [r14 + 0x10]
mov rdx, qword [rcx + 0x10]
lea rcx, [rbp + 0x18]
call fcn.180044b80
mov edi, 0x2000
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x78]
call fcn.180044ca0
mov rsi, rax
mov rax, qword [rax + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x18003fb60
mov rsi, qword [rsi]
cmp rax, 0xb
jb 0x18003fbc8
lea r15, [rax + rsi]
lea r8, [r15 - 0xa]
sub r8, rsi
mov edx, 0x44
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18003fbc8
nop word [rax + rax]
mov r8d, 0xb
lea rdx, str.DeceitKnife
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18003fc08
inc rbx
lea r8, [r15 - 0xa]
sub r8, rbx
mov edx, 0x44
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18003fb90
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x18003fc12
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fc0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003fc0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rsi
jmp 0x18003fbcf
call fcn.180046ba4
cmp rbx, 0xffffffffffffffff
je 0x18003fc7d
mov rcx, r14
call fcn.18003dc80
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx + 0x18]
xor ecx, ecx
mov dword [rax + 0x28], ecx
mov dword [rax + 0x30], ecx
mov dword [rax + 8], 0x461c3c00
mov ecx, 0x46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18003fc7d
movd xmm0, dword [0x1800580a8]
cvtdq2ps xmm0, xmm0
call fcn.18003f6a0
mov qword [0x180058ca0], rax
test rax, rax
je 0x18003fc72
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
jmp 0x18003fc7d
mov qword [0x180058ca0], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x18003fcb8
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fcb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040916
call fcn.180046ba4
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18003fcd9
cmp byte [0x1800580ae], 0
sete al
mov byte [0x1800580ae], al
jmp 0x18003fce0
movzx eax, byte [0x1800580ae]
test al, al
je 0x180040fb5
mov rbx, qword [0x180058c88]
mov dword [rbp + 0x80], 2
movups xmm0, xmmword [rbx + 0x1648]
movups xmmword [rbp + 0x84], xmm0
lea rcx, [rbx + 0x1d78]
lea rdx, [rbp + 0x80]
call fcn.180017230
mov dword [rbx + 0x1648], 0x3dcccccd
mov dword [rbx + 0x164c], 0x3dcccccd
mov dword [rbx + 0x1650], 0x3dcccccd
mov dword [rbx + 0x1654], 0x3f800000
mov rbx, qword [0x180058c88]
mov dword [rbp + 0x80], 5
movups xmm0, xmmword [rbx + 0x1678]
movups xmmword [rbp + 0x84], xmm0
lea rcx, [rbx + 0x1d78]
lea rdx, [rbp + 0x80]
call fcn.180017230
mov dword [rbx + 0x1678], 0x3f4ccccd
mov dword [rbx + 0x167c], 0x3e4ccccd
mov dword [rbx + 0x1680], 0x3e4ccccd
mov dword [rbx + 0x1684], 0x3f800000
mov rbx, qword [0x180058c88]
lea rcx, [rbx + 0x1d88]
movss xmm0, dword [rbx + 0x1570]
mov dword [rbp + 0x80], 3
movss dword [rbp + 0x84], xmm0
lea rdx, [rbp + 0x80]
call fcn.180017140
mov dword [rbx + 0x1570], 0x41200000
mov rbx, qword [0x180058c88]
mov dword [rbp + 0x80], 0
movups xmm0, xmmword [rbx + 0x1628]
movups xmmword [rbp + 0x84], xmm0
lea rcx, [rbx + 0x1d78]
lea rdx, [rbp + 0x80]
call fcn.180017230
mov dword [rbx + 0x1628], 0x3f4ccccd
mov dword [rbx + 0x162c], 0x3f4ccccd
mov dword [rbx + 0x1630], 0x3f4ccccd
mov dword [rbx + 0x1634], 0x3f800000
mov rbx, qword [0x180058c88]
lea rcx, [rbx + 0x1d88]
movss xmm0, dword [rbx + 0x15a4]
mov dword [rbp + 0x80], 0xc
movss dword [rbp + 0x84], xmm0
lea rdx, [rbp + 0x80]
call fcn.180017140
mov dword [rbx + 0x15a4], 0x40a00000
xor r8d, r8d
xor edx, edx
lea rcx, str.Main_Menu
call fcn.18000ca30
lea rdx, [0x1800580a1]
lea rcx, [0x18004e9e4]
call fcn.18002caa0
cmp byte [0x1800580a1], 0
je 0x18003ffaa
mov rcx, qword [0x180058c88]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rcx, qword [rcx + 0x1c10]
cmp byte [rcx + 0x93], 0
jne 0x18003ffaa
lea rdx, str.ESP_Settings
call fcn.180005f50
mov ecx, eax
xor r9d, r9d
lea r8, str.ESP_Settings
lea edx, [r9 + 0x3a]
call fcn.180039e90
test al, al
je 0x18003ffaa
lea rdx, [0x1800580a2]
lea rcx, str.Show_Infect_Window
call fcn.18002caa0
lea rcx, str.ESP_Colors:
call fcn.18002b210
lea rcx, str.Normal_Entity_Color:
call fcn.18002b210
mov r8d, 0x82
lea rdx, [0x180058258]
lea rcx, str.NormalColorPicker
call fcn.180035080
lea rcx, str.Infected_Entity_Color:
call fcn.18002b210
mov r8d, 0x82
lea rdx, [0x180058268]
lea rcx, str.InfectedColorPicker
call fcn.180035080
lea rdx, [0x180058c85]
lea rcx, str.See_Dead
call fcn.18002caa0
lea rdx, [0x180058c86]
lea rcx, str.Show_Names
call fcn.18002caa0
lea rdx, [0x180058c81]
lea rcx, str.View_Blood
call fcn.18002caa0
lea rdx, [0x1800580ac]
lea rcx, str.View_Heal_items
call fcn.18002caa0
lea rdx, [0x1800580a3]
lea rcx, [0x18004eac0]
call fcn.18002caa0
mov dword [rbp - 0x38], 0x168
mov dword [rbp - 0x30], 0
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
lea r8, [0x1800580a8]
lea rcx, str.Aim_FOV
call fcn.18002eef0
mov dword [rbp - 0x30], 0xf
mov dword [rbp - 0x38], 1
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x38]
lea r8, [0x1800580a4]
lea rcx, str.Aim_Speed
call fcn.18002eef0
lea rdx, [0x180058c82]
lea rcx, str.TP_to_Blood
call fcn.18002caa0
lea rdx, [0x1800580ad]
lea rcx, str.StreamProof
call fcn.18002caa0
mov rcx, qword [0x180058e18]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x228]
call rdx
mov qword [0x180058cb8], rax
mov rcx, qword [0x180058e10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x80]
call rdx
test rax, rax
jne 0x18004009f
mov rax, qword [0x180058d70]
cmp rax, qword [0x180058d78]
je 0x180040088
mov qword [0x180058d78], rax
mov rax, qword [0x180058da0]
cmp rax, qword [0x180058da8]
je 0x18004009f
mov qword [0x180058da8], rax
mov ecx, 0x2e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180040190
lea rcx, str.Game.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea r14, [rax + 0x2b12d0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov rsi, qword [0x180058cb8]
lea rcx, str.Game.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1fdfc
call rax
mov r15, rax
lea rcx, str.Game.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0x26a8]
mov rdx, qword [rsi]
mov r8, qword [rdx + 8]
lea rdx, [r8 - 1]
cmp rdx, r13
ja 0x18004011c
mov rcx, rsi
call r8
jmp 0x18004011e
xor eax, eax
mov edx, eax
mov rcx, r15
call rbx
mov r15d, eax
mov rbx, qword [0x180058cb8]
mov rcx, qword [0x180058e18]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xd0]
call r8
mov rsi, rax
test rax, rax
je 0x180040174
mov rax, qword [rbx]
mov rdx, qword [rax + 8]
lea rax, [rdx - 1]
cmp rax, r13
ja 0x180040165
mov rcx, rbx
call rdx
mov rdx, rax
jmp 0x180040167
xor edx, edx
mov rax, qword [rsi]
mov r8, qword [rax + 0x18]
mov rcx, rsi
call r8
mov byte [rsp + 0x20], 0xf
mov r9d, r15d
lea r8, [rbp + 0x80]
lea rdx, [rbx + 0xdc]
mov rcx, rax
call r14
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180040212
mov rax, qword [0x180058cb8]
movsd xmm7, qword [rax + 0xdc]
movss xmm6, dword [rax + 0xe4]
addss xmm6, dword [0x18004ee88]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x180058cc0], eax
jae 0x180040212
mov rcx, qword [0x180058cb8]
mov dword [rbp - 0x30], 0
mov rax, qword [rcx]
mov r9, qword [rax + 0x128]
movsd qword [rbp + 0x80], xmm7
movss dword [rbp + 0x88], xmm6
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x80]
call r9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x1e
mov dword [0x180058cc0], eax
mov rcx, qword [0x180058e10]
mov qword [rbp + 0x50], 0
mov rax, qword [rcx]
mov r8, qword [rax + 0x88]
lea rdx, [rbp + 0x50]
call r8
mov rbx, qword [rax]
mov qword [rbp + 0x80], rbx
test rbx, rbx
je 0x18004088f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r15, rax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x18004088f
movss xmm13, dword [0x18004ef88]
movsd xmm12, qword [0x18004eeb8]
lea rdx, str.DrankBloodBag
mov rcx, qword [rax + 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180040472
mov r8, r15
mov rdx, qword [0x180058d78]
mov rcx, qword [0x180058d70]
call fcn.1800469f0
cmp rax, qword [0x180058d78]
jne 0x180040472
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rax
lea rdx, [rbp + 0x38]
call fcn.18003d630
nop
movaps xmm8, xmm13
xor esi, esi
mov qword [rbp - 0x38], rsi
mov rbx, qword [rbp + 0x38]
mov r12, qword [rbp + 0x40]
cmp rbx, r12
je 0x1800403ee
movss xmm9, dword [r15 + 0xdc]
movss xmm10, dword [r15 + 0xe4]
movss xmm11, dword [r15 + 0xe0]
nop dword [rax + rax]
mov r14, qword [rbx]
movaps xmm0, xmm9
subss xmm0, dword [r14 + 0xdc]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movaps xmm1, xmm10
subss xmm1, dword [r14 + 0xe4]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm1
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
movaps xmm1, xmm11
subss xmm1, dword [r14 + 0xe0]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm1
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm6
addsd xmm7, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm7
ja 0x180040377
xorps xmm0, xmm0
sqrtsd xmm0, xmm7
jmp 0x18004037f
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm8, xmm0
jbe 0x180040390
movaps xmm8, xmm0
mov rsi, r14
add rbx, 8
cmp rbx, r12
jne 0x180040300
mov qword [rbp - 0x38], rsi
test rsi, rsi
je 0x1800403ee
mov r8, rsi
mov rdx, qword [0x180058da8]
mov rcx, qword [0x180058da0]
call fcn.1800469f0
mov rdx, qword [0x180058da8]
cmp rax, rdx
jne 0x1800403ee
cmp rdx, qword [0x180058db0]
je 0x1800403de
mov qword [rdx], rsi
add qword [0x180058da8], 8
jmp 0x1800403ee
lea r8, [rbp - 0x38]
lea rcx, [0x180058da0]
call fcn.180046070
mov rdx, qword [0x180058d78]
cmp rdx, qword [0x180058d80]
je 0x18004040b
mov qword [rdx], r15
add qword [0x180058d78], 8
jmp 0x18004041c
lea r8, [rbp - 0x30]
lea rcx, [0x180058d70]
call fcn.180046070
nop
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x180040472
mov rax, qword [rbp + 0x48]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004045d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800408f3
call fcn.180046ba4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], 0
mov rcx, qword [0x180058e18]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rbx, rax
test rax, rax
je 0x18004086f
mov rcx, qword [r15]
mov rax, qword [rcx + 8]
lea rcx, [rax - 1]
cmp rcx, r13
ja 0x1800404ab
mov rcx, r15
call rax
mov rdx, rax
jmp 0x1800404ad
xor edx, edx
mov rax, qword [rbx]
mov r8, qword [rax + 0x18]
mov rcx, rbx
call r8
test rax, rax
je 0x18004086f
lea rdx, [rbp - 0x28]
mov rcx, rax
call fcn.18003da10
nop
mov rbx, qword [rbp - 0x18]
test rbx, rbx
jne 0x18004051d
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18004086f
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040513
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040916
call fcn.180046ba4
jmp 0x18004086f
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], 4
mov qword [rbp - 0x40], 0xf
mov dword [rbp - 0x58], 0x69746559
mov byte [rbp - 0x54], 0
or edi, 1
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x28]
mov r13, qword [rbp - 0x10]
cmp r13, 0xf
seta r12b
mov byte [rsp + 0x40], r12b
mov rsi, qword [rbp - 0x28]
cmova rcx, rsi
cmp rbx, 4
jne 0x180040713
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180040713
mov r14, qword [rbp + 0x10]
mov rbx, qword [rsp + 0x60]
mov r12b, 1
test dil, 0x10
je 0x1800405e1
and edi, 0xffffffef
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1800405cd
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800405c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800408fa
call fcn.180046ba4
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
test dil, 8
je 0x180040639
and edi, 0xfffffff7
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x180040625
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040620
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040901
call fcn.180046ba4
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
test dil, 4
je 0x18004067c
and edi, 0xfffffffb
cmp rbx, 0xf
jbe 0x18004067c
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040908
call fcn.180046ba4
nop
test dil, 2
je 0x1800406be
and edi, 0xfffffffd
cmp r14, 0xf
jbe 0x1800406be
lea rdx, [r14 + 1]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800406b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004090f
call fcn.180046ba4
nop
test dil, 1
je 0x1800406c7
and edi, 0xfffffffe
test r12b, r12b
je 0x18004082d
mov r8, r15
mov rdx, qword [0x180058da8]
mov rcx, qword [0x180058da0]
call fcn.1800469f0
mov rdx, qword [0x180058da8]
cmp rax, rdx
jne 0x18004082d
cmp rdx, qword [0x180058db0]
je 0x18004081c
mov qword [rdx], r15
add qword [0x180058da8], 8
jmp 0x18004082d
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], 0xa
mov r14d, 0xf
mov qword [rbp + 0x10], r14
movsd xmm0, qword [str.Experiment]
movsd qword [rbp - 8], xmm0
movzx eax, word [0x18004eb18]
mov word [rbp], ax
mov byte [rbp + 2], 0
or edi, 2
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x28]
test r12b, r12b
cmovne rcx, rsi
cmp rbx, 0xa
jne 0x180040770
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180040581
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], 6
mov ebx, 0xf
mov qword [rsp + 0x60], rbx
mov eax, dword [str.Spider]
mov dword [rsp + 0x48], eax
movzx eax, word [0x18004eb20]
mov word [rsp + 0x4c], ax
mov byte [rsp + 0x4e], 0
or edi, 4
mov dword [rbp - 0x38], edi
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x28]
call fcn.180045270
test al, al
jne 0x180040586
lea rdx, str.Werewolf
lea rcx, [rbp + 0x18]
call fcn.180044b80
nop
or edi, 8
mov dword [rbp - 0x38], edi
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.180045270
test al, al
jne 0x180040586
lea rdx, str.Vampire
lea rcx, [rbp - 0x78]
call fcn.180044b80
or edi, 0x10
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.180045270
test al, al
jne 0x180040586
xor r12b, r12b
jmp 0x180040589
lea r8, [rbp - 0x30]
lea rcx, [0x180058da0]
call fcn.180046070
nop
cmp byte [rsp + 0x40], 0
je 0x180040865
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18004085d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040916
mov rcx, rsi
call fcn.180046ba4
movabs r13, 0xfffffffffffe
mov rbx, qword [rbp + 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r15, rax
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x180040270
mov rcx, qword [0x180058e10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x80]
call rdx
mov r8, rax
lea r9, [rbp + 0x95]
test eax, eax
jns 0x180040920
neg r8d
nop dword [rax]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x1800408c0
dec r9
mov byte [r9], 0x2d
jmp 0x18004094a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180040920
lea r8, [rbp + 0x95]
mov rdx, r9
lea rcx, [rsp + 0x68]
call fcn.180001e90
or edi, 0x600
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, r8
mov r15d, 0x10
lea r14, str.Entities_count:
cmp rax, r15
jb 0x180040a00
lea rax, [r8 + 0x10]
mov qword [rsp + 0x78], rax
lea rbx, [rsp + 0x68]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x68]
lea rax, [0x18004eb50]
cmp rax, rbx
jbe 0x1800409c3
lea rax, [r8 + rbx]
cmp r14, rax
ja 0x1800409c3
cmp rbx, r14
ja 0x1800409bb
xor esi, esi
jmp 0x1800409c6
mov rsi, rbx
sub rsi, r14
jmp 0x1800409c6
mov rsi, r15
inc r8
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r15, rsi
lea rdx, [r14 + 0x10]
add rdx, rsi
lea rcx, [rsi + rbx]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x68]
jmp 0x180040a17
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.1800464a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 8
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
call fcn.18002b210
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180040a9e
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040a99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180040a99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180046ba4
movdqa xmm0, xmmword [0x18004f000]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x180040aee
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040ae9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180040ae9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180046ba4
call fcn.18000ee30
cmp qword [0x180058cb8], 0
je 0x180040fb5
cmp byte [0x1800580a2], 0
je 0x180040fb5
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], 8
mov qword [rbp + 0x10], 0xf
movabs rax, 0x6465746365666e69
mov qword [rbp - 8], rax
mov byte [rbp], 0
lea rcx, [rbp - 8]
call fcn.180046680
lea rdx, [rbp + 0x38]
call fcn.18003d630
nop
mov r15, qword [rbp + 0x38]
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x50], rax
cmp r15, rax
je 0x180040f46
nop
mov r13, qword [r15]
mov rcx, qword [0x180058e18]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xd0]
call rdx
mov rbx, rax
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
lea rcx, [rdx - 1]
movabs rax, 0xfffffffffffe
cmp rcx, rax
ja 0x180040b9e
mov rcx, r13
call rdx
mov rdx, rax
jmp 0x180040ba0
xor edx, edx
mov rax, qword [rbx]
mov r8, qword [rax + 0x18]
mov rcx, rbx
call r8
mov rbx, rax
test rax, rax
je 0x180040f34
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x180]
mov rcx, rax
call rdx
test al, al
jne 0x180040f34
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xor r14d, r14d
mov qword [rbp + 0x68], r14
mov esi, 0xf
mov qword [rbp - 0x38], rsi
mov qword [rbp + 0x70], rsi
mov byte [rbp + 0x58], r14b
lea rdx, [rbp + 0x18]
mov rcx, rbx
call fcn.18003da10
lea rcx, [rbp + 0x58]
cmp rcx, rax
je 0x180040c35
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rsi
mov byte [rax], r14b
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rsi, xmm0
mov qword [rbp - 0x38], rsi
movq r14, xmm1
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x180040c70
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040c6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040f7e
call fcn.180046ba4
mov rcx, r13
call fcn.180046970
mov r12, qword [rbp + 0x58]
cmp rax, 2
jne 0x180040efd
mov rdx, qword [r13 + 0x10]
lea rcx, [rbp + 0x18]
call fcn.180044b80
mov qword [rbp + 0x80], rax
movabs r9, 0x7fffffffffffffff
mov rcx, r9
sub rcx, r14
cmp rcx, 3
jb 0x180041012
lea rdx, [rbp + 0x58]
cmp rsi, 0xf
cmova rdx, r12
mov qword [rbp - 0x30], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor r8d, r8d
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x60], r8
lea rax, [r14 + 3]
mov ebx, 0xf
lea rsi, [rsp + 0x48]
cmp rax, rbx
jbe 0x180040d7c
mov rbx, rax
or rbx, 0xf
cmp rbx, r9
jbe 0x180040d0f
mov rbx, r9
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x180040d36
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180040d5d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180041018
mov rcx, rax
call fcn.180046b60
test rax, rax
je 0x180040f85
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
lea rax, [r14 + 3]
mov rdx, qword [rbp - 0x30]
jmp 0x180040d77
test rcx, rcx
je 0x180040d74
call fcn.180046b60
mov rsi, rax
lea rax, [r14 + 3]
mov rdx, qword [rbp - 0x30]
jmp 0x180040d77
mov rsi, r8
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov r8, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x18004e978]
mov word [rsi + r14], ax
movzx eax, byte [0x18004e97a]
mov byte [rsi + r14 + 2], al
mov byte [r14 + rsi + 3], 0
bts edi, 0xb
mov r9, qword [rbp + 0x80]
lea r8, [rsp + 0x48]
lea rcx, [rbp - 0x28]
call fcn.180045a20
bts edi, 0xc
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x180040e09
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040e03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040f8c
call fcn.180046ba4
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x180040e44
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040e3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040f93
call fcn.180046ba4
xor ebx, ebx
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], bl
mov r8, r13
mov rdx, qword [0x180058da8]
mov rcx, qword [0x180058da0]
call fcn.1800469f0
cmp rax, qword [0x180058da8]
je 0x180040e9e
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rdx, qword [rbp - 0x28]
movaps xmm0, xmmword [0x18004f060]
movups xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call fcn.18002b310
jmp 0x180040eb2
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
call fcn.18002b210
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180040eed
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040ee8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040f9a
call fcn.180046ba4
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180040f34
inc rdx
mov rax, r12
cmp rdx, 0x1000
jb 0x180040f2c
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180040fa1
mov rcx, r12
call fcn.180046ba4
add r15, 8
cmp r15, qword [rbp + 0x50]
jne 0x180040b60
mov r15, qword [rbp + 0x38]
test r15, r15
je 0x180040fb0
mov rdx, qword [rbp + 0x48]
sub rdx, r15
and rdx, 0xfffffffffffffff8
mov rax, r15
cmp rdx, 0x1000
jb 0x180040fa8
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180040fa8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r15
call fcn.180046ba4
call fcn.18000ee30
call fcn.180041e30
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180046b40
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800012a0
nop
call fcn.180001200
int3