Function at 0x180039db0
Capabilities:
Execute command
Hash data with crc32

Disassembly:
push rbp
push rbx
push rdi
push r14
lea rbp, [rsp - 0x3f]
sub rsp, 0xc8
mov r10, qword [0x1801a5538]
lea rdx, [0x18018cf31]
mov dword [rbp + 0x67], 0x43600000
lea r14, [0x1801862d0]
mov dword [rbp + 0x6b], 0x43d28000
mov r8b, 0x41
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x18018fa00]
addss xmm0, dword [0x18018fa64]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
cmp r8b, 0x23
jne 0x180039e79
cmp byte [rdx], r8b
jne 0x180039e79
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
movzx r8d, byte [rdx]
xor rcx, rax
shr ebx, 8
inc rdx
xor ebx, dword [r14 + rcx*4]
test r8b, r8b
jne 0x180039e66
not ebx
cmp dword [r10 + 0x3ed4], ebx
jne 0x180039eb4
lea r8, str.Aimbot
mov edx, 0xb
mov ecx, ebx
call fcn.18005ad50
xor edi, edi
lea r8, [rbp + 0x67]
xor r9d, r9d
mov dword [rsp + 0x20], edi
mov edx, ebx
lea rcx, str.Aimbot
call fcn.18004d2b0
mov r10, qword [0x1801a5538]
lea rdx, [0x18018d721]
mov dword [rbp + 0x67], 0x42c80000
mov r8b, 0x4d
mov dword [rbp + 0x6b], 0x42c80000
mov rax, qword [r10 + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
nop dword [rax]
cmp r8b, 0x23
jne 0x180039f33
cmp byte [rdx], r8b
jne 0x180039f33
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
movzx r8d, byte [rdx]
xor rcx, rax
shr ebx, 8
inc rdx
xor ebx, dword [r14 + rcx*4]
test r8b, r8b
jne 0x180039f20
not ebx
cmp dword [r10 + 0x3ed4], ebx
jne 0x180039f6e
lea r8, str.Main
mov edx, 0xb
mov ecx, ebx
call fcn.18005ad50
mov qword [rsp + 0xf8], rsi
lea r8, [rbp + 0x67]
mov qword [rsp + 0x100], r12
lea rcx, str.Main
mov qword [rsp + 0x108], r13
mov r9b, 1
mov edx, ebx
mov qword [rsp + 0xc0], r15
mov dword [rsp + 0x20], edi
call fcn.18004d2b0
mov eax, dword [0x18018d730]
lea rdx, [rbp - 0x29]
xorps xmm0, xmm0
mov dword [rbp - 1], eax
movzx eax, byte [0x18018d734]
lea rcx, [rbp - 9]
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
movsd xmm0, qword [str.C:_Purity.nl_]
movsd qword [rbp - 9], xmm0
mov word [rbp + 5], di
mov qword [rbp + 7], 0xd
mov qword [rbp + 0xf], 0xf
mov byte [rbp + 3], al
mov byte [rbp + 4], dil
call fcn.18002df60
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x18003a033
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003a02e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003a250
call fcn.1800eeebc
lea rdx, [rbp - 0x49]
call fcn.18002e3a0
mov r15, qword [rbp - 0x49]
lea r13, [0x1801a36a0]
mov r12, qword [rbp - 0x41]
mov rsi, r15
cmp r15, r12
je 0x18003a1c6
cmp qword [rsi + 0x18], 0x10
xorps xmm0, xmm0
mov qword [rbp + 7], rdi
mov ecx, 0x16
mov qword [rbp + 0xf], rdi
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rsi + 0x10]
mov r14, rsi
movups xmmword [rbp - 9], xmm0
jb 0x18003a086
mov r14, qword [rsi]
cmp rdi, rax
ja 0x18003a9ed
cmp rdi, 0x10
jae 0x18003a0ac
mov ebx, 0xf
mov qword [rbp + 7], rdi
mov qword [rbp + 0xf], rbx
movups xmm0, xmmword [r14]
movups xmmword [rbp - 9], xmm0
jmp 0x18003a0f9
mov rbx, rdi
mov qword [rbp + 0xf], 0xf
or rbx, 0xf
cmp rbx, rax
jbe 0x18003a0c5
mov rbx, rax
jmp 0x18003a0cd
cmp rbx, 0x16
cmovb rbx, rcx
lea rdx, [rbx + 1]
call fcn.18003d7f0
lea r8, [rdi + 1]
mov qword [rbp - 9], rax
mov rdx, r14
mov qword [rbp + 7], rdi
mov rcx, rax
mov qword [rbp + 0xf], rbx
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [rbp + 0xf]
mov rdi, qword [rbp + 7]
cmp qword [0x1801a36b8], 0x10
lea rcx, [rbp - 9]
mov r14, qword [rbp - 9]
mov rdx, r13
cmovae rdx, qword [0x1801a36a0]
cmp rbx, 0x10
mov qword [rbp + 0x67], 0
cmovae rcx, r14
cmp rdi, qword [0x1801a36b0]
jne 0x18003a13d
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18003a13d
mov dl, 1
jmp 0x18003a13f
xor edx, edx
cmp rbx, 0x10
lea rcx, [rbp - 9]
lea r9, [rbp + 0x67]
cmovae rcx, r14
xor r8d, r8d
call fcn.180077610
test al, al
je 0x18003a175
cmp qword [rbp + 0xf], 0x10
lea rdx, [rbp - 9]
mov r8, qword [rbp + 7]
mov rcx, r13
cmovae rdx, qword [rbp - 9]
call fcn.18003d680
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x18003a1b0
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003a1ab
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003a257
call fcn.1800eeebc
add rsi, 0x20
xor edi, edi
cmp rsi, r12
jne 0x18003a057
lea r14, [0x1801862d0]
test r15, r15
je 0x18003a20a
mov rdx, r12
mov rcx, r15
call fcn.18003ef90
mov rdx, qword [rbp - 0x39]
mov rax, r15
sub rdx, r15
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x18003a202
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003a250
mov rcx, r15
call fcn.1800eeebc
call fcn.18004d550
mov rbx, qword [rbp - 0x29]
test rbx, rbx
je 0x18003a266
mov rdx, qword [rbp - 0x21]
mov rcx, rbx
call fcn.18003ef90
mov rdx, qword [rbp - 0x19]
mov rax, rbx
sub rdx, rbx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x18003a25e
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003a25e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800eeebc
cmp byte [0x1801a5599], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18003a29b
lea rcx, str.Save
call fcn.180067c40
test al, al
je 0x18003a36d
mov byte [0x1801a5599], 1
jmp 0x18003a36d
lea rcx, str.Apply
call fcn.180067c40
test al, al
je 0x18003a36d
mov rdx, r13
lea rcx, [rbp + 0x17]
call fcn.18003d0f0
mov rcx, rax
call fcn.18000dce0
mov eax, dword [str.Saved]
lea r9, [rbp - 0x29]
movdqa xmm1, xmmword [0x18018fcc0]
lea r8, [rbp - 0x49]
movaps xmm2, xmmword [0x1801901c0]
lea rdx, [rbp - 9]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x29], xmm2
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 9], eax
lea rcx, [rbp + 0x17]
movzx eax, byte [0x18018d74c]
movups xmmword [rbp + 0x17], xmm0
mov byte [rbp - 5], al
movss xmm0, dword [0x1801a3060]
mov eax, dword [str.Config]
movdqu xmmword [rbp + 7], xmm1
mov dword [rbp + 0x17], eax
movdqa xmm1, xmmword [0x18018fcd0]
movzx eax, word [0x18018d754]
movss dword [rbp - 0x49], xmm0
movss xmm0, dword [0x1801a3068]
movdqu xmmword [rbp + 0x27], xmm1
mov word [rbp + 0x1b], ax
movss xmm1, dword [0x1801a3064]
movss dword [rbp - 0x45], xmm1
movss dword [rbp - 0x41], xmm0
mov byte [rbp - 4], 0
mov byte [rbp + 0x1d], 0
mov dword [rbp - 0x3d], 0x3f800000
call fcn.180016ae0
mov byte [0x1801a5599], 0
mov rax, qword [0x1801a5538]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x18003a3cf
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
cmp byte [0x1801a559a], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18003a404
lea rcx, str.Load
call fcn.180067c40
test al, al
je 0x18003a4cf
mov byte [0x1801a559a], 1
jmp 0x18003a4cf
lea rcx, str.Apply
call fcn.180067c40
test al, al
je 0x18003a4cf
mov rdx, r13
lea rcx, [rbp + 0x17]
call fcn.18003d0f0
mov rcx, rax
call fcn.180012c00
mov eax, dword [str.Loaded]
lea r9, [rbp - 0x29]
movdqa xmm1, xmmword [0x18018fcd0]
lea r8, [rbp - 0x49]
movaps xmm2, xmmword [0x1801901c0]
lea rdx, [rbp + 0x17]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x29], xmm2
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x17], eax
lea rcx, [rbp - 9]
movzx eax, word [0x18018d764]
movups xmmword [rbp - 9], xmm0
mov word [rbp + 0x1b], ax
movss xmm0, dword [0x1801a3060]
mov eax, dword [str.Config]
mov dword [rbp - 9], eax
movzx eax, word [0x18018d754]
movss dword [rbp - 0x49], xmm0
movss xmm0, dword [0x1801a3068]
movdqu xmmword [rbp + 0x27], xmm1
mov word [rbp - 5], ax
movdqu xmmword [rbp + 7], xmm1
mov byte [rbp + 0x1d], 0
movss xmm1, dword [0x1801a3064]
movss dword [rbp - 0x45], xmm1
movss dword [rbp - 0x41], xmm0
mov byte [rbp - 3], 0
mov dword [rbp - 0x3d], 0x3f800000
call fcn.180016ae0
mov byte [0x1801a559a], 0
mov rax, qword [0x1801a5538]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x18003a531
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
cmp byte [0x1801a54da], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18003a566
lea rcx, str.Remove
call fcn.180067c40
test al, al
je 0x18003a64c
mov byte [0x1801a54da], 1
jmp 0x18003a64c
lea rcx, str.Apply
call fcn.180067c40
test al, al
je 0x18003a64c
cmp qword [0x1801a36b8], 0x10
cmovae r13, qword [0x1801a36a0]
mov rdx, r13
call fcn.18002eda0
mov rax, qword [str.Removed]
lea r9, [rbp - 0x29]
movdqa xmm0, xmmword [0x18018fc80]
lea r8, [rbp - 0x49]
movdqa xmm1, xmmword [0x18018fcd0]
lea rdx, [rbp - 9]
movaps xmm2, xmmword [0x1801901c0]
lea rcx, [rbp + 0x17]
mov dword [rbp - 9], eax
movzx eax, word [0x18018d774]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 5], ax
movzx eax, byte [0x18018d776]
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
mov byte [rbp - 3], al
movss xmm0, dword [0x1801a3060]
mov eax, dword [str.Config]
mov dword [rbp + 0x17], eax
movzx eax, word [0x18018d754]
movss dword [rbp - 0x49], xmm0
movss xmm0, dword [0x1801a3068]
movdqu xmmword [rbp + 0x27], xmm1
mov word [rbp + 0x1b], ax
movss xmm1, dword [0x1801a3064]
movss dword [rbp - 0x45], xmm1
movss dword [rbp - 0x41], xmm0
mov qword [rbp + 0xf], 0xf
mov byte [rbp - 2], 0
mov byte [rbp + 0x1d], 0
movdqa xmmword [rbp - 0x29], xmm2
mov dword [rbp - 0x3d], 0x3f800000
call fcn.180016ae0
mov byte [0x1801a54da], 0
mov rax, qword [0x1801a5538]
mov rcx, qword [rax + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x18003a6ae
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0xec]
addss xmm1, dword [rcx + 0xe8]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
lea rcx, str.Create
call fcn.180067c40
test al, al
je 0x18003a6d3
mov byte [0x1801a534e], 1
jmp 0x18003a6e0
cmp byte [0x1801a534e], 0
je 0x18003a82c
mov qword [rsp + 0x38], rdi
lea rax, [rbp + 0x67]
mov qword [rsp + 0x30], rdi
lea rbx, [0x1801a3230]
mov dword [rsp + 0x28], edi
lea rcx, [0x18018a972]
mov r8, rbx
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
mov qword [rbp + 0x67], 0
xor edx, edx
call fcn.18006f4d0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
lea rcx, str.Accept
call fcn.180067c40
test al, al
je 0x18003a82c
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x17], xmm0
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp + 0x27], xmm1
inc r8
cmp byte [rbx + r8], 0
jne 0x18003a753
mov rdx, rbx
lea rcx, [rbp + 0x17]
call fcn.18003eed0
lea rcx, [rbp + 0x17]
call fcn.180010440
mov rax, qword [str.Created]
lea r9, [rbp - 0x29]
movdqa xmm0, xmmword [0x18018fc80]
lea r8, [rbp - 0x49]
movdqa xmm1, xmmword [0x18018fcd0]
lea rdx, [rbp - 9]
movaps xmm2, xmmword [0x1801901c0]
lea rcx, [rbp + 0x17]
mov dword [rbp - 9], eax
movzx eax, word [0x18018d78c]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 5], ax
movzx eax, byte [0x18018d78e]
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
mov byte [rbp - 3], al
movss xmm0, dword [0x1801a3060]
mov eax, dword [str.Config]
mov dword [rbp + 0x17], eax
movzx eax, word [0x18018d754]
movss dword [rbp - 0x49], xmm0
movss xmm0, dword [0x1801a3068]
movdqu xmmword [rbp + 0x27], xmm1
mov word [rbp + 0x1b], ax
movss xmm1, dword [0x1801a3064]
movss dword [rbp - 0x45], xmm1
movss dword [rbp - 0x41], xmm0
mov qword [rbp + 0xf], 0xf
mov byte [rbp - 2], 0
mov byte [rbp + 0x1d], 0
movdqa xmmword [rbp - 0x29], xmm2
mov dword [rbp - 0x3d], 0x3f800000
call fcn.180016ae0
mov byte [0x1801a534e], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
lea rcx, str.Open_Folder
call fcn.180067c40
test al, al
je 0x18003a855
lea rcx, str.start_C:Purity.nl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
lea rcx, str.Unload_Cheat
call fcn.180067c40
test al, al
je 0x18003a8ac
mov ecx, 0xbb8
mov byte [0x1801a5491], 0
mov byte [0x1801a548d], 0
mov dword [0x1801a31bc], 0
mov dword [0x1801a319c], 0x3f800000
mov byte [0x1801a547d], 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1801a53fb], 1
call fcn.18004d550
mov r10, qword [0x1801a5538]
mov rcx, qword [r10 + 0x3ea0]
cmp byte [rcx + 0x9b], 0
jne 0x18003a913
movss xmm0, dword [rcx + 0xec]
movss xmm1, dword [rcx + 0xe8]
addss xmm1, dword [0x18018f9fc]
movss dword [rcx + 0xe0], xmm1
movss dword [rcx + 0xe4], xmm0
movsd xmm0, qword [rcx + 0x110]
mov eax, dword [rcx + 0x11c]
movsd qword [rcx + 0x108], xmm0
mov dword [rcx + 0x118], eax
mov byte [rcx + 0x120], 1
mov rax, qword [r10 + 0x3ea0]
lea r8, [0x18018cf91]
mov dword [rbp + 0x67], 0x435f0000
mov dl, 0x41
mov dword [rbp + 0x6b], 0x43d28000
mov byte [rax + 0x98], 1
mov rax, qword [r10 + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
cmp dl, 0x23
jne 0x18003a96a
cmp byte [r8], dl
jne 0x18003a96a
cmp byte [r8 + 1], dl
cmove ebx, r9d
movzx ecx, bl
movzx eax, dl
movzx edx, byte [r8]
xor rcx, rax
shr ebx, 8
inc r8
xor ebx, dword [r14 + rcx*4]
test dl, dl
jne 0x18003a958
not ebx
cmp dword [r10 + 0x3ed4], ebx
jne 0x18003a9a3
lea r8, str.Aimbot2
mov edx, 0xb
mov ecx, ebx
call fcn.18005ad50
xor r9d, r9d
mov dword [rsp + 0x20], edi
lea r8, [rbp + 0x67]
mov edx, ebx
lea rcx, str.Aimbot2
call fcn.18004d2b0
mov r15, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x108]
mov r12, qword [rsp + 0x100]
mov rsi, qword [rsp + 0xf8]
add rsp, 0xc8
pop r14
pop rdi
pop rbx
pop rbp
jmp fcn.18004d550
call fcn.180003d00
int3