Function at 0x18001d7d0
Capabilities:
Check if file exists
Create thread
Enumerate processes
Execute command
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x468]
sub rsp, 0x560
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x180050040]
xor rax, rsp
mov qword [rbp + 0x440], rax
xor r14d, r14d
call fcn.18001c880
mov ebx, dword [0x180051d30]
test ebx, ebx
jne 0x18001d8d4
cmp qword [0x180051d40], r14
jne 0x18001d846
lea ecx, [rbx + 0x10]
call fcn.18003fa40
mov qword [rbp + 0x190], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], r14d
mov qword [0x180051d40], rax
mov ebx, r14d
mov edi, r14d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov dword [rbp + 0x200], 0x238
lea rdx, [rbp + 0x200]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
lea rdx, [rbp + 0x200]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x18001d8ce
nop dword [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x22c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x18001d8ba
mov eax, dword [rbp + 0x21c]
cmp eax, edi
jle 0x18001d8ba
mov edi, eax
mov ebx, dword [rbp + 0x208]
lea rdx, [rbp + 0x200]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001d890
mov dword [0x180051d30], ebx
mov rdi, qword [0x180051d40]
test rdi, rdi
jne 0x18001d909
lea ecx, [rdi + 0x10]
call fcn.18003fa40
mov rdi, rax
mov qword [rbp + 0x190], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], r14d
mov qword [0x180051d40], rax
mov ebx, dword [0x180051d30]
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x18001d97b
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov dword [rsp + 0x50], 0x238
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x18001d978
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rsp + 0x7c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov ebx, dword [rsp + 0x58]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001d950
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r14d
je 0x18001d994
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d290]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x18001f931
cmp dword [rbp + 0x1a8], 0
je 0x18001f925
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001f925
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
mov rdx, qword [0x180051d20]
mov rax, qword [rdx + 0x48a8]
mov rcx, qword [rax]
movss xmm1, dword [rcx + 0x18]
addss xmm1, dword [0x180049158]
movss xmm0, dword [rcx + 0x14]
addss xmm0, dword [0x18004918c]
movss dword [rdx + 0x47b8], xmm0
movss dword [rdx + 0x47bc], xmm1
mov qword [rdx + 0x47c0], r14
mov dword [rdx + 0x47ac], 4
or dword [rdx + 0x47a8], 3
mov dword [rdx + 0x47c8], 0x43c80000
mov dword [rdx + 0x47cc], 0x43fa0000
mov dword [rdx + 0x47b0], 4
movss xmm0, dword [rdx + 0x3c08]
mulss xmm0, dword [0x180049158]
call fcn.180013870
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d120]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x18001f912
cmp dword [rbp + 0x1a8], 0
je 0x18001f906
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001f906
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
lea ecx, [rax + 0x79]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea rsi, [0x18001d400]
test ax, ax
je 0x18001dbe2
mov ecx, 8
cmp byte [0x180051c76], 0
je 0x18001dec1
mov byte [0x180051c76], 0
call fcn.18003fa40
mov qword [rax], rsi
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x18001deb0
cmp dword [rsp + 0x48], 0
je 0x18001dea4
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001dea4
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov edx, 0x2bc
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rbx, qword [r8 + 0x3ed0]
movss xmm6, dword [0x1800491c0]
cmp byte [rbx + 0xbb], 0
jne 0x18001e09b
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Aim___Mode
call fcn.180004320
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f18], eax
jne 0x18001dc54
lea r8, str.Aim___Mode
mov edx, 0xb
mov ecx, eax
call fcn.18001aeb0
xor r9d, r9d
lea r8, str.Aim___Mode
lea edx, [r9 + 0x1a]
mov ecx, edi
call fcn.18003d360
test al, al
je 0x18001e094
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001dcb7
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001dcf6
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001dd35
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001dd74
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001ddac
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051c75]
lea rcx, str.Aim_F10
call fcn.180036640
test al, al
je 0x18001de4b
cmp byte [0x180051c75], 1
jne 0x18001de4b
mov ecx, 8
call fcn.18003fa40
mov qword [rax], rsi
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x18001df60
cmp dword [rsp + 0x48], 0
je 0x18001df54
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001df54
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov r8, qword [0x180051d20]
mov rdx, qword [r8 + 0x3ed0]
cmp byte [r8 + 0x48ef], 0
je 0x18001df71
cmp byte [r8 + 0x48ee], 0
jne 0x18001df71
test byte [r8 + 0x4770], 4
jne 0x18001e05c
mov eax, dword [r8 + 0x48b8]
cmp eax, dword [r8 + 0x476c]
jne 0x18001e05c
test eax, eax
je 0x18001e05c
jmp 0x18001e03d
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x180051c76], 1
call fcn.18003fa40
mov qword [rax], rsi
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x18001df43
cmp dword [rsp + 0x48], 0
je 0x18001df37
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001df37
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
jmp 0x18001dbd2
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov eax, dword [r8 + 0x4774]
test al, 1
je 0x18001e05c
cmp qword [r8 + 0x3ed8], rdx
je 0x18001df91
test al, al
jns 0x18001e05c
mov eax, dword [r8 + 0x3f30]
test eax, eax
je 0x18001dfb8
cmp eax, dword [r8 + 0x476c]
je 0x18001dfb8
cmp byte [r8 + 0x3f3d], 0
jne 0x18001dfb8
cmp eax, dword [rdx + 0x7c]
jne 0x18001e05c
mov rcx, qword [r8 + 0x48b0]
test rcx, rcx
je 0x18001e01e
mov rcx, qword [rcx + 0x378]
test rcx, rcx
je 0x18001e01e
cmp byte [rcx + 0xb7], 0
je 0x18001e01e
mov rax, qword [rdx + 0x378]
cmp rcx, rax
je 0x18001e01e
mov r9d, dword [rcx + 0x14]
bt r9d, 0x1b
jb 0x18001dff7
bt r9d, 0x1a
jae 0x18001e01e
cmp qword [rax + 0x378], rcx
je 0x18001e01e
cmp rax, rcx
je 0x18001e01e
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001e000
test dword [r8 + 0x4770], 0x100
je 0x18001e05c
test byte [r8 + 0x4770], 4
jne 0x18001e05c
mov eax, dword [rdx + 0x7c]
cmp dword [r8 + 0x476c], eax
jne 0x18001e03d
cmp byte [rdx + 0xb8], 0
jne 0x18001e05c
xor ecx, ecx
call fcn.180014510
lea rcx, str.Activar_en_cada_partida
call fcn.1800348f0
call fcn.180010110
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e09b
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e0da
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rbx, qword [r8 + 0x3ed0]
cmp byte [rbx + 0xbb], 0
jne 0x18001eca4
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.ESP___Mode
call fcn.180004320
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f18], eax
jne 0x18001e13d
lea r8, str.ESP___Mode
mov edx, 0xb
mov ecx, eax
call fcn.18001aeb0
xor r9d, r9d
lea r8, str.ESP___Mode
lea edx, [r9 + 0x1a]
mov ecx, edi
call fcn.18003d360
test al, al
je 0x18001ec9d
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e1a0
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e1df
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e21e
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e256
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051c77]
lea rcx, str.Chams_3D
call fcn.180036640
test al, al
je 0x18001e4f8
cmp byte [0x180051c77], 1
jne 0x18001e4f8
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r14w
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], 7
mov word [rbp + 0x1a0], r14w
lea r9, str.HD_Player.exe
mov edx, 0xd
lea rcx, [rbp + 0x1c0]
call fcn.18001fee0
mov rax, qword [rbp + 0x1b8]
cmp rax, 0x1e
jb 0x18001e322
lea rbx, [rbp + 0x1a0]
cmp rax, 7
cmova rbx, qword [rbp + 0x1a0]
mov qword [rbp + 0x1b0], 0x1e
mov r8d, 0x3c
lea rdx, str.C:WindowsSystem32d3dx19.dll
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + 0x3c], r14w
jmp 0x18001e33a
lea r9, str.C:WindowsSystem32d3dx19.dll
mov edx, 0x1e
lea rcx, [rbp + 0x1a0]
call fcn.18001fee0
lea rcx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 7
cmova rcx, qword [rbp + 0x1a0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea rcx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 7
cmova rcx, qword [rbp + 0x1c0]
call fcn.18001d5d0
test eax, eax
jne 0x18001e413
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x180048744]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18001e408
mov dword [rsp + 0x50], 0x238
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18001e408
cmp dword [rsp + 0x58], 0
jne 0x18001e3e0
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
nop word [rax + rax]
lea rdx, [0x180048748]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x18001e408
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001e3e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18001e432
lea rdx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 7
cmova rdx, qword [rbp + 0x1a0]
mov ecx, eax
call fcn.18001d6a0
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 7
jbe 0x18001e47b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e476
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e476
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003fdec
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], 7
mov word [rbp + 0x1a0], r14w
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 7
jbe 0x18001e4de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e4d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e4d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003fdec
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r14w
mov rcx, qword [0x180051d20]
mov r8, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48ef], 0
je 0x18001e544
cmp byte [rcx + 0x48ee], 0
jne 0x18001e544
test byte [rcx + 0x4770], 4
jne 0x18001e62b
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x18001e62b
test eax, eax
je 0x18001e62b
jmp 0x18001e60c
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x18001e62b
cmp qword [rcx + 0x3ed8], r8
je 0x18001e563
test al, al
jns 0x18001e62b
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x18001e588
cmp eax, dword [rcx + 0x476c]
je 0x18001e588
cmp byte [rcx + 0x3f3d], 0
jne 0x18001e588
cmp eax, dword [r8 + 0x7c]
jne 0x18001e62b
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x18001e5ed
mov rdx, qword [rdx + 0x378]
test rdx, rdx
je 0x18001e5ed
cmp byte [rdx + 0xb7], 0
je 0x18001e5ed
mov rax, qword [r8 + 0x378]
cmp rdx, rax
je 0x18001e5ed
mov r9d, dword [rdx + 0x14]
bt r9d, 0x1b
jb 0x18001e5c7
bt r9d, 0x1a
jae 0x18001e5ed
cmp qword [rax + 0x378], rdx
je 0x18001e5ed
cmp rax, rdx
je 0x18001e5ed
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001e5d0
test dword [rcx + 0x4770], 0x100
je 0x18001e62b
test byte [rcx + 0x4770], 4
jne 0x18001e62b
mov eax, dword [r8 + 0x7c]
cmp dword [rcx + 0x476c], eax
jne 0x18001e60c
cmp byte [r8 + 0xb8], 0
jne 0x18001e62b
xor ecx, ecx
call fcn.180014510
lea rcx, str.Podras_ver_a_los_jugadores_detras_de_las_estructuras
call fcn.1800348f0
call fcn.180010110
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e66a
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e6a2
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051cca]
lea rcx, str.ESP_Box
call fcn.180036640
test al, al
je 0x18001e740
cmp byte [0x180051cca], 1
jne 0x18001e740
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d110]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x18001e798
cmp dword [rsp + 0x38], 0
je 0x18001e78c
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001e78c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
mov rcx, qword [0x180051d20]
mov r8, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48ef], 0
je 0x18001e7a9
cmp byte [rcx + 0x48ee], 0
jne 0x18001e7a9
test byte [rcx + 0x4770], 4
jne 0x18001e890
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x18001e890
test eax, eax
je 0x18001e890
jmp 0x18001e871
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x38], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x18001e890
cmp qword [rcx + 0x3ed8], r8
je 0x18001e7c8
test al, al
jns 0x18001e890
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x18001e7ed
cmp eax, dword [rcx + 0x476c]
je 0x18001e7ed
cmp byte [rcx + 0x3f3d], 0
jne 0x18001e7ed
cmp eax, dword [r8 + 0x7c]
jne 0x18001e890
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x18001e852
mov rdx, qword [rdx + 0x378]
test rdx, rdx
je 0x18001e852
cmp byte [rdx + 0xb7], 0
je 0x18001e852
mov rax, qword [r8 + 0x378]
cmp rdx, rax
je 0x18001e852
mov r9d, dword [rdx + 0x14]
bt r9d, 0x1b
jb 0x18001e82c
bt r9d, 0x1a
jae 0x18001e852
cmp qword [rax + 0x378], rdx
je 0x18001e852
cmp rax, rdx
je 0x18001e852
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001e835
test dword [rcx + 0x4770], 0x100
je 0x18001e890
test byte [rcx + 0x4770], 4
jne 0x18001e890
mov eax, dword [r8 + 0x7c]
cmp dword [rcx + 0x476c], eax
jne 0x18001e871
cmp byte [r8 + 0xb8], 0
jne 0x18001e890
xor ecx, ecx
call fcn.180014510
lea rcx, str.Box_3d_para_ubicar_a_tus_oponentes
call fcn.1800348f0
call fcn.180010110
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001e8c8
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051cc9]
lea rcx, str.Menu_Chams
call fcn.180036640
test al, al
je 0x18001eb68
cmp byte [0x180051cc9], 1
jne 0x18001eb68
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], 7
mov word [rbp + 0x1e0], r14w
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r14w
lea r9, str.HD_Player.exe
mov edx, 0xd
lea rcx, [rbp + 0x1e0]
call fcn.18001fee0
mov rax, qword [rbp + 0x1d8]
cmp rax, 0x25
jb 0x18001e994
lea rbx, [rbp + 0x1c0]
cmp rax, 7
cmova rbx, qword [rbp + 0x1c0]
mov qword [rbp + 0x1d0], 0x25
mov r8d, 0x4a
lea rdx, str.C:WindowsSystem32ServicesLinux.dll
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + 0x4a], r14w
jmp 0x18001e9ac
lea r9, str.C:WindowsSystem32ServicesLinux.dll
mov edx, 0x25
lea rcx, [rbp + 0x1c0]
call fcn.18001fee0
lea rcx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 7
cmova rcx, qword [rbp + 0x1c0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea rcx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 7
cmova rcx, qword [rbp + 0x1e0]
call fcn.18001d5d0
test eax, eax
jne 0x18001ea83
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x180048744]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18001ea78
mov dword [rsp + 0x50], 0x238
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18001ea78
cmp dword [rsp + 0x58], 0
jne 0x18001ea50
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
nop dword [rax + rax]
lea rdx, [0x180048748]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x18001ea78
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18001ea50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18001eaa2
lea rdx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 7
cmova rdx, qword [rbp + 0x1c0]
mov ecx, eax
call fcn.18001d6a0
nop
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 7
jbe 0x18001eaeb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001eae6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001eae6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003fdec
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r14w
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x18001eb4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001eb49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001eb49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003fdec
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], 7
mov word [rbp + 0x1e0], r14w
mov r8, qword [0x180051d20]
mov rdx, qword [r8 + 0x3ed0]
cmp byte [r8 + 0x48ef], 0
je 0x18001ebb9
cmp byte [r8 + 0x48ee], 0
jne 0x18001ebb9
test byte [r8 + 0x4770], 4
jne 0x18001eca4
mov eax, dword [r8 + 0x48b8]
cmp eax, dword [r8 + 0x476c]
jne 0x18001eca4
test eax, eax
je 0x18001eca4
jmp 0x18001ec85
mov eax, dword [r8 + 0x4774]
test al, 1
je 0x18001eca4
cmp qword [r8 + 0x3ed8], rdx
je 0x18001ebd9
test al, al
jns 0x18001eca4
mov eax, dword [r8 + 0x3f30]
test eax, eax
je 0x18001ec00
cmp eax, dword [r8 + 0x476c]
je 0x18001ec00
cmp byte [r8 + 0x3f3d], 0
jne 0x18001ec00
cmp eax, dword [rdx + 0x7c]
jne 0x18001eca4
mov rcx, qword [r8 + 0x48b0]
test rcx, rcx
je 0x18001ec66
mov rcx, qword [rcx + 0x378]
test rcx, rcx
je 0x18001ec66
cmp byte [rcx + 0xb7], 0
je 0x18001ec66
mov rax, qword [rdx + 0x378]
cmp rcx, rax
je 0x18001ec66
mov r9d, dword [rcx + 0x14]
bt r9d, 0x1b
jb 0x18001ec3f
bt r9d, 0x1a
jae 0x18001ec66
cmp qword [rax + 0x378], rcx
je 0x18001ec66
cmp rax, rcx
je 0x18001ec66
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001ec48
test dword [r8 + 0x4770], 0x100
je 0x18001eca4
test byte [r8 + 0x4770], 4
jne 0x18001eca4
mov eax, dword [rdx + 0x7c]
cmp dword [r8 + 0x476c], eax
jne 0x18001ec85
cmp byte [rdx + 0xb8], 0
jne 0x18001eca4
xor ecx, ecx
call fcn.180014510
lea rcx, str.Disfruta
call fcn.1800348f0
call fcn.180010110
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001ece3
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rbx, qword [r8 + 0x3ed0]
cmp byte [rbx + 0xbb], 0
jne 0x18001f27c
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Sniper
call fcn.180004320
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f18], eax
jne 0x18001ed46
lea r8, str.Sniper
mov edx, 0xb
mov ecx, eax
call fcn.18001aeb0
xor r9d, r9d
lea r8, str.Sniper
lea edx, [r9 + 0x1a]
mov ecx, edi
call fcn.18003d360
test al, al
je 0x18001f275
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001eda9
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001ede8
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001ee27
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001ee5f
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051cc3]
lea rcx, str.Fov_Sniper_BETA
call fcn.180036640
test al, al
je 0x18001eefd
cmp byte [0x180051cc3], 1
jne 0x18001eefd
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d570]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x18001ef55
cmp dword [rsp + 0x38], 0
je 0x18001ef49
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001ef49
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
mov rcx, qword [0x180051d20]
mov r8, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48ef], 0
je 0x18001ef66
cmp byte [rcx + 0x48ee], 0
jne 0x18001ef66
test byte [rcx + 0x4770], 4
jne 0x18001f04d
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x18001f04d
test eax, eax
je 0x18001f04d
jmp 0x18001f02e
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x38], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x18001f04d
cmp qword [rcx + 0x3ed8], r8
je 0x18001ef85
test al, al
jns 0x18001f04d
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x18001efaa
cmp eax, dword [rcx + 0x476c]
je 0x18001efaa
cmp byte [rcx + 0x3f3d], 0
jne 0x18001efaa
cmp eax, dword [r8 + 0x7c]
jne 0x18001f04d
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x18001f00f
mov rdx, qword [rdx + 0x378]
test rdx, rdx
je 0x18001f00f
cmp byte [rdx + 0xb7], 0
je 0x18001f00f
mov rax, qword [r8 + 0x378]
cmp rdx, rax
je 0x18001f00f
mov r9d, dword [rdx + 0x14]
bt r9d, 0x1b
jb 0x18001efe9
bt r9d, 0x1a
jae 0x18001f00f
cmp qword [rax + 0x378], rdx
je 0x18001f00f
cmp rax, rdx
je 0x18001f00f
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001eff2
test dword [rcx + 0x4770], 0x100
je 0x18001f04d
test byte [rcx + 0x4770], 4
jne 0x18001f04d
mov eax, dword [r8 + 0x7c]
cmp dword [rcx + 0x476c], eax
jne 0x18001f02e
cmp byte [r8 + 0xb8], 0
jne 0x18001f04d
xor ecx, ecx
call fcn.180014510
lea rcx, str.Activa_Por_partida
call fcn.1800348f0
call fcn.180010110
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f085
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051cc1]
lea rcx, str.Cambio_Rapido_BETA
call fcn.180036640
test al, al
je 0x18001f123
cmp byte [0x180051cc1], 1
jne 0x18001f123
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d510]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x18001f180
cmp dword [rsp + 0x38], 0
je 0x18001f174
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001f174
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
mov r8, qword [0x180051d20]
mov rdx, qword [r8 + 0x3ed0]
cmp byte [r8 + 0x48ef], 0
je 0x18001f191
cmp byte [r8 + 0x48ee], 0
jne 0x18001f191
test byte [r8 + 0x4770], 4
jne 0x18001f27c
mov eax, dword [r8 + 0x48b8]
cmp eax, dword [r8 + 0x476c]
jne 0x18001f27c
test eax, eax
je 0x18001f27c
jmp 0x18001f25d
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x38], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov eax, dword [r8 + 0x4774]
test al, 1
je 0x18001f27c
cmp qword [r8 + 0x3ed8], rdx
je 0x18001f1b1
test al, al
jns 0x18001f27c
mov eax, dword [r8 + 0x3f30]
test eax, eax
je 0x18001f1d8
cmp eax, dword [r8 + 0x476c]
je 0x18001f1d8
cmp byte [r8 + 0x3f3d], 0
jne 0x18001f1d8
cmp eax, dword [rdx + 0x7c]
jne 0x18001f27c
mov rcx, qword [r8 + 0x48b0]
test rcx, rcx
je 0x18001f23e
mov rcx, qword [rcx + 0x378]
test rcx, rcx
je 0x18001f23e
cmp byte [rcx + 0xb7], 0
je 0x18001f23e
mov rax, qword [rdx + 0x378]
cmp rcx, rax
je 0x18001f23e
mov r9d, dword [rcx + 0x14]
bt r9d, 0x1b
jb 0x18001f217
bt r9d, 0x1a
jae 0x18001f23e
cmp qword [rax + 0x378], rcx
je 0x18001f23e
cmp rax, rcx
je 0x18001f23e
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001f220
test dword [r8 + 0x4770], 0x100
je 0x18001f27c
test byte [r8 + 0x4770], 4
jne 0x18001f27c
mov eax, dword [rdx + 0x7c]
cmp dword [r8 + 0x476c], eax
jne 0x18001f25d
cmp byte [rdx + 0xb8], 0
jne 0x18001f27c
xor ecx, ecx
call fcn.180014510
lea rcx, str.Activa_Por_partida
call fcn.1800348f0
call fcn.180010110
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f2bb
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rbx, qword [r8 + 0x3ed0]
cmp byte [rbx + 0xbb], 0
jne 0x18001f87c
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Otros
call fcn.180004320
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f18], eax
jne 0x18001f31e
lea r8, str.Otros
mov edx, 0xb
mov ecx, eax
call fcn.18001aeb0
xor r9d, r9d
lea r8, str.Otros
lea edx, [r9 + 0x1a]
mov ecx, edi
call fcn.18003d360
test al, al
je 0x18001f875
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f381
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f3c0
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f3ff
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f437
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051cc8]
lea rcx, str.Tiro_Awm
call fcn.180036640
test al, al
je 0x18001f4e3
cmp byte [0x180051cc8], 1
jne 0x18001f4e3
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d460]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x18001f53b
cmp dword [rbp + 0x1a8], 0
je 0x18001f52f
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001f52f
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
mov rcx, qword [0x180051d20]
mov r8, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48ef], 0
je 0x18001f54e
cmp byte [rcx + 0x48ee], 0
jne 0x18001f54e
test byte [rcx + 0x4770], 4
jne 0x18001f63b
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x18001f63b
test eax, eax
je 0x18001f63b
jmp 0x18001f61c
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1a8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x18001f63b
cmp qword [rcx + 0x3ed8], r8
je 0x18001f56d
test al, al
jns 0x18001f63b
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x18001f592
cmp eax, dword [rcx + 0x476c]
je 0x18001f592
cmp byte [rcx + 0x3f3d], 0
jne 0x18001f592
cmp eax, dword [r8 + 0x7c]
jne 0x18001f63b
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x18001f5fd
mov rdx, qword [rdx + 0x378]
test rdx, rdx
je 0x18001f5fd
cmp byte [rdx + 0xb7], 0
je 0x18001f5fd
mov rax, qword [r8 + 0x378]
cmp rdx, rax
je 0x18001f5fd
mov r9d, dword [rdx + 0x14]
bt r9d, 0x1b
jb 0x18001f5d1
bt r9d, 0x1a
jae 0x18001f5fd
cmp qword [rax + 0x378], rdx
je 0x18001f5fd
nop word [rax + rax]
cmp rax, rdx
je 0x18001f5fd
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001f5e0
test dword [rcx + 0x4770], 0x100
je 0x18001f63b
test byte [rcx + 0x4770], 4
jne 0x18001f63b
mov eax, dword [r8 + 0x7c]
cmp dword [rcx + 0x476c], eax
jne 0x18001f61c
cmp byte [r8 + 0xb8], 0
jne 0x18001f63b
xor ecx, ecx
call fcn.180014510
lea rcx, str.Activa_Por_partida
call fcn.1800348f0
call fcn.180010110
mov rcx, qword [0x180051d20]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x18001f673
mov qword [rbp + 0x190], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x190]
call fcn.1800134a0
lea rdx, [0x180051cc2]
lea rcx, str.Deslimitar_Sniper
call fcn.180036640
test al, al
je 0x18001f71f
cmp byte [0x180051cc2], 1
jne 0x18001f71f
mov ecx, 8
call fcn.18003fa40
lea rcx, [0x18001d4b0]
mov qword [rax], rcx
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x180020420]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x18001f77c
cmp dword [rbp + 0x1a8], 0
je 0x18001f770
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001f770
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
mov r8, qword [0x180051d20]
mov rdx, qword [r8 + 0x3ed0]
cmp byte [r8 + 0x48ef], 0
je 0x18001f78f
cmp byte [r8 + 0x48ee], 0
jne 0x18001f78f
test byte [r8 + 0x4770], 4
jne 0x18001f87c
mov eax, dword [r8 + 0x48b8]
cmp eax, dword [r8 + 0x476c]
jne 0x18001f87c
test eax, eax
je 0x18001f87c
jmp 0x18001f85d
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1a8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov eax, dword [r8 + 0x4774]
test al, 1
je 0x18001f87c
cmp qword [r8 + 0x3ed8], rdx
je 0x18001f7af
test al, al
jns 0x18001f87c
mov eax, dword [r8 + 0x3f30]
test eax, eax
je 0x18001f7d6
cmp eax, dword [r8 + 0x476c]
je 0x18001f7d6
cmp byte [r8 + 0x3f3d], 0
jne 0x18001f7d6
cmp eax, dword [rdx + 0x7c]
jne 0x18001f87c
mov rcx, qword [r8 + 0x48b0]
test rcx, rcx
je 0x18001f83e
mov rcx, qword [rcx + 0x378]
test rcx, rcx
je 0x18001f83e
cmp byte [rcx + 0xb7], 0
je 0x18001f83e
mov rax, qword [rdx + 0x378]
cmp rcx, rax
je 0x18001f83e
mov r9d, dword [rcx + 0x14]
bt r9d, 0x1b
jb 0x18001f815
bt r9d, 0x1a
jae 0x18001f83e
cmp qword [rax + 0x378], rcx
je 0x18001f83e
nop
cmp rax, rcx
je 0x18001f83e
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18001f820
test dword [r8 + 0x4770], 0x100
je 0x18001f87c
test byte [r8 + 0x4770], 4
jne 0x18001f87c
mov eax, dword [rdx + 0x7c]
cmp dword [r8 + 0x476c], eax
jne 0x18001f85d
cmp byte [rdx + 0xb8], 0
jne 0x18001f87c
xor ecx, ecx
call fcn.180014510
lea rcx, str.Activa_Por_partida
call fcn.1800348f0
call fcn.180010110
mov r8, qword [0x180051d20]
mov rax, qword [r8 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov r8, qword [r8 + 0x3ed0]
movsxd rdx, dword [r8 + 0x1c8]
mov rax, qword [r8 + 0x1d0]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1bc], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1c8], eax
lea rcx, [0x180051598]
cmp qword [0x1800515b0], 0xf
cmova rcx, qword [0x180051598]
call fcn.1800348f0
call fcn.180010110
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.18003fa20
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1a8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1a8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3