Function at 0x18008d820
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180151040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r13, rcx
xor r14d, r14d
mov dword [rbp - 0x51], r14d
mov rax, qword [0x1803f0c60]
test rax, rax
je 0x18008d874
mov rax, qword [rax + 0x98]
jmp 0x18008d877
mov rax, r14
cmp qword [rax + 0x48], r14
jne 0x18008d882
call fcn.180042b40
call fcn.180043d70
call fcn.18001c6d0
call fcn.18005d620
cmp byte [0x1801510b4], r14b
je 0x18008dce1
cmp byte [0x1803eff52], r14b
je 0x18008da2c
cmp byte [0x1803eff50], r14b
je 0x18008d944
movsd xmm0, qword [str.yyuz_]
movsd qword [rbp - 0x69], xmm0
movzx ecx, word [0x180139b70]
mov word [rbp - 0x61], cx
movzx eax, byte [0x180139b72]
mov byte [rbp - 0x69], 0x4c
xor byte [rbp - 0x68], 0x36
xor byte [rbp - 0x67], 0x37
xor byte [rbp - 0x66], 0x38
xor byte [rbp - 0x65], 0x39
xor byte [rbp - 0x64], 0x3a
xor byte [rbp - 0x63], 0x3b
xor byte [rbp - 0x62], 0x3c
xor cl, 0x3d
mov byte [rbp - 0x61], cl
xor byte [rbp - 0x60], 0x3e
xor al, 0x3f
mov byte [rbp - 0x5f], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
lea rax, [rbp - 0x69]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x18008d920
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x29]
call fcn.180014de0
lea rdx, [rbp - 0x29]
mov ebx, 1
jmp 0x18008d9c6
movsd xmm0, qword [str.yspw]
movsd qword [rbp - 0x69], xmm0
movzx eax, word [0x18013a950]
mov word [rbp - 0x61], ax
cmp byte [0x18013a951], r14b
je 0x18008d98d
mov byte [rbp - 0x69], 0x4c
xor byte [rbp - 0x68], 0x36
xor byte [rbp - 0x67], 0x37
xor byte [rbp - 0x66], 0x38
xor byte [rbp - 0x65], 0x39
xor byte [rbp - 0x64], 0x3a
xor byte [rbp - 0x63], 0x3b
xor byte [rbp - 0x62], 0x3c
xor byte [rbp - 0x61], 0x3d
xor byte [rbp - 0x60], 0x3e
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
lea rax, [rbp - 0x69]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x18008d9a7
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 9]
call fcn.180014de0
lea rdx, [rbp - 9]
mov ebx, 2
mov rax, qword [0x1803f77a0]
mov rcx, qword [rax + 0x108]
add rcx, 0x20
call fcn.180093450
test bl, 2
je 0x18008da24
and ebx, 0xfffffffd
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x18008da24
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008da1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008da1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180102054
nop
test bl, 1
jmp 0x18008db53
xorps xmm0, xmm0
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
cmp byte [0x1803eff50], r14b
je 0x18008daa1
mov eax, dword [0x180139f50]
mov dword [rbp - 0x69], eax
movzx eax, word [0x180139f54]
mov word [rbp - 0x65], ax
mov byte [rbp - 0x69], 0x4c
xor byte [rbp - 0x68], 0x36
xor byte [rbp - 0x67], 0x37
xor byte [rbp - 0x66], 0x38
xor al, 0x39
mov byte [rbp - 0x65], al
xor byte [rbp - 0x64], 0x3a
movups xmmword [rbp - 0x29], xmm0
movdqu xmmword [rbp - 0x19], xmm1
lea rax, [rbp - 0x69]
nop dword [rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x18008da80
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x29]
call fcn.180014de0
lea rdx, [rbp - 0x29]
mov ebx, 4
jmp 0x18008daf2
mov eax, dword [str.rwz9]
mov dword [rbp - 0x69], eax
movzx eax, byte [0x18013a1c8]
mov byte [rbp - 0x69], 0x47
xor byte [rbp - 0x68], 0x36
xor byte [rbp - 0x67], 0x37
xor byte [rbp - 0x66], 0x38
xor al, 0x39
mov byte [rbp - 0x65], al
movups xmmword [rbp - 9], xmm0
movdqu xmmword [rbp + 7], xmm1
lea rax, [rbp - 0x69]
inc r8
cmp byte [rax + r8], r14b
jne 0x18008dad3
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 9]
call fcn.180014de0
lea rdx, [rbp - 9]
mov ebx, 8
mov rax, qword [0x1803f77a0]
mov rcx, qword [rax + 0x108]
add rcx, 0x20
call fcn.180093450
test bl, 8
je 0x18008db50
and ebx, 0xfffffff7
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x18008db50
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008db4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008db4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180102054
nop
test bl, 4
je 0x18008db8c
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x18008db8c
inc rdx
mov rcx, qword [rbp - 0x29]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18008db87
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008dbf1
call fcn.180102054
mov rax, qword [0x1803f0c60]
cvttss2si edx, dword [rax + 0xd4]
lea rcx, [rbp - 0x49]
call fcn.180093b80
mov rax, qword [0x1803f77a0]
mov rcx, qword [rax + 0x108]
add rcx, 0x40
lea rdx, [rbp - 0x49]
call fcn.180093450
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x18008dbfd
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008dbf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008dbf8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180102054
mov rax, qword [0x1803f77f0]
mov r15d, dword [rax + 0x60]
lea rax, [rbp - 0x29]
mov qword [rbp - 0x69], rax
mov rsi, qword [0x1803f77a0]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r14
mov rdx, qword [rsi + 0x110]
sub rdx, qword [rsi + 0x108]
sar rdx, 5
test rdx, rdx
je 0x18008dcab
lea rcx, [rbp - 0x29]
call fcn.1800153d0
lea rax, [rbp - 0x29]
mov qword [rbp - 0x51], rax
mov rdi, qword [rsi + 0x108]
mov rsi, qword [rsi + 0x110]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov rbx, qword [rbp - 0x29]
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
lea rax, [rbp - 0x29]
mov qword [rbp + 7], rax
cmp rdi, rsi
je 0x18008dc9c
nop dword [rax]
mov rdx, rdi
mov rcx, rbx
call fcn.180012000
add rbx, 0x20
mov qword [rbp - 1], rbx
add rdi, 0x20
cmp rdi, rsi
jne 0x18008dc80
mov rdx, rbx
mov rcx, rbx
call fcn.180014ee0
mov qword [rbp - 0x21], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], r14
mov r8d, 9
lea rdx, str.watermark
lea rcx, [rbp - 0x49]
call fcn.180014de0
nop
mov r9d, r15d
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x49]
call fcn.18000ec40
mov ecx, 1
call fcn.180019090
cmp byte [0x1803f7978], 0
je 0x18008ddce
lea rax, [rbp - 0x29]
mov qword [rbp - 0x69], rax
mov rdi, qword [0x1803f77a0]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r14
mov rdx, qword [rdi + 0x128]
sub rdx, qword [rdi + 0x120]
sar rdx, 5
test rdx, rdx
je 0x18008dd9b
lea rcx, [rbp - 0x29]
call fcn.1800153d0
lea rax, [rbp - 0x29]
mov qword [rbp - 0x51], rax
mov rsi, qword [rdi + 0x128]
mov rdi, qword [rdi + 0x120]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov rbx, qword [rbp - 0x29]
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
lea rax, [rbp - 0x29]
mov qword [rbp + 7], rax
cmp rdi, rsi
je 0x18008dd8c
nop dword [rax]
mov rdx, rdi
mov rcx, rbx
call fcn.180012000
add rbx, 0x20
mov qword [rbp - 1], rbx
add rdi, 0x20
cmp rdi, rsi
jne 0x18008dd70
mov rdx, rbx
mov rcx, rbx
call fcn.180014ee0
mov qword [rbp - 0x21], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], r14
mov r8d, 9
lea rdx, str.spectator
lea rcx, [rbp - 0x49]
call fcn.180014de0
nop
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x49]
call fcn.180010f60
cmp byte [0x1803f78e0], 0
je 0x18008deb5
mov esi, dword [0x1803f0004]
mov edi, dword [0x1803f792c]
mov ebx, dword [0x1803f7950]
mov rax, qword [0x1803f0c60]
mov rax, qword [rax + 0x4b10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.18001bdd0
mov r15, rax
movups xmm0, xmmword [0x1803ef9d0]
movups xmmword [rbp - 0x69], xmm0
lea rcx, [rbp - 0x69]
call fcn.180018990
mov r12d, eax
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x69], xmm0
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x65], xmm1
movd xmm2, esi
cvtdq2ps xmm2, xmm2
test eax, 0xff000000
je 0x18008deb5
movss xmm0, dword [0x18013bff0]
comiss xmm0, xmm2
ja 0x18008deb5
subss xmm2, xmm0
mov dword [rsp + 0x28], 0x4f
movss xmm0, dword [0x18013c154]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
lea rdx, [rbp - 0x69]
mov rcx, r15
call fcn.18003b470
movss xmm0, dword [0x18013c068]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, r12d
mov r8d, dword [r15 + 0x78]
mov rdx, qword [r15 + 0x80]
mov rcx, r15
call fcn.180039a80
mov dword [r15 + 0x78], r14d
cmp byte [0x1803f0038], 0
je 0x18008df65
mov ecx, dword [0x1803f7950]
lea r8d, [rcx + 1]
add ecx, 0xfffffff9
mov dword [rsp + 0x28], 1
lea rbx, [0x1803ef9e0]
mov qword [rsp + 0x20], rbx
mov edx, dword [0x1803f792c]
mov r9d, edx
call fcn.180073210
mov ecx, dword [0x1803f7950]
lea r8d, [rcx + 1]
add ecx, 8
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
mov edx, dword [0x1803f792c]
mov r9d, edx
call fcn.180073210
mov r9d, dword [0x1803f792c]
lea edx, [r9 - 7]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
mov ecx, dword [0x1803f7950]
mov r8d, ecx
call fcn.180073210
mov r9d, dword [0x1803f792c]
lea edx, [r9 + 8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
mov ecx, dword [0x1803f7950]
mov r8d, ecx
call fcn.180073210
call fcn.18007dd70
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
movabs r15, 0xff00ff00ff00ff00
mov qword [rbp - 1], r15
lea r12, [rbp + 0x5f]
mov qword [rbp + 7], r12
mov rdi, qword [r12]
xor rdi, r15
mov qword [rbp - 9], rdi
mov qword [r12], r14
movups xmmword [rbp - 0x29], xmm0
lea rax, [rbp + 0x5f]
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x29], r15
mov qword [rax], r14
mov ecx, r14d
lea rsi, [0x180094260]
lea rbx, [0x180000000]
mov rax, qword [0x1803f5a40]
test rax, rax
je 0x18008dff9
mov rdx, r14
nop dword [rax]
cmp rax, rsi
je 0x18008dfe8
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x3f5a40]
test rax, rax
jne 0x18008dfd0
jmp 0x18008dff9
mov r9, qword [rbx + rdx*8 + 0x3f24c0]
test r9, r9
jne 0x18008e0df
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x18008e022
mov r9, r14
jmp 0x18008e0be
mov rax, rsi
mov rcx, r9
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x18008e030
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1803f6d18]
mov qword [rbx + rax*8 + 0x3f5a40], rsi
mov qword [rbx + rax*8 + 0x3f24c0], r9
inc rax
mov qword [0x1803f6d18], rax
lea rcx, [0x18006cc40]
call r9
nop
lea rax, [rbp + 0x5f]
mov qword [rax], r14
cmp byte [r13 + 0x32], 0
je 0x18008e445
mov rcx, r13
call fcn.180089a00
mov rbx, qword [0x1803f0c60]
mov qword [rbx + 0x4a10], r14
mov qword [rbx + 0x4a18], r14
mov dword [rbx + 0x4a04], 2
or dword [rbx + 0x4a00], 3
movsd xmm0, qword [rbx + 0x10]
movsd qword [rbx + 0x4a20], xmm0
mov dword [rbx + 0x4a08], 2
movdqa xmm6, xmmword [0x18013c5b0]
mov dword [rbp - 0x69], 2
movups xmm0, xmmword [rbx + 0x39ec]
movups xmmword [rbp - 0x65], xmm0
lea rcx, [rbx + 0x4a78]
lea rdx, [rbp - 0x69]
call fcn.180030b50
movsd xmm0, qword [0x180139718]
mov ecx, dword [0x180139720]
movzx eax, byte [0x180139724]
movsd qword [rbp - 0x69], xmm0
mov dword [rbp - 0x61], ecx
mov byte [rbp - 0x5d], al
cmp dword [rbx + 0x4a74], 2
je 0x18008e19b
movups xmmword [rbx + 0x39ec], xmm6
mov r8d, r14d
cmp dword [0x180151098], 2
jl 0x18008e2fa
movdqa xmm5, xmmword [0x18013c6e0]
movdqa xmm6, xmmword [str.8888]
movdqa xmm2, xmmword [0x18013c4d0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movdqa xmm4, xmmword [0x18013c550]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x18013c5a0]
movd xmm0, dword [0x180139718]
xorps xmm2, xmm0
movd dword [rbp - 0x69], xmm2
movdqa xmm2, xmmword [0x18013c4f0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x18013c5a0]
movd xmm0, dword [rbp - 0x65]
xorps xmm2, xmm0
movd dword [rbp - 0x65], xmm2
movdqa xmm3, xmmword [0x18013c500]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x18013c5a0]
movd xmm0, ecx
xorps xmm3, xmm0
movd dword [rbp - 0x61], xmm3
mov r8d, 0xc
mov eax, r8d
lea r9, [rbp - 0x69]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18008e310
xor edx, edx
mov r8d, 0x201f
lea rcx, [rbp - 0x69]
call fcn.1800222c0
call fcn.1800247c0
mov r8, qword [0x1803f0c60]
movsxd rax, dword [r8 + 0x4a78]
cmp eax, 1
jl 0x18008e394
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
movss xmm1, dword [r8 + 0xe44]
subss xmm1, dword [0x18013c14c]
movss xmm0, dword [r8 + 0xe40]
subss xmm0, dword [0x18013c170]
movss dword [r8 + 0x4a10], xmm0
movss dword [r8 + 0x4a14], xmm1
mov qword [r8 + 0x4a18], r14
mov dword [r8 + 0x4a04], 1
or dword [r8 + 0x4a00], 3
mov qword [r8 + 0x4a20], r14
mov dword [r8 + 0x4a08], 2
movsd xmm0, qword [0x180139780]
movsd qword [rbp - 0x69], xmm0
movzx eax, byte [0x180139788]
mov byte [rbp - 0x69], 0x23
xor byte [rbp - 0x68], 0x36
xor byte [rbp - 0x67], 0x37
xor byte [rbp - 0x66], 0x38
xor byte [rbp - 0x65], 0x39
xor byte [rbp - 0x64], 0x3a
xor byte [rbp - 0x63], 0x3b
xor byte [rbp - 0x62], 0x3c
xor al, 0x3d
mov byte [rbp - 0x61], al
xor edx, edx
mov r8d, 0x203f
lea rcx, [rbp - 0x69]
call fcn.1800222c0
call fcn.1800247c0
jmp 0x18008e47f
cmp byte [0x1803f7909], 0
je 0x18008e47f
cmp qword [0x1803f0d78], 0
je 0x18008e47f
cmp qword [0x1803f0c80], 0
je 0x18008e47f
mov ecx, dword [0x1803f0018]
call fcn.18005fa40
test eax, eax
je 0x18008e47f
cmp byte [0x1803f78e8], 0
jne 0x18008e47f
call fcn.18007d5c0
call fcn.18001e810
mov rcx, qword [r13 + 0x98]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [r13 + 0xa8]
mov edx, 1
call qword [rax + 0x108]
mov rcx, qword [r13 + 0x98]
mov rax, qword [rcx]
lea r8, [r13 + 0xb4]
mov rdx, qword [r13 + 0xa8]
call qword [rax + 0x190]
mov rax, qword [0x1803f0c60]
mov rax, qword [rax + 0x4b10]
mov rcx, qword [rax]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, r14
call fcn.1800420d0
mov rcx, qword [r13 + 0xa0]
mov rax, qword [rcx]
cmp byte [0x1803f0080], 0
setne r14b
xor r8d, r8d
mov edx, r14d
call qword [rax + 0x40]
nop
xor rdi, r15
mov qword [r12], rdi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.180101a90
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret