Function at 0x1800ebaa0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push r14
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
mov rax, qword [0x1801d1038]
xor rax, rsp
mov qword [rbp + 0x110], rax
cmp qword [0x1802637c0], 2
movabs r14, 0x865908c81a2c22e9
je 0x1800ebaf9
call fcn.1800f4300
test eax, eax
je 0x1800ebaf9
mov edx, dword [0x18026414c]
mov r8b, 1
mov rcx, r14
call fcn.18006e790
xor ecx, ecx
call fcn.1800f4200
mov rax, qword [0x1802637c0]
test rax, rax
je 0x1800edc9f
mov qword [rsp + 0x2f0], rbx
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2c8], r13
mov qword [rsp + 0x2c0], r15
movaps xmmword [rsp + 0x2b0], xmm6
movaps xmmword [rsp + 0x2a0], xmm7
movaps xmmword [rsp + 0x290], xmm8
movaps xmmword [rsp + 0x280], xmm9
movaps xmmword [rsp + 0x270], xmm10
movaps xmmword [rsp + 0x260], xmm11
movaps xmmword [rsp + 0x250], xmm12
movaps xmmword [rsp + 0x240], xmm13
movaps xmmword [rsp + 0x230], xmm14
sub rax, 1
je 0x1800ed338
cmp rax, 1
jne 0x1800ed29f
mov rcx, qword [0x1801ef8e0]
movaps xmmword [rsp + 0x220], xmm15
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0x14d6f5678d8f1b37
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm6, xmmword [rax]
movsd xmm7, qword [rax + 0x10]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
xor esi, esi
mov qword [rbp - 0x38], rsi
mov byte [rbp - 0x38], 1
mov rax, qword [rbp - 0x38]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x8e5fb15663f79120
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
lea rdx, str.DEFAULT_SCRIPTED_CAMERA
mov qword [rbp - 0x38], rsi
xorps xmm12, xmm12
movss dword [rbp - 0x38], xmm6
shufps xmm6, xmm6, 0xaa
mov eax, dword [rcx + 8]
movsd qword [rbp - 0x70], xmm7
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
movss dword [rbp - 0x38], xmm6
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
movss dword [rbp - 0x38], xmm7
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x38], esi
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x38], esi
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x38], esi
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x38], 0x42480000
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov qword [rbp - 0x38], rsi
mov byte [rbp - 0x38], 1
mov rax, qword [rbp - 0x38]
mov ecx, dword [rdx + 8]
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x38], 2
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0xb51194800b257161
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov rcx, qword [rax]
mov eax, dword [rcx]
mov cl, 1
mov dword [0x18026414c], eax
call fcn.1800f4200
mov edx, dword [0x18026414c]
mov r8b, 1
movabs rcx, 0x26fb97d0a425f84
call fcn.18006e790
movabs rbx, 0x837765a25378f0bb
lea rcx, [rbp - 0x80]
mov rdx, rbx
xor r8d, r8d
call fcn.18006ee90
xor r8d, r8d
lea rcx, [rbp - 0x50]
mov rdx, rbx
call fcn.18006ee90
xor r8d, r8d
lea rcx, [rbp - 0x68]
mov rdx, rbx
call fcn.18006ee90
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov eax, dword [0x18026414c]
movss xmm0, dword [rbp - 0x68]
mov qword [rbp - 0x38], rsi
mov ecx, dword [rdx + 8]
mov dword [rbp - 0x38], eax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
movss dword [rbp - 0x38], xmm0
mov rax, qword [rbp - 0x38]
movss xmm0, dword [rbp - 0x48]
mov ecx, dword [rdx + 8]
mov qword [rbp - 0x38], rsi
movss dword [rbp - 0x38], xmm0
movss xmm0, dword [rbp - 0x70]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rsi
movss dword [rbp - 0x38], xmm0
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rbp - 0x38]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x85973643155d0b07
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rsi
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
movss xmm6, dword [0x180199f48]
mov r12d, esi
movss xmm14, dword [0x180199f0c]
movabs rbx, 0x50fac3a3e030a6e1
mov rcx, qword [0x1801ef8e0]
movabs r14, 0x3fef770d40960d5a
mov dword [rbp - 0x30], esi
movabs r15, 0xd80958fc74e988a6
movabs r13, 0x5f9532f3b5cc2551
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], r12d
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, rbx
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
lea rcx, [rbp - 0x80]
movss dword [rsp + 0x28], xmm12
movaps xmm3, xmm12
mov r8d, 0x796e
movss dword [rsp + 0x20], xmm12
mov rdx, qword [rax]
mov edx, dword [rdx]
call fcn.18006f4c0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], r12d
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, rbx
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm0
movsd qword [rbp - 0x58], xmm1
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, r15
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rcx, qword [0x1801ef8e0]
mov rdx, r14
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm0
movsd qword [rbp - 0x40], xmm1
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], r12d
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x50fac3a3e030a6e1
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov edi, dword [rax]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, r15
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rsi
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rsi
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdi, 0x4f8644af03d0e0d6
mov rdx, rdi
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x2e397fd2ecd37c87
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
cmp dword [rax], esi
je 0x1800eca6c
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
lea rbx, str.ps_menu
movabs rdx, 0xdfa2ef8e04127dd5
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rbx
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rsi
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
movss xmm0, dword [0x180199eb4]
lea rdx, str.common_medal
mov dword [rsp + 0x58], esi
movaps xmm3, xmm6
mov dword [rsp + 0x50], 0xff
movaps xmm2, xmm6
mov dword [rsp + 0x48], 0xff
mov rcx, rbx
mov dword [rsp + 0x40], 0xff
mov dword [rsp + 0x38], 0xff
movss dword [rsp + 0x30], xmm12
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x180199ea8]
movss dword [rsp + 0x20], xmm0
call fcn.1800e3930
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], r12d
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x50fac3a3e030a6e1
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x7239b21a38f536ba
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
cmp dword [rax], esi
je 0x1800eca6c
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, rdi
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
cmp r12d, dword [rax]
je 0x1800eca6c
mov dword [rbp - 0x10], 0xa
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, r15
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], 0xffffffff
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x10]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x23f8f5fc7e8c4a6b
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsxd rbx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], r12d
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x50fac3a3e030a6e1
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rbx
mov rax, qword [rcx]
mov edi, dword [rax]
test ebx, ebx
jle 0x1800eca62
movss xmm15, dword [rbp - 0x58]
lea r12, [rbp - 8]
movss xmm10, dword [rbp - 0x40]
movss xmm11, dword [rbp - 0x48]
movss xmm13, dword [rbp - 0x50]
nop
mov ebx, dword [r12]
test ebx, ebx
je 0x1800eca3c
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x7239b21a38f536ba
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
cmp dword [rax], esi
je 0x1800eca3c
mov r15d, 4
mov ebx, dword [r12]
test edi, edi
jne 0x1800ec561
mov edi, ebx
jmp 0x1800ec727
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm0, xmmword [rax]
movsd xmm9, qword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm8, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
movaps xmm2, xmm10
movss xmm3, dword [rbp - 0x68]
movaps xmm1, xmm11
mov byte [rsp + 0x30], 1
movss dword [rsp + 0x28], xmm15
mov rcx, qword [rax]
movsd xmm0, qword [rcx + 0x10]
movups xmm7, xmmword [rcx]
movsd qword [rbp - 0x70], xmm0
movss xmm0, dword [rbp - 0x60]
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm13
call fcn.18006c930
movaps xmm6, xmm0
mov byte [rsp + 0x30], 1
movsd qword [rbp - 0x70], xmm9
shufps xmm8, xmm8, 0xaa
movaps xmm3, xmm7
movss dword [rsp + 0x28], xmm9
movaps xmm2, xmm10
movaps xmm1, xmm11
movss dword [rsp + 0x20], xmm8
movaps xmm0, xmm13
call fcn.18006c930
mov rcx, qword [0x1801ef8e0]
comiss xmm0, xmm6
cmova edi, ebx
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0xd80958fc74e988a6
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x28]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x3a87e44bb9a01d54
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm0, xmmword [rax]
movsd xmm8, qword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm7, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x78], edi
mov ecx, dword [rdx + 8]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x78], rsi
mov byte [rsp + 0x78], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm6, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x78], rsi
movss dword [rsp + 0x78], xmm6
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x78], rsi
shufps xmm7, xmm7, 0xaa
movss dword [rsp + 0x78], xmm7
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x78], rsi
movss dword [rsp + 0x78], xmm8
mov ecx, dword [rdx + 8]
movsd qword [rbp - 0x70], xmm8
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x20]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
lea rdx, [rbp - 0x38]
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
movabs rdx, 0x34e82f05df2974f5
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
test edi, edi
je 0x1800eca32
xor r8d, r8d
mov edx, edi
mov rcx, r13
call fcn.18006cf20
test eax, eax
jne 0x1800eca2b
test ebx, ebx
je 0x1800eca2b
movss dword [rsp + 0x28], xmm14
movaps xmm3, xmm12
mov edx, edi
movss dword [rsp + 0x20], xmm12
call fcn.1800f40b0
mov rcx, qword [0x1801ef8e0]
sub r15, 1
jne 0x1800ec552
add r12, 8
sub qword [rsp + 0x70], 1
jne 0x1800ec4f0
movss xmm6, dword [0x180199f48]
movabs r15, 0xd80958fc74e988a6
mov r12d, dword [rbp - 0x30]
movabs rdi, 0x4f8644af03d0e0d6
inc r12d
movabs rbx, 0x50fac3a3e030a6e1
mov dword [rbp - 0x30], r12d
cmp r12d, 0x20
jl 0x1800ebf11
movaps xmm15, xmmword [rsp + 0x220]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, rdi
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov r8, qword [0x1801ef8e0]
movabs rdx, 0x2e397fd2ecd37c87
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [r8 + 8]
mov qword [r8 + rcx*8 + 0x130], rax
inc dword [r8 + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
cmp dword [rax], esi
je 0x1800ed26d
mov dword [rbp + 0x50], 0xa
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, r15
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], 0xffffffff
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp + 0x50]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
movabs rdx, 0x23f8f5fc7e8c4a6b
inc dword [rcx + 8]
mov r8, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [r8 + 8]
mov qword [r8 + rcx*8 + 0x130], rax
inc dword [r8 + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov edi, esi
mov rcx, qword [rax]
movsxd r12, dword [rcx]
mov qword [rsp + 0x78], r12
test r12, r12
jle 0x1800ed26d
lea rbx, [rbp + 0x58]
mov qword [rbp - 0x30], rbx
nop
mov r15d, dword [rbx]
test r15d, r15d
je 0x1800ed256
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], r15d
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x7239b21a38f536ba
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov rcx, qword [rax]
cmp dword [rcx], esi
je 0x1800ed256
mov r12d, 4
nop word [rax + rax]
mov rcx, qword [0x1801ef8e0]
mov r15d, dword [rbx]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], r15d
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm6, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0xd80958fc74e988a6
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x58], xmm0
movups xmm13, xmmword [rax]
test edi, edi
jne 0x1800ecd63
mov edi, r15d
jmp 0x1800ecf1c
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm11, qword [rax + 0x10]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm10, xmmword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
movss xmm1, dword [rbp - 0x70]
movaps xmm0, xmm6
mov rax, qword [0x1801ef8e0]
movaps xmm7, xmm13
movss xmm8, dword [rbp - 0x58]
movaps xmm3, xmm6
shufps xmm0, xmm6, 0xaa
movaps xmm2, xmm8
mov byte [rsp + 0x30], 1
mov rcx, qword [rax]
movss dword [rsp + 0x28], xmm1
shufps xmm7, xmm13, 0xaa
movss dword [rsp + 0x20], xmm0
movaps xmm1, xmm7
movups xmm9, xmmword [rcx]
movaps xmm0, xmm13
call fcn.18006c930
mov byte [rsp + 0x30], 1
movaps xmm6, xmm0
movss dword [rsp + 0x28], xmm11
shufps xmm10, xmm10, 0xaa
movaps xmm3, xmm9
movss dword [rsp + 0x20], xmm10
movaps xmm2, xmm8
movaps xmm1, xmm7
movaps xmm0, xmm13
call fcn.18006c930
mov rcx, qword [0x1801ef8e0]
comiss xmm0, xmm6
cmova edi, r15d
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0xd80958fc74e988a6
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x38]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x3a87e44bb9a01d54
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm0, xmmword [rax]
movsd xmm8, qword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm7, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov ecx, dword [rdx + 8]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm6, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
movss dword [rsp + 0x70], xmm6
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
shufps xmm7, xmm7, 0xaa
movss dword [rsp + 0x70], xmm7
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
movss dword [rsp + 0x70], xmm8
mov ecx, dword [rdx + 8]
movsd qword [rbp - 0x70], xmm8
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x20]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
lea rdx, [rbp - 0x28]
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
movabs rdx, 0x34e82f05df2974f5
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov rcx, qword [rax]
mov ebx, dword [rcx]
test edi, edi
je 0x1800ed243
xor r8d, r8d
mov edx, edi
mov rcx, r13
call fcn.18006cf20
test eax, eax
jne 0x1800ed243
test ebx, ebx
je 0x1800ed243
movss dword [rsp + 0x28], xmm12
lea rcx, [rbp - 0x80]
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm12
mov r8d, 0x796e
mov edx, edi
call fcn.18006f4c0
movss dword [rsp + 0x28], xmm14
movaps xmm3, xmm12
mov edx, edi
movss dword [rsp + 0x20], xmm12
call fcn.1800f40b0
mov rbx, qword [rbp - 0x30]
sub r12, 1
jne 0x1800ecc40
mov r12, qword [rsp + 0x78]
add rbx, 8
sub r12, 1
mov qword [rbp - 0x30], rbx
mov qword [rsp + 0x78], r12
jne 0x1800ecbd0
cmp qword [0x1802637c0], 2
je 0x1800ed29f
call fcn.1800f4300
test eax, eax
je 0x1800ed29f
mov edx, dword [0x18026414c]
mov r8b, 1
movabs rcx, 0x865908c81a2c22e9
call fcn.18006e790
xor ecx, ecx
call fcn.1800f4200
movaps xmm13, xmmword [rsp + 0x240]
movaps xmm12, xmmword [rsp + 0x250]
movaps xmm11, xmmword [rsp + 0x260]
movaps xmm10, xmmword [rsp + 0x270]
movaps xmm9, xmmword [rsp + 0x280]
movaps xmm8, xmmword [rsp + 0x290]
movaps xmm7, xmmword [rsp + 0x2a0]
movaps xmm6, xmmword [rsp + 0x2b0]
mov r15, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x2c8]
mov r12, qword [rsp + 0x2d0]
mov rdi, qword [rsp + 0x300]
mov rsi, qword [rsp + 0x2f8]
mov rbx, qword [rsp + 0x2f0]
movaps xmm14, xmmword [rsp + 0x230]
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1800f6320
add rsp, 0x2d8
pop r14
pop rbp
ret
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdi, 0x4f8644af03d0e0d6
mov rdx, rdi
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
xor esi, esi
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x2e397fd2ecd37c87
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
cmp dword [rax], esi
je 0x1800edc73
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, rdi
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
xor r8d, r8d
movabs rcx, 0x5e6cc07646bbeab8
mov rdx, qword [rax]
mov edx, dword [rdx]
call fcn.18006e790
mov rcx, qword [0x1801ef8e0]
mov dword [rbp + 0xb0], 0xa
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0xd80958fc74e988a6
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], 0xffffffff
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp + 0xb0]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x23f8f5fc7e8c4a6b
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov edi, esi
mov rcx, qword [rax]
movsxd r12, dword [rcx]
mov qword [rsp + 0x78], r12
test r12, r12
jle 0x1800edc73
movss xmm14, dword [0x18019a23c]
lea rbx, [rbp + 0xb8]
mov qword [rbp - 0x28], rbx
movabs r14, 0x3fef770d40960d5a
movabs r13, 0x5f9532f3b5cc2551
xorps xmm13, xmm13
nop
mov r15d, dword [rbx]
test r15d, r15d
je 0x1800edc52
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], r15d
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x7239b21a38f536ba
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov rcx, qword [rax]
cmp dword [rcx], esi
je 0x1800edc52
mov r12d, 4
nop word [rax + rax]
mov rcx, qword [0x1801ef8e0]
mov r15d, dword [rbx]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], r15d
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm6, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0xd80958fc74e988a6
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm12, qword [rax + 0x10]
movsd qword [rbp - 0x58], xmm12
movups xmm10, xmmword [rax]
movaps xmm11, xmm10
shufps xmm11, xmm10, 0xaa
test edi, edi
jne 0x1800ed68e
mov edi, r15d
jmp 0x1800ed859
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movups xmm0, xmmword [rax]
movsd xmm9, qword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm8, xmmword [rax]
movsd qword [rbp - 0x58], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
movss xmm1, dword [rbp - 0x70]
movaps xmm3, xmm6
mov rax, qword [0x1801ef8e0]
movaps xmm2, xmm12
mov byte [rsp + 0x30], 1
movss dword [rsp + 0x28], xmm1
movaps xmm1, xmm11
mov rcx, qword [rax]
movsd xmm0, qword [rcx + 0x10]
movups xmm7, xmmword [rcx]
movsd qword [rbp - 0x58], xmm0
movaps xmm0, xmm6
shufps xmm0, xmm6, 0xaa
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm10
call fcn.18006c930
movaps xmm6, xmm0
mov byte [rsp + 0x30], 1
movaps xmm3, xmm7
shufps xmm8, xmm8, 0xaa
movaps xmm2, xmm12
movss dword [rsp + 0x28], xmm9
movaps xmm1, xmm11
movaps xmm0, xmm10
movss dword [rsp + 0x20], xmm8
movsd qword [rbp - 0x58], xmm9
call fcn.18006c930
mov rcx, qword [0x1801ef8e0]
comiss xmm0, xmm6
cmova edi, r15d
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs r15, 0xd80958fc74e988a6
mov rdx, r15
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x30]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x3a87e44bb9a01d54
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm8, qword [rax + 0x10]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm7, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x70], edi
mov ecx, dword [rdx + 8]
mov rax, qword [rsp + 0x70]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
mov byte [rsp + 0x70], 1
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, r14
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
movsd xmm0, qword [rax + 0x10]
movups xmm6, xmmword [rax]
movsd qword [rbp - 0x70], xmm0
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], rsi
movss dword [rsp + 0x70], xmm6
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x70], rsi
shufps xmm7, xmm7, 0xaa
movss dword [rsp + 0x70], xmm7
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
movss dword [rsp + 0x70], xmm8
mov ecx, dword [rdx + 8]
movsd qword [rbp - 0x70], xmm8
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rbp - 0x38]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
lea rdx, [rbp - 0x20]
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
movabs rdx, 0x34e82f05df2974f5
inc dword [rcx + 8]
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov rcx, qword [rax]
mov ebx, dword [rcx]
test edi, edi
je 0x1800edc3f
xor r8d, r8d
mov edx, edi
mov rcx, r13
call fcn.18006cf20
test eax, eax
jne 0x1800edc3f
test ebx, ebx
je 0x1800edc3f
movss dword [rsp + 0x28], xmm13
lea rcx, [rbp - 0x68]
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm13
mov r8d, 0x796e
mov edx, edi
call fcn.18006f4c0
mov rbx, qword [0x1801ef8e8]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rbx + 0x18]
jne 0x1800edc3f
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1800edc3f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 4
lea ecx, [rdx + rdx*4]
shl ecx, 2
cmp r8d, ecx
jne 0x1800edc3f
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, r15
call fcn.1800063f0
movss xmm0, dword [rbp - 0x58]
movaps xmm3, xmm12
mov rax, qword [0x1801ef8e0]
movaps xmm2, xmm11
movss xmm4, dword [rbp - 0x60]
movaps xmm1, xmm10
movss dword [rsp + 0x68], xmm14
mov byte [rsp + 0x60], 1
mov rax, qword [rax]
mov byte [rsp + 0x58], 1
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x40], 1
mov dword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_50
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [rbp - 0x68]
movss dword [rsp + 0x28], xmm4
movss dword [rsp + 0x20], xmm0
call fcn.18006f230
mov rbx, qword [rbp - 0x28]
sub r12, 1
jne 0x1800ed560
mov r12, qword [rsp + 0x78]
add rbx, 8
sub r12, 1
mov qword [rbp - 0x28], rbx
mov qword [rsp + 0x78], r12
jne 0x1800ed4f0
movabs r14, 0x865908c81a2c22e9
cmp qword [0x1802637c0], 2
je 0x1800ed29f
call fcn.1800f4300
test eax, eax
je 0x1800ed29f
mov edx, dword [0x18026414c]
mov r8b, 1
mov rcx, r14
jmp 0x1800ed293
call fcn.1800f4300
test eax, eax
je 0x1800ed31e
mov edx, dword [0x18026414c]
mov r8b, 1
mov rcx, r14
call fcn.18006e790
xor ecx, ecx
call fcn.1800f4200
jmp 0x1800ed31e