Function at 0x180189c80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x178]
sub rsp, 0x238
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
mov r13, rdx
xor r11d, r11d
mov r12d, r11d
mov dword [rbp + 0x198], r11d
mov dword [rbp + 0x180], r11d
cmp dword [0x1802a0114], r11d
je 0x18018ae8c
mov rcx, qword [0x18028c7d8]
mov rax, qword [rcx]
movd xmm1, dword [0x1802a0194]
cvtdq2ps xmm1, xmm1
call qword [rax + 0x360]
mov dword [rbp + 0x180], 3
lea r8, [rbp + 0x180]
lea rdx, [rbp]
lea rcx, [0x180285a68]
call fcn.1800d5850
mov rcx, qword [rax]
mov r14, qword [rcx + 0x18]
mov qword [rbp + 0x10], r14
mov rax, qword [rcx + 0x20]
mov qword [rsp + 0x58], rax
cmp r14, rax
je 0x18018ae74
movss xmm7, dword [0x18025debc]
movss xmm9, dword [0x18025dfa0]
movss xmm8, dword [0x18025e0e4]
movss xmm6, dword [0x18025e164]
nop dword [rax]
mov r14, qword [r14]
mov qword [rbp - 8], r14
test r14, r14
je 0x18018ae5f
mov rcx, r14
call fcn.1801548a0
mov rcx, qword [0x18028c748]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0x20]
mov eax, dword [rax]
mov dword [rbp - 0x30], eax
lea rdx, [rbp - 0x30]
call r8
mov rsi, rax
mov qword [rbp + 0x18], rax
test rax, rax
je 0x180189ef9
lea rcx, [rax + 0x10]
mov rdx, qword [rcx]
call qword [rdx + 0x48]
mov ebx, eax
mov rcx, qword [0x18028c760]
mov rdx, qword [rcx]
call qword [rdx + 0x60]
cmp ebx, eax
je 0x180189ef0
test byte [0x1802a0214], 8
je 0x180189df9
mov dword [rbp + 0x180], ebx
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0xb0]
lea rcx, [0x180285ae8]
call fcn.1800f11e0
mov rcx, qword [rax]
cmp byte [rcx + 0x14], 0
jne 0x180189e97
test byte [0x1802a0214], 0x10
je 0x180189e9b
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 7
mov qword [rbp - 0x38], 0xf
mov rax, qword [str.Default]
mov dword [rbp - 0x50], eax
movzx eax, word [0x18024ee04]
mov word [rbp - 0x4c], ax
movzx eax, byte [0x18024ee06]
mov byte [rbp - 0x4a], al
mov byte [rbp - 0x49], 0
or r12d, 1
mov dword [rbp + 0x198], r12d
mov dword [rbp + 0x180], r12d
mov dword [rbp + 0x190], ebx
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0xc0]
lea rcx, [0x180285b68]
call fcn.1800d5a90
mov rcx, qword [rax]
mov ebx, dword [rcx + 0x14]
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0xd0]
lea rcx, [0x1802a0680]
call fcn.18017a3a0
mov rcx, qword [rax]
cmp ebx, dword [rcx + 0x34]
jle 0x180189e9b
xor bl, bl
jmp 0x180189e9d
mov bl, 1
test r12b, 1
je 0x180189eb7
and r12d, 0xfffffffe
mov dword [rbp + 0x198], r12d
lea rcx, [rbp - 0x50]
call fcn.1800a3670
test bl, bl
je 0x180189f41
test byte [0x1802a0214], 1
jne 0x180189ee2
mov rcx, rsi
call fcn.1800ca2d0
mov ebx, dword [rax]
mov rcx, r13
call fcn.1800ca2d0
cmp ebx, dword [rax]
jne 0x18018ae5a
test byte [0x1802a0214], 2
jne 0x180189f41
mov rcx, rsi
jmp 0x180189f2a
test byte [0x1802a0214], 4
jmp 0x180189f3b
mov eax, dword [0x1802a0214]
test al, 1
jne 0x180189f23
mov rcx, r14
call fcn.1800ca2d0
mov ebx, dword [rax]
mov rcx, r13
call fcn.1800ca2d0
cmp ebx, dword [rax]
jne 0x18018ae5a
mov eax, dword [0x1802a0214]
test al, 2
jne 0x180189f41
mov rcx, r14
call fcn.1800ca2d0
mov ebx, dword [rax]
mov rcx, r13
call fcn.1800ca2d0
cmp ebx, dword [rax]
je 0x18018ae5a
mov rcx, r14
call fcn.1800cb4d0
mov rcx, r14
call fcn.1800cb5d0
lea rcx, [r14 + 8]
mov rax, qword [rcx]
call qword [rax + 0x110]
mov rdi, rax
lea rcx, [r14 + 0x10]
mov rdx, qword [rcx]
call qword [rdx + 0x48]
mov ebx, eax
mov rcx, qword [0x18028c760]
mov rdx, qword [rcx]
call qword [rdx + 0x60]
cmp ebx, eax
jne 0x180189fd5
mov rcx, qword [0x18028c760]
mov qword [rbp + 4], 0
mov dword [rbp], 0
mov rax, qword [rcx]
lea rdx, [rbp]
call qword [rax + 0x98]
mov dword [rbp + 8], 0
mov dword [rbp], 0
mov rdx, rdi
lea rcx, [rbp]
call fcn.1800e25e0
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x48]
mov ecx, dword [rax]
mov dword [rdi + 0xc], ecx
mov ecx, dword [rax + 4]
mov dword [rdi + 0x1c], ecx
mov eax, dword [rax + 8]
mov dword [rdi + 0x2c], eax
lea rax, [rbp - 0x24]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x2c]
lea r8, [rbp - 0x28]
mov rdx, rdi
mov rcx, r14
call fcn.1801ce550
test al, al
je 0x18018ae5a
movss xmm4, dword [rbp - 0x2c]
subss xmm4, dword [rbp - 0x28]
movaps xmm3, xmm4
mulss xmm3, xmm7
movaps xmm0, xmm3
addss xmm0, dword [rbp - 0x28]
cvttss2si edx, xmm0
mov dword [rsp + 0x54], edx
cvttss2si ecx, dword [rbp - 0x24]
mov dword [rbp + 0x190], ecx
addss xmm3, xmm3
subss xmm4, xmm3
cvttss2si eax, xmm4
mov dword [rbp - 0x60], eax
movss xmm0, dword [rbp - 0x20]
subss xmm0, dword [rbp - 0x24]
cvttss2si edi, xmm0
mov dword [rsp + 0x50], edi
cmp edx, dword [0x1802853e0]
jg 0x18018ae5a
add eax, edx
js 0x18018ae5a
cmp ecx, dword [0x1802853e4]
jg 0x18018ae5a
lea r15d, [rdi + rcx]
test r15d, r15d
js 0x18018ae5a
xor eax, eax
mov ebx, eax
mov dword [rbp - 0x5c], eax
mov r12d, eax
mov dword [rbp - 0x18], eax
lea r8, [rbp - 0x18]
lea rdx, [rbp + 0xe0]
call fcn.1801ccef0
mov rax, qword [rax]
add rax, 0x18
mov qword [rbp - 0x58], rax
movzx eax, byte [0x18029fd91]
mov r9, r14
test rsi, rsi
cmovne r9, rsi
mov byte [rsp + 0x20], al
mov r8, r13
lea rdx, [rbp - 0x10]
call fcn.1801c9750
mov rcx, r14
call fcn.1800d8fe0
mov r13d, dword [rax]
mov rcx, r14
call fcn.1800d8ee0
mov r14d, dword [rax]
cmp r13d, r14d
cmovl r14d, r13d
mov rcx, qword [rbp - 8]
call fcn.1800d91e0
movzx eax, byte [rax]
mov byte [rbp + 0x180], al
test byte [0x1802a0114], 0x10
je 0x18018a130
mov dword [rsp + 0x60], 0xff000000
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov r9d, dword [rbp - 0x60]
mov r8d, dword [rbp + 0x190]
mov edx, dword [rsp + 0x54]
call fcn.1801ca8a0
test byte [0x1802a0114], 2
je 0x18018a27c
movd xmm2, r14d
cvtdq2ps xmm2, xmm2
movd xmm0, r13d
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movzx edx, byte [0x18029fd18]
mov eax, dword [0x18029fd1c]
movzx ecx, al
sub ecx, edx
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
movd xmm0, edx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si ecx, xmm1
mov byte [rsp + 0x68], cl
movzx edx, byte [0x18029fd19]
shr eax, 8
movzx ecx, al
sub ecx, edx
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
movd xmm0, edx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
mov byte [rsp + 0x69], al
movzx ecx, byte [0x18029fd1a]
movzx eax, byte [0x18029fd1e]
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
mov byte [rsp + 0x6a], al
movzx ecx, byte [0x18029fd1b]
movzx eax, byte [0x18029fd1f]
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
mov byte [rsp + 0x6b], al
mov dword [rsp + 0x64], 0xff000000
mov esi, dword [rsp + 0x54]
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvttss2si ebx, xmm0
sub edi, ebx
add edi, dword [rbp + 0x190]
lea eax, [rbx + 2]
lea r8d, [rdi - 1]
lea edx, [rsi - 7]
lea rcx, [rsp + 0x64]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
mov r9d, 4
call fcn.1801ca820
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9d, 2
mov r8d, edi
lea edx, [rsi - 6]
call fcn.1801ca820
mov ebx, 5
mov edi, dword [rsp + 0x50]
mov rsi, qword [rbp + 0x18]
test byte [0x1802a0114], 4
je 0x18018a30e
mov dword [rsp + 0x50], 2
movd xmm3, r15d
cvtdq2ps xmm3, xmm3
movd xmm2, r14d
cvtdq2ps xmm2, xmm2
movd xmm0, r13d
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movd xmm1, edi
cvtdq2ps xmm1, xmm1
mulss xmm2, xmm1
subss xmm3, xmm2
subss xmm3, xmm9
cvttss2si r9d, xmm3
mov r8d, dword [rsp + 0x54]
sub r8d, ebx
sub r8d, 5
mov dword [rsp + 0x38], r14d
lea rax, [0x180205adc]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rbx, [0x1802912a4]
mov qword [rsp + 0x20], rbx
mov r13, qword [rbp - 0x58]
mov rdx, r13
lea rcx, [0x1802853a0]
call fcn.1801ca420
jmp 0x18018a319
mov r13, qword [rbp - 0x58]
lea rbx, [0x1802912a4]
mov r15, qword [rbp - 8]
test byte [0x1802a0114], 1
je 0x18018a3e8
lea rcx, [r15 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x18018a38e
mov ecx, dword [rax + 0x28]
sub ecx, 0x56
je 0x18018a385
sub ecx, 2
je 0x18018a36a
cmp ecx, 1
jne 0x18018a38e
mov rcx, r15
call fcn.180187280
lea rcx, str.Teleporter_Entrance
cmp dword [rax], r12d
lea rax, str.Teleporter_Exit
cmovne rcx, rax
jmp 0x18018a395
lea rcx, str.Sentry
cmp byte [rbp + 0x180], r12b
lea rax, str.Mini_Sentry
cmovne rcx, rax
jmp 0x18018a395
lea rcx, str.Dispenser
jmp 0x18018a395
lea rcx, str.Unknown
mov r12d, dword [r13 + 8]
add r12d, 2
mov dword [rsp + 0x50], 1
mov r9d, dword [rbp + 0x190]
sub r9d, r12d
mov r14d, dword [rbp - 0x60]
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
mov r8d, dword [rsp + 0x54]
add r8d, eax
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
mov rdx, r13
lea rcx, [0x1802853a0]
call fcn.1801ca640
jmp 0x18018a3ec
mov r14d, dword [rbp - 0x60]
test byte [0x1802a0114], 8
je 0x18018a4b0
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x48]
mov rbx, rax
mov rcx, qword [rbp + 0x188]
mov rdx, qword [rcx]
call qword [rdx + 0x48]
movss xmm0, dword [rbx + 4]
subss xmm0, dword [rax + 4]
movss xmm1, dword [rbx]
subss xmm1, dword [rax]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x18018a441
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x18018a449
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
cvttss2si ecx, xmm0
mov dword [rsp + 0x50], 1
mov r9d, dword [rbp + 0x190]
add r9d, edi
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
mov edi, dword [rsp + 0x54]
lea r8d, [rdi + rax]
mov dword [rsp + 0x38], ecx
lea rcx, [0x180257b98]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [0x1802912a4]
mov qword [rsp + 0x20], rcx
mov rdx, r13
lea rcx, [0x1802853a0]
call fcn.1801ca640
jmp 0x18018a4b4
mov edi, dword [rsp + 0x54]
test byte [0x1802a0114], 0x20
je 0x18018a6d7
mov rcx, r15
call fcn.180187380
cmp byte [rax], 0
jne 0x18018a6d7
test rsi, rsi
je 0x18018a6d7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov dword [rbp + 0xa0], eax
mov rax, qword [0x18028c760]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x40]
lea rcx, [rsi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x48]
lea r8, [rbp + 0x20]
mov edx, eax
mov rcx, qword [0x18028c760]
call rbx
test al, al
je 0x18018a6d7
mov edi, dword [r13 + 8]
add edi, 2
add edi, r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor esi, esi
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x18018a561
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x50]
call fcn.1800a56c0
nop
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r8, qword [rbp - 0x50]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8, rbx
lea rcx, [rbp - 0x80]
call fcn.1801cfee0
mov r12d, dword [rbp + 0x198]
or r12d, 2
mov dword [rbp + 0x198], r12d
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rcx, qword [rbp - 0x80]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r8, qword [rbp - 0x50]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
xor edx, edx
mov ecx, 0xfde9
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rcx, qword [rbp - 0x80]
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x6c], 0xff57cafe
mov esi, dword [rbp + 0x190]
mov r9d, esi
sub r9d, edi
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
mov edi, dword [rsp + 0x54]
lea r8d, [rdi + rax]
mov qword [rsp + 0x38], rcx
lea rcx, [0x180257b50]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x6c]
mov qword [rsp + 0x20], rcx
mov rdx, r13
lea rcx, [0x1802853a0]
call fcn.1801ca640
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x18018a6ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18018a6b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18018aeb8
call fcn.1801d1c00
xor ebx, ebx
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], bx
lea rcx, [rbp - 0x50]
call fcn.1800a3670
jmp 0x18018a6e6
xor ebx, ebx
mov r12d, dword [rbp + 0x198]
mov esi, dword [rbp + 0x190]
test byte [0x1802a0114], 0x40
je 0x18018a842
cmp byte [rbp + 0x180], 0
jne 0x18018a842
mov ecx, 4
mov eax, dword [0x18028ab2c]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18028ced4], ecx
jle 0x18018a7c1
lea rcx, [0x18028ced4]
call fcn.1801d1cb0
cmp dword [0x18028ced4], 0xffffffff
jne 0x18018a7c1
mov rcx, qword [0x18028c720]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
test rax, rax
je 0x18018a7ad
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rcx
cmp byte [r8 + rcx], 0
jne 0x18018a766
mov rdx, rbx
test rcx, rcx
je 0x18018a7a4
nop dword [rax + rax]
movsx eax, byte [rdx + r8]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x18018a780
cmp r9d, 0xc262c48c
je 0x18018a82d
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x18018a755
mov eax, ebx
mov dword [0x18028cec4], eax
lea rcx, [0x18028ced4]
call fcn.1801d1c44
movsxd rax, dword [0x18028cec4]
mov ebx, dword [rax + r15]
mov rcx, r15
call fcn.1800d92e0
mov ecx, dword [rax]
xor r11d, r11d
mov dword [rsp + 0x50], r11d
mov dword [rsp + 0x70], 0xff57cafe
lea r8d, [rdi + 4]
add r8d, r14d
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ecx
lea rax, str._d__d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov rdx, r13
lea rcx, [0x1802853a0]
call fcn.1801ca640
mov r13d, dword [r13 + 8]
jmp 0x18018a846
lea r8, str.m_iHighestUpgradeLevel
mov rdx, qword [r10 + 0x18]
call fcn.1801d1920
jmp 0x18018a7af
mov r13d, dword [rbp - 0x5c]
test byte [0x1802a0114], 0x80
je 0x18018ae53
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
xor edx, edx
mov r12d, edx
mov qword [rbp - 0x70], rdx
mov eax, 4
mov ebx, eax
mov edi, eax
mov eax, dword [0x18028ab2c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov ecx, dword [rbx + rax]
cmp dword [0x18028cec0], ecx
jle 0x18018a939
lea rcx, [0x18028cec0]
call fcn.1801d1cb0
mov edi, ebx
cmp dword [0x18028cec0], 0xffffffff
jne 0x18018a937
mov rcx, qword [0x18028c720]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18018a922
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rcx
cmp byte [r8 + rcx], r11b
jne 0x18018a8d3
mov rdx, r11
test rcx, rcx
je 0x18018a914
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rdx + r8]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x18018a8f0
cmp r9d, 0xc262c48c
je 0x18018aae1
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x18018a8c2
mov edi, 4
mov eax, r11d
mov dword [0x18028ceb4], eax
lea rcx, [0x18028cec0]
call fcn.1801d1c44
xor edx, edx
movsxd rax, dword [0x18028ceb4]
movss xmm0, dword [rax + r15]
mulss xmm0, xmm6
comiss xmm6, xmm0
jbe 0x18018a9b3
cvttss2si eax, xmm0
test eax, eax
je 0x18018a9b3
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x74], 0xff57cafe
cvtps2pd xmm0, xmm0
lea r9d, [rsi + r13]
mov r8d, dword [rsp + 0x54]
add r8d, 4
add r8d, r14d
movsd qword [rsp + 0x38], xmm0
lea rax, str.BUILDING:__0.f__
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x74]
mov qword [rsp + 0x20], rax
mov rbx, qword [rbp - 0x58]
mov rdx, rbx
lea rcx, [0x1802853a0]
call fcn.1801ca640
add r13d, dword [rbx + 8]
lea rcx, [r15 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ebx, dword [0x18028ab2c]
mov rsi, qword gs:[0x58]
test rax, rax
je 0x18018aab6
cmp dword [rax + 0x28], 0x58
jne 0x18018aab6
mov rax, qword [rsi + rbx*8]
mov ecx, dword [rdi + rax]
cmp dword [0x18028ced0], ecx
jle 0x18018aa92
lea rcx, [0x18028ced0]
call fcn.1801d1cb0
cmp dword [0x18028ced0], 0xffffffff
jne 0x18018aa92
mov rcx, qword [0x18028c720]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18018aa7d
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rcx
cmp byte [r8 + rcx], r11b
jne 0x18018aa34
mov rdx, r11
test rcx, rcx
je 0x18018aa74
nop word [rax + rax]
movsx eax, byte [rdx + r8]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x18018aa50
cmp r9d, 0x80133484
je 0x18018aafb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x18018aa23
mov eax, r11d
mov dword [0x18028cee0], eax
lea rcx, [0x18028ced0]
call fcn.1801d1c44
movsxd rax, dword [0x18028cee0]
cmp byte [rax + r15], 0
je 0x18018aab6
lea r8, str.WRANGLED
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.18018c040
mov r12, qword [rbp - 0x70]
mov rcx, r15
call fcn.1800d90e0
cmp byte [rax], 0
je 0x18018ab2b
mov rbx, qword [rbp - 0x78]
cmp rbx, r12
je 0x18018ab10
xor r14d, r14d
mov r8d, 6
lea rdx, str.SAPPED
jmp 0x18018ac19
lea r8, str.m_flPercentageConstructed
mov rdx, qword [r10 + 0x18]
call fcn.1801d1920
mov edi, 4
jmp 0x18018a925
lea r8, str.m_bPlayerControlled
mov rdx, qword [r10 + 0x18]
call fcn.1801d1920
jmp 0x18018aa80
lea r8, str.SAPPED
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.18018c040
xor r14d, r14d
jmp 0x18018ac4c
mov ecx, 4
mov rax, qword [rsi + rbx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18028ced8], ecx
jle 0x18018abf2
lea rcx, [0x18028ced8]
call fcn.1801d1cb0
cmp dword [0x18028ced8], 0xffffffff
jne 0x18018abf2
mov rcx, qword [0x18028c720]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r14d, r14d
test rax, rax
je 0x18018abc9
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rcx
cmp byte [r8 + rcx], r14b
jne 0x18018ab85
mov rdx, r14
test rcx, rcx
je 0x18018abc0
nop word [rax + rax]
movsx eax, byte [rdx + r8]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x18018aba0
cmp r9d, 0xc262c48c
je 0x18018abe0
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x18018ab74
mov eax, r14d
mov dword [0x18028ceec], eax
lea rcx, [0x18028ced8]
call fcn.1801d1c44
jmp 0x18018abf5
lea r8, str.m_bDisabled
mov rdx, qword [r10 + 0x18]
call fcn.1801d1920
jmp 0x18018abcc
xor r14d, r14d
movsxd rax, dword [0x18028ceec]
cmp byte [rax + r15], 0
je 0x18018ac50
mov rbx, qword [rbp - 0x78]
cmp rbx, r12
je 0x18018ac39
mov r8d, 8
lea rdx, str.DISABLED
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x18], r14
mov qword [rbx + 0x10], r14
mov rcx, rbx
call fcn.180146d60
add rbx, 0x20
mov qword [rbp - 0x78], rbx
jmp 0x18018ac54
lea r8, str.DISABLED
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.18018c040
mov r12, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x78]
lea rcx, [r15 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x18018ad73
cmp dword [rax + 0x28], 0x58
jne 0x18018ad73
mov rcx, r15
call fcn.1801545a0
cmp byte [rax], 0
jne 0x18018ad73
mov rcx, r15
call fcn.1800d91e0
movzx edi, byte [rax]
mov rcx, r15
call fcn.1800d94e0
mov esi, dword [rax]
mov rcx, r15
call fcn.1800d92e0
cmp dword [rax], 1
je 0x18018acac
mov rcx, r15
call fcn.1800d91e0
test dil, dil
je 0x18018acb6
mov edi, r14d
jmp 0x18018acc8
mov rcx, r15
call fcn.1801644e0
mov edi, dword [rax]
mov rcx, r15
call fcn.1800d92e0
test esi, esi
jne 0x18018ad19
cmp rbx, r12
je 0x18018acfe
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov r8d, 7
lea rdx, str.NO_AMMO
mov rcx, rbx
call fcn.180146d60
add rbx, 0x20
mov qword [rbp - 0x78], rbx
jmp 0x18018ad19
lea r8, str.NO_AMMO
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.18018c040
mov r12, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x78]
cmp byte [rbp + 0x180], 0
jne 0x18018ad73
test edi, edi
jne 0x18018ad73
cmp rbx, r12
je 0x18018ad58
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov r8d, 0xa
lea rdx, str.NO_ROCKETS
mov rcx, rbx
call fcn.180146d60
add rbx, 0x20
mov qword [rbp - 0x78], rbx
jmp 0x18018ad73
lea r8, str.NO_ROCKETS
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.18018c040
mov r12, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x78]
mov r14, qword [rbp - 0x80]
cmp r14, rbx
je 0x18018adfb
mov rdi, r14
xor r11d, r11d
mov dword [rbp + 0x180], r11d
mov dword [rsp + 0x78], 0xff57cafe
mov eax, dword [rbp + 0x190]
mov r15d, dword [rsp + 0x54]
add r15d, eax
lea esi, [rax + r13]
mov r13, qword [rbp - 0x58]
nop word [rax + rax]
mov rax, rdi
cmp qword [rdi + 0x18], 7
jbe 0x18018adbd
mov rax, qword [rdi]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x180]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8d, [r15 + 2]
mov rdx, r13
lea rcx, [0x1802853a0]
call fcn.1801ca640
add rdi, 0x20
add esi, dword [r13 + 8]
cmp rdi, rbx
jne 0x18018adb0
test r14, r14
je 0x18018ae4c
mov rdi, r14
cmp r14, rbx
je 0x18018ae19
mov rcx, rdi
call fcn.1800d54d0
add rdi, 0x20
cmp rdi, rbx
jne 0x18018ae08
sub r12, r14
and r12, 0xffffffffffffffe0
mov rax, r14
cmp r12, 0x1000
jb 0x18018ae41
add r12, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18018aebf
mov rdx, r12
mov rcx, r14
call fcn.1801d1c00
mov r12d, dword [rbp + 0x198]
mov r13, qword [rbp + 0x188]
mov rax, qword [rsp + 0x58]
mov r14, qword [rbp + 0x10]
add r14, 8
mov qword [rbp + 0x10], r14
cmp r14, rax
jne 0x180189d60
mov rcx, qword [0x18028c7d8]
mov rax, qword [rcx]
movss xmm1, dword [0x18025df58]
call qword [rax + 0x360]
lea r11, [rsp + 0x238]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3