Function at 0x18000be50
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rdi
push r14
push r15
lea rbp, [rsp - 0x1780]
mov eax, 0x1880
call fcn.180012df0
sub rsp, rax
movaps xmmword [rsp + 0x1850], xmm7
movaps xmmword [rsp + 0x1840], xmm8
movaps xmmword [rsp + 0x1830], xmm9
movaps xmmword [rsp + 0x1820], xmm10
movaps xmmword [rsp + 0x17f0], xmm13
movaps xmmword [rsp + 0x17d0], xmm15
mov rax, qword [0x180017010]
xor rax, rsp
mov qword [rbp + 0x16c0], rax
lea r15, [rdx + 0x34]
mov rbx, rdx
mov qword [rbp + 0x390], r15
mov rdi, rcx
xorps xmm8, xmm8
test r15, r15
je 0x18000bee6
mov edx, 8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000bee6
movss xmm0, dword [r15]
jmp 0x18000bee9
xorps xmm0, xmm0
lea r14, [rbx + 0x30]
mov qword [rbp + 0x6b0], r14
cvtps2pd xmm13, xmm0
movsd qword [rbp + 0x80], xmm13
test r14, r14
je 0x18000bf1f
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000bf1f
movss xmm0, dword [r14]
jmp 0x18000bf22
xorps xmm0, xmm0
movsd xmm7, qword [0x180014808]
movaps xmm9, xmm13
mulsd xmm9, xmm7
cvtps2pd xmm10, xmm0
movsd qword [rbp + 0xc0], xmm9
movsd qword [rbp - 8], xmm10
movaps xmm15, xmm10
mulsd xmm15, xmm7
movsd qword [rbp + 0xb0], xmm15
add rdi, 0x78
je 0x1800119fe
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x1800119fe
mov rdi, qword [rdi]
test rdi, rdi
je 0x1800119fe
mov rdx, rdi
call fcn.180004100
test rax, rax
je 0x1800119fe
lea rcx, [rax + 0x38]
mov qword [rsp + 0x1870], r13
test rcx, rcx
je 0x18000bfb1
mov edx, 8
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
mov rdx, rdi
call fcn.180004380
mov qword [rbp + 0xc8], rax
mov r13, rax
test rax, rax
je 0x1800119f6
mov rdx, rdi
mov qword [rsp + 0x18c0], rsi
call fcn.180004620
mov rsi, rax
test rax, rax
je 0x1800119ee
movups xmm0, xmmword [0x18001b1a8]
lea rdx, [rbp + 0x160]
mov qword [rsp + 0x1878], r12
movsd xmm1, qword [0x18001b1b8]
movaps xmmword [rsp + 0x1860], xmm6
movaps xmmword [rbp + 0x160], xmm0
movsd qword [0x18001b6d8], xmm15
movsd qword [0x18001b6e0], xmm9
movsd qword [0x18001b6c8], xmm10
movsd qword [0x18001b6d0], xmm13
movaps xmmword [rsp + 0x1810], xmm11
mov qword [0x180017790], rbx
mov qword [0x1800177a8], r13
movsd qword [rbp + 0x170], xmm1
call fcn.180002e50
test al, al
je 0x18000c091
cmp byte [0x18001b728], 0
je 0x18000c06e
xor al, al
jmp 0x18000c077
mov byte [0x18001b728], 1
mov al, 1
mov byte [0x18001b729], al
test al, al
je 0x18000c09f
cmp byte [0x18001779a], 0
sete byte [0x18001779a]
jmp 0x18000c09f
mov byte [0x18001b729], 0
mov byte [0x18001b728], 0
movaps xmmword [rsp + 0x1800], xmm12
mov rcx, rbx
movaps xmmword [rsp + 0x17e0], xmm14
call fcn.18000a7e0
movaps xmm0, xmmword [0x180014950]
lea rax, str.SubZero_Free_Internal_v2
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x90]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x3d0]
mov qword [rbp + 0x6c0], rax
xorps xmm1, xmm1
movaps xmmword [rbp - 0x50], xmm0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
mov byte [rsp + 0x58], 1
lea rax, [rbp + 0xf0]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x190]
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rbp + 0x180], xmm0
movaps xmmword [rbp + 0xf0], xmm1
movaps xmm1, xmmword [0x1800149c0]
movaps xmmword [rbp + 0x190], xmm1
movaps xmm1, xmmword [0x180014a40]
mov dword [rbp + 0x6c8], 0x19
mov dword [rbp + 0x6cc], 0x19
movaps xmm0, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x3d0], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
movaps xmmword [rbp + 0x90], xmm1
call fcn.1800011e0
lea rdx, [rbp + 0x160]
mov rcx, rsi
call fcn.180003900
lea rdx, [rbp + 0xbc0]
mov rcx, rsi
call fcn.180003630
mov rcx, rsi
call fcn.180003bd0
movss xmm6, dword [0x180017058]
mov rcx, r13
cvtps2pd xmm6, xmm6
cvtss2sd xmm0, xmm0
mulsd xmm6, xmm15
divsd xmm6, xmm0
mulsd xmm6, xmm7
movsd qword [rbp + 0x3e0], xmm6
call fcn.1800033c0
movsd xmm11, qword [0x1800147f8]
xor esi, esi
cmp byte [0x18001705f], sil
mov rbx, rdi
mov r12, rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x50], rbx
je 0x18000efc3
movsd xmm14, qword [0x180014918]
lea rdx, [rbp + 0x40]
mov r9, qword [0x18001b680]
mov r8, rdi
movsd qword [rbp + 0x3e8], xmm14
mov qword [rbp + 0x28], rsi
call fcn.180003e40
xor r8d, r8d
mov qword [rbp + 0x50], rbx
mov dword [rbp + 0x20], r8d
cmp dword [rbp + 0x48], esi
jle 0x18000e98a
mov r15d, dword [rbp + 0x48]
lea rdi, str.PlayerPawn
movsd xmm12, qword [0x1800148d8]
movaps xmm0, xmm15
movsd xmm15, qword [0x1800147c8]
mov r14d, esi
unpcklpd xmm0, xmm9
mov r13d, esi
movsd xmm9, qword [0x1800148c8]
mov qword [rbp - 0x10], r8
movups xmmword [rbp + 0x60], xmm0
cmp esi, r15d
jge 0x18000e93d
mov rax, qword [rbp + 0x40]
mov r13, qword [rax + r13*8]
cmp r13, r12
je 0x18000e939
test r13, r13
je 0x18000e939
mov rcx, r13
call fcn.180002700
test al, al
jne 0x18000e939
test r12, r12
je 0x18000c2ec
mov rcx, r12
call fcn.180002960
mov rcx, r13
mov byte [0x1800177c3], al
call fcn.180002960
jmp 0x18000c2f5
mov byte [0x1800177c3], 0
mov al, 1
lea rdx, [rbp + 0xb78]
mov byte [0x180017050], al
mov rcx, r13
call fcn.1800021a0
movups xmm7, xmmword [rbp + 0xb78]
lea r8, [rbp - 0x80]
mov rcx, qword [rbp + 0xc8]
movsd xmm8, qword [rbp + 0xb88]
lea rdx, [rbp + 0xbe0]
xorps xmm0, xmm0
movaps xmmword [rbp + 0xbe0], xmm7
movups xmmword [rbp - 0x80], xmm0
movsd qword [rbp + 0xbf0], xmm8
call fcn.1800030e0
movups xmm2, xmmword [rbp - 0x80]
xorps xmm11, xmm11
comisd xmm2, xmm11
jbe 0x18000e90e
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm1, xmm0
comisd xmm1, xmm2
jbe 0x18000e90e
unpckhpd xmm2, xmm2
comisd xmm2, xmm11
jbe 0x18000e90e
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm13
cvtps2pd xmm1, xmm0
comisd xmm1, xmm2
jbe 0x18000e90e
mov r8, r13
lea rdx, [rbp + 0x10]
call fcn.1800048e0
mov rcx, qword [rbp + 0x10]
xor eax, eax
mov dword [rbp + 0x6d8], 0xb
mov dword [rbp + 0x6dc], 0xb
mov qword [rbp + 0x6d0], rdi
mov qword [rbp + 0x3a0], rax
cmp word [rcx], ax
je 0x18000c3f8
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000c3d4
add eax, 1
mov dword [rbp + 0x3a8], eax
mov dword [rbp + 0x3ac], eax
je 0x18000c3ff
mov qword [rbp + 0x3a0], rcx
jmp 0x18000c3ff
mov qword [rbp + 0x3a8], rax
movaps xmm0, xmmword [rbp + 0x6d0]
lea r8, [rbp - 0x80]
movaps xmm1, xmmword [rbp + 0x3a0]
lea rdx, [rbp - 0x60]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmmword [rbp - 0x60], xmm1
call fcn.1800059b0
test al, al
je 0x18000e90e
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x100]
movss xmm6, dword [0x180017060]
lea rdx, [rbp + 0x120]
movaps xmmword [rbp + 0x100], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x120], xmm7
movsd qword [rbp + 0x130], xmm8
call fcn.1800066c0
movaps xmm7, xmm0
mulsd xmm7, qword [0x1800147f8]
cvtps2pd xmm10, xmm6
movsd qword [rbp + 0x300], xmm7
comisd xmm7, xmm10
ja 0x18000e91a
lea rdi, [r13 + 0x318]
test rdi, rdi
je 0x18000e8d4
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000e8d4
mov rdi, qword [rdi]
test rdi, rdi
je 0x18000e914
lea rcx, [r13 + 0x5b8]
test rcx, rcx
je 0x18000c4de
lea edx, [rax + 8]
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
lea r15, [rdi + 0x368]
test r15, r15
je 0x18000c503
mov edx, 8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000c503
movss xmm6, dword [r15]
jmp 0x18000c506
xorps xmm6, xmm6
lea r12, [rdi + 0x370]
xorps xmm8, xmm8
test r12, r12
je 0x18000c530
mov edx, 8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000c530
movss xmm0, dword [r12]
jmp 0x18000c533
xorps xmm0, xmm0
addss xmm0, dword [0x1800147d0]
comiss xmm0, xmm6
setae byte [0x18001779b]
cmp byte [0x1800177c0], 0
jne 0x18000c571
mov rcx, qword [rbp + 0xc8]
mov rdx, rdi
call fcn.18000afd0
test al, al
je 0x18000e920
movups xmm3, xmmword [0x18001b3e0]
jmp 0x18000c73e
mov rax, qword [0x1800178f0]
lea rdx, [rbp + 0xc00]
xorps xmm0, xmm0
add rax, 0x157e9e8
xor r8d, r8d
mov rcx, rdi
movups xmmword [rbp + 0xc00], xmm0
movups xmmword [rbp + 0xc10], xmm0
movups xmmword [rbp + 0xc20], xmm0
movups xmmword [rbp + 0xc30], xmm0
movups xmmword [rbp + 0xc40], xmm0
movups xmmword [rbp + 0xc50], xmm0
movups xmmword [rbp + 0xc60], xmm0
movups xmmword [rbp + 0xc70], xmm0
call rax
movsd xmm2, qword [rbp + 0xc70]
lea r8, [0x18001b3e0]
movaps xmm1, xmmword [rbp + 0xc60]
lea rdx, [rbp + 0x140]
mov rcx, qword [rbp + 0xc8]
movsd qword [0x18001b480], xmm2
movups xmmword [0x18001b470], xmm1
movaps xmmword [rbp + 0x140], xmm1
movsd qword [rbp + 0x150], xmm2
call fcn.1800030e0
mov r9, qword [0x1800178f0]
lea rdx, [rbp + 0xc80]
xorps xmm0, xmm0
movzx esi, al
add r9, 0x157e9e8
mov r8d, 0x44
mov rcx, rdi
movups xmmword [rbp + 0xc80], xmm0
movups xmmword [rbp + 0xc90], xmm0
movups xmmword [rbp + 0xca0], xmm0
movups xmmword [rbp + 0xcb0], xmm0
movups xmmword [rbp + 0xcc0], xmm0
movups xmmword [rbp + 0xcd0], xmm0
movups xmmword [rbp + 0xce0], xmm0
movups xmmword [rbp + 0xcf0], xmm0
call r9
movaps xmm0, xmmword [rbp + 0xce0]
movups xmmword [0x18001b430], xmm0
movsd xmm0, qword [rbp + 0xcf0]
movsd qword [0x18001b440], xmm0
test sil, sil
je 0x18000c6d3
movups xmm0, xmmword [0x18001b430]
lea r8, [0x18001b5d8]
mov rcx, qword [rbp + 0xc8]
movsd xmm1, qword [0x18001b440]
lea rdx, [rbp + 0xd0]
movaps xmmword [rbp + 0xd0], xmm0
movsd qword [rbp + 0xe0], xmm1
call fcn.1800030e0
test al, al
mov eax, 0
cmove esi, eax
movups xmm3, xmmword [0x18001b3e0]
ucomisd xmm3, xmm11
jp 0x18000c6e7
je 0x18000e920
movaps xmm0, xmm3
unpckhpd xmm0, xmm3
ucomisd xmm0, xmm11
movsd qword [0x18001b3e8], xmm0
jp 0x18000c703
je 0x18000e920
movsd xmm0, qword [0x18001b5d8]
ucomisd xmm0, xmm11
jp 0x18000c718
je 0x18000e920
movsd xmm6, qword [0x18001b5e0]
ucomisd xmm6, xmm11
movsd qword [0x18001b5e0], xmm6
jp 0x18000c735
je 0x18000e920
test sil, sil
je 0x18000e920
cmp byte [0x1800177c0], 0
je 0x18000c796
comisd xmm3, xmm9
movsd xmm1, qword [rbp - 8]
movaps xmm2, xmm13
subsd xmm1, xmm12
subsd xmm2, xmm12
jbe 0x18000e920
movsd xmm0, qword [0x18001b3e8]
comisd xmm0, xmm9
jbe 0x18000e920
addsd xmm1, xmm9
comisd xmm1, xmm3
jbe 0x18000e920
addsd xmm2, xmm9
comisd xmm2, xmm0
jbe 0x18000e920
cmp byte [0x18001705c], 0
je 0x18000d100
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000d100
cmp byte [0x180017799], 0
movups xmm7, xmmword [0x18001b700]
movups xmm6, xmmword [0x18001b5d8]
je 0x18000c807
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm7
movdqa xmmword [rbp - 0x40], xmm6
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm7
movdqa xmmword [rbp - 0x40], xmm6
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b510]
movups xmm7, xmmword [0x18001b700]
je 0x18000c892
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b338]
movups xmm7, xmmword [0x18001b510]
je 0x18000c91d
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b5c8]
movups xmm7, xmmword [0x18001b510]
je 0x18000c9a8
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b5e8]
movups xmm7, xmmword [0x18001b5c8]
je 0x18000ca33
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b310]
movups xmm7, xmmword [0x18001b5e8]
je 0x18000cabe
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b6b8]
movups xmm7, xmmword [0x18001b338]
je 0x18000cb49
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b4c8]
movups xmm7, xmmword [0x18001b6b8]
je 0x18000cbd4
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b548]
movups xmm7, xmmword [0x18001b4c8]
je 0x18000cc5f
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b4a0]
movups xmm7, xmmword [0x18001b548]
je 0x18000ccea
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b4f0]
movups xmm7, xmmword [0x18001b510]
je 0x18000cd75
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b628]
movups xmm7, xmmword [0x18001b4f0]
je 0x18000ce00
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b500]
movups xmm7, xmmword [0x18001b628]
je 0x18000ce8b
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b300]
movups xmm7, xmmword [0x18001b338]
je 0x18000cf16
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b5b8]
movups xmm7, xmmword [0x18001b300]
je 0x18000cfa1
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b448]
movups xmm7, xmmword [0x18001b5b8]
je 0x18000d02c
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
movups xmm6, xmmword [0x18001b698]
movups xmm7, xmmword [0x18001b448]
je 0x18000d0b7
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x180017048]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movaps xmm0, xmmword [0x180014a00]
lea rax, [rbp - 0x80]
movss xmm3, dword [0x18001704c]
lea r8, [rbp - 0x60]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmmword [rbp - 0x40], xmm7
call fcn.180001500
movups xmm3, xmmword [0x18001b3e0]
movsd xmm7, qword [rbp + 0x300]
cmp byte [0x1800177c0], 0
movaps xmm9, xmm14
movaps xmm13, xmm15
movaps xmm11, xmm14
movaps xmm12, xmm15
jne 0x18000d437
movups xmm0, xmmword [0x18001b5d8]
lea rax, [rbp + 0xd98]
mov ecx, 2
movups xmm1, xmmword [0x18001b3f0]
movdqa xmmword [rbp + 0xd90], xmm0
movups xmm0, xmmword [0x18001b700]
movdqa xmmword [rbp + 0xda0], xmm1
movups xmm1, xmmword [0x18001b510]
movdqa xmmword [rbp + 0xdb0], xmm0
movups xmm0, xmmword [0x18001b338]
movdqa xmmword [rbp + 0xdc0], xmm1
movups xmm1, xmmword [0x18001b5c8]
movdqa xmmword [rbp + 0xdd0], xmm0
movups xmm0, xmmword [0x18001b5e8]
movdqa xmmword [rbp + 0xde0], xmm1
movups xmm1, xmmword [0x18001b310]
movdqa xmmword [rbp + 0xdf0], xmm0
movups xmm0, xmmword [0x18001b6b8]
movdqa xmmword [rbp + 0xe00], xmm1
movups xmm1, xmmword [0x18001b4c8]
movdqa xmmword [rbp + 0xe10], xmm0
movups xmm0, xmmword [0x18001b548]
movsd qword [rbp + 0xe20], xmm1
movsd qword [rbp + 0xe30], xmm0
unpckhpd xmm0, xmm0
unpckhpd xmm1, xmm1
movsd qword [rbp + 0xe38], xmm0
movups xmm0, xmmword [0x18001b4f0]
movsd qword [rbp + 0xe28], xmm1
movups xmm1, xmmword [0x18001b4a0]
movsd qword [rbp + 0xe50], xmm0
movsd qword [rbp + 0xe40], xmm1
unpckhpd xmm0, xmm0
unpckhpd xmm1, xmm1
movsd qword [rbp + 0xe58], xmm0
movups xmm0, xmmword [0x18001b500]
movsd qword [rbp + 0xe48], xmm1
movups xmm1, xmmword [0x18001b628]
movsd qword [rbp + 0xe70], xmm0
movsd qword [rbp + 0xe60], xmm1
unpckhpd xmm0, xmm0
unpckhpd xmm1, xmm1
movsd qword [rbp + 0xe78], xmm0
movups xmm0, xmmword [0x18001b5b8]
movsd qword [rbp + 0xe68], xmm1
movups xmm1, xmmword [0x18001b300]
movsd qword [rbp + 0xe90], xmm0
movsd qword [rbp + 0xe80], xmm1
unpckhpd xmm0, xmm0
unpckhpd xmm1, xmm1
movsd qword [rbp + 0xe98], xmm0
movups xmm0, xmmword [0x18001b698]
movsd qword [rbp + 0xe88], xmm1
movups xmm1, xmmword [0x18001b448]
movsd qword [rbp + 0xeb0], xmm0
movsd qword [rbp + 0xea0], xmm1
unpckhpd xmm0, xmm0
unpckhpd xmm1, xmm1
movsd qword [rbp + 0xeb8], xmm0
movsd qword [rbp + 0xea8], xmm1
movdqa xmmword [rbp + 0xd80], xmm3
nop word [rax + rax]
movsd xmm3, qword [rax - 0x18]
movsd xmm5, qword [rax - 0x10]
movaps xmm0, xmm3
movsd xmm4, qword [rax - 8]
minsd xmm0, xmm9
movsd xmm6, qword [rax]
lea rax, [rax + 0xa0]
maxsd xmm3, xmm13
movaps xmm1, xmm5
movsd xmm13, qword [rax - 0x28]
minsd xmm1, xmm11
maxsd xmm5, xmm12
movaps xmm2, xmm4
movsd xmm12, qword [rax - 0x20]
minsd xmm2, xmm0
movaps xmm0, xmm6
movaps xmm9, xmm13
maxsd xmm4, xmm3
movaps xmm11, xmm12
movsd xmm3, qword [rax - 0x98]
minsd xmm0, xmm1
maxsd xmm6, xmm5
movaps xmm1, xmm3
movsd xmm5, qword [rax - 0x90]
minsd xmm1, xmm2
movaps xmm2, xmm5
maxsd xmm3, xmm4
movsd xmm4, qword [rax - 0x88]
minsd xmm2, xmm0
movaps xmm0, xmm4
maxsd xmm5, xmm6
movsd xmm6, qword [rax - 0x80]
minsd xmm0, xmm1
movaps xmm1, xmm6
maxsd xmm4, xmm3
movsd xmm3, qword [rax - 0x78]
minsd xmm1, xmm2
movaps xmm2, xmm3
maxsd xmm6, xmm5
movsd xmm5, qword [rax - 0x70]
minsd xmm2, xmm0
movaps xmm0, xmm5
maxsd xmm3, xmm4
movsd xmm4, qword [rax - 0x68]
minsd xmm0, xmm1
movaps xmm1, xmm4
maxsd xmm5, xmm6
movsd xmm6, qword [rax - 0x60]
minsd xmm1, xmm2
movaps xmm2, xmm6
maxsd xmm4, xmm3
movsd xmm3, qword [rax - 0x58]
minsd xmm2, xmm0
movaps xmm0, xmm3
maxsd xmm6, xmm5
movsd xmm5, qword [rax - 0x50]
minsd xmm0, xmm1
movaps xmm1, xmm5
maxsd xmm3, xmm4
movsd xmm4, qword [rax - 0x48]
minsd xmm1, xmm2
movaps xmm2, xmm4
maxsd xmm5, xmm6
movsd xmm6, qword [rax - 0x40]
minsd xmm2, xmm0
movaps xmm0, xmm6
maxsd xmm4, xmm3
movsd xmm3, qword [rax - 0x38]
minsd xmm0, xmm1
movaps xmm1, xmm3
maxsd xmm6, xmm5
movsd xmm5, qword [rax - 0x30]
minsd xmm1, xmm2
movaps xmm2, xmm5
maxsd xmm3, xmm4
minsd xmm2, xmm0
maxsd xmm5, xmm6
minsd xmm9, xmm1
maxsd xmm13, xmm3
minsd xmm11, xmm2
maxsd xmm12, xmm5
sub rcx, 1
jne 0x18000d2d0
jmp 0x18000d485
movups xmm12, xmmword [0x18001b5d8]
movaps xmm0, xmm3
movaps xmm1, xmm3
movaps xmm9, xmm12
unpckhpd xmm3, xmm3
movaps xmm13, xmm12
minsd xmm0, xmm14
movaps xmm2, xmm3
unpckhpd xmm12, xmm12
movaps xmm11, xmm12
minsd xmm2, xmm14
maxsd xmm1, xmm15
maxsd xmm3, xmm15
minsd xmm9, xmm0
minsd xmm11, xmm2
maxsd xmm13, xmm1
maxsd xmm12, xmm3
mov edi, dword [0x180017714]
subsd xmm10, xmm7
mov rsi, qword gs:[0x58]
movaps xmm6, xmm13
subsd xmm6, xmm9
mov r14d, 4
movaps xmm15, xmm12
movsd qword [rbp + 0x50], xmm13
subsd xmm15, xmm11
xorps xmm0, xmm0
mov rax, qword [rsi + rdi*8]
mulsd xmm10, qword [0x180014800]
movaps xmm14, xmm6
movsd qword [rbp - 0x40], xmm0
divsd xmm14, qword [0x180014828]
mov ecx, dword [r14 + rax]
cmp dword [0x18001b7a8], ecx
divsd xmm15, qword [0x180014828]
movsd qword [rbp - 0x60], xmm14
movsd qword [rbp - 0x80], xmm15
jle 0x18000d525
lea rcx, [0x18001b7a8]
call fcn.180011dfc
cmp dword [0x18001b7a8], 0xffffffff
jne 0x18000d525
xorps xmm0, xmm0
lea rcx, [0x18001b7a8]
movups xmmword [0x18001b860], xmm0
call fcn.180011d90
mov rax, qword [rsi + rdi*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18001b758], ecx
jle 0x18000d560
lea rcx, [0x18001b758]
call fcn.180011dfc
cmp dword [0x18001b758], 0xffffffff
jne 0x18000d560
xorps xmm0, xmm0
lea rcx, [0x18001b758]
movups xmmword [0x18001b800], xmm0
call fcn.180011d90
cmp byte [0x1800177c0], 0
mulsd xmm6, qword [0x180014808]
movsd xmm1, qword [0x18001b3f8]
addsd xmm6, xmm9
movsd qword [0x18001b860], xmm6
movsd qword [0x18001b800], xmm6
jne 0x18000d5a0
movsd xmm0, qword [0x18001b528]
subsd xmm1, qword [0x1800148a8]
jmp 0x18000d5b0
movsd xmm0, qword [0x18001b3e8]
addsd xmm1, qword [0x1800148b8]
cmp byte [0x1800177b9], 0
movsd qword [0x18001b808], xmm1
movsd qword [0x18001b868], xmm0
je 0x18000dc5d
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000dc5d
test r15, r15
je 0x18000d5fe
mov edx, 8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000d5fe
movss xmm6, dword [r15]
jmp 0x18000d602
movaps xmm6, xmm8
test r12, r12
je 0x18000d621
mov edx, 8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000d621
movss xmm0, dword [r12]
jmp 0x18000d625
movaps xmm0, xmm8
addss xmm0, dword [0x1800147d0]
comiss xmm0, xmm6
jb 0x18000d649
movaps xmm0, xmmword [0x1800149b0]
lea rax, [rbp + 0xb58]
movups xmmword [rbp + 0xb58], xmm0
jmp 0x18000d65e
movaps xmm0, xmmword [0x180014960]
lea rax, [rbp + 0xb90]
movups xmmword [rbp + 0xb90], xmm0
cmp byte [0x180017799], 0
movaps xmm8, xmm9
movups xmm13, xmmword [rax]
subsd xmm8, xmm10
movaps xmm6, xmm11
subsd xmm6, xmm10
movaps xmm7, xmm8
addsd xmm7, xmm14
movsd qword [rbp + 0x1b0], xmm7
je 0x18000d6e5
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x950]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x960]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x950], xmm7
movsd qword [rbp + 0x958], xmm6
movsd qword [rbp + 0x960], xmm8
movsd qword [rbp + 0x968], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x970]
lea rdx, [rbp + 0x980]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x970], xmm7
movsd qword [rbp + 0x978], xmm6
movsd qword [rbp + 0x980], xmm8
movsd qword [rbp + 0x988], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
movaps xmm14, xmm6
addsd xmm14, xmm15
je 0x18000d7a2
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x990]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x9a0]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x990], xmm8
movsd qword [rbp + 0x998], xmm14
movsd qword [rbp + 0x9a0], xmm8
movsd qword [rbp + 0x9a8], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x9b0]
lea rdx, [rbp + 0x9c0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x9b0], xmm8
movsd qword [rbp + 0x9b8], xmm14
movsd qword [rbp + 0x9c0], xmm8
movsd qword [rbp + 0x9c8], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
movaps xmm7, xmm10
addsd xmm7, qword [rbp + 0x50]
movaps xmm15, xmm7
subsd xmm15, qword [rbp - 0x60]
je 0x18000d869
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x9d0]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x9e0]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x9d0], xmm15
movsd qword [rbp + 0x9d8], xmm6
movsd qword [rbp + 0x9e0], xmm7
movsd qword [rbp + 0x9e8], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x9f0]
lea rdx, [rbp + 0xa00]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x9f0], xmm15
movsd qword [rbp + 0x9f8], xmm6
movsd qword [rbp + 0xa00], xmm7
movsd qword [rbp + 0xa08], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
je 0x18000d91b
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0xa10]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0xa20]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xa10], xmm7
movsd qword [rbp + 0xa18], xmm14
movsd qword [rbp + 0xa20], xmm7
movsd qword [rbp + 0xa28], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xa30], xmm7
movsd qword [rbp + 0xa38], xmm14
movsd qword [rbp + 0xa50], xmm7
movsd qword [rbp + 0xa58], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
movaps xmm6, xmm10
movsd xmm14, qword [rbp + 0x1b0]
addsd xmm6, xmm12
je 0x18000d9e0
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0xa60]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0xa70]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xa60], xmm14
movsd qword [rbp + 0xa68], xmm6
movsd qword [rbp + 0xa70], xmm8
movsd qword [rbp + 0xa78], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0xa40]
lea rdx, [rbp + 0xa80]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xa40], xmm14
movsd qword [rbp + 0xa48], xmm6
movsd qword [rbp + 0xa80], xmm8
movsd qword [rbp + 0xa88], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
movaps xmm14, xmm6
subsd xmm14, qword [rbp - 0x80]
je 0x18000da9f
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0xa90]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0xaa0]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xa90], xmm8
movsd qword [rbp + 0xa98], xmm14
movsd qword [rbp + 0xaa0], xmm8
movsd qword [rbp + 0xaa8], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xab0], xmm8
movsd qword [rbp + 0xab8], xmm14
movsd qword [rbp + 0xad0], xmm8
movsd qword [rbp + 0xad8], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
je 0x18000db53
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0xae0]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0xac0]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xae0], xmm15
movsd qword [rbp + 0xae8], xmm6
movsd qword [rbp + 0xac0], xmm7
movsd qword [rbp + 0xac8], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0xaf0]
lea rdx, [rbp + 0x870]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xaf0], xmm15
movsd qword [rbp + 0xaf8], xmm6
movsd qword [rbp + 0x870], xmm7
movsd qword [rbp + 0x878], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
cmp byte [0x180017799], 0
je 0x18000dc05
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x880]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x890]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x880], xmm7
movsd qword [rbp + 0x888], xmm14
movsd qword [rbp + 0x890], xmm7
movsd qword [rbp + 0x898], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x8a0]
lea rdx, [rbp + 0x8b0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x8a0], xmm7
movsd qword [rbp + 0x8a8], xmm14
movsd qword [rbp + 0x8b0], xmm7
movsd qword [rbp + 0x8b8], xmm6
movdqa xmmword [rbp - 0x30], xmm13
call fcn.180001500
movsd xmm13, qword [rbp + 0x50]
cmp byte [0x18001705d], 0
je 0x18000dfe8
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000dfe8
test r15, r15
je 0x18000dc9b
mov edx, 8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000dc9b
movss xmm6, dword [r15]
jmp 0x18000dc9e
xorps xmm6, xmm6
test r12, r12
je 0x18000dcbd
mov edx, 8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000dcbd
movss xmm0, dword [r12]
jmp 0x18000dcc0
xorps xmm0, xmm0
addss xmm0, dword [0x1800147d0]
comiss xmm0, xmm6
jb 0x18000dce4
movaps xmm0, xmmword [0x1800149b0]
lea rax, [rbp + 0xb48]
movups xmmword [rbp + 0xb48], xmm0
jmp 0x18000dcf9
movaps xmm0, xmmword [0x180014960]
lea rax, [rbp + 0xb68]
movups xmmword [rbp + 0xb68], xmm0
cmp byte [0x180017799], 0
subsd xmm9, xmm10
movups xmm7, xmmword [rax]
movaps xmm6, xmm10
subsd xmm11, xmm10
addsd xmm6, xmm12
je 0x18000dd71
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x8c0]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x8d0]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x8c0], xmm9
movsd qword [rbp + 0x8c8], xmm6
movsd qword [rbp + 0x8d0], xmm9
movsd qword [rbp + 0x8d8], xmm11
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x8e0]
lea rdx, [rbp + 0x8f0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x8e0], xmm9
movsd qword [rbp + 0x8e8], xmm6
movsd qword [rbp + 0x8f0], xmm9
movsd qword [rbp + 0x8f8], xmm11
movdqa xmmword [rbp - 0x30], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
addsd xmm10, xmm13
je 0x18000de2b
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x900]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x910]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x900], xmm10
movsd qword [rbp + 0x908], xmm6
movsd qword [rbp + 0x910], xmm10
movsd qword [rbp + 0x918], xmm11
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x920]
lea rdx, [rbp + 0x930]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x920], xmm10
movsd qword [rbp + 0x928], xmm6
movsd qword [rbp + 0x930], xmm10
movsd qword [rbp + 0x938], xmm11
movdqa xmmword [rbp - 0x30], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
je 0x18000dee1
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x940]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x3f0]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x940], xmm10
movsd qword [rbp + 0x948], xmm11
movsd qword [rbp + 0x3f0], xmm9
movsd qword [rbp + 0x3f8], xmm11
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x440]
lea rdx, [rbp + 0x450]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x440], xmm10
movsd qword [rbp + 0x448], xmm11
movsd qword [rbp + 0x450], xmm9
movsd qword [rbp + 0x458], xmm11
movdqa xmmword [rbp - 0x30], xmm7
call fcn.180001500
cmp byte [0x180017799], 0
je 0x18000df96
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x400]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x410]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x400], xmm10
movsd qword [rbp + 0x408], xmm6
movsd qword [rbp + 0x410], xmm9
movsd qword [rbp + 0x418], xmm6
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x420]
lea rdx, [rbp + 0x430]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x420], xmm10
movsd qword [rbp + 0x428], xmm6
movsd qword [rbp + 0x430], xmm9
movsd qword [rbp + 0x438], xmm6
movdqa xmmword [rbp - 0x30], xmm7
call fcn.180001500
mov r12, qword [rbp + 0x30]
xor r15d, r15d
test r12, r12
je 0x18000e177
cmp byte [0x1800177ba], r15b
je 0x18000e177
mov rdx, qword [0x18001b810]
mov qword [rbp + 0x810], r13
mov qword [rbp + 0x818], r15
mov qword [rbp + 0x820], r15
test rdx, rdx
jne 0x18000e034
mov rdx, qword [0x1800178f8]
mov qword [0x18001b810], rdx
mov rcx, qword [0x18001b668]
lea r8, [rbp + 0x810]
mov rax, qword [rcx]
call qword [rax + 0x268]
mov rcx, qword [rbp + 0x818]
movsd xmm2, qword [0x18001b868]
addsd xmm2, qword [0x1800147c0]
mov qword [rbp + 0x3b0], r15
cmp word [rcx], r15w
je 0x18000e09a
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r15w
jne 0x18000e076
add eax, 1
mov dword [rbp + 0x3b8], eax
mov dword [rbp + 0x3bc], eax
je 0x18000e0a1
mov qword [rbp + 0x3b0], rcx
jmp 0x18000e0a1
mov qword [rbp + 0x3b8], r15
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x3d0]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x50]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x80]
mov byte [rsp + 0x50], r15b
movaps xmmword [rbp - 0x30], xmm0
xorps xmm0, xmm0
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x40]
movaps xmmword [rbp - 0x60], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmm0, xmmword [rbp + 0x3b0]
movaps xmmword [rbp - 0x80], xmm1
movaps xmm1, xmmword [0x180014980]
movdqa xmmword [rbp + 0x50], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1b0]
movaps xmmword [rbp - 0x40], xmm1
movsd xmm1, qword [0x18001b860]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x3d0], xmm1
movsd qword [rbp + 0x3d8], xmm2
call fcn.1800011e0
movsd xmm10, qword [0x180014888]
movaps xmm9, xmm10
jmp 0x18000e186
movsd xmm10, qword [0x180014888]
movsd xmm9, qword [rbp - 0x40]
cmp byte [0x180017064], 0
je 0x18000e372
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000e372
movsd xmm0, qword [rbp + 0x300]
lea rax, [0x180013828]
mov qword [rbp + 0x6e0], rax
mov dword [rbp + 0x6e8], 3
mov dword [rbp + 0x6ec], 3
movups xmm6, xmmword [rbp + 0x6e0]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x6f8], 2
mov qword [rbp + 0x6f0], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x30]
mov dword [rbp + 0x6fc], 2
movaps xmm1, xmmword [rbp + 0x6f0]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x28], rax
lea rdx, [rbp + 0xa0]
mov qword [rbp + 0x700], r15
mov qword [rbp + 0x708], 0
movaps xmm2, xmmword [rbp + 0x700]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp - 0x80], xmm1
movaps xmmword [rbp - 0x30], xmm6
movdqa xmmword [rbp - 0x60], xmm2
call fcn.180005100
mov rcx, qword [rbp + 0xa0]
movsd xmm2, qword [0x18001b868]
movaps xmm3, xmmword [0x1800149e0]
addsd xmm2, qword [0x180014870]
cmp word [rcx], 0
mov qword [rbp + 0x3c0], r15
je 0x18000e2a6
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000e282
add eax, 1
mov dword [rbp + 0x3c8], eax
mov dword [rbp + 0x3cc], eax
je 0x18000e2b1
mov qword [rbp + 0x3c0], rcx
jmp 0x18000e2b1
mov qword [rbp + 0x3c8], 0
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x90]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x1b0]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
mov byte [rsp + 0x58], 1
lea rax, [rbp - 0x80]
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x300]
movaps xmmword [rbp - 0x30], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x18001b860]
movaps xmmword [rbp - 0x80], xmm1
movaps xmm1, xmmword [0x180014a20]
movsd qword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
movaps xmmword [rbp - 0x40], xmm1
movaps xmm1, xmmword [rbp + 0x3c0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x98], xmm2
movdqa xmmword [rbp + 0x300], xmm3
movdqa xmmword [rbp + 0x1b0], xmm1
call fcn.1800011e0
test r12, r12
je 0x18000e6e0
cmp byte [0x1800177bb], 0
je 0x18000e6e0
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000e6e0
mov rcx, r13
call fcn.180002bd0
mov r14, rax
test rax, rax
je 0x18000e6e0
mov rcx, rax
call fcn.180001c90
mov rsi, rax
test rax, rax
je 0x18000e6e0
xor eax, eax
lea rdi, [rsi + 0x98]
mov qword [rbp + 0xbd0], rax
xorps xmm6, xmm6
test rdi, rdi
je 0x18000e3f5
lea edx, [rax + 8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000e3f5
movups xmm6, xmmword [rdi]
movsd xmm0, qword [rdi + 0x10]
jmp 0x18000e3fd
movsd xmm0, qword [rbp + 0xbd0]
movq rax, xmm6
movsd qword [rbp - 0x20], xmm0
test rax, rax
je 0x18000e6e0
cmp qword [rax + 0x38], 0
je 0x18000e6e0
lea rcx, [rsi + 0x73]
test rcx, rcx
je 0x18000e42f
mov edx, 8
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
mov qword [rbp + 0x710], r15
mov rcx, r14
mov qword [rbp + 0x718], 0
movups xmm7, xmmword [rbp + 0x710]
call fcn.1800017a0
lea rcx, [0x180013834]
mov dword [rbp + 0x728], 3
mov qword [rbp + 0x720], rcx
movq rcx, xmm6
mov dword [rbp + 0x72c], 3
mov qword [rbp + 0x1c0], r15
mov rdx, qword [rcx + 0x38]
cmp word [rdx], 0
je 0x18000e4b4
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x18000e490
add ecx, 1
mov dword [rbp + 0x1c8], ecx
mov dword [rbp + 0x1cc], ecx
je 0x18000e4bf
mov qword [rbp + 0x1c0], rdx
jmp 0x18000e4bf
mov qword [rbp + 0x1c8], 0
movaps xmm0, xmmword [rbp + 0x720]
lea rcx, [rbp - 0x30]
movaps xmm1, xmmword [rbp + 0x1c0]
lea r9, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x70]
mov dword [rsp + 0x20], eax
movaps xmmword [rbp - 0x30], xmm7
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmmword [rbp - 0x60], xmm1
call fcn.180005400
lea rax, [0x18001383c]
mov dword [rbp + 0x738], 2
mov qword [rbp + 0x730], rax
mov rcx, r14
mov dword [rbp + 0x73c], 2
movups xmm6, xmmword [rbp + 0x730]
call fcn.180001a10
lea rcx, [0x180013840]
mov dword [rbp + 0x748], 2
mov qword [rbp + 0x740], rcx
lea r9, [rbp - 0x80]
lea rcx, [rbp - 0x30]
mov dword [rbp + 0x74c], 2
movaps xmm0, xmmword [rbp + 0x740]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x28], rcx
lea rdx, [rbp]
mov qword [rbp + 0x750], r15
mov qword [rbp + 0x758], 0
movaps xmm1, xmmword [rbp + 0x750]
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rsp + 0x20], eax
movaps xmmword [rbp - 0x30], xmm6
movdqa xmmword [rbp - 0x60], xmm1
call fcn.180005400
movaps xmm0, xmmword [rbp]
lea r9, [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x70]
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x70]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x80], xmm1
call fcn.1800056f0
mov rcx, qword [rsp + 0x70]
movsd xmm2, qword [0x18001b868]
movaps xmm3, xmmword [0x1800149e0]
addsd xmm2, qword [0x1800148a8]
cmp word [rcx], 0
mov qword [rbp + 0x1d0], r15
je 0x18000e614
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000e5f0
add eax, 1
mov dword [rbp + 0x1d8], eax
mov dword [rbp + 0x1dc], eax
je 0x18000e61f
mov qword [rbp + 0x1d0], rcx
jmp 0x18000e61f
mov qword [rbp + 0x1d8], 0
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x180]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x1b0]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
mov byte [rsp + 0x58], 1
lea rax, [rbp - 0x80]
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x300]
movaps xmmword [rbp - 0x30], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x18001b860]
movaps xmmword [rbp - 0x80], xmm1
movaps xmm1, xmmword [0x180014a20]
movsd qword [rbp + 0x180], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
movaps xmmword [rbp - 0x40], xmm1
movaps xmm1, xmmword [rbp + 0x1d0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x188], xmm2
movdqa xmmword [rbp + 0x300], xmm3
movdqa xmmword [rbp + 0x1b0], xmm1
call fcn.1800011e0
cmp byte [0x18001705e], 0
movsd xmm13, qword [rbp + 0x80]
je 0x18000e7e6
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000e7e6
cmp byte [0x180017799], 0
movaps xmm6, xmm13
movsd xmm7, qword [0x18001b860]
subsd xmm6, xmm10
addsd xmm9, qword [0x18001b868]
movaps xmm8, xmmword [0x1800149f0]
je 0x18000e793
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp - 0x30]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0x190]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x1a0]
movaps xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rbp + 0xb0]
movsd qword [rbp + 0x1a0], xmm0
movsd qword [rbp + 0x190], xmm7
movsd qword [rbp + 0x198], xmm9
movsd qword [rbp + 0x1a8], xmm6
mov qword [rsp + 0x20], rax
call fcn.180001500
movss xmm3, dword [0x18001704c]
lea rax, [rbp - 0x30]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0xf0]
movsd qword [rbp + 0xf0], xmm7
lea rdx, [rbp - 0x50]
movsd xmm7, qword [rbp + 0xb0]
movsd qword [rbp - 0x50], xmm7
movsd qword [rbp + 0xf8], xmm9
movsd qword [rbp - 0x48], xmm6
movdqa xmmword [rbp - 0x30], xmm8
mov qword [rsp + 0x20], rax
call fcn.180001500
jmp 0x18000e7ee
movsd xmm7, qword [rbp + 0xb0]
cmp byte [0x18001779f], 0
je 0x18000e804
cmp byte [0x18001779b], 0
je 0x18000e8da
test r12, r12
je 0x18000e8da
movzx eax, byte [0x180017050]
cmp byte [0x1800177c3], al
je 0x18000e8da
movups xmm6, xmmword [0x18001b5d8]
cvttsd2si ecx, qword [0x18001b5e0]
cvttsd2si r8d, qword [rbp + 0x3e0]
cvttsd2si eax, xmm7
cvttsd2si edx, xmm6
imul r8d, r8d
sub edx, eax
cvttsd2si eax, qword [rbp + 0xc0]
imul edx, edx
sub ecx, eax
imul ecx, ecx
add ecx, edx
cmp ecx, r8d
jg 0x18000e8da
movups xmm0, xmmword [rbp + 0x60]
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm6
movdqa xmmword [rbp - 0x30], xmm0
call fcn.180005c70
movsd xmm7, qword [rbp + 0x3e8]
lea rdi, str.PlayerPawn
comisd xmm7, xmm0
mov r14d, dword [rbp + 0x20]
mov r15d, dword [rbp + 0x48]
movsd xmm9, qword [0x1800148c8]
xorps xmm8, xmm8
movsd xmm14, qword [0x180014918]
movsd xmm15, qword [0x1800147c8]
movsd xmm12, qword [0x1800148d8]
movsd xmm10, qword [rbp - 8]
jbe 0x18000e908
movsd qword [rbp + 0x3e8], xmm0
mov rsi, r13
mov qword [rbp + 0x28], r13
jmp 0x18000e939
xorps xmm8, xmm8
jmp 0x18000e92c
movsd xmm9, qword [0x1800148c8]
xorps xmm8, xmm8
movsd xmm14, qword [0x180014918]
movsd xmm15, qword [0x1800147c8]
movsd xmm12, qword [0x1800148d8]
mov r14d, dword [rbp + 0x20]
jmp 0x18000e924
mov rsi, qword [rbp + 0x28]
jmp 0x18000e939
xorps xmm8, xmm8
jmp 0x18000e939
xorps xmm8, xmm8
jmp 0x18000e928
xorps xmm8, xmm8
jmp 0x18000e933
mov r12, qword [rbp + 0x30]
mov r15d, dword [rbp + 0x48]
mov rsi, qword [rbp + 0x28]
lea rdi, str.PlayerPawn
movsd xmm10, qword [rbp - 8]
mov r13, qword [rbp - 0x10]
inc r14d
inc r13
mov dword [rbp + 0x20], r14d
mov qword [rbp - 0x10], r13
cmp r14d, r15d
jl 0x18000c2a5
movsd xmm6, qword [rbp + 0x3e0]
xor r8d, r8d
movsd xmm15, qword [rbp + 0xb0]
movsd xmm9, qword [rbp + 0xc0]
mov r14, qword [rbp + 0x6b0]
mov r15, qword [rbp + 0x390]
mov r13, qword [rbp + 0xc8]
mov qword [rbp + 0x50], rbx
cmp byte [0x180017053], 0
je 0x18000eaed
movaps xmm14, xmmword [0x1800149d0]
lea rax, [rbp + 0xec0]
cvttsd2si edx, xmm6
mov ecx, 0x80
nop
mov qword [rax], r8
mov qword [rax + 8], r8
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x18000e9b0
movss xmm12, dword [0x1800147d4]
movaps xmm10, xmm8
movsd xmm13, qword [0x180014850]
movd xmm11, edx
cvtdq2pd xmm11, xmm11
jmp 0x18000e9ec
movsd xmm9, qword [rbp + 0xc0]
xorps xmm6, xmm6
cvtss2sd xmm6, xmm10
movaps xmm1, xmm6
call fcn.1800061b0
mulsd xmm0, xmm11
xorps xmm8, xmm8
movaps xmm1, xmm6
addsd xmm0, xmm15
cvtsd2ss xmm8, xmm0
call fcn.180005f20
mulsd xmm0, xmm11
addss xmm10, xmm12
xorps xmm7, xmm7
addsd xmm0, xmm9
xorps xmm9, xmm9
cvtss2sd xmm9, xmm10
cvtsd2ss xmm7, xmm0
movaps xmm1, xmm9
call fcn.1800061b0
mulsd xmm0, xmm11
xorps xmm6, xmm6
movaps xmm1, xmm9
addsd xmm0, xmm15
cvtsd2ss xmm6, xmm0
call fcn.180005f20
mov rcx, qword [0x180017790]
lea rax, [rbp + 0x60]
lea r8, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0xf0]
cvtps2pd xmm3, xmm7
mulsd xmm0, xmm11
xorps xmm2, xmm2
cvtps2pd xmm4, xmm8
addsd xmm0, qword [rbp + 0xc0]
cvtps2pd xmm1, xmm6
cvtsd2ss xmm2, xmm0
movsd qword [rbp + 0xec8], xmm3
cvtps2pd xmm0, xmm2
movsd qword [rbp + 0xf8], xmm3
movss xmm3, dword [0x1800147f4]
movsd qword [rbp + 0xed8], xmm0
movsd qword [rbp - 0x48], xmm0
movsd qword [rbp + 0xec0], xmm4
movsd qword [rbp + 0xed0], xmm1
movsd qword [rbp - 0x50], xmm1
movsd qword [rbp + 0xf0], xmm4
movdqa xmmword [rbp + 0x60], xmm14
call fcn.180001500
comisd xmm13, xmm9
ja 0x18000e9e3
mov rdi, rbx
test rsi, rsi
je 0x18000eda4
test r12, r12
je 0x18000eda4
lea rbx, [rsi + 0x318]
test rbx, rbx
je 0x18000ed9d
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000ed9d
mov rcx, qword [rbx]
mov rbx, rdi
mov qword [rbp + 0x50], rbx
test rcx, rcx
je 0x18000eda4
mov rax, qword [0x1800178f0]
lea rdx, [rbp + 0xd00]
xorps xmm0, xmm0
add rax, 0x157e9e8
mov r8d, 0x44
movups xmmword [rbp + 0xd00], xmm0
movups xmmword [rbp + 0xd10], xmm0
movups xmmword [rbp + 0xd20], xmm0
movups xmmword [rbp + 0xd30], xmm0
movups xmmword [rbp + 0xd40], xmm0
movups xmmword [rbp + 0xd50], xmm0
movups xmmword [rbp + 0xd60], xmm0
movups xmmword [rbp + 0xd70], xmm0
call rax
movsd xmm6, qword [rbp + 0xd70]
xorps xmm1, xmm1
movsd xmm9, qword [rbp + 0xd60]
mov rcx, rsi
movsd xmm10, qword [rbp + 0xd68]
xorps xmm14, xmm14
movsd qword [rbp + 0xbd0], xmm6
call fcn.180001f10
test al, al
je 0x18000ebda
movss xmm8, dword [0x1800147e8]
movss xmm7, dword [0x1800147f4]
jmp 0x18000ebeb
movss xmm8, dword [0x1800147f4]
movss xmm7, dword [0x1800147e8]
cmp byte [0x1800177b8], 0
je 0x18000ecf6
xorps xmm0, xmm0
movsd qword [rbp + 0x60], xmm9
lea r8, [rbp - 0x50]
movsd qword [rbp + 0x68], xmm10
lea rdx, [rbp + 0x60]
movsd qword [rbp + 0x70], xmm6
mov rcx, r13
movups xmmword [rbp - 0x50], xmm0
call fcn.1800030e0
test al, al
je 0x18000ecf6
movups xmm6, xmmword [rbp - 0x50]
xorps xmm1, xmm1
ucomisd xmm6, xmm1
jp 0x18000ec3b
je 0x18000ecf6
movaps xmm0, xmm6
unpckhpd xmm0, xmm6
ucomisd xmm0, xmm1
jp 0x18000ec4e
je 0x18000ecf6
cmp byte [0x180017799], 0
movsd xmm0, qword [rbp + 0xc0]
movss dword [rbp + 0x44], xmm7
movaps xmm7, xmm15
unpcklpd xmm7, xmm0
movss dword [rbp + 0x40], xmm8
mov dword [rbp + 0x48], 0x3f000000
mov dword [rbp + 0x4c], 0x3f800000
je 0x18000ecbc
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp + 0x60]
movss xmm3, dword [0x180017048]
lea r8, [rsp + 0x70]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x70]
movaps xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm7
call fcn.180001500
movaps xmm0, xmmword [rbp + 0x40]
lea rax, [rbp + 0x60]
movss xmm3, dword [0x18001704c]
lea r8, [rsp + 0x70]
mov rcx, qword [0x180017790]
lea rdx, [rbp - 0x70]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x20], rax
movdqa xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm7
call fcn.180001500
mov ecx, 2
mov qword [rbp + 0x50], rbx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000eda8
cmp byte [0x180017052], 0
mov qword [rbp + 0x50], rbx
je 0x18000eda8
test r14, r14
je 0x18000ed3d
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000ed3d
movss xmm6, dword [r14]
jmp 0x18000ed40
xorps xmm6, xmm6
mov qword [rbp + 0x50], rbx
test r15, r15
je 0x18000ed62
mov edx, 8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000ed62
movss xmm3, dword [r15]
jmp 0x18000ed69
xorps xmm3, xmm3
mov qword [rbp + 0x50], rbx
movaps xmm0, xmm9
lea rdx, [rbp + 0xd0]
unpcklpd xmm0, xmm10
movaps xmm2, xmm6
movaps xmmword [rbp + 0xd0], xmm0
mov rcx, r13
movsd xmm0, qword [rbp + 0xbd0]
movsd qword [rbp + 0xe0], xmm0
call fcn.18000adc0
jmp 0x18000eda8
mov rbx, rdi
mov qword [rbp + 0x50], rbx
xorps xmm14, xmm14
movsd xmm13, qword [rbp + 0x80]
xor esi, esi
movsd xmm10, qword [rbp - 8]
movsd xmm11, qword [0x1800147f8]
cmp byte [0x180017066], 0
je 0x18000f19f
test r12, r12
je 0x18000f19f
mov r9, qword [0x18001b678]
lea rdx, [rbp - 0x50]
mov r8, rbx
call fcn.180003e40
mov r12d, dword [rbp - 0x48]
test r12d, r12d
jle 0x18000f19f
mov r14, qword [rbp - 0x50]
lea rbx, [0x180013828]
cmp esi, r12d
jge 0x18000f188
mov rdi, qword [r14]
test rdi, rdi
je 0x18000f188
xorps xmm0, xmm0
lea rdx, [rbp + 0xd0]
mov rcx, rdi
movups xmmword [rbp - 0x50], xmm0
call fcn.1800021a0
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x140]
movups xmm6, xmmword [rbp + 0xd0]
lea rdx, [rbp + 0x120]
movsd xmm8, qword [rbp + 0xe0]
movaps xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm6
movsd qword [rbp + 0x150], xmm8
call fcn.1800066c0
movaps xmm7, xmm0
movss xmm0, dword [0x180017068]
cvtps2pd xmm0, xmm0
mulsd xmm7, xmm11
comisd xmm7, xmm0
ja 0x18000f188
lea r8, [rbp - 0x50]
movaps xmmword [rbp + 0x100], xmm6
lea rdx, [rbp + 0x100]
movsd qword [rbp + 0x110], xmm8
mov rcx, r13
call fcn.1800030e0
test al, al
je 0x18000f188
movups xmm6, xmmword [rbp - 0x50]
comisd xmm6, xmm14
jbe 0x18000f188
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm1, xmm0
comisd xmm1, xmm6
jbe 0x18000f188
movaps xmm3, xmm6
unpckhpd xmm3, xmm6
comisd xmm3, xmm14
jbe 0x18000f188
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm13
cvtps2pd xmm2, xmm1
comisd xmm2, xmm3
jbe 0x18000f188
cmp byte [0x1800177bd], 0
je 0x18000f082
mov dword [rbp + 0x768], 3
movaps xmm0, xmm7
mov dword [rbp + 0x76c], 3
mov qword [rbp + 0x760], rbx
movups xmm8, xmmword [rbp + 0x760]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x778], 2
mov qword [rbp + 0x770], rax
lea rdx, [rbp + 0xba0]
mov dword [rbp + 0x77c], 2
mov rcx, rdi
movups xmm9, xmmword [rbp + 0x770]
movaps xmm7, xmm0
call fcn.180002450
xor edi, edi
mov qword [rbp + 0x1e0], rdi
mov rcx, qword [rax]
cmp word [rcx], di
je 0x18000efcc
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], di
jne 0x18000efa0
add eax, 1
mov dword [rbp + 0x1e8], eax
mov dword [rbp + 0x1ec], eax
je 0x18000efd3
mov qword [rbp + 0x1e0], rcx
jmp 0x18000efd3
xorps xmm14, xmm14
jmp 0x18000edc2
mov qword [rbp + 0x1e8], rdi
movaps xmm0, xmmword [rbp + 0x1e0]
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x70]
movsd qword [rsp + 0x20], xmm7
lea rdx, [rbp]
movaps xmmword [rbp + 0x60], xmm8
movaps xmmword [rsp + 0x70], xmm9
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180005100
mov rcx, qword [rbp]
mov qword [rbp + 0x1f0], rdi
cmp word [rcx], di
je 0x18000f045
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x18000f022
add eax, 1
mov dword [rbp + 0x1f8], eax
mov dword [rbp + 0x1fc], eax
je 0x18000f04c
mov qword [rbp + 0x1f0], rcx
jmp 0x18000f04c
mov qword [rbp + 0x1f8], rdi
xorps xmm1, xmm1
lea rax, [rbp + 0x60]
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x1800149e0]
mov qword [rsp + 0x60], rax
movzx eax, byte [0x18001706d]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x1f0]
mov byte [rsp + 0x58], al
jmp 0x18000f106
movzx r15d, byte [0x18001706d]
lea rdx, [rbp + 0xbb0]
mov rcx, rdi
call fcn.180002450
xor edi, edi
mov qword [rbp + 0x200], rdi
mov rcx, qword [rax]
cmp word [rcx], di
je 0x18000f0d4
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x18000f0b1
add eax, 1
mov dword [rbp + 0x208], eax
mov dword [rbp + 0x20c], eax
je 0x18000f0db
mov qword [rbp + 0x200], rcx
jmp 0x18000f0db
mov qword [rbp + 0x208], rdi
xorps xmm1, xmm1
lea rax, [rbp + 0x60]
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x1800149e0]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x200]
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x58], r15b
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x10]
mov rcx, qword [0x180017790]
lea r8, [rbp - 0x50]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xa0]
movaps xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x70], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rbp - 0x30], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp + 0x10], xmm6
movdqa xmmword [rbp - 0x50], xmm1
call fcn.1800011e0
inc esi
add r14, 8
cmp esi, r12d
jl 0x18000ee0c
mov rbx, qword [rbp + 0x50]
xorps xmm14, xmm14
cmp byte [0x180017065], 0
mov r15, qword [rbp + 0x30]
je 0x18000f505
test r15, r15
je 0x18000f505
mov r9, qword [0x18001b640]
lea rdx, [rbp - 0x50]
mov r8, rbx
call fcn.180003e40
mov r14d, dword [rbp - 0x48]
xor r12d, r12d
mov edi, r12d
test r14d, r14d
jle 0x18000f508
mov rsi, qword [rbp - 0x50]
lea r15, str.Flag
lea rbx, [0x180013828]
cmp r12d, r14d
jge 0x18000f4e8
mov rcx, qword [rsi]
test rcx, rcx
je 0x18000f4e8
xorps xmm0, xmm0
lea rdx, [rbp + 0xd0]
movups xmmword [rbp - 0x50], xmm0
call fcn.1800021a0
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x140]
movups xmm6, xmmword [rbp + 0xd0]
lea rdx, [rbp + 0x120]
movsd xmm7, qword [rbp + 0xe0]
movaps xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm6
movsd qword [rbp + 0x150], xmm7
call fcn.1800066c0
movaps xmm8, xmm0
movss xmm0, dword [0x180017068]
cvtps2pd xmm0, xmm0
mulsd xmm8, xmm11
comisd xmm8, xmm0
ja 0x18000f4e8
lea r8, [rbp - 0x50]
movaps xmmword [rbp + 0x100], xmm6
lea rdx, [rbp + 0x100]
movsd qword [rbp + 0x110], xmm7
mov rcx, r13
call fcn.1800030e0
test al, al
je 0x18000f4e8
movups xmm7, xmmword [rbp - 0x50]
comisd xmm7, xmm14
jbe 0x18000f4e8
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm1, xmm0
comisd xmm1, xmm7
jbe 0x18000f4e8
movaps xmm3, xmm7
unpckhpd xmm3, xmm7
comisd xmm3, xmm14
jbe 0x18000f4e8
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm13
cvtps2pd xmm2, xmm1
comisd xmm2, xmm3
jbe 0x18000f4e8
cmp byte [0x1800177bd], r12b
je 0x18000f41a
mov dword [rbp + 0x788], 3
movaps xmm0, xmm8
mov dword [rbp + 0x78c], 3
mov qword [rbp + 0x780], rbx
movups xmm6, xmmword [rbp + 0x780]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x798], 2
mov qword [rbp + 0x790], rax
lea r9, [rsp + 0x70]
lea rax, [rbp + 0x60]
mov dword [rbp + 0x79c], 2
movaps xmm1, xmmword [rbp + 0x790]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rdx, [rbp]
mov dword [rbp + 0x7a8], 5
mov dword [rbp + 0x7ac], 5
mov qword [rbp + 0x7a0], r15
movaps xmm2, xmmword [rbp + 0x7a0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x70], xmm1
movaps xmmword [rbp + 0x60], xmm6
movdqa xmmword [rbp - 0x70], xmm2
call fcn.180005100
mov rcx, qword [rbp]
mov qword [rbp + 0x210], r12
cmp word [rcx], r12w
je 0x18000f3f4
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], r12w
jne 0x18000f3d0
add eax, 1
mov dword [rbp + 0x218], eax
mov dword [rbp + 0x21c], eax
je 0x18000f3fb
mov qword [rbp + 0x210], rcx
jmp 0x18000f3fb
mov qword [rbp + 0x218], r12
xorps xmm1, xmm1
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x180014970]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x210]
jmp 0x18000f452
xorps xmm1, xmm1
mov dword [rbp + 0x7b8], 5
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x180014970]
mov dword [rbp + 0x7bc], 5
mov qword [rbp + 0x7b0], r15
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x7b0]
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp + 0x60]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x10]
mov rcx, qword [0x180017790]
lea r8, [rbp - 0x50]
mov qword [rsp + 0x60], rax
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xa0]
movaps xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x70], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rbp - 0x30], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp + 0x10], xmm7
movdqa xmmword [rbp - 0x50], xmm1
call fcn.1800011e0
inc edi
add rsi, 8
cmp edi, r14d
jl 0x18000f1fa
mov rbx, qword [rbp + 0x50]
xorps xmm14, xmm14
mov r15, qword [rbp + 0x30]
jmp 0x18000f508
xor r12d, r12d
cmp byte [0x18001706c], 0
je 0x18000f867
test r15, r15
je 0x18000f867
mov r9, qword [0x18001b648]
lea rdx, [rbp - 0x50]
mov r8, rbx
call fcn.180003e40
mov r14d, dword [rbp - 0x48]
mov edi, r12d
test r14d, r14d
jle 0x18000f867
mov rsi, qword [rbp - 0x50]
lea r15, str.Trap
lea rbx, [0x180013828]
cmp r12d, r14d
jge 0x18000f84c
mov rcx, qword [rsi]
test rcx, rcx
je 0x18000f84c
xorps xmm0, xmm0
lea rdx, [rbp + 0xd0]
movups xmmword [rbp - 0x50], xmm0
call fcn.1800021a0
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x140]
movups xmm6, xmmword [rbp + 0xd0]
lea rdx, [rbp + 0x120]
movsd xmm7, qword [rbp + 0xe0]
movaps xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm6
movsd qword [rbp + 0x150], xmm7
call fcn.1800066c0
movaps xmm8, xmm0
movss xmm0, dword [0x180017068]
cvtps2pd xmm0, xmm0
mulsd xmm8, xmm11
comisd xmm8, xmm0
ja 0x18000f84c
lea r8, [rbp - 0x50]
movaps xmmword [rbp + 0x100], xmm6
lea rdx, [rbp + 0x100]
movsd qword [rbp + 0x110], xmm7
mov rcx, r13
call fcn.1800030e0
test al, al
je 0x18000f84c
movups xmm7, xmmword [rbp - 0x50]
comisd xmm7, xmm14
jbe 0x18000f84c
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm1, xmm0
comisd xmm1, xmm7
jbe 0x18000f84c
movaps xmm3, xmm7
unpckhpd xmm3, xmm7
comisd xmm3, xmm14
jbe 0x18000f84c
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm13
cvtps2pd xmm2, xmm1
comisd xmm2, xmm3
jbe 0x18000f84c
cmp byte [0x1800177bd], 0
je 0x18000f77e
mov dword [rbp + 0x7c8], 3
movaps xmm0, xmm8
mov dword [rbp + 0x7cc], 3
mov qword [rbp + 0x7c0], rbx
movups xmm6, xmmword [rbp + 0x7c0]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x7d8], 2
mov qword [rbp + 0x7d0], rax
lea r9, [rsp + 0x70]
lea rax, [rbp + 0x60]
mov dword [rbp + 0x7dc], 2
movaps xmm1, xmmword [rbp + 0x7d0]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rdx, [rbp]
mov dword [rbp + 0x7e8], 5
mov dword [rbp + 0x7ec], 5
mov qword [rbp + 0x7e0], r15
movaps xmm2, xmmword [rbp + 0x7e0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x70], xmm1
movaps xmmword [rbp + 0x60], xmm6
movdqa xmmword [rbp - 0x70], xmm2
call fcn.180005100
mov rcx, qword [rbp]
mov qword [rbp + 0x380], r12
cmp word [rcx], 0
je 0x18000f754
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000f730
add eax, 1
mov dword [rbp + 0x388], eax
mov dword [rbp + 0x38c], eax
je 0x18000f75f
mov qword [rbp + 0x380], rcx
jmp 0x18000f75f
mov qword [rbp + 0x388], 0
xorps xmm1, xmm1
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x180014970]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x380]
jmp 0x18000f7b6
xorps xmm1, xmm1
mov dword [rbp + 0x7f8], 5
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x180014970]
mov dword [rbp + 0x7fc], 5
mov qword [rbp + 0x7f0], r15
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x7f0]
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp + 0x60]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x10]
mov rcx, qword [0x180017790]
lea r8, [rbp - 0x50]
mov qword [rsp + 0x60], rax
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xa0]
movaps xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x70], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rbp - 0x30], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp + 0x10], xmm7
movdqa xmmword [rbp - 0x50], xmm1
call fcn.1800011e0
inc edi
add rsi, 8
cmp edi, r14d
jl 0x18000f55c
mov rbx, qword [rbp + 0x50]
xorps xmm14, xmm14
mov r15, qword [rbp + 0x30]
cmp byte [0x180017067], 0
je 0x18000fbc7
test r15, r15
je 0x18000fbc7
mov r9, qword [0x18001b660]
lea rdx, [rbp - 0x50]
mov r8, rbx
call fcn.180003e40
mov r14d, dword [rbp - 0x48]
mov edi, r12d
test r14d, r14d
jle 0x18000fbc7
mov rsi, qword [rbp - 0x50]
lea r15, str.Rift
lea rbx, [0x180013828]
cmp r12d, r14d
jge 0x18000fbac
mov rcx, qword [rsi]
test rcx, rcx
je 0x18000fbac
xorps xmm0, xmm0
lea rdx, [rbp + 0xd0]
movups xmmword [rbp - 0x50], xmm0
call fcn.1800021a0
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x140]
movups xmm6, xmmword [rbp + 0xd0]
lea rdx, [rbp + 0x120]
movsd xmm7, qword [rbp + 0xe0]
movaps xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm6
movsd qword [rbp + 0x150], xmm7
call fcn.1800066c0
movaps xmm8, xmm0
movss xmm0, dword [0x180017068]
cvtps2pd xmm0, xmm0
mulsd xmm8, xmm11
comisd xmm8, xmm0
ja 0x18000fbac
lea r8, [rbp - 0x50]
movaps xmmword [rbp + 0x100], xmm6
lea rdx, [rbp + 0x100]
movsd qword [rbp + 0x110], xmm7
mov rcx, r13
call fcn.1800030e0
test al, al
je 0x18000fbac
movups xmm7, xmmword [rbp - 0x50]
comisd xmm7, xmm14
jbe 0x18000fbac
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm1, xmm0
comisd xmm1, xmm7
jbe 0x18000fbac
movaps xmm3, xmm7
unpckhpd xmm3, xmm7
comisd xmm3, xmm14
jbe 0x18000fbac
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm13
cvtps2pd xmm2, xmm1
comisd xmm2, xmm3
jbe 0x18000fbac
cmp byte [0x1800177bd], 0
je 0x18000fade
mov dword [rbp + 0x808], 3
movaps xmm0, xmm8
mov dword [rbp + 0x80c], 3
mov qword [rbp + 0x800], rbx
movups xmm6, xmmword [rbp + 0x800]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x838], 2
mov qword [rbp + 0x830], rax
lea r9, [rsp + 0x70]
lea rax, [rbp + 0x60]
mov dword [rbp + 0x83c], 2
movaps xmm1, xmmword [rbp + 0x830]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rdx, [rbp]
mov dword [rbp + 0x848], 5
mov dword [rbp + 0x84c], 5
mov qword [rbp + 0x840], r15
movaps xmm2, xmmword [rbp + 0x840]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x70], xmm1
movaps xmmword [rbp + 0x60], xmm6
movdqa xmmword [rbp - 0x70], xmm2
call fcn.180005100
mov rcx, qword [rbp]
mov qword [rbp + 0x2d0], r12
cmp word [rcx], 0
je 0x18000fab4
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000fa90
add eax, 1
mov dword [rbp + 0x2d8], eax
mov dword [rbp + 0x2dc], eax
je 0x18000fabf
mov qword [rbp + 0x2d0], rcx
jmp 0x18000fabf
mov qword [rbp + 0x2d8], 0
xorps xmm1, xmm1
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x180014980]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x2d0]
jmp 0x18000fb16
xorps xmm1, xmm1
mov dword [rbp + 0x858], 5
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x180014980]
mov dword [rbp + 0x85c], 5
mov qword [rbp + 0x850], r15
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x850]
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp + 0x60]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x10]
mov rcx, qword [0x180017790]
lea r8, [rbp - 0x50]
mov qword [rsp + 0x60], rax
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xa0]
movaps xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x70], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rbp - 0x30], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp + 0x10], xmm7
movdqa xmmword [rbp - 0x50], xmm1
call fcn.1800011e0
inc edi
add rsi, 8
cmp edi, r14d
jl 0x18000f8bb
mov rbx, qword [rbp + 0x50]
xorps xmm14, xmm14
mov r15, qword [rbp + 0x30]
cmp byte [0x1800177bf], 0
movsd xmm10, qword [0x1800148e8]
movss xmm13, dword [0x1800147e4]
movsd xmm15, qword [0x180014898]
je 0x1800102ab
test r15, r15
je 0x1800102ab
mov r9, qword [0x18001b670]
lea rdx, [rbp - 0x50]
mov r8, rbx
call fcn.180003e40
mov r13d, dword [rbp - 0x48]
mov r15d, r12d
test r13d, r13d
jle 0x1800102ab
mov r12, qword [rbp - 0x50]
movss xmm15, dword [0x1800147f0]
movss xmm13, dword [0x1800147ec]
cmp r15d, r13d
jge 0x18001027c
mov rdi, qword [r12]
test rdi, rdi
je 0x18001027c
xorps xmm0, xmm0
lea rdx, [rbp + 0xd0]
mov rcx, rdi
movups xmmword [rbp - 0x50], xmm0
call fcn.1800021a0
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x140]
movups xmm8, xmmword [rbp + 0xd0]
lea rdx, [rbp + 0x120]
movsd xmm9, qword [rbp + 0xe0]
movaps xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm8
movsd qword [rbp + 0x150], xmm9
call fcn.1800066c0
movaps xmm14, xmm0
mulsd xmm14, xmm11
comisd xmm14, xmm10
ja 0x18001027c
lea rsi, [rdi + 0x368]
test rsi, rsi
je 0x18001027c
mov edx, 8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18001027c
mov rsi, qword [rsi]
test rsi, rsi
je 0x18001027c
lea rdi, [rsi + 0x98]
xorps xmm6, xmm6
test rdi, rdi
je 0x18000fd18
lea edx, [rax + 8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000fd18
movups xmm6, xmmword [rdi]
movq rax, xmm6
test rax, rax
je 0x18001027c
cmp qword [rax + 0x38], 0
je 0x18001027c
xorps xmm6, xmm6
xorps xmm7, xmm7
xorps xmm10, xmm10
xorps xmm11, xmm11
xorps xmm12, xmm12
add rsi, 0x73
je 0x18000fe05
mov edx, 8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18000fe05
movzx eax, byte [rsi]
cmp al, 1
jne 0x18000fd88
movss xmm0, dword [0x1800147e4]
movss xmm12, dword [0x1800147f4]
movaps xmm7, xmm0
movaps xmm10, xmm0
movaps xmm11, xmm0
jmp 0x18000fe05
cmp al, 2
jne 0x18000fdac
movss xmm7, dword [0x1800147e0]
movaps xmm10, xmm15
movss xmm11, dword [0x1800147e4]
movss xmm12, dword [0x1800147f4]
jmp 0x18000fe05
cmp al, 3
jne 0x18000fdc8
movss xmm10, dword [0x1800147e4]
movaps xmm11, xmm15
movss xmm12, dword [0x1800147f4]
jmp 0x18000fe05
cmp al, 4
jne 0x18000fdda
movss xmm7, dword [0x1800147f4]
movaps xmm11, xmm7
jmp 0x18000fe01
cmp al, 5
jne 0x18000fdf1
movss xmm12, dword [0x1800147f4]
movaps xmm7, xmm13
movaps xmm10, xmm13
jmp 0x18000fe05
cmp al, 6
jne 0x18000fe05
movss xmm7, dword [0x1800147f4]
movaps xmm10, xmm7
movaps xmm12, xmm7
mov rcx, qword [rbp + 0xc8]
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x100]
movaps xmmword [rbp + 0x100], xmm8
movsd qword [rbp + 0x110], xmm9
call fcn.1800030e0
test al, al
je 0x180010273
movups xmm9, xmmword [rbp - 0x50]
xorps xmm2, xmm2
ucomisd xmm9, xmm2
jp 0x18000fe4a
je 0x180010273
movaps xmm8, xmm9
unpckhpd xmm8, xmm9
ucomisd xmm8, xmm2
jp 0x18000fe60
je 0x180010273
ucomiss xmm7, xmm6
jp 0x18000fe83
jne 0x18000fe83
ucomiss xmm10, xmm6
jp 0x18000fe83
jne 0x18000fe83
ucomiss xmm11, xmm6
jp 0x18000fe83
jne 0x18000fe83
ucomiss xmm12, xmm6
jp 0x18000fe83
je 0x180010273
comisd xmm9, xmm2
jbe 0x180010273
movsd xmm0, qword [rbp - 8]
cvtpd2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
comisd xmm1, xmm9
jbe 0x180010273
comisd xmm8, xmm2
jbe 0x180010273
movsd xmm0, qword [rbp + 0x80]
cvtpd2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
comisd xmm1, xmm8
jbe 0x180010273
cmp byte [0x1800177be], 0
je 0x18001003b
movsd xmm0, qword [rbp + 0xb0]
movsd xmm3, qword [rbp + 0xc0]
cvttsd2si eax, xmm0
cvttsd2si edx, xmm9
cvttsd2si ecx, xmm8
sub edx, eax
imul edx, edx
cvttsd2si eax, xmm3
sub ecx, eax
imul ecx, ecx
add ecx, edx
cmp ecx, 0x190
jle 0x18001003b
movaps xmm2, xmm9
movaps xmm1, xmm8
subsd xmm2, xmm0
subsd xmm1, xmm3
call fcn.180006440
movaps xmm1, xmm0
movaps xmm6, xmm0
call fcn.1800061b0
movaps xmm13, xmm0
movaps xmm1, xmm6
mulsd xmm13, qword [0x180014898]
addsd xmm13, qword [rbp + 0xb0]
call fcn.180005f20
cmp byte [0x180017799], 0
movaps xmm6, xmm0
mulsd xmm6, qword [0x180014898]
addsd xmm8, qword [0x180014860]
movss dword [rbp + 0x40], xmm7
movss dword [rbp + 0x44], xmm10
addsd xmm6, qword [rbp + 0xc0]
movss dword [rbp + 0x48], xmm11
movss dword [rbp + 0x4c], xmm12
je 0x18000ffe4
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp + 0x60]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0xf0]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x1a0]
movaps xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xf0], xmm9
movsd qword [rbp + 0xf8], xmm8
movsd qword [rbp + 0x1a0], xmm13
movsd qword [rbp + 0x1a8], xmm6
call fcn.180001500
movaps xmm0, xmmword [rbp + 0x40]
lea rax, [rbp + 0x60]
movss xmm3, dword [0x18001704c]
lea r8, [rbp + 0x190]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x180]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x190], xmm9
movsd qword [rbp + 0x198], xmm8
movsd qword [rbp + 0x180], xmm13
movsd qword [rbp + 0x188], xmm6
call fcn.180001500
lea rax, [0x180013828]
mov dword [rbp + 0x868], 3
mov qword [rbp + 0x860], rax
movaps xmm0, xmm14
mov dword [rbp + 0x86c], 3
movups xmm8, xmmword [rbp + 0x860]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
mov dword [rbp + 0x468], 2
lea rax, [0x180013830]
mov qword [rbp + 0x460], rax
movaps xmm13, xmm0
mov dword [rbp + 0x46c], 2
xorps xmm6, xmm6
movups xmm14, xmmword [rbp + 0x460]
test rdi, rdi
je 0x1800100ba
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x1800100ba
movups xmm6, xmmword [rdi]
movq rcx, xmm6
xor edi, edi
test rcx, rcx
je 0x1800100cc
mov rcx, qword [rcx + 0x38]
jmp 0x1800100cf
mov rcx, rdi
cmp word [rcx], 0
mov qword [rbp + 0x370], rdi
je 0x180010107
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800100e3
add eax, 1
mov dword [rbp + 0x378], eax
mov dword [rbp + 0x37c], eax
je 0x180010112
mov qword [rbp + 0x370], rcx
jmp 0x180010112
mov qword [rbp + 0x378], 0
movaps xmm0, xmmword [rbp + 0x370]
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x70]
movsd qword [rsp + 0x20], xmm13
lea rdx, [rbp]
movaps xmmword [rbp + 0x60], xmm8
movaps xmmword [rsp + 0x70], xmm14
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180005100
mov rcx, qword [rbp]
movss dword [rbp + 0x390], xmm7
movss dword [rbp + 0x394], xmm10
movss dword [rbp + 0x398], xmm11
cmp word [rcx], 0
movss dword [rbp + 0x39c], xmm12
mov qword [rbp + 0x360], rdi
je 0x1800101aa
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x180010186
add eax, 1
mov dword [rbp + 0x368], eax
mov dword [rbp + 0x36c], eax
je 0x1800101b5
mov qword [rbp + 0x360], rcx
jmp 0x1800101b5
mov qword [rbp + 0x368], 0
movaps xmm0, xmmword [0x180014950]
lea rax, [rbp + 0x60]
mov rdx, qword [0x1800177a0]
lea r9, [rbp + 0x10]
mov rcx, qword [0x180017790]
lea r8, [rbp - 0x50]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xa0]
movaps xmmword [rbp + 0x60], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x70], xmm0
movaps xmm0, xmmword [0x180014a20]
movaps xmmword [rsp + 0x70], xmm1
movups xmm1, xmmword [rbp + 0x390]
movaps xmmword [rbp - 0x30], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
movdqa xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x360]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp + 0x10], xmm9
movdqa xmmword [rbp - 0x50], xmm1
call fcn.1800011e0
movss xmm13, dword [0x1800147ec]
movsd xmm10, qword [0x1800148e8]
movsd xmm11, qword [0x1800147f8]
inc r15d
add r12, 8
cmp r15d, r13d
jl 0x18000fc3a
movss xmm13, dword [0x1800147e4]
xorps xmm14, xmm14
movsd xmm15, qword [0x180014898]
cmp byte [0x1800177c2], 0
je 0x1800119c3
cmp qword [rbp + 0x30], 0
je 0x1800119c3
mov r9, qword [0x18001b690]
lea rdx, [rbp - 0x50]
mov r8, rbx
call fcn.180003e40
mov r15d, dword [rbp - 0x48]
xor r13d, r13d
mov esi, r13d
test r15d, r15d
jle 0x1800119c3
mov r12, qword [rbp - 0x50]
mov r14d, r13d
cmp r13d, r15d
jge 0x1800119ac
mov rbx, qword [r12 + r14*8]
test rbx, rbx
je 0x1800119ac
lea rdi, [rbx + 0xd82]
test rdi, rdi
je 0x18001032d
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x18001032d
test byte [rdi], 4
jne 0x1800119ac
mov r8, rbx
lea rdx, [rbp + 0x60]
call fcn.1800048e0
xorps xmm0, xmm0
lea rdx, [rbp + 0xd0]
mov rcx, rbx
movups xmmword [rbp - 0x50], xmm0
call fcn.1800021a0
movups xmm0, xmmword [rbp + 0x160]
lea r8, [rbp + 0x140]
movups xmm6, xmmword [rbp + 0xd0]
lea rdx, [rbp + 0x120]
movsd xmm9, qword [rbp + 0xe0]
movaps xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [rbp + 0x170]
movsd qword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm6
movsd qword [rbp + 0x150], xmm9
call fcn.1800066c0
movaps xmm7, xmm0
mulsd xmm7, qword [0x1800147f8]
comisd xmm7, xmm10
ja 0x1800119ac
movss xmm8, dword [0x1800147f4]
lea r8, [rbp - 0x50]
mov rcx, qword [rbp + 0xc8]
lea rdx, [rbp + 0x100]
movaps xmm10, xmm8
movaps xmmword [rbp + 0x100], xmm6
movaps xmm11, xmm8
movsd qword [rbp + 0x110], xmm9
call fcn.1800030e0
test al, al
je 0x1800119ac
movups xmm9, xmmword [rbp - 0x50]
xorps xmm2, xmm2
ucomisd xmm9, xmm2
jp 0x18001040b
je 0x1800119ac
movaps xmm12, xmm9
unpckhpd xmm12, xmm9
ucomisd xmm12, xmm2
jp 0x180010421
je 0x1800119ac
comisd xmm9, xmm2
jbe 0x1800119ac
movsd xmm0, qword [rbp - 8]
cvtpd2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
comisd xmm1, xmm9
jbe 0x1800119ac
comisd xmm12, xmm2
jbe 0x1800119ac
movsd xmm0, qword [rbp + 0x80]
cvtpd2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
comisd xmm1, xmm12
jbe 0x1800119ac
mov rbx, qword [rbp + 0x60]
lea rax, str.Tiered_Chest
mov dword [rbp + 0x478], 0xd
mov dword [rbp + 0x47c], 0xd
mov qword [rbp + 0x470], rax
mov qword [rbp + 0x340], r13
cmp word [rbx], r13w
je 0x1800104c6
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x1800104a2
add eax, 1
mov dword [rbp + 0x348], eax
mov dword [rbp + 0x34c], eax
je 0x1800104cd
mov qword [rbp + 0x340], rbx
jmp 0x1800104cd
mov qword [rbp + 0x348], r13
movaps xmm0, xmmword [rbp + 0x470]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x340]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x18001061f
lea rax, [0x180013828]
mov dword [rbp + 0x488], 3
mov qword [rbp + 0x480], rax
movaps xmm0, xmm7
mov dword [rbp + 0x48c], 3
movups xmm6, xmmword [rbp + 0x480]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x498], 2
mov qword [rbp + 0x490], rax
lea r9, [rbp - 0x70]
lea rax, str.Chest
mov dword [rbp + 0x49c], 2
movaps xmm1, xmmword [rbp + 0x490]
lea r8, [rbp]
mov qword [rbp + 0x4a0], rax
lea rdx, [rbp + 0xa0]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x4a8], 7
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x4ac], 7
movaps xmm2, xmmword [rbp + 0x4a0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0xa0]
movaps xmm2, xmmword [0x180014980]
mov qword [rbp + 0x330], r13
cmp word [rcx], r13w
je 0x1800105f9
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x1800105d5
add eax, 1
mov dword [rbp + 0x338], eax
mov dword [rbp + 0x33c], eax
je 0x180010600
mov qword [rbp + 0x330], rcx
jmp 0x180010600
mov qword [rbp + 0x338], r13
movaps xmm0, xmmword [0x180014950]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x330]
jmp 0x18001179b
lea rax, str.Tiered_Ammo
mov dword [rbp + 0x4b8], 0xc
mov qword [rbp + 0x4b0], rax
mov dword [rbp + 0x4bc], 0xc
mov qword [rbp + 0x320], r13
cmp word [rbx], r13w
je 0x180010679
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180010655
add eax, 1
mov dword [rbp + 0x328], eax
mov dword [rbp + 0x32c], eax
je 0x180010680
mov qword [rbp + 0x320], rbx
jmp 0x180010680
mov qword [rbp + 0x328], r13
movaps xmm0, xmmword [rbp + 0x4b0]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x320]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x18001087a
lea rax, [0x180013828]
mov dword [rbp + 0x4c8], 3
mov qword [rbp + 0x4c0], rax
movaps xmm0, xmm7
mov dword [rbp + 0x4cc], 3
movups xmm6, xmmword [rbp + 0x4c0]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x4d8], 2
mov qword [rbp + 0x4d0], rax
lea r9, [rbp - 0x70]
lea rax, str.Ammo_box
mov dword [rbp + 0x4dc], 2
movaps xmm1, xmmword [rbp + 0x4d0]
lea r8, [rbp]
mov qword [rbp + 0x4e0], rax
lea rdx, [rbp + 0x3d0]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x4e8], 0xa
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x4ec], 0xa
movaps xmm2, xmmword [rbp + 0x4e0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x3d0]
movaps xmm2, xmmword [0x180014990]
mov qword [rbp + 0x2f0], r13
cmp word [rcx], r13w
je 0x1800107b4
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], r13w
jne 0x180010790
add eax, 1
mov dword [rbp + 0x2f8], eax
mov dword [rbp + 0x2fc], eax
je 0x1800107bb
mov qword [rbp + 0x2f0], rcx
jmp 0x1800107bb
mov qword [rbp + 0x2f8], r13
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp - 0x50]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x90]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movaps xmm8, xmm13
movaps xmm10, xmm13
movaps xmm11, xmm13
jmp 0x180011840
lea rax, str.AlwaysSpawn_NormalChest
mov dword [rbp + 0x4f8], 0x18
mov qword [rbp + 0x4f0], rax
mov dword [rbp + 0x4fc], 0x18
mov qword [rbp + 0x2e0], r13
cmp word [rbx], r13w
je 0x1800108d4
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x1800108b0
add eax, 1
mov dword [rbp + 0x2e8], eax
mov dword [rbp + 0x2ec], eax
je 0x1800108db
mov qword [rbp + 0x2e0], rbx
jmp 0x1800108db
mov qword [rbp + 0x2e8], r13
movaps xmm0, xmmword [rbp + 0x4f0]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x2e0]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x180010a2d
lea rax, [0x180013828]
mov dword [rbp + 0x508], 3
mov qword [rbp + 0x500], rax
movaps xmm0, xmm7
mov dword [rbp + 0x50c], 3
movups xmm6, xmmword [rbp + 0x500]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x518], 2
mov qword [rbp + 0x510], rax
lea r9, [rbp - 0x70]
lea rax, str.Basic_chest
mov dword [rbp + 0x51c], 2
movaps xmm1, xmmword [rbp + 0x510]
lea r8, [rbp]
mov qword [rbp + 0x520], rax
lea rdx, [rbp + 0x430]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x528], 0xd
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x52c], 0xd
movaps xmm2, xmmword [rbp + 0x520]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x430]
movaps xmm2, xmmword [0x180014980]
mov qword [rbp + 0x350], r13
cmp word [rcx], r13w
je 0x180010a07
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x1800109e3
add eax, 1
mov dword [rbp + 0x358], eax
mov dword [rbp + 0x35c], eax
je 0x180010a0e
mov qword [rbp + 0x350], rcx
jmp 0x180010a0e
mov qword [rbp + 0x358], r13
movaps xmm0, xmmword [0x180014950]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x350]
jmp 0x18001179b
lea rax, str.Cooler_Container
mov dword [rbp + 0x538], 0x11
mov qword [rbp + 0x530], rax
mov dword [rbp + 0x53c], 0x11
mov qword [rbp + 0x220], r13
cmp word [rbx], r13w
je 0x180010a87
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180010a63
add eax, 1
mov dword [rbp + 0x228], eax
mov dword [rbp + 0x22c], eax
je 0x180010a8e
mov qword [rbp + 0x220], rbx
jmp 0x180010a8e
mov qword [rbp + 0x228], r13
movaps xmm0, xmmword [rbp + 0x530]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x220]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x180010c85
lea rax, [0x180013828]
mov dword [rbp + 0x548], 3
mov qword [rbp + 0x540], rax
movaps xmm0, xmm7
mov dword [rbp + 0x54c], 3
movups xmm6, xmmword [rbp + 0x540]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x558], 2
mov qword [rbp + 0x550], rax
lea r9, [rbp - 0x70]
lea rax, str.Cooler
mov dword [rbp + 0x55c], 2
movaps xmm1, xmmword [rbp + 0x550]
lea r8, [rbp]
mov qword [rbp + 0x560], rax
lea rdx, [rbp + 0x420]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x568], 8
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x56c], 8
movaps xmm2, xmmword [rbp + 0x560]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x420]
movaps xmm2, xmmword [0x1800149f0]
mov qword [rbp + 0x230], r13
cmp word [rcx], r13w
je 0x180010bba
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x180010b96
add eax, 1
mov dword [rbp + 0x238], eax
mov dword [rbp + 0x23c], eax
je 0x180010bc1
mov qword [rbp + 0x230], rcx
jmp 0x180010bc1
mov qword [rbp + 0x238], r13
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp - 0x50]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x90]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movss xmm10, dword [0x1800147f4]
movaps xmm8, xmm14
movaps xmm11, xmm10
jmp 0x180011840
lea rax, str.FoodBox_Produce
mov dword [rbp + 0x578], 0x10
mov qword [rbp + 0x570], rax
mov dword [rbp + 0x57c], 0x10
mov qword [rbp + 0x240], r13
cmp word [rbx], r13w
je 0x180010ce4
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180010cc0
add eax, 1
mov dword [rbp + 0x248], eax
mov dword [rbp + 0x24c], eax
je 0x180010ceb
mov qword [rbp + 0x240], rbx
jmp 0x180010ceb
mov qword [rbp + 0x248], r13
movaps xmm0, xmmword [rbp + 0x570]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x240]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x180010ee2
lea rax, [0x180013828]
mov dword [rbp + 0x588], 3
mov qword [rbp + 0x580], rax
movaps xmm0, xmm7
mov dword [rbp + 0x58c], 3
movups xmm6, xmmword [rbp + 0x580]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x598], 2
mov qword [rbp + 0x590], rax
lea r9, [rbp - 0x70]
lea rax, str.Food_box
mov dword [rbp + 0x59c], 2
movaps xmm1, xmmword [rbp + 0x590]
lea r8, [rbp]
mov qword [rbp + 0x5a0], rax
lea rdx, [rbp + 0x410]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x5a8], 0xa
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x5ac], 0xa
movaps xmm2, xmmword [rbp + 0x5a0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x410]
movaps xmm2, xmmword [0x1800149a0]
mov qword [rbp + 0x250], r13
cmp word [rcx], r13w
je 0x180010e17
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x180010df3
add eax, 1
mov dword [rbp + 0x258], eax
mov dword [rbp + 0x25c], eax
je 0x180010e1e
mov qword [rbp + 0x250], rcx
jmp 0x180010e1e
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp - 0x50]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x90]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movss xmm10, dword [0x1800147f4]
movaps xmm8, xmm14
movaps xmm11, xmm13
jmp 0x180011840
lea rax, str.Tiered_Safe
mov dword [rbp + 0x5b8], 0xc
mov qword [rbp + 0x5b0], rax
mov dword [rbp + 0x5bc], 0xc
mov qword [rbp + 0x260], r13
cmp word [rbx], r13w
je 0x180010f44
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180010f20
add eax, 1
mov dword [rbp + 0x268], eax
mov dword [rbp + 0x26c], eax
je 0x180010f4b
mov qword [rbp + 0x260], rbx
jmp 0x180010f4b
mov qword [rbp + 0x268], r13
movaps xmm0, xmmword [rbp + 0x5b0]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x260]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x18001113e
lea rax, [0x180013828]
mov dword [rbp + 0x5c8], 3
mov qword [rbp + 0x5c0], rax
movaps xmm0, xmm7
mov dword [rbp + 0x5cc], 3
movups xmm6, xmmword [rbp + 0x5c0]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x5d8], 2
mov qword [rbp + 0x5d0], rax
lea r9, [rbp - 0x70]
lea rax, str.Safe
mov dword [rbp + 0x5dc], 2
movaps xmm1, xmmword [rbp + 0x5d0]
lea r8, [rbp]
mov qword [rbp + 0x5e0], rax
lea rdx, [rbp + 0x400]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x5e8], 6
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x5ec], 6
movaps xmm2, xmmword [rbp + 0x5e0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x400]
movaps xmm2, xmmword [0x180014960]
mov qword [rbp + 0x270], r13
cmp word [rcx], r13w
je 0x180011077
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x180011053
add eax, 1
mov dword [rbp + 0x278], eax
mov dword [rbp + 0x27c], eax
je 0x18001107e
mov qword [rbp + 0x270], rcx
jmp 0x18001107e
mov qword [rbp + 0x278], r13
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp - 0x50]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x90]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movss xmm8, dword [0x1800147f4]
movaps xmm10, xmm14
jmp 0x18001183c
lea rax, str.Barrel_FishingRod
mov dword [rbp + 0x5f8], 0x12
mov qword [rbp + 0x5f0], rax
mov dword [rbp + 0x5fc], 0x12
mov qword [rbp + 0x280], r13
cmp word [rbx], r13w
je 0x180011198
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180011174
add eax, 1
mov dword [rbp + 0x288], eax
mov dword [rbp + 0x28c], eax
je 0x18001119f
mov qword [rbp + 0x280], rbx
jmp 0x18001119f
mov qword [rbp + 0x288], r13
movaps xmm0, xmmword [rbp + 0x5f0]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x280]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x18001139a
lea rax, [0x180013828]
mov dword [rbp + 0x608], 3
mov qword [rbp + 0x600], rax
movaps xmm0, xmm7
mov dword [rbp + 0x60c], 3
movups xmm6, xmmword [rbp + 0x600]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x618], 2
mov qword [rbp + 0x610], rax
lea r9, [rbp - 0x70]
lea rax, str.Fishing_rod
mov dword [rbp + 0x61c], 2
movaps xmm1, xmmword [rbp + 0x610]
lea r8, [rbp]
mov qword [rbp + 0x620], rax
lea rdx, [rbp + 0x450]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x628], 0xd
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x62c], 0xd
movaps xmm2, xmmword [rbp + 0x620]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x450]
movaps xmm2, xmmword [0x180014990]
mov qword [rbp + 0x290], r13
cmp word [rcx], r13w
je 0x1800112d4
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], r13w
jne 0x1800112b0
add eax, 1
mov dword [rbp + 0x298], eax
mov dword [rbp + 0x29c], eax
je 0x1800112db
mov qword [rbp + 0x290], rcx
jmp 0x1800112db
mov qword [rbp + 0x298], r13
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp - 0x50]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x90]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movaps xmm8, xmm13
movaps xmm10, xmm13
movaps xmm11, xmm13
jmp 0x180011840
lea rax, str.CashRegister
mov dword [rbp + 0x638], 0xd
mov qword [rbp + 0x630], rax
mov dword [rbp + 0x63c], 0xd
mov qword [rbp + 0x2a0], r13
cmp word [rbx], r13w
je 0x1800113f4
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x1800113d0
add eax, 1
mov dword [rbp + 0x2a8], eax
mov dword [rbp + 0x2ac], eax
je 0x1800113fb
mov qword [rbp + 0x2a0], rbx
jmp 0x1800113fb
mov qword [rbp + 0x2a8], r13
movaps xmm0, xmmword [rbp + 0x630]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x2a0]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x1800115ed
lea rax, [0x180013828]
mov dword [rbp + 0x648], 3
mov qword [rbp + 0x640], rax
movaps xmm0, xmm7
mov dword [rbp + 0x64c], 3
movups xmm6, xmmword [rbp + 0x640]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x658], 2
mov qword [rbp + 0x650], rax
lea r9, [rbp - 0x70]
lea rax, str.Cash_register
mov dword [rbp + 0x65c], 2
movaps xmm1, xmmword [rbp + 0x650]
lea r8, [rbp]
mov qword [rbp + 0x660], rax
lea rdx, [rbp + 0x440]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x668], 0xf
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x66c], 0xf
movaps xmm2, xmmword [rbp + 0x660]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x440]
movaps xmm2, xmmword [0x180014990]
mov qword [rbp + 0x2b0], r13
cmp word [rcx], r13w
je 0x180011527
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x180011503
add eax, 1
mov dword [rbp + 0x2b8], eax
mov dword [rbp + 0x2bc], eax
je 0x18001152e
mov qword [rbp + 0x2b0], rcx
jmp 0x18001152e
mov qword [rbp + 0x2b8], r13
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
mov rdx, qword [0x1800177a0]
lea r9, [rbp - 0x50]
mov rcx, qword [0x180017790]
lea r8, [rbp + 0x90]
mov qword [rsp + 0x60], rax
xorps xmm1, xmm1
movzx eax, byte [0x18001706d]
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movaps xmm8, xmm13
movaps xmm10, xmm13
movaps xmm11, xmm13
jmp 0x180011840
lea rax, str.BuriedChest
mov dword [rbp + 0x678], 0xc
mov qword [rbp + 0x670], rax
mov dword [rbp + 0x67c], 0xc
mov qword [rbp + 0x2c0], r13
cmp word [rbx], r13w
je 0x180011647
mov rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r13w
jne 0x180011623
add eax, 1
mov dword [rbp + 0x2c8], eax
mov dword [rbp + 0x2cc], eax
je 0x18001164e
mov qword [rbp + 0x2c0], rbx
jmp 0x18001164e
mov qword [rbp + 0x2c8], r13
movaps xmm0, xmmword [rbp + 0x670]
lea r8, [rsp + 0x70]
movaps xmm1, xmmword [rbp + 0x2c0]
lea rdx, [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x70], xmm1
call fcn.1800059b0
test al, al
je 0x180011840
lea rax, [0x180013828]
mov dword [rbp + 0x688], 3
mov qword [rbp + 0x680], rax
movaps xmm0, xmm7
mov dword [rbp + 0x68c], 3
movups xmm6, xmmword [rbp + 0x680]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
lea rax, [0x180013830]
mov dword [rbp + 0x698], 2
mov qword [rbp + 0x690], rax
lea r9, [rbp - 0x70]
lea rax, str.Buried_chest
mov dword [rbp + 0x69c], 2
movaps xmm1, xmmword [rbp + 0x690]
lea r8, [rbp]
mov qword [rbp + 0x6a0], rax
lea rdx, [rbp + 0x3f0]
lea rax, [rsp + 0x70]
mov dword [rbp + 0x6a8], 0xe
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x6ac], 0xe
movaps xmm2, xmmword [rbp + 0x6a0]
movsd qword [rsp + 0x20], xmm0
movdqa xmmword [rbp], xmm2
movaps xmmword [rsp + 0x70], xmm6
movdqa xmmword [rbp - 0x70], xmm1
call fcn.180005100
mov rcx, qword [rbp + 0x3f0]
movaps xmm2, xmmword [0x180014980]
mov qword [rbp + 0x310], r13
cmp word [rcx], r13w
je 0x18001177a
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x180011756
add eax, 1
mov dword [rbp + 0x318], eax
mov dword [rbp + 0x31c], eax
je 0x180011781
mov qword [rbp + 0x310], rcx
jmp 0x180011781
mov qword [rbp + 0x318], r13
movaps xmm0, xmmword [0x180014950]
movaps xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movaps xmm0, xmmword [rbp + 0x310]
mov rdx, qword [0x1800177a0]
lea rax, [rsp + 0x70]
mov rcx, qword [0x180017790]
lea r9, [rbp - 0x50]
mov qword [rsp + 0x60], rax
lea r8, [rbp + 0x90]
movzx eax, byte [0x18001706d]
xorps xmm1, xmm1
mov byte [rsp + 0x58], al
lea rax, [rbp - 0x70]
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
movdqa xmmword [rbp + 0x90], xmm0
movss xmm0, dword [0x1800147f4]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movaps xmm1, xmmword [0x180014a20]
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 0x30], xmm2
movaps xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp - 0x50], xmm9
call fcn.1800011e0
movss xmm8, dword [0x1800147f4]
movaps xmm10, xmm8
movaps xmm11, xmm14
cmp byte [0x1800177c1], r13b
je 0x1800119ac
movsd xmm0, qword [rbp + 0xb0]
movsd xmm3, qword [rbp + 0xc0]
cvttsd2si eax, xmm0
cvttsd2si edx, xmm9
cvttsd2si ecx, xmm12
sub edx, eax
imul edx, edx
cvttsd2si eax, xmm3
sub ecx, eax
imul ecx, ecx
add ecx, edx
cmp ecx, 0x190
jle 0x1800119ac
movaps xmm2, xmm9
movaps xmm1, xmm12
subsd xmm2, xmm0
subsd xmm1, xmm3
call fcn.180006440
movaps xmm1, xmm0
movaps xmm6, xmm0
call fcn.1800061b0
movaps xmm7, xmm0
movaps xmm1, xmm6
mulsd xmm7, xmm15
addsd xmm7, qword [rbp + 0xb0]
call fcn.180005f20
cmp byte [0x180017799], r13b
movaps xmm6, xmm0
addsd xmm12, qword [0x180014860]
mulsd xmm6, xmm15
mov dword [rbp + 0x4c], 0x3f800000
movss dword [rbp + 0x40], xmm8
movss dword [rbp + 0x44], xmm10
movss dword [rbp + 0x48], xmm11
addsd xmm6, qword [rbp + 0xc0]
je 0x180011954
movaps xmm0, xmmword [0x180014950]
lea rax, [rsp + 0x70]
movss xmm3, dword [0x180017048]
lea r8, [rbp + 0xf0]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x1a0]
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0xf0], xmm9
movsd qword [rbp + 0xf8], xmm12
movsd qword [rbp + 0x1a0], xmm7
movsd qword [rbp + 0x1a8], xmm6
call fcn.180001500
movaps xmm0, xmmword [rbp + 0x40]
lea rax, [rsp + 0x70]
movss xmm3, dword [0x18001704c]
lea r8, [rbp + 0x190]
mov rcx, qword [0x180017790]
lea rdx, [rbp + 0x180]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x190], xmm9
movsd qword [rbp + 0x198], xmm12
movsd qword [rbp + 0x180], xmm7
movsd qword [rbp + 0x188], xmm6
call fcn.180001500
movsd xmm10, qword [0x1800148e8]
inc esi
inc r14
cmp esi, r15d
jl 0x1800102f9
movaps xmm12, xmmword [rsp + 0x1800]
movaps xmm14, xmmword [rsp + 0x17e0]
movaps xmm6, xmmword [rsp + 0x1860]
mov r12, qword [rsp + 0x1878]
movaps xmm11, xmmword [rsp + 0x1810]
mov rsi, qword [rsp + 0x18c0]
mov r13, qword [rsp + 0x1870]
mov rcx, qword [rbp + 0x16c0]
xor rcx, rsp
call fcn.180011d70
lea r11, [rsp + 0x1880]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm9, xmmword [r11 - 0x50]
movaps xmm10, xmmword [r11 - 0x60]
movaps xmm13, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xb0]
mov rsp, r11
pop r15
pop r14
pop rdi
pop rbx
pop rbp
ret