Function at 0x180001e70
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x2d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
lea rbp, [rax - 0x258]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x18006f028]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rdi, rcx
xor r13d, r13d
movabs rcx, 0x217e9dc48139933d
call fcn.1800042e0
mov dword [rdi], eax
movabs rcx, 0x96275889b8e0ee0
call fcn.1800042e0
mov dword [rdi + 8], eax
mov eax, dword [rdi]
mov dword [rbp + 0x128], eax
lea rdx, [rbp + 0x128]
movabs rcx, 0x5c880f9056d784c8
call fcn.180004590
mov dword [rdi + 4], eax
mov dword [rbp + 0x128], eax
lea rdx, [rbp + 0x128]
movabs rsi, 0xe7e11b8dcbed1058
mov rcx, rsi
call fcn.180004590
mov dword [rdi + 0xc], eax
mov eax, dword [rdi]
mov dword [rbp + 0x128], eax
lea rdx, [rbp + 0x128]
call fcn.180006f90
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], r13b
jne 0x180001f54
mov rdx, rax
lea rcx, [0x1800781b0]
call fcn.180004160
cmp byte [0x1800775f4], 1
jne 0x180002196
mov dword [rbp + 0x128], 1
mov dword [rbp + 0x130], 0x7f8d09b8
mov dword [rbp + 0x120], 2
lea r9, [rbp + 0x128]
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x120]
movabs rbx, 0xfe99b66d079cf6bc
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0xa987235f
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0xd2047988
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0xc0651d40
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0x8ed92e16
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0x8f8bc6d
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0xa1eb1353
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0x7ce1e61
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], 0xf84fa74f
mov dword [rbp + 0x130], 2
lea r9, [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.180004890
movabs rbx, 0x460bc76a0e10655e
cmp byte [0x180078c30], r13b
je 0x1800021fd
mov eax, dword [rdi + 4]
mov dword [rbp + 0x120], eax
lea rdx, [rbp + 0x120]
mov rcx, rbx
call fcn.180004590
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x128]
movabs rcx, 0xa5c38736c426fcb8
test eax, eax
movzx eax, byte [0x180078c30]
mov dword [rbp + 0x120], eax
je 0x1800021ef
mov eax, dword [rdi + 0xc]
jmp 0x1800021f2
mov eax, dword [rdi + 4]
mov dword [rbp + 0x128], eax
call fcn.180004710
cmp byte [0x180078c31], r13b
je 0x180002297
mov eax, dword [rdi + 4]
mov dword [rbp + 0x120], eax
lea rdx, [rbp + 0x120]
mov rcx, rbx
call fcn.180004590
movss xmm0, dword [0x1800652f4]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x128]
movss dword [rbp + 0x120], xmm0
test eax, eax
je 0x180002254
mov eax, dword [rdi + 0xc]
mov dword [rbp + 0x128], eax
call fcn.180005ea0
jmp 0x180002297
mov eax, dword [rdi + 4]
mov dword [rbp + 0x128], eax
call fcn.180005ea0
movss xmm0, dword [0x180065218]
movss dword [rbp + 0x120], xmm0
mov eax, dword [rdi]
mov dword [rbp + 0x128], eax
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x128]
movabs rcx, 0xc41f4b6e23fe6a4a
call fcn.180004a50
cmp byte [0x180078c28], r13b
je 0x18000245c
mov eax, dword [rdi + 8]
mov dword [rbp + 0x120], eax
lea rdx, [rbp + 0x120]
mov rcx, rbx
call fcn.180004590
mov ebx, dword [rdi + 8]
test eax, eax
je 0x1800022da
mov dword [rbp + 0x120], ebx
lea rdx, [rbp + 0x120]
mov rcx, rsi
call fcn.180004590
mov ebx, eax
mov dword [rbp + 0x120], ebx
lea rdx, [rbp + 0x120]
movabs rcx, 0xc5286ffc176f28a2
call fcn.180004590
test eax, eax
jne 0x18000231e
mov dword [rbp + 0x120], ebx
lea rdx, [rbp + 0x120]
movabs rcx, 0x57e457cd2c0fc168
call fcn.180004590
test eax, eax
je 0x18000245c
mov dword [rbp + 0x120], ebx
lea rdx, [rbp + 0x120]
movabs rcx, 0xe3b6097cc25aa69e
call fcn.180004590
test eax, eax
jne 0x18000245c
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x128], r13d
mov dword [rbp + 0x130], 1
mov dword [rbp + 0x160], 1
mov dword [rbp + 0x118], 1
mov dword [rbp + 0x150], 1
mov dword [rbp + 0x158], r13d
mov dword [rbp + 0x140], r13d
mov dword [rbp + 0x148], r13d
mov dword [rbp + 0x110], r13d
movss xmm0, dword [0x18006f05c]
movss dword [rbp + 0x138], xmm0
mov dword [rbp + 0x108], r13d
mov dword [rbp + 0x100], 1
mov dword [rbp + 0xf8], ebx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x128]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x130]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x150]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x158]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x140]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x148]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x108]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0xf8]
call fcn.180006080
cmp byte [0x180078c2a], r13b
je 0x1800024c9
cmp qword [0x180078d18], r13
jne 0x180002485
mov ecx, 0x10
call fcn.18005b798
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [0x180078d18], rax
mov rax, qword [0x180078d18]
cmp dword [rax + 4], r13d
je 0x1800024c2
call fcn.1800019c0
lea rcx, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_Features::Tick_void____ptr64::_31::_lambda_1___void___.0
mov qword [rbp + 0x180], rcx
lea rcx, [rbp + 0x180]
mov qword [rbp + 0x1b8], rcx
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.180001a60
mov byte [0x180078c2a], r13b
cmp byte [0x180078c2d], r13b
je 0x180002500
call fcn.1800019c0
lea rcx, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_Features::Tick_void____ptr64::_34::_lambda_2___void___.0
mov qword [rbp + 0x78], rcx
lea rcx, [rbp + 0x78]
mov qword [rbp + 0xb0], rcx
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.180001a60
mov byte [0x180078c2d], r13b
cmp byte [0x180078c29], r13b
je 0x180002540
call fcn.1800019c0
lea rcx, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_Features::Tick_void____ptr64::_37::_lambda_3___void___.0
mov qword [rbp + 0xb8], rcx
lea rcx, [rbp + 0xb8]
mov qword [rbp + 0xf0], rcx
lea rdx, [rbp + 0xb8]
mov rcx, rax
call fcn.180001a60
mov byte [0x180078c29], r13b
mov r12d, dword [0x180078c0c]
mov r15d, 4
cmp byte [0x180078c2f], r13b
je 0x180002af3
mov dword [rbp + 0x130], r13d
mov rax, qword gs:[0x58]
mov rsi, qword [rax + r12*8]
mov eax, dword [rsi + r15]
cmp dword [0x180078de8], eax
jle 0x1800025bb
lea rcx, [0x180078de8]
call fcn.18005b688
cmp dword [0x180078de8], r14d
jne 0x1800025bb
lea rax, str.WEAPON_PISTOL_SEMIAUTO
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078da4], eax
lea rcx, [0x180078de8]
call fcn.18005b628
mov eax, dword [rsi + r15]
cmp dword [0x180078df0], eax
jle 0x180002608
lea rcx, [0x180078df0]
call fcn.18005b688
cmp dword [0x180078df0], 0xffffffff
jne 0x180002608
lea rax, str.WEAPON_PISTOL_MAUSER
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078d98], eax
lea rcx, [0x180078df0]
call fcn.18005b628
mov eax, dword [rsi + r15]
cmp dword [0x180078dc8], eax
jle 0x180002655
lea rcx, [0x180078dc8]
call fcn.18005b688
cmp dword [0x180078dc8], 0xffffffff
jne 0x180002655
lea rax, str.WEAPON_THROWN_TOMAHAWK_ANCIENT
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078dcc], eax
lea rcx, [0x180078dc8]
call fcn.18005b628
mov eax, dword [rsi + r15]
cmp dword [0x180078d9c], eax
jle 0x1800026a2
lea rcx, [0x180078d9c]
call fcn.18005b688
cmp dword [0x180078d9c], 0xffffffff
jne 0x1800026a2
lea rax, str.WEAPON_THROWN_TOMAHAWK
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078dfc], eax
lea rcx, [0x180078d9c]
call fcn.18005b628
mov eax, dword [rsi + r15]
cmp dword [0x180078df4], eax
jle 0x1800026ef
lea rcx, [0x180078df4]
call fcn.18005b688
cmp dword [0x180078df4], 0xffffffff
jne 0x1800026ef
lea rax, str.WEAPON_MELEE_CLEAVER
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078dd4], eax
lea rcx, [0x180078df4]
call fcn.18005b628
mov eax, dword [rsi + r15]
cmp dword [0x180078dec], eax
jle 0x18000273c
lea rcx, [0x180078dec]
call fcn.18005b688
cmp dword [0x180078dec], 0xffffffff
jne 0x18000273c
lea rax, str.WEAPON_MELEE_HATCHET
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078dd0], eax
lea rcx, [0x180078dec]
call fcn.18005b628
mov eax, dword [rsi + r15]
cmp dword [0x180078da0], eax
jle 0x180002789
lea rcx, [0x180078da0]
call fcn.18005b688
cmp dword [0x180078da0], 0xffffffff
jne 0x180002789
lea rax, str.WEAPON_BOW
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov dword [0x180078e00], eax
lea rcx, [0x180078da0]
call fcn.18005b628
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], r13d
mov dword [rbp + 0x108], r13d
lea rax, [rbp + 0x130]
mov qword [rbp + 0x110], rax
mov eax, dword [rdi + 8]
mov dword [rbp + 0x138], eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x108]
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x138]
call fcn.180007710
test eax, eax
je 0x180002964
mov eax, dword [rbp + 0x130]
mov dword [rbp + 0xf8], eax
lea rdx, [rbp + 0xf8]
movabs rcx, 0x937c71165cf334b3
call fcn.180004590
test eax, eax
je 0x180002964
mov eax, dword [rbp + 0x130]
mov dword [rbp + 0xf8], eax
lea rax, [0x18006f034]
mov qword [rbp + 0x108], rax
mov eax, dword [rdi + 8]
mov dword [rbp + 0x100], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x100]
call fcn.1800074f0
test eax, eax
je 0x18000289f
mov eax, dword [0x18006f034]
mov dword [rbp + 0xf8], eax
mov eax, dword [rbp + 0x130]
mov dword [rbp + 0x100], eax
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
movabs rcx, 0x14e56bc5b5db6a19
call fcn.180004890
mov dword [rbp + 0xf8], 1
mov eax, dword [rbp + 0x130]
mov dword [rbp + 0x100], eax
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
movabs rcx, 0xa38dcffcea8962fa
call fcn.180006ac0
mov dword [0x18006f034], eax
test eax, eax
jle 0x18000292b
mov dword [rbp + 0xf8], eax
mov eax, dword [rbp + 0x130]
mov dword [rbp + 0x100], eax
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
movabs rcx, 0xdcd2a934d65cb497
call fcn.180006ac0
mov eax, dword [rbp + 0x130]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078da4]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078d98]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078dcc]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078dfc]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078dd4]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078dd0]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov eax, dword [0x180078e00]
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0x100], 1
mov eax, dword [rdi + 8]
mov dword [rbp + 0x108], eax
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
call fcn.180005160
mov ebx, r15d
cmp byte [0x180078c2b], 0
je 0x180002eda
mov rax, qword gs:[0x58]
mov rsi, qword [rax + r12*8]
lea r15, [0x180078da8]
mov eax, dword [rsi + rbx]
cmp dword [0x180078dd8], eax
jle 0x180002b7d
lea rcx, [0x180078dd8]
call fcn.18005b688
cmp dword [0x180078dd8], 0xffffffff
jne 0x180002b7d
xorps xmm0, xmm0
movups xmmword [0x180078da8], xmm0
mov qword [0x180078db8], r13
mov qword [0x180078dc0], r13
mov r8d, 0x15
lea rdx, str.s_lootablemiscchest_3
mov rcx, r15
call fcn.180003dc0
lea rcx, [0x18005e0b0]
call fcn.18005bb3c
nop
lea rcx, [0x180078dd8]
call fcn.18005b628
mov eax, dword [rsi + rbx]
cmp dword [0x180078df8], eax
jle 0x180002bb5
lea rcx, [0x180078df8]
call fcn.18005b688
cmp dword [0x180078df8], 0xffffffff
jne 0x180002bb5
lea rcx, [0x18005e040]
call fcn.18005bb3c
lea rcx, [0x180078df8]
call fcn.18005b628
cmp qword [0x180078dc0], 0x10
setae byte [rbp]
mov r12, r15
cmovae r12, qword [0x180078da8]
mov rsi, qword [0x180078db8]
cmp rsi, 1
jb 0x180002c2f
lea r13, [r12 + rsi]
mov r8, r13
sub r8, r12
mov edx, 0x2d
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x180002c2c
cmp byte [rbx], 0x2d
jne 0x180002c01
xor eax, eax
jmp 0x180002c06
sbb eax, eax
or eax, 1
test eax, eax
je 0x180002cd7
inc rbx
mov r8, r13
sub r8, rbx
mov edx, 0x2d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x180002bf8
xor r13d, r13d
mov r8d, 1
lea rdx, [0x18005fbdc]
lea rsi, [0x18006f038]
mov rcx, rsi
call fcn.180004160
cmp qword [0x18006f050], 0x10
cmovae rsi, qword [0x18006f038]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
nop word [rax + rax]
inc r14
cmp byte [rsi + r14], 0
jne 0x180002c70
mov r8, r14
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.180003dc0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r14, rax
lea rbx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rbx, qword [rbp + 0x20]
mov dword [rax], r13d
mov r8d, 0xa
lea rdx, [rbp + 0x118]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
cmp rbx, qword [rbp + 0x118]
jne 0x180002e0d
lea rcx, str.invalid_stoi_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
nop
sub rbx, r12
cmp rbx, 0xffffffffffffffff
je 0x180002c2c
lea rcx, [rbx + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xor r13d, r13d
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], r13
cmp rsi, rcx
jb 0x180003ab8
sub rsi, rcx
mov r8, r14
cmp rsi, r14
cmovb r8, rsi
mov rdx, r15
cmp byte [rbp], r13b
cmovne rdx, qword [0x180078da8]
add rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.180003dc0
lea rdx, [rbp + 0x40]
call fcn.180003fb0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x180002d72
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002d6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002d6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005bb5c
lea rsi, [0x18006f038]
mov rdx, rsi
cmp qword [0x18006f050], 0x10
cmovae rdx, qword [0x18006f038]
lea rcx, str.Amount__s_n
call fcn.180001560
mov r12, qword [0x180078db8]
cmp r12, rbx
jb 0x180003ab8
mov rax, r12
sub rax, rbx
mov rdx, r12
cmp rax, r12
cmovb rdx, rax
mov rcx, r15
cmp qword [0x180078dc0], 0x10
cmovae rcx, qword [0x180078da8]
add rcx, rbx
sub r12, rdx
mov r8, r12
sub r8, rbx
inc r8
add rdx, rcx
call sub.VCRUNTIME140.dll_memmove
mov qword [0x180078db8], r12
mov rdx, r15
cmp qword [0x180078dc0], 0x10
cmovae rdx, qword [0x180078da8]
lea rcx, str.ped___s_n
call fcn.180001560
jmp 0x180002c4b
cmp dword [r14], 0x22
jne 0x180002e21
lea rcx, str.stoi_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x180002e5f
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002e5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002e5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005bb5c
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
test esi, esi
jle 0x180002eb8
nop dword [rax]
nop word [rax + rax]
mov ebx, dword [rdi + 8]
mov rax, r15
cmp qword [0x180078dc0], 0x10
cmovae rax, qword [0x180078da8]
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xf8]
call fcn.180005870
mov edx, ebx
mov ecx, eax
call fcn.180001bd0
sub rsi, 1
jne 0x180002e80
cmp qword [0x180078dc0], 0x10
cmovae r15, qword [0x180078da8]
mov qword [0x180078db8], r13
mov byte [r15], 0
mov byte [0x180078c2b], 0
cmp byte [0x180078c2e], 0
je 0x18000344c
movabs rbx, 0x96275889b8e0ee0
mov rcx, rbx
call fcn.1800042e0
movss xmm0, dword [0x180065350]
movss dword [rbp + 0xf8], xmm0
movss xmm1, dword [0x1800651fc]
movss dword [rbp + 0x100], xmm1
mov dword [rbp + 0x108], 0
mov dword [rbp + 0x138], eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x108]
lea r8, [rbp + 0x138]
lea rcx, [rbp + 8]
call fcn.180005c20
mov rcx, rbx
call fcn.1800042e0
mov dword [rbp + 0xf8], eax
lea rdx, [rbp + 0xf8]
call fcn.180004410
movaps xmm6, xmm0
mov dword [rbp + 0xf8], 0xa1654ba1
lea rdx, [rbp + 0xf8]
movabs rcx, 0xd6f3b6d7716cff8e
call fcn.180004590
test eax, eax
je 0x180003445
mov dword [rbp + 0xf8], 0xa1654ba1
lea rdx, [rbp + 0xf8]
movabs rcx, 0x392c8d8e07b70efc
call fcn.180004590
test eax, eax
je 0x180003445
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], 0xa1654ba1
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
call fcn.180004bd0
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], 0x2ab28031
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
call fcn.180004bd0
mov rcx, rbx
call fcn.1800042e0
mov dword [rbp + 0xf8], eax
lea rdx, [rbp + 0xf8]
call fcn.180004410
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], r13d
mov dword [rbp + 0x108], 1
mov dword [rbp + 0x138], 1
mov dword [rbp + 0x110], 1
movss xmm7, dword [rbp + 0x10]
movss dword [rbp + 0x148], xmm7
movss xmm8, dword [rbp + 0xc]
movss dword [rbp + 0x140], xmm8
movss xmm9, dword [rbp + 8]
movss dword [rbp + 0x158], xmm9
mov dword [rbp + 0x150], 0xa1654ba1
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x140]
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x150]
call fcn.180007100
mov ebx, eax
mov dword [rbp + 0x128], eax
mov dword [rbp + 0xf8], eax
lea rdx, [rbp + 0xf8]
movabs rsi, 0xd42bd6eb2e0f1677
mov rcx, rsi
call fcn.180004590
movabs r14, 0xcf2b9c0645c4651b
movabs r15, 0xdf7692b1d9e7ba7
movabs r12, 0x1794b4fcc84d812f
test eax, eax
je 0x180003240
mov rdx, qword [0x1800781a0]
cmp rdx, qword [0x1800781a8]
je 0x180003153
mov dword [rdx], ebx
add qword [0x1800781a0], 4
jmp 0x180003165
lea r8, [rbp + 0x128]
call fcn.180007d70
mov ebx, dword [rbp + 0x128]
mov ecx, ebx
call fcn.180008090
movss dword [rbp + 0xf8], xmm6
mov dword [rbp + 0x100], ebx
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, r14
call fcn.180004a50
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], 0xff
mov dword [rbp + 0x108], ebx
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
mov rcx, r15
call fcn.180004890
mov dword [rbp + 0xf8], 1
mov dword [rbp + 0x100], ebx
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, r12
call fcn.180004710
mov ecx, ebx
call fcn.180001780
mov dword [rbp + 0xf8], ebx
lea rdx, [rbp + 0xf8]
movabs rcx, 0x99bfdc94a603e541
call fcn.180004590
mov dword [rbp + 0xf8], 1
mov dword [rbp + 0x100], eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
movabs rcx, 0xe05e81a888fa63c8
call fcn.180004710
nop word [rax + rax]
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], r13d
mov dword [rbp + 0x108], 1
mov dword [rbp + 0x138], 1
mov dword [rbp + 0x110], 1
movss dword [rbp + 0x148], xmm7
movss dword [rbp + 0x140], xmm8
movss dword [rbp + 0x158], xmm9
mov dword [rbp + 0x150], 0x2ab28031
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x140]
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x150]
call fcn.180007100
mov ebx, eax
mov dword [rbp + 0x128], eax
mov dword [rbp + 0xf8], eax
lea rdx, [rbp + 0xf8]
mov rcx, rsi
call fcn.180004590
test eax, eax
je 0x180003431
mov rdx, qword [0x1800781a0]
cmp rdx, qword [0x1800781a8]
je 0x180003333
mov dword [rdx], ebx
add qword [0x1800781a0], 4
jmp 0x180003345
lea r8, [rbp + 0x128]
call fcn.180007d70
mov ebx, dword [rbp + 0x128]
mov ecx, ebx
call fcn.180008090
movss dword [rbp + 0xf8], xmm6
mov dword [rbp + 0x100], ebx
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, r14
call fcn.180004a50
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], 0xff
mov dword [rbp + 0x108], ebx
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x108]
mov rcx, r15
call fcn.180004890
mov dword [rbp + 0xf8], 1
mov dword [rbp + 0x100], ebx
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, r12
call fcn.180004710
mov ecx, ebx
call fcn.180001780
mov dword [rbp + 0xf8], ebx
lea rdx, [rbp + 0xf8]
movabs rcx, 0x99bfdc94a603e541
call fcn.180004590
mov dword [rbp + 0xf8], 1
mov dword [rbp + 0x100], eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
movabs rcx, 0xe05e81a888fa63c8
call fcn.180004710
mov qword [rbp + 0xf8], 0xa
lea rcx, [rbp + 0xf8]
call fcn.1800079e0
mov ecx, 0xa1654ba1
call fcn.1800018a0
mov ecx, 0x2ab28031
call fcn.1800018a0
mov byte [0x180078c2e], 0
cmp byte [0x180078c2c], 0
je 0x180003a37
mov ebx, dword [rdi + 4]
cmp qword [0x180078d18], 0
jne 0x18000347d
mov ecx, 0x10
call fcn.18005b798
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [0x180078d18], rax
mov rax, qword [0x180078d18]
mov edx, dword [rax + 4]
mov dword [rbp + 0xf8], edx
lea rdx, [rbp + 0xf8]
movabs rcx, 0x460bc76a0e10655e
call fcn.180004590
test eax, eax
je 0x1800034aa
mov ebx, dword [rdi + 0xc]
mov dword [rbp + 0xf8], 1
mov dword [rbp + 0x100], 1
mov dword [rbp + 0x108], ebx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x100]
lea r8, [rbp + 0x108]
lea rcx, [rbp + 0x20]
call fcn.1800059f0
movabs rdx, 0x595320200b98596e
lea rcx, [rbp + 8]
call fcn.180005740
mov dword [rbp + 0xf8], 2
lea r8, [rbp + 0xf8]
movabs rdx, 0x252d2b5582957a6
lea rcx, [rbp + 0x60]
call fcn.180005330
mov eax, dword [0x180078cbc]
mov dword [rbp + 0xf8], eax
lea rdx, [rbp + 0xf8]
movabs rcx, 0x153ad457764fd704
call fcn.180004590
test eax, eax
jne 0x18000365f
mov dword [rbp + 0xf8], 1
movabs rax, 0xf8150c5d36d78897
mov qword [rbp + 0x40], rax
movabs rax, 0xed78560dd22dd673
mov qword [rbp + 0x48], rax
movabs rax, 0xdd3b45838c369302
mov qword [rbp + 0x50], rax
movabs rcx, 0xe71bcb1382c543aa
mov qword [rbp + 0x58], rcx
movabs rax, 0xa74140087791cdd3
mov qword [rbp + 0x180], rax
movabs rax, 0xa93d025d9b7f9520
mov qword [rbp + 0x188], rax
movabs rax, 0xdd7a17c6c177d05d
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], rcx
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [rbp + 0x50]
pxor xmm1, xmmword [rbp + 0x190]
movdqa xmmword [rbp + 0x50], xmm1
lea rax, [rbp + 0x40]
mov qword [rbp + 0x100], rax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
call fcn.180004d50
mov dword [0x180078cbc], eax
movss xmm0, dword [rbp + 0x18]
movss dword [rbp + 0xf8], xmm0
movss xmm1, dword [rbp + 0x10]
movss dword [rbp + 0x100], xmm1
movss xmm0, dword [rbp + 8]
movss dword [rbp + 0x108], xmm0
mov dword [rbp + 0x138], eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x100]
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x138]
call fcn.180004f30
mov dword [rbp + 0xf8], 2
movss xmm7, dword [rbp + 0x70]
movss dword [rbp + 0x100], xmm7
movss xmm0, dword [rbp + 0x68]
movss dword [rbp + 0x108], xmm0
movss xmm6, dword [rbp + 0x60]
movss dword [rbp + 0x138], xmm6
mov eax, dword [0x180078cbc]
mov dword [rbp + 0x110], eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x108]
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0x110]
call fcn.1800054c0
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], r13d
mov dword [rbp + 0x108], r13d
movss xmm0, dword [rbp + 0x30]
movss dword [rbp + 0x138], xmm0
movss xmm1, dword [rbp + 0x28]
movss dword [rbp + 0x110], xmm1
movss xmm0, dword [rbp + 0x20]
movss dword [rbp + 0x148], xmm0
mov dword [rbp + 0x140], ebx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x110]
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x140]
call fcn.1800065d0
mov eax, dword [0x180078cbc]
mov dword [rbp + 0xf8], eax
lea r8, [rbp + 0xf8]
movabs rdx, 0x6b12f11c2a9f0344
lea rcx, [rbp + 8]
call fcn.180005330
mulss xmm7, dword [0x18006519c]
mulss xmm6, dword [0x18006519c]
cvtps2pd xmm8, xmm6
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
andps xmm1, xmmword [0x180065810]
cvtps2pd xmm6, xmm7
cvtps2pd xmm7, xmm1
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm1, xmmword [0x180065820]
cvtss2sd xmm1, xmm1
mulsd xmm1, xmm7
xorps xmm10, xmm10
cvtsd2ss xmm10, xmm1
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
cvtps2pd xmm2, xmm1
mulsd xmm2, xmm7
cvtpd2ps xmm11, xmm2
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
xorps xmm9, xmm9
cvtsd2ss xmm9, xmm0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000391b
movss xmm0, dword [0x18006f058]
movaps xmm8, xmm10
mulss xmm8, xmm0
movaps xmm7, xmm11
mulss xmm7, xmm0
movaps xmm6, xmm9
mulss xmm6, xmm0
addss xmm8, dword [rbp + 8]
addss xmm7, dword [rbp + 0x10]
addss xmm6, dword [rbp + 0x18]
movss dword [rbp + 0xf8], xmm6
movss dword [rbp + 0x100], xmm7
movss dword [rbp + 0x108], xmm8
mov eax, dword [0x180078cbc]
mov dword [rbp + 0x138], eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x100]
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x138]
call fcn.180004f30
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], r13d
mov dword [rbp + 0x108], r13d
subss xmm6, dword [0x180065238]
movss dword [rbp + 0x138], xmm6
movss dword [rbp + 0x110], xmm7
movss dword [rbp + 0x148], xmm8
mov dword [rbp + 0x140], ebx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x110]
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x140]
call fcn.1800065d0
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003a6a
movss xmm0, dword [0x18006f058]
xorps xmm0, xmmword [0x180065820]
mulss xmm10, xmm0
mulss xmm11, xmm0
mulss xmm9, xmm0
addss xmm10, dword [rbp + 8]
addss xmm11, dword [rbp + 0x10]
addss xmm9, dword [rbp + 0x18]
movss dword [rbp + 0xf8], xmm9
movss dword [rbp + 0x100], xmm11
movss dword [rbp + 0x108], xmm10
mov eax, dword [0x180078cbc]
mov dword [rbp + 0x138], eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x100]
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x138]
call fcn.180004f30
mov dword [rbp + 0xf8], r13d
mov dword [rbp + 0x100], r13d
mov dword [rbp + 0x108], r13d
subss xmm9, dword [0x180065238]
movss dword [rbp + 0x138], xmm9
movss dword [rbp + 0x110], xmm11
movss dword [rbp + 0x148], xmm10
mov dword [rbp + 0x140], ebx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x110]
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x140]
call fcn.1800065d0
jmp 0x180003a6a
mov dword [rbp + 0xf8], 1
mov eax, dword [0x180078cbc]
mov dword [rbp + 0x100], eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
movabs rcx, 0x4e67e0b6d7fd5145
call fcn.180004710
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.18005b4e0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800042c0
int3