Function at 0x18000a360
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x618]
sub rsp, 0x6f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18007b040]
xor rax, rsp
mov qword [rbp + 0x540], rax
xor r14d, r14d
mov eax, r14d
mov dword [rsp + 0x50], eax
mov dword [rbp - 0x40], eax
mov rax, qword [0x18007b640]
sub rax, qword [0x18007b638]
sar rax, 3
test rax, rax
je 0x18000d4b5
movss xmm0, dword [0x180070f10]
movss dword [rbp - 0x30], xmm0
xor dil, dil
mov byte [rsp + 0x40], dil
mov esi, r14d
mov qword [rbp + 0x50], r14
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rax
mov dword [rbp], r14d
mov byte [0x18007c1d0], 1
movabs rbx, 0x7fffffffffffffff
movabs r15, 0x7ffffffffffffffd
nop dword [rax]
cmp byte [0x18007c1e0], sil
jne 0x18000a46b
cmp byte [0x18007c1f0], sil
jne 0x18000a46b
cmp byte [0x18007c208], sil
je 0x18000a49e
lea rcx, [rbp + 0x28]
call fcn.180006560
mov rax, qword [rbp + 0x28]
cmp rax, r15
jg 0x18000a48f
inc rax
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x38]
call fcn.180008430
jmp 0x18000a450
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x38]
call fcn.180008430
jmp 0x18000a450
mov ebx, r14d
mov dword [rbp + 4], ebx
mov rax, qword [0x18007b640]
sub rax, qword [0x18007b638]
sar rax, 3
test rax, rax
je 0x18000d476
mov r15, r14
mov qword [rsp + 0x48], r14
mov r13d, 0xf
xorps xmm15, xmm15
movsd xmm6, qword [0x180070dd8]
movsd xmm11, qword [0x180070d50]
movsd xmm9, qword [0x180070e80]
movss xmm14, dword [0x180070d48]
movss xmm10, dword [0x180070ef4]
nop dword [rax]
cmp byte [0x18007c1e0], 0
jne 0x18000d51d
cmp byte [0x18007c1f0], 0
jne 0x18000d51d
cmp byte [0x18007c208], 0
jne 0x18000d51d
mov rcx, qword [0x18007b640]
mov rdx, qword [0x18007b638]
sub rcx, rdx
sar rcx, 3
movsxd rax, ebx
cmp rax, rcx
jae 0x18000d472
mov rbx, qword [rdx + r15*8]
mov qword [rbp - 0x38], rbx
test rbx, rbx
je 0x18000d444
mov rax, qword [rbx + 0x1a0]
test rax, rax
je 0x18000d444
movsd xmm0, qword [rax + 0x128]
ucomisd xmm0, xmm15
jp 0x18000a5a0
jne 0x18000a5a0
movsd xmm0, qword [rax + 0x130]
ucomisd xmm0, xmm15
jp 0x18000a5a0
jne 0x18000a5a0
movsd xmm0, qword [rax + 0x138]
ucomisd xmm0, xmm15
jp 0x18000a5a0
je 0x18000d444
movabs r12, 0x7fffffffffffffff
movabs r15, 0x7ffffffffffffffd
cmp byte [0x18007c1e0], 0
jne 0x18000a5cf
cmp byte [0x18007c1f0], 0
jne 0x18000a5cf
cmp byte [0x18007c208], 0
je 0x18000a608
lea rcx, [rbp + 0xb0]
call fcn.180006560
mov rax, qword [rbp + 0xb0]
cmp rax, r15
jg 0x18000a5f9
inc rax
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x28]
call fcn.180008430
jmp 0x18000a5b4
mov qword [rbp - 0x28], r12
lea rcx, [rbp - 0x28]
call fcn.180008430
jmp 0x18000a5b4
mov rax, qword [rbx + 0x188]
mov rsi, qword [rax + 0x2b8]
mov qword [rbp - 0x28], rsi
mov rax, qword [0x18007c1f8]
mov rcx, qword [rax + 0x350]
test rcx, rcx
mov r15, qword [rsp + 0x48]
lea r12, [0x18007c268]
je 0x18000d444
lea rdx, [rbp + 0x360]
call fcn.18005f800
mov rax, qword [0x18007c1f8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rax + 0x350]
call fcn.18005fb40
mov rax, qword [0x18007c1f8]
mov r14, qword [rax + 0x2e8]
mov qword [rbp - 0x40], r14
mov rax, qword [r14 + 0x720]
test rax, rax
je 0x18000d444
mov qword [0x18007c200], rax
mov rax, qword [r14 + 0x1a0]
movups xmm12, xmmword [rax + 0x128]
movups xmmword [rbp - 0x80], xmm12
movsd xmm13, qword [rax + 0x138]
movsd qword [rbp - 0x70], xmm13
movaps xmm8, xmm12
unpckhpd xmm8, xmm12
xor ebx, ebx
cmp byte [0x18007c242], bl
je 0x18000aa07
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r12 + r8], bl
jne 0x18000a6e0
mov rdx, r12
lea rcx, [rbp - 0x20]
call fcn.180006f10
nop
mov rdx, qword [0x18007b490]
cmp rdx, qword [0x18007b498]
je 0x18000a726
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x10]
movups xmmword [rdx + 0x10], xmm1
mov rdx, r13
mov byte [rbp - 0x20], 0
add qword [0x18007b490], 0x20
jmp 0x18000a733
lea r8, [rbp - 0x20]
call fcn.18000fba0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x18000a76a
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a765
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d570
call fcn.180061454
cmp byte [0x18007c268], 0
je 0x18000a7a0
mov rdx, qword [0x18007b568]
cmp rdx, qword [0x18007b570]
je 0x18000a797
movups xmmword [rdx], xmm12
movsd qword [rdx + 0x10], xmm13
add qword [0x18007b568], 0x18
jmp 0x18000a7a0
lea r8, [rbp - 0x80]
call fcn.18000fe60
mov byte [0x18007c242], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
mov qword [rbp + 0x390], rbx
mov qword [rbp + 0x398], r13
mov byte [rbp + 0x380], 0
movups xmmword [rbp + 0x3a0], xmm0
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [r12 + rdi], 0
jne 0x18000a7d4
cmp rdi, r13
ja 0x18000a813
lea rbx, [rbp + 0x380]
cmp r13, 0xf
cmova rbx, qword [rbp + 0x380]
mov qword [rbp + 0x390], rdi
mov r8, rdi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
xor ebx, ebx
jmp 0x18000a825
mov r9, r12
mov rdx, rdi
lea rcx, [rbp + 0x380]
call fcn.18000f430
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm12
movss dword [rbp + 0x3a0], xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm8
movss dword [rbp + 0x3a4], xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm13
movss dword [rbp + 0x3a8], xmm0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x430]
call sub.VCRUNTIME140.dll_memset
mov r8d, 8
lea rcx, [rbp + 0x430]
call fcn.18000e3d0
nop
cmp qword [rbp + 0x4b8], 0
je 0x18000a958
lea rdx, [rbp + 0x380]
cmp qword [rbp + 0x398], 0xf
cmova rdx, qword [rbp + 0x380]
mov r8, qword [rbp + 0x390]
lea rcx, [rbp + 0x430]
call fcn.18000f6e0
lea rdx, [0x1800657fc]
mov rcx, rax
call fcn.18000eb60
movss xmm1, dword [rbp + 0x3a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, [0x1800657fc]
call fcn.18000eb60
movss xmm1, dword [rbp + 0x3a4]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, [0x1800657fc]
call fcn.18000eb60
movss xmm1, dword [rbp + 0x3a8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
lea rdx, [0x18000eef0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x438]
call fcn.18000e820
test rax, rax
jne 0x18000a958
mov rax, qword [rbp + 0x430]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x430]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x430]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x430], rax
mov rax, qword [rbp + 0x430]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x42c], edx
lea rcx, [rbp + 0x438]
call fcn.18000e360
lea rcx, [rbp + 0x440]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x398]
cmp rdx, 0xf
jbe 0x18000a9f2
inc rdx
mov rcx, qword [rbp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a9ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d570
call fcn.180061454
mov qword [rbp + 0x390], rbx
mov qword [rbp + 0x398], r13
mov byte [rbp + 0x380], 0
cmp byte [0x18007c278], 0
je 0x18000ad81
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], rbx
mov qword [rbp + 0x3c8], r13
mov byte [rbp + 0x3b0], 0
movups xmmword [rbp + 0x3d0], xmm0
mov r14d, ebx
mov rsi, rbx
mov rcx, qword [0x18007b718]
mov r12, qword [0x18007b710]
sub rcx, r12
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov r15, rdx
sar r15, 3
mov rax, r15
shr rax, 0x3f
add r15, rax
je 0x18000ac08
mov rdi, 0xffffffffffffffff
lea rax, [0x18007c268]
inc rdi
cmp byte [rax + rdi], 0
jne 0x18000aa83
mov rbx, r12
nop
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18000aaa1
mov rcx, qword [rbx]
cmp r8, rdi
jne 0x18000aab2
mov rdx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000aad1
inc r14d
inc rsi
add rbx, 0x30
movsxd rax, r14d
cmp rax, r15
jae 0x18000ac06
lea rax, [0x18007c268]
jmp 0x18000aa90
lea rdi, [rsi + rsi*2]
shl rdi, 4
add rdi, r12
lea rax, [rbp + 0x3b0]
cmp rax, rdi
je 0x18000ab42
mov rsi, qword [rdi + 0x10]
mov r9, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x18000aaf9
mov r9, qword [rdi]
cmp rsi, r13
ja 0x18000ab2c
lea rbx, [rbp + 0x3b0]
cmp r13, 0xf
cmova rbx, qword [rbp + 0x3b0]
mov qword [rbp + 0x3c0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x18000ab3b
mov rdx, rsi
lea rcx, [rbp + 0x3b0]
call fcn.18000f430
mov r12, qword [0x18007b710]
movss xmm0, dword [rdi + 0x20]
movss dword [rbp + 0x3d0], xmm0
movss xmm1, dword [rdi + 0x24]
movss dword [rbp + 0x3d4], xmm1
movss xmm0, dword [rdi + 0x28]
movss dword [rbp + 0x3d8], xmm0
movsxd rax, r14d
lea rdi, [rax + rax*2]
shl rdi, 4
add rdi, r12
mov rsi, qword [0x18007b718]
lea rbx, [rdi + 0x30]
cmp rbx, rsi
je 0x18000aba8
nop word [rax + rax]
mov rdx, rbx
mov rcx, rdi
call fcn.18000f110
add rdi, 0x30
add rbx, 0x30
cmp rbx, rsi
jne 0x18000ab90
mov rbx, qword [0x18007b718]
mov rdx, qword [rbx - 0x18]
cmp rdx, 0xf
jbe 0x18000abea
mov rcx, qword [rbx - 0x30]
inc rdx
cmp rdx, 0x1000
jb 0x18000abe5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000d57e
mov rcx, r8
call fcn.180061454
mov qword [rbx - 0x20], 0
mov qword [rbx - 0x18], 0xf
mov byte [rbx - 0x30], 0
sub qword [0x18007b718], 0x30
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], rbx
mov r8, 0xffffffffffffffff
lea r12, [0x18007c268]
nop
inc r8
cmp byte [r12 + r8], 0
jne 0x18000ac30
mov rdx, r12
lea rcx, [rbp + 0x90]
call fcn.180006f10
nop
lea rdx, [rbp + 0x90]
call fcn.1800097d0
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x18000ac98
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ac93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d577
call fcn.180061454
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov esi, ebx
mov r13, qword [0x18007b490]
mov r14, r13
mov r15, qword [0x18007b488]
sub r14, r15
sar r14, 5
test r14, r14
je 0x18000ad26
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [r12 + rdi], 0
jne 0x18000ace0
mov rbx, r15
nop dword [rax]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18000ad01
mov rcx, qword [rbx]
cmp r8, rdi
jne 0x18000ad16
mov rdx, r12
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000aef5
inc esi
add rbx, 0x20
movsxd rax, esi
cmp rax, r14
jb 0x18000acf0
xor ebx, ebx
mov byte [0x18007c278], 0
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x18000ad6e
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ad69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d585
call fcn.180061454
mov r13d, 0xf
mov r15, qword [rsp + 0x48]
mov r14, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x28]
cmp byte [0x18007c241], 0
je 0x18000adbd
mov r8, qword [r14 + 0x1a0]
add r8, 0x140
movsxd rax, dword [0x18007c23c]
lea rcx, [rax + rax*2]
mov rax, qword [0x18007b560]
lea rdx, [rax + rcx*8]
mov rcx, r14
call fcn.18005ecb0
mov byte [0x18007c241], 0
cmp byte [0x18007c260], 0
je 0x18000adea
mov r8, qword [r14 + 0x1a0]
add r8, 0x140
lea rdx, [0x18007c280]
mov rcx, r14
call fcn.18005ecb0
mov byte [0x18007c260], 0
cmp byte [0x18007c279], 0
je 0x18000ae35
mov r8, qword [r14 + 0x1a0]
add r8, 0x140
movups xmm0, xmmword [0x18007c248]
addpd xmm0, xmm15
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x18007c258]
addsd xmm0, xmm6
movsd qword [rbp - 0x70], xmm0
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.18005ecb0
mov byte [0x18007c279], 0
mov rax, qword [0x18007c1f8]
cmp rsi, qword [rax + 0x2a0]
je 0x18000d43f
mov rdi, qword [rbp - 0x38]
mov rax, qword [rdi + 0x188]
test rax, rax
je 0x18000d43f
mov rcx, qword [rax + 0x2d0]
test rcx, rcx
je 0x18000d43f
mov rax, qword [rcx + 0x2e8]
test rax, rax
je 0x18000d43f
mov r12, qword [rax + 0x320]
test r12, r12
je 0x18000d43f
mov rax, qword [rdi + 0x1a0]
movups xmm6, xmmword [rax + 0x128]
movups xmmword [rbp - 0x60], xmm6
movsd xmm1, qword [rax + 0x138]
movaps xmm0, xmm6
subsd xmm0, xmm12
movaps xmm7, xmm6
unpckhpd xmm7, xmm6
movaps xmm2, xmm7
subsd xmm2, xmm8
movsd qword [rbp - 0x50], xmm1
subsd xmm1, xmm13
mulsd xmm2, xmm2
mulsd xmm0, xmm0
addsd xmm2, xmm0
mulsd xmm1, xmm1
addsd xmm2, xmm1
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x18000b013
xorps xmm0, xmm0
sqrtsd xmm0, xmm2
jmp 0x18000b01b
movsxd rsi, esi
mov rbx, rsi
shl rbx, 5
add rbx, r15
lea rdi, [rbx + 0x20]
cmp rdi, r13
je 0x18000af8f
nop
cmp rbx, rdi
je 0x18000af7b
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x18000af4f
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18000af4a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000d57e
mov rcx, r8
call fcn.180061454
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0xf
mov byte [rbx], al
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], 0xf
mov byte [rdi], al
add rbx, 0x20
add rdi, 0x20
cmp rdi, r13
jne 0x18000af10
mov r13, qword [0x18007b490]
mov rdx, qword [r13 - 8]
cmp rdx, 0xf
jbe 0x18000afca
mov rcx, qword [r13 - 0x20]
inc rdx
cmp rdx, 0x1000
jb 0x18000afc5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000d57e
mov rcx, r8
call fcn.180061454
xor ebx, ebx
mov qword [r13 - 0x10], rbx
mov qword [r13 - 8], 0xf
mov byte [r13 - 0x20], bl
sub qword [0x18007b490], 0x20
lea rcx, [rsi + rsi*2]
mov rax, qword [0x18007b560]
lea rcx, [rax + rcx*8]
mov r8, qword [0x18007b568]
lea rdx, [rcx + 0x18]
sub r8, rdx
call sub.VCRUNTIME140.dll_memmove
sub qword [0x18007b568], 0x18
jmp 0x18000ad26
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
mulsd xmm0, xmm11
xorps xmm11, xmm11
cvtsd2ss xmm11, xmm0
xor r15b, r15b
mov dword [rbp - 0x28], r15d
mov r8d, 9
lea rdx, [rbp + 0x330]
mov rcx, r12
call fcn.18005f000
mov r8, qword [rax]
lea rdx, [rbp + 0x340]
mov rcx, r12
call fcn.18005e970
mov r8d, 0x84
lea rdx, [rbp + 0x338]
mov rcx, r12
call fcn.18005f000
mov r8, qword [rax]
lea rdx, [rbp + 0x58]
mov rcx, r12
call fcn.18005e970
mov r8d, 7
lea rdx, [rbp + 0x358]
mov rcx, r12
call fcn.18005f000
mov r8, qword [rax]
lea rdx, [rbp + 0x410]
mov rcx, r12
call fcn.18005e970
movsd qword [rbp + 0x318], xmm6
movsd qword [rbp + 0x320], xmm7
movsd xmm0, qword [rbp + 0x68]
movsd qword [rbp + 0x328], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x58], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rcx, qword [r14 + 0x328]
mov r13, qword [r14 + 0x738]
test r13, r13
je 0x18000d423
cmp qword [r13 + 0x480], 0
je 0x18000d423
mov eax, dword [r13 + 0x488]
test eax, eax
jle 0x18000d423
cmp dword [r13 + 0x48c], eax
jl 0x18000d423
movups xmm6, xmmword [r13 + 0x480]
cmp byte [0x18007b0d9], r15b
je 0x18000b147
movsd xmm0, qword [0x180070dd8]
comisd xmm0, xmmword [r14 + 0xae0]
jbe 0x18000b147
movabs rax, 0x4059000000000000
mov qword [r14 + 0xae0], rax
cmp byte [0x18007b0d8], 0
je 0x18000b165
movd xmm0, dword [0x18007b0d4]
cvtdq2pd xmm0, xmm0
movsd qword [r14 + 0x7f0], xmm0
cmp byte [0x18007b0dc], 0
je 0x18000b181
movd xmm0, dword [0x18007b0d4]
cvtdq2ps xmm0, xmm0
movss dword [rcx + 0x250], xmm0
cmp byte [0x18007b0df], 0
je 0x18000b19d
movd xmm0, dword [0x18007b0d4]
cvtdq2ps xmm0, xmm0
movss dword [rcx + 0x254], xmm0
cmp byte [0x18007b0c9], 0
je 0x18000b1b9
movd xmm0, dword [0x18007b0d4]
cvtdq2ps xmm0, xmm0
movss dword [rcx + 0x25c], xmm0
cmp byte [0x18007b0c1], 0
je 0x18000b1de
comisd xmm9, xmmword [r14 + 0xca8]
jbe 0x18000b1de
movabs rax, 0x412e848000000000
mov qword [r14 + 0xca8], rax
cmp byte [0x18007b0c8], 0
je 0x18000b252
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000b252
mov r8, qword [r14 + 0x1a0]
movups xmm2, xmmword [r8 + 0x128]
movups xmmword [rsp + 0x60], xmm2
movsd xmm1, qword [r8 + 0x138]
movaps xmm0, xmm2
addsd xmm0, xmm15
unpckhpd xmm2, xmm2
addsd xmm2, xmm15
addsd xmm1, qword [0x180070de8]
movsd qword [rsp + 0x60], xmm0
movsd qword [rsp + 0x68], xmm2
movsd qword [rsp + 0x70], xmm1
add r8, 0x140
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.18005ecb0
cmp byte [0x18007c22f], 0
je 0x18000b2e8
lea rax, [0x1800657ec]
mov qword [rbp + 0x400], rax
mov dword [rbp + 0x408], 2
mov dword [rbp + 0x40c], 2
mov dword [rbp - 0x40], ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rbx
mov qword [rbp + 0x150], rbx
mov r8d, 0x11
lea rdx, str.MONEY_LOCAL_LARGE
lea rcx, [rbp + 0x138]
call fcn.180006f10
lea rcx, [rbp + 0x138]
call fcn.180007190
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x400]
mov qword [rsp + 0x20], rcx
mov rdx, rax
mov rcx, r13
call fcn.18005e130
mov byte [0x18007c22f], 0
cmp byte [0x18007c22a], 0
je 0x18000b301
movaps xmm1, xmm9
call fcn.18005b6a0
mov byte [0x18007c22a], 0
cmp byte [0x18007c22d], 0
je 0x18000b316
call fcn.18005b3b0
mov byte [0x18007c22d], 0
cmp byte [0x18007c22c], 0
je 0x18000b333
movsd xmm1, qword [0x180070df8]
call fcn.18005add0
mov byte [0x18007c22c], 0
cmp byte [0x18007c234], 0
jne 0x18000b34b
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000b385
call fcn.18005d110
mov rax, qword [0x18007c1f8]
mov r8, qword [rax + 0x340]
movzx ecx, byte [r8 + 0x5c]
movzx edx, cl
movzx eax, cl
or al, 0x80
and cl, 0x7f
movzx ecx, cl
movzx eax, al
test dl, 0x80
cmove ecx, eax
mov byte [r8 + 0x5c], cl
mov byte [0x18007c234], 0
cmp byte [0x18007c233], 0
je 0x18000b39a
call fcn.18005b990
mov byte [0x18007c233], 0
cmp byte [0x18007c231], 0
je 0x18000b3af
call fcn.18005bc80
mov byte [0x18007c231], 0
cmp byte [0x18007c22e], 0
je 0x18000b3c8
movaps xmm1, xmm9
call fcn.18005aae0
mov byte [0x18007c22e], 0
cmp byte [0x18007c229], 0
je 0x18000b3e2
call fcn.18005ce20
call fcn.18005cb30
mov byte [0x18007c229], 0
cmp byte [0x18007c228], 0
je 0x18000b3f7
call fcn.18005d6f0
mov byte [0x18007c228], 0
cmp byte [0x18007c232], 0
je 0x18000b40c
call fcn.18005d400
mov byte [0x18007c232], 0
cmp byte [0x18007c240], 0
je 0x18000b429
movsd xmm1, qword [0x180070e90]
call fcn.18005c260
mov byte [0x18007c240], 0
cmp byte [0x18007c237], 0
je 0x18000b442
movaps xmm1, xmm9
call fcn.18005c550
mov byte [0x18007c237], 0
cmp byte [0x18007c236], 0
je 0x18000b45d
mov edx, dword [0x18007b0e0]
call fcn.18005c840
mov byte [0x18007c236], 0
cmp byte [0x18007c230], 0
je 0x18000b477
mov edx, 0x18
call fcn.18005c840
mov byte [0x18007c230], 0
cmp byte [0x18007c235], 0
je 0x18000b48c
call fcn.18005b0c0
mov byte [0x18007c235], 0
cmp byte [0x18007c227], 0
je 0x18000b4a4
mov rcx, r14
call fcn.18005d9e0
mov byte [0x18007c227], 0
cmp byte [0x18007c22b], 0
je 0x18000b5e6
mov r10, qword [0x18007b6e8]
mov rax, r10
mov rdx, qword [0x18007b6e0]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x18000b512
mov r9d, ebx
mov r8, rbx
mov rax, qword [r8 + rdx]
test rax, rax
je 0x18000b4f9
mov qword [rax + 0x2b0], rbx
mov byte [rax + 0x2c0], 0
mov r10, qword [0x18007b6e8]
mov rdx, qword [0x18007b6e0]
inc r9d
add r8, 8
mov rcx, r10
sub rcx, rdx
sar rcx, 3
movsxd rax, r9d
cmp rax, rcx
jb 0x18000b4d4
mov rax, qword [0x18007b628]
sub rax, qword [0x18007b620]
sar rax, 3
test rax, rax
je 0x18000b5df
mov esi, ebx
mov r8, qword [0x18007b610]
mov rax, r8
mov rdx, qword [0x18007b608]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x18000b5df
mov rdi, rbx
mov rbx, qword [rdi + rdx]
test rbx, rbx
je 0x18000b5bf
cmp byte [rbx + 0x6f1], 0
je 0x18000b5bf
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xor eax, eax
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rax
lea r8d, [rax + 5]
lea rdx, str.WASTE
lea rcx, [rbp + 0x158]
call fcn.180006f10
lea rcx, [rbp + 0x158]
call fcn.180007190
movaps xmm2, xmm14
mov rdx, rax
mov rcx, rbx
call fcn.18005de00
mov r8, qword [0x18007b610]
mov rdx, qword [0x18007b608]
inc esi
add rdi, 8
mov rcx, r8
sub rcx, rdx
sar rcx, 3
movsxd rax, esi
cmp rax, rcx
jb 0x18000b553
mov rdi, qword [rbp - 0x38]
mov byte [0x18007c22b], 0
cmp byte [0x18007c238], 0
je 0x18000b84b
lea rdx, [rbp + 0x198]
mov rcx, rdi
call fcn.18005dcc0
nop
mov esi, dword [rsp + 0x50]
or esi, 1
mov dword [rsp + 0x50], esi
mov dword [rbp - 0x40], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000b61f
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.Police
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
cmp rax, 0xffffffffffffffff
jne 0x18000b6d6
lea rdx, [rbp + 0x178]
mov rcx, rdi
call fcn.18005dcc0
nop
or esi, 2
mov dword [rsp + 0x50], esi
mov dword [rbp - 0x40], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000b66c
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Thug
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
cmp rax, 0xffffffffffffffff
jne 0x18000b6d6
lea rdx, [rbp + 0x118]
mov rcx, rdi
call fcn.18005dcc0
or esi, 4
mov dword [rsp + 0x50], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000b6b1
mov rax, qword [rax]
mov qword [rsp + 0x20], 7
lea r9, str.Militia
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
cmp rax, 0xffffffffffffffff
jne 0x18000b6d6
xor bl, bl
jmp 0x18000b6d8
mov bl, 1
test sil, 4
je 0x18000b743
and esi, 0xfffffffb
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x18000b726
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b721
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d58c
call fcn.180061454
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x130], 0xf
mov byte [rbp + 0x118], 0
test sil, 2
je 0x18000b7ae
and esi, 0xfffffffd
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x18000b791
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b78c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d593
call fcn.180061454
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x190], 0xf
mov byte [rbp + 0x178], 0
test sil, 1
je 0x18000b819
and esi, 0xfffffffe
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x18000b7fc
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b7f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d59a
call fcn.180061454
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
test bl, bl
je 0x18000b84b
comiss xmm11, dword [0x180070ea8]
ja 0x18000d423
comisd xmm15, xmmword [rdi + 0x9a0]
jae 0x18000d423
movabs rax, 0x3ff0000000000000
mov qword [rdi + 0x9a0], rax
cmp byte [0x18007b0d0], 0
je 0x18000b865
movabs rax, 0x4024000000000000
mov qword [r14 + 0xf98], rax
cmp byte [0x18007b0da], 0
je 0x18000b87f
movabs rax, 0x40b3880000000000
mov qword [r14 + 0x7d8], rax
cmp byte [0x18007b0dd], 0
je 0x18000b8b1
movd xmm0, dword [0x18007b0cc]
cvtdq2pd xmm0, xmm0
movsd qword [r14 + 0x9d8], xmm0
movd xmm1, dword [0x18007b0c4]
cvtdq2ps xmm1, xmm1
movss dword [r14 + 0x9e0], xmm1
cmp byte [0x18007b0de], 0
je 0x18000b8d6
movabs rax, 0x4059000000000000
mov qword [r14 + 0xc98], rax
mov dword [r13 + 0x4b0], 0x3dcccccd
xor r14d, r14d
cmp byte [0x18007b0db], r14b
je 0x18000b958
mov ecx, r14d
mov r8d, r14d
movdqa xmm0, xmm6
psrldq xmm0, 8
movd r9d, xmm0
test r9d, r9d
jle 0x18000b958
movq r10, xmm6
lea rdx, [r10 + 0x2c]
test r10, r10
je 0x18000b917
test r8, r8
js 0x18000b917
cmp ecx, r9d
jge 0x18000b917
mov al, 1
jmp 0x18000b919
xor al, al
test al, al
je 0x18000d676
comiss xmm10, dword [rdx]
jbe 0x18000b94a
test r10, r10
je 0x18000b93a
test r8, r8
js 0x18000b93a
cmp ecx, r9d
jge 0x18000b93a
mov al, 1
jmp 0x18000b93c
xor al, al
test al, al
je 0x18000d656
mov dword [rdx], 0x453b8000
inc ecx
inc r8
add rdx, 0x60
cmp ecx, r9d
jl 0x18000b904
cmp byte [0x18007c298], 0
je 0x18000bc1c
mov dword [rbp - 0x40], r14d
mov r15d, r14d
mov esi, r14d
cmp dword [r13 + 0x478], 0
jle 0x18000bbf9
nop dword [rax]
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rcx, qword [r13 + 0x470]
test rcx, rcx
je 0x18000b9a4
test esi, esi
js 0x18000b9a4
cmp esi, dword [r13 + 0x478]
jge 0x18000b9a4
mov al, 1
jmp 0x18000b9a6
xor al, al
test al, al
je 0x18000d74e
movsxd rax, esi
lea rbx, [rax + rax*2]
shl rbx, 5
add rcx, 8
add rcx, rbx
lea rdx, [rbp + 0x30]
call fcn.1800069e0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000b9d8
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.18000f6e0
lea rdx, [0x180065834]
mov rcx, rax
call fcn.18000eb60
mov rdi, rax
mov rdx, qword [r13 + 0x470]
test rdx, rdx
je 0x18000ba12
test esi, esi
js 0x18000ba12
cmp esi, dword [r13 + 0x478]
jge 0x18000ba12
mov cl, 1
jmp 0x18000ba14
xor cl, cl
test cl, cl
je 0x18000d732
lea rcx, [rdx + 0x30]
add rcx, rbx
lea rdx, [rbp + 8]
call fcn.1800069e0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000ba3b
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.18000f6e0
mov rcx, rax
call fcn.18000ed30
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x18000ba8a
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ba85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5a1
call fcn.180061454
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x18000bad9
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bad4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5a8
call fcn.180061454
mov rdx, qword [r13 + 0x470]
test rdx, rdx
je 0x18000baf6
test esi, esi
js 0x18000baf6
cmp esi, dword [r13 + 0x478]
jge 0x18000baf6
mov al, 1
jmp 0x18000baf8
xor al, al
test al, al
je 0x18000d712
mov eax, dword [0x18007f968]
cmp dword [r14 + rdx + 0x30], eax
jne 0x18000bbb6
mov eax, dword [0x18007f96c]
cmp dword [r14 + rdx + 0x34], eax
jne 0x18000bbb6
test rdx, rdx
je 0x18000bb38
test esi, esi
js 0x18000bb38
cmp esi, dword [r13 + 0x478]
jge 0x18000bb38
mov al, 1
jmp 0x18000bb3a
xor al, al
test al, al
je 0x18000d6d2
movss xmm0, dword [r14 + rdx + 0x48]
ucomiss xmm0, xmm14
jp 0x18000bbb6
jne 0x18000bbb6
movss xmm0, dword [0x18007f980]
ucomiss xmm0, xmm14
jp 0x18000bbb6
jne 0x18000bbb6
test rdx, rdx
je 0x18000bb77
test esi, esi
js 0x18000bb77
cmp esi, dword [r13 + 0x478]
jge 0x18000bb77
mov al, 1
jmp 0x18000bb79
xor al, al
test al, al
je 0x18000d6b2
mov ecx, dword [r14 + rdx + 0x24]
cmp ecx, 0x28
jge 0x18000bbb6
test rdx, rdx
je 0x18000bba1
test esi, esi
js 0x18000bba1
cmp esi, dword [r13 + 0x478]
jge 0x18000bba1
mov al, 1
jmp 0x18000bba3
xor al, al
test al, al
je 0x18000d692
add ecx, dword [0x18007b0a4]
cmp ecx, 0x28
jle 0x18000bbf3
test rdx, rdx
je 0x18000bbcc
test esi, esi
js 0x18000bbcc
cmp esi, dword [r13 + 0x478]
jge 0x18000bbcc
mov al, 1
jmp 0x18000bbce
xor al, al
test al, al
je 0x18000d6f2
cmp dword [r14 + rdx + 0x24], 0
jle 0x18000bbf3
inc esi
add r14, 0x60
cmp esi, dword [r13 + 0x478]
jl 0x18000b980
jmp 0x18000bbf6
mov r15d, esi
xor r14d, r14d
mov dword [rsp + 0x28], r15d
lea r9, [rbp - 0x40]
lea rdx, [0x18007f940]
mov rcx, r13
call fcn.18005e490
mov byte [0x18007c298], 0
mov r15d, dword [rbp - 0x28]
cmp byte [0x18007b0c2], 0
je 0x18000bca9
mov r8, qword [0x18007b520]
mov rax, r8
mov rcx, qword [0x18007b518]
sub rax, rcx
sar rax, 3
test rax, rax
je 0x18000bca9
mov r10d, r14d
mov rdx, r14
mov r9, r14
nop
mov rax, r8
sub rax, rcx
sar rax, 3
cmp rdx, rax
jae 0x18000bca9
mov rax, qword [r9 + rcx]
test rax, rax
je 0x18000bc90
movsd xmm0, qword [rax + 0x748]
comisd xmm0, xmmword [rax + 0x750]
jbe 0x18000bc90
movsd qword [rax + 0x750], xmm0
mov r8, qword [0x18007b520]
mov rcx, qword [0x18007b518]
inc r10d
add r9, 8
mov rax, r8
sub rax, rcx
sar rax, 3
movsxd rdx, r10d
cmp rdx, rax
jb 0x18000bc50
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x318]
mov rcx, qword [0x18007c1f8]
call fcn.1800604f0
test al, al
je 0x18000d423
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x340]
mov rcx, qword [0x18007c1f8]
call fcn.1800604f0
test al, al
je 0x18000d423
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x60]
mov rcx, qword [0x18007c1f8]
call fcn.1800604f0
test al, al
je 0x18000d423
movsd xmm7, qword [rbp - 0x78]
movaps xmm0, xmm7
movsd xmm9, qword [rbp + 0x60]
subsd xmm0, xmm9
andps xmm0, xmmword [0x180071140]
cvtpd2ps xmm10, xmm0
movaps xmm8, xmm10
mulss xmm8, dword [0x180070cf8]
mov rdi, qword [rbp - 0x38]
cmp byte [0x18007b0b6], 0
je 0x18000bd6a
mov rax, qword [0x18007c1f8]
mov r8, qword [rax + 0x350]
add r8, 0x1330
mov rdx, rdi
call fcn.1800601b0
movzx r15d, r15b
test al, al
mov esi, 1
cmovne r15d, esi
jmp 0x18000bd6f
mov esi, 1
cmp byte [0x18007b0b5], 0
je 0x18000c6a7
cmp byte [0x18007b0be], 0
je 0x18000be8d
lea rdx, [rbp + 0x1b8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000bda6
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Boat
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0xf
jbe 0x18000be05
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000be00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5af
call fcn.180061454
mov qword [rbp + 0x1c8], r14
mov r13d, 0xf
mov qword [rbp + 0x1d0], r13
mov byte [rbp + 0x1b8], 0
cmp rbx, 0xffffffffffffffff
je 0x18000be93
movd xmm0, dword [0x18007b0b8]
cvtdq2ps xmm0, xmm0
comiss xmm11, xmm0
ja 0x18000be76
cmp byte [rdi + 0x6a8], 0
je 0x18000be76
movups xmm0, xmmword [0x18007ebe8]
lea r8, str.Boat
movsd xmm1, qword [rbp - 0x20]
movsd xmm2, qword [rbp - 0x18]
cvtpd2ps xmm1, xmm1
cvtpd2ps xmm2, xmm2
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rbp - 0x80]
unpcklps xmm1, xmm2
movq rcx, xmm1
call fcn.180008f40
movsd xmm9, qword [0x180070e80]
movss xmm10, dword [0x180070ef4]
jmp 0x18000d429
mov r13d, 0xf
cmp byte [0x18007b0b7], 0
je 0x18000c097
lea rdx, [rbp + 0x1d8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000bebd
mov rax, qword [rax]
mov qword [rsp + 0x20], 3
lea r9, [0x1800655f8]
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0xf
jbe 0x18000bf1c
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bf17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5b6
call fcn.180061454
mov qword [rbp + 0x1e8], r14
mov qword [rbp + 0x1f0], r13
mov byte [rbp + 0x1d8], 0
cmp rbx, 0xffffffffffffffff
je 0x18000c097
movd xmm0, dword [0x18007b0b8]
cvtdq2ps xmm0, xmm0
comiss xmm11, xmm0
ja 0x18000be76
cmp byte [rdi + 0x6a8], 0
je 0x18000be76
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000bf77
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Bike
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x18000bfd0
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bfcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5bd
call fcn.180061454
cmp rbx, 0xffffffffffffffff
je 0x18000bfe9
movups xmm0, xmmword [0x18007ec48]
lea r8, str.Bike
jmp 0x18000be4e
lea rdx, [rbp + 0x1f8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c006
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Boat
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x210]
cmp rdx, 0xf
jbe 0x18000c065
inc rdx
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c060
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5c4
call fcn.180061454
mov qword [rbp + 0x208], r14
mov qword [rbp + 0x210], r13
mov byte [rbp + 0x1f8], 0
cmp rbx, 0xffffffffffffffff
jne 0x18000be76
movups xmm0, xmmword [0x18007ec48]
lea r8, [0x180065828]
jmp 0x18000be4e
cmp byte [0x18007b0bf], 0
je 0x18000c2ff
lea rdx, [rbp + 0x218]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c0c1
mov rax, qword [rax]
mov qword [rsp + 0x20], 5
lea r9, str.Influ
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x230]
cmp rdx, 0xf
jbe 0x18000c120
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c11b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5cb
call fcn.180061454
mov qword [rbp + 0x228], r14
mov qword [rbp + 0x230], r13
mov byte [rbp + 0x218], 0
cmp rbx, 0xffffffffffffffff
je 0x18000c2ff
movd xmm0, dword [0x18007b0b8]
cvtdq2ps xmm0, xmm0
comiss xmm11, xmm0
ja 0x18000be76
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.18005dcc0
nop
mov rdx, rax
lea rcx, [rbp + 0x360]
call fcn.180009b00
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x18000c1ac
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c1a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5d2
call fcn.180061454
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r13
mov byte [rbp + 8], 0
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x370]
sub rax, rcx
cmp rax, 0xb
jb 0x18000d650
lea rax, [rbp + 0x360]
cmp qword [rbp + 0x378], 0xf
cmova rax, qword [rbp + 0x360]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xb
lea r9, str.Influencer
lea rcx, [rbp + 0x3e0]
call fcn.18000f5c0
or dword [rsp + 0x50], 0x40
lea r8, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0xf
cmova r8, qword [rbp + 0x3e0]
movsd xmm1, qword [rbp - 0x20]
cvtpd2ps xmm1, xmm1
movsd xmm2, qword [rbp - 0x18]
cvtpd2ps xmm2, xmm2
movups xmm0, xmmword [0x18007ebf8]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rbp - 0x80]
unpcklps xmm1, xmm2
movq rcx, xmm1
call fcn.180008f40
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0xf
jbe 0x18000c2a0
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c29b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5d9
call fcn.180061454
mov qword [rbp + 0x3f0], r14
mov qword [rbp + 0x3f8], r13
mov byte [rbp + 0x3e0], 0
mov rdx, qword [rbp + 0x378]
cmp rdx, 0xf
jbe 0x18000be76
inc rdx
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c2f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5e0
call fcn.180061454
jmp 0x18000be76
cmp dword [rbp], 0
jne 0x18000c6a7
cmp byte [0x18007c21e], 0
je 0x18000c350
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f9a0]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Bus_Stop
lea rcx, [0x18007b7f8]
call fcn.180009de0
cmp byte [0x18007c225], 0
je 0x18000c397
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f8f8]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Delaer_Spot
lea rcx, [0x18007b650]
call fcn.180009de0
cmp byte [0x18007c221], 0
je 0x18000c3de
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f518]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Not_Owned_Hideout
lea rcx, [0x18007b608]
call fcn.180009de0
cmp byte [0x18007b0c0], 0
je 0x18000c425
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f508]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Owned_Hideout
lea rcx, [0x18007b620]
call fcn.180009de0
cmp byte [0x18007c220], 0
je 0x18000c46c
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f908]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Intelligence_Loot_Spot
lea rcx, [0x18007b470]
call fcn.180009de0
cmp byte [0x18007c226], 0
je 0x18000c4b3
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007ec08]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Client_Spawn
lea rcx, [0x18007b4b8]
call fcn.180009de0
cmp byte [0x18007b0bc], 0
je 0x18000c4fa
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f928]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Drop_Bag
lea rcx, [0x18007b6f8]
call fcn.180009de0
cmp byte [0x18007c222], 0
je 0x18000c541
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007ec38]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Trash_Bin
lea rcx, [0x18007b6e0]
call fcn.180009de0
cmp byte [0x18007c223], 0
je 0x18000c588
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007ec28]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Parking
lea rcx, [0x18007b4e8]
call fcn.180009de0
cmp byte [0x18007c21f], 0
je 0x18000c5cf
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007ec48]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Not_Owned_Vehicle
lea rcx, [0x18007b530]
call fcn.180009de0
cmp byte [0x18007c224], 0
je 0x18000c616
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007ec18]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 1
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Client
lea rcx, [0x18007b4a0]
call fcn.180009de0
cmp byte [0x18007c21d], 0
je 0x18000c65d
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007ec58]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Marker
lea rcx, [0x18007b548]
call fcn.180009de0
cmp byte [0x18007b0bd], 0
je 0x18000c6a4
movaps xmmword [rbp - 0x60], xmm12
movsd qword [rbp - 0x50], xmm13
movups xmm0, xmmword [0x18007f918]
movdqa xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x28], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, str.Shop
lea rcx, [0x18007b688]
call fcn.180009de0
mov dword [rbp], esi
cmp byte [0x18007b0ad], 0
je 0x18000d2bb
lea rdx, [rbp + 0x278]
mov rcx, rdi
call fcn.18005dcc0
nop
mov esi, dword [rsp + 0x50]
or esi, 8
mov dword [rsp + 0x50], esi
mov dword [rbp - 0x40], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c6e0
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.Police
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
cmp rax, 0xffffffffffffffff
jne 0x18000c797
lea rdx, [rbp + 0x258]
mov rcx, rdi
call fcn.18005dcc0
nop
or esi, 0x10
mov dword [rsp + 0x50], esi
mov dword [rbp - 0x40], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c72d
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Thug
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
cmp rax, 0xffffffffffffffff
jne 0x18000c797
lea rdx, [rbp + 0x238]
mov rcx, rdi
call fcn.18005dcc0
or esi, 0x20
mov dword [rsp + 0x50], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c772
mov rax, qword [rax]
mov qword [rsp + 0x20], 7
lea r9, str.Militia
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
cmp rax, 0xffffffffffffffff
jne 0x18000c797
mov bl, 1
jmp 0x18000c799
xor bl, bl
test sil, 0x20
je 0x18000c804
and esi, 0xffffffdf
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x250]
cmp rdx, 0xf
jbe 0x18000c7e7
inc rdx
mov rcx, qword [rbp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c7e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5e7
call fcn.180061454
mov qword [rbp + 0x248], r14
mov r13d, 0xf
mov qword [rbp + 0x250], r13
mov byte [rbp + 0x238], 0
jmp 0x18000c80a
mov r13d, 0xf
test sil, 0x10
je 0x18000c86d
and esi, 0xffffffef
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x270]
cmp rdx, 0xf
jbe 0x18000c858
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c853
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5ee
call fcn.180061454
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], r13
mov byte [rbp + 0x258], 0
test sil, 8
je 0x18000c8d0
and esi, 0xfffffff7
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x290]
cmp rdx, 0xf
jbe 0x18000c8bb
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c8b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5f5
call fcn.180061454
mov qword [rbp + 0x288], r14
mov qword [rbp + 0x290], r13
mov byte [rbp + 0x278], 0
test bl, bl
jne 0x18000be76
comisd xmm15, xmmword [rdi + 0x9a0]
jae 0x18000be76
cmp byte [0x18007b0af], bl
jne 0x18000c98e
lea rdx, [rbp + 0x298]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c910
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.Police
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x2b0]
cmp rdx, 0xf
jbe 0x18000c96f
inc rdx
mov rcx, qword [rbp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c96a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d5fc
call fcn.180061454
mov qword [rbp + 0x2a8], r14
mov qword [rbp + 0x2b0], r13
mov byte [rbp + 0x298], 0
cmp rbx, 0xffffffffffffffff
jne 0x18000be76
cmp byte [0x18007b0b1], 0
jne 0x18000ca36
lea rdx, [rbp + 0x2b8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000c9b8
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Thug
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x2d0]
cmp rdx, 0xf
jbe 0x18000ca17
inc rdx
mov rcx, qword [rbp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ca12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d603
call fcn.180061454
mov qword [rbp + 0x2c8], r14
mov qword [rbp + 0x2d0], r13
mov byte [rbp + 0x2b8], 0
cmp rbx, 0xffffffffffffffff
jne 0x18000be76
cmp byte [0x18007b0b2], 0
jne 0x18000cade
lea rdx, [rbp + 0x2d8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000ca60
mov rax, qword [rax]
mov qword [rsp + 0x20], 7
lea r9, str.Militia
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x2f0]
cmp rdx, 0xf
jbe 0x18000cabf
inc rdx
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000caba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d60a
call fcn.180061454
mov qword [rbp + 0x2e8], r14
mov qword [rbp + 0x2f0], r13
mov byte [rbp + 0x2d8], 0
cmp rbx, 0xffffffffffffffff
jne 0x18000be76
cmp byte [0x18007b0b4], 0
je 0x18000ccbe
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000cb05
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.Police
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x18000cb5e
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cb59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d611
call fcn.180061454
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r13
mov byte [rbp + 8], 0
cmp rbx, 0xffffffffffffffff
je 0x18000cb7c
movups xmm0, xmmword [0x18007b5b8]
jmp 0x18000ccab
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000cb96
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Thug
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x18000cbef
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cbea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d618
call fcn.180061454
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r13
mov byte [rbp + 8], 0
cmp rbx, 0xffffffffffffffff
je 0x18000cc0d
movups xmm0, xmmword [0x18007b6d0]
jmp 0x18000ccab
lea rdx, [rbp + 0x2f8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000cc2a
mov rax, qword [rax]
mov qword [rsp + 0x20], 7
lea r9, str.Militia
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x310]
cmp rdx, 0xf
jbe 0x18000cc89
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cc84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d61f
call fcn.180061454
mov qword [rbp + 0x308], r14
mov qword [rbp + 0x310], r13
mov byte [rbp + 0x2f8], 0
cmp rbx, 0xffffffffffffffff
je 0x18000ccbe
movups xmm0, xmmword [0x18007b5c8]
movdqa xmmword [rsp + 0x60], xmm0
lea r8, [rsp + 0x60]
mov rcx, r12
call fcn.1800090c0
movsd xmm6, qword [rbp - 0x80]
cmp byte [0x18007b0b3], 0
je 0x18000cf20
test r15b, r15b
jne 0x18000cf02
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000ccf3
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.Police
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x18000cd4c
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cd47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d626
call fcn.180061454
cmp rbx, 0xffffffffffffffff
je 0x18000cd73
cvtps2pd xmm2, xmm8
movsd xmm0, qword [rbp + 0x58]
addsd xmm0, xmm2
cvtpd2ps xmm3, xmm0
movups xmm0, xmmword [0x18007b5b8]
xorps xmm11, xmm11
jmp 0x18000cec0
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000cd8d
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Thug
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x18000cde6
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cde1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d62d
call fcn.180061454
cmp rbx, 0xffffffffffffffff
je 0x18000ce0d
cvtps2pd xmm2, xmm8
movsd xmm0, qword [rbp + 0x58]
addsd xmm0, xmm2
cvtpd2ps xmm3, xmm0
movups xmm0, xmmword [0x18007b6d0]
xorps xmm11, xmm11
jmp 0x18000cec0
lea rdx, [rbp + 0xd8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000ce2a
mov rax, qword [rax]
mov qword [rsp + 0x20], 7
lea r9, str.Militia
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x18000ce89
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ce84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d634
call fcn.180061454
mov qword [rbp + 0xe8], r14
mov qword [rbp + 0xf0], r13
mov byte [rbp + 0xd8], 0
xorps xmm11, xmm11
cmp rbx, 0xffffffffffffffff
je 0x18000cf24
cvtps2pd xmm2, xmm8
movsd xmm0, qword [rbp + 0x58]
addsd xmm0, xmm2
cvtpd2ps xmm3, xmm0
movups xmm0, xmmword [0x18007b5c8]
movaps xmm1, xmm6
subsd xmm1, xmm2
movss dword [rsp + 0x28], xmm14
movdqa xmmword [rbp - 0x80], xmm0
cvtpd2ps xmm2, xmm7
cvtpd2ps xmm5, xmm1
cvtpd2ps xmm4, xmm9
movss dword [rsp + 0x20], xmm11
lea r8, [rbp - 0x80]
unpcklps xmm3, xmm4
movq rdx, xmm3
unpcklps xmm5, xmm2
movq rcx, xmm5
call fcn.180008ba0
jmp 0x18000cf24
cvtps2pd xmm2, xmm8
movsd xmm0, qword [rbp + 0x58]
addsd xmm0, xmm2
cvtpd2ps xmm3, xmm0
movups xmm0, xmmword [0x18007b678]
xorps xmm11, xmm11
jmp 0x18000cec0
xorps xmm11, xmm11
cmp byte [0x18007b0ae], 0
je 0x18000cf78
cvtpd2ps xmm1, xmm6
cvtpd2ps xmm2, xmm7
movss dword [rsp + 0x20], xmm14
lea r8, [rbp - 0x80]
unpcklps xmm1, xmm2
movq rdx, xmm1
movss xmm1, dword [0x180070ee0]
unpcklps xmm1, xmm11
movq rcx, xmm1
test r15b, r15b
jne 0x18000cf67
movups xmm0, xmmword [0x18007b598]
jmp 0x18000cf6e
movups xmm0, xmmword [0x18007b678]
movdqa xmmword [rbp - 0x80], xmm0
call fcn.180008e20
cmp byte [0x18007c21c], 0
je 0x18000d16a
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000cf9f
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.Police
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x18000cff8
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cff3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d63b
call fcn.180061454
cmp rbx, 0xffffffffffffffff
je 0x18000d011
movups xmm0, xmmword [0x18007b5b8]
lea r8, str.Police
jmp 0x18000d142
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000d02b
mov rax, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, str.Thug
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x18000d084
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d07f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d642
call fcn.180061454
cmp rbx, 0xffffffffffffffff
je 0x18000d09d
movups xmm0, xmmword [0x18007b6d0]
lea r8, str.Thug
jmp 0x18000d142
lea rdx, [rbp + 0xf8]
mov rcx, rdi
call fcn.18005dcc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18000d0ba
mov rax, qword [rax]
mov qword [rsp + 0x20], 7
lea r9, str.Militia
xor r8d, r8d
mov rcx, rax
call fcn.1800082d0
mov rbx, rax
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x18000d119
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d114
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000d649
call fcn.180061454
mov qword [rbp + 0x108], r14
mov qword [rbp + 0x110], r13
mov byte [rbp + 0xf8], 0
cmp rbx, 0xffffffffffffffff
je 0x18000d16a
movups xmm0, xmmword [0x18007b5c8]
lea r8, str.Militia
movsd xmm2, qword [rbp - 0x18]
movsd xmm1, qword [rbp - 0x20]
cvtpd2ps xmm2, xmm2
cvtpd2ps xmm1, xmm1
unpcklps xmm1, xmm2
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rbp - 0x80]
movq rcx, xmm1
call fcn.180008f40
cmp byte [0x18007b0b0], 0
je 0x18000d2bb
movsd xmm0, qword [0x180070dd8]
comisd xmm0, xmmword [rdi + 0x9a0]
jb 0x18000d2bb
cvtps2pd xmm0, xmm8
subsd xmm6, xmm0
movups xmm0, xmmword [0x18007b758]
movdqa xmmword [rbp - 0x80], xmm0
movaps xmm1, xmm6
subsd xmm1, qword [0x180070d88]
cvtpd2ps xmm0, xmm1
movss dword [rbp + 0x70], xmm0
movaps xmm2, xmm9
addsd xmm2, qword [0x180070d78]
cvtpd2ps xmm0, xmm2
movss dword [rbp + 0x74], xmm0
movaps xmm1, xmm6
subsd xmm1, qword [0x180070da0]
cvtpd2ps xmm0, xmm1
movss dword [rbp + 0x78], xmm0
subsd xmm7, qword [0x180070d78]
cvtpd2ps xmm0, xmm7
movss dword [rbp + 0x7c], xmm0
lea rcx, [rbp - 0x80]
call fcn.180012130
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x78]
mov rcx, qword [0x18007c2b0]
call fcn.1800311d0
movups xmm0, xmmword [0x18007b7b8]
movdqa xmmword [rbp - 0x80], xmm0
movaps xmm1, xmm6
subsd xmm1, qword [0x180070d90]
cvtpd2ps xmm0, xmm1
movss dword [rbp + 0x80], xmm0
cvtpd2ps xmm1, xmm9
movss dword [rbp + 0x84], xmm1
subsd xmm6, qword [0x180070d98]
cvtpd2ps xmm0, xmm6
movss dword [rbp + 0x88], xmm0
movsd xmm1, qword [rdi + 0x9a0]
mulsd xmm1, qword [0x180070d50]
cvtps2pd xmm0, xmm10
mulsd xmm1, xmm0
subsd xmm9, xmm1
cvtpd2ps xmm0, xmm9
movss dword [rbp + 0x8c], xmm0
lea rcx, [rbp - 0x80]
call fcn.180012130
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x88]
mov rcx, qword [0x18007c2b0]
call fcn.1800311d0
cmp byte [0x18007b0e8], 0
je 0x18000d411
cmp byte [0x18007c27a], 0
je 0x18000d31e
movups xmm0, xmmword [0x18007b810]
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rbp + 0x28], 0x44700000
mov dword [rbp + 0x2c], 0x44070000
lea rcx, [rbp - 0x80]
call fcn.180012130
mov r9d, eax
movss dword [rsp + 0x28], xmm14
mov dword [rsp + 0x20], 0x50
movss xmm2, dword [0x18007b0e4]
lea rdx, [rbp + 0x28]
mov rcx, qword [0x18007c2b0]
call fcn.180031690
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x410]
mov rcx, qword [0x18007c1f8]
call fcn.1800604f0
test al, al
je 0x18000d411
lea r8, [rbp + 0x410]
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x340]
call fcn.180060b70
movups xmm6, xmmword [rax]
movsd xmm7, qword [rax + 0x10]
movaps xmm0, xmmword [0x180071090]
movups xmmword [rbp + 0x58], xmm0
lea rdx, [rbp + 0x58]
lea rcx, [rbp - 0x80]
call fcn.180060830
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [0x18007c218], xmm1
movss xmm2, dword [rbp - 0x30]
comiss xmm2, xmm1
jbe 0x18000d411
movss xmm0, dword [0x18007b0e4]
comiss xmm0, xmm1
jb 0x18000d411
mov qword [rbp + 0x50], rdi
movups xmmword [rbp + 0xc0], xmm6
movsd qword [rbp + 0xd0], xmm7
movss dword [rbp - 0x30], xmm1
cmp byte [0x18007b0b6], 0
je 0x18000d411
movss dword [rbp - 0x30], xmm1
movsd xmm9, qword [0x180070e80]
movss xmm10, dword [0x180070ef4]
movsd xmm6, qword [0x180070dd8]
movsd xmm11, qword [0x180070d50]
mov r13d, 0xf
test r15b, r15b
mov r15, qword [rsp + 0x48]
je 0x18000d407
mov dil, 1
mov byte [rsp + 0x40], dil
jmp 0x18000d444
xor dil, dil
mov byte [rsp + 0x40], dil
jmp 0x18000d444
movsd xmm9, qword [0x180070e80]
movss xmm10, dword [0x180070ef4]
mov r13d, 0xf
movsd xmm6, qword [0x180070dd8]
movsd xmm11, qword [0x180070d50]
mov r15, qword [rsp + 0x48]
movzx edi, byte [rsp + 0x40]
mov ebx, dword [rbp + 4]
inc ebx
mov dword [rbp + 4], ebx
inc r15
mov qword [rsp + 0x48], r15
mov rcx, qword [0x18007b640]
sub rcx, qword [0x18007b638]
sar rcx, 3
movsxd rax, ebx
cmp rax, rcx
jb 0x18000a500
mov rsi, qword [rbp + 0x50]
mov byte [0x18007c1d0], 0
test rsi, rsi
je 0x18000d4b5
cmp byte [0x18007b0e8], 0
je 0x18000d4b5
mov ecx, 6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000d4b5
cmp byte [0x18007b0b6], 0
je 0x18000d4a9
test dil, dil
je 0x18000d4b5
lea rdx, [rbp + 0xc0]
call fcn.18005fe80
mov rcx, qword [rbp + 0x540]
xor rcx, rsp
call fcn.180060fb0
lea r11, [rsp + 0x6f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0xb8]
call fcn.180006560
mov rax, qword [rbp + 0xb8]
movabs rcx, 0x7ffffffffffffffd
cmp rax, rcx
jg 0x18000d554
inc rax
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x38]
call fcn.180008430
jmp 0x18000a500
movabs rax, 0x7fffffffffffffff
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x38]
call fcn.180008430
jmp 0x18000a500
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800064d0
nop
lea rcx, [rbp + 0x360]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rsp + 0x60]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x360]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x360]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x360]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x360]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x360]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, [rsp + 0x60]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, [rsp + 0x60]
call fcn.1800064f0
lea rdx, [0x180078cf0]
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll__CxxThrowException
int3