Function at 0x18004e850
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x280
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1800f9040]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov rdi, rcx
xor r12d, r12d
mov rax, qword [0x180121860]
mov rcx, qword [rax + 0xb8]
xorps xmm12, xmm12
movabs r14, 0x7fffffff0000
cmp rcx, 0x40000
jbe 0x18004e985
lea rax, [rcx + 8]
cmp rax, r14
jae 0x18004e985
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004e985
mov rcx, qword [0x1801218f8]
add rcx, rdx
cmp rcx, 0x40000
jbe 0x18004e92b
lea rax, [rcx + 8]
cmp rax, r14
jae 0x18004e92b
mov rcx, qword [rcx]
jmp 0x18004e92e
mov rcx, r12
test rcx, rcx
je 0x18004e985
mov rdx, qword [0x1801217c8]
add rdx, rcx
cmp rdx, 0x40000
jbe 0x18004e954
lea rax, [rdx + 8]
cmp rax, r14
jae 0x18004e954
mov rcx, qword [rdx]
jmp 0x18004e957
mov rcx, r12
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18004e985
lea rax, [rcx + 8]
cmp rax, r14
jae 0x18004e985
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004e985
lea rcx, [rsp + 0x40]
call qword [0x180121850]
jmp 0x18004e98f
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], r12d
movsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x50], xmm0
mov ebx, dword [rsp + 0x48]
test rdi, rdi
je 0x18004e9d9
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
je 0x18004e9d9
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [0x180121850]
movss xmm8, dword [rsp + 0x38]
movss xmm0, dword [rsp + 0x34]
movss xmm9, dword [rsp + 0x30]
jmp 0x18004e9e4
xorps xmm9, xmm9
xorps xmm0, xmm0
xorps xmm8, xmm8
subss xmm0, dword [rsp + 0x54]
movss xmm6, dword [0x1800e83d0]
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm7, xmm0
subss xmm9, dword [rsp + 0x50]
movaps xmm1, xmm6
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
movd xmm2, ebx
subss xmm8, xmm2
movaps xmm1, xmm6
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm7
ja 0x18004ea40
xorps xmm14, xmm14
sqrtss xmm14, xmm7
jmp 0x18004ea4c
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm14, xmm0
movss xmm13, dword [0x1800e83a0]
movss xmm15, dword [0x1800e8420]
mov esi, 0xffffffff
mov r15, 0xffffffffffffffff
lea r13, [0x1800e6ac0]
cmp byte [0x18012176c], r12b
je 0x18004edb9
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004edb9
test rdi, rdi
je 0x18004edb9
test r14, r14
je 0x18004edb9
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], r12w
jne 0x18004eab0
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004eaef
mov r9d, ebx
nop
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004ead0
not r8d
cmp r8d, 0x534ba951
jne 0x18004edb9
mov qword [rsp + 0x30], r12
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x18004eb21
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], r12d
jmp 0x18004eb2f
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18004edb9
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1800e85b0]
movdqu xmmword [rbp - 0x40], xmm1
mov byte [rbp - 0x50], r12b
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x180121908]
add rcx, rdi
movabs r14, 0x7fffffff0000
cmp rcx, 0x40000
jbe 0x18004ebc0
lea rax, [rcx + 8]
cmp rax, r14
jae 0x18004ebc0
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004ebc0
add rdx, qword [0x1801218c8]
cmp rdx, 0x40000
jbe 0x18004ebbb
lea rax, [rdx + 4]
cmp rax, r14
jae 0x18004ebbb
mov r9d, dword [rdx]
jmp 0x18004ebd5
mov r9d, r12d
jmp 0x18004ebd5
mov r9d, r12d
cmp rcx, 0x40000
jbe 0x18004ec27
lea rax, [rcx + 8]
cmp rax, r14
jae 0x18004ec27
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004ec27
mov rcx, qword [0x1801218c0]
add rcx, rdx
cmp rcx, 0x40000
jbe 0x18004ebfe
lea rax, [rcx + 8]
cmp rax, r14
jae 0x18004ebfe
mov rcx, qword [rcx]
jmp 0x18004ec01
mov rcx, r12
test rcx, rcx
je 0x18004ec27
mov rdx, qword [0x1801218a8]
add rdx, rcx
cmp rdx, 0x40000
jbe 0x18004ec27
lea rax, [rdx + 8]
cmp rax, r14
jae 0x18004ec27
mov rcx, qword [rdx]
jmp 0x18004ec2a
mov rcx, r12
call fcn.18004baf0
mov r8, rax
lea rdx, str._ls__x_d_
lea rcx, [rbp - 0x30]
call fcn.180055f80
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.1800405c0
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r9, qword [rbp - 0x50]
movss xmm0, dword [0x18011ea18]
movss xmm1, dword [0x18011ea1c]
movss xmm2, dword [0x18011ea20]
mov dword [rsp + 0x5c], 0x3f800000
movups xmm3, xmmword [rsp + 0x50]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x50], xmm3
movdqa xmmword [rsp + 0x70], xmm3
lea r8, [rsp + 0x70]
movss xmm7, dword [rsp + 0x34]
movaps xmm1, xmm7
movss xmm6, dword [rsp + 0x30]
movaps xmm0, xmm6
call fcn.180048c30
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movss xmm0, dword [0x18011ea18]
movss xmm2, dword [0x18011ea1c]
movss xmm3, dword [0x18011ea20]
mov dword [rsp + 0x5c], 0x3f800000
movups xmm4, xmmword [rsp + 0x50]
movss xmm4, xmm0
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm2
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm3
shufps xmm4, xmm4, 0xc9
movups xmmword [rsp + 0x50], xmm4
movdqa xmmword [rsp + 0x70], xmm4
subss xmm7, xmm15
lea r8, [rsp + 0x70]
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004ed7b
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ed75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004ed75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c0400
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18004edb9
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004edb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004edb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c0400
cmp byte [0x180121787], 0
je 0x18004f007
test rdi, rdi
je 0x18004f007
mov r8, qword [rdi]
test r8, r8
je 0x18004f007
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004ede9
mov r8, qword [rdi]
jmp 0x18004ee3a
mov edx, esi
mov rax, r15
nop
inc rax
cmp byte [r8 + rax], 0
jne 0x18004edf0
test eax, eax
je 0x18004ee2e
mov r9d, eax
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004ee01
not edx
cmp edx, 0xa21aca7a
je 0x18004ee9c
mov r8, qword [rdi]
jmp 0x18004ee3a
mov r8, qword [rdi]
test r8, r8
je 0x18004f007
mov r8, qword [r8 + 0x10]
test r8, r8
je 0x18004f007
mov edx, esi
mov rax, r15
nop dword [rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18004ee50
test eax, eax
je 0x18004f007
mov r9d, eax
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004ee70
not edx
cmp edx, 0xed85a02
jne 0x18004f007
mov qword [rsp + 0x30], 0
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x18004eec1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x18004eecf
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18004f007
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movss xmm0, dword [0x18011ea78]
movss xmm1, dword [0x18011ea7c]
movss xmm2, dword [0x18011ea80]
mov dword [rsp + 0x5c], 0x3f800000
movups xmm3, xmmword [rsp + 0x50]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x50], xmm3
movdqa xmmword [rsp + 0x70], xmm3
movss xmm6, dword [rsp + 0x34]
movaps xmm1, xmm6
subss xmm1, xmm15
lea r8, [rsp + 0x70]
movss xmm7, dword [rsp + 0x30]
movaps xmm0, xmm7
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004efa8
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004efa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800508eb
call fcn.1800c0400
movss xmm0, dword [0x18011ea78]
movss xmm2, dword [0x18011ea7c]
movss xmm3, dword [0x18011ea80]
mov dword [rsp + 0x5c], 0x3f800000
movups xmm4, xmmword [rsp + 0x50]
movss xmm4, xmm0
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm2
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm3
shufps xmm4, xmm4, 0xc9
movups xmmword [rsp + 0x50], xmm4
movdqa xmmword [rsp + 0x70], xmm4
lea r9, str.Corpse
lea r8, [rsp + 0x70]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
movss xmm11, dword [0x1800e8474]
add rax, 0x14
je 0x18004f337
test rdi, rdi
je 0x18004f337
test r14, r14
je 0x18004f337
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004f042
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004f08f
mov r9d, ebx
nop dword [rax]
nop word [rax + rax]
movzx edx, word [rax]
mov ecx, r8d
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004f070
not r8d
cmp r8d, 0xa7912a77
jne 0x18004f337
cmp byte [0x18012176e], 0
je 0x18004f337
mov rcx, qword [0x1801218e0]
add rcx, rdi
cmp rcx, 0x40000
jbe 0x18004f0d8
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18004f0d8
movss xmm0, dword [rcx]
jmp 0x18004f0dc
movaps xmm0, xmm12
cvttss2si ebx, xmm0
mov qword [rsp + 0x30], 0
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x18004f105
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x18004f113
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18004f337
movss xmm6, dword [0x18011ea60]
movss xmm9, dword [0x18011ea5c]
movss xmm10, dword [0x18011ea58]
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm9
movss dword [rsp + 0x58], xmm6
mov dword [rsp + 0x5c], 0x3f800000
movss xmm8, dword [rsp + 0x34]
movaps xmm1, xmm8
subss xmm1, xmm15
lea r8, [rsp + 0x50]
movss xmm7, dword [rsp + 0x30]
movaps xmm0, xmm7
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004f1dc
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f1d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800508eb
call fcn.1800c0400
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm9
movss dword [rsp + 0x58], xmm6
mov dword [rsp + 0x5c], 0x3f800000
lea r9, str.Patrol_helicopter
lea r8, [rsp + 0x50]
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.180048c30
addss xmm8, dword [0x1800e8428]
subss xmm7, dword [0x1800e844c]
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
movdqa xmm0, xmmword [0x1800e86f0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.18000b5d0
movaps xmm0, xmm7
addss xmm0, xmm11
movss dword [rsp + 0x30], xmm0
movaps xmm9, xmm8
addss xmm9, dword [0x1800e83f4]
movss dword [rsp + 0x34], xmm9
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x44], xmm8
mov dword [rsp + 0x28], r12d
movss xmm10, dword [0x1800e83e8]
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1801217a0]
call fcn.180027910
movaps xmm0, xmm6
movss xmm1, dword [0x1800e8508]
divss xmm0, xmm1
comiss xmm0, xmm10
jbe 0x18004f2b7
movaps xmm6, xmm1
jmp 0x18004f2bf
ucomiss xmm6, xmm12
jp 0x18004f2bf
je 0x18004f337
movdqa xmm0, xmmword [0x1800e86d0]
movdqa xmmword [rsp + 0x70], xmm0
divss xmm6, xmm1
mulss xmm6, xmm11
addss xmm6, xmm7
subss xmm6, xmm13
lea rcx, [rsp + 0x70]
call fcn.18000b5d0
movss dword [rsp + 0x40], xmm6
subss xmm9, xmm13
movss dword [rsp + 0x44], xmm9
addss xmm7, xmm13
movss dword [rsp + 0x30], xmm7
addss xmm8, xmm13
movss dword [rsp + 0x34], xmm8
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x1801217a0]
call fcn.180027910
cmp byte [0x180121785], 0
je 0x18004f64b
comiss xmm11, xmm14
jb 0x18004f64b
mov qword [rsp + 0x30], 0
test rdi, rdi
je 0x18004f37d
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
je 0x18004f37d
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
jmp 0x18004f38e
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18004f64b
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1800e85b0]
movdqu xmmword [rbp - 0x40], xmm1
mov byte [rbp - 0x50], 0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memset
test rdi, rdi
jne 0x18004f3dc
lea rdx, [0x1800dfb2f]
jmp 0x18004f3f1
mov rdx, qword [rdi]
test rdx, rdx
jne 0x18004f3ed
lea rdx, [0x1800dfb2f]
jmp 0x18004f3f1
mov rdx, qword [rdx + 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x18004f404
lea rcx, [rsp + 0x70]
call fcn.180040ff0
nop
mov r9, qword [rbp - 0x80]
test r9, r9
jne 0x18004f443
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x1800e8590]
movdqu xmmword [rsp + 0x60], xmm1
mov word [rsp + 0x50], r12w
jmp 0x18004f4d2
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova r8, qword [rsp + 0x70]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov r8, rbx
lea rcx, [rbp - 0x70]
call fcn.180056260
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rdx, qword [rbp - 0x70]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova r8, qword [rsp + 0x70]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdx
mov r9d, dword [rbp - 0x80]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova r8, qword [rsp + 0x50]
lea rdx, [0x1800e809c]
lea rcx, [rbp - 0x30]
call fcn.180055f80
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x18004f538
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f533
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f533
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c0400
movdqa xmm0, xmmword [0x1800e8590]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18004f58b
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f586
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f586
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c0400
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.1800405c0
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r9, qword [rbp - 0x50]
movss xmm0, dword [0x18011ea48]
movss xmm1, dword [0x18011ea4c]
movss xmm2, dword [0x18011ea50]
mov dword [rsp + 0x5c], 0x3f800000
movups xmm3, xmmword [rsp + 0x50]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x50], xmm3
movdqa xmmword [rsp + 0x70], xmm3
movss xmm1, dword [rsp + 0x34]
addss xmm1, dword [0x1800e842c]
lea r8, [rsp + 0x70]
movss xmm0, dword [rsp + 0x30]
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18004f64b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f646
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f646
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c0400
cmp byte [0x180121786], 0
je 0x18004fb24
test rdi, rdi
je 0x18004fb24
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004f67b
mov r8, qword [rdi]
jmp 0x18004f6ce
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f680
test eax, eax
je 0x18004f6c2
mov r9d, eax
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f691
not edx
cmp edx, 0x2aefaa4
je 0x18004f93c
mov r8, qword [rdi]
jmp 0x18004f6ce
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004f6dc
mov r8, qword [rdi]
jmp 0x18004f73d
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f6e1
test eax, eax
je 0x18004f731
mov r9d, eax
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f700
not edx
cmp edx, 0x2071fcb2
je 0x18004f93c
mov r8, qword [rdi]
jmp 0x18004f73d
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004f74b
mov r8, qword [rdi]
jmp 0x18004f79e
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f750
test eax, eax
je 0x18004f792
mov r9d, eax
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f761
not edx
cmp edx, 0xa85719fa
je 0x18004f93c
mov r8, qword [rdi]
jmp 0x18004f79e
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004f7ac
mov r8, qword [rdi]
jmp 0x18004f80d
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f7b1
test eax, eax
je 0x18004f801
mov r9d, eax
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f7d0
not edx
cmp edx, 0xc56e3a91
je 0x18004f93c
mov r8, qword [rdi]
jmp 0x18004f80d
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004f81b
mov r8, qword [rdi]
jmp 0x18004f86e
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f820
test eax, eax
je 0x18004f862
mov r9d, eax
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f831
not edx
cmp edx, 0x38551ec1
je 0x18004f93c
mov r8, qword [rdi]
jmp 0x18004f86e
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x18004f87c
mov r8, qword [rdi]
jmp 0x18004f8d9
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f881
test eax, eax
je 0x18004f8cd
mov r9d, eax
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f8a0
not edx
cmp edx, 0xffdc2570
je 0x18004f93c
mov r8, qword [rdi]
jmp 0x18004f8d9
mov r8, qword [rdi]
test r8, r8
je 0x18004fb24
mov r8, qword [r8 + 0x10]
test r8, r8
je 0x18004fb24
mov edx, esi
mov rax, r15
nop dword [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f8f0
test eax, eax
je 0x18004fb24
mov r9d, eax
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004f910
not edx
cmp edx, 0x5ed4cec6
jne 0x18004fb24
mov qword [rsp + 0x30], 0
movss xmm0, dword [0x18011ea68]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x18011ea6c]
movss dword [rsp + 0x54], xmm1
movss xmm0, dword [0x18011ea70]
movss dword [rsp + 0x58], xmm0
mov dword [rsp + 0x5c], 0x3f800000
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x18004f993
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x18004f9a1
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18004fb24
mov r8, qword [rdi]
movss xmm6, dword [rsp + 0x34]
movss xmm7, dword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x50]
test r8, r8
je 0x18004faaf
mov r8, qword [r8 + 0x10]
test r8, r8
je 0x18004faaf
mov edx, esi
mov rax, r15
nop dword [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18004f9f0
test eax, eax
je 0x18004fa1f
mov r9d, eax
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x18004fa01
not edx
cmp edx, 0x5ed4cec6
ja 0x18004fa67
je 0x18004fa5e
cmp edx, 0x2aefaa4
je 0x18004fa55
cmp edx, 0x2071fcb2
je 0x18004fa4c
cmp edx, 0x38551ec1
jne 0x18004faaf
lea r9, str.Flame_Turret
jmp 0x18004fa98
lea r9, str.Landmine
jmp 0x18004fa98
lea r9, str.Auto_Turret
jmp 0x18004fa98
lea r9, str.Shotgun_Trap
jmp 0x18004fa98
cmp edx, 0xa85719fa
je 0x18004fa91
cmp edx, 0xc56e3a91
je 0x18004fa88
cmp edx, 0xffdc2570
jne 0x18004faaf
lea r9, str.Barricade
jmp 0x18004fa98
lea r9, str.SAM_Site
jmp 0x18004fa98
lea r9, str.Bear_Trap
movdqa xmmword [rsp + 0x70], xmm8
lea r8, [rsp + 0x70]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm8
subss xmm6, xmm15
lea r8, [rsp + 0x70]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004fb24
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fb1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800508eb
call fcn.1800c0400
cmp byte [0x18012176d], 0
je 0x18004fcef
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004fcef
test rdi, rdi
je 0x18004fcef
test r14, r14
je 0x18004fcef
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004fb63
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004fbaf
mov r9d, ebx
nop dword [rax]
nop word [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004fb90
not r8d
cmp r8d, 0x6331f578
jne 0x18004fcef
mov qword [rsp + 0x30], 0
movss xmm8, dword [0x18011ea40]
movss xmm9, dword [0x18011ea3c]
movss xmm10, dword [0x18011ea38]
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x18004fbff
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x18004fc0d
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18004fcef
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm9
movss dword [rsp + 0x58], xmm8
mov dword [rsp + 0x5c], 0x3f800000
lea r9, str.Hemp
lea r8, [rsp + 0x50]
movss xmm7, dword [rsp + 0x34]
movaps xmm1, xmm7
movss xmm6, dword [rsp + 0x30]
movaps xmm0, xmm6
call fcn.180048c30
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm9
movss dword [rsp + 0x58], xmm8
mov dword [rsp + 0x5c], 0x3f800000
subss xmm7, xmm15
lea r8, [rsp + 0x50]
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004fcef
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fcea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800508eb
call fcn.1800c0400
cmp byte [0x18012176f], 0
je 0x18005031e
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004fd7f
test rdi, rdi
je 0x18004fd7f
test r14, r14
je 0x18004fd7f
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004fd22
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004fd6f
mov r9d, ebx
nop dword [rax]
nop word [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004fd50
not r8d
cmp r8d, 0xb135fd09
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004fdff
test rdi, rdi
je 0x18004fdff
test r14, r14
je 0x18004fdff
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004fda5
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004fdef
mov r9d, ebx
nop dword [rax]
nop dword [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004fdd0
not r8d
cmp r8d, 0xade1c37a
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004fe7f
test rdi, rdi
je 0x18004fe7f
test r14, r14
je 0x18004fe7f
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004fe25
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004fe6f
mov r9d, ebx
nop dword [rax]
nop dword [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004fe50
not r8d
cmp r8d, 0x967eb70b
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004feff
test rdi, rdi
je 0x18004feff
test r14, r14
je 0x18004feff
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004fea5
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004feef
mov r9d, ebx
nop dword [rax]
nop dword [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004fed0
not r8d
cmp r8d, 0xf1de6cf3
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004ff7f
test rdi, rdi
je 0x18004ff7f
test r14, r14
je 0x18004ff7f
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004ff25
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004ff6f
mov r9d, ebx
nop dword [rax]
nop dword [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004ff50
not r8d
cmp r8d, 0x7f047e9d
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18004ffff
test rdi, rdi
je 0x18004ffff
test r14, r14
je 0x18004ffff
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x18004ffa5
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18004ffef
mov r9d, ebx
nop dword [rax]
nop dword [rax + rax]
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x18004ffd0
not r8d
cmp r8d, 0x690998fc
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18005007f
test rdi, rdi
je 0x18005007f
test r14, r14
je 0x18005007f
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x180050025
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18005006f
mov r9d, ebx
nop dword [rax]
nop dword [rax + rax]
movzx edx, word [rax]
mov ecx, r8d
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x180050050
not r8d
cmp r8d, 0x21fa302a
je 0x1800500ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18005031e
test rdi, rdi
je 0x18005031e
test r14, r14
je 0x18005031e
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x1800500b1
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x1800500ef
mov r9d, ebx
movzx edx, word [rax]
mov ecx, r8d
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x1800500d0
not r8d
cmp r8d, 0x28b38eaf
jne 0x18005031e
mov qword [rsp + 0x30], 0
movss xmm0, dword [0x18011ea08]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x18011ea0c]
movss dword [rsp + 0x54], xmm1
movss xmm0, dword [0x18011ea10]
movss dword [rsp + 0x58], xmm0
mov dword [rsp + 0x5c], 0x3f800000
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x180050156
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x180050164
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x18005031e
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
movss xmm6, dword [rsp + 0x34]
movss xmm7, dword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x50]
add rax, 0x14
je 0x1800502a9
test r14, r14
je 0x1800502a9
mov rcx, rdi
call r14
mov rbx, r15
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x1800501c0
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x1800501ff
mov r9d, ebx
nop
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x1800501e0
not r8d
cmp r8d, 0x967eb70b
ja 0x18005025e
je 0x180050255
cmp r8d, 0x21fa302a
je 0x18005024c
cmp r8d, 0x28b38eaf
je 0x180050243
cmp r8d, 0x690998fc
je 0x18005023a
cmp r8d, 0x7f047e9d
jne 0x1800502a9
lea r9, str.Scrap_Heli
jmp 0x180050292
lea r9, str.Submarine__Duo_
jmp 0x180050292
lea r9, str.Horse
jmp 0x180050292
lea r9, str.Submarine__Solo_
jmp 0x180050292
lea r9, str.Hot_Air_Balloon
jmp 0x180050292
cmp r8d, 0xade1c37a
je 0x18005028b
cmp r8d, 0xb135fd09
je 0x180050282
cmp r8d, 0xf1de6cf3
jne 0x1800502a9
lea r9, str.Minicopter
jmp 0x180050292
lea r9, str.RHIB
jmp 0x180050292
lea r9, str.Boat
movdqa xmmword [rsp + 0x70], xmm8
lea r8, [rsp + 0x70]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm8
subss xmm6, xmm15
lea r8, [rsp + 0x70]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18005031e
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180050319
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800508eb
call fcn.1800c0400
cmp byte [0x18012194c], 0
je 0x1800506d6
test rdi, rdi
je 0x1800506d6
mov r8, qword [rdi]
test r8, r8
je 0x1800506d6
mov r8, qword [r8 + 0x10]
test r8, r8
je 0x1800506d6
mov edx, esi
mov rax, r15
inc rax
cmp byte [r8 + rax], 0
jne 0x180050352
test eax, eax
je 0x1800506d6
mov r9d, eax
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, edx
xor rcx, rax
movzx eax, cl
shr edx, 8
xor edx, dword [r13 + rax*4]
lea r8, [r8 + 1]
sub r9, 1
jne 0x180050370
not edx
cmp edx, 0xcf8c1c61
jne 0x1800506d6
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18005040f
test r14, r14
je 0x18005040f
mov rcx, rdi
call r14
mov rbx, r15
nop dword [rax]
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x1800503c0
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x1800503ff
mov r9d, ebx
nop
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x1800503e0
not r8d
cmp r8d, 0x28edab92
je 0x1800504ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x18005047f
test r14, r14
je 0x18005047f
mov rcx, rdi
call r14
mov rbx, r15
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x180050430
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18005046f
mov r9d, ebx
nop
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x180050450
not r8d
cmp r8d, 0xc21d46dc
je 0x1800504ff
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
add rax, 0x14
je 0x1800506d6
test r14, r14
je 0x1800506d6
mov rcx, rdi
call r14
mov rbx, r15
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x1800504b0
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x1800504ef
mov r9d, ebx
nop
mov edx, r8d
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x1800504d0
not r8d
cmp r8d, 0x65611b54
jne 0x1800506d6
mov qword [rsp + 0x30], 0
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x180050524
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x180050532
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x1800506d6
movss xmm6, dword [0x18011e9e8]
movss xmm7, dword [0x18011e9ec]
movss xmm8, dword [0x18011e9f0]
mov dword [rsp + 0x5c], 0x3f800000
mov r14, qword [0x1801217b8]
mov rcx, rdi
call r14
movss xmm10, dword [rsp + 0x34]
movss xmm11, dword [rsp + 0x30]
movups xmm9, xmmword [rsp + 0x50]
movss xmm9, xmm6
shufps xmm9, xmm9, 0xe1
movss xmm9, xmm7
shufps xmm9, xmm9, 0xc6
movss xmm9, xmm8
shufps xmm9, xmm9, 0xc9
movups xmmword [rsp + 0x50], xmm9
add rax, 0x14
je 0x18005065f
test r14, r14
je 0x18005065f
mov rcx, rdi
call r14
mov rbx, r15
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2 + 0x14], 0
jne 0x1800505d0
mov rcx, rdi
call r14
add rax, 0x14
mov r8d, esi
test ebx, ebx
je 0x18005060f
mov r9d, ebx
nop
movzx edx, word [rax]
mov ecx, r8d
xor rdx, rcx
movzx ecx, dl
shr r8d, 8
xor r8d, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r9, 1
jne 0x1800505f0
not r8d
cmp r8d, 0x28edab92
je 0x18005063f
cmp r8d, 0x65611b54
je 0x180050636
cmp r8d, 0xc21d46dc
jne 0x18005065f
lea r9, str.Sulfur_Ore
jmp 0x180050646
lea r9, str.Metal_Ore
jmp 0x180050646
lea r9, str.Stone_Ore
movdqa xmmword [rsp + 0x70], xmm9
lea r8, [rsp + 0x70]
movaps xmm1, xmm10
movaps xmm0, xmm11
call fcn.180048c30
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm9
subss xmm10, xmm15
lea r8, [rsp + 0x70]
movaps xmm1, xmm10
movaps xmm0, xmm11
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1800506d6
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800506d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800508eb
call fcn.1800c0400
cmp byte [0x180121784], 0
je 0x1800508f7
mov rbx, qword [0x1801217b8]
mov rcx, rdi
call rbx
add rax, 0x14
je 0x1800508f7
test rdi, rdi
je 0x1800508f7
test rbx, rbx
je 0x1800508f7
mov rcx, rdi
call rbx
inc r15
cmp word [rax + r15*2 + 0x14], 0
jne 0x180050710
mov rcx, rdi
call rbx
add rax, 0x14
test r15d, r15d
je 0x18005074d
mov r8d, r15d
nop dword [rax]
mov edx, esi
movzx ecx, word [rax]
xor rdx, rcx
movzx ecx, dl
shr esi, 8
xor esi, dword [r13 + rcx*4]
lea rax, [rax + 2]
sub r8, 1
jne 0x180050730
not esi
cmp esi, 0x7e5f35ef
jne 0x1800508f7
mov qword [rsp + 0x30], 0
movss xmm6, dword [0x18011ea90]
movss xmm7, dword [0x18011ea8c]
movss xmm8, dword [0x18011ea88]
movss dword [rsp + 0x70], xmm8
movss dword [rsp + 0x74], xmm7
movss dword [rsp + 0x78], xmm6
mov dword [rsp + 0x7c], 0x3f800000
mov rax, qword [0x180121858]
mov rcx, rdi
call rax
test rax, rax
jne 0x1800507b4
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
jmp 0x1800507c2
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [0x180121850]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.18004be70
test al, al
je 0x1800508f7
mov rcx, qword [0x180121900]
add rcx, rdi
cmp rcx, 0x40000
jbe 0x180050802
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x180050802
mov r12d, dword [rcx]
shr r12d, 0xb
movss dword [rsp + 0x50], xmm8
movss dword [rsp + 0x54], xmm7
movss dword [rsp + 0x58], xmm6
mov dword [rsp + 0x5c], 0x3f800000
lea r8, [rsp + 0x50]
movss xmm7, dword [rsp + 0x30]
movss xmm6, dword [rsp + 0x34]
movaps xmm0, xmm7
movaps xmm1, xmm6
addss xmm1, xmm15
test r12b, 1
lea r9, str._Hidden_
jne 0x180050851
lea r9, str._Open_
call fcn.180048c30
movdqa xmm0, xmmword [0x1800e8790]
movdqa xmmword [rsp + 0x50], xmm0
lea r9, str.Stash
lea r8, [rsp + 0x50]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
cvttss2si edx, xmm14
lea rcx, [rbp - 0x70]
call fcn.180055c30
nop
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
movups xmm2, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm2
subss xmm6, xmm15
lea r8, [rsp + 0x70]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048c30
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1800508f7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800508f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800508f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c0400
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1800c0390
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret