Function at 0x180028b40
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1801347c0]
xor rax, rsp
mov qword [rbp + 0x50], rax
xor r13d, r13d
call fcn.180028710
call fcn.180027000
call fcn.1800259b0
call fcn.180024e70
call fcn.180024410
call fcn.180023940
movzx ecx, byte [0x1801b022b]
call fcn.180003a30
xorps xmm6, xmm6
movabs rdi, 0xd80958fc74e988a6
movabs rbx, 0x9a9112a0fe9a4713
cmp byte [0x1801b022c], r13b
je 0x180028d47
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [0x18014e958], r13
mov dword [0x18014e878], 2
call fcn.18003c460
mov ebx, dword [rax]
mov dword [0x18014e888], r13d
movabs rsi, 0x36d782f68b309bda
mov qword [0x1801b3ad0], rsi
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov dword [0x18014e878], 1
call fcn.18003c460
cmp dword [rax], r13d
je 0x180028d47
mov dword [0x18014e888], r13d
movabs rax, 0xe00f2ab100b76e89
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], r13d
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 2
call fcn.18003c460
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rsi
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov dword [0x18014e878], 1
call fcn.18003c460
mov dword [0x18014e888], r13d
movabs rax, 0xfeb2dded3509562e
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 0x42c80000
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 2
call fcn.18003c460
cmp byte [0x1801b11d0], r13b
je 0x180028dd2
mov ebx, r13d
movabs rsi, 0x4cffc65454c93a49
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rsi
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov qword [0x18014e960], r13
mov dword [0x18014e878], 3
call fcn.18003c460
inc ebx
cmp ebx, 0x3f
jl 0x180028d61
mov dword [0x18014e888], r13d
movabs rax, 0xd821490579791273
mov dword [0x18014e878], 1
cmp byte [0x1801b11d3], r13b
je 0x180028e78
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
call fcn.18003c460
mov dword [0x18014e888], r13d
movabs rax, 0xb80d8756b4668ab6
mov qword [0x1801b3ad0], rax
lea rbx, str.scr_rcbarry2
mov qword [0x18014e950], rbx
mov dword [0x18014e878], 1
call fcn.18003c460
mov dword [0x18014e888], r13d
mov qword [0x18014e950], rbx
mov dword [0x18014e878], 1
movabs rax, 0x6c38af3693a69a91
jmp 0x180028e7f
mov qword [0x18014e950], r13
mov qword [0x1801b3ad0], rax
call fcn.18003c460
call fcn.180023420
cmp byte [0x1801b022f], r13b
je 0x180028fb4
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ebx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0xeef059fad016d209
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov dword [0x18014e878], 1
call fcn.18003c460
mov edi, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0x15d757606d170c3c
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov dword [0x18014e878], 1
call fcn.18003c460
cmp edi, dword [rax]
jge 0x180028faa
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1801b3e84]
cmp eax, 0xc8
jbe 0x180028faa
mov dword [0x18014e888], r13d
movabs rax, 0x6b76dc1f3ae6e6a3
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
lea eax, [rdi + 1]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 2
call fcn.18003c460
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1801b3e84], eax
movabs rdi, 0xd80958fc74e988a6
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
cmp byte [0x1801b11d1], r13b
je 0x1800290f5
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0x3fef770d40960d5a
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 2
call fcn.18003c460
movups xmm1, xmmword [rax]
movsd xmm2, qword [rax + 0x10]
mov dword [0x18014e888], r13d
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
movss dword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov qword [rsp + 0x40], r13
movsd qword [rbp - 0x20], xmm2
subss xmm2, dword [0x1801056d0]
movss dword [rsp + 0x40], xmm2
mov rax, qword [rsp + 0x40]
mov qword [0x18014e960], rax
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e968], rax
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x40]
mov qword [0x18014e970], rax
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm2
mov rax, qword [rsp + 0x40]
mov qword [0x18014e978], rax
mov dword [0x18014e878], 6
movabs rax, 0xbb7454baff08fe25
jmp 0x1800290ff
movabs rax, 0x31b73d1ea9f01da2
mov qword [0x1801b3ad0], rax
call fcn.18003c460
cmp byte [0x1801b11d6], r13b
je 0x1800292ef
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0xae99fb955581844a
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 0xa
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 0xa
mov rax, qword [rsp + 0x40]
mov qword [0x18014e960], rax
mov qword [0x18014e968], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e970], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e978], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e980], rax
mov dword [0x18014e878], 7
call fcn.18003c460
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm8, dword [0x180103e8c]
test ax, ax
je 0x180029238
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
movaps xmm3, xmm6
movaps xmm2, xmm8
movaps xmm1, xmm6
mov ecx, dword [rax]
call fcn.18002aa10
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm7, dword [0x180105adc]
test ax, ax
je 0x18002927a
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
movaps xmm3, xmm6
movaps xmm2, xmm7
movaps xmm1, xmm6
mov ecx, dword [rax]
call fcn.18002aa10
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800292b5
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm8
mov ecx, dword [rax]
call fcn.18002aa10
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800292ef
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm7
mov ecx, dword [rax]
call fcn.18002aa10
movzx ebx, byte [0x18014de22]
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0x3882114bde571ad4
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 2
call fcn.18003c460
mov qword [0x1801b3ad0], rdi
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
cmp byte [0x1801b12bc], r13b
je 0x1800293b7
call fcn.18003c460
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [0x18014e958], r13
jmp 0x1800293fd
call fcn.18003c460
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 3
mov qword [0x18014e960], r13
mov dword [0x18014e888], r13d
call fcn.18003c460
cmp byte [0x1801b12bb], r13b
je 0x1800294d7
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rbx, 0x57fff03e423a4c0b
mov qword [0x1801b3ad0], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov dword [0x18014e878], 1
call fcn.18003c460
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
movabs rax, 0x4f8644af03d0e0d6
mov qword [0x1801b3ad0], rax
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov dword [0x18014e878], 1
call fcn.18003c460
cmp byte [0x1801b11e5], r13b
je 0x1800294ec
lea rcx, str.WEAPON_BZGAS
call fcn.18001f6e0
movzx ecx, byte [0x1801b12b6]
call fcn.180003a30
cmp byte [0x1801b11e6], r13b
je 0x18002950d
lea rcx, str.WEAPON_STUNGUN
call fcn.18001f6e0
cmp byte [0x1801b11e7], r13b
je 0x180029522
lea rcx, str.WEAPON_RAILGUN
call fcn.18001f6e0
call fcn.180020310
movzx eax, byte [0x1801b022d]
test al, al
je 0x1800295a1
mov ebx, eax
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0x7a6535691b477c48
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e958], rax
mov dword [0x18014e878], 2
call fcn.18003c460
cmp byte [0x1801b11e8], r13b
je 0x1800295b6
lea rcx, str.WEAPON_STICKYBOMB
call fcn.18001f6e0
cmp byte [0x1801b11e9], r13b
je 0x1800295cb
lea rcx, str.WEAPON_FLAREGUN
call fcn.18001f6e0
cmp byte [0x1801b11ea], r13b
je 0x1800295e0
lea rcx, str.WEAPON_MOLOTOV
call fcn.18001f6e0
cmp byte [0x1801b11eb], r13b
je 0x1800295f5
lea rcx, str.WEAPON_FIREWORK
call fcn.18001f6e0
cmp byte [0x1801b11f4], r13b
je 0x180029603
call fcn.18001e9c0
call fcn.18001d310
call fcn.18001daa0
call fcn.18001e230
call fcn.180020710
call fcn.18001f2c0
movabs rbx, 0x997abd671d25ca0b
movabs r12, 0x7fffffffffffffff
cmp byte [0x1801b11fa], r13b
je 0x180029dd4
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [0x18014e958], r13
mov dword [0x18014e878], 2
call fcn.18003c460
cmp dword [rax], r13d
je 0x180029dd4
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r13, r8d
shl r13, 5
lea rbx, [0x18014de40]
add r13, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r12, r8d
shl r12, 5
add r12, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
add r14, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
add rdi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
lea rax, [0x18014de40]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rax, r8d
shl rax, 5
lea rcx, [0x18014de40]
add rax, rcx
mov qword [rsp + 0x40], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
lea rax, [0x18014de40]
add r9, rax
mov rdx, qword [r9 + 0x10]
mov rcx, qword [rsp + 0x40]
mov r8, qword [rcx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, r8
jb 0x18002a697
cmp qword [r9 + 0x18], 0xf
jbe 0x180029887
mov r9, qword [r9]
cmp qword [rcx + 0x18], 0xf
jbe 0x180029891
mov rcx, qword [rcx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x30]
call fcn.18002cc90
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1800298b8
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x180029905
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x18002994f
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x180029997
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x70]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0xf
jbe 0x1800299de
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rbp - 0x50]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0xf
jbe 0x180029a28
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp - 0x30]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0xf
jbe 0x180029a70
mov r13, qword [r13]
mov rdx, r13
lea rcx, [rbp - 0x10]
call fcn.18002d570
movups xmm8, xmmword [rax]
movups xmmword [rbp + 0x10], xmm8
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm7
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x180029add
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029ad8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029ad8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rbp], r13
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x180029b2b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029b26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029b26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180029b79
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029b74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029b74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x180029bc7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029bc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029bc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180029c16
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029c11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029c11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180029c67
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029c62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029c62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea rcx, [rbp + 0x30]
call fcn.180003700
lea rbx, [rbp + 0x10]
movdqa xmm0, xmm7
psrldq xmm0, 8
movq rsi, xmm0
cmp rsi, 0xf
seta r15b
movq rdi, xmm8
cmova rbx, rdi
movq rcx, xmm7
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdx, rbx
nop dword [rax]
movzx ecx, byte [rbx]
mov byte [rdx + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x180029cc0
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
movabs rax, 0xd80958fc74e988a6
mov qword [0x1801b3ad0], rax
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0x9a9112a0fe9a4713
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [0x18014e958], r13
mov dword [0x18014e878], 2
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
movabs rax, 0x95a88f0b409cda47
mov qword [0x1801b3ad0], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [0x18014e958], r14
mov dword [0x18014e878], 2
call fcn.18003c460
nop
test r15b, r15b
je 0x180029db6
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x180029dae
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029dae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800d06f0
movabs r12, 0x7fffffffffffffff
movabs rbx, 0x997abd671d25ca0b
movabs rdi, 0xd80958fc74e988a6
cmp byte [0x1801b11f9], 0
je 0x18002a183
mov dword [0x18014e878], r13d
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rdi
call fcn.18003c460
mov ecx, dword [rax]
mov dword [0x18014e888], r13d
mov qword [0x1801b3ad0], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014e950], rax
mov qword [0x18014e958], r13
mov dword [0x18014e878], 2
call fcn.18003c460
cmp dword [rax], 0
je 0x18002a183
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
lea r13, [0x18014e2a0]
add rdi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
add r14, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
add rbx, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
add r9, r13
mov rax, qword [r9 + 0x10]
mov rcx, qword [r15 + 0x10]
sub r12, rax
cmp r12, rcx
jb 0x18002a691
cmp qword [r9 + 0x18], 0xf
jbe 0x180029f78
mov r9, qword [r9]
cmp qword [r15 + 0x18], 0xf
jbe 0x180029f82
mov r15, qword [r15]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x10]
call fcn.18002cc90
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x180029fa9
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor r13d, r13d
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x180029ff3
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x18002a03a
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18002a086
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.18002d570
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18002a102
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a0fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a0fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d06f0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea rcx, [rbp - 0x70]
call fcn.180003700
nop
lea rcx, [rbp - 0x50]
call fcn.180003700
nop
lea rcx, [rbp + 0x10]
call fcn.180003700
lea rcx, [rsp + 0x70]
call fcn.18002e1a0
mov rbx, rax
mov rcx, qword [rbp - 0x80]
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
sub rax, rbx
movzx ecx, byte [rbx]
mov byte [rax + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x18002a152
call fcn.18002fe80
mov ecx, eax
xor edx, edx
call fcn.18002f8a0
mov ecx, eax
mov rdx, rdi
call fcn.18002dff0
nop
lea rcx, [rsp + 0x70]
call fcn.180003700
call fcn.180020270
call fcn.1800197b0
call fcn.180019b20
movzx ecx, byte [0x1801b11f2]
call fcn.18001f220
movzx ecx, byte [0x1801b11f3]
call fcn.18001f180
call fcn.180022310
call fcn.1800181c0
call fcn.180005b20
call fcn.1800195e0
call fcn.18000e310
call fcn.1800191f0
call fcn.18001ff50
call fcn.1800200e0
call fcn.180020c40
call fcn.180019590
call fcn.180018980
call fcn.180018b00
call fcn.18001cf70
movzx ecx, byte [0x1801b11fc]
call fcn.18001b370
call fcn.18001aab0
call fcn.180019370
call fcn.180018e60
call fcn.180018320
call fcn.180018570
call fcn.180018080
call fcn.180017c40
mov edx, 0x40001
lea rcx, [rsp + 0x40]
call fcn.18002fe50
mov r8d, 0x1290
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.18002eba0
mov rcx, qword [rax]
cmp byte [0x1801b121b], 0
je 0x18002a250
mov dword [rcx], 1
jmp 0x18002a253
mov dword [rcx], r13d
call fcn.180016bd0
call fcn.1800158a0
call fcn.180015450
call fcn.180003a00
call fcn.1800039d0
call fcn.180003980
call fcn.1800168c0
call fcn.180016680
call fcn.180015190
call fcn.180015c50
call fcn.180004160
call fcn.180004390
call fcn.180004fd0
call fcn.1800054c0
call fcn.180004560
call fcn.1800070d0
call fcn.180013d80
call fcn.180007000
call fcn.180005fd0
call fcn.180006330
call fcn.180004b80
call fcn.180004a00
call fcn.180005a90
call fcn.1800141d0
call fcn.180014460
call fcn.180014650
call fcn.180014840
call fcn.180014a30
call fcn.180005640
call fcn.1800058d0
call fcn.180015e80
call fcn.1800065d0
call fcn.180006810
call fcn.180006a50
call fcn.180006e00
call fcn.180007240
call fcn.1800073b0
call fcn.180007670
call fcn.180007f40
call fcn.1800080e0
call fcn.180008cc0
call fcn.180008190
call fcn.180008920
call fcn.180008300
call fcn.180008df0
call fcn.180009470
call fcn.180009e00
call fcn.18000a060
call fcn.18000a270
call fcn.18000a360
call fcn.18000a3b0
call fcn.18000a400
call fcn.18000a5d0
call fcn.18000a8d0
call fcn.18000aa40
call fcn.18000ab20
call fcn.18000ac90
call fcn.18000aee0
movzx ecx, byte [0x1801b3ad8]
call fcn.18000d4b0
call fcn.180015f20
call fcn.180003c60
call fcn.180006c90
call fcn.18000e490
call fcn.18000b7c0
call fcn.180008d10
call fcn.180008da0
call fcn.18000ba20
call fcn.18000bc40
call fcn.18000bcf0
call fcn.18000c090
call fcn.18000c140
call fcn.18000cc40
call fcn.18000d8e0
call fcn.18000cee0
call fcn.180012e90
call fcn.180012640
call fcn.18000cf40
call fcn.18000cf70
call fcn.18000d020
movzx ecx, byte [0x1801b1261]
call fcn.18000d4b0
call fcn.18000bff0
call fcn.18000e080
call fcn.18000f040
call fcn.18000f330
call fcn.18000f6a0
call fcn.1800132e0
call fcn.18000f9a0
call fcn.180010110
call fcn.180010880
call fcn.180010ff0
call fcn.180011760
call fcn.180011ed0
call fcn.180012fd0
call fcn.1800137b0
call fcn.180013990
call fcn.18000e960
call fcn.180013f70
call fcn.180014030
call fcn.1800140a0
cmp byte [0x1801b1220], 0
je 0x18002a655
call fcn.18002fe80
mov r15d, eax
mov ebx, r13d
movabs r12, 0x2513dfb0fb8400fe
movss xmm8, dword [0x180103d30]
nop dword [rax + rax]
mov ecx, ebx
call fcn.18002fd50
mov esi, eax
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movaps xmm2, xmm6
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.18002e5a0
movups xmm7, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x20], xmm0
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp - 0x10]
call fcn.18002fda0
mov ecx, ebx
call fcn.18002e240
mov ecx, eax
call fcn.18002e290
mov ecx, esi
call fcn.18002f760
test eax, eax
je 0x18002a64a
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
movss xmm2, dword [rbp - 0x20]
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
movaps xmm0, xmm7
call fcn.18002e1b0
mov ecx, ebx
call fcn.18002e240
mov ecx, eax
call fcn.18002e290
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.18002ef90
nop
lea r8, [rbp - 0x70]
lea rdx, str.UI_COLOUR_RED
lea rcx, [rsp + 0x70]
call fcn.18002c460
nop
lea r8, [rbp - 0x70]
lea rdx, str.UI_COLOUR_GREEN
lea rcx, [rsp + 0x50]
call fcn.18002c460
nop
mov rcx, qword [rbp - 0x80]
inc rcx
call fcn.1800d0880
mov rdi, rax
mov rcx, qword [rsp + 0x60]
inc rcx
call fcn.1800d0880
mov r14, rax
lea rcx, [rsp + 0x70]
call fcn.18002e1a0
mov rdx, rdi
sub rdx, rax
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18002a572
lea rcx, [rsp + 0x50]
call fcn.18002e1a0
mov rdx, r14
sub rdx, rax
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18002a590
mov ecx, 7
call fcn.18002e9f0
movaps xmm1, xmm8
movaps xmm0, xmm6
call fcn.18002e990
call fcn.18002e8d0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18002e820
call fcn.18002e730
call fcn.18002e6f0
mov r8d, 0x11
mov edx, esi
mov ecx, r15d
call fcn.18002e120
test eax, eax
cmovne rdi, r14
mov rcx, rdi
call fcn.18002e6b0
movss xmm1, dword [rsp + 0x48]
movss xmm0, dword [rsp + 0x40]
call fcn.18002e650
mov rcx, r12
call fcn.18002fe20
mov dword [rsp + 0x20], 0xff
xor edx, edx
lea ecx, [rdx + 5]
mov r9d, 0xff
lea r8d, [rdx + 0x4e]
call fcn.18002e820
nop
lea rcx, [rsp + 0x50]
call fcn.180003700
nop
lea rcx, [rsp + 0x70]
call fcn.180003700
nop
lea rcx, [rbp - 0x70]
call fcn.180003700
inc ebx
cmp ebx, 0x20
jl 0x18002a480
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.1800d0360
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18002ee60
int3
call fcn.18002ee60
int3