Function at 0x180028b80
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180132408]
xor rax, rsp
mov qword [rbp + 0x50], rax
xor r13d, r13d
call fcn.180028750
call fcn.180027050
call fcn.1800259e0
call fcn.180024e80
call fcn.180024430
call fcn.180023950
movzx ecx, byte [0x1801ae05b]
call fcn.180003aa0
xorps xmm6, xmm6
movabs rdi, 0xd80958fc74e988a6
movabs rbx, 0x9a9112a0fe9a4713
cmp byte [0x1801ae05c], r13b
je 0x180028d86
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [0x18014c778], r13
mov dword [0x18014c698], 2
call fcn.18003c7d0
mov ebx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rsi, 0x36d782f68b309bda
mov qword [0x1801b1910], rsi
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov dword [0x18014c698], 1
call fcn.18003c7d0
cmp dword [rax], r13d
je 0x180028d86
mov dword [0x18014c6a8], r13d
movabs rax, 0xe00f2ab100b76e89
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], r13d
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 2
call fcn.18003c7d0
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rsi
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov dword [0x18014c698], 1
call fcn.18003c7d0
mov dword [0x18014c6a8], r13d
movabs rax, 0xfeb2dded3509562e
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
movss xmm0, dword [0x180102c4c]
movss dword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 2
call fcn.18003c7d0
cmp byte [0x1801af000], r13b
je 0x180028e11
mov ebx, r13d
movabs rsi, 0x4cffc65454c93a49
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rsi
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov qword [0x18014c780], r13
mov dword [0x18014c698], 3
call fcn.18003c7d0
inc ebx
cmp ebx, 0x3f
jl 0x180028da0
mov dword [0x18014c6a8], r13d
movabs rax, 0xd821490579791273
mov dword [0x18014c698], 1
cmp byte [0x1801af003], r13b
je 0x180028eb7
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
call fcn.18003c7d0
mov dword [0x18014c6a8], r13d
movabs rax, 0xb80d8756b4668ab6
mov qword [0x1801b1910], rax
lea rbx, str.scr_rcbarry2
mov qword [0x18014c770], rbx
mov dword [0x18014c698], 1
call fcn.18003c7d0
mov dword [0x18014c6a8], r13d
mov qword [0x18014c770], rbx
mov dword [0x18014c698], 1
movabs rax, 0x6c38af3693a69a91
jmp 0x180028ebe
mov qword [0x18014c770], r13
mov qword [0x1801b1910], rax
call fcn.18003c7d0
call fcn.180023400
cmp byte [0x1801ae05f], r13b
je 0x180028ff3
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ebx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0xeef059fad016d209
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov dword [0x18014c698], 1
call fcn.18003c7d0
mov edi, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0x15d757606d170c3c
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov dword [0x18014c698], 1
call fcn.18003c7d0
cmp edi, dword [rax]
jge 0x180028fe9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1801b1cc4]
cmp eax, 0xc8
jbe 0x180028fe9
mov dword [0x18014c6a8], r13d
movabs rax, 0x6b76dc1f3ae6e6a3
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
lea eax, [rdi + 1]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 2
call fcn.18003c7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1801b1cc4], eax
movabs rdi, 0xd80958fc74e988a6
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
cmp byte [0x1801af001], r13b
je 0x180029134
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0x3fef770d40960d5a
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 2
call fcn.18003c7d0
movups xmm1, xmmword [rax]
movsd xmm2, qword [rax + 0x10]
mov dword [0x18014c6a8], r13d
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
movss dword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov qword [rsp + 0x40], r13
movsd qword [rbp - 0x20], xmm2
subss xmm2, dword [0x1801038d0]
movss dword [rsp + 0x40], xmm2
mov rax, qword [rsp + 0x40]
mov qword [0x18014c780], rax
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c788], rax
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x40]
mov qword [0x18014c790], rax
mov qword [rsp + 0x40], r13
movss dword [rsp + 0x40], xmm2
mov rax, qword [rsp + 0x40]
mov qword [0x18014c798], rax
mov dword [0x18014c698], 6
movabs rax, 0xbb7454baff08fe25
jmp 0x18002913e
movabs rax, 0x31b73d1ea9f01da2
mov qword [0x1801b1910], rax
call fcn.18003c7d0
cmp byte [0x1801af006], r13b
je 0x18002932d
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0xae99fb955581844a
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 0xa
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 0xa
mov rax, qword [rsp + 0x40]
mov qword [0x18014c780], rax
mov qword [0x18014c788], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c790], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c798], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c7a0], rax
mov dword [0x18014c698], 7
call fcn.18003c7d0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180029272
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
movaps xmm3, xmm6
movss xmm2, dword [0x18010208c]
movaps xmm1, xmm6
mov ecx, dword [rax]
call fcn.18002aa90
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm7, dword [0x180103cdc]
test ax, ax
je 0x1800292b4
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
movaps xmm3, xmm6
movaps xmm2, xmm7
movaps xmm1, xmm6
mov ecx, dword [rax]
call fcn.18002aa90
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800292f3
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
movaps xmm3, xmm6
movaps xmm2, xmm6
movss xmm1, dword [0x18010208c]
mov ecx, dword [rax]
call fcn.18002aa90
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002932d
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm7
mov ecx, dword [rax]
call fcn.18002aa90
movzx ebx, byte [0x18014ba22]
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0x3882114bde571ad4
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 2
call fcn.18003c7d0
mov qword [0x1801b1910], rdi
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
cmp byte [0x1801af0ec], r13b
je 0x1800293f5
call fcn.18003c7d0
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [0x18014c778], r13
jmp 0x18002943b
call fcn.18003c7d0
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 3
mov qword [0x18014c780], r13
mov dword [0x18014c6a8], r13d
call fcn.18003c7d0
cmp byte [0x1801af0eb], r13b
je 0x180029515
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rbx, 0x57fff03e423a4c0b
mov qword [0x1801b1910], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov dword [0x18014c698], 1
call fcn.18003c7d0
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
movabs rax, 0x4f8644af03d0e0d6
mov qword [0x1801b1910], rax
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov dword [0x18014c698], 1
call fcn.18003c7d0
cmp byte [0x1801af015], r13b
je 0x18002952a
lea rcx, str.WEAPON_BZGAS
call fcn.18001f6d0
movzx ecx, byte [0x1801af0e6]
call fcn.180003aa0
cmp byte [0x1801af016], r13b
je 0x18002954b
lea rcx, str.WEAPON_STUNGUN
call fcn.18001f6d0
cmp byte [0x1801af017], r13b
je 0x180029560
lea rcx, str.WEAPON_RAILGUN
call fcn.18001f6d0
call fcn.180020300
movzx eax, byte [0x1801ae05d]
test al, al
je 0x1800295df
mov ebx, eax
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0x7a6535691b477c48
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ebx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c778], rax
mov dword [0x18014c698], 2
call fcn.18003c7d0
cmp byte [0x1801af018], r13b
je 0x1800295f4
lea rcx, str.WEAPON_STICKYBOMB
call fcn.18001f6d0
cmp byte [0x1801af019], r13b
je 0x180029609
lea rcx, str.WEAPON_FLAREGUN
call fcn.18001f6d0
cmp byte [0x1801af01a], r13b
je 0x18002961e
lea rcx, str.WEAPON_MOLOTOV
call fcn.18001f6d0
cmp byte [0x1801af01b], r13b
je 0x180029633
lea rcx, str.WEAPON_FIREWORK
call fcn.18001f6d0
cmp byte [0x1801af024], r13b
je 0x180029641
call fcn.18001e990
call fcn.18001d2e0
call fcn.18001da70
call fcn.18001e200
call fcn.1800206f0
call fcn.18001f2b0
movabs rbx, 0x997abd671d25ca0b
movabs r12, 0x7fffffffffffffff
cmp byte [0x1801af02a], r13b
je 0x180029e04
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [0x18014c778], r13
mov dword [0x18014c698], 2
call fcn.18003c7d0
cmp dword [rax], r13d
je 0x180029e04
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
lea rbx, [0x18014bc60]
add r14, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r13, r8d
shl r13, 5
add r13, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r12, r8d
shl r12, 5
add r12, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
add rdi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
lea rax, [0x18014bc60]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rax, r8d
shl rax, 5
lea rcx, [0x18014bc60]
add rax, rcx
mov qword [rsp + 0x40], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
lea rax, [0x18014bc60]
add r9, rax
mov rdx, qword [r9 + 0x10]
mov rcx, qword [rsp + 0x40]
mov r8, qword [rcx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, r8
jb 0x18002a711
cmp qword [r9 + 0x18], 0x10
jb 0x1800298c5
mov r9, qword [r9]
cmp qword [rcx + 0x18], 0x10
jb 0x1800298cf
mov rcx, qword [rcx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x30]
call fcn.18002cca0
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x1800298f6
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x180029940
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x18002998d
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0x10
jb 0x1800299d5
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rbp - 0x70]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0x10
jb 0x180029a1f
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp - 0x50]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0x10
jb 0x180029a67
mov r13, qword [r13]
mov rdx, r13
lea rcx, [rbp - 0x30]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xor r13d, r13d
mov qword [rbp], r13
mov qword [rbp + 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x180029ab1
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x10]
call fcn.18002d590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180029b19
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029b14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029b14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rbp], r13
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180029b67
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029b62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029b62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180029bb5
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029bb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029bb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180029c03
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029bfe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029bfe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180029c53
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029c4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029c4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x180029ca5
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029ca0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029ca0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
lea rcx, [rbp + 0x30]
call fcn.180003730
lea rbx, [rbp + 0x10]
mov rsi, qword [rbp + 0x28]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rbp + 0x10]
cmovae rbx, rdi
mov rcx, qword [rbp + 0x20]
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdx, rbx
nop dword [rax]
movzx ecx, byte [rbx]
mov byte [rdx + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x180029cf0
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
movabs rax, 0xd80958fc74e988a6
mov qword [0x1801b1910], rax
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0x9a9112a0fe9a4713
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [0x18014c778], r13
mov dword [0x18014c698], 2
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
movabs rax, 0x95a88f0b409cda47
mov qword [0x1801b1910], rax
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [0x18014c778], r14
mov dword [0x18014c698], 2
call fcn.18003c7d0
nop
test r15b, r15b
je 0x180029de6
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x180029dde
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029dde
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800cdf20
movabs r12, 0x7fffffffffffffff
movabs rbx, 0x997abd671d25ca0b
movabs rdi, 0xd80958fc74e988a6
cmp byte [0x1801af029], 0
je 0x18002a200
mov dword [0x18014c698], r13d
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rdi
call fcn.18003c7d0
mov ecx, dword [rax]
mov dword [0x18014c6a8], r13d
mov qword [0x1801b1910], rbx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x40], ecx
mov rax, qword [rsp + 0x40]
mov qword [0x18014c770], rax
mov qword [0x18014c778], r13
mov dword [0x18014c698], 2
call fcn.18003c7d0
cmp dword [rax], 0
je 0x18002a200
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
lea r13, [0x18014c0c0]
add rdi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
add r14, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
add rbx, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
add r9, r13
mov rax, qword [r9 + 0x10]
mov rcx, qword [r15 + 0x10]
sub r12, rax
cmp r12, rcx
jb 0x18002a70b
cmp qword [r9 + 0x18], 0x10
jb 0x180029fa8
mov r9, qword [r9]
cmp qword [r15 + 0x18], 0x10
jb 0x180029fb2
mov r15, qword [r15]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x30]
call fcn.18002cca0
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x180029fd9
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor r13d, r13d
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x18002a023
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x18002a06f
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x18002a0b9
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.18002d590
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18002a132
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a12d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18002a183
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a17e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a17e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea rcx, [rbp - 0x50]
call fcn.180003730
nop
lea rcx, [rbp + 0x30]
call fcn.180003730
lea rcx, [rbp - 0x70]
call fcn.18002e1c0
mov rbx, rax
mov rcx, qword [rbp - 0x60]
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
sub rax, rbx
nop dword [rax + rax]
movzx ecx, byte [rbx]
mov byte [rax + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x18002a1d0
call fcn.18002fea0
mov ecx, eax
xor edx, edx
call fcn.18002f8c0
mov ecx, eax
mov rdx, rdi
call fcn.18002e010
nop
lea rcx, [rbp - 0x70]
call fcn.180003730
call fcn.180020260
call fcn.1800197a0
call fcn.180019b10
movzx ecx, byte [0x1801af022]
call fcn.18001f200
movzx ecx, byte [0x1801af023]
call fcn.18001f150
call fcn.1800222f0
call fcn.1800181e0
call fcn.180005b80
call fcn.1800195d0
call fcn.18000e3c0
call fcn.180019210
call fcn.18001ff40
call fcn.1800200d0
call fcn.180020c20
call fcn.180019580
call fcn.1800189a0
call fcn.180018b20
call fcn.18001cf40
movzx ecx, byte [0x1801af02c]
call fcn.18001b340
call fcn.18001aaa0
call fcn.180019390
call fcn.180018e80
call fcn.180018340
call fcn.180018590
call fcn.1800180a0
call fcn.180017c60
mov edx, 0x40001
lea rcx, [rsp + 0x40]
call fcn.18002fe70
mov r8d, 0x1290
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.18002ebc0
mov rcx, qword [rax]
cmp byte [0x1801af04b], 0
je 0x18002a2cd
mov dword [rcx], 1
jmp 0x18002a2d0
mov dword [rcx], r13d
call fcn.180016be0
call fcn.1800158b0
call fcn.180015460
call fcn.180003a70
call fcn.180003a40
call fcn.1800039f0
call fcn.1800168d0
call fcn.180016690
call fcn.1800151a0
call fcn.180015c60
call fcn.1800041d0
call fcn.180004400
call fcn.180005030
call fcn.180005520
call fcn.1800045d0
call fcn.180007140
call fcn.180013d90
call fcn.180007070
call fcn.180006030
call fcn.180006390
call fcn.180004be0
call fcn.180004a60
call fcn.180005af0
call fcn.1800141e0
call fcn.180014470
call fcn.180014660
call fcn.180014850
call fcn.180014a40
call fcn.1800056a0
call fcn.180005930
call fcn.180015e90
call fcn.180006630
call fcn.180006870
call fcn.180006ab0
call fcn.180006e60
call fcn.1800072b0
call fcn.180007420
call fcn.1800076e0
call fcn.180007fb0
call fcn.180008150
call fcn.180008d50
call fcn.180008200
call fcn.180008980
call fcn.180008370
call fcn.180008e80
call fcn.1800094f0
call fcn.180009e80
call fcn.18000a0e0
call fcn.18000a2f0
call fcn.18000a3e0
call fcn.18000a430
call fcn.18000a480
call fcn.18000a650
call fcn.18000a950
call fcn.18000aac0
call fcn.18000aba0
call fcn.18000ad10
call fcn.18000af60
movzx ecx, byte [0x1801b1918]
call fcn.18000d550
call fcn.180015f30
call fcn.180003cd0
call fcn.180006cf0
call fcn.18000e540
call fcn.18000b840
call fcn.180008da0
call fcn.180008e30
call fcn.18000baa0
call fcn.18000bcc0
call fcn.18000bd70
call fcn.18000c110
call fcn.18000c1c0
call fcn.18000ccc0
call fcn.18000d980
call fcn.18000cf70
call fcn.180012eb0
call fcn.180012660
call fcn.18000cfd0
call fcn.18000d000
call fcn.18000d0c0
movzx ecx, byte [0x1801af091]
call fcn.18000d550
call fcn.18000c070
call fcn.18000e130
call fcn.18000f110
call fcn.18000f400
call fcn.18000f780
call fcn.180013300
call fcn.18000fa80
call fcn.1800101d0
call fcn.180010920
call fcn.180011070
call fcn.1800117c0
call fcn.180011f10
call fcn.180012ff0
call fcn.1800137d0
call fcn.1800139b0
call fcn.18000ea30
call fcn.180013f80
call fcn.180014040
call fcn.1800140b0
cmp byte [0x1801af050], 0
je 0x18002a6d4
call fcn.18002fea0
mov r15d, eax
mov ebx, r13d
movabs r12, 0x2513dfb0fb8400fe
movss xmm7, dword [0x180101f24]
mov ecx, ebx
call fcn.18002fd70
mov esi, eax
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movaps xmm2, xmm6
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.18002e5c0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x20], xmm1
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp - 0x10]
call fcn.18002fdc0
mov ecx, ebx
call fcn.18002e260
mov ecx, eax
call fcn.18002e2b0
mov ecx, esi
call fcn.18002f7a0
test eax, eax
je 0x18002a6c9
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
movss xmm2, dword [rbp - 0x20]
movss xmm1, dword [rbp - 0x28]
movss xmm0, dword [rbp - 0x30]
call fcn.18002e1d0
mov ecx, ebx
call fcn.18002e260
mov ecx, eax
call fcn.18002e2b0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.18002efd0
nop
lea r8, [rsp + 0x50]
lea rdx, str.UI_COLOUR_RED
lea rcx, [rsp + 0x70]
call fcn.18002c470
nop
lea r8, [rsp + 0x50]
lea rdx, str.UI_COLOUR_GREEN
lea rcx, [rbp + 0x10]
call fcn.18002c470
nop
mov rcx, qword [rbp - 0x80]
inc rcx
call fcn.1800ce228
mov rdi, rax
mov rcx, qword [rbp + 0x20]
inc rcx
call fcn.1800ce228
mov r14, rax
lea rcx, [rsp + 0x70]
call fcn.18002e1c0
mov rdx, rdi
sub rdx, rax
nop
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18002a5f0
lea rcx, [rbp + 0x10]
call fcn.18002e1c0
mov rdx, r14
sub rdx, rax
nop dword [rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18002a610
mov ecx, 7
call fcn.18002ea10
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.18002e9b0
call fcn.18002e8f0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18002e840
call fcn.18002e750
call fcn.18002e710
mov r8d, 0x11
mov edx, esi
mov ecx, r15d
call fcn.18002e140
test eax, eax
cmovne rdi, r14
mov rcx, rdi
call fcn.18002e6d0
movss xmm1, dword [rsp + 0x48]
movss xmm0, dword [rsp + 0x40]
call fcn.18002e670
mov rcx, r12
call fcn.18002fe40
mov dword [rsp + 0x20], 0xff
xor edx, edx
lea ecx, [rdx + 5]
mov r9d, 0xff
lea r8d, [rdx + 0x4e]
call fcn.18002e840
nop
lea rcx, [rbp + 0x10]
call fcn.180003730
nop
lea rcx, [rsp + 0x70]
call fcn.180003730
nop
lea rcx, [rsp + 0x50]
call fcn.180003730
inc ebx
cmp ebx, 0x20
jl 0x18002a4f7
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.1800cdb80
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18002ee80
int3
call fcn.18002ee80
int3