Function at 0x180001200
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x810
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor edi, edi
mov dword [rax + 0x18], edi
mov dword [rax + 0x10], edi
xor r14d, r14d
mov dword [rsp + 0x868], r14d
call fcn.18000bca0
mov r15, rax
mov qword [rsp + 0x68], rax
call fcn.18000bab0
nop
mov rcx, qword [0x180061bf0]
mov rsi, qword [rcx + 0x126cf528]
mov qword [rsp + 0x318], rsi
test rsi, rsi
jne 0x18000129f
xor al, al
jmp 0x18000183e
mov rcx, qword [rsi + 0x1d8]
test rcx, rcx
jne 0x1800012b2
xor al, al
jmp 0x18000183e
mov rdx, qword [rcx + 0x38]
test rdx, rdx
je 0x1800012c5
cmp dword [rcx + 0x40], 0
jle 0x1800012c5
mov cl, 1
jmp 0x1800012c7
xor cl, cl
test cl, cl
je 0x18000466d
mov rdx, qword [rdx]
test rdx, rdx
jne 0x1800012de
xor al, al
jmp 0x18000183e
mov r12, qword [rdx + 0x30]
mov qword [rsp + 0xb0], r12
test r12, r12
jne 0x1800012f6
xor al, al
jmp 0x18000183e
mov rcx, qword [r12 + 0x298]
mov qword [rsp + 0x310], rcx
test rcx, rcx
jne 0x180001312
xor al, al
jmp 0x18000183e
mov rbx, qword [r12 + 0x348]
test rbx, rbx
jne 0x180001326
xor al, al
jmp 0x18000183e
cmp qword [r12 + 0x338], 0
je 0x180001482
cmp byte [0x1800610d8], 0
je 0x180001368
mov byte [rax + 0xc0], 1
cmp byte [0x1800610d9], 0
jne 0x180001390
mov rdx, qword [rdx + 0x30]
mov rcx, qword [r12 + 0x338]
call fcn.180043140
mov byte [0x1800610d9], 1
jmp 0x180001390
mov byte [rax + 0xc0], 0
cmp byte [0x1800610d9], 0
je 0x180001390
mov rdx, qword [rdx + 0x30]
mov rcx, qword [r12 + 0x338]
call fcn.1800432c0
mov byte [0x1800610d9], 0
mov rax, qword [r12 + 0x338]
cmp qword [rax + 0x29a0], 0
je 0x180001405
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.180044080
movups xmm0, xmmword [rax]
movups xmmword [0x180061e18], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [0x180061e28], xmm1
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.180044250
movups xmm0, xmmword [rax]
movups xmmword [0x180061e30], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [0x180061e40], xmm1
mov rcx, rbx
call fcn.180044420
movss dword [0x180061e48], xmm0
jmp 0x1800014de
mov rcx, qword [rbx + 0x24b8]
test rcx, rcx
je 0x18000141e
cmp dword [rbx + 0x24c0], 0
jle 0x18000141e
mov al, 1
jmp 0x180001420
xor al, al
test al, al
je 0x18000468e
mov rax, qword [rcx]
test rax, rax
je 0x18000183e
movups xmm0, xmmword [rax + 0x14b0]
movups xmmword [0x180061e18], xmm0
movsd xmm1, qword [rax + 0x14c0]
movsd qword [0x180061e28], xmm1
movups xmm0, xmmword [rax + 0x14c8]
movups xmmword [0x180061e30], xmm0
movsd xmm1, qword [rax + 0x14d8]
movsd qword [0x180061e40], xmm1
mov rcx, rbx
call fcn.180044420
movss dword [0x180061e48], xmm0
jmp 0x1800014de
movups xmm0, xmmword [rbx + 0x13a0]
movups xmmword [0x180061e18], xmm0
movsd xmm1, qword [rbx + 0x13b0]
movsd qword [0x180061e28], xmm1
movups xmm0, xmmword [rbx + 0x13b8]
movups xmmword [0x180061e30], xmm0
movsd xmm1, qword [rbx + 0x13c8]
movsd qword [0x180061e40], xmm1
movss xmm0, dword [rbx + 0x13d0]
movss dword [0x180061e48], xmm0
cmp byte [rax + 0xc0], 0
je 0x1800014de
mov byte [rax + 0xc0], 0
cmp byte [0x180061be8], 0
jne 0x180001786
lea rax, str.VB_head_fx
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0xb
mov dword [rsp + 0x44], 0xb
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c7c], eax
lea rax, str.spine_05
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 9
mov dword [rsp + 0x44], 9
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c80], eax
lea rax, str.pelvis
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 7
mov dword [rsp + 0x44], 7
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c84], eax
lea rax, str.upperarm_l
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0xb
mov dword [rsp + 0x44], 0xb
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c88], eax
lea rax, str.upperarm_r
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0xb
mov dword [rsp + 0x44], 0xb
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c8c], eax
lea rax, str.lowerarm_l
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0xb
mov dword [rsp + 0x44], 0xb
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c90], eax
lea rax, str.lowerarm_r
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0xb
mov dword [rsp + 0x44], 0xb
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c94], eax
lea rax, str.hand_l
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 7
mov dword [rsp + 0x44], 7
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c98], eax
lea rax, str.hand_r
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 7
mov dword [rsp + 0x44], 7
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061c9c], eax
lea rax, str.thigh_l
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 8
mov dword [rsp + 0x44], 8
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061ca0], eax
lea rax, str.thigh_r
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 8
mov dword [rsp + 0x44], 8
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061ca4], eax
lea rax, str.calf_l
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 7
mov dword [rsp + 0x44], 7
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061ca8], eax
lea rax, str.calf_r
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 7
mov dword [rsp + 0x44], 7
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061cac], eax
lea rax, str.calf_twist_01_l
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0x10
mov dword [rsp + 0x44], 0x10
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061cb0], eax
lea rax, str.calf_twist_01_r
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0x10
mov dword [rsp + 0x44], 0x10
lea rcx, [rsp + 0x38]
call fcn.180044770
mov dword [0x180061cb4], eax
mov byte [0x180061be8], 1
movups xmm0, xmmword [rsi + 0x178]
movups xmmword [rsp + 0x1c0], xmm0
movq rax, xmm0
mov qword [rsp + 0x1c0], rax
test rax, rax
je 0x180004666
psrldq xmm0, 8
movq rcx, xmm0
mov qword [rsp + 0x348], rcx
mov qword [rsp + 0x1c8], rcx
test ecx, ecx
jle 0x180004666
mov rax, rcx
shr rax, 0x20
cmp eax, ecx
jl 0x180004666
xor r8d, r8d
movsd xmm15, qword [0x180058e88]
movss xmm13, dword [0x180058e7c]
movsd xmm7, qword [0x180058ef0]
movsd xmm8, qword [0x180058dd8]
movss xmm9, dword [0x180058f44]
movss xmm12, dword [0x180058fd0]
movss xmm14, dword [0x180058e3c]
movss xmm11, dword [0x180058fa4]
movsd xmm10, qword [0x180058f20]
mov dword [rsp + 0xdc], r8d
cmp r8d, ecx
jne 0x18000188d
mov al, 1
lea r11, [rsp + 0x810]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp qword [rsp + 0x1c0], 0
je 0x1800018ab
test r8d, r8d
js 0x1800018ab
cmp r8d, dword [rsp + 0x1c8]
jge 0x1800018ab
mov al, 1
jmp 0x1800018ad
xor al, al
test al, al
je 0x1800046af
movsxd rcx, r8d
mov rax, qword [rsp + 0x1c0]
mov rdx, qword [rax + rcx*8]
test rdx, rdx
je 0x180004656
movups xmm0, xmmword [rdx + 0xa0]
movups xmmword [rsp + 0x38], xmm0
movq rax, xmm0
mov qword [rsp + 0x38], rax
test rax, rax
je 0x180004656
psrldq xmm0, 8
movq rcx, xmm0
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x40], rcx
test ecx, ecx
jle 0x180004656
mov rax, rcx
shr rax, 0x20
cmp eax, ecx
jl 0x180004656
xor ebx, ebx
mov dword [rsp + 0xd8], ebx
cmp ebx, ecx
je 0x18000464e
cmp qword [rsp + 0x38], 0
je 0x18000193e
test ebx, ebx
js 0x18000193e
cmp ebx, dword [rsp + 0x40]
jge 0x18000193e
mov al, 1
jmp 0x180001940
xor al, al
test al, al
je 0x1800046d0
movsxd r13, ebx
mov qword [rsp + 0x70], r13
mov rsi, qword [rsp + 0x38]
mov qword [rsp + 0x850], rsi
mov rbx, qword [rsi + r13*8]
test rbx, rbx
je 0x180003ab6
call fcn.180005e60
mov rdx, rax
mov rcx, rbx
call fcn.180042c80
test al, al
je 0x18000277e
mov r15, qword [rsi + r13*8]
test r15, r15
je 0x180003ab1
cmp byte [0x1800610d1], 0
je 0x1800019ae
mov rax, qword [r12 + 0x338]
test rax, rax
je 0x1800019ae
cmp rax, r15
je 0x180003ab1
mov rax, qword [r15 + 0x2b0]
test rax, rax
je 0x180003ab1
movzx ebx, byte [rax + 0x1211]
mov rax, qword [rsp + 0x310]
movzx edi, byte [rax + 0x1211]
movzx esi, byte [r15 + 0x982]
movzx r14d, byte [r15 + 0x758]
cmp qword [r15 + 0x318], 0
je 0x180003ab1
mov r9, qword [r12 + 0x338]
mov rdx, r15
call fcn.180045420
movzx r12d, al
mov rdx, qword [rsp + 0x850]
mov rdx, qword [rdx + r13*8]
mov rcx, qword [rdx + 0x198]
test rcx, rcx
je 0x180003ab1
movups xmm2, xmmword [rcx + 0x120]
movups xmmword [rsp + 0x90], xmm2
movsd xmm0, qword [rcx + 0x130]
movsd qword [rsp + 0xa0], xmm0
cmp byte [0x1800610d2], 0
je 0x18000275a
movups xmm0, xmmword [rdx + 0x5c70]
movups xmmword [rsp + 0x80], xmm0
movq r13, xmm0
test r13, r13
je 0x180003ab1
psrldq xmm0, 8
movq rcx, xmm0
mov qword [rsp + 0x88], rcx
test ecx, ecx
jle 0x180003ab1
mov rax, rcx
shr rax, 0x20
cmp eax, ecx
jl 0x180003ab1
cmp byte [0x1800610d0], 0
je 0x180001ab9
mov rax, qword [rsp + 0xb0]
cmp qword [rax + 0x338], 0
je 0x180001ab9
cmp bl, dil
je 0x180003ab1
cmp byte [0x1800610cf], 0
je 0x180001acc
test sil, 0x10
jne 0x180003ab1
cmp byte [0x1800610ce], 0
je 0x180001adf
test r14b, 0x10
jne 0x180003ab1
mov eax, dword [0x180061c7c]
mov dword [rsp + 0x2a0], eax
mov ecx, dword [0x180061c80]
mov dword [rsp + 0x2a4], ecx
mov edx, dword [0x180061c84]
mov dword [rsp + 0x2a8], edx
mov dword [rsp + 0x2ac], ecx
mov dword [rsp + 0x2b0], ecx
mov eax, dword [0x180061c88]
mov dword [rsp + 0x2b4], eax
mov dword [rsp + 0x2b8], eax
mov eax, dword [0x180061c90]
mov dword [rsp + 0x2bc], eax
mov dword [rsp + 0x2c0], eax
mov eax, dword [0x180061c98]
mov dword [rsp + 0x2c4], eax
mov dword [rsp + 0x2c8], ecx
mov eax, dword [0x180061c8c]
mov dword [rsp + 0x2cc], eax
mov dword [rsp + 0x2d0], eax
mov eax, dword [0x180061c94]
mov dword [rsp + 0x2d4], eax
mov dword [rsp + 0x2d8], eax
mov eax, dword [0x180061c9c]
mov dword [rsp + 0x2dc], eax
mov dword [rsp + 0x2e0], edx
mov eax, dword [0x180061ca0]
mov dword [rsp + 0x2e4], eax
mov dword [rsp + 0x2e8], eax
mov eax, dword [0x180061ca8]
mov dword [rsp + 0x2ec], eax
mov dword [rsp + 0x2f0], eax
mov eax, dword [0x180061cb0]
mov dword [rsp + 0x2f4], eax
mov dword [rsp + 0x2f8], edx
mov eax, dword [0x180061ca4]
mov dword [rsp + 0x2fc], eax
mov dword [rsp + 0x300], eax
mov eax, dword [0x180061cac]
mov dword [rsp + 0x304], eax
mov dword [rsp + 0x308], eax
mov eax, dword [0x180061cb4]
mov dword [rsp + 0x30c], eax
movaps xmm1, xmm2
subsd xmm1, qword [0x180061e18]
unpckhpd xmm2, xmm2
subsd xmm2, qword [0x180061e20]
movsd xmm0, qword [rsp + 0xa0]
subsd xmm0, qword [0x180061e28]
mulsd xmm2, xmm2
mulsd xmm1, xmm1
addsd xmm2, xmm1
mulsd xmm0, xmm0
addsd xmm2, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x180001c4b
xorps xmm6, xmm6
sqrtsd xmm6, xmm2
jmp 0x180001c56
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
mulsd xmm6, xmm15
divsd xmm6, qword [0x180058f08]
mov edx, 0x1c
lea rcx, [rsp + 0x690]
xor r14d, r14d
mov rax, rdx
dec rdx
test rax, rax
je 0x180001c87
mov qword [rcx], r14
add rcx, 8
jmp 0x180001c73
mov edi, r14d
mov ebx, r14d
mov rsi, qword [rsp + 0x68]
movsxd r8, ebx
cmp r8, 0x1c
jae 0x180001dcd
mov r8d, dword [rsp + r8*4 + 0x2a0]
lea rdx, [rsp + 0x48]
mov rcx, qword [r15 + 0x318]
call fcn.180043450
lea eax, [rbx + 1]
movsxd r8, eax
mov r8d, dword [rsp + r8*4 + 0x2a0]
lea rdx, [rsp + 0xe0]
mov rcx, qword [r15 + 0x318]
call fcn.180043450
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x140]
call fcn.1800047a0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x168]
call fcn.1800047a0
cmp byte [0x180061c0e], r14b
je 0x180001d46
lea rcx, [0x180061128]
test r12b, r12b
lea rax, [0x180061118]
cmovne rcx, rax
call fcn.180009310
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rsp + 0x168]
lea rdx, [rsp + 0x140]
mov rcx, rsi
call fcn.180028890
test ebx, ebx
jne 0x180001d8e
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsp + 0xe0], xmm0
movsd xmm0, qword [rsp + 0x58]
addsd xmm0, xmm7
movsd qword [rsp + 0xf0], xmm0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x510]
call fcn.1800047a0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x140], xmm0
jmp 0x180001d97
movsd xmm0, qword [rsp + 0x140]
cmp edi, 0x1b
jge 0x180001dbd
movsxd rax, edi
movsd qword [rsp + rax*8 + 0x690], xmm0
movsd xmm0, qword [rsp + 0x168]
movsd qword [rsp + rax*8 + 0x698], xmm0
add edi, 2
add ebx, 2
mov r13, qword [rsp + 0x80]
jmp 0x180001c92
movsd xmm3, qword [0x180058fa8]
movaps xmm2, xmm8
movaps xmm4, xmm8
mov ecx, r14d
lea rax, [rsp + 0x690]
nop dword [rax + rax]
movss xmm1, dword [rax]
cvtps2pd xmm1, xmm1
movaps xmm0, xmm1
minsd xmm0, xmm3
movaps xmm3, xmm0
maxsd xmm1, xmm2
movaps xmm2, xmm1
movss xmm0, dword [rax + 4]
cvtps2pd xmm0, xmm0
maxsd xmm0, xmm4
movaps xmm4, xmm0
inc ecx
lea rax, [rax + 8]
cmp ecx, 0xe
jb 0x180001df0
subsd xmm2, xmm3
movsd xmm1, qword [0x180058f18]
subsd xmm1, xmm6
mulsd xmm1, qword [0x180058ea0]
mulsd xmm2, qword [0x180058ec0]
addsd xmm2, xmm3
cvtpd2ps xmm0, xmm2
movss dword [rsp + 0x170], xmm0
addsd xmm1, xmm4
cvtpd2ps xmm0, xmm1
movss dword [rsp + 0x174], xmm0
cmp byte [0x180061c0d], r14b
je 0x180001ed5
movaps xmm0, xmmword [0x180059180]
movups xmmword [rsp + 0xe0], xmm0
lea rcx, [rsp + 0xe0]
call fcn.180009310
movss xmm0, dword [0x1800610f0]
movss dword [rsp + 0x178], xmm0
movss xmm1, dword [0x1800610ec]
movss dword [rsp + 0x17c], xmm1
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x178]
mov rcx, rsi
call fcn.180028890
mov r13, qword [rsp + 0x80]
cmp byte [0x180061c0c], r14b
je 0x18000209f
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x180]
call fcn.1800047a0
movss xmm0, dword [rsp + 0x184]
subss xmm0, dword [0x1800610f4]
movss xmm1, dword [rsp + 0x180]
subss xmm1, dword [0x1800610f0]
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm11, xmm0
movss xmm6, dword [0x1800610d4]
mulss xmm6, xmm9
addss xmm6, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm9, xmm0
mulss xmm9, xmm6
addss xmm9, dword [0x1800610f4]
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm10, xmm0
mulss xmm10, xmm6
addss xmm10, dword [0x1800610f0]
mov rcx, qword [rsp + 0x318]
call fcn.1800445c0
xorps xmm1, xmm1
cvtss2sd xmm1, xmm11
subsd xmm1, xmm0
cvtpd2ps xmm8, xmm1
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, dword [0x180058f44]
addss xmm6, xmm9
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, dword [0x180058f44]
addss xmm0, xmm10
movss dword [rsp + 0x48], xmm0
movss dword [rsp + 0x4c], xmm6
movaps xmm6, xmm8
subss xmm6, dword [0x180058eb8]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm7, xmm0
movss xmm11, dword [0x180058f3c]
mulss xmm7, xmm11
addss xmm7, xmm9
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm11
addss xmm0, xmm10
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm7
addss xmm8, dword [0x180058eb8]
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm11
addss xmm6, xmm9
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm11
addss xmm0, xmm10
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm6
movaps xmm0, xmmword [0x1800591b0]
movups xmmword [rsp + 0xe0], xmm0
lea rcx, [rsp + 0xe0]
call fcn.180009310
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.180028db0
mov r13, qword [rsp + 0x80]
movss xmm9, dword [0x180058f44]
movsd xmm10, qword [0x180058f20]
movss xmm11, dword [0x180058fa4]
cmp byte [0x180061c0f], r14b
je 0x1800025b8
mov rdx, qword [0x180061bd8]
test rdx, rdx
jne 0x1800021b6
xorps xmm0, xmm0
movups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x200], r14
mov qword [rsp + 0x208], r14
lea ecx, [rdx + 0x30]
call fcn.180049438
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x200], 0x22
mov qword [rsp + 0x208], 0x2f
movups xmm0, xmmword [str.Material_RezIn_Master.RezIn_Master]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x18004ce28]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x18004ce38]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], r14b
lea rcx, [rsp + 0x1f0]
call fcn.1800426b0
mov rdx, rax
mov qword [0x180061bd8], rax
mov rax, qword [rsp + 0x208]
cmp rax, 0xf
jbe 0x180002188
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000217c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000217c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov rdx, qword [0x180061bd8]
mov qword [rsp + 0x200], r14
mov qword [rsp + 0x208], 0xf
mov byte [rsp + 0x1f0], 0
test rdx, rdx
jne 0x1800021b6
mov r13, qword [rsp + 0x80]
jmp 0x1800023fc
movzx ecx, byte [0x1800610cd]
and cl, 1
shl cl, 6
movzx eax, byte [rdx + 0x1b8]
and al, 0xbf
or cl, al
mov byte [rdx + 0x1b8], cl
movzx ecx, byte [rdx + 0x1a8]
and cl, 0xfe
movzx eax, byte [0x1800610cc]
and al, 1
or cl, al
mov byte [rdx + 0x1a8], cl
mov ecx, dword [0x1800610c4]
test ecx, ecx
je 0x180002231
sub ecx, 1
je 0x180002228
sub ecx, 1
je 0x18000221f
sub ecx, 1
je 0x180002216
cmp ecx, 1
jne 0x180002238
mov byte [rdx + 0x129], 5
jmp 0x180002238
mov byte [rdx + 0x129], 4
jmp 0x180002238
mov byte [rdx + 0x129], 3
jmp 0x180002238
mov byte [rdx + 0x129], 1
jmp 0x180002238
mov byte [rdx + 0x129], 0
cmp byte [0x180061bd1], 0
jne 0x180002399
lea rax, str.color
mov qword [rsp + 0x350], rax
mov dword [rsp + 0x358], 6
mov dword [rsp + 0x35c], 6
lea rcx, [rsp + 0x350]
call fcn.180044770
mov dword [0x180061e4c], eax
lea rax, str.WireFrameParameterHighlight
mov qword [rsp + 0x360], rax
mov dword [rsp + 0x368], 0x1c
mov dword [rsp + 0x36c], 0x1c
lea rcx, [rsp + 0x360]
call fcn.180044770
mov dword [0x180061e50], eax
lea rax, str.WireFrameFadeOffColor
mov qword [rsp + 0x370], rax
mov eax, 0x16
mov dword [rsp + 0x378], eax
mov dword [rsp + 0x37c], eax
lea rcx, [rsp + 0x370]
call fcn.180044770
mov dword [0x180061e54], eax
lea rax, str.Top_Color
mov qword [rsp + 0x3b0], rax
mov dword [rsp + 0x3b8], 0xa
mov dword [rsp + 0x3bc], 0xa
lea rcx, [rsp + 0x3b0]
call fcn.180044770
mov dword [0x180061e58], eax
lea rax, str.Bottom_Color
mov qword [rsp + 0x380], rax
mov dword [rsp + 0x388], 0xd
mov dword [rsp + 0x38c], 0xd
lea rcx, [rsp + 0x380]
call fcn.180044770
mov dword [0x180061e5c], eax
lea rax, str.Emissive_Modulation
mov qword [rsp + 0x390], rax
mov dword [rsp + 0x398], 0x14
mov dword [rsp + 0x39c], 0x14
lea rcx, [rsp + 0x390]
call fcn.180044770
mov dword [0x180061e60], eax
mov byte [0x180061bd1], 1
lea rax, [0x180061108]
test r12b, r12b
lea rcx, [0x1800610f8]
cmovne rax, rcx
movups xmm2, xmmword [rax]
movss dword [rsp + 0x130], xmm2
movaps xmm0, xmm2
shufps xmm0, xmm2, 0x55
movss dword [rsp + 0x134], xmm0
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xaa
movss dword [rsp + 0x138], xmm1
shufps xmm2, xmm2, 0xff
movss dword [rsp + 0x13c], xmm2
mov r12d, r14d
mov r13, qword [rsp + 0x80]
cmp r12d, dword [rsp + 0x88]
jne 0x180002459
mov byte [0x180061bd0], 1
xor r14d, r14d
movss xmm11, dword [0x180058fa4]
movsd xmm10, qword [0x180058f20]
movss xmm9, dword [0x180058f44]
mov ecx, dword [0x180061c08]
test ecx, ecx
je 0x1800026da
sub ecx, 1
je 0x180002671
sub ecx, 1
je 0x180002665
cmp ecx, 1
jne 0x18000267b
mov dword [0x180061bcc], 0xc
jmp 0x18000267b
test r13, r13
je 0x180002471
test r12d, r12d
js 0x180002471
cmp r12d, dword [rsp + 0x88]
jge 0x180002471
mov al, 1
jmp 0x180002473
xor al, al
test al, al
je 0x1800046f1
movsxd r14, r12d
mov rcx, qword [r13 + r14*8]
test rcx, rcx
je 0x1800025b0
lea rdx, [rsp + 0x3a0]
call fcn.180043ee0
mov rsi, qword [rsp + 0x3a0]
test rsi, rsi
je 0x1800025a8
mov r15d, dword [rsp + 0x3a8]
test r15d, r15d
jle 0x1800025a8
cmp dword [rsp + 0x3ac], r15d
jl 0x1800025a8
xor edi, edi
nop dword [rax + rax]
cmp edi, r15d
jge 0x1800025a8
test rsi, rsi
je 0x1800024e6
test edi, edi
js 0x1800024e6
mov al, 1
jmp 0x1800024e8
xor al, al
test al, al
je 0x180004712
movsxd rax, edi
cmp qword [rsi + rax*8], 0
je 0x1800025a1
mov edx, edi
mov rcx, qword [r13 + r14*8]
call fcn.180043630
mov rbx, rax
test rax, rax
je 0x1800025a1
lea r8, [rsp + 0x130]
mov edx, dword [0x180061e4c]
mov rcx, rax
call fcn.180044b10
lea r8, [rsp + 0x130]
mov edx, dword [0x180061e50]
mov rcx, rbx
call fcn.180044b10
lea r8, [rsp + 0x130]
mov edx, dword [0x180061e54]
mov rcx, rbx
call fcn.180044b10
lea r8, [rsp + 0x130]
mov edx, dword [0x180061e58]
mov rcx, rbx
call fcn.180044b10
lea r8, [rsp + 0x130]
mov edx, dword [0x180061e5c]
mov rcx, rbx
call fcn.180044b10
mov edx, dword [0x180061e60]
mov rcx, rbx
call fcn.180044920
mov r8, rbx
mov edx, edi
mov rcx, qword [r13 + r14*8]
call fcn.1800439d0
inc edi
jmp 0x1800024d0
mov r13, qword [rsp + 0x80]
inc r12d
jmp 0x1800023f2
cmp byte [0x180061bd0], r14b
je 0x180002421
mov r15d, r14d
nop dword [rax + rax]
cmp r15d, dword [rsp + 0x88]
jge 0x180002406
test r13, r13
je 0x1800025ec
test r15d, r15d
js 0x1800025ec
mov al, 1
jmp 0x1800025ee
xor al, al
test al, al
je 0x180004733
movsxd rax, r15d
mov rdi, qword [r13 + rax*8]
test rdi, rdi
je 0x18000265d
lea rdx, [rsp + 0x4e0]
mov rcx, rdi
call fcn.180043ee0
mov ebx, r14d
mov esi, dword [rsp + 0x4e8]
mov r14, qword [rsp + 0x4e0]
cmp ebx, esi
jge 0x180002652
test r14, r14
je 0x18000264e
test ebx, ebx
js 0x18000264e
mov edx, ebx
mov rcx, rdi
call fcn.180043d30
test rax, rax
je 0x18000264e
xor r8d, r8d
mov edx, ebx
mov rcx, rdi
call fcn.1800439d0
inc ebx
jmp 0x180002625
mov r13, qword [rsp + 0x80]
xor r14d, r14d
inc r15d
jmp 0x1800025d0
mov dword [0x180061bcc], 8
jmp 0x18000267b
mov dword [0x180061bcc], 0xb
mov edi, r14d
nop
cmp edi, dword [rsp + 0x88]
jge 0x1800026d1
test r13, r13
je 0x180002696
test edi, edi
js 0x180002696
mov al, 1
jmp 0x180002698
xor al, al
test al, al
je 0x180004754
movsxd rax, edi
mov rbx, qword [r13 + rax*8]
test rbx, rbx
je 0x1800026cd
mov dl, 1
mov rcx, rbx
call fcn.180043b90
mov edx, dword [0x180061bcc]
mov rcx, rbx
call fcn.180043820
mov r13, qword [rsp + 0x80]
inc edi
jmp 0x180002680
mov byte [0x180061bc8], 1
jmp 0x18000273a
cmp byte [0x180061bc8], 0
je 0x180002755
mov edi, r14d
cmp edi, dword [rsp + 0x88]
jge 0x180002733
test r13, r13
je 0x1800026fc
test edi, edi
js 0x1800026fc
mov al, 1
jmp 0x1800026fe
xor al, al
test al, al
je 0x180004775
movsxd rax, edi
mov rbx, qword [r13 + rax*8]
test rbx, rbx
je 0x18000272f
xor edx, edx
mov rcx, rbx
call fcn.180043b90
xor edx, edx
mov rcx, rbx
call fcn.180043820
mov r13, qword [rsp + 0x80]
inc edi
jmp 0x1800026e6
mov byte [0x180061bc8], 0
movss xmm11, dword [0x180058fa4]
movsd xmm10, qword [0x180058f20]
movss xmm9, dword [0x180058f44]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0xb0]
mov r15, qword [rsp + 0x68]
mov r14d, dword [rsp + 0x868]
mov rsi, qword [rsp + 0x850]
mov edi, dword [rsp + 0x860]
cmp byte [0x180061c04], 0
je 0x180002ded
mov rbx, qword [rsi + r13*8]
call fcn.180005ad0
mov rdx, rax
mov rcx, rbx
call fcn.180042c80
test al, al
je 0x180002ded
mov rax, qword [rsi + r13*8]
test rax, rax
je 0x180003ab1
mov rax, qword [rax + 0x198]
test rax, rax
je 0x180003ab1
movups xmm2, xmmword [rax + 0x120]
movups xmmword [rsp + 0x90], xmm2
movsd xmm1, qword [rax + 0x130]
movaps xmm0, xmm2
subsd xmm0, qword [0x180061e18]
unpckhpd xmm2, xmm2
subsd xmm2, qword [0x180061e20]
movsd qword [rsp + 0xa0], xmm1
subsd xmm1, qword [0x180061e28]
mulsd xmm2, xmm2
mulsd xmm0, xmm0
addsd xmm2, xmm0
mulsd xmm1, xmm1
addsd xmm2, xmm1
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x180002829
xorps xmm6, xmm6
sqrtsd xmm6, xmm2
jmp 0x180002834
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
mulsd xmm6, xmm15
movss xmm1, dword [0x1800610bc]
cvtps2pd xmm1, xmm1
comisd xmm6, xmm1
ja 0x180003ab1
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x188]
call fcn.1800047a0
cmp byte [0x1800610c0], 0
je 0x1800029ac
cvttsd2si edx, xmm6
lea rcx, [rsp + 0x48]
call fcn.180005940
bts edi, 0x1c
or edi, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 7
mov qword [rsp + 0xa8], 0xf
mov rax, qword [str.Vehicle]
mov dword [rsp + 0x90], eax
movzx eax, word [0x18004cf24]
mov word [rsp + 0x94], ax
movzx eax, byte [0x18004cf26]
mov byte [rsp + 0x96], al
mov byte [rsp + 0x97], 0
or edi, 2
mov dword [rsp + 0x858], edi
mov r8d, 2
lea rdx, [0x18004cf1c]
lea rcx, [rsp + 0x90]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
bts edi, 0x1d
or edi, 4
mov dword [rsp + 0x858], edi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0xb8]
lea rcx, [rsp + 0x460]
call fcn.180004e70
or edi, 0x80000000
or edi, 8
mov dword [rsp + 0x858], edi
lea r8d, [rbx + 2]
lea rdx, [0x18004cf18]
lea rcx, [rsp + 0x460]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x3e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x3f0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
bts edi, 0x1e
lea rax, [rsp + 0x3e0]
or edi, 0x10
jmp 0x180002a0b
xor ebx, ebx
mov qword [rsp + 0x240], rbx
mov qword [rsp + 0x248], 7
mov qword [rsp + 0x250], 0xf
mov rax, qword [str.Vehicle]
mov dword [rsp + 0x238], eax
movzx eax, word [0x18004cf24]
mov word [rsp + 0x23c], ax
movzx eax, byte [0x18004cf26]
mov byte [rsp + 0x23e], al
mov byte [rsp + 0x23f], bl
lea rax, [rsp + 0x238]
or edi, 0x20
mov dword [rsp + 0x858], edi
mov dword [rsp + 0x860], edi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x480], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x490], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
test dil, 0x20
je 0x180002a9d
and edi, 0xffffffdf
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x250]
cmp rdx, 0xf
jbe 0x180002a9d
inc rdx
mov rcx, qword [rsp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002a97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002a97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
test dil, 0x10
je 0x180002afb
and edi, 0xffffffef
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 0xf
jbe 0x180002afb
inc rdx
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002af5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002af5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
test dil, 8
je 0x180002b74
and edi, 0xfffffff7
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x478]
cmp rdx, 0xf
jbe 0x180002b58
inc rdx
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002b53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002b53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0x470], rbx
mov qword [rsp + 0x478], 0xf
mov byte [rsp + 0x460], 0
test dil, 4
je 0x180002bd2
and edi, 0xfffffffb
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x180002bd2
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002bcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002bcc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
test dil, 2
je 0x180002c4b
and edi, 0xfffffffd
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x180002c2f
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002c2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002c2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], 0xf
mov byte [rsp + 0x90], 0
test dil, 1
je 0x180002ca2
and edi, 0xfffffffe
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x180002ca2
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002c9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002c9d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
lea rbx, [rsp + 0x480]
cmp qword [rsp + 0x498], 0xf
cmova rbx, qword [rsp + 0x480]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x320]
call fcn.18000ea60
lea rcx, [0x180061178]
call fcn.180009310
movss xmm1, dword [rsp + 0x320]
mulss xmm1, xmm14
movss xmm0, dword [rsp + 0x188]
subss xmm0, xmm1
movss dword [rsp + 0x190], xmm0
movss xmm0, dword [rsp + 0x18c]
movss dword [rsp + 0x194], xmm0
mov r9, rbx
mov r8d, eax
lea rdx, [rsp + 0x190]
mov rcx, r15
call fcn.1800291f0
mov ecx, dword [0x180061c00]
test ecx, ecx
je 0x180002da7
sub ecx, 1
je 0x180002d61
sub ecx, 1
je 0x180002d59
cmp ecx, 1
jne 0x180002d50
lea r8d, [rcx + 0xb]
jmp 0x180002d67
mov r8d, dword [0x180061bb8]
jmp 0x180002d6e
mov r8d, 8
jmp 0x180002d67
mov r8d, 0xb
mov dword [0x180061bb8], r8d
mov rax, qword [rsi + r13*8]
or byte [rax + 0x7c4], 1
mov rax, qword [rsi + r13*8]
or byte [rax + 0x7c4], 2
mov dl, 1
mov rcx, qword [rsi + r13*8]
call fcn.180045240
mov r9d, dword [0x180061bb8]
mov r8b, 1
movzx edx, r8b
mov rcx, qword [rsi + r13*8]
call fcn.180045070
nop
mov rdx, qword [rsp + 0x498]
cmp rdx, 0xf
jbe 0x180002ded
inc rdx
mov rcx, qword [rsp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002de8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002de8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
cmp byte [0x180061bf8], 0
je 0x180002e03
cmp byte [0x180061bf9], 0
je 0x180002e03
mov al, 1
jmp 0x180002e05
xor al, al
cmp byte [0x180061bfe], 0
jne 0x180002e16
test al, al
je 0x18000382e
mov rbx, qword [rsi + r13*8]
call fcn.180005840
mov rdx, rax
mov rcx, rbx
call fcn.180042c80
test al, al
je 0x18000382e
mov rbx, qword [rsi + r13*8]
test rbx, rbx
je 0x180003ab1
mov rax, qword [rbx + 0x198]
test rax, rax
je 0x180003ab1
movups xmm2, xmmword [rax + 0x120]
movups xmmword [rsp + 0x90], xmm2
movsd xmm0, qword [rax + 0x130]
movsd qword [rsp + 0xa0], xmm0
cmp byte [0x180061bfe], 0
je 0x1800037f4
movaps xmm1, xmm2
subsd xmm1, qword [0x180061e18]
unpckhpd xmm2, xmm2
subsd xmm2, qword [0x180061e20]
movsd xmm0, qword [rsp + 0xa0]
subsd xmm0, qword [0x180061e28]
mulsd xmm2, xmm2
mulsd xmm1, xmm1
addsd xmm2, xmm1
mulsd xmm0, xmm0
addsd xmm2, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x180002eca
xorps xmm6, xmm6
sqrtsd xmm6, xmm2
jmp 0x180002ed5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
mulsd xmm6, xmm15
movss xmm1, dword [0x1800610ac]
cvtps2pd xmm1, xmm1
comisd xmm6, xmm1
ja 0x180003ab1
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x120]
call fcn.1800047a0
cmp dword [rbx + 0x35c], 0
je 0x180003ab1
mov rcx, qword [rbx + 0x368]
test rcx, rcx
je 0x180003ab1
movzx eax, byte [rcx + 0xeb]
mov byte [rsp + 0x850], al
cmp byte [0x1800610ba], 0
je 0x1800031da
mov rcx, qword [rcx + 0x40]
test rcx, rcx
je 0x180003ab1
add rcx, 0x28
lea rdx, [rsp + 0x148]
call fcn.180005590
bts r14d, 9
mov dword [rsp + 0x868], r14d
cmp qword [rsp + 0x158], 0
jne 0x180002f84
lea rcx, [rsp + 0x148]
call fcn.180005e00
jmp 0x180003ab1
cmp byte [0x1800610b8], 0
je 0x180003009
cvttsd2si edx, xmm6
lea rcx, [rsp + 0x278]
call fcn.180005a80
mov rbx, rax
or edi, 0x40
mov dword [rsp + 0x858], edi
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x3e0]
call fcn.180004cd0
nop
bts edi, 7
mov dword [rsp + 0x858], edi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x400]
call fcn.180004e50
nop
bts edi, 8
mov dword [rsp + 0x858], edi
lea r8, [0x18004cf18]
mov rdx, rax
lea rcx, [rsp + 0x4f0]
call fcn.180004de0
nop
bts edi, 9
jmp 0x180003022
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x218]
call fcn.180005430
bts edi, 0xa
mov dword [rsp + 0x858], edi
mov dword [rsp + 0x860], edi
mov rdx, rax
lea rcx, [rsp + 0x420]
call fcn.180005aa0
nop
bt edi, 0xa
jae 0x180003067
btr edi, 0xa
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
lea rcx, [rsp + 0x218]
call fcn.180005e00
nop
bt edi, 9
jae 0x18000308d
btr edi, 9
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
lea rcx, [rsp + 0x4f0]
call fcn.180005e00
nop
bt edi, 8
jae 0x1800030b3
btr edi, 8
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
lea rcx, [rsp + 0x400]
call fcn.180005e00
nop
test dil, dil
jns 0x1800030d8
btr edi, 7
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
lea rcx, [rsp + 0x3e0]
call fcn.180005e00
nop
test dil, 0x40
je 0x1800030fc
and edi, 0xffffffbf
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
lea rcx, [rsp + 0x278]
call fcn.180005e00
lea rcx, [rsp + 0x420]
call fcn.1800058f0
mov rbx, rax
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x328]
call fcn.18000ea60
cmp byte [0x1800610b9], 0
je 0x180003149
lea rdx, [rsp + 0x850]
lea rcx, [rsp + 0x620]
call fcn.180004a20
jmp 0x180003160
movups xmm0, xmmword [0x180061188]
movups xmmword [rsp + 0x538], xmm0
lea rax, [rsp + 0x538]
mov rcx, rax
call fcn.180009310
movss xmm1, dword [rsp + 0x328]
mulss xmm1, xmm14
movss xmm7, dword [rsp + 0x120]
movaps xmm0, xmm7
subss xmm0, xmm1
movss dword [rsp + 0x198], xmm0
movss xmm8, dword [rsp + 0x124]
movss dword [rsp + 0x19c], xmm8
mov r9, rbx
mov r8d, eax
lea rdx, [rsp + 0x198]
mov rcx, r15
call fcn.1800291f0
nop
lea rcx, [rsp + 0x420]
call fcn.180005e00
nop
lea rcx, [rsp + 0x148]
call fcn.180005e00
jmp 0x18000371c
cmp byte [0x1800610b8], 0
je 0x18000331c
cvttsd2si edx, xmm6
lea rcx, [rsp + 0x48]
call fcn.180005940
bts r14d, 0xa
bts edi, 0xb
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 6
mov qword [rsp + 0xf8], 0xf
mov eax, dword [str.Pickup]
mov dword [rsp + 0xe0], eax
movzx eax, word [0x18004cf2c]
mov word [rsp + 0xe4], ax
mov byte [rsp + 0xe6], 0
bts edi, 0xc
mov dword [rsp + 0x858], edi
mov r8d, 2
lea rdx, [0x18004cf1c]
lea rcx, [rsp + 0xe0]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
bts edi, 0xd
mov dword [rsp + 0x858], edi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0xb8]
lea rcx, [rsp + 0x4a0]
call fcn.180004e70
nop
bts edi, 0xe
mov dword [rsp + 0x858], edi
lea r8d, [rbx + 2]
lea rdx, [0x18004cf18]
lea rcx, [rsp + 0x4a0]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x400], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x410], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
or r14d, 0x1900
mov dword [rsp + 0x868], r14d
lea rax, [rsp + 0x400]
bts edi, 0xf
jmp 0x180003371
xorps xmm0, xmm0
movups xmmword [rsp + 0x258], xmm0
mov qword [rsp + 0x268], 6
mov qword [rsp + 0x270], 0xf
mov eax, dword [str.Pickup]
mov dword [rsp + 0x258], eax
movzx eax, word [0x18004cf2c]
mov word [rsp + 0x25c], ax
mov byte [rsp + 0x25e], 0
lea rax, [rsp + 0x258]
bts edi, 0x10
xor ebx, ebx
mov dword [rsp + 0x858], edi
mov dword [rsp + 0x860], edi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x4c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x4d0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bt edi, 0x10
jae 0x180003404
btr edi, 0x10
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x270]
cmp rdx, 0xf
jbe 0x180003404
inc rdx
mov rcx, qword [rsp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800033fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800033fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt edi, 0xf
jae 0x180003463
btr edi, 0xf
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x418]
cmp rdx, 0xf
jbe 0x180003463
inc rdx
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000345d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000345d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt edi, 0xe
jae 0x1800034dd
btr edi, 0xe
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x4b8]
cmp rdx, 0xf
jbe 0x1800034c1
inc rdx
mov rcx, qword [rsp + 0x4a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800034bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800034bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0x4b0], rbx
mov qword [rsp + 0x4b8], 0xf
mov byte [rsp + 0x4a0], 0
bt edi, 0xd
jae 0x18000353c
btr edi, 0xd
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x18000353c
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003536
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003536
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt edi, 0xc
jae 0x1800035b6
btr edi, 0xc
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x18000359a
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003595
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003595
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], 0xf
mov byte [rsp + 0xe0], 0
bt edi, 0xb
jae 0x18000360e
btr edi, 0xb
mov dword [rsp + 0x860], edi
mov dword [rsp + 0x858], edi
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x18000360e
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003609
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
lea rbx, [rsp + 0x4c0]
cmp qword [rsp + 0x4d8], 0xf
cmova rbx, qword [rsp + 0x4c0]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x330]
call fcn.18000ea60
cmp byte [0x1800610b9], 0
je 0x180003665
lea rdx, [rsp + 0x850]
lea rcx, [rsp + 0x680]
call fcn.180004a20
jmp 0x18000367c
movups xmm0, xmmword [0x180061188]
movups xmmword [rsp + 0x518], xmm0
lea rax, [rsp + 0x518]
mov rcx, rax
call fcn.180009310
movss xmm1, dword [rsp + 0x330]
mulss xmm1, xmm14
movss xmm7, dword [rsp + 0x120]
movaps xmm0, xmm7
subss xmm0, xmm1
movss dword [rsp + 0x1a0], xmm0
movss xmm8, dword [rsp + 0x124]
movss dword [rsp + 0x1a4], xmm8
mov r9, rbx
mov r8d, eax
lea rdx, [rsp + 0x1a0]
mov rcx, r15
call fcn.1800291f0
nop
mov rdx, qword [rsp + 0x4d8]
cmp rdx, 0xf
jbe 0x18000371c
inc rdx
mov rcx, qword [rsp + 0x4c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003717
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003717
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
cmp byte [0x180061bfd], 0
je 0x1800037f4
mov ecx, dword [0x1800610b0]
test ecx, ecx
je 0x180003764
sub ecx, 1
je 0x180003747
cmp ecx, 1
jne 0x18000377a
movss xmm0, dword [0x1800610ec]
jmp 0x18000374f
movss xmm0, dword [0x1800610f4]
movss xmm1, dword [0x1800610f0]
unpcklps xmm1, xmm0
movsd qword [0x180061198], xmm1
jmp 0x18000377a
movss xmm0, dword [0x1800610f0]
xorps xmm1, xmm1
unpcklps xmm0, xmm1
movsd qword [0x180061198], xmm0
movss xmm6, dword [0x1800610b4]
cmp byte [0x1800610b9], 0
je 0x1800037a2
lea rdx, [rsp + 0x850]
lea rcx, [rsp + 0x670]
call fcn.180004a20
jmp 0x1800037b9
movups xmm0, xmmword [0x1800611a0]
movups xmmword [rsp + 0x528], xmm0
lea rax, [rsp + 0x528]
mov rcx, rax
call fcn.180009310
movss dword [rsp + 0x1a8], xmm7
movss dword [rsp + 0x1ac], xmm8
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x1a8]
lea rdx, [0x180061198]
mov rcx, r15
call fcn.180028890
cmp byte [0x180061bf8], 0
je 0x18000382e
cmp qword [r12 + 0x338], 0
je 0x18000382e
mov ecx, dword [0x1800610a4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000382e
movaps xmm2, xmm11
mov rdx, qword [rsi + r13*8]
mov rcx, qword [r12 + 0x338]
call fcn.180044e90
cmp byte [0x180061bfc], 0
je 0x180003ab1
mov rbx, qword [rsi + r13*8]
call fcn.180005380
mov rdx, rax
mov rcx, rbx
call fcn.180042c80
test al, al
je 0x180003ab1
mov rbx, qword [rsi + r13*8]
test rbx, rbx
je 0x180003ab1
mov rax, qword [rbx + 0x198]
test rax, rax
je 0x180003ab1
movups xmm2, xmmword [rax + 0x120]
movups xmmword [rsp + 0x90], xmm2
movsd xmm1, qword [rax + 0x130]
movaps xmm0, xmm2
subsd xmm0, qword [0x180061e18]
unpckhpd xmm2, xmm2
subsd xmm2, qword [0x180061e20]
movsd qword [rsp + 0xa0], xmm1
subsd xmm1, qword [0x180061e28]
mulsd xmm2, xmm2
mulsd xmm0, xmm0
addsd xmm2, xmm0
mulsd xmm1, xmm1
addsd xmm2, xmm1
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x1800038d9
xorps xmm6, xmm6
sqrtsd xmm6, xmm2
jmp 0x1800038e4
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
mulsd xmm6, xmm15
comisd xmm6, xmm10
ja 0x180003ab1
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x128]
call fcn.1800047a0
lea rdx, [rsp + 0x100]
mov rcx, rbx
call fcn.180042b20
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor r13d, r13d
mov qword [rsp + 0x58], r13
mov r12d, 0xf
mov qword [rsp + 0x60], r12
mov byte [rsp + 0x48], r13b
movaps xmm0, xmmword [0x1800591b0]
movups xmmword [rsp + 0x70], xmm0
lea rdi, [rsp + 0x100]
mov r14, qword [rsp + 0x118]
cmp r14, r12
cmova rdi, qword [rsp + 0x100]
mov r15, qword [rsp + 0x110]
cmp r15, 5
jb 0x1800039e1
lea rbx, [r15 + rdi]
lea r8, [rbx - 4]
sub r8, rdi
lea edx, [r13 + 0x43]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1800039e1
nop dword [rax]
xor edx, edx
lea r9, str.Chest
nop dword [rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r9 + rdx - 1]
jne 0x1800039b8
cmp rdx, 5
jne 0x1800039a0
xor ecx, ecx
jmp 0x1800039bd
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x180003a5f
inc rax
lea r8, [rbx - 4]
sub r8, rax
mov edx, 0x43
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x180003990
lea rdi, [rsp + 0x100]
cmp r14, 0xf
cmova rdi, qword [rsp + 0x100]
cmp r15, 4
jb 0x180003b37
lea rbx, [r15 + rdi]
lea r8, [rbx - 3]
sub r8, rdi
mov edx, 0x41
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x180003b37
nop dword [rax]
nop word [rax + rax]
xor edx, edx
lea r8, str.Ammo
nop dword [rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x180003b0a
cmp rdx, 4
jne 0x180003a40
xor ecx, ecx
jmp 0x180003b0f
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x1800039e1
cmp byte [0x1800610a8], 0
jne 0x180003af1
cmp r14, 0xf
jbe 0x180003ab1
lea rdx, [r14 + 1]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003aac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003c16
call fcn.180049428
mov rcx, qword [rsp + 0x30]
mov ebx, dword [rsp + 0xd8]
inc ebx
movsd xmm7, qword [0x180058ef0]
movsd xmm8, qword [0x180058dd8]
mov edi, dword [rsp + 0x860]
mov r14d, dword [rsp + 0x868]
mov r15, qword [rsp + 0x68]
mov r12, qword [rsp + 0xb0]
jmp 0x180001919
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.180004b60
movups xmm0, xmmword [0x1800611c0]
jmp 0x180003c7e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x180003bc1
inc rax
lea r8, [rbx - 3]
sub r8, rax
mov edx, 0x41
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x180003a30
lea rsi, [rsp + 0x100]
cmp r14, 0xf
cmova rsi, qword [rsp + 0x100]
cmp r15, 7
jb 0x180003c95
lea rdi, [rsi + r15]
lea r8, [rdi - 6]
sub r8, rsi
mov edx, 0x46
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x180003c95
nop word [rax + rax]
mov r8d, 7
lea rdx, str.FoodBox
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180003c37
inc rbx
lea r8, [rdi - 6]
sub r8, rbx
mov edx, 0x46
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x180003b80
jmp 0x180003c95
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x180003b37
cmp byte [0x180061bfb], 0
jne 0x180003c1d
cmp r14, 0xf
jbe 0x180003ab1
lea rdx, [r14 + 1]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003aac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003aac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.AmmoBox
lea rcx, [rsp + 0x48]
call fcn.180004b60
movups xmm0, xmmword [0x1800611d0]
jmp 0x180003c7e
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
je 0x180003c95
cmp byte [0x180061bfa], 0
jne 0x180003c66
lea rcx, [rsp + 0x48]
call fcn.180005e00
nop
lea rcx, [rsp + 0x100]
call fcn.180005e00
jmp 0x180003ab1
lea rdx, str.FoodBox
lea rcx, [rsp + 0x48]
call fcn.180004b60
movups xmm0, xmmword [0x1800611e0]
movups xmmword [rsp + 0x70], xmm0
mov r14, qword [rsp + 0x118]
mov r12, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
cmp byte [0x1800610a9], 0
je 0x18000411d
test r13, r13
je 0x1800045c3
cvttsd2si edx, xmm6
lea rcx, [rsp + 0x218]
call fcn.180005940
mov eax, dword [rsp + 0x868]
or eax, 0x10
mov dword [rsp + 0x868], eax
mov r15d, dword [rsp + 0x860]
bts r15d, 0x11
mov dword [rsp + 0x858], r15d
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 2
jb 0x180004797
lea r14, [rsp + 0x48]
cmp r12, 0xf
cmova r14, qword [rsp + 0x48]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 0
lea rsi, [r13 + 2]
mov ebx, 0xf
lea rdi, [rsp + 0xb8]
cmp rsi, rbx
jbe 0x180003d9c
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x180003d5f
mov rbx, rcx
movabs rcx, 0x8000000000000000
jmp 0x180003d79
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180003d83
call fcn.180005cd0
mov rdi, rax
jmp 0x180003d94
test rcx, rcx
je 0x180003d92
call fcn.180049438
mov rdi, rax
jmp 0x180003d94
xor edi, edi
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rbx
mov r8, r13
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + r13], 0x5b20
mov byte [rdi + rsi], 0
bts r15d, 0x12
mov dword [rsp + 0x858], r15d
lea r9, [rsp + 0x218]
lea r8, [rsp + 0xb8]
lea rcx, [rsp + 0x3c0]
call fcn.180004e70
nop
bts r15d, 0x13
mov dword [rsp + 0x858], r15d
mov r8d, 2
lea rdx, [0x18004cf18]
lea rcx, [rsp + 0x3c0]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x4f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x500], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
or dword [rsp + 0x868], 0xe0
bts r15d, 0x14
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
movups xmm0, xmmword [rsp + 0x4f0]
movups xmmword [rsp + 0x440], xmm0
movups xmm1, xmmword [rsp + 0x500]
movups xmmword [rsp + 0x450], xmm1
bt r15d, 0x15
jae 0x180003ee1
btr r15d, 0x15
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x648]
cmp rdx, 0xf
jbe 0x180003ee1
inc rdx
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003edb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003edb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt r15d, 0x14
jae 0x180003efd
btr r15d, 0x14
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
bt r15d, 0x13
jae 0x180003f7b
btr r15d, 0x13
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 0xf
jbe 0x180003f5f
inc rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003f5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003f5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0x3d0], rbx
mov qword [rsp + 0x3d8], 0xf
mov byte [rsp + 0x3c0], 0
bt r15d, 0x12
jae 0x180003fde
btr r15d, 0x12
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x180003fde
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003fd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003fd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt r15d, 0x11
jae 0x180004040
btr r15d, 0x11
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x230]
cmp rdx, 0xf
jbe 0x180004040
inc rdx
mov rcx, qword [rsp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000403b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000403b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
lea rbx, [rsp + 0x440]
cmp qword [rsp + 0x458], 0xf
cmova rbx, qword [rsp + 0x440]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x338]
call fcn.18000ea60
lea rcx, [rsp + 0x70]
call fcn.180009310
movss xmm1, dword [rsp + 0x338]
mulss xmm1, xmm14
movss xmm0, dword [rsp + 0x128]
subss xmm0, xmm1
movss dword [rsp + 0x1b0], xmm0
movss xmm0, dword [rsp + 0x12c]
movss dword [rsp + 0x1b4], xmm0
mov r9, rbx
mov r8d, eax
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x68]
call fcn.1800291f0
nop
mov rdx, qword [rsp + 0x458]
cmp rdx, 0xf
jbe 0x1800045bb
inc rdx
mov rcx, qword [rsp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800045b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800045b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cvttsd2si edx, xmm6
lea rcx, [rsp + 0x218]
call fcn.180005940
mov ebx, dword [rsp + 0x868]
or ebx, 8
mov r15d, dword [rsp + 0x860]
bts r15d, 0x16
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], 9
mov qword [rsp + 0x1e8], 0xf
movsd xmm0, qword [str.Container]
movsd qword [rsp + 0x1d0], xmm0
movzx eax, byte [0x18004cf58]
mov byte [rsp + 0x1d8], al
mov byte [rsp + 0x1d9], 0
bts r15d, 0x17
mov dword [rsp + 0x858], r15d
mov r8d, 2
lea rdx, [0x18004cf1c]
lea rcx, [rsp + 0x1d0]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r15d, 0x18
mov dword [rsp + 0x858], r15d
lea r9, [rsp + 0x218]
lea r8, [rsp + 0xb8]
lea rcx, [rsp + 0x278]
call fcn.180004e70
nop
bts r15d, 0x19
mov dword [rsp + 0x858], r15d
mov r8d, 2
lea rdx, [0x18004cf18]
lea rcx, [rsp + 0x278]
call fcn.1800051c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x420], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x430], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 7
mov dword [rsp + 0x868], ebx
bts r15d, 0x1a
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
movups xmm0, xmmword [rsp + 0x420]
movups xmmword [rsp + 0x148], xmm0
movups xmm1, xmmword [rsp + 0x430]
movups xmmword [rsp + 0x158], xmm1
bt r15d, 0x1b
jae 0x1800042fe
btr r15d, 0x1b
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x668]
cmp rdx, 0xf
jbe 0x1800042fe
inc rdx
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800042f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800042f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt r15d, 0x1a
jae 0x18000431a
btr r15d, 0x1a
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
bt r15d, 0x19
jae 0x18000439c
btr r15d, 0x19
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x290]
cmp rdx, 0xf
jbe 0x18000437c
inc rdx
mov rcx, qword [rsp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004377
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004377
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0x288], 0
mov qword [rsp + 0x290], 0xf
mov byte [rsp + 0x278], 0
bt r15d, 0x18
jae 0x1800043ff
btr r15d, 0x18
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x1800043ff
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800043f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800043f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
nop
bt r15d, 0x17
jae 0x180004481
btr r15d, 0x17
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0xf
jbe 0x180004461
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000445c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000445c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov qword [rsp + 0x1e0], 0
mov qword [rsp + 0x1e8], 0xf
mov byte [rsp + 0x1d0], 0
bt r15d, 0x16
jae 0x1800044e3
btr r15d, 0x16
mov dword [rsp + 0x860], r15d
mov dword [rsp + 0x858], r15d
mov rdx, qword [rsp + 0x230]
cmp rdx, 0xf
jbe 0x1800044e3
inc rdx
mov rcx, qword [rsp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800044de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800044de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
lea rbx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rbx, qword [rsp + 0x148]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x340]
call fcn.18000ea60
lea rcx, [0x1800611b0]
call fcn.180009310
movss xmm1, dword [rsp + 0x340]
mulss xmm1, xmm14
movss xmm0, dword [rsp + 0x128]
subss xmm0, xmm1
movss dword [rsp + 0x1b8], xmm0
movss xmm0, dword [rsp + 0x12c]
movss dword [rsp + 0x1bc], xmm0
mov r9, rbx
mov r8d, eax
lea rdx, [rsp + 0x1b8]
mov rcx, qword [rsp + 0x68]
call fcn.1800291f0
nop
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1800045bb
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800045b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800045b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov r14, qword [rsp + 0x118]
cmp r12, 0xf
jbe 0x180004608
lea rdx, [r12 + 1]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800045fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800045fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049428
mov r14, qword [rsp + 0x118]
cmp r14, 0xf
jbe 0x180003ab1
lea rdx, [r14 + 1]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003aac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180003aac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8d, dword [rsp + 0xdc]
inc r8d
mov rcx, qword [rsp + 0x348]
jmp 0x18000182f
xor al, al
jmp 0x18000183e
lea rcx, [rsp + 0x5f0]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x5f0]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x5a8]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x5a8]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x590]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x590]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x5d8]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x5d8]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x578]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x578]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x560]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x560]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x5c0]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x5c0]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x608]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x608]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x548]
call fcn.180005330
lea rdx, [0x18005f598]
lea rcx, [rsp + 0x548]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.180005b80
int3