Function at 0x18007ced0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x518]
sub rsp, 0x5d8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
xor edi, edi
mov dword [rbp + 0x520], edi
mov eax, dword [0x1800d7768]
cdq
sub eax, edx
sar eax, 1
movd xmm10, eax
cvtdq2ps xmm10, xmm10
mov eax, dword [0x1800d7880]
cdq
sub eax, edx
sar eax, 1
movd xmm11, eax
cvtdq2ps xmm11, xmm11
movd xmm8, dword [0x1800d4b28]
cvtdq2ps xmm8, xmm8
call fcn.18006e520
mov rbx, rax
mov esi, 4
mov r13d, esi
mov qword [rbp + 0x530], r13
mov r12d, dword [0x1800d7120]
test rax, rax
jne 0x18007cf96
mov eax, edi
jmp 0x18007cff2
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r12*8]
mov eax, dword [rcx + rsi]
cmp dword [0x18010e8b8], eax
jle 0x18007cfe0
lea rcx, [0x18010e8b8]
call fcn.1800898fc
cmp dword [0x18010e8b8], 0xffffffff
jne 0x18007cfe0
mov ecx, 0xae00109b
call fcn.18006a740
mov qword [0x18010e260], rax
lea rcx, [0x18010e8b8]
call fcn.18008989c
mov rax, qword [0x18010e260]
mov rax, qword [rbx + rax]
mov qword [rbp + 0x530], r13
mov qword [rbp + 0x528], rax
mov r15d, edi
mov rax, qword [rax + 0x28]
movabs r8, 0x7fffffff0000
cmp dword [rax + 0x10], edi
jle 0x18007de91
mov rcx, r12
mov qword [rbp + 0x538], rcx
mov rdx, qword gs:[0x58]
mov r12d, 0x20
movss xmm9, dword [0x1800a2e08]
mov r13, qword [rbp + 0x528]
nop dword [rax]
mov rax, qword [rax + 0x18]
mov rbx, qword [r12 + rax]
test rbx, rbx
je 0x18007de5e
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x18007de5e
mov rdi, qword [rax + 0x30]
test rdi, rdi
je 0x18007de5e
add rdi, 0x60
cmp rdi, 0x40000
jbe 0x18007de5e
lea rax, [rdi + 8]
cmp rax, r8
jae 0x18007de5e
mov rdi, qword [rdi]
test rdi, rdi
je 0x18007de5e
mov r14, qword [rdx + rcx*8]
mov eax, dword [rsi + r14]
cmp dword [0x18010e820], eax
jle 0x18007d0e1
lea rcx, [0x18010e820]
call fcn.1800898fc
cmp dword [0x18010e820], 0xffffffff
jne 0x18007d0d7
mov ecx, 0x33f7a6a3
call fcn.18006a740
mov qword [0x18010e450], rax
lea rcx, [0x18010e820]
call fcn.18008989c
movabs r8, 0x7fffffff0000
mov rax, qword [0x18010e450]
cmp byte [rax + rbx], 0
jne 0x18007de59
mov eax, dword [rsi + r14]
cmp dword [0x18010e888], eax
jle 0x18007d133
lea rcx, [0x18010e888]
call fcn.1800898fc
cmp dword [0x18010e888], 0xffffffff
jne 0x18007d133
mov ecx, 0x8bb6774c
call fcn.180068d80
mov rcx, qword [rax]
mov qword [0x18010e868], rcx
lea rcx, [0x18010e888]
call fcn.18008989c
mov rax, qword [0x18010e868]
mov rcx, rbx
call rax
test rax, rax
je 0x18007de4f
lea rdx, str.Local
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18007de4f
mov rcx, rbx
call fcn.18006e630
test al, al
je 0x18007d36a
mov rcx, qword [0x1800f8a78]
add rcx, rbx
cmp rcx, 0x40000
jbe 0x18007d19b
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18007d19b
mov edi, dword [rcx]
jmp 0x18007d19f
xor eax, eax
mov edi, eax
shr edi, 6
and dil, 1
mov eax, dword [rsi + r14]
cmp dword [0x18010e1a0], eax
jle 0x18007d1e4
lea rcx, [0x18010e1a0]
call fcn.1800898fc
cmp dword [0x18010e1a0], 0xffffffff
jne 0x18007d1e4
mov ecx, 0x1f15eb59
call fcn.18006a740
mov qword [0x18010e1b0], rax
lea rcx, [0x18010e1a0]
call fcn.18008989c
movaps xmm0, xmmword [0x1800a3350]
movaps xmmword [rbp + 0x1a0], xmm0
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call fcn.1800771e0
cmp byte [0x18010d36c], 0
je 0x18007d241
mov rcx, qword [0x1800f8a78]
add rcx, rbx
cmp rcx, 0x40000
jbe 0x18007d234
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18007d234
mov eax, dword [rcx]
jmp 0x18007d236
xor eax, eax
shr eax, 4
test al, 1
jne 0x18007de4f
test dil, dil
je 0x18007d253
cmp byte [0x18010d36d], 0
jne 0x18007de4f
mov rcx, qword [0x1800f8a68]
add rcx, rbx
cmp rcx, 0x40000
jbe 0x18007d2a7
lea rax, [rcx + 8]
movabs r8, 0x7fffffff0000
cmp rax, r8
jae 0x18007d2a7
mov rcx, qword [rcx]
add rcx, 0x2c8
cmp rcx, 0x40000
jbe 0x18007d2a7
lea rax, [rcx + 1]
cmp rax, r8
jae 0x18007d2a7
cmp byte [rcx], 0
je 0x18007d2a7
cmp byte [0x18010d36e], 0
jne 0x18007de59
call fcn.18006f6a0
mov rcx, qword [0x1800f8b00]
mov edx, dword [rcx + rax]
test edx, edx
je 0x18007d2cc
cmp dword [rcx + rbx], edx
jne 0x18007d2cc
cmp byte [0x18010d36f], 0
jne 0x18007de4f
mov rcx, rbx
call fcn.1800762b0
movaps xmm7, xmm0
comiss xmm8, xmm7
jbe 0x18007de4f
mov eax, dword [rsi + r14]
cmp dword [0x18010e1a0], eax
jle 0x18007d31f
lea rcx, [0x18010e1a0]
call fcn.1800898fc
cmp dword [0x18010e1a0], 0xffffffff
jne 0x18007d31f
mov ecx, 0x1f15eb59
call fcn.18006a740
mov qword [0x18010e1b0], rax
lea rcx, [0x18010e1a0]
call fcn.18008989c
mov rax, qword [0x18010e1b0]
cmp dword [rax + rbx], 0
jne 0x18007de4f
mov rcx, rbx
call fcn.1800762b0
movaps xmm6, xmm0
mov rcx, qword [0x1800d77e8]
call fcn.1800762b0
comiss xmm6, xmm0
jb 0x18007d35a
cmp qword [0x1800d77e8], 0
jne 0x18007de4f
movaps xmm8, xmm7
mov qword [0x1800d77e8], rbx
jmp 0x18007de4f
mov r8, rdi
mov rdx, rbx
call fcn.18007b420
mov r8, rdi
mov rdx, rbx
call fcn.18007b730
mov r8, rdi
mov rdx, rbx
call fcn.18007bb50
mov r8, rdi
mov rdx, rbx
call fcn.18007be60
mov r8, rdi
mov rdx, rbx
call fcn.18007c170
mov r8, rdi
mov rdx, rbx
call fcn.18007c480
mov r8, rdi
mov rdx, rbx
call fcn.18007c870
cmp byte [0x1800d786a], 0
je 0x18007d4d5
movaps xmm0, xmmword [0x1800a3350]
movaps xmmword [rbp + 0x200], xmm0
lea rax, [rbp + 0x200]
mov qword [rsp + 0x38], rax
lea rax, str.Stone_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.stone_collectable.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b5c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d7874]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3130]
movaps xmmword [rbp + 0x210], xmm0
lea rax, [rbp + 0x210]
mov qword [rsp + 0x38], rax
lea rax, str.Sulfur_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.sulfur_collectable.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b5c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d7869]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a31b0]
movaps xmmword [rbp + 0x220], xmm0
lea rax, [rbp + 0x220]
mov qword [rsp + 0x38], rax
lea rax, str.Metal_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.metal_collectable.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b5c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d786b]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3350]
movaps xmmword [rbp + 0x50], xmm0
lea rax, [rbp + 0x50]
mov qword [rsp + 0x38], rax
lea rax, str.Stone_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.stone_collectable.prefab
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm9
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d7874]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3350]
movaps xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
mov qword [rsp + 0x38], rax
lea rax, str.Stone_Ore
mov qword [rsp + 0x30], rax
lea rax, str.stone_ore.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b5c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d7874]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3130]
movaps xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x70]
mov qword [rsp + 0x38], rax
lea rax, str.Sulfur_Ore
mov qword [rsp + 0x30], rax
lea rax, str.sulfur_ore.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b5c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d7869]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a31b0]
movaps xmmword [rbp + 0x80], xmm0
lea rax, [rbp + 0x80]
mov qword [rsp + 0x38], rax
lea rax, str.Metal_Ore
mov qword [rsp + 0x30], rax
lea rax, str.metal_ore.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b5c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7875]
movzx r8d, byte [0x1800d786b]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3250]
movaps xmmword [rbp + 0x90], xmm0
lea rax, [rbp + 0x90]
mov qword [rsp + 0x38], rax
lea rax, str.Elite_Crate
mov qword [rsp + 0x30], rax
lea rax, str.crate_elite.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b40]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7825]
movzx r8d, byte [0x1800d7826]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a31e0]
movaps xmmword [rbp + 0xa0], xmm0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x38], rax
lea rax, str.Military_Crate
mov qword [rsp + 0x30], rax
lea rax, str.crate_normal.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b40]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7825]
movzx r8d, byte [0x1800d7823]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a32a0]
movaps xmmword [rbp + 0xb0], xmm0
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x38], rax
lea rax, str.Airdrop
mov qword [rsp + 0x30], rax
lea rax, str.supply_drop.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b40]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7825]
movzx r8d, byte [0x1800d7821]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a31d0]
movaps xmmword [rbp + 0xc0], xmm0
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x38], rax
lea rax, str.Heli_Crate
mov qword [rsp + 0x30], rax
lea rax, str.heli_crate.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b40]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7825]
movzx r8d, byte [0x1800d7822]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3200]
movaps xmmword [rbp + 0xd0], xmm0
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
lea rax, str.Bradley_Crate
mov qword [rsp + 0x30], rax
lea rax, str.bradley_crate.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b40]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7825]
movzx r8d, byte [0x1800d7824]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3330]
movaps xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x38], rax
lea rax, str.Minicopter
mov qword [rsp + 0x30], rax
lea rax, str.minicopter.entity.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b3c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d781d]
movzx r8d, byte [0x1800d781e]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3280]
movaps xmmword [rbp + 0xf0], xmm0
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x38], rax
lea rax, str.Scrap_Heli
mov qword [rsp + 0x30], rax
lea rax, str.scraptransporthelicopter.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b3c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d781d]
movzx r8d, byte [0x1800d7820]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3310]
movaps xmmword [rbp + 0x100], xmm0
lea rax, [rbp + 0x100]
mov qword [rsp + 0x38], rax
lea rax, str.Boat
mov qword [rsp + 0x30], rax
lea rax, str.rowboat.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b3c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d781d]
movzx r8d, byte [0x1800d781c]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3340]
movaps xmmword [rbp + 0x110], xmm0
lea rax, [rbp + 0x110]
mov qword [rsp + 0x38], rax
lea rax, str.RHIB
mov qword [rsp + 0x30], rax
lea rax, str.rhib.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b3c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d781d]
movzx r8d, byte [0x1800d781f]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3350]
movaps xmmword [rbp + 0x120], xmm0
lea rax, [rbp + 0x120]
mov qword [rsp + 0x38], rax
lea rax, str.Auto_Turret
mov qword [rsp + 0x30], rax
lea rax, str.autoturret_deployed.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b38]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7819]
movzx r8d, byte [0x1800d7818]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3110]
movaps xmmword [rbp + 0x130], xmm0
lea rax, [rbp + 0x130]
mov qword [rsp + 0x38], rax
lea rax, str.Flame_Turret
mov qword [rsp + 0x30], rax
lea rax, str.flameturret.deployed.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b38]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7819]
movzx r8d, byte [0x1800d7815]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3270]
movaps xmmword [rbp + 0x140], xmm0
lea rax, [rbp + 0x140]
mov qword [rsp + 0x38], rax
lea rax, str.Shotgun_Trap
mov qword [rsp + 0x30], rax
lea rax, str.guntrap.deployed.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b38]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7819]
movzx r8d, byte [0x1800d781a]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3300]
movaps xmmword [rbp + 0x150], xmm0
lea rax, [rbp + 0x150]
mov qword [rsp + 0x38], rax
lea rax, str.Landmine
mov qword [rsp + 0x30], rax
lea rax, str.landmine.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b38]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7819]
movzx r8d, byte [0x1800d7817]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3320]
movaps xmmword [rbp + 0x160], xmm0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x38], rax
lea rax, str.SAM_Site
mov qword [rsp + 0x30], rax
lea rax, str.sam_site_turret_deployed.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b38]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7819]
movzx r8d, byte [0x1800d781b]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a32f0]
movaps xmmword [rbp + 0x170], xmm0
lea rax, [rbp + 0x170]
mov qword [rsp + 0x38], rax
lea rax, str.Beartrap
mov qword [rsp + 0x30], rax
lea rax, str.beartrap.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b38]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7819]
movzx r8d, byte [0x1800d7816]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3210]
movaps xmmword [rbp + 0x180], xmm0
lea rax, [rbp + 0x180]
mov qword [rsp + 0x38], rax
lea rax, str.Hemp
mov qword [rsp + 0x30], rax
lea rax, str.hemp_collectable.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b4c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7836]
movzx r8d, byte [0x1800d7834]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a32b0]
movaps xmmword [rbp + 0x190], xmm0
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
lea rax, [0x1800a2830]
mov qword [rsp + 0x30], rax
lea rax, str.box.wooden.large.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b48]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7830]
movzx r8d, byte [0x1800d7832]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3290]
movaps xmmword [rbp + 0x1f0], xmm0
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x38], rax
lea rax, str.Bodybag
mov qword [rsp + 0x30], rax
lea rax, str.item_drop_backpack.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b4c]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d7836]
movzx r8d, byte [0x1800d7837]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a31b0]
movaps xmmword [rbp + 0x1b0], xmm0
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x38], rax
lea rax, str.Bear
mov qword [rsp + 0x30], rax
lea rax, str.bear.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b44]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d782b]
movzx r8d, byte [0x1800d7828]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a32c0]
movaps xmmword [rbp + 0x1c0], xmm0
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x38], rax
lea rax, str.Wolf
mov qword [rsp + 0x30], rax
lea rax, str.wolf.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b44]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d782b]
movzx r8d, byte [0x1800d782a]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3230]
movaps xmmword [rbp + 0x1d0], xmm0
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x38], rax
lea rax, [0x1800a28c0]
mov qword [rsp + 0x30], rax
lea rax, str.boar.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b44]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d782b]
movzx r8d, byte [0x1800d7829]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3200]
movaps xmmword [rbp + 0x1e0], xmm0
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x38], rax
lea rax, str.Chicken
mov qword [rsp + 0x30], rax
lea rax, str.chicken.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b44]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d782b]
movzx r8d, byte [0x1800d782c]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movaps xmm0, xmmword [0x1800a3260]
movaps xmmword [rbp - 0x70], xmm0
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, str.Horse
mov qword [rsp + 0x30], rax
lea rax, str.horse.prefab
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1800d4b44]
movss dword [rsp + 0x20], xmm0
movzx r9d, byte [0x1800d782b]
movzx r8d, byte [0x1800d782d]
mov rdx, rdi
mov rcx, rbx
call fcn.18007afc0
movabs r8, 0x7fffffff0000
mov esi, 4
inc r15d
add r12, 8
mov rax, qword [r13 + 0x28]
cmp r15d, dword [rax + 0x10]
mov rcx, qword [rbp + 0x538]
mov rdx, qword gs:[0x58]
jl 0x18007d040
mov r13, qword [rbp + 0x530]
mov r12d, dword [0x1800d7120]
mov rdi, qword [0x1800d77e8]
movss xmm15, dword [0x1800a2c5c]
xorps xmm9, xmm9
test rdi, rdi
je 0x18007e3e8
mov edx, r12d
mov rax, qword gs:[0x58]
mov r14, qword [rax + rdx*8]
mov eax, dword [r14 + rsi]
cmp dword [0x18010e1a0], eax
jle 0x18007defc
lea rcx, [0x18010e1a0]
call fcn.1800898fc
cmp dword [0x18010e1a0], 0xffffffff
jne 0x18007defc
mov ecx, 0x1f15eb59
call fcn.18006a740
mov qword [0x18010e1b0], rax
lea rcx, [0x18010e1a0]
call fcn.18008989c
mov rcx, qword [0x1800d77e8]
mov rax, qword [0x18010e1b0]
cmp dword [rax + rdi], 0
mov eax, 0
cmovne rcx, rax
mov qword [0x1800d77e8], rcx
lea rbx, [rdi + 0xb8]
cmp rbx, 0x40000
jbe 0x18007e1b6
lea rax, [rbx + 8]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18007e1b6
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18007e1b6
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x18007e1b6
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18007e1b6
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x18007e1b6
mov r15, qword [rcx]
test r15, r15
je 0x18007e1b6
mov eax, dword [r14 + rsi]
cmp dword [0x18010e4e0], eax
jle 0x18007dfdb
lea rcx, [0x18010e4e0]
call fcn.1800898fc
cmp dword [0x18010e4e0], 0xffffffff
jne 0x18007dfdb
mov ecx, 0x56e64b7d
call fcn.180068d80
mov rcx, qword [rax]
mov qword [0x18010e400], rcx
lea rcx, [0x18010e4e0]
call fcn.18008989c
mov qword [rbp - 0x80], 0
mov dword [rbp - 0x78], 0
mov r9, r15
lea r8, [rbp - 0x80]
mov rdx, qword [0x18010e400]
lea rcx, [rbp - 0x20]
call fcn.180081250
movss xmm0, dword [rbp - 0x20]
ucomiss xmm0, xmm9
je 0x18007e1b6
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18007e1b6
lea rax, [rcx + 8]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18007e1b6
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18007e1b6
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x18007e1b6
mov r15, qword [rcx]
test r15, r15
je 0x18007e1b6
mov eax, dword [r14 + rsi]
cmp dword [0x18010e4e0], eax
jle 0x18007e0ac
lea rcx, [0x18010e4e0]
call fcn.1800898fc
cmp dword [0x18010e4e0], 0xffffffff
jne 0x18007e0ac
mov ecx, 0x56e64b7d
call fcn.180068d80
mov rcx, qword [rax]
mov qword [0x18010e400], rcx
lea rcx, [0x18010e4e0]
call fcn.18008989c
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 0
mov r9, r15
lea r8, [rsp + 0x70]
mov rdx, qword [0x18010e400]
lea rcx, [rbp - 0x10]
call fcn.180081250
movss xmm0, dword [rbp - 0xc]
ucomiss xmm0, xmm9
je 0x18007e1b6
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18007e1b6
lea rax, [rcx + 8]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18007e1b6
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18007e1b6
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x18007e1b6
mov r15, qword [rcx]
test r15, r15
je 0x18007e1b6
mov eax, dword [r14 + rsi]
cmp dword [0x18010e4e0], eax
jle 0x18007e17c
lea rcx, [0x18010e4e0]
call fcn.1800898fc
cmp dword [0x18010e4e0], 0xffffffff
jne 0x18007e17c
mov ecx, 0x56e64b7d
call fcn.180068d80
mov rcx, qword [rax]
mov qword [0x18010e400], rcx
lea rcx, [0x18010e4e0]
call fcn.18008989c
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x18], 0
mov r9, r15
lea r8, [rbp + 0x10]
mov rdx, qword [0x18010e400]
lea rcx, [rbp - 0x30]
call fcn.180081250
movss xmm0, dword [rbp - 0x28]
ucomiss xmm0, xmm9
je 0x18007e1b6
mov rcx, qword [0x1800d77e8]
jmp 0x18007e1bf
xor ecx, ecx
mov qword [0x1800d77e8], rcx
mov rdx, qword [0x1800f8a68]
add rdx, rdi
movabs r15, 0x7fffffff0000
cmp rdx, 0x40000
jbe 0x18007e21d
lea rax, [rdx + 8]
cmp rax, r15
jae 0x18007e21d
mov rdx, qword [rdx]
add rdx, 0x2c8
cmp rdx, 0x40000
jbe 0x18007e21d
lea rax, [rdx + 1]
cmp rax, r15
jae 0x18007e21d
cmp byte [rdx], 0
je 0x18007e21d
cmp byte [0x18010d36e], 0
mov eax, 0
cmovne rcx, rax
mov qword [0x1800d77e8], rcx
mov rdx, qword [0x1800f8a78]
add rdx, rdi
cmp rdx, 0x40000
jbe 0x18007e23f
lea rax, [rdx + 4]
cmp rax, r15
jae 0x18007e23f
mov eax, dword [rdx]
xor edx, edx
jmp 0x18007e243
xor edx, edx
mov eax, edx
shr eax, 4
test al, 1
je 0x18007e25c
cmp byte [0x18010d36c], 0
cmovne rcx, rdx
mov qword [0x1800d77e8], rcx
call fcn.18006f6a0
mov rcx, qword [0x1800f8b00]
mov edx, dword [rcx + rax]
test edx, edx
je 0x18007e292
cmp dword [rcx + rdi], edx
jne 0x18007e292
mov rax, qword [0x1800d77e8]
cmp byte [0x18010d36f], 0
mov ecx, 0
cmovne rax, rcx
mov qword [0x1800d77e8], rax
cmp byte [0x1800d77f2], 0
je 0x18007e3e8
cmp byte [0x1800d77f6], 0
je 0x18007e3e8
cmp rbx, 0x40000
jbe 0x18007e375
lea rax, [rbx + 8]
cmp rax, r15
jae 0x18007e375
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18007e375
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18007e375
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18007e375
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18007e375
mov rbx, qword [rcx]
test rbx, rbx
je 0x18007e375
mov eax, dword [r14 + rsi]
cmp dword [0x18010e4e0], eax
jle 0x18007e34c
lea rcx, [0x18010e4e0]
call fcn.1800898fc
cmp dword [0x18010e4e0], 0xffffffff
jne 0x18007e34c
mov ecx, 0x56e64b7d
call fcn.180068d80
mov rdx, qword [rax]
mov qword [0x18010e400], rdx
lea rcx, [0x18010e4e0]
call fcn.18008989c
mov qword [rbp], 0
mov dword [rbp + 8], 0
mov r9, rbx
lea r8, [rbp]
mov rdx, qword [0x18010e400]
lea rcx, [rsp + 0x40]
call fcn.180081250
jmp 0x18007e390
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
nop word [rax + rax]
movaps xmm0, xmmword [0x1800a3350]
mov ecx, dword [0x18010e7a0]
test ecx, ecx
je 0x18007e3ab
sub ecx, 1
je 0x18007e3ab
cmp ecx, 1
jne 0x18007e3e8
movdqa xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [rsp + 0x40]
mov eax, dword [rsp + 0x48]
movss dword [rsp + 0x20], xmm9
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x68], eax
movaps xmm3, xmm15
lea r8, [rsp + 0x50]
movss xmm1, dword [0x1800a2d88]
lea rcx, [rsp + 0x60]
call qword [0x18010e798]
mov rcx, rdi
call fcn.1800762b0
movaps xmm1, xmm0
movd xmm0, dword [0x1800d4b28]
cvtdq2ps xmm0, xmm0
xor edi, edi
comiss xmm0, xmm1
jae 0x18007e410
mov ebx, edi
mov qword [0x1800d77e8], rbx
jmp 0x18007e417
mov rbx, qword [0x1800d77e8]
cmp byte [0x1800d7805], 0
je 0x18007e5e7
cmp byte [0x1800d77f8], 0
je 0x18007e66f
movss xmm0, dword [0x18010d370]
ucomiss xmm0, xmm9
jne 0x18007e45f
movss xmm0, dword [0x18010d374]
ucomiss xmm0, xmm9
jne 0x18007e45f
movss xmm0, dword [0x18010d378]
ucomiss xmm0, xmm9
je 0x18007e66f
test rbx, rbx
je 0x18007e5e7
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x230]
call sub.VCRUNTIME140.dll_memset
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + r13]
cmp dword [0x18010e9ac], eax
jle 0x18007e4de
lea rcx, [0x18010e9ac]
call fcn.1800898fc
cmp dword [0x18010e9ac], 0xffffffff
jne 0x18007e4de
mov ecx, 0x3f7234d0
call fcn.18006a740
mov qword [0x18010e180], rax
lea rcx, [0x18010e9ac]
call fcn.18008989c
mov rax, qword [0x18010e180]
mov r8, qword [rax + rbx]
add r8, 0x14
lea rdx, str._ls_manipulated
lea rcx, [rbp + 0x230]
call fcn.180081a70
lea rax, [rbp + 0x230]
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x18007e510
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x58]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18007e55c
lea rax, [rdi + rcx]
mov qword [rbp - 0x60], rax
lea rbx, [rbp - 0x70]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x70]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x230]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18007e574
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x230]
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.180058fc0
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae r9, qword [rbp - 0x70]
movaps xmm2, xmmword [0x1800a30e0]
movaps xmmword [rsp + 0x50], xmm2
lea r8, [rsp + 0x50]
movaps xmm1, xmm11
movd edx, xmm1
movaps xmm0, xmm10
movd ecx, xmm0
call fcn.180076540
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18007e5e7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e5e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007e5e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008976c
movss xmm14, dword [0x1800a2cd8]
movss xmm11, dword [0x1800a2e9c]
movss xmm13, dword [0x1800a2d78]
movss xmm7, dword [0x1800a2d18]
movsd xmm8, qword [0x1800a2d48]
cmp byte [0x1800d785f], 0
je 0x18007ee19
call fcn.18006f6a0
mov rcx, rax
call fcn.180081330
mov rbx, rax
test rax, rax
je 0x18007e644
mov rcx, rax
call fcn.18006ec20
cmp eax, 0x407209f5
je 0x18007e657
mov rcx, rbx
call fcn.18006ec20
cmp eax, 0xe93460ee
jne 0x18007ee19
test rbx, rbx
jne 0x18007ea3d
movaps xmm0, xmm9
mov esi, dword [0x1800d7120]
jmp 0x18007ea9a
test rbx, rbx
je 0x18007e5e7
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rsi, qword [rax + rcx*8]
mov eax, dword [rsi + r13]
cmp dword [0x18010e9ac], eax
jle 0x18007e6da
lea rcx, [0x18010e9ac]
call fcn.1800898fc
cmp dword [0x18010e9ac], 0xffffffff
jne 0x18007e6da
mov ecx, 0x3f7234d0
call fcn.18006a740
mov qword [0x18010e180], rax
lea rcx, [0x18010e9ac]
call fcn.18008989c
mov rax, qword [0x18010e180]
mov rdx, qword [rax + rbx]
add rdx, 0x14
lea rcx, [rbp + 0x20]
call fcn.18007fc80
nop
mov rdx, qword [rax]
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x18007e714
lea rcx, [rbp + 0x30]
call fcn.180056af0
nop
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18007e745
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x330]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rsi + r13]
cmp dword [0x18010e9ac], eax
jle 0x18007e797
lea rcx, [0x18010e9ac]
call fcn.1800898fc
cmp dword [0x18010e9ac], 0xffffffff
jne 0x18007e797
mov ecx, 0x3f7234d0
call fcn.18006a740
mov qword [0x18010e180], rax
lea rcx, [0x18010e9ac]
call fcn.18008989c
mov rax, qword [0x18010e180]
mov rdx, qword [rax + rbx]
add rdx, 0x14
lea rcx, [rbp + 0x28]
call fcn.18007fc80
mov r15, rax
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x18007e7cc
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x18007e7dd
call fcn.180062d80
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x18007f22d
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x528], rbx
mov dword [rbp + 0x520], 1
mov r15, qword [r15]
movsxd r12, dword [r15 - 0x10]
lea rdx, [0x180090578]
mov rsi, rdi
inc rsi
cmp byte [rdx + rsi], 0
jne 0x18007e812
lea r14d, [r12 + rsi]
test r14d, r14d
js 0x18007f222
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x18007e857
mov edx, r14d
lea rcx, [rbp + 0x528]
call fcn.180080830
mov rbx, qword [rbp + 0x528]
lea rdx, [0x180090578]
movsxd rsi, esi
test rsi, rsi
je 0x18007e883
test rbx, rbx
jne 0x18007e878
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x18007e883
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8, r12
lea rcx, [rbx + rsi]
test r12d, r12d
je 0x18007e8bc
test rcx, rcx
je 0x18007e8aa
test r15, r15
je 0x18007e8a3
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x18007e8bc
xor edx, edx
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
cmp r14d, dword [rbx - 0xc]
jg 0x18007f222
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
mov byte [rax + rbx], 0
mov rdx, rbx
lea rcx, [rbp + 0x330]
call fcn.180081a70
nop
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x18007e8fc
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18007e919
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x330]
inc rdi
cmp byte [rax + rdi], 0
jne 0x18007e920
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18007e96c
lea rax, [rdi + rcx]
mov qword [rbp - 0x40], rax
lea rbx, [rbp - 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x50]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x330]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18007e984
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x330]
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.180058fc0
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r9, qword [rbp - 0x50]
movaps xmm0, xmmword [0x1800a3350]
movaps xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
movaps xmm1, xmm11
movd edx, xmm1
movaps xmm0, xmm10
movd ecx, xmm0
call fcn.180076540
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x18007e9f8
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007e9f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008976c
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18007e5e7
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e5e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007e5e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov esi, dword [0x1800d7120]
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [rcx + r13]
cmp dword [0x18010eaf4], eax
jle 0x18007ea8e
lea rcx, [0x18010eaf4]
call fcn.1800898fc
cmp dword [0x18010eaf4], 0xffffffff
jne 0x18007ea8e
mov ecx, 0x6c06da54
call fcn.18006a740
mov qword [0x18010e8d8], rax
lea rcx, [0x18010eaf4]
call fcn.18008989c
mov rax, qword [0x18010e8d8]
movss xmm0, dword [rax + rbx]
movss xmm2, dword [0x1800d776c]
comiss xmm2, xmm0
jae 0x18007ee1f
test rbx, rbx
jne 0x18007eae5
movaps xmm6, xmm9
movaps xmm3, xmm9
movaps xmm1, xmm2
movaps xmm10, xmm2
xorps xmm10, xmmword [0x1800a3400]
addss xmm6, xmm3
movaps xmm0, xmm2
subss xmm0, xmm3
comiss xmm0, xmm9
ja 0x18007ec0b
minss xmm6, xmm1
jmp 0x18007ec0f
mov ecx, esi
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + r13]
cmp dword [0x18010eaf4], eax
jle 0x18007eb32
lea rcx, [0x18010eaf4]
call fcn.1800898fc
cmp dword [0x18010eaf4], 0xffffffff
jne 0x18007eb32
mov ecx, 0x6c06da54
call fcn.18006a740
mov qword [0x18010e8d8], rax
lea rcx, [0x18010eaf4]
call fcn.18008989c
mov rax, qword [0x18010e8d8]
movss xmm10, dword [rax + rbx]
subss xmm10, dword [0x1800d776c]
mov ecx, esi
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdi + r13]
cmp dword [0x18010e774], eax
jle 0x18007eb95
lea rcx, [0x18010e774]
call fcn.1800898fc
cmp dword [0x18010e774], 0xffffffff
jne 0x18007eb95
mov ecx, 0x5d491345
call fcn.18006a740
mov qword [0x18010e918], rax
lea rcx, [0x18010e774]
call fcn.18008989c
mov rax, qword [0x18010e918]
movss xmm6, dword [rax + rbx]
mov eax, dword [rdi + r13]
cmp dword [0x18010eaf4], eax
jle 0x18007ebdf
lea rcx, [0x18010eaf4]
call fcn.1800898fc
cmp dword [0x18010eaf4], 0xffffffff
jne 0x18007ebdf
mov ecx, 0x6c06da54
call fcn.18006a740
mov qword [0x18010e8d8], rax
lea rcx, [0x18010eaf4]
call fcn.18008989c
mov rax, qword [0x18010e8d8]
movss xmm3, dword [rax + rbx]
movss xmm2, dword [0x1800d776c]
movaps xmm1, xmm2
addss xmm1, xmm6
comiss xmm3, xmm9
jae 0x18007eac7
maxss xmm1, xmm9
jmp 0x18007ec12
maxss xmm6, xmm1
movaps xmm1, xmm6
subss xmm1, xmm2
divss xmm10, xmm1
addss xmm10, xmm15
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
comisd xmm0, xmm8
jb 0x18007ee1f
ucomiss xmm10, xmm9
je 0x18007ee1f
movaps xmm0, xmm10
addss xmm0, xmm10
comiss xmm10, xmm14
jae 0x18007ec5f
mulss xmm0, xmm11
movss dword [rbp + 0x520], xmm0
movaps xmm12, xmm11
jmp 0x18007ec76
movss dword [rbp + 0x520], xmm11
movaps xmm12, xmm13
subss xmm12, xmm0
mulss xmm12, xmm11
minss xmm10, xmm7
mov eax, dword [0x1800d7880]
cdq
sub eax, edx
sar eax, 1
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mov eax, dword [0x1800d7768]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
addss xmm8, dword [0x1800a2d18]
movss dword [rbp + 0x530], xmm7
movss dword [rbp + 0x534], xmm8
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [0x1800a2d9c]
movss xmm6, dword [0x1800a2e2c]
movaps xmm2, xmm6
lea rdx, [rbp + 0x530]
mov rcx, qword [0x18010e410]
call fcn.1800371c0
movaps xmm0, xmmword [0x1800a30c0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180013100
mov rbx, qword [0x18010e410]
movss xmm0, dword [0x1800a2d98]
movss dword [rsp + 0x28], xmm0
xor r14d, r14d
mov dword [rsp + 0x20], r14d
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.180035970
mov dword [rbx + 0x78], r14d
movss dword [rbp + 0x538], xmm7
movss dword [rbp + 0x53c], xmm8
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
mulsd xmm0, qword [0x1800a2d80]
cvtpd2ps xmm3, xmm0
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movaps xmm2, xmm6
lea rdx, [rbp + 0x538]
mov rcx, qword [0x18010e410]
call fcn.1800371c0
cvttss2si eax, dword [rbp + 0x520]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1800a2c44]
movss dword [rbp - 0x30], xmm0
cvttss2si eax, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x1800a2c44]
movss dword [rbp - 0x2c], xmm1
mov dword [rbp - 0x28], r14d
mov dword [rbp - 0x24], 0x3f800000
lea rcx, [rbp - 0x30]
call fcn.180013100
mov rbx, qword [0x18010e410]
movss xmm12, dword [0x1800a2d98]
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r14d
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.180035970
mov dword [rbx + 0x78], r14d
movss xmm7, dword [0x1800a2d18]
movsd xmm8, qword [0x1800a2d48]
jmp 0x18007ee2b
mov esi, dword [0x1800d7120]
movss xmm12, dword [0x1800a2d98]
xor r14d, r14d
cmp byte [0x1800d77fa], 0
je 0x18007f0d2
mov ebx, dword [0x1800d7864]
mov edi, dword [0x1800d7860]
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18007ee55
test ebx, ebx
je 0x18007ee70
mov ecx, edi
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x18007ee67
cmp ebx, 1
je 0x18007ee70
cmp ebx, 2
jne 0x18007f0d2
mov ecx, dword [0x18010ec28]
test ecx, ecx
je 0x18007ee8f
sub ecx, 1
je 0x18007ee8f
cmp ecx, 1
je 0x18007ee8f
movss xmm10, dword [rbp + 0x520]
jmp 0x18007ee99
call qword [0x18010ec20]
movaps xmm10, xmm0
call fcn.18006f6a0
mov rbx, rax
test rax, rax
jne 0x18007eeac
movaps xmm0, xmm9
jmp 0x18007ef09
mov edx, esi
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18010e480], ecx
jle 0x18007eefd
lea rcx, [0x18010e480]
call fcn.1800898fc
cmp dword [0x18010e480], 0xffffffff
jne 0x18007eefd
mov ecx, 0xc566d10
call fcn.18006a740
mov qword [0x18010e248], rax
lea rcx, [0x18010e480]
call fcn.18008989c
mov rax, qword [0x18010e248]
movss xmm0, dword [rax + rbx]
subss xmm10, xmm0
mulss xmm10, dword [0x1800a2d30]
addss xmm10, xmm15
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
comisd xmm0, xmm8
jb 0x18007f0d2
ucomiss xmm10, xmm9
je 0x18007f0d2
movaps xmm0, xmm10
addss xmm0, xmm10
comiss xmm10, xmm14
jae 0x18007ef53
mulss xmm0, xmm11
movaps xmm15, xmm0
jmp 0x18007ef65
movaps xmm15, xmm11
subss xmm13, xmm0
mulss xmm13, xmm11
movaps xmm11, xmm13
mov eax, dword [0x1800d7768]
cdq
sub eax, edx
sar eax, 1
movd xmm8, eax
cvtdq2ps xmm8, xmm8
movss dword [rsp + 0x70], xmm8
mov eax, dword [0x1800d7880]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
subss xmm6, xmm7
movss dword [rsp + 0x74], xmm6
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [0x1800a2d9c]
movss xmm7, dword [0x1800a2f54]
movaps xmm2, xmm7
lea rdx, [rsp + 0x70]
mov rcx, qword [0x18010e410]
call fcn.1800371c0
movaps xmm0, xmmword [0x1800a30c0]
movups xmmword [rsp + 0x50], xmm0
mov rbx, qword [0x18010e410]
lea rcx, [rsp + 0x50]
call fcn.180013100
mov r9d, eax
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r14d
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.180035970
mov dword [rbx + 0x78], r14d
movss dword [rbp - 0x80], xmm8
movss dword [rbp - 0x7c], xmm6
minss xmm10, dword [0x1800a2d18]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
mulsd xmm0, qword [0x1800a2d80]
cvtpd2ps xmm3, xmm0
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movaps xmm2, xmm7
lea rdx, [rbp - 0x80]
mov rcx, qword [0x18010e410]
call fcn.1800371c0
cvttss2si eax, xmm15
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1800a2c44]
movss dword [rbp - 0x10], xmm0
cvttss2si eax, xmm11
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x1800a2c44]
movss dword [rbp - 0xc], xmm1
mov dword [rbp - 8], 0
mov dword [rbp - 4], 0x3f800000
mov rbx, qword [0x18010e410]
lea rcx, [rbp - 0x10]
call fcn.180013100
mov r9d, eax
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r14d
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.180035970
mov dword [rbx + 0x78], r14d
cmp byte [0x1800d77fb], 0
je 0x18007f1cf
movss xmm0, dword [0x1800d6b48]
movss xmm1, dword [0x1800d6b4c]
movss xmm2, dword [0x1800d6b50]
mov dword [rbp - 0x14], 0x3f800000
movd xmm6, dword [0x1800d4b28]
cvtdq2ps xmm6, xmm6
movups xmm3, xmmword [rbp - 0x20]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movdqa xmmword [rsp + 0x50], xmm3
lea rcx, [rsp + 0x50]
call fcn.180013100
mov edi, eax
mov eax, dword [0x1800d7768]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
mov eax, dword [0x1800d7880]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x44], xmm0
mov rbx, qword [0x18010e410]
test edi, 0xff000000
je 0x18007f1cf
comiss xmm6, xmm14
jb 0x18007f1cf
subss xmm6, xmm14
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movaps xmm2, xmm6
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.180036e50
dec dword [rbx + 0x78]
movss xmm0, dword [0x1800a2d34]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.180035970
mov dword [rbx + 0x78], r14d
lea r11, [rsp + 0x5d8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80070057
call fcn.180062be0
nop
mov ecx, 0x80004005
call fcn.180062be0
int3