Function at 0x18002d190
Capabilities:
Check for unmoving mouse cursor
Encode data using xor
Hash data with crc32
Log keystrokes via polling

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x368]
sub rsp, 0x468
mov rax, qword [0x18014b838]
lea r8, str.Background
movaps xmmword [rsp + 0x3d0], xmm11
xor edx, edx
movaps xmmword [rsp + 0x3b0], xmm13
mov rax, qword [rax + 0x40a8]
mov rcx, qword [rax]
call fcn.18003a9c0
mov ecx, dword [0x18014bce0]
xor r13d, r13d
movss xmm13, dword [0x1801116f4]
xorps xmm11, xmm11
mov qword [0x18014bf10], rax
test ecx, ecx
je 0x180029bde
sub ecx, 1
je 0x180029b9c
sub ecx, 1
je 0x180029b72
cmp ecx, 1
je 0x180029b2c
mov dword [0x18014ab60], 0x3f800000
mov dword [0x18014bd28], r13d
mov dword [0x18014ab58], 0x3f800000
jmp 0x180029c06
movss xmm1, dword [0x18014ab58]
movss xmm0, dword [0x18014bd28]
addss xmm1, dword [0x1801114e0]
addss xmm0, dword [0x180111c10]
comiss xmm1, xmm13
movss dword [0x18014ab58], xmm1
movss dword [0x18014bd28], xmm0
jb 0x180029c06
mov dword [0x18014bce0], r13d
jmp 0x180029c06
movss xmm0, dword [0x18014ab60]
addss xmm0, dword [0x1801114e0]
comiss xmm0, xmm13
movss dword [0x18014ab60], xmm0
jb 0x180029c06
mov dword [0x18014bce0], 3
jmp 0x180029c06
movss xmm1, dword [0x18014bd28]
movss xmm0, dword [0x18014ab58]
addss xmm1, dword [0x1801114e0]
addss xmm0, dword [0x180111c10]
comiss xmm1, xmm13
movss dword [0x18014bd28], xmm1
movss dword [0x18014ab58], xmm0
jb 0x180029c06
mov dword [0x18014bce0], 2
jmp 0x180029c06
movss xmm0, dword [0x18014ab60]
addss xmm0, dword [0x180111c10]
comiss xmm0, xmm11
movss dword [0x18014ab60], xmm0
ja 0x180029c06
mov dword [0x18014bce0], 1
mov rcx, qword [0x18014b6a8]
add rcx, 0x333bac0
cmp rcx, 0x40000
jbe 0x18002c2cb
mov qword [rsp + 0x458], rsi
lea rax, [rcx + 8]
movabs rsi, 0x7fffffff0000
cmp rax, rsi
jae 0x18002c2c3
cmp qword [rcx], r13
je 0x18002c2c3
mov qword [rsp + 0x460], rbx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x440], r14
mov qword [rsp + 0x438], r15
movaps xmmword [rsp + 0x420], xmm6
movaps xmmword [rsp + 0x410], xmm7
movaps xmmword [rsp + 0x400], xmm8
movaps xmmword [rsp + 0x3f0], xmm9
movaps xmmword [rsp + 0x3a0], xmm14
movaps xmmword [rsp + 0x390], xmm15
movaps xmmword [rsp + 0x3e0], xmm10
movaps xmmword [rsp + 0x3c0], xmm12
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call fcn.18000e3e0
cmp byte [0x18014b6e1], r13b
movss xmm7, dword [0x180111b04]
movss xmm6, dword [0x180111b48]
movss xmm9, dword [0x180111ad8]
movss xmm8, dword [0x180111b9c]
movss xmm14, dword [0x180111a08]
movss xmm15, dword [0x1801114d8]
je 0x180029fb9
mov eax, dword [0x18014b718]
lea rcx, [rsp + 0x50]
movaps xmm0, xmmword [0x180111e50]
cdq
sub eax, edx
movaps xmmword [rsp + 0x50], xmm0
sar eax, 1
movd xmm12, eax
mov eax, dword [0x18014b730]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm12, xmm12
movd xmm10, eax
cvtdq2ps xmm10, xmm10
subss xmm12, xmm7
addss xmm10, dword [0x180111af0]
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea r8, [rbp + 0x380]
movaps xmm15, xmm12
mov dword [rsp + 0x28], r13d
movaps xmm13, xmm10
movss dword [rbp + 0x388], xmm12
addss xmm13, dword [0x180111a8c]
addss xmm15, xmm6
movss dword [rbp + 0x38c], xmm10
mov r9d, eax
movss dword [rsp + 0x20], xmm9
lea rdx, [rbp + 0x388]
movss dword [rbp + 0x384], xmm13
movss dword [rbp + 0x380], xmm15
call fcn.180050800
cmp byte [0x18014b6e1], r13b
je 0x180029f42
mov ecx, dword [0x18014c450]
test ecx, ecx
je 0x180029dd2
sub ecx, 1
je 0x180029dd2
cmp ecx, 1
je 0x180029dd2
movss xmm6, dword [rbp + 0x380]
jmp 0x180029ddb
call qword [0x18014c448]
movaps xmm6, xmm0
call fcn.18000e3e0
mov rcx, rax
call fcn.18000d610
xorps xmm2, xmm2
subss xmm6, dword [rax]
cvtss2sd xmm2, xmm6
subsd xmm2, qword [0x180111880]
movaps xmm0, xmm2
mulsd xmm0, qword [0x1801119b8]
addsd xmm0, qword [0x180111710]
comisd xmm0, xmmword [0x1801117f0]
cvtpd2ps xmm1, xmm0
jae 0x180029e1f
xorps xmm1, xmm1
cmp byte [0x18014b6e1], r13b
je 0x180029f3a
ucomiss xmm1, xmm11
je 0x180029f3a
comiss xmm1, dword [0x1801115cc]
movaps xmm0, xmm1
addss xmm0, xmm1
jae 0x180029e54
mulss xmm0, xmm8
movaps xmm1, xmm8
movaps xmm3, xmm0
jmp 0x180029e65
movaps xmm1, xmm14
movaps xmm3, xmm8
subss xmm1, xmm0
mulss xmm1, xmm8
mulsd xmm2, qword [0x180111a48]
lea rcx, [rsp + 0x50]
mov dword [rbp - 0x68], r13d
cvttss2si eax, xmm3
mov dword [rbp - 0x64], 0x3f800000
movaps xmm6, xmm12
addss xmm6, dword [0x1801116f4]
cvtpd2ps xmm7, xmm2
movups xmm2, xmmword [rbp - 0x70]
minss xmm7, dword [0x180111b88]
movd xmm0, eax
cvttss2si eax, xmm1
cvtdq2ps xmm0, xmm0
movd xmm1, eax
mulss xmm0, dword [0x1801114d8]
cvtdq2ps xmm1, xmm1
movss xmm2, xmm0
mulss xmm1, dword [0x1801114d8]
shufps xmm2, xmm2, 0xe1
movss xmm2, xmm1
shufps xmm2, xmm2, 0xe1
movups xmmword [rbp - 0x70], xmm2
movdqa xmmword [rsp + 0x50], xmm2
call fcn.180038030
mov rcx, qword [0x18014bf10]
subss xmm7, xmm14
mov dword [rsp + 0x28], r13d
lea r8, [rbp + 0x380]
mov r9d, eax
movss dword [rbp + 0x384], xmm13
lea rdx, [rbp + 0x388]
movss dword [rbp + 0x388], xmm6
movss dword [rbp + 0x38c], xmm10
addss xmm7, xmm6
movss dword [rsp + 0x20], xmm9
movss dword [rbp + 0x380], xmm7
call fcn.180050800
movss xmm7, dword [0x180111b04]
movss xmm6, dword [0x180111b48]
movaps xmm0, xmmword [0x180111e50]
lea rcx, [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm0
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea r8, [rbp + 0x380]
movss dword [rbp + 0x384], xmm13
lea rdx, [rbp + 0x388]
movss xmm13, dword [0x1801116f4]
mov r9d, eax
movss dword [rsp + 0x30], xmm13
movss dword [rsp + 0x20], xmm9
movss dword [rbp + 0x380], xmm15
movss dword [rbp + 0x388], xmm12
movss dword [rbp + 0x38c], xmm10
call fcn.1800506f0
movss xmm15, dword [0x1801114d8]
cmp byte [0x18014b78c], r13b
mov r14d, dword [0x18014b550]
mov r15d, 4
je 0x18002a3a6
mov eax, dword [0x18014b718]
cdq
sub eax, edx
sar eax, 1
movd xmm12, eax
mov eax, dword [0x18014b730]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm12, xmm12
movd xmm10, eax
cvtdq2ps xmm10, xmm10
call fcn.18000e3e0
mov rcx, rax
call fcn.1800344c0
lea rcx, [rsp + 0x50]
mov rbx, rax
movaps xmm0, xmmword [0x180111e50]
subss xmm12, xmm7
addss xmm10, dword [0x180111ae4]
movaps xmmword [rsp + 0x50], xmm0
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea r8, [rbp + 0x388]
movaps xmm0, xmm12
mov dword [rsp + 0x28], r13d
addss xmm0, xmm6
movss dword [rbp + 0x390], xmm12
movaps xmm13, xmm10
movss dword [rbp + 0x394], xmm10
addss xmm13, dword [0x180111a8c]
mov r9d, eax
movss dword [rsp + 0x20], xmm9
lea rdx, [rbp + 0x390]
movss dword [rbp + 0x380], xmm0
movss dword [rbp + 0x388], xmm0
movss dword [rbp + 0x38c], xmm13
call fcn.180050800
test rbx, rbx
je 0x18002a331
cmp byte [0x18014b5f5], r13b
jne 0x18002a1ba
mov rcx, rbx
call fcn.18000ca30
mov rcx, rbx
movss xmm6, dword [rax]
call fcn.18000ca30
movss xmm7, dword [0x180111550]
movss xmm1, dword [0x18014b650]
movss xmm0, dword [rax]
mulss xmm0, xmm7
subss xmm6, xmm0
comiss xmm1, xmm6
ja 0x18002a1ba
comiss xmm1, xmm11
jbe 0x18002a1ba
mov rcx, rbx
call fcn.18000ca30
mov rcx, rbx
movss xmm6, dword [rax]
call fcn.18000ca30
cmp byte [0x18014b78c], r13b
movss xmm0, dword [rax]
mulss xmm0, xmm7
movss xmm7, dword [0x18014b650]
subss xmm6, xmm0
divss xmm7, xmm6
addss xmm7, dword [0x1801114f8]
je 0x18002a331
ucomiss xmm7, xmm11
je 0x18002a331
comiss xmm7, dword [0x1801115cc]
movaps xmm1, xmm7
addss xmm1, xmm7
jae 0x18002a156
mulss xmm1, xmm8
movaps xmm2, xmm1
jmp 0x18002a16b
movaps xmm0, xmm14
movaps xmm2, xmm8
subss xmm0, xmm1
mulss xmm0, xmm8
movaps xmm8, xmm0
cvttss2si eax, xmm2
mov dword [rbp - 0x68], r13d
mov dword [rbp - 0x64], 0x3f800000
movups xmm2, xmmword [rbp - 0x70]
movd xmm0, eax
cvttss2si eax, xmm8
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm15
mulss xmm1, xmm15
movss xmm2, xmm0
shufps xmm2, xmm2, 0xe1
movss xmm2, xmm1
shufps xmm2, xmm2, 0xe1
movups xmmword [rbp - 0x70], xmm2
movdqa xmmword [rsp + 0x50], xmm2
jmp 0x18002a2b7
mov rax, qword gs:[0x58]
mov rax, qword [rax + r14*8]
mov eax, dword [r15 + rax]
cmp dword [0x18014c360], eax
jle 0x18002a205
lea rcx, [0x18014c360]
call fcn.1800ceec8
cmp dword [0x18014c360], 0xffffffff
jne 0x18002a205
mov ecx, 0x6c06da54
call fcn.1800084b0
lea rcx, [0x18014c360]
mov qword [0x18014c1f8], rax
call fcn.1800cee5c
mov rax, qword [0x18014c1f8]
movss xmm0, dword [0x18014b648]
comiss xmm0, dword [rax + rbx]
jae 0x18002a331
mov rcx, rbx
call fcn.18000cab0
mov rcx, rbx
movss xmm7, dword [rax]
subss xmm7, dword [0x18014b648]
call fcn.18000ca30
mov rcx, rbx
movss xmm6, dword [rax]
call fcn.18000cab0
movss xmm3, dword [0x18014b648]
movaps xmm1, xmm6
addss xmm1, xmm3
movss xmm2, dword [rax]
comiss xmm2, xmm11
jae 0x18002a266
maxss xmm1, xmm11
jmp 0x18002a284
movaps xmm0, xmm3
addss xmm6, xmm2
subss xmm0, xmm2
comiss xmm0, xmm11
ja 0x18002a27d
minss xmm6, xmm1
jmp 0x18002a281
maxss xmm6, xmm1
movaps xmm1, xmm6
cmp byte [0x18014b78c], r13b
subss xmm1, xmm3
divss xmm7, xmm1
addss xmm7, dword [0x1801114f8]
je 0x18002a331
ucomiss xmm7, xmm11
je 0x18002a331
movaps xmm0, xmmword [0x180111e50]
movaps xmmword [rsp + 0x50], xmm0
mulss xmm7, dword [0x180111b48]
lea rcx, [rsp + 0x50]
movaps xmm6, xmm12
addss xmm6, dword [0x1801116f4]
minss xmm7, dword [0x180111b88]
call fcn.180038030
mov rcx, qword [0x18014bf10]
subss xmm7, xmm14
mov dword [rsp + 0x28], r13d
lea r8, [rbp + 0x388]
mov r9d, eax
movss dword [rsp + 0x20], xmm9
lea rdx, [rbp + 0x390]
movss dword [rbp + 0x38c], xmm13
movss dword [rbp + 0x390], xmm6
addss xmm7, xmm6
movss dword [rbp + 0x394], xmm10
movss dword [rbp + 0x388], xmm7
call fcn.180050800
movaps xmm0, xmmword [0x180111e50]
lea rcx, [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm0
call fcn.180038030
movss xmm0, dword [rbp + 0x380]
lea r8, [rbp + 0x380]
mov rcx, qword [0x18014bf10]
lea rdx, [rbp + 0x388]
movss dword [rbp + 0x384], xmm13
mov r9d, eax
movss xmm13, dword [0x1801116f4]
movss dword [rsp + 0x30], xmm13
movss dword [rsp + 0x20], xmm9
movss dword [rbp + 0x380], xmm0
movss dword [rbp + 0x388], xmm12
movss dword [rbp + 0x38c], xmm10
call fcn.1800506f0
movss xmm14, dword [0x180125a08]
call fcn.18000c350
mov rbx, rax
test rax, rax
je 0x18002c265
mov rcx, qword gs:[0x58]
mov r9d, 4
mov rcx, qword [rcx + r14*8]
mov ecx, dword [r9 + rcx]
cmp dword [0x18014c1cc], ecx
jle 0x18002a417
lea rcx, [0x18014c1cc]
call fcn.1800ceec8
cmp dword [0x18014c1cc], 0xffffffff
jne 0x18002a411
mov ecx, 0xae00109b
call fcn.1800084b0
lea rcx, [0x18014c1cc]
mov qword [0x18014be58], rax
call fcn.1800cee5c
mov r9d, 4
mov rax, qword [0x18014be58]
mov r15, qword [rax + rbx]
mov qword [rbp + 0x388], r15
test r15, r15
je 0x18002c265
mov rax, qword [r15 + 0x28]
mov qword [rsp + 0x448], r12
mov r12d, r13d
mov qword [rsp + 0x450], rdi
cmp dword [rax + 0x10], r13d
jle 0x18002bcfc
movss xmm15, dword [0x180111aa0]
mov rcx, r14
mov qword [rbp - 0x80], rcx
mov rax, qword [rax + 0x18]
mov rdx, qword gs:[0x58]
mov rdi, qword [rax + r13*8 + 0x20]
test rdi, rdi
je 0x18002bccc
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x18002bccc
mov r14, qword [rax + 0x30]
test r14, r14
je 0x18002bccc
add r14, 0x60
cmp r14, 0x40000
jbe 0x18002bccc
lea rax, [r14 + 8]
cmp rax, rsi
jae 0x18002bccc
mov r14, qword [r14]
test r14, r14
je 0x18002bccc
mov rsi, qword [rdx + rcx*8]
mov ebx, r9d
mov eax, dword [rbx + rsi]
cmp dword [0x18014c128], eax
jle 0x18002a506
lea rcx, [0x18014c128]
call fcn.1800ceec8
cmp dword [0x18014c128], 0xffffffff
jne 0x18002a506
mov ecx, 0x33f7a6a3
call fcn.1800084b0
lea rcx, [0x18014c128]
mov qword [0x18014bf40], rax
call fcn.1800cee5c
mov rax, qword [0x18014bf40]
cmp byte [rax + rdi], 0
jne 0x18002bcc2
mov eax, dword [rbx + rsi]
cmp dword [0x18014c19c], eax
jle 0x18002a557
lea rcx, [0x18014c19c]
call fcn.1800ceec8
cmp dword [0x18014c19c], 0xffffffff
jne 0x18002a557
mov ecx, 0x8bb6774c
call fcn.180006e10
mov rcx, qword [rax]
mov qword [0x18014c178], rcx
lea rcx, [0x18014c19c]
call fcn.1800cee5c
mov r8, rdi
call fcn.180034220
test rax, rax
je 0x18002bcc2
lea rdx, str.Local
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18002bcc2
cmp byte [0x18014b771], al
je 0x18002a75d
mov r8, qword [rdi]
test r8, r8
je 0x18002a75d
mov r8, qword [r8 + 0x10]
mov edx, 0xffffffff
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18002a5b0
test eax, eax
je 0x18002a75d
mov r9d, eax
lea r15, [0x1801090a0]
nop dword [rax]
movsx ecx, byte [r8]
lea r8, [r8 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r15 + rax*4]
sub r9, 1
jne 0x18002a5d0
mov r15, qword [rbp + 0x388]
not edx
cmp edx, 0x1fd25281
jne 0x18002a75d
mov eax, dword [rbx + rsi]
cmp dword [0x18014c298], eax
jle 0x18002a642
lea rcx, [0x18014c298]
call fcn.1800ceec8
cmp dword [0x18014c298], 0xffffffff
jne 0x18002a642
mov ecx, 0x3300df68
call fcn.180006e10
mov rcx, qword [rax]
mov qword [0x18014c020], rcx
lea rcx, [0x18014c298]
call fcn.1800cee5c
mov r8, rdi
call fcn.180034200
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.18000bef0
mov rbx, rax
call fcn.18000e3e0
mov rcx, rax
call fcn.18000dd20
movss xmm2, dword [rbx + 4]
movss xmm3, dword [rbx]
movss xmm4, dword [rbx + 8]
mov rcx, qword [rax + 0x88]
movsd xmm1, qword [rcx]
subss xmm4, dword [rcx + 8]
subss xmm3, xmm1
movsd qword [rsp + 0x40], xmm1
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
subss xmm2, xmm0
xorps xmm0, xmm0
mulss xmm4, xmm4
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm3, xmm2
addss xmm3, xmm4
sqrtss xmm0, xmm3
comiss xmm0, dword [0x180111a70]
jae 0x18002a75d
lea rdx, str.SVSwitch
mov rcx, rdi
call fcn.18000c590
mov rcx, rdi
call fcn.18000bfb0
lea rdx, [rbp + 0x3c]
mov rcx, rax
call fcn.18000bef0
mov eax, dword [0x18014b718]
lea r9, [rsp + 0x40]
movaps xmm0, xmmword [0x1801120c0]
cdq
mov rcx, qword [0x18014c130]
sub eax, edx
sar eax, 1
movaps xmmword [rsp + 0x40], xmm0
movd xmm1, eax
mov eax, dword [0x18014b730]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm1, xmm1
movd xmm2, eax
lea rax, str.Recycler_Off
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b808]
movss dword [rsp + 0x30], xmm15
cvtdq2ps xmm2, xmm2
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 3
movd edx, xmm1
subss xmm2, dword [0x180111ae4]
movd r8d, xmm2
call fcn.180010970
cmp byte [0x18014b736], 0
je 0x18002a771
mov r8, r14
mov rdx, rdi
call fcn.180018510
mov rcx, rdi
call fcn.18000c6b0
test al, al
je 0x18002ace8
cmp byte [0x18014b655], 0
movabs rsi, 0x7fffffff0000
je 0x18002a8b2
lea rcx, [rdi + 0x678]
cmp rcx, 0x40000
jbe 0x18002a7d6
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002a7d6
mov rcx, qword [rcx]
add rcx, 0x2c8
cmp rcx, 0x40000
jbe 0x18002a7d6
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002a7d6
cmp byte [rcx], 0
jne 0x18002a8b2
lea rcx, [rdi + 0x8b0]
cmp rcx, 0x40000
jbe 0x18002a7f3
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002a7f3
mov eax, dword [rcx]
jmp 0x18002a7f5
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002a856
call fcn.18000e3e0
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002a81f
cmp dword [rdi + 0x598], ecx
jne 0x18002a81f
movaps xmm0, xmmword [0x180111ec0]
jmp 0x18002a8ce
movss xmm0, dword [0x1801259e8]
lea rdx, [rbp]
movss xmm1, dword [0x1801259ec]
movss dword [rbp], xmm0
movss xmm0, dword [0x1801259f0]
movss dword [rbp + 8], xmm0
movss dword [rbp + 4], xmm1
mov dword [rbp + 0xc], 0x3f800000
jmp 0x18002a8d8
cmp rcx, 0x40000
jbe 0x18002a86c
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002a86c
mov eax, dword [rcx]
jmp 0x18002a86e
xor eax, eax
shr eax, 4
test al, 1
je 0x18002a8e0
cmp byte [0x18014b66e], 0
jne 0x18002a8e0
movss xmm0, dword [0x180125a50]
lea rdx, [rbp + 0x10]
movss xmm1, dword [0x180125a54]
movss dword [rbp + 0x10], xmm0
movss xmm0, dword [0x180125a58]
movss dword [rbp + 0x18], xmm0
movss dword [rbp + 0x14], xmm1
mov dword [rbp + 0x1c], 0x3f800000
jmp 0x18002a8d8
cmp byte [0x18014b760], 0
je 0x18002a8e0
mov rcx, rdi
call fcn.18000dba0
test al, al
je 0x18002a8e0
movaps xmm0, xmmword [0x180111ed0]
movaps xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.18001b4b0
movaps xmm0, xmmword [0x180111e50]
lea rcx, [rdi + 0x678]
movups xmmword [rsp + 0x40], xmm0
cmp rcx, 0x40000
jbe 0x18002a96d
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002a96d
mov rcx, qword [rcx]
add rcx, 0x2c8
cmp rcx, 0x40000
jbe 0x18002a96d
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002a96d
cmp byte [rcx], 0
je 0x18002a96d
mov rcx, rdi
call fcn.18000dba0
test al, al
je 0x18002aa2c
mov rcx, rdi
call fcn.18000c8b0
comiss xmm11, dword [rax]
jae 0x18002aa2c
movaps xmm0, xmmword [0x180111ed0]
lea rdx, [rsp + 0x40]
mov rcx, rdi
movaps xmmword [rsp + 0x40], xmm0
call fcn.18001f930
lea rcx, [rdi + 0x678]
jmp 0x18002aa45
lea rcx, [rdi + 0x8b0]
cmp rcx, 0x40000
jbe 0x18002a98a
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002a98a
mov eax, dword [rcx]
jmp 0x18002a98c
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002a9ea
call fcn.18000e3e0
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002a9ca
cmp dword [rdi + 0x598], ecx
jne 0x18002a9ca
movss xmm0, dword [0x180125ac0]
movss xmm1, dword [0x180125ac4]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125ac8]
jmp 0x18002aa08
movss xmm0, dword [0x1801259d8]
movss xmm1, dword [0x1801259dc]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x1801259e0]
jmp 0x18002aa08
movss xmm0, dword [0x180125a50]
movss xmm1, dword [0x180125a54]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125a58]
movss dword [rsp + 0x44], xmm1
lea rdx, [rsp + 0x40]
movss dword [rsp + 0x48], xmm0
mov rcx, rdi
movups xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
call fcn.18001e3a0
lea rcx, [rdi + 0x678]
cmp rcx, 0x40000
jbe 0x18002aa76
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002aa76
mov rcx, qword [rcx]
add rcx, 0x2c8
cmp rcx, 0x40000
jbe 0x18002aa76
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002aa76
cmp byte [rcx], 0
movaps xmm0, xmm11
movaps xmm1, xmm11
movaps xmm2, xmm11
jne 0x18002ab1b
lea rcx, [rdi + 0x8b0]
cmp rcx, 0x40000
jbe 0x18002aa93
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002aa93
mov eax, dword [rcx]
jmp 0x18002aa95
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002ab03
call fcn.18000e3e0
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002aacd
cmp dword [rdi + 0x598], ecx
jne 0x18002aacd
movss xmm0, dword [0x180125ac8]
movss xmm1, dword [0x180125ac4]
movss xmm2, dword [0x180125ac0]
jmp 0x18002ab1b
mov rcx, rdi
call fcn.18000c8b0
comiss xmm11, dword [rax]
jb 0x18002aae9
movaps xmm0, xmm11
movaps xmm1, xmm11
movaps xmm2, xmm13
jmp 0x18002ab1b
movss xmm0, dword [0x1801259e0]
movss xmm1, dword [0x1801259dc]
movss xmm2, dword [0x1801259d8]
jmp 0x18002ab1b
movss xmm0, dword [0x180125a58]
movss xmm1, dword [0x180125a54]
movss xmm2, dword [0x180125a50]
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x50], xmm2
mov rcx, rdi
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm0
mov dword [rsp + 0x5c], 0x3f800000
call fcn.18001d1d0
cmp byte [0x18014b701], 0
je 0x18002ab75
lea rcx, [rdi + 0x8b0]
cmp rcx, 0x40000
jbe 0x18002ab68
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002ab68
mov eax, dword [rcx]
jmp 0x18002ab6a
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002bccc
cmp byte [0x18014b6e8], 0
je 0x18002ab8e
mov rcx, rdi
call fcn.18000dba0
test al, al
jne 0x18002bccc
cmp byte [reloc.d2d1.dll_Ordinal_1], 0
je 0x18002abb2
call fcn.18000e3e0
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002abb2
cmp dword [rdi + 0x598], ecx
je 0x18002bccc
cmp byte [0x18014b6fb], 0
je 0x18002abcb
mov rcx, rdi
call fcn.18000d770
test al, al
je 0x18002bccc
mov r8d, 0x2f
lea rdx, [rbp + 0x48]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm11, dword [rax]
je 0x18002bccc
mov r8d, 0x2f
lea rdx, [rbp + 0x54]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm11, dword [rax + 4]
je 0x18002bccc
mov r8d, 0x2f
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm11, dword [rax + 8]
je 0x18002bccc
cmp byte [0x18014b6de], 0
jne 0x18002bccc
mov r8d, 0x2f
lea rdx, [rbp + 0x6c]
mov rcx, rdi
call fcn.18000dc80
movsd xmm6, qword [rax]
mov ebx, dword [rax + 8]
call fcn.18000e3e0
mov r8d, 0x2f
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.18000dc80
movsd xmm0, qword [rax]
movss xmm1, dword [rax + 8]
movaps xmm2, xmm0
movaps xmm3, xmm0
movsd qword [rsp + 0x40], xmm0
shufps xmm3, xmm3, 0x55
subss xmm2, xmm6
movaps xmm0, xmm6
movsd qword [rsp + 0x40], xmm6
shufps xmm0, xmm0, 0x55
subss xmm3, xmm0
movd xmm0, ebx
subss xmm1, xmm0
mulss xmm2, xmm2
mulss xmm3, xmm3
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
comiss xmm3, dword [0x180111bfc]
ja 0x18002bccc
mov rcx, rdi
call fcn.180013280
movaps xmm6, xmm0
comiss xmm14, xmm6
jbe 0x18002ace8
mov rcx, rdi
call fcn.18000c8b0
comiss xmm11, dword [rax]
jae 0x18002ace8
cmp byte [0x18014b6e7], 0
jne 0x18002ace8
movaps xmm14, xmm6
mov qword [0x18014b6a0], rdi
mov r8, qword [rdi]
test r8, r8
je 0x18002b282
mov r8, qword [r8 + 0x10]
mov edx, 0xffffffff
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r8 + rax], 0
jne 0x18002ad04
test eax, eax
je 0x18002b282
mov r9d, eax
lea r15, [0x1801090a0]
movsx ecx, byte [r8]
lea r8, [r8 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r15 + rax*4]
sub r9, 1
jne 0x18002ad20
mov r15, qword [rbp + 0x388]
not edx
cmp edx, 0xd9e96dc9
jne 0x18002b282
mov rcx, rdi
call fcn.18000c8b0
mov rcx, rdi
movss xmm12, dword [rax]
call fcn.18000bfb0
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000bef0
movsd xmm0, qword [rsp + 0x60]
lea rdx, [rbp + 0x380]
mov eax, dword [rsp + 0x68]
lea rcx, [rbp + 0x20]
movsd qword [rbp + 0x20], xmm0
mov qword [rbp + 0x380], 0
mov dword [rbp + 0x28], eax
call fcn.18000e860
test al, al
je 0x18002b282
cmp byte [0x18014b73a], 0
je 0x18002b244
xorps xmm0, xmm0
mov qword [rbp - 0x30], 0
movups xmmword [rbp - 0x40], xmm0
xor edx, edx
mov byte [rbp - 0x40], 0
mov r8d, 0x100
mov qword [rbp - 0x28], 0xf
lea rcx, [rbp + 0x90]
call sub.VCRUNTIME140.dll_memset
movsd xmm6, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x68]
call fcn.18000e3e0
mov r8d, 0x2f
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.18000dc80
lea rdx, str.Helicopter__1.0fm_
lea rcx, [rbp + 0x90]
movsd xmm0, qword [rax]
movss xmm1, dword [rax + 8]
movaps xmm2, xmm0
movaps xmm3, xmm0
movsd qword [rsp + 0x40], xmm0
shufps xmm3, xmm3, 0x55
subss xmm2, xmm6
movaps xmm0, xmm6
movsd qword [rsp + 0x40], xmm6
shufps xmm0, xmm0, 0x55
subss xmm3, xmm0
movd xmm0, ebx
subss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm2, xmm2
mulss xmm3, xmm3
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
sqrtss xmm0, xmm3
cvtps2pd xmm2, xmm0
movq r8, xmm2
call fcn.180034460
lea rax, [rbp + 0x90]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18002ae80
mov rcx, qword [rbp - 0x28]
mov r15, qword [rbp - 0x30]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x18002aecf
cmp rcx, 0xf
lea rax, [r15 + rsi]
lea rbx, [rbp - 0x40]
mov qword [rbp - 0x30], rax
cmova rbx, qword [rbp - 0x40]
lea rdx, [rbp + 0x90]
mov r8, rsi
lea rcx, [rbx + r15]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rsi]
mov byte [rax + r15], 0
jmp 0x18002aee7
lea r9, [rbp + 0x90]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.180034aa0
xorps xmm0, xmm0
mov qword [rbp - 0x48], 0xf
xor ebx, ebx
lea rcx, [rbp + 0x190]
movups xmmword [rbp - 0x60], xmm0
xor edx, edx
mov byte [rbp - 0x60], bl
mov r8d, 0x100
mov qword [rbp - 0x50], rbx
call sub.VCRUNTIME140.dll_memset
cvttss2si r8d, xmm12
lea rdx, str.__dHP_
lea rcx, [rbp + 0x190]
call fcn.180034460
lea rax, [rbp + 0x190]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], bl
jne 0x18002af40
mov rcx, qword [rbp - 0x48]
mov r15, qword [rbp - 0x50]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x18002af90
cmp rcx, 0xf
lea rax, [r15 + rsi]
lea rbx, [rbp - 0x60]
mov qword [rbp - 0x50], rax
cmova rbx, qword [rbp - 0x60]
lea rdx, [rbp + 0x190]
mov r8, rsi
lea rcx, [rbx + r15]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + rbx]
xor ebx, ebx
mov byte [rax + r15], 0
jmp 0x18002afa8
lea r9, [rbp + 0x190]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.180034aa0
cmp qword [rbp - 0x28], 0xf
lea rax, [rbp - 0x40]
movaps xmm0, xmmword [0x1801120e0]
lea r9, [rsp + 0x40]
cmova rax, qword [rbp - 0x40]
movss xmm10, dword [rbp + 0x384]
movss xmm9, dword [rbp + 0x380]
movaps xmm2, xmm10
mov rcx, qword [0x18014c130]
movaps xmm1, xmm9
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b808]
movss dword [rsp + 0x30], xmm15
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
movaps xmmword [rsp + 0x40], xmm0
call fcn.180010970
cmp qword [rbp - 0x48], 0xf
lea rax, [rbp - 0x60]
movaps xmm0, xmmword [0x180111f10]
lea r9, [rsp + 0x40]
cmova rax, qword [rbp - 0x60]
movaps xmm2, xmm10
addss xmm2, dword [0x180111ab4]
mov rcx, qword [0x18014c130]
movaps xmm1, xmm9
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b808]
movss dword [rsp + 0x30], xmm15
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x20], 3
call fcn.180010970
movaps xmm0, xmmword [0x180111e50]
lea rcx, [rsp + 0x40]
addss xmm10, dword [0x180111ac4]
subss xmm9, dword [0x180111ae4]
movaps xmmword [rsp + 0x40], xmm0
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea r8, [rbp + 0x390]
movaps xmm8, xmm9
mov dword [rsp + 0x28], ebx
addss xmm8, dword [0x180111b1c]
movaps xmm7, xmm10
movss dword [rbp + 0x398], xmm9
addss xmm7, dword [0x180111a78]
mov r9d, eax
movss dword [rbp + 0x39c], xmm10
lea rdx, [rbp + 0x398]
movss dword [rsp + 0x20], xmm11
movss dword [rbp + 0x390], xmm8
movss dword [rbp + 0x394], xmm7
call fcn.180050800
movaps xmm0, xmmword [0x180111ec0]
lea rcx, [rsp + 0x40]
movaps xmm6, xmm12
movaps xmmword [rsp + 0x40], xmm0
mulss xmm6, dword [0x1801114e4]
call fcn.180038030
mov rcx, qword [0x18014bf10]
addss xmm6, xmm9
mov dword [rsp + 0x28], ebx
lea r8, [rbp - 0x20]
mov r9d, eax
movss dword [rbp - 0x1c], xmm7
lea rdx, [rbp - 0x18]
movss dword [rbp - 0x18], xmm9
movss dword [rbp - 0x14], xmm10
movss dword [rbp - 0x20], xmm6
movss dword [rsp + 0x20], xmm11
call fcn.180050800
movaps xmm0, xmmword [0x180111e50]
lea rcx, [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
call fcn.180038030
movss dword [rbp - 0x10], xmm8
mov rcx, qword [0x18014bf10]
lea r8, [rbp - 0x10]
movss dword [rsp + 0x30], xmm13
lea rdx, [rbp - 8]
mov r9d, eax
movss dword [rsp + 0x20], xmm11
movss dword [rbp - 0xc], xmm7
movss dword [rbp - 8], xmm9
movss dword [rbp - 4], xmm10
call fcn.1800506f0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18002b1f2
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b1ed
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002bceb
call fcn.1800cf2ec
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0xf
jbe 0x18002b23d
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b238
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002bceb
call fcn.1800cf2ec
mov r15, qword [rbp + 0x388]
comiss xmm12, xmm11
jbe 0x18002b282
cmp byte [0x18014b700], 0
jne 0x18002b282
movsd xmm0, qword [rsp + 0x60]
lea rcx, [rsp + 0x70]
mov eax, dword [rsp + 0x68]
movsd qword [rsp + 0x70], xmm0
mov dword [rsp + 0x78], eax
call fcn.180013420
comiss xmm14, xmm0
jbe 0x18002b282
movaps xmm14, xmm0
mov qword [0x18014b6b8], rdi
mov r8, r14
mov rdx, rdi
call fcn.180019070
mov r8, r14
mov rdx, rdi
call fcn.180019560
mov r8, r14
mov rdx, rdi
call fcn.1800198e0
mov r8, r14
mov rdx, rdi
call fcn.180019d70
mov r8, r14
mov rdx, rdi
call fcn.18001a0f0
mov r8, r14
mov rdx, rdi
call fcn.18001a470
mov r8, r14
mov rdx, rdi
call fcn.18001a830
mov r8, r14
mov rdx, rdi
call fcn.18001ae10
cmp byte [0x18014b796], 0
je 0x18002b3ec
movaps xmm0, xmmword [0x180112000]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b7c9]
mov rdx, r14
movzx r8d, byte [0x18014b7c8]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Stone_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.stone_collectable.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125bec]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111eb0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b7c9]
mov rdx, r14
movzx r8d, byte [0x18014b795]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Sulfur_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.sulfur_collectable.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125bec]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111ef0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b7c9]
mov rdx, r14
movzx r8d, byte [0x18014b797]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Metal_Collectable
mov qword [rsp + 0x30], rax
lea rax, str.metal_collectable.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125bec]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112000]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b7c9]
mov rdx, r14
movzx r8d, byte [0x18014b7c8]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Stone_Ore
mov qword [rsp + 0x30], rax
lea rax, str.stone_ore.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125bec]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111eb0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b7c9]
mov rdx, r14
movzx r8d, byte [0x18014b795]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Sulfur_Ore
mov qword [rsp + 0x30], rax
lea rax, str.sulfur_ore.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125bec]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111ef0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b7c9]
mov rdx, r14
movzx r8d, byte [0x18014b797]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Metal_Ore
mov qword [rsp + 0x30], rax
lea rax, str.metal_ore.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180125bec]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111fd0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b744]
mov rdx, r14
movzx r8d, byte [0x18014b745]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Elite_Crate
mov qword [rsp + 0x30], rax
lea rax, str.crate_elite.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111f40]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b744]
mov rdx, r14
movzx r8d, byte [0x18014b742]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Military_Crate
mov qword [rsp + 0x30], rax
lea rax, str.crate_normal.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112030]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, str.Airdrop
mov qword [rsp + 0x30], rax
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
lea rax, str.supply_drop.prefab
movzx r9d, byte [0x18014b744]
mov rdx, r14
movzx r8d, byte [0x18014b740]
mov rcx, rdi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111f30]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b744]
mov rdx, r14
movzx r8d, byte [0x18014b741]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Heli_Crate
mov qword [rsp + 0x30], rax
lea rax, str.heli_crate.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111f90]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b744]
mov rdx, r14
movzx r8d, byte [0x18014b743]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Bradley_Crate
mov qword [rsp + 0x30], rax
lea rax, str.bradley_crate.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x1801120c0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b73c]
mov rdx, r14
movzx r8d, byte [0x18014b73d]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Minicopter
mov qword [rsp + 0x30], rax
lea rax, str.minicopter.entity.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112010]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b73c]
mov rdx, r14
movzx r8d, byte [0x18014b73f]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Scrap_Heli
mov qword [rsp + 0x30], rax
lea rax, str.scraptransporthelicopter.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x1801120a0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b73c]
movzx r8d, byte [0x18014b73b]
mov qword [rsp + 0x38], rax
lea rax, str.Boat
mov qword [rsp + 0x30], rax
lea rax, str.rowboat.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
mov rdx, r14
mov rcx, rdi
call fcn.180018b20
movaps xmm0, xmmword [0x1801120d0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b73c]
mov rdx, r14
movzx r8d, byte [0x18014b73e]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.RHIB
mov qword [rsp + 0x30], rax
lea rax, str.rhib.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111ea0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b707]
mov rdx, r14
movzx r8d, byte [0x18014b706]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Auto_Turret
mov qword [rsp + 0x30], rax
lea rax, str.autoturret_deployed.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111e90]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b707]
mov rdx, r14
movzx r8d, byte [0x18014b703]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Flame_Turret
mov qword [rsp + 0x30], rax
lea rax, str.flameturret.deployed.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111ff0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b707]
mov rdx, r14
movzx r8d, byte [0x18014b734]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Shotgun_Trap
mov qword [rsp + 0x30], rax
lea rax, str.guntrap.deployed.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112090]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b707]
mov rdx, r14
movzx r8d, byte [0x18014b705]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Landmine
mov qword [rsp + 0x30], rax
lea rax, str.landmine.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x1801120b0]
lea rax, [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov rdx, r14
movzx r9d, byte [0x18014b707]
mov rcx, rdi
movzx r8d, byte [0x18014b735]
mov qword [rsp + 0x38], rax
lea rax, str.SAM_Site
mov qword [rsp + 0x30], rax
lea rax, str.sam_site_turret_deployed.prefab
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112080]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b707]
mov rdx, r14
movzx r8d, byte [0x18014b704]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Beartrap
mov qword [rsp + 0x30], rax
lea rax, str.beartrap.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111fa0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b758]
mov rdx, r14
movzx r8d, byte [0x18014b756]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Hemp
mov qword [rsp + 0x30], rax
lea rax, str.hemp_collectable.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112020]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b758]
mov rdx, r14
movzx r8d, byte [0x18014b759]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Bodybag
mov qword [rsp + 0x30], rax
lea rax, str.item_drop_backpack.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112040]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b752]
mov rdx, r14
movzx r8d, byte [0x18014b754]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, [0x18010f448]
mov qword [rsp + 0x30], rax
lea rax, str.box.wooden.large.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111ef0]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, str.Bear
mov qword [rsp + 0x30], rax
lea rax, str.bear.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movzx r9d, byte [0x18014b74d]
mov rdx, r14
movzx r8d, byte [0x18014b74a]
mov rcx, rdi
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180112050]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b74d]
mov rdx, r14
movzx r8d, byte [0x18014b74c]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Wolf
mov qword [rsp + 0x30], rax
lea rax, str.wolf.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111fb0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b74d]
mov rdx, r14
movzx r8d, byte [0x18014b74b]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, [0x18010f4a8]
mov qword [rsp + 0x30], rax
lea rax, str.boar.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111f90]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b74d]
mov rdx, r14
movzx r8d, byte [0x18014b74e]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Chicken
mov qword [rsp + 0x30], rax
lea rax, str.chicken.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movaps xmm0, xmmword [0x180111fe0]
lea rax, [rsp + 0x40]
movzx r9d, byte [0x18014b74d]
mov rdx, r14
movzx r8d, byte [0x18014b74f]
mov rcx, rdi
mov qword [rsp + 0x38], rax
lea rax, str.Horse
mov qword [rsp + 0x30], rax
lea rax, str.horse.prefab
movaps xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x180111ba8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018b20
movabs rsi, 0x7fffffff0000
mov rax, qword [r15 + 0x28]
inc r12d
inc r13
cmp r12d, dword [rax + 0x10]
jge 0x18002bcf2
mov rcx, qword [rbp - 0x80]
mov r9d, 4
jmp 0x18002a463
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r14d, dword [0x18014b550]
xor r13d, r13d
cmp byte [0x18014b6f1], 0
mov rbx, qword [0x18014b6a0]
je 0x18002be74
lea rcx, [rbx + 0xb8]
cmp rcx, 0x40000
jbe 0x18002be04
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002be04
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002be04
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002be04
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002be04
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002be04
mov rdi, qword [rcx]
test rdi, rdi
je 0x18002be04
mov rax, qword gs:[0x58]
mov ecx, r14d
mov r15d, 4
mov rax, qword [rax + rcx*8]
mov eax, dword [r15 + rax]
cmp dword [0x18014bfc8], eax
jle 0x18002bdd9
lea rcx, [0x18014bfc8]
call fcn.1800ceec8
cmp dword [0x18014bfc8], 0xffffffff
jne 0x18002bdd9
mov ecx, 0x56e64b7d
call fcn.180006e10
mov rcx, qword [rax]
mov qword [0x18014bf08], rcx
lea rcx, [0x18014bfc8]
call fcn.1800cee5c
mov rdx, qword [0x18014bf08]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rbp - 0x80]
mov dword [rsp + 0x68], 0
call fcn.180034160
jmp 0x18002be19
mov qword [rbp - 0x80], 0
mov dword [rbp - 0x78], 0
mov r15d, 4
mov ecx, dword [0x18014c090]
test ecx, ecx
je 0x18002be2d
sub ecx, 1
je 0x18002be2d
cmp ecx, 1
jne 0x18002be7a
movsd xmm1, qword [rbp - 0x80]
lea r8, [rsp + 0x50]
movaps xmm0, xmmword [0x1801120e0]
lea rcx, [rsp + 0x70]
mov eax, dword [rbp - 0x78]
movss xmm3, dword [0x1801114f8]
movsd qword [rsp + 0x70], xmm1
movss xmm1, dword [0x180111960]
movss dword [rsp + 0x20], xmm11
movaps xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x78], eax
call qword [0x18014c088]
jmp 0x18002be7a
mov r15d, 4
test rbx, rbx
je 0x18002c0ee
lea rcx, [rbx + 0xb8]
cmp rcx, 0x40000
jbe 0x18002bfb1
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002bfb1
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002bfb1
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002bfb1
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002bfb1
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002bfb1
mov rdi, qword [rcx]
test rdi, rdi
je 0x18002bfb1
mov rax, qword gs:[0x58]
mov edx, r14d
mov r8d, r15d
mov rax, qword [rax + rdx*8]
mov eax, dword [r8 + rax]
cmp dword [0x18014bfc8], eax
jle 0x18002bf49
lea rcx, [0x18014bfc8]
call fcn.1800ceec8
cmp dword [0x18014bfc8], 0xffffffff
jne 0x18002bf49
mov ecx, 0x56e64b7d
call fcn.180006e10
lea rcx, [0x18014bfc8]
mov rdx, qword [rax]
mov qword [0x18014bf08], rdx
call fcn.1800cee5c
mov rdx, qword [0x18014bf08]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x68], 0
call fcn.180034160
movss xmm0, dword [rsp + 0x70]
ucomiss xmm0, xmm11
je 0x18002bfb1
mov r8d, 0x2f
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.18000dc80
ucomiss xmm11, dword [rax + 4]
je 0x18002bfb1
mov r8d, 0x2f
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.18000dc80
ucomiss xmm11, dword [rax + 8]
jne 0x18002bfb8
mov qword [0x18014b6a0], r13
lea rcx, [rbx + 0x678]
cmp rcx, 0x40000
jbe 0x18002c002
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002c002
mov rcx, qword [rcx]
add rcx, 0x2c8
cmp rcx, 0x40000
jbe 0x18002c002
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002c002
cmp byte [rcx], 0
je 0x18002c002
cmp byte [0x18014b6e8], 0
je 0x18002c002
mov qword [0x18014b6a0], r13
lea rcx, [rbx + 0x8b0]
cmp rcx, 0x40000
jbe 0x18002c01f
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002c01f
mov eax, dword [rcx]
jmp 0x18002c022
mov eax, r13d
shr eax, 4
test al, 1
je 0x18002c039
cmp byte [0x18014b701], 0
je 0x18002c039
mov qword [0x18014b6a0], r13
call fcn.18000e3e0
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002c060
cmp dword [rbx + 0x598], ecx
jne 0x18002c060
cmp byte [reloc.d2d1.dll_Ordinal_1], 0
je 0x18002c060
mov qword [0x18014b6a0], r13
mov rax, qword gs:[0x58]
mov ecx, r14d
mov edx, r15d
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x18014c404], eax
jle 0x18002c0b0
lea rcx, [0x18014c404]
call fcn.1800ceec8
cmp dword [0x18014c404], 0xffffffff
jne 0x18002c0b0
mov ecx, 0x43f29029
call fcn.1800084b0
lea rcx, [0x18014c404]
mov qword [0x18014c200], rax
call fcn.1800cee5c
mov rax, qword [0x18014c200]
movss xmm0, dword [rbx + rax]
comiss xmm0, xmm11
ja 0x18002c0d0
mov byte [0x18014b6e7], 0
mov qword [0x18014b6a0], r13
cmp byte [0x18014b6fb], 0
je 0x18002c0ee
mov rcx, rbx
call fcn.18000d770
test al, al
jne 0x18002c0ee
mov qword [0x18014b6a0], r13
jmp 0x18002c0f8
cmp qword [0x18014b6a0], 0
jne 0x18002c0ff
mov byte [0x18014b6e7], 0
mov rbx, qword [0x18014b6b8]
test rbx, rbx
je 0x18002c1e9
mov rax, qword gs:[0x58]
mov rsi, rbx
mov edx, r14d
mov edi, r15d
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x18014c128], eax
jle 0x18002c169
lea rcx, [0x18014c128]
call fcn.1800ceec8
cmp dword [0x18014c128], 0xffffffff
jne 0x18002c162
mov ecx, 0x33f7a6a3
call fcn.1800084b0
lea rcx, [0x18014c128]
mov qword [0x18014bf40], rax
call fcn.1800cee5c
mov rbx, qword [0x18014b6b8]
mov rax, qword [0x18014bf40]
cmp byte [rax + rsi], 0
je 0x18002c180
mov rbx, r13
mov qword [0x18014b6b8], rbx
test rbx, rbx
je 0x18002c1e2
mov rax, qword gs:[0x58]
mov edx, r14d
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x18014c19c], eax
jle 0x18002c1d5
lea rcx, [0x18014c19c]
call fcn.1800ceec8
cmp dword [0x18014c19c], 0xffffffff
jne 0x18002c1d5
mov ecx, 0x8bb6774c
call fcn.180006e10
lea rcx, [0x18014c19c]
mov rdx, qword [rax]
mov qword [0x18014c178], rdx
call fcn.1800cee5c
mov r8, rbx
call fcn.180034220
test rax, rax
jne 0x18002c1e9
mov qword [0x18014b6b8], r13
cmp byte [0x18014b6de], 0
je 0x18002c1f9
mov qword [0x18014b6a0], r13
cmp byte [0x18014b700], 0
je 0x18002c209
mov qword [0x18014b6b8], r13
call fcn.18000e3e0
test rax, rax
je 0x18002c255
cmp byte [0x18014b6e4], 0
je 0x18002c255
call fcn.18000e3e0
mov ecx, dword [rax + 0x598]
mov rax, qword [0x18014b6a0]
test ecx, ecx
je 0x18002c23a
cmp dword [rax + 0x598], ecx
je 0x18002c255
test rax, rax
je 0x18002c255
mov ecx, dword [0x18014b7c4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002c255
call fcn.1800139e0
mov rdi, qword [rsp + 0x450]
mov r12, qword [rsp + 0x448]
movaps xmm10, xmmword [rsp + 0x3e0]
movaps xmm12, xmmword [rsp + 0x3c0]
movaps xmm8, xmmword [rsp + 0x400]
movaps xmm7, xmmword [rsp + 0x410]
movaps xmm6, xmmword [rsp + 0x420]
mov r15, qword [rsp + 0x438]
mov r14, qword [rsp + 0x440]
movaps xmm9, xmmword [rsp + 0x3f0]
movaps xmm14, xmmword [rsp + 0x3a0]
mov rbx, qword [rsp + 0x460]
movaps xmm15, xmmword [rsp + 0x390]
mov rsi, qword [rsp + 0x458]
movaps xmm11, xmmword [rsp + 0x3d0]
movaps xmm13, xmmword [rsp + 0x3b0]
add rsp, 0x468
pop r13
pop rbp
ret
push rbp
push rdi
push r12
lea rbp, [rsp - 0xa00]
sub rsp, 0xb00
cmp byte [0x18014bcdc], 0
movss xmm0, dword [0x18014ab68]
movss xmm1, dword [0x180111be4]
movaps xmmword [rsp + 0xa30], xmm15
je 0x18002d1cb
ucomiss xmm0, xmm1
je 0x18002d203
comiss xmm0, dword [0x180111bec]
mov byte [0x18014bcdc], 0
jae 0x18002d1ed
addss xmm0, dword [0x1801115cc]
movss dword [0x18014ab68], xmm0
jmp 0x18002d1f4
mov byte [0x18014bcdc], 1
comiss xmm0, xmm1
jb 0x18002d203
mov dword [0x18014ab68], 0xc3960000
mov ecx, dword [0x18014bcfc]
xor r12d, r12d
movaps xmmword [rsp + 0xa60], xmm12
xorps xmm15, xmm15
movss xmm12, dword [0x1801116f4]
test ecx, ecx
je 0x18002d30f
sub ecx, 1
je 0x18002d2cd
sub ecx, 1
je 0x18002d2a3
cmp ecx, 1
je 0x18002d25d
mov dword [0x18014ab64], 0x3f800000
mov dword [0x18014bcf8], r12d
mov dword [0x18014ab78], 0x3f800000
jmp 0x18002d337
movss xmm1, dword [0x18014ab78]
movss xmm0, dword [0x18014bcf8]
addss xmm1, dword [0x1801114e0]
addss xmm0, dword [0x180111c10]
comiss xmm1, xmm12
movss dword [0x18014ab78], xmm1
movss dword [0x18014bcf8], xmm0
jb 0x18002d337
mov dword [0x18014bcfc], r12d
jmp 0x18002d337
movss xmm0, dword [0x18014ab64]
addss xmm0, dword [0x1801114e0]
comiss xmm0, xmm12
movss dword [0x18014ab64], xmm0
jb 0x18002d337
mov dword [0x18014bcfc], 3
jmp 0x18002d337
movss xmm1, dword [0x18014bcf8]
movss xmm0, dword [0x18014ab78]
addss xmm1, dword [0x1801114e0]
addss xmm0, dword [0x180111c10]
comiss xmm1, xmm12
movss dword [0x18014bcf8], xmm1
movss dword [0x18014ab78], xmm0
jb 0x18002d337
mov dword [0x18014bcfc], 2
jmp 0x18002d337
movss xmm0, dword [0x18014ab64]
addss xmm0, dword [0x180111c10]
comiss xmm0, xmm15
movss dword [0x18014ab64], xmm0
ja 0x18002d337
mov dword [0x18014bcfc], 1
cmp byte [0x18014b7ca], r12b
mov qword [rsp + 0xaf8], rbx
movaps xmmword [rsp + 0xac0], xmm6
movaps xmmword [rsp + 0xab0], xmm7
movaps xmmword [rsp + 0xaa0], xmm8
movaps xmmword [rsp + 0xa90], xmm9
movaps xmmword [rsp + 0xa80], xmm10
movaps xmmword [rsp + 0xa70], xmm11
movaps xmmword [rsp + 0xa50], xmm13
movaps xmmword [rsp + 0xa40], xmm14
je 0x18002d648
mov ecx, dword [0x18014b718]
mov eax, ecx
movss xmm3, dword [0x18014bcf0]
cdq
sub eax, edx
sar eax, 1
movd xmm10, eax
mov eax, dword [0x18014b730]
cdq
sub eax, edx
sar eax, 1
comiss xmm3, dword [0x180111b3c]
movd xmm11, eax
cvtdq2ps xmm11, xmm11
cvtdq2ps xmm10, xmm10
jbe 0x18002d3d0
xorps xmm3, xmm3
addss xmm3, dword [0x180125bf4]
movss xmm14, dword [0x180111508]
mov edi, r12d
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mov dword [rbp + 0x13c], 0x3f800000
mov dword [rbp + 0x14c], 0x3f800000
movss dword [0x18014bcf0], xmm3
divss xmm0, dword [0x180125bf0]
movss dword [rbp - 0x10], xmm10
mulss xmm0, dword [0x180111544]
movss dword [rbp - 0xc], xmm11
cvttss2si eax, xmm0
movd xmm15, eax
cvtdq2ps xmm15, xmm15
movaps xmm13, xmm15
mulss xmm13, dword [0x180111858]
nop dword [rax]
mulss xmm3, xmm14
movd xmm2, edi
cvtdq2ps xmm2, xmm2
movaps xmm1, xmm2
mulss xmm2, xmm14
mulss xmm1, xmm14
addss xmm2, dword [0x180111664]
addss xmm1, xmm3
addss xmm2, xmm3
movaps xmm0, xmm1
movaps xmm1, xmm2
call fcn.1800d0193
movaps xmm1, xmm0
movaps xmm2, xmm0
shufps xmm2, xmm0, 0xe
mov ecx, 0x10
shufps xmm0, xmm0, 1
mulss xmm0, xmm15
mulss xmm1, xmm15
cvttss2si eax, xmm1
mov dword [rbp + 0x120], eax
cvttss2si eax, xmm0
movaps xmm0, xmm13
mulss xmm0, xmm2
mov dword [rbp + 0x124], eax
shufps xmm2, xmm2, 1
cvttss2si eax, xmm0
movaps xmm0, xmm13
mulss xmm0, xmm2
mov dword [rbp + 0x128], eax
cvttss2si eax, xmm0
mov dword [rbp + 0x12c], eax
call fcn.1800cef40
mov r8d, 0x10
lea rdx, [rbp + 0x120]
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memmove
movd xmm0, dword [rbx + 4]
lea rcx, [rbp + 0x130]
movss xmm1, dword [0x180125ab4]
movaps xmm7, xmm11
movd xmm6, dword [rbx]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm6, xmm6
subss xmm7, xmm0
movss dword [rbp + 0x134], xmm1
movss xmm0, dword [0x180125ab0]
addss xmm6, xmm10
movss dword [rbp + 0x130], xmm0
movss xmm0, dword [0x180125ab8]
movss dword [rbp + 0x138], xmm0
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea rdx, [rbp - 0x10]
mov r9d, eax
movss dword [rbp + 0xa38], xmm6
lea r8, [rbp + 0xa38]
movss dword [rbp + 0xa3c], xmm7
movss dword [rsp + 0x20], xmm12
call fcn.180050590
movd xmm0, dword [rbx + 0xc]
movaps xmm9, xmm11
movd xmm8, dword [rbx + 8]
movaps xmm7, xmm11
movd xmm6, dword [rbx]
movss xmm1, dword [0x180125ab4]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm8, xmm8
subss xmm9, xmm0
movss dword [rbp + 0x144], xmm1
movd xmm0, dword [rbx + 4]
addss xmm8, xmm10
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm6, xmm6
subss xmm7, xmm0
movss xmm0, dword [0x180125ab0]
movss dword [rbp + 0x140], xmm0
addss xmm6, xmm10
movss xmm0, dword [0x180125ab8]
movss dword [rbp + 0x148], xmm0
lea rcx, [rbp + 0x140]
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea rdx, [rbp]
mov r9d, eax
movss dword [rbp - 8], xmm8
lea r8, [rbp - 8]
movss dword [rbp - 4], xmm9
movss dword [rbp], xmm6
movss dword [rbp + 4], xmm7
movss dword [rsp + 0x20], xmm12
call fcn.180050590
mov edx, 0x10
mov rcx, rbx
add edi, 0x5a
call fcn.1800cf2ec
cmp edi, 0x168
jge 0x18002d644
movss xmm3, dword [0x18014bcf0]
jmp 0x18002d440
xorps xmm15, xmm15
cmp byte [0x18014b748], r12b
mov rdi, qword [0x18014b6a0]
je 0x18002daf9
mov ecx, dword [0x18014b7bc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002d74f
mov rdx, qword [0x18014ba08]
xorps xmm0, xmm0
cmp rdx, qword [0x18014ba10]
mov eax, 0x504d
movaps xmm2, xmmword [0x180111ec0]
movdqa xmm1, xmmword [0x180111d20]
movups xmmword [rbp + 0x1e0], xmm0
mov word [rbp + 0x1e0], ax
mov byte [rbp + 0x1e2], r12b
movdqu xmmword [rbp + 0x1f0], xmm1
movups xmmword [rbp + 0x200], xmm2
je 0x18002d6ff
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], r12
movups xmm0, xmmword [rbp + 0x1e0]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x1f0]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp + 0x1f0], r12
movups xmm0, xmmword [rbp + 0x200]
mov byte [rbp + 0x1e0], r12b
movups xmmword [rdx + 0x20], xmm0
add qword [0x18014ba08], 0x30
jmp 0x18002d70b
lea r8, [rbp + 0x1e0]
call fcn.1800359c0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x18002d74f
mov rcx, qword [rbp + 0x1e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d74a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d74a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf2ec
mov ecx, dword [0x18014b7b0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002d7ef
movaps xmm2, xmmword [0x1801120e0]
lea rdx, [rbp + 0x290]
movdqa xmm1, xmmword [0x180111d20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov eax, 0x4d54
mov byte [rbp + 0x292], r12b
mov word [rbp + 0x290], ax
movdqu xmmword [rbp + 0x2a0], xmm1
movups xmmword [rbp + 0x2b0], xmm2
call fcn.180032350
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x18002d7ef
mov rcx, qword [rbp + 0x290]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d7ea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d7ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf2ec
mov ecx, dword [0x18014b7b4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002d890
movaps xmm6, xmmword [0x1801120e0]
lea rdx, [0x18010f598]
xorps xmm0, xmm0
lea rcx, [rbp + 0x2f0]
xorps xmm1, xmm1
mov r8d, 2
movups xmmword [rbp + 0x2f0], xmm0
movdqu xmmword [rbp + 0x300], xmm1
call fcn.180034c30
lea rdx, [rbp + 0x2f0]
movups xmmword [rbp + 0x310], xmm6
call fcn.180032350
mov rdx, qword [rbp + 0x308]
cmp rdx, 0xf
jbe 0x18002d890
mov rcx, qword [rbp + 0x2f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d88b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d88b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf2ec
mov ecx, dword [0x18014b7a0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002d931
movaps xmm6, xmmword [0x1801120e0]
lea rdx, str.Desync
xorps xmm0, xmm0
lea rcx, [rbp + 0x2c0]
xorps xmm1, xmm1
mov r8d, 6
movups xmmword [rbp + 0x2c0], xmm0
movdqu xmmword [rbp + 0x2d0], xmm1
call fcn.180034c30
lea rdx, [rbp + 0x2c0]
movups xmmword [rbp + 0x2e0], xmm6
call fcn.180032350
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 0xf
jbe 0x18002d931
mov rcx, qword [rbp + 0x2c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d92c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d92c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf2ec
mov ecx, dword [0x18014b7a4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002d9a3
movaps xmm6, xmmword [0x1801120e0]
lea rdx, str.Zoom
xorps xmm0, xmm0
lea rcx, [rbp + 0x320]
xorps xmm1, xmm1
mov r8d, 4
movups xmmword [rbp + 0x320], xmm0
movdqu xmmword [rbp + 0x330], xmm1
call fcn.180034c30
lea rdx, [rbp + 0x320]
movups xmmword [rbp + 0x340], xmm6
call fcn.180032350
mov r8, qword [rbp + 0x338]
cmp r8, 0xf
jbe 0x18002d9a3
mov rdx, qword [rbp + 0x320]
call fcn.180033d00
mov ecx, dword [0x18014b7c0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002da15
movaps xmm6, xmmword [0x1801120e0]
lea rdx, str.Debug
xorps xmm0, xmm0
lea rcx, [rbp + 0x350]
xorps xmm1, xmm1
mov r8d, 5
movups xmmword [rbp + 0x350], xmm0
movdqu xmmword [rbp + 0x360], xmm1
call fcn.180034c30
lea rdx, [rbp + 0x350]
movups xmmword [rbp + 0x370], xmm6
call fcn.180032350
mov r8, qword [rbp + 0x368]
cmp r8, 0xf
jbe 0x18002da15
mov rdx, qword [rbp + 0x350]
call fcn.180033d00
mov ecx, dword [0x18014b798]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002da87
movaps xmm6, xmmword [0x1801120e0]
lea rdx, [0x18010f594]
xorps xmm0, xmm0
lea rcx, [rbp + 0x380]
xorps xmm1, xmm1
mov r8d, 2
movups xmmword [rbp + 0x380], xmm0
movdqu xmmword [rbp + 0x390], xmm1
call fcn.180034c30
lea rdx, [rbp + 0x380]
movups xmmword [rbp + 0x3a0], xmm6
call fcn.180032350
mov r8, qword [rbp + 0x398]
cmp r8, 0xf
jbe 0x18002da87
mov rdx, qword [rbp + 0x380]
call fcn.180033d00
mov ecx, dword [0x18014b7a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002daf9
movaps xmm6, xmmword [0x1801120e0]
lea rdx, [0x18010f59c]
xorps xmm0, xmm0
lea rcx, [rbp + 0x3b0]
xorps xmm1, xmm1
mov r8d, 2
movups xmmword [rbp + 0x3b0], xmm0
movdqu xmmword [rbp + 0x3c0], xmm1
call fcn.180034c30
lea rdx, [rbp + 0x3b0]
movups xmmword [rbp + 0x3d0], xmm6
call fcn.180032350
mov r8, qword [rbp + 0x3c8]
cmp r8, 0xf
jbe 0x18002daf9
mov rdx, qword [rbp + 0x3b0]
call fcn.180033d00
cmp byte [0x18014b738], r12b
je 0x18002db07
call fcn.18002cb00
call fcn.18002c4e0
call fcn.18002c850
mov eax, dword [0x18014b718]
movss xmm13, dword [0x180111a38]
cdq
sub eax, edx
sar eax, 1
movd xmm10, eax
mov eax, dword [0x18014b730]
cdq
sub eax, edx
sar eax, 1
cmp byte [0x18014b775], r12b
cvtdq2ps xmm10, xmm10
movd xmm11, eax
cvtdq2ps xmm11, xmm11
movss dword [rbp + 0xa28], xmm10
movss dword [rbp + 0xa20], xmm11
je 0x18002dc26
movss xmm3, dword [0x18014b720]
movaps xmm6, xmm10
divss xmm3, dword [0x18014b714]
movss xmm1, dword [0x180111a68]
movaps xmm7, xmm11
comiss xmm3, xmm13
subss xmm6, dword [0x180111bb4]
movss xmm8, dword [0x180111bd0]
subss xmm7, dword [0x180111bb4]
movaps xmm0, xmm8
unpcklps xmm0, xmm1
movq r8, xmm0
movaps xmm1, xmm6
jb 0x18002dbba
movss dword [rsp + 0x20], xmm3
unpcklps xmm1, xmm7
jmp 0x18002dbd0
movaps xmm2, xmm11
movss dword [rsp + 0x20], xmm12
subss xmm2, dword [0x180111bb8]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.1800110a0
movss xmm1, dword [0x180111a68]
movaps xmm0, xmm8
movss xmm3, dword [0x18014b724]
divss xmm3, dword [0x18014b71c]
unpcklps xmm0, xmm1
movaps xmm1, xmm6
comiss xmm3, dword [0x180111a84]
unpcklps xmm1, xmm7
movq r8, xmm0
movq rdx, xmm1
jb 0x18002dc1a
movss dword [rsp + 0x20], xmm3
jmp 0x18002dc21
movss dword [rsp + 0x20], xmm12
call fcn.1800110a0
cmp byte [0x18014b7ce], r12b
je 0x18002df51
movss xmm12, dword [0x180111a60]
lea rax, [rbp + 0x4a0]
movaps xmm0, xmmword [0x1801120e0]
movaps xmm9, xmm10
movss xmm13, dword [0x180111640]
addss xmm9, xmm12
mov byte [rsp + 0x38], r12b
movaps xmm14, xmm11
movss dword [rsp + 0x30], xmm13
addss xmm14, xmm12
mov qword [rsp + 0x28], rax
movaps xmm2, xmm11
movaps xmm1, xmm10
movdqa xmmword [rbp + 0x4a0], xmm0
movaps xmm3, xmm9
movss dword [rsp + 0x20], xmm14
call fcn.180010840
movaps xmm0, xmmword [0x1801120e0]
lea rax, [rbp + 0x4b0]
movss xmm7, dword [rbp + 0xa28]
movaps xmm10, xmm11
mov byte [rsp + 0x38], r12b
subss xmm10, xmm12
movss dword [rsp + 0x30], xmm13
movaps xmm3, xmm9
mov qword [rsp + 0x28], rax
movaps xmm2, xmm11
movaps xmm1, xmm7
movdqa xmmword [rbp + 0x4b0], xmm0
movss dword [rsp + 0x20], xmm10
call fcn.180010840
movaps xmm0, xmmword [0x1801120e0]
lea rax, [rbp + 0x4c0]
movss xmm6, dword [rbp + 0xa20]
movaps xmm11, xmm7
mov byte [rsp + 0x38], r12b
subss xmm11, xmm12
movss dword [rsp + 0x30], xmm13
movaps xmm2, xmm6
mov qword [rsp + 0x28], rax
movaps xmm1, xmm7
movss dword [rsp + 0x20], xmm10
movdqa xmmword [rbp + 0x4c0], xmm0
movaps xmm3, xmm11
call fcn.180010840
movaps xmm0, xmmword [0x1801120e0]
lea rax, [rbp + 0x3e0]
mov byte [rsp + 0x38], r12b
movaps xmm3, xmm11
movss dword [rsp + 0x30], xmm13
movaps xmm2, xmm6
mov qword [rsp + 0x28], rax
movaps xmm1, xmm7
movss dword [rsp + 0x20], xmm14
movdqa xmmword [rbp + 0x3e0], xmm0
call fcn.180010840
movss xmm0, dword [0x18014b708]
lea rax, [rbp + 0x150]
movss xmm1, dword [0x18014b70c]
movaps xmm6, xmm9
mov byte [rsp + 0x38], r12b
addss xmm6, xmm12
movss dword [rsp + 0x30], xmm13
movaps xmm8, xmm14
addss xmm8, xmm12
movss dword [rbp + 0x150], xmm0
movss xmm0, dword [0x18014b710]
movaps xmm2, xmm14
movss dword [rbp + 0x154], xmm1
movaps xmm1, xmm9
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
movss dword [rbp + 0x158], xmm0
movss dword [rsp + 0x20], xmm8
mov dword [rbp + 0x15c], 0x3f800000
call fcn.180010840
movss xmm0, dword [0x18014b708]
movss xmm1, dword [0x18014b70c]
movss dword [rbp + 0x160], xmm0
movss xmm0, dword [0x18014b710]
movss dword [rbp + 0x164], xmm1
mov byte [rsp + 0x38], r12b
lea rax, [rbp + 0x160]
movss dword [rsp + 0x30], xmm13
movaps xmm7, xmm10
subss xmm7, xmm12
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
movss dword [rbp + 0x168], xmm0
movaps xmm2, xmm10
mov dword [rbp + 0x16c], 0x3f800000
movaps xmm1, xmm9
movss dword [rsp + 0x20], xmm7
call fcn.180010840
movss xmm0, dword [0x18014b708]
lea rax, [rbp + 0x170]
movss xmm1, dword [0x18014b70c]
movaps xmm6, xmm11
mov byte [rsp + 0x38], r12b
subss xmm6, xmm12
movss dword [rsp + 0x30], xmm13
movaps xmm2, xmm10
movss dword [rbp + 0x170], xmm0
movss xmm0, dword [0x18014b710]
movss dword [rbp + 0x174], xmm1
movaps xmm1, xmm11
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
movss dword [rbp + 0x178], xmm0
movss dword [rsp + 0x20], xmm7
mov dword [rbp + 0x17c], 0x3f800000
call fcn.180010840
movss xmm0, dword [0x18014b708]
lea rax, [rbp + 0x180]
movss xmm2, dword [0x18014b70c]
movaps xmm3, xmm6
mov byte [rsp + 0x38], r12b
movaps xmm1, xmm11
movss dword [rsp + 0x30], xmm13
movss dword [rbp + 0x180], xmm0
movss xmm0, dword [0x18014b710]
movss dword [rbp + 0x184], xmm2
movaps xmm2, xmm14
mov qword [rsp + 0x28], rax
movss dword [rbp + 0x188], xmm0
movss dword [rsp + 0x20], xmm8
mov dword [rbp + 0x18c], 0x3f800000
call fcn.180010840
movss xmm11, dword [rbp + 0xa20]
movss xmm10, dword [rbp + 0xa28]
movss xmm13, dword [0x180111a38]
cmp byte [0x18014b7cd], r12b
je 0x18002e44b
movss xmm1, dword [0x180125aa0]
lea rcx, [rbp + 0x190]
movss xmm2, dword [0x180125aa4]
movaps xmm7, xmm10
movss xmm3, dword [0x180125aa8]
addss xmm7, dword [0x180111a68]
mov dword [rsp + 0x4c], 0x3f800000
movups xmm0, xmmword [rsp + 0x40]
mov dword [rbp + 0x19c], 0x3f800000
movss dword [rbp + 0x190], xmm1
movss xmm0, xmm1
movss dword [rbp + 0x194], xmm2
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
movss dword [rbp + 0x198], xmm3
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
movss dword [rbp + 0x110], xmm1
shufps xmm0, xmm0, 0xc9
movups xmmword [rsp + 0x40], xmm0
mov dword [rbp + 0x11c], r12d
movdqa xmmword [rbp + 0x3f0], xmm0
movss dword [rbp + 0x114], xmm2
movss dword [rbp + 0x118], xmm3
movss dword [rbp + 0x1b0], xmm1
movss dword [rbp + 0x1b4], xmm2
movss dword [rbp + 0x1b8], xmm3
mov dword [rbp + 0x1bc], r12d
call fcn.180038030
lea rcx, [rbp + 0x110]
mov r10d, eax
call fcn.180038030
lea rcx, [rbp + 0x1b0]
mov r9d, eax
call fcn.180038030
lea rcx, [rbp + 0x3f0]
mov r8d, eax
call fcn.180038030
movss xmm9, dword [0x1801116f4]
lea rdx, [rbp + 0x10]
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm7
addss xmm0, dword [0x180111a68]
mov dword [rsp + 0x28], r9d
movaps xmm8, xmm11
addss xmm8, xmm9
mov dword [rsp + 0x20], r8d
mov r9d, eax
movss dword [rbp + 0x10], xmm7
lea r8, [rbp + 8]
movss dword [rbp + 0x14], xmm11
movss dword [rbp + 8], xmm0
movss dword [rbp + 0xc], xmm8
call fcn.1800509b0
movss xmm1, dword [0x180125aa0]
movaps xmm6, xmm10
movss xmm2, dword [0x180125aa4]
subss xmm6, xmm13
movss xmm3, dword [0x180125aa8]
mov dword [rsp + 0x4c], 0x3f800000
movups xmm0, xmmword [rsp + 0x40]
mov dword [rbp + 0x1cc], 0x3f800000
movss dword [rbp + 0x1c0], xmm1
movss xmm0, xmm1
movss dword [rbp + 0x1c4], xmm2
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
movss dword [rbp + 0x1c8], xmm3
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
movss dword [rbp + 0x1d0], xmm1
shufps xmm0, xmm0, 0xc9
movups xmmword [rsp + 0x40], xmm0
mov dword [rbp + 0x1dc], r12d
movdqa xmmword [rbp + 0x400], xmm0
movss dword [rbp + 0x1d4], xmm2
movss dword [rbp + 0x1d8], xmm3
movss dword [rbp + 0x90], xmm1
movss dword [rbp + 0x94], xmm2
movss dword [rbp + 0x98], xmm3
mov dword [rbp + 0x9c], r12d
lea rcx, [rbp + 0x1c0]
call fcn.180038030
lea rcx, [rbp + 0x1d0]
mov r10d, eax
call fcn.180038030
lea rcx, [rbp + 0x90]
mov r9d, eax
call fcn.180038030
lea rcx, [rbp + 0x400]
mov r8d, eax
call fcn.180038030
mov dword [rsp + 0x30], r10d
lea rdx, [rbp + 0x20]
mov dword [rsp + 0x28], r9d
movaps xmm0, xmm6
subss xmm0, dword [0x180111a68]
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp + 0x18]
movss dword [rbp + 0x1c], xmm8
movss dword [rbp + 0x20], xmm6
movss dword [rbp + 0x24], xmm11
movss dword [rbp + 0x18], xmm0
call fcn.1800509b0
movss xmm2, dword [0x180125aa0]
lea rcx, [rbp + 0xa0]
movss xmm3, dword [0x180125aa4]
movaps xmm6, xmm11
movss xmm4, dword [0x180125aa8]
subss xmm6, xmm13
mov dword [rsp + 0x4c], 0x3f800000
movups xmm0, xmmword [rsp + 0x40]
mov dword [rbp - 0x74], 0x3f800000
movups xmm1, xmmword [rbp - 0x80]
mov dword [rbp + 0xac], r12d
movss xmm0, xmm2
movss dword [rbp + 0xa0], xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rsp + 0x40], xmm0
mov dword [rbp + 0xbc], r12d
movdqa xmmword [rbp + 0x480], xmm0
movups xmmword [rbp - 0x80], xmm1
movdqa xmmword [rbp + 0x410], xmm1
movss dword [rbp + 0xa4], xmm3
movss dword [rbp + 0xa8], xmm4
movss dword [rbp + 0xb0], xmm2
movss dword [rbp + 0xb4], xmm3
movss dword [rbp + 0xb8], xmm4
call fcn.180038030
lea rcx, [rbp + 0xb0]
mov r10d, eax
call fcn.180038030
lea rcx, [rbp + 0x480]
mov r9d, eax
call fcn.180038030
lea rcx, [rbp + 0x410]
mov r8d, eax
call fcn.180038030
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm6
subss xmm0, dword [0x180111a68]
mov dword [rsp + 0x28], r9d
movaps xmm8, xmm10
addss xmm8, xmm9
mov dword [rsp + 0x20], r8d
movss dword [rbp + 0x30], xmm10
lea r8, [rbp + 0x28]
movss dword [rbp + 0x34], xmm6
mov r9d, eax
movss dword [rbp + 0x2c], xmm0
movss dword [rbp + 0x28], xmm8
lea rdx, [rbp + 0x30]
call fcn.1800509b0
movss xmm2, dword [0x180125aa0]
lea rcx, [rbp + 0xc0]
movss xmm3, dword [0x180125aa4]
movaps xmm7, xmm11
movss xmm4, dword [0x180125aa8]
addss xmm7, dword [0x180111a68]
mov dword [rsp + 0x4c], 0x3f800000
movups xmm0, xmmword [rsp + 0x40]
mov dword [rbp - 0x74], 0x3f800000
movups xmm1, xmmword [rbp - 0x80]
mov dword [rbp + 0xcc], r12d
movss xmm0, xmm2
movss dword [rbp + 0xc0], xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rsp + 0x40], xmm0
mov dword [rbp + 0xdc], r12d
movdqa xmmword [rbp + 0x420], xmm0
movups xmmword [rbp - 0x80], xmm1
movdqa xmmword [rbp + 0x430], xmm1
movss dword [rbp + 0xc4], xmm3
movss dword [rbp + 0xc8], xmm4
movss dword [rbp + 0xd0], xmm2
movss dword [rbp + 0xd4], xmm3
movss dword [rbp + 0xd8], xmm4
call fcn.180038030
lea rcx, [rbp + 0xd0]
mov r10d, eax
call fcn.180038030
lea rcx, [rbp + 0x420]
mov r9d, eax
call fcn.180038030
lea rcx, [rbp + 0x430]
mov r8d, eax
call fcn.180038030
mov dword [rsp + 0x30], r10d
lea rdx, [rbp + 0x40]
mov dword [rsp + 0x28], r9d
movaps xmm0, xmm7
addss xmm0, dword [0x180111a68]
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp + 0x38]
movss dword [rbp + 0x38], xmm8
movss dword [rbp + 0x40], xmm10
movss dword [rbp + 0x44], xmm7
movss dword [rbp + 0x3c], xmm0
call fcn.1800509b0
jmp 0x18002e454
movss xmm9, dword [0x1801116f4]
cmp byte [0x18014b7cb], r12b
movss xmm12, dword [0x180111960]
je 0x18002e4dc
movss xmm0, dword [0x180125ad0]
lea rcx, [rbp + 0xe0]
movss xmm1, dword [0x180125ad4]
movss dword [rbp + 0xe0], xmm0
movss xmm0, dword [0x180125ad8]
movss dword [rbp + 0xe8], xmm0
movss dword [rbp + 0xe4], xmm1
mov dword [rbp + 0xec], 0x3f800000
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea rdx, [rbp + 0x48]
movaps xmm0, xmm11
movss dword [rbp + 0x48], xmm10
addss xmm0, xmm9
mov dword [rsp + 0x20], r12d
mov r9d, eax
movaps xmm2, xmm12
movss dword [rbp + 0x4c], xmm0
call fcn.180050ef0
cmp byte [0x18014b7cc], r12b
je 0x18002e68f
movss xmm0, dword [0x180125a80]
lea rcx, [rbp + 0xf0]
movss xmm1, dword [0x180125a84]
movaps xmm6, xmm10
movss xmm8, dword [0x180111a94]
movss dword [rbp + 0xf0], xmm0
addss xmm6, xmm8
movss xmm0, dword [0x180125a88]
movss dword [rbp + 0xf8], xmm0
movss dword [rbp + 0xf4], xmm1
mov dword [rbp + 0xfc], 0x3f800000
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea r8, [rbp + 0x50]
movaps xmm0, xmm6
mov dword [rsp + 0x28], r12d
movaps xmm7, xmm11
movss dword [rbp + 0x58], xmm6
addss xmm0, xmm8
movss dword [rbp + 0x5c], xmm11
addss xmm7, xmm13
movss dword [rsp + 0x20], xmm15
mov r9d, eax
lea rdx, [rbp + 0x58]
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm7
call fcn.180050800
movss xmm0, dword [0x180125a80]
lea rcx, [rbp + 0x1a0]
movss xmm1, dword [0x180125a84]
movaps xmm6, xmm10
movss dword [rbp + 0x1a0], xmm0
subss xmm6, xmm8
movss xmm0, dword [0x180125a88]
movss dword [rbp + 0x1a8], xmm0
movss dword [rbp + 0x1a4], xmm1
mov dword [rbp + 0x1ac], 0x3f800000
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea r8, [rbp + 0x60]
movaps xmm0, xmm6
mov dword [rsp + 0x28], r12d
subss xmm0, xmm8
movss dword [rbp + 0x64], xmm7
mov r9d, eax
movss dword [rbp + 0x68], xmm6
lea rdx, [rbp + 0x68]
movss dword [rbp + 0x6c], xmm11
movss dword [rsp + 0x20], xmm15
movss dword [rbp + 0x60], xmm0
call fcn.180050800
movss xmm0, dword [0x180125a80]
lea rcx, [rbp + 0x100]
movss xmm1, dword [0x180125a84]
movss dword [rbp + 0x100], xmm0
movss xmm0, dword [0x180125a88]
movss dword [rbp + 0x108], xmm0
movss dword [rbp + 0x104], xmm1
mov dword [rbp + 0x10c], 0x3f800000
call fcn.180038030
mov rcx, qword [0x18014bf10]
lea rdx, [rbp + 0x70]
movaps xmm0, xmm11
movss dword [rbp + 0x70], xmm10
addss xmm0, xmm9
mov dword [rsp + 0x20], r12d
mov r9d, eax
movaps xmm2, xmm12
movss dword [rbp + 0x74], xmm0
call fcn.180050ef0
cmp byte [0x18014b6f2], r12b
je 0x18002e6ef
movss xmm0, dword [0x180125a70]
lea rcx, [rbp - 0x60]
movss xmm1, dword [0x180125a74]
movss dword [rbp - 0x60], xmm0
movss xmm0, dword [0x180125a78]
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x5c], xmm1
mov dword [rbp - 0x54], 0x3f800000
call fcn.180038030
movss xmm2, dword [0x180125a08]
lea rdx, [rbp + 0x78]
mov r9d, eax
movss dword [rbp + 0x78], xmm10
movss dword [rbp + 0x7c], xmm11
call fcn.180050e60
cmp qword [0x18014b6a0], r12
movss xmm6, dword [0x180125a08]
je 0x18002e71d
mov rcx, rdi
call fcn.180013280
comiss xmm6, xmm0
jae 0x18002e71d
cmp byte [0x18014b6e7], r12b
jne 0x18002e71d
mov qword [0x18014b6a0], r12
mov rcx, qword [0x18014b6b8]
test rcx, rcx
je 0x18002e771
call fcn.18000bfb0
lea rdx, [rbp + 0x220]
mov rcx, rax
call fcn.18000bef0
movsd xmm0, qword [rbp + 0x220]
lea rcx, [rbp + 0x230]
mov eax, dword [rbp + 0x228]
movsd qword [rbp + 0x230], xmm0
mov dword [rbp + 0x238], eax
call fcn.180013420
comiss xmm6, xmm0
jae 0x18002e771
mov qword [0x18014b6b8], r12
mov rcx, qword [0x18014b6a0]
call fcn.18000c480
test al, al
je 0x18002e788
mov qword [0x18014b6a0], r12
mov rcx, qword [0x18014b6b8]
call fcn.18000c480
test al, al
je 0x18002e79f
mov qword [0x18014b6b8], r12
cmp byte [0x18014b6e2], r12b
movss xmm7, dword [0x180111aa4]
mov qword [rsp + 0xaf0], rsi
mov qword [rsp + 0xae0], r14
je 0x18002e941
movss xmm0, dword [0x18014ba80]
ucomiss xmm0, xmm15
jne 0x18002e7f2
movss xmm0, dword [0x18014ba84]
ucomiss xmm0, xmm15
jne 0x18002e7f2
movss xmm0, dword [0x18014ba88]
ucomiss xmm0, xmm15
je 0x18002e941
cmp qword [0x18014b6a0], r12
je 0x18002e941
xorps xmm0, xmm0
mov qword [rsp + 0x60], r12
movups xmmword [rsp + 0x50], xmm0
xor edx, edx
mov byte [rsp + 0x50], r12b
mov r8d, 0x100
mov qword [rsp + 0x68], 0xf
lea rcx, [rbp + 0x630]
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
call fcn.18000d400
mov r8, rax
lea rdx, str._ls_manipulated
lea rcx, [rbp + 0x630]
call fcn.180034460
lea rax, [rbp + 0x630]
mov rsi, 0xffffffffffffffff
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], r12b
jne 0x18002e860
mov rcx, qword [rsp + 0x68]
mov r14, qword [rsp + 0x60]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x18002e8b3
cmp rcx, 0xf
lea rax, [rsi + r14]
lea rbx, [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmova rbx, qword [rsp + 0x50]
lea rdx, [rbp + 0x630]
mov r8, rsi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r14]
mov byte [rax + rbx], r12b
jmp 0x18002e8cc
lea r9, [rbp + 0x630]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.180034aa0
cmp qword [rsp + 0x68], 0xf
lea rax, [rsp + 0x50]
movaps xmm0, xmmword [0x180111e60]
lea r9, [rbp + 0x440]
cmova rax, qword [rsp + 0x50]
movaps xmm2, xmm11
subss xmm2, dword [0x180111b04]
mov rcx, qword [0x18014c130]
movaps xmm1, xmm10
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b808]
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp + 0x440], xmm0
mov dword [rsp + 0x20], 3
call fcn.180010970
lea rcx, [rsp + 0x50]
call fcn.180033160
cmp byte [0x18014b749], r12b
movss xmm12, dword [0x180111ab4]
je 0x18002ec58
xor edx, edx
xorps xmm0, xmm0
cmp qword [0x18014b6a0], r12
mov r8d, 0x100
je 0x18002eaef
movups xmmword [rbp - 0x30], xmm0
lea rcx, [rbp + 0x730]
mov byte [rbp - 0x30], r12b
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
call fcn.18000d400
mov r8, rax
lea rdx, str.target:__ls
lea rcx, [rbp + 0x730]
call fcn.180034460
lea rax, [rbp + 0x730]
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], r12b
jne 0x18002e9c0
mov rdx, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18002ea0c
cmp rdx, 0xf
lea rax, [rcx + rsi]
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x20], rax
cmova rbx, qword [rbp - 0x30]
lea rdx, [rbp + 0x730]
add rbx, rcx
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], r12b
jmp 0x18002ea24
lea r9, [rbp + 0x730]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.180034aa0
movss xmm1, dword [0x180125a14]
addss xmm11, xmm12
movss xmm0, dword [0x180125a10]
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
lea r9, [rsp + 0x70]
mov rcx, qword [0x18014c130]
cmova rax, qword [rbp - 0x30]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
mov rax, qword [0x18014b808]
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x74], xmm1
movaps xmm1, xmm10
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [0x180125a18]
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.180010970
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x18002ec58
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ec53
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002ec53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x530]
mov byte [rbp - 0x50], r12b
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
call sub.VCRUNTIME140.dll_memset
lea rdx, str.target:_no_found
lea rcx, [rbp + 0x530]
call fcn.180034460
lea rax, [rbp + 0x530]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], r12b
jne 0x18002eb30
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18002eb7c
cmp rdx, 0xf
lea rax, [rcx + rsi]
lea rbx, [rbp - 0x50]
mov qword [rbp - 0x40], rax
cmova rbx, qword [rbp - 0x50]
lea rdx, [rbp + 0x530]
add rbx, rcx
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], r12b
jmp 0x18002eb94
lea r9, [rbp + 0x530]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.180034aa0
movss xmm1, dword [0x180125a14]
addss xmm11, xmm12
movss xmm0, dword [0x180125a10]
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
lea r9, [rsp + 0x70]
mov rcx, qword [0x18014c130]
cmova rax, qword [rbp - 0x50]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
mov rax, qword [0x18014b808]
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x74], xmm1
movaps xmm1, xmm10
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [0x180125a18]
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.180010970
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18002ec58
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ec53
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002ec53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf2ec
cmp byte [0x18014b66c], r12b
mov r14d, dword [0x18014b550]
mov qword [rsp + 0xad8], r15
mov r15d, 4
je 0x18002ee1e
cmp qword [0x18014b6a0], r12
je 0x18002ee1e
mov rcx, rdi
call fcn.18000c500
test al, al
je 0x18002ee1e
mov rax, qword gs:[0x58]
mov rsi, qword [rax + r14*8]
mov eax, dword [rsi + r15]
cmp dword [0x18014be28], eax
jg 0x18002f8d8
mov eax, dword [rsi + r15]
cmp dword [0x18014c498], eax
jg 0x18002f915
mov eax, dword [0x18014b6c8]
test eax, eax
jne 0x18002ecf8
movss xmm0, dword [0x18014c098]
mulss xmm0, dword [0x1801115cc]
movss dword [0x18014bfb0], xmm0
movss xmm0, dword [0x18014c328]
movss dword [0x18014bfb4], xmm0
jmp 0x18002ed2d
cmp eax, 1
jne 0x18002ed2d
movss xmm2, dword [0x18014c328]
movss xmm0, dword [0x18014c098]
mulss xmm2, dword [0x1801115cc]
mulss xmm0, dword [0x1801115cc]
movss dword [0x18014bfb4], xmm2
movss dword [0x18014bfb0], xmm0
mov r8d, 0x12
mov qword [rbp + 0xa20], r12
lea rdx, [rbp + 0x4f4]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm15, dword [rax]
jne 0x18002ed8b
mov r8d, 0x12
lea rdx, [rbp + 0x518]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm15, dword [rax + 4]
jne 0x18002ed8b
mov r8d, 0x12
lea rdx, [rbp + 0x50c]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm15, dword [rax + 8]
je 0x18002ee1e
mov r8d, 0x2f
lea rdx, [rbp + 0x500]
mov rcx, rdi
call fcn.18000dc80
lea rdx, [rbp + 0xa20]
lea rcx, [rbp + 0x240]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x240], xmm0
mov dword [rbp + 0x248], eax
call fcn.18000e860
test al, al
je 0x18002ee1e
movaps xmm0, xmmword [0x180111e60]
lea rax, [rbp + 0x450]
movss xmm3, dword [rbp + 0xa20]
movss xmm2, dword [0x18014bfb4]
movss xmm1, dword [0x18014bfb0]
mov byte [rsp + 0x38], r12b
movss dword [rsp + 0x30], xmm9
movdqa xmmword [rbp + 0x450], xmm0
movss xmm0, dword [rbp + 0xa24]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180010840
cmp byte [0x18014b6f3], r12b
je 0x18002ef81
mov rcx, rdi
call fcn.18000c500
test al, al
je 0x18002ef81
mov r8d, 0x12
mov qword [rbp + 0xa28], r12
lea rdx, [rbp + 0x4d0]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm15, dword [rax]
jne 0x18002ee99
mov r8d, 0x12
lea rdx, [rbp + 0x4dc]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm15, dword [rax + 4]
jne 0x18002ee99
mov r8d, 0x12
lea rdx, [rbp + 0x4e8]
mov rcx, rdi
call fcn.18000dc80
ucomiss xmm15, dword [rax + 8]
je 0x18002ef81
call fcn.18000e3e0
mov rcx, rax
call fcn.18000e2f0
mov rcx, rax
call fcn.18000d210
mov ecx, eax
call fcn.1800134b0
movaps xmm6, xmm0
call fcn.180013500
movaps xmm2, xmm6
lea rcx, [rbp - 0x80]
movaps xmm1, xmm0
call fcn.180013070
lea rdx, [rbp + 0xa28]
lea rcx, [rbp + 0x250]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x250], xmm0
mov dword [rbp + 0x258], eax
call fcn.18000e860
test al, al
je 0x18002ef81
movss xmm0, dword [0x180125a30]
lea rax, [0x18010f5d4]
movss xmm1, dword [0x180125a34]
lea r9, [rbp - 0x70]
movss xmm2, dword [rbp + 0xa2c]
mov rcx, qword [0x18014c130]
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b808]
movss dword [rbp - 0x70], xmm0
movss xmm0, dword [0x180125a38]
movss dword [rbp - 0x6c], xmm1
movss xmm1, dword [rbp + 0xa28]
movss dword [rbp - 0x68], xmm0
movss xmm0, dword [0x180111aa0]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
mov dword [rbp - 0x64], 0x3f800000
call fcn.180010970
cmp qword [0x18014b6b8], r12
movss xmm9, dword [0x180111b88]
je 0x18002f08b
cmp byte [0x18014b73a], r12b
je 0x18002f08b
mov rax, qword gs:[0x58]
mov rsi, qword [rax + r14*8]
mov eax, dword [rsi + r15]
cmp dword [0x18014c120], eax
jg 0x18002f952
mov eax, dword [rsi + r15]
cmp dword [0x18014bdb8], eax
jg 0x18002f98f
mov eax, dword [rsi + r15]
cmp dword [0x18014c388], eax
jg 0x18002f9cc
mov rcx, qword [0x18014b6b8]
add rcx, 0x20c
cmp rcx, 0x40000
jbe 0x18002f011
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18002f011
movss xmm1, dword [rcx]
jmp 0x18002f015
movaps xmm1, xmm15
cvttss2si ecx, xmm1
cmp ecx, 0x80000000
je 0x18002f042
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm1
je 0x18002f042
unpcklps xmm1, xmm1
movmskps eax, xmm1
and eax, 1
xor eax, 1
add ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm1
test eax, eax
jle 0x18002f08b
mov rcx, qword [0x18014b6b8]
call fcn.18000bfb0
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.18000bef0
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x260]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x260], xmm0
mov dword [rbp + 0x268], eax
call fcn.18000e860
cmp dword [0x18014b778], 4
jle 0x18002f09e
mov dword [0x18014b778], 4
movss xmm0, dword [0x1801259fc]
comiss xmm0, dword [0x180111ba8]
jae 0x18002f0b9
mov dword [0x1801259fc], 0x43960000
movss xmm11, dword [0x180111b7c]
movss xmm6, dword [0x180111b48]
movss xmm10, dword [0x180111b40]
mov qword [rsp + 0xae8], r13
test rdi, rdi
je 0x18002f764
cmp qword [0x18014b6a0], r12
je 0x18002f764
mov rcx, rdi
call fcn.18000dba0
test al, al
jne 0x18002f764
cmp byte [0x18014b606], r12b
je 0x18002f81f
mov rcx, rdi
call fcn.18000c500
test al, al
je 0x18002f764
lea rcx, [rbp + 0xa30]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x18002f1bf
movd xmm1, dword [rbp + 0xa30]
movss xmm0, dword [0x1801259d0]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jb 0x18002f1bf
addss xmm0, xmm9
comiss xmm1, xmm0
ja 0x18002f1bf
movd xmm1, dword [rbp + 0xa34]
movss xmm0, dword [0x1801259d4]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jb 0x18002f1bf
addss xmm0, xmm11
comiss xmm1, xmm0
ja 0x18002f1bf
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002f1bf
cmp byte [0x18014b5f7], r12b
je 0x18002f1bf
movd xmm0, dword [rbp + 0xa30]
movd xmm1, dword [rbp + 0xa34]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
subss xmm0, xmm6
subss xmm1, xmm10
movss dword [0x1801259d0], xmm0
movss dword [0x1801259d4], xmm1
movdqa xmm1, xmmword [0x180111d10]
lea rcx, [rbp + 0x830]
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rbp + 0x270], xmm0
mov r8d, 0x100
mov byte [rbp + 0x270], r12b
movdqu xmmword [rbp + 0x280], xmm1
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
call fcn.18000d400
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.1800329f0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x460], xmm0
mov r8, 0xffffffffffffffff
mov rdx, qword [rax]
movdqu xmmword [rbp + 0x470], xmm1
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x18002f230
lea rcx, [rbp + 0x460]
call fcn.180034c30
mov rdx, qword [rbp + 0x210]
mov eax, 0xffffffff
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f268
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, rdi
call fcn.18000d400
mov rdx, rax
lea rcx, [rbp + 0x218]
call fcn.1800329f0
mov rsi, rax
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x18002f29c
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x18002f2b6
call fcn.180018290
mov rcx, rax
mov rdx, qword [rax]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x18002f8c2
mov rax, qword [rcx]
call qword [rax + 0x18]
mov r13, qword [rsi]
lea rdx, str.Belt
mov rsi, 0xffffffffffffffff
lea rbx, [rax + 0x18]
movsxd r15, dword [r13 - 0x10]
mov qword [rbp + 0x80], rbx
nop dword [rax]
inc rsi
cmp byte [rdx + rsi], r12b
jne 0x18002f2e0
lea r14d, [rsi + r15]
test r14d, r14d
js 0x18002f8cd
mov eax, dword [rbx - 0xc]
mov ecx, 1
sub ecx, dword [rbx - 8]
sub eax, r14d
or ecx, eax
jge 0x18002f325
mov edx, r14d
lea rcx, [rbp + 0x80]
call fcn.180033d60
mov rbx, qword [rbp + 0x80]
lea rdx, str.Belt
movsxd rsi, esi
test rsi, rsi
je 0x18002f351
test rbx, rbx
jne 0x18002f346
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x18002f351
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rdx, r15
lea rcx, [rbx + rsi]
mov r9, r15
mov r8, r13
call fcn.180004dd0
cmp r14d, dword [rbx - 0xc]
jg 0x18002f8cd
movsxd rax, r14d
lea rcx, [rbp + 0x830]
mov dword [rbx - 0x10], r14d
mov rdx, rbx
mov byte [rax + rbx], r12b
call fcn.180034460
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f3a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x218]
mov eax, 0xffffffff
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f3c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x830]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x18002f3d4
lea rdx, [rbp + 0x830]
lea rcx, [rbp + 0x270]
call fcn.1800330e0
movss xmm1, dword [0x18014bcf8]
lea rax, [rbp + 0x270]
movss xmm0, dword [0x18014ab64]
lea r9, [rbp - 0x70]
movss xmm2, dword [0x1801259d4]
cmp qword [rbp + 0x288], 0xf
addss xmm2, xmm13
mov rcx, qword [0x18014c130]
cmova rax, qword [rbp + 0x270]
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b608]
movss dword [rbp - 0x6c], xmm1
movss xmm1, dword [0x1801259d0]
movss dword [rsp + 0x30], xmm7
addss xmm1, xmm6
movss dword [rbp - 0x70], xmm0
movss xmm0, dword [0x18014ab78]
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movss dword [rbp - 0x68], xmm0
mov dword [rbp - 0x64], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.180010970
mov rcx, rdi
call fcn.18000e290
test rax, rax
je 0x18002f74c
mov rcx, rdi
mov esi, r12d
call fcn.18000e290
cmp dword [rax + 0x18], r12d
jbe 0x18002f74c
movss xmm8, dword [0x180111af0]
mov rcx, rdi
call fcn.18000e290
mov ecx, esi
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + rcx*8 + 0x20]
test rbx, rbx
je 0x18002f734
mov rcx, rdi
call fcn.18000e2f0
mov rcx, rbx
cmp rbx, rax
jne 0x18002f60c
call fcn.18000d2a0
xorps xmm0, xmm0
mov qword [rsp + 0x60], r12
movups xmmword [rsp + 0x50], xmm0
xor edx, edx
mov byte [rsp + 0x50], r12b
mov r8d, 0x100
mov qword [rsp + 0x68], 0xf
lea rcx, [rbp + 0x530]
mov rbx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
lea rdx, [0x18010eba4]
lea rcx, [rbp + 0x530]
call fcn.180034460
lea rax, [rbp + 0x530]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x18002f540
lea rdx, [rbp + 0x530]
lea rcx, [rsp + 0x50]
call fcn.1800330e0
test rbx, rbx
je 0x18002f5fd
movss xmm1, dword [0x18014bcf8]
lea rax, [rsp + 0x50]
movss xmm0, dword [0x18014ab64]
lea r9, [rsp + 0x70]
movss xmm2, dword [0x1801259d4]
cmp qword [rsp + 0x68], 0xf
addss xmm2, xmm8
mov rcx, qword [0x18014c130]
cmova rax, qword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b608]
movss dword [rsp + 0x74], xmm1
addss xmm2, xmm15
movss xmm1, dword [0x1801259d0]
movss dword [rsp + 0x30], xmm7
addss xmm1, xmm6
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [0x18014ab78]
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movss dword [rsp + 0x78], xmm0
mov dword [rsp + 0x7c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.180010970
lea rcx, [rsp + 0x50]
call fcn.180033160
jmp 0x18002f734
call fcn.18000d2a0
xorps xmm0, xmm0
mov qword [rsp + 0x60], r12
movups xmmword [rsp + 0x50], xmm0
xor edx, edx
mov byte [rsp + 0x50], r12b
mov r8d, 0x100
mov qword [rsp + 0x68], 0xf
lea rcx, [rbp + 0x530]
mov rbx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
lea rdx, [0x18010eba4]
lea rcx, [rbp + 0x530]
call fcn.180034460
lea rax, [rbp + 0x530]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x18002f667
lea rdx, [rbp + 0x530]
lea rcx, [rsp + 0x50]
call fcn.1800330e0
test rbx, rbx
je 0x18002f71f
movss xmm1, dword [0x18014bcf8]
lea rax, [rsp + 0x50]
movss xmm0, dword [0x18014ab64]
lea r9, [rbp - 0x60]
movss xmm2, dword [0x1801259d4]
cmp qword [rsp + 0x68], 0xf
addss xmm2, xmm8
mov rcx, qword [0x18014c130]
cmova rax, qword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov rax, qword [0x18014b608]
movss dword [rbp - 0x5c], xmm1
addss xmm2, xmm15
movss xmm1, dword [0x1801259d0]
movss dword [rsp + 0x30], xmm7
addss xmm1, xmm6
movss dword [rbp - 0x60], xmm0
movss xmm0, dword [0x18014ab78]
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movss dword [rbp - 0x58], xmm0
mov dword [rbp - 0x54], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.180010970
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x18002f734
mov rdx, qword [rsp + 0x50]
call fcn.180033d00
mov rcx, rdi
addss xmm15, xmm12
inc esi
call fcn.18000e290
cmp esi, dword [rax + 0x18]
jb 0x18002f4b5
lea rcx, [rbp + 0x460]
call fcn.180033160
lea rcx, [rbp + 0x270]
call fcn.180033160
cmp byte [0x18014b606], r12b
je 0x18002f81f
cmp qword [0x18014b6a0], r12
jne 0x18002f81f
lea rcx, [rbp + 0xa20]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x18002f81f
movd xmm1, dword [rbp + 0xa20]
movss xmm0, dword [0x1801259d0]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jb 0x18002f81f
addss xmm0, xmm9
comiss xmm1, xmm0
ja 0x18002f81f
movd xmm1, dword [rbp + 0xa24]
movss xmm0, dword [0x1801259d4]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jb 0x18002f81f
addss xmm0, xmm11
comiss xmm1, xmm0
ja 0x18002f81f
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002f81f
cmp byte [0x18014b5f7], r12b
je 0x18002f81f
movd xmm0, dword [rbp + 0xa20]
movd xmm1, dword [rbp + 0xa24]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
subss xmm0, xmm6
subss xmm1, xmm10
movss dword [0x1801259d0], xmm0
movss dword [0x1801259d4], xmm1
call fcn.180012290
cmp byte [0x18014b747], r12b
je 0x18002f832
call fcn.180012700
mov r13, qword [rsp + 0xae8]
mov r15, qword [rsp + 0xad8]
mov rsi, qword [rsp + 0xaf0]
mov r14, qword [rsp + 0xae0]
movaps xmm14, xmmword [rsp + 0xa40]
movaps xmm13, xmmword [rsp + 0xa50]
movaps xmm12, xmmword [rsp + 0xa60]
movaps xmm11, xmmword [rsp + 0xa70]
movaps xmm10, xmmword [rsp + 0xa80]
movaps xmm9, xmmword [rsp + 0xa90]
movaps xmm8, xmmword [rsp + 0xaa0]
movaps xmm7, xmmword [rsp + 0xab0]
movaps xmm6, xmmword [rsp + 0xac0]
mov rbx, qword [rsp + 0xaf8]
movaps xmm15, xmmword [rsp + 0xa30]
add rsp, 0xb00
pop r12
pop rdi
pop rbp
jmp 0x180029a90
mov ecx, 0x80004005
call fcn.1800180e0
int3
mov ecx, 0x80070057
call fcn.1800180e0
int3
lea rcx, [0x18014be28]
call fcn.1800ceec8
cmp dword [0x18014be28], 0xffffffff
jne 0x18002ecb4
movd xmm0, dword [0x18014b718]
lea rcx, [0x18014be28]
cvtdq2ps xmm0, xmm0
movss dword [0x18014c098], xmm0
call fcn.1800cee5c
jmp 0x18002ecb4
lea rcx, [0x18014c498]
call fcn.1800ceec8
cmp dword [0x18014c498], 0xffffffff
jne 0x18002ecc4
movd xmm0, dword [0x18014b730]
lea rcx, [0x18014c498]
cvtdq2ps xmm0, xmm0
movss dword [0x18014c328], xmm0
call fcn.1800cee5c
jmp 0x18002ecc4
lea rcx, [0x18014c120]
call fcn.1800ceec8
cmp dword [0x18014c120], 0xffffffff
jne 0x18002efc1
movd xmm0, dword [0x18014b718]
lea rcx, [0x18014c120]
cvtdq2ps xmm0, xmm0
movss dword [0x18014c278], xmm0
call fcn.1800cee5c
jmp 0x18002efc1
lea rcx, [0x18014bdb8]
call fcn.1800ceec8
cmp dword [0x18014bdb8], 0xffffffff
jne 0x18002efd1
movd xmm0, dword [0x18014b730]
lea rcx, [0x18014bdb8]
cvtdq2ps xmm0, xmm0
movss dword [0x18014bd84], xmm0
call fcn.1800cee5c
jmp 0x18002efd1
lea rcx, [0x18014c388]
call fcn.1800ceec8
cmp dword [0x18014c388], 0xffffffff
jne 0x18002efe1
movss xmm0, dword [0x18014c278]
lea rcx, [0x18014c388]
mulss xmm0, dword [0x1801115cc]
movss dword [0x18014bec0], xmm0
movss xmm0, dword [0x18014bd84]
subss xmm0, xmm9
movss dword [0x18014bec4], xmm0
call fcn.1800cee5c
jmp 0x18002efe1