Function at 0x140047ad0
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x978]
sub rsp, 0xa50
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400841c0]
xor rax, rsp
mov qword [rbp + 0x8a0], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140047b63
cmp byte [0x14005d388], 0
sete byte [0x14005d388]
call fcn.14000a490
call fcn.14004a410
call fcn.14002a940
call fcn.14002b650
call fcn.140010410
mov rcx, qword [0x140084b28]
call fcn.140011e50
movss xmm8, dword [0x14004f030]
movss xmm14, dword [0x14004f03c]
xor r13d, r13d
movss xmm11, dword [0x14004f000]
cmp byte [0x14005d388], 1
jne 0x140048448
movaps xmm0, xmm11
call fcn.140015900
mov dword [rbp + 0x630], 0x43e88000
mov dword [rbp + 0x634], 0x43e10000
xor edx, edx
lea rcx, [rbp + 0x630]
call fcn.140015960
xor edx, edx
mov r8d, 0x12a
lea rcx, str.RK_SERVICES
call fcn.140003660
mov dword [rbp + 0x630], 0x43070000
mov dword [rbp + 0x634], 0x41c80000
lea rdx, [rbp + 0x630]
lea rcx, str.Visual
call fcn.1400352b0
test al, al
je 0x140047c24
mov dword [0x140084b48], r13d
movss xmm6, dword [0x14004f064]
movaps xmm1, xmm6
xorps xmm10, xmm10
xorps xmm0, xmm0
call fcn.140014d40
mov dword [rbp + 0x630], 0x43070000
mov dword [rbp + 0x634], 0x41c80000
lea rdx, [rbp + 0x630]
lea rcx, [0x1400536bc]
call fcn.1400352b0
test al, al
je 0x140047c70
mov dword [0x140084b48], 1
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140014d40
mov dword [rbp + 0x630], 0x43070000
mov dword [rbp + 0x634], 0x41c80000
lea rdx, [rbp + 0x630]
lea rcx, str.PRESETS
call fcn.1400352b0
test al, al
je 0x140047cb0
mov dword [0x140084b48], 2
call fcn.14003f5a0
mov eax, dword [0x140084b48]
test eax, eax
jne 0x140047e60
mov dword [rsp + 0x40], 0x4e4f421c
mov dword [rsp + 0x44], 0x53452045
mov word [rsp + 0x48], 0x50
lea rdx, [0x140084869]
lea rcx, [rsp + 0x41]
call fcn.140035b10
mov dword [rsp + 0x40], 0x584f4266
mov dword [rsp + 0x44], 0x50534520
mov byte [rsp + 0x48], r13b
lea rdx, [0x140084868]
lea rcx, [rsp + 0x41]
call fcn.140035b10
mov dword [rsp + 0x40], 0x58455477
mov dword [rsp + 0x44], 0x53452054
mov word [rsp + 0x48], 0x50
lea rdx, [0x14008486e]
lea rcx, [rsp + 0x41]
call fcn.140035b10
mov dword [rsp + 0x40], 0x6e694c21
mov dword [rsp + 0x44], 0x53452065
mov word [rsp + 0x48], 0x50
lea rdx, [0x14008486d]
lea rcx, [rsp + 0x41]
call fcn.140035b10
mov dword [rbp + 0x620], 0x6e694c5a
mov dword [rbp + 0x624], 0x74532065
mov dword [rbp + 0x628], 0x656c79
mov dword [rsp + 0x28], r13d
lea rax, [0x14004efa0]
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8d, [r9 - 1]
lea rdx, [0x14005d3fc]
lea rcx, [rbp + 0x621]
call fcn.14003fcc0
xor ecx, ecx
call fcn.14000bd30
test al, al
je 0x140047df5
movdqa xmm0, xmmword [0x140053a10]
movdqu xmmword [rbp + 0x5d8], xmm0
movdqa xmm1, xmmword [0x1400539f0]
movdqu xmmword [rbp + 0x5e8], xmm1
mov dword [rbp + 0x5f8], 0x6e656572
mov byte [rbp + 0x5fc], r13b
lea rcx, [rbp + 0x5d9]
call fcn.140015ab0
mov dword [rsp + 0x58], 0x5053451d
mov dword [rsp + 0x5c], 0x53494420
mov dword [rsp + 0x60], 0x434e4154
mov word [rsp + 0x64], 0x45
mov dword [rsp + 0x28], r13d
lea rbx, str._.3f
mov qword [rsp + 0x20], rbx
movss xmm3, dword [0x14004f058]
movaps xmm2, xmm8
lea rdx, [0x14005d3f8]
lea rcx, [rsp + 0x59]
call fcn.14003fc70
mov r8d, 0x200
lea rdx, [0x140084000]
lea rcx, str.ESP_Color
call fcn.140036a10
jmp 0x14004844c
cmp eax, 1
jne 0x140047fd6
movdqa xmm0, xmmword [0x140053a20]
movdqu xmmword [rbp + 0x640], xmm0
mov word [rbp + 0x650], 0x2979
mov byte [rbp + 0x652], r13b
lea rdx, [0x14008486b]
lea rcx, [rbp + 0x641]
call fcn.140035b10
mov dword [rsp + 0x40], 0x6f72430d
mov dword [rsp + 0x44], 0x61687373
mov word [rsp + 0x48], 0x7269
mov byte [rsp + 0x4a], r13b
lea rdx, [0x14008486c]
lea rcx, [rsp + 0x41]
call fcn.140035b10
mov dword [rbp + 0x5d0], 0x6d694155
mov dword [rbp + 0x5d4], 0x746f62
lea rdx, [0x140084827]
lea rcx, [rbp + 0x5d1]
call fcn.140035b10
movdqa xmm0, xmmword [0x140053a00]
movdqu xmmword [rbp + 0x640], xmm0
mov word [rbp + 0x650], 0x656c
mov byte [rbp + 0x652], r13b
lea rdx, [0x14008486a]
lea rcx, [rbp + 0x641]
call fcn.140035b10
mov dword [rbp + 0x620], 0x4d494150
mov dword [rbp + 0x624], 0x6f6d5320
mov dword [rbp + 0x628], 0x68746f
mov dword [rsp + 0x28], r13d
lea rbx, str._.3f
mov qword [rsp + 0x20], rbx
movaps xmm3, xmm14
movaps xmm2, xmm11
lea rdx, [0x14005d3f0]
lea rcx, [rbp + 0x621]
call fcn.14003fc70
mov dword [rsp + 0x40], 0x4d49415f
mov dword [rsp + 0x44], 0x564f4620
mov byte [rsp + 0x48], r13b
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rbx
movss xmm3, dword [0x14004f150]
movaps xmm2, xmm11
lea rdx, [0x14005d3f4]
lea rcx, [rsp + 0x41]
call fcn.14003fc70
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 2
lea r8, str.Head
lea rdx, [0x140084b18]
lea rcx, str.Aim_Bone
call fcn.140039f20
jmp 0x14004844c
cmp eax, 2
jne 0x14004844c
mov dword [rsp + 0x20], 3
lea r9d, [rax + 1]
lea r8, str.Legit
lea rdx, [0x1400846e4]
lea rcx, str.list
call fcn.140039f20
test al, al
je 0x1400480be
mov ecx, dword [0x1400846e4]
test ecx, ecx
je 0x140048073
sub ecx, 1
je 0x14004804c
cmp ecx, 1
jne 0x1400480be
mov dword [0x14005d3f0], 0x3fa00000
mov dword [0x14005d3f4], 0x428c0000
mov dword [0x140084b18], r13d
mov dword [0x14005d3f8], 0x43700000
jmp 0x14004809b
mov dword [0x14005d3f0], 0x3fe00000
mov dword [0x14005d3f4], 0x42700000
mov dword [0x140084b18], r13d
mov dword [0x14005d3f8], 0x43480000
jmp 0x14004809b
mov dword [0x14005d3f0], 0x40200000
mov dword [0x14005d3f4], 0x42340000
mov dword [0x140084b18], 1
mov dword [0x14005d3f8], 0x43160000
mov byte [0x140084869], 1
mov byte [0x14008486e], 1
mov byte [0x14008486b], 1
mov byte [0x140084827], 1
mov byte [0x14008486a], 1
call fcn.1400401e0
call fcn.1400401e0
call fcn.1400401e0
call fcn.1400401e0
call fcn.140043290
movsxd rbx, eax
imul rbx, qword [0x14005d448]
call fcn.1400430a0
add rax, rbx
mov dword [rbp + 0x698], r13d
mov qword [rbp + 0x690], rax
lea rdx, [rbp + 0x6a8]
lea rcx, [rbp + 0x690]
call fcn.1400430d0
nop
lea rcx, [rbp + 0x690]
call fcn.140043420
mov ebx, eax
xor r8d, r8d
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x690]
call fcn.140042cb0
mov edi, dword [rax + 0x84]
movdqa xmm0, xmmword [0x140053940]
movdqu xmmword [rbp + 0x5d8], xmm0
mov dword [rbp + 0x5e8], 0x4f464e49
mov dword [rbp + 0x5ec], 0x7830203a
mov word [rbp + 0x5f0], 0x5825
mov byte [rbp + 0x5f2], 0
mov rdx, qword [0x140084650]
lea rcx, [rbp + 0x5d9]
call fcn.140040690
movdqa xmm0, xmmword [0x140053930]
movdqu xmmword [rbp + 0x5d8], xmm0
mov dword [rbp + 0x5e8], 0x65736142
mov dword [rbp + 0x5ec], 0x7830203a
mov word [rbp + 0x5f0], 0x5825
mov byte [rbp + 0x5f2], 0
mov rdx, qword [0x140084658]
lea rcx, [rbp + 0x5d9]
call fcn.140040690
movdqa xmm0, xmmword [0x140053980]
movdqu xmmword [rbp + 0x640], xmm0
mov dword [rbp + 0x650], 0x25783020
mov word [rbp + 0x654], 0x58
movups xmm0, xmmword [0x140084690]
movaps xmmword [rbp + 0x850], xmm0
movups xmm1, xmmword [0x1400846a0]
movaps xmmword [rbp + 0x860], xmm1
movups xmm0, xmmword [0x1400846b0]
movaps xmmword [rbp + 0x870], xmm0
movups xmm1, xmmword [0x1400846c0]
movaps xmmword [rbp + 0x880], xmm1
movsd xmm0, qword [0x1400846d0]
movsd qword [rbp + 0x890], xmm0
lea rdx, [rbp + 0x850]
lea rcx, [rbp + 0x641]
call fcn.140040690
movdqa xmm0, xmmword [0x140053950]
movdqu xmmword [rbp + 0x5d8], xmm0
movdqa xmm1, xmmword [0x140053970]
movdqu xmmword [rbp + 0x5e8], xmm1
mov word [rbp + 0x5f8], 0x69
mov r8d, dword [0x14008469c]
mov edx, dword [0x140084698]
lea rcx, [rbp + 0x5d9]
call fcn.140040690
movdqa xmm0, xmmword [0x1400539c0]
movdqu xmmword [rbp + 0x5d8], xmm0
mov dword [rbp + 0x5e8], 0x6579616c
mov dword [rbp + 0x5ec], 0x30203a72
mov dword [rbp + 0x5f0], 0x582578
movaps xmm0, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x640], xmm0
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x5d9]
call fcn.140040690
call fcn.140043290
movdqa xmm0, xmmword [0x1400539b0]
movdqu xmmword [rbp + 0x640], xmm0
mov dword [rbp + 0x650], 0x7865646e
mov dword [rbp + 0x654], 0x6425203a
mov byte [rbp + 0x658], 0
mov edx, eax
lea rcx, [rbp + 0x641]
call fcn.140040690
movdqa xmm0, xmmword [0x1400539d0]
movdqu xmmword [rbp + 0x5d8], xmm0
mov dword [rbp + 0x5e8], 0x203a736f
mov dword [rbp + 0x5ec], 0x202c6625
mov dword [rbp + 0x5f0], 0x202c6625
mov word [rbp + 0x5f4], 0x6625
mov byte [rbp + 0x5f6], 0
movss xmm3, dword [rbp + 0x6b0]
cvtps2pd xmm3, xmm3
movss xmm2, dword [rbp + 0x6ac]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rbp + 0x6a8]
cvtps2pd xmm1, xmm1
movq r9, xmm3
movq r8, xmm2
movq rdx, xmm1
lea rcx, [rbp + 0x5d9]
call fcn.140040690
movdqa xmm0, xmmword [0x1400539e0]
movdqu xmmword [rbp + 0x640], xmm0
mov dword [rbp + 0x650], 0x3a6d6165
mov dword [rbp + 0x654], 0x642520
mov edx, ebx
lea rcx, [rbp + 0x641]
call fcn.140040690
movdqa xmm0, xmmword [0x1400539a0]
movdqu xmmword [rbp + 0x640], xmm0
mov dword [rbp + 0x650], 0x746c6165
mov dword [rbp + 0x654], 0x25203a68
mov word [rbp + 0x658], 0x64
mov edx, edi
lea rcx, [rbp + 0x641]
call fcn.140040690
mov dword [rbp + 0x630], 0x420c0000
mov dword [rbp + 0x634], 0x41c80000
mov dword [rsp + 0x50], 0x6978453c
mov word [rsp + 0x54], 0x74
lea rdx, [rbp + 0x630]
lea rcx, [rsp + 0x51]
call fcn.1400352b0
test al, al
je 0x14004843a
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rbp + 0x6a8]
call fcn.140002fd0
jmp 0x14004844c
xorps xmm10, xmm10
cmp byte [0x14008486b], 0
je 0x140048628
call fcn.140043240
test al, al
je 0x140048628
call fcn.140042f90
mov rbx, rax
add rbx, qword [0x14005d440]
mov qword [rbp + 0x630], r13
mov qword [rbp + 0x5e8], 8
mov dword [rbp + 0x5f8], 0x1000000
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x5fc], xmm0
mov dword [rbp + 0x60c], r13d
mov rcx, qword [0x140084630]
mov qword [rbp + 0x5f0], rcx
lea rax, [rbx + 0xc]
mov qword [rbp + 0x5e0], rax
lea rax, [rbp + 0x630]
mov qword [rbp + 0x5d8], rax
xor r9d, r9d
lea r8, [rbp + 0x660]
xor edx, edx
lea rcx, [0x140084b20]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x1400484ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
cmp dword [rbp + 0x660], 0
je 0x14004851e
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140084b20]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x14004a409
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtOpenCompositionSurfaceSectionInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x5d8]
call rax
mov ecx, dword [rbp + 0x630]
xor ecx, ebx
lea eax, [rcx + 2]
imul eax, ecx
mov dword [rbp + 0x660], eax
mov qword [rbp + 0x5e8], 4
mov dword [rbp + 0x5f8], r13d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x5fd], xmm0
mov word [rbp + 0x60d], r13w
mov byte [rbp + 0x60f], 0
mov byte [rbp + 0x5fc], 1
mov rax, qword [0x140084630]
mov qword [rbp + 0x5f0], rax
mov qword [rbp + 0x5e0], rbx
lea rax, [rbp + 0x660]
mov qword [rbp + 0x5d8], rax
xor r9d, r9d
lea r8, [rbp + 0x6a0]
xor edx, edx
lea rcx, [0x140084b20]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x1400485d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
cmp dword [rbp + 0x6a0], 0
je 0x140048602
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140084b20]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x14004a403
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtOpenCompositionSurfaceSectionInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x5d8]
call rax
cmp byte [0x14008486a], 0
je 0x14004869f
call fcn.140009c60
mov rbx, rax
lea rcx, [0x140083ff0]
call fcn.140007870
mov r9d, eax
mov eax, dword [0x14008469c]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x140084698]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x630], xmm0
movss dword [rbp + 0x634], xmm1
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], r13d
movss xmm2, dword [0x14005d3f4]
lea rdx, [rbp + 0x630]
mov rcx, rbx
call fcn.1400195b0
cmp byte [0x14008486c], 0
je 0x1400487ab
mov eax, dword [0x140084698]
cdq
sub eax, edx
sar eax, 1
mov edi, eax
mov eax, dword [0x14008469c]
cdq
sub eax, edx
sar eax, 1
mov esi, eax
call fcn.140009980
mov rbx, rax
lea rcx, [0x140083fe0]
call fcn.140007870
lea edx, [rdi + 0xc]
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
movss dword [rbp + 0x630], xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, rsi
movss dword [rbp + 0x634], xmm1
lea r8d, [rdi - 0xc]
xorps xmm0, xmm0
cvtsi2ss xmm0, r8
movss dword [rbp + 0x668], xmm0
movss dword [rbp + 0x66c], xmm1
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x630]
lea rdx, [rbp + 0x668]
mov rcx, rbx
call fcn.14001aa30
call fcn.140009980
mov rbx, rax
lea rcx, [0x140083fe0]
call fcn.140007870
xorps xmm1, xmm1
cvtsi2ss xmm1, rdi
movss dword [rbp + 0x630], xmm1
lea edx, [rsi + 0xc]
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
movss dword [rbp + 0x634], xmm0
movss dword [rbp + 0x668], xmm1
lea edx, [rsi - 0xc]
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
movss dword [rbp + 0x66c], xmm0
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp + 0x630]
lea rdx, [rbp + 0x668]
mov rcx, rbx
call fcn.14001aa30
call fcn.140043240
test al, al
je 0x14004a210
mov dword [rbp + 0x620], 0x7323235c
mov dword [rbp + 0x624], 0x79737375
mov dword [rbp + 0x628], 0x505345
xor edx, edx
mov r8d, 0x1af
lea rcx, [rbp + 0x621]
call fcn.140003660
call fcn.140042f90
mov qword [0x140084650], rax
call fcn.1400430a0
mov qword [0x140084658], rax
call fcn.140043100
mov rdx, rax
lea rcx, [rbp + 0x850]
call fcn.140045c00
movups xmm0, xmmword [rax]
movups xmmword [0x140084690], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x1400846a0], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [0x1400846b0], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [0x1400846c0], xmm1
movsd xmm0, qword [rax + 0x40]
movsd qword [0x1400846d0], xmm0
lea r9, [fcn.140002fd0]
mov edx, 0xc
lea r8d, [rdx - 9]
lea rcx, [rbp + 0x874]
call fcn.14004bd94
nop
call fcn.140042f90
mov qword [0x140084650], rax
call fcn.1400430a0
mov qword [0x140084658], rax
call fcn.140043290
movsxd rcx, eax
imul rcx, qword [0x14005d448]
add rcx, qword [0x140084658]
mov dword [rbp + 0x648], r13d
mov qword [rbp + 0x640], rcx
lea rdx, [rbp + 0x760]
lea rcx, [rbp + 0x640]
call fcn.1400430d0
nop
lea rcx, [rbp + 0x640]
call fcn.140043420
mov r14d, eax
mov rdx, qword [0x140084640]
mov rcx, qword [0x140084638]
call fcn.140043720
mov r15, rax
mov rdx, qword [0x140084650]
lea rcx, [rbp + 0x670]
call fcn.140042ef0
nop
call fcn.140009c60
mov r12, rax
mov esi, r13d
call fcn.140043400
test eax, eax
jle 0x14004a1f7
movss xmm9, dword [0x14004f140]
movss xmm13, dword [0x14004efd8]
movss xmm12, dword [0x14004f148]
nop dword [rax + rax]
movsxd rax, esi
imul rax, qword [0x14005d448]
add rax, qword [0x140084658]
mov dword [rbp + 0x698], r13d
mov qword [rbp + 0x690], rax
lea rcx, [rbp + 0x690]
call fcn.140043270
test al, al
je 0x14004a1d2
lea rcx, [rbp + 0x690]
call fcn.140042ea0
test al, al
jne 0x14004a1d2
mov r8d, esi
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x690]
call fcn.140042cb0
cmp dword [rax + 0x84], 0
jl 0x14004a1d2
lea rcx, [rbp + 0x690]
call fcn.140043420
cmp eax, r14d
je 0x14004a1d2
mov qword [rbp + 0x5d0], 0
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x690]
call fcn.1400430d0
nop
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x160], xmm0
mov eax, dword [rbp + 0x618]
mov dword [rbp + 0x168], eax
lea rdx, [rbp + 0x5d0]
lea rcx, [rbp + 0x160]
call fcn.140043460
test al, al
je 0x14004a1c6
mov r8d, esi
lea rdx, [rbp + 0x780]
lea rcx, [rbp + 0x690]
call fcn.140042cb0
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x760]
call fcn.1400424c0
call fcn.140043440
movaps xmm7, xmm0
movss dword [rsp + 0x50], xmm7
movss dword [rbp + 0x660], xmm7
xorps xmm6, xmm6
cvtss2sd xmm6, xmm7
lea rcx, [rbp + 0x690]
call fcn.140043420
movdqa xmm1, xmmword [0x140053960]
movdqu xmmword [rbp + 0x5d8], xmm1
mov dword [rbp + 0x5e8], 0x6c616548
mov dword [rbp + 0x5ec], 0x253a6874
mov word [rbp + 0x5f0], 0x64
mov ecx, dword [rbp + 0x804]
mov dword [rsp + 0x28], ecx
movsd qword [rsp + 0x20], xmm6
lea r9, [rbp + 0x784]
mov r8d, eax
lea rdx, [rbp + 0x5d9]
lea rcx, [rbp + 0x850]
call fcn.140019260
comiss xmm7, xmm11
jbe 0x14004a1c6
movss xmm0, dword [0x14005d3f8]
comiss xmm0, xmm7
jbe 0x14004a1c6
cmp byte [0x14008486d], 0
je 0x140048bc7
mov ecx, dword [0x14005d3fc]
sub ecx, 1
je 0x140048b54
cmp ecx, 1
jne 0x140048bc7
lea rcx, [0x140084000]
call fcn.140007870
mov r9d, eax
movss xmm0, dword [rbp + 0x5d0]
subss xmm0, xmm9
movss dword [rbp - 0x6c], xmm0
movss xmm0, dword [rbp + 0x5d4]
movss dword [rbp - 0x68], xmm0
mov eax, dword [0x14008469c]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x140084698]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x64], xmm0
movss dword [rbp - 0x60], xmm1
lea r8, [rbp - 0x6c]
lea rdx, [rbp - 0x64]
jmp 0x140048bb1
lea rcx, [0x140084000]
call fcn.140007870
mov r9d, eax
movss xmm0, dword [rbp + 0x5d0]
subss xmm0, xmm9
movss dword [rbp - 0x5c], xmm0
movss xmm0, dword [rbp + 0x5d4]
movss dword [rbp - 0x58], xmm0
movd xmm1, dword [0x14008469c]
cvtdq2ps xmm1, xmm1
mov eax, dword [0x140084698]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x54], xmm0
movss dword [rbp - 0x50], xmm1
lea r8, [rbp - 0x5c]
lea rdx, [rbp - 0x54]
movss xmm0, dword [0x14004f010]
movss dword [rsp + 0x20], xmm0
mov rcx, r12
call fcn.14001aa30
cmp byte [0x140084868], 0
je 0x140048fa1
mov qword [rbp + 0x630], 0
mov rdx, qword [0x140084638]
mov ecx, esi
call fcn.1400448f0
mov r8, rax
mov rdx, r15
lea rcx, [rbp + 0x690]
call fcn.140042f70
test rax, rax
jne 0x140048c6f
lea rcx, [0x140084000]
call fcn.140007870
movss xmm3, dword [rbp + 0x5d4]
movaps xmm2, xmm3
subss xmm2, xmm14
movss xmm1, dword [rbp + 0x5d0]
movaps xmm0, xmm1
subss xmm0, xmm8
movss dword [rbp - 0x4c], xmm0
movss dword [rbp - 0x48], xmm2
movss dword [rbp - 0x44], xmm1
movss dword [rbp - 0x40], xmm3
movss dword [rsp + 0x30], xmm11
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp - 0x4c]
lea rdx, [rbp - 0x44]
mov rcx, r12
call fcn.14001bab0
jmp 0x140048fa1
mov r9d, 7
lea r8, [rbp + 0x670]
mov rdx, rax
lea rcx, [rbp + 0x4e0]
call fcn.140042f10
nop
movsd xmm0, qword [rax]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x178], eax
lea rdx, [rbp + 0x630]
lea rcx, [rbp + 0x170]
call fcn.140043460
movzx ebx, al
lea rcx, [rbp + 0x4e0]
call fcn.140002fd0
test bl, bl
je 0x140048fa1
movss xmm7, dword [rbp + 0x634]
subss xmm7, dword [rbp + 0x5d4]
andps xmm7, xmmword [0x14004f090]
movss dword [rbp + 0x6a0], xmm7
cvtps2pd xmm6, xmm7
mulsd xmm6, qword [0x140053918]
lea rcx, [0x140084000]
call fcn.140007870
mov ebx, eax
cvtpd2ps xmm8, xmm6
movss xmm15, dword [rbp + 0x634]
movss xmm0, dword [rbp + 0x630]
cvtps2pd xmm0, xmm0
mulsd xmm6, qword [0x140053420]
subsd xmm0, xmm6
cvtpd2ps xmm10, xmm0
movss dword [rsp + 0x68], xmm10
call fcn.140009c60
mov rdi, rax
movaps xmm6, xmm8
divss xmm6, dword [0x14004f018]
movaps xmm14, xmm7
divss xmm14, dword [0x14004f018]
mov ecx, ebx
call fcn.140009bb0
mov ebx, eax
movss dword [rbp - 0x3c], xmm10
movaps xmm9, xmm14
addss xmm9, xmm15
movss dword [rbp - 0x38], xmm9
movaps xmm7, xmm15
subss xmm7, xmm13
movss dword [rbp - 0x34], xmm10
movss dword [rbp - 0x30], xmm7
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rbp - 0x3c]
lea rdx, [rbp - 0x34]
mov rcx, rdi
call fcn.14001aa30
movaps xmm12, xmm6
addss xmm12, xmm10
movss dword [rsp + 0x6c], xmm12
movss dword [rsp + 0x70], xmm15
movaps xmm11, xmm10
subss xmm11, xmm13
movss dword [rbp - 0x2c], xmm11
movss dword [rbp - 0x28], xmm15
movss xmm0, dword [0x14004f000]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rsp + 0x6c]
lea rdx, [rbp - 0x2c]
mov rcx, rdi
call fcn.14001aa30
movaps xmm13, xmm10
addss xmm13, xmm8
movaps xmm10, xmm13
addss xmm10, dword [0x14004efd8]
movss dword [rbp - 0x24], xmm10
movss dword [rbp - 0x20], xmm15
movaps xmm8, xmm13
subss xmm8, xmm6
movss dword [rbp - 0x1c], xmm8
movss dword [rbp - 0x18], xmm15
movss xmm6, dword [0x14004f000]
movss dword [rsp + 0x20], xmm6
mov r9d, ebx
lea r8, [rbp - 0x24]
lea rdx, [rbp - 0x1c]
mov rcx, rdi
call fcn.14001aa30
movss dword [rbp - 0x14], xmm13
movss dword [rbp - 0x10], xmm9
movss dword [rbp - 0xc], xmm13
movss dword [rbp - 8], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, ebx
lea r8, [rbp - 0x14]
lea rdx, [rbp - 0xc]
mov rcx, rdi
call fcn.14001aa30
movss xmm9, dword [rbp + 0x6a0]
addss xmm9, xmm15
movaps xmm7, xmm9
addss xmm7, dword [0x14004efd8]
movss xmm0, dword [rsp + 0x68]
movss dword [rbp - 4], xmm0
movss dword [rbp], xmm7
movss dword [rbp + 4], xmm0
movaps xmm6, xmm9
subss xmm6, xmm14
movss dword [rbp + 8], xmm6
movss xmm0, dword [0x14004f000]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp - 4]
lea rdx, [rbp + 4]
mov rcx, rdi
call fcn.14001aa30
movss dword [rbp + 0xc], xmm12
movss dword [rbp + 0x10], xmm9
movss dword [rbp + 0x14], xmm11
movss dword [rbp + 0x18], xmm9
movss xmm11, dword [0x14004f000]
movss dword [rsp + 0x20], xmm11
mov r9d, ebx
lea r8, [rbp + 0xc]
lea rdx, [rbp + 0x14]
mov rcx, rdi
call fcn.14001aa30
movss dword [rsp + 0x74], xmm10
movss dword [rsp + 0x78], xmm9
movss dword [rsp + 0x7c], xmm8
movss dword [rbp - 0x80], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, ebx
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x7c]
mov rcx, rdi
call fcn.14001aa30
movss dword [rbp - 0x7c], xmm13
movss dword [rbp - 0x78], xmm7
movss dword [rbp - 0x74], xmm13
movss dword [rbp - 0x70], xmm6
movss dword [rsp + 0x20], xmm11
mov r9d, ebx
lea r8, [rbp - 0x7c]
lea rdx, [rbp - 0x74]
mov rcx, rdi
call fcn.14001aa30
movss xmm7, dword [rsp + 0x50]
movss xmm13, dword [0x14004efd8]
movss xmm8, dword [0x14004f030]
movss xmm12, dword [0x14004f148]
movss xmm14, dword [0x14004f03c]
cmp byte [0x14008486e], 0
je 0x140049009
lea rcx, [0x140084000]
call fcn.140007870
movss xmm1, dword [rbp + 0x5d4]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x5d0]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
lea rcx, [rbp + 0x850]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x20], 1
mov r9d, eax
movss xmm2, dword [0x140052c48]
movd r8d, xmm2
lea rdx, [rsp + 0x40]
mov rcx, qword [0x140084b28]
call fcn.140046f00
cmp byte [0x140084869], 0
je 0x140049e37
mov rdx, qword [0x140084638]
mov ecx, esi
call fcn.1400448f0
mov r8, rax
mov rdx, r15
lea rcx, [rbp + 0x690]
call fcn.140042f70
mov rbx, rax
test rax, rax
je 0x14004a1c6
mov r9d, 7
lea r8, [rbp + 0x670]
mov rdx, rax
lea rcx, [rbp + 0x6a8]
call fcn.140042f10
nop
mov r9d, 2
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x620]
call fcn.140042f10
nop
mov r9d, 5
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x770]
call fcn.140042f10
nop
mov r9d, 6
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x680]
call fcn.140042f10
nop
mov r9d, 0xa
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x710]
call fcn.140042f10
nop
mov r9d, 0xb
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x700]
call fcn.140042f10
nop
mov r9d, 0xc
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x750]
call fcn.140042f10
nop
mov r9d, 0xe
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x6f0]
call fcn.140042f10
nop
mov r9d, 0xf
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x6e0]
call fcn.140042f10
nop
mov r9d, 0x10
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x740]
call fcn.140042f10
nop
mov r9d, 0x12
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x6d0]
call fcn.140042f10
nop
mov r9d, 0x13
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x730]
call fcn.140042f10
nop
mov r9d, 0x16
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x6c0]
call fcn.140042f10
nop
mov r9d, 0x17
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x720]
call fcn.140042f10
nop
lea rcx, [rbp + 0x690]
call fcn.140043420
cmp eax, r14d
jne 0x1400497bd
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x180], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x188], ecx
movsd xmm0, qword [rbp + 0x6a8]
movsd qword [rbp + 0x190], xmm0
mov ecx, dword [rbp + 0x6b0]
mov dword [rbp + 0x198], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x1a0], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x1a8], ecx
mov r9d, eax
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1a0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x1b0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x1b8], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x1c0], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x1c8], ecx
movsd xmm0, qword [rbp + 0x620]
movsd qword [rbp + 0x1d0], xmm0
mov ecx, dword [rbp + 0x628]
mov dword [rbp + 0x1d8], ecx
mov r9d, eax
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x1d0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x1e0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x1e8], ecx
movsd xmm0, qword [rbp + 0x6d0]
movsd qword [rbp + 0x1f0], xmm0
mov ecx, dword [rbp + 0x6d8]
mov dword [rbp + 0x1f8], ecx
movsd xmm0, qword [rbp + 0x620]
movsd qword [rbp + 0x200], xmm0
mov ecx, dword [rbp + 0x628]
mov dword [rbp + 0x208], ecx
mov r9d, eax
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x200]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x210], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x218], ecx
movsd xmm0, qword [rbp + 0x730]
movsd qword [rbp + 0x220], xmm0
mov ecx, dword [rbp + 0x738]
mov dword [rbp + 0x228], ecx
movsd xmm0, qword [rbp + 0x6d0]
movsd qword [rbp + 0x230], xmm0
mov ecx, dword [rbp + 0x6d8]
mov dword [rbp + 0x238], ecx
mov r9d, eax
lea r8, [rbp + 0x210]
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x230]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x240], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x248], ecx
movsd xmm0, qword [rbp + 0x6c0]
movsd qword [rbp + 0x250], xmm0
mov ecx, dword [rbp + 0x6c8]
mov dword [rbp + 0x258], ecx
movsd xmm0, qword [rbp + 0x620]
movsd qword [rbp + 0x260], xmm0
mov ecx, dword [rbp + 0x628]
mov dword [rbp + 0x268], ecx
mov r9d, eax
lea r8, [rbp + 0x240]
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x260]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x270], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x278], ecx
movsd xmm0, qword [rbp + 0x720]
movsd qword [rbp + 0x280], xmm0
mov ecx, dword [rbp + 0x728]
mov dword [rbp + 0x288], ecx
movsd xmm0, qword [rbp + 0x6c0]
movsd qword [rbp + 0x290], xmm0
mov ecx, dword [rbp + 0x6c8]
mov dword [rbp + 0x298], ecx
mov r9d, eax
lea r8, [rbp + 0x270]
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x290]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x70], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x78], ecx
movsd xmm0, qword [rbp + 0x710]
movsd qword [rbp + 0x2b0], xmm0
mov ecx, dword [rbp + 0x718]
mov dword [rbp + 0x2b8], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x2c0], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x2c8], ecx
mov r9d, eax
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x2c0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x2d0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x2d8], ecx
movsd xmm0, qword [rbp + 0x700]
movsd qword [rbp + 0x2e0], xmm0
mov ecx, dword [rbp + 0x708]
mov dword [rbp + 0x2e8], ecx
movsd xmm0, qword [rbp + 0x710]
movsd qword [rbp + 0x2f0], xmm0
mov ecx, dword [rbp + 0x718]
mov dword [rbp + 0x2f8], ecx
mov r9d, eax
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x2f0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x300], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x308], ecx
movsd xmm0, qword [rbp + 0x750]
movsd qword [rbp + 0x310], xmm0
mov ecx, dword [rbp + 0x758]
mov dword [rbp + 0x318], ecx
movsd xmm0, qword [rbp + 0x700]
movsd qword [rbp + 0x320], xmm0
mov ecx, dword [rbp + 0x708]
mov dword [rbp + 0x328], ecx
mov r9d, eax
lea r8, [rbp + 0x300]
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x320]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x330], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x338], ecx
movsd xmm0, qword [rbp + 0x6f0]
movsd qword [rbp + 0x340], xmm0
mov ecx, dword [rbp + 0x6f8]
mov dword [rbp + 0x348], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x350], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x358], ecx
mov r9d, eax
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x350]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x360], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x368], ecx
movsd xmm0, qword [rbp + 0x6e0]
movsd qword [rbp + 0x370], xmm0
mov ecx, dword [rbp + 0x6e8]
mov dword [rbp + 0x378], ecx
movsd xmm0, qword [rbp + 0x6f0]
movsd qword [rbp + 0x380], xmm0
mov ecx, dword [rbp + 0x6f8]
mov dword [rbp + 0x388], ecx
mov r9d, eax
lea r8, [rbp + 0x360]
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x380]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x390], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x398], ecx
movsd xmm0, qword [rbp + 0x740]
movsd qword [rbp + 0x3a0], xmm0
mov ecx, dword [rbp + 0x748]
mov dword [rbp + 0x3a8], ecx
movsd xmm0, qword [rbp + 0x6e0]
movsd qword [rbp + 0x3b0], xmm0
mov ecx, dword [rbp + 0x6e8]
mov dword [rbp + 0x3b8], ecx
lea r8, [rbp + 0x390]
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x3b0]
jmp 0x140049d79
lea rcx, [rbp + 0x690]
call fcn.140043420
cmp eax, r14d
je 0x140049d82
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x3c0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x3c8], ecx
movsd xmm0, qword [rbp + 0x6a8]
movsd qword [rbp + 0x3d0], xmm0
mov ecx, dword [rbp + 0x6b0]
mov dword [rbp + 0x3d8], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x3e0], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x3e8], ecx
mov r9d, eax
lea r8, [rbp + 0x3c0]
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x3e0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x3f0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x3f8], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x400], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x408], ecx
movsd xmm0, qword [rbp + 0x620]
movsd qword [rbp + 0x410], xmm0
mov ecx, dword [rbp + 0x628]
mov dword [rbp + 0x418], ecx
mov r9d, eax
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x410]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x420], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x428], ecx
movsd xmm0, qword [rbp + 0x6d0]
movsd qword [rbp + 0x430], xmm0
mov ecx, dword [rbp + 0x6d8]
mov dword [rbp + 0x438], ecx
movsd xmm0, qword [rbp + 0x620]
movsd qword [rbp + 0x440], xmm0
mov ecx, dword [rbp + 0x628]
mov dword [rbp + 0x448], ecx
mov r9d, eax
lea r8, [rbp + 0x420]
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x440]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x450], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x458], ecx
movsd xmm0, qword [rbp + 0x730]
movsd qword [rbp + 0x460], xmm0
mov ecx, dword [rbp + 0x738]
mov dword [rbp + 0x468], ecx
movsd xmm0, qword [rbp + 0x6d0]
movsd qword [rbp + 0x470], xmm0
mov ecx, dword [rbp + 0x6d8]
mov dword [rbp + 0x478], ecx
mov r9d, eax
lea r8, [rbp + 0x450]
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x470]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x480], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x488], ecx
movsd xmm0, qword [rbp + 0x6c0]
movsd qword [rbp + 0x490], xmm0
mov ecx, dword [rbp + 0x6c8]
mov dword [rbp + 0x498], ecx
movsd xmm0, qword [rbp + 0x620]
movsd qword [rbp + 0x4a0], xmm0
mov ecx, dword [rbp + 0x628]
mov dword [rbp + 0x4a8], ecx
mov r9d, eax
lea r8, [rbp + 0x480]
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x4a0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x4b0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x4b8], ecx
movsd xmm0, qword [rbp + 0x720]
movsd qword [rbp + 0x4c0], xmm0
mov ecx, dword [rbp + 0x728]
mov dword [rbp + 0x4c8], ecx
movsd xmm0, qword [rbp + 0x6c0]
movsd qword [rbp + 0x4d0], xmm0
mov ecx, dword [rbp + 0x6c8]
mov dword [rbp + 0x4d8], ecx
mov r9d, eax
lea r8, [rbp + 0x4b0]
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x4d0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x20], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x28], ecx
movsd xmm0, qword [rbp + 0x710]
movsd qword [rbp + 0x30], xmm0
mov ecx, dword [rbp + 0x718]
mov dword [rbp + 0x38], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0x40], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0x48], ecx
mov r9d, eax
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x50], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x58], ecx
movsd xmm0, qword [rbp + 0x700]
movsd qword [rbp + 0x60], xmm0
mov ecx, dword [rbp + 0x708]
mov dword [rbp + 0x68], ecx
movsd xmm0, qword [rbp + 0x710]
movsd qword [rbp + 0x80], xmm0
mov ecx, dword [rbp + 0x718]
mov dword [rbp + 0x88], ecx
mov r9d, eax
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x90], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x98], ecx
movsd xmm0, qword [rbp + 0x750]
movsd qword [rbp + 0xa0], xmm0
mov ecx, dword [rbp + 0x758]
mov dword [rbp + 0xa8], ecx
movsd xmm0, qword [rbp + 0x700]
movsd qword [rbp + 0xb0], xmm0
mov ecx, dword [rbp + 0x708]
mov dword [rbp + 0xb8], ecx
mov r9d, eax
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xb0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0xc0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0xc8], ecx
movsd xmm0, qword [rbp + 0x6f0]
movsd qword [rbp + 0xd0], xmm0
mov ecx, dword [rbp + 0x6f8]
mov dword [rbp + 0xd8], ecx
movsd xmm0, qword [rbp + 0x680]
movsd qword [rbp + 0xe0], xmm0
mov ecx, dword [rbp + 0x688]
mov dword [rbp + 0xe8], ecx
mov r9d, eax
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0xe0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0xf0], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0xf8], ecx
movsd xmm0, qword [rbp + 0x6e0]
movsd qword [rbp + 0x100], xmm0
mov ecx, dword [rbp + 0x6e8]
mov dword [rbp + 0x108], ecx
movsd xmm0, qword [rbp + 0x6f0]
movsd qword [rbp + 0x2a0], xmm0
mov ecx, dword [rbp + 0x6f8]
mov dword [rbp + 0x2a8], ecx
mov r9d, eax
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x2a0]
call fcn.1400429d0
lea rcx, [0x140084000]
call fcn.140007870
movsd xmm0, qword [rbp + 0x610]
movsd qword [rbp + 0x110], xmm0
mov ecx, dword [rbp + 0x618]
mov dword [rbp + 0x118], ecx
movsd xmm0, qword [rbp + 0x740]
movsd qword [rbp + 0x120], xmm0
mov ecx, dword [rbp + 0x748]
mov dword [rbp + 0x128], ecx
movsd xmm0, qword [rbp + 0x6e0]
movsd qword [rbp + 0x130], xmm0
mov ecx, dword [rbp + 0x6e8]
mov dword [rbp + 0x138], ecx
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x130]
mov r9d, eax
call fcn.1400429d0
nop
lea rcx, [rbp + 0x720]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x6c0]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x730]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x6d0]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x740]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x6e0]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x6f0]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x750]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x700]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x710]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x680]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x770]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x620]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x6a8]
call fcn.140002fd0
cmp byte [0x140084827], 0
je 0x14004a1c6
movd xmm10, dword [0x14008469c]
cvtdq2ps xmm10, xmm10
movaps xmm8, xmm10
mulss xmm8, xmm13
movd xmm9, dword [0x140084698]
cvtdq2ps xmm9, xmm9
movaps xmm6, xmm9
mulss xmm6, xmm13
mov qword [rbp + 0x6b8], 0
mov rdx, qword [0x140084638]
mov ecx, esi
call fcn.1400448f0
mov r8, rax
mov rdx, r15
lea rcx, [rbp + 0x690]
call fcn.140042f70
mov rbx, rax
lea rcx, [rbp + 0x690]
call fcn.140043420
cmp eax, r14d
je 0x14004a1c6
mov eax, dword [0x140084b18]
test eax, eax
jne 0x14004a032
test rbx, rbx
je 0x14004a1c6
lea r9d, [rax + 7]
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rbp + 0x4ec]
call fcn.140042f10
nop
movsd xmm0, qword [rax]
movsd qword [rbp + 0x140], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x148], eax
lea rdx, [rbp + 0x6b8]
lea rcx, [rbp + 0x140]
call fcn.140043460
movzx ebx, al
lea rcx, [rbp + 0x4ec]
call fcn.140002fd0
test bl, bl
je 0x14004a1c6
movaps xmm0, xmm6
movss xmm1, dword [0x14005d3f4]
addss xmm0, xmm1
movss xmm2, dword [rbp + 0x6b8]
comiss xmm2, xmm0
ja 0x14004a1c6
subss xmm6, xmm1
comiss xmm6, xmm2
ja 0x14004a1c6
movaps xmm0, xmm8
addss xmm0, xmm1
movss xmm2, dword [rbp + 0x6bc]
comiss xmm2, xmm0
ja 0x14004a1c6
subss xmm8, xmm1
comiss xmm8, xmm2
ja 0x14004a1c6
mov rdx, qword [0x140084b38]
cmp rdx, qword [0x140084b40]
je 0x140049fa1
movss dword [rdx], xmm7
mov rdx, qword [0x140084b38]
add rdx, 4
mov qword [0x140084b38], rdx
jmp 0x140049fbb
lea r8, [rbp + 0x660]
lea rcx, [0x140084b30]
call fcn.140045650
mov rdx, qword [0x140084b38]
mov rax, qword [0x140084b30]
cmp rax, rdx
je 0x140049fe4
lea rcx, [rax + 4]
cmp rcx, rdx
je 0x140049fe4
movss xmm0, dword [rax]
comiss xmm0, dword [rcx]
cmova rax, rcx
add rcx, 4
cmp rcx, rdx
jne 0x140049fd0
movss xmm0, dword [rax]
movss dword [0x140084b1c], xmm0
ucomiss xmm7, xmm0
jp 0x14004a1c6
jne 0x14004a1c6
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14004a1c6
movss xmm0, dword [rbp + 0x6b8]
comiss xmm0, xmm11
jbe 0x14004a1c6
movss xmm1, dword [rbp + 0x6bc]
jmp 0x14004a19d
cmp eax, 1
jne 0x14004a1c6
mov qword [rbp + 0x668], 0
lea r9d, [rax + 0xb]
lea r8, [rbp + 0x670]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140042f10
nop
movsd xmm0, qword [rax]
movsd qword [rbp + 0x150], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x158], eax
lea rdx, [rbp + 0x668]
lea rcx, [rbp + 0x150]
call fcn.140043460
movzx ebx, al
lea rcx, [rsp + 0x58]
call fcn.140002fd0
test bl, bl
je 0x14004a1c6
movaps xmm0, xmm6
movss xmm1, dword [0x14005d3f4]
addss xmm0, xmm1
movss xmm2, dword [rbp + 0x668]
comiss xmm2, xmm0
ja 0x14004a1c6
subss xmm6, xmm1
comiss xmm6, xmm2
ja 0x14004a1c6
movaps xmm0, xmm8
addss xmm0, xmm1
movss xmm2, dword [rbp + 0x66c]
comiss xmm2, xmm0
ja 0x14004a1c6
subss xmm8, xmm1
comiss xmm8, xmm2
ja 0x14004a1c6
mov rdx, qword [0x140084b38]
cmp rdx, qword [0x140084b40]
je 0x14004a119
movss dword [rdx], xmm7
mov rdx, qword [0x140084b38]
add rdx, 4
mov qword [0x140084b38], rdx
jmp 0x14004a133
lea r8, [rbp + 0x660]
lea rcx, [0x140084b30]
call fcn.140045650
mov rdx, qword [0x140084b38]
mov rax, qword [0x140084b30]
cmp rax, rdx
je 0x14004a164
lea rcx, [rax + 4]
cmp rcx, rdx
je 0x14004a164
nop dword [rax + rax]
movss xmm0, dword [rax]
comiss xmm0, dword [rcx]
cmova rax, rcx
add rcx, 4
cmp rcx, rdx
jne 0x14004a150
movss xmm0, dword [rax]
movss dword [0x140084b1c], xmm0
ucomiss xmm7, xmm0
jp 0x14004a1c6
jne 0x14004a1c6
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14004a1c6
movss xmm0, dword [rbp + 0x668]
comiss xmm0, xmm11
jbe 0x14004a1c6
movss xmm1, dword [rbp + 0x66c]
comiss xmm1, xmm11
jbe 0x14004a1c6
cvttss2si eax, dword [0x14005d3f0]
divss xmm7, xmm12
mov dword [rsp + 0x20], eax
movaps xmm3, xmm10
movaps xmm2, xmm9
subss xmm1, xmm7
call fcn.1400432c0
nop
lea rcx, [rbp + 0x610]
call fcn.140002fd0
inc esi
call fcn.140043400
cmp esi, eax
movss xmm8, dword [0x14004f030]
movss xmm9, dword [0x14004f140]
xorps xmm10, xmm10
jl 0x140048930
lea rcx, [rbp + 0x670]
call fcn.140002fd0
nop
lea rcx, [rbp + 0x760]
call fcn.140002fd0
mov rax, qword [0x140084b30]
cmp rax, qword [0x140084b38]
je 0x14004a227
mov qword [0x140084b38], rax
call fcn.140043100
mov rdx, rax
lea rcx, [rbp + 0x850]
call fcn.140045c00
movups xmm0, xmmword [rax]
movups xmmword [0x140084690], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x1400846a0], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [0x1400846b0], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [0x1400846c0], xmm1
movsd xmm0, qword [rax + 0x40]
movsd qword [0x1400846d0], xmm0
lea r9, [fcn.140002fd0]
mov edx, 0xc
lea r8d, [rdx - 9]
lea rcx, [rbp + 0x874]
call fcn.14004bd94
nop
call fcn.140011a20
call fcn.140008630
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], r13d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14004a342
call fcn.1400124c0
call fcn.140009c20
mov rcx, rax
call fcn.14002a960
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14004a39b
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14004a39b
call fcn.14002a8c0
mov rcx, qword [0x1400847a0]
mov rax, qword [rcx]
lea rdx, [0x1400847b0]
call qword [rax + 0x80]
call fcn.14002a670
mov rcx, qword [rbp + 0x8a0]
xor rcx, rsp
call fcn.14004bf80
lea r11, [rsp + 0xa50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14004cc40
int3
call fcn.14004cc40
int3