Function at 0x180026e80
Capabilities:
Inspect section memory permissions

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3d8]
sub rsp, 0x498
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov r14, rcx
xor esi, esi
mov dword [rbp + 0x3e0], esi
mov rax, qword [rcx]
mov edx, dword [rax]
cmp edx, 0x6145d534
je 0x180026f5e
cmp edx, 0x9056619f
je 0x180026f5e
cmp edx, 0xca118ef6
je 0x180026f5e
cmp edx, 0xe7b2d9ac
je 0x180026f5e
cmp edx, 0xff76e221
je 0x180026f5e
cmp edx, 0xb0186fc5
je 0x180026f5e
cmp edx, 0x23da8c39
je 0x180026f5e
cmp edx, 0x5263157a
je 0x180026f5e
cmp edx, 0x5eea406d
je 0x180026f5e
cmp edx, 0x9f2e31d7
je 0x180026f5e
cmp edx, 0xb7f8a102
je 0x180026f5e
cmp edx, 0xe9c75a82
je 0x180026f5e
cmp edx, 0xf399ad9c
jne 0x180029160
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx]
call fcn.180009360
movaps xmm6, xmm0
movss dword [rbp + 0x10], xmm6
mov rax, qword [r14 + 8]
mov rcx, qword [rax]
add rcx, 0x1810
call fcn.180011810
movss dword [rbp + 0x14], xmm0
xorps xmm8, xmm8
comiss xmm8, xmm6
jb 0x180026f9e
comiss xmm8, xmm0
jae 0x180029160
mov rax, qword [r14 + 8]
mov rcx, qword [rax]
add rcx, 0x5e8
call fcn.180004820
mov r15, rax
mov rcx, qword [r14 + 0x10]
mov rcx, qword [rcx]
add rcx, 0x5e8
call fcn.180004820
mov rbx, rax
lea rcx, [r15 - 0x1000000]
movabs r12, 0x7ffffef00000
cmp rcx, r12
ja 0x180029160
test r15b, 7
jne 0x180029160
lea rcx, [r15 + 0x75c]
call fcn.180011810
movaps xmm6, xmm0
lea rcx, [rbx + 0x75c]
call fcn.180011810
ucomiss xmm6, xmm0
jp 0x180027014
jne 0x180027014
mov al, 1
jmp 0x180027016
xor al, al
mov byte [0x180055ac3], al
mov rax, qword [r14 + 8]
mov rcx, qword [rax]
add rcx, 0x388
call fcn.180004820
mov r8, qword [0x180056460]
test r8, r8
jne 0x180027054
mov rcx, qword [0x180056698]
mov rdx, qword [rcx + 8]
mov r8, qword [rdx + 0xfabee28]
mov qword [0x180056460], r8
mov rdx, rax
mov rcx, rax
call r8
lea rcx, [rax - 0x1000000]
movabs r13, 0x7ffffef00010
cmp rcx, r12
ja 0x180027139
test al, 7
jne 0x180027139
lea rbx, [rax + 0x2d0]
lea rax, [rbx - 0xfffff8]
cmp rax, r13
ja 0x18002712e
mov rax, qword [sym.imp.KERNEL32.dll_IsBadHugeReadPtr]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc
mov rcx, rbx
call fcn.18002de76
test eax, eax
jne 0x18002712e
movzx eax, byte [rbx]
mov byte [rsp + 0x50], al
movzx eax, byte [rbx + 1]
mov byte [rsp + 0x51], al
movzx eax, byte [rbx + 2]
mov byte [rsp + 0x52], al
movzx eax, byte [rbx + 3]
mov byte [rsp + 0x53], al
movzx eax, byte [rbx + 4]
mov byte [rsp + 0x54], al
movzx eax, byte [rbx + 5]
mov byte [rsp + 0x55], al
movzx eax, byte [rbx + 6]
mov byte [rsp + 0x56], al
movzx eax, byte [rbx + 7]
mov byte [rsp + 0x57], al
movzx eax, byte [rbx + 8]
mov byte [rsp + 0x58], al
movzx eax, byte [rbx + 9]
mov byte [rsp + 0x59], al
movzx eax, byte [rbx + 0xa]
mov byte [rsp + 0x5a], al
movzx eax, byte [rbx + 0xb]
mov byte [rsp + 0x5b], al
movss xmm2, dword [rsp + 0x58]
movss xmm15, dword [rsp + 0x54]
movss xmm12, dword [rsp + 0x50]
jmp 0x180027144
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], esi
jmp 0x180027118
xorps xmm12, xmm12
xorps xmm15, xmm15
xorps xmm2, xmm2
movss dword [rbp + 0x3e8], xmm12
movss dword [rbp + 0x3f8], xmm15
mov rax, qword [0x180056698]
subss xmm2, dword [rax + 0x48]
movaps xmm1, xmm15
subss xmm1, dword [rax + 0x44]
movaps xmm0, xmm12
subss xmm0, dword [rax + 0x40]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
mulss xmm2, xmm2
addss xmm1, xmm2
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180027199
xorps xmm6, xmm6
sqrtss xmm6, xmm1
jmp 0x1800271a4
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
divss xmm6, dword [0x18004ffa8]
movss dword [rbp + 0x3f0], xmm6
mov rdx, qword [r14 + 8]
mov rdx, qword [rdx]
lea rcx, [rbp + 0x140]
call fcn.180009c80
nop
mov eax, dword [rbp + 0x184]
cmp eax, 0x186a0
jl 0x1800271e0
sub eax, 0x186a0
mov dword [rbp + 0x184], eax
mov rax, qword [r14 + 8]
mov rcx, qword [rax]
add rcx, 0x9a0
call fcn.180004820
mov rbx, rax
lea rcx, [rax - 0x1000000]
cmp rcx, r12
ja 0x180027240
test bl, 7
jne 0x180027240
lea rcx, [rax + 0x208]
call fcn.180004820
mov rdi, rax
lea rcx, [rax - 0x1000000]
cmp rcx, r12
ja 0x180027240
test dil, 7
jne 0x180027240
lea rcx, [rbx + 0x311]
call fcn.1800117b0
movzx ecx, al
lea rcx, [rdi + rcx*8]
call fcn.180004820
mov rax, qword [r14 + 8]
mov rbx, qword [rax]
lea rax, [rbx - 0xffd9e0]
cmp rax, r13
ja 0x180027290
mov rax, qword [sym.imp.KERNEL32.dll_IsBadHugeReadPtr]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [rbx + 0x2618]
call fcn.18002de76
test eax, eax
jne 0x180027290
movzx r12d, byte [rbx + 0x2618]
jmp 0x180027293
xor r12b, r12b
mov rdx, qword [r14 + 8]
mov rax, qword [0x180056698]
mov rcx, qword [rax + 0x30]
cmp qword [rdx], rcx
je 0x180029154
mov rax, qword [r14 + 0x10]
mov rcx, qword [rax]
add rcx, 0xfa8
call fcn.1800047a0
mov ebx, eax
mov rcx, qword [r14 + 8]
mov rcx, qword [rcx]
add rcx, 0xfa8
call fcn.1800047a0
cmp ebx, eax
je 0x180029154
mov edx, dword [rbp + 0x184]
lea rcx, [rbp - 0x60]
call fcn.1800236c0
mov rcx, qword [r14 + 8]
mov rbx, qword [rcx]
add rbx, 0x1a38
lea rax, [rbx - 0xfffff8]
cmp rax, r13
ja 0x180027368
mov rax, qword [sym.imp.KERNEL32.dll_IsBadHugeReadPtr]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc
mov rcx, rbx
call fcn.18002de76
test eax, eax
jne 0x180027368
movzx eax, byte [rbx]
mov byte [rsp + 0x50], al
movzx eax, byte [rbx + 1]
mov byte [rsp + 0x51], al
movzx eax, byte [rbx + 2]
mov byte [rsp + 0x52], al
movzx eax, byte [rbx + 3]
mov byte [rsp + 0x53], al
movzx eax, byte [rbx + 4]
mov byte [rsp + 0x54], al
movzx eax, byte [rbx + 5]
mov byte [rsp + 0x55], al
movzx eax, byte [rbx + 6]
mov byte [rsp + 0x56], al
movzx eax, byte [rbx + 7]
mov byte [rsp + 0x57], al
jmp 0x180027371
mov qword [rsp + 0x50], 0
lea r13, [0x18002deb0]
movups xmm13, xmmword [rbp - 0x60]
movss xmm11, dword [rsp + 0x54]
movss xmm10, dword [0x18004fe20]
movss xmm7, dword [0x18004fe88]
movss xmm14, dword [0x18004fed0]
movss xmm9, dword [0x18004ffc8]
mov rax, qword [0x1800566a0]
cmp byte [rax + 0x12], 0
je 0x1800279ac
cmp byte [0x180055ac2], 0
je 0x1800279ac
mov rax, qword [r14 + 0x18]
movss xmm6, dword [rax]
mov rax, qword [0x180056698]
mov rcx, qword [rax + 0x18]
add rcx, 0x9c4
call fcn.1800047a0
movd xmm10, eax
mov rcx, qword [0x180056698]
mov rcx, qword [rcx + 0x18]
add rcx, 0x9c8
call fcn.1800047a0
movaps xmm2, xmm6
divss xmm2, dword [0x180055acc]
movd xmm15, eax
cvtdq2ps xmm15, xmm15
addss xmm15, dword [rbp + 0x3f8]
movss xmm0, dword [0x180058abc]
addss xmm0, dword [0x18004fe5c]
mulss xmm0, xmm6
subss xmm15, xmm0
mov rdi, qword [0x180056698]
movss xmm1, dword [rdi + 0x2c]
divss xmm15, xmm2
mulss xmm15, xmm1
addss xmm15, xmm1
cvtdq2ps xmm10, xmm10
addss xmm10, xmm12
movss xmm0, dword [0x180058ab8]
addss xmm0, dword [0x18004fe5c]
mulss xmm0, xmm6
subss xmm10, xmm0
divss xmm10, xmm2
mulss xmm10, xmm1
addss xmm10, dword [rdi + 0x28]
movss dword [rbp + 0x3e0], xmm10
movaps xmm7, xmm11
mulss xmm7, dword [0x18004fe20]
movss dword [rbp - 0x3c], xmm7
xorps xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm9, xmm0
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm6
movss dword [rbp - 0x48], xmm7
mulss xmm9, xmm6
movss dword [rbp - 0x44], xmm9
movss xmm12, dword [0x18004fe88]
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm11, xmm0
mulss xmm11, xmm9
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm7
addss xmm11, xmm0
movss dword [rbp - 0x40], xmm11
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
mulss xmm6, xmm7
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm9
subss xmm6, xmm0
movss dword [rbp + 0xb0], xmm6
movss xmm12, dword [0x180050014]
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
mulss xmm6, xmm9
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm7
addss xmm6, xmm0
movss dword [rbp - 0x4c], xmm6
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm7
movss dword [rbp - 0x50], xmm0
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm9
movss xmm2, dword [rbp - 0x50]
subss xmm2, xmm0
movss dword [rbp - 0x50], xmm2
mov rdx, qword [0x180056430]
mov qword [0x180056438], rdx
xor ebx, ebx
jmp 0x1800275a9
movss xmm10, dword [rbp + 0x3e0]
xorps xmm0, xmm0
test rbx, rbx
js 0x1800275b8
cvtsi2ss xmm0, rbx
jmp 0x1800275d0
mov rcx, rbx
shr rcx, 1
mov rax, rbx
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
movss xmm1, dword [0x18004ff44]
subss xmm1, xmm0
movaps xmm0, xmm9
mulss xmm0, xmm1
movaps xmm6, xmm7
mulss xmm6, xmm1
addss xmm0, xmm0
movaps xmm12, xmm15
addss xmm12, xmm0
addss xmm6, xmm6
addss xmm6, xmm10
movaps xmm7, xmm1
mulss xmm7, xmm11
addss xmm7, xmm15
movaps xmm9, xmm1
mulss xmm9, dword [rbp + 0xb0]
addss xmm9, xmm10
movss xmm0, dword [rbp - 0x4c]
mulss xmm0, xmm1
movaps xmm11, xmm15
addss xmm11, xmm0
movaps xmm10, xmm2
mulss xmm10, xmm1
addss xmm10, dword [rbp + 0x3e0]
movdqa xmmword [rbp - 0x60], xmm13
comiss xmm6, xmm8
jb 0x180027673
movss xmm0, dword [rdi + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm6
jb 0x180027673
comiss xmm12, xmm8
jb 0x180027673
movss xmm0, dword [rdi + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm12
jae 0x18002769c
comiss xmm9, xmm8
jb 0x1800276dd
movss xmm0, dword [rdi + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm9
jb 0x1800276dd
comiss xmm7, xmm8
jb 0x1800276dd
movss xmm0, dword [rdi + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm7
jb 0x1800276dd
test rdx, rdx
je 0x1800276dd
movss dword [rsp + 0x38], xmm14
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], r13
movaps xmm3, xmm9
movaps xmm2, xmm12
movaps xmm1, xmm6
mov rcx, rdx
call fcn.18002de76
mov rdi, qword [0x180056698]
mov rdx, qword [0x180056438]
movdqa xmmword [rbp + 0x20], xmm13
comiss xmm9, xmm8
jb 0x18002770c
movss xmm0, dword [rdi + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm9
jb 0x18002770c
comiss xmm7, xmm8
jb 0x18002770c
movss xmm0, dword [rdi + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm7
jae 0x180027736
comiss xmm10, xmm8
jb 0x180027778
movss xmm0, dword [rdi + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm10
jb 0x180027778
comiss xmm11, xmm8
jb 0x180027778
movss xmm0, dword [rdi + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm11
jb 0x180027778
test rdx, rdx
je 0x180027778
movss dword [rsp + 0x38], xmm14
lea rax, [rbp + 0x20]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm11
mov qword [rsp + 0x20], r13
movaps xmm3, xmm10
movaps xmm2, xmm7
movaps xmm1, xmm9
mov rcx, rdx
call fcn.18002de76
mov rdi, qword [0x180056698]
mov rdx, qword [0x180056438]
movdqa xmmword [rbp - 0x30], xmm13
comiss xmm10, xmm8
jb 0x1800277a8
movss xmm0, dword [rdi + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm10
jb 0x1800277a8
comiss xmm11, xmm8
jb 0x1800277a8
movss xmm0, dword [rdi + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm11
jae 0x1800277d1
comiss xmm6, xmm8
jb 0x180027813
movss xmm0, dword [rdi + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm6
jb 0x180027813
comiss xmm12, xmm8
jb 0x180027813
movss xmm0, dword [rdi + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm12
jb 0x180027813
test rdx, rdx
je 0x180027813
movss dword [rsp + 0x38], xmm14
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm12
mov qword [rsp + 0x20], r13
movaps xmm3, xmm6
movaps xmm2, xmm11
movaps xmm1, xmm10
mov rcx, rdx
call fcn.18002de76
mov rdi, qword [0x180056698]
mov rdx, qword [0x180056438]
inc rbx
cmp rbx, 3
movss xmm7, dword [rbp - 0x48]
movss xmm9, dword [rbp - 0x44]
movss xmm11, dword [rbp - 0x40]
movss xmm2, dword [rbp - 0x50]
jb 0x1800275a0
movss xmm10, dword [0x18004fe20]
cmp r12b, 1
jne 0x1800278e0
movss xmm0, dword [rsp + 0x50]
mulss xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
movss xmm9, dword [rbp - 0x3c]
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm7, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm2, xmm0
mulss xmm7, xmm6
movss xmm9, dword [0x18004ffc8]
mulss xmm7, xmm9
addss xmm7, xmm15
mulss xmm2, xmm6
mulss xmm2, xmm9
movss xmm6, dword [rbp + 0x3e0]
addss xmm2, xmm6
mov rax, qword [0x180056690]
movups xmm0, xmmword [rax + 0x90]
movaps xmmword [rbp - 0x30], xmm0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x18004fe5c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm7
movaps xmm1, xmm15
movaps xmm0, xmm6
call fcn.180005090
jmp 0x1800278f1
movss xmm6, dword [rbp + 0x3e0]
movss xmm9, dword [0x18004ffc8]
movdqa xmmword [rbp - 0x30], xmm13
lea r9, [rbp - 0x30]
movss xmm2, dword [0x18004ff44]
movaps xmm1, xmm15
movaps xmm0, xmm6
call fcn.180005b80
nop
nop
mov word [rbp + 0x3e0], 0x6425
mov byte [rbp + 0x3e2], 0
mov rax, qword [0x180056690]
movups xmm1, xmmword [rax + 0x1a0]
movaps xmmword [rbp - 0x30], xmm1
movups xmm2, xmmword [rax + 0x1c0]
movaps xmmword [rbp + 0x20], xmm2
mov eax, dword [rbp + 0x184]
mov dword [rsp + 0x30], eax
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x30]
lea r8, [rbp + 0x20]
movaps xmm1, xmm15
movd edx, xmm1
movaps xmm0, xmm6
movd ecx, xmm0
call fcn.180005630
mov rax, qword [0x180056430]
mov qword [0x180056438], rax
movss xmm15, dword [rbp + 0x3f8]
movss xmm12, dword [rbp + 0x3e8]
movss xmm7, dword [0x18004fe88]
movss xmm6, dword [rbp + 0x3f0]
movss xmm11, dword [rsp + 0x54]
call fcn.180023b30
movaps xmm1, xmm0
movss xmm0, dword [0x18004ff78]
comiss xmm0, xmm1
jbe 0x1800279c7
movaps xmm3, xmm9
jmp 0x1800279fd
movss xmm0, dword [0x18004ff9c]
comiss xmm0, xmm1
jbe 0x1800279de
movss xmm3, dword [0x18004ffd4]
jmp 0x1800279fd
movss xmm0, dword [0x18004ffa4]
comiss xmm0, xmm1
jbe 0x1800279f5
movss xmm3, dword [0x18004ffd8]
jmp 0x1800279fd
movss xmm3, dword [0x18004ffe8]
movzx edx, byte [0x180055ac1]
test dl, dl
je 0x180027a10
mulss xmm3, dword [0x18004feb0]
movss xmm9, dword [0x18004fe3c]
comiss xmm3, xmm6
jb 0x180027fcd
lea rcx, [0x1800550d8]
lea rax, str.33_v_www_
test dl, dl
cmovne rax, rcx
lea r8, [0x1800566a8]
lea rcx, [0x180058ab0]
cmovne rcx, r8
mov rbx, qword [0x180056698]
subss xmm15, dword [rbx + 0x44]
mulss xmm15, dword [0x18004fe1c]
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
divss xmm15, xmm3
addss xmm15, dword [0x18004fe5c]
mulss xmm15, dword [rax + 4]
mulss xmm15, xmm9
mulss xmm15, xmm0
mulss xmm0, dword [rcx + 4]
addss xmm15, xmm0
movss xmm1, dword [rbx + 0x28]
addss xmm1, xmm1
subss xmm12, dword [rbx + 0x40]
mulss xmm12, dword [0x18004fe1c]
divss xmm12, xmm3
addss xmm12, dword [0x18004fe5c]
mulss xmm12, dword [rax]
mulss xmm12, xmm9
mulss xmm12, xmm1
mulss xmm1, dword [rcx]
addss xmm12, xmm1
movss dword [rbp + 0x3e8], xmm12
mulss xmm11, xmm10
movss dword [rbp - 0x4c], xmm11
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm9, xmm0
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm10, xmm0
mulss xmm10, xmm6
movss dword [rbp - 0x40], xmm10
mulss xmm9, xmm6
movss dword [rbp - 0x44], xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm11, xmm0
mulss xmm11, xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm10
addss xmm11, xmm0
movss dword [rbp - 0x48], xmm11
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
mulss xmm6, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm9
subss xmm6, xmm0
movss dword [rbp + 0x3f8], xmm6
movss xmm7, dword [0x180050014]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
mulss xmm6, xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm10
addss xmm6, xmm0
movss dword [rbp - 0x3c], xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm10
movss dword [rbp + 0x3e0], xmm0
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm9
movss xmm1, dword [rbp + 0x3e0]
subss xmm1, xmm0
movss dword [rbp + 0x3e0], xmm1
mov rdx, qword [0x180056430]
mov qword [0x180056438], rdx
xor edi, edi
jmp 0x180027bf9
movss xmm12, dword [rbp + 0x3e8]
xorps xmm0, xmm0
test rdi, rdi
js 0x180027c08
cvtsi2ss xmm0, rdi
jmp 0x180027c20
mov rcx, rdi
shr rcx, 1
mov rax, rdi
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
movss xmm6, dword [0x18004ff44]
subss xmm6, xmm0
movaps xmm7, xmm6
mulss xmm7, xmm9
movaps xmm9, xmm6
mulss xmm9, xmm10
addss xmm7, xmm7
addss xmm7, xmm15
addss xmm9, xmm9
addss xmm9, xmm12
movaps xmm10, xmm6
mulss xmm10, xmm11
addss xmm10, xmm15
movaps xmm11, xmm6
mulss xmm11, dword [rbp + 0x3f8]
addss xmm11, xmm12
movaps xmm12, xmm6
mulss xmm12, dword [rbp - 0x3c]
addss xmm12, xmm15
mulss xmm6, xmm1
addss xmm6, dword [rbp + 0x3e8]
movdqa xmmword [rbp - 0x30], xmm13
comiss xmm9, xmm8
jb 0x180027cba
movss xmm0, dword [rbx + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm9
jb 0x180027cba
comiss xmm7, xmm8
jb 0x180027cba
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm7
jae 0x180027ce4
comiss xmm11, xmm8
jb 0x180027d26
movss xmm0, dword [rbx + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm11
jb 0x180027d26
comiss xmm10, xmm8
jb 0x180027d26
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm10
jb 0x180027d26
test rdx, rdx
je 0x180027d26
movss dword [rsp + 0x38], xmm14
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm10
mov qword [rsp + 0x20], r13
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm9
mov rcx, rdx
call fcn.18002de76
mov rbx, qword [0x180056698]
mov rdx, qword [0x180056438]
movdqa xmmword [rbp + 0x20], xmm13
comiss xmm11, xmm8
jb 0x180027d56
movss xmm0, dword [rbx + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm11
jb 0x180027d56
comiss xmm10, xmm8
jb 0x180027d56
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm10
jae 0x180027d7f
comiss xmm6, xmm8
jb 0x180027dc1
movss xmm0, dword [rbx + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm6
jb 0x180027dc1
comiss xmm12, xmm8
jb 0x180027dc1
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm12
jb 0x180027dc1
test rdx, rdx
je 0x180027dc1
movss dword [rsp + 0x38], xmm14
lea rax, [rbp + 0x20]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm12
mov qword [rsp + 0x20], r13
movaps xmm3, xmm6
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, rdx
call fcn.18002de76
mov rbx, qword [0x180056698]
mov rdx, qword [0x180056438]
movdqa xmmword [rbp - 0x60], xmm13
comiss xmm6, xmm8
jb 0x180027df0
movss xmm0, dword [rbx + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm6
jb 0x180027df0
comiss xmm12, xmm8
jb 0x180027df0
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm12
jae 0x180027e19
comiss xmm9, xmm8
jb 0x180027e5a
movss xmm0, dword [rbx + 0x28]
addss xmm0, xmm0
comiss xmm0, xmm9
jb 0x180027e5a
comiss xmm7, xmm8
jb 0x180027e5a
movss xmm0, dword [rbx + 0x2c]
addss xmm0, xmm0
comiss xmm0, xmm7
jb 0x180027e5a
test rdx, rdx
je 0x180027e5a
movss dword [rsp + 0x38], xmm14
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
movss dword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], r13
movaps xmm3, xmm9
movaps xmm2, xmm12
movaps xmm1, xmm6
mov rcx, rdx
call fcn.18002de76
mov rbx, qword [0x180056698]
mov rdx, qword [0x180056438]
inc rdi
cmp rdi, 3
movss xmm10, dword [rbp - 0x40]
movss xmm9, dword [rbp - 0x44]
movss xmm11, dword [rbp - 0x48]
movss xmm1, dword [rbp + 0x3e0]
jb 0x180027bf0
cmp r12b, 1
jne 0x180027f22
movss xmm0, dword [rsp + 0x50]
mulss xmm0, dword [0x18004fe20]
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
movss xmm9, dword [rbp - 0x4c]
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm7, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm2, xmm0
mulss xmm7, xmm6
mulss xmm7, dword [0x18004ffc8]
addss xmm7, xmm15
mulss xmm2, xmm6
mulss xmm2, dword [0x18004ffc8]
movss xmm6, dword [rbp + 0x3e8]
addss xmm2, xmm6
mov rax, qword [0x180056690]
movups xmm0, xmmword [rax + 0x90]
movaps xmmword [rbp - 0x30], xmm0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x18004fe5c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm7
movaps xmm1, xmm15
movaps xmm0, xmm6
call fcn.180005090
jmp 0x180027f2a
movss xmm6, dword [rbp + 0x3e8]
movdqa xmmword [rbp - 0x30], xmm13
lea r9, [rbp - 0x30]
movss xmm2, dword [0x18004ff44]
movaps xmm1, xmm15
movaps xmm0, xmm6
call fcn.180005b80
nop
nop
mov word [rbp + 0x3e0], 0x6425
mov byte [rbp + 0x3e2], 0
mov rax, qword [0x180056690]
movups xmm1, xmmword [rax + 0x1a0]
movaps xmmword [rbp - 0x30], xmm1
movups xmm2, xmmword [rax + 0x1c0]
movaps xmmword [rbp + 0x20], xmm2
mov eax, dword [rbp + 0x184]
mov dword [rsp + 0x30], eax
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x30]
lea r8, [rbp + 0x20]
movaps xmm1, xmm15
movd edx, xmm1
movaps xmm0, xmm6
movd ecx, xmm0
call fcn.180005630
mov rax, qword [0x180056430]
mov qword [0x180056438], rax
movss xmm9, dword [0x18004fe3c]
movss xmm6, dword [rbp + 0x3f0]
mov rax, qword [0x1800566a0]
comiss xmm6, dword [rax + 0x48]
ja 0x180029154
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x58], 0
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0
mov qword [rbp + 0x3e0], 0
mov dword [rbp + 0x3ec], 0
mov r12d, 0xf
mov r8d, r12d
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18000a070
test al, al
je 0x180029154
xor r8d, r8d
lea rdx, [rbp - 0x60]
mov rcx, r15
call fcn.18000a070
test al, al
je 0x180029154
movss xmm0, dword [rsp + 0x58]
addss xmm0, dword [0x18004ff5c]
movss xmm6, dword [rbp - 0x58]
addss xmm6, dword [0x180050018]
movsd xmm7, qword [rsp + 0x50]
movsd qword [rsp + 0x50], xmm7
movd ebx, xmm0
mov dword [rsp + 0x58], ebx
lea rdx, [rbp + 0x3e0]
lea rcx, [rsp + 0x50]
call fcn.18000aea0
test al, al
je 0x180029154
movsd xmm0, qword [rbp - 0x60]
movsd qword [rbp - 0x60], xmm0
movss dword [rbp - 0x58], xmm6
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp - 0x60]
call fcn.18000aea0
test al, al
je 0x180029154
movss xmm10, dword [rbp + 0x3ec]
movaps xmm15, xmm10
movss xmm11, dword [rbp + 0x3e4]
subss xmm15, xmm11
movaps xmm6, xmm15
mulss xmm6, xmm9
movaps xmm12, xmm6
mulss xmm12, xmm9
movss xmm13, dword [rbp + 0x3e0]
movaps xmm9, xmm13
subss xmm9, xmm12
mov rax, qword [r14 + 8]
mov rcx, qword [rax]
cmp qword [0x180056688], rcx
sete dil
movsd qword [rbp - 0x60], xmm7
mov dword [rbp - 0x58], ebx
mov rcx, qword [0x180056698]
movsd xmm0, qword [rcx + 0x40]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [rcx + 0x48]
mov dword [rsp + 0x58], eax
xor eax, eax
mov byte [rbp + 0x1a0], al
mov word [rbp + 0x1a1], ax
mov byte [rbp + 0x1a3], al
mov qword [rbp + 0x1a4], rax
mov dword [rbp + 0x1ac], eax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x1c0], xmm1
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1e0], xmm1
mov dword [rbp + 0x1f0], eax
movups xmmword [rbp + 0x1f4], xmm0
movups xmmword [rbp + 0x204], xmm0
mov qword [rbp + 0x214], rax
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x228], rax
mov rax, qword [rcx + 0x20]
mov rdx, qword [rcx + 8]
add rdx, 0xd431f4c
mov byte [rsp + 0x48], 1
lea r8, [rbp + 0x1a0]
mov qword [rsp + 0x40], r8
xor ebx, ebx
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], rdx
xor r9d, r9d
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x50]
mov rcx, qword [rcx + 0x18]
call fcn.18002de76
mov rcx, qword [0x1800566a0]
cmp byte [rcx + 1], bl
je 0x18002826a
cmp byte [rcx + 0x33], bl
je 0x18002826a
movaps xmm1, xmm11
subss xmm1, xmm10
andps xmm1, xmmword [0x1800508f0]
cvtps2pd xmm0, xmm1
mulsd xmm0, qword [0x18004fea8]
cvtpd2ps xmm2, xmm0
test dil, dil
je 0x180028224
mov rax, qword [0x180056690]
add rax, 0x460
jmp 0x18002823d
test al, al
mov rax, qword [0x180056690]
jne 0x180028237
add rax, 0x420
jmp 0x18002823d
add rax, 0x430
cvttss2si r9d, xmm1
cvttss2si r8d, xmm2
cvttss2si edx, xmm11
mulss xmm2, dword [0x18004fe3c]
movaps xmm0, xmm13
subss xmm0, xmm2
cvttss2si ecx, xmm0
mov qword [rsp + 0x20], rax
call fcn.180006070
mov rcx, qword [0x1800566a0]
cmp byte [rcx + 2], bl
je 0x1800282c8
movss xmm0, dword [0x18004fff0]
comiss xmm0, dword [rbp + 0x3f0]
jbe 0x1800282c8
cmp byte [rcx + 0x33], bl
je 0x1800282c8
mov rax, qword [0x180056690]
test dil, dil
lea rcx, [rax + 0x460]
jne 0x1800282a6
lea rcx, [rax + 0x440]
movups xmm0, xmmword [rax + 0x450]
movaps xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rcx]
movaps xmmword [rbp + 0x20], xmm1
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.180022b80
mov rcx, qword [0x1800566a0]
cmp byte [rcx + 4], bl
je 0x1800283cf
cmp byte [rcx + 0x33], bl
je 0x1800283cf
movss xmm10, dword [0x18004ff84]
maxss xmm10, xmm6
movss xmm1, dword [rbp + 0x10]
comiss xmm8, xmm1
jb 0x180028301
movss xmm2, dword [rbp + 0x14]
jmp 0x180028304
movaps xmm2, xmm1
mulss xmm2, xmm10
divss xmm2, dword [0x18004ffa8]
mov rax, qword [0x180056690]
jb 0x180028322
add rax, 0x1c0
jmp 0x18002834a
movss xmm0, dword [0x18004ff78]
comiss xmm0, xmm1
jae 0x18002834a
movss xmm0, dword [0x18004ff9c]
comiss xmm0, xmm1
jb 0x180028344
add rax, 0xf0
jmp 0x18002834a
add rax, 0x3a0
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x30], xmm0
movaps xmm7, xmm11
subss xmm7, dword [0x18004ff40]
addss xmm9, xmm12
movaps xmm0, xmm10
mulss xmm0, dword [0x18004fe3c]
subss xmm9, xmm0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
movss xmm6, dword [0x18004ff38]
movaps xmm3, xmm6
movaps xmm1, xmm7
movaps xmm0, xmm9
call fcn.180005360
mov rax, qword [0x180056690]
movups xmm1, xmmword [rax + 0x1a0]
movaps xmmword [rbp - 0x30], xmm1
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x18004fe5c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm6
movaps xmm2, xmm10
movaps xmm1, xmm7
movaps xmm0, xmm9
call fcn.180005150
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], r12
mov byte [rbp - 0x80], bl
movups xmmword [rbp + 0x230], xmm0
movdqa xmm6, xmmword [0x180050020]
movdqu xmmword [rbp + 0x240], xmm6
mov byte [rbp + 0x230], 0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], r12
mov byte [rbp + 0x50], 0
movups xmmword [rbp + 0x250], xmm0
movdqu xmmword [rbp + 0x260], xmm6
mov byte [rbp + 0x250], 0
mov rcx, qword [0x1800566a0]
cmp byte [rcx + 8], 0
je 0x180028f3f
cmp byte [rcx + 3], 0
je 0x1800285d9
mov rcx, qword [r14]
mov ecx, dword [rcx]
call fcn.18001f7a0
test al, al
je 0x1800284f3
movups xmmword [rbp + 0x70], xmm0
movdqu xmmword [rbp + 0x80], xmm6
mov byte [rbp + 0x70], 0
mov dword [rbp + 0x3e0], 0x20000000
mov edx, 8
lea rcx, [rbp + 0x70]
call fcn.180006cd0
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rax, qword [rbp + 0x70]
nop
mov dword [rax], 0x52a484eb
nop
mov dword [rax + 4], 0xc57123b9
nop
xor byte [rax], 0xaa
xor byte [rax + 1], 0xcd
xor byte [rax + 2], 0x1f
xor byte [rax + 3], 0xa8
xor byte [rax + 4], 0x7f
xor byte [rax + 5], 0xd4
xor byte [rax + 6], 0xb9
xor byte [rax + 7], 0xe
mov byte [rax + 8], 0
mov esi, 0x10000000
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rdx, qword [rbp + 0x70]
mov r8, qword [rbp + 0x80]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rbp + 0x70]
call fcn.1800044f0
jmp 0x1800285d9
mov r8, qword [rbp + 0x150]
cmp r8, 6
jbe 0x1800285b9
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x80], rbx
mov byte [rbp + 0x70], 0
nop
mov byte [rbp + 0x70], 0
mov esi, 0x40000000
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8d, 6
cmp qword [rbp + 0x150], r8
cmovb r8, qword [rbp + 0x150]
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
lea rcx, [rbp - 0x10]
call fcn.180002c60
nop
lea r9, [rbp + 0x70]
lea r8, [rbp - 0x10]
lea rcx, [rsp + 0x60]
call fcn.180011b70
nop
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
lea rcx, [rbp - 0x10]
call fcn.1800044f0
nop
lea rcx, [rbp + 0x70]
call fcn.1800044f0
jmp 0x1800285d9
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
mov rax, qword [0x1800566a0]
cmp byte [rax + 0x11], 0
je 0x1800286f7
mov edx, dword [rbp + 0x190]
lea rcx, [rbp - 0x10]
call fcn.180010500
or esi, 4
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xd0], r12
mov byte [rbp + 0xb8], 0
or esi, 0x10
mov qword [rbp + 0xc8], 2
xor eax, eax
mov word [rbp + 0xb8], ax
mov byte [rbp + 0xba], al
lea rax, [rbp + 0xb8]
nop
mov word [rax], 0xb6bc
mov byte [rax + 2], 0
and esi, 0xffffffef
or esi, 8
lea r9, [rbp - 0x10]
lea r8, [rbp + 0xb8]
lea rcx, [rsp + 0x60]
call fcn.180011b70
or esi, 0x20
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x1800286cf
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800286ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800286ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002e234
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], r12
mov byte [rbp + 0xb8], 0
mov r8, qword [rbp + 8]
cmp r8, 0xf
jbe 0x1800286f7
mov rdx, qword [rbp - 0x10]
call fcn.180004760
cmp qword [rbp - 0x70], 0
je 0x1800287c7
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa8], r12
mov byte [rbp + 0x90], 0
bts esi, 7
mov qword [rbp + 0xa0], 1
xor eax, eax
mov word [rbp + 0x90], ax
lea rax, [rbp + 0x90]
nop
mov word [rax], 0x20
btr esi, 7
or esi, 0x40
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x1800287b2
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800287ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800287ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002e234
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], r12
mov byte [rbp + 0x90], 0
mov rax, qword [0x1800566a0]
cmp byte [rax + 0x10], 0
je 0x1800288e0
mov edx, dword [rbp + 0x184]
lea rcx, [rbp - 0x10]
call fcn.180010500
bts esi, 8
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xf0], r12
mov byte [rbp + 0xd8], 0
bts esi, 0xa
mov qword [rbp + 0xe8], 2
xor eax, eax
mov word [rbp + 0xd8], ax
mov byte [rbp + 0xda], al
lea rax, [rbp + 0xd8]
nop
mov word [rax], 0xd3b6
mov byte [rax + 2], 0
btr esi, 0xa
bts esi, 9
lea r9, [rbp - 0x10]
lea r8, [rbp + 0xd8]
lea rcx, [rsp + 0x60]
call fcn.180011b70
bts esi, 0xb
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x1800288c2
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800288bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800288bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002e234
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xf0], r12
mov byte [rbp + 0xd8], 0
lea rcx, [rbp - 0x10]
call fcn.1800044f0
cmp qword [rbp - 0x70], 0
je 0x1800289ef
lea rdx, [rbp + 0x270]
call fcn.18002b600
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180028906
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rbp + 0x270]
call fcn.1800044f0
mov r8, qword [rbp - 0x70]
test r8, r8
je 0x1800289ef
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x50]
call fcn.1800046e0
lea rdx, [rsp + 0x60]
call fcn.18002b5b0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18002895c
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.180004570
mov r8, qword [rbp - 0x70]
test r8, r8
je 0x1800289ef
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x50]
call fcn.1800046e0
lea rdx, [rsp + 0x60]
call fcn.18002b5b0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1800289c2
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.180004570
mov rax, qword [0x1800566a0]
cmp byte [rax + 5], 0
je 0x180028ae7
cvttss2si edx, dword [rbp + 0x3f0]
lea rcx, [rbp - 0x10]
call fcn.180010500
bts esi, 0xc
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
movdqu xmmword [rbp + 0x108], xmm6
mov byte [rbp + 0xf8], 0
bts esi, 0xe
mov dword [rbp + 0x3e0], esi
mov edx, 2
lea rcx, [rbp + 0xf8]
call fcn.180006cd0
lea rax, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rax, qword [rbp + 0xf8]
nop
mov word [rax], 0xe0be
mov byte [rax + 2], 0
btr esi, 0xe
bts esi, 0xd
lea r9, [rbp - 0x10]
lea r8, [rbp + 0xf8]
lea rcx, [rsp + 0x60]
call fcn.180011b70
bts esi, 0xf
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
mov r8, qword [rbp + 0x110]
cmp r8, 0xf
jbe 0x180028acf
mov rdx, qword [rbp + 0xf8]
call fcn.180004760
movdqu xmmword [rbp + 0x108], xmm6
mov byte [rbp + 0xf8], 0
lea rcx, [rbp - 0x10]
call fcn.1800044f0
cmp qword [rbp - 0x70], 0
je 0x180028b22
lea rdx, [rbp + 0x290]
call fcn.18002b600
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180028b09
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rbp + 0x290]
call fcn.1800044f0
mov rax, qword [0x1800566a0]
cmp byte [rax + 0xa], 0
je 0x180028c20
mov edx, dword [rbp + 0x188]
test edx, edx
jle 0x180028c20
lea rcx, [rbp - 0x10]
call fcn.180010500
bts esi, 0x15
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
movdqu xmmword [rbp + 0x128], xmm6
mov byte [rbp + 0x118], 0
bts esi, 0x17
mov dword [rbp + 0x3e0], esi
mov edx, 2
lea rcx, [rbp + 0x118]
call fcn.180006cd0
lea rax, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rax, qword [rbp + 0x118]
nop
mov word [rax], 0xb1c9
mov byte [rax + 2], 0
btr esi, 0x17
bts esi, 0x16
lea r9, [rbp - 0x10]
lea r8, [rbp + 0x118]
lea rcx, [rsp + 0x60]
call fcn.180011b70
bts esi, 0x14
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
mov r8, qword [rbp + 0x130]
cmp r8, 0xf
jbe 0x180028c08
mov rdx, qword [rbp + 0x118]
call fcn.180004760
movdqu xmmword [rbp + 0x128], xmm6
mov byte [rbp + 0x118], 0
lea rcx, [rbp - 0x10]
call fcn.1800044f0
cmp qword [rbp - 0x70], 0
je 0x180028c5b
lea rdx, [rbp + 0x2b0]
call fcn.18002b600
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180028c42
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rbp + 0x2b0]
call fcn.1800044f0
mov rax, qword [0x1800566a0]
cmp byte [rax + 0xb], 0
je 0x180028d35
mov edx, dword [rbp + 0x18c]
test edx, edx
jle 0x180028d35
lea rcx, [rbp + 0x30]
call fcn.180010500
bts esi, 0x10
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movdqu xmmword [rbp], xmm6
mov byte [rbp - 0x10], 0
bts esi, 0x12
mov dword [rbp + 0x3e0], esi
mov edx, 2
lea rcx, [rbp - 0x10]
call fcn.180006cd0
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rax, qword [rbp - 0x10]
nop
mov word [rax], 0xdbb9
mov byte [rax + 2], 0
btr esi, 0x12
bts esi, 0x11
lea r9, [rbp + 0x30]
lea r8, [rbp - 0x10]
lea rcx, [rsp + 0x60]
call fcn.180011b70
bts esi, 0x13
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
mov r8, qword [rbp + 8]
cmp r8, 0xf
jbe 0x180028d23
mov rdx, qword [rbp - 0x10]
call fcn.180004760
movdqu xmmword [rbp], xmm6
mov byte [rbp - 0x10], 0
lea rcx, [rbp + 0x30]
call fcn.1800044f0
cmp qword [rbp - 0x70], 0
je 0x180028d70
lea rdx, [rbp + 0x2d0]
call fcn.18002b600
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180028d57
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rbp + 0x2d0]
call fcn.1800044f0
mov rax, qword [0x1800566a0]
cmp byte [rax + 0xc], 0
je 0x180028e38
movss xmm0, dword [rbp + 0x180]
comiss xmm0, xmm8
jbe 0x180028e38
cvttss2si edx, xmm0
lea rcx, [rbp - 0x30]
call fcn.180010500
bts esi, 0x19
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
bts esi, 0x1b
mov dword [rbp + 0x3e0], esi
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.180006cd0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
nop
mov word [rax], 0xcbc9
mov byte [rax + 2], 0
lea r9, [rbp - 0x30]
lea r8, [rsp + 0x60]
lea rcx, [rbp + 0x30]
call fcn.180011b70
nop
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rdx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.1800046e0
nop
lea rcx, [rbp + 0x30]
call fcn.1800044f0
nop
lea rcx, [rsp + 0x60]
call fcn.1800044f0
nop
lea rcx, [rbp - 0x30]
call fcn.1800044f0
mov r8, qword [rbp - 0x70]
test r8, r8
je 0x180028f3f
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x50]
call fcn.1800046e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x48], r12
mov byte [rbp + 0x30], 0
mov qword [rbp + 0x40], 1
xor eax, eax
mov word [rbp + 0x30], ax
lea rax, [rbp + 0x30]
nop
mov word [rax], 0xa
mov rdi, qword [rbp + 0x40]
lea r9, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova r9, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x180028ed9
lea rax, [rsi + rdi]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x50]
lea rcx, [rbx + rsi]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov byte [rax + rsi], 0
xor ebx, ebx
jmp 0x180028eeb
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.180004aa0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x180028f29
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180028f24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180028f24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002e234
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.180004570
mov rax, qword [0x1800566a0]
cmp byte [rax + 0x33], 0
je 0x180028fb6
lea r9, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova r9, qword [rbp + 0x50]
mov rax, qword [0x180056690]
movups xmm0, xmmword [rax + 0x1a0]
movaps xmmword [rbp - 0x30], xmm0
mov edx, dword [rbp + 0x184]
lea rcx, [rbp + 0x30]
call fcn.1800236c0
movups xmm1, xmmword [rax]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmm11
addss xmm1, xmm15
addss xmm1, dword [0x18004ff18]
mov qword [rsp + 0x28], r9
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x30]
lea r8, [rbp + 0x20]
movd edx, xmm1
movaps xmm0, xmm13
movd ecx, xmm0
call fcn.180005630
cmp byte [0x180055ac8], 0
jne 0x1800290c0
mov rcx, qword [0x1800566a0]
cmp byte [rcx + 0x1a], 0
je 0x1800290c0
cvttss2si eax, dword [rbp + 0x3f0]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [rcx + 0x4c]
comiss xmm0, xmm1
jbe 0x1800290c0
cmp byte [rcx + 0x1c], 0
jne 0x18002900d
comiss xmm8, dword [rbp + 0x10]
jb 0x18002900d
movss xmm0, dword [rbp + 0x14]
comiss xmm0, xmm8
ja 0x1800290c0
mov rax, qword [0x1800566a0]
cvttss2si r8d, dword [rax + 0x44]
mov rcx, qword [0x180056698]
movss xmm7, dword [rcx + 0x28]
cvttss2si eax, xmm7
cvttss2si edx, xmm13
sub edx, eax
movss xmm0, dword [rcx + 0x2c]
cvttss2si eax, xmm0
cvttss2si ecx, xmm11
sub ecx, eax
imul ecx, ecx
imul edx, edx
add ecx, edx
imul r8d, r8d
cmp ecx, r8d
jg 0x1800290c0
subss xmm0, xmm11
movaps xmm1, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
subss xmm7, xmm13
movaps xmm1, xmm14
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x180029089
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x180029091
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov rax, qword [r14 + 0x20]
movss dword [rax], xmm0
mov rax, qword [r14 + 0x28]
movss xmm1, dword [rax]
ucomiss xmm1, xmm8
jp 0x1800290a9
je 0x1800290ae
comiss xmm1, xmm0
jbe 0x1800290c0
movss dword [rax], xmm0
mov rax, qword [r14 + 8]
mov rcx, qword [rax]
mov qword [0x180056468], rcx
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1800290fe
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800290f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800290f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002e234
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], r12
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x180029148
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180029143
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002e234
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], r12
mov byte [rbp - 0x80], 0
lea rcx, [rbp + 0x140]
call fcn.180009fc0
lea r11, [rsp + 0x498]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret