Function at 0x18013f700
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov dword [rax + 0x18], r8d
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x298
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
xor r12d, r12d
mov dword [rsp + 0x30], r12d
mov rdi, qword [0x18036aea0]
mov rcx, rdi
mov rdx, qword [0x18036ae98]
sub rcx, rdx
sar rcx, 5
lea r13, [0x18036ae98]
cmp rcx, 0xa
jbe 0x18013f79f
lea rsi, [rdx + 0x140]
mov rbx, rsi
cmp rsi, rdi
je 0x18013f796
mov rcx, rbx
call fcn.180008a30
add rbx, 0x20
cmp rbx, rdi
jne 0x18013f785
mov qword [0x18036aea0], rsi
jmp 0x18013f7d6
jae 0x18013f7d6
mov rax, qword [0x18036aea8]
sub rax, rdx
sar rax, 5
cmp rax, 0xa
jae 0x18013f7bc
call fcn.180144010
jmp 0x18013f7d6
mov edx, 0xa
sub rdx, rcx
mov r8, r13
mov rcx, rdi
call fcn.180144170
mov qword [0x18036aea0], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov r14, r12
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x48], r12
movdqu xmmword [rbp - 0x40], xmm0
mov r15, r12
mov qword [rsp + 0x58], r12
mov qword [rbp - 0x30], r12
movdqu xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r12
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
lea rcx, [rbp + 0xc0]
call fcn.18009f820
mov ecx, 3
call fcn.1800da920
lea esi, [rax - 1]
mov edi, r12d
test esi, esi
jle 0x18013f9bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
mov r8d, 0x14
lea rdx, str.pppppppppppppppppppp
lea rcx, [rsp + 0x38]
call fcn.180008f40
nop
mov rbx, qword [0x18036ae98]
mov r8, qword [0x18036aea0]
cmp r8, qword [0x18036aea8]
je 0x18013f952
xorps xmm0, xmm0
cmp rbx, r8
jne 0x18013f8bd
movups xmmword [r8], xmm0
mov qword [r8 + 0x10], r12
mov qword [r8 + 0x18], r12
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [r8], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [r8 + 0x10], xmm1
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
add qword [0x18036aea0], 0x20
jmp 0x18013f963
mov qword [rbp + 0x78], r13
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], r12
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rbp + 0x90], xmm1
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
lea rdx, [r8 - 0x20]
movups xmm0, xmmword [rdx]
movups xmmword [r8], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r8 + 0x10], xmm1
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], 0xf
mov byte [rdx], 0
add qword [0x18036aea0], 0x20
mov rcx, rbx
call fcn.1801441c0
lea rdx, [rbp + 0x80]
mov rcx, rbx
call fcn.180008760
nop
lea rcx, [rbp + 0x80]
call fcn.180008a30
jmp 0x18013f963
lea r8, [rsp + 0x38]
mov rdx, rbx
mov rcx, r13
call fcn.180073d50
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x18013f9a0
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18013f99b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013fce8
call fcn.1802990b4
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
inc edi
cmp edi, esi
jl 0x18013f831
mov r8d, 0xffffffff
mov dl, 1
lea rcx, [rbp - 0x28]
call fcn.180136ef0
nop
mov rdx, qword [rbp + 0x1e0]
cmp qword [rdx + 0x10], 2
jbe 0x180140ff3
mov rax, qword [rbp + 0x200]
mov ecx, dword [rax]
mov dword [rbp - 0x80], ecx
test ecx, ecx
jle 0x18013fd8b
mov eax, dword [rax + 4]
mov dword [rsp + 0x60], eax
test eax, eax
jle 0x18013fd8b
cmp dword [rbp + 0x208], 0
jle 0x18013fd8b
mov r13d, r12d
mov rdi, qword [rbp - 0x20]
mov rax, rdi
mov rbx, qword [rbp - 0x28]
sub rax, rbx
sar rax, 3
movabs rcx, 0xd37a6f4de9bd37a7
imul rax, rcx
test rax, rax
je 0x1801401cc
mov rsi, r12
movss xmm8, dword [rbp + 0xc4]
movss xmm9, dword [rbp + 0xc0]
movss xmm10, dword [0x18031f5a8]
movss xmm7, dword [0x18031f858]
mov r12, qword [rbp - 0x38]
mov r14, qword [rbp - 0x50]
nop dword [rax + rax]
cmp dword [rbx + rsi + 0x78], 1
jne 0x18013fd58
cmp dword [rbx + rsi + 0x1c], 0
jle 0x18013fd58
cmp qword [rbx + rsi + 0x38], 2
jbe 0x18013fd58
lea rcx, [rsi + 0x28]
add rcx, rbx
mov rax, qword [rdx + 0x10]
mov r9, rdx
cmp qword [rdx + 0x18], 0xf
jbe 0x18013faaa
mov r9, qword [rdx]
mov rdx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18013fab8
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rax
call fcn.18005cfa0
cmp rax, 0xffffffffffffffff
je 0x18013fd51
xor dil, dil
mov rdx, qword [rbx + rsi + 8]
lea rcx, [rbp - 0x10]
call fcn.180008650
nop
mov rdx, qword [rbp - 0x28]
mov edx, dword [rdx + rsi + 0x1c]
lea rcx, [rbp + 0x78]
call fcn.180047230
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18013fafe
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180008c70
nop
lea rcx, [rbp + 0x78]
call fcn.180008a30
mov rdx, qword [rbp - 0x28]
mov rdx, qword [rdx + rsi]
lea rcx, [rbp + 0xd8]
call fcn.180008650
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18013fb37
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180008c70
nop
lea rcx, [rbp + 0xd8]
call fcn.180008a30
mov rdx, qword [rbp - 0x28]
mov edx, dword [rdx + rsi + 0x90]
lea rcx, [rbp + 0xa0]
call fcn.180047230
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18013fb76
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180008c70
nop
lea rcx, [rbp + 0xa0]
call fcn.180008a30
mov rbx, qword [0x18036ae98]
mov r15, qword [0x18036aea0]
cmp rbx, r15
je 0x18013fc15
mov r14d, 1
nop dword [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.180008830
nop
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova r8, qword [rbp - 0x10]
lea rcx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0xf
cmova rcx, qword [rsp + 0x38]
mov r9, qword [rbp]
mov rdx, qword [rsp + 0x48]
call fcn.18005cf40
movzx edi, dil
test eax, eax
cmove edi, r14d
lea rcx, [rsp + 0x38]
call fcn.180008a30
add rbx, 0x20
cmp rbx, r15
jne 0x18013fbb0
test dil, dil
mov r14, qword [rbp - 0x50]
jne 0x18013fd40
mov rax, qword [rbp - 0x28]
mov ecx, dword [rbp + 0x1f8]
cmp dword [rax + rsi + 0x20], ecx
jl 0x18013fd40
movss xmm2, dword [rax + rsi + 0x10]
movaps xmm1, xmm2
subss xmm1, xmm9
mulss xmm1, xmm1
movss xmm3, dword [rax + rsi + 0x14]
movaps xmm0, xmm3
subss xmm0, xmm8
mulss xmm0, xmm0
xorps xmm4, xmm4
cvtsi2ss xmm4, r13d
mulss xmm4, xmm10
addss xmm0, xmm1
xorps xmm6, xmm6
sqrtss xmm6, xmm0
addss xmm6, xmm4
movss dword [rbp - 0x78], xmm6
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp + 0x1e8]
mulss xmm0, xmm7
comiss xmm6, xmm0
jae 0x18013fd40
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rsp + 0x60]
mulss xmm0, xmm7
subss xmm3, xmm0
mulss xmm3, xmm3
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm7
subss xmm2, xmm0
mulss xmm2, xmm2
addss xmm2, xmm3
xorps xmm1, xmm1
sqrtss xmm1, xmm2
addss xmm1, xmm4
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp + 0x208]
mulss xmm0, xmm7
comiss xmm1, xmm0
jae 0x18013fd40
cmp r14, qword [rsp + 0x70]
je 0x18013fcef
movss dword [r14], xmm6
add r14, 4
mov qword [rbp - 0x50], r14
jmp 0x18013fd0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rbp - 0x78]
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.18000c750
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x70], rax
mov r14, qword [rbp - 0x50]
cmp r12, qword [rsp + 0x58]
je 0x18013fd23
movss dword [r12], xmm6
add r12, 4
mov qword [rbp - 0x38], r12
jmp 0x18013fd40
lea r8, [rbp - 0x78]
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.18000c750
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x58], rax
mov r12, qword [rbp - 0x38]
lea rcx, [rbp - 0x10]
call fcn.180008a30
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x28]
mov rdx, qword [rbp + 0x1e0]
inc r13d
add rsi, 0xb8
mov rcx, rdi
sub rcx, rbx
sar rcx, 3
movabs rax, 0xd37a6f4de9bd37a7
imul rcx, rax
movsxd rax, r13d
cmp rax, rcx
jb 0x18013fa70
jmp 0x1801401d4
mov r14d, r12d
mov dword [rbp - 0x78], r12d
mov rdi, qword [rbp - 0x20]
mov rax, rdi
mov rbx, qword [rbp - 0x28]
sub rax, rbx
sar rax, 3
movabs rcx, 0xd37a6f4de9bd37a7
imul rax, rcx
test rax, rax
je 0x1801401cc
mov rsi, r12
mov qword [rbp - 0x80], r12
movss xmm7, dword [rbp + 0xc4]
movss xmm8, dword [rbp + 0xc0]
movss xmm9, dword [0x18031f5a8]
movss xmm10, dword [0x18031f858]
mov r12, qword [rbp - 0x38]
nop dword [rax]
cmp dword [rbx + rsi + 0x78], 1
jne 0x180140194
cmp dword [rbx + rsi + 0x1c], 0
jle 0x180140194
cmp qword [rbx + rsi + 0x38], 2
jbe 0x180140194
lea rcx, [rsi + 0x28]
add rcx, rbx
mov rax, qword [rdx + 0x10]
mov r9, rdx
cmp qword [rdx + 0x18], 0xf
jbe 0x18013fe2a
mov r9, qword [rdx]
mov rdx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18013fe38
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rax
call fcn.18005cfa0
cmp rax, 0xffffffffffffffff
je 0x18014018d
xor r13b, r13b
mov rdx, qword [rbx + rsi + 8]
lea rcx, [rbp - 0x10]
call fcn.180008650
nop
mov rdx, qword [rbp - 0x28]
mov edx, dword [rdx + rsi + 0x1c]
lea rcx, [rbp + 0x78]
call fcn.180047230
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18013fe7e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180008c70
nop
lea rcx, [rbp + 0x78]
call fcn.180008a30
mov rdx, qword [rbp - 0x28]
mov rdx, qword [rdx + rsi]
lea rcx, [rbp + 0xd8]
call fcn.180008650
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18013feb7
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180008c70
nop
lea rcx, [rbp + 0xd8]
call fcn.180008a30
mov rdx, qword [rbp - 0x28]
mov edx, dword [rdx + rsi + 0x90]
lea rcx, [rbp + 0xa0]
call fcn.180047230
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18013fef6
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180008c70
nop
lea rcx, [rbp + 0xa0]
call fcn.180008a30
mov rdi, qword [0x18036ae98]
mov rax, qword [0x18036aea0]
mov qword [rbp + 0x10], rax
cmp rdi, rax
je 0x180140067
xor eax, eax
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov rbx, qword [rdi + 0x10]
mov r15, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x18013ff53
mov r15, qword [rdi]
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
ja 0x180141114
cmp rbx, 0xf
ja 0x18013ff8b
mov qword [rsp + 0x48], rbx
mov esi, 0xf
mov qword [rsp + 0x50], rsi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x38], xmm0
movq r14, xmm0
jmp 0x18013ffe8
mov qword [rsp + 0x50], 0xf
mov rax, rbx
or rax, 0xf
cmp rax, rcx
jbe 0x18013ffa5
mov rax, rcx
jmp 0x18013ffb2
cmp rax, 0x16
mov ecx, 0x16
cmovb rax, rcx
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x60]
call fcn.180009600
mov r14, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], rbx
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x50], rsi
lea r8, [rbx + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova r8, qword [rbp - 0x10]
lea rcx, [rsp + 0x38]
cmp rsi, 0xf
cmova rcx, r14
mov r9, qword [rbp]
mov rdx, rbx
call fcn.18005cf40
movzx r13d, r13b
test eax, eax
mov eax, 1
cmove r13d, eax
cmp rsi, 0xf
jbe 0x18014002f
mov r8, rsi
mov rdx, r14
call fcn.180008cf0
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], al
add rdi, 0x20
cmp rdi, qword [rbp + 0x10]
jne 0x18013ff30
mov rsi, qword [rbp - 0x80]
test r13b, r13b
jne 0x180140173
mov r14d, dword [rbp - 0x78]
mov r15, qword [rsp + 0x58]
mov rax, qword [rbp - 0x28]
mov ecx, dword [rbp + 0x1f8]
cmp dword [rax + rsi + 0x20], ecx
jl 0x180140173
movss xmm1, dword [rax + rsi + 0x14]
subss xmm1, xmm7
mulss xmm1, xmm1
movss xmm0, dword [rax + rsi + 0x10]
subss xmm0, xmm8
mulss xmm0, xmm0
addss xmm0, xmm1
xorps xmm6, xmm6
sqrtss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, r14d
mulss xmm0, xmm9
addss xmm6, xmm0
movss dword [rsp + 0x60], xmm6
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp + 0x1e8]
mulss xmm0, xmm10
comiss xmm6, xmm0
jae 0x180140173
mov rax, qword [rbp - 0x50]
cmp rax, qword [rsp + 0x70]
je 0x1801400ec
movss dword [rax], xmm6
add rax, 4
mov qword [rbp - 0x50], rax
jmp 0x180140106
lea r8, [rsp + 0x60]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.18000c750
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x70], rax
cmp r12, r15
je 0x18014011b
movss dword [r12], xmm6
add r12, 4
mov qword [rbp - 0x38], r12
jmp 0x180140139
lea r8, [rsp + 0x60]
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.18000c750
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x58], rax
mov r12, qword [rbp - 0x38]
movsxd rax, r14d
imul r8, rax, 0xb8
add r8, qword [rbp - 0x28]
mov rax, qword [rbp + 0x68]
cmp rax, qword [rbp + 0x70]
je 0x180140166
mov rdx, r8
mov rcx, rax
call fcn.18004f800
add qword [rbp + 0x68], 0xb8
jmp 0x180140173
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.18005e2c0
nop
lea rcx, [rbp - 0x10]
call fcn.180008a30
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x28]
mov r14d, dword [rbp - 0x78]
mov r15, qword [rsp + 0x58]
mov rdx, qword [rbp + 0x1e0]
inc r14d
mov dword [rbp - 0x78], r14d
add rsi, 0xb8
mov qword [rbp - 0x80], rsi
mov rcx, rdi
sub rcx, rbx
sar rcx, 3
movabs rax, 0xd37a6f4de9bd37a7
imul rcx, rax
movsxd rax, r14d
cmp rax, rcx
jb 0x18013fdf0
jmp 0x1801401d0
mov r12, qword [rbp - 0x38]
mov r14, qword [rbp - 0x50]
mov r13, qword [rbp - 0x58]
mov r15, qword [rbp - 0x40]
mov rax, qword [rbp + 0x68]
cmp qword [rbp + 0x60], rax
je 0x180140296
mov rbx, r14
sub rbx, r13
sar rbx, 2
mov qword [rbp + 0x10], rbx
xor r9d, r9d
mov r8, rbx
mov rdx, r14
mov rcx, r13
call fcn.1801443f0
xor r14d, r14d
test rbx, rbx
je 0x1801402ef
sub r12, r15
sar r12, 2
mov rsi, r13
mov rcx, qword [rbp - 0x68]
xor edi, edi
test r12, r12
je 0x180140285
xor eax, eax
mov rbx, r15
nop
movss xmm0, dword [rbx]
ucomiss xmm0, dword [rsi]
jne 0x180140273
imul r8, rax, 0xb8
add r8, qword [rbp + 0x60]
cmp rcx, qword [rbp - 0x60]
je 0x180140263
mov rdx, r8
call fcn.18004f800
mov rcx, qword [rbp - 0x68]
add rcx, 0xb8
mov qword [rbp - 0x68], rcx
jmp 0x180140273
mov rdx, rcx
lea rcx, [rbp - 0x70]
call fcn.18005e2c0
mov rcx, qword [rbp - 0x68]
inc edi
add rbx, 4
movsxd rax, edi
cmp rax, r12
jb 0x180140230
mov rbx, qword [rbp + 0x10]
inc r14d
add rsi, 4
movsxd rax, r14d
cmp rax, rbx
jb 0x180140223
jmp 0x1801402f3
lea rdx, str.Clear_NPCs_marks
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x18036ae98]
mov rdi, qword [0x18036aea0]
cmp rbx, rdi
je 0x1801402ef
nop dword [rax]
mov rcx, rbx
call fcn.180008a30
add rbx, 0x20
cmp rbx, rdi
jne 0x1801402d0
mov rbx, qword [0x18036ae98]
mov qword [0x18036aea0], rbx
mov rcx, qword [rbp - 0x68]
mov rax, qword [rbp - 0x70]
cmp rax, rcx
je 0x180140ffd
mov r14d, dword [rbp + 0x210]
cmp r14d, 3
jne 0x1801403f9
lea rcx, [rbp - 0x28]
call fcn.18005b090
nop
lea rcx, [rbp - 0x70]
call fcn.18005b090
nop
lea rcx, [rbp + 0x60]
call fcn.18005b090
nop
test r15, r15
je 0x180140385
mov rax, qword [rsp + 0x58]
sub rax, r15
sar rax, 2
lea rdx, [rax*4]
mov rax, r15
cmp rdx, 0x1000
jb 0x18014036d
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18014105d
mov rcx, r15
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
xor ebx, ebx
mov qword [rbp - 0x30], rbx
jmp 0x180140387
xor ebx, ebx
test r13, r13
je 0x1801403d9
mov rax, qword [rsp + 0x70]
sub rax, r13
sar rax, 2
lea rdx, [rax*4]
mov rax, r13
cmp rdx, 0x1000
jb 0x1801403c5
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801410ad
mov rcx, r13
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rbx
mov rcx, qword [rbp + 0x1e0]
call fcn.180008a30
nop
mov rcx, qword [rbp + 0x218]
call fcn.180008a30
mov al, 1
jmp 0x1801410e3
xor r12d, r12d
sub rcx, rax
sar rcx, 3
movabs rax, 0xd37a6f4de9bd37a7
imul rcx, rax
test rcx, rcx
je 0x180141000
mov r15d, r12d
lea rbx, [0x18036b440]
movabs rdi, 0x431bde82d7b634db
mov r13d, r12d
mov ecx, 0x64
call fcn.1800da920
cmp eax, 0x60
mov ecx, 0x12c
jg 0x18014044a
mov ecx, 0x32
call fcn.1800da920
lea ecx, [rax + 0x5a]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp - 0x70]
movsxd rdx, dword [0x18035f1e8]
add rdx, qword [r15 + rax + 8]
mov dword [rsp + 0x60], r12d
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rsp + 0x60]
mov rcx, qword [0x18036b180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x1801404a3
mov rax, qword gs:[0x30]
cmp dword [rax + 0x1250], 0
mov ecx, r12d
jne 0x1801404a7
mov ecx, dword [rsp + 0x60]
mov rax, qword [rbp - 0x70]
cmp dword [r15 + rax + 0x84], ecx
je 0x1801409d1
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.1800dbdc0
mov ecx, eax
imul rax, rcx, 0xfa0
cmp eax, 0xcdf
ja 0x1801404fa
nop dword [rax + rax]
lea rcx, [rsp + 0x70]
call fcn.1800dbdc0
mov ecx, eax
imul rax, rcx, 0xfa0
cmp eax, 0xce0
jb 0x1801404e0
shr rax, 0x20
lea r12d, [rax + 1]
lea rcx, [rbp + 0x108]
call fcn.1800098f0
mov rcx, rax
mov rax, rdi
imul qword [rcx]
mov rsi, rdx
sar rsi, 0x12
mov rax, rsi
shr rax, 0x3f
add rsi, rax
mov byte [0x18036b1db], 0
mov rbx, qword [rbp - 0x70]
mov ecx, 0x38
call fcn.180298d00
mov rdi, rax
mov qword [rbp + 0x110], rax
mov rcx, qword [r15 + rbx]
mov qword [rax], rcx
mov dword [rax + 8], r14d
lea rcx, [rax + 0x10]
mov qword [rbp + 0xc0], rcx
mov rdx, qword [rbp + 0x218]
call fcn.180008830
nop
mov qword [rbp + 0x10], rdi
mov r14d, dword [rsp + 0x30]
or r14d, 0x10
mov dword [rsp + 0x30], r14d
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1801446f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x180140fe1
xor edi, edi
mov qword [rbp + 0x10], rdi
and r14d, 0xffffffef
mov dword [rsp + 0x30], r14d
mov rbx, qword [rbp - 0x70]
lea ecx, [rdi + 0x20]
call fcn.180298d00
mov rcx, qword [r15 + rbx + 8]
mov qword [rax], rcx
mov rcx, qword [r15 + rbx]
mov qword [rax + 8], rcx
mov ecx, dword [r15 + rbx + 0x84]
mov dword [rax + 0x10], ecx
mov qword [rbp - 0x80], rax
or r14d, 8
mov dword [rsp + 0x30], r14d
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1801447b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x180140fd2
mov qword [rbp - 0x80], rdi
and r14d, 0xfffffff7
mov dword [rsp + 0x30], r14d
mov rbx, qword [rbp - 0x70]
lea ecx, [rdi + 0x20]
call fcn.180298d00
mov rcx, qword [r15 + rbx + 8]
mov qword [rax], rcx
mov ecx, dword [rbp + 0x1f0]
mov dword [rax + 8], ecx
mov rcx, qword [r15 + rbx]
mov qword [rax + 0x10], rcx
mov qword [rbp - 0x78], rax
or r14d, 4
mov dword [rsp + 0x30], r14d
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1801447f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x180140fc3
mov qword [rbp - 0x78], rdi
and r14d, 0xfffffffb
mov dword [rsp + 0x30], r14d
mov rbx, qword [rbp - 0x70]
lea ecx, [rdi + 0x10]
call fcn.180298d00
mov rcx, qword [r15 + rbx + 8]
mov qword [rax], rcx
mov qword [rbp + 0xf8], rax
or r14d, 2
mov dword [rsp + 0x30], r14d
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x180144830]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x180140fb4
mov qword [rbp + 0xf8], rdi
and r14d, 0xfffffffd
mov dword [rsp + 0x30], r14d
lea ecx, [rdi + 0x18]
call fcn.180298d00
mov qword [rax], r12
mov qword [rax + 8], rsi
mov qword [rbp + 0x100], rax
or r14d, 1
mov dword [rsp + 0x30], r14d
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x180144870]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x180140fa4
mov qword [rbp + 0x100], r12
and r14d, 0xfffffffe
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x58]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [rsp + 0x58]
mov dword [0x18036b2d8], eax
mov eax, dword [rsp + 0x5c]
mov dword [0x18036b2dc], eax
cmp dword [rbp + 0xa8], r12d
je 0x1801407c9
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0xa8], eax
je 0x180140a21
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rsp + 0x70], xmm0
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x180140a15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
jmp 0x1801407ec
lea rdx, str.thread_error1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x58], 0
je 0x18014082a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x58], eax
je 0x180140a21
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x180140a15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
jmp 0x18014084d
lea rdx, str.thread_error2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x48], 0
je 0x18014088b
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x48], eax
je 0x180140a21
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x180140a15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
jmp 0x1801408ae
lea rdx, str.thread_error3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x38], 0
je 0x1801408ec
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x38], eax
je 0x180140a21
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x70], xmm0
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x180140a15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
jmp 0x18014090f
lea rdx, str.thread_error4
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x28], 0
je 0x18014094d
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x28], eax
je 0x180140a21
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x70], xmm0
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x180140a15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
jmp 0x180140970
lea rdx, str.thread_error5
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp byte [0x18036b1e0], 0
jne 0x180140a50
mov byte [0x18036b1db], 0
cmp dword [rbp + 0x28], 0
jne 0x180140a49
cmp dword [rbp + 0x38], 0
jne 0x180140a42
cmp dword [rbp + 0x48], 0
jne 0x180140a3b
cmp dword [rbp + 0x58], 0
jne 0x180140a34
cmp dword [rbp + 0xa8], 0
jne 0x180140a2d
mov rax, qword [rbp - 0x70]
mov r14d, dword [rbp + 0x210]
lea rbx, [0x18036b440]
movabs rdi, 0x431bde82d7b634db
inc r13d
add r15, 0xb8
mov rcx, qword [rbp - 0x68]
sub rcx, rax
sar rcx, 3
movabs rax, 0xd37a6f4de9bd37a7
imul rcx, rax
movsxd rax, r13d
cmp rax, rcx
jb 0x180140431
mov r14, qword [rbp - 0x48]
mov r13, qword [rbp - 0x58]
mov rbx, qword [rbp - 0x30]
mov r15, qword [rbp - 0x40]
jmp 0x18014100a
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
movsxd rax, r13d
imul rbx, rax, 0xb8
mov rdx, qword [rbp - 0x70]
mov rdx, qword [rdx + rbx + 8]
lea rcx, [rsp + 0x38]
call fcn.180008650
nop
mov rdx, qword [rbp - 0x70]
mov edx, dword [rdx + rbx + 0x1c]
lea rcx, [rbp + 0xd8]
call fcn.180047230
mov r9, rax
mov rdi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180140a93
mov r9, qword [rax]
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x180140ad9
lea rax, [rsi + rdi]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x38]
lea rcx, [rsi + rbx]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rsi]
mov byte [rax + rbx], 0
jmp 0x180140aec
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.180009050
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x180140b30
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180140b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180140b2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1802990b4
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], 0
movsxd rax, r13d
imul rcx, rax, 0xb8
mov rax, qword [rbp - 0x70]
mov r8, qword [rcx + rax]
lea r9, [rbp + 0xd5]
movabs r10, 0xcccccccccccccccd
nop dword [rax]
dec r9
mov rax, r10
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x180140b70
lea r8, [rbp + 0xd5]
mov rdx, r9
lea rcx, [rbp - 0x10]
call fcn.1800094c0
bts r14d, 8
mov dword [rsp + 0x30], r14d
btr r14d, 8
mov dword [rsp + 0x30], r14d
bts r14d, 7
mov dword [rsp + 0x30], r14d
mov rdi, qword [rbp]
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova r9, qword [rbp - 0x10]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180140c21
lea rax, [rcx + rdi]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x38]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x180140c33
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.180009050
btr r14d, 7
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x180140c7b
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180140c76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180140c76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1802990b4
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
movsxd rax, r13d
imul rdx, rax, 0xb8
add rdx, qword [rbp - 0x70]
mov edx, dword [rdx + 0x90]
lea rcx, [rbp + 0x78]
call fcn.180047230
mov r9, rax
mov rdi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180140cb9
mov r9, qword [rax]
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x180140cff
lea rax, [rdi + rsi]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x38]
lea rcx, [rbx + rsi]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov byte [rax + rsi], 0
jmp 0x180140d12
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.180009050
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x180140d53
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180140d4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180140d4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1802990b4
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], 0
mov rdi, qword [0x18036ae98]
mov rbx, qword [0x18036aea0]
cmp rbx, qword [0x18036aea8]
je 0x180140e10
lea rdx, [rsp + 0x38]
cmp rdi, rbx
jne 0x180140da3
mov rcx, rbx
call fcn.180008830
add qword [0x18036aea0], 0x20
jmp 0x180140e25
lea rcx, [0x18036ae98]
mov qword [rbp + 0x118], rcx
lea rcx, [rbp + 0x120]
call fcn.180008830
nop
lea rdx, [rbx - 0x20]
movups xmm0, xmmword [rdx]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], 0xf
mov byte [rdx], 0
add qword [0x18036aea0], 0x20
mov r8, rbx
mov rcx, rdi
call fcn.1801441c0
lea rdx, [rbp + 0x120]
mov rcx, rdi
call fcn.180008760
nop
lea rcx, [rbp + 0x120]
call fcn.180008a30
jmp 0x180140e25
lea r8, [rsp + 0x38]
mov rdx, rdi
lea rcx, [0x18036ae98]
call fcn.180065480
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180140e65
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180140e60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180140e60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1802990b4
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
cmp dword [rbp + 0x28], 0
je 0x180140e85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x38], 0
je 0x180140e92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x48], 0
je 0x180140e9f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x58], 0
je 0x180140eac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0xa8], 0
je 0x180140ebc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
lea rcx, [rbp - 0x28]
call fcn.18005b090
nop
lea rcx, [rbp - 0x70]
call fcn.18005b090
nop
lea rcx, [rbp + 0x60]
call fcn.18005b090
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x180140f2f
mov rax, qword [rbp - 0x30]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180140f1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180140f1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x180140f84
mov rax, qword [rbp - 0x48]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180140f73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180140f73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r12
mov rcx, qword [rbp + 0x1e0]
call fcn.180008a30
nop
mov rcx, qword [rbp + 0x218]
call fcn.180008a30
mov al, 1
jmp 0x1801410e3
mov dword [rbp + 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x38], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xa8], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov r13, qword [rbp - 0x58]
mov r15, qword [rbp - 0x40]
jmp 0x180141005
xor r12d, r12d
mov r14, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
lea rcx, [rbp - 0x28]
call fcn.18005b090
nop
lea rcx, [rbp - 0x70]
call fcn.18005b090
nop
lea rcx, [rbp + 0x60]
call fcn.18005b090
nop
test r15, r15
je 0x180141078
sub rbx, r15
sar rbx, 2
lea rdx, [rbx*4]
mov rax, r15
cmp rdx, 0x1000
jb 0x180141064
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180141064
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
test r13, r13
je 0x1801410c8
sub r14, r13
sar r14, 2
lea rdx, [r14*4]
mov rax, r13
cmp rdx, 0x1000
jb 0x1801410b4
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801410b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r12
mov rcx, qword [rbp + 0x1e0]
call fcn.180008a30
nop
mov rcx, qword [rbp + 0x218]
call fcn.180008a30
xor al, al
lea r11, [rsp + 0x298]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180008630
nop
int3