Function at 0x180006c70
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x398]
sub rsp, 0x470
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x180060010]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x258], xmm0
mov qword [rbp + 0x268], 6
mov qword [rbp + 0x270], 0xf
mov eax, dword [str.Weapon]
mov dword [rbp + 0x258], eax
movzx eax, word [0x180050bd4]
mov word [rbp + 0x25c], ax
mov byte [rbp + 0x25e], 0
movabs rsi, 0xffffff8000000000
movabs r15, 0xffffffff00000000
movabs r14, 0xffffff7fffffffff
xor r13d, r13d
mov rcx, qword [0x180087338]
test rcx, rcx
je 0x180006f0b
mov ebx, r13d
mov rdx, qword [0x180087328]
add rcx, 0x9a8
add rdx, rcx
mov qword [rbp + 0x230], r13
mov byte [rsp + 0x20], bl
lea r9d, [r13 + 8]
lea r8, [rbp + 0x230]
mov rcx, qword [0x180087398]
call fcn.180001550
mov rdx, qword [rbp + 0x230]
test rdx, rdx
je 0x180006f0b
mov rcx, rdx
and rcx, r15
lea rax, [rcx + rsi]
mov r10, qword [0x180087398]
test r14, rax
jne 0x180006dc7
mov rbx, qword [r10 + 0x18]
lea rax, [rcx + rsi]
test r14, rax
jne 0x180006dc7
and edx, 0xffffff
mov rdi, r13
mov qword [rbp + 0x228], r13
add rdx, 0x248
add rdx, rbx
mov byte [rsp + 0x20], dil
mov r9d, 8
lea r8, [rbp + 0x228]
mov rcx, r10
call fcn.180001550
mov rdx, qword [rbp + 0x228]
test rdx, rdx
je 0x180006f0b
mov rcx, rdx
and rcx, r15
lea rax, [rcx + rsi]
mov r10, qword [0x180087398]
test r14, rax
jne 0x180006e2e
mov rdi, qword [r10 + 0x18]
lea rax, [rcx + rsi]
test r14, rax
jne 0x180006e2e
and edx, 0xffffff
mov dword [rbp + 0x224], r13d
add rdx, 0x18
add rdx, rdi
mov byte [rsp + 0x20], r13b
mov r9d, 4
lea r8, [rbp + 0x224]
mov rcx, r10
call fcn.180001550
mov edx, dword [rbp + 0x224]
lea rcx, [rbp - 0x40]
call fcn.1800023b0
nop
cmp qword [rax + 0x18], 0x10
jb 0x180006e70
mov rax, qword [rax]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180006e77
mov rcx, qword [rbp + 0x270]
cmp rdi, rcx
ja 0x180006eba
lea rbx, [rbp + 0x258]
cmp rcx, 0x10
cmovae rbx, qword [rbp + 0x258]
mov qword [rbp + 0x268], rdi
mov r8, rdi
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x180006ecd
mov r9, rax
mov rdx, rdi
lea rcx, [rbp + 0x258]
call fcn.18000ac90
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x180006f0b
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006f06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006f06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004d1f0
lea rdx, [rbp + 0x258]
lea rcx, [rbp - 0x40]
call fcn.18000a490
mov rcx, rax
call fcn.1800026b0
movzx esi, al
mov byte [rsp + 0x68], al
mov rcx, qword [0x180087388]
mov rcx, qword [rcx + 0x48c8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.180010d90
mov r15, rax
mov qword [rsp + 0x70], rax
mov rdx, qword [0x180087360]
mov rcx, qword [0x180087330]
add rcx, 0x1ff0
add rdx, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 0
mov byte [rsp + 0x20], 0
mov r9d, 0x1c
lea r8, [rbp - 0x40]
mov rcx, qword [0x180087398]
call fcn.180001550
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [0x1800873d8], xmm0
movss xmm0, dword [rbp - 0x30]
movss dword [0x1800873e8], xmm0
movss xmm1, dword [rbp - 0x2c]
movss dword [0x1800873ec], xmm1
movss xmm0, dword [rbp - 0x28]
movss dword [0x1800873f0], xmm0
mov ecx, dword [0x180087304]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x180087488], ecx
jle 0x180007027
lea rcx, [0x180087488]
call fcn.18004cdbc
cmp dword [0x180087488], 0xffffffff
jne 0x180007027
xorps xmm0, xmm0
movdqu xmmword [0x180087440], xmm0
mov qword [0x180087450], r13
lea rcx, [0x18004e720]
call fcn.18004d1d8
lea rcx, [0x180087488]
call fcn.18004cd50
mov rcx, qword [0x1800873c0]
sub rcx, qword [0x1800873b8]
movabs rbx, 0xe38e38e38e38e39
mov rax, rbx
imul rcx
sar rdx, 3
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, qword [0x1800873b8]
lea rcx, [0x180087440]
call fcn.18000a960
movss xmm9, dword [0x180057c70]
movaps xmm12, xmm9
movss dword [rbp - 0x70], xmm9
mov r14d, 0x53a
mov dword [rbp - 0x6c], r14d
mov edx, 0xbd
mov r12d, 2
cmp byte [0x18008736b], 0
je 0x180007133
mov eax, dword [0x1800600a4]
cmp eax, 1
jne 0x1800070ab
mov ecx, r12d
jmp 0x180007114
cmp eax, r12d
jne 0x1800070b7
mov ecx, 6
jmp 0x180007114
cmp eax, 3
jne 0x1800070c1
lea ecx, [rax + 2]
jmp 0x180007114
cmp eax, 4
jne 0x1800070cb
lea ecx, [rax + 0xc]
jmp 0x180007114
cmp eax, 5
jne 0x1800070d5
lea ecx, [rax + 0xd]
jmp 0x180007114
cmp eax, 6
jne 0x1800070df
lea ecx, [rax + 0xb]
jmp 0x180007114
cmp eax, 7
jne 0x1800070e9
lea ecx, [rax + 0xd]
jmp 0x180007114
cmp eax, 8
jne 0x1800070f3
lea ecx, [rax + 1]
jmp 0x180007114
cmp eax, 9
jne 0x1800070fd
lea ecx, [rax + 4]
jmp 0x180007114
cmp eax, 0xa
jne 0x180007109
mov ecx, 0xbb
jmp 0x180007114
mov ecx, 1
cmp eax, 0xb
cmove ecx, edx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov edx, 0xbd
test al, 1
je 0x180007143
cmp byte [0x180060034], 0
sete byte [0x180060034]
jmp 0x180007143
cmp byte [0x180060034], 0
jne 0x180007143
mov byte [0x180060034], 1
mov dil, 1
mov dword [rbp + 0x224], edi
cmp byte [0x180087368], 0
je 0x1800071e9
mov eax, dword [0x1800600e0]
cmp eax, 1
jne 0x180007169
mov ecx, r12d
jmp 0x1800071d2
cmp eax, r12d
jne 0x180007175
mov ecx, 6
jmp 0x1800071d2
cmp eax, 3
jne 0x18000717f
lea ecx, [rax + 2]
jmp 0x1800071d2
cmp eax, 4
jne 0x180007189
lea ecx, [rax + 0xc]
jmp 0x1800071d2
cmp eax, 5
jne 0x180007193
lea ecx, [rax + 0xd]
jmp 0x1800071d2
cmp eax, 6
jne 0x18000719d
lea ecx, [rax + 0xb]
jmp 0x1800071d2
cmp eax, 7
jne 0x1800071a7
lea ecx, [rax + 0xd]
jmp 0x1800071d2
cmp eax, 8
jne 0x1800071b1
lea ecx, [rax + 1]
jmp 0x1800071d2
cmp eax, 9
jne 0x1800071bb
lea ecx, [rax + 4]
jmp 0x1800071d2
cmp eax, 0xa
jne 0x1800071c7
mov ecx, 0xbb
jmp 0x1800071d2
mov ecx, 1
cmp eax, 0xb
cmove ecx, edx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, dil
test ax, ax
cmove edi, r13d
mov dword [rbp + 0x224], edi
mov dword [rbp - 0x50], r13d
mov rcx, qword [0x180087448]
sub rcx, qword [0x180087440]
mov rax, rbx
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
movss xmm8, dword [0x180057b48]
add rdx, rax
xorps xmm15, xmm15
je 0x18000814c
xor r14d, r14d
mov esi, r14d
mov qword [rbp + 0x230], r14
movss xmm11, dword [0x180057b80]
movss xmm10, dword [0x180057c38]
mov rcx, qword [0x180087440]
mov rax, qword [rcx + rsi]
mov qword [rbp + 0x100], rax
mov rax, qword [rcx + rsi + 8]
mov qword [rbp + 0x108], rax
mov rax, qword [rcx + rsi + 0x10]
mov qword [rbp + 0x110], rax
mov rax, qword [rcx + rsi + 0x18]
mov qword [rbp + 0x118], rax
mov rax, qword [rcx + rsi + 0x20]
mov qword [rbp + 0x120], rax
mov rax, qword [rcx + rsi + 0x28]
mov qword [rbp + 0x128], rax
mov rax, qword [rcx + rsi + 0x30]
mov qword [rbp + 0x130], rax
mov rax, qword [rcx + rsi + 0x38]
mov qword [rbp + 0x138], rax
mov rax, qword [rcx + rsi + 0x40]
mov qword [rbp + 0x140], rax
mov rax, qword [rcx + rsi + 0x48]
mov qword [rbp + 0x148], rax
mov rax, qword [rcx + rsi + 0x50]
mov qword [rbp + 0x150], rax
mov rax, qword [rcx + rsi + 0x58]
mov qword [rbp + 0x158], rax
mov rax, qword [rcx + rsi + 0x60]
mov qword [rbp + 0x160], rax
mov rax, qword [rcx + rsi + 0x68]
mov qword [rbp + 0x168], rax
lea rdx, [rcx + 0x70]
add rdx, rsi
lea rcx, [rbp + 0x170]
call fcn.18000a490
nop
mov rdx, qword [rbp + 0x110]
mov rax, qword [rbp + 0x148]
add rax, 0x250
add rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm0
mov byte [rsp + 0x20], 0
mov r9d, 0x30
lea r8, [rbp + 0x30]
mov rcx, qword [0x180087398]
call fcn.180001550
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x30]
call fcn.1800017f0
mov qword [rbp - 0x48], 0
movaps xmm6, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0x30], xmm6
movaps xmm7, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x40], xmm7
movaps xmm8, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x50], xmm8
movaps xmm9, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x60], xmm9
mov dword [rsp + 0x20], 8
mov r9, qword [rbp + 0x158]
mov r8, qword [rbp + 0x120]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xb0]
call fcn.180002200
movsd xmm0, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm0
mov eax, dword [rbp + 0xb8]
mov dword [rbp + 0xa8], eax
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0xa0]
call fcn.1800019d0
test al, al
jne 0x18000742f
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1800080e8
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007425
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008274
call fcn.18004d1f0
jmp 0x1800080e8
mov qword [rbp + 0x228], 0
movaps xmmword [rbp + 0xc0], xmm6
movaps xmmword [rbp + 0xd0], xmm7
movaps xmmword [rbp + 0xe0], xmm8
movaps xmmword [rbp + 0xf0], xmm9
mov dword [rsp + 0x20], r14d
mov r9, qword [rbp + 0x158]
mov r8, qword [rbp + 0x120]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x20]
call fcn.180002200
movsd xmm0, qword [rbp - 0x20]
movsd qword [rbp - 0x60], xmm0
mov ebx, dword [rbp - 0x18]
mov dword [rbp - 0x58], ebx
lea rdx, [rbp + 0x228]
lea rcx, [rbp - 0x60]
call fcn.1800019d0
test al, al
jne 0x1800074e9
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1800080de
inc rdx
mov rcx, qword [rbp + 0x170]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1800074df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008274
call fcn.18004d1f0
jmp 0x1800080de
mov rdx, qword [rbp + 0x100]
mov rax, qword [rbp + 0x138]
add rax, 0x100
add rdx, rax
mov byte [rbp + 0x221], 0
mov byte [rsp + 0x20], 0
mov r9d, 1
lea r8, [rbp + 0x221]
mov rcx, qword [0x180087398]
call fcn.180001550
movzx edi, byte [rbp + 0x221]
mov rdx, qword [rbp + 0x128]
mov rax, qword [rbp + 0x160]
add rax, 0x1b0
add rdx, rax
mov dword [rbp + 0x254], 0
mov byte [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x254]
mov rcx, qword [0x180087398]
call fcn.180001550
movss xmm9, dword [rbp + 0x254]
comiss xmm15, xmm9
jae 0x18000749f
movaps xmm7, xmmword [0x180057df0]
movups xmmword [rbp - 0x80], xmm7
mov rdx, qword [rbp + 0x110]
mov rax, qword [rbp + 0x148]
add rax, 0x380
add rdx, rax
mov dword [rbp + 0x240], 0
mov byte [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x240]
mov rcx, qword [0x180087398]
call fcn.180001550
mov rdx, qword [rbp + 0x110]
mov rax, qword [rbp + 0x148]
add rax, 0x384
add rdx, rax
mov dword [rbp + 0x238], 0
mov byte [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x238]
mov rcx, qword [0x180087398]
call fcn.180001550
movss xmm0, dword [rbp - 0x20]
subss xmm0, dword [0x1800873d8]
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movss xmm0, dword [rbp - 0x1c]
subss xmm0, dword [0x1800873dc]
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movd xmm0, ebx
subss xmm0, dword [0x1800873e0]
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x180007666
xorps xmm15, xmm15
sqrtss xmm15, xmm6
jmp 0x180007672
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm15, xmm0
mulss xmm15, dword [0x180057ad8]
movsd xmm6, qword [0x180087358]
cvtpd2ps xmm6, xmm6
movsd xmm1, qword [0x180087340]
cvtpd2ps xmm1, xmm1
movss xmm0, dword [rbp - 0x48]
subss xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm8, xmm0
movss xmm13, dword [rbp - 0x44]
movaps xmm0, xmm13
subss xmm0, xmm6
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm8
ja 0x1800076d8
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x1800076e1
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
jbe 0x1800076f3
movss dword [rbp - 0x70], xmm0
mov dword [rbp - 0x6c], r13d
xor r14d, r14d
xorps xmm6, xmm6
test dil, dil
je 0x180007966
xorps xmm8, xmm8
mov rdx, qword [rbp + 0x128]
mov rax, qword [rbp + 0x160]
add rax, 0x198
add rdx, rax
mov qword [rbp + 0x278], r14
mov byte [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x278]
mov rcx, qword [0x180087398]
call fcn.180001550
mov rsi, qword [rbp + 0x278]
test rsi, rsi
je 0x180007904
mov rdx, qword [rbp + 0x128]
mov rax, qword [rbp + 0x160]
add rax, 0x1a0
add rdx, rax
mov dword [rbp + 0x250], r14d
mov byte [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x250]
mov rcx, qword [0x180087398]
call fcn.180001550
mov eax, dword [rbp + 0x250]
cmp eax, 1
jl 0x180007904
mov r14d, eax
xor r12d, r12d
movabs r15, 0xffffff8000000000
movabs r13, 0xffffff7fffffffff
mov qword [rbp + 0x280], r12
mov byte [rsp + 0x20], r12b
mov r9d, 8
lea r8, [rbp + 0x280]
mov rdx, rsi
mov rcx, qword [0x180087398]
call fcn.180001550
mov rbx, qword [rbp + 0x280]
test rbx, rbx
je 0x18000788e
mov rdi, r12
mov rcx, rbx
movabs rax, 0xffffffff00000000
and rcx, rax
lea rax, [rcx + r15]
mov r10, qword [0x180087398]
test r13, rax
jne 0x180007822
mov rdi, qword [r10 + 0x18]
lea rax, [rcx + r15]
test r13, rax
jne 0x180007822
and ebx, 0xffffff
mov byte [rbp + 0x220], r12b
lea rdx, [rbx + 0x128]
add rdx, rdi
mov byte [rsp + 0x20], r12b
mov r9d, 1
lea r8, [rbp + 0x220]
mov rcx, r10
call fcn.180001550
cmp byte [rbp + 0x220], 1
jne 0x18000788e
mov dword [rbp + 0x24c], r12d
lea rdx, [rbx + 0x134]
add rdx, rdi
mov byte [rsp + 0x20], r12b
mov r9d, 4
lea r8, [rbp + 0x24c]
mov rcx, qword [0x180087398]
call fcn.180001550
movss xmm8, dword [rbp + 0x24c]
add rsi, 8
sub r14, 1
jne 0x1800077b4
mov r15, qword [rsp + 0x70]
lea r12d, [r14 + 2]
mov r13d, dword [rbp - 0x50]
ucomiss xmm8, xmm6
jp 0x1800078b1
je 0x180007904
divss xmm8, dword [0x180057c14]
mulss xmm8, xmm10
movaps xmm11, xmm6
movaps xmm9, xmm10
subss xmm9, xmm8
divss xmm9, xmm10
divss xmm8, xmm10
movups xmm7, xmmword [rbp - 0x80]
movss xmm7, xmm6
shufps xmm7, xmm7, 0xe1
movss xmm7, xmm9
shufps xmm7, xmm7, 0xc6
movss xmm7, xmm8
shufps xmm7, xmm7, 0xc9
movups xmmword [rbp - 0x80], xmm7
mov rsi, qword [rbp + 0x230]
jmp 0x18000797c
xorps xmm0, xmm0
cvtss2sd xmm0, xmm9
mulsd xmm0, qword [0x180057b58]
mulsd xmm0, qword [0x180057bc8]
cvtpd2ps xmm1, xmm0
movaps xmm8, xmm6
movaps xmm9, xmm1
divss xmm9, xmm10
movaps xmm11, xmm10
subss xmm11, xmm1
divss xmm11, xmm10
movups xmm7, xmmword [rbp - 0x80]
shufps xmm7, xmm7, 0xd2
movss xmm7, xmm6
shufps xmm7, xmm7, 0xc6
movss xmm7, xmm9
shufps xmm7, xmm7, 0xe1
movss xmm7, xmm11
movups xmmword [rbp - 0x80], xmm7
mov rsi, qword [rbp + 0x230]
jmp 0x18000797c
movaps xmm8, xmm7
shufps xmm8, xmm7, 0xaa
movaps xmm9, xmm7
shufps xmm9, xmm7, 0x55
movaps xmm11, xmm7
cmp byte [0x180060034], 0
je 0x180008264
cmp byte [rbp + 0x224], 0
je 0x180008264
movss xmm12, dword [rbp + 0x22c]
movaps xmm0, xmm12
subss xmm0, xmm13
movaps xmm1, xmm0
mulss xmm1, dword [0x180057b14]
movaps xmm10, xmm1
mulss xmm10, dword [0x180057b14]
movss xmm14, dword [rbp + 0x228]
cmp byte [0x1800600da], 0
je 0x180007a07
movdqa xmmword [rbp - 0x80], xmm7
cvttss2si eax, xmm0
cvttss2si r9d, xmm1
cvttss2si r8d, xmm13
movaps xmm0, xmm14
subss xmm0, xmm10
cvttss2si edx, xmm0
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
mov rcx, r15
call fcn.180001d20
cmp byte [0x1800600d9], 0
je 0x180007b7f
xorps xmm2, xmm2
cvtss2sd xmm2, xmm15
movq r8, xmm2
lea rdx, str._.fm
lea rcx, [rbp + 0x2b0]
call fcn.18000a860
mov r10, qword [0x180087388]
mov dword [rbp + 0x70], 0x3f800000
mov dword [rbp + 0x74], 0x3f800000
mov dword [rbp + 0x78], 0x3f800000
movss xmm0, dword [r10 + 0x37c8]
movss dword [rbp + 0x7c], xmm0
lea rcx, [rbp + 0x70]
call fcn.18000d9f0
mov ebx, eax
subss xmm13, dword [0x180057c04]
xor r14d, r14d
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x28], rax
movss xmm15, dword [0x180057c94]
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x180057c70]
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rbp + 8]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rbp + 8]
addss xmm0, dword [0x180057b48]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 8], xmm1
movss xmm7, dword [0x180057b14]
mulss xmm1, xmm7
movaps xmm0, xmm14
subss xmm0, xmm1
movss dword [rbp + 0x10], xmm0
movss dword [rbp + 0x14], xmm13
test ebx, 0xff000000
je 0x180007b93
lea rcx, [rbp + 0x2b0]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180007b10
lea rcx, [rbp + 0x2b0]
add rcx, rax
lea rax, [rbp + 0x2b0]
cmp rax, rcx
je 0x180007b93
mov rax, qword [r15 + 0x38]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x48], r14b
movss dword [rsp + 0x40], xmm6
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x2b0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x10]
movss xmm2, dword [rax + 0x10]
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180034bd0
jmp 0x180007b93
movss xmm7, dword [0x180057b14]
movss xmm15, dword [0x180057c94]
xor r14d, r14d
cmp byte [0x1800600aa], 0
je 0x180007d08
lea rbx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
setae r9b
cmovae rbx, qword [rbp + 0x170]
mov r10, qword [0x180087388]
mov dword [rbp + 0x80], 0x3f800000
mov dword [rbp + 0x84], 0x3f800000
mov dword [rbp + 0x88], 0x3f800000
movss xmm0, dword [r10 + 0x37c8]
movss dword [rbp + 0x8c], xmm0
lea rcx, [rbp + 0x80]
call fcn.18000d9f0
mov edi, eax
movaps xmm6, xmm12
movss xmm13, dword [0x180057b50]
addss xmm6, xmm13
lea rcx, [rbp + 0x170]
test r9b, r9b
cmovne rcx, qword [rbp + 0x170]
test rcx, rcx
jne 0x180007c2d
xorps xmm1, xmm1
jmp 0x180007c7c
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x180057c70]
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rbp + 0x18]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rbp + 0x18]
addss xmm0, dword [0x180057b48]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x18], xmm1
xorps xmm15, xmm15
mulss xmm1, xmm7
movaps xmm0, xmm14
subss xmm0, xmm1
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm6
test edi, 0xff000000
je 0x180007cfe
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], 0
jne 0x180007ca5
add rcx, rbx
cmp rbx, rcx
je 0x180007cfe
mov rax, qword [r15 + 0x38]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x20]
movss xmm2, dword [rax + 0x10]
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180034bd0
movss xmm6, dword [0x180057c00]
jmp 0x180007d15
xorps xmm15, xmm15
movss xmm13, dword [0x180057b50]
cmp byte [0x1800600bb], 0
je 0x180007fdf
mov rbx, r14
mov rdx, qword [rbp + 0x130]
mov rax, qword [rbp + 0x168]
add rax, 0x248
add rdx, rax
mov qword [rbp + 0x2a8], r14
mov byte [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x2a8]
mov rcx, qword [0x180087398]
call fcn.180001550
mov rdx, qword [rbp + 0x2a8]
test rdx, rdx
je 0x180007fdf
mov rcx, rdx
movabs rax, 0xffffffff00000000
and rcx, rax
movabs r8, 0xffffff8000000000
lea rax, [rcx + r8]
mov r10, qword [0x180087398]
movabs r9, 0xffffff7fffffffff
test r9, rax
jne 0x180007db8
mov rbx, qword [r10 + 0x18]
lea rax, [rcx + r8]
test r9, rax
jne 0x180007db8
and edx, 0xffffff
mov dword [rbp + 0x248], r14d
add rdx, 0x18
add rdx, rbx
mov byte [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x248]
mov rcx, r10
call fcn.180001550
mov edx, dword [rbp + 0x248]
test edx, edx
je 0x180007fdf
lea rcx, [rbp + 0x30]
call fcn.1800023b0
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.180003e50
nop
lea rbx, [rbp + 0x288]
mov r11, qword [rbp + 0x2a0]
cmp r11, 0x10
setae r8b
mov r9, qword [rbp + 0x288]
cmovae rbx, r9
mov r10, qword [0x180087388]
mov dword [rbp + 0x90], 0x3f800000
mov dword [rbp + 0x94], 0x3f800000
mov dword [rbp + 0x98], 0x3f800000
movss xmm0, dword [r10 + 0x37c8]
movss dword [rbp + 0x9c], xmm0
lea rcx, [rbp + 0x90]
call fcn.18000d9f0
mov edi, eax
lea rcx, [rbp + 0x288]
test r8b, r8b
cmovne rcx, r9
test rcx, rcx
jne 0x180007e85
movaps xmm2, xmm15
jmp 0x180007ee9
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rcx
movss xmm0, dword [0x180057c94]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x180057c70]
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rbp]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rbp]
addss xmm0, dword [0x180057b48]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [rbp], xmm2
mov r11, qword [rbp + 0x2a0]
mov r9, qword [rbp + 0x288]
movaps xmm1, xmm12
addss xmm1, xmm13
addss xmm1, xmm6
mulss xmm2, xmm7
movaps xmm0, xmm14
subss xmm0, xmm2
movss dword [rbp - 8], xmm0
movss dword [rbp - 4], xmm1
test edi, 0xff000000
je 0x180007f87
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x180007f20
add rcx, rbx
cmp rbx, rcx
je 0x180007f87
mov rax, qword [r15 + 0x38]
movups xmm0, xmmword [r15 + 0x88]
movups xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
lea r9, [rbp - 8]
movss xmm2, dword [rax + 0x10]
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180034bd0
mov r11, qword [rbp + 0x2a0]
mov r9, qword [rbp + 0x288]
addss xmm6, dword [0x180057c00]
cmp r11, 0x10
jb 0x180007fc6
lea rdx, [r11 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x180007fbe
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000826d
mov rcx, r9
call fcn.18004d1f0
mov qword [rbp + 0x298], r14
mov qword [rbp + 0x2a0], 0xf
mov byte [rbp + 0x288], 0
cmp byte [0x1800600d8], 0
je 0x180008082
mov rax, qword [0x180087388]
movss dword [rsp + 0x58], xmm11
movss dword [rsp + 0x5c], xmm9
movss dword [rsp + 0x60], xmm8
movss xmm0, dword [rax + 0x37c8]
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x58]
call fcn.18000d9f0
movsd xmm0, qword [0x180087358]
mulsd xmm0, qword [0x180057b88]
cvtpd2ps xmm1, xmm0
movsd xmm0, qword [0x180087340]
cvtpd2ps xmm0, xmm0
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm1
addss xmm12, xmm13
addss xmm12, xmm6
addss xmm10, xmm14
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm12
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp - 0x10]
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1800301f0
movss xmm10, dword [0x180057c38]
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1800080cc
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800080c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008274
call fcn.18004d1f0
xor r14d, r14d
movss xmm12, dword [rbp - 0x70]
movss xmm11, dword [0x180057b80]
movabs rbx, 0xe38e38e38e38e39
inc r13d
mov dword [rbp - 0x50], r13d
add rsi, 0x90
mov qword [rbp + 0x230], rsi
mov rcx, qword [0x180087448]
sub rcx, qword [0x180087440]
mov rax, rbx
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r13d
cmp rax, rdx
jb 0x180007241
movss xmm8, dword [0x180057b48]
movss xmm9, dword [0x180057c70]
mov edi, dword [rbp + 0x224]
mov r14d, dword [rbp - 0x6c]
movzx esi, byte [rsp + 0x68]
xorps xmm14, xmm14
cmp byte [0x1800600a8], 0
je 0x1800085a6
movaps xmm0, xmm15
cmp byte [0x18008736b], 0
je 0x180008395
mov r10, qword [0x180087388]
lea rcx, [rsp + 0x58]
movss xmm0, dword [r10 + 0x37c8]
movss dword [rsp + 0x64], xmm0
cmp byte [0x180060034], 0
je 0x18000827b
mov dword [rsp + 0x58], 0
mov qword [rsp + 0x5c], 0x3f800000
call fcn.18000d9f0
mov ebx, eax
movss xmm0, dword [0x1800600b0]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x180087358]
addsd xmm0, xmm14
cvtpd2ps xmm6, xmm0
mov qword [rsp + 0x30], 0
lea r13, str.esp_toggle__ON_
mov qword [rsp + 0x28], r13
movss xmm0, dword [0x180057c94]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm9
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rsp + 0x70]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm7, dword [0x180057b14]
mulss xmm1, xmm7
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x180087340]
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm6
test ebx, 0xff000000
je 0x18000838b
lea rcx, [0x180050bef]
jmp 0x180008340
xorps xmm15, xmm15
jmp 0x18000808b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rsp + 0x58], 0x3f800000
mov dword [rsp + 0x60], 0
call fcn.18000d9f0
mov ebx, eax
movss xmm0, dword [0x1800600b0]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x180087358]
addsd xmm0, xmm14
cvtpd2ps xmm6, xmm0
mov qword [rsp + 0x30], 0
lea r13, str.esp_toggle__OFF_
mov qword [rsp + 0x28], r13
movss xmm0, dword [0x180057c94]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm9
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rsp + 0x70]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm7, dword [0x180057b14]
mulss xmm1, xmm7
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x180087340]
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm6
test ebx, 0xff000000
je 0x18000838b
lea rcx, [0x180050c00]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r13
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
movups xmm0, xmmword [r15 + 0x88]
mov rax, qword [r15 + 0x38]
mov dword [rsp + 0x20], ebx
movups xmmword [rsp + 0x58], xmm0
lea r9, [rsp + 0x50]
movss xmm2, dword [rax + 0x10]
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180034bd0
movss xmm0, dword [0x180057c04]
jmp 0x18000839d
movss xmm7, dword [0x180057b14]
cmp byte [0x180087368], 0
je 0x1800085ae
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
mov r10, qword [0x180087388]
lea rcx, [rsp + 0x58]
movss xmm0, dword [r10 + 0x37c8]
movss dword [rsp + 0x64], xmm0
test dil, dil
je 0x1800084e5
mov dword [rsp + 0x58], 0
mov qword [rsp + 0x5c], 0x3f800000
call fcn.18000d9f0
mov ebx, eax
movss xmm0, dword [0x1800600b0]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x180087358]
addsd xmm0, xmm6
cvtpd2ps xmm6, xmm0
mov qword [rsp + 0x30], 0
lea r13, str.esp_hold__ON_
mov qword [rsp + 0x28], r13
movss xmm0, dword [0x180057c94]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm9
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rsp + 0x70]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm7
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x180087340]
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm6
test ebx, 0xff000000
je 0x1800085ae
lea rcx, [0x180050c15]
mov byte [rsp + 0x48], 0
movups xmm0, xmmword [r15 + 0x88]
movss dword [rsp + 0x40], xmm15
movups xmmword [rsp + 0x58], xmm0
mov rax, qword [r15 + 0x38]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r13
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
lea r9, [rsp + 0x50]
movss xmm2, dword [rax + 0x10]
mov rdx, r15
mov rcx, qword [rax + 8]
call fcn.180034bd0
jmp 0x1800085ae
mov qword [rsp + 0x58], 0x3f800000
mov dword [rsp + 0x60], 0
call fcn.18000d9f0
mov ebx, eax
movss xmm0, dword [0x1800600b0]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x180087358]
addsd xmm0, xmm6
cvtpd2ps xmm6, xmm0
mov qword [rsp + 0x30], 0
lea r13, str.esp_hold__OFF_
mov qword [rsp + 0x28], r13
movss xmm0, dword [0x180057c94]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm9
movss xmm2, dword [r10 + 0x3c10]
lea rdx, [rsp + 0x70]
mov rcx, qword [r10 + 0x3c08]
call fcn.1800349b0
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm7
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x180087340]
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm6
test ebx, 0xff000000
je 0x1800085ae
lea rcx, [0x180050c26]
jmp 0x180008495
movss xmm7, dword [0x180057b14]
cmp byte [0x1800600b9], 0
je 0x180008bc7
cmp byte [0x1800600ba], 0
je 0x1800086ae
cmp byte [0x180060034], 0
je 0x1800086ae
test dil, dil
je 0x1800086ae
mov rax, qword [0x180087388]
mov dword [rsp + 0x58], 0x3f800000
mov dword [rsp + 0x5c], 0x3f800000
mov dword [rsp + 0x60], 0x3f800000
movss xmm0, dword [rax + 0x37c8]
movss dword [rsp + 0x64], xmm0
lea rcx, [rsp + 0x58]
call fcn.18000d9f0
mov ebx, eax
movsd xmm1, qword [0x180087358]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [0x180087340]
cvtpd2ps xmm0, xmm0
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
test eax, 0xff000000
je 0x1800086ae
movss xmm2, dword [0x1800600ac]
comiss xmm7, xmm2
ja 0x1800086ae
subss xmm2, xmm7
mov dword [rsp + 0x28], 0x3f
movss xmm0, dword [0x180057be8]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18002f880
movss xmm0, dword [0x180057b50]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, ebx
mov r8d, dword [r15 + 0x78]
mov rdx, qword [r15 + 0x80]
mov rcx, r15
call fcn.18002de00
mov dword [r15 + 0x78], 0
mov eax, dword [0x1800600bc]
cmp eax, 1
je 0x180008730
cmp eax, 2
jne 0x1800086c4
lea r12d, [rax + 4]
jmp 0x180008730
cmp eax, 3
jne 0x1800086cf
lea r12d, [rax + 2]
jmp 0x180008730
cmp eax, 4
jne 0x1800086da
lea r12d, [rax + 0xc]
jmp 0x180008730
cmp eax, 5
jne 0x1800086e5
lea r12d, [rax + 0xd]
jmp 0x180008730
cmp eax, 6
jne 0x1800086f0
lea r12d, [rax + 0xb]
jmp 0x180008730
cmp eax, 7
jne 0x1800086fb
lea r12d, [rax + 0xd]
jmp 0x180008730
cmp eax, 8
jne 0x180008706
lea r12d, [rax + 1]
jmp 0x180008730
cmp eax, 9
jne 0x180008711
lea r12d, [rax + 4]
jmp 0x180008730
cmp eax, 0xa
jne 0x18000871e
mov r12d, 0xbb
jmp 0x180008730
mov r12d, 1
cmp eax, 0xb
mov eax, 0xbd
cmove r12d, eax
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
cmp byte [0x1800600a9], 0
je 0x180008788
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180008765
mov byte [0x180087375], al
mov dword [0x180087378], 0
cmp byte [0x1800600a9], 0
je 0x180008788
test sil, sil
je 0x18000877c
cmp byte [0x1800600ab], 0
jne 0x180008788
test ax, ax
je 0x180008788
mov byte [0x180087375], 1
cmp r14d, 0x53a
je 0x180008bc7
movsxd rax, r14d
lea rdx, [rax + rax*8]
shl rdx, 4
add rdx, qword [0x180087440]
mov rax, qword [rdx]
mov qword [rbp + 0x190], rax
mov rax, qword [rdx + 8]
mov qword [rbp + 0x198], rax
mov rax, qword [rdx + 0x10]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rdx + 0x18]
mov qword [rbp + 0x1a8], rax
mov rax, qword [rdx + 0x20]
mov qword [rbp + 0x1b0], rax
mov rax, qword [rdx + 0x28]
mov qword [rbp + 0x1b8], rax
mov rax, qword [rdx + 0x30]
mov qword [rbp + 0x1c0], rax
mov rax, qword [rdx + 0x38]
mov qword [rbp + 0x1c8], rax
mov rax, qword [rdx + 0x40]
mov qword [rbp + 0x1d0], rax
mov rax, qword [rdx + 0x48]
mov qword [rbp + 0x1d8], rax
mov rax, qword [rdx + 0x50]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rdx + 0x58]
mov qword [rbp + 0x1e8], rax
mov rax, qword [rdx + 0x60]
mov qword [rbp + 0x1f0], rax
mov rax, qword [rdx + 0x68]
mov qword [rbp + 0x1f8], rax
add rdx, 0x70
lea rcx, [rbp + 0x200]
call fcn.18000a490
nop
mov rdx, qword [rbp + 0x1a0]
mov rax, qword [rbp + 0x1d8]
add rax, 0x250
add rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm0
mov byte [rsp + 0x20], 0
mov r9d, 0x30
lea r8, [rbp + 0x30]
mov rcx, qword [0x180087398]
call fcn.180001550
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x30]
call fcn.1800017f0
mov qword [rbp + 0x228], 0
movaps xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x40], xmm1
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x50], xmm0
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x60], xmm1
mov dword [rsp + 0x20], 8
mov r9, qword [rbp + 0x1e8]
mov r8, qword [rbp + 0x1b0]
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.180002200
movss xmm1, dword [rbp - 0x58]
subss xmm1, dword [0x1800600c0]
movsd xmm0, qword [rbp - 0x60]
movsd qword [rbp - 0x60], xmm0
movss dword [rbp - 0x58], xmm1
lea rdx, [rbp + 0x228]
lea rcx, [rbp - 0x60]
call fcn.1800019d0
test al, al
je 0x180008b83
movss xmm3, dword [rbp + 0x22c]
addss xmm3, dword [0x180087378]
movsd xmm5, qword [0x180087340]
cvtpd2ps xmm4, xmm5
movaps xmm0, xmm4
movss xmm2, dword [0x1800600ac]
subss xmm0, xmm2
comiss xmm4, xmm0
jb 0x180008b83
movaps xmm0, xmm4
addss xmm0, xmm2
comiss xmm0, xmm4
jb 0x180008b83
movaps xmm0, xmm3
subss xmm0, xmm2
comiss xmm3, xmm0
jb 0x180008b83
movaps xmm0, xmm3
addss xmm0, xmm2
comiss xmm0, xmm3
jb 0x180008b83
movaps xmm1, xmm4
movss xmm12, dword [rbp + 0x228]
subss xmm1, xmm12
movsd xmm6, qword [0x180087358]
cvtpd2ps xmm9, xmm6
movaps xmm0, xmm9
subss xmm0, xmm3
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm0, xmm1
mulss xmm2, xmm2
comiss xmm2, xmm0
setae al
test al, al
je 0x180008b83
test bx, bx
je 0x180008b83
movss xmm10, dword [0x1800600b4]
movaps xmm7, xmm15
movaps xmm2, xmm15
cvtps2pd xmm8, xmm12
movsd xmm13, qword [0x180057e30]
movss xmm11, dword [0x180057c28]
comisd xmm8, xmm5
jbe 0x180008a47
movaps xmm0, xmm5
subsd xmm0, xmm8
xorps xmm0, xmm13
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
divss xmm7, xmm11
mulss xmm7, xmm10
cvtps2pd xmm1, xmm7
addsd xmm1, xmm5
addss xmm4, xmm4
cvtps2pd xmm0, xmm4
comisd xmm1, xmm0
jbe 0x180008a47
movaps xmm7, xmm15
comisd xmm5, xmm8
jbe 0x180008a74
subsd xmm8, xmm5
cvtpd2ps xmm7, xmm8
divss xmm7, xmm11
mulss xmm7, xmm10
cvtps2pd xmm0, xmm7
addsd xmm0, xmm5
comisd xmm14, xmm0
jbe 0x180008a74
movaps xmm7, xmm15
cvtps2pd xmm4, xmm3
comisd xmm4, xmm6
jbe 0x180008ab3
movaps xmm0, xmm6
subsd xmm0, xmm4
xorps xmm0, xmm13
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
divss xmm2, xmm11
mulss xmm2, xmm10
cvtps2pd xmm1, xmm2
addsd xmm1, xmm6
addss xmm9, xmm9
cvtps2pd xmm0, xmm9
comisd xmm1, xmm0
jbe 0x180008ab3
movaps xmm2, xmm15
comisd xmm6, xmm4
jbe 0x180008add
subsd xmm4, xmm6
cvtpd2ps xmm2, xmm4
divss xmm2, xmm11
mulss xmm2, xmm10
cvtps2pd xmm0, xmm2
addsd xmm0, xmm6
comisd xmm14, xmm0
jbe 0x180008add
movaps xmm2, xmm15
ucomiss xmm12, xmm15
jp 0x180008af1
jne 0x180008af1
ucomiss xmm3, xmm15
jp 0x180008af1
je 0x180008b83
xorps xmm2, xmmword [0x180057e40]
divss xmm2, dword [0x180057bdc]
movss dword [rbp + 0x238], xmm2
mov rdx, qword [0x180087350]
mov rax, qword [0x180087348]
add rax, 0x5d8
add rdx, rax
mov byte [rsp + 0x20], 1
mov r9d, 4
lea r8, [rbp + 0x238]
mov rcx, qword [0x180087398]
call fcn.180001550
divss xmm7, dword [0x180057bdc]
movss dword [rbp + 0x240], xmm7
mov rdx, qword [0x180087350]
mov rax, qword [0x180087348]
add rax, 0x5dc
add rdx, rax
mov byte [rsp + 0x20], 1
mov r9d, 4
lea r8, [rbp + 0x240]
mov rcx, qword [0x180087398]
call fcn.180001550
nop
mov rdx, qword [rbp + 0x218]
cmp rdx, 0x10
jb 0x180008bc7
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008bc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180008bc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004d1f0
mov rbx, qword [0x180087440]
mov rdi, qword [0x180087448]
cmp rbx, rdi
je 0x180008c02
nop word [rax + rax]
mov rcx, rbx
call fcn.180006c00
add rbx, 0x90
cmp rbx, rdi
jne 0x180008be0
mov rax, qword [0x180087440]
mov qword [0x180087448], rax
mov rdx, qword [rbp + 0x270]
cmp rdx, 0x10
jb 0x180008c46
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008c41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180008c41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004d1f0
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.18004cd30
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret