Function at 0x18004d4b0
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x398]
sub rsp, 0x458
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x18006f9a8]
mov rax, qword [rax + 0x48a8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1800226b0
mov r13, rax
mov edi, 4
mov r15d, dword [0x18006f358]
movss xmm11, dword [0x1800649dc]
movss xmm12, dword [0x1800649b8]
movss xmm13, dword [0x180064a50]
movss xmm14, dword [0x1800649bc]
mov r8, qword [0x18006f068]
cmp byte [r8 + 2], 0
je 0x18004d7a9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004d58d
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x220]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [rax + 0x228]
mov dword [rsp + 0x58], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004d5b8
mov rax, qword [rax]
movss xmm6, dword [rax + 0x197c]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
jne 0x18004d5d4
xor ebx, ebx
jmp 0x18004d5d7
mov rbx, qword [rax]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [rdi + rax]
cmp dword [0x18006fcd8], ecx
jle 0x18004d625
lea rcx, [0x18006fcd8]
call fcn.180056a94
cmp dword [0x18006fcd8], 0xffffffff
jne 0x18004d625
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x203f20
mov qword [0x18006fcc8], rax
lea rcx, [0x18006fcd8]
call fcn.180056a34
mov rcx, rbx
call qword [0x18006fcc8]
movaps xmm8, xmm0
addss xmm8, xmm6
xor esi, esi
movss xmm1, dword [rsp + 0x54]
movss dword [rbp - 0x5c], xmm1
movss xmm9, dword [rsp + 0x58]
movss xmm10, dword [rsp + 0x50]
movd xmm7, esi
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm11
mulss xmm7, xmm12
divss xmm7, xmm13
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm8
addss xmm0, xmm10
movss dword [rbp - 0x58], xmm6
movsd xmm1, qword [rbp - 0x60]
movss xmm1, xmm0
movsd qword [rbp - 0x60], xmm1
movsd qword [rsp + 0x50], xmm1
mov eax, dword [rbp - 0x58]
mov dword [rsp + 0x58], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf2cda0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1939708]
add rcx, 0x270
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x50]
call rbx
movss xmm0, dword [rbp - 0x80]
movss dword [rbp + 0x3a0], xmm0
movss xmm1, dword [rbp - 0x7c]
movss dword [rbp + 0x3a4], xmm1
mov r8d, dword [r13 + 0x7c]
mov eax, dword [r13 + 0x78]
cmp eax, r8d
jne 0x18004d734
lea ecx, [rax + 1]
test r8d, r8d
je 0x18004d71b
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004d720
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [r13 + 0x78]
call fcn.180034bb0
mov eax, dword [r13 + 0x78]
movsxd rdx, eax
mov rcx, qword [r13 + 0x80]
mov rax, qword [rbp + 0x3a0]
mov qword [rcx + rdx*8], rax
mov r8d, dword [r13 + 0x78]
inc r8d
mov dword [r13 + 0x78], r8d
inc esi
cmp esi, 0x63
jle 0x18004d652
mov rax, qword [0x18006f068]
movups xmm0, xmmword [rax + 0x4c]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020740
movss dword [rsp + 0x28], xmm14
mov dword [rsp + 0x20], 1
mov r9d, eax
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d220
mov dword [r13 + 0x78], 0
mov r8, qword [0x18006f068]
movss xmm7, dword [0x1800649ac]
xorps xmm12, xmm12
cmp byte [r8 + 0xa], 0
je 0x18004de8e
xor esi, esi
mov rbx, qword [0x18006faf8]
mov r14, qword [0x18006faf0]
mov rcx, rbx
sub rcx, r14
movabs r12, 0x2aaaaaaaaaaaaaab
mov rax, r12
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004d91e
mov r8, rbx
mov r15, rbx
xor edi, edi
mov rcx, qword [0x18006faf0]
mov rax, qword [rdi + rcx]
movss xmm6, dword [rax + 0x11e8]
ucomiss xmm6, xmm12
jp 0x18004d821
je 0x18004d8cc
lea rdx, str.JammerDevice
mov rcx, qword [rdi + rcx + 8]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004d858
ucomiss xmm6, xmm12
jp 0x18004d892
jne 0x18004d892
movsxd rax, esi
lea rcx, [rax + rax*2]
lea rcx, [r14 + rcx*8]
lea rdx, [rcx + 0x18]
sub r15, rdx
mov r8, r15
jmp 0x18004d8f9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm1, dword [rax + 0x1943758]
mov rcx, qword [0x18006faf0]
mov rax, qword [rdi + rcx]
movss xmm0, dword [rax + 0x3a0]
subss xmm1, dword [rdi + rcx + 0x10]
subss xmm0, xmm1
comiss xmm12, xmm0
jae 0x18004d8d9
mov rbx, qword [0x18006faf8]
inc esi
add rdi, 0x18
mov r8, rbx
mov r14, qword [0x18006faf0]
mov rcx, rbx
sub rcx, r14
mov rax, r12
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r15, rbx
movsxd rax, esi
cmp rax, rdx
jae 0x18004d910
jmp 0x18004d802
movsxd rax, esi
lea rcx, [rax + rax*2]
lea rcx, [r14 + rcx*8]
jmp 0x18004d8f2
movsxd rax, esi
lea rcx, [rax + rax*2]
mov rax, qword [0x18006faf0]
lea rcx, [rax + rcx*8]
mov r8, qword [0x18006faf8]
lea rdx, [rcx + 0x18]
sub r8, rdx
call sub.VCRUNTIME140.dll_memmove
mov rbx, qword [0x18006faf8]
sub rbx, 0x18
mov qword [0x18006faf8], rbx
mov r15d, dword [0x18006f358]
mov r8, qword [0x18006f068]
sub rbx, qword [0x18006faf0]
mov rax, r12
imul rbx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004de8e
xor r14d, r14d
xor edi, edi
nop dword [rax]
nop dword [rax + rax]
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0x1e0]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [0x18006faf0]
mov rcx, qword [rdi + rax]
movsd xmm0, qword [rcx + 0x220]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [rcx + 0x228]
mov dword [rsp + 0x58], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf2cda0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1939708]
add rcx, 0x270
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x50]
call rbx
mov rsi, qword [0x18006faf0]
mov rbx, qword [rdi + rsi + 8]
lea rdx, str.SightWard
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004dc0f
mov rax, qword [rdi + rsi]
movss xmm0, dword [rax + 0x1210]
ucomiss xmm0, xmm7
jp 0x18004d9ed
je 0x18004da05
movss xmm0, dword [rax + 0x3a0]
ucomiss xmm0, xmm12
jp 0x18004daec
jne 0x18004daec
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
lea r8d, [rbx + 8]
lea rdx, [0x180064820]
lea rcx, [rsp + 0x60]
call fcn.1800091b0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.18004bab0
cmp qword [rax + 0x18], 0x10
jb 0x18004da4c
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1800511b0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004da96
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004da91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004df84
call fcn.1800567c0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18004dd8e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dae2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004df8b
call fcn.1800567c0
jmp 0x18004dd8e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm0, dword [rax + 0x1943758]
mov rax, qword [0x18006faf0]
mov rcx, qword [rdi + rax]
movss xmm6, dword [rcx + 0x3a0]
subss xmm0, dword [rdi + rax + 0x10]
subss xmm6, xmm0
mov byte [rcx + 0x348], 1
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
lea r8d, [rbx + 0xd]
lea rdx, [0x180064850]
lea rcx, [rsp + 0x60]
call fcn.1800091b0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.18004bab0
cmp qword [rax + 0x18], 0x10
jb 0x18004db67
mov rax, qword [rax]
cvtps2pd xmm2, xmm6
movq r8, xmm2
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1800511b0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004dbb9
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dbb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004df92
call fcn.1800567c0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18004dd8e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dc05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004df99
call fcn.1800567c0
jmp 0x18004dd8e
lea rdx, str.JammerDevice
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004dd15
mov rax, qword [rdi + rsi]
mov byte [rax + 0x348], 1
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
lea r8d, [rbx + 8]
lea rdx, [0x180064840]
lea rcx, [rsp + 0x60]
call fcn.1800091b0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.18004bab0
cmp qword [rax + 0x18], 0x10
jb 0x18004dc78
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1800511b0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004dcc2
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dcbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004dfa0
call fcn.1800567c0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18004dd8e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dd0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004dfa7
call fcn.1800567c0
jmp 0x18004dd8e
lea rdx, str.Jack_In_The_Box
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18004dd3b
lea rdx, str.Noxious_Trap
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004dd8e
mov rax, qword [rdi + rsi]
mov byte [rax + 0x348], 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm1, dword [rax + 0x1943758]
mov rcx, qword [0x18006faf0]
mov rax, qword [rdi + rcx]
movss xmm0, dword [rax + 0x3a0]
subss xmm1, dword [rdi + rcx + 0x10]
subss xmm0, xmm1
cvtps2pd xmm2, xmm0
movq r8, xmm2
lea rdx, str._.0f
lea rcx, [rbp + 0x1e0]
call fcn.1800511b0
movaps xmm0, xmmword [0x180064e20]
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.180020740
mov r8d, eax
movss xmm0, dword [rbp - 0x60]
movss dword [rbp + 0x3a0], xmm0
movss xmm1, dword [rbp - 0x5c]
movss dword [rbp + 0x3a4], xmm1
test eax, 0xff000000
je 0x18004de52
lea rax, [rbp + 0x1e0]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004dde0
lea rdx, [rbp + 0x1e0]
add rdx, rcx
lea rax, [rbp + 0x1e0]
cmp rax, rdx
je 0x18004de52
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0x1e0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3a0]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
inc r14d
add rdi, 0x18
mov rcx, qword [0x18006faf8]
sub rcx, qword [0x18006faf0]
mov rax, r12
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r14d
cmp rax, rdx
jb 0x18004d950
mov r8, qword [0x18006f068]
movss xmm14, dword [0x180064978]
movss xmm13, dword [0x180064a28]
movss xmm15, dword [0x180064a04]
cmp byte [r8 + 3], 0
jne 0x18004debb
cmp byte [r8 + 1], 0
je 0x18004ed94
cmp dword [r8 + 0x18], 1
jne 0x18004ed94
mov r14, qword [0x18006fbb0]
mov rsi, qword [0x18006fba8]
cmp rsi, r14
je 0x18004ed94
mov r12, qword gs:[0x58]
lea rbx, [0x18006324d]
movss xmm7, dword [0x180064a0c]
movss xmm9, dword [0x180064a30]
movss xmm6, dword [0x180064a14]
movss xmm8, dword [0x180064a48]
movss xmm10, dword [0x180064a18]
movss xmm11, dword [0x180064a4c]
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x180], xmm0
movups xmm0, xmmword [rsi + 0x20]
movaps xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rsi + 0x30]
movaps xmmword [rbp + 0x1b0], xmm1
movzx eax, byte [r8 + 1]
mov rdi, qword [rbp + 0x180]
cmp al, byte [r8 + 3]
je 0x18004e004
test al, al
je 0x18004dfc7
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004df6e
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004dfae
cmp dword [rdi + 0x3c], 0xc8
jne 0x18004dfc0
jmp 0x18004ed7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp ecx, 0xc8
jne 0x18004dfc0
cmp dword [rdi + 0x3c], 0x64
je 0x18004ed7f
mov r8, qword [0x18006f068]
cmp byte [r8 + 3], 0
je 0x18004e004
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004dfe1
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004dff3
cmp dword [rdi + 0x3c], ecx
jne 0x18004e004
jmp 0x18004ed7f
cmp ecx, 0xc8
jne 0x18004e004
cmp dword [rdi + 0x3c], ecx
je 0x18004ed7f
mov ecx, 4
mov rax, qword [r12 + r15*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18006fcb8], ecx
jle 0x18004e04e
lea rcx, [0x18006fcb8]
call fcn.180056a94
cmp dword [0x18006fcb8], 0xffffffff
jne 0x18004e04e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x235780
mov qword [0x18006fcd0], rax
lea rcx, [0x18006fcb8]
call fcn.180056a34
mov rcx, rdi
call qword [0x18006fcd0]
test al, al
je 0x18004ed7f
movss xmm0, dword [rdi + 0x11e8]
comiss xmm0, xmm12
jbe 0x18004ed7f
cmp byte [rdi + 0x348], 0
je 0x18004ed7f
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.180055c60
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0xb0]
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [rsp + 0x54]
addss xmm0, xmm14
movss dword [rsp + 0x54], xmm0
mov rcx, qword [rdi + 0x3cc0]
cmp dword [rcx + 0x28], 0
je 0x18004e2a9
xor r8d, r8d
mov rdx, rdi
call fcn.180050d40
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm12
jbe 0x18004e20c
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rdi + 0x3cc0]
call fcn.180050d40
mov rbx, qword [rdi + 0x3cc0]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.180050be0
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.180050d40
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rdi + 0x3cc0]
call fcn.180050d40
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
subss xmm0, dword [0x180064a34]
movss dword [rbp + 0x3a0], xmm0
movss dword [rbp + 0x3a4], xmm1
test eax, 0xff000000
je 0x18004e2a9
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e1a4
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004e2a9
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3a0]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
jmp 0x18004e294
movaps xmm0, xmmword [0x180064d40]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
subss xmm0, dword [0x180064a34]
movss dword [rbp + 0x3a8], xmm0
movss dword [rbp + 0x3ac], xmm1
test eax, 0xff000000
je 0x18004e2a9
mov rdx, qword [r13 + 0x38]
mov rcx, qword [rdx + 8]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rbx
lea r8, [0x18006324c]
mov qword [rsp + 0x30], r8
lea r8, [rsp + 0x60]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x3a8]
movss xmm2, dword [rdx + 0x10]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov rdx, r13
call fcn.180043420
mov rcx, qword [rdi + 0x3cc8]
cmp dword [rcx + 0x28], 0
je 0x18004e4b8
mov r8d, 1
mov rdx, rdi
call fcn.180050d40
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm12
jbe 0x18004e418
mov r8d, 1
mov rdx, rdi
mov rcx, qword [rdi + 0x3cc8]
call fcn.180050d40
mov rbx, qword [rdi + 0x3cc8]
mov r8d, 1
mov rdx, rdi
mov rcx, rbx
call fcn.180050be0
mov r8d, 1
mov rdx, rdi
mov rcx, rbx
call fcn.180050d40
mov r8d, 1
mov rdx, rdi
mov rcx, qword [rdi + 0x3cc8]
call fcn.180050d40
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
subss xmm0, xmm7
movss dword [rbp + 0x3b0], xmm0
movss dword [rbp + 0x3b4], xmm1
test eax, 0xff000000
je 0x18004e4b8
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e3b0
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004e4b8
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3b0]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
jmp 0x18004e4a3
movaps xmm0, xmmword [0x180064d40]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
subss xmm0, xmm7
movss dword [rbp + 0x3b8], xmm0
movss dword [rbp + 0x3bc], xmm1
test eax, 0xff000000
je 0x18004e4b8
mov rdx, qword [r13 + 0x38]
mov rcx, qword [rdx + 8]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
lea r8, [0x180063265]
mov qword [rsp + 0x38], r8
lea r8, [0x180063264]
mov qword [rsp + 0x30], r8
lea r8, [rsp + 0x60]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x3b8]
movss xmm2, dword [rdx + 0x10]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov rdx, r13
call fcn.180043420
mov rcx, qword [rdi + 0x3cd0]
cmp dword [rcx + 0x28], 0
je 0x18004e6b5
mov r8d, 2
mov rdx, rdi
call fcn.180050d40
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm12
jbe 0x18004e61a
mov r8d, 2
mov rdx, rdi
mov rcx, qword [rdi + 0x3cd0]
call fcn.180050d40
mov rbx, qword [rdi + 0x3cd0]
mov r8d, 2
mov rdx, rdi
mov rcx, rbx
call fcn.180050be0
mov r8d, 2
mov rdx, rdi
mov rcx, rbx
call fcn.180050d40
mov r8d, 2
mov rdx, rdi
mov rcx, qword [rdi + 0x3cd0]
call fcn.180050d40
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x180064a00]
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x44], xmm1
test eax, 0xff000000
je 0x18004e6b5
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e5b5
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004e6b5
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x40]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
jmp 0x18004e6a0
movaps xmm0, xmmword [0x180064d40]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x180064a00]
movss dword [rbp + 0x48], xmm0
movss dword [rbp + 0x4c], xmm1
test eax, 0xff000000
je 0x18004e6b5
mov rdx, qword [r13 + 0x38]
mov rcx, qword [rdx + 8]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
lea r8, [0x18006321d]
mov qword [rsp + 0x38], r8
lea r8, [0x18006321c]
mov qword [rsp + 0x30], r8
lea r8, [rsp + 0x60]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x48]
movss xmm2, dword [rdx + 0x10]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov rdx, r13
call fcn.180043420
mov rcx, qword [rdi + 0x3cd8]
cmp dword [rcx + 0x28], 0
je 0x18004e8ad
mov r8d, 3
mov rdx, rdi
call fcn.180050d40
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm12
jbe 0x18004e815
mov r8d, 3
mov rdx, rdi
mov rcx, qword [rdi + 0x3cd8]
call fcn.180050d40
mov rbx, qword [rdi + 0x3cd8]
mov r8d, 3
mov rdx, rdi
mov rcx, rbx
call fcn.180050be0
mov r8d, 3
mov rdx, rdi
mov rcx, rbx
call fcn.180050d40
mov r8d, 3
mov rdx, rdi
mov rcx, qword [rdi + 0x3cd8]
call fcn.180050d40
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
addss xmm0, xmm13
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm1
test eax, 0xff000000
je 0x18004e8ad
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e7b0
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004e8ad
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x50]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
jmp 0x18004e898
movaps xmm0, xmmword [0x180064d40]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm1, dword [rsp + 0x54]
addss xmm1, dword [0x1800649bc]
movss xmm0, dword [rsp + 0x50]
addss xmm0, xmm13
movss dword [rbp + 0x58], xmm0
movss dword [rbp + 0x5c], xmm1
test eax, 0xff000000
je 0x18004e8ad
mov rdx, qword [r13 + 0x38]
mov rcx, qword [rdx + 8]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
lea r8, [0x180063251]
mov qword [rsp + 0x38], r8
lea r8, [0x180063250]
mov qword [rsp + 0x30], r8
lea r8, [rsp + 0x60]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x58]
movss xmm2, dword [rdx + 0x10]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov rdx, r13
call fcn.180043420
mov dword [rbp + 0x60], 0x3f800000
mov dword [rbp + 0x64], 0x3f800000
mov qword [rbp + 0x68], 0
movss xmm3, dword [rsp + 0x54]
subss xmm3, xmm9
movaps xmm2, xmm3
addss xmm2, xmm6
movss xmm1, dword [rsp + 0x50]
addss xmm1, xmm8
movaps xmm0, xmm1
addss xmm0, xmm6
movss dword [rbp + 0x70], xmm0
movss dword [rbp + 0x74], xmm2
movss dword [rbp + 0x78], xmm1
movss dword [rbp + 0x7c], xmm3
mov rdx, qword [rbp + 0x1a8]
cmp rdx, qword [r13 + 0x98]
setne bl
je 0x18004e916
mov rcx, r13
call fcn.18003cf30
mov edx, 6
lea r8d, [rdx - 2]
mov rcx, r13
call fcn.18003cfb0
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x68]
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x78]
mov rcx, r13
call fcn.18003d0d0
test bl, bl
je 0x18004e97b
movsxd rcx, dword [r13 + 0x68]
lea eax, [rcx - 1]
mov dword [r13 + 0x68], eax
test eax, eax
jne 0x18004e963
xor eax, eax
jmp 0x18004e96c
mov rax, qword [r13 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r13 + 0x98], rax
mov rcx, r13
call fcn.18003cce0
mov r8d, 4
mov rdx, rdi
mov rcx, qword [rdi + 0x3ce0]
call fcn.180050d40
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
ucomiss xmm0, xmm12
jp 0x18004e9a1
je 0x18004eb18
movaps xmm0, xmmword [0x180064c70]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm3, dword [rsp + 0x54]
subss xmm3, xmm9
movaps xmm2, xmm3
addss xmm2, xmm10
movss xmm1, dword [rsp + 0x50]
addss xmm1, xmm8
movaps xmm0, xmm1
addss xmm0, xmm10
movss dword [rbp + 0x80], xmm0
movss dword [rbp + 0x84], xmm2
movss dword [rbp + 0x18], xmm1
movss dword [rbp + 0x1c], xmm3
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x18]
mov rcx, r13
call fcn.18003f7c0
mov r8d, 4
mov rdx, rdi
mov rcx, qword [rdi + 0x3ce0]
call fcn.180050d40
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e20]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
subss xmm1, xmm13
movss xmm0, dword [rsp + 0x50]
addss xmm0, xmm11
movss dword [rbp + 0x30], xmm0
movss dword [rbp + 0x34], xmm1
test eax, 0xff000000
je 0x18004eb18
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004eaa7
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004eb18
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x30]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
mov dword [rbp + 8], 0x3f800000
mov dword [rbp + 0xc], 0x3f800000
mov qword [rbp - 0x20], 0
movss xmm3, dword [rsp + 0x54]
subss xmm3, xmm7
movaps xmm2, xmm3
addss xmm2, xmm6
movss xmm1, dword [rsp + 0x50]
addss xmm1, xmm8
movaps xmm0, xmm1
addss xmm0, xmm6
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm2
movss dword [rbp - 0x40], xmm1
movss dword [rbp - 0x3c], xmm3
mov rdx, qword [rbp + 0x1b0]
cmp rdx, qword [r13 + 0x98]
setne bl
je 0x18004eb80
mov rcx, r13
call fcn.18003cf30
mov edx, 6
lea r8d, [rdx - 2]
mov rcx, r13
call fcn.18003cfb0
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x40]
mov rcx, r13
call fcn.18003d0d0
test bl, bl
je 0x18004ebe5
movsxd rcx, dword [r13 + 0x68]
lea eax, [rcx - 1]
mov dword [r13 + 0x68], eax
test eax, eax
jne 0x18004ebcd
xor eax, eax
jmp 0x18004ebd6
mov rax, qword [r13 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r13 + 0x98], rax
mov rcx, r13
call fcn.18003cce0
mov r8d, 5
mov rdx, rdi
mov rcx, qword [rdi + 0x3ce8]
call fcn.180050d40
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
ucomiss xmm0, xmm12
jp 0x18004ec0b
je 0x18004ed78
movaps xmm0, xmmword [0x180064c70]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm3, dword [rsp + 0x54]
subss xmm3, xmm7
movaps xmm2, xmm3
addss xmm2, xmm10
movss xmm1, dword [rsp + 0x50]
addss xmm1, xmm8
movaps xmm0, xmm1
addss xmm0, xmm10
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm2
movss dword [rbp - 0x80], xmm1
movss dword [rbp - 0x7c], xmm3
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp - 0x10]
lea rdx, [rbp - 0x80]
mov rcx, r13
call fcn.18003f7c0
mov r8d, 5
mov rdx, rdi
mov rcx, qword [rdi + 0x3ce8]
call fcn.180050d40
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e20]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
subss xmm1, xmm15
movss xmm0, dword [rsp + 0x50]
addss xmm0, xmm11
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm1
test eax, 0xff000000
je 0x18004ed78
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004ed07
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004ed78
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x60]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
lea rbx, [0x18006324d]
add rsi, 0x58
cmp rsi, r14
je 0x18004ed94
mov r8, qword [0x18006f068]
jmp 0x18004df21
mov ecx, dword [0x18006f358]
mov rax, qword gs:[0x58]
mov r12d, 4
mov qword [rbp + 0x3b8], r12
mov rdx, qword [rax + rcx*8]
mov qword [rbp + 0x3b0], rdx
mov eax, dword [rdx + r12]
cmp dword [0x18006fcac], eax
jle 0x18004edf4
lea rcx, [0x18006fcac]
call fcn.180056a94
cmp dword [0x18006fcac], 0xffffffff
jne 0x18004edf4
lea rcx, [0x1800596b0]
call fcn.1800567a0
lea rcx, [0x18006fcac]
call fcn.180056a34
mov rax, qword [0x18006fbf8]
mov qword [0x18006fc00], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1936830]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006fc00]
test edi, edi
je 0x18004ee77
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x3a0], rax
cmp rdx, qword [0x18006fc08]
je 0x18004ee57
mov qword [rdx], rax
mov rdx, qword [0x18006fc00]
add rdx, 8
mov qword [0x18006fc00], rdx
jmp 0x18004ee71
lea r8, [rbp + 0x3a0]
lea rcx, [0x18006fbf8]
call fcn.180014a10
mov rdx, qword [0x18006fc00]
inc ebx
cmp ebx, edi
jb 0x18004ee25
xor r15d, r15d
mov r8, qword [0x18006fbf8]
sub rdx, r8
sar rdx, 3
test rdx, rdx
je 0x18004f4d5
xor r14d, r14d
movss xmm11, dword [0x180064a58]
movss xmm12, dword [0x180064a3c]
mov rdi, qword [rbp + 0x3b0]
nop dword [rax]
mov rbx, qword [r14 + r8]
mov eax, dword [rdi + r12]
cmp dword [0x18006fcb8], eax
jle 0x18004eef6
lea rcx, [0x18006fcb8]
call fcn.180056a94
cmp dword [0x18006fcb8], 0xffffffff
jne 0x18004eef6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x235780
mov qword [0x18006fcd0], rax
lea rcx, [0x18006fcb8]
call fcn.180056a34
mov rcx, rbx
call qword [0x18006fcd0]
test al, al
je 0x18004f4ad
movss xmm0, dword [rbx + 0x11e8]
xorps xmm8, xmm8
comiss xmm0, xmm8
jbe 0x18004f4ad
mov r8, qword [0x18006fbf8]
mov rbx, qword [r14 + r8]
cmp byte [rbx + 0x348], 0
je 0x18004f4b4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004ef48
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004ef59
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004ef69
cmp ecx, 0xc8
jne 0x18004f18c
cmp dword [rbx + 0x3c], 0x64
jne 0x18004f18c
mov rax, qword [0x18006f068]
cmp byte [rax + 8], 0
je 0x18004f18c
mov rax, qword [0x18006fbf8]
mov rbx, qword [r14 + rax]
movsd xmm0, qword [rbx + 0x220]
movsd qword [rbp - 0x10], xmm0
mov eax, dword [rbx + 0x228]
mov dword [rbp - 8], eax
movss xmm6, dword [rbx + 0x197c]
mov eax, dword [rdi + r12]
cmp dword [0x18006fcd8], eax
jle 0x18004efeb
lea rcx, [0x18006fcd8]
call fcn.180056a94
cmp dword [0x18006fcd8], 0xffffffff
jne 0x18004efeb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x203f20
mov qword [0x18006fcc8], rax
lea rcx, [0x18006fcd8]
call fcn.180056a34
mov rcx, rbx
call qword [0x18006fcc8]
movaps xmm8, xmm0
addss xmm8, xmm6
xor esi, esi
movss xmm1, dword [rbp - 0xc]
movss dword [rbp - 0x3c], xmm1
movss xmm9, dword [rbp - 8]
movss xmm10, dword [rbp - 0x10]
nop word [rax + rax]
movd xmm7, esi
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [0x1800649dc]
mulss xmm7, dword [0x1800649b8]
divss xmm7, dword [0x180064a50]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm8
addss xmm0, xmm10
movss dword [rbp - 0x38], xmm6
movsd xmm1, qword [rbp - 0x40]
movss xmm1, xmm0
movsd qword [rbp - 0x40], xmm1
movsd qword [rbp - 0x30], xmm1
mov eax, dword [rbp - 0x38]
mov dword [rbp - 0x28], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf2cda0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1939708]
add rcx, 0x270
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
call rbx
movss xmm0, dword [rbp - 0x20]
movss dword [rbp + 0x3a0], xmm0
movss xmm1, dword [rbp - 0x1c]
movss dword [rbp + 0x3a4], xmm1
mov r8d, dword [r13 + 0x7c]
mov eax, dword [r13 + 0x78]
cmp eax, r8d
jne 0x18004f108
lea ecx, [rax + 1]
test r8d, r8d
je 0x18004f0ef
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004f0f4
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [r13 + 0x78]
call fcn.180034bb0
mov eax, dword [r13 + 0x78]
movsxd rdx, eax
mov rcx, qword [r13 + 0x80]
mov rax, qword [rbp + 0x3a0]
mov qword [rcx + rdx*8], rax
mov r8d, dword [r13 + 0x78]
inc r8d
mov dword [r13 + 0x78], r8d
inc esi
cmp esi, 0x63
jle 0x18004f020
mov rax, qword [0x18006f068]
movups xmm0, xmmword [rax + 0x5c]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
movss xmm9, dword [0x1800649bc]
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, eax
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d220
mov dword [r13 + 0x78], 0
xorps xmm8, xmm8
mov rdi, qword [rbp + 0x3b0]
jmp 0x18004f195
movss xmm9, dword [0x1800649bc]
mov rax, qword [0x18006fbf8]
lea rdx, [rsp + 0x50]
mov rcx, qword [r14 + rax]
call fcn.180055c60
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0xb0]
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [rsp + 0x54]
addss xmm0, xmm14
movss dword [rsp + 0x54], xmm0
mov rax, qword [0x18006f068]
cmp byte [rax + 4], 0
je 0x18004f4ad
mov rax, qword [0x18006fbf8]
mov rbx, qword [r14 + rax]
movss xmm3, dword [rbx + 0x11e8]
cvtps2pd xmm3, xmm3
movq r9, xmm3
lea r8, str.H:_.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e20]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm1, dword [rsp + 0x54]
subss xmm1, xmm13
movss xmm0, dword [rsp + 0x50]
subss xmm0, xmm11
movss dword [rbp + 0x3a8], xmm0
movss dword [rbp + 0x3ac], xmm1
test eax, 0xff000000
je 0x18004f2e4
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004f270
lea rdx, [rbp + 0xb0]
add rdx, rcx
lea rax, [rbp + 0xb0]
cmp rax, rdx
je 0x18004f2e4
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3a8]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
movss xmm3, dword [rbx + 0x378]
cvtps2pd xmm3, xmm3
movq r9, xmm3
lea r8, str.M:_.0f
mov edx, 0xc8
lea rcx, [rbp + 0xb0]
call fcn.18004ba50
movaps xmm0, xmmword [0x180064e20]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm7, dword [rsp + 0x54]
movaps xmm1, xmm7
subss xmm1, xmm15
movss xmm6, dword [rsp + 0x50]
movaps xmm0, xmm6
subss xmm0, xmm11
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm1
test eax, 0xff000000
je 0x18004f3e1
lea rcx, [rbp + 0xb0]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x18004f364
lea rcx, [rbp + 0xb0]
add rcx, rax
lea rax, [rbp + 0xb0]
cmp rax, rcx
je 0x18004f3e1
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x60]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
movss xmm7, dword [rsp + 0x54]
movss xmm6, dword [rsp + 0x50]
mov rax, qword [0x18006f068]
cmp byte [rax + 1], 1
je 0x18004f4ad
cmp byte [rax + 3], 1
je 0x18004f4ad
lea r8, [rbx + 0x4438]
cmp dword [r8 + 0x18], 0x10
jbe 0x18004f40d
mov r8, qword [r8]
movaps xmm0, xmmword [0x180064d40]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r9d, eax
addss xmm7, xmm9
subss xmm6, xmm12
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm7
test eax, 0xff000000
je 0x18004f4ad
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x18004f450
add rcx, r8
cmp r8, rcx
je 0x18004f4ad
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x80]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
mov r8, qword [0x18006fbf8]
inc r15d
add r14, 8
mov rcx, qword [0x18006fc00]
sub rcx, r8
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x18004eeb0
mov r15, qword [rbp + 0x3b0]
mov eax, dword [r15 + r12]
cmp dword [0x18006fcb0], eax
jle 0x18004f515
lea rcx, [0x18006fcb0]
call fcn.180056a94
cmp dword [0x18006fcb0], 0xffffffff
jne 0x18004f515
lea rcx, [0x180059640]
call fcn.1800567a0
lea rcx, [0x18006fcb0]
call fcn.180056a34
mov rax, qword [0x18006fbe0]
mov qword [0x18006fbe8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x193cea0]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006fbe8]
test edi, edi
je 0x18004f5a2
nop word [rax + rax]
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x3a0], rax
cmp rdx, qword [0x18006fbf0]
je 0x18004f582
mov qword [rdx], rax
mov rdx, qword [0x18006fbe8]
add rdx, 8
mov qword [0x18006fbe8], rdx
jmp 0x18004f59c
lea r8, [rbp + 0x3a0]
lea rcx, [0x18006fbe0]
call fcn.180014a10
mov rdx, qword [0x18006fbe8]
inc ebx
cmp ebx, edi
jb 0x18004f550
xor r12d, r12d
mov r8, qword [0x18006fbe0]
sub rdx, r8
sar rdx, 3
xorps xmm14, xmm14
test rdx, rdx
je 0x18004f968
xor r14d, r14d
movsd xmm11, qword [0x1800649c0]
movss xmm12, dword [0x180064a98]
movss xmm13, dword [0x180064a8c]
movss xmm10, dword [0x180064a88]
nop word [rax + rax]
mov rbx, qword [r14 + r8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004f607
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004f618
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004f628
cmp ecx, 0xc8
jne 0x18004f939
cmp dword [rbx + 0x3c], 0x64
jne 0x18004f939
mov rax, qword [0x18006f068]
cmp byte [rax + 9], 0
je 0x18004f939
mov r8, qword [0x18006fbe0]
mov rax, qword [r14 + r8]
movss xmm0, dword [rax + 0x11e8]
comiss xmm0, xmm14
jbe 0x18004f940
movsd xmm0, qword [rax + 0x220]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [rax + 0x228]
mov dword [rbp - 0x58], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004f685
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x220]
mov eax, dword [rax + 0x228]
mov dword [rbp - 0x38], eax
movsd qword [rbp - 0x40], xmm0
subss xmm0, dword [rbp - 0x60]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm1, dword [rbp - 0x38]
subss xmm1, dword [rbp - 0x58]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x18004f6d9
sqrtsd xmm0, xmm0
jmp 0x18004f6de
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm12, xmm0
jb 0x18004f939
mov rax, qword [0x18006fbe0]
mov rcx, qword [r14 + rax]
movsd xmm0, qword [rcx + 0x220]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [rcx + 0x228]
mov dword [rbp - 0x78], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004f720
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x220]
mov eax, dword [rax + 0x228]
mov dword [rbp - 0x28], eax
movsd qword [rbp - 0x30], xmm0
subss xmm0, dword [rbp - 0x80]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm1, dword [rbp - 0x28]
subss xmm1, dword [rbp - 0x78]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x18004f774
sqrtsd xmm0, xmm0
jmp 0x18004f779
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm13, xmm0
jb 0x18004f796
movaps xmm0, xmmword [0x180064d00]
movups xmmword [rsp + 0x60], xmm0
lea r15, [rsp + 0x60]
jmp 0x18004f7a5
movaps xmm0, xmmword [0x180064d30]
movups xmmword [rbp + 0x30], xmm0
lea r15, [rbp + 0x30]
mov rax, qword [0x18006fbe0]
mov rcx, qword [r14 + rax]
movsd xmm1, qword [rcx + 0x220]
mov eax, dword [rcx + 0x228]
mov dword [rbp - 8], eax
xor esi, esi
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x10], xmm1
movss dword [rsp + 0x54], xmm0
movss xmm8, dword [rbp - 8]
movss xmm9, dword [rbp - 0x10]
movd xmm7, esi
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [0x1800649dc]
mulss xmm7, dword [0x1800649b8]
divss xmm7, dword [0x180064a50]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm10
addss xmm6, xmm8
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm10
addss xmm0, xmm9
movss dword [rsp + 0x58], xmm6
movsd xmm1, qword [rsp + 0x50]
movss xmm1, xmm0
movsd qword [rsp + 0x50], xmm1
movsd qword [rbp - 0x20], xmm1
mov eax, dword [rsp + 0x58]
mov dword [rbp - 0x18], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf2cda0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1939708]
add rcx, 0x270
lea r8, [rbp + 8]
lea rdx, [rbp - 0x20]
call rbx
movss xmm0, dword [rbp + 8]
movss dword [rbp + 0x3a0], xmm0
movss xmm1, dword [rbp + 0xc]
movss dword [rbp + 0x3a4], xmm1
mov r8d, dword [r13 + 0x7c]
mov eax, dword [r13 + 0x78]
cmp eax, r8d
jne 0x18004f8cd
lea ecx, [rax + 1]
test r8d, r8d
je 0x18004f8b4
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004f8b9
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [r13 + 0x78]
call fcn.180034bb0
mov eax, dword [r13 + 0x78]
movsxd rdx, eax
mov rcx, qword [r13 + 0x80]
mov rax, qword [rbp + 0x3a0]
mov qword [rcx + rdx*8], rax
mov r8d, dword [r13 + 0x78]
inc r8d
mov dword [r13 + 0x78], r8d
inc esi
cmp esi, 0x63
jle 0x18004f7e1
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.180020740
movss xmm0, dword [0x1800649bc]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, eax
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d220
mov dword [r13 + 0x78], 0
mov r8, qword [0x18006fbe0]
inc r12d
add r14, 8
mov rcx, qword [0x18006fbe8]
sub rcx, r8
sar rcx, 3
movsxd rax, r12d
cmp rax, rcx
jb 0x18004f5f0
mov r15, qword [rbp + 0x3b0]
mov r14, qword [rbp + 0x3b8]
mov eax, dword [r15 + r14]
cmp dword [0x18006fca8], eax
jle 0x18004f9a8
lea rcx, [0x18006fca8]
call fcn.180056a94
cmp dword [0x18006fca8], 0xffffffff
jne 0x18004f9a8
lea rcx, [0x1800595d0]
call fcn.1800567a0
lea rcx, [0x18006fca8]
call fcn.180056a34
mov rax, qword [0x18006fbc8]
mov qword [0x18006fbd0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1939748]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor r12d, r12d
mov ebx, r12d
mov rdx, qword [0x18006fbd0]
test edi, edi
je 0x18004fa32
nop dword [rax]
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x3a0], rax
cmp rdx, qword [0x18006fbd8]
je 0x18004fa12
mov qword [rdx], rax
mov rdx, qword [0x18006fbd0]
add rdx, 8
mov qword [0x18006fbd0], rdx
jmp 0x18004fa2c
lea r8, [rbp + 0x3a0]
lea rcx, [0x18006fbc8]
call fcn.180014a10
mov rdx, qword [0x18006fbd0]
inc ebx
cmp ebx, edi
jb 0x18004f9e0
mov edi, r12d
mov dword [rbp + 0x3a0], r12d
sub rdx, qword [0x18006fbc8]
sar rdx, 3
test rdx, rdx
je 0x1800503fc
movabs rsi, 0xcbf29ce484222325
movss xmm7, dword [0x180064a1c]
movss xmm8, dword [0x180064a24]
movss xmm9, dword [0x180064a2c]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004fa9e
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004faaf
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004fabf
cmp ecx, 0xc8
jne 0x18004fc85
cmp dword [rbx + 0x3c], 0x64
jne 0x18004fc85
mov rax, qword [0x18006f068]
cmp byte [rax + 5], 0
je 0x18004fc85
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
je 0x18004fae9
mov rax, qword [rax]
movss xmm6, dword [rax + 0x1890]
addss xmm6, dword [rax + 0x1934]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
mov eax, dword [r15 + r14]
cmp dword [0x18006fcb8], eax
jle 0x18004fb46
lea rcx, [0x18006fcb8]
call fcn.180056a94
cmp dword [0x18006fcb8], 0xffffffff
jne 0x18004fb46
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x235780
mov qword [0x18006fcd0], rax
lea rcx, [0x18006fcb8]
call fcn.180056a34
mov rcx, rbx
call qword [0x18006fcd0]
test al, al
je 0x18004fc85
movss xmm0, dword [rbx + 0x11e8]
comiss xmm0, xmm14
jbe 0x18004fc85
mov rax, qword [0x18006fbc8]
mov rcx, qword [rax + r12*8]
comiss xmm6, dword [rcx + 0x11e8]
jb 0x18004fc85
movss xmm0, dword [rcx + 0x1934]
comiss xmm0, dword [0x180064a00]
jbe 0x18004fc85
lea rdx, [rsp + 0x50]
call fcn.180055c60
mov rbx, qword [0x18006f9d0]
test rbx, rbx
je 0x18004fc85
mov dword [rbp - 0x60], 0x3f800000
mov dword [rbp - 0x5c], 0x3f800000
mov qword [rbp - 0x80], 0
movss xmm3, dword [rsp + 0x54]
subss xmm3, dword [0x180064a34]
movaps xmm2, xmm3
addss xmm2, xmm7
movss xmm1, dword [rsp + 0x50]
subss xmm1, xmm8
movaps xmm0, xmm1
addss xmm0, xmm9
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm2
movss dword [rbp - 0x40], xmm1
movss dword [rbp - 0x3c], xmm3
mov rdi, qword [r13 + 0x98]
cmp rbx, rdi
je 0x18004fc19
mov rdx, rbx
mov rcx, r13
call fcn.18003cf30
mov edx, 6
lea r8d, [rdx - 2]
mov rcx, r13
call fcn.18003cfb0
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x10]
lea rdx, [rbp - 0x40]
mov rcx, r13
call fcn.18003d0d0
cmp rbx, rdi
je 0x18004fc7f
movsxd rcx, dword [r13 + 0x68]
lea eax, [rcx - 1]
mov dword [r13 + 0x68], eax
test eax, eax
jne 0x18004fc67
xor eax, eax
jmp 0x18004fc70
mov rax, qword [r13 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r13 + 0x98], rax
mov rcx, r13
call fcn.18003cce0
mov edi, dword [rbp + 0x3a0]
mov rax, qword [0x18006f068]
movabs rbx, 0x100000001b3
cmp byte [rax + 0x14], 0
je 0x18004fdc3
mov rax, qword [0x18006fbc8]
mov r9, qword [rax + r12*8]
mov rdx, qword [r9 + 0x41d8]
mov r8, rsi
nop word [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor r8, rcx
imul r8, rbx
test cl, cl
jne 0x18004fcc0
mov rdx, qword [0x18006fb60]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x18004fcff
cmp qword [rax + 0x20], r8
jge 0x18004fcf3
mov rax, qword [rax + 0x10]
jmp 0x18004fcf9
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18004fce7
cmp byte [rcx + 0x19], 0
jne 0x18004fdc3
cmp r8, qword [rcx + 0x20]
jl 0x18004fdc3
cmp rcx, rdx
je 0x18004fdc3
mov rcx, qword [0x18006fb30]
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x18004fd48
nop dword [rax]
cmp qword [rax + 0x20], r9
jae 0x18004fd3c
mov rax, qword [rax + 0x10]
jmp 0x18004fd42
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18004fd30
cmp byte [rcx + 0x19], 0
jne 0x18004fd58
cmp r9, qword [rcx + 0x20]
jb 0x18004fd58
mov al, 1
jmp 0x18004fd5a
xor al, al
test al, al
jne 0x18004fdc3
mov qword [rsp + 0x60], r8
movsd xmm1, qword [r9 + 0x220]
mov eax, dword [r9 + 0x228]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x74], 0
mov qword [rbp + 0x90], r9
movups xmm0, xmmword [rsp + 0x60]
unpcklpd xmm0, xmm1
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rbp + 0x98], xmm0
movsd xmm0, qword [rsp + 0x70]
movsd qword [rbp + 0xa8], xmm0
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x80]
lea rcx, [0x18006fb30]
call fcn.180051210
mov rax, qword [0x18006f068]
cmp byte [rax + 0x13], 0
je 0x1800503d0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1955bf8
jne 0x1800501e1
xor r14d, r14d
xor esi, esi
xor r9d, r9d
lea r8, [rbp + 0x3a8]
xor edx, edx
lea rcx, [0x18006fc10]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x180050471
cmp dword [rbp + 0x3a8], 0
je 0x18004fea9
test r14, r14
je 0x18004fe8f
mov rax, qword [0x18006f068]
cmp dword [rax + 0x28], 0
jbe 0x18004fe8f
mov r9, qword [r14 + 0x41d8]
movabs r8, 0xcbf29ce484222325
nop
movsx rdx, byte [r9]
lea r9, [r9 + 1]
xor r8, rdx
imul r8, rbx
test dl, dl
jne 0x18004fe40
mov qword [rbp - 0x20], r8
lea rdx, [rbp - 0x20]
mov rcx, qword [0x18006f070]
call fcn.1800179a0
mov rcx, qword [0x18006f068]
mov edx, dword [rcx + 0x28]
dec edx
lea r9, [rdx + rdx*2]
add r9, r9
mov rdx, qword [rax]
mov r8d, dword [rdx + r9*8 + 0x28]
mov rdx, qword [rdx + r9*8]
mov rcx, r14
call fcn.180056140
nop
xor r8d, r8d
xor edx, edx
lea rcx, [0x18006fc10]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x180050471
mov rcx, qword [r14 + 0x41c8]
sub rcx, qword [r14 + 0x41c0]
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movabs r9, 0x100000001b3
je 0x18004ff73
mov r8, qword [r14 + 0x41d8]
movabs rdx, 0xcbf29ce484222325
nop dword [rax]
nop word [rax + rax]
movsx rcx, byte [r8]
lea r8, [r8 + 1]
xor rdx, rcx
imul rdx, r9
test cl, cl
jne 0x18004ff00
movabs rax, 0xf984545cfa78101f
cmp rdx, rax
je 0x1800503bf
movabs rax, 0x2d0a42b1a4f18a79
cmp rdx, rax
je 0x1800503bf
mov rax, qword [r14 + 0x41c0]
mov edx, dword [r14 + 0x41f8]
cmp dword [rax + 0x20], edx
je 0x18004ff73
mov dword [rax + 0x20], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4470
mov dl, 1
lea rcx, [r14 + 0x41c0]
call rax
nop
movabs r9, 0x100000001b3
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
mov r8, qword [rbx + 0x41d8]
movabs rdi, 0xcbf29ce484222325
nop
movsx rdx, byte [r8]
lea r8, [r8 + 1]
xor rdi, rdx
imul rdi, r9
test dl, dl
jne 0x18004ff90
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x205fa0
mov rcx, rbx
call rax
mov r15, rax
test rax, rax
je 0x18005031a
mov rcx, qword [0x18006f068]
cmp byte [rcx + 0x15], 0
je 0x1800500fd
movabs rax, 0xdccb83f12e64ce0
cmp rdi, rax
je 0x18004fff5
movabs rax, 0x80dccc539a84ddb5
cmp rdi, rax
jne 0x1800500fd
mov rax, qword [0x18006fbc8]
mov rcx, qword [rax + r12*8]
movsd xmm0, qword [rcx + 0x220]
movsd qword [rbp + 0x30], xmm0
mov eax, dword [rcx + 0x228]
mov dword [rbp + 0x38], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf2cda0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1939708]
add rcx, 0x270
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x30]
call rbx
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r8d, eax
movss xmm0, dword [rbp + 0x18]
movss dword [rbp - 0x30], xmm0
movss xmm1, dword [rbp + 0x1c]
movss dword [rbp - 0x2c], xmm1
lea rdx, str.Timo
movabs rax, 0xdccb83f12e64ce0
cmp rdi, rax
lea rax, str.Clown
cmove rdx, rax
test r8d, 0xff000000
je 0x1800500fd
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1800500a1
add rcx, rdx
cmp rdx, rcx
je 0x1800500fd
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x30]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
movabs rax, 0x37d1bfa7d195ebf9
cmp rdi, rax
je 0x180050218
movabs rax, 0x92fe97d6caa88c20
cmp rdi, rax
je 0x180050218
movabs rax, 0xa854d43ddb55ddcc
cmp rdi, rax
je 0x180050218
movabs rax, 0xb8f3ad4931029355
cmp rdi, rax
je 0x180050218
movabs rax, 0xaedcd71796ade290
cmp rdi, rax
movabs rax, 0xdb76082138fdee7f
je 0x180050222
cmp rdi, rax
je 0x180050222
movabs rax, 0xf17870527758213f
cmp rdi, rax
je 0x1800503b2
movabs rax, 0x8499db0ed7bb81cf
cmp rdi, rax
je 0x1800503b2
mov edx, dword [r15 + 0x41f8]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x1800503b2
cmp dword [rbx + 0x41f8], edx
je 0x1800503b2
mov dword [rbx + 0x41f8], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4470
mov dl, 1
lea rcx, [rbx + 0x41c0]
call rax
nop
jmp 0x1800503b2
mov r14, qword [rax]
test r14, r14
je 0x18004fdeb
mov rdx, qword [r14 + 0x41d8]
nop dword [rax]
nop dword [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor rsi, rcx
imul rsi, rbx
test cl, cl
jne 0x180050200
jmp 0x18004fded
movabs rax, 0xdb76082138fdee7f
test r14, r14
je 0x180050230
cmp r15, r14
jne 0x1800503b2
cmp rdi, rax
jne 0x1800502cb
movabs rax, 0x222b948fbf568318
cmp rsi, rax
mov rax, qword [0x18006fbc8]
jne 0x180050291
mov r8d, dword [r15 + 0x41f8]
mov rcx, qword [rax + r12*8]
cmp r8d, 0xffffffff
je 0x1800503b2
add rcx, 0x41c0
cmp dword [rcx + 0x38], r8d
je 0x1800503b2
mov dword [rcx + 0x38], r8d
mov rax, qword [rcx]
mov qword [rcx + 8], rax
lea rdx, str.Yone
call fcn.18004a720
jmp 0x1800503b2
mov rbx, qword [rax + r12*8]
cmp dword [rbx + 0x41f8], 0
je 0x1800503b2
mov dword [rbx + 0x41f8], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4470
mov dl, 1
lea rcx, [rbx + 0x41c0]
call rax
nop
jmp 0x1800503b2
mov rax, qword [0x18006f068]
mov edx, dword [rax + 0x30]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x1800503b2
cmp dword [rbx + 0x41f8], edx
je 0x1800503b2
mov dword [rbx + 0x41f8], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4470
mov dl, 1
lea rcx, [rbx + 0x41c0]
call rax
nop
jmp 0x1800503b2
movabs rax, 0x1ecf7680ae6d72bd
cmp rdi, rax
jne 0x18005033a
movabs rax, 0xfca7b000ade2abcb
cmp rsi, rax
je 0x180050373
jmp 0x1800503b2
movabs rax, 0xfcb981acde90c192
cmp rdi, rax
jne 0x180050355
movabs rax, 0x6972baf895e90386
jmp 0x180050333
movabs rax, 0xfc61c19e80fc9d68
cmp rdi, rax
jne 0x1800503b2
movabs rax, 0xf01bf70c1ff22b66
cmp rsi, rax
jne 0x1800503b2
mov edx, dword [r14 + 0x41f8]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x1800503b2
cmp dword [rbx + 0x41f8], edx
je 0x1800503b2
mov dword [rbx + 0x41f8], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4470
mov dl, 1
lea rcx, [rbx + 0x41c0]
call rax
nop
mov r15, qword [rbp + 0x3b0]
mov edi, dword [rbp + 0x3a0]
mov r14, qword [rbp + 0x3b8]
movabs rsi, 0xcbf29ce484222325
inc edi
mov dword [rbp + 0x3a0], edi
inc r12
mov rcx, qword [0x18006fbd0]
sub rcx, qword [0x18006fbc8]
sar rcx, 3
movsxd rax, edi
cmp rax, rcx
jb 0x18004fa80
xor r12d, r12d
mov rax, qword [0x18006f068]
cmp byte [rax + 0x14], 0
je 0x180050b72
mov rbx, qword [0x18006fb40]
mov rbx, qword [rbx]
movss xmm10, dword [0x180064aa0]
cmp byte [rbx + 0x19], 0
jne 0x180050709
movabs r15, 0x555555555555555
lea r14, [0x18006fb60]
movss xmm8, dword [0x1800649f4]
movss xmm9, dword [0x1800649e4]
nop dword [rax]
mov rcx, qword [0x18006fb30]
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x180050484
mov rdx, qword [rbx + 0x20]
cmp qword [rax + 0x20], rdx
jae 0x180050478
mov rax, qword [rax + 0x10]
jmp 0x18005047e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180050465
cmp byte [rcx + 0x19], 0
jne 0x180050498
mov rax, qword [rcx + 0x20]
cmp qword [rbx + 0x20], rax
jb 0x180050498
mov al, 1
jmp 0x18005049a
xor al, al
test al, al
jne 0x1800505d5
mov rax, qword [rbx + 0x20]
mov qword [rbp - 0x10], rax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rbp - 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rbp], eax
mov rdi, qword [rbx + 0x28]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm6, dword [rax + 0x1943758]
mov rsi, qword [0x18006fb60]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], r12d
mov rcx, rsi
cmp byte [rax + 0x19], 0
jne 0x18005051a
nop dword [rax]
mov qword [rsp + 0x60], rax
cmp qword [rax + 0x20], rdi
jge 0x180050506
mov dword [rsp + 0x68], r12d
mov rax, qword [rax + 0x10]
jmp 0x180050514
mov dword [rsp + 0x68], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1800504f0
cmp byte [rcx + 0x19], 0
jne 0x180050526
cmp rdi, qword [rcx + 0x20]
jge 0x180050580
cmp qword [0x18006fb68], r15
je 0x180050bcc
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r12
mov ecx, 0x30
call fcn.1800563fc
nop
mov qword [rax + 0x20], rdi
mov dword [rax + 0x28], r12d
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov word [rax + 0x18], 0
mov qword [rbp - 0x58], r12
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rax
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.180014d70
mov rcx, rax
addss xmm6, dword [rcx + 0x28]
mov rax, qword [rbx + 0x20]
mov qword [rbp + 0x90], rax
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rbp + 0x98], xmm0
movsd xmm1, qword [rbp]
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm6
shufps xmm1, xmm1, 0xe1
movsd qword [rbp], xmm1
movsd qword [rbp + 0xa8], xmm1
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x80]
lea rcx, [0x18006fb50]
call fcn.180051210
jmp 0x1800506a7
movsd xmm7, qword [rbx + 0x30]
mov eax, dword [rbx + 0x38]
mov dword [rsp + 0x58], eax
movabs rax, qword [0x141946710]
mov rcx, qword [rax + 0x240]
movss xmm6, dword [rcx + 0x64]
movss xmm1, dword [rcx + 0x6c]
movss xmm0, dword [rsp + 0x58]
divss xmm0, xmm10
divss xmm7, xmm10
mulss xmm7, dword [rcx + 0x68]
addss xmm7, dword [rcx + 0x60]
addss xmm6, xmm1
mulss xmm1, xmm0
subss xmm6, xmm1
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov edi, eax
movss dword [rbp + 0x3a0], xmm7
movss dword [rbp + 0x3a4], xmm6
test eax, 0xff000000
je 0x1800506a7
mov dword [rsp + 0x28], 0x63
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm14
movaps xmm2, xmm9
lea rdx, [rbp + 0x3a0]
mov rcx, r13
call fcn.18003ebd0
movss xmm0, dword [0x1800649bc]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [r13 + 0x78]
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d220
mov dword [r13 + 0x78], r12d
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1800506d8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1800506d3
nop dword [rax + rax]
cmp rbx, qword [rax + 0x10]
jne 0x1800506d3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1800506c0
mov rbx, rax
jmp 0x1800506ff
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1800506ff
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1800506f0
cmp byte [rbx + 0x19], 0
je 0x180050450
lea rcx, [0x18006fb40]
call fcn.180050e30
movzx r9d, byte [rbp + 0x3a0]
mov r8, qword [0x18006fb40]
mov rdx, qword [0x18006fb30]
mov rdx, qword [rdx + 8]
lea rcx, [0x18006fb40]
call fcn.1800532e0
mov rcx, qword [0x18006fb40]
mov qword [rcx + 8], rax
mov rax, qword [0x18006fb38]
mov qword [0x18006fb48], rax
mov r8, qword [0x18006fb40]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x1800507b3
mov rcx, qword [rdx]
cmp byte [rcx + 0x19], 0
jne 0x18005077f
nop
mov rdx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050770
mov qword [r8], rdx
mov rdx, qword [0x18006fb40]
mov rcx, qword [rdx + 8]
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1800507ad
nop word [rax + rax]
mov rcx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
je 0x1800507a0
mov qword [rdx + 0x10], rcx
jmp 0x1800507c1
mov qword [r8], r8
mov rax, qword [0x18006fb40]
mov qword [rax + 0x10], rax
mov rdi, qword [0x18006fb30]
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x1800507ff
mov r8, qword [rbx + 0x10]
lea rdx, [0x18006fb30]
lea rcx, [0x18006fb30]
call fcn.18001c6b0
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x40
call fcn.1800567c0
cmp byte [rbx + 0x19], 0
je 0x1800507d2
mov qword [rdi + 8], rdi
mov qword [rdi], rdi
mov qword [rdi + 0x10], rdi
mov qword [0x18006fb38], r12
mov rax, qword [0x18006fb50]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180050b72
movabs rdi, 0x141946710
movss xmm8, dword [0x1800649e8]
nop word [rax + rax]
movsd xmm6, qword [rbx + 0x30]
mov eax, dword [rbx + 0x38]
mov dword [rsp + 0x58], eax
mov rax, qword [rdi]
mov rcx, qword [rax + 0x240]
movss xmm7, dword [rcx + 0x64]
movss xmm1, dword [rsp + 0x58]
divss xmm1, xmm10
divss xmm6, xmm10
mulss xmm6, dword [rcx + 0x68]
addss xmm6, dword [rcx + 0x60]
addss xmm7, dword [rcx + 0x6c]
mulss xmm1, dword [rcx + 0x6c]
subss xmm7, xmm1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm0, dword [rbx + 0x3c]
subss xmm0, dword [rax + 0x1943758]
comiss xmm0, xmm14
jbe 0x180050ab4
cvttss2si r8d, xmm0
lea r9, [rbp - 0x4b]
test r8d, r8d
jns 0x180050900
neg r8d
nop dword [rax]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x1800508c0
dec r9
mov byte [r9], 0x2d
jmp 0x18005092a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180050900
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov r10d, 0xf
mov qword [rbp - 0x68], r10
mov byte [rbp - 0x80], 0
lea rax, [rbp - 0x4b]
cmp r9, rax
je 0x180050960
lea r8, [rbp - 0x4b]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x80]
call fcn.1800091b0
mov r10, qword [rbp - 0x68]
lea r8, [rbp - 0x80]
mov r9, qword [rbp - 0x80]
cmp r10, 0x10
cmovae r8, r9
movaps xmm0, xmmword [0x180064e60]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.180020740
mov r11d, eax
subss xmm7, xmm8
subss xmm6, dword [0x180064a00]
movss dword [rbp + 0x3a0], xmm6
movss dword [rbp + 0x3a4], xmm7
test eax, 0xff000000
je 0x180050a1c
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], 0
jne 0x1800509b4
add rcx, r8
cmp r8, rcx
je 0x180050a1c
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r11d
lea r9, [rbp + 0x3a0]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043420
mov r10, qword [rbp - 0x68]
mov r9, qword [rbp - 0x80]
cmp r10, 0x10
jb 0x180050a53
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x180050a4b
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050bc5
mov rcx, r9
call fcn.1800567c0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x180050a82
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x180050a7a
cmp rbx, qword [rax + 0x10]
jne 0x180050a7a
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x180050a67
mov rbx, rax
jmp 0x180050b65
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x180050b65
nop dword [rax]
nop word [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050aa0
jmp 0x180050b65
mov rdx, rbx
lea r8, [rbx + 0x10]
mov rax, qword [r8]
cmp byte [rax + 0x19], 0
je 0x180050b08
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x180050ae3
nop
cmp rbx, qword [rax + 0x10]
jne 0x180050ae3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x180050ad0
mov rbx, rax
mov rcx, qword [rdx + 8]
cmp byte [rcx + 0x19], 0
jne 0x180050b4c
mov rax, rdx
cmp rax, qword [rcx + 0x10]
jne 0x180050b4c
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x180050af3
jmp 0x180050b4c
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x180050b2f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050b20
mov rax, qword [r8]
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x180050b4c
nop dword [rax + rax]
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050b40
lea rcx, [0x18006fb50]
call fcn.180015df0
mov edx, 0x40
mov rcx, rax
call fcn.1800567c0
cmp rbx, qword [0x18006fb50]
jne 0x180050840
lea r11, [rsp + 0x458]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180003d10
int3