Function at 0x1800087d0
Capabilities:
Create thread
Encode data using xor
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x15a8]
mov eax, 0x16a8
call fcn.18004eb30
sub rsp, rax
movaps xmmword [rsp + 0x1690], xmm6
movaps xmmword [rsp + 0x1680], xmm7
movaps xmmword [rsp + 0x1670], xmm8
movaps xmmword [rsp + 0x1660], xmm9
movaps xmmword [rsp + 0x1650], xmm10
movaps xmmword [rsp + 0x1640], xmm11
movaps xmmword [rsp + 0x1630], xmm12
movaps xmmword [rsp + 0x1620], xmm13
movaps xmmword [rsp + 0x1610], xmm14
movaps xmmword [rsp + 0x1600], xmm15
xor esi, esi
mov rdx, qword [0x180085dd8]
add rdx, 0x1f90
lea rcx, [rsp + 0x40]
call fcn.18000d390
movss xmm0, dword [rsp + 0x40]
movss dword [0x180085ec8], xmm0
movss xmm1, dword [rsp + 0x44]
movss dword [0x180085ecc], xmm1
movss xmm0, dword [rsp + 0x48]
movss dword [0x180085ed0], xmm0
movss xmm1, dword [rsp + 0x4c]
movss dword [0x180085e60], xmm1
movss xmm0, dword [rsp + 0x50]
movss dword [0x180085e64], xmm0
movss xmm1, dword [rsp + 0x54]
movss dword [0x180085e68], xmm1
movss xmm0, dword [rsp + 0x58]
movss dword [0x180085e00], xmm0
mov r13d, 0x539
movss xmm9, dword [0x1800564d0]
movss dword [rbp + 0x15f8], xmm9
mov r12d, esi
lea rcx, [0x180085e38]
call fcn.18000b1d0
xorps xmm14, xmm14
movss xmm13, dword [0x1800562f8]
movsd xmm8, qword [0x1800563c0]
movss xmm11, dword [0x180056334]
test rax, rax
je 0x18000a175
mov r14d, dword [0x1800856f8]
mov ebx, esi
nop
mov rdx, rbx
lea rcx, [0x180085e38]
call fcn.18000b1a0
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.180004c70
nop
mov rcx, qword [rbp + 0x1e0]
add rcx, 0x1b0
call fcn.18000d0b0
movss dword [rbp - 0x80], xmm0
comiss xmm14, xmm0
jae 0x180008966
comiss xmm0, dword [0x1800564b4]
jbe 0x18000897c
mov rdx, rbx
lea rcx, [0x180085e38]
call fcn.18000b1a0
mov byte [rax + 0xac], 0
cmp byte [rbp + 0x25c], 0
jne 0x1800089e6
lea rdx, [rbp + 0x2c0]
lea rcx, [0x180085e38]
call fcn.18000b250
mov rbx, qword [rax]
lea rdx, [rbp + 0x2b8]
lea rcx, [0x180085e38]
call fcn.18000b2b0
lea r9, [rbp + 0x1b0]
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0x180]
call fcn.18000d270
mov r8, qword [rbp + 0x180]
lea rdx, [rbp + 0x2b0]
lea rcx, [0x180085e38]
call fcn.18000b310
jmp 0x18000a126
mov rcx, qword [rbp + 0x1b0]
mov rax, qword [rbp + 0x1c0]
add rax, 0x3d8
add rcx, rax
call fcn.18000cf80
lea rcx, [rax + 0x610]
call fcn.18000cf80
mov rdi, rax
mov rdx, qword [rbp + 0x1b8]
mov rcx, qword [rbp + 0x1c8]
add rdx, 0x5e0
add rcx, rdx
call fcn.18000d120
mov ebx, eax
lea rcx, [rdi + 0xf8]
call fcn.18000d120
cmp ebx, 0x67
sete cl
cmp eax, dword [0x180085df4]
jne 0x180008a52
test cl, cl
je 0x18000a126
mov rcx, qword [rbp + 0x1c0]
add rcx, 0x38
call fcn.18000d120
cmp eax, 0x11e0101
jne 0x18000a126
mov rcx, qword [rbp + 0x1c0]
add rcx, 0x101
call fcn.18000d0f0
movzx esi, al
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x4e0]
call fcn.180004c70
mov rdi, rax
mov qword [rbp + 0x15f0], rax
mov rcx, qword [rax + 0x18]
add rcx, 0x384
call fcn.18000d0b0
movaps xmm6, xmm0
mov rcx, qword [rdi + 0x18]
add rcx, 0x380
call fcn.18000d0b0
addss xmm6, dword [0x1800562c0]
comiss xmm6, xmm0
setae bl
lea rcx, [rdi + 0x80]
call fcn.18000c020
lea rcx, [rdi + 0x60]
call fcn.18000c020
lea rcx, [rdi + 0x40]
call fcn.18000c020
test bl, bl
je 0x180008afd
test sil, sil
je 0x180008afd
mov r15b, 1
jmp 0x180008b00
xor r15b, r15b
cmp byte [0x180085dc5], 1
jne 0x180008b65
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x4e0]
call fcn.180004c70
mov rbx, rax
mov qword [rbp + 0x15f0], rax
mov rcx, qword [rax + 0x18]
add rcx, 0x384
call fcn.18000d0b0
mov rcx, qword [rbx + 0x18]
add rcx, 0x380
call fcn.18000d0b0
nop
lea rcx, [rbx + 0x80]
call fcn.18000c020
lea rcx, [rbx + 0x60]
call fcn.18000c020
lea rcx, [rbx + 0x40]
call fcn.18000c020
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x4e0]
call fcn.180004c70
mov r8, rax
xor edx, edx
lea rcx, [rbp]
call fcn.1800031c0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x4e0]
call fcn.180004c70
mov r8, rax
mov edx, 8
lea rcx, [rbp - 0x60]
call fcn.1800031c0
movsd xmm10, qword [rbp - 0x60]
movsd qword [rbp + 0x190], xmm10
mov ebx, dword [rbp - 0x58]
mov dword [rbp + 0x198], ebx
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x70]
call fcn.180002ed0
movss xmm15, dword [rbp]
movss dword [rbp + 0x100], xmm15
movss xmm0, dword [rbp + 4]
movss dword [rbp + 0x104], xmm0
movss xmm6, dword [rbp + 8]
movss dword [rbp + 0x1600], xmm6
movss dword [rbp + 0x108], xmm6
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x10]
call fcn.180002ed0
movss xmm9, dword [rbp - 0x60]
movss dword [rbp + 0xc0], xmm9
movss xmm8, dword [rbp - 0x5c]
movss dword [rbp + 0xc4], xmm8
movd xmm7, ebx
movss dword [rbp - 0x58], xmm7
movss dword [rbp + 0xc8], xmm7
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x70]
call fcn.180002ed0
movaps xmm0, xmm7
addss xmm0, dword [0x180056424]
movss dword [rbp + 0xd0], xmm9
movss dword [rbp + 0xd4], xmm8
movss dword [rbp + 0xd8], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x280]
call fcn.180002ed0
movss xmm12, dword [rbp + 0x284]
subss xmm12, dword [rbp - 0xc]
andps xmm12, xmmword [0x180056ad0]
cvtps2pd xmm0, xmm12
mulsd xmm0, qword [0x180056368]
cvtpd2ps xmm11, xmm0
addss xmm7, dword [0x180056440]
subss xmm6, dword [0x1800563f0]
movsd qword [rbp + 0x1a0], xmm10
mov dword [rbp + 0x1a8], ebx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x160]
call fcn.180002ed0
movss dword [rbp + 0xe0], xmm15
movss xmm10, dword [rbp + 4]
movss dword [rbp + 0xe4], xmm10
movss dword [rbp + 0xe8], xmm6
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x40]
call fcn.180002ed0
movss dword [rbp + 0xf0], xmm9
movss dword [rbp + 0xf4], xmm8
movss dword [rbp + 0xf8], xmm7
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x170]
call fcn.180002ed0
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax + r14*8]
mov eax, dword [rbx + rdi]
cmp dword [0x180085f54], eax
jle 0x180008d8e
lea rcx, [0x180085f54]
call fcn.18004da84
cmp dword [0x180085f54], 0xffffffff
jne 0x180008d8e
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x180085f5c], eax
lea rcx, [0x180085f54]
call fcn.18004da24
mov eax, dword [rbx + rdi]
cmp dword [0x180085f58], eax
jle 0x180008dcb
lea rcx, [0x180085f58]
call fcn.18004da84
cmp dword [0x180085f58], 0xffffffff
jne 0x180008dcb
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x180085f78], eax
lea rcx, [0x180085f58]
call fcn.18004da24
mov edx, dword [0x180085f5c]
shr edx, 1
lea ecx, [rdx + 0x226]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
movss dword [0x180085ed8], xmm0
mov eax, dword [0x180085f78]
shr eax, 1
sub edx, eax
lea eax, [rdx - 0x12c]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x180085edc], xmm0
mov rcx, qword [rbp + 0x1c0]
add rcx, 0x238
call fcn.18000cf00
lea rdx, [rax + 0x164]
lea rcx, [rbp - 0x50]
call fcn.18000d070
movss xmm7, dword [rbp - 0x48]
movaps xmm1, xmm7
subss xmm1, dword [0x180085ed0]
movss xmm9, dword [rbp - 0x4c]
movaps xmm0, xmm9
subss xmm0, dword [0x180085ecc]
movss xmm6, dword [rbp - 0x50]
movss dword [rbp + 0x1608], xmm6
movaps xmm2, xmm6
subss xmm2, dword [0x180085ec8]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180008e8d
xorps xmm8, xmm8
sqrtss xmm8, xmm2
jmp 0x180008e99
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm8, xmm0
divss xmm8, dword [0x1800564c4]
addss xmm8, xmm8
movss dword [rbp + 0x15f0], xmm8
movaps xmm1, xmm6
unpcklps xmm1, xmm9
movsd qword [rbp - 0x50], xmm1
movsd qword [rbp + 0x130], xmm1
movss dword [rbp - 0x48], xmm7
movss dword [rbp + 0x138], xmm7
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0xa8]
call fcn.180002ed0
subss xmm10, dword [0x180085ecc]
movss xmm1, dword [0x180056388]
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
subss xmm15, dword [0x180085ec8]
movss xmm10, dword [0x180056388]
movaps xmm1, xmm10
movaps xmm0, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movss xmm0, dword [rbp + 0x1600]
subss xmm0, dword [0x180085ed0]
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x180008f52
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x180008f5a
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm0, dword [0x180056450]
movss dword [rbp + 0x1600], xmm0
movss xmm2, dword [0x180085e80]
subss xmm2, dword [rbp + 0x1608]
movss xmm3, dword [0x180085e84]
subss xmm3, xmm9
movss xmm1, dword [0x180085e88]
subss xmm1, xmm7
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm3, xmm2
mulss xmm1, xmm1
addss xmm3, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x180008fb8
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x180008fc0
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mulss xmm0, dword [0x1800562b4]
movss dword [rbp + 0x1608], xmm0
cmp byte [0x1800854d2], 0
je 0x180009538
movaps xmm1, xmmword [0x1800565d0]
movups xmmword [rsp + 0x60], xmm1
movaps xmm2, xmmword [0x180056a10]
movups xmmword [rbp + 0x290], xmm2
movaps xmm0, xmmword [0x180056820]
movups xmmword [rsp + 0x40], xmm0
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
mov r10, rax
lea rcx, [rsp + 0x60]
call fcn.1800116f0
movss xmm3, dword [0x180085edc]
movaps xmm2, xmm3
addss xmm2, dword [0x18005646c]
movss xmm1, dword [0x180085ed8]
movaps xmm0, xmm1
addss xmm0, dword [0x180056478]
movss dword [rbp + 0x10], xmm0
movss dword [rbp + 0x14], xmm2
movss dword [rbp + 0x18], xmm1
movss dword [rbp + 0x1c], xmm3
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x18]
mov rcx, r10
call fcn.180032110
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
mov r10, rax
lea rcx, [rbp + 0x290]
call fcn.1800116f0
movss xmm3, dword [0x180085edc]
movaps xmm2, xmm3
addss xmm2, dword [0x18005646c]
movss xmm1, dword [0x180085ed8]
movaps xmm0, xmm1
addss xmm0, dword [0x180056478]
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm2
movss dword [rbp + 0x28], xmm1
movss dword [rbp + 0x2c], xmm3
movss xmm8, dword [0x18005633c]
movss dword [rsp + 0x30], xmm8
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x28]
mov rcx, r10
call fcn.180032000
movss xmm6, dword [0x180085ed8]
movss xmm15, dword [0x180056454]
addss xmm6, xmm15
movss xmm7, dword [0x180085edc]
movss xmm9, dword [0x18005644c]
addss xmm7, xmm9
lea rcx, [rsp + 0x40]
call fcn.1800116f0
mov ebx, eax
movaps xmm1, xmm7
addss xmm1, xmm9
movss dword [rbp + 0x30], xmm6
movss dword [rbp + 0x34], xmm7
movaps xmm0, xmm6
unpcklps xmm0, xmm1
movsd qword [rsp + 0x60], xmm0
mov rcx, qword [0x180085e10]
mov rcx, qword [rcx + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.180013eb0
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.180031ea0
movaps xmm1, xmm7
subss xmm1, xmm9
movss dword [rbp + 0x38], xmm6
movss dword [rbp + 0x3c], xmm7
movaps xmm0, xmm6
unpcklps xmm0, xmm1
movsd qword [rsp + 0x60], xmm0
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x38]
mov rcx, rax
call fcn.180031ea0
movaps xmm0, xmm6
addss xmm0, xmm15
movss dword [rbp + 0xa0], xmm6
movss dword [rbp + 0xa4], xmm7
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.180031ea0
movaps xmm0, xmm6
subss xmm0, xmm15
movss dword [rbp + 0x40], xmm6
movss dword [rbp + 0x44], xmm7
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x40]
mov rcx, rax
call fcn.180031ea0
movaps xmm0, xmmword [0x180056a30]
movaps xmmword [rsp + 0x40], xmm0
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
mov r8, rax
lea rcx, [rsp + 0x40]
call fcn.1800116f0
addss xmm6, xmm8
cvttss2si ecx, xmm6
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x48], xmm0
addss xmm7, xmm8
cvttss2si ecx, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x4c], xmm0
mov dword [rsp + 0x20], 0xa
mov r9d, eax
movss xmm2, dword [0x1800563a0]
lea rdx, [rbp + 0x48]
mov rcx, r8
call fcn.1800326d0
mov rdx, qword [rbp + 0x1d8]
add rdx, 0x164
lea rcx, [rbp + 0x140]
call fcn.18000d070
movsd xmm8, qword [rbp + 0x140]
mov eax, dword [rbp + 0x148]
mov dword [rsp + 0x68], eax
movss xmm9, dword [0x180085ed8]
addss xmm9, xmm15
movss xmm10, dword [0x180085edc]
addss xmm10, dword [0x18005644c]
mov rcx, qword [0x180085dd0]
add rcx, 0x238
call fcn.18000cf00
lea rdx, [rax + 0x164]
lea rcx, [rbp + 0x150]
call fcn.18000d070
movss xmm6, dword [0x180085e64]
cvtps2pd xmm6, xmm6
mulsd xmm6, qword [0x180056348]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm7, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
movaps xmm6, xmm0
movss xmm3, dword [rbp + 0x150]
subss xmm3, xmm8
movss xmm2, dword [rbp + 0x154]
movaps xmm1, xmm8
shufps xmm1, xmm1, 0x55
movsd qword [rsp + 0x60], xmm8
subss xmm2, xmm1
cvtps2pd xmm4, xmm2
cvtps2pd xmm5, xmm3
movaps xmm1, xmm4
mulsd xmm1, xmm7
movaps xmm0, xmm5
mulsd xmm0, xmm6
subsd xmm1, xmm0
cvtpd2ps xmm1, xmm1
divss xmm1, dword [0x18005642c]
movss xmm0, dword [0x180056504]
maxss xmm0, xmm1
movss xmm2, dword [0x180056448]
minss xmm2, xmm0
mulsd xmm5, xmm7
mulsd xmm4, xmm6
addsd xmm5, xmm4
cvtpd2ps xmm0, xmm5
divss xmm0, dword [0x18005642c]
movss xmm1, dword [0x180056500]
maxss xmm1, xmm0
movss xmm3, dword [0x180056444]
minss xmm3, xmm1
subss xmm9, xmm2
cvttss2si eax, xmm9
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm3, xmm10
cvttss2si eax, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmmword [0x180056960]
movaps xmmword [rsp + 0x40], xmm0
cvttss2si edi, xmm1
cvttss2si ebx, xmm2
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
mov rsi, rax
lea rcx, [rsp + 0x40]
call fcn.1800116f0
mov r14d, eax
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x50], xmm0
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x54], xmm1
test eax, 0xff000000
je 0x18000952f
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movss xmm2, dword [0x1800563c8]
lea rdx, [rbp + 0x50]
mov rcx, rsi
call fcn.180030fd0
mov r8d, dword [rsi + 0x78]
dec r8d
mov dword [rsi + 0x78], r8d
mov r9d, r14d
mov rdx, qword [rsi + 0x80]
mov rcx, rsi
call fcn.180030a80
mov dword [rsi + 0x78], 0
movss xmm8, dword [rbp + 0x15f0]
cmp byte [0x1800854c9], 0
je 0x1800095e9
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x4e0]
call fcn.180004c70
mov rbx, rax
mov qword [rbp + 0x15f0], rax
mov rcx, qword [rax + 0x10]
add rcx, 0x101
call fcn.18000d0f0
lea rcx, [rbx + 0x80]
test al, al
jne 0x1800095d2
call fcn.18000c020
lea rcx, [rbx + 0x60]
call fcn.18000c020
lea rcx, [rbx + 0x40]
call fcn.18000c020
nop
lea rcx, [rbp + 0x230]
call fcn.18000c020
lea rcx, [rbp + 0x210]
call fcn.18000c020
lea rcx, [rbp + 0x1f0]
call fcn.18000c020
movss xmm9, dword [0x1800564d0]
movss xmm11, dword [0x180056334]
xor esi, esi
jmp 0x18000a14a
call fcn.18000c020
lea rcx, [rbx + 0x60]
call fcn.18000c020
lea rcx, [rbx + 0x40]
call fcn.18000c020
movss xmm10, dword [rbp + 0xac]
movss xmm15, dword [rbp + 0xa8]
cmp byte [0x1800854c8], 0
je 0x1800096e0
movaps xmm2, xmm11
mulss xmm2, xmm13
movaps xmm1, xmm12
movaps xmm7, xmm10
movaps xmm6, xmm15
movaps xmm3, xmm12
mulss xmm1, xmm13
subss xmm6, xmm2
subss xmm7, xmm1
movaps xmm2, xmm11
movaps xmm1, xmm7
cmp byte [0x180085499], 0
je 0x1800096d4
test r15b, r15b
je 0x180009650
movaps xmm0, xmmword [0x180085520]
jmp 0x180009657
movaps xmm0, xmmword [0x180085510]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmm0, xmm6
call fcn.180005140
lea rcx, [rsp + 0x40]
call fcn.1800116f0
mov ebx, eax
mov dword [rbp + 0x15f0], eax
movss xmm9, dword [0x18005633c]
movss dword [rsp + 0x28], xmm9
lea rax, [rbp + 0x15f0]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm12
movaps xmm2, xmm11
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.180005ea0
mov dword [rbp + 0x15f0], ebx
movss dword [rsp + 0x28], xmm13
lea rax, [rbp + 0x15f0]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm12
movaps xmm2, xmm11
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.180005ea0
jmp 0x1800096e9
movaps xmm0, xmmword [0x180085500]
jmp 0x180009657
movss xmm9, dword [0x18005633c]
cmp byte [0x1800854ca], 0
je 0x1800097bc
movaps xmm2, xmm11
mulss xmm2, xmm13
movaps xmm1, xmm12
movaps xmm7, xmm10
movaps xmm6, xmm15
movaps xmm3, xmm12
mulss xmm1, xmm13
subss xmm6, xmm2
subss xmm7, xmm1
movaps xmm2, xmm11
movaps xmm1, xmm7
cmp byte [0x180085499], 0
je 0x180009743
test r15b, r15b
je 0x18000973a
movaps xmm0, xmmword [0x180085520]
jmp 0x18000974a
movaps xmm0, xmmword [0x180085510]
jmp 0x18000974a
movaps xmm0, xmmword [0x180085500]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmm0, xmm6
call fcn.180005520
lea rcx, [rsp + 0x40]
call fcn.1800116f0
mov ebx, eax
movss dword [rsp + 0x28], xmm9
lea rax, [rbp + 0x15f0]
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x15f0], ebx
movaps xmm3, xmm12
movaps xmm2, xmm11
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.180005950
movss dword [rsp + 0x28], xmm13
lea rax, [rbp + 0x15f0]
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x15f0], ebx
movaps xmm3, xmm12
movaps xmm2, xmm11
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.180005950
cmp byte [0x1800854d0], 0
je 0x1800099bf
xorps xmm0, xmm0
cvtss2sd xmm0, xmm8
movsd xmm9, qword [0x180056380]
divsd xmm9, xmm0
movaps xmm1, xmm11
mulss xmm1, xmm13
movaps xmm0, xmm15
subss xmm0, xmm1
subss xmm0, dword [0x1800563cc]
cvtps2pd xmm8, xmm0
subsd xmm8, xmm9
movss xmm2, dword [rbp - 0x80]
divss xmm2, dword [0x180056450]
mulss xmm2, xmm12
movaps xmm1, xmm12
mulss xmm1, xmm13
movaps xmm7, xmm10
subss xmm7, xmm1
movaps xmm0, xmm12
subss xmm0, xmm2
addss xmm7, xmm0
movaps xmm6, xmm10
subss xmm6, xmm1
movaps xmm0, xmm12
subss xmm0, xmm12
addss xmm6, xmm0
cvttss2si r14d, xmm2
cvttss2si esi, xmm12
movaps xmm0, xmm6
movss xmm12, dword [0x18005633c]
subss xmm0, xmm12
cvttss2si edi, xmm0
movaps xmm1, xmm8
subsd xmm1, qword [0x180056378]
cvttsd2si ebx, xmm1
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180013eb0
mov r10, rax
mov ecx, dword [0x180084dfc]
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
movsd xmm5, qword [0x1800563c0]
divsd xmm0, xmm5
cvtpd2ps xmm4, xmm0
mov ecx, dword [0x180084df8]
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm1, xmm5
cvtpd2ps xmm3, xmm1
mov ecx, dword [0x180084df4]
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
divsd xmm0, xmm5
cvtpd2ps xmm2, xmm0
mov ecx, dword [0x180084df0]
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm1, xmm5
cvtpd2ps xmm0, xmm1
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm2
movss dword [rbp - 0x28], xmm3
movss dword [rbp - 0x24], xmm4
lea rcx, [rbp - 0x30]
call fcn.1800116f0
movaps xmm0, xmm9
addsd xmm0, qword [0x180056390]
cvttsd2si ecx, xmm0
add ecx, ebx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x58], xmm0
lea ecx, [rsi + 2]
add ecx, edi
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x5c], xmm1
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x60], xmm0
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x64], xmm1
movss dword [rsp + 0x30], xmm12
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
mov rcx, r10
call fcn.180032000
cvttsd2si ebx, xmm9
cvttsd2si edi, xmm8
cvttss2si edx, xmm6
lea rax, [0x180084f10]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, ebx
mov ecx, edi
call fcn.180006710
cvttss2si edx, xmm7
lea rax, [0x180084ec0]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8d, ebx
mov ecx, edi
call fcn.180006710
cmp byte [0x1800854cb], 0
je 0x180009c53
mov rax, qword [0x180085e10]
lea r8, str.Background
xor edx, edx
mov rax, qword [rax + 0x40b0]
mov rcx, qword [rax]
cmp byte [0x180085499], dl
je 0x180009b70
call fcn.180013eb0
mov rbx, rax
lea rcx, [rsp + 0x40]
test r15b, r15b
je 0x180009abc
movaps xmm6, xmmword [0x180085540]
movups xmmword [rsp + 0x40], xmm6
call fcn.1800116f0
mov edi, eax
movss xmm0, dword [rsp + 0x70]
movss dword [rbp + 0x68], xmm0
movss xmm1, dword [rsp + 0x74]
movss dword [rbp + 0x6c], xmm1
divss xmm11, dword [0x1800563e8]
test eax, 0xff000000
je 0x180009ab0
comiss xmm13, xmm11
ja 0x180009ab0
subss xmm11, xmm13
mov dword [rsp + 0x28], 0x3f
movss xmm0, dword [0x1800563e0]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm11
lea rdx, [rbp + 0x68]
mov rcx, rbx
call fcn.180031500
movss xmm0, dword [0x180056360]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002fb90
mov dword [rbx + 0x78], 0
movaps xmm6, xmmword [0x180085540]
lea rcx, [rbp + 0x378]
jmp 0x180009c2c
movaps xmm6, xmmword [0x180085530]
movups xmmword [rsp + 0x40], xmm6
call fcn.1800116f0
mov edi, eax
movss xmm0, dword [rsp + 0x70]
movss dword [rbp + 0x70], xmm0
movss xmm1, dword [rsp + 0x74]
movss dword [rbp + 0x74], xmm1
divss xmm11, dword [0x1800563e8]
test eax, 0xff000000
je 0x180009b64
comiss xmm13, xmm11
ja 0x180009b64
subss xmm11, xmm13
mov dword [rsp + 0x28], 0x3f
movss xmm0, dword [0x1800563e0]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm11
lea rdx, [rbp + 0x70]
mov rcx, rbx
call fcn.180031500
movss xmm0, dword [0x180056360]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002fb90
mov dword [rbx + 0x78], 0
movaps xmm6, xmmword [0x180085530]
lea rcx, [rbp + 0x428]
jmp 0x180009c2c
call fcn.180013eb0
mov rbx, rax
movaps xmm6, xmmword [0x180085570]
movups xmmword [rsp + 0x40], xmm6
lea rcx, [rsp + 0x40]
call fcn.1800116f0
mov edi, eax
movss xmm0, dword [rsp + 0x70]
movss dword [rbp + 0x78], xmm0
movss xmm1, dword [rsp + 0x74]
movss dword [rbp + 0x7c], xmm1
divss xmm11, dword [0x1800563e8]
test eax, 0xff000000
je 0x180009c25
comiss xmm13, xmm11
ja 0x180009c25
subss xmm11, xmm13
mov dword [rsp + 0x28], 0x3f
movss xmm0, dword [0x1800563e0]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm11
lea rdx, [rbp + 0x78]
mov rcx, rbx
call fcn.180031500
movss xmm0, dword [0x180056360]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002fb90
mov dword [rbx + 0x78], 0
movaps xmm6, xmmword [0x180085570]
lea rcx, [rbp + 0x2c8]
lea rdx, [rbp + 0x1b0]
call fcn.180004c70
movdqa xmmword [rsp + 0x40], xmm6
movss xmm2, dword [0x180056364]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.180003460
cmp byte [0x1800854cd], 0
je 0x180009d0e
movaps xmm0, xmmword [0x180056aa0]
movaps xmmword [rsp + 0x40], xmm0
mov rax, qword [0x180085e10]
mov rax, qword [rax + 0x40b0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.180013eb0
mov r10, rax
lea rcx, [rsp + 0x40]
call fcn.1800116f0
movss xmm0, dword [rbp + 0x160]
movss dword [rbp + 0x80], xmm0
movss xmm1, dword [rbp + 0x164]
movss dword [rbp + 0x84], xmm1
mov ecx, dword [0x180085e58]
xorps xmm2, xmm2
cvtsi2ss xmm2, rcx
mov ecx, dword [0x180085cc4]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
movss dword [rbp + 0x88], xmm0
movss dword [rbp + 0x8c], xmm2
movss xmm0, dword [0x1800562cc]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x88]
mov rcx, r10
call fcn.180031ea0
movss xmm6, dword [rbp + 0xb0]
cmp byte [0x1800854cf], 0
je 0x180009e17
movss xmm2, dword [rbp + 0x1600]
cvtps2pd xmm2, xmm2
movq r8, xmm2
lea rdx, str._.fm
lea rcx, [rbp + 0x4e0]
call fcn.18000d3f0
mov rax, qword [0x180085e10]
xor esi, esi
mov qword [rsp + 0x30], rsi
lea rcx, [rbp + 0x4e0]
mov qword [rsp + 0x28], rcx
movss xmm7, dword [0x1800564e8]
movss dword [rsp + 0x20], xmm7
movss xmm9, dword [0x1800564d0]
movaps xmm3, xmm9
movss xmm2, dword [rax + 0x3c18]
lea rdx, [rbp + 0x90]
mov rcx, qword [rax + 0x3c10]
call fcn.180036810
movss xmm0, dword [rbp + 0x90]
movss xmm11, dword [0x180056334]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x90], xmm0
lea rdx, [rbp + 0x4e0]
lea rcx, [rsp + 0x40]
call fcn.18000c100
mov r8, rax
ucomiss xmm15, xmm14
jp 0x180009ded
jne 0x180009ded
ucomiss xmm10, xmm14
jp 0x180009ded
jne 0x180009ded
ucomiss xmm6, xmm14
jp 0x180009ded
mov eax, esi
je 0x180009df2
mov eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm1, dword [rbp + 0x174]
lea r9, [0x180084cd0]
movss xmm0, dword [rbp + 0x170]
call fcn.180006f70
jmp 0x180009e33
movss xmm9, dword [0x1800564d0]
movss xmm7, dword [0x1800564e8]
movss xmm11, dword [0x180056334]
xor esi, esi
mov rcx, qword [rbp + 0x1c0]
add rcx, 0x18
call fcn.18000d430
mov edi, eax
mov ebx, eax
sar ebx, 0x10
mov qword [rbp + 0x15f0], rsi
mov dword [rbp + 0x260], 0x31bac515
mov ecx, dword [0x180085cc0]
mov dword [rbp + 0x264], ecx
lea rax, [rbp + 0x15f0]
mov qword [rbp + 0x268], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, 0x10
lea r8, [rbp + 0x260]
mov edx, 0x230d84
mov rcx, qword [0x180085cb8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
lea ecx, [rbx*8 + 0x10]
mov rax, qword [rbp + 0x15f0]
add rax, 0xa6d0e40
add rcx, rax
call fcn.18000cf00
movzx ecx, di
lea rdx, [rax + rcx*4]
lea rcx, [rbp + 0xcf0]
call fcn.18000cf40
lea rcx, [rbp + 0x4e0]
mov rdx, rax
mov r8d, 0x808
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [0x180085d18]
call fcn.18000cf80
mov qword [rbp + 0x1600], rax
movzx r8d, si
movzx edx, word [rbp + 0x4e4]
shr dx, 1
cmp si, dx
jae 0x180009f3f
movzx ecx, r8w
lea rax, [rbp + 0x4e6]
add rax, rcx
and ecx, 3
xor dl, byte [rbp + rcx + 0x1600]
xor byte [rax], dl
inc r8w
movzx edx, word [rbp + 0x4e4]
shr dx, 1
cmp r8w, dx
jb 0x180009f11
lea rdx, [rbp + 0x4e6]
lea rcx, [rbp + 0x110]
call fcn.18000c100
nop
cmp byte [0x1800854d6], 0
je 0x18000a02b
lea rcx, [rbp + 0x110]
call fcn.180004d50
lea rcx, [rbp + 0x110]
call fcn.18000bf30
mov rdx, qword [0x180085e10]
mov rcx, qword [rdx + 0x3c10]
test rax, rax
je 0x180009fd3
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm9
movss xmm2, dword [rdx + 0x3c18]
lea rdx, [rbp + 0x98]
call fcn.180036810
movss xmm0, dword [rbp + 0x98]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x98], xmm0
lea rcx, [rbp + 0x110]
call fcn.18000bf30
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.18000c100
mov r8, rax
ucomiss xmm15, xmm14
jp 0x18000a009
jne 0x18000a009
ucomiss xmm10, xmm14
jp 0x18000a009
jne 0x18000a009
ucomiss xmm6, xmm14
jp 0x18000a009
mov eax, esi
je 0x18000a00e
mov eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm1, dword [rbp - 0x3c]
lea r9, [0x180084cd0]
movss xmm0, dword [rbp - 0x40]
call fcn.180006870
inc dword [0x180085df0]
movss xmm0, dword [0x180056434]
comiss xmm0, dword [rbp + 0x1608]
jbe 0x18000a048
inc dword [0x180085c94]
mov edi, dword [0x180085f5c]
xorps xmm0, xmm0
cvtsi2ss xmm0, rdi
mulss xmm0, xmm13
movss xmm7, dword [rbp - 0x70]
movaps xmm1, xmm7
subss xmm1, xmm0
mov ebx, dword [0x180085f78]
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm0, xmm13
movss xmm8, dword [rbp - 0x6c]
movaps xmm2, xmm8
subss xmm2, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000a0a5
xorps xmm6, xmm6
sqrtss xmm6, xmm2
jmp 0x18000a0b0
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
cvttss2si eax, xmm8
cvttss2si ecx, xmm7
shr ebx, 1
shr edi, 1
sub ebx, eax
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
sub edi, ecx
movd xmm2, edi
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000a0ec
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000a0f4
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [rbp + 0x15f8]
comiss xmm1, xmm6
jbe 0x18000a119
movss xmm1, dword [0x1800854a4]
comiss xmm1, xmm0
jbe 0x18000a119
movss dword [rbp + 0x15f8], xmm6
mov r13d, r12d
lea rcx, [rbp + 0x110]
call fcn.18000c020
nop
lea rcx, [rbp + 0x230]
call fcn.18000c020
lea rcx, [rbp + 0x210]
call fcn.18000c020
lea rcx, [rbp + 0x1f0]
call fcn.18000c020
inc r12d
movsxd rbx, r12d
lea rcx, [0x180085e38]
call fcn.18000b1d0
cmp rbx, rax
mov r14d, dword [0x1800856f8]
jb 0x180008920
movsd xmm8, qword [0x1800563c0]
mov edx, dword [0x180085df0]
test edx, edx
jle 0x18000a381
lea rcx, [rbp + 0x260]
call fcn.18000ccc0
nop
lea r8, [rbp + 0x260]
lea rdx, [0x180050dec]
lea rcx, [rbp - 0x30]
call fcn.18000cd70
nop
lea r8, str._Rendered_
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.18000d460
nop
lea rcx, [rbp - 0x30]
call fcn.18000c020
mov edx, dword [0x180085c94]
lea rcx, [rbp + 0x290]
call fcn.18000ccc0
nop
lea r8, [rbp + 0x290]
lea rdx, [0x180050dec]
lea rcx, [rbp - 0x30]
call fcn.18000cd70
nop
lea r8, str._CR_
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.18000d460
nop
lea rcx, [rbp - 0x30]
call fcn.18000c020
lea rcx, [rbp + 0x110]
call fcn.18000bf30
mov rcx, qword [0x180085e10]
movss xmm7, dword [0x1800564e8]
test rax, rax
jne 0x18000a237
movaps xmm6, xmm14
jmp 0x18000a27e
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm9
movss xmm2, dword [rcx + 0x3c18]
lea rdx, [rbp + 0x15f0]
mov rcx, qword [rcx + 0x3c10]
call fcn.180036810
movss xmm0, dword [rbp + 0x15f0]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x110]
call fcn.18000bf30
mov ecx, dword [0x180085e50]
shr ecx, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm6, xmm13
subss xmm0, xmm6
cvttss2si ecx, xmm0
mov qword [rsp + 0x30], rax
mov edx, 0x50
call fcn.180007670
lea rcx, [rsp + 0x40]
call fcn.18000bf30
mov rcx, qword [0x180085e10]
test rax, rax
jne 0x18000a2d2
movaps xmm6, xmm14
jmp 0x18000a319
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm9
movss xmm2, dword [rcx + 0x3c18]
lea rdx, [rbp + 0x15f0]
mov rcx, qword [rcx + 0x3c10]
call fcn.180036810
movss xmm0, dword [rbp + 0x15f0]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
lea rcx, [rsp + 0x40]
call fcn.18000bf30
mov ecx, dword [0x180085e50]
shr ecx, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm6, xmm13
subss xmm0, xmm6
cvttss2si ecx, xmm0
mov qword [rsp + 0x30], rax
mov edx, 0x32
call fcn.180007670
nop
lea rcx, [rbp + 0x110]
call fcn.18000c020
nop
lea rcx, [rbp + 0x290]
call fcn.18000c020
nop
lea rcx, [rsp + 0x40]
call fcn.18000c020
nop
lea rcx, [rbp + 0x260]
call fcn.18000c020
mov dword [0x180085df0], esi
mov dword [0x180085c94], esi
mov dword [0x180085dc0], esi
cmp byte [0x180085498], 0
je 0x18000a6e0
cmp r13d, 0x539
je 0x18000a6e0
movsxd rdx, r13d
lea rcx, [0x180085e38]
call fcn.18000b1a0
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.180004c70
nop
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2c8]
call fcn.180004c70
mov r8, rax
mov edx, 8
lea rcx, [rbp - 0x10]
call fcn.1800031c0
movss xmm0, dword [rax]
movss dword [0x180085e90], xmm0
movss xmm1, dword [rax + 4]
movss dword [0x180085e94], xmm1
movss xmm0, dword [rax + 8]
movss dword [0x180085e98], xmm0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2c8]
call fcn.180004c70
mov r8, rax
mov edx, 6
lea rcx, [rbp - 0x10]
call fcn.1800031c0
movss xmm0, dword [rax]
movss dword [0x180085ef8], xmm0
movss xmm1, dword [rax + 4]
movss dword [0x180085efc], xmm1
movss xmm0, dword [rax + 8]
movss dword [0x180085f00], xmm0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2c8]
call fcn.180004c70
mov r8, rax
mov edx, 3
lea rcx, [rbp - 0x10]
call fcn.1800031c0
movss xmm0, dword [rax]
movss dword [0x180085f08], xmm0
movss xmm1, dword [rax + 4]
movss dword [0x180085f0c], xmm1
movss xmm2, dword [rax + 8]
movss dword [0x180085f10], xmm2
mov eax, dword [0x180085e54]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov eax, dword [0x180085e1c]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov eax, dword [0x1800854dc]
test eax, eax
jne 0x18000a502
movss xmm0, dword [0x180085e90]
movss dword [0x180085ea0], xmm0
movss xmm1, dword [0x180085e94]
movss xmm0, dword [0x180085e98]
movss dword [0x180085ea8], xmm0
jmp 0x18000a546
cmp eax, 1
jne 0x18000a531
movss xmm0, dword [0x180085ef8]
movss dword [0x180085ea0], xmm0
movss xmm1, dword [0x180085efc]
movss xmm0, dword [0x180085f00]
movss dword [0x180085ea8], xmm0
jmp 0x18000a546
cmp eax, 2
jne 0x18000a54e
movss dword [0x180085ea0], xmm0
movss dword [0x180085ea8], xmm2
movss dword [0x180085ea4], xmm1
movsd xmm0, qword [0x180085ea0]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x180085ea8]
mov dword [rbp - 0x68], eax
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x40]
call fcn.180002ed0
movss xmm2, dword [0x180056ae0]
movss xmm1, dword [rbp - 0x40]
ucomiss xmm1, xmm14
jp 0x18000a586
je 0x18000a5ee
comiss xmm1, xmm7
jbe 0x18000a5c2
movaps xmm0, xmm7
subss xmm0, xmm1
xorps xmm0, xmm2
cvttss2si eax, xmm0
cdq
idiv dword [0x18005e058]
mov dword [0x180085d8c], eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm7
addss xmm7, xmm7
comiss xmm0, xmm7
jbe 0x18000a5ee
mov dword [0x180085d8c], esi
jmp 0x18000a5ee
comiss xmm7, xmm1
jbe 0x18000a5ee
subss xmm1, xmm7
cvttss2si eax, xmm1
cdq
idiv dword [0x18005e058]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm7
comiss xmm14, xmm0
cmova eax, esi
mov dword [0x180085d8c], eax
movss xmm1, dword [rbp - 0x3c]
ucomiss xmm1, xmm14
jp 0x18000a5fb
je 0x18000a663
comiss xmm1, xmm6
jbe 0x18000a637
movaps xmm0, xmm6
subss xmm0, xmm1
xorps xmm0, xmm2
cvttss2si eax, xmm0
cdq
idiv dword [0x18005e054]
mov dword [0x180085d90], eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm6
addss xmm6, xmm6
comiss xmm0, xmm6
jbe 0x18000a663
mov dword [0x180085d90], esi
jmp 0x18000a663
comiss xmm6, xmm1
jbe 0x18000a663
subss xmm1, xmm6
cvttss2si eax, xmm1
cdq
idiv dword [0x18005e054]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm6
comiss xmm14, xmm0
cmova eax, esi
mov dword [0x180085d90], eax
mov byte [0x18008549b], 1
mov ecx, dword [0x18005e050]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18000a6bc
cmp byte [0x18008549c], 0
je 0x18000a6af
mov r8d, dword [0x180085d90]
call fcn.180001760
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x180008210]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r8d, dword [0x180085d90]
call fcn.180001760
nop
lea rcx, [rbp + 0x230]
call fcn.18000c020
lea rcx, [rbp + 0x210]
call fcn.18000c020
lea rcx, [rbp + 0x1f0]
call fcn.18000c020
cmp byte [0x1800854a0], 0
je 0x18000a7ef
cvttss2si r14d, dword [0x18005e05c]
cvttss2si esi, dword [0x1800854a4]
mov edi, dword [0x180085c90]
mov ebx, dword [0x180085cc4]
mov rax, qword [0x180085e10]
mov rcx, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.180013eb0
mov r8, rax
mov ecx, dword [0x180084cd0]
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
divsd xmm0, xmm8
cvtpd2ps xmm0, xmm0
movss dword [rbp - 0x30], xmm0
mov ecx, dword [0x180084cd4]
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm1, xmm8
cvtpd2ps xmm0, xmm1
movss dword [rbp - 0x2c], xmm0
mov ecx, dword [0x180084cd8]
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm1, xmm8
cvtpd2ps xmm0, xmm1
movss dword [rbp - 0x28], xmm0
mov eax, dword [0x180084cdc]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm8
cvtpd2ps xmm0, xmm1
movss dword [rbp - 0x24], xmm0
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x15f0], xmm1
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x15f4], xmm0
lea rcx, [rbp - 0x30]
call fcn.1800116f0
mov r9d, eax
movd xmm2, esi
cvtdq2ps xmm2, xmm2
movss xmm0, dword [0x18005633c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r14d
lea rdx, [rbp + 0x15f0]
mov rcx, r8
call fcn.1800325f0
lea r11, [rsp + 0x16a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret