Function at 0x1801a2aa5
Capabilities:
Hide graphical window
Log keystrokes via polling

Disassembly:
jmp 0x180324f10
push rbp
push rsi
push rdi
mov eax, 0x3170
call fcn.1801a3b08
sub rsp, rax
lea rbp, [rsp + 0x60]
lea rdi, [rsp + 0x60]
mov ecx, 0xac4
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1805d8740]
xor rax, rbp
mov qword [rbp + 0x3100], rax
lea rcx, [0x18060f423]
call fcn.1801ab3da
nop
lea rcx, str.cs2.exe
call fcn.18033f5e0
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
jle 0x180324fe0
xor eax, eax
test eax, eax
je 0x180324fe0
lea rax, [rbp + 0x1348]
mov qword [rbp + 0x1388], rax
lea rdx, [rbp + 0x13c8]
lea rcx, [rbp + 0x13a4]
call fcn.18031eac0
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a3874
mov rdx, rax
mov rcx, qword [rbp + 0x1388]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
lea rcx, [0x1805e69b0]
call fcn.1801a5f8e
nop
mov eax, 1
jmp 0x1803283b3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..KMcheat
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1805e3238], rax
cmp qword [0x1805e3238], 0xffffffffffffffff
jne 0x1803254ce
lea rax, [rbp + 0x1408]
mov qword [rbp + 0x1448], rax
lea rdx, [rbp + 0x1488]
lea rcx, [rbp + 0x1464]
call fcn.18031f210
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a9f80
mov rdx, rax
mov rcx, qword [rbp + 0x1448]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x14d8]
mov qword [rbp + 0x1518], rax
lea rdx, [rbp + 0x1558]
lea rcx, [rbp + 0x1534]
call fcn.18031f780
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a3004
mov rdx, rax
mov rcx, qword [rbp + 0x1518]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a7046
nop
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
call fcn.1801a7e10
mov byte [rbp + 0x24], al
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
movzx eax, byte [rbp + 0x24]
test eax, eax
jne 0x18032518d
lea rax, [rbp + 0x1598]
mov qword [rbp + 0x15d8], rax
lea rdx, [rbp + 0x1618]
lea rcx, [rbp + 0x15f4]
call fcn.180320090
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a4fcb
mov rdx, rax
mov rcx, qword [rbp + 0x15d8]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
lea rcx, [0x1805e69b0]
call fcn.1801a5f8e
nop
mov eax, 1
jmp 0x1803283b3
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..KMcheat
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1805e3238], rax
cmp qword [0x1805e3238], 0xffffffffffffffff
jne 0x180325467
lea rax, [rbp + 0x1658]
mov qword [rbp + 0x1698], rax
lea rdx, [rbp + 0x16d8]
lea rcx, [rbp + 0x16b4]
call fcn.180320290
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a88b0
mov rdx, rax
mov rcx, qword [rbp + 0x1698]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
lea rax, [rbp + 0x1728]
mov qword [rbp + 0x1768], rax
lea rdx, [rbp + 0x17a8]
lea rcx, [rbp + 0x1784]
call fcn.1803208a0
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a3cca
mov rdx, rax
mov rcx, qword [rbp + 0x1768]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a7046
nop
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, [rbp + 0x1808]
lea rcx, [rbp + 0x17e4]
call fcn.180320b00
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a78e3
mov rcx, rax
call fcn.1801a642f
nop
mov ecx, 0x1f9
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..KMcheat
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1805e3238], rax
cmp qword [0x1805e3238], 0xffffffffffffffff
jne 0x1803253eb
lea rax, [rbp + 0x1838]
mov qword [rbp + 0x1878], rax
lea rdx, [rbp + 0x18b8]
lea rcx, [rbp + 0x1894]
call fcn.180320c30
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a99bd
mov rdx, rax
mov rcx, qword [rbp + 0x1878]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x18e8]
mov qword [rbp + 0x1928], rax
lea rdx, [rbp + 0x1968]
lea rcx, [rbp + 0x1944]
call fcn.180320db0
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a2b77
mov rdx, rax
mov rcx, qword [rbp + 0x1928]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
lea rcx, [0x1805e69b0]
call fcn.1801a5f8e
nop
mov eax, 1
jmp 0x1803283b3
lea rax, [rbp + 0x1998]
mov qword [rbp + 0x19d8], rax
lea rdx, [rbp + 0x1a18]
lea rcx, [rbp + 0x19f4]
call fcn.18031ce30
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a6100
mov rdx, rax
mov rcx, qword [rbp + 0x19d8]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [0x1805e69b0]
call fcn.1801a5f8e
nop
mov eax, 1
jmp 0x1803283b3
lea rax, [rbp + 0x1a48]
mov qword [rbp + 0x1a88], rax
lea rdx, [rbp + 0x1ac8]
lea rcx, [rbp + 0x1aa4]
call fcn.18031cff0
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a9a58
mov rdx, rax
mov rcx, qword [rbp + 0x1a88]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x180325533
lea rax, [rbp + 0x1b08]
mov qword [rbp + 0x1b48], rax
lea rdx, [rbp + 0x1b88]
lea rcx, [rbp + 0x1b64]
call fcn.18031d230
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a435f
mov rdx, rax
mov rcx, qword [rbp + 0x1b48]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x1bc8]
mov qword [rbp + 0x1c08], rax
lea rdx, [rbp + 0x1c48]
lea rcx, [rbp + 0x1c24]
call fcn.18031d420
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a39b9
mov rdx, rax
mov rcx, qword [rbp + 0x1c08]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a7046
nop
lea rcx, str.cs2.exe
call fcn.18033f5e0
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 0
jne 0x18032568b
lea rax, [rbp + 0x1c88]
mov qword [rbp + 0x1cc8], rax
lea rdx, [rbp + 0x1d08]
lea rcx, [rbp + 0x1ce4]
call fcn.18031d670
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a9c29
mov rdx, rax
mov rcx, qword [rbp + 0x1cc8]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
cmp dword [rbp + 0x44], 0
jne 0x180325689
cmp dword [rbp + 0x44], 0
je 0x180325669
lea rax, [rbp + 0x1d48]
mov qword [rbp + 0x1d88], rax
lea rdx, [rbp + 0x1dc8]
lea rcx, [rbp + 0x1da4]
call fcn.18031d880
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801abbf0
mov rdx, rax
mov rcx, qword [rbp + 0x1d88]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
jmp 0x180325689
lea rcx, str.cs2.exe
call fcn.18033f5e0
mov dword [rbp + 0x44], eax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x1803255fe
jmp 0x1803256f0
lea rax, [rbp + 0x1e08]
mov qword [rbp + 0x1e48], rax
lea rdx, [rbp + 0x1e88]
lea rcx, [rbp + 0x1e64]
call fcn.18031da70
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a468e
mov rdx, rax
mov rcx, qword [rbp + 0x1e48]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, str.client.dll
mov ecx, dword [rbp + 0x44]
call fcn.18033f460
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x180325728
lea rdx, str.client.dll
mov ecx, dword [rbp + 0x44]
call fcn.18033f460
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
je 0x180325726
jmp 0x180325728
jmp 0x180325703
mov rax, qword [rbp + 0x68]
mov qword [0x1805e31c8], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x1eb8]
mov qword [rbp + 0x1ef8], rax
lea rdx, [rbp + 0x1f38]
lea rcx, [rbp + 0x1f14]
call fcn.18031dc40
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801ab411
mov rdx, rax
mov rcx, qword [rbp + 0x1ef8]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov edx, dword [rbp + 0x44]
mov rcx, qword [0x1805e3238]
call fcn.1801a2550
movzx eax, al
cmp eax, 1
jne 0x180325829
mov byte [0x1805e31ed], 1
lea rax, [rbp + 0x1f78]
mov qword [rbp + 0x1fb8], rax
lea rdx, [rbp + 0x1ff8]
lea rcx, [rbp + 0x1fd4]
call fcn.18031def0
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a6371
mov rdx, rax
mov rcx, qword [rbp + 0x1fb8]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov ecx, 0x226
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x180325899
lea rax, [rbp + 0x2038]
mov qword [rbp + 0x2078], rax
lea rdx, [rbp + 0x20b8]
lea rcx, [rbp + 0x2094]
call fcn.18031e140
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a4616
mov rdx, rax
mov rcx, qword [rbp + 0x2078]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a68d5
nop
lea rcx, [0x1805e69b0]
call fcn.1801a5f8e
nop
mov eax, 1
jmp 0x1803283b3
lea rdx, [0x1801ab48e]
lea rcx, [rbp + 0x88]
call fcn.1801a61b9
nop
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, [0x1801a7ece]
lea rcx, [rbp + 0xb8]
call fcn.1801a61b9
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, [0x1801a3ff9]
lea rcx, [rbp + 0xe8]
call fcn.1801a61b9
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rbp + 0x20f8]
mov qword [rbp + 0x2138], rax
lea rdx, [rbp + 0x2178]
lea rcx, [rbp + 0x2154]
call fcn.18031f050
mov qword [rbp + 0x30e8], rax
xor edx, edx
mov rcx, qword [rbp + 0x30e8]
call fcn.1801aabd3
mov rdx, rax
mov rcx, qword [rbp + 0x2138]
call fcn.1801a62a9
mov qword [rbp + 0x30f0], rax
mov rcx, qword [rbp + 0x30f0]
call fcn.1801a772b
nop
mov dword [rbp + 0x120], 0x50
mov dword [rbp + 0x124], 3
lea rax, [0x1801a72fd]
mov qword [rbp + 0x128], rax
mov dword [rbp + 0x130], 0
mov dword [rbp + 0x134], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 0
lea rax, str.ImGui_Example
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], 0
lea rcx, [rbp + 0x120]
call qword [sym.imp.USER32.dll_RegisterClassExW]
nop
mov qword [rsp + 0x58], 0
mov rax, qword [rbp + 0x138]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov eax, dword [0x1805e3328]
mov dword [rsp + 0x38], eax
mov eax, dword [0x1805e3244]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x80000000
lea r8, str.Cs2_CHEAT
mov rdx, qword [rbp + 0x160]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rbp + 0x188], rax
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
or eax, 0x20
or eax, 8
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
nop
mov rcx, qword [rbp + 0x188]
call fcn.1801a6641
movzx eax, al
test eax, eax
jne 0x180325b18
call fcn.1801aa3ea
nop
mov rdx, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov dword [rbp + 0x21a4], 1
lea rcx, [rbp + 0xe8]
call fcn.1801a6254
nop
lea rcx, [rbp + 0xb8]
call fcn.1801a6254
nop
lea rcx, [rbp + 0x88]
call fcn.1801a6254
mov eax, dword [rbp + 0x21a4]
jmp 0x1803283b3
mov edx, 5
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
lea rcx, [rbp + 0x1a8]
call fcn.1801a6f01
nop
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], 0x14
mov qword [rsp + 0x20], 0x10
mov r9d, 8
mov r8d, 0x450
mov edx, 0x38e0
lea rcx, str.1.90.7_WIP
call fcn.1801a8c2a
nop
xor ecx, ecx
call fcn.1801ab029
nop
call fcn.1801a9062
mov qword [rbp + 0x1e8], rax
mov rax, qword [rbp + 0x1e8]
mov eax, dword [rax]
or eax, 1
mov rcx, qword [rbp + 0x1e8]
mov dword [rcx], eax
mov rax, qword [rbp + 0x1e8]
mov eax, dword [rax]
or eax, 2
mov rcx, qword [rbp + 0x1e8]
mov dword [rcx], eax
xor ecx, ecx
call fcn.1801ac0c8
nop
mov rcx, qword [rbp + 0x188]
call fcn.1801a4918
nop
mov rdx, qword [0x1805e5420]
mov rcx, qword [0x1805e5418]
call fcn.1801a4085
nop
mov rax, qword [rbp + 0x1e8]
mov eax, dword [rax]
or eax, 0x30
mov rcx, qword [rbp + 0x1e8]
mov dword [rcx], eax
mov dword [rsp + 0x30], 0x13
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_SetWindowPos]
nop
mov byte [rbp + 0x204], 0
mov dword [rbp + 0x224], 0
mov byte [rbp + 0x244], 0
movzx eax, byte [rbp + 0x204]
test eax, eax
jne 0x180328333
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x268]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x180325ca4
lea rcx, [rbp + 0x268]
call qword [sym.imp.USER32.dll_TranslateMessage]
nop
lea rcx, [rbp + 0x268]
call qword [sym.imp.USER32.dll_DispatchMessageA]
nop
cmp dword [rbp + 0x270], 0x12
jne 0x180325ca2
mov byte [rbp + 0x204], 1
jmp 0x180325c55
movzx eax, byte [rbp + 0x204]
test eax, eax
je 0x180325cb4
jmp 0x180328333
call fcn.1801a5679
nop
call fcn.1801a7f05
nop
call fcn.1801a8c5c
nop
movzx eax, byte [0x1805e31ec]
test eax, eax
je 0x180325dd4
mov r8d, 0x39
xor edx, edx
lea rcx, str.Spectator_List
call fcn.1801a8ee6
nop
movss xmm2, dword [0x180538a08]
movss xmm1, dword [0x180538a08]
lea rcx, [rbp + 0x21c4]
call fcn.1801a7cc1
mov edx, 4
mov rcx, rax
call fcn.1801a53f4
nop
movss xmm2, dword [0x180520e24]
movss xmm1, dword [0x180538a50]
lea rcx, [rbp + 0x21e4]
call fcn.1801a7cc1
mov edx, 4
mov rcx, rax
call fcn.1801a2ac3
nop
lea rax, [0x1805e5340]
mov qword [rbp + 0x2b8], rax
mov rcx, qword [rbp + 0x2b8]
call fcn.1801a4832
mov qword [rbp + 0x2d8], rax
mov rcx, qword [rbp + 0x2b8]
call fcn.1801a4738
mov qword [rbp + 0x2f8], rax
jmp 0x180325d86
mov rax, qword [rbp + 0x2d8]
add rax, 0x28
mov qword [rbp + 0x2d8], rax
mov rax, qword [rbp + 0x2f8]
cmp qword [rbp + 0x2d8], rax
je 0x180325dce
mov rdx, qword [rbp + 0x2d8]
lea rcx, [rbp + 0x318]
call fcn.1801a337e
nop
lea rcx, [rbp + 0x318]
call fcn.1801a2d7f
mov rcx, rax
call fcn.1801a7352
nop
lea rcx, [rbp + 0x318]
call fcn.1801a3b8f
nop
jmp 0x180325d74
call fcn.1801a60ec
nop
mov ecx, dword [0x1805d863c]
call fcn.1801a70c3
nop
call fcn.1801abed4
nop
call fcn.1801a784d
mov qword [rbp + 0x358], rax
mov dword [rbp + 0x374], 0
jmp 0x180325e0c
mov eax, dword [rbp + 0x374]
inc eax
mov dword [rbp + 0x374], eax
cmp dword [rbp + 0x374], 0x40
jge 0x1803281a8
mov eax, dword [rbp + 0x374]
and eax, 0x7fff
shl eax, 3
sar eax, 9
cdqe
mov rcx, qword [0x1805e31d8]
lea rax, [rcx + rax + 0x10]
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x398], rax
cmp qword [rbp + 0x398], 0
jne 0x180325e5a
jmp 0x180325dfe
mov eax, dword [rbp + 0x374]
and eax, 0x1ff
imul eax, eax, 0x78
cdqe
mov rcx, qword [rbp + 0x398]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x3b8], rax
cmp qword [rbp + 0x3b8], 0
jne 0x180325e9c
jmp 0x180325dfe
mov rax, qword [rbp + 0x3b8]
add rax, 0x7dc
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x3d8], rax
mov rax, qword [rbp + 0x3d8]
and rax, 0x7fff
shr rax, 9
mov rcx, qword [0x1805e31d8]
lea rax, [rcx + rax*8 + 0x10]
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x3f8], rax
cmp qword [rbp + 0x3f8], 0
jne 0x180325f01
jmp 0x180325dfe
mov rax, qword [rbp + 0x3d8]
and rax, 0x1ff
imul rax, rax, 0x78
mov rcx, qword [rbp + 0x3f8]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x418], rax
cmp qword [rbp + 0x418], 0
jne 0x180325f44
jmp 0x180325dfe
mov rax, qword [0x1805e3180]
cmp qword [rbp + 0x418], rax
jne 0x180325f67
mov eax, dword [rbp + 0x374]
dec eax
mov dword [rbp + 0x224], eax
jmp 0x180325dfe
mov rax, qword [rbp + 0x418]
add rax, 0x328
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a3b35
cmp eax, 0x100
je 0x180325f8f
jmp 0x180325dfe
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0x438]
call fcn.1801a781b
nop
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0x468]
call fcn.1801a781b
nop
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [rbp + 0x374]
mov dword [rcx + rax + 8], edx
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov rdx, qword [rbp + 0x418]
mov qword [rcx + rax], rdx
mov rax, qword [rbp + 0x418]
add rax, 0x324
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a3b35
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov dword [rdx + rcx + 0xc], eax
mov rax, qword [rbp + 0x418]
add rax, 0x3c3
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a3b35
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov dword [rdx + rcx + 0x20], eax
mov rax, qword [rbp + 0x418]
add rax, 0x1274
mov r8, rax
mov rdx, qword [0x1805e3238]
lea rcx, [rbp + 0x2204]
call fcn.1801a721c
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
lea rdi, [rdx + rcx + 0x50]
mov rsi, rax
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x418]
add rax, 0xc50
mov r8, rax
mov rdx, qword [0x1805e3238]
lea rcx, [rbp + 0x2224]
call fcn.1801a721c
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
lea rdi, [rdx + rcx + 0x5c]
mov rsi, rax
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rdx, [rbp + 0x2aa0]
mov rdi, rdx
lea rsi, [rcx + rax + 0x50]
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x2a70]
lea rcx, [0x1805e53c0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x2aa0]
lea rcx, [rbp + 0x2a70]
call fcn.1801a6f24
cvttss2si eax, xmm0
cdq
mov ecx, 0x64
idiv ecx
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov dword [rdx + rcx + 0x14], eax
mov rax, qword [rbp + 0x418]
add rax, 0x328
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a3b35
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov dword [rdx + rcx + 0x24], eax
lea rdx, [0x180515450]
lea rcx, [rbp + 0x498]
call fcn.1801a62a9
nop
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x1803261ec
lea rcx, [rbp + 0x498]
call fcn.1801a3b8f
nop
jmp 0x180325dfe
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cmp dword [rcx + rax + 0x24], 0x100
je 0x180326238
mov rax, qword [0x1805e31a8]
cmp qword [rbp + 0x418], rax
jne 0x180326226
mov qword [0x1805e31a8], 0
lea rcx, [rbp + 0x498]
call fcn.1801a3b8f
nop
jmp 0x180325dfe
mov rax, qword [rbp + 0x418]
mov qword [0x1805e3230], rax
mov rax, qword [rbp + 0x418]
add rax, 0x2284
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x4d8], rax
mov rax, qword [0x1805e3180]
add rax, 0x2284
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x4f8], rax
mov byte [rbp + 0x244], 0
mov eax, dword [rbp + 0x224]
mov ecx, 1
mov qword [rbp + 0x30e8], rcx
movzx ecx, al
mov rax, qword [rbp + 0x30e8]
shl rax, cl
mov rcx, qword [rbp + 0x4d8]
and rcx, rax
mov rax, rcx
test rax, rax
jne 0x1803262f9
mov eax, dword [rbp + 0x374]
mov ecx, 1
mov qword [rbp + 0x30e8], rcx
movzx ecx, al
mov rax, qword [rbp + 0x30e8]
shl rax, cl
mov rcx, qword [rbp + 0x4f8]
and rcx, rax
mov rax, rcx
test rax, rax
je 0x180326450
lea rax, [rbp + 0x2268]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x2244]
call fcn.1801a781b
lea rax, [rbp + 0x2ad0]
lea rcx, [rbp + 0x2268]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rax, [rcx + rax + 0x50]
lea r9, [rbp + 0x2ad0]
lea r8, [rbp + 0x438]
mov rdx, rax
lea rcx, [rbp + 0x2244]
call fcn.1801abd17
mov byte [rbp + 0x514], al
mov rax, qword [0x1805e31a8]
cmp qword [rbp + 0x418], rax
jne 0x1803263aa
mov byte [0x1805e319a], 1
jmp 0x1803263b1
mov byte [0x1805e319a], 0
lea rax, [rbp + 0x22e8]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x22c4]
call fcn.1801a781b
lea rax, [rbp + 0x2b30]
lea rcx, [rbp + 0x22e8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rax, [rcx + rax + 0x50]
lea r9, [rbp + 0x2b30]
lea r8, [rbp + 0x438]
mov rdx, rax
lea rcx, [rbp + 0x22c4]
call fcn.1801abd17
mov byte [rbp + 0x534], al
mov byte [rbp + 0x244], 1
mov dword [rbp + 0x554], 0
jmp 0x18032646a
mov eax, dword [rbp + 0x554]
inc eax
mov dword [rbp + 0x554], eax
cmp dword [rbp + 0x554], 0x10
jge 0x1803264db
movsxd rax, dword [rbp + 0x554]
mov rcx, qword [rbp + 0x3b8]
lea rax, [rcx + rax + 0x630]
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801ab5d3
mov byte [rbp + 0x574], al
movzx r8d, byte [rbp + 0x574]
mov edx, 1
lea rcx, [rbp + 0x598]
call fcn.1801a72ad
nop
lea rdx, [rbp + 0x598]
lea rcx, [rbp + 0x498]
call fcn.1801a40cb
nop
lea rcx, [rbp + 0x598]
call fcn.1801a3b8f
nop
jmp 0x18032645c
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rax, [rcx + rax + 0x28]
lea rdx, [rbp + 0x498]
mov rcx, rax
call fcn.1801a98be
nop
mov rax, qword [rbp + 0x418]
add rax, 0x308
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x5d8], rax
mov rax, qword [rbp + 0x5d8]
add rax, 0x1f0
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0x5f8], rax
mov dword [rbp + 0x614], 6
imul eax, dword [rbp + 0x614], 0x20
cdqe
mov rcx, qword [rbp + 0x5f8]
add rcx, rax
mov rax, rcx
mov r8, rax
mov rdx, qword [0x1805e3238]
lea rcx, [rbp + 0x638]
call fcn.1801a721c
nop
lea rax, [rbp + 0x2368]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x2344]
call fcn.1801a781b
lea rax, [rbp + 0x2b90]
lea rcx, [rbp + 0x2368]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rax, [rcx + rax + 0x50]
lea r9, [rbp + 0x2b90]
lea r8, [rbp + 0x438]
mov rdx, rax
lea rcx, [rbp + 0x2344]
call fcn.1801abd17
mov byte [rbp + 0x664], al
movzx eax, byte [rbp + 0x664]
test eax, eax
je 0x1803266d0
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x23c4]
call fcn.1801a7cc1
mov rax, qword [rax]
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov qword [rdx + rcx + 0x68], rax
mov eax, dword [0x1805e3328]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
mov eax, dword [0x1805e3244]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm1, eax
movaps xmm2, xmm0
lea rcx, [rbp + 0x23e4]
call fcn.1801a7cc1
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
lea rcx, [rdx + rcx + 0x68]
mov rdx, rax
call fcn.1801a937d
cvttss2si eax, xmm0
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov dword [rdx + rcx + 0x18], eax
jmp 0x1803266eb
mov rax, qword [0x1805e31a8]
cmp qword [rbp + 0x418], rax
jne 0x1803266eb
mov qword [0x1805e31a8], 0
lea rax, [rbp + 0x2428]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x2404]
call fcn.1801a781b
lea rax, [rbp + 0x2bf0]
lea rcx, [rbp + 0x2428]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rax, [rcx + rax + 0x5c]
lea r9, [rbp + 0x2bf0]
lea r8, [rbp + 0x438]
mov rdx, rax
lea rcx, [rbp + 0x2404]
call fcn.1801abd17
mov byte [rbp + 0x684], al
movzx eax, byte [rbp + 0x684]
test eax, eax
je 0x1803267c7
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x2484]
call fcn.1801a7cc1
mov rax, qword [rax]
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov qword [rdx + rcx + 0x70], rax
lea rax, [rbp + 0x24c8]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x24a4]
call fcn.1801a781b
lea rax, [rbp + 0x2c50]
lea rcx, [rbp + 0x24c8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
lea r9, [rbp + 0x2c50]
lea r8, [rbp + 0x438]
lea rdx, [rbp + 0x638]
lea rcx, [rbp + 0x24a4]
call fcn.1801abd17
mov byte [rbp + 0x6a4], al
mov rax, qword [0x1805e31a8]
add rax, 0x328
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a3b35
mov dword [rbp + 0x6c4], eax
movzx eax, byte [rbp + 0x6a4]
test eax, eax
je 0x180326f5f
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x2524]
call fcn.1801a7cc1
mov rax, qword [rax]
movsxd rcx, dword [rbp + 0x374]
imul rcx, rcx, 0x80
lea rdx, [0x1805e3340]
mov qword [rdx + rcx + 0x78], rax
lea rax, [rbp + 0x468]
lea rcx, [rbp + 0x638]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
cmp dword [rbp + 0x614], 6
jne 0x1803268ef
movss xmm0, dword [rbp + 0x470]
subss xmm0, dword [0x180520da0]
movss dword [rbp + 0x470], xmm0
lea rax, [rbp + 0x2568]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x2544]
call fcn.1801a781b
lea rax, [rbp + 0x2cb0]
lea rcx, [rbp + 0x2568]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
lea r9, [rbp + 0x2cb0]
lea r8, [rbp + 0x438]
lea rdx, [rbp + 0x468]
lea rcx, [rbp + 0x2544]
call fcn.1801abd17
mov byte [rbp + 0x6e4], al
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x1803269a1
movzx eax, byte [0x1805e31e9]
test eax, eax
jne 0x180326f5f
movzx eax, byte [rbp + 0x6e4]
test eax, eax
je 0x180326f54
mov rax, qword [rbp + 0x418]
cmp qword [0x1805e31a8], rax
je 0x180326e9b
cmp qword [0x1805e31a8], 0
je 0x1803269de
cmp dword [rbp + 0x6c4], 0x100
je 0x180326aa8
mov rax, qword [rbp + 0x418]
mov qword [0x1805e31a8], rax
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x25c4]
call fcn.1801a7cc1
mov rax, qword [rbp + 0x25c4]
mov qword [0x1805e31c0], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0x14]
movss dword [0x1805e31b4], xmm0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x20]
mov dword [0x1805e31bc], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov dword [0x1805e31b8], eax
movzx eax, byte [rbp + 0x244]
mov byte [0x1805e319a], al
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0xc]
mov dword [0x1805e31b0], eax
jmp 0x180326e96
movzx eax, byte [rbp + 0x244]
test eax, eax
je 0x180326b90
movzx eax, byte [0x1805e319a]
test eax, eax
jne 0x180326b90
mov rax, qword [rbp + 0x418]
mov qword [0x1805e31a8], rax
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x25e4]
call fcn.1801a7cc1
mov rax, qword [rbp + 0x25e4]
mov qword [0x1805e31c0], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0x14]
movss dword [0x1805e31b4], xmm0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov dword [0x1805e31b8], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0xc]
mov dword [0x1805e31b0], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x20]
mov dword [0x1805e31bc], eax
movzx eax, byte [rbp + 0x244]
mov byte [0x1805e319a], al
jmp 0x180326e96
movzx eax, byte [rbp + 0x244]
test eax, eax
je 0x180326d16
movzx eax, byte [0x1805e319a]
cmp eax, 1
jne 0x180326d16
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31b8]
cmp dword [rcx + rax + 0x18], edx
jge 0x180326d11
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov ecx, dword [0x1805e31b8]
sub ecx, eax
mov eax, ecx
mov edx, eax
lea rcx, [0x1805e6ab0]
call fcn.1801a3973
mov qword [rbp + 0x30e8], rax
lea rdx, [0x1801a2609]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a6ab5
nop
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov ecx, dword [0x1805e31b8]
sub ecx, eax
mov eax, ecx
cmp eax, 0x32
jle 0x180326d11
mov rax, qword [rbp + 0x418]
mov qword [0x1805e31a8], rax
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x2604]
call fcn.1801a7cc1
mov rax, qword [rbp + 0x2604]
mov qword [0x1805e31c0], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0x14]
movss dword [0x1805e31b4], xmm0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov dword [0x1805e31b8], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0xc]
mov dword [0x1805e31b0], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x20]
mov dword [0x1805e31bc], eax
movzx eax, byte [rbp + 0x244]
mov byte [0x1805e319a], al
jmp 0x180326e96
movzx eax, byte [rbp + 0x244]
test eax, eax
jne 0x180326e96
movzx eax, byte [0x1805e319a]
test eax, eax
jne 0x180326e96
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31b8]
cmp dword [rcx + rax + 0x18], edx
jge 0x180326e96
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov ecx, dword [0x1805e31b8]
sub ecx, eax
mov eax, ecx
mov edx, eax
lea rcx, [0x1805e6ab0]
call fcn.1801a3973
mov qword [rbp + 0x30e8], rax
lea rdx, [0x1801a2609]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a6ab5
nop
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov ecx, dword [0x1805e31b8]
sub ecx, eax
mov eax, ecx
cmp eax, 0x32
jle 0x180326e96
mov rax, qword [rbp + 0x418]
mov qword [0x1805e31a8], rax
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x2624]
call fcn.1801a7cc1
mov rax, qword [rbp + 0x2624]
mov qword [0x1805e31c0], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0x14]
movss dword [0x1805e31b4], xmm0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov dword [0x1805e31b8], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0xc]
mov dword [0x1805e31b0], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x20]
mov dword [0x1805e31bc], eax
movzx eax, byte [rbp + 0x244]
mov byte [0x1805e319a], al
jmp 0x180326f52
movss xmm2, dword [rbp + 0x43c]
movss xmm1, dword [rbp + 0x438]
lea rcx, [rbp + 0x2644]
call fcn.1801a7cc1
mov rax, qword [rbp + 0x2644]
mov qword [0x1805e31c0], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0x14]
movss dword [0x1805e31b4], xmm0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0xc]
mov dword [0x1805e31b0], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x20]
mov dword [0x1805e31bc], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov eax, dword [rcx + rax + 0x18]
mov dword [0x1805e31b8], eax
movzx eax, byte [rbp + 0x244]
mov byte [0x1805e319a], al
jmp 0x180326f5f
mov qword [0x1805e31a8], 0
mov rax, qword [0x1805e3180]
cmp qword [rbp + 0x418], rax
jne 0x180326f7b
mov dword [rbp + 0x30e4], 1
jmp 0x180326f85
mov dword [rbp + 0x30e4], 0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
movzx edx, byte [rbp + 0x30e4]
mov byte [rcx + rax + 0x1c], dl
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cmp dword [rcx + rax + 0xc], 0
jg 0x180326fd3
lea rcx, [rbp + 0x498]
call fcn.1801a3b8f
nop
jmp 0x180325dfe
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
movzx eax, byte [rcx + rax + 0x1c]
test eax, eax
jne 0x180328196
movzx eax, byte [rbp + 0x664]
test eax, eax
je 0x1803280ca
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov rax, qword [rcx + rax + 0x68]
mov qword [rbp + 0x708], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov rax, qword [rcx + rax + 0x78]
mov qword [rbp + 0x728], rax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rdx, [rbp + 0x748]
mov rdi, rdx
lea rsi, [rcx + rax + 0x50]
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [rbp + 0x70c]
subss xmm0, dword [rbp + 0x72c]
movss dword [rbp + 0x774], xmm0
movss xmm0, dword [rbp + 0x774]
divss xmm0, dword [0x1805636ec]
movss dword [rbp + 0x794], xmm0
movss xmm0, dword [rbp + 0x794]
divss xmm0, dword [0x180520dbc]
movss xmm1, dword [rbp + 0x728]
subss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0x7b4], xmm0
movss xmm0, dword [rbp + 0x774]
divss xmm0, dword [0x180520dc4]
movss xmm1, dword [rbp + 0x728]
subss xmm1, xmm0
movaps xmm0, xmm1
movss xmm2, dword [rbp + 0x72c]
movaps xmm1, xmm0
lea rcx, [rbp + 0x7d8]
call fcn.1801a7cc1
nop
movss xmm0, dword [rbp + 0x774]
divss xmm0, dword [0x180520dc4]
movss xmm1, dword [rbp + 0x708]
addss xmm1, xmm0
movaps xmm0, xmm1
movss xmm2, dword [rbp + 0x70c]
movaps xmm1, xmm0
lea rcx, [rbp + 0x7f8]
call fcn.1801a7cc1
nop
movss xmm0, dword [rbp + 0x7f8]
subss xmm0, dword [rbp + 0x7d8]
mulss xmm0, dword [0x180520d50]
movss dword [rbp + 0x814], xmm0
movzx eax, byte [0x1805d8657]
test eax, eax
je 0x18032748e
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e3240]
cmp dword [rcx + rax + 0x14], edx
jle 0x180327194
cmp dword [0x1805e3240], 0
je 0x180327194
jmp 0x180327489
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x1803271c5
movzx eax, byte [0x1805e31e8]
test eax, eax
je 0x1803271c5
jmp 0x180327489
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x18032733c
movzx eax, byte [rbp + 0x244]
cmp eax, 1
jne 0x18032729b
lea rax, [rbp + 0x26a8]
lea rcx, [0x1805d86a8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x7f8]
mov qword [rbp + 0x2688], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x2668], rax
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rax, [rbp + 0x2d10]
lea rcx, [rbp + 0x26a8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [rbp + 0x814]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x180520da0]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp + 0x2d10]
mov r8, qword [rbp + 0x2688]
mov rdx, qword [rbp + 0x2668]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801aa525
nop
jmp 0x180327337
lea rax, [rbp + 0x2718]
lea rcx, [0x1805d8678]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x7f8]
mov qword [rbp + 0x26f8], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x26d8], rax
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rax, [rbp + 0x2d40]
lea rcx, [rbp + 0x2718]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [rbp + 0x814]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x180520da0]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp + 0x2d40]
mov r8, qword [rbp + 0x26f8]
mov rdx, qword [rbp + 0x26d8]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801aa525
nop
jmp 0x180327489
movzx eax, byte [rbp + 0x244]
cmp eax, 1
jne 0x1803273ed
lea rax, [rbp + 0x2788]
lea rcx, [0x1805d86a8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x7f8]
mov qword [rbp + 0x2768], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x2748], rax
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rax, [rbp + 0x2d70]
lea rcx, [rbp + 0x2788]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [rbp + 0x814]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x180520da0]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp + 0x2d70]
mov r8, qword [rbp + 0x2768]
mov rdx, qword [rbp + 0x2748]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801aa525
nop
jmp 0x180327489
lea rax, [rbp + 0x27f8]
lea rcx, [0x1805d8698]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x7f8]
mov qword [rbp + 0x27d8], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x27b8], rax
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rax, [rbp + 0x2da0]
lea rcx, [rbp + 0x27f8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [rbp + 0x814]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x180520da0]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp + 0x2da0]
mov r8, qword [rbp + 0x27d8]
mov rdx, qword [rbp + 0x27b8]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801aa525
nop
jmp 0x180327697
movzx eax, byte [0x1805d863b]
test eax, eax
je 0x180327697
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e3240]
cmp dword [rcx + rax + 0x14], edx
jle 0x1803274cc
cmp dword [0x1805e3240], 0
je 0x1803274cc
jmp 0x180327697
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x1803274fd
movzx eax, byte [0x1805e31e8]
test eax, eax
je 0x1803274fd
jmp 0x180327697
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x1803275df
movzx eax, byte [rbp + 0x244]
cmp eax, 1
jne 0x180327585
lea rax, [rbp + 0x2dd0]
lea rcx, [0x1805d86a8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x2dd0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
movss xmm3, dword [rbp + 0x774]
movss xmm2, dword [rbp + 0x794]
movss xmm1, dword [rbp + 0x72c]
movss xmm0, dword [rbp + 0x7b4]
call fcn.1801aafe8
nop
jmp 0x1803275da
lea rax, [rbp + 0x2e00]
lea rcx, [0x1805d8678]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x2e00]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
movss xmm3, dword [rbp + 0x774]
movss xmm2, dword [rbp + 0x794]
movss xmm1, dword [rbp + 0x72c]
movss xmm0, dword [rbp + 0x7b4]
call fcn.1801aafe8
nop
jmp 0x180327697
movzx eax, byte [rbp + 0x244]
cmp eax, 1
jne 0x180327642
lea rax, [rbp + 0x2e30]
lea rcx, [0x1805d86a8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x2e30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
movss xmm3, dword [rbp + 0x774]
movss xmm2, dword [rbp + 0x794]
movss xmm1, dword [rbp + 0x72c]
movss xmm0, dword [rbp + 0x7b4]
call fcn.1801aafe8
nop
jmp 0x180327697
lea rax, [rbp + 0x2e60]
lea rcx, [0x1805d8698]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x2e60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
movss xmm3, dword [rbp + 0x774]
movss xmm2, dword [rbp + 0x794]
movss xmm1, dword [rbp + 0x72c]
movss xmm0, dword [rbp + 0x7b4]
call fcn.1801aafe8
nop
movzx eax, byte [0x1805d8656]
test eax, eax
je 0x180327727
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
mov edx, dword [0x1805e31a0]
cmp dword [rcx + rax + 0x20], edx
jne 0x1803276f8
lea rax, [rbp + 0x2e90]
lea rcx, [0x1805d8678]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x2e90]
mov rcx, qword [rbp + 0x728]
call fcn.1801a20e1
nop
jmp 0x180327727
lea rax, [rbp + 0x2ec0]
lea rcx, [0x1805d8698]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rdx, [rbp + 0x2ec0]
mov rcx, qword [rbp + 0x728]
call fcn.1801a20e1
nop
movzx eax, byte [0x1805e31ea]
test eax, eax
je 0x1803277b8
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
mov dword [rbp + 0x2828], 0
mov dword [rbp + 0x282c], 0x64
mov dword [rbp + 0x2830], 0
lea rax, [rbp + 0x2ef0]
lea rcx, [rbp + 0x2828]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x2ef0]
call fcn.1801aa88b
mov dword [rbp + 0x30f0], eax
mov dword [rsp + 0x20], 0
mov r9d, dword [rbp + 0x30f0]
movss xmm2, dword [0x180520dd0]
lea rdx, [rbp + 0x728]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a34b9
nop
movzx eax, byte [0x1805d8654]
test eax, eax
je 0x180327a1f
mov dword [rbp + 0x834], 0
jmp 0x1803277e1
mov eax, dword [rbp + 0x834]
inc eax
mov dword [rbp + 0x834], eax
movsxd rax, dword [rbp + 0x834]
cmp rax, 0x10
jae 0x180327a1f
mov dword [rbp + 0x858], 0
mov dword [rbp + 0x85c], 0xff
mov dword [rbp + 0x860], 0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0x888]
call fcn.1801a781b
nop
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0x8b8]
call fcn.1801a781b
nop
movsxd rax, dword [rbp + 0x834]
lea rcx, [0x1805e3250]
mov eax, dword [rcx + rax*8]
mov dword [rbp + 0x8e4], eax
movsxd rax, dword [rbp + 0x834]
lea rcx, [0x1805e3250]
mov eax, dword [rcx + rax*8 + 4]
mov dword [rbp + 0x904], eax
imul eax, dword [rbp + 0x8e4], 0x20
cdqe
mov rcx, qword [rbp + 0x5f8]
add rcx, rax
mov rax, rcx
mov r8, rax
mov rdx, qword [0x1805e3238]
lea rcx, [rbp + 0x928]
call fcn.1801a721c
nop
imul eax, dword [rbp + 0x904], 0x20
cdqe
mov rcx, qword [rbp + 0x5f8]
add rcx, rax
mov rax, rcx
mov r8, rax
mov rdx, qword [0x1805e3238]
lea rcx, [rbp + 0x958]
call fcn.1801a721c
nop
lea rax, [rbp + 0x2878]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x2854]
call fcn.1801a781b
lea rax, [rbp + 0x2f20]
lea rcx, [rbp + 0x2878]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
lea r9, [rbp + 0x2f20]
lea r8, [rbp + 0x888]
lea rdx, [rbp + 0x928]
lea rcx, [rbp + 0x2854]
call fcn.1801abd17
nop
lea rax, [rbp + 0x28f8]
lea rcx, [0x1805e31f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
cvtsi2ss xmm0, dword [0x1805e3244]
cvtsi2ss xmm1, dword [0x1805e3328]
xorps xmm3, xmm3
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0x28d4]
call fcn.1801a781b
lea rax, [rbp + 0x2f80]
lea rcx, [rbp + 0x28f8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
lea r9, [rbp + 0x2f80]
lea r8, [rbp + 0x8b8]
lea rdx, [rbp + 0x958]
lea rcx, [rbp + 0x28d4]
call fcn.1801abd17
nop
lea rax, [rbp + 0x2fe0]
lea rcx, [rbp + 0x858]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss xmm0, dword [0x180520da0]
movss dword [rsp + 0x28], xmm0
lea rax, [rbp + 0x2fe0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [rbp + 0x8bc]
movss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x88c]
movss xmm0, dword [rbp + 0x888]
call fcn.1801a8595
nop
jmp 0x1803277d3
movss xmm0, dword [rbp + 0x70c]
subss xmm0, dword [rbp + 0x72c]
movss dword [rbp + 0x984], xmm0
cvtss2sd xmm0, dword [rbp + 0x728]
cvtss2sd xmm1, dword [rbp + 0x984]
divsd xmm1, qword [0x1805636e0]
subsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x9a4], xmm0
cvtss2sd xmm0, dword [rbp + 0x708]
cvtss2sd xmm1, dword [rbp + 0x984]
divsd xmm1, qword [0x1805636e0]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x9c4], xmm0
movss xmm0, dword [rbp + 0x984]
divss xmm0, dword [0x180520dbc]
movss xmm1, dword [rbp + 0x72c]
subss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0x9e4], xmm0
movss xmm0, dword [0x180520d3c]
movss dword [rbp + 0xa04], xmm0
movss xmm0, dword [rbp + 0x9c4]
subss xmm0, dword [rbp + 0x9a4]
movss xmm1, dword [rbp + 0xa04]
mulss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0xa24], xmm0
movss xmm0, dword [0x180520d50]
movss dword [rbp + 0xa44], xmm0
movss xmm0, dword [rbp + 0x9c4]
subss xmm0, dword [rbp + 0x9a4]
movss xmm1, dword [rbp + 0xa44]
mulss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0xa64], xmm0
movss xmm0, dword [0x180520da0]
movss dword [rbp + 0xa84], xmm0
movss xmm0, dword [rbp + 0x9c4]
subss xmm0, dword [rbp + 0x9a4]
movss xmm1, dword [rbp + 0xa84]
mulss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0xaa4], xmm0
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0xc]
divss xmm0, dword [0x180520e1c]
movss xmm1, dword [rbp + 0x984]
mulss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0xac4], xmm0
movss xmm0, dword [rbp + 0x9a4]
subss xmm0, dword [rbp + 0xa24]
movss xmm1, dword [rbp + 0x70c]
subss xmm1, dword [rbp + 0xac4]
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0xae8]
call fcn.1801a7cc1
nop
movss xmm2, dword [rbp + 0x70c]
movss xmm1, dword [rbp + 0x9a4]
lea rcx, [rbp + 0xb08]
call fcn.1801a7cc1
nop
movss xmm0, dword [rbp + 0x9c4]
addss xmm0, dword [rbp + 0xa64]
movss xmm1, dword [rbp + 0x70c]
subss xmm1, dword [rbp + 0xac4]
subss xmm1, dword [rbp + 0xa84]
movaps xmm2, xmm1
movaps xmm1, xmm0
lea rcx, [rbp + 0xb28]
call fcn.1801a7cc1
nop
mov rax, qword [rbp + 0x418]
add rax, 0x2290
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a9b9d
movzx eax, al
test eax, eax
je 0x180327c51
movss xmm1, dword [rbp + 0xb2c]
movss xmm0, dword [rbp + 0xb28]
call fcn.1801abf88
nop
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0xc]
movss dword [rbp + 0xb44], xmm0
movss xmm0, dword [rbp + 0xb44]
comiss xmm0, dword [0x180538a18]
jbe 0x180327cc3
mov dword [rbp + 0x2958], 0
mov dword [rbp + 0x295c], 0xff
mov dword [rbp + 0x2960], 0
lea rax, [rbp + 0xb68]
lea rcx, [rbp + 0x2958]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
jmp 0x180327db9
movss xmm0, dword [rbp + 0xb44]
comiss xmm0, dword [0x180538a08]
jbe 0x180327d23
movss xmm0, dword [0x180538a18]
comiss xmm0, dword [rbp + 0xb44]
jbe 0x180327d23
mov dword [rbp + 0x2988], 0xff
mov dword [rbp + 0x298c], 0xa5
mov dword [rbp + 0x2990], 0
lea rax, [rbp + 0xb68]
lea rcx, [rbp + 0x2988]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
jmp 0x180327db9
movss xmm0, dword [rbp + 0xb44]
comiss xmm0, dword [0x180520e08]
jbe 0x180327d80
movss xmm0, dword [0x180538a08]
comiss xmm0, dword [rbp + 0xb44]
jbe 0x180327d80
mov dword [rbp + 0x29b8], 0xa0
mov dword [rbp + 0x29bc], 0
mov dword [rbp + 0x29c0], 0
lea rax, [rbp + 0xb68]
lea rcx, [rbp + 0x29b8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
jmp 0x180327db9
mov dword [rbp + 0x29e8], 0xff
mov dword [rbp + 0x29ec], 0
mov dword [rbp + 0x29f0], 0
lea rax, [rbp + 0xb68]
lea rcx, [rbp + 0x29e8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movzx eax, byte [0x1805d8664]
test eax, eax
je 0x180327e35
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rax, [rbp + 0x3010]
lea rcx, [rbp + 0xb68]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x3010]
call fcn.1801aa88b
mov dword [rbp + 0x30f0], eax
mov dword [rsp + 0x28], 0
movss xmm0, dword [0x180520dcc]
movss dword [rsp + 0x20], xmm0
mov r9d, dword [rbp + 0x30f0]
lea r8, [rbp + 0xb08]
lea rdx, [rbp + 0xae8]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a359a
nop
movss xmm0, dword [rbp + 0x708]
subss xmm0, dword [rbp + 0x728]
mulss xmm0, dword [0x180520dbc]
movss dword [rbp + 0xb94], xmm0
movss xmm0, dword [rbp + 0x708]
subss xmm0, dword [rbp + 0xb94]
movss xmm2, dword [rbp + 0x72c]
movaps xmm1, xmm0
lea rcx, [rbp + 0xbb8]
call fcn.1801a7cc1
nop
cvtss2sd xmm0, dword [rbp + 0x984]
mulsd xmm0, qword [str.333333]
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0xbd4], xmm0
movss xmm0, dword [rbp + 0x70c]
subss xmm0, dword [rbp + 0xbd4]
movss xmm1, dword [0x180520da0]
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [0x180520dbc]
movaps xmm2, xmm0
movss xmm1, dword [rbp + 0x708]
lea rcx, [rbp + 0xbf8]
call fcn.1801a58f4
nop
lea rcx, [rbp + 0xbf8]
call fcn.1801a8b71
mov rcx, rax
call fcn.1801a3626
mov qword [rbp + 0xc18], rax
lea rcx, [rbp + 0xbf8]
call fcn.1801a8b71
mov rcx, rax
call fcn.1801a3c70
mov qword [rbp + 0xc38], rax
movss xmm0, dword [rbp + 0x70c]
subss xmm0, dword [rbp + 0xbd4]
movaps xmm2, xmm0
movss xmm1, dword [rbp + 0x708]
lea rcx, [rbp + 0xc58]
call fcn.1801a7cc1
nop
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rcx, [rbp + 0x498]
call fcn.1801a2d7f
mov qword [rbp + 0x30f0], rax
mov dword [rbp + 0x2a18], 0xff
mov dword [rbp + 0x2a1c], 0xff
mov dword [rbp + 0x2a20], 0xff
lea rax, [rbp + 0x3040]
lea rcx, [rbp + 0x2a18]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x3040]
call fcn.1801aa88b
mov dword [rbp + 0x30f8], eax
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x30f0]
mov r8d, dword [rbp + 0x30f8]
lea rdx, [rbp + 0xc58]
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a9184
nop
mov rax, qword [rbp + 0x418]
add rax, 0x12f0
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a5e8a
mov qword [rbp + 0xc78], rax
mov rax, qword [rbp + 0xc78]
add rax, 0x129a
mov rdx, rax
mov rcx, qword [0x1805e3238]
call fcn.1801a3b35
mov dword [rbp + 0xc94], eax
cmp dword [rbp + 0xc94], 0xffffffff
je 0x1803280ca
movzx edx, word [rbp + 0xc94]
lea rcx, [rbp + 0xcb8]
call fcn.1801aa19c
nop
call fcn.1801a784d
mov qword [rbp + 0x30e8], rax
lea rcx, [rbp + 0xcb8]
call fcn.1801a2d7f
mov qword [rbp + 0x30f0], rax
lea rax, [rbp + 0x3070]
lea rcx, [0x1805d8688]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x3070]
call fcn.1801aa88b
mov dword [rbp + 0x30f8], eax
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
lea rax, [rcx + rax + 0x68]
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x30f0]
mov r8d, dword [rbp + 0x30f8]
mov rdx, rax
mov rcx, qword [rbp + 0x30e8]
call fcn.1801a9184
nop
lea rcx, [rbp + 0xcb8]
call fcn.1801a3b8f
nop
movzx eax, byte [rbp + 0x6a4]
test eax, eax
je 0x180328176
mov ecx, 6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x180328176
cmp qword [0x1805e31a8], 0
je 0x180328176
movsxd rax, dword [rbp + 0x374]
imul rax, rax, 0x80
lea rcx, [0x1805e3340]
cvtsi2ss xmm0, dword [rcx + rax + 0x14]
lea rax, [rbp + 0x30d0]
lea rcx, [rbp + 0x468]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x30a0]
lea rcx, [0x1805e5398]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x180520d3c]
mov r8, qword [0x1805e31c0]
lea rdx, [rbp + 0x30d0]
lea rcx, [rbp + 0x30a0]
call fcn.1801a82b6
nop
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x180328196
mov qword [0x1805e31a8], 0
lea rcx, [rbp + 0x498]
call fcn.1801a3b8f
nop
jmp 0x180325dfe
call fcn.1801aae9e
nop
xorps xmm0, xmm0
movss dword [rbp + 0xcf8], xmm0
xorps xmm0, xmm0
movss dword [rbp + 0xcfc], xmm0
xorps xmm0, xmm0
movss dword [rbp + 0xd00], xmm0
xorps xmm0, xmm0
movss dword [rbp + 0xd04], xmm0
mov rax, qword [0x1805e5420]
mov rax, qword [rax]
mov rax, qword [rax + 0x108]
mov qword [rbp + 0x30e8], rax
xor r9d, r9d
lea r8, [0x1805e5438]
mov edx, 1
mov rcx, qword [0x1805e5420]
call qword [rbp + 0x30e8]
nop
mov rax, qword [0x1805e5420]
mov rax, qword [rax]
mov rax, qword [rax + 0x190]
mov qword [rbp + 0x30e8], rax
lea r8, [rbp + 0xcf8]
mov rdx, qword [0x1805e5438]
mov rcx, qword [0x1805e5420]
call qword [rbp + 0x30e8]
nop
call fcn.1801aa5ac
mov rcx, rax
call fcn.1801a2546
nop
mov byte [0x1805e3248], 0
cmp dword [0x1805e5430], 0
je 0x1803282cf
cmp dword [0x1805e5434], 0
je 0x1803282cf
call fcn.1801a25c3
nop
mov rax, qword [0x1805e5428]
mov rax, qword [rax]
mov rax, qword [rax + 0x68]
mov qword [rbp + 0x30e8], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, dword [0x1805e5434]
mov r8d, dword [0x1805e5430]
xor edx, edx
mov rcx, qword [0x1805e5428]
call qword [rbp + 0x30e8]
nop
mov dword [0x1805e5434], 0
mov eax, dword [0x1805e5434]
mov dword [0x1805e5430], eax
call fcn.1801a5c5a
nop
mov rax, qword [0x1805e5428]
mov rax, qword [rax]
mov rax, qword [rax + 0x40]
mov qword [rbp + 0x30e8], rax
xor r8d, r8d
mov edx, 1
mov rcx, qword [0x1805e5428]
call qword [rbp + 0x30e8]
mov dword [rbp + 0xd24], eax
cmp dword [rbp + 0xd24], 0x87a0001
jne 0x180328317
mov dword [rbp + 0x30e4], 1
jmp 0x180328321
mov dword [rbp + 0x30e4], 0
movzx eax, byte [rbp + 0x30e4]
mov byte [0x1805e3248], al
jmp 0x180325c46
call fcn.1801aa304
nop
call fcn.1801a3a31
nop
xor ecx, ecx
call fcn.1801a818a
nop
call fcn.1801aa3ea
nop
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.USER32.dll_DestroyWindow]
nop
mov rdx, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov dword [rbp + 0x2a44], 0
lea rcx, [rbp + 0x1a8]
call fcn.1801a819e
nop
lea rcx, [rbp + 0xe8]
call fcn.1801a6254
nop
lea rcx, [rbp + 0xb8]
call fcn.1801a6254
nop
lea rcx, [rbp + 0x88]
call fcn.1801a6254
mov eax, dword [rbp + 0x2a44]
mov rdi, rax
lea rcx, [rbp - 0x60]
lea rdx, [0x18055d8a0]
call fcn.1801a99ef
mov rax, rdi
mov rcx, qword [rbp + 0x3100]
xor rcx, rbp
call fcn.1801a66be
lea rsp, [rbp + 0x3110]
pop rdi
pop rsi
pop rbp
ret