Function at 0x180007460
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5b8]
sub rsp, 0x690
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1800bc5c0]
xor rax, rsp
mov qword [rbp + 0x4e8], rax
xor r13d, r13d
mov r12d, r13d
mov dword [rbp + 0x268], r13d
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x308], xmm1
mov qword [rbp + 0x318], r13
mov rcx, qword [0x1800bcdb0]
sub rcx, qword [0x1800bcda8]
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x180007641
movabs rax, 0x38e38e38e38e38e
cmp rdx, rax
ja 0x18000a82a
lea rax, [rdx + rdx*8]
lea rdi, [rax*8]
cmp rdi, 0x1000
jb 0x180007578
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x18000a830
call fcn.18005ea28
test rax, rax
je 0x180007571
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18000758d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
je 0x18000758a
mov rcx, rdi
call fcn.18005ea28
mov rbx, rax
jmp 0x18000758d
mov rbx, r13
mov qword [rbp + 0x308], rbx
mov qword [rbp + 0x310], rbx
lea rax, [rdi + rbx]
mov qword [rbp + 0x318], rax
lea rax, [rbp + 0x308]
mov qword [rbp + 0x18], rax
mov rsi, qword [0x1800bcdb0]
mov rdi, qword [0x1800bcda8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2b0], rbx
mov qword [rbp + 0x2b8], rbx
lea rax, [rbp + 0x308]
mov qword [rbp + 0x2c0], rax
cmp rdi, rsi
je 0x18000763a
add rdi, 0x10
nop
mov rax, qword [rdi - 0x10]
mov qword [rbx], rax
mov rax, qword [rdi - 8]
mov qword [rbx + 8], rax
mov rax, qword [rdi]
mov qword [rbx + 0x10], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 0x18], rax
movzx eax, byte [rdi + 0x10]
mov byte [rbx + 0x20], al
lea rcx, [rbx + 0x28]
lea rdx, [rdi + 0x18]
call fcn.1800042b0
add rbx, 0x48
mov qword [rbp + 0x2b8], rbx
lea rdi, [rdi + 0x48]
lea rax, [rdi - 0x10]
cmp rax, rsi
jne 0x1800075f0
mov qword [rbp + 0x310], rbx
movsd xmm0, qword [0x180063500]
movsd qword [rbp + 0x90], xmm0
mov qword [rbp + 0x178], r13
movss xmm14, dword [0x180063398]
movss xmm15, dword [0x1800633a4]
cmp byte [0x1800bcae5], 0
je 0x1800076ce
call fcn.180021bd0
movss xmm1, dword [0x1800bcb9c]
mulss xmm1, xmm14
movss xmm0, dword [0x1800bcb98]
mulss xmm0, xmm14
movss dword [rbp + 0x290], xmm0
movss dword [rbp + 0x294], xmm1
movss dword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], 0x316
mov r9d, 0xbeffffff
movss xmm2, dword [0x1800bb904]
lea rdx, [rbp + 0x290]
mov rcx, rax
call fcn.180032ec0
mov rdx, qword [0x1800bcc30]
add rdx, 0x900
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov r9d, 0x80
lea r8, [rbp + 0x180]
lea rcx, [0x1800bce20]
call fcn.180001ae0
movups xmm0, xmmword [rbp + 0x180]
movups xmmword [0x1800bcc40], xmm0
movups xmm8, xmmword [rbp + 0x190]
movups xmmword [0x1800bcc50], xmm8
movups xmm0, xmmword [rbp + 0x1a0]
movups xmmword [0x1800bcc60], xmm0
movups xmm1, xmmword [rbp + 0x1b0]
movups xmmword [0x1800bcc70], xmm1
movups xmm7, xmmword [rbp + 0x1c0]
movups xmmword [0x1800bcc80], xmm7
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [0x1800bcc90], xmm0
movups xmm12, xmmword [rbp + 0x1e0]
movups xmmword [0x1800bcca0], xmm12
movups xmm13, xmmword [rbp + 0x1f0]
movups xmmword [0x1800bccb0], xmm13
cvtsd2ss xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
xorps xmm11, xmm11
cvtss2sd xmm11, xmm0
movsd xmm10, qword [0x180063428]
mulsd xmm11, xmm10
movsd xmm9, qword [0x1800633d0]
divsd xmm11, xmm9
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm7
unpckhpd xmm7, xmm7
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm7, xmm7
cvtss2sd xmm7, xmm0
mulsd xmm7, xmm10
divsd xmm7, xmm9
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm8
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
mulsd xmm6, xmm10
divsd xmm6, xmm9
mov rdx, qword [0x1800bcc30]
add rdx, 0x700
xorps xmm0, xmm0
movsd qword [rsp + 0x60], xmm0
movsd qword [rbp + 0x290], xmm0
mov r9d, 8
lea r8, [rbp + 0x290]
lea rcx, [0x1800bce20]
call fcn.180001ae0
movsd xmm0, qword [0x1800633c0]
divsd xmm0, qword [rbp + 0x290]
cvtpd2ps xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_atanf
addss xmm0, xmm0
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, xmm10
divsd xmm1, xmm9
cvtpd2ps xmm4, xmm1
movsd qword [0x1800bcd28], xmm12
unpckhpd xmm12, xmm12
movsd qword [0x1800bcd30], xmm12
movsd qword [0x1800bcd38], xmm13
movsd qword [0x1800bcd40], xmm11
movsd qword [0x1800bcd48], xmm7
movsd qword [0x1800bcd50], xmm6
movss dword [0x1800bcd58], xmm4
movsd xmm2, qword [0x1800bcc90]
movups xmm0, xmmword [0x1800bcc80]
movups xmmword [0x1800bcd60], xmm0
movsd qword [0x1800bcd70], xmm2
movsd xmm3, qword [0x1800bcc50]
movups xmm0, xmmword [0x1800bcc40]
movups xmmword [0x1800bcd78], xmm0
movsd qword [0x1800bcd88], xmm3
movsd xmm2, qword [0x1800bcc70]
movups xmm0, xmmword [0x1800bcc60]
movups xmmword [0x1800bcd90], xmm0
movsd qword [0x1800bcda0], xmm2
movss xmm3, dword [0x1800bb8ec]
divss xmm3, xmm4
movss xmm0, dword [0x1800bcb9c]
mulss xmm3, xmm0
divss xmm0, dword [0x1800bcb98]
mulss xmm3, xmm0
andps xmm3, xmmword [0x180063650]
movss dword [0x1800bb904], xmm3
mov rdi, qword [rbp + 0x308]
mov qword [rbp + 0x290], rdi
mov rsi, qword [rbp + 0x310]
mov qword [rsp + 0x48], rsi
xorps xmm8, xmm8
movss xmm13, dword [0x1800633c8]
cmp rdi, rsi
je 0x180009a9c
movzx ebx, byte [rbp + 0x260]
nop
mov rax, qword [rdi]
mov qword [rbp + 0x490], rax
mov rax, qword [rdi + 8]
mov qword [rbp + 0x498], rax
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x4a0], rax
mov rax, qword [rdi + 0x18]
mov qword [rbp + 0x4a8], rax
movzx eax, byte [rdi + 0x20]
mov byte [rbp + 0x4b0], al
lea rdx, [rdi + 0x28]
lea rcx, [rbp + 0x4b8]
call fcn.1800042b0
nop
cmp qword [0x1800bca80], 0
je 0x180009a47
mov r14, qword [rbp + 0x498]
mov qword [rbp + 0x268], r14
mov r15, qword [rbp + 0x4a0]
mov qword [rsp + 0x30], r15
mov r13, qword [rbp + 0x490]
mov qword [rbp + 0x270], r13
mov rax, qword [rbp + 0x4a8]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x58], 0
xor r9d, r9d
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x180]
call fcn.180005990
movsd xmm11, qword [rbp + 0x1e0]
movsd xmm12, qword [rbp + 0x1e8]
movsd xmm7, qword [rbp + 0x1f0]
movsd qword [rbp - 0x18], xmm7
movsd qword [rbp + 0x240], xmm11
movsd qword [rbp + 0x248], xmm12
movsd qword [rbp + 0x250], xmm7
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
movss xmm10, dword [rsp + 0x58]
movss dword [rsp + 0x40], xmm10
ucomiss xmm10, xmm8
movss xmm9, dword [rsp + 0x5c]
jp 0x180007aa8
jne 0x180007aa8
ucomiss xmm9, xmm8
jp 0x180007aa8
je 0x180009b89
movsd xmm0, qword [rsp + 0x60]
ucomisd xmm11, xmm0
jp 0x180007acc
jne 0x180007acc
ucomisd xmm12, xmm0
jp 0x180007acc
jne 0x180007acc
ucomisd xmm7, xmm0
jp 0x180007acc
je 0x180009b89
movaps xmm0, xmm12
subsd xmm0, qword [0x1800bcd30]
cvtpd2ps xmm0, xmm0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movaps xmm0, xmm11
subsd xmm0, qword [0x1800bcd28]
cvtpd2ps xmm0, xmm0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
subsd xmm7, qword [0x1800bcd38]
cvtpd2ps xmm0, xmm7
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x180007b2f
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x180007b37
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm13, xmm13
cvtss2sd xmm13, xmm0
mulsd xmm13, qword [0x1800633a8]
movsd qword [rbp + 0x168], xmm13
cmp byte [0x1800bcbf8], 0
je 0x180007b90
movaps xmm0, xmm11
unpcklpd xmm0, xmm12
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp - 0x18]
movsd qword [rbp + 0x250], xmm0
cvttsd2si r8d, xmm13
movzx edx, byte [0x1800bcab5]
lea rcx, [rbp + 0x240]
call fcn.18000b480
cmp byte [0x1800a045e], 0
je 0x180007d0d
cmp byte [0x1800bcbc7], 0
je 0x180007d0d
mov eax, dword [0x1800bb940]
test eax, eax
jne 0x180007c1a
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.18001f6a0
mov edi, eax
movss dword [rbp + 0x60], xmm10
movss dword [rbp + 0x64], xmm9
movss xmm0, dword [0x1800bcb98]
mulss xmm0, xmm14
movss dword [rbp + 0x68], xmm0
mov dword [rbp + 0x6c], 0
call fcn.180021bd0
movss dword [rsp + 0x20], xmm15
mov r9d, edi
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x68]
mov rcx, rax
call fcn.180034370
mov eax, dword [0x1800bb940]
cmp eax, 1
jne 0x180007c90
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.18001f6a0
mov edi, eax
movss dword [rbp + 0x70], xmm10
movss dword [rbp + 0x74], xmm9
movss xmm1, dword [0x1800bcb9c]
mulss xmm1, xmm14
movss xmm0, dword [0x1800bcb98]
mulss xmm0, xmm14
movss dword [rbp + 0x78], xmm0
movss dword [rbp + 0x7c], xmm1
call fcn.180021bd0
movss dword [rsp + 0x20], xmm15
mov r9d, edi
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.180034370
mov eax, dword [0x1800bb940]
cmp eax, 2
jne 0x180007d0d
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.18001f6a0
mov edi, eax
movss dword [rbp + 0x80], xmm10
movss dword [rbp + 0x84], xmm9
movss xmm0, dword [0x1800bcb98]
mulss xmm0, xmm14
movss dword [rbp + 0x88], xmm0
movss xmm0, dword [0x1800bcb9c]
movss dword [rbp + 0x8c], xmm0
call fcn.180021bd0
movss dword [rsp + 0x20], xmm15
mov r9d, edi
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x88]
mov rcx, rax
call fcn.180034370
cmp byte [0x1800bcbe4], 0
je 0x180007d43
cmp byte [0x1800bcbe7], 0
je 0x180007d25
inc dword [0x1800bcbec]
cmp byte [0x1800bcbe5], 0
je 0x180007d43
movsd xmm0, qword [0x180063410]
comisd xmm0, xmm13
jb 0x180007d43
inc dword [0x1800bcbf4]
mov qword [rsp + 0x50], 0
mov r9d, 0x6d
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x180]
call fcn.180005990
movsd xmm11, qword [rbp + 0x1e0]
movsd qword [rbp + 0x240], xmm11
movsd xmm0, qword [rbp + 0x1e8]
movsd qword [rbp + 0x248], xmm0
movsd xmm12, qword [rbp + 0x1f0]
movsd qword [rbp + 0x250], xmm12
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
movss xmm2, dword [rsp + 0x50]
ucomiss xmm2, xmm8
jp 0x180007dc9
jne 0x180007dc9
movss xmm0, dword [rsp + 0x54]
ucomiss xmm0, xmm8
jp 0x180007dc9
je 0x180007e5d
movss xmm8, dword [0x1800bcb9c]
mulss xmm8, xmm14
movss xmm1, dword [0x1800bcb98]
mulss xmm1, xmm14
movss xmm7, dword [0x1800633c8]
subss xmm1, xmm2
movaps xmm0, xmm1
movaps xmm1, xmm7
call fcn.18005ef10
movaps xmm6, xmm0
subss xmm8, dword [rsp + 0x54]
movaps xmm0, xmm8
movaps xmm1, xmm7
call fcn.18005ef10
addss xmm0, xmm6
xorps xmm1, xmm1
ucomiss xmm1, xmm0
ja 0x180007e23
sqrtss xmm0, xmm0
jmp 0x180007e28
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x1800bb904]
xorps xmm8, xmm8
comiss xmm1, xmm0
jb 0x180007e5d
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
movsd xmm0, qword [rbp + 0x90]
comisd xmm0, xmm1
jbe 0x180007e5d
movsd qword [rbp + 0x90], xmm1
mov qword [rbp + 0x178], r13
lea rcx, [rbp + 0x298]
call qword [sym.imp.USER32.dll_GetCursorPos]
cmp byte [0x18008e44f], 0
je 0x180008203
mov r9d, 0x6d
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movsd xmm6, qword [rbp + 0x3e0]
movsd xmm7, qword [rbp + 0x3e8]
movsd xmm11, qword [rbp + 0x3f0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
xor edi, edi
mov qword [rbp + 0x2d8], rdi
mov qword [rbp + 0x2e0], rdi
lea r8d, [rdi + 7]
lea rdx, str.Shotgun
lea rcx, [rbp + 0x2c8]
call fcn.180002eb0
lea r14, [rbp + 0x2c8]
mov rcx, qword [rbp + 0x2c8]
cmp qword [rbp + 0x2e0], 0xf
cmova r14, rcx
lea r15, [0x1800bb948]
cmp qword [0x1800bb960], 0xf
cmova r15, qword [0x1800bb948]
mov rsi, qword [rbp + 0x2d8]
mov rax, qword [0x1800bb958]
cmp rsi, rax
ja 0x180007f92
sub rax, rsi
test rsi, rsi
je 0x180007f99
lea r13, [rax + r15]
movsx edx, byte [r14]
lea r8, [r13 + 1]
sub r8, r15
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x180007f84
nop dword [rax]
nop dword [rax + rax]
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800080ec
inc rdi
lea r8, [r13 + 1]
sub r8, rdi
movsx edx, byte [r14]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x180007f50
mov rcx, qword [rbp + 0x2c8]
mov r13, qword [rbp + 0x270]
mov rdi, 0xffffffffffffffff
mov r8, qword [rbp + 0x2e0]
cmp r8, 0xf
jbe 0x180007fb5
mov rdx, rcx
lea rcx, [rbp + 0x2c8]
call fcn.1800072f0
cmp rdi, 0xffffffffffffffff
je 0x1800081ee
mov rdx, qword [0x1800bcaa0]
add rdx, 0x2560
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
movsd xmm1, qword [rsp + 0x60]
movsd qword [rbp + 0x250], xmm1
mov r9d, 0x18
lea r8, [rbp + 0x240]
lea rcx, [0x1800bce20]
call fcn.180001ae0
movaps xmm0, xmm6
movsd xmm2, qword [0x1800633f8]
subsd xmm0, xmm2
movsd xmm1, qword [rbp + 0x240]
comisd xmm1, xmm0
jb 0x1800081ee
addsd xmm6, xmm2
comisd xmm6, xmm1
jb 0x1800081ee
movaps xmm0, xmm7
subsd xmm0, xmm2
movsd xmm1, qword [rbp + 0x248]
comisd xmm1, xmm0
jb 0x1800081ee
addsd xmm7, xmm2
comisd xmm7, xmm1
jb 0x1800081ee
movaps xmm0, xmm11
movsd xmm2, qword [0x180063400]
subsd xmm0, xmm2
movsd xmm1, qword [rbp + 0x250]
comisd xmm1, xmm0
jb 0x1800081ee
addsd xmm11, xmm2
comisd xmm11, xmm1
jb 0x1800081ee
cmp byte [0x1800a045d], 0
je 0x180008102
mov rax, qword [0x1800bc9a0]
mov ecx, dword [0x1800bb908]
call rax
test ax, ax
je 0x1800081ee
movss xmm0, dword [0x1800bb910]
cvtps2pd xmm0, xmm0
comisd xmm0, xmm13
jb 0x1800081ee
cmp byte [0x1800bcab7], 0
je 0x1800080e3
lea rcx, [rbp + 0x238]
call fcn.1800166b0
mov rcx, qword [rax]
mov qword [0x1800bcbc8], rcx
mov byte [0x1800bcab7], 0
lea rcx, [rbp + 0x220]
jmp 0x180008152
sub rdi, r15
mov rcx, qword [rbp + 0x2c8]
mov r13, qword [rbp + 0x270]
jmp 0x180007f99
cmp byte [0x1800bcb6e], 0
je 0x1800081ee
movss xmm0, dword [0x1800bb910]
cvtps2pd xmm0, xmm0
comisd xmm0, xmm13
jb 0x1800081ee
cmp byte [0x1800bcab7], 0
je 0x18000814b
lea rcx, [rbp + 0x230]
call fcn.1800166b0
mov rcx, qword [rax]
mov qword [0x1800bcbc8], rcx
mov byte [0x1800bcab7], 0
lea rcx, [rbp + 0x228]
call fcn.1800166b0
mov rcx, qword [rax]
mov qword [0x1800bcbd0], rcx
movabs rax, 0x431bde82d7b634db
sub rcx, qword [0x1800bcbc8]
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, dword [0x1800bb90c]
mov dword [0x1800bcbd8], edx
jl 0x1800081ee
movzx r9d, word [rbp + 0x29c]
movzx eax, word [rbp + 0x298]
shl r9d, 0x10
or r9, rax
xor r8d, r8d
mov edx, 0x201
mov rcx, qword [0x1800bcb90]
call qword [sym.imp.USER32.dll_PostMessageA]
movzx r9d, word [rbp + 0x29c]
movzx eax, word [rbp + 0x298]
shl r9d, 0x10
or r9, rax
xor r8d, r8d
mov edx, 0x202
mov rcx, qword [0x1800bcb90]
call qword [sym.imp.USER32.dll_PostMessageA]
mov byte [0x1800bcab7], 1
movsd xmm11, qword [rbp + 0x1e0]
mov r14, qword [rbp + 0x268]
mov r15, qword [rsp + 0x30]
cmp byte [0x1800bcbfa], 0
je 0x1800082c2
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008294
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
lea rsi, [rbp + 0x5b8]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0x248], rcx
mov qword [rbp + 0x250], rsi
mov rdi, qword [rsi]
mov rax, rdi
xor rax, rcx
mov qword [rbp + 0x240], rax
mov qword [rsi], 0
mov dword [rbp + 0x288], 0x38d1b717
mov rdx, qword [rbp + 0x490]
add rdx, 0x68
mov r9d, 4
lea r8, [rbp + 0x288]
lea rcx, [0x1800bce20]
call fcn.180001c20
nop
mov qword [rsi], rdi
jmp 0x1800082c2
mov dword [rbp + 0x268], 0x3f800000
mov rdx, qword [rbp + 0x490]
add rdx, 0x68
mov r9d, 4
lea r8, [rbp + 0x268]
lea rcx, [0x1800bce20]
call fcn.180001c20
cmp byte [0x1800bcbfb], 0
je 0x18000841b
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000841b
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x5b8]
movabs rdx, 0xff00ff00ff00ff00
mov qword [rbp + 0x248], rdx
mov qword [rbp + 0x250], rcx
mov rsi, qword [rcx]
mov rax, rsi
xor rax, rdx
mov qword [rbp + 0x240], rax
mov qword [rcx], 0
lea rcx, [r13 + 0x198]
call fcn.180002b70
mov rdi, rax
movsd xmm0, qword [0x1800bcd48]
mulsd xmm0, qword [0x1800633b0]
cvtpd2ps xmm6, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movss xmm7, dword [0x1800634cc]
mulss xmm0, xmm7
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
addsd xmm1, qword [0x1800bcd28]
movsd qword [rbp + 0x270], xmm1
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm7
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
addsd xmm1, qword [0x1800bcd30]
movsd qword [rbp + 0x278], xmm1
movsd xmm0, qword [0x1800bcd40]
mulsd xmm0, qword [0x1800633b0]
cvtpd2ps xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_tanf
mulss xmm0, xmm7
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
addsd xmm1, qword [0x1800bcd38]
subsd xmm1, qword [0x180063418]
movsd qword [rbp + 0x280], xmm1
lea rdx, [rdi + 0x120]
mov r9d, 0x18
lea r8, [rbp + 0x270]
lea rcx, [0x1800bce20]
call fcn.180001c20
lea rdx, [rdi + 0x250]
mov r9d, 0x18
lea r8, [rbp + 0x270]
lea rcx, [0x1800bce20]
call fcn.180001c20
nop
lea rax, [rbp + 0x5b8]
mov qword [rax], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
xor r13d, r13d
mov qword [rbp + 0x330], r13
mov qword [rbp + 0x338], 0xf
mov byte [rbp + 0x320], r13b
cmp byte [0x1800a045e], r13b
je 0x1800099d0
cvttss2si ecx, dword [0x1800bcb9c]
cvttss2si eax, dword [0x1800bcb98]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
comiss xmm8, xmm10
jae 0x18000847a
comiss xmm10, xmm1
ja 0x18000847a
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
jmp 0x180008495
comiss xmm8, xmm9
jae 0x1800099d0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm9, xmm0
ja 0x1800099d0
comiss xmm8, xmm10
jae 0x1800099d0
comiss xmm10, xmm1
ja 0x1800099d0
comiss xmm8, xmm9
jae 0x1800099d0
comiss xmm9, xmm0
ja 0x1800099d0
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x270], xmm0
mov rcx, r14
call fcn.180011230
test al, al
je 0x1800085ac
mov byte [0x1800bcab5], 1
movss xmm0, dword [0x1800bcba8]
movss dword [rbp + 0x20], xmm0
movss xmm1, dword [0x1800bcbac]
movss dword [rbp + 0x24], xmm1
movss xmm0, dword [0x1800bcbb0]
movss dword [rbp + 0x28], xmm0
mov dword [rbp + 0x2c], 0x3f800000
lea rcx, [rbp + 0x20]
call fcn.180021d70
movzx ecx, al
xorps xmm3, xmm3
cvtsi2ss xmm3, rcx
movss xmm6, dword [0x180063388]
mulss xmm3, xmm6
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm2, xmm2
cvtsi2ss xmm2, rcx
mulss xmm2, xmm6
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
mulss xmm1, xmm6
shr eax, 0x18
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm6
movss dword [rbp + 0x270], xmm3
movss dword [rbp + 0x274], xmm2
movss dword [rbp + 0x278], xmm1
movss dword [rbp + 0x27c], xmm0
cmp byte [0x1800bcbe4], 0
je 0x180008667
cmp byte [0x1800bcbe6], 0
je 0x180008667
inc dword [0x1800bcbf0]
jmp 0x180008667
mov byte [0x1800bcab5], 0
movss xmm0, dword [0x1800bcbb8]
movss dword [rbp + 0x340], xmm0
movss xmm1, dword [0x1800bcbbc]
movss dword [rbp + 0x344], xmm1
movss xmm0, dword [0x1800bcbc0]
movss dword [rbp + 0x348], xmm0
mov dword [rbp + 0x34c], 0x3f800000
lea rcx, [rbp + 0x340]
call fcn.180021d70
movzx ecx, al
xorps xmm3, xmm3
cvtsi2ss xmm3, rcx
movss xmm4, dword [0x180063388]
mulss xmm3, xmm4
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm2, xmm2
cvtsi2ss xmm2, rcx
mulss xmm2, xmm4
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
mulss xmm1, xmm4
shr eax, 0x18
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm4
movss dword [rbp + 0x270], xmm3
movss dword [rbp + 0x274], xmm2
movss dword [rbp + 0x278], xmm1
movss dword [rbp + 0x27c], xmm0
mov qword [rsp + 0x38], 0
addsd xmm12, qword [0x1800633f0]
movsd qword [rbp + 0x240], xmm11
movsd xmm0, qword [rbp + 0x1e8]
movsd qword [rbp + 0x248], xmm0
movsd qword [rbp + 0x250], xmm12
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
movss xmm14, dword [rsp + 0x3c]
movaps xmm15, xmm14
subss xmm15, xmm9
andps xmm15, xmmword [0x180063650]
movaps xmm13, xmm15
mulss xmm13, dword [0x1800bb93c]
cmp byte [0x1800bcbb6], 0
je 0x1800090d7
mov qword [rbp - 0x58], 0
mov qword [rsp + 0x68], 0
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x78], 0
mov qword [rsp + 0x70], 0
mov qword [rbp - 0x70], 0
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x50], 0
mov qword [rbp - 0x48], 0
mov qword [rbp - 0x40], 0
mov qword [rsp + 0x78], 0
mov qword [rbp - 0x38], 0
mov qword [rbp - 0x30], 0
mov r9d, 0x43
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 9
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0xa
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0xb
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x26
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x27
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x28
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 2
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x47
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x48
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x49
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x4e
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x4f
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
mov r9d, 0x52
mov r8, r15
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.180005990
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x240], xmm0
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x250], xmm0
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm12, dword [rsp + 0x70]
movss dword [rbp + 0x98], xmm12
movss xmm11, dword [rsp + 0x74]
movss dword [rbp + 0x9c], xmm11
movss xmm8, dword [rsp + 0x68]
movss dword [rbp + 0xa0], xmm8
movss xmm7, dword [rsp + 0x6c]
movss dword [rbp + 0xa4], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa0]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm10, dword [rbp - 0x80]
movss dword [rbp + 0xa8], xmm10
movss xmm9, dword [rbp - 0x7c]
movss dword [rbp + 0xac], xmm9
movss dword [rbp + 0xb0], xmm8
movss dword [rbp + 0xb4], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0xb0]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm0, dword [rbp - 0x78]
movss dword [rbp + 0xb8], xmm0
movss xmm1, dword [rbp - 0x74]
movss dword [rbp + 0xbc], xmm1
movss dword [rbp + 0xc0], xmm10
movss dword [rbp + 0xc4], xmm9
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xc0]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm8, dword [rbp - 0x70]
movss dword [rbp + 0xc8], xmm8
movss xmm7, dword [rbp - 0x6c]
movss dword [rbp + 0xcc], xmm7
movss dword [rbp + 0xd0], xmm12
movss dword [rbp + 0xd4], xmm11
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm0, dword [rbp - 0x68]
movss dword [rbp + 0xd8], xmm0
movss xmm1, dword [rbp - 0x64]
movss dword [rbp + 0xdc], xmm1
movss dword [rbp + 0xe0], xmm8
movss dword [rbp + 0xe4], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0xe0]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm12, dword [rbp - 0x60]
movss dword [rbp + 0xe8], xmm12
movss xmm11, dword [rbp - 0x5c]
movss dword [rbp + 0xec], xmm11
movss xmm0, dword [rbp - 0x58]
movss dword [rbp + 0xf0], xmm0
movss xmm1, dword [rbp - 0x54]
movss dword [rbp + 0xf4], xmm1
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xe8]
lea rdx, [rbp + 0xf0]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm9, dword [rbp - 0x50]
movss dword [rbp + 0xf8], xmm9
movss xmm7, dword [rbp - 0x4c]
movss dword [rbp + 0xfc], xmm7
movss dword [rbp + 0x100], xmm12
movss dword [rbp + 0x104], xmm11
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm10, dword [rbp - 0x48]
movss dword [rbp + 0x108], xmm10
movss xmm8, dword [rbp - 0x44]
movss dword [rbp + 0x10c], xmm8
movss dword [rbp + 0x110], xmm9
movss dword [rbp + 0x114], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x110]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm0, dword [rbp - 0x40]
movss dword [rbp + 0x118], xmm0
movss xmm1, dword [rbp - 0x3c]
movss dword [rbp + 0x11c], xmm1
movss dword [rbp + 0x120], xmm10
movss dword [rbp + 0x124], xmm8
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x120]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm9, dword [rsp + 0x78]
movss dword [rbp + 0x128], xmm9
movss xmm7, dword [rsp + 0x7c]
movss dword [rbp + 0x12c], xmm7
movss dword [rbp + 0x130], xmm12
movss dword [rbp + 0x134], xmm11
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x130]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm10, dword [rbp - 0x38]
movss dword [rbp + 0x138], xmm10
movss xmm8, dword [rbp - 0x34]
movss dword [rbp + 0x13c], xmm8
movss dword [rbp + 0x140], xmm9
movss dword [rbp + 0x144], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0x140]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm0, dword [rbp - 0x30]
movss dword [rbp + 0x148], xmm0
movss xmm1, dword [rbp - 0x2c]
movss dword [rbp + 0x14c], xmm1
movss dword [rbp + 0x150], xmm10
movss dword [rbp + 0x154], xmm8
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x150]
mov rcx, rdi
call fcn.180034370
call fcn.180021bd0
mov rdi, rax
movd xmm6, dword [0x1800bb934]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x270]
call fcn.18001f6a0
movss xmm0, dword [rsp + 0x50]
movss dword [rbp + 0x158], xmm0
movss xmm0, dword [rsp + 0x54]
movss dword [rbp + 0x15c], xmm0
movsd xmm1, qword [rbp + 0x168]
movsd xmm0, qword [0x1800633e8]
divsd xmm1, xmm0
divsd xmm0, xmm1
cvtpd2ps xmm2, xmm0
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 0x40
mov r9d, eax
lea rdx, [rbp + 0x158]
mov rcx, rdi
call fcn.180032ec0
movss xmm9, dword [rsp + 0x5c]
xorps xmm8, xmm8
movss xmm10, dword [rsp + 0x40]
cmp byte [0x1800bcbb5], 0
je 0x1800093d1
movss xmm7, dword [rsp + 0x38]
mov eax, dword [0x1800bcd20]
movss xmm11, dword [0x180063398]
movss xmm12, dword [0x1800633a4]
test eax, eax
jne 0x18000926e
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
cvttss2si esi, xmm15
cvttss2si r14d, xmm13
cvttss2si r15d, xmm14
movaps xmm6, xmm13
mulss xmm6, xmm11
movaps xmm1, xmm6
addss xmm1, xmm12
movaps xmm0, xmm7
subss xmm0, xmm1
cvttss2si ecx, xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov edx, r15d
call fcn.180005670
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
movaps xmm1, xmm6
subss xmm1, xmm12
movaps xmm0, xmm7
subss xmm0, xmm1
cvttss2si ecx, xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov edx, r15d
call fcn.180005670
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
movaps xmm1, xmm7
subss xmm1, xmm6
cvttss2si edi, xmm1
movaps xmm0, xmm14
addss xmm0, xmm12
cvttss2si edx, xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov ecx, edi
call fcn.180005670
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
movaps xmm1, xmm14
subss xmm1, xmm12
cvttss2si edx, xmm1
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov ecx, edi
call fcn.180005670
movups xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x240], xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov edx, r15d
mov ecx, edi
call fcn.180005670
mov eax, dword [0x1800bcd20]
cmp eax, 1
jne 0x1800093d1
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
cvttss2si esi, xmm15
cvttss2si r14d, xmm13
cvttss2si r15d, xmm14
mulss xmm13, xmm11
movaps xmm1, xmm13
addss xmm1, xmm12
movaps xmm0, xmm7
subss xmm0, xmm1
cvttss2si ecx, xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov edx, r15d
call fcn.180005330
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
movaps xmm1, xmm13
subss xmm1, xmm12
movaps xmm0, xmm7
subss xmm0, xmm1
cvttss2si ecx, xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov edx, r15d
call fcn.180005330
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
subss xmm7, xmm13
cvttss2si edi, xmm7
movaps xmm0, xmm14
addss xmm0, xmm12
cvttss2si edx, xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov ecx, edi
call fcn.180005330
movaps xmm0, xmmword [0x1800635a0]
movaps xmmword [rbp + 0x240], xmm0
movaps xmm1, xmm14
subss xmm1, xmm12
cvttss2si edx, xmm1
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov ecx, edi
call fcn.180005330
movups xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x240], xmm0
mov eax, dword [0x1800bb930]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, r14d
mov edx, r15d
mov ecx, edi
call fcn.180005330
cmp byte [0x1800bcbb7], 0
je 0x180009536
movss dword [rbp + 0x160], xmm10
movss dword [rbp + 0x164], xmm9
mov qword [rbp + 0x2a8], 0
mov qword [rbp + 0x2a0], 0
movzx ecx, byte [rbp + 0x4b0]
cmp cl, 2
je 0x180009467
cmp cl, 3
jne 0x180009423
mov dword [rbp + 0x2a8], 0x3f800000
jmp 0x180009471
cmp cl, 4
jne 0x18000943e
mov dword [rbp + 0x2a0], 0x3f008081
mov dword [rbp + 0x2a8], 0x3f008081
jmp 0x180009471
lea eax, [rcx - 5]
cmp al, 1
jbe 0x18000945d
sub cl, 2
cmp cl, 4
jbe 0x18000947b
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x2a0], xmm0
jmp 0x18000947b
mov dword [rbp + 0x2a0], 0x3f800000
mov dword [rbp + 0x2a4], 0x3f800000
mov dword [rbp + 0x2ac], 0x3f800000
cmp byte [0x1800bcab4], 0
je 0x1800094f4
mov rax, qword [rbp + 0x4d0]
cmp rax, 6
jb 0x1800094ca
lea rdi, [rbp + 0x4b8]
cmp rax, 0xf
cmova rdi, qword [rbp + 0x4b8]
mov qword [rbp + 0x4c8], 6
mov r8d, 6
lea rdx, str.No_Gun
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 6], 0
jmp 0x1800094e6
lea r9, str.No_Gun
movzx r8d, bl
mov edx, 6
lea rcx, [rbp + 0x4b8]
call fcn.180003750
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x2a0], xmm0
lea rcx, [rbp + 0x2a0]
call fcn.18001f6a0
movd xmm2, dword [0x1800bb914]
cvtdq2ps xmm2, xmm2
lea rcx, [rbp + 0x4b8]
cmp qword [rbp + 0x4d0], 0xf
cmova rcx, qword [rbp + 0x4b8]
mov byte [rsp + 0x20], 1
mov r9d, eax
lea rdx, [rbp + 0x160]
call fcn.180017950
cmp byte [0x1800bcbc5], 0
je 0x1800095e6
mov rdi, qword [rbp + 0x18]
mov rcx, rdi
call fcn.180011e90
test al, al
jne 0x18000959c
mov rdx, rdi
lea rcx, [rbp + 0x2e8]
call fcn.180004f70
nop
cmp qword [rax + 0x18], 0xf
jbe 0x18000956d
mov rax, qword [rax]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180009574
mov rdx, rax
lea rcx, [rbp + 0x320]
call fcn.18000bb60
nop
lea rcx, [rbp + 0x2e8]
call fcn.180004680
jmp 0x1800095b5
mov r8d, 3
lea rdx, [0x1800630f0]
lea rcx, [rbp + 0x320]
call fcn.18000bb60
cmp byte [0x1800bcbc5], 0
je 0x1800095e6
movzx eax, byte [0x1800bcbc6]
test al, al
je 0x180009946
mov r8d, 1
lea rdx, [0x1800630f4]
lea rcx, [rbp + 0x320]
call fcn.18000bb60
movzx eax, byte [0x1800bcbc6]
test al, al
je 0x180009946
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x380]
call fcn.1800606fa
lea rax, [0x180062cc0]
mov qword [rbp + 0x380], rax
lea rax, [0x180062cc8]
mov qword [rbp + 0x390], rax
lea rcx, [rbp + 0x418]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r12d, 0x10
mov dword [rbp + 0x268], r12d
xor r8d, r8d
lea rdx, [rbp + 0x398]
lea rcx, [rbp + 0x380]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x380]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x380], r14
mov rax, qword [rbp + 0x380]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x37c], edx
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x398], rax
mov qword [rbp + 0x400], r13
mov dword [rbp + 0x408], r13d
lea rdx, [0x1800112c0]
lea rcx, [rbp + 0x390]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdi, rax
movsxd rdx, dword [0x1800bcbe0]
lea rcx, [rbp + 0x2b0]
call sub.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setprecision_long_long___int64__
mov r8, qword [rax]
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call r8
movsd xmm1, qword [rbp + 0x168]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___double____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
or r12d, 0x40
mov dword [rbp + 0x268], r12d
xor eax, eax
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], rax
mov ecx, dword [rbp + 0x408]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x18000979a
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x180009794
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rsi, rax
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rdi, rax
cmp rax, qword [rbp + 0x400]
cmovb rdi, qword [rbp + 0x400]
sub rdi, rsi
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x1800097e4
mov ecx, dword [rbp + 0x408]
test cl, 4
jne 0x1800097d6
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x1800097d6
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rsi, rax
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rdi, rax
sub rdi, rsi
jmp 0x1800097e4
mov rdi, qword [rbp + 0x248]
mov rsi, qword [rbp + 0x240]
test rsi, rsi
je 0x1800097f8
mov r8, rdi
mov rdx, rsi
lea rcx, [rbp + 0x40]
call fcn.18000bbf0
and r12d, 0xffffffbf
or r12d, 0x20
lea r8, [rbp + 0x40]
lea rdx, [0x1800630fc]
lea rcx, [rbp + 0x200]
call fcn.180002a40
nop
mov r8d, 2
lea rdx, [0x1800630f8]
mov rcx, rax
call fcn.18000bb60
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2e8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2f8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 7
mov r8, qword [rbp + 0x218]
cmp r8, 0xf
jbe 0x180009876
mov rdx, qword [rbp + 0x200]
lea rcx, [rbp + 0x200]
call fcn.1800072f0
mov qword [rbp + 0x210], r13
mov qword [rbp + 0x218], 0xf
mov byte [rbp + 0x200], 0
mov r8, qword [rbp + 0x58]
cmp r8, 0xf
jbe 0x1800098a6
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.1800072f0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
lea rdx, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 0xf
cmova rdx, qword [rbp + 0x2e8]
mov r8, qword [rbp + 0x2f8]
lea rcx, [rbp + 0x320]
call fcn.18000bb60
nop
lea rcx, [rbp + 0x2e8]
call fcn.180004680
nop
mov rax, qword [rbp + 0x380]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x380], r14
mov rax, qword [rbp + 0x380]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x37c], edx
lea rcx, [rbp + 0x398]
call fcn.180004760
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x418]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
movzx eax, byte [0x1800bcbc6]
cmp byte [0x1800bcbc5], 0
jne 0x180009953
test al, al
je 0x1800099be
subss xmm14, dword [0x180063454]
movss dword [rbp + 0x170], xmm10
movss dword [rbp + 0x174], xmm14
movaps xmm0, xmmword [0x180063630]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.18001f6a0
movd xmm2, dword [0x1800bb914]
cvtdq2ps xmm2, xmm2
lea rcx, [rbp + 0x320]
cmp qword [rbp + 0x338], 0xf
cmova rcx, qword [rbp + 0x320]
mov byte [rsp + 0x20], 1
mov r9d, eax
lea rdx, [rbp + 0x170]
call fcn.180017950
movss xmm15, dword [0x1800633a4]
movss xmm14, dword [0x180063398]
lea rax, [rbp + 0x320]
cmp qword [rbp + 0x338], 0xf
cmova rax, qword [rbp + 0x320]
mov qword [rbp + 0x330], r13
mov byte [rax], 0
mov rdx, qword [rbp + 0x338]
cmp rdx, 0xf
jbe 0x180009a32
inc rdx
mov rcx, qword [rbp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009a2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009bd6
call fcn.18005ea64
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rbp + 0x290]
movss xmm13, dword [0x1800633c8]
mov rdx, qword [rbp + 0x4d0]
cmp rdx, 0xf
jbe 0x180009a88
inc rdx
mov rcx, qword [rbp + 0x4b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009a83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009bdd
call fcn.18005ea64
add rdi, 0x48
mov qword [rbp + 0x290], rdi
cmp rdi, rsi
jne 0x180007990
cmp byte [0x1800bcbe4], 0
je 0x18000a1e0
mov edx, dword [0x1800bcbec]
test edx, edx
jle 0x18000a1b1
movabs rbx, 0x7fffffffffffffff
movss xmm6, dword [0x180063508]
cmp byte [0x1800bcbe7], 0
je 0x180009e75
lea rcx, [rbp + 0x2e8]
call fcn.180018920
nop
mov rax, rbx
mov r15, qword [rbp + 0x2f8]
sub rax, r15
cmp rax, 1
jb 0x18000a836
lea r12, [rbp + 0x2e8]
mov rsi, qword [rbp + 0x2e8]
mov r13, qword [rbp + 0x300]
cmp r13, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea r14, [r15 + 1]
mov edi, 0xf
lea rbx, [rbp - 0x28]
cmp r14, rdi
jbe 0x180009c2c
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x180009be4
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18005ea28
test rax, rax
je 0x180009c10
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180009c28
mov rdx, qword [rbp + 0x4d0]
cmp rdx, 0xf
jbe 0x18000a7a4
inc rdx
mov rcx, qword [rbp + 0x4b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009bcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009bcc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005ea64
jmp 0x18000a7a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180009c17
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000a81e
jmp 0x180009b67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x180009c26
call fcn.18005ea28
mov rbx, rax
jmp 0x180009c28
xor ebx, ebx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov byte [rbx], 0x5b
lea rcx, [rbx + 1]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], 0
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x180009c96
lea rax, [rcx + 0xa]
mov qword [rbp - 0x18], rax
lea rbx, [rbp - 0x28]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x28]
add rbx, rcx
mov r8d, 0xa
lea rdx, str._Rendered_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xa], 0
lea rax, [rbp - 0x28]
jmp 0x180009cbc
mov qword [rsp + 0x20], 0xa
lea r9, str._Rendered_
movzx r8d, byte [rbp + 0x260]
mov edx, 0xa
lea rcx, [rbp - 0x28]
call fcn.180003890
xorps xmm0, xmm0
movups xmmword [rbp + 0x358], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x368], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x358], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x368], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180009d37
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009d32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009d32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005ea64
movdqa xmm0, xmmword [0x180063520]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
lea rdx, [rbp + 0x358]
cmp qword [rbp + 0x370], 0xf
cmova rdx, qword [rbp + 0x358]
movss dword [rsp + 0x20], xmm6
xor r9d, r9d
xor r8d, r8d
lea rcx, [rbp + 0x4e0]
call fcn.18001e6c0
movaps xmm0, xmmword [0x180063590]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.18001f6a0
movd xmm2, dword [0x1800bb914]
cvtdq2ps xmm2, xmm2
mov dword [rsp + 0x48], 0x446b0000
mov dword [rsp + 0x4c], 0x41200000
lea rcx, [rbp + 0x358]
cmp qword [rbp + 0x370], 0xf
cmova rcx, qword [rbp + 0x358]
mov byte [rsp + 0x20], 0
mov r9d, eax
lea rdx, [rsp + 0x48]
call fcn.180017950
nop
mov rdx, qword [rbp + 0x370]
cmp rdx, 0xf
jbe 0x180009e1a
inc rdx
mov rcx, qword [rbp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005ea64
movdqa xmm0, xmmword [0x180063520]
movdqu xmmword [rbp + 0x368], xmm0
mov byte [rbp + 0x358], 0
cmp r13, 0xf
jbe 0x180009e6b
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180009e63
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009e63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.18005ea64
movabs rbx, 0x7fffffffffffffff
cmp byte [0x1800bcbe6], 0
je 0x18000a1b1
mov edx, dword [0x1800bcbf0]
lea rcx, [rbp + 0x2e8]
call fcn.180018920
nop
mov rax, rbx
mov r15, qword [rbp + 0x2f8]
sub rax, r15
cmp rax, 1
jb 0x18000a818
lea r12, [rbp + 0x2e8]
mov rsi, qword [rbp + 0x2e8]
mov r13, qword [rbp + 0x300]
cmp r13, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
lea r14, [r15 + 1]
mov edi, 0xf
lea rbx, [rbp - 8]
cmp r14, rdi
jbe 0x180009f75
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x180009f30
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18005ea28
test rax, rax
je 0x180009f59
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180009f71
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180009f60
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000a824
jmp 0x180009f15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x180009f6f
call fcn.18005ea28
mov rbx, rax
jmp 0x180009f71
xor ebx, ebx
mov qword [rbp - 8], rbx
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov byte [rbx], 0x5b
lea rcx, [rbx + 1]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], 0
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 9
jb 0x180009fdf
lea rax, [rcx + 9]
mov qword [rbp + 8], rax
lea rbx, [rbp - 8]
cmp rdx, 0xf
cmova rbx, qword [rbp - 8]
add rbx, rcx
mov r8d, 9
lea rdx, str._Visible_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
lea rax, [rbp - 8]
jmp 0x18000a005
mov qword [rsp + 0x20], 9
lea r9, str._Visible_
movzx r8d, byte [rbp + 0x260]
mov edx, 9
lea rcx, [rbp - 8]
call fcn.180003890
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2d8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2d8], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18000a07d
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a078
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000a078
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005ea64
movdqa xmm0, xmmword [0x180063520]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], bl
lea rdx, [rbp + 0x2c8]
cmp qword [rbp + 0x2e0], 0xf
cmova rdx, qword [rbp + 0x2c8]
movss dword [rsp + 0x20], xmm6
xor r9d, r9d
xor r8d, r8d
lea rcx, [rbp + 0x480]
call fcn.18001e6c0
movaps xmm0, xmmword [0x180063590]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.18001f6a0
movd xmm2, dword [0x1800bb914]
cvtdq2ps xmm2, xmm2
mov dword [rsp + 0x48], 0x447f0000
mov dword [rsp + 0x4c], 0x41200000
lea rcx, [rbp + 0x2c8]
cmp qword [rbp + 0x2e0], 0xf
cmova rcx, qword [rbp + 0x2c8]
mov byte [rsp + 0x20], bl
mov r9d, eax
lea rdx, [rsp + 0x48]
call fcn.180017950
nop
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 0xf
jbe 0x18000a15e
inc rdx
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a159
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000a159
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005ea64
movdqa xmm0, xmmword [0x180063520]
movdqu xmmword [rbp + 0x2d8], xmm0
mov byte [rbp + 0x2c8], 0
cmp r13, 0xf
jbe 0x18000a1b3
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000a1a7
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000a1a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.18005ea64
jmp 0x18000a1b3
xor ebx, ebx
cmp dword [0x1800bcbf4], 0
je 0x18000a1c2
mov dword [0x1800bcbf4], ebx
cmp dword [0x1800bcbec], 0
je 0x18000a1d1
mov dword [0x1800bcbec], ebx
cmp dword [0x1800bcbf0], 0
je 0x18000a1e0
mov dword [0x1800bcbf0], ebx
mov rax, qword [0x1800bcaa8]
test rax, rax
je 0x18000a264
mov byte [rbp + 0x260], 0
mov rdx, qword [0x1800bcb88]
add rdx, 0x1156bd18
mov r9d, 1
lea r8, [rbp + 0x260]
lea rcx, [0x1800bce20]
call fcn.180001c20
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
movsd xmm15, qword [rsp + 0x60]
movsd qword [rbp + 0x2c0], xmm15
mov rdx, qword [0x1800bcb88]
add rdx, 0x115802e0
mov r9d, 0x18
lea r8, [rbp + 0x2b0]
lea rcx, [0x1800bce20]
call fcn.180001c20
mov rax, qword [0x1800bcaa8]
jmp 0x18000a26b
movsd xmm15, qword [rsp + 0x60]
cmp byte [0x18008e44e], 0
je 0x18000a7a4
mov r15, qword [rbp + 0x178]
test r15, r15
je 0x18000a7a4
test rax, rax
je 0x18000a7a4
mov rax, qword [0x1800bc9a0]
mov ecx, dword [0x1800bb900]
call rax
test ax, ax
je 0x18000a7a4
cmp qword [0x1800bca80], 0
je 0x18000a7a4
mov rcx, qword [0x1800bb8c8]
add rcx, r15
call fcn.180002b70
mov rdi, rax
mov rcx, rax
call fcn.180011230
cmp byte [0x1800bcae6], 0
je 0x18000a2e2
test al, al
je 0x18000a7a4
lea rcx, [rdi + 0x608]
call fcn.180002b70
mov rsi, rax
test rax, rax
jne 0x18000a305
lea rcx, [rdi + 0x618]
call fcn.180002b70
mov rsi, rax
xorps xmm6, xmm6
movups xmmword [rbp + 0x2b0], xmm6
movaps xmm10, xmm15
movsd qword [rbp + 0x2c0], xmm15
movss xmm0, dword [0x1800634f8]
movss dword [rbp + 0x288], xmm0
movaps xmm12, xmm8
movss dword [rsp + 0x40], xmm8
movss dword [rsp + 0x38], xmm8
movaps xmm7, xmm8
movss dword [rbp + 0x268], xmm7
movss dword [rsp + 0x3c], xmm7
mov eax, dword [0x1800bcd1c]
test eax, eax
jne 0x18000a565
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0x480], 0x6d
mov dword [rbp + 0x484], 0x43
mov dword [rbp + 0x488], 6
movdqu xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], rax
lea ecx, [rax + 0xc]
call fcn.180002bc0
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x248], rax
lea r14, [rax + 0xc]
mov qword [rbp + 0x250], r14
mov r8d, 0xc
lea rdx, [rbp + 0x480]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x248], r14
mov rbx, qword [rbp + 0x240]
cmp rbx, r14
je 0x18000a53e
movsd xmm9, qword [rbp + 0x2b8]
movsd xmm13, qword [rbp + 0x2b0]
nop
mov r9d, dword [rbx]
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x180]
call fcn.180005990
mov qword [rsp + 0x38], 0
movsd xmm15, qword [rbp + 0x1e0]
movsd qword [rbp + 0x20], xmm15
movups xmm0, xmmword [rbp + 0x1e8]
movups xmmword [rbp + 0x28], xmm0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x20]
call fcn.180018ae0
movss xmm11, dword [rsp + 0x3c]
movss xmm12, dword [rsp + 0x38]
ucomiss xmm12, xmm8
jp 0x18000a458
jne 0x18000a458
ucomiss xmm11, xmm8
jp 0x18000a458
je 0x18000a518
movss xmm8, dword [0x1800bcb9c]
mulss xmm8, xmm14
movss xmm1, dword [0x1800bcb98]
mulss xmm1, xmm14
movss xmm7, dword [0x1800633c8]
subss xmm1, xmm12
movaps xmm0, xmm1
movaps xmm1, xmm7
call fcn.18005ef10
movaps xmm6, xmm0
subss xmm8, xmm11
movaps xmm0, xmm8
movaps xmm1, xmm7
call fcn.18005ef10
addss xmm0, xmm6
xorps xmm1, xmm1
ucomiss xmm1, xmm0
ja 0x18000a4b1
sqrtss xmm0, xmm0
jmp 0x18000a4b6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x1800bb904]
xorps xmm8, xmm8
comiss xmm1, xmm0
jb 0x18000a510
movss xmm7, dword [rbp + 0x288]
comiss xmm7, xmm0
jbe 0x18000a510
movss dword [rbp + 0x288], xmm0
movaps xmm13, xmm15
movsd xmm9, qword [rbp + 0x1e8]
movsd xmm10, qword [rbp + 0x1f0]
movsd qword [rbp + 0x2c0], xmm10
movss dword [rsp + 0x40], xmm12
movaps xmm7, xmm11
movss dword [rbp + 0x268], xmm7
jmp 0x18000a51f
movss xmm7, dword [rbp + 0x268]
movss xmm12, dword [rsp + 0x40]
add rbx, 4
cmp rbx, r14
jne 0x18000a3f0
movaps xmm6, xmm13
unpcklpd xmm6, xmm9
movsd xmm15, qword [rsp + 0x60]
jmp 0x18000a54b
xorps xmm9, xmm9
unpckhpd xmm9, xmm6
xorps xmm13, xmm13
lea rcx, [rbp + 0x240]
call fcn.180004870
movsd xmm11, qword [rbp + 0x2c0]
jmp 0x18000a691
cmp eax, 1
jne 0x18000a5b5
lea r9d, [rax + 0x6c]
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x380]
call fcn.180005990
movsd xmm13, qword [rbp + 0x3e0]
movsd xmm9, qword [rbp + 0x3e8]
movsd xmm10, qword [rbp + 0x3f0]
movsd qword [rbp + 0x2c0], xmm10
movaps xmm6, xmm13
unpcklpd xmm6, xmm9
mov eax, dword [0x1800bcd1c]
jmp 0x18000a5c4
xorps xmm0, xmm0
unpckhpd xmm0, xmm6
movaps xmm9, xmm0
xorps xmm13, xmm13
cmp eax, 2
jne 0x18000a612
lea r9d, [rax + 0x40]
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x380]
call fcn.180005990
movsd xmm13, qword [rbp + 0x3e0]
movsd xmm9, qword [rbp + 0x3e8]
movsd xmm10, qword [rbp + 0x3f0]
movsd qword [rbp + 0x2c0], xmm10
movaps xmm6, xmm13
unpcklpd xmm6, xmm9
mov eax, dword [0x1800bcd1c]
cmp eax, 3
jne 0x18000a65a
lea r9d, [rax + 3]
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x380]
call fcn.180005990
movsd xmm13, qword [rbp + 0x3e0]
movsd xmm9, qword [rbp + 0x3e8]
movsd xmm10, qword [rbp + 0x3f0]
movsd qword [rbp + 0x2c0], xmm10
movaps xmm6, xmm13
unpcklpd xmm6, xmm9
movaps xmmword [rbp + 0x240], xmm6
movsd xmm11, qword [rbp + 0x2c0]
movsd qword [rbp + 0x250], xmm11
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x240]
call fcn.180018ae0
movss xmm7, dword [rsp + 0x3c]
movss xmm12, dword [rsp + 0x38]
lea rcx, [r15 + 0x198]
call fcn.180002b70
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
movsd qword [rbp + 0x350], xmm15
lea rdx, [rax + 0x168]
mov r9d, 0x18
lea r8, [rbp + 0x340]
lea rcx, [0x1800bce20]
call fcn.180001ae0
movaps xmmword [rbp + 0x240], xmm6
movsd qword [rbp + 0x250], xmm11
lea rdx, [rbp + 0x240]
lea rcx, [0x1800bcd28]
call fcn.180005280
cvttsd2si eax, xmm0
movss xmm3, dword [0x180063390]
andps xmm3, xmmword [0x180063650]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
divss xmm2, dword [0x1800634f4]
cvtps2pd xmm4, xmm2
movaps xmm0, xmm4
mulsd xmm0, qword [rbp + 0x350]
movaps xmm1, xmm4
mulsd xmm1, qword [rbp + 0x348]
addsd xmm10, xmm0
addsd xmm9, xmm1
mulsd xmm4, qword [rbp + 0x340]
addsd xmm4, xmm13
mulss xmm2, xmm2
mulss xmm3, xmm14
mulss xmm2, xmm3
cvtps2pd xmm0, xmm2
addsd xmm0, xmm10
movsd qword [rbp + 0x2c0], xmm0
ucomiss xmm12, xmm8
jp 0x18000a772
jne 0x18000a772
ucomiss xmm7, xmm8
jp 0x18000a772
je 0x18000a7a4
cmp byte [0x1800bcb6c], 0
je 0x18000a7a4
unpcklpd xmm4, xmm9
movaps xmmword [rbp + 0x240], xmm4
movsd xmm0, qword [rbp + 0x2c0]
movsd qword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x240]
call fcn.18000b820
nop
lea rcx, [rbp + 0x308]
call fcn.180007350
mov rcx, qword [rbp + 0x4e8]
xor rcx, rsp
call fcn.18005eef0
lea r11, [rsp + 0x690]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180007410
nop
call fcn.180007330
nop
call fcn.180007330
nop
call fcn.180007430
int3
call fcn.180007330
nop
call fcn.180007410
int3