Function at 0x7ff670d9c0e0
Capabilities:
Acquire debug privileges
Create directory
Create thread
Get session user name
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x14710]
mov eax, 0x14810
call fcn.7ff670dbf7e0
sub rsp, rax
movaps xmmword [rsp + 0x14800], xmm6
movaps xmmword [rsp + 0x147f0], xmm7
movaps xmmword [rsp + 0x147e0], xmm8
movaps xmmword [rsp + 0x147d0], xmm9
movaps xmmword [rsp + 0x147c0], xmm10
movaps xmmword [rsp + 0x147b0], xmm11
movaps xmmword [rsp + 0x147a0], xmm12
movaps xmmword [rsp + 0x14790], xmm13
movaps xmmword [rsp + 0x14780], xmm14
movaps xmmword [rsp + 0x14770], xmm15
xor esi, esi
lea r9, [0x7ff670e0b878]
lea r8, [0x7ff670e0b838]
lea rcx, [rbp + 0x230]
call fcn.7ff670d977b0
nop
mov qword [rbp + 0x14768], rsi
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x14768]
mov edx, 0xf01ff
call qword [sym.imp.advapi32.dll_OpenProcessToken]
test eax, eax
jne 0x7ff670d9c1b9
call qword [sym.imp.kernel32.dll_GetLastError]
mov edx, eax
lea rcx, [0x7ff670e0b798]
call fcn.7ff670d51c70
jmp 0x7ff670d9c245
lea r8, [rbp - 0x78]
lea rdx, [0x7ff670e0b7c0]
xor ecx, ecx
call qword [sym.imp.advapi32.dll_LookupPrivilegeValueA]
test eax, eax
jne 0x7ff670d9c1df
call qword [sym.imp.kernel32.dll_GetLastError]
lea rcx, [0x7ff670e0b7d8]
jmp 0x7ff670d9c231
mov r14d, 1
mov dword [rbp + 0x48], r14d
mov rax, qword [rbp - 0x78]
mov qword [rbp + 0x4c], rax
mov r12d, 2
mov dword [rbp + 0x54], r12d
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9d, [r14 + 0xf]
lea r8, [rbp + 0x48]
xor edx, edx
mov rcx, qword [rbp + 0x14768]
call qword [sym.imp.advapi32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x7ff670d9c2fa
call qword [sym.imp.kernel32.dll_GetLastError]
lea rcx, [0x7ff670e0b808]
mov edx, eax
call fcn.7ff670d51c70
mov rcx, qword [rbp + 0x14768]
call qword [sym.imp.kernel32.dll_CloseHandle]
xor r9d, r9d
lea r8, [0x7ff670e0b890]
lea rdx, [0x7ff670e0b8a0]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x7ff670d9c2a0
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d9c29b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670da032a
call fcn.7ff670dbdfe4
mov rax, 0xffffffffffffffff
lea r11, [rsp + 0x14810]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [rbp + 0x14768]
call qword [sym.imp.kernel32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
mov ecx, 0x30
call fcn.7ff670dbe3bc
mov rdx, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], 0x23
mov qword [rbp - 0x80], 0x2f
movups xmm0, xmmword [0x7ff670e0b8c0]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x7ff670e0b8d0]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x7ff670e0b8e0]
mov word [rax + 0x20], cx
movzx eax, byte [0x7ff670e0b8e2]
mov byte [rdx + 0x22], al
mov byte [rdx + 0x23], 0
lea rcx, [rsp + 0x68]
call fcn.7ff670d98140
lea rcx, [0x7ff670e0b8e8]
call qword [sym.imp.ucrtbase.dll__mkdir]
call qword [sym.imp.kernel32.dll_FreeConsole]
call fcn.7ff670d96950
lea rcx, [rbp + 0x78]
call fcn.7ff670d913e0
nop
lea rdx, [rbp + 0x78]
mov rcx, qword [rbp + 0x78]
call fcn.7ff670da9b80
mov rbx, rax
mov qword [rbp + 0x170], rax
mov dword [rbp + 0x1b0], r12d
mov byte [rbp + 0x1b4], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], rax
mov dword [rbp + 0x1d0], eax
mov qword [rbp + 0x1b8], 2
lea rax, [0x7ff670e09f88]
mov qword [rbp + 0x200], rax
lea rax, fcn.7ff670d51b20
mov qword [rbp + 0x1f0], rax
lea rax, [rbp + 0x78]
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x1f8], rax
lea rax, [0x7ff670e0a8a0]
mov qword [rbp + 0x208], rax
mov r15, 0xffffffffffffffff
mov qword [rbp + 0x178], r15
mov byte [rbp + 0x180], 0
mov qword [rbp + 0x188], rsi
mov qword [rbp + 0x190], rsi
lea rcx, [rbx + 0x50]
call qword [sym.imp.kernel32.dll_EnterCriticalSection]
mov rax, qword [rbx + 0x78]
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1a8], rsi
mov rax, qword [rbx + 0x78]
test rax, rax
je 0x7ff670d9c474
lea rcx, [rbp + 0x178]
mov qword [rax + 0x30], rcx
lea rax, [rbp + 0x178]
mov qword [rbx + 0x78], rax
lea rcx, [rbx + 0x50]
call qword [sym.imp.kernel32.dll_LeaveCriticalSection]
nop
lea rcx, [rbp + 0x210]
call fcn.7ff670d936a0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov dword [rbp - 0x28], esi
mov eax, 0x17
mov ebx, dword [rbp + 0x210]
mov ecx, 0x536
test ebx, ebx
jne 0x7ff670d9c4e6
mov word [rbp - 0x40], r12w
call qword [sym.imp.ws2_32.dll_htons]
mov word [rbp - 0x3e], ax
test ebx, ebx
jne 0x7ff670da035d
mov ecx, dword [rbp + 0x214]
call qword [sym.imp.ws2_32.dll_htonl]
mov ecx, eax
call qword [sym.imp.ws2_32.dll_htonl_1]
mov dword [rbp - 0x3c], eax
jmp 0x7ff670d9c514
mov word [rbp - 0x40], ax
call qword [sym.imp.ws2_32.dll_htons]
mov word [rbp - 0x3e], ax
mov dword [rbp - 0x3c], esi
cmp ebx, 1
jne 0x7ff670da0376
movups xmm0, xmmword [rbp + 0x218]
movups xmmword [rbp - 0x38], xmm0
mov eax, dword [rbp + 0x228]
mov dword [rbp - 0x28], eax
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x170]
call fcn.7ff670da07e0
mov rcx, qword [0x7ff670e437a0]
mov rdx, qword [0x7ff670e438f0]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, rcx
cmp rax, rdx
jb 0x7ff670da038f
lea r9, [0x7ff670e43790]
cmp qword [0x7ff670e437a8], 0xf
cmova r9, qword [0x7ff670e43790]
lea rax, [0x7ff670e438e0]
cmp qword [0x7ff670e438f8], 0xf
cmova rax, qword [0x7ff670e438e0]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x590]
call fcn.7ff670d8a490
nop
lea rdx, [0x7ff670e43808]
cmp qword [0x7ff670e43820], 0xf
cmova rdx, qword [0x7ff670e43808]
mov r8, qword [0x7ff670e43818]
lea rcx, [rbp + 0x590]
call fcn.7ff670d89fd0
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0xc30], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc40], xmm7
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x7ff670e43930]
cmp rdx, 0xf
jbe 0x7ff670d9c620
mov rcx, qword [0x7ff670e43918]
inc rdx
cmp rdx, 0x1000
jb 0x7ff670d9c61b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff670d9c66d
mov rcx, r8
call fcn.7ff670dbdfe4
movups xmmword [0x7ff670e43918], xmm6
movups xmmword [0x7ff670e43928], xmm7
mov rdx, qword [rbp + 0x5a8]
cmp rdx, 0xf
jbe 0x7ff670d9c679
inc rdx
mov rcx, qword [rbp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d9c674
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670d9c674
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.7ff670dbdfe4
mov ecx, 8
call fcn.7ff670dbe3bc
lea rcx, [rbp + 0x170]
mov qword [rax], rcx
mov qword [rsp + 0x60], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x7ff670da9710]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x7ff670da0348
cmp dword [rbp - 0x48], 0
je 0x7ff670da033e
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.msvcp140.dll__Thrd_detach]
test eax, eax
jne 0x7ff670da033e
xorps xmm0, xmm0
movaps xmmword [rbp + 0xb30], xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea r9, [0x7ff670e0b928]
lea r8, [0x7ff670e0b950]
lea rcx, [rbp + 0xf0]
call fcn.7ff670d977b0
nop
lea r9, [0x7ff670e0b9b0]
lea r8, [0x7ff670e0b9e0]
lea rcx, [rbp + 0xd0]
call fcn.7ff670d977b0
nop
lea r9, [0x7ff670e0ba28]
lea r8, [0x7ff670e0b9e0]
lea rcx, [rbp + 0xb0]
call fcn.7ff670d977b0
nop
lea r9, [0x7ff670e0ba48]
lea r8, [0x7ff670e0ba60]
lea rcx, [rbp - 0x70]
call fcn.7ff670d977b0
nop
lea r9, [0x7ff670e0bac0]
lea r8, [0x7ff670e0ba60]
lea rcx, [rbp + 0x90]
call fcn.7ff670d977b0
nop
lea r9, [0x7ff670e0bae0]
lea r8, [0x7ff670e0bb10]
lea rcx, [rbp]
call fcn.7ff670d977b0
nop
lea r9, [0x7ff670e0bae0]
lea r8, [0x7ff670e0bb10]
lea rcx, [rbp + 0x6b0]
call fcn.7ff670d977b0
nop
call qword [sym.imp.user32.dll_GetDesktopWindow]
lea rdx, [rbp + 0x510]
mov rcx, rax
call qword [sym.imp.user32.dll_GetWindowRect]
movss xmm15, dword [0x7ff670e13840]
cmp dword [rbp + 0x518], 0x780
jne 0x7ff670d9c7dc
movaps xmm0, xmm15
jmp 0x7ff670d9c7e4
movss xmm0, dword [0x7ff670e13868]
movss dword [0x7ff670e2a9b0], xmm0
movss dword [0x7ff670e2a9b4], xmm0
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov rcx, r15
inc rcx
cmp byte [rax + rcx], 0
jne 0x7ff670d9c805
mov rax, rcx
neg rax
sbb r8, r8
add r8, 0x17
lea rax, [0x7ff670e0bb90]
lea rdx, [0x7ff670e0bb78]
test rcx, rcx
cmovne rdx, rax
lea rcx, [rbp]
call fcn.7ff670da4ee0
mov rax, qword [rbp - 0x60]
sub rbx, rax
cmp rbx, 1
jb 0x7ff670da0357
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
mov qword [rsp + 0x30], r14
lea rcx, [0x7ff670e07590]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x5b0]
call fcn.7ff670d8a490
nop
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp + 0x5b0]
call fcn.7ff670d89fd0
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0xc50], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc60], xmm7
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670d9c907
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d9c902
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670d9c902
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
movups xmmword [rbp - 0x70], xmm6
movups xmmword [rbp - 0x60], xmm7
mov rdx, qword [rbp + 0x5c8]
cmp rdx, 0xf
jbe 0x7ff670d9c953
inc rdx
mov rcx, qword [rbp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d9c94e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670d9c94e
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov ebx, 8
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.7ff670d8d9f0
test eax, eax
je 0x7ff670d9c9d9
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x7ff670e43b44], eax
jle 0x7ff670d9c9b2
lea rcx, [0x7ff670e43b44]
call fcn.7ff670dbe104
cmp dword [0x7ff670e43b44], 0xffffffff
jne 0x7ff670d9c9b2
lea rcx, [0x7ff670e097b8]
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov qword [0x7ff670e43b30], rax
lea rcx, [0x7ff670e43b44]
call fcn.7ff670dbe098
lea rdx, [0x7ff670e097c8]
mov rcx, qword [0x7ff670e43b30]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x7ff670d9c9d9
mov rcx, 0xfffffffffffffffc
call rax
jmp 0x7ff670d9ca5c
mov edx, 3
lea ecx, [rdx + 3]
call fcn.7ff670d8d9f0
test eax, eax
je 0x7ff670d9ca56
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x7ff670e43b40], eax
jle 0x7ff670d9ca36
lea rcx, [0x7ff670e43b40]
call fcn.7ff670dbe104
cmp dword [0x7ff670e43b40], 0xffffffff
jne 0x7ff670d9ca36
lea rcx, [0x7ff670e097e8]
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov qword [0x7ff670e43b38], rax
lea rcx, [0x7ff670e43b40]
call fcn.7ff670dbe098
lea rdx, [0x7ff670e097f8]
mov rcx, qword [0x7ff670e43b38]
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x7ff670d9ca56
mov ecx, r12d
call rax
jmp 0x7ff670d9ca5c
call qword [sym.imp.user32.dll_SetProcessDPIAware]
mov dword [rbp + 0x14760], 0x101
lea rdx, [rbp + 0x14760]
lea rcx, [rbp + 0xcc0]
call qword [sym.imp.advapi32.dll_GetUserNameA]
mov dword [rbp + 0x110], 0x50
mov dword [rbp + 0x114], 0x40
lea rax, [0x7ff670da0590]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x120], rsi
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
mov qword [rbp + 0x128], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x140], xmm1
lea rax, [0x7ff670e0bba8]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rsi
lea rcx, [rbp + 0x110]
call qword [sym.imp.user32.dll_RegisterClassExW]
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm0, xmm1
mulss xmm0, dword [0x7ff670e1399c]
cvttss2si edx, xmm0
mulss xmm1, dword [0x7ff670e139c4]
cvttss2si ecx, xmm1
mov qword [rsp + 0x58], rsi
mov rax, qword [rbp + 0x128]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 0x12c
mov dword [rsp + 0x20], 0x12c
mov r9d, 0x80080000
lea r8, [0x7ff670e0bbb8]
mov rdx, qword [rbp + 0x150]
xor ecx, ecx
call qword [sym.imp.user32.dll_CreateWindowExW]
mov r12, rax
movdqa xmm0, xmmword [0x7ff670e13a10]
movdqu xmmword [rbp + 0x520], xmm0
lea rdx, [rbp + 0x520]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x7ff670e439d8], rax
test rax, rax
je 0x7ff670da0013
mov qword [0x7ff670e439f0], rsi
mov qword [0x7ff670e439fc], rsi
mov dword [0x7ff670e43a04], esi
mov qword [0x7ff670e43a0c], rsi
mov dword [0x7ff670e43a14], esi
mov qword [0x7ff670e43a24], rsi
mov dword [0x7ff670e43a18], r14d
mov dword [0x7ff670e43a08], r14d
mov dword [0x7ff670e439f8], 0x15
mov dword [0x7ff670e43a1c], r14d
mov dword [0x7ff670e43a20], 0x50
mov dword [0x7ff670e43a2c], r14d
mov rax, qword [rax]
lea r8, [0x7ff670e439e0]
mov qword [rsp + 0x30], r8
lea r8, [0x7ff670e439f0]
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], 0x40
mov r9, r12
mov r8d, r14d
xor edx, edx
call qword [rax + 0x80]
test eax, eax
js 0x7ff670da000c
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.user32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.user32.dll_UpdateWindow]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
mov rcx, rax
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
lea edx, [r9 + 0x68]
call qword [sym.imp.user32.dll_LoadImageA]
mov rbx, rax
test rax, rax
je 0x7ff670d9cc9c
mov r9, rax
mov r8, r14
mov edx, 0x80
mov rcx, r12
call qword [sym.imp.user32.dll_SendMessageA]
mov r9, rbx
xor r8d, r8d
mov edx, 0x80
mov rcx, r12
call qword [sym.imp.user32.dll_SendMessageA]
mov rcx, r12
call fcn.7ff670d9c060
call fcn.7ff670d64780
call fcn.7ff670d57060
call fcn.7ff670d57250
mov rsi, rax
lea rcx, [rbp + 0xdd0]
call fcn.7ff670d7a6a0
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138b8]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
lea rcx, [rbp + 0x620]
call fcn.7ff670d7a6a0
mov byte [rbp + 0x668], 1
mov byte [rbp + 0x640], 1
movss xmm3, dword [0x7ff670e2a9b4]
mulss xmm3, dword [0x7ff670e138b0]
lea rax, [0x7ff670e0a090]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x620]
mov qword [rsp + 0x20], rax
lea rdx, [0x7ff670dcdf70]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b640
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138d0]
lea rdx, [0x7ff670e0bbe0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138c4]
lea rdx, [0x7ff670e0bbe0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
mov qword [rbp - 0x20], rax
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138c4]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
mov r13, rax
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138b8]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138d8]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
mov qword [rsp + 0x60], rax
lea rdx, [0x7ff670e42f50]
lea rcx, [rsp + 0x68]
call fcn.7ff670d96850
mov rdx, rax
lea rcx, [0x7ff670e43900]
call fcn.7ff670da2210
lea rcx, [rsp + 0x68]
call fcn.7ff670da21b0
lea rdx, [0x7ff670e0bc00]
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f90
nop
mov rcx, rax
call fcn.7ff670d89ee0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.7ff670d96850
mov rdx, rax
lea rcx, [0x7ff670e43758]
call fcn.7ff670da2210
lea rcx, [rsp + 0x68]
call fcn.7ff670da21b0
nop
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f30
lea rdx, [0x7ff670e0bc60]
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f90
nop
mov rcx, rax
call fcn.7ff670d89ee0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.7ff670d96850
mov rdx, rax
lea rcx, [0x7ff670e438a8]
call fcn.7ff670da2210
lea rcx, [rsp + 0x68]
call fcn.7ff670da21b0
nop
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f30
lea rdx, [0x7ff670e0bcc0]
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f90
nop
mov rcx, rax
call fcn.7ff670d89ee0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.7ff670d96850
mov rdx, rax
lea rcx, [0x7ff670e437b0]
call fcn.7ff670da2210
lea rcx, [rsp + 0x68]
call fcn.7ff670da21b0
nop
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f30
lea rcx, [0x7ff670e43958]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e43958]
call fcn.7ff670d93820
lea r9, [0x7ff670e2f6a8]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
lea rcx, [0x7ff670e43900]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e43900]
call fcn.7ff670d93820
lea r9, [0x7ff670e2f680]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
lea rcx, [0x7ff670e43758]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e43758]
call fcn.7ff670d93820
lea r9, [0x7ff670e43750]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
lea rcx, [0x7ff670e438a8]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e438a8]
call fcn.7ff670d93820
lea r9, [0x7ff670e2f690]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
lea rcx, [0x7ff670e437b0]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e437b0]
call fcn.7ff670d93820
lea r9, [0x7ff670e2f698]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
xor ecx, ecx
call fcn.7ff670d75ce0
call fcn.7ff670d543f0
mov r14, rax
movss xmm1, dword [0x7ff670e13954]
movss dword [rsp + 0x20], xmm1
xorps xmm14, xmm14
xorps xmm3, xmm3
xorps xmm2, xmm2
lea rcx, [rbp - 0x10]
call fcn.7ff670d51b00
lea rcx, [rbp + 0x60]
call fcn.7ff670d94dd0
nop
mov dword [rbp + 0x14768], 5
lea r8, [rbp + 0x14768]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x60]
call fcn.7ff670d96790
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x7ff670e1378c]
movss xmm2, dword [0x7ff670e13788]
movss xmm1, dword [0x7ff670e13794]
lea rcx, [rbp + 0xb60]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0xe8], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm13, dword [0x7ff670e1382c]
movaps xmm3, xmm13
movaps xmm2, xmm13
movaps xmm1, xmm13
lea rcx, [rbp + 0xb70]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0xf8], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xb80]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0xc8], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm7, dword [0x7ff670e137e8]
movaps xmm3, xmm7
movaps xmm2, xmm7
movaps xmm1, xmm7
lea rcx, [rbp + 0xb90]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0xd8], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm6, dword [0x7ff670e137c4]
movaps xmm3, xmm6
movss xmm5, dword [0x7ff670e137bc]
movaps xmm2, xmm5
movss xmm4, dword [0x7ff670e137b4]
movaps xmm1, xmm4
lea rcx, [rbp + 0xba0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x108], xmm0
movss dword [rsp + 0x20], xmm14
movaps xmm3, xmm7
movss xmm12, dword [0x7ff670e137e0]
movaps xmm2, xmm12
movaps xmm1, xmm12
lea rcx, [rbp + 0xbb0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x118], xmm0
movss dword [rsp + 0x20], xmm14
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0xbc0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x128], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xbd0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x138], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm6
movaps xmm2, xmm5
movaps xmm1, xmm4
lea rcx, [rbp + 0xbe0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x158], xmm0
movss xmm1, dword [rbp - 8]
cvtps2pd xmm1, xmm1
movsd xmm2, qword [0x7ff670e13880]
divsd xmm1, xmm2
cvtpd2ps xmm10, xmm1
movss xmm0, dword [rbp - 0xc]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm2
cvtpd2ps xmm9, xmm0
movss xmm1, dword [rbp - 0x10]
cvtps2pd xmm1, xmm1
divsd xmm1, xmm2
cvtpd2ps xmm8, xmm1
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm10
movaps xmm2, xmm9
movaps xmm1, xmm8
lea rcx, [rbp + 0xbf0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x168], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xc00]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x178], xmm0
movss dword [rsp + 0x20], xmm15
lea rcx, [rbp + 0xc10]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x188], xmm0
movss xmm1, dword [0x7ff670e1381c]
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [0x7ff670e13798]
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp + 0xc70]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x198], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x7ff670e137b0]
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp + 0xc90]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1a8], xmm0
movss dword [rsp + 0x20], xmm14
movss xmm3, dword [0x7ff670e137ac]
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp + 0xcb0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1b8], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm6
movaps xmm2, xmm5
movaps xmm1, xmm4
lea rcx, [rbp + 0xb40]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1c8], xmm0
movss dword [rsp + 0x20], xmm15
lea rcx, [rbp + 0xb50]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1d8], xmm0
movss dword [rsp + 0x20], xmm15
lea rcx, [rbp + 0xc20]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1e8], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xc80]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x1f8], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x7ff670e137d0]
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp + 0xca0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x208], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm11, dword [0x7ff670e137d8]
movaps xmm3, xmm11
movaps xmm2, xmm11
movaps xmm1, xmm11
lea rcx, [rbp + 0x700]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x218], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm10
movaps xmm2, xmm9
movaps xmm1, xmm8
lea rcx, [rbp + 0x710]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x228], xmm0
movss xmm7, dword [0x7ff670e13828]
movss dword [rsp + 0x20], xmm7
lea rcx, [rbp + 0x720]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x238], xmm0
movss xmm0, dword [0x7ff670e13804]
movss dword [rsp + 0x20], xmm0
lea rcx, [rbp + 0x730]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x248], xmm0
movss xmm4, dword [0x7ff670e13790]
movss dword [rsp + 0x20], xmm4
movss xmm3, dword [0x7ff670e137a4]
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp + 0x740]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x258], xmm0
movss dword [rsp + 0x20], xmm4
lea rcx, [rbp + 0x750]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x268], xmm0
movss dword [rsp + 0x20], xmm4
lea rcx, [rbp + 0x760]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x278], xmm0
movss xmm8, dword [0x7ff670e137e8]
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm8
movaps xmm2, xmm12
movaps xmm1, xmm12
lea rcx, [rbp + 0x770]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x288], xmm0
movss xmm1, dword [0x7ff670e13814]
movss dword [rsp + 0x20], xmm1
movss xmm6, dword [0x7ff670e13830]
movaps xmm3, xmm6
movss xmm5, dword [0x7ff670e137f0]
movaps xmm2, xmm5
movss xmm4, dword [0x7ff670e137cc]
movaps xmm1, xmm4
lea rcx, [rbp + 0x780]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x298], xmm0
movss dword [rsp + 0x20], xmm15
lea rcx, [rbp + 0x790]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x2a8], xmm0
movss xmm0, dword [0x7ff670e137c8]
movss dword [rsp + 0x20], xmm0
lea rcx, [rbp + 0x7a0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x2b8], xmm0
movss xmm1, dword [0x7ff670e13800]
movss dword [rsp + 0x20], xmm1
movaps xmm1, xmm4
lea rcx, [rbp + 0x7b0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x2c8], xmm0
movss dword [rsp + 0x20], xmm13
lea rcx, [rbp + 0x7c0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x2d8], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x7ff670e137f8]
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp + 0x7d0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x338], xmm0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm11
movaps xmm2, xmm12
movaps xmm1, xmm15
lea rcx, [rbp + 0x7e0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x348], xmm0
movss dword [rsp + 0x20], xmm15
xorps xmm3, xmm3
movss xmm2, dword [0x7ff670e13804]
movaps xmm1, xmm7
lea rcx, [rbp + 0x7f0]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x358], xmm0
movss dword [rsp + 0x20], xmm15
movss xmm2, dword [0x7ff670e137f4]
movaps xmm1, xmm15
lea rcx, [rbp + 0x800]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x368], xmm0
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm6
movaps xmm2, xmm5
movaps xmm1, xmm4
lea rcx, [rbp + 0x810]
call fcn.7ff670d51b00
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x3c8], xmm0
mov rcx, r12
call fcn.7ff670d8b8e0
call fcn.7ff670d8b3d0
xor dil, dil
movss xmm7, dword [0x7ff670e138ec]
movss xmm12, dword [0x7ff670e139f0]
movss xmm10, dword [0x7ff670e1391c]
movss xmm13, dword [0x7ff670e13920]
movss xmm11, dword [0x7ff670e13930]
movss xmm9, dword [0x7ff670e138f8]
xor ebx, ebx
movss xmm6, dword [0x7ff670e138b4]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.user32.dll_PeekMessageA]
test eax, eax
je 0x7ff670d9d787
mov r15d, 1
nop word [rax + rax]
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.user32.dll_TranslateMessage]
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.user32.dll_DispatchMessageA]
movzx edi, dil
cmp dword [rbp + 0x5f0], 0x12
cmove edi, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.user32.dll_PeekMessageA]
test eax, eax
jne 0x7ff670d9d730
mov r15, 0xffffffffffffffff
test dil, dil
jne 0x7ff670d9ffc2
call fcn.7ff670d8b860
call fcn.7ff670d8c6f0
cmp byte [0x7ff670e2f66b], 0
je 0x7ff670d9d912
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7aa40
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138b8]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
lea rcx, [rbp + 0x620]
call fcn.7ff670d7a6a0
mov byte [rbp + 0x668], 1
mov byte [rbp + 0x640], 1
movss xmm3, dword [0x7ff670e2a9b4]
mulss xmm3, dword [0x7ff670e138b0]
lea rax, [0x7ff670e0a090]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x620]
mov qword [rsp + 0x20], rax
lea rdx, [0x7ff670dcdf70]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b640
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138d0]
lea rdx, [0x7ff670e0bbe0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138c4]
lea rdx, [0x7ff670e0bbe0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
mov qword [rbp - 0x20], rax
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138c4]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
mov r13, rax
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138b8]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
movss xmm2, dword [0x7ff670e2a9b4]
mulss xmm2, dword [0x7ff670e138d8]
lea rdx, [0x7ff670e0bbc0]
mov rcx, qword [rsi + 0x50]
call fcn.7ff670d7b100
mov qword [rsp + 0x60], rax
movss xmm1, dword [0x7ff670e2a9b0]
movaps xmm0, xmm1
mulss xmm0, dword [0x7ff670e1399c]
cvttss2si eax, xmm0
mulss xmm1, dword [0x7ff670e139c4]
cvttss2si r9d, xmm1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.user32.dll_MoveWindow]
mov byte [0x7ff670e2f66b], 0
movss xmm6, dword [0x7ff670e138b4]
call fcn.7ff670d59110
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0x530]
call fcn.7ff670d51af0
movsd xmm0, qword [rax]
movsd qword [r14 + 8], xmm0
mov dword [r14 + 0x14], ebx
movss xmm3, dword [0x7ff670e2a9b4]
movaps xmm0, xmm3
mulss xmm0, dword [0x7ff670e138a4]
movss dword [r14 + 0x10], xmm0
mov dword [r14 + 0x2c], ebx
mov dword [r14 + 0x44], 0x40000000
movaps xmm2, xmm6
movaps xmm1, xmm6
lea rcx, [rbp + 0x538]
call fcn.7ff670d51af0
movsd xmm0, qword [rax]
movsd qword [r14 + 0x54], xmm0
movaps xmm2, xmm3
mulss xmm2, dword [0x7ff670e13894]
movss dword [r14 + 0x74], xmm2
mulss xmm3, dword [0x7ff670e138dc]
movaps xmm2, xmm14
movaps xmm1, xmm3
lea rcx, [rbp + 0x540]
call fcn.7ff670d51af0
movsd xmm0, qword [rax]
movsd qword [r14 + 0x4c], xmm0
movss xmm2, dword [0x7ff670e137c8]
movaps xmm1, xmm8
lea rcx, [rbp + 0x548]
call fcn.7ff670d51af0
movsd xmm0, qword [rax]
movsd qword [r14 + 0x98], xmm0
lea rcx, [rbp - 0x78]
call fcn.7ff670d94dd0
nop
mov dword [rbp + 0x14768], 5
lea r8, [rbp + 0x14768]
lea rdx, [rbp + 0x5c]
lea rcx, [rbp - 0x78]
call fcn.7ff670d96790
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e139a4]
mulss xmm1, dword [0x7ff670e139c4]
lea rcx, [rbp + 0x550]
call fcn.7ff670d51af0
mov rcx, rax
xor edx, edx
call fcn.7ff670d62f50
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0x558]
call fcn.7ff670d51af0
mov r8, rax
lea rcx, [rbp + 0x560]
call fcn.7ff670d51af0
xor edx, edx
mov rcx, rax
call fcn.7ff670d62ec0
mov r8d, 7
lea rdx, [0x7ff670e2a9ac]
lea rcx, [0x7ff670e0bd10]
call fcn.7ff670d5f700
call fcn.7ff670d62fd0
mov rbx, rax
call fcn.7ff670d57490
call fcn.7ff670d574e0
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e138a4]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x820]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e138e0]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e139c4]
lea rcx, [rbp + 0x568]
call fcn.7ff670d51af0
mov r8, rax
mulss xmm0, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm0
lea rcx, [rbp + 0x570]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x830]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e138e0]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e139c4]
lea rcx, [rbp + 0x578]
call fcn.7ff670d51af0
mov r8, rax
mulss xmm0, xmm14
movss xmm2, dword [0x7ff670e138cc]
movaps xmm1, xmm0
lea rcx, [rbp + 0x580]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm14
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
cmp byte [0x7ff670e2f66a], 0
je 0x7ff670d9dcbf
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e138a4]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x840]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e139a4]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e13914]
lea rcx, [rbp + 0x588]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm0
mulss xmm2, xmm7
mulss xmm0, xmm14
movaps xmm1, xmm0
lea rcx, [rbp + 0x5d0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x850]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e139a4]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e138e0]
lea rcx, [rbp + 0x5d8]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm0
mulss xmm2, xmm7
mulss xmm0, xmm14
movaps xmm1, xmm0
lea rcx, [rbp + 0x5e0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm14
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e138a8]
mulss xmm1, dword [0x7ff670e138bc]
lea rcx, [rbp + 0x250]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm6, dword [0x7ff670e13954]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm6
lea rcx, [rbp + 0x860]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bd18]
call fcn.7ff670d827f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e138a8]
mulss xmm1, dword [0x7ff670e139bc]
lea rcx, [rbp + 0x258]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
mov rcx, qword [rbp - 0x20]
call fcn.7ff670d62a40
movaps xmm1, xmm12
movaps xmm0, xmm14
call fcn.7ff670d64de0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1388c]
mulss xmm1, dword [0x7ff670e138e0]
lea rcx, [rbp + 0x260]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
lea rcx, [rbp + 0x870]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bd20]
call fcn.7ff670d827f0
call fcn.7ff670d62ae0
cmp byte [0x7ff670e2f66a], 0
jne 0x7ff670d9f811
movss xmm2, dword [0x7ff670e138e4]
movss xmm6, dword [0x7ff670e13914]
movaps xmm1, xmm6
lea rcx, [rbp + 0x268]
call fcn.7ff670d51af0
movss xmm0, dword [rax]
movss xmm3, dword [rax + 4]
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm7
mulss xmm1, xmm14
lea rcx, [rbp + 0x270]
call fcn.7ff670d51af0
movss xmm2, dword [rax + 4]
xor r9d, r9d
unpcklps xmm0, xmm3
movq r8, xmm0
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
lea rcx, [0x7ff670e0bd30]
call fcn.7ff670d962a0
movss xmm2, dword [0x7ff670e138e4]
movaps xmm1, xmm6
lea rcx, [rbp + 0x278]
call fcn.7ff670d51af0
movss xmm0, dword [rax]
movss xmm3, dword [rax + 4]
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13900]
mulss xmm1, xmm14
lea rcx, [rbp + 0x280]
call fcn.7ff670d51af0
movss xmm2, dword [rax + 4]
mov r9d, 1
unpcklps xmm0, xmm3
movq r8, xmm0
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
lea rcx, [0x7ff670e0bd40]
call fcn.7ff670d962a0
movss xmm2, dword [0x7ff670e138e4]
movaps xmm1, xmm6
lea rcx, [rbp + 0x288]
call fcn.7ff670d51af0
movss xmm0, dword [rax]
movss xmm3, dword [rax + 4]
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1390c]
mulss xmm1, xmm14
lea rcx, [rbp + 0x290]
call fcn.7ff670d51af0
movss xmm2, dword [rax + 4]
mov r9d, 2
unpcklps xmm0, xmm3
movq r8, xmm0
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
lea rcx, [0x7ff670e0bd50]
call fcn.7ff670d962a0
mov eax, dword [0x7ff670e2f6a0]
test eax, eax
jne 0x7ff670d9e5ac
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e138a4]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x880]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e13950]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e13978]
lea rcx, [rbp + 0x298]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm0
mulss xmm2, xmm7
mulss xmm0, xmm10
movaps xmm1, xmm0
lea rcx, [rbp + 0x2a0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
mov rcx, r13
call fcn.7ff670d62a40
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e138f0]
mulss xmm1, xmm13
lea rcx, [rbp + 0x2a8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0bd60]
call fcn.7ff670d826f0
call fcn.7ff670d62ae0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e138fc]
mulss xmm1, xmm13
lea rcx, [rbp + 0x2b0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm8
movaps xmm2, xmm8
movaps xmm1, xmm8
lea rcx, [rbp + 0x890]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bd68]
call fcn.7ff670d827f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
lea rcx, [0x7ff670e0bd90]
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
lea rcx, [0x7ff670dc4bda]
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm8
movaps xmm2, xmm8
movaps xmm1, xmm8
lea rcx, [rbp + 0x8a0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bde0]
call fcn.7ff670d827f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
lea rcx, [0x7ff670e0bdf8]
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
lea rcx, [0x7ff670dc4bda]
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm8
movaps xmm2, xmm8
movaps xmm1, xmm8
lea rcx, [rbp + 0x8b0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0be20]
call fcn.7ff670d827f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
lea rcx, [0x7ff670e0be40]
call fcn.7ff670d826f0
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e138a4]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x8c0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e13988]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e13978]
lea rcx, [rbp + 0x2b8]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e1395c]
mulss xmm0, xmm10
movaps xmm1, xmm0
lea rcx, [rbp + 0x2c0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
mov rcx, r13
call fcn.7ff670d62a40
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13960]
mulss xmm1, xmm13
lea rcx, [rbp + 0x2c8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0be88]
call fcn.7ff670d826f0
call fcn.7ff670d62ae0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13970]
mulss xmm1, xmm13
lea rcx, [rbp + 0x2d0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm8
movaps xmm2, xmm8
movaps xmm1, xmm8
lea rcx, [rbp + 0x8d0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0be98]
call fcn.7ff670d827f0
movaps xmm1, xmm12
movaps xmm0, xmm14
call fcn.7ff670d64de0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm15
movaps xmm1, xmm14
lea rcx, [rbp + 0x8e0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bea8]
call fcn.7ff670d827f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm8
movaps xmm2, xmm8
movaps xmm1, xmm8
lea rcx, [rbp + 0x8f0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0beb8]
call fcn.7ff670d827f0
movaps xmm1, xmm12
movaps xmm0, xmm14
call fcn.7ff670d64de0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm15
movaps xmm1, xmm14
lea rcx, [rbp + 0x900]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bec0]
call fcn.7ff670d827f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm13
call fcn.7ff670d64ef0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm8
movaps xmm2, xmm8
movaps xmm1, xmm8
lea rcx, [rbp + 0x910]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bec8]
call fcn.7ff670d827f0
movaps xmm1, xmm12
movaps xmm0, xmm14
call fcn.7ff670d64de0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm15
movaps xmm1, xmm14
lea rcx, [rbp + 0x920]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bed4]
call fcn.7ff670d827f0
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e138a4]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x930]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, xmm11
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e139b8]
lea rcx, [rbp + 0x2d8]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm0
mulss xmm2, xmm7
mulss xmm0, dword [0x7ff670e13980]
movaps xmm1, xmm0
lea rcx, [rbp + 0x2e0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
mov rcx, r13
call fcn.7ff670d62a40
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e138f0]
movss xmm6, dword [0x7ff670e13984]
mulss xmm1, xmm6
lea rcx, [rbp + 0x2e8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0bee0]
call fcn.7ff670d826f0
call fcn.7ff670d62ae0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e138fc]
mulss xmm1, xmm6
lea rcx, [rbp + 0x2f0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [rbp + 0xf0]
call fcn.7ff670d89ee0
mov rcx, rax
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rcx, [rbp + 0xd0]
call fcn.7ff670d89ee0
mov rcx, rax
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rcx, [rbp + 0xb0]
call fcn.7ff670d89ee0
mov rcx, rax
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rcx, [rbp - 0x70]
call fcn.7ff670d89ee0
mov rcx, rax
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rcx, [rbp]
call fcn.7ff670d89ee0
mov rcx, rax
call fcn.7ff670d826f0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rcx, [rbp + 0xcc0]
call fcn.7ff670d826f0
mov eax, dword [0x7ff670e2f6a0]
cmp eax, 1
jne 0x7ff670d9e735
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm7
mulss xmm1, xmm10
lea rcx, [rbp + 0x2f8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0bef8]
call fcn.7ff670d826f0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0x940]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x16
call fcn.7ff670d54430
movss xmm0, dword [0x7ff670e13804]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0x950]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x18
call fcn.7ff670d54430
movss xmm0, dword [0x7ff670e13820]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0x960]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x17
call fcn.7ff670d54430
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm9
mulss xmm1, xmm10
lea rcx, [rbp + 0x300]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm2, dword [0x7ff670e138c8]
movss xmm1, dword [0x7ff670e138fc]
lea rcx, [rbp + 0x308]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0bf08]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9e725
mov byte [0x7ff670e2f66e], 1
mov byte [0x7ff670e2f6a6], 1
mov byte [0x7ff670e2f66c], 1
mov byte [0x7ff670e2f66f], 1
mov byte [0x7ff670e2f66d], 1
mov byte [0x7ff670e2f6a4], 0
mov byte [0x7ff670e2f6a7], 1
mov byte [0x7ff670e2f6a5], 0
lea rdx, [0x7ff670e0bf18]
lea rcx, [0x7ff670e0b780]
call fcn.7ff670d96d00
mov byte [0x7ff670e42f48], 1
mov ecx, 3
call fcn.7ff670d54490
mov eax, dword [0x7ff670e2f6a0]
cmp eax, 2
jne 0x7ff670d9fec6
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm7
mulss xmm1, xmm10
lea rcx, [rbp + 0x310]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0bf30]
call fcn.7ff670d826f0
movss dword [rsp + 0x20], xmm14
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0x970]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x16
call fcn.7ff670d54430
movss dword [rsp + 0x20], xmm14
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0x980]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x18
call fcn.7ff670d54430
movss dword [rsp + 0x20], xmm14
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0x990]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x17
call fcn.7ff670d54430
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm9
mulss xmm1, xmm10
lea rcx, [rbp + 0x318]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm6, dword [0x7ff670e2a9b4]
movss xmm7, dword [0x7ff670e13888]
mulss xmm6, xmm7
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x9a0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r10d, eax
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0x320]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0x328]
call fcn.7ff670d51af0
mov rdx, rax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e13918]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e13944]
lea rcx, [rbp + 0x330]
call fcn.7ff670d51af0
mov r9, rax
movaps xmm2, xmm0
mulss xmm2, xmm9
mulss xmm0, xmm10
movaps xmm1, xmm0
lea rcx, [rbp + 0x338]
call fcn.7ff670d51af0
movss dword [rsp + 0x38], xmm6
mov dword [rsp + 0x30], r10d
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov r8, rax
mov rdx, qword [0x7ff670e43750]
mov rcx, rbx
call fcn.7ff670d79b00
movaps xmm2, xmm9
movaps xmm1, xmm9
lea rcx, [rbp + 0x340]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0bf40]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9e973
mov byte [0x7ff670e2f66e], 1
mov byte [0x7ff670e2f6a6], 1
mov byte [0x7ff670e2f66c], 1
mov byte [0x7ff670e2f66f], 0
mov byte [0x7ff670e2f66d], 1
mov byte [0x7ff670e2f6a4], 0
mov byte [0x7ff670e2f6a7], 1
mov byte [0x7ff670e2f6a5], 0
mov rax, qword [0x7ff670e43750]
mov qword [0x7ff670e2f688], rax
lea rdx, [0x7ff670e0bf50]
lea rcx, [0x7ff670e2a9b8]
call fcn.7ff670da29a0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm9
mulss xmm1, dword [0x7ff670e13948]
lea rcx, [rbp + 0x348]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, xmm7
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x9b0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r10d, eax
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0x350]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0x358]
call fcn.7ff670d51af0
mov rdx, rax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e13918]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e13974]
lea rcx, [rbp + 0x360]
call fcn.7ff670d51af0
mov r9, rax
movaps xmm2, xmm0
mulss xmm2, xmm9
mulss xmm0, dword [0x7ff670e13948]
movaps xmm1, xmm0
lea rcx, [rbp + 0x368]
call fcn.7ff670d51af0
movss dword [rsp + 0x38], xmm6
mov dword [rsp + 0x30], r10d
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov r8, rax
mov rdx, qword [0x7ff670e2f690]
mov rcx, rbx
call fcn.7ff670d79b00
movaps xmm2, xmm9
movaps xmm1, xmm9
lea rcx, [rbp + 0x370]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0bf60]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9eaee
mov byte [0x7ff670e2f66e], 1
mov byte [0x7ff670e2f6a6], 1
mov byte [0x7ff670e2f66c], 1
mov byte [0x7ff670e2f66f], 1
mov byte [0x7ff670e2f66d], 0
mov byte [0x7ff670e2f6a4], 0
mov byte [0x7ff670e2f6a7], 1
mov byte [0x7ff670e2f6a5], 1
mov rax, qword [0x7ff670e2f690]
mov qword [0x7ff670e2f688], rax
lea rdx, [0x7ff670e0bf70]
lea rcx, [0x7ff670e2a9b8]
call fcn.7ff670da29a0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm9
mulss xmm1, dword [0x7ff670e13978]
lea rcx, [rbp + 0x378]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, xmm7
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x9c0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r10d, eax
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0x380]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0x388]
call fcn.7ff670d51af0
mov rdx, rax
movss xmm0, dword [0x7ff670e2a9b4]
movaps xmm2, xmm0
mulss xmm2, dword [0x7ff670e13918]
movaps xmm1, xmm0
mulss xmm1, dword [0x7ff670e13998]
lea rcx, [rbp + 0x390]
call fcn.7ff670d51af0
mov r9, rax
movaps xmm2, xmm0
mulss xmm2, xmm9
mulss xmm0, dword [0x7ff670e13978]
movaps xmm1, xmm0
lea rcx, [rbp + 0x398]
call fcn.7ff670d51af0
movss dword [rsp + 0x38], xmm6
mov dword [rsp + 0x30], r10d
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov r8, rax
mov rdx, qword [0x7ff670e2f698]
mov rcx, rbx
call fcn.7ff670d79b00
movaps xmm2, xmm9
movaps xmm1, xmm9
lea rcx, [rbp + 0x3a0]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0bf7c]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9ec69
mov byte [0x7ff670e2f66e], 1
mov byte [0x7ff670e2f6a6], 1
mov byte [0x7ff670e2f66c], 1
mov byte [0x7ff670e2f66f], 0
mov byte [0x7ff670e2f66d], 0
mov byte [0x7ff670e2f6a4], 1
mov byte [0x7ff670e2f6a7], 0
mov byte [0x7ff670e2f6a5], 0
mov rax, qword [0x7ff670e2f698]
mov qword [0x7ff670e2f688], rax
lea rdx, [0x7ff670e0bf84]
lea rcx, [0x7ff670e2a9b8]
call fcn.7ff670da29a0
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, xmm7
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x9d0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm3, dword [0x7ff670e2a9b4]
movaps xmm2, xmm3
mulss xmm2, dword [0x7ff670e13918]
call fcn.7ff670d65700
subss xmm2, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [0x7ff670e139b0]
lea rcx, [rbp + 0x3a8]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm3
mulss xmm2, xmm9
call fcn.7ff670d65700
subss xmm2, xmm0
mulss xmm3, dword [0x7ff670e1399c]
movaps xmm1, xmm3
lea rcx, [rbp + 0x3b0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
mov rcx, qword [rbp - 0x20]
call fcn.7ff670d62a40
movss xmm7, dword [0x7ff670e2a9b4]
mulss xmm7, dword [0x7ff670e13908]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x7ff670e0bf8c]
lea rcx, [rbp + 0x3b8]
call fcn.7ff670d5c910
movss xmm0, dword [rax + 4]
mulss xmm0, xmm8
subss xmm7, xmm0
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e139a8]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x7ff670e0bf8c]
lea rcx, [rbp + 0x3c0]
call fcn.7ff670d5c910
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm6, xmm0
movaps xmm2, xmm7
movaps xmm1, xmm6
lea rcx, [rbp + 0x3c8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0bf94]
call fcn.7ff670d826f0
call fcn.7ff670d62ae0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, xmm9
mulss xmm1, dword [0x7ff670e1399c]
lea rcx, [rbp + 0x3d0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movaps xmm2, xmm9
movaps xmm1, xmm9
lea rcx, [rbp + 0x3d8]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0bfa0]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9ee66
mov byte [0x7ff670e2f66e], 0
mov byte [0x7ff670e2f6a6], 0
mov byte [0x7ff670e2f66c], 0
mov byte [0x7ff670e2f66f], 0
mov byte [0x7ff670e2f66d], 0
mov byte [0x7ff670e2f6a4], 0
mov byte [0x7ff670e2f6a7], 0
mov byte [0x7ff670e2f6a5], 0
mov qword [0x7ff670e2f688], 0
lea rdx, [0x7ff670e0bfb0]
lea rcx, [0x7ff670e2a9b8]
call fcn.7ff670da29a0
mov ecx, 3
call fcn.7ff670d54490
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13928]
mulss xmm1, xmm10
lea rcx, [rbp + 0x3e0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0bfc0]
call fcn.7ff670d826f0
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e13888]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x9e0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm3, dword [0x7ff670e2a9b4]
movaps xmm2, xmm3
mulss xmm2, dword [0x7ff670e13994]
call fcn.7ff670d65700
subss xmm2, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [0x7ff670e13998]
lea rcx, [rbp + 0x3e8]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm3
mulss xmm2, xmm11
call fcn.7ff670d65700
subss xmm2, xmm0
mulss xmm3, xmm10
movaps xmm1, xmm3
lea rcx, [rbp + 0x3f0]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e13888]
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x9f0]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r10d, eax
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0x3f8]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0x400]
call fcn.7ff670d51af0
mov rdx, rax
movss xmm3, dword [0x7ff670e2a9b4]
movaps xmm2, xmm3
mulss xmm2, dword [0x7ff670e13964]
call fcn.7ff670d65700
subss xmm2, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [0x7ff670e13948]
lea rcx, [rbp + 0x408]
call fcn.7ff670d51af0
mov r9, rax
movaps xmm2, xmm3
mulss xmm2, dword [0x7ff670e13938]
call fcn.7ff670d65700
subss xmm2, xmm0
mulss xmm3, dword [0x7ff670e13924]
movaps xmm1, xmm3
lea rcx, [rbp + 0x410]
call fcn.7ff670d51af0
movss dword [rsp + 0x38], xmm6
mov dword [rsp + 0x30], r10d
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov r8, rax
mov rdx, qword [0x7ff670e2f688]
mov rcx, rbx
call fcn.7ff670d79b00
mov rcx, r13
call fcn.7ff670d62a40
movss xmm7, dword [0x7ff670e2a9b4]
movaps xmm6, xmm7
mulss xmm6, dword [0x7ff670e1396c]
mulss xmm7, dword [0x7ff670e13934]
lea rcx, [0x7ff670e2a9b8]
call fcn.7ff670d89ee0
mov rdx, rax
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
lea rcx, [rbp + 0x418]
call fcn.7ff670d5c910
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm7, xmm0
movaps xmm2, xmm6
movaps xmm1, xmm7
lea rcx, [rbp + 0x420]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e2a9b8]
call fcn.7ff670d89ee0
mov rcx, rax
call fcn.7ff670d826f0
call fcn.7ff670d62ae0
movss xmm7, dword [0x7ff670e2a9b4]
movaps xmm6, xmm7
mulss xmm6, dword [0x7ff670e13974]
mulss xmm7, dword [0x7ff670e13934]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x7ff670e0bfd0]
lea rcx, [rbp + 0x428]
call fcn.7ff670d5c910
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm7, xmm0
movaps xmm2, xmm6
movaps xmm1, xmm7
lea rcx, [rbp + 0x430]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm2, dword [0x7ff670e137dc]
movss dword [rsp + 0x20], xmm2
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xa00]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bfd0]
call fcn.7ff670d827f0
movss xmm7, dword [0x7ff670e2a9b4]
movaps xmm6, xmm7
mulss xmm6, dword [0x7ff670e1397c]
mulss xmm7, dword [0x7ff670e13934]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x7ff670e0bfe0]
lea rcx, [rbp + 0x438]
call fcn.7ff670d5c910
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm7, xmm0
movaps xmm2, xmm6
movaps xmm1, xmm7
lea rcx, [rbp + 0x440]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm0, dword [0x7ff670e137dc]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xa10]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0bfe0]
call fcn.7ff670d827f0
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0xa20]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x16
call fcn.7ff670d54430
movss xmm0, dword [0x7ff670e13804]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0xa30]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x18
call fcn.7ff670d54430
movss xmm0, dword [0x7ff670e13820]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm14
movaps xmm1, xmm15
lea rcx, [rbp + 0xa40]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x17
call fcn.7ff670d54430
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1398c]
mulss xmm1, dword [0x7ff670e13924]
lea rcx, [rbp + 0x448]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm2, dword [0x7ff670e138c8]
movaps xmm1, xmm9
lea rcx, [rbp + 0x450]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0bff0]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9f2f5
lea rdx, [0x7ff670e0bf18]
lea rcx, [0x7ff670e0b780]
call fcn.7ff670d96d00
mov byte [0x7ff670e42f48], 1
mov ecx, 3
call fcn.7ff670d54490
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xa50]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 8
call fcn.7ff670d54430
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13938]
movss xmm6, dword [0x7ff670e13964]
mulss xmm1, xmm6
lea rcx, [rbp + 0x458]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rdx, [0x7ff670e2f66e]
lea rcx, [0x7ff670e0bff8]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f6a6]
lea rcx, [0x7ff670e0c008]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f66c]
lea rcx, [0x7ff670e0c018]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f66f]
or dword [rax], eax
lea rcx, [0x7ff670e0c030]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f66d]
lea rcx, [0x7ff670e0c040]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f6a4]
lea rcx, [0x7ff670e0c058]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f6a7]
lea rcx, [0x7ff670e0c068]
call fcn.7ff670d845e0
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64ef0
lea rdx, [0x7ff670e2f6a5]
lea rcx, [0x7ff670e0c078]
call fcn.7ff670d845e0
mov ecx, 1
call fcn.7ff670d54490
movss xmm6, dword [0x7ff670e2a9b4]
mulss xmm6, dword [0x7ff670e13888]
mov edx, 0x12
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0xa60]
call fcn.7ff670d81dc0
mov rcx, rax
call fcn.7ff670d6e4e0
mov r9d, eax
movss xmm3, dword [0x7ff670e2a9b4]
movaps xmm2, xmm3
mulss xmm2, dword [0x7ff670e13974]
call fcn.7ff670d65700
subss xmm2, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [0x7ff670e139b4]
lea rcx, [rbp + 0x460]
call fcn.7ff670d51af0
mov r8, rax
movaps xmm2, xmm3
mulss xmm2, xmm11
call fcn.7ff670d65700
subss xmm2, xmm0
mulss xmm3, dword [0x7ff670e1399c]
movaps xmm1, xmm3
lea rcx, [rbp + 0x468]
call fcn.7ff670d51af0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov rdx, rax
mov rcx, rbx
call fcn.7ff670d79710
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13934]
movss xmm7, dword [0x7ff670e139a0]
mulss xmm1, xmm7
lea rcx, [rbp + 0x470]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c088]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13934]
movss xmm6, dword [0x7ff670e139ac]
mulss xmm1, xmm6
lea rcx, [rbp + 0x478]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm15
movaps xmm1, xmm14
lea rcx, [rbp + 0xa70]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0c098]
call fcn.7ff670d827f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13940]
mulss xmm1, xmm7
lea rcx, [rbp + 0x480]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c0a8]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13940]
mulss xmm1, xmm6
lea rcx, [rbp + 0x488]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm15
movaps xmm1, xmm14
lea rcx, [rbp + 0xa80]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0c098]
call fcn.7ff670d827f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1394c]
mulss xmm1, xmm7
lea rcx, [rbp + 0x490]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c0b4]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1394c]
mulss xmm1, xmm6
lea rcx, [rbp + 0x498]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movaps xmm2, xmm15
movaps xmm1, xmm14
lea rcx, [rbp + 0xa90]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0c098]
call fcn.7ff670d827f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13958]
mulss xmm1, xmm7
lea rcx, [rbp + 0x4a0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c0c0]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13958]
mulss xmm1, xmm6
lea rcx, [rbp + 0x4a8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm15
movaps xmm2, xmm14
movaps xmm1, xmm14
lea rcx, [rbp + 0xaa0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0c0d0]
call fcn.7ff670d827f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13968]
mulss xmm1, xmm7
lea rcx, [rbp + 0x4b0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c0d8]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13968]
mulss xmm1, xmm6
lea rcx, [rbp + 0x4b8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss dword [rsp + 0x20], xmm15
movaps xmm3, xmm14
movss xmm2, dword [0x7ff670e137ec]
movaps xmm1, xmm15
lea rcx, [rbp + 0xab0]
call fcn.7ff670d51b00
mov rcx, rax
lea rdx, [0x7ff670e0c0e0]
call fcn.7ff670d827f0
movss xmm7, dword [0x7ff670e138ec]
jmp 0x7ff670d9fec6
mov rcx, qword [rsp + 0x60]
call fcn.7ff670d62a40
movss xmm7, dword [0x7ff670e2a9b4]
movaps xmm6, xmm7
mulss xmm6, dword [0x7ff670e13914]
mulss xmm7, dword [0x7ff670e13974]
movss dword [rsp + 0x20], xmm12
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x7ff670e0c0f0]
lea rcx, [rbp + 0x4c0]
call fcn.7ff670d5c910
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm7, xmm0
movaps xmm2, xmm6
movaps xmm1, xmm7
lea rcx, [rbp + 0x4c8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c0f0]
call fcn.7ff670d826f0
call fcn.7ff670d62ae0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13924]
mulss xmm1, xmm11
lea rcx, [rbp + 0x4d0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm10
call fcn.7ff670d64f30
movss dword [rsp + 0x20], xmm8
movss xmm6, dword [0x7ff670e137a8]
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
lea rcx, [rbp + 0xac0]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 7
call fcn.7ff670d54430
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm6
movaps xmm1, xmm6
lea rcx, [rbp + 0xad0]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x16
call fcn.7ff670d54430
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xae0]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x18
call fcn.7ff670d54430
movss xmm0, dword [0x7ff670e137c0]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm15
movaps xmm2, xmm15
movaps xmm1, xmm15
lea rcx, [rbp + 0xaf0]
call fcn.7ff670d51b00
mov rdx, rax
mov ecx, 0x17
call fcn.7ff670d54430
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13924]
mulss xmm1, xmm11
lea rcx, [rbp + 0x4d8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c110]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1392c]
mulss xmm1, xmm11
lea rcx, [rbp + 0x4e0]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm10
call fcn.7ff670d64f30
lea rbx, [0x7ff670e42f50]
mov rdx, rbx
lea rcx, [0x7ff670e0c128]
call fcn.7ff670d84db0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1392c]
mulss xmm1, dword [0x7ff670e13990]
lea rcx, [rbp + 0x4e8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm2, dword [0x7ff670e138bc]
movss xmm7, dword [0x7ff670e138ec]
movaps xmm1, xmm7
lea rcx, [rbp + 0x4f0]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e07578]
call fcn.7ff670d835d0
test al, al
je 0x7ff670d9fb47
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x7ff670d9fa80
cmp rax, 5
jae 0x7ff670d9faef
movaps xmm0, xmmword [0x7ff670e0c140]
movaps xmmword [0x7ff670e42f50], xmm0
movaps xmm1, xmmword [0x7ff670e0c150]
movaps xmmword [0x7ff670e42f60], xmm1
movaps xmm0, xmmword [0x7ff670e0c160]
movaps xmmword [0x7ff670e42f70], xmm0
movaps xmm1, xmmword [0x7ff670e0c170]
movaps xmmword [0x7ff670e42f80], xmm1
movaps xmm0, xmmword [0x7ff670e0c180]
movaps xmmword [0x7ff670e42f90], xmm0
movaps xmm1, xmmword [0x7ff670e0c190]
movaps xmmword [0x7ff670e42fa0], xmm1
mov eax, dword [0x7ff670e0c1a0]
mov dword [0x7ff670e42fb0], eax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.7ff670d96850
mov rdx, rax
lea rcx, [0x7ff670e43900]
call fcn.7ff670da2210
lea rcx, [rsp + 0x68]
call fcn.7ff670da21b0
lea rcx, [0x7ff670e43900]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e43900]
call fcn.7ff670d93820
lea r9, [0x7ff670e2f680]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
movss xmm6, dword [0x7ff670e1393c]
mulss xmm2, xmm6
mulss xmm1, xmm11
lea rcx, [rbp + 0x4f8]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
lea rcx, [0x7ff670e0c1a8]
call fcn.7ff670d826f0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e13948]
mulss xmm1, xmm11
lea rcx, [rbp + 0x500]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm0, dword [0x7ff670e2a9b4]
mulss xmm0, xmm6
call fcn.7ff670d64f30
lea rdx, [0x7ff670e43350]
lea rcx, [0x7ff670e0c1b8]
call fcn.7ff670d84db0
movss xmm1, dword [0x7ff670e2a9b4]
movaps xmm2, xmm1
mulss xmm2, dword [0x7ff670e1395c]
mulss xmm1, xmm11
lea rcx, [rbp + 0x508]
call fcn.7ff670d51af0
mov rcx, rax
call fcn.7ff670d64e90
movss xmm2, dword [0x7ff670e138bc]
movaps xmm1, xmm6
lea rcx, [rbp + 0x48]
call fcn.7ff670d51af0
mov rdx, rax
lea rcx, [0x7ff670e0c1c8]
call fcn.7ff670d835d0
test al, al
jne 0x7ff670d9fc32
cmp byte [0x7ff670e2f669], al
je 0x7ff670d9febc
mov byte [0x7ff670e2f669], 0
lea rcx, [rbp + 0x68]
call fcn.7ff670da2090
nop
lea rcx, [rbp + 0x20]
call fcn.7ff670d97b70
mov rdx, rax
call fcn.7ff670da2620
lea rcx, [rbp + 0x20]
call fcn.7ff670d93840
lea rax, [rbp + 0x160]
mov qword [rbp + 0x14768], rax
lea rdx, [rsp + 0x68]
call fcn.7ff670da0440
nop
mov rdx, rax
lea rcx, [rbp + 0x620]
call fcn.7ff670da5cf0
nop
lea rcx, [rbp + 0x640]
call fcn.7ff670da5d60
nop
lea rcx, [rbp + 0x660]
call fcn.7ff670da5de0
nop
lea r8, [rbp + 0x680]
lea rdx, [rbp + 0x620]
lea rcx, [rbp + 0xb00]
call fcn.7ff670da0d00
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x160]
call fcn.7ff670da1dc0
mov rbx, rax
lea rdx, [rbp + 0x20]
call fcn.7ff670da03b0
nop
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.7ff670da19a0
mov rcx, rax
mov rdx, rbx
call fcn.7ff670da1d50
nop
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f30
nop
lea r9, [fcn.7ff670d9c040]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rbp + 0x620]
call fcn.7ff670dbdf14
nop
lea rcx, [rsp + 0x68]
call fcn.7ff670d89f30
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x20]
call fcn.7ff670da5e90
nop
mov rdx, rax
lea rcx, [rbp + 0xb10]
call fcn.7ff670da5eb0
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.7ff670da5ed0
nop
lea rcx, [rbp + 0x20]
call fcn.7ff670d89f30
lea rdx, [rbp + 0xdd0]
lea rcx, [rbp + 0xb20]
call fcn.7ff670da6050
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.7ff670da5f90
lea rcx, [rbp + 0xdd0]
call fcn.7ff670da6060
test al, al
je 0x7ff670d9fe9f
mov rax, r15
lea rbx, [0x7ff670e42f50]
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x7ff670d9fda0
cmp rax, 5
jae 0x7ff670d9fe3e
movaps xmm0, xmmword [0x7ff670e0c1d0]
movaps xmmword [0x7ff670e42f50], xmm0
movaps xmm1, xmmword [0x7ff670e0c1e0]
movaps xmmword [0x7ff670e42f60], xmm1
movaps xmm0, xmmword [0x7ff670e0c1f0]
movaps xmmword [0x7ff670e42f70], xmm0
movaps xmm1, xmmword [0x7ff670e0c200]
movaps xmmword [0x7ff670e42f80], xmm1
movaps xmm0, xmmword [0x7ff670e0c210]
movaps xmmword [0x7ff670e42f90], xmm0
movaps xmm1, xmmword [0x7ff670e0c220]
movaps xmmword [0x7ff670e42fa0], xmm1
movsd xmm0, qword [0x7ff670e0c230]
movsd qword [0x7ff670e42fb0], xmm0
mov eax, dword [0x7ff670e0c238]
mov dword [0x7ff670e42fb8], eax
movzx eax, word [0x7ff670e0c23c]
mov word [0x7ff670e42fbc], ax
movzx eax, byte [0x7ff670e0c23e]
mov byte [0x7ff670e42fbe], al
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.7ff670d96850
mov rdx, rax
lea rcx, [0x7ff670e43900]
call fcn.7ff670da2210
lea rcx, [rsp + 0x68]
call fcn.7ff670da21b0
lea rcx, [0x7ff670e43900]
call fcn.7ff670da21a0
mov r8, rax
lea rcx, [0x7ff670e43900]
call fcn.7ff670d93820
lea r9, [0x7ff670e2f680]
mov rdx, rax
mov rcx, qword [0x7ff670e439e0]
call qword [sym.imp.D3DX9_43.dll_D3DXCreateTextureFromFileInMemory]
mov byte [0x7ff670e2f66a], 1
jmp 0x7ff670d9feb3
lea rdx, [0x7ff670e0c240]
lea rcx, [0x7ff670e0c268]
call fcn.7ff670d96d00
nop
lea rcx, [rbp + 0x68]
call fcn.7ff670d9c040
mov ecx, 4
call fcn.7ff670d54490
call fcn.7ff670d61ee0
call fcn.7ff670d5c000
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
xor ebx, ebx
mov dword [rsp + 0x30], ebx
movss dword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], ebx
lea r9d, [rbx + 3]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x7ff670d9ff76
call fcn.7ff670d5c480
call fcn.7ff670d57290
mov rcx, rax
call fcn.7ff670d8ade0
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x7ff670d9ffb4
mov rcx, qword [0x7ff670e439e0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x7ff670d9ffb4
call fcn.7ff670da0520
nop
lea rcx, [rbp - 0x78]
call fcn.7ff670d94dc0
jmp 0x7ff670d9d6fb
call fcn.7ff670d8b4b0
call fcn.7ff670d8baf0
call fcn.7ff670d570e0
call fcn.7ff670da04d0
mov rcx, r12
call qword [sym.imp.user32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.user32.dll_UnregisterClassW]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x170]
call fcn.7ff670da09f0
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
nop
mov rcx, qword [0x7ff670e439d8]
mov rdx, qword [0x7ff670e439e0]
test rdx, rdx
je 0x7ff670da0036
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x7ff670e439e0], rsi
mov rcx, qword [0x7ff670e439d8]
test rcx, rcx
je 0x7ff670da0048
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x7ff670e439d8], rsi
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.user32.dll_UnregisterClassW]
nop
mov rdx, qword [rbp + 0x6c8]
cmp rdx, 0xf
jbe 0x7ff670da00a2
inc rdx
mov rcx, qword [rbp + 0x6b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da009c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da009c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x7ff670da00e0
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da00db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da00db
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x7ff670da0135
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da012f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da012f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670da0173
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da016e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da016e
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x7ff670da01c7
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da01c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da01c2
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x7ff670da0224
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da021f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da021f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x7ff670da0281
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da027c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da027c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
cmp dword [rbp - 0x48], 0
je 0x7ff670da02a7
call qword [sym.imp.ucrtbase.dll_terminate]
nop
lea rcx, [rbp + 0x170]
call fcn.7ff670da49a0
nop
mov rax, qword [rbp + 0x78]
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x7ff670da02d3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov rbx, qword [rbx + 0x20]
test rbx, rbx
jne 0x7ff670da02c1
lock xadd dword [0x7ff670e43b50], r15d
cmp r15d, 1
jne 0x7ff670da02e8
call qword [sym.imp.ws2_32.dll_WSACleanup]
lea rcx, [rbp + 0x78]
call fcn.7ff670d8fed0
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x7ff670da0336
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670da0331
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff670da0331
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff670dbdfe4
mov eax, r14d
jmp 0x7ff670d9c2a7
mov ecx, r14d
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x48], esi
mov ecx, 6
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.7ff670d82010
nop
lea rcx, [rbp + 0x6d0]
call fcn.7ff670d93620
lea rcx, [rbp + 0x6d0]
call fcn.7ff670da56a0
int3
lea rcx, [rbp + 0x6e8]
call fcn.7ff670d93620
lea rcx, [rbp + 0x6e8]
call fcn.7ff670da56a0
nop
call fcn.7ff670d82010
int3