Function at 0x18000c760
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbx
push rbp
push rdi
sub rsp, 0xe0
mov rbp, qword [0x1800dff18]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], r13
mov qword [rax - 0x20], r14
mov ebx, dword [rbp + 0x60e0]
sub ebx, 1
mov qword [rax - 0x28], r15
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
js 0x18000c803
movsxd rdi, ebx
shl rdi, 5
mov rsi, rdi
nop word [rax + rax]
mov rdx, qword [rbp + 0x60e8]
cmp dword [rdx + rdi + 4], 7
jne 0x18000c7f6
movsxd r8, dword [rbp + 0x60e0]
mov rcx, rdx
sub rdx, rdx
add rdx, rsi
sar rdx, 5
sub r8, rdx
mov rax, rdx
shl rax, 5
add rcx, rax
shl r8, 5
sub r8, 0x20
lea rdx, [rcx + 0x20]
call sub.VCRUNTIME140.dll_memcpy
dec dword [rbp + 0x60e0]
sub rsi, 0x20
sub rdi, 0x20
sub ebx, 1
jns 0x18000c7b0
mov rbx, qword [rbp + 0x60e8]
movsxd rdi, dword [rbp + 0x60e0]
shl rdi, 5
add rdi, rbx
cmp rbx, rdi
je 0x18000c838
nop dword [rax]
cmp dword [rbx + 4], 0
jne 0x18000c82f
mov rdx, rbx
mov rcx, rbp
call qword [rbx + 0x10]
add rbx, 0x20
cmp rbx, rdi
jne 0x18000c820
call fcn.18001deb0
inc dword [rbp + 0x3fc0]
xor r14d, r14d
movss xmm0, dword [rbp + 0x18]
cvtps2pd xmm0, xmm0
mov byte [rbp + 0x3fcc], 1
mov word [rbp + 0x5fe8], r14w
mov dword [rbp + 0x4068], r14d
addsd xmm0, qword [rbp + 0x3fb8]
movsd qword [rbp + 0x3fb8], xmm0
mov ecx, dword [rbp + 0x6004]
test ecx, ecx
jns 0x18000c89b
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rbp + 0x6000]
test eax, eax
cmovg edx, eax
call fcn.180020bd0
movss xmm7, dword [0x1800d16a4]
xorps xmm6, xmm6
mov dword [rbp + 0x6000], r14d
movsxd rax, dword [rbp + 0x634c]
movss xmm1, dword [rbp + 0x18]
movaps xmm0, xmm1
subss xmm0, dword [rbp + rax*4 + 0x625c]
addss xmm0, dword [rbp + 0x6354]
movss dword [rbp + 0x6354], xmm0
movss dword [rbp + rax*4 + 0x625c], xmm1
mov eax, 0x88888889
mov ecx, dword [rbp + 0x634c]
movss xmm2, dword [rbp + 0x6354]
inc ecx
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3c
sub ecx, eax
mov eax, dword [rbp + 0x6350]
inc eax
mov dword [rbp + 0x634c], ecx
mov ecx, 0x3c
cmp eax, ecx
cmovl ecx, eax
comiss xmm2, xmm6
mov dword [rbp + 0x6350], ecx
jbe 0x18000c942
movss xmm1, dword [0x1800d1520]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
divss xmm1, xmm2
jmp 0x18000c945
movaps xmm1, xmm7
movss dword [rbp + 0xec], xmm1
mov ecx, dword [rbp + 0x4004]
test ecx, ecx
jns 0x18000c974
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rbp + 0x4000]
test eax, eax
cmovg edx, eax
call fcn.180020920
mov dword [rbp + 0x4000], r14d
movzx ecx, byte [rbp + 0x5b]
call fcn.1800175e0
mov rbx, qword [0x1800dff18]
mov rax, qword [rbx + 0x4ba0]
mov rcx, qword [rax]
mov qword [rcx + 4], 5
mov dword [rcx + 0xc], r14d
movsd xmm0, qword [rbx + 0x10]
movsd qword [rcx + 0x10], xmm0
mov rcx, qword [rbx + 0x4ba0]
movsxd rax, dword [rbx + 0x4b98]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x18000ca6d
nop word [rax + rax]
mov rax, qword [rcx]
add rcx, 8
movsd xmm4, qword [rax + 0xc0]
movsd xmm3, qword [rax + 0xc8]
movaps xmm0, xmm4
movss xmm1, dword [rax + 0xc]
movaps xmm2, xmm4
shufps xmm0, xmm0, 0x55
mov qword [rax + 0xc8], r14
addss xmm1, xmm0
movss xmm0, dword [rax + 0x10]
mov qword [rax + 0xc0], r14
subss xmm0, xmm4
movsd qword [rax + 0xb8], xmm3
movsd qword [rax + 0xb0], xmm4
movss dword [rax + 0x1c], xmm1
movss xmm1, dword [rax + 0x14]
addss xmm0, xmm3
addss xmm2, dword [rax + 8]
movss dword [rax + 0x18], xmm2
movaps xmm2, xmm6
maxss xmm2, xmm0
movaps xmm0, xmm4
shufps xmm0, xmm0, 0x55
subss xmm1, xmm0
movaps xmm0, xmm6
addss xmm1, dword [rax + 0xbc]
movss dword [rax + 0x20], xmm2
maxss xmm0, xmm1
movss dword [rax + 0x24], xmm0
cmp rcx, rdx
jne 0x18000c9d0
mov rax, qword [rbp + 0x38]
mov byte [rax + 0x18], 1
call fcn.18000c530
mov rcx, qword [rbx + 0x48]
test rcx, rcx
jne 0x18000ca8e
mov rax, qword [rbx + 0x38]
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx]
call fcn.180014a30
mov rcx, qword [rbp + 0x4ba0]
movsxd rax, dword [rbp + 0x4b98]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x18000cac0
nop word [rax + rax]
mov rax, qword [rcx]
add rcx, 8
mov byte [rax + 0x50], r14b
cmp rcx, rdx
jne 0x18000cab0
cmp byte [rbp + 0x4dc4], r14b
je 0x18000caf4
mov eax, dword [rbp + 0x4de4]
cmp eax, dword [rbp + 0x40e4]
jne 0x18000caf4
cmp dword [rbx + 0x40e4], eax
jne 0x18000cae5
mov dword [rbx + 0x40e8], eax
cmp dword [rbx + 0x4114], eax
jne 0x18000caf4
mov byte [rbx + 0x4118], 1
cmp dword [rbp + 0x40d4], r14d
jne 0x18000cb06
mov dword [rbp + 0x40d8], r14d
jmp 0x18000cb18
mov eax, dword [rbp + 0x40d0]
test eax, eax
je 0x18000cb1f
cmp dword [rbp + 0x40e4], eax
jne 0x18000cb1f
mov dword [rbp + 0x40dc], r14d
mov eax, dword [rbp + 0x40d0]
test eax, eax
je 0x18000cb59
movss xmm1, dword [rbp + 0x18]
movaps xmm0, xmm1
addss xmm0, dword [rbp + 0x40d8]
movss dword [rbp + 0x40d8], xmm0
cmp dword [rbp + 0x40e4], eax
je 0x18000cb59
addss xmm1, dword [rbp + 0x40dc]
movss dword [rbp + 0x40dc], xmm1
mov dword [rbp + 0x40d4], eax
mov eax, dword [rbp + 0x40e4]
mov dword [rbp + 0x40d0], r14d
mov word [rbp + 0x40e0], r14w
test eax, eax
je 0x18000cba6
cmp dword [rbp + 0x40e8], eax
je 0x18000cba6
cmp dword [rbp + 0x4114], eax
jne 0x18000cba6
test byte [rbp + 0x6184], 1
je 0x18000cb9d
lea rcx, [0x1800c1d00]
call fcn.18001ee70
xor edx, edx
xor ecx, ecx
call fcn.18000b540
mov ecx, dword [rbp + 0x40e4]
test ecx, ecx
je 0x18000cbc5
movss xmm0, dword [rbp + 0x18]
addss xmm0, dword [rbp + 0x40ec]
movss dword [rbp + 0x40ec], xmm0
mov rax, qword [rbp + 0x4108]
movss xmm0, dword [rbp + 0x18]
addss xmm0, dword [rbp + 0x412c]
mov qword [rbp + 0x4120], rax
movzx eax, byte [rbp + 0x40f4]
mov byte [rbp + 0x4119], al
mov eax, dword [rbp + 0x5f48]
movss dword [rbp + 0x412c], xmm0
mov dword [rbp + 0x4114], ecx
mov dword [rbp + 0x40e8], r14d
mov byte [rbp + 0x40f5], r14b
mov byte [rbp + 0x4118], r14b
mov byte [rbp + 0x40f0], r14b
test eax, eax
je 0x18000cc2c
cmp ecx, eax
je 0x18000cc2c
mov dword [rbp + 0x5f48], r14d
test ecx, ecx
jne 0x18000cc3e
mov dword [rbp + 0x49f0], r14d
mov byte [rbp + 0x49f4], r14b
mov ecx, dword [rbp + 0x4ff8]
test ecx, ecx
je 0x18000cc61
movss xmm0, dword [rbp + 0x5014]
comiss xmm0, dword [rbp + 0x3d70]
jb 0x18000cc68
mov dword [rbp + 0x5008], ecx
jmp 0x18000cc68
mov dword [rbp + 0x5008], r14d
mov rax, qword [rbp + 0x4080]
test rax, rax
je 0x18000cc90
movss xmm0, dword [rbp + 0x5014]
comiss xmm0, dword [rbp + 0x3d70]
jb 0x18000cc97
mov eax, dword [rax + 0x10]
mov dword [rbp + 0x500c], eax
jmp 0x18000cc97
mov dword [rbp + 0x500c], r14d
movss xmm0, dword [rbp + 0x5000]
mov dword [rbp + 0x4ffc], ecx
test ecx, ecx
je 0x18000ccc6
addss xmm0, dword [rbp + 0x18]
mov dword [rbp + 0x5004], r14d
mov dword [rbp + 0x4ff8], r14d
movss dword [rbp + 0x5000], xmm0
jmp 0x18000ccff
comiss xmm0, xmm6
jbe 0x18000ccff
movss xmm2, dword [rbp + 0x18]
movss xmm0, dword [0x1800d1474]
movaps xmm1, xmm2
addss xmm1, dword [rbp + 0x5004]
addss xmm2, xmm2
movss dword [rbp + 0x5004], xmm1
maxss xmm0, xmm2
comiss xmm1, xmm0
jb 0x18000ccff
mov qword [rbp + 0x5000], r14
mov eax, dword [rbp + 0x4e44]
mov dword [rbp + 0x4e48], eax
mov qword [rbp + 0x4e40], 0x7f7fffff
mov word [rbp + 0x4dc5], r14w
mov dword [rbp + 0x4e50], r14d
call fcn.1800160a0
call fcn.18001aac0
call fcn.1800167d0
call fcn.18000c0b0
mov r10, qword [0x1800dff18]
mov rcx, qword [r10 + 0x4098]
test rcx, rcx
je 0x18000ce10
mov eax, dword [r10 + 0x40e4]
mov dword [r10 + 0x40e8], eax
cmp dword [r10 + 0x4114], eax
jne 0x18000cd6f
mov byte [r10 + 0x4118], 1
mov r9, qword [rcx + 0x390]
cmp byte [r10 + 0x118], r14b
je 0x18000ce07
lea rax, [r10 + 0x110]
mov rcx, rax
test rax, rax
jne 0x18000cd99
lea rcx, [r10 + 0x110]
movss xmm0, dword [rcx]
movss xmm1, dword [0x1800d170c]
comiss xmm0, xmm1
movss xmm2, dword [rcx + 4]
jb 0x18000ce07
comiss xmm2, xmm1
jb 0x18000ce07
movss xmm0, dword [rax]
lea rdx, [rsp + 0x100]
movss xmm1, dword [rax + 4]
mov r8d, 1
subss xmm0, dword [r10 + 0x40fc]
subss xmm1, dword [r10 + 0x4100]
mov rcx, r9
movss dword [rsp + 0x100], xmm0
movss dword [rsp + 0x104], xmm1
call fcn.180014af0
mov rcx, qword [r10 + 0x4098]
xor edx, edx
call fcn.180014600
jmp 0x18000ce55
mov qword [r10 + 0x4098], r14
jmp 0x18000ce4c
mov rcx, qword [r10 + 0x4108]
test rcx, rcx
je 0x18000ce55
mov eax, dword [r10 + 0x40e4]
cmp dword [rcx + 0x8c], eax
jne 0x18000ce55
mov dword [r10 + 0x40e8], eax
cmp dword [r10 + 0x4114], eax
jne 0x18000ce43
mov byte [r10 + 0x4118], 1
cmp byte [r10 + 0x118], r14b
jne 0x18000ce55
xor edx, edx
xor ecx, ecx
call fcn.18000b540
mov r8, qword [0x1800dff18]
movss xmm9, dword [0x1800d15ec]
mov eax, dword [r8 + 0x4b68]
sub eax, 1
js 0x18000cea1
mov r8, qword [r8 + 0x4b70]
movsxd rdx, eax
add r8, 8
imul rcx, rdx, 0x38
add r8, rcx
mov rax, qword [r8]
test rax, rax
je 0x18000ce97
test dword [rax + 0x14], 0x8000000
jne 0x18000ceb7
sub r8, 0x38
sub rdx, 1
jns 0x18000ce86
cmp qword [rbp + 0x4d88], r14
je 0x18000ced3
movss xmm0, dword [rbp + 0x4da4]
comiss xmm0, xmm6
jbe 0x18000ced3
movss xmm1, dword [rbp + 0x18]
mulss xmm1, xmm9
addss xmm1, dword [rbp + 0x4dc0]
minss xmm1, dword [0x1800d1520]
jmp 0x18000cef0
movss xmm0, dword [rbp + 0x18]
mulss xmm0, dword [0x1800d15fc]
movss xmm1, dword [rbp + 0x4dc0]
subss xmm1, xmm0
maxss xmm1, xmm6
movss dword [rbp + 0x4dc0], xmm1
mov r13d, 0xffffffff
movups xmm0, xmmword [rbp + 0x6078]
mov dword [rbp + 0x5010], r14d
mov qword [rbp + 0x635c], 0xffffffffffffffff
movups xmmword [rbp + 0x6088], xmm0
mov dword [rbp + 0x6358], r13d
mov byte [rbp + 0x6078], r14b
call fcn.180016ce0
cmp byte [rbp + 0x3fcf], r14b
jne 0x18000cf54
movss xmm0, dword [rbp + 0x64]
comiss xmm6, xmm0
ja 0x18000cf54
movsd xmm7, qword [rbp + 0x3fb8]
cvtpd2ps xmm7, xmm7
subss xmm7, xmm0
mov rdi, qword [rbp + 0x4020]
movsxd rax, dword [rbp + 0x4018]
lea rsi, [rdi + rax*8]
cmp rdi, rsi
je 0x18000d023
nop
mov rbx, qword [rdi]
movzx ecx, byte [rbx + 0xca]
movzx eax, word [rbx + 0xd8]
mov byte [rbx + 0xcb], cl
mov byte [rbx + 0xca], r14b
mov byte [rbx + 0xcc], r14b
mov word [rbx + 0xda], ax
mov word [rbx + 0xd8], r14w
test cl, cl
jne 0x18000d016
cmp byte [rbx + 0x404], r14b
jne 0x18000d016
comiss xmm7, dword [rbx + 0x27c]
jbe 0x18000d016
mov rcx, qword [rbx + 0x2b0]
mov byte [rbx + 0x404], 1
mov eax, dword [rcx + 0x14]
mov dword [rbx + 0x3fc], eax
mov eax, dword [rcx + 0x24]
lea rcx, [rbx + 0x108]
mov dword [rbx + 0x400], eax
call fcn.180004e30
mov rcx, qword [rbx + 0x2b0]
call fcn.180029a50
lea rcx, [rbx + 0x1a8]
call fcn.180004e30
lea rcx, [rbx + 0x1e0]
call fcn.180004e30
lea rcx, [rbx + 0x1f0]
call fcn.180004e30
add rdi, 8
cmp rdi, rsi
jne 0x18000cf70
mov esi, r14d
cmp dword [rbp + 0x4ed8], r14d
jle 0x18000d1a9
mov qword [rsp + 0x110], r12
mov r15, r14
mov r12, r14
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + 0x4ee0]
movss xmm0, dword [r15 + rax]
comiss xmm0, xmm6
jb 0x18000d188
comiss xmm7, xmm0
jbe 0x18000d188
mov rbx, qword [rbp + 0x4eb8]
mov rdi, qword [0x1800dff18]
add rbx, r12
mov qword [rbx + 0x1f0], r14
mov r8, qword [rbx + 0x1e8]
test r8, r8
je 0x18000d10d
mov qword [rbx + 0x1e0], r14
test rdi, rdi
je 0x18000d0fd
movsx rdx, word [rdi + 0x6228]
lea rcx, [rdi + 0x622c]
mov r9d, dword [rdi + 0x3fc0]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x18000d0f3
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x6228], cx
movsx rax, cx
lea rcx, [rdi + 0x622c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r14d
inc word [rcx + 6]
inc dword [rdi + 0x6224]
mov rcx, r8
call qword [sym.imp.ucrtbase.dll_free]
mov qword [rbx + 0x1e8], r14
lea rcx, [rbx + 0x190]
mov byte [rbx + 0x239], 1
call fcn.180004e30
mov edx, r14d
mov byte [rbx + 0x248], 1
cmp dword [rbx + 0x6c], r14d
jle 0x18000d155
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0x18]
lea rcx, [rcx + 0x70]
inc edx
mov word [rax + rcx - 0x20], r13w
cmp edx, dword [rbx + 0x6c]
jl 0x18000d140
sub rbx, qword [rdi + 0x4eb8]
movabs rax, 0x3759f22983759f23
imul rbx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, qword [rdi + 0x4ee0]
movsxd rcx, edx
mov dword [rax + rcx*4], 0xbf800000
inc esi
add r15, 4
add r12, 0x250
cmp esi, dword [rbp + 0x4ed8]
jl 0x18000d050
mov r12, qword [rsp + 0x110]
mov rbx, qword [rbp + 0x4ea8]
movsxd rax, dword [rbp + 0x4ea0]
imul rdi, rax, 0x88
add rdi, rbx
cmp rbx, rdi
je 0x18000d1f1
movss xmm0, dword [rbx + 4]
comiss xmm0, xmm6
jb 0x18000d1e5
comiss xmm7, xmm0
jbe 0x18000d1e5
lea rcx, [rbx + 0x28]
call fcn.18002ca40
mov dword [rbx + 4], 0xbf800000
add rbx, 0x88
cmp rbx, rdi
jne 0x18000d1c6
movaps xmm7, xmmword [rsp + 0xb0]
cmp byte [rbp + 0x3fcf], r14b
je 0x18000d2c5
mov rbx, qword [0x1800dff18]
lea rcx, [rbx + 0x4b48]
call fcn.180004e30
mov r9, qword [rbx + 0x4b60]
test r9, r9
je 0x18000d2ad
mov r8, qword [0x1800dff18]
mov qword [rbx + 0x4b58], r14
test r8, r8
je 0x18000d29d
movsx r11, word [r8 + 0x6228]
lea rdx, [r8 + 0x622c]
mov r10d, dword [r8 + 0x3fc0]
lea rdx, [rdx + r11*8]
cmp dword [rdx], r10d
je 0x18000d292
lea ecx, [r11 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x622c]
sub ecx, eax
mov word [r8 + 0x6228], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r14d
inc word [rdx + 6]
inc dword [r8 + 0x6224]
mov rcx, r9
call qword [sym.imp.ucrtbase.dll_free]
mov qword [rbx + 0x4b60], r14
lea rcx, [rbx + 0x4fc0]
mov dword [rbx + 0x4fb8], r14d
call fcn.18001f760
call fcn.1800325e0
mov rax, qword [rbp + 0x4ba8]
mov byte [rbp + 0x3fcf], r14b
test rax, rax
je 0x18000d337
cmp byte [rax + 0xcb], r14b
jne 0x18000d337
mov rcx, qword [0x1800dff18]
mov eax, dword [rcx + 0x4028]
sub eax, 1
js 0x18000d32b
movsxd rdx, eax
mov rax, qword [rcx + 0x4030]
lea r8, [rax + rdx*8]
mov rcx, qword [r8]
test rcx, rcx
je 0x18000d321
cmp byte [rcx + 0xcb], r14b
je 0x18000d321
mov eax, dword [rcx + 0x14]
and eax, 0x10200
cmp eax, 0x10200
jne 0x18000d32d
sub r8, 8
sub rdx, 1
jns 0x18000d301
xor ecx, ecx
mov edx, 1
call fcn.180014600
mov ecx, dword [rbp + 0x404c]
test ecx, ecx
jns 0x18000d35e
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rbp + 0x4048]
test eax, eax
cmovg edx, eax
call fcn.180020840
mov dword [rbp + 0x4048], r14d
mov ecx, dword [rbp + 0x4b7c]
test ecx, ecx
jns 0x18000d38c
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rbp + 0x4b78]
test eax, eax
cmovg edx, eax
call fcn.180020760
lea rbx, [rbp + 0x4b48]
mov dword [rbp + 0x4b78], r14d
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18000d3ba
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.180020bd0
mov dword [rbx], r14d
cmp dword [rbx + 4], r14d
jne 0x18000d3d0
mov edx, 8
mov rcx, rbx
call fcn.180020bd0
movsxd rcx, dword [rbx]
xor edx, edx
mov rax, qword [rbx + 8]
mov dword [rax + rcx*4], 0x10
movsxd rcx, dword [rbx]
lea eax, [rcx + 1]
mov dword [rbx], eax
mov rax, qword [rbp + 0x4b50]
mov ecx, dword [rax + rcx*4]
mov dword [rbp + 0x4a00], ecx
lea rcx, [rbp + 0x4b58]
call fcn.18001fcc0
mov r15, qword [0x1800dff18]
mov dword [r15 + 0x61c0], r14d
cmp byte [r15 + 0x61bd], r14b
je 0x18000d580
mov ebx, dword [r15 + 0x40d4]
xor r8d, r8d
mov edx, 1
mov dword [r15 + 0x5010], 7
mov ecx, 0x20e
call fcn.180015d00
test al, al
je 0x18000d44e
mov byte [r15 + 0x61bd], r14b
mov edi, dword [r15 + 0x130]
xor r8d, r8d
xor edx, edx
cmp edi, 0x3000
je 0x18000d487
movzx ecx, byte [r15 + 0x61be]
call fcn.180015f20
test al, al
je 0x18000d4cf
test ebx, ebx
je 0x18000d4cf
mov dword [r15 + 0x61c0], ebx
mov byte [r15 + 0x61bd], r14b
jmp 0x18000d4cf
xor ecx, ecx
call fcn.180015f20
test al, al
je 0x18000d499
mov byte [r15 + 0x61be], r14b
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.180015f20
test al, al
je 0x18000d4b4
mov byte [r15 + 0x61be], 1
xor r8d, r8d
xor edx, edx
mov ecx, 2
call fcn.180015f20
test al, al
je 0x18000d4cf
mov byte [r15 + 0x61be], 2
or dword [r15 + 0x4a90], 0x40
xor ecx, ecx
mov dword [r15 + 0x4af0], 0x3f333333
call fcn.180018c80
test al, al
je 0x18000d579
mov edx, ebx
lea rcx, [0x1800c2b18]
call fcn.180033700
lea rcx, [0x1800c2b30]
call fcn.180033700
lea rax, [0x1800c2b4c]
mov qword [rsp + 0x30], rax
lea rax, [0x1800c2b54]
mov qword [rsp + 0x38], rax
lea rax, [0x1800c2b5c]
mov qword [rsp + 0x40], rax
cmp edi, 0x3000
jne 0x18000d545
lea rcx, [0x1800c2b70]
call fcn.180033700
jmp 0x18000d574
movzx r8d, byte [r15 + 0x61be]
lea rdx, [0x1800c2bb0]
test ebx, ebx
mov eax, 0x3a00
mov ecx, 0x39f0
cmove ecx, eax
add rcx, qword [0x1800dff18]
mov r8, qword [rsp + r8*8 + 0x30]
call fcn.180033770
call fcn.180014270
mov r15, qword [0x1800dff18]
mov dword [r15 + 0x40cc], r14d
mov rbx, r15
mov eax, dword [r15 + 0x61f8]
inc eax
cmp dword [r15 + 0x3fc0], eax
jne 0x18000d676
mov edi, dword [r15 + 0x40d4]
test edi, edi
jne 0x18000d5b2
mov edi, dword [r15 + 0x40e4]
cmp dword [r15 + 0x6200], edi
je 0x18000d5ff
mov dword [r15 + 0x6200], edi
mov dword [r15 + 0x61fc], r13d
mov ecx, dword [r15 + 0x620c]
test ecx, ecx
jns 0x18000d5f8
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [r15 + 0x6208]
test eax, eax
cmovg edx, eax
call fcn.180020a00
mov r15, qword [0x1800dff18]
mov dword [rbx + 0x6208], r14d
test edi, edi
je 0x18000d676
movsxd rcx, dword [rbx + 0x61fc]
test ecx, ecx
js 0x18000d63a
mov eax, ecx
cmp ecx, dword [rbx + 0x6208]
jge 0x18000d64d
mov r8, qword [rbx + 0x6210]
lea rdx, [rcx + rcx*8]
cmp byte [r8 + rdx*8 + 5], r14b
jne 0x18000d632
cmp byte [r8 + rdx*8 + 4], 2
jle 0x18000d64d
inc ecx
mov dword [rbx + 0x61fc], ecx
mov eax, ecx
cmp ecx, r13d
jne 0x18000d649
mov dword [rbx + 0x40cc], edi
jmp 0x18000d676
test ecx, ecx
js 0x18000d676
cmp eax, dword [rbx + 0x6208]
jge 0x18000d676
cdqe
lea rdx, [rax + rax*8]
mov rax, qword [rbx + 0x6210]
mov ecx, dword [rax + rdx*8]
mov dword [rbx + 0x40cc], ecx
mov rax, qword [rbx + 0x6210]
inc byte [rax + rdx*8 + 4]
movss xmm0, dword [r15 + 0x61c4]
comiss xmm6, xmm0
mov r13, qword [rsp + 0x118]
jae 0x18000d746
movsxd rax, dword [r15 + 0x4b04]
shl rax, 4
mulss xmm0, xmm9
lea rbx, [rax + 0x39f8]
lea rdi, [rax + 0x39f4]
add rbx, r15
add rdi, r15
lea rsi, [rax + 0x39f0]
call sub.ucrtbase.dll_cosf
movss xmm1, dword [0x1800d14a0]
lea r9, [rsi + r15]
mulss xmm0, xmm1
movaps xmm2, xmm1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
addss xmm0, xmm1
call fcn.180007bf0
movsxd rax, dword [r15 + 0x4b04]
add rax, rax
mov dword [r15 + rax*8 + 0x39fc], 0x3f800000
movss xmm0, dword [r15 + 0x61c4]
subss xmm0, dword [r15 + 0x18]
comiss xmm6, xmm0
movss dword [r15 + 0x61c4], xmm0
jb 0x18000d746
movsxd rax, dword [r15 + 0x4b04]
cmp eax, 0x38
je 0x18000d73b
movups xmm0, xmmword [r15 + 0x61c8]
add rax, 0x39f
add rax, rax
movups xmmword [r15 + rax*8], xmm0
mov dword [r15 + 0x4b04], 0x38
movzx eax, byte [rbp + 0x61b5]
movaps xmm9, xmmword [rsp + 0xa0]
mov rsi, qword [rsp + 0x108]
test al, al
je 0x18000d77a
sub al, 1
mov byte [rbp + 0x61b5], al
jne 0x18000d77a
mov dword [rbp + 0x4a04], r14d
mov byte [rbp + 0x61b6], r14b
movzx eax, byte [rbp + 0x61b4]
test al, al
je 0x18000d987
sub al, 1
mov byte [rbp + 0x61b4], al
jne 0x18000d987
cmp dword [0x1800df0e0], 2
mov r8d, r14d
movups xmm0, xmmword [0x1800c2c50]
movups xmm1, xmmword [0x1800c2c60]
movzx eax, word [0x1800c2c90]
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x90], ax
movups xmm0, xmmword [0x1800c2c70]
movzx eax, byte [0x1800c2c92]
movups xmmword [rsp + 0x60], xmm1
mov byte [rsp + 0x92], al
movups xmm1, xmmword [0x1800c2c80]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x80], xmm1
jl 0x18000d919
movdqa xmm0, xmmword [0x1800d18f0]
lea rcx, [rsp + 0x54]
movdqa xmm4, xmmword [0x1800d1790]
movdqa xmm3, xmmword [0x1800d1d80]
movdqa xmm5, xmmword [0x1800d1830]
movdqa xmm6, xmmword [0x1800d1860]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x18000d830
cmp r8d, 0x43
jge 0x18000d961
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x37
xor byte [r9 - 1], al
cmp r8d, 0x43
jl 0x18000d930
lea rcx, [rsp + 0x50]
call fcn.18001ee70
mov eax, dword [rbp + 0x61b0]
mov r15, qword [0x1800dff18]
not eax
and dword [rbp + 0x6184], eax
mov dword [rbp + 0x61b0], r14d
mov byte [rbp + 0x3fcd], 1
lea rcx, [0x1800c1d48]
or dword [r15 + 0x4a90], 2
xor r8d, r8d
xor edx, edx
mov dword [r15 + 0x4ab0], 0x43c80000
mov dword [r15 + 0x4ab4], 0x43c80000
mov dword [r15 + 0x4a98], 4
call fcn.180011d30
movaps xmm6, xmmword [rsp + 0xc0]
mov r15, qword [rsp + 0xd0]
cmp byte [rbp + 0x7e], r14b
je 0x18000da23
movsx ecx, byte [rbp + 0x61bc]
cmp cl, 0xff
je 0x18000da26
mov eax, dword [rbp + 0x3fc0]
and eax, 0x80000003
jge 0x18000d9fe
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
mov eax, 0x66666667
sete r14b
add r14d, ecx
imul r14d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub r14d, eax
jmp 0x18000da26
mov r14b, 0xff
mov byte [rbp + 0x61bc], r14b
mov rbx, qword [rbp + 0x60e8]
movsxd rdi, dword [rbp + 0x60e0]
mov r14, qword [rsp + 0xd8]
shl rdi, 5
add rdi, rbx
cmp rbx, rdi
je 0x18000da68
nop
cmp dword [rbx + 4], 1
jne 0x18000da5f
mov rdx, rbx
mov rcx, rbp
call qword [rbx + 0x10]
add rbx, 0x20
cmp rbx, rdi
jne 0x18000da50
add rsp, 0xe0
pop rdi
pop rbp
pop rbx
ret