Function at 0x18004d4e0
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3a8]
sub rsp, 0x468
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x18006f9a8]
mov rax, qword [rax + 0x48a8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1800226e0
mov r13, rax
mov edi, 4
mov r15d, dword [0x18006f358]
movss xmm11, dword [0x180064a04]
movss xmm12, dword [0x1800649dc]
movss xmm13, dword [0x180064a78]
movss xmm14, dword [0x1800649e0]
mov r8, qword [0x18006f068]
cmp byte [r8 + 2], 0
je 0x18004d7d5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004d5bd
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x24c]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [rax + 0x254]
mov dword [rbp - 0x28], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004d5e6
mov rax, qword [rax]
movss xmm6, dword [rax + 0x17d4]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
jne 0x18004d602
xor ebx, ebx
jmp 0x18004d605
mov rbx, qword [rax]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [rdi + rax]
cmp dword [0x18006fcc8], ecx
jle 0x18004d653
lea rcx, [0x18006fcc8]
call fcn.18005661c
cmp dword [0x18006fcc8], 0xffffffff
jne 0x18004d653
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x20a870
mov qword [0x18006fcb8], rax
lea rcx, [0x18006fcc8]
call fcn.1800565bc
mov rcx, rbx
call qword [0x18006fcb8]
movaps xmm8, xmm0
addss xmm8, xmm6
xor esi, esi
movss xmm1, dword [rbp - 0x2c]
movss dword [rbp - 0x4c], xmm1
movss xmm9, dword [rbp - 0x28]
movss xmm10, dword [rbp - 0x30]
nop dword [rax]
movd xmm7, esi
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm11
mulss xmm7, xmm12
divss xmm7, xmm13
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm8
addss xmm0, xmm10
movss dword [rbp - 0x48], xmm6
movsd xmm1, qword [rbp - 0x50]
movss xmm1, xmm0
movsd qword [rbp - 0x50], xmm1
movsd qword [rbp - 0x30], xmm1
mov eax, dword [rbp - 0x48]
mov dword [rbp - 0x28], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x30]
call rbx
movss xmm0, dword [rsp + 0x70]
movss dword [rbp + 0x3b0], xmm0
movss xmm1, dword [rsp + 0x74]
movss dword [rbp + 0x3b4], xmm1
mov r8d, dword [r13 + 0x7c]
mov eax, dword [r13 + 0x78]
cmp eax, r8d
jne 0x18004d762
lea ecx, [rax + 1]
test r8d, r8d
je 0x18004d749
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004d74e
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [r13 + 0x78]
call fcn.180034be0
mov eax, dword [r13 + 0x78]
movsxd rdx, eax
mov rcx, qword [r13 + 0x80]
mov rax, qword [rbp + 0x3b0]
mov qword [rcx + rdx*8], rax
mov r8d, dword [r13 + 0x78]
inc r8d
mov dword [r13 + 0x78], r8d
inc esi
cmp esi, 0x63
jle 0x18004d680
mov rax, qword [0x18006f068]
movups xmm0, xmmword [rax + 0x4c]
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.180020770
movss dword [rsp + 0x28], xmm14
mov dword [rsp + 0x20], 1
mov r9d, eax
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d250
mov dword [r13 + 0x78], 0
mov r8, qword [0x18006f068]
movss xmm7, dword [0x1800649d0]
xorps xmm8, xmm8
cmp byte [r8 + 0xa], 0
je 0x18004deb3
xor esi, esi
mov rbx, qword [0x18006faf8]
mov r14, qword [0x18006faf0]
mov rcx, rbx
sub rcx, r14
movabs r12, 0x2aaaaaaaaaaaaaab
mov rax, r12
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004d94c
mov r8, rbx
mov r15, rbx
xor edi, edi
nop
mov rcx, qword [0x18006faf0]
mov rax, qword [rdi + rcx]
movss xmm6, dword [rax + 0x1068]
ucomiss xmm6, xmm8
jp 0x18004d84f
je 0x18004d8fa
lea rdx, str.JammerDevice
mov rcx, qword [rdi + rcx + 8]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004d886
ucomiss xmm6, xmm8
jp 0x18004d8c0
jne 0x18004d8c0
movsxd rax, esi
lea rcx, [rax + rax*2]
lea rcx, [r14 + rcx*8]
lea rdx, [rcx + 0x18]
sub r15, rdx
mov r8, r15
jmp 0x18004d927
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm1, dword [rax + 0x198a1b8]
mov rcx, qword [0x18006faf0]
mov rax, qword [rdi + rcx]
movss xmm0, dword [rax + 0x360]
subss xmm1, dword [rdi + rcx + 0x10]
subss xmm0, xmm1
comiss xmm8, xmm0
jae 0x18004d907
mov rbx, qword [0x18006faf8]
inc esi
add rdi, 0x18
mov r8, rbx
mov r14, qword [0x18006faf0]
mov rcx, rbx
sub rcx, r14
mov rax, r12
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r15, rbx
movsxd rax, esi
cmp rax, rdx
jae 0x18004d93e
jmp 0x18004d830
movsxd rax, esi
lea rcx, [rax + rax*2]
lea rcx, [r14 + rcx*8]
jmp 0x18004d920
movsxd rax, esi
lea rcx, [rax + rax*2]
mov rax, qword [0x18006faf0]
lea rcx, [rax + rcx*8]
mov r8, qword [0x18006faf8]
lea rdx, [rcx + 0x18]
sub r8, rdx
call sub.VCRUNTIME140.dll_memmove
mov rbx, qword [0x18006faf8]
sub rbx, 0x18
mov qword [0x18006faf8], rbx
mov r15d, dword [0x18006f358]
mov r8, qword [0x18006f068]
sub rbx, qword [0x18006faf0]
mov rax, r12
imul rbx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004deb3
xor r14d, r14d
xor edi, edi
nop dword [rax]
nop word [rax + rax]
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0x1f0]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [0x18006faf0]
mov rcx, qword [rdi + rax]
movsd xmm0, qword [rcx + 0x24c]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [rcx + 0x254]
mov dword [rbp - 0x28], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x30]
call rbx
mov rsi, qword [0x18006faf0]
mov rbx, qword [rdi + rsi + 8]
lea rdx, str.SightWard
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004dc3c
mov rax, qword [rdi + rsi]
movss xmm0, dword [rax + 0x1090]
ucomiss xmm0, xmm7
jp 0x18004da1a
je 0x18004da32
movss xmm0, dword [rax + 0x360]
ucomiss xmm0, xmm8
jp 0x18004db19
jne 0x18004db19
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], bl
lea r8d, [rbx + 8]
lea rdx, [0x180064830]
lea rcx, [rsp + 0x50]
call fcn.1800091b0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.18004bae0
cmp qword [rax + 0x18], 0x10
jb 0x18004da79
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.1800511d0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004dac3
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dabe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004df93
call fcn.180056348
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18004ddbb
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004db0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004df9a
call fcn.180056348
jmp 0x18004ddbb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm0, dword [rax + 0x198a1b8]
mov rax, qword [0x18006faf0]
mov rcx, qword [rdi + rax]
movss xmm6, dword [rcx + 0x360]
subss xmm0, dword [rdi + rax + 0x10]
subss xmm6, xmm0
mov byte [rcx + 0x2f8], 1
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], bl
lea r8d, [rbx + 0xd]
lea rdx, [0x180064860]
lea rcx, [rsp + 0x50]
call fcn.1800091b0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.18004bae0
cmp qword [rax + 0x18], 0x10
jb 0x18004db94
mov rax, qword [rax]
cvtps2pd xmm2, xmm6
movq r8, xmm2
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.1800511d0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004dbe6
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dbe1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004dfa1
call fcn.180056348
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18004ddbb
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dc32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004dfa8
call fcn.180056348
jmp 0x18004ddbb
lea rdx, str.JammerDevice
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004dd42
mov rax, qword [rdi + rsi]
mov byte [rax + 0x2f8], 1
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], bl
lea r8d, [rbx + 8]
lea rdx, [0x180064850]
lea rcx, [rsp + 0x50]
call fcn.1800091b0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.18004bae0
cmp qword [rax + 0x18], 0x10
jb 0x18004dca5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.1800511d0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004dcef
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dcea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004dfaf
call fcn.180056348
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18004ddbb
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dd3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004dfb6
call fcn.180056348
jmp 0x18004ddbb
lea rdx, str.Jack_In_The_Box
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18004dd68
lea rdx, str.Noxious_Trap
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004ddbb
mov rax, qword [rdi + rsi]
mov byte [rax + 0x2f8], 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm1, dword [rax + 0x198a1b8]
mov rcx, qword [0x18006faf0]
mov rax, qword [rdi + rcx]
movss xmm0, dword [rax + 0x360]
subss xmm1, dword [rdi + rcx + 0x10]
subss xmm0, xmm1
cvtps2pd xmm2, xmm0
movq r8, xmm2
lea rdx, str._.0f
lea rcx, [rbp + 0x1f0]
call fcn.1800511d0
movaps xmm0, xmmword [0x180064e50]
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.180020770
mov r8d, eax
movss xmm0, dword [rbp - 0x50]
movss dword [rbp + 0x3b0], xmm0
movss xmm1, dword [rbp - 0x4c]
movss dword [rbp + 0x3b4], xmm1
test eax, 0xff000000
je 0x18004de77
lea rax, [rbp + 0x1f0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004de05
lea rdx, [rbp + 0x1f0]
add rdx, rcx
lea rax, [rbp + 0x1f0]
cmp rax, rdx
je 0x18004de77
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0x1f0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3b0]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
inc r14d
add rdi, 0x18
mov rcx, qword [0x18006faf8]
sub rcx, qword [0x18006faf0]
mov rax, r12
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r14d
cmp rax, rdx
jb 0x18004d980
mov r8, qword [0x18006f068]
movss xmm6, dword [0x180064a2c]
movss xmm7, dword [0x180064a50]
cmp byte [r8 + 3], 0
jne 0x18004ded5
cmp byte [r8 + 1], 0
je 0x18004ed7c
cmp dword [r8 + 0x18], 1
jne 0x18004ed7c
mov r14, qword [0x18006fbb0]
mov rsi, qword [0x18006fba8]
cmp rsi, r14
je 0x18004ed7c
mov r12, qword gs:[0x58]
movss xmm13, dword [0x180064a5c]
movss xmm11, dword [0x180064a3c]
movss xmm12, dword [0x180064a34]
movss xmm15, dword [0x180064a58]
movss xmm14, dword [0x180064a40]
nop dword [rax]
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x190], xmm0
movups xmm0, xmmword [rsi + 0x20]
movaps xmmword [rbp + 0x1b0], xmm0
movups xmm1, xmmword [rsi + 0x30]
movaps xmmword [rbp + 0x1c0], xmm1
movzx eax, byte [r8 + 1]
mov rdi, qword [rbp + 0x190]
cmp al, byte [r8 + 3]
je 0x18004e013
test al, al
je 0x18004dfd6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004df7d
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004dfbd
cmp dword [rdi + 0x3c], 0xc8
jne 0x18004dfcf
jmp 0x18004ed67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp ecx, 0xc8
jne 0x18004dfcf
cmp dword [rdi + 0x3c], 0x64
je 0x18004ed67
mov r8, qword [0x18006f068]
cmp byte [r8 + 3], 0
je 0x18004e013
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004dff0
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004e002
cmp dword [rdi + 0x3c], ecx
jne 0x18004e013
jmp 0x18004ed67
cmp ecx, 0xc8
jne 0x18004e013
cmp dword [rdi + 0x3c], ecx
je 0x18004ed67
mov ecx, 4
mov rax, qword [r12 + r15*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18006fcb4], ecx
jle 0x18004e05d
lea rcx, [0x18006fcb4]
call fcn.18005661c
cmp dword [0x18006fcb4], 0xffffffff
jne 0x18004e05d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x243080
mov qword [0x18006fcc0], rax
lea rcx, [0x18006fcb4]
call fcn.1800565bc
mov rcx, rdi
call qword [0x18006fcc0]
test al, al
je 0x18004ed67
movss xmm0, dword [rdi + 0x1068]
comiss xmm0, xmm8
jbe 0x18004ed67
cmp byte [rdi + 0x2f8], 0
je 0x18004ed67
movsd xmm0, qword [rdi + 0x24c]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [rdi + 0x254]
mov dword [rbp + 0x18], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x10]
call rbx
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
movss xmm9, dword [rbp - 0x7c]
addss xmm9, dword [0x18006499c]
mov rcx, qword [rdi + 0x3c28]
movss xmm10, dword [rbp - 0x80]
cmp dword [rcx + 0x28], 0
je 0x18004e2dc
xor r8d, r8d
mov rdx, rdi
call fcn.180050d60
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm8
jbe 0x18004e244
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rdi + 0x3c28]
call fcn.180050d60
mov rbx, qword [rdi + 0x3c28]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.180050c00
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.180050d60
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rdi + 0x3c28]
call fcn.180050d60
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
subss xmm0, xmm13
movss dword [rbp + 0x3b0], xmm0
movss dword [rbp + 0x3b4], xmm1
test eax, 0xff000000
je 0x18004e2dc
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e1e4
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004e2dc
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3b0]
mov rcx, qword [rax + 8]
jmp 0x18004e2c3
movaps xmm0, xmmword [0x180064d70]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
subss xmm0, xmm13
movss dword [rbp + 0x3b8], xmm0
movss dword [rbp + 0x3bc], xmm1
test eax, 0xff000000
je 0x18004e2dc
mov rcx, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x18006325d]
mov qword [rsp + 0x38], rdx
lea rdx, [0x18006325c]
mov qword [rsp + 0x30], rdx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x3b8]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
movaps xmm2, xmm11
mov rdx, r13
call fcn.180043450
mov rcx, qword [rdi + 0x3c30]
cmp dword [rcx + 0x28], 0
je 0x18004e4cc
mov r8d, 1
mov rdx, rdi
call fcn.180050d60
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm8
jbe 0x18004e434
mov r8d, 1
mov rdx, rdi
mov rcx, qword [rdi + 0x3c30]
call fcn.180050d60
mov rbx, qword [rdi + 0x3c30]
mov r8d, 1
mov rdx, rdi
mov rcx, rbx
call fcn.180050c00
mov r8d, 1
mov rdx, rdi
mov rcx, rbx
call fcn.180050d60
mov r8d, 1
mov rdx, rdi
mov rcx, qword [rdi + 0x3c30]
call fcn.180050d60
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
subss xmm0, xmm12
movss dword [rbp + 0x3c0], xmm0
movss dword [rbp + 0x3c4], xmm1
test eax, 0xff000000
je 0x18004e4cc
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e3d4
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004e4cc
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3c0]
mov rcx, qword [rax + 8]
jmp 0x18004e4b3
movaps xmm0, xmmword [0x180064d70]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
subss xmm0, xmm12
movss dword [rbp + 0x3c8], xmm0
movss dword [rbp + 0x3cc], xmm1
test eax, 0xff000000
je 0x18004e4cc
mov rcx, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x180063275]
mov qword [rsp + 0x38], rdx
lea rdx, [0x180063274]
mov qword [rsp + 0x30], rdx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x3c8]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
movaps xmm2, xmm11
mov rdx, r13
call fcn.180043450
mov rcx, qword [rdi + 0x3c38]
cmp dword [rcx + 0x28], 0
je 0x18004e6b0
mov r8d, 2
mov rdx, rdi
call fcn.180050d60
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm8
jbe 0x18004e61e
mov r8d, 2
mov rdx, rdi
mov rcx, qword [rdi + 0x3c38]
call fcn.180050d60
mov rbx, qword [rdi + 0x3c38]
mov r8d, 2
mov rdx, rdi
mov rcx, rbx
call fcn.180050c00
mov r8d, 2
mov rdx, rdi
mov rcx, rbx
call fcn.180050d60
mov r8d, 2
mov rdx, rdi
mov rcx, qword [rdi + 0x3c38]
call fcn.180050d60
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
addss xmm0, dword [0x180064a28]
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm1
test eax, 0xff000000
je 0x18004e6b0
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e5c1
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004e6b0
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x50]
mov rcx, qword [rax + 8]
jmp 0x18004e697
movaps xmm0, xmmword [0x180064d70]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
addss xmm0, dword [0x180064a28]
movss dword [rbp + 0x58], xmm0
movss dword [rbp + 0x5c], xmm1
test eax, 0xff000000
je 0x18004e6b0
mov rcx, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x18006322d]
mov qword [rsp + 0x38], rdx
lea rdx, [0x18006322c]
mov qword [rsp + 0x30], rdx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x58]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
movaps xmm2, xmm11
mov rdx, r13
call fcn.180043450
mov rcx, qword [rdi + 0x3c40]
cmp dword [rcx + 0x28], 0
je 0x18004e88c
mov r8d, 3
mov rdx, rdi
call fcn.180050d60
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
comiss xmm0, xmm8
jbe 0x18004e7fe
mov r8d, 3
mov rdx, rdi
mov rcx, qword [rdi + 0x3c40]
call fcn.180050d60
mov rbx, qword [rdi + 0x3c40]
mov r8d, 3
mov rdx, rdi
mov rcx, rbx
call fcn.180050c00
mov r8d, 3
mov rdx, rdi
mov rcx, rbx
call fcn.180050d60
mov r8d, 3
mov rdx, rdi
mov rcx, qword [rdi + 0x3c40]
call fcn.180050d60
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
addss xmm0, xmm7
movss dword [rbp + 0x60], xmm0
movss dword [rbp + 0x64], xmm1
test eax, 0xff000000
je 0x18004e88c
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004e7a1
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004e88c
mov rax, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x60]
mov rcx, qword [rax + 8]
jmp 0x18004e873
movaps xmm0, xmmword [0x180064d70]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movaps xmm1, xmm9
subss xmm1, xmm6
movaps xmm0, xmm10
addss xmm0, xmm7
movss dword [rbp + 0x68], xmm0
movss dword [rbp + 0x6c], xmm1
test eax, 0xff000000
je 0x18004e88c
mov rcx, qword [r13 + 0x38]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x180063261]
mov qword [rsp + 0x38], rdx
lea rdx, [0x180063260]
mov qword [rsp + 0x30], rdx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x68]
mov rcx, qword [rcx + 8]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
movaps xmm2, xmm11
mov rdx, r13
call fcn.180043450
mov dword [rbp + 0x70], 0x3f800000
mov dword [rbp + 0x74], 0x3f800000
mov qword [rbp + 0x78], 0
movaps xmm6, xmm9
subss xmm6, xmm15
movaps xmm0, xmm6
addss xmm0, xmm11
movaps xmm8, xmm10
addss xmm8, dword [0x180064a70]
movaps xmm7, xmm8
addss xmm7, xmm11
movss dword [rbp + 0x80], xmm7
movss dword [rbp + 0x84], xmm0
movss dword [rbp + 0x88], xmm8
movss dword [rbp + 0x8c], xmm6
mov rdx, qword [rbp + 0x1b8]
cmp rdx, qword [r13 + 0x98]
setne bl
je 0x18004e905
mov rcx, r13
call fcn.18003cf60
mov edx, 6
lea r8d, [rdx - 2]
mov rcx, r13
call fcn.18003cfe0
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x78]
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x88]
mov rcx, r13
call fcn.18003d100
test bl, bl
je 0x18004e970
movsxd rcx, dword [r13 + 0x68]
lea eax, [rcx - 1]
mov dword [r13 + 0x68], eax
test eax, eax
jne 0x18004e958
xor eax, eax
jmp 0x18004e961
mov rax, qword [r13 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r13 + 0x98], rax
mov rcx, r13
call fcn.18003cd10
mov r8d, 4
mov rdx, rdi
mov rcx, qword [rdi + 0x3c48]
call fcn.180050d60
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
ucomiss xmm0, dword [0x18006495c]
jp 0x18004e999
je 0x18004eb00
movaps xmm0, xmmword [0x180064ca0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movaps xmm1, xmm6
addss xmm1, xmm14
movaps xmm0, xmm8
addss xmm0, xmm14
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm1
movss dword [rbp + 0x30], xmm8
movss dword [rbp + 0x34], xmm6
mov dword [rsp + 0x28], 0
xorps xmm6, xmm6
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0x30]
mov rcx, r13
call fcn.18003f7f0
mov r8d, 4
mov rdx, rdi
mov rcx, qword [rdi + 0x3c48]
call fcn.180050d60
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e50]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movaps xmm1, xmm9
subss xmm1, dword [0x180064a50]
movaps xmm0, xmm10
addss xmm0, dword [0x180064a74]
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x44], xmm1
test eax, 0xff000000
je 0x18004eb00
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004ea90
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004eb00
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x40]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
mov dword [rbp + 0x90], 0x3f800000
mov dword [rbp + 0x94], 0x3f800000
mov qword [rbp], 0
movaps xmm6, xmm9
subss xmm6, xmm12
movaps xmm0, xmm6
addss xmm0, xmm11
movss dword [rbp - 0x10], xmm7
movss dword [rbp - 0xc], xmm0
movss dword [rbp - 0x60], xmm8
movss dword [rbp - 0x5c], xmm6
mov rdx, qword [rbp + 0x1c0]
cmp rdx, qword [r13 + 0x98]
setne bl
je 0x18004eb5d
mov rcx, r13
call fcn.18003cf60
mov edx, 6
lea r8d, [rdx - 2]
mov rcx, r13
call fcn.18003cfe0
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
lea r8, [rbp - 0x10]
lea rdx, [rbp - 0x60]
mov rcx, r13
call fcn.18003d100
test bl, bl
je 0x18004ebc5
movsxd rcx, dword [r13 + 0x68]
lea eax, [rcx - 1]
mov dword [r13 + 0x68], eax
test eax, eax
jne 0x18004ebad
xor eax, eax
jmp 0x18004ebb6
mov rax, qword [r13 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r13 + 0x98], rax
mov rcx, r13
call fcn.18003cd10
mov r8d, 5
mov rdx, rdi
mov rcx, qword [rdi + 0x3c50]
call fcn.180050d60
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
ucomiss xmm0, dword [0x18006495c]
jp 0x18004ebee
je 0x18004ed53
movaps xmm0, xmmword [0x180064ca0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movaps xmm1, xmm6
addss xmm1, xmm14
movaps xmm0, xmm8
addss xmm0, xmm14
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
movss dword [rbp - 0x50], xmm8
movss dword [rbp - 0x4c], xmm6
mov dword [rsp + 0x28], 0
xorps xmm8, xmm8
movss dword [rsp + 0x20], xmm8
mov r9d, eax
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x50]
mov rcx, r13
call fcn.18003f7f0
mov r8d, 5
mov rdx, rdi
mov rcx, qword [rdi + 0x3c50]
call fcn.180050d60
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
lea r8, str._.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e50]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movss xmm6, dword [0x180064a2c]
subss xmm9, xmm6
addss xmm10, dword [0x180064a74]
movss dword [rbp - 0x30], xmm10
movss dword [rbp - 0x2c], xmm9
test eax, 0xff000000
je 0x18004ed5f
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004ece0
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004ed5f
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x30]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
jmp 0x18004ed5f
movss xmm6, dword [0x180064a2c]
xorps xmm8, xmm8
movss xmm7, dword [0x180064a50]
add rsi, 0x58
cmp rsi, r14
je 0x18004ed7c
mov r8, qword [0x18006f068]
jmp 0x18004df30
mov ecx, dword [0x18006f358]
mov rax, qword gs:[0x58]
mov r12d, 4
mov qword [rbp + 0x3c8], r12
mov rdx, qword [rax + rcx*8]
mov qword [rbp + 0x3c0], rdx
mov eax, dword [rdx + r12]
cmp dword [0x18006fcac], eax
jle 0x18004eddc
lea rcx, [0x18006fcac]
call fcn.18005661c
cmp dword [0x18006fcac], 0xffffffff
jne 0x18004eddc
lea rcx, [0x180059240]
call fcn.180056328
lea rcx, [0x18006fcac]
call fcn.1800565bc
mov rax, qword [0x18006fbf8]
mov qword [0x18006fc00], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x197d318]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006fc00]
test edi, edi
je 0x18004ee62
nop dword [rax]
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x3b0], rax
cmp rdx, qword [0x18006fc08]
je 0x18004ee42
mov qword [rdx], rax
mov rdx, qword [0x18006fc00]
add rdx, 8
mov qword [0x18006fc00], rdx
jmp 0x18004ee5c
lea r8, [rbp + 0x3b0]
lea rcx, [0x18006fbf8]
call fcn.180014a10
mov rdx, qword [0x18006fc00]
inc ebx
cmp ebx, edi
jb 0x18004ee10
xor r15d, r15d
mov r8, qword [0x18006fbf8]
sub rdx, r8
sar rdx, 3
test rdx, rdx
je 0x18004f4ef
xor r14d, r14d
movss xmm12, dword [0x180064a80]
movss xmm11, dword [0x180064a64]
movss xmm13, dword [0x180064a2c]
movss xmm14, dword [0x180064a50]
movss xmm15, dword [0x18006499c]
mov rdi, qword [rbp + 0x3c0]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [r14 + r8]
mov eax, dword [rdi + r12]
cmp dword [0x18006fcb4], eax
jle 0x18004ef06
lea rcx, [0x18006fcb4]
call fcn.18005661c
cmp dword [0x18006fcb4], 0xffffffff
jne 0x18004ef06
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x243080
mov qword [0x18006fcc0], rax
lea rcx, [0x18006fcb4]
call fcn.1800565bc
mov rcx, rbx
call qword [0x18006fcc0]
test al, al
je 0x18004f4c3
movss xmm0, dword [rbx + 0x1068]
comiss xmm0, xmm8
jbe 0x18004f4c3
mov r8, qword [0x18006fbf8]
mov rbx, qword [r14 + r8]
cmp byte [rbx + 0x2f8], 0
je 0x18004f4ce
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004ef54
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004ef65
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004ef75
cmp ecx, 0xc8
jne 0x18004f194
cmp dword [rbx + 0x3c], 0x64
jne 0x18004f194
mov rax, qword [0x18006f068]
cmp byte [rax + 8], 0
je 0x18004f194
mov rax, qword [0x18006fbf8]
mov rbx, qword [r14 + rax]
movsd xmm0, qword [rbx + 0x24c]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rbx + 0x254]
mov dword [rsp + 0x78], eax
movss xmm6, dword [rbx + 0x17d4]
mov eax, dword [rdi + r12]
cmp dword [0x18006fcc8], eax
jle 0x18004eff9
lea rcx, [0x18006fcc8]
call fcn.18005661c
cmp dword [0x18006fcc8], 0xffffffff
jne 0x18004eff9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x20a870
mov qword [0x18006fcb8], rax
lea rcx, [0x18006fcc8]
call fcn.1800565bc
mov rcx, rbx
call qword [0x18006fcb8]
movaps xmm8, xmm0
addss xmm8, xmm6
xor esi, esi
movss xmm1, dword [rsp + 0x74]
movss dword [rbp - 0x5c], xmm1
movss xmm9, dword [rsp + 0x78]
movss xmm10, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm7, esi
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [0x180064a04]
mulss xmm7, dword [0x1800649dc]
divss xmm7, dword [0x180064a78]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, xmm9
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm8
addss xmm0, xmm10
movss dword [rbp - 0x58], xmm6
movsd xmm1, qword [rbp - 0x60]
movss xmm1, xmm0
movsd qword [rbp - 0x60], xmm1
movsd qword [rbp - 0x80], xmm1
mov eax, dword [rbp - 0x58]
mov dword [rbp - 0x78], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x80]
call rbx
movss xmm0, dword [rbp + 0x10]
movss dword [rbp + 0x3b0], xmm0
movss xmm1, dword [rbp + 0x14]
movss dword [rbp + 0x3b4], xmm1
mov r8d, dword [r13 + 0x7c]
mov eax, dword [r13 + 0x78]
cmp eax, r8d
jne 0x18004f118
lea ecx, [rax + 1]
test r8d, r8d
je 0x18004f0ff
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004f104
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [r13 + 0x78]
call fcn.180034be0
mov eax, dword [r13 + 0x78]
movsxd rdx, eax
mov rcx, qword [r13 + 0x80]
mov rax, qword [rbp + 0x3b0]
mov qword [rcx + rdx*8], rax
mov r8d, dword [r13 + 0x78]
inc r8d
mov dword [r13 + 0x78], r8d
inc esi
cmp esi, 0x63
jle 0x18004f030
mov rax, qword [0x18006f068]
movups xmm0, xmmword [rax + 0x5c]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
movss xmm0, dword [0x1800649e0]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, eax
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d250
mov dword [r13 + 0x78], 0
mov rdi, qword [rbp + 0x3c0]
mov rax, qword [0x18006fbf8]
mov rcx, qword [r14 + rax]
movsd xmm0, qword [rcx + 0x24c]
movsd qword [rbp - 0x10], xmm0
mov eax, dword [rcx + 0x254]
mov dword [rbp - 8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp]
lea rdx, [rbp - 0x10]
call rbx
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
movss xmm6, dword [rbp + 4]
addss xmm6, xmm15
mov rax, qword [0x18006f068]
cmp byte [rax + 4], 0
je 0x18004f4c3
mov rax, qword [0x18006fbf8]
mov rbx, qword [r14 + rax]
movss xmm3, dword [rbx + 0x1068]
cvtps2pd xmm3, xmm3
movq r9, xmm3
lea r8, str.:_.0f
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e50]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movaps xmm0, xmm6
subss xmm0, xmm14
movss xmm8, dword [rbp]
movaps xmm7, xmm8
subss xmm7, xmm12
movss dword [rbp + 0x3b8], xmm7
movss dword [rbp + 0x3bc], xmm0
test eax, 0xff000000
je 0x18004f31a
lea rcx, [rbp + 0xc0]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x18004f2a0
lea rcx, [rbp + 0xc0]
add rcx, rax
lea rax, [rbp + 0xc0]
xorps xmm9, xmm9
cmp rax, rcx
je 0x18004f31e
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x3b8]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
jmp 0x18004f31e
xorps xmm9, xmm9
movss xmm3, dword [rbx + 0x338]
cvtps2pd xmm3, xmm3
movq r9, xmm3
lea r8, [0x180064890]
mov edx, 0xc8
lea rcx, [rbp + 0xc0]
call fcn.18004ba80
movaps xmm0, xmmword [0x180064e50]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
subss xmm6, xmm13
movss dword [rbp - 0x30], xmm7
movss dword [rbp - 0x2c], xmm6
test eax, 0xff000000
je 0x18004f3f4
lea rax, [rbp + 0xc0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x18004f383
lea rdx, [rbp + 0xc0]
add rdx, rcx
lea rax, [rbp + 0xc0]
cmp rax, rdx
je 0x18004f3f4
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x30]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
mov rax, qword [0x18006f068]
cmp byte [rax + 1], 1
je 0x18004f4c3
cmp byte [rax + 3], 1
je 0x18004f4c3
lea r8, [rbx + 0x4390]
cmp dword [r8 + 0x18], 0x10
jbe 0x18004f420
mov r8, qword [r8]
movaps xmm0, xmmword [0x180064d70]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r9d, eax
subss xmm8, xmm11
movss dword [rbp - 0x50], xmm8
movss dword [rbp - 0x4c], xmm6
test eax, 0xff000000
je 0x18004f4c3
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x18004f460
add rcx, r8
cmp r8, rcx
je 0x18004f4c3
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
xorps xmm8, xmm8
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x50]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
jmp 0x18004f4c7
xorps xmm8, xmm8
mov r8, qword [0x18006fbf8]
inc r15d
add r14, 8
mov rcx, qword [0x18006fc00]
sub rcx, r8
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x18004eec0
mov r15, qword [rbp + 0x3c0]
mov eax, dword [r15 + r12]
cmp dword [0x18006fcb0], eax
jle 0x18004f52f
lea rcx, [0x18006fcb0]
call fcn.18005661c
cmp dword [0x18006fcb0], 0xffffffff
jne 0x18004f52f
lea rcx, [0x1800591d0]
call fcn.180056328
lea rcx, [0x18006fcb0]
call fcn.1800565bc
mov rax, qword [0x18006fbe0]
mov qword [0x18006fbe8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x19838e8]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006fbe8]
test edi, edi
je 0x18004f5b2
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x3b0], rax
cmp rdx, qword [0x18006fbf0]
je 0x18004f592
mov qword [rdx], rax
mov rdx, qword [0x18006fbe8]
add rdx, 8
mov qword [0x18006fbe8], rdx
jmp 0x18004f5ac
lea r8, [rbp + 0x3b0]
lea rcx, [0x18006fbe0]
call fcn.180014a10
mov rdx, qword [0x18006fbe8]
inc ebx
cmp ebx, edi
jb 0x18004f560
xor r12d, r12d
mov r8, qword [0x18006fbe0]
sub rdx, r8
sar rdx, 3
test rdx, rdx
je 0x18004f977
xor r14d, r14d
movsd xmm11, qword [0x1800649e8]
movss xmm12, dword [0x180064ac0]
movss xmm13, dword [0x180064ab4]
movss xmm10, dword [0x180064ab0]
mov rbx, qword [r14 + r8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004f60a
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004f61b
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004f62b
cmp ecx, 0xc8
jne 0x18004f944
cmp dword [rbx + 0x3c], 0x64
jne 0x18004f944
mov rax, qword [0x18006f068]
cmp byte [rax + 9], 0
je 0x18004f944
mov r8, qword [0x18006fbe0]
mov rax, qword [r14 + r8]
movss xmm0, dword [rax + 0x1068]
comiss xmm0, xmm8
jbe 0x18004f94b
movsd xmm0, qword [rax + 0x24c]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [rax + 0x254]
mov dword [rbp - 0x48], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004f688
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x24c]
mov eax, dword [rax + 0x254]
mov dword [rbp - 0x78], eax
movsd qword [rbp - 0x80], xmm0
subss xmm0, dword [rbp - 0x50]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm1, dword [rbp - 0x78]
subss xmm1, dword [rbp - 0x48]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x18004f6dc
sqrtsd xmm0, xmm0
jmp 0x18004f6e1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm12, xmm0
jb 0x18004f944
mov rax, qword [0x18006fbe0]
mov rcx, qword [r14 + rax]
movsd xmm0, qword [rcx + 0x24c]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rcx + 0x254]
mov dword [rsp + 0x78], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004f725
mov rax, qword [rax]
movsd xmm0, qword [rax + 0x24c]
mov eax, dword [rax + 0x254]
mov dword [rbp + 0x18], eax
movsd qword [rbp + 0x10], xmm0
subss xmm0, dword [rsp + 0x70]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm1, dword [rbp + 0x18]
subss xmm1, dword [rsp + 0x78]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x18004f77b
sqrtsd xmm0, xmm0
jmp 0x18004f780
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm13, xmm0
jb 0x18004f79d
movaps xmm0, xmmword [0x180064d30]
movups xmmword [rsp + 0x50], xmm0
lea r15, [rsp + 0x50]
jmp 0x18004f7b2
movaps xmm0, xmmword [0x180064d60]
movups xmmword [rbp + 0x90], xmm0
lea r15, [rbp + 0x90]
mov rax, qword [0x18006fbe0]
mov rcx, qword [r14 + rax]
movsd xmm1, qword [rcx + 0x24c]
mov eax, dword [rcx + 0x254]
mov dword [rbp - 0x58], eax
xor esi, esi
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x60], xmm1
movss dword [rbp - 0x2c], xmm0
movss xmm8, dword [rbp - 0x58]
movss xmm9, dword [rbp - 0x60]
nop dword [rax]
movd xmm7, esi
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [0x180064a04]
mulss xmm7, dword [0x1800649dc]
divss xmm7, dword [0x180064a78]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
mulss xmm6, xmm10
addss xmm6, xmm8
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
mulss xmm0, xmm10
addss xmm0, xmm9
movss dword [rbp - 0x28], xmm6
movsd xmm1, qword [rbp - 0x30]
movss xmm1, xmm0
movsd qword [rbp - 0x30], xmm1
movsd qword [rbp - 0x10], xmm1
mov eax, dword [rbp - 0x28]
mov dword [rbp - 8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp]
lea rdx, [rbp - 0x10]
call rbx
movss xmm0, dword [rbp]
movss dword [rbp + 0x3b0], xmm0
movss xmm1, dword [rbp + 4]
movss dword [rbp + 0x3b4], xmm1
mov r8d, dword [r13 + 0x7c]
mov eax, dword [r13 + 0x78]
cmp eax, r8d
jne 0x18004f8d8
lea ecx, [rax + 1]
test r8d, r8d
je 0x18004f8bf
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004f8c4
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [r13 + 0x78]
call fcn.180034be0
mov eax, dword [r13 + 0x78]
movsxd rdx, eax
mov rcx, qword [r13 + 0x80]
mov rax, qword [rbp + 0x3b0]
mov qword [rcx + rdx*8], rax
mov r8d, dword [r13 + 0x78]
inc r8d
mov dword [r13 + 0x78], r8d
inc esi
cmp esi, 0x63
jle 0x18004f7f0
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x40]
call fcn.180020770
movss xmm0, dword [0x1800649e0]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, eax
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d250
mov dword [r13 + 0x78], 0
mov r8, qword [0x18006fbe0]
inc r12d
add r14, 8
mov rcx, qword [0x18006fbe8]
sub rcx, r8
sar rcx, 3
movsxd rax, r12d
cmp rax, rcx
xorps xmm8, xmm8
jb 0x18004f5f3
mov r15, qword [rbp + 0x3c0]
mov r14, qword [rbp + 0x3c8]
mov eax, dword [r15 + r14]
cmp dword [0x18006fca8], eax
jle 0x18004f9b7
lea rcx, [0x18006fca8]
call fcn.18005661c
cmp dword [0x18006fca8], 0xffffffff
jne 0x18004f9b7
lea rcx, [0x180059160]
call fcn.180056328
lea rcx, [0x18006fca8]
call fcn.1800565bc
mov rax, qword [0x18006fbc8]
mov qword [0x18006fbd0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980268]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor r12d, r12d
mov ebx, r12d
mov rdx, qword [0x18006fbd0]
test edi, edi
je 0x18004fa42
nop dword [rax]
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x3b0], rax
cmp rdx, qword [0x18006fbd8]
je 0x18004fa22
mov qword [rdx], rax
mov rdx, qword [0x18006fbd0]
add rdx, 8
mov qword [0x18006fbd0], rdx
jmp 0x18004fa3c
lea r8, [rbp + 0x3b0]
lea rcx, [0x18006fbc8]
call fcn.180014a10
mov rdx, qword [0x18006fbd0]
inc ebx
cmp ebx, edi
jb 0x18004f9f0
mov edi, r12d
mov dword [rbp + 0x3b0], r12d
sub rdx, qword [0x18006fbc8]
sar rdx, 3
test rdx, rdx
je 0x18005043c
movabs rsi, 0xcbf29ce484222325
movss xmm7, dword [0x180064a68]
movss xmm8, dword [0x180064a44]
movss xmm9, dword [0x180064a4c]
movss xmm10, dword [0x180064a54]
nop dword [rax]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004faae
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004fabf
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004facf
cmp ecx, 0xc8
jne 0x18004fd43
cmp dword [rbx + 0x3c], 0x64
jne 0x18004fd43
mov rax, qword [0x18006f068]
cmp byte [rax + 5], 0
je 0x18004fd43
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
je 0x18004faf9
mov rax, qword [rax]
movss xmm6, dword [rax + 0x16e8]
addss xmm6, dword [rax + 0x178c]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
mov eax, dword [r15 + r14]
cmp dword [0x18006fcb4], eax
jle 0x18004fb56
lea rcx, [0x18006fcb4]
call fcn.18005661c
cmp dword [0x18006fcb4], 0xffffffff
jne 0x18004fb56
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x243080
mov qword [0x18006fcc0], rax
lea rcx, [0x18006fcb4]
call fcn.1800565bc
mov rcx, rbx
call qword [0x18006fcc0]
xorps xmm11, xmm11
test al, al
je 0x18004fcd2
movss xmm0, dword [rbx + 0x1068]
comiss xmm0, xmm11
jbe 0x18004fcd2
mov rax, qword [0x18006fbc8]
mov rcx, qword [rax + r12*8]
comiss xmm6, dword [rcx + 0x1068]
jb 0x18004fcd2
movss xmm0, dword [rcx + 0x178c]
comiss xmm0, dword [0x180064a28]
jbe 0x18004fcd2
movsd xmm0, qword [rcx + 0x24c]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [rcx + 0x254]
mov dword [rbp - 0x78], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x80]
call rbx
mov rbx, qword [0x18006f9d0]
test rbx, rbx
je 0x18004fcd2
mov dword [rbp - 0x30], 0x3f800000
mov dword [rbp - 0x2c], 0x3f800000
mov qword [rbp - 0x50], 0
movss xmm3, dword [rbp + 0x14]
subss xmm3, xmm7
movaps xmm2, xmm3
addss xmm2, xmm8
movss xmm1, dword [rbp + 0x10]
subss xmm1, xmm9
movaps xmm0, xmm1
addss xmm0, xmm10
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm2
movss dword [rbp - 0x60], xmm1
movss dword [rbp - 0x5c], xmm3
mov rdi, qword [r13 + 0x98]
cmp rbx, rdi
je 0x18004fc65
mov rdx, rbx
mov rcx, r13
call fcn.18003cf60
mov edx, 6
lea r8d, [rdx - 2]
mov rcx, r13
call fcn.18003cfe0
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x60]
mov rcx, r13
call fcn.18003d100
cmp rbx, rdi
je 0x18004fccc
movsxd rcx, dword [r13 + 0x68]
lea eax, [rcx - 1]
mov dword [r13 + 0x68], eax
test eax, eax
jne 0x18004fcb4
xor eax, eax
jmp 0x18004fcbd
mov rax, qword [r13 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r13 + 0x98], rax
mov rcx, r13
call fcn.18003cd10
mov edi, dword [rbp + 0x3b0]
mov rax, qword [0x18006f068]
movabs rbx, 0x100000001b3
cmp byte [rax + 0x14], 0
je 0x18004fe16
mov rax, qword [0x18006fbc8]
mov r9, qword [rax + r12*8]
mov rdx, qword [r9 + 0x4140]
mov r8, rsi
nop dword [rax]
nop word [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor r8, rcx
imul r8, rbx
test cl, cl
jne 0x18004fd10
mov rdx, qword [0x18006fb60]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x18004fd55
cmp qword [rax + 0x20], r8
jge 0x18004fd49
mov rax, qword [rax + 0x10]
jmp 0x18004fd4f
xorps xmm11, xmm11
jmp 0x18004fcd2
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18004fd37
cmp byte [rcx + 0x19], 0
jne 0x18004fe16
cmp r8, qword [rcx + 0x20]
jl 0x18004fe16
cmp rcx, rdx
je 0x18004fe16
mov rcx, qword [0x18006fb30]
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x18004fd9b
cmp qword [rax + 0x20], r9
jae 0x18004fd8f
mov rax, qword [rax + 0x10]
jmp 0x18004fd95
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18004fd83
cmp byte [rcx + 0x19], 0
jne 0x18004fdab
cmp r9, qword [rcx + 0x20]
jb 0x18004fdab
mov al, 1
jmp 0x18004fdad
xor al, al
test al, al
jne 0x18004fe16
mov qword [rsp + 0x50], r8
movsd xmm1, qword [r9 + 0x24c]
mov eax, dword [r9 + 0x254]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], 0
mov qword [rbp + 0x90], r9
movups xmm0, xmmword [rsp + 0x50]
unpcklpd xmm0, xmm1
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rbp + 0x98], xmm0
movsd xmm0, qword [rsp + 0x60]
movsd qword [rbp + 0xa8], xmm0
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0xb0]
lea rcx, [0x18006fb30]
call fcn.180051230
mov rax, qword [0x18006f068]
cmp byte [rax + 0x13], 0
je 0x180050410
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x19a16b0
jne 0x180050221
xor r14d, r14d
xor esi, esi
xor r9d, r9d
lea r8, [rbp + 0x3b8]
xor edx, edx
lea rcx, [0x18006fc10]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x1800504b1
cmp dword [rbp + 0x3b8], 0
je 0x18004fef6
test r14, r14
je 0x18004fedc
mov rax, qword [0x18006f068]
cmp dword [rax + 0x28], 0
jbe 0x18004fedc
mov r9, qword [r14 + 0x4140]
movabs r8, 0xcbf29ce484222325
movsx rdx, byte [r9]
lea r9, [r9 + 1]
xor r8, rdx
imul r8, rbx
test dl, dl
jne 0x18004fe91
mov qword [rbp], r8
lea rdx, [rbp]
mov rcx, qword [0x18006f070]
call fcn.180017a60
mov rcx, qword [0x18006f068]
mov edx, dword [rcx + 0x28]
dec edx
lea rdx, [rdx + rdx*2]
shl rdx, 4
add rdx, qword [rax]
mov r8d, dword [rdx + 0x28]
mov rcx, r14
call fcn.180055d20
nop
xor r8d, r8d
xor edx, edx
lea rcx, [0x18006fc10]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x1800504b1
mov rcx, qword [r14 + 0x4130]
sub rcx, qword [r14 + 0x4128]
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movabs r9, 0x100000001b3
je 0x18004ffb3
mov r8, qword [r14 + 0x4140]
movabs rdx, 0xcbf29ce484222325
movsx rcx, byte [r8]
lea r8, [r8 + 1]
xor rdx, rcx
imul rdx, r9
test cl, cl
jne 0x18004ff40
movabs rax, 0xf984545cfa78101f
cmp rdx, rax
je 0x1800503ff
movabs rax, 0x2d0a42b1a4f18a79
cmp rdx, rax
je 0x1800503ff
mov rax, qword [r14 + 0x4128]
mov edx, dword [r14 + 0x4160]
cmp dword [rax + 0x20], edx
je 0x18004ffb3
mov dword [rax + 0x20], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4050
mov dl, 1
lea rcx, [r14 + 0x4128]
call rax
nop
movabs r9, 0x100000001b3
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
mov r8, qword [rbx + 0x4140]
movabs rdi, 0xcbf29ce484222325
nop
movsx rdx, byte [r8]
lea r8, [r8 + 1]
xor rdi, rdx
imul rdi, r9
test dl, dl
jne 0x18004ffd0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x20d910
mov rcx, rbx
call rax
mov r15, rax
test rax, rax
je 0x18005035a
mov rcx, qword [0x18006f068]
cmp byte [rcx + 0x15], 0
je 0x18005013d
movabs rax, 0xdccb83f12e64ce0
cmp rdi, rax
je 0x180050035
movabs rax, 0x80dccc539a84ddb5
cmp rdi, rax
jne 0x18005013d
mov rax, qword [0x18006fbc8]
mov rcx, qword [rax + r12*8]
movsd xmm0, qword [rcx + 0x24c]
movsd qword [rbp + 0x40], xmm0
mov eax, dword [rcx + 0x254]
mov dword [rbp + 0x48], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rbx, [rax + 0xf3eb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, qword [rax + 0x1980228]
add rcx, 0x270
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x40]
call rbx
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r8d, eax
movss xmm0, dword [rbp + 0x30]
movss dword [rbp - 0x10], xmm0
movss xmm1, dword [rbp + 0x34]
movss dword [rbp - 0xc], xmm1
lea rdx, str.Timo
movabs rax, 0xdccb83f12e64ce0
cmp rdi, rax
lea rax, str.Clown
cmove rdx, rax
test r8d, 0xff000000
je 0x18005013d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1800500e1
add rcx, rdx
cmp rdx, rcx
je 0x18005013d
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x10]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
movabs rax, 0x37d1bfa7d195ebf9
cmp rdi, rax
je 0x180050258
movabs rax, 0x92fe97d6caa88c20
cmp rdi, rax
je 0x180050258
movabs rax, 0xa854d43ddb55ddcc
cmp rdi, rax
je 0x180050258
movabs rax, 0xb8f3ad4931029355
cmp rdi, rax
je 0x180050258
movabs rax, 0xaedcd71796ade290
cmp rdi, rax
movabs rax, 0xdb76082138fdee7f
je 0x180050262
cmp rdi, rax
je 0x180050262
movabs rax, 0xf17870527758213f
cmp rdi, rax
je 0x1800503f2
movabs rax, 0x8499db0ed7bb81cf
cmp rdi, rax
je 0x1800503f2
mov edx, dword [r15 + 0x4160]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x1800503f2
cmp dword [rbx + 0x4160], edx
je 0x1800503f2
mov dword [rbx + 0x4160], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4050
mov dl, 1
lea rcx, [rbx + 0x4128]
call rax
nop
jmp 0x1800503f2
mov r14, qword [rax]
test r14, r14
je 0x18004fe3e
mov rdx, qword [r14 + 0x4140]
nop dword [rax]
nop dword [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor rsi, rcx
imul rsi, rbx
test cl, cl
jne 0x180050240
jmp 0x18004fe40
movabs rax, 0xdb76082138fdee7f
test r14, r14
je 0x180050270
cmp r15, r14
jne 0x1800503f2
cmp rdi, rax
jne 0x18005030b
movabs rax, 0x222b948fbf568318
cmp rsi, rax
mov rax, qword [0x18006fbc8]
jne 0x1800502d1
mov r8d, dword [r15 + 0x4160]
mov rcx, qword [rax + r12*8]
cmp r8d, 0xffffffff
je 0x1800503f2
add rcx, 0x4128
cmp dword [rcx + 0x38], r8d
je 0x1800503f2
mov dword [rcx + 0x38], r8d
mov rax, qword [rcx]
mov qword [rcx + 8], rax
lea rdx, str.Yone
call fcn.18004a750
jmp 0x1800503f2
mov rbx, qword [rax + r12*8]
cmp dword [rbx + 0x4160], 0
je 0x1800503f2
mov dword [rbx + 0x4160], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4050
mov dl, 1
lea rcx, [rbx + 0x4128]
call rax
nop
jmp 0x1800503f2
mov rax, qword [0x18006f068]
mov edx, dword [rax + 0x30]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x1800503f2
cmp dword [rbx + 0x4160], edx
je 0x1800503f2
mov dword [rbx + 0x4160], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4050
mov dl, 1
lea rcx, [rbx + 0x4128]
call rax
nop
jmp 0x1800503f2
movabs rax, 0x1ecf7680ae6d72bd
cmp rdi, rax
jne 0x18005037a
movabs rax, 0xfca7b000ade2abcb
cmp rsi, rax
je 0x1800503b3
jmp 0x1800503f2
movabs rax, 0xfcb981acde90c192
cmp rdi, rax
jne 0x180050395
movabs rax, 0x6972baf895e90386
jmp 0x180050373
movabs rax, 0xfc61c19e80fc9d68
cmp rdi, rax
jne 0x1800503f2
movabs rax, 0xf01bf70c1ff22b66
cmp rsi, rax
jne 0x1800503f2
mov edx, dword [r14 + 0x4160]
mov rax, qword [0x18006fbc8]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x1800503f2
cmp dword [rbx + 0x4160], edx
je 0x1800503f2
mov dword [rbx + 0x4160], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add rax, 0x1a4050
mov dl, 1
lea rcx, [rbx + 0x4128]
call rax
nop
mov r15, qword [rbp + 0x3c0]
mov edi, dword [rbp + 0x3b0]
mov r14, qword [rbp + 0x3c8]
movabs rsi, 0xcbf29ce484222325
inc edi
mov dword [rbp + 0x3b0], edi
inc r12
mov rcx, qword [0x18006fbd0]
sub rcx, qword [0x18006fbc8]
sar rcx, 3
movsxd rax, edi
cmp rax, rcx
jb 0x18004fa90
xor r12d, r12d
mov rax, qword [0x18006f068]
cmp byte [rax + 0x14], 0
je 0x180050b92
mov rbx, qword [0x18006fb40]
mov rbx, qword [rbx]
movss xmm10, dword [0x180064ac8]
cmp byte [rbx + 0x19], 0
jne 0x180050739
movabs r15, 0x555555555555555
lea r14, [0x18006fb60]
movss xmm8, dword [0x180064a1c]
movss xmm9, dword [0x180064a0c]
nop dword [rax]
mov rcx, qword [0x18006fb30]
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x1800504c4
mov rdx, qword [rbx + 0x20]
cmp qword [rax + 0x20], rdx
jae 0x1800504b8
mov rax, qword [rax + 0x10]
jmp 0x1800504be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1800504a5
cmp byte [rcx + 0x19], 0
jne 0x1800504d8
mov rax, qword [rcx + 0x20]
cmp qword [rbx + 0x20], rax
jb 0x1800504d8
mov al, 1
jmp 0x1800504da
xor al, al
test al, al
jne 0x18005060d
mov rax, qword [rbx + 0x20]
mov qword [rbp - 0x50], rax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rbp - 0x48], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rbp - 0x40], eax
mov rdi, qword [rbx + 0x28]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm6, dword [rax + 0x198a1b8]
mov rsi, qword [0x18006fb60]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], r12d
mov rcx, rsi
cmp byte [rax + 0x19], 0
jne 0x18005055a
nop dword [rax]
mov qword [rsp + 0x50], rax
cmp qword [rax + 0x20], rdi
jge 0x180050546
mov dword [rsp + 0x58], r12d
mov rax, qword [rax + 0x10]
jmp 0x180050554
mov dword [rsp + 0x58], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180050530
cmp byte [rcx + 0x19], 0
jne 0x180050566
cmp rdi, qword [rcx + 0x20]
jge 0x1800505c0
cmp qword [0x18006fb68], r15
je 0x180050bec
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r12
mov ecx, 0x30
call fcn.180055f84
nop
mov qword [rax + 0x20], rdi
mov dword [rax + 0x28], r12d
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov word [rax + 0x18], 0
mov qword [rbp + 0x18], r12
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rax
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.180014d70
mov rcx, rax
addss xmm6, dword [rcx + 0x28]
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x50], rax
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rsp + 0x58], xmm0
movsd xmm1, qword [rbp - 0x40]
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm6
shufps xmm1, xmm1, 0xe1
movsd qword [rbp - 0x40], xmm1
movsd qword [rsp + 0x68], xmm1
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x30]
lea rcx, [0x18006fb50]
call fcn.180051230
jmp 0x1800506dc
movsd xmm7, qword [rbx + 0x30]
mov eax, dword [rbx + 0x38]
mov dword [rbp - 0x78], eax
movabs rax, qword [0x14198a208]
mov rcx, qword [rax + 0x240]
movss xmm6, dword [rcx + 0x6c]
movss xmm1, dword [rcx + 0x74]
movss xmm0, dword [rbp - 0x78]
divss xmm0, xmm10
divss xmm7, xmm10
mulss xmm7, dword [rcx + 0x70]
addss xmm7, dword [rcx + 0x68]
addss xmm6, xmm1
mulss xmm1, xmm0
subss xmm6, xmm1
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov edi, eax
movss dword [rbp + 0x3b0], xmm7
movss dword [rbp + 0x3b4], xmm6
test eax, 0xff000000
je 0x1800506dc
mov dword [rsp + 0x28], 0x63
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
movaps xmm2, xmm9
lea rdx, [rbp + 0x3b0]
mov rcx, r13
call fcn.18003ec00
movss xmm0, dword [0x1800649e0]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [r13 + 0x78]
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.18003d250
mov dword [r13 + 0x78], r12d
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x180050708
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x180050703
cmp rbx, qword [rax + 0x10]
jne 0x180050703
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1800506f0
mov rbx, rax
jmp 0x18005072f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x18005072f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050720
cmp byte [rbx + 0x19], 0
je 0x180050490
lea rcx, [0x18006fb40]
call fcn.180050e50
movzx r9d, byte [rbp + 0x3b0]
mov r8, qword [0x18006fb40]
mov rdx, qword [0x18006fb30]
mov rdx, qword [rdx + 8]
lea rcx, [0x18006fb40]
call fcn.180053300
mov rcx, qword [0x18006fb40]
mov qword [rcx + 8], rax
mov rax, qword [0x18006fb38]
mov qword [0x18006fb48], rax
mov r8, qword [0x18006fb40]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x1800507e3
mov rcx, qword [rdx]
cmp byte [rcx + 0x19], 0
jne 0x1800507af
nop
mov rdx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1800507a0
mov qword [r8], rdx
mov rdx, qword [0x18006fb40]
mov rcx, qword [rdx + 8]
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1800507dd
nop word [rax + rax]
mov rcx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
je 0x1800507d0
mov qword [rdx + 0x10], rcx
jmp 0x1800507f1
mov qword [r8], r8
mov rax, qword [0x18006fb40]
mov qword [rax + 0x10], rax
mov rdi, qword [0x18006fb30]
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x18005082f
mov r8, qword [rbx + 0x10]
lea rdx, [0x18006fb30]
lea rcx, [0x18006fb30]
call fcn.18001c790
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x40
call fcn.180056348
cmp byte [rbx + 0x19], 0
je 0x180050802
mov qword [rdi + 8], rdi
mov qword [rdi], rdi
mov qword [rdi + 0x10], rdi
mov qword [0x18006fb38], r12
mov rax, qword [0x18006fb50]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180050b92
movabs rdi, 0x14198a208
movss xmm8, dword [0x180064a10]
xorps xmm9, xmm9
nop dword [rax + rax]
movsd xmm6, qword [rbx + 0x30]
mov eax, dword [rbx + 0x38]
mov dword [rbp - 0x78], eax
mov rax, qword [rdi]
mov rcx, qword [rax + 0x240]
movss xmm7, dword [rcx + 0x6c]
movss xmm1, dword [rbp - 0x78]
divss xmm1, xmm10
divss xmm6, xmm10
mulss xmm6, dword [rcx + 0x70]
addss xmm6, dword [rcx + 0x68]
addss xmm7, dword [rcx + 0x74]
mulss xmm1, dword [rcx + 0x74]
subss xmm7, xmm1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movss xmm0, dword [rbx + 0x3c]
subss xmm0, dword [rax + 0x198a1b8]
comiss xmm0, xmm9
jbe 0x180050ad4
cvttss2si r8d, xmm0
lea r9, [rbp + 0x25]
test r8d, r8d
jns 0x180050920
neg r8d
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x1800508e1
dec r9
mov byte [r9], 0x2d
jmp 0x18005094a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180050920
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov r10d, 0xf
mov qword [rbp - 0x18], r10
mov byte [rbp - 0x30], 0
lea rax, [rbp + 0x25]
cmp r9, rax
je 0x180050980
lea r8, [rbp + 0x25]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.1800091b0
mov r10, qword [rbp - 0x18]
lea r8, [rbp - 0x30]
mov r9, qword [rbp - 0x30]
cmp r10, 0x10
cmovae r8, r9
movaps xmm0, xmmword [0x180064e90]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180020770
mov r11d, eax
subss xmm7, xmm8
subss xmm6, dword [0x180064a28]
movss dword [rbp + 0x3b0], xmm6
movss dword [rbp + 0x3b4], xmm7
test eax, 0xff000000
je 0x180050a3c
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], 0
jne 0x1800509d4
add rcx, r8
cmp r8, rcx
je 0x180050a3c
mov rax, qword [r13 + 0x38]
movups xmm0, xmmword [r13 + 0x88]
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r11d
lea r9, [rbp + 0x3b0]
movss xmm2, dword [rax + 0x10]
mov rdx, r13
mov rcx, qword [rax + 8]
call fcn.180043450
mov r10, qword [rbp - 0x18]
mov r9, qword [rbp - 0x30]
cmp r10, 0x10
jb 0x180050a73
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x180050a6b
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180050be5
mov rcx, r9
call fcn.180056348
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x180050aa2
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x180050a9a
cmp rbx, qword [rax + 0x10]
jne 0x180050a9a
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x180050a87
mov rbx, rax
jmp 0x180050b85
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x180050b85
nop dword [rax]
nop word [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050ac0
jmp 0x180050b85
mov rdx, rbx
lea r8, [rbx + 0x10]
mov rax, qword [r8]
cmp byte [rax + 0x19], 0
je 0x180050b28
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x180050b03
nop
cmp rbx, qword [rax + 0x10]
jne 0x180050b03
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x180050af0
mov rbx, rax
mov rcx, qword [rdx + 8]
cmp byte [rcx + 0x19], 0
jne 0x180050b6c
mov rax, rdx
cmp rax, qword [rcx + 0x10]
jne 0x180050b6c
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x180050b13
jmp 0x180050b6c
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x180050b4f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050b40
mov rax, qword [r8]
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x180050b6c
nop dword [rax + rax]
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x180050b60
lea rcx, [0x18006fb50]
call fcn.180015df0
mov edx, 0x40
mov rcx, rax
call fcn.180056348
cmp rbx, qword [0x18006fb50]
jne 0x180050870
lea r11, [rsp + 0x468]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180003d10
int3