Function at 0x180028280
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x120
cmp dword [0x1803a05fc], 0
movabs r15, 0x7fffffff0000
mov rbx, qword [0x1803a0580]
mov esi, dword [0x1803a01e4]
movaps xmmword [rax - 0x38], xmm6
movss xmm6, dword [0x1801b5fc0]
movaps xmmword [rax - 0x48], xmm7
movss xmm7, dword [0x1801b6128]
movaps xmmword [rax - 0x58], xmm8
movss xmm8, dword [0x1801b606c]
movaps xmmword [rax - 0x68], xmm9
movss xmm9, dword [0x1801b60f8]
movaps xmmword [rax - 0x78], xmm10
movss xmm10, dword [0x1801b66d8]
movaps xmmword [rax - 0x98], xmm12
movss xmm12, dword [0x1801b66bc]
movaps xmmword [rax - 0xa8], xmm13
xorps xmm13, xmm13
movaps xmmword [rax - 0xb8], xmm14
movss xmm14, dword [0x1801b6578]
movaps xmmword [rax - 0xc8], xmm15
movss xmm15, dword [0x1801b6ef0]
mov qword [rax + 0x18], r14
mov r14d, 0x5f3759df
movaps xmmword [rax - 0x88], xmm11
movss dword [rbp + 0x50], xmm7
mov r12d, 4
jne 0x180028a23
lea rcx, [rbx + 0x118]
cmp rcx, 0x40000
jbe 0x180028406
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028406
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180028406
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028406
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180028406
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028406
mov rdi, qword [rcx]
test rdi, rdi
je 0x180028406
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029e76
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.180062f90
jmp 0x180028417
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
cmp byte [0x1803a06ff], 0
je 0x18002852e
mov ecx, dword [0x1803a0744]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180028442
cmp dword [0x1803a0744], 0
jne 0x18002852e
call fcn.18001a950
lea rcx, [rax + 0x118]
cmp rcx, 0x40000
jbe 0x180028504
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028504
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180028504
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028504
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180028504
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028504
mov rdi, qword [rcx]
test rdi, rdi
je 0x180028504
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029eb4
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x58], 0
call fcn.180062f90
movss xmm1, dword [rsp + 0x60]
movss xmm2, dword [rsp + 0x68]
movss xmm0, dword [rsp + 0x64]
jmp 0x18002850d
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
addss xmm0, xmm9
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x68], xmm2
lea rax, [rsp + 0x60]
movss dword [rsp + 0x64], xmm0
jmp 0x1800285f0
call fcn.18001a950
lea rcx, [rax + 0x118]
cmp rcx, 0x40000
jbe 0x1800285da
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800285da
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800285da
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800285da
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1800285da
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800285da
mov rdi, qword [rcx]
test rdi, rdi
je 0x1800285da
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029ef2
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0
call fcn.180062f90
jmp 0x1800285eb
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
lea rax, [rsp + 0x40]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.18001a950
mov rcx, rax
call fcn.18001a7e0
mov rcx, rax
call fcn.1800194e0
cmp eax, 0xc3054289
jg 0x18002864b
je 0x180028640
cmp eax, 0x82fc91ad
je 0x180028634
cmp eax, 0xb139337d
je 0x18002863a
cmp eax, 0xb6676e3b
jne 0x18002865f
movaps xmm15, xmm6
jmp 0x180028663
movaps xmm15, xmm7
jmp 0x180028663
movss xmm15, dword [0x1801b5f2c]
jmp 0x180028663
cmp eax, 0xd94fd7
je 0x18002865f
cmp eax, 0xcdc27d9
jne 0x18002865f
movaps xmm15, xmm6
jmp 0x180028663
movaps xmm15, xmm8
call fcn.180027de0
lea rcx, [rbx + 0x4a8]
movaps xmm7, xmm0
movss dword [rbp + 0x58], xmm7
cmp rcx, 0x40000
jbe 0x1800286b6
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800286b6
mov rcx, qword [rcx]
add rcx, 0x1fc
cmp rcx, 0x40000
jbe 0x1800286b6
lea rax, [rcx + 0xc]
cmp rax, r15
jae 0x1800286b6
movsd xmm5, qword [rcx]
movss xmm6, dword [rcx + 8]
movsd qword [rsp + 0x60], xmm5
jmp 0x1800286bc
xorps xmm6, xmm6
xorps xmm5, xmm5
movss xmm4, dword [rsp + 0x30]
xorps xmm8, xmm8
movss xmm3, dword [rsp + 0x38]
movaps xmm1, xmm4
movss xmm9, dword [rsp + 0x34]
movaps xmm0, xmm3
movss xmm12, dword [rsp + 0x50]
movaps xmm2, xmm9
movss xmm10, dword [rsp + 0x54]
subss xmm1, xmm12
movss xmm11, dword [rsp + 0x58]
subss xmm2, xmm10
subss xmm0, xmm11
mov eax, r14d
mulss xmm1, xmm1
mulss xmm0, xmm0
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm9
subss xmm0, xmm10
sqrtss xmm8, xmm2
movss xmm2, dword [0x1801b6218]
divss xmm8, xmm7
movaps xmm7, xmm8
mulss xmm8, xmm5
mulss xmm7, xmm6
mulss xmm8, dword [0x1801b5fc0]
mulss xmm7, dword [0x1801b5fc0]
cvtps2pd xmm6, xmm0
addss xmm8, xmm4
movaps xmm4, xmm2
addss xmm7, xmm3
movaps xmm3, xmm15
movaps xmm0, xmm8
movss dword [rsp + 0x30], xmm8
subss xmm0, xmm12
movss dword [rsp + 0x38], xmm7
movaps xmm1, xmm7
subss xmm1, xmm11
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
movd ecx, xmm0
movaps xmm5, xmm0
mulss xmm5, dword [0x1801b5f2c]
sar ecx, 1
sub eax, ecx
movd xmm1, eax
movaps xmm0, xmm1
mulss xmm0, xmm5
mulss xmm0, xmm1
subss xmm4, xmm0
movaps xmm0, xmm6
mulss xmm4, xmm1
movss xmm1, dword [0x1801b606c]
mulss xmm5, xmm4
mulss xmm5, xmm4
subss xmm2, xmm5
mulss xmm2, xmm4
divss xmm1, xmm2
movss xmm2, dword [rbp + 0x58]
cvtps2pd xmm1, xmm1
call fcn.1800275a0
xorps xmm1, xmm1
subss xmm12, xmm8
cvtsd2ss xmm1, xmm0
subss xmm11, xmm7
movaps xmm3, xmm12
addss xmm1, xmm9
mulss xmm3, xmm12
movaps xmm2, xmm11
mulss xmm2, xmm11
subss xmm10, xmm1
movss dword [rsp + 0x34], xmm1
movaps xmm1, xmm10
mulss xmm1, xmm10
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm10, xmm2
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
movss xmm15, dword [0x1801b6ef0]
movaps xmm9, xmm0
mulss xmm9, dword [0x1801b64ac]
xorps xmm11, xmm15
movaps xmm1, xmm11
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm7, xmm0
mulss xmm7, dword [0x1801b66b8]
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x1800288b1
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800288b1
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1800288b1
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800288b1
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x1800288b7
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm12, dword [0x1801b66bc]
subss xmm9, xmm0
movss xmm11, dword [0x1801b64d4]
subss xmm7, xmm1
comiss xmm9, xmm12
jae 0x1800288de
movaps xmm9, xmm12
jmp 0x1800288e3
minss xmm9, xmm11
movss xmm10, dword [0x1801b66d8]
comiss xmm7, xmm10
jae 0x1800288f9
addss xmm7, xmm14
jmp 0x180028904
comiss xmm7, xmm14
jbe 0x180028904
subss xmm7, xmm14
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x180028947
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028947
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x180028947
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028947
movss xmm8, dword [rcx]
movss xmm6, dword [rcx + 4]
jmp 0x18002894e
xorps xmm6, xmm6
xorps xmm8, xmm8
cmp byte [0x1803a05f3], 0
addss xmm6, xmm7
addss xmm8, xmm9
movss dword [rbp + 0x5c], xmm6
movss dword [rbp + 0x58], xmm8
je 0x18002897f
lea rcx, [rbp + 0x58]
call fcn.180028000
movss xmm6, dword [rbp + 0x5c]
movss xmm8, dword [rbp + 0x58]
comiss xmm8, xmm12
jae 0x18002898b
movaps xmm8, xmm12
jmp 0x180028995
comiss xmm8, xmm11
jbe 0x180028995
movaps xmm8, xmm11
comiss xmm6, xmm10
jae 0x1800289a2
addss xmm6, xmm14
jmp 0x1800289ad
comiss xmm6, xmm14
jbe 0x1800289ad
addss xmm6, xmm10
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x180028a01
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028a01
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x180028a01
movss xmm7, dword [0x1801b6128]
lea rax, [rcx + 8]
movss xmm9, dword [0x1801b60f8]
cmp rax, r15
jae 0x180028a12
movss dword [rcx], xmm8
movss dword [rcx + 4], xmm6
jmp 0x180028a12
movss xmm7, dword [0x1801b6128]
movss xmm9, dword [0x1801b60f8]
movss xmm6, dword [0x1801b5fc0]
movss xmm8, dword [0x1801b606c]
cmp dword [0x1803a05fc], 1
jne 0x180029199
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
lea rcx, [rbx + 0x118]
cmp r8d, 0xa
jle 0x180028b19
cmp rcx, 0x40000
jbe 0x180028bb9
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028bb9
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180028bb9
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028bb9
mov rcx, qword [rcx]
add rcx, 0xd0
cmp rcx, 0x40000
jbe 0x180028bb9
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028bb9
mov rdi, qword [rcx]
test rdi, rdi
je 0x180028bb9
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029f30
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
jmp 0x180028bca
cmp rcx, 0x40000
jbe 0x180028bb9
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028bb9
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180028bb9
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028bb9
mov rcx, qword [rcx]
add rcx, 0xb0
cmp rcx, 0x40000
jbe 0x180028bb9
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028bb9
mov rdi, qword [rcx]
test rdi, rdi
je 0x180028bb9
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029f6e
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
jmp 0x180028bca
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
cmp byte [0x1803a06ff], 0
movsd xmm0, qword [rsp + 0x40]
mov eax, dword [rsp + 0x48]
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
je 0x180028cec
mov ecx, dword [0x1803a0744]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180028cec
call fcn.18001a950
lea rcx, [rax + 0x118]
cmp rcx, 0x40000
jbe 0x180028cc2
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028cc2
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180028cc2
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028cc2
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180028cc2
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028cc2
mov rdi, qword [rcx]
test rdi, rdi
je 0x180028cc2
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029fac
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x68], 0
call fcn.180062f90
movss xmm1, dword [rsp + 0x50]
movss xmm2, dword [rsp + 0x58]
movss xmm0, dword [rsp + 0x54]
jmp 0x180028ccb
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
addss xmm0, xmm9
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x68], xmm2
lea rax, [rsp + 0x60]
movss dword [rsp + 0x64], xmm0
jmp 0x180028dae
call fcn.18001a950
lea rcx, [rax + 0x118]
cmp rcx, 0x40000
jbe 0x180028d98
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028d98
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180028d98
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028d98
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180028d98
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028d98
mov rdi, qword [rcx]
test rdi, rdi
je 0x180028d98
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x180029fea
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
jmp 0x180028da9
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
lea rax, [rsp + 0x40]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.18001a950
mov rcx, rax
call fcn.18001a7e0
mov rcx, rax
call fcn.1800194e0
cmp eax, 0xc3054289
jg 0x180028e09
je 0x180028dfe
cmp eax, 0x82fc91ad
je 0x180028df2
cmp eax, 0xb139337d
je 0x180028df8
cmp eax, 0xb6676e3b
jne 0x180028e1d
movaps xmm15, xmm6
jmp 0x180028e21
movaps xmm15, xmm7
jmp 0x180028e21
movss xmm15, dword [0x1801b5f2c]
jmp 0x180028e21
cmp eax, 0xd94fd7
je 0x180028e1d
cmp eax, 0xcdc27d9
jne 0x180028e1d
movaps xmm15, xmm6
jmp 0x180028e21
movaps xmm15, xmm8
call fcn.180027de0
lea rcx, [rbx + 0x4a8]
movaps xmm7, xmm0
movss dword [rbp + 0x58], xmm7
cmp rcx, 0x40000
jbe 0x180028e74
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180028e74
mov rcx, qword [rcx]
add rcx, 0x1fc
cmp rcx, 0x40000
jbe 0x180028e74
lea rax, [rcx + 0xc]
cmp rax, r15
jae 0x180028e74
movsd xmm5, qword [rcx]
movss xmm6, dword [rcx + 8]
movsd qword [rsp + 0x60], xmm5
jmp 0x180028e7a
xorps xmm6, xmm6
xorps xmm5, xmm5
movss xmm4, dword [rsp + 0x30]
xorps xmm8, xmm8
movss xmm3, dword [rsp + 0x38]
movaps xmm1, xmm4
movss xmm9, dword [rsp + 0x34]
movaps xmm0, xmm3
movss xmm12, dword [rsp + 0x50]
movaps xmm2, xmm9
movss xmm10, dword [rsp + 0x54]
subss xmm1, xmm12
movss xmm11, dword [rsp + 0x58]
subss xmm2, xmm10
subss xmm0, xmm11
mov eax, r14d
mulss xmm1, xmm1
mulss xmm0, xmm0
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm9
subss xmm0, xmm10
sqrtss xmm8, xmm2
movss xmm2, dword [0x1801b6218]
divss xmm8, xmm7
movaps xmm7, xmm8
mulss xmm8, xmm5
mulss xmm7, xmm6
mulss xmm8, dword [0x1801b5fc0]
mulss xmm7, dword [0x1801b5fc0]
cvtps2pd xmm6, xmm0
addss xmm8, xmm4
movaps xmm4, xmm2
addss xmm7, xmm3
movaps xmm3, xmm15
movaps xmm0, xmm8
subss xmm0, xmm12
movaps xmm1, xmm7
subss xmm1, xmm11
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
movd ecx, xmm0
movaps xmm5, xmm0
mulss xmm5, dword [0x1801b5f2c]
sar ecx, 1
sub eax, ecx
movd xmm1, eax
movaps xmm0, xmm1
mulss xmm0, xmm5
mulss xmm0, xmm1
subss xmm4, xmm0
movaps xmm0, xmm6
mulss xmm4, xmm1
movss xmm1, dword [0x1801b606c]
mulss xmm5, xmm4
mulss xmm5, xmm4
subss xmm2, xmm5
mulss xmm2, xmm4
divss xmm1, xmm2
movss xmm2, dword [rbp + 0x58]
cvtps2pd xmm1, xmm1
call fcn.1800275a0
xorps xmm1, xmm1
subss xmm12, xmm8
cvtsd2ss xmm1, xmm0
subss xmm11, xmm7
movaps xmm3, xmm12
addss xmm1, xmm9
mulss xmm3, xmm12
movaps xmm2, xmm11
subss xmm10, xmm1
mulss xmm2, xmm11
movaps xmm1, xmm10
mulss xmm1, xmm10
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm10, xmm2
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
movss xmm15, dword [0x1801b6ef0]
movaps xmm9, xmm0
mulss xmm9, dword [0x1801b64ac]
xorps xmm11, xmm15
movaps xmm1, xmm11
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm7, xmm0
mulss xmm7, dword [0x1801b66b8]
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x18002905c
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002905c
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x18002905c
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002905c
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x180029062
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm12, dword [0x1801b66bc]
subss xmm9, xmm0
movss xmm11, dword [0x1801b64d4]
subss xmm7, xmm1
comiss xmm9, xmm12
jae 0x180029089
movaps xmm9, xmm12
jmp 0x18002908e
minss xmm9, xmm11
movss xmm10, dword [0x1801b66d8]
comiss xmm7, xmm10
jae 0x1800290a4
addss xmm7, xmm14
jmp 0x1800290af
comiss xmm7, xmm14
jbe 0x1800290af
subss xmm7, xmm14
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x1800290f2
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800290f2
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1800290f2
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800290f2
movss xmm8, dword [rcx]
movss xmm6, dword [rcx + 4]
jmp 0x1800290f9
xorps xmm6, xmm6
xorps xmm8, xmm8
cmp byte [0x1803a05f3], 0
addss xmm6, xmm7
addss xmm8, xmm9
movss dword [rbp + 0x5c], xmm6
movss dword [rbp + 0x58], xmm8
je 0x18002912a
lea rcx, [rbp + 0x58]
call fcn.180028000
movss xmm6, dword [rbp + 0x5c]
movss xmm8, dword [rbp + 0x58]
comiss xmm8, xmm12
jae 0x180029136
movaps xmm8, xmm12
jmp 0x180029140
comiss xmm8, xmm11
jbe 0x180029140
movaps xmm8, xmm11
comiss xmm6, xmm10
jae 0x18002914d
addss xmm6, xmm14
jmp 0x180029158
comiss xmm6, xmm14
jbe 0x180029158
addss xmm6, xmm10
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x180029199
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029199
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x180029199
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029199
movss dword [rcx], xmm8
movss dword [rcx + 4], xmm6
cmp dword [0x1803a05fc], 2
jne 0x180029923
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x190
sub r8d, ecx
cmp r8d, 0x5a
jle 0x1800292ac
lea rcx, [rbx + 0x118]
cmp rcx, 0x40000
jbe 0x18002928c
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002928c
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002928c
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002928c
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002928c
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002928c
mov rdi, qword [rcx]
test rdi, rdi
je 0x18002928c
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x18002a028
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
movsd xmm0, qword [rsp + 0x40]
mov eax, dword [rsp + 0x48]
jmp 0x18002935d
mov qword [rsp + 0x40], 0
movsd xmm0, qword [rsp + 0x40]
mov dword [rsp + 0x48], 0
mov eax, dword [rsp + 0x48]
jmp 0x18002935d
lea eax, [r8 - 0x51]
cmp eax, 8
ja 0x1800292c0
mov r8d, 0x2e
jmp 0x180029349
lea eax, [r8 - 0x47]
cmp eax, 8
ja 0x1800292d1
mov r8d, 0xd
jmp 0x180029349
lea eax, [r8 - 0x3d]
cmp eax, 8
ja 0x1800292e2
mov r8d, 6
jmp 0x180029349
lea eax, [r8 - 0x33]
cmp eax, 8
ja 0x1800292f3
mov r8d, 0x17
jmp 0x180029349
lea eax, [r8 - 0x29]
cmp eax, 8
ja 0x180029304
mov r8d, 0x18
jmp 0x180029349
lea eax, [r8 - 0x1f]
cmp eax, 8
ja 0x180029315
mov r8d, 3
jmp 0x180029349
lea eax, [r8 - 0x15]
cmp eax, 8
ja 0x180029326
mov r8d, 0xf
jmp 0x180029349
lea eax, [r8 - 0xb]
cmp eax, 8
ja 0x180029337
mov r8d, 0x1a
jmp 0x180029349
cmp r8d, 0xa
mov r8d, 0x39
jl 0x180029349
mov r8d, 0x12
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.18001a280
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
cmp byte [0x1803a06ff], 0
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
je 0x180029478
mov ecx, dword [0x1803a0744]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180029478
call fcn.18001a950
lea rcx, [rax + 0x118]
cmp rcx, 0x40000
jbe 0x18002944b
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002944b
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002944b
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002944b
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002944b
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002944b
mov rdi, qword [rcx]
test rdi, rdi
je 0x18002944b
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x18002a066
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x68], 0
call fcn.180062f90
movss xmm1, dword [rsp + 0x50]
movss xmm2, dword [rsp + 0x58]
movss xmm0, dword [rsp + 0x54]
jmp 0x180029454
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
addss xmm0, dword [0x1801b60f8]
movss dword [rsp + 0x60], xmm1
lea rax, [rsp + 0x60]
movss dword [rsp + 0x68], xmm2
movss dword [rsp + 0x64], xmm0
jmp 0x18002953a
call fcn.18001a950
lea rcx, [rax + 0x118]
cmp rcx, 0x40000
jbe 0x180029524
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029524
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180029524
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029524
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180029524
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029524
mov rdi, qword [rcx]
test rdi, rdi
je 0x180029524
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x18002a0a4
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
jmp 0x180029535
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
lea rax, [rsp + 0x40]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.18001a950
mov rcx, rax
call fcn.18001a7e0
mov rcx, rax
call fcn.1800194e0
cmp eax, 0xc3054289
jg 0x180029592
je 0x180029588
cmp eax, 0x82fc91ad
je 0x18002957e
cmp eax, 0xb139337d
je 0x1800295b7
cmp eax, 0xb6676e3b
jne 0x1800295aa
movss xmm0, dword [0x1801b5fc0]
jmp 0x1800295b2
movss xmm0, dword [0x1801b5f2c]
jmp 0x1800295b2
cmp eax, 0xd94fd7
je 0x1800295aa
cmp eax, 0xcdc27d9
jne 0x1800295aa
movss xmm0, dword [0x1801b5fc0]
jmp 0x1800295b2
movss xmm0, dword [0x1801b606c]
movss dword [rbp + 0x50], xmm0
call fcn.180027de0
lea rcx, [rbx + 0x4a8]
movaps xmm6, xmm0
movss dword [rbp + 0x58], xmm6
cmp rcx, 0x40000
jbe 0x18002960b
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002960b
mov rcx, qword [rcx]
add rcx, 0x1fc
cmp rcx, 0x40000
jbe 0x18002960b
lea rax, [rcx + 0xc]
cmp rax, r15
jae 0x18002960b
movsd xmm5, qword [rcx]
movss xmm15, dword [rcx + 8]
movsd qword [rsp + 0x60], xmm5
jmp 0x180029612
xorps xmm15, xmm15
xorps xmm5, xmm5
movss xmm4, dword [rsp + 0x30]
xorps xmm7, xmm7
movss xmm3, dword [rsp + 0x38]
movaps xmm1, xmm4
movss xmm8, dword [rsp + 0x34]
movaps xmm0, xmm3
movss xmm11, dword [rsp + 0x50]
movaps xmm2, xmm8
movss xmm9, dword [rsp + 0x54]
subss xmm1, xmm11
movss xmm10, dword [rsp + 0x58]
subss xmm2, xmm9
subss xmm0, xmm10
mulss xmm1, xmm1
mulss xmm0, xmm0
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
movaps xmm0, xmm8
subss xmm0, xmm9
sqrtss xmm7, xmm2
divss xmm7, xmm6
movaps xmm6, xmm7
mulss xmm7, xmm5
cvtps2pd xmm5, xmm0
mulss xmm7, dword [0x1801b5fc0]
mulss xmm6, xmm15
addss xmm7, xmm4
mulss xmm6, dword [0x1801b5fc0]
movaps xmm0, xmm7
subss xmm0, xmm11
addss xmm6, xmm3
movss xmm3, dword [0x1801b6218]
movaps xmm2, xmm3
mulss xmm0, xmm0
movaps xmm1, xmm6
subss xmm1, xmm10
mulss xmm1, xmm1
addss xmm0, xmm1
movd eax, xmm0
movaps xmm4, xmm0
mulss xmm4, dword [0x1801b5f2c]
sar eax, 1
sub r14d, eax
movd xmm1, r14d
movaps xmm0, xmm1
mulss xmm0, xmm4
mulss xmm0, xmm1
subss xmm2, xmm0
movss xmm0, dword [0x1801b606c]
mulss xmm2, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm4
mulss xmm1, xmm2
subss xmm3, xmm1
mulss xmm3, xmm2
movss xmm2, dword [rbp + 0x58]
divss xmm0, xmm3
movss xmm3, dword [rbp + 0x50]
cvtps2pd xmm1, xmm0
movaps xmm0, xmm5
call fcn.1800275a0
xorps xmm1, xmm1
subss xmm11, xmm7
cvtsd2ss xmm1, xmm0
subss xmm10, xmm6
movaps xmm3, xmm11
addss xmm8, xmm1
mulss xmm3, xmm11
movaps xmm2, xmm10
subss xmm9, xmm8
mulss xmm2, xmm10
movaps xmm1, xmm9
mulss xmm1, xmm9
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm9, xmm2
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
movss xmm15, dword [0x1801b6ef0]
movaps xmm9, xmm0
mulss xmm9, dword [0x1801b64ac]
xorps xmm10, xmm15
movaps xmm1, xmm10
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm6, xmm0
mulss xmm6, dword [0x1801b66b8]
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x1800297f0
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800297f0
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1800297f0
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800297f0
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x1800297f6
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm11, dword [0x1801b64d4]
subss xmm9, xmm0
subss xmm6, xmm1
comiss xmm9, xmm12
jae 0x180029814
movaps xmm9, xmm12
jmp 0x180029819
minss xmm9, xmm11
movss xmm10, dword [0x1801b66d8]
comiss xmm6, xmm10
jae 0x18002982f
addss xmm6, xmm14
jmp 0x18002983a
comiss xmm6, xmm14
jbe 0x18002983a
subss xmm6, xmm14
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x18002987d
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002987d
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x18002987d
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18002987d
movss xmm8, dword [rcx]
movss xmm7, dword [rcx + 4]
jmp 0x180029884
xorps xmm7, xmm7
xorps xmm8, xmm8
cmp byte [0x1803a05f3], 0
addss xmm7, xmm6
addss xmm8, xmm9
movss dword [rbp + 0x54], xmm7
movss dword [rbp + 0x50], xmm8
je 0x1800298b5
lea rcx, [rbp + 0x50]
call fcn.180028000
movss xmm7, dword [rbp + 0x54]
movss xmm8, dword [rbp + 0x50]
comiss xmm8, xmm12
jae 0x1800298c1
movaps xmm8, xmm12
jmp 0x1800298cb
comiss xmm8, xmm11
jbe 0x1800298cb
movaps xmm8, xmm11
comiss xmm7, xmm10
jae 0x1800298d8
addss xmm7, xmm14
jmp 0x1800298e3
comiss xmm7, xmm14
jbe 0x1800298e3
addss xmm7, xmm10
call fcn.18001a950
lea rcx, [rax + 0x4c8]
cmp rcx, 0x40000
jbe 0x180029923
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029923
mov rax, qword [rcx]
add rax, 0x3c
cmp rax, 0x40000
jbe 0x180029923
lea rcx, [rax + 8]
cmp rcx, r15
jae 0x180029923
movss dword [rax], xmm8
movss dword [rax + 4], xmm7
cmp dword [0x1803a05fc], 3
movaps xmm11, xmmword [rsp + 0xc0]
mov r14, qword [rsp + 0x160]
jne 0x180029e2c
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x190
sub r8d, ecx
lea rcx, [rbx + 0x118]
cmp r8d, 0x32
jle 0x180029a2d
cmp rcx, 0x40000
jbe 0x180029acd
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029acd
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180029acd
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029acd
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180029acd
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029acd
mov rdi, qword [rcx]
test rdi, rdi
je 0x180029acd
mov rax, qword gs:[0x58]
mov rdx, qword [rax + rsi*8]
mov eax, dword [r12 + rdx]
cmp dword [0x1803d7528], eax
jg 0x18002a0e2
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
jmp 0x180029ade
cmp rcx, 0x40000
jbe 0x180029acd
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029acd
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180029acd
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029acd
mov rcx, qword [rcx]
add rcx, 0xb0
cmp rcx, 0x40000
jbe 0x180029acd
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029acd
mov rdi, qword [rcx]
test rdi, rdi
je 0x180029acd
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1803d7528], eax
jg 0x18002a120
mov rdx, qword [0x1803d7390]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180062f90
jmp 0x180029ade
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
movsd xmm0, qword [rsp + 0x40]
mov eax, dword [rsp + 0x48]
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
call fcn.18001a950
test rax, rax
je 0x180029e2c
test rbx, rbx
je 0x180029e2c
call fcn.18001a950
mov rcx, rax
call fcn.18001a7e0
test rax, rax
je 0x180029e2c
mov rcx, rbx
call fcn.1800172d0
test al, al
jne 0x180029e2c
cmp byte [0x1803a06ff], al
je 0x180029b8f
mov ecx, dword [0x1803a0744]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180029b8f
call fcn.18001a950
mov r8d, 0x2f
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.18001a280
movss xmm0, dword [rax]
movss xmm1, dword [rax + 4]
addss xmm1, dword [0x1801b60f8]
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [rax + 8]
lea rax, [rsp + 0x60]
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x64], xmm1
jmp 0x180029ba7
call fcn.18001a950
mov r8d, 0x2f
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.18001a280
movsd xmm6, qword [rax]
mov edi, dword [rax + 8]
movsd qword [rsp + 0x40], xmm6
call fcn.18001a950
mov rcx, rax
call fcn.18001a7e0
mov rcx, rax
call fcn.1800194e0
mov ecx, eax
call fcn.180027d90
movaps xmm7, xmm0
call fcn.180027de0
add rbx, 0x4a8
movaps xmm3, xmm0
cmp rbx, 0x40000
jbe 0x180029c19
lea rax, [rbx + 8]
cmp rax, r15
jae 0x180029c19
mov rcx, qword [rbx]
add rcx, 0x1fc
cmp rcx, 0x40000
jbe 0x180029c19
lea rax, [rcx + 0xc]
cmp rax, r15
jae 0x180029c19
movsd xmm0, qword [rcx]
mov eax, dword [rcx + 8]
jmp 0x180029c25
xorps xmm0, xmm0
movd eax, xmm13
unpcklps xmm0, xmm13
lea r8, [rsp + 0x60]
movss dword [rsp + 0x20], xmm7
lea rdx, [rsp + 0x30]
movsd qword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x68], eax
movsd qword [rsp + 0x50], xmm6
mov dword [rsp + 0x58], edi
call fcn.1800277f0
movss xmm0, dword [rsp + 0x44]
subss xmm0, dword [rsp + 0x34]
movss xmm7, dword [rsp + 0x40]
subss xmm7, dword [rsp + 0x30]
movd xmm6, edi
subss xmm6, dword [rsp + 0x38]
movaps xmm3, xmm0
mulss xmm3, xmm0
movaps xmm1, xmm7
movaps xmm2, xmm6
mulss xmm1, xmm7
mulss xmm2, xmm6
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
movaps xmm8, xmm0
xorps xmm6, xmm15
mulss xmm8, dword [0x1801b64ac]
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm6, xmm0
mulss xmm6, dword [0x1801b66b8]
call fcn.18001a950
add rax, 0x4c8
cmp rax, 0x40000
jbe 0x180029d09
lea rcx, [rax + 8]
cmp rcx, r15
jae 0x180029d09
mov rcx, qword [rax]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x180029d09
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029d09
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x180029d0f
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm9, dword [0x1801b64d4]
subss xmm8, xmm0
subss xmm6, xmm1
comiss xmm8, xmm12
jae 0x180029d2d
movaps xmm8, xmm12
jmp 0x180029d32
minss xmm8, xmm9
comiss xmm6, xmm10
jae 0x180029d3f
addss xmm6, xmm14
jmp 0x180029d4a
comiss xmm6, xmm14
jbe 0x180029d4a
subss xmm6, xmm14
call fcn.18001a950
add rax, 0x4c8
cmp rax, 0x40000
jbe 0x180029d8b
lea rcx, [rax + 8]
cmp rcx, r15
jae 0x180029d8b
mov rcx, qword [rax]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x180029d8b
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029d8b
movss xmm13, dword [rcx]
movss xmm7, dword [rcx + 4]
jmp 0x180029d8e
xorps xmm7, xmm7
cmp byte [0x1803a05f3], 0
addss xmm13, xmm8
addss xmm7, xmm6
movss dword [rbp + 0x50], xmm13
movss dword [rbp + 0x54], xmm7
je 0x180029dbf
lea rcx, [rbp + 0x50]
call fcn.180028000
movss xmm7, dword [rbp + 0x54]
movss xmm13, dword [rbp + 0x50]
comiss xmm13, xmm12
jae 0x180029dcb
movaps xmm13, xmm12
jmp 0x180029dd5
comiss xmm13, xmm9
jbe 0x180029dd5
movaps xmm13, xmm9
comiss xmm7, xmm10
jae 0x180029de2
addss xmm7, xmm14
jmp 0x180029ded
comiss xmm7, xmm14
jbe 0x180029ded
addss xmm7, xmm10
call fcn.18001a950
add rax, 0x4c8
cmp rax, 0x40000
jbe 0x180029e2c
lea rcx, [rax + 8]
cmp rcx, r15
jae 0x180029e2c
mov rcx, qword [rax]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x180029e2c
lea rax, [rcx + 8]
cmp rax, r15
jae 0x180029e2c
movss dword [rcx], xmm13
movss dword [rcx + 4], xmm7
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x1800283da
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x1800283da
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x1800284c6
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x1800284c6
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x1800285ae
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x1800285ae
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x180028aea
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x180028aea
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x180028b8d
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x180028b8d
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x180028c84
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x180028c84
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x180028d6c
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x180028d6c
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x180029253
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x180029253
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x18002940d
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x18002940d
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x1800294f8
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x1800294f8
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x1800299fe
mov ecx, 0x56e64b7d
call fcn.1800123a0
lea rcx, [0x1803d7528]
mov rdx, qword [rax]
mov qword [0x1803d7390], rdx
call fcn.180111da4
jmp 0x1800299fe
lea rcx, [0x1803d7528]
call fcn.180111e04
cmp dword [0x1803d7528], 0xffffffff
jne 0x180029aa1
mov ecx, 0x56e64b7d
call fcn.1800123a0
mov rcx, qword [rax]
mov qword [0x1803d7390], rcx
lea rcx, [0x1803d7528]
call fcn.180111da4
jmp 0x180029aa1