Function at 0x180029f70
Capabilities:
Create directory
Hash data with crc32
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push r12
push r14
push r15
lea rbp, [rsp - 0x328]
sub rsp, 0x428
mov rax, qword [0x180285550]
lea r8, str.Background
movaps xmmword [rsp + 0x3a0], xmm12
xor edx, edx
movaps xmmword [rsp + 0x390], xmm13
movaps xmmword [rsp + 0x380], xmm14
mov rax, qword [rax + 0x40a8]
mov rcx, qword [rax]
call fcn.18003ea40
mov ecx, dword [0x1802bb308]
xor r14d, r14d
movss xmm14, dword [0x18010b18c]
xorps xmm12, xmm12
mov qword [0x1802bb4d0], rax
test ecx, ecx
je 0x18002a0cd
sub ecx, 1
je 0x18002a08b
sub ecx, 1
je 0x18002a061
cmp ecx, 1
je 0x18002a01b
mov dword [0x1802847b8], 0x3f800000
mov dword [0x1802bb330], r14d
mov dword [0x1802847b0], 0x3f800000
jmp 0x18002a0f7
movss xmm1, dword [0x1802847b0]
movss xmm0, dword [0x1802bb330]
addss xmm1, dword [0x18010af50]
addss xmm0, dword [0x18010b66c]
comiss xmm1, xmm14
movss dword [0x1802847b0], xmm1
movss dword [0x1802bb330], xmm0
jb 0x18002a0f7
mov dword [0x1802bb308], r14d
jmp 0x18002a0f7
movss xmm0, dword [0x1802847b8]
addss xmm0, dword [0x18010af50]
comiss xmm0, xmm14
movss dword [0x1802847b8], xmm0
jb 0x18002a0f7
mov dword [0x1802bb308], 3
jmp 0x18002a0f7
movss xmm1, dword [0x1802bb330]
movss xmm0, dword [0x1802847b0]
addss xmm1, dword [0x18010af50]
addss xmm0, dword [0x18010b66c]
comiss xmm1, xmm14
movss dword [0x1802bb330], xmm1
movss dword [0x1802847b0], xmm0
jb 0x18002a0f7
mov dword [0x1802bb308], 2
jmp 0x18002a0f7
movss xmm0, dword [0x1802847b8]
mov eax, 1
addss xmm0, dword [0x18010b66c]
comiss xmm0, xmm12
movss dword [0x1802847b8], xmm0
cmovbe ecx, eax
mov dword [0x1802bb308], ecx
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
cmp byte [0x18028532d], r14b
jne 0x18002a193
xor edx, edx
lea rcx, str.C:VIRUS_
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:VIRUS2_
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:VIRUS3_
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.RIFFf
lea r8d, [rdx + 5]
call qword [sym.imp.WINMM.dll_PlaySoundA]
xor edx, edx
lea rcx, str.RIFF_
lea r8d, [rdx + 5]
call qword [sym.imp.WINMM.dll_PlaySoundA]
xor edx, edx
lea rcx, [0x18011e070]
lea r8d, [rdx + 5]
call qword [sym.imp.WINMM.dll_PlaySoundA]
xor edx, edx
lea rcx, str.RIFF
lea r8d, [rdx + 5]
call qword [sym.imp.WINMM.dll_PlaySoundA]
mov byte [0x18028532d], 1
cmp byte [0x1802854cc], r14b
mov r15d, dword [0x180284d10]
mov qword [rsp + 0x420], rdi
movaps xmmword [rsp + 0x400], xmm6
movaps xmmword [rsp + 0x3f0], xmm7
movaps xmmword [rsp + 0x3e0], xmm8
movaps xmmword [rsp + 0x3d0], xmm9
mov r12d, 4
je 0x18002a489
mov eax, dword [0x180285450]
cdq
sub eax, edx
sar eax, 1
movd xmm9, eax
mov eax, dword [0x180285468]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm9, xmm9
movd xmm7, eax
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
cvtdq2ps xmm7, xmm7
call rax
mov rcx, rax
call fcn.1800373e0
mov rbx, rax
test rax, rax
je 0x18002a489
cmp byte [0x18028532e], r14b
jne 0x18002a3ab
mov rcx, qword gs:[0x58]
mov eax, dword [0x1802bb63c]
mov rsi, qword [rcx + r15*8]
cmp eax, dword [rsi + r12]
jle 0x18002a280
lea rcx, [0x1802bb63c]
call fcn.180076c54
mov eax, dword [0x1802bb63c]
cmp eax, 0xffffffff
jne 0x18002a280
mov ecx, 0x5d491345
call fcn.18000e300
lea rcx, [0x1802bb63c]
mov qword [0x1802bb818], rax
call fcn.180076bf4
mov eax, dword [0x1802bb63c]
mov r14, qword [0x1802bb818]
cmp eax, dword [rsi + r12]
jle 0x18002a2bf
lea rcx, [0x1802bb63c]
call fcn.180076c54
cmp dword [0x1802bb63c], 0xffffffff
jne 0x18002a2bf
mov ecx, 0x5d491345
call fcn.18000e300
lea rcx, [0x1802bb63c]
mov qword [0x1802bb818], rax
call fcn.180076bf4
mov rax, qword [0x1802bb818]
movss xmm0, dword [r14 + rbx]
movss xmm8, dword [0x18010afcc]
movss xmm2, dword [0x180285390]
movss xmm1, dword [rax + rbx]
mulss xmm0, xmm8
subss xmm1, xmm0
comiss xmm2, xmm1
ja 0x18002a3ab
comiss xmm2, xmm12
jbe 0x18002a3ab
mov rcx, rbx
call fcn.1800129f0
mov rcx, rbx
movss xmm6, dword [rax]
call fcn.1800129f0
cmp byte [0x1802854cc], 0
movss xmm1, dword [0x180285390]
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm6, xmm0
divss xmm1, xmm6
je 0x18002a423
ucomiss xmm1, dword [0x18010b670]
je 0x18002a423
movaps xmm0, xmmword [0x18010bdd0]
lea rax, str.reloading
subss xmm7, dword [0x18010b56c]
mov rcx, qword [0x1802bb700]
lea r9, [rsp + 0x70]
mov qword [rsp + 0x38], rax
movaps xmm1, xmm9
mov rax, qword [0x180285538]
movdqa xmmword [rsp + 0x70], xmm0
movss xmm0, dword [0x18010b4e0]
movaps xmm2, xmm7
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
call fcn.1800158e0
jmp 0x18002a423
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r15*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1802bb940], eax
jle 0x18002a3f6
lea rcx, [0x1802bb940]
call fcn.180076c54
cmp dword [0x1802bb940], 0xffffffff
jne 0x18002a3f6
mov ecx, 0x6c06da54
call fcn.18000e300
lea rcx, [0x1802bb940]
mov qword [0x1802bb7d8], rax
call fcn.180076bf4
mov rax, qword [0x1802bb7d8]
movss xmm0, dword [0x18028533c]
comiss xmm0, dword [rax + rbx]
jae 0x18002a423
mov rcx, rbx
call fcn.180012a70
mov rcx, rbx
call fcn.1800129f0
mov rcx, rbx
call fcn.180012a70
mov rcx, rbx
call fcn.180012c40
cmp eax, 0x407209f5
je 0x18002a46e
mov rcx, rbx
call fcn.180012c40
cmp eax, 0xe93460ee
je 0x18002a46e
mov rcx, rbx
call fcn.180012c40
cmp eax, 0x643e3521
je 0x18002a46e
mov rcx, rbx
call fcn.180012c40
cmp eax, 0xda95d4a2
je 0x18002a46e
mov rcx, rbx
call fcn.180012c40
cmp eax, 0x9b7f6dd1
jne 0x18002a486
mov rcx, rbx
call fcn.180012a70
mov rcx, rbx
call fcn.1800129f0
mov rcx, rbx
call fcn.180012a70
xor r14d, r14d
mov rsi, qword [0x1802853d8]
movss xmm13, dword [0x180204000]
mov qword [rbp + 0x10], rsi
call fcn.1800124c0
mov rbx, rax
test rax, rax
je 0x18002b7d1
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + r15*8]
mov ecx, dword [r12 + rdx]
cmp dword [0x1802bb79c], ecx
jle 0x18002a4f9
lea rcx, [0x1802bb79c]
call fcn.180076c54
cmp dword [0x1802bb79c], 0xffffffff
jne 0x18002a4f9
mov ecx, 0xae00109b
call fcn.18000e300
lea rcx, [0x1802bb79c]
mov qword [0x1802bb430], rax
call fcn.180076bf4
mov rax, qword [0x1802bb430]
mov rax, qword [rbx + rax]
mov qword [rbp], rax
test rax, rax
je 0x18002b7d1
mov rax, qword [rax + 0x28]
movabs rbx, 0x7fffffff0000
mov qword [rsp + 0x418], r13
mov r13d, r14d
movaps xmmword [rsp + 0x3c0], xmm10
movaps xmmword [rsp + 0x3b0], xmm11
cmp dword [rax + 0x10], 0
movaps xmmword [rsp + 0x370], xmm15
jle 0x18002b41d
movss xmm15, dword [0x18010b4d4]
lea rbx, [0x1801012b0]
mov rdx, r14
mov qword [rbp + 8], r15
mov qword [rbp + 0x360], rdx
mov r8, r15
cmp dword [rax + 0x10], 1
mov r9, qword gs:[0x58]
jle 0x18002b7ae
mov rax, qword [rax + 0x18]
mov rdi, qword [rax + rdx*8 + 0x20]
test rdi, rdi
je 0x18002b3d4
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x18002b3d4
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x18002b3d4
add rcx, 0x60
cmp rcx, 0x40000
jbe 0x18002b3d4
lea rax, [rcx + 8]
movabs rsi, 0x7fffffff0000
cmp rax, rsi
jae 0x18002b3d4
mov r12, qword [rcx]
test r12, r12
je 0x18002b3d4
mov r15, qword [r9 + r8*8]
mov eax, 4
mov r14d, eax
mov eax, dword [rax + r15]
cmp dword [0x1802bb6f4], eax
jle 0x18002a634
lea rcx, [0x1802bb6f4]
call fcn.180076c54
cmp dword [0x1802bb6f4], 0xffffffff
jne 0x18002a62d
mov ecx, 0x33f7a6a3
call fcn.18000e300
lea rcx, [0x1802bb6f4]
mov qword [0x1802bb510], rax
call fcn.180076bf4
mov rdx, qword [rbp + 0x360]
mov rax, qword [0x1802bb510]
cmp byte [rax + rdi], 0
jne 0x18002b3d4
mov eax, dword [r14 + r15]
cmp dword [0x1802bb768], eax
jle 0x18002a686
lea rcx, [0x1802bb768]
call fcn.180076c54
cmp dword [0x1802bb768], 0xffffffff
jne 0x18002a686
mov ecx, 0x8bb6774c
call fcn.18000cb40
mov rcx, qword [rax]
mov qword [0x1802bb748], rcx
lea rcx, [0x1802bb768]
call fcn.180076bf4
mov r8, rdi
call fcn.180037050
test rax, rax
je 0x18002b3cd
lea rdx, str.Local
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18002b3cd
mov rcx, rdi
call fcn.180012770
test al, al
je 0x18002ad0e
mov eax, dword [r14 + r15]
cmp dword [0x1802bb38c], eax
jle 0x18002a6fe
lea rcx, [0x1802bb38c]
call fcn.180076c54
cmp dword [0x1802bb38c], 0xffffffff
jne 0x18002a6fe
mov ecx, 0x1f15eb59
call fcn.18000e300
lea rcx, [0x1802bb38c]
mov qword [0x1802bb390], rax
call fcn.180076bf4
mov rax, qword [0x1802bb390]
cmp dword [rdi + rax], 1
je 0x18002b3cd
cmp byte [0x180285400], 0
lea rsi, [rdi + 0x4a8]
movabs rdx, 0x7fffffff0000
je 0x18002a949
cmp rsi, 0x40000
jbe 0x18002a764
lea rax, [rsi + 8]
cmp rax, rdx
jae 0x18002a764
mov rcx, qword [rsi]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x18002a764
lea rax, [rcx + 1]
cmp rax, rdx
jae 0x18002a764
cmp byte [rcx], 0
jne 0x18002a949
lea rcx, [rdi + 0x5f8]
cmp rcx, 0x40000
jbe 0x18002a781
lea rax, [rcx + 4]
cmp rax, rdx
jae 0x18002a781
mov eax, dword [rcx]
jmp 0x18002a783
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002a8dd
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002a8a6
cmp dword [rdi + 0x598], ecx
jne 0x18002a8a6
movaps xmm0, xmmword [0x18010bb60]
lea rdx, [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
mov rcx, rdi
call fcn.18001cff0
movaps xmm0, xmmword [0x18010bae0]
mov rbx, rsi
mov rcx, rsi
movups xmmword [rsp + 0x40], xmm0
cmp rsi, 0x40000
jbe 0x18002a9d7
lea rax, [rsi + 8]
movabs rsi, 0x7fffffff0000
cmp rax, rsi
jae 0x18002a9d7
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x18002a9d7
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002a9d7
cmp byte [rcx], 0
je 0x18002a9d7
mov rcx, qword [rbx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x18002a89e
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002a89e
cmp byte [rcx], 0
je 0x18002aaaa
mov eax, dword [r14 + r15]
cmp dword [0x1802bb9e4], eax
jle 0x18002aaaa
lea rcx, [0x1802bb9e4]
call fcn.180076c54
cmp dword [0x1802bb9e4], 0xffffffff
jne 0x18002aaaa
mov ecx, 0x43f29029
call fcn.18000e300
lea rcx, [0x1802bb9e4]
mov qword [0x1802bb7e0], rax
call fcn.180076bf4
mov rcx, rbx
jmp 0x18002aab6
movss xmm0, dword [0x180203fd8]
lea rdx, [rbp - 0x10]
movss xmm1, dword [0x180203fdc]
movss dword [rbp - 0x10], xmm0
movss xmm0, dword [0x180203fe0]
movss dword [rbp - 8], xmm0
movss dword [rbp - 0xc], xmm1
mov dword [rbp - 4], 0x3f800000
jmp 0x18002a7c8
cmp rcx, 0x40000
jbe 0x18002a8f3
lea rax, [rcx + 4]
cmp rax, rdx
jae 0x18002a8f3
mov eax, dword [rcx]
jmp 0x18002a8f5
xor eax, eax
shr eax, 4
test al, 1
je 0x18002a7d0
cmp byte [0x18028540a], 0
jne 0x18002a7d0
movss xmm0, dword [0x180204068]
lea rdx, [rsp + 0x70]
movss xmm1, dword [0x18020406c]
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [0x180204070]
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x74], xmm1
mov dword [rsp + 0x7c], 0x3f800000
jmp 0x18002a7c8
cmp byte [0x180285496], 0
mov rbx, rsi
je 0x18002a7d0
cmp rbx, 0x40000
jbe 0x18002a7d0
lea rax, [rsi + 8]
cmp rax, rdx
jae 0x18002a7d0
mov rcx, qword [rsi]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x18002a7d0
lea rax, [rcx + 1]
cmp rax, rdx
jae 0x18002a7d0
cmp byte [rcx], 0
je 0x18002a7d0
movaps xmm0, xmmword [0x18010bb50]
lea rdx, [rsp + 0x40]
mov rcx, rdi
movaps xmmword [rsp + 0x40], xmm0
call fcn.18001cff0
movaps xmm0, xmmword [0x18010bae0]
mov rcx, rbx
movups xmmword [rsp + 0x40], xmm0
movabs rsi, 0x7fffffff0000
jmp 0x18002a806
lea rcx, [rdi + 0x5f8]
movabs rsi, 0x7fffffff0000
cmp rcx, 0x40000
jbe 0x18002a9fe
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002a9fe
mov eax, dword [rcx]
jmp 0x18002aa00
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002aa68
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002aa48
cmp dword [rdi + 0x598], ecx
jne 0x18002aa48
movss xmm0, dword [0x1802040c8]
movss xmm1, dword [0x1802040cc]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x1802040d0]
jmp 0x18002aa86
movss xmm0, dword [0x180203fc8]
movss xmm1, dword [0x180203fcc]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x180203fd0]
jmp 0x18002aa86
movss xmm0, dword [0x180204068]
movss xmm1, dword [0x18020406c]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x180204070]
movss dword [rsp + 0x44], xmm1
lea rdx, [rsp + 0x40]
movss dword [rsp + 0x48], xmm0
mov rcx, rdi
movups xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
call fcn.18001fba0
mov rcx, rbx
cmp rbx, 0x40000
jbe 0x18002aae0
lea rax, [rcx + 8]
cmp rax, rsi
jae 0x18002aae0
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x18002aae0
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002aae0
cmp byte [rcx], 0
jne 0x18002ab2f
lea rcx, [rdi + 0x5f8]
cmp rcx, 0x40000
jbe 0x18002aafd
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002aafd
mov eax, dword [rcx]
jmp 0x18002aaff
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002ab2f
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002ab27
cmp dword [rdi + 0x598], ecx
je 0x18002ab2f
mov rcx, rdi
call fcn.180012970
cmp byte [0x180285448], 0
je 0x18002ab62
lea rcx, [rdi + 0x5f8]
cmp rcx, 0x40000
jbe 0x18002ab55
lea rax, [rcx + 4]
cmp rax, rsi
jae 0x18002ab55
mov eax, dword [rcx]
jmp 0x18002ab57
xor eax, eax
shr eax, 4
test al, 1
jne 0x18002b3c6
cmp byte [0x180285435], 0
je 0x18002aba2
cmp rbx, 0x40000
jbe 0x18002aba2
lea rax, [rbx + 8]
cmp rax, rsi
jae 0x18002aba2
mov rcx, qword [rbx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x18002aba2
lea rax, [rcx + 1]
cmp rax, rsi
jae 0x18002aba2
cmp byte [rcx], 0
jne 0x18002b3c6
cmp byte [0x18016313e], 0
je 0x18002abd0
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002abd0
cmp dword [rdi + 0x598], ecx
je 0x18002b3c6
mov r8d, 0x2f
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.180013590
ucomiss xmm12, dword [rax]
je 0x18002b3c6
mov r8d, 0x2f
lea rdx, [rbp + 0x3c]
mov rcx, rdi
call fcn.180013590
ucomiss xmm12, dword [rax + 4]
je 0x18002b3c6
mov r8d, 0x2f
lea rdx, [rbp + 0x48]
mov rcx, rdi
call fcn.180013590
ucomiss xmm12, dword [rax + 8]
je 0x18002b3c6
cmp byte [0x180285428], 0
jne 0x18002b3c6
mov r8d, 0x2f
lea rdx, [rbp + 0x54]
mov rcx, rdi
call fcn.180013590
movsd xmm6, qword [rax]
mov ebx, dword [rax + 8]
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov r8d, 0x2f
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.180013590
movsd xmm0, qword [rax]
movss xmm1, dword [rax + 8]
movaps xmm2, xmm0
movaps xmm3, xmm0
movsd qword [rsp + 0x40], xmm0
shufps xmm3, xmm3, 0x55
subss xmm2, xmm6
movaps xmm0, xmm6
movsd qword [rsp + 0x40], xmm6
shufps xmm0, xmm0, 0x55
subss xmm3, xmm0
movd xmm0, ebx
subss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm2, xmm2
mulss xmm3, xmm3
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
sqrtss xmm0, xmm3
comiss xmm0, dword [0x180203ff8]
ja 0x18002b3c6
mov rcx, rdi
call fcn.180017b30
movaps xmm6, xmm0
comiss xmm13, xmm6
jbe 0x18002ad07
mov rcx, rdi
call fcn.180012970
comiss xmm12, dword [rax]
jae 0x18002ad07
cmp byte [0x180285434], 0
lea rbx, [0x1801012b0]
jne 0x18002ad0e
movaps xmm13, xmm6
mov qword [0x1802853d8], rdi
jmp 0x18002ad0e
lea rbx, [0x1801012b0]
mov r8, qword [rdi]
test r8, r8
je 0x18002b36e
mov r8, qword [r8 + 0x10]
mov edx, 0xffffffff
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18002ad30
test eax, eax
je 0x18002b36e
mov r9d, eax
nop word [rax + rax]
movsx ecx, byte [r8]
lea r8, [r8 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [rbx + rax*4]
sub r9, 1
jne 0x18002ad50
not edx
cmp edx, 0xd9e96dc9
jne 0x18002b36e
mov eax, dword [r14 + r15]
cmp dword [0x1802bb9e4], eax
jle 0x18002adb8
lea rcx, [0x1802bb9e4]
call fcn.180076c54
cmp dword [0x1802bb9e4], 0xffffffff
jne 0x18002adb8
mov ecx, 0x43f29029
call fcn.18000e300
lea rcx, [0x1802bb9e4]
mov qword [0x1802bb7e0], rax
call fcn.180076bf4
mov rax, qword [0x1802bb7e0]
movss xmm11, dword [rdi + rax]
mov eax, dword [r14 + r15]
cmp dword [0x1802bb878], eax
jle 0x18002ae06
lea rcx, [0x1802bb878]
call fcn.180076c54
cmp dword [0x1802bb878], 0xffffffff
jne 0x18002ae06
mov ecx, 0x3300df68
call fcn.18000cb40
mov rcx, qword [rax]
mov qword [0x1802bb5e8], rcx
lea rcx, [0x1802bb878]
call fcn.180076bf4
mov r8, rdi
call fcn.180037030
mov rbx, rax
test rax, rax
jne 0x18002ae21
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], eax
jmp 0x18002ae70
mov eax, dword [r14 + r15]
cmp dword [0x1802bb590], eax
jle 0x18002ae62
lea rcx, [0x1802bb590]
call fcn.180076c54
cmp dword [0x1802bb590], 0xffffffff
jne 0x18002ae62
mov ecx, 0x56e64b7d
call fcn.18000cb40
mov rcx, qword [rax]
mov qword [0x1802bb4c0], rcx
lea rcx, [0x1802bb590]
call fcn.180076bf4
mov rdx, rbx
lea rcx, [rsp + 0x50]
call qword [0x1802bb4c0]
movsd xmm0, qword [rsp + 0x50]
lea rdx, [rbp + 0x368]
mov eax, dword [rsp + 0x58]
lea rcx, [rbp + 0x20]
movsd qword [rbp + 0x20], xmm0
mov qword [rbp + 0x368], 0
mov dword [rbp + 0x28], eax
call fcn.180013de0
test al, al
je 0x18002b36e
cmp byte [0x180285475], 0
je 0x18002b330
xorps xmm0, xmm0
mov qword [rbp - 0x48], 0xf
xor r14d, r14d
lea rcx, [rbp + 0x70]
movups xmmword [rbp - 0x60], xmm0
xor edx, edx
mov byte [rbp - 0x60], r14b
mov r8d, pe_nt_image_headers64
mov qword [rbp - 0x50], r14
call sub.VCRUNTIME140.dll_memset
mov rax, qword [0x1802853e0]
movsd xmm6, qword [rsp + 0x50]
add rax, 0x40cbe0
mov ebx, dword [rsp + 0x58]
call rax
lea r8d, [r14 + 0x2f]
mov rcx, rax
lea rdx, [rbp - 0x20]
call fcn.180013590
lea rdx, str.Helicopter__1.0fm_
lea rcx, [rbp + 0x70]
movsd xmm0, qword [rax]
movss xmm1, dword [rax + 8]
movaps xmm2, xmm0
movaps xmm3, xmm0
movsd qword [rsp + 0x40], xmm0
shufps xmm3, xmm3, 0x55
subss xmm2, xmm6
movaps xmm0, xmm6
movsd qword [rsp + 0x40], xmm6
shufps xmm0, xmm0, 0x55
subss xmm3, xmm0
movd xmm0, ebx
subss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm2, xmm2
mulss xmm3, xmm3
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
sqrtss xmm0, xmm3
cvtps2pd xmm2, xmm0
movq r8, xmm2
call fcn.180037130
lea rax, [rbp + 0x70]
mov rsi, 0xffffffffffffffff
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], r14b
jne 0x18002af80
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18002afc9
cmp rdx, 0x10
lea rax, [rcx + rsi]
lea rbx, [rbp - 0x60]
mov qword [rbp - 0x50], rax
cmovae rbx, qword [rbp - 0x60]
lea rdx, [rbp + 0x70]
add rbx, rcx
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], r14b
jmp 0x18002afde
lea r9, [rbp + 0x70]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.180037e50
xorps xmm0, xmm0
mov qword [rbp - 0x70], r14
movups xmmword [rbp - 0x80], xmm0
xor edx, edx
mov byte [rbp - 0x80], r14b
mov r8d, pe_nt_image_headers64
mov qword [rbp - 0x68], 0xf
lea rcx, [rbp + 0x170]
call sub.VCRUNTIME140.dll_memset
cvttss2si r8d, xmm11
lea rdx, str.__dHP_
lea rcx, [rbp + 0x170]
call fcn.180037130
lea rax, [rbp + 0x170]
mov rsi, 0xffffffffffffffff
nop
inc rsi
cmp byte [rax + rsi], r14b
jne 0x18002b030
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18002b07c
cmp rdx, 0x10
lea rax, [rcx + rsi]
lea rbx, [rbp - 0x80]
mov qword [rbp - 0x70], rax
cmovae rbx, qword [rbp - 0x80]
lea rdx, [rbp + 0x170]
add rbx, rcx
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], r14b
jmp 0x18002b094
lea r9, [rbp + 0x170]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.180037e50
cmp qword [rbp - 0x48], 0x10
lea rax, [rbp - 0x60]
movaps xmm0, xmmword [0x18010bdd0]
lea r9, [rsp + 0x40]
cmovae rax, qword [rbp - 0x60]
movss xmm10, dword [rbp + 0x36c]
movss xmm9, dword [rbp + 0x368]
movaps xmm2, xmm10
mov rcx, qword [0x1802bb700]
movaps xmm1, xmm9
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm15
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
movaps xmmword [rsp + 0x40], xmm0
call fcn.1800158e0
cmp qword [rbp - 0x68], 0x10
lea rax, [rbp - 0x80]
movaps xmm0, xmmword [0x18010bbb0]
lea r9, [rsp + 0x40]
cmovae rax, qword [rbp - 0x80]
movaps xmm2, xmm10
addss xmm2, dword [0x18010b4e8]
mov rcx, qword [0x1802bb700]
movaps xmm1, xmm9
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm15
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movaps xmm0, xmmword [0x18010bae0]
lea rcx, [rsp + 0x40]
addss xmm10, dword [0x18010b4f4]
subss xmm9, dword [0x18010b514]
movaps xmmword [rsp + 0x40], xmm0
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0x370]
movaps xmm8, xmm9
mov dword [rsp + 0x28], r14d
addss xmm8, dword [0x18010b558]
movaps xmm7, xmm10
movss dword [rbp + 0x378], xmm9
addss xmm7, dword [0x18010b4b4]
mov r9d, eax
movss dword [rbp + 0x37c], xmm10
lea rdx, [rbp + 0x378]
movss dword [rsp + 0x20], xmm12
movss dword [rbp + 0x370], xmm8
movss dword [rbp + 0x374], xmm7
call fcn.180054f60
movaps xmm0, xmmword [0x18010bb40]
lea rcx, [rsp + 0x40]
movaps xmm6, xmm11
movaps xmmword [rsp + 0x40], xmm0
mulss xmm6, dword [0x18010af54]
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
addss xmm6, xmm9
mov dword [rsp + 0x28], r14d
lea r8, [rbp - 0x40]
mov r9d, eax
movss dword [rbp - 0x3c], xmm7
lea rdx, [rbp - 0x38]
movss dword [rbp - 0x38], xmm9
movss dword [rbp - 0x34], xmm10
movss dword [rbp - 0x40], xmm6
movss dword [rsp + 0x20], xmm12
call fcn.180054f60
movaps xmm0, xmmword [0x18010bae0]
lea rcx, [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
call fcn.18003b8a0
movss dword [rbp - 0x30], xmm8
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp - 0x30]
movss dword [rsp + 0x30], xmm14
lea rdx, [rbp - 0x28]
mov dword [rsp + 0x28], r14d
mov r9d, eax
movss dword [rsp + 0x20], xmm12
movss dword [rbp - 0x2c], xmm7
movss dword [rbp - 0x28], xmm9
movss dword [rbp - 0x24], xmm10
call fcn.180054e50
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18002b2e5
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b2e0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b3f8
call fcn.180077120
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], r14b
cmp rdx, 0x10
jb 0x18002b330
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b32b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b3f8
call fcn.180077120
comiss xmm11, xmm12
jbe 0x18002b36e
cmp byte [0x180285443], 0
jne 0x18002b36e
movsd xmm0, qword [rsp + 0x50]
lea rcx, [rsp + 0x60]
mov eax, dword [rsp + 0x58]
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x68], eax
call fcn.180017bc0
comiss xmm13, xmm0
jbe 0x18002b36e
movaps xmm13, xmm0
mov qword [0x1802853f0], rdi
mov r8, r12
mov rdx, rdi
call fcn.18001ac50
mov r8, r12
mov rdx, rdi
call fcn.18001b130
mov r8, r12
mov rdx, rdi
call fcn.18001b4a0
mov r8, r12
mov rdx, rdi
call fcn.18001b910
mov r8, r12
mov rdx, rdi
call fcn.18001bc80
mov r8, r12
mov rdx, rdi
call fcn.18001bff0
mov r8, r12
mov rdx, rdi
call fcn.18001c3a0
mov r8, r12
mov rdx, rdi
call fcn.18001c970
lea rbx, [0x1801012b0]
mov rdx, qword [rbp + 0x360]
mov rax, qword [rbp]
inc rdx
inc r13d
mov qword [rbp + 0x360], rdx
mov rax, qword [rax + 0x28]
cmp r13d, dword [rax + 0x10]
jge 0x18002b3ff
mov r8, qword [rbp + 8]
jmp 0x18002a570
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rsi, qword [rbp + 0x10]
movabs rbx, 0x7fffffff0000
mov r15d, dword [0x180284d10]
xor r14d, r14d
mov r12d, 4
cmp byte [0x18028543a], 0
je 0x18002b492
mov r8d, 0x2f
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.180013590
mov ecx, dword [0x1802bb658]
test ecx, ecx
je 0x18002b44d
sub ecx, 1
je 0x18002b44d
cmp ecx, 1
jne 0x18002b492
movsd xmm1, qword [rsp + 0x50]
lea r8, [rsp + 0x70]
movaps xmm0, xmmword [0x18010bdd0]
lea rcx, [rsp + 0x60]
mov eax, dword [rsp + 0x58]
movss xmm3, dword [0x18010af74]
movsd qword [rsp + 0x60], xmm1
movss xmm1, dword [0x180203fe8]
mov byte [rsp + 0x20], 0
movaps xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x68], eax
call qword [0x1802bb650]
test rsi, rsi
je 0x18002b622
mov r8d, 0x2f
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.180013590
ucomiss xmm12, dword [rax]
je 0x18002b4ee
mov r8d, 0x2f
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.180013590
ucomiss xmm12, dword [rax + 4]
je 0x18002b4ee
mov r8d, 0x2f
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.180013590
ucomiss xmm12, dword [rax + 8]
je 0x18002b4ee
mov rcx, qword [0x1802853d8]
jmp 0x18002b4f8
mov rcx, r14
mov qword [0x1802853d8], rcx
lea rdx, [rsi + 0x4a8]
cmp rdx, 0x40000
jbe 0x18002b544
lea rax, [rdx + 8]
cmp rax, rbx
jae 0x18002b544
mov rdx, qword [rdx]
add rdx, 0x2c0
cmp rdx, 0x40000
jbe 0x18002b544
lea rax, [rdx + 1]
cmp rax, rbx
jae 0x18002b544
cmp byte [rdx], 0
je 0x18002b544
cmp byte [0x180285435], 0
cmovne rcx, r14
mov qword [0x1802853d8], rcx
lea rdx, [rsi + 0x5f8]
cmp rdx, 0x40000
jbe 0x18002b561
lea rax, [rdx + 4]
cmp rax, rbx
jae 0x18002b561
mov eax, dword [rdx]
jmp 0x18002b564
mov eax, r14d
shr eax, 4
test al, 1
je 0x18002b57d
cmp byte [0x180285448], 0
cmovne rcx, r14
mov qword [0x1802853d8], rcx
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x18002b5b7
cmp dword [rsi + 0x598], ecx
jne 0x18002b5b7
mov rax, qword [0x1802853d8]
cmp byte [0x18016313e], 0
cmovne rax, r14
mov qword [0x1802853d8], rax
mov rax, qword gs:[0x58]
mov edx, r15d
mov edi, r12d
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x1802bb9e4], eax
jle 0x18002b607
lea rcx, [0x1802bb9e4]
call fcn.180076c54
cmp dword [0x1802bb9e4], 0xffffffff
jne 0x18002b607
mov ecx, 0x43f29029
call fcn.18000e300
lea rcx, [0x1802bb9e4]
mov qword [0x1802bb7e0], rax
call fcn.180076bf4
mov rax, qword [0x1802bb7e0]
movss xmm0, dword [rsi + rax]
comiss xmm0, xmm12
ja 0x18002b625
mov qword [0x1802853d8], r14
jmp 0x18002b62f
mov edi, r12d
cmp qword [0x1802853d8], 0
jne 0x18002b639
mov byte [0x180285434], 0
mov edi, r12d
mov rbx, qword [0x1802853f0]
test rbx, rbx
je 0x18002b723
mov rax, qword gs:[0x58]
mov rsi, rbx
mov edx, r15d
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x1802bb6f4], eax
jle 0x18002b6a0
lea rcx, [0x1802bb6f4]
call fcn.180076c54
cmp dword [0x1802bb6f4], 0xffffffff
jne 0x18002b699
mov ecx, 0x33f7a6a3
call fcn.18000e300
lea rcx, [0x1802bb6f4]
mov qword [0x1802bb510], rax
call fcn.180076bf4
mov rbx, qword [0x1802853f0]
mov rax, qword [0x1802bb510]
cmp byte [rsi + rax], 0
je 0x18002b6b7
mov rbx, r14
mov qword [0x1802853f0], rbx
test rbx, rbx
je 0x18002b720
mov rax, qword gs:[0x58]
mov edx, r15d
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x1802bb768], eax
jle 0x18002b70c
lea rcx, [0x1802bb768]
call fcn.180076c54
cmp dword [0x1802bb768], 0xffffffff
jne 0x18002b70c
mov ecx, 0x8bb6774c
call fcn.18000cb40
lea rcx, [0x1802bb768]
mov rdx, qword [rax]
mov qword [0x1802bb748], rdx
call fcn.180076bf4
mov r8, rbx
call fcn.180037050
mov rbx, qword [0x1802853f0]
test rax, rax
jne 0x18002b723
mov rbx, r14
cmp byte [0x180285428], 0
mov rax, qword [0x1802853d8]
cmovne rax, r14
cmp byte [0x180285443], 0
mov qword [0x1802853d8], rax
mov rax, qword [0x1802853e0]
cmovne rbx, r14
add rax, 0x40cbe0
mov qword [0x1802853f0], rbx
call rax
test rax, rax
je 0x18002b7ae
cmp byte [0x180285431], 0
je 0x18002b7ae
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov ecx, dword [rax + 0x598]
mov rax, qword [0x1802853d8]
test ecx, ecx
je 0x18002b793
cmp dword [rax + 0x598], ecx
je 0x18002b7ae
test rax, rax
je 0x18002b7ae
mov ecx, dword [0x180285508]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002b7ae
call fcn.180018170
movaps xmm11, xmmword [rsp + 0x3b0]
movaps xmm10, xmmword [rsp + 0x3c0]
movaps xmm15, xmmword [rsp + 0x370]
mov r13, qword [rsp + 0x418]
movaps xmm9, xmmword [rsp + 0x3d0]
movaps xmm8, xmmword [rsp + 0x3e0]
movaps xmm7, xmmword [rsp + 0x3f0]
movaps xmm6, xmmword [rsp + 0x400]
mov rdi, qword [rsp + 0x420]
movaps xmm12, xmmword [rsp + 0x3a0]
movaps xmm13, xmmword [rsp + 0x390]
movaps xmm14, xmmword [rsp + 0x380]
add rsp, 0x428
pop r15
pop r14
pop r12
pop rsi
pop rbx
pop rbp
ret
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe58]
sub rsp, 0xf18
movaps xmmword [rax - 0x58], xmm6
xor r13d, r13d
cmp byte [0x18028550f], r13b
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
xorps xmm15, xmm15
je 0x18002beec
mov ecx, dword [0x180285450]
mov eax, ecx
movss xmm3, dword [0x1802bb30c]
cdq
sub eax, edx
sar eax, 1
movd xmm11, eax
mov eax, dword [0x180285468]
cdq
sub eax, edx
sar eax, 1
comiss xmm3, dword [0x18010b570]
movd xmm12, eax
cvtdq2ps xmm12, xmm12
cvtdq2ps xmm11, xmm11
jbe 0x18002bc54
xorps xmm3, xmm3
addss xmm3, dword [0x18010b468]
movss xmm14, dword [0x18010af80]
mov edi, r13d
movss xmm10, dword [0x18010b18c]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mov dword [rbp + 0x37c], 0x3f800000
mov dword [rbp + 0x38c], 0x3f800000
movss dword [0x1802bb30c], xmm3
mulss xmm0, dword [0x18010af60]
movss dword [rbp + 0x120], xmm11
movss dword [rbp + 0x124], xmm12
cvttss2si eax, xmm0
movd xmm15, eax
cvtdq2ps xmm15, xmm15
movaps xmm13, xmm15
mulss xmm13, dword [0x18010b2d8]
nop dword [rax + rax]
mulss xmm3, xmm14
movd xmm2, edi
cvtdq2ps xmm2, xmm2
movaps xmm1, xmm2
mulss xmm2, xmm14
mulss xmm1, xmm14
addss xmm2, dword [0x18010b0e4]
addss xmm1, xmm3
addss xmm2, xmm3
movaps xmm0, xmm1
movaps xmm1, xmm2
call fcn.1800e1a53
movaps xmm1, xmm0
movaps xmm2, xmm0
shufps xmm2, xmm0, 0xe
mov ecx, 0x10
shufps xmm0, xmm0, 1
mulss xmm0, xmm15
mulss xmm1, xmm15
cvttss2si eax, xmm1
mov dword [rbp + 0x360], eax
cvttss2si eax, xmm0
movaps xmm0, xmm2
shufps xmm2, xmm2, 1
mov dword [rbp + 0x364], eax
mulss xmm0, xmm13
mulss xmm2, xmm13
cvttss2si eax, xmm0
mov dword [rbp + 0x368], eax
cvttss2si eax, xmm2
mov dword [rbp + 0x36c], eax
call fcn.1800770e4
mov r8d, 0x10
lea rdx, [rbp + 0x360]
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memmove
movd xmm0, dword [rbx + 4]
lea rcx, [rbp + 0x370]
movss xmm1, dword [0x1802040bc]
movaps xmm7, xmm12
movd xmm6, dword [rbx]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm6, xmm6
subss xmm7, xmm0
movss dword [rbp + 0x374], xmm1
movss xmm0, dword [0x1802040b8]
addss xmm6, xmm11
movss dword [rbp + 0x370], xmm0
movss xmm0, dword [0x1802040c0]
movss dword [rbp + 0x378], xmm0
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0x120]
mov r9d, eax
movss dword [rbp + 0x118], xmm6
lea r8, [rbp + 0x118]
movss dword [rbp + 0x11c], xmm7
movss dword [rsp + 0x20], xmm10
call fcn.180054cf0
movd xmm0, dword [rbx + 0xc]
lea rcx, [rbp + 0x380]
movd xmm8, dword [rbx + 8]
movaps xmm9, xmm12
movd xmm6, dword [rbx]
movaps xmm7, xmm12
movss xmm1, dword [0x1802040bc]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm8, xmm8
subss xmm9, xmm0
movss dword [rbp + 0x384], xmm1
movd xmm0, dword [rbx + 4]
addss xmm8, xmm11
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm6, xmm6
subss xmm7, xmm0
movss xmm0, dword [0x1802040b8]
movss dword [rbp + 0x380], xmm0
addss xmm6, xmm11
movss xmm0, dword [0x1802040c0]
movss dword [rbp + 0x388], xmm0
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0xd0]
mov r9d, eax
movss dword [rbp + 0x128], xmm8
lea r8, [rbp + 0x128]
movss dword [rbp + 0x12c], xmm9
movss dword [rbp + 0xd0], xmm6
movss dword [rbp + 0xd4], xmm7
movss dword [rsp + 0x20], xmm10
call fcn.180054cf0
mov edx, 0x10
mov rcx, rbx
add edi, 0x5a
call fcn.180077120
cmp edi, 0x168
jge 0x18002bee6
movss xmm3, dword [0x1802bb30c]
jmp 0x18002bcd0
xorps xmm15, xmm15
jmp 0x18002bef5
movss xmm10, dword [0x18010b18c]
mov rsi, qword [0x1802853d8]
call fcn.18002b830
mov rdi, qword [0x1802a6828]
mov r14d, 2
mov rbx, qword [0x1802a6820]
movss xmm11, dword [0x18010b4e8]
cmp rbx, rdi
je 0x18002c04e
movss xmm8, dword [0x18010b510]
movss xmm9, dword [0x18010b4c0]
movss xmm7, dword [0x18010b4e0]
mov ecx, dword [rbx + 0x18]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002c030
movaps xmm0, xmmword [0x18010bdd0]
lea rcx, [rbp + 0x580]
mov r10, qword [rbx]
mov r9, qword [rbx + 0x10]
movups xmmword [rbp + 0x580], xmm0
call fcn.18003b8a0
movss xmm1, dword [rbx + 0xc]
mov r11d, eax
movss xmm0, dword [rbx + 8]
addss xmm1, xmm8
mov rcx, qword [0x180285540]
addss xmm0, xmm9
movd xmm6, r14d
cvtdq2ps xmm6, xmm6
movss dword [rbp + 0x130], xmm0
addss xmm1, xmm6
movss dword [rbp + 0x134], xmm1
test eax, 0xff000000
je 0x18002c026
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r9 + r8], r13b
jne 0x18002bfc0
add r8, r9
cmp r9, r8
je 0x18002c026
test rcx, rcx
jne 0x18002bfde
mov rax, qword [r10 + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [r10 + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [rbp + 0x590]
movss dword [rsp + 0x40], xmm15
movaps xmm2, xmm7
mov qword [rsp + 0x38], r8
mov rdx, r10
mov qword [rsp + 0x30], r9
lea r9, [rbp + 0x130]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r11d
movups xmmword [rbp + 0x590], xmm0
call fcn.180058510
addss xmm6, xmm11
cvttss2si r14d, xmm6
add rbx, 0x20
cmp rbx, rdi
jne 0x18002bf41
mov rdi, qword [0x1802a6828]
mov rbx, qword [0x1802a6820]
cmp rbx, rdi
cmovne rdi, rbx
mov qword [0x1802a6828], rdi
call fcn.180020cc0
mov eax, dword [0x180285450]
movss xmm14, dword [0x18010b5c8]
cdq
movss xmm12, dword [0x18010b57c]
sub eax, edx
sar eax, 1
movd xmm8, eax
mov eax, dword [0x180285468]
cdq
sub eax, edx
sar eax, 1
cmp byte [0x1802854af], r13b
cvtdq2ps xmm8, xmm8
movd xmm9, eax
cvtdq2ps xmm9, xmm9
movss dword [rbp + 0xe60], xmm8
movss dword [rbp + 0xe68], xmm9
je 0x18002c195
movss xmm3, dword [0x180285458]
movaps xmm6, xmm9
divss xmm3, dword [0x18028544c]
subss xmm6, dword [0x18010b60c]
comiss xmm3, xmm14
movss xmm7, dword [0x18010b4b4]
movaps xmm1, xmm8
jb 0x18002c0fc
subss xmm1, dword [0x18010b64c]
movss dword [rsp + 0x20], xmm3
movaps xmm0, xmm12
unpcklps xmm1, xmm6
jmp 0x18002c122
subss xmm1, dword [0x18010b62c]
movss xmm0, dword [0x18010b634]
movaps xmm2, xmm9
subss xmm2, dword [0x18010b610]
movss dword [rsp + 0x20], xmm10
unpcklps xmm1, xmm2
unpcklps xmm0, xmm7
movq rdx, xmm1
movq r8, xmm0
call fcn.180016100
movss xmm3, dword [0x18028545c]
movaps xmm1, xmm8
divss xmm3, dword [0x180285454]
comiss xmm3, dword [0x18010b4bc]
jb 0x18002c169
subss xmm1, dword [0x18010b648]
movss xmm0, dword [0x18010b630]
movss dword [rsp + 0x20], xmm3
jmp 0x18002c180
subss xmm1, dword [0x18010b5e8]
movss xmm0, dword [0x18010b650]
movss dword [rsp + 0x20], xmm10
unpcklps xmm0, xmm7
unpcklps xmm1, xmm6
movq r8, xmm0
movq rdx, xmm1
call fcn.180016100
cmp byte [0x180285513], r13b
je 0x18002c566
movaps xmm0, xmmword [0x18010bdd0]
lea rcx, [rbp + 0x5a0]
movss xmm12, dword [0x18010b49c]
movaps xmm14, xmm9
movaps xmm11, xmm8
movdqa xmmword [rbp + 0x5a0], xmm0
addss xmm14, xmm12
addss xmm11, xmm12
call fcn.18003b8a0
movss xmm13, dword [0x18010b0c0]
lea rdx, [rbp + 0x148]
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0x140]
mov r9d, eax
movss dword [rsp + 0x20], xmm13
movss dword [rbp + 0x140], xmm11
movss dword [rbp + 0x144], xmm14
movss dword [rbp + 0x148], xmm8
movss dword [rbp + 0x14c], xmm9
call fcn.180054cf0
movaps xmm0, xmmword [0x18010bdd0]
lea rcx, [rbp + 0x5b0]
movaps xmm10, xmm9
movdqa xmmword [rbp + 0x5b0], xmm0
subss xmm10, xmm12
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0x158]
mov r9d, eax
movss dword [rbp + 0x150], xmm11
lea r8, [rbp + 0x150]
movss dword [rbp + 0x154], xmm10
movss dword [rbp + 0x158], xmm8
movss dword [rbp + 0x15c], xmm9
movss dword [rsp + 0x20], xmm13
call fcn.180054cf0
movaps xmm0, xmmword [0x18010bdd0]
lea rcx, [rbp + 0x5c0]
movaps xmm9, xmm8
movdqa xmmword [rbp + 0x5c0], xmm0
subss xmm9, xmm12
call fcn.18003b8a0
movss xmm6, dword [rbp + 0xe68]
lea rdx, [rbp + 0x70]
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0x160]
mov r9d, eax
movss dword [rbp + 0x74], xmm6
movss dword [rbp + 0x160], xmm9
movss dword [rbp + 0x164], xmm10
movss dword [rbp + 0x70], xmm8
movss dword [rsp + 0x20], xmm13
call fcn.180054cf0
movaps xmm0, xmmword [0x18010bdd0]
lea rcx, [rbp + 0x5d0]
movdqa xmmword [rbp + 0x5d0], xmm0
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0x80]
mov r9d, eax
movss dword [rbp + 0x78], xmm9
lea r8, [rbp + 0x78]
movss dword [rbp + 0x7c], xmm14
movss dword [rbp + 0x80], xmm8
movss dword [rbp + 0x84], xmm6
movss dword [rsp + 0x20], xmm13
call fcn.180054cf0
movss xmm0, dword [0x180204058]
lea rcx, [rbp + 0x390]
movss xmm1, dword [0x18020405c]
movaps xmm8, xmm14
movss dword [rbp + 0x390], xmm0
addss xmm8, xmm12
movss xmm0, dword [0x180204060]
movaps xmm6, xmm11
movss dword [rbp + 0x398], xmm0
addss xmm6, xmm12
movss dword [rbp + 0x394], xmm1
mov dword [rbp + 0x39c], 0x3f800000
call fcn.18003b8a0
movss dword [rbp + 0x88], xmm6
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0x88]
mov r9d, eax
movss dword [rbp + 0x8c], xmm8
lea rdx, [rbp + 0x90]
movss dword [rbp + 0x90], xmm11
movss dword [rbp + 0x94], xmm14
movss dword [rsp + 0x20], xmm13
call fcn.180054cf0
movss xmm0, dword [0x180204058]
lea rax, [rbp + 0x3a0]
movss xmm1, dword [0x18020405c]
movaps xmm7, xmm10
mov byte [rsp + 0x38], r13b
subss xmm7, xmm12
movss dword [rsp + 0x30], xmm13
movaps xmm3, xmm6
movss dword [rbp + 0x3a0], xmm0
movaps xmm2, xmm10
movss xmm0, dword [0x180204060]
movss dword [rbp + 0x3a4], xmm1
movaps xmm1, xmm11
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movss dword [rbp + 0x3a8], xmm0
mov dword [rbp + 0x3ac], 0x3f800000
call fcn.1800157b0
movss xmm0, dword [0x180204058]
lea rax, [rbp + 0x3b0]
movss xmm1, dword [0x18020405c]
movaps xmm6, xmm9
mov byte [rsp + 0x38], r13b
subss xmm6, xmm12
movss dword [rsp + 0x30], xmm13
movaps xmm2, xmm10
movss dword [rbp + 0x3b0], xmm0
movss xmm0, dword [0x180204060]
movss dword [rbp + 0x3b4], xmm1
movaps xmm1, xmm9
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
movss dword [rbp + 0x3b8], xmm0
movss dword [rsp + 0x20], xmm7
mov dword [rbp + 0x3bc], 0x3f800000
call fcn.1800157b0
movss xmm0, dword [0x180204058]
lea rax, [rbp + 0x3c0]
movss xmm2, dword [0x18020405c]
movaps xmm3, xmm6
mov byte [rsp + 0x38], r13b
movaps xmm1, xmm9
movss dword [rsp + 0x30], xmm13
movss dword [rbp + 0x3c0], xmm0
movss xmm0, dword [0x180204060]
movss dword [rbp + 0x3c4], xmm2
movaps xmm2, xmm14
mov qword [rsp + 0x28], rax
movss dword [rbp + 0x3c8], xmm0
movss dword [rsp + 0x20], xmm8
mov dword [rbp + 0x3cc], 0x3f800000
call fcn.1800157b0
movss xmm9, dword [rbp + 0xe68]
movss xmm8, dword [rbp + 0xe60]
movss xmm12, dword [0x18010b57c]
movss xmm14, dword [0x18010b5c8]
cmp byte [0x180285512], r13b
je 0x18002caca
movss xmm1, dword [0x1802040a8]
lea rcx, [rbp + 0x3d0]
movss xmm2, dword [0x1802040ac]
movaps xmm7, xmm8
movss xmm3, dword [0x1802040b0]
addss xmm7, dword [0x18010b4a0]
mov dword [rbp - 0x74], 0x3f800000
movups xmm0, xmmword [rbp - 0x80]
mov dword [rbp + 0x3dc], 0x3f800000
movss dword [rbp + 0x3d0], xmm1
movss xmm0, xmm1
movss dword [rbp + 0x3d4], xmm2
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
movss dword [rbp + 0x3d8], xmm3
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
movss dword [rbp + 0x1e0], xmm1
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x80], xmm0
mov dword [rbp + 0x1ec], r13d
movdqa xmmword [rbp + 0x5e0], xmm0
movss dword [rbp + 0x1e4], xmm2
movss dword [rbp + 0x1e8], xmm3
movss dword [rbp + 0x1f0], xmm1
movss dword [rbp + 0x1f4], xmm2
movss dword [rbp + 0x1f8], xmm3
mov dword [rbp + 0x1fc], r13d
call fcn.18003b8a0
lea rcx, [rbp + 0x1e0]
mov r10d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x1f0]
mov r9d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x5e0]
mov r8d, eax
call fcn.18003b8a0
movss xmm10, dword [0x18010b18c]
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x1802bb4d0]
movaps xmm0, xmm7
addss xmm0, dword [0x18010b4a0]
mov dword [rsp + 0x30], r10d
movaps xmm11, xmm9
mov dword [rsp + 0x28], r9d
addss xmm11, xmm10
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp + 0x98]
movss dword [rbp + 0xa0], xmm7
movss dword [rbp + 0x98], xmm0
movss dword [rbp + 0xa4], xmm9
movss dword [rbp + 0x9c], xmm11
call fcn.180055110
movss xmm1, dword [0x1802040a8]
movaps xmm6, xmm8
movss xmm2, dword [0x1802040ac]
movss xmm3, dword [0x1802040b0]
subss xmm6, dword [0x18010b490]
mov dword [rbp - 0x74], 0x3f800000
movups xmm0, xmmword [rbp - 0x80]
mov dword [rbp + 0x20c], 0x3f800000
movss dword [rbp + 0x200], xmm1
movss xmm0, xmm1
movss dword [rbp + 0x204], xmm2
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
movss dword [rbp + 0x208], xmm3
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
movss dword [rbp + 0x210], xmm1
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x80], xmm0
mov dword [rbp + 0x21c], r13d
movss dword [rbp + 0x214], xmm2
movss dword [rbp + 0x218], xmm3
movss dword [rbp + 0x220], xmm1
movss dword [rbp + 0x224], xmm2
movss dword [rbp + 0x228], xmm3
mov dword [rbp + 0x22c], r13d
lea rcx, [rbp + 0x200]
movdqa xmmword [rbp + 0x5f0], xmm0
call fcn.18003b8a0
lea rcx, [rbp + 0x210]
mov r10d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x220]
mov r9d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x5f0]
mov r8d, eax
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0xb0]
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm6
subss xmm0, dword [0x18010b4a0]
mov dword [rsp + 0x28], r9d
mov r9d, eax
mov dword [rsp + 0x20], r8d
lea r8, [rbp + 0xa8]
movss dword [rbp + 0xac], xmm11
movss dword [rbp + 0xb0], xmm6
movss dword [rbp + 0xa8], xmm0
movss dword [rbp + 0xb4], xmm9
call fcn.180055110
movss xmm2, dword [0x1802040a8]
lea rcx, [rbp + 0x230]
movss xmm3, dword [0x1802040ac]
movaps xmm6, xmm9
movss xmm4, dword [0x1802040b0]
subss xmm6, dword [0x18010b490]
mov dword [rbp - 0x74], 0x3f800000
movups xmm0, xmmword [rbp - 0x80]
mov dword [rbp - 0x54], 0x3f800000
movups xmm1, xmmword [rbp - 0x60]
mov dword [rbp + 0x23c], r13d
movss xmm0, xmm2
movss dword [rbp + 0x230], xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x80], xmm0
mov dword [rbp + 0x24c], r13d
movdqa xmmword [rbp + 0x600], xmm0
movups xmmword [rbp - 0x60], xmm1
movdqa xmmword [rbp + 0x610], xmm1
movss dword [rbp + 0x234], xmm3
movss dword [rbp + 0x238], xmm4
movss dword [rbp + 0x240], xmm2
movss dword [rbp + 0x244], xmm3
movss dword [rbp + 0x248], xmm4
call fcn.18003b8a0
lea rcx, [rbp + 0x240]
mov r10d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x600]
mov r9d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x610]
mov r8d, eax
call fcn.18003b8a0
movss xmm1, dword [rbp + 0xe60]
addss xmm8, xmm10
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm6
subss xmm0, dword [0x18010b4a0]
mov dword [rsp + 0x28], r9d
movss dword [rbp + 0xc0], xmm1
movss dword [rbp + 0xb8], xmm8
movss dword [rbp + 0xc4], xmm6
movss dword [rbp + 0xbc], xmm0
mov dword [rsp + 0x20], r8d
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0xb8]
mov r9d, eax
lea rdx, [rbp + 0xc0]
call fcn.180055110
movss xmm2, dword [0x1802040a8]
lea rcx, [rbp + 0x250]
movss xmm3, dword [0x1802040ac]
movaps xmm7, xmm9
movss xmm4, dword [0x1802040b0]
addss xmm7, dword [0x18010b4a0]
mov dword [rbp - 0x74], 0x3f800000
movups xmm0, xmmword [rbp - 0x80]
mov dword [rbp - 0x54], 0x3f800000
movups xmm1, xmmword [rbp - 0x60]
mov dword [rbp + 0x25c], r13d
movss xmm0, xmm2
movss dword [rbp + 0x250], xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x80], xmm0
mov dword [rbp + 0x26c], r13d
movdqa xmmword [rbp + 0x620], xmm0
movups xmmword [rbp - 0x60], xmm1
movdqa xmmword [rbp + 0x630], xmm1
movss dword [rbp + 0x254], xmm3
movss dword [rbp + 0x258], xmm4
movss dword [rbp + 0x260], xmm2
movss dword [rbp + 0x264], xmm3
movss dword [rbp + 0x268], xmm4
call fcn.18003b8a0
lea rcx, [rbp + 0x260]
mov r10d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x620]
mov r9d, eax
call fcn.18003b8a0
lea rcx, [rbp + 0x630]
mov r8d, eax
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0x138]
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm7
addss xmm0, dword [0x18010b4a0]
mov dword [rsp + 0x28], r9d
mov r9d, eax
movss dword [rbp + 0xc8], xmm8
movss xmm8, dword [rbp + 0xe60]
mov dword [rsp + 0x20], r8d
lea r8, [rbp + 0xc8]
movss dword [rbp + 0xcc], xmm0
movss dword [rbp + 0x138], xmm8
movss dword [rbp + 0x13c], xmm7
call fcn.180055110
jmp 0x18002cadc
movss xmm10, dword [0x18010b18c]
movaps xmm11, xmm9
addss xmm11, xmm10
cmp byte [0x180285510], r13b
movss xmm13, dword [0x18010b3d0]
je 0x18002cb65
movss xmm0, dword [0x1802040d8]
lea rcx, [rbp + 0x270]
movss xmm1, dword [0x1802040dc]
movss dword [rbp + 0x270], xmm0
movss xmm0, dword [0x1802040e0]
movss dword [rbp + 0x278], xmm0
movss dword [rbp + 0x274], xmm1
mov dword [rbp + 0x27c], 0x3f800000
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0xd8]
mov r9d, eax
movss dword [rbp + 0xd8], xmm8
movaps xmm2, xmm13
movss dword [rbp + 0xdc], xmm11
mov dword [rsp + 0x20], r13d
call fcn.180055680
cmp byte [0x180285511], r13b
je 0x18002cd4d
movss xmm0, dword [0x180204098]
lea rcx, [rbp + 0x280]
movss xmm1, dword [0x18020409c]
movaps xmm6, xmm8
movss xmm8, dword [0x18010b4c8]
movss dword [rbp + 0x280], xmm0
addss xmm6, xmm8
movss xmm0, dword [0x1802040a0]
movss dword [rbp + 0x288], xmm0
movss dword [rbp + 0x284], xmm1
mov dword [rbp + 0x28c], 0x3f800000
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0xe0]
movaps xmm0, xmm6
mov dword [rsp + 0x28], r13d
movaps xmm7, xmm9
movss dword [rbp + 0xe8], xmm6
addss xmm7, dword [0x18010b490]
addss xmm0, xmm8
movss dword [rbp + 0xec], xmm9
mov r9d, eax
movss dword [rsp + 0x20], xmm15
lea rdx, [rbp + 0xe8]
movss dword [rbp + 0xe4], xmm7
movss dword [rbp + 0xe0], xmm0
call fcn.180054f60
movss xmm0, dword [0x180204098]
lea rcx, [rbp + 0x290]
movss xmm1, dword [0x18020409c]
movss xmm6, dword [rbp + 0xe60]
movss dword [rbp + 0x290], xmm0
subss xmm6, xmm8
movss xmm0, dword [0x1802040a0]
movss dword [rbp + 0x298], xmm0
movss dword [rbp + 0x294], xmm1
mov dword [rbp + 0x29c], 0x3f800000
call fcn.18003b8a0
mov rcx, qword [0x1802bb4d0]
lea r8, [rbp + 0xf0]
movaps xmm0, xmm6
mov dword [rsp + 0x28], r13d
subss xmm0, xmm8
movss dword [rbp + 0xf4], xmm7
mov r9d, eax
movss dword [rbp + 0xf8], xmm6
lea rdx, [rbp + 0xf8]
movss dword [rbp + 0xfc], xmm9
movss dword [rsp + 0x20], xmm15
movss dword [rbp + 0xf0], xmm0
call fcn.180054f60
movss xmm0, dword [0x180204098]
lea rcx, [rbp + 0x2a0]
movss xmm1, dword [0x18020409c]
movss dword [rbp + 0x2a0], xmm0
movss xmm0, dword [0x1802040a0]
movss dword [rbp + 0x2a8], xmm0
movss dword [rbp + 0x2a4], xmm1
mov dword [rbp + 0x2ac], 0x3f800000
call fcn.18003b8a0
movss xmm8, dword [rbp + 0xe60]
lea rdx, [rbp + 0x100]
mov rcx, qword [0x1802bb4d0]
mov r9d, eax
movaps xmm2, xmm13
movss dword [rbp + 0x100], xmm8
movss dword [rbp + 0x104], xmm11
mov dword [rsp + 0x20], r13d
call fcn.180055680
cmp byte [0x18028543b], r13b
je 0x18002cde3
movss xmm0, dword [0x180204088]
lea rcx, [rbp + 0x2b0]
movss xmm1, dword [0x18020408c]
movss dword [rbp + 0x2b0], xmm0
movss xmm0, dword [0x180204090]
movss dword [rbp + 0x2b8], xmm0
movss dword [rbp + 0x2b4], xmm1
mov dword [rbp + 0x2bc], 0x3f800000
call fcn.18003b8a0
movss xmm0, dword [0x18010b220]
lea rdx, [rbp + 0x108]
movss xmm2, dword [0x180204000]
mov r9d, eax
mov rcx, qword [0x1802bb4d0]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
movss dword [rbp + 0x108], xmm8
movss dword [rbp + 0x10c], xmm9
call fcn.1800555a0
cmp qword [0x1802853d8], r13
movss xmm6, dword [0x180204000]
je 0x18002ce1a
mov rcx, rsi
call fcn.180017b30
comiss xmm6, xmm0
jae 0x18002ce1a
mov rax, qword [0x1802853d8]
cmp byte [0x180285434], r13b
cmove rax, r13
mov qword [0x1802853d8], rax
mov rcx, qword [0x1802853f0]
test rcx, rcx
je 0x18002ce77
call fcn.180012120
lea rdx, [rbp + 0x400]
mov rcx, rax
call fcn.180012080
movsd xmm0, qword [rbp + 0x400]
lea rcx, [rbp + 0x410]
mov eax, dword [rbp + 0x408]
movsd qword [rbp + 0x410], xmm0
mov dword [rbp + 0x418], eax
call fcn.180017bc0
mov rax, qword [0x1802853f0]
comiss xmm0, xmm6
cmova rax, r13
mov qword [0x1802853f0], rax
mov rbx, qword [0x1802853d8]
mov r15d, dword [0x180284d10]
mov r12d, 4
test rbx, rbx
je 0x18002cee8
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r15*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1802bb6f4], eax
jle 0x18002cedb
lea rcx, [0x1802bb6f4]
call fcn.180076c54
cmp dword [0x1802bb6f4], 0xffffffff
jne 0x18002cedb
mov ecx, 0x33f7a6a3
call fcn.18000e300
lea rcx, [0x1802bb6f4]
mov qword [0x1802bb510], rax
call fcn.180076bf4
mov rax, qword [0x1802bb510]
cmp byte [rax + rbx], r13b
je 0x18002ceef
mov qword [0x1802853d8], r13
mov rbx, qword [0x1802853f0]
test rbx, rbx
je 0x18002cf53
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r15*8]
mov eax, dword [r12 + rcx]
cmp dword [0x1802bb6f4], eax
jle 0x18002cf46
lea rcx, [0x1802bb6f4]
call fcn.180076c54
cmp dword [0x1802bb6f4], 0xffffffff
jne 0x18002cf46
mov ecx, 0x33f7a6a3
call fcn.18000e300
lea rcx, [0x1802bb6f4]
mov qword [0x1802bb510], rax
call fcn.180076bf4
mov rax, qword [0x1802bb510]
cmp byte [rbx + rax], r13b
je 0x18002cf5a
mov qword [0x1802853f0], r13
movzx eax, byte [0x18028542b]
test al, al
je 0x18002d25f
movss xmm0, dword [0x1802bb0c8]
ucomiss xmm0, xmm15
jne 0x18002cf97
movss xmm0, dword [0x1802bb0cc]
ucomiss xmm0, xmm15
jne 0x18002cf97
movss xmm0, dword [0x1802bb0d0]
ucomiss xmm0, xmm15
je 0x18002d0d8
cmp qword [0x1802853d8], r13
je 0x18002d0d8
xorps xmm0, xmm0
mov qword [rbp + 0x60], r13
movups xmmword [rbp + 0x50], xmm0
xor edx, edx
mov byte [rbp + 0x50], r13b
mov r8d, pe_nt_image_headers64
mov qword [rbp + 0x68], 0xf
lea rcx, [rbp + 0x970]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.target_manipulated
lea rcx, [rbp + 0x970]
call fcn.180037130
lea rax, [rbp + 0x970]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002cff0
mov rcx, qword [rbp + 0x68]
mov r14, qword [rbp + 0x60]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18002d03e
cmp rcx, 0x10
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x50]
mov qword [rbp + 0x60], rax
cmovae rbx, qword [rbp + 0x50]
lea rdx, [rbp + 0x970]
mov r8, rdi
lea rcx, [rbx + r14]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov byte [rax + r14], r13b
jmp 0x18002d056
lea r9, [rbp + 0x970]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.180037e50
cmp qword [rbp + 0x68], 0x10
lea rax, [rbp + 0x50]
movaps xmm0, xmmword [0x18010baf0]
lea r9, [rbp + 0x640]
cmovae rax, qword [rbp + 0x50]
movaps xmm2, xmm9
subss xmm2, dword [0x18010b558]
movss xmm6, dword [0x18010b4e0]
movaps xmm1, xmm8
mov rcx, qword [0x1802bb700]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285538]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp + 0x640], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
lea rcx, [rbp + 0x50]
call fcn.180036010
movzx eax, byte [0x18028542b]
jmp 0x18002d0e0
movss xmm6, dword [0x18010b4e0]
test al, al
je 0x18002d25f
mov ecx, dword [0x180285500]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002d25f
cmp byte [0x180285427], r13b
je 0x18002d25f
xorps xmm0, xmm0
mov qword [rbp + 0x20], r13
movups xmmword [rbp + 0x10], xmm0
xor edx, edx
mov byte [rbp + 0x10], r13b
mov r8d, pe_nt_image_headers64
mov qword [rbp + 0x28], 0xf
lea rcx, [rbp + 0xa70]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.manipulator_angles:_123123123123123123123123123123m
lea rcx, [rbp + 0xa70]
call fcn.180037130
lea rax, [rbp + 0xa70]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002d156
mov rcx, qword [rbp + 0x28]
mov r14, qword [rbp + 0x20]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18002d1a4
cmp rcx, 0x10
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x10]
mov qword [rbp + 0x20], rax
cmovae rbx, qword [rbp + 0x10]
lea rdx, [rbp + 0xa70]
mov r8, rdi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r14]
mov byte [rax + rbx], r13b
jmp 0x18002d1bc
lea r9, [rbp + 0xa70]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x10]
call fcn.180037e50
cmp qword [rbp + 0x28], 0x10
lea rax, [rbp + 0x10]
movaps xmm0, xmmword [0x18010baf0]
lea r9, [rbp + 0x650]
cmovae rax, qword [rbp + 0x10]
movaps xmm2, xmm9
mov rcx, qword [0x1802bb700]
subss xmm2, xmm14
mov qword [rsp + 0x38], rax
movaps xmm1, xmm8
mov rax, qword [0x180285538]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp + 0x650], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x18002d25f
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d25a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d25a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180077120
cmp byte [0x180285483], r13b
je 0x18002d58a
xor edx, edx
xorps xmm0, xmm0
cmp qword [0x1802853d8], r13
mov r8d, pe_nt_image_headers64
je 0x18002d408
movups xmmword [rbp - 0x10], xmm0
lea rcx, [rbp + 0xb70]
mov byte [rbp - 0x10], r13b
mov qword [rbp], r13
mov qword [rbp + 8], 0xf
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
call fcn.180013250
mov r8, rax
lea rdx, str.PIDORAS:__ls
lea rcx, [rbp + 0xb70]
call fcn.180037130
lea rax, [rbp + 0xb70]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002d2d0
mov rcx, qword [rbp + 8]
mov r14, qword [rbp]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18002d31e
cmp rcx, 0x10
lea rax, [r14 + rdi]
lea rbx, [rbp - 0x10]
mov qword [rbp], rax
cmovae rbx, qword [rbp - 0x10]
lea rdx, [rbp + 0xb70]
mov r8, rdi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + rdi]
mov byte [rax + rbx], r13b
jmp 0x18002d336
lea r9, [rbp + 0xb70]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.180037e50
movss xmm0, dword [0x180204008]
lea rax, [rbp - 0x10]
movss xmm1, dword [0x18020400c]
lea r9, [rbp - 0x20]
addss xmm9, dword [0x18010b4d0]
cmp qword [rbp + 8], 0x10
mov rcx, qword [0x1802bb700]
cmovae rax, qword [rbp - 0x10]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285538]
movaps xmm2, xmm9
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [0x180204010]
movss dword [rbp - 0x1c], xmm1
movaps xmm1, xmm8
movss dword [rbp - 0x18], xmm0
movss xmm0, dword [0x18010b4e0]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rbp - 0x14], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x18002d58a
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d585
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d585
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rbp + 0x870]
mov byte [rsp + 0x60], r13b
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 0xf
call sub.VCRUNTIME140.dll_memset
lea rdx, str.NO_PIDORAS_:C
lea rcx, [rbp + 0x870]
call fcn.180037130
lea rax, [rbp + 0x870]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002d450
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18002d4a1
cmp rdx, 0x10
lea rax, [rcx + rdi]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmovae rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x870]
add rbx, rcx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], r13b
jmp 0x18002d4ba
lea r9, [rbp + 0x870]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.180037e50
movss xmm0, dword [0x180204008]
lea rax, [rsp + 0x60]
movss xmm1, dword [0x18020400c]
lea r9, [rbp - 0x20]
addss xmm9, dword [0x18010b4d0]
cmp qword [rsp + 0x78], 0x10
mov rcx, qword [0x1802bb700]
cmovae rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285538]
movaps xmm2, xmm9
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [0x180204010]
movss dword [rbp - 0x1c], xmm1
movaps xmm1, xmm8
movss dword [rbp - 0x18], xmm0
movss xmm0, dword [0x18010b4e0]
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rbp - 0x14], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18002d58a
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d585
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d585
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180077120
cmp byte [0x1802854dd], r13b
movss xmm9, dword [0x18010b04c]
je 0x18002da7d
mov rax, qword gs:[0x58]
mov rbx, qword [rax + r15*8]
mov eax, dword [rbx + r12]
cmp dword [0x1802bb9f0], eax
jle 0x18002d5ed
lea rcx, [0x1802bb9f0]
call fcn.180076c54
cmp dword [0x1802bb9f0], 0xffffffff
jne 0x18002d5ed
movd xmm0, dword [0x180285450]
lea rcx, [0x1802bb9f0]
cvtdq2ps xmm0, xmm0
movss dword [0x1802bb388], xmm0
call fcn.180076bf4
mov eax, dword [rbx + r12]
cmp dword [0x1802bb568], eax
jle 0x18002d62d
lea rcx, [0x1802bb568]
call fcn.180076c54
cmp dword [0x1802bb568], 0xffffffff
jne 0x18002d62d
movd xmm0, dword [0x180285468]
lea rcx, [0x1802bb568]
cvtdq2ps xmm0, xmm0
movss dword [0x1802bb570], xmm0
call fcn.180076bf4
mov rax, qword [0x1802853e0]
movss xmm7, dword [0x1802bb388]
add rax, 0x40cbe0
movss xmm13, dword [0x1802bb570]
mulss xmm7, xmm9
call rax
mov r8d, 0x2f
mov qword [rbp + 0x170], r13
lea rdx, [rbp + 0x810]
mov dword [rbp + 0x178], r13d
mov rcx, rax
mov qword [rbp + 0x1d0], r13
mov dword [rbp + 0x1d8], r13d
mov qword [rbp + 0x180], r13
mov dword [rbp + 0x188], r13d
call fcn.180013590
lea r9, [rbp + 0x180]
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x770]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
mov dword [rbp + 0x428], eax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x420], xmm0
call fcn.180013f50
movsd xmm6, qword [rbp + 0x780]
lea rdx, [rbp + 0xe68]
mov ebx, dword [rbp + 0x788]
lea rcx, [rbp + 0x430]
movsd qword [rbp + 0x430], xmm6
mov qword [rbp + 0xe68], r13
mov dword [rbp + 0x438], ebx
call fcn.180013de0
test al, al
je 0x18002da7d
cmp byte [rbp + 0x770], r13b
je 0x18002da7d
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x660]
movss xmm11, dword [rbp + 0xe68]
movaps xmm2, xmm13
movss xmm8, dword [rbp + 0xe6c]
movaps xmm3, xmm11
mov byte [rsp + 0x38], r13b
movaps xmm1, xmm7
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x660], xmm0
call fcn.1800157b0
lea rax, [rbp + 0x190]
mov qword [rbp + 0x190], r13
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x440]
lea rax, [rbp + 0x1a0]
mov dword [rbp + 0x198], r13d
lea rdx, [rbp + 0x450]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x798]
mov qword [rbp + 0x1a0], r13
mov dword [rbp + 0x1a8], r13d
movsd qword [rbp + 0x440], xmm6
mov dword [rbp + 0x448], ebx
movsd qword [rbp + 0x450], xmm6
mov dword [rbp + 0x458], ebx
call fcn.180013f50
movsd xmm7, qword [rbp + 0x7a8]
lea rdx, [rbp + 0xe60]
mov edi, dword [rbp + 0x7b0]
lea rcx, [rbp + 0x460]
movsd qword [rbp + 0x460], xmm7
mov qword [rbp + 0xe60], r13
mov dword [rbp + 0x468], edi
call fcn.180013de0
test al, al
je 0x18002da7d
cmp byte [rbp + 0x798], r13b
je 0x18002da7d
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x670]
movss xmm14, dword [rbp + 0xe64]
movaps xmm2, xmm8
movss xmm3, dword [rbp + 0xe60]
movaps xmm1, xmm11
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm14
movdqa xmmword [rbp + 0x670], xmm0
call fcn.1800157b0
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x1b0], r13
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x480]
lea rax, [rbp + 0x470]
mov dword [rbp + 0x1b8], r13d
lea rdx, [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x7c0]
movsd qword [rbp + 0x470], xmm7
mov dword [rbp + 0x478], edi
movsd qword [rbp + 0x480], xmm6
mov dword [rbp + 0x488], ebx
movsd qword [rbp + 0x490], xmm7
mov dword [rbp + 0x498], edi
call fcn.180013f50
movsd xmm8, qword [rbp + 0x7d0]
lea rdx, [rbp + 0xe70]
mov r14d, dword [rbp + 0x7d8]
lea rcx, [rbp + 0x4a0]
movsd qword [rbp + 0x4a0], xmm8
mov qword [rbp + 0xe70], r13
mov dword [rbp + 0x4a8], r14d
call fcn.180013de0
test al, al
je 0x18002da7d
cmp byte [rbp + 0x7c0], r13b
je 0x18002da7d
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x680]
movss xmm13, dword [rbp + 0xe70]
movaps xmm2, xmm14
movss xmm11, dword [rbp + 0xe74]
movaps xmm3, xmm13
movss xmm1, dword [rbp + 0xe60]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movdqa xmmword [rbp + 0x680], xmm0
call fcn.1800157b0
lea rax, [rbp + 0x4b0]
movsd qword [rbp + 0x4b0], xmm8
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x4d0]
lea rax, [rbp + 0x4c0]
mov dword [rbp + 0x4b8], r14d
lea rdx, [rbp + 0x4e0]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x7e8]
movsd qword [rbp + 0x4c0], xmm7
mov dword [rbp + 0x4c8], edi
movsd qword [rbp + 0x4d0], xmm6
mov dword [rbp + 0x4d8], ebx
movsd qword [rbp + 0x4e0], xmm8
mov dword [rbp + 0x4e8], r14d
call fcn.180013f50
movsd xmm0, qword [rbp + 0x7f8]
lea rdx, [rbp + 0xe78]
mov eax, dword [rbp + 0x800]
lea rcx, [rbp + 0x3f0]
movsd qword [rbp + 0x3f0], xmm0
mov qword [rbp + 0xe78], r13
mov dword [rbp + 0x3f8], eax
call fcn.180013de0
test al, al
je 0x18002da7d
cmp byte [rbp + 0x7e8], r13b
je 0x18002da7d
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x690]
movss xmm3, dword [rbp + 0xe78]
movaps xmm2, xmm11
mov byte [rsp + 0x38], r13b
movaps xmm1, xmm13
movss dword [rsp + 0x30], xmm10
movdqa xmmword [rbp + 0x690], xmm0
movss xmm0, dword [rbp + 0xe7c]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.1800157b0
cmp byte [0x180285403], r13b
je 0x18002e071
cmp qword [0x1802853d8], r13
je 0x18002e071
mov rcx, rsi
call fcn.1800125c0
test al, al
je 0x18002e071
mov rax, qword gs:[0x58]
mov rbx, qword [rax + r15*8]
mov eax, dword [rbx + r12]
cmp dword [0x1802bb7d0], eax
jle 0x18002daf4
lea rcx, [0x1802bb7d0]
call fcn.180076c54
cmp dword [0x1802bb7d0], 0xffffffff
jne 0x18002daf4
movd xmm0, dword [0x180285450]
lea rcx, [0x1802bb7d0]
cvtdq2ps xmm0, xmm0
movss dword [0x1802bb858], xmm0
call fcn.180076bf4
mov eax, dword [rbx + r12]
cmp dword [0x1802bba58], eax
jle 0x18002db34
lea rcx, [0x1802bba58]
call fcn.180076c54
cmp dword [0x1802bba58], 0xffffffff
jne 0x18002db34
movd xmm0, dword [0x180285468]
lea rcx, [0x1802bba58]
cvtdq2ps xmm0, xmm0
movss dword [0x1802bb50c], xmm0
call fcn.180076bf4
mov eax, dword [rbx + r12]
cmp dword [0x1802bb348], eax
jle 0x18002db68
lea rcx, [0x1802bb348]
call fcn.180076c54
cmp dword [0x1802bb348], 0xffffffff
jne 0x18002db68
lea rcx, [0x1802bb348]
mov qword [0x1802bb770], r13
call fcn.180076bf4
mov eax, dword [0x18028540c]
test eax, eax
jne 0x18002db99
movss xmm0, dword [0x1802bb858]
mulss xmm0, xmm9
movss dword [0x1802bb770], xmm0
movss xmm0, dword [0x1802bb50c]
movss dword [0x1802bb774], xmm0
jmp 0x18002dbc8
cmp eax, 1
jne 0x18002dbc8
movss xmm1, dword [0x1802bb50c]
movss xmm0, dword [0x1802bb858]
mulss xmm1, xmm9
mulss xmm0, xmm9
movss dword [0x1802bb774], xmm1
movss dword [0x1802bb770], xmm0
mov r8d, 0x12
mov qword [rbp - 0x50], r13
lea rdx, [rbp + 0x858]
mov rcx, rsi
call fcn.180013590
ucomiss xmm15, dword [rax]
jne 0x18002dc23
mov r8d, 0x12
lea rdx, [rbp + 0x84c]
mov rcx, rsi
call fcn.180013590
ucomiss xmm15, dword [rax + 4]
jne 0x18002dc23
mov r8d, 0x12
lea rdx, [rbp + 0x840]
mov rcx, rsi
call fcn.180013590
ucomiss xmm15, dword [rax + 8]
je 0x18002e071
mov r8d, 0x2f
lea rdx, [rbp + 0x834]
mov rcx, rsi
call fcn.180013590
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x4f0]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x4f0], xmm0
mov dword [rbp + 0x4f8], eax
call fcn.180013de0
test al, al
je 0x18002e071
movaps xmm0, xmmword [0x18010baf0]
lea rax, [rbp + 0x6a0]
movss xmm7, dword [rbp - 0x50]
movss xmm8, dword [rbp - 0x4c]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x6a0], xmm0
call fcn.1800157b0
movss xmm1, dword [0x18010b468]
lea rax, [rbp + 0x6b0]
movaps xmm0, xmmword [0x18010bb50]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm1
movss xmm1, dword [0x1802bb770]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x6b0], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x6c0]
movss xmm13, dword [0x18010b490]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x6c0], xmm0
call fcn.1800157b0
movss xmm1, dword [0x18010b468]
lea rax, [rbp + 0x6d0]
movaps xmm0, xmmword [0x18010baf0]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm1
movss xmm1, dword [0x1802bb770]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x6d0], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bae0]
lea rax, [rbp + 0x6e0]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x6e0], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bb70]
lea rax, [rbp + 0x6f0]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm9
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x6f0], xmm0
call fcn.1800157b0
movss xmm6, dword [0x18010b498]
lea rax, [rbp + 0x700]
movaps xmm0, xmmword [0x18010bdd0]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x700], xmm0
movss xmm1, dword [0x1802bb770]
call fcn.1800157b0
movaps xmm0, xmmword [0x18010baf0]
lea rax, [rbp + 0x710]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x710], xmm0
call fcn.1800157b0
movss xmm1, dword [0x18010b468]
lea rax, [rbp + 0x720]
movaps xmm0, xmmword [0x18010bb50]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm1
movss xmm1, dword [0x1802bb770]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x720], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x730]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x730], xmm0
call fcn.1800157b0
movss xmm1, dword [0x18010b468]
lea rax, [rbp + 0x740]
movaps xmm0, xmmword [0x18010baf0]
movaps xmm3, xmm7
movss xmm2, dword [0x1802bb774]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm1
movss xmm1, dword [0x1802bb770]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x740], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bae0]
lea rax, [rbp + 0x750]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm10
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x750], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bb70]
lea rax, [rbp + 0x760]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm9
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x760], xmm0
call fcn.1800157b0
movaps xmm0, xmmword [0x18010bdd0]
lea rax, [rbp + 0x550]
movss xmm2, dword [0x1802bb774]
movaps xmm3, xmm7
movss xmm1, dword [0x1802bb770]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movdqa xmmword [rbp + 0x550], xmm0
call fcn.1800157b0
jmp 0x18002e07a
movss xmm13, dword [0x18010b490]
cmp byte [0x180285440], r13b
movabs rdi, 0x7fffffff0000
je 0x18002e82f
test rsi, rsi
je 0x18002e82f
mov rax, qword gs:[0x58]
mov rdx, qword [rax + r15*8]
mov eax, dword [r12 + rdx]
cmp dword [0x1802bb6f4], eax
jle 0x18002e0e5
lea rcx, [0x1802bb6f4]
call fcn.180076c54
cmp dword [0x1802bb6f4], 0xffffffff
jne 0x18002e0e5
mov ecx, 0x33f7a6a3
call fcn.18000e300
lea rcx, [0x1802bb6f4]
mov qword [0x1802bb510], rax
call fcn.180076bf4
mov rax, qword [0x1802bb510]
cmp byte [rax + rsi], r13b
jne 0x18002e82f
mov r8d, 0x12
mov qword [rbp - 0x48], r13
lea rdx, [rbp + 0x828]
mov rcx, rsi
call fcn.180013590
ucomiss xmm15, dword [rax]
jne 0x18002e151
mov r8d, 0x12
lea rdx, [rbp + 0x864]
mov rcx, rsi
call fcn.180013590
ucomiss xmm15, dword [rax + 4]
jne 0x18002e151
mov r8d, 0x12
lea rdx, [rbp + 0x81c]
mov rcx, rsi
call fcn.180013590
ucomiss xmm15, dword [rax + 8]
je 0x18002e82f
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov rcx, rax
call fcn.1800138a0
mov rcx, rax
call fcn.180013050
mov ecx, eax
call fcn.180017c50
movaps xmm7, xmm0
call fcn.180017ca0
mov rcx, qword [0x1802853d8]
lea rdx, [rbp + 0x1c0]
mov r8d, 0x2f
movaps xmm8, xmm0
call fcn.180013590
mov rcx, qword [0x1802853d8]
add rcx, 0x4a8
cmp rcx, 0x40000
jbe 0x18002e1e1
lea rax, [rcx + 8]
cmp rax, rdi
jae 0x18002e1e1
mov rcx, qword [rcx]
add rcx, 0x1fc
cmp rcx, 0x40000
jbe 0x18002e1e1
lea rax, [rcx + 0xc]
cmp rax, rdi
jae 0x18002e1e1
movsd xmm6, qword [rcx]
mov ebx, dword [rcx + 8]
jmp 0x18002e1ee
movaps xmm6, xmm15
movd ebx, xmm15
unpcklps xmm6, xmm15
mov rax, qword [0x1802853e0]
add rax, 0x40cbe0
call rax
mov r8d, 0x2f
movsd qword [rbp + 0x500], xmm6
lea rdx, [rbp - 0x60]
mov dword [rbp + 0x508], ebx
mov rcx, rax
call fcn.180013590
movaps xmm3, xmm8
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0x500]
lea rdx, [rbp + 0x1c0]
movsd xmm0, qword [rax]
lea rcx, [rbp + 0x510]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x510], xmm0
mov dword [rbp + 0x518], eax
call fcn.1800179d0
movsd xmm0, qword [rbp + 0x1c0]
lea rdx, [rbp - 0x48]
mov eax, dword [rbp + 0x1c8]
lea rcx, [rbp + 0x520]
movsd qword [rbp + 0x520], xmm0
mov dword [rbp + 0x528], eax
call fcn.180013de0
test al, al
je 0x18002e82f
movss xmm1, dword [0x18020403c]
lea rax, [0x1801088b4]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x2c0]
movss xmm7, dword [rbp - 0x44]
movss xmm6, dword [rbp - 0x48]
movaps xmm2, xmm7
movss xmm8, dword [0x18010b4d4]
mov rcx, qword [0x1802bb700]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x2c4], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x2c0], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x2c8], xmm0
mov dword [rbp + 0x2cc], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, [0x180107a40]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x2d0]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x2d4], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x2d0], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x2d8], xmm0
mov dword [rbp + 0x2dc], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, [0x1801088b8]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x2e0]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x2e4], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x2e0], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x2e8], xmm0
mov dword [rbp + 0x2ec], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm0, dword [0x180204038]
lea rax, [0x1801088bc]
movss xmm1, dword [0x18020403c]
lea r9, [rbp + 0x2f0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm7
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x2f0], xmm0
movss xmm0, dword [0x180204040]
movss dword [rbp + 0x2f4], xmm1
movaps xmm1, xmm6
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 3
movss dword [rbp + 0x2f8], xmm0
mov dword [rbp + 0x2fc], 0x3f800000
movd r8d, xmm2
movd edx, xmm1
mov rcx, qword [0x1802bb700]
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, [0x1801088c0]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x300]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x304], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x300], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x308], xmm0
mov dword [rbp + 0x30c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, [0x1801088c4]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x310]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x314], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x310], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x318], xmm0
mov dword [rbp + 0x31c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, [0x1801088c8]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x320]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x324], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x320], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x328], xmm0
mov dword [rbp + 0x32c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm0, dword [0x180204038]
lea rax, [0x1801088cc]
movss xmm1, dword [0x18020403c]
lea r9, [rbp + 0x330]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x330], xmm0
movss xmm0, dword [0x180204040]
movss dword [rbp + 0x334], xmm1
movaps xmm1, xmm6
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 3
movss dword [rbp + 0x338], xmm0
mov dword [rbp + 0x33c], 0x3f800000
movd r8d, xmm2
movd edx, xmm1
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, str.fgh
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x340]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x344], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x340], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x348], xmm0
mov dword [rbp + 0x34c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm1, dword [0x18020403c]
lea rax, [0x1801088d8]
movss xmm0, dword [0x180204038]
lea r9, [rbp + 0x350]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp + 0x354], xmm1
movaps xmm1, xmm6
movss dword [rbp + 0x350], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movss dword [rbp + 0x358], xmm0
mov dword [rbp + 0x35c], 0x3f800000
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm0, dword [0x180204038]
lea rax, str.sdf
movss xmm3, dword [0x18020403c]
lea r9, [rbp - 0x30]
mov rcx, qword [0x1802bb700]
movaps xmm2, xmm7
mov qword [rsp + 0x38], rax
movaps xmm1, xmm6
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm8
movss dword [rbp - 0x30], xmm0
movss xmm0, dword [0x180204040]
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
movss dword [rbp - 0x2c], xmm3
movss dword [rbp - 0x28], xmm0
mov dword [rbp - 0x24], 0x3f800000
call fcn.1800158e0
cmp qword [0x1802853f0], r13
je 0x18002e9df
cmp byte [0x180285475], r13b
je 0x18002e9df
mov rax, qword gs:[0x58]
mov rbx, qword [rax + r15*8]
mov eax, dword [rbx + r12]
cmp dword [0x1802bb420], eax
jle 0x18002e896
lea rcx, [0x1802bb420]
call fcn.180076c54
cmp dword [0x1802bb420], 0xffffffff
jne 0x18002e896
movd xmm0, dword [0x180285450]
lea rcx, [0x1802bb420]
cvtdq2ps xmm0, xmm0
movss dword [0x1802bb604], xmm0
call fcn.180076bf4
mov eax, dword [rbx + r12]
cmp dword [0x1802bb900], eax
jle 0x18002e8d6
lea rcx, [0x1802bb900]
call fcn.180076c54
cmp dword [0x1802bb900], 0xffffffff
jne 0x18002e8d6
movd xmm0, dword [0x180285468]
lea rcx, [0x1802bb900]
cvtdq2ps xmm0, xmm0
movss dword [0x1802bb754], xmm0
call fcn.180076bf4
mov eax, dword [rbx + r12]
cmp dword [0x1802bb460], eax
jle 0x18002e936
lea rcx, [0x1802bb460]
call fcn.180076c54
cmp dword [0x1802bb460], 0xffffffff
movss xmm7, dword [0x18010b5c8]
jne 0x18002e93e
movss xmm1, dword [0x1802bb754]
lea rcx, [0x1802bb460]
movss xmm0, dword [0x1802bb604]
subss xmm1, xmm7
mulss xmm0, xmm9
movss dword [0x1802bb4f4], xmm1
movss dword [0x1802bb4f0], xmm0
call fcn.180076bf4
jmp 0x18002e93e
movss xmm7, dword [0x18010b5c8]
mov rcx, qword [0x1802853f0]
add rcx, 0x20c
cmp rcx, 0x40000
jbe 0x18002e964
lea rax, [rcx + 4]
cmp rax, rdi
jae 0x18002e964
movss xmm1, dword [rcx]
jmp 0x18002e968
movaps xmm1, xmm15
cvttss2si ecx, xmm1
cmp ecx, 0x80000000
je 0x18002e995
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm1
je 0x18002e995
unpcklps xmm1, xmm1
movmskps eax, xmm1
and eax, 1
xor eax, 1
add ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm1
test eax, eax
jle 0x18002e9e7
mov rcx, qword [0x1802853f0]
call fcn.180012120
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.180012080
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x530]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x530], xmm0
mov dword [rbp + 0x538], eax
call fcn.180013de0
jmp 0x18002e9e7
movss xmm7, dword [0x18010b5c8]
mov eax, dword [0x180203ffc]
mov ecx, 4
movss xmm0, dword [0x180203fec]
test eax, eax
mov ebx, 1
cmovle eax, ebx
mov dword [0x180203ffc], eax
mov eax, dword [0x1802854b8]
cmp eax, ecx
cmovg eax, ecx
comiss xmm0, dword [0x18010b5e4]
mov dword [0x1802854b8], eax
jae 0x18002ea2e
mov dword [0x180203fec], 0x43960000
movss xmm10, dword [0x18010b5bc]
movss xmm11, dword [0x18010b574]
movss xmm6, dword [0x18010b4dc]
test rsi, rsi
je 0x18002f260
cmp qword [0x1802853d8], r13
je 0x18002f260
mov rcx, rsi
call fcn.180013540
test al, al
jne 0x18002f260
cmp byte [0x18028538b], r13b
je 0x18002f4be
mov rcx, rsi
call fcn.1800125c0
test al, al
je 0x18002f260
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
movss xmm1, dword [0x180203fc0]
test eax, eax
je 0x18002eb27
movd xmm2, dword [rbp - 0x40]
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm1
jb 0x18002eb27
movaps xmm0, xmm1
addss xmm0, xmm7
comiss xmm2, xmm0
ja 0x18002eb27
movd xmm2, dword [rbp - 0x3c]
movss xmm0, dword [0x180203fc4]
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm0
jb 0x18002eb27
addss xmm0, xmm10
comiss xmm2, xmm0
ja 0x18002eb27
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002eb1f
cmp byte [0x180285389], r13b
je 0x18002eb1f
movd xmm1, dword [rbp - 0x40]
movd xmm0, dword [rbp - 0x3c]
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
subss xmm1, xmm12
subss xmm0, xmm11
movss dword [0x180203fc0], xmm1
movss dword [0x180203fc4], xmm0
jmp 0x18002eb27
movss xmm1, dword [0x180203fc0]
movss xmm2, dword [0x18010b4d0]
lea rax, [rbp - 0x70]
movaps xmm0, xmmword [0x18010bbe0]
movss xmm8, dword [0x18010b5c8]
mov dword [rsp + 0x38], r13d
movaps xmm3, xmm8
movss dword [rsp + 0x30], xmm2
movss xmm2, dword [0x180203fc4]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm10
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180016080
xorps xmm0, xmm0
mov qword [rbp + 0x40], r13
movups xmmword [rbp + 0x30], xmm0
xor edx, edx
mov byte [rbp + 0x30], r13b
mov r8d, pe_nt_image_headers64
mov qword [rbp + 0x48], 0xf
lea rcx, [rbp + 0xc70]
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
call fcn.180013250
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.1800358e0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x560], xmm0
mov r8, 0xffffffffffffffff
mov rdx, qword [rax]
movdqu xmmword [rbp + 0x570], xmm1
inc r8
cmp byte [rdx + r8], r13b
jne 0x18002ebd1
lea rcx, [rbp + 0x560]
call fcn.180037fe0
mov rdx, qword [rbp + 0x3e0]
mov eax, 0xffffffff
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
sub eax, ebx
jg 0x18002ec08
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, rsi
call fcn.180013250
mov rdx, rax
lea rcx, [rbp + 0x3e8]
call fcn.1800358e0
mov r15, rax
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x18002ec3c
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x18002ec56
call fcn.18001a9d0
mov rcx, rax
mov rdx, qword [rax]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x18002f533
mov rax, qword [rcx]
call qword [rax + 0x18]
mov r15, qword [r15]
lea rdx, [0x1801088ec]
mov rdi, 0xffffffffffffffff
lea rbx, [rax + 0x18]
movsxd r12, dword [r15 - 0x10]
mov qword [rbp + 0x110], rbx
nop dword [rax]
inc rdi
cmp byte [rdx + rdi], r13b
jne 0x18002ec80
lea r14d, [rdi + r12]
test r14d, r14d
js 0x18002f528
mov eax, dword [rbx - 0xc]
mov ecx, 1
sub ecx, dword [rbx - 8]
sub eax, r14d
or ecx, eax
jge 0x18002ecc5
mov edx, r14d
lea rcx, [rbp + 0x110]
call fcn.180036c30
mov rbx, qword [rbp + 0x110]
lea rdx, [0x1801088ec]
movsxd rdi, edi
test rdi, rdi
je 0x18002ecf1
test rbx, rbx
jne 0x18002ece6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x18002ecf1
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + rbx]
mov r8, r12
test r12d, r12d
je 0x18002ed2a
test rcx, rcx
je 0x18002ed18
test r15, r15
je 0x18002ed11
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x18002ed2a
xor edx, edx
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
cmp r14d, dword [rbx - 0xc]
jg 0x18002f528
movsxd rax, r14d
lea rcx, [rbp + 0xc70]
mov dword [rbx - 0x10], r14d
mov rdx, rbx
mov byte [rax + rbx], r13b
call fcn.180037130
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002ed6a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x3e8]
mov eax, 0xffffffff
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002ed8d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0xc70]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002eda0
mov rcx, qword [rbp + 0x48]
mov r14, qword [rbp + 0x40]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18002edee
cmp rcx, 0x10
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x30]
mov qword [rbp + 0x40], rax
cmovae rbx, qword [rbp + 0x30]
lea rdx, [rbp + 0xc70]
mov r8, rdi
lea rcx, [rbx + r14]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov byte [rax + r14], r13b
jmp 0x18002ee06
lea r9, [rbp + 0xc70]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x30]
call fcn.180037e50
movss xmm2, dword [0x180203fc4]
lea rax, [rbp + 0x30]
movss xmm1, dword [0x180203fc0]
addss xmm2, xmm13
cmp qword [rbp + 0x48], 0x10
addss xmm1, xmm12
movaps xmm0, xmmword [0x18010bdd0]
lea r9, [rbp - 0x70]
cmovae rax, qword [rbp + 0x30]
mov rcx, qword [0x1802bb700]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movaps xmm0, xmmword [0x18010bd40]
lea rax, [rbp - 0x70]
movss xmm2, dword [0x180203fc4]
movaps xmm3, xmm8
movss xmm9, dword [0x18010b4e8]
movss xmm1, dword [0x180203fc0]
addss xmm2, xmm9
movdqa xmmword [rbp - 0x70], xmm0
movss xmm0, dword [0x18010b4d0]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x18010b468]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180015ff0
mov rcx, rsi
call fcn.180013840
test rax, rax
je 0x18002f23d
mov rcx, rsi
mov r15d, r13d
call fcn.180013840
cmp dword [rax + 0x18], r13d
jbe 0x18002f23d
movss xmm7, dword [0x18010b52c]
mov rcx, rsi
call fcn.180013840
mov ecx, r15d
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + rcx*8 + 0x20]
test rbx, rbx
je 0x18002f223
mov rcx, rsi
call fcn.1800138a0
mov rcx, rbx
cmp rbx, rax
jne 0x18002f0ac
call fcn.1800130e0
xorps xmm0, xmm0
mov qword [rsp + 0x70], r13
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r13b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x78], 0xf
lea rcx, [rbp + 0x870]
mov r14, rax
call sub.VCRUNTIME140.dll_memset
mov r8, r14
lea rdx, [0x180107e80]
lea rcx, [rbp + 0x870]
call fcn.180037130
lea rax, [rbp + 0x870]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002ef84
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18002efd5
cmp rdx, 0x10
lea rax, [rdi + rcx]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmovae rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x870]
add rbx, rcx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], r13b
jmp 0x18002efee
lea r9, [rbp + 0x870]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.180037e50
test r14, r14
je 0x18002f065
movss xmm2, dword [0x180203fc4]
lea rax, [rsp + 0x60]
movss xmm1, dword [0x180203fc0]
addss xmm2, xmm7
cmp qword [rsp + 0x78], 0x10
addss xmm1, xmm12
movaps xmm0, xmmword [0x18010bdd0]
lea r9, [rbp - 0x70]
cmovae rax, qword [rsp + 0x60]
mov rcx, qword [0x1802bb700]
mov qword [rsp + 0x38], rax
addss xmm2, xmm15
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movaps xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18002f223
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002f21e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002f21e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800130e0
xorps xmm0, xmm0
mov qword [rsp + 0x70], r13
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r13b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x78], 0xf
lea rcx, [rbp + 0x870]
mov r12, rax
call sub.VCRUNTIME140.dll_memset
mov r8, r12
lea rdx, [0x180107e80]
lea rcx, [rbp + 0x870]
call fcn.180037130
lea rax, [rbp + 0x870]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18002f107
mov rcx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x70]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18002f15a
cmp rcx, 0x10
lea rax, [rdi + r14]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmovae rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x870]
mov r8, rdi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r14]
mov byte [rax + rbx], r13b
jmp 0x18002f173
lea r9, [rbp + 0x870]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.180037e50
test r12, r12
je 0x18002f1ea
movss xmm2, dword [0x180203fc4]
lea rax, [rsp + 0x60]
movss xmm1, dword [0x180203fc0]
addss xmm2, xmm7
cmp qword [rsp + 0x78], 0x10
addss xmm1, xmm12
movaps xmm0, xmmword [0x18010bd70]
lea r9, [rbp - 0x70]
cmovae rax, qword [rsp + 0x60]
mov rcx, qword [0x1802bb700]
mov qword [rsp + 0x38], rax
addss xmm2, xmm15
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd edx, xmm1
movd r8d, xmm2
movaps xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18002f223
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002f21e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002f259
call fcn.180077120
mov rcx, rsi
addss xmm15, xmm9
inc r15d
call fcn.180013840
cmp r15d, dword [rax + 0x18]
jb 0x18002eef8
lea rcx, [rbp + 0x560]
call fcn.180036010
lea rcx, [rbp + 0x30]
call fcn.180036010
mov ebx, 1
jmp 0x18002f269
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm8, dword [0x18010b5c8]
cmp byte [0x18028538b], r13b
je 0x18002f4be
cmp qword [0x1802853d8], r13
jne 0x18002f4be
lea rcx, [rbp + 0xe60]
call qword [sym.imp.USER32.dll_GetCursorPos]
movss xmm3, dword [0x180203fc0]
test eax, eax
je 0x18002f336
movd xmm1, dword [rbp + 0xe60]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm3
jb 0x18002f336
movaps xmm0, xmm3
addss xmm0, xmm8
comiss xmm1, xmm0
ja 0x18002f336
movd xmm1, dword [rbp + 0xe64]
movss xmm2, dword [0x180203fc4]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm2
jb 0x18002f33e
movaps xmm0, xmm2
addss xmm0, xmm10
comiss xmm1, xmm0
ja 0x18002f33e
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002f32e
cmp byte [0x180285389], r13b
je 0x18002f32e
movd xmm3, dword [rbp + 0xe60]
movd xmm2, dword [rbp + 0xe64]
cvtdq2ps xmm3, xmm3
cvtdq2ps xmm2, xmm2
subss xmm3, xmm12
subss xmm2, xmm11
movss dword [0x180203fc0], xmm3
movss dword [0x180203fc4], xmm2
jmp 0x18002f33e
movss xmm3, dword [0x180203fc0]
movss xmm2, dword [0x180203fc4]
movaps xmm0, xmmword [0x18010bbe0]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
movaps xmm1, xmm3
movaps xmm0, xmm2
movss dword [rbp + 0xe70], xmm3
addss xmm0, xmm10
movss dword [rbp + 0xe74], xmm2
addss xmm1, xmm8
movss dword [rbp + 0xe6c], xmm0
movss dword [rbp + 0xe68], xmm1
call fcn.18003b8a0
movss xmm0, dword [0x18010b4d0]
lea r8, [rbp + 0xe68]
mov rcx, qword [0x1802bb4d0]
lea rdx, [rbp + 0xe70]
mov r9d, eax
mov dword [rsp + 0x28], 0xa
movss dword [rsp + 0x20], xmm0
call fcn.180054f60
movss xmm2, dword [0x180203fc4]
lea rax, str.Belt
movss xmm1, dword [0x180203fc0]
addss xmm2, xmm13
movaps xmm0, xmmword [0x18010bdd0]
addss xmm1, xmm12
mov rcx, qword [0x1802bb700]
lea r9, [rbp - 0x70]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180285520]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x20], 3
call fcn.1800158e0
movss xmm0, dword [0x18010af48]
lea rax, [rbp - 0x70]
movd xmm1, dword [0x18011e060]
movd xmm2, dword [0x18011e064]
movd xmm3, dword [0x18011e068]
cvtdq2ps xmm2, xmm2
mov dword [rbp - 0x24], 0x3f800000
movups xmm4, xmmword [rbp - 0x30]
mulss xmm2, xmm0
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm3, xmm3
mulss xmm1, xmm0
mulss xmm3, xmm0
movss xmm0, dword [0x18010b4d0]
movss xmm4, xmm1
movss xmm1, dword [0x180203fc0]
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm2
movss dword [rsp + 0x30], xmm0
movss xmm2, dword [0x180203fc4]
movss xmm0, dword [0x18010b468]
addss xmm2, dword [0x18010b4f0]
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm3
mov qword [rsp + 0x28], rax
shufps xmm4, xmm4, 0xc9
movaps xmm3, xmm8
movdqa xmmword [rbp - 0x70], xmm4
movss dword [rsp + 0x20], xmm0
call fcn.180015ff0
call fcn.180016de0
cmp byte [0x180285482], r13b
je 0x18002f4d1
call fcn.180017210
lea r11, [rsp + 0xf18]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
jmp 0x180029f70
mov ecx, 0x80070057
call fcn.18001a820
int3
mov ecx, 0x80004005
call fcn.18001a820
int3