Function at 0x180032550
Capabilities:
Check for unmoving mouse cursor
Create directory
Encode data using xor
Hash data with crc32
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rdi
push r13
lea rbp, [rsp - 0x388]
sub rsp, 0x488
mov rax, qword [0x180139968]
lea r8, str.Background
movaps xmmword [rsp + 0x400], xmm11
xor edx, edx
movaps xmmword [rsp + 0x3f0], xmm12
movaps xmmword [rsp + 0x3d0], xmm14
mov rax, qword [rax + 0x4758]
mov rcx, qword [rax]
call fcn.1800446f0
mov ecx, dword [0x18016f69c]
xor r13d, r13d
movss xmm14, dword [0x18010f2ec]
xorps xmm11, xmm11
mov qword [0x18016fa60], rax
test ecx, ecx
je 0x1800302a9
sub ecx, 1
je 0x180030267
sub ecx, 1
je 0x18003023d
cmp ecx, 1
je 0x1800301f7
mov dword [0x1801220cc], 0x3f800000
mov dword [0x18016f7e0], r13d
mov dword [0x1801220c4], 0x3f800000
jmp 0x1800302d1
movss xmm1, dword [0x1801220c4]
movss xmm0, dword [0x18016f7e0]
addss xmm1, dword [0x18010f0a0]
addss xmm0, dword [0x18010f7c4]
comiss xmm1, xmm14
movss dword [0x1801220c4], xmm1
movss dword [0x18016f7e0], xmm0
jb 0x1800302d1
mov dword [0x18016f69c], r13d
jmp 0x1800302d1
movss xmm0, dword [0x1801220cc]
addss xmm0, dword [0x18010f0a0]
comiss xmm0, xmm14
movss dword [0x1801220cc], xmm0
jb 0x1800302d1
mov dword [0x18016f69c], 3
jmp 0x1800302d1
movss xmm1, dword [0x18016f7e0]
movss xmm0, dword [0x1801220c4]
addss xmm1, dword [0x18010f0a0]
addss xmm0, dword [0x18010f7c4]
comiss xmm1, xmm14
movss dword [0x18016f7e0], xmm1
movss dword [0x1801220c4], xmm0
jb 0x1800302d1
mov dword [0x18016f69c], 2
jmp 0x1800302d1
movss xmm0, dword [0x1801220cc]
addss xmm0, dword [0x18010f7c4]
comiss xmm0, xmm11
movss dword [0x1801220cc], xmm0
ja 0x1800302d1
mov dword [0x18016f69c], 1
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
cmp byte [0x18013976d], r13b
jne 0x180030339
xor edx, edx
lea rcx, str.C:_stealcode.
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, [0x1801248f0]
mov r8d, 5
call qword [sym.imp.WINMM.dll_PlaySoundA]
mov r8d, 0x13
lea rdx, [0x18010c120]
lea rcx, [0x1801304e0]
call fcn.18003bf10
lea rcx, [0x1801304e0]
call fcn.18002d5f0
mov byte [0x18013976d], 1
cmp byte [0x1801398f6], r13b
movaps xmmword [rsp + 0x450], xmm6
movaps xmmword [rsp + 0x440], xmm7
movaps xmmword [rsp + 0x430], xmm8
movaps xmmword [rsp + 0x420], xmm9
je 0x180030536
mov eax, dword [0x180139874]
cdq
sub eax, edx
sar eax, 1
movd xmm9, eax
mov eax, dword [0x180139888]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm9, xmm9
movd xmm7, eax
mov rax, qword [0x180139808]
add rax, 0x30c670
cvtdq2ps xmm7, xmm7
call rax
mov rcx, rax
call fcn.18003d190
mov rbx, rax
test rax, rax
je 0x180030536
cmp byte [0x18013976e], r13b
jne 0x1800304af
mov rcx, rax
call fcn.1800145d0
mov rcx, rbx
movss xmm6, dword [rax]
call fcn.1800145d0
movss xmm8, dword [0x18010f11c]
movss xmm1, dword [0x1801397b8]
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm6, xmm0
comiss xmm1, xmm6
ja 0x1800304af
comiss xmm1, xmm11
jbe 0x1800304af
mov rcx, rbx
call fcn.1800145d0
mov rcx, rbx
movss xmm6, dword [rax]
call fcn.1800145d0
cmp byte [0x1801398f6], r13b
movss xmm1, dword [0x1801397b8]
movss xmm0, dword [rax]
mulss xmm0, xmm8
subss xmm6, xmm0
divss xmm1, xmm6
je 0x1800304d3
ucomiss xmm1, dword [0x18010f7c8]
je 0x1800304d3
movdqa xmm0, xmmword [0x18010fe10]
lea rax, str.reloading
subss xmm7, dword [0x18010f6cc]
mov rcx, qword [0x18016fd38]
lea r9, [rbp - 0x60]
mov qword [rsp + 0x38], rax
movaps xmm1, xmm9
mov rax, qword [0x180139950]
movdqa xmmword [rbp - 0x60], xmm0
movss xmm0, dword [0x18010f624]
movaps xmm2, xmm7
movss dword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
call fcn.180018150
jmp 0x1800304d3
mov rcx, rbx
call fcn.180014bb0
test al, al
je 0x1800304d3
mov rcx, rbx
call fcn.180014650
mov rcx, rbx
call fcn.1800145d0
mov rcx, rbx
call fcn.180014650
mov rcx, rbx
call fcn.180014b20
cmp eax, 0x407209f5
je 0x18003051e
mov rcx, rbx
call fcn.180014b20
cmp eax, 0xe93460ee
je 0x18003051e
mov rcx, rbx
call fcn.180014b20
cmp eax, 0x643e3521
je 0x18003051e
mov rcx, rbx
call fcn.180014b20
cmp eax, 0xda95d4a2
je 0x18003051e
mov rcx, rbx
call fcn.180014b20
cmp eax, 0x9b7f6dd1
jne 0x180030536
mov rcx, rbx
call fcn.180014650
mov rcx, rbx
call fcn.1800145d0
mov rcx, rbx
call fcn.180014650
mov rdi, qword [0x180139800]
movss xmm12, dword [0x180122170]
mov qword [rbp + 0x58], rdi
call fcn.180013e00
mov rbx, rax
test rax, rax
je 0x180031982
mov rcx, qword gs:[0x58]
mov qword [rsp + 0x480], rsi
mov qword [rsp + 0x470], r14
mov r14d, dword [0x180139144]
mov esi, 4
mov rcx, qword [rcx + r14*8]
mov ecx, dword [rsi + rcx]
cmp dword [0x18016fe14], ecx
jle 0x1800305c1
lea rcx, [0x18016fe14]
call fcn.18007a878
cmp dword [0x18016fe14], 0xffffffff
jne 0x1800305c1
mov ecx, 0xae00109b
call fcn.18000fd80
lea rcx, [0x18016fe14]
mov qword [0x18016f9a8], rax
call fcn.18007a80c
mov rax, qword [0x18016f9a8]
mov rax, qword [rbx + rax]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x180031972
mov rax, qword [rax + 0x28]
movabs rbx, 0x7fffffff0000
mov qword [rsp + 0x478], r12
mov r12d, r13d
mov qword [rsp + 0x468], r15
movaps xmmword [rsp + 0x410], xmm10
movaps xmmword [rsp + 0x3e0], xmm13
movaps xmmword [rsp + 0x3c0], xmm15
cmp dword [rax + 0x10], r13d
jle 0x180031646
movdqa xmm13, xmmword [0x18010fbb0]
mov r15, r14
movdqa xmm15, xmmword [0x18010fc10]
mov qword [rbp - 0x38], r14
cmp dword [rax + 0x10], 1
mov rdx, qword gs:[0x58]
jle 0x180031947
mov rax, qword [rax + 0x18]
mov rdi, qword [rax + r13*8 + 0x20]
test rdi, rdi
je 0x180031620
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x180031620
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180031620
add rcx, 0x60
cmp rcx, 0x40000
jbe 0x180031620
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x180031620
mov r14, qword [rcx]
test r14, r14
je 0x180031620
mov ebx, esi
mov rsi, qword [rdx + r15*8]
mov eax, dword [rbx + rsi]
cmp dword [0x18016fd30], eax
jle 0x1800306e4
lea rcx, [0x18016fd30]
call fcn.18007a878
cmp dword [0x18016fd30], 0xffffffff
jne 0x1800306e4
mov ecx, 0x33f7a6a3
call fcn.18000fd80
lea rcx, [0x18016fd30]
mov qword [0x18016fac0], rax
call fcn.18007a80c
mov rax, qword [0x18016fac0]
cmp byte [rax + rdi], 0
jne 0x180031611
mov eax, dword [rbx + rsi]
cmp dword [0x18016fdc4], eax
jle 0x180030735
lea rcx, [0x18016fdc4]
call fcn.18007a878
cmp dword [0x18016fdc4], 0xffffffff
jne 0x180030735
mov ecx, 0x8bb6774c
call fcn.18000e630
mov rcx, qword [rax]
mov qword [0x18016fd98], rcx
lea rcx, [0x18016fdc4]
call fcn.18007a80c
mov r8, rdi
call fcn.18003c820
test rax, rax
je 0x180031611
lea rdx, str.Local
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180031611
mov rcx, rdi
call fcn.1800140d0
test al, al
je 0x180030f20
mov eax, dword [rbx + rsi]
cmp dword [0x18016f900], eax
jle 0x1800307ac
lea rcx, [0x18016f900]
call fcn.18007a878
cmp dword [0x18016f900], 0xffffffff
jne 0x1800307ac
mov ecx, 0x1f15eb59
call fcn.18000fd80
lea rcx, [0x18016f900]
mov qword [0x18016f908], rax
call fcn.18007a80c
mov rax, qword [0x18016f908]
cmp dword [rdi + rax], 1
je 0x180031611
cmp byte [0x1801397c5], 0
movabs rbx, 0x7fffffff0000
je 0x180030a1b
lea rcx, [rdi + 0x4a8]
cmp rcx, 0x40000
jbe 0x180030812
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x180030812
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x180030812
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x180030812
cmp byte [rcx], 0
jne 0x180030a1b
lea rcx, [rdi + 0x5e8]
cmp rcx, 0x40000
jbe 0x18003082f
lea rax, [rcx + 4]
cmp rax, rbx
jae 0x18003082f
mov eax, dword [rcx]
jmp 0x180030831
xor eax, eax
shr eax, 4
test al, 1
jne 0x1800309a1
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x180030957
cmp dword [rdi + 0x598], ecx
jne 0x180030957
movdqa xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.180020420
lea rcx, [rdi + 0x4a8]
cmp rcx, 0x40000
jbe 0x180030a9d
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x180030a9d
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x180030a9d
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x180030a9d
cmp byte [rcx], 0
je 0x180030a9d
mov rcx, qword [rdi + 0x4a8]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x180030947
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x180030947
cmp byte [rcx], 0
je 0x180030bbf
mov rsi, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rsi + r15*8]
mov eax, dword [rcx + rax]
cmp dword [0x1801700e4], eax
jle 0x180030bbf
lea rcx, [0x1801700e4]
call fcn.18007a878
cmp dword [0x1801700e4], 0xffffffff
jne 0x180030bbf
mov ecx, 0x43f29029
call fcn.18000fd80
lea rcx, [0x1801700e4]
mov qword [0x18016fe70], rax
call fcn.18007a80c
movaps xmm3, xmm13
lea rcx, [rdi + 0x4a8]
jmp 0x180030bdc
movss xmm0, dword [0x180122138]
movss xmm1, dword [0x18012213c]
movss xmm2, dword [0x180122140]
mov dword [rbp - 0x18], 0x3f800000
movups xmm3, xmmword [rbp - 0x24]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp - 0x24], xmm3
movdqa xmmword [rsp + 0x40], xmm3
jmp 0x18003086c
cmp rcx, 0x40000
jbe 0x1800309b7
lea rax, [rcx + 4]
cmp rax, rbx
jae 0x1800309b7
mov eax, dword [rcx]
jmp 0x1800309b9
xor eax, eax
shr eax, 4
test al, 1
je 0x180030879
cmp byte [0x1801397d7], 0
jne 0x180030879
movss xmm0, dword [0x1801221d8]
movss xmm1, dword [0x1801221dc]
movss xmm2, dword [0x1801221e0]
mov dword [rbp - 8], 0x3f800000
movups xmm3, xmmword [rbp - 0x14]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp - 0x14], xmm3
movdqa xmmword [rsp + 0x40], xmm3
jmp 0x18003086c
cmp byte [0x1801398b7], 0
je 0x180030879
lea rcx, [rdi + 0x4a8]
cmp rcx, 0x40000
jbe 0x180030879
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x180030879
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x180030879
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x180030879
cmp byte [rcx], 0
je 0x180030879
movdqa xmm0, xmmword [0x18010fc20]
lea rdx, [rsp + 0x40]
mov rcx, rdi
movdqa xmmword [rsp + 0x40], xmm0
call fcn.180020420
lea rcx, [rdi + 0x4a8]
jmp 0x18003089a
lea rcx, [rdi + 0x5e8]
cmp rcx, 0x40000
jbe 0x180030aba
lea rax, [rcx + 4]
cmp rax, rbx
jae 0x180030aba
mov eax, dword [rcx]
jmp 0x180030abc
xor eax, eax
shr eax, 4
test al, 1
jne 0x180030b6d
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x180030b2c
cmp dword [rdi + 0x598], ecx
jne 0x180030b2c
movss xmm0, dword [0x180122238]
movss xmm1, dword [0x18012223c]
movss xmm2, dword [0x180122240]
mov dword [rbp + 8], 0x3f800000
movups xmm3, xmmword [rbp - 4]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp - 4], xmm3
jmp 0x180030bac
movss xmm0, dword [0x180122128]
movss xmm1, dword [0x18012212c]
movss xmm2, dword [0x180122130]
mov dword [rbp + 0x18], 0x3f800000
movups xmm3, xmmword [rbp + 0xc]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp + 0xc], xmm3
jmp 0x180030bac
movss xmm0, dword [0x1801221d8]
movss xmm1, dword [0x1801221dc]
movss xmm2, dword [0x1801221e0]
mov dword [rbp + 0x28], 0x3f800000
movups xmm3, xmmword [rbp + 0x1c]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp + 0x1c], xmm3
lea rdx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm3
mov rcx, rdi
call fcn.1800228d0
lea rcx, [rdi + 0x4a8]
movaps xmm3, xmm13
cmp rcx, 0x40000
jbe 0x180030c01
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x180030c01
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x180030c01
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x180030c01
cmp byte [rcx], 0
jne 0x180030d2b
lea rcx, [rdi + 0x5e8]
cmp rcx, 0x40000
jbe 0x180030c1e
lea rax, [rcx + 4]
cmp rax, rbx
jae 0x180030c1e
mov eax, dword [rcx]
jmp 0x180030c20
xor eax, eax
shr eax, 4
test al, 1
jne 0x180030cec
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x180030c90
cmp dword [rdi + 0x598], ecx
jne 0x180030c90
movss xmm0, dword [0x180122238]
movss xmm1, dword [0x18012223c]
movss xmm2, dword [0x180122240]
mov dword [rbp + 0x38], 0x3f800000
movups xmm3, xmmword [rbp + 0x2c]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp + 0x2c], xmm3
jmp 0x180030d2b
mov rcx, rdi
call fcn.1800142d0
comiss xmm11, dword [rax]
jb 0x180030cab
movdqa xmm3, xmmword [0x18010fbc0]
jmp 0x180030d2b
movss xmm0, dword [0x180122128]
movss xmm1, dword [0x18012212c]
movss xmm2, dword [0x180122130]
mov dword [rbp + 0x48], 0x3f800000
movups xmm3, xmmword [rbp + 0x3c]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp + 0x3c], xmm3
jmp 0x180030d2b
movss xmm0, dword [0x1801221d8]
movss xmm1, dword [0x1801221dc]
movss xmm2, dword [0x1801221e0]
mov dword [rbp - 0x54], 0x3f800000
movups xmm3, xmmword [rbp - 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rbp - 0x60], xmm3
lea rdx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm3
mov rcx, rdi
call fcn.180021030
cmp byte [0x18013986d], 0
je 0x180030d71
lea rcx, [rdi + 0x5e8]
cmp rcx, 0x40000
jbe 0x180030d64
lea rax, [rcx + 4]
cmp rax, rbx
jae 0x180030d64
mov eax, dword [rcx]
jmp 0x180030d66
xor eax, eax
shr eax, 4
test al, 1
jne 0x18003161b
cmp byte [0x18013985a], 0
je 0x180030db8
lea rcx, [rdi + 0x4a8]
cmp rcx, 0x40000
jbe 0x180030db8
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x180030db8
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x180030db8
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x180030db8
cmp byte [rcx], 0
jne 0x18003161b
cmp byte [0x180122134], 0
je 0x180030de6
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x180030de6
cmp dword [rdi + 0x598], ecx
je 0x180031611
mov r8d, 0x2f
lea rdx, [rbp + 0x80]
mov rcx, rdi
call fcn.180015830
ucomiss xmm11, dword [rax]
je 0x180031611
mov r8d, 0x2f
lea rdx, [rbp + 0x8c]
mov rcx, rdi
call fcn.180015830
ucomiss xmm11, dword [rax + 4]
je 0x180031611
mov r8d, 0x2f
lea rdx, [rbp + 0x98]
mov rcx, rdi
call fcn.180015830
ucomiss xmm11, dword [rax + 8]
je 0x180031611
cmp byte [0x180139845], 0
jne 0x18003161b
mov r8d, 0x2f
lea rdx, [rbp + 0xa4]
mov rcx, rdi
call fcn.180015830
movsd xmm6, qword [rax]
mov ebx, dword [rax + 8]
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov r8d, 0x2f
lea rdx, [rbp + 0xb0]
mov rcx, rax
call fcn.180015830
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd xmm3, qword [rax]
movss xmm1, dword [rax + 8]
movaps xmm2, xmm3
movsd qword [rsp + 0x40], xmm3
subss xmm3, xmm6
shufps xmm2, xmm2, 0x55
subss xmm2, xmm0
movsd qword [rsp + 0x40], xmm6
movd xmm0, ebx
subss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
sqrtss xmm0, xmm3
comiss xmm0, dword [0x180122168]
ja 0x180031611
mov rcx, rdi
call fcn.18001a4c0
movaps xmm6, xmm0
comiss xmm12, xmm6
jbe 0x180030f20
mov rcx, rdi
call fcn.1800142d0
comiss xmm11, dword [rax]
jae 0x180030f20
cmp byte [0x180139859], 0
jne 0x180030f20
movaps xmm12, xmm6
mov qword [0x180139800], rdi
mov r8, qword [rdi]
mov r15, r14
test r8, r8
je 0x1800315b5
mov r8, qword [r8 + 0x10]
mov edx, 0xffffffff
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [r8 + rax], 0
jne 0x180030f40
test eax, eax
je 0x1800315b5
mov r9d, eax
lea rsi, [0x180105260]
nop dword [rax]
movsx ecx, byte [r8]
lea r8, [r8 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [rsi + rax*4]
sub r9, 1
jne 0x180030f60
mov rsi, qword gs:[0x58]
not edx
cmp edx, 0xd9e96dc9
jne 0x1800315b5
mov rbx, qword [rbp - 0x38]
mov eax, 4
mov rbx, qword [rsi + rbx*8]
mov esi, eax
mov eax, dword [rbx + rax]
cmp dword [0x1801700e4], eax
jle 0x180030fdf
lea rcx, [0x1801700e4]
call fcn.18007a878
cmp dword [0x1801700e4], 0xffffffff
jne 0x180030fdf
mov ecx, 0x43f29029
call fcn.18000fd80
lea rcx, [0x1801700e4]
mov qword [0x18016fe70], rax
call fcn.18007a80c
mov rax, qword [0x18016fe70]
movss xmm10, dword [rdi + rax]
mov eax, dword [rsi + rbx]
cmp dword [0x18016ff14], eax
jle 0x18003102c
lea rcx, [0x18016ff14]
call fcn.18007a878
cmp dword [0x18016ff14], 0xffffffff
jne 0x18003102c
mov ecx, 0x3300df68
call fcn.18000e630
mov rcx, qword [rax]
mov qword [0x18016fbe8], rcx
lea rcx, [0x18016ff14]
call fcn.18007a80c
mov r8, rdi
call fcn.18003c800
mov r14, rax
test rax, rax
jne 0x180031047
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], eax
jmp 0x180031095
mov eax, dword [rsi + rbx]
cmp dword [0x18016fb78], eax
jle 0x180031087
lea rcx, [0x18016fb78]
call fcn.18007a878
cmp dword [0x18016fb78], 0xffffffff
jne 0x180031087
mov ecx, 0x56e64b7d
call fcn.18000e630
mov rcx, qword [rax]
mov qword [0x18016fa50], rcx
lea rcx, [0x18016fb78]
call fcn.18007a80c
mov rdx, r14
lea rcx, [rsp + 0x50]
call qword [0x18016fa50]
movsd xmm0, qword [rsp + 0x50]
lea rdx, [rbp + 0x3b0]
mov eax, dword [rsp + 0x58]
lea rcx, [rbp + 0x60]
movsd qword [rbp + 0x60], xmm0
mov qword [rbp + 0x3b0], 0
mov dword [rbp + 0x68], eax
call fcn.1800164e0
test al, al
je 0x1800315b5
cmp byte [0x180139896], 0
je 0x18003157a
xorps xmm0, xmm0
mov qword [rbp - 0x70], 0
movups xmmword [rbp - 0x80], xmm0
xor edx, edx
mov byte [rbp - 0x80], 0
mov r8d, pe_nt_image_headers64
mov qword [rbp - 0x68], 0xf
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [0x180139808]
movsd xmm6, qword [rsp + 0x50]
add rax, 0x30c670
mov ebx, dword [rsp + 0x58]
call rax
mov r8d, 0x2f
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.180015830
lea rdx, str.Helicopter__1.0fm_
lea rcx, [rbp + 0xc0]
movsd xmm0, qword [rax]
movss xmm1, dword [rax + 8]
movaps xmm2, xmm0
movaps xmm3, xmm0
movsd qword [rsp + 0x40], xmm0
shufps xmm3, xmm3, 0x55
subss xmm2, xmm6
movaps xmm0, xmm6
movsd qword [rsp + 0x40], xmm6
shufps xmm0, xmm0, 0x55
subss xmm3, xmm0
movd xmm0, ebx
subss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm2, xmm2
mulss xmm3, xmm3
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
sqrtss xmm0, xmm3
cvtps2pd xmm2, xmm0
movq r8, xmm2
call fcn.18003c900
lea rax, [rbp + 0xc0]
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800311b0
mov rcx, qword [rbp - 0x68]
mov r14, qword [rbp - 0x70]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x1800311fe
cmp rcx, 0xf
lea rax, [rsi + r14]
lea rbx, [rbp - 0x80]
mov qword [rbp - 0x70], rax
cmova rbx, qword [rbp - 0x80]
lea rdx, [rbp + 0xc0]
mov r8, rsi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r14]
mov byte [rax + rbx], 0
jmp 0x180031216
lea r9, [rbp + 0xc0]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.18003d7f0
xorps xmm0, xmm0
mov qword [rsp + 0x78], 0xf
xor r14d, r14d
lea rcx, [rbp + 0x1c0]
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r14b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x70], r14
call sub.VCRUNTIME140.dll_memset
cvttss2si r8d, xmm10
lea rdx, str.__dHP_
lea rcx, [rbp + 0x1c0]
call fcn.18003c900
lea rax, [rbp + 0x1c0]
mov rsi, 0xffffffffffffffff
nop
inc rsi
cmp byte [rax + rsi], r14b
jne 0x180031270
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800312c1
cmp rdx, 0xf
lea rax, [rcx + rsi]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmova rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x1c0]
add rbx, rcx
mov r8, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], r14b
jmp 0x1800312da
lea r9, [rbp + 0x1c0]
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x60]
call fcn.18003d7f0
cmp qword [rbp - 0x68], 0xf
lea rax, [rbp - 0x80]
movdqa xmm0, xmmword [0x18010fe10]
lea r9, [rsp + 0x40]
cmova rax, qword [rbp - 0x80]
movss xmm9, dword [rbp + 0x3b4]
movss xmm8, dword [rbp + 0x3b0]
movaps xmm2, xmm9
movss xmm6, dword [0x18010f61c]
movaps xmm1, xmm8
mov rcx, qword [0x18016fd38]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
movdqa xmmword [rsp + 0x40], xmm0
call fcn.180018150
cmp qword [rsp + 0x78], 0xf
lea rax, [rsp + 0x60]
movdqa xmm0, xmmword [0x18010fc60]
lea r9, [rsp + 0x40]
cmova rax, qword [rsp + 0x60]
movaps xmm2, xmm9
addss xmm2, dword [0x18010f62c]
mov rcx, qword [0x18016fd38]
movaps xmm1, xmm8
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x20], 3
call fcn.180018150
addss xmm9, dword [0x18010f63c]
subss xmm8, dword [0x18010f65c]
lea rcx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm13
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x3b8]
movaps xmm7, xmm8
mov dword [rsp + 0x28], r14d
addss xmm7, dword [0x18010f6a4]
movaps xmm6, xmm9
movss dword [rbp + 0x3c0], xmm8
addss xmm6, dword [0x18010f5f8]
mov r9d, eax
movss dword [rbp + 0x3c4], xmm9
lea rdx, [rbp + 0x3c0]
movss dword [rsp + 0x20], xmm11
movss dword [rbp + 0x3b8], xmm7
movss dword [rbp + 0x3bc], xmm6
call fcn.18005b130
lea rcx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm15
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x3c8]
movaps xmm0, xmm10
mov dword [rsp + 0x28], r14d
mulss xmm0, dword [0x18010f0a4]
lea rdx, [rbp - 0x50]
mov r9d, eax
movss dword [rbp + 0x3cc], xmm6
movss dword [rbp - 0x50], xmm8
addss xmm0, xmm8
movss dword [rbp - 0x4c], xmm9
movss dword [rsp + 0x20], xmm11
movss dword [rbp + 0x3c8], xmm0
call fcn.18005b130
lea rcx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm13
call fcn.180041680
movss dword [rbp - 0x48], xmm7
movss dword [rbp - 0x44], xmm6
movss dword [rbp - 0x40], xmm8
mov rcx, qword [0x18016fa60]
lea r8, [rbp - 0x48]
movss dword [rsp + 0x30], xmm14
lea rdx, [rbp - 0x40]
mov r9d, eax
movss dword [rsp + 0x20], xmm11
movss dword [rbp - 0x3c], xmm9
call fcn.18005b020
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x18003152c
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180031527
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180031716
call fcn.18007ac9c
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], r14b
cmp rdx, 0xf
jbe 0x18003157a
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180031575
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180031716
call fcn.18007ac9c
comiss xmm10, xmm11
jbe 0x1800315b5
cmp byte [0x18013986c], 0
jne 0x1800315b5
movsd xmm0, qword [rsp + 0x50]
lea rcx, [rbp + 0x70]
mov eax, dword [rsp + 0x58]
movsd qword [rbp + 0x70], xmm0
mov dword [rbp + 0x78], eax
call fcn.18001a560
comiss xmm12, xmm0
jbe 0x1800315b5
movaps xmm12, xmm0
mov qword [0x180139810], rdi
mov r8, r15
mov rdx, rdi
call fcn.18001e050
mov r8, r15
mov rdx, rdi
call fcn.18001e530
mov r8, r15
mov rdx, rdi
call fcn.18001e8a0
mov r8, r15
mov rdx, rdi
call fcn.18001ed20
mov r8, r15
mov rdx, rdi
call fcn.18001f090
mov r8, r15
mov rdx, rdi
call fcn.18001f400
mov r8, r15
mov rdx, rdi
call fcn.18001f7b0
mov r8, r15
mov rdx, rdi
call fcn.18001fda0
mov r15, qword [rbp - 0x38]
movabs rbx, 0x7fffffff0000
mov esi, 4
mov rax, qword [rbp + 0x50]
inc r12d
inc r13
mov rax, qword [rax + 0x28]
cmp r12d, dword [rax + 0x10]
jl 0x180030638
mov rdi, qword [rbp + 0x58]
xor r13d, r13d
mov r14d, dword [0x180139144]
test rdi, rdi
je 0x1800317d2
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov r8d, 0x2f
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015830
ucomiss xmm11, dword [rax]
je 0x1800316a8
mov r8d, 0x2f
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015830
ucomiss xmm11, dword [rax + 4]
je 0x1800316a8
mov r8d, 0x2f
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015830
ucomiss xmm11, dword [rax + 8]
jne 0x1800316af
mov qword [0x180139800], r13
lea rcx, [rdi + 0x4a8]
cmp rcx, 0x40000
jbe 0x1800316f9
lea rax, [rcx + 8]
cmp rax, rbx
jae 0x1800316f9
mov rcx, qword [rcx]
add rcx, 0x2c0
cmp rcx, 0x40000
jbe 0x1800316f9
lea rax, [rcx + 1]
cmp rax, rbx
jae 0x1800316f9
cmp byte [rcx], 0
je 0x1800316f9
cmp byte [0x18013985a], 0
je 0x1800316f9
mov qword [0x180139800], r13
lea rcx, [rdi + 0x5e8]
cmp rcx, 0x40000
jbe 0x18003171d
lea rax, [rcx + 4]
cmp rax, rbx
jae 0x18003171d
mov eax, dword [rcx]
jmp 0x180031720
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, r13d
shr eax, 4
test al, 1
je 0x180031737
cmp byte [0x18013986d], 0
je 0x180031737
mov qword [0x180139800], r13
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov ecx, dword [rax + 0x598]
test ecx, ecx
je 0x180031768
cmp dword [rdi + 0x598], ecx
jne 0x180031768
cmp byte [0x180122134], 0
je 0x180031768
mov qword [0x180139800], r13
mov rax, qword gs:[0x58]
mov r8d, r14d
mov edx, esi
mov rax, qword [rax + r8*8]
mov edx, dword [rdx + rax]
cmp dword [0x1801700e4], edx
jle 0x1800317b7
lea rcx, [0x1801700e4]
call fcn.18007a878
cmp dword [0x1801700e4], 0xffffffff
jne 0x1800317b7
mov ecx, 0x43f29029
call fcn.18000fd80
lea rcx, [0x1801700e4]
mov qword [0x18016fe70], rax
call fcn.18007a80c
mov rax, qword [0x18016fe70]
movss xmm0, dword [rdi + rax]
comiss xmm0, xmm11
ja 0x1800317d2
mov qword [0x180139800], r13
jmp 0x1800317dc
cmp qword [0x180139800], 0
jne 0x1800317e3
mov byte [0x180139859], 0
mov rbx, qword [0x180139810]
test rbx, rbx
je 0x1800318cf
mov rax, qword gs:[0x58]
mov rsi, rbx
mov edx, r14d
mov edi, 4
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x18016fd30], eax
jle 0x18003184f
lea rcx, [0x18016fd30]
call fcn.18007a878
cmp dword [0x18016fd30], 0xffffffff
jne 0x180031848
mov ecx, 0x33f7a6a3
call fcn.18000fd80
lea rcx, [0x18016fd30]
mov qword [0x18016fac0], rax
call fcn.18007a80c
mov rbx, qword [0x180139810]
mov rax, qword [0x18016fac0]
cmp byte [rsi + rax], 0
je 0x180031866
mov rbx, r13
mov qword [0x180139810], rbx
test rbx, rbx
je 0x1800318c8
mov rax, qword gs:[0x58]
mov edx, r14d
mov rdx, qword [rax + rdx*8]
mov eax, dword [rdi + rdx]
cmp dword [0x18016fdc4], eax
jle 0x1800318bb
lea rcx, [0x18016fdc4]
call fcn.18007a878
cmp dword [0x18016fdc4], 0xffffffff
jne 0x1800318bb
mov ecx, 0x8bb6774c
call fcn.18000e630
lea rcx, [0x18016fdc4]
mov rdx, qword [rax]
mov qword [0x18016fd98], rdx
call fcn.18007a80c
mov r8, rbx
call fcn.18003c820
test rax, rax
jne 0x1800318cf
mov qword [0x180139810], r13
cmp byte [0x180139845], 0
je 0x1800318df
mov qword [0x180139800], r13
cmp byte [0x18013986c], 0
je 0x1800318ef
mov qword [0x180139810], r13
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
test rax, rax
je 0x180031947
cmp byte [0x18013984e], 0
je 0x180031947
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov ecx, dword [rax + 0x598]
mov rax, qword [0x180139800]
test ecx, ecx
je 0x180031934
cmp dword [rax + 0x598], ecx
je 0x180031947
test rax, rax
je 0x180031947
cmp byte [0x180138bf8], 0
je 0x180031947
call fcn.18001ab40
movaps xmm13, xmmword [rsp + 0x3e0]
movaps xmm10, xmmword [rsp + 0x410]
mov r15, qword [rsp + 0x468]
movaps xmm15, xmmword [rsp + 0x3c0]
mov r12, qword [rsp + 0x478]
mov rsi, qword [rsp + 0x480]
mov r14, qword [rsp + 0x470]
movaps xmm9, xmmword [rsp + 0x420]
movaps xmm8, xmmword [rsp + 0x430]
movaps xmm7, xmmword [rsp + 0x440]
movaps xmm6, xmmword [rsp + 0x450]
movaps xmm11, xmmword [rsp + 0x400]
movaps xmm12, xmmword [rsp + 0x3f0]
movaps xmm14, xmmword [rsp + 0x3d0]
add rsp, 0x488
pop r13
pop rdi
pop rbx
pop rbp
ret
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x308]
sub rsp, 0x3c8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov r15d, dword [0x180139144]
mov rbx, rax
mov dword [rbp - 0x10], 0
xorps xmm14, xmm14
mov r12d, 4
test rax, rax
jne 0x1800325e3
lea rbx, [rbp - 0x10]
jmp 0x180032635
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov eax, dword [r12 + rax]
cmp dword [0x18016fb10], eax
jle 0x18003262e
lea rcx, [0x18016fb10]
call fcn.18007a878
cmp dword [0x18016fb10], 0xffffffff
jne 0x18003262e
mov ecx, 0xc566d10
call fcn.18000fd80
lea rcx, [0x18016fb10]
mov qword [0x18016f990], rax
call fcn.18007a80c
add rbx, qword [0x18016f990]
mov ecx, dword [0x180170148]
test ecx, ecx
je 0x180032654
sub ecx, 1
je 0x180032654
cmp ecx, 1
je 0x180032654
movss xmm10, dword [rbp + 0x310]
jmp 0x18003265e
call qword [0x180170140]
movaps xmm10, xmm0
subss xmm10, dword [rbx]
movss xmm15, dword [0x18010f2ec]
xor r13d, r13d
cmp byte [0x180139923], r13b
movaps xmmword [rsp + 0x3a0], xmm7
movaps xmm13, xmm10
movss dword [rbp + 0x310], xmm10
mulss xmm13, dword [0x18010f378]
addss xmm13, dword [0x18010f0bc]
movss dword [rbp + 0x318], xmm13
je 0x18003296a
mov ecx, dword [0x180139874]
mov eax, ecx
movss xmm1, dword [0x18016f6a8]
cdq
sub eax, edx
sar eax, 1
movd xmm11, eax
mov eax, dword [0x180139888]
cdq
sub eax, edx
sar eax, 1
comiss xmm1, dword [0x18010f6d4]
movd xmm12, eax
cvtdq2ps xmm12, xmm12
cvtdq2ps xmm11, xmm11
jbe 0x1800326ea
xorps xmm1, xmm1
addss xmm1, dword [0x1801221f4]
movd xmm0, ecx
mov edi, r13d
cvtdq2ps xmm0, xmm0
movss dword [0x18016f6a8], xmm1
divss xmm0, dword [0x1801221d4]
mulss xmm0, dword [0x18010f108]
cvttss2si eax, xmm0
movd xmm13, eax
cvtdq2ps xmm13, xmm13
movaps xmm10, xmm13
mulss xmm10, dword [0x18010f430]
nop
movd xmm2, edi
cvtdq2ps xmm2, xmm2
addss xmm2, xmm1
mulss xmm2, dword [0x18010f0c8]
movaps xmm1, xmm2
addss xmm2, dword [0x18010f24c]
movaps xmm0, xmm1
movaps xmm1, xmm2
call fcn.1800e5763
movaps xmm1, xmm0
movaps xmm2, xmm0
shufps xmm2, xmm0, 0xe
mov ecx, 0x10
shufps xmm0, xmm0, 1
mulss xmm0, xmm13
mulss xmm1, xmm13
cvttss2si eax, xmm1
mov dword [rsp + 0x60], eax
cvttss2si eax, xmm0
movaps xmm0, xmm2
shufps xmm2, xmm2, 1
mov dword [rsp + 0x64], eax
mulss xmm0, xmm10
mulss xmm2, xmm10
cvttss2si eax, xmm0
mov dword [rsp + 0x68], eax
cvttss2si eax, xmm2
mov dword [rsp + 0x6c], eax
call fcn.18007ac60
mov r8d, 0x10
lea rdx, [rsp + 0x60]
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memmove
movd xmm0, dword [rbx + 4]
lea rcx, [rbp - 0x80]
movss xmm1, dword [0x180122228]
movaps xmm7, xmm12
movss xmm2, dword [0x18012222c]
movss xmm3, dword [0x180122230]
movd xmm6, dword [rbx]
cvtdq2ps xmm0, xmm0
mov dword [rbp - 0x64], 0x3f800000
cvtdq2ps xmm6, xmm6
subss xmm7, xmm0
movups xmm0, xmmword [rbp - 0x70]
addss xmm6, xmm11
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm0
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea rdx, [rbp + 0x328]
mov r9d, eax
movss dword [rbp + 0x320], xmm6
lea r8, [rbp + 0x320]
movss dword [rbp + 0x324], xmm7
movss dword [rbp + 0x328], xmm11
movss dword [rbp + 0x32c], xmm12
movss dword [rsp + 0x20], xmm15
call fcn.18005aec0
movd xmm0, dword [rbx + 0xc]
movaps xmm9, xmm12
movd xmm8, dword [rbx + 8]
movaps xmm7, xmm12
movss xmm1, dword [0x180122228]
movss xmm2, dword [0x18012222c]
movss xmm3, dword [0x180122230]
cvtdq2ps xmm0, xmm0
mov dword [rbp - 0x24], 0x3f800000
cvtdq2ps xmm8, xmm8
subss xmm9, xmm0
movd xmm0, dword [rbx + 4]
cvtdq2ps xmm0, xmm0
addss xmm8, xmm11
subss xmm7, xmm0
movups xmm0, xmmword [rbp - 0x30]
lea rcx, [rbp - 0x80]
movd xmm6, dword [rbx]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
cvtdq2ps xmm6, xmm6
movups xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x80], xmm0
addss xmm6, xmm11
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea rdx, [rbp - 0x50]
mov r9d, eax
movss dword [rbp - 0x40], xmm8
lea r8, [rbp - 0x40]
movss dword [rbp - 0x3c], xmm9
movss dword [rbp - 0x50], xmm6
movss dword [rbp - 0x4c], xmm7
movss dword [rsp + 0x20], xmm15
call fcn.18005aec0
add edi, 0x5a
test rbx, rbx
je 0x180032943
mov edx, 0x10
mov rcx, rbx
call fcn.18007ac9c
cmp edi, 0x168
jge 0x180032958
movss xmm1, dword [0x18016f6a8]
jmp 0x180032730
movss xmm10, dword [rbp + 0x310]
movss xmm13, dword [rbp + 0x318]
cmp byte [0x180139893], r13b
mov rsi, qword [0x180139800]
je 0x18003297f
call fcn.180032060
call fcn.1800319d0
call fcn.180031d80
call fcn.1800239d0
mov eax, dword [0x180139874]
movss xmm9, dword [0x18010f714]
cdq
movss xmm8, dword [0x18010f5f8]
sub eax, edx
sar eax, 1
movd xmm12, eax
mov eax, dword [0x180139888]
cdq
sub eax, edx
sar eax, 1
cmp byte [0x1801398d5], r13b
cvtdq2ps xmm12, xmm12
movd xmm11, eax
cvtdq2ps xmm11, xmm11
movss dword [rbp + 0x318], xmm12
movss dword [rbp + 0x310], xmm11
je 0x180032ab3
movss xmm3, dword [0x18013987c]
movaps xmm7, xmm12
divss xmm3, dword [0x180139870]
movss xmm0, dword [0x18010f74c]
subss xmm7, xmm9
comiss xmm3, dword [0x18010f5d0]
unpcklps xmm0, xmm8
movaps xmm1, xmm7
movq r8, xmm0
jb 0x180032a3e
movaps xmm6, xmm11
movss dword [rsp + 0x20], xmm3
subss xmm6, dword [0x18010f764]
unpcklps xmm1, xmm6
movq rdx, xmm1
call fcn.180018980
jmp 0x180032a6a
movaps xmm2, xmm11
movss dword [rsp + 0x20], xmm15
subss xmm2, dword [0x18010f768]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.180018980
movaps xmm6, xmm11
subss xmm6, dword [0x18010f764]
movss xmm3, dword [0x180139880]
movaps xmm1, xmm7
divss xmm3, dword [0x180139878]
movss xmm0, dword [0x18010f74c]
comiss xmm3, dword [0x18010f604]
unpcklps xmm0, xmm8
unpcklps xmm1, xmm6
movq r8, xmm0
movq rdx, xmm1
jb 0x180032aa7
movss dword [rsp + 0x20], xmm3
jmp 0x180032aae
movss dword [rsp + 0x20], xmm15
call fcn.180018980
movzx edx, byte [0x1801398ef]
lea rcx, str.ManipulatorInd_animation
call fcn.180004790
comiss xmm0, dword [0x18010f08c]
jbe 0x180032c6e
mov qword [rsp + 0x60], r13
lea rcx, [rbp - 0x80]
mov dword [rsp + 0x68], r13d
movaps xmm6, xmm11
movups xmm1, xmmword [rsp + 0x60]
subss xmm6, dword [0x18010f65c]
shufps xmm1, xmm1, 0x93
movaps xmm7, xmm12
subss xmm7, dword [0x18010f6c0]
movss xmm1, xmm0
shufps xmm1, xmm1, 0x39
movups xmmword [rsp + 0x60], xmm1
movdqa xmmword [rbp - 0x80], xmm1
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x320]
movaps xmm0, xmm7
mov dword [rsp + 0x28], r13d
movaps xmm1, xmm6
movss dword [rbp + 0x328], xmm7
addss xmm0, xmm9
movss dword [rbp + 0x32c], xmm6
addss xmm1, xmm8
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea rdx, [rbp + 0x328]
movss dword [rbp + 0x320], xmm0
movss dword [rbp + 0x324], xmm1
call fcn.18005b130
cmp byte [0x1801398ef], r13b
je 0x180032c6e
cmp byte [0x180138b38], r13b
je 0x180032c6e
xorps xmm0, xmm0
lea rcx, str.ManipulatorInd_Active_animation
cvtss2sd xmm0, xmm13
comisd xmm0, xmmword [0x18010f268]
seta dl
call fcn.180004790
movaps xmm3, xmm0
xorps xmm1, xmm1
cvtss2sd xmm1, xmm3
comisd xmm1, xmmword [0x18010f2c0]
jbe 0x180032c6e
comiss xmm13, dword [0x18010f1b0]
movss xmm4, dword [0x18010f5a8]
movaps xmm1, xmm13
mulss xmm10, xmm9
addss xmm1, xmm13
minss xmm10, dword [0x18010f74c]
jae 0x180032bf2
movaps xmm2, xmm15
jmp 0x180032bfd
movaps xmm2, xmm4
subss xmm2, xmm1
movaps xmm1, xmm15
movss xmm8, dword [0x18010f5e0]
subss xmm10, xmm4
mov dword [rsp + 0x38], r13d
addss xmm6, xmm15
movss dword [rsp + 0x30], xmm14
addss xmm7, xmm15
mov dword [rsp + 0x68], r13d
lea rax, [rbp - 0x80]
movups xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movss xmm0, xmm1
movaps xmm1, xmm7
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
movaps xmm2, xmm6
shufps xmm0, xmm0, 0x87
movss xmm0, xmm3
movaps xmm3, xmm10
shufps xmm0, xmm0, 0x39
movups xmmword [rsp + 0x60], xmm0
movdqa xmmword [rbp - 0x80], xmm0
call fcn.180018900
jmp 0x180032c77
movss xmm8, dword [0x18010f5e0]
cmp byte [0x180139927], r13b
je 0x18003300d
movdqa xmm6, xmmword [0x18010fe10]
lea rcx, [rbp - 0x80]
movaps xmm13, xmm11
movdqa xmmword [rbp - 0x80], xmm6
movaps xmm9, xmm12
addss xmm13, xmm8
addss xmm9, xmm8
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x320]
movss dword [rbp + 0x328], xmm12
lea rdx, [rbp + 0x328]
movss xmm12, dword [0x18010f228]
mov r9d, eax
movss dword [rsp + 0x20], xmm12
movss dword [rbp + 0x320], xmm9
movss dword [rbp + 0x324], xmm13
movss dword [rbp + 0x32c], xmm11
call fcn.18005aec0
movaps xmm10, xmm11
movdqa xmmword [rbp - 0x80], xmm6
lea rcx, [rbp - 0x80]
subss xmm10, xmm8
call fcn.180041680
movss xmm7, dword [rbp + 0x318]
lea rdx, [rbp + 0x328]
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x320]
mov r9d, eax
movss dword [rbp + 0x328], xmm7
movss dword [rbp + 0x320], xmm9
movss dword [rbp + 0x324], xmm10
movss dword [rbp + 0x32c], xmm11
movss dword [rsp + 0x20], xmm12
call fcn.18005aec0
movaps xmm11, xmm7
movdqa xmmword [rbp - 0x80], xmm6
lea rcx, [rbp - 0x80]
subss xmm11, xmm8
call fcn.180041680
movss xmm6, dword [rbp + 0x310]
lea rdx, [rbp + 0x328]
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x320]
mov r9d, eax
movss dword [rbp + 0x32c], xmm6
movss dword [rbp + 0x320], xmm11
movss dword [rbp + 0x324], xmm10
movss dword [rbp + 0x328], xmm7
movss dword [rsp + 0x20], xmm12
call fcn.18005aec0
movdqa xmm0, xmmword [0x18010fe10]
lea rax, [rbp - 0x80]
mov byte [rsp + 0x38], r13b
movaps xmm3, xmm11
movss dword [rsp + 0x30], xmm12
movaps xmm2, xmm6
mov qword [rsp + 0x28], rax
movaps xmm1, xmm7
movss dword [rsp + 0x20], xmm13
movdqa xmmword [rbp - 0x80], xmm0
call fcn.180018020
movss xmm0, dword [0x1801221c8]
movaps xmm8, xmm13
movss xmm1, dword [0x1801221cc]
movaps xmm6, xmm9
movss xmm2, dword [0x1801221d0]
addss xmm8, dword [0x18010f5e0]
addss xmm6, dword [0x18010f5e0]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm12
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
lea rax, [rbp - 0x80]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rax
movaps xmm2, xmm13
movaps xmm1, xmm9
movss dword [rsp + 0x20], xmm8
call fcn.180018020
movss xmm1, dword [0x1801221cc]
lea rax, [rbp - 0x80]
movss xmm2, dword [0x1801221d0]
movaps xmm7, xmm10
movss xmm0, dword [0x1801221c8]
movaps xmm3, xmm6
subss xmm7, dword [0x18010f5e0]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm12
mov dword [rsp + 0x6c], 0x3f800000
movups xmm4, xmmword [rsp + 0x60]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movss xmm4, xmm0
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm1
movaps xmm1, xmm9
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm2
movaps xmm2, xmm10
shufps xmm4, xmm4, 0xc9
movups xmmword [rsp + 0x60], xmm4
movdqa xmmword [rbp - 0x80], xmm4
call fcn.180018020
movss xmm1, dword [0x1801221cc]
lea rax, [rbp - 0x80]
movss xmm2, dword [0x1801221d0]
movaps xmm6, xmm11
movss xmm0, dword [0x1801221c8]
subss xmm6, dword [0x18010f5e0]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm12
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
movaps xmm1, xmm11
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
movaps xmm2, xmm10
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
movaps xmm3, xmm6
call fcn.180018020
movss xmm1, dword [0x1801221cc]
lea rax, [rbp - 0x80]
movss xmm2, dword [0x1801221d0]
movaps xmm3, xmm6
movss xmm0, dword [0x1801221c8]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm12
mov dword [rsp + 0x6c], 0x3f800000
movups xmm4, xmmword [rsp + 0x60]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movss xmm4, xmm0
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm1
movaps xmm1, xmm11
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm2
movaps xmm2, xmm13
shufps xmm4, xmm4, 0xc9
movups xmmword [rsp + 0x60], xmm4
movdqa xmmword [rbp - 0x80], xmm4
call fcn.180018020
movss xmm11, dword [rbp + 0x310]
movss xmm12, dword [rbp + 0x318]
cmp byte [0x180139926], r13b
je 0x1800335b8
movss xmm2, dword [0x180122218]
lea rcx, [rbp - 0x80]
movss xmm3, dword [0x18012221c]
movaps xmm6, xmm12
movss xmm4, dword [0x180122220]
addss xmm6, dword [0x180122204]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm0, xmmword [rsp + 0x60]
mov dword [rbp - 0x64], r13d
movups xmm1, xmmword [rbp - 0x70]
mov dword [rbp - 0x24], r13d
movss xmm0, xmm2
mov dword [rbp - 0x44], 0x3f800000
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
movdqa xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x60], xmm1
movups xmm1, xmmword [rbp - 0x50]
movss xmm0, xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180041680
lea rcx, [rsp + 0x60]
mov r10d, eax
call fcn.180041680
lea rcx, [rbp - 0x70]
mov r9d, eax
call fcn.180041680
lea rcx, [rbp - 0x30]
mov r8d, eax
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea rdx, [rbp + 0x318]
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm6
addss xmm0, dword [0x1801221e4]
mov dword [rsp + 0x28], r9d
movaps xmm9, xmm11
addss xmm9, xmm15
mov dword [rsp + 0x20], r8d
mov r9d, eax
movss dword [rbp + 0x318], xmm6
lea r8, [rbp + 0x310]
movss dword [rbp + 0x31c], xmm11
movss dword [rbp + 0x310], xmm0
movss dword [rbp + 0x314], xmm9
call fcn.18005b2e0
movss xmm2, dword [0x180122218]
movss xmm3, dword [0x18012221c]
movss xmm4, dword [0x180122220]
movss xmm7, dword [0x1801221e4]
movss xmm8, dword [0x18010fe80]
mov dword [rsp + 0x6c], 0x3f800000
mov dword [rbp - 0x64], r13d
mov dword [rbp - 0x24], r13d
mov dword [rbp - 0x44], 0x3f800000
movups xmm0, xmmword [rsp + 0x60]
lea rcx, [rbp - 0x80]
movups xmm1, xmmword [rbp - 0x70]
movss xmm13, dword [0x18010f5a8]
movss xmm0, xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movaps xmm6, xmm12
subss xmm6, dword [0x180122204]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
movdqa xmmword [rbp - 0x80], xmm0
xorps xmm7, xmm8
movdqa xmmword [rsp + 0x60], xmm1
addss xmm6, xmm13
movups xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x50]
movss xmm0, xmm2
movss xmm1, xmm2
shufps xmm0, xmm0, 0xe1
shufps xmm1, xmm1, 0xe1
movss xmm0, xmm3
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180041680
lea rcx, [rsp + 0x60]
mov r10d, eax
call fcn.180041680
lea rcx, [rbp - 0x70]
mov r9d, eax
call fcn.180041680
lea rcx, [rbp - 0x30]
mov r8d, eax
call fcn.180041680
mov rcx, qword [0x18016fa60]
addss xmm7, xmm6
mov dword [rsp + 0x30], r10d
lea rdx, [rbp + 0x318]
mov dword [rsp + 0x28], r9d
mov r9d, eax
mov dword [rsp + 0x20], r8d
lea r8, [rbp + 0x310]
movss dword [rbp + 0x314], xmm9
movss dword [rbp + 0x310], xmm7
movss dword [rbp + 0x318], xmm6
movss dword [rbp + 0x31c], xmm11
call fcn.18005b2e0
movss xmm2, dword [0x180122218]
movaps xmm6, xmm11
subss xmm6, dword [0x180122204]
movss xmm3, dword [0x18012221c]
movss xmm7, dword [0x1801221e4]
movss xmm4, dword [0x180122220]
xorps xmm7, xmm8
mov dword [rsp + 0x6c], r13d
movups xmm0, xmmword [rsp + 0x60]
mov dword [rbp - 0x64], r13d
mov dword [rbp - 0x24], 0x3f800000
addss xmm6, xmm13
movss xmm0, xmm2
mov dword [rbp - 0x44], 0x3f800000
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm3
movups xmm1, xmmword [rbp - 0x70]
lea rcx, [rbp - 0x80]
shufps xmm0, xmm0, 0xc6
movss xmm1, xmm2
movss xmm0, xmm4
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc9
shufps xmm1, xmm1, 0xc6
movss xmm1, xmm4
movdqa xmmword [rbp - 0x80], xmm0
shufps xmm1, xmm1, 0xc9
movups xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rbp - 0x70], xmm1
movdqa xmmword [rsp + 0x60], xmm1
movss xmm0, xmm2
movups xmm1, xmmword [rbp - 0x50]
shufps xmm0, xmm0, 0xe1
movss xmm1, xmm2
movss xmm0, xmm3
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180041680
lea rcx, [rsp + 0x60]
mov r10d, eax
call fcn.180041680
lea rcx, [rbp - 0x70]
mov r9d, eax
call fcn.180041680
lea rcx, [rbp - 0x30]
mov r8d, eax
call fcn.180041680
mov rcx, qword [0x18016fa60]
addss xmm7, xmm6
mov dword [rsp + 0x30], r10d
lea rdx, [rbp + 0x318]
mov dword [rsp + 0x28], r9d
movaps xmm8, xmm12
addss xmm8, xmm15
mov dword [rsp + 0x20], r8d
mov r9d, eax
movss dword [rbp + 0x318], xmm12
lea r8, [rbp + 0x310]
movss dword [rbp + 0x314], xmm7
movss dword [rbp + 0x31c], xmm6
movss dword [rbp + 0x310], xmm8
call fcn.18005b2e0
movss xmm2, dword [0x180122218]
movaps xmm6, xmm11
movss xmm3, dword [0x18012221c]
movss xmm4, dword [0x180122220]
addss xmm6, dword [0x180122204]
mov dword [rsp + 0x6c], r13d
movups xmm0, xmmword [rsp + 0x60]
mov dword [rbp - 0x64], r13d
movups xmm1, xmmword [rbp - 0x70]
mov dword [rbp - 0x24], 0x3f800000
movss xmm0, xmm2
mov dword [rbp - 0x44], 0x3f800000
shufps xmm0, xmm0, 0xe1
movss xmm1, xmm2
movss xmm0, xmm3
shufps xmm1, xmm1, 0xe1
shufps xmm0, xmm0, 0xc6
movss xmm1, xmm3
movss xmm0, xmm4
shufps xmm1, xmm1, 0xc6
shufps xmm0, xmm0, 0xc9
movups xmmword [rsp + 0x60], xmm0
movdqa xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [rbp - 0x30]
lea rcx, [rbp - 0x80]
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movss xmm0, xmm2
movups xmmword [rbp - 0x70], xmm1
movdqa xmmword [rsp + 0x60], xmm1
movups xmm1, xmmword [rbp - 0x50]
shufps xmm0, xmm0, 0xe1
movss xmm1, xmm2
movss xmm0, xmm3
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm3
shufps xmm0, xmm0, 0xc6
shufps xmm1, xmm1, 0xc6
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc9
movss xmm1, xmm4
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x70], xmm0
call fcn.180041680
lea rcx, [rsp + 0x60]
mov r10d, eax
call fcn.180041680
lea rcx, [rbp - 0x70]
mov r9d, eax
call fcn.180041680
lea rcx, [rbp - 0x30]
mov r8d, eax
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea rdx, [rbp + 0x318]
mov dword [rsp + 0x30], r10d
movaps xmm0, xmm6
addss xmm0, dword [0x1801221e4]
mov dword [rsp + 0x28], r9d
mov r9d, eax
mov dword [rsp + 0x20], r8d
lea r8, [rbp + 0x310]
movss dword [rbp + 0x310], xmm8
movss dword [rbp + 0x318], xmm12
movss dword [rbp + 0x314], xmm0
movss dword [rbp + 0x31c], xmm6
call fcn.18005b2e0
jmp 0x1800335c1
movss xmm13, dword [0x18010f5a8]
cmp byte [0x180139924], r13b
movss xmm9, dword [0x18010f518]
je 0x180033660
movss xmm0, dword [0x180122248]
lea rcx, [rbp - 0x80]
movss xmm1, dword [0x18012224c]
movss xmm2, dword [0x180122250]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea rdx, [rbp + 0x310]
movaps xmm0, xmm11
movss dword [rbp + 0x310], xmm12
addss xmm0, xmm15
mov dword [rsp + 0x20], r13d
mov r9d, eax
movaps xmm2, xmm9
movss dword [rbp + 0x314], xmm0
call fcn.18005b850
cmp byte [0x180139925], r13b
je 0x180033861
movss xmm0, dword [0x180122208]
lea rcx, [rbp - 0x80]
movss xmm1, dword [0x18012220c]
movaps xmm6, xmm12
movss xmm2, dword [0x180122210]
movss xmm8, dword [0x18010f610]
mov dword [rsp + 0x6c], 0x3f800000
addss xmm6, xmm8
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x310]
movaps xmm0, xmm6
mov dword [rsp + 0x28], r13d
movaps xmm7, xmm11
movss dword [rbp + 0x318], xmm6
addss xmm7, dword [0x18010f5d0]
addss xmm0, xmm8
movss dword [rbp + 0x31c], xmm11
mov r9d, eax
movss dword [rsp + 0x20], xmm14
lea rdx, [rbp + 0x318]
movss dword [rbp + 0x314], xmm7
movss dword [rbp + 0x310], xmm0
call fcn.18005b130
movss xmm0, dword [0x180122208]
lea rcx, [rbp - 0x80]
movss xmm1, dword [0x18012220c]
movaps xmm6, xmm12
movss xmm2, dword [0x180122210]
subss xmm6, xmm8
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea r8, [rbp + 0x310]
movaps xmm0, xmm6
mov dword [rsp + 0x28], r13d
subss xmm0, xmm8
movss dword [rbp + 0x314], xmm7
mov r9d, eax
movss dword [rbp + 0x318], xmm6
lea rdx, [rbp + 0x318]
movss dword [rbp + 0x31c], xmm11
movss dword [rsp + 0x20], xmm14
movss dword [rbp + 0x310], xmm0
call fcn.18005b130
movss xmm0, dword [0x180122208]
lea rcx, [rbp - 0x80]
movss xmm1, dword [0x18012220c]
movss xmm2, dword [0x180122210]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
call fcn.180041680
movaps xmm0, xmm11
movss dword [rbp + 0x310], xmm12
addss xmm0, xmm15
mov rcx, qword [0x18016fa60]
lea rdx, [rbp + 0x310]
mov r9d, eax
movss dword [rbp + 0x314], xmm0
movaps xmm2, xmm9
mov dword [rsp + 0x20], r13d
call fcn.18005b850
cmp byte [0x180139864], r13b
je 0x180033901
movss xmm0, dword [0x1801221f8]
lea rcx, [rbp - 0x80]
movss xmm1, dword [0x1801221fc]
movss xmm2, dword [0x180122200]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
call fcn.180041680
movss xmm0, dword [0x18010f37c]
lea rdx, [rbp + 0x310]
movss xmm2, dword [0x180122170]
mov r9d, eax
mov rcx, qword [0x18016fa60]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
movss dword [rbp + 0x310], xmm12
movss dword [rbp + 0x314], xmm11
call fcn.18005b770
cmp qword [0x180139800], r13
movss xmm6, dword [0x180122170]
je 0x18003392f
mov rcx, rsi
call fcn.18001a4c0
comiss xmm6, xmm0
jae 0x18003392f
cmp byte [0x180139859], r13b
jne 0x18003392f
mov qword [0x180139800], r13
mov rcx, qword [0x180139810]
test rcx, rcx
je 0x180033a36
call fcn.1800139b0
mov rbx, rax
test rax, rax
jne 0x180033956
mov qword [rbp - 0x50], r13
mov dword [rbp - 0x48], r13d
jmp 0x1800339b1
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov eax, dword [r12 + rax]
cmp dword [0x18016fb78], eax
jle 0x1800339a4
lea rcx, [0x18016fb78]
call fcn.18007a878
cmp dword [0x18016fb78], 0xffffffff
jne 0x1800339a4
mov ecx, 0x56e64b7d
call fcn.18000e630
lea rcx, [0x18016fb78]
mov rdx, qword [rax]
mov qword [0x18016fa50], rdx
call fcn.18007a80c
mov rdx, rbx
lea rcx, [rbp - 0x50]
call qword [0x18016fa50]
movsd xmm0, qword [rbp - 0x50]
lea rdx, [rbp + 0x310]
mov eax, dword [rbp - 0x48]
lea rcx, [rbp - 0x40]
movsd qword [rbp - 0x40], xmm0
mov qword [rbp + 0x310], r13
mov dword [rbp - 0x38], eax
call fcn.1800164e0
test al, al
jne 0x1800339e6
movss xmm0, dword [0x18010f780]
jmp 0x180033a2a
mov eax, dword [0x180139874]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
mov eax, dword [0x180139888]
cdq
cvtdq2ps xmm1, xmm1
sub eax, edx
sar eax, 1
subss xmm1, dword [rbp + 0x310]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm1
subss xmm0, dword [rbp + 0x314]
mulss xmm0, xmm0
addss xmm0, xmm1
sqrtss xmm0, xmm0
comiss xmm6, xmm0
jae 0x180033a36
mov qword [0x180139810], r13
mov rdi, qword [0x180139800]
test rdi, rdi
je 0x180033a9a
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r15*8]
mov eax, dword [r12 + rcx]
cmp dword [0x18016fd30], eax
jle 0x180033a8d
lea rcx, [0x18016fd30]
call fcn.18007a878
cmp dword [0x18016fd30], 0xffffffff
jne 0x180033a8d
mov ecx, 0x33f7a6a3
call fcn.18000fd80
lea rcx, [0x18016fd30]
mov qword [0x18016fac0], rax
call fcn.18007a80c
mov rax, qword [0x18016fac0]
cmp byte [rdi + rax], r13b
je 0x180033aa1
mov qword [0x180139800], r13
mov rdi, qword [0x180139810]
test rdi, rdi
je 0x180033b05
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r15*8]
mov eax, dword [r12 + rcx]
cmp dword [0x18016fd30], eax
jle 0x180033af8
lea rcx, [0x18016fd30]
call fcn.18007a878
cmp dword [0x18016fd30], 0xffffffff
jne 0x180033af8
mov ecx, 0x33f7a6a3
call fcn.18000fd80
lea rcx, [0x18016fd30]
mov qword [0x18016fac0], rax
call fcn.18007a80c
mov rax, qword [0x18016fac0]
cmp byte [rdi + rax], r13b
je 0x180033b0c
mov qword [0x180139810], r13
movzx edx, byte [0x1801398ff]
lea rcx, str.ReloadInd_animation
call fcn.180004520
mov r14d, eax
cmp eax, 1
jle 0x180033e93
mov rcx, qword [0x180139808]
add rcx, 0x30c670
call rcx
mov rcx, rax
call fcn.18003d190
mov rdi, rax
test rax, rax
je 0x180033e93
mov rcx, rax
call fcn.180014b20
cmp eax, 0x407209f5
jne 0x180033e93
cmp byte [0x18013976e], r13b
jne 0x180033cf8
mov rcx, rdi
call fcn.1800145d0
mov rcx, rdi
mov rbx, rax
call fcn.1800145d0
movss xmm6, dword [0x18010f11c]
movss xmm0, dword [rbx]
movss xmm2, dword [0x1801397b8]
movss xmm1, dword [rax]
mulss xmm1, xmm6
subss xmm0, xmm1
comiss xmm2, xmm0
ja 0x180033cf8
comiss xmm2, xmm14
jbe 0x180033cf8
movss xmm10, dword [0x18010f098]
lea rax, [rbp - 0x80]
movss xmm9, dword [0x18010f714]
movaps xmm7, xmm11
subss xmm7, dword [0x18010f674]
movaps xmm8, xmm12
mov dword [rsp + 0x38], r13d
subss xmm8, dword [0x18010f6c0]
movss dword [rsp + 0x30], xmm14
movaps xmm3, xmm9
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x68], r13d
mov qword [rsp + 0x28], rax
movaps xmm2, xmm7
movups xmm1, xmmword [rsp + 0x60]
mulss xmm0, xmm10
shufps xmm1, xmm1, 0x93
movss xmm1, xmm0
movss xmm0, dword [0x18010f5f8]
shufps xmm1, xmm1, 0x39
movups xmmword [rsp + 0x60], xmm1
movdqa xmmword [rbp - 0x80], xmm1
movaps xmm1, xmm8
movss dword [rsp + 0x20], xmm0
call fcn.180018900
mov rcx, rdi
call fcn.1800145d0
mov rcx, rdi
mov rbx, rax
call fcn.1800145d0
cmp byte [0x1801398ff], r13b
movss xmm1, dword [rbx]
movss xmm0, dword [rax]
mulss xmm0, xmm6
movss xmm6, dword [0x1801397b8]
subss xmm1, xmm0
divss xmm6, xmm1
addss xmm6, dword [0x18010f0bc]
je 0x180033c8f
ucomiss xmm6, xmm15
je 0x180033c8f
mov dl, 1
jmp 0x180033c91
xor edx, edx
lea rcx, str.ReloadInd1_animation
call fcn.180004520
cmp eax, 1
jle 0x180033e93
mulss xmm6, xmm9
addss xmm7, xmm15
mov dword [rsp + 0x60], r13d
movd xmm1, eax
addss xmm8, xmm15
cvtdq2ps xmm1, xmm1
mov qword [rsp + 0x64], 0x3f48c8ca
minss xmm6, dword [0x18010f74c]
movups xmm0, xmmword [rsp + 0x60]
mulss xmm1, xmm10
movaps xmm2, xmm7
subss xmm6, xmm13
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
movaps xmm1, xmm8
movaps xmm3, xmm6
jmp 0x180033e5d
mov rcx, rdi
call fcn.180014bb0
test al, al
je 0x180033e93
movss xmm13, dword [0x18010f098]
lea rax, [rbp - 0x80]
movss xmm9, dword [0x18010f714]
movaps xmm8, xmm11
subss xmm8, dword [0x18010f674]
movaps xmm10, xmm12
mov dword [rsp + 0x38], r13d
subss xmm10, dword [0x18010f6c0]
movss dword [rsp + 0x30], xmm14
movaps xmm3, xmm9
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x68], r13d
mov qword [rsp + 0x28], rax
movaps xmm2, xmm8
movups xmm1, xmmword [rsp + 0x60]
mulss xmm0, xmm13
shufps xmm1, xmm1, 0x93
movss xmm1, xmm0
movss xmm0, dword [0x18010f5f8]
shufps xmm1, xmm1, 0x39
movups xmmword [rsp + 0x60], xmm1
movdqa xmmword [rbp - 0x80], xmm1
movaps xmm1, xmm10
movss dword [rsp + 0x20], xmm0
call fcn.180018900
mov rcx, rdi
call fcn.180014650
mov rcx, rdi
movss xmm7, dword [rax]
subss xmm7, dword [0x1801397b0]
call fcn.1800145d0
mov rcx, rdi
movss xmm6, dword [rax]
call fcn.180014650
movaps xmm2, xmm6
movss xmm1, dword [rax]
call fcn.180014c50
cmp byte [0x1801398ff], r13b
subss xmm0, dword [0x1801397b0]
divss xmm7, xmm0
addss xmm7, dword [0x18010f0bc]
je 0x180033df5
ucomiss xmm7, xmm15
je 0x180033df5
mov dl, 1
jmp 0x180033df7
xor edx, edx
lea rcx, str.ReloadInd2_animation
call fcn.180004520
cmp eax, 1
jle 0x180033e93
mulss xmm7, xmm9
addss xmm8, xmm15
mov dword [rsp + 0x60], r13d
movd xmm1, eax
addss xmm10, xmm15
cvtdq2ps xmm1, xmm1
mov qword [rsp + 0x64], 0x3f48c8ca
minss xmm7, dword [0x18010f74c]
movups xmm0, xmmword [rsp + 0x60]
mulss xmm1, xmm13
movaps xmm2, xmm8
subss xmm7, dword [0x18010f5a8]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
movaps xmm1, xmm10
movaps xmm3, xmm7
shufps xmm0, xmm0, 0x39
lea rax, [rbp - 0x80]
mov dword [rsp + 0x38], r13d
movss dword [rsp + 0x30], xmm14
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x28], rax
movdqa xmmword [rbp - 0x80], xmm0
movss xmm0, dword [0x18010f5e0]
movss dword [rsp + 0x20], xmm0
call fcn.180018900
movzx eax, byte [0x18013984c]
movss xmm8, dword [0x18010f730]
movss xmm6, dword [0x18010f624]
test al, al
je 0x180034189
movss xmm0, dword [0x18016f448]
ucomiss xmm0, xmm14
jne 0x180033ee1
movss xmm0, dword [0x18016f44c]
ucomiss xmm0, xmm14
jne 0x180033ee1
movss xmm0, dword [0x18016f450]
ucomiss xmm0, xmm14
je 0x180034012
cmp qword [0x180139800], r13
je 0x180034012
xorps xmm0, xmm0
mov qword [rsp + 0x70], r13
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r13b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x78], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.target_manipulated
lea rcx, [rbp + 0x20]
call fcn.18003c900
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x180033f35
mov rcx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x70]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x180033f85
cmp rcx, 0xf
lea rax, [r14 + rdi]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmova rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x20]
mov r8, rdi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r14]
mov byte [rax + rbx], r13b
jmp 0x180033f9b
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.18003d7f0
cmp qword [rsp + 0x78], 0xf
lea rax, [rsp + 0x60]
movdqa xmm0, xmmword [0x18010fbc0]
lea r9, [rbp - 0x80]
cmova rax, qword [rsp + 0x60]
movaps xmm2, xmm11
subss xmm2, dword [0x18010f6a4]
mov rcx, qword [0x18016fd38]
movaps xmm1, xmm12
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139950]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rsp + 0x20], 3
call fcn.180018150
lea rcx, [rsp + 0x60]
call fcn.18003b770
movzx eax, byte [0x18013984c]
test al, al
je 0x180034189
cmp byte [0x180138b38], r13b
je 0x180034189
cmp byte [0x180139844], r13b
je 0x180034189
xorps xmm0, xmm0
mov qword [rsp + 0x70], r13
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r13b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x78], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.manipulator_angles:_15m
lea rcx, [rbp + 0x20]
call fcn.18003c900
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x180034080
mov rcx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x70]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x1800340d0
cmp rcx, 0xf
lea rax, [rdi + r14]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmova rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x20]
mov r8, rdi
lea rcx, [rbx + r14]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov byte [rax + r14], r13b
jmp 0x1800340e6
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.18003d7f0
cmp qword [rsp + 0x78], 0xf
lea rax, [rsp + 0x60]
movdqa xmm0, xmmword [0x18010fbc0]
lea r9, [rbp - 0x80]
cmova rax, qword [rsp + 0x60]
movaps xmm2, xmm11
mov rcx, qword [0x18016fd38]
subss xmm2, xmm8
mov qword [rsp + 0x38], rax
movaps xmm1, xmm12
mov rax, qword [0x180139950]
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rsp + 0x20], 3
call fcn.180018150
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x180034189
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180034184
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180034184
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007ac9c
cmp byte [0x1801398a4], r13b
je 0x1800343c7
xorps xmm0, xmm0
mov qword [rbp - 0x60], r13
movups xmmword [rbp - 0x70], xmm0
xor edx, edx
mov byte [rbp - 0x70], r13b
mov r8d, pe_nt_image_headers64
mov qword [rbp - 0x58], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
cmp qword [0x180139800], r13
je 0x18003429d
mov rcx, rsi
call fcn.180015470
mov r8, rax
lea rdx, [0x18010bd20]
lea rcx, [rbp + 0x20]
call fcn.18003c900
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x1800341f1
mov rcx, qword [rbp - 0x58]
mov r14, qword [rbp - 0x60]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18003423c
cmp rcx, 0xf
lea rax, [r14 + rdi]
lea rbx, [rbp - 0x70]
mov qword [rbp - 0x60], rax
cmova rbx, qword [rbp - 0x70]
lea rdx, [rbp + 0x20]
mov r8, rdi
lea rcx, [rbx + r14]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov byte [rax + r14], r13b
jmp 0x180034251
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.18003d7f0
movss xmm0, dword [0x180122178]
movss xmm1, dword [0x18012217c]
movss xmm3, dword [0x180122180]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm4, xmmword [rsp + 0x60]
movss xmm4, xmm0
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm1
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm3
shufps xmm4, xmm4, 0xc9
movups xmmword [rsp + 0x60], xmm4
movdqa xmmword [rbp - 0x80], xmm4
jmp 0x180034367
lea rdx, str.no_target
lea rcx, [rbp + 0x20]
call fcn.18003c900
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x1800342c0
mov rcx, qword [rbp - 0x58]
mov r14, qword [rbp - 0x60]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18003430b
cmp rcx, 0xf
lea rax, [r14 + rdi]
lea rbx, [rbp - 0x70]
mov qword [rbp - 0x60], rax
cmova rbx, qword [rbp - 0x70]
lea rdx, [rbp + 0x20]
mov r8, rdi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r14]
mov byte [rax + rbx], r13b
jmp 0x180034320
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.18003d7f0
movss xmm0, dword [0x180122178]
movss xmm1, dword [0x18012217c]
movss xmm2, dword [0x180122180]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x60], xmm3
movdqa xmmword [rbp - 0x80], xmm3
addss xmm11, dword [0x18010f618]
cmp qword [rbp - 0x58], 0xf
lea rax, [rbp - 0x70]
mov rcx, qword [0x18016fd38]
lea r9, [rbp - 0x80]
cmova rax, qword [rbp - 0x70]
movaps xmm1, xmm12
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139950]
movaps xmm2, xmm11
movss dword [rsp + 0x30], xmm6
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x20], 3
call fcn.180018150
lea rcx, [rbp - 0x70]
call fcn.18003b770
cmp byte [0x180139909], r13b
je 0x18003495f
mov rax, qword gs:[0x58]
mov rdi, qword [rax + r15*8]
mov eax, dword [rdi + r12]
cmp dword [0x18016ff10], eax
jle 0x180034421
lea rcx, [0x18016ff10]
call fcn.18007a878
cmp dword [0x18016ff10], 0xffffffff
jne 0x180034421
movd xmm0, dword [0x180139874]
lea rcx, [0x18016ff10]
cvtdq2ps xmm0, xmm0
movss dword [0x18016fd4c], xmm0
call fcn.18007a80c
mov eax, dword [rdi + r12]
cmp dword [0x18016faf8], eax
jle 0x180034461
lea rcx, [0x18016faf8]
call fcn.18007a878
cmp dword [0x18016faf8], 0xffffffff
jne 0x180034461
movd xmm0, dword [0x180139888]
lea rcx, [0x18016faf8]
cvtdq2ps xmm0, xmm0
movss dword [0x18016fd48], xmm0
call fcn.18007a80c
mov rax, qword [0x180139808]
movss xmm8, dword [0x18016fd4c]
add rax, 0x30c670
movss xmm7, dword [0x18010f1b0]
movss xmm12, dword [0x18016fd48]
movss dword [rbp - 0x68], xmm14
movss dword [rbp - 0x68], xmm14
movss dword [rbp - 0x68], xmm14
mulss xmm8, xmm7
call rax
movaps xmm0, xmm14
movss dword [rbp - 0x48], xmm14
unpcklps xmm0, xmm14
lea rdx, [rsp + 0x60]
movsd qword [rbp - 0x70], xmm0
mov r8d, 0x2f
movsd qword [rbp - 0x50], xmm0
mov rcx, rax
movaps xmm0, xmm14
movss dword [rbp - 0x38], xmm14
unpcklps xmm0, xmm14
movsd qword [rbp - 0x70], xmm0
movsd qword [rbp - 0x40], xmm0
movaps xmm0, xmm14
unpcklps xmm0, xmm14
movsd qword [rbp - 0x70], xmm0
movsd qword [rbp - 0x30], xmm0
movss dword [rbp - 0x28], xmm14
call fcn.180015830
lea r9, [rbp - 0x30]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 8]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
mov dword [rbp - 0x68], eax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
movsd qword [rbp - 0x70], xmm0
call fcn.1800166f0
movsd xmm6, qword [rbp + 8]
lea rdx, [rbp + 0x310]
mov ebx, dword [rbp + 0x10]
lea rcx, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm6
mov qword [rbp + 0x310], r13
mov dword [rbp - 0x68], ebx
call fcn.1800164e0
movdqa xmm9, xmmword [0x18010fe10]
test al, al
je 0x180034975
cmp byte [rbp - 8], r13b
je 0x180034975
movss xmm11, dword [rbp + 0x310]
lea rax, [rbp - 0x80]
movss xmm10, dword [rbp + 0x314]
movaps xmm3, xmm11
mov byte [rsp + 0x38], r13b
movaps xmm2, xmm12
movss dword [rsp + 0x30], xmm15
movaps xmm1, xmm8
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm10
movdqa xmmword [rbp - 0x80], xmm9
call fcn.180018020
movaps xmm0, xmm14
movss dword [rbp - 0x68], xmm14
unpcklps xmm0, xmm14
lea rax, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm0
lea r9, [rbp - 0x50]
movsd qword [rbp - 0x70], xmm0
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 8]
movaps xmm0, xmm14
movss dword [rbp - 0x28], xmm14
unpcklps xmm0, xmm14
lea rax, [rbp - 0x30]
movsd qword [rbp - 0x30], xmm0
movsd qword [rbp - 0x30], xmm0
movss dword [rbp - 0x68], xmm14
movss dword [rbp - 0x28], xmm14
movsd qword [rbp - 0x50], xmm6
mov dword [rbp - 0x48], ebx
movsd qword [rbp - 0x40], xmm6
mov dword [rbp - 0x38], ebx
mov qword [rsp + 0x20], rax
call fcn.1800166f0
movsd xmm7, qword [rbp + 8]
lea rdx, [rbp + 0x310]
mov edi, dword [rbp + 0x10]
lea rcx, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm7
mov qword [rbp + 0x310], r13
mov dword [rbp - 0x68], edi
call fcn.1800164e0
test al, al
je 0x18003496d
cmp byte [rbp - 8], r13b
je 0x180034833
movss xmm13, dword [rbp + 0x310]
lea rax, [rbp - 0x80]
movss xmm12, dword [rbp + 0x314]
movaps xmm3, xmm13
mov byte [rsp + 0x38], r13b
movaps xmm2, xmm10
movss dword [rsp + 0x30], xmm15
movaps xmm1, xmm11
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm12
movdqa xmmword [rbp - 0x80], xmm9
call fcn.180018020
movaps xmm0, xmm14
movss dword [rbp - 0x68], xmm14
unpcklps xmm0, xmm14
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x50]
lea rax, [rbp - 0x30]
movsd qword [rbp - 0x70], xmm0
lea rdx, [rbp - 0x40]
movsd qword [rbp - 0x70], xmm0
lea rcx, [rbp - 8]
mov qword [rsp + 0x20], rax
movss dword [rbp - 0x68], xmm14
movsd qword [rbp - 0x30], xmm7
mov dword [rbp - 0x28], edi
movsd qword [rbp - 0x50], xmm6
mov dword [rbp - 0x48], ebx
movsd qword [rbp - 0x40], xmm7
mov dword [rbp - 0x38], edi
call fcn.1800166f0
movsd xmm8, qword [rbp + 8]
lea rdx, [rbp + 0x310]
mov r14d, dword [rbp + 0x10]
lea rcx, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm8
mov qword [rbp + 0x310], r13
mov dword [rbp - 0x68], r14d
call fcn.1800164e0
test al, al
je 0x180034833
cmp byte [rbp - 8], r13b
je 0x180034833
movss xmm11, dword [rbp + 0x310]
lea rax, [rbp - 0x80]
movss xmm10, dword [rbp + 0x314]
movaps xmm3, xmm11
mov byte [rsp + 0x38], r13b
movaps xmm2, xmm12
movss dword [rsp + 0x30], xmm15
movaps xmm1, xmm13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm10
movdqa xmmword [rbp - 0x80], xmm9
call fcn.180018020
lea rax, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm8
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x50]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x68], r14d
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 8]
movsd qword [rbp - 0x30], xmm7
mov dword [rbp - 0x28], edi
movsd qword [rbp - 0x50], xmm6
mov dword [rbp - 0x48], ebx
movsd qword [rbp - 0x40], xmm8
mov dword [rbp - 0x38], r14d
call fcn.1800166f0
movsd xmm0, qword [rbp + 8]
lea rdx, [rbp + 0x310]
mov eax, dword [rbp + 0x10]
lea rcx, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm0
mov qword [rbp + 0x310], r13
mov dword [rbp - 0x68], eax
call fcn.1800164e0
test al, al
je 0x180034833
cmp byte [rbp - 8], r13b
je 0x180034833
movss xmm0, dword [rbp + 0x314]
lea rax, [rbp - 0x80]
movss xmm3, dword [rbp + 0x310]
movaps xmm2, xmm10
mov byte [rsp + 0x38], r13b
movaps xmm1, xmm11
movss dword [rsp + 0x30], xmm15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
movdqa xmmword [rbp - 0x80], xmm9
call fcn.180018020
movss xmm8, dword [0x18010f730]
movss xmm7, dword [0x18010f1b0]
cmp byte [0x1801397d4], r13b
je 0x180034a8b
cmp qword [0x180139800], r13
je 0x180034a8b
mov rcx, rsi
call fcn.180013f90
test al, al
je 0x180034a8b
mov rax, qword gs:[0x58]
mov rdi, qword [rax + r15*8]
mov eax, dword [rdi + r12]
cmp dword [0x18016f8c4], eax
jle 0x1800348bb
lea rcx, [0x18016f8c4]
call fcn.18007a878
cmp dword [0x18016f8c4], 0xffffffff
jne 0x1800348bb
movd xmm0, dword [0x180139874]
lea rcx, [0x18016f8c4]
cvtdq2ps xmm0, xmm0
movss dword [0x18016fbe4], xmm0
call fcn.18007a80c
mov eax, dword [rdi + r12]
cmp dword [0x18016fc50], eax
jle 0x1800348fb
lea rcx, [0x18016fc50]
call fcn.18007a878
cmp dword [0x18016fc50], 0xffffffff
jne 0x1800348fb
movd xmm0, dword [0x180139888]
lea rcx, [0x18016fc50]
cvtdq2ps xmm0, xmm0
movss dword [0x18016fb38], xmm0
call fcn.18007a80c
mov eax, dword [rdi + r12]
cmp dword [0x18016f9a4], eax
jle 0x18003492f
lea rcx, [0x18016f9a4]
call fcn.18007a878
cmp dword [0x18016f9a4], 0xffffffff
jne 0x18003492f
lea rcx, [0x18016f9a4]
mov qword [0x1801700b0], r13
call fcn.18007a80c
mov eax, dword [0x180139828]
test eax, eax
jne 0x180034983
movss xmm0, dword [0x18016fbe4]
mulss xmm0, xmm7
movss dword [0x1801700b0], xmm0
movss xmm0, dword [0x18016fb38]
movss dword [0x1801700b4], xmm0
jmp 0x1800349b0
movdqa xmm9, xmmword [0x18010fe10]
jmp 0x18003483c
movss xmm7, dword [0x18010f1b0]
movss xmm8, dword [0x18010f730]
jmp 0x180034844
cmp eax, 1
jne 0x1800349b0
movss xmm1, dword [0x18016fb38]
movss xmm0, dword [0x18016fbe4]
mulss xmm1, xmm7
mulss xmm0, xmm7
movss dword [0x1801700b4], xmm1
movss dword [0x1801700b0], xmm0
mov r8d, 0x12
mov qword [rbp + 0x310], r13
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
ucomiss xmm14, dword [rax]
jne 0x180034a08
mov r8d, 0x12
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
ucomiss xmm14, dword [rax + 4]
jne 0x180034a08
mov r8d, 0x12
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
ucomiss xmm14, dword [rax + 8]
je 0x180034a8b
mov r8d, 0x2f
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
lea rdx, [rbp + 0x310]
lea rcx, [rbp - 0x70]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
call fcn.1800164e0
test al, al
je 0x180034a8b
movdqa xmm0, xmmword [0x18010fbc0]
lea rax, [rbp - 0x80]
movss xmm3, dword [rbp + 0x310]
movss xmm2, dword [0x1801700b4]
movss xmm1, dword [0x1801700b0]
mov byte [rsp + 0x38], r13b
movss dword [rsp + 0x30], xmm15
movdqa xmmword [rbp - 0x80], xmm0
movss xmm0, dword [rbp + 0x314]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018020
cmp byte [0x180139865], r13b
movabs r14, 0x7fffffff0000
je 0x180034d2b
test rsi, rsi
je 0x180034d2b
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov edx, dword [r12 + rax]
cmp dword [0x18016fd30], edx
jle 0x180034af6
lea rcx, [0x18016fd30]
call fcn.18007a878
cmp dword [0x18016fd30], 0xffffffff
jne 0x180034af6
mov ecx, 0x33f7a6a3
call fcn.18000fd80
lea rcx, [0x18016fd30]
mov qword [0x18016fac0], rax
call fcn.18007a80c
mov rax, qword [0x18016fac0]
cmp byte [rax + rsi], r13b
jne 0x180034d2b
mov r8d, 0x12
mov qword [rbp + 0x310], r13
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
ucomiss xmm14, dword [rax]
jne 0x180034b5f
mov r8d, 0x12
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
ucomiss xmm14, dword [rax + 4]
jne 0x180034b5f
mov r8d, 0x12
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.180015830
ucomiss xmm14, dword [rax + 8]
je 0x180034d2b
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov rcx, rax
call fcn.180015d60
mov rcx, rax
call fcn.180015200
mov ecx, eax
call fcn.18001a5f0
movaps xmm10, xmm0
call fcn.18001a640
mov rcx, qword [0x180139800]
lea rdx, [rbp - 0x40]
mov r8d, 0x2f
movaps xmm11, xmm0
call fcn.180015830
mov rcx, qword [0x180139800]
add rcx, 0x4a8
cmp rcx, 0x40000
jbe 0x180034bf5
lea rax, [rcx + 8]
cmp rax, r14
jae 0x180034bf5
mov rcx, qword [rcx]
add rcx, 0x1fc
cmp rcx, 0x40000
jbe 0x180034bf5
lea rax, [rcx + 0xc]
cmp rax, r14
jae 0x180034bf5
movsd xmm6, qword [rcx]
mov ebx, dword [rcx + 8]
movsd qword [rbp - 0x50], xmm6
mov dword [rbp - 0x48], ebx
jmp 0x180034c10
movaps xmm0, xmm14
movss dword [rbp - 0x48], xmm14
unpcklps xmm0, xmm14
movaps xmm6, xmm0
movsd qword [rbp - 0x50], xmm0
movd ebx, xmm14
mov rax, qword [0x180139808]
add rax, 0x30c670
call rax
mov r8d, 0x2f
movsd qword [rbp - 0x70], xmm6
lea rdx, [rsp + 0x60]
mov dword [rbp - 0x68], ebx
mov rcx, rax
call fcn.180015830
movaps xmm3, xmm11
movss dword [rsp + 0x20], xmm10
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x40]
movsd xmm0, qword [rax]
lea rcx, [rbp - 0x30]
mov eax, dword [rax + 8]
movsd qword [rbp - 0x30], xmm0
mov dword [rbp - 0x28], eax
call fcn.18001a380
movsd xmm0, qword [rbp - 0x40]
lea rdx, [rbp + 0x310]
mov eax, dword [rbp - 0x38]
lea rcx, [rbp - 0x70]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
call fcn.1800164e0
test al, al
je 0x180034d2b
movss xmm0, dword [0x1801221a8]
lea rax, str.Shooting_Here
movss xmm1, dword [0x1801221ac]
lea r9, [rbp - 0x80]
movss xmm2, dword [0x1801221b0]
mov rcx, qword [0x18016fd38]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
mov dword [rsp + 0x6c], 0x3f800000
movups xmm3, xmmword [rsp + 0x60]
movss xmm3, xmm0
movss xmm0, dword [0x18010f61c]
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
movss dword [rsp + 0x30], xmm0
movss xmm1, dword [rbp + 0x310]
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
mov qword [rsp + 0x28], rax
movss xmm2, dword [rbp + 0x314]
shufps xmm3, xmm3, 0xc9
movd r8d, xmm2
movd edx, xmm1
movups xmmword [rsp + 0x60], xmm3
mov dword [rsp + 0x20], 3
movdqa xmmword [rbp - 0x80], xmm3
call fcn.180018150
cmp qword [0x180139810], r13
je 0x180034ebf
cmp byte [0x180139896], r13b
je 0x180034ebf
mov rax, qword gs:[0x58]
mov rdi, qword [rax + r15*8]
mov eax, dword [rdi + r12]
cmp dword [0x180170060], eax
jle 0x180034d92
lea rcx, [0x180170060]
call fcn.18007a878
cmp dword [0x180170060], 0xffffffff
jne 0x180034d92
movd xmm0, dword [0x180139874]
lea rcx, [0x180170060]
cvtdq2ps xmm0, xmm0
movss dword [0x1801700d0], xmm0
call fcn.18007a80c
mov eax, dword [rdi + r12]
cmp dword [0x18016f998], eax
jle 0x180034dd2
lea rcx, [0x18016f998]
call fcn.18007a878
cmp dword [0x18016f998], 0xffffffff
jne 0x180034dd2
movd xmm0, dword [0x180139888]
lea rcx, [0x18016f998]
cvtdq2ps xmm0, xmm0
movss dword [0x18016fc00], xmm0
call fcn.18007a80c
mov eax, dword [rdi + r12]
cmp dword [0x18016fc60], eax
jle 0x180034e28
lea rcx, [0x18016fc60]
call fcn.18007a878
cmp dword [0x18016fc60], 0xffffffff
jne 0x180034e28
movss xmm1, dword [0x18016fc00]
lea rcx, [0x18016fc60]
movss xmm0, dword [0x1801700d0]
subss xmm1, xmm8
mulss xmm0, xmm7
movss dword [0x18016fb6c], xmm1
movss dword [0x18016fb68], xmm0
call fcn.18007a80c
mov rcx, qword [0x180139810]
add rcx, 0x20c
cmp rcx, 0x40000
jbe 0x180034e4e
lea rax, [rcx + 4]
cmp rax, r14
jae 0x180034e4e
movss xmm1, dword [rcx]
jmp 0x180034e52
movaps xmm1, xmm14
cvttss2si ecx, xmm1
cmp ecx, 0x80000000
je 0x180034e7f
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm1
je 0x180034e7f
unpcklps xmm1, xmm1
movmskps eax, xmm1
and eax, 1
xor eax, 1
add ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm1
test eax, eax
jle 0x180034ebf
mov rcx, qword [0x180139810]
call fcn.1800139b0
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.180013910
lea rdx, [rbp + 0x310]
lea rcx, [rbp - 0x70]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
call fcn.1800164e0
cmp dword [0x18012216c], r13d
jg 0x180034ed2
mov dword [0x18012216c], 1
cmp dword [0x1801398e0], 4
jle 0x180034ee5
mov dword [0x1801398e0], 4
movss xmm0, dword [0x18012215c]
comiss xmm0, dword [0x18010f74c]
jae 0x180034f00
mov dword [0x18012215c], 0x43960000
movss xmm12, dword [0x18010f71c]
movss xmm6, dword [0x18010f6e4]
movss xmm15, dword [0x18010f6d8]
movss xmm7, dword [0x18010f620]
test rsi, rsi
je 0x1800356d3
cmp qword [0x180139800], r13
je 0x1800356d3
mov rcx, rsi
call fcn.1800157e0
test al, al
jne 0x1800356d3
cmp byte [0x1801397c4], r13b
je 0x1800358d2
mov rcx, rsi
call fcn.180013f90
test al, al
je 0x1800356d3
lea rcx, [rbp + 0x310]
call qword [sym.imp.USER32.dll_GetCursorPos]
movss xmm1, dword [0x180122120]
test eax, eax
je 0x180035017
movd xmm2, dword [rbp + 0x310]
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm1
jb 0x180035017
movaps xmm0, xmm1
addss xmm0, xmm8
comiss xmm2, xmm0
ja 0x180035017
movd xmm2, dword [rbp + 0x314]
movss xmm0, dword [0x180122124]
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm0
jb 0x180035017
addss xmm0, xmm12
comiss xmm2, xmm0
ja 0x180035017
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18003500f
cmp byte [0x18013977d], r13b
je 0x18003500f
movd xmm1, dword [rbp + 0x310]
movd xmm0, dword [rbp + 0x314]
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
subss xmm1, xmm6
subss xmm0, xmm15
movss dword [0x180122120], xmm1
movss dword [0x180122124], xmm0
jmp 0x180035017
movss xmm1, dword [0x180122120]
movdqa xmm0, xmmword [0x18010fc70]
lea rax, [rbp - 0x80]
movss xmm13, dword [0x18010f618]
movaps xmm3, xmm8
movss xmm2, dword [0x180122124]
mov dword [rsp + 0x38], r13d
movss dword [rsp + 0x30], xmm13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm12
movdqa xmmword [rbp - 0x80], xmm0
call fcn.180018900
xorps xmm0, xmm0
mov qword [rbp - 0x60], r13
movups xmmword [rbp - 0x70], xmm0
xor edx, edx
mov byte [rbp - 0x70], r13b
mov r8d, pe_nt_image_headers64
mov qword [rbp - 0x58], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
call fcn.180015470
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.18003aef0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x30], xmm0
mov r8, 0xffffffffffffffff
mov rdx, qword [rax]
movdqu xmmword [rbp - 0x20], xmm1
inc r8
cmp byte [rdx + r8], r13b
jne 0x1800350b2
lea rcx, [rbp - 0x30]
call fcn.18003d980
mov rdx, qword [rbp + 0x318]
mov eax, 0xffffffff
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800350e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, rsi
call fcn.180015470
mov rdx, rax
lea rcx, [rbp + 0x320]
call fcn.18003aef0
mov r15, rax
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x18003511b
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x180035135
call fcn.18001ddd0
mov rcx, rax
mov rdx, qword [rax]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x18003594a
mov rax, qword [rcx]
call qword [rax + 0x18]
mov r15, qword [r15]
lea rbx, [rax + 0x18]
movsxd r14, dword [r15 - 0x10]
mov qword [rbp + 0x318], rbx
lea edi, [r14 + 5]
test edi, edi
js 0x18003593f
mov eax, dword [rbx - 0xc]
mov ecx, 1
sub ecx, dword [rbx - 8]
sub eax, edi
or ecx, eax
jge 0x18003517f
mov edx, edi
lea rcx, [rbp + 0x318]
call fcn.18003c400
mov rbx, qword [rbp + 0x318]
test rbx, rbx
jne 0x180035198
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x1800351aa
mov eax, dword [0x18010c8f8]
mov dword [rbx], eax
movzx eax, byte [0x18010c8fc]
mov byte [rbx + 4], al
lea rcx, [rbx + 5]
test r14, r14
je 0x1800351e3
test rcx, rcx
je 0x1800351d1
mov r8, r14
test r15, r15
je 0x1800351ca
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x1800351e3
xor edx, edx
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
cmp edi, dword [rbx - 0xc]
jg 0x18003593f
mov dword [rbx - 0x10], edi
lea rcx, [rbp + 0x20]
mov rdx, rbx
mov byte [r14 + rbx + 5], r13b
call fcn.18003c900
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18003521c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x320]
mov eax, 0xffffffff
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18003523f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x180035250
mov rcx, qword [rbp - 0x58]
mov r14, qword [rbp - 0x60]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x18003529b
cmp rcx, 0xf
lea rax, [rdi + r14]
lea rbx, [rbp - 0x70]
mov qword [rbp - 0x60], rax
cmova rbx, qword [rbp - 0x70]
lea rdx, [rbp + 0x20]
mov r8, rdi
lea rcx, [rbx + r14]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov byte [rax + r14], r13b
jmp 0x1800352b0
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.18003d7f0
movss xmm2, dword [0x180122124]
lea rax, [rbp - 0x70]
movss xmm1, dword [0x180122120]
lea r9, [rbp - 0x80]
addss xmm2, dword [0x18010f5d0]
cmp qword [rbp - 0x58], 0xf
addss xmm1, xmm6
mov rcx, qword [0x18016fd38]
cmova rax, qword [rbp - 0x70]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp - 0x80], xmm9
mov dword [rsp + 0x20], 3
call fcn.180018150
movdqa xmm0, xmmword [0x18010fda0]
lea rax, [rbp - 0x80]
movss xmm2, dword [0x180122124]
movaps xmm3, xmm8
movss xmm10, dword [0x18010f62c]
movss xmm1, dword [0x180122120]
addss xmm2, xmm10
movss dword [rsp + 0x30], xmm13
movdqa xmmword [rbp - 0x80], xmm0
movss xmm0, dword [0x18010f5a8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018880
mov rcx, rsi
call fcn.180015d00
test rax, rax
je 0x1800356b8
mov rcx, rsi
mov r15d, r13d
call fcn.180015d00
cmp dword [rax + 0x18], r13d
jbe 0x1800356b8
movdqa xmm11, xmmword [0x18010fdc0]
movss xmm8, dword [0x18010f67c]
mov rcx, rsi
call fcn.180015d00
mov ecx, r15d
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + rcx*8 + 0x20]
test rbx, rbx
je 0x180035695
mov rcx, rsi
call fcn.180015d60
mov rcx, rbx
cmp rbx, rax
jne 0x18003551d
call fcn.180015290
xorps xmm0, xmm0
mov qword [rsp + 0x70], r13
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r13b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x78], 0xf
lea rcx, [rbp + 0x120]
mov r12, rax
call sub.VCRUNTIME140.dll_memset
mov r8, r12
lea rdx, [0x18010bd20]
lea rcx, [rbp + 0x120]
call fcn.18003c900
lea rax, [rbp + 0x120]
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [rax + rdi], r13b
jne 0x180035430
mov rcx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x70]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x180035483
cmp rcx, 0xf
lea rax, [rdi + r14]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmova rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x120]
mov r8, rdi
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r14]
mov byte [rax + rbx], r13b
jmp 0x18003549c
lea r9, [rbp + 0x120]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.18003d7f0
test r12, r12
je 0x18003550e
movss xmm2, dword [0x180122124]
lea rax, [rsp + 0x60]
movss xmm1, dword [0x180122120]
addss xmm2, xmm8
cmp qword [rsp + 0x78], 0xf
addss xmm1, xmm6
mov rcx, qword [0x18016fd38]
lea r9, [rbp - 0x80]
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
addss xmm2, xmm14
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movd edx, xmm1
movdqa xmmword [rbp - 0x80], xmm9
movd r8d, xmm2
mov dword [rsp + 0x20], 3
call fcn.180018150
lea rcx, [rsp + 0x60]
call fcn.18003b770
jmp 0x180035695
call fcn.180015290
xorps xmm0, xmm0
mov qword [rsp + 0x70], r13
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov byte [rsp + 0x60], r13b
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x78], 0xf
lea rcx, [rbp + 0x120]
mov r14, rax
call sub.VCRUNTIME140.dll_memset
mov r8, r14
lea rdx, [0x18010bd20]
lea rcx, [rbp + 0x120]
call fcn.18003c900
lea rax, [rbp + 0x120]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x180035580
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1800355d1
cmp rdx, 0xf
lea rax, [rcx + rdi]
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmova rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x120]
add rbx, rcx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], r13b
jmp 0x1800355ea
lea r9, [rbp + 0x120]
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.18003d7f0
test r14, r14
je 0x18003565c
movss xmm2, dword [0x180122124]
lea rax, [rsp + 0x60]
movss xmm1, dword [0x180122120]
addss xmm2, xmm8
cmp qword [rsp + 0x78], 0xf
addss xmm1, xmm6
mov rcx, qword [0x18016fd38]
lea r9, [rbp - 0x80]
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
addss xmm2, xmm14
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movd edx, xmm1
movdqa xmmword [rbp - 0x80], xmm11
movd r8d, xmm2
mov dword [rsp + 0x20], 3
call fcn.180018150
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x180035695
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035690
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800356cc
call fcn.18007ac9c
mov rcx, rsi
addss xmm14, xmm10
inc r15d
call fcn.180015d00
cmp r15d, dword [rax + 0x18]
jb 0x1800353a2
movss xmm8, dword [0x18010f730]
lea rcx, [rbp - 0x30]
call fcn.18003b770
lea rcx, [rbp - 0x70]
call fcn.18003b770
jmp 0x1800356dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm13, dword [0x18010f618]
cmp byte [0x1801397c4], r13b
je 0x1800358d2
cmp qword [0x180139800], r13
jne 0x1800358d2
lea rcx, [rbp + 0x310]
call qword [sym.imp.USER32.dll_GetCursorPos]
movss xmm3, dword [0x180122120]
test eax, eax
je 0x1800357ab
movd xmm1, dword [rbp + 0x310]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm3
jb 0x1800357ab
movaps xmm0, xmm3
addss xmm0, xmm8
comiss xmm1, xmm0
ja 0x1800357ab
movd xmm1, dword [rbp + 0x314]
movss xmm2, dword [0x180122124]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm2
jb 0x1800357b3
movaps xmm0, xmm2
addss xmm0, xmm12
comiss xmm1, xmm0
ja 0x1800357b3
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800357a3
cmp byte [0x18013977d], r13b
je 0x1800357a3
movd xmm3, dword [rbp + 0x310]
movd xmm2, dword [rbp + 0x314]
cvtdq2ps xmm3, xmm3
cvtdq2ps xmm2, xmm2
subss xmm3, xmm6
subss xmm2, xmm15
movss dword [0x180122120], xmm3
movss dword [0x180122124], xmm2
jmp 0x1800357b3
movss xmm3, dword [0x180122120]
movss xmm2, dword [0x180122124]
movdqa xmm0, xmmword [0x18010fc70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
movaps xmm1, xmm2
movaps xmm0, xmm3
movss dword [rbp + 0x320], xmm3
addss xmm0, xmm8
movss dword [rbp + 0x324], xmm2
addss xmm1, xmm12
movss dword [rbp + 0x318], xmm0
movss dword [rbp + 0x31c], xmm1
call fcn.180041680
mov rcx, qword [0x18016fa60]
lea rdx, [rbp + 0x320]
mov r9d, eax
mov dword [rsp + 0x28], 0xa
lea r8, [rbp + 0x318]
movss dword [rsp + 0x20], xmm13
call fcn.18005b130
movss xmm2, dword [0x180122124]
lea rax, str.Belt
movss xmm1, dword [0x180122120]
lea r9, [rbp - 0x80]
addss xmm2, dword [0x18010f5d0]
mov rcx, qword [0x18016fd38]
addss xmm1, xmm6
mov qword [rsp + 0x38], rax
mov rax, qword [0x180139938]
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rbp - 0x80], xmm9
mov dword [rsp + 0x20], 3
call fcn.180018150
movdqa xmm0, xmmword [0x18010fce0]
lea rax, [rbp - 0x80]
movss xmm2, dword [0x180122124]
movaps xmm3, xmm8
addss xmm2, dword [0x18010f634]
movss xmm1, dword [0x180122120]
movss dword [rsp + 0x30], xmm13
movdqa xmmword [rbp - 0x80], xmm0
movss xmm0, dword [0x18010f5a8]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180018880
call fcn.1800196e0
cmp byte [0x1801398a3], r13b
je 0x1800358e5
call fcn.180019b70
movaps xmm7, xmmword [rsp + 0x3a0]
lea r11, [rsp + 0x3c8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
jmp 0x180030150
mov ecx, 0x80070057
call fcn.18001dc20
int3
mov ecx, 0x80004005
call fcn.18001dc20
int3