Function at 0x1801ac7c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
cmp dword [0x1802c9d04], 0
movabs r14, 0x7fffffff0000
mov rbx, qword [0x1802c9c88]
mov esi, dword [0x1802c9b04]
movaps xmmword [rax - 0x38], xmm6
movss xmm6, dword [0x180182c70]
movaps xmmword [rax - 0x48], xmm7
movss xmm7, dword [0x180182bbc]
movaps xmmword [rax - 0x58], xmm8
movss xmm8, dword [0x180182c40]
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
xorps xmm12, xmm12
movaps xmmword [rax - 0xa8], xmm13
movss xmm13, dword [0x18018304c]
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rsp + 0x70], xmm15
movss xmm15, dword [0x180183170]
movss dword [rbp + 0x40], xmm6
mov r15d, 4
jne 0x1801aceca
lea rcx, [rbx + 0xb8]
cmp rcx, 0x40000
jbe 0x1801ac91f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ac91f
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ac91f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ac91f
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801ac91f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ac91f
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ac91f
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae30d
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x40]
mov r9, rdi
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x48], 0
call fcn.1801dbd60
jmp 0x1801ac930
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
cmp byte [0x1802c9de1], 0
je 0x1801aca3e
mov ecx, dword [0x1802c9e14]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801aca3e
call fcn.18019bf80
lea rcx, [rax + 0xb8]
cmp rcx, 0x40000
jbe 0x1801aca14
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aca14
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801aca14
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aca14
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801aca14
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aca14
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801aca14
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae34b
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x40]
mov r9, rdi
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x48], 0
call fcn.1801dbd60
movss xmm1, dword [rsp + 0x50]
movss xmm2, dword [rsp + 0x58]
movss xmm0, dword [rsp + 0x54]
jmp 0x1801aca1d
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
addss xmm0, xmm8
movss dword [rsp + 0x50], xmm1
movss dword [rsp + 0x58], xmm2
lea rax, [rsp + 0x50]
movss dword [rsp + 0x54], xmm0
jmp 0x1801acb00
call fcn.18019bf80
lea rcx, [rax + 0xb8]
cmp rcx, 0x40000
jbe 0x1801acaea
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801acaea
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801acaea
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801acaea
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801acaea
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801acaea
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801acaea
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae389
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x40]
mov r9, rdi
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x48], 0
call fcn.1801dbd60
jmp 0x1801acafb
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x30]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
call fcn.18019bf80
mov rcx, rax
call fcn.18019be90
mov rcx, rax
call fcn.18019b2c0
cmp eax, 0xc3054289
jg 0x1801acb60
je 0x1801acb55
cmp eax, 0x82fc91ad
je 0x1801acb44
cmp eax, 0xb139337d
je 0x1801acb4f
cmp eax, 0xb6676e3b
jne 0x1801acb79
movss xmm14, dword [0x180182b10]
jmp 0x1801acb7d
movaps xmm14, xmm6
jmp 0x1801acb7d
movss xmm14, dword [0x180182a7c]
jmp 0x1801acb7d
cmp eax, 0xd94fd7
je 0x1801acb79
cmp eax, 0xcdc27d9
jne 0x1801acb79
movss xmm14, dword [0x180182b10]
jmp 0x1801acb7d
movaps xmm14, xmm7
call fcn.1801abc60
lea rcx, [rbx + 0x5e8]
movaps xmm6, xmm0
movss dword [rbp + 0x50], xmm6
cmp rcx, 0x40000
jbe 0x1801acbd5
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801acbd5
mov rcx, qword [rcx]
add rcx, 0x1dc
cmp rcx, 0x40000
jbe 0x1801acbd5
lea rax, [rcx + 0xc]
cmp rax, r14
jae 0x1801acbd5
movsd xmm5, qword [rcx]
movss xmm0, dword [rcx + 8]
movss dword [rbp + 0x48], xmm0
movsd qword [rsp + 0x50], xmm5
jmp 0x1801acbde
movss dword [rbp + 0x48], xmm12
xorps xmm5, xmm5
movss xmm3, dword [rsp + 0x20]
xorps xmm7, xmm7
movss xmm4, dword [rsp + 0x28]
movaps xmm1, xmm3
movss xmm8, dword [rsp + 0x24]
movaps xmm2, xmm4
movss xmm9, dword [rsp + 0x44]
movaps xmm0, xmm8
movss xmm10, dword [rsp + 0x40]
subss xmm0, xmm9
movss xmm11, dword [rsp + 0x48]
subss xmm1, xmm10
subss xmm2, xmm11
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm0
movaps xmm0, xmm8
subss xmm0, xmm9
addss xmm1, xmm2
cvtps2pd xmm0, xmm0
sqrtss xmm7, xmm1
divss xmm7, xmm6
movaps xmm6, xmm7
mulss xmm7, xmm5
mulss xmm6, dword [rbp + 0x48]
mulss xmm7, dword [0x180182b10]
mulss xmm6, dword [0x180182b10]
addss xmm7, xmm3
movaps xmm3, xmm14
addss xmm6, xmm4
movaps xmm1, xmm7
movss dword [rsp + 0x20], xmm7
subss xmm1, xmm10
movaps xmm2, xmm6
movss dword [rsp + 0x28], xmm6
subss xmm2, xmm11
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
movss xmm2, dword [rbp + 0x50]
sqrtss xmm1, xmm1
cvtps2pd xmm1, xmm1
call fcn.1801abe90
xorps xmm1, xmm1
subss xmm10, xmm7
cvtsd2ss xmm1, xmm0
subss xmm11, xmm6
movaps xmm3, xmm10
addss xmm1, xmm8
mulss xmm3, xmm10
movaps xmm2, xmm11
subss xmm9, xmm1
mulss xmm2, xmm11
movss dword [rsp + 0x24], xmm1
movaps xmm1, xmm9
mulss xmm1, xmm9
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm9, xmm2
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
xorps xmm11, xmmword [0x1801839e0]
movaps xmm9, xmm0
mulss xmm9, dword [0x180182fa4]
movaps xmm1, xmm11
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm7, xmm0
mulss xmm7, dword [0x18018316c]
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801acd73
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801acd73
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801acd73
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801acd73
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x1801acd79
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm11, dword [0x180182fcc]
subss xmm9, xmm0
subss xmm7, xmm1
comiss xmm9, xmm15
jae 0x1801acd97
movaps xmm9, xmm15
jmp 0x1801acd9c
minss xmm9, xmm11
movss xmm10, dword [0x180183188]
comiss xmm7, xmm10
jae 0x1801acdb2
addss xmm7, xmm13
jmp 0x1801acdbd
comiss xmm7, xmm13
jbe 0x1801acdbd
subss xmm7, xmm13
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801ace00
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ace00
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ace00
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ace00
movss xmm8, dword [rcx]
movss xmm6, dword [rcx + 4]
jmp 0x1801ace07
xorps xmm6, xmm6
xorps xmm8, xmm8
cmp byte [0x1802c9cfe], 0
addss xmm6, xmm7
addss xmm8, xmm9
movss dword [rbp + 0x4c], xmm6
movss dword [rbp + 0x48], xmm8
je 0x1801ace38
lea rcx, [rbp + 0x48]
call fcn.1801ac540
movss xmm6, dword [rbp + 0x4c]
movss xmm8, dword [rbp + 0x48]
comiss xmm8, xmm15
jae 0x1801ace44
movaps xmm8, xmm15
jmp 0x1801ace4e
comiss xmm8, xmm11
jbe 0x1801ace4e
movaps xmm8, xmm11
comiss xmm6, xmm10
jae 0x1801ace5b
addss xmm6, xmm13
jmp 0x1801ace66
comiss xmm6, xmm13
jbe 0x1801ace66
addss xmm6, xmm10
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801aceb1
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aceb1
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801aceb1
movss xmm7, dword [0x180182bbc]
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aceb9
movss dword [rcx], xmm8
movss dword [rcx + 4], xmm6
jmp 0x1801aceb9
movss xmm7, dword [0x180182bbc]
movss xmm6, dword [0x180182c70]
movss xmm8, dword [0x180182c40]
cmp dword [0x1802c9d04], 1
jne 0x1801ad5ea
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
lea rcx, [rbx + 0xb8]
cmp r8d, 0xa
jle 0x1801acfc0
cmp rcx, 0x40000
jbe 0x1801ad060
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad060
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad060
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad060
mov rcx, qword [rcx]
add rcx, 0xd0
cmp rcx, 0x40000
jbe 0x1801ad060
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad060
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad060
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae3c7
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
jmp 0x1801ad071
cmp rcx, 0x40000
jbe 0x1801ad060
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad060
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad060
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad060
mov rcx, qword [rcx]
add rcx, 0xb0
cmp rcx, 0x40000
jbe 0x1801ad060
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad060
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad060
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae405
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
jmp 0x1801ad071
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
cmp byte [0x1802c9de1], 0
movsd xmm0, qword [rsp + 0x30]
mov eax, dword [rsp + 0x38]
movsd qword [rsp + 0x20], xmm0
mov dword [rsp + 0x28], eax
je 0x1801ad193
mov ecx, dword [0x1802c9e14]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801ad193
call fcn.18019bf80
lea rcx, [rax + 0xb8]
cmp rcx, 0x40000
jbe 0x1801ad169
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad169
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad169
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad169
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801ad169
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad169
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad169
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae443
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
movss xmm1, dword [rsp + 0x40]
movss xmm2, dword [rsp + 0x48]
movss xmm0, dword [rsp + 0x44]
jmp 0x1801ad172
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
addss xmm0, xmm8
movss dword [rsp + 0x50], xmm1
movss dword [rsp + 0x58], xmm2
lea rax, [rsp + 0x50]
movss dword [rsp + 0x54], xmm0
jmp 0x1801ad255
call fcn.18019bf80
lea rcx, [rax + 0xb8]
cmp rcx, 0x40000
jbe 0x1801ad23f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad23f
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad23f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad23f
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801ad23f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad23f
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad23f
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae481
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
jmp 0x1801ad250
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x30]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
call fcn.18019bf80
mov rcx, rax
call fcn.18019be90
mov rcx, rax
call fcn.18019b2c0
cmp eax, 0xc3054289
jg 0x1801ad2b5
je 0x1801ad2aa
cmp eax, 0x82fc91ad
je 0x1801ad299
cmp eax, 0xb139337d
je 0x1801ad2a4
cmp eax, 0xb6676e3b
jne 0x1801ad2ce
movss xmm14, dword [0x180182b10]
jmp 0x1801ad2d2
movaps xmm14, xmm6
jmp 0x1801ad2d2
movss xmm14, dword [0x180182a7c]
jmp 0x1801ad2d2
cmp eax, 0xd94fd7
je 0x1801ad2ce
cmp eax, 0xcdc27d9
jne 0x1801ad2ce
movss xmm14, dword [0x180182b10]
jmp 0x1801ad2d2
movaps xmm14, xmm7
call fcn.1801abc60
lea rcx, [rbx + 0x5e8]
movaps xmm6, xmm0
movss dword [rbp + 0x50], xmm6
cmp rcx, 0x40000
jbe 0x1801ad32a
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad32a
mov rcx, qword [rcx]
add rcx, 0x1dc
cmp rcx, 0x40000
jbe 0x1801ad32a
lea rax, [rcx + 0xc]
cmp rax, r14
jae 0x1801ad32a
movsd xmm5, qword [rcx]
movss xmm0, dword [rcx + 8]
movss dword [rbp + 0x48], xmm0
movsd qword [rsp + 0x50], xmm5
jmp 0x1801ad333
movss dword [rbp + 0x48], xmm12
xorps xmm5, xmm5
movss xmm3, dword [rsp + 0x20]
xorps xmm7, xmm7
movss xmm4, dword [rsp + 0x28]
movaps xmm1, xmm3
movss xmm8, dword [rsp + 0x24]
movaps xmm2, xmm4
movss xmm9, dword [rsp + 0x44]
movaps xmm0, xmm8
movss xmm10, dword [rsp + 0x40]
subss xmm0, xmm9
movss xmm11, dword [rsp + 0x48]
subss xmm1, xmm10
subss xmm2, xmm11
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm0
movaps xmm0, xmm8
subss xmm0, xmm9
addss xmm1, xmm2
cvtps2pd xmm0, xmm0
sqrtss xmm7, xmm1
divss xmm7, xmm6
movaps xmm6, xmm7
mulss xmm7, xmm5
mulss xmm6, dword [rbp + 0x48]
mulss xmm7, dword [0x180182b10]
mulss xmm6, dword [0x180182b10]
addss xmm7, xmm3
movaps xmm3, xmm14
addss xmm6, xmm4
movaps xmm1, xmm7
subss xmm1, xmm10
movaps xmm2, xmm6
subss xmm2, xmm11
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
movss xmm2, dword [rbp + 0x50]
sqrtss xmm1, xmm1
cvtps2pd xmm1, xmm1
call fcn.1801abe90
xorps xmm1, xmm1
subss xmm10, xmm7
cvtsd2ss xmm1, xmm0
subss xmm11, xmm6
movaps xmm3, xmm10
addss xmm1, xmm8
mulss xmm3, xmm10
movaps xmm2, xmm11
subss xmm9, xmm1
mulss xmm2, xmm11
movaps xmm1, xmm9
mulss xmm1, xmm9
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm9, xmm2
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
xorps xmm11, xmmword [0x1801839e0]
movaps xmm9, xmm0
mulss xmm9, dword [0x180182fa4]
movaps xmm1, xmm11
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm7, xmm0
mulss xmm7, dword [0x18018316c]
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801ad4b6
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad4b6
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ad4b6
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad4b6
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x1801ad4bc
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm11, dword [0x180182fcc]
subss xmm9, xmm0
subss xmm7, xmm1
comiss xmm9, xmm15
jae 0x1801ad4da
movaps xmm9, xmm15
jmp 0x1801ad4df
minss xmm9, xmm11
movss xmm10, dword [0x180183188]
comiss xmm7, xmm10
jae 0x1801ad4f5
addss xmm7, xmm13
jmp 0x1801ad500
comiss xmm7, xmm13
jbe 0x1801ad500
subss xmm7, xmm13
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801ad543
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad543
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ad543
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad543
movss xmm8, dword [rcx]
movss xmm6, dword [rcx + 4]
jmp 0x1801ad54a
xorps xmm6, xmm6
xorps xmm8, xmm8
cmp byte [0x1802c9cfe], 0
addss xmm6, xmm7
addss xmm8, xmm9
movss dword [rbp + 0x4c], xmm6
movss dword [rbp + 0x48], xmm8
je 0x1801ad57b
lea rcx, [rbp + 0x48]
call fcn.1801ac540
movss xmm6, dword [rbp + 0x4c]
movss xmm8, dword [rbp + 0x48]
comiss xmm8, xmm15
jae 0x1801ad587
movaps xmm8, xmm15
jmp 0x1801ad591
comiss xmm8, xmm11
jbe 0x1801ad591
movaps xmm8, xmm11
comiss xmm6, xmm10
jae 0x1801ad59e
addss xmm6, xmm13
jmp 0x1801ad5a9
comiss xmm6, xmm13
jbe 0x1801ad5a9
addss xmm6, xmm10
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801ad5ea
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad5ea
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ad5ea
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad5ea
movss dword [rcx], xmm8
movss dword [rcx + 4], xmm6
cmp dword [0x1802c9d04], 2
jne 0x1801add1a
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x190
sub r8d, ecx
cmp r8d, 0x5a
jle 0x1801ad6fd
lea rcx, [rbx + 0xb8]
cmp rcx, 0x40000
jbe 0x1801ad6dd
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad6dd
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad6dd
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad6dd
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801ad6dd
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad6dd
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad6dd
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae4bf
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
movsd xmm0, qword [rsp + 0x30]
mov eax, dword [rsp + 0x38]
jmp 0x1801ad7ae
mov qword [rsp + 0x30], 0
movsd xmm0, qword [rsp + 0x30]
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x38]
jmp 0x1801ad7ae
lea eax, [r8 - 0x51]
cmp eax, 8
ja 0x1801ad711
mov r8d, 0x2e
jmp 0x1801ad79a
lea eax, [r8 - 0x47]
cmp eax, 8
ja 0x1801ad722
mov r8d, 0xd
jmp 0x1801ad79a
lea eax, [r8 - 0x3d]
cmp eax, 8
ja 0x1801ad733
mov r8d, 6
jmp 0x1801ad79a
lea eax, [r8 - 0x33]
cmp eax, 8
ja 0x1801ad744
mov r8d, 0x17
jmp 0x1801ad79a
lea eax, [r8 - 0x29]
cmp eax, 8
ja 0x1801ad755
mov r8d, 0x18
jmp 0x1801ad79a
lea eax, [r8 - 0x1f]
cmp eax, 8
ja 0x1801ad766
mov r8d, 3
jmp 0x1801ad79a
lea eax, [r8 - 0x15]
cmp eax, 8
ja 0x1801ad777
mov r8d, 0xf
jmp 0x1801ad79a
lea eax, [r8 - 0xb]
cmp eax, 8
ja 0x1801ad788
mov r8d, 0x1a
jmp 0x1801ad79a
cmp r8d, 0xa
mov r8d, 0x39
jl 0x1801ad79a
mov r8d, 0x12
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.18019b950
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
cmp byte [0x1802c9de1], 0
movsd qword [rsp + 0x20], xmm0
mov dword [rsp + 0x28], eax
je 0x1801ad8c9
mov ecx, dword [0x1802c9e14]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801ad8c9
call fcn.18019bf80
lea rcx, [rax + 0xb8]
cmp rcx, 0x40000
jbe 0x1801ad89c
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad89c
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad89c
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad89c
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801ad89c
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad89c
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad89c
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae4fd
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
movss xmm1, dword [rsp + 0x40]
movss xmm2, dword [rsp + 0x48]
movss xmm0, dword [rsp + 0x44]
jmp 0x1801ad8a5
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
addss xmm0, dword [0x180182c40]
movss dword [rsp + 0x50], xmm1
lea rax, [rsp + 0x50]
movss dword [rsp + 0x58], xmm2
movss dword [rsp + 0x54], xmm0
jmp 0x1801ad98b
call fcn.18019bf80
lea rcx, [rax + 0xb8]
cmp rcx, 0x40000
jbe 0x1801ad975
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad975
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801ad975
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad975
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801ad975
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ad975
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801ad975
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae53b
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
jmp 0x1801ad986
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x30]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
call fcn.18019bf80
mov rcx, rax
call fcn.18019be90
mov rcx, rax
call fcn.18019b2c0
cmp eax, 0xc3054289
jg 0x1801ad9e3
je 0x1801ad9d9
cmp eax, 0x82fc91ad
je 0x1801ad9cf
cmp eax, 0xb139337d
je 0x1801ada08
cmp eax, 0xb6676e3b
jne 0x1801ad9fb
movss xmm0, dword [0x180182b10]
jmp 0x1801ada03
movss xmm0, dword [0x180182a7c]
jmp 0x1801ada03
cmp eax, 0xd94fd7
je 0x1801ad9fb
cmp eax, 0xcdc27d9
jne 0x1801ad9fb
movss xmm0, dword [0x180182b10]
jmp 0x1801ada03
movss xmm0, dword [0x180182bbc]
movss dword [rbp + 0x40], xmm0
call fcn.1801abc60
lea rcx, [rbx + 0x5e8]
movaps xmm6, xmm0
movss dword [rbp + 0x48], xmm6
cmp rcx, 0x40000
jbe 0x1801ada5c
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ada5c
mov rcx, qword [rcx]
add rcx, 0x1dc
cmp rcx, 0x40000
jbe 0x1801ada5c
lea rax, [rcx + 0xc]
cmp rax, r14
jae 0x1801ada5c
movsd xmm5, qword [rcx]
movss xmm14, dword [rcx + 8]
movsd qword [rsp + 0x50], xmm5
jmp 0x1801ada63
xorps xmm14, xmm14
xorps xmm5, xmm5
movss xmm3, dword [rsp + 0x20]
xorps xmm7, xmm7
movss xmm4, dword [rsp + 0x28]
movaps xmm1, xmm3
movss xmm8, dword [rsp + 0x24]
movaps xmm2, xmm4
movss xmm9, dword [rsp + 0x44]
movaps xmm0, xmm8
movss xmm10, dword [rsp + 0x40]
subss xmm0, xmm9
movss xmm11, dword [rsp + 0x48]
subss xmm1, xmm10
subss xmm2, xmm11
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm0
movaps xmm0, xmm8
subss xmm0, xmm9
addss xmm1, xmm2
cvtps2pd xmm0, xmm0
sqrtss xmm7, xmm1
divss xmm7, xmm6
movaps xmm6, xmm7
mulss xmm7, xmm5
mulss xmm6, xmm14
mulss xmm7, dword [0x180182b10]
mulss xmm6, dword [0x180182b10]
addss xmm7, xmm3
movss xmm3, dword [rbp + 0x40]
addss xmm6, xmm4
movaps xmm1, xmm7
subss xmm1, xmm10
movaps xmm2, xmm6
subss xmm2, xmm11
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
movss xmm2, dword [rbp + 0x48]
sqrtss xmm1, xmm1
cvtps2pd xmm1, xmm1
call fcn.1801abe90
xorps xmm1, xmm1
subss xmm10, xmm7
cvtsd2ss xmm1, xmm0
subss xmm11, xmm6
movaps xmm3, xmm10
addss xmm8, xmm1
mulss xmm3, xmm10
movaps xmm2, xmm11
subss xmm9, xmm8
mulss xmm2, xmm11
movaps xmm1, xmm9
mulss xmm1, xmm9
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm9, xmm2
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
xorps xmm11, xmmword [0x1801839e0]
movaps xmm9, xmm0
mulss xmm9, dword [0x180182fa4]
movaps xmm1, xmm11
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm6, xmm0
mulss xmm6, dword [0x18018316c]
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801adbe7
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adbe7
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801adbe7
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adbe7
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x1801adbed
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm11, dword [0x180182fcc]
subss xmm9, xmm0
subss xmm6, xmm1
comiss xmm9, xmm15
jae 0x1801adc0b
movaps xmm9, xmm15
jmp 0x1801adc10
minss xmm9, xmm11
movss xmm10, dword [0x180183188]
comiss xmm6, xmm10
jae 0x1801adc26
addss xmm6, xmm13
jmp 0x1801adc31
comiss xmm6, xmm13
jbe 0x1801adc31
subss xmm6, xmm13
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801adc74
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adc74
mov rcx, qword [rcx]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801adc74
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adc74
movss xmm8, dword [rcx]
movss xmm7, dword [rcx + 4]
jmp 0x1801adc7b
xorps xmm7, xmm7
xorps xmm8, xmm8
cmp byte [0x1802c9cfe], 0
addss xmm7, xmm6
addss xmm8, xmm9
movss dword [rbp + 0x44], xmm7
movss dword [rbp + 0x40], xmm8
je 0x1801adcac
lea rcx, [rbp + 0x40]
call fcn.1801ac540
movss xmm7, dword [rbp + 0x44]
movss xmm8, dword [rbp + 0x40]
comiss xmm8, xmm15
jae 0x1801adcb8
movaps xmm8, xmm15
jmp 0x1801adcc2
comiss xmm8, xmm11
jbe 0x1801adcc2
movaps xmm8, xmm11
comiss xmm7, xmm10
jae 0x1801adccf
addss xmm7, xmm13
jmp 0x1801adcda
comiss xmm7, xmm13
jbe 0x1801adcda
addss xmm7, xmm10
call fcn.18019bf80
lea rcx, [rax + 0x608]
cmp rcx, 0x40000
jbe 0x1801add1a
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801add1a
mov rax, qword [rcx]
add rax, 0x3c
cmp rax, 0x40000
jbe 0x1801add1a
lea rcx, [rax + 8]
cmp rcx, r14
jae 0x1801add1a
movss dword [rax], xmm8
movss dword [rax + 4], xmm7
cmp dword [0x1802c9d04], 3
jne 0x1801ae2c0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x190
sub r8d, ecx
lea rcx, [rbx + 0xb8]
cmp r8d, 0x32
jle 0x1801ade13
cmp rcx, 0x40000
jbe 0x1801adeb3
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adeb3
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801adeb3
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adeb3
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1801adeb3
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adeb3
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801adeb3
mov rax, qword gs:[0x58]
mov rdx, qword [rax + rsi*8]
mov eax, dword [r15 + rdx]
cmp dword [0x1803001b8], eax
jg 0x1801ae579
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
jmp 0x1801adec4
cmp rcx, 0x40000
jbe 0x1801adeb3
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adeb3
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1801adeb3
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adeb3
mov rcx, qword [rcx]
add rcx, 0xb0
cmp rcx, 0x40000
jbe 0x1801adeb3
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801adeb3
mov rdi, qword [rcx]
test rdi, rdi
je 0x1801adeb3
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [r15 + rcx]
cmp dword [0x1803001b8], eax
jg 0x1801ae5b7
mov rdx, qword [0x180300098]
lea r8, [rsp + 0x50]
mov r9, rdi
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x58], 0
call fcn.1801dbd60
jmp 0x1801adec4
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
movsd xmm0, qword [rsp + 0x30]
mov eax, dword [rsp + 0x38]
movsd qword [rsp + 0x20], xmm0
mov dword [rsp + 0x28], eax
call fcn.18019bf80
test rax, rax
je 0x1801ae2c0
test rbx, rbx
je 0x1801ae2c0
call fcn.18019bf80
mov rcx, rax
call fcn.18019be90
test rax, rax
je 0x1801ae2c0
mov rcx, rbx
call fcn.180199f00
test al, al
jne 0x1801ae2c0
cmp byte [0x1802c9de1], al
je 0x1801adf75
mov ecx, dword [0x1802c9e14]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801adf75
call fcn.18019bf80
mov r8d, 0x2f
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.18019b950
movss xmm0, dword [rax]
movss xmm1, dword [rax + 4]
addss xmm1, dword [0x180182c40]
movss dword [rsp + 0x50], xmm0
movss xmm0, dword [rax + 8]
lea rax, [rsp + 0x50]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x54], xmm1
jmp 0x1801adf8d
call fcn.18019bf80
mov r8d, 0x2f
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18019b950
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
call fcn.18019bf80
mov rcx, rax
call fcn.18019be90
mov rcx, rax
call fcn.18019b2c0
mov ecx, eax
call fcn.1801abc10
movss dword [rbp + 0x40], xmm0
call fcn.1801abc60
add rbx, 0x5e8
movaps xmm14, xmm0
cmp rbx, 0x40000
jbe 0x1801ae00a
lea rax, [rbx + 8]
cmp rax, r14
jae 0x1801ae00a
mov rcx, qword [rbx]
add rcx, 0x1dc
cmp rcx, 0x40000
jbe 0x1801ae00a
lea rax, [rcx + 0xc]
cmp rax, r14
jae 0x1801ae00a
movsd xmm10, qword [rcx]
movss xmm11, dword [rcx + 8]
jmp 0x1801ae012
xorps xmm11, xmm11
xorps xmm10, xmm10
movss xmm3, dword [rsp + 0x28]
movss xmm4, dword [rsp + 0x20]
movaps xmm1, xmm3
movss xmm9, dword [rsp + 0x40]
movaps xmm2, xmm4
movss xmm8, dword [rsp + 0x48]
subss xmm2, xmm9
mulss xmm10, dword [0x180182b10]
subss xmm1, xmm8
mulss xmm11, dword [0x180182b10]
movss xmm6, dword [rsp + 0x24]
movss xmm7, dword [rsp + 0x44]
movaps xmm5, xmm6
mulss xmm2, xmm2
subss xmm5, xmm7
mulss xmm1, xmm1
movaps xmm0, xmm5
mulss xmm0, xmm5
addss xmm0, xmm2
xorps xmm2, xmm2
addss xmm0, xmm1
sqrtss xmm2, xmm0
movss xmm0, dword [0x180182bbc]
divss xmm0, xmm14
mulss xmm2, xmm0
mulss xmm10, xmm2
mulss xmm11, xmm2
movaps xmm2, xmm14
addss xmm10, xmm4
addss xmm11, xmm3
movss xmm3, dword [rbp + 0x40]
movaps xmm1, xmm10
subss xmm1, xmm9
movaps xmm0, xmm11
subss xmm9, xmm10
subss xmm0, xmm8
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm0, xmm1
sqrtss xmm0, xmm0
cvtps2pd xmm1, xmm0
cvtps2pd xmm0, xmm5
call fcn.1801abe90
xorps xmm1, xmm1
subss xmm8, xmm11
cvtsd2ss xmm1, xmm0
movaps xmm2, xmm8
addss xmm1, xmm6
mulss xmm2, xmm8
subss xmm7, xmm1
movaps xmm1, xmm9
mulss xmm1, xmm9
movaps xmm3, xmm7
mulss xmm3, xmm7
addss xmm3, xmm1
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm7, xmm2
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
xorps xmm8, xmmword [0x1801839e0]
movaps xmm10, xmm0
mulss xmm10, dword [0x180182fa4]
movaps xmm1, xmm8
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm6, xmm0
mulss xmm6, dword [0x18018316c]
call fcn.18019bf80
add rax, 0x608
cmp rax, 0x40000
jbe 0x1801ae194
lea rcx, [rax + 8]
cmp rcx, r14
jae 0x1801ae194
mov rcx, qword [rax]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ae194
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ae194
movss xmm0, dword [rcx]
movss xmm1, dword [rcx + 4]
jmp 0x1801ae19a
xorps xmm1, xmm1
xorps xmm0, xmm0
movss xmm9, dword [0x180182fcc]
subss xmm10, xmm0
subss xmm6, xmm1
comiss xmm10, xmm15
jae 0x1801ae1b8
movaps xmm10, xmm15
jmp 0x1801ae1bd
minss xmm10, xmm9
movss xmm8, dword [0x180183188]
comiss xmm6, xmm8
jae 0x1801ae1d3
addss xmm6, xmm13
jmp 0x1801ae1de
comiss xmm6, xmm13
jbe 0x1801ae1de
subss xmm6, xmm13
call fcn.18019bf80
add rax, 0x608
cmp rax, 0x40000
jbe 0x1801ae21f
lea rcx, [rax + 8]
cmp rcx, r14
jae 0x1801ae21f
mov rcx, qword [rax]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ae21f
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ae21f
movss xmm12, dword [rcx]
movss xmm7, dword [rcx + 4]
jmp 0x1801ae222
xorps xmm7, xmm7
cmp byte [0x1802c9cfe], 0
addss xmm12, xmm10
addss xmm7, xmm6
movss dword [rbp + 0x40], xmm12
movss dword [rbp + 0x44], xmm7
je 0x1801ae253
lea rcx, [rbp + 0x40]
call fcn.1801ac540
movss xmm7, dword [rbp + 0x44]
movss xmm12, dword [rbp + 0x40]
comiss xmm12, xmm15
jae 0x1801ae25f
movaps xmm12, xmm15
jmp 0x1801ae269
comiss xmm12, xmm9
jbe 0x1801ae269
movaps xmm12, xmm9
comiss xmm7, xmm8
jae 0x1801ae276
addss xmm7, xmm13
jmp 0x1801ae281
comiss xmm7, xmm13
jbe 0x1801ae281
addss xmm7, xmm8
call fcn.18019bf80
add rax, 0x608
cmp rax, 0x40000
jbe 0x1801ae2c0
lea rcx, [rax + 8]
cmp rcx, r14
jae 0x1801ae2c0
mov rcx, qword [rax]
add rcx, 0x3c
cmp rcx, 0x40000
jbe 0x1801ae2c0
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801ae2c0
movss dword [rcx], xmm12
movss dword [rcx + 4], xmm7
movaps xmm15, xmmword [rsp + 0x70]
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ac8f3
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ac8f3
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ac9d6
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ac9d6
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801acabe
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801acabe
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801acf91
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801acf91
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ad034
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ad034
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ad12b
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ad12b
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ad213
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ad213
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ad6a4
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ad6a4
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ad85e
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ad85e
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ad949
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ad949
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801adde4
mov ecx, 0x56e64b7d
call fcn.180193450
lea rcx, [0x1803001b8]
mov rdx, qword [rax]
mov qword [0x180300098], rdx
call fcn.18028ad04
jmp 0x1801adde4
lea rcx, [0x1803001b8]
call fcn.18028ad64
cmp dword [0x1803001b8], 0xffffffff
jne 0x1801ade87
mov ecx, 0x56e64b7d
call fcn.180193450
mov rcx, qword [rax]
mov qword [0x180300098], rcx
lea rcx, [0x1803001b8]
call fcn.18028ad04
jmp 0x1801ade87