Function at 0x1800052f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x948]
sub rsp, 0xa08
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
cmp byte [0x18043e7bc], 0
je 0x1800053f2
call fcn.18001c5d0
mov rdi, rax
movd xmm6, dword [0x18043e830]
cvtdq2ps xmm6, xmm6
lea rcx, [0x18043e844]
call fcn.18001c770
mov ebx, eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
imul eax, dword [0x18043e824]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
divss xmm2, dword [0x18043f9f0]
mov eax, dword [0x18043f4cc]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x18043f4c8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x950], xmm0
movss dword [rbp + 0x954], xmm1
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 0x64
mov r9d, ebx
lea rdx, [rbp + 0x950]
mov rcx, rdi
call fcn.18002efb0
cmp byte [0x18043e7bd], 0
je 0x18000564b
call fcn.18001c5d0
mov rbx, rax
movss xmm6, dword [0x18043e82c]
movss xmm0, dword [0x18043e808]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18043e80c]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18043e810]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x437f0000
lea rcx, [rsp + 0x40]
call fcn.18001c770
mov dword [rbp + 0x950], 0x446ec000
mov dword [rbp + 0x954], 0x44070000
mov dword [rbp + 0x958], 0x44700000
mov dword [rbp + 0x95c], 0x44070000
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x950]
lea rdx, [rbp + 0x958]
mov rcx, rbx
call fcn.1800308c0
call fcn.18001c5d0
mov rbx, rax
movss xmm6, dword [0x18043e82c]
movss xmm0, dword [0x18043e808]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18043e80c]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18043e810]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x437f0000
lea rcx, [rsp + 0x40]
call fcn.18001c770
mov dword [rbp + 0x950], 0x44714000
mov dword [rbp + 0x954], 0x44070000
mov dword [rbp + 0x958], 0x44700000
mov dword [rbp + 0x95c], 0x44070000
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x950]
lea rdx, [rbp + 0x958]
mov rcx, rbx
call fcn.1800308c0
call fcn.18001c5d0
mov rbx, rax
movss xmm6, dword [0x18043e82c]
movss xmm0, dword [0x18043e808]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18043e80c]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18043e810]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x437f0000
lea rcx, [rsp + 0x40]
call fcn.18001c770
mov dword [rbp + 0x950], 0x44700000
mov dword [rbp + 0x954], 0x4405c000
mov dword [rbp + 0x958], 0x44700000
mov dword [rbp + 0x95c], 0x44070000
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x950]
lea rdx, [rbp + 0x958]
mov rcx, rbx
call fcn.1800308c0
call fcn.18001c5d0
mov rbx, rax
movss xmm6, dword [0x18043e82c]
movss xmm0, dword [0x18043e808]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18043e80c]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18043e810]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x437f0000
lea rcx, [rsp + 0x40]
call fcn.18001c770
mov dword [rbp + 0x950], 0x44700000
mov dword [rbp + 0x954], 0x44084000
mov dword [rbp + 0x958], 0x44700000
mov dword [rbp + 0x95c], 0x44070000
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x950]
lea rdx, [rbp + 0x958]
mov rcx, rbx
call fcn.1800308c0
xor esi, esi
cmp byte [0x18043e7d9], sil
je 0x180005712
mov rbx, qword [0x18043f5c8]
add rbx, 0x348
je 0x1800056b7
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rbx, qword [rbp + 0x950]
jmp 0x1800056ba
mov rbx, rsi
movss xmm0, dword [0x18043e828]
movss dword [rbp + 0x950], xmm0
mov dword [rbp - 0x38], 1
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0x950]
mov qword [rbp - 0x58], rax
lea rax, [rbx + 0x2a8]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 4
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x268], xmm0
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x278], rsi
mov rcx, qword [0x18043f9b0]
sub rcx, qword [0x18043f9a8]
movabs r15, 0x6666666666666667
mov rax, r15
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rbx, rsi
je 0x180005820
movabs rax, 0x666666666666666
cmp rdx, rax
ja 0x1800077a2
lea rax, [rdx + rdx*4]
lea rbx, [rax*8]
cmp rbx, 0x1000
jb 0x1800057b1
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x18000779c
call fcn.18005e95c
test rax, rax
je 0x18000773a
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x1800057c6
test rbx, rbx
je 0x1800057c3
mov rcx, rbx
call fcn.18005e95c
mov r14, rax
jmp 0x1800057c6
mov r14, rsi
mov qword [rbp + 0x268], r14
lea rax, [r14 + rbx]
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x278], rax
mov rbx, qword [0x18043f9b0]
mov rdx, qword [0x18043f9a8]
sub rbx, rdx
mov r8, rbx
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov rax, r15
imul rbx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*4]
lea rbx, [r14 + rax*8]
mov qword [rbp + 0x270], rbx
jmp 0x180005827
mov r14, qword [rbp + 0x268]
movss xmm0, dword [0x180062b64]
movss dword [rbp + 0x960], xmm0
mov qword [0x18043f598], rsi
call fcn.180009640
mov rcx, qword [0x18043f538]
call fcn.1800252b0
mov dword [rbp - 0x30], esi
sub rbx, r14
mov rax, r15
imul rbx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18000745b
mov rax, rsi
movsd xmm6, qword [0x1800c2300]
movss xmm12, dword [0x180062b30]
lea rax, [rax + rax*4]
movups xmm0, xmmword [r14 + rax*8 + 0x10]
movups xmmword [rbp + 0x1e0], xmm0
movsd xmm1, qword [r14 + rax*8 + 0x20]
movsd qword [rbp + 0x1f0], xmm1
mov r15, qword [r14 + rax*8]
mov qword [0x18043f590], r15
mov rbx, qword [0x18043e290]
add rbx, r15
je 0x180005907
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rax, qword [rbp + 0x950]
jmp 0x18000590a
mov rax, rsi
mov qword [0x18043f588], rax
mov rbx, qword [0x18043e248]
add rbx, r15
je 0x18000596a
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rcx, qword [rbp + 0x950]
jmp 0x18000596d
mov rcx, rsi
mov rbx, qword [0x18043e2b0]
add rbx, rcx
xorps xmm9, xmm9
je 0x1800059c7
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm9
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rsp + 0x50]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 0x18
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rbx, qword [0x18043f5c0]
add rbx, qword [0x18043e2b0]
je 0x180005a37
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm9
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rsp + 0x50]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 0x18
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
movsd xmm0, qword [rsp + 0x60]
movsd qword [rbp + 0x2b0], xmm0
movupd xmm2, xmmword [rsp + 0x50]
jmp 0x180005a43
xorps xmm2, xmm2
movsd qword [rbp + 0x2b0], xmm9
movups xmmword [0x18043f990], xmm2
movsd xmm0, qword [rbp + 0x2b0]
movsd qword [0x18043f9a0], xmm0
mov rbx, qword [0x18043e238]
add rbx, r15
je 0x180005ab3
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov r12, qword [rbp + 0x950]
jmp 0x180005ab6
mov r12, rsi
mov rbx, qword [0x18043e230]
add rbx, r15
je 0x180005b0f
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov r13, qword [rbp + 0x950]
jmp 0x180005b12
mov r13, rsi
lea rax, [r12 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1800073f4
mov r8d, 0x6e
mov rdi, qword [rbp + 0x1f0]
mov rdx, rdi
lea rcx, [rbp + 0x200]
call fcn.180009100
mov r8d, 0x42
mov rdx, rdi
lea rcx, [rbp + 0x7f0]
call fcn.180009100
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp + 0x2c0]
call fcn.180009100
movups xmm13, xmmword [rbp + 0x7f0]
movaps xmmword [rbp + 0x2a0], xmm13
movsd xmm14, qword [rbp + 0x800]
movsd qword [rbp + 0x2b0], xmm14
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x288]
call fcn.180009d60
movaps xmmword [rsp + 0x50], xmm13
movsd qword [rsp + 0x60], xmm14
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x220]
call fcn.180009d60
movups xmm7, xmmword [rbp + 0x2c0]
movaps xmmword [rbp + 0x1d0], xmm7
movsd xmm10, qword [rbp + 0x2d0]
movsd qword [rbp + 0x1e0], xmm10
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x40]
call fcn.180009d60
movaps xmm0, xmm14
addsd xmm0, xmm6
movsd qword [rsp + 0x50], xmm13
movaps xmm15, xmm13
unpckhpd xmm15, xmm13
movsd qword [rsp + 0x58], xmm15
movsd qword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x60]
call fcn.180009d60
movsd xmm2, qword [rbp + 0x210]
addsd xmm2, xmm6
movups xmm0, xmmword [rbp + 0x200]
movaps xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm2
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x250]
call fcn.180009d60
movaps xmm1, xmm10
subsd xmm1, xmm6
movsd qword [rbp + 0x200], xmm7
movaps xmm0, xmm7
unpckhpd xmm0, xmm7
movsd qword [rbp + 0x208], xmm0
movsd qword [rbp + 0x210], xmm1
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x238]
call fcn.180009d60
mov rbx, qword [0x18043f590]
add rbx, 0x1b98
je 0x180005ce0
mov byte [rbp + 0x950], 0
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 1
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
movzx eax, byte [rbp + 0x950]
jmp 0x180005ce2
xor al, al
test al, al
setne byte [0x18043f4b9]
movsd xmm6, qword [rbp + 0x68]
movaps xmm0, xmm6
movsd xmm8, qword [rbp + 0x48]
movsd qword [rbp + 0x280], xmm8
subsd xmm0, xmm8
cvtpd2ps xmm11, xmm0
mov rbx, qword [0x18043f5c0]
add rbx, qword [0x18043e2b0]
je 0x180005d6c
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
movsd qword [rbp + 0x1e0], xmm9
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x1d0]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 0x18
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rax, qword [0x18043f5d0]
lea rbx, [rax + 0x98]
test rbx, rbx
je 0x180005dca
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rax, qword [0x18043f5d0]
lea rbx, [rax + 0xa0]
test rbx, rbx
je 0x180005e1a
mov qword [rbp + 0x950], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
movsd xmm0, qword [rbp + 0x60]
ucomisd xmm0, xmm9
jp 0x180005e2c
je 0x180007451
ucomisd xmm6, xmm9
jp 0x180005e39
je 0x180007451
mov rbx, qword [0x18043e1f0]
add rbx, qword [0x18043f5b0]
je 0x180005e9a
mov dword [rbp + 0x950], esi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x950]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 4
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov ecx, dword [rbp + 0x950]
mov dword [rbp + 0x958], ecx
jmp 0x180005ea0
mov dword [rbp + 0x958], esi
mov rbx, qword [0x18043f590]
add rbx, 0x2b0
je 0x180005efd
mov qword [rbp + 0x198], rsi
mov dword [rbp - 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x58], rbx
lea rax, [rbp + 0x198]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 8
lea rcx, [rsp + 0x70]
call qword [0x18043f980]
mov rcx, qword [rbp + 0x198]
jmp 0x180005f00
mov rcx, rsi
mov rbx, qword [0x18043e1f0]
add rbx, rcx
je 0x180005f54
mov dword [rbp + 0x950], esi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rbx
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 4
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
mov ebx, dword [rbp + 0x950]
jmp 0x180005f56
mov ebx, esi
mov dword [rbp + 0x968], ebx
movaps xmm0, xmm15
subsd xmm0, qword [0x18043f998]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movaps xmm0, xmm13
subsd xmm0, qword [0x18043f990]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movaps xmm1, xmm14
subsd xmm1, qword [0x18043f9a0]
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x180005fc3
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x180005fcb
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm6, dword [0x1800c2360]
divss xmm0, xmm6
cmp dword [rbp + 0x958], ebx
je 0x1800072cf
ucomiss xmm0, xmm9
jp 0x180005fef
je 0x1800072cf
cmp byte [0x18043e7f4], 0
je 0x1800060a7
xor edx, edx
mov r8d, 0x209f
lea rcx, str.radar
call fcn.1800152a0
mov dword [rbp + 0x950], esi
call fcn.18001d4e0
call fcn.18001d4e0
mov rbx, rax
movaps xmmword [rbp + 0x60], xmm7
movsd qword [rbp + 0x70], xmm10
lea r8, [rbp + 0x950]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x60]
call fcn.180004ff0
movaps xmm0, xmmword [0x1800c2490]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.180019880
movd xmm1, dword [rbp + 0x950]
cvtdq2ps xmm1, xmm1
movd xmm0, dword [rbp + 0x80]
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x1a0], xmm0
movss dword [rbp + 0x1a4], xmm1
mov dword [rsp + 0x20], 0xc
mov r9d, eax
movss xmm2, dword [0x180062b34]
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call fcn.18002f0a0
call fcn.18001a920
cmp byte [0x18043e7b1], 0
je 0x1800062b9
cvtps2pd xmm0, xmm11
mulsd xmm0, qword [0x1800c22c0]
cvtpd2ps xmm7, xmm0
cmp byte [0x18043e7b6], 0
jne 0x18000615d
call fcn.18001c5d0
mov rbx, rax
movd xmm6, dword [0x18043e838]
cvtdq2ps xmm6, xmm6
lea rcx, [0x18043e854]
call fcn.18001c770
movsd xmm1, qword [rbp + 0x240]
cvtpd2ps xmm1, xmm1
cvtps2pd xmm2, xmm7
movaps xmm0, xmm2
addsd xmm0, qword [rbp + 0x238]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x1a8], xmm0
movss dword [rbp + 0x1ac], xmm1
movsd xmm1, qword [rbp + 0x258]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [rbp + 0x250]
subsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b4], xmm1
lea r8, [rbp + 0x1a8]
lea rdx, [rbp + 0x1b0]
jmp 0x18000629d
cvtps2pd xmm7, xmm7
mov rcx, qword [0x18043f588]
call fcn.18000f3a0
test al, al
je 0x18000620b
call fcn.18001c5d0
mov rbx, rax
movd xmm6, dword [0x18043e838]
cvtdq2ps xmm6, xmm6
movaps xmm0, xmmword [0x1800c2460]
movups xmmword [rbp + 0x5b8], xmm0
lea rcx, [rbp + 0x5b8]
call fcn.180019880
movsd xmm1, qword [rbp + 0x240]
cvtpd2ps xmm1, xmm1
movaps xmm0, xmm7
addsd xmm0, qword [rbp + 0x238]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x1b8], xmm0
movss dword [rbp + 0x1bc], xmm1
movsd xmm2, qword [rbp + 0x258]
cvtpd2ps xmm2, xmm2
movsd xmm0, qword [rbp + 0x250]
subsd xmm0, xmm7
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x1c8], xmm0
movss dword [rbp + 0x1cc], xmm2
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x1c8]
jmp 0x18000629d
call fcn.18001c5d0
mov rbx, rax
movd xmm6, dword [0x18043e838]
cvtdq2ps xmm6, xmm6
movaps xmm0, xmmword [0x1800c2450]
movups xmmword [rbp + 0x808], xmm0
lea rcx, [rbp + 0x808]
call fcn.180019880
movsd xmm1, qword [rbp + 0x240]
cvtpd2ps xmm1, xmm1
movaps xmm0, xmm7
addsd xmm0, qword [rbp + 0x238]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x84], xmm0
movss dword [rbp + 0x88], xmm1
movsd xmm2, qword [rbp + 0x258]
cvtpd2ps xmm2, xmm2
movsd xmm0, qword [rbp + 0x250]
subsd xmm0, xmm7
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x8c], xmm0
movss dword [rbp + 0x90], xmm2
lea r8, [rbp + 0x84]
lea rdx, [rbp + 0x8c]
movss dword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov rcx, rbx
call fcn.180031950
cmp byte [0x18043e7b4], 0
je 0x180006c50
mov r8d, 0x6e
mov rdx, rdi
lea rcx, [rbp + 0x2e0]
call fcn.180009100
mov r8d, 0x62
mov rdx, rdi
lea rcx, [rbp + 0x840]
call fcn.180009100
mov r8d, 2
mov rdx, rdi
lea rcx, [rbp + 0x320]
call fcn.180009100
mov r8d, 0x42
mov rdx, rdi
lea rcx, [rbp + 0x360]
call fcn.180009100
mov r8d, 9
mov rdx, rdi
lea rcx, [rbp + 0x3a0]
call fcn.180009100
mov r8d, 0x26
mov rdx, rdi
lea rcx, [rbp + 0x3e0]
call fcn.180009100
mov r8d, 0xa
mov rdx, rdi
lea rcx, [rbp + 0x420]
call fcn.180009100
mov r8d, 0x27
mov rdx, rdi
lea rcx, [rbp + 0x460]
call fcn.180009100
mov r8d, 0xb
mov rdx, rdi
lea rcx, [rbp + 0x4a0]
call fcn.180009100
mov r8d, 0x28
mov rdx, rdi
lea rcx, [rbp + 0x4e0]
call fcn.180009100
mov r8d, 0x4d
mov rdx, rdi
lea rcx, [rbp + 0x520]
call fcn.180009100
mov r8d, 0x54
mov rdx, rdi
lea rcx, [rbp + 0x560]
call fcn.180009100
mov r8d, 0x49
mov rdx, rdi
lea rcx, [rbp + 0x5a0]
call fcn.180009100
mov r8d, 0x50
mov rdx, rdi
lea rcx, [rbp + 0x5c8]
call fcn.180009100
mov r8d, 0x52
mov rdx, rdi
lea rcx, [rbp + 0x600]
call fcn.180009100
mov r8d, 0x56
mov rdx, rdi
lea rcx, [rbp + 0x640]
call fcn.180009100
movups xmm0, xmmword [rbp + 0x2e0]
movaps xmmword [rbp + 0x300], xmm0
movsd xmm1, qword [rbp + 0x2f0]
movsd qword [rbp + 0x310], xmm1
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x698]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x320]
movaps xmmword [rbp + 0x340], xmm0
movsd xmm1, qword [rbp + 0x330]
movsd qword [rbp + 0x350], xmm1
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x6b0]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x360]
movaps xmmword [rbp + 0x380], xmm0
movsd xmm1, qword [rbp + 0x370]
movsd qword [rbp + 0x390], xmm1
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x680]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x3a0]
movaps xmmword [rbp + 0x3c0], xmm0
movsd xmm1, qword [rbp + 0x3b0]
movsd qword [rbp + 0x3d0], xmm1
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x6c8]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x400], xmm0
movsd xmm1, qword [rbp + 0x3f0]
movsd qword [rbp + 0x410], xmm1
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x6e0]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x420]
movaps xmmword [rbp + 0x440], xmm0
movsd xmm1, qword [rbp + 0x430]
movsd qword [rbp + 0x450], xmm1
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x6f8]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x460]
movaps xmmword [rbp + 0x480], xmm0
movsd xmm1, qword [rbp + 0x470]
movsd qword [rbp + 0x490], xmm1
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x828]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x4a0]
movaps xmmword [rbp + 0x4c0], xmm0
movsd xmm1, qword [rbp + 0x4b0]
movsd qword [rbp + 0x4d0], xmm1
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x730]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x4e0]
movaps xmmword [rbp + 0x500], xmm0
movsd xmm1, qword [rbp + 0x4f0]
movsd qword [rbp + 0x510], xmm1
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x748]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x520]
movaps xmmword [rbp + 0x540], xmm0
movsd xmm1, qword [rbp + 0x530]
movsd qword [rbp + 0x550], xmm1
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x778]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x560]
movaps xmmword [rbp + 0x580], xmm0
movsd xmm1, qword [rbp + 0x570]
movsd qword [rbp + 0x590], xmm1
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x760]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x710], xmm0
movsd xmm1, qword [rbp + 0x5b0]
movsd qword [rbp + 0x720], xmm1
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x7a8]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x5c8]
movaps xmmword [rbp + 0x5e0], xmm0
movsd xmm1, qword [rbp + 0x5d8]
movsd qword [rbp + 0x5f0], xmm1
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x790]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x600]
movaps xmmword [rbp + 0x620], xmm0
movsd xmm1, qword [rbp + 0x610]
movsd qword [rbp + 0x630], xmm1
lea rdx, [rbp + 0x620]
lea rcx, [rbp + 0x7c0]
call fcn.180009d60
movups xmm0, xmmword [rbp + 0x640]
movaps xmmword [rbp + 0x660], xmm0
movsd xmm1, qword [rbp + 0x650]
movsd qword [rbp + 0x670], xmm1
lea rdx, [rbp + 0x660]
lea rcx, [rbp + 0x7d8]
call fcn.180009d60
call fcn.18001c5d0
mov rdi, rax
movups xmm0, xmmword [0x18043e864]
movups xmmword [rbp + 0x818], xmm0
lea rcx, [rbp + 0x818]
call fcn.180019880
mov ebx, eax
movd xmm12, dword [0x18043e834]
cvtdq2ps xmm12, xmm12
movsd xmm9, qword [rbp + 0x688]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp + 0x680]
cvtpd2ps xmm7, xmm7
movss dword [rbp + 0x94], xmm7
movss dword [rbp + 0x98], xmm9
movsd xmm1, qword [rbp + 0x6a0]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [rbp + 0x698]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x9c], xmm0
movss dword [rbp + 0xa0], xmm1
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0x94]
lea rdx, [rbp + 0x9c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0xa4], xmm7
movss dword [rbp + 0xa8], xmm9
movsd xmm11, qword [rbp + 0x6b8]
cvtpd2ps xmm11, xmm11
movsd xmm10, qword [rbp + 0x6b0]
cvtpd2ps xmm10, xmm10
movss dword [rbp + 0xac], xmm10
movss dword [rbp + 0xb0], xmm11
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0xa4]
lea rdx, [rbp + 0xac]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0xb4], xmm7
movss dword [rbp + 0xb8], xmm9
movsd xmm8, qword [rbp + 0x6d0]
cvtpd2ps xmm8, xmm8
movsd xmm6, qword [rbp + 0x6c8]
cvtpd2ps xmm6, xmm6
movss dword [rbp + 0xbc], xmm6
movss dword [rbp + 0xc0], xmm8
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0xb4]
lea rdx, [rbp + 0xbc]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0xc4], xmm7
movss dword [rbp + 0xc8], xmm9
movsd xmm9, qword [rbp + 0x6e8]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp + 0x6e0]
cvtpd2ps xmm7, xmm7
movss dword [rbp + 0xcc], xmm7
movss dword [rbp + 0xd0], xmm9
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0xc4]
lea rdx, [rbp + 0xcc]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0xd4], xmm6
movss dword [rbp + 0xd8], xmm8
movsd xmm8, qword [rbp + 0x700]
cvtpd2ps xmm8, xmm8
movsd xmm6, qword [rbp + 0x6f8]
cvtpd2ps xmm6, xmm6
movss dword [rbp + 0xdc], xmm6
movss dword [rbp + 0xe0], xmm8
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0xd4]
lea rdx, [rbp + 0xdc]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0xe4], xmm7
movss dword [rbp + 0xe8], xmm9
movsd xmm9, qword [rbp + 0x830]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp + 0x828]
cvtpd2ps xmm7, xmm7
movss dword [rbp + 0xec], xmm7
movss dword [rbp + 0xf0], xmm9
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0xe4]
lea rdx, [rbp + 0xec]
mov rcx, rdi
call fcn.1800308c0
movsd xmm1, qword [rbp + 0x738]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [rbp + 0x730]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0xf4], xmm0
movss dword [rbp + 0xf8], xmm1
movss dword [rbp + 0xfc], xmm6
movss dword [rbp + 0x100], xmm8
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0xf4]
lea rdx, [rbp + 0xfc]
mov rcx, rdi
call fcn.1800308c0
movsd xmm1, qword [rbp + 0x750]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [rbp + 0x748]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x104], xmm0
movss dword [rbp + 0x108], xmm1
movss dword [rbp + 0x10c], xmm7
movss dword [rbp + 0x110], xmm9
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x104]
lea rdx, [rbp + 0x10c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0x114], xmm10
movss dword [rbp + 0x118], xmm11
movsd xmm9, qword [rbp + 0x768]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp + 0x760]
cvtpd2ps xmm7, xmm7
movss dword [rbp + 0x11c], xmm7
movss dword [rbp + 0x120], xmm9
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x114]
lea rdx, [rbp + 0x11c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0x124], xmm10
movss dword [rbp + 0x128], xmm11
movsd xmm8, qword [rbp + 0x780]
cvtpd2ps xmm8, xmm8
movsd xmm6, qword [rbp + 0x778]
cvtpd2ps xmm6, xmm6
movss dword [rbp + 0x12c], xmm6
movss dword [rbp + 0x130], xmm8
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x124]
lea rdx, [rbp + 0x12c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0x134], xmm7
movss dword [rbp + 0x138], xmm9
movsd xmm9, qword [rbp + 0x798]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp + 0x790]
cvtpd2ps xmm7, xmm7
movss dword [rbp + 0x13c], xmm7
movss dword [rbp + 0x140], xmm9
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x134]
lea rdx, [rbp + 0x13c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0x144], xmm6
movss dword [rbp + 0x148], xmm8
movsd xmm8, qword [rbp + 0x7b0]
cvtpd2ps xmm8, xmm8
movsd xmm6, qword [rbp + 0x7a8]
cvtpd2ps xmm6, xmm6
movss dword [rbp + 0x14c], xmm6
movss dword [rbp + 0x150], xmm8
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x144]
lea rdx, [rbp + 0x14c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0x154], xmm7
movss dword [rbp + 0x158], xmm9
movsd xmm1, qword [rbp + 0x7c8]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [rbp + 0x7c0]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x15c], xmm0
movss dword [rbp + 0x160], xmm1
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x154]
lea rdx, [rbp + 0x15c]
mov rcx, rdi
call fcn.1800308c0
movss dword [rbp + 0x164], xmm6
movss dword [rbp + 0x168], xmm8
movsd xmm1, qword [rbp + 0x7e0]
cvtpd2ps xmm1, xmm1
movsd xmm0, qword [rbp + 0x7d8]
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x16c], xmm0
movss dword [rbp + 0x170], xmm1
movss dword [rsp + 0x20], xmm12
mov r9d, ebx
lea r8, [rbp + 0x164]
lea rdx, [rbp + 0x16c]
mov rcx, rdi
call fcn.1800308c0
movsd xmm8, qword [rbp + 0x280]
movss xmm12, dword [0x180062b30]
movsd xmm7, qword [rbp + 0x40]
cmp byte [0x18043e7b7], 0
je 0x180006d62
mov rcx, qword [0x18043f588]
call fcn.18000f3a0
test al, al
je 0x180006cea
mov rcx, qword [0x18043f588]
call fcn.18000f3a0
test al, al
je 0x180006d62
call fcn.18001c5d0
mov rcx, rax
cvtpd2ps xmm1, xmm8
cvtpd2ps xmm0, xmm7
movss dword [rbp + 0x174], xmm0
movss dword [rbp + 0x178], xmm1
movd xmm2, dword [0x18043f4cc]
cvtdq2ps xmm2, xmm2
mov eax, dword [0x18043f4c8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x17c], xmm0
movss dword [rbp + 0x180], xmm2
mov r9d, 0xff00ff00
lea r8, [rbp + 0x174]
lea rdx, [rbp + 0x17c]
jmp 0x180006d4c
call fcn.18001c5d0
mov rcx, rax
cvtpd2ps xmm1, xmm8
cvtpd2ps xmm0, xmm7
movss dword [rbp + 0x184], xmm0
movss dword [rbp + 0x188], xmm1
movd xmm2, dword [0x18043f4cc]
cvtdq2ps xmm2, xmm2
mov eax, dword [0x18043f4c8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18c], xmm0
movss dword [rbp + 0x190], xmm2
mov r9d, 0xff0000ff
lea r8, [rbp + 0x184]
lea rdx, [rbp + 0x18c]
movd xmm3, dword [0x18043e83c]
cvtdq2ps xmm3, xmm3
movss dword [rsp + 0x20], xmm3
call fcn.1800308c0
cmp byte [0x18043e7b5], 0
je 0x180006e59
subsd xmm15, qword [0x18043f9c8]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm15
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
subsd xmm13, qword [0x18043f9c0]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm13
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
subsd xmm14, qword [0x18043f9d0]
cvtpd2ps xmm0, xmm14
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x180006dd6
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x180006dde
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm6, dword [0x1800c2360]
divss xmm0, xmm6
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movq r8, xmm2
lea rdx, str._.f_m
lea rcx, [rsp + 0x70]
call fcn.180003be0
movaps xmm0, xmmword [0x1800c24c0]
movaps xmmword [rsp + 0x50], xmm0
addsd xmm8, qword [0x1800c22f8]
cvttsd2si r8d, xmm8
subsd xmm7, qword [0x1800c22f0]
cvttsd2si edx, xmm7
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x50]
movss xmm0, dword [0x1800c2348]
movd ecx, xmm0
call fcn.1800077b0
jmp 0x180006e61
movss xmm6, dword [0x1800c2360]
cmp byte [0x18043e7d7], 0
je 0x1800072cf
lea rbx, [r13 + 0x450]
test rbx, rbx
je 0x180006ec4
mov qword [rbp + 0x950], rsi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rbx
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 8
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
mov rax, qword [rbp + 0x950]
jmp 0x180006ec7
mov rax, rsi
lea rbx, [rax + 0x98]
test rbx, rbx
je 0x180006f1d
mov qword [rbp + 0x950], rsi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rbx
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 8
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
mov rax, qword [rbp + 0x950]
jmp 0x180006f20
mov rax, rsi
lea rbx, [rax + 0x40]
test rbx, rbx
je 0x180006f71
mov dword [rbp + 0x950], esi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rbx
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 4
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
mov eax, dword [rbp + 0x950]
jmp 0x180006f73
mov eax, esi
lea ecx, [rax + 1]
mov eax, 2
mul rcx
mov rdi, 0xffffffffffffffff
cmovo rax, rdi
mov rcx, rax
call fcn.18005ee5c
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], rsi
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180006fb0
mov rdx, rbx
lea rcx, [rbp + 0x60]
call fcn.180002740
nop
lea rdi, [r13 + 0x948]
test rdi, rdi
je 0x18000701e
mov qword [rbp + 0x950], rsi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rdi
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 8
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
mov rdi, qword [rbp + 0x950]
jmp 0x180007021
mov rdi, rsi
lea r8, [rbp + 0x60]
cmp qword [rbp + 0x78], 7
seta r9b
cmova r8, qword [rbp + 0x60]
mov rax, qword [rbp + 0x70]
lea r8, [r8 + rax*2]
lea rdx, [rbp + 0x60]
test r9b, r9b
cmovne rdx, qword [rbp + 0x60]
lea r9, [rbp + 0x950]
lea rcx, [rbp + 0x2c0]
call fcn.180001eb0
nop
mov rdx, r12
lea rcx, [rbp + 0x1d0]
call fcn.180009310
nop
lea r12, [rdi + 0xd08]
test r12, r12
je 0x1800070b7
mov dword [rbp + 0x950], esi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], r12
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 4
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
add rdi, 0x358
je 0x180007101
mov byte [rbp + 0x950], 0
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rdi
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 1
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x40]
call fcn.1800018b0
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rdx, qword [rbp + 0x40]
movss xmm0, dword [0x180062b68]
movss dword [rsp + 0x20], xmm0
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x40]
call fcn.1800187e0
movss xmm0, dword [rsp + 0x40]
mulss xmm0, dword [0x180062b28]
cvtps2pd xmm1, xmm0
movsd xmm2, qword [rbp + 0x288]
subsd xmm2, xmm1
cvtpd2ps xmm3, xmm2
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
movaps xmm0, xmmword [0x1800c24c0]
movaps xmmword [rsp + 0x50], xmm0
movsd xmm1, qword [rbp + 0x290]
subsd xmm1, qword [0x1800c2308]
cvttsd2si r8d, xmm1
cvttss2si edx, xmm3
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 0
lea r9, [rsp + 0x50]
movss xmm0, dword [0x1800c2330]
movd ecx, xmm0
call fcn.1800077b0
mov rcx, rbx
call fcn.18005e998
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1800071fb
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800071f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007435
call fcn.18005e998
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x18000724d
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007247
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000743c
call fcn.18005e998
nop
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 0xf
jbe 0x18000728f
inc rdx
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007289
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007443
call fcn.18005e998
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x1800072cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800072ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000744a
call fcn.18005e998
cmp byte [0x18043e7b2], 0
je 0x1800073ec
mov rdx, qword [0x18043f590]
add rdx, 0x872
lea rcx, [0x18043f978]
call fcn.180003910
movsx ebx, al
mov eax, dword [0x18043f4c8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm3, qword [rbp + 0x220]
subsd xmm3, xmm0
mov eax, dword [0x18043f4cc]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm2, qword [rbp + 0x228]
subsd xmm2, xmm0
mov eax, dword [0x18043f4d0]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm1, qword [rbp + 0x230]
subsd xmm1, xmm0
mulsd xmm2, xmm2
mulsd xmm3, xmm3
addsd xmm2, xmm3
mulsd xmm1, xmm1
addsd xmm2, xmm1
cvtpd2ps xmm3, xmm2
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x18000737f
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x180007387
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm0, xmm6
movd xmm1, dword [0x18043e824]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x1800073ec
movss xmm7, dword [rbp + 0x960]
comiss xmm7, xmm0
jbe 0x1800073ec
movss dword [rbp + 0x960], xmm0
mov eax, dword [rbp + 0x958]
cmp eax, dword [rbp + 0x968]
je 0x1800073ec
cmp byte [0x18043e7ba], 0
je 0x1800073e5
mov rcx, qword [0x18043f588]
call fcn.18000f3a0
test al, al
je 0x1800073ec
cmp byte [0x18043e7bb], 0
je 0x1800073e5
test bl, 0x10
jne 0x1800073ec
mov qword [0x18043f598], r15
movsd xmm6, qword [0x1800c2300]
mov r8d, dword [rbp - 0x30]
inc r8d
mov dword [rbp - 0x30], r8d
mov rcx, qword [rbp + 0x270]
sub rcx, r14
movabs r15, 0x6666666666666667
mov rax, r15
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov eax, r8d
cmp rax, rdx
jb 0x180005883
jmp 0x18000745b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movabs r15, 0x6666666666666667
cmp byte [0x18043e7b2], 0
je 0x1800076e1
cmp qword [0x18043f598], 0
je 0x1800076e1
mov ecx, dword [0x18043e7c0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1800076d5
mov ecx, dword [0x18043e7c4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1800076d5
mov rbx, qword [0x18043f598]
add rbx, 0x318
je 0x1800074f8
mov qword [rbp + 0x950], rsi
mov dword [rbp + 0x38], esi
mov eax, dword [0x18043f988]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x18], rbx
lea rax, [rbp + 0x950]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 8
lea rcx, [rbp - 0x20]
call qword [0x18043f980]
mov rsi, qword [rbp + 0x950]
mov r8d, dword [0x18043e7f8]
mov rdx, rsi
lea rcx, [rbp + 0x288]
call fcn.180009100
movups xmm0, xmmword [rbp + 0x288]
movaps xmmword [rbp + 0x40], xmm0
movsd xmm1, qword [rbp + 0x298]
movsd qword [rbp + 0x50], xmm1
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x220]
call fcn.180009d60
movsd xmm9, qword [rbp + 0x228]
movsd xmm10, qword [rbp + 0x220]
xorps xmm1, xmm1
ucomisd xmm10, xmm1
jp 0x180007571
jne 0x180007571
ucomisd xmm9, xmm1
jp 0x180007571
jne 0x180007571
movsd xmm0, qword [rbp + 0x230]
ucomisd xmm0, xmm1
jp 0x180007571
je 0x1800076e1
mov eax, dword [0x18043f4cc]
cdq
sub eax, edx
sar eax, 1
movd xmm8, eax
cvtdq2pd xmm8, xmm8
mov eax, dword [0x18043f4c8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, xmm10
movsd xmm1, qword [0x1800c22d0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
subsd xmm8, xmm9
movsd xmm1, qword [0x1800c22d0]
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm7
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1800075da
xorps xmm6, xmm6
sqrtsd xmm6, xmm0
jmp 0x1800075e2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
imul eax, dword [0x18043e824]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
divss xmm1, dword [0x18043f9f0]
cvtps2pd xmm1, xmm1
comisd xmm1, xmm6
jb 0x1800076e1
cmp byte [0x18043e7b9], 0
je 0x1800076e1
call fcn.18001c5d0
mov rbx, rax
movss xmm0, dword [0x18043e7fc]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18043e800]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18043e804]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x437f0000
lea rcx, [rsp + 0x40]
call fcn.18001c770
mov r9d, eax
cvtpd2ps xmm1, xmm9
cvtpd2ps xmm0, xmm10
movss dword [rbp + 0x950], xmm0
movss dword [rbp + 0x954], xmm1
mov eax, dword [0x18043f4cc]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x18043f4c8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x958], xmm0
movss dword [rbp + 0x95c], xmm1
movss xmm0, dword [0x180062b28]
movss dword [rsp + 0x20], xmm0
lea r8, [rbp + 0x950]
lea rdx, [rbp + 0x958]
mov rcx, rbx
call fcn.1800308c0
jmp 0x1800076e1
mov rcx, qword [0x18043f598]
call fcn.180004ce0
mov rcx, qword [0x18043f540]
call fcn.1800252b0
nop
test r14, r14
je 0x180007749
mov rcx, qword [rbp + 0x1c0]
sub rcx, r14
mov rax, r15
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r14
cmp rdx, 0x1000
jb 0x180007741
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180007741
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.18005e998
lea r11, [rsp + 0xa08]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180001e30
int3
call fcn.180001e70
int3