Function at 0x180014e90
Capabilities:
Create process on windows

Disassembly:
push rsi
push rdi
sub rsp, 0x3d8
call fcn.180014bf0
movzx eax, byte [0x1800ea010]
test eax, eax
je 0x180014eaf
call fcn.180076410
movzx eax, byte [0x1800eb838]
test eax, eax
jne 0x180015134
call fcn.18007b1f0
test eax, eax
je 0x180014ece
mov byte [0x1800eb838], 1
lea rdx, str.dwEntityList:
lea rcx, [0x1800ebd70]
call fcn.180004930
mov qword [rsp + 0x110], rax
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x2b0], rax
mov rdx, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x110]
call fcn.180011dd0
mov qword [rsp + 0x118], rax
lea rdx, [0x180006e00]
mov rcx, qword [rsp + 0x118]
call fcn.180008c20
lea rdx, str.dwLocalPlayerController:
lea rcx, [0x1800ebd70]
call fcn.180004930
mov qword [rsp + 0x128], rax
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x120], rax
mov rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x128]
call fcn.180011dd0
mov qword [rsp + 0x130], rax
lea rdx, [0x180006e00]
mov rcx, qword [rsp + 0x130]
call fcn.180008c20
lea rdx, str.dwLocalPlayerPawn:
lea rcx, [0x1800ebd70]
call fcn.180004930
mov qword [rsp + 0x140], rax
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x138], rax
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x140]
call fcn.180011dd0
mov qword [rsp + 0x148], rax
lea rdx, [0x180006e00]
mov rcx, qword [rsp + 0x148]
call fcn.180008c20
lea rdx, str.dwViewMatrix:
lea rcx, [0x1800ebd70]
call fcn.180004930
mov qword [rsp + 0x158], rax
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x150], rax
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x158]
call fcn.180011dd0
mov qword [rsp + 0x160], rax
lea rdx, [0x180006e00]
mov rcx, qword [rsp + 0x160]
call fcn.180008c20
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x10]
mov rcx, qword [0x1800ebb50]
add rax, qword [rcx + 0x20]
mov rcx, qword [0x1800ebb50]
mov qword [rcx + 8], rax
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x10]
mov rcx, qword [0x1800ebb50]
add rax, qword [rcx + 0x18]
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb848]
mov rcx, rax
call fcn.180010080
mov rax, qword [0x1800eb848]
add rax, 0x10
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb840]
mov rcx, rax
call fcn.180010080
movzx eax, byte [0x1800eb839]
test eax, eax
jne 0x180015134
call fcn.180013b40
movzx eax, al
test eax, eax
je 0x180015134
mov edx, 3
lea rcx, str.C:Program_FilesInternet_Exploreriexplore.exe_https:__qm.qq.com_q_8vWzZvTiwg
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.HOOK
lea rcx, [0x1800ebd70]
call fcn.180004930
mov qword [rsp + 0x168], rax
lea rdx, [0x180006e00]
mov rcx, qword [rsp + 0x168]
call fcn.180008c20
mov byte [0x1800eb839], 1
mov qword [0x1800eb8e0], 0
mov byte [0x1800eb8f8], 0
mov byte [0x1800eb839], 1
lea rcx, [rsp + 0x2e0]
call fcn.180026b00
mov rdx, qword [rax]
lea rcx, [rsp + 0xc8]
call fcn.1800119f0
movss xmm0, dword [0x1800b5f94]
movss dword [rsp + 0x270], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x298]
call fcn.180011a50
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xc0]
call fcn.180011940
mov byte [rsp + 0x40], 0
mov eax, dword [0x1800ea020]
mov dword [rsp + 0x6c], eax
mov rax, qword [0x1800ebb50]
mov rcx, qword [0x1800ebb50]
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x10]
mov rcx, qword [0x1800ebb50]
add rax, qword [rcx + 0x28]
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb680]
mov rcx, rax
call fcn.180010080
mov rax, qword [0x1800ebb50]
mov rax, qword [rax + 0x10]
mov rcx, qword [0x1800ebb50]
add rax, qword [rcx + 0x30]
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb688]
mov rcx, rax
call fcn.180010080
lea rcx, [0x1800eb680]
call fcn.180018460
lea rcx, [0x1800eb680]
call fcn.180018520
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x5c]
mov rcx, qword [0x1800eb688]
lea rax, [rcx + rax + 0xc]
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb690]
mov rcx, rax
call fcn.180010080
mov dword [rsp + 0x58], 0
jmp 0x180015265
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0x40
jge 0x180015c6b
mov eax, dword [rsp + 0x58]
inc eax
imul eax, eax, 0x78
cdqe
mov rcx, qword [0x1800eb840]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb760]
mov rcx, rax
call fcn.180010080
cmp qword [0x1800eb760], 0
jne 0x1800152ac
jmp 0x18001525b
mov rax, qword [0x1800eb680]
cmp qword [0x1800eb760], rax
jne 0x1800152c8
mov eax, dword [rsp + 0x58]
mov dword [0x1800eb670], eax
jmp 0x18001525b
lea rcx, [0x1800eb760]
call fcn.180018400
movzx eax, al
test eax, eax
jne 0x1800152e0
jmp 0x18001525b
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x48]
mov rcx, qword [0x1800eb760]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 4
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.180010080
mov eax, dword [rsp + 0x60]
and eax, 0x7fff
shr eax, 9
shl eax, 3
mov eax, eax
mov rcx, qword [0x1800eb848]
lea rax, [rcx + rax + 0x10]
xor r9d, r9d
mov r8d, 8
lea rdx, [rsp + 0x170]
mov rcx, rax
call fcn.180010080
mov eax, dword [rsp + 0x60]
and eax, 0x1ff
imul eax, eax, 0x78
mov eax, eax
mov rcx, qword [rsp + 0x170]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb768]
mov rcx, rax
call fcn.180010080
lea rcx, [0x1800eb760]
call fcn.180018520
movzx eax, byte [0x1800eb86f]
test eax, eax
jne 0x1800153a1
mov eax, dword [0x1800eb71c]
cmp dword [0x1800eb7fc], eax
jne 0x1800153a1
jmp 0x18001525b
lea rcx, [0x1800eb760]
call fcn.180018460
cmp dword [0x1800eb800], 0
jne 0x1800153bb
jmp 0x18001525b
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x5c]
mov rcx, qword [0x1800eb768]
lea rax, [rcx + rax + 0xc]
xor r9d, r9d
mov r8d, 8
lea rdx, [0x1800eb770]
mov rcx, rax
call fcn.180010080
mov eax, dword [0x1800eb670]
mov ecx, 1
mov qword [rsp + 0x178], rcx
movzx ecx, al
mov rax, qword [rsp + 0x178]
shl rax, cl
mov rcx, qword [0x1800eb770]
and rcx, rax
mov rax, rcx
test rax, rax
jne 0x180015457
mov eax, dword [rsp + 0x58]
mov ecx, 1
mov qword [rsp + 0x180], rcx
movzx ecx, al
mov rax, qword [rsp + 0x180]
shl rax, cl
mov rcx, qword [0x1800eb690]
and rcx, rax
mov rax, rcx
test rax, rax
jne 0x180015457
mov dword [rsp + 0x64], 0
jmp 0x18001545f
mov dword [rsp + 0x64], 1
movzx eax, byte [rsp + 0x64]
mov byte [0x1800eb778], al
movzx eax, byte [0x1800ea011]
test eax, eax
je 0x180015b40
lea rcx, [0x1800eb760]
call fcn.1800184c0
lea rcx, [rsp + 0x48]
call fcn.1800119b0
lea rdx, [rsp + 0x48]
lea rcx, [0x1800eb760]
call fcn.180013130
movzx eax, al
test eax, eax
jne 0x1800154ac
jmp 0x18001525b
movzx eax, byte [0x1800ea012]
test eax, eax
je 0x1800156c6
movzx eax, byte [0x1800eb86e]
test eax, eax
je 0x180015627
movzx eax, byte [0x1800eb778]
test eax, eax
je 0x180015583
call fcn.180025ff0
mov qword [rsp + 0x198], rax
lea rcx, [0x1800eb880]
call fcn.180012050
mov dword [rsp + 0xd0], eax
movss xmm0, dword [rsp + 0x4c]
addss xmm0, dword [rsp + 0x54]
movss xmm1, dword [rsp + 0x48]
addss xmm1, dword [rsp + 0x50]
movaps xmm2, xmm0
lea rcx, [rsp + 0x188]
call fcn.180011940
movss xmm2, dword [rsp + 0x4c]
movss xmm1, dword [rsp + 0x48]
lea rcx, [rsp + 0x190]
call fcn.180011940
movss xmm0, dword [0x1800b5f30]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0xd0]
lea r8, [rsp + 0x188]
lea rdx, [rsp + 0x190]
mov rcx, qword [rsp + 0x198]
call fcn.1800403a0
jmp 0x180015622
call fcn.180025ff0
mov qword [rsp + 0x1b0], rax
lea rcx, [0x1800eb870]
call fcn.180012050
mov dword [rsp + 0x74], eax
movss xmm0, dword [rsp + 0x4c]
addss xmm0, dword [rsp + 0x54]
movss xmm1, dword [rsp + 0x48]
addss xmm1, dword [rsp + 0x50]
movaps xmm2, xmm0
lea rcx, [rsp + 0x1a0]
call fcn.180011940
movss xmm2, dword [rsp + 0x4c]
movss xmm1, dword [rsp + 0x48]
lea rcx, [rsp + 0x1a8]
call fcn.180011940
movss xmm0, dword [0x1800b5f30]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x74]
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x1a8]
mov rcx, qword [rsp + 0x1b0]
call fcn.1800403a0
jmp 0x1800156c6
call fcn.180025ff0
mov qword [rsp + 0x1c8], rax
lea rcx, [0x1800eb870]
call fcn.180012050
mov dword [rsp + 0x78], eax
movss xmm0, dword [rsp + 0x4c]
addss xmm0, dword [rsp + 0x54]
movss xmm1, dword [rsp + 0x48]
addss xmm1, dword [rsp + 0x50]
movaps xmm2, xmm0
lea rcx, [rsp + 0x1b8]
call fcn.180011940
movss xmm2, dword [rsp + 0x4c]
movss xmm1, dword [rsp + 0x48]
lea rcx, [rsp + 0x1c0]
call fcn.180011940
movss xmm0, dword [0x1800b5f30]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x78]
lea r8, [rsp + 0x1b8]
lea rdx, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1c8]
call fcn.1800403a0
movzx eax, byte [0x1800ea016]
test eax, eax
je 0x18001571c
lea rcx, [0x1800eb760]
call fcn.180016770
lea rax, [rsp + 0x2f0]
lea rcx, [0x1800eb890]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
movss xmm3, dword [0x1800b5f30]
lea r8, [rsp + 0x2f0]
lea rdx, [0x1800eb760]
lea rcx, [0x1800eb680]
call fcn.1800124b0
movzx eax, byte [0x1800ea013]
test eax, eax
je 0x180015814
lea rcx, [rsp + 0xf8]
call fcn.180011980
lea rcx, [rsp + 0xf0]
call fcn.180011980
movss xmm0, dword [rsp + 0x50]
divss xmm0, dword [0x1800b5f7c]
movss dword [rsp + 0x5c], xmm0
movss xmm0, dword [0x1800b5f78]
comiss xmm0, dword [rsp + 0x5c]
jbe 0x180015776
movss xmm0, dword [0x1800b5f78]
movss dword [rsp + 0x5c], xmm0
movss xmm0, dword [rsp + 0x48]
subss xmm0, dword [rsp + 0x5c]
subss xmm0, dword [0x1800b5f18]
movss xmm2, dword [rsp + 0x4c]
movaps xmm1, xmm0
lea rcx, [rsp + 0x1d0]
call fcn.180011940
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0xf8], rax
movss xmm2, dword [rsp + 0x54]
movss xmm1, dword [rsp + 0x5c]
lea rcx, [rsp + 0x1d8]
call fcn.180011940
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0xf0], rax
mov eax, dword [0x1800eb800]
cvtsi2ss xmm0, rax
mov byte [rsp + 0x28], 0
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xf8]
movaps xmm2, xmm0
movss xmm1, dword [0x1800b5f8c]
mov ecx, dword [0x1800eb768]
call fcn.180012810
movzx eax, byte [0x1800ea014]
test eax, eax
je 0x180015982
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x44]
mov rcx, qword [0x1800eb760]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 0x80
lea rdx, [0x1800eb779]
mov rcx, rax
call fcn.180010080
lea rax, [rsp + 0x300]
lea rcx, [0x1800eb8a0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x310]
lea rcx, [rsp + 0x300]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2e8]
mov qword [rsp + 0x1e0], rax
movss xmm0, dword [rsp + 0x4c]
subss xmm0, dword [0x1800b5f80]
movss xmm1, dword [rsp + 0x50]
divss xmm1, dword [0x1800b5f50]
movss xmm2, dword [rsp + 0x48]
addss xmm2, xmm1
movaps xmm1, xmm2
movaps xmm2, xmm0
mov rcx, qword [rsp + 0x1e0]
call fcn.180011940
mov rax, qword [rax]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x208], rax
lea rax, [rsp + 0x390]
mov qword [rsp + 0x1f0], rax
lea rdx, [0x1800eb779]
mov rcx, qword [rsp + 0x1f0]
call fcn.180007610
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0x320]
lea rcx, [rsp + 0x310]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x20], 1
movss xmm3, dword [0x1800b5f80]
lea r8, [rsp + 0x320]
mov rdx, qword [rsp + 0x208]
mov rcx, qword [rsp + 0x210]
call fcn.180016060
movzx eax, byte [0x1800ea015]
test eax, eax
je 0x180015b40
mov qword [rsp + 0xe8], 0
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x6c]
mov rcx, qword [0x1800eb768]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 8
lea rdx, [rsp + 0xe8]
mov rcx, rax
call fcn.180010080
mov rax, qword [rsp + 0xe8]
add rax, 0x12a2
xor r9d, r9d
mov r8d, 4
lea rdx, [rsp + 0x7c]
mov rcx, rax
call fcn.180010080
mov edx, dword [rsp + 0x7c]
lea rcx, [rsp + 0x360]
call fcn.180013270
nop
lea rax, [rsp + 0x330]
lea rcx, [0x1800eb8b0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x340]
lea rcx, [rsp + 0x330]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x218], rax
movss xmm0, dword [rsp + 0x4c]
addss xmm0, dword [rsp + 0x54]
movss xmm1, dword [rsp + 0x50]
divss xmm1, dword [0x1800b5f50]
movss xmm2, dword [rsp + 0x48]
addss xmm2, xmm1
movaps xmm1, xmm2
movaps xmm2, xmm0
mov rcx, qword [rsp + 0x218]
call fcn.180011940
mov rax, qword [rax]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x240], rax
lea rax, [rsp + 0x3b0]
mov qword [rsp + 0x228], rax
lea rdx, [rsp + 0x360]
mov rcx, qword [rsp + 0x228]
call fcn.180007570
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x350]
lea rcx, [rsp + 0x340]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x20], 1
movss xmm3, dword [0x1800b5f80]
lea r8, [rsp + 0x350]
mov rdx, qword [rsp + 0x240]
mov rcx, qword [rsp + 0x248]
call fcn.180016060
nop
lea rcx, [rsp + 0x360]
call fcn.180008690
movzx eax, byte [0x1800ea017]
test eax, eax
je 0x180015c66
movsxd rax, dword [0x1800ea024]
mov rdx, rax
lea rcx, [0x1800eb818]
call fcn.180012020
lea rcx, [rsp + 0x278]
mov rdi, rcx
mov rsi, rax
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0xb0]
call fcn.180011a20
mov rax, qword [0x1800ebb50]
mov qword [rsp + 0x250], rax
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x278]
mov rcx, qword [rsp + 0x250]
call fcn.180016900
test eax, eax
je 0x180015c66
lea rdx, [0x1800eb804]
lea rcx, [0x1800eb724]
call fcn.1800123f0
movss dword [rsp + 0x80], xmm0
cvtss2sd xmm0, dword [rsp + 0x80]
mulsd xmm0, qword [0x1800b5f28]
cvtsd2ss xmm0, xmm0
movss dword [rsp + 0x2a8], xmm0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xc8]
call fcn.180012370
movss dword [rsp + 0x68], xmm0
cvtsi2ss xmm0, dword [rsp + 0x6c]
comiss xmm0, dword [rsp + 0x68]
jbe 0x180015c66
cvttss2si eax, dword [rsp + 0x68]
mov dword [rsp + 0x6c], eax
movzx eax, byte [0x1800eb86d]
test eax, eax
je 0x180015c51
lea rax, [rsp + 0x298]
lea rcx, [rsp + 0x278]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
jmp 0x180015c61
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xc0], rax
mov byte [rsp + 0x40], 1
jmp 0x18001525b
movzx eax, byte [0x1800eb86c]
test eax, eax
je 0x180015d3c
call fcn.180025ff0
mov qword [rsp + 0x260], rax
lea rcx, [0x1800eb8c0]
call fcn.180012050
mov dword [rsp + 0x8c], eax
cvtsi2ss xmm0, dword [0x1800ea020]
movss dword [rsp + 0x90], xmm0
call fcn.180026900
movss xmm0, dword [rax + 8]
divss xmm0, dword [0x1800b5f50]
movss dword [rsp + 0x88], xmm0
call fcn.180026900
movss xmm0, dword [rax + 0xc]
divss xmm0, dword [0x1800b5f50]
movss dword [rsp + 0x84], xmm0
movss xmm2, dword [rsp + 0x84]
movss xmm1, dword [rsp + 0x88]
lea rcx, [rsp + 0x258]
call fcn.180011940
movss xmm0, dword [0x1800b5f30]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x8c]
movss xmm2, dword [rsp + 0x90]
lea rdx, [rsp + 0x258]
mov rcx, qword [rsp + 0x260]
call fcn.18003ce10
movzx eax, byte [0x1800ea017]
test eax, eax
je 0x180016050
mov ecx, dword [0x1800ea01c]
call fcn.18000d8e0
movzx eax, al
test eax, eax
je 0x18001604b
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x180016049
movzx eax, byte [0x1800eb86d]
test eax, eax
je 0x180015f86
call fcn.180013100
lea rcx, [rsp + 0x288]
call fcn.180007af0
lea rcx, [rsp + 0x380]
call fcn.180007af0
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xb8]
call fcn.180011940
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x60]
mov rcx, qword [0x1800eb688]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 0xc
lea rdx, [rsp + 0x288]
mov rcx, rax
call fcn.180010080
mov rax, qword [0x1800ebb50]
mov eax, dword [rax + 0x64]
mov rcx, qword [0x1800eb688]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 0x10
lea rdx, [rsp + 0x100]
mov rcx, rax
call fcn.180010080
cmp qword [rsp + 0x100], 0
jbe 0x180015e5e
cmp qword [rsp + 0x100], 0xffff
jae 0x180015e5e
mov rax, qword [rsp + 0x100]
dec rax
imul rax, rax, 0xc
mov rcx, qword [rsp + 0x108]
add rcx, rax
mov rax, rcx
xor r9d, r9d
mov r8d, 8
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.180010080
lea rax, [rsp + 0x2c0]
lea rcx, [rsp + 0x288]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea r8, [rsp + 0x2c0]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x298]
call fcn.180012070
lea rcx, [rsp + 0xd8]
call fcn.180014cd0
movss dword [rsp + 0x94], xmm0
movss xmm1, dword [rsp + 0xd8]
movss xmm0, dword [rsp + 0xdc]
call fcn.18008f0a0
mulss xmm0, dword [0x1800b5f90]
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x1800b5f68]
cvtss2sd xmm1, dword [rsp + 0xbc]
mulsd xmm1, qword [0x1800b5f58]
subsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rsp + 0x98], xmm0
movss xmm0, dword [rsp + 0xe0]
divss xmm0, dword [rsp + 0x94]
call fcn.180017460
xorps xmm0, xmmword [0x1800b5fa0]
mulss xmm0, dword [0x1800b5f90]
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x1800b5f68]
cvtss2sd xmm1, dword [rsp + 0xb8]
mulsd xmm1, qword [0x1800b5f58]
subsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rsp + 0x9c], xmm0
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x268], rax
movss xmm2, dword [rsp + 0x98]
movss xmm1, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0x268]
call fcn.180011940
mov rcx, qword [rax]
call fcn.180012300
movzx eax, byte [0x1800ea018]
test eax, eax
je 0x180016049
cvtsi2ss xmm0, dword [0x1800ea028]
movss xmm1, dword [0x1800b5f18]
divss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [rsp + 0xc0]
subss xmm0, dword [rsp + 0xc8]
mulss xmm0, dword [rsp + 0x70]
movss dword [rsp + 0xa4], xmm0
movss xmm0, dword [rsp + 0xc4]
subss xmm0, dword [rsp + 0xcc]
mulss xmm0, dword [rsp + 0x70]
movss dword [rsp + 0xa0], xmm0
lea rcx, [rsp + 0xa8]
call fcn.180011ac0
cvttss2si rax, dword [rsp + 0xa0]
cvttss2si rcx, dword [rsp + 0xa4]
lea rdx, [rsp + 0xa8]
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], 4
mov r9d, 3
mov r8d, eax
mov edx, ecx
lea rcx, [0x1800165d0]
call fcn.180017bb0
jmp 0x180016050
call fcn.180012340
add rsp, 0x3d8
pop rdi
pop rsi
ret