Function at 0x180003bb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x180046400]
xor rax, rsp
mov qword [rbp + 0x20], rax
xor r15d, r15d
mov eax, dword [0x180048678]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x1800485ac], xmm0
mov eax, 0x51eb851f
imul dword [0x180048664]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [0x1800485c4], xmm0
mov eax, 0x51eb851f
imul dword [0x180048678]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movd xmm1, edx
cvtdq2ps xmm1, xmm1
movss dword [0x1800485e0], xmm1
addss xmm1, xmm1
movd xmm0, dword [0x1800485c0]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
movss dword [0x1800485d0], xmm1
mulss xmm1, dword [0x18003d0f4]
movss dword [0x1800485d4], xmm1
xorps xmm6, xmm6
mov edi, r15d
mov r13d, 0x203a
lea r12, [0x180047070]
nop word [rax + rax]
movaps xmm7, xmm6
test rdi, rdi
jne 0x180003fb0
mov rbx, qword [0x180048590]
lea r9, [rbp - 0x80]
lea edx, [rdi + 4]
lea r8d, [rdi + 0x40]
lea rcx, [0x1800485a8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x180003cfb
lea edx, [rdi + 4]
lea rcx, [0x1800485a8]
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x180003cfb
lea edx, [rdi + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180003cfb
mov eax, dword [rbx]
mov dword [0x1800485a8], eax
lea r9, [rbp - 0x80]
mov r8d, dword [rbp - 0x80]
mov edx, 4
lea rcx, [0x1800485a8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movss xmm2, dword [0x1800485a8]
cvtps2pd xmm2, xmm2
movq r8, xmm2
lea rdx, str._.2f
lea rcx, [rbp - 8]
call fcn.180003090
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], r15
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180003d50
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x38]
call fcn.1800014d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov rdx, qword [0x180047070]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180003d90
lea rcx, [rsp + 0x40]
call fcn.1800014d0
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180003de4
lea rax, [rcx + 2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], r13w
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x40]
jmp 0x180003dfc
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.180005110
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp - 0x38]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1800052a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180003e6d
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003e67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004ccd
call fcn.18000d27c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180003eaa
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003ea5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cd3
call fcn.18000d27c
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x180003ef8
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003ef3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cd9
call fcn.18000d27c
mov rax, qword [0x1800485b8]
lea r8, [rbp - 0x58]
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
cmovae r8, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
test rax, rax
je 0x180003f64
mov r10, qword [rax]
mov r9, 0xffffffffffffffff
nop word [rax + rax]
inc r9
cmp byte [r8 + r9], 0
jne 0x180003f30
mov dword [rsp + 0x30], 0xff000000
mov dword [rsp + 0x28], 0x400
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x20], rcx
xor edx, edx
mov rcx, rax
call qword [r10 + 0x70]
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x58]
mov ebx, dword [rbp - 0x30]
sub ebx, dword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180003f9d
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003f98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cdf
call fcn.18000d27c
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
maxss xmm6, xmm7
inc rdi
jmp 0x180003ca0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rcx, rdi
shl rcx, 5
sub rax, qword [rcx + r12 + 0x18]
xorps xmm0, xmm0
cmp rax, 0x1388
mov rax, qword [0x1800485b8]
jbe 0x180004024
mov r8, qword [rcx + r12]
movdqu xmmword [rbp - 0x18], xmm0
test rax, rax
je 0x18000401c
mov r10, qword [rax]
mov r9, 0xffffffffffffffff
nop dword [rax]
inc r9
cmp byte [r8 + r9], 0
jne 0x180003ff0
mov dword [rsp + 0x30], 0xff000000
mov dword [rsp + 0x28], 0x400
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x20], rcx
xor edx, edx
mov rcx, rax
call qword [r10 + 0x70]
mov eax, dword [rbp - 0x10]
sub eax, dword [rbp - 0x18]
jmp 0x180004072
mov r8, qword [rcx + r12 + 0x10]
movdqu xmmword [rbp - 0x78], xmm0
test rax, rax
je 0x18000406c
mov r10, qword [rax]
mov r9, 0xffffffffffffffff
nop dword [rax]
inc r9
cmp byte [r8 + r9], 0
jne 0x180004040
mov dword [rsp + 0x30], 0xff000000
mov dword [rsp + 0x28], 0x400
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x20], rcx
xor edx, edx
mov rcx, rax
call qword [r10 + 0x70]
mov eax, dword [rbp - 0x70]
sub eax, dword [rbp - 0x78]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
maxss xmm0, xmm6
movaps xmm6, xmm0
inc rdi
cmp rdi, 0xd
jl 0x180003ca0
movss xmm8, dword [0x1800485e0]
mulss xmm8, dword [0x18003d0c8]
addss xmm8, xmm0
movss xmm3, dword [0x1800485d4]
movaps xmm0, xmm3
movss xmm9, dword [0x18003d078]
mulss xmm0, xmm9
movss xmm1, dword [0x1800485ac]
subss xmm1, xmm0
mov dword [rsp + 0x38], 0xff
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movaps xmm2, xmm8
movss xmm0, dword [0x1800485c4]
call fcn.180007220
movss xmm0, dword [0x1800485d4]
mulss xmm0, xmm9
movss xmm1, dword [0x1800485ac]
subss xmm1, xmm0
movd xmm0, dword [0x1800485c0]
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
subss xmm1, dword [0x1800485e0]
cvttss2si r8d, xmm1
cvttss2si edx, dword [0x1800485c4]
lea rcx, str.F2:_Toggle_Overlay
call fcn.180007080
movss xmm6, dword [0x1800485e0]
movaps xmm3, xmm6
mulss xmm3, dword [0x18003d0c8]
mov edx, dword [0x1800485c0]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
addss xmm3, xmm0
movss xmm1, dword [0x1800485d4]
mulss xmm1, xmm9
movss xmm5, dword [0x1800485ac]
subss xmm5, xmm1
mov ecx, dword [0x180048728]
mov eax, ecx
imul eax, edx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm5, xmm0
lea eax, [rcx + 1]
movd xmm4, eax
cvtdq2ps xmm4, xmm4
mulss xmm4, xmm6
addss xmm5, xmm4
subss xmm5, xmm6
mov dword [rsp + 0x38], 0xff
mov dword [rsp + 0x30], 0xcd
mov dword [rsp + 0x28], 0xac
mov dword [rsp + 0x20], 0x7d
movaps xmm2, xmm8
movaps xmm1, xmm5
movss xmm0, dword [0x1800485c4]
call fcn.180007220
mov ecx, r15d
mov rsi, r15
nop dword [rax]
lea r14d, [rcx + 1]
movss xmm0, dword [0x1800485d4]
mulss xmm0, xmm9
movss xmm6, dword [0x1800485ac]
subss xmm6, xmm0
mov eax, ecx
imul eax, dword [0x1800485c0]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm6, xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
movss xmm2, dword [0x1800485e0]
mulss xmm1, xmm2
addss xmm6, xmm1
mov rbx, rsi
shl rbx, 5
mov rdi, qword [rbx + r12]
test rdi, rdi
jne 0x180004256
cvttss2si r8d, xmm6
addss xmm2, dword [0x1800485c4]
cvttss2si edx, xmm2
lea rcx, str._NULL_STRING_
jmp 0x180004c6b
test ecx, ecx
jne 0x18000454e
lea rcx, str.halo3.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x1800487d0], rax
test rax, rax
je 0x180004303
add rax, 0xb2793
mov qword [0x1800487c8], rax
cmp byte [rax], 0xe9
jne 0x180004303
cmp byte [0x1800486dc], 0
je 0x180004303
mov rdi, qword [0x180048590]
lea r9, [rbp - 0x80]
mov edx, 4
lea r8d, [rdx + 0x3c]
lea rcx, [0x1800485a8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1800042e9
mov edx, 4
lea rcx, [0x1800485a8]
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x1800042e9
lea edx, [rax + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800042e9
mov eax, dword [rdi]
mov dword [0x1800485a8], eax
lea r9, [rbp - 0x80]
mov r8d, dword [rbp - 0x80]
mov edx, 4
lea rcx, [0x1800485a8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movss xmm2, dword [0x1800485a8]
cvtps2pd xmm2, xmm2
movq r8, xmm2
lea rdx, str._.2f
lea rcx, [rbp - 8]
call fcn.180003090
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r15
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180004340
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x78]
call fcn.1800014d0
nop
mov rdx, qword [rbx + r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180004375
lea rcx, [rsp + 0x40]
call fcn.1800014d0
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x1800043c9
lea rax, [rcx + 2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], r13w
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x40]
jmp 0x1800043e1
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.180005110
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1800052a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180004452
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000444c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004ce5
call fcn.18000d27c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18000448f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000448a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004ceb
call fcn.18000d27c
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1800044dd
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800044d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cf1
call fcn.18000d27c
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rcx, qword [rbp - 0x58]
cvttss2si r8d, xmm6
movss xmm0, dword [0x1800485e0]
addss xmm0, dword [0x1800485c4]
cvttss2si edx, xmm0
call fcn.180007080
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x180004c70
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004544
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cf7
call fcn.18000d27c
jmp 0x180004c70
cmp ecx, 1
jne 0x18000479e
call fcn.1800057c0
mov r8, rax
lea rdx, str._lld
lea rcx, [rbp - 8]
call fcn.180003090
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r15
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180004590
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x78]
call fcn.1800014d0
nop
mov rdx, qword [rbx + r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1800045c5
lea rcx, [rsp + 0x40]
call fcn.1800014d0
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180004619
lea rax, [rcx + 2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], r13w
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x40]
jmp 0x180004631
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.180005110
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1800052a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800046a2
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000469c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cfd
call fcn.18000d27c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800046df
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800046da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d03
call fcn.18000d27c
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x18000472d
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004728
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d09
call fcn.18000d27c
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rcx, qword [rbp - 0x58]
cvttss2si r8d, xmm6
movss xmm0, dword [0x1800485e0]
addss xmm0, dword [0x1800485c4]
cvttss2si edx, xmm0
call fcn.180007080
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x180004c70
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004794
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d0f
call fcn.18000d27c
jmp 0x180004c70
cmp ecx, 0xc
jne 0x1800049ee
mov r8, qword [0x1800485e8]
lea rdx, str._lld
lea rcx, [rbp - 8]
call fcn.180003090
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r15
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800047e0
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x78]
call fcn.1800014d0
nop
mov rdx, qword [rbx + r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180004815
lea rcx, [rsp + 0x40]
call fcn.1800014d0
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180004869
lea rax, [rcx + 2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], r13w
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x40]
jmp 0x180004881
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.180005110
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1800052a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800048f2
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800048ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d15
call fcn.18000d27c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18000492f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000492a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d1b
call fcn.18000d27c
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x18000497d
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d21
call fcn.18000d27c
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rcx, qword [rbp - 0x58]
cvttss2si r8d, xmm6
movss xmm0, dword [0x1800485e0]
addss xmm0, dword [0x1800485c4]
cvttss2si edx, xmm0
call fcn.180007080
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x180004c70
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800049e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d27
call fcn.18000d27c
jmp 0x180004c70
cmp ecx, 0xb
jne 0x180004c37
mov r8, qword [0x180048638]
lea rdx, str._lld
lea rcx, [rbp - 8]
call fcn.180003090
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r15
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180004a30
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x78]
call fcn.1800014d0
nop
mov rdx, qword [rbx + r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180004a65
lea rcx, [rsp + 0x40]
call fcn.1800014d0
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180004ab9
lea rax, [rcx + 2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], r13w
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x40]
jmp 0x180004ad1
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.180005110
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1800052a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180004b42
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004b3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d2d
call fcn.18000d27c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180004b7f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004b7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d33
call fcn.18000d27c
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x180004bcd
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004bc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cc1
call fcn.18000d27c
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rcx, qword [rbp - 0x58]
cvttss2si r8d, xmm6
movss xmm0, dword [0x1800485e0]
addss xmm0, dword [0x1800485c4]
cvttss2si edx, xmm0
call fcn.180007080
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x180004c70
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cc7
call fcn.18000d27c
jmp 0x180004c70
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cvttss2si r8d, xmm6
sub rax, qword [rbx + r12 + 0x18]
movss xmm0, dword [0x1800485e0]
addss xmm0, dword [0x1800485c4]
cvttss2si edx, xmm0
cmp rax, 0x1388
mov rcx, rdi
ja 0x180004c6b
mov rcx, qword [rbx + r12 + 0x10]
call fcn.180007080
mov ecx, r14d
inc rsi
cmp r14d, 0xd
jl 0x1800041e0
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.18000d220
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
nop
call fcn.180017c14
int3