Function at 0x18004bd80
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x178]
sub rsp, 0x240
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
call fcn.1800483d0
mov edi, dword [0x18006b384]
movss xmm11, dword [0x180061110]
mov rax, qword [0x18006b0d8]
cmp byte [rax + 2], 0
je 0x18004becb
movups xmm6, xmmword [rax + 0x4c]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
jne 0x18004be23
xor ebx, ebx
jmp 0x18004be26
mov rbx, qword [rax]
movdqa xmmword [rbp - 0x70], xmm6
movss xmm6, dword [rbx + 0x1974]
mov r12d, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rdi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x18006bcc8], eax
jle 0x18004be88
lea rcx, [0x18006bcc8]
call fcn.1800555f8
cmp dword [0x18006bcc8], 0xffffffff
jne 0x18004be88
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x21ad40
mov qword [0x18006bcb8], rax
lea rcx, [0x18006bcc8]
call fcn.18005558c
mov rcx, rbx
call qword [0x18006bcb8]
movaps xmm1, xmm0
addss xmm1, xmm6
movsd xmm0, qword [rbx + 0x220]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [rbx + 0x228]
mov dword [rsp + 0x58], eax
lea r9, [rbp - 0x70]
movaps xmm2, xmm11
lea rcx, [rsp + 0x50]
call fcn.180048be0
mov rax, qword [0x18006b0d8]
jmp 0x18004bed1
mov r12d, 4
cmp byte [rax + 0xa], 0
je 0x18004bee3
call fcn.18004eba0
mov rax, qword [0x18006b0d8]
cmp byte [rax + 3], 0
jne 0x18004beef
cmp byte [rax + 1], 0
je 0x18004bf01
cmp dword [rax + 0x18], 1
jne 0x18004bf01
lea rcx, [0x18006bac0]
call fcn.18004dcf0
mov rax, qword gs:[0x58]
mov r13, qword [rax + rdi*8]
mov eax, dword [r12 + r13]
cmp dword [0x18006bc98], eax
jle 0x18004bf47
lea rcx, [0x18006bc98]
call fcn.1800555f8
cmp dword [0x18006bc98], 0xffffffff
jne 0x18004bf47
lea rcx, [0x180058450]
call fcn.180055424
lea rcx, [0x18006bc98]
call fcn.18005558c
mov rax, qword [0x18006bbc8]
cmp rax, qword [0x18006bbd0]
je 0x18004bf5e
mov qword [0x18006bbd0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rax + 0x2301550]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006bbd0]
test edi, edi
je 0x18004bfd3
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x180], rax
cmp rdx, qword [0x18006bbd8]
je 0x18004bfb3
mov qword [rdx], rax
mov rdx, qword [0x18006bbd0]
add rdx, 8
mov qword [0x18006bbd0], rdx
jmp 0x18004bfcd
lea r8, [rbp + 0x180]
lea rcx, [0x18006bbc8]
call fcn.180011fa0
mov rdx, qword [0x18006bbd0]
inc ebx
cmp ebx, edi
jb 0x18004bf81
xor esi, esi
mov r8, qword [0x18006bbc8]
sub rdx, r8
sar rdx, 3
xorps xmm15, xmm15
test rdx, rdx
je 0x18004c3f6
xor ebx, ebx
movss xmm12, dword [0x1800610cc]
movss xmm14, dword [0x180061180]
movss xmm10, dword [0x1800611b0]
movss xmm8, dword [0x180061164]
movss xmm9, dword [0x18006115c]
movss xmm13, dword [0x180061194]
nop dword [rax + rax]
mov rcx, qword [rbx + r8]
call fcn.180054790
test al, al
je 0x18004c3cf
mov r8, qword [0x18006bbc8]
mov rdi, qword [rbx + r8]
cmp byte [rdi + 0x348], 0
je 0x18004c3d6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
je 0x18004c06c
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004c07d
cmp dword [rdi + 0x3c], 0xc8
jmp 0x18004c08d
cmp ecx, 0xc8
jne 0x18004c138
cmp dword [rdi + 0x3c], 0x64
jne 0x18004c138
mov rcx, qword [0x18006b0d8]
cmp byte [rcx + 8], 0
je 0x18004c138
mov rax, qword [0x18006bbc8]
mov rdi, qword [rbx + rax]
movups xmm0, xmmword [rcx + 0x5c]
movaps xmmword [rbp - 0x70], xmm0
movss xmm6, dword [rdi + 0x1974]
mov eax, dword [r12 + r13]
cmp dword [0x18006bcc8], eax
jle 0x18004c101
lea rcx, [0x18006bcc8]
call fcn.1800555f8
cmp dword [0x18006bcc8], 0xffffffff
jne 0x18004c101
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x21ad40
mov qword [0x18006bcb8], rax
lea rcx, [0x18006bcc8]
call fcn.18005558c
mov rcx, rdi
call qword [0x18006bcb8]
movaps xmm1, xmm0
addss xmm1, xmm6
movsd xmm0, qword [rdi + 0x220]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [rdi + 0x228]
mov dword [rbp - 0x78], eax
lea r9, [rbp - 0x70]
movaps xmm2, xmm11
lea rcx, [rbp - 0x80]
call fcn.180048be0
mov rax, qword [0x18006bbc8]
lea rdx, [rsp + 0x50]
mov rcx, qword [rbx + rax]
call fcn.180054820
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [rsp + 0x54]
addss xmm0, xmm12
movss dword [rsp + 0x54], xmm0
mov rax, qword [0x18006b0d8]
cmp byte [rax + 4], 0
je 0x18004c3cf
mov rax, qword [0x18006bbc8]
mov rdi, qword [rbx + rax]
movss xmm3, dword [rdi + 0x11e0]
cvtps2pd xmm3, xmm3
movq r9, xmm3
lea r8, str.H:_.0f
mov edx, 0xc8
lea rcx, [rbp - 0x30]
call fcn.18004a470
movaps xmm0, xmmword [0x180061410]
movups xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.18001d660
mov r9d, eax
movss xmm1, dword [rsp + 0x54]
subss xmm1, xmm14
movss xmm0, dword [rsp + 0x50]
subss xmm0, xmm10
unpcklps xmm0, xmm1
movsd qword [rbp + 0x180], xmm0
mov rcx, qword [0x18006b980]
mov rdx, qword [0x18006b978]
test eax, 0xff000000
je 0x18004c27a
lea r8, [rbp - 0x30]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18004c210
lea r8, [rbp - 0x30]
add r8, rax
lea rax, [rbp - 0x30]
cmp rax, r8
je 0x18004c27a
test rcx, rcx
jne 0x18004c237
mov rax, qword [rdx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], r8
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x180]
movaps xmm2, xmm8
call fcn.1800417a0
movss xmm3, dword [rdi + 0x378]
cvtps2pd xmm3, xmm3
movq r9, xmm3
lea r8, str.M:_.0f
mov edx, 0xc8
lea rcx, [rbp - 0x30]
call fcn.18004a470
movaps xmm0, xmmword [0x180061410]
movups xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.18001d660
mov r9d, eax
movss xmm7, dword [rsp + 0x54]
movaps xmm1, xmm7
subss xmm1, xmm9
movss xmm6, dword [rsp + 0x50]
movaps xmm0, xmm6
subss xmm0, xmm10
unpcklps xmm0, xmm1
movsd qword [rbp + 0x180], xmm0
mov rcx, qword [0x18006b980]
mov rdx, qword [0x18006b978]
test eax, 0xff000000
je 0x18004c377
lea r8, [rbp - 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r8 + rax], 0
jne 0x18004c301
lea r8, [rbp - 0x30]
add r8, rax
lea rax, [rbp - 0x30]
cmp rax, r8
je 0x18004c377
test rcx, rcx
jne 0x18004c328
mov rax, qword [rdx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], r8
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x180]
movaps xmm2, xmm8
call fcn.1800417a0
movss xmm7, dword [rsp + 0x54]
movss xmm6, dword [rsp + 0x50]
mov rax, qword [0x18006b0d8]
cmp byte [rax + 1], 0
jne 0x18004c3cf
cmp byte [rax + 3], 0
jne 0x18004c3cf
movaps xmm0, xmmword [0x180061400]
movups xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.18001d660
addss xmm7, xmm11
subss xmm6, xmm13
lea rcx, [rdi + 0x43f0]
cmp dword [rcx + 0x18], 0x10
jbe 0x18004c3b8
mov rcx, qword [rcx]
mov r9d, eax
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movq r8, xmm0
movaps xmm1, xmm9
call fcn.180048dd0
mov r8, qword [0x18006bbc8]
inc esi
add rbx, 8
mov rcx, qword [0x18006bbd0]
sub rcx, r8
sar rcx, 3
movsxd rax, esi
cmp rax, rcx
jb 0x18004c030
mov eax, dword [r12 + r13]
cmp dword [0x18006bc9c], eax
jle 0x18004c42f
lea rcx, [0x18006bc9c]
call fcn.1800555f8
cmp dword [0x18006bc9c], 0xffffffff
jne 0x18004c42f
lea rcx, [0x1800583e0]
call fcn.180055424
lea rcx, [0x18006bc9c]
call fcn.18005558c
mov rax, qword [0x18006bbb0]
cmp rax, qword [0x18006bbb8]
je 0x18004c446
mov qword [0x18006bbb8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rax + 0x230c198]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006bbb8]
test edi, edi
je 0x18004c4c2
nop dword [rax]
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x180], rax
cmp rdx, qword [0x18006bbc0]
je 0x18004c4a2
mov qword [rdx], rax
mov rdx, qword [0x18006bbb8]
add rdx, 8
mov qword [0x18006bbb8], rdx
jmp 0x18004c4bc
lea r8, [rbp + 0x180]
lea rcx, [0x18006bbb0]
call fcn.180011fa0
mov rdx, qword [0x18006bbb8]
inc ebx
cmp ebx, edi
jb 0x18004c470
xor r14d, r14d
mov r8, qword [0x18006bbb0]
sub rdx, r8
sar rdx, 3
test rdx, rdx
je 0x18004c715
xor esi, esi
movsd xmm7, qword [0x180061118]
movss xmm8, dword [0x1800611e0]
movss xmm9, dword [0x1800611d4]
movss xmm10, dword [0x1800611d0]
mov rbx, qword [rsi + r8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
je 0x18004c518
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004c529
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004c539
cmp ecx, 0xc8
jne 0x18004c6ed
cmp dword [rbx + 0x3c], 0x64
jne 0x18004c6ed
mov rax, qword [0x18006b0d8]
cmp byte [rax + 9], 0
je 0x18004c6ed
mov r8, qword [0x18006bbb0]
mov rbx, qword [rsi + r8]
movss xmm0, dword [rbx + 0x11e0]
comiss xmm0, xmm15
jbe 0x18004c6f4
movsd xmm0, qword [rbx + 0x220]
movsd qword [rbp - 0x50], xmm0
mov r15d, dword [rbx + 0x228]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
jne 0x18004c595
xor edi, edi
jmp 0x18004c598
mov rdi, qword [rax]
movsd xmm0, qword [rdi + 0x220]
movsd qword [rbp - 0x70], xmm0
subss xmm0, dword [rbp - 0x50]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm2, dword [rdi + 0x228]
movd xmm1, r15d
subss xmm2, xmm1
cvtps2pd xmm0, xmm2
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x18004c5ee
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x18004c5f6
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm8, xmm0
jb 0x18004c6ed
movsd xmm0, qword [rbx + 0x220]
movsd qword [rsp + 0x50], xmm0
mov r15d, dword [rbx + 0x228]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
jne 0x18004c62d
xor edi, edi
jmp 0x18004c630
mov rdi, qword [rax]
movsd xmm0, qword [rdi + 0x220]
movsd qword [rbp - 0x70], xmm0
subss xmm0, dword [rsp + 0x50]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm2, dword [rdi + 0x228]
movd xmm1, r15d
subss xmm2, xmm1
cvtps2pd xmm0, xmm2
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x18004c687
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x18004c68f
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm9, xmm0
jb 0x18004c6aa
movaps xmm0, xmmword [0x1800613e0]
movups xmmword [rbp - 0x40], xmm0
lea rax, [rbp - 0x40]
jmp 0x18004c6bb
movaps xmm0, xmmword [0x1800613f0]
movups xmmword [rsp + 0x60], xmm0
lea rax, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rbx + 0x220]
movsd qword [rbp - 0x80], xmm1
mov eax, dword [rbx + 0x228]
mov dword [rbp - 0x78], eax
lea r9, [rbp - 0x70]
movaps xmm2, xmm11
movaps xmm1, xmm10
lea rcx, [rbp - 0x80]
call fcn.180048be0
mov r8, qword [0x18006bbb0]
inc r14d
add rsi, 8
mov rcx, qword [0x18006bbb8]
sub rcx, r8
sar rcx, 3
movsxd rax, r14d
cmp rax, rcx
jb 0x18004c501
mov eax, dword [r12 + r13]
cmp dword [0x18006bca0], eax
jle 0x18004c74e
lea rcx, [0x18006bca0]
call fcn.1800555f8
cmp dword [0x18006bca0], 0xffffffff
jne 0x18004c74e
lea rcx, [0x180058370]
call fcn.180055424
lea rcx, [0x18006bca0]
call fcn.18005558c
mov rax, qword [0x18006bb98]
cmp rax, qword [0x18006bba0]
je 0x18004c765
mov qword [0x18006bba0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rax + 0x2304928]
mov rsi, qword [rcx + 8]
mov edi, dword [rcx + 0x10]
xor ebx, ebx
mov rdx, qword [0x18006bba0]
test edi, edi
je 0x18004c7e2
nop dword [rax + rax]
lea eax, [rbx*8]
mov rax, qword [rax + rsi]
mov qword [rbp + 0x180], rax
cmp rdx, qword [0x18006bba8]
je 0x18004c7c2
mov qword [rdx], rax
mov rdx, qword [0x18006bba0]
add rdx, 8
mov qword [0x18006bba0], rdx
jmp 0x18004c7dc
lea r8, [rbp + 0x180]
lea rcx, [0x18006bb98]
call fcn.180011fa0
mov rdx, qword [0x18006bba0]
inc ebx
cmp ebx, edi
jb 0x18004c790
xor r13d, r13d
sub rdx, qword [0x18006bb98]
sar rdx, 3
test rdx, rdx
je 0x18004d1e2
xor r12d, r12d
movabs r15, 0x2aaaaaaaaaaaaaab
movss xmm7, dword [0x180061158]
movss xmm8, dword [0x18006118c]
movss xmm9, dword [0x18006117c]
movss xmm10, dword [0x180061174]
movss xmm11, dword [0x180061184]
movss xmm12, dword [0x18006116c]
movabs r14, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
je 0x18004c86d
mov rax, qword [rax]
mov ecx, dword [rax + 0x3c]
cmp ecx, 0x64
jne 0x18004c87e
cmp dword [rbx + 0x3c], 0xc8
jmp 0x18004c88e
cmp ecx, 0xc8
jne 0x18004ca81
cmp dword [rbx + 0x3c], 0x64
jne 0x18004ca81
mov rax, qword [0x18006b0d8]
cmp byte [rax + 0xa], 0
je 0x18004c9e7
mov rax, qword [0x18006bb98]
mov rdi, qword [rax + r12*8]
lea rsi, [rdi + 0x60]
mov r14d, dword [rsi + 0x18]
cmp r14d, 0x10
jbe 0x18004c8c3
mov rbx, qword [rsi]
jmp 0x18004c8c6
mov rbx, rsi
lea rdx, str.Jack_In_The_Box
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18004c916
lea rdx, str.JammerDevice
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18004c916
lea rdx, str.Noxious_Trap
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18004c916
lea rdx, str.SightWard
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18004c9d3
xor r8d, r8d
mov rcx, qword [0x18006bac8]
mov r9, qword [0x18006bac0]
sub rcx, r9
mov rax, r15
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004c95b
xor ecx, ecx
cmp rdi, qword [r9 + rcx]
je 0x18004c9d3
inc r8d
add rcx, 0x18
movsxd rax, r8d
cmp rax, rdx
jb 0x18004c942
movss xmm0, dword [rdi + 0x11e0]
ucomiss xmm0, xmm15
jp 0x18004c96b
je 0x18004c9d3
mov dword [rsp + 0x74], 0
mov qword [rsp + 0x60], rdi
cmp r14d, 0x10
jbe 0x18004c981
mov rsi, qword [rsi]
mov qword [rsp + 0x68], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
movss xmm0, dword [rax + 0x230d0d8]
movss dword [rsp + 0x70], xmm0
mov rdx, qword [0x18006bac8]
cmp rdx, qword [0x18006bad0]
je 0x18004c9c9
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rdx], xmm0
movsd xmm1, qword [rsp + 0x70]
movsd qword [rdx + 0x10], xmm1
add qword [0x18006bac8], 0x18
jmp 0x18004c9d3
lea r8, [rsp + 0x60]
call fcn.1800517b0
movabs rsi, 0xcbf29ce484222325
movabs r14, 0x100000001b3
mov rax, qword [0x18006b0d8]
cmp byte [rax + 5], 0
je 0x18004ca81
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
je 0x18004ca16
mov rax, qword [rax]
movss xmm6, dword [rax + 0x1888]
addss xmm6, dword [rax + 0x192c]
mov rcx, rbx
call fcn.180054790
test al, al
je 0x18004ca81
comiss xmm6, dword [rbx + 0x11e0]
jb 0x18004ca81
movss xmm0, dword [rbx + 0x192c]
comiss xmm0, xmm7
jbe 0x18004ca81
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.180054820
movss xmm1, dword [rbp - 0x7c]
subss xmm1, xmm8
movss xmm0, dword [rbp - 0x80]
subss xmm0, xmm9
mov rax, qword [0x18006b9a0]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm10
movaps xmm2, xmm11
call fcn.180048ac0
mov rax, qword [0x18006b0d8]
cmp byte [rax + 0x14], 0
je 0x18004cba4
mov rax, qword [0x18006bb98]
mov r9, qword [rax + r12*8]
mov rdx, qword [r9 + 0x4170]
mov r8, rsi
nop word [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor r8, rcx
imul r8, r14
test cl, cl
jne 0x18004cab0
mov rdx, qword [0x18006bb30]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x18004caef
cmp qword [rax + 0x20], r8
jge 0x18004cae3
mov rax, qword [rax + 0x10]
jmp 0x18004cae9
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18004cad7
cmp byte [rcx + 0x19], 0
jne 0x18004cba4
cmp r8, qword [rcx + 0x20]
jl 0x18004cba4
cmp rcx, rdx
je 0x18004cba4
mov rcx, qword [0x18006bb00]
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x18004cb38
nop dword [rax]
cmp qword [rax + 0x20], r9
jae 0x18004cb2c
mov rax, qword [rax + 0x10]
jmp 0x18004cb32
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18004cb20
cmp byte [rcx + 0x19], 0
jne 0x18004cb48
cmp r9, qword [rcx + 0x20]
jb 0x18004cb48
mov al, 1
jmp 0x18004cb4a
xor al, al
test al, al
jne 0x18004cba4
mov qword [rsp + 0x60], r8
movsd xmm1, qword [r9 + 0x220]
mov eax, dword [r9 + 0x228]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x74], 0
mov qword [rbp - 0x70], r9
movups xmm0, xmmword [rsp + 0x60]
unpcklpd xmm0, xmm1
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rbp - 0x68], xmm0
movsd xmm0, qword [rsp + 0x70]
movsd qword [rbp - 0x58], xmm0
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x40]
lea rcx, [0x18006bb00]
call fcn.18004f4e0
mov rax, qword [0x18006b0d8]
cmp byte [rax + 0x13], 0
je 0x18004d1be
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x23214a0
jne 0x18004cfd7
xor r15d, r15d
xor esi, esi
lea rdi, [rax + 0x4170]
xor r9d, r9d
lea r8, [rbp + 0x180]
xor edx, edx
lea rcx, [0x18006bbe0]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x18004d247
cmp dword [rbp + 0x180], 0
je 0x18004cc9f
test r15, r15
je 0x18004cc85
mov rax, qword [0x18006b0d8]
cmp dword [rax + 0x28], 0
jbe 0x18004cc85
mov r9, qword [rdi]
movabs r8, 0xcbf29ce484222325
nop dword [rax]
nop word [rax + rax]
movsx rdx, byte [r9]
lea r9, [r9 + 1]
xor r8, rdx
imul r8, r14
test dl, dl
jne 0x18004cc30
mov qword [rbp + 0x188], r8
lea rdx, [rbp + 0x188]
mov rcx, qword [0x18006b0e0]
call fcn.180015090
mov rcx, qword [0x18006b0d8]
mov edx, dword [rcx + 0x28]
dec edx
lea r9, [rdx + rdx*2]
add r9, r9
mov rdx, qword [rax]
mov r8d, dword [rdx + r9*8 + 0x28]
mov rdx, qword [rdx + r9*8]
mov rcx, r15
call fcn.180054da0
nop
xor r8d, r8d
xor edx, edx
lea rcx, [0x18006bbe0]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x18004d24e
mov rcx, qword [r15 + 0x4160]
sub rcx, qword [r15 + 0x4158]
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004cd49
mov r8, qword [rdi]
movabs rdx, 0xcbf29ce484222325
nop word [rax + rax]
movsx rcx, byte [r8]
lea r8, [r8 + 1]
xor rdx, rcx
imul rdx, r14
test cl, cl
jne 0x18004cce0
movabs rax, 0xf984545cfa78101f
cmp rdx, rax
je 0x18004d1b4
movabs rax, 0x2d0a42b1a4f18a79
cmp rdx, rax
je 0x18004d1b4
mov rax, qword [r15 + 0x4158]
mov edx, dword [r15 + 0x4190]
cmp dword [rax + 0x20], edx
je 0x18004cd49
mov dword [rax + 0x20], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x198d90
mov dl, 1
lea rcx, [r15 + 0x4158]
call rax
nop
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
mov r8, qword [rbx + 0x4170]
movabs rdi, 0xcbf29ce484222325
nop word [rax + rax]
movsx rdx, byte [r8]
lea r8, [r8 + 1]
xor rdi, rdx
imul rdi, r14
test dl, dl
jne 0x18004cd70
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x21d630
mov rcx, rbx
call rax
mov r14, rax
test rax, rax
je 0x18004d117
mov rcx, qword [0x18006b0d8]
cmp byte [rcx + 0x15], 0
je 0x18004cef3
movabs rax, 0xdccb83f12e64ce0
cmp rdi, rax
je 0x18004cdd5
movabs rax, 0x80dccc539a84ddb5
cmp rdi, rax
jne 0x18004cef3
mov rax, qword [0x18006bb98]
mov rax, qword [rax + r12*8]
movsd xmm0, qword [rax + 0x220]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [rax + 0x228]
mov dword [rsp + 0x58], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rbx, [rax + 0xf3a2c0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rax + 0x23048e8]
add rcx, 0x270
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x50]
call rbx
movaps xmm0, xmmword [0x180061420]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.18001d660
mov r10d, eax
movss xmm0, dword [rbp - 0x4c]
movss xmm1, dword [rbp - 0x50]
unpcklps xmm1, xmm0
movsd qword [rbp + 0x190], xmm1
lea r9, str.
movabs rax, 0xdccb83f12e64ce0
cmp rdi, rax
lea rax, [0x180060fc0]
cmove r9, rax
mov rcx, qword [0x18006b980]
mov rdx, qword [0x18006b978]
test r10d, 0xff000000
je 0x18004cef3
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r9 + r8], 0
jne 0x18004ce93
add r8, r9
cmp r9, r8
je 0x18004cef3
test rcx, rcx
jne 0x18004ceb2
mov rax, qword [rdx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r9
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r10d
lea r9, [rbp + 0x190]
movaps xmm2, xmm12
call fcn.1800417a0
movabs rax, 0x37d1bfa7d195ebf9
cmp rdi, rax
je 0x18004d008
movabs rax, 0x92fe97d6caa88c20
cmp rdi, rax
je 0x18004d008
movabs rax, 0xa854d43ddb55ddcc
cmp rdi, rax
je 0x18004d008
movabs rax, 0xb8f3ad4931029355
cmp rdi, rax
je 0x18004d008
movabs rax, 0xaedcd71796ade290
cmp rdi, rax
movabs rax, 0xdb76082138fdee7f
je 0x18004d012
cmp rdi, rax
je 0x18004d012
movabs rax, 0xf17870527758213f
cmp rdi, rax
je 0x18004d1b4
movabs rax, 0x8499db0ed7bb81cf
cmp rdi, rax
je 0x18004d1b4
mov edx, dword [r14 + 0x4190]
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x18004d1b4
cmp dword [rbx + 0x4190], edx
je 0x18004d1b4
mov dword [rbx + 0x4190], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x198d90
mov dl, 1
lea rcx, [rbx + 0x4158]
call rax
nop
jmp 0x18004d1b4
mov r15, qword [rax]
mov rax, r15
test r15, r15
je 0x18004cbcc
lea rdi, [r15 + 0x4170]
mov rdx, qword [rdi]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor rsi, rcx
imul rsi, r14
test cl, cl
jne 0x18004cff0
jmp 0x18004cbd5
movabs rax, 0xdb76082138fdee7f
test r15, r15
je 0x18004d020
cmp r14, r15
jne 0x18004d1b4
cmp rdi, rax
jne 0x18004d0c8
movabs rax, 0x222b948fbf568318
cmp rsi, rax
jne 0x18004d087
mov r8d, dword [r14 + 0x4190]
cmp r8d, 0xffffffff
je 0x18004d1b4
mov rax, qword [0x18006bb98]
mov rcx, qword [rax + r12*8]
add rcx, 0x4158
cmp dword [rcx + 0x38], r8d
je 0x18004d1b4
mov dword [rcx + 0x38], r8d
mov rax, qword [rcx]
cmp rax, qword [rcx + 8]
je 0x18004d076
mov qword [rcx + 8], rax
lea rdx, str.Yone
call fcn.180048e80
jmp 0x18004d1b4
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
cmp dword [rbx + 0x4190], 0
je 0x18004d1b4
mov dword [rbx + 0x4190], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x198d90
mov dl, 1
lea rcx, [rbx + 0x4158]
call rax
nop
jmp 0x18004d1b4
mov rax, qword [0x18006b0d8]
mov edx, dword [rax + 0x30]
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x18004d1b4
cmp dword [rbx + 0x4190], edx
je 0x18004d1b4
mov dword [rbx + 0x4190], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x198d90
mov dl, 1
lea rcx, [rbx + 0x4158]
call rax
nop
jmp 0x18004d1b4
movabs rax, 0x1ecf7680ae6d72bd
cmp rdi, rax
jne 0x18004d137
movabs rax, 0xfca7b000ade2abcb
cmp rsi, rax
je 0x18004d175
jmp 0x18004d1b4
movabs rax, 0xfcb981acde90c192
cmp rdi, rax
jne 0x18004d157
movabs rax, 0x6972baf895e90386
cmp rsi, rax
je 0x18004d175
jmp 0x18004d1b4
movabs rax, 0xfc61c19e80fc9d68
cmp rdi, rax
jne 0x18004d1b4
movabs rax, 0xf01bf70c1ff22b66
cmp rsi, rax
jne 0x18004d1b4
mov edx, dword [r15 + 0x4190]
mov rax, qword [0x18006bb98]
mov rbx, qword [rax + r12*8]
cmp edx, 0xffffffff
je 0x18004d1b4
cmp dword [rbx + 0x4190], edx
je 0x18004d1b4
mov dword [rbx + 0x4190], edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x198d90
mov dl, 1
lea rcx, [rbx + 0x4158]
call rax
nop
movabs r15, 0x2aaaaaaaaaaaaaab
inc r13d
inc r12
mov rcx, qword [0x18006bba0]
sub rcx, qword [0x18006bb98]
sar rcx, 3
movsxd rax, r13d
cmp rax, rcx
jb 0x18004c83b
mov rax, qword [0x18006b0d8]
cmp byte [rax + 0x14], 0
je 0x18004d1f4
call fcn.18004d260
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
call fcn.180055080
int3