Function at 0x180049490
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x18012f010]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov rsi, rcx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov rdx, qword [rsi + 0x120]
mov r13, qword [rdx]
mov qword [rsp + 0x70], r13
mov r9, qword [rdx + 8]
mov qword [rsp + 0x68], r9
mov rax, qword [rdx + 0x10]
mov qword [rbp - 0x60], rax
mov rax, qword [rdx + 0x18]
mov qword [rbp - 0x58], rax
mov rax, qword [rdx + 0x20]
mov qword [rbp - 0x70], rax
mov rax, qword [rdx + 0x28]
mov qword [rbp - 0x78], rax
xor r15d, r15d
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
xorps xmm7, xmm7
xorps xmm6, xmm6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rax
mov qword [rbp - 8], r15
mov qword [rbp], r15
mov dword [rbp + 8], r15d
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], r15
mov dword [rbp - 0x18], r15d
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x78], r15
mov rax, qword [rsi + 0x1c0]
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x40], r15
mov dword [rbp - 0x10], r15d
mov dword [rbp - 0x38], r15d
mov dword [rbp - 0xc], r15d
mov dword [rsp + 0x44], r15d
mov eax, dword [rsi + 0x11c]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsi + 0x118]
mov dword [rsp + 0x58], eax
mov byte [rsp + 0x41], 1
mov byte [rbp - 0x80], r15b
xor al, al
mov byte [rsp + 0x40], al
mov qword [rsp + 0x50], r15
mov dword [rsp + 0x60], r15d
mov edi, r15d
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], al
lea r12d, [r15 + 0x10]
test r13, r13
je 0x1800498a5
mov rax, qword [r13]
lea rdx, [rbp - 0x50]
mov rcx, r13
call qword [rax + 0x40]
test eax, eax
js 0x18004a55b
lea ecx, [r15 + 0x40]
call fcn.18009354c
mov rbx, rax
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov r14d, dword [rsi + 0x150]
mov rcx, qword [rbp - 0x50]
mov r15d, dword [rcx + 4]
mov r13d, dword [rsi + 0x168]
mov ecx, dword [rsi + 0x184]
cmp ecx, 2
jne 0x180049626
mov r8d, r12d
xor edx, edx
jmp 0x180049643
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049770
cmp ecx, 0x20
jne 0x180049739
lea r8d, [rcx + 0x20]
mov dl, 1
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r15d
mov r9d, r13d
mov rcx, rbx
call fcn.180047a40
mov rbx, rax
mov qword [rsp + 0x48], rax
mov rcx, qword [rbp - 0x50]
mov eax, dword [rcx + 4]
xorps xmm7, xmm7
cvtsi2ss xmm7, rax
mov eax, dword [rsi + 0x150]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm7, xmm0
mov r13, qword [rsp + 0x70]
cmp qword [rbp - 0x60], 0
jne 0x1800497e2
mov rax, qword [r13]
mov edx, 0x20000
mov r8d, 0x40000
mov r14d, dword [rsp + 0x5c]
mov r15d, dword [rsp + 0x58]
cmp r14d, r15d
cmove r8d, edx
xor edx, edx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov rcx, r13
call qword [rax + 0x18]
test eax, eax
js 0x18004a602
mov rax, qword [r13]
lea r8, [rbp - 0x60]
lea rdx, [0x1800ed000]
mov rcx, r13
call qword [rax + 0x70]
test eax, eax
js 0x18004a602
cmp r14d, r15d
je 0x1800497af
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov r14, rax
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x18004978f
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor ecx, ecx
call fcn.1800a0458
mov r13, qword [rbp - 0x28]
jmp 0x18004a594
cmp ecx, 4
jne 0x180049749
lea r8d, [rcx + 0x14]
xor edx, edx
jmp 0x180049643
cmp ecx, 1
jne 0x180049759
lea r8d, [rcx + 7]
xor edx, edx
jmp 0x180049643
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov ecx, dword [rsi + 0x184]
xor eax, eax
mov r8d, eax
jmp 0x180049776
mov r8d, 0x20
cmp ecx, 0x10
je 0x180049641
cmp ecx, 0x20
je 0x180049641
xor edx, edx
jmp 0x180049643
mov rax, qword [r13]
mov rdx, r14
mov rcx, r13
call qword [rax + 0x68]
test eax, eax
js 0x18004a602
mov rax, qword [rsi + 0x120]
mov qword [rax + 0x20], r14
mov rcx, qword [rsi + 0x120]
mov rax, qword [rbp - 0x60]
mov qword [rcx + 0x10], rax
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x60]
test eax, eax
js 0x18004a602
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x50]
test eax, eax
js 0x18004a602
xor r14d, r14d
mov dword [rbp - 0x34], r14d
mov rax, qword [r13]
lea rdx, [rbp - 0x34]
mov rcx, r13
call qword [rax + 0x20]
test eax, eax
js 0x18004a602
mov ebx, dword [rsi + 0x168]
mov eax, dword [rsi + 0x154]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm7
call fcn.1800bf0f8
cvttss2si r15, xmm0
imul r15d, ebx
mov edx, dword [rbp - 0x34]
imul edx, ebx
mov dword [rbp - 0x34], edx
mov ecx, dword [rsi + 0x184]
cmp ecx, 2
jne 0x18004983e
mov r14d, ecx
jmp 0x18004987d
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049877
cmp ecx, 0x20
jne 0x180049853
lea r14d, [rcx - 0x18]
jmp 0x18004987d
cmp ecx, 4
jne 0x18004985e
lea r14d, [rcx - 1]
jmp 0x18004987d
cmp ecx, 1
jne 0x180049868
mov r14d, ecx
jmp 0x18004987d
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov edx, dword [rbp - 0x34]
jmp 0x18004987d
mov r14d, 4
lea ebx, [r15 + rdx]
xor ecx, ecx
call fcn.1800a0458
mov ecx, ebx
mov rdx, r14
call fcn.1800a5d30
mov qword [rbp - 8], rax
mov dword [rbp], ebx
xor r15d, r15d
mov qword [rbp + 4], r15
mov r9, qword [rsp + 0x68]
test r9, r9
je 0x180049b55
mov rcx, qword [r9]
mov r8, qword [rcx + 0x40]
lea rdx, [rbp - 0x48]
mov rcx, r9
call r8
test eax, eax
js 0x18004a55b
mov ecx, 0x40
call fcn.18009354c
mov rbx, rax
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + 4]
mov r15d, dword [rsi + 0x150]
mov r13d, dword [rsi + 0x164]
mov ecx, dword [rsi + 0x180]
cmp ecx, 2
je 0x180049ae2
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049aca
cmp ecx, 0x20
jne 0x180049a93
lea r12d, [rcx + 0x20]
mov dl, 1
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r15d
mov r9d, r13d
mov r8d, r12d
mov rcx, rbx
call fcn.180047a40
mov qword [rsp + 0x78], rax
mov rcx, qword [rbp - 0x48]
mov eax, dword [rcx + 4]
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
mov eax, dword [rsi + 0x150]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm6, xmm0
mov rbx, qword [rsp + 0x68]
xor r15d, r15d
cmp qword [rbp - 0x58], r15
jne 0x180049a38
mov rax, qword [rbx]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor edx, edx
mov r8d, 0x40000
mov rcx, rbx
call qword [rax + 0x18]
test eax, eax
js 0x18004a55b
mov rax, qword [rbx]
lea r8, [rbp - 0x58]
lea rdx, [0x1800ed0f8]
mov rcx, rbx
call qword [rax + 0x70]
test eax, eax
js 0x18004a55b
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov r14, rax
mov qword [rbp - 0x78], rax
test rax, rax
je 0x18004a55b
mov rcx, qword [rbx]
mov r8, qword [rcx + 0x68]
mov rdx, rax
mov rcx, rbx
call r8
test eax, eax
js 0x18004a55b
mov rdx, qword [rsi + 0x120]
mov rcx, qword [rbp - 0x58]
mov qword [rdx + 0x18], rcx
mov rax, qword [rsi + 0x120]
mov qword [rax + 0x28], r14
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x60]
test eax, eax
js 0x18004a55b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
js 0x18004a55b
mov dword [rbp - 0x30], r15d
mov rax, qword [rbx]
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [rax + 0x20]
test eax, eax
js 0x18004a55b
mov ebx, dword [rsi + 0x164]
mov eax, dword [rsi + 0x154]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm6
call fcn.1800bf0f8
cvttss2si r15, xmm0
imul r15d, ebx
mov edx, dword [rbp - 0x30]
imul edx, ebx
mov dword [rbp - 0x30], edx
mov ecx, dword [rsi + 0x180]
cmp ecx, 2
jne 0x180049ae9
mov r14d, ecx
jmp 0x180049b2d
cmp ecx, 4
jne 0x180049aa3
lea r12d, [rcx + 0x14]
xor edx, edx
jmp 0x18004992d
cmp ecx, 1
jne 0x180049ab3
lea r12d, [rcx + 7]
xor edx, edx
jmp 0x18004992d
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov ecx, dword [rsi + 0x180]
xor eax, eax
mov r12d, eax
jmp 0x180049ad0
mov r12d, 0x20
cmp ecx, 0x10
je 0x18004992b
cmp ecx, 0x20
je 0x18004992b
xor edx, edx
jmp 0x18004992d
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049b27
cmp ecx, 0x20
jne 0x180049afe
lea r14d, [rcx - 0x18]
jmp 0x180049b2d
cmp ecx, 4
jne 0x180049b09
lea r14d, [rcx - 1]
jmp 0x180049b2d
cmp ecx, 1
jne 0x180049b13
mov r14d, ecx
jmp 0x180049b2d
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
xor eax, eax
mov r14d, eax
mov edx, dword [rbp - 0x30]
jmp 0x180049b2d
mov r14d, 4
lea ebx, [r15 + rdx]
xor ecx, ecx
call fcn.1800a0458
mov ecx, ebx
mov rdx, r14
call fcn.1800a5d30
mov r13, rax
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x20], ebx
xor r15d, r15d
mov qword [rbp - 0x1c], r15
jmp 0x180049b59
mov r13, qword [rbp - 0x28]
mov ecx, dword [rsi + 0x128]
cmp ecx, 1
jne 0x180049cac
mov ebx, dword [rsi + 0x184]
cmp ebx, 2
jne 0x180049b77
mov edi, ebx
jmp 0x180049bb8
lea eax, [rbx - 8]
test eax, 0xfffffff7
je 0x180049bb3
cmp ebx, 0x20
jne 0x180049b8b
lea edi, [rbx - 0x18]
jmp 0x180049bb8
cmp ebx, 4
jne 0x180049b95
lea edi, [rbx - 1]
jmp 0x180049bb8
cmp ebx, 1
jne 0x180049b9e
mov edi, ebx
jmp 0x180049bb8
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov edi, r15d
mov ebx, dword [rsi + 0x184]
jmp 0x180049bb8
mov edi, 4
mov r15d, dword [rsi + 0x154]
mov r14d, dword [rsi + 0x168]
xorps xmm0, xmm0
cvtsi2ss xmm0, r15
mulss xmm0, xmm7
call fcn.1800bf0f8
xor eax, eax
movss xmm1, dword [0x180119a64]
comiss xmm0, xmm1
jb 0x180049bfc
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x180049bfc
movabs r12, 0x8000000000000000
mov rax, r12
cvttss2si rcx, xmm0
add rcx, rax
imul ecx, edi
imul ecx, r14d
mov qword [rsp + 0x60], rcx
cmp ebx, 2
jne 0x180049c27
mov edi, ebx
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
lea eax, [rbx - 8]
test eax, 0xfffffff7
je 0x180049df3
cmp ebx, 0x20
jne 0x180049c4f
mov edi, 8
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
cmp ebx, 4
jne 0x180049c69
mov edi, 3
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
cmp ebx, 1
jne 0x180049c80
mov edi, ebx
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
xor eax, eax
mov edi, eax
mov r14d, dword [rsi + 0x168]
mov r15d, dword [rsi + 0x154]
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
test ecx, ecx
jne 0x180049e08
mov ebx, dword [rsi + 0x180]
cmp ebx, 2
jne 0x180049cc3
mov edi, ebx
jmp 0x180049d04
lea eax, [rbx - 8]
test eax, 0xfffffff7
je 0x180049cff
cmp ebx, 0x20
jne 0x180049cd7
lea edi, [rbx - 0x18]
jmp 0x180049d04
cmp ebx, 4
jne 0x180049ce1
lea edi, [rbx - 1]
jmp 0x180049d04
cmp ebx, 1
jne 0x180049cea
mov edi, ebx
jmp 0x180049d04
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov edi, r15d
mov ebx, dword [rsi + 0x180]
jmp 0x180049d04
mov edi, 4
mov r15d, dword [rsi + 0x154]
mov r14d, dword [rsi + 0x164]
xorps xmm0, xmm0
cvtsi2ss xmm0, r15
mulss xmm0, xmm6
call fcn.1800bf0f8
xor ecx, ecx
movss xmm1, dword [0x180119a64]
comiss xmm0, xmm1
jb 0x180049d48
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x180049d48
movabs r12, 0x8000000000000000
mov rcx, r12
cvttss2si rax, xmm0
add rax, rcx
imul eax, edi
imul eax, r14d
mov dword [rsp + 0x60], eax
cmp ebx, 2
jne 0x180049d72
mov edi, ebx
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
lea eax, [rbx - 8]
test eax, 0xfffffff7
je 0x180049df3
cmp ebx, 0x20
jne 0x180049d96
mov edi, 8
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
cmp ebx, 4
jne 0x180049db0
mov edi, 3
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
cmp ebx, 1
jne 0x180049dc7
mov edi, ebx
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
xor eax, eax
mov edi, eax
mov r14d, dword [rsi + 0x164]
mov r15d, dword [rsi + 0x154]
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
mov edi, 4
imul edi, r15d
imul edi, r14d
xor r15d, r15d
jmp 0x18004a004
cmp ecx, 2
jne 0x18004a004
mov ecx, dword [rsi + 0x180]
cmp ecx, 2
jne 0x180049e20
mov edi, ecx
jmp 0x180049e5b
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049e56
cmp ecx, 0x20
jne 0x180049e34
lea edi, [rcx - 0x18]
jmp 0x180049e5b
cmp ecx, 4
jne 0x180049e3e
lea edi, [rcx - 1]
jmp 0x180049e5b
cmp ecx, 1
jne 0x180049e47
mov edi, ecx
jmp 0x180049e5b
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov rdi, r15
jmp 0x180049e5b
mov edi, 4
mov ebx, dword [rsi + 0x154]
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm0, xmm6
call fcn.1800bf0f8
xor eax, eax
movabs r12, 0x8000000000000000
movss xmm6, dword [0x180119a64]
comiss xmm0, xmm6
jb 0x180049e97
subss xmm0, xmm6
comiss xmm0, xmm6
jae 0x180049e97
mov rax, r12
cvttss2si r14, xmm0
add r14, rax
mov eax, dword [rsi + 0x164]
imul r14, rax
imul r14, rdi
mov ecx, dword [rsi + 0x184]
cmp ecx, 2
jne 0x180049ebc
mov edi, ecx
jmp 0x180049efd
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049ef8
cmp ecx, 0x20
jne 0x180049ed0
lea edi, [rcx - 0x18]
jmp 0x180049efd
cmp ecx, 4
jne 0x180049eda
lea edi, [rcx - 1]
jmp 0x180049efd
cmp ecx, 1
jne 0x180049ee3
mov edi, ecx
jmp 0x180049efd
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov ebx, dword [rsi + 0x154]
mov rdi, r15
jmp 0x180049efd
mov edi, 4
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm0, xmm7
call fcn.1800bf0f8
xor eax, eax
comiss xmm0, xmm6
jb 0x180049f21
subss xmm0, xmm6
comiss xmm0, xmm6
jae 0x180049f21
mov rax, r12
cvttss2si rcx, xmm0
add rcx, rax
mov eax, dword [rsi + 0x168]
imul rcx, rax
imul rcx, rdi
cmp rcx, r14
cmovb ecx, r14d
mov dword [rsp + 0x60], ecx
mov ecx, dword [rsi + 0x180]
cmp ecx, 2
jne 0x180049f52
mov r14d, ecx
jmp 0x180049f97
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049f91
cmp ecx, 0x20
jne 0x180049f67
lea r14d, [rcx - 0x18]
jmp 0x180049f97
cmp ecx, 4
jne 0x180049f72
lea r14d, [rcx - 1]
jmp 0x180049f97
cmp ecx, 1
jne 0x180049f7c
mov r14d, ecx
jmp 0x180049f97
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov r14d, r15d
mov ebx, dword [rsi + 0x154]
jmp 0x180049f97
mov r14d, 4
imul r14d, ebx
imul r14d, dword [rsi + 0x164]
mov ecx, dword [rsi + 0x184]
cmp ecx, 2
jne 0x180049fb2
mov edi, ecx
jmp 0x180049ff3
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x180049fee
cmp ecx, 0x20
jne 0x180049fc6
lea edi, [rcx - 0x18]
jmp 0x180049ff3
cmp ecx, 4
jne 0x180049fd0
lea edi, [rcx - 1]
jmp 0x180049ff3
cmp ecx, 1
jne 0x180049fd9
mov edi, ecx
jmp 0x180049ff3
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov edi, r15d
mov ebx, dword [rsi + 0x154]
jmp 0x180049ff3
mov edi, 4
imul edi, dword [rsi + 0x168]
imul edi, ebx
cmp edi, r14d
cmovb edi, r14d
mov rax, qword [rsp + 0x60]
lea ecx, [rax + rax]
mov edx, 1
call fcn.1800a5d30
mov qword [rsp + 0x50], rax
mov ecx, edi
mov edx, 1
call fcn.1800a5d30
mov qword [rsi + 0x140], rax
cmp qword [rsp + 0x50], 0
je 0x18004a55f
test rax, rax
je 0x18004a55f
cmp dword [rsi + 0x12c], 1
je 0x18004a55f
movss xmm6, dword [0x180119858]
mov r14d, dword [rsp + 0x44]
mov r12d, dword [rbp - 0x80]
test r12b, r12b
jne 0x18004a2ec
cmp qword [rsp + 0x70], 0
je 0x18004a217
mov ebx, dword [rsi + 0x154]
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm0, xmm7
call fcn.1800bfcb0
cvttss2si r14, xmm0
ucomiss xmm7, xmm6
jp 0x18004a099
je 0x18004a09c
dec r14d
mov dword [rsp + 0x44], r15d
test ebx, ebx
je 0x18004a2e4
mov r13, qword [rsp + 0x50]
nop
mov edi, dword [rsi + 0x184]
mov ebx, dword [rsi + 0x168]
mov r8d, r14d
imul r8d, ebx
mov r9d, edi
mov rdx, r13
lea rcx, [rbp - 8]
call fcn.180047860
movzx r12d, al
test al, al
je 0x18004a2e4
cmp edi, 2
jne 0x18004a0e7
mov ecx, edi
jmp 0x18004a129
lea eax, [rdi - 8]
test eax, 0xfffffff7
je 0x18004a124
cmp edi, 0x20
jne 0x18004a0fb
lea ecx, [rdi - 0x18]
jmp 0x18004a129
cmp edi, 4
jne 0x18004a105
lea ecx, [rdi - 1]
jmp 0x18004a129
cmp edi, 1
jne 0x18004a10e
mov ecx, edi
jmp 0x18004a129
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
xor eax, eax
mov ecx, eax
mov ebx, dword [rsi + 0x168]
jmp 0x18004a129
mov ecx, 4
imul ecx, ebx
imul ecx, r15d
xor ebx, ebx
mov dword [rsp + 0x44], ebx
mov edx, ecx
add rdx, qword [rsi + 0x140]
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, r13
mov rcx, qword [rsp + 0x48]
call fcn.180047d10
add r15d, dword [rsp + 0x44]
mov dword [rsp + 0x44], r15d
lea r14d, [rbx + 1]
mov ecx, dword [rsi + 0x154]
cmp r15d, ecx
jb 0x18004a0b0
cmp byte [rsi + 0x149], bl
je 0x18004a1a0
lea r9, [rsi + 0x230]
mov r8, qword [rsi + 0x140]
mov rdx, qword [rsi + 0x138]
mov rcx, rsi
call fcn.18004ae30
mov r14d, r15d
jmp 0x18004a21a
mov edx, dword [rsi + 0x17c]
cmp edx, 2
jne 0x18004a1af
mov eax, edx
jmp 0x18004a1f0
lea eax, [rdx - 8]
test eax, 0xfffffff7
je 0x18004a1eb
cmp edx, 0x20
jne 0x18004a1c3
lea eax, [rdx - 0x18]
jmp 0x18004a1f0
cmp edx, 4
jne 0x18004a1cd
lea eax, [rdx - 1]
jmp 0x18004a1f0
cmp edx, r14d
jne 0x18004a1d7
mov eax, r14d
jmp 0x18004a1f0
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov eax, ebx
mov ecx, dword [rsi + 0x154]
jmp 0x18004a1f0
mov eax, 4
imul ecx, dword [rsi + 0x160]
imul ecx, eax
mov r8d, ecx
mov rdx, qword [rsi + 0x140]
mov rcx, qword [rsi + 0x138]
call fcn.180098870
mov r14d, dword [rsp + 0x44]
jmp 0x18004a21a
mov r12b, 1
cmp byte [rsp + 0x40], 0
jne 0x18004a2e9
mov rbx, qword [rsi + 0x1c8]
mov edi, dword [rbp - 0x10]
and edi, 1
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x50]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], edi
movaps xmm3, xmm0
mov r8d, dword [rsi + 0x154]
mov rdx, qword [rsi + 0x138]
mov rcx, qword [rsi + 0x130]
call qword [rbp - 0x68]
mov ecx, dword [rsi + 0x154]
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
mov ecx, dword [rsi + 0x150]
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
divsd xmm1, xmm0
addsd xmm1, qword [rsi + 0x278]
movsd qword [rsi + 0x278], xmm1
xor r15d, r15d
cmp eax, 1
jne 0x18004a2d6
lea r8, [0x180049450]
mov qword [rsp + 0x28], r15
mov r9, rsi
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18004a55b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18004a55b
mov byte [rsp + 0x40], 1
jmp 0x18004a2ec
cmp eax, 2
jne 0x18004a2ec
lea r8, [0x180049470]
jmp 0x18004a29e
mov r14d, dword [rsp + 0x44]
xor r15d, r15d
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x18004a3f8
test r12b, r12b
je 0x18004a3f8
cmp byte [rsp + 0x41], 0
jne 0x18004a313
test r14d, r14d
jne 0x18004a3d3
cmp byte [rsi + 0x148], 0
je 0x18004a33b
lea r9, [rsi + 0x1e8]
mov r8, qword [rsi + 0x130]
mov rdx, qword [rsi + 0x140]
mov rcx, rsi
call fcn.18004ae30
jmp 0x18004a3a7
mov ecx, dword [rsi + 0x17c]
cmp ecx, 2
je 0x18004a381
lea eax, [rcx - 8]
test eax, 0xfffffff7
je 0x18004a37c
cmp ecx, 0x20
jne 0x18004a35c
mov ecx, 8
jmp 0x18004a381
cmp ecx, 4
jne 0x18004a368
mov ecx, 3
jmp 0x18004a381
cmp ecx, 1
je 0x18004a381
xor edx, edx
mov rcx, rsi
call fcn.18004a6e0
mov ecx, r15d
jmp 0x18004a381
mov ecx, 4
mov r8d, dword [rsi + 0x15c]
imul r8d, dword [rsi + 0x154]
imul r8d, ecx
mov rdx, qword [rsi + 0x130]
mov rcx, qword [rsi + 0x140]
call fcn.180098870
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsi + 0x154]
mov r8, qword [rsi + 0x140]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x78]
call fcn.180047d10
mov r14d, dword [rsp + 0x44]
mov r8d, r14d
imul r8d, dword [rsi + 0x164]
mov r9d, dword [rsi + 0x180]
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp - 0x28]
call fcn.180047690
movzx edi, al
jmp 0x18004a3fb
mov dil, 1
mov byte [rsp + 0x41], dil
cmp qword [rsp + 0x70], 0
je 0x18004a49e
test r12b, r12b
jne 0x18004a42d
mov rcx, qword [rbp - 0x70]
mov eax, dword [rsp + 0x58]
cmp dword [rsp + 0x5c], eax
cmove rcx, qword [rbp - 0x78]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x10]
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x40]
call qword [rax + 0x18]
test eax, eax
js 0x18004a55b
mov r8d, dword [rbp - 0x38]
test r8d, r8d
je 0x18004a48a
imul r8d, dword [rsi + 0x168]
mov r9d, dword [rsi + 0x184]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 8]
call fcn.180047690
mov rcx, qword [rbp - 0x60]
test al, al
mov rax, qword [rcx]
je 0x18004a491
mov edx, dword [rbp - 0x38]
jmp 0x18004a493
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x20]
test eax, eax
js 0x18004a55b
test rbx, rbx
je 0x18004a543
test r12b, r12b
je 0x18004a4c0
test dil, dil
jne 0x18004a4c0
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [rbx]
lea rdx, [rbp - 0x38]
mov rcx, rbx
call qword [rax + 0x20]
test eax, eax
js 0x18004a55b
mov rax, qword [rbx]
lea rdx, [rbp - 0xc]
mov rcx, rbx
call qword [rax + 0x30]
test eax, eax
js 0x18004a55b
mov edx, dword [rbp - 0x38]
sub edx, dword [rbp - 0xc]
mov dword [rbp - 0x38], edx
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
je 0x18004a537
lea r8, [rbp - 0x40]
call qword [rax + 0x18]
test eax, eax
js 0x18004a55b
mov ebx, dword [rbp - 0x38]
mov r8d, ebx
imul r8d, dword [rsi + 0x164]
mov r9d, dword [rsi + 0x180]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x28]
call fcn.180047860
mov rcx, qword [rbp - 0x58]
xor r8d, r8d
test al, al
mov rax, qword [rcx]
je 0x18004a53a
mov edx, ebx
jmp 0x18004a53c
xor r8d, r8d
xor edx, edx
call qword [rax + 0x20]
test eax, eax
js 0x18004a55b
movzx r12d, r12b
test dil, dil
cmovne r12d, r15d
cmp dword [rsi + 0x12c], 1
jne 0x18004a061
mov r13, qword [rbp - 0x28]
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x50]
call fcn.1800a0458
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x18004a594
mov rcx, rax
call fcn.18004a610
test rbx, rbx
je 0x18004a5a1
mov rcx, rbx
call fcn.18004a610
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov dword [rsi + 0x12c], eax
lea rcx, [rbp + 0x10]
call fcn.18004d0b0
nop
mov rcx, r13
call fcn.1800a0458
nop
mov rcx, qword [rbp - 8]
call fcn.1800a0458
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.180092eb0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r13, qword [rbp - 0x28]
jmp 0x18004a564