Function at 0x18000b940
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbp
push rbx
push rdi
lea rbp, [r11 - 0xa8]
sub rsp, 0x190
mov rax, qword [0x18005b040]
xor rax, rsp
mov qword [rbp - 0x40], rax
mov qword [r11 + 0x10], rsi
mov rbx, rcx
mov rsi, qword [0x18005bb00]
mov qword [r11 - 0x20], r12
mov qword [r11 - 0x28], r13
mov qword [r11 - 0x30], r14
mov r14d, r8d
mov qword [r11 - 0x38], r15
movaps xmmword [r11 - 0xa8], xmm12
mov qword [rbp - 0x68], rcx
test rcx, rcx
je 0x18000b999
cmp byte [rcx], 0
jne 0x18000b9b3
mov r8d, 0x1496
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.name___0__name_0____0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp byte [rsi + 0x19bc], 0
jne 0x18000b9d6
mov r8d, 0x1497
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.g.WithinFrameScope
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [rsi + 0x19b0]
cmp dword [rsi + 0x19b4], eax
jne 0x18000b9fe
mov r8d, 0x1498
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.g.FrameCountEnded___g.FrameCount
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, rbx
call fcn.180009440
test rax, rax
mov qword [rsp + 0x68], rax
mov rdi, rax
xorps xmm12, xmm12
sete byte [rsp + 0x31]
test rax, rax
jne 0x18000ba72
mov ecx, dword [rsi + 0x1ab8]
and ecx, 2
je 0x18000ba3a
movsd xmm0, qword [rsi + 0x1ad8]
movsd qword [rsp + 0x38], xmm0
jmp 0x18000ba43
mov qword [rsp + 0x48], 0
test ecx, ecx
lea rdx, [rsp + 0x38]
lea rax, [rsp + 0x48]
mov r8d, r14d
cmovne rax, rdx
mov rcx, rbx
movss xmm1, dword [rax + 4]
movss xmm0, dword [rax]
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.180009510
mov rdi, rax
mov ecx, r14d
and ecx, 0xc0200
cmp ecx, 0xc0200
jne 0x18000ba87
or r14d, 6
mov ecx, r14d
and ecx, 0x1800000
cmp ecx, 0x800000
jne 0x18000bab2
mov r8d, 0x14a8
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.flags__ImGuiWindowFlags_ChildWindow
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r13d, dword [rsi + 0x19b0]
mov r12d, dword [rdi + 0x250]
lea eax, [r13 - 1]
cmp r12d, eax
mov eax, dword [rdi + 0xa0]
mov dword [rsp + 0x40], eax
setl r15b
mov byte [rsp + 0x32], r15b
bt r14d, 0x1a
jae 0x18000bb39
movsxd rbx, dword [rsi + 0x1b70]
cmp ebx, dword [rsi + 0x1b60]
jl 0x18000bb0a
mov r8d, 0x4f8
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [rbx + rbx*2]
shl rax, 4
add rax, qword [rsi + 0x1b68]
cmp rdi, qword [rax + 8]
mov eax, dword [rax]
setne cl
cmp dword [rdi + 0x90], eax
setne al
or cl, al
mov eax, dword [rsp + 0x40]
or r15b, cl
mov byte [rsp + 0x32], r15b
test r15b, r15b
jne 0x18000bb4b
test eax, eax
jg 0x18000bb4b
mov byte [rdi + 0x84], r15b
jmp 0x18000bb67
or dword [rdi + 0xa4], 8
or dword [rdi + 0xa8], 8
or dword [rdi + 0xac], 8
mov byte [rdi + 0x84], 1
xor ecx, ecx
cmp r12d, r13d
je 0x18000bbaa
mov dword [rdi + 0xc], r14d
mov dword [rdi + 0x250], r13d
movsd xmm0, qword [rsi + 0x19a8]
mov word [rdi + 0x8a], cx
cvtpd2ps xmm0, xmm0
movss dword [rdi + 0x254], xmm0
movzx eax, word [rsi + 0x1a10]
mov word [rdi + 0x8c], ax
inc dword [rsi + 0x1a10]
jmp 0x18000bbae
mov r14d, dword [rdi + 0xc]
lea rbx, [rsi + 0x19f0]
mov eax, dword [rbx]
test eax, eax
jne 0x18000bbc0
mov rax, rcx
jmp 0x18000bbea
jg 0x18000bbdc
mov r8d, 0x502
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx]
mov rax, qword [rbx + 8]
mov rax, qword [rax + rcx*8 - 8]
xor ecx, ecx
cmp r12d, r13d
je 0x18000bbfc
test r14d, 0x5000000
cmovne rcx, rax
jmp 0x18000bc03
mov rcx, qword [rdi + 0x358]
mov qword [rsp + 0x48], rcx
test rcx, rcx
jne 0x18000bc2e
bt r14d, 0x18
jae 0x18000bc2e
mov r8d, 0x14cb
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.parent_window___0____flags__ImGuiWindowFlags_ChildWindow_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [rdi + 0xc0]
mov eax, 8
cmp dword [r15], 0
jne 0x18000bc66
cmp dword [r15 + 4], 0
jne 0x18000bc51
mov edx, eax
mov rcx, r15
call fcn.180015c10
mov eax, dword [rdi + 8]
movsxd rdx, dword [r15]
mov rcx, qword [r15 + 8]
mov dword [rcx + rdx*4], eax
mov eax, 8
inc dword [r15]
mov ecx, dword [rbx + 4]
mov r8d, dword [rbx]
cmp r8d, ecx
jne 0x18000bc93
inc r8d
test ecx, ecx
je 0x18000bc81
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cmp eax, r8d
mov rcx, rbx
cmovg r8d, eax
mov edx, r8d
call fcn.1800156c0
movsxd rcx, dword [rbx]
lea rdx, [rdi + 0x1d0]
mov rax, qword [rbx + 8]
mov qword [rax + rcx*8], rdi
inc dword [rbx]
mov rcx, qword [0x18005bb00]
mov qword [rsi + 0x1a18], 0
mov eax, dword [r15]
mov word [rdx], ax
mov eax, dword [rdi + 0x1c0]
mov word [rdx + 2], ax
mov eax, dword [rcx + 0x1b70]
mov word [rdx + 4], ax
mov eax, dword [rcx + 0x1b30]
mov word [rdx + 6], ax
mov eax, dword [rcx + 0x1b40]
mov word [rdx + 8], ax
add rdx, 0xa
mov eax, dword [rcx + 0x1b50]
mov word [rdx], ax
lea rax, [rdi + 0x1da]
cmp rdx, rax
je 0x18000bd1a
mov r8d, 0x1bb1
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.p__window__DC.StackSizesBackup____int__sizeof_window__DC.StackSizesBackup____sizeof_window__DC.StackSizesBackup___
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
bt r14d, 0x1a
jae 0x18000bd74
movsxd rbx, dword [rsi + 0x1b70]
cmp ebx, dword [rsi + 0x1b60]
jl 0x18000bd4a
mov r8d, 0x4f8
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rbx, [rbx + rbx*2]
shl rbx, 4
lea rcx, [rsi + 0x1b70]
add rbx, qword [rsi + 0x1b68]
mov rdx, rbx
mov qword [rbx + 8], rdi
call fcn.180015460
mov eax, dword [rbx]
mov dword [rdi + 0x90], eax
xor r15d, r15d
cmp dword [rsp + 0x40], r15d
jle 0x18000bd8c
bt r14d, 0x18
jb 0x18000bd8c
mov dword [rdi + 0x380], r15d
xor cl, cl
xor dl, dl
test byte [rsi + 0x1ab8], 1
mov byte [rsp + 0x34], dl
mov byte [rsp + 0x33], cl
mov byte [rsp + 0x30], cl
je 0x18000be20
mov r8d, dword [rsi + 0x1abc]
mov ecx, dword [rdi + 0xa4]
test r8d, ecx
setne dl
mov byte [rsp + 0x34], dl
test r8d, ecx
je 0x18000be11
movss xmm0, dword [rsi + 0x1ad4]
movss xmm1, dword [rsi + 0x1ad0]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
comiss xmm1, dword [0x180054760]
jbe 0x18000be11
movsd xmm0, qword [rsi + 0x1ac8]
and ecx, 0xfffffff1
movsd qword [rdi + 0xb0], xmm0
movsd xmm1, qword [rsi + 0x1ad0]
movsd qword [rdi + 0xb8], xmm1
mov dword [rdi + 0xa4], ecx
jmp 0x18000be20
lea rdx, [rsi + 0x1ac8]
mov rcx, rdi
call fcn.18000ec30
test byte [rsi + 0x1ab8], 2
je 0x18000be81
mov r8d, dword [rsi + 0x1ac0]
mov eax, r8d
and eax, dword [rdi + 0xa8]
je 0x18000be50
movss xmm0, dword [rsi + 0x1ad8]
comiss xmm0, xmm12
jbe 0x18000be50
mov byte [rsp + 0x33], 1
jmp 0x18000be5a
xor cl, cl
mov byte [rsp + 0x33], cl
test eax, eax
je 0x18000be6d
movss xmm0, dword [rsi + 0x1adc]
comiss xmm0, xmm12
mov byte [rsp + 0x30], 1
ja 0x18000be72
mov byte [rsp + 0x30], 0
lea rdx, [rsi + 0x1ad8]
mov rcx, rdi
call fcn.18000ed40
test byte [rsi + 0x1ab8], 4
je 0x18000be99
movsd xmm0, qword [rsi + 0x1ae0]
movsd qword [rdi + 0x30], xmm0
jmp 0x18000bea6
cmp r12d, r13d
je 0x18000bea6
mov qword [rdi + 0x30], 0
test byte [rsi + 0x1ab8], 8
je 0x18000bed5
mov eax, dword [rsi + 0x1ac4]
movzx ecx, byte [rsi + 0x1ae8]
test eax, eax
je 0x18000bec8
test dword [rdi + 0xac], eax
je 0x18000bed5
and dword [rdi + 0xac], 0xfffffff1
mov byte [rdi + 0x81], cl
test byte [rsi + 0x1ab8], 0x20
je 0x18000bee6
mov rcx, rdi
call fcn.18000dff0
cmp byte [rdi + 0x84], 0
je 0x18000bf04
and dword [rdi + 0xa4], 0xfffffff7
and dword [rdi + 0xa8], 0xfffffff7
and dword [rdi + 0xac], 0xfffffff7
mov ebx, 1
cmp r12d, r13d
je 0x18000dc5f
mov r13, qword [rsp + 0x48]
mov eax, r14d
movaps xmmword [rsp + 0x160], xmm6
and eax, 0x3000000
movaps xmmword [rsp + 0x150], xmm7
movaps xmmword [rsp + 0x140], xmm8
movaps xmmword [rsp + 0x130], xmm9
movaps xmmword [rsp + 0x120], xmm10
movaps xmmword [rsp + 0x110], xmm11
movaps xmmword [rsp + 0xf0], xmm13
movaps xmmword [rsp + 0xe0], xmm14
movaps xmmword [rsp + 0xd0], xmm15
mov dword [rsp + 0x54], eax
mov qword [rdi + 0x358], r13
mov qword [rdi + 0x370], rdi
mov qword [rdi + 0x368], rdi
mov qword [rdi + 0x360], rdi
test r13, r13
je 0x18000bfc6
cmp eax, 0x1000000
jne 0x18000bfa8
mov rax, qword [r13 + 0x360]
mov qword [rdi + 0x360], rax
bt r14d, 0x1b
jb 0x18000bfc6
test r14d, 0x5000000
je 0x18000bfc6
mov rax, qword [r13 + 0x368]
mov qword [rdi + 0x368], rax
test dword [rdi + 0xc], 0x800000
je 0x18000c014
mov rax, rdi
cmp qword [rax + 0x358], 0
jne 0x18000bff6
mov r8d, 0x1486
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.window__RootWindowForNav__ParentWindow___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x370]
mov rax, qword [rax + 0x358]
mov qword [rdi + 0x370], rax
test dword [rax + 0xc], 0x800000
jne 0x18000bfd2
mov byte [rdi + 0x7e], bl
mov byte [rdi + 0x86], 0
mov dword [rdi + 0x230], 0xff7fffff
mov dword [rdi + 0x234], 0xff7fffff
mov dword [rdi + 0x238], 0x7f7fffff
mov dword [rdi + 0x23c], 0x7f7fffff
mov ecx, dword [rdi + 0xc4]
cmp ecx, ebx
jge 0x18000c07c
test ecx, ecx
je 0x18000c05f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18000c064
mov eax, 8
cmp eax, ebx
lea rcx, [rdi + 0xc0]
mov edx, ebx
mov r12d, ebx
cmovg edx, eax
call fcn.180015c10
jmp 0x18000c07f
mov r12d, ebx
mov dword [rdi + 0xc0], r12d
cmp byte [rdi + 0x3a8], 0
je 0x18000c0cd
mov rcx, qword [rdi + 0x2a8]
mov edx, dword [rdi + 0x3ac]
add rcx, 0x10
mov byte [rdi + 0x3a8], 0
call fcn.180015ad0
mov rcx, qword [rdi + 0x2a8]
mov edx, dword [rdi + 0x3b0]
add rcx, 0x20
call fcn.180015850
mov qword [rdi + 0x3ac], 0
cmp qword [rsi + 0x1bd8], 0
mov r8, qword [rsp + 0x68]
je 0x18000c1aa
test dword [rdi + 0xc], 0x80000
jne 0x18000c1aa
test r8, r8
je 0x18000c1aa
mov r12, qword [rbp - 0x68]
mov r9, qword [rdi]
mov rax, r12
mov r8, r9
sub r8, r12
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18000c123
inc rax
test ecx, ecx
jne 0x18000c110
test edx, edx
je 0x18000c1a2
movsxd r15, dword [rdi + 0x48]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r12 + rbx], 0
jne 0x18000c132
inc rbx
cmp r15, rbx
jae 0x18000c185
test r9, r9
je 0x18000c15b
mov rax, qword [0x18005bb00]
test rax, rax
je 0x18000c15b
dec dword [rax + 0x3bc]
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x18005bb00]
test rax, rax
je 0x18000c176
inc dword [rax + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r15, rbx
mov r8, rbx
mov rdx, r12
mov rcx, r9
call sub.VCRUNTIME140.dll_memcpy
mov qword [rdi], rax
mov r12d, 1
mov dword [rdi + 0x48], r15d
jmp 0x18000c1a5
mov r12d, ebx
mov r8, qword [rsp + 0x68]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.180009ba0
movsd xmm3, qword [rax]
mov eax, dword [rdi + 0x9c]
movsd qword [rdi + 0x28], xmm3
test eax, eax
jle 0x18000c1d2
dec eax
mov dword [rdi + 0x9c], eax
mov eax, dword [rdi + 0xa0]
test eax, eax
jle 0x18000c1e4
dec eax
mov dword [rdi + 0xa0], eax
movzx ebx, byte [rsp + 0x33]
test r8, r8
jne 0x18000c200
test bl, bl
je 0x18000c1f9
cmp byte [rsp + 0x30], r8b
jne 0x18000c200
mov dword [rdi + 0xa0], r12d
xor edx, edx
cmp byte [rsp + 0x32], dl
je 0x18000c243
test r14d, 0x6000000
je 0x18000c243
mov dword [rdi + 0xa0], r12d
test r14b, 0x40
je 0x18000c243
test bl, bl
jne 0x18000c228
mov dword [rdi + 0x20], edx
mov dword [rdi + 0x18], edx
movzx r12d, byte [rsp + 0x30]
test r12b, r12b
jne 0x18000c239
mov dword [rdi + 0x24], edx
mov dword [rdi + 0x1c], edx
mov qword [rdi + 0x28], 0
jmp 0x18000c249
movzx r12d, byte [rsp + 0x30]
mov rax, qword [0x18005bb00]
movss xmm0, dword [rax + 0x1914]
mov qword [rax + 0x1a18], rdi
mov rcx, qword [rdi + 0x358]
mulss xmm0, dword [rdi + 0x2a0]
test rcx, rcx
je 0x18000c27b
mulss xmm0, dword [rcx + 0x2a0]
movss dword [rax + 0x1928], xmm0
movss dword [rax + 0x1910], xmm0
bt r14d, 0x18
jae 0x18000c29c
movss xmm1, dword [rsi + 0x1584]
jmp 0x18000c2be
test r14d, 0x6000000
je 0x18000c2b6
bt r14d, 0x1b
jb 0x18000c2b6
movss xmm1, dword [rsi + 0x158c]
jmp 0x18000c2be
movss xmm1, dword [rsi + 0x1568]
mov rax, rdi
movss dword [rax + 0x44], xmm1
mov eax, r14d
movsd xmm0, qword [rsi + 0x155c]
and eax, 0x5010000
movsd qword [rdi + 0x38], xmm0
cmp eax, 0x1000000
jne 0x18000c307
ucomiss xmm1, xmm12
jp 0x18000c307
jne 0x18000c307
bt r14d, 0xa
jae 0x18000c2fb
movss xmm0, dword [rsi + 0x1560]
jmp 0x18000c2ff
movaps xmm0, xmm12
movss dword [rdi + 0x3c], xmm0
mov dword [rdi + 0x38], edx
movss xmm0, dword [rdi + 0x38]
maxss xmm0, dword [rsi + 0x15a0]
maxss xmm0, dword [rsi + 0x1b14]
movss dword [rdi + 0x14c], xmm0
mov eax, dword [rsi + 0x1b18]
mov dword [rdi + 0x150], eax
test r14b, 0x21
jne 0x18000c47c
test byte [rdi + 0xc], 1
mov rcx, qword [0x18005bb00]
je 0x18000c34d
movaps xmm2, xmm12
jmp 0x18000c381
mov rax, qword [rdi + 0x358]
movss xmm0, dword [rcx + 0x1914]
mulss xmm0, dword [rdi + 0x2a0]
test rax, rax
je 0x18000c371
mulss xmm0, dword [rax + 0x2a0]
movss xmm2, dword [rcx + 0x1594]
addss xmm2, xmm2
addss xmm2, xmm0
movss xmm4, dword [rdi + 0x10]
movaps xmm3, xmm4
movss xmm5, dword [rdi + 0x14]
addss xmm3, dword [rdi + 0x20]
addss xmm2, dword [rdi + 0x14]
cmp qword [rsi + 0x1a20], rdi
jne 0x18000c436
cmp dword [rsi + 0x1a4c], 0
jne 0x18000c436
cmp dword [rsi + 0x1a54], 0
jne 0x18000c436
mov rax, qword [rcx + 0x1a18]
movss xmm1, dword [rcx + 0x15b0]
movss xmm0, dword [rcx + 0x15b4]
movss xmm6, dword [rcx + 0x130]
maxss xmm4, dword [rax + 0x230]
maxss xmm5, dword [rax + 0x234]
minss xmm3, dword [rax + 0x238]
minss xmm2, dword [rax + 0x23c]
subss xmm4, xmm1
subss xmm5, xmm0
addss xmm3, xmm1
addss xmm2, xmm0
comiss xmm6, xmm4
jb 0x18000c436
movss xmm0, dword [rcx + 0x134]
comiss xmm0, xmm5
jb 0x18000c436
comiss xmm3, xmm6
jbe 0x18000c436
comiss xmm2, xmm0
jbe 0x18000c436
cmp byte [rsi + 0x425], 0
je 0x18000c436
mov byte [rdi + 0x82], 1
cmp byte [rdi + 0x82], 0
je 0x18000c483
cmp byte [rdi + 0x81], 0
mov rcx, qword [0x18005bb00]
sete al
test dword [rdi + 0xc], 0x100
mov byte [rdi + 0x81], al
jne 0x18000c472
comiss xmm12, dword [rcx + 0x2ef8]
jb 0x18000c472
mov eax, dword [rcx + 0x1c]
mov dword [rcx + 0x2ef8], eax
mov rcx, rdi
call fcn.18000dff0
jmp 0x18000c483
mov byte [rdi + 0x81], 0
lea r8, [rdi + 0x28]
mov byte [rdi + 0x82], 0
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.180009c60
movzx r15d, byte [rsp + 0x31]
test r14b, 0x40
je 0x18000c4e0
cmp byte [rdi + 0x81], 0
jne 0x18000c4e0
test bl, bl
jne 0x18000c4c4
movss xmm0, dword [rsp + 0x48]
movss dword [rdi + 0x20], xmm0
mov byte [rsp + 0x31], 1
test r12b, r12b
jne 0x18000c583
movss xmm0, dword [rsp + 0x4c]
mov r15b, 1
movss dword [rdi + 0x24], xmm0
jmp 0x18000c583
movzx eax, byte [rdi + 0x94]
test al, al
jg 0x18000c4f8
cmp byte [rdi + 0x95], 0
jle 0x18000c583
test bl, bl
jne 0x18000c525
test al, al
jle 0x18000c525
cmp byte [rdi + 0x97], bl
je 0x18000c515
movss xmm0, dword [rdi + 0x20]
maxss xmm0, dword [rsp + 0x48]
jmp 0x18000c51b
movss xmm0, dword [rsp + 0x48]
movss dword [rdi + 0x20], xmm0
mov byte [rsp + 0x31], 1
test r12b, r12b
jne 0x18000c557
cmp byte [rdi + 0x95], r12b
jle 0x18000c557
cmp byte [rdi + 0x97], r12b
je 0x18000c549
movss xmm0, dword [rdi + 0x24]
maxss xmm0, dword [rsp + 0x4c]
jmp 0x18000c54f
movss xmm0, dword [rsp + 0x4c]
movss dword [rdi + 0x24], xmm0
mov r15b, 1
cmp byte [rdi + 0x81], 0
jne 0x18000c583
test dword [rdi + 0xc], 0x100
mov rcx, qword [0x18005bb00]
jne 0x18000c583
comiss xmm12, dword [rcx + 0x2ef8]
jb 0x18000c583
mov eax, dword [rcx + 0x1c]
mov dword [rcx + 0x2ef8], eax
mov r8, qword [rdi + 0x20]
lea rcx, [rsp + 0x70]
mov rdx, rdi
call fcn.180009900
cmp byte [rdi + 0x81], 0
movsd xmm0, qword [rax]
movsd qword [rdi + 0x20], xmm0
je 0x18000c61d
bt r14d, 0x18
jb 0x18000c61d
test byte [rdi + 0xc], 1
mov rcx, qword [0x18005bb00]
je 0x18000c5c0
movaps xmm2, xmm12
jmp 0x18000c5f4
mov rax, qword [rdi + 0x358]
movss xmm0, dword [rcx + 0x1914]
mulss xmm0, dword [rdi + 0x2a0]
test rax, rax
je 0x18000c5e4
mulss xmm0, dword [rax + 0x2a0]
movss xmm2, dword [rcx + 0x1594]
addss xmm2, xmm2
addss xmm2, xmm0
movss xmm1, dword [rdi + 0x10]
addss xmm2, dword [rdi + 0x14]
movaps xmm0, xmm1
addss xmm0, dword [rdi + 0x20]
subss xmm2, dword [rdi + 0x14]
subss xmm0, xmm1
movss dword [rsp + 0x3c], xmm2
movss dword [rsp + 0x38], xmm0
jmp 0x18000c627
movsd xmm0, qword [rax]
movsd qword [rsp + 0x38], xmm0
mov edx, dword [rdi + 0xc]
lea rax, [rsp + 0x38]
movsd xmm0, qword [rax]
mov rax, qword [0x18005bb00]
movsd qword [rdi + 0x18], xmm0
test dl, 1
je 0x18000c64a
movaps xmm1, xmm12
jmp 0x18000c67e
mov rcx, qword [rdi + 0x358]
movss xmm0, dword [rax + 0x1914]
mulss xmm0, dword [rdi + 0x2a0]
test rcx, rcx
je 0x18000c66e
mulss xmm0, dword [rcx + 0x2a0]
movss xmm1, dword [rax + 0x1594]
addss xmm1, xmm1
addss xmm1, xmm0
bt edx, 0xa
jae 0x18000c6c7
mov rcx, qword [rdi + 0x358]
movss xmm10, dword [rax + 0x1914]
mulss xmm10, dword [rdi + 0x2a0]
test rcx, rcx
je 0x18000c6ab
mulss xmm10, dword [rcx + 0x2a0]
movss xmm0, dword [rax + 0x1594]
addss xmm10, dword [rdi + 0x150]
addss xmm0, xmm0
addss xmm10, xmm0
jmp 0x18000c6cb
movaps xmm10, xmm12
cmp byte [rsp + 0x32], 0
addss xmm10, xmm1
movzx r12d, byte [rsp + 0x34]
je 0x18000c737
mov dword [rdi + 0x98], 0xffffffff
bt r14d, 0x1a
jae 0x18000c737
test r12b, r12b
jne 0x18000c737
cmp dword [rsi + 0x1b70], 0
jg 0x18000c716
mov r8d, 0x502
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rax, dword [rsi + 0x1b70]
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x1b78]
shl rcx, 4
movsd xmm0, qword [rcx + rax - 0x10]
movsd qword [rdi + 0x10], xmm0
bt r14d, 0x18
jae 0x18000c7e2
test r13, r13
je 0x18000c74e
cmp byte [r13 + 0x7e], 0
jne 0x18000c768
mov r8d, 0x159b
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str.parent_window__parent_window__Active
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rbx, [r13 + 0x158]
movzx eax, word [rbx]
mov word [rdi + 0x8a], ax
mov ecx, dword [rbx + 4]
mov r8d, dword [rbx]
cmp r8d, ecx
jne 0x18000c7ad
inc r8d
test ecx, ecx
je 0x18000c796
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18000c79b
mov eax, 8
cmp eax, r8d
mov rcx, rbx
cmovg r8d, eax
mov edx, r8d
call fcn.1800156c0
movsxd rcx, dword [rbx]
mov rax, qword [rbx + 8]
mov qword [rax + rcx*8], rdi
inc dword [rbx]
mov ebx, dword [rsp + 0x54]
bt r14d, 0x1a
jb 0x18000c7e6
test r12b, r12b
jne 0x18000c7e6
cmp ebx, 0x3000000
je 0x18000c7e6
movsd xmm0, qword [r13 + 0xd0]
movsd qword [rdi + 0x10], xmm0
jmp 0x18000c7e6
mov ebx, dword [rsp + 0x54]
movss xmm7, dword [rdi + 0xb0]
ucomiss xmm7, dword [0x18005488c]
jp 0x18000c7fd
je 0x18000c8ef
cmp dword [rdi + 0xa0], 0
jne 0x18000c8ef
movss xmm1, dword [rdi + 0xb8]
movss xmm6, dword [rdi + 0x24]
movss xmm4, dword [rdi + 0xb4]
and dword [rdi + 0xa4], 0xfffffff1
movss xmm3, dword [rdi + 0x10]
movss xmm5, dword [rdi + 0x14]
mov dword [rdi + 0xb0], 0x7f7fffff
mov dword [rdi + 0xb4], 0x7f7fffff
mulss xmm1, dword [rdi + 0x20]
mulss xmm6, dword [rdi + 0xbc]
subss xmm7, xmm1
subss xmm4, xmm6
cvttss2si eax, xmm7
movd xmm7, eax
cvtdq2ps xmm7, xmm7
cvttss2si eax, xmm4
movss dword [rdi + 0x10], xmm7
subss xmm7, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm0, xmm7
movss dword [rdi + 0x14], xmm2
subss xmm2, xmm5
addss xmm0, dword [rdi + 0xd0]
movaps xmm1, xmm2
addss xmm1, dword [rdi + 0xd4]
movss dword [rdi + 0xd0], xmm0
movaps xmm0, xmm7
addss xmm0, dword [rdi + 0xe8]
addss xmm7, dword [rdi + 0xe0]
movss dword [rdi + 0xd4], xmm1
movaps xmm1, xmm2
addss xmm1, dword [rdi + 0xec]
addss xmm2, dword [rdi + 0xe4]
movss dword [rdi + 0xe8], xmm0
movss dword [rdi + 0xe0], xmm7
movss dword [rdi + 0xec], xmm1
movss dword [rdi + 0xe4], xmm2
jmp 0x18000c932
bt r14d, 0x1c
jb 0x18000c91d
bt r14d, 0x1a
jae 0x18000c909
test r12b, r12b
jne 0x18000c909
cmp dword [rsp + 0x40], 0
jg 0x18000c91d
bt r14d, 0x19
jae 0x18000c932
test r12b, r12b
jne 0x18000c932
cmp ebx, 0x3000000
je 0x18000c932
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.180010470
movsd xmm0, qword [rax]
movsd qword [rdi + 0x10], xmm0
mov rax, qword [0x18005bb00]
movss dword [rbp - 0x60], xmm12
movss dword [rbp - 0x5c], xmm12
movss xmm3, dword [rax + 0x10]
movss xmm6, dword [rax + 0x14]
movss dword [rsp + 0x50], xmm3
movss dword [rbp - 0x58], xmm3
movss dword [rsp + 0x5c], xmm6
movss dword [rbp - 0x54], xmm6
test r12b, r12b
jne 0x18000ca87
bt r14d, 0x18
jb 0x18000ca87
cmp byte [rdi + 0x94], r12b
jg 0x18000ca87
cmp byte [rdi + 0x95], r12b
jg 0x18000ca87
movss xmm0, dword [rsi + 0x10]
comiss xmm0, xmm12
jbe 0x18000ca87
movss xmm0, dword [rsi + 0x14]
comiss xmm0, xmm12
jbe 0x18000ca87
movss xmm5, dword [rsi + 0x15f0]
movss xmm4, dword [rsi + 0x15ec]
maxss xmm5, dword [rsi + 0x15f8]
maxss xmm4, dword [rsi + 0x15f4]
cmp byte [rax + 0xcc], r12b
je 0x18000ca27
test byte [rdi + 0xc], 1
jne 0x18000ca27
mov rcx, qword [rdi + 0x358]
movss xmm0, dword [rax + 0x1914]
mulss xmm0, dword [rdi + 0x2a0]
test rcx, rcx
je 0x18000ca04
mulss xmm0, dword [rcx + 0x2a0]
movss xmm1, dword [rax + 0x1594]
addss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [rdi + 0x18]
movss dword [rsp + 0x38], xmm0
movss dword [rsp + 0x3c], xmm1
jmp 0x18000ca32
movsd xmm0, qword [rdi + 0x18]
movsd qword [rsp + 0x38], xmm0
lea rax, [rsp + 0x38]
movss xmm1, dword [rax]
subss xmm3, xmm4
movss xmm2, dword [rax + 4]
addss xmm4, xmm12
movaps xmm0, xmm1
addss xmm0, dword [rdi + 0x10]
maxss xmm0, xmm4
subss xmm0, xmm1
movaps xmm1, xmm6
subss xmm1, xmm5
addss xmm5, xmm12
minss xmm3, xmm0
movaps xmm0, xmm2
addss xmm0, dword [rdi + 0x14]
movss dword [rdi + 0x10], xmm3
maxss xmm0, xmm5
subss xmm0, xmm2
minss xmm1, xmm0
movss dword [rdi + 0x14], xmm1
cvttss2si eax, dword [rdi + 0x10]
movd xmm1, eax
cvttss2si eax, dword [rdi + 0x14]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
movss dword [rdi + 0x10], xmm1
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x14], xmm0
bt r14d, 0x18
jae 0x18000caba
movss xmm2, dword [rsi + 0x1580]
jmp 0x18000cadb
mov eax, r14d
and eax, 0xc000000
cmp eax, 0x4000000
jne 0x18000cad3
movss xmm2, dword [rsi + 0x1588]
jmp 0x18000cadb
movss xmm2, dword [rsi + 0x1564]
xor cl, cl
movss dword [rdi + 0x40], xmm2
mov dword [rsp + 0x40], ecx
cmp byte [rsp + 0x32], cl
je 0x18000cb17
bt r14d, 0xc
jb 0x18000cb17
bt r14d, 0x1a
jae 0x18000cb01
mov byte [rsp + 0x40], 1
jmp 0x18000cb17
test r14d, 0x3000000
movzx ecx, cl
mov eax, 1
cmove ecx, eax
mov dword [rsp + 0x40], ecx
addss xmm2, dword [0x1800547c4]
xorps xmm0, xmm0
mov dword [rsp + 0x58], 0xffffffff
movups xmmword [rbp - 0x50], xmm0
xor r12d, r12d
movss xmm0, dword [rsi + 0x1910]
cmp byte [rsi + 0xcb], r12b
movaps xmm1, xmm0
mulss xmm0, dword [0x180054780]
setne r12b
cmp byte [rdi + 0x81], 0
mulss xmm1, dword [0x1800547d4]
addss xmm2, xmm0
maxss xmm1, xmm2
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x38], xmm0
jne 0x18000cba6
lea rax, [rbp - 0x50]
mov rcx, rdi
lea r9d, [r12 + 1]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
call fcn.18000a0a0
test al, al
je 0x18000cba6
mov r15b, 1
movzx ecx, r15b
jmp 0x18000cbab
movzx ecx, byte [rsp + 0x31]
cmp byte [rdi + 0x81], 0
movzx eax, byte [rsp + 0x58]
mov byte [rdi + 0x87], al
jne 0x18000ccea
cmp qword [rsp + 0x68], 0
movss xmm2, dword [rdi + 0x208]
movss xmm3, dword [rdi + 0x20c]
subss xmm2, dword [rdi + 0x200]
subss xmm3, dword [rdi + 0x204]
movss xmm4, dword [rdi + 0x24]
movss xmm5, dword [rdi + 0x20]
subss xmm4, xmm10
addss xmm2, dword [rdi + 0x74]
addss xmm3, dword [rdi + 0x78]
jne 0x18000cc12
mov qword [rbp - 0x78], 0
lea rax, [rbp - 0x78]
jmp 0x18000cc3c
movss xmm0, dword [rdi + 0x38]
lea rax, [rbp - 0x70]
movss xmm1, dword [rdi + 0x3c]
addss xmm0, xmm0
addss xmm1, xmm1
addss xmm0, dword [rdi + 0x28]
addss xmm1, dword [rdi + 0x2c]
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm1
movss xmm6, dword [rax]
movss xmm1, dword [rax + 4]
test cl, cl
jne 0x18000cc4c
movaps xmm5, xmm2
test r15b, r15b
jne 0x18000cc54
movaps xmm4, xmm3
bt r14d, 0xe
jb 0x18000cc6a
comiss xmm1, xmm4
jbe 0x18000cc66
test r14b, 8
je 0x18000cc6a
xor cl, cl
jmp 0x18000cc6c
mov cl, 1
mov byte [rdi + 0x7d], cl
bt r14d, 0xf
jb 0x18000ccaa
test cl, cl
je 0x18000cc84
movss xmm0, dword [rsi + 0x15c0]
jmp 0x18000cc88
movaps xmm0, xmm12
subss xmm5, xmm0
comiss xmm6, xmm5
jbe 0x18000cca0
mov eax, r14d
and eax, 0x808
cmp eax, 0x800
je 0x18000ccaa
mov byte [rdi + 0x7c], 0
movaps xmm1, xmm12
jmp 0x18000ccce
mov byte [rdi + 0x7c], 1
test cl, cl
jne 0x18000ccc6
comiss xmm1, xmm4
jbe 0x18000ccc1
test r14b, 8
jne 0x18000ccc1
mov cl, 1
jmp 0x18000ccc3
xor cl, cl
mov byte [rdi + 0x7d], cl
movss xmm1, dword [rsi + 0x15c0]
test cl, cl
je 0x18000ccdc
movss xmm0, dword [rsi + 0x15c0]
jmp 0x18000cce0
movaps xmm0, xmm12
movss dword [rdi + 0x74], xmm0
movss dword [rdi + 0x78], xmm1
mov eax, r14d
and eax, 0x5000000
cmp eax, 0x1000000
jne 0x18000cd08
lea rax, [r13 + 0x230]
cmp ebx, 0x3000000
jne 0x18000cd0c
lea rax, [rbp - 0x60]
test byte [rdi + 0xc], 1
movss xmm4, dword [rdi + 0x10]
movss xmm3, dword [rdi + 0x14]
movaps xmm1, xmm4
addss xmm1, dword [rdi + 0x18]
movups xmm6, xmmword [rax]
mov rcx, qword [0x18005bb00]
movaps xmm2, xmm3
movss dword [rsp + 0x48], xmm4
addss xmm2, dword [rdi + 0x1c]
je 0x18000cd42
movaps xmm15, xmm12
jmp 0x18000cd79
mov rax, qword [rdi + 0x358]
movss xmm0, dword [rcx + 0x1914]
mulss xmm0, dword [rdi + 0x2a0]
test rax, rax
je 0x18000cd66
mulss xmm0, dword [rax + 0x2a0]
movss xmm15, dword [rcx + 0x1594]
addss xmm15, xmm15
addss xmm15, xmm0
movss xmm5, dword [rdi + 0x14]
addss xmm15, xmm3
movss dword [rsp + 0x70], xmm4
movaps xmm0, xmm4
addss xmm0, dword [rdi + 0x20]
movss dword [rsp + 0x68], xmm5
movaps xmm13, xmm10
movss dword [rsp + 0x74], xmm5
mov eax, r14d
movss dword [rsp + 0x7c], xmm15
movaps xmm5, xmm6
shufps xmm5, xmm6, 0xff
and eax, 0x401
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x78], xmm0
movss dword [rdi + 0x1f0], xmm4
movaps xmm4, xmm6
movss dword [rdi + 0x1f4], xmm3
movss dword [rdi + 0x1f8], xmm1
movss dword [rdi + 0x1fc], xmm2
movss xmm0, dword [rdi + 0x1f0]
shufps xmm4, xmm6, 0x55
maxss xmm0, xmm6
maxss xmm3, xmm4
movss dword [rdi + 0x1f0], xmm0
movss dword [rdi + 0x1f4], xmm3
movaps xmm3, xmm6
movss xmm1, dword [rdi + 0x1f8]
movss xmm0, dword [rdi + 0x1fc]
shufps xmm3, xmm6, 0xaa
minss xmm0, xmm5
minss xmm1, xmm3
movss dword [rdi + 0x1fc], xmm0
movss dword [rdi + 0x1f8], xmm1
movss xmm8, dword [rdi + 0x10]
movss xmm9, dword [rdi + 0x14]
movaps xmm11, xmm8
movss dword [rdi + 0x200], xmm8
addss xmm13, xmm9
addss xmm11, dword [rdi + 0x18]
addss xmm9, dword [rdi + 0x1c]
movss dword [rdi + 0x204], xmm13
subss xmm11, dword [rdi + 0x74]
subss xmm9, dword [rdi + 0x78]
movss dword [rdi + 0x208], xmm11
movss dword [rdi + 0x20c], xmm9
cmp eax, 1
jne 0x18000ce96
movss xmm7, dword [rdi + 0x44]
jmp 0x18000ce9e
movss xmm7, dword [rsi + 0x159c]
movss xmm14, dword [0x180054798]
xorps xmm1, xmm1
movss xmm0, dword [rdi + 0x38]
addss xmm8, xmm14
mulss xmm0, xmm14
addss xmm13, xmm14
addss xmm11, xmm14
addss xmm9, xmm14
cvttss2si eax, xmm0
xorps xmm0, xmm0
addss xmm13, xmm7
subss xmm9, dword [rdi + 0x44]
cvtsi2ss xmm1, eax
maxss xmm1, dword [rdi + 0x44]
addss xmm8, xmm1
subss xmm11, xmm1
cvttss2si eax, xmm8
xorps xmm8, xmm8
cvtsi2ss xmm8, eax
cvttss2si eax, xmm13
movss dword [rdi + 0x210], xmm8
cvtsi2ss xmm0, eax
cvttss2si eax, xmm11
movss dword [rdi + 0x214], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
cvttss2si eax, xmm9
movss dword [rdi + 0x218], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
movss dword [rdi + 0x21c], xmm0
movss xmm0, dword [rdi + 0x214]
comiss xmm4, xmm0
jbe 0x18000cf4f
movaps xmm1, xmm4
jmp 0x18000cf56
movaps xmm1, xmm5
minss xmm1, xmm0
comiss xmm6, xmm8
jbe 0x18000cf61
movaps xmm0, xmm6
jmp 0x18000cf69
movaps xmm0, xmm3
minss xmm0, xmm8
movss dword [rdi + 0x210], xmm0
movss dword [rdi + 0x214], xmm1
movss xmm0, dword [rdi + 0x21c]
comiss xmm4, xmm0
ja 0x18000cf8d
minss xmm5, xmm0
movaps xmm4, xmm5
movss xmm0, dword [rdi + 0x218]
comiss xmm6, xmm0
jbe 0x18000cf9f
movaps xmm3, xmm6
jmp 0x18000cfa3
minss xmm3, xmm0
movss dword [rdi + 0x218], xmm3
movss dword [rdi + 0x21c], xmm4
movss xmm0, dword [rdi + 0x18]
comiss xmm0, xmm12
jbe 0x18000cfd1
test r14d, 0x2000040
jne 0x18000cfd1
mulss xmm0, dword [0x1800547a0]
jmp 0x18000cfe1
movss xmm0, dword [rsi + 0x1910]
mulss xmm0, dword [0x18005481c]
cvttss2si eax, xmm0
mov rcx, rdi
mov r8b, 1
mov rdx, rdi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rcx + 0x258], xmm0
lea rcx, [rbp - 0x80]
movss xmm0, dword [rdi + 0x208]
subss xmm0, dword [rdi + 0x200]
movss xmm1, dword [rdi + 0x38]
movss xmm2, dword [rdi + 0x3c]
addss xmm1, xmm1
addss xmm2, xmm2
addss xmm1, dword [rdi + 0x28]
addss xmm2, dword [rdi + 0x2c]
subss xmm1, xmm0
movaps xmm0, xmm12
maxss xmm0, xmm1
movss dword [rdi + 0x5c], xmm0
movss xmm0, dword [rdi + 0x20c]
subss xmm0, dword [rdi + 0x204]
subss xmm2, xmm0
movaps xmm0, xmm12
maxss xmm0, xmm2
movss dword [rdi + 0x60], xmm0
call fcn.18000f680
mov rcx, qword [rdi + 0x2a8]
movsd xmm0, qword [rax]
movsd qword [rdi + 0x54], xmm0
mov dword [rdi + 0x64], 0x7f7fffff
mov dword [rdi + 0x68], 0x7f7fffff
call fcn.18001dc00
mov rax, qword [rsi + 0x1908]
mov rcx, qword [rdi + 0x2a8]
mov rdx, qword [rax + 0x48]
mov rdx, qword [rdx + 8]
call fcn.18001e380
mov rcx, qword [0x18005bb00]
movaps xmm0, xmm6
unpckhpd xmm0, xmm6
xor r9d, r9d
movq r8, xmm0
movq rdx, xmm6
mov rax, qword [rcx + 0x1a18]
mov byte [rax + 0x80], 1
mov rbx, qword [rcx + 0x1a18]
mov rcx, qword [rbx + 0x2a8]
call fcn.18001e190
mov r15, qword [rbx + 0x2a8]
cmp dword [r15 + 0x60], 0
jg 0x18000d106
mov r8d, 0x502
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x68]
movsxd rcx, dword [r15 + 0x60]
add rcx, rcx
movss xmm0, dword [rax + rcx*8 - 0xc]
movss xmm1, dword [rax + rcx*8 - 8]
movss xmm2, dword [rax + rcx*8 - 4]
mov eax, dword [rax + rcx*8 - 0x10]
mov dword [rbx + 0x230], eax
movss dword [rbx + 0x234], xmm0
movss dword [rbx + 0x238], xmm1
movss dword [rbx + 0x23c], xmm2
bt r14d, 0x1b
jae 0x18000d1a7
mov r8, qword [0x18005bb00]
mov eax, dword [r8 + 0x1b60]
sub eax, 1
js 0x18000d193
mov r8, qword [r8 + 0x1b68]
movsxd rdx, eax
add r8, 8
lea rcx, [rdx + rdx*2]
shl rcx, 4
add r8, rcx
mov rax, qword [r8]
test rax, rax
je 0x18000d189
test dword [rax + 0xc], 0x8000000
jne 0x18000d195
sub r8, 0x30
sub rdx, 1
jns 0x18000d178
xor eax, eax
cmp rdi, rax
jne 0x18000d1a7
cmp dword [rdi + 0xa0], 0
jg 0x18000d1a7
mov al, 1
jmp 0x18000d1a9
xor al, al
mov rcx, qword [rsi + 0x1bd0]
test rcx, rcx
je 0x18000d1c2
cmp rdi, qword [rcx + 0x360]
jne 0x18000d1c2
mov bl, 1
jmp 0x18000d1c4
xor bl, bl
test al, al
jne 0x18000d1d0
test bl, bl
je 0x18000d2cd
movss xmm1, dword [rsi + 0x1d38]
movzx ecx, al
add ecx, 0x2e
call fcn.180002da0
mov rcx, qword [rdi + 0x2a8]
lea rdx, [rbp - 0x60]
mov r9d, eax
mov dword [rsp + 0x28], 0xf
lea r8, [rbp - 0x58]
movss dword [rsp + 0x20], xmm12
call fcn.180020490
test bl, bl
je 0x18000d2cd
movss xmm13, dword [rsp + 0x50]
cmp rdi, qword [rsi + 0x1bd0]
jne 0x18000d2d4
movss xmm0, dword [rsi + 0x1910]
movss xmm2, dword [rdi + 0x10]
movss xmm3, dword [rdi + 0x14]
movaps xmm1, xmm2
addss xmm2, dword [rdi + 0x18]
movaps xmm4, xmm3
subss xmm1, xmm0
addss xmm3, dword [rdi + 0x1c]
subss xmm4, xmm0
addss xmm2, xmm0
comiss xmm12, xmm1
addss xmm3, xmm0
movss dword [rbp - 0x60], xmm1
movss dword [rbp - 0x58], xmm2
movss dword [rbp - 0x5c], xmm4
movss dword [rbp - 0x54], xmm3
jb 0x18000d284
comiss xmm12, xmm4
jb 0x18000d284
comiss xmm2, xmm13
jb 0x18000d284
comiss xmm3, dword [rsp + 0x5c]
jae 0x18000d2d4
movss xmm1, dword [rsi + 0x1be4]
mov ecx, 0x2d
mulss xmm1, dword [0x180054784]
call fcn.180002da0
movss xmm0, dword [rsi + 0x1564]
lea r8, [rbp - 0x58]
mov rcx, qword [rdi + 0x2a8]
lea rdx, [rbp - 0x60]
mov r9d, eax
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm0
call fcn.180020490
jmp 0x18000d2d4
movss xmm13, dword [rsp + 0x50]
mov eax, r14d
xor r15b, r15b
and eax, 0x5000000
cmp eax, 0x1000000
jne 0x18000d33f
cmp dword [rsp + 0x54], 0x3000000
je 0x18000d33f
mov rbx, qword [rdi + 0x2a8]
cmp dword [rbx], 0
jg 0x18000d316
mov r8d, 0x502
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rax, dword [rbx]
imul rcx, rax, 0x38
mov rax, qword [rbx + 8]
cmp dword [rcx + rax - 0x38], 0
jne 0x18000d33f
mov rax, qword [r13 + 0x2a8]
cmp dword [rax + 0x20], 0
jle 0x18000d33f
mov r15b, 1
mov qword [rdi + 0x2a8], rax
mov rax, qword [rsi + 0x1bc8]
test rax, rax
jne 0x18000d352
mov rax, qword [rsi + 0x1b80]
cmp byte [rsp + 0x40], 0
jne 0x18000d373
test rax, rax
je 0x18000d36e
mov rax, qword [rax + 0x368]
cmp qword [rdi + 0x368], rax
je 0x18000d373
xor r8b, r8b
jmp 0x18000d376
mov r8b, 1
movss xmm0, dword [rsp + 0x38]
lea rax, [rbp - 0x50]
movss dword [rsp + 0x28], xmm0
lea r9d, [r12 + 1]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.18000ae40
test r15b, r15b
je 0x18000d3b0
lea rax, [rdi + 0x2b0]
mov qword [rdi + 0x2a8], rax
cmp qword [rsi + 0x1bd0], rdi
jne 0x18000d50f
movss xmm1, dword [rsi + 0x1910]
movss xmm7, dword [rdi + 0x10]
movss xmm6, dword [rdi + 0x14]
movaps xmm9, xmm7
addss xmm7, dword [rdi + 0x18]
movss xmm2, dword [rdi + 0x40]
subss xmm9, xmm1
movaps xmm8, xmm6
movaps xmm11, xmm2
addss xmm6, dword [rdi + 0x1c]
maxss xmm11, dword [rsi + 0x1564]
subss xmm8, xmm1
comiss xmm12, xmm9
addss xmm7, xmm1
addss xmm6, xmm1
jb 0x18000d44c
comiss xmm12, xmm8
jb 0x18000d44c
comiss xmm7, xmm13
jb 0x18000d44c
comiss xmm6, dword [rsp + 0x5c]
jb 0x18000d44c
xorps xmm1, xmmword [0x1800549a0]
movaps xmm11, xmm2
subss xmm1, dword [0x1800547c4]
movaps xmm0, xmm1
subss xmm9, xmm1
subss xmm8, xmm1
addss xmm0, xmm7
addss xmm1, xmm6
movaps xmm7, xmm0
movaps xmm6, xmm1
movss xmm1, dword [rsi + 0x1be4]
mov ecx, 0x2d
call fcn.180002da0
mov rbx, qword [rdi + 0x2a8]
mov r15d, eax
test eax, 0xff000000
je 0x18000d50f
test byte [rbx + 0x30], 1
addss xmm9, xmm14
addss xmm8, xmm14
mov dword [rsp + 0x20], 0xffffffff
movaps xmm3, xmm11
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x5c]
mov rcx, rbx
movss dword [rsp + 0x5c], xmm9
movss dword [rsp + 0x60], xmm8
je 0x18000d4b6
subss xmm7, xmm14
subss xmm6, xmm14
jmp 0x18000d4c6
subss xmm7, dword [0x180054794]
subss xmm6, dword [0x180054794]
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x3c], xmm6
call fcn.18001fe50
movss xmm0, dword [0x1800547f0]
mov r9d, r15d
mov r8d, dword [rbx + 0x80]
mov rcx, rbx
mov rdx, qword [rbx + 0x88]
movss dword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 1
call fcn.18001e650
xor r15d, r15d
mov dword [rbx + 0x80], r15d
jmp 0x18000d512
xor r15d, r15d
movss xmm6, dword [rdi + 0x30]
mov ecx, r14d
movaps xmm14, xmmword [rsp + 0xe0]
shr ecx, 3
not cl
and cl, 1
ucomiss xmm6, xmm12
jp 0x18000d56c
jne 0x18000d56c
mov eax, r14d
and eax, 0x808
cmp eax, 0x800
jne 0x18000d54a
movss xmm8, dword [rdi + 0x28]
jmp 0x18000d54e
movaps xmm8, xmm12
movss xmm0, dword [rdi + 0x38]
movss xmm1, dword [rdi + 0x18]
addss xmm0, xmm0
subss xmm1, xmm0
subss xmm1, dword [rdi + 0x74]
maxss xmm8, xmm1
jmp 0x18000d570
movaps xmm8, xmm6
movss xmm5, dword [rdi + 0x34]
ucomiss xmm5, xmm12
jp 0x18000d5ae
jne 0x18000d5ae
test cl, cl
je 0x18000d588
movss xmm7, dword [rdi + 0x2c]
jmp 0x18000d58c
movaps xmm7, xmm12
movss xmm0, dword [rdi + 0x3c]
movss xmm1, dword [rdi + 0x1c]
addss xmm0, xmm0
subss xmm1, xmm0
subss xmm1, xmm10
subss xmm1, dword [rdi + 0x78]
maxss xmm7, xmm1
jmp 0x18000d5b1
movaps xmm7, xmm5
ucomiss xmm6, xmm12
movss xmm4, dword [rdi + 0x38]
movss xmm11, dword [rdi + 0x54]
movaps xmm0, xmm4
maxss xmm0, dword [rdi + 0x44]
movss xmm1, dword [rdi + 0x200]
movss xmm9, dword [rdi + 0x3c]
subss xmm1, xmm11
movss xmm13, dword [rdi + 0x58]
addss xmm1, xmm0
movaps xmm0, xmm9
maxss xmm0, dword [rdi + 0x44]
cvttss2si eax, xmm1
movss xmm1, dword [rdi + 0x204]
subss xmm1, xmm13
movd xmm3, eax
cvtdq2ps xmm3, xmm3
addss xmm1, xmm0
movss dword [rdi + 0x220], xmm3
addss xmm3, xmm8
movaps xmm8, xmmword [rsp + 0x140]
cvttss2si eax, xmm1
movss dword [rdi + 0x228], xmm3
movss xmm3, dword [rdi + 0x10]
movaps xmm1, xmm3
subss xmm1, xmm11
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm1, xmm4
movss dword [rdi + 0x224], xmm2
addss xmm2, xmm7
movss xmm7, dword [rdi + 0x14]
movss dword [rdi + 0x240], xmm1
movss dword [rdi + 0x22c], xmm2
movaps xmm2, xmm7
subss xmm2, xmm13
addss xmm2, xmm9
addss xmm2, xmm10
movss dword [rdi + 0x244], xmm2
jp 0x18000d698
jne 0x18000d698
movss xmm6, dword [rdi + 0x18]
movaps xmm0, xmm4
addss xmm0, xmm4
subss xmm6, xmm0
subss xmm6, dword [rdi + 0x74]
ucomiss xmm5, xmm12
addss xmm1, xmm6
movaps xmm6, xmmword [rsp + 0x160]
movss dword [rdi + 0x248], xmm1
jp 0x18000d6d0
jne 0x18000d6d0
movss xmm5, dword [rdi + 0x1c]
movaps xmm0, xmm9
addss xmm0, xmm9
subss xmm5, xmm0
subss xmm5, xmm10
subss xmm5, dword [rdi + 0x78]
mov qword [rdi + 0x1e0], 0
addss xmm10, xmm9
movaps xmm9, xmmword [rsp + 0x130]
addss xmm4, xmm12
addss xmm2, xmm5
subss xmm10, xmm13
movaps xmm13, xmmword [rsp + 0xf0]
subss xmm4, xmm11
movaps xmm11, xmmword [rsp + 0x110]
movss dword [rdi + 0x24c], xmm2
addss xmm10, xmm7
movaps xmm7, xmmword [rsp + 0x150]
movss dword [rdi + 0x1dc], xmm4
addss xmm4, xmm12
movss dword [rdi + 0xe4], xmm10
movss dword [rdi + 0xd4], xmm10
addss xmm4, xmm3
movss dword [rdi + 0xdc], xmm10
movss dword [rdi + 0xe0], xmm4
movss dword [rdi + 0xd0], xmm4
movss dword [rdi + 0xd8], xmm4
movss dword [rdi + 0xe8], xmm4
movss dword [rdi + 0xec], xmm10
movaps xmm10, xmmword [rsp + 0x120]
mov qword [rdi + 0xf8], 0
mov qword [rdi + 0xf0], 0
mov qword [rdi + 0x100], 0
mov byte [rdi + 0x148], 0
movss xmm0, dword [rdi + 0x60]
comiss xmm0, xmm12
seta al
mov byte [rdi + 0x149], al
mov eax, dword [rdi + 0x144]
mov dword [rdi + 0x140], eax
mov dword [rdi + 0x144], r15d
mov byte [rdi + 0x14a], 0
mov ecx, dword [rdi + 0x15c]
test ecx, ecx
jns 0x18000d7fc
mov eax, ecx
cdq
sub eax, edx
mov edx, r15d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x158]
test eax, eax
cmovg edx, eax
call fcn.1800156c0
mov dword [rdi + 0x158], r15d
mov eax, 1
mov dword [rdi + 0x170], eax
test r13, r13
je 0x18000d834
mov eax, dword [r13 + 0x170]
mov dword [rdi + 0x174], eax
mov qword [rdi + 0x178], 0xffffffffffffffff
mov eax, dword [r13 + 0x180]
jmp 0x18000d848
mov dword [rdi + 0x174], eax
mov eax, r15d
mov qword [rdi + 0x178], 0xffffffffffffffff
mov dword [rdi + 0x180], eax
mov eax, dword [rdi + 0x258]
mov dword [rdi + 0x184], eax
mov dword [rdi + 0x188], 0xbf800000
mov ecx, dword [rdi + 0x194]
test ecx, ecx
jns 0x18000d88b
mov eax, ecx
cdq
sub eax, edx
mov edx, r15d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x190]
test eax, eax
cmovg edx, eax
call fcn.180015c10
mov dword [rdi + 0x190], r15d
mov ecx, dword [rdi + 0x1a4]
test ecx, ecx
jns 0x18000d924
mov eax, ecx
mov ebx, r15d
cdq
sub eax, edx
sar eax, 1
add eax, ecx
test eax, eax
cmovg ebx, eax
cmp ebx, ecx
jle 0x18000d924
mov rax, qword [0x18005bb00]
test rax, rax
je 0x18000d8c7
inc dword [rax + 0x3bc]
movsxd rcx, ebx
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, qword [rdi + 0x1a8]
mov r12, rax
test r15, r15
je 0x18000d914
movsxd r8, dword [rdi + 0x1a0]
mov rdx, r15
shl r8, 2
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x18005bb00]
test rdx, rdx
je 0x18000d90b
dec dword [rdx + 0x3bc]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rdi + 0x1a8], r12
xor r15d, r15d
mov dword [rdi + 0x1a4], ebx
mov dword [rdi + 0x1a0], r15d
mov ecx, dword [rdi + 0x1b4]
test ecx, ecx
jns 0x18000d9bd
mov eax, ecx
mov ebx, r15d
cdq
sub eax, edx
sar eax, 1
add eax, ecx
test eax, eax
cmovg ebx, eax
cmp ebx, ecx
jle 0x18000d9bd
mov rax, qword [0x18005bb00]
test rax, rax
je 0x18000d960
inc dword [rax + 0x3bc]
movsxd rcx, ebx
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, qword [rdi + 0x1b8]
mov r12, rax
test r15, r15
je 0x18000d9ad
movsxd r8, dword [rdi + 0x1b0]
mov rdx, r15
shl r8, 2
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x18005bb00]
test rdx, rdx
je 0x18000d9a4
dec dword [rdx + 0x3bc]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rdi + 0x1b8], r12
xor r15d, r15d
mov dword [rdi + 0x1b4], ebx
mov dword [rdi + 0x1b0], r15d
lea rax, [rdi + 0x280]
mov qword [rdi + 0x1e8], r15
lea rcx, [rdi + 0x1c0]
mov qword [rdi + 0x108], 0
xor edx, edx
mov qword [rdi + 0x168], rax
call fcn.1800152d0
cmp byte [rsp + 0x32], 0
movss xmm0, dword [rsi + 0x15a0]
movss dword [rdi + 0x25c], xmm0
mov qword [rdi + 0x260], 0
je 0x18000da23
xor eax, eax
mov qword [rdi + 0x274], rax
mov dword [rdi + 0x27c], eax
movss xmm1, dword [rdi + 0x260]
cvttss2si eax, xmm1
addss xmm1, dword [rdi + 0x274]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x268], xmm0
movss dword [rdi + 0x260], xmm1
mov dword [rdi + 0x274], r15d
movss xmm0, dword [rdi + 0x278]
comiss xmm0, xmm12
jbe 0x18000da7b
movss xmm0, dword [rdi + 0x260]
addss xmm0, dword [rdi + 0x25c]
movss dword [rdi + 0x260], xmm0
movss xmm1, dword [rdi + 0x260]
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x26c], xmm0
addss xmm1, dword [rdi + 0x278]
movss dword [rdi + 0x260], xmm1
mov dword [rdi + 0x278], r15d
movss xmm0, dword [rdi + 0x27c]
comiss xmm0, xmm12
jbe 0x18000dac3
addss xmm1, dword [rdi + 0x25c]
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x270], xmm0
addss xmm1, dword [rdi + 0x27c]
movss dword [rdi + 0x260], xmm1
mov dword [rdi + 0x27c], r15d
bt r14d, 0x18
jae 0x18000db56
mov eax, dword [r13 + 0x180]
cmp dword [rdi + 0x180], eax
je 0x18000db56
lea rbx, [rdi + 0x190]
mov dword [rdi + 0x180], eax
mov ecx, dword [rbx + 4]
mov r8d, dword [rbx]
cmp r8d, ecx
jne 0x18000db44
inc r8d
test ecx, ecx
je 0x18000db2d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18000db32
mov eax, 8
cmp eax, r8d
mov rcx, rbx
cmovg r8d, eax
mov edx, r8d
call fcn.180015c10
movsxd rdx, dword [rbx]
mov eax, dword [rdi + 0x180]
mov rcx, qword [rbx + 8]
mov dword [rcx + rdx*4], eax
inc dword [rbx]
movzx eax, byte [rdi + 0x94]
test al, al
jle 0x18000db69
dec al
mov byte [rdi + 0x94], al
movzx eax, byte [rdi + 0x95]
test al, al
jle 0x18000db7c
dec al
mov byte [rdi + 0x95], al
cmp byte [rsp + 0x40], 0
je 0x18000db95
mov rcx, rdi
call fcn.18000dff0
xor edx, edx
mov rcx, rdi
call fcn.1800110e0
test r14b, 1
jne 0x18000dbac
mov r8, qword [rbp - 0x68]
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.18000b460
mov eax, dword [rdi + 0x4c]
movss xmm4, dword [rsp + 0x68]
movss xmm3, dword [rsp + 0x58]
mov dword [rdi + 0x110], eax
mov rax, qword [0x18005bb00]
movss xmm0, dword [rax + 0x15b4]
movss xmm1, dword [rax + 0x15b0]
addss xmm15, xmm0
movss xmm2, dword [rax + 0x130]
subss xmm4, xmm0
movss xmm0, dword [rsp + 0x48]
addss xmm3, xmm1
subss xmm0, xmm1
comiss xmm2, xmm0
jb 0x18000dc1d
movss xmm0, dword [rax + 0x134]
comiss xmm0, xmm4
jb 0x18000dc1d
comiss xmm3, xmm2
jbe 0x18000dc1d
comiss xmm15, xmm0
jbe 0x18000dc1d
mov ebx, 1
mov eax, ebx
jmp 0x18000dc25
mov eax, r15d
mov ebx, 1
movups xmm0, xmmword [rsp + 0x70]
mov dword [rdi + 0x114], eax
lea rdx, [rdi + 0x218]
lea rcx, [rdi + 0x210]
mov r8b, 1
movups xmmword [rdi + 0x118], xmm0
call fcn.180008230
movaps xmm15, xmmword [rsp + 0xd0]
mov byte [rdi + 0x80], 0
jmp 0x18000dcbd
mov rax, qword [0x18005bb00]
movss xmm0, dword [rax + 0x1914]
mov qword [rax + 0x1a18], rdi
mov rcx, qword [rdi + 0x358]
mulss xmm0, dword [rdi + 0x2a0]
test rcx, rcx
je 0x18000dc91
mulss xmm0, dword [rcx + 0x2a0]
lea rdx, [rdi + 0x218]
movss dword [rax + 0x1928], xmm0
lea rcx, [rdi + 0x210]
movss dword [rax + 0x1910], xmm0
movzx r8d, bl
call fcn.180008230
mov r13, qword [rsp + 0x48]
inc word [rdi + 0x88]
mov r12, qword [rsp + 0x188]
mov dword [rsi + 0x1ab8], r15d
mov r15, qword [rsp + 0x170]
bt r14d, 0x18
jae 0x18000dd7f
test r14b, 1
jne 0x18000dd06
mov r8d, 0x16d0
lea rdx, str.C:UsersOwnerDesktopHacksCrystallineMGCMImGui_DirectX_11_Kiero_Hookimguiimgui.cpp
lea rcx, str._flags__ImGuiWindowFlags_NoTitleBar____0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
test r14b, 0x40
jne 0x18000dd46
cmp byte [rdi + 0x94], 0
jg 0x18000dd46
cmp byte [rdi + 0x95], 0
jg 0x18000dd46
movss xmm0, dword [rdi + 0x1f0]
comiss xmm0, dword [rdi + 0x1f8]
jae 0x18000dd40
movss xmm0, dword [rdi + 0x1f4]
comiss xmm0, dword [rdi + 0x1fc]
jb 0x18000dd46
mov dword [rdi + 0x9c], ebx
test r13, r13
je 0x18000dd7f
cmp byte [r13 + 0x81], 0
jne 0x18000dd5f
cmp dword [r13 + 0x9c], 0
jle 0x18000dd65
mov dword [rdi + 0x9c], ebx
cmp byte [r13 + 0x81], 0
jne 0x18000dd79
cmp dword [r13 + 0xa0], 0
jle 0x18000dd7f
mov dword [rdi + 0xa0], ebx
comiss xmm12, dword [rsi + 0x1558]
mov rsi, qword [rsp + 0x1b8]
mov r14, qword [rsp + 0x178]
mov r13, qword [rsp + 0x180]
movaps xmm12, xmmword [rsp + 0x100]
jb 0x18000ddb0
mov dword [rdi + 0x9c], ebx
cmp dword [rdi + 0x9c], 0
jg 0x18000ddc6
cmp dword [rdi + 0xa0], 0
jg 0x18000ddc6
xor cl, cl
jmp 0x18000ddc8
mov cl, 1
xor al, al
mov byte [rdi + 0x85], cl
cmp byte [rdi + 0x81], al
jne 0x18000dde1
cmp byte [rdi + 0x7e], al
je 0x18000dde1
test cl, cl
je 0x18000ddfe
cmp byte [rdi + 0x94], al
jg 0x18000ddfe
cmp byte [rdi + 0x95], al
jg 0x18000ddfe
cmp dword [rdi + 0xa0], 0
movzx eax, al
cmovle eax, ebx
mov byte [rdi + 0x83], al
xor al, 1
mov rcx, qword [rbp - 0x40]
xor rcx, rsp
call fcn.180046cb0
add rsp, 0x190
pop rdi
pop rbx
pop rbp
ret