Function at 0x180029c30
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rsp + 0x70], xmm11
movaps xmmword [rsp + 0x60], xmm12
movaps xmmword [rsp + 0x50], xmm13
mov r13, rcx
mov qword [rsp + 0x30], rdx
mov edx, dword [0x18018d84c]
mov rax, qword gs:[0x58]
mov esi, 8
mov rbx, qword [rax + rdx*8]
xor edi, edi
mov eax, dword [rbx + rsi]
cmp dword [0x18018dce8], eax
jle 0x180029d41
lea rcx, [0x18018dce8]
call fcn.1800d0e78
cmp dword [0x18018dce8], 0xffffffff
jne 0x180029d41
xorps xmm0, xmm0
movdqu xmmword [0x18018da60], xmm0
mov qword [0x18018da70], rdi
mov ecx, 0x1927
call fcn.1800d118c
test rax, rax
je 0x180029e62
lea rdx, [rax + 0x27]
and rdx, 0xffffffffffffffe0
mov qword [rdx - 8], rax
mov qword [0x18018da60], rdx
lea rax, [rdx + 0x1900]
mov qword [0x18018da70], rax
mov eax, 0x190
nop dword [rax]
mov qword [rdx], rdi
mov qword [rdx + 8], rdi
add rdx, 0x10
sub rax, 1
jne 0x180029d10
mov qword [0x18018da68], rdx
lea rcx, [0x1800d71a0]
call fcn.1800d1600
nop
lea rcx, [0x18018dce8]
call fcn.1800d0e0c
mov eax, dword [rbx + rsi]
cmp dword [0x18018dcd8], eax
jle 0x180029ddd
lea rcx, [0x18018dcd8]
call fcn.1800d0e78
cmp dword [0x18018dcd8], 0xffffffff
jne 0x180029ddd
mov rax, qword [0x18018d8e8]
mov rsi, qword [0x18018da68]
mov rbx, qword [0x18018da60]
cmp rbx, rsi
je 0x180029dd1
cvttss2si ebp, dword [rax + 0x14]
cvttss2si r14d, dword [rax + 0x10]
add rbx, 4
nop
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv ebp
movd xmm6, edx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv r14d
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rbx - 4], xmm0
movss dword [rbx], xmm6
movss dword [rbx + 4], xmm0
movss dword [rbx + 8], xmm6
lea rbx, [rbx + 0x10]
lea rax, [rbx - 4]
cmp rax, rsi
jne 0x180029d90
lea rcx, [0x18018dcd8]
call fcn.1800d0e0c
mov rsi, qword [0x18018da68]
mov r10, qword [0x18018da60]
cmp r10, rsi
je 0x180029eee
lea rbx, [r10 + 4]
movss xmm12, dword [rsp + 0x34]
movss xmm13, dword [rsp + 0x30]
xorps xmm11, xmm11
movss xmm10, dword [0x1800ff2dc]
nop dword [rax]
nop word [rax + rax]
movss xmm8, dword [rbx - 4]
movss xmm6, dword [rbx + 4]
movaps xmm0, xmm8
subss xmm0, xmm6
movss xmm9, dword [rbx]
movss xmm7, dword [rbx + 8]
movaps xmm1, xmm9
subss xmm1, xmm7
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180029e69
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x180029e71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, xmm11
jbe 0x180029e9c
subss xmm6, xmm8
divss xmm6, xmm0
addss xmm6, xmm8
movss dword [rbx - 4], xmm6
subss xmm7, xmm9
divss xmm7, xmm0
addss xmm7, xmm9
movss dword [rbx], xmm7
comiss xmm10, xmm0
jbe 0x180029ed6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cvttss2si ecx, xmm12
cdq
idiv ecx
movd xmm6, edx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cvttss2si ecx, xmm13
cdq
idiv ecx
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rbx + 4], xmm0
movss dword [rbx + 8], xmm6
add rbx, 0x10
lea rax, [rbx - 4]
cmp rax, rsi
jne 0x180029e20
mov r10, qword [0x18018da60]
mov ebp, 1
movss xmm6, dword [0x1800ff398]
nop dword [rax + rax]
mov r15d, ebp
cmp ebp, 0x190
jge 0x180029fe1
lea rbx, [rdi + 0x10]
movsxd rsi, ebp
shl rsi, 4
mov r14d, 0x190
sub r14d, ebp
movss xmm1, dword [rdi + r10]
subss xmm1, dword [rbx + r10]
movss xmm0, dword [rdi + r10 + 4]
subss xmm0, dword [rbx + r10 + 4]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
comiss xmm6, xmm0
jbe 0x180029fc4
movd xmm0, dword [0x18018d8b8]
cvtdq2ps xmm0, xmm0
movd xmm1, dword [0x18018d8c0]
cvtdq2ps xmm1, xmm1
movd xmm2, dword [0x18018d8bc]
cvtdq2ps xmm2, xmm2
movss dword [rsp + 0x38], xmm0
movss dword [rsp + 0x3c], xmm1
movss dword [rsp + 0x40], xmm2
mov dword [rsp + 0x44], 0x437f0000
lea rcx, [rsp + 0x38]
call fcn.180062e20
mov r9d, eax
lea r8, [rsi + r10]
lea eax, [rbp - 1]
movsxd rdx, eax
shl rdx, 4
add rdx, r10
movss xmm0, dword [0x1800ff298]
movss dword [rsp + 0x20], xmm0
mov rcx, r13
call fcn.1800812b0
mov r10, qword [0x18018da60]
add rsi, 0x10
add rbx, 0x10
sub r14, 1
jne 0x180029f23
add rdi, 0x10
inc ebp
jmp 0x180029f00
add rdi, 0x10
inc ebp
cmp r15d, 0x190
jl 0x180029f00
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret