Function at 0x18004a490
Capabilities:
Access peb ldr_data
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x110
mov rax, qword [0x1802138c0]
xor rax, rsp
mov qword [rsp + 0x98], rax
movzx esi, dl
call fcn.180026500
xor r15d, r15d
movabs r12, 0xd80958fc74e988a6
mov rcx, r12
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.1800263a0
call fcn.180026500
mov rcx, qword [rax]
mov edi, dword [rcx]
test sil, sil
je 0x18004b121
mov edx, edi
call fcn.1800276e0
test al, al
je 0x18004a510
cmp byte [0x1802d95b0], r15b
jne 0x18004a51d
mov byte [0x1802d95b0], 1
jmp 0x18004a51d
cmp byte [0x1802d95b0], r15b
je 0x18004b115
mov ebx, dword [0x1802d95b4]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
movabs rcx, 0x7239b21a38f536ba
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov rcx, qword [rax]
cmp dword [rcx], r15d
je 0x18004ae3e
mov qword [rsp + 0x140], r13
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm8
movaps xmmword [rsp + 0xd0], xmm9
movaps xmmword [rsp + 0xc0], xmm10
movaps xmmword [rsp + 0xb0], xmm11
movaps xmmword [rsp + 0xa0], xmm12
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x837765a25378f0bb
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov ebx, dword [0x1802d95b8]
mov rcx, qword [rax]
movups xmm7, xmmword [rcx]
movsd xmm8, qword [rcx + 0x10]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm7
inc dword [rax + 8]
call fcn.180026500
movaps xmm6, xmm7
shufps xmm6, xmm7, 0xaa
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm6
inc dword [rax + 8]
call fcn.180026500
movsd qword [rsp + 0x60], xmm8
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm8
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x85973643155d0b07
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov ecx, dword [0x1802d95b4]
movaps xmm3, xmm8
movaps xmm2, xmm6
mov dword [rsp + 0x28], 1
movaps xmm1, xmm7
call fcn.18003f0a0
mov ebx, dword [0x1802d95b4]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x3fef770d40960d5a
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov rbx, qword [rax]
movsd xmm0, qword [rbx + 0x10]
xorps xmm1, xmm1
movups xmm12, xmmword [rbx]
movsd qword [rsp + 0x60], xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm8
cvtss2sd xmm1, xmm7
mulsd xmm0, qword [0x1801d4798]
mulsd xmm1, qword [0x1801d4798]
cvtpd2ps xmm6, xmm0
cvtpd2ps xmm10, xmm1
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movsd xmm9, qword [rbx + 0x10]
movaps xmm8, xmm0
andps xmm8, xmmword [0x1801d4d10]
movaps xmm0, xmm6
movups xmm11, xmm12
movaps xmmword [rsp + 0x70], xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movss xmm7, dword [0x1801d4764]
mulss xmm0, xmm8
mulss xmm0, xmm7
subss xmm11, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movss xmm6, dword [rsp + 0x78]
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm6, xmm0
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mov ecx, dword [0x1802d95b4]
movaps xmm2, xmm6
mulss xmm0, xmm7
movaps xmm1, xmm11
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
addss xmm9, xmm0
movaps xmm3, xmm9
call fcn.18003ef90
call fcn.180026500
movabs rcx, 0x719ff505f097fd20
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], edi
inc dword [rax + 8]
call fcn.180026500
movabs rbp, 0x5e6cc07646bbeab8
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
mov rcx, rbp
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], edi
inc dword [rax + 8]
call fcn.180026500
movabs r14, 0x428ca6dbd1094446
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
mov rcx, r14
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
movabs rcx, 0xafc4af510774b47
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.1800263a0
call fcn.180026500
movss xmm9, dword [0x1801d46d4]
movss xmm8, dword [0x1801d46fc]
movaps xmm3, xmm9
movss xmm7, dword [0x1801d4730]
movaps xmm2, xmm8
movss xmm10, dword [0x1801d4738]
movaps xmm1, xmm7
movaps xmm0, xmm10
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
call fcn.18003f780
movss xmm6, dword [0x1801d473c]
movaps xmm3, xmm9
movaps xmm1, xmm6
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm8
mov dword [rsp + 0x28], 0xff
movaps xmm0, xmm10
call fcn.18003f780
movaps xmm3, xmm8
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm9
mov dword [rsp + 0x28], 0xff
movaps xmm1, xmm10
movaps xmm0, xmm7
call fcn.18003f780
movaps xmm3, xmm8
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm9
mov dword [rsp + 0x28], 0xff
movaps xmm1, xmm10
movaps xmm0, xmm6
call fcn.18003f780
movss xmm7, dword [0x1801d4740]
movaps xmm3, xmm9
movaps xmm0, xmm7
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm8
mov dword [rsp + 0x28], 0xff
movaps xmm1, xmm10
call fcn.18003f780
movss xmm6, dword [0x1801d4728]
movaps xmm3, xmm9
movaps xmm0, xmm6
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm8
mov dword [rsp + 0x28], 0xff
movaps xmm1, xmm10
call fcn.18003f780
movaps xmm3, xmm8
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm9
mov dword [rsp + 0x28], 0xff
movaps xmm1, xmm7
movaps xmm0, xmm10
call fcn.18003f780
movaps xmm3, xmm8
mov dword [rsp + 0x30], 0xff
movaps xmm2, xmm9
mov dword [rsp + 0x28], 0xff
movaps xmm1, xmm6
movaps xmm0, xmm10
call fcn.18003f780
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
lea r8, str.CAMERA_secuirity
movabs r13, 0x2c933abf17a1df41
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov qword [rcx + rdx*8], r8
mov rcx, r13
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
movss xmm6, dword [0x1801d46f4]
movaps xmm3, xmm10
movss xmm7, dword [0x1801d4718]
movaps xmm2, xmm6
movaps xmm0, xmm7
mov dword [rsp + 0x30], 0xff
movaps xmm1, xmm10
mov dword [rsp + 0x28], 0xff
call fcn.18003f780
mov ecx, dword [0x1802d8bf4]
mov rax, qword gs:[0x58]
movaps xmm11, xmmword [rsp + 0xb0]
movaps xmm9, xmmword [rsp + 0xd0]
movaps xmm8, xmmword [rsp + 0xe0]
mov rax, qword [rax + rcx*8]
mov edx, 8
mov ecx, dword [rdx + rax]
cmp dword [0x1802d95bc], ecx
jle 0x18004aac2
lea rcx, [0x1802d95bc]
call fcn.180168e64
cmp dword [0x1802d95bc], 0xffffffff
jne 0x18004aac2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rcx, [0x1802d95bc]
mov dword [0x1802d95c0], eax
call fcn.180168df8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1802d95c0]
cmp eax, 0xfa
jb 0x18004ab00
movss xmm0, dword [0x1802d95c4]
addss xmm0, dword [0x1801d4984]
add byte [0x1802d95c8], 0xfc
movss dword [0x1802d95c4], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1802d95c0], eax
movss xmm3, dword [0x1802d95c4]
movaps xmm2, xmm6
movss xmm1, dword [0x1801d475c]
movaps xmm0, xmm3
movzx eax, byte [0x1802d95c8]
mulss xmm0, xmm10
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], eax
subss xmm1, xmm0
movaps xmm0, xmm7
call fcn.18003f780
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm12
inc dword [rax + 8]
call fcn.180026500
movaps xmm6, xmm12
shufps xmm6, xmm12, 0xaa
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm6
inc dword [rax + 8]
call fcn.180026500
movss xmm7, dword [rsp + 0x60]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm7
inc dword [rax + 8]
call fcn.180026500
lea r8, [rsp + 0x90]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov qword [rcx + rdx*8], r8
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0xc906a7dab05c8d2b
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov ebx, dword [0x1802d95b4]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
movabs rcx, 0x8bad02f0368d9e14
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov rcx, qword [rax]
cmp dword [rcx], r15d
jne 0x18004ac5c
movaps xmm0, xmm7
subss xmm0, dword [rsp + 0x90]
andps xmm0, xmmword [0x1801d4d10]
comiss xmm10, xmm0
ja 0x18004ac5c
movss xmm1, dword [0x1802d95c4]
movsd xmm0, qword [0x1801d4788]
cvtps2pd xmm1, xmm1
comisd xmm0, xmm1
jb 0x18004ade1
movss xmm3, dword [0x1801d4724]
mov r9d, reloc.WLDAP32.dll_Ordinal_41
movss dword [rsp + 0x38], xmm3
movaps xmm2, xmm7
movss xmm3, dword [0x1801d4920]
movaps xmm1, xmm6
mov dword [rsp + 0x30], r15d
movaps xmm0, xmm12
mov dword [rsp + 0x28], 1
movss dword [rsp + 0x20], xmm3
call fcn.18003f230
mov edx, dword [0x1802d95b4]
call fcn.1800405e0
mov dword [0x1802d95b4], r15d
call fcn.180026500
mov rcx, r12
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.1800263a0
call fcn.180026500
mov rcx, qword [rax]
mov ebx, dword [rcx]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov rcx, rbp
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], r15d
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
xor ecx, ecx
call fcn.18003eb80
mov ebx, dword [0x1802d95b8]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
movabs rcx, 0x865908c81a2c22e9
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
lea r9, str.DEFAULT
mov rcx, r13
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov qword [rdx + r8*8], r9
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], edi
inc dword [rax + 8]
call fcn.180026500
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], r15d
inc dword [rax + 8]
mov rcx, r14
call fcn.1800263a0
call fcn.180026500
mov byte [0x1802d95b0], r15b
movaps xmm10, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xf0]
movaps xmm6, xmmword [rsp + 0x100]
mov r13, qword [rsp + 0x140]
movaps xmm12, xmmword [rsp + 0xa0]
mov byte [0x1802d8c88], sil
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.180168800
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], edi
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x3b390a939af0b5fc
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov rcx, qword [rax]
mov ebx, dword [rcx]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 0x3f800000
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x1899f328b0e12848
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov dword [rsp + 0x30], r15d
mov rcx, qword [rax]
movups xmm1, xmmword [rcx]
movsd xmm3, qword [rcx + 0x10]
mov ecx, 0x9a3207b7
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xaa
call fcn.18003fd80
mov dword [0x1802d95b4], eax
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
movabs rcx, 0x8e5fb15663f79120
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
lea r8, str.DEFAULT_SCRIPTED_CAMERA
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov qword [rcx + rdx*8], r8
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
movabs rcx, 0xc3981dce61d9e13f
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov rcx, qword [rax]
mov edi, dword [0x1802d95b4]
mov ebx, dword [rcx]
mov dword [0x1802d95b8], ebx
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], edi
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
movabs rcx, 0xfedb7d269e8c60e3
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov ecx, 1
call fcn.18003eb80
mov ebx, dword [0x1802d95b8]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
movabs rcx, 0x26fb97d0a425f84
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov ebx, dword [0x1802d95b4]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0xea1c610a04db6bbb
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov byte [0x1802d95c8], 0xff
mov dword [0x1802d95c4], 0x3f000000
mov byte [0x1802d8c88], sil
jmp 0x18004ae12
cmp byte [0x1802d8c88], r15b
je 0x18004b115
mov ebx, dword [0x1802d95b8]
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
movabs rcx, 0x865908c81a2c22e9
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], edi
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x5e6cc07646bbeab8
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov dword [0x1802d95b4], r15d
mov byte [0x1802d95c8], 0xff
mov dword [0x1802d95c4], 0x3f000000
call fcn.180026500
mov dword [rax + 8], r15d
mov dword [rax + 0x18], r15d
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], edi
inc dword [rax + 8]
call fcn.180026500
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], r15d
movabs rcx, 0x428ca6dbd1094446
inc dword [rax + 8]
call fcn.1800263a0
call fcn.180026500
mov byte [0x1802d8c88], sil
jmp 0x18004ae12