Function at 0x14004aaa0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x370
vmovaps xmmword [rax - 0x28], xmm6
vmovaps xmmword [rax - 0x38], xmm7
vmovaps xmmword [rax - 0x48], xmm8
vmovaps xmmword [rax - 0x58], xmm9
vmovaps xmmword [rax - 0x68], xmm10
vmovaps xmmword [rax - 0x78], xmm11
vmovaps xmmword [rax - 0x88], xmm12
vmovaps xmmword [rax - 0x98], xmm13
vmovaps xmmword [rax - 0xa8], xmm14
vmovaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1401c3040]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
xor r12d, r12d
mov rax, qword [0x1401d8060]
mov rax, qword [rax + 0x4030]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140005c50
mov rbx, rax
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [0x1401c30d0]
vmovss xmm14, dword [0x1401b99d4]
vmulss xmm2, xmm0, xmm14
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [0x1401c30d4]
vmulss xmm1, xmm0, xmm14
vmovss dword [rsp + 0x60], xmm1
vmovss dword [rsp + 0x64], xmm2
vxorps xmm10, xmm10, xmm10
cmp byte [0x1401d8099], r12b
je 0x14004ac45
mov rcx, qword [0x1401d8060]
vmovss xmm0, dword [0x1401d7970]
vmovss dword [rsp + 0x78], xmm0
vmovss xmm1, dword [0x1401d7974]
vmovss dword [rsp + 0x7c], xmm1
vmovss xmm0, dword [0x1401d7978]
vmovss dword [rbp - 0x80], xmm0
vmovss xmm1, dword [0x1401d797c]
vmulss xmm2, xmm1, dword [rcx + 0x3778]
vmovss dword [rbp - 0x7c], xmm2
lea rcx, [rsp + 0x78]
call fcn.140003680
mov edi, eax
test eax, 0xff000000
je 0x14004ac45
vmovss xmm0, dword [0x1401c30f4]
vcomiss xmm0, xmm10
jbe 0x14004ac45
vsubss xmm2, xmm0, xmm14
mov dword [rsp + 0x28], 0x1ff
vmovss xmm0, dword [0x1401b9ae8]
vmovss dword [rsp + 0x20], xmm0
vxorps xmm3, xmm3, xmm3
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.140022db0
vmovss xmm0, dword [0x1401b9a98]
vmovss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140021460
mov dword [rbx + 0x78], r12d
mov dword [0x1401d8084], r12d
mov r15, qword [0x1401d8628]
mov rsi, qword [0x1401d8620]
cmp rsi, r15
je 0x14004c79d
mov r14d, r12d
vmovss xmm7, dword [0x1401b9ba8]
vmovss dword [rsp + 0x40], xmm7
vmovss xmm11, dword [0x1401b9b40]
vmovss xmm9, dword [0x1401b9b6c]
vmovss xmm8, dword [0x1401b9f60]
mov rdx, rsi
lea rcx, [rbp + 0xf0]
call fcn.1400493a0
nop
mov rcx, qword [rbp + 0xf0]
cmp rcx, qword [0x1401d7830]
jne 0x14004acc2
mov rdx, qword [rbp + 0x15c]
cmp rdx, 0xf
jbe 0x14004b774
jmp 0x14004c00b
mov ebx, dword [rbp + 0xf8]
cmp byte [0x1401d8091], 0
je 0x14004ae32
add rcx, 0x2214
vmovss dword [rbp + 0x50], xmm10
mov eax, dword [0x1401d8150]
mov dword [rbp + 0x98], eax
mov qword [rbp + 0x90], 4
mov qword [rbp + 0x88], rcx
mov word [rbp + 0x9c], 0x100
mov byte [rbp + 0x9e], 0
lea rax, [rbp + 0x50]
mov qword [rbp + 0xa0], rax
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtGdiDdDDINetDispGetNextChunkInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x80]
call rax
vmovss xmm0, dword [rbp + 0x50]
vxorps xmm2, xmm0, xmm8
vaddss xmm1, xmm2, xmm9
vcmpltss xmm0, xmm2, xmm10
vblendvps xmm6, xmm2, xmm1, xmm0
mov rcx, qword [0x1401d7830]
add rcx, 0x2214
vmovss dword [rbp + 0x50], xmm10
mov eax, dword [0x1401d8150]
mov dword [rbp + 0x98], eax
mov qword [rbp + 0x90], 4
mov qword [rbp + 0x88], rcx
mov word [rbp + 0x9c], 0x100
mov byte [rbp + 0x9e], 0
lea rax, [rbp + 0x50]
mov qword [rbp + 0xa0], rax
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtGdiDdDDINetDispGetNextChunkInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x80]
call rax
vmovss xmm0, dword [rbp + 0x50]
vxorps xmm2, xmm0, xmm8
vaddss xmm1, xmm2, xmm9
vcmpltss xmm0, xmm2, xmm10
vblendvps xmm4, xmm2, xmm1, xmm0
vmovss dword [rbp + 0x58], xmm6
vaddss xmm2, xmm6, xmm11
vmovss xmm5, dword [0x1401b9b68]
vsubss xmm1, xmm6, xmm5
vcmpltss xmm0, xmm5, xmm6
vblendvps xmm3, xmm2, xmm1, xmm0
vmovss dword [rbp + 0x58], xmm4
vaddss xmm2, xmm4, xmm11
vsubss xmm1, xmm4, xmm5
vcmpltss xmm0, xmm5, xmm4
vblendvps xmm1, xmm2, xmm1, xmm0
vucomiss xmm3, xmm1
jne 0x14004ae32
test ebx, ebx
jne 0x14004ae32
inc dword [0x1401d8084]
cmp dword [rbp + 0x108], 0
jne 0x14004ae48
cmp byte [0x1401d808f], 0
je 0x14004bffe
cmp dword [rbp + 0x164], 0
jne 0x14004bffe
cmp dword [rbp + 0x168], 0
jne 0x14004bffe
test ebx, ebx
je 0x14004bffe
vmovss xmm6, dword [rbp + 0x124]
vmovss dword [rbp + 0x50], xmm6
vmovss xmm8, dword [rbp + 0x128]
vmovss dword [rsp + 0x50], xmm8
vmovss xmm0, dword [rbp + 0x12c]
vmovss dword [rsp + 0x54], xmm0
mov r8d, 5
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0xf0]
call fcn.1400453c0
vmovss xmm0, dword [0x1401d7864]
vsubss xmm1, xmm0, dword [rbp + 0x124]
vcvtss2sd xmm2, xmm1, xmm1
vmulsd xmm5, xmm2, xmm2
vmovss xmm0, dword [0x1401d7868]
vsubss xmm1, xmm0, dword [rbp + 0x128]
vcvtss2sd xmm2, xmm1, xmm1
vmulsd xmm4, xmm2, xmm2
vmovss xmm0, dword [0x1401d786c]
vsubss xmm1, xmm0, dword [rbp + 0x12c]
vcvtss2sd xmm2, xmm1, xmm1
vmulsd xmm3, xmm2, xmm2
vaddsd xmm0, xmm4, xmm5
vaddsd xmm1, xmm0, xmm3
vsqrtsd xmm2, xmm1, xmm1
vcvtsd2ss xmm3, xmm2, xmm2
vcvtss2sd xmm0, xmm3, xmm3
vmulsd xmm1, xmm0, qword [str._vF_u]
vcvtsd2ss xmm11, xmm1, xmm1
vcomiss xmm11, dword [0x1401b9b7c]
jae 0x14004af1e
inc r14d
vminss xmm7, xmm11, xmm7
vmovss dword [rsp + 0x40], xmm7
vcomiss xmm11, dword [0x1401c30e8]
jae 0x14004bfe9
vucomiss xmm11, xmm10
je 0x14004bfe9
vmovss xmm9, dword [rbp - 0x50]
vmovss xmm12, dword [rbp - 0x54]
vmovss xmm13, dword [rbp - 0x58]
cmp byte [0x1401d805d], 0
je 0x14004b1b5
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, dword [0x1401c30d0]
vxorps xmm7, xmm7, xmm7
vcvtsi2ss xmm7, xmm7, dword [0x1401c30d4]
vmovss xmm15, dword [0x1401d80e4]
vmulss xmm1, xmm15, xmm8
vmovss xmm5, dword [rbp + 0x50]
vmulss xmm0, xmm5, dword [0x1401d80e0]
vaddss xmm2, xmm1, xmm0
vmovss xmm4, dword [rsp + 0x54]
vmulss xmm1, xmm4, dword [0x1401d80e8]
vaddss xmm0, xmm2, xmm1
vaddss xmm8, xmm0, dword [0x1401d80ec]
vmovss xmm1, dword [0x1401d80b4]
vmulss xmm1, xmm1, dword [rsp + 0x50]
vmulss xmm0, xmm5, dword [0x1401d80b0]
vaddss xmm2, xmm1, xmm0
vmulss xmm1, xmm4, dword [0x1401d80b8]
vaddss xmm0, xmm2, xmm1
vaddss xmm0, xmm0, dword [0x1401d80bc]
vdivss xmm4, xmm0, xmm8
vmovss xmm1, dword [0x1401d80c4]
vmulss xmm1, xmm1, dword [rsp + 0x50]
vmulss xmm0, xmm5, dword [0x1401d80c0]
vaddss xmm2, xmm1, xmm0
vmovss xmm3, dword [0x1401d80c8]
vmulss xmm1, xmm3, dword [rsp + 0x54]
vaddss xmm0, xmm2, xmm1
vaddss xmm0, xmm0, dword [0x1401d80cc]
vdivss xmm3, xmm0, xmm8
vmulss xmm5, xmm6, dword [0x1401b99d4]
vaddss xmm1, xmm4, dword [0x1401b9a40]
vmulss xmm0, xmm1, xmm14
vmulss xmm2, xmm0, xmm7
vaddss xmm14, xmm2, xmm14
vmulss xmm1, xmm3, dword [0x1401b99d4]
vmulss xmm0, xmm1, xmm6
vaddss xmm2, xmm0, dword [0x1401b99d4]
vsubss xmm5, xmm5, xmm2
vcomiss xmm14, xmm10
jb 0x14004b733
vcomiss xmm5, xmm10
jb 0x14004b733
vcomiss xmm5, xmm7
jae 0x14004b733
vcomiss xmm5, xmm6
jae 0x14004b733
vcomiss xmm8, dword [0x1401b9958]
seta al
test al, al
je 0x14004b733
vmulss xmm1, xmm15, xmm12
vmulss xmm0, xmm13, dword [0x1401d80e0]
vaddss xmm2, xmm1, xmm0
vmulss xmm1, xmm9, dword [0x1401d80e8]
vaddss xmm2, xmm2, xmm1
vaddss xmm8, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm12, dword [0x1401d80b4]
vmulss xmm0, xmm13, dword [0x1401d80b0]
vaddss xmm2, xmm3, xmm0
vmulss xmm1, xmm9, dword [0x1401d80b8]
vaddss xmm2, xmm2, xmm1
vaddss xmm0, xmm2, dword [0x1401d80bc]
vdivss xmm4, xmm0, xmm8
vmulss xmm3, xmm12, dword [0x1401d80c4]
vmulss xmm1, xmm13, dword [0x1401d80c0]
vaddss xmm2, xmm3, xmm1
vmulss xmm0, xmm9, dword [0x1401d80c8]
vaddss xmm2, xmm2, xmm0
vaddss xmm1, xmm2, dword [0x1401d80cc]
vdivss xmm3, xmm1, xmm8
vmovss xmm15, dword [0x1401b99d4]
vmulss xmm0, xmm3, xmm15
vmulss xmm2, xmm0, xmm6
vaddss xmm1, xmm2, xmm15
vmulss xmm3, xmm6, xmm15
vsubss xmm3, xmm3, xmm1
vaddss xmm0, xmm4, dword [0x1401b9a40]
vmulss xmm2, xmm0, xmm15
vmulss xmm1, xmm2, xmm7
vcomiss xmm1, dword [0x1401b9bdc]
jb 0x14004b733
vcomiss xmm3, xmm10
jb 0x14004b733
vcomiss xmm3, xmm7
jae 0x14004b733
vcomiss xmm3, xmm6
jae 0x14004b733
vcomiss xmm8, dword [0x1401b9958]
seta al
test al, al
je 0x14004b733
vsubss xmm1, xmm5, dword [0x1401b9b2c]
mov eax, dword [rbp + 0xf8]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp + 0x104]
mov r8d, dword [rbp + 0x100]
vmovaps xmm0, xmm14
call fcn.140042df0
vmovaps xmm14, xmm15
vmovss xmm6, dword [rbp + 0x50]
vmovss xmm8, dword [rsp + 0x50]
movzx edi, byte [rbp + 0x16c]
cmp byte [0x1401d805e], 0
je 0x14004b5bf
vxorps xmm5, xmm5, xmm5
vcvtsi2ss xmm5, xmm5, dword [0x1401c30d0]
vxorps xmm7, xmm7, xmm7
vcvtsi2ss xmm7, xmm7, dword [0x1401c30d4]
vmovss xmm14, dword [0x1401d80e4]
vmulss xmm1, xmm14, xmm8
vmovss xmm15, dword [0x1401d80e0]
vmulss xmm0, xmm15, xmm6
vaddss xmm2, xmm1, xmm0
vmovss xmm4, dword [rsp + 0x54]
vmulss xmm1, xmm4, dword [0x1401d80e8]
vaddss xmm0, xmm2, xmm1
vaddss xmm8, xmm0, dword [0x1401d80ec]
vmovss xmm1, dword [0x1401d80b4]
vmulss xmm1, xmm1, dword [rsp + 0x50]
vmulss xmm0, xmm6, dword [0x1401d80b0]
vaddss xmm2, xmm1, xmm0
vmulss xmm1, xmm4, dword [0x1401d80b8]
vaddss xmm0, xmm2, xmm1
vaddss xmm0, xmm0, dword [0x1401d80bc]
vdivss xmm4, xmm0, xmm8
vmovss xmm1, dword [0x1401d80c4]
vmulss xmm1, xmm1, dword [rsp + 0x50]
vmulss xmm0, xmm6, dword [0x1401d80c0]
vaddss xmm2, xmm1, xmm0
vmovss xmm3, dword [0x1401d80c8]
vmulss xmm1, xmm3, dword [rsp + 0x54]
vaddss xmm0, xmm2, xmm1
vaddss xmm0, xmm0, dword [0x1401d80cc]
vdivss xmm3, xmm0, xmm8
vmulss xmm6, xmm5, dword [0x1401b99d4]
vaddss xmm1, xmm4, dword [0x1401b9a40]
vmulss xmm0, xmm1, dword [0x1401b99d4]
vmulss xmm2, xmm0, xmm7
vaddss xmm4, xmm2, dword [0x1401b99d4]
vmovss dword [rbp + 0x58], xmm4
vmulss xmm1, xmm3, dword [0x1401b99d4]
vmulss xmm0, xmm1, xmm5
vaddss xmm2, xmm0, dword [0x1401b99d4]
vsubss xmm6, xmm6, xmm2
vcomiss xmm4, xmm10
jb 0x14004b733
vcomiss xmm6, xmm10
jb 0x14004b733
vcomiss xmm6, xmm7
jae 0x14004b733
vcomiss xmm6, xmm5
jae 0x14004b733
vcomiss xmm8, dword [0x1401b9958]
seta al
test al, al
je 0x14004b733
vmulss xmm1, xmm14, xmm12
vmulss xmm0, xmm15, xmm13
vaddss xmm2, xmm1, xmm0
vmulss xmm1, xmm9, dword [0x1401d80e8]
vaddss xmm2, xmm2, xmm1
vaddss xmm8, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm12, dword [0x1401d80b4]
vmulss xmm0, xmm13, dword [0x1401d80b0]
vaddss xmm2, xmm3, xmm0
vmulss xmm1, xmm9, dword [0x1401d80b8]
vaddss xmm2, xmm2, xmm1
vaddss xmm0, xmm2, dword [0x1401d80bc]
vdivss xmm4, xmm0, xmm8
vmulss xmm3, xmm12, dword [0x1401d80c4]
vmulss xmm1, xmm13, dword [0x1401d80c0]
vaddss xmm2, xmm3, xmm1
vmulss xmm0, xmm9, dword [0x1401d80c8]
vaddss xmm2, xmm2, xmm0
vaddss xmm1, xmm2, dword [0x1401d80cc]
vdivss xmm3, xmm1, xmm8
vmovss xmm14, dword [0x1401b99d4]
vmulss xmm0, xmm3, xmm14
vmulss xmm2, xmm0, xmm5
vaddss xmm1, xmm2, xmm14
vmulss xmm3, xmm5, xmm14
vsubss xmm3, xmm3, xmm1
vmovss xmm15, dword [0x1401b9a40]
vaddss xmm0, xmm4, xmm15
vmulss xmm2, xmm0, xmm14
vmulss xmm1, xmm2, xmm7
vcomiss xmm1, dword [0x1401b9bdc]
jb 0x14004b733
vcomiss xmm3, xmm10
jb 0x14004b733
vcomiss xmm3, xmm7
jae 0x14004b733
vcomiss xmm3, xmm5
jae 0x14004b733
vcomiss xmm8, dword [0x1401b9958]
seta al
test al, al
je 0x14004b733
vsubss xmm0, xmm6, xmm3
vandps xmm0, xmm0, xmmword [0x1401b9f40]
vaddss xmm8, xmm0, xmm0
vcvtss2sd xmm0, xmm8, xmm8
vmulsd xmm1, xmm0, qword [0x1401b9a88]
vcvtsd2ss xmm12, xmm1, xmm1
test dil, dil
je 0x14004b469
mov rax, qword [0x1401d8060]
vmovss xmm0, dword [0x1401d7808]
vmovss dword [rbp - 0x48], xmm0
vmovss xmm1, dword [0x1401d780c]
vmovss dword [rbp - 0x44], xmm1
vmovss xmm0, dword [0x1401d7810]
vmovss dword [rbp - 0x40], xmm0
vmovss xmm1, dword [0x1401d7814]
vmulss xmm2, xmm1, dword [rax + 0x3778]
vmovss dword [rbp - 0x3c], xmm2
lea rcx, [rbp - 0x48]
call fcn.140003680
mov dword [rsp + 0x60], eax
vaddss xmm9, xmm8, dword [0x1401b9b08]
vaddss xmm7, xmm12, dword [0x1401b9a98]
vmulss xmm0, xmm8, dword [0x1401b99a4]
vsubss xmm1, xmm6, xmm0
vsubss xmm8, xmm1, xmm15
vmulss xmm2, xmm12, xmm14
vmovss xmm0, dword [rbp + 0x58]
vsubss xmm0, xmm0, xmm2
vsubss xmm6, xmm0, xmm15
vcvttss2si r9d, xmm9
vcvttss2si r8d, xmm7
vcvttss2si edx, xmm8
vcvttss2si ecx, xmm6
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.140044a00
vmovups xmm0, xmmword [0x1401b9d10]
vmovups xmmword [rbp + 0x58], xmm0
lea rcx, [rbp + 0x58]
call fcn.140003680
mov ebx, eax
mov rcx, qword [0x1401d8060]
mov rcx, qword [rcx + 0x4030]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.140005c50
mov r11, rax
mov eax, ebx
shr eax, 0x18
mov ecx, ebx
shr ecx, 0x10
movzx r9d, cl
mov ecx, ebx
shr ecx, 8
movzx r8d, cl
movzx ecx, bl
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, rcx
vmovss xmm15, dword [0x1401b995c]
vmulss xmm3, xmm0, xmm15
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, r8
vmulss xmm2, xmm1, xmm15
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, r9
vmulss xmm1, xmm0, xmm15
mov rcx, qword [0x1401d8060]
vmovss dword [rbp + 0x18], xmm1
vmovss dword [rbp + 0x1c], xmm2
vmovss dword [rbp + 0x20], xmm3
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, rax
vmulss xmm1, xmm0, dword [rcx + 0x3778]
vmulss xmm2, xmm1, xmm15
vmovss dword [rbp + 0x24], xmm2
lea rcx, [rbp + 0x18]
call fcn.140003680
vaddss xmm0, xmm7, xmm6
vmovss dword [rsp + 0x68], xmm0
vaddss xmm1, xmm9, xmm8
vmovss dword [rsp + 0x6c], xmm1
vmovss dword [rsp + 0x70], xmm6
vmovss dword [rsp + 0x74], xmm8
mov dword [rsp + 0x28], r12d
vmovss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x70]
mov rcx, r11
call fcn.1400239f0
vmovss xmm13, dword [rsp + 0x50]
vmovss xmm12, dword [rbp + 0x50]
vmovss xmm15, dword [rsp + 0x54]
cmp byte [0x1401d808e], 0
je 0x14004b885
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, dword [0x1401c30d0]
vxorps xmm8, xmm8, xmm8
vcvtsi2ss xmm8, xmm8, dword [0x1401c30d4]
vmulss xmm3, xmm13, dword [0x1401d80e4]
vmulss xmm2, xmm12, dword [0x1401d80e0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm15, dword [0x1401d80e8]
vaddss xmm2, xmm4, xmm1
vaddss xmm7, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm13, dword [0x1401d80b4]
vmulss xmm2, xmm12, dword [0x1401d80b0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm15, dword [0x1401d80b8]
vaddss xmm2, xmm4, xmm1
vaddss xmm3, xmm2, dword [0x1401d80bc]
vdivss xmm5, xmm3, xmm7
vmulss xmm4, xmm13, dword [0x1401d80c4]
vmulss xmm2, xmm12, dword [0x1401d80c0]
vaddss xmm3, xmm4, xmm2
vmulss xmm1, xmm15, dword [0x1401d80c8]
vaddss xmm2, xmm3, xmm1
vaddss xmm3, xmm2, dword [0x1401d80cc]
vdivss xmm4, xmm3, xmm7
vaddss xmm0, xmm5, dword [0x1401b9a40]
vmulss xmm1, xmm0, xmm14
vmulss xmm2, xmm1, xmm8
vaddss xmm9, xmm2, xmm14
vmulss xmm3, xmm6, xmm14
vmulss xmm0, xmm4, xmm14
vmulss xmm1, xmm0, xmm6
vaddss xmm2, xmm1, xmm14
vsubss xmm4, xmm3, xmm2
vcomiss xmm9, xmm10
jb 0x14004bdbd
vcomiss xmm4, xmm10
jb 0x14004bdbd
vcomiss xmm4, xmm8
jae 0x14004bdbd
vcomiss xmm4, xmm6
jae 0x14004bdbd
vcomiss xmm7, dword [0x1401b9958]
seta al
test al, al
je 0x14004bdbd
vaddss xmm6, xmm4, dword [0x1401b9c04]
vcvttss2si r8d, xmm11
lea r9, [rbp + 0x7d]
test r8d, r8d
jns 0x14004b780
neg r8d
nop
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004b700
dec r9
mov byte [r9], 0x2d
jmp 0x14004b7aa
mov rdx, qword [rbp + 0x15c]
cmp rdx, 0xf
jbe 0x14004b774
mov rcx, qword [rbp + 0x144]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b76f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c05b
call fcn.1400550e0
vmovss xmm7, dword [rsp + 0x40]
jmp 0x14004c03b
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004b780
lea r8, [rbp + 0x7d]
mov rdx, r9
lea rcx, [rbp + 0x80]
call fcn.140054350
nop
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x98]
cmp rcx, rdx
jae 0x14004b7f7
lea rax, [rcx + 1]
mov qword [rbp + 0x90], rax
lea rax, [rbp + 0x80]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x80]
mov word [rax + rcx], 0x6d
jmp 0x14004b806
mov r9b, 0x6d
lea rcx, [rbp + 0x80]
call fcn.1400538f0
vmovups xmm0, xmmword [0x1401b9f10]
vmovups xmmword [rbp + 0x58], xmm0
lea rcx, [rbp + 0x58]
call fcn.140003680
vmovss dword [rsp + 0x48], xmm9
vmovss dword [rsp + 0x4c], xmm6
vmovss xmm3, dword [0x1401b9b24]
lea r8, [rbp + 0x80]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140044660
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14004b885
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b880
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c054
call fcn.1400550e0
cmp byte [0x1401d8094], 0
je 0x14004be4f
vmovss dword [rbp + 0x58], xmm10
vmovss dword [rbp + 0x5c], xmm10
vmovss dword [rbp + 0x58], xmm10
vmovss dword [rbp + 0x5c], xmm10
vmovss dword [rbp + 0x58], xmm10
vmovss dword [rbp + 0x5c], xmm10
vmovss dword [rbp + 0x58], xmm10
vmovss dword [rbp + 0x5c], xmm10
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, dword [0x1401c30d0]
vxorps xmm8, xmm8, xmm8
vcvtsi2ss xmm8, xmm8, dword [0x1401c30d4]
vmulss xmm3, xmm13, dword [0x1401d80e4]
vmulss xmm2, xmm12, dword [0x1401d80e0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm15, dword [0x1401d80e8]
vaddss xmm2, xmm4, xmm1
vaddss xmm7, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm13, dword [0x1401d80b4]
vmulss xmm2, xmm12, dword [0x1401d80b0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm15, dword [0x1401d80b8]
vaddss xmm2, xmm4, xmm1
vaddss xmm3, xmm2, dword [0x1401d80bc]
vdivss xmm5, xmm3, xmm7
vmulss xmm4, xmm13, dword [0x1401d80c4]
vmulss xmm2, xmm12, dword [0x1401d80c0]
vaddss xmm3, xmm4, xmm2
vmulss xmm1, xmm15, dword [0x1401d80c8]
vaddss xmm2, xmm3, xmm1
vaddss xmm3, xmm2, dword [0x1401d80cc]
vdivss xmm4, xmm3, xmm7
vmovss xmm15, dword [0x1401b9a40]
vaddss xmm0, xmm5, xmm15
vmulss xmm1, xmm0, xmm14
vmulss xmm2, xmm1, xmm8
vaddss xmm5, xmm2, xmm14
vmovss dword [rbp + 0x58], xmm5
vmulss xmm3, xmm6, xmm14
vmulss xmm0, xmm4, xmm14
vmulss xmm1, xmm0, xmm6
vaddss xmm2, xmm1, xmm14
vsubss xmm12, xmm3, xmm2
vcomiss xmm5, xmm10
jb 0x14004b733
vcomiss xmm12, xmm10
jb 0x14004b733
vcomiss xmm12, xmm8
jae 0x14004b733
vcomiss xmm12, xmm6
jae 0x14004b733
vmovss xmm13, dword [0x1401b9958]
vcomiss xmm7, xmm13
seta al
test al, al
je 0x14004b733
mov r8d, 1
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xf0]
call fcn.1400453c0
vmovsd xmm0, qword [rax]
vshufps xmm8, xmm0, xmm0, 0x55
vmovsd qword [rbp - 0x38], xmm0
vmulss xmm2, xmm8, dword [0x1401d80e4]
vmovss xmm7, dword [rbp - 0x38]
vmulss xmm0, xmm7, dword [0x1401d80e0]
vaddss xmm3, xmm2, xmm0
vmovss xmm6, dword [rax + 8]
vmulss xmm0, xmm6, dword [0x1401d80e8]
vaddss xmm2, xmm3, xmm0
vaddss xmm9, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm8, dword [0x1401d80b4]
vmulss xmm2, xmm7, dword [0x1401d80b0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm6, dword [0x1401d80b8]
vaddss xmm2, xmm4, xmm1
vaddss xmm3, xmm2, dword [0x1401d80bc]
vdivss xmm5, xmm3, xmm9
vmulss xmm4, xmm8, dword [0x1401d80c4]
vmulss xmm2, xmm7, dword [0x1401d80c0]
vaddss xmm3, xmm4, xmm2
vmulss xmm1, xmm6, dword [0x1401d80c8]
vaddss xmm2, xmm3, xmm1
vaddss xmm3, xmm2, dword [0x1401d80cc]
vdivss xmm4, xmm3, xmm9
vxorps xmm7, xmm7, xmm7
vcvtsi2ss xmm7, xmm7, dword [0x1401c30d4]
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, dword [0x1401c30d0]
vaddss xmm0, xmm5, xmm15
vmulss xmm1, xmm0, xmm14
vmulss xmm2, xmm1, xmm7
vaddss xmm5, xmm2, xmm14
vmovss dword [rsp + 0x58], xmm5
vmulss xmm3, xmm6, xmm14
vmulss xmm0, xmm4, xmm14
vmulss xmm1, xmm0, xmm6
vaddss xmm2, xmm1, xmm14
vsubss xmm11, xmm3, xmm2
vcomiss xmm5, xmm10
jb 0x14004b733
vcomiss xmm11, xmm10
jb 0x14004b733
vcomiss xmm11, xmm7
jae 0x14004b733
vcomiss xmm11, xmm6
jae 0x14004b733
vcomiss xmm9, xmm13
seta al
test al, al
je 0x14004b733
mov r8d, 4
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xf0]
call fcn.1400453c0
vmovsd xmm0, qword [rax]
vshufps xmm8, xmm0, xmm0, 0x55
vmovsd qword [rbp - 0x28], xmm0
vmulss xmm2, xmm8, dword [0x1401d80e4]
vmovss xmm7, dword [rbp - 0x28]
vmulss xmm0, xmm7, dword [0x1401d80e0]
vaddss xmm3, xmm2, xmm0
vmovss xmm6, dword [rax + 8]
vmulss xmm0, xmm6, dword [0x1401d80e8]
vaddss xmm2, xmm3, xmm0
vaddss xmm13, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm8, dword [0x1401d80b4]
vmulss xmm2, xmm7, dword [0x1401d80b0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm6, dword [0x1401d80b8]
vaddss xmm2, xmm4, xmm1
vaddss xmm3, xmm2, dword [0x1401d80bc]
vdivss xmm5, xmm3, xmm13
vmulss xmm4, xmm8, dword [0x1401d80c4]
vmulss xmm2, xmm7, dword [0x1401d80c0]
vaddss xmm3, xmm4, xmm2
vmulss xmm1, xmm6, dword [0x1401d80c8]
vaddss xmm2, xmm3, xmm1
vaddss xmm3, xmm2, dword [0x1401d80cc]
vdivss xmm4, xmm3, xmm13
vxorps xmm7, xmm7, xmm7
vcvtsi2ss xmm7, xmm7, dword [0x1401c30d4]
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, dword [0x1401c30d0]
vaddss xmm0, xmm5, xmm15
vmulss xmm1, xmm0, xmm14
vmulss xmm2, xmm1, xmm7
vaddss xmm15, xmm2, xmm14
vmulss xmm3, xmm6, xmm14
vmulss xmm0, xmm4, xmm14
vmulss xmm1, xmm0, xmm6
vaddss xmm2, xmm1, xmm14
vsubss xmm9, xmm3, xmm2
vcomiss xmm15, xmm10
jb 0x14004b733
vcomiss xmm9, xmm10
jb 0x14004b733
vcomiss xmm9, xmm7
jae 0x14004b733
vcomiss xmm9, xmm6
jae 0x14004b733
vcomiss xmm13, dword [0x1401b9958]
seta al
test al, al
je 0x14004b733
mov r8d, 5
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xf0]
call fcn.1400453c0
vmovsd xmm0, qword [rax]
vshufps xmm8, xmm0, xmm0, 0x55
vmovsd qword [rbp - 0x18], xmm0
vmulss xmm2, xmm8, dword [0x1401d80e4]
vmovss xmm7, dword [rbp - 0x18]
vmulss xmm0, xmm7, dword [0x1401d80e0]
vaddss xmm3, xmm2, xmm0
vmovss xmm6, dword [rax + 8]
vmulss xmm0, xmm6, dword [0x1401d80e8]
vaddss xmm2, xmm3, xmm0
vaddss xmm14, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm8, dword [0x1401d80b4]
vmulss xmm2, xmm7, dword [0x1401d80b0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm6, dword [0x1401d80b8]
vaddss xmm2, xmm4, xmm1
vaddss xmm3, xmm2, dword [0x1401d80bc]
vdivss xmm5, xmm3, xmm14
vmulss xmm4, xmm8, dword [0x1401d80c4]
vmulss xmm2, xmm7, dword [0x1401d80c0]
vaddss xmm3, xmm4, xmm2
vmulss xmm1, xmm6, dword [0x1401d80c8]
vaddss xmm2, xmm3, xmm1
vaddss xmm3, xmm2, dword [0x1401d80cc]
vdivss xmm4, xmm3, xmm14
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, dword [0x1401c30d4]
vxorps xmm7, xmm7, xmm7
vcvtsi2ss xmm7, xmm7, dword [0x1401c30d0]
vaddss xmm0, xmm5, dword [0x1401b9a40]
vmovss xmm5, dword [0x1401b99d4]
vmulss xmm1, xmm0, xmm5
vmulss xmm2, xmm1, xmm6
vaddss xmm13, xmm2, xmm5
vmulss xmm3, xmm7, xmm5
vmulss xmm0, xmm4, xmm5
vmulss xmm1, xmm0, xmm7
vaddss xmm2, xmm1, xmm5
vsubss xmm8, xmm3, xmm2
vcomiss xmm13, xmm10
jb 0x14004b733
vcomiss xmm8, xmm10
jb 0x14004b733
vcomiss xmm8, xmm6
jae 0x14004b733
vcomiss xmm8, xmm7
jae 0x14004b733
vcomiss xmm14, dword [0x1401b9958]
seta al
test al, al
je 0x14004b733
movzx edi, byte [rbp + 0x16c]
vmovss xmm0, dword [rsp + 0x58]
vmovss xmm1, dword [rbp + 0x58]
vunpcklps xmm7, xmm0, xmm11
vunpcklps xmm1, xmm1, xmm12
vmovq rdx, xmm7
vmovq rcx, xmm1
test dil, dil
je 0x14004be08
mov r8d, 0x3300ffff
call fcn.140044cc0
mov r8d, 0x3300ffff
vunpcklps xmm6, xmm15, xmm9
vmovq rdx, xmm6
vmovq rcx, xmm7
call fcn.140044cc0
mov r8d, 0x3300ffff
jmp 0x14004be33
mov rdx, qword [rbp + 0x15c]
cmp rdx, 0xf
jbe 0x14004b774
inc rdx
mov rcx, qword [rbp + 0x144]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b76f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b76f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r8d, 0xff9999ff
call fcn.140044cc0
mov r8d, 0xff9999ff
vunpcklps xmm6, xmm15, xmm9
vmovq rdx, xmm6
vmovq rcx, xmm7
call fcn.140044cc0
mov r8d, 0xff9999ff
vunpcklps xmm0, xmm13, xmm8
vmovq rdx, xmm0
vmovq rcx, xmm6
call fcn.140044cc0
vmovss xmm14, dword [0x1401b99d4]
cmp byte [0x1401d8093], 0
je 0x14004bfe3
vmovss dword [rbp + 0x58], xmm10
vmovss dword [rbp + 0x5c], xmm10
vmovss dword [rbp + 0x58], xmm10
vmovss dword [rbp + 0x5c], xmm10
mov eax, dword [0x1401c30d0]
vxorps xmm9, xmm9, xmm9
vcvtsi2ss xmm9, xmm9, eax
mov r8d, dword [0x1401c30d4]
vxorps xmm8, xmm8, xmm8
vcvtsi2ss xmm8, xmm8, r8d
vmovss xmm11, dword [rsp + 0x50]
vmulss xmm3, xmm11, dword [0x1401d80e4]
vmovss xmm5, dword [rbp + 0x50]
vmulss xmm2, xmm5, dword [0x1401d80e0]
vaddss xmm4, xmm3, xmm2
vmovss xmm12, dword [rsp + 0x54]
vmulss xmm1, xmm12, dword [0x1401d80e8]
vaddss xmm2, xmm4, xmm1
vaddss xmm7, xmm2, dword [0x1401d80ec]
vmulss xmm3, xmm11, dword [0x1401d80b4]
vmulss xmm2, xmm5, dword [0x1401d80b0]
vaddss xmm4, xmm3, xmm2
vmulss xmm1, xmm12, dword [0x1401d80b8]
vaddss xmm2, xmm4, xmm1
vaddss xmm3, xmm2, dword [0x1401d80bc]
vdivss xmm6, xmm3, xmm7
vmulss xmm4, xmm11, dword [0x1401d80c4]
vmulss xmm2, xmm5, dword [0x1401d80c0]
vaddss xmm3, xmm4, xmm2
vmulss xmm1, xmm12, dword [0x1401d80c8]
vaddss xmm2, xmm3, xmm1
vaddss xmm3, xmm2, dword [0x1401d80cc]
vdivss xmm5, xmm3, xmm7
vxorps xmm4, xmm4, xmm4
vcvtsi2ss xmm4, xmm4, eax
vaddss xmm0, xmm6, dword [0x1401b9a40]
vmulss xmm2, xmm0, xmm14
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, r8d
vmulss xmm2, xmm2, xmm1
vaddss xmm6, xmm2, xmm14
vmulss xmm3, xmm4, xmm14
vmulss xmm0, xmm5, xmm14
vmulss xmm1, xmm0, xmm4
vaddss xmm2, xmm1, xmm14
vsubss xmm5, xmm3, xmm2
vcomiss xmm6, xmm10
jb 0x14004b733
vcomiss xmm5, xmm10
jb 0x14004b733
vcomiss xmm5, xmm8
jae 0x14004b733
vcomiss xmm5, xmm9
jae 0x14004b733
vcomiss xmm7, dword [0x1401b9958]
seta cl
test cl, cl
je 0x14004b733
cdq
sub eax, edx
sar eax, 1
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, eax
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, eax
vunpcklps xmm0, xmm0, xmm1
vunpcklps xmm2, xmm6, xmm5
vmovq rdx, xmm0
vmovq rcx, xmm2
test dil, dil
mov r8d, 0x3333ccff
jne 0x14004bfde
mov r8d, 0xff6699ff
call fcn.140044cc0
vmovss xmm7, dword [rsp + 0x40]
mov rdx, qword [rbp + 0x15c]
cmp rdx, 0xf
ja 0x14004c00b
vmovss xmm7, dword [rsp + 0x40]
jmp 0x14004c03b
mov rdx, qword [rbp + 0x15c]
cmp rdx, 0xf
jbe 0x14004c03b
mov rcx, qword [rbp + 0x144]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c036
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c05b
call fcn.1400550e0
add rsi, 0x9b
cmp rsi, r15
je 0x14004c062
vmovss xmm14, dword [0x1401b99d4]
jmp 0x14004ac74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp dword [0x1401d8084], 0
je 0x14004c087
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1401d80a0], eax
mov r8d, dword [0x1401d8084]
mov dword [0x1401d8080], r8d
jmp 0x14004c0b1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1401d80a0]
cmp eax, 0x5dc
jbe 0x14004c0aa
mov r8d, dword [0x1401d8084]
mov dword [0x1401d8080], r8d
jmp 0x14004c0b1
mov r8d, dword [0x1401d8080]
cmp byte [0x1401d8091], 0
je 0x14004c591
lea r9, [rbp + 0x7d]
test r8d, r8d
jns 0x14004c110
neg r8d
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004c0d0
dec r9
mov byte [r9], 0x2d
jmp 0x14004c13a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004c110
lea r8, [rbp + 0x7d]
mov rdx, r9
lea rcx, [rbp - 0x78]
call fcn.140054350
nop
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r8
mov esi, 0xa
cmp rax, rsi
jb 0x14004c1e2
lea rax, [r8 + 0xa]
mov qword [rbp - 0x68], rax
lea rbx, [rbp - 0x78]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x78]
lea rax, [0x1401b90ba]
lea r15, str.Spectator:
cmp rax, rbx
jbe 0x14004c1a6
lea rax, [rbx + r8]
cmp r15, rax
ja 0x14004c1a6
cmp rbx, r15
ja 0x14004c19e
mov rdi, r12
jmp 0x14004c1a9
mov rdi, rbx
sub rdi, r15
jmp 0x14004c1a9
mov rdi, rsi
lea rcx, [rbx + 0xa]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
sub rsi, rdi
lea rdx, [r15 + 0xa]
add rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x78]
jmp 0x14004c1f3
mov qword [rsp + 0x28], rsi
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.140054c20
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x80], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x90], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x80], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14004c26a
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c262
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c262
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.1400550e0
vmovdqu xmm0, xmmword [0x1401b9c60]
vmovdqu xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x78], 0
mov r8, qword [0x1401d7830]
add r8, 0x318
mov dword [rbp + 0x58], r12d
mov eax, dword [0x1401d8150]
mov dword [rbp + 0x30], eax
mov qword [rbp + 0x28], 4
mov qword [rbp + 0x20], r8
mov word [rbp + 0x34], 0x100
mov byte [rbp + 0x36], 0
lea rax, [rbp + 0x58]
mov qword [rbp + 0x38], rax
lea rcx, str.win32u.dll
vzeroupper
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtGdiDdDDINetDispGetNextChunkInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x18]
call rax
cmp dword [rbp + 0x58], 0
jle 0x14004c54d
mov r8d, dword [0x1401d8080]
lea r9, [rbp + 0x7d]
test r8d, r8d
jns 0x14004c340
neg r8d
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004c300
dec r9
mov byte [r9], 0x2d
jmp 0x14004c36a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004c340
lea r8, [rbp + 0x7d]
mov rdx, r9
lea rcx, [rbp + 0x18]
call fcn.140054350
lea rcx, [rbp + 0x18]
mov rbx, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x30]
cmp rdi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0x28]
cmp r8, 1
jne 0x14004c3ad
lea rdx, str.01LMR
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14004c3ad
mov sil, 1
jmp 0x14004c3b0
xor sil, sil
cmp rdi, 0xf
jbe 0x14004c3e7
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14004c3df
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c4eb
mov rcx, rbx
call fcn.1400550e0
test sil, sil
je 0x14004c3f9
vmovups xmm0, xmmword [0x1401b9d60]
jmp 0x14004c507
mov r8d, dword [0x1401d8080]
lea r9, [rbp + 0x7d]
test r8d, r8d
jns 0x14004c450
neg r8d
nop dword [rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004c410
dec r9
mov byte [r9], 0x2d
jmp 0x14004c47a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14004c450
lea r8, [rbp + 0x7d]
mov rdx, r9
lea rcx, [rbp + 0x18]
call fcn.140054350
lea rcx, [rbp + 0x18]
mov rbx, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x30]
cmp rdi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0x28]
cmp r8, 1
jne 0x14004c4bd
lea rdx, str.01LMR
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14004c4bd
xor sil, sil
jmp 0x14004c4c0
mov sil, 1
cmp rdi, 0xf
jbe 0x14004c4fa
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14004c4f2
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c4f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400550e0
test sil, sil
je 0x14004c54d
vmovups xmm0, xmmword [0x1401b9d50]
vmovups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140003680
vmovss xmm0, dword [0x1401b9b00]
vmovss dword [rsp + 0x48], xmm0
vmovss xmm0, dword [0x1401b9b2c]
vmovss dword [rsp + 0x4c], xmm0
vmovss xmm3, dword [0x1401b9b20]
lea r8, [rbp + 0x80]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140044660
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14004c591
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c58c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c58c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400550e0
cmp byte [0x1401d808c], 0
je 0x14004c79d
mov r8d, r14d
lea rdx, str.__d___500m
lea rcx, [rbp + 0xf0]
call fcn.140019610
vcvtss2sd xmm2, xmm7, xmm7
vmovq r8, xmm2
lea rdx, str.:__.1f_m
lea rcx, [rbp + 0x80]
call fcn.140019610
mov rbx, qword [0x1401d8060]
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x28], rax
vmovss xmm7, dword [0x1401b9bec]
vmovss dword [rsp + 0x20], xmm7
vmovss xmm2, dword [rbx + 0x3b98]
lea rdx, [rsp + 0x48]
mov rcx, qword [rbx + 0x3b90]
call fcn.1400281f0
vmovss xmm6, dword [0x1401b9a38]
vaddss xmm1, xmm6, dword [rsp + 0x48]
vcvttss2si eax, xmm1
vxorps xmm8, xmm8, xmm8
vcvtsi2ss xmm8, xmm8, eax
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
vmovss dword [rsp + 0x20], xmm7
vmovss xmm2, dword [rbx + 0x3b98]
lea rdx, [rsp + 0x48]
mov rcx, qword [rbx + 0x3b90]
call fcn.1400281f0
vaddss xmm1, xmm6, dword [rsp + 0x48]
vcvttss2si eax, xmm1
vxorps xmm6, xmm6, xmm6
vcvtsi2ss xmm6, xmm6, eax
cmp byte [0x1401d808c], 0
je 0x14004c6e2
test r14d, r14d
je 0x14004c6e2
vmovups xmm0, xmmword [0x1401b9d50]
vmovups xmmword [rbp + 0x18], xmm0
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [0x1401c30d4]
vsubss xmm2, xmm1, xmm8
vmulss xmm0, xmm2, dword [0x1401b99d4]
vmovss dword [rsp + 0x48], xmm0
vmovss xmm1, dword [0x1401b9b48]
vmovss dword [rsp + 0x4c], xmm1
lea rcx, [rbp + 0x18]
call fcn.140003680
mov edx, eax
vmovss xmm3, dword [0x1401b9b2c]
lea r8, [rbp + 0xf0]
lea rcx, [rsp + 0x48]
call fcn.140044660
vmovups xmm0, xmmword [0x1401b9d50]
jmp 0x14004c748
vmovups xmm0, xmmword [0x1401b9d60]
vmovups xmmword [rbp + 0x18], xmm0
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [0x1401c30d4]
vsubss xmm2, xmm1, xmm8
vmulss xmm0, xmm2, dword [0x1401b99d4]
vmovss dword [rsp + 0x48], xmm0
vmovss xmm1, dword [0x1401b9b48]
vmovss dword [rsp + 0x4c], xmm1
lea rcx, [rbp + 0x18]
call fcn.140003680
mov edx, eax
vmovss xmm3, dword [0x1401b9b2c]
lea r8, [rbp + 0xf0]
lea rcx, [rsp + 0x48]
call fcn.140044660
vmovups xmm0, xmmword [0x1401b9d60]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [0x1401c30d4]
vsubss xmm2, xmm1, xmm6
vmovups xmmword [rbp + 0x18], xmm0
vmovss xmm1, dword [0x1401b9b54]
vmulss xmm0, xmm2, dword [0x1401b99d4]
vmovss dword [rsp + 0x4c], xmm1
vmovss dword [rsp + 0x48], xmm0
lea rcx, [rbp + 0x18]
call fcn.140003680
vmovss xmm3, dword [0x1401b9b2c]
lea r8, [rbp + 0x80]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140044660
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.140054ff0
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
vmovaps xmm6, xmmword [r11 - 0x10]
vmovaps xmm7, xmmword [r11 - 0x20]
vmovaps xmm8, xmmword [r11 - 0x30]
vmovaps xmm9, xmmword [r11 - 0x40]
vmovaps xmm10, xmmword [r11 - 0x50]
vmovaps xmm11, xmmword [r11 - 0x60]
vmovaps xmm12, xmmword [r11 - 0x70]
vmovaps xmm13, xmmword [r11 - 0x80]
vmovaps xmm14, xmmword [r11 - 0x90]
vmovaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop rbp
ret