Function at 0x1800b15a0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
movapd xmmword [rsp + 0xe0], xmm6
mov rax, qword [rcx]
cmp rax, 3
je 0x1800b2421
mov rdi, rdx
mov rsi, rcx
movabs r13, 0x7fffffffffffffff
lea rbx, [rcx + 8]
cmp rax, 2
cmovne rbx, rcx
cmp eax, 2
je 0x1800b209b
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1800b24cb
mov r14, qword [rsp + 0x30]
mov rcx, qword [0x1801fa970]
test rcx, rcx
jne 0x1800b164c
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1800b24cb
mov rcx, qword [rsp + 0x30]
mov qword [0x1801fa970], rcx
test rcx, rcx
je 0x1800b2421
mov rax, r14
or rax, rcx
shr rax, 0x20
je 0x1800b1662
mov rax, r14
xor edx, edx
div rcx
jmp 0x1800b1669
mov eax, r14d
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1800b168d
xor edx, edx
div rcx
mov r15, rax
jmp 0x1800b1694
xor edx, edx
div ecx
mov r15d, eax
add r15, r8
mov rax, r15
shr rax, 9
movabs rcx, 0x44b82fa09b5a53
mul rcx
mov r14, rdx
mov r12, qword [rbx + 0x510]
lea rcx, [r12 + 0x10]
mov qword [rsp + 0x78], rcx
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1801fa990]
test rax, r13
jne 0x1800b18d7
mov dword [rsp + 0x2c], 0
movzx eax, byte [r12 + 0x18]
test al, al
jne 0x1800b2421
mov rax, qword [rbx + 0x510]
mov rax, qword [rax]
mov qword [rsp + 0xb0], rax
mov r8d, dword [rbx + 0x4e8]
cmp r8d, 0x3b9aca00
je 0x1800b19b1
movzx eax, byte [rbx + 0x509]
test rax, rax
je 0x1800b173a
cmp eax, 1
je 0x1800b172d
cmp dword [r12 + 0x38], 0x3b9aca00
je 0x1800b174e
cmp al, 1
je 0x1800b17c8
jmp 0x1800b19b1
cmp qword [rsp + 0xb0], 2
ja 0x1800b174e
cmp byte [rbx + 0x508], 0
je 0x1800b172d
mov byte [rbx + 0x509], 1
mov eax, dword [r12 + 0x58]
cmp eax, 0x3b9aca00
je 0x1800b2421
mov rdx, qword [r12 + 0x50]
add rdx, qword [rbx + 0x4e0]
jb 0x1800b2421
add r8d, eax
cmp r8d, 0x3b9aca00
jb 0x1800b1793
inc rdx
je 0x1800b2421
add r8d, 0xc4653600
mov eax, r8d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r8d, eax
mov rcx, qword [rbx + 0x500]
call fcn.180109ef0
movzx eax, byte [rbx + 0x509]
cmp al, 1
jne 0x1800b19b1
mov rbp, qword [rbx + 0x500]
mov r13, qword [rdi]
mov rcx, rbp
mov rdx, r13
call fcn.180109cb0
test al, al
jne 0x1800b19b1
mov eax, dword [r12 + 0x58]
cmp eax, 0x3b9aca00
je 0x1800b2421
mov rcx, qword [r12 + 0x50]
add rcx, qword [rbx + 0x4e0]
jb 0x1800b2421
add eax, dword [rbx + 0x4e8]
cmp eax, 0x3b9aca00
jb 0x1800b1822
inc rcx
je 0x1800b2421
add eax, 0xc4653600
mov rdx, qword [rbp + 0x10]
cmp rcx, rdx
jb 0x1800b1852
jne 0x1800b1ba0
mov ecx, eax
shr ecx, 9
imul rcx, rcx, 0x44b83
shr rcx, 0x27
imul ecx, ecx, 0x3b9aca00
sub eax, ecx
cmp eax, dword [rbp + 0x18]
ja 0x1800b1ba0
lea rcx, [r12 + 0x20]
call fcn.18004d260
mov byte [rbx + 0x509], 2
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1800b24cb
mov r13, qword [rsp + 0x30]
mov rcx, qword [0x1801fa970]
test rcx, rcx
jne 0x1800b18c1
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1800b24cb
mov rcx, qword [rsp + 0x30]
mov qword [0x1801fa970], rcx
test rcx, rcx
je 0x1800b2421
mov rax, r13
or rax, rcx
shr rax, 0x20
je 0x1800b18f5
mov rax, r13
xor edx, edx
div rcx
jmp 0x1800b18fc
call fcn.18016c730
xor al, 1
mov dword [rsp + 0x2c], eax
movzx eax, byte [r12 + 0x18]
test al, al
je 0x1800b16eb
jmp 0x1800b2421
mov eax, r13d
xor edx, edx
div ecx
imul r9, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
movabs r10, 0x44b82fa09b5a53
je 0x1800b192a
xor edx, edx
div rcx
mov r8, rax
jmp 0x1800b1931
xor edx, edx
div ecx
mov r8d, eax
add r8, r9
mov rcx, r8
shr rcx, 9
mov rax, rcx
mul r10
mov r9, rdx
shr r9, 0xb
add r9, qword [rbx + 0x4f0]
jb 0x1800b2421
mov rax, rcx
mul r10
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub r8d, eax
add r8d, dword [rbx + 0x4f8]
cmp r8d, 0x3b9aca00
jb 0x1800b1988
inc r9
je 0x1800b2421
add r8d, 0xc4653600
mov eax, r8d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r8d, eax
mov rcx, qword [rbx + 0x500]
mov rdx, r9
call fcn.180109ef0
cmp dword [r12 + 0x38], 0x3b9aca00
jne 0x1800b1bc1
mov r15d, 2
cmp byte [rsp + 0x2c], 0
je 0x1800b19d4
mov r14, qword [rsp + 0x78]
jmp 0x1800b19f3
mov rax, qword [0x1801fa990]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
mov r14, qword [rsp + 0x78]
jne 0x1800b2380
mov rcx, r14
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
test r15d, r15d
je 0x1800b1a1d
mov bpl, 5
cmp r15d, 1
movabs r13, 0x7fffffffffffffff
je 0x1800b21d7
jmp 0x1800b209b
mov r15, qword [rbx + 0x400]
lea r14, [r15 + 0x10]
mov rcx, r14
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1801fa990]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
jne 0x1800b2392
xor ebp, ebp
movzx eax, byte [r15 + 0x18]
test al, al
jne 0x1800b2421
mov eax, dword [r15 + 0xcc]
mov ecx, dword [r15 + 0x110]
lea edx, [rax + rcx]
shl rdx, 0x20
add ecx, eax
movabs rcx, 0x300000001
cmovo rdx, rcx
test dl, dl
jne 0x1800b1afb
test rdx, rdx
js 0x1800b2421
shr rdx, 0x20
mov r8d, r13d
sub r8d, edx
jbe 0x1800b1ab4
lea edx, [rax + r8]
shl rdx, 0x20
add eax, r8d
cmovo rdx, rcx
test dl, 1
jne 0x1800b1afb
shr rdx, 0x20
mov eax, edx
jmp 0x1800b1abb
sub edx, r13d
sub eax, edx
jo 0x1800b1afb
mov dword [r15 + 0xcc], eax
mov ecx, dword [r15 + 0xc8]
sub eax, ecx
jle 0x1800b1afb
mov edx, ecx
shr edx, 0x1f
add edx, ecx
sar edx, 1
cmp eax, edx
jl 0x1800b1afb
mov rax, qword [r15 + 0x1c0]
mov rcx, qword [r15 + 0x1c8]
mov qword [r15 + 0x1c0], 0
test rax, rax
je 0x1800b1afb
call qword [rax + 8]
test bpl, bpl
jne 0x1800b1b1a
mov rax, qword [0x1801fa990]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
jne 0x1800b2448
mov rcx, r14
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
cmp dword [rbx + 0x438], 2
jb 0x1800b1b90
mov dword [rbx + 0x444], 0
mov dword [rbx + 0x44c], 0
mov dword [rbx + 0x454], 1
mov dword [rbx + 0x458], r13d
mov dword [rbx + 0x45c], 0
mov dword [rbx + 0x464], 0
mov dword [rbx + 0x46c], 0
mov byte [rbx + 0x474], 0
mov qword [rbx + 0x438], 0
movabs r13, 0x7fffffffffffffff
jmp 0x1800b209b
mov byte [rsp + 0xb9], 0xa
mov bpl, 3
jmp 0x1800b21d7
mov byte [rbx + 0x509], 0
mov rax, qword [r13]
mov rcx, qword [r13 + 8]
call qword [rax + 0x10]
cmp dword [r12 + 0x38], 0x3b9aca00
je 0x1800b19c0
mov r13, qword [r12 + 0x60]
mov rdx, qword [rdi]
lea rcx, [r13 + 0x30]
call fcn.180034250
xor ecx, ecx
mov eax, 3
lock cmpxchg qword [r13 + 0x10], rcx
cmp rax, 3
je 0x1800b1c6f
cmp rax, 4
je 0x1800b206f
cmp dword [rbx + 0x4e8], 0x3b9aca00
je 0x1800b206f
cmp byte [rbx + 0x509], 2
jb 0x1800b206f
mov rcx, qword [rbx + 0x500]
mov rdx, qword [rdi]
call fcn.180109cb0
test al, al
jne 0x1800b206f
cmp dword [rbx + 0x4e8], 0x3b9aca00
je 0x1800b248a
mov r15, qword [rbx + 0x500]
mov rcx, r15
call fcn.180107950
mov rcx, qword [r15 + 8]
mov rdx, qword [r15]
lock dec qword [rcx]
sete al
test rdx, rdx
je 0x1800b245f
test al, al
je 0x1800b2468
call fcn.180050310
jmp 0x1800b2468
mov r8d, dword [r12 + 0x38]
cmp r8d, 0x3b9aca00
je 0x1800b2421
mov rbp, r14
shr rbp, 0xb
imul eax, ebp, 0x3b9aca00
sub r15d, eax
mov rdx, qword [r12 + 0x30]
mov dword [r12 + 0x38], 0x3b9aca00
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x38], r15d
lea rcx, [rsp + 0x30]
call fcn.1800f90c0
mov r9, rax
mov r13d, edx
xor r14d, r14d
cmp edx, 0x3b9aca00
cmovne r14d, edx
cmp dword [rbx + 0x4e8], 0x3b9aca00
je 0x1800b1e87
mov r8d, 0x3b9aca00
cmp dword [r12 + 0x58], 0x3b9aca00
je 0x1800b1dd8
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x6c], r14d
mov r14, rbp
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1800b24cb
mov rbp, qword [rsp + 0x30]
mov rcx, qword [0x1801fa970]
test rcx, rcx
jne 0x1800b1d56
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1800b24cb
mov rcx, qword [rsp + 0x30]
mov qword [0x1801fa970], rcx
test rcx, rcx
je 0x1800b2421
mov rax, rbp
or rax, rcx
shr rax, 0x20
je 0x1800b1d6c
mov rax, rbp
xor edx, edx
div rcx
jmp 0x1800b1d72
mov eax, ebp
xor edx, edx
div ecx
imul r9, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
mov rbp, r14
je 0x1800b1d99
xor edx, edx
div rcx
mov r8, rax
jmp 0x1800b1da0
xor edx, edx
div ecx
mov r8d, eax
mov r14d, dword [rsp + 0x6c]
add r8, r9
mov rax, r8
shr rax, 9
movabs rcx, 0x44b82fa09b5a53
mul rcx
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub r8d, eax
mov qword [r12 + 0x50], rdx
mov dword [r12 + 0x58], r8d
mov r9, qword [rsp + 0x70]
movzx eax, byte [rbx + 0x509]
test rax, rax
je 0x1800b1dfd
cmp eax, 1
je 0x1800b1e87
cmp dword [r12 + 0x38], 0x3b9aca00
je 0x1800b1e11
jmp 0x1800b1e87
cmp qword [rsp + 0xb0], 2
ja 0x1800b1e11
cmp byte [rbx + 0x508], 0
je 0x1800b1e87
mov byte [rbx + 0x509], 1
cmp r8d, 0x3b9aca00
je 0x1800b2421
mov rdx, qword [r12 + 0x50]
add rdx, qword [rbx + 0x4e0]
jb 0x1800b2421
add r8d, dword [rbx + 0x4e8]
cmp r8d, 0x3b9aca00
mov qword [rsp + 0x70], r9
jb 0x1800b1e5c
inc rdx
je 0x1800b2421
add r8d, 0xc4653600
mov eax, r8d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r8d, eax
mov rcx, qword [rbx + 0x500]
call fcn.180109ef0
mov r9, qword [rsp + 0x70]
cmp dword [rbx + 0x4c0], 0x3b9aca00
je 0x1800b206f
cmp qword [r12 + 0x20], 0
je 0x1800b2421
mov rcx, qword [r12 + 0x28]
mov qword [r12 + 0x20], 1
mov qword [r12 + 0x28], 0
mov eax, dword [rbx + 0x4d8]
cmp rax, 0x1000000
je 0x1800b1fa6
movdqa xmm2, xmmword [0x180171e80]
movapd xmm1, xmmword [0x180171e90]
xorpd xmm0, xmm0
xorpd xmm3, xmm3
cmp r13d, 0x3b9aca00
je 0x1800b1f06
movq xmm4, r9
punpckldq xmm4, xmm2
subpd xmm4, xmm1
movapd xmm3, xmm4
unpckhpd xmm3, xmm4
addsd xmm3, xmm4
mov edx, r14d
xorps xmm4, xmm4
cvtsi2sd xmm4, rdx
divsd xmm4, qword [0x180171ea0]
addsd xmm4, xmm3
movsd xmm3, qword [rbx + 0x4c8]
movsd xmm5, qword [rbx + 0x4d0]
movapd xmm6, xmm4
subsd xmm6, xmm5
mulsd xmm6, qword [0x180171ea8]
addsd xmm6, xmm5
cmpeqsd xmm0, xmm5
andpd xmm4, xmm0
andnpd xmm0, xmm6
orpd xmm0, xmm4
movlpd qword [rbx + 0x4d0], xmm0
movq xmm4, rcx
punpckldq xmm4, xmm2
subpd xmm4, xmm1
movapd xmm1, xmm4
unpckhpd xmm1, xmm4
mulsd xmm0, qword [0x180171eb0]
addsd xmm1, xmm4
divsd xmm1, xmm0
ucomisd xmm3, xmm1
ja 0x1800b1fa6
movsd qword [rbx + 0x4c8], xmm1
add rax, rax
movabs rdx, 0x5555555555555556
mul rdx
cmp rdx, rcx
jbe 0x1800b23ac
mov rax, qword [rbx + 0x4b8]
cmp rax, 9
ja 0x1800b2015
mov ecx, dword [rbx + 0x4dc]
inc ecx
mov dword [rbx + 0x4dc], ecx
cmp ecx, 2
jb 0x1800b2015
mov ecx, dword [rbx + 0x4c0]
imul rdx, rcx, 0x44b82fa1
shr rdx, 0x3a
lea ecx, [rcx*4]
mov r8d, ecx
shr r8d, 9
imul r8, r8, 0x44b83
shr r8, 0x27
imul r8d, r8d, 0x3b9aca00
sub ecx, r8d
lea rax, [rdx + rax*4]
mov qword [rbx + 0x4b8], rax
mov dword [rbx + 0x4c0], ecx
mov dword [rbx + 0x4dc], 0
xor ecx, ecx
add rbp, rax
jb 0x1800b2421
add r15d, dword [rbx + 0x4c0]
cmp r15d, 0x3b9aca00
jb 0x1800b2040
inc rbp
je 0x1800b2421
add r15d, 0xc4653600
mov eax, r15d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r15d, eax
mov qword [r12 + 0x40], rbp
mov dword [r12 + 0x48], r15d
xor r15d, r15d
test cl, cl
jne 0x1800b19c6
cmp byte [rsp + 0x2c], 0
movabs r13, 0x7fffffffffffffff
jne 0x1800b2090
mov rax, qword [0x1801fa990]
test rax, r13
jne 0x1800b2425
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov r15, qword [rbx + 0x400]
lea r14, [r15 + 0x10]
mov rcx, r14
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1801fa990]
test rax, r13
jne 0x1800b2350
xor eax, eax
movzx ecx, byte [r15 + 0x18]
test cl, cl
jne 0x1800b2421
mov rcx, qword [r15 + 0x38]
mov bpl, 1
or rcx, qword [r15 + 0x48]
jne 0x1800b20e7
cmp qword [r15 + 0x240], 2
setae bpl
test al, al
jne 0x1800b20fb
mov rax, qword [0x1801fa990]
test rax, r13
jne 0x1800b2369
mov rcx, r14
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
test bpl, bpl
jne 0x1800b215d
lea rax, [rbx + 0x3f8]
lea rcx, [rbx + 0x3a0]
lea rdx, [rbx + 0x410]
lea r8, [rbx + 0x3d8]
mov r9, qword [rbx + 0x408]
add r9, 0x10
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r9
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], r8
lea rcx, [rsp + 0x30]
call fcn.1800b3a80
lea rcx, [rsp + 0x80]
mov rdx, rbx
mov r8, rdi
call fcn.1800b3c00
movzx eax, byte [rsp + 0x80]
cmp eax, 3
je 0x1800b21d4
cmp eax, 4
je 0x1800b21cd
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x50], rax
movupd xmm0, xmmword [rsp + 0x80]
movupd xmm1, xmmword [rsp + 0x90]
movapd xmmword [rsp + 0x40], xmm1
movapd xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0xb8]
lea rdx, [rsp + 0x30]
call fcn.1800392a0
movzx ebp, byte [rsp + 0xb8]
cmp bpl, 6
jne 0x1800b21d7
mov al, 2
jmp 0x1800b2334
mov bpl, 5
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x9f], rax
movzx eax, byte [rsp + 0xb9]
mov rcx, qword [rsp + 0xba]
mov edx, dword [rsp + 0xc2]
movzx r8d, word [rsp + 0xc6]
movzx r9d, byte [rsp + 0xc8]
movupd xmm0, xmmword [rsp + 0xc9]
movapd xmmword [rsp + 0x90], xmm0
mov byte [rsp + 0x80], al
mov qword [rsp + 0x81], rcx
mov dword [rsp + 0x89], edx
mov word [rsp + 0x8d], r8w
mov byte [rsp + 0x8f], r9b
cmp dword [rsi], 3
je 0x1800b24d4
mov rcx, rsi
call fcn.1800b24e0
mov qword [rsi], 3
cmp bpl, 5
je 0x1800b232d
mov byte [rsp + 0x30], bpl
movapd xmm0, xmmword [rsp + 0x80]
movapd xmm1, xmmword [rsp + 0x90]
movupd xmmword [rsp + 0x31], xmm0
movupd xmmword [rsp + 0x41], xmm1
mov rax, qword [rsp + 0x9f]
mov qword [rsp + 0x50], rax
movzx eax, bpl
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x1800b232d
test eax, eax
je 0x1800b232d
cmp eax, 1
jne 0x1800b22cd
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
call qword [rax + 0x10]
jmp 0x1800b232d
mov rax, qword [rsp + 0x38]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x1800b232d
test rcx, rcx
je 0x1800b232d
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1800b231b
cmp qword [rbx + 0x10], 0x11
jb 0x1800b2309
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1801fa958]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [0x1801fa958]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
cmp bpl, 5
setne al
movaps xmm6, xmmword [rsp + 0xe0]
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.18016c730
xor al, 1
movzx ecx, byte [r15 + 0x18]
test cl, cl
je 0x1800b20ce
jmp 0x1800b2421
call fcn.18016c730
test al, al
jne 0x1800b20fb
mov byte [r15 + 0x18], 1
jmp 0x1800b20fb
call fcn.18016c730
test al, al
jne 0x1800b19f3
jmp 0x1800b243d
call fcn.18016c730
mov ebp, eax
xor bpl, 1
movzx eax, byte [r15 + 0x18]
test al, al
je 0x1800b1a5a
jmp 0x1800b2421
add rcx, rcx
cmp rcx, 0x1000000
mov r13d, 0x1000000
cmovb r13, rcx
mov dword [rbx + 0x4d8], r13d
mov dword [rbx + 0x4dc], 0
mov rcx, qword [rbx + 0x4b8]
mov rax, rcx
shr rax, 1
mov edx, dword [rbx + 0x4c0]
shr edx, 1
lea r8d, [rdx + 0x1dcd6500]
test cl, 1
cmove r8d, edx
imul rcx, r8, 0x44b82fa1
shr rcx, 0x3c
imul ecx, ecx, 0x3b9aca00
sub r8d, ecx
mov qword [rbx + 0x4b8], rax
mov dword [rbx + 0x4c0], r8d
mov cl, 1
add rbp, rax
jae 0x1800b2020
ud2
call fcn.18016c730
test al, al
jne 0x1800b2090
mov r15d, 2
mov r14, qword [rsp + 0x78]
mov byte [r12 + 0x18], 1
jmp 0x1800b19f3
call fcn.18016c730
test al, al
jne 0x1800b1b1a
mov byte [r15 + 0x18], 1
jmp 0x1800b1b1a
test al, al
je 0x1800b2468
call fcn.180077e30
mov rax, qword [r15 + 0x48]
test rax, rax
je 0x1800b2478
mov rcx, qword [r15 + 0x50]
call qword [rax + 0x18]
mov rcx, qword [0x1801fa958]
xor edx, edx
mov r8, r15
call qword [sym.imp.kernel32.dll_HeapFree]
mov dword [rbx + 0x4e8], 0x3b9aca00
movupd xmm0, xmmword [rsp + 0x30]
movupd xmm1, xmmword [rsp + 0x40]
movupd xmmword [rbx + 0x4ec], xmm0
movupd xmmword [rbx + 0x4fc], xmm1
mov eax, dword [rsp + 0x50]
mov dword [rbx + 0x50c], eax
mov byte [r12 + 0x68], 1
mov r15d, 1
jmp 0x1800b19c6
call sub.kernel32.dll_GetLastError
ud2
mov qword [rsi], 3
ud2