Function at 0x18003f4d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x278
mov r15, qword [0x180064ca0]
mov rbx, rcx
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
mov rax, qword [r15 + 0x3ed0]
mov qword [rbp - 0x68], r15
mov byte [rax + 0xb8], 1
mov r14, qword [r15 + 0x3ed0]
mov qword [rbp - 0x38], r14
cmp byte [r14 + 0xbb], 0
jne 0x18003f964
mov r12d, dword [rbp + 0x1e8]
mov eax, r12d
shr eax, 0xe
mov esi, r12d
and al, 1
shr esi, 0x1a
mov dword [rsp + 0x64], eax
and sil, 1
mov eax, r12d
mov dword [rsp + 0x5c], esi
shr eax, 0xf
and al, 1
mov dword [rbp - 0x58], eax
mov eax, r12d
shr eax, 0x10
not al
and al, 1
mov dword [rsp + 0x6c], eax
mov eax, r12d
shr eax, 0x12
and al, 1
mov dword [rbp - 0x74], eax
test sil, sil
je 0x18003f5b6
call fcn.18001eec0
movsxd rax, dword [r14 + 0xf0]
xor edx, edx
mov r8, qword [r14 + 0xf8]
mov rcx, rbx
mov r8d, dword [r8 + rax*4 - 4]
call fcn.18000f910
mov rcx, qword [r14]
mov edi, eax
mov dword [rsp + 0x68], eax
cmp dword [rcx + 0x3f18], eax
jne 0x18003f5f3
mov r8, rbx
mov edx, 0xb
mov ecx, eax
call fcn.1800262a0
mov r8, qword [0x180064ca0]
mov rcx, rbx
cmp rbx, 0xffffffffffffffff
jae 0x18003f620
movzx edx, byte [rcx]
test dl, dl
je 0x18003f620
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x18003f617
cmp byte [rax], dl
je 0x18003f620
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x18003f603
movss xmm1, dword [0x18005b228]
xorps xmm11, xmm11
movss xmm0, dword [r8 + 0x3c08]
movss xmm9, dword [0x18005b208]
movss dword [rbp - 8], xmm1
cmp rbx, rcx
jne 0x18003f64d
xorps xmm7, xmm7
jmp 0x18003f69a
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 0x1c8]
mov rcx, qword [r8 + 0x3c00]
movaps xmm3, xmm9
mov qword [rsp + 0x28], rbx
movaps xmm2, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.180036120
movss xmm0, dword [rbp + 0x1c8]
addss xmm0, dword [0x18005b15c]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x1cc]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp], xmm7
test sil, sil
je 0x18003f6b5
movss xmm0, dword [r15 + 0x3c08]
mulss xmm0, dword [0x18005b1b4]
movss xmm6, dword [r15 + 0x3810]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18001ed20
mov rdx, qword [rbp + 0x1e0]
lea rcx, [rbp + 0x1c8]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18001eda0
comiss xmm7, xmm11
jbe 0x18003f6fb
movaps xmm1, xmm7
addss xmm1, dword [r15 + 0x3824]
jmp 0x18003f6fe
xorps xmm1, xmm1
movss xmm8, dword [r14 + 0x100]
lea rcx, [rbp + 0x1c8]
movss xmm12, dword [r14 + 0x104]
movaps xmm13, xmm8
movss xmm7, dword [rbp + 0x1cc]
movaps xmm0, xmm12
movss xmm10, dword [rbp + 0x1c8]
addss xmm0, xmm7
addss xmm1, xmm10
movss dword [rbp - 0x28], xmm8
movaps xmm2, xmm12
movss dword [rbp - 0x40], xmm12
addss xmm2, xmm7
movss dword [rbp + 4], xmm7
addss xmm13, xmm10
movss dword [rsp + 0x78], xmm8
movss dword [rbp - 0x7c], xmm0
mov rbx, r14
addss xmm1, xmm8
movss dword [rsp + 0x7c], xmm12
xorps xmm0, xmm0
movss dword [rbp - 0x20], xmm8
movss dword [rbp - 0x14], xmm2
subss xmm2, xmm12
movss dword [rbp - 4], xmm13
movss dword [rbp - 0x80], xmm13
movss dword [rbp - 0x18], xmm1
subss xmm1, xmm8
movss dword [rbp - 0x1c], xmm12
movss dword [rbp + 0x1cc], xmm2
mov qword [rbp - 0x50], rbx
movups xmmword [rbp + 0x90], xmm0
movss dword [rbp + 0x1c8], xmm1
movaps xmm1, xmm6
call fcn.18001e950
test sil, sil
je 0x18003fa08
mov r9d, 0x400
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x20]
call fcn.18001eac0
test al, al
je 0x18003f95f
movups xmm0, xmmword [r15 + 0x476c]
mov rbx, qword [0x180064ca0]
lea rdx, [rbp - 0x20]
mov r13d, dword [r15 + 0x4774]
movups xmmword [rbp + 0x90], xmm0
mov dword [rbp - 0x20], 3
movss dword [r14 + 0x100], xmm8
lea rcx, [rbx + 0x4818]
movss dword [r14 + 0x104], xmm12
movups xmm0, xmmword [rbx + 0x38dc]
movups xmmword [rbp - 0x1c], xmm0
call fcn.180026880
movups xmm0, xmmword [r15 + 0x391c]
mov ecx, 7
movups xmmword [rbx + 0x38dc], xmm0
movss xmm1, dword [r15 + 0x3814]
call fcn.180010140
movss xmm1, dword [r15 + 0x3818]
mov ecx, 8
call fcn.180010140
mov rbx, qword [0x180064ca0]
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x20], 2
movss xmm1, dword [rbx + 0x37d8]
lea rcx, [rbx + 0x4828]
movss xmm0, dword [rbx + 0x37dc]
movss dword [rbp - 0x1c], xmm1
movss dword [rbp - 0x18], xmm0
call fcn.180026790
movss xmm6, dword [rbp - 0x80]
lea r8, [rbp + 0x1c8]
movss xmm8, dword [rsp + 0x78]
movaps xmm0, xmm6
movss xmm1, dword [rbp - 0x7c]
subss xmm0, xmm8
movss xmm12, dword [rsp + 0x7c]
xor r12d, r12d
mov rcx, qword [rbp + 0x1c0]
subss xmm1, xmm12
mov edx, edi
movss dword [rbp - 4], xmm6
movss dword [rbp - 0x28], xmm8
movss dword [rbp + 0x1c8], xmm0
movss dword [rbp - 0x40], xmm12
movss dword [rbp + 0x1cc], xmm1
mov qword [rbx + 0x37d8], r12
call fcn.180016920
mov ecx, 3
movzx ebx, al
call fcn.1800101c0
mov r8, qword [0x180064ca0]
movsxd rax, dword [r8 + 0x4818]
cmp eax, 1
jl 0x18003f956
mov rcx, qword [r8 + 0x4820]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x38ac], xmm0
dec dword [r8 + 0x4818]
test bl, bl
jne 0x18003f9a9
call fcn.180016b10
call fcn.18001eff0
xor al, al
lea r11, [rsp + 0x278]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rbx, qword [r15 + 0x3ed0]
mov qword [rbp - 0x50], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
subss xmm10, dword [rbx + 0xac]
mov word [rbx + 0x15e], cx
movss xmm0, dword [r15 + 0x380c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [r15 + 0x3810]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
jmp 0x18003fa5b
bt r12d, 0x1c
jb 0x18003fa51
mov r9d, 0x400
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x20]
call fcn.18001eac0
test al, al
je 0x18003f964
movss xmm0, dword [rbp - 0x80]
movss xmm12, dword [rsp + 0x7c]
movss xmm8, dword [rsp + 0x78]
movss dword [rbp - 4], xmm0
movss dword [rbp - 0x40], xmm12
movss dword [rbp - 0x28], xmm8
mov r13d, dword [r15 + 0x4774]
xor r12d, r12d
mov edx, edi
lea rcx, [rsp + 0x78]
call fcn.1800135e0
mov byte [rsp + 0x61], al
movzx ecx, al
test al, al
je 0x18003fa7d
mov dword [r15 + 0x4a50], 1
mov rsi, qword [0x180064ca0]
test edi, edi
je 0x18003fa99
cmp dword [rsi + 0x4be8], edi
jne 0x18003fa99
add rsi, 0x4be0
jmp 0x18003fa9c
mov rsi, r12
mov eax, dword [r15 + 0x3f30]
shr r13d, 8
and r13b, 1
mov qword [rbp - 0x20], rsi
cmp eax, edi
je 0x18003fad7
cmp dword [r15 + 0x48c0], edi
jne 0x18003fad7
test byte [r15 + 0x48cc], 1
jne 0x18003fad0
cmp dword [r15 + 0x48e4], 2
jne 0x18003fad7
mov byte [rsp + 0x50], 1
jmp 0x18003fadc
mov byte [rsp + 0x50], 0
test cl, cl
je 0x18003faef
cmp byte [r15 + 0x3748], 0
je 0x18003faef
mov r12b, 1
jmp 0x18003faf2
xor r12b, r12b
mov r8d, dword [rsp + 0x5c]
mov byte [rbp + 0x1d8], r12b
test r8b, r8b
je 0x18003fb64
test rsi, rsi
je 0x18003fb64
test eax, eax
jne 0x18003fb64
movsxd rax, dword [rbx + 0xf0]
lea rcx, str.SCROLLY
mov r8, qword [rbx + 0xf8]
xor edx, edx
mov r8d, dword [r8 + rax*4 - 4]
call fcn.18000f910
mov rcx, qword [rbp - 0x50]
mov ebx, eax
mov rcx, qword [rcx]
cmp dword [rcx + 0x3f18], eax
jne 0x18003fb51
lea r8, str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.1800262a0
cmp dword [r15 + 0x3f60], ebx
jne 0x18003fb5f
mov dil, 1
jmp 0x18003fb75
mov r8d, dword [rsp + 0x5c]
xor dil, dil
test r8b, r8b
je 0x18003fbef
test rsi, rsi
je 0x18003fbef
mov rcx, qword [rbp - 0x50]
xor edx, edx
movsxd rax, dword [rcx + 0xf0]
mov r8, qword [rcx + 0xf8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.18000f910
mov rcx, qword [rbp - 0x50]
mov ebx, eax
mov rcx, qword [rcx]
cmp dword [rcx + 0x3f18], eax
jne 0x18003fbbe
lea r8, str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.1800262a0
mov r8d, dword [rsp + 0x5c]
cmp dword [r15 + 0x3f30], ebx
jne 0x18003fbef
mov rax, qword [rbp - 0x50]
mov cl, 1
mov byte [rbp + 0x1f0], cl
mov byte [rbp + 0x1f8], 0
mov byte [rsp + 0x54], 0
movss xmm9, dword [rax + 0x88]
jmp 0x18003fc1d
xor cl, cl
mov byte [rbp + 0x1f8], 0
mov byte [rsp + 0x54], 0
mov byte [rbp + 0x1f0], cl
test r8b, r8b
je 0x18003fc17
mov rax, qword [rbp - 0x50]
movss xmm9, dword [rax + 0x88]
jmp 0x18003fc1d
mov byte [rbp + 0x1f0], cl
test rsi, rsi
je 0x18003fc32
movzx eax, r8b
xor al, 1
cmp byte [rsi + 0x6b], al
je 0x18003fc32
mov r15b, 1
jmp 0x18003fc35
xor r15b, r15b
test r12b, r12b
jne 0x18003fc60
test dil, dil
jne 0x18003fc60
cmp byte [rsp + 0x50], dil
jne 0x18003fc60
test r13b, r13b
jne 0x18003fc60
mov byte [rbp + 0x1c8], r13b
test cl, cl
jne 0x18003fc67
mov rax, qword [rbp - 0x68]
mov byte [rsp + 0x58], cl
jmp 0x18003fc7c
mov byte [rbp + 0x1c8], 1
mov rax, qword [rbp - 0x68]
mov edx, dword [rsp + 0x68]
mov byte [rsp + 0x58], 1
cmp dword [rax + 0x3f30], edx
jne 0x18003fc85
test r15b, r15b
je 0x18003fede
lea rsi, [rax + 0x4be0]
mov dword [rsi + 0xe80], 0xbe99999a
mov ecx, dword [rsi + 8]
mov qword [rbp - 0x20], rsi
call fcn.18003f410
mov rax, qword [rbp + 0x1d0]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x18003fcb0
mov ecx, dword [rsi + 0x3c]
lea edi, [rbx + 1]
cmp edi, ecx
jle 0x18003fce7
test ecx, ecx
je 0x18003fcd2
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18003fcd7
mov eax, 8
cmp eax, edi
lea rcx, [rsi + 0x38]
mov edx, edi
cmovg edx, eax
call fcn.180027060
mov dword [rsi + 0x38], edi
mov rcx, qword [rsi + 0x40]
movsxd r8, edi
mov rdi, qword [rbp + 0x1d0]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r14d, dword [rsp + 0x68]
cmp dword [rsi + 8], r14d
jne 0x18003fd32
test r15b, r15b
jne 0x18003fd32
mov r12b, 1
cmp dword [rsi + 0x10], ebx
jne 0x18003fd32
cmp byte [rsi + 0x48], r15b
je 0x18003fd35
mov rcx, qword [rsi + 0x30]
mov rdx, rdi
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18003fd35
xor r12b, r12b
mov dword [rsi + 8], r14d
mov ecx, dword [rsi + 0x1c]
cmp ecx, 0x21
jge 0x18003fd68
test ecx, ecx
je 0x18003fd50
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18003fd55
mov eax, 8
mov edx, 0x21
lea rcx, [rsi + 0x18]
cmp eax, edx
cmovg edx, eax
call fcn.1800270f0
mov dword [rsi + 0x18], 0x21
mov ecx, dword [rsi + 0x2c]
test ecx, ecx
jns 0x18003fd91
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
mov edx, ecx
test eax, eax
lea rcx, [rsi + 0x28]
cmovg edx, eax
call fcn.180027060
xor ecx, ecx
mov dword [rsi + 0x28], ecx
mov r15, qword [rsi + 0x20]
mov byte [rsi + 0x48], cl
mov rbx, r15
lea r14, [r15 + 0x3e]
cmp r15, r14
jae 0x18003fddc
nop dword [rax]
cmp byte [rdi], 0
je 0x18003fdda
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rdi
call fcn.18000fc30
movsxd rcx, eax
movzx eax, word [rbp - 0x70]
add rdi, rcx
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x18003fdb0
xor ecx, ecx
mov rax, qword [rbp + 0x1d0]
mov r8d, dword [rsp + 0x5c]
sub edi, eax
mov word [rbx], cx
sub rbx, r15
sar rbx, 1
mov dword [rsi + 0xc], ebx
mov dword [rsi + 0x10], edi
test r12b, r12b
je 0x18003fe22
cmp dword [rsi + 0x54], ebx
mov ecx, ebx
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], ebx
mov dword [rsi + 0x54], ecx
mov ecx, ebx
cmovl ecx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], ebx
mov dword [rsi + 0x58], ecx
cmovl ebx, dword [rsi + 0x5c]
mov dword [rsi + 0x5c], ebx
jmp 0x18003fe69
movzx eax, r8b
mov qword [rsi + 0x50], 0
xor al, 1
mov dword [rsi + 0xe72], 0x630000
mov byte [rsi + 0x6b], al
mov dword [rsi + 0xe78], ecx
mov dword [rsi + 0xe7c], 0x3e7
mov qword [rsi + 0x58], 0
mov word [rsi + 0x69], 1
mov dword [rsi + 0x70], ecx
mov byte [rsi + 0x68], 0
mov byte [rsi + 0x60], 0
mov dword [rsi + 0x64], ecx
test r8b, r8b
jne 0x18003fec2
mov eax, dword [rsp + 0x54]
mov ecx, 1
mov edx, dword [rbp + 0x1e8]
test dl, 0x10
movzx eax, al
cmovne eax, ecx
mov dword [rsp + 0x54], eax
mov rax, qword [rbp - 0x68]
cmp byte [rsp + 0x50], r8b
je 0x18003fea7
test r12b, r12b
je 0x18003fea3
test byte [rax + 0x48cc], 4
jne 0x18003fea7
mov byte [rsp + 0x54], cl
test r13b, r13b
jne 0x18003febe
cmp byte [rbp + 0x1d8], r13b
je 0x18003fec2
cmp byte [rax + 0xe24], r13b
je 0x18003fec2
mov byte [rsp + 0x54], cl
test dword [rbp + 0x1e8], 0x2000
mov r14, qword [rbp - 0x38]
movzx r12d, byte [rbp + 0x1d8]
je 0x18003fede
mov byte [rsi + 0x60], 1
mov r13, qword [rbp - 0x68]
mov edi, dword [rsp + 0x68]
movzx ebx, byte [rbp + 0x1c8]
movzx r15d, byte [r13 + 0x79]
mov byte [rsp + 0x70], r15b
cmp dword [r13 + 0x3f30], edi
je 0x18003ff32
test bl, bl
je 0x18003ff25
mov rdx, r14
mov ecx, edi
call fcn.1800132c0
mov rdx, r14
mov ecx, edi
call fcn.180020790
mov rcx, r14
call fcn.18001bac0
mov r8d, dword [rsp + 0x5c]
cmp dword [r13 + 0x3f30], edi
jne 0x18004006d
test r12b, r12b
je 0x18003ff53
mov rax, qword [0x180064ca0]
mov dword [rax + 0x4588], edi
mov dword [rax + 0x4584], edi
mov word [rax + 0x458c], 0
mov eax, dword [r13 + 0x4740]
mov ecx, dword [rbp + 0x1e8]
or eax, 3
mov dword [r13 + 0x4740], eax
test r8b, r8b
jne 0x18003ff73
test cl, cl
jns 0x18003ff7d
or eax, 0xc
mov dword [r13 + 0x4740], eax
mov rax, qword [0x180064ca0]
mov dword [rax + 0x3fd0], edi
mov dword [rax + 0x3fcc], edi
mov word [rax + 0x3fd4], 0
mov dword [rax + 0x3fdc], edi
mov dword [rax + 0x3fd8], edi
mov word [rax + 0x3fe0], 0
test r8b, r8b
je 0x18003ffdd
mov dword [rax + 0x3fb8], edi
mov dword [rax + 0x3fb4], edi
mov word [rax + 0x3fbc], 0
mov dword [rax + 0x3fc4], edi
mov dword [rax + 0x3fc0], edi
mov word [rax + 0x3fc8], 0
test r15b, r15b
je 0x18003fff7
mov dword [rax + 0x45f4], edi
mov dword [rax + 0x45f0], edi
mov word [rax + 0x45f8], 0
test ecx, 0x440
je 0x18004002d
mov ecx, 0x200
call fcn.18001c790
mov rdx, qword [0x180064ca0]
lea ecx, [rdi - 1]
cmp ecx, 0xfffffffd
mov ecx, edi
jbe 0x180040020
mov ecx, dword [rdx + 0x474c]
cmp byte [rax + 4], 0
jbe 0x18004002d
mov dword [rax + 0xc], ecx
mov byte [rax + 4], 0
cmp dword [r13 + 0x3f30], edi
jne 0x18004006d
test rsi, rsi
jne 0x180040044
xor edx, edx
xor ecx, ecx
call fcn.1800132c0
cmp dword [r13 + 0x3f30], edi
jne 0x18004006d
cmp byte [r13 + 0x3748], 0
je 0x18004007b
cmp byte [rsp + 0x58], 0
jne 0x18004007b
test bl, bl
jne 0x18004007b
mov byte [rbp + 0x1f8], 1
mov cl, 1
jmp 0x180040081
test rsi, rsi
je 0x18004007f
cmp byte [rbp + 0x1f0], 0
je 0x18004007f
mov cl, 1
jmp 0x180040081
xor cl, cl
mov r12d, dword [rsp + 0x54]
mov byte [rbp + 0x1c8], cl
test rsi, rsi
je 0x1800400a6
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18004009e
test r12b, r12b
je 0x1800400a6
test cl, cl
je 0x1800400a6
mov al, 1
jmp 0x1800400a8
xor al, al
mov edx, dword [rsp + 0x64]
xor r8b, r8b
mov byte [rbp + 0x1d8], al
mov byte [rbp + 0x1f0], r8b
mov byte [rsp + 0x58], r8b
test dl, dl
je 0x1800401c7
test rsi, rsi
je 0x1800401c7
test cl, cl
jne 0x1800400de
test al, al
je 0x1800401cf
mov ecx, dword [rsi + 0x1c]
cmp ecx, 0x21
jge 0x18004010d
test ecx, ecx
je 0x1800400f5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800400fa
mov eax, 8
mov edx, 0x21
lea rcx, [rsi + 0x18]
cmp eax, edx
cmovg edx, eax
call fcn.1800270f0
mov rax, qword [rbp + 0x1d0]
mov dword [rsi + 0x18], 0x21
mov rdi, rax
mov r15, qword [rsi + 0x20]
mov rbx, r15
lea r14, [r15 + 0x40]
cmp r15, r14
jae 0x180040161
nop
cmp byte [rdi], 0
je 0x18004015a
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rdi
call fcn.18000fc30
movsxd rcx, eax
movzx eax, word [rbp - 0x70]
add rdi, rcx
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x180040130
mov rax, qword [rbp + 0x1d0]
xor r8d, r8d
sub edi, eax
mov word [rbx], r8w
sub rbx, r15
movzx r15d, byte [rsp + 0x70]
sar rbx, 1
cmp dword [rsi + 0x54], ebx
mov ecx, ebx
mov edx, ebx
mov dword [rsi + 0xc], ebx
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], ebx
mov dword [rsi + 0x54], ecx
mov ecx, r8d
cmovl edx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], ebx
movzx r8d, byte [rbp + 0x1d8]
cmovl ebx, dword [rsi + 0x5c]
cmp edx, ebx
mov dword [rsi + 0x10], edi
mov edi, dword [rsp + 0x68]
cmovne ecx, r8d
mov dword [rsi + 0x58], edx
mov edx, dword [rsp + 0x64]
movzx eax, cl
mov byte [rbp + 0x1d8], cl
movzx ecx, byte [rbp + 0x1c8]
mov dword [rsi + 0x5c], ebx
test cl, cl
jne 0x1800401d8
test al, al
jne 0x1800401d8
cmp dword [r13 + 0x3f30], edi
jne 0x1800401ea
test dl, dl
jne 0x1800401ea
test rsi, rsi
je 0x1800401ea
mov byte [rbp - 0x76], 1
cmp byte [rsi + 0x48], dl
jne 0x1800401ee
mov byte [rbp - 0x76], 0
cmp byte [rbp - 0x58], 0
je 0x1800402bb
mov rdx, qword [r13 + 0x3c00]
cmp dword [rdx + 0x18], 0x2a
ja 0x18004020b
mov r8, qword [rdx + 0x38]
jmp 0x18004022f
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x180040223
mov r8, qword [rdx + 0x38]
jmp 0x18004022f
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rdi, [r13 + 0x5a88]
mov rbx, qword [0x180064ca0]
mov dword [rdi + 0x14], eax
mov rax, qword [r13 + 0x3c00]
mov qword [rbp - 0x38], rdi
mov ecx, dword [rax + 0x64]
mov dword [rdi + 0x64], ecx
mov rax, qword [r13 + 0x3c00]
mov ecx, dword [rax + 0x68]
mov dword [rdi + 0x68], ecx
mov rax, qword [r13 + 0x3c00]
mov ecx, dword [rax + 0x6c]
mov dword [rdi + 0x6c], ecx
mov rax, qword [r13 + 0x3c00]
mov rcx, qword [rax + 0x40]
mov qword [rdi + 0x40], rcx
mov rcx, rdi
mov qword [rdi + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rdi + 0x10], eax
call fcn.18001bdf0
lea rdx, [rbp - 0x38]
lea rcx, [rbx + 0x4838]
call fcn.180026dc0
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rbx + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.18002f970
movss xmm0, dword [0x18005b130]
xor ecx, ecx
mov dword [rbp - 0x70], ecx
mov ebx, 0x20000c
mov ecx, dword [rsp + 0x68]
cmp dword [r13 + 0x3f30], ecx
jne 0x180040783
mov eax, dword [rsi + 0x10]
mov edi, dword [rbp + 0x1e8]
mov r14d, dword [rsp + 0x5c]
mov dword [rsi + 0xe88], edi
mov byte [rsi + 0xe86], 0
mov dword [rsi + 0x4c], 0x20
cmp byte [r13 + 0xe10], 0
mov dword [r13 + 0x5e14], 1
mov dword [rbp - 0x70], eax
sete al
mov byte [r13 + 0x3f3d], al
movss xmm1, dword [r13 + 0xe08]
subss xmm1, xmm8
subss xmm1, dword [r13 + 0x380c]
addss xmm1, dword [rsi + 0x50]
test r14b, r14b
je 0x180040358
mov rax, qword [rbp - 0x50]
movss xmm2, dword [r13 + 0xe0c]
subss xmm2, dword [rax + 0x104]
jmp 0x180040365
movss xmm2, dword [r13 + 0x3c08]
mulss xmm2, xmm0
test r12b, r12b
je 0x18004038a
mov eax, dword [rsi + 0xc]
xor r14d, r14d
mov dword [rsi + 0x58], r14d
mov byte [rsi + 0x6a], r14b
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0xe85], 1
jmp 0x180040612
movzx eax, byte [rsp + 0x61]
test al, al
je 0x180040518
cmp word [r13 + 0x3752], 2
jb 0x180040518
cmp byte [r13 + 0xe25], 0
jne 0x180040518
cmp byte [rsi + 0x6b], 0
je 0x1800403be
movaps xmm2, xmm11
mov rcx, rsi
call fcn.18003d460
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], eax
mov byte [rsi + 0x6a], 0
test byte [r13 + 0x3752], 1
jne 0x180040489
test eax, eax
je 0x1800403f8
movsxd rcx, eax
mov rax, qword [rsi + 0x20]
cmp word [rax + rcx*2 - 2], 0xa
je 0x1800403f8
xor cl, cl
jmp 0x1800403fa
mov cl, 1
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180040406
test cl, cl
jne 0x180040426
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.18003d910
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180040441
cmp dword [rsi + 0x58], eax
jne 0x18004043e
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x180040441
mov dword [rsi + 0x54], eax
mov edx, dword [rsi + 0x54]
mov rcx, rsi
call fcn.18003d0a0
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x5c], eax
mov edx, dword [rsi + 0x5c]
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0xc]
cmp ecx, edx
je 0x180040478
cmp ecx, eax
jle 0x180040468
mov dword [rsi + 0x58], eax
mov ecx, eax
cmp edx, eax
jle 0x180040471
mov dword [rsi + 0x5c], eax
mov edx, eax
cmp ecx, edx
jne 0x180040478
mov dword [rsi + 0x54], ecx
cmp dword [rsi + 0x54], eax
jle 0x180040601
mov dword [rsi + 0x54], eax
jmp 0x180040601
movsxd rcx, eax
lea rdx, [rsi + 0x54]
mov rax, qword [rsi + 0x20]
mov r8d, 0x200004
movzx ebx, word [rax + rcx*2]
mov rcx, rsi
call fcn.18003d910
mov r8d, 0x600005
mov byte [rsi + 0xe84], 1
lea rdx, [rsi + 0x54]
mov dword [rsi + 0xe80], 0xbe99999a
mov rcx, rsi
call fcn.18003d910
mov r8d, 0x600001
mov byte [rsi + 0xe84], 1
lea rdx, [rsi + 0x54]
mov dword [rsi + 0xe80], 0xbe99999a
mov rcx, rsi
call fcn.18003d910
cmp bx, 0xa
je 0x180040506
test r14b, r14b
je 0x180040506
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], ecx
mov dword [rsi + 0x54], ecx
mov edi, dword [rbp + 0x1e8]
mov byte [rsi + 0xe84], 0
jmp 0x180040601
cmp byte [r13 + 0x3748], 0
je 0x18004059f
cmp byte [rsi + 0xe85], 0
jne 0x18004059f
test al, al
je 0x18004060f
cmp byte [r13 + 0xe25], 0
je 0x180040573
cmp byte [rsi + 0x6b], 0
je 0x180040547
movaps xmm2, xmm11
mov eax, dword [rsi + 0x5c]
lea rbx, [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180040559
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x58], eax
mov rcx, rsi
call fcn.18003d460
mov ecx, 0x54
mov dword [rbx], eax
mov rdx, rsi
mov dword [rdx + rcx], eax
jmp 0x180040601
cmp byte [rsi + 0x6b], 0
je 0x18004057d
movaps xmm2, xmm11
mov rcx, rsi
call fcn.18003d460
mov dword [rsi + 0x58], eax
lea rbx, [rsi + 0x5c]
mov byte [rsi + 0x6a], 0
mov ecx, 0x54
mov dword [rbx], eax
mov rdx, rsi
mov dword [rdx + rcx], eax
jmp 0x180040601
cmp byte [r13 + 0xe10], 0
je 0x18004060f
cmp byte [rsi + 0xe85], 0
jne 0x18004060f
movss xmm0, dword [r13 + 0xf8]
ucomiss xmm0, xmm11
jp 0x1800405d4
jne 0x1800405d4
movss xmm0, dword [r13 + 0xfc]
ucomiss xmm0, xmm11
jp 0x1800405d4
je 0x18004060f
cmp byte [rsi + 0x6b], 0
je 0x1800405de
movaps xmm2, xmm11
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x1800405ec
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x58], eax
mov rcx, rsi
call fcn.18003d460
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0xe84], 1
mov ecx, dword [rsp + 0x68]
mov dword [rsi + 0xe80], 0xbe99999a
xor r14d, r14d
cmp byte [rsi + 0xe85], 0
je 0x18004062c
cmp byte [r13 + 0xe10], 0
jne 0x18004062c
mov byte [rsi + 0xe85], 0
bt edi, 0xa
jae 0x18004068f
mov edx, ecx
xor r8d, r8d
mov ecx, 0x200
call fcn.18001e850
mov ecx, dword [rsp + 0x64]
test al, al
je 0x180040693
test cl, cl
jne 0x180040693
mov edx, edi
mov dword [rsp + 0x54], 9
lea rcx, [rsp + 0x54]
mov dword [rsp + 0x20], 2
call fcn.18003efd0
test al, al
je 0x18004068f
mov r8d, dword [rsp + 0x54]
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.18003d910
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mov ecx, dword [rsp + 0x64]
cmp byte [r13 + 0xe24], 0
je 0x1800406a7
cmp byte [r13 + 0xe26], 0
je 0x1800406b6
test r15b, r15b
je 0x1800406ba
cmp byte [r13 + 0xe27], 0
je 0x1800406ba
mov al, 1
jmp 0x1800406bc
xor al, al
cmp dword [r13 + 0x37c0], 0
jle 0x180040783
test al, al
jne 0x180040754
test cl, cl
jne 0x180040754
cmp byte [rsp + 0x50], cl
jne 0x180040754
mov r15d, dword [rbp + 0x1e8]
mov edi, r14d
mov rbx, r14
nop dword [rax]
mov rax, qword [r13 + 0x37c8]
movzx ecx, word [rax + rbx]
mov dword [rsp + 0x54], ecx
cmp ecx, 9
je 0x18004073f
mov edx, r15d
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x54]
call fcn.18003efd0
test al, al
je 0x18004073f
mov r8d, dword [rsp + 0x54]
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.18003d910
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
inc edi
add rbx, 2
cmp edi, dword [r13 + 0x37c0]
jl 0x1800406f0
movzx r15d, byte [rsp + 0x70]
mov ecx, dword [r13 + 0x37c4]
test ecx, ecx
jns 0x18004077c
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [r13 + 0x37c0]
test eax, eax
cmovg edx, eax
call fcn.1800270f0
mov dword [r13 + 0x37c0], r14d
mov r12d, dword [rsp + 0x68]
xor r14b, r14b
mov byte [rsp + 0x72], r14b
cmp dword [r13 + 0x3f30], r12d
jne 0x180041429
cmp byte [r13 + 0x3f3c], r14b
jne 0x180041429
cmp byte [rbp + 0x1f8], r14b
jne 0x180041429
movaps xmm0, xmm7
mov edi, 1
subss xmm0, dword [r13 + 0x3810]
mov ecx, edi
divss xmm0, dword [r13 + 0x3c08]
cvttss2si eax, xmm0
cmp eax, edi
cmovge ecx, eax
mov dword [rsi + 0x64], ecx
movzx eax, byte [r13 + 0xe25]
neg al
mov dword [rsp + 0x54], ecx
sbb ebx, ebx
and ebx, 0x400000
test r15b, r15b
je 0x180040823
movzx eax, byte [r13 + 0xe26]
mov byte [rsp + 0x50], al
cmp byte [r13 + 0xe27], r14b
je 0x18004082f
cmp byte [r13 + 0xe24], r14b
jne 0x18004082f
test al, al
jne 0x18004082f
mov byte [rsp + 0x60], dil
jmp 0x180040834
movzx eax, byte [r13 + 0xe24]
mov byte [rsp + 0x50], al
mov byte [rsp + 0x60], r14b
mov r8d, edi
mov edx, r12d
mov ecx, 0xa39
call fcn.18001e850
test al, al
jne 0x18004085c
mov r8d, edi
mov edx, r12d
mov ecx, 0x220a
call fcn.18001e850
test al, al
je 0x180040887
mov r14d, dword [rsp + 0x64]
mov r13d, dword [rbp - 0x58]
mov edi, dword [rsp + 0x5c]
test r14b, r14b
jne 0x180040894
test r13b, r13b
jne 0x180040894
test dil, dil
je 0x180040880
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180040894
mov byte [rsp + 0x71], 1
jmp 0x180040899
mov edi, dword [rsp + 0x5c]
mov r14d, dword [rsp + 0x64]
mov r13d, dword [rbp - 0x58]
mov byte [rsp + 0x71], 0
xor r8d, r8d
mov edx, r12d
mov ecx, 0xa24
call fcn.18001e850
test al, al
jne 0x1800408c1
xor r8d, r8d
mov edx, r12d
mov ecx, 0x1209
call fcn.18001e850
test al, al
je 0x1800408d9
test r13b, r13b
jne 0x1800408d9
test dil, dil
je 0x1800408d3
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x1800408d9
mov byte [rbp - 0x77], 1
jmp 0x1800408dd
mov byte [rbp - 0x77], 0
mov r13d, 1
mov edx, r12d
mov r8d, r13d
mov ecx, 0xa37
call fcn.18001e850
test al, al
jne 0x18004090b
mov r8d, r13d
mov edx, r12d
mov ecx, 0x2209
call fcn.18001e850
test al, al
je 0x180040915
mov byte [rsp + 0x61], r13b
test r14b, r14b
je 0x18004091a
mov byte [rsp + 0x61], 0
mov r8d, r13d
mov edx, r12d
mov ecx, 0xa3b
call fcn.18001e850
mov edi, dword [rsp + 0x6c]
test al, al
je 0x180040940
test r14b, r14b
jne 0x180040940
mov byte [rbp - 0x78], r13b
test dil, dil
jne 0x180040944
mov byte [rbp - 0x78], 0
mov r8d, r13d
mov edx, r12d
mov ecx, 0xa3a
call fcn.18001e850
test al, al
jne 0x180040971
test r15b, r15b
je 0x180040981
mov r8d, r13d
mov edx, r12d
mov ecx, 0x2a3b
call fcn.18001e850
test al, al
je 0x180040981
test r14b, r14b
jne 0x180040981
test dil, dil
je 0x180040981
movzx r12d, r13b
jmp 0x180040984
xor r12b, r12b
mov edx, dword [rsp + 0x68]
xor r8d, r8d
mov ecx, 0xa22
call fcn.18001e850
movzx r13d, al
mov rax, qword [rbp - 0x68]
test byte [rax + 8], 2
je 0x1800409ae
test byte [rax + 0xc], 1
je 0x1800409ae
mov dil, 1
jmp 0x1800409b1
xor dil, dil
mov r14d, 1
xor edx, edx
mov r8d, r14d
mov ecx, 0x20d
call fcn.18001ca20
test al, al
jne 0x1800409e2
mov r8d, r14d
xor edx, edx
mov ecx, 0x267
call fcn.18001ca20
test al, al
jne 0x1800409e2
xor r15b, r15b
jmp 0x1800409e6
movzx r15d, r14b
test dil, dil
je 0x180040a11
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.18001ca20
test al, al
jne 0x180040a14
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.18001ca20
test al, al
jne 0x180040a14
xor r14b, r14b
mov edx, dword [rsp + 0x68]
mov r8d, 1
mov ecx, 0x20e
call fcn.18001e850
test al, al
jne 0x180040a4e
test dil, dil
je 0x180040a49
mov edx, dword [rsp + 0x68]
mov r8d, 1
mov ecx, 0x26c
call fcn.18001e850
test al, al
jne 0x180040a4e
xor dil, dil
jmp 0x180040a51
mov dil, 1
xor edx, edx
mov ecx, 0x201
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040ab2
cmp byte [rsp + 0x60], 0
je 0x180040a75
mov eax, 0x200004
jmp 0x180040a87
cmp byte [rsp + 0x50], 0
mov eax, 0x200000
mov ecx, 0x20000c
cmovne eax, ecx
or ebx, eax
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.18003d910
mov dword [rsi + 0xe80], 0xbe99999a
mov byte [rsi + 0xe84], 1
mov r13, qword [rbp - 0x68]
jmp 0x1800413f9
xor edx, edx
mov ecx, 0x202
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040aee
cmp byte [rsp + 0x60], 0
je 0x180040ad8
mov ecx, 0x200005
or ebx, ecx
jmp 0x180040a89
cmp byte [rsp + 0x50], 0
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or ebx, ecx
jmp 0x180040a89
xor edx, edx
mov ecx, 0x203
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040b88
cmp byte [rsp + 0x5c], 0
je 0x180040b88
mov r13, qword [rbp - 0x68]
cmp byte [r13 + 0xe24], 0
je 0x180040b56
mov r8, qword [rbp - 0x50]
xor eax, eax
movss xmm0, dword [r8 + 0x88]
subss xmm0, dword [r13 + 0x3c08]
mov dword [r8 + 0xa0], eax
mov dword [r8 + 0xa8], eax
maxss xmm0, xmm11
movss dword [r8 + 0x98], xmm0
jmp 0x1800413f9
movzx eax, byte [rsp + 0x60]
lea r8d, [rax*4 + 0x200002]
or r8d, ebx
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.18003d910
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x1800413f9
xor edx, edx
mov ecx, 0x204
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040c0b
cmp byte [rsp + 0x5c], 0
je 0x180040c0b
mov r13, qword [rbp - 0x68]
cmp byte [r13 + 0xe24], 0
je 0x180040bf9
mov rdx, qword [rbp - 0x50]
movss xmm0, dword [r13 + 0x3c08]
mov rax, qword [0x180064ca0]
addss xmm0, dword [rdx + 0x88]
mov rcx, qword [rax + 0x3ed0]
xor eax, eax
minss xmm0, dword [rcx + 0x90]
mov dword [rdx + 0xa0], eax
mov dword [rdx + 0xa8], eax
movss dword [rdx + 0x98], xmm0
jmp 0x1800413f9
movzx eax, byte [rsp + 0x60]
lea r8d, [rax*4 + 0x200003]
jmp 0x180040b63
xor edx, edx
mov ecx, 0x205
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040c6e
cmp byte [rsp + 0x5c], 0
je 0x180040c6e
or ebx, 0x20000e
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.18003d910
movd xmm0, dword [rsp + 0x54]
mov r13, qword [rbp - 0x68]
cvtdq2ps xmm0, xmm0
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mulss xmm0, dword [r13 + 0x3c08]
subss xmm9, xmm0
jmp 0x1800413f9
xor edx, edx
mov ecx, 0x206
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040cd1
cmp byte [rsp + 0x5c], 0
je 0x180040cd1
or ebx, 0x20000f
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.18003d910
movd xmm0, dword [rsp + 0x54]
mov r13, qword [rbp - 0x68]
cvtdq2ps xmm0, xmm0
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mulss xmm0, dword [r13 + 0x3c08]
addss xmm9, xmm0
jmp 0x1800413f9
xor edx, edx
mov ecx, 0x207
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040d0b
mov eax, ebx
or eax, 0x200006
or ebx, 0x200004
mov r13, qword [rbp - 0x68]
cmp byte [r13 + 0xe24], 0
cmovne ebx, eax
mov r8d, ebx
jmp 0x180040b66
xor edx, edx
mov ecx, 0x208
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040d30
mov eax, ebx
or eax, 0x200007
or ebx, 0x200005
jmp 0x180040cf4
xor edx, edx
mov ecx, 0x20a
mov r8d, 1
call fcn.18001ca20
test al, al
je 0x180040d91
cmp byte [rsp + 0x64], 0
jne 0x180040d91
cmp byte [rsp + 0x71], 0
jne 0x180040d91
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180040d86
cmp byte [rsp + 0x50], 0
je 0x180040d86
lea rdx, [rsi + 0x54]
mov r8d, 0x60000d
mov rcx, rsi
call fcn.18003d910
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
or ebx, 0x200008
jmp 0x180040a89
xor edx, edx
mov ecx, 0x20b
mov r8d, 1
call fcn.18001ca20
mov r8d, dword [rsp + 0x64]
test al, al
je 0x180040e57
test r8b, r8b
jne 0x180040e57
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180040deb
cmp byte [rsp + 0x50], r8b
je 0x180040dfd
lea rdx, [rsi + 0x54]
mov r8d, 0x60000c
mov rcx, rsi
call fcn.18003d910
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mov r13, qword [rbp - 0x68]
or ebx, 0x200009
mov r8d, ebx
jmp 0x180040b66
cmp byte [rsp + 0x70], 0
je 0x180040deb
mov r13, qword [rbp - 0x68]
cmp byte [r13 + 0xe27], 0
je 0x180040def
cmp byte [r13 + 0xe26], 0
jne 0x180040def
cmp byte [r13 + 0xe24], 0
jne 0x180040def
lea rdx, [rsi + 0x54]
mov r8d, 0x600004
mov rcx, rsi
call fcn.18003d910
or ebx, 0x200009
mov byte [rsi + 0xe84], 1
mov r8d, ebx
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x180040b66
test r15b, r15b
jne 0x18004136d
test r14b, r14b
jne 0x18004136d
test dil, dil
je 0x180040ecf
test dword [rbp + 0x1e8], 0x100000
je 0x180040ead
mov eax, dword [rsi + 0x10]
test eax, eax
jg 0x180040e9b
xor r8b, r8b
mov byte [rbp + 0x1f8], 1
mov byte [rbp + 0x1d8], r8b
test eax, eax
mov byte [rbp + 0x1c8], r8b
mov r13, qword [rbp - 0x68]
setg r14b
mov byte [rsp + 0x72], r14b
jmp 0x1800413fc
mov r13, qword [rbp - 0x68]
mov r14b, 1
xor cl, cl
mov byte [rsp + 0x72], r14b
xor dl, dl
mov byte [rbp + 0x1f8], r14b
mov byte [rbp + 0x1c8], dl
jmp 0x18004140a
movzx eax, byte [rbp - 0x78]
test al, al
jne 0x180041345
test r12b, r12b
jne 0x180041345
test r13b, r13b
je 0x180040f0b
mov r13, qword [rbp - 0x68]
xor eax, eax
mov dword [rsi + 0x58], eax
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], r12b
mov byte [rsi + 0xe84], 1
jmp 0x1800413f9
movzx r12d, byte [rsp + 0x71]
test r12b, r12b
jne 0x180041142
cmp byte [rbp - 0x77], r12b
jne 0x180041142
cmp byte [rsp + 0x61], r12b
je 0x180040aa9
mov rcx, qword [0x180064ca0]
mov rax, qword [rcx + 0xb0]
test rax, rax
je 0x180040f60
mov rcx, qword [rcx + 0xc0]
call rax
mov rbx, rax
test rax, rax
je 0x180040aa9
mov rcx, qword [0x180064ca0]
jmp 0x180040f67
lea rbx, [0x18005924e]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x180040f70
test rcx, rcx
je 0x180040f84
inc dword [rcx + 0xf4]
movsxd rcx, eax
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r12d, r12d
mov qword [rbp - 0x38], rax
mov r15, rax
mov r14d, r12d
cmp byte [rbx], r12b
je 0x180041007
mov r15d, dword [rbp + 0x1e8]
mov rdi, rax
nop dword [rax]
nop word [rax + rax]
xor r8d, r8d
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.18000fc30
movsxd rcx, eax
mov edx, r15d
add rbx, rcx
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x6c]
call fcn.18003efd0
test al, al
je 0x180040ffe
movzx eax, word [rsp + 0x6c]
inc r14d
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r12b
jne 0x180040fc0
mov r15, qword [rbp - 0x38]
movsxd rax, r14d
mov word [r15 + rax*2], r12w
test r14d, r14d
jle 0x180041119
mov r8d, dword [rsi + 0x5c]
mov eax, dword [rsi + 0x58]
mov ecx, dword [rsi + 0xc]
cmp eax, r8d
je 0x18004104d
mov edx, eax
cmp eax, ecx
jle 0x180041032
mov dword [rsi + 0x58], ecx
mov edx, ecx
mov r9d, r8d
cmp r8d, ecx
jle 0x180041040
mov dword [rsi + 0x5c], ecx
mov r9d, ecx
mov r8d, r9d
mov eax, edx
cmp edx, r9d
jne 0x18004104d
mov dword [rsi + 0x54], edx
mov r9d, dword [rsi + 0x54]
cmp r9d, ecx
jle 0x18004105c
mov dword [rsi + 0x54], ecx
mov r9d, ecx
mov ecx, dword [rsi + 0xc]
cmp eax, r8d
je 0x18004108d
mov edx, eax
cmp eax, ecx
jle 0x18004106f
mov dword [rsi + 0x58], ecx
mov edx, ecx
mov r10d, r8d
cmp r8d, ecx
jle 0x18004107d
mov dword [rsi + 0x5c], ecx
mov r10d, ecx
mov r8d, r10d
mov eax, edx
cmp edx, r10d
jne 0x18004108d
mov dword [rsi + 0x54], edx
mov r9d, edx
cmp r9d, ecx
jle 0x180041095
mov dword [rsi + 0x54], ecx
cmp eax, r8d
je 0x1800410d1
lea rdx, [rsi + 0x54]
mov rcx, rsi
jge 0x1800410b9
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18003d790
mov eax, dword [rsi + 0x58]
mov dword [rsi + 0x5c], eax
jmp 0x1800410ca
sub eax, r8d
mov r9d, eax
call fcn.18003d790
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], r12b
mov edx, dword [rsi + 0x54]
mov r9d, r14d
mov r8, r15
mov rcx, rsi
call fcn.18003d2d0
test al, al
je 0x180041112
mov edi, dword [rsi + 0x54]
lea rcx, [rsi + 0x74]
xor edx, edx
call fcn.18003eac0
test rax, rax
je 0x18004110a
mov dword [rax], edi
mov dword [rax + 4], r12d
mov dword [rax + 8], r14d
mov dword [rax + 0xc], 0xffffffff
add dword [rsi + 0x54], r14d
mov byte [rsi + 0x6a], r12b
mov byte [rsi + 0xe84], 1
test r15, r15
je 0x180041130
mov rax, qword [0x180064ca0]
test rax, rax
je 0x180041130
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r13, qword [rbp - 0x68]
jmp 0x1800413f9
mov r13, qword [rbp - 0x68]
cmp qword [r13 + 0xb8], 0
je 0x180041299
mov edi, dword [rsi + 0x5c]
mov eax, dword [rsi + 0x58]
cmp eax, edi
je 0x18004116a
mov r14d, edi
cmovge edi, eax
cmovl r14d, eax
jmp 0x180041172
mov edi, dword [rsi + 0xc]
xor eax, eax
mov r14d, eax
mov rcx, qword [rsi + 0x20]
mov r9d, 0x800
movsxd rax, edi
mov r10d, 0x80
lea r8, [rcx + rax*2]
movsxd rax, r14d
lea rdx, [rcx + rax*2]
xor eax, eax
mov ecx, eax
test r8, r8
je 0x18004119e
cmp rdx, r8
jae 0x1800411c1
movzx eax, word [rdx]
test ax, ax
je 0x1800411c1
add rdx, 2
cmp ax, r10w
jae 0x1800411b4
inc ecx
jmp 0x180041194
cmp ax, r9w
sbb eax, eax
add eax, 3
add ecx, eax
jmp 0x180041194
mov rax, qword [0x180064ca0]
inc ecx
test rax, rax
je 0x1800411d5
inc dword [rax + 0xf4]
movsxd rbx, ecx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, qword [rsi + 0x20]
mov r15, rax
movsxd rcx, edi
mov r9, rax
lea rdi, [rax + rbx]
lea rbx, [rdi - 1]
lea r11, [rdx + rcx*2]
movsxd rcx, r14d
lea r10, [rdx + rcx*2]
cmp rax, rbx
jae 0x180041255
mov r13d, 0x80
nop dword [rax]
test r11, r11
je 0x18004121a
cmp r10, r11
jae 0x180041251
movzx eax, word [r10]
test ax, ax
je 0x180041251
add r10, 2
mov r8d, eax
cmp eax, r13d
jae 0x180041237
mov byte [r9], r8b
inc r9
jmp 0x18004124c
mov edx, edi
mov rcx, r9
sub edx, r9d
dec edx
call fcn.18000fde0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x180041210
mov r13, qword [rbp - 0x68]
mov rax, qword [0x180064ca0]
mov byte [r9], 0
mov r8, qword [rax + 0xb8]
test r8, r8
je 0x180041280
mov rcx, qword [rax + 0xc0]
mov rdx, r15
call r8
mov rax, qword [0x180064ca0]
test r15, r15
je 0x180041290
test rax, rax
je 0x180041290
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r12b, r12b
je 0x1800413f9
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x1800412bc
xor eax, eax
mov byte [rsi + 0x6a], 0
mov dword [rsi + 0x58], eax
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0xe84], 1
mov r8d, dword [rsi + 0x5c]
mov eax, dword [rsi + 0x58]
cmp eax, r8d
je 0x1800413f9
mov ecx, dword [rsi + 0xc]
cmp eax, ecx
jle 0x1800412df
mov dword [rsi + 0x58], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x1800412ea
mov dword [rsi + 0x5c], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x1800412f2
mov dword [rsi + 0x54], eax
cmp dword [rsi + 0x54], ecx
jle 0x1800412fa
mov dword [rsi + 0x54], ecx
cmp eax, r8d
je 0x18004133c
lea rdx, [rsi + 0x54]
mov rcx, rsi
jge 0x180041328
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18003d790
mov eax, dword [rsi + 0x58]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], 0
jmp 0x1800413f9
sub eax, r8d
mov r9d, eax
call fcn.18003d790
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], 0
jmp 0x1800413f9
mov r8d, eax
lea rdx, [rsi + 0x54]
xor r8d, 1
mov rcx, rsi
add r8d, 0x20000a
call fcn.18003d910
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x180040a98
mov edx, dword [rbp + 0x1e8]
mov eax, edx
mov ecx, dword [rsp + 0x5c]
mov r13, qword [rbp - 0x68]
shr eax, 0xb
and al, 1
test cl, cl
je 0x180041398
test r14b, r14b
jne 0x180041398
test al, al
je 0x1800413bb
cmp byte [r13 + 0xe24], r14b
jne 0x1800413c5
cmp byte [r13 + 0x7c], 0
mov byte [rsp + 0x58], 1
je 0x1800413f2
test cl, cl
jne 0x1800413f2
xor eax, eax
mov byte [rsi + 0x6a], cl
mov dword [rsi + 0x58], eax
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
jmp 0x1800413f9
cmp byte [r13 + 0xe24], 0
jne 0x180041398
test r8b, r8b
jne 0x1800413f9
lea rcx, [rsp + 0x6c]
mov dword [rsp + 0x6c], 0xa
mov dword [rsp + 0x20], 2
call fcn.18003efd0
test al, al
je 0x1800413f9
mov r8d, dword [rsp + 0x6c]
jmp 0x180040b66
mov byte [rbp + 0x1f8], 1
xor r14b, r14b
movzx ecx, byte [rbp + 0x1d8]
movzx edx, byte [rbp + 0x1c8]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x18004141a
test dl, dl
je 0x18004141a
mov al, 1
jmp 0x18004141c
xor al, al
mov r12d, dword [rsp + 0x68]
or cl, al
mov byte [rbp + 0x1d8], cl
xor r11d, r11d
mov qword [rbp - 0x38], r11
mov dword [rsp + 0x54], r11d
cmp dword [r13 + 0x3f30], r12d
jne 0x180041b7a
mov r15d, dword [rsp + 0x64]
test r15b, r15b
jne 0x1800416e4
test r14b, r14b
je 0x180041644
test dword [rbp + 0x1e8], 0x100000
je 0x1800414d1
movsxd rbx, dword [rsi + 0xc]
lea rax, [0x18005924e]
mov r8d, ebx
mov qword [rbp - 0x38], rax
lea rcx, [rsi + 0x74]
mov dword [rsp + 0x54], r11d
xor r9d, r9d
xor edx, edx
call fcn.18003ec10
mov r9, rax
test rax, rax
je 0x1800414b5
test ebx, ebx
jle 0x1800414b5
xor eax, eax
mov edx, eax
nop word [rax + rax]
mov rax, qword [rsi + 0x20]
movzx ecx, word [rax + rdx*2]
mov word [r9 + rdx*2], cx
inc rdx
cmp rdx, rbx
jl 0x1800414a0
mov r8d, dword [rsi + 0xc]
xor edx, edx
mov rcx, rsi
call fcn.18003d200
xor eax, eax
mov qword [rsi + 0x58], rax
mov dword [rsi + 0x54], eax
jmp 0x180041644
mov r9, qword [rsi + 0x40]
mov rax, qword [rbp + 0x1d0]
mov r8, r9
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800414f5
inc rax
test ecx, ecx
jne 0x1800414e2
test edx, edx
je 0x180041644
mov edx, dword [rsi + 0x38]
mov r15, r9
dec edx
mov qword [rbp - 0x38], r9
mov dword [rsp + 0x54], edx
mov r13d, r11d
mov byte [rbp + 0x1f0], 1
mov r12, r11
test edx, edx
jle 0x1800415fd
movsxd rdi, edx
mov rbx, r9
add rdi, r9
mov r14d, r11d
nop
test rdi, rdi
je 0x18004153a
cmp rbx, rdi
jae 0x18004155a
cmp byte [rbx], r12b
je 0x18004155a
mov r8, rdi
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.18000fc30
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x180041530
lea r13d, [r14 + 1]
test r13d, r13d
jle 0x180041597
cmp r13d, 8
mov eax, r13d
mov ecx, 8
cmovl eax, ecx
test eax, eax
jle 0x180041597
mov rcx, qword [0x180064ca0]
test rcx, rcx
je 0x180041588
inc dword [rcx + 0xf4]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
movsxd rdx, dword [rsp + 0x54]
mov rbx, r15
mov r14, r12
lea rdi, [r15 + rdx]
movsxd r15, r13d
dec r15
lea r15, [r12 + r15*2]
cmp r12, r15
jae 0x1800415f0
test rdi, rdi
je 0x1800415bf
cmp rbx, rdi
jae 0x1800415ec
cmp byte [rbx], 0
je 0x1800415ec
mov r8, rdi
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.18000fc30
movsxd rcx, eax
movzx eax, word [rsp + 0x6c]
add rbx, rcx
mov word [r14], ax
add r14, 2
cmp r14, r15
jb 0x1800415b5
mov edx, dword [rsp + 0x54]
xor r11d, r11d
mov word [r14], r11w
movzx r14d, byte [rsp + 0x72]
test edx, edx
lea r9d, [r13 - 1]
lea rdx, [rsi + 0x54]
mov r8, r12
cmovle r9d, r11d
mov rcx, rsi
call fcn.18003ef10
test r12, r12
je 0x180041636
mov rax, qword [0x180064ca0]
test rax, rax
je 0x18004162d
dec dword [rax + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r15d, dword [rsp + 0x64]
mov r12d, dword [rsp + 0x68]
mov r13, qword [rbp - 0x68]
mov eax, dword [rsi + 0x18]
mov byte [rsi + 0x48], 1
mov ecx, dword [rsi + 0x2c]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x18004167d
test ecx, ecx
je 0x180041668
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004166d
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x28]
mov edx, ebx
cmovg edx, eax
call fcn.180027060
mov dword [rsi + 0x28], ebx
mov r9, qword [rsi + 0x30]
mov r10, qword [rsi + 0x20]
movsxd r11, ebx
add r11, r9
lea rbx, [r11 - 1]
cmp r9, rbx
jae 0x1800416dd
mov r15d, 0x80
nop dword [rax]
movzx eax, word [r10]
test ax, ax
je 0x1800416d8
add r10, 2
mov r8d, eax
cmp eax, r15d
jae 0x1800416bd
mov byte [r9], r8b
inc r9
jmp 0x1800416d3
mov edx, r11d
mov rcx, r9
sub edx, r9d
dec edx
call fcn.18000fde0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x1800416a0
mov r15d, dword [rsp + 0x64]
mov byte [r9], 0
xor r11d, r11d
test r14b, r14b
je 0x180041760
cmp byte [rsp + 0x58], 0
je 0x1800416fc
mov edi, dword [rbp + 0x1e8]
test dil, 0x20
jne 0x180041766
mov r12d, dword [rbp - 0x74]
mov r15, qword [rbp + 0x1d0]
mov r8d, dword [rsp + 0x64]
movzx r11d, byte [rbp + 0x1f0]
mov r10, qword [rbp - 0x38]
mov r9d, dword [rsp + 0x54]
mov r13, qword [rbp - 0x68]
mov ebx, dword [rsp + 0x68]
cmp dword [r13 + 0x5a70], ebx
jne 0x180041c1d
cmp dword [r13 + 0x3f30], ebx
je 0x180041c12
mov rax, qword [0x180064ca0]
mov ecx, dword [rax + 0x4774]
test cl, 0x20
je 0x180041b95
shr ecx, 6
test cl, 1
jmp 0x180041baf
mov edi, dword [rbp + 0x1e8]
test edi, 0x801c0
je 0x180041b1a
mov ebx, r11d
test dil, 0x40
je 0x1800417a1
xor r8d, r8d
mov edx, r12d
mov ecx, 0x200
call fcn.18001e850
test al, al
je 0x1800417a1
mov eax, 0x40
mov ebx, 0x200
xor r11d, r11d
jmp 0x180041822
test dil, dil
jns 0x1800417f8
mov r14d, 1
xor edx, edx
mov r8d, r14d
mov ecx, 0x203
call fcn.18001ca20
test al, al
je 0x1800417d2
mov r10d, 0x80
mov ebx, 0x203
mov eax, r10d
xor r11d, r11d
jmp 0x180041828
mov r8d, r14d
xor edx, edx
mov ecx, 0x204
call fcn.18001ca20
test al, al
je 0x1800417f8
mov r10d, 0x80
mov ebx, 0x204
mov eax, r10d
xor r11d, r11d
jmp 0x180041828
mov eax, 0x80000
test eax, edi
je 0x18004180f
cmp byte [rsi + 0xe86], 0
je 0x18004180f
xor r11d, r11d
jmp 0x180041822
mov ecx, pe_nt_image_headers64
mov r11d, 0
test ecx, edi
mov eax, r11d
cmovne eax, ecx
mov r10d, 0x80
test eax, eax
je 0x180041b1a
mov dword [rbp + 0x18], eax
mov rax, qword [rbp + 0x1d0]
mov dword [rbp + 0x28], r11d
mov qword [rbp + 0x41], r11
mov dword [rbp + 0x49], r11d
mov word [rbp + 0x4d], r11w
mov byte [rbp + 0x4f], 0
mov qword [rbp + 0x10], r13
mov dword [rbp + 0x1c], edi
mov qword [rbp + 0x20], r11
test r15b, r15b
jne 0x180041863
mov rax, qword [rsi + 0x30]
mov rdx, qword [rsi + 0x20]
mov r9d, 0x800
mov qword [rbp + 0x30], rax
mov rcx, rdx
mov eax, dword [rsi + 0x10]
mov dword [rbp + 0x38], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbp + 0x3c], eax
movsxd rax, dword [rsi + 0x54]
mov dword [rbp + 0x2c], ebx
mov ebx, r11d
mov byte [rbp + 0x40], 0
lea r8, [rdx + rax*2]
test r8, r8
je 0x18004189c
cmp rcx, r8
jae 0x1800418bf
movzx eax, word [rcx]
test ax, ax
je 0x1800418bf
add rcx, 2
cmp ax, r10w
jae 0x1800418b2
inc ebx
jmp 0x180041892
cmp ax, r9w
sbb eax, eax
add eax, 3
add ebx, eax
jmp 0x180041892
movsxd rax, dword [rsi + 0x58]
mov rcx, rdx
mov dword [rbp + 0x44], ebx
mov r12d, r11d
lea r8, [rdx + rax*2]
test r8, r8
je 0x1800418da
cmp rcx, r8
jae 0x1800418ff
movzx eax, word [rcx]
test ax, ax
je 0x1800418ff
add rcx, 2
cmp ax, r10w
jae 0x1800418f1
inc r12d
jmp 0x1800418d0
cmp ax, r9w
sbb eax, eax
add eax, 3
add r12d, eax
jmp 0x1800418d0
movsxd rax, dword [rsi + 0x5c]
mov r15d, r11d
mov dword [rbp + 0x48], r12d
lea rcx, [rdx + rax*2]
nop
test rcx, rcx
je 0x18004191a
cmp rdx, rcx
jae 0x18004193f
movzx eax, word [rdx]
test ax, ax
je 0x18004193f
add rdx, 2
cmp ax, r10w
jae 0x180041931
inc r15d
jmp 0x180041910
cmp ax, r9w
sbb eax, eax
add eax, 3
add r15d, eax
jmp 0x180041910
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x4c], r15d
call r11
movsxd rcx, dword [rbp + 0x44]
movzx r13d, byte [rbp + 0x40]
cmp ecx, ebx
jne 0x18004195c
test r13b, r13b
je 0x1800419a8
mov rbx, qword [rbp + 0x30]
xor edx, edx
mov r14d, edx
lea rdi, [rbx + rcx]
nop dword [rax]
test rdi, rdi
je 0x18004197a
cmp rbx, rdi
jae 0x18004199a
cmp byte [rbx], 0
je 0x18004199a
mov r8, rdi
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.18000fc30
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x180041970
mov ecx, dword [rbp + 0x44]
mov dword [rsi + 0x54], r14d
mov byte [rsi + 0xe84], 1
movsxd rax, dword [rbp + 0x48]
cmp eax, r12d
jne 0x1800419b6
test r13b, r13b
je 0x180041a01
cmp eax, ecx
jne 0x1800419c0
mov r14d, dword [rsi + 0x54]
jmp 0x1800419fd
mov rbx, qword [rbp + 0x30]
lea rdi, [rbx + rax]
xor eax, eax
mov r14d, eax
nop dword [rax]
test rdi, rdi
je 0x1800419da
cmp rbx, rdi
jae 0x1800419fa
cmp byte [rbx], 0
je 0x1800419fa
mov r8, rdi
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.18000fc30
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x1800419d0
mov eax, dword [rbp + 0x48]
mov dword [rsi + 0x58], r14d
movsxd rcx, dword [rbp + 0x4c]
cmp ecx, r15d
jne 0x180041a13
test r13b, r13b
je 0x180041b1a
cmp ecx, eax
jne 0x180041a66
mov r14d, dword [rsi + 0x58]
mov dword [rsi + 0x5c], r14d
test r13b, r13b
je 0x180041b1a
mov r8d, dword [rbp + 0x38]
mov rcx, rsi
mov rdx, qword [rbp + 0x30]
call fcn.18003f1b0
mov eax, dword [rbp - 0x70]
mov ebx, dword [rbp + 0x38]
mov r12d, dword [rbp - 0x74]
cmp ebx, eax
jle 0x180041ab5
test r12b, r12b
je 0x180041ab5
mov ecx, dword [rsi + 0x1c]
sub ebx, eax
add ebx, dword [rsi + 0x18]
cmp ebx, ecx
jle 0x180041ab2
test ecx, ecx
je 0x180041a9d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180041aa2
mov rbx, qword [rbp + 0x30]
xor eax, eax
mov r14d, eax
lea rdi, [rbx + rcx]
test rdi, rdi
je 0x180041a7d
cmp rbx, rdi
jae 0x180041a1b
cmp byte [rbx], 0
je 0x180041a1b
mov r8, rdi
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.18000fc30
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x180041a73
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.1800270f0
mov dword [rsi + 0x18], ebx
mov r15, qword [rsi + 0x20]
movsxd r14, dword [rsi + 0x18]
mov rbx, r15
mov rdi, qword [rbp + 0x30]
dec r14
lea r14, [r15 + r14*2]
cmp r15, r14
jae 0x180041afa
cmp byte [rdi], 0
je 0x180041afa
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rdi
call fcn.18000fc30
movsxd rcx, eax
movzx eax, word [rbp - 0x70]
add rdi, rcx
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x180041ad0
xor eax, eax
mov word [rbx], ax
sub rbx, r15
mov eax, dword [rbp + 0x38]
sar rbx, 1
mov dword [rsi + 0xc], ebx
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x180041b1e
mov r12d, dword [rbp - 0x74]
mov r8d, dword [rsp + 0x64]
mov r15, qword [rbp + 0x1d0]
test r8b, r8b
jne 0x18004170c
mov r9, qword [rsi + 0x30]
mov r8, r15
mov rax, r9
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180041b53
inc rax
test ecx, ecx
jne 0x180041b40
mov r8d, dword [rsp + 0x64]
test edx, edx
je 0x18004170c
mov r11b, 1
mov qword [rbp - 0x38], r9
mov r10, r9
mov byte [rbp + 0x1f0], r11b
mov r9d, dword [rsi + 0x10]
jmp 0x18004171d
mov r12d, dword [rbp - 0x74]
mov r9d, r11d
mov r15, qword [rbp + 0x1d0]
mov r10d, r9d
mov r8d, dword [rsp + 0x64]
jmp 0x18004171d
mov edx, dword [rax + 0x476c]
mov ecx, dword [rax + 0x3f60]
cmp ecx, edx
jne 0x180041c12
test ecx, ecx
je 0x180041c12
cmp dword [rax + 0x3f30], edx
je 0x180041c12
cmp byte [rax + 0x3f65], 0
jne 0x180041bcc
cmp dword [rax + 0x3f30], 0
jne 0x180041c12
cmp byte [rax + 0x3f40], 0
je 0x180041c12
test r8b, r8b
jne 0x180041c12
mov r10, qword [r13 + 0x5a80]
mov r8, r15
mov r9d, dword [r13 + 0x5a78]
mov rax, r10
dec r9d
mov qword [rbp - 0x38], r10
sub r8, r10
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180041c03
inc rax
test ecx, ecx
jne 0x180041bf0
test edx, edx
setne al
or r11b, al
mov byte [rbp + 0x1f0], r11b
xor edi, edi
mov dword [r13 + 0x5a70], edi
jmp 0x180041c1f
xor edi, edi
test r10, r10
je 0x180041cc0
mov ecx, 0x20
test r12b, r12b
je 0x180041c92
mov eax, dword [rbp + 0x1e8]
xorps xmm0, xmm0
mov dword [rbp + 0x5c], eax
lea eax, [r9 + 1]
cmp eax, ecx
mov qword [rbp + 0x68], rdi
movdqa xmmword [rbp + 0x80], xmm0
cmovle eax, ecx
mov qword [rbp + 0x50], r13
lea rcx, [rbp + 0x50]
mov dword [rbp + 0x7c], eax
mov dword [rbp + 0x58], 0x40000
mov qword [rbp + 0x70], r15
mov dword [rbp + 0x78], r9d
mov qword [rbp + 0x60], rdi
call rdi
mov ecx, dword [rbp + 0x7c]
mov r15, qword [rbp + 0x70]
mov r10, qword [rbp - 0x38]
mov qword [rbp + 0x1d0], r15
lea r9d, [rcx - 1]
cmp dword [rbp + 0x78], r9d
cmovl r9d, dword [rbp + 0x78]
lea eax, [r9 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x180041cbc
jbe 0x180041cb6
lea r8, [rbx - 1]
mov rdx, r10
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + r15 - 1], 0
mov ebx, dword [rsp + 0x68]
cmp byte [rbp + 0x1f8], 0
je 0x180041cdb
cmp dword [r13 + 0x3f30], ebx
jne 0x180041cdb
xor edx, edx
xor ecx, ecx
call fcn.1800132c0
mov r10d, dword [rsp + 0x5c]
movaps xmmword [rsp + 0x1e0], xmm14
movaps xmmword [rsp + 0x1d0], xmm15
test r10b, r10b
jne 0x180041db4
mov r8d, 1
lea rcx, [rsp + 0x78]
mov edx, ebx
call fcn.1800112a0
mov rax, qword [0x180064ca0]
lea rcx, [rbp - 0x38]
movups xmm0, xmmword [rax + 0x391c]
movups xmmword [rbp - 0x38], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp - 0x2c], xmm0
call fcn.18000fea0
movss xmm0, dword [r13 + 0x3814]
mov r8d, eax
mov rdx, qword [rbp - 0x80]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm12
movq rcx, xmm0
call fcn.180010fb0
mov r11, qword [rbp - 0x50]
movaps xmm15, xmm10
mov r10d, dword [rsp + 0x5c]
addss xmm15, xmm8
movaps xmm14, xmm12
movaps xmm13, xmm8
addss xmm13, dword [r13 + 0x380c]
addss xmm14, xmm7
movaps xmm0, xmm12
addss xmm0, dword [r13 + 0x3810]
movss dword [rbp - 0x60], xmm15
movss dword [rsp + 0x54], xmm15
movss dword [rbp - 0x5c], xmm14
movss dword [rbp - 0x70], xmm14
jmp 0x180041df8
mov r11, qword [rbp - 0x50]
movaps xmm2, xmm10
addss xmm2, xmm8
movaps xmm1, xmm12
addss xmm1, xmm7
movss xmm13, dword [r11 + 0x100]
movss xmm0, dword [r11 + 0x104]
movss dword [rsp + 0x54], xmm2
movaps xmm15, xmm2
movss dword [rbp - 0x60], xmm2
movaps xmm14, xmm1
movss dword [rbp - 0x70], xmm1
movss dword [rbp - 0x5c], xmm1
cmp byte [rbp - 0x76], 0
xorps xmm4, xmm4
xorps xmm7, xmm7
movss dword [rbp + 0x1f8], xmm4
movss dword [rsp + 0x6c], xmm7
movss dword [rbp - 0x64], xmm12
movss dword [rbp - 0x68], xmm8
movss dword [rbp - 0x48], xmm13
movss dword [rbp - 0x44], xmm0
je 0x180041e34
mov r15, qword [rsi + 0x30]
mov qword [rbp + 0x1d0], r15
movzx eax, byte [rbp + 0x1c8]
movzx r12d, byte [rbp + 0x1d8]
test al, al
jne 0x180042028
test r12b, r12b
jne 0x180042028
test r10b, r10b
je 0x180041eb4
movzx edx, byte [r15]
lea r14, [r15 + 1]
mov ecx, edi
test dl, dl
je 0x180041e86
nop word [rax + rax]
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r14]
cmovne eax, ecx
inc r14
mov ecx, eax
test dl, dl
jne 0x180041e70
movzx eax, byte [r14 - 1]
dec r14
cmp al, 0xa
je 0x180041e98
cmp al, 0xd
je 0x180041e98
inc ecx
movd xmm7, ecx
movaps xmm6, xmm10
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [r13 + 0x3c08]
movss dword [rsp + 0x6c], xmm7
jmp 0x180041ef7
cmp dword [r13 + 0x3f30], ebx
jne 0x180041ec3
movsxd r14, dword [rsi + 0x10]
jmp 0x180041eda
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp byte [r15 + r14], 0
jne 0x180041ed0
movss xmm6, dword [rbp + 0x1f8]
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x180042948
mov rax, qword [0x180064ca0]
lea rcx, [rsp + 0x78]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rsp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp - 0x7c], xmm0
call fcn.18000fea0
movss xmm2, dword [r13 + 0x3c08]
lea r8, [rbp - 0x68]
mov rdx, qword [r11 + 0x298]
test r10b, r10b
mov r10, qword [r13 + 0x3c00]
mov r9d, eax
cmovne r8, rdi
mov rcx, r14
test eax, 0xff000000
je 0x180042948
test r14, r14
jne 0x180041f71
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r15 + rcx], 0
jne 0x180041f64
add rcx, r15
cmp r15, rcx
je 0x180042948
test r10, r10
jne 0x180041f87
mov rax, qword [rdx + 0x38]
mov r10, qword [rax + 8]
xorps xmm11, xmm11
ucomiss xmm2, xmm11
jp 0x180041f9c
jne 0x180041f9c
mov rax, qword [rdx + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rsp + 0x78], xmm0
test r8, r8
je 0x180041ff0
movss xmm0, dword [rsp + 0x78]
movss xmm1, dword [rsp + 0x7c]
maxss xmm0, dword [r8]
maxss xmm1, dword [r8 + 4]
movss dword [rsp + 0x78], xmm0
movss xmm0, dword [rbp - 0x80]
minss xmm0, dword [r8 + 8]
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [rbp - 0x7c]
minss xmm1, dword [r8 + 0xc]
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
setne al
mov byte [rsp + 0x48], al
lea rax, [rsp + 0x78]
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
mov rcx, r10
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x48]
call fcn.180036340
jmp 0x18004294c
movsxd r14, dword [rsi + 0x10]
xor r11d, r11d
add r14, r15
mov r8d, 0xfffffc18
mov r15, qword [rsi + 0x20]
mov r9, rdi
mov qword [rbp - 0x38], r14
mov rbx, rdi
xorps xmm8, xmm8
xorps xmm6, xmm6
mov edi, r8d
mov edx, r11d
test al, al
je 0x18004206a
movsxd rax, dword [rsi + 0x54]
mov edx, 1
mov r8d, 0xffffffff
lea r9, [r15 + rax*2]
test r12b, r12b
je 0x180042087
mov ecx, dword [rsi + 0x5c]
mov edi, 0xffffffff
cmp dword [rsi + 0x58], ecx
cmovl ecx, dword [rsi + 0x58]
inc edx
movsxd rax, ecx
lea rbx, [r15 + rax*2]
movzx ecx, word [r15]
movzx eax, r10b
mov r10d, r11d
add edx, eax
mov rax, r15
test cx, cx
je 0x1800420dd
nop dword [rax]
cmp cx, 0xa
jne 0x1800420d0
inc r10d
cmp r8d, 0xffffffff
jne 0x1800420bd
cmp rax, r9
jb 0x1800420bd
dec edx
mov r8d, r10d
test edx, edx
jle 0x1800420dd
cmp edi, 0xffffffff
jne 0x1800420d0
cmp rax, rbx
jb 0x1800420d0
dec edx
mov edi, r10d
test edx, edx
jle 0x1800420dd
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x1800420a0
inc r10d
mov rdx, r9
cmp r8d, 0xffffffff
mov r11d, r10d
cmovne r11d, r8d
cmp edi, 0xffffffff
cmove edi, r10d
cmp r9, r15
jbe 0x180042113
nop word [rax + rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x180042113
mov rdx, rax
cmp rax, r15
ja 0x180042100
mov r8, qword [r13 + 0x3c00]
movaps xmm1, xmm4
movss xmm2, dword [r13 + 0x3c08]
movaps xmm11, xmm4
divss xmm2, dword [r8 + 0x14]
cmp rdx, r9
jae 0x180042180
nop word [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x180042157
maxss xmm1, xmm11
movaps xmm11, xmm4
jmp 0x18004217b
cmp ecx, 0xd
je 0x18004217b
cmp ecx, dword [r8]
jge 0x18004216c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x180042172
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm11, xmm0
cmp rdx, r9
jb 0x180042140
movss xmm0, dword [r13 + 0x3c08]
maxss xmm11, xmm1
movd xmm12, r11d
cvtdq2ps xmm12, xmm12
movss dword [rbp + 0x1d8], xmm11
mulss xmm12, xmm0
movss dword [rbp - 0x74], xmm12
test edi, edi
js 0x180042249
mov rdx, rbx
cmp rbx, r15
jbe 0x1800421d3
nop dword [rax + rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x1800421d3
mov rdx, rax
cmp rax, r15
ja 0x1800421c0
movaps xmm2, xmm0
movaps xmm1, xmm4
movaps xmm8, xmm4
divss xmm2, dword [r8 + 0x14]
cmp rdx, rbx
jae 0x180042230
nop dword [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x180042207
maxss xmm1, xmm8
movaps xmm8, xmm4
jmp 0x18004222b
cmp ecx, 0xd
je 0x18004222b
cmp ecx, dword [r8]
jge 0x18004221c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x180042222
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm8, xmm0
cmp rdx, rbx
jb 0x1800421f0
movss xmm0, dword [r13 + 0x3c08]
maxss xmm8, xmm1
movd xmm6, edi
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm0
cmp byte [rsp + 0x5c], 0
je 0x18004226b
movd xmm7, r10d
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x1f8], xmm10
mulss xmm7, xmm0
movss dword [rsp + 0x6c], xmm7
movzx r8d, byte [rbp + 0x1c8]
test r8b, r8b
je 0x1800423aa
cmp byte [rsi + 0xe84], 0
je 0x1800423aa
test dword [rbp + 0x1e8], 0x1000
jne 0x1800422e6
movss xmm2, dword [rsi + 0x50]
movaps xmm0, xmm10
comiss xmm2, xmm11
mulss xmm0, dword [0x18005b11c]
movaps xmm1, xmm11
subss xmm10, dword [r13 + 0x380c]
jbe 0x1800422c6
subss xmm1, xmm0
movaps xmm0, xmm4
maxss xmm0, xmm1
jmp 0x1800422d4
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x1800422eb
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x50], xmm0
jmp 0x1800422eb
xor eax, eax
mov dword [rsi + 0x50], eax
mov r10d, dword [rsp + 0x5c]
test r10b, r10b
je 0x18004239b
movss xmm3, dword [rbp + 4]
movaps xmm0, xmm12
subss xmm0, dword [r13 + 0x3c08]
comiss xmm9, xmm0
jbe 0x18004231c
movaps xmm9, xmm4
maxss xmm9, xmm0
jmp 0x18004234c
movss xmm2, dword [r13 + 0x3810]
movaps xmm1, xmm3
addss xmm2, xmm2
movaps xmm0, xmm12
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm9
jb 0x18004234c
movaps xmm9, xmm12
subss xmm9, xmm3
addss xmm9, xmm2
comiss xmm4, xmm9
movss xmm2, dword [r13 + 0x3810]
jbe 0x180042360
movaps xmm2, xmm4
jmp 0x180042375
addss xmm2, xmm2
addss xmm2, xmm7
subss xmm2, xmm3
maxss xmm2, xmm4
minss xmm2, xmm9
movss xmm1, dword [rbp - 0x44]
mov rax, qword [rbp - 0x50]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
addss xmm1, xmm0
movss dword [rbp - 0x44], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rsi + 0xe84], 0
movss xmm13, dword [rbp - 0x48]
jmp 0x1800423af
mov r10d, dword [rsp + 0x5c]
movss xmm10, dword [rsi + 0x50]
test r12b, r12b
je 0x18004262e
mov edx, dword [rsi + 0x5c]
mov eax, edx
mov ecx, dword [rsi + 0x58]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [r15 + rax*2]
movsxd rax, edx
lea rdi, [r15 + rax*2]
test r8b, r8b
je 0x1800423ea
movss xmm1, dword [0x18005b164]
jmp 0x1800423f2
movss xmm1, dword [0x18005b134]
mov rax, qword [0x180064ca0]
lea rcx, [rsp + 0x78]
movups xmm0, xmmword [rax + 0x3b9c]
mulss xmm1, dword [rax + 0x37d0]
movups xmmword [rsp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x7c], xmm0
call fcn.18000fea0
mov r15d, eax
xorps xmm4, xmm4
test r10b, r10b
je 0x18004243d
xorps xmm5, xmm5
xorps xmm9, xmm9
movss dword [rbp - 8], xmm5
jmp 0x18004244b
movss xmm9, dword [0x18005b178]
movss xmm5, dword [rbp - 8]
movss xmm7, dword [rbp - 0x44]
addss xmm8, xmm13
addss xmm7, xmm6
subss xmm8, xmm10
subss xmm7, xmm4
cmp rbx, rdi
jae 0x18004262e
movss xmm6, dword [0x18005b130]
xor esi, esi
movss xmm11, dword [rbp - 0x28]
movss xmm12, dword [rbp - 0x40]
mov r14, qword [rbp - 0x50]
nop word [rax + rax]
movss xmm2, dword [r13 + 0x3c08]
movaps xmm0, xmm14
addss xmm0, xmm2
comiss xmm7, xmm0
ja 0x180042612
comiss xmm12, xmm7
jbe 0x1800424db
cmp rbx, rdi
jae 0x1800425f2
nop dword [rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x1800425f2
cmp rbx, rdi
jb 0x1800424c0
jmp 0x1800425f2
mov rdx, qword [r13 + 0x3c00]
movaps xmm3, xmm4
movaps xmm1, xmm4
divss xmm2, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x180042530
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x180042526
cmp ecx, 0xd
je 0x18004251f
cmp ecx, dword [rdx]
jge 0x180042512
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x180042517
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rbx, rdi
jb 0x1800424f2
jmp 0x180042530
movaps xmm3, xmm4
maxss xmm3, xmm1
movaps xmm1, xmm4
maxss xmm1, xmm3
comiss xmm4, xmm1
jb 0x180042560
cmp dword [rdx], 0x20
jle 0x18004254c
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x180042551
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm5
addss xmm1, xmm8
subss xmm2, dword [r13 + 0x3c08]
movaps xmm0, xmm9
movaps xmm3, xmm8
addss xmm0, xmm7
addss xmm3, xmm4
minss xmm1, xmm15
addss xmm2, xmm7
minss xmm0, xmm14
maxss xmm3, xmm11
movss dword [rbp - 0x80], xmm1
maxss xmm2, xmm12
comiss xmm0, xmm12
movss dword [rsp + 0x7c], xmm2
movss dword [rsp + 0x78], xmm3
movss dword [rbp - 0x7c], xmm0
jbe 0x1800425f2
comiss xmm14, xmm2
jbe 0x1800425f2
comiss xmm1, xmm11
jbe 0x1800425f2
comiss xmm15, xmm3
jbe 0x1800425f2
mov rcx, qword [r14 + 0x298]
lea r8, [rbp - 0x80]
mov dword [rsp + 0x28], esi
lea rdx, [rsp + 0x78]
mov r9d, r15d
movss dword [rsp + 0x20], xmm4
call fcn.1800321a0
movss xmm13, dword [rbp - 0x48]
xorps xmm4, xmm4
movss xmm5, dword [rbp - 8]
movaps xmm8, xmm13
subss xmm8, xmm10
addss xmm7, dword [r13 + 0x3c08]
cmp rbx, rdi
jb 0x180042490
movss xmm11, dword [rbp + 0x1d8]
movss xmm12, dword [rbp - 0x74]
mov rsi, qword [rbp - 0x20]
mov r14, qword [rbp - 0x38]
mov r10d, dword [rsp + 0x5c]
mov r15, qword [rbp + 0x1d0]
test r10b, r10b
jne 0x18004264c
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x18004279d
mov rax, qword [0x180064ca0]
lea rcx, [rsp + 0x78]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rsp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp - 0x7c], xmm0
call fcn.18000fea0
movss xmm0, dword [rbp - 0x44]
subss xmm13, xmm10
mov rbx, qword [rbp - 0x50]
lea r8, [rbp - 0x68]
movss xmm2, dword [r13 + 0x3c08]
test r10b, r10b
mov r10, qword [r13 + 0x3c00]
mov r9d, eax
xorps xmm4, xmm4
mov eax, 0
mov rdx, qword [rbx + 0x298]
subss xmm0, xmm4
cmovne r8, rax
movss dword [rbp - 0x20], xmm13
mov rcx, r14
movss dword [rbp - 0x1c], xmm0
test r9d, 0xff000000
je 0x1800427a1
test r14, r14
jne 0x1800426ec
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r15 + rcx], al
jne 0x1800426e0
add rcx, r15
cmp r15, rcx
je 0x1800427a1
test r10, r10
jne 0x180042702
mov rax, qword [rdx + 0x38]
mov r10, qword [rax + 8]
ucomiss xmm2, xmm4
jp 0x180042712
jne 0x180042712
mov rax, qword [rdx + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rsp + 0x78], xmm0
test r8, r8
je 0x180042766
movss xmm0, dword [rsp + 0x78]
movss xmm1, dword [rsp + 0x7c]
maxss xmm0, dword [r8]
maxss xmm1, dword [r8 + 4]
movss dword [rsp + 0x78], xmm0
movss xmm0, dword [rbp - 0x80]
minss xmm0, dword [r8 + 8]
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [rbp - 0x7c]
minss xmm1, dword [r8 + 0xc]
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
setne al
mov byte [rsp + 0x48], al
lea rax, [rsp + 0x78]
movss dword [rsp + 0x40], xmm4
mov qword [rsp + 0x38], rcx
mov rcx, r10
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x20]
call fcn.180036340
xorps xmm4, xmm4
jmp 0x1800427a1
mov rbx, qword [rbp - 0x50]
cmp byte [rbp + 0x1c8], 0
je 0x18004293a
movss xmm0, dword [r13 + 0x18]
addss xmm0, dword [rsi + 0xe80]
movss dword [rsi + 0xe80], xmm0
cmp byte [r13 + 0x7b], 0
je 0x1800427ee
comiss xmm4, xmm0
jae 0x1800427ee
movss xmm1, dword [0x18005b16c]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x18005b150]
comiss xmm1, xmm0
jae 0x1800427ee
xor cl, cl
jmp 0x1800427f0
mov cl, 1
movss xmm0, dword [rbp - 0x44]
movss xmm8, dword [0x18005b164]
addss xmm0, xmm12
movss xmm12, dword [rbp - 0x40]
addss xmm11, dword [rbp - 0x48]
subss xmm11, xmm10
cvttss2si eax, xmm11
xorps xmm11, xmm11
subss xmm0, xmm11
movd xmm6, eax
cvtdq2ps xmm6, xmm6
cvttss2si eax, xmm0
movss dword [rsp + 0x78], xmm6
movaps xmm2, xmm6
addss xmm2, xmm8
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x80], xmm2
movaps xmm0, xmm7
movaps xmm1, xmm7
subss xmm0, dword [r13 + 0x3c08]
subss xmm1, dword [0x18005b174]
addss xmm0, dword [0x18005b130]
movss dword [rbp - 0x7c], xmm1
movss dword [rsp + 0x7c], xmm0
test cl, cl
je 0x1800428f4
comiss xmm1, xmm12
jbe 0x1800428f4
movss xmm3, dword [rbp - 0x70]
comiss xmm3, xmm0
jbe 0x1800428f4
comiss xmm2, dword [rbp - 0x28]
jbe 0x1800428f4
movss xmm0, dword [rsp + 0x54]
comiss xmm0, xmm6
jbe 0x1800428f4
mov rax, qword [0x180064ca0]
lea rcx, [rbp - 0x20]
movss dword [rbp + 0x1c8], xmm6
movss dword [rbp + 0x1cc], xmm1
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp - 0x20], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp - 0x14], xmm0
call fcn.18000fea0
mov rcx, qword [rbx + 0x298]
lea rdx, [rsp + 0x78]
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea r8, [rbp + 0x1c8]
call fcn.180031f30
cmp byte [rsp + 0x64], 0
jne 0x180042930
movss xmm0, dword [r13 + 0x3c08]
subss xmm6, xmm8
subss xmm7, xmm0
movss dword [r13 + 0x5bac], xmm0
mov byte [r13 + 0x5ba0], 1
movss dword [r13 + 0x5ba4], xmm6
movss dword [r13 + 0x5ba8], xmm7
movss xmm6, dword [rbp + 0x1f8]
jmp 0x180042955
movss xmm6, dword [rbp + 0x1f8]
movss xmm12, dword [rbp - 0x40]
xorps xmm11, xmm11
movss xmm8, dword [0x18005b164]
mov ebx, dword [rbp - 0x58]
movaps xmm15, xmmword [rsp + 0x1d0]
movaps xmm14, xmmword [rsp + 0x1e0]
test bl, bl
je 0x180042973
call fcn.18001be90
cmp byte [rsp + 0x5c], 0
je 0x180042a12
movss xmm0, dword [rsp + 0x6c]
lea rcx, [rbp + 0x1c8]
addss xmm0, dword [r13 + 0x3810]
movss dword [rbp + 0x1c8], xmm6
movss dword [rbp + 0x1cc], xmm0
call fcn.18003afa0
mov ebx, dword [r13 + 0x4750]
mov eax, ebx
or eax, 0x401
mov dword [r13 + 0x4750], eax
call fcn.180016b10
mov eax, dword [r13 + 0x4774]
mov edi, dword [rbp + 0x98]
and eax, 0x80
or edi, eax
mov dword [r13 + 0x4750], ebx
call fcn.18001eff0
cmp dword [r13 + 0x476c], 0
mov r12d, dword [rsp + 0x68]
mov ebx, dword [rbp - 0x58]
jne 0x180042a17
mov eax, dword [rbp + 0x94]
mov dword [r13 + 0x4770], eax
mov dword [r13 + 0x476c], r12d
mov dword [r13 + 0x4774], edi
jmp 0x180042a17
mov r12d, dword [rsp + 0x68]
cmp byte [r13 + 0x5c58], 0
je 0x180042ba1
test bl, bl
jne 0x180042ba1
mov rdi, qword [0x180064ca0]
xor eax, eax
mov rsi, qword [rdi + 0x3ed0]
mov qword [rdi + 0x5c80], rax
mov qword [rdi + 0x5c78], rax
test r14, r14
jne 0x180042a7e
mov r14, r15
cmp r15, 0xffffffffffffffff
jae 0x180042a7e
nop dword [rax]
movzx ecx, byte [r14]
test cl, cl
je 0x180042a7e
lea rax, [r14 + 1]
cmp cl, 0x23
jne 0x180042a75
cmp byte [rax], cl
je 0x180042a7e
mov r14, rax
cmp rax, 0xffffffffffffffff
jb 0x180042a60
movss xmm1, dword [rbp - 0x44]
movss xmm0, dword [rdi + 0x3810]
addss xmm0, dword [rdi + 0x5c88]
movss dword [rdi + 0x5c88], xmm1
addss xmm0, xmm8
comiss xmm1, xmm0
jbe 0x180042ab8
lea rcx, [0x180059f44]
call fcn.180024b80
mov byte [rdi + 0x5c8c], 1
lea r8, [0x18005a365]
lea rdx, [0x18005a364]
lea rcx, [rbp - 0x48]
call fcn.180024bc0
mov eax, dword [rsi + 0x188]
mov ecx, dword [rdi + 0x5c90]
cmp ecx, eax
jle 0x180042ae7
mov dword [rdi + 0x5c90], eax
mov ecx, eax
mov esi, dword [rsi + 0x188]
mov r12d, 1
sub esi, ecx
nop word [rax + rax]
mov r8, r14
mov edx, 0xa
sub r8, r15
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov rbx, r14
cmovne rbx, rax
cmp r15, rbx
jne 0x180042b27
cmp rbx, r14
je 0x180042b85
mov r9d, ebx
lea edx, [rsi*4]
sub r9d, r15d
cmp byte [rdi + 0x5c8c], 0
jne 0x180042b40
mov edx, r12d
lea r8, [0x18005924e]
mov qword [rsp + 0x20], r15
lea rcx, str._s_.s
call fcn.180024b80
mov byte [rdi + 0x5c8c], 0
cmp byte [rbx], 0xa
jne 0x180042b77
lea rcx, [0x180059f44]
call fcn.180024b80
mov byte [rdi + 0x5c8c], r12b
cmp rbx, r14
je 0x180042b85
lea r15, [rbx + 1]
jmp 0x180042b00
lea r8, [0x18005a361]
lea rdx, [0x18005a360]
lea rcx, [rbp - 0x48]
call fcn.180024bc0
mov r12d, dword [rsp + 0x68]
movss xmm0, dword [rbp]
comiss xmm0, xmm11
jbe 0x180042bde
movss xmm0, dword [rbp - 4]
mov r9b, 1
addss xmm0, dword [r13 + 0x3824]
addss xmm12, dword [r13 + 0x3810]
mov rdx, qword [rbp + 0x1c0]
xor r8d, r8d
unpcklps xmm0, xmm12
movq rcx, xmm0
call fcn.180010430
movzx r8d, byte [rbp + 0x1f0]
mov edx, dword [rbp + 0x1e8]
test r8b, r8b
je 0x180042c1d
bt edx, 0x1b
jb 0x180042c1d
mov rax, qword [0x180064ca0]
mov ecx, dword [rax + 0x3f30]
cmp ecx, r12d
je 0x180042c0d
test ecx, ecx
jne 0x180042c16
mov word [rax + 0x3f40], 0x101
or dword [rax + 0x4774], 4
movzx ecx, byte [rsp + 0x58]
test dl, 0x20
mov eax, r8d
cmovne eax, ecx
jmp 0x18003f966