Function at 0x180028650
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x218
mov rsi, qword [0x180067c98]
mov r13d, 1
movaps xmmword [rax - 0x58], xmm6
xor r12d, r12d
movaps xmmword [rax - 0x68], xmm7
mov r14, rcx
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [rsi + 0x1a68]
mov dword [rbp - 0x20], 0x20
mov qword [rbp - 0x30], rsi
mov byte [rax + 0x80], r13b
mov rbx, qword [rsi + 0x1a68]
cmp byte [rbx + 0x83], r12b
jne 0x1800288aa
mov ecx, dword [rbp + 0x188]
mov eax, ecx
shr eax, 0xe
mov edi, ecx
and al, r13b
shr edi, 0x14
mov dword [rsp + 0x5c], eax
and dil, r13b
mov eax, ecx
mov dword [rsp + 0x60], ecx
shr eax, 0xf
and al, r13b
mov dword [rsp + 0x54], edi
mov dword [rsp + 0x6c], eax
mov eax, ecx
shr eax, 0x10
not al
and al, r13b
mov dword [rbp - 0x68], eax
mov eax, ecx
shr eax, 0x12
and al, r13b
mov dword [rsp + 0x70], eax
test dil, dil
je 0x180028753
call fcn.18000ba9c
mov rdx, r14
mov rcx, rbx
call fcn.180014bc8
movss xmm0, dword [0x18003d628]
lea rcx, [rbp + 0x168]
mov r9b, r13b
movss dword [rbp - 0x64], xmm0
xor r8d, r8d
movss dword [rsp + 0x20], xmm0
mov rdx, r14
mov dword [rsp + 0x68], eax
mov r15d, eax
call fcn.180011c78
test dil, dil
je 0x1800287a4
movss xmm4, dword [rsi + 0x1910]
mulss xmm4, dword [0x18003d570]
jmp 0x1800287ac
movss xmm4, dword [rbp + 0x16c]
call fcn.18000ca34
movss xmm6, dword [rsi + 0x1594]
lea rcx, [rbp + 0x190]
mov rdx, qword [rbp + 0x180]
movaps xmm3, xmm6
addss xmm3, xmm6
movaps xmm2, xmm0
mov rdx, qword [rdx]
addss xmm3, xmm4
call fcn.18000c948
movss xmm11, dword [rbp + 0x168]
xorps xmm12, xmm12
comiss xmm11, xmm12
movss dword [rbp - 0x48], xmm11
jbe 0x180028804
movaps xmm4, xmm11
addss xmm4, dword [rsi + 0x15a8]
jmp 0x180028807
xorps xmm4, xmm4
movss xmm2, dword [rbx + 0xd4]
lea rcx, [rsp + 0x78]
movss xmm3, dword [rbx + 0xd0]
movaps xmm0, xmm2
movss xmm10, dword [rbp + 0x194]
movaps xmm1, xmm3
movss xmm7, dword [rbp + 0x190]
addss xmm0, xmm10
movss dword [rbp - 0x78], xmm3
addss xmm4, xmm7
movss dword [rbp - 0x74], xmm2
addss xmm1, xmm7
movss dword [rsp + 0x78], xmm3
movss dword [rsp + 0x7c], xmm2
movss dword [rbp - 0x6c], xmm0
movaps xmm0, xmm2
mov qword [rbp - 0x40], rbx
addss xmm0, xmm10
movss dword [rbp - 0x70], xmm1
addss xmm4, xmm3
movss dword [rbp - 0x7c], xmm0
movss dword [rbp - 0x80], xmm4
test dil, dil
je 0x180028982
lea r8, [rbp - 0x78]
mov edx, r15d
call fcn.1800142b0
test al, al
jne 0x1800288ff
movss xmm1, dword [rsi + 0x1594]
lea rcx, [rsp + 0x78]
call fcn.18001439c
call fcn.18000b890
xor al, al
lea r11, [rsp + 0x218]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movss xmm9, dword [rbp - 0x70]
lea rdx, [rbp + 0x168]
movss xmm1, dword [rbp - 0x6c]
movaps xmm0, xmm9
movss xmm8, dword [rbp - 0x74]
mov ecx, r15d
movss xmm6, dword [rbp - 0x78]
subss xmm1, xmm8
subss xmm0, xmm6
movss dword [rbp - 0x18], xmm9
movss dword [rbp - 0x60], xmm8
movss dword [rbp + 0x16c], xmm1
movss dword [rbp + 0x168], xmm0
call fcn.180011230
test al, al
jne 0x18002895b
call fcn.1800112f4
jmp 0x1800288a5
mov r13, qword [rsi + 0x1a68]
mov qword [rbp - 0x40], r13
mov eax, dword [r13 + 0x13c]
or dword [r13 + 0x144], eax
subss xmm7, dword [r13 + 0x74]
mov r13d, 1
jmp 0x1800289be
movaps xmm1, xmm6
call fcn.18001439c
lea r8, [rbp - 0x78]
mov edx, r15d
lea rcx, [rsp + 0x78]
call fcn.1800142b0
test al, al
je 0x1800288aa
movss xmm0, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x74]
movss xmm6, dword [rbp - 0x78]
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x60], xmm8
mov edx, r15d
lea rcx, [rbp - 0x78]
call fcn.18001408c
mov byte [rsp + 0x66], al
mov r14b, al
test al, al
je 0x1800289dc
mov dword [rsi + 0x1ee0], r13d
lea r13, [rsi + 0x1fd8]
mov edx, r15d
cmp dword [r13], r15d
mov rdi, r13
mov rcx, rbx
cmovne rdi, r12
call fcn.180013f4c
xor r11d, r11d
mov r12b, al
test al, al
je 0x180028a6f
cmp qword [rsi + 0x1d08], rbx
jne 0x180028a6f
mov ecx, dword [rbx + 0x178]
cmp dword [rsi + 0x1d18], ecx
jne 0x180028a6f
lea eax, [r11 + 1]
mov byte [rbp + 0x198], al
mov byte [rsp + 0x52], r11b
test r14b, r14b
je 0x180028a3b
mov byte [rsp + 0x50], al
cmp byte [rsi + 0x420], r11b
jne 0x180028a40
mov byte [rsp + 0x50], r11b
mov r14d, dword [rsi + 0x1ab0]
cmp r14d, r15d
je 0x180028a8d
cmp dword [rsi + 0x1be8], r15d
je 0x180028a67
cmp dword [rsi + 0x1bdc], r15d
jne 0x180028a8d
cmp dword [rsi + 0x1bfc], 3
jne 0x180028a8d
mov byte [rbp + 0x178], al
jmp 0x180028a94
mov byte [rbp + 0x198], r11b
mov eax, 1
test r12b, r12b
je 0x180028a24
mov byte [rsp + 0x52], al
mov byte [rbp + 0x198], r11b
jmp 0x180028a29
mov byte [rbp + 0x178], r11b
mov eax, dword [rsp + 0x54]
test al, al
je 0x180028ae0
test rdi, rdi
je 0x180028ae0
test r14d, r14d
jne 0x180028ae0
mov rcx, qword [rbp - 0x40]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180016c44
cmp dword [rsi + 0x1aec], eax
jne 0x180028ad9
lea r15d, [r14 + 1]
jmp 0x180028aec
mov eax, dword [rsp + 0x54]
xor r11d, r11d
mov r15b, r11b
test al, al
je 0x180028b22
test rdi, rdi
je 0x180028b22
mov rcx, qword [rbp - 0x40]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180016c44
xor r11d, r11d
cmp r14d, eax
jne 0x180028b22
lea r8d, [r11 + 1]
mov al, r8b
jmp 0x180028b2b
mov al, r11b
mov r8d, 1
mov edx, dword [rsp + 0x68]
mov cl, byte [rbp + 0x178]
mov byte [rsp + 0x51], al
mov byte [rbp + 0x190], r11b
cmp r14d, edx
je 0x180028b5c
test byte [rsp + 0x60], 0x10
jne 0x180028b50
test cl, cl
je 0x180028b5c
mov byte [rsp + 0x58], r8b
cmp byte [rsp + 0x54], r11b
je 0x180028b61
mov byte [rsp + 0x58], r11b
test r12b, r12b
jne 0x180028c40
cmp byte [rsp + 0x50], r11b
jne 0x180028c40
test r15b, r15b
jne 0x180028c40
test cl, cl
jne 0x180028c40
mov r12b, r11b
test al, al
jne 0x180028c4b
mov r15b, r11b
mov r14d, edx
mov r13d, dword [rsp + 0x58]
cmp dword [rsi + 0x1ab0], r14d
je 0x180028e30
test r12b, r12b
je 0x180028e30
mov rdx, rbx
mov ecx, r14d
call fcn.1800146fc
call fcn.180014604
mov rcx, rbx
call fcn.18000cc6c
mov eax, dword [rsi + 0x1ac4]
xor r11d, r11d
mov ecx, dword [rsp + 0x54]
or eax, 3
mov edx, dword [rsp + 0x60]
mov dword [rsi + 0x1ac4], eax
test cl, cl
jne 0x180028bec
test dl, dl
jns 0x180028bf5
or eax, 0xc
mov dword [rsi + 0x1ac4], eax
mov rax, qword [rsi + 0x1ad0]
or dword [rsi + 0x1ac8], 2
or rax, 0x180
mov qword [rsi + 0x1ad0], rax
test cl, cl
je 0x180028c1f
or rax, 0x60
mov qword [rsi + 0x1ad0], rax
mov r14d, 1
test edx, 0x440
je 0x180028e36
or rax, r14
mov qword [rsi + 0x1ad0], rax
jmp 0x180028e36
mov r8d, 1
mov r12b, r8b
jmp 0x180028c51
mov r8d, 1
mov byte [rbp + 0x168], r8b
mov r15b, r8b
cmp r14d, edx
je 0x180028b94
mov dword [r13 + 0xe70], 0xbe99999a
mov rdi, r13
mov r13, qword [rbp + 0x170]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov ecx, dword [rdi + 0x34]
lea r14d, [rax + 1]
cmp r14d, ecx
jle 0x180028cb4
test ecx, ecx
je 0x180028c9d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180028ca2
mov eax, 8
cmp eax, r14d
lea rcx, [rdi + 0x30]
mov edx, r14d
cmovg edx, eax
call fcn.180002530
mov dword [rdi + 0x30], r14d
mov rdx, r13
mov rcx, qword [rdi + 0x38]
movsxd r8, r14d
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov ecx, dword [rdi + 0x14]
xor r15d, r15d
mov qword [rsp + 0x78], r15
cmp ecx, 0x21
jge 0x180028cff
test ecx, ecx
je 0x180028ce7
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180028cec
mov eax, 8
mov edx, 0x21
lea rcx, [rdi + 0x10]
cmp eax, edx
cmovg edx, eax
call fcn.1800025b8
mov dword [rdi + 0x10], 0x21
mov ecx, dword [rdi + 0x24]
test ecx, ecx
jns 0x180028d27
mov eax, ecx
cdq
sub eax, edx
mov edx, r15d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x20]
test eax, eax
cmovg edx, eax
call fcn.180002530
mov dword [rdi + 0x20], r15d
lea rax, [rsp + 0x78]
mov rcx, qword [rdi + 0x18]
mov r8, r13
mov edx, 0x20
mov qword [rsp + 0x20], rax
mov byte [rdi + 0x40], r15b
call fcn.180016774
mov ecx, dword [rsp + 0x78]
mov edx, eax
mov r14d, dword [rsp + 0x68]
sub ecx, r13d
mov r8d, 1
mov dword [rdi + 4], eax
mov dword [rdi + 8], ecx
cmp dword [rdi], r14d
jne 0x180028d8e
cmp dword [rdi + 0x4c], eax
mov ecx, eax
cmovl ecx, dword [rdi + 0x4c]
cmp dword [rdi + 0x50], eax
mov dword [rdi + 0x4c], ecx
cmovl eax, dword [rdi + 0x50]
cmp dword [rdi + 0x54], edx
mov dword [rdi + 0x50], eax
cmovl edx, dword [rdi + 0x54]
xor r11d, r11d
mov dword [rdi + 0x54], edx
jmp 0x180028de8
mov ecx, dword [rsp + 0x54]
xor r11d, r11d
mov al, cl
mov dword [rdi], r14d
xor al, r8b
mov qword [rdi + 0x48], r11
mov dword [rdi + 0xe62], 0x630000
mov dword [rdi + 0xe68], r11d
mov dword [rdi + 0xe6c], 0x3e7
mov qword [rdi + 0x50], r11
mov dword [rdi + 0x58], 0x10000
mov dword [rdi + 0x60], r11d
mov byte [rdi + 0x5c], al
test cl, cl
jne 0x180028dec
mov ecx, dword [rsp + 0x58]
cmp byte [rbp + 0x198], r11b
movzx ecx, cl
cmovne ecx, r8d
mov dword [rsp + 0x58], ecx
mov ecx, dword [rsp + 0x54]
test dword [rsp + 0x60], 0x2000
je 0x180028dfa
mov byte [rdi + 0x58], r8b
test cl, cl
jne 0x180028e24
cmp byte [rsp + 0x52], r11b
jne 0x180028e15
cmp byte [rsp + 0x50], r11b
je 0x180028e24
cmp byte [rsi + 0x148], r11b
je 0x180028e24
mov r15b, byte [rbp + 0x168]
mov r13b, r8b
jmp 0x180028b9c
mov r15b, byte [rbp + 0x168]
jmp 0x180028b97
mov r14d, 1
mov ebx, dword [rsp + 0x68]
cmp dword [rsi + 0x1ab0], ebx
jne 0x180028e74
test rdi, rdi
jne 0x180028e50
xor edx, edx
xor ecx, ecx
call fcn.1800146fc
cmp dword [rsi + 0x1ab0], ebx
jne 0x180028e74
cmp byte [rsi + 0x420], r11b
je 0x180028e80
test r15b, r15b
jne 0x180028e80
test r12b, r12b
jne 0x180028e80
mov byte [rbp + 0x190], r14b
jmp 0x180028e80
test rdi, rdi
je 0x180028e85
cmp byte [rsp + 0x51], r11b
je 0x180028e85
mov r15b, r14b
jmp 0x180028e88
mov r15b, r11b
mov byte [rbp + 0x198], r15b
test rdi, rdi
je 0x180028ea4
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
je 0x180028ea4
mov r8b, r14b
test r15b, r15b
jne 0x180028ea7
mov r8b, r11b
mov dword [rsp + 0x74], r8d
movzx r14d, r8b
mov byte [rsp + 0x65], r11b
mov byte [rsp + 0x52], r11b
cmp byte [rsp + 0x5c], r11b
je 0x180028f84
test rdi, rdi
je 0x180028f84
test r15b, r15b
jne 0x180028edc
test r8b, r8b
je 0x180028f8e
mov ecx, dword [rdi + 0x14]
mov r12d, 0x21
mov qword [rbp + 0x168], r11
cmp ecx, r12d
jge 0x180028f17
test ecx, ecx
je 0x180028f00
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180028f05
mov eax, 8
cmp eax, r12d
lea rcx, [rdi + 0x10]
mov edx, r12d
cmovg edx, eax
call fcn.1800025b8
mov rbx, qword [rbp + 0x170]
lea rax, [rbp + 0x168]
mov dword [rdi + 0x10], r12d
mov r8, rbx
mov rcx, qword [rdi + 0x18]
mov edx, r12d
mov qword [rsp + 0x20], rax
call fcn.180016774
mov ecx, dword [rbp + 0x168]
mov edx, eax
sub ecx, ebx
mov dword [rdi + 4], eax
cmp dword [rdi + 0x4c], eax
mov ebx, dword [rsp + 0x68]
mov dword [rdi + 8], ecx
mov ecx, eax
cmovl ecx, dword [rdi + 0x4c]
cmp dword [rdi + 0x50], eax
mov dword [rdi + 0x4c], ecx
mov ecx, eax
cmovl ecx, dword [rdi + 0x50]
cmp dword [rdi + 0x54], eax
mov dword [rdi + 0x50], ecx
cmovl edx, dword [rdi + 0x54]
xor r11d, r11d
cmp ecx, edx
mov dword [rdi + 0x54], edx
mov r8d, r11d
cmovne r8d, r14d
mov dword [rsp + 0x74], r8d
test r15b, r15b
jne 0x180028f96
test r8b, r8b
jne 0x180028f96
cmp dword [rsi + 0x1ab0], ebx
jne 0x180028fb2
mov r15d, dword [rsp + 0x5c]
test r15b, r15b
jne 0x180028fb7
test rdi, rdi
je 0x180028fb7
cmp byte [rdi + 0x40], r11b
je 0x180028fb7
mov byte [rsp + 0x64], 1
jmp 0x180028fbc
mov r15d, dword [rsp + 0x5c]
mov byte [rsp + 0x64], r11b
cmp byte [rsp + 0x6c], r11b
je 0x18002904d
mov rcx, qword [rsi + 0x1908]
mov edx, 0x2a
call fcn.180022a4c
mov ecx, dword [rcx + 0x14]
lea r10, [rsi + 0x2e68]
mov dword [r10 + 0x14], ecx
mov r9, rax
mov rcx, qword [rsi + 0x1908]
mov edx, dword [rcx + 0x60]
mov rcx, r10
mov dword [r10 + 0x60], edx
mov rdx, qword [rsi + 0x1908]
movsd xmm0, qword [rdx + 0x40]
movsd qword [r10 + 0x40], xmm0
mov rdx, qword [rsi + 0x1908]
mov r8d, dword [rdx + 0x64]
mov dword [r10 + 0x64], r8d
mov rdx, qword [rsi + 0x1908]
mov r8d, dword [rdx + 0x68]
mov dword [r10 + 0x68], r8d
mov rax, qword [rsi + 0x1908]
mov rdx, qword [rax + 0x48]
mov qword [r10 + 0x48], rdx
mov qword [r10 + 0x38], r9
mov eax, dword [r9 + 4]
mov dword [r10 + 0x10], eax
call fcn.18000c83c
xor r11d, r11d
movss xmm0, dword [0x18003d4b4]
mov dword [rbp - 0x14], r11d
cmp dword [rsi + 0x1ab0], ebx
jne 0x180029391
mov eax, dword [rdi + 8]
mov ecx, 1
mov r12d, dword [rsp + 0x60]
mov dword [rdi + 0xe78], r12d
mov dword [rdi + 0x44], 0x20
mov qword [rdi + 0xe80], r11
mov qword [rdi + 0xe88], r11
cmp byte [rsi + 0x138], r11b
mov dword [rsi + 0x31ac], ecx
mov dword [rbp - 0x14], eax
sete al
mov byte [rsi + 0x1abd], al
movss xmm2, dword [rsi + 0x130]
subss xmm2, xmm6
subss xmm2, dword [rsi + 0x1590]
addss xmm2, dword [rdi + 0x48]
cmp byte [rsp + 0x54], r11b
je 0x1800290e5
mov rax, qword [rbp - 0x40]
movss xmm3, dword [rsi + 0x134]
subss xmm3, dword [rax + 0xd4]
subss xmm3, dword [rsi + 0x1594]
jmp 0x1800290f1
movss xmm3, dword [rsi + 0x1910]
mulss xmm3, xmm0
mov r14b, byte [rsi + 0xc9]
test r13b, r13b
jne 0x18002923e
mov al, byte [rsp + 0x66]
test al, al
je 0x18002911f
test r14b, r14b
jne 0x1800291a3
cmp byte [rsi + 0x425], r11b
jne 0x18002923e
lea rbx, [rdi + 0xe75]
mov cl, byte [rbx]
cmp byte [rsi + 0x420], r11b
je 0x1800291d6
test cl, cl
jne 0x1800291d6
test al, al
je 0x18002915a
lea rdx, [rdi + 0x4c]
mov rcx, rdi
call fcn.18002c3fc
xor r11d, r11d
mov dword [rdi + 0xe70], 0xbe99999a
mov rax, rbx
mov ecx, 1
cmp byte [rax], r11b
je 0x180029173
cmp byte [rsi + 0x138], r11b
jne 0x180029173
mov byte [rax], r11b
cmp byte [rsi + 0x148], r11b
je 0x180029185
cmp byte [rsi + 0x14a], r11b
je 0x18002919b
test r14b, r14b
je 0x18002925d
cmp byte [rsi + 0x14b], r11b
je 0x18002925d
mov r14b, cl
jmp 0x180029260
cmp byte [rsi + 0x425], r11b
je 0x18002911f
mov edx, 0x20000c
mov rcx, rdi
call fcn.18002acf0
mov edx, 0x60000d
mov rcx, rdi
call fcn.18002acf0
lea rax, [rdi + 0xe75]
xor r11d, r11d
jmp 0x18002915d
mov rax, rbx
cmp byte [rsi + 0x138], r11b
je 0x18002915d
test cl, cl
jne 0x18002915d
movss xmm0, dword [rsi + 0x3c0]
ucomiss xmm0, xmm12
jp 0x180029212
jne 0x180029212
movss xmm0, dword [rsi + 0x3c4]
ucomiss xmm0, xmm12
jp 0x180029212
je 0x18002915d
lea rdx, [rdi + 0x4c]
mov rcx, rdi
call fcn.18002c390
mov ecx, 1
mov dword [rdi + 0xe70], 0xbe99999a
mov byte [rdi + 0xe74], cl
mov rax, rbx
xor r11d, r11d
jmp 0x180029162
mov eax, dword [rdi + 4]
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x4c], eax
lea rax, [rdi + 0xe75]
mov byte [rax], cl
mov dword [rdi + 0x50], r11d
mov byte [rdi + 0x5b], r11b
jmp 0x180029162
mov r14b, r11b
mov r13d, 9
bt r12d, 0xa
jae 0x1800292eb
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x1800292eb
call fcn.18001192c
test al, al
je 0x1800292eb
test r14b, r14b
jne 0x1800292eb
cmp byte [rsi + 0x149], r11b
jne 0x1800292eb
test r15b, r15b
jne 0x1800292eb
mov rcx, qword [rsi + 0x1550]
movsxd rax, dword [rsi + 0x1548]
lea rdx, [rcx + rax*2]
jmp 0x1800292b8
movzx eax, word [rcx]
add rcx, 2
cmp ax, r13w
je 0x1800292eb
cmp rcx, rdx
jb 0x1800292ab
mov edx, r12d
mov dword [rbp + 0x168], r13d
lea rcx, [rbp + 0x168]
call fcn.18002ab4c
xor r11d, r11d
test al, al
je 0x1800292eb
mov edx, dword [rbp + 0x168]
mov rcx, rdi
call fcn.18002acf0
xor r11d, r11d
lea rbx, [rsi + 0x1548]
cmp dword [rbx], r11d
jle 0x18002938d
test r14b, r14b
jne 0x180029367
test r15b, r15b
jne 0x180029367
cmp byte [rbp + 0x178], r11b
jne 0x180029367
mov r15d, r11d
mov r14, r11
mov rax, qword [rsi + 0x1550]
movzx ecx, word [r14 + rax]
mov dword [rbp + 0x178], ecx
cmp ecx, r13d
jne 0x180029334
cmp byte [rsi + 0x149], r11b
jne 0x18002935b
mov edx, r12d
lea rcx, [rbp + 0x178]
call fcn.18002ab4c
xor r11d, r11d
test al, al
je 0x18002935b
mov edx, dword [rbp + 0x178]
mov rcx, rdi
call fcn.18002acf0
xor r11d, r11d
inc r15d
add r14, 2
cmp r15d, dword [rbx]
jl 0x180029314
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18002938a
mov eax, ecx
cdq
sub eax, edx
mov edx, r11d
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.1800025b8
xor r11d, r11d
mov dword [rbx], r11d
mov ebx, dword [rsp + 0x68]
mov cl, r11b
mov dword [rbp - 8], 0xa
mov byte [rbp + 0x178], cl
cmp dword [rsi + 0x1ab0], ebx
jne 0x18002a107
cmp byte [rsi + 0x1abc], r11b
jne 0x18002979c
cmp byte [rbp + 0x190], r11b
jne 0x18002979c
mov r9b, byte [rsi + 0x149]
mov dl, byte [rsi + 0xc9]
mov al, r9b
neg al
sbb eax, eax
and eax, 0x400000
mov dword [rsp + 0x58], eax
mov al, byte [rsi + 0x148]
test dl, dl
je 0x180029413
lea r10, [rsi + 0x14b]
mov qword [rsp + 0x78], r10
cmp byte [r10], r11b
je 0x18002940a
test al, al
jne 0x18002940a
mov ecx, 1
jmp 0x18002940d
mov ecx, r11d
test ecx, ecx
je 0x180029451
jmp 0x18002942b
lea rcx, [rsi + 0x14b]
test al, al
je 0x180029449
cmp byte [rcx], r11b
jne 0x180029449
mov r10, rcx
mov qword [rsp + 0x78], rcx
cmp byte [rsi + 0x14a], r11b
jne 0x180029451
test r9b, r9b
jne 0x180029451
mov r13d, 1
mov r14b, r13b
mov byte [rsp + 0x50], r13b
jmp 0x18002945f
mov r10, rcx
mov qword [rsp + 0x78], rcx
mov r14b, r11b
mov byte [rsp + 0x50], r11b
mov r13d, 1
mov r8, r10
mov cl, al
test dl, dl
je 0x180029490
cmp byte [rsi + 0x14b], r11b
je 0x180029490
test r9b, r9b
je 0x180029490
mov al, byte [rsi + 0x148]
mov cl, al
test al, al
jne 0x180029490
cmp byte [rsi + 0x14a], r11b
jne 0x180029490
mov cl, r13b
jmp 0x18002949d
mov al, cl
mov cl, r11b
test dl, dl
je 0x180029581
mov r15b, cl
mov dl, byte [rsi + 0x14a]
mov bl, al
mov byte [rbp + 0x168], dl
mov qword [rsp + 0x78], r8
cmp byte [r10], r11b
je 0x18002958c
mov byte [rbp + 0x168], dl
mov qword [rsp + 0x78], r8
test al, al
jne 0x18002958c
mov byte [rbp + 0x168], dl
mov qword [rsp + 0x78], r8
cmp dl, r11b
jne 0x18002958c
mov r12b, r13b
mov byte [rbp + 0x168], dl
mov qword [rsp + 0x78], r8
xor edx, edx
mov r11b, r12b
mov r8b, dl
test r9b, r9b
je 0x180029512
test bl, bl
jne 0x180029512
cmp byte [rsi + 0x14a], dl
jne 0x180029512
mov r9b, r13b
cmp byte [r10], dl
je 0x180029515
mov r9b, dl
test r14b, r14b
je 0x180029536
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x180029536
call fcn.18001192c
xor edx, edx
test al, al
jne 0x180029558
test r9b, r9b
je 0x1800295c0
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x1800295c0
call fcn.18001192c
xor edx, edx
test al, al
je 0x1800295c0
mov r13d, dword [rsp + 0x6c]
mov r10d, dword [rsp + 0x54]
cmp byte [rsp + 0x5c], dl
jne 0x1800295ca
test r13b, r13b
jne 0x1800295ca
test r10b, r10b
je 0x18002957a
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
je 0x1800295ca
mov byte [rsp + 0x51], 1
jmp 0x1800295ce
mov byte [rbp + 0x168], al
mov r15b, r11b
mov bl, al
mov r12b, r11b
test bl, bl
je 0x1800294f1
test r9b, r9b
jne 0x1800294f1
cmp byte [rsi + 0x14a], r11b
jne 0x1800294f1
cmp byte [r10], r11b
jne 0x1800294f1
mov r8b, r13b
xor edx, edx
jmp 0x180029512
mov r10d, dword [rsp + 0x54]
mov r13d, dword [rsp + 0x6c]
mov byte [rsp + 0x51], dl
test r14b, r14b
je 0x1800295ef
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x1800295ef
call fcn.18001192c
xor edx, edx
test al, al
jne 0x18002960d
test r8b, r8b
je 0x18002962a
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18002962a
call fcn.18001192c
xor edx, edx
test al, al
je 0x18002962a
test r13b, r13b
jne 0x18002962a
test r10b, r10b
je 0x18002961f
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
je 0x18002962a
mov r10d, 1
mov r13b, r10b
jmp 0x180029633
mov r13b, dl
mov r10d, 1
test r14b, r14b
je 0x180029654
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x180029654
call fcn.18001192c
xor edx, edx
test al, al
jne 0x180029672
test r9b, r9b
je 0x180029681
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x180029681
call fcn.18001192c
xor edx, edx
test al, al
je 0x180029681
mov r9d, dword [rsp + 0x5c]
test r9b, r9b
jne 0x180029686
mov r14b, r10b
jmp 0x180029689
mov r9d, dword [rsp + 0x5c]
mov r14b, dl
mov r8b, byte [rsp + 0x50]
test r8b, r8b
je 0x1800296bf
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x1800296bf
call fcn.18001192c
xor edx, edx
test al, al
je 0x1800296bf
test r9b, r9b
mov r9d, dword [rbp - 0x68]
jne 0x1800296c3
test r9b, r9b
je 0x1800296c3
jmp 0x1800296cb
mov r9d, dword [rbp - 0x68]
mov r10b, dl
test r8b, r8b
je 0x1800296e7
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x1800296e7
call fcn.18001192c
xor edx, edx
test al, al
jne 0x180029708
test r15b, r15b
je 0x18002971f
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18002971f
call fcn.18001192c
xor edx, edx
test al, al
je 0x18002971f
mov r15d, dword [rsp + 0x5c]
test r15b, r15b
jne 0x180029724
test r9b, r9b
je 0x180029724
mov r9d, 1
jmp 0x180029727
mov r15d, dword [rsp + 0x5c]
mov r9b, dl
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x18002989d
call fcn.18001192c
test al, al
je 0x18002989d
neg byte [rbp + 0x168]
mov eax, 0x200004
sbb edx, edx
and edx, 0xc
add edx, 0x200000
test r11b, r11b
cmovne edx, eax
or edx, dword [rsp + 0x58]
mov rcx, rdi
call fcn.18002acf0
xor r11d, r11d
mov r8d, 1
mov cl, byte [rbp + 0x178]
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
je 0x180029791
mov al, r8b
cmp byte [rbp + 0x198], r11b
jne 0x180029794
mov al, r11b
or byte [rsp + 0x74], al
mov ebx, dword [rsp + 0x68]
cmp dword [rsi + 0x1ab0], ebx
jne 0x18002a107
mov qword [rbp + 0x168], r11
mov r15d, r11d
mov r13d, 0x38
test cl, cl
je 0x180029e24
cmp byte [rsp + 0x5c], r11b
jne 0x1800297f1
mov rdx, qword [rdi + 0x38]
mov rcx, qword [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
xor r11d, r11d
test eax, eax
je 0x1800297f1
mov rax, qword [rdi + 0x38]
mov r15d, dword [rdi + 0x30]
mov qword [rbp + 0x168], rax
dec r15d
cmp byte [rsp + 0x52], r11b
je 0x18002980b
mov r12d, dword [rsp + 0x60]
mov eax, 0x20
test al, r12b
jne 0x180029e29
mov r13d, dword [rsp + 0x70]
mov r14, qword [rbp + 0x170]
mov rbx, qword [rbp + 0x168]
test rbx, rbx
je 0x18002a0ee
cmp dword [rbp - 0x14], r15d
je 0x18002a0cc
test r13b, r13b
je 0x18002a0cc
xor edx, edx
lea rcx, [rbp + 0x38]
lea r8d, [rdx + 0x38]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov eax, dword [rsp + 0x60]
mov ecx, 0x20
mov dword [rbp + 0x3c], eax
lea eax, [r15 + 1]
cmp eax, ecx
mov dword [rbp + 0x38], 0x40000
mov qword [rbp + 0x50], r14
cmovle eax, ecx
mov dword [rbp + 0x58], r15d
mov dword [rbp + 0x5c], eax
lea rcx, [rbp + 0x38]
xor eax, eax
mov qword [rbp + 0x40], rax
call rax
mov ecx, dword [rbp + 0x5c]
mov r14, qword [rbp + 0x50]
mov qword [rbp + 0x170], r14
lea r15d, [rcx - 1]
cmp dword [rbp + 0x58], r15d
cmovl r15d, dword [rbp + 0x58]
jmp 0x18002a0cf
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x1800298cf
call fcn.18001192c
test al, al
je 0x1800298cf
neg byte [rbp + 0x168]
mov eax, 0x200005
sbb edx, edx
and edx, 0xc
add edx, 0x200001
jmp 0x18002975c
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18002992b
call fcn.18001192c
mov r11d, dword [rsp + 0x54]
test al, al
je 0x180029930
test r11b, r11b
je 0x180029930
xor r11d, r11d
test bl, bl
je 0x18002991b
mov rdx, qword [rbp - 0x40]
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [rsi + 0x1910]
mov dword [rdx + 0x70], r11d
maxss xmm0, xmm12
movss dword [rdx + 0x68], xmm0
jmp 0x180029771
movzx eax, r12b
lea edx, [rax*4 + 0x200002]
jmp 0x180029762
mov r11d, dword [rsp + 0x54]
mov r8, qword [0x180067c98]
mov ecx, dword [r8 + 0x4c]
test ecx, ecx
js 0x18002998f
call fcn.18001192c
test al, al
je 0x18002998f
test r11b, r11b
je 0x18002998f
xor r11d, r11d
test bl, bl
je 0x18002997f
mov rcx, qword [rbp - 0x40]
movss xmm0, dword [rsi + 0x1910]
mov rax, qword [r8 + 0x1a68]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
mov dword [rcx + 0x70], r11d
movss dword [rcx + 0x68], xmm0
jmp 0x180029771
movzx eax, r12b
lea edx, [rax*4 + 0x200003]
jmp 0x180029762
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x1800299b9
call fcn.18001192c
test al, al
je 0x1800299b9
mov eax, 0x200004
neg bl
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x180029762
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x1800299d7
call fcn.18001192c
test al, al
je 0x1800299d7
mov eax, 0x200005
jmp 0x1800299ab
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x180029a02
call fcn.18001192c
test al, al
je 0x180029a02
test r15b, r15b
jne 0x180029a02
mov edx, dword [rsp + 0x58]
or edx, 0x200008
jmp 0x180029766
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x180029a70
call fcn.18001192c
xor edx, edx
test al, al
je 0x180029a70
test r15b, r15b
jne 0x180029a70
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
jne 0x180029a61
cmp byte [rbp + 0x168], dl
je 0x180029a37
mov edx, 0x60000c
jmp 0x180029a59
cmp byte [rsi + 0xc9], dl
je 0x180029a61
mov rax, qword [rsp + 0x78]
cmp byte [rax], dl
je 0x180029a61
cmp byte [rsi + 0x14a], dl
jne 0x180029a61
test bl, bl
jne 0x180029a61
mov edx, 0x600004
mov rcx, rdi
call fcn.18002acf0
mov edx, dword [rsp + 0x58]
or edx, 0x200009
jmp 0x180029766
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x180029a87
call fcn.18001192c
test al, al
jne 0x180029a9e
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x180029b12
call fcn.18001192c
test al, al
je 0x180029b12
mov ecx, dword [rsp + 0x60]
mov r8d, 1
mov eax, ecx
shr eax, 0xb
and al, r8b
test r11b, r11b
je 0x180029afe
xor r11d, r11d
test al, al
je 0x180029ac2
test bl, bl
je 0x180029b01
jmp 0x180029ac6
test bl, bl
jne 0x180029b01
test r15b, r15b
jne 0x180029777
mov eax, 0xa
mov edx, ecx
lea rcx, [rbp + 0x168]
mov dword [rbp + 0x168], eax
call fcn.18002ab4c
xor r11d, r11d
test al, al
je 0x180029771
mov edx, dword [rbp + 0x168]
jmp 0x180029766
xor r11d, r11d
mov byte [rbp + 0x190], r8b
mov byte [rsp + 0x52], r8b
jmp 0x180029777
mov rax, qword [0x180067c98]
xor r11d, r11d
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x180029b3f
call fcn.18001192c
test al, al
je 0x180029b3f
lea r8d, [r11 + 1]
mov cl, r8b
mov byte [rbp + 0x190], r8b
jmp 0x18002977d
test r10b, r10b
jne 0x180029e01
test r9b, r9b
jne 0x180029e01
cmp byte [rsp + 0x50], r11b
je 0x180029b92
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x180029b92
call fcn.18001192c
test al, al
je 0x180029b92
mov eax, dword [rdi + 4]
mov r8d, 1
mov byte [rdi + 0xe74], r8b
mov dword [rdi + 0x50], r11d
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x4c], eax
mov byte [rdi + 0x5b], r11b
jmp 0x180029777
mov al, byte [rsp + 0x51]
test al, al
jne 0x180029cb1
test r13b, r13b
jne 0x180029cb1
test r14b, r14b
je 0x180029771
call fcn.180013e74
xor r11d, r11d
mov rbx, rax
test rax, rax
je 0x180029771
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov rcx, qword [0x180067c98]
xor r13d, r13d
test rcx, rcx
je 0x180029be7
lea r8d, [r13 + 1]
add dword [rcx + 0x3bc], r8d
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14d, r13d
mov r15, rax
mov qword [rsp + 0x78], rax
cmp byte [rbx], r13b
je 0x180029c66
mov esi, dword [rsp + 0x60]
mov r12, rax
mov r15d, 1
xor r8d, r8d
lea rcx, [rbp + 0x168]
mov rdx, rbx
call fcn.18001680c
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp + 0x168], r13d
je 0x180029c5d
mov edx, esi
lea rcx, [rbp + 0x168]
call fcn.18002ab4c
test al, al
je 0x180029c58
movzx eax, word [rbp + 0x168]
add r14d, r15d
mov word [r12], ax
add r12, 2
cmp byte [rbx], r13b
jne 0x180029c12
mov rsi, qword [rbp - 0x30]
mov r15, qword [rsp + 0x78]
movsxd rax, r14d
mov word [r15 + rax*2], r13w
test r14d, r14d
jle 0x180029c8c
lea rdx, [rdi + 0x4c]
mov r9d, r14d
mov r8, r15
mov rcx, rdi
call fcn.18002bff4
mov byte [rdi + 0xe74], 1
test r15, r15
je 0x180029ca3
mov rax, qword [0x180067c98]
test rax, rax
je 0x180029ca3
dec dword [rax + 0x3bc]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002976e
cmp qword [rsi + 0x108], r11
je 0x180029d5c
mov ecx, dword [rdi + 0x50]
mov eax, dword [rdi + 0x54]
cmp ecx, eax
je 0x180029cd2
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x180029cd8
mov eax, dword [rdi + 4]
mov edx, r11d
movsxd r15, eax
mov rax, qword [rdi + 0x18]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.1800164c4
mov ecx, 1
lea r14d, [rcx + rax]
mov rax, qword [0x180067c98]
test rax, rax
je 0x180029d0a
add dword [rax + 0x3bc], ecx
movsxd rcx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rdi + 0x18]
mov edx, r14d
mov rbx, rax
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov rcx, rax
call fcn.180016548
mov rcx, rbx
call fcn.180013e44
test rbx, rbx
je 0x180029d4c
mov rcx, qword [0x180067c98]
test rcx, rcx
je 0x180029d4c
dec dword [rcx + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, byte [rsp + 0x51]
xor r11d, r11d
test al, al
je 0x180029771
mov eax, dword [rdi + 0x54]
lea rbx, [rdi + 0x4c]
cmp dword [rdi + 0x50], eax
jne 0x180029d80
mov eax, dword [rdi + 4]
mov dword [rdi + 0x54], eax
mov dword [rbx], eax
mov dword [rdi + 0x50], r11d
mov byte [rdi + 0x5b], r11b
mov byte [rdi + 0xe74], 1
mov eax, dword [rbx + 4]
mov r8d, dword [rbx + 8]
cmp eax, r8d
je 0x180029771
mov ecx, dword [rdi + 4]
cmp eax, ecx
jle 0x180029da3
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x180029dae
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x180029db5
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x180029dbb
mov dword [rbx], ecx
cmp eax, r8d
je 0x180029df8
mov rdx, rbx
mov rcx, rdi
jge 0x180029dde
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18002c1ac
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
jmp 0x180029def
sub eax, r8d
mov r9d, eax
call fcn.18002c1ac
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
xor r11d, r11d
mov dword [rbx], eax
mov byte [rbx + 0xf], r11b
mov byte [rbx + 0xf], r11b
jmp 0x180029771
movzx edx, r10b
mov rcx, rdi
xor edx, 1
add edx, 0x20000a
call fcn.18002acf0
mov eax, dword [rdi + 0x4c]
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x50], eax
jmp 0x18002976e
mov r12d, dword [rsp + 0x60]
cmp byte [rsp + 0x5c], r11b
jne 0x180029e81
mov eax, dword [rdi + 0x10]
mov byte [rdi + 0x40], 1
mov ecx, dword [rdi + 0x24]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x180029e69
test ecx, ecx
je 0x180029e54
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180029e59
mov eax, 8
cmp eax, ebx
lea rcx, [rdi + 0x20]
mov edx, ebx
cmovg edx, eax
call fcn.180002530
mov dword [rdi + 0x20], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x18]
mov edx, ebx
mov rcx, qword [rdi + 0x28]
call fcn.180016548
xor r11d, r11d
test r12d, 0x1c0
je 0x18002a090
mov ebx, 0x40
lea r14d, [rbx - 0x2a]
test bl, r12b
je 0x180029eb8
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x180029eb8
call fcn.18001192c
test al, al
je 0x180029eb8
mov r14d, r11d
jmp 0x180029f13
mov r8d, 0x80
test r8b, r12b
je 0x180029f05
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x180029ee3
call fcn.18001192c
test al, al
je 0x180029ee3
mov ebx, r8d
lea r14d, [r8 - 0x7d]
jmp 0x180029f13
mov rax, qword [0x180067c98]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x180029f05
call fcn.18001192c
test al, al
je 0x180029f05
mov ebx, r8d
mov r14d, 4
jmp 0x180029f13
mov eax, pe_nt_image_headers64
mov ebx, r11d
test eax, r12d
cmovne ebx, eax
test ebx, ebx
je 0x18002a090
mov r8, r13
lea rcx, [rbp]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov r8, r13
lea rcx, [rbp]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rax, qword [rdi + 0x28]
xor ecx, ecx
mov r10, qword [rdi + 0x18]
mov qword [rbp + 0x18], rax
mov eax, dword [rdi + 8]
mov dword [rbp + 0x20], eax
mov eax, dword [rdi + 0x44]
mov dword [rbp + 0x24], eax
movsxd rax, dword [rdi + 0x4c]
mov qword [rbp + 8], rcx
mov byte [rbp + 0x28], cl
mov rcx, r10
mov dword [rbp], ebx
lea rdx, [r10 + rax*2]
mov dword [rbp + 4], r12d
mov dword [rbp + 0x14], r14d
call fcn.1800164c4
movsxd rdx, dword [rdi + 0x50]
mov rcx, r10
mov ebx, eax
mov dword [rbp + 0x2c], eax
lea rdx, [r10 + rdx*2]
call fcn.1800164c4
movsxd rdx, dword [rdi + 0x54]
mov rcx, r10
mov r12d, eax
mov dword [rbp + 0x30], eax
lea rdx, [r10 + rdx*2]
call fcn.1800164c4
lea rcx, [rbp]
mov dword [rbp + 0x34], eax
xor r8d, r8d
mov r13d, eax
call r8
mov r14, qword [rbp + 0x18]
cmp dword [rbp + 0x2c], ebx
je 0x180029fd2
movsxd rdx, dword [rbp + 0x2c]
mov rcx, r14
add rdx, r14
call fcn.18001670c
mov dword [rdi + 0x4c], eax
mov byte [rdi + 0xe74], 1
cmp dword [rbp + 0x30], r12d
je 0x180029fea
movsxd rdx, dword [rbp + 0x30]
mov rcx, r14
add rdx, r14
call fcn.18001670c
mov dword [rdi + 0x50], eax
cmp dword [rbp + 0x34], r13d
je 0x18002a002
movsxd rdx, dword [rbp + 0x34]
mov rcx, r14
add rdx, r14
call fcn.18001670c
mov dword [rdi + 0x54], eax
mov r13d, dword [rsp + 0x70]
xor r11d, r11d
cmp byte [rbp + 0x28], r11b
je 0x18002a095
mov ebx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x14]
cmp ebx, eax
jle 0x18002a064
test r13b, r13b
je 0x18002a064
lea r12, [rdi + 0x10]
sub ebx, eax
add ebx, dword [r12]
mov ecx, dword [r12 + 4]
cmp ebx, ecx
jle 0x18002a060
test ecx, ecx
je 0x18002a045
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002a04a
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, r12
cmovg edx, eax
call fcn.1800025b8
mov r14, qword [rbp + 0x18]
xor r11d, r11d
mov dword [r12], ebx
mov edx, dword [rdi + 0x10]
mov r8, r14
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x20], r11
call fcn.180016774
mov dword [rdi + 4], eax
xor r11d, r11d
mov eax, dword [rbp + 0x20]
mov dword [rdi + 8], eax
mov dword [rdi + 0xe70], 0xbe99999a
jmp 0x18002a095
mov r13d, dword [rsp + 0x70]
mov r14, qword [rbp + 0x170]
cmp byte [rsp + 0x5c], r11b
jne 0x180029817
mov rcx, qword [rdi + 0x28]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
xor r11d, r11d
test eax, eax
je 0x180029817
mov rbx, qword [rdi + 0x28]
mov r15d, dword [rdi + 8]
jmp 0x18002981e
mov ecx, dword [rbp - 0x20]
lea eax, [r15 + 1]
mov rdx, rbx
cmp eax, ecx
cmovl ecx, eax
movsxd r8, ecx
mov rcx, r14
call fcn.180017024
xor r11d, r11d
mov byte [rsp + 0x65], 1
mov ebx, dword [rsp + 0x68]
mov dword [rdi + 0xe78], r11d
mov qword [rdi + 0xe80], r11
mov qword [rdi + 0xe88], r11
cmp byte [rbp + 0x190], r11b
je 0x18002a121
cmp dword [rsi + 0x1ab0], ebx
jne 0x18002a121
xor edx, edx
xor ecx, ecx
call fcn.1800146fc
mov r13d, dword [rsp + 0x54]
test r13b, r13b
jne 0x18002a198
mov r14d, 1
lea rcx, [rbp - 0x78]
mov r8d, r14d
mov edx, ebx
call fcn.180015244
mov rax, qword [0x180067c98]
lea rcx, [rbp - 0x30]
movdqu xmm0, xmmword [rax + 0x1678]
movups xmmword [rbp - 0x30], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x1558]
movss dword [rbp - 0x24], xmm0
call fcn.18001641c
movss xmm5, dword [rsi + 0x1598]
movaps xmm0, xmm6
mov rdx, qword [rbp - 0x70]
mov r8d, eax
unpcklps xmm0, xmm8
mov r9b, r14b
movq rcx, xmm0
movss dword [rsp + 0x20], xmm5
call fcn.180015814
xor r11d, r11d
mov r15, qword [rbp - 0x40]
movaps xmm0, xmm6
movss dword [rbp - 0x58], xmm6
movaps xmm1, xmm8
movss dword [rbp - 0x54], xmm8
addss xmm0, xmm7
addss xmm1, xmm10
lea rax, [rbp + 0x168]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
test r13b, r13b
je 0x18002a1e0
movsd xmm0, qword [r15 + 0xd0]
movsd qword [rbp + 0x168], xmm0
jmp 0x18002a204
addss xmm6, dword [rsi + 0x1590]
movaps xmm0, xmm8
addss xmm0, dword [rsi + 0x1594]
movss dword [rbp + 0x168], xmm6
movss dword [rbp + 0x16c], xmm0
movaps xmm9, xmm12
movsd xmm0, qword [rax]
movsd qword [rsp + 0x78], xmm0
movss dword [rbp + 0x178], xmm12
cmp byte [rsp + 0x64], r11b
je 0x18002a22f
mov r12, qword [rdi + 0x28]
mov qword [rbp + 0x170], r12
jmp 0x18002a236
mov r12, qword [rbp + 0x170]
mov al, byte [rbp + 0x198]
mov r9d, dword [rsp + 0x74]
mov qword [rbp + 0x168], r11
test al, al
jne 0x18002a341
test r9b, r9b
jne 0x18002a341
test r13b, r13b
je 0x18002a290
lea rdx, [rbp + 0x168]
movss dword [rbp + 0x178], xmm7
mov rcx, r12
call fcn.18002ca68
mov rbx, qword [rbp + 0x168]
movd xmm9, eax
cvtdq2ps xmm9, xmm9
mulss xmm9, dword [rsi + 0x1910]
jmp 0x18002a2c3
cmp dword [rsi + 0x1ab0], ebx
jne 0x18002a2a1
movsxd rbx, dword [rdi + 8]
add rbx, r12
jmp 0x18002a2b1
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
xor r11d, r11d
lea rbx, [r12 + rax]
mov rax, rbx
sub rax, r12
cmp rax, 0x200000
jge 0x18002aa8f
mov rax, qword [0x180067c98]
lea r8, [rbp - 0x58]
test r13b, r13b
lea rcx, [rbp - 0x78]
lea r14, [rsi + 0x1910]
cmovne r8, r11
movdqu xmm0, xmmword [rax + 0x1608]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x1558]
movss dword [rbp - 0x6c], xmm0
call fcn.18001641c
movss xmm2, dword [r14]
lea r9, [rsp + 0x78]
mov rdx, qword [rsi + 0x1908]
mov rcx, qword [r15 + 0x2a8]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm12
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], eax
call fcn.180024218
xor r11d, r11d
jmp 0x18002aa51
movsxd rbx, dword [rdi + 8]
mov edx, 0xfffffc18
add rbx, r12
mov qword [rbp - 0x20], r11
mov r12, qword [rdi + 0x18]
movaps xmm13, xmm12
mov qword [rbp - 0x30], rbx
movaps xmm8, xmm12
mov r8, r11
mov r10, r11
mov r13d, edx
mov ecx, r11d
mov r15d, 1
test al, al
je 0x18002a385
movsxd rax, dword [rdi + 0x4c]
or edx, 0xffffffff
mov ecx, r15d
lea r8, [r12 + rax*2]
test r9b, r9b
je 0x18002a3a5
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
cmovl eax, dword [rdi + 0x50]
or r13d, 0xffffffff
cdqe
add ecx, r15d
lea r10, [r12 + rax*2]
mov qword [rbp - 0x20], r10
movzx eax, byte [rsp + 0x54]
mov r14d, r11d
movzx r9d, word [r12]
add ecx, eax
mov rax, r12
jmp 0x18002a3f4
cmp r9w, word [rbp - 8]
jne 0x18002a3ec
add r14d, r15d
cmp edx, 0xffffffff
jne 0x18002a3d7
cmp rax, r8
jb 0x18002a3d7
sub ecx, r15d
mov edx, r14d
test ecx, ecx
jle 0x18002a3fa
cmp r13d, 0xffffffff
jne 0x18002a3ec
cmp rax, r10
jb 0x18002a3ec
sub ecx, r15d
mov r13d, r14d
test ecx, ecx
jle 0x18002a3fa
add rax, 2
movzx r9d, word [rax]
test r9w, r9w
jne 0x18002a3b9
add r14d, r15d
cmp edx, 0xffffffff
mov eax, r14d
cmovne eax, edx
cmp r13d, 0xffffffff
mov dword [rbp + 0x168], eax
mov rdx, r8
cmove r13d, r14d
cmp r8, r12
jbe 0x18002a432
mov ecx, 0xa
lea rax, [rdx - 2]
cmp word [rax], cx
je 0x18002a432
mov rdx, rax
cmp rax, r12
ja 0x18002a421
xor r9d, r9d
mov byte [rsp + 0x28], r11b
lea rcx, [rbp - 0x14]
call fcn.18002c99c
movd xmm14, dword [rbp + 0x168]
lea r15, [rsi + 0x1910]
movss xmm0, dword [r15]
xor r11d, r11d
cvtdq2ps xmm14, xmm14
movss xmm15, dword [rax]
mulss xmm14, xmm0
movss dword [rbp + 0x190], xmm15
test r13d, r13d
js 0x18002a4c5
mov rax, qword [rbp - 0x20]
mov rdx, rax
cmp rax, r12
jbe 0x18002a499
lea r8d, [r9 + 0xa]
lea rcx, [rdx - 2]
cmp word [rcx], r8w
je 0x18002a499
mov rdx, rcx
cmp rcx, r12
ja 0x18002a487
mov r8, rax
mov byte [rsp + 0x28], r11b
lea rcx, [rbp - 0x20]
call fcn.18002c99c
movss xmm0, dword [r15]
xor r11d, r11d
movd xmm13, r13d
cvtdq2ps xmm13, xmm13
movss xmm8, dword [rax]
mulss xmm13, xmm0
mov r13d, dword [rsp + 0x54]
test r13b, r13b
je 0x18002a4e5
movd xmm9, r14d
cvtdq2ps xmm9, xmm9
movss dword [rbp + 0x178], xmm7
mulss xmm9, xmm0
mov r8b, byte [rbp + 0x198]
test r8b, r8b
je 0x18002a5b4
cmp byte [rdi + 0xe74], r11b
je 0x18002a5b4
test dword [rsp + 0x60], 0x1000
jne 0x18002a553
movss xmm2, dword [rdi + 0x48]
movaps xmm0, xmm7
comiss xmm2, xmm15
mulss xmm0, dword [0x18003d498]
movaps xmm1, xmm15
jbe 0x18002a534
subss xmm1, xmm0
movaps xmm0, xmm12
maxss xmm0, xmm1
jmp 0x18002a541
subss xmm1, xmm7
comiss xmm1, xmm2
jb 0x18002a557
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x48], xmm0
jmp 0x18002a557
mov dword [rdi + 0x48], r11d
test r13b, r13b
je 0x18002a5a5
mov rax, qword [rbp - 0x40]
movaps xmm2, xmm14
subss xmm2, dword [r15]
movss xmm1, dword [rax + 0x58]
comiss xmm1, xmm2
jbe 0x18002a57d
movaps xmm0, xmm12
maxss xmm0, xmm2
jmp 0x18002a58a
movaps xmm0, xmm14
subss xmm0, xmm10
maxss xmm0, xmm1
movss xmm6, dword [rsp + 0x7c]
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
addss xmm6, xmm1
movss dword [rsp + 0x7c], xmm6
jmp 0x18002a5ab
movss xmm6, dword [rsp + 0x7c]
mov byte [rdi + 0xe74], r11b
jmp 0x18002a5ba
movss xmm6, dword [rsp + 0x7c]
movss xmm11, dword [rdi + 0x48]
movss xmm10, dword [0x18003d4f8]
movss xmm7, dword [rsp + 0x78]
cmp byte [rsp + 0x74], r11b
je 0x18002a81a
mov edx, dword [rdi + 0x54]
mov eax, edx
mov ecx, dword [rdi + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea r10, [r12 + rax*2]
movsxd rax, edx
lea r14, [r12 + rax*2]
test r8b, r8b
je 0x18002a602
movaps xmm1, xmm10
jmp 0x18002a60a
movss xmm1, dword [0x18003d4bc]
mov rax, qword [0x180067c98]
lea rcx, [rbp - 0x78]
movdqu xmm0, xmmword [rax + 0x18a8]
mulss xmm1, dword [rax + 0x1558]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x6c], xmm0
call fcn.18001641c
mov r12d, eax
test r13b, r13b
je 0x18002a64b
movss dword [rbp - 0x64], xmm12
jmp 0x18002a654
movss xmm12, dword [0x18003d53c]
mov qword [rbp + 0x168], r10
movaps xmm5, xmm7
addss xmm5, xmm8
movaps xmm8, xmm6
addss xmm8, xmm13
xorps xmm13, xmm13
subss xmm5, xmm11
subss xmm8, xmm13
cmp r10, r14
jae 0x18002a816
movss xmm10, dword [0x18003d4b4]
movss xmm15, dword [rbp - 0x64]
mov r13, qword [rbp - 0x40]
movss xmm0, dword [rbp - 0x4c]
addss xmm0, dword [r15]
comiss xmm8, xmm0
ja 0x18002a7f8
movss xmm0, dword [rbp - 0x54]
comiss xmm0, xmm8
jbe 0x18002a6e5
cmp r10, r14
jae 0x18002a7e2
mov ecx, 0xa
movzx eax, word [r10]
add r10, 2
mov qword [rbp + 0x168], r10
cmp ax, cx
je 0x18002a7e2
cmp r10, r14
jb 0x18002a6c3
jmp 0x18002a7e2
lea r9, [rbp + 0x168]
mov byte [rsp + 0x28], 1
mov r8, r14
lea rcx, [rbp - 8]
mov rdx, r10
call fcn.18002c99c
movss xmm1, dword [rbp - 8]
comiss xmm13, xmm1
jb 0x18002a73f
mov rax, qword [rsi + 0x1908]
cmp dword [rax], 0x20
jle 0x18002a725
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18002a72a
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm10
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 8], xmm1
movss xmm3, dword [rbp - 0x4c]
addss xmm1, xmm5
movss xmm4, dword [rbp - 0x50]
addss xmm5, xmm13
movaps xmm2, xmm15
movaps xmm0, xmm12
subss xmm2, dword [r15]
addss xmm0, xmm8
minss xmm1, xmm4
maxss xmm5, dword [rbp - 0x58]
addss xmm2, xmm8
minss xmm0, xmm3
movss dword [rbp - 0x70], xmm1
movss dword [rbp - 0x78], xmm5
maxss xmm2, dword [rbp - 0x54]
comiss xmm0, dword [rbp - 0x54]
movss dword [rbp - 0x74], xmm2
movss dword [rbp - 0x6c], xmm0
jbe 0x18002a7db
comiss xmm3, xmm2
jbe 0x18002a7db
comiss xmm1, dword [rbp - 0x58]
jbe 0x18002a7db
comiss xmm4, xmm5
jbe 0x18002a7db
mov rcx, qword [r13 + 0x2a8]
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0xf
lea rdx, [rbp - 0x78]
mov r9d, r12d
movss dword [rsp + 0x20], xmm13
call fcn.180024474
movss xmm1, dword [rbp - 0x64]
movss dword [rbp - 0x64], xmm1
movss xmm15, dword [rbp - 0x64]
mov r10, qword [rbp + 0x168]
movaps xmm5, xmm7
subss xmm5, xmm11
addss xmm8, dword [r15]
cmp r10, r14
jb 0x18002a696
movss xmm10, dword [0x18003d4f8]
xor r11d, r11d
movss xmm15, dword [rbp + 0x190]
mov rbx, qword [rbp - 0x30]
mov r13d, dword [rsp + 0x54]
xorps xmm12, xmm12
mov r9, qword [rbp + 0x170]
test r13b, r13b
jne 0x18002a838
mov rax, rbx
sub rax, r9
cmp rax, 0x200000
jge 0x18002a8d3
mov rax, qword [0x180067c98]
lea r8, [rbp - 0x58]
movaps xmm1, xmm6
lea rcx, [rbp - 0x30]
subss xmm1, xmm12
test r13b, r13b
movdqu xmm0, xmmword [rax + 0x1608]
cmovne r8, r11
movups xmmword [rbp - 0x30], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x1558]
movss dword [rbp + 0x16c], xmm1
movss dword [rbp - 0x24], xmm0
movaps xmm0, xmm7
subss xmm0, xmm11
movss dword [rbp + 0x168], xmm0
call fcn.18001641c
mov r12, qword [rbp - 0x40]
movss xmm2, dword [r15]
mov rdx, qword [rsi + 0x1908]
mov qword [rsp + 0x40], r8
mov rcx, qword [r12 + 0x2a8]
movss dword [rsp + 0x38], xmm12
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r9
lea r9, [rbp + 0x168]
mov dword [rsp + 0x20], eax
call fcn.180024218
xor r11d, r11d
jmp 0x18002a8d7
mov r12, qword [rbp - 0x40]
mov r14, r15
cmp byte [rbp + 0x198], r11b
je 0x18002aa3e
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe70]
movss dword [rdi + 0xe70], xmm0
cmp byte [rsi + 0xca], r11b
je 0x18002a92e
comiss xmm12, xmm0
jae 0x18002a92e
movss xmm1, dword [0x18003d4fc]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmodf]
movss xmm1, dword [0x18003d4e0]
xor r11d, r11d
comiss xmm1, xmm0
jae 0x18002a92e
mov al, r11b
jmp 0x18002a933
mov eax, 1
addss xmm6, xmm14
addss xmm7, xmm15
subss xmm6, xmm12
subss xmm7, xmm11
movaps xmm1, xmm6
movaps xmm2, xmm6
movss dword [rbp - 0x30], xmm7
movaps xmm3, xmm7
addss xmm3, xmm10
subss xmm1, dword [r15]
subss xmm2, dword [0x18003d518]
movss dword [rbp - 0x28], xmm3
addss xmm1, dword [0x18003d4b4]
movss dword [rbp - 0x24], xmm2
movss dword [rbp - 0x2c], xmm1
test al, al
je 0x18002aa08
comiss xmm2, dword [rbp - 0x54]
jbe 0x18002aa08
movss xmm0, dword [rbp - 0x4c]
comiss xmm0, xmm1
jbe 0x18002aa08
comiss xmm3, dword [rbp - 0x58]
jbe 0x18002aa08
movss xmm0, dword [rbp - 0x50]
comiss xmm0, xmm7
jbe 0x18002aa08
mov rax, qword [0x180067c98]
lea rcx, [rbp - 0x40]
movss dword [rbp + 0x168], xmm7
movss dword [rbp + 0x16c], xmm2
movdqu xmm0, xmmword [rax + 0x1608]
movups xmmword [rbp - 0x40], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x1558]
movss dword [rbp - 0x34], xmm0
call fcn.18001641c
mov rcx, qword [r12 + 0x2a8]
lea rdx, [rbp - 0x30]
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x168]
call fcn.180024624
xor r11d, r11d
movss xmm8, dword [rbp - 0x60]
movss xmm11, dword [rbp - 0x48]
mov r12, qword [rbp + 0x170]
cmp byte [rsp + 0x5c], r11b
jne 0x18002aa51
subss xmm6, dword [r15]
subss xmm7, xmm10
movss dword [rsi + 0x2f38], xmm6
movss dword [rsi + 0x2f34], xmm7
jmp 0x18002aa51
movss xmm8, dword [rbp - 0x60]
movss xmm11, dword [rbp - 0x48]
mov r12, qword [rbp + 0x170]
test r13b, r13b
je 0x18002aa92
movss xmm0, dword [rbp + 0x178]
lea rcx, [rbp + 0x168]
addss xmm9, dword [r14]
addss xmm0, xmm12
movss dword [rbp + 0x16c], xmm9
movss dword [rbp + 0x168], xmm0
call fcn.180030ab4
call fcn.1800112f4
call fcn.18000b890
xor r11d, r11d
mov eax, dword [rsp + 0x6c]
test al, al
je 0x18002aaa6
call fcn.18000c7c4
mov eax, dword [rsp + 0x6c]
xor r11d, r11d
cmp byte [rsi + 0x2f80], r11b
je 0x18002aac3
test al, al
jne 0x18002aac3
mov r8, rbx
lea rcx, [rsp + 0x78]
mov rdx, r12
call fcn.180007008
comiss xmm11, xmm12
jbe 0x18002aafd
movss xmm0, dword [rbp - 0x18]
mov r9d, 1
addss xmm0, dword [rsi + 0x15a8]
addss xmm8, dword [rsi + 0x1594]
mov rdx, qword [rbp + 0x160]
xor r8d, r8d
unpcklps xmm0, xmm8
movq rcx, xmm0
call fcn.180015d50
movzx edx, byte [rsp + 0x65]
mov ecx, dword [rsp + 0x60]
test dl, dl
je 0x18002ab2e
bt ecx, 0x15
jb 0x18002ab2e
mov rax, qword [0x180067c98]
mov word [rax + 0x1abf], 0x101
mov rax, qword [rax + 0x1a68]
or dword [rax + 0x114], 4
mov eax, 0x20
test al, cl
movzx ecx, byte [rsp + 0x52]
mov eax, edx
cmovne eax, ecx
jmp 0x1800288ac