Function at 0x18002e560
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2a8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x1800dd010]
xor rax, rsp
mov qword [rbp + 0xf8], rax
mov dword [rbp - 0x60], r9d
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x18], rdx
mov rdi, rcx
mov qword [rbp - 0x10], rcx
mov rsi, qword [0x1800e0b80]
mov qword [rbp - 0x68], rsi
mov rax, qword [rsi + 0x11c8]
mov ecx, 1
mov byte [rax + 0xb8], cl
mov r12, qword [rsi + 0x11c8]
xor r14d, r14d
cmp byte [r12 + 0xbb], r14b
jne 0x18002e7fe
mov ebx, dword [rbp + 0x218]
mov r13d, ebx
shr r13d, 0x1a
and r13b, cl
mov dword [rsp + 0x60], r13d
mov eax, ebx
shr eax, 0xe
and al, cl
mov dword [rsp + 0x64], eax
mov eax, ebx
shr eax, 0xf
and al, cl
mov dword [rbp - 0x50], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x58], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rbp - 0x70], eax
test r13b, r13b
je 0x18002e665
call fcn.1800157e0
mov rdx, rdi
mov rcx, r12
call fcn.18000b050
mov r15d, eax
mov dword [rsp + 0x78], eax
movss xmm0, dword [0x1800d6f20]
movss dword [rbp - 0x40], xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.18000e0e0
test r13b, r13b
je 0x18002e6b6
movss xmm0, dword [rsi + 0xf28]
mulss xmm0, dword [0x1800d6eac]
jmp 0x18002e6bb
movss xmm0, dword [rbp - 0x24]
movss xmm6, dword [rsi + 0xb30]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.1800155fc
movaps xmm2, xmm0
mov rdx, qword [rbp + 0x210]
mov rdx, qword [rdx]
lea rcx, [rsp + 0x70]
call fcn.18001566c
xorps xmm15, xmm15
movss xmm13, dword [rbp - 0x28]
comiss xmm13, xmm15
jbe 0x18002e708
movaps xmm1, xmm13
addss xmm1, dword [rsi + 0xb44]
jmp 0x18002e70b
xorps xmm1, xmm1
movss xmm9, dword [r12 + 0x104]
movss dword [rbp - 0x3c], xmm9
movaps xmm0, xmm9
movss xmm11, dword [rsp + 0x74]
addss xmm0, xmm11
movss xmm7, dword [r12 + 0x100]
movaps xmm12, xmm7
movss xmm10, dword [rsp + 0x70]
addss xmm12, xmm10
movss dword [rbp - 0x38], xmm12
movss dword [rbp + 0x80], xmm7
movss dword [rbp + 0x84], xmm9
movss dword [rbp + 0x88], xmm12
movss dword [rbp + 0x8c], xmm0
movaps xmm2, xmm9
addss xmm2, xmm11
addss xmm1, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x90], xmm7
movss dword [rbp + 0x94], xmm9
movss dword [rbp + 0x98], xmm1
movss dword [rbp + 0x9c], xmm2
mov qword [rbp - 0x48], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
subss xmm2, xmm9
subss xmm1, xmm7
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
lea rcx, [rsp + 0x70]
movaps xmm1, xmm6
call fcn.180015254
test r13b, r13b
je 0x18002e9af
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.1800153c0
test al, al
jne 0x18002e862
call fcn.180015908
xor al, al
mov rcx, qword [rbp + 0xf8]
xor rcx, rsp
call fcn.180099220
lea r11, [rsp + 0x2a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r14d, dword [rsi + 0x1a68]
movups xmm0, xmmword [rsi + 0x1a60]
movups xmmword [rbp + 0xb8], xmm0
movss dword [r12 + 0x100], xmm7
movss dword [r12 + 0x104], xmm9
lea rdx, [rsi + 0xc3c]
mov ecx, 3
call fcn.180008e00
movss xmm1, dword [rsi + 0xb34]
mov ecx, 7
call fcn.180008e9c
movss xmm1, dword [rsi + 0xb38]
mov ecx, 8
call fcn.180008e9c
and dword [rsp + 0x70], 0
and dword [rsp + 0x74], 0
lea rdx, [rsp + 0x70]
call fcn.180008f14
movss xmm1, dword [rbp + 0x8c]
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
subss xmm1, xmm9
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movaps xmm0, xmm12
movss xmm7, dword [rbp + 0x80]
subss xmm0, xmm7
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x70]
mov edx, r15d
mov rcx, rdi
call fcn.18000e3ac
mov bl, al
mov ecx, 3
call fcn.180008f74
call fcn.180008e5c
test bl, bl
jne 0x18002e952
call fcn.18000e580
jmp 0x18002e7f9
mov rbx, qword [rsi + 0x11c8]
mov qword [rbp - 0x48], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
mov word [rbx + 0x15e], cx
movss xmm0, dword [rsi + 0xb2c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [rsi + 0xb30]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
subss xmm10, dword [rbx + 0xac]
jmp 0x18002ea09
bt ebx, 0x1c
jb 0x18002e9ff
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.1800153c0
test al, al
je 0x18002e7fe
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
movss xmm7, dword [rbp + 0x80]
mov r14d, dword [rsi + 0x1a68]
mov rbx, r12
mov edx, r15d
lea rcx, [rbp + 0x80]
call fcn.18000b5f4
mov cl, al
mov byte [rsp + 0x5f], al
xor r9d, r9d
lea edx, [r9 + 1]
test al, al
je 0x18002ea2f
mov dword [rsi + 0x1d48], edx
mov rdi, qword [0x1800e0b80]
test r15d, r15d
je 0x18002ea4d
cmp dword [rdi + 0x1ee0], r15d
jne 0x18002ea4d
add rdi, 0x1ed8
jmp 0x18002ea50
mov rdi, r9
shr r14d, 8
and r14b, dl
mov dword [rbp - 0x4c], r14d
mov eax, dword [rsi + 0x1228]
mov r8d, 2
cmp eax, r15d
je 0x18002ea8c
cmp dword [rsi + 0x1bb8], r15d
jne 0x18002ea8c
test byte [rsi + 0x1bc4], dl
jne 0x18002ea86
cmp dword [rsi + 0x1bdc], r8d
jne 0x18002ea8c
mov byte [rsp + 0x52], dl
jmp 0x18002ea91
mov byte [rsp + 0x52], r9b
test cl, cl
je 0x18002eaa1
cmp byte [rsi + 0xa48], r9b
mov r15b, dl
jne 0x18002eaa4
mov r15b, r9b
mov byte [rsp + 0x54], r15b
test r13b, r13b
je 0x18002ead8
test rdi, rdi
je 0x18002ead8
test eax, eax
jne 0x18002ead8
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.18000b050
cmp dword [rsi + 0x1258], eax
jne 0x18002ead5
mov ebx, 1
jmp 0x18002eae5
xor r9d, r9d
mov bl, r9b
test r13b, r13b
je 0x18002eb16
test rdi, rdi
je 0x18002eb16
lea rdx, str.SCROLLY
mov rcx, qword [rbp - 0x48]
call fcn.18000b050
xor r9d, r9d
cmp dword [rsi + 0x1228], eax
jne 0x18002eb16
lea eax, [r9 + 1]
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
jmp 0x18002eb2c
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
mov cl, r9b
mov byte [rsp + 0x51], cl
test r13b, r13b
je 0x18002eb3a
mov rax, qword [rbp - 0x48]
movss xmm6, dword [rax + 0x88]
jmp 0x18002eb46
movss xmm6, dword [0x1800d6f14]
mov byte [rsp + 0x51], cl
mov edx, 1
test rdi, rdi
je 0x18002eb5d
mov al, r13b
xor al, dl
cmp byte [rdi + 0x6b], al
mov r13b, dl
jne 0x18002eb60
mov r13b, r9b
test r15b, r15b
jne 0x18002eb85
test bl, bl
jne 0x18002eb85
cmp byte [rsp + 0x52], r9b
jne 0x18002eb85
test r14b, r14b
jne 0x18002eb85
mov byte [rsp + 0x53], r9b
test cl, cl
jne 0x18002eb89
mov byte [rsp + 0x5d], r9b
jmp 0x18002eb99
mov byte [rsp + 0x53], dl
mov byte [rsp + 0x5d], dl
mov eax, dword [rsp + 0x78]
cmp dword [rsi + 0x1228], eax
jne 0x18002eba2
test r13b, r13b
je 0x18002edd2
lea rdi, [rsi + 0x1ed8]
mov dword [rdi + 0xe80], 0xbe99999a
or rbx, 0xffffffffffffffff
mov rax, qword [rbp - 0x78]
inc rbx
cmp byte [rax + rbx], r9b
jne 0x18002ebbb
lea r14d, [rbx + 1]
mov ecx, dword [rdi + 0x3c]
cmp r14d, ecx
jle 0x18002ebfa
test ecx, ecx
je 0x18002ebdf
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002ebe4
mov eax, 8
mov edx, r14d
cmp eax, r14d
cmovg edx, eax
lea rcx, [rdi + 0x38]
call fcn.18001c548
mov rax, qword [rbp - 0x78]
mov dword [rdi + 0x38], r14d
movsxd r8, r14d
mov rdx, rax
mov rcx, qword [rdi + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x78]
xor r8d, r8d
cmp dword [rdi + 8], eax
jne 0x18002ec51
test r13b, r13b
jne 0x18002ec51
lea r13d, [r8 + 1]
lea r14, [rdi + 0x10]
cmp dword [r14], ebx
jne 0x18002ec4c
mov r15, r14
cmp byte [rdi + 0x48], r8b
je 0x18002ec58
movsxd r8, ebx
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x18002ec58
mov r15, r14
jmp 0x18002ec55
lea r15, [rdi + 0x10]
mov r13b, r8b
mov qword [rsp + 0x70], r8
mov eax, dword [rsp + 0x78]
mov dword [rdi + 8], eax
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002ec97
test ecx, ecx
je 0x18002ec7f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002ec84
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c670
xor r8d, r8d
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x18002ecbe
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r8d
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c548
xor r8d, r8d
mov dword [rdi + 0x28], r8d
mov byte [rdi + 0x48], r8b
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov rbx, qword [rbp - 0x78]
mov r8, rbx
mov edx, dword [rbp - 0x60]
mov rcx, qword [rdi + 0x20]
call fcn.180008664
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, ebx
mov dword [r15], ecx
xor r9d, r9d
mov r14d, dword [rsp + 0x60]
test r13b, r13b
je 0x18002ed27
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
mov dword [rdi + 0x58], eax
cmp dword [rdi + 0x5c], edx
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
lea edx, [r9 + 1]
jmp 0x18002ed6d
mov qword [rdi + 0x50], r9
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], r9d
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], r9
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], r9d
mov byte [rdi + 0x68], r9b
mov edx, 1
mov al, r14b
xor al, dl
mov byte [rdi + 0x6b], al
mov byte [rdi + 0x60], r9b
mov dword [rdi + 0x64], r9d
test r14b, r14b
jne 0x18002edbc
mov ecx, dword [rbp + 0x218]
test cl, 0x10
mov eax, dword [rsp + 0x58]
movzx eax, al
cmovne eax, edx
mov dword [rsp + 0x58], eax
cmp byte [rsp + 0x52], r9b
je 0x18002eda2
test r13b, r13b
je 0x18002ed9e
test byte [rsi + 0x1bc4], 4
jne 0x18002eda2
mov byte [rsp + 0x58], dl
cmp byte [rbp - 0x4c], r9b
jne 0x18002edb8
cmp byte [rsp + 0x54], r9b
je 0x18002edbc
cmp byte [rsi + 0x120], r9b
je 0x18002edbc
mov byte [rsp + 0x58], dl
mov r15b, byte [rsp + 0x54]
test dword [rbp + 0x218], 0x2000
je 0x18002edd7
mov byte [rdi + 0x60], dl
jmp 0x18002edd7
mov r14d, dword [rsp + 0x60]
mov r8b, byte [rsi + 0x79]
mov byte [rsp + 0x5e], r8b
mov r13d, dword [rsp + 0x78]
mov bl, byte [rsp + 0x53]
cmp dword [rsi + 0x1228], r13d
je 0x18002ee26
test bl, bl
je 0x18002ee19
mov rdx, r12
mov ecx, r13d
call fcn.18000b2fc
mov rdx, r12
mov ecx, r13d
call fcn.180016c10
mov rcx, r12
call fcn.180013008
mov r8b, byte [rsp + 0x5e]
cmp dword [rsi + 0x1228], r13d
jne 0x18002ef40
xor r10d, r10d
test r15b, r15b
je 0x18002ee44
mov ecx, 0x281
call fcn.180007734
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov eax, dword [rsi + 0x1a38]
or eax, 3
mov dword [rsi + 0x1a38], eax
mov r9d, dword [rbp + 0x218]
test r14b, r14b
jne 0x18002ee64
test r9b, r9b
jns 0x18002ee6d
or eax, 0xc
mov dword [rsi + 0x1a38], eax
mov ecx, 0x207
call fcn.180007734
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x208
call fcn.180007734
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r14b, r14b
je 0x18002eeca
mov ecx, 0x205
call fcn.180007734
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x206
call fcn.180007734
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r8b, r8b
je 0x18002eee5
mov ecx, 0x4000
call fcn.180007734
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r9d, 0x440
je 0x18002eefe
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.180013c44
cmp dword [rsi + 0x1228], r13d
jne 0x18002ef40
test rdi, rdi
jne 0x18002ef15
xor edx, edx
xor ecx, ecx
call fcn.18000b2fc
cmp dword [rsi + 0x1228], r13d
jne 0x18002ef40
xor r11d, r11d
lea r9d, [r11 + 1]
cmp byte [rsi + 0xa48], r11b
je 0x18002ef53
cmp byte [rsp + 0x5d], r11b
jne 0x18002ef53
test bl, bl
jne 0x18002ef53
mov byte [rsp + 0x5c], r9b
jmp 0x18002ef53
xor r11d, r11d
test rdi, rdi
je 0x18002ef58
cmp byte [rsp + 0x51], r11b
je 0x18002ef58
lea r9d, [r11 + 1]
mov cl, r9b
jmp 0x18002ef5b
mov cl, r11b
mov byte [rsp + 0x50], cl
mov r12d, dword [rsp + 0x58]
test rdi, rdi
je 0x18002ef82
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ef76
test r12b, r12b
je 0x18002ef82
test cl, cl
je 0x18002ef82
mov r8d, 1
jmp 0x18002ef85
mov r8b, r11b
mov dword [rsp + 0x58], r8d
movzx r15d, r8b
mov byte [rsp + 0x7f], r11b
mov byte [rsp + 0x5d], r11b
mov eax, dword [rsp + 0x64]
test al, al
je 0x18002f05b
test rdi, rdi
je 0x18002f05b
test cl, cl
jne 0x18002efba
test r8b, r8b
je 0x18002f064
mov qword [rsp + 0x70], r11
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002efef
test ecx, ecx
je 0x18002efda
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002efdf
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c670
mov dword [rdi + 0x18], ebx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r14, qword [rbp - 0x78]
mov r8, r14
mov edx, ebx
mov rcx, qword [rdi + 0x20]
call fcn.180008664
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, r14d
mov dword [rdi + 0x10], ecx
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
mov ecx, eax
cmp dword [rdi + 0x58], eax
cmovl ecx, dword [rdi + 0x58]
mov dword [rdi + 0x58], ecx
cmp dword [rdi + 0x5c], eax
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
xor r11d, r11d
mov r8d, r11d
cmp ecx, edx
cmovne r8d, r15d
mov dword [rsp + 0x58], r8d
mov cl, byte [rsp + 0x50]
mov eax, dword [rsp + 0x64]
test cl, cl
jne 0x18002f06d
test r8b, r8b
jne 0x18002f06d
cmp dword [rsi + 0x1228], r13d
jne 0x18002f089
test al, al
jne 0x18002f089
test rdi, rdi
je 0x18002f089
cmp byte [rdi + 0x48], r11b
je 0x18002f089
mov ebx, 1
mov al, bl
mov byte [rsp + 0x7e], bl
jmp 0x18002f095
mov al, r11b
mov byte [rsp + 0x7e], al
mov ebx, 1
cmp qword [rbp - 0x18], r11
je 0x18002f0b0
test al, al
je 0x18002f0a5
mov rax, qword [rdi + 0x30]
jmp 0x18002f0a9
mov rax, qword [rbp - 0x78]
cmp byte [rax], r11b
mov al, bl
je 0x18002f0b3
mov al, r11b
mov byte [rsp + 0x53], al
cmp byte [rbp - 0x50], r11b
je 0x18002f132
test al, al
jne 0x18002f132
mov rcx, qword [rsi + 0xf20]
mov edx, 0x2a
call fcn.180022ce0
lea r9, [rsi + 0x2d68]
mov ecx, dword [rcx + 0x14]
mov dword [r9 + 0x14], ecx
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x64]
mov dword [r9 + 0x64], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x68]
mov dword [r9 + 0x68], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x6c]
mov dword [r9 + 0x6c], r8d
mov rdx, qword [rsi + 0xf20]
mov r8, qword [rdx + 0x40]
mov qword [r9 + 0x40], r8
mov qword [r9 + 0x38], rax
mov eax, dword [rax + 4]
mov dword [r9 + 0x10], eax
mov rcx, r9
call fcn.180013338
xor r11d, r11d
mov dword [rbp - 0x4c], r11d
cmp dword [rsi + 0x1228], r13d
jne 0x18002f51d
mov eax, dword [rdi + 0x10]
mov dword [rbp - 0x4c], eax
mov byte [rdi + 0xe86], r11b
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x4c], eax
mov r14d, dword [rbp + 0x218]
mov dword [rdi + 0xe88], r14d
cmp byte [rsi + 0x110], r11b
sete al
mov byte [rsi + 0x1235], al
mov dword [rsi + 0x30f4], ebx
movss xmm2, dword [rsi + 0x108]
subss xmm2, xmm7
subss xmm2, dword [rsi + 0xb2c]
addss xmm2, dword [rdi + 0x50]
mov r15d, dword [rsp + 0x60]
test r15b, r15b
je 0x18002f1b3
movss xmm3, dword [rsi + 0x10c]
mov rax, qword [rbp - 0x48]
subss xmm3, dword [rax + 0x104]
jmp 0x18002f1c3
movss xmm3, dword [rsi + 0xf28]
mulss xmm3, dword [0x1800d6e30]
test r12b, r12b
je 0x18002f28c
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
lea rax, [rdi + 0xe85]
mov byte [rax], bl
mov r12d, 1
cmp byte [rax], r11b
je 0x18002f1fd
cmp byte [rsi + 0x110], r11b
jne 0x18002f1fd
mov byte [rax], r11b
bt r14d, 0xa
jae 0x18002f256
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18001514c
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
test al, al
je 0x18002f25a
test cl, cl
jne 0x18002f25a
mov dword [rsp + 0x6c], 9
mov dword [rsp + 0x20], 2
mov edx, r14d
lea rcx, [rsp + 0x6c]
call fcn.18002e1e0
xor r11d, r11d
test al, al
je 0x18002f256
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002e1b4
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
cmp byte [rsi + 0x120], r11b
je 0x18002f26c
cmp byte [rsi + 0x122], r11b
je 0x18002f284
cmp byte [rsp + 0x5e], r11b
je 0x18002f477
cmp byte [rsi + 0x123], r11b
je 0x18002f477
mov al, r12b
jmp 0x18002f47a
mov al, byte [rsp + 0x5f]
test al, al
je 0x18002f3c2
mov r12d, 2
cmp word [rsi + 0xa52], r12w
jb 0x18002f3c2
cmp byte [rsi + 0x121], r11b
jne 0x18002f3c2
lea r14, [rdi + 0x54]
mov rdx, r14
mov rcx, rdi
call fcn.18002cecc
movzx eax, word [rsi + 0xa52]
sub eax, r12d
movsxd rdx, dword [r14]
test bl, al
jne 0x18002f34e
xor r8d, r8d
test edx, edx
je 0x18002f2f4
mov rax, qword [rdi + 0x20]
lea r9d, [r12 + 8]
cmp word [rax + rdx*2 - 2], r9w
mov cl, r8b
jne 0x18002f2f6
mov cl, bl
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002f302
test cl, cl
jne 0x18002f312
mov edx, 0x20000c
mov rcx, rdi
call fcn.18002e1b4
mov edx, dword [r14]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002f333
mov eax, dword [r14 + 8]
cmp dword [r14 + 4], eax
jne 0x18002f32e
mov dword [r14 + 8], edx
mov dword [r14 + 4], edx
jmp 0x18002f333
mov dword [r14], eax
mov edx, eax
mov rcx, rdi
call fcn.18002cadc
mov dword [r14], eax
mov dword [rdi + 0x5c], eax
mov rdx, r14
mov rcx, rdi
call fcn.18002d0d4
jmp 0x18002f3a2
mov rcx, qword [rdi + 0x20]
movzx ebx, word [rcx + rdx*2]
mov edx, 0x200004
mov rcx, rdi
call fcn.18002e1b4
mov edx, 0x600005
mov rcx, rdi
call fcn.18002e1b4
mov edx, 0x600001
mov rcx, rdi
call fcn.18002e1b4
mov eax, 0xa
cmp bx, ax
je 0x18002f39b
test r15b, r15b
je 0x18002f39b
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], ecx
mov dword [r14], ecx
mov byte [rdi + 0xe84], 0
mov dword [rdi + 0xe80], 0xbe99999a
lea rax, [rdi + 0xe85]
mov r14d, dword [rbp + 0x218]
xor r11d, r11d
jmp 0x18002f1e6
lea rbx, [rdi + 0xe85]
mov cl, byte [rbx]
cmp byte [rsi + 0xa48], r11b
je 0x18002f40d
test cl, cl
jne 0x18002f40d
test al, al
je 0x18002f405
lea rdx, [rdi + 0x54]
mov rcx, rdi
cmp byte [rsi + 0x121], r11b
je 0x18002f3f3
call fcn.18002cf2c
jmp 0x18002f3f8
call fcn.18002cecc
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
mov rax, rbx
jmp 0x18002f1e6
mov rax, rbx
cmp byte [rsi + 0x110], r11b
je 0x18002f1e6
test cl, cl
jne 0x18002f1e6
movss xmm0, dword [rsi + 0xf8]
ucomiss xmm0, xmm15
jp 0x18002f449
jne 0x18002f449
movss xmm0, dword [rsi + 0xfc]
ucomiss xmm0, xmm15
jp 0x18002f449
je 0x18002f1e6
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002cf2c
mov dword [rdi + 0xe80], 0xbe99999a
mov r12d, 1
mov byte [rdi + 0xe84], r12b
mov rax, rbx
xor r11d, r11d
jmp 0x18002f1ec
mov al, r11b
lea rbx, [rsi + 0xac0]
cmp dword [rbx], r11d
jle 0x18002f51d
test al, al
jne 0x18002f4f7
test cl, cl
jne 0x18002f4f7
cmp byte [rsp + 0x52], r11b
jne 0x18002f4f7
mov r15d, r11d
mov r14, r11
mov r13d, dword [rbp + 0x218]
mov rax, qword [rsi + 0xac8]
movzx ecx, word [rax + r14]
mov dword [rsp + 0x6c], ecx
cmp ecx, 9
je 0x18002f4e3
mov dword [rsp + 0x20], 2
mov edx, r13d
lea rcx, [rsp + 0x6c]
call fcn.18002e1e0
xor r11d, r11d
test al, al
je 0x18002f4e6
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002e1b4
xor r11d, r11d
add r15d, r12d
add r14, 2
cmp r15d, dword [rbx]
jl 0x18002f4a6
mov r13d, dword [rsp + 0x78]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18002f51a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r11d
test eax, eax
cmovg edx, eax
mov rcx, rbx
call fcn.18001c670
xor r11d, r11d
mov dword [rbx], r11d
mov r12b, r11b
mov byte [rsp + 0x51], r11b
lea rax, [0x18009c68a]
cmp dword [rsi + 0x1228], r13d
jne 0x18002ff57
cmp byte [rsi + 0x1234], r11b
jne 0x18002ff57
cmp byte [rsp + 0x5c], r11b
jne 0x18002ff57
movaps xmm0, xmm11
subss xmm0, dword [rsi + 0xb30]
divss xmm0, dword [rsi + 0xf28]
cvttss2si eax, xmm0
mov r12d, 1
mov ecx, r12d
cmp eax, r12d
cmovge ecx, eax
mov dword [rsp + 0x6c], ecx
mov dword [rdi + 0x64], ecx
mov al, byte [rsi + 0x121]
neg al
sbb ebx, ebx
and ebx, 0x400000
mov r15b, byte [rsp + 0x5e]
lea rcx, [rsi + 0x120]
mov qword [rsp + 0x70], rcx
mov qword [rbp - 0x30], rcx
test r15b, r15b
je 0x18002f5e8
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov r14b, byte [rax]
mov byte [rsp + 0x52], r14b
cmp byte [rsi + 0x123], r11b
je 0x18002f5fc
mov byte [rsp + 0x52], r14b
cmp byte [rcx], r11b
jne 0x18002f5fc
mov byte [rsp + 0x52], r14b
test r14b, r14b
jne 0x18002f5fc
mov byte [rsp + 0x54], r12b
mov byte [rsp + 0x52], r14b
jmp 0x18002f601
mov al, byte [rcx]
mov byte [rsp + 0x52], al
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov byte [rsp + 0x54], r11b
mov r8d, r12d
mov edx, r13d
mov ecx, 0xa39
call fcn.18001514c
xor ecx, ecx
test al, al
jne 0x18002f62d
mov r8d, r12d
mov edx, r13d
mov ecx, 0x220a
call fcn.18001514c
xor ecx, ecx
test al, al
je 0x18002f655
mov r12d, dword [rsp + 0x64]
mov r14d, dword [rsp + 0x60]
test r12b, r12b
jne 0x18002f65f
cmp byte [rbp - 0x50], cl
jne 0x18002f65f
test r14b, r14b
je 0x18002f64e
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f65f
mov byte [rsp + 0x68], 1
jmp 0x18002f663
mov r14d, dword [rsp + 0x60]
mov r12d, dword [rsp + 0x64]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r13d
mov ecx, 0xa24
call fcn.18001514c
test al, al
jne 0x18002f68b
xor r8d, r8d
mov edx, r13d
mov ecx, 0x1209
call fcn.18001514c
test al, al
je 0x18002f6ad
xor eax, eax
cmp byte [rbp - 0x50], al
jne 0x18002f6ad
test r14b, r14b
je 0x18002f69f
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f6ad
mov eax, 1
mov byte [rsp + 0x7d], al
xor r14d, r14d
jmp 0x18002f6b9
xor r14d, r14d
mov byte [rsp + 0x7d], r14b
lea eax, [r14 + 1]
mov r8d, eax
mov edx, r13d
mov ecx, 0xa37
call fcn.18001514c
test al, al
jne 0x18002f6e4
mov r8d, 1
mov edx, r13d
mov ecx, 0x2209
call fcn.18001514c
test al, al
je 0x18002f6f4
test r12b, r12b
jne 0x18002f6f4
mov eax, 1
mov byte [rsp + 0x5f], al
jmp 0x18002f6fe
mov byte [rsp + 0x5f], r14b
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3b
call fcn.18001514c
mov r14d, dword [rbp - 0x58]
test al, al
je 0x18002f72b
test r12b, r12b
jne 0x18002f72b
test r14b, r14b
je 0x18002f72b
mov eax, 1
mov byte [rsp + 0x7c], al
jmp 0x18002f735
mov byte [rsp + 0x7c], 0
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3a
call fcn.18001514c
test al, al
jne 0x18002f76a
test r15b, r15b
je 0x18002f782
mov r8d, 1
mov edx, r13d
mov ecx, 0x2a3b
call fcn.18001514c
xor r15d, r15d
test al, al
je 0x18002f785
jmp 0x18002f76d
xor r15d, r15d
test r12b, r12b
jne 0x18002f785
test r14b, r14b
je 0x18002f785
mov r12d, 1
mov r13b, r12b
jmp 0x18002f78e
xor r15d, r15d
mov r13b, r15b
mov r12d, 1
xor r8d, r8d
mov edx, dword [rsp + 0x78]
mov ecx, 0xa22
call fcn.18001514c
mov byte [rbp - 0x80], al
test byte [rsi + 8], 2
je 0x18002f7b1
test byte [rsi + 0xc], r12b
mov r14b, r12b
jne 0x18002f7b4
mov r14b, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.180013d78
test al, al
jne 0x18002f7dd
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.180013d78
test al, al
jne 0x18002f7dd
mov r12b, r15b
test r14b, r14b
je 0x18002f812
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.180013d78
test al, al
jne 0x18002f808
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.180013d78
test al, al
je 0x18002f812
mov eax, 1
mov r15b, al
jmp 0x18002f817
mov eax, 1
mov r8d, eax
mov edx, dword [rsp + 0x78]
mov ecx, 0x20e
call fcn.18001514c
xor ecx, ecx
test al, al
jne 0x18002f855
test r14b, r14b
je 0x18002f84b
lea r8d, [rcx + 1]
mov edx, dword [rsp + 0x78]
mov ecx, 0x26c
call fcn.18001514c
xor ecx, ecx
test al, al
jne 0x18002f855
mov r14b, cl
mov eax, 1
jmp 0x18002f85d
mov eax, 1
mov r14b, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.180013d78
xor ecx, ecx
test al, al
je 0x18002f8a5
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200000
mov eax, 0x200004
cmp byte [rsp + 0x54], cl
cmovne edx, eax
or edx, ebx
mov rcx, rdi
call fcn.18002e1b4
xor r11d, r11d
mov r9d, 1
jmp 0x18002ff26
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.180013d78
xor ecx, ecx
test al, al
je 0x18002f8d1
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200001
mov eax, 0x200005
jmp 0x18002f886
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.180013d78
xor r11d, r11d
test al, al
je 0x18002f93d
cmp byte [rsp + 0x60], r11b
je 0x18002f93d
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002f92c
mov rdx, qword [rbp - 0x48]
movss xmm0, dword [rdx + 0x88]
subss xmm0, dword [rsi + 0xf28]
maxss xmm0, xmm15
movss dword [rdx + 0x98], xmm0
mov dword [rdx + 0xa0], r11d
mov dword [rdx + 0xa8], r11d
jmp 0x18002f89a
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200002]
jmp 0x18002f88d
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.180013d78
xor r11d, r11d
test al, al
je 0x18002f9ba
cmp byte [rsp + 0x60], r11b
je 0x18002f9ba
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002f9a9
mov rax, qword [0x1800e0b80]
mov rcx, qword [rax + 0x11c8]
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
addss xmm0, dword [rsi + 0xf28]
minss xmm0, dword [rcx + 0x90]
movss dword [rax + 0x98], xmm0
mov dword [rax + 0xa0], r11d
mov dword [rax + 0xa8], r11d
jmp 0x18002f89a
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200003]
jmp 0x18002f88d
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.180013d78
xor ecx, ecx
test al, al
je 0x18002fa00
cmp byte [rsp + 0x60], cl
je 0x18002fa00
or ebx, 0x20000e
mov edx, ebx
mov rcx, rdi
call fcn.18002e1b4
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
subss xmm6, xmm0
jmp 0x18002f897
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.180013d78
xor ecx, ecx
test al, al
je 0x18002fa46
cmp byte [rsp + 0x60], cl
je 0x18002fa46
or ebx, 0x20000f
mov edx, ebx
mov rcx, rdi
call fcn.18002e1b4
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
addss xmm6, xmm0
jmp 0x18002f897
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.180013d78
test al, al
je 0x18002fa73
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18002f88d
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.180013d78
test al, al
je 0x18002fa96
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200005
jmp 0x18002fa67
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.180013d78
xor ecx, ecx
test al, al
je 0x18002fae0
cmp byte [rsp + 0x64], cl
jne 0x18002fae0
cmp byte [rsp + 0x68], cl
jne 0x18002fae0
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002fad3
cmp byte [rsp + 0x52], cl
je 0x18002fad3
mov edx, 0x60000d
mov rcx, rdi
call fcn.18002e1b4
or ebx, 0x200008
mov edx, ebx
jmp 0x18002f88f
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.180013d78
xor r11d, r11d
mov r8d, dword [rsp + 0x64]
test al, al
je 0x18002fb52
test r8b, r8b
jne 0x18002fb52
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002fb4a
cmp byte [rsp + 0x52], r11b
je 0x18002fb17
mov edx, 0x60000c
jmp 0x18002fb42
cmp byte [rsp + 0x5e], r11b
je 0x18002fb4a
cmp byte [rsi + 0x123], r11b
je 0x18002fb4a
mov rax, qword [rbp + 0x90]
cmp byte [rax], r11b
jne 0x18002fb4a
mov rax, qword [rsp + 0x70]
cmp byte [rax], r11b
jne 0x18002fb4a
mov edx, 0x600004
mov rcx, rdi
call fcn.18002e1b4
or ebx, 0x200009
jmp 0x18002fad9
test r12b, r12b
jne 0x18002fe97
test r15b, r15b
jne 0x18002fe97
test r14b, r14b
je 0x18002fbc1
test dword [rbp + 0x218], 0x100000
je 0x18002fb9f
mov eax, dword [rdi + 0x10]
test eax, eax
jg 0x18002fb8b
mov byte [rsp + 0x58], r11b
mov byte [rsp + 0x50], r11b
mov byte [rsp + 0x5c], 1
setg r12b
mov byte [rsp + 0x51], r12b
mov r9d, 1
jmp 0x18002ff2b
mov r9d, 1
mov r12b, r9b
mov byte [rsp + 0x51], r9b
mov byte [rsp + 0x5c], r9b
mov cl, r11b
mov dl, r11b
mov byte [rsp + 0x50], dl
jmp 0x18002ff33
movzx eax, byte [rsp + 0x7c]
test al, al
jne 0x18002fe76
test r13b, r13b
jne 0x18002fe76
cmp byte [rbp - 0x80], r11b
je 0x18002fc00
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
jmp 0x18002ff26
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x18002fd7a
cmp byte [rsp + 0x7d], r11b
jne 0x18002fd7a
cmp byte [rsp + 0x5f], r11b
je 0x18002f89a
mov rax, qword [0x1800e0b80]
mov rdx, qword [rax + 0xb0]
test rdx, rdx
je 0x18002fc58
mov rcx, qword [rax + 0xc0]
call rdx
mov rbx, rax
xor r11d, r11d
test rax, rax
je 0x18002f89a
mov rax, qword [0x1800e0b80]
jmp 0x18002fc5f
lea rbx, [0x18009c68a]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r11b
jne 0x18002fc63
test rax, rax
je 0x18002fc7e
mov r9d, 1
add dword [rax + 0xf4], r9d
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x90], rax
xor r13d, r13d
mov r14d, r13d
cmp byte [rbx], r13b
je 0x18002fcfe
mov r12, rax
mov esi, dword [rbp + 0x218]
lea r15d, [r13 + 1]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x6c]
call fcn.1800084c4
movsxd rcx, eax
add rbx, rcx
mov dword [rsp + 0x20], 4
mov edx, esi
lea rcx, [rsp + 0x6c]
call fcn.18002e1e0
test al, al
je 0x18002fcee
movzx eax, word [rsp + 0x6c]
mov word [r12], ax
add r14d, r15d
add r12, 2
cmp byte [rbx], r13b
jne 0x18002fcaf
mov rsi, qword [rbp - 0x68]
mov r15, qword [rbp + 0x90]
movsxd rax, r14d
mov word [r15 + rax*2], r13w
test r14d, r14d
jle 0x18002fd55
lea rbx, [rdi + 0x54]
mov rdx, rbx
mov rcx, rdi
call fcn.18002d0d4
mov rcx, rdi
call fcn.18002d190
mov r9d, r14d
mov r8, r15
mov edx, dword [rbx]
mov rcx, rdi
call fcn.18002cc44
test al, al
je 0x18002fd4e
lea rcx, [rbx + 0x20]
mov r9d, r14d
xor r8d, r8d
mov edx, dword [rbx]
call fcn.18002dcbc
add dword [rbx], r14d
mov byte [rbx + 0x16], r13b
mov byte [rdi + 0xe84], 1
test r15, r15
je 0x18002fd6c
mov rax, qword [0x1800e0b80]
test rax, rax
je 0x18002fd6c
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002f897
cmp qword [rsi + 0xb8], r11
je 0x18002fe21
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
cmp ecx, eax
je 0x18002fd9b
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18002fda1
mov edx, r11d
mov eax, dword [rdi + 0xc]
movsxd r15, eax
mov rax, qword [rdi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.1800088c4
mov ecx, 1
lea r14d, [rcx + rax]
mov rax, qword [0x1800e0b80]
test rax, rax
je 0x18002fdd3
add dword [rax + 0xf4], ecx
movsxd rcx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov edx, r14d
mov rcx, rax
call fcn.180008824
mov rcx, rbx
call fcn.18000b830
test rbx, rbx
je 0x18002fe15
mov rcx, qword [0x1800e0b80]
test rcx, rcx
je 0x18002fe15
dec dword [rcx + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r11d, r11d
test r13b, r13b
je 0x18002f89a
mov eax, dword [rdi + 0x5c]
lea rbx, [rdi + 0x54]
cmp dword [rdi + 0x58], eax
jne 0x18002fe46
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rbx], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x18002ff26
mov rdx, rbx
mov rcx, rdi
call fcn.18002d190
xor r11d, r11d
mov byte [rbx + 0x16], r11b
jmp 0x18002f89a
mov edx, eax
xor edx, 1
add edx, 0x20000a
mov rcx, rdi
call fcn.18002e1b4
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x18002f897
mov edx, dword [rbp + 0x218]
mov eax, edx
shr eax, 0xb
mov r9d, 1
and al, r9b
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x18002fec6
test r15b, r15b
jne 0x18002fec6
test al, al
mov rax, qword [rsp + 0x70]
je 0x18002fee8
cmp byte [rax], r11b
jne 0x18002feed
mov byte [rsp + 0x5d], r9b
cmp byte [rsi + 0x7c], r11b
je 0x18002ff21
test cl, cl
jne 0x18002ff21
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
jmp 0x18002ff26
cmp byte [rax], r11b
jne 0x18002fec6
test r8b, r8b
jne 0x18002ff26
mov eax, 0xa
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x6c]
call fcn.18002e1e0
xor r11d, r11d
test al, al
je 0x18002f89a
mov edx, dword [rsp + 0x6c]
jmp 0x18002f88f
mov byte [rsp + 0x5c], r9b
mov r12b, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x58]
mov dl, byte [rsp + 0x50]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002ff42
test dl, dl
mov al, r9b
jne 0x18002ff45
mov al, r11b
or cl, al
mov dword [rsp + 0x58], ecx
mov r13d, dword [rsp + 0x78]
lea rax, [0x18009c68a]
mov qword [rbp - 0x58], r11
mov r14d, r11d
cmp dword [rsi + 0x1228], r13d
jne 0x1800304e7
test r12b, r12b
je 0x1800300f0
cmp byte [rsp + 0x64], r11b
jne 0x180030159
test dword [rbp + 0x218], 0x100000
je 0x18002ffc5
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x20], r11d
mov r9d, dword [rdi + 0xc]
xor r8d, r8d
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002e0c4
mov r8d, dword [rdi + 0xc]
xor edx, edx
mov rcx, rdi
call fcn.18002cbb8
xor r11d, r11d
mov qword [rdi + 0x58], r11
mov dword [rdi + 0x54], r11d
jmp 0x1800300ff
mov rax, qword [rbp - 0x78]
mov r8, qword [rdi + 0x40]
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002ffe9
add rax, r9
test ecx, ecx
jne 0x18002ffd6
test edx, edx
je 0x1800300ff
mov r12, qword [rdi + 0x40]
mov qword [rbp - 0x58], r12
mov r14d, dword [rdi + 0x38]
sub r14d, r9d
mov dword [rbp + 0x94], r11d
mov ebx, r11d
mov dword [rbp + 0x90], ebx
mov r15, r11
mov qword [rbp + 0x98], r11
test r14d, r14d
jle 0x1800300ab
movsxd r13, r14d
add r13, r12
mov rdx, r13
mov rcx, r12
call fcn.180008704
mov edx, 1
lea ebx, [rdx + rax]
xor ecx, ecx
test ebx, ebx
jle 0x180030088
mov r12d, ebx
lea eax, [rdx + 7]
cmp ebx, eax
cmovl r12d, eax
test r12d, r12d
jle 0x180030084
mov rax, qword [0x1800e0b80]
test rax, rax
je 0x180030065
add dword [rax + 0xf4], edx
movsxd rcx, r12d
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x94], r12d
xor ecx, ecx
mov r12, qword [rbp - 0x58]
mov dword [rbp + 0x90], ebx
mov qword [rsp + 0x20], rcx
mov r9, r13
mov r8, r12
mov edx, ebx
mov rcx, r15
call fcn.180008664
mov r13d, dword [rsp + 0x78]
xor r11d, r11d
lea eax, [rbx - 1]
mov r9d, r11d
test r14d, r14d
cmovg r9d, eax
lea rdx, [rdi + 0x54]
mov r8, r15
mov rcx, rdi
call fcn.18002e130
nop
test r15, r15
je 0x1800300e9
mov rax, qword [0x1800e0b80]
test rax, rax
je 0x1800300df
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov r12b, byte [rsp + 0x51]
jmp 0x1800300ff
mov qword [rbp - 0x58], r11
cmp byte [rsp + 0x64], r11b
jne 0x1800301f0
mov byte [rdi + 0x48], 1
mov eax, dword [rdi + 0x18]
lea ebx, [rax*4 + 1]
mov ecx, dword [rdi + 0x2c]
cmp ebx, ecx
jle 0x180030138
test ecx, ecx
je 0x180030123
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180030128
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c548
mov dword [rdi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x20]
mov edx, ebx
mov rcx, qword [rdi + 0x30]
call fcn.180008824
xor r11d, r11d
test r12b, r12b
je 0x1800301f0
cmp byte [rsp + 0x5d], r11b
je 0x180030171
mov r12d, dword [rbp + 0x218]
test r12b, 0x20
jne 0x1800301f7
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
mov r15, qword [rbp - 0x58]
test r15, r15
je 0x1800304e2
test r13b, r13b
je 0x18003049f
mov qword [rbp + 0x58], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x48], 0x40000
mov eax, dword [rbp + 0x218]
mov dword [rbp + 0x4c], eax
mov qword [rbp + 0x60], r12
mov dword [rbp + 0x68], r14d
lea eax, [r14 + 1]
cmp dword [rbp - 0x60], eax
cmovge eax, dword [rbp - 0x60]
mov dword [rbp + 0x6c], eax
mov qword [rbp + 0x50], r11
lea rcx, [rbp + 0x40]
call r11
mov r12, qword [rbp + 0x60]
mov qword [rbp - 0x78], r12
mov ecx, dword [rbp + 0x6c]
lea r14d, [rcx - 1]
cmp dword [rbp + 0x68], r14d
cmovl r14d, dword [rbp + 0x68]
xor r11d, r11d
jmp 0x1800304a2
mov r12d, dword [rbp + 0x218]
test r12d, 0x801c0
je 0x180030454
mov r15d, r11d
mov ebx, 0x40
test bl, r12b
je 0x18003022c
xor r8d, r8d
mov edx, r13d
mov r13d, 0x200
mov ecx, r13d
call fcn.18001514c
xor r11d, r11d
test al, al
jne 0x18003026f
test r12b, r12b
jns 0x180030274
mov ebx, 1
mov r8d, ebx
xor edx, edx
mov r13d, 0x203
mov ecx, r13d
call fcn.180013d78
xor r11d, r11d
test al, al
jne 0x18003026a
mov r8d, ebx
xor edx, edx
mov r13d, 0x204
mov ecx, r13d
call fcn.180013d78
xor r11d, r11d
test al, al
je 0x180030274
mov ebx, pe_nt_image_headers64
mov r15d, r13d
jmp 0x180030295
mov ebx, 0x80000
test ebx, r12d
je 0x180030287
cmp byte [rdi + 0xe86], r11b
jne 0x180030295
mov eax, 0x100
test eax, r12d
mov ebx, r11d
cmovne ebx, eax
test ebx, ebx
je 0x180030454
mov dword [rbp + 0x18], r11d
mov word [rbp + 0x31], r11w
mov byte [rbp + 0x33], r11b
mov qword [rbp], rsi
mov dword [rbp + 8], ebx
mov dword [rbp + 0xc], r12d
mov qword [rbp + 0x10], r11
cmp byte [rsp + 0x64], r11b
mov rax, qword [rbp - 0x78]
jne 0x1800302c8
mov rax, qword [rdi + 0x30]
mov dword [rbp + 0x1c], r15d
mov qword [rbp + 0x20], rax
mov eax, dword [rdi + 0x10]
mov dword [rbp + 0x28], eax
mov eax, dword [rdi + 0x4c]
mov dword [rbp + 0x2c], eax
mov byte [rbp + 0x30], r11b
mov r11, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0x54]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.1800088c4
mov ebx, eax
mov dword [rbp + 0x34], eax
movsxd rdx, dword [rdi + 0x58]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.1800088c4
mov r12d, eax
mov dword [rbp + 0x38], eax
movsxd rdx, dword [rdi + 0x5c]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.1800088c4
mov r13d, eax
mov dword [rbp + 0x3c], eax
lea rcx, [rbp]
xor eax, eax
call rax
mov r15b, byte [rbp + 0x30]
movsxd rcx, dword [rbp + 0x34]
cmp ecx, ebx
jne 0x180030341
xor r11d, r11d
test r15b, r15b
je 0x180030360
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.180008704
mov dword [rdi + 0x54], eax
mov byte [rdi + 0xe84], 1
mov ecx, dword [rbp + 0x34]
xor r11d, r11d
movsxd rax, dword [rbp + 0x38]
cmp eax, r12d
jne 0x18003036e
test r15b, r15b
je 0x18003038f
cmp eax, ecx
jne 0x180030377
mov ecx, dword [rdi + 0x54]
jmp 0x180030389
mov rcx, qword [rbp + 0x20]
lea rdx, [rcx + rax]
call fcn.180008704
mov ecx, eax
mov eax, dword [rbp + 0x38]
mov dword [rdi + 0x58], ecx
xor r11d, r11d
movsxd rcx, dword [rbp + 0x3c]
cmp ecx, r13d
jne 0x1800303a1
test r15b, r15b
je 0x180030454
cmp ecx, eax
jne 0x1800303aa
mov eax, dword [rdi + 0x58]
jmp 0x1800303bc
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.180008704
xor r11d, r11d
mov dword [rdi + 0x5c], eax
test r15b, r15b
je 0x180030454
mov r8d, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
mov rcx, rdi
call fcn.18002e3c8
mov ebx, dword [rbp + 0x28]
mov eax, dword [rbp - 0x4c]
mov r13d, dword [rbp - 0x70]
cmp ebx, eax
jle 0x180030422
test r13b, r13b
je 0x180030422
lea r15, [rdi + 0x18]
sub ebx, eax
add ebx, dword [r15]
mov ecx, dword [r15 + 4]
cmp ebx, ecx
jle 0x18003041f
test ecx, ecx
je 0x18003040b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180030410
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
mov rcx, r15
call fcn.18001c670
mov dword [r15], ebx
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, qword [rbp + 0x20]
mov edx, dword [rdi + 0x18]
mov rcx, qword [rdi + 0x20]
call fcn.180008664
mov dword [rdi + 0xc], eax
mov eax, dword [rbp + 0x28]
mov dword [rdi + 0x10], eax
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
jmp 0x180030458
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
cmp byte [rsp + 0x64], r11b
jne 0x180030179
mov rax, qword [rdi + 0x30]
mov r8, r12
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18003048a
add rax, r9
test ecx, ecx
jne 0x180030477
test edx, edx
je 0x180030179
mov r15, qword [rdi + 0x30]
mov r14d, dword [rdi + 0x10]
jmp 0x18003017d
mov ecx, dword [rbp - 0x60]
lea eax, [r14 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
mov eax, 1
cmp rbx, rax
jb 0x1800304d2
jbe 0x1800304cd
lea r8, [rbx - 1]
mov rdx, r15
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r11d, r11d
mov byte [r12 + rbx - 1], r11b
mov ebx, 1
mov byte [rsp + 0x7f], bl
mov r13d, dword [rsp + 0x78]
jmp 0x1800304ec
mov r13d, dword [rsp + 0x78]
mov ebx, 1
cmp byte [rsp + 0x5c], r11b
je 0x180030508
cmp dword [rsi + 0x1228], r13d
jne 0x180030508
xor edx, edx
xor ecx, ecx
call fcn.18000b2fc
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
jne 0x180030589
mov r8d, ebx
mov edx, r13d
lea rcx, [rbp + 0x80]
call fcn.1800098d8
mov rax, qword [0x1800e0b80]
movdqu xmm0, xmmword [rax + 0xc3c]
movups xmmword [rbp + 0x90], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp + 0x9c], xmm0
lea rcx, [rbp + 0x90]
call fcn.18000890c
mov r8d, eax
movss xmm5, dword [rsi + 0xb34]
movss dword [rsp + 0x20], xmm5
mov r9b, bl
mov rdx, qword [rbp + 0x88]
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180009760
xor r11d, r11d
movss dword [rbp + 0xa8], xmm7
movss dword [rbp + 0xac], xmm9
movaps xmm0, xmm7
addss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
movaps xmm1, xmm9
addss xmm1, xmm11
movss dword [rbp + 0xb4], xmm1
mov r10, qword [rbp - 0x48]
lea rax, [rbp + 0x90]
test r12b, r12b
je 0x1800305de
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x90], xmm0
jmp 0x180030602
addss xmm7, dword [rsi + 0xb2c]
movss dword [rbp + 0x90], xmm7
movaps xmm0, xmm9
addss xmm0, dword [rsi + 0xb30]
movss dword [rbp + 0x94], xmm0
movsd xmm0, qword [rax]
movsd qword [rbp + 0xa0], xmm0
movaps xmm14, xmm15
movaps xmm8, xmm15
cmp byte [rsp + 0x7e], r11b
je 0x180030627
mov r15, qword [rdi + 0x30]
mov qword [rbp - 0x78], r15
jmp 0x18003062b
mov r15, qword [rbp - 0x78]
mov r14, r11
mov qword [rbp - 0x30], r11
movzx r9d, byte [rsp + 0x53]
test r9b, r9b
je 0x18003065c
mov rax, qword [rbp - 0x18]
mov r15, rax
mov qword [rbp - 0x78], rax
or r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], r11b
jne 0x18003064c
add r14, rax
mov qword [rbp - 0x30], r14
mov r11b, byte [rsp + 0x50]
mov r8d, dword [rsp + 0x58]
test r11b, r11b
jne 0x180030799
test r8b, r8b
jne 0x180030799
xor r11d, r11d
test r12b, r12b
je 0x1800306d4
mov ecx, r11d
mov dl, byte [r15]
lea r14, [r15 + 1]
test dl, dl
je 0x1800306a7
lea r8d, [r11 + 0xa]
lea eax, [rcx + 1]
cmp dl, r8b
cmovne eax, ecx
mov ecx, eax
mov dl, byte [r14]
add r14, rbx
test dl, dl
jne 0x180030692
sub r14, rbx
mov eax, 0xa
cmp byte [r14], al
je 0x1800306bc
cmp byte [r14], 0xd
je 0x1800306bc
add ecx, ebx
movaps xmm14, xmm10
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [rsi + 0xf28]
jmp 0x18003070a
test r9b, r9b
jne 0x1800306f8
cmp dword [rsi + 0x1228], r13d
jne 0x1800306e8
movsxd r14, dword [rdi + 0x10]
jmp 0x1800306f5
or r14, 0xffffffffffffffff
inc r14
cmp byte [r15 + r14], r11b
jne 0x1800306ec
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x180030f90
mov rcx, qword [0x1800e0b80]
mov rax, r9
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.18000890c
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xa0]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rcx, qword [r10 + 0x298]
call fcn.180020cdc
xor r11d, r11d
jmp 0x180030f8b
xor r10d, r10d
test r9b, r9b
jne 0x1800307ac
movsxd r14, dword [rdi + 0x10]
add r14, r15
mov qword [rbp - 0x30], r14
mov r15, qword [rdi + 0x20]
movaps xmm5, xmm15
movaps xmm9, xmm15
mov r9, r10
mov r13, r10
mov edx, 0xfffffc18
mov r12d, edx
mov ecx, r10d
test r11b, r11b
je 0x1800307db
movsxd rax, dword [rdi + 0x54]
lea r9, [r15 + rax*2]
or edx, 0xffffffff
mov ecx, ebx
test r8b, r8b
je 0x1800307f6
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
cdqe
lea r13, [r15 + rax*2]
or r12d, 0xffffffff
add ecx, ebx
movzx eax, byte [rsp + 0x60]
add ecx, eax
mov ebx, r10d
mov rax, r15
movzx r8d, word [r15]
mov r11d, 0xa
test r8w, r8w
je 0x180030857
lea esi, [r11 - 9]
cmp r8w, r11w
jne 0x180030845
add ebx, esi
cmp edx, 0xffffffff
jne 0x180030831
cmp rax, r9
jb 0x180030831
mov edx, ebx
sub ecx, esi
test ecx, ecx
jle 0x180030853
cmp r12d, 0xffffffff
jne 0x180030845
cmp rax, r13
jb 0x180030845
mov r12d, ebx
sub ecx, esi
test ecx, ecx
jle 0x180030853
add rax, 2
movzx r8d, word [rax]
test r8w, r8w
jne 0x180030817
mov rsi, qword [rbp - 0x68]
inc ebx
mov eax, ebx
cmp edx, 0xffffffff
cmovne eax, edx
mov dword [rbp - 0x4c], eax
cmp r12d, 0xffffffff
cmove r12d, ebx
mov r8, r9
cmp r9, r15
jbe 0x180030886
lea rax, [r8 - 2]
cmp word [rax], r11w
je 0x180030886
mov r8, rax
cmp rax, r15
ja 0x180030874
mov byte [rsp + 0x30], r10b
mov qword [rsp + 0x20], r10
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.18002c8ac
movss xmm7, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm12, dword [rbp - 0x4c]
cvtdq2ps xmm12, xmm12
mulss xmm12, xmm0
xor r11d, r11d
test r12d, r12d
js 0x180030915
mov r8, r13
cmp r13, r15
jbe 0x1800308dc
lea ecx, [r11 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x1800308dc
mov r8, rax
cmp rax, r15
ja 0x1800308cb
mov byte [rsp + 0x30], r11b
mov qword [rsp + 0x20], r11
mov r9, r13
mov rdx, rsi
lea rcx, [rbp + 0x90]
call fcn.18002c8ac
movss xmm5, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm9, r12d
cvtdq2ps xmm9, xmm9
mulss xmm9, xmm0
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
je 0x180030931
movaps xmm14, xmm10
movd xmm8, ebx
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm0
mov r13b, byte [rsp + 0x50]
test r13b, r13b
je 0x180030a5c
cmp byte [rdi + 0xe84], r11b
je 0x180030a5c
test dword [rbp + 0x218], 0x1000
jne 0x1800309a8
movaps xmm0, xmm10
mulss xmm0, dword [0x1800d6e20]
subss xmm10, dword [rsi + 0xb2c]
movss xmm2, dword [rdi + 0x50]
movaps xmm1, xmm7
comiss xmm2, xmm7
jbe 0x180030988
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
jmp 0x180030996
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x1800309ac
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
jmp 0x1800309ac
mov dword [rdi + 0x50], r11d
test r12b, r12b
je 0x180030a55
movaps xmm0, xmm12
subss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
jbe 0x1800309d0
movaps xmm6, xmm15
maxss xmm6, xmm0
jmp 0x1800309fe
movss xmm2, dword [rsi + 0xb30]
addss xmm2, xmm2
movaps xmm1, xmm11
subss xmm1, xmm2
movaps xmm0, xmm12
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x1800309fe
movaps xmm6, xmm12
subss xmm6, xmm11
addss xmm6, xmm2
movss xmm2, dword [rsi + 0xb30]
comiss xmm15, xmm6
jbe 0x180030a12
movaps xmm2, xmm15
jmp 0x180030a29
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm11
maxss xmm2, xmm15
minss xmm2, xmm6
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
movss xmm1, dword [rbp + 0xa4]
addss xmm1, xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rdi + 0xe84], r11b
movss xmm10, dword [rdi + 0x50]
movss xmm11, dword [0x1800d6e64]
cmp byte [rsp + 0x58], r11b
je 0x180030d06
mov edx, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea r8, [r15 + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rbx, [r15 + rax*2]
test r13b, r13b
je 0x180030a9e
movaps xmm1, xmm11
jmp 0x180030aa6
movss xmm1, dword [0x1800d6e34]
mov rax, qword [0x1800e0b80]
movdqu xmm0, xmmword [rax + 0xebc]
movups xmmword [rbp + 0x80], xmm0
mulss xmm1, dword [rax + 0xaf0]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x8c], xmm0
lea rcx, [rbp + 0x80]
call fcn.18000890c
mov r15d, eax
test r12b, r12b
je 0x180030af4
movss dword [rbp - 0x40], xmm15
movaps xmm13, xmm15
jmp 0x180030afd
movss xmm13, dword [0x1800d6e80]
addss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
movss xmm6, dword [rbp + 0xa4]
addss xmm6, xmm9
subss xmm6, xmm15
mov qword [rsp + 0x70], r8
cmp r8, rbx
jae 0x180030d00
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r12, qword [rbp - 0x48]
xor r13d, r13d
movaps xmm0, xmm3
addss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
ja 0x180030ce6
comiss xmm4, xmm6
jbe 0x180030b8e
cmp r8, rbx
jae 0x180030cc8
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rsp + 0x70], r8
cmp ax, cx
je 0x180030cc8
cmp r8, rbx
jb 0x180030b6e
jmp 0x180030cc8
mov byte [rsp + 0x30], 1
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rdx, rsi
lea rcx, [rbp - 0x68]
call fcn.18002c8ac
movss xmm0, dword [rbp - 0x68]
comiss xmm15, xmm0
jb 0x180030bee
mov rax, qword [rsi + 0xf20]
cmp dword [rax], 0x20
jle 0x180030bd1
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x180030bd6
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1800d6e30]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x68], xmm0
movaps xmm2, xmm5
addss xmm2, xmm0
movaps xmm0, xmm13
addss xmm0, xmm6
addss xmm5, xmm15
movaps xmm1, xmm11
subss xmm1, dword [rsi + 0xf28]
addss xmm1, xmm6
maxss xmm5, dword [rbp + 0xa8]
movss xmm4, dword [rbp + 0xac]
maxss xmm1, xmm4
movss dword [rbp + 0x80], xmm5
movss dword [rbp + 0x84], xmm1
movss xmm9, dword [rbp + 0xb0]
minss xmm2, xmm9
movss xmm3, dword [rbp + 0xb4]
minss xmm0, xmm3
movss dword [rbp + 0x88], xmm2
movss dword [rbp + 0x8c], xmm0
comiss xmm0, xmm4
jbe 0x180030cc3
comiss xmm3, xmm1
jbe 0x180030cc3
comiss xmm2, dword [rbp + 0xa8]
jbe 0x180030cc3
comiss xmm9, xmm5
jbe 0x180030cc3
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm15
mov r9d, r15d
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x80]
mov rcx, qword [r12 + 0x298]
call fcn.180020944
movss xmm1, dword [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r8, qword [rsp + 0x70]
movss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
addss xmm6, dword [rsi + 0xf28]
cmp r8, rbx
jb 0x180030b47
movss xmm11, dword [0x1800d6e64]
mov r14, qword [rbp - 0x30]
mov r12d, dword [rsp + 0x60]
mov r13b, byte [rsp + 0x50]
xor r11d, r11d
movss xmm13, dword [rbp - 0x28]
mov r15, qword [rbp - 0x78]
test r12b, r12b
jne 0x180030d21
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x180030dd4
mov rcx, qword [0x1800e0b80]
movzx eax, byte [rsp + 0x53]
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
movss xmm0, dword [rbp + 0xa0]
subss xmm0, xmm10
movss dword [rbp - 0x68], xmm0
movss xmm1, dword [rbp + 0xa4]
subss xmm1, xmm15
movss dword [rbp - 0x64], xmm1
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.18000890c
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x68]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbx + 0x298]
call fcn.180020cdc
xor r11d, r11d
jmp 0x180030dd8
mov rbx, qword [rbp - 0x48]
test r13b, r13b
je 0x180030f7f
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], r11b
je 0x180030e28
comiss xmm15, xmm0
jae 0x180030e28
movss xmm1, dword [0x1800d6e6c]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x1800d6e50]
xor r11d, r11d
comiss xmm1, xmm0
jae 0x180030e28
mov cl, r11b
lea edi, [r11 + 1]
jmp 0x180030e30
mov edi, 1
mov cl, dil
addss xmm7, dword [rbp + 0xa0]
subss xmm7, xmm10
cvttss2si eax, xmm7
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0xa4]
addss xmm0, xmm12
subss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x80], xmm6
movaps xmm1, xmm7
subss xmm1, dword [rsi + 0xf28]
addss xmm1, dword [0x1800d6e30]
movss dword [rbp + 0x84], xmm1
movaps xmm3, xmm6
addss xmm3, xmm11
movss dword [rbp + 0x88], xmm3
movaps xmm2, xmm7
subss xmm2, dword [0x1800d6e74]
movss dword [rbp + 0x8c], xmm2
test cl, cl
je 0x180030f3a
comiss xmm2, dword [rbp + 0xac]
jbe 0x180030f3a
movss xmm0, dword [rbp + 0xb4]
comiss xmm0, xmm1
jbe 0x180030f3a
comiss xmm3, dword [rbp + 0xa8]
jbe 0x180030f3a
movss xmm0, dword [rbp + 0xb0]
comiss xmm0, xmm6
jbe 0x180030f3a
mov rax, qword [0x1800e0b80]
movdqu xmm0, xmmword [rax + 0xbcc]
movups xmmword [rbp - 0x28], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp - 0x1c], xmm0
movss dword [rbp - 0x68], xmm6
movss dword [rbp - 0x64], xmm2
lea rcx, [rbp - 0x28]
call fcn.18000890c
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x80]
mov rcx, qword [rbx + 0x298]
call fcn.1800206f8
xor r11d, r11d
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
cmp byte [rsp + 0x64], r11b
jne 0x180030f8b
mov byte [rsi + 0x2e80], dil
subss xmm6, xmm11
movss xmm0, dword [rsi + 0xf28]
subss xmm7, xmm0
movss dword [rsi + 0x2e84], xmm6
movss dword [rsi + 0x2e88], xmm7
movss dword [rsi + 0x2e8c], xmm0
jmp 0x180030f8b
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
mov r9b, byte [rsp + 0x53]
mov ebx, dword [rbp - 0x50]
test bl, bl
je 0x180030fa4
test r9b, r9b
jne 0x180030fa4
call fcn.1800133cc
xor r11d, r11d
test r12b, r12b
je 0x180031028
movss dword [rbp - 0x68], xmm14
addss xmm8, dword [rsi + 0xb30]
movss dword [rbp - 0x64], xmm8
lea rcx, [rbp - 0x68]
call fcn.18002ad34
mov ebx, dword [rsi + 0x1a44]
mov eax, ebx
or eax, 0x401
mov dword [rsi + 0x1a44], eax
call fcn.18000e580
mov eax, dword [rsi + 0x1a68]
and eax, 0x80
mov edi, dword [rbp + 0xc0]
or edi, eax
mov dword [rsi + 0x1a44], ebx
call fcn.180015908
xor r11d, r11d
mov ebx, dword [rbp - 0x50]
cmp dword [rsi + 0x1a60], r11d
jne 0x180031028
mov eax, dword [rsp + 0x78]
mov dword [rsi + 0x1a60], eax
mov eax, dword [rbp + 0xbc]
mov dword [rsi + 0x1a64], eax
mov dword [rsi + 0x1a68], edi
cmp byte [rsi + 0x2f38], r11b
je 0x180031071
test bl, bl
je 0x18003103c
cmp byte [rsp + 0x53], 0
je 0x180031071
mov rax, qword [0x1800e0b80]
lea rcx, [0x1800c4250]
mov qword [rax + 0x2f58], rcx
lea rcx, [0x1800c424c]
mov qword [rax + 0x2f60], rcx
mov r8, r14
mov rdx, r15
lea rcx, [rbp + 0xa0]
call fcn.18001a40c
comiss xmm13, xmm15
jbe 0x1800310a8
addss xmm12, dword [rsi + 0xb44]
addss xmm9, dword [rsi + 0xb30]
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
movaps xmm0, xmm12
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180009030
movzx edx, byte [rsp + 0x7f]
mov ecx, dword [rbp + 0x218]
test dl, dl
je 0x1800310d4
bt ecx, 0x1b
jb 0x1800310d4
mov rax, qword [0x1800e0b80]
mov word [rax + 0x1238], 0x101
or dword [rax + 0x1a68], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x5d]
cmovne eax, ecx
jmp 0x18002e800