Function at 0x180032cd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x288
mov r14, qword [0x180052720]
mov rsi, rcx
movaps xmmword [rax - 0x58], xmm6
mov ecx, 1
movaps xmmword [rax - 0x68], xmm7
xor edi, edi
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [r14 + 0x11e0]
mov qword [rbp + 8], r14
mov byte [rax + 0xb8], cl
mov r12, qword [r14 + 0x11e0]
cmp byte [r12 + 0xbb], dil
jne 0x180032f4e
mov ebx, dword [rbp + 0x1f8]
mov eax, ebx
shr eax, 0xe
mov r13d, ebx
and al, cl
shr r13d, 0x1a
mov dword [rsp + 0x5c], eax
and r13b, cl
mov eax, ebx
mov dword [rsp + 0x64], r13d
shr eax, 0xf
and al, cl
mov dword [rbp - 0x60], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x70], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rsp + 0x78], eax
test r13b, r13b
je 0x180032dc4
call fcn.180010350
mov rdx, rsi
mov rcx, r12
call fcn.1800056b0
movss xmm0, dword [0x18004cec8]
lea rcx, [rbp]
mov r9d, 1
movss dword [rbp - 0x40], xmm0
xor r8d, r8d
movss dword [rsp + 0x20], xmm0
mov rdx, rsi
mov dword [rsp + 0x6c], eax
mov r15d, eax
call fcn.1800084e8
test r13b, r13b
je 0x180032e16
movss xmm0, dword [r14 + 0xf18]
mulss xmm0, dword [0x18004ce48]
jmp 0x180032e1b
movss xmm0, dword [rbp + 4]
movss xmm6, dword [r14 + 0xb10]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.180010184
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x1d8]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.1800101f4
movss xmm14, dword [rbp]
xorps xmm11, xmm11
comiss xmm14, xmm11
jbe 0x180032e6c
movaps xmm1, xmm14
addss xmm1, dword [r14 + 0xb24]
jmp 0x180032e6f
xorps xmm1, xmm1
movss xmm9, dword [r12 + 0x104]
lea rcx, [rbp + 0x1d8]
movss xmm7, dword [r12 + 0x100]
movaps xmm0, xmm9
movss xmm12, dword [rbp + 0x1d8]
movaps xmm2, xmm9
movss xmm13, dword [rbp + 0x1dc]
addss xmm1, xmm12
addss xmm2, xmm13
movss dword [rbp - 0x3c], xmm9
addss xmm0, xmm13
movss dword [rbp - 0x80], xmm7
movaps xmm10, xmm7
movss dword [rbp - 0x7c], xmm9
addss xmm10, xmm12
movss dword [rbp - 0x30], xmm7
addss xmm1, xmm7
movss dword [rbp - 0x2c], xmm9
movss dword [rbp - 0x24], xmm2
subss xmm2, xmm9
movss dword [rbp - 0x74], xmm0
xorps xmm0, xmm0
mov qword [rbp - 0x58], r12
movss dword [rbp - 0x50], xmm10
movss dword [rbp - 0x28], xmm1
subss xmm1, xmm7
movss dword [rbp - 0x78], xmm10
movss dword [rbp + 0x1dc], xmm2
movups xmmword [rbp + 0xa0], xmm0
movss dword [rbp + 0x1d8], xmm1
movaps xmm1, xmm6
call fcn.18000fe24
test r13b, r13b
je 0x180033105
mov r9d, 0x400
lea r8, [rbp - 0x80]
mov edx, r15d
lea rcx, [rbp - 0x30]
call fcn.18000ff78
test al, al
jne 0x180032fa3
call fcn.180010478
xor al, al
lea r11, [rsp + 0x288]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movups xmm0, xmmword [r14 + 0x1a7c]
mov edi, dword [r14 + 0x1a84]
lea rdx, [r14 + 0xc1c]
mov ecx, 3
movss dword [r12 + 0x100], xmm7
movups xmmword [rbp + 0xa0], xmm0
movss dword [r12 + 0x104], xmm9
call fcn.180003bc4
movss xmm1, dword [r14 + 0xb14]
mov ecx, 7
call fcn.180003c74
movss xmm1, dword [r14 + 0xb18]
mov ecx, 8
call fcn.180003c74
and dword [rbp + 0x1d8], 0
lea rdx, [rbp + 0x1d8]
and dword [rbp + 0x1dc], 0
mov ecx, 2
call fcn.180003cec
movss xmm10, dword [rbp - 0x78]
lea r8, [rbp + 0x1d8]
movss xmm1, dword [rbp - 0x74]
movaps xmm0, xmm10
movss xmm9, dword [rbp - 0x7c]
mov r9d, 1
movss xmm7, dword [rbp - 0x80]
subss xmm1, xmm9
subss xmm0, xmm7
movss dword [rbp - 0x50], xmm10
mov edx, r15d
movss dword [rbp - 0x3c], xmm9
mov rcx, rsi
mov dword [rsp + 0x20], 4
movss dword [rbp + 0x1dc], xmm1
movss dword [rbp + 0x1d8], xmm0
call fcn.1800087d8
mov ecx, 3
mov bl, al
call fcn.180003d78
mov ecx, 1
call fcn.180003c20
test bl, bl
jne 0x1800330a6
call fcn.180008a44
jmp 0x180032f49
mov rbx, qword [r14 + 0x11e0]
mov qword [rbp - 0x58], rbx
movsx ecx, word [rbx + 0x15e]
movss xmm0, dword [rbx + 0x100]
mov eax, dword [rbx + 0x158]
bts ecx, eax
subss xmm12, dword [rbx + 0xac]
mov word [rbx + 0x15e], cx
addss xmm0, dword [r14 + 0xb0c]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [r14 + 0xb10]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
jmp 0x180033150
bt ebx, 0x1c
jb 0x180033146
mov r9d, 0x400
lea r8, [rbp - 0x80]
mov edx, r15d
lea rcx, [rbp - 0x30]
call fcn.18000ff78
test al, al
je 0x180032f4e
movss xmm10, dword [rbp - 0x78]
movss xmm9, dword [rbp - 0x7c]
movss xmm7, dword [rbp - 0x80]
movss dword [rbp - 0x50], xmm10
movss dword [rbp - 0x3c], xmm9
mov edi, dword [r14 + 0x1a84]
mov rbx, r12
mov r8d, dword [r14 + 0x1a80]
lea rcx, [rbp - 0x80]
mov edx, r15d
call fcn.180005d10
xor r8d, r8d
mov byte [rsp + 0x61], al
mov cl, al
lea edx, [r8 + 1]
test al, al
je 0x18003317b
mov dword [r14 + 0x1f18], edx
mov rsi, qword [0x180052720]
test r15d, r15d
je 0x180033199
cmp dword [rsi + 0x1f30], r15d
jne 0x180033199
add rsi, 0x1f28
jmp 0x18003319c
mov rsi, r8
mov eax, dword [r14 + 0x1240]
shr edi, 8
and dil, dl
mov qword [rbp - 0x10], rsi
mov dword [rbp - 0x38], edi
cmp eax, r15d
je 0x1800331d9
cmp dword [r14 + 0x1be0], r15d
jne 0x1800331d9
test byte [r14 + 0x1bec], dl
jne 0x1800331d1
cmp dword [r14 + 0x1c04], 2
jne 0x1800331d9
mov byte [rbp + 0x208], dl
jmp 0x1800331e0
mov byte [rbp + 0x208], r8b
test cl, cl
je 0x1800331f0
mov r15b, dl
cmp byte [r14 + 0xa48], r8b
jne 0x1800331f3
mov r15b, r8b
mov byte [rbp + 0x1d8], r15b
test r13b, r13b
je 0x18003322a
test rsi, rsi
je 0x18003322a
test eax, eax
jne 0x18003322a
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.1800056b0
cmp dword [r14 + 0x1270], eax
jne 0x180033227
mov ebx, 1
jmp 0x180033237
xor r8d, r8d
mov bl, r8b
test r13b, r13b
je 0x180033269
test rsi, rsi
je 0x180033269
mov rcx, qword [rbp - 0x58]
lea rdx, str.SCROLLY
call fcn.1800056b0
xor r8d, r8d
cmp dword [r14 + 0x1240], eax
jne 0x180033269
lea eax, [r8 + 1]
mov byte [rsp + 0x58], r8b
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x54], r8b
jmp 0x18003327f
mov byte [rsp + 0x58], r8b
mov cl, r8b
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x54], r8b
test r13b, r13b
je 0x18003328d
mov rax, qword [rbp - 0x58]
movss xmm6, dword [rax + 0x88]
jmp 0x180033299
movss xmm6, dword [0x18004cea4]
mov byte [rsp + 0x51], cl
mov r9d, 1
test rsi, rsi
je 0x1800332b2
mov al, r13b
mov r13b, r9b
xor al, r9b
cmp byte [rsi + 0x6b], al
jne 0x1800332b5
mov r13b, r8b
test r15b, r15b
jne 0x1800332dc
test bl, bl
jne 0x1800332dc
cmp byte [rbp + 0x208], r8b
jne 0x1800332dc
test dil, dil
jne 0x1800332dc
mov byte [rsp + 0x52], r8b
test cl, cl
jne 0x1800332e1
mov byte [rsp + 0x59], r8b
jmp 0x1800332f3
mov byte [rsp + 0x52], r9b
mov eax, dword [rsp + 0x6c]
mov byte [rsp + 0x59], r9b
cmp dword [r14 + 0x1240], eax
jne 0x1800332fc
test r13b, r13b
je 0x180033550
lea rsi, [r14 + 0x1f28]
mov ecx, dword [rsi + 8]
mov qword [rbp - 0x10], rsi
mov dword [rsi + 0xe80], 0xbe99999a
call fcn.180032c08
mov rax, qword [rbp + 0x1e0]
or rbx, 0xffffffffffffffff
xor edx, edx
inc rbx
cmp byte [rax + rbx], dl
jne 0x180033326
mov ecx, dword [rsi + 0x3c]
lea edi, [rbx + 1]
cmp edi, ecx
jle 0x180033363
test ecx, ecx
je 0x180033347
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18003334c
mov eax, 8
cmp eax, edi
lea rcx, [rsi + 0x38]
mov edx, edi
cmovg edx, eax
call fcn.180016c7c
mov rax, qword [rbp + 0x1e0]
mov dword [rsi + 0x38], edi
mov rdx, rax
mov rcx, qword [rsi + 0x40]
movsxd r8, edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x6c]
xor r8d, r8d
cmp dword [rsi + 8], eax
jne 0x1800333bb
test r13b, r13b
jne 0x1800333bb
lea rdi, [rsi + 0x10]
lea r13d, [r8 + 1]
cmp dword [rdi], ebx
jne 0x1800333b6
mov r15, rdi
cmp byte [rsi + 0x48], r8b
je 0x1800333c2
mov rdx, qword [rbp + 0x1e0]
mov rcx, qword [rsi + 0x30]
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x1800333c2
mov r15, rdi
jmp 0x1800333bf
lea r15, [rsi + 0x10]
mov r13b, r8b
mov ebx, dword [rbp + 0x1e8]
mov eax, dword [rsp + 0x6c]
inc ebx
mov dword [rsi + 8], eax
mov ecx, dword [rsi + 0x1c]
mov qword [rbp - 0x68], r8
cmp ebx, ecx
jle 0x180033403
test ecx, ecx
je 0x1800333eb
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800333f0
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.180016d08
xor r8d, r8d
mov dword [rsi + 0x18], ebx
mov ecx, dword [rsi + 0x2c]
test ecx, ecx
jns 0x18003342a
mov eax, ecx
cdq
sub eax, edx
mov edx, r8d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x28]
test eax, eax
cmovg edx, eax
call fcn.180016c7c
xor r8d, r8d
mov rbx, qword [rbp + 0x1e0]
lea rax, [rbp - 0x68]
mov edx, dword [rbp + 0x1e8]
xor r9d, r9d
mov dword [rsi + 0x28], r8d
mov rcx, qword [rsi + 0x20]
mov byte [rsi + 0x48], r8b
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1800029ac
mov ecx, dword [rbp - 0x68]
xor r8d, r8d
mov edi, dword [rsp + 0x64]
sub ecx, ebx
mov dword [rsi + 0xc], eax
mov edx, eax
mov dword [r15], ecx
lea r9d, [r8 + 1]
test r13b, r13b
je 0x180033496
cmp dword [rsi + 0x54], eax
mov ecx, eax
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], eax
mov dword [rsi + 0x54], ecx
cmovl eax, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], edx
mov dword [rsi + 0x58], eax
cmovl edx, dword [rsi + 0x5c]
mov dword [rsi + 0x5c], edx
jmp 0x1800334d8
mov al, dil
mov qword [rsi + 0x50], r8
xor al, r9b
mov dword [rsi + 0xe72], 0x630000
mov byte [rsi + 0x6b], al
mov dword [rsi + 0xe78], r8d
mov dword [rsi + 0xe7c], 0x3e7
mov qword [rsi + 0x58], r8
mov word [rsi + 0x69], 1
mov dword [rsi + 0x70], r8d
mov byte [rsi + 0x68], r8b
mov byte [rsi + 0x60], r8b
mov dword [rsi + 0x64], r8d
test dil, dil
jne 0x180033537
mov r9d, dword [rbp + 0x1f8]
test r9b, 0x10
mov eax, dword [rsp + 0x54]
mov r9d, 1
movzx eax, al
cmovne eax, r9d
mov dword [rsp + 0x54], eax
cmp byte [rbp + 0x208], r8b
je 0x18003351a
test r13b, r13b
je 0x180033515
test byte [r14 + 0x1bec], 4
jne 0x18003351a
mov byte [rsp + 0x54], r9b
cmp byte [rbp - 0x38], r8b
jne 0x180033532
cmp byte [rbp + 0x1d8], r8b
je 0x180033537
cmp byte [r14 + 0x124], r8b
je 0x180033537
mov byte [rsp + 0x54], r9b
test dword [rbp + 0x1f8], 0x2000
mov r15b, byte [rbp + 0x1d8]
je 0x180033554
mov byte [rsi + 0x60], r9b
jmp 0x180033554
mov edi, dword [rsp + 0x64]
mov r10b, byte [r14 + 0x59]
mov r13d, dword [rsp + 0x6c]
mov bl, byte [rsp + 0x52]
mov byte [rsp + 0x60], r10b
cmp dword [r14 + 0x1240], r13d
je 0x1800335a5
test bl, bl
je 0x180033598
mov rdx, r12
mov ecx, r13d
call fcn.180005924
mov rdx, r12
mov ecx, r13d
call fcn.180011b74
xor edx, edx
mov rcx, r12
call fcn.18000d2a0
mov r10b, byte [rsp + 0x60]
cmp dword [r14 + 0x1240], r13d
jne 0x1800336df
xor r12d, r12d
test r15b, r15b
je 0x1800335ca
mov rcx, qword [0x180052720]
mov edx, 0x281
call fcn.180001f4c
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
mov eax, dword [r14 + 0x1a50]
mov r11d, dword [rbp + 0x1f8]
or eax, 3
mov dword [r14 + 0x1a50], eax
test dil, dil
jne 0x1800335ec
test r11b, r11b
jns 0x1800335f6
or eax, 0xc
mov dword [r14 + 0x1a50], eax
mov r9, qword [0x180052720]
mov edx, 0x207
mov rcx, r9
call fcn.180001f4c
mov edx, 0x208
mov rcx, r9
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
call fcn.180001f4c
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
test dil, dil
je 0x180033666
mov edx, 0x205
mov rcx, r9
call fcn.180001f4c
mov edx, 0x206
mov rcx, r9
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
call fcn.180001f4c
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
test r10b, r10b
je 0x180033688
mov rcx, qword [0x180052720]
mov edx, 0x4000
call fcn.180001f4c
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
test r11d, 0x440
je 0x1800336a1
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18000e4c4
cmp dword [r14 + 0x1240], r13d
jne 0x1800336df
test rsi, rsi
jne 0x1800336b8
xor edx, edx
xor ecx, ecx
call fcn.180005924
cmp dword [r14 + 0x1240], r13d
jne 0x1800336df
xor r9d, r9d
cmp byte [r14 + 0xa48], r9b
je 0x1800336ee
cmp byte [rsp + 0x59], r9b
jne 0x1800336ee
test bl, bl
jne 0x1800336ee
mov byte [rsp + 0x58], 1
jmp 0x1800336ee
xor r9d, r9d
test rsi, rsi
je 0x1800336f2
cmp byte [rsp + 0x51], r9b
je 0x1800336f2
mov cl, 1
jmp 0x1800336f5
mov cl, r9b
mov r12d, dword [rsp + 0x54]
mov byte [rbp + 0x1d8], cl
test rsi, rsi
je 0x18003371e
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180033712
test r12b, r12b
je 0x18003371e
test cl, cl
je 0x18003371e
mov r8d, 1
jmp 0x180033721
mov r8b, r9b
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x54], r8d
movzx r15d, r8b
mov byte [rsp + 0x51], r9b
mov byte [rsp + 0x59], r9b
test al, al
je 0x1800337fb
test rsi, rsi
je 0x1800337fb
test cl, cl
jne 0x180033756
test r8b, r8b
je 0x180033804
mov ebx, dword [rbp + 0x1e8]
mov ecx, dword [rsi + 0x1c]
inc ebx
mov qword [rbp - 0x68], r9
cmp ebx, ecx
jle 0x18003378d
test ecx, ecx
je 0x180033778
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18003377d
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.180016d08
mov rdi, qword [rbp + 0x1e0]
lea rax, [rbp - 0x68]
mov dword [rsi + 0x18], ebx
mov r8, rdi
mov rcx, qword [rsi + 0x20]
xor r9d, r9d
mov edx, ebx
mov qword [rsp + 0x20], rax
call fcn.1800029ac
mov ecx, dword [rbp - 0x68]
mov edx, eax
sub ecx, edi
mov dword [rsi + 0xc], eax
cmp dword [rsi + 0x54], eax
mov dword [rsi + 0x10], ecx
mov ecx, eax
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], eax
mov dword [rsi + 0x54], ecx
mov ecx, eax
cmovl ecx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], eax
mov eax, dword [rsp + 0x5c]
cmovl edx, dword [rsi + 0x5c]
xor r9d, r9d
cmp ecx, edx
mov dword [rsi + 0x58], ecx
mov cl, byte [rbp + 0x1d8]
mov r8d, r9d
cmovne r8d, r15d
mov dword [rsi + 0x5c], edx
mov dword [rsp + 0x54], r8d
test cl, cl
jne 0x18003380d
test r8b, r8b
jne 0x18003380d
cmp dword [r14 + 0x1240], r13d
jne 0x180033821
test al, al
jne 0x180033821
test rsi, rsi
je 0x180033821
mov byte [rsp + 0x76], 1
cmp byte [rsi + 0x48], r9b
jne 0x180033826
mov byte [rsp + 0x76], r9b
cmp byte [rbp - 0x60], r9b
je 0x1800338d3
mov rcx, qword [r14 + 0xf10]
mov edx, 0x2a
call fcn.180022cc8
mov ecx, dword [rcx + 0x14]
lea rdi, [r14 + 0x2dd0]
mov rbx, qword [0x180052720]
mov r9, rax
mov dword [rdi + 0x14], ecx
mov rcx, qword [r14 + 0xf10]
mov qword [rbp - 0x30], rdi
mov edx, dword [rcx + 0x64]
mov dword [rdi + 0x64], edx
mov rcx, qword [r14 + 0xf10]
mov edx, dword [rcx + 0x68]
mov dword [rdi + 0x68], edx
mov rcx, qword [r14 + 0xf10]
mov edx, dword [rcx + 0x6c]
mov dword [rdi + 0x6c], edx
mov rcx, qword [r14 + 0xf10]
mov rax, qword [rcx + 0x40]
mov rcx, rdi
mov qword [rdi + 0x40], rax
mov qword [rdi + 0x38], r9
mov eax, dword [r9 + 4]
mov dword [rdi + 0x10], eax
call fcn.18000d62c
lea rdx, [rbp - 0x30]
lea rcx, [rbx + 0x1b48]
call fcn.180016a08
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rbx + 0x11e0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.18001d42c
xor r9d, r9d
mov ebx, 0xa
mov dword [rbp - 0x38], r9d
mov dword [rbp + 0x18], ebx
cmp dword [r14 + 0x1240], r13d
jne 0x180033cb7
mov eax, dword [rsi + 0x10]
mov edi, dword [rbp + 0x1f8]
mov r15d, dword [rsp + 0x64]
mov byte [rsi + 0xe86], r9b
mov dword [rsi + 0xe88], edi
mov dword [rbp - 0x38], eax
mov eax, dword [rbp + 0x1e8]
mov dword [rsi + 0x4c], eax
cmp byte [r14 + 0x110], r9b
sete al
mov byte [r14 + 0x124d], al
movss xmm2, dword [r14 + 0x108]
subss xmm2, xmm7
subss xmm2, dword [r14 + 0xb0c]
addss xmm2, dword [rsi + 0x50]
test r15b, r15b
je 0x18003395b
mov rax, qword [rbp - 0x58]
movss xmm3, dword [r14 + 0x10c]
subss xmm3, dword [rax + 0x104]
jmp 0x18003396c
movss xmm3, dword [r14 + 0xf18]
mulss xmm3, dword [0x18004cdc4]
test r12b, r12b
je 0x180033997
mov eax, dword [rsi + 0xc]
mov r12d, 1
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
lea rax, [rsi + 0xe85]
mov byte [rax], r12b
mov dword [rsi + 0x58], r9d
mov byte [rsi + 0x6a], r9b
jmp 0x180033b10
mov al, byte [rsp + 0x61]
test al, al
je 0x180033abc
mov ecx, 2
cmp word [r14 + 0xa52], cx
jb 0x180033abc
cmp byte [r14 + 0x125], r9b
jne 0x180033abc
lea rdi, [rsi + 0x54]
mov rcx, rsi
mov rdx, rdi
call fcn.1800315cc
movsxd rdx, dword [rdi]
mov r12d, 1
test byte [r14 + 0xa52], r12b
jne 0x180033a4d
xor r8d, r8d
test edx, edx
je 0x1800339f9
mov rax, qword [rsi + 0x20]
mov cl, r8b
cmp word [rax + rdx*2 - 2], bx
jne 0x1800339fc
mov cl, r12b
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180033a08
test cl, cl
jne 0x180033a17
mov edx, 0x20000c
mov rcx, rsi
call fcn.180032858
mov edx, dword [rdi]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180033a33
mov eax, dword [rdi + 8]
cmp dword [rdi + 4], eax
jne 0x180033a2f
mov dword [rdi + 8], edx
mov dword [rdi + 4], edx
jmp 0x180033a33
mov dword [rdi], eax
mov edx, eax
mov rcx, rsi
call fcn.180031174
mov rdx, rdi
mov dword [rdi], eax
mov rcx, rsi
mov dword [rsi + 0x5c], eax
call fcn.1800317d4
jmp 0x180033aa0
mov rax, qword [rsi + 0x20]
mov rcx, rsi
movzx ebx, word [rax + rdx*2]
mov edx, 0x200004
call fcn.180032858
mov edx, 0x600005
mov rcx, rsi
call fcn.180032858
mov edx, 0x600001
mov rcx, rsi
call fcn.180032858
mov eax, 0xa
cmp bx, ax
je 0x180033a99
test r15b, r15b
je 0x180033a99
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], ecx
mov dword [rdi], ecx
mov byte [rsi + 0xe84], 0
mov edi, dword [rbp + 0x1f8]
lea rax, [rsi + 0xe85]
mov dword [rsi + 0xe80], 0xbe99999a
xor r9d, r9d
jmp 0x180033b10
lea rbx, [rsi + 0xe85]
mov cl, byte [rbx]
cmp byte [r14 + 0xa48], r9b
je 0x180033bae
test cl, cl
jne 0x180033bae
test al, al
je 0x180033b07
lea rdx, [rsi + 0x54]
mov rcx, rsi
cmp byte [r14 + 0x125], r9b
je 0x180033af5
call fcn.18003162c
jmp 0x180033afa
call fcn.1800315cc
mov dword [rsi + 0xe80], 0xbe99999a
xor r9d, r9d
mov rax, rbx
mov r12d, 1
cmp byte [rax], r9b
je 0x180033b21
cmp byte [r14 + 0x110], r9b
jne 0x180033b21
mov byte [rax], r9b
bt edi, 0xa
jae 0x180033b83
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18000fd1c
mov ecx, dword [rsp + 0x5c]
xor r9d, r9d
test al, al
je 0x180033b87
test cl, cl
jne 0x180033b87
lea eax, [r9 + 2]
mov dword [rsp + 0x70], 9
mov r9, qword [rbp + 0x200]
lea rdx, [rsp + 0x70]
mov r8d, edi
mov dword [rsp + 0x28], eax
mov rcx, r14
call fcn.180032a10
xor r9d, r9d
test al, al
je 0x180033b83
mov edx, dword [rsp + 0x70]
mov rcx, rsi
call fcn.180032858
xor r9d, r9d
mov ecx, dword [rsp + 0x5c]
cmp byte [r14 + 0x124], r9b
je 0x180033b99
cmp byte [r14 + 0x126], r9b
je 0x180033ba9
cmp byte [rsp + 0x60], r9b
je 0x180033bff
cmp byte [r14 + 0x127], r9b
je 0x180033bff
mov al, r12b
jmp 0x180033c02
mov rax, rbx
cmp byte [r14 + 0x110], r9b
je 0x180033b0a
test cl, cl
jne 0x180033b0a
ucomiss xmm11, dword [r14 + 0xf4]
jne 0x180033bde
ucomiss xmm11, dword [r14 + 0xf8]
je 0x180033b0a
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.18003162c
mov r12d, 1
mov rax, rbx
mov byte [rsi + 0xe84], r12b
jmp 0x180033aad
mov al, r9b
lea rbx, [r14 + 0xac0]
cmp dword [rbx], r9d
jle 0x180033cb7
test al, al
jne 0x180033c91
test cl, cl
jne 0x180033c91
cmp byte [rbp + 0x208], r9b
jne 0x180033c91
mov r13d, dword [rbp + 0x1f8]
mov r15d, r9d
mov rdi, r9
mov rax, qword [r14 + 0xac8]
movzx ecx, word [rdi + rax]
mov dword [rbp + 0x208], ecx
cmp ecx, 9
je 0x180033c7d
mov r9, qword [rbp + 0x200]
lea rdx, [rbp + 0x208]
mov eax, 2
mov r8d, r13d
mov rcx, r14
mov dword [rsp + 0x28], eax
call fcn.180032a10
xor r9d, r9d
test al, al
je 0x180033c80
mov edx, dword [rbp + 0x208]
mov rcx, rsi
call fcn.180032858
xor r9d, r9d
add r15d, r12d
add rdi, 2
cmp r15d, dword [rbx]
jl 0x180033c30
mov r13d, dword [rsp + 0x6c]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x180033cb4
mov eax, ecx
cdq
sub eax, edx
mov edx, r9d
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.180016d08
xor r9d, r9d
mov dword [rbx], r9d
mov r12b, r9b
mov byte [rbp + 0x208], r9b
cmp dword [r14 + 0x1240], r13d
jne 0x1800346e8
cmp byte [r14 + 0x124c], r9b
jne 0x1800346e8
cmp byte [rsp + 0x58], r9b
jne 0x1800346e8
mov r15b, byte [rsp + 0x60]
movaps xmm0, xmm13
subss xmm0, dword [r14 + 0xb10]
mov r12d, 1
mov ecx, r12d
divss xmm0, dword [r14 + 0xf18]
cvttss2si eax, xmm0
cmp eax, r12d
cmovge ecx, eax
mov dword [rsi + 0x64], ecx
mov al, byte [r14 + 0x125]
neg al
mov dword [rsp + 0x70], ecx
lea rcx, [r14 + 0x124]
sbb ebx, ebx
mov qword [rbp - 0x68], rcx
and ebx, 0x400000
mov qword [rbp - 8], rcx
test r15b, r15b
je 0x180033d7c
lea rax, [r14 + 0x126]
mov dil, byte [rax]
mov byte [rsp + 0x50], dil
mov qword [rbp - 0x30], rax
cmp byte [r14 + 0x127], r9b
je 0x180033d8d
mov byte [rsp + 0x50], dil
cmp byte [rcx], r9b
jne 0x180033d8d
mov byte [rsp + 0x50], dil
test dil, dil
jne 0x180033d8d
mov byte [rsp + 0x52], r12b
mov byte [rsp + 0x50], dil
jmp 0x180033d92
mov al, byte [rcx]
mov byte [rsp + 0x50], al
lea rax, [r14 + 0x126]
mov qword [rbp - 0x30], rax
mov byte [rsp + 0x52], r9b
mov r8d, r12d
mov edx, r13d
mov ecx, 0xa39
call fcn.18000fd1c
xor ecx, ecx
test al, al
jne 0x180033dbe
mov r8d, r12d
mov edx, r13d
mov ecx, 0x220a
call fcn.18000fd1c
xor ecx, ecx
test al, al
je 0x180033de5
mov r12d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x64]
test r12b, r12b
jne 0x180033dee
cmp byte [rbp - 0x60], cl
jne 0x180033dee
test dil, dil
je 0x180033dde
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180033dee
mov byte [rsp + 0x68], 1
jmp 0x180033df2
mov edi, dword [rsp + 0x64]
mov r12d, dword [rsp + 0x5c]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r13d
mov ecx, 0xa24
call fcn.18000fd1c
test al, al
jne 0x180033e1a
xor r8d, r8d
mov edx, r13d
mov ecx, 0x1209
call fcn.18000fd1c
test al, al
je 0x180033e3b
xor eax, eax
cmp byte [rbp - 0x60], al
jne 0x180033e3b
test dil, dil
je 0x180033e2e
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180033e3b
mov eax, 1
xor edi, edi
mov byte [rsp + 0x75], al
jmp 0x180033e45
xor edi, edi
mov byte [rsp + 0x75], dil
lea eax, [rdi + 1]
mov r8d, eax
mov edx, r13d
mov ecx, 0xa37
call fcn.18000fd1c
test al, al
jne 0x180033e70
mov r8d, 1
mov edx, r13d
mov ecx, 0x2209
call fcn.18000fd1c
test al, al
je 0x180033e80
test r12b, r12b
jne 0x180033e80
mov eax, 1
mov byte [rsp + 0x61], al
jmp 0x180033e8a
mov byte [rsp + 0x61], dil
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3b
call fcn.18000fd1c
mov edi, dword [rbp - 0x70]
test al, al
je 0x180033eb6
test r12b, r12b
jne 0x180033eb6
test dil, dil
je 0x180033eb6
mov eax, 1
mov byte [rsp + 0x74], al
jmp 0x180033ec0
mov byte [rsp + 0x74], 0
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3a
call fcn.18000fd1c
test al, al
jne 0x180033ef5
test r15b, r15b
je 0x180033f0d
mov r8d, 1
mov edx, r13d
mov ecx, 0x2a3b
call fcn.18000fd1c
xor r15d, r15d
test al, al
je 0x180033f10
jmp 0x180033ef8
xor r15d, r15d
test r12b, r12b
jne 0x180033f10
test dil, dil
je 0x180033f10
mov r12d, 1
mov r13b, r12b
jmp 0x180033f19
xor r15d, r15d
mov r13b, r15b
mov r12d, 1
mov edx, dword [rsp + 0x6c]
xor r8d, r8d
mov ecx, 0xa22
call fcn.18000fd1c
mov byte [rsp + 0x77], al
mov eax, 2
test byte [r14 + 8], al
je 0x180033f42
mov dil, r12b
test byte [r14 + 0xc], r12b
jne 0x180033f45
mov dil, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.18000e604
test al, al
jne 0x180033f6e
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.18000e604
test al, al
jne 0x180033f6e
mov r12b, r15b
test dil, dil
je 0x180033fa3
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.18000e604
test al, al
jne 0x180033f99
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.18000e604
test al, al
je 0x180033fa3
mov eax, 1
mov r15b, al
jmp 0x180033fa8
mov eax, 1
mov edx, dword [rsp + 0x6c]
mov r8d, eax
mov ecx, 0x20e
call fcn.18000fd1c
xor ecx, ecx
test al, al
jne 0x180033fe6
test dil, dil
je 0x180033fdc
mov edx, dword [rsp + 0x6c]
lea r8d, [rcx + 1]
mov ecx, 0x26c
call fcn.18000fd1c
xor ecx, ecx
test al, al
jne 0x180033fe6
mov dil, cl
mov eax, 1
jmp 0x180033fee
mov eax, 1
mov dil, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.18000e604
xor ecx, ecx
test al, al
je 0x180034036
neg byte [rsp + 0x50]
mov eax, 0x200004
sbb edx, edx
and edx, 0xc
add edx, 0x200000
cmp byte [rsp + 0x52], cl
cmovne edx, eax
or edx, ebx
mov rcx, rsi
call fcn.180032858
xor r9d, r9d
mov r10d, 1
jmp 0x1800346ba
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.18000e604
xor ecx, ecx
test al, al
je 0x180034062
neg byte [rsp + 0x50]
mov eax, 0x200005
sbb edx, edx
and edx, 0xc
add edx, 0x200001
jmp 0x180034017
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.18000e604
xor r9d, r9d
test al, al
je 0x1800340cf
cmp byte [rsp + 0x64], r9b
je 0x1800340cf
mov rax, qword [rbp - 8]
cmp byte [rax], r9b
je 0x1800340be
mov rdx, qword [rbp - 0x58]
movss xmm0, dword [rdx + 0x88]
subss xmm0, dword [r14 + 0xf18]
maxss xmm0, xmm11
movss dword [rdx + 0x98], xmm0
mov dword [rdx + 0xa0], r9d
mov dword [rdx + 0xa8], r9d
jmp 0x18003402b
movzx eax, byte [rsp + 0x52]
lea edx, [rax*4 + 0x200002]
jmp 0x18003401e
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.18000e604
xor r9d, r9d
test al, al
je 0x180034134
cmp byte [rsp + 0x64], r9b
je 0x180034134
mov rax, qword [rbp - 8]
cmp byte [rax], r9b
je 0x180034123
mov rdx, qword [rbp - 0x58]
mov rax, qword [0x180052720]
movss xmm0, dword [rdx + 0x88]
addss xmm0, dword [r14 + 0xf18]
mov rcx, qword [rax + 0x11e0]
minss xmm0, dword [rcx + 0x90]
jmp 0x1800340a3
movzx eax, byte [rsp + 0x52]
lea edx, [rax*4 + 0x200003]
jmp 0x18003401e
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.18000e604
xor ecx, ecx
test al, al
je 0x18003417b
cmp byte [rsp + 0x64], cl
je 0x18003417b
or ebx, 0x20000e
mov rcx, rsi
mov edx, ebx
call fcn.180032858
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [r14 + 0xf18]
subss xmm6, xmm0
jmp 0x180034028
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.18000e604
xor ecx, ecx
test al, al
je 0x1800341c2
cmp byte [rsp + 0x64], cl
je 0x1800341c2
or ebx, 0x20000f
mov rcx, rsi
mov edx, ebx
call fcn.180032858
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [r14 + 0xf18]
addss xmm6, xmm0
jmp 0x180034028
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.18000e604
test al, al
je 0x1800341ef
mov rax, qword [rbp - 8]
mov al, byte [rax]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18003401e
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.18000e604
test al, al
je 0x180034212
mov rax, qword [rbp - 8]
mov al, byte [rax]
neg al
mov eax, 0x200005
jmp 0x1800341e3
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.18000e604
xor ecx, ecx
test al, al
je 0x18003425c
cmp byte [rsp + 0x5c], cl
jne 0x18003425c
cmp byte [rsp + 0x68], cl
jne 0x18003425c
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18003424f
cmp byte [rsp + 0x50], cl
je 0x18003424f
mov edx, 0x60000d
mov rcx, rsi
call fcn.180032858
or ebx, 0x200008
mov edx, ebx
jmp 0x180034020
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.18000e604
mov r8d, dword [rsp + 0x5c]
xor r9d, r9d
test al, al
je 0x1800342ca
test r8b, r8b
jne 0x1800342ca
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x1800342c2
cmp byte [rsp + 0x50], r9b
je 0x180034293
mov edx, 0x60000c
jmp 0x1800342ba
cmp byte [rsp + 0x60], r9b
je 0x1800342c2
cmp byte [r14 + 0x127], r9b
je 0x1800342c2
mov rax, qword [rbp - 0x30]
cmp byte [rax], r9b
jne 0x1800342c2
mov rax, qword [rbp - 0x68]
cmp byte [rax], r9b
jne 0x1800342c2
mov edx, 0x600004
mov rcx, rsi
call fcn.180032858
or ebx, 0x200009
jmp 0x180034255
test r12b, r12b
jne 0x18003461e
test r15b, r15b
jne 0x18003461e
test dil, dil
je 0x180034347
test dword [rbp + 0x1f8], 0x100000
je 0x180034321
mov rax, qword [rbp + 0x1e0]
mov al, byte [rax]
test al, al
jne 0x18003430b
mov byte [rsp + 0x54], r9b
mov byte [rbp + 0x1d8], r9b
mov byte [rsp + 0x58], 1
setne r12b
mov r10d, 1
mov byte [rbp + 0x208], r12b
jmp 0x1800346c1
mov r10d, 1
mov dl, r9b
mov r12b, r10b
mov byte [rbp + 0x208], r10b
mov byte [rsp + 0x58], r10b
mov cl, r9b
mov byte [rbp + 0x1d8], dl
jmp 0x1800346cb
movzx eax, byte [rsp + 0x74]
test al, al
jne 0x1800345fd
test r13b, r13b
jne 0x1800345fd
cmp byte [rsp + 0x77], r9b
je 0x180034387
mov eax, dword [rsi + 0xc]
mov r10d, 1
mov byte [rsi + 0xe84], r10b
mov dword [rsi + 0x58], r9d
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], r9b
jmp 0x1800346ba
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x180034503
cmp byte [rsp + 0x75], r9b
jne 0x180034503
cmp byte [rsp + 0x61], r9b
je 0x18003402b
mov rax, qword [0x180052720]
mov rdx, qword [rax + 0xa8]
test rdx, rdx
je 0x1800343df
mov rcx, qword [rax + 0xb8]
call rdx
xor r9d, r9d
mov rbx, rax
test rax, rax
je 0x18003402b
mov rax, qword [0x180052720]
jmp 0x1800343e6
lea rbx, [0x18004574e]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r9b
jne 0x1800343ea
test rax, rax
je 0x1800343fe
inc dword [rax + 0xf0]
movsxd rcx, ecx
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r13d, r13d
mov qword [rbp - 0x30], rax
mov r15, rax
mov edi, r13d
cmp byte [rbx], r13b
je 0x180034485
mov r15d, dword [rbp + 0x1f8]
lea esi, [r13 + 1]
mov r12, rax
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.18000280c
mov r9, qword [rbp + 0x200]
lea rdx, [rsp + 0x70]
movsxd rcx, eax
mov r8d, r15d
add rbx, rcx
mov dword [rsp + 0x28], 4
mov rcx, r14
call fcn.180032a10
test al, al
je 0x180034478
movzx eax, word [rsp + 0x70]
add edi, esi
mov word [r12], ax
add r12, 2
cmp byte [rbx], r13b
jne 0x18003442f
mov rsi, qword [rbp - 0x10]
mov r15, qword [rbp - 0x30]
movsxd rax, edi
mov word [r15 + rax*2], r13w
test edi, edi
jle 0x1800344de
lea rbx, [rsi + 0x54]
mov rcx, rsi
mov rdx, rbx
call fcn.1800317d4
mov rcx, rsi
call fcn.180031890
mov edx, dword [rbx]
mov r9d, edi
mov r8, r15
mov rcx, rsi
call fcn.180031344
test al, al
je 0x1800344d3
mov edx, dword [rbx]
lea rcx, [rbx + 0x20]
mov r9d, edi
xor r8d, r8d
call fcn.180032484
add dword [rbx], edi
mov byte [rbx + 0x16], r13b
mov eax, 1
mov byte [rsi + 0xe84], al
test r15, r15
je 0x1800344f5
mov rax, qword [0x180052720]
test rax, rax
je 0x1800344f5
dec dword [rax + 0xf0]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180034028
cmp qword [r14 + 0xb0], r9
je 0x1800345a8
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
cmp ecx, eax
je 0x180034524
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x18003452a
mov eax, dword [rsi + 0xc]
mov edx, r9d
movsxd r15, eax
mov rax, qword [rsi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.180002c0c
mov edx, 1
lea edi, [rdx + rax]
mov rax, qword [0x180052720]
test rax, rax
je 0x18003455b
add dword [rax + 0xf0], edx
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rsi + 0x20]
mov edx, edi
mov rbx, rax
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov rcx, rax
call fcn.180002b6c
mov rcx, rbx
call fcn.180005ee4
test rbx, rbx
je 0x18003459c
mov rcx, qword [0x180052720]
test rcx, rcx
je 0x18003459c
dec dword [rcx + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
test r13b, r13b
je 0x18003402b
mov eax, dword [rsi + 0x5c]
lea rbx, [rsi + 0x54]
cmp dword [rsi + 0x58], eax
jne 0x1800345cd
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rbx], eax
mov dword [rsi + 0x58], r9d
mov byte [rsi + 0x6a], r9b
mov r10d, 1
mov byte [rsi + 0xe84], r10b
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x1800346ba
mov rdx, rbx
mov rcx, rsi
call fcn.180031890
xor r9d, r9d
mov byte [rbx + 0x16], r9b
jmp 0x18003402b
mov edx, eax
mov rcx, rsi
xor edx, 1
add edx, 0x20000a
call fcn.180032858
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x180034028
mov edx, dword [rbp + 0x1f8]
mov r10d, 1
mov ecx, dword [rsp + 0x64]
mov eax, edx
shr eax, 0xb
and al, r10b
test cl, cl
je 0x18003464c
test r15b, r15b
jne 0x18003464c
test al, al
mov rax, qword [rbp - 0x68]
je 0x18003466e
cmp byte [rax], r9b
jne 0x180034673
mov byte [rsp + 0x59], r10b
cmp byte [r14 + 0x5c], r9b
je 0x1800346b5
test cl, cl
jne 0x1800346b5
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], r9d
mov byte [rsi + 0x6a], r9b
jmp 0x1800346ba
cmp byte [rax], r9b
jne 0x18003464c
test r8b, r8b
jne 0x1800346ba
mov r9, qword [rbp + 0x200]
mov eax, 0xa
mov dword [rsp + 0x70], eax
mov r8d, edx
mov eax, 2
lea rdx, [rsp + 0x70]
mov rcx, r14
mov dword [rsp + 0x28], eax
call fcn.180032a10
xor r9d, r9d
test al, al
je 0x18003402b
mov edx, dword [rsp + 0x70]
jmp 0x180034020
mov byte [rsp + 0x58], r10b
mov r12b, byte [rbp + 0x208]
mov ecx, dword [rsp + 0x54]
mov dl, byte [rbp + 0x1d8]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x1800346da
mov al, r10b
test dl, dl
jne 0x1800346dd
mov al, r9b
mov r13d, dword [rsp + 0x6c]
or cl, al
mov dword [rsp + 0x54], ecx
mov r15d, r9d
mov qword [rbp - 0x70], r9
cmp dword [r14 + 0x1240], r13d
jne 0x180034eb8
test r12b, r12b
je 0x180034893
cmp byte [rsp + 0x5c], r9b
jne 0x180034968
test dword [rbp + 0x1f8], 0x100000
je 0x180034762
lea rax, [0x18004574e]
mov dword [rsp + 0x20], r9d
mov r9d, dword [rsi + 0xc]
lea rdx, [rsi + 0x54]
xor r8d, r8d
mov qword [rbp - 0x70], rax
mov rcx, rsi
mov byte [rsp + 0x51], 1
call fcn.180032768
mov r8d, dword [rsi + 0xc]
xor edx, edx
mov rcx, rsi
call fcn.1800312b8
xor r9d, r9d
mov qword [rsi + 0x58], r9
mov dword [rsi + 0x54], r9d
jmp 0x180034860
mov rax, qword [rbp + 0x1e0]
mov r10d, 1
mov r8, qword [rsi + 0x40]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180034789
add rax, r10
test ecx, ecx
jne 0x180034776
test edx, edx
je 0x180034860
mov r15d, dword [rsi + 0x38]
mov ebx, r9d
mov r13, qword [rsi + 0x40]
sub r15d, r10d
mov qword [rbp - 0x70], r13
mov rdi, r9
mov byte [rsp + 0x51], r10b
test r15d, r15d
jle 0x180034822
movsxd r12, r15d
mov rcx, r13
add r12, r13
mov rdx, r12
call fcn.180002a4c
mov r8d, 1
xor edx, edx
lea ebx, [r8 + rax]
test ebx, ebx
jle 0x180034803
lea ecx, [rdx + 8]
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x180034803
mov rcx, qword [0x180052720]
test rcx, rcx
je 0x1800347f2
add dword [rcx + 0xf0], r8d
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
xor edx, edx
mov qword [rsp + 0x20], rdx
mov r9, r12
mov edx, ebx
mov r8, r13
mov rcx, rdi
call fcn.1800029ac
mov r12b, byte [rbp + 0x208]
xor r9d, r9d
lea ecx, [rbx - 1]
test r15d, r15d
lea rdx, [rsi + 0x54]
mov r8, rdi
cmovg r9d, ecx
mov rcx, rsi
call fcn.1800327d4
test rdi, rdi
je 0x18003485b
mov rax, qword [0x180052720]
test rax, rax
je 0x180034852
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r13d, dword [rsp + 0x6c]
mov eax, 1
mov byte [rsi + 0x48], al
mov eax, dword [rsi + 0x18]
mov ecx, dword [rsi + 0x2c]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x180034947
test ecx, ecx
je 0x180034932
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180034937
mov byte [rsp + 0x51], r9b
mov qword [rbp - 0x70], r9
cmp byte [rsp + 0x5c], r9b
je 0x180034860
mov r12d, dword [rbp + 0x1f8]
test r12d, 0x801c0
je 0x180034e5f
mov ebx, 0x40
mov edi, r9d
test bl, r12b
je 0x1800348df
mov edx, r13d
xor r8d, r8d
mov r13d, 0x200
mov ecx, r13d
call fcn.18000fd1c
xor r9d, r9d
test al, al
jne 0x18003492a
test r12b, r12b
jns 0x180034acd
mov ebx, 1
mov r13d, 0x203
mov r8d, ebx
mov ecx, r13d
xor edx, edx
call fcn.18000e604
xor r9d, r9d
test al, al
jne 0x180034925
mov r13d, 0x204
mov r8d, ebx
mov ecx, r13d
xor edx, edx
call fcn.18000e604
xor r9d, r9d
test al, al
je 0x180034acd
mov ebx, 0x80
mov edi, r13d
jmp 0x180034aee
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x28]
mov edx, ebx
cmovg edx, eax
call fcn.180016c7c
mov dword [rsi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rsi + 0x20]
mov edx, ebx
mov rcx, qword [rsi + 0x30]
call fcn.180002b6c
xor r9d, r9d
test r12b, r12b
je 0x1800348a3
cmp byte [rsp + 0x59], r9b
je 0x180034980
mov r12d, dword [rbp + 0x1f8]
test r12b, 0x20
jne 0x1800348aa
mov rdi, qword [rbp + 0x1e0]
mov r11d, dword [rsp + 0x5c]
mov r13d, dword [rsp + 0x78]
mov r10, qword [rbp - 0x70]
mov r12d, dword [rsp + 0x6c]
cmp dword [r14 + 0x2db8], r12d
jne 0x180034a32
cmp dword [r14 + 0x1240], r12d
je 0x180034a2b
mov r9, qword [0x180052720]
call fcn.180008798
xor ecx, ecx
test al, al
je 0x180034a28
cmp byte [r9 + 0x1275], cl
jne 0x1800349dd
cmp dword [r9 + 0x1240], ecx
jne 0x180034a28
cmp byte [r9 + 0x1250], cl
je 0x180034a28
xor r9d, r9d
test r11b, r11b
jne 0x180034a2b
mov r9, qword [r14 + 0x2dc8]
mov r8, rdi
mov rax, r9
sub r8, r9
mov r11d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180034a0e
add rax, r11
test ecx, ecx
jne 0x1800349fb
test edx, edx
je 0x180034a28
mov r15d, dword [r14 + 0x2dc0]
mov r10, r9
sub r15d, r11d
mov qword [rbp - 0x70], r9
mov byte [rsp + 0x51], r11b
xor r9d, r9d
mov dword [r14 + 0x2db8], r9d
test r10, r10
je 0x180034f0a
test r13b, r13b
je 0x180034ed1
mov eax, dword [rbp + 0x1f8]
lea rcx, [rbp + 0x60]
mov dword [rbp + 0x6c], eax
xorps xmm0, xmm0
lea eax, [r15 + 1]
mov qword [rbp + 0x78], r9
cmp dword [rbp + 0x1e8], eax
movdqa xmmword [rbp + 0x90], xmm0
cmovge eax, dword [rbp + 0x1e8]
mov dword [rbp + 0x8c], eax
mov qword [rbp + 0x60], r14
mov dword [rbp + 0x68], 0x40000
mov qword [rbp + 0x80], rdi
mov dword [rbp + 0x88], r15d
mov qword [rbp + 0x70], r9
call qword [rbp + 0x200]
mov ecx, dword [rbp + 0x8c]
mov rdi, qword [rbp + 0x80]
mov r10, qword [rbp - 0x70]
mov qword [rbp + 0x1e0], rdi
lea r15d, [rcx - 1]
cmp dword [rbp + 0x88], r15d
cmovl r15d, dword [rbp + 0x88]
xor r9d, r9d
jmp 0x180034ed7
mov ebx, 0x80000
test ebx, r12d
je 0x180034ae0
cmp byte [rsi + 0xe86], r9b
jne 0x180034aee
mov eax, 0x100
mov ebx, r9d
test eax, r12d
cmovne ebx, eax
test ebx, ebx
je 0x180034e5f
mov rax, qword [rbp + 0x1e0]
mov dword [rbp + 0x38], r9d
mov word [rbp + 0x51], r9w
mov byte [rbp + 0x53], r9b
mov qword [rbp + 0x20], r14
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x2c], r12d
mov qword [rbp + 0x30], r9
cmp byte [rsp + 0x5c], r9b
jne 0x180034b24
mov rax, qword [rsi + 0x30]
mov r11, qword [rsi + 0x20]
mov qword [rbp + 0x40], rax
mov rcx, r11
mov eax, dword [rsi + 0x10]
mov dword [rbp + 0x48], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbp + 0x4c], eax
movsxd rax, dword [rsi + 0x54]
mov dword [rbp + 0x3c], edi
mov byte [rbp + 0x50], r9b
lea rdx, [r11 + rax*2]
call fcn.180002c0c
movsxd rdx, dword [rsi + 0x58]
mov rcx, r11
mov ebx, eax
mov dword [rbp + 0x54], eax
lea rdx, [r11 + rdx*2]
call fcn.180002c0c
movsxd rdx, dword [rsi + 0x5c]
mov rcx, r11
mov dword [rbp + 0x208], eax
mov dword [rbp + 0x58], eax
lea rdx, [r11 + rdx*2]
call fcn.180002c0c
lea rcx, [rbp + 0x20]
mov dword [rsp + 0x70], eax
mov dword [rbp + 0x5c], eax
call qword [rbp + 0x200]
movsxd r13, dword [rbp + 0x54]
mov rdi, qword [rbp + 0x40]
mov r12b, byte [rbp + 0x50]
cmp r13d, ebx
jne 0x180034ba7
xor r9d, r9d
test r12b, r12b
je 0x180034bc4
lea rdx, [rdi + r13]
mov rcx, rdi
call fcn.180002a4c
mov dword [rsi + 0x54], eax
xor r9d, r9d
mov eax, 1
mov byte [rsi + 0xe84], al
movsxd rbx, dword [rbp + 0x58]
cmp ebx, dword [rbp + 0x208]
jne 0x180034bd5
test r12b, r12b
je 0x180034bf1
cmp ebx, r13d
jne 0x180034bdf
mov eax, dword [rsi + 0x54]
jmp 0x180034beb
lea rdx, [rdi + rbx]
mov rcx, rdi
call fcn.180002a4c
mov dword [rsi + 0x58], eax
xor r9d, r9d
movsxd rax, dword [rbp + 0x5c]
cmp eax, dword [rsp + 0x70]
jne 0x180034c04
test r12b, r12b
je 0x180034e5f
cmp eax, ebx
jne 0x180034c0d
mov eax, dword [rsi + 0x58]
jmp 0x180034c1c
lea rdx, [rdi + rax]
mov rcx, rdi
call fcn.180002a4c
xor r9d, r9d
mov dword [rsi + 0x5c], eax
test r12b, r12b
je 0x180034e5f
mov rax, qword [rsi + 0x20]
mov rcx, rdi
mov rbx, qword [0x180052720]
mov qword [rbp - 0x30], rax
mov eax, dword [rsi + 0xc]
mov dword [rbp + 0x208], eax
movsxd rax, dword [rbp + 0x48]
add rax, rdi
mov rdx, rax
mov qword [rbp - 0x10], rax
call fcn.180002a4c
mov r13d, eax
lea r12, [rbx + 0x3170]
lea ecx, [rax*2 + 2]
cmp ecx, dword [rbx + 0x316c]
jle 0x180034cc1
mov rax, qword [r12]
test rax, rax
je 0x180034c94
test rbx, rbx
je 0x180034c83
dec dword [rbx + 0xf0]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea ecx, [r13*2 + 2]
mov rax, qword [0x180052720]
test rax, rax
je 0x180034ca6
inc dword [rax + 0xf0]
movsxd rcx, ecx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r12], rax
lea eax, [r13*2 + 2]
mov dword [rbx + 0x316c], eax
mov r12, qword [r12]
lea edx, [r13 + 1]
mov r9, qword [rbp - 0x10]
xor ebx, ebx
mov rcx, r12
mov qword [rsp + 0x20], rbx
mov r8, rdi
call fcn.1800029ac
mov r10d, dword [rbp + 0x208]
mov eax, r13d
cmp r10d, r13d
mov edx, ebx
cmovl eax, r10d
movsxd r11, eax
test eax, eax
jle 0x180034d31
mov rcx, qword [rbp - 0x30]
lea r10d, [rbx + 1]
mov r9, r12
lea r14d, [rbx + 2]
sub r9, rcx
mov r8d, ebx
movzx eax, word [r9 + rcx]
cmp word [rcx], ax
jne 0x180034d26
add edx, r10d
add r8, r10
add rcx, r14
cmp r8, r11
jl 0x180034d0e
mov r14, qword [rbp + 8]
mov r10d, dword [rbp + 0x208]
cmp edx, r10d
jne 0x180034d3f
cmp edx, r13d
je 0x180034de4
lea ebx, [r10 - 1]
movsxd rdi, edx
movsxd rcx, ebx
lea r9d, [r13 - 1]
cmp rcx, rdi
jl 0x180034d7f
mov r10, qword [rbp - 0x30]
movsxd r8, r9d
cmp r8, rdi
jl 0x180034d7f
movzx eax, word [r12 + r8*2]
cmp word [r10 + rcx*2], ax
jne 0x180034d7f
mov eax, 1
sub ebx, eax
sub rcx, rax
sub r9d, eax
sub r8, rax
cmp rcx, rdi
jge 0x180034d59
sub r9d, edx
sub ebx, edx
mov r13d, 1
xor r12d, r12d
add r9d, r13d
lea r8d, [rbx + 1]
test r9d, r9d
jg 0x180034d9e
test r8d, r8d
jle 0x180034de7
lea rcx, [rsi + 0x74]
call fcn.180032484
mov rdx, rax
test rax, rax
je 0x180034de7
movsxd r9, ebx
inc r9
test r9, r9
jle 0x180034de7
lea r8, [rdi + rdi]
mov r14d, 2
sub r8, rax
mov rax, qword [rsi + 0x20]
lea rcx, [r8 + rdx]
movzx ecx, word [rcx + rax]
mov word [rdx], cx
add rdx, r14
sub r9, r13
jne 0x180034dc7
mov r14, qword [rbp + 8]
jmp 0x180034de7
xor r12d, r12d
mov ebx, dword [rbp + 0x48]
mov eax, dword [rbp - 0x38]
mov r13d, dword [rsp + 0x78]
cmp ebx, eax
jle 0x180034e2f
test r13b, r13b
je 0x180034e2f
lea rdi, [rsi + 0x18]
sub ebx, eax
add ebx, dword [rdi]
mov ecx, dword [rdi + 4]
cmp ebx, ecx
jle 0x180034e2d
test ecx, ecx
je 0x180034e19
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180034e1e
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.180016d08
mov dword [rdi], ebx
mov r8, qword [rbp + 0x40]
xor r9d, r9d
mov edx, dword [rsi + 0x18]
mov rcx, qword [rsi + 0x20]
mov qword [rsp + 0x20], r12
call fcn.1800029ac
mov dword [rsi + 0xc], eax
xor r9d, r9d
mov eax, dword [rbp + 0x48]
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x180034e64
mov r13d, dword [rsp + 0x78]
mov r11d, dword [rsp + 0x5c]
mov rdi, qword [rbp + 0x1e0]
test r11b, r11b
jne 0x180034991
mov rax, qword [rsi + 0x30]
mov r8, rdi
sub r8, rax
mov ebx, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180034e9b
add rax, rbx
test ecx, ecx
jne 0x180034e88
test edx, edx
je 0x180034991
mov r10, qword [rsi + 0x30]
mov r15d, dword [rsi + 0x10]
mov qword [rbp - 0x70], r10
mov byte [rsp + 0x51], bl
jmp 0x180034995
mov rdi, qword [rbp + 0x1e0]
mov r10, r9
mov r11d, dword [rsp + 0x5c]
mov r13d, dword [rsp + 0x78]
jmp 0x180034995
mov ecx, dword [rbp + 0x1e8]
lea eax, [r15 + 1]
mov r15d, 1
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, r15
jb 0x180034f10
jbe 0x180034f03
lea r8, [rbx - 1]
mov rdx, r10
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r9d, r9d
mov byte [rbx + rdi - 1], r9b
jmp 0x180034f10
mov r15d, 1
cmp dword [r14 + 0x1240], r12d
jne 0x180034f35
cmp byte [rsp + 0x58], r9b
je 0x180034f2e
xor edx, edx
xor ecx, ecx
call fcn.180005924
xor r9d, r9d
jmp 0x180034f35
mov dword [r14 + 0x3164], r15d
mov r13d, dword [rsp + 0x64]
test r13b, r13b
jne 0x180034fa8
mov r8d, r15d
lea rcx, [rbp - 0x80]
mov edx, r12d
call fcn.1800048d8
mov rax, qword [0x180052720]
lea rcx, [rbp + 8]
movdqu xmm0, xmmword [rax + 0xc1c]
movups xmmword [rbp + 8], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp + 0x14], xmm0
call fcn.180002c54
movss xmm0, dword [r14 + 0xb14]
mov r8d, eax
mov rdx, qword [rbp - 0x78]
mov r9b, r15b
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180004620
xor r9d, r9d
mov r10, qword [rbp - 0x58]
movaps xmm0, xmm12
movss dword [rbp - 0x20], xmm7
movaps xmm1, xmm9
movss dword [rbp - 0x1c], xmm9
addss xmm0, xmm7
addss xmm1, xmm13
lea rax, [rbp + 0x208]
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
test r13b, r13b
je 0x180034ff1
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x208], xmm0
jmp 0x180035017
addss xmm7, dword [r14 + 0xb0c]
movaps xmm0, xmm9
addss xmm0, dword [r14 + 0xb10]
movss dword [rbp + 0x208], xmm7
movss dword [rbp + 0x20c], xmm0
movaps xmm8, xmm11
movsd xmm0, qword [rax]
movsd qword [rbp - 0x48], xmm0
movss dword [rbp + 0x208], xmm11
cmp byte [rsp + 0x76], r9b
je 0x18003503f
mov rdi, qword [rsi + 0x30]
mov qword [rbp + 0x1e0], rdi
mov r11b, byte [rbp + 0x1d8]
mov r8d, dword [rsp + 0x54]
test r11b, r11b
jne 0x180035165
test r8b, r8b
jne 0x180035165
test r13b, r13b
je 0x1800350ba
mov dl, byte [rdi]
lea rbx, [rdi + 1]
mov ecx, r9d
test dl, dl
je 0x180035089
mov r8d, 0xa
cmp dl, r8b
lea eax, [rcx + 1]
mov dl, byte [rbx]
cmovne eax, ecx
add rbx, r15
mov ecx, eax
test dl, dl
jne 0x180035075
sub rbx, r15
mov eax, 0xa
cmp byte [rbx], al
je 0x18003509d
cmp byte [rbx], 0xd
je 0x18003509d
add ecx, r15d
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
movss dword [rbp + 0x208], xmm12
mulss xmm8, dword [r14 + 0xf18]
jmp 0x1800350eb
cmp dword [r14 + 0x1240], r12d
jne 0x1800350c9
movsxd rbx, dword [rsi + 0x10]
jmp 0x1800350d6
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], r9b
jne 0x1800350cd
add rbx, rdi
mov rax, rbx
sub rax, rdi
cmp rax, 0x200000
jge 0x180035920
mov rax, qword [0x180052720]
lea r8, [rbp - 0x20]
test r13b, r13b
lea rcx, [rbp - 0x80]
cmovne r8, r9
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 0x74], xmm0
call fcn.180002c54
movss xmm2, dword [r14 + 0xf18]
lea r9, [rbp - 0x48]
mov rdx, qword [r14 + 0xf10]
mov rcx, qword [r10 + 0x298]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
call fcn.18001fb50
xor r9d, r9d
jmp 0x180035920
movsxd rax, dword [rsi + 0x10]
xor r10d, r10d
mov r15, qword [rsi + 0x20]
mov edx, 0xfffffc18
test r11b, r11b
mov qword [rbp - 0x10], rax
movaps xmm7, xmm11
movaps xmm9, xmm11
lea rbx, [rax + rdi]
mov r13d, r10d
mov qword [rbp - 0x30], rbx
lea r11d, [r10 + 1]
mov r12d, edx
mov ecx, r10d
je 0x1800351a9
movsxd rax, dword [rsi + 0x54]
or edx, 0xffffffff
mov ecx, r11d
lea r9, [r15 + rax*2]
test r8b, r8b
je 0x1800351c5
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
cmovl eax, dword [rsi + 0x58]
or r12d, 0xffffffff
cdqe
add ecx, r11d
lea r13, [r15 + rax*2]
movzx eax, byte [rsp + 0x64]
mov edi, r10d
movzx r8d, word [r15]
add ecx, eax
mov rax, r15
test r8w, r8w
je 0x180035224
mov ebx, 2
cmp r8w, word [rbp + 0x18]
jne 0x180035213
add edi, r11d
cmp edx, 0xffffffff
jne 0x1800351fe
cmp rax, r9
jb 0x1800351fe
sub ecx, r11d
mov edx, edi
test ecx, ecx
jle 0x180035220
cmp r12d, 0xffffffff
jne 0x180035213
cmp rax, r13
jb 0x180035213
sub ecx, r11d
mov r12d, edi
test ecx, ecx
jle 0x180035220
add rax, rbx
movzx r8d, word [rax]
test r8w, r8w
jne 0x1800351e1
mov rbx, qword [rbp - 0x30]
add edi, r11d
mov r8, r9
cmp edx, 0xffffffff
mov eax, edi
cmovne eax, edx
cmp r12d, 0xffffffff
mov dword [rbp + 0x18], eax
cmove r12d, edi
cmp r9, r15
jbe 0x180035258
mov ecx, 0xa
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x180035258
mov r8, rax
cmp rax, r15
ja 0x180035247
mov byte [rsp + 0x30], r10b
lea rcx, [rbp - 8]
mov rdx, r14
mov qword [rsp + 0x20], r10
call fcn.180030efc
movd xmm14, dword [rbp + 0x18]
xor r9d, r9d
movss xmm0, dword [r14 + 0xf18]
cvtdq2ps xmm14, xmm14
movss xmm10, dword [rax]
mulss xmm14, xmm0
test r12d, r12d
js 0x1800352e7
mov r8, r13
cmp r13, r15
jbe 0x1800352b0
lea ecx, [r9 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x1800352b0
mov r8, rax
cmp rax, r15
ja 0x18003529f
mov byte [rsp + 0x30], r9b
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x20], r9
mov rdx, r14
mov r9, r13
call fcn.180030efc
movss xmm0, dword [r14 + 0xf18]
xor r9d, r9d
movd xmm9, r12d
cvtdq2ps xmm9, xmm9
movss xmm7, dword [rax]
mulss xmm9, xmm0
mov r13d, dword [rsp + 0x64]
test r13b, r13b
je 0x180035308
movd xmm8, edi
cvtdq2ps xmm8, xmm8
movss dword [rbp + 0x208], xmm12
mulss xmm8, xmm0
mov r12b, byte [rbp + 0x1d8]
test r12b, r12b
je 0x180035432
cmp byte [rsi + 0xe84], r9b
je 0x180035432
test dword [rbp + 0x1f8], 0x1000
jne 0x180035381
comiss xmm10, dword [rsi + 0x50]
movaps xmm1, xmm12
movaps xmm0, xmm10
mulss xmm1, dword [0x18004cda4]
subss xmm12, dword [r14 + 0xb0c]
jae 0x180035360
subss xmm0, xmm1
maxss xmm0, xmm11
cvttss2si eax, xmm0
jmp 0x180035373
subss xmm0, xmm12
comiss xmm0, dword [rsi + 0x50]
jb 0x180035385
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x50], xmm0
jmp 0x180035385
mov dword [rsi + 0x50], r9d
test r13b, r13b
je 0x18003542b
movaps xmm0, xmm14
subss xmm0, dword [r14 + 0xf18]
comiss xmm0, xmm6
jae 0x1800353aa
movaps xmm6, xmm0
maxss xmm6, xmm11
jmp 0x1800353d9
movss xmm2, dword [r14 + 0xb10]
movaps xmm1, xmm13
addss xmm2, xmm2
movaps xmm0, xmm14
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x1800353d9
movaps xmm6, xmm14
subss xmm6, xmm13
addss xmm6, xmm2
comiss xmm6, xmm11
movss xmm2, dword [r14 + 0xb10]
jae 0x1800353ee
movaps xmm2, xmm11
jmp 0x180035405
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm13
maxss xmm2, xmm11
minss xmm2, xmm6
movss xmm1, dword [rbp - 0x44]
mov rax, qword [rbp - 0x58]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
addss xmm1, xmm0
movss dword [rbp - 0x44], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rsi + 0xe84], r9b
movss xmm12, dword [rsi + 0x50]
movss xmm13, dword [0x18004cdf8]
cmp byte [rsp + 0x54], r9b
je 0x1800356ad
mov edx, dword [rsi + 0x5c]
mov eax, edx
mov ecx, dword [rsi + 0x58]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea r8, [r15 + rax*2]
movsxd rax, edx
lea rdi, [r15 + rax*2]
test r12b, r12b
je 0x180035474
movaps xmm1, xmm13
jmp 0x18003547c
movss xmm1, dword [0x18004cdc8]
mov rax, qword [0x180052720]
lea rcx, [rbp - 0x80]
movdqu xmm0, xmmword [rax + 0xe9c]
mulss xmm1, dword [rax + 0xad0]
movups xmmword [rbp - 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x74], xmm0
call fcn.180002c54
mov r15d, eax
test r13b, r13b
je 0x1800354c1
movss dword [rbp - 0x40], xmm11
movaps xmm15, xmm11
jmp 0x1800354ca
movss xmm15, dword [0x18004ce20]
movss xmm6, dword [rbp - 0x44]
mov qword [rbp - 0x68], r8
addss xmm6, xmm9
addss xmm7, dword [rbp - 0x48]
subss xmm7, xmm12
cmp r8, rdi
jae 0x1800356ad
movss xmm1, dword [rbp - 0x14]
xor r12d, r12d
movss xmm3, dword [rbp - 0x1c]
movss xmm13, dword [rbp - 0x40]
mov r13, qword [rbp - 0x58]
lea ebx, [r12 + 1]
movaps xmm0, xmm1
addss xmm0, dword [r14 + 0xf18]
comiss xmm6, xmm0
ja 0x180035691
comiss xmm6, xmm3
jae 0x18003554e
cmp r8, rdi
jae 0x180035675
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rbp - 0x68], r8
cmp ax, cx
je 0x180035675
cmp r8, rdi
jb 0x18003552f
jmp 0x180035675
lea rax, [rbp - 0x68]
mov byte [rsp + 0x30], bl
mov r9, rdi
mov qword [rsp + 0x20], rax
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.180030efc
movss xmm5, dword [rbp + 8]
comiss xmm5, xmm11
ja 0x1800355ac
mov rax, qword [r14 + 0xf10]
cmp dword [rax], 0x20
jle 0x18003558f
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x180035594
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x18004cdc4]
cvttss2si eax, xmm0
movd xmm5, eax
cvtdq2ps xmm5, xmm5
movss dword [rbp + 8], xmm5
movss xmm3, dword [rbp - 0x1c]
movaps xmm1, xmm7
movss xmm11, dword [rbp - 0x20]
addss xmm1, xmm5
movaps xmm0, xmm13
movaps xmm9, xmm11
subss xmm0, dword [r14 + 0xf18]
maxss xmm9, xmm7
movaps xmm2, xmm15
movss xmm7, dword [rbp - 0x18]
addss xmm2, xmm6
movaps xmm5, xmm7
movaps xmm4, xmm3
minss xmm5, xmm1
movss xmm1, dword [rbp - 0x14]
addss xmm0, xmm6
movss dword [rbp - 0x80], xmm9
movss dword [rbp - 0x78], xmm5
maxss xmm4, xmm0
movaps xmm0, xmm1
minss xmm0, xmm2
movss dword [rbp - 0x7c], xmm4
comiss xmm3, xmm0
movss dword [rbp - 0x74], xmm0
jae 0x18003566d
comiss xmm1, xmm4
jbe 0x18003566d
comiss xmm11, xmm5
jae 0x18003566d
comiss xmm7, xmm9
jbe 0x18003566d
mov rcx, qword [r13 + 0x298]
lea r8, [rbp - 0x78]
xorps xmm11, xmm11
mov dword [rsp + 0x28], r12d
mov r9d, r15d
movss dword [rsp + 0x20], xmm11
lea rdx, [rbp - 0x80]
call fcn.18001f8b0
movss xmm2, dword [rbp - 0x40]
movss xmm1, dword [rbp - 0x14]
movss xmm3, dword [rbp - 0x1c]
movss dword [rbp - 0x40], xmm2
movss xmm13, dword [rbp - 0x40]
jmp 0x180035671
xorps xmm11, xmm11
mov r8, qword [rbp - 0x68]
movss xmm7, dword [rbp - 0x48]
subss xmm7, xmm12
addss xmm6, dword [r14 + 0xf18]
cmp r8, rdi
jb 0x180035507
movss xmm13, dword [0x18004cdf8]
xor r9d, r9d
mov rbx, qword [rbp - 0x30]
mov r13d, dword [rsp + 0x64]
mov r12b, byte [rbp + 0x1d8]
test r13b, r13b
jne 0x1800356c0
cmp qword [rbp - 0x10], 0x200000
jge 0x180035764
mov rax, qword [0x180052720]
lea r8, [rbp - 0x20]
test r13b, r13b
lea rcx, [rbp - 0x80]
cmovne r8, r9
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 0x74], xmm0
movss xmm0, dword [rbp - 0x48]
subss xmm0, xmm12
movss dword [rbp + 0x1d8], xmm0
movss xmm0, dword [rbp - 0x44]
movss dword [rbp + 0x1dc], xmm0
call fcn.180002c54
mov rcx, qword [rbp + 0x1e0]
lea r9, [rbp + 0x1d8]
mov rdi, qword [rbp - 0x58]
movss xmm2, dword [r14 + 0xf18]
mov rdx, qword [r14 + 0xf10]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rcx
mov rcx, qword [rdi + 0x298]
mov dword [rsp + 0x20], eax
call fcn.18001fb50
xor r9d, r9d
jmp 0x180035768
mov rdi, qword [rbp - 0x58]
test r12b, r12b
je 0x180035909
movss xmm0, dword [r14 + 0x18]
addss xmm0, dword [rsi + 0xe80]
movss dword [rsi + 0xe80], xmm0
cmp byte [r14 + 0x5b], r9b
je 0x1800357b5
comiss xmm0, xmm11
jbe 0x1800357b5
movss xmm1, dword [0x18004ce00]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
xor r9d, r9d
comiss xmm0, dword [0x18004cde4]
jbe 0x1800357b5
mov cl, r9b
lea esi, [r9 + 1]
jmp 0x1800357bd
mov esi, 1
mov cl, sil
movss xmm0, dword [rbp - 0x44]
addss xmm0, xmm14
addss xmm10, dword [rbp - 0x48]
subss xmm10, xmm12
cvttss2si eax, xmm10
movd xmm6, eax
cvtdq2ps xmm6, xmm6
cvttss2si eax, xmm0
movss dword [rbp - 0x80], xmm6
movaps xmm3, xmm6
addss xmm3, xmm13
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x78], xmm3
movaps xmm1, xmm7
movaps xmm2, xmm7
subss xmm1, dword [r14 + 0xf18]
subss xmm2, dword [0x18004ce08]
addss xmm1, dword [0x18004cdc4]
movss dword [rbp - 0x74], xmm2
movss dword [rbp - 0x7c], xmm1
test cl, cl
je 0x1800358b5
movss xmm0, dword [rbp - 0x1c]
comiss xmm0, xmm2
jae 0x1800358b5
movss xmm0, dword [rbp - 0x14]
comiss xmm0, xmm1
jbe 0x1800358b5
movss xmm0, dword [rbp - 0x20]
comiss xmm0, xmm3
jae 0x1800358b5
movss xmm0, dword [rbp - 0x18]
comiss xmm0, xmm6
jbe 0x1800358b5
mov rax, qword [0x180052720]
lea rcx, [rbp + 8]
movss dword [rbp + 0x1d8], xmm6
movss dword [rbp + 0x1dc], xmm2
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp + 8], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp + 0x14], xmm0
call fcn.180002c54
mov rcx, qword [rdi + 0x298]
lea rdx, [rbp - 0x80]
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rbp + 0x1d8]
call fcn.18001f664
xor r9d, r9d
movss xmm9, dword [rbp - 0x3c]
movss xmm10, dword [rbp - 0x50]
movss xmm14, dword [rbp]
mov r12d, dword [rsp + 0x6c]
cmp byte [rsp + 0x5c], r9b
jne 0x180035920
movss xmm0, dword [r14 + 0xf18]
subss xmm6, xmm13
subss xmm7, xmm0
movss dword [r14 + 0x2ef4], xmm0
mov byte [r14 + 0x2ee8], sil
movss dword [r14 + 0x2eec], xmm6
movss dword [r14 + 0x2ef0], xmm7
jmp 0x180035920
movss xmm9, dword [rbp - 0x3c]
movss xmm10, dword [rbp - 0x50]
movss xmm14, dword [rbp]
mov r12d, dword [rsp + 0x6c]
mov edi, dword [rbp - 0x60]
test dil, dil
je 0x180035930
call fcn.18000d6c8
xor r9d, r9d
test r13b, r13b
je 0x1800359ba
addss xmm8, dword [r14 + 0xb10]
movss xmm0, dword [rbp + 0x208]
lea rcx, [rbp + 0x1d8]
movss dword [rbp + 0x1d8], xmm0
movss dword [rbp + 0x1dc], xmm8
call fcn.18002f254
or dword [r14 + 0x1a68], 0x401
call fcn.180008a44
mov eax, dword [r14 + 0x1a84]
mov edi, dword [rbp + 0xa8]
and eax, 0x80
or edi, eax
call fcn.180010478
xor r9d, r9d
cmp dword [r14 + 0x1a7c], r9d
jne 0x1800359b7
mov eax, dword [rbp + 0xa4]
mov dword [r14 + 0x1a80], eax
mov dword [r14 + 0x1a7c], r12d
mov dword [r14 + 0x1a84], edi
mov edi, dword [rbp - 0x60]
cmp byte [r14 + 0x2fa8], r9b
je 0x1800359fe
test dil, dil
jne 0x1800359fe
mov rax, qword [0x180052720]
lea rcx, [0x18004bb4c]
mov rdx, qword [rbp + 0x1e0]
mov r8, rbx
mov qword [rax + 0x2fc8], rcx
lea rcx, [0x18004bb48]
mov qword [rax + 0x2fd0], rcx
lea rcx, [rbp - 0x48]
call fcn.180015354
comiss xmm14, xmm11
jbe 0x180035a38
addss xmm10, dword [r14 + 0xb24]
addss xmm9, dword [r14 + 0xb10]
mov rdx, qword [rbp + 0x1d0]
mov r9d, 1
xor r8d, r8d
movaps xmm0, xmm10
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180003e34
movzx r10d, byte [rsp + 0x51]
mov r9d, dword [rbp + 0x1f8]
test r10b, r10b
je 0x180035a59
bt r9d, 0x1b
jb 0x180035a59
mov ecx, r12d
call fcn.180005a78
movzx ecx, byte [rsp + 0x59]
test r9b, 0x20
mov eax, r10d
cmovne eax, ecx
jmp 0x180032f50