Function at 0x18002c480
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x288
mov r14, qword [0x180044c40]
mov rsi, rcx
movaps xmmword [rax - 0x58], xmm6
mov ecx, 1
movaps xmmword [rax - 0x68], xmm7
xor edi, edi
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [r14 + 0x11e0]
mov qword [rbp - 8], r14
mov byte [rax + 0xb8], cl
mov r12, qword [r14 + 0x11e0]
cmp byte [r12 + 0xbb], dil
jne 0x18002c6fe
mov ebx, dword [rbp + 0x1f8]
mov eax, ebx
shr eax, 0xe
mov r13d, ebx
and al, cl
shr r13d, 0x1a
mov dword [rsp + 0x5c], eax
and r13b, cl
mov eax, ebx
mov dword [rsp + 0x64], r13d
shr eax, 0xf
and al, cl
mov dword [rbp - 0x68], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x70], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rsp + 0x78], eax
test r13b, r13b
je 0x18002c574
call fcn.180010054
mov rdx, rsi
mov rcx, r12
call fcn.1800055a8
movss xmm0, dword [0x1800402cc]
lea rcx, [rbp + 8]
mov r9d, 1
movss dword [rbp - 0x40], xmm0
xor r8d, r8d
movss dword [rsp + 0x20], xmm0
mov rdx, rsi
mov dword [rsp + 0x6c], eax
mov r15d, eax
call fcn.180008380
test r13b, r13b
je 0x18002c5c6
movss xmm0, dword [r14 + 0xf18]
mulss xmm0, dword [0x180040264]
jmp 0x18002c5cb
movss xmm0, dword [rbp + 0xc]
movss xmm6, dword [r14 + 0xb10]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18000fe70
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x1d8]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18000fee0
movss xmm13, dword [rbp + 8]
xorps xmm15, xmm15
comiss xmm13, xmm15
jbe 0x18002c61c
movaps xmm1, xmm13
addss xmm1, dword [r14 + 0xb24]
jmp 0x18002c61f
xorps xmm1, xmm1
movss xmm9, dword [r12 + 0x104]
lea rcx, [rbp + 0x1d8]
movss xmm7, dword [r12 + 0x100]
movaps xmm0, xmm9
movss xmm10, dword [rbp + 0x1d8]
movaps xmm2, xmm9
movss xmm11, dword [rbp + 0x1dc]
addss xmm1, xmm10
addss xmm2, xmm11
movss dword [rbp - 0x58], xmm9
addss xmm0, xmm11
movss dword [rbp - 0x80], xmm7
movaps xmm12, xmm7
movss dword [rbp - 0x7c], xmm9
addss xmm12, xmm10
movss dword [rbp - 0x38], xmm7
addss xmm1, xmm7
movss dword [rbp - 0x34], xmm9
movss dword [rbp - 0x2c], xmm2
subss xmm2, xmm9
movss dword [rbp - 0x74], xmm0
xorps xmm0, xmm0
mov qword [rbp - 0x60], r12
movss dword [rbp - 0x54], xmm12
movss dword [rbp - 0x30], xmm1
subss xmm1, xmm7
movss dword [rbp - 0x78], xmm12
movss dword [rbp + 0x1dc], xmm2
movups xmmword [rbp + 0xa0], xmm0
movss dword [rbp + 0x1d8], xmm1
movaps xmm1, xmm6
call fcn.18000fab4
test r13b, r13b
je 0x18002c8b5
mov r9d, 0x400
lea r8, [rbp - 0x80]
mov edx, r15d
lea rcx, [rbp - 0x38]
call fcn.18000fc20
test al, al
jne 0x18002c753
call fcn.18001017c
xor al, al
lea r11, [rsp + 0x288]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movups xmm0, xmmword [r14 + 0x1a7c]
mov edi, dword [r14 + 0x1a84]
lea rdx, [r14 + 0xc1c]
mov ecx, 3
movss dword [r12 + 0x100], xmm7
movups xmmword [rbp + 0xa0], xmm0
movss dword [r12 + 0x104], xmm9
call fcn.180003b20
movss xmm1, dword [r14 + 0xb14]
mov ecx, 7
call fcn.180003bd0
movss xmm1, dword [r14 + 0xb18]
mov ecx, 8
call fcn.180003bd0
and dword [rbp + 0x1d8], 0
lea rdx, [rbp + 0x1d8]
and dword [rbp + 0x1dc], 0
mov ecx, 2
call fcn.180003c48
movss xmm12, dword [rbp - 0x78]
lea r8, [rbp + 0x1d8]
movss xmm1, dword [rbp - 0x74]
movaps xmm0, xmm12
movss xmm9, dword [rbp - 0x7c]
mov r9d, 1
movss xmm7, dword [rbp - 0x80]
subss xmm1, xmm9
subss xmm0, xmm7
movss dword [rbp - 0x54], xmm12
mov edx, r15d
movss dword [rbp - 0x58], xmm9
mov rcx, rsi
mov dword [rsp + 0x20], 4
movss dword [rbp + 0x1dc], xmm1
movss dword [rbp + 0x1d8], xmm0
call fcn.180008670
mov ecx, 3
mov bl, al
call fcn.180003cd4
mov ecx, 1
call fcn.180003b7c
test bl, bl
jne 0x18002c856
call fcn.1800088cc
jmp 0x18002c6f9
mov rbx, qword [r14 + 0x11e0]
mov qword [rbp - 0x60], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
subss xmm10, dword [rbx + 0xac]
mov word [rbx + 0x15e], cx
movss xmm0, dword [r14 + 0xb0c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [r14 + 0xb10]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
jmp 0x18002c900
bt ebx, 0x1c
jb 0x18002c8f6
mov r9d, 0x400
lea r8, [rbp - 0x80]
mov edx, r15d
lea rcx, [rbp - 0x38]
call fcn.18000fc20
test al, al
je 0x18002c6fe
movss xmm12, dword [rbp - 0x78]
movss xmm9, dword [rbp - 0x7c]
movss xmm7, dword [rbp - 0x80]
movss dword [rbp - 0x54], xmm12
movss dword [rbp - 0x58], xmm9
mov edi, dword [r14 + 0x1a84]
mov rbx, r12
mov r8d, dword [r14 + 0x1a80]
lea rcx, [rbp - 0x80]
mov edx, r15d
call fcn.180005b98
xor r8d, r8d
mov byte [rsp + 0x61], al
mov cl, al
lea edx, [r8 + 1]
test al, al
je 0x18002c92b
mov dword [r14 + 0x1f18], edx
mov rsi, qword [0x180044c40]
test r15d, r15d
je 0x18002c949
cmp dword [rsi + 0x1f30], r15d
jne 0x18002c949
add rsi, 0x1f28
jmp 0x18002c94c
mov rsi, r8
mov eax, dword [r14 + 0x1240]
shr edi, 8
and dil, dl
mov qword [rbp - 0x18], rsi
mov dword [rbp - 0x3c], edi
cmp eax, r15d
je 0x18002c989
cmp dword [r14 + 0x1be0], r15d
jne 0x18002c989
test byte [r14 + 0x1bec], dl
jne 0x18002c981
cmp dword [r14 + 0x1c04], 2
jne 0x18002c989
mov byte [rbp + 0x208], dl
jmp 0x18002c990
mov byte [rbp + 0x208], r8b
test cl, cl
je 0x18002c9a0
mov r15b, dl
cmp byte [r14 + 0xa48], r8b
jne 0x18002c9a3
mov r15b, r8b
mov byte [rbp + 0x1d8], r15b
test r13b, r13b
je 0x18002c9da
test rsi, rsi
je 0x18002c9da
test eax, eax
jne 0x18002c9da
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.1800055a8
cmp dword [r14 + 0x1270], eax
jne 0x18002c9d7
mov ebx, 1
jmp 0x18002c9e7
xor r8d, r8d
mov bl, r8b
test r13b, r13b
je 0x18002ca19
test rsi, rsi
je 0x18002ca19
mov rcx, qword [rbp - 0x60]
lea rdx, str.SCROLLY
call fcn.1800055a8
xor r8d, r8d
cmp dword [r14 + 0x1240], eax
jne 0x18002ca19
lea eax, [r8 + 1]
mov byte [rsp + 0x58], r8b
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x54], r8b
jmp 0x18002ca2f
mov byte [rsp + 0x58], r8b
mov cl, r8b
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x54], r8b
test r13b, r13b
je 0x18002ca3d
mov rax, qword [rbp - 0x60]
movss xmm6, dword [rax + 0x88]
jmp 0x18002ca49
movss xmm6, dword [0x1800402bc]
mov byte [rsp + 0x51], cl
mov r9d, 1
test rsi, rsi
je 0x18002ca62
mov al, r13b
mov r13b, r9b
xor al, r9b
cmp byte [rsi + 0x6b], al
jne 0x18002ca65
mov r13b, r8b
test r15b, r15b
jne 0x18002ca8c
test bl, bl
jne 0x18002ca8c
cmp byte [rbp + 0x208], r8b
jne 0x18002ca8c
test dil, dil
jne 0x18002ca8c
mov byte [rsp + 0x52], r8b
test cl, cl
jne 0x18002ca91
mov byte [rsp + 0x59], r8b
jmp 0x18002caa3
mov byte [rsp + 0x52], r9b
mov eax, dword [rsp + 0x6c]
mov byte [rsp + 0x59], r9b
cmp dword [r14 + 0x1240], eax
jne 0x18002caac
test r13b, r13b
je 0x18002cd00
lea rsi, [r14 + 0x1f28]
mov ecx, dword [rsi + 8]
mov qword [rbp - 0x18], rsi
mov dword [rsi + 0xe80], 0xbe99999a
call fcn.18002c3b8
mov rax, qword [rbp + 0x1e0]
or rbx, 0xffffffffffffffff
xor edx, edx
inc rbx
cmp byte [rax + rbx], dl
jne 0x18002cad6
mov ecx, dword [rsi + 0x3c]
lea edi, [rbx + 1]
cmp edi, ecx
jle 0x18002cb13
test ecx, ecx
je 0x18002caf7
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002cafc
mov eax, 8
cmp eax, edi
lea rcx, [rsi + 0x38]
mov edx, edi
cmovg edx, eax
call fcn.1800169c8
mov rax, qword [rbp + 0x1e0]
mov dword [rsi + 0x38], edi
mov rdx, rax
mov rcx, qword [rsi + 0x40]
movsxd r8, edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x6c]
xor r8d, r8d
cmp dword [rsi + 8], eax
jne 0x18002cb6b
test r13b, r13b
jne 0x18002cb6b
lea rdi, [rsi + 0x10]
lea r13d, [r8 + 1]
cmp dword [rdi], ebx
jne 0x18002cb66
mov r15, rdi
cmp byte [rsi + 0x48], r8b
je 0x18002cb72
mov rdx, qword [rbp + 0x1e0]
mov rcx, qword [rsi + 0x30]
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x18002cb72
mov r15, rdi
jmp 0x18002cb6f
lea r15, [rsi + 0x10]
mov r13b, r8b
mov ebx, dword [rbp + 0x1e8]
mov eax, dword [rsp + 0x6c]
inc ebx
mov dword [rsi + 8], eax
mov ecx, dword [rsi + 0x1c]
mov qword [rbp - 0x48], r8
cmp ebx, ecx
jle 0x18002cbb3
test ecx, ecx
je 0x18002cb9b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002cba0
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.180016a54
xor r8d, r8d
mov dword [rsi + 0x18], ebx
mov ecx, dword [rsi + 0x2c]
test ecx, ecx
jns 0x18002cbda
mov eax, ecx
cdq
sub eax, edx
mov edx, r8d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x28]
test eax, eax
cmovg edx, eax
call fcn.1800169c8
xor r8d, r8d
mov rbx, qword [rbp + 0x1e0]
lea rax, [rbp - 0x48]
mov edx, dword [rbp + 0x1e8]
xor r9d, r9d
mov dword [rsi + 0x28], r8d
mov rcx, qword [rsi + 0x20]
mov byte [rsi + 0x48], r8b
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1800029c4
mov ecx, dword [rbp - 0x48]
xor r8d, r8d
mov edi, dword [rsp + 0x64]
sub ecx, ebx
mov dword [rsi + 0xc], eax
mov edx, eax
mov dword [r15], ecx
lea r9d, [r8 + 1]
test r13b, r13b
je 0x18002cc46
cmp dword [rsi + 0x54], eax
mov ecx, eax
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], eax
mov dword [rsi + 0x54], ecx
cmovl eax, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], edx
mov dword [rsi + 0x58], eax
cmovl edx, dword [rsi + 0x5c]
mov dword [rsi + 0x5c], edx
jmp 0x18002cc88
mov al, dil
mov qword [rsi + 0x50], r8
xor al, r9b
mov dword [rsi + 0xe72], 0x630000
mov byte [rsi + 0x6b], al
mov dword [rsi + 0xe78], r8d
mov dword [rsi + 0xe7c], 0x3e7
mov qword [rsi + 0x58], r8
mov word [rsi + 0x69], 1
mov dword [rsi + 0x70], r8d
mov byte [rsi + 0x68], r8b
mov byte [rsi + 0x60], r8b
mov dword [rsi + 0x64], r8d
test dil, dil
jne 0x18002cce7
mov r9d, dword [rbp + 0x1f8]
test r9b, 0x10
mov eax, dword [rsp + 0x54]
mov r9d, 1
movzx eax, al
cmovne eax, r9d
mov dword [rsp + 0x54], eax
cmp byte [rbp + 0x208], r8b
je 0x18002ccca
test r13b, r13b
je 0x18002ccc5
test byte [r14 + 0x1bec], 4
jne 0x18002ccca
mov byte [rsp + 0x54], r9b
cmp byte [rbp - 0x3c], r8b
jne 0x18002cce2
cmp byte [rbp + 0x1d8], r8b
je 0x18002cce7
cmp byte [r14 + 0x124], r8b
je 0x18002cce7
mov byte [rsp + 0x54], r9b
test dword [rbp + 0x1f8], 0x2000
mov r15b, byte [rbp + 0x1d8]
je 0x18002cd04
mov byte [rsi + 0x60], r9b
jmp 0x18002cd04
mov edi, dword [rsp + 0x64]
mov r10b, byte [r14 + 0x59]
mov r13d, dword [rsp + 0x6c]
mov bl, byte [rsp + 0x52]
mov byte [rsp + 0x60], r10b
cmp dword [r14 + 0x1240], r13d
je 0x18002cd55
test bl, bl
je 0x18002cd48
mov rdx, r12
mov ecx, r13d
call fcn.1800057ac
mov rdx, r12
mov ecx, r13d
call fcn.180011890
xor edx, edx
mov rcx, r12
call fcn.18000d18c
mov r10b, byte [rsp + 0x60]
cmp dword [r14 + 0x1240], r13d
jne 0x18002ce8f
xor r12d, r12d
test r15b, r15b
je 0x18002cd7a
mov rcx, qword [0x180044c40]
mov edx, 0x281
call fcn.180001f54
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
mov eax, dword [r14 + 0x1a50]
mov r11d, dword [rbp + 0x1f8]
or eax, 3
mov dword [r14 + 0x1a50], eax
test dil, dil
jne 0x18002cd9c
test r11b, r11b
jns 0x18002cda6
or eax, 0xc
mov dword [r14 + 0x1a50], eax
mov r9, qword [0x180044c40]
mov edx, 0x207
mov rcx, r9
call fcn.180001f54
mov edx, 0x208
mov rcx, r9
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
call fcn.180001f54
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
test dil, dil
je 0x18002ce16
mov edx, 0x205
mov rcx, r9
call fcn.180001f54
mov edx, 0x206
mov rcx, r9
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
call fcn.180001f54
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
test r10b, r10b
je 0x18002ce38
mov rcx, qword [0x180044c40]
mov edx, 0x4000
call fcn.180001f54
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r12w
test r11d, 0x440
je 0x18002ce51
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18000e0ec
cmp dword [r14 + 0x1240], r13d
jne 0x18002ce8f
test rsi, rsi
jne 0x18002ce68
xor edx, edx
xor ecx, ecx
call fcn.1800057ac
cmp dword [r14 + 0x1240], r13d
jne 0x18002ce8f
xor r9d, r9d
cmp byte [r14 + 0xa48], r9b
je 0x18002ce9e
cmp byte [rsp + 0x59], r9b
jne 0x18002ce9e
test bl, bl
jne 0x18002ce9e
mov byte [rsp + 0x58], 1
jmp 0x18002ce9e
xor r9d, r9d
test rsi, rsi
je 0x18002cea2
cmp byte [rsp + 0x51], r9b
je 0x18002cea2
mov cl, 1
jmp 0x18002cea5
mov cl, r9b
mov r12d, dword [rsp + 0x54]
mov byte [rbp + 0x1d8], cl
test rsi, rsi
je 0x18002cece
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18002cec2
test r12b, r12b
je 0x18002cece
test cl, cl
je 0x18002cece
mov r8d, 1
jmp 0x18002ced1
mov r8b, r9b
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x54], r8d
movzx r15d, r8b
mov byte [rsp + 0x51], r9b
mov byte [rsp + 0x59], r9b
test al, al
je 0x18002cfab
test rsi, rsi
je 0x18002cfab
test cl, cl
jne 0x18002cf06
test r8b, r8b
je 0x18002cfb4
mov ebx, dword [rbp + 0x1e8]
mov ecx, dword [rsi + 0x1c]
inc ebx
mov qword [rbp - 0x48], r9
cmp ebx, ecx
jle 0x18002cf3d
test ecx, ecx
je 0x18002cf28
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002cf2d
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.180016a54
mov rdi, qword [rbp + 0x1e0]
lea rax, [rbp - 0x48]
mov dword [rsi + 0x18], ebx
mov r8, rdi
mov rcx, qword [rsi + 0x20]
xor r9d, r9d
mov edx, ebx
mov qword [rsp + 0x20], rax
call fcn.1800029c4
mov ecx, dword [rbp - 0x48]
mov edx, eax
sub ecx, edi
mov dword [rsi + 0xc], eax
cmp dword [rsi + 0x54], eax
mov dword [rsi + 0x10], ecx
mov ecx, eax
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], eax
mov dword [rsi + 0x54], ecx
mov ecx, eax
cmovl ecx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], eax
mov eax, dword [rsp + 0x5c]
cmovl edx, dword [rsi + 0x5c]
xor r9d, r9d
cmp ecx, edx
mov dword [rsi + 0x58], ecx
mov cl, byte [rbp + 0x1d8]
mov r8d, r9d
cmovne r8d, r15d
mov dword [rsi + 0x5c], edx
mov dword [rsp + 0x54], r8d
test cl, cl
jne 0x18002cfbd
test r8b, r8b
jne 0x18002cfbd
cmp dword [r14 + 0x1240], r13d
jne 0x18002cfd1
test al, al
jne 0x18002cfd1
test rsi, rsi
je 0x18002cfd1
mov byte [rsp + 0x76], 1
cmp byte [rsi + 0x48], r9b
jne 0x18002cfd6
mov byte [rsp + 0x76], r9b
cmp byte [rbp - 0x68], r9b
je 0x18002d083
mov rcx, qword [r14 + 0xf10]
mov edx, 0x2a
call fcn.1800229bc
mov ecx, dword [rcx + 0x14]
lea rdi, [r14 + 0x2dd0]
mov rbx, qword [0x180044c40]
mov r9, rax
mov dword [rdi + 0x14], ecx
mov rcx, qword [r14 + 0xf10]
mov qword [rbp - 0x38], rdi
mov edx, dword [rcx + 0x64]
mov dword [rdi + 0x64], edx
mov rcx, qword [r14 + 0xf10]
mov edx, dword [rcx + 0x68]
mov dword [rdi + 0x68], edx
mov rcx, qword [r14 + 0xf10]
mov edx, dword [rcx + 0x6c]
mov dword [rdi + 0x6c], edx
mov rcx, qword [r14 + 0xf10]
mov rax, qword [rcx + 0x40]
mov rcx, rdi
mov qword [rdi + 0x40], rax
mov qword [rdi + 0x38], r9
mov eax, dword [r9 + 4]
mov dword [rdi + 0x10], eax
call fcn.18000d518
lea rdx, [rbp - 0x38]
lea rcx, [rbx + 0x1b48]
call fcn.180016754
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rbx + 0x11e0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.18001d200
xor r9d, r9d
mov ebx, 0xa
mov dword [rbp - 0x3c], r9d
mov dword [rbp + 0x10], ebx
cmp dword [r14 + 0x1240], r13d
jne 0x18002d475
mov eax, dword [rsi + 0x10]
mov edi, dword [rbp + 0x1f8]
mov r15d, dword [rsp + 0x64]
mov byte [rsi + 0xe86], r9b
mov dword [rsi + 0xe88], edi
mov dword [rbp - 0x3c], eax
mov eax, dword [rbp + 0x1e8]
mov dword [rsi + 0x4c], eax
cmp byte [r14 + 0x110], r9b
sete al
mov byte [r14 + 0x124d], al
movss xmm2, dword [r14 + 0x108]
subss xmm2, xmm7
subss xmm2, dword [r14 + 0xb0c]
addss xmm2, dword [rsi + 0x50]
test r15b, r15b
je 0x18002d10b
mov rax, qword [rbp - 0x60]
movss xmm3, dword [r14 + 0x10c]
subss xmm3, dword [rax + 0x104]
jmp 0x18002d11c
movss xmm3, dword [r14 + 0xf18]
mulss xmm3, dword [0x1800401ec]
test r12b, r12b
je 0x18002d147
mov eax, dword [rsi + 0xc]
mov r12d, 1
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
lea rax, [rsi + 0xe85]
mov byte [rax], r12b
mov dword [rsi + 0x58], r9d
mov byte [rsi + 0x6a], r9b
jmp 0x18002d2c0
mov al, byte [rsp + 0x61]
test al, al
je 0x18002d26c
mov ecx, 2
cmp word [r14 + 0xa52], cx
jb 0x18002d26c
cmp byte [r14 + 0x125], r9b
jne 0x18002d26c
lea rdi, [rsi + 0x54]
mov rcx, rsi
mov rdx, rdi
call fcn.18002ad78
movsxd rdx, dword [rdi]
mov r12d, 1
test byte [r14 + 0xa52], r12b
jne 0x18002d1fd
xor r8d, r8d
test edx, edx
je 0x18002d1a9
mov rax, qword [rsi + 0x20]
mov cl, r8b
cmp word [rax + rdx*2 - 2], bx
jne 0x18002d1ac
mov cl, r12b
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18002d1b8
test cl, cl
jne 0x18002d1c7
mov edx, 0x20000c
mov rcx, rsi
call fcn.18002c008
mov edx, dword [rdi]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18002d1e3
mov eax, dword [rdi + 8]
cmp dword [rdi + 4], eax
jne 0x18002d1df
mov dword [rdi + 8], edx
mov dword [rdi + 4], edx
jmp 0x18002d1e3
mov dword [rdi], eax
mov edx, eax
mov rcx, rsi
call fcn.18002a920
mov rdx, rdi
mov dword [rdi], eax
mov rcx, rsi
mov dword [rsi + 0x5c], eax
call fcn.18002af80
jmp 0x18002d250
mov rax, qword [rsi + 0x20]
mov rcx, rsi
movzx ebx, word [rax + rdx*2]
mov edx, 0x200004
call fcn.18002c008
mov edx, 0x600005
mov rcx, rsi
call fcn.18002c008
mov edx, 0x600001
mov rcx, rsi
call fcn.18002c008
mov eax, 0xa
cmp bx, ax
je 0x18002d249
test r15b, r15b
je 0x18002d249
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], ecx
mov dword [rdi], ecx
mov byte [rsi + 0xe84], 0
mov edi, dword [rbp + 0x1f8]
lea rax, [rsi + 0xe85]
mov dword [rsi + 0xe80], 0xbe99999a
xor r9d, r9d
jmp 0x18002d2c0
lea rbx, [rsi + 0xe85]
mov cl, byte [rbx]
cmp byte [r14 + 0xa48], r9b
je 0x18002d35e
test cl, cl
jne 0x18002d35e
test al, al
je 0x18002d2b7
lea rdx, [rsi + 0x54]
mov rcx, rsi
cmp byte [r14 + 0x125], r9b
je 0x18002d2a5
call fcn.18002add8
jmp 0x18002d2aa
call fcn.18002ad78
mov dword [rsi + 0xe80], 0xbe99999a
xor r9d, r9d
mov rax, rbx
mov r12d, 1
cmp byte [rax], r9b
je 0x18002d2d1
cmp byte [r14 + 0x110], r9b
jne 0x18002d2d1
mov byte [rax], r9b
bt edi, 0xa
jae 0x18002d333
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18000f9ac
mov ecx, dword [rsp + 0x5c]
xor r9d, r9d
test al, al
je 0x18002d337
test cl, cl
jne 0x18002d337
lea eax, [r9 + 2]
mov dword [rsp + 0x70], 9
mov r9, qword [rbp + 0x200]
lea rdx, [rsp + 0x70]
mov r8d, edi
mov dword [rsp + 0x28], eax
mov rcx, r14
call fcn.18002c1c0
xor r9d, r9d
test al, al
je 0x18002d333
mov edx, dword [rsp + 0x70]
mov rcx, rsi
call fcn.18002c008
xor r9d, r9d
mov ecx, dword [rsp + 0x5c]
cmp byte [r14 + 0x124], r9b
je 0x18002d349
cmp byte [r14 + 0x126], r9b
je 0x18002d359
cmp byte [rsp + 0x60], r9b
je 0x18002d3bd
cmp byte [r14 + 0x127], r9b
je 0x18002d3bd
mov al, r12b
jmp 0x18002d3c0
mov rax, rbx
cmp byte [r14 + 0x110], r9b
je 0x18002d2ba
test cl, cl
jne 0x18002d2ba
movss xmm0, dword [r14 + 0xf4]
ucomiss xmm0, xmm15
jp 0x18002d39c
jne 0x18002d39c
movss xmm0, dword [r14 + 0xf8]
ucomiss xmm0, xmm15
jp 0x18002d39c
je 0x18002d2ba
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.18002add8
mov r12d, 1
mov rax, rbx
mov byte [rsi + 0xe84], r12b
jmp 0x18002d25d
mov al, r9b
lea rbx, [r14 + 0xac0]
cmp dword [rbx], r9d
jle 0x18002d475
test al, al
jne 0x18002d44f
test cl, cl
jne 0x18002d44f
cmp byte [rbp + 0x208], r9b
jne 0x18002d44f
mov r13d, dword [rbp + 0x1f8]
mov r15d, r9d
mov rdi, r9
mov rax, qword [r14 + 0xac8]
movzx ecx, word [rax + rdi]
mov dword [rbp + 0x208], ecx
cmp ecx, 9
je 0x18002d43b
mov r9, qword [rbp + 0x200]
lea rdx, [rbp + 0x208]
mov eax, 2
mov r8d, r13d
mov rcx, r14
mov dword [rsp + 0x28], eax
call fcn.18002c1c0
xor r9d, r9d
test al, al
je 0x18002d43e
mov edx, dword [rbp + 0x208]
mov rcx, rsi
call fcn.18002c008
xor r9d, r9d
add r15d, r12d
add rdi, 2
cmp r15d, dword [rbx]
jl 0x18002d3ee
mov r13d, dword [rsp + 0x6c]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18002d472
mov eax, ecx
cdq
sub eax, edx
mov edx, r9d
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.180016a54
xor r9d, r9d
mov dword [rbx], r9d
mov r12b, r9b
mov byte [rbp + 0x208], r9b
cmp dword [r14 + 0x1240], r13d
jne 0x18002dea6
cmp byte [r14 + 0x124c], r9b
jne 0x18002dea6
cmp byte [rsp + 0x58], r9b
jne 0x18002dea6
mov r15b, byte [rsp + 0x60]
movaps xmm0, xmm11
subss xmm0, dword [r14 + 0xb10]
mov r12d, 1
mov ecx, r12d
divss xmm0, dword [r14 + 0xf18]
cvttss2si eax, xmm0
cmp eax, r12d
cmovge ecx, eax
mov dword [rsi + 0x64], ecx
mov al, byte [r14 + 0x125]
neg al
mov dword [rsp + 0x70], ecx
lea rcx, [r14 + 0x124]
sbb ebx, ebx
mov qword [rbp - 0x48], rcx
and ebx, 0x400000
mov qword [rbp - 0x10], rcx
test r15b, r15b
je 0x18002d53a
lea rax, [r14 + 0x126]
mov dil, byte [rax]
mov byte [rsp + 0x50], dil
mov qword [rbp - 0x38], rax
cmp byte [r14 + 0x127], r9b
je 0x18002d54b
mov byte [rsp + 0x50], dil
cmp byte [rcx], r9b
jne 0x18002d54b
mov byte [rsp + 0x50], dil
test dil, dil
jne 0x18002d54b
mov byte [rsp + 0x52], r12b
mov byte [rsp + 0x50], dil
jmp 0x18002d550
mov al, byte [rcx]
mov byte [rsp + 0x50], al
lea rax, [r14 + 0x126]
mov qword [rbp - 0x38], rax
mov byte [rsp + 0x52], r9b
mov r8d, r12d
mov edx, r13d
mov ecx, 0xa39
call fcn.18000f9ac
xor ecx, ecx
test al, al
jne 0x18002d57c
mov r8d, r12d
mov edx, r13d
mov ecx, 0x220a
call fcn.18000f9ac
xor ecx, ecx
test al, al
je 0x18002d5a3
mov r12d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x64]
test r12b, r12b
jne 0x18002d5ac
cmp byte [rbp - 0x68], cl
jne 0x18002d5ac
test dil, dil
je 0x18002d59c
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x18002d5ac
mov byte [rsp + 0x68], 1
jmp 0x18002d5b0
mov edi, dword [rsp + 0x64]
mov r12d, dword [rsp + 0x5c]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r13d
mov ecx, 0xa24
call fcn.18000f9ac
test al, al
jne 0x18002d5d8
xor r8d, r8d
mov edx, r13d
mov ecx, 0x1209
call fcn.18000f9ac
test al, al
je 0x18002d5f9
xor eax, eax
cmp byte [rbp - 0x68], al
jne 0x18002d5f9
test dil, dil
je 0x18002d5ec
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x18002d5f9
mov eax, 1
xor edi, edi
mov byte [rsp + 0x75], al
jmp 0x18002d603
xor edi, edi
mov byte [rsp + 0x75], dil
lea eax, [rdi + 1]
mov r8d, eax
mov edx, r13d
mov ecx, 0xa37
call fcn.18000f9ac
test al, al
jne 0x18002d62e
mov r8d, 1
mov edx, r13d
mov ecx, 0x2209
call fcn.18000f9ac
test al, al
je 0x18002d63e
test r12b, r12b
jne 0x18002d63e
mov eax, 1
mov byte [rsp + 0x61], al
jmp 0x18002d648
mov byte [rsp + 0x61], dil
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3b
call fcn.18000f9ac
mov edi, dword [rbp - 0x70]
test al, al
je 0x18002d674
test r12b, r12b
jne 0x18002d674
test dil, dil
je 0x18002d674
mov eax, 1
mov byte [rsp + 0x74], al
jmp 0x18002d67e
mov byte [rsp + 0x74], 0
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3a
call fcn.18000f9ac
test al, al
jne 0x18002d6b3
test r15b, r15b
je 0x18002d6cb
mov r8d, 1
mov edx, r13d
mov ecx, 0x2a3b
call fcn.18000f9ac
xor r15d, r15d
test al, al
je 0x18002d6ce
jmp 0x18002d6b6
xor r15d, r15d
test r12b, r12b
jne 0x18002d6ce
test dil, dil
je 0x18002d6ce
mov r12d, 1
mov r13b, r12b
jmp 0x18002d6d7
xor r15d, r15d
mov r13b, r15b
mov r12d, 1
mov edx, dword [rsp + 0x6c]
xor r8d, r8d
mov ecx, 0xa22
call fcn.18000f9ac
mov byte [rsp + 0x77], al
mov eax, 2
test byte [r14 + 8], al
je 0x18002d700
mov dil, r12b
test byte [r14 + 0xc], r12b
jne 0x18002d703
mov dil, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.18000e22c
test al, al
jne 0x18002d72c
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.18000e22c
test al, al
jne 0x18002d72c
mov r12b, r15b
test dil, dil
je 0x18002d761
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.18000e22c
test al, al
jne 0x18002d757
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.18000e22c
test al, al
je 0x18002d761
mov eax, 1
mov r15b, al
jmp 0x18002d766
mov eax, 1
mov edx, dword [rsp + 0x6c]
mov r8d, eax
mov ecx, 0x20e
call fcn.18000f9ac
xor ecx, ecx
test al, al
jne 0x18002d7a4
test dil, dil
je 0x18002d79a
mov edx, dword [rsp + 0x6c]
lea r8d, [rcx + 1]
mov ecx, 0x26c
call fcn.18000f9ac
xor ecx, ecx
test al, al
jne 0x18002d7a4
mov dil, cl
mov eax, 1
jmp 0x18002d7ac
mov eax, 1
mov dil, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.18000e22c
xor ecx, ecx
test al, al
je 0x18002d7f4
neg byte [rsp + 0x50]
mov eax, 0x200004
sbb edx, edx
and edx, 0xc
add edx, 0x200000
cmp byte [rsp + 0x52], cl
cmovne edx, eax
or edx, ebx
mov rcx, rsi
call fcn.18002c008
xor r9d, r9d
mov r10d, 1
jmp 0x18002de78
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.18000e22c
xor ecx, ecx
test al, al
je 0x18002d820
neg byte [rsp + 0x50]
mov eax, 0x200005
sbb edx, edx
and edx, 0xc
add edx, 0x200001
jmp 0x18002d7d5
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.18000e22c
xor r9d, r9d
test al, al
je 0x18002d88d
cmp byte [rsp + 0x64], r9b
je 0x18002d88d
mov rax, qword [rbp - 0x10]
cmp byte [rax], r9b
je 0x18002d87c
mov rdx, qword [rbp - 0x60]
movss xmm0, dword [rdx + 0x88]
subss xmm0, dword [r14 + 0xf18]
maxss xmm0, xmm15
movss dword [rdx + 0x98], xmm0
mov dword [rdx + 0xa0], r9d
mov dword [rdx + 0xa8], r9d
jmp 0x18002d7e9
movzx eax, byte [rsp + 0x52]
lea edx, [rax*4 + 0x200002]
jmp 0x18002d7dc
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.18000e22c
xor r9d, r9d
test al, al
je 0x18002d8f2
cmp byte [rsp + 0x64], r9b
je 0x18002d8f2
mov rax, qword [rbp - 0x10]
cmp byte [rax], r9b
je 0x18002d8e1
mov rdx, qword [rbp - 0x60]
mov rax, qword [0x180044c40]
movss xmm0, dword [rdx + 0x88]
addss xmm0, dword [r14 + 0xf18]
mov rcx, qword [rax + 0x11e0]
minss xmm0, dword [rcx + 0x90]
jmp 0x18002d861
movzx eax, byte [rsp + 0x52]
lea edx, [rax*4 + 0x200003]
jmp 0x18002d7dc
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.18000e22c
xor ecx, ecx
test al, al
je 0x18002d939
cmp byte [rsp + 0x64], cl
je 0x18002d939
or ebx, 0x20000e
mov rcx, rsi
mov edx, ebx
call fcn.18002c008
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [r14 + 0xf18]
subss xmm6, xmm0
jmp 0x18002d7e6
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.18000e22c
xor ecx, ecx
test al, al
je 0x18002d980
cmp byte [rsp + 0x64], cl
je 0x18002d980
or ebx, 0x20000f
mov rcx, rsi
mov edx, ebx
call fcn.18002c008
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [r14 + 0xf18]
addss xmm6, xmm0
jmp 0x18002d7e6
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.18000e22c
test al, al
je 0x18002d9ad
mov rax, qword [rbp - 0x10]
mov al, byte [rax]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18002d7dc
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.18000e22c
test al, al
je 0x18002d9d0
mov rax, qword [rbp - 0x10]
mov al, byte [rax]
neg al
mov eax, 0x200005
jmp 0x18002d9a1
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.18000e22c
xor ecx, ecx
test al, al
je 0x18002da1a
cmp byte [rsp + 0x5c], cl
jne 0x18002da1a
cmp byte [rsp + 0x68], cl
jne 0x18002da1a
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18002da0d
cmp byte [rsp + 0x50], cl
je 0x18002da0d
mov edx, 0x60000d
mov rcx, rsi
call fcn.18002c008
or ebx, 0x200008
mov edx, ebx
jmp 0x18002d7de
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.18000e22c
mov r8d, dword [rsp + 0x5c]
xor r9d, r9d
test al, al
je 0x18002da88
test r8b, r8b
jne 0x18002da88
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x18002da80
cmp byte [rsp + 0x50], r9b
je 0x18002da51
mov edx, 0x60000c
jmp 0x18002da78
cmp byte [rsp + 0x60], r9b
je 0x18002da80
cmp byte [r14 + 0x127], r9b
je 0x18002da80
mov rax, qword [rbp - 0x38]
cmp byte [rax], r9b
jne 0x18002da80
mov rax, qword [rbp - 0x48]
cmp byte [rax], r9b
jne 0x18002da80
mov edx, 0x600004
mov rcx, rsi
call fcn.18002c008
or ebx, 0x200009
jmp 0x18002da13
test r12b, r12b
jne 0x18002dddc
test r15b, r15b
jne 0x18002dddc
test dil, dil
je 0x18002db05
test dword [rbp + 0x1f8], 0x100000
je 0x18002dadf
mov rax, qword [rbp + 0x1e0]
mov al, byte [rax]
test al, al
jne 0x18002dac9
mov byte [rsp + 0x54], r9b
mov byte [rbp + 0x1d8], r9b
mov byte [rsp + 0x58], 1
setne r12b
mov r10d, 1
mov byte [rbp + 0x208], r12b
jmp 0x18002de7f
mov r10d, 1
mov dl, r9b
mov r12b, r10b
mov byte [rbp + 0x208], r10b
mov byte [rsp + 0x58], r10b
mov cl, r9b
mov byte [rbp + 0x1d8], dl
jmp 0x18002de89
movzx eax, byte [rsp + 0x74]
test al, al
jne 0x18002ddbb
test r13b, r13b
jne 0x18002ddbb
cmp byte [rsp + 0x77], r9b
je 0x18002db45
mov eax, dword [rsi + 0xc]
mov r10d, 1
mov byte [rsi + 0xe84], r10b
mov dword [rsi + 0x58], r9d
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], r9b
jmp 0x18002de78
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x18002dcc1
cmp byte [rsp + 0x75], r9b
jne 0x18002dcc1
cmp byte [rsp + 0x61], r9b
je 0x18002d7e9
mov rax, qword [0x180044c40]
mov rdx, qword [rax + 0xa8]
test rdx, rdx
je 0x18002db9d
mov rcx, qword [rax + 0xb8]
call rdx
xor r9d, r9d
mov rbx, rax
test rax, rax
je 0x18002d7e9
mov rax, qword [0x180044c40]
jmp 0x18002dba4
lea rbx, [0x18003975e]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r9b
jne 0x18002dba8
test rax, rax
je 0x18002dbbc
inc dword [rax + 0xf0]
movsxd rcx, ecx
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r13d, r13d
mov qword [rbp - 0x38], rax
mov r15, rax
mov edi, r13d
cmp byte [rbx], r13b
je 0x18002dc43
mov r15d, dword [rbp + 0x1f8]
lea esi, [r13 + 1]
mov r12, rax
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.180002824
mov r9, qword [rbp + 0x200]
lea rdx, [rsp + 0x70]
movsxd rcx, eax
mov r8d, r15d
add rbx, rcx
mov dword [rsp + 0x28], 4
mov rcx, r14
call fcn.18002c1c0
test al, al
je 0x18002dc36
movzx eax, word [rsp + 0x70]
add edi, esi
mov word [r12], ax
add r12, 2
cmp byte [rbx], r13b
jne 0x18002dbed
mov rsi, qword [rbp - 0x18]
mov r15, qword [rbp - 0x38]
movsxd rax, edi
mov word [r15 + rax*2], r13w
test edi, edi
jle 0x18002dc9c
lea rbx, [rsi + 0x54]
mov rcx, rsi
mov rdx, rbx
call fcn.18002af80
mov rcx, rsi
call fcn.18002b03c
mov edx, dword [rbx]
mov r9d, edi
mov r8, r15
mov rcx, rsi
call fcn.18002aaf0
test al, al
je 0x18002dc91
mov edx, dword [rbx]
lea rcx, [rbx + 0x20]
mov r9d, edi
xor r8d, r8d
call fcn.18002bc34
add dword [rbx], edi
mov byte [rbx + 0x16], r13b
mov eax, 1
mov byte [rsi + 0xe84], al
test r15, r15
je 0x18002dcb3
mov rax, qword [0x180044c40]
test rax, rax
je 0x18002dcb3
dec dword [rax + 0xf0]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002d7e6
cmp qword [r14 + 0xb0], r9
je 0x18002dd66
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
cmp ecx, eax
je 0x18002dce2
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x18002dce8
mov eax, dword [rsi + 0xc]
mov edx, r9d
movsxd r15, eax
mov rax, qword [rsi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.180002c24
mov edx, 1
lea edi, [rdx + rax]
mov rax, qword [0x180044c40]
test rax, rax
je 0x18002dd19
add dword [rax + 0xf0], edx
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rsi + 0x20]
mov edx, edi
mov rbx, rax
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov rcx, rax
call fcn.180002b84
mov rcx, rbx
call fcn.180005d6c
test rbx, rbx
je 0x18002dd5a
mov rcx, qword [0x180044c40]
test rcx, rcx
je 0x18002dd5a
dec dword [rcx + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
test r13b, r13b
je 0x18002d7e9
mov eax, dword [rsi + 0x5c]
lea rbx, [rsi + 0x54]
cmp dword [rsi + 0x58], eax
jne 0x18002dd8b
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rbx], eax
mov dword [rsi + 0x58], r9d
mov byte [rsi + 0x6a], r9b
mov r10d, 1
mov byte [rsi + 0xe84], r10b
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x18002de78
mov rdx, rbx
mov rcx, rsi
call fcn.18002b03c
xor r9d, r9d
mov byte [rbx + 0x16], r9b
jmp 0x18002d7e9
mov edx, eax
mov rcx, rsi
xor edx, 1
add edx, 0x20000a
call fcn.18002c008
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x18002d7e6
mov edx, dword [rbp + 0x1f8]
mov r10d, 1
mov ecx, dword [rsp + 0x64]
mov eax, edx
shr eax, 0xb
and al, r10b
test cl, cl
je 0x18002de0a
test r15b, r15b
jne 0x18002de0a
test al, al
mov rax, qword [rbp - 0x48]
je 0x18002de2c
cmp byte [rax], r9b
jne 0x18002de31
mov byte [rsp + 0x59], r10b
cmp byte [r14 + 0x5c], r9b
je 0x18002de73
test cl, cl
jne 0x18002de73
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], r9d
mov byte [rsi + 0x6a], r9b
jmp 0x18002de78
cmp byte [rax], r9b
jne 0x18002de0a
test r8b, r8b
jne 0x18002de78
mov r9, qword [rbp + 0x200]
mov eax, 0xa
mov dword [rsp + 0x70], eax
mov r8d, edx
mov eax, 2
lea rdx, [rsp + 0x70]
mov rcx, r14
mov dword [rsp + 0x28], eax
call fcn.18002c1c0
xor r9d, r9d
test al, al
je 0x18002d7e9
mov edx, dword [rsp + 0x70]
jmp 0x18002d7de
mov byte [rsp + 0x58], r10b
mov r12b, byte [rbp + 0x208]
mov ecx, dword [rsp + 0x54]
mov dl, byte [rbp + 0x1d8]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x18002de98
mov al, r10b
test dl, dl
jne 0x18002de9b
mov al, r9b
mov r13d, dword [rsp + 0x6c]
or cl, al
mov dword [rsp + 0x54], ecx
mov r15d, r9d
mov qword [rbp - 0x70], r9
cmp dword [r14 + 0x1240], r13d
jne 0x18002e676
test r12b, r12b
je 0x18002e051
cmp byte [rsp + 0x5c], r9b
jne 0x18002e126
test dword [rbp + 0x1f8], 0x100000
je 0x18002df20
lea rax, [0x18003975e]
mov dword [rsp + 0x20], r9d
mov r9d, dword [rsi + 0xc]
lea rdx, [rsi + 0x54]
xor r8d, r8d
mov qword [rbp - 0x70], rax
mov rcx, rsi
mov byte [rsp + 0x51], 1
call fcn.18002bf18
mov r8d, dword [rsi + 0xc]
xor edx, edx
mov rcx, rsi
call fcn.18002aa64
xor r9d, r9d
mov qword [rsi + 0x58], r9
mov dword [rsi + 0x54], r9d
jmp 0x18002e01e
mov rax, qword [rbp + 0x1e0]
mov r10d, 1
mov r8, qword [rsi + 0x40]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002df47
add rax, r10
test ecx, ecx
jne 0x18002df34
test edx, edx
je 0x18002e01e
mov r15d, dword [rsi + 0x38]
mov ebx, r9d
mov r13, qword [rsi + 0x40]
sub r15d, r10d
mov qword [rbp - 0x70], r13
mov rdi, r9
mov byte [rsp + 0x51], r10b
test r15d, r15d
jle 0x18002dfe0
movsxd r12, r15d
mov rcx, r13
add r12, r13
mov rdx, r12
call fcn.180002a64
mov r8d, 1
xor edx, edx
lea ebx, [r8 + rax]
test ebx, ebx
jle 0x18002dfc1
lea ecx, [rdx + 8]
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x18002dfc1
mov rcx, qword [0x180044c40]
test rcx, rcx
je 0x18002dfb0
add dword [rcx + 0xf0], r8d
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
xor edx, edx
mov qword [rsp + 0x20], rdx
mov r9, r12
mov edx, ebx
mov r8, r13
mov rcx, rdi
call fcn.1800029c4
mov r12b, byte [rbp + 0x208]
xor r9d, r9d
lea ecx, [rbx - 1]
test r15d, r15d
lea rdx, [rsi + 0x54]
mov r8, rdi
cmovg r9d, ecx
mov rcx, rsi
call fcn.18002bf84
test rdi, rdi
je 0x18002e019
mov rax, qword [0x180044c40]
test rax, rax
je 0x18002e010
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r13d, dword [rsp + 0x6c]
mov eax, 1
mov byte [rsi + 0x48], al
mov eax, dword [rsi + 0x18]
mov ecx, dword [rsi + 0x2c]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x18002e105
test ecx, ecx
je 0x18002e0f0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e0f5
mov byte [rsp + 0x51], r9b
mov qword [rbp - 0x70], r9
cmp byte [rsp + 0x5c], r9b
je 0x18002e01e
mov r12d, dword [rbp + 0x1f8]
test r12d, 0x801c0
je 0x18002e61d
mov ebx, 0x40
mov edi, r9d
test bl, r12b
je 0x18002e09d
mov edx, r13d
xor r8d, r8d
mov r13d, 0x200
mov ecx, r13d
call fcn.18000f9ac
xor r9d, r9d
test al, al
jne 0x18002e0e8
test r12b, r12b
jns 0x18002e28b
mov ebx, 1
mov r13d, 0x203
mov r8d, ebx
mov ecx, r13d
xor edx, edx
call fcn.18000e22c
xor r9d, r9d
test al, al
jne 0x18002e0e3
mov r13d, 0x204
mov r8d, ebx
mov ecx, r13d
xor edx, edx
call fcn.18000e22c
xor r9d, r9d
test al, al
je 0x18002e28b
mov ebx, 0x80
mov edi, r13d
jmp 0x18002e2ac
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x28]
mov edx, ebx
cmovg edx, eax
call fcn.1800169c8
mov dword [rsi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rsi + 0x20]
mov edx, ebx
mov rcx, qword [rsi + 0x30]
call fcn.180002b84
xor r9d, r9d
test r12b, r12b
je 0x18002e061
cmp byte [rsp + 0x59], r9b
je 0x18002e13e
mov r12d, dword [rbp + 0x1f8]
test r12b, 0x20
jne 0x18002e068
mov rdi, qword [rbp + 0x1e0]
mov r11d, dword [rsp + 0x5c]
mov r13d, dword [rsp + 0x78]
mov r10, qword [rbp - 0x70]
mov r12d, dword [rsp + 0x6c]
cmp dword [r14 + 0x2db8], r12d
jne 0x18002e1f0
cmp dword [r14 + 0x1240], r12d
je 0x18002e1e9
mov r9, qword [0x180044c40]
call fcn.180008630
xor ecx, ecx
test al, al
je 0x18002e1e6
cmp byte [r9 + 0x1275], cl
jne 0x18002e19b
cmp dword [r9 + 0x1240], ecx
jne 0x18002e1e6
cmp byte [r9 + 0x1250], cl
je 0x18002e1e6
xor r9d, r9d
test r11b, r11b
jne 0x18002e1e9
mov r9, qword [r14 + 0x2dc8]
mov r8, rdi
mov rax, r9
sub r8, r9
mov r11d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002e1cc
add rax, r11
test ecx, ecx
jne 0x18002e1b9
test edx, edx
je 0x18002e1e6
mov r15d, dword [r14 + 0x2dc0]
mov r10, r9
sub r15d, r11d
mov qword [rbp - 0x70], r9
mov byte [rsp + 0x51], r11b
xor r9d, r9d
mov dword [r14 + 0x2db8], r9d
test r10, r10
je 0x18002e6c8
test r13b, r13b
je 0x18002e68f
mov eax, dword [rbp + 0x1f8]
lea rcx, [rbp + 0x60]
mov dword [rbp + 0x6c], eax
xorps xmm0, xmm0
lea eax, [r15 + 1]
mov qword [rbp + 0x78], r9
cmp dword [rbp + 0x1e8], eax
movdqa xmmword [rbp + 0x90], xmm0
cmovge eax, dword [rbp + 0x1e8]
mov dword [rbp + 0x8c], eax
mov qword [rbp + 0x60], r14
mov dword [rbp + 0x68], 0x40000
mov qword [rbp + 0x80], rdi
mov dword [rbp + 0x88], r15d
mov qword [rbp + 0x70], r9
call qword [rbp + 0x200]
mov ecx, dword [rbp + 0x8c]
mov rdi, qword [rbp + 0x80]
mov r10, qword [rbp - 0x70]
mov qword [rbp + 0x1e0], rdi
lea r15d, [rcx - 1]
cmp dword [rbp + 0x88], r15d
cmovl r15d, dword [rbp + 0x88]
xor r9d, r9d
jmp 0x18002e695
mov ebx, 0x80000
test ebx, r12d
je 0x18002e29e
cmp byte [rsi + 0xe86], r9b
jne 0x18002e2ac
mov eax, 0x100
mov ebx, r9d
test eax, r12d
cmovne ebx, eax
test ebx, ebx
je 0x18002e61d
mov rax, qword [rbp + 0x1e0]
mov dword [rbp + 0x38], r9d
mov word [rbp + 0x51], r9w
mov byte [rbp + 0x53], r9b
mov qword [rbp + 0x20], r14
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x2c], r12d
mov qword [rbp + 0x30], r9
cmp byte [rsp + 0x5c], r9b
jne 0x18002e2e2
mov rax, qword [rsi + 0x30]
mov r11, qword [rsi + 0x20]
mov qword [rbp + 0x40], rax
mov rcx, r11
mov eax, dword [rsi + 0x10]
mov dword [rbp + 0x48], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbp + 0x4c], eax
movsxd rax, dword [rsi + 0x54]
mov dword [rbp + 0x3c], edi
mov byte [rbp + 0x50], r9b
lea rdx, [r11 + rax*2]
call fcn.180002c24
movsxd rdx, dword [rsi + 0x58]
mov rcx, r11
mov ebx, eax
mov dword [rbp + 0x54], eax
lea rdx, [r11 + rdx*2]
call fcn.180002c24
movsxd rdx, dword [rsi + 0x5c]
mov rcx, r11
mov dword [rbp + 0x208], eax
mov dword [rbp + 0x58], eax
lea rdx, [r11 + rdx*2]
call fcn.180002c24
lea rcx, [rbp + 0x20]
mov dword [rsp + 0x70], eax
mov dword [rbp + 0x5c], eax
call qword [rbp + 0x200]
movsxd r13, dword [rbp + 0x54]
mov rdi, qword [rbp + 0x40]
mov r12b, byte [rbp + 0x50]
cmp r13d, ebx
jne 0x18002e365
xor r9d, r9d
test r12b, r12b
je 0x18002e382
lea rdx, [rdi + r13]
mov rcx, rdi
call fcn.180002a64
mov dword [rsi + 0x54], eax
xor r9d, r9d
mov eax, 1
mov byte [rsi + 0xe84], al
movsxd rbx, dword [rbp + 0x58]
cmp ebx, dword [rbp + 0x208]
jne 0x18002e393
test r12b, r12b
je 0x18002e3af
cmp ebx, r13d
jne 0x18002e39d
mov eax, dword [rsi + 0x54]
jmp 0x18002e3a9
lea rdx, [rdi + rbx]
mov rcx, rdi
call fcn.180002a64
mov dword [rsi + 0x58], eax
xor r9d, r9d
movsxd rax, dword [rbp + 0x5c]
cmp eax, dword [rsp + 0x70]
jne 0x18002e3c2
test r12b, r12b
je 0x18002e61d
cmp eax, ebx
jne 0x18002e3cb
mov eax, dword [rsi + 0x58]
jmp 0x18002e3da
lea rdx, [rdi + rax]
mov rcx, rdi
call fcn.180002a64
xor r9d, r9d
mov dword [rsi + 0x5c], eax
test r12b, r12b
je 0x18002e61d
mov rax, qword [rsi + 0x20]
mov rcx, rdi
mov rbx, qword [0x180044c40]
mov qword [rbp - 0x38], rax
mov eax, dword [rsi + 0xc]
mov dword [rbp + 0x208], eax
movsxd rax, dword [rbp + 0x48]
add rax, rdi
mov rdx, rax
mov qword [rbp - 0x18], rax
call fcn.180002a64
mov r13d, eax
lea r12, [rbx + 0x3170]
lea ecx, [rax*2 + 2]
cmp ecx, dword [rbx + 0x316c]
jle 0x18002e47f
mov rax, qword [r12]
test rax, rax
je 0x18002e452
test rbx, rbx
je 0x18002e441
dec dword [rbx + 0xf0]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea ecx, [r13*2 + 2]
mov rax, qword [0x180044c40]
test rax, rax
je 0x18002e464
inc dword [rax + 0xf0]
movsxd rcx, ecx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r12], rax
lea eax, [r13*2 + 2]
mov dword [rbx + 0x316c], eax
mov r12, qword [r12]
lea edx, [r13 + 1]
mov r9, qword [rbp - 0x18]
xor ebx, ebx
mov rcx, r12
mov qword [rsp + 0x20], rbx
mov r8, rdi
call fcn.1800029c4
mov r10d, dword [rbp + 0x208]
mov eax, r13d
cmp r10d, r13d
mov edx, ebx
cmovl eax, r10d
movsxd r11, eax
test eax, eax
jle 0x18002e4ef
mov rcx, qword [rbp - 0x38]
lea r10d, [rbx + 1]
mov r9, r12
lea r14d, [rbx + 2]
sub r9, rcx
mov r8d, ebx
movzx eax, word [r9 + rcx]
cmp word [rcx], ax
jne 0x18002e4e4
add edx, r10d
add r8, r10
add rcx, r14
cmp r8, r11
jl 0x18002e4cc
mov r14, qword [rbp - 8]
mov r10d, dword [rbp + 0x208]
cmp edx, r10d
jne 0x18002e4fd
cmp edx, r13d
je 0x18002e5a2
lea ebx, [r10 - 1]
movsxd rdi, edx
movsxd rcx, ebx
lea r9d, [r13 - 1]
cmp rcx, rdi
jl 0x18002e53d
mov r10, qword [rbp - 0x38]
movsxd r8, r9d
cmp r8, rdi
jl 0x18002e53d
movzx eax, word [r12 + r8*2]
cmp word [r10 + rcx*2], ax
jne 0x18002e53d
mov eax, 1
sub ebx, eax
sub rcx, rax
sub r9d, eax
sub r8, rax
cmp rcx, rdi
jge 0x18002e517
sub r9d, edx
sub ebx, edx
mov r13d, 1
xor r12d, r12d
add r9d, r13d
lea r8d, [rbx + 1]
test r9d, r9d
jg 0x18002e55c
test r8d, r8d
jle 0x18002e5a5
lea rcx, [rsi + 0x74]
call fcn.18002bc34
mov rdx, rax
test rax, rax
je 0x18002e5a5
movsxd r9, ebx
inc r9
test r9, r9
jle 0x18002e5a5
lea r8, [rdi + rdi]
mov r14d, 2
sub r8, rax
mov rax, qword [rsi + 0x20]
lea rcx, [r8 + rdx]
movzx ecx, word [rcx + rax]
mov word [rdx], cx
add rdx, r14
sub r9, r13
jne 0x18002e585
mov r14, qword [rbp - 8]
jmp 0x18002e5a5
xor r12d, r12d
mov ebx, dword [rbp + 0x48]
mov eax, dword [rbp - 0x3c]
mov r13d, dword [rsp + 0x78]
cmp ebx, eax
jle 0x18002e5ed
test r13b, r13b
je 0x18002e5ed
lea rdi, [rsi + 0x18]
sub ebx, eax
add ebx, dword [rdi]
mov ecx, dword [rdi + 4]
cmp ebx, ecx
jle 0x18002e5eb
test ecx, ecx
je 0x18002e5d7
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e5dc
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.180016a54
mov dword [rdi], ebx
mov r8, qword [rbp + 0x40]
xor r9d, r9d
mov edx, dword [rsi + 0x18]
mov rcx, qword [rsi + 0x20]
mov qword [rsp + 0x20], r12
call fcn.1800029c4
mov dword [rsi + 0xc], eax
xor r9d, r9d
mov eax, dword [rbp + 0x48]
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x18002e622
mov r13d, dword [rsp + 0x78]
mov r11d, dword [rsp + 0x5c]
mov rdi, qword [rbp + 0x1e0]
test r11b, r11b
jne 0x18002e14f
mov rax, qword [rsi + 0x30]
mov r8, rdi
sub r8, rax
mov ebx, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002e659
add rax, rbx
test ecx, ecx
jne 0x18002e646
test edx, edx
je 0x18002e14f
mov r10, qword [rsi + 0x30]
mov r15d, dword [rsi + 0x10]
mov qword [rbp - 0x70], r10
mov byte [rsp + 0x51], bl
jmp 0x18002e153
mov rdi, qword [rbp + 0x1e0]
mov r10, r9
mov r11d, dword [rsp + 0x5c]
mov r13d, dword [rsp + 0x78]
jmp 0x18002e153
mov ecx, dword [rbp + 0x1e8]
lea eax, [r15 + 1]
mov r15d, 1
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, r15
jb 0x18002e6ce
jbe 0x18002e6c1
lea r8, [rbx - 1]
mov rdx, r10
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r9d, r9d
mov byte [rbx + rdi - 1], r9b
jmp 0x18002e6ce
mov r15d, 1
cmp dword [r14 + 0x1240], r12d
jne 0x18002e6f3
cmp byte [rsp + 0x58], r9b
je 0x18002e6ec
xor edx, edx
xor ecx, ecx
call fcn.1800057ac
xor r9d, r9d
jmp 0x18002e6f3
mov dword [r14 + 0x3164], r15d
mov r13d, dword [rsp + 0x64]
test r13b, r13b
jne 0x18002e766
mov r8d, r15d
lea rcx, [rbp - 0x80]
mov edx, r12d
call fcn.180004770
mov rax, qword [0x180044c40]
lea rcx, [rbp - 8]
movdqu xmm0, xmmword [rax + 0xc1c]
movups xmmword [rbp - 8], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp + 4], xmm0
call fcn.180002c6c
movss xmm5, dword [r14 + 0xb14]
movaps xmm0, xmm7
mov rdx, qword [rbp - 0x78]
mov r8d, eax
unpcklps xmm0, xmm9
mov r9b, r15b
movq rcx, xmm0
movss dword [rsp + 0x20], xmm5
call fcn.1800044b8
xor r9d, r9d
mov r10, qword [rbp - 0x60]
movaps xmm0, xmm10
movss dword [rbp - 0x28], xmm7
movaps xmm1, xmm9
movss dword [rbp - 0x24], xmm9
addss xmm0, xmm7
addss xmm1, xmm11
lea rax, [rbp + 0x208]
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
test r13b, r13b
je 0x18002e7af
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x208], xmm0
jmp 0x18002e7d5
addss xmm7, dword [r14 + 0xb0c]
movaps xmm0, xmm9
addss xmm0, dword [r14 + 0xb10]
movss dword [rbp + 0x208], xmm7
movss dword [rbp + 0x20c], xmm0
movaps xmm14, xmm15
movsd xmm0, qword [rax]
movaps xmm8, xmm15
movsd qword [rbp - 0x50], xmm0
cmp byte [rsp + 0x76], r9b
je 0x18002e7f8
mov rdi, qword [rsi + 0x30]
mov qword [rbp + 0x1e0], rdi
mov r11b, byte [rbp + 0x1d8]
mov r8d, dword [rsp + 0x54]
test r11b, r11b
jne 0x18002e919
test r8b, r8b
jne 0x18002e919
test r13b, r13b
je 0x18002e86e
mov dl, byte [rdi]
lea rbx, [rdi + 1]
mov ecx, r9d
test dl, dl
je 0x18002e842
mov r8d, 0xa
cmp dl, r8b
lea eax, [rcx + 1]
mov dl, byte [rbx]
cmovne eax, ecx
add rbx, r15
mov ecx, eax
test dl, dl
jne 0x18002e82e
sub rbx, r15
mov eax, 0xa
cmp byte [rbx], al
je 0x18002e856
cmp byte [rbx], 0xd
je 0x18002e856
add ecx, r15d
movd xmm8, ecx
movaps xmm14, xmm10
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [r14 + 0xf18]
jmp 0x18002e89f
cmp dword [r14 + 0x1240], r12d
jne 0x18002e87d
movsxd rbx, dword [rsi + 0x10]
jmp 0x18002e88a
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], r9b
jne 0x18002e881
add rbx, rdi
mov rax, rbx
sub rax, rdi
cmp rax, 0x200000
jge 0x18002f0cc
mov rax, qword [0x180044c40]
lea r8, [rbp - 0x28]
test r13b, r13b
lea rcx, [rbp - 0x80]
cmovne r8, r9
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 0x74], xmm0
call fcn.180002c6c
movss xmm2, dword [r14 + 0xf18]
lea r9, [rbp - 0x50]
mov rdx, qword [r14 + 0xf10]
mov rcx, qword [r10 + 0x298]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
call fcn.18001f900
xor r9d, r9d
jmp 0x18002f0cc
movsxd rax, dword [rsi + 0x10]
xor r10d, r10d
mov r15, qword [rsi + 0x20]
mov edx, 0xfffffc18
test r11b, r11b
mov qword [rbp - 0x18], rax
movaps xmm5, xmm15
movaps xmm9, xmm15
lea rbx, [rdi + rax]
mov r13d, r10d
mov qword [rbp - 0x38], rbx
lea r11d, [r10 + 1]
mov r12d, edx
mov ecx, r10d
je 0x18002e95d
movsxd rax, dword [rsi + 0x54]
or edx, 0xffffffff
mov ecx, r11d
lea r9, [r15 + rax*2]
test r8b, r8b
je 0x18002e979
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
cmovl eax, dword [rsi + 0x58]
or r12d, 0xffffffff
cdqe
add ecx, r11d
lea r13, [r15 + rax*2]
movzx eax, byte [rsp + 0x64]
mov edi, r10d
movzx r8d, word [r15]
add ecx, eax
mov rax, r15
test r8w, r8w
je 0x18002e9d8
mov ebx, 2
cmp r8w, word [rbp + 0x10]
jne 0x18002e9c7
add edi, r11d
cmp edx, 0xffffffff
jne 0x18002e9b2
cmp rax, r9
jb 0x18002e9b2
sub ecx, r11d
mov edx, edi
test ecx, ecx
jle 0x18002e9d4
cmp r12d, 0xffffffff
jne 0x18002e9c7
cmp rax, r13
jb 0x18002e9c7
sub ecx, r11d
mov r12d, edi
test ecx, ecx
jle 0x18002e9d4
add rax, rbx
movzx r8d, word [rax]
test r8w, r8w
jne 0x18002e995
mov rbx, qword [rbp - 0x38]
add edi, r11d
mov r8, r9
cmp edx, 0xffffffff
mov eax, edi
cmovne eax, edx
cmp r12d, 0xffffffff
mov dword [rbp + 0x208], eax
cmove r12d, edi
cmp r9, r15
jbe 0x18002ea0f
mov ecx, 0xa
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x18002ea0f
mov r8, rax
cmp rax, r15
ja 0x18002e9fe
mov byte [rsp + 0x30], r10b
lea rcx, [rbp - 0x48]
mov rdx, r14
mov qword [rsp + 0x20], r10
call fcn.18002a6a0
movd xmm12, dword [rbp + 0x208]
xor r9d, r9d
movss xmm0, dword [r14 + 0xf18]
cvtdq2ps xmm12, xmm12
movss xmm7, dword [rax]
mulss xmm12, xmm0
test r12d, r12d
js 0x18002eaa0
mov r8, r13
cmp r13, r15
jbe 0x18002ea69
lea ecx, [r9 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x18002ea69
mov r8, rax
cmp rax, r15
ja 0x18002ea58
mov byte [rsp + 0x30], r9b
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x20], r9
mov rdx, r14
mov r9, r13
call fcn.18002a6a0
movss xmm0, dword [r14 + 0xf18]
xor r9d, r9d
movd xmm9, r12d
cvtdq2ps xmm9, xmm9
movss xmm5, dword [rax]
mulss xmm9, xmm0
mov r13d, dword [rsp + 0x64]
test r13b, r13b
je 0x18002eabc
movd xmm8, edi
movaps xmm14, xmm10
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm0
mov r12b, byte [rbp + 0x1d8]
test r12b, r12b
je 0x18002ebe6
cmp byte [rsi + 0xe84], r9b
je 0x18002ebe6
test dword [rbp + 0x1f8], 0x1000
jne 0x18002eb35
movss xmm2, dword [rsi + 0x50]
movaps xmm0, xmm10
comiss xmm2, xmm7
mulss xmm0, dword [0x1800401d8]
movaps xmm1, xmm7
subss xmm10, dword [r14 + 0xb0c]
jbe 0x18002eb15
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
jmp 0x18002eb23
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x18002eb39
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x50], xmm0
jmp 0x18002eb39
mov dword [rsi + 0x50], r9d
test r13b, r13b
je 0x18002ebdf
movaps xmm0, xmm12
subss xmm0, dword [r14 + 0xf18]
comiss xmm6, xmm0
jbe 0x18002eb5e
movaps xmm6, xmm15
maxss xmm6, xmm0
jmp 0x18002eb8d
movss xmm2, dword [r14 + 0xb10]
movaps xmm1, xmm11
addss xmm2, xmm2
movaps xmm0, xmm12
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x18002eb8d
movaps xmm6, xmm12
subss xmm6, xmm11
addss xmm6, xmm2
comiss xmm15, xmm6
movss xmm2, dword [r14 + 0xb10]
jbe 0x18002eba2
movaps xmm2, xmm15
jmp 0x18002ebb9
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm11
maxss xmm2, xmm15
minss xmm2, xmm6
movss xmm1, dword [rbp - 0x4c]
mov rax, qword [rbp - 0x60]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
addss xmm1, xmm0
movss dword [rbp - 0x4c], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rsi + 0xe84], r9b
movss xmm10, dword [rsi + 0x50]
movss xmm11, dword [0x180040224]
cmp byte [rsp + 0x54], r9b
je 0x18002ee61
mov edx, dword [rsi + 0x5c]
mov eax, edx
mov ecx, dword [rsi + 0x58]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea r8, [r15 + rax*2]
movsxd rax, edx
lea rdi, [r15 + rax*2]
test r12b, r12b
je 0x18002ec28
movaps xmm1, xmm11
jmp 0x18002ec30
movss xmm1, dword [0x1800401f0]
mov rax, qword [0x180044c40]
lea rcx, [rbp - 0x80]
movdqu xmm0, xmmword [rax + 0xe9c]
mulss xmm1, dword [rax + 0xad0]
movups xmmword [rbp - 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x74], xmm0
call fcn.180002c6c
mov r15d, eax
test r13b, r13b
je 0x18002ec75
movss dword [rbp - 0x40], xmm15
movaps xmm13, xmm15
jmp 0x18002ec7e
movss xmm13, dword [0x180040240]
movss xmm6, dword [rbp - 0x4c]
mov qword [rbp + 0x208], r8
addss xmm6, xmm9
addss xmm5, dword [rbp - 0x50]
subss xmm6, xmm15
subss xmm5, xmm10
cmp r8, rdi
jae 0x18002ee5b
movss xmm3, dword [rbp - 0x1c]
xor r12d, r12d
movss xmm4, dword [rbp - 0x24]
movss xmm11, dword [rbp - 0x40]
mov r13, qword [rbp - 0x60]
lea ebx, [r12 + 1]
movaps xmm0, xmm3
addss xmm0, dword [r14 + 0xf18]
comiss xmm6, xmm0
ja 0x18002ee3f
comiss xmm4, xmm6
jbe 0x18002ed0d
cmp r8, rdi
jae 0x18002ee23
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rbp + 0x208], r8
cmp ax, cx
je 0x18002ee23
cmp r8, rdi
jb 0x18002eceb
jmp 0x18002ee23
lea rax, [rbp + 0x208]
mov byte [rsp + 0x30], bl
mov r9, rdi
mov qword [rsp + 0x20], rax
mov rdx, r14
lea rcx, [rbp - 8]
call fcn.18002a6a0
movss xmm0, dword [rbp - 8]
comiss xmm15, xmm0
jb 0x18002ed6e
mov rax, qword [r14 + 0xf10]
cmp dword [rax], 0x20
jle 0x18002ed51
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18002ed56
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1800401ec]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 8], xmm0
movss xmm4, dword [rbp - 0x24]
movaps xmm2, xmm5
movss xmm3, dword [rbp - 0x1c]
addss xmm5, xmm0
movss xmm9, dword [rbp - 0x20]
addss xmm2, xmm15
movaps xmm1, xmm11
movaps xmm0, xmm13
subss xmm1, dword [r14 + 0xf18]
addss xmm0, xmm6
minss xmm5, xmm9
maxss xmm2, dword [rbp - 0x28]
addss xmm1, xmm6
minss xmm0, xmm3
movss dword [rbp - 0x78], xmm5
movss dword [rbp - 0x80], xmm2
maxss xmm1, xmm4
comiss xmm0, xmm4
movss dword [rbp - 0x7c], xmm1
movss dword [rbp - 0x74], xmm0
jbe 0x18002ee1c
comiss xmm3, xmm1
jbe 0x18002ee1c
comiss xmm5, dword [rbp - 0x28]
jbe 0x18002ee1c
comiss xmm9, xmm2
jbe 0x18002ee1c
mov rcx, qword [r13 + 0x298]
lea r8, [rbp - 0x78]
mov dword [rsp + 0x28], r12d
lea rdx, [rbp - 0x80]
mov r9d, r15d
movss dword [rsp + 0x20], xmm15
call fcn.18001f658
movss xmm1, dword [rbp - 0x40]
movss xmm3, dword [rbp - 0x1c]
movss xmm4, dword [rbp - 0x24]
movss dword [rbp - 0x40], xmm1
movss xmm11, dword [rbp - 0x40]
mov r8, qword [rbp + 0x208]
movss xmm5, dword [rbp - 0x50]
subss xmm5, xmm10
addss xmm6, dword [r14 + 0xf18]
cmp r8, rdi
jb 0x18002ecc3
movss xmm11, dword [0x180040224]
xor r9d, r9d
mov rbx, qword [rbp - 0x38]
mov r13d, dword [rsp + 0x64]
mov r12b, byte [rbp + 0x1d8]
movss xmm13, dword [rbp + 8]
test r13b, r13b
jne 0x18002ee74
cmp qword [rbp - 0x18], 0x200000
jge 0x18002ef1d
mov rax, qword [0x180044c40]
lea r8, [rbp - 0x28]
movss xmm1, dword [rbp - 0x4c]
lea rcx, [rbp - 0x80]
subss xmm1, xmm15
test r13b, r13b
movdqu xmm0, xmmword [rax + 0xbac]
cmovne r8, r9
movups xmmword [rbp - 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp + 0x1dc], xmm1
movss dword [rbp - 0x74], xmm0
movss xmm0, dword [rbp - 0x50]
subss xmm0, xmm10
movss dword [rbp + 0x1d8], xmm0
call fcn.180002c6c
mov rcx, qword [rbp + 0x1e0]
lea r9, [rbp + 0x1d8]
mov rdi, qword [rbp - 0x60]
movss xmm2, dword [r14 + 0xf18]
mov rdx, qword [r14 + 0xf10]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rcx
mov rcx, qword [rdi + 0x298]
mov dword [rsp + 0x20], eax
call fcn.18001f900
xor r9d, r9d
jmp 0x18002ef21
mov rdi, qword [rbp - 0x60]
test r12b, r12b
je 0x18002f0bb
movss xmm0, dword [r14 + 0x18]
addss xmm0, dword [rsi + 0xe80]
movss dword [rsi + 0xe80], xmm0
cmp byte [r14 + 0x5b], r9b
je 0x18002ef72
comiss xmm15, xmm0
jae 0x18002ef72
movss xmm1, dword [0x18004022c]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x180040210]
xor r9d, r9d
comiss xmm1, xmm0
jae 0x18002ef72
mov cl, r9b
lea esi, [r9 + 1]
jmp 0x18002ef7a
mov esi, 1
mov cl, sil
movss xmm0, dword [rbp - 0x4c]
addss xmm0, xmm12
addss xmm7, dword [rbp - 0x50]
subss xmm0, xmm15
subss xmm7, xmm10
cvttss2si eax, xmm7
movd xmm6, eax
cvtdq2ps xmm6, xmm6
cvttss2si eax, xmm0
movss dword [rbp - 0x80], xmm6
movaps xmm3, xmm6
addss xmm3, xmm11
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x78], xmm3
movaps xmm1, xmm7
movaps xmm2, xmm7
subss xmm1, dword [r14 + 0xf18]
subss xmm2, dword [0x180040234]
addss xmm1, dword [0x1800401ec]
movss dword [rbp - 0x74], xmm2
movss dword [rbp - 0x7c], xmm1
test cl, cl
je 0x18002f06d
comiss xmm2, dword [rbp - 0x24]
jbe 0x18002f06d
movss xmm0, dword [rbp - 0x1c]
comiss xmm0, xmm1
jbe 0x18002f06d
comiss xmm3, dword [rbp - 0x28]
jbe 0x18002f06d
movss xmm0, dword [rbp - 0x20]
comiss xmm0, xmm6
jbe 0x18002f06d
mov rax, qword [0x180044c40]
lea rcx, [rbp - 8]
movss dword [rbp + 0x1d8], xmm6
movss dword [rbp + 0x1dc], xmm2
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 8], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp + 4], xmm0
call fcn.180002c6c
mov rcx, qword [rdi + 0x298]
lea rdx, [rbp - 0x80]
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x1d8]
call fcn.18001f40c
xor r9d, r9d
movss xmm9, dword [rbp - 0x58]
movss xmm12, dword [rbp - 0x54]
mov r12d, dword [rsp + 0x6c]
cmp byte [rsp + 0x5c], r9b
jne 0x18002f0cc
movss xmm0, dword [r14 + 0xf18]
subss xmm6, xmm11
subss xmm7, xmm0
movss dword [r14 + 0x2ef4], xmm0
mov byte [r14 + 0x2ee8], sil
movss dword [r14 + 0x2eec], xmm6
movss dword [r14 + 0x2ef0], xmm7
jmp 0x18002f0cc
movss xmm9, dword [rbp - 0x58]
movss xmm12, dword [rbp - 0x54]
mov r12d, dword [rsp + 0x6c]
mov edi, dword [rbp - 0x68]
test dil, dil
je 0x18002f0dc
call fcn.18000d5b8
xor r9d, r9d
test r13b, r13b
je 0x18002f15b
addss xmm8, dword [r14 + 0xb10]
lea rcx, [rbp + 0x1d8]
movss dword [rbp + 0x1d8], xmm14
movss dword [rbp + 0x1dc], xmm8
call fcn.180029a90
or dword [r14 + 0x1a68], 0x401
call fcn.1800088cc
mov eax, dword [r14 + 0x1a84]
mov edi, dword [rbp + 0xa8]
and eax, 0x80
or edi, eax
call fcn.18001017c
xor r9d, r9d
cmp dword [r14 + 0x1a7c], r9d
jne 0x18002f158
mov eax, dword [rbp + 0xa4]
mov dword [r14 + 0x1a80], eax
mov dword [r14 + 0x1a7c], r12d
mov dword [r14 + 0x1a84], edi
mov edi, dword [rbp - 0x68]
cmp byte [r14 + 0x2fa8], r9b
je 0x18002f19f
test dil, dil
jne 0x18002f19f
mov rax, qword [0x180044c40]
lea rcx, [0x18003f9ac]
mov rdx, qword [rbp + 0x1e0]
mov r8, rbx
mov qword [rax + 0x2fc8], rcx
lea rcx, [0x18003f9a8]
mov qword [rax + 0x2fd0], rcx
lea rcx, [rbp - 0x50]
call fcn.180015080
comiss xmm13, xmm15
jbe 0x18002f1d9
addss xmm12, dword [r14 + 0xb24]
addss xmm9, dword [r14 + 0xb10]
mov rdx, qword [rbp + 0x1d0]
mov r9d, 1
xor r8d, r8d
movaps xmm0, xmm12
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180003d90
movzx r10d, byte [rsp + 0x51]
mov r9d, dword [rbp + 0x1f8]
test r10b, r10b
je 0x18002f1fa
bt r9d, 0x1b
jb 0x18002f1fa
mov ecx, r12d
call fcn.180005900
movzx ecx, byte [rsp + 0x59]
test r9b, 0x20
mov eax, r10d
cmovne eax, ecx
jmp 0x18002c700