Function at 0x18004b960
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x220
mov rbx, qword [0x180089a48]
mov r14, rcx
movaps xmmword [rax - 0x58], xmm6
mov r13, rbx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
mov rax, qword [rbx + 0x1af0]
mov qword [rsp + 0x70], rbx
mov byte [rax + 0x80], 1
mov r15, qword [rbx + 0x1af0]
cmp byte [r15 + 0x83], 0
jne 0x18004bc44
mov ecx, dword [rbp + 0x188]
mov eax, ecx
shr eax, 0xe
mov esi, ecx
and al, 1
shr esi, 0x14
mov dword [rsp + 0x68], eax
and sil, 1
mov eax, ecx
mov dword [rsp + 0x64], esi
shr eax, 0xf
and al, 1
mov dword [rbp - 0x74], eax
mov eax, ecx
shr eax, 0x10
not al
and al, 1
mov dword [rbp - 0x68], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rbp - 0x60], eax
test sil, sil
je 0x18004ba3c
call fcn.18002f550
mov rbx, qword [0x180089a48]
movsxd rax, dword [r15 + 0xc0]
xor edx, edx
mov r8, qword [r15 + 0xc8]
mov rcx, r14
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180024310
mov edi, eax
mov dword [rsp + 0x6c], eax
cmp dword [rbx + 0x1b38], eax
jne 0x18004ba6d
mov dword [rbx + 0x1b3c], eax
cmp dword [rbx + 0x1b78], edi
jne 0x18004ba7c
mov byte [rbx + 0x1b7c], 1
mov rcx, r14
cmp r14, 0xffffffffffffffff
jae 0x18004baa2
movzx edx, byte [rcx]
test dl, dl
je 0x18004baa2
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x18004ba99
cmp byte [rax], dl
je 0x18004baa2
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x18004ba85
movss xmm0, dword [rbx + 0x19a8]
xorps xmm8, xmm8
movss xmm12, dword [0x180065c74]
cmp r14, rcx
jne 0x18004bac1
xorps xmm7, xmm7
jmp 0x18004bb0b
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 0x168]
mov rcx, qword [rbx + 0x19a0]
movaps xmm2, xmm0
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm12
call fcn.180042a40
movss xmm0, dword [rbp + 0x168]
addss xmm0, dword [0x180065a78]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x16c]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x3c], xmm7
test sil, sil
je 0x18004bb26
movss xmm0, dword [r13 + 0x19a8]
mulss xmm0, dword [0x180065b30]
movss xmm6, dword [r13 + 0x1594]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18002ebe0
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x168]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18002ec50
comiss xmm7, xmm8
jbe 0x18004bb6c
movaps xmm2, xmm7
addss xmm2, dword [r13 + 0x15a8]
jmp 0x18004bb6f
xorps xmm2, xmm2
movss xmm4, dword [r15 + 0xd4]
mov ebx, 1
movss xmm3, dword [r15 + 0xd0]
movaps xmm0, xmm4
movss xmm7, dword [rbp + 0x16c]
movaps xmm1, xmm3
movss xmm9, dword [rbp + 0x168]
addss xmm0, xmm7
movss dword [rbp - 8], xmm7
addss xmm2, xmm9
movss dword [rsp + 0x78], xmm3
addss xmm1, xmm9
movss dword [rsp + 0x7c], xmm4
movss dword [rbp - 0x30], xmm3
movss dword [rbp - 0x7c], xmm0
movaps xmm0, xmm4
movss dword [rbp - 0x2c], xmm4
addss xmm0, xmm7
movss dword [rbp - 0x80], xmm1
addss xmm2, xmm3
mov qword [rbp - 0x48], r15
movss dword [rbp - 0x24], xmm0
movss dword [rbp - 0x28], xmm2
test sil, sil
je 0x18004bd9d
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.180026e50
test al, al
jne 0x18004bc7f
movss xmm1, dword [rbp - 0x24]
lea rcx, [rbp + 0x168]
subss xmm1, dword [rbp - 0x2c]
movss xmm0, dword [rbp - 0x28]
subss xmm0, dword [rbp - 0x30]
movss dword [rbp + 0x16c], xmm1
movss xmm1, dword [r13 + 0x1594]
movss dword [rbp + 0x168], xmm0
call fcn.180026d30
call fcn.18002f670
xor al, al
lea r11, [rsp + 0x220]
movaps xmm6, xmmword [r11 - 0x20]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm9, xmmword [r11 - 0x50]
movaps xmm10, xmmword [r11 - 0x60]
movaps xmm11, xmmword [r11 - 0x70]
movaps xmm12, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [r13 + 0x170c]
mov ecx, 3
call fcn.18002eef0
movss xmm1, dword [r13 + 0x1598]
mov ecx, 6
call fcn.18002ef50
movss xmm1, dword [r13 + 0x159c]
mov ecx, 7
call fcn.18002ef50
lea rdx, [r13 + 0x1590]
mov ecx, ebx
call fcn.18002efd0
movss xmm6, dword [rbp - 0x80]
lea r8, [rbp + 0x168]
movss xmm10, dword [rsp + 0x78]
movaps xmm0, xmm6
movss xmm1, dword [rbp - 0x7c]
subss xmm0, xmm10
movss xmm11, dword [rsp + 0x7c]
movzx r9d, bl
subss xmm1, xmm11
movss dword [rbp - 0x38], xmm6
mov edx, edi
movss dword [rbp - 0x40], xmm10
mov rcx, r14
movss dword [rbp - 0x5c], xmm11
movss dword [rbp + 0x168], xmm0
mov dword [rsp + 0x20], 0x10004
movss dword [rbp + 0x16c], xmm1
call fcn.180029ad0
mov ecx, 3
movzx ebx, al
call fcn.18002f060
mov r9, qword [0x180089a48]
movsxd rcx, dword [r9 + 0x1c10]
mov rdx, qword [r9 + 0x1c18]
lea r8, [rcx + rcx*4]
movsxd rcx, dword [rdx + r8*4 - 0x14]
movups xmm0, xmmword [rdx + r8*4 - 0x10]
add rcx, rcx
movups xmmword [r9 + rcx*8 + 0x160c], xmm0
dec dword [r9 + 0x1c10]
test bl, bl
jne 0x18004bd79
call fcn.180029ce0
jmp 0x18004bc3f
mov rbx, qword [r13 + 0x1af0]
mov qword [rbp - 0x48], rbx
mov eax, dword [rbx + 0x140]
or dword [rbx + 0x148], eax
subss xmm9, dword [rbx + 0x74]
mov ebx, 1
jmp 0x18004be00
subss xmm2, xmm3
movaps xmm1, xmm6
subss xmm0, xmm4
lea rcx, [rbp + 0x168]
movss dword [rbp + 0x168], xmm2
movss dword [rbp + 0x16c], xmm0
call fcn.180026d30
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.180026e50
test al, al
je 0x18004bc44
movss xmm0, dword [rbp - 0x80]
movss xmm11, dword [rsp + 0x7c]
movss xmm10, dword [rsp + 0x78]
movss dword [rbp - 0x38], xmm0
movss dword [rbp - 0x5c], xmm11
movss dword [rbp - 0x40], xmm10
movaps xmmword [rsp + 0x180], xmm14
lea rcx, [rsp + 0x78]
mov edx, edi
movaps xmmword [rsp + 0x170], xmm15
call fcn.180027080
mov byte [rbp - 0x76], al
movzx r11d, al
test al, al
je 0x18004be30
mov dword [r13 + 0x1f78], ebx
xor eax, eax
lea r14, [r13 + 0x2070]
cmp dword [r14], edi
mov rbx, r14
mov edx, edi
mov rcx, r15
cmovne rbx, rax
mov qword [rsp + 0x58], rbx
call fcn.1800271c0
movzx esi, al
test al, al
je 0x18004be9c
cmp qword [r13 + 0x1da0], r15
jne 0x18004be9c
mov ecx, dword [r15 + 0x1b0]
cmp dword [r13 + 0x1db0], ecx
jne 0x18004be9c
mov byte [rbp + 0x168], 1
mov byte [rbp + 0x198], 0
mov qword [rsp + 0x218], r12
test r11b, r11b
je 0x18004beb8
cmp byte [r13 + 0x420], 0
je 0x18004beb8
mov r12b, 1
jmp 0x18004bebb
mov byte [rbp + 0x168], 0
test sil, sil
je 0x18004be79
mov byte [rbp + 0x198], 1
mov byte [rbp + 0x168], 0
jmp 0x18004be80
xor r12b, r12b
mov edi, dword [r13 + 0x1b38]
mov eax, dword [rsp + 0x6c]
mov byte [rsp + 0x50], r12b
cmp edi, eax
je 0x18004bef0
cmp dword [r13 + 0x1c7c], eax
je 0x18004beeb
cmp dword [r13 + 0x1c70], eax
jne 0x18004bef0
cmp dword [r13 + 0x1c90], 3
jne 0x18004bef0
mov r13b, 1
jmp 0x18004bef3
xor r13b, r13b
mov eax, dword [rsp + 0x64]
mov byte [rbp - 0x78], r13b
test al, al
je 0x18004bf42
test rbx, rbx
je 0x18004bf42
test edi, edi
jne 0x18004bf42
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180024310
mov rcx, qword [rsp + 0x70]
cmp dword [rcx + 0x1b78], eax
jne 0x18004bf3e
mov bl, 1
jmp 0x18004bf50
mov eax, dword [rsp + 0x64]
xor bl, bl
test al, al
je 0x18004bf7d
cmp qword [rsp + 0x58], 0
je 0x18004bf7d
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180024310
cmp edi, eax
jne 0x18004bf7d
mov al, 1
jmp 0x18004bf7f
xor al, al
mov byte [rsp + 0x60], al
mov byte [rbp + 0x190], 0
cmp edi, dword [rsp + 0x6c]
je 0x18004bfab
mov ecx, dword [rbp + 0x188]
test cl, 0x10
jne 0x18004bfa0
test r13b, r13b
je 0x18004bfab
cmp byte [rsp + 0x64], 0
mov byte [rbp - 0x58], 1
je 0x18004bfaf
mov byte [rbp - 0x58], 0
test sil, sil
jne 0x18004c0d9
test r12b, r12b
jne 0x18004c0d9
test bl, bl
jne 0x18004c0d9
test r13b, r13b
jne 0x18004c0d9
test al, al
jne 0x18004c0dc
mov rbx, qword [rsp + 0x58]
mov esi, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x64]
mov r14, qword [rsp + 0x70]
cmp dword [r14 + 0x1b38], esi
je 0x18004c08f
test r12b, r12b
je 0x18004c082
mov rdx, r15
mov ecx, esi
call fcn.180026bb0
call fcn.180031160
mov rcx, r15
call fcn.18002e830
mov eax, dword [r14 + 0x1b4c]
mov ecx, dword [rbp + 0x188]
or eax, 3
mov dword [r14 + 0x1b4c], eax
test dil, dil
jne 0x18004c039
test cl, cl
jns 0x18004c043
or eax, 0xc
mov dword [r14 + 0x1b4c], eax
mov rax, qword [r14 + 0x1b58]
or dword [r14 + 0x1b50], 2
or rax, 0x180
mov qword [r14 + 0x1b58], rax
test dil, dil
je 0x18004c06f
or rax, 0x60
mov qword [r14 + 0x1b58], rax
test ecx, 0x440
je 0x18004c082
or rax, 1
mov qword [r14 + 0x1b58], rax
cmp dword [r14 + 0x1b38], esi
jne 0x18004c28d
test rbx, rbx
jne 0x18004c099
call fcn.180026c80
cmp dword [r14 + 0x1b38], esi
jne 0x18004c28d
cmp byte [r14 + 0x420], 0
je 0x18004c2bd
test r13b, r13b
jne 0x18004c2bd
mov r13, qword [rsp + 0x58]
test r12b, r12b
jne 0x18004c2c2
mov byte [rbp + 0x190], 1
mov cl, 1
jmp 0x18004c2a0
mov r12b, 1
mov rbx, qword [rsp + 0x58]
mov r13b, 1
mov esi, dword [rsp + 0x6c]
mov qword [rsp + 0x58], rbx
cmp edi, esi
je 0x18004bfe3
mov rdi, r14
mov qword [rsp + 0x58], r14
mov dword [r14 + 0xe70], 0xbe99999a
mov rbx, 0xffffffffffffffff
mov r14, qword [rbp + 0x170]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x18004c116
inc ebx
lea rcx, [rdi + 0x30]
mov edx, ebx
call fcn.180035a00
mov rcx, qword [rdi + 0x38]
mov rdx, r14
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
movsxd rsi, dword [rbp + 0x178]
lea rcx, [rdi + 0x10]
lea edx, [rsi + 1]
call fcn.180035ae0
lea rcx, [rdi + 0x20]
xor edx, edx
call fcn.180035a00
mov rdx, rdi
mov byte [rdi + 0x40], 0
dec rsi
mov rdi, r14
mov r14, qword [rdx + 0x18]
mov rbx, r14
lea rsi, [r14 + rsi*2]
cmp r14, rsi
jae 0x18004c1b0
cmp byte [rdi], 0
je 0x18004c1ab
xor r8d, r8d
lea rcx, [rbp - 0x50]
mov rdx, rdi
call fcn.180024670
movsxd rcx, eax
mov eax, dword [rbp - 0x50]
add rdi, rcx
test eax, eax
je 0x18004c1ab
cmp eax, 0xffff
ja 0x18004c1a6
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x18004c177
mov rdx, qword [rsp + 0x58]
sub edi, dword [rbp + 0x170]
xor ecx, ecx
mov esi, dword [rsp + 0x6c]
mov word [rbx], cx
sub rbx, r14
sar rbx, 1
mov dword [rdx + 8], edi
mov edi, dword [rsp + 0x64]
mov dword [rdx + 4], ebx
cmp dword [rdx], esi
jne 0x18004c1f7
cmp dword [rdx + 0x4c], ebx
mov ecx, ebx
cmovl ecx, dword [rdx + 0x4c]
cmp dword [rdx + 0x50], ebx
mov dword [rdx + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [rdx + 0x50]
cmp dword [rdx + 0x54], ebx
mov dword [rdx + 0x50], ecx
cmovl ebx, dword [rdx + 0x54]
mov dword [rdx + 0x54], ebx
jmp 0x18004c24c
movzx eax, dil
mov dword [rdx], esi
xor al, r13b
mov qword [rdx + 0x48], rcx
mov dword [rdx + 0xe62], 0x630000
mov dword [rdx + 0xe68], ecx
mov dword [rdx + 0xe6c], 0x3e7
mov qword [rdx + 0x50], rcx
mov dword [rdx + 0x58], 0x10000
mov dword [rdx + 0x60], ecx
mov byte [rdx + 0x5c], al
test dil, dil
jne 0x18004c24c
mov ecx, dword [rbp - 0x58]
mov eax, 1
cmp byte [rbp + 0x168], dil
movzx ecx, cl
cmovne ecx, eax
mov dword [rbp - 0x58], ecx
test dword [rbp + 0x188], 0x2000
je 0x18004c25c
mov byte [rdx + 0x58], r13b
test dil, dil
jne 0x18004c283
cmp byte [rbp + 0x198], dil
jne 0x18004c27f
cmp byte [rsp + 0x50], dil
je 0x18004c283
mov rax, qword [rsp + 0x70]
cmp byte [rax + 0x148], dil
je 0x18004c283
mov byte [rbp - 0x58], r13b
mov rbx, qword [rsp + 0x58]
jmp 0x18004bfe7
mov r13, qword [rsp + 0x58]
test r13, r13
je 0x18004c29e
cmp byte [rsp + 0x60], 0
jne 0x18004c2c2
xor cl, cl
mov byte [rbp + 0x168], cl
test r13, r13
je 0x18004c2c6
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
je 0x18004c2c6
test cl, cl
je 0x18004c2c6
mov dl, 1
jmp 0x18004c2c8
mov r13, qword [rsp + 0x58]
mov cl, 1
jmp 0x18004c2a0
xor dl, dl
mov eax, dword [rsp + 0x68]
mov dword [rbp - 0x70], edx
movzx r15d, dl
mov byte [rbp - 0x77], 0
mov byte [rsp + 0x50], 0
test al, al
je 0x18004c3d5
test r13, r13
je 0x18004c3d5
test cl, cl
jne 0x18004c2f9
test dl, dl
je 0x18004c3e6
mov r12d, dword [rbp + 0x178]
lea rcx, [r13 + 0x10]
lea edx, [r12 + 1]
call fcn.180035ae0
mov r14, qword [r13 + 0x18]
movsxd rbx, dword [r13 + 0x10]
mov rdi, r14
mov rcx, qword [rbp + 0x170]
dec rbx
mov rsi, rcx
lea rbx, [r14 + rbx*2]
cmp r14, rbx
jae 0x18004c371
nop
cmp byte [rsi], 0
je 0x18004c36a
xor r8d, r8d
lea rcx, [rbp + 0x198]
mov rdx, rsi
call fcn.180024670
movsxd rcx, eax
mov eax, dword [rbp + 0x198]
add rsi, rcx
test eax, eax
je 0x18004c36a
cmp eax, 0xffff
ja 0x18004c365
mov word [rdi], ax
add rdi, 2
cmp rdi, rbx
jb 0x18004c330
mov rcx, qword [rbp + 0x170]
mov eax, dword [rsp + 0x68]
sub esi, ecx
xor r9d, r9d
mov word [rdi], r9w
mov edx, r9d
sub rdi, r14
mov dword [r13 + 8], esi
mov r14, qword [rsp + 0x70]
mov esi, dword [rsp + 0x6c]
sar rdi, 1
cmp dword [r13 + 0x4c], edi
mov ecx, edi
mov dword [r13 + 4], edi
cmovl ecx, dword [r13 + 0x4c]
cmp dword [r13 + 0x50], edi
mov dword [r13 + 0x4c], ecx
mov ecx, edi
cmovl ecx, dword [r13 + 0x50]
cmp dword [r13 + 0x54], edi
mov dword [r13 + 0x50], ecx
cmovl edi, dword [r13 + 0x54]
cmp ecx, edi
mov dword [r13 + 0x54], edi
movzx ecx, byte [rbp + 0x168]
cmovne edx, r15d
mov dword [rbp - 0x70], edx
jmp 0x18004c3dc
mov r12d, dword [rbp + 0x178]
test cl, cl
jne 0x18004c3f6
test dl, dl
jne 0x18004c3f6
jmp 0x18004c3ed
mov r12d, dword [rbp + 0x178]
cmp dword [r14 + 0x1b38], esi
jne 0x18004c40a
test al, al
jne 0x18004c40a
test r13, r13
je 0x18004c40a
mov byte [rsp + 0x60], 1
cmp byte [r13 + 0x40], al
jne 0x18004c40f
mov byte [rsp + 0x60], 0
cmp byte [rbp - 0x74], 0
je 0x18004c4f3
mov rdx, qword [r14 + 0x19a0]
cmp dword [rdx + 0x18], 0x2a
jg 0x18004c42c
mov r8, qword [rdx + 0x38]
jmp 0x18004c450
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x18004c444
mov r8, qword [rdx + 0x38]
jmp 0x18004c450
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rdi, [r14 + 0x2f00]
mov rbx, qword [0x180089a48]
mov dword [rdi + 0x14], eax
mov rax, qword [r14 + 0x19a0]
mov qword [rbp + 0x198], rdi
mov ecx, dword [rax + 0x60]
mov dword [rdi + 0x60], ecx
mov rax, qword [r14 + 0x19a0]
movsd xmm0, qword [rax + 0x40]
movsd qword [rdi + 0x40], xmm0
mov rax, qword [r14 + 0x19a0]
mov ecx, dword [rax + 0x64]
mov dword [rdi + 0x64], ecx
mov rax, qword [r14 + 0x19a0]
mov ecx, dword [rax + 0x68]
mov dword [rdi + 0x68], ecx
mov rax, qword [r14 + 0x19a0]
mov rcx, qword [rax + 0x48]
mov qword [rdi + 0x48], rcx
mov rcx, rdi
mov qword [rdi + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rdi + 0x10], eax
call fcn.18002ed50
lea rdx, [rbp + 0x198]
lea rcx, [rbx + 0x1c30]
call fcn.1800356d0
mov rdx, qword [rdi + 0x48]
mov rcx, qword [rbx + 0x1af0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x2b0]
call fcn.18003cb80
movss xmm0, dword [0x180065a40]
xor r15d, r15d
mov ecx, 0x20000c
mov dword [rbp - 0x50], r15d
cmp dword [r14 + 0x1b38], esi
jne 0x18004c8f9
mov eax, dword [r13 + 8]
mov r9d, dword [rbp + 0x188]
mov dword [r13 + 0xe78], r9d
mov dword [r13 + 0x44], r12d
mov qword [r13 + 0xe80], r15
mov qword [r13 + 0xe88], r15
cmp byte [r14 + 0x138], r15b
mov dword [r14 + 0x3234], 1
mov dword [rbp - 0x50], eax
sete al
mov byte [r14 + 0x1b45], al
movss xmm6, dword [r14 + 0x130]
subss xmm6, xmm10
subss xmm6, dword [r14 + 0x1590]
addss xmm6, dword [r13 + 0x48]
cmp byte [rsp + 0x64], r15b
je 0x18004c59f
mov r15, qword [rbp - 0x48]
movss xmm2, dword [r14 + 0x134]
subss xmm2, dword [r15 + 0xd4]
xor r15d, r15d
subss xmm2, dword [r14 + 0x1594]
jmp 0x18004c5ac
movss xmm2, dword [r14 + 0x19a8]
mulss xmm2, xmm0
cmp byte [rbp - 0x58], 0
movzx edi, byte [r14 + 0xc9]
jne 0x18004c733
movzx eax, byte [rbp - 0x76]
test al, al
je 0x18004c5d8
test dil, dil
jne 0x18004c64a
cmp byte [r14 + 0x425], dil
jne 0x18004c733
cmp byte [r14 + 0x420], 0
je 0x18004c6a7
cmp byte [r13 + 0xe75], 0
jne 0x18004c6a7
test al, al
je 0x18004c750
cmp byte [r13 + 0x5c], 0
je 0x18004c617
xor r8d, r8d
lea rcx, [rbp - 0x30]
mov rdx, r13
call fcn.180049b40
movss xmm2, dword [rbp - 0x24]
movaps xmm1, xmm6
mov rcx, r13
call fcn.18004a050
mov r9d, dword [rbp + 0x188]
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], eax
mov dword [r13 + 0x54], eax
mov byte [r13 + 0x5b], 0
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004c750
cmp byte [r14 + 0x425], 0
je 0x18004c5d8
mov r8d, ecx
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004a5d0
mov r8d, 0x60000d
mov byte [r13 + 0xe74], 1
lea rdx, [r13 + 0x4c]
mov dword [r13 + 0xe70], 0xbe99999a
mov rcx, r13
call fcn.18004a5d0
mov r9d, dword [rbp + 0x188]
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004c750
cmp byte [r14 + 0x138], 0
je 0x18004c750
cmp byte [r13 + 0xe75], 0
jne 0x18004c75a
ucomiss xmm8, dword [r14 + 0x3c0]
jne 0x18004c6d7
ucomiss xmm8, dword [r14 + 0x3c4]
je 0x18004c750
cmp byte [r13 + 0x5c], 0
je 0x18004c6f2
xor r8d, r8d
lea rcx, [rbp - 0x30]
mov rdx, r13
call fcn.180049b40
movss xmm2, dword [rbp - 0x24]
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004c704
mov eax, dword [r13 + 0x4c]
mov dword [r13 + 0x50], eax
movaps xmm1, xmm6
mov rcx, r13
call fcn.18004a050
mov r9d, dword [rbp + 0x188]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0xe70], 0xbe99999a
mov byte [r13 + 0xe74], 1
jmp 0x18004c750
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r15d
mov byte [r13 + 0x5b], 0
mov byte [r13 + 0xe75], 1
cmp byte [r13 + 0xe75], 0
je 0x18004c76c
cmp byte [r14 + 0x138], 0
jne 0x18004c76c
mov byte [r13 + 0xe75], 0
cmp byte [r14 + 0x148], 0
je 0x18004c780
cmp byte [r14 + 0x14a], 0
je 0x18004c78f
test dil, dil
je 0x18004c793
cmp byte [r14 + 0x14b], 0
je 0x18004c793
mov bl, 1
jmp 0x18004c795
xor bl, bl
bt r9d, 0xa
jae 0x18004c846
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004c846
mov dl, 1
call fcn.180029a30
test al, al
mov eax, dword [rsp + 0x68]
je 0x18004c84a
test bl, bl
jne 0x18004c84a
cmp byte [r14 + 0x149], bl
jne 0x18004c84a
test al, al
jne 0x18004c84a
mov rcx, qword [r14 + 0x1550]
movsxd rax, dword [r14 + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x18004c803
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x18004c846
cmp rcx, rdx
jb 0x18004c7f1
mov edx, r9d
mov dword [rbp + 0x198], 9
lea rcx, [rbp + 0x198]
call fcn.18004b800
test al, al
je 0x18004c846
mov r8d, dword [rbp + 0x198]
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004a5d0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
mov eax, dword [rsp + 0x68]
cmp dword [r14 + 0x1548], 0
jle 0x18004c8f9
test bl, bl
jne 0x18004c8eb
test al, al
jne 0x18004c8eb
cmp byte [rbp - 0x78], al
jne 0x18004c8eb
mov esi, dword [rbp + 0x188]
mov edi, r15d
mov rbx, r15
nop dword [rax]
mov rax, qword [r14 + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp + 0x198], ecx
cmp ecx, 9
jne 0x18004c8a0
cmp byte [r14 + 0x149], 0
jne 0x18004c8d8
mov edx, esi
lea rcx, [rbp + 0x198]
call fcn.18004b800
test al, al
je 0x18004c8d8
mov r8d, dword [rbp + 0x198]
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004a5d0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
inc edi
add rbx, 2
cmp edi, dword [r14 + 0x1548]
jl 0x18004c880
mov esi, dword [rsp + 0x6c]
lea rcx, [r14 + 0x1548]
xor edx, edx
call fcn.180035ae0
xor cl, cl
cmp dword [r14 + 0x1b38], esi
jne 0x18004dd8f
cmp byte [r14 + 0x1b44], cl
jne 0x18004d74f
cmp byte [rbp + 0x190], cl
jne 0x18004d74f
movzx ecx, byte [r14 + 0x149]
movzx edx, byte [r14 + 0xc9]
movzx eax, cl
neg al
sbb r12d, r12d
and r12d, 0x400000
test dl, dl
je 0x18004c992
cmp byte [r14 + 0x14b], 0
je 0x18004c95d
cmp byte [r14 + 0x148], 0
mov eax, 1
je 0x18004c960
mov eax, r15d
test eax, eax
jne 0x18004c9a6
xor r13b, r13b
test dl, dl
je 0x18004c9b9
cmp byte [r14 + 0x14b], 0
je 0x18004c9b9
test cl, cl
je 0x18004c9b9
cmp byte [r14 + 0x148], 0
jne 0x18004c9b9
cmp byte [r14 + 0x14a], 0
jne 0x18004c9b9
mov sil, 1
jmp 0x18004c9c0
cmp byte [r14 + 0x148], 0
je 0x18004c964
cmp byte [r14 + 0x14b], 0
jne 0x18004c964
cmp byte [r14 + 0x14a], 0
jne 0x18004c964
test cl, cl
jne 0x18004c964
mov r13b, 1
jmp 0x18004c967
xor sil, sil
test dl, dl
je 0x18004ca13
cmp byte [r14 + 0x14b], 0
movzx r15d, byte [r14 + 0x14a]
je 0x18004ca1b
cmp byte [r14 + 0x148], 0
jne 0x18004ca1b
test r15b, r15b
jne 0x18004ca1b
movzx ecx, byte [r14 + 0x148]
mov dil, 1
xor r9b, r9b
cmp byte [r14 + 0x149], r9b
je 0x18004ca48
test cl, cl
jne 0x18004ca48
cmp byte [r14 + 0x14a], r9b
jne 0x18004ca48
cmp byte [r14 + 0x14b], r9b
jne 0x18004ca48
mov r10b, 1
jmp 0x18004ca4b
movzx r15d, byte [r14 + 0x148]
movzx ecx, byte [r14 + 0x148]
xor dil, dil
test cl, cl
je 0x18004c9ec
cmp byte [r14 + 0x149], dil
jne 0x18004c9ec
cmp byte [r14 + 0x14a], dil
jne 0x18004c9ec
cmp byte [r14 + 0x14b], dil
jne 0x18004c9ec
mov r9b, 1
xor r10b, r10b
test r13b, r13b
je 0x18004ca6c
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x18004ca6c
mov dl, 1
call fcn.180029a30
test al, al
jne 0x18004ca8a
test r10b, r10b
je 0x18004caba
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004caba
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004caba
cmp byte [rsp + 0x68], 0
mov r14d, dword [rbp - 0x74]
mov ebx, dword [rsp + 0x64]
mov r11, qword [rsp + 0x58]
jne 0x18004cac7
test r14b, r14b
jne 0x18004cac7
test bl, bl
je 0x18004cab1
mov eax, dword [r11 + 0x54]
cmp dword [r11 + 0x50], eax
je 0x18004cac7
mov byte [rbp + 0x198], 1
jmp 0x18004cace
mov r11, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x64]
mov r14d, dword [rbp - 0x74]
mov byte [rbp + 0x198], 0
test r13b, r13b
je 0x18004caef
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x18004caef
mov dl, 1
call fcn.180029a30
test al, al
jne 0x18004cb0d
test r9b, r9b
je 0x18004cb25
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004cb25
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cb25
test r14b, r14b
jne 0x18004cb25
test bl, bl
je 0x18004cb20
mov eax, dword [r11 + 0x54]
cmp dword [r11 + 0x50], eax
je 0x18004cb25
mov r14b, 1
jmp 0x18004cb28
xor r14b, r14b
test r13b, r13b
je 0x18004cb49
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x18004cb49
mov dl, 1
call fcn.180029a30
test al, al
jne 0x18004cb67
test r10b, r10b
je 0x18004cb75
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004cb75
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cb75
mov r10d, dword [rsp + 0x68]
test r10b, r10b
jne 0x18004cb7a
mov bl, 1
jmp 0x18004cb7c
mov r10d, dword [rsp + 0x68]
xor bl, bl
test r13b, r13b
je 0x18004cbb1
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004cbb1
mov dl, 1
call fcn.180029a30
mov r9d, dword [rbp - 0x68]
test al, al
je 0x18004cbb5
test r10b, r10b
jne 0x18004cbb5
test r9b, r9b
je 0x18004cbb5
movzx r11d, dl
jmp 0x18004cbbd
mov r9d, dword [rbp - 0x68]
xor r11b, r11b
test r13b, r13b
je 0x18004cbd9
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x18004cbd9
mov dl, 1
call fcn.180029a30
test al, al
jne 0x18004cbfa
test sil, sil
je 0x18004cc09
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004cc09
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cc09
test r10b, r10b
jne 0x18004cc09
test r9b, r9b
je 0x18004cc09
mov r10b, 1
jmp 0x18004cc0c
xor r10b, r10b
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x18004cc70
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cc70
test dil, dil
je 0x18004cc31
mov ecx, 0x200004
jmp 0x18004cc41
test r15b, r15b
mov ecx, 0x200000
mov eax, 0x20000c
cmovne ecx, eax
or ecx, r12d
mov r8d, ecx
mov r13, qword [rsp + 0x58]
mov rcx, r13
lea rdx, [r13 + 0x4c]
call fcn.18004a5d0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d728
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x18004ccb3
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004ccb3
test dil, dil
je 0x18004cc9b
mov ecx, 0x200005
or r12d, ecx
mov r8d, r12d
jmp 0x18004cc47
test r15b, r15b
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or r12d, ecx
mov r8d, r12d
jmp 0x18004cc47
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004cd48
mov dl, 1
call fcn.180029a30
mov esi, dword [rsp + 0x64]
test al, al
je 0x18004cd4c
test sil, sil
je 0x18004cd4c
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
je 0x18004cd15
mov rdx, qword [rbp - 0x48]
xor r9d, r9d
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [r14 + 0x19a8]
mov dword [rdx + 0x70], r9d
maxss xmm0, xmm8
movss dword [rdx + 0x68], xmm0
jmp 0x18004d72d
movzx eax, dil
lea r8d, [rax*4 + 0x200002]
or r8d, r12d
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004a5d0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d72d
mov esi, dword [rsp + 0x64]
mov r9, qword [0x180089a48]
mov ecx, dword [r9 + 0x4c]
test ecx, ecx
js 0x18004cdbf
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cdbf
test sil, sil
je 0x18004cdbf
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
je 0x18004cdae
mov rax, qword [r9 + 0x1af0]
xor r9d, r9d
mov rcx, qword [rbp - 0x48]
movss xmm0, dword [r14 + 0x19a8]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
mov dword [rcx + 0x70], r9d
movss dword [rcx + 0x68], xmm0
jmp 0x18004d72d
movzx eax, dil
lea r8d, [rax*4 + 0x200003]
jmp 0x18004cd21
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x18004ce04
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004ce04
mov eax, r12d
mov r8d, 0x200004
or eax, 0x200006
mov r14, qword [rsp + 0x70]
or r8d, r12d
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
cmovne r8d, eax
jmp 0x18004cd24
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x18004ce2d
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004ce2d
mov eax, r12d
mov r8d, 0x200005
or eax, 0x200007
jmp 0x18004cde6
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004ce5f
mov dl, 1
call fcn.180029a30
mov r9d, dword [rsp + 0x68]
test al, al
je 0x18004ce64
test r9b, r9b
jne 0x18004ce64
or r12d, 0x200008
mov r8d, r12d
jmp 0x18004cc47
mov r9d, dword [rsp + 0x68]
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x18004cf24
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cf24
test r9b, r9b
jne 0x18004cf24
mov r13, qword [rsp + 0x58]
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004cec7
test r15b, r15b
je 0x18004cedb
lea rdx, [r13 + 0x4c]
mov r8d, 0x60000c
mov rcx, r13
call fcn.18004a5d0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
mov r14, qword [rsp + 0x70]
or r12d, 0x200009
mov r8d, r12d
jmp 0x18004cd24
mov r14, qword [rsp + 0x70]
cmp byte [r14 + 0xc9], 0
je 0x18004cecc
cmp byte [r14 + 0x14b], 0
je 0x18004cecc
cmp byte [r14 + 0x14a], 0
jne 0x18004cecc
cmp byte [r14 + 0x148], 0
jne 0x18004cecc
mov edx, 0x600004
mov rcx, r13
call fcn.18004b7d0
or r12d, 0x200009
mov r8d, r12d
jmp 0x18004cd24
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x18004cf3d
mov dl, 1
call fcn.180029a30
test al, al
jne 0x18004cf5a
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x18004cfcf
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004cfcf
mov edx, dword [rbp + 0x188]
mov eax, edx
mov r14, qword [rsp + 0x70]
shr eax, 0xb
and al, 1
test sil, sil
je 0x18004cf81
movzx ecx, byte [r14 + 0x148]
test al, al
je 0x18004cf97
test cl, cl
jne 0x18004cf9b
mov byte [rbp + 0x190], 1
mov byte [rsp + 0x50], 1
mov r13, qword [rsp + 0x58]
jmp 0x18004d72d
test cl, cl
jne 0x18004cf81
test r9b, r9b
jne 0x18004cf8d
lea rcx, [rbp + 0x198]
mov dword [rbp + 0x198], 0xa
call fcn.18004b800
test al, al
je 0x18004d0a3
mov r13, qword [rsp + 0x58]
mov r8d, dword [rbp + 0x198]
jmp 0x18004cd24
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x18004d000
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004d000
mov r13, qword [rsp + 0x58]
movzx ecx, dl
mov r14, qword [rsp + 0x70]
mov byte [rbp + 0x190], dl
jmp 0x18004d72f
test r11b, r11b
jne 0x18004d6e2
test r10b, r10b
jne 0x18004d6e2
test r13b, r13b
je 0x18004d058
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x18004d058
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004d058
mov r13, qword [rsp + 0x58]
xor r9d, r9d
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r9d
mov byte [r13 + 0x5b], r9b
mov byte [r13 + 0xe74], dl
jmp 0x18004d728
movzx r15d, byte [rbp + 0x198]
test r15b, r15b
jne 0x18004d3dd
test r14b, r14b
jne 0x18004d3dd
test bl, bl
je 0x18004d723
mov rcx, qword [0x180089a48]
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x18004d0ad
mov rcx, qword [rcx + 0x110]
call rax
mov rbx, rax
test rax, rax
jne 0x18004d0b4
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
jmp 0x18004d72d
lea rbx, [0x18005e7dd]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x18004d0c0
mov rcx, qword [0x180089a48]
test rcx, rcx
je 0x18004d0db
inc dword [rcx + 0x3bc]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r14d, r14d
mov qword [rbp - 0x68], rax
mov r12, rax
mov r15d, r14d
cmp byte [rbx], r14b
je 0x18004d15e
mov r12d, dword [rbp + 0x188]
mov rdi, rax
nop word [rax + rax]
xor r8d, r8d
lea rcx, [rbp + 0x198]
mov rdx, rbx
call fcn.180024670
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp + 0x198], r14d
je 0x18004d15a
mov edx, r12d
lea rcx, [rbp + 0x198]
call fcn.18004b800
test al, al
je 0x18004d155
movzx eax, word [rbp + 0x198]
inc r15d
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r14b
jne 0x18004d110
mov r12, qword [rbp - 0x68]
mov r13, qword [rsp + 0x58]
movsxd rax, r15d
mov word [r12 + rax*2], r14w
test r15d, r15d
jle 0x18004d3b8
mov esi, dword [r13 + 0x54]
mov edi, dword [r13 + 0x50]
mov eax, dword [r13 + 4]
cmp edi, esi
je 0x18004d1a8
mov ecx, edi
cmp edi, eax
jle 0x18004d190
mov dword [r13 + 0x50], eax
mov ecx, eax
mov edx, esi
cmp esi, eax
jle 0x18004d19c
mov dword [r13 + 0x54], eax
mov edx, eax
mov esi, edx
mov edi, ecx
cmp ecx, edx
jne 0x18004d1a8
mov dword [r13 + 0x4c], ecx
mov r8d, dword [r13 + 0x4c]
cmp r8d, eax
jle 0x18004d1b8
mov dword [r13 + 0x4c], eax
mov r8d, eax
cmp edi, esi
je 0x18004d1e3
mov ecx, edi
cmp edi, eax
jle 0x18004d1c8
mov dword [r13 + 0x50], eax
mov ecx, eax
mov edx, esi
cmp esi, eax
jle 0x18004d1d4
mov dword [r13 + 0x54], eax
mov edx, eax
mov esi, edx
mov edi, ecx
cmp ecx, edx
jne 0x18004d1e3
mov dword [r13 + 0x4c], ecx
mov r8d, ecx
cmp r8d, eax
jle 0x18004d1ec
mov dword [r13 + 0x4c], eax
cmp edi, esi
je 0x18004d352
lea r14, [r13 + 0x64]
mov rcx, r14
jge 0x18004d2a4
sub esi, edi
mov edx, esi
call fcn.18004b310
mov rcx, rax
test rax, rax
je 0x18004d28a
xor r9d, r9d
mov dword [rax], edi
mov dword [rax + 4], esi
mov dword [rax + 8], r9d
test esi, esi
jne 0x18004d22b
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004d28a
mov eax, dword [r14 + 0xe04]
mov dword [rcx + 0xc], eax
add dword [r14 + 0xe04], esi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [r14 + rdx*2]
test rdx, rdx
je 0x18004d28a
movsxd r8, esi
test esi, esi
jle 0x18004d28a
movsxd rax, edi
lea r9, [rax + rax]
sub r9, rdx
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r13 + 0x18]
lea rdx, [rdx + 2]
add rcx, r9
movzx eax, word [rcx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x18004d270
mov r8d, esi
mov edx, edi
mov rcx, r13
call fcn.180049da0
mov r8d, dword [r13 + 0x50]
mov dword [r13 + 0x54], r8d
jmp 0x18004d33f
sub edi, esi
mov edx, edi
call fcn.18004b310
mov rcx, rax
test rax, rax
je 0x18004d32a
xor r9d, r9d
mov dword [rax], esi
mov dword [rax + 4], edi
mov dword [rax + 8], r9d
test edi, edi
jne 0x18004d2ce
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004d32a
mov eax, dword [r14 + 0xe04]
mov dword [rcx + 0xc], eax
add dword [r14 + 0xe04], edi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [r14 + rdx*2]
test rdx, rdx
je 0x18004d32a
movsxd r8, edi
test edi, edi
jle 0x18004d32a
movsxd rax, esi
lea r9, [rax + rax]
sub r9, rdx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004d310
mov r8d, edi
mov edx, esi
mov rcx, r13
call fcn.180049da0
mov r8d, dword [r13 + 0x54]
mov dword [r13 + 0x50], r8d
lea rax, [r13 + 0x4c]
xor r14d, r14d
mov byte [rax + 0xf], 0
mov dword [r13 + 0x4c], r8d
mov byte [rax + 0xf], 0
mov edx, dword [r13 + 0x4c]
mov r9d, r15d
mov r8, r12
mov rcx, r13
call fcn.180049ea0
test al, al
je 0x18004d398
mov edi, dword [r13 + 0x4c]
lea rcx, [r13 + 0x64]
xor edx, edx
call fcn.18004b310
test rax, rax
je 0x18004d38d
mov dword [rax], edi
mov dword [rax + 4], r14d
mov dword [rax + 8], r15d
mov dword [rax + 0xc], 0xffffffff
add dword [r13 + 0x4c], r15d
mov byte [r13 + 0x5b], 0
jmp 0x18004d3b0
movzx eax, word [r13 + 0xe62]
test ax, ax
je 0x18004d3b0
dec ax
mov word [r13 + 0xe62], ax
mov byte [r13 + 0xe74], 1
test r12, r12
je 0x18004d3cf
mov rax, qword [0x180089a48]
test rax, rax
je 0x18004d3cf
dec dword [rax + 0x3bc]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18004d728
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp qword [r14 + 0x108], 0
je 0x18004d529
mov esi, dword [r13 + 0x54]
mov eax, dword [r13 + 0x50]
cmp eax, esi
je 0x18004d410
mov r14d, esi
cmovge esi, eax
cmovl r14d, eax
xor r12d, r12d
jmp 0x18004d41a
mov esi, dword [r13 + 4]
xor r12d, r12d
mov r14d, r12d
mov rcx, qword [r13 + 0x18]
mov edx, r12d
movsxd rax, esi
mov ebx, 0x2400
mov edi, 0x2800
mov r15d, 0x3ff
mov r10d, 0x80
mov r11d, 0x800
lea r9, [rcx + rax*2]
movsxd rax, r14d
lea r8, [rcx + rax*2]
nop dword [rax + rax]
test r9, r9
je 0x18004d45a
cmp r8, r9
jae 0x18004d49d
movzx ecx, word [r8]
test cx, cx
je 0x18004d49d
add r8, 2
cmp cx, r10w
jae 0x18004d471
inc edx
jmp 0x18004d450
cmp cx, r11w
jae 0x18004d480
mov eax, 2
add edx, eax
jmp 0x18004d450
lea eax, [rbx + rcx]
cmp ax, r15w
mov eax, r12d
jbe 0x18004d499
add cx, di
cmp cx, r15w
setbe al
add eax, 3
add edx, eax
jmp 0x18004d450
mov rax, qword [0x180089a48]
lea edi, [rdx + 1]
movzx r15d, byte [rbp + 0x198]
test rax, rax
je 0x18004d4ba
inc dword [rax + 0x3bc]
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [r13 + 0x18]
mov edx, edi
movsxd rcx, esi
mov rbx, rax
lea r9, [r8 + rcx*2]
movsxd rcx, r14d
lea r8, [r8 + rcx*2]
mov rcx, rax
call fcn.180024d20
mov r9, qword [0x180089a48]
mov rax, qword [r9 + 0x108]
test rax, rax
je 0x18004d508
mov rcx, qword [r9 + 0x110]
mov rdx, rbx
call rax
mov r9, qword [0x180089a48]
test rbx, rbx
je 0x18004d519
test r9, r9
je 0x18004d519
dec dword [r9 + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14, qword [rsp + 0x70]
jmp 0x18004d52c
xor r12d, r12d
test r15b, r15b
je 0x18004d72d
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004d554
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r12d
mov byte [r13 + 0x5b], 0
mov byte [r13 + 0xe74], 1
mov edi, dword [r13 + 0x54]
mov ebx, dword [r13 + 0x50]
cmp ebx, edi
je 0x18004d728
mov eax, dword [r13 + 4]
cmp ebx, eax
jle 0x18004d57a
mov dword [r13 + 0x50], eax
mov ebx, eax
cmp edi, eax
jle 0x18004d584
mov dword [r13 + 0x54], eax
mov edi, eax
cmp ebx, edi
jne 0x18004d58c
mov dword [r13 + 0x4c], ebx
cmp dword [r13 + 0x4c], eax
jle 0x18004d596
mov dword [r13 + 0x4c], eax
cmp ebx, edi
je 0x18004d6db
lea rsi, [r13 + 0x64]
mov rcx, rsi
jge 0x18004d644
sub edi, ebx
mov edx, edi
call fcn.18004b310
mov rcx, rax
test rax, rax
je 0x18004d62a
mov dword [rax], ebx
mov dword [rax + 4], edi
mov dword [rax + 8], r12d
test edi, edi
jne 0x18004d5d2
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004d62a
mov eax, dword [rsi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rsi + 0xe04], edi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [rsi + rdx*2]
test rdx, rdx
je 0x18004d62a
movsxd r8, edi
test edi, edi
jle 0x18004d62a
movsxd rax, ebx
lea r9, [rax + rax]
sub r9, rdx
nop word [rax + rax]
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004d610
mov r8d, edi
mov edx, ebx
mov rcx, r13
call fcn.180049da0
mov r8d, dword [r13 + 0x50]
mov dword [r13 + 0x54], r8d
jmp 0x18004d6cf
sub ebx, edi
mov edx, ebx
call fcn.18004b310
mov rcx, rax
test rax, rax
je 0x18004d6ba
mov dword [rax], edi
mov dword [rax + 4], ebx
mov dword [rax + 8], r12d
test ebx, ebx
jne 0x18004d66b
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004d6ba
mov eax, dword [rsi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rsi + 0xe04], ebx
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [rsi + rdx*2]
test rdx, rdx
je 0x18004d6ba
movsxd r8, ebx
test ebx, ebx
jle 0x18004d6ba
movsxd rax, edi
lea r9, [rax + rax]
sub r9, rdx
nop
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004d6a0
mov r8d, ebx
mov edx, edi
mov rcx, r13
call fcn.180049da0
mov r8d, dword [r13 + 0x54]
mov dword [r13 + 0x50], r8d
lea rax, [r13 + 0x4c]
mov byte [rax + 0xf], 0
mov dword [r13 + 0x4c], r8d
mov byte [r13 + 0x5b], 0
jmp 0x18004d728
mov r13, qword [rsp + 0x58]
movzx r8d, r11b
mov rcx, r13
xor r8d, 1
add r8d, 0x20000a
lea rdx, [r13 + 0x4c]
call fcn.18004a5d0
mov eax, dword [r13 + 0x4c]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x50], eax
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d728
mov r13, qword [rsp + 0x58]
mov r14, qword [rsp + 0x70]
xor cl, cl
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
je 0x18004d746
cmp byte [rbp + 0x168], 0
je 0x18004d746
mov al, 1
jmp 0x18004d748
xor al, al
or byte [rbp - 0x70], al
mov esi, dword [rsp + 0x6c]
cmp dword [r14 + 0x1b38], esi
jne 0x18004dd8f
xor esi, esi
mov qword [rbp - 0x58], rsi
mov r12d, esi
mov dword [rbp - 0x68], esi
mov r15d, esi
test cl, cl
je 0x18004d987
cmp byte [rsp + 0x68], sil
jne 0x18004d8f4
mov r9, qword [r13 + 0x38]
mov rax, qword [rbp + 0x170]
mov r8, r9
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d7a3
inc rax
test ecx, ecx
jne 0x18004d790
test edx, edx
je 0x18004d8f4
mov r15d, dword [r13 + 0x30]
mov r12, r9
dec r15d
mov qword [rbp - 0x58], r9
mov dword [rbp - 0x68], r15d
mov ebx, esi
mov r14, rsi
test r15d, r15d
jle 0x18004d825
movsxd rdi, r15d
mov rcx, r9
add rdi, r9
mov rdx, rdi
call fcn.180024ab0
lea ebx, [rax + 1]
test ebx, ebx
jle 0x18004d810
mov eax, 8
mov ecx, ebx
cmp ebx, eax
cmovl ecx, eax
test ecx, ecx
jle 0x18004d810
mov rax, qword [0x180089a48]
test rax, rax
je 0x18004d801
inc dword [rax + 0x3bc]
movsxd rcx, ecx
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8, r12
mov edx, ebx
mov rcx, r14
call fcn.180024810
lea esi, [rbx - 1]
mov r9d, 0
movsxd rbx, dword [r13 + 4]
lea rdi, [r13 + 0x64]
test r15d, r15d
mov edx, ebx
mov rcx, rdi
cmovle esi, r9d
call fcn.18004b310
mov rcx, rax
test rax, rax
je 0x18004d8a5
xor edx, edx
mov dword [rax + 4], ebx
mov dword [rax], edx
mov dword [rax + 8], esi
test ebx, ebx
jne 0x18004d866
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004d8a5
mov eax, dword [rdi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rdi + 0xe04], ebx
movsxd r9, dword [rcx + 0xc]
add r9, 0x318
lea r9, [rdi + r9*2]
test r9, r9
je 0x18004d8a5
test ebx, ebx
jle 0x18004d8a5
nop dword [rax]
mov rax, qword [r13 + 0x18]
movzx ecx, word [rax + rdx*2]
mov word [r9 + rdx*2], cx
inc rdx
cmp rdx, rbx
jl 0x18004d890
mov r8d, dword [r13 + 4]
xor edx, edx
mov rcx, r13
call fcn.180049da0
test esi, esi
jle 0x18004d8d4
mov r9d, esi
mov r8, r14
xor edx, edx
mov rcx, r13
call fcn.180049ea0
test al, al
je 0x18004d8d4
mov dword [r13 + 0x4c], esi
mov byte [r13 + 0x5b], 0
test r14, r14
je 0x18004d8f4
mov rax, qword [0x180089a48]
test rax, rax
je 0x18004d8eb
dec dword [rax + 0x3bc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rsp + 0x50], 0
mov r10d, dword [rbp + 0x188]
je 0x18004d90c
test r10b, 0x20
jne 0x18004d98e
mov rsi, qword [rbp + 0x170]
mov edi, dword [rbp - 0x60]
test r12, r12
je 0x18004dd6f
test dil, dil
je 0x18004dd3c
xor edx, edx
mov dword [rbp + 0x38], 0x40000
lea eax, [r15 + 1]
mov qword [rbp + 0x48], rdx
cmp dword [rbp + 0x178], eax
lea rcx, [rbp + 0x38]
xorps xmm0, xmm0
mov dword [rbp + 0x3c], r10d
cmovge eax, dword [rbp + 0x178]
mov dword [rbp + 0x5c], eax
movdqu xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x50], rsi
mov dword [rbp + 0x58], r15d
mov qword [rbp + 0x40], rdx
call rdx
mov ecx, dword [rbp + 0x5c]
mov rsi, qword [rbp + 0x50]
mov qword [rbp + 0x170], rsi
lea r15d, [rcx - 1]
cmp dword [rbp + 0x58], r15d
cmovl r15d, dword [rbp + 0x58]
jmp 0x18004dd42
mov r10d, dword [rbp + 0x188]
cmp byte [rsp + 0x68], 0
jne 0x18004d9c9
mov edx, dword [r13 + 0x10]
lea rcx, [r13 + 0x20]
mov byte [r13 + 0x40], 1
lea edx, [rdx*4 + 1]
call fcn.180035a00
mov r8, qword [r13 + 0x18]
xor r9d, r9d
mov edx, dword [r13 + 0x20]
mov rcx, qword [r13 + 0x28]
call fcn.180024d20
mov r10d, dword [rbp + 0x188]
test r10d, 0x1c0
je 0x18004dd37
mov r9d, 0x16
test r10b, 0x40
je 0x18004da06
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004da06
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004da06
xor ebx, ebx
lea eax, [r9 + 0x2a]
mov r9d, ebx
jmp 0x18004da71
test r10b, r10b
jns 0x18004da5f
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004da35
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004da35
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
lea r9d, [r11 - 0x7d]
jmp 0x18004da77
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x18004da5f
mov dl, 1
call fcn.180029a30
test al, al
je 0x18004da5f
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
lea r9d, [r11 - 0x7c]
jmp 0x18004da77
mov ecx, 0x100
mov ebx, 0
test ecx, r10d
mov eax, ebx
cmovne eax, ecx
mov r11d, 0x80
test eax, eax
je 0x18004dd37
mov dword [rbp], eax
mov r14d, ebx
mov rax, qword [r13 + 0x28]
mov r12d, 0x2400
mov qword [rbp + 0x18], rax
mov r15d, 0x2800
mov eax, dword [r13 + 8]
mov dword [rbp + 0x20], eax
mov eax, dword [r13 + 0x44]
mov dword [rbp + 0x24], eax
movsxd rax, dword [r13 + 0x4c]
mov dword [rbp + 0x14], r9d
mov r9, qword [r13 + 0x18]
mov r13d, 0x3ff
mov dword [rbp + 4], r10d
mov rdx, r9
mov dword [rbp + 0x10], ebx
mov r10d, 0x800
mov qword [rbp + 0x29], rbx
lea r8, [r9 + rax*2]
mov dword [rbp + 0x31], ebx
mov word [rbp + 0x35], bx
mov byte [rbp + 0x37], 0
mov qword [rbp + 8], rbx
mov byte [rbp + 0x28], 0
mov qword [rbp - 0x30], r9
test r8, r8
je 0x18004daf2
cmp rdx, r8
jae 0x18004db38
movzx ecx, word [rdx]
test cx, cx
je 0x18004db38
add rdx, 2
cmp cx, r11w
jae 0x18004db09
inc r14d
jmp 0x18004dae8
cmp cx, r10w
jae 0x18004db19
mov eax, 2
add r14d, eax
jmp 0x18004dae8
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004db33
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add r14d, eax
jmp 0x18004dae8
mov r13, qword [rsp + 0x58]
mov rdx, r9
mov dword [rbp + 0x198], r14d
mov esi, ebx
mov dword [rbp + 0x2c], r14d
movsxd rax, dword [r13 + 0x50]
mov r13d, 0x3ff
lea r8, [r9 + rax*2]
nop dword [rax + rax]
test r8, r8
je 0x18004db6a
cmp rdx, r8
jae 0x18004dbad
movzx ecx, word [rdx]
test cx, cx
je 0x18004dbad
add rdx, 2
cmp cx, r11w
jae 0x18004db80
inc esi
jmp 0x18004db60
cmp cx, r10w
jae 0x18004db8f
mov eax, 2
add esi, eax
jmp 0x18004db60
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004dba9
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add esi, eax
jmp 0x18004db60
mov r13, qword [rsp + 0x58]
mov edi, ebx
mov r9, qword [rbp - 0x30]
mov r14d, dword [rbp + 0x198]
mov dword [rbp + 0x30], esi
movsxd rax, dword [r13 + 0x54]
mov r13d, 0x3ff
lea rdx, [r9 + rax*2]
test rdx, rdx
je 0x18004dbda
cmp r9, rdx
jae 0x18004dc1e
movzx ecx, word [r9]
test cx, cx
je 0x18004dc1e
add r9, 2
cmp cx, r11w
jae 0x18004dbf1
inc edi
jmp 0x18004dbd0
cmp cx, r10w
jae 0x18004dc00
mov eax, 2
add edi, eax
jmp 0x18004dbd0
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004dc1a
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add edi, eax
jmp 0x18004dbd0
lea rcx, [rbp]
mov dword [rbp + 0x34], edi
call rbx
movsxd rax, dword [rbp + 0x2c]
mov rbx, qword [rbp + 0x18]
mov r15d, dword [rbp - 0x68]
mov r12, qword [rbp - 0x58]
mov r13, qword [rsp + 0x58]
cmp eax, r14d
je 0x18004dc59
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180024ab0
mov dword [r13 + 0x4c], eax
mov byte [r13 + 0xe74], 1
movsxd rax, dword [rbp + 0x30]
cmp eax, esi
je 0x18004dc71
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180024ab0
mov dword [r13 + 0x50], eax
movsxd rax, dword [rbp + 0x34]
cmp eax, edi
je 0x18004dc89
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180024ab0
mov dword [r13 + 0x54], eax
cmp byte [rbp + 0x28], 0
mov edi, dword [rbp - 0x60]
je 0x18004dce0
mov edx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x50]
cmp edx, eax
jle 0x18004dcb2
test dil, dil
je 0x18004dcb2
lea rcx, [r13 + 0x10]
sub edx, eax
add edx, dword [rcx]
call fcn.180035ae0
mov rbx, qword [rbp + 0x18]
mov edx, dword [r13 + 0x10]
xor r9d, r9d
mov rcx, qword [r13 + 0x18]
mov r8, rbx
mov qword [rsp + 0x20], r9
call fcn.180024810
mov dword [r13 + 4], eax
mov eax, dword [rbp + 0x20]
mov dword [r13 + 8], eax
mov dword [r13 + 0xe70], 0xbe99999a
mov r10d, dword [rbp + 0x188]
cmp byte [rsp + 0x68], 0
mov rsi, qword [rbp + 0x170]
jne 0x18004d916
mov r9, qword [r13 + 0x28]
mov r8, rsi
mov rax, r9
sub r8, r9
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004dd23
inc rax
test ecx, ecx
jne 0x18004dd10
test edx, edx
je 0x18004d916
mov r15d, dword [r13 + 8]
mov r12, r9
jmp 0x18004d916
mov edi, dword [rbp - 0x60]
jmp 0x18004dce7
mov ecx, dword [rbp + 0x178]
lea eax, [r15 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x18004dd6b
jbe 0x18004dd66
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + rsi - 1], 0
mov byte [rbp - 0x77], 1
mov r14, qword [rsp + 0x70]
xor eax, eax
mov esi, dword [rsp + 0x6c]
mov dword [r13 + 0xe78], eax
mov qword [r13 + 0xe80], rax
mov qword [r13 + 0xe88], rax
cmp byte [rbp + 0x190], 0
je 0x18004dda6
cmp dword [r14 + 0x1b38], esi
jne 0x18004dda6
call fcn.180026c80
mov edi, dword [rsp + 0x64]
movaps xmmword [rsp + 0x190], xmm13
test dil, dil
jne 0x18004de6a
mov r8d, 1
lea rcx, [rsp + 0x78]
mov edx, esi
call fcn.180026010
movss xmm8, dword [0x180065a80]
mov ecx, 0x10
movaps xmm1, xmm8
call fcn.1800252e0
movss xmm0, dword [r14 + 0x1598]
mov r8d, eax
mov rdx, qword [rbp - 0x80]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm10
unpcklps xmm0, xmm11
movq rcx, xmm0
call fcn.1800259e0
mov r8, qword [rbp - 0x48]
movaps xmm0, xmm10
addss xmm0, dword [r14 + 0x1590]
movaps xmm1, xmm11
movaps xmm14, xmm10
addss xmm1, dword [r14 + 0x1594]
addss xmm14, xmm9
movaps xmm13, xmm11
addss xmm13, xmm7
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x194], xmm1
movss dword [rbp - 0x10], xmm14
movss dword [rbp - 0xc], xmm13
movss dword [rbp - 0x58], xmm14
movss dword [rbp - 0x68], xmm13
jmp 0x18004deb5
mov r8, qword [rbp - 0x48]
movaps xmm2, xmm10
movss xmm8, dword [0x180065a80]
addss xmm2, xmm9
movaps xmm1, xmm11
addss xmm1, xmm7
movsd xmm0, qword [r8 + 0xd0]
movsd qword [rbp + 0x190], xmm0
movss dword [rbp - 0x58], xmm2
movaps xmm14, xmm2
movss dword [rbp - 0x10], xmm2
movss dword [rbp - 0x68], xmm1
movaps xmm13, xmm1
movss dword [rbp - 0xc], xmm1
cmp byte [rsp + 0x60], 0
lea rax, [rbp + 0x190]
movss xmm15, dword [rax]
xorps xmm4, xmm4
movss dword [rbp - 0x18], xmm10
xorps xmm3, xmm3
movss xmm10, dword [rax + 4]
xorps xmm5, xmm5
movss dword [rbp + 0x190], xmm10
movss dword [rbp - 0x14], xmm11
movss dword [rsp + 0x6c], xmm4
movss dword [rbp + 0x198], xmm3
je 0x18004df07
mov rbx, qword [r13 + 0x28]
mov qword [rbp + 0x170], rbx
jmp 0x18004df0e
mov rbx, qword [rbp + 0x170]
movzx eax, byte [rbp + 0x168]
mov r15d, dword [rbp - 0x70]
test al, al
jne 0x18004e10a
test r15b, r15b
jne 0x18004e10a
test dil, dil
je 0x18004df8b
movzx edx, byte [rbx]
lea r12, [rbx + 1]
xor esi, esi
mov ecx, esi
test dl, dl
je 0x18004df57
nop
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r12]
cmovne eax, ecx
inc r12
mov ecx, eax
test dl, dl
jne 0x18004df40
movzx eax, byte [r12 - 1]
dec r12
cmp al, 0xa
je 0x18004df6a
cmp al, 0xd
je 0x18004df6a
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x6c], xmm9
mulss xmm0, dword [r14 + 0x19a8]
movss dword [rbp + 0x198], xmm0
jmp 0x18004dfc2
cmp dword [r14 + 0x1b38], esi
jne 0x18004df9a
movsxd r12, dword [r13 + 8]
jmp 0x18004dfab
mov r12, 0xffffffffffffffff
inc r12
cmp byte [rbx + r12], 0
jne 0x18004dfa1
add r12, rbx
xor esi, esi
mov rax, r12
sub rax, rbx
cmp rax, 0x200000
jge 0x18004e9c8
movss xmm13, dword [0x180065a80]
xor ecx, ecx
movaps xmm1, xmm13
call fcn.1800252e0
mov r10, qword [r8 + 0x2b0]
test dil, dil
movss xmm2, dword [r14 + 0x19a8]
lea r8, [rbp - 0x18]
mov r11, qword [r14 + 0x19a0]
cmovne r8, rsi
mov r9d, eax
mov rdx, r12
test eax, 0xff000000
je 0x18004e990
test r12, r12
jne 0x18004e021
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rbx + rdx], 0
jne 0x18004e015
add rdx, rbx
cmp rbx, rdx
je 0x18004e990
test r11, r11
jne 0x18004e037
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm14, xmm14
ucomiss xmm2, xmm14
jne 0x18004e04a
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm1, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rsp + 0x78], xmm1
test r8, r8
je 0x18004e0b8
movss xmm0, dword [r8]
comiss xmm1, xmm0
jae 0x18004e074
movss dword [rsp + 0x78], xmm0
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rsp + 0x7c]
comiss xmm0, xmm1
jae 0x18004e08b
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [r8 + 8]
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm1
jb 0x18004e0a0
movss dword [rbp - 0x80], xmm1
movss xmm1, dword [r8 + 0xc]
movss xmm0, dword [rbp - 0x7c]
comiss xmm0, xmm1
jb 0x18004e0b5
movss dword [rbp - 0x7c], xmm1
test r8, r8
setne al
movaps xmm0, xmm15
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm14
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
unpcklps xmm0, xmm10
mov dword [rsp + 0x20], r9d
movq r9, xmm0
call fcn.180042c70
movss xmm3, dword [rbp + 0x198]
movss xmm4, dword [rsp + 0x6c]
jmp 0x18004e9d5
movsxd r12, dword [r13 + 8]
xor r10d, r10d
mov rsi, qword [r13 + 0x18]
add r12, rbx
mov r8d, 0xfffffc18
xorps xmm7, xmm7
xorps xmm6, xmm6
mov r9d, r10d
mov ebx, r10d
mov edi, r8d
mov edx, r10d
test al, al
je 0x18004e144
movsxd rax, dword [r13 + 0x4c]
lea edx, [r10 + 1]
lea r8d, [r10 - 1]
lea r9, [rsi + rax*2]
test r15b, r15b
je 0x18004e164
mov ecx, dword [r13 + 0x54]
mov edi, 0xffffffff
cmp dword [r13 + 0x50], ecx
cmovl ecx, dword [r13 + 0x50]
inc edx
movsxd rax, ecx
lea rbx, [rsi + rax*2]
movzx eax, byte [rsp + 0x64]
mov r11d, r10d
movzx ecx, word [rsi]
add edx, eax
mov rax, rsi
test cx, cx
je 0x18004e1bd
nop dword [rax]
cmp cx, 0xa
jne 0x18004e1b0
inc r11d
cmp r8d, 0xffffffff
jne 0x18004e19d
cmp rax, r9
jb 0x18004e19d
dec edx
mov r8d, r11d
test edx, edx
jle 0x18004e1bd
cmp edi, 0xffffffff
jne 0x18004e1b0
cmp rax, rbx
jb 0x18004e1b0
dec edx
mov edi, r11d
test edx, edx
jle 0x18004e1bd
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x18004e180
inc r11d
mov rdx, r9
cmp r8d, 0xffffffff
mov r10d, r11d
cmovne r10d, r8d
cmp edi, 0xffffffff
cmove edi, r11d
cmp r9, rsi
jbe 0x18004e1f3
nop word [rax + rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18004e1f3
mov rdx, rax
cmp rax, rsi
ja 0x18004e1e0
mov rax, qword [0x180089a48]
movaps xmm1, xmm5
movaps xmm11, xmm5
mov r8, qword [rax + 0x19a0]
movss xmm2, dword [rax + 0x19a8]
divss xmm2, dword [r8 + 0x14]
cmp rdx, r9
jae 0x18004e264
nop dword [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004e23b
maxss xmm11, xmm1
movaps xmm1, xmm11
movaps xmm11, xmm5
jmp 0x18004e25f
cmp ecx, 0xd
je 0x18004e25f
cmp ecx, dword [r8]
jge 0x18004e250
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004e256
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm11, xmm0
cmp rdx, r9
jb 0x18004e220
movss xmm0, dword [r14 + 0x19a8]
maxss xmm11, xmm1
movd xmm12, r10d
cvtdq2ps xmm12, xmm12
movss dword [rbp - 0x50], xmm11
mulss xmm12, xmm0
movss dword [rbp - 0x70], xmm12
test edi, edi
js 0x18004e33b
mov rdx, rbx
cmp rbx, rsi
jbe 0x18004e2b3
nop dword [rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18004e2b3
mov rdx, rax
cmp rax, rsi
ja 0x18004e2a0
mov rax, qword [0x180089a48]
movaps xmm2, xmm5
movaps xmm6, xmm5
mov r8, qword [rax + 0x19a0]
movss xmm3, dword [rax + 0x19a8]
divss xmm3, dword [r8 + 0x14]
cmp rdx, rbx
jae 0x18004e323
nop word [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004e2f8
maxss xmm6, xmm2
movaps xmm2, xmm6
movaps xmm6, xmm5
jmp 0x18004e31e
cmp ecx, 0xd
je 0x18004e31e
cmp ecx, dword [r8]
jge 0x18004e30d
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004e313
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm6, xmm0
cmp rdx, rbx
jb 0x18004e2e0
movss xmm0, dword [r14 + 0x19a8]
maxss xmm6, xmm2
movd xmm7, edi
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm0
mov edi, dword [rsp + 0x64]
test dil, dil
je 0x18004e35f
movd xmm3, r11d
cvtdq2ps xmm3, xmm3
movss dword [rsp + 0x6c], xmm9
mulss xmm3, xmm0
movss dword [rbp + 0x198], xmm3
movzx r8d, byte [rbp + 0x168]
test r8b, r8b
je 0x18004e43b
cmp byte [r13 + 0xe74], 0
je 0x18004e43b
test dword [rbp + 0x188], 0x1000
jne 0x18004e3e2
movss xmm2, dword [r13 + 0x48]
movaps xmm1, xmm9
comiss xmm11, xmm2
mulss xmm1, dword [0x180065a10]
movaps xmm0, xmm11
jae 0x18004e3c1
subss xmm0, xmm1
maxss xmm0, xmm5
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r13 + 0x48], xmm0
jmp 0x18004e3e9
subss xmm0, xmm9
comiss xmm0, xmm2
jb 0x18004e3e9
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r13 + 0x48], xmm0
jmp 0x18004e3e9
xor r9d, r9d
mov dword [r13 + 0x48], r9d
test dil, dil
je 0x18004e433
mov rax, qword [rbp - 0x48]
movaps xmm0, xmm12
subss xmm0, dword [r14 + 0x19a8]
movss xmm1, dword [rax + 0x58]
comiss xmm0, xmm1
jae 0x18004e40f
maxss xmm0, xmm5
jmp 0x18004e41c
movaps xmm0, xmm12
subss xmm0, dword [rbp - 8]
maxss xmm0, xmm1
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
addss xmm10, xmm1
movss dword [rbp + 0x190], xmm10
mov byte [r13 + 0xe74], 0
movss xmm10, dword [r13 + 0x48]
test r15b, r15b
je 0x18004e817
mov edx, dword [r13 + 0x54]
mov eax, edx
mov ecx, dword [r13 + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rdi, [rsi + rax*2]
test r8b, r8b
je 0x18004e474
movaps xmm1, xmm8
jmp 0x18004e47c
movss xmm1, dword [0x180065a4c]
mov ecx, 0x33
call fcn.1800252e0
cmp byte [rsp + 0x64], 0
mov esi, eax
xorps xmm5, xmm5
je 0x18004e49c
xorps xmm8, xmm8
xorps xmm9, xmm9
jmp 0x18004e4ae
movss xmm8, dword [0x180065c74]
movss xmm9, dword [0x180065acc]
mov r15, qword [rbp - 0x48]
movaps xmm4, xmm15
addss xmm4, xmm6
movss xmm6, dword [rbp + 0x190]
addss xmm6, xmm7
movss xmm7, dword [0x180065a40]
subss xmm4, xmm10
cmp rbx, rdi
jae 0x18004e6a7
movss xmm11, dword [rbp - 0x68]
movss xmm12, dword [rbp - 0x58]
jmp 0x18004e4f3
xorps xmm5, xmm5
movaps xmm0, xmm13
addss xmm0, dword [r14 + 0x19a8]
comiss xmm6, xmm0
ja 0x18004e68f
comiss xmm6, dword [rbp - 0x5c]
jae 0x18004e53b
cmp rbx, rdi
jae 0x18004e674
nop dword [rax + rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004e674
cmp rbx, rdi
jb 0x18004e520
jmp 0x18004e674
mov rax, qword [0x180089a48]
xorps xmm3, xmm3
xorps xmm2, xmm2
mov rdx, qword [rax + 0x19a0]
movss xmm1, dword [rax + 0x19a8]
divss xmm1, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x18004e59f
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004e595
cmp ecx, 0xd
je 0x18004e58e
cmp ecx, dword [rdx]
jge 0x18004e581
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004e586
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rbx, rdi
jb 0x18004e561
jmp 0x18004e59f
movaps xmm3, xmm2
movaps xmm2, xmm5
maxss xmm3, xmm5
maxss xmm2, xmm3
comiss xmm2, xmm5
ja 0x18004e5d6
mov rax, qword [r14 + 0x19a0]
cmp dword [rax], 0x20
jle 0x18004e5c2
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004e5c7
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm7
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm3, dword [rbp - 0x5c]
addss xmm2, xmm4
movss xmm5, dword [rbp - 0x40]
movaps xmm0, xmm8
subss xmm0, dword [r14 + 0x19a8]
maxss xmm5, xmm4
movaps xmm1, xmm9
addss xmm1, xmm6
movaps xmm4, xmm14
minss xmm4, xmm2
addss xmm0, xmm6
movss dword [rsp + 0x78], xmm5
movss dword [rbp - 0x80], xmm4
maxss xmm3, xmm0
movaps xmm0, xmm13
minss xmm0, xmm1
movss xmm1, dword [rbp - 0x5c]
movss dword [rsp + 0x7c], xmm3
comiss xmm1, xmm0
movss dword [rbp - 0x7c], xmm0
jae 0x18004e674
comiss xmm13, xmm3
jbe 0x18004e674
movss xmm0, dword [rbp - 0x40]
comiss xmm0, xmm4
jae 0x18004e674
comiss xmm14, xmm5
jbe 0x18004e674
mov rcx, qword [r15 + 0x2b0]
lea r8, [rbp - 0x80]
xorps xmm0, xmm0
mov dword [rsp + 0x28], 0xf
mov r9d, esi
movss dword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x78]
call fcn.18003eb40
movaps xmm4, xmm15
subss xmm4, xmm10
addss xmm6, dword [r14 + 0x19a8]
cmp rbx, rdi
jb 0x18004e4f0
movss dword [rbp - 0x58], xmm12
movss xmm12, dword [rbp - 0x70]
movss dword [rbp - 0x68], xmm11
movss xmm11, dword [rbp - 0x50]
mov edi, dword [rsp + 0x64]
mov rbx, qword [rbp + 0x170]
test dil, dil
jne 0x18004e6c9
mov rax, r12
sub rax, rbx
cmp rax, 0x200000
jge 0x18004e828
movss xmm13, dword [0x180065a80]
xor ecx, ecx
movaps xmm1, xmm13
call fcn.1800252e0
mov r10, qword [r15 + 0x2b0]
lea r8, [rbp - 0x18]
movss xmm2, dword [r14 + 0x19a8]
test dil, dil
mov r11, qword [r14 + 0x19a0]
mov esi, 0
cmovne r8, rsi
movaps xmm3, xmm15
subss xmm3, xmm10
mov r9d, eax
mov rdx, r12
test eax, 0xff000000
je 0x18004e833
test r12, r12
jne 0x18004e73c
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp byte [rbx + rdx], sil
jne 0x18004e730
add rdx, rbx
cmp rbx, rdx
je 0x18004e833
test r11, r11
jne 0x18004e752
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm14, xmm14
ucomiss xmm2, xmm14
jne 0x18004e765
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm1, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rsp + 0x78], xmm1
test r8, r8
je 0x18004e7d3
movss xmm0, dword [r8]
comiss xmm1, xmm0
jae 0x18004e78f
movss dword [rsp + 0x78], xmm0
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rsp + 0x7c]
comiss xmm0, xmm1
jae 0x18004e7a6
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [r8 + 8]
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm1
jb 0x18004e7bb
movss dword [rbp - 0x80], xmm1
movss xmm1, dword [r8 + 0xc]
movss xmm0, dword [rbp - 0x7c]
comiss xmm0, xmm1
jb 0x18004e7d0
movss dword [rbp - 0x7c], xmm1
test r8, r8
movss xmm6, dword [rbp + 0x190]
setne al
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm14
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
unpcklps xmm3, xmm6
mov dword [rsp + 0x20], r9d
movq r9, xmm3
call fcn.180042c70
jmp 0x18004e83f
movss xmm7, dword [0x180065a40]
mov r15, qword [rbp - 0x48]
jmp 0x18004e6ab
movss xmm13, dword [0x180065a80]
xor esi, esi
movss xmm6, dword [rbp + 0x190]
xorps xmm14, xmm14
cmp byte [rbp + 0x168], 0
je 0x18004e9a0
movss xmm0, dword [r14 + 0x18]
addss xmm0, dword [r13 + 0xe70]
movss dword [r13 + 0xe70], xmm0
cmp byte [r14 + 0xca], 0
je 0x18004e88e
comiss xmm0, xmm14
jbe 0x18004e88e
movss xmm1, dword [0x180065a88]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm0, dword [0x180065a6c]
jbe 0x18004e88e
xor al, al
jmp 0x18004e890
mov al, 1
addss xmm15, xmm11
movss xmm11, dword [rbp - 0x5c]
addss xmm6, xmm12
subss xmm15, xmm10
movaps xmm0, xmm6
movaps xmm1, xmm6
subss xmm0, dword [r14 + 0x19a8]
subss xmm1, dword [0x180065aa4]
movss dword [rsp + 0x78], xmm15
movaps xmm2, xmm15
addss xmm2, xmm13
addss xmm0, xmm7
movss dword [rbp - 0x7c], xmm1
movss dword [rbp - 0x80], xmm2
movss dword [rsp + 0x7c], xmm0
test al, al
je 0x18004e947
comiss xmm11, xmm1
jae 0x18004e947
movss xmm3, dword [rbp - 0x68]
comiss xmm3, xmm0
jbe 0x18004e947
movss xmm0, dword [rbp - 0x40]
comiss xmm0, xmm2
jae 0x18004e947
movss xmm0, dword [rbp - 0x58]
comiss xmm0, xmm15
jbe 0x18004e947
movss dword [rbp + 0x16c], xmm1
xor ecx, ecx
movaps xmm1, xmm13
movss dword [rbp + 0x168], xmm15
call fcn.1800252e0
mov rcx, qword [r15 + 0x2b0]
lea rdx, [rsp + 0x78]
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rbp + 0x168]
call fcn.18003e8d0
cmp byte [rsp + 0x68], 0
movss xmm3, dword [rbp + 0x198]
movss xmm10, dword [rbp + 0x190]
movss xmm4, dword [rsp + 0x6c]
movss xmm12, dword [0x180065c74]
jne 0x18004e9d5
subss xmm6, dword [r14 + 0x19a8]
subss xmm15, xmm13
movss dword [r14 + 0x2fc4], xmm6
movss dword [r14 + 0x2fc0], xmm15
jmp 0x18004e9d5
movss xmm3, dword [rbp + 0x198]
movss xmm4, dword [rsp + 0x6c]
jmp 0x18004e9d1
movss xmm3, dword [rbp + 0x198]
movss xmm10, dword [rbp + 0x190]
movss xmm4, dword [rsp + 0x6c]
movss xmm11, dword [rbp - 0x5c]
movss xmm12, dword [0x180065c74]
jmp 0x18004e9d5
movss xmm13, dword [0x180065a80]
xorps xmm14, xmm14
movaps xmm15, xmmword [rsp + 0x170]
test dil, dil
je 0x18004eb07
mov rcx, qword [0x180089a48]
addss xmm3, dword [r14 + 0x19a8]
movss dword [rbp + 0x168], xmm4
mov rax, qword [rcx + 0x1af0]
movss dword [rbp + 0x16c], xmm3
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1af0]
cmp byte [rax + 0x83], 0
jne 0x18004eafd
movss xmm8, dword [rax + 0xd0]
lea rcx, [rbp + 0x168]
movss xmm9, dword [rax + 0xd4]
movaps xmm7, xmm8
movaps xmm6, xmm9
addss xmm7, xmm4
movaps xmm1, xmm12
addss xmm6, xmm3
call fcn.180026d30
mov r9, qword [0x180089a48]
movaps xmm0, xmm8
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm9
shufps xmm0, xmm0, 0xc6
mov r10, qword [r9 + 0x1af0]
movss xmm0, xmm7
shufps xmm0, xmm0, 0x27
movss xmm0, xmm6
shufps xmm0, xmm0, 0x39
movups xmmword [r10 + 0x11c], xmm0
mov qword [r10 + 0x114], 0
mov dword [r9 + 0x1bf8], esi
mov rax, qword [r9 + 0x1af0]
movups xmmword [rsp + 0x78], xmm0
comiss xmm6, dword [rax + 0x25c]
jbe 0x18004ead6
comiss xmm9, dword [rax + 0x264]
jae 0x18004ead6
comiss xmm7, dword [rax + 0x258]
jbe 0x18004ead6
comiss xmm8, dword [rax + 0x260]
jb 0x18004eae0
cmp byte [r9 + 0x3008], 0
je 0x18004eafd
mov r8b, 1
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x78]
call fcn.1800298f0
test al, al
je 0x18004eafd
or dword [r10 + 0x118], 1
call fcn.180029ce0
call fcn.18002f670
mov eax, dword [rbp - 0x74]
test al, al
je 0x18004eb16
call fcn.18002ede0
mov eax, dword [rbp - 0x74]
cmp byte [r14 + 0x3008], 0
je 0x18004ec6c
test al, al
jne 0x18004ec6c
mov rsi, qword [0x180089a48]
mov r14, qword [rsi + 0x1af0]
test r12, r12
jne 0x18004eb70
mov r12, rbx
cmp rbx, 0xffffffffffffffff
jae 0x18004eb70
nop dword [rax + rax]
movzx ecx, byte [r12]
test cl, cl
je 0x18004eb70
lea rax, [r12 + 1]
cmp cl, 0x23
jne 0x18004eb67
cmp byte [rax], cl
je 0x18004eb70
mov r12, rax
cmp rax, 0xffffffffffffffff
jb 0x18004eb50
movss xmm0, dword [rsi + 0x3028]
addss xmm0, xmm13
movss dword [rsi + 0x3028], xmm10
comiss xmm10, xmm0
jbe 0x18004eb98
mov r15b, 1
mov byte [rsi + 0x302c], r15b
jmp 0x18004eb9b
xor r15b, r15b
mov ecx, dword [rsi + 0x3030]
mov eax, dword [r14 + 0x180]
cmp ecx, eax
jle 0x18004ebb4
mov dword [rsi + 0x3030], eax
mov ecx, eax
mov r14d, dword [r14 + 0x180]
sub r14d, ecx
nop
mov r8, r12
mov edx, 0xa
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov rdi, r12
cmovne rdi, rax
cmp rdi, r12
jne 0x18004ebe7
cmp rbx, rdi
je 0x18004ec56
mov r9d, edi
sub r9d, ebx
test r15b, r15b
jne 0x18004ec21
cmp rbx, qword [rbp + 0x170]
jne 0x18004ec21
cmp byte [rsi + 0x302c], r15b
je 0x18004ec0d
lea rcx, str._s_.s
jmp 0x18004ec28
mov r8, rbx
lea rcx, str.__.s
mov edx, r9d
call fcn.180034750
jmp 0x18004ec41
lea rcx, str._r_n_s_.s
lea r8, [0x18005e7dd]
mov qword [rsp + 0x20], rbx
lea edx, [r14*4]
call fcn.180034750
mov byte [rsi + 0x302c], 0
cmp rdi, r12
je 0x18004ec67
lea rbx, [rdi + 1]
jmp 0x18004ebc0
test r15b, r15b
je 0x18004ec67
lea rcx, [0x180060a30]
call fcn.180034750
mov r14, qword [rsp + 0x70]
movss xmm0, dword [rbp - 0x3c]
movaps xmm13, xmmword [rsp + 0x190]
mov r12, qword [rsp + 0x218]
comiss xmm0, xmm14
movaps xmm14, xmmword [rsp + 0x180]
jbe 0x18004ecc3
movss xmm0, dword [rbp - 0x38]
mov r9b, 1
addss xmm0, dword [r14 + 0x15a8]
addss xmm11, dword [r14 + 0x1594]
mov rdx, qword [rbp + 0x160]
xor r8d, r8d
unpcklps xmm0, xmm11
movq rcx, xmm0
call fcn.1800254a0
movzx edx, byte [rbp - 0x77]
mov ecx, dword [rbp + 0x188]
test dl, dl
je 0x18004ecf5
bt ecx, 0x15
jb 0x18004ecf5
mov rax, qword [0x180089a48]
mov word [rax + 0x1b47], 0x101
mov rax, qword [rax + 0x1af0]
or dword [rax + 0x118], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x50]
cmovne eax, ecx
jmp 0x18004bc46