Function at 0x18004b270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x220
mov rbx, qword [0x180089a48]
mov r14, rcx
movaps xmmword [rax - 0x58], xmm6
mov r13, rbx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
mov rax, qword [rbx + 0x1af0]
mov qword [rsp + 0x70], rbx
mov byte [rax + 0x80], 1
mov r15, qword [rbx + 0x1af0]
cmp byte [r15 + 0x83], 0
jne 0x18004b54f
mov ecx, dword [rbp + 0x188]
mov eax, ecx
shr eax, 0xe
mov esi, ecx
and al, 1
shr esi, 0x14
mov dword [rsp + 0x68], eax
and sil, 1
mov eax, ecx
mov dword [rsp + 0x64], esi
shr eax, 0xf
and al, 1
mov dword [rbp - 0x74], eax
mov eax, ecx
shr eax, 0x10
not al
and al, 1
mov dword [rbp - 0x68], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rbp - 0x60], eax
test sil, sil
je 0x18004b34c
call fcn.18002eef0
mov rbx, qword [0x180089a48]
movsxd rax, dword [r15 + 0xc0]
xor edx, edx
mov r8, qword [r15 + 0xc8]
mov rcx, r14
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180023cd0
mov edi, eax
mov dword [rsp + 0x6c], eax
cmp dword [rbx + 0x1b38], eax
jne 0x18004b37d
mov dword [rbx + 0x1b3c], eax
cmp dword [rbx + 0x1b78], edi
jne 0x18004b38c
mov byte [rbx + 0x1b7c], 1
mov rcx, r14
cmp r14, 0xffffffffffffffff
jae 0x18004b3b2
movzx edx, byte [rcx]
test dl, dl
je 0x18004b3b2
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x18004b3a9
cmp byte [rax], dl
je 0x18004b3b2
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x18004b395
movss xmm0, dword [rbx + 0x19a8]
xorps xmm8, xmm8
movss xmm12, dword [0x180065bdc]
cmp r14, rcx
jne 0x18004b3d1
xorps xmm7, xmm7
jmp 0x18004b41b
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 0x168]
mov rcx, qword [rbx + 0x19a0]
movaps xmm2, xmm0
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm12
call fcn.1800423e0
movss xmm0, dword [rbp + 0x168]
addss xmm0, dword [0x1800659e8]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x16c]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x3c], xmm7
test sil, sil
je 0x18004b436
movss xmm0, dword [r13 + 0x19a8]
mulss xmm0, dword [0x180065aa0]
movss xmm6, dword [r13 + 0x1594]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18002e5a0
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x168]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18002e610
comiss xmm7, xmm8
jbe 0x18004b47c
movaps xmm2, xmm7
addss xmm2, dword [r13 + 0x15a8]
jmp 0x18004b47f
xorps xmm2, xmm2
movss xmm4, dword [r15 + 0xd4]
movss xmm3, dword [r15 + 0xd0]
movaps xmm0, xmm4
movss xmm7, dword [rbp + 0x16c]
movaps xmm1, xmm3
movss xmm9, dword [rbp + 0x168]
addss xmm0, xmm7
movss dword [rbp - 8], xmm7
addss xmm2, xmm9
movss dword [rsp + 0x78], xmm3
addss xmm1, xmm9
movss dword [rsp + 0x7c], xmm4
movss dword [rbp - 0x30], xmm3
movss dword [rbp - 0x7c], xmm0
movaps xmm0, xmm4
movss dword [rbp - 0x2c], xmm4
addss xmm0, xmm7
movss dword [rbp - 0x80], xmm1
addss xmm2, xmm3
mov qword [rbp - 0x48], r15
movss dword [rbp - 0x24], xmm0
movss dword [rbp - 0x28], xmm2
test sil, sil
je 0x18004b6a0
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.180026820
test al, al
jne 0x18004b58a
movss xmm1, dword [rbp - 0x24]
lea rcx, [rbp + 0x168]
subss xmm1, dword [rbp - 0x2c]
movss xmm0, dword [rbp - 0x28]
subss xmm0, dword [rbp - 0x30]
movss dword [rbp + 0x16c], xmm1
movss xmm1, dword [r13 + 0x1594]
movss dword [rbp + 0x168], xmm0
call fcn.180026700
call fcn.18002f010
xor al, al
lea r11, [rsp + 0x220]
movaps xmm6, xmmword [r11 - 0x20]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm9, xmmword [r11 - 0x50]
movaps xmm10, xmmword [r11 - 0x60]
movaps xmm11, xmmword [r11 - 0x70]
movaps xmm12, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [r13 + 0x170c]
mov ecx, 3
call fcn.18002e8c0
movss xmm1, dword [r13 + 0x1598]
mov ecx, 6
call fcn.18002e920
movss xmm1, dword [r13 + 0x159c]
mov ecx, 7
call fcn.18002e920
lea rdx, [r13 + 0x1590]
call fcn.18002e9a0
movss xmm6, dword [rbp - 0x80]
lea r8, [rbp + 0x168]
movss xmm10, dword [rsp + 0x78]
movaps xmm0, xmm6
movss xmm1, dword [rbp - 0x7c]
subss xmm0, xmm10
movss xmm11, dword [rsp + 0x7c]
mov r9b, 1
subss xmm1, xmm11
movss dword [rbp - 0x38], xmm6
mov edx, edi
movss dword [rbp - 0x40], xmm10
mov rcx, r14
movss dword [rbp - 0x5c], xmm11
movss dword [rbp + 0x168], xmm0
mov dword [rsp + 0x20], 0x10004
movss dword [rbp + 0x16c], xmm1
call fcn.180029490
mov ecx, 3
movzx ebx, al
call fcn.18002ea00
mov r9, qword [0x180089a48]
movsxd rcx, dword [r9 + 0x1c10]
mov rdx, qword [r9 + 0x1c18]
lea r8, [rcx + rcx*4]
movsxd rcx, dword [rdx + r8*4 - 0x14]
movups xmm0, xmmword [rdx + r8*4 - 0x10]
add rcx, rcx
movups xmmword [r9 + rcx*8 + 0x160c], xmm0
dec dword [r9 + 0x1c10]
test bl, bl
jne 0x18004b681
call fcn.1800296a0
jmp 0x18004b54a
mov rbx, qword [r13 + 0x1af0]
mov qword [rbp - 0x48], rbx
mov eax, dword [rbx + 0x140]
or dword [rbx + 0x148], eax
subss xmm9, dword [rbx + 0x74]
jmp 0x18004b703
subss xmm2, xmm3
movaps xmm1, xmm6
subss xmm0, xmm4
lea rcx, [rbp + 0x168]
movss dword [rbp + 0x168], xmm2
movss dword [rbp + 0x16c], xmm0
call fcn.180026700
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.180026820
test al, al
je 0x18004b54f
movss xmm0, dword [rbp - 0x80]
movss xmm11, dword [rsp + 0x7c]
movss xmm10, dword [rsp + 0x78]
movss dword [rbp - 0x38], xmm0
movss dword [rbp - 0x5c], xmm11
movss dword [rbp - 0x40], xmm10
movaps xmmword [rsp + 0x180], xmm14
lea rcx, [rsp + 0x78]
mov edx, edi
movaps xmmword [rsp + 0x170], xmm15
call fcn.180026a50
mov byte [rbp - 0x76], al
movzx r11d, al
test al, al
je 0x18004b737
mov dword [r13 + 0x1f78], 1
xor eax, eax
lea r14, [r13 + 0x2070]
cmp dword [r14], edi
mov rbx, r14
mov edx, edi
mov rcx, r15
cmovne rbx, rax
mov qword [rsp + 0x58], rbx
call fcn.180026b90
movzx esi, al
test al, al
je 0x18004b7a3
cmp qword [r13 + 0x1da0], r15
jne 0x18004b7a3
mov ecx, dword [r15 + 0x1b0]
cmp dword [r13 + 0x1db0], ecx
jne 0x18004b7a3
mov byte [rbp + 0x168], 1
mov byte [rbp + 0x198], 0
mov qword [rsp + 0x218], r12
test r11b, r11b
je 0x18004b7bf
cmp byte [r13 + 0x420], 0
je 0x18004b7bf
mov r12b, 1
jmp 0x18004b7c2
mov byte [rbp + 0x168], 0
test sil, sil
je 0x18004b780
mov byte [rbp + 0x198], 1
mov byte [rbp + 0x168], 0
jmp 0x18004b787
xor r12b, r12b
mov edi, dword [r13 + 0x1b38]
mov eax, dword [rsp + 0x6c]
mov byte [rsp + 0x50], r12b
cmp edi, eax
je 0x18004b7f7
cmp dword [r13 + 0x1c7c], eax
je 0x18004b7f2
cmp dword [r13 + 0x1c70], eax
jne 0x18004b7f7
cmp dword [r13 + 0x1c90], 3
jne 0x18004b7f7
mov r13b, 1
jmp 0x18004b7fa
xor r13b, r13b
mov eax, dword [rsp + 0x64]
mov byte [rbp - 0x78], r13b
test al, al
je 0x18004b849
test rbx, rbx
je 0x18004b849
test edi, edi
jne 0x18004b849
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180023cd0
mov rcx, qword [rsp + 0x70]
cmp dword [rcx + 0x1b78], eax
jne 0x18004b845
mov bl, 1
jmp 0x18004b857
mov eax, dword [rsp + 0x64]
xor bl, bl
test al, al
je 0x18004b884
cmp qword [rsp + 0x58], 0
je 0x18004b884
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180023cd0
cmp edi, eax
jne 0x18004b884
mov al, 1
jmp 0x18004b886
xor al, al
mov byte [rsp + 0x60], al
mov byte [rbp + 0x190], 0
cmp edi, dword [rsp + 0x6c]
je 0x18004b8b2
mov ecx, dword [rbp + 0x188]
test cl, 0x10
jne 0x18004b8a7
test r13b, r13b
je 0x18004b8b2
cmp byte [rsp + 0x64], 0
mov byte [rbp - 0x58], 1
je 0x18004b8b6
mov byte [rbp - 0x58], 0
test sil, sil
jne 0x18004b9e0
test r12b, r12b
jne 0x18004b9e0
test bl, bl
jne 0x18004b9e0
test r13b, r13b
jne 0x18004b9e0
test al, al
jne 0x18004b9e3
mov rbx, qword [rsp + 0x58]
mov esi, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x64]
mov r14, qword [rsp + 0x70]
cmp dword [r14 + 0x1b38], esi
je 0x18004b996
test r12b, r12b
je 0x18004b989
mov rdx, r15
mov ecx, esi
call fcn.180026580
call fcn.180030b00
mov rcx, r15
call fcn.18002e1f0
mov eax, dword [r14 + 0x1b4c]
mov ecx, dword [rbp + 0x188]
or eax, 3
mov dword [r14 + 0x1b4c], eax
test dil, dil
jne 0x18004b940
test cl, cl
jns 0x18004b94a
or eax, 0xc
mov dword [r14 + 0x1b4c], eax
mov rax, qword [r14 + 0x1b58]
or dword [r14 + 0x1b50], 2
or rax, 0x180
mov qword [r14 + 0x1b58], rax
test dil, dil
je 0x18004b976
or rax, 0x60
mov qword [r14 + 0x1b58], rax
test ecx, 0x440
je 0x18004b989
or rax, 1
mov qword [r14 + 0x1b58], rax
cmp dword [r14 + 0x1b38], esi
jne 0x18004bb97
test rbx, rbx
jne 0x18004b9a0
call fcn.180026650
cmp dword [r14 + 0x1b38], esi
jne 0x18004bb97
cmp byte [r14 + 0x420], 0
je 0x18004bbc7
test r13b, r13b
jne 0x18004bbc7
mov r13, qword [rsp + 0x58]
test r12b, r12b
jne 0x18004bbcc
mov byte [rbp + 0x190], 1
mov cl, 1
jmp 0x18004bbaa
mov r12b, 1
mov rbx, qword [rsp + 0x58]
mov r13b, 1
mov esi, dword [rsp + 0x6c]
mov qword [rsp + 0x58], rbx
cmp edi, esi
je 0x18004b8ea
mov rdi, r14
mov qword [rsp + 0x58], r14
mov dword [r14 + 0xe70], 0xbe99999a
mov rbx, 0xffffffffffffffff
mov r14, qword [rbp + 0x170]
nop dword [rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x18004ba20
inc ebx
lea rcx, [rdi + 0x30]
mov edx, ebx
call fcn.1800353a0
mov rcx, qword [rdi + 0x38]
mov rdx, r14
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
movsxd rsi, dword [rbp + 0x178]
lea rcx, [rdi + 0x10]
lea edx, [rsi + 1]
call fcn.180035480
lea rcx, [rdi + 0x20]
xor edx, edx
call fcn.1800353a0
mov rdx, rdi
mov byte [rdi + 0x40], 0
dec rsi
mov rdi, r14
mov r14, qword [rdx + 0x18]
mov rbx, r14
lea rsi, [r14 + rsi*2]
cmp r14, rsi
jae 0x18004baba
cmp byte [rdi], 0
je 0x18004bab5
xor r8d, r8d
lea rcx, [rbp - 0x50]
mov rdx, rdi
call fcn.180024030
movsxd rcx, eax
mov eax, dword [rbp - 0x50]
add rdi, rcx
test eax, eax
je 0x18004bab5
cmp eax, 0xffff
ja 0x18004bab0
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x18004ba81
mov rdx, qword [rsp + 0x58]
sub edi, dword [rbp + 0x170]
xor ecx, ecx
mov esi, dword [rsp + 0x6c]
mov word [rbx], cx
sub rbx, r14
sar rbx, 1
mov dword [rdx + 8], edi
mov edi, dword [rsp + 0x64]
mov dword [rdx + 4], ebx
cmp dword [rdx], esi
jne 0x18004bb01
cmp dword [rdx + 0x4c], ebx
mov ecx, ebx
cmovl ecx, dword [rdx + 0x4c]
cmp dword [rdx + 0x50], ebx
mov dword [rdx + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [rdx + 0x50]
cmp dword [rdx + 0x54], ebx
mov dword [rdx + 0x50], ecx
cmovl ebx, dword [rdx + 0x54]
mov dword [rdx + 0x54], ebx
jmp 0x18004bb56
movzx eax, dil
mov dword [rdx], esi
xor al, r13b
mov qword [rdx + 0x48], rcx
mov dword [rdx + 0xe62], 0x630000
mov dword [rdx + 0xe68], ecx
mov dword [rdx + 0xe6c], 0x3e7
mov qword [rdx + 0x50], rcx
mov dword [rdx + 0x58], 0x10000
mov dword [rdx + 0x60], ecx
mov byte [rdx + 0x5c], al
test dil, dil
jne 0x18004bb56
mov ecx, dword [rbp - 0x58]
mov eax, 1
cmp byte [rbp + 0x168], dil
movzx ecx, cl
cmovne ecx, eax
mov dword [rbp - 0x58], ecx
test dword [rbp + 0x188], 0x2000
je 0x18004bb66
mov byte [rdx + 0x58], r13b
test dil, dil
jne 0x18004bb8d
cmp byte [rbp + 0x198], dil
jne 0x18004bb89
cmp byte [rsp + 0x50], dil
je 0x18004bb8d
mov rax, qword [rsp + 0x70]
cmp byte [rax + 0x148], dil
je 0x18004bb8d
mov byte [rbp - 0x58], r13b
mov rbx, qword [rsp + 0x58]
jmp 0x18004b8ee
mov r13, qword [rsp + 0x58]
test r13, r13
je 0x18004bba8
cmp byte [rsp + 0x60], 0
jne 0x18004bbcc
xor cl, cl
mov byte [rbp + 0x168], cl
test r13, r13
je 0x18004bbd0
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
je 0x18004bbd0
test cl, cl
je 0x18004bbd0
mov dl, 1
jmp 0x18004bbd2
mov r13, qword [rsp + 0x58]
mov cl, 1
jmp 0x18004bbaa
xor dl, dl
mov eax, dword [rsp + 0x68]
mov dword [rbp - 0x70], edx
movzx r15d, dl
mov byte [rbp - 0x77], 0
mov byte [rsp + 0x50], 0
test al, al
je 0x18004bce5
test r13, r13
je 0x18004bce5
test cl, cl
jne 0x18004bc03
test dl, dl
je 0x18004bcf6
mov r12d, dword [rbp + 0x178]
lea rcx, [r13 + 0x10]
lea edx, [r12 + 1]
call fcn.180035480
mov r14, qword [r13 + 0x18]
movsxd rbx, dword [r13 + 0x10]
mov rdi, r14
mov rcx, qword [rbp + 0x170]
dec rbx
mov rsi, rcx
lea rbx, [r14 + rbx*2]
cmp r14, rbx
jae 0x18004bc81
nop dword [rax]
cmp byte [rsi], 0
je 0x18004bc7a
xor r8d, r8d
lea rcx, [rbp + 0x198]
mov rdx, rsi
call fcn.180024030
movsxd rcx, eax
mov eax, dword [rbp + 0x198]
add rsi, rcx
test eax, eax
je 0x18004bc7a
cmp eax, 0xffff
ja 0x18004bc75
mov word [rdi], ax
add rdi, 2
cmp rdi, rbx
jb 0x18004bc40
mov rcx, qword [rbp + 0x170]
mov eax, dword [rsp + 0x68]
sub esi, ecx
xor r9d, r9d
mov word [rdi], r9w
mov edx, r9d
sub rdi, r14
mov dword [r13 + 8], esi
mov r14, qword [rsp + 0x70]
mov esi, dword [rsp + 0x6c]
sar rdi, 1
cmp dword [r13 + 0x4c], edi
mov ecx, edi
mov dword [r13 + 4], edi
cmovl ecx, dword [r13 + 0x4c]
cmp dword [r13 + 0x50], edi
mov dword [r13 + 0x4c], ecx
mov ecx, edi
cmovl ecx, dword [r13 + 0x50]
cmp dword [r13 + 0x54], edi
mov dword [r13 + 0x50], ecx
cmovl edi, dword [r13 + 0x54]
cmp ecx, edi
mov dword [r13 + 0x54], edi
movzx ecx, byte [rbp + 0x168]
cmovne edx, r15d
mov dword [rbp - 0x70], edx
jmp 0x18004bcec
mov r12d, dword [rbp + 0x178]
test cl, cl
jne 0x18004bd06
test dl, dl
jne 0x18004bd06
jmp 0x18004bcfd
mov r12d, dword [rbp + 0x178]
cmp dword [r14 + 0x1b38], esi
jne 0x18004bd1a
test al, al
jne 0x18004bd1a
test r13, r13
je 0x18004bd1a
mov byte [rsp + 0x60], 1
cmp byte [r13 + 0x40], al
jne 0x18004bd1f
mov byte [rsp + 0x60], 0
cmp byte [rbp - 0x74], 0
je 0x18004be03
mov rdx, qword [r14 + 0x19a0]
cmp dword [rdx + 0x18], 0x2a
jg 0x18004bd3c
mov r8, qword [rdx + 0x38]
jmp 0x18004bd60
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x18004bd54
mov r8, qword [rdx + 0x38]
jmp 0x18004bd60
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rdi, [r14 + 0x2f00]
mov rbx, qword [0x180089a48]
mov dword [rdi + 0x14], eax
mov rax, qword [r14 + 0x19a0]
mov qword [rbp + 0x198], rdi
mov ecx, dword [rax + 0x60]
mov dword [rdi + 0x60], ecx
mov rax, qword [r14 + 0x19a0]
movsd xmm0, qword [rax + 0x40]
movsd qword [rdi + 0x40], xmm0
mov rax, qword [r14 + 0x19a0]
mov ecx, dword [rax + 0x64]
mov dword [rdi + 0x64], ecx
mov rax, qword [r14 + 0x19a0]
mov ecx, dword [rax + 0x68]
mov dword [rdi + 0x68], ecx
mov rax, qword [r14 + 0x19a0]
mov rcx, qword [rax + 0x48]
mov qword [rdi + 0x48], rcx
mov rcx, rdi
mov qword [rdi + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rdi + 0x10], eax
call fcn.18002e720
lea rdx, [rbp + 0x198]
lea rcx, [rbx + 0x1c30]
call fcn.180035070
mov rdx, qword [rdi + 0x48]
mov rcx, qword [rbx + 0x1af0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x2b0]
call fcn.18003c520
movss xmm0, dword [0x1800659b0]
xor r15d, r15d
mov ecx, 0x20000c
mov dword [rbp - 0x50], r15d
cmp dword [r14 + 0x1b38], esi
jne 0x18004c209
mov eax, dword [r13 + 8]
mov r9d, dword [rbp + 0x188]
mov dword [r13 + 0xe78], r9d
mov dword [r13 + 0x44], r12d
mov qword [r13 + 0xe80], r15
mov qword [r13 + 0xe88], r15
cmp byte [r14 + 0x138], r15b
mov dword [r14 + 0x3234], 1
mov dword [rbp - 0x50], eax
sete al
mov byte [r14 + 0x1b45], al
movss xmm6, dword [r14 + 0x130]
subss xmm6, xmm10
subss xmm6, dword [r14 + 0x1590]
addss xmm6, dword [r13 + 0x48]
cmp byte [rsp + 0x64], r15b
je 0x18004beaf
mov r15, qword [rbp - 0x48]
movss xmm2, dword [r14 + 0x134]
subss xmm2, dword [r15 + 0xd4]
xor r15d, r15d
subss xmm2, dword [r14 + 0x1594]
jmp 0x18004bebc
movss xmm2, dword [r14 + 0x19a8]
mulss xmm2, xmm0
cmp byte [rbp - 0x58], 0
movzx edi, byte [r14 + 0xc9]
jne 0x18004c043
movzx eax, byte [rbp - 0x76]
test al, al
je 0x18004bee8
test dil, dil
jne 0x18004bf5a
cmp byte [r14 + 0x425], dil
jne 0x18004c043
cmp byte [r14 + 0x420], 0
je 0x18004bfb7
cmp byte [r13 + 0xe75], 0
jne 0x18004bfb7
test al, al
je 0x18004c060
cmp byte [r13 + 0x5c], 0
je 0x18004bf27
xor r8d, r8d
lea rcx, [rbp - 0x30]
mov rdx, r13
call fcn.180049450
movss xmm2, dword [rbp - 0x24]
movaps xmm1, xmm6
mov rcx, r13
call fcn.180049960
mov r9d, dword [rbp + 0x188]
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], eax
mov dword [r13 + 0x54], eax
mov byte [r13 + 0x5b], 0
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004c060
cmp byte [r14 + 0x425], 0
je 0x18004bee8
mov r8d, ecx
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.180049ee0
mov r8d, 0x60000d
mov byte [r13 + 0xe74], 1
lea rdx, [r13 + 0x4c]
mov dword [r13 + 0xe70], 0xbe99999a
mov rcx, r13
call fcn.180049ee0
mov r9d, dword [rbp + 0x188]
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004c060
cmp byte [r14 + 0x138], 0
je 0x18004c060
cmp byte [r13 + 0xe75], 0
jne 0x18004c06a
ucomiss xmm8, dword [r14 + 0x3c0]
jne 0x18004bfe7
ucomiss xmm8, dword [r14 + 0x3c4]
je 0x18004c060
cmp byte [r13 + 0x5c], 0
je 0x18004c002
xor r8d, r8d
lea rcx, [rbp - 0x30]
mov rdx, r13
call fcn.180049450
movss xmm2, dword [rbp - 0x24]
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004c014
mov eax, dword [r13 + 0x4c]
mov dword [r13 + 0x50], eax
movaps xmm1, xmm6
mov rcx, r13
call fcn.180049960
mov r9d, dword [rbp + 0x188]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0xe70], 0xbe99999a
mov byte [r13 + 0xe74], 1
jmp 0x18004c060
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r15d
mov byte [r13 + 0x5b], 0
mov byte [r13 + 0xe75], 1
cmp byte [r13 + 0xe75], 0
je 0x18004c07c
cmp byte [r14 + 0x138], 0
jne 0x18004c07c
mov byte [r13 + 0xe75], 0
cmp byte [r14 + 0x148], 0
je 0x18004c090
cmp byte [r14 + 0x14a], 0
je 0x18004c09f
test dil, dil
je 0x18004c0a3
cmp byte [r14 + 0x14b], 0
je 0x18004c0a3
mov bl, 1
jmp 0x18004c0a5
xor bl, bl
bt r9d, 0xa
jae 0x18004c156
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004c156
mov dl, 1
call fcn.1800293f0
test al, al
mov eax, dword [rsp + 0x68]
je 0x18004c15a
test bl, bl
jne 0x18004c15a
cmp byte [r14 + 0x149], bl
jne 0x18004c15a
test al, al
jne 0x18004c15a
mov rcx, qword [r14 + 0x1550]
movsxd rax, dword [r14 + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x18004c113
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x18004c156
cmp rcx, rdx
jb 0x18004c101
mov edx, r9d
mov dword [rbp + 0x198], 9
lea rcx, [rbp + 0x198]
call fcn.18004b110
test al, al
je 0x18004c156
mov r8d, dword [rbp + 0x198]
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.180049ee0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
mov eax, dword [rsp + 0x68]
cmp dword [r14 + 0x1548], 0
jle 0x18004c209
test bl, bl
jne 0x18004c1fb
test al, al
jne 0x18004c1fb
cmp byte [rbp - 0x78], al
jne 0x18004c1fb
mov esi, dword [rbp + 0x188]
mov edi, r15d
mov rbx, r15
nop dword [rax]
mov rax, qword [r14 + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp + 0x198], ecx
cmp ecx, 9
jne 0x18004c1b0
cmp byte [r14 + 0x149], 0
jne 0x18004c1e8
mov edx, esi
lea rcx, [rbp + 0x198]
call fcn.18004b110
test al, al
je 0x18004c1e8
mov r8d, dword [rbp + 0x198]
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.180049ee0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
inc edi
add rbx, 2
cmp edi, dword [r14 + 0x1548]
jl 0x18004c190
mov esi, dword [rsp + 0x6c]
lea rcx, [r14 + 0x1548]
xor edx, edx
call fcn.180035480
xor cl, cl
cmp dword [r14 + 0x1b38], esi
jne 0x18004d69f
cmp byte [r14 + 0x1b44], cl
jne 0x18004d05f
cmp byte [rbp + 0x190], cl
jne 0x18004d05f
movzx ecx, byte [r14 + 0x149]
movzx edx, byte [r14 + 0xc9]
movzx eax, cl
neg al
sbb r12d, r12d
and r12d, 0x400000
test dl, dl
je 0x18004c2a2
cmp byte [r14 + 0x14b], 0
je 0x18004c26d
cmp byte [r14 + 0x148], 0
mov eax, 1
je 0x18004c270
mov eax, r15d
test eax, eax
jne 0x18004c2b6
xor r13b, r13b
test dl, dl
je 0x18004c2c9
cmp byte [r14 + 0x14b], 0
je 0x18004c2c9
test cl, cl
je 0x18004c2c9
cmp byte [r14 + 0x148], 0
jne 0x18004c2c9
cmp byte [r14 + 0x14a], 0
jne 0x18004c2c9
mov sil, 1
jmp 0x18004c2d0
cmp byte [r14 + 0x148], 0
je 0x18004c274
cmp byte [r14 + 0x14b], 0
jne 0x18004c274
cmp byte [r14 + 0x14a], 0
jne 0x18004c274
test cl, cl
jne 0x18004c274
mov r13b, 1
jmp 0x18004c277
xor sil, sil
test dl, dl
je 0x18004c323
cmp byte [r14 + 0x14b], 0
movzx r15d, byte [r14 + 0x14a]
je 0x18004c32b
cmp byte [r14 + 0x148], 0
jne 0x18004c32b
test r15b, r15b
jne 0x18004c32b
movzx ecx, byte [r14 + 0x148]
mov dil, 1
xor r9b, r9b
cmp byte [r14 + 0x149], r9b
je 0x18004c358
test cl, cl
jne 0x18004c358
cmp byte [r14 + 0x14a], r9b
jne 0x18004c358
cmp byte [r14 + 0x14b], r9b
jne 0x18004c358
mov r10b, 1
jmp 0x18004c35b
movzx r15d, byte [r14 + 0x148]
movzx ecx, byte [r14 + 0x148]
xor dil, dil
test cl, cl
je 0x18004c2fc
cmp byte [r14 + 0x149], dil
jne 0x18004c2fc
cmp byte [r14 + 0x14a], dil
jne 0x18004c2fc
cmp byte [r14 + 0x14b], dil
jne 0x18004c2fc
mov r9b, 1
xor r10b, r10b
test r13b, r13b
je 0x18004c37c
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x18004c37c
mov dl, 1
call fcn.1800293f0
test al, al
jne 0x18004c39a
test r10b, r10b
je 0x18004c3ca
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004c3ca
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c3ca
cmp byte [rsp + 0x68], 0
mov r14d, dword [rbp - 0x74]
mov ebx, dword [rsp + 0x64]
mov r11, qword [rsp + 0x58]
jne 0x18004c3d7
test r14b, r14b
jne 0x18004c3d7
test bl, bl
je 0x18004c3c1
mov eax, dword [r11 + 0x54]
cmp dword [r11 + 0x50], eax
je 0x18004c3d7
mov byte [rbp + 0x198], 1
jmp 0x18004c3de
mov r11, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x64]
mov r14d, dword [rbp - 0x74]
mov byte [rbp + 0x198], 0
test r13b, r13b
je 0x18004c3ff
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x18004c3ff
mov dl, 1
call fcn.1800293f0
test al, al
jne 0x18004c41d
test r9b, r9b
je 0x18004c435
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004c435
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c435
test r14b, r14b
jne 0x18004c435
test bl, bl
je 0x18004c430
mov eax, dword [r11 + 0x54]
cmp dword [r11 + 0x50], eax
je 0x18004c435
mov r14b, 1
jmp 0x18004c438
xor r14b, r14b
test r13b, r13b
je 0x18004c459
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x18004c459
mov dl, 1
call fcn.1800293f0
test al, al
jne 0x18004c477
test r10b, r10b
je 0x18004c485
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004c485
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c485
mov r10d, dword [rsp + 0x68]
test r10b, r10b
jne 0x18004c48a
mov bl, 1
jmp 0x18004c48c
mov r10d, dword [rsp + 0x68]
xor bl, bl
test r13b, r13b
je 0x18004c4c1
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004c4c1
mov dl, 1
call fcn.1800293f0
mov r9d, dword [rbp - 0x68]
test al, al
je 0x18004c4c5
test r10b, r10b
jne 0x18004c4c5
test r9b, r9b
je 0x18004c4c5
movzx r11d, dl
jmp 0x18004c4cd
mov r9d, dword [rbp - 0x68]
xor r11b, r11b
test r13b, r13b
je 0x18004c4e9
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x18004c4e9
mov dl, 1
call fcn.1800293f0
test al, al
jne 0x18004c50a
test sil, sil
je 0x18004c519
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004c519
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c519
test r10b, r10b
jne 0x18004c519
test r9b, r9b
je 0x18004c519
mov r10b, 1
jmp 0x18004c51c
xor r10b, r10b
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x18004c580
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c580
test dil, dil
je 0x18004c541
mov ecx, 0x200004
jmp 0x18004c551
test r15b, r15b
mov ecx, 0x200000
mov eax, 0x20000c
cmovne ecx, eax
or ecx, r12d
mov r8d, ecx
mov r13, qword [rsp + 0x58]
mov rcx, r13
lea rdx, [r13 + 0x4c]
call fcn.180049ee0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d038
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x18004c5c3
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c5c3
test dil, dil
je 0x18004c5ab
mov ecx, 0x200005
or r12d, ecx
mov r8d, r12d
jmp 0x18004c557
test r15b, r15b
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or r12d, ecx
mov r8d, r12d
jmp 0x18004c557
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004c658
mov dl, 1
call fcn.1800293f0
mov esi, dword [rsp + 0x64]
test al, al
je 0x18004c65c
test sil, sil
je 0x18004c65c
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
je 0x18004c625
mov rdx, qword [rbp - 0x48]
xor r9d, r9d
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [r14 + 0x19a8]
mov dword [rdx + 0x70], r9d
maxss xmm0, xmm8
movss dword [rdx + 0x68], xmm0
jmp 0x18004d03d
movzx eax, dil
lea r8d, [rax*4 + 0x200002]
or r8d, r12d
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.180049ee0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d03d
mov esi, dword [rsp + 0x64]
mov r9, qword [0x180089a48]
mov ecx, dword [r9 + 0x4c]
test ecx, ecx
js 0x18004c6cf
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c6cf
test sil, sil
je 0x18004c6cf
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
je 0x18004c6be
mov rax, qword [r9 + 0x1af0]
xor r9d, r9d
mov rcx, qword [rbp - 0x48]
movss xmm0, dword [r14 + 0x19a8]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
mov dword [rcx + 0x70], r9d
movss dword [rcx + 0x68], xmm0
jmp 0x18004d03d
movzx eax, dil
lea r8d, [rax*4 + 0x200003]
jmp 0x18004c631
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x18004c714
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c714
mov eax, r12d
mov r8d, 0x200004
or eax, 0x200006
mov r14, qword [rsp + 0x70]
or r8d, r12d
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
cmovne r8d, eax
jmp 0x18004c634
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x18004c73d
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c73d
mov eax, r12d
mov r8d, 0x200005
or eax, 0x200007
jmp 0x18004c6f6
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004c76f
mov dl, 1
call fcn.1800293f0
mov r9d, dword [rsp + 0x68]
test al, al
je 0x18004c774
test r9b, r9b
jne 0x18004c774
or r12d, 0x200008
mov r8d, r12d
jmp 0x18004c557
mov r9d, dword [rsp + 0x68]
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x18004c834
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c834
test r9b, r9b
jne 0x18004c834
mov r13, qword [rsp + 0x58]
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004c7d7
test r15b, r15b
je 0x18004c7eb
lea rdx, [r13 + 0x4c]
mov r8d, 0x60000c
mov rcx, r13
call fcn.180049ee0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
mov r14, qword [rsp + 0x70]
or r12d, 0x200009
mov r8d, r12d
jmp 0x18004c634
mov r14, qword [rsp + 0x70]
cmp byte [r14 + 0xc9], 0
je 0x18004c7dc
cmp byte [r14 + 0x14b], 0
je 0x18004c7dc
cmp byte [r14 + 0x14a], 0
jne 0x18004c7dc
cmp byte [r14 + 0x148], 0
jne 0x18004c7dc
mov edx, 0x600004
mov rcx, r13
call fcn.18004b0e0
or r12d, 0x200009
mov r8d, r12d
jmp 0x18004c634
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x18004c84d
mov dl, 1
call fcn.1800293f0
test al, al
jne 0x18004c86a
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x18004c8df
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c8df
mov edx, dword [rbp + 0x188]
mov eax, edx
mov r14, qword [rsp + 0x70]
shr eax, 0xb
and al, 1
test sil, sil
je 0x18004c891
movzx ecx, byte [r14 + 0x148]
test al, al
je 0x18004c8a7
test cl, cl
jne 0x18004c8ab
mov byte [rbp + 0x190], 1
mov byte [rsp + 0x50], 1
mov r13, qword [rsp + 0x58]
jmp 0x18004d03d
test cl, cl
jne 0x18004c891
test r9b, r9b
jne 0x18004c89d
lea rcx, [rbp + 0x198]
mov dword [rbp + 0x198], 0xa
call fcn.18004b110
test al, al
je 0x18004c9b3
mov r13, qword [rsp + 0x58]
mov r8d, dword [rbp + 0x198]
jmp 0x18004c634
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x18004c910
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c910
mov r13, qword [rsp + 0x58]
movzx ecx, dl
mov r14, qword [rsp + 0x70]
mov byte [rbp + 0x190], dl
jmp 0x18004d03f
test r11b, r11b
jne 0x18004cff2
test r10b, r10b
jne 0x18004cff2
test r13b, r13b
je 0x18004c968
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x18004c968
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004c968
mov r13, qword [rsp + 0x58]
xor r9d, r9d
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r9d
mov byte [r13 + 0x5b], r9b
mov byte [r13 + 0xe74], dl
jmp 0x18004d038
movzx r15d, byte [rbp + 0x198]
test r15b, r15b
jne 0x18004cced
test r14b, r14b
jne 0x18004cced
test bl, bl
je 0x18004d033
mov rcx, qword [0x180089a48]
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x18004c9bd
mov rcx, qword [rcx + 0x110]
call rax
mov rbx, rax
test rax, rax
jne 0x18004c9c4
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
jmp 0x18004d03d
lea rbx, [0x18005e7dd]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x18004c9d0
mov rcx, qword [0x180089a48]
test rcx, rcx
je 0x18004c9eb
inc dword [rcx + 0x3bc]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r14d, r14d
mov qword [rbp - 0x68], rax
mov r12, rax
mov r15d, r14d
cmp byte [rbx], r14b
je 0x18004ca6e
mov r12d, dword [rbp + 0x188]
mov rdi, rax
nop word [rax + rax]
xor r8d, r8d
lea rcx, [rbp + 0x198]
mov rdx, rbx
call fcn.180024030
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp + 0x198], r14d
je 0x18004ca6a
mov edx, r12d
lea rcx, [rbp + 0x198]
call fcn.18004b110
test al, al
je 0x18004ca65
movzx eax, word [rbp + 0x198]
inc r15d
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r14b
jne 0x18004ca20
mov r12, qword [rbp - 0x68]
mov r13, qword [rsp + 0x58]
movsxd rax, r15d
mov word [r12 + rax*2], r14w
test r15d, r15d
jle 0x18004ccc8
mov esi, dword [r13 + 0x54]
mov edi, dword [r13 + 0x50]
mov eax, dword [r13 + 4]
cmp edi, esi
je 0x18004cab8
mov ecx, edi
cmp edi, eax
jle 0x18004caa0
mov dword [r13 + 0x50], eax
mov ecx, eax
mov edx, esi
cmp esi, eax
jle 0x18004caac
mov dword [r13 + 0x54], eax
mov edx, eax
mov esi, edx
mov edi, ecx
cmp ecx, edx
jne 0x18004cab8
mov dword [r13 + 0x4c], ecx
mov r8d, dword [r13 + 0x4c]
cmp r8d, eax
jle 0x18004cac8
mov dword [r13 + 0x4c], eax
mov r8d, eax
cmp edi, esi
je 0x18004caf3
mov ecx, edi
cmp edi, eax
jle 0x18004cad8
mov dword [r13 + 0x50], eax
mov ecx, eax
mov edx, esi
cmp esi, eax
jle 0x18004cae4
mov dword [r13 + 0x54], eax
mov edx, eax
mov esi, edx
mov edi, ecx
cmp ecx, edx
jne 0x18004caf3
mov dword [r13 + 0x4c], ecx
mov r8d, ecx
cmp r8d, eax
jle 0x18004cafc
mov dword [r13 + 0x4c], eax
cmp edi, esi
je 0x18004cc62
lea r14, [r13 + 0x64]
mov rcx, r14
jge 0x18004cbb4
sub esi, edi
mov edx, esi
call fcn.18004ac20
mov rcx, rax
test rax, rax
je 0x18004cb9a
xor r9d, r9d
mov dword [rax], edi
mov dword [rax + 4], esi
mov dword [rax + 8], r9d
test esi, esi
jne 0x18004cb3b
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004cb9a
mov eax, dword [r14 + 0xe04]
mov dword [rcx + 0xc], eax
add dword [r14 + 0xe04], esi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [r14 + rdx*2]
test rdx, rdx
je 0x18004cb9a
movsxd r8, esi
test esi, esi
jle 0x18004cb9a
movsxd rax, edi
lea r9, [rax + rax]
sub r9, rdx
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r13 + 0x18]
lea rdx, [rdx + 2]
add rcx, r9
movzx eax, word [rcx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x18004cb80
mov r8d, esi
mov edx, edi
mov rcx, r13
call fcn.1800496b0
mov r8d, dword [r13 + 0x50]
mov dword [r13 + 0x54], r8d
jmp 0x18004cc4f
sub edi, esi
mov edx, edi
call fcn.18004ac20
mov rcx, rax
test rax, rax
je 0x18004cc3a
xor r9d, r9d
mov dword [rax], esi
mov dword [rax + 4], edi
mov dword [rax + 8], r9d
test edi, edi
jne 0x18004cbde
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004cc3a
mov eax, dword [r14 + 0xe04]
mov dword [rcx + 0xc], eax
add dword [r14 + 0xe04], edi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [r14 + rdx*2]
test rdx, rdx
je 0x18004cc3a
movsxd r8, edi
test edi, edi
jle 0x18004cc3a
movsxd rax, esi
lea r9, [rax + rax]
sub r9, rdx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004cc20
mov r8d, edi
mov edx, esi
mov rcx, r13
call fcn.1800496b0
mov r8d, dword [r13 + 0x54]
mov dword [r13 + 0x50], r8d
lea rax, [r13 + 0x4c]
xor r14d, r14d
mov byte [rax + 0xf], 0
mov dword [r13 + 0x4c], r8d
mov byte [rax + 0xf], 0
mov edx, dword [r13 + 0x4c]
mov r9d, r15d
mov r8, r12
mov rcx, r13
call fcn.1800497b0
test al, al
je 0x18004cca8
mov edi, dword [r13 + 0x4c]
lea rcx, [r13 + 0x64]
xor edx, edx
call fcn.18004ac20
test rax, rax
je 0x18004cc9d
mov dword [rax], edi
mov dword [rax + 4], r14d
mov dword [rax + 8], r15d
mov dword [rax + 0xc], 0xffffffff
add dword [r13 + 0x4c], r15d
mov byte [r13 + 0x5b], 0
jmp 0x18004ccc0
movzx eax, word [r13 + 0xe62]
test ax, ax
je 0x18004ccc0
dec ax
mov word [r13 + 0xe62], ax
mov byte [r13 + 0xe74], 1
test r12, r12
je 0x18004ccdf
mov rax, qword [0x180089a48]
test rax, rax
je 0x18004ccdf
dec dword [rax + 0x3bc]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18004d038
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp qword [r14 + 0x108], 0
je 0x18004ce39
mov esi, dword [r13 + 0x54]
mov eax, dword [r13 + 0x50]
cmp eax, esi
je 0x18004cd20
mov r14d, esi
cmovge esi, eax
cmovl r14d, eax
xor r12d, r12d
jmp 0x18004cd2a
mov esi, dword [r13 + 4]
xor r12d, r12d
mov r14d, r12d
mov rcx, qword [r13 + 0x18]
mov edx, r12d
movsxd rax, esi
mov ebx, 0x2400
mov edi, 0x2800
mov r15d, 0x3ff
mov r10d, 0x80
mov r11d, 0x800
lea r9, [rcx + rax*2]
movsxd rax, r14d
lea r8, [rcx + rax*2]
nop dword [rax + rax]
test r9, r9
je 0x18004cd6a
cmp r8, r9
jae 0x18004cdad
movzx ecx, word [r8]
test cx, cx
je 0x18004cdad
add r8, 2
cmp cx, r10w
jae 0x18004cd81
inc edx
jmp 0x18004cd60
cmp cx, r11w
jae 0x18004cd90
mov eax, 2
add edx, eax
jmp 0x18004cd60
lea eax, [rbx + rcx]
cmp ax, r15w
mov eax, r12d
jbe 0x18004cda9
add cx, di
cmp cx, r15w
setbe al
add eax, 3
add edx, eax
jmp 0x18004cd60
mov rax, qword [0x180089a48]
lea edi, [rdx + 1]
movzx r15d, byte [rbp + 0x198]
test rax, rax
je 0x18004cdca
inc dword [rax + 0x3bc]
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [r13 + 0x18]
mov edx, edi
movsxd rcx, esi
mov rbx, rax
lea r9, [r8 + rcx*2]
movsxd rcx, r14d
lea r8, [r8 + rcx*2]
mov rcx, rax
call fcn.1800246e0
mov r9, qword [0x180089a48]
mov rax, qword [r9 + 0x108]
test rax, rax
je 0x18004ce18
mov rcx, qword [r9 + 0x110]
mov rdx, rbx
call rax
mov r9, qword [0x180089a48]
test rbx, rbx
je 0x18004ce29
test r9, r9
je 0x18004ce29
dec dword [r9 + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14, qword [rsp + 0x70]
jmp 0x18004ce3c
xor r12d, r12d
test r15b, r15b
je 0x18004d03d
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004ce64
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r12d
mov byte [r13 + 0x5b], 0
mov byte [r13 + 0xe74], 1
mov edi, dword [r13 + 0x54]
mov ebx, dword [r13 + 0x50]
cmp ebx, edi
je 0x18004d038
mov eax, dword [r13 + 4]
cmp ebx, eax
jle 0x18004ce8a
mov dword [r13 + 0x50], eax
mov ebx, eax
cmp edi, eax
jle 0x18004ce94
mov dword [r13 + 0x54], eax
mov edi, eax
cmp ebx, edi
jne 0x18004ce9c
mov dword [r13 + 0x4c], ebx
cmp dword [r13 + 0x4c], eax
jle 0x18004cea6
mov dword [r13 + 0x4c], eax
cmp ebx, edi
je 0x18004cfeb
lea rsi, [r13 + 0x64]
mov rcx, rsi
jge 0x18004cf54
sub edi, ebx
mov edx, edi
call fcn.18004ac20
mov rcx, rax
test rax, rax
je 0x18004cf3a
mov dword [rax], ebx
mov dword [rax + 4], edi
mov dword [rax + 8], r12d
test edi, edi
jne 0x18004cee2
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004cf3a
mov eax, dword [rsi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rsi + 0xe04], edi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [rsi + rdx*2]
test rdx, rdx
je 0x18004cf3a
movsxd r8, edi
test edi, edi
jle 0x18004cf3a
movsxd rax, ebx
lea r9, [rax + rax]
sub r9, rdx
nop word [rax + rax]
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004cf20
mov r8d, edi
mov edx, ebx
mov rcx, r13
call fcn.1800496b0
mov r8d, dword [r13 + 0x50]
mov dword [r13 + 0x54], r8d
jmp 0x18004cfdf
sub ebx, edi
mov edx, ebx
call fcn.18004ac20
mov rcx, rax
test rax, rax
je 0x18004cfca
mov dword [rax], edi
mov dword [rax + 4], ebx
mov dword [rax + 8], r12d
test ebx, ebx
jne 0x18004cf7b
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004cfca
mov eax, dword [rsi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rsi + 0xe04], ebx
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [rsi + rdx*2]
test rdx, rdx
je 0x18004cfca
movsxd r8, ebx
test ebx, ebx
jle 0x18004cfca
movsxd rax, edi
lea r9, [rax + rax]
sub r9, rdx
nop
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004cfb0
mov r8d, ebx
mov edx, edi
mov rcx, r13
call fcn.1800496b0
mov r8d, dword [r13 + 0x54]
mov dword [r13 + 0x50], r8d
lea rax, [r13 + 0x4c]
mov byte [rax + 0xf], 0
mov dword [r13 + 0x4c], r8d
mov byte [r13 + 0x5b], 0
jmp 0x18004d038
mov r13, qword [rsp + 0x58]
movzx r8d, r11b
mov rcx, r13
xor r8d, 1
add r8d, 0x20000a
lea rdx, [r13 + 0x4c]
call fcn.180049ee0
mov eax, dword [r13 + 0x4c]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x50], eax
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d038
mov r13, qword [rsp + 0x58]
mov r14, qword [rsp + 0x70]
xor cl, cl
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
je 0x18004d056
cmp byte [rbp + 0x168], 0
je 0x18004d056
mov al, 1
jmp 0x18004d058
xor al, al
or byte [rbp - 0x70], al
mov esi, dword [rsp + 0x6c]
cmp dword [r14 + 0x1b38], esi
jne 0x18004d69f
xor esi, esi
mov qword [rbp - 0x58], rsi
mov r12d, esi
mov dword [rbp - 0x68], esi
mov r15d, esi
test cl, cl
je 0x18004d297
cmp byte [rsp + 0x68], sil
jne 0x18004d204
mov r9, qword [r13 + 0x38]
mov rax, qword [rbp + 0x170]
mov r8, r9
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d0b3
inc rax
test ecx, ecx
jne 0x18004d0a0
test edx, edx
je 0x18004d204
mov r15d, dword [r13 + 0x30]
mov r12, r9
dec r15d
mov qword [rbp - 0x58], r9
mov dword [rbp - 0x68], r15d
mov ebx, esi
mov r14, rsi
test r15d, r15d
jle 0x18004d135
movsxd rdi, r15d
mov rcx, r9
add rdi, r9
mov rdx, rdi
call fcn.180024470
lea ebx, [rax + 1]
test ebx, ebx
jle 0x18004d120
mov eax, 8
mov ecx, ebx
cmp ebx, eax
cmovl ecx, eax
test ecx, ecx
jle 0x18004d120
mov rax, qword [0x180089a48]
test rax, rax
je 0x18004d111
inc dword [rax + 0x3bc]
movsxd rcx, ecx
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8, r12
mov edx, ebx
mov rcx, r14
call fcn.1800241d0
lea esi, [rbx - 1]
mov r9d, 0
movsxd rbx, dword [r13 + 4]
lea rdi, [r13 + 0x64]
test r15d, r15d
mov edx, ebx
mov rcx, rdi
cmovle esi, r9d
call fcn.18004ac20
mov rcx, rax
test rax, rax
je 0x18004d1b5
xor edx, edx
mov dword [rax + 4], ebx
mov dword [rax], edx
mov dword [rax + 8], esi
test ebx, ebx
jne 0x18004d176
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004d1b5
mov eax, dword [rdi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rdi + 0xe04], ebx
movsxd r9, dword [rcx + 0xc]
add r9, 0x318
lea r9, [rdi + r9*2]
test r9, r9
je 0x18004d1b5
test ebx, ebx
jle 0x18004d1b5
nop dword [rax]
mov rax, qword [r13 + 0x18]
movzx ecx, word [rax + rdx*2]
mov word [r9 + rdx*2], cx
inc rdx
cmp rdx, rbx
jl 0x18004d1a0
mov r8d, dword [r13 + 4]
xor edx, edx
mov rcx, r13
call fcn.1800496b0
test esi, esi
jle 0x18004d1e4
mov r9d, esi
mov r8, r14
xor edx, edx
mov rcx, r13
call fcn.1800497b0
test al, al
je 0x18004d1e4
mov dword [r13 + 0x4c], esi
mov byte [r13 + 0x5b], 0
test r14, r14
je 0x18004d204
mov rax, qword [0x180089a48]
test rax, rax
je 0x18004d1fb
dec dword [rax + 0x3bc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rsp + 0x50], 0
mov r10d, dword [rbp + 0x188]
je 0x18004d21c
test r10b, 0x20
jne 0x18004d29e
mov rsi, qword [rbp + 0x170]
mov edi, dword [rbp - 0x60]
test r12, r12
je 0x18004d67f
test dil, dil
je 0x18004d64c
xor edx, edx
mov dword [rbp + 0x38], 0x40000
lea eax, [r15 + 1]
mov qword [rbp + 0x48], rdx
cmp dword [rbp + 0x178], eax
lea rcx, [rbp + 0x38]
xorps xmm0, xmm0
mov dword [rbp + 0x3c], r10d
cmovge eax, dword [rbp + 0x178]
mov dword [rbp + 0x5c], eax
movdqu xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x50], rsi
mov dword [rbp + 0x58], r15d
mov qword [rbp + 0x40], rdx
call rdx
mov ecx, dword [rbp + 0x5c]
mov rsi, qword [rbp + 0x50]
mov qword [rbp + 0x170], rsi
lea r15d, [rcx - 1]
cmp dword [rbp + 0x58], r15d
cmovl r15d, dword [rbp + 0x58]
jmp 0x18004d652
mov r10d, dword [rbp + 0x188]
cmp byte [rsp + 0x68], 0
jne 0x18004d2d9
mov edx, dword [r13 + 0x10]
lea rcx, [r13 + 0x20]
mov byte [r13 + 0x40], 1
lea edx, [rdx*4 + 1]
call fcn.1800353a0
mov r8, qword [r13 + 0x18]
xor r9d, r9d
mov edx, dword [r13 + 0x20]
mov rcx, qword [r13 + 0x28]
call fcn.1800246e0
mov r10d, dword [rbp + 0x188]
test r10d, 0x1c0
je 0x18004d647
mov r9d, 0x16
test r10b, 0x40
je 0x18004d316
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004d316
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004d316
xor ebx, ebx
lea eax, [r9 + 0x2a]
mov r9d, ebx
jmp 0x18004d381
test r10b, r10b
jns 0x18004d36f
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004d345
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004d345
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
lea r9d, [r11 - 0x7d]
jmp 0x18004d387
mov rax, qword [0x180089a48]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x18004d36f
mov dl, 1
call fcn.1800293f0
test al, al
je 0x18004d36f
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
lea r9d, [r11 - 0x7c]
jmp 0x18004d387
mov ecx, pe_nt_image_headers64
mov ebx, 0
test ecx, r10d
mov eax, ebx
cmovne eax, ecx
mov r11d, 0x80
test eax, eax
je 0x18004d647
mov dword [rbp], eax
mov r14d, ebx
mov rax, qword [r13 + 0x28]
mov r12d, 0x2400
mov qword [rbp + 0x18], rax
mov r15d, 0x2800
mov eax, dword [r13 + 8]
mov dword [rbp + 0x20], eax
mov eax, dword [r13 + 0x44]
mov dword [rbp + 0x24], eax
movsxd rax, dword [r13 + 0x4c]
mov dword [rbp + 0x14], r9d
mov r9, qword [r13 + 0x18]
mov r13d, 0x3ff
mov dword [rbp + 4], r10d
mov rdx, r9
mov dword [rbp + 0x10], ebx
mov r10d, 0x800
mov qword [rbp + 0x29], rbx
lea r8, [r9 + rax*2]
mov dword [rbp + 0x31], ebx
mov word [rbp + 0x35], bx
mov byte [rbp + 0x37], 0
mov qword [rbp + 8], rbx
mov byte [rbp + 0x28], 0
mov qword [rbp - 0x30], r9
test r8, r8
je 0x18004d402
cmp rdx, r8
jae 0x18004d448
movzx ecx, word [rdx]
test cx, cx
je 0x18004d448
add rdx, 2
cmp cx, r11w
jae 0x18004d419
inc r14d
jmp 0x18004d3f8
cmp cx, r10w
jae 0x18004d429
mov eax, 2
add r14d, eax
jmp 0x18004d3f8
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004d443
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add r14d, eax
jmp 0x18004d3f8
mov r13, qword [rsp + 0x58]
mov rdx, r9
mov dword [rbp + 0x198], r14d
mov esi, ebx
mov dword [rbp + 0x2c], r14d
movsxd rax, dword [r13 + 0x50]
mov r13d, 0x3ff
lea r8, [r9 + rax*2]
nop dword [rax + rax]
test r8, r8
je 0x18004d47a
cmp rdx, r8
jae 0x18004d4bd
movzx ecx, word [rdx]
test cx, cx
je 0x18004d4bd
add rdx, 2
cmp cx, r11w
jae 0x18004d490
inc esi
jmp 0x18004d470
cmp cx, r10w
jae 0x18004d49f
mov eax, 2
add esi, eax
jmp 0x18004d470
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004d4b9
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add esi, eax
jmp 0x18004d470
mov r13, qword [rsp + 0x58]
mov edi, ebx
mov r9, qword [rbp - 0x30]
mov r14d, dword [rbp + 0x198]
mov dword [rbp + 0x30], esi
movsxd rax, dword [r13 + 0x54]
mov r13d, 0x3ff
lea rdx, [r9 + rax*2]
test rdx, rdx
je 0x18004d4ea
cmp r9, rdx
jae 0x18004d52e
movzx ecx, word [r9]
test cx, cx
je 0x18004d52e
add r9, 2
cmp cx, r11w
jae 0x18004d501
inc edi
jmp 0x18004d4e0
cmp cx, r10w
jae 0x18004d510
mov eax, 2
add edi, eax
jmp 0x18004d4e0
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004d52a
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add edi, eax
jmp 0x18004d4e0
lea rcx, [rbp]
mov dword [rbp + 0x34], edi
call rbx
movsxd rax, dword [rbp + 0x2c]
mov rbx, qword [rbp + 0x18]
mov r15d, dword [rbp - 0x68]
mov r12, qword [rbp - 0x58]
mov r13, qword [rsp + 0x58]
cmp eax, r14d
je 0x18004d569
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180024470
mov dword [r13 + 0x4c], eax
mov byte [r13 + 0xe74], 1
movsxd rax, dword [rbp + 0x30]
cmp eax, esi
je 0x18004d581
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180024470
mov dword [r13 + 0x50], eax
movsxd rax, dword [rbp + 0x34]
cmp eax, edi
je 0x18004d599
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180024470
mov dword [r13 + 0x54], eax
cmp byte [rbp + 0x28], 0
mov edi, dword [rbp - 0x60]
je 0x18004d5f0
mov edx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x50]
cmp edx, eax
jle 0x18004d5c2
test dil, dil
je 0x18004d5c2
lea rcx, [r13 + 0x10]
sub edx, eax
add edx, dword [rcx]
call fcn.180035480
mov rbx, qword [rbp + 0x18]
mov edx, dword [r13 + 0x10]
xor r9d, r9d
mov rcx, qword [r13 + 0x18]
mov r8, rbx
mov qword [rsp + 0x20], r9
call fcn.1800241d0
mov dword [r13 + 4], eax
mov eax, dword [rbp + 0x20]
mov dword [r13 + 8], eax
mov dword [r13 + 0xe70], 0xbe99999a
mov r10d, dword [rbp + 0x188]
cmp byte [rsp + 0x68], 0
mov rsi, qword [rbp + 0x170]
jne 0x18004d226
mov r9, qword [r13 + 0x28]
mov r8, rsi
mov rax, r9
sub r8, r9
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d633
inc rax
test ecx, ecx
jne 0x18004d620
test edx, edx
je 0x18004d226
mov r15d, dword [r13 + 8]
mov r12, r9
jmp 0x18004d226
mov edi, dword [rbp - 0x60]
jmp 0x18004d5f7
mov ecx, dword [rbp + 0x178]
lea eax, [r15 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x18004d67b
jbe 0x18004d676
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + rsi - 1], 0
mov byte [rbp - 0x77], 1
mov r14, qword [rsp + 0x70]
xor eax, eax
mov esi, dword [rsp + 0x6c]
mov dword [r13 + 0xe78], eax
mov qword [r13 + 0xe80], rax
mov qword [r13 + 0xe88], rax
cmp byte [rbp + 0x190], 0
je 0x18004d6b6
cmp dword [r14 + 0x1b38], esi
jne 0x18004d6b6
call fcn.180026650
mov edi, dword [rsp + 0x64]
movaps xmmword [rsp + 0x190], xmm13
test dil, dil
jne 0x18004d77a
mov r8d, 1
lea rcx, [rsp + 0x78]
mov edx, esi
call fcn.1800259e0
movss xmm8, dword [0x1800659f0]
mov ecx, 0x10
movaps xmm1, xmm8
call fcn.180024ca0
movss xmm0, dword [r14 + 0x1598]
mov r8d, eax
mov rdx, qword [rbp - 0x80]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm10
unpcklps xmm0, xmm11
movq rcx, xmm0
call fcn.1800253b0
mov r8, qword [rbp - 0x48]
movaps xmm0, xmm10
addss xmm0, dword [r14 + 0x1590]
movaps xmm1, xmm11
movaps xmm14, xmm10
addss xmm1, dword [r14 + 0x1594]
addss xmm14, xmm9
movaps xmm13, xmm11
addss xmm13, xmm7
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x194], xmm1
movss dword [rbp - 0x10], xmm14
movss dword [rbp - 0xc], xmm13
movss dword [rbp - 0x58], xmm14
movss dword [rbp - 0x68], xmm13
jmp 0x18004d7c5
mov r8, qword [rbp - 0x48]
movaps xmm2, xmm10
movss xmm8, dword [0x1800659f0]
addss xmm2, xmm9
movaps xmm1, xmm11
addss xmm1, xmm7
movsd xmm0, qword [r8 + 0xd0]
movsd qword [rbp + 0x190], xmm0
movss dword [rbp - 0x58], xmm2
movaps xmm14, xmm2
movss dword [rbp - 0x10], xmm2
movss dword [rbp - 0x68], xmm1
movaps xmm13, xmm1
movss dword [rbp - 0xc], xmm1
cmp byte [rsp + 0x60], 0
lea rax, [rbp + 0x190]
movss xmm15, dword [rax]
xorps xmm4, xmm4
movss dword [rbp - 0x18], xmm10
xorps xmm3, xmm3
movss xmm10, dword [rax + 4]
xorps xmm5, xmm5
movss dword [rbp + 0x190], xmm10
movss dword [rbp - 0x14], xmm11
movss dword [rsp + 0x6c], xmm4
movss dword [rbp + 0x198], xmm3
je 0x18004d817
mov rbx, qword [r13 + 0x28]
mov qword [rbp + 0x170], rbx
jmp 0x18004d81e
mov rbx, qword [rbp + 0x170]
movzx eax, byte [rbp + 0x168]
mov r15d, dword [rbp - 0x70]
test al, al
jne 0x18004da1a
test r15b, r15b
jne 0x18004da1a
test dil, dil
je 0x18004d89b
movzx edx, byte [rbx]
lea r12, [rbx + 1]
xor esi, esi
mov ecx, esi
test dl, dl
je 0x18004d867
nop
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r12]
cmovne eax, ecx
inc r12
mov ecx, eax
test dl, dl
jne 0x18004d850
movzx eax, byte [r12 - 1]
dec r12
cmp al, 0xa
je 0x18004d87a
cmp al, 0xd
je 0x18004d87a
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x6c], xmm9
mulss xmm0, dword [r14 + 0x19a8]
movss dword [rbp + 0x198], xmm0
jmp 0x18004d8d2
cmp dword [r14 + 0x1b38], esi
jne 0x18004d8aa
movsxd r12, dword [r13 + 8]
jmp 0x18004d8bb
mov r12, 0xffffffffffffffff
inc r12
cmp byte [rbx + r12], 0
jne 0x18004d8b1
add r12, rbx
xor esi, esi
mov rax, r12
sub rax, rbx
cmp rax, 0x200000
jge 0x18004e2d8
movss xmm13, dword [0x1800659f0]
xor ecx, ecx
movaps xmm1, xmm13
call fcn.180024ca0
mov r10, qword [r8 + 0x2b0]
test dil, dil
movss xmm2, dword [r14 + 0x19a8]
lea r8, [rbp - 0x18]
mov r11, qword [r14 + 0x19a0]
cmovne r8, rsi
mov r9d, eax
mov rdx, r12
test eax, 0xff000000
je 0x18004e2a0
test r12, r12
jne 0x18004d931
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rbx + rdx], 0
jne 0x18004d925
add rdx, rbx
cmp rbx, rdx
je 0x18004e2a0
test r11, r11
jne 0x18004d947
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm14, xmm14
ucomiss xmm2, xmm14
jne 0x18004d95a
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm1, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rsp + 0x78], xmm1
test r8, r8
je 0x18004d9c8
movss xmm0, dword [r8]
comiss xmm1, xmm0
jae 0x18004d984
movss dword [rsp + 0x78], xmm0
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rsp + 0x7c]
comiss xmm0, xmm1
jae 0x18004d99b
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [r8 + 8]
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm1
jb 0x18004d9b0
movss dword [rbp - 0x80], xmm1
movss xmm1, dword [r8 + 0xc]
movss xmm0, dword [rbp - 0x7c]
comiss xmm0, xmm1
jb 0x18004d9c5
movss dword [rbp - 0x7c], xmm1
test r8, r8
setne al
movaps xmm0, xmm15
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm14
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
unpcklps xmm0, xmm10
mov dword [rsp + 0x20], r9d
movq r9, xmm0
call fcn.180042610
movss xmm3, dword [rbp + 0x198]
movss xmm4, dword [rsp + 0x6c]
jmp 0x18004e2e5
movsxd r12, dword [r13 + 8]
xor r10d, r10d
mov rsi, qword [r13 + 0x18]
add r12, rbx
mov r8d, 0xfffffc18
xorps xmm7, xmm7
xorps xmm6, xmm6
mov r9d, r10d
mov ebx, r10d
mov edi, r8d
mov edx, r10d
test al, al
je 0x18004da54
movsxd rax, dword [r13 + 0x4c]
lea edx, [r10 + 1]
lea r8d, [r10 - 1]
lea r9, [rsi + rax*2]
test r15b, r15b
je 0x18004da74
mov ecx, dword [r13 + 0x54]
mov edi, 0xffffffff
cmp dword [r13 + 0x50], ecx
cmovl ecx, dword [r13 + 0x50]
inc edx
movsxd rax, ecx
lea rbx, [rsi + rax*2]
movzx eax, byte [rsp + 0x64]
mov r11d, r10d
movzx ecx, word [rsi]
add edx, eax
mov rax, rsi
test cx, cx
je 0x18004dacd
nop dword [rax]
cmp cx, 0xa
jne 0x18004dac0
inc r11d
cmp r8d, 0xffffffff
jne 0x18004daad
cmp rax, r9
jb 0x18004daad
dec edx
mov r8d, r11d
test edx, edx
jle 0x18004dacd
cmp edi, 0xffffffff
jne 0x18004dac0
cmp rax, rbx
jb 0x18004dac0
dec edx
mov edi, r11d
test edx, edx
jle 0x18004dacd
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x18004da90
inc r11d
mov rdx, r9
cmp r8d, 0xffffffff
mov r10d, r11d
cmovne r10d, r8d
cmp edi, 0xffffffff
cmove edi, r11d
cmp r9, rsi
jbe 0x18004db03
nop word [rax + rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18004db03
mov rdx, rax
cmp rax, rsi
ja 0x18004daf0
mov rax, qword [0x180089a48]
movaps xmm1, xmm5
movaps xmm11, xmm5
mov r8, qword [rax + 0x19a0]
movss xmm2, dword [rax + 0x19a8]
divss xmm2, dword [r8 + 0x14]
cmp rdx, r9
jae 0x18004db74
nop dword [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004db4b
maxss xmm11, xmm1
movaps xmm1, xmm11
movaps xmm11, xmm5
jmp 0x18004db6f
cmp ecx, 0xd
je 0x18004db6f
cmp ecx, dword [r8]
jge 0x18004db60
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004db66
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm11, xmm0
cmp rdx, r9
jb 0x18004db30
movss xmm0, dword [r14 + 0x19a8]
maxss xmm11, xmm1
movd xmm12, r10d
cvtdq2ps xmm12, xmm12
movss dword [rbp - 0x50], xmm11
mulss xmm12, xmm0
movss dword [rbp - 0x70], xmm12
test edi, edi
js 0x18004dc4b
mov rdx, rbx
cmp rbx, rsi
jbe 0x18004dbc3
nop dword [rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18004dbc3
mov rdx, rax
cmp rax, rsi
ja 0x18004dbb0
mov rax, qword [0x180089a48]
movaps xmm2, xmm5
movaps xmm6, xmm5
mov r8, qword [rax + 0x19a0]
movss xmm3, dword [rax + 0x19a8]
divss xmm3, dword [r8 + 0x14]
cmp rdx, rbx
jae 0x18004dc33
nop word [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004dc08
maxss xmm6, xmm2
movaps xmm2, xmm6
movaps xmm6, xmm5
jmp 0x18004dc2e
cmp ecx, 0xd
je 0x18004dc2e
cmp ecx, dword [r8]
jge 0x18004dc1d
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004dc23
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm6, xmm0
cmp rdx, rbx
jb 0x18004dbf0
movss xmm0, dword [r14 + 0x19a8]
maxss xmm6, xmm2
movd xmm7, edi
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm0
mov edi, dword [rsp + 0x64]
test dil, dil
je 0x18004dc6f
movd xmm3, r11d
cvtdq2ps xmm3, xmm3
movss dword [rsp + 0x6c], xmm9
mulss xmm3, xmm0
movss dword [rbp + 0x198], xmm3
movzx r8d, byte [rbp + 0x168]
test r8b, r8b
je 0x18004dd4b
cmp byte [r13 + 0xe74], 0
je 0x18004dd4b
test dword [rbp + 0x188], 0x1000
jne 0x18004dcf2
movss xmm2, dword [r13 + 0x48]
movaps xmm1, xmm9
comiss xmm11, xmm2
mulss xmm1, dword [0x180065980]
movaps xmm0, xmm11
jae 0x18004dcd1
subss xmm0, xmm1
maxss xmm0, xmm5
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r13 + 0x48], xmm0
jmp 0x18004dcf9
subss xmm0, xmm9
comiss xmm0, xmm2
jb 0x18004dcf9
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r13 + 0x48], xmm0
jmp 0x18004dcf9
xor r9d, r9d
mov dword [r13 + 0x48], r9d
test dil, dil
je 0x18004dd43
mov rax, qword [rbp - 0x48]
movaps xmm0, xmm12
subss xmm0, dword [r14 + 0x19a8]
movss xmm1, dword [rax + 0x58]
comiss xmm0, xmm1
jae 0x18004dd1f
maxss xmm0, xmm5
jmp 0x18004dd2c
movaps xmm0, xmm12
subss xmm0, dword [rbp - 8]
maxss xmm0, xmm1
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
addss xmm10, xmm1
movss dword [rbp + 0x190], xmm10
mov byte [r13 + 0xe74], 0
movss xmm10, dword [r13 + 0x48]
test r15b, r15b
je 0x18004e127
mov edx, dword [r13 + 0x54]
mov eax, edx
mov ecx, dword [r13 + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rdi, [rsi + rax*2]
test r8b, r8b
je 0x18004dd84
movaps xmm1, xmm8
jmp 0x18004dd8c
movss xmm1, dword [0x1800659bc]
mov ecx, 0x33
call fcn.180024ca0
cmp byte [rsp + 0x64], 0
mov esi, eax
xorps xmm5, xmm5
je 0x18004ddac
xorps xmm8, xmm8
xorps xmm9, xmm9
jmp 0x18004ddbe
movss xmm8, dword [0x180065bdc]
movss xmm9, dword [0x180065a3c]
mov r15, qword [rbp - 0x48]
movaps xmm4, xmm15
addss xmm4, xmm6
movss xmm6, dword [rbp + 0x190]
addss xmm6, xmm7
movss xmm7, dword [0x1800659b0]
subss xmm4, xmm10
cmp rbx, rdi
jae 0x18004dfb7
movss xmm11, dword [rbp - 0x68]
movss xmm12, dword [rbp - 0x58]
jmp 0x18004de03
xorps xmm5, xmm5
movaps xmm0, xmm13
addss xmm0, dword [r14 + 0x19a8]
comiss xmm6, xmm0
ja 0x18004df9f
comiss xmm6, dword [rbp - 0x5c]
jae 0x18004de4b
cmp rbx, rdi
jae 0x18004df84
nop dword [rax + rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004df84
cmp rbx, rdi
jb 0x18004de30
jmp 0x18004df84
mov rax, qword [0x180089a48]
xorps xmm3, xmm3
xorps xmm2, xmm2
mov rdx, qword [rax + 0x19a0]
movss xmm1, dword [rax + 0x19a8]
divss xmm1, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x18004deaf
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004dea5
cmp ecx, 0xd
je 0x18004de9e
cmp ecx, dword [rdx]
jge 0x18004de91
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004de96
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rbx, rdi
jb 0x18004de71
jmp 0x18004deaf
movaps xmm3, xmm2
movaps xmm2, xmm5
maxss xmm3, xmm5
maxss xmm2, xmm3
comiss xmm2, xmm5
ja 0x18004dee6
mov rax, qword [r14 + 0x19a0]
cmp dword [rax], 0x20
jle 0x18004ded2
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004ded7
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm7
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm3, dword [rbp - 0x5c]
addss xmm2, xmm4
movss xmm5, dword [rbp - 0x40]
movaps xmm0, xmm8
subss xmm0, dword [r14 + 0x19a8]
maxss xmm5, xmm4
movaps xmm1, xmm9
addss xmm1, xmm6
movaps xmm4, xmm14
minss xmm4, xmm2
addss xmm0, xmm6
movss dword [rsp + 0x78], xmm5
movss dword [rbp - 0x80], xmm4
maxss xmm3, xmm0
movaps xmm0, xmm13
minss xmm0, xmm1
movss xmm1, dword [rbp - 0x5c]
movss dword [rsp + 0x7c], xmm3
comiss xmm1, xmm0
movss dword [rbp - 0x7c], xmm0
jae 0x18004df84
comiss xmm13, xmm3
jbe 0x18004df84
movss xmm0, dword [rbp - 0x40]
comiss xmm0, xmm4
jae 0x18004df84
comiss xmm14, xmm5
jbe 0x18004df84
mov rcx, qword [r15 + 0x2b0]
lea r8, [rbp - 0x80]
xorps xmm0, xmm0
mov dword [rsp + 0x28], 0xf
mov r9d, esi
movss dword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x78]
call fcn.18003e4e0
movaps xmm4, xmm15
subss xmm4, xmm10
addss xmm6, dword [r14 + 0x19a8]
cmp rbx, rdi
jb 0x18004de00
movss dword [rbp - 0x58], xmm12
movss xmm12, dword [rbp - 0x70]
movss dword [rbp - 0x68], xmm11
movss xmm11, dword [rbp - 0x50]
mov edi, dword [rsp + 0x64]
mov rbx, qword [rbp + 0x170]
test dil, dil
jne 0x18004dfd9
mov rax, r12
sub rax, rbx
cmp rax, 0x200000
jge 0x18004e138
movss xmm13, dword [0x1800659f0]
xor ecx, ecx
movaps xmm1, xmm13
call fcn.180024ca0
mov r10, qword [r15 + 0x2b0]
lea r8, [rbp - 0x18]
movss xmm2, dword [r14 + 0x19a8]
test dil, dil
mov r11, qword [r14 + 0x19a0]
mov esi, 0
cmovne r8, rsi
movaps xmm3, xmm15
subss xmm3, xmm10
mov r9d, eax
mov rdx, r12
test eax, 0xff000000
je 0x18004e143
test r12, r12
jne 0x18004e04c
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp byte [rbx + rdx], sil
jne 0x18004e040
add rdx, rbx
cmp rbx, rdx
je 0x18004e143
test r11, r11
jne 0x18004e062
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm14, xmm14
ucomiss xmm2, xmm14
jne 0x18004e075
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm1, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rsp + 0x78], xmm1
test r8, r8
je 0x18004e0e3
movss xmm0, dword [r8]
comiss xmm1, xmm0
jae 0x18004e09f
movss dword [rsp + 0x78], xmm0
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rsp + 0x7c]
comiss xmm0, xmm1
jae 0x18004e0b6
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [r8 + 8]
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm1
jb 0x18004e0cb
movss dword [rbp - 0x80], xmm1
movss xmm1, dword [r8 + 0xc]
movss xmm0, dword [rbp - 0x7c]
comiss xmm0, xmm1
jb 0x18004e0e0
movss dword [rbp - 0x7c], xmm1
test r8, r8
movss xmm6, dword [rbp + 0x190]
setne al
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm14
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
unpcklps xmm3, xmm6
mov dword [rsp + 0x20], r9d
movq r9, xmm3
call fcn.180042610
jmp 0x18004e14f
movss xmm7, dword [0x1800659b0]
mov r15, qword [rbp - 0x48]
jmp 0x18004dfbb
movss xmm13, dword [0x1800659f0]
xor esi, esi
movss xmm6, dword [rbp + 0x190]
xorps xmm14, xmm14
cmp byte [rbp + 0x168], 0
je 0x18004e2b0
movss xmm0, dword [r14 + 0x18]
addss xmm0, dword [r13 + 0xe70]
movss dword [r13 + 0xe70], xmm0
cmp byte [r14 + 0xca], 0
je 0x18004e19e
comiss xmm0, xmm14
jbe 0x18004e19e
movss xmm1, dword [0x1800659f8]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm0, dword [0x1800659dc]
jbe 0x18004e19e
xor al, al
jmp 0x18004e1a0
mov al, 1
addss xmm15, xmm11
movss xmm11, dword [rbp - 0x5c]
addss xmm6, xmm12
subss xmm15, xmm10
movaps xmm0, xmm6
movaps xmm1, xmm6
subss xmm0, dword [r14 + 0x19a8]
subss xmm1, dword [0x180065a14]
movss dword [rsp + 0x78], xmm15
movaps xmm2, xmm15
addss xmm2, xmm13
addss xmm0, xmm7
movss dword [rbp - 0x7c], xmm1
movss dword [rbp - 0x80], xmm2
movss dword [rsp + 0x7c], xmm0
test al, al
je 0x18004e257
comiss xmm11, xmm1
jae 0x18004e257
movss xmm3, dword [rbp - 0x68]
comiss xmm3, xmm0
jbe 0x18004e257
movss xmm0, dword [rbp - 0x40]
comiss xmm0, xmm2
jae 0x18004e257
movss xmm0, dword [rbp - 0x58]
comiss xmm0, xmm15
jbe 0x18004e257
movss dword [rbp + 0x16c], xmm1
xor ecx, ecx
movaps xmm1, xmm13
movss dword [rbp + 0x168], xmm15
call fcn.180024ca0
mov rcx, qword [r15 + 0x2b0]
lea rdx, [rsp + 0x78]
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rbp + 0x168]
call fcn.18003e270
cmp byte [rsp + 0x68], 0
movss xmm3, dword [rbp + 0x198]
movss xmm10, dword [rbp + 0x190]
movss xmm4, dword [rsp + 0x6c]
movss xmm12, dword [0x180065bdc]
jne 0x18004e2e5
subss xmm6, dword [r14 + 0x19a8]
subss xmm15, xmm13
movss dword [r14 + 0x2fc4], xmm6
movss dword [r14 + 0x2fc0], xmm15
jmp 0x18004e2e5
movss xmm3, dword [rbp + 0x198]
movss xmm4, dword [rsp + 0x6c]
jmp 0x18004e2e1
movss xmm3, dword [rbp + 0x198]
movss xmm10, dword [rbp + 0x190]
movss xmm4, dword [rsp + 0x6c]
movss xmm11, dword [rbp - 0x5c]
movss xmm12, dword [0x180065bdc]
jmp 0x18004e2e5
movss xmm13, dword [0x1800659f0]
xorps xmm14, xmm14
movaps xmm15, xmmword [rsp + 0x170]
test dil, dil
je 0x18004e417
mov rcx, qword [0x180089a48]
addss xmm3, dword [r14 + 0x19a8]
movss dword [rbp + 0x168], xmm4
mov rax, qword [rcx + 0x1af0]
movss dword [rbp + 0x16c], xmm3
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1af0]
cmp byte [rax + 0x83], 0
jne 0x18004e40d
movss xmm8, dword [rax + 0xd0]
lea rcx, [rbp + 0x168]
movss xmm9, dword [rax + 0xd4]
movaps xmm7, xmm8
movaps xmm6, xmm9
addss xmm7, xmm4
movaps xmm1, xmm12
addss xmm6, xmm3
call fcn.180026700
mov r9, qword [0x180089a48]
movaps xmm0, xmm8
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm9
shufps xmm0, xmm0, 0xc6
mov r10, qword [r9 + 0x1af0]
movss xmm0, xmm7
shufps xmm0, xmm0, 0x27
movss xmm0, xmm6
shufps xmm0, xmm0, 0x39
movups xmmword [r10 + 0x11c], xmm0
mov qword [r10 + 0x114], 0
mov dword [r9 + 0x1bf8], esi
mov rax, qword [r9 + 0x1af0]
movups xmmword [rsp + 0x78], xmm0
comiss xmm6, dword [rax + 0x25c]
jbe 0x18004e3e6
comiss xmm9, dword [rax + 0x264]
jae 0x18004e3e6
comiss xmm7, dword [rax + 0x258]
jbe 0x18004e3e6
comiss xmm8, dword [rax + 0x260]
jb 0x18004e3f0
cmp byte [r9 + 0x3008], 0
je 0x18004e40d
mov r8b, 1
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x78]
call fcn.1800292b0
test al, al
je 0x18004e40d
or dword [r10 + 0x118], 1
call fcn.1800296a0
call fcn.18002f010
mov eax, dword [rbp - 0x74]
test al, al
je 0x18004e426
call fcn.18002e7b0
mov eax, dword [rbp - 0x74]
cmp byte [r14 + 0x3008], 0
je 0x18004e57c
test al, al
jne 0x18004e57c
mov rsi, qword [0x180089a48]
mov r14, qword [rsi + 0x1af0]
test r12, r12
jne 0x18004e480
mov r12, rbx
cmp rbx, 0xffffffffffffffff
jae 0x18004e480
nop dword [rax + rax]
movzx ecx, byte [r12]
test cl, cl
je 0x18004e480
lea rax, [r12 + 1]
cmp cl, 0x23
jne 0x18004e477
cmp byte [rax], cl
je 0x18004e480
mov r12, rax
cmp rax, 0xffffffffffffffff
jb 0x18004e460
movss xmm0, dword [rsi + 0x3028]
addss xmm0, xmm13
movss dword [rsi + 0x3028], xmm10
comiss xmm10, xmm0
jbe 0x18004e4a8
mov r15b, 1
mov byte [rsi + 0x302c], r15b
jmp 0x18004e4ab
xor r15b, r15b
mov ecx, dword [rsi + 0x3030]
mov eax, dword [r14 + 0x180]
cmp ecx, eax
jle 0x18004e4c4
mov dword [rsi + 0x3030], eax
mov ecx, eax
mov r14d, dword [r14 + 0x180]
sub r14d, ecx
nop
mov r8, r12
mov edx, 0xa
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov rdi, r12
cmovne rdi, rax
cmp rdi, r12
jne 0x18004e4f7
cmp rbx, rdi
je 0x18004e566
mov r9d, edi
sub r9d, ebx
test r15b, r15b
jne 0x18004e531
cmp rbx, qword [rbp + 0x170]
jne 0x18004e531
cmp byte [rsi + 0x302c], r15b
je 0x18004e51d
lea rcx, str._s_.s
jmp 0x18004e538
mov r8, rbx
lea rcx, str.__.s
mov edx, r9d
call fcn.1800340f0
jmp 0x18004e551
lea rcx, str._r_n_s_.s
lea r8, [0x18005e7dd]
mov qword [rsp + 0x20], rbx
lea edx, [r14*4]
call fcn.1800340f0
mov byte [rsi + 0x302c], 0
cmp rdi, r12
je 0x18004e577
lea rbx, [rdi + 1]
jmp 0x18004e4d0
test r15b, r15b
je 0x18004e577
lea rcx, [0x1800609a0]
call fcn.1800340f0
mov r14, qword [rsp + 0x70]
movss xmm0, dword [rbp - 0x3c]
movaps xmm13, xmmword [rsp + 0x190]
mov r12, qword [rsp + 0x218]
comiss xmm0, xmm14
movaps xmm14, xmmword [rsp + 0x180]
jbe 0x18004e5d3
movss xmm0, dword [rbp - 0x38]
mov r9b, 1
addss xmm0, dword [r14 + 0x15a8]
addss xmm11, dword [r14 + 0x1594]
mov rdx, qword [rbp + 0x160]
xor r8d, r8d
unpcklps xmm0, xmm11
movq rcx, xmm0
call fcn.180024e60
movzx edx, byte [rbp - 0x77]
mov ecx, dword [rbp + 0x188]
test dl, dl
je 0x18004e605
bt ecx, 0x15
jb 0x18004e605
mov rax, qword [0x180089a48]
mov word [rax + 0x1b47], 0x101
mov rax, qword [rax + 0x1af0]
or dword [rax + 0x118], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x50]
cmovne eax, ecx
jmp 0x18004b551