Function at 0x180037d90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x210
mov rbx, qword [0x18016d238]
mov r15, rcx
movaps xmmword [rax - 0x58], xmm6
mov r13, rbx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
mov rax, qword [rbx + 0x1af0]
mov qword [rsp + 0x60], rbx
mov byte [rax + 0x80], 1
mov rdi, qword [rbx + 0x1af0]
cmp byte [rdi + 0x83], 0
jne 0x18003807a
mov ecx, dword [rbp + 0x178]
mov eax, ecx
shr eax, 0xe
mov esi, ecx
and al, 1
shr esi, 0x14
mov dword [rsp + 0x54], eax
and sil, 1
mov eax, ecx
mov dword [rsp + 0x5c], ecx
shr eax, 0xf
and al, 1
mov dword [rsp + 0x58], esi
mov dword [rbp - 0x68], eax
mov eax, ecx
shr eax, 0x10
not al
and al, 1
mov dword [rsp + 0x70], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rsp + 0x7c], eax
test sil, sil
je 0x180037e79
call fcn.18001e440
mov rbx, qword [0x18016d238]
movsxd rcx, dword [rdi + 0xc0]
xor edx, edx
mov rax, qword [rdi + 0xc8]
mov r8d, dword [rax + rcx*4 - 4]
mov rcx, r15
call fcn.180013510
mov r14d, eax
mov dword [rsp + 0x68], eax
cmp dword [rbx + 0x1b38], eax
jne 0x180037eab
mov dword [rbx + 0x1b3c], eax
cmp dword [rbx + 0x1b78], r14d
jne 0x180037ebb
mov byte [rbx + 0x1b7c], 1
mov rcx, r15
cmp r15, 0xffffffffffffffff
jae 0x180037edd
movzx eax, byte [rcx]
test al, al
je 0x180037edd
cmp al, 0x23
jne 0x180037ed4
cmp byte [rcx + 1], al
je 0x180037edd
inc rcx
cmp rcx, 0xffffffffffffffff
jb 0x180037ec4
movss xmm0, dword [rbx + 0x19a8]
xorps xmm11, xmm11
movss xmm14, dword [0x18004b6e0]
cmp r15, rcx
jne 0x180037efd
xorps xmm13, xmm13
jmp 0x180037f49
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 0x158]
mov rcx, qword [rbx + 0x19a0]
movaps xmm2, xmm0
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm14
call fcn.180030820
movss xmm0, dword [rbp + 0x158]
addss xmm0, dword [0x18004b57c]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x15c]
movd xmm13, eax
cvtdq2ps xmm13, xmm13
movss dword [rbp - 0x3c], xmm13
test sil, sil
je 0x180037f65
movss xmm0, dword [r13 + 0x19a8]
mulss xmm0, dword [0x18004b5f4]
movss xmm6, dword [r13 + 0x1594]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18001dc50
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0x158]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18001dcc0
comiss xmm13, xmm11
jbe 0x180037fac
movaps xmm2, xmm13
addss xmm2, dword [r13 + 0x15a8]
jmp 0x180037faf
xorps xmm2, xmm2
movss xmm4, dword [rdi + 0xd4]
movss xmm3, dword [rdi + 0xd0]
movaps xmm0, xmm4
movss xmm10, dword [rbp + 0x15c]
movaps xmm1, xmm3
movss xmm7, dword [rbp + 0x158]
addss xmm0, xmm10
movss dword [rbp - 0x78], xmm3
addss xmm2, xmm7
movss dword [rbp - 0x74], xmm4
addss xmm1, xmm7
movss dword [rbp - 0x50], xmm3
movss dword [rbp - 0x4c], xmm4
movss dword [rbp - 0x6c], xmm0
movaps xmm0, xmm4
mov qword [rbp - 0x60], rdi
addss xmm0, xmm10
movss dword [rbp - 0x70], xmm1
addss xmm2, xmm3
movss dword [rbp - 0x44], xmm0
movss dword [rbp - 0x48], xmm2
test sil, sil
je 0x1800381d2
lea r8, [rbp - 0x78]
mov edx, r14d
lea rcx, [rbp - 0x50]
call fcn.180015b70
test al, al
jne 0x1800380c0
movss xmm1, dword [rbp - 0x44]
lea rcx, [rbp + 0x158]
subss xmm1, dword [rbp - 0x4c]
movss xmm0, dword [rbp - 0x48]
subss xmm0, dword [rbp - 0x50]
movss dword [rbp + 0x15c], xmm1
movss xmm1, dword [r13 + 0x1594]
movss dword [rbp + 0x158], xmm0
call fcn.180015a60
call fcn.18001e560
xor al, al
lea r11, [rsp + 0x210]
movaps xmm6, xmmword [r11 - 0x20]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x60]
movaps xmm11, xmmword [r11 - 0x70]
movaps xmm12, xmmword [r11 - 0x80]
movaps xmm13, xmmword [r11 - 0x90]
movaps xmm14, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [r13 + 0x170c]
mov ecx, 3
call fcn.18001deb0
movss xmm1, dword [r13 + 0x1598]
mov ecx, 6
call fcn.18001df10
movss xmm1, dword [r13 + 0x159c]
mov ecx, 7
call fcn.18001df10
lea rdx, [r13 + 0x1590]
call fcn.18001df90
movss xmm8, dword [rbp - 0x70]
lea r8, [rbp + 0x158]
movss xmm6, dword [rbp - 0x78]
movaps xmm0, xmm8
movss xmm1, dword [rbp - 0x6c]
subss xmm0, xmm6
movss xmm12, dword [rbp - 0x74]
mov edx, r14d
subss xmm1, xmm12
movss dword [rbp - 0x1c], xmm8
mov rcx, r15
movss dword [rbp - 0x20], xmm6
movss dword [rsp + 0x78], xmm12
movss dword [rbp + 0x158], xmm0
mov dword [rsp + 0x20], 0x10004
movss dword [rbp + 0x15c], xmm1
call fcn.180018b70
mov ecx, 3
movzx ebx, al
call fcn.18001dff0
mov r9, qword [0x18016d238]
movsxd rcx, dword [r9 + 0x1c10]
mov rdx, qword [r9 + 0x1c18]
lea r8, [rcx + rcx*4]
movsxd rcx, dword [rdx + r8*4 - 0x14]
movups xmm0, xmmword [rdx + r8*4 - 0x10]
add rcx, rcx
movups xmmword [r9 + rcx*8 + 0x160c], xmm0
dec dword [r9 + 0x1c10]
test bl, bl
jne 0x1800381b4
call fcn.180018df0
jmp 0x180038075
mov rbx, qword [r13 + 0x1af0]
mov qword [rbp - 0x60], rbx
mov eax, dword [rbx + 0x140]
or dword [rbx + 0x148], eax
subss xmm7, dword [rbx + 0x74]
jmp 0x180038232
subss xmm2, xmm3
movaps xmm1, xmm6
subss xmm0, xmm4
lea rcx, [rbp + 0x158]
movss dword [rbp + 0x158], xmm2
movss dword [rbp + 0x15c], xmm0
call fcn.180015a60
lea r8, [rbp - 0x78]
mov edx, r14d
lea rcx, [rbp - 0x50]
call fcn.180015b70
test al, al
je 0x18003807a
movss xmm0, dword [rbp - 0x70]
movss xmm12, dword [rbp - 0x74]
movss xmm6, dword [rbp - 0x78]
movss dword [rbp - 0x1c], xmm0
movss dword [rsp + 0x78], xmm12
movss dword [rbp - 0x20], xmm6
mov edx, r14d
mov qword [rsp + 0x208], r12
lea rcx, [rbp - 0x78]
call fcn.180015d90
movzx esi, al
mov byte [rsp + 0x51], al
mov eax, 1
test sil, sil
je 0x18003825e
mov dword [r13 + 0x1f78], eax
xor eax, eax
lea r15, [r13 + 0x2070]
cmp dword [r15], r14d
mov rbx, r15
mov edx, r14d
mov rcx, rdi
cmovne rbx, rax
mov qword [rbp - 0x58], rbx
call fcn.180015ef0
movzx r14d, al
test al, al
je 0x1800382a5
cmp qword [r13 + 0x1da0], rdi
jne 0x1800382a5
mov ecx, dword [rdi + 0x1b0]
cmp dword [r13 + 0x1db0], ecx
jne 0x1800382a5
mov r12b, 1
jmp 0x1800382b4
xor r12b, r12b
mov byte [rbp + 0x168], 1
test r14b, r14b
jne 0x1800382bb
mov byte [rbp + 0x168], 0
test sil, sil
je 0x1800382cf
cmp byte [r13 + 0x420], 0
je 0x1800382cf
mov r13b, 1
jmp 0x1800382d2
xor r13b, r13b
mov rax, qword [rsp + 0x60]
mov ecx, dword [rsp + 0x68]
mov byte [rbp + 0x188], r13b
mov esi, dword [rax + 0x1b38]
cmp esi, ecx
je 0x18003830e
cmp dword [rax + 0x1c7c], ecx
je 0x180038305
cmp dword [rax + 0x1c70], ecx
jne 0x18003830e
cmp dword [rax + 0x1c90], 3
jne 0x18003830e
mov byte [rbp + 0x158], 1
jmp 0x180038315
mov byte [rbp + 0x158], 0
mov eax, dword [rsp + 0x58]
test al, al
je 0x180038360
test rbx, rbx
je 0x180038360
test esi, esi
jne 0x180038360
mov rax, qword [rbp - 0x60]
xor edx, edx
movsxd rcx, dword [rax + 0xc0]
mov rax, qword [rax + 0xc8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, str.SCROLLY
call fcn.180013510
mov rcx, qword [rsp + 0x60]
cmp dword [rcx + 0x1b78], eax
jne 0x18003835c
mov bl, 1
jmp 0x18003836d
mov eax, dword [rsp + 0x58]
xor bl, bl
test al, al
je 0x18003839a
cmp qword [rbp - 0x58], 0
je 0x18003839a
mov rax, qword [rbp - 0x60]
lea rcx, str.SCROLLY
movsxd rdx, dword [rax + 0xc0]
mov rax, qword [rax + 0xc8]
mov r8d, dword [rax + rdx*4 - 4]
xor edx, edx
call fcn.180013510
cmp esi, eax
jne 0x18003839a
mov al, 1
jmp 0x18003839c
xor al, al
mov r11d, dword [rsp + 0x68]
movzx ecx, byte [rbp + 0x158]
mov byte [rsp + 0x50], al
mov byte [rbp + 0x180], 0
cmp esi, r11d
je 0x1800383ce
test byte [rsp + 0x5c], 0x10
jne 0x1800383c3
test cl, cl
je 0x1800383ce
cmp byte [rsp + 0x58], 0
mov byte [rbp - 0x80], 1
je 0x1800383d2
mov byte [rbp - 0x80], 0
test r14b, r14b
jne 0x1800383f5
test r13b, r13b
jne 0x1800383f5
test bl, bl
jne 0x1800383f5
test cl, cl
jne 0x1800383f5
test al, al
jne 0x1800383f8
mov r15, qword [rbp - 0x58]
mov ebx, dword [rsp + 0x58]
jmp 0x180038582
mov r14b, 1
mov rax, qword [rbp - 0x58]
mov r13b, 1
mov qword [rbp - 0x58], rax
cmp esi, r11d
je 0x180038574
mov rsi, qword [rbp + 0x160]
mov rax, 0xffffffffffffffff
mov qword [rbp - 0x58], r15
mov dword [r15 + 0xe70], 0xbe99999a
nop dword [rax]
cmp byte [rsi + rax + 1], 0
lea rax, [rax + 1]
jne 0x180038430
lea ebx, [rax + 1]
mov edx, ebx
lea rcx, [r15 + 0x30]
call fcn.1800240c0
mov rcx, qword [r15 + 0x38]
mov rdx, rsi
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
xor ebx, ebx
lea rcx, [r15 + 0x10]
mov qword [rbp - 0x50], rbx
lea edx, [rbx + 0x21]
call fcn.1800241a0
lea rcx, [r15 + 0x20]
xor edx, edx
call fcn.1800240c0
mov rcx, qword [r15 + 0x18]
lea rax, [rbp - 0x50]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov r8, rsi
mov byte [r15 + 0x40], bl
lea edx, [rbx + 0x20]
call fcn.180013a10
mov ecx, dword [rbp - 0x50]
mov r9d, eax
sub ecx, esi
mov dword [r15 + 4], eax
mov eax, dword [rsp + 0x68]
mov dword [r15 + 8], ecx
cmp dword [r15], eax
jne 0x1800384e0
cmp dword [r15 + 0x4c], r9d
mov edx, r9d
mov ebx, dword [rsp + 0x58]
mov ecx, r9d
cmovl edx, dword [r15 + 0x4c]
cmp dword [r15 + 0x50], r9d
mov dword [r15 + 0x4c], edx
cmovl ecx, dword [r15 + 0x50]
cmp dword [r15 + 0x54], r9d
mov dword [r15 + 0x50], ecx
cmovl r9d, dword [r15 + 0x54]
mov dword [r15 + 0x54], r9d
jmp 0x18003853a
mov dword [r15], eax
mov qword [r15 + 0x48], rbx
mov dword [r15 + 0xe68], ebx
mov qword [r15 + 0x50], rbx
mov dword [r15 + 0x60], ebx
mov ebx, dword [rsp + 0x58]
movzx eax, bl
xor al, r13b
mov dword [r15 + 0xe62], 0x630000
mov dword [r15 + 0xe6c], 0x3e7
mov dword [r15 + 0x58], 0x10000
mov byte [r15 + 0x5c], al
test bl, bl
jne 0x18003853a
mov ecx, dword [rbp - 0x80]
test r12b, r12b
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rbp - 0x80], ecx
test dword [rsp + 0x5c], 0x2000
je 0x180038548
mov byte [r15 + 0x58], r13b
test bl, bl
jne 0x18003857d
cmp byte [rbp + 0x168], bl
jne 0x180038569
cmp byte [rbp + 0x188], bl
je 0x18003857d
mov rax, qword [rsp + 0x60]
cmp byte [rax + 0x148], bl
je 0x18003857d
mov r11d, dword [rsp + 0x68]
movzx esi, r13b
jmp 0x180038585
mov ebx, dword [rsp + 0x58]
mov r15, rax
jmp 0x180038582
mov r11d, dword [rsp + 0x68]
mov esi, dword [rbp - 0x80]
mov r12, qword [rsp + 0x60]
cmp dword [r12 + 0x1b38], r11d
je 0x180038626
test r14b, r14b
je 0x180038626
mov rdx, rdi
mov ecx, r11d
call fcn.180015930
call fcn.18001f950
mov rcx, rdi
call fcn.18001d9a0
mov eax, dword [r12 + 0x1b4c]
mov ecx, dword [rsp + 0x5c]
or eax, 3
mov dword [r12 + 0x1b4c], eax
test bl, bl
jne 0x1800385d8
test cl, cl
jns 0x1800385e3
or eax, 0xc
mov dword [r12 + 0x1b4c], eax
mov rax, qword [r12 + 0x1b58]
or dword [r12 + 0x1b50], 2
or rax, 0x180
mov qword [r12 + 0x1b58], rax
test bl, bl
je 0x180038612
or rax, 0x60
mov qword [r12 + 0x1b58], rax
test ecx, 0x440
je 0x180038626
or rax, 1
mov qword [r12 + 0x1b58], rax
mov eax, dword [r12 + 0x1b38]
mov edi, dword [rsp + 0x68]
cmp eax, edi
jne 0x18003866d
test r15, r15
jne 0x18003864c
call fcn.180015a00
mov eax, dword [r12 + 0x1b38]
cmp eax, edi
jne 0x18003866d
cmp byte [r12 + 0x420], 0
je 0x180038679
test r13b, r13b
jne 0x180038679
test r14b, r14b
jne 0x180038679
mov byte [rbp + 0x180], 1
mov r14b, 1
jmp 0x180038681
test r15, r15
je 0x18003867e
cmp byte [rsp + 0x50], 0
je 0x18003867e
mov r14b, 1
jmp 0x180038681
xor r14b, r14b
mov byte [rbp + 0x188], r14b
test r15, r15
je 0x1800386a1
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x1800386a1
test r14b, r14b
je 0x1800386a1
mov r13b, 1
jmp 0x1800386a4
xor r13b, r13b
mov eax, dword [rsp + 0x54]
mov byte [rbp + 0x168], r13b
mov byte [rsp + 0x75], 0
mov byte [rsp + 0x50], 0
test al, al
je 0x180038766
test r15, r15
je 0x180038766
test r14b, r14b
jne 0x1800386d8
test r13b, r13b
je 0x180038770
mov edx, 0x21
mov qword [rbp - 0x50], 0
lea rcx, [r15 + 0x10]
call fcn.1800241a0
mov rdi, qword [rbp + 0x160]
lea rax, [rbp - 0x50]
mov edx, dword [r15 + 0x10]
mov r8, rdi
mov rcx, qword [r15 + 0x18]
xor r9d, r9d
mov qword [rsp + 0x20], rax
call fcn.180013a10
mov ecx, dword [rbp - 0x50]
mov edx, eax
sub ecx, edi
mov dword [r15 + 4], eax
cmp dword [r15 + 0x4c], eax
mov r9d, eax
mov dword [r15 + 8], ecx
cmovl edx, dword [r15 + 0x4c]
cmp dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], edx
mov edx, eax
cmovl edx, dword [r15 + 0x50]
cmp dword [r15 + 0x54], eax
movzx eax, r13b
cmovl r9d, dword [r15 + 0x54]
xor ecx, ecx
cmp edx, r9d
mov dword [r15 + 0x50], edx
mov dword [r15 + 0x54], r9d
cmovne ecx, eax
mov eax, dword [rsp + 0x54]
movzx r13d, cl
mov byte [rbp + 0x168], cl
test r14b, r14b
jne 0x180038781
test r13b, r13b
jne 0x180038781
mov r14d, dword [rsp + 0x68]
cmp dword [r12 + 0x1b38], r14d
jne 0x18003879a
jmp 0x180038786
mov r14d, dword [rsp + 0x68]
test al, al
jne 0x18003879a
test r15, r15
je 0x18003879a
mov byte [rsp + 0x74], 1
cmp byte [r15 + 0x40], al
jne 0x18003879f
mov byte [rsp + 0x74], 0
cmp byte [rbp - 0x68], 0
je 0x180038884
mov rdx, qword [r12 + 0x19a0]
cmp dword [rdx + 0x18], 0x2a
jg 0x1800387bd
mov r8, qword [rdx + 0x38]
jmp 0x1800387e1
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x1800387d5
mov r8, qword [rdx + 0x38]
jmp 0x1800387e1
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rdi, [r12 + 0x2f00]
mov rbx, qword [0x18016d238]
mov dword [rdi + 0x14], eax
mov rax, qword [r12 + 0x19a0]
mov qword [rbp - 0x50], rdi
mov ecx, dword [rax + 0x60]
mov dword [rdi + 0x60], ecx
mov rax, qword [r12 + 0x19a0]
movsd xmm0, qword [rax + 0x40]
movsd qword [rdi + 0x40], xmm0
mov rax, qword [r12 + 0x19a0]
mov ecx, dword [rax + 0x64]
mov dword [rdi + 0x64], ecx
mov rax, qword [r12 + 0x19a0]
mov ecx, dword [rax + 0x68]
mov dword [rdi + 0x68], ecx
mov rax, qword [r12 + 0x19a0]
mov rcx, qword [rax + 0x48]
mov qword [rdi + 0x48], rcx
mov rcx, rdi
mov qword [rdi + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rdi + 0x10], eax
call fcn.18001dda0
lea rdx, [rbp - 0x50]
lea rcx, [rbx + 0x1c30]
call fcn.180023da0
mov rdx, qword [rdi + 0x48]
mov rcx, qword [rbx + 0x1af0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x2b0]
call fcn.18002b300
movss xmm0, dword [0x18004b54c]
xor r10d, r10d
mov r8d, 0x20000c
mov dword [rbp - 0x40], r10d
cmp dword [r12 + 0x1b38], r14d
jne 0x180038c95
mov eax, dword [r15 + 8]
mov r9d, dword [rsp + 0x5c]
mov dword [r15 + 0xe78], r9d
mov dword [r15 + 0x44], 0x20
mov qword [r15 + 0xe80], r10
mov qword [r15 + 0xe88], r10
movzx ecx, byte [r12 + 0x138]
test cl, cl
mov dword [rbp - 0x40], eax
sete al
mov byte [r12 + 0x1b45], al
mov eax, 1
mov dword [r12 + 0x3234], eax
movss xmm5, dword [r12 + 0x130]
subss xmm5, xmm6
subss xmm5, dword [r12 + 0x1590]
addss xmm5, dword [r15 + 0x48]
cmp byte [rsp + 0x58], r10b
je 0x18003893a
mov rax, qword [rbp - 0x60]
movss xmm2, dword [r12 + 0x134]
subss xmm2, dword [rax + 0xd4]
subss xmm2, dword [r12 + 0x1594]
jmp 0x180038948
movss xmm2, dword [r12 + 0x19a8]
mulss xmm2, xmm0
movzx edi, byte [r12 + 0xc9]
test sil, sil
jne 0x180038abb
movzx edx, byte [rsp + 0x51]
test dl, dl
je 0x180038979
movzx eax, byte [r12 + 0x425]
test dil, dil
jne 0x1800389ea
test al, al
jne 0x180038abb
movzx eax, byte [r15 + 0xe75]
cmp byte [r12 + 0x420], r10b
je 0x180038a3c
test al, al
jne 0x180038a3c
test dl, dl
je 0x180038ad7
cmp byte [r15 + 0x5c], r10b
je 0x1800389b9
xor r8d, r8d
lea rcx, [rbp - 0x38]
mov rdx, r15
call fcn.1800362a0
movss xmm2, dword [rbp - 0x2c]
movaps xmm1, xmm5
mov rcx, r15
call fcn.1800367a0
mov r9d, dword [rsp + 0x5c]
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x54], eax
mov byte [r15 + 0x5b], 0
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x180038ad7
test al, al
je 0x180038979
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180036cb0
mov r8d, 0x60000d
mov byte [r15 + 0xe74], 1
lea rdx, [r15 + 0x4c]
mov dword [r15 + 0xe70], 0xbe99999a
mov rcx, r15
call fcn.180036cb0
mov r9d, dword [rsp + 0x5c]
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x180038ad7
test cl, cl
je 0x180038ad7
test al, al
jne 0x180038ad7
ucomiss xmm11, dword [r12 + 0x3c0]
jne 0x180038a62
ucomiss xmm11, dword [r12 + 0x3c4]
je 0x180038ad7
cmp byte [r15 + 0x5c], r10b
je 0x180038a7c
xor r8d, r8d
lea rcx, [rbp - 0x38]
mov rdx, r15
call fcn.1800362a0
movss xmm2, dword [rbp - 0x2c]
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x180038a8e
mov eax, dword [r15 + 0x4c]
mov dword [r15 + 0x50], eax
movaps xmm1, xmm5
mov rcx, r15
call fcn.1800367a0
mov r9d, dword [rsp + 0x5c]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0xe70], 0xbe99999a
mov byte [r15 + 0xe74], 1
jmp 0x180038ad7
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0x50], r10d
mov byte [r15 + 0x5b], r10b
mov byte [r15 + 0xe75], 1
cmp byte [r15 + 0xe75], 0
je 0x180038af4
cmp byte [r12 + 0x138], 0
jne 0x180038af4
mov byte [r15 + 0xe75], 0
cmp byte [r12 + 0x148], 0
je 0x180038b0a
cmp byte [r12 + 0x14a], 0
je 0x180038b1a
test dil, dil
je 0x180038b1e
cmp byte [r12 + 0x14b], 0
je 0x180038b1e
mov bl, 1
jmp 0x180038b20
xor bl, bl
bt r9d, 0xa
jae 0x180038bcc
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x180038bcc
mov dl, 1
call fcn.180018ad0
test al, al
mov eax, dword [rsp + 0x54]
je 0x180038bd0
test bl, bl
jne 0x180038bd0
cmp byte [r12 + 0x149], bl
jne 0x180038bd0
test al, al
jne 0x180038bd0
mov rcx, qword [r12 + 0x1550]
movsxd rax, dword [r12 + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x180038b92
nop
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x180038bcc
cmp rcx, rdx
jb 0x180038b80
mov edx, r9d
mov dword [rbp - 0x80], 9
lea rcx, [rbp - 0x80]
call fcn.180037c30
test al, al
je 0x180038bcc
mov r8d, dword [rbp - 0x80]
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180036cb0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
mov eax, dword [rsp + 0x54]
cmp dword [r12 + 0x1548], 0
jle 0x180038c92
test bl, bl
jne 0x180038c83
test al, al
jne 0x180038c83
cmp byte [rbp + 0x158], al
jne 0x180038c83
mov r13d, dword [rsp + 0x5c]
xor eax, eax
mov edi, eax
mov ebx, eax
nop word [rax + rax]
mov rax, qword [r12 + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp + 0x158], ecx
cmp ecx, 9
jne 0x180038c32
cmp byte [r12 + 0x149], 0
jne 0x180038c6b
mov edx, r13d
lea rcx, [rbp + 0x158]
call fcn.180037c30
test al, al
je 0x180038c6b
mov r8d, dword [rbp + 0x158]
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180036cb0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
inc edi
add rbx, 2
cmp edi, dword [r12 + 0x1548]
jl 0x180038c10
movzx r13d, byte [rbp + 0x168]
xor edx, edx
lea rcx, [r12 + 0x1548]
call fcn.1800241a0
xor r10d, r10d
mov eax, dword [r12 + 0x1b38]
xor cl, cl
cmp eax, r14d
jne 0x180039eba
cmp byte [r12 + 0x1b44], cl
jne 0x1800398d3
cmp byte [rbp + 0x180], cl
jne 0x1800398d3
movzx edx, byte [r12 + 0x149]
movzx r8d, byte [r12 + 0xc9]
movzx eax, dl
movzx r13d, byte [r12 + 0x148]
neg al
sbb edi, edi
and edi, 0x400000
test r8b, r8b
je 0x180038d12
cmp byte [r12 + 0x14b], cl
je 0x180038d05
test r13b, r13b
jne 0x180038d05
mov eax, 1
jmp 0x180038d0c
mov eax, r10d
movzx ecx, r13b
test eax, eax
je 0x180038d3d
jmp 0x180038d25
test r13b, r13b
je 0x180038d39
cmp byte [r12 + 0x14b], cl
jne 0x180038d39
movzx ecx, r13b
cmp byte [r12 + 0x14a], 0
jne 0x180038d3d
test dl, dl
jne 0x180038d3d
mov r11b, 1
jmp 0x180038d40
movzx ecx, r13b
xor r11b, r11b
mov byte [rsp + 0x6c], r11b
movzx eax, cl
test r8b, r8b
je 0x180038d74
cmp byte [r12 + 0x14b], 0
je 0x180038d74
test dl, dl
je 0x180038d74
movzx eax, r13b
test r13b, r13b
jne 0x180038d74
cmp byte [r12 + 0x14a], al
jne 0x180038d74
mov sil, 1
jmp 0x180038d7c
xor sil, sil
test r8b, r8b
je 0x180038dc8
cmp byte [r12 + 0x14b], 0
movzx ecx, byte [r12 + 0x14a]
mov byte [rbp + 0x158], cl
je 0x180038dce
test al, al
jne 0x180038dce
test cl, cl
jne 0x180038dce
mov r12b, 1
mov rcx, qword [rsp + 0x60]
xor r9b, r9b
test dl, dl
je 0x180038df3
test al, al
jne 0x180038df3
cmp byte [rcx + 0x14a], r9b
jne 0x180038df3
cmp byte [rcx + 0x14b], r9b
jne 0x180038df3
mov r10b, 1
jmp 0x180038df6
mov byte [rbp + 0x158], al
xor r12d, r12d
test al, al
je 0x180038da1
mov rcx, qword [rsp + 0x60]
test dl, dl
jne 0x180038da6
cmp byte [rcx + 0x14a], r12b
jne 0x180038da6
cmp byte [rcx + 0x14b], r12b
jne 0x180038da6
mov r9b, 1
xor r10b, r10b
test r11b, r11b
je 0x180038e17
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x180038e17
mov dl, 1
call fcn.180018ad0
test al, al
jne 0x180038e35
test r10b, r10b
je 0x180038e5e
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x180038e5e
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180038e5e
cmp byte [rsp + 0x54], 0
mov r14d, dword [rbp - 0x68]
mov ebx, dword [rsp + 0x58]
jne 0x180038e66
test r14b, r14b
jne 0x180038e66
test bl, bl
je 0x180038e57
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x180038e66
mov byte [rsp + 0x51], 1
jmp 0x180038e6b
mov ebx, dword [rsp + 0x58]
mov r14d, dword [rbp - 0x68]
mov byte [rsp + 0x51], 0
test r11b, r11b
je 0x180038e8c
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x180038e8c
mov dl, 1
call fcn.180018ad0
test al, al
jne 0x180038eaa
test r9b, r9b
je 0x180038ec2
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x180038ec2
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180038ec2
test r14b, r14b
jne 0x180038ec2
test bl, bl
je 0x180038ebd
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x180038ec2
mov r14b, 1
jmp 0x180038ec5
xor r14b, r14b
test r11b, r11b
je 0x180038ee6
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x180038ee6
mov dl, 1
call fcn.180018ad0
test al, al
jne 0x180038f04
test r10b, r10b
je 0x180038f12
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x180038f12
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180038f12
mov r10d, dword [rsp + 0x54]
test r10b, r10b
jne 0x180038f17
mov bl, 1
jmp 0x180038f19
mov r10d, dword [rsp + 0x54]
xor bl, bl
test r11b, r11b
je 0x180038f4f
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x180038f4f
mov dl, 1
call fcn.180018ad0
mov r9d, dword [rsp + 0x70]
test al, al
je 0x180038f54
test r10b, r10b
jne 0x180038f54
test r9b, r9b
je 0x180038f54
movzx r11d, dl
jmp 0x180038f5e
mov r9d, dword [rsp + 0x70]
xor r11b, r11b
cmp byte [rsp + 0x6c], r11b
je 0x180038f7a
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x180038f7a
mov dl, 1
call fcn.180018ad0
test al, al
jne 0x180038f9b
test sil, sil
je 0x180038faa
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x180038faa
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180038faa
test r10b, r10b
jne 0x180038faa
test r9b, r9b
je 0x180038faa
mov r10b, 1
jmp 0x180038fad
xor r10b, r10b
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x180038ffc
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180038ffc
test r12b, r12b
je 0x180038fd2
mov ecx, 0x200004
jmp 0x180038fe6
cmp byte [rbp + 0x158], 0
mov ecx, 0x200000
mov eax, 0x20000c
cmovne ecx, eax
or ecx, edi
lea rdx, [r15 + 0x4c]
mov r8d, ecx
mov rcx, r15
call fcn.180036cb0
jmp 0x180039878
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x18003905f
mov dl, 1
call fcn.180018ad0
test al, al
je 0x18003905f
test r12b, r12b
je 0x180039035
mov ecx, 0x200005
lea rdx, [r15 + 0x4c]
or edi, ecx
mov rcx, r15
mov r8d, edi
call fcn.180036cb0
jmp 0x180039878
cmp byte [rbp + 0x158], 0
lea rdx, [r15 + 0x4c]
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or edi, ecx
mov rcx, r15
mov r8d, edi
call fcn.180036cb0
jmp 0x180039878
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x1800390d4
mov dl, 1
call fcn.180018ad0
mov esi, dword [rsp + 0x58]
test al, al
je 0x1800390d8
test sil, sil
je 0x1800390d8
test r13b, r13b
je 0x1800390b4
mov rdx, qword [rbp - 0x60]
mov r12, qword [rsp + 0x60]
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [r12 + 0x19a8]
mov dword [rdx + 0x70], 0
maxss xmm0, xmm11
movss dword [rdx + 0x68], xmm0
jmp 0x180039890
movzx eax, r12b
lea rdx, [r15 + 0x4c]
mov rcx, r15
lea r8d, [rax*4 + 0x200002]
or r8d, edi
call fcn.180036cb0
jmp 0x180039878
mov esi, dword [rsp + 0x58]
mov r9, qword [0x18016d238]
mov ecx, dword [r9 + 0x4c]
test ecx, ecx
js 0x180039151
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180039151
test sil, sil
je 0x180039151
test r13b, r13b
je 0x180039131
mov rcx, qword [rbp - 0x60]
mov rax, qword [r9 + 0x1af0]
mov r12, qword [rsp + 0x60]
movss xmm0, dword [r12 + 0x19a8]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
mov dword [rcx + 0x70], 0
movss dword [rcx + 0x68], xmm0
jmp 0x180039890
movzx eax, r12b
lea rdx, [r15 + 0x4c]
mov rcx, r15
lea r8d, [rax*4 + 0x200003]
or r8d, edi
call fcn.180036cb0
jmp 0x180039878
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x180039192
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180039192
mov eax, edi
lea rdx, [r15 + 0x4c]
or eax, 0x200006
mov r8d, 0x200004
or r8d, edi
mov rcx, r15
test r13b, r13b
cmovne r8d, eax
call fcn.180036cb0
jmp 0x180039878
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x1800391d3
mov dl, 1
call fcn.180018ad0
test al, al
je 0x1800391d3
mov eax, edi
lea rdx, [r15 + 0x4c]
or eax, 0x200007
mov r8d, 0x200005
or r8d, edi
mov rcx, r15
test r13b, r13b
cmovne r8d, eax
call fcn.180036cb0
jmp 0x180039878
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x180039210
mov dl, 1
call fcn.180018ad0
mov r9d, dword [rsp + 0x54]
test al, al
je 0x180039215
test r9b, r9b
jne 0x180039215
or edi, 0x200008
lea rdx, [r15 + 0x4c]
mov r8d, edi
mov rcx, r15
call fcn.180036cb0
jmp 0x180039878
mov r9d, dword [rsp + 0x54]
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x1800392fb
mov dl, 1
call fcn.180018ad0
test al, al
je 0x1800392fb
test r9b, r9b
jne 0x1800392fb
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x180039277
cmp byte [rbp + 0x158], r9b
je 0x1800392a9
lea rdx, [r15 + 0x4c]
mov r8d, 0x60000c
mov rcx, r15
call fcn.180036cb0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
mov r12, qword [rsp + 0x60]
or edi, 0x200009
lea rdx, [r15 + 0x4c]
mov r8d, edi
mov rcx, r15
call fcn.180036cb0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x180039890
mov r12, qword [rsp + 0x60]
cmp byte [r12 + 0xc9], 0
je 0x18003927c
cmp byte [r12 + 0x14b], 0
je 0x18003927c
cmp byte [r12 + 0x14a], 0
jne 0x18003927c
test r13b, r13b
jne 0x18003927c
lea rdx, [r15 + 0x4c]
mov r8d, 0x600004
mov rcx, r15
call fcn.180036cb0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x18003927c
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x180039314
mov dl, 1
call fcn.180018ad0
test al, al
jne 0x18003932d
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x18003939d
mov dl, 1
call fcn.180018ad0
test al, al
je 0x18003939d
mov ecx, dword [rsp + 0x5c]
mov eax, ecx
shr eax, 0xb
and al, 1
test sil, sil
je 0x180039346
test al, al
je 0x180039357
test r13b, r13b
jne 0x18003935c
mov byte [rbp + 0x180], 1
mov byte [rsp + 0x50], 1
jmp 0x18003988b
test r13b, r13b
jne 0x180039346
test r9b, r9b
jne 0x18003988b
mov edx, ecx
mov dword [rbp + 0x158], 0xa
lea rcx, [rbp + 0x158]
call fcn.180037c30
test al, al
je 0x18003988b
mov r8d, dword [rbp + 0x158]
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180036cb0
jmp 0x180039878
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x1800393c9
mov dl, 1
call fcn.180018ad0
test al, al
je 0x1800393c9
mov r12, qword [rsp + 0x60]
movzx ecx, dl
mov byte [rbp + 0x180], dl
jmp 0x180039892
test r11b, r11b
jne 0x180039851
test r10b, r10b
jne 0x180039851
cmp byte [rsp + 0x6c], r10b
je 0x18003941f
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x18003941f
mov dl, 1
call fcn.180018ad0
test al, al
je 0x18003941f
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0x50], 0
mov byte [r15 + 0x5b], r10b
mov byte [r15 + 0xe74], dl
jmp 0x18003988b
movzx r12d, byte [rsp + 0x51]
test r12b, r12b
jne 0x18003965a
test r14b, r14b
jne 0x18003965a
test bl, bl
je 0x18003988b
mov rcx, qword [0x18016d238]
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x180039468
mov rcx, qword [rcx + 0x110]
call rax
mov rbx, rax
test rax, rax
jne 0x18003946f
jmp 0x18003988b
lea rbx, [0x18004ad35]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x180039476
mov rcx, qword [0x18016d238]
test rcx, rcx
je 0x180039491
inc dword [rcx + 0x3bc]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r13d, r13d
mov r14, rax
mov esi, r13d
cmp byte [rbx], r13b
je 0x18003950d
mov r15d, dword [rsp + 0x5c]
mov rdi, rax
nop word [rax + rax]
xor r8d, r8d
lea rcx, [rbp + 0x158]
mov rdx, rbx
call fcn.180013830
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp + 0x158], r13d
je 0x180039509
mov edx, r15d
lea rcx, [rbp + 0x158]
call fcn.180037c30
test al, al
je 0x180039504
movzx eax, word [rbp + 0x158]
inc esi
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r13b
jne 0x1800394c0
mov r15, qword [rbp - 0x58]
movsxd rax, esi
mov word [r14 + rax*2], r13w
test esi, esi
jle 0x180039635
mov r8d, dword [r15 + 0x54]
mov eax, dword [r15 + 0x50]
mov ecx, dword [r15 + 4]
cmp eax, r8d
je 0x180039557
mov edx, eax
cmp eax, ecx
jle 0x18003953a
mov dword [r15 + 0x50], ecx
mov edx, ecx
mov r9d, r8d
cmp r8d, ecx
jle 0x180039549
mov dword [r15 + 0x54], ecx
mov r9d, ecx
mov r8d, r9d
mov eax, edx
cmp edx, r9d
jne 0x180039557
mov dword [r15 + 0x4c], edx
mov edx, dword [r15 + 0x4c]
cmp edx, ecx
jle 0x180039565
mov dword [r15 + 0x4c], ecx
mov edx, ecx
cmp eax, r8d
je 0x180039599
mov r9d, eax
cmp eax, ecx
jle 0x180039578
mov dword [r15 + 0x50], ecx
mov r9d, ecx
mov r10d, r8d
cmp r8d, ecx
jle 0x180039587
mov dword [r15 + 0x54], ecx
mov r10d, ecx
mov r8d, r10d
mov eax, r9d
cmp r9d, r10d
jne 0x180039599
mov dword [r15 + 0x4c], r9d
mov edx, r9d
cmp edx, ecx
jle 0x1800395a3
mov dword [r15 + 0x4c], ecx
mov edx, ecx
cmp eax, r8d
je 0x1800395e6
lea rdx, [r15 + 0x4c]
mov rcx, r15
jge 0x1800395c9
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.180036b30
mov eax, dword [r15 + 0x50]
mov dword [r15 + 0x54], eax
jmp 0x1800395dc
sub eax, r8d
mov r9d, eax
call fcn.180036b30
mov eax, dword [r15 + 0x54]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], eax
mov edx, eax
mov byte [r15 + 0x5b], r13b
mov r9d, esi
mov r8, r14
mov rcx, r15
call fcn.1800365f0
test al, al
je 0x180039615
mov edx, dword [r15 + 0x4c]
lea rcx, [r15 + 0x64]
mov r9d, esi
xor r8d, r8d
call fcn.1800377a0
add dword [r15 + 0x4c], esi
mov byte [r15 + 0x5b], r13b
jmp 0x18003962d
movzx eax, word [r15 + 0xe62]
test ax, ax
je 0x18003962d
dec ax
mov word [r15 + 0xe62], ax
mov byte [r15 + 0xe74], 1
test r14, r14
je 0x18003964c
mov rax, qword [0x18016d238]
test rax, rax
je 0x18003964c
dec dword [rax + 0x3bc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18003988b
mov rax, qword [rsp + 0x60]
cmp qword [rax + 0x108], 0
je 0x18003978d
mov ecx, dword [r15 + 0x54]
mov eax, dword [r15 + 0x50]
cmp eax, ecx
je 0x180039686
mov edx, ecx
cmovl ecx, eax
cmovge edx, eax
xor r13d, r13d
jmp 0x180039690
mov edx, dword [r15 + 4]
xor r13d, r13d
mov ecx, r13d
mov rax, qword [r15 + 0x18]
mov ebx, 0x2400
movsxd rsi, edx
mov edi, 0x2800
movsxd r14, ecx
mov edx, r13d
mov r12d, 0x3ff
mov r10d, 0x80
mov r11d, 0x800
lea r9, [rax + rsi*2]
lea r8, [rax + r14*2]
test r9, r9
je 0x1800396cb
cmp r8, r9
jae 0x18003970e
movzx ecx, word [r8]
test cx, cx
je 0x18003970e
add r8, 2
cmp cx, r10w
jae 0x1800396e2
inc edx
jmp 0x1800396c1
cmp cx, r11w
jae 0x1800396f1
mov eax, 2
add edx, eax
jmp 0x1800396c1
lea eax, [rbx + rcx]
cmp ax, r12w
mov eax, r13d
jbe 0x18003970a
add cx, di
cmp cx, r12w
setbe al
add eax, 3
add edx, eax
jmp 0x1800396c1
mov rax, qword [0x18016d238]
lea edi, [rdx + 1]
movzx r12d, byte [rsp + 0x51]
test rax, rax
je 0x180039729
inc dword [rax + 0x3bc]
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [r15 + 0x18]
mov edx, edi
mov rbx, rax
lea r9, [rcx + rsi*2]
lea r8, [rcx + r14*2]
mov rcx, rax
call fcn.180014020
mov r9, qword [0x18016d238]
mov rax, qword [r9 + 0x108]
test rax, rax
je 0x180039771
mov rcx, qword [r9 + 0x110]
mov rdx, rbx
call rax
mov r9, qword [0x18016d238]
test rbx, rbx
je 0x180039782
test r9, r9
je 0x180039782
dec dword [r9 + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180039790
xor r13d, r13d
test r12b, r12b
je 0x18003988b
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x1800397b8
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0x50], r13d
mov byte [r15 + 0x5b], 0
mov byte [r15 + 0xe74], 1
mov r8d, dword [r15 + 0x54]
mov eax, dword [r15 + 0x50]
cmp eax, r8d
je 0x18003988b
mov ecx, dword [r15 + 4]
cmp eax, ecx
jle 0x1800397df
mov dword [r15 + 0x50], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x1800397eb
mov dword [r15 + 0x54], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x1800397f8
mov dword [r15 + 0x4c], eax
mov edx, eax
jmp 0x1800397fc
mov edx, dword [r15 + 0x4c]
cmp edx, ecx
jle 0x180039804
mov dword [r15 + 0x4c], ecx
cmp eax, r8d
je 0x18003984a
lea rdx, [r15 + 0x4c]
mov rcx, r15
jge 0x180039833
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.180036b30
mov eax, dword [r15 + 0x50]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x5b], 0
jmp 0x18003988b
sub eax, r8d
mov r9d, eax
call fcn.180036b30
mov eax, dword [r15 + 0x54]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x5b], 0
jmp 0x18003988b
movzx r8d, r11b
lea rdx, [r15 + 0x4c]
xor r8d, 1
mov rcx, r15
add r8d, 0x20000a
call fcn.180036cb0
mov eax, dword [r15 + 0x4c]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x50], eax
mov dword [r15 + 0xe70], 0xbe99999a
mov byte [r15 + 0xe74], 1
mov r12, qword [rsp + 0x60]
xor cl, cl
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x1800398a9
cmp byte [rbp + 0x188], 0
je 0x1800398a9
mov al, 1
jmp 0x1800398ab
xor al, al
movzx r13d, byte [rbp + 0x168]
mov r14d, dword [rsp + 0x68]
or r13b, al
mov eax, dword [r12 + 0x1b38]
mov byte [rbp + 0x168], r13b
cmp eax, r14d
jne 0x180039eba
xor r10d, r10d
mov qword [rbp - 0x50], r10
mov r12d, r10d
mov dword [rsp + 0x70], r10d
mov r13d, r10d
test cl, cl
je 0x180039b1c
cmp byte [rsp + 0x54], r10b
jne 0x180039a44
mov r9, qword [r15 + 0x38]
mov rax, qword [rbp + 0x160]
mov r8, r9
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180039923
inc rax
test ecx, ecx
jne 0x180039910
test edx, edx
je 0x180039a44
mov r13d, dword [r15 + 0x30]
mov r12, r9
dec r13d
mov qword [rbp - 0x50], r9
mov dword [rsp + 0x70], r13d
mov ebx, r10d
mov rsi, r10
test r13d, r13d
jle 0x1800399ac
movsxd rdi, r13d
mov rcx, r9
add rdi, r9
mov rdx, rdi
call fcn.180013cc0
lea ebx, [rax + 1]
test ebx, ebx
jle 0x180039992
mov ecx, 8
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x180039992
mov rcx, qword [0x18016d238]
test rcx, rcx
je 0x180039983
inc dword [rcx + 0x3bc]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
xor eax, eax
mov r9, rdi
mov r8, r12
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, rsi
call fcn.180013a10
xor r10d, r10d
movsxd rdi, dword [r15 + 4]
lea rcx, [r15 + 0x64]
dec ebx
mov r8d, edi
test r13d, r13d
cmovle ebx, r10d
xor edx, edx
mov r9d, ebx
call fcn.1800377a0
mov r9, rax
test rax, rax
je 0x1800399f5
test edi, edi
jle 0x1800399f5
xor eax, eax
mov edx, eax
nop word [rax + rax]
mov rcx, qword [r15 + 0x18]
movzx eax, word [rcx + rdx*2]
mov word [r9 + rdx*2], ax
inc rdx
cmp rdx, rdi
jl 0x1800399e0
mov r8d, dword [r15 + 4]
xor edx, edx
mov rcx, r15
call fcn.1800364f0
test ebx, ebx
jle 0x180039a24
mov r9d, ebx
mov r8, rsi
xor edx, edx
mov rcx, r15
call fcn.1800365f0
test al, al
je 0x180039a24
mov dword [r15 + 0x4c], ebx
mov byte [r15 + 0x5b], 0
test rsi, rsi
je 0x180039a44
mov rax, qword [0x18016d238]
test rax, rax
je 0x180039a3b
dec dword [rax + 0x3bc]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rsp + 0x50], 0
mov r10d, dword [rsp + 0x5c]
je 0x180039a5a
test r10b, 0x20
jne 0x180039b21
mov rsi, qword [rbp + 0x160]
mov edi, dword [rsp + 0x7c]
test r12, r12
je 0x180039af8
mov ecx, 0x20
test dil, dil
je 0x180039aca
xor edx, edx
mov dword [rbp + 0x20], 0x40000
lea eax, [r13 + 1]
mov qword [rbp + 0x30], rdx
cmp eax, ecx
mov dword [rbp + 0x24], r10d
xorps xmm0, xmm0
mov qword [rbp + 0x38], rsi
cmovle eax, ecx
mov dword [rbp + 0x40], r13d
lea rcx, [rbp + 0x20]
mov dword [rbp + 0x44], eax
movdqu xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x28], rdx
call rdx
mov ecx, dword [rbp + 0x44]
mov rsi, qword [rbp + 0x38]
mov qword [rbp + 0x160], rsi
lea r13d, [rcx - 1]
cmp dword [rbp + 0x40], r13d
cmovl r13d, dword [rbp + 0x40]
lea eax, [r13 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x180039af3
jbe 0x180039aee
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + rsi - 1], 0
mov byte [rsp + 0x75], 1
movzx r13d, byte [rbp + 0x168]
xor edi, edi
mov dword [r15 + 0xe78], edi
mov qword [r15 + 0xe80], rdi
mov qword [r15 + 0xe88], rdi
jmp 0x180039ebc
mov r10d, dword [rsp + 0x5c]
cmp byte [rsp + 0x54], 0
jne 0x180039b5a
mov edx, dword [r15 + 0x10]
lea rcx, [r15 + 0x20]
mov byte [r15 + 0x40], 1
lea edx, [rdx*4 + 1]
call fcn.1800240c0
mov r8, qword [r15 + 0x18]
xor r9d, r9d
mov edx, dword [r15 + 0x20]
mov rcx, qword [r15 + 0x28]
call fcn.180014020
mov r10d, dword [rsp + 0x5c]
test r10d, 0x1c0
je 0x180039e70
mov r9d, 0x16
test r10b, 0x40
je 0x180039b97
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x180039b97
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180039b97
xor ebx, ebx
lea eax, [r9 + 0x2a]
mov r9d, ebx
jmp 0x180039c00
test r10b, r10b
jns 0x180039bf0
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x180039bc6
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180039bc6
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
lea r9d, [r11 - 0x7d]
jmp 0x180039c06
mov rax, qword [0x18016d238]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x180039bf0
mov dl, 1
call fcn.180018ad0
test al, al
je 0x180039bf0
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
lea r9d, [r11 - 0x7c]
jmp 0x180039c06
mov eax, 0x100
test eax, r10d
je 0x180039e70
xor ebx, ebx
mov r11d, 0x80
mov dword [rbp - 0x18], eax
mov r14d, ebx
mov rax, qword [r15 + 0x28]
mov r12d, 0x2400
mov qword [rbp], rax
mov r13d, 0x2800
mov eax, dword [r15 + 8]
mov dword [rbp + 8], eax
mov eax, dword [r15 + 0x44]
mov dword [rbp + 0xc], eax
movsxd rax, dword [r15 + 0x4c]
mov dword [rbp - 4], r9d
mov r9, qword [r15 + 0x18]
mov r15d, 0x3ff
mov dword [rbp - 0x14], r10d
mov rdx, r9
mov dword [rbp - 8], ebx
mov r10d, 0x800
mov qword [rbp + 0x11], rbx
lea r8, [r9 + rax*2]
mov dword [rbp + 0x19], ebx
mov word [rbp + 0x1d], bx
mov byte [rbp + 0x1f], 0
mov qword [rbp - 0x10], rbx
mov byte [rbp + 0x10], 0
mov qword [rbp - 0x80], r9
nop
test r8, r8
je 0x180039c7a
cmp rdx, r8
jae 0x180039cc0
movzx ecx, word [rdx]
test cx, cx
je 0x180039cc0
add rdx, 2
cmp cx, r11w
jae 0x180039c91
inc r14d
jmp 0x180039c70
cmp cx, r10w
jae 0x180039ca1
mov eax, 2
add r14d, eax
jmp 0x180039c70
lea eax, [r12 + rcx]
cmp ax, r15w
mov eax, ebx
jbe 0x180039cbb
add cx, r13w
cmp cx, r15w
setbe al
add eax, 3
add r14d, eax
jmp 0x180039c70
mov r15, qword [rbp - 0x58]
mov rdx, r9
mov dword [rbp + 0x158], r14d
mov esi, ebx
mov dword [rbp + 0x14], r14d
movsxd rax, dword [r15 + 0x50]
mov r15d, 0x3ff
lea r8, [r9 + rax*2]
test r8, r8
je 0x180039cec
cmp rdx, r8
jae 0x180039d2f
movzx ecx, word [rdx]
test cx, cx
je 0x180039d2f
add rdx, 2
cmp cx, r11w
jae 0x180039d02
inc esi
jmp 0x180039ce2
cmp cx, r10w
jae 0x180039d11
mov eax, 2
add esi, eax
jmp 0x180039ce2
lea eax, [r12 + rcx]
cmp ax, r15w
mov eax, ebx
jbe 0x180039d2b
add cx, r13w
cmp cx, r15w
setbe al
add eax, 3
add esi, eax
jmp 0x180039ce2
mov r15, qword [rbp - 0x58]
mov edi, ebx
mov r9, qword [rbp - 0x80]
mov r14d, dword [rbp + 0x158]
mov dword [rbp + 0x18], esi
movsxd rax, dword [r15 + 0x54]
mov r15d, 0x3ff
lea rdx, [r9 + rax*2]
test rdx, rdx
je 0x180039d5b
cmp r9, rdx
jae 0x180039d9f
movzx ecx, word [r9]
test cx, cx
je 0x180039d9f
add r9, 2
cmp cx, r11w
jae 0x180039d72
inc edi
jmp 0x180039d51
cmp cx, r10w
jae 0x180039d81
mov eax, 2
add edi, eax
jmp 0x180039d51
lea eax, [r12 + rcx]
cmp ax, r15w
mov eax, ebx
jbe 0x180039d9b
add cx, r13w
cmp cx, r15w
setbe al
add eax, 3
add edi, eax
jmp 0x180039d51
lea rcx, [rbp - 0x18]
mov dword [rbp + 0x1c], edi
call rbx
movsxd rax, dword [rbp + 0x14]
mov rbx, qword [rbp]
mov r15, qword [rbp - 0x58]
mov r13d, dword [rsp + 0x70]
mov r12, qword [rbp - 0x50]
cmp eax, r14d
je 0x180039dda
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180013cc0
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0xe74], 1
movsxd rax, dword [rbp + 0x18]
cmp eax, esi
je 0x180039df2
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180013cc0
mov dword [r15 + 0x50], eax
movsxd rax, dword [rbp + 0x1c]
cmp eax, edi
je 0x180039e0a
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.180013cc0
mov dword [r15 + 0x54], eax
cmp byte [rbp + 0x10], 0
mov edi, dword [rsp + 0x7c]
je 0x180039e64
mov edx, dword [rbp + 8]
mov eax, dword [rbp - 0x40]
cmp edx, eax
jle 0x180039e34
test dil, dil
je 0x180039e34
lea rcx, [r15 + 0x10]
sub edx, eax
add edx, dword [rcx]
call fcn.1800241a0
mov rbx, qword [rbp]
mov edx, dword [r15 + 0x10]
xor eax, eax
mov rcx, qword [r15 + 0x18]
xor r9d, r9d
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.180013a10
mov dword [r15 + 4], eax
mov eax, dword [rbp + 8]
mov dword [r15 + 8], eax
mov dword [r15 + 0xe70], 0xbe99999a
mov r14d, dword [rsp + 0x68]
mov r10d, dword [rsp + 0x5c]
jmp 0x180039e74
mov edi, dword [rsp + 0x7c]
cmp byte [rsp + 0x54], 0
mov rsi, qword [rbp + 0x160]
jne 0x180039a65
mov r9, qword [r15 + 0x28]
mov r8, rsi
mov rax, r9
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180039ea6
inc rax
test ecx, ecx
jne 0x180039e93
test edx, edx
je 0x180039a65
mov r13d, dword [r15 + 8]
mov r12, r9
jmp 0x180039a65
xor edi, edi
cmp byte [rbp + 0x180], 0
mov rsi, qword [rsp + 0x60]
je 0x180039ed8
cmp dword [rsi + 0x1b38], r14d
jne 0x180039ed8
call fcn.180015a00
mov r11d, dword [rsp + 0x58]
mov r12d, 1
movaps xmmword [rsp + 0x1c0], xmm9
movaps xmmword [rsp + 0x160], xmm15
test r11b, r11b
jne 0x180039fa1
mov r8d, r12d
lea rcx, [rbp - 0x78]
mov edx, r14d
call fcn.180014fc0
movss xmm9, dword [0x18004b580]
lea ecx, [r12 + 0xf]
movaps xmm1, xmm9
call fcn.180014540
movss xmm0, dword [rsi + 0x1598]
mov r8d, eax
mov rdx, qword [rbp - 0x70]
movzx r9d, r12b
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm6
unpcklps xmm0, xmm12
movq rcx, xmm0
call fcn.180014c30
mov r11d, dword [rsp + 0x58]
movaps xmm2, xmm7
mov r8, qword [rbp - 0x60]
addss xmm2, xmm6
movaps xmm0, xmm6
movaps xmm1, xmm12
addss xmm0, dword [rsi + 0x1590]
addss xmm1, dword [rsi + 0x1594]
movaps xmm15, xmm12
addss xmm15, xmm10
movss dword [rbp - 0x40], xmm2
movss dword [rbp - 0x30], xmm2
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
movss dword [rbp - 0x2c], xmm15
movss dword [rsp + 0x70], xmm15
jmp 0x180039fe5
mov r8, qword [rbp - 0x60]
movaps xmm1, xmm12
movss xmm9, dword [0x18004b580]
addss xmm1, xmm10
movaps xmm2, xmm7
addss xmm2, xmm6
movsd xmm0, qword [r8 + 0xd0]
movsd qword [rbp - 0x80], xmm0
movss dword [rsp + 0x70], xmm1
movaps xmm15, xmm1
movss dword [rbp - 0x2c], xmm1
movss dword [rbp - 0x40], xmm2
movss dword [rbp - 0x30], xmm2
cmp byte [rsp + 0x74], 0
lea r9, [rbp - 0x80]
movsd xmm0, qword [r9]
movsd qword [rbp - 0x50], xmm0
movss dword [rsp + 0x7c], xmm2
movss dword [rbp - 0x34], xmm12
movss dword [rbp - 0x38], xmm6
movss dword [rbp + 0x158], xmm11
movss dword [rbp + 0x180], xmm11
je 0x18003a02a
mov rbx, qword [r15 + 0x28]
mov qword [rbp + 0x160], rbx
jmp 0x18003a031
mov rbx, qword [rbp + 0x160]
movzx eax, byte [rbp + 0x188]
test al, al
jne 0x18003a219
test r13b, r13b
jne 0x18003a219
test r11b, r11b
je 0x18003a0ac
movzx edx, byte [rbx]
lea r14, [rbx + 1]
mov ecx, edi
test dl, dl
je 0x18003a076
nop dword [rax + rax]
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r14]
cmovne eax, ecx
inc r14
mov ecx, eax
test dl, dl
jne 0x18003a060
movzx eax, byte [r14 - 1]
dec r14
cmp al, 0xa
je 0x18003a088
cmp al, 0xd
je 0x18003a088
inc ecx
movss dword [rbp + 0x158], xmm7
lea rbx, [rsi + 0x19a8]
movd xmm7, ecx
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [rbx]
movss dword [rbp + 0x180], xmm7
jmp 0x18003a0e8
cmp dword [rsi + 0x1b38], r14d
jne 0x18003a0bb
movsxd r14, dword [r15 + 8]
jmp 0x18003a0cc
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rbx + r14], 0
jne 0x18003a0c2
add r14, rbx
mov rax, r14
sub rax, rbx
cmp rax, 0x200000
jge 0x18003abaf
lea rbx, [rsi + 0x19a8]
movaps xmm1, xmm9
xor ecx, ecx
call fcn.180014540
mov r10, qword [r8 + 0x2b0]
test r11b, r11b
movss xmm2, dword [rbx]
lea r8, [rbp - 0x38]
mov r11, qword [rsi + 0x19a0]
mov r15d, 0
cmovne r8, r15
mov edi, eax
mov rdx, r14
mov r12, rbx
test eax, 0xff000000
je 0x18003aa74
mov r15, qword [rbp + 0x160]
test r14, r14
jne 0x18003a14d
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp byte [r15 + rdx], 0
jne 0x18003a140
add rdx, r15
cmp r15, rdx
je 0x18003aa71
test r11, r11
jne 0x18003a163
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
ucomiss xmm2, xmm11
jne 0x18003a172
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp - 0x78], xmm0
test r8, r8
je 0x18003a1e1
movss xmm1, dword [r8]
movss xmm0, dword [rbp - 0x78]
comiss xmm0, xmm1
jae 0x18003a19f
movss dword [rbp - 0x78], xmm1
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm1
jae 0x18003a1b4
movss dword [rbp - 0x74], xmm1
movss xmm1, dword [r8 + 8]
movss xmm0, dword [rbp - 0x70]
comiss xmm0, xmm1
jb 0x18003a1c9
movss dword [rbp - 0x70], xmm1
movss xmm1, dword [r8 + 0xc]
movss xmm0, dword [rbp - 0x6c]
comiss xmm0, xmm1
jb 0x18003a1de
movss dword [rbp - 0x6c], xmm1
test r8, r8
mov r9, qword [r9]
setne al
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm11
lea rax, [rbp - 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
call fcn.180030a50
jmp 0x18003aa71
movsxd r13, dword [r15 + 8]
xor r10d, r10d
mov rsi, qword [r15 + 0x18]
mov r8d, 0xfffffc18
movaps xmm8, xmm11
movaps xmm6, xmm11
mov r9, rdi
mov edx, r10d
lea r14, [rbx + r13]
mov ebx, r8d
test al, al
je 0x18003a252
movsxd rax, dword [r15 + 0x4c]
lea r8d, [r10 - 1]
mov edx, r12d
lea r9, [rsi + rax*2]
cmp byte [rbp + 0x168], r10b
je 0x18003a276
mov ecx, dword [r15 + 0x54]
mov ebx, 0xffffffff
cmp dword [r15 + 0x50], ecx
cmovl ecx, dword [r15 + 0x50]
inc edx
movsxd rax, ecx
lea rdi, [rsi + rax*2]
movzx ecx, word [rsi]
movzx eax, r11b
add edx, eax
mov rax, rsi
test cx, cx
je 0x18003a2c4
cmp cx, 0xa
jne 0x18003a2b7
inc r10d
cmp r8d, 0xffffffff
jne 0x18003a2a4
cmp rax, r9
jb 0x18003a2a4
dec edx
mov r8d, r10d
test edx, edx
jle 0x18003a2c4
cmp ebx, 0xffffffff
jne 0x18003a2b7
cmp rax, rdi
jb 0x18003a2b7
dec edx
mov ebx, r10d
test edx, edx
jle 0x18003a2c4
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x18003a287
inc r10d
mov rdx, r9
cmp r8d, 0xffffffff
mov r11d, r10d
cmovne r11d, r8d
cmp ebx, 0xffffffff
cmove ebx, r10d
cmp r9, rsi
jbe 0x18003a2f4
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18003a2f4
mov rdx, rax
cmp rax, rsi
ja 0x18003a2e1
mov rax, qword [0x18016d238]
movaps xmm14, xmm11
movaps xmm2, xmm11
mov r8, qword [rax + 0x19a0]
movss xmm4, dword [rax + 0x19a8]
divss xmm4, dword [r8 + 0x14]
cmp rdx, r9
jae 0x18003a362
nop dword [rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18003a337
maxss xmm14, xmm2
movaps xmm2, xmm11
jmp 0x18003a35d
cmp ecx, 0xd
je 0x18003a35d
cmp ecx, dword [r8]
jge 0x18003a34c
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18003a352
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rdx, r9
jb 0x18003a320
mov r9, qword [rsp + 0x60]
maxss xmm14, xmm2
movd xmm13, r11d
cvtdq2ps xmm13, xmm13
lea r12, [r9 + 0x19a8]
movss xmm3, dword [r12]
mulss xmm13, xmm3
movss dword [rsp + 0x68], xmm14
movss dword [rbp - 0x80], xmm13
test ebx, ebx
js 0x18003a413
mov rdx, rdi
cmp rdi, rsi
jbe 0x18003a3b3
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18003a3b3
mov rdx, rax
cmp rax, rsi
ja 0x18003a3a0
movaps xmm6, xmm11
movaps xmm2, xmm11
cmp rdx, rdi
jae 0x18003a401
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18003a3d6
maxss xmm6, xmm2
movaps xmm2, xmm11
jmp 0x18003a3fc
cmp ecx, 0xd
je 0x18003a3fc
cmp ecx, dword [r8]
jge 0x18003a3eb
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18003a3f1
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rdx, rdi
jb 0x18003a3c0
movd xmm8, ebx
maxss xmm6, xmm2
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm3
mov r8d, dword [rsp + 0x58]
test r8b, r8b
je 0x18003a439
movd xmm5, r10d
cvtdq2ps xmm5, xmm5
movss dword [rbp + 0x158], xmm7
mulss xmm5, xmm3
movss dword [rbp + 0x180], xmm5
movzx r10d, byte [rbp + 0x188]
test r10b, r10b
je 0x18003a524
cmp byte [r15 + 0xe74], 0
je 0x18003a524
test dword [rsp + 0x5c], 0x1000
jne 0x18003a4b9
movss xmm2, dword [r15 + 0x48]
movaps xmm1, xmm7
comiss xmm14, xmm2
mulss xmm1, dword [0x18004b51c]
movaps xmm0, xmm14
jae 0x18003a499
subss xmm0, xmm1
maxss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r15 + 0x48], xmm0
jmp 0x18003a4bf
subss xmm0, xmm7
comiss xmm0, xmm2
jb 0x18003a4bf
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r15 + 0x48], xmm0
jmp 0x18003a4bf
xor eax, eax
mov dword [r15 + 0x48], eax
test r8b, r8b
je 0x18003a514
mov rax, qword [rbp - 0x60]
movaps xmm0, xmm13
subss xmm0, dword [r12]
movss xmm1, dword [rax + 0x58]
comiss xmm0, xmm1
jae 0x18003a4e3
maxss xmm0, xmm11
jmp 0x18003a4f0
movaps xmm0, xmm13
subss xmm0, xmm10
maxss xmm0, xmm1
movss xmm11, dword [rbp - 0x4c]
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
mov byte [r15 + 0xe74], 0
addss xmm11, xmm1
movss dword [rbp - 0x4c], xmm11
jmp 0x18003a52a
movss xmm11, dword [rbp - 0x4c]
mov byte [r15 + 0xe74], 0
jmp 0x18003a52a
movss xmm11, dword [rbp - 0x4c]
cmp byte [rbp + 0x168], 0
movss xmm12, dword [r15 + 0x48]
movss xmm7, dword [rbp - 0x50]
je 0x18003a79c
mov edx, dword [r15 + 0x54]
mov eax, edx
mov ecx, dword [r15 + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rdi, [rsi + rax*2]
test r10b, r10b
je 0x18003a56c
movaps xmm1, xmm9
jmp 0x18003a574
movss xmm1, dword [0x18004b554]
mov ecx, 0x33
call fcn.180014540
mov esi, eax
test r8b, r8b
je 0x18003a58f
xorps xmm10, xmm10
xorps xmm9, xmm9
jmp 0x18003a5a1
movss xmm9, dword [0x18004b6e0]
movss xmm10, dword [0x18004b5c4]
addss xmm8, xmm11
movaps xmm4, xmm7
addss xmm4, xmm6
subss xmm4, xmm12
cmp rbx, rdi
jae 0x18003a79c
movss xmm6, dword [r12]
xorps xmm13, xmm13
movss xmm14, dword [rbp - 0x40]
movaps xmm1, xmm6
movss xmm11, dword [0x18004b54c]
movss xmm2, dword [rsp + 0x78]
mov r15, qword [rbp - 0x60]
movaps xmm0, xmm15
addss xmm0, xmm1
comiss xmm8, xmm0
ja 0x18003a780
comiss xmm8, xmm2
jae 0x18003a61d
cmp rbx, rdi
jae 0x18003a761
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18003a761
cmp rbx, rdi
jb 0x18003a602
jmp 0x18003a761
mov rax, qword [0x18016d238]
movaps xmm5, xmm13
movaps xmm2, xmm13
mov rdx, qword [rax + 0x19a0]
movss xmm3, dword [rax + 0x19a8]
divss xmm3, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x18003a693
nop word [rax + rax]
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18003a687
cmp ecx, 0xd
je 0x18003a680
cmp ecx, dword [rdx]
jge 0x18003a670
mov rax, qword [rdx + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18003a675
movss xmm1, dword [rdx + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rbx, rdi
jb 0x18003a650
jmp 0x18003a693
movaps xmm5, xmm2
movaps xmm2, xmm13
maxss xmm5, xmm13
maxss xmm2, xmm5
comiss xmm2, xmm13
ja 0x18003a6cc
mov rax, qword [r9 + 0x19a0]
cmp dword [rax], 0x20
jle 0x18003a6b7
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18003a6bc
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm5, dword [rbp - 0x20]
addss xmm2, xmm4
movaps xmm3, xmm9
maxss xmm4, xmm5
subss xmm3, xmm6
movaps xmm1, xmm10
movss xmm6, dword [rsp + 0x78]
addss xmm1, xmm8
movaps xmm0, xmm15
minss xmm2, xmm14
movss dword [rbp - 0x78], xmm4
addss xmm3, xmm8
minss xmm0, xmm1
movss dword [rbp - 0x70], xmm2
maxss xmm3, xmm6
comiss xmm6, xmm0
movss dword [rbp - 0x74], xmm3
movss dword [rbp - 0x6c], xmm0
jae 0x18003a75b
comiss xmm15, xmm3
jbe 0x18003a75b
comiss xmm5, xmm2
jae 0x18003a75b
comiss xmm14, xmm4
jbe 0x18003a75b
mov rcx, qword [r15 + 0x2b0]
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0xf
lea rdx, [rbp - 0x78]
mov r9d, esi
movss dword [rsp + 0x20], xmm13
call fcn.18002d210
mov r9, qword [rsp + 0x60]
movss xmm2, dword [rsp + 0x78]
movss xmm6, dword [r12]
movaps xmm4, xmm7
subss xmm4, xmm12
movaps xmm1, xmm6
addss xmm8, xmm6
cmp rbx, rdi
jb 0x18003a5e1
movss xmm11, dword [rbp - 0x4c]
movss xmm13, dword [rbp - 0x80]
movss xmm14, dword [rsp + 0x68]
mov r15, qword [rbp - 0x58]
mov r8d, dword [rsp + 0x58]
test r8b, r8b
jne 0x18003a7ae
cmp r13, 0x200000
jge 0x18003a906
movss xmm6, dword [0x18004b580]
xor ecx, ecx
movaps xmm1, xmm6
call fcn.180014540
cmp byte [rsp + 0x58], 0
lea r8, [rbp - 0x38]
mov rbx, qword [rbp - 0x60]
mov r9d, eax
mov rsi, qword [rsp + 0x60]
movaps xmm0, xmm7
movss xmm2, dword [r12]
subss xmm0, xmm12
mov eax, 0
movss dword [rbp - 0x54], xmm11
mov r10, qword [rbx + 0x2b0]
cmovne r8, rax
mov r11, qword [rsi + 0x19a0]
mov rdx, r14
movss dword [rbp - 0x58], xmm0
test r9d, 0xff000000
je 0x18003a917
mov rbx, qword [rbp + 0x160]
test r14, r14
jne 0x18003a833
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rbx + rdx], al
jne 0x18003a828
add rdx, rbx
cmp rbx, rdx
je 0x18003a913
test r11, r11
jne 0x18003a849
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm8, xmm8
ucomiss xmm2, xmm8
jne 0x18003a85c
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp - 0x78], xmm0
test r8, r8
je 0x18003a8cb
movss xmm1, dword [r8]
movss xmm0, dword [rbp - 0x78]
comiss xmm0, xmm1
jae 0x18003a889
movss dword [rbp - 0x78], xmm1
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm1
jae 0x18003a89e
movss dword [rbp - 0x74], xmm1
movss xmm1, dword [r8 + 8]
movss xmm0, dword [rbp - 0x70]
comiss xmm0, xmm1
jb 0x18003a8b3
movss dword [rbp - 0x70], xmm1
movss xmm1, dword [r8 + 0xc]
movss xmm0, dword [rbp - 0x6c]
comiss xmm0, xmm1
jb 0x18003a8c8
movss dword [rbp - 0x6c], xmm1
test r8, r8
setne al
mov rcx, r11
mov byte [rsp + 0x48], al
lea rax, [rbp - 0x78]
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
mov r9, qword [rbp - 0x58]
call fcn.180030a50
mov rbx, qword [rbp - 0x60]
jmp 0x18003a91b
movss xmm6, dword [0x18004b580]
mov rsi, qword [rsp + 0x60]
mov rbx, qword [rbp - 0x60]
xorps xmm8, xmm8
cmp byte [rbp + 0x188], 0
je 0x18003aa57
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [r15 + 0xe70]
movss dword [r15 + 0xe70], xmm0
cmp byte [rsi + 0xca], 0
je 0x18003a968
comiss xmm0, xmm8
jbe 0x18003a968
movss xmm1, dword [0x18004b584]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm0, dword [0x18004b574]
jbe 0x18003a968
xor al, al
jmp 0x18003a96a
mov al, 1
addss xmm13, xmm11
addss xmm7, xmm14
movaps xmm0, xmm13
movaps xmm1, xmm13
subss xmm7, xmm12
movss xmm12, dword [rsp + 0x78]
subss xmm0, dword [r12]
subss xmm1, dword [0x18004b5a0]
movss dword [rbp - 0x38], xmm7
movaps xmm2, xmm7
addss xmm2, xmm6
movss dword [rbp - 0x2c], xmm1
addss xmm0, dword [0x18004b54c]
movss dword [rbp - 0x30], xmm2
movss dword [rbp - 0x34], xmm0
test al, al
je 0x18003aa1d
comiss xmm12, xmm1
jae 0x18003aa1d
movss xmm3, dword [rsp + 0x70]
comiss xmm3, xmm0
jbe 0x18003aa1d
movss xmm0, dword [rbp - 0x20]
comiss xmm0, xmm2
jae 0x18003aa1d
movss xmm0, dword [rsp + 0x7c]
comiss xmm0, xmm7
jbe 0x18003aa1d
movss dword [rbp + 0x18c], xmm1
xor ecx, ecx
movaps xmm1, xmm6
movss dword [rbp + 0x188], xmm7
call fcn.180014540
mov rcx, qword [rbx + 0x2b0]
lea rdx, [rbp - 0x38]
mov r9d, eax
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x188]
call fcn.18002cfb0
movss xmm14, dword [0x18004b6e0]
xor r15d, r15d
xorps xmm11, xmm11
cmp byte [rsp + 0x54], r15b
jne 0x18003aa4f
subss xmm13, dword [r12]
subss xmm7, xmm6
movss dword [rsi + 0x2fc4], xmm13
movss dword [rsi + 0x2fc0], xmm7
movss xmm13, dword [rbp - 0x3c]
jmp 0x18003aa74
movss xmm12, dword [rsp + 0x78]
xorps xmm11, xmm11
movss xmm13, dword [rbp - 0x3c]
movss xmm14, dword [0x18004b6e0]
xor r15d, r15d
cmp byte [rsp + 0x58], 0
je 0x18003aba8
mov rcx, qword [0x18016d238]
movss xmm0, dword [rbp + 0x180]
addss xmm0, dword [r12]
movss xmm9, dword [rbp + 0x158]
mov rax, qword [rcx + 0x1af0]
movss dword [rbp + 0x158], xmm9
movss dword [rbp + 0x15c], xmm0
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1af0]
cmp byte [rax + 0x83], 0
jne 0x18003ab9e
movss xmm8, dword [rax + 0xd4]
lea rcx, [rbp + 0x158]
movss xmm7, dword [rax + 0xd0]
movaps xmm6, xmm8
movaps xmm1, xmm14
addss xmm6, xmm0
addss xmm9, xmm7
call fcn.180015a60
mov r9, qword [0x18016d238]
movaps xmm0, xmm7
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm8
shufps xmm0, xmm0, 0xc6
mov r10, qword [r9 + 0x1af0]
movss xmm0, xmm9
shufps xmm0, xmm0, 0x27
movss xmm0, xmm6
shufps xmm0, xmm0, 0x39
movups xmmword [r10 + 0x11c], xmm0
mov qword [r10 + 0x114], 0
mov dword [r9 + 0x1bf8], r15d
mov rax, qword [r9 + 0x1af0]
movups xmmword [rbp - 0x38], xmm0
comiss xmm6, dword [rax + 0x25c]
jbe 0x18003ab78
comiss xmm8, dword [rax + 0x264]
jae 0x18003ab78
comiss xmm9, dword [rax + 0x258]
jbe 0x18003ab78
comiss xmm7, dword [rax + 0x260]
jb 0x18003ab82
cmp byte [r9 + 0x3008], 0
je 0x18003ab9e
mov r8b, 1
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x38]
call fcn.180018990
test al, al
je 0x18003ab9e
or dword [r10 + 0x118], 1
call fcn.180018df0
call fcn.18001e560
mov rbx, qword [rbp + 0x160]
mov eax, dword [rbp - 0x68]
movaps xmm15, xmmword [rsp + 0x160]
movaps xmm9, xmmword [rsp + 0x1c0]
mov r12, qword [rsp + 0x208]
test al, al
je 0x18003abd8
call fcn.18001de30
mov eax, dword [rbp - 0x68]
cmp byte [rsi + 0x3008], 0
je 0x18003abf4
test al, al
jne 0x18003abf4
mov r8, r14
lea rcx, [rbp - 0x50]
mov rdx, rbx
call fcn.180022ca0
comiss xmm13, xmm11
jbe 0x18003ac2b
movss xmm0, dword [rbp - 0x1c]
mov r9b, 1
addss xmm0, dword [rsi + 0x15a8]
addss xmm12, dword [rsi + 0x1594]
mov rdx, qword [rbp + 0x150]
xor r8d, r8d
unpcklps xmm0, xmm12
movq rcx, xmm0
call fcn.1800146f0
movzx edx, byte [rsp + 0x75]
mov ecx, dword [rsp + 0x5c]
test dl, dl
je 0x18003ac5c
bt ecx, 0x15
jb 0x18003ac5c
mov rax, qword [0x18016d238]
mov word [rax + 0x1b47], 0x101
mov rax, qword [rax + 0x1af0]
or dword [rax + 0x118], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x50]
cmovne eax, ecx
jmp 0x18003807c