Function at 0x1800ee4b4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x268
mov rsi, qword [0x18034aee0]
mov rdi, rcx
movaps xmmword [rax - 0x58], xmm6
mov ecx, 1
movaps xmmword [rax - 0x68], xmm7
xor r13d, r13d
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [rsi + 0x3ec8]
mov qword [rbp + 0x30], rsi
mov byte [rax + 0xb8], cl
mov r14, qword [rsi + 0x3ec8]
mov qword [rsp + 0x70], r14
cmp byte [r14 + 0xbb], r13b
jne 0x1800ee743
mov ebx, dword [rbp + 0x1d8]
mov eax, ebx
shr eax, 0xe
mov r12d, ebx
and al, cl
shr r12d, 0x1a
mov dword [rsp + 0x5c], eax
and r12b, cl
mov eax, ebx
mov dword [rsp + 0x60], r12d
shr eax, 0xf
and al, cl
mov dword [rbp - 0x74], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x20], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rbp - 0x54], eax
test r12b, r12b
je 0x1800ee5ac
call fcn.1800d5fcc
mov rdx, rdi
mov rcx, r14
call fcn.1800cb7e4
movss xmm0, dword [0x1800905a4]
lea rcx, [rbp + 0x1b8]
mov r9d, 1
movss dword [rbp - 0x68], xmm0
xor r8d, r8d
movss dword [rsp + 0x20], xmm0
mov rdx, rdi
mov dword [rsp + 0x64], eax
mov r15d, eax
call fcn.1800ce650
test r12b, r12b
je 0x1800ee600
movss xmm4, dword [rsi + 0x3c28]
mulss xmm4, dword [0x180090448]
jmp 0x1800ee608
movss xmm4, dword [rbp + 0x1bc]
call fcn.1800d5df8
movss xmm6, dword [rsi + 0x3834]
lea rcx, [rbp + 0x1e0]
mov rdx, qword [rbp + 0x1d0]
movaps xmm3, xmm6
addss xmm3, xmm6
movaps xmm2, xmm0
mov rdx, qword [rdx]
addss xmm3, xmm4
call fcn.1800d5e68
movss xmm15, dword [rbp + 0x1b8]
xorps xmm12, xmm12
comiss xmm15, xmm12
movss dword [rbp - 0x38], xmm15
jbe 0x1800ee660
movaps xmm1, xmm15
addss xmm1, dword [rsi + 0x3848]
jmp 0x1800ee663
xorps xmm1, xmm1
movss xmm9, dword [r14 + 0x104]
lea rcx, [rbp + 0x1b8]
movss xmm7, dword [r14 + 0x100]
movaps xmm0, xmm9
movss xmm10, dword [rbp + 0x1e0]
movaps xmm2, xmm9
movss xmm11, dword [rbp + 0x1e4]
addss xmm1, xmm10
addss xmm2, xmm11
movss dword [rbp - 0x64], xmm9
addss xmm0, xmm11
movss dword [rsp + 0x78], xmm7
movaps xmm13, xmm7
movss dword [rsp + 0x7c], xmm9
addss xmm13, xmm10
movss dword [rbp - 0x30], xmm7
addss xmm1, xmm7
movss dword [rbp - 0x2c], xmm9
movss dword [rbp - 0x24], xmm2
subss xmm2, xmm9
movss dword [rbp - 0x7c], xmm0
xorps xmm0, xmm0
mov qword [rbp - 0x70], r14
movss dword [rbp - 0x58], xmm13
movss dword [rbp - 0x28], xmm1
subss xmm1, xmm7
movss dword [rbp - 0x80], xmm13
movss dword [rbp + 0x1bc], xmm2
movups xmmword [rbp + 0x80], xmm0
movss dword [rbp + 0x1b8], xmm1
movaps xmm1, xmm6
call fcn.1800d599c
test r12b, r12b
je 0x1800ee8ef
mov r9d, 0x400
lea r8, [rsp + 0x78]
mov edx, r15d
lea rcx, [rbp - 0x30]
call fcn.1800d5b08
test al, al
jne 0x1800ee798
call fcn.1800d60f4
xor al, al
lea r11, [rsp + 0x268]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movups xmm0, xmmword [rsi + 0x4764]
mov r13d, dword [rsi + 0x476c]
lea rdx, [rsi + 0x3940]
mov ecx, 3
movss dword [r14 + 0x100], xmm7
movups xmmword [rbp + 0x80], xmm0
movss dword [r14 + 0x104], xmm9
call fcn.1800ca0c8
movss xmm1, dword [rsi + 0x3838]
mov ecx, 7
call fcn.1800ca17c
movss xmm1, dword [rsi + 0x383c]
mov ecx, 8
call fcn.1800ca17c
and dword [rbp + 0x1b8], 0
lea rdx, [rbp + 0x1b8]
and dword [rbp + 0x1bc], 0
mov ecx, 2
call fcn.1800ca1f4
movss xmm13, dword [rbp - 0x80]
lea r8, [rbp + 0x1b8]
movss xmm1, dword [rbp - 0x7c]
movaps xmm0, xmm13
movss xmm9, dword [rsp + 0x7c]
mov edx, r15d
movss xmm7, dword [rsp + 0x78]
subss xmm1, xmm9
subss xmm0, xmm7
movss dword [rbp - 0x58], xmm13
mov rcx, rdi
movss dword [rbp - 0x64], xmm9
mov dword [rsp + 0x20], 4
movss dword [rbp + 0x1bc], xmm1
movss dword [rbp + 0x1b8], xmm0
call fcn.1800ce930
mov ecx, 3
mov bl, al
call fcn.1800ca280
mov ecx, 1
call fcn.1800ca124
test bl, bl
jne 0x1800ee892
call fcn.1800ceb64
jmp 0x1800ee73e
mov rbx, qword [rsi + 0x3ec8]
mov qword [rbp - 0x70], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
subss xmm10, dword [rbx + 0xac]
mov word [rbx + 0x15e], cx
movss xmm0, dword [rsi + 0x3830]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [rsi + 0x3834]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
jmp 0x1800ee93d
bt ebx, 0x1c
jb 0x1800ee933
mov r9d, 0x400
lea r8, [rsp + 0x78]
mov edx, r15d
lea rcx, [rbp - 0x30]
call fcn.1800d5b08
test al, al
je 0x1800ee743
movss xmm13, dword [rbp - 0x80]
movss xmm9, dword [rsp + 0x7c]
movss xmm7, dword [rsp + 0x78]
movss dword [rbp - 0x58], xmm13
movss dword [rbp - 0x64], xmm9
mov r13d, dword [rsi + 0x476c]
mov rbx, r14
mov edx, r15d
lea rcx, [rsp + 0x78]
call fcn.1800cbd10
xor r9d, r9d
mov byte [rsp + 0x5a], al
mov cl, al
lea edx, [r9 + 1]
test al, al
je 0x1800ee961
mov dword [rsi + 0x4a48], edx
mov rdi, qword [0x18034aee0]
test r15d, r15d
je 0x1800ee97f
cmp dword [rdi + 0x4be0], r15d
jne 0x1800ee97f
add rdi, 0x4bd8
jmp 0x1800ee982
mov rdi, r9
mov eax, dword [rsi + 0x3f28]
shr r13d, 8
and r13b, dl
mov qword [rbp - 0x30], rdi
cmp eax, r15d
je 0x1800ee9ba
cmp dword [rsi + 0x48b8], r15d
jne 0x1800ee9ba
test byte [rsi + 0x48c4], dl
jne 0x1800ee9b2
cmp dword [rsi + 0x48dc], 2
jne 0x1800ee9ba
mov byte [rbp + 0x1e0], dl
jmp 0x1800ee9c1
mov byte [rbp + 0x1e0], r9b
test cl, cl
je 0x1800ee9d1
mov r15b, dl
cmp byte [rsi + 0x3748], r9b
jne 0x1800ee9d4
mov r15b, r9b
mov byte [rbp + 0x1b8], r15b
test r12b, r12b
je 0x1800eea0a
test rdi, rdi
je 0x1800eea0a
test eax, eax
jne 0x1800eea0a
lea rdx, [0x18008fd28]
mov rcx, rbx
call fcn.1800cb7e4
cmp dword [rsi + 0x3f58], eax
jne 0x1800eea07
mov ebx, 1
jmp 0x1800eea17
xor r9d, r9d
mov bl, r9b
test r12b, r12b
je 0x1800eea48
test rdi, rdi
je 0x1800eea48
mov rcx, qword [rbp - 0x70]
lea rdx, [0x18008fd28]
call fcn.1800cb7e4
xor r9d, r9d
cmp dword [rsi + 0x3f28], eax
jne 0x1800eea48
lea eax, [r9 + 1]
mov byte [rsp + 0x58], r9b
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x54], r9b
jmp 0x1800eea5e
mov byte [rsp + 0x58], r9b
mov cl, r9b
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x54], r9b
test r12b, r12b
je 0x1800eea6c
mov rax, qword [rbp - 0x70]
movss xmm6, dword [rax + 0x88]
jmp 0x1800eea78
movss xmm6, dword [0x180090568]
mov byte [rsp + 0x51], cl
mov r8d, 1
test rdi, rdi
je 0x1800eea91
mov al, r12b
mov r12b, r8b
xor al, r8b
cmp byte [rdi + 0x6b], al
jne 0x1800eea94
mov r12b, r9b
test r15b, r15b
jne 0x1800eeabd
test bl, bl
jne 0x1800eeabd
cmp byte [rbp + 0x1e0], r9b
jne 0x1800eeabd
test r13b, r13b
jne 0x1800eeabd
mov byte [rbp + 0x1e8], r9b
test cl, cl
jne 0x1800eeac4
mov byte [rsp + 0x59], r9b
jmp 0x1800eead5
mov byte [rbp + 0x1e8], r8b
mov eax, dword [rsp + 0x64]
mov byte [rsp + 0x59], r8b
cmp dword [rsi + 0x3f28], eax
jne 0x1800eeade
test r12b, r12b
je 0x1800eed2b
lea rdi, [rsi + 0x4bd8]
mov ecx, dword [rdi + 8]
mov qword [rbp - 0x30], rdi
mov dword [rdi + 0xe80], 0xbe99999a
call fcn.1800ee408
mov rax, qword [rbp + 0x1c0]
or rbx, 0xffffffffffffffff
xor edx, edx
inc rbx
cmp byte [rax + rbx], dl
jne 0x1800eeb08
mov ecx, dword [rdi + 0x3c]
lea r14d, [rbx + 1]
cmp r14d, ecx
jle 0x1800eeb42
test ecx, ecx
je 0x1800eeb2b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800eeb30
mov eax, 8
cmp eax, r14d
lea rcx, [rdi + 0x38]
mov edx, r14d
cmovg edx, eax
call fcn.1800dca18
mov dword [rdi + 0x38], r14d
mov rcx, qword [rdi + 0x40]
movsxd r8, r14d
mov r14, qword [rbp + 0x1c0]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x64]
xor r8d, r8d
cmp dword [rdi + 8], eax
jne 0x1800eeb93
test r12b, r12b
jne 0x1800eeb93
lea r15d, [r8 + 1]
cmp dword [rdi + 0x10], ebx
jne 0x1800eeb93
cmp byte [rdi + 0x48], r8b
je 0x1800eeb96
mov rcx, qword [rdi + 0x30]
mov rdx, r14
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x1800eeb96
mov r15b, r8b
mov ebx, dword [rbp + 0x1c8]
mov r12d, dword [rsp + 0x64]
inc ebx
mov dword [rdi + 8], r12d
mov ecx, dword [rdi + 0x1c]
mov qword [rbp - 0x40], r8
cmp ebx, ecx
jle 0x1800eebd9
test ecx, ecx
je 0x1800eebc1
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800eebc6
mov eax, 8
cmp eax, ebx
lea rcx, [rdi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.1800dca9c
xor r8d, r8d
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x1800eec00
mov eax, ecx
cdq
sub eax, edx
mov edx, r8d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x28]
test eax, eax
cmovg edx, eax
call fcn.1800dca18
xor r8d, r8d
mov rbx, qword [rbp + 0x1c0]
lea rax, [rbp - 0x40]
mov edx, dword [rbp + 0x1c8]
xor r9d, r9d
mov dword [rdi + 0x28], r8d
mov rcx, qword [rdi + 0x20]
mov byte [rdi + 0x48], r8b
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1800c9858
mov ecx, dword [rbp - 0x40]
xor r9d, r9d
sub ecx, ebx
mov dword [rdi + 0xc], eax
mov dword [rdi + 0x10], ecx
mov edx, eax
lea r8d, [r9 + 1]
test r15b, r15b
je 0x1800eec6c
cmp dword [rdi + 0x54], eax
mov ecx, eax
cmovl ecx, dword [rdi + 0x54]
cmp dword [rdi + 0x58], eax
mov dword [rdi + 0x54], ecx
cmovl eax, dword [rdi + 0x58]
cmp dword [rdi + 0x5c], edx
mov ecx, dword [rsp + 0x60]
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
mov dword [rdi + 0x58], eax
jmp 0x1800eecb1
mov ecx, dword [rsp + 0x60]
mov al, cl
xor al, r8b
mov qword [rdi + 0x50], r9
mov byte [rdi + 0x6b], al
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], r9d
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], r9
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], r9d
mov byte [rdi + 0x68], r9b
mov byte [rdi + 0x60], r9b
mov dword [rdi + 0x64], r9d
test cl, cl
jne 0x1800eed0d
mov r8d, dword [rbp + 0x1d8]
test r8b, 0x10
mov eax, dword [rsp + 0x54]
mov r8d, 1
movzx eax, al
cmovne eax, r8d
mov dword [rsp + 0x54], eax
cmp byte [rbp + 0x1e0], r9b
je 0x1800eecf1
test r15b, r15b
je 0x1800eecec
test byte [rsi + 0x48c4], 4
jne 0x1800eecf1
mov byte [rsp + 0x54], r8b
test r13b, r13b
jne 0x1800eed08
cmp byte [rbp + 0x1b8], r9b
je 0x1800eed0d
cmp byte [rsi + 0xe24], r9b
je 0x1800eed0d
mov byte [rsp + 0x54], r8b
test dword [rbp + 0x1d8], 0x2000
mov r14, qword [rsp + 0x70]
mov r15b, byte [rbp + 0x1b8]
je 0x1800eed30
mov byte [rdi + 0x60], r8b
jmp 0x1800eed30
mov r12d, dword [rsp + 0x64]
mov r13b, byte [rsi + 0x79]
mov bl, byte [rbp + 0x1e8]
mov byte [rsp + 0x69], r13b
cmp dword [rsi + 0x3f28], r12d
je 0x1800eed6a
test bl, bl
je 0x1800eed6a
mov rdx, r14
mov ecx, r12d
call fcn.1800cb9cc
mov rdx, r14
mov ecx, r12d
call fcn.1800d7714
mov rcx, r14
call fcn.1800d306c
mov r14d, dword [rsp + 0x64]
cmp dword [rsi + 0x3f28], r14d
jne 0x1800eee68
test r15b, r15b
je 0x1800eeda3
mov rax, qword [0x18034aee0]
xor r15d, r15d
mov dword [rax + 0x4580], r14d
mov dword [rax + 0x457c], r14d
mov word [rax + 0x4584], r15w
jmp 0x1800eeda6
xor r15d, r15d
mov eax, dword [rsi + 0x4738]
mov ecx, dword [rsp + 0x60]
or eax, 3
mov edx, dword [rbp + 0x1d8]
mov dword [rsi + 0x4738], eax
test cl, cl
jne 0x1800eedc7
test dl, dl
jns 0x1800eedd0
or eax, 0xc
mov dword [rsi + 0x4738], eax
mov rax, qword [0x18034aee0]
and word [rax + 0x3fcc], 0
mov dword [rax + 0x3fc8], r14d
mov dword [rax + 0x3fc4], r14d
and word [rax + 0x3fd8], 0
mov dword [rax + 0x3fd4], r14d
mov dword [rax + 0x3fd0], r14d
test cl, cl
je 0x1800eee33
and word [rax + 0x3fb4], 0
mov dword [rax + 0x3fb0], r14d
mov dword [rax + 0x3fac], r14d
and word [rax + 0x3fc0], 0
mov dword [rax + 0x3fbc], r14d
mov dword [rax + 0x3fb8], r14d
test r13b, r13b
je 0x1800eee4e
and word [rax + 0x45f0], 0
mov dword [rax + 0x45ec], r14d
mov dword [rax + 0x45e8], r14d
test edx, 0x440
je 0x1800eee6b
xor r8d, r8d
mov edx, r14d
mov ecx, 0x200
call fcn.1800d3e24
jmp 0x1800eee6b
xor r15d, r15d
cmp dword [rsi + 0x3f28], r14d
jne 0x1800eeeaa
test rdi, rdi
jne 0x1800eee82
xor edx, edx
xor ecx, ecx
call fcn.1800cb9cc
cmp dword [rsi + 0x3f28], r14d
jne 0x1800eeeaa
mov edx, 1
cmp byte [rsi + 0x3748], r15b
je 0x1800eeebb
cmp byte [rsp + 0x59], r15b
jne 0x1800eeebb
test bl, bl
jne 0x1800eeebb
mov byte [rsp + 0x58], dl
jmp 0x1800eeebb
test rdi, rdi
je 0x1800eeebf
cmp byte [rsp + 0x51], r15b
je 0x1800eeebf
mov edx, 1
mov cl, dl
jmp 0x1800eeec2
mov cl, r15b
mov r12d, dword [rsp + 0x54]
mov byte [rbp + 0x1b8], cl
test rdi, rdi
je 0x1800eeeeb
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x1800eeedf
test r12b, r12b
je 0x1800eeeeb
test cl, cl
je 0x1800eeeeb
mov r8d, 1
jmp 0x1800eeeee
mov r8b, r15b
xor eax, eax
mov dword [rsp + 0x54], r8d
xor r9d, r9d
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x5c]
movzx r15d, r8b
mov byte [rsp + 0x59], r9b
test al, al
je 0x1800eefdb
test rdi, rdi
je 0x1800eefdb
test cl, cl
jne 0x1800eef27
test r8b, r8b
je 0x1800eefe4
mov ebx, dword [rbp + 0x1c8]
mov ecx, dword [rdi + 0x1c]
inc ebx
mov qword [rbp + 0x1e8], r9
cmp ebx, ecx
jle 0x1800eef61
test ecx, ecx
je 0x1800eef4c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800eef51
mov eax, 8
cmp eax, ebx
lea rcx, [rdi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.1800dca9c
mov r14, qword [rbp + 0x1c0]
lea rax, [rbp + 0x1e8]
mov dword [rdi + 0x18], ebx
mov r8, r14
mov rcx, qword [rdi + 0x20]
xor r9d, r9d
mov edx, ebx
mov qword [rsp + 0x20], rax
call fcn.1800c9858
mov ecx, dword [rbp + 0x1e8]
mov edx, eax
sub ecx, r14d
mov dword [rdi + 0xc], eax
cmp dword [rdi + 0x54], eax
mov r14d, dword [rsp + 0x64]
mov dword [rdi + 0x10], ecx
mov ecx, eax
cmovl ecx, dword [rdi + 0x54]
cmp dword [rdi + 0x58], eax
mov dword [rdi + 0x54], ecx
mov ecx, eax
cmovl ecx, dword [rdi + 0x58]
cmp dword [rdi + 0x5c], eax
mov eax, dword [rsp + 0x5c]
cmovl edx, dword [rdi + 0x5c]
xor r9d, r9d
cmp ecx, edx
mov dword [rdi + 0x58], ecx
mov cl, byte [rbp + 0x1b8]
mov r8d, r9d
cmovne r8d, r15d
mov dword [rdi + 0x5c], edx
mov dword [rsp + 0x54], r8d
test cl, cl
jne 0x1800eefed
test r8b, r8b
jne 0x1800eefed
cmp dword [rsi + 0x3f28], r14d
jne 0x1800ef009
test al, al
jne 0x1800ef009
test rdi, rdi
je 0x1800ef009
cmp byte [rdi + 0x48], r9b
je 0x1800ef009
mov r15d, 1
mov byte [rsp + 0x6c], r15b
jmp 0x1800ef014
mov byte [rsp + 0x6c], r9b
mov r15d, 1
mov ebx, dword [rbp - 0x74]
test bl, bl
je 0x1800ef08c
mov rcx, qword [rsi + 0x3c20]
mov edx, 0x2a
call fcn.1800e3f34
mov ecx, dword [rcx + 0x14]
lea r9, [rsi + 0x5a80]
mov dword [r9 + 0x14], ecx
mov rcx, r9
mov rdx, qword [rsi + 0x3c20]
mov r8d, dword [rdx + 0x64]
mov dword [r9 + 0x64], r8d
mov rdx, qword [rsi + 0x3c20]
mov r8d, dword [rdx + 0x68]
mov dword [r9 + 0x68], r8d
mov rdx, qword [rsi + 0x3c20]
mov r8d, dword [rdx + 0x6c]
mov dword [r9 + 0x6c], r8d
mov rdx, qword [rsi + 0x3c20]
mov r8, qword [rdx + 0x40]
mov qword [r9 + 0x40], r8
mov qword [r9 + 0x38], rax
mov eax, dword [rax + 4]
mov dword [r9 + 0x10], eax
call fcn.1800d3398
xor r9d, r9d
movss xmm8, dword [0x180090324]
mov dword [rbp - 0x40], r9d
cmp dword [rsi + 0x3f28], r14d
jne 0x1800ef4b5
mov eax, dword [rdi + 0x10]
mov ebx, dword [rbp + 0x1d8]
mov byte [rdi + 0xe86], r9b
mov dword [rdi + 0xe88], ebx
mov dword [rbp - 0x40], eax
mov eax, dword [rbp + 0x1c8]
mov dword [rdi + 0x4c], eax
cmp byte [rsi + 0xe10], r9b
mov dword [rsi + 0x5e0c], r15d
mov r15d, dword [rsp + 0x60]
sete al
mov byte [rsi + 0x3f35], al
movss xmm2, dword [rsi + 0xe08]
subss xmm2, xmm7
subss xmm2, dword [rsi + 0x3830]
addss xmm2, dword [rdi + 0x50]
test r15b, r15b
je 0x1800ef118
mov rax, qword [rbp - 0x70]
movss xmm3, dword [rsi + 0xe0c]
subss xmm3, dword [rax + 0x104]
jmp 0x1800ef125
movss xmm3, dword [rsi + 0x3c28]
mulss xmm3, xmm8
test r12b, r12b
je 0x1800ef14d
mov eax, dword [rdi + 0xc]
mov r12d, 1
mov byte [rdi + 0xe85], r12b
mov dword [rdi + 0x58], r9d
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r9b
jmp 0x1800ef2f0
mov al, byte [rsp + 0x5a]
test al, al
je 0x1800ef2a3
mov ecx, 2
cmp word [rsi + 0x3752], cx
jb 0x1800ef2a3
cmp byte [rsi + 0xe25], r9b
jne 0x1800ef2a3
lea r14, [rdi + 0x54]
mov rcx, rdi
mov rdx, r14
call fcn.1800eca90
mov r12d, 1
test byte [rsi + 0x3752], r12b
jne 0x1800ef232
xor edx, edx
cmp dword [r14], edx
je 0x1800ef1b7
movsxd rcx, dword [r14]
lea r8d, [r12 + 9]
mov rax, qword [rdi + 0x20]
cmp word [rax + rcx*2 - 2], r8w
mov cl, dl
jne 0x1800ef1ba
mov cl, r12b
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x1800ef1c6
test cl, cl
jne 0x1800ef1d3
mov edx, 0x20000c
mov rcx, rdi
call fcn.1800ee064
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x1800ef1ee
cmp dword [rdi + 0x58], eax
jne 0x1800ef1eb
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x1800ef1ee
mov dword [rdi + 0x54], eax
mov edx, dword [rdi + 0x54]
mov rcx, rdi
call fcn.1800ec62c
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x5c], eax
mov ecx, dword [rdi + 0x58]
mov edx, dword [rdi + 0x5c]
mov eax, dword [rdi + 0xc]
cmp ecx, edx
je 0x1800ef225
cmp ecx, eax
jle 0x1800ef215
mov dword [rdi + 0x58], eax
mov ecx, eax
cmp edx, eax
jle 0x1800ef21e
mov dword [rdi + 0x5c], eax
mov edx, eax
cmp ecx, edx
jne 0x1800ef225
mov dword [rdi + 0x54], ecx
xor r9d, r9d
cmp dword [rdi + 0x54], eax
jle 0x1800ef292
mov dword [rdi + 0x54], eax
jmp 0x1800ef292
movsxd rcx, dword [r14]
mov edx, 0x200004
mov rax, qword [rdi + 0x20]
movzx ebx, word [rax + rcx*2]
mov rcx, rdi
call fcn.1800ee064
mov edx, 0x600005
mov rcx, rdi
call fcn.1800ee064
mov edx, 0x600001
mov rcx, rdi
call fcn.1800ee064
mov eax, 0xa
xor r9d, r9d
cmp bx, ax
je 0x1800ef285
test r15b, r15b
je 0x1800ef285
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], ecx
mov dword [r14], ecx
mov ebx, dword [rbp + 0x1d8]
mov byte [rdi + 0xe84], r9b
mov r14d, dword [rsp + 0x64]
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x1800ef2f0
cmp byte [rsi + 0x3748], r9b
je 0x1800ef375
cmp byte [rdi + 0xe85], r9b
jne 0x1800ef375
test al, al
je 0x1800ef2ea
lea rdx, [rdi + 0x54]
mov rcx, rdi
cmp byte [rsi + 0xe25], r9b
je 0x1800ef2d8
call fcn.1800ecaf0
jmp 0x1800ef2dd
call fcn.1800eca90
mov dword [rdi + 0xe80], 0xbe99999a
xor r9d, r9d
mov r12d, 1
cmp byte [rdi + 0xe85], r9b
je 0x1800ef309
cmp byte [rsi + 0xe10], r9b
jne 0x1800ef309
mov byte [rdi + 0xe85], r9b
bt ebx, 0xa
jae 0x1800ef3d2
xor r8d, r8d
mov edx, r14d
mov ecx, 0x200
call fcn.1800d5894
mov ecx, dword [rsp + 0x5c]
xor r9d, r9d
lea r15d, [r9 + 2]
test al, al
je 0x1800ef3dc
test cl, cl
jne 0x1800ef3dc
mov edx, ebx
mov dword [rbp + 0x1e8], 9
lea rcx, [rbp + 0x1e8]
mov dword [rsp + 0x20], r15d
call fcn.1800ee090
xor r9d, r9d
test al, al
je 0x1800ef3d8
mov edx, dword [rbp + 0x1e8]
mov rcx, rdi
call fcn.1800ee064
xor r9d, r9d
jmp 0x1800ef3d8
cmp byte [rsi + 0xe10], r9b
je 0x1800ef2ea
cmp byte [rdi + 0xe85], r9b
jne 0x1800ef2ea
ucomiss xmm12, dword [rsi + 0xf8]
jne 0x1800ef3a7
ucomiss xmm12, dword [rsi + 0xfc]
je 0x1800ef2ea
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.1800ecaf0
mov r12d, 1
mov dword [rdi + 0xe80], 0xbe99999a
mov byte [rdi + 0xe84], r12b
xor r9d, r9d
jmp 0x1800ef2f0
mov r15d, 2
mov ecx, dword [rsp + 0x5c]
cmp byte [rsi + 0xe24], r9b
je 0x1800ef3ee
cmp byte [rsi + 0xe26], r9b
je 0x1800ef3fc
test r13b, r13b
je 0x1800ef401
cmp byte [rsi + 0xe27], r9b
je 0x1800ef401
mov al, r12b
jmp 0x1800ef404
mov al, r9b
cmp dword [rsi + 0x37c0], r9d
jle 0x1800ef4b2
test al, al
jne 0x1800ef485
test cl, cl
jne 0x1800ef485
cmp byte [rbp + 0x1e0], r9b
jne 0x1800ef485
mov r13d, dword [rbp + 0x1d8]
mov r14d, r9d
mov rbx, r9
mov rax, qword [rsi + 0x37c8]
movzx ecx, word [rax + rbx]
mov dword [rbp + 0x1e0], ecx
cmp ecx, 9
je 0x1800ef46e
mov edx, r13d
mov dword [rsp + 0x20], r15d
lea rcx, [rbp + 0x1e0]
call fcn.1800ee090
xor r9d, r9d
test al, al
je 0x1800ef471
mov edx, dword [rbp + 0x1e0]
mov rcx, rdi
call fcn.1800ee064
xor r9d, r9d
add r14d, r12d
add rbx, r15
cmp r14d, dword [rsi + 0x37c0]
jl 0x1800ef42f
mov r13b, byte [rsp + 0x69]
lea rbx, [rsi + 0x37c0]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x1800ef4af
mov eax, ecx
cdq
sub eax, edx
mov edx, r9d
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.1800dca9c
xor r9d, r9d
mov dword [rbx], r9d
mov ebx, dword [rbp - 0x74]
mov r12d, dword [rsp + 0x64]
mov r15b, r9b
mov byte [rbp + 0x1e0], r9b
cmp dword [rsi + 0x3f28], r12d
jne 0x1800effeb
cmp byte [rsi + 0x3f34], r9b
jne 0x1800effeb
cmp byte [rsp + 0x58], r9b
jne 0x1800effeb
movaps xmm0, xmm11
mov r15d, 1
subss xmm0, dword [rsi + 0x3834]
mov ecx, r15d
divss xmm0, dword [rsi + 0x3c28]
cvttss2si eax, xmm0
cmp eax, r15d
cmovge ecx, eax
mov dword [rdi + 0x64], ecx
mov al, byte [rsi + 0xe25]
neg al
mov dword [rsp + 0x70], ecx
sbb r14d, r14d
and r14d, 0x400000
test r13b, r13b
je 0x1800ef56a
mov al, byte [rsi + 0xe26]
mov byte [rbp + 0x1e8], al
cmp byte [rsi + 0xe27], r9b
je 0x1800ef576
mov byte [rbp + 0x1e8], al
cmp byte [rsi + 0xe24], r9b
jne 0x1800ef576
mov byte [rbp + 0x1e8], al
cmp al, r9b
jne 0x1800ef576
mov byte [rsp + 0x51], r15b
mov byte [rbp + 0x1e8], al
jmp 0x1800ef57b
mov al, byte [rsi + 0xe24]
mov byte [rbp + 0x1e8], al
mov byte [rsp + 0x51], r9b
mov r8d, r15d
mov edx, r12d
mov ecx, 0xa39
call fcn.1800d5894
xor ecx, ecx
test al, al
jne 0x1800ef5a7
mov r8d, r15d
mov edx, r12d
mov ecx, 0x220a
call fcn.1800d5894
xor ecx, ecx
test al, al
je 0x1800ef5cc
mov r15d, dword [rsp + 0x5c]
test r15b, r15b
jne 0x1800ef5d1
test bl, bl
mov ebx, dword [rsp + 0x60]
jne 0x1800ef5d5
test bl, bl
je 0x1800ef5c5
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x1800ef5d5
mov byte [rsp + 0x68], 1
jmp 0x1800ef5d9
mov r15d, dword [rsp + 0x5c]
mov ebx, dword [rsp + 0x60]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r12d
mov ecx, 0xa24
call fcn.1800d5894
test al, al
jne 0x1800ef601
xor r8d, r8d
mov edx, r12d
mov ecx, 0x1209
call fcn.1800d5894
test al, al
je 0x1800ef621
xor eax, eax
cmp byte [rbp - 0x74], al
jne 0x1800ef621
test bl, bl
je 0x1800ef614
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x1800ef621
mov eax, 1
xor ebx, ebx
mov byte [rsp + 0x6b], al
jmp 0x1800ef62a
xor ebx, ebx
mov byte [rsp + 0x6b], bl
lea eax, [rbx + 1]
mov r8d, eax
mov edx, r12d
mov ecx, 0xa37
call fcn.1800d5894
test al, al
jne 0x1800ef655
mov r8d, 1
mov edx, r12d
mov ecx, 0x2209
call fcn.1800d5894
test al, al
je 0x1800ef665
test r15b, r15b
jne 0x1800ef665
mov eax, 1
mov byte [rsp + 0x5a], al
jmp 0x1800ef66e
mov byte [rsp + 0x5a], bl
mov eax, 1
mov r8d, eax
mov edx, r12d
mov ecx, 0xa3b
call fcn.1800d5894
mov ebx, dword [rbp - 0x20]
test al, al
je 0x1800ef699
test r15b, r15b
jne 0x1800ef699
test bl, bl
je 0x1800ef699
mov eax, 1
mov byte [rsp + 0x6a], al
jmp 0x1800ef6a3
mov byte [rsp + 0x6a], 0
mov eax, 1
mov r8d, eax
mov edx, r12d
mov ecx, 0xa3a
call fcn.1800d5894
test al, al
jne 0x1800ef76e
test r13b, r13b
je 0x1800ef6de
mov r13d, 1
mov edx, r12d
mov r8d, r13d
mov ecx, 0x2a3b
call fcn.1800d5894
test al, al
jne 0x1800ef774
xor r15d, r15d
mov r13b, r15b
xor r8d, r8d
mov edx, r12d
mov ecx, 0xa22
call fcn.1800d5894
mov byte [rbp - 0x78], al
mov eax, 2
lea r12d, [rax - 1]
test byte [rsi + 8], al
je 0x1800ef70e
mov bl, r12b
test byte [rsi + 0xc], r12b
jne 0x1800ef711
mov bl, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.1800d3f64
test al, al
jne 0x1800ef73a
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.1800d3f64
test al, al
jne 0x1800ef73a
mov r12b, r15b
test bl, bl
je 0x1800ef78d
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.1800d3f64
test al, al
jne 0x1800ef764
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.1800d3f64
test al, al
je 0x1800ef78d
mov eax, 1
mov r15b, al
jmp 0x1800ef792
mov r13d, 1
test r15b, r15b
jne 0x1800ef6de
xor r15d, r15d
test bl, bl
je 0x1800ef6e1
jmp 0x1800ef6e4
mov eax, 1
mov edx, dword [rsp + 0x64]
mov r8d, eax
mov ecx, 0x20e
call fcn.1800d5894
xor ecx, ecx
test al, al
jne 0x1800ef7ce
test bl, bl
je 0x1800ef7c5
mov edx, dword [rsp + 0x64]
lea r8d, [rcx + 1]
mov ecx, 0x26c
call fcn.1800d5894
xor ecx, ecx
test al, al
jne 0x1800ef7ce
mov bl, cl
mov eax, 1
jmp 0x1800ef7d5
mov eax, 1
mov bl, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.1800d3f64
xor ecx, ecx
test al, al
je 0x1800ef820
neg byte [rbp + 0x1e8]
mov eax, 0x200004
sbb edx, edx
and edx, 0xc
add edx, 0x200000
cmp byte [rsp + 0x51], cl
cmovne edx, eax
or edx, r14d
mov rcx, rdi
call fcn.1800ee064
xor r9d, r9d
mov r10d, 1
jmp 0x1800effbd
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.1800d3f64
xor ecx, ecx
test al, al
je 0x1800ef84e
neg byte [rbp + 0x1e8]
mov eax, 0x200005
sbb edx, edx
and edx, 0xc
add edx, 0x200001
jmp 0x1800ef800
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.1800d3f64
xor r9d, r9d
test al, al
je 0x1800ef8bc
cmp byte [rsp + 0x60], r9b
je 0x1800ef8bc
cmp byte [rsi + 0xe24], r9b
je 0x1800ef8ab
mov r8, qword [rbp - 0x70]
movss xmm0, dword [r8 + 0x88]
subss xmm0, dword [rsi + 0x3c28]
mov dword [r8 + 0xa0], r9d
mov dword [r8 + 0xa8], r9d
maxss xmm0, xmm12
movss dword [r8 + 0x98], xmm0
jmp 0x1800ef815
movzx eax, byte [rsp + 0x51]
lea edx, [rax*4 + 0x200002]
jmp 0x1800ef807
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.1800d3f64
xor r9d, r9d
test al, al
je 0x1800ef939
cmp byte [rsp + 0x60], r9b
je 0x1800ef939
cmp byte [rsi + 0xe24], r9b
je 0x1800ef928
mov rdx, qword [rbp - 0x70]
movss xmm0, dword [rsi + 0x3c28]
mov rax, qword [0x18034aee0]
addss xmm0, dword [rdx + 0x88]
mov rcx, qword [rax + 0x3ec8]
minss xmm0, dword [rcx + 0x90]
mov dword [rdx + 0xa0], r9d
mov dword [rdx + 0xa8], r9d
movss dword [rdx + 0x98], xmm0
jmp 0x1800ef815
movzx eax, byte [rsp + 0x51]
lea edx, [rax*4 + 0x200003]
jmp 0x1800ef807
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.1800d3f64
xor ecx, ecx
test al, al
je 0x1800ef981
cmp byte [rsp + 0x60], cl
je 0x1800ef981
or r14d, 0x20000e
mov rcx, rdi
mov edx, r14d
call fcn.1800ee064
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0x3c28]
subss xmm6, xmm0
jmp 0x1800ef812
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.1800d3f64
xor ecx, ecx
test al, al
je 0x1800ef9c9
cmp byte [rsp + 0x60], cl
je 0x1800ef9c9
or r14d, 0x20000f
mov rcx, rdi
mov edx, r14d
call fcn.1800ee064
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0x3c28]
addss xmm6, xmm0
jmp 0x1800ef812
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.1800d3f64
test al, al
je 0x1800ef9f6
mov al, byte [rsi + 0xe24]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x1800ef807
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.1800d3f64
test al, al
je 0x1800efa19
mov al, byte [rsi + 0xe24]
neg al
mov eax, 0x200005
jmp 0x1800ef9ea
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.1800d3f64
xor ecx, ecx
test al, al
je 0x1800efa67
cmp byte [rsp + 0x5c], cl
jne 0x1800efa67
cmp byte [rsp + 0x68], cl
jne 0x1800efa67
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x1800efa58
cmp byte [rbp + 0x1e8], cl
je 0x1800efa58
mov edx, 0x60000d
mov rcx, rdi
call fcn.1800ee064
or r14d, 0x200008
mov edx, r14d
jmp 0x1800ef80a
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.1800d3f64
mov r8d, dword [rsp + 0x5c]
xor r9d, r9d
test al, al
je 0x1800efad8
test r8b, r8b
jne 0x1800efad8
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x1800efacf
cmp byte [rbp + 0x1e8], r9b
je 0x1800efaa0
mov edx, 0x60000c
jmp 0x1800efac7
cmp byte [rsp + 0x69], r9b
je 0x1800efacf
cmp byte [rsi + 0xe27], r9b
je 0x1800efacf
cmp byte [rsi + 0xe26], r9b
jne 0x1800efacf
cmp byte [rsi + 0xe24], r9b
jne 0x1800efacf
mov edx, 0x600004
mov rcx, rdi
call fcn.1800ee064
or r14d, 0x200009
jmp 0x1800efa5f
test r12b, r12b
jne 0x1800eff25
test r15b, r15b
jne 0x1800eff25
test bl, bl
je 0x1800efb4e
test dword [rbp + 0x1d8], 0x100000
je 0x1800efb28
mov eax, dword [rdi + 0x10]
test eax, eax
jg 0x1800efb12
mov byte [rsp + 0x54], r9b
mov byte [rbp + 0x1b8], r9b
mov byte [rsp + 0x58], 1
setg r15b
mov r10d, 1
mov byte [rbp + 0x1e0], r15b
jmp 0x1800effc4
mov r10d, 1
mov dl, r9b
mov r15b, r10b
mov byte [rbp + 0x1e0], r10b
mov byte [rsp + 0x58], r10b
mov cl, r9b
mov byte [rbp + 0x1b8], dl
jmp 0x1800effce
movzx eax, byte [rsp + 0x6a]
test al, al
jne 0x1800eff04
test r13b, r13b
jne 0x1800eff04
cmp byte [rbp - 0x78], r9b
je 0x1800efb8d
mov eax, dword [rdi + 0xc]
mov r10d, 1
mov byte [rdi + 0xe84], r10b
mov dword [rdi + 0x58], r9d
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r9b
jmp 0x1800effbd
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x1800efdb0
cmp byte [rsp + 0x6b], r9b
jne 0x1800efdb0
cmp byte [rsp + 0x5a], r9b
je 0x1800ef815
mov rax, qword [0x18034aee0]
mov rdx, qword [rax + 0xb0]
test rdx, rdx
je 0x1800efbe5
mov rcx, qword [rax + 0xc0]
call rdx
xor r9d, r9d
mov rbx, rax
test rax, rax
je 0x1800ef815
mov rax, qword [0x18034aee0]
jmp 0x1800efbec
lea rbx, [0x180025650]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r9b
jne 0x1800efbf0
test rax, rax
je 0x1800efc09
mov edx, 1
add dword [rax + 0xf4], edx
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r13d, r13d
mov qword [rsp + 0x70], rax
mov r12, rax
mov r15d, r13d
cmp byte [rbx], r13b
je 0x1800efc91
mov esi, dword [rbp + 0x1d8]
lea edi, [r13 + 1]
mov r14, rax
lea r12d, [r13 + 2]
xor r8d, r8d
lea rcx, [rbp + 0x1e8]
mov rdx, rbx
call fcn.1800c96b8
movsxd rcx, eax
mov edx, esi
add rbx, rcx
mov dword [rsp + 0x20], 4
lea rcx, [rbp + 0x1e8]
call fcn.1800ee090
test al, al
je 0x1800efc7f
movzx eax, word [rbp + 0x1e8]
add r15d, edi
mov word [r14], ax
add r14, r12
cmp byte [rbx], r13b
jne 0x1800efc3c
mov rdi, qword [rbp - 0x30]
mov rsi, qword [rbp + 0x30]
mov r12, qword [rsp + 0x70]
movsxd rax, r15d
mov word [r12 + rax*2], r13w
test r15d, r15d
jle 0x1800efd8b
mov ecx, dword [rdi + 0xc]
lea rbx, [rdi + 0x54]
mov eax, dword [rbx + 4]
mov r8d, dword [rbx + 8]
cmp eax, r8d
je 0x1800efcda
mov edx, eax
cmp eax, ecx
jle 0x1800efcc0
mov dword [rbx + 4], ecx
mov edx, ecx
mov r9d, r8d
cmp r8d, ecx
jle 0x1800efcce
mov dword [rbx + 8], ecx
mov r9d, ecx
mov eax, edx
mov r8d, r9d
cmp edx, r9d
jne 0x1800efcda
mov dword [rbx], edx
mov r9d, dword [rbx]
cmp r9d, ecx
jle 0x1800efce7
mov dword [rbx], ecx
mov r9d, ecx
mov ecx, dword [rdi + 0xc]
cmp eax, r8d
je 0x1800efd17
mov edx, eax
cmp eax, ecx
jle 0x1800efcfa
mov dword [rbx + 4], ecx
mov edx, ecx
mov r10d, r8d
cmp r8d, ecx
jle 0x1800efd08
mov dword [rbx + 8], ecx
mov r10d, ecx
mov eax, edx
mov r8d, r10d
cmp edx, r10d
jne 0x1800efd17
mov dword [rbx], edx
mov r9d, edx
cmp r9d, ecx
jle 0x1800efd1e
mov dword [rbx], ecx
cmp eax, r8d
je 0x1800efd58
mov rdx, rbx
mov rcx, rdi
jge 0x1800efd41
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.1800ecccc
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
jmp 0x1800efd52
sub eax, r8d
mov r9d, eax
call fcn.1800ecccc
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
mov dword [rbx], eax
mov byte [rbx + 0x16], r13b
mov edx, dword [rbx]
mov r9d, r15d
mov r8, r12
mov rcx, rdi
call fcn.1800ec7fc
test al, al
je 0x1800efd84
mov edx, dword [rbx]
lea rcx, [rbx + 0x20]
mov r9d, r15d
xor r8d, r8d
call fcn.1800eda2c
add dword [rbx], r15d
mov byte [rbx + 0x16], r13b
mov byte [rdi + 0xe84], 1
test r12, r12
je 0x1800efda2
mov rax, qword [0x18034aee0]
test rax, rax
je 0x1800efda2
dec dword [rax + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1800ef812
cmp qword [rsi + 0xb8], r9
je 0x1800efe57
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
cmp ecx, eax
je 0x1800efdd1
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x1800efdd7
mov eax, dword [rdi + 0xc]
mov edx, r9d
movsxd r15, eax
mov rax, qword [rdi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.1800c9ab8
mov edx, 1
lea r14d, [rdx + rax]
mov rax, qword [0x18034aee0]
test rax, rax
je 0x1800efe09
add dword [rax + 0xf4], edx
movsxd rcx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rdi + 0x20]
mov edx, r14d
mov rbx, rax
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov rcx, rax
call fcn.1800c9a18
mov rcx, rbx
call fcn.1800cbf00
test rbx, rbx
je 0x1800efe4b
mov rcx, qword [0x18034aee0]
test rcx, rcx
je 0x1800efe4b
dec dword [rcx + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
test r13b, r13b
je 0x1800ef815
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x1800efe79
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x58], r9d
mov byte [rdi + 0x6a], r9b
lea rbx, [rdi + 0x54]
mov r10d, 1
mov byte [rdi + 0xe84], r10b
mov eax, dword [rbx + 4]
mov r8d, dword [rbx + 8]
cmp eax, r8d
je 0x1800effbd
mov ecx, dword [rdi + 0xc]
cmp eax, ecx
jle 0x1800efea6
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x1800efeb1
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x1800efeb8
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x1800efebe
mov dword [rbx], ecx
cmp eax, r8d
je 0x1800efefb
mov rdx, rbx
mov rcx, rdi
jge 0x1800efee1
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.1800ecccc
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
jmp 0x1800efef2
sub eax, r8d
mov r9d, eax
call fcn.1800ecccc
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
xor r9d, r9d
mov dword [rbx], eax
lea r10d, [r9 + 1]
mov byte [rbx + 0x16], r9b
jmp 0x1800effbd
mov edx, eax
mov rcx, rdi
xor edx, 1
add edx, 0x20000a
call fcn.1800ee064
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x1800ef812
mov edx, dword [rbp + 0x1d8]
mov r10d, 1
mov ecx, dword [rsp + 0x60]
mov eax, edx
shr eax, 0xb
and al, r10b
test cl, cl
je 0x1800eff53
test r15b, r15b
jne 0x1800eff53
test al, al
je 0x1800eff75
cmp byte [rsi + 0xe24], r9b
jne 0x1800eff7e
mov byte [rsp + 0x59], r10b
cmp byte [rsi + 0x7c], r9b
je 0x1800effb8
test cl, cl
jne 0x1800effb8
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x58], r9d
mov byte [rdi + 0x6a], r9b
jmp 0x1800effbd
cmp byte [rsi + 0xe24], r9b
jne 0x1800eff53
test r8b, r8b
jne 0x1800effbd
mov eax, 0xa
mov dword [rsp + 0x20], 2
lea rcx, [rbp + 0x1e8]
mov dword [rbp + 0x1e8], eax
call fcn.1800ee090
xor r9d, r9d
test al, al
je 0x1800ef815
mov edx, dword [rbp + 0x1e8]
jmp 0x1800ef80a
mov byte [rsp + 0x58], r10b
mov r15b, byte [rbp + 0x1e0]
mov ecx, dword [rsp + 0x54]
mov dl, byte [rbp + 0x1b8]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x1800effdd
mov al, r10b
test dl, dl
jne 0x1800effe0
mov al, r9b
mov r12d, dword [rsp + 0x64]
or cl, al
mov dword [rsp + 0x54], ecx
mov r13d, r9d
mov qword [rsp + 0x70], r9
cmp dword [rsi + 0x3f28], r12d
jne 0x1800f054e
cmp byte [rsp + 0x5c], r9b
jne 0x1800f01b3
test r15b, r15b
je 0x1800f0162
test dword [rbp + 0x1d8], 0x100000
je 0x1800f0062
lea rax, [0x180025650]
mov dword [rsp + 0x20], r9d
mov r9d, dword [rdi + 0xc]
lea rdx, [rdi + 0x54]
xor r8d, r8d
mov qword [rsp + 0x70], rax
mov rcx, rdi
call fcn.1800edf74
mov r8d, dword [rdi + 0xc]
xor edx, edx
mov rcx, rdi
call fcn.1800ec770
xor r9d, r9d
mov qword [rdi + 0x58], r9
mov dword [rdi + 0x54], r9d
jmp 0x1800f0162
mov rax, qword [rbp + 0x1c0]
mov r10d, 1
mov r8, qword [rdi + 0x40]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800f0089
add rax, r10
test ecx, ecx
jne 0x1800f0076
test edx, edx
je 0x1800f0162
mov r13d, dword [rdi + 0x38]
xor eax, eax
mov r12, qword [rdi + 0x40]
sub r13d, r10d
mov qword [rsp + 0x70], r12
mov ebx, eax
mov byte [rsp + 0x50], r10b
mov r14d, eax
test r13d, r13d
jle 0x1800f0121
movsxd r15, r13d
mov rcx, r12
add r15, r12
mov rdx, r15
call fcn.1800c98f8
lea r8d, [r14 + 1]
xor edx, edx
lea ebx, [r8 + rax]
test ebx, ebx
jle 0x1800f0103
lea ecx, [rdx + 8]
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x1800f0103
mov rcx, qword [0x18034aee0]
test rcx, rcx
je 0x1800f00f2
add dword [rcx + 0xf4], r8d
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
xor edx, edx
mov qword [rsp + 0x20], rdx
mov r9, r15
mov edx, ebx
mov r8, r12
mov rcx, r14
call fcn.1800c9858
mov r15b, byte [rbp + 0x1e0]
xor eax, eax
lea ecx, [rbx - 1]
mov r9d, eax
test r13d, r13d
lea rdx, [rdi + 0x54]
mov r8, r14
cmovg r9d, ecx
mov rcx, rdi
call fcn.1800edfe0
test r14, r14
je 0x1800f015d
mov rax, qword [0x18034aee0]
test rax, rax
je 0x1800f0154
dec dword [rax + 0xf4]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r12d, dword [rsp + 0x64]
mov eax, dword [rdi + 0x18]
mov byte [rdi + 0x48], 1
mov ecx, dword [rdi + 0x2c]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x1800f019b
test ecx, ecx
je 0x1800f0186
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800f018b
mov eax, 8
cmp eax, ebx
lea rcx, [rdi + 0x28]
mov edx, ebx
cmovg edx, eax
call fcn.1800dca18
mov dword [rdi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x20]
mov edx, ebx
mov rcx, qword [rdi + 0x30]
call fcn.1800c9a18
xor r9d, r9d
test r15b, r15b
je 0x1800f0294
cmp byte [rsp + 0x59], r9b
je 0x1800f01d4
mov r15d, dword [rbp + 0x1d8]
test r15b, 0x20
jne 0x1800f029b
mov r12, qword [rbp + 0x1c0]
mov ebx, dword [rsp + 0x5c]
mov r10, qword [rsp + 0x70]
mov r11b, byte [rsp + 0x50]
mov r15d, dword [rsp + 0x64]
cmp dword [rsi + 0x5a68], r15d
jne 0x1800f056b
cmp dword [rsi + 0x3f28], r15d
je 0x1800f0564
mov r9, qword [0x18034aee0]
call fcn.1800ce8f0
xor ecx, ecx
test al, al
je 0x1800f0561
cmp byte [r9 + 0x3f5d], cl
jne 0x1800f0241
cmp dword [r9 + 0x3f28], ecx
jne 0x1800f0561
cmp byte [r9 + 0x3f38], cl
je 0x1800f0561
xor r9d, r9d
test bl, bl
jne 0x1800f0564
mov r10, qword [rsi + 0x5a78]
lea ebx, [r9 + 1]
mov r13d, dword [rsi + 0x5a70]
mov r8, r12
sub r13d, ebx
mov qword [rsp + 0x70], r10
sub r8, r10
mov rax, r10
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800f0282
add rax, rbx
test ecx, ecx
jne 0x1800f026f
test edx, edx
setne al
or r11b, al
mov byte [rsp + 0x50], r11b
jmp 0x1800f0564
mov r15d, dword [rbp + 0x1d8]
test r15d, 0x801c0
je 0x1800f04f9
mov ebx, 0x40
mov r14d, r9d
test bl, r15b
je 0x1800f02d0
mov edx, r12d
xor r8d, r8d
mov r12d, 0x200
mov ecx, r12d
call fcn.1800d5894
xor r9d, r9d
test al, al
jne 0x1800f0313
test r15b, r15b
jns 0x1800f0318
mov ebx, 1
mov r12d, 0x203
mov r8d, ebx
mov ecx, r12d
xor edx, edx
call fcn.1800d3f64
xor r9d, r9d
test al, al
jne 0x1800f030e
mov r12d, 0x204
mov r8d, ebx
mov ecx, r12d
xor edx, edx
call fcn.1800d3f64
xor r9d, r9d
test al, al
je 0x1800f0318
mov ebx, 0x80
mov r14d, r12d
jmp 0x1800f0339
mov ebx, 0x80000
test ebx, r15d
je 0x1800f032b
cmp byte [rdi + 0xe86], r9b
jne 0x1800f0339
mov eax, pe_nt_image_headers64
mov ebx, r9d
test eax, r15d
cmovne ebx, eax
test ebx, ebx
je 0x1800f04f9
mov rax, qword [rbp + 0x1c0]
mov dword [rbp + 8], r9d
mov word [rbp + 0x21], r9w
mov byte [rbp + 0x23], r9b
mov qword [rbp - 0x10], rsi
mov dword [rbp - 8], ebx
mov dword [rbp - 4], r15d
mov qword [rbp], r9
cmp byte [rsp + 0x5c], r9b
jne 0x1800f036f
mov rax, qword [rdi + 0x30]
mov r11, qword [rdi + 0x20]
mov qword [rbp + 0x10], rax
mov rcx, r11
mov eax, dword [rdi + 0x10]
mov dword [rbp + 0x18], eax
mov eax, dword [rdi + 0x4c]
mov dword [rbp + 0x1c], eax
movsxd rax, dword [rdi + 0x54]
mov dword [rbp + 0xc], r14d
mov byte [rbp + 0x20], r9b
lea rdx, [r11 + rax*2]
call fcn.1800c9ab8
movsxd rdx, dword [rdi + 0x58]
mov rcx, r11
mov ebx, eax
mov dword [rbp + 0x24], eax
lea rdx, [r11 + rdx*2]
call fcn.1800c9ab8
movsxd rdx, dword [rdi + 0x5c]
mov rcx, r11
mov dword [rbp + 0x1e0], eax
mov dword [rbp + 0x28], eax
lea rdx, [r11 + rdx*2]
call fcn.1800c9ab8
mov dword [rbp + 0x1e8], eax
lea rcx, [rbp - 0x10]
mov dword [rbp + 0x2c], eax
xor eax, eax
call rax
movsxd r12, dword [rbp + 0x24]
mov r14, qword [rbp + 0x10]
mov r15b, byte [rbp + 0x20]
cmp r12d, ebx
jne 0x1800f03f3
xor r9d, r9d
test r15b, r15b
je 0x1800f040c
lea rdx, [r14 + r12]
mov rcx, r14
call fcn.1800c98f8
mov dword [rdi + 0x54], eax
xor r9d, r9d
mov byte [rdi + 0xe84], 1
movsxd rbx, dword [rbp + 0x28]
cmp ebx, dword [rbp + 0x1e0]
jne 0x1800f041d
test r15b, r15b
je 0x1800f0439
cmp ebx, r12d
jne 0x1800f0427
mov eax, dword [rdi + 0x54]
jmp 0x1800f0433
lea rdx, [r14 + rbx]
mov rcx, r14
call fcn.1800c98f8
mov dword [rdi + 0x58], eax
xor r9d, r9d
movsxd rax, dword [rbp + 0x2c]
cmp eax, dword [rbp + 0x1e8]
jne 0x1800f044e
test r15b, r15b
je 0x1800f04f9
cmp eax, ebx
jne 0x1800f0457
mov eax, dword [rdi + 0x58]
jmp 0x1800f0466
lea rdx, [r14 + rax]
mov rcx, r14
call fcn.1800c98f8
xor r9d, r9d
mov dword [rdi + 0x5c], eax
test r15b, r15b
je 0x1800f04f9
mov r8d, dword [rbp + 0x18]
mov rdx, r14
mov rcx, rdi
call fcn.1800ee268
mov eax, dword [rbp - 0x40]
mov ebx, dword [rbp + 0x18]
cmp ebx, eax
jle 0x1800f04c9
xor edx, edx
cmp byte [rbp - 0x54], dl
je 0x1800f04c9
lea r14, [rdi + 0x18]
sub ebx, eax
add ebx, dword [r14]
mov ecx, dword [r14 + 4]
cmp ebx, ecx
jle 0x1800f04c6
test ecx, ecx
je 0x1800f04b2
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800f04b7
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, r14
cmovg edx, eax
call fcn.1800dca9c
mov dword [r14], ebx
mov r8, qword [rbp + 0x10]
xor eax, eax
mov edx, dword [rdi + 0x18]
xor r9d, r9d
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0x20], rax
call fcn.1800c9858
mov dword [rdi + 0xc], eax
xor r9d, r9d
mov eax, dword [rbp + 0x18]
mov dword [rdi + 0x10], eax
mov dword [rdi + 0xe80], 0xbe99999a
mov ebx, dword [rsp + 0x5c]
mov r12, qword [rbp + 0x1c0]
test bl, bl
jne 0x1800f01df
mov rax, qword [rdi + 0x30]
mov r8, r12
sub r8, rax
mov r11d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800f052f
add rax, r11
test ecx, ecx
jne 0x1800f051c
test edx, edx
je 0x1800f01df
mov r10, qword [rdi + 0x30]
mov r13d, dword [rdi + 0x10]
mov qword [rsp + 0x70], r10
mov byte [rsp + 0x50], r11b
jmp 0x1800f01e9
mov r12, qword [rbp + 0x1c0]
mov r10, r9
mov ebx, dword [rsp + 0x5c]
jmp 0x1800f01e4
xor r9d, r9d
mov dword [rsi + 0x5a68], r9d
test r10, r10
je 0x1800f061c
cmp byte [rbp - 0x54], r9b
je 0x1800f05e6
mov eax, dword [rbp + 0x1d8]
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x4c], eax
xorps xmm0, xmm0
lea eax, [r13 + 1]
mov qword [rbp + 0x58], r9
cmp dword [rbp + 0x1c8], eax
movdqa xmmword [rbp + 0x70], xmm0
cmovge eax, dword [rbp + 0x1c8]
mov dword [rbp + 0x6c], eax
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x48], 0x40000
mov qword [rbp + 0x60], r12
mov dword [rbp + 0x68], r13d
mov qword [rbp + 0x50], r9
call r9
mov ecx, dword [rbp + 0x6c]
mov r12, qword [rbp + 0x60]
mov r10, qword [rsp + 0x70]
mov qword [rbp + 0x1c0], r12
lea r13d, [rcx - 1]
cmp dword [rbp + 0x68], r13d
cmovl r13d, dword [rbp + 0x68]
xor r9d, r9d
jmp 0x1800f05ec
mov ecx, dword [rbp + 0x1c8]
lea eax, [r13 + 1]
cmp eax, ecx
cmovl ecx, eax
mov eax, 1
movsxd rbx, ecx
cmp rbx, rax
jb 0x1800f061c
jbe 0x1800f0617
lea r8, [rbx - 1]
mov rdx, r10
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r9d, r9d
mov byte [rbx + r12 - 1], r9b
cmp byte [rsp + 0x58], r9b
je 0x1800f0638
cmp dword [rsi + 0x3f28], r15d
jne 0x1800f0638
xor edx, edx
xor ecx, ecx
call fcn.1800cb9cc
xor r9d, r9d
mov r13d, dword [rsp + 0x60]
mov ebx, 1
test r13b, r13b
jne 0x1800f06b0
mov r8d, ebx
lea rcx, [rsp + 0x78]
mov edx, r15d
call fcn.1800caa70
mov rax, qword [0x18034aee0]
lea rcx, [rbp + 0x30]
movdqu xmm0, xmmword [rax + 0x3940]
movups xmmword [rbp + 0x30], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37f4]
movss dword [rbp + 0x3c], xmm0
call fcn.1800c9b90
movss xmm0, dword [rsi + 0x3838]
mov r8d, eax
mov rdx, qword [rbp - 0x80]
mov r9b, bl
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.1800ca7a4
xor r9d, r9d
mov r11, qword [rbp - 0x70]
movaps xmm0, xmm10
movss dword [rbp - 0x50], xmm7
movaps xmm1, xmm9
movss dword [rbp - 0x4c], xmm9
addss xmm0, xmm7
addss xmm1, xmm11
lea rax, [rbp + 0x1e0]
movss dword [rbp - 0x48], xmm0
movss dword [rbp - 0x44], xmm1
test r13b, r13b
je 0x1800f06f9
movsd xmm0, qword [r11 + 0x100]
movsd qword [rbp + 0x1e0], xmm0
jmp 0x1800f071d
addss xmm7, dword [rsi + 0x3830]
movaps xmm0, xmm9
addss xmm0, dword [rsi + 0x3834]
movss dword [rbp + 0x1e0], xmm7
movss dword [rbp + 0x1e4], xmm0
movaps xmm14, xmm12
movsd xmm0, qword [rax]
movsd qword [rbp - 0x60], xmm0
movss dword [rbp + 0x1e0], xmm12
cmp byte [rsp + 0x6c], r9b
je 0x1800f0745
mov r12, qword [rdi + 0x30]
mov qword [rbp + 0x1c0], r12
mov r10b, byte [rbp + 0x1b8]
mov r8d, dword [rsp + 0x54]
test r10b, r10b
jne 0x1800f0874
test r8b, r8b
jne 0x1800f0874
test r13b, r13b
je 0x1800f07c0
mov dl, byte [r12]
lea r14, [r12 + 1]
mov ecx, r9d
test dl, dl
je 0x1800f0793
mov r8d, 0xa
cmp dl, r8b
lea eax, [rcx + 1]
mov dl, byte [r14]
cmovne eax, ecx
add r14, rbx
mov ecx, eax
test dl, dl
jne 0x1800f077e
sub r14, rbx
mov eax, 0xa
cmp byte [r14], al
je 0x1800f07a8
cmp byte [r14], 0xd
je 0x1800f07a8
add ecx, ebx
movd xmm14, ecx
movaps xmm6, xmm10
cvtdq2ps xmm14, xmm14
mulss xmm14, dword [rsi + 0x3c28]
jmp 0x1800f07f9
cmp dword [rsi + 0x3f28], r15d
jne 0x1800f07cf
movsxd r14, dword [rdi + 0x10]
jmp 0x1800f07dc
or r14, 0xffffffffffffffff
inc r14
cmp byte [r12 + r14], r9b
jne 0x1800f07d3
movss xmm6, dword [rbp + 0x1e0]
add r14, r12
mov rax, r14
sub rax, r12
cmp rax, 0x200000
jge 0x1800f1054
mov rax, qword [0x18034aee0]
lea r8, [rbp - 0x50]
test r13b, r13b
lea rcx, [rsp + 0x78]
cmovne r8, r9
movdqu xmm0, xmmword [rax + 0x38d0]
movups xmmword [rsp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37f4]
movss dword [rbp - 0x7c], xmm0
call fcn.1800c9b90
movss xmm2, dword [rsi + 0x3c28]
lea r9, [rbp - 0x60]
mov rdx, qword [rsi + 0x3c20]
mov rcx, qword [r11 + 0x298]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm12
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], eax
call fcn.1800e20fc
xor r9d, r9d
jmp 0x1800f1054
movsxd r14, dword [rdi + 0x10]
xor r11d, r11d
add r14, r12
mov edx, 0xfffffc18
mov r12, qword [rdi + 0x20]
movaps xmm9, xmm12
mov qword [rsp + 0x70], r14
movaps xmm7, xmm12
mov r13d, r11d
mov r15d, edx
mov ecx, r11d
test r10b, r10b
je 0x1800f08af
movsxd rax, dword [rdi + 0x54]
or edx, 0xffffffff
mov ecx, ebx
lea r9, [r12 + rax*2]
test r8b, r8b
je 0x1800f08ca
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
or r15d, 0xffffffff
cdqe
add ecx, ebx
lea r13, [r12 + rax*2]
movzx eax, byte [rsp + 0x60]
mov ebx, r11d
movzx r8d, word [r12]
add ecx, eax
mov rax, r12
mov r10d, 0xa
test r8w, r8w
je 0x1800f0937
lea edi, [r10 - 8]
lea r14d, [r10 - 9]
cmp r8w, r10w
jne 0x1800f0921
add ebx, r14d
cmp edx, 0xffffffff
jne 0x1800f090c
cmp rax, r9
jb 0x1800f090c
sub ecx, r14d
mov edx, ebx
test ecx, ecx
jle 0x1800f092e
cmp r15d, 0xffffffff
jne 0x1800f0921
cmp rax, r13
jb 0x1800f0921
sub ecx, r14d
mov r15d, ebx
test ecx, ecx
jle 0x1800f092e
add rax, rdi
movzx r8d, word [rax]
test r8w, r8w
jne 0x1800f08f0
mov rdi, qword [rbp - 0x30]
mov r14, qword [rsp + 0x70]
inc ebx
mov r8, r9
cmp edx, 0xffffffff
mov eax, ebx
cmovne eax, edx
cmp r15d, 0xffffffff
mov dword [rbp + 0x1e8], eax
cmove r15d, ebx
cmp r9, r12
jbe 0x1800f0969
lea rax, [r8 - 2]
cmp word [rax], r10w
je 0x1800f0969
mov r8, rax
cmp rax, r12
ja 0x1800f0957
mov byte [rsp + 0x30], r11b
lea rcx, [rbp + 0x30]
mov rdx, rsi
mov qword [rsp + 0x20], r11
call fcn.1800ec3b4
movd xmm15, dword [rbp + 0x1e8]
xor r9d, r9d
movss xmm5, dword [rsi + 0x3c28]
cvtdq2ps xmm15, xmm15
movss xmm13, dword [rax]
mulss xmm15, xmm5
movss dword [rbp - 0x54], xmm13
test r15d, r15d
js 0x1800f09fe
mov r8, r13
cmp r13, r12
jbe 0x1800f09c9
lea ecx, [r9 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x1800f09c9
mov r8, rax
cmp rax, r12
ja 0x1800f09b8
mov byte [rsp + 0x30], r9b
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x20], r9
mov rdx, rsi
mov r9, r13
call fcn.1800ec3b4
movss xmm5, dword [rsi + 0x3c28]
xor r9d, r9d
movd xmm7, r15d
cvtdq2ps xmm7, xmm7
movss xmm9, dword [rax]
mulss xmm7, xmm5
mov r13d, dword [rsp + 0x60]
test r13b, r13b
je 0x1800f0a1f
movd xmm14, ebx
cvtdq2ps xmm14, xmm14
movss dword [rbp + 0x1e0], xmm10
mulss xmm14, xmm5
mov r15b, byte [rbp + 0x1b8]
test r15b, r15b
je 0x1800f0b46
cmp byte [rdi + 0xe84], r9b
je 0x1800f0b46
test dword [rbp + 0x1d8], 0x1000
jne 0x1800f0a98
comiss xmm13, dword [rdi + 0x50]
movaps xmm1, xmm10
movaps xmm0, xmm13
mulss xmm1, dword [0x1800902e8]
subss xmm10, dword [rsi + 0x3830]
jae 0x1800f0a77
subss xmm0, xmm1
maxss xmm0, xmm12
cvttss2si eax, xmm0
jmp 0x1800f0a8a
subss xmm0, xmm10
comiss xmm0, dword [rdi + 0x50]
jb 0x1800f0a9c
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
jmp 0x1800f0a9c
mov dword [rdi + 0x50], r9d
test r13b, r13b
je 0x1800f0b3f
movaps xmm0, xmm15
subss xmm0, dword [rsi + 0x3c28]
comiss xmm0, xmm6
jae 0x1800f0ac0
movaps xmm6, xmm0
maxss xmm6, xmm12
jmp 0x1800f0aee
movss xmm2, dword [rsi + 0x3834]
movaps xmm1, xmm11
addss xmm2, xmm2
movaps xmm0, xmm15
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x1800f0aee
movaps xmm6, xmm15
subss xmm6, xmm11
addss xmm6, xmm2
comiss xmm6, xmm12
movss xmm2, dword [rsi + 0x3834]
jae 0x1800f0b02
movaps xmm2, xmm12
jmp 0x1800f0b19
addss xmm2, xmm2
addss xmm2, xmm14
subss xmm2, xmm11
maxss xmm2, xmm12
minss xmm2, xmm6
movss xmm1, dword [rbp - 0x5c]
mov rax, qword [rbp - 0x70]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
addss xmm1, xmm0
movss dword [rbp - 0x5c], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rdi + 0xe84], r9b
movss xmm10, dword [rdi + 0x50]
movss xmm11, dword [0x18009037c]
cmp byte [rsp + 0x54], r9b
je 0x1800f0dd6
mov edx, dword [rdi + 0x5c]
mov eax, edx
mov ecx, dword [rdi + 0x58]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea r8, [r12 + rax*2]
movsxd rax, edx
lea rbx, [r12 + rax*2]
test r15b, r15b
je 0x1800f0b88
movaps xmm1, xmm11
jmp 0x1800f0b90
movss xmm1, dword [0x18009032c]
mov rax, qword [0x18034aee0]
lea rcx, [rsp + 0x78]
movdqu xmm0, xmmword [rax + 0x3bc0]
mulss xmm1, dword [rax + 0x37f4]
movups xmmword [rsp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x7c], xmm0
call fcn.1800c9b90
mov r15d, eax
test r13b, r13b
je 0x1800f0bd3
movss dword [rbp - 0x68], xmm12
jmp 0x1800f0bdc
movss xmm12, dword [0x1800903b8]
movss xmm6, dword [rbp - 0x5c]
mov qword [rbp + 0x1e8], r8
addss xmm6, xmm7
addss xmm9, dword [rbp - 0x60]
subss xmm9, xmm10
cmp r8, rbx
jae 0x1800f0dcb
movss xmm3, dword [rbp - 0x44]
xorps xmm11, xmm11
movss xmm7, dword [rbp - 0x4c]
xor r14d, r14d
movss xmm13, dword [rbp - 0x68]
mov r13, qword [rbp - 0x70]
movaps xmm0, xmm3
addss xmm0, dword [rsi + 0x3c28]
comiss xmm6, xmm0
ja 0x1800f0dab
comiss xmm6, xmm7
jae 0x1800f0c64
cmp r8, rbx
jae 0x1800f0d8f
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rbp + 0x1e8], r8
cmp ax, cx
je 0x1800f0d8f
cmp r8, rbx
jb 0x1800f0c42
jmp 0x1800f0d8f
lea rax, [rbp + 0x1e8]
mov byte [rsp + 0x30], 1
mov r9, rbx
mov qword [rsp + 0x20], rax
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.1800ec3b4
movss xmm5, dword [rbp - 0x40]
comiss xmm5, xmm11
ja 0x1800f0cc3
mov rax, qword [rsi + 0x3c20]
cmp dword [rax], 0x20
jle 0x1800f0ca9
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x1800f0cae
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm5, eax
cvtdq2ps xmm5, xmm5
movss dword [rbp - 0x40], xmm5
movss xmm7, dword [rbp - 0x4c]
movaps xmm0, xmm9
movss xmm8, dword [rbp - 0x50]
addss xmm0, xmm5
movss xmm3, dword [rbp - 0x44]
movaps xmm2, xmm13
subss xmm2, dword [rsi + 0x3c28]
movaps xmm5, xmm8
movaps xmm1, xmm12
maxss xmm5, xmm9
movss xmm9, dword [rbp - 0x48]
addss xmm1, xmm6
movaps xmm4, xmm9
minss xmm4, xmm0
movaps xmm0, xmm3
addss xmm2, xmm6
movss dword [rsp + 0x78], xmm5
minss xmm0, xmm1
movss dword [rbp - 0x80], xmm4
maxss xmm2, xmm7
comiss xmm7, xmm0
movss dword [rsp + 0x7c], xmm2
movss dword [rbp - 0x7c], xmm0
jae 0x1800f0d7f
comiss xmm3, xmm2
jbe 0x1800f0d7f
comiss xmm8, xmm4
jae 0x1800f0d7f
comiss xmm9, xmm5
jbe 0x1800f0d7f
mov rcx, qword [r13 + 0x298]
lea r8, [rbp - 0x80]
mov dword [rsp + 0x28], r14d
lea rdx, [rsp + 0x78]
mov r9d, r15d
movss dword [rsp + 0x20], xmm11
call fcn.1800e09bc
movss xmm1, dword [rbp - 0x68]
movss xmm3, dword [rbp - 0x44]
movss xmm7, dword [rbp - 0x4c]
movss dword [rbp - 0x68], xmm1
movss xmm13, dword [rbp - 0x68]
movss xmm8, dword [0x180090324]
mov r8, qword [rbp + 0x1e8]
movss xmm9, dword [rbp - 0x60]
subss xmm9, xmm10
addss xmm6, dword [rsi + 0x3c28]
cmp r8, rbx
jb 0x1800f0c1b
movss xmm11, dword [0x18009037c]
xor r9d, r9d
movss xmm13, dword [rbp - 0x54]
mov rdi, qword [rbp - 0x30]
mov r14, qword [rsp + 0x70]
mov r13d, dword [rsp + 0x60]
mov r15b, byte [rbp + 0x1b8]
xorps xmm12, xmm12
mov r12, qword [rbp + 0x1c0]
test r13b, r13b
jne 0x1800f0df4
mov rax, r14
sub rax, r12
cmp rax, 0x200000
jge 0x1800f0e92
mov rax, qword [0x18034aee0]
lea r8, [rbp - 0x50]
test r13b, r13b
lea rcx, [rsp + 0x78]
cmovne r8, r9
movdqu xmm0, xmmword [rax + 0x38d0]
movups xmmword [rsp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37f4]
movss dword [rbp - 0x7c], xmm0
movss xmm0, dword [rbp - 0x60]
subss xmm0, xmm10
movss dword [rbp + 0x1b8], xmm0
movss xmm0, dword [rbp - 0x5c]
movss dword [rbp + 0x1bc], xmm0
call fcn.1800c9b90
mov rbx, qword [rbp - 0x70]
lea r9, [rbp + 0x1b8]
movss xmm2, dword [rsi + 0x3c28]
mov rdx, qword [rsi + 0x3c20]
mov qword [rsp + 0x40], r8
mov rcx, qword [rbx + 0x298]
movss dword [rsp + 0x38], xmm12
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], eax
call fcn.1800e20fc
xor r9d, r9d
jmp 0x1800f0e96
mov rbx, qword [rbp - 0x70]
test r15b, r15b
je 0x1800f1035
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], r9b
je 0x1800f0ee2
comiss xmm0, xmm12
jbe 0x1800f0ee2
movss xmm1, dword [0x180090394]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
xor r9d, r9d
comiss xmm0, dword [0x180090344]
jbe 0x1800f0ee2
mov cl, r9b
lea edi, [r9 + 1]
jmp 0x1800f0eea
mov edi, 1
mov cl, dil
movss xmm0, dword [rbp - 0x5c]
addss xmm0, xmm15
addss xmm13, dword [rbp - 0x60]
subss xmm13, xmm10
cvttss2si eax, xmm13
movd xmm6, eax
cvtdq2ps xmm6, xmm6
cvttss2si eax, xmm0
movss dword [rsp + 0x78], xmm6
movaps xmm3, xmm6
addss xmm3, xmm11
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x80], xmm3
movaps xmm1, xmm7
movaps xmm2, xmm7
subss xmm1, dword [rsi + 0x3c28]
subss xmm2, dword [0x1800903ac]
addss xmm1, xmm8
movss dword [rbp - 0x7c], xmm2
movss dword [rsp + 0x7c], xmm1
test cl, cl
je 0x1800f0fe5
movss xmm0, dword [rbp - 0x4c]
comiss xmm0, xmm2
jae 0x1800f0fe5
movss xmm0, dword [rbp - 0x44]
comiss xmm0, xmm1
jbe 0x1800f0fe5
movss xmm0, dword [rbp - 0x50]
comiss xmm0, xmm3
jae 0x1800f0fe5
movss xmm0, dword [rbp - 0x48]
comiss xmm0, xmm6
jbe 0x1800f0fe5
mov rax, qword [0x18034aee0]
lea rcx, [rbp - 0x30]
movss dword [rbp + 0x1b8], xmm6
movss dword [rbp + 0x1bc], xmm2
movdqu xmm0, xmmword [rax + 0x38d0]
movups xmmword [rbp - 0x30], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37f4]
movss dword [rbp - 0x24], xmm0
call fcn.1800c9b90
mov rcx, qword [rbx + 0x298]
lea rdx, [rsp + 0x78]
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x1b8]
call fcn.1800e0770
xor r9d, r9d
movss xmm9, dword [rbp - 0x64]
movss xmm13, dword [rbp - 0x58]
movss xmm15, dword [rbp - 0x38]
mov r15d, dword [rsp + 0x64]
cmp byte [rsp + 0x5c], r9b
jne 0x1800f104c
movss xmm0, dword [rsi + 0x3c28]
subss xmm6, xmm11
subss xmm7, xmm0
movss dword [rsi + 0x5ba4], xmm0
mov byte [rsi + 0x5b98], dil
movss dword [rsi + 0x5b9c], xmm6
movss dword [rsi + 0x5ba0], xmm7
jmp 0x1800f104c
movss xmm9, dword [rbp - 0x64]
movss xmm13, dword [rbp - 0x58]
movss xmm15, dword [rbp - 0x38]
mov r15d, dword [rsp + 0x64]
movss xmm6, dword [rbp + 0x1e0]
mov ebx, dword [rbp - 0x74]
test bl, bl
je 0x1800f1063
call fcn.1800d3410
xor r9d, r9d
test r13b, r13b
je 0x1800f10f0
addss xmm14, dword [rsi + 0x3834]
lea rcx, [rbp + 0x1b8]
movss dword [rbp + 0x1b8], xmm6
movss dword [rbp + 0x1bc], xmm14
call fcn.1800e9fac
mov ebx, dword [rsi + 0x4748]
mov eax, ebx
or eax, 0x401
mov dword [rsi + 0x4748], eax
call fcn.1800ceb64
mov eax, dword [rsi + 0x476c]
mov edi, dword [rbp + 0x88]
and eax, 0x80
or edi, eax
mov dword [rsi + 0x4748], ebx
call fcn.1800d60f4
mov ebx, dword [rbp - 0x74]
xor r9d, r9d
cmp dword [rsi + 0x4764], r9d
jne 0x1800f10f0
mov eax, dword [rbp + 0x84]
mov dword [rsi + 0x4768], eax
mov dword [rsi + 0x4764], r15d
mov dword [rsi + 0x476c], edi
cmp byte [rsi + 0x5c50], r9b
je 0x1800f112f
test bl, bl
jne 0x1800f112f
mov rax, qword [0x18034aee0]
lea rcx, [0x18002576c]
mov r8, r14
mov rdx, r12
mov qword [rax + 0x5c70], rcx
lea rcx, [0x180025768]
mov qword [rax + 0x5c78], rcx
lea rcx, [rbp - 0x60]
call fcn.1800daa84
comiss xmm15, xmm12
jbe 0x1800f1165
addss xmm13, dword [rsi + 0x3848]
addss xmm9, dword [rsi + 0x3834]
mov rdx, qword [rbp + 0x1b0]
mov r9d, 1
xor r8d, r8d
unpcklps xmm13, xmm9
movq rcx, xmm13
call fcn.1800ca33c
movzx r9d, byte [rsp + 0x50]
mov r8d, dword [rbp + 0x1d8]
test r9b, r9b
je 0x1800f1186
bt r8d, 0x1b
jb 0x1800f1186
mov ecx, r15d
call fcn.1800cbb28
movzx ecx, byte [rsp + 0x59]
test r8b, 0x20
mov eax, r9d
cmovne eax, ecx
jmp 0x1800ee745