Function at 0x18004c290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x210
mov rbx, qword [0x18008b9c0]
mov r14, rcx
movaps xmmword [rax - 0x58], xmm6
mov r13, rbx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
mov rax, qword [rbx + 0x1af0]
mov qword [rsp + 0x70], rbx
mov byte [rax + 0x80], 1
mov r15, qword [rbx + 0x1af0]
cmp byte [r15 + 0x83], 0
jne 0x18004c575
mov ecx, dword [rbp + 0x178]
mov eax, ecx
shr eax, 0xe
mov esi, ecx
and al, 1
shr esi, 0x14
mov dword [rsp + 0x68], eax
and sil, 1
mov eax, ecx
mov dword [rsp + 0x64], esi
shr eax, 0xf
and al, 1
mov dword [rbp - 0x6c], eax
mov eax, ecx
shr eax, 0x10
not al
and al, 1
mov dword [rbp - 0x60], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rbp - 0x74], eax
test sil, sil
je 0x18004c36c
call fcn.180030440
mov rbx, qword [0x18008b9c0]
movsxd rax, dword [r15 + 0xc0]
xor edx, edx
mov r8, qword [r15 + 0xc8]
mov rcx, r14
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180025210
mov edi, eax
mov dword [rbp - 0x70], eax
cmp dword [rbx + 0x1b38], eax
jne 0x18004c39c
mov dword [rbx + 0x1b3c], eax
cmp dword [rbx + 0x1b78], edi
jne 0x18004c3ab
mov byte [rbx + 0x1b7c], 1
mov rcx, r14
cmp r14, 0xffffffffffffffff
jae 0x18004c3d1
movzx edx, byte [rcx]
test dl, dl
je 0x18004c3d1
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x18004c3c8
cmp byte [rax], dl
je 0x18004c3d1
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x18004c3b4
movss xmm0, dword [rbx + 0x19a8]
xorps xmm7, xmm7
movss xmm12, dword [0x180067984]
cmp r14, rcx
jne 0x18004c3f0
xorps xmm8, xmm8
jmp 0x18004c43c
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 0x158]
mov rcx, qword [rbx + 0x19a0]
movaps xmm2, xmm0
mov qword [rsp + 0x28], r14
movss dword [rsp + 0x20], xmm12
call fcn.180043680
movss xmm0, dword [rbp + 0x158]
addss xmm0, dword [0x180067788]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x15c]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
movss dword [rbp - 0x1c], xmm8
test sil, sil
je 0x18004c458
movss xmm0, dword [r13 + 0x19a8]
mulss xmm0, dword [0x180067840]
movss xmm6, dword [r13 + 0x1594]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18002fac0
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0x158]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18002fb30
comiss xmm8, xmm7
jbe 0x18004c49f
movaps xmm2, xmm8
addss xmm2, dword [r13 + 0x15a8]
jmp 0x18004c4a2
xorps xmm2, xmm2
movss xmm4, dword [r15 + 0xd4]
mov ebx, 1
movss xmm3, dword [r15 + 0xd0]
movaps xmm0, xmm4
movss xmm8, dword [rbp + 0x15c]
movaps xmm1, xmm3
movss xmm10, dword [rbp + 0x158]
addss xmm0, xmm8
movss dword [rsp + 0x78], xmm3
addss xmm2, xmm10
movss dword [rsp + 0x7c], xmm4
addss xmm1, xmm10
movss dword [rbp - 0x38], xmm3
movss dword [rbp - 0x34], xmm4
movss dword [rbp - 0x7c], xmm0
movaps xmm0, xmm4
mov qword [rbp - 0x48], r15
addss xmm0, xmm8
movss dword [rbp - 0x80], xmm1
addss xmm2, xmm3
movss dword [rbp - 0x2c], xmm0
movss dword [rbp - 0x30], xmm2
test sil, sil
je 0x18004c6ce
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x38]
call fcn.180027db0
test al, al
jne 0x18004c5b0
movss xmm1, dword [rbp - 0x2c]
lea rcx, [rbp + 0x158]
subss xmm1, dword [rbp - 0x34]
movss xmm0, dword [rbp - 0x30]
subss xmm0, dword [rbp - 0x38]
movss dword [rbp + 0x15c], xmm1
movss xmm1, dword [r13 + 0x1594]
movss dword [rbp + 0x158], xmm0
call fcn.180027c90
call fcn.180030560
xor al, al
lea r11, [rsp + 0x210]
movaps xmm6, xmmword [r11 - 0x20]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm9, xmmword [r11 - 0x50]
movaps xmm10, xmmword [r11 - 0x60]
movaps xmm11, xmmword [r11 - 0x70]
movaps xmm12, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [r13 + 0x170c]
mov ecx, 3
call fcn.18002fde0
movss xmm1, dword [r13 + 0x1598]
mov ecx, 6
call fcn.18002fe40
movss xmm1, dword [r13 + 0x159c]
mov ecx, 7
call fcn.18002fe40
lea rdx, [r13 + 0x1590]
mov ecx, ebx
call fcn.18002fec0
movss xmm6, dword [rbp - 0x80]
lea r8, [rbp + 0x158]
movss xmm9, dword [rsp + 0x78]
movaps xmm0, xmm6
movss xmm1, dword [rbp - 0x7c]
subss xmm0, xmm9
movss xmm11, dword [rsp + 0x7c]
movzx r9d, bl
subss xmm1, xmm11
movss dword [rbp - 0x18], xmm6
mov edx, edi
movss dword [rbp - 0x20], xmm9
mov rcx, r14
movss dword [rbp - 0x40], xmm11
movss dword [rbp + 0x158], xmm0
mov dword [rsp + 0x20], 0x10004
movss dword [rbp + 0x15c], xmm1
call fcn.18002a9b0
mov ecx, 3
movzx ebx, al
call fcn.18002ff50
mov r9, qword [0x18008b9c0]
movsxd rcx, dword [r9 + 0x1c10]
mov rdx, qword [r9 + 0x1c18]
lea r8, [rcx + rcx*4]
movsxd rcx, dword [rdx + r8*4 - 0x14]
movups xmm0, xmmword [rdx + r8*4 - 0x10]
add rcx, rcx
movups xmmword [r9 + rcx*8 + 0x160c], xmm0
dec dword [r9 + 0x1c10]
test bl, bl
jne 0x18004c6aa
call fcn.18002ac40
jmp 0x18004c570
mov rbx, qword [r13 + 0x1af0]
mov qword [rbp - 0x48], rbx
mov eax, dword [rbx + 0x140]
or dword [rbx + 0x148], eax
subss xmm10, dword [rbx + 0x74]
mov ebx, 1
jmp 0x18004c731
subss xmm2, xmm3
movaps xmm1, xmm6
subss xmm0, xmm4
lea rcx, [rbp + 0x158]
movss dword [rbp + 0x158], xmm2
movss dword [rbp + 0x15c], xmm0
call fcn.180027c90
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, [rbp - 0x38]
call fcn.180027db0
test al, al
je 0x18004c575
movss xmm0, dword [rbp - 0x80]
movss xmm11, dword [rsp + 0x7c]
movss xmm9, dword [rsp + 0x78]
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x40], xmm11
movss dword [rbp - 0x20], xmm9
mov edx, edi
lea rcx, [rsp + 0x78]
call fcn.180027fd0
mov byte [rbp - 0x76], al
movzx r11d, al
test al, al
je 0x18004c74f
mov dword [r13 + 0x1f78], ebx
xor eax, eax
lea r14, [r13 + 0x2070]
cmp dword [r14], edi
mov rbx, r14
mov edx, edi
mov rcx, r15
cmovne rbx, rax
mov qword [rsp + 0x58], rbx
call fcn.180028110
movzx esi, al
test al, al
je 0x18004c7bb
cmp qword [r13 + 0x1da0], r15
jne 0x18004c7bb
mov ecx, dword [r15 + 0x1b0]
cmp dword [r13 + 0x1db0], ecx
jne 0x18004c7bb
mov byte [rbp + 0x158], 1
mov byte [rbp + 0x188], 0
mov qword [rsp + 0x208], r12
test r11b, r11b
je 0x18004c7d7
cmp byte [r13 + 0x420], 0
je 0x18004c7d7
mov r12b, 1
jmp 0x18004c7da
mov byte [rbp + 0x158], 0
test sil, sil
je 0x18004c798
mov byte [rbp + 0x188], 1
mov byte [rbp + 0x158], 0
jmp 0x18004c79f
xor r12b, r12b
mov edi, dword [r13 + 0x1b38]
mov eax, dword [rbp - 0x70]
mov byte [rsp + 0x50], r12b
cmp edi, eax
je 0x18004c80e
cmp dword [r13 + 0x1c7c], eax
je 0x18004c809
cmp dword [r13 + 0x1c70], eax
jne 0x18004c80e
cmp dword [r13 + 0x1c90], 3
jne 0x18004c80e
mov r13b, 1
jmp 0x18004c811
xor r13b, r13b
mov eax, dword [rsp + 0x64]
mov byte [rbp - 0x78], r13b
test al, al
je 0x18004c860
test rbx, rbx
je 0x18004c860
test edi, edi
jne 0x18004c860
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180025210
mov rcx, qword [rsp + 0x70]
cmp dword [rcx + 0x1b78], eax
jne 0x18004c85c
mov bl, 1
jmp 0x18004c86e
mov eax, dword [rsp + 0x64]
xor bl, bl
test al, al
je 0x18004c89b
cmp qword [rsp + 0x58], 0
je 0x18004c89b
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180025210
cmp edi, eax
jne 0x18004c89b
mov al, 1
jmp 0x18004c89d
xor al, al
mov byte [rsp + 0x60], al
mov byte [rbp + 0x180], 0
cmp edi, dword [rbp - 0x70]
je 0x18004c8c8
mov ecx, dword [rbp + 0x178]
test cl, 0x10
jne 0x18004c8bd
test r13b, r13b
je 0x18004c8c8
cmp byte [rsp + 0x64], 0
mov byte [rbp - 0x50], 1
je 0x18004c8cc
mov byte [rbp - 0x50], 0
test sil, sil
jne 0x18004c9f5
test r12b, r12b
jne 0x18004c9f5
test bl, bl
jne 0x18004c9f5
test r13b, r13b
jne 0x18004c9f5
test al, al
jne 0x18004c9f8
mov rbx, qword [rsp + 0x58]
mov esi, dword [rbp - 0x70]
mov edi, dword [rsp + 0x64]
mov r14, qword [rsp + 0x70]
cmp dword [r14 + 0x1b38], esi
je 0x18004c9ab
test r12b, r12b
je 0x18004c99e
mov rdx, r15
mov ecx, esi
call fcn.180027b10
call fcn.180032060
mov rcx, r15
call fcn.18002f710
mov eax, dword [r14 + 0x1b4c]
mov ecx, dword [rbp + 0x178]
or eax, 3
mov dword [r14 + 0x1b4c], eax
test dil, dil
jne 0x18004c955
test cl, cl
jns 0x18004c95f
or eax, 0xc
mov dword [r14 + 0x1b4c], eax
mov rax, qword [r14 + 0x1b58]
or dword [r14 + 0x1b50], 2
or rax, 0x180
mov qword [r14 + 0x1b58], rax
test dil, dil
je 0x18004c98b
or rax, 0x60
mov qword [r14 + 0x1b58], rax
test ecx, 0x440
je 0x18004c99e
or rax, 1
mov qword [r14 + 0x1b58], rax
cmp dword [r14 + 0x1b38], esi
jne 0x18004cba7
test rbx, rbx
jne 0x18004c9b5
call fcn.180027be0
cmp dword [r14 + 0x1b38], esi
jne 0x18004cba7
cmp byte [r14 + 0x420], 0
je 0x18004cbd7
test r13b, r13b
jne 0x18004cbd7
mov r13, qword [rsp + 0x58]
test r12b, r12b
jne 0x18004cbdc
mov byte [rbp + 0x180], 1
mov cl, 1
jmp 0x18004cbba
mov r12b, 1
mov rbx, qword [rsp + 0x58]
mov r13b, 1
mov esi, dword [rbp - 0x70]
mov qword [rsp + 0x58], rbx
cmp edi, esi
je 0x18004c8ff
mov rdi, r14
mov qword [rsp + 0x58], r14
mov dword [r14 + 0xe70], 0xbe99999a
mov rbx, 0xffffffffffffffff
mov r14, qword [rbp + 0x160]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x18004ca31
inc ebx
lea rcx, [rdi + 0x30]
mov edx, ebx
call fcn.180036700
mov rcx, qword [rdi + 0x38]
mov rdx, r14
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
movsxd rsi, dword [rbp + 0x168]
lea rcx, [rdi + 0x10]
lea edx, [rsi + 1]
call fcn.1800367e0
lea rcx, [rdi + 0x20]
xor edx, edx
call fcn.180036700
mov rdx, rdi
mov byte [rdi + 0x40], 0
dec rsi
mov rdi, r14
mov r14, qword [rdx + 0x18]
mov rbx, r14
lea rsi, [r14 + rsi*2]
cmp r14, rsi
jae 0x18004cacb
cmp byte [rdi], 0
je 0x18004cac6
xor r8d, r8d
lea rcx, [rbp - 0x58]
mov rdx, rdi
call fcn.180025570
movsxd rcx, eax
mov eax, dword [rbp - 0x58]
add rdi, rcx
test eax, eax
je 0x18004cac6
cmp eax, 0xffff
ja 0x18004cac1
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x18004ca92
mov rdx, qword [rsp + 0x58]
sub edi, dword [rbp + 0x160]
xor ecx, ecx
mov esi, dword [rbp - 0x70]
mov word [rbx], cx
sub rbx, r14
sar rbx, 1
mov dword [rdx + 8], edi
mov edi, dword [rsp + 0x64]
mov dword [rdx + 4], ebx
cmp dword [rdx], esi
jne 0x18004cb11
cmp dword [rdx + 0x4c], ebx
mov ecx, ebx
cmovl ecx, dword [rdx + 0x4c]
cmp dword [rdx + 0x50], ebx
mov dword [rdx + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [rdx + 0x50]
cmp dword [rdx + 0x54], ebx
mov dword [rdx + 0x50], ecx
cmovl ebx, dword [rdx + 0x54]
mov dword [rdx + 0x54], ebx
jmp 0x18004cb66
movzx eax, dil
mov dword [rdx], esi
xor al, r13b
mov qword [rdx + 0x48], rcx
mov dword [rdx + 0xe62], 0x630000
mov dword [rdx + 0xe68], ecx
mov dword [rdx + 0xe6c], 0x3e7
mov qword [rdx + 0x50], rcx
mov dword [rdx + 0x58], 0x10000
mov dword [rdx + 0x60], ecx
mov byte [rdx + 0x5c], al
test dil, dil
jne 0x18004cb66
mov ecx, dword [rbp - 0x50]
mov eax, 1
cmp byte [rbp + 0x158], dil
movzx ecx, cl
cmovne ecx, eax
mov dword [rbp - 0x50], ecx
test dword [rbp + 0x178], 0x2000
je 0x18004cb76
mov byte [rdx + 0x58], r13b
test dil, dil
jne 0x18004cb9d
cmp byte [rbp + 0x188], dil
jne 0x18004cb99
cmp byte [rsp + 0x50], dil
je 0x18004cb9d
mov rax, qword [rsp + 0x70]
cmp byte [rax + 0x148], dil
je 0x18004cb9d
mov byte [rbp - 0x50], r13b
mov rbx, qword [rsp + 0x58]
jmp 0x18004c903
mov r13, qword [rsp + 0x58]
test r13, r13
je 0x18004cbb8
cmp byte [rsp + 0x60], 0
jne 0x18004cbdc
xor cl, cl
mov byte [rbp + 0x158], cl
test r13, r13
je 0x18004cbe0
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
je 0x18004cbe0
test cl, cl
je 0x18004cbe0
mov dl, 1
jmp 0x18004cbe2
mov r13, qword [rsp + 0x58]
mov cl, 1
jmp 0x18004cbba
xor dl, dl
cmp byte [rsp + 0x68], 0
mov dword [rbp - 0x68], edx
movzx r15d, dl
mov byte [rbp - 0x77], 0
mov byte [rsp + 0x50], 0
je 0x18004cce3
test r13, r13
je 0x18004cce3
test cl, cl
jne 0x18004cc12
test dl, dl
je 0x18004ccf4
mov r12d, dword [rbp + 0x168]
lea rcx, [r13 + 0x10]
lea edx, [r12 + 1]
call fcn.1800367e0
mov r14, qword [r13 + 0x18]
movsxd rbx, dword [r13 + 0x10]
mov rdi, r14
mov rcx, qword [rbp + 0x160]
dec rbx
mov rsi, rcx
lea rbx, [r14 + rbx*2]
cmp r14, rbx
jae 0x18004cc89
cmp byte [rsi], 0
je 0x18004cc82
xor r8d, r8d
lea rcx, [rbp + 0x188]
mov rdx, rsi
call fcn.180025570
movsxd rcx, eax
mov eax, dword [rbp + 0x188]
add rsi, rcx
test eax, eax
je 0x18004cc82
cmp eax, 0xffff
ja 0x18004cc7d
mov word [rdi], ax
add rdi, 2
cmp rdi, rbx
jb 0x18004cc48
mov rcx, qword [rbp + 0x160]
sub esi, ecx
xor edx, edx
mov word [rdi], dx
sub rdi, r14
mov r14, qword [rsp + 0x70]
sar rdi, 1
cmp dword [r13 + 0x4c], edi
mov ecx, edi
mov dword [r13 + 4], edi
cmovl ecx, dword [r13 + 0x4c]
cmp dword [r13 + 0x50], edi
mov dword [r13 + 0x4c], ecx
mov ecx, edi
cmovl ecx, dword [r13 + 0x50]
cmp dword [r13 + 0x54], edi
mov dword [r13 + 8], esi
cmovl edi, dword [r13 + 0x54]
mov esi, dword [rbp - 0x70]
cmp ecx, edi
mov dword [r13 + 0x50], ecx
movzx ecx, byte [rbp + 0x158]
cmovne edx, r15d
mov dword [rbp - 0x68], edx
mov dword [r13 + 0x54], edi
jmp 0x18004ccea
mov r12d, dword [rbp + 0x168]
test cl, cl
jne 0x18004cd04
test dl, dl
jne 0x18004cd04
jmp 0x18004ccfb
mov r12d, dword [rbp + 0x168]
cmp dword [r14 + 0x1b38], esi
jne 0x18004cd20
mov r15d, dword [rsp + 0x68]
test r15b, r15b
jne 0x18004cd25
test r13, r13
je 0x18004cd25
cmp byte [r13 + 0x40], r15b
je 0x18004cd25
mov byte [rsp + 0x60], 1
jmp 0x18004cd2a
mov r15d, dword [rsp + 0x68]
mov byte [rsp + 0x60], 0
cmp byte [rbp - 0x6c], 0
je 0x18004ce0e
mov rdx, qword [r14 + 0x19a0]
cmp dword [rdx + 0x18], 0x2a
jg 0x18004cd47
mov r8, qword [rdx + 0x38]
jmp 0x18004cd6b
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x18004cd5f
mov r8, qword [rdx + 0x38]
jmp 0x18004cd6b
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rdi, [r14 + 0x2f00]
mov rbx, qword [0x18008b9c0]
mov dword [rdi + 0x14], eax
mov rax, qword [r14 + 0x19a0]
mov qword [rbp + 0x188], rdi
mov ecx, dword [rax + 0x60]
mov dword [rdi + 0x60], ecx
mov rax, qword [r14 + 0x19a0]
movsd xmm0, qword [rax + 0x40]
movsd qword [rdi + 0x40], xmm0
mov rax, qword [r14 + 0x19a0]
mov ecx, dword [rax + 0x64]
mov dword [rdi + 0x64], ecx
mov rax, qword [r14 + 0x19a0]
mov ecx, dword [rax + 0x68]
mov dword [rdi + 0x68], ecx
mov rax, qword [r14 + 0x19a0]
mov rcx, qword [rax + 0x48]
mov qword [rdi + 0x48], rcx
mov rcx, rdi
mov qword [rdi + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rdi + 0x10], eax
call fcn.18002fc40
lea rdx, [rbp + 0x188]
lea rcx, [rbx + 0x1c30]
call fcn.1800363d0
mov rdx, qword [rdi + 0x48]
mov rcx, qword [rbx + 0x1af0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x2b0]
call fcn.18003d8b0
movss xmm0, dword [0x180067750]
xor r8d, r8d
mov ecx, 0x20000c
mov dword [rbp - 0x58], r8d
cmp dword [r14 + 0x1b38], esi
jne 0x18004d20b
mov eax, dword [r13 + 8]
mov r9d, dword [rbp + 0x178]
mov dword [r13 + 0xe78], r9d
mov dword [r13 + 0x44], r12d
mov qword [r13 + 0xe80], r8
mov qword [r13 + 0xe88], r8
cmp byte [r14 + 0x138], r8b
mov dword [r14 + 0x3234], 1
mov dword [rbp - 0x58], eax
sete al
mov byte [r14 + 0x1b45], al
movss xmm6, dword [r14 + 0x130]
subss xmm6, xmm9
subss xmm6, dword [r14 + 0x1590]
addss xmm6, dword [r13 + 0x48]
cmp byte [rsp + 0x64], r8b
je 0x18004ceb8
mov r12, qword [rbp - 0x48]
movss xmm2, dword [r14 + 0x134]
subss xmm2, dword [r12 + 0xd4]
subss xmm2, dword [r14 + 0x1594]
jmp 0x18004cec5
movss xmm2, dword [r14 + 0x19a8]
mulss xmm2, xmm0
movzx edi, byte [r14 + 0xc9]
cmp byte [rbp - 0x50], r8b
jne 0x18004d03f
movzx eax, byte [rbp - 0x76]
test al, al
je 0x18004cef1
test dil, dil
jne 0x18004cf5d
cmp byte [r14 + 0x425], r8b
jne 0x18004d03f
cmp byte [r14 + 0x420], r8b
je 0x18004cfb9
cmp byte [r13 + 0xe75], r8b
jne 0x18004cfb9
test al, al
je 0x18004d05b
cmp byte [r13 + 0x5c], r8b
je 0x18004cf2a
mov rdx, r13
lea rcx, [rbp - 0x38]
call fcn.18004a460
movss xmm2, dword [rbp - 0x2c]
movaps xmm1, xmm6
mov rcx, r13
call fcn.18004a970
mov r9d, dword [rbp + 0x178]
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], eax
mov dword [r13 + 0x54], eax
mov byte [r13 + 0x5b], 0
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d05b
cmp byte [r14 + 0x425], r8b
je 0x18004cef1
mov r8d, ecx
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004aef0
mov r8d, 0x60000d
mov byte [r13 + 0xe74], 1
lea rdx, [r13 + 0x4c]
mov dword [r13 + 0xe70], 0xbe99999a
mov rcx, r13
call fcn.18004aef0
mov r9d, dword [rbp + 0x178]
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004d05b
cmp byte [r14 + 0x138], r8b
je 0x18004d05b
cmp byte [r13 + 0xe75], r8b
jne 0x18004d05b
ucomiss xmm7, dword [r14 + 0x3c0]
jne 0x18004cfe7
ucomiss xmm7, dword [r14 + 0x3c4]
je 0x18004d05b
cmp byte [r13 + 0x5c], r8b
je 0x18004cffe
mov rdx, r13
lea rcx, [rbp - 0x38]
call fcn.18004a460
movss xmm2, dword [rbp - 0x2c]
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004d010
mov eax, dword [r13 + 0x4c]
mov dword [r13 + 0x50], eax
movaps xmm1, xmm6
mov rcx, r13
call fcn.18004a970
mov r9d, dword [rbp + 0x178]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0xe70], 0xbe99999a
mov byte [r13 + 0xe74], 1
jmp 0x18004d05b
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r8d
mov byte [r13 + 0x5b], r8b
mov byte [r13 + 0xe75], 1
cmp byte [r13 + 0xe75], 0
je 0x18004d077
cmp byte [r14 + 0x138], 0
jne 0x18004d077
mov byte [r13 + 0xe75], 0
cmp byte [r14 + 0x148], 0
je 0x18004d08b
cmp byte [r14 + 0x14a], 0
je 0x18004d09a
test dil, dil
je 0x18004d09e
cmp byte [r14 + 0x14b], 0
je 0x18004d09e
mov bl, 1
jmp 0x18004d0a0
xor bl, bl
bt r9d, 0xa
jae 0x18004d155
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004d155
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d155
test bl, bl
jne 0x18004d155
cmp byte [r14 + 0x149], bl
jne 0x18004d155
test r15b, r15b
jne 0x18004d155
mov rcx, qword [r14 + 0x1550]
movsxd rax, dword [r14 + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x18004d112
nop dword [rax]
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x18004d155
cmp rcx, rdx
jb 0x18004d100
mov edx, r9d
mov dword [rbp + 0x188], 9
lea rcx, [rbp + 0x188]
call fcn.18004c130
test al, al
je 0x18004d155
mov r8d, dword [rbp + 0x188]
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004aef0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
cmp dword [r14 + 0x1548], 0
jle 0x18004d208
test bl, bl
jne 0x18004d1fa
test r15b, r15b
jne 0x18004d1fa
cmp byte [rbp - 0x78], r15b
jne 0x18004d1fa
mov esi, dword [rbp + 0x178]
xor eax, eax
mov edi, eax
mov ebx, eax
nop word [rax + rax]
mov rax, qword [r14 + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp + 0x188], ecx
cmp ecx, 9
jne 0x18004d1b0
cmp byte [r14 + 0x149], 0
jne 0x18004d1e8
mov edx, esi
lea rcx, [rbp + 0x188]
call fcn.18004c130
test al, al
je 0x18004d1e8
mov r8d, dword [rbp + 0x188]
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004aef0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
inc edi
add rbx, 2
cmp edi, dword [r14 + 0x1548]
jl 0x18004d190
mov esi, dword [rbp - 0x70]
lea rcx, [r14 + 0x1548]
xor edx, edx
call fcn.1800367e0
xor r8d, r8d
xor cl, cl
cmp dword [r14 + 0x1b38], esi
jne 0x18004e690
cmp byte [r14 + 0x1b44], cl
jne 0x18004e04e
cmp byte [rbp + 0x180], cl
jne 0x18004e04e
movzx ecx, byte [r14 + 0x149]
movzx edx, byte [r14 + 0xc9]
movzx eax, cl
neg al
sbb r12d, r12d
and r12d, 0x400000
test dl, dl
je 0x18004d2a5
cmp byte [r14 + 0x14b], 0
je 0x18004d26f
cmp byte [r14 + 0x148], 0
mov eax, 1
je 0x18004d272
mov eax, r8d
test eax, eax
jne 0x18004d2b9
xor r13b, r13b
test dl, dl
je 0x18004d2cc
cmp byte [r14 + 0x14b], 0
je 0x18004d2cc
cmp cl, 0
je 0x18004d2cc
cmp byte [r14 + 0x148], 0
jne 0x18004d2cc
cmp byte [r14 + 0x14a], 0
jne 0x18004d2cc
mov sil, 1
jmp 0x18004d2d3
cmp byte [r14 + 0x148], 0
je 0x18004d276
cmp byte [r14 + 0x14b], 0
jne 0x18004d276
cmp byte [r14 + 0x14a], 0
jne 0x18004d276
test cl, cl
jne 0x18004d276
mov r13b, 1
jmp 0x18004d279
xor sil, sil
test dl, dl
je 0x18004d326
cmp byte [r14 + 0x14b], 0
movzx r15d, byte [r14 + 0x14a]
je 0x18004d32e
cmp byte [r14 + 0x148], 0
jne 0x18004d32e
test r15b, r15b
jne 0x18004d32e
movzx ecx, byte [r14 + 0x148]
mov dil, 1
xor r9b, r9b
cmp byte [r14 + 0x149], r9b
je 0x18004d35b
test cl, cl
jne 0x18004d35b
cmp byte [r14 + 0x14a], r9b
jne 0x18004d35b
cmp byte [r14 + 0x14b], r9b
jne 0x18004d35b
mov r10b, 1
jmp 0x18004d35e
movzx r15d, byte [r14 + 0x148]
movzx ecx, byte [r14 + 0x148]
xor dil, dil
test cl, cl
je 0x18004d2ff
cmp byte [r14 + 0x149], dil
jne 0x18004d2ff
cmp byte [r14 + 0x14a], dil
jne 0x18004d2ff
cmp byte [r14 + 0x14b], dil
jne 0x18004d2ff
mov r9b, 1
xor r10b, r10b
test r13b, r13b
je 0x18004d37f
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x18004d37f
mov dl, 1
call fcn.18002a910
test al, al
jne 0x18004d39d
test r10b, r10b
je 0x18004d3cd
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004d3cd
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d3cd
cmp byte [rsp + 0x68], 0
mov r14d, dword [rbp - 0x6c]
mov ebx, dword [rsp + 0x64]
mov r11, qword [rsp + 0x58]
jne 0x18004d3da
test r14b, r14b
jne 0x18004d3da
test bl, bl
je 0x18004d3c4
mov eax, dword [r11 + 0x54]
cmp dword [r11 + 0x50], eax
je 0x18004d3da
mov byte [rbp + 0x188], 1
jmp 0x18004d3e1
mov r11, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x64]
mov r14d, dword [rbp - 0x6c]
mov byte [rbp + 0x188], 0
test r13b, r13b
je 0x18004d402
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x18004d402
mov dl, 1
call fcn.18002a910
test al, al
jne 0x18004d420
test r9b, r9b
je 0x18004d438
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004d438
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d438
test r14b, r14b
jne 0x18004d438
test bl, bl
je 0x18004d433
mov eax, dword [r11 + 0x54]
cmp dword [r11 + 0x50], eax
je 0x18004d438
mov r14b, 1
jmp 0x18004d43b
xor r14b, r14b
test r13b, r13b
je 0x18004d45c
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x18004d45c
mov dl, 1
call fcn.18002a910
test al, al
jne 0x18004d47a
test r10b, r10b
je 0x18004d488
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004d488
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d488
mov r10d, dword [rsp + 0x68]
test r10b, r10b
jne 0x18004d48d
mov bl, 1
jmp 0x18004d48f
mov r10d, dword [rsp + 0x68]
xor bl, bl
test r13b, r13b
je 0x18004d4c4
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004d4c4
mov dl, 1
call fcn.18002a910
mov r9d, dword [rbp - 0x60]
test al, al
je 0x18004d4c8
test r10b, r10b
jne 0x18004d4c8
test r9b, r9b
je 0x18004d4c8
movzx r11d, dl
jmp 0x18004d4d0
mov r9d, dword [rbp - 0x60]
xor r11b, r11b
test r13b, r13b
je 0x18004d4ec
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x18004d4ec
mov dl, 1
call fcn.18002a910
test al, al
jne 0x18004d50d
test sil, sil
je 0x18004d51c
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004d51c
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d51c
test r10b, r10b
jne 0x18004d51c
test r9b, r9b
je 0x18004d51c
mov r10b, 1
jmp 0x18004d51f
xor r10b, r10b
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x18004d583
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d583
test dil, dil
je 0x18004d544
mov ecx, 0x200004
jmp 0x18004d554
test r15b, r15b
mov ecx, 0x200000
mov eax, 0x20000c
cmovne ecx, eax
or ecx, r12d
mov r8d, ecx
mov r13, qword [rsp + 0x58]
mov rcx, r13
lea rdx, [r13 + 0x4c]
call fcn.18004aef0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004e028
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x18004d5c6
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d5c6
test dil, dil
je 0x18004d5ae
mov ecx, 0x200005
or r12d, ecx
mov r8d, r12d
jmp 0x18004d55a
test r15b, r15b
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or r12d, ecx
mov r8d, r12d
jmp 0x18004d55a
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004d658
mov dl, 1
call fcn.18002a910
mov esi, dword [rsp + 0x64]
test al, al
je 0x18004d65c
test sil, sil
je 0x18004d65c
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
je 0x18004d625
mov rdx, qword [rbp - 0x48]
xor eax, eax
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [r14 + 0x19a8]
mov dword [rdx + 0x70], eax
maxss xmm0, xmm7
movss dword [rdx + 0x68], xmm0
jmp 0x18004e02d
movzx eax, dil
lea r8d, [rax*4 + 0x200002]
or r8d, r12d
lea rdx, [r13 + 0x4c]
mov rcx, r13
call fcn.18004aef0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004e02d
mov esi, dword [rsp + 0x64]
mov r9, qword [0x18008b9c0]
mov ecx, dword [r9 + 0x4c]
test ecx, ecx
js 0x18004d6cd
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d6cd
test sil, sil
je 0x18004d6cd
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
je 0x18004d6bc
mov rax, qword [r9 + 0x1af0]
mov rcx, qword [rbp - 0x48]
movss xmm0, dword [r14 + 0x19a8]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
xor eax, eax
mov dword [rcx + 0x70], eax
movss dword [rcx + 0x68], xmm0
jmp 0x18004e02d
movzx eax, dil
lea r8d, [rax*4 + 0x200003]
jmp 0x18004d631
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x18004d712
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d712
mov eax, r12d
mov r8d, 0x200004
or eax, 0x200006
mov r14, qword [rsp + 0x70]
or r8d, r12d
mov r13, qword [rsp + 0x58]
cmp byte [r14 + 0x148], 0
cmovne r8d, eax
jmp 0x18004d634
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x18004d73b
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d73b
mov eax, r12d
mov r8d, 0x200005
or eax, 0x200007
jmp 0x18004d6f4
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004d76d
mov dl, 1
call fcn.18002a910
mov r9d, dword [rsp + 0x68]
test al, al
je 0x18004d772
test r9b, r9b
jne 0x18004d772
or r12d, 0x200008
mov r8d, r12d
jmp 0x18004d55a
mov r9d, dword [rsp + 0x68]
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x18004d832
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d832
test r9b, r9b
jne 0x18004d832
mov r13, qword [rsp + 0x58]
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004d7d5
test r15b, r15b
je 0x18004d7e9
lea rdx, [r13 + 0x4c]
mov r8d, 0x60000c
mov rcx, r13
call fcn.18004aef0
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
mov r14, qword [rsp + 0x70]
or r12d, 0x200009
mov r8d, r12d
jmp 0x18004d634
mov r14, qword [rsp + 0x70]
cmp byte [r14 + 0xc9], 0
je 0x18004d7da
cmp byte [r14 + 0x14b], 0
je 0x18004d7da
cmp byte [r14 + 0x14a], 0
jne 0x18004d7da
cmp byte [r14 + 0x148], 0
jne 0x18004d7da
mov edx, 0x600004
mov rcx, r13
call fcn.18004c100
or r12d, 0x200009
mov r8d, r12d
jmp 0x18004d634
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x18004d84b
mov dl, 1
call fcn.18002a910
test al, al
jne 0x18004d868
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x18004d8dd
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d8dd
mov edx, dword [rbp + 0x178]
mov eax, edx
mov r14, qword [rsp + 0x70]
shr eax, 0xb
and al, 1
test sil, sil
je 0x18004d88f
movzx ecx, byte [r14 + 0x148]
test al, al
je 0x18004d8a5
test cl, cl
jne 0x18004d8a9
mov byte [rbp + 0x180], 1
mov byte [rsp + 0x50], 1
mov r13, qword [rsp + 0x58]
jmp 0x18004e02d
test cl, cl
jne 0x18004d88f
test r9b, r9b
jne 0x18004d89b
lea rcx, [rbp + 0x188]
mov dword [rbp + 0x188], 0xa
call fcn.18004c130
test al, al
je 0x18004d9b0
mov r13, qword [rsp + 0x58]
mov r8d, dword [rbp + 0x188]
jmp 0x18004d634
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x18004d90e
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d90e
mov r13, qword [rsp + 0x58]
movzx ecx, dl
mov r14, qword [rsp + 0x70]
mov byte [rbp + 0x180], dl
jmp 0x18004e02f
test r11b, r11b
jne 0x18004dfe2
test r10b, r10b
jne 0x18004dfe2
test r13b, r13b
je 0x18004d965
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x18004d965
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004d965
mov r13, qword [rsp + 0x58]
xor eax, eax
mov dword [r13 + 0x50], eax
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov byte [r13 + 0x5b], r10b
mov byte [r13 + 0xe74], dl
jmp 0x18004e028
movzx r15d, byte [rbp + 0x188]
test r15b, r15b
jne 0x18004dcdd
test r14b, r14b
jne 0x18004dcdd
test bl, bl
je 0x18004e023
mov rcx, qword [0x18008b9c0]
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x18004d9ba
mov rcx, qword [rcx + 0x110]
call rax
mov rbx, rax
test rax, rax
jne 0x18004d9c1
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
jmp 0x18004e02d
lea rbx, [0x18005f7cd]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x18004d9d0
mov rcx, qword [0x18008b9c0]
test rcx, rcx
je 0x18004d9eb
inc dword [rcx + 0x3bc]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r14d, r14d
mov qword [rbp - 0x60], rax
mov r12, rax
mov r15d, r14d
cmp byte [rbx], r14b
je 0x18004da6e
mov r12d, dword [rbp + 0x178]
mov rdi, rax
nop word [rax + rax]
xor r8d, r8d
lea rcx, [rbp + 0x188]
mov rdx, rbx
call fcn.180025570
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp + 0x188], r14d
je 0x18004da6a
mov edx, r12d
lea rcx, [rbp + 0x188]
call fcn.18004c130
test al, al
je 0x18004da65
movzx eax, word [rbp + 0x188]
inc r15d
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r14b
jne 0x18004da20
mov r12, qword [rbp - 0x60]
mov r13, qword [rsp + 0x58]
movsxd rax, r15d
mov word [r12 + rax*2], r14w
test r15d, r15d
jle 0x18004dcb8
mov esi, dword [r13 + 0x54]
mov edi, dword [r13 + 0x50]
mov eax, dword [r13 + 4]
cmp edi, esi
je 0x18004dab8
mov ecx, edi
cmp edi, eax
jle 0x18004daa0
mov dword [r13 + 0x50], eax
mov ecx, eax
mov edx, esi
cmp esi, eax
jle 0x18004daac
mov dword [r13 + 0x54], eax
mov edx, eax
mov esi, edx
mov edi, ecx
cmp ecx, edx
jne 0x18004dab8
mov dword [r13 + 0x4c], ecx
mov r8d, dword [r13 + 0x4c]
cmp r8d, eax
jle 0x18004dac8
mov dword [r13 + 0x4c], eax
mov r8d, eax
cmp edi, esi
je 0x18004daf3
mov ecx, edi
cmp edi, eax
jle 0x18004dad8
mov dword [r13 + 0x50], eax
mov ecx, eax
mov edx, esi
cmp esi, eax
jle 0x18004dae4
mov dword [r13 + 0x54], eax
mov edx, eax
mov esi, edx
mov edi, ecx
cmp ecx, edx
jne 0x18004daf3
mov dword [r13 + 0x4c], ecx
mov r8d, ecx
cmp r8d, eax
jle 0x18004dafc
mov dword [r13 + 0x4c], eax
cmp edi, esi
je 0x18004dc52
lea r14, [r13 + 0x64]
mov rcx, r14
jge 0x18004dba4
sub esi, edi
mov edx, esi
call fcn.18004bc40
mov rcx, rax
test rax, rax
je 0x18004db8a
mov dword [rax], edi
mov dword [rax + 4], esi
xor eax, eax
mov dword [rcx + 8], eax
test esi, esi
jne 0x18004db39
mov dword [rcx + 0xc], 0xffffffff
jmp 0x18004db8a
mov eax, dword [r14 + 0xe04]
mov dword [rcx + 0xc], eax
add dword [r14 + 0xe04], esi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [r14 + rdx*2]
test rdx, rdx
je 0x18004db8a
movsxd r8, esi
test esi, esi
jle 0x18004db8a
movsxd rax, edi
lea r9, [rax + rax]
sub r9, rdx
nop
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004db70
mov r8d, esi
mov edx, edi
mov rcx, r13
call fcn.18004a6c0
mov r8d, dword [r13 + 0x50]
mov dword [r13 + 0x54], r8d
jmp 0x18004dc3f
sub edi, esi
mov edx, edi
call fcn.18004bc40
mov rcx, rax
test rax, rax
je 0x18004dc2a
mov dword [rax], esi
mov dword [rax + 4], edi
xor eax, eax
mov dword [rcx + 8], eax
test edi, edi
jne 0x18004dbcc
mov dword [rcx + 0xc], 0xffffffff
jmp 0x18004dc2a
mov eax, dword [r14 + 0xe04]
mov dword [rcx + 0xc], eax
add dword [r14 + 0xe04], edi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [r14 + rdx*2]
test rdx, rdx
je 0x18004dc2a
movsxd r8, edi
test edi, edi
jle 0x18004dc2a
movsxd rax, esi
lea r9, [rax + rax]
sub r9, rdx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004dc10
mov r8d, edi
mov edx, esi
mov rcx, r13
call fcn.18004a6c0
mov r8d, dword [r13 + 0x54]
mov dword [r13 + 0x50], r8d
lea rax, [r13 + 0x4c]
xor r14d, r14d
mov byte [rax + 0xf], 0
mov dword [r13 + 0x4c], r8d
mov byte [rax + 0xf], 0
mov edx, dword [r13 + 0x4c]
mov r9d, r15d
mov r8, r12
mov rcx, r13
call fcn.18004a7c0
test al, al
je 0x18004dc98
mov edi, dword [r13 + 0x4c]
lea rcx, [r13 + 0x64]
xor edx, edx
call fcn.18004bc40
test rax, rax
je 0x18004dc8d
mov dword [rax], edi
mov dword [rax + 4], r14d
mov dword [rax + 8], r15d
mov dword [rax + 0xc], 0xffffffff
add dword [r13 + 0x4c], r15d
mov byte [r13 + 0x5b], 0
jmp 0x18004dcb0
movzx eax, word [r13 + 0xe62]
test ax, ax
je 0x18004dcb0
dec ax
mov word [r13 + 0xe62], ax
mov byte [r13 + 0xe74], 1
test r12, r12
je 0x18004dccf
mov rax, qword [0x18008b9c0]
test rax, rax
je 0x18004dccf
dec dword [rax + 0x3bc]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18004e028
mov r14, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
cmp qword [r14 + 0x108], 0
je 0x18004de29
mov esi, dword [r13 + 0x54]
mov eax, dword [r13 + 0x50]
cmp eax, esi
je 0x18004dd10
mov r14d, esi
cmovge esi, eax
cmovl r14d, eax
xor r12d, r12d
jmp 0x18004dd1a
mov esi, dword [r13 + 4]
xor r12d, r12d
mov r14d, r12d
mov rcx, qword [r13 + 0x18]
mov edx, r12d
movsxd rax, esi
mov ebx, 0x2400
mov edi, 0x2800
mov r15d, 0x3ff
mov r10d, 0x80
mov r11d, 0x800
lea r9, [rcx + rax*2]
movsxd rax, r14d
lea r8, [rcx + rax*2]
nop dword [rax + rax]
test r9, r9
je 0x18004dd5a
cmp r8, r9
jae 0x18004dd9d
movzx ecx, word [r8]
test cx, cx
je 0x18004dd9d
add r8, 2
cmp cx, r10w
jae 0x18004dd71
inc edx
jmp 0x18004dd50
cmp cx, r11w
jae 0x18004dd80
mov eax, 2
add edx, eax
jmp 0x18004dd50
lea eax, [rbx + rcx]
cmp ax, r15w
mov eax, r12d
jbe 0x18004dd99
add cx, di
cmp cx, r15w
setbe al
add eax, 3
add edx, eax
jmp 0x18004dd50
mov rax, qword [0x18008b9c0]
lea edi, [rdx + 1]
movzx r15d, byte [rbp + 0x188]
test rax, rax
je 0x18004ddba
inc dword [rax + 0x3bc]
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [r13 + 0x18]
mov edx, edi
movsxd rcx, esi
mov rbx, rax
lea r9, [r8 + rcx*2]
movsxd rcx, r14d
lea r8, [r8 + rcx*2]
mov rcx, rax
call fcn.180025c20
mov r9, qword [0x18008b9c0]
mov rax, qword [r9 + 0x108]
test rax, rax
je 0x18004de08
mov rcx, qword [r9 + 0x110]
mov rdx, rbx
call rax
mov r9, qword [0x18008b9c0]
test rbx, rbx
je 0x18004de19
test r9, r9
je 0x18004de19
dec dword [r9 + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14, qword [rsp + 0x70]
jmp 0x18004de2c
xor r12d, r12d
test r15b, r15b
je 0x18004e02d
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
jne 0x18004de54
mov eax, dword [r13 + 4]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x4c], eax
mov dword [r13 + 0x50], r12d
mov byte [r13 + 0x5b], 0
mov byte [r13 + 0xe74], 1
mov edi, dword [r13 + 0x54]
mov ebx, dword [r13 + 0x50]
cmp ebx, edi
je 0x18004e028
mov eax, dword [r13 + 4]
cmp ebx, eax
jle 0x18004de7a
mov dword [r13 + 0x50], eax
mov ebx, eax
cmp edi, eax
jle 0x18004de84
mov dword [r13 + 0x54], eax
mov edi, eax
cmp ebx, edi
jne 0x18004de8c
mov dword [r13 + 0x4c], ebx
cmp dword [r13 + 0x4c], eax
jle 0x18004de96
mov dword [r13 + 0x4c], eax
cmp ebx, edi
je 0x18004dfdb
lea rsi, [r13 + 0x64]
mov rcx, rsi
jge 0x18004df44
sub edi, ebx
mov edx, edi
call fcn.18004bc40
mov rcx, rax
test rax, rax
je 0x18004df2a
mov dword [rax], ebx
mov dword [rax + 4], edi
mov dword [rax + 8], r12d
test edi, edi
jne 0x18004ded2
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004df2a
mov eax, dword [rsi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rsi + 0xe04], edi
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [rsi + rdx*2]
test rdx, rdx
je 0x18004df2a
movsxd r8, edi
test edi, edi
jle 0x18004df2a
movsxd rax, ebx
lea r9, [rax + rax]
sub r9, rdx
nop word [rax + rax]
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004df10
mov r8d, edi
mov edx, ebx
mov rcx, r13
call fcn.18004a6c0
mov r8d, dword [r13 + 0x50]
mov dword [r13 + 0x54], r8d
jmp 0x18004dfcf
sub ebx, edi
mov edx, ebx
call fcn.18004bc40
mov rcx, rax
test rax, rax
je 0x18004dfba
mov dword [rax], edi
mov dword [rax + 4], ebx
mov dword [rax + 8], r12d
test ebx, ebx
jne 0x18004df6b
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004dfba
mov eax, dword [rsi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rsi + 0xe04], ebx
movsxd rdx, dword [rcx + 0xc]
add rdx, 0x318
lea rdx, [rsi + rdx*2]
test rdx, rdx
je 0x18004dfba
movsxd r8, ebx
test ebx, ebx
jle 0x18004dfba
movsxd rax, edi
lea r9, [rax + rax]
sub r9, rdx
nop
mov rax, qword [r13 + 0x18]
lea rcx, [r9 + rdx]
lea rdx, [rdx + 2]
movzx ecx, word [rcx + rax]
mov word [rdx - 2], cx
sub r8, 1
jne 0x18004dfa0
mov r8d, ebx
mov edx, edi
mov rcx, r13
call fcn.18004a6c0
mov r8d, dword [r13 + 0x54]
mov dword [r13 + 0x50], r8d
lea rax, [r13 + 0x4c]
mov byte [rax + 0xf], 0
mov dword [r13 + 0x4c], r8d
mov byte [r13 + 0x5b], 0
jmp 0x18004e028
mov r13, qword [rsp + 0x58]
movzx r8d, r11b
mov rcx, r13
xor r8d, 1
add r8d, 0x20000a
lea rdx, [r13 + 0x4c]
call fcn.18004aef0
mov eax, dword [r13 + 0x4c]
mov dword [r13 + 0x54], eax
mov dword [r13 + 0x50], eax
mov byte [r13 + 0xe74], 1
mov dword [r13 + 0xe70], 0xbe99999a
jmp 0x18004e028
mov r13, qword [rsp + 0x58]
mov r14, qword [rsp + 0x70]
xor cl, cl
mov eax, dword [r13 + 0x54]
cmp dword [r13 + 0x50], eax
je 0x18004e046
cmp byte [rbp + 0x158], 0
je 0x18004e046
mov al, 1
jmp 0x18004e048
xor al, al
or byte [rbp - 0x68], al
mov esi, dword [rbp - 0x70]
cmp dword [r14 + 0x1b38], esi
jne 0x18004e690
xor esi, esi
mov qword [rbp - 0x50], rsi
mov r12d, esi
mov dword [rbp - 0x60], esi
mov r15d, esi
test cl, cl
je 0x18004e287
cmp byte [rsp + 0x68], sil
jne 0x18004e1f4
mov r9, qword [r13 + 0x38]
mov rax, qword [rbp + 0x160]
mov r8, r9
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004e0a3
inc rax
test ecx, ecx
jne 0x18004e090
test edx, edx
je 0x18004e1f4
mov r15d, dword [r13 + 0x30]
mov r12, r9
dec r15d
mov qword [rbp - 0x50], r9
mov dword [rbp - 0x60], r15d
mov ebx, esi
mov r14, rsi
test r15d, r15d
jle 0x18004e125
movsxd rdi, r15d
mov rcx, r9
add rdi, r9
mov rdx, rdi
call fcn.1800259b0
lea ebx, [rax + 1]
test ebx, ebx
jle 0x18004e110
mov eax, 8
mov ecx, ebx
cmp ebx, eax
cmovl ecx, eax
test ecx, ecx
jle 0x18004e110
mov rax, qword [0x18008b9c0]
test rax, rax
je 0x18004e101
inc dword [rax + 0x3bc]
movsxd rcx, ecx
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8, r12
mov edx, ebx
mov rcx, r14
call fcn.180025710
lea esi, [rbx - 1]
mov eax, 0
movsxd rbx, dword [r13 + 4]
lea rdi, [r13 + 0x64]
test r15d, r15d
mov edx, ebx
mov rcx, rdi
cmovle esi, eax
call fcn.18004bc40
mov rcx, rax
test rax, rax
je 0x18004e1a5
xor edx, edx
mov dword [rax + 4], ebx
mov dword [rax], edx
mov dword [rax + 8], esi
test ebx, ebx
jne 0x18004e164
mov dword [rax + 0xc], 0xffffffff
jmp 0x18004e1a5
mov eax, dword [rdi + 0xe04]
mov dword [rcx + 0xc], eax
add dword [rdi + 0xe04], ebx
movsxd r9, dword [rcx + 0xc]
add r9, 0x318
lea r9, [rdi + r9*2]
test r9, r9
je 0x18004e1a5
test ebx, ebx
jle 0x18004e1a5
nop dword [rax + rax]
mov rax, qword [r13 + 0x18]
movzx ecx, word [rax + rdx*2]
mov word [r9 + rdx*2], cx
inc rdx
cmp rdx, rbx
jl 0x18004e190
mov r8d, dword [r13 + 4]
xor edx, edx
mov rcx, r13
call fcn.18004a6c0
test esi, esi
jle 0x18004e1d4
mov r9d, esi
mov r8, r14
xor edx, edx
mov rcx, r13
call fcn.18004a7c0
test al, al
je 0x18004e1d4
mov dword [r13 + 0x4c], esi
mov byte [r13 + 0x5b], 0
test r14, r14
je 0x18004e1f4
mov rax, qword [0x18008b9c0]
test rax, rax
je 0x18004e1eb
dec dword [rax + 0x3bc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rsp + 0x50], 0
mov r10d, dword [rbp + 0x178]
je 0x18004e20c
test r10b, 0x20
jne 0x18004e28e
mov rsi, qword [rbp + 0x160]
mov edi, dword [rbp - 0x74]
test r12, r12
je 0x18004e66f
test dil, dil
je 0x18004e63c
xor edx, edx
mov dword [rbp + 0x28], 0x40000
lea eax, [r15 + 1]
mov qword [rbp + 0x38], rdx
cmp dword [rbp + 0x168], eax
lea rcx, [rbp + 0x28]
xorps xmm0, xmm0
mov dword [rbp + 0x2c], r10d
cmovge eax, dword [rbp + 0x168]
mov dword [rbp + 0x4c], eax
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x48], r15d
mov qword [rbp + 0x30], rdx
call rdx
mov ecx, dword [rbp + 0x4c]
mov rsi, qword [rbp + 0x40]
mov qword [rbp + 0x160], rsi
lea r15d, [rcx - 1]
cmp dword [rbp + 0x48], r15d
cmovl r15d, dword [rbp + 0x48]
jmp 0x18004e642
mov r10d, dword [rbp + 0x178]
cmp byte [rsp + 0x68], 0
jne 0x18004e2c9
mov edx, dword [r13 + 0x10]
lea rcx, [r13 + 0x20]
mov byte [r13 + 0x40], 1
lea edx, [rdx*4 + 1]
call fcn.180036700
mov r8, qword [r13 + 0x18]
xor r9d, r9d
mov edx, dword [r13 + 0x20]
mov rcx, qword [r13 + 0x28]
call fcn.180025c20
mov r10d, dword [rbp + 0x178]
test r10d, 0x1c0
je 0x18004e637
mov r9d, 0x16
test r10b, 0x40
je 0x18004e307
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004e307
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004e307
xor ebx, ebx
mov eax, 0x40
mov r9d, ebx
jmp 0x18004e376
test r10b, r10b
jns 0x18004e364
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004e338
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004e338
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
mov r9d, 3
jmp 0x18004e37c
mov rax, qword [0x18008b9c0]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x18004e364
mov dl, 1
call fcn.18002a910
test al, al
je 0x18004e364
mov r11d, 0x80
xor ebx, ebx
mov eax, r11d
mov r9d, 4
jmp 0x18004e37c
mov ecx, 0x100
mov ebx, 0
test ecx, r10d
mov eax, ebx
cmovne eax, ecx
mov r11d, 0x80
test eax, eax
je 0x18004e637
mov dword [rbp - 0x10], eax
mov r14d, ebx
mov rax, qword [r13 + 0x28]
mov r12d, 0x2400
mov qword [rbp + 8], rax
mov r15d, 0x2800
mov eax, dword [r13 + 8]
mov dword [rbp + 0x10], eax
mov eax, dword [r13 + 0x44]
mov dword [rbp + 0x14], eax
movsxd rax, dword [r13 + 0x4c]
mov dword [rbp + 4], r9d
mov r9, qword [r13 + 0x18]
mov r13d, 0x3ff
mov dword [rbp - 0xc], r10d
mov rdx, r9
mov dword [rbp], ebx
mov r10d, 0x800
mov qword [rbp + 0x19], rbx
lea r8, [r9 + rax*2]
mov dword [rbp + 0x21], ebx
mov word [rbp + 0x25], bx
mov byte [rbp + 0x27], 0
mov qword [rbp - 8], rbx
mov byte [rbp + 0x18], 0
mov qword [rbp - 0x38], r9
nop dword [rax]
test r8, r8
je 0x18004e3fa
cmp rdx, r8
jae 0x18004e440
movzx ecx, word [rdx]
test cx, cx
je 0x18004e440
add rdx, 2
cmp cx, r11w
jae 0x18004e411
inc r14d
jmp 0x18004e3f0
cmp cx, r10w
jae 0x18004e421
mov eax, 2
add r14d, eax
jmp 0x18004e3f0
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004e43b
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add r14d, eax
jmp 0x18004e3f0
mov r13, qword [rsp + 0x58]
mov rdx, r9
mov dword [rbp + 0x188], r14d
mov esi, ebx
mov dword [rbp + 0x1c], r14d
movsxd rax, dword [r13 + 0x50]
mov r13d, 0x3ff
lea r8, [r9 + rax*2]
test r8, r8
je 0x18004e46d
cmp rdx, r8
jae 0x18004e4b0
movzx ecx, word [rdx]
test cx, cx
je 0x18004e4b0
add rdx, 2
cmp cx, r11w
jae 0x18004e483
inc esi
jmp 0x18004e463
cmp cx, r10w
jae 0x18004e492
mov eax, 2
add esi, eax
jmp 0x18004e463
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004e4ac
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add esi, eax
jmp 0x18004e463
mov r13, qword [rsp + 0x58]
mov edi, ebx
mov r9, qword [rbp - 0x38]
mov r14d, dword [rbp + 0x188]
mov dword [rbp + 0x20], esi
movsxd rax, dword [r13 + 0x54]
mov r13d, 0x3ff
lea rdx, [r9 + rax*2]
test rdx, rdx
je 0x18004e4dd
cmp r9, rdx
jae 0x18004e521
movzx ecx, word [r9]
test cx, cx
je 0x18004e521
add r9, 2
cmp cx, r11w
jae 0x18004e4f4
inc edi
jmp 0x18004e4d3
cmp cx, r10w
jae 0x18004e503
mov eax, 2
add edi, eax
jmp 0x18004e4d3
lea eax, [r12 + rcx]
cmp ax, r13w
mov eax, ebx
jbe 0x18004e51d
add cx, r15w
cmp cx, r13w
setbe al
add eax, 3
add edi, eax
jmp 0x18004e4d3
lea rcx, [rbp - 0x10]
mov dword [rbp + 0x24], edi
call rbx
movsxd rax, dword [rbp + 0x1c]
mov rbx, qword [rbp + 8]
mov r15d, dword [rbp - 0x60]
mov r12, qword [rbp - 0x50]
mov r13, qword [rsp + 0x58]
cmp eax, r14d
je 0x18004e55c
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.1800259b0
mov dword [r13 + 0x4c], eax
mov byte [r13 + 0xe74], 1
movsxd rax, dword [rbp + 0x20]
cmp eax, esi
je 0x18004e574
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.1800259b0
mov dword [r13 + 0x50], eax
movsxd rax, dword [rbp + 0x24]
cmp eax, edi
je 0x18004e58c
lea rdx, [rbx + rax]
mov rcx, rbx
call fcn.1800259b0
mov dword [r13 + 0x54], eax
cmp byte [rbp + 0x18], 0
mov edi, dword [rbp - 0x74]
je 0x18004e5e5
mov edx, dword [rbp + 0x10]
mov eax, dword [rbp - 0x58]
cmp edx, eax
jle 0x18004e5b5
test dil, dil
je 0x18004e5b5
lea rcx, [r13 + 0x10]
sub edx, eax
add edx, dword [rcx]
call fcn.1800367e0
mov rbx, qword [rbp + 8]
mov edx, dword [r13 + 0x10]
xor eax, eax
mov rcx, qword [r13 + 0x18]
xor r9d, r9d
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.180025710
mov dword [r13 + 4], eax
mov eax, dword [rbp + 0x10]
mov dword [r13 + 8], eax
mov dword [r13 + 0xe70], 0xbe99999a
mov r10d, dword [rbp + 0x178]
cmp byte [rsp + 0x68], 0
mov rsi, qword [rbp + 0x160]
jne 0x18004e216
mov r9, qword [r13 + 0x28]
mov r8, rsi
mov rax, r9
sub r8, r9
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004e623
inc rax
test ecx, ecx
jne 0x18004e610
test edx, edx
je 0x18004e216
mov r15d, dword [r13 + 8]
mov r12, r9
jmp 0x18004e216
mov edi, dword [rbp - 0x74]
jmp 0x18004e5ec
mov ecx, dword [rbp + 0x168]
lea eax, [r15 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x18004e66b
jbe 0x18004e666
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + rsi - 1], 0
mov byte [rbp - 0x77], 1
mov r14, qword [rsp + 0x70]
xor edi, edi
mov esi, dword [rbp - 0x70]
mov dword [r13 + 0xe78], edi
mov qword [r13 + 0xe80], rdi
mov qword [r13 + 0xe88], rdi
jmp 0x18004e692
xor edi, edi
cmp byte [rbp + 0x180], 0
je 0x18004e6a9
cmp dword [r14 + 0x1b38], esi
jne 0x18004e6a9
call fcn.180027be0
mov r11d, dword [rsp + 0x64]
movaps xmmword [rsp + 0x180], xmm13
movaps xmmword [rsp + 0x170], xmm14
movaps xmmword [rsp + 0x160], xmm15
test r11b, r11b
jne 0x18004e782
mov r8d, 1
lea rcx, [rsp + 0x78]
mov edx, esi
call fcn.180026f30
movss xmm7, dword [0x180067790]
mov ecx, 0x10
movaps xmm1, xmm7
call fcn.1800261e0
movss xmm0, dword [r14 + 0x1598]
mov r8d, eax
mov rdx, qword [rbp - 0x80]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm9
unpcklps xmm0, xmm11
movq rcx, xmm0
call fcn.1800268f0
mov r11d, dword [rsp + 0x64]
movaps xmm15, xmm9
mov r8, qword [rbp - 0x48]
addss xmm15, xmm10
movaps xmm14, xmm9
movss dword [rbp - 0x38], xmm9
addss xmm14, dword [r14 + 0x1590]
movaps xmm9, xmm11
movaps xmm13, xmm11
addss xmm9, dword [r14 + 0x1594]
addss xmm13, xmm8
movss dword [rbp - 0x30], xmm15
movss dword [rbp - 0x74], xmm15
movss dword [rbp + 0x180], xmm9
movss dword [rbp - 0x2c], xmm13
movss dword [rbp - 0x58], xmm13
jmp 0x18004e7fb
mov r8, qword [rbp - 0x48]
movaps xmm5, xmm9
movss xmm7, dword [0x180067790]
addss xmm5, xmm10
movaps xmm4, xmm11
movss dword [rbp - 0x38], xmm9
addss xmm4, xmm8
movss xmm0, dword [r8 + 0xd4]
movss xmm1, dword [r8 + 0xd0]
unpcklps xmm1, xmm0
movaps xmm15, xmm5
movaps xmm2, xmm1
movsd qword [rbp + 0x188], xmm1
movss xmm14, dword [rbp + 0x188]
movaps xmm13, xmm4
shufps xmm2, xmm2, 0x55
movss dword [rbp + 0x180], xmm2
movaps xmm9, xmm2
movss dword [rbp - 0x74], xmm5
movss dword [rbp - 0x30], xmm5
movss dword [rbp - 0x58], xmm4
movss dword [rbp - 0x2c], xmm4
cmp byte [rsp + 0x60], 0
xorps xmm0, xmm0
xorps xmm1, xmm1
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x50], xmm1
xorps xmm5, xmm5
movss dword [rbp - 0x34], xmm11
je 0x18004e828
mov rbx, qword [r13 + 0x28]
mov qword [rbp + 0x160], rbx
jmp 0x18004e82f
mov rbx, qword [rbp + 0x160]
movzx eax, byte [rbp + 0x158]
mov r12d, dword [rbp - 0x68]
test al, al
jne 0x18004ea06
test r12b, r12b
jne 0x18004ea06
test r11b, r11b
je 0x18004e8a8
movzx edx, byte [rbx]
lea r15, [rbx + 1]
mov ecx, edi
test dl, dl
je 0x18004e876
nop dword [rax]
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r15]
cmovne eax, ecx
inc r15
mov ecx, eax
test dl, dl
jne 0x18004e860
movzx eax, byte [r15 - 1]
dec r15
cmp al, 0xa
je 0x18004e888
cmp al, 0xd
je 0x18004e888
inc ecx
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
movss dword [rbp - 0x60], xmm10
mulss xmm8, dword [r14 + 0x19a8]
movss dword [rbp - 0x50], xmm8
jmp 0x18004e8df
cmp dword [r14 + 0x1b38], esi
jne 0x18004e8b7
movsxd r15, dword [r13 + 8]
jmp 0x18004e8ca
mov r15, 0xffffffffffffffff
nop
inc r15
cmp byte [rbx + r15], 0
jne 0x18004e8c0
add r15, rbx
mov rax, r15
sub rax, rbx
cmp rax, 0x200000
jge 0x18004f382
movaps xmm1, xmm7
xor ecx, ecx
call fcn.1800261e0
mov r10, qword [r8 + 0x2b0]
test r11b, r11b
movss xmm2, dword [r14 + 0x19a8]
lea r8, [rbp - 0x38]
mov r11, qword [r14 + 0x19a0]
cmovne r8, rdi
mov r9d, eax
mov rdx, r15
test eax, 0xff000000
je 0x18004f257
test r15, r15
jne 0x18004e93c
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp byte [rbx + rdx], 0
jne 0x18004e930
add rdx, rbx
cmp rbx, rdx
je 0x18004f257
test r11, r11
jne 0x18004e952
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm8, xmm8
ucomiss xmm2, xmm8
jne 0x18004e965
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rsp + 0x78], xmm0
test r8, r8
je 0x18004e9c2
movss xmm0, dword [r8]
maxss xmm0, dword [rsp + 0x78]
movss xmm1, dword [r8 + 4]
maxss xmm1, dword [rsp + 0x7c]
movss dword [rsp + 0x78], xmm0
movss xmm0, dword [r8 + 8]
minss xmm0, dword [rbp - 0x80]
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [r8 + 0xc]
minss xmm1, dword [rbp - 0x7c]
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
setne al
movaps xmm0, xmm14
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm8
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
unpcklps xmm0, xmm9
mov dword [rsp + 0x20], r9d
movq r9, xmm0
call fcn.1800438b0
jmp 0x18004f257
movsxd r15, dword [r13 + 8]
xor r10d, r10d
mov rsi, qword [r13 + 0x18]
add r15, rbx
mov r8d, 0xfffffc18
mov r9, rdi
mov rbx, rdi
xorps xmm6, xmm6
xorps xmm7, xmm7
mov edi, r8d
mov edx, r10d
test al, al
je 0x18004ea43
movsxd rax, dword [r13 + 0x4c]
mov edx, 1
mov r8d, 0xffffffff
lea r9, [rsi + rax*2]
test r12b, r12b
je 0x18004ea63
mov ecx, dword [r13 + 0x54]
mov edi, 0xffffffff
cmp dword [r13 + 0x50], ecx
cmovl ecx, dword [r13 + 0x50]
inc edx
movsxd rax, ecx
lea rbx, [rsi + rax*2]
movzx ecx, word [rsi]
movzx eax, r11b
mov r11d, r10d
add edx, eax
mov rax, rsi
test cx, cx
je 0x18004eab4
cmp cx, 0xa
jne 0x18004eaa7
inc r11d
cmp r8d, 0xffffffff
jne 0x18004ea94
cmp rax, r9
jb 0x18004ea94
dec edx
mov r8d, r11d
test edx, edx
jle 0x18004eab4
cmp edi, 0xffffffff
jne 0x18004eaa7
cmp rax, rbx
jb 0x18004eaa7
dec edx
mov edi, r11d
test edx, edx
jle 0x18004eab4
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x18004ea77
inc r11d
mov rdx, r9
cmp r8d, 0xffffffff
mov r10d, r11d
cmovne r10d, r8d
cmp edi, 0xffffffff
cmove edi, r11d
cmp r9, rsi
jbe 0x18004eae4
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18004eae4
mov rdx, rax
cmp rax, rsi
ja 0x18004ead1
mov rax, qword [0x18008b9c0]
movaps xmm12, xmm5
movss dword [rbp + 0x188], xmm5
movaps xmm1, xmm5
mov r8, qword [rax + 0x19a0]
movss xmm2, dword [rax + 0x19a8]
divss xmm2, dword [r8 + 0x14]
cmp rdx, r9
jae 0x18004eb71
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004eb2e
maxss xmm1, xmm12
movaps xmm12, xmm1
movaps xmm1, xmm5
jmp 0x18004eb51
cmp ecx, 0xd
je 0x18004eb51
cmp ecx, dword [r8]
jge 0x18004eb43
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004eb49
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rdx, r9
jb 0x18004eb14
comiss xmm12, xmm1
movss dword [rbp + 0x188], xmm12
jae 0x18004eb71
movss dword [rbp + 0x188], xmm1
movaps xmm12, xmm1
movss xmm0, dword [r14 + 0x19a8]
movd xmm11, r10d
cvtdq2ps xmm11, xmm11
mulss xmm11, xmm0
movss dword [rbp - 0x68], xmm11
test edi, edi
js 0x18004ec3c
mov rdx, rbx
cmp rbx, rsi
jbe 0x18004ebb3
nop
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18004ebb3
mov rdx, rax
cmp rax, rsi
ja 0x18004eba0
mov rax, qword [0x18008b9c0]
movaps xmm7, xmm5
movaps xmm1, xmm5
mov r8, qword [rax + 0x19a0]
movss xmm2, dword [rax + 0x19a8]
divss xmm2, dword [r8 + 0x14]
cmp rdx, rbx
jae 0x18004ec28
nop word [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004ebf8
maxss xmm1, xmm7
movaps xmm7, xmm1
movaps xmm1, xmm5
jmp 0x18004ec1b
cmp ecx, 0xd
je 0x18004ec1b
cmp ecx, dword [r8]
jge 0x18004ec0d
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004ec13
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rdx, rbx
jb 0x18004ebe0
comiss xmm7, xmm1
jae 0x18004ec28
movaps xmm7, xmm1
movss xmm0, dword [r14 + 0x19a8]
movd xmm6, edi
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm0
mov r9d, dword [rsp + 0x64]
test r9b, r9b
je 0x18004ec5d
movd xmm1, r11d
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x60], xmm10
mulss xmm1, xmm0
movss dword [rbp - 0x50], xmm1
movzx r8d, byte [rbp + 0x158]
test r8b, r8b
je 0x18004ed37
cmp byte [r13 + 0xe74], 0
je 0x18004ed37
test dword [rbp + 0x178], 0x1000
jne 0x18004ece0
movss xmm2, dword [r13 + 0x48]
movaps xmm1, xmm10
comiss xmm12, xmm2
mulss xmm1, dword [0x180067720]
movaps xmm0, xmm12
jae 0x18004ecbf
subss xmm0, xmm1
maxss xmm0, xmm5
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r13 + 0x48], xmm0
jmp 0x18004ece6
subss xmm0, xmm10
comiss xmm0, xmm2
jb 0x18004ece6
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r13 + 0x48], xmm0
jmp 0x18004ece6
xor eax, eax
mov dword [r13 + 0x48], eax
test r9b, r9b
je 0x18004ed2f
mov rax, qword [rbp - 0x48]
movaps xmm0, xmm11
subss xmm0, dword [r14 + 0x19a8]
movss xmm1, dword [rax + 0x58]
comiss xmm0, xmm1
jae 0x18004ed0c
maxss xmm0, xmm5
jmp 0x18004ed19
movaps xmm0, xmm11
subss xmm0, xmm8
maxss xmm0, xmm1
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
addss xmm1, xmm9
movss dword [rbp + 0x180], xmm1
mov byte [r13 + 0xe74], 0
movss xmm10, dword [r13 + 0x48]
test r12b, r12b
je 0x18004ef9c
mov edx, dword [r13 + 0x54]
mov eax, edx
mov ecx, dword [r13 + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rdi, [rsi + rax*2]
test r8b, r8b
je 0x18004ed74
movss xmm1, dword [0x180067790]
jmp 0x18004ed7c
movss xmm1, dword [0x18006775c]
mov ecx, 0x33
call fcn.1800261e0
mov esi, eax
xorps xmm5, xmm5
test r9b, r9b
je 0x18004ed9a
xorps xmm8, xmm8
xorps xmm9, xmm9
jmp 0x18004edac
movss xmm8, dword [0x180067984]
movss xmm9, dword [0x1800677dc]
mov r12, qword [rbp - 0x48]
movaps xmm4, xmm14
addss xmm4, xmm7
movss xmm7, dword [rbp + 0x180]
addss xmm7, xmm6
subss xmm4, xmm10
cmp rbx, rdi
jae 0x18004efa0
movss xmm6, dword [0x180067750]
movss xmm11, dword [rbp - 0x20]
movss xmm12, dword [rbp - 0x40]
jmp 0x18004edf3
xorps xmm5, xmm5
movaps xmm0, xmm13
addss xmm0, dword [r14 + 0x19a8]
comiss xmm7, xmm0
ja 0x18004ef86
comiss xmm7, xmm12
jae 0x18004ee3b
cmp rbx, rdi
jae 0x18004ef6b
nop dword [rax + rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004ef6b
cmp rbx, rdi
jb 0x18004ee20
jmp 0x18004ef6b
mov rax, qword [0x18008b9c0]
xorps xmm3, xmm3
xorps xmm2, xmm2
mov rdx, qword [rax + 0x19a0]
movss xmm1, dword [rax + 0x19a8]
divss xmm1, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x18004ee9f
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004ee95
cmp ecx, 0xd
je 0x18004ee8e
cmp ecx, dword [rdx]
jge 0x18004ee81
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004ee86
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rbx, rdi
jb 0x18004ee61
jmp 0x18004ee9f
movaps xmm3, xmm2
movaps xmm2, xmm5
maxss xmm3, xmm5
maxss xmm2, xmm3
comiss xmm2, xmm5
ja 0x18004eed6
mov rax, qword [r14 + 0x19a0]
cmp dword [rax], 0x20
jle 0x18004eec2
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004eec7
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm0, xmm8
addss xmm2, xmm4
subss xmm0, dword [r14 + 0x19a8]
movaps xmm1, xmm9
movaps xmm3, xmm12
addss xmm1, xmm7
movaps xmm5, xmm11
maxss xmm5, xmm4
movaps xmm4, xmm15
minss xmm4, xmm2
addss xmm0, xmm7
movss dword [rsp + 0x78], xmm5
movss dword [rbp - 0x80], xmm4
maxss xmm3, xmm0
movaps xmm0, xmm13
minss xmm0, xmm1
movss dword [rsp + 0x7c], xmm3
comiss xmm12, xmm0
movss dword [rbp - 0x7c], xmm0
jae 0x18004ef6b
comiss xmm13, xmm3
jbe 0x18004ef6b
comiss xmm11, xmm4
jae 0x18004ef6b
comiss xmm15, xmm5
jbe 0x18004ef6b
mov rcx, qword [r12 + 0x2b0]
lea r8, [rbp - 0x80]
xorps xmm0, xmm0
mov dword [rsp + 0x28], 0xf
mov r9d, esi
movss dword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x78]
call fcn.18003f7d0
movaps xmm4, xmm14
subss xmm4, xmm10
addss xmm7, dword [r14 + 0x19a8]
cmp rbx, rdi
jb 0x18004edf0
movss xmm11, dword [rbp - 0x68]
movss xmm12, dword [rbp + 0x188]
mov r9d, dword [rsp + 0x64]
jmp 0x18004efa0
mov r12, qword [rbp - 0x48]
mov rbx, qword [rbp + 0x160]
test r9b, r9b
jne 0x18004efbe
mov rax, r15
sub rax, rbx
cmp rax, 0x200000
jge 0x18004f0f6
movss xmm7, dword [0x180067790]
xor ecx, ecx
movaps xmm1, xmm7
call fcn.1800261e0
cmp byte [rsp + 0x64], 0
lea r8, [rbp - 0x38]
mov r10, qword [r12 + 0x2b0]
mov edi, 0
movss xmm2, dword [r14 + 0x19a8]
cmovne r8, rdi
mov r11, qword [r14 + 0x19a0]
movaps xmm3, xmm14
subss xmm3, xmm10
mov r9d, eax
mov rdx, r15
test eax, 0xff000000
je 0x18004f100
test r15, r15
jne 0x18004f02c
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rbx + rdx], dil
jne 0x18004f020
add rdx, rbx
cmp rbx, rdx
je 0x18004f100
test r11, r11
jne 0x18004f042
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
xorps xmm8, xmm8
ucomiss xmm2, xmm8
jne 0x18004f055
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rsp + 0x78], xmm0
test r8, r8
je 0x18004f0b2
movss xmm0, dword [rsp + 0x78]
maxss xmm0, dword [r8]
movss xmm1, dword [r8 + 4]
maxss xmm1, dword [rsp + 0x7c]
movss dword [rsp + 0x78], xmm0
movss xmm0, dword [r8 + 8]
minss xmm0, dword [rbp - 0x80]
movss dword [rsp + 0x7c], xmm1
movss xmm1, dword [r8 + 0xc]
minss xmm1, dword [rbp - 0x7c]
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
movss xmm6, dword [rbp + 0x180]
setne al
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm8
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
unpcklps xmm3, xmm6
mov dword [rsp + 0x20], r9d
movq r9, xmm3
call fcn.1800438b0
jmp 0x18004f10c
movss xmm7, dword [0x180067790]
xor edi, edi
movss xmm6, dword [rbp + 0x180]
xorps xmm8, xmm8
cmp byte [rbp + 0x158], 0
je 0x18004f248
movss xmm0, dword [r14 + 0x18]
addss xmm0, dword [r13 + 0xe70]
movss dword [r13 + 0xe70], xmm0
cmp byte [r14 + 0xca], 0
je 0x18004f15b
comiss xmm0, xmm8
jbe 0x18004f15b
movss xmm1, dword [0x180067798]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm0, dword [0x18006777c]
jbe 0x18004f15b
xor al, al
jmp 0x18004f15d
mov al, 1
addss xmm6, xmm11
movss xmm11, dword [rbp - 0x40]
addss xmm14, xmm12
movaps xmm0, xmm6
movaps xmm1, xmm6
subss xmm14, xmm10
subss xmm0, dword [r14 + 0x19a8]
subss xmm1, dword [0x1800677b4]
movss dword [rsp + 0x78], xmm14
movaps xmm2, xmm14
addss xmm2, xmm7
movss dword [rbp - 0x7c], xmm1
addss xmm0, dword [0x180067750]
movss dword [rbp - 0x80], xmm2
movss dword [rsp + 0x7c], xmm0
test al, al
je 0x18004f216
comiss xmm11, xmm1
jae 0x18004f216
movss xmm3, dword [rbp - 0x58]
comiss xmm3, xmm0
jbe 0x18004f216
movss xmm0, dword [rbp - 0x20]
comiss xmm0, xmm2
jae 0x18004f216
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm14
jbe 0x18004f216
movss dword [rbp + 0x15c], xmm1
xor ecx, ecx
movaps xmm1, xmm7
movss dword [rbp + 0x158], xmm14
call fcn.1800261e0
mov rcx, qword [r12 + 0x2b0]
lea rdx, [rsp + 0x78]
mov r9d, eax
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0x158]
call fcn.18003f560
cmp byte [rsp + 0x68], 0
movss xmm12, dword [0x180067984]
jne 0x18004f257
subss xmm6, dword [r14 + 0x19a8]
subss xmm14, xmm7
movss dword [r14 + 0x2fc4], xmm6
movss dword [r14 + 0x2fc0], xmm14
jmp 0x18004f257
movss xmm11, dword [rbp - 0x40]
movss xmm12, dword [0x180067984]
cmp byte [rsp + 0x64], 0
je 0x18004f382
mov rcx, qword [0x18008b9c0]
movss xmm8, dword [rbp - 0x50]
addss xmm8, dword [r14 + 0x19a8]
movss xmm9, dword [rbp - 0x60]
mov rax, qword [rcx + 0x1af0]
movss dword [rbp + 0x158], xmm9
movss dword [rbp + 0x15c], xmm8
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1af0]
cmp byte [rax + 0x83], 0
jne 0x18004f378
movss xmm6, dword [rax + 0xd0]
lea rcx, [rbp + 0x158]
movss xmm7, dword [rax + 0xd4]
addss xmm9, xmm6
addss xmm8, xmm7
movaps xmm1, xmm12
movaps xmm5, xmm9
unpcklps xmm5, xmm8
call fcn.180027c90
mov r9, qword [0x18008b9c0]
movaps xmm0, xmm6
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm7
shufps xmm0, xmm0, 0xe1
mov r10, qword [r9 + 0x1af0]
unpcklpd xmm0, xmm5
movups xmmword [rsp + 0x78], xmm0
movups xmmword [r10 + 0x11c], xmm0
mov qword [r10 + 0x114], 0
mov dword [r9 + 0x1bf8], edi
mov rax, qword [r9 + 0x1af0]
comiss xmm8, dword [rax + 0x25c]
jbe 0x18004f351
comiss xmm7, dword [rax + 0x264]
jae 0x18004f351
comiss xmm9, dword [rax + 0x258]
jbe 0x18004f351
comiss xmm6, dword [rax + 0x260]
jb 0x18004f35b
cmp byte [r9 + 0x3008], 0
je 0x18004f378
mov r8b, 1
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x78]
call fcn.18002a7c0
test al, al
je 0x18004f378
or dword [r10 + 0x118], 1
call fcn.18002ac40
call fcn.180030560
mov eax, dword [rbp - 0x6c]
movaps xmm15, xmmword [rsp + 0x160]
movaps xmm14, xmmword [rsp + 0x170]
movaps xmm13, xmmword [rsp + 0x180]
test al, al
je 0x18004f3ac
call fcn.18002fcd0
mov eax, dword [rbp - 0x6c]
cmp byte [r14 + 0x3008], 0
je 0x18004f50c
test al, al
jne 0x18004f50c
mov rsi, qword [0x18008b9c0]
mov r14, qword [rsi + 0x1af0]
test r15, r15
jne 0x18004f3fe
mov r15, rbx
cmp rbx, 0xffffffffffffffff
jae 0x18004f3fe
nop
movzx ecx, byte [r15]
test cl, cl
je 0x18004f3fe
lea rax, [r15 + 1]
cmp cl, 0x23
jne 0x18004f3f5
cmp byte [rax], cl
je 0x18004f3fe
mov r15, rax
cmp rax, 0xffffffffffffffff
jb 0x18004f3e0
movss xmm0, dword [rsi + 0x3028]
movss xmm1, dword [rbp + 0x180]
addss xmm0, dword [0x180067790]
movss dword [rsi + 0x3028], xmm1
comiss xmm1, xmm0
jbe 0x18004f42f
mov r12b, 1
mov byte [rsi + 0x302c], r12b
jmp 0x18004f432
xor r12b, r12b
mov ecx, dword [rsi + 0x3030]
mov eax, dword [r14 + 0x180]
cmp ecx, eax
jle 0x18004f44b
mov dword [rsi + 0x3030], eax
mov ecx, eax
mov r14d, dword [r14 + 0x180]
sub r14d, ecx
nop word [rax + rax]
mov r8, r15
mov edx, 0xa
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov rdi, r15
cmovne rdi, rax
cmp rdi, r15
jne 0x18004f487
cmp rbx, rdi
je 0x18004f4f6
mov r9d, edi
sub r9d, ebx
test r12b, r12b
jne 0x18004f4c1
cmp rbx, qword [rbp + 0x160]
jne 0x18004f4c1
cmp byte [rsi + 0x302c], r12b
je 0x18004f4ad
lea rcx, str._s_.s
jmp 0x18004f4c8
mov r8, rbx
lea rcx, str.__.s
mov edx, r9d
call fcn.180035450
jmp 0x18004f4e1
lea rcx, str._r_n_s_.s
lea r8, [0x18005f7cd]
mov qword [rsp + 0x20], rbx
lea edx, [r14*4]
call fcn.180035450
mov byte [rsi + 0x302c], 0
cmp rdi, r15
je 0x18004f507
lea rbx, [rdi + 1]
jmp 0x18004f460
test r12b, r12b
je 0x18004f507
lea rcx, [0x180062740]
call fcn.180035450
mov r14, qword [rsp + 0x70]
movss xmm1, dword [rbp - 0x1c]
xorps xmm0, xmm0
comiss xmm1, xmm0
mov r12, qword [rsp + 0x208]
jbe 0x18004f553
movss xmm0, dword [rbp - 0x18]
mov r9b, 1
addss xmm0, dword [r14 + 0x15a8]
addss xmm11, dword [r14 + 0x1594]
mov rdx, qword [rbp + 0x150]
xor r8d, r8d
unpcklps xmm0, xmm11
movq rcx, xmm0
call fcn.1800263a0
movzx edx, byte [rbp - 0x77]
mov ecx, dword [rbp + 0x178]
test dl, dl
je 0x18004f585
bt ecx, 0x15
jb 0x18004f585
mov rax, qword [0x18008b9c0]
mov word [rax + 0x1b47], 0x101
mov rax, qword [rax + 0x1af0]
or dword [rax + 0x118], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x50]
cmovne eax, ecx
jmp 0x18004c577