Function at 0x1800226a0
Capabilities:
Hash data with crc32
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [r11 - 0x138]
sub rsp, 0x210
movaps xmmword [r11 - 0xd8], xmm15
mov rax, qword [0x1800bf280]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov r14, qword [0x1800c5c08]
mov r10d, 0xffffffff
mov qword [r11 + 0x20], rbx
mov ebx, r8d
mov qword [r11 - 0x30], r12
mov r12, rdx
mov qword [r11 - 0x38], r13
mov r11, rcx
mov qword [rbp - 0x80], rcx
mov ecx, r10d
mov qword [rbp - 0x68], rdx
movzx r9d, byte [r11]
lea r8, [r11 + 1]
test r9b, r9b
je 0x18002273f
lea rdi, [0x1800a9b10]
nop
cmp r9b, 0x23
jne 0x180022723
cmp byte [r8], r9b
jne 0x180022723
cmp byte [r8 + 1], r9b
cmove ecx, r10d
movzx edx, cl
movzx eax, r9b
movzx r9d, byte [r8]
xor rdx, rax
shr ecx, 8
inc r8
xor ecx, dword [rdi + rdx*4]
test r9b, r9b
jne 0x180022710
not ecx
call fcn.18001f7f0
test rax, rax
mov qword [rsp + 0x78], rax
mov rsi, rax
sete cl
mov byte [rsp + 0x41], cl
test rax, rax
jne 0x18002276c
mov edx, ebx
mov rcx, r11
call fcn.18001fb40
mov rsi, rax
jmp 0x18002277a
movzx edx, cl
mov r8d, ebx
mov rcx, rax
call fcn.18001f950
mov edi, dword [rsi + 0x280]
mov eax, ebx
mov r13d, ebx
mov dword [rsp + 0x4c], edi
or r13d, 6
and eax, 0xc0200
cmp eax, 0xc0200
cmovne r13d, ebx
cmp dword [r14 + 0x3fb0], 0
mov ebx, dword [r14 + 0x3f60]
mov dword [rsp + 0x48], r13d
mov dword [rsp + 0x50], ebx
jne 0x1800227c3
cmp byte [r14 + 0x3f71], 0
je 0x1800227c3
mov al, 1
jmp 0x1800227c5
xor al, al
mov byte [rsi + 0xd3], al
lea eax, [rbx - 1]
cmp edi, eax
setl r8b
mov byte [rsp + 0x43], r8b
bt r13d, 0x1a
jae 0x180022812
movsxd rax, dword [r14 + 0x41f0]
lea rdx, [rax + rax*2]
shl rdx, 4
add rdx, qword [r14 + 0x41e8]
cmp rsi, qword [rdx + 8]
mov eax, dword [rdx]
setne cl
cmp dword [rsi + 0xe0], eax
setne al
or cl, al
or r8b, cl
mov byte [rsp + 0x43], r8b
movzx r15d, byte [rsi + 0xd1]
xor ecx, ecx
cmp edi, ebx
je 0x18002288c
mov byte [rsi + 0xd1], r8b
test r8b, r8b
je 0x180022848
or byte [rsi + 0xf0], 8
or byte [rsi + 0xf1], 8
or byte [rsi + 0xf2], 8
or byte [rsi + 0xf3], 8
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xc], r13d
mov dword [rsi + 0x280], ebx
movsd xmm0, qword [r14 + 0x3f58]
mov word [rsi + 0xda], cx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0x288], xmm0
movzx eax, word [r14 + 0x3fd0]
mov word [rsi + 0xdc], ax
inc dword [r14 + 0x3fd0]
jmp 0x180022895
mov r13d, dword [rsi + 0xc]
mov dword [rsp + 0x48], r13d
test dword [r14 + 0x40f0], 0x200
je 0x1800228b8
mov r8d, dword [r14 + 0x4100]
mov rcx, rsi
mov edx, dword [r14 + 0x4158]
call fcn.1800375d0
cmp edi, ebx
je 0x180022986
cmp dword [rsi + 0x430], 0
jne 0x18002299f
cmp qword [rsi + 0x420], 0
jne 0x18002299f
mov rax, qword [0x1800c5c08]
xor cl, cl
cmp byte [rax + 0x72], cl
jne 0x1800228f2
cmp byte [rsi + 0x2c], cl
je 0x1800229a1
test dword [rsi + 0xc], 0x1200001
lea rdi, [rsi + 0xc]
jne 0x1800229a1
cmp byte [rsi + 0xd3], cl
jne 0x1800229a1
movzx ebx, byte [rsi + 0x401]
mov rdx, r12
mov rcx, rsi
call fcn.180037e70
test byte [rsi + 0x401], 1
mov r13d, dword [rdi]
mov dword [rsp + 0x48], r13d
je 0x18002293a
and dword [r14 + 0x40f0], 0xffffffef
test byte [rsi + 0x401], 4
je 0x18002297e
test bl, 4
jne 0x18002297e
test bl, 2
je 0x18002297e
cmp byte [rsi + 0xd1], 0
jne 0x18002297e
test r15b, r15b
jne 0x18002297e
or byte [rsi + 0xf0], 8
or byte [rsi + 0xf1], 8
or byte [rsi + 0xf2], 8
or byte [rsi + 0xf3], 8
mov byte [rsi + 0xd1], 1
mov ebx, dword [rsp + 0x50]
mov edi, dword [rsp + 0x4c]
test byte [rsi + 0x401], 1
je 0x1800229c5
mov rax, qword [rsi + 0x420]
mov r12, qword [rax + 0x88]
jmp 0x1800229ec
mov cl, 1
movzx ebx, byte [rsi + 0x401]
lea rdi, [rsi + 0xc]
test cl, cl
jne 0x180022916
and bl, 0xfb
and bl, 0xfd
and bl, 0xfe
mov byte [rsi + 0x401], bl
jmp 0x18002297e
movsxd rax, dword [r14 + 0x3fb0]
test eax, eax
jne 0x1800229dc
xor eax, eax
mov r12d, eax
mov qword [rsp + 0x68], rax
jmp 0x1800229f3
imul rcx, rax, 0x58
mov rax, qword [r14 + 0x3fb8]
mov r12, qword [rcx + rax - 0x58]
xor eax, eax
mov qword [rsp + 0x68], r12
cmp edi, ebx
je 0x180022a04
test r13d, 0x5000000
cmovne rax, r12
jmp 0x180022a0b
mov rax, qword [rsi + 0x390]
lea rdi, [rsi + 0x108]
mov qword [rsp + 0x58], rax
cmp dword [rdi], 0
jne 0x180022a3e
cmp dword [rdi + 4], 0
jne 0x180022a2f
mov edx, 8
mov rcx, rdi
call fcn.18003a7c0
movsxd rdx, dword [rdi]
mov eax, dword [rsi + 8]
mov rcx, qword [rdi + 8]
mov dword [rcx + rdx*4], eax
inc dword [rdi]
mov r8, qword [0x1800c5c08]
xorps xmm0, xmm0
mov eax, dword [r14 + 0x40e8]
movups xmm1, xmmword [r14 + 0x40c0]
mov qword [r14 + 0x3fe0], rsi
mov ebx, dword [r14 + 0x3fb0]
movups xmmword [rbp - 0x1c], xmm0
mov dword [rbp - 0x20], eax
mov rax, qword [r8 + 0x3fe0]
movups xmm0, xmmword [r14 + 0x40b0]
mov qword [rbp - 0x60], rsi
movups xmmword [rbp - 0x48], xmm1
movzx ecx, word [rax + 0x108]
movzx eax, word [r8 + 0x4180]
movsd xmm1, qword [r14 + 0x40e0]
mov word [rbp - 0x1a], ax
movzx eax, word [r8 + 0x4190]
mov word [rbp - 0x18], ax
movzx eax, word [r8 + 0x41a0]
mov word [rbp - 0x16], ax
movzx eax, word [r8 + 0x41b0]
mov word [rbp - 0x14], ax
movzx eax, word [r8 + 0x41d0]
mov word [rbp - 0x12], ax
movzx eax, word [r8 + 0x41c0]
mov word [rbp - 0x10], ax
movzx eax, word [r8 + 0x41f0]
movups xmmword [rbp - 0x58], xmm0
mov word [rbp - 0xe], ax
movups xmm0, xmmword [r14 + 0x40d0]
movzx eax, word [r8 + 0x54dc]
mov word [rbp - 0x1c], cx
mov ecx, dword [r14 + 0x3fb4]
mov word [rbp - 0xc], ax
movsd qword [rbp - 0x28], xmm1
movups xmmword [rbp - 0x38], xmm0
cmp ebx, ecx
jne 0x180022ba3
inc ebx
test ecx, ecx
je 0x180022b2c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180022b31
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ecx
jle 0x180022ba3
inc dword [r8 + 0xf4]
movsxd rax, ebx
imul rcx, rax, 0x58
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, qword [r14 + 0x3fb8]
mov r15, rax
test rdi, rdi
je 0x180022b8e
movsxd rdx, dword [r14 + 0x3fb0]
mov rcx, rax
imul r8, rdx, 0x58
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800c5c08]
test rdx, rdx
je 0x180022b85
dec dword [rdx + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r14 + 0x3fb8], r15
lea rdi, [rsi + 0x108]
mov dword [r14 + 0x3fb4], ebx
movsxd rax, dword [r14 + 0x3fb0]
xor ebx, ebx
movaps xmm0, xmmword [rbp - 0x60]
movaps xmm1, xmmword [rbp - 0x50]
imul rcx, rax, 0x58
mov rax, qword [r14 + 0x3fb8]
movups xmmword [rcx + rax], xmm0
movaps xmm0, xmmword [rbp - 0x40]
movups xmmword [rcx + rax + 0x10], xmm1
movaps xmm1, xmmword [rbp - 0x30]
movups xmmword [rcx + rax + 0x20], xmm0
movaps xmm0, xmmword [rbp - 0x20]
movups xmmword [rcx + rax + 0x30], xmm1
movsd xmm1, qword [rbp - 0x10]
movups xmmword [rcx + rax + 0x40], xmm0
movsd qword [rcx + rax + 0x50], xmm1
inc dword [r14 + 0x3fb0]
mov qword [r14 + 0x3fe0], rbx
bt r13d, 0x1c
jae 0x180022c0a
inc dword [r14 + 0x4200]
bt r13d, 0x1a
jae 0x180022c40
lea rcx, [r14 + 0x41f0]
movsxd rax, dword [rcx]
lea rbx, [rax + rax*2]
shl rbx, 4
add rbx, qword [r14 + 0x41e8]
mov rdx, rbx
mov qword [rbx + 8], rsi
call fcn.180039e20
mov eax, dword [rbx]
xor ebx, ebx
mov dword [rsi + 0xe0], eax
mov r10d, dword [rsp + 0x50]
mov r11d, dword [rsp + 0x4c]
cmp r11d, r10d
je 0x180022c66
mov r8, qword [rsp + 0x58]
mov edx, r13d
mov rcx, rsi
call fcn.1800225d0
mov qword [rsi + 0x398], r12
xor r15b, r15b
mov byte [rsp + 0x40], 0
xor r12b, r12b
test byte [r14 + 0x40f0], 1
je 0x180022d10
mov r8d, dword [r14 + 0x40f4]
movzx ecx, byte [rsi + 0xf0]
movsx eax, cl
test r8d, eax
setne byte [rsp + 0x40]
test r8d, eax
je 0x180022d01
movss xmm0, dword [r14 + 0x4110]
movss xmm1, dword [r14 + 0x410c]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
comiss xmm1, dword [0x1800af7f0]
jbe 0x180022d01
movsd xmm0, qword [r14 + 0x4104]
and ecx, 0xf1
mov eax, dword [rsi + 0xf0]
and eax, 0xffffff00
movsd qword [rsi + 0xf4], xmm0
movsd xmm1, qword [r14 + 0x410c]
or ecx, eax
mov dword [rsi + 0xf0], ecx
movsd qword [rsi + 0xfc], xmm1
jmp 0x180022d10
lea rdx, [r14 + 0x4104]
mov rcx, rsi
call fcn.180025c80
test byte [r14 + 0x40f0], 2
xorps xmm15, xmm15
je 0x180022d65
movsx eax, byte [rsi + 0xf1]
lea rdx, [r14 + 0x4114]
mov r8d, dword [r14 + 0x40f8]
and eax, r8d
je 0x180022d47
movss xmm0, dword [rdx]
comiss xmm0, xmm15
jbe 0x180022d47
mov r15b, 1
jmp 0x180022d4b
test eax, eax
je 0x180022d5d
movss xmm0, dword [r14 + 0x4118]
comiss xmm0, xmm15
jbe 0x180022d5d
mov r12b, 1
mov rcx, rsi
call fcn.180025db0
test byte [r14 + 0x40f0], 0x80
je 0x180022da9
movss xmm0, dword [r14 + 0x4124]
comiss xmm0, xmm15
jb 0x180022d8c
movss dword [rsi + 0xa8], xmm0
mov dword [rsi + 0xb0], ebx
movss xmm0, dword [r14 + 0x4128]
comiss xmm0, xmm15
jb 0x180022da9
movss dword [rsi + 0xac], xmm0
mov dword [rsi + 0xb4], ebx
test byte [r14 + 0x40f0], 4
je 0x180022dc3
movsd xmm0, qword [r14 + 0x411c]
movsd qword [rsi + 0x70], xmm0
jmp 0x180022dd0
cmp r11d, r10d
je 0x180022dd0
mov qword [rsi + 0x70], 0
test dword [r14 + 0x40f0], 0x400
je 0x180022e01
movups xmm0, xmmword [r14 + 0x415c]
movups xmmword [rsi + 0x14], xmm0
movsd xmm1, qword [r14 + 0x416c]
movsd qword [rsi + 0x24], xmm1
mov eax, dword [r14 + 0x4174]
mov dword [rsi + 0x2c], eax
test byte [r14 + 0x40f0], 8
je 0x180022e52
mov ecx, dword [r14 + 0x40fc]
movzx edx, byte [r14 + 0x412d]
test ecx, ecx
je 0x180022e29
movsx eax, byte [rsi + 0xf2]
test ecx, eax
je 0x180022e52
movzx ecx, byte [rsi + 0xf2]
mov eax, dword [rsi + 0xf0]
and ecx, 0xf1
shl ecx, 0x10
and eax, 0xff00ffff
or ecx, eax
mov byte [rsi + 0xce], dl
mov dword [rsi + 0xf0], ecx
test byte [r14 + 0x40f0], 0x20
je 0x180022e6e
mov rcx, rsi
call fcn.180025860
mov r10d, dword [rsp + 0x50]
mov r11d, dword [rsp + 0x4c]
cmp byte [rsi + 0xd1], 0
je 0x180022e93
and byte [rsi + 0xf0], 0xf7
and byte [rsi + 0xf1], 0xf7
and byte [rsi + 0xf2], 0xf7
and byte [rsi + 0xf3], 0xf7
cmp r11d, r10d
je 0x180025197
movaps xmmword [rsp + 0x1f0], xmm6
mov ebx, 1
movaps xmmword [rsp + 0x1e0], xmm7
mov eax, r13d
movaps xmmword [rsp + 0x1d0], xmm8
and eax, 0x3000000
cmp qword [rbp - 0x68], 0
movaps xmmword [rsp + 0x1c0], xmm9
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm11
movaps xmmword [rsp + 0x190], xmm12
movaps xmmword [rsp + 0x180], xmm13
mov byte [rsi + 0xcb], 1
movaps xmmword [rsp + 0x170], xmm14
mov dword [rsp + 0x54], eax
movzx eax, byte [rsi + 0xed]
mov byte [rsp + 0x44], al
setne al
mov byte [rsi + 0xd5], al
mov dword [rsi + 0x258], 0xff7fffff
mov dword [rsi + 0x25c], 0xff7fffff
mov dword [rsi + 0x260], 0x7f7fffff
mov dword [rsi + 0x264], 0x7f7fffff
mov ecx, dword [rdi + 4]
mov dword [rsp + 0x70], ebx
cmp ecx, ebx
jge 0x180022f72
test ecx, ecx
je 0x180022f5e
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180022f63
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.18003a7c0
mov dword [rdi], ebx
mov rcx, qword [rsi + 0x2c0]
call fcn.1800429d0
mov dword [rsi + 0x1d0], 0xffffffff
bt r13d, 0x1d
jae 0x180022fba
mov rcx, qword [rsi + 0x2c0]
add rcx, 0xa8
call fcn.180046430
mov rdx, qword [rsi + 0x2c0]
mov r8d, ebx
lea rcx, [rdx + 0xa8]
call fcn.180046900
cmp byte [rsi + 0x400], 0
je 0x180022fff
mov rcx, qword [rsi + 0x2c0]
mov edx, dword [rsi + 0x3f8]
add rcx, 0x10
mov byte [rsi + 0x400], 0
call fcn.18003a570
mov rcx, qword [rsi + 0x2c0]
mov edx, dword [rsi + 0x3fc]
add rcx, 0x20
call fcn.18003a440
xor eax, eax
mov qword [rsi + 0x3f8], rax
mov rax, qword [rsi + 0x30]
test rax, rax
je 0x180023011
cmp qword [rax + 0x88], rsi
je 0x180023034
test byte [rsi + 0x401], bl
jne 0x180023034
cmp qword [r14 + 0x43e0], 0
je 0x1800230ee
test dword [rsi + 0xc], 0x80000
jne 0x1800230ee
mov r9, qword [rsp + 0x78]
test r9, r9
je 0x1800230f3
mov r10, qword [rbp - 0x80]
mov r9, qword [rsi]
mov rax, r10
mov r8, r9
sub r8, r10
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180023065
inc rax
test ecx, ecx
jne 0x180023052
test edx, edx
je 0x1800230ee
movsxd rdi, dword [rsi + 0x88]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [r10 + rbx], 0
jne 0x180023080
inc rbx
cmp rdi, rbx
jae 0x1800230d7
test r9, r9
je 0x1800230a9
mov rax, qword [0x1800c5c08]
test rax, rax
je 0x1800230a9
dec dword [rax + 0xf4]
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1800c5c08]
test rax, rax
je 0x1800230c4
inc dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r10, qword [rbp - 0x80]
mov rdi, rbx
mov r9, rax
mov r8, rbx
mov rdx, r10
mov rcx, r9
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi], rax
mov dword [rsi + 0x88], edi
mov r9, qword [rsp + 0x78]
lea rdx, [rsi + 0x60]
mov rcx, rsi
lea r8, [rsi + 0x68]
call fcn.180020080
movzx eax, byte [rsi + 0xec]
test al, al
jle 0x180023116
dec al
mov byte [rsi + 0xec], al
movzx eax, byte [rsi + 0xed]
test al, al
jle 0x180023129
dec al
mov byte [rsi + 0xed], al
movzx eax, byte [rsi + 0xee]
test al, al
jle 0x18002313c
dec al
mov byte [rsi + 0xee], al
test r9, r9
jne 0x180023152
test r15b, r15b
je 0x18002314b
test r12b, r12b
jne 0x180023152
mov byte [rsi + 0xed], 1
xor edi, edi
cmp byte [rsp + 0x43], dil
je 0x180023196
test r13d, 0x6000000
je 0x180023196
mov byte [rsi + 0xed], 1
test r13b, 0x40
je 0x180023196
test r15b, r15b
jne 0x18002317c
mov dword [rsi + 0x58], edi
mov dword [rsi + 0x50], edi
test r12b, r12b
jne 0x180023187
mov dword [rsi + 0x5c], edi
mov dword [rsi + 0x54], edi
mov qword [rsi + 0x68], 0
mov qword [rdx], 0
call fcn.18002f8b0
mov rcx, qword [rsi + 0x30]
mov rdx, qword [0x1800c5c08]
test rcx, rcx
je 0x1800231b4
mov eax, dword [rdx + 0x3f60]
mov dword [rcx + 0x64], eax
cmp qword [rdx + 0x4220], rcx
je 0x1800231fa
test rcx, rcx
je 0x1800231e9
mov eax, dword [rcx + 0x28]
mov dword [rdx + 0x4218], eax
mov rax, qword [rdx + 0x3890]
mov qword [rdx + 0x4220], rcx
test rax, rax
je 0x1800231fa
call rax
mov rdx, qword [0x1800c5c08]
jmp 0x1800231fa
mov dword [rdx + 0x4218], 0x3f800000
mov qword [rdx + 0x4220], rcx
test dword [r14 + 8], 0x8000
movss xmm11, dword [0x1800af898]
je 0x180023218
mov rax, qword [rsi + 0x30]
movss xmm0, dword [rax + 0x28]
jmp 0x18002321c
movaps xmm0, xmm11
movss dword [rsi + 0x2b4], xmm0
mov qword [rdx + 0x3fe0], rsi
movsxd rax, dword [rsi + 0x1d0]
cmp eax, 0xffffffff
je 0x180023247
imul rcx, rax, 0x218
add rcx, qword [rdx + 0x44e0]
jmp 0x18002324a
mov rcx, rdi
movss xmm0, dword [rdx + 0x3d54]
mov qword [rdx + 0x44b8], rcx
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x18002327d
mulss xmm0, dword [rax + 0x2b0]
movss dword [rdx + 0x3d68], xmm0
movss dword [rdx + 0x3d50], xmm0
mov edi, dword [rsi + 0xc]
mov r13d, edi
mov dword [rsp + 0x48], edi
and r13d, 0x1000000
je 0x1800232ab
movss xmm0, dword [r14 + 0x3938]
jmp 0x1800232cd
test edi, 0x6000000
je 0x1800232c4
bt edi, 0x1b
jb 0x1800232c4
movss xmm0, dword [r14 + 0x3940]
jmp 0x1800232cd
movss xmm0, dword [r14 + 0x391c]
movss dword [rsi + 0x84], xmm0
movzx ecx, byte [rsi + 0x401]
and cl, 1
jne 0x180023316
mov eax, edi
and eax, 0x5010000
cmp eax, 0x1000000
jne 0x180023316
ucomiss xmm0, xmm15
jp 0x180023316
jne 0x180023316
bt edi, 0xa
jae 0x18002330c
movss xmm0, dword [r14 + 0x3914]
movaps xmm1, xmm15
jmp 0x180023328
movaps xmm0, xmm15
movaps xmm1, xmm15
jmp 0x180023328
movss xmm1, dword [r14 + 0x3910]
movss xmm0, dword [r14 + 0x3914]
movss dword [rsi + 0x78], xmm1
movss dword [rsi + 0x7c], xmm0
movss xmm0, dword [rsi + 0x78]
maxss xmm0, dword [r14 + 0x3954]
maxss xmm0, dword [r14 + 0x4178]
movss dword [rsi + 0x180], xmm0
mov eax, dword [r14 + 0x417c]
mov dword [rsi + 0x184], eax
test dil, 0x21
jne 0x1800234f0
test cl, cl
jne 0x1800234f0
test dil, 1
je 0x18002337c
movaps xmm2, xmm15
jmp 0x1800233b8
movss xmm0, dword [rdx + 0x3d54]
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x1800233a8
mulss xmm0, dword [rax + 0x2b0]
movss xmm2, dword [rdx + 0x3948]
addss xmm2, xmm2
addss xmm2, xmm0
movss xmm4, dword [rsi + 0x48]
movaps xmm3, xmm4
movss xmm7, dword [rsi + 0x4c]
addss xmm3, dword [rsi + 0x58]
addss xmm2, dword [rsi + 0x4c]
cmp qword [r14 + 0x3fe8], rsi
jne 0x1800234bc
cmp dword [r14 + 0x4020], 0
jne 0x1800234bc
cmp dword [r14 + 0x4024], 0
jne 0x1800234bc
mov rax, qword [rdx + 0x3fe0]
movss xmm0, dword [rdx + 0x3970]
movss xmm1, dword [rdx + 0x396c]
movss xmm9, dword [rdx + 0xd9c]
maxss xmm7, dword [rax + 0x25c]
minss xmm2, dword [rax + 0x264]
maxss xmm4, dword [rax + 0x258]
minss xmm3, dword [rax + 0x260]
movaps xmm5, xmm7
subss xmm5, xmm0
movaps xmm8, xmm2
addss xmm8, xmm0
movaps xmm0, xmm4
subss xmm0, xmm1
movaps xmm6, xmm3
addss xmm6, xmm1
comiss xmm9, xmm0
jb 0x1800234bc
movss xmm0, dword [rdx + 0xda0]
comiss xmm0, xmm5
jb 0x1800234bc
comiss xmm6, xmm9
jbe 0x1800234bc
comiss xmm8, xmm0
jbe 0x1800234bc
mov rax, qword [rdx + 0x4228]
movss xmm5, dword [rax + 0xc]
movss xmm6, dword [rax + 8]
movaps xmm0, xmm5
addss xmm0, dword [rax + 0x14]
movaps xmm1, xmm6
addss xmm1, dword [rax + 0x10]
comiss xmm0, xmm7
jbe 0x1800234bc
comiss xmm2, xmm5
jbe 0x1800234bc
comiss xmm1, xmm4
jbe 0x1800234bc
comiss xmm3, xmm6
jbe 0x1800234bc
cmp word [r14 + 0x36ca], 2
jne 0x1800234bc
mov byte [rsi + 0xcf], 1
cmp byte [rsi + 0xcf], 0
je 0x1800234f7
cmp byte [rsi + 0xce], 0
sete al
mov byte [rsi + 0xce], al
bt edi, 8
jb 0x1800234f7
comiss xmm15, dword [rdx + 0x556c]
jb 0x1800234f7
mov eax, dword [rdx + 0x1c]
mov dword [rdx + 0x556c], eax
jmp 0x1800234f7
mov byte [rsi + 0xce], 0
lea r8, [rsi + 0x68]
mov byte [rsi + 0xcf], 0
mov rdx, rsi
lea rcx, [rbp + 0x28]
call fcn.180020190
movzx ecx, byte [rsp + 0x41]
mov byte [rsp + 0x42], cl
test dil, 0x40
je 0x180023557
cmp byte [rsi + 0xce], 0
jne 0x180023557
test r15b, r15b
jne 0x18002353a
movss xmm0, dword [rbp + 0x28]
movss dword [rsi + 0x58], xmm0
mov byte [rsp + 0x41], 1
test r12b, r12b
jne 0x1800235fa
movss xmm0, dword [rbp + 0x2c]
movss dword [rsi + 0x5c], xmm0
mov byte [rsp + 0x42], 1
jmp 0x1800235fa
movzx eax, byte [rsi + 0xe4]
test al, al
jg 0x18002356f
cmp byte [rsi + 0xe5], 0
jle 0x1800235fa
test r15b, r15b
jne 0x18002359c
test al, al
jle 0x18002359c
cmp byte [rsi + 0xe7], r15b
je 0x18002358d
movss xmm0, dword [rsi + 0x58]
maxss xmm0, dword [rbp + 0x28]
jmp 0x180023592
movss xmm0, dword [rbp + 0x28]
movss dword [rsi + 0x58], xmm0
mov byte [rsp + 0x41], 1
test r12b, r12b
jne 0x1800235ce
cmp byte [rsi + 0xe5], r12b
jle 0x1800235ce
cmp byte [rsi + 0xe7], r12b
je 0x1800235bf
movss xmm0, dword [rsi + 0x5c]
maxss xmm0, dword [rbp + 0x2c]
jmp 0x1800235c4
movss xmm0, dword [rbp + 0x2c]
movss dword [rsi + 0x5c], xmm0
mov byte [rsp + 0x42], 1
cmp byte [rsi + 0xce], 0
jne 0x1800235fa
test dword [rsi + 0xc], 0x100
mov rcx, qword [0x1800c5c08]
jne 0x1800235fa
comiss xmm15, dword [rcx + 0x556c]
jb 0x1800235fa
mov eax, dword [rcx + 0x1c]
mov dword [rcx + 0x556c], eax
lea r8, [rsi + 0x58]
mov rdx, rsi
lea rcx, [rbp]
call fcn.18001fe00
cmp byte [rsi + 0xce], 0
mov r12, qword [0x1800c5c08]
movsd xmm0, qword [rax]
movsd qword [rsi + 0x58], xmm0
je 0x18002369d
test r13d, r13d
jne 0x18002369d
test byte [rsi + 0xc], 1
je 0x180023634
movaps xmm2, xmm15
jmp 0x180023674
movss xmm0, dword [r12 + 0x3d54]
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x180023662
mulss xmm0, dword [rax + 0x2b0]
movss xmm2, dword [r12 + 0x3948]
addss xmm2, xmm2
addss xmm2, xmm0
movss xmm1, dword [rsi + 0x48]
addss xmm2, dword [rsi + 0x4c]
movaps xmm0, xmm1
addss xmm0, dword [rsi + 0x58]
subss xmm2, dword [rsi + 0x4c]
subss xmm0, xmm1
movss dword [rsp + 0x64], xmm2
movss dword [rsp + 0x60], xmm0
jmp 0x1800236a7
movsd xmm0, qword [rax]
movsd qword [rsp + 0x60], xmm0
mov ecx, dword [rsi + 0xc]
lea rax, [rsp + 0x60]
movsd xmm0, qword [rax]
lea r15, [rsi + 0x50]
movsd qword [r15], xmm0
test cl, 1
je 0x1800236c7
movaps xmm1, xmm15
jmp 0x180023707
movss xmm0, dword [r12 + 0x3d54]
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x1800236f5
mulss xmm0, dword [rax + 0x2b0]
movss xmm1, dword [r12 + 0x3948]
addss xmm1, xmm1
addss xmm1, xmm0
bt ecx, 0xa
jae 0x180023759
movss xmm0, dword [r12 + 0x3d54]
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x18002373b
mulss xmm0, dword [rax + 0x2b0]
movss xmm14, dword [r12 + 0x3948]
addss xmm0, dword [rsi + 0x184]
addss xmm14, xmm14
addss xmm14, xmm0
jmp 0x18002375d
movaps xmm14, xmm15
cmp byte [rsp + 0x43], 0
addss xmm14, xmm1
je 0x1800237a8
mov eax, edi
mov dword [rsi + 0xe8], 0xffffffff
and eax, 0xc000000
cmp eax, 0x4000000
jne 0x1800237a8
cmp byte [rsp + 0x40], 0
jne 0x1800237a8
movsxd rax, dword [r14 + 0x41f0]
lea rcx, [rax + rax*2]
mov rax, qword [r14 + 0x41f8]
add rcx, rcx
movsd xmm0, qword [rax + rcx*8 - 0x10]
movsd qword [rsi + 0x48], xmm0
test r13d, r13d
je 0x1800238c1
mov rdx, qword [rsp + 0x58]
movzx eax, word [rdx + 0x1b0]
mov word [rsi + 0xda], ax
mov ecx, dword [rdx + 0x1b4]
mov ebx, dword [rdx + 0x1b0]
cmp ebx, ecx
jne 0x180023880
inc ebx
test ecx, ecx
je 0x1800237ee
mov eax, ecx
cdq
sub eax, edx
mov rdx, qword [rsp + 0x58]
sar eax, 1
add eax, ecx
jmp 0x1800237f3
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ecx
jle 0x180023880
test r12, r12
je 0x18002380d
inc dword [r12 + 0xf4]
movsxd rcx, ebx
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, qword [rsp + 0x58]
mov r15, rax
mov rdi, qword [rdx + 0x1b8]
test rdi, rdi
je 0x180023864
movsxd r8, dword [rdx + 0x1b0]
mov rcx, rax
shl r8, 3
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800c5c08]
test rdx, rdx
je 0x180023856
dec dword [rdx + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdx, qword [rsp + 0x58]
mov r12, qword [0x1800c5c08]
mov edi, dword [rsp + 0x48]
mov qword [rdx + 0x1b8], r15
lea r15, [rsi + 0x50]
mov dword [rdx + 0x1b4], ebx
movsxd rcx, dword [rdx + 0x1b0]
mov rax, qword [rdx + 0x1b8]
movzx ebx, byte [rsp + 0x40]
mov qword [rax + rcx*8], rsi
inc dword [rdx + 0x1b0]
mov eax, dword [rsp + 0x54]
bt edi, 0x1a
jb 0x1800238ca
test bl, bl
jne 0x1800238ca
cmp eax, 0x3000000
je 0x1800238ca
movsd xmm0, qword [rdx + 0x118]
movsd qword [rsi + 0x48], xmm0
jmp 0x1800238ca
movzx ebx, byte [rsp + 0x40]
mov eax, dword [rsp + 0x54]
movss xmm1, dword [rsi + 0xf4]
ucomiss xmm1, dword [0x1800af97c]
jp 0x1800238dd
je 0x18002392f
cmp byte [rsi + 0xed], 0
jne 0x18002392f
movss xmm0, dword [rsi + 0xfc]
lea rdx, [rsp + 0x60]
mulss xmm0, dword [r15]
xor r8d, r8d
mov rcx, rsi
subss xmm1, xmm0
movss xmm0, dword [rsi + 0xf8]
movss dword [rsp + 0x60], xmm1
movss xmm1, dword [r15 + 4]
mulss xmm1, dword [rsi + 0x100]
subss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
call fcn.180025c80
jmp 0x18002396b
bt edi, 0x1c
jb 0x180023956
bt edi, 0x1a
jae 0x180023945
test bl, bl
jne 0x180023945
cmp byte [rsp + 0x44], bl
jg 0x180023956
bt edi, 0x19
jae 0x18002396b
test bl, bl
jne 0x18002396b
cmp eax, 0x3000000
je 0x18002396b
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.180028b40
movsd xmm0, qword [rax]
movsd qword [rsi + 0x48], xmm0
cmp dword [rsi + 0x44], 0
jl 0x180023af7
cmp byte [rsi + 0xca], 0
jne 0x180023af7
mov rax, qword [rsi + 0x30]
test dword [rax + 4], 0x400
jne 0x180023af7
movss xmm1, dword [rsi + 0x48]
lea r8, [rsi + 0x48]
movss xmm0, dword [rax + 8]
movaps xmm2, xmm1
comiss xmm1, xmm0
movss xmm6, dword [rsi + 0x4c]
movaps xmm3, xmm0
movss xmm7, dword [rax + 0xc]
movaps xmm4, xmm6
addss xmm2, dword [r15]
addss xmm4, dword [rsi + 0x54]
addss xmm3, dword [rax + 0x10]
movaps xmm5, xmm7
addss xmm5, dword [rax + 0x14]
jb 0x1800239e3
comiss xmm6, xmm7
jb 0x1800239e3
comiss xmm3, xmm2
jb 0x1800239e3
comiss xmm5, xmm4
jae 0x180023af7
mov edx, dword [rsi + 8]
mov r9, r15
mov rcx, rsi
mov dword [rsp + 0x20], 0x20
call fcn.18002f400
mov r12, qword [0x1800c5c08]
mov rcx, rax
mov qword [rsi + 0x30], rax
test rax, rax
je 0x180023a17
mov eax, dword [r12 + 0x3f60]
mov dword [rcx + 0x64], eax
cmp qword [r12 + 0x4220], rcx
je 0x180023a65
test rcx, rcx
je 0x180023a51
mov eax, dword [rcx + 0x28]
mov dword [r12 + 0x4218], eax
mov rax, qword [r12 + 0x3890]
mov qword [r12 + 0x4220], rcx
test rax, rax
je 0x180023a65
call rax
mov r12, qword [0x1800c5c08]
jmp 0x180023a65
mov dword [r12 + 0x4218], 0x3f800000
mov qword [r12 + 0x4220], rcx
test dword [r14 + 8], 0x8000
je 0x180023a7a
mov rax, qword [rsi + 0x30]
movss xmm0, dword [rax + 0x28]
jmp 0x180023a7e
movaps xmm0, xmm11
movss dword [rsi + 0x2b4], xmm0
mov qword [r12 + 0x3fe0], rsi
movsxd rax, dword [rsi + 0x1d0]
cmp eax, 0xffffffff
je 0x180023aab
imul rcx, rax, 0x218
add rcx, qword [r12 + 0x44e0]
jmp 0x180023aad
xor ecx, ecx
movss xmm0, dword [r12 + 0x3d54]
mov qword [r12 + 0x44b8], rcx
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x180023ae3
mulss xmm0, dword [rax + 0x2b0]
movss dword [r12 + 0x3d68], xmm0
movss dword [r12 + 0x3d50], xmm0
movzx ecx, byte [rsi + 0xca]
test cl, cl
je 0x180023b1d
mov rdx, qword [rsp + 0x68]
mov rcx, rsi
call fcn.18002fea0
movzx ecx, byte [rsi + 0xca]
mov r12, qword [0x1800c5c08]
mov rax, qword [rsi + 0x30]
movss xmm8, dword [r14 + 0x39b0]
movss xmm7, dword [r14 + 0x39b4]
maxss xmm8, dword [r14 + 0x39b8]
movss xmm0, dword [rax + 0x18]
movss xmm4, dword [rax + 0x1c]
movaps xmm3, xmm0
movss xmm9, dword [rax + 8]
movaps xmm2, xmm4
movss xmm10, dword [rax + 0xc]
movaps xmm5, xmm9
movss dword [rbp + 0x18], xmm9
movaps xmm1, xmm8
movss dword [rbp + 0x1c], xmm10
addss xmm1, xmm0
movaps xmm6, xmm10
addss xmm3, dword [rax + 0x20]
addss xmm2, dword [rax + 0x24]
addss xmm5, dword [rax + 0x10]
addss xmm6, dword [rax + 0x14]
movss dword [rbp + 0x38], xmm1
subss xmm3, xmm8
maxss xmm7, dword [r14 + 0x39bc]
movss dword [rbp + 0x20], xmm5
movss dword [rbp + 0x24], xmm6
movss dword [rbp + 0x40], xmm3
subss xmm2, xmm7
movaps xmm0, xmm7
addss xmm0, xmm4
movss dword [rbp + 0x44], xmm2
movss dword [rbp + 0x3c], xmm0
test bl, bl
jne 0x180023c96
test r13d, r13d
jne 0x180023c96
cmp byte [rsi + 0xe4], r13b
jg 0x180023c96
cmp byte [rsi + 0xe5], r13b
jg 0x180023c96
test cl, cl
jne 0x180023c0e
subss xmm5, xmm9
comiss xmm5, xmm15
jbe 0x180023c96
subss xmm6, xmm10
comiss xmm6, xmm15
jbe 0x180023c96
jmp 0x180023c8a
cmp dword [r14 + 0x38c8], 0
jle 0x180023c96
movsx rcx, word [rax + 0x80]
test ecx, ecx
js 0x180023c40
cmp ecx, dword [r12 + 0x38c8]
jge 0x180023c40
mov rax, qword [r12 + 0x38d0]
lea rcx, [rcx + rcx*8]
lea rdx, [rax + rcx*4]
jmp 0x180023c48
lea rdx, [r12 + 0x423c]
movaps xmm1, xmm8
movaps xmm0, xmm7
addss xmm1, dword [rdx + 0x10]
addss xmm0, dword [rdx + 0x14]
movss dword [rbp + 0x38], xmm1
movss dword [rbp + 0x3c], xmm0
movss xmm1, dword [rdx + 0x18]
movss xmm0, dword [rdx + 0x1c]
addss xmm1, dword [rdx + 0x10]
addss xmm0, dword [rdx + 0x14]
subss xmm1, xmm8
subss xmm0, xmm7
movss dword [rbp + 0x40], xmm1
movss dword [rbp + 0x44], xmm0
lea rdx, [rbp + 0x38]
mov rcx, rsi
call fcn.180021130
cmp byte [rsi + 0xca], 0
cvttss2si eax, dword [rsi + 0x48]
movzx ecx, byte [rsi + 0x401]
movd xmm1, eax
cvttss2si eax, dword [rsi + 0x4c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x48], xmm1
movss dword [rsi + 0x4c], xmm0
jne 0x180023d01
test cl, 1
jne 0x180023d01
test r13d, r13d
je 0x180023cdd
movss xmm0, dword [r14 + 0x3934]
jmp 0x180023d05
mov eax, edi
and eax, 0xc000000
cmp eax, 0x4000000
jne 0x180023cf6
movss xmm0, dword [r14 + 0x393c]
jmp 0x180023d05
movss xmm0, dword [r14 + 0x3918]
jmp 0x180023d05
movaps xmm0, xmm15
xor al, al
movss dword [rsi + 0x80], xmm0
mov dword [rsp + 0x68], eax
cmp byte [rsp + 0x43], al
je 0x180023f41
bt edi, 0xc
jb 0x180023f41
bt edi, 0x1a
jae 0x180023d34
mov byte [rsp + 0x68], 1
jmp 0x180023d51
test cl, 1
jne 0x180023d3e
test r13d, r13d
jne 0x180023d51
bt edi, 0x19
movzx eax, al
mov ecx, 1
cmovae eax, ecx
mov dword [rsp + 0x68], eax
mov eax, dword [r12 + 0x41e0]
sub eax, 1
js 0x180023f41
movsxd r10, eax
mov rdx, r10
lea r9, [r10 + r10*2]
shl r9, 4
lea r8, [r9 + 8]
add r8, qword [r12 + 0x41e8]
nop dword [rax]
mov rcx, qword [r8]
test rcx, rcx
je 0x180023d91
test dword [rcx + 0xc], 0x8000000
jne 0x180023da0
sub r8, 0x30
sub rdx, 1
jns 0x180023d80
jmp 0x180023f41
mov r15, qword [rsi + 0x3a0]
mov rax, rsi
cmp r15, rcx
je 0x180023f41
cmp rax, rcx
je 0x180023f41
mov rax, qword [rax + 0x398]
test rax, rax
jne 0x180023db3
mov byte [rsp + 0x68], al
cmp rsi, r15
jne 0x180023f41
mov r8, qword [r12 + 0x41e8]
add r8, 8
add r8, r9
mov rdx, qword [r8]
test rdx, rdx
je 0x180023e64
test dword [rdx + 0xc], 0x8000000
je 0x180023e64
cmp byte [rdx + 0xcb], 0
jne 0x180023e07
cmp byte [rdx + 0xcc], 0
je 0x180023e64
mov rax, rsi
cmp r15, rdx
je 0x180023e72
nop
cmp rax, rdx
je 0x180023e72
mov rax, qword [rax + 0x398]
test rax, rax
jne 0x180023e10
mov rax, qword [rdx + 0x398]
mov rcx, qword [rax + 0x3a0]
test rcx, rcx
je 0x180023e64
mov rax, rsi
cmp r15, rcx
je 0x180023e76
nop dword [rax]
cmp rax, rcx
je 0x180023e76
mov rax, qword [rax + 0x398]
test rax, rax
jne 0x180023e40
mov rax, qword [rcx + 0x398]
mov rcx, qword [rax + 0x3a0]
test rcx, rcx
jne 0x180023e34
sub r8, 0x30
sub r10, 1
jns 0x180023de4
xor eax, eax
mov edx, eax
mov rdi, qword [r12 + 0x3f88]
movsxd rax, dword [r12 + 0x3f80]
mov r9, rdi
mov r8, qword [rdx + 0x3a0]
lea rcx, [rdi + rax*8]
cmp rdi, rcx
jae 0x180023eae
nop dword [rax]
cmp qword [r9], r15
je 0x180023eae
add r9, 8
cmp r9, rcx
jb 0x180023ea0
sub r9, rdi
mov r10, rdi
sar r9, 3
cmp rdi, rcx
jae 0x180023ece
nop dword [rax]
cmp qword [rdi], r8
je 0x180023ece
add rdi, 8
cmp rdi, rcx
jb 0x180023ec0
sub rdi, r10
sar rdi, 3
cmp r9d, edi
jge 0x180023f11
mov eax, edi
sub eax, r9d
dec eax
movsxd r8, eax
lea eax, [r9 + 1]
movsxd rcx, eax
movsxd rax, r9d
shl r8, 3
lea rdx, [r10 + rcx*8]
lea rcx, [r10 + rax*8]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r12 + 0x3f88]
movsxd rcx, edi
mov qword [rax + rcx*8 - 8], r15
jmp 0x180023f3d
lea eax, [rdi + 1]
movsxd rbx, edi
movsxd rcx, eax
sub r9d, edi
movsxd r8, r9d
shl r8, 3
lea rdx, [r10 + rbx*8]
lea rcx, [r10 + rcx*8]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r12 + 0x3f88]
mov qword [rax + rbx*8], r15
mov edi, dword [rsp + 0x48]
cmp qword [rsi + 0x428], 0
jne 0x180023f58
test byte [rsi + 0x401], 1
je 0x180023f58
xor cl, cl
jmp 0x180023f5a
mov cl, 1
movss xmm1, dword [r14 + 0x3d50]
xor eax, eax
cmp byte [r14 + 0x7d], al
xorps xmm0, xmm0
movaps xmm2, xmm1
mov byte [rsp + 0x40], cl
mulss xmm1, dword [0x1800af834]
mov r15d, eax
setne r15b
mov dword [rbp + 0x30], 0xffffffff
mulss xmm2, dword [0x1800af89c]
inc r15d
movups xmmword [rbp + 0x48], xmm0
movss xmm0, dword [rsi + 0x80]
addss xmm0, xmm11
addss xmm1, xmm0
maxss xmm2, xmm1
cvttss2si eax, xmm2
movd xmm13, eax
cvtdq2ps xmm13, xmm13
test cl, cl
je 0x180023ffe
cmp byte [rsi + 0xce], 0
jne 0x180023ffe
lea rax, [rbp + 0x38]
mov r9d, r15d
mov qword [rsp + 0x28], rax
lea r8, [rbp + 0x30]
lea rax, [rbp + 0x48]
mov rcx, rsi
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x20], rax
call fcn.1800205e0
mov r12, qword [0x1800c5c08]
test al, al
je 0x180023ffe
mov cl, 1
movzx edx, cl
jmp 0x180024008
movzx ecx, byte [rsp + 0x42]
movzx edx, byte [rsp + 0x41]
cmp byte [rsi + 0xca], 0
movzx eax, byte [rbp + 0x30]
mov byte [rsi + 0xd6], al
je 0x1800240e4
mov rax, qword [rsi + 0x30]
cmp byte [rax + 0x58], 0
jne 0x180024033
movsd xmm0, qword [rsi + 0x48]
movsd qword [rax + 8], xmm0
mov rax, qword [rsi + 0x30]
cmp byte [rax + 0x59], 0
jne 0x180024047
movsd xmm0, qword [rsi + 0x50]
movsd qword [rax + 0x10], xmm0
mov rax, qword [rsi + 0x30]
movss xmm2, dword [rax + 0x118]
movss xmm0, dword [rax + 0x11c]
movaps xmm1, xmm2
addss xmm1, dword [rax + 8]
addss xmm0, dword [rax + 0xc]
movss dword [rax + 0x18], xmm1
movss xmm1, dword [rax + 0x10]
movss dword [rax + 0x1c], xmm0
subss xmm1, xmm2
movss xmm0, dword [rax + 0x14]
movaps xmm2, xmm15
subss xmm0, dword [rax + 0x11c]
addss xmm1, dword [rax + 0x120]
addss xmm0, dword [rax + 0x124]
maxss xmm2, xmm1
movaps xmm1, xmm15
maxss xmm1, xmm0
movss dword [rax + 0x20], xmm2
movss dword [rax + 0x24], xmm1
mov rax, qword [rsi + 0x30]
movss xmm3, dword [rax + 8]
movss xmm2, dword [rax + 0xc]
movaps xmm1, xmm3
addss xmm1, dword [rax + 0x10]
movaps xmm0, xmm2
movss dword [rbp + 0x18], xmm3
addss xmm0, dword [rax + 0x14]
movss dword [rbp + 0x1c], xmm2
movss dword [rbp + 0x20], xmm1
movss dword [rbp + 0x24], xmm0
cmp byte [rsi + 0xce], 0
mov rax, qword [rsi + 0x30]
movsd xmm0, qword [rax + 8]
movsd qword [rsi + 0x3c], xmm0
jne 0x180024238
cmp qword [rsp + 0x78], 0
movss xmm2, dword [rsi + 0x220]
movss xmm3, dword [rsi + 0x224]
subss xmm2, dword [rsi + 0x218]
subss xmm3, dword [rsi + 0x21c]
movss xmm4, dword [rsi + 0x5c]
movss xmm5, dword [rsi + 0x58]
subss xmm4, xmm14
addss xmm2, dword [rsi + 0xc0]
addss xmm3, dword [rsi + 0xc4]
jne 0x180024154
mov qword [rbp - 0x70], 0
lea rax, [rbp - 0x70]
jmp 0x180024181
movss xmm0, dword [rsi + 0x78]
lea rax, [rsp + 0x60]
movss xmm1, dword [rsi + 0x7c]
addss xmm0, xmm0
addss xmm1, xmm1
addss xmm0, dword [rsi + 0x60]
addss xmm1, dword [rsi + 0x64]
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm1
movss xmm6, dword [rax]
movss xmm1, dword [rax + 4]
test dl, dl
jne 0x180024191
movaps xmm5, xmm2
test cl, cl
jne 0x180024198
movaps xmm4, xmm3
bt edi, 0xe
jb 0x1800241ad
comiss xmm1, xmm4
jbe 0x1800241a9
test dil, 8
je 0x1800241ad
xor cl, cl
jmp 0x1800241af
mov cl, 1
mov byte [rsi + 0xc9], cl
lea rdx, [r14 + 0x397c]
bt edi, 0xf
jb 0x1800241f4
test cl, cl
je 0x1800241cc
movss xmm0, dword [rdx]
jmp 0x1800241d0
movaps xmm0, xmm15
subss xmm5, xmm0
comiss xmm6, xmm5
jbe 0x1800241e7
mov eax, edi
and eax, 0x808
cmp eax, 0x800
je 0x1800241f4
mov byte [rsi + 0xc8], 0
movaps xmm1, xmm15
jmp 0x18002421a
mov byte [rsi + 0xc8], 1
test cl, cl
jne 0x180024216
comiss xmm1, xmm4
jbe 0x18002420e
test dil, 8
jne 0x18002420e
mov cl, 1
jmp 0x180024210
xor cl, cl
mov byte [rsi + 0xc9], cl
movss xmm1, dword [rdx]
test cl, cl
je 0x180024224
movss xmm0, dword [rdx]
jmp 0x180024228
movaps xmm0, xmm15
movss dword [rsi + 0xc0], xmm0
movss dword [rsi + 0xc4], xmm1
and edi, 0x5000000
cmp edi, 0x1000000
jne 0x18002425d
cmp dword [rsp + 0x54], 0x3000000
je 0x18002425d
mov rax, qword [rsp + 0x58]
add rax, 0x258
jmp 0x180024261
lea rax, [rbp + 0x18]
movups xmm0, xmmword [rax]
mov ecx, dword [rsi + 0xc]
movss xmm4, dword [rsi + 0x48]
movss xmm7, dword [rsi + 0x4c]
movaps xmm5, xmm4
movaps xmm6, xmm7
addss xmm5, dword [rsi + 0x50]
addss xmm6, dword [rsi + 0x54]
movups xmmword [rbp + 0x18], xmm0
and ecx, 1
je 0x180024290
movaps xmm3, xmm15
jmp 0x1800242d0
movss xmm0, dword [r12 + 0x3d54]
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x1800242be
mulss xmm0, dword [rax + 0x2b0]
movss xmm3, dword [r12 + 0x3948]
addss xmm3, xmm3
addss xmm3, xmm0
movss xmm0, dword [rsi + 0x4c]
movaps xmm2, xmm4
addss xmm2, dword [rsi + 0x58]
movss dword [rbp + 8], xmm4
movaps xmm1, xmm7
movss dword [rbp + 0xc], xmm0
addss xmm1, xmm3
movss dword [rbp + 0x10], xmm2
movss dword [rbp + 0x14], xmm1
movss dword [rsi + 0x208], xmm4
movss dword [rsi + 0x20c], xmm7
movss dword [rsi + 0x210], xmm5
movss dword [rsi + 0x214], xmm6
test byte [rsi + 0x401], 1
je 0x18002437b
test ecx, ecx
je 0x18002432b
movaps xmm0, xmm15
jmp 0x18002436b
movss xmm1, dword [r12 + 0x3d54]
mulss xmm1, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm1, dword [rsi + 0x2b4]
test rax, rax
je 0x180024359
mulss xmm1, dword [rax + 0x2b0]
movss xmm0, dword [r12 + 0x3948]
addss xmm0, xmm0
addss xmm0, xmm1
addss xmm0, dword [rsi + 0x20c]
movss dword [rsi + 0x20c], xmm0
movss xmm1, dword [rsi + 0x208]
movss xmm0, dword [rsi + 0x20c]
movss xmm4, dword [rbp + 0x18]
movss xmm5, dword [rbp + 0x1c]
maxss xmm1, xmm4
movss xmm12, dword [rbp + 0x20]
maxss xmm0, xmm5
movss xmm11, dword [rbp + 0x24]
mov ecx, dword [rsp + 0x48]
mov eax, ecx
and eax, 0x401
movss dword [rsi + 0x208], xmm1
movss dword [rsi + 0x20c], xmm0
movss xmm1, dword [rsi + 0x210]
movss xmm0, dword [rsi + 0x214]
minss xmm1, xmm12
minss xmm0, xmm11
movss dword [rsi + 0x210], xmm1
movss dword [rsi + 0x214], xmm0
movss xmm9, dword [rsi + 0x48]
movss xmm6, dword [rsi + 0x4c]
movaps xmm7, xmm9
movss dword [rsi + 0x218], xmm9
movaps xmm8, xmm6
addss xmm8, xmm14
addss xmm7, dword [rsi + 0x50]
addss xmm6, dword [rsi + 0x54]
movss dword [rsi + 0x21c], xmm8
subss xmm7, dword [rsi + 0xc0]
subss xmm6, dword [rsi + 0xc4]
movss dword [rsi + 0x220], xmm7
movss dword [rsi + 0x224], xmm6
cmp eax, 1
jne 0x180024452
movss xmm10, dword [rsi + 0x84]
jmp 0x18002445b
movss xmm10, dword [r14 + 0x3950]
movss xmm2, dword [0x1800af850]
lea r12, [rsi + 0x228]
movss xmm0, dword [rsi + 0x78]
addss xmm9, xmm2
movss xmm3, dword [rsi + 0x84]
addss xmm8, xmm2
mulss xmm0, xmm2
addss xmm7, xmm2
lea r13, [rsi + 0x230]
addss xmm6, xmm2
cvttss2si eax, xmm0
addss xmm8, xmm10
subss xmm6, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
maxss xmm1, xmm3
addss xmm9, xmm1
subss xmm7, xmm1
cvttss2si eax, xmm9
movd xmm9, eax
cvttss2si eax, xmm8
cvtdq2ps xmm9, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm7
movss dword [rsi + 0x22c], xmm0
movss dword [r12], xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm6
movss dword [r13], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x234], xmm0
movss xmm0, dword [r12 + 4]
comiss xmm5, xmm0
jbe 0x180024512
movaps xmm1, xmm5
jmp 0x18002451a
movaps xmm1, xmm11
minss xmm1, xmm0
comiss xmm4, xmm9
jbe 0x180024525
movaps xmm0, xmm4
jmp 0x18002452e
movaps xmm0, xmm12
minss xmm0, xmm9
movss dword [r12], xmm0
movss dword [r12 + 4], xmm1
movss xmm0, dword [r12 + 0xc]
comiss xmm5, xmm0
ja 0x18002454f
movaps xmm5, xmm11
minss xmm5, xmm0
movss xmm0, dword [r12 + 8]
comiss xmm4, xmm0
ja 0x180024563
movaps xmm4, xmm12
minss xmm4, xmm0
movaps xmm12, xmmword [rsp + 0x190]
movss dword [r12 + 8], xmm4
movss dword [r12 + 0xc], xmm5
movss xmm0, dword [rsi + 0x50]
comiss xmm0, xmm15
jbe 0x180024597
test ecx, 0x2000040
jne 0x180024597
mulss xmm0, dword [0x1800af85c]
jmp 0x1800245a8
movss xmm0, dword [r14 + 0x3d50]
mulss xmm0, dword [0x1800af920]
cvttss2si eax, xmm0
mov rdx, rsi
lea rcx, [rbp - 0x78]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x28c], xmm0
movss xmm0, dword [rsi + 0x220]
subss xmm0, dword [rsi + 0x218]
movss xmm1, dword [rsi + 0x78]
addss xmm1, xmm1
addss xmm1, dword [rsi + 0x60]
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
movss xmm1, dword [rsi + 0x7c]
addss xmm1, xmm1
movss dword [rsi + 0xa0], xmm0
movss xmm0, dword [rsi + 0x224]
subss xmm0, dword [rsi + 0x21c]
addss xmm1, dword [rsi + 0x64]
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
movss dword [rsi + 0xa4], xmm0
call fcn.1800273d0
mov rcx, qword [rsi + 0x2c0]
movsd xmm0, qword [rax]
movsd qword [rsi + 0x98], xmm0
mov dword [rsi + 0xa8], 0x7f7fffff
mov dword [rsi + 0xac], 0x7f7fffff
mov rax, qword [r14 + 0x3d48]
mov rdx, qword [rax + 0x40]
mov rdx, qword [rdx + 8]
call fcn.180043400
mov rcx, qword [0x1800c5c08]
lea r8, [rbp + 0x20]
xor r9d, r9d
lea rdx, [rbp + 0x18]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rbx, qword [rcx + 0x3fe0]
mov rcx, qword [rbx + 0x2c0]
call fcn.1800432f0
mov rax, qword [rbx + 0x2c0]
mov rcx, qword [rax + 0x60]
movsxd rdx, dword [rax + 0x58]
add rdx, rdx
mov eax, dword [rcx + rdx*8 - 0x10]
movss xmm0, dword [rcx + rdx*8 - 0xc]
movss xmm1, dword [rcx + rdx*8 - 8]
movss xmm2, dword [rcx + rdx*8 - 4]
mov dword [rbx + 0x258], eax
movss dword [rbx + 0x25c], xmm0
movss dword [rbx + 0x260], xmm1
movss dword [rbx + 0x264], xmm2
movzx eax, byte [rsi + 0x401]
and al, 5
cmp al, 1
je 0x18002483a
xor bl, bl
cmp edi, 0x1000000
jne 0x1800247b5
cmp dword [rsp + 0x54], 0x3000000
je 0x1800247b5
mov r9, qword [rsp + 0x58]
movsxd rax, dword [r9 + 0x1b0]
cmp eax, 2
jl 0x18002477e
mov rcx, rax
mov rax, qword [r9 + 0x1b8]
mov rdx, qword [rax + rcx*8 - 0x10]
test rdx, rdx
je 0x18002477e
movss xmm1, dword [rsi + 0x4c]
movss xmm5, dword [rdx + 0x4c]
movaps xmm2, xmm1
movss xmm6, dword [rsi + 0x48]
movaps xmm0, xmm5
addss xmm0, dword [rdx + 0x54]
movss xmm7, dword [rdx + 0x48]
movaps xmm4, xmm6
addss xmm4, dword [rsi + 0x50]
addss xmm2, dword [rsi + 0x54]
movaps xmm3, xmm7
comiss xmm0, xmm1
addss xmm3, dword [rdx + 0x50]
jbe 0x18002477e
comiss xmm2, xmm5
jbe 0x18002477e
comiss xmm3, xmm6
jbe 0x18002477e
comiss xmm4, xmm7
jbe 0x18002477e
mov r8b, 1
jmp 0x180024781
xor r8b, r8b
mov rdx, qword [rsi + 0x2c0]
movsxd rax, dword [rdx]
imul rcx, rax, 0x38
mov rax, qword [rdx + 8]
cmp dword [rcx + rax - 0x18], 0
jne 0x1800247b5
mov rax, qword [r9 + 0x2c0]
cmp dword [rax + 0x20], 0
jle 0x1800247b5
test r8b, r8b
jne 0x1800247b5
mov bl, 1
mov qword [rsi + 0x2c0], rax
mov rcx, qword [r14 + 0x43d0]
test rcx, rcx
jne 0x1800247c8
mov rcx, qword [r14 + 0x4268]
cmp byte [rsp + 0x68], 0
jne 0x1800247fe
test rcx, rcx
je 0x1800247f9
mov rax, qword [rcx + 0x3b8]
cmp qword [rsi + 0x3b8], rax
je 0x1800247fe
mov rax, qword [rsi + 0x420]
test rax, rax
je 0x1800247f9
cmp rax, qword [rcx + 0x420]
je 0x1800247fe
xor r8b, r8b
jmp 0x180024801
mov r8b, 1
movzx r9d, byte [rsp + 0x40]
lea rax, [rbp + 0x48]
movss dword [rsp + 0x30], xmm13
lea rdx, [rbp + 8]
mov qword [rsp + 0x28], rax
mov rcx, rsi
mov dword [rsp + 0x20], r15d
call fcn.1800215d0
test bl, bl
je 0x18002483a
lea rax, [rsi + 0x2c8]
mov qword [rsi + 0x2c0], rax
mov eax, dword [rsp + 0x48]
mov ecx, eax
movss xmm5, dword [rsi + 0x70]
movaps xmm13, xmmword [rsp + 0x180]
shr ecx, 3
not cl
and cl, 1
ucomiss xmm5, xmm15
jp 0x180024895
jne 0x180024895
and eax, 0x808
cmp eax, 0x800
jne 0x180024871
movss xmm7, dword [rsi + 0x60]
jmp 0x180024875
movaps xmm7, xmm15
movss xmm0, dword [rsi + 0x78]
movss xmm1, dword [rsi + 0x50]
addss xmm0, xmm0
subss xmm1, xmm0
subss xmm1, dword [rsi + 0xc0]
maxss xmm7, xmm1
jmp 0x180024898
movaps xmm7, xmm5
movss xmm4, dword [rsi + 0x74]
ucomiss xmm4, xmm15
jp 0x1800248d9
jne 0x1800248d9
test cl, cl
je 0x1800248b0
movss xmm6, dword [rsi + 0x64]
jmp 0x1800248b4
movaps xmm6, xmm15
movss xmm0, dword [rsi + 0x7c]
movss xmm1, dword [rsi + 0x54]
addss xmm0, xmm0
subss xmm1, xmm0
subss xmm1, xmm14
subss xmm1, dword [rsi + 0xc4]
maxss xmm6, xmm1
jmp 0x1800248dc
movaps xmm6, xmm4
ucomiss xmm5, xmm15
movss xmm2, dword [rsi + 0x84]
movss xmm8, dword [rsi + 0x78]
movss xmm10, dword [rsi + 0x98]
movaps xmm1, xmm8
movss xmm0, dword [rsi + 0x218]
maxss xmm1, xmm2
subss xmm0, xmm10
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm3, eax
cvtdq2ps xmm3, xmm3
movss dword [rsi + 0x238], xmm3
addss xmm3, xmm7
movss xmm9, dword [rsi + 0x7c]
movss xmm11, dword [rsi + 0x9c]
movaps xmm1, xmm9
movss xmm0, dword [rsi + 0x21c]
maxss xmm1, xmm2
subss xmm0, xmm11
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [rsi + 0x23c], xmm2
addss xmm6, xmm2
movss dword [rsi + 0x240], xmm3
movss dword [rsi + 0x244], xmm6
movups xmm0, xmmword [rsi + 0x238]
movups xmmword [rsi + 0x248], xmm0
movss xmm3, dword [rsi + 0x48]
movaps xmm1, xmm3
subss xmm1, xmm10
addss xmm1, xmm8
movss dword [rsi + 0x268], xmm1
movss xmm6, dword [rsi + 0x4c]
movaps xmm2, xmm6
subss xmm2, xmm11
addss xmm2, xmm9
addss xmm2, xmm14
movss dword [rsi + 0x26c], xmm2
jp 0x1800249db
jne 0x1800249db
movss xmm5, dword [rsi + 0x50]
movaps xmm0, xmm8
addss xmm0, xmm8
subss xmm5, xmm0
subss xmm5, dword [rsi + 0xc0]
ucomiss xmm4, xmm15
addss xmm1, xmm5
movss dword [rsi + 0x270], xmm1
jp 0x180024a0e
jne 0x180024a0e
movss xmm4, dword [rsi + 0x54]
movaps xmm0, xmm9
addss xmm0, xmm9
subss xmm4, xmm0
subss xmm4, xmm14
subss xmm4, dword [rsi + 0xc4]
movzx r8d, byte [rsp + 0x43]
addss xmm2, xmm4
xor edi, edi
lea rcx, [rsi + 0x188]
movaps xmm0, xmm8
addss xmm0, xmm15
cvtps2pd xmm1, xmm10
movss dword [rsi + 0x274], xmm2
subss xmm0, xmm10
cvtps2pd xmm2, xmm8
movss dword [rsi + 0x15c], xmm0
mov qword [rsi + 0x160], rdi
cvtps2pd xmm0, xmm3
cvtps2pd xmm3, xmm6
addsd xmm2, xmm0
xorps xmm0, xmm0
subsd xmm2, xmm1
cvtps2pd xmm1, xmm11
addsd xmm2, xmm0
cvtps2pd xmm0, xmm9
addsd xmm3, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm14
subsd xmm3, xmm1
cvtpd2ps xmm1, xmm2
addsd xmm3, xmm0
movss dword [rsi + 0x128], xmm1
cvtpd2ps xmm0, xmm3
movss dword [rsi + 0x12c], xmm0
movss xmm0, dword [rsi + 0x128]
movss xmm1, dword [rsi + 0x12c]
cvtps2pd xmm0, xmm0
cvtps2pd xmm1, xmm1
subsd xmm2, xmm0
subsd xmm3, xmm1
cvtpd2ps xmm2, xmm2
cvtpd2ps xmm0, xmm3
movss dword [rsi + 0x168], xmm2
movss dword [rsi + 0x16c], xmm0
movss xmm1, dword [rsi + 0x128]
movss xmm0, dword [rsi + 0x12c]
movss dword [rsi + 0x118], xmm1
movss dword [rsi + 0x11c], xmm0
movss dword [rsi + 0x120], xmm1
movss dword [rsi + 0x124], xmm0
movss dword [rsi + 0x130], xmm1
movss dword [rsi + 0x134], xmm0
movss dword [rsi + 0x138], xmm1
movss dword [rsi + 0x13c], xmm0
mov qword [rsi + 0x148], rdi
mov qword [rsi + 0x140], rdi
mov qword [rsi + 0x150], rdi
mov byte [rsi + 0x158], dil
mov dword [rsi + 0x170], edi
movzx eax, word [rsi + 0x176]
mov word [rsi + 0x174], ax
mov byte [rsi + 0x17c], dil
movss xmm0, dword [rsi + 0xa4]
comiss xmm0, xmm15
seta al
mov byte [rsi + 0x17d], al
mov byte [rsi + 0x17e], dil
movss xmm1, dword [r14 + 0x3954]
call fcn.180060360
movaps xmm14, xmmword [rsp + 0x170]
movaps xmm11, xmmword [rsp + 0x1a0]
movaps xmm10, xmmword [rsp + 0x1b0]
mov qword [rsi + 0x1a4], rdi
mov ecx, dword [rsi + 0x1b4]
test ecx, ecx
jns 0x180024bc6
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x1b0]
test eax, eax
cmovg edx, eax
call fcn.18003a3a0
mov dword [rsi + 0x1b0], edi
lea rax, [rsi + 0x290]
mov qword [rsi + 0x1c0], rax
mov ecx, 1
mov rax, qword [rsp + 0x58]
mov qword [rsi + 0x1c8], rdi
mov dword [rsi + 0x1d4], ecx
test rax, rax
je 0x180024bfe
mov eax, dword [rax + 0x1d4]
jmp 0x180024c00
mov eax, ecx
mov dword [rsi + 0x1d8], eax
mov eax, dword [rsi + 0x28c]
mov dword [rsi + 0x1dc], eax
mov dword [rsi + 0x1e0], 0xbf800000
mov ecx, dword [rsi + 0x1ec]
test ecx, ecx
jns 0x180024cac
mov eax, ecx
mov ebx, edi
cdq
sub eax, edx
sar eax, 1
add eax, ecx
test eax, eax
cmovg ebx, eax
cmp ebx, ecx
jle 0x180024cac
mov rax, qword [0x1800c5c08]
test rax, rax
je 0x180024c50
inc dword [rax + 0xf4]
movsxd rcx, ebx
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, qword [rsi + 0x1f0]
mov r15, rax
test rdi, rdi
je 0x180024c9d
movsxd r8, dword [rsi + 0x1e8]
mov rdx, rdi
shl r8, 2
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800c5c08]
test rdx, rdx
je 0x180024c94
dec dword [rdx + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x1f0], r15
xor edi, edi
mov dword [rsi + 0x1ec], ebx
mov dword [rsi + 0x1e8], edi
mov ecx, dword [rsi + 0x1fc]
test ecx, ecx
jns 0x180024d42
mov eax, ecx
mov ebx, edi
cdq
sub eax, edx
sar eax, 1
add eax, ecx
test eax, eax
cmovg ebx, eax
cmp ebx, ecx
jle 0x180024d42
mov rax, qword [0x1800c5c08]
test rax, rax
je 0x180024ce6
inc dword [rax + 0xf4]
movsxd rcx, ebx
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, qword [rsi + 0x200]
mov r15, rax
test rdi, rdi
je 0x180024d33
movsxd r8, dword [rsi + 0x1f8]
mov rdx, rdi
shl r8, 2
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800c5c08]
test rdx, rdx
je 0x180024d2a
dec dword [rdx + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x200], r15
xor edi, edi
mov dword [rsi + 0x1fc], ebx
mov dword [rsi + 0x1f8], edi
movzx eax, byte [rsi + 0xe4]
test al, al
jle 0x180024d5b
dec al
mov byte [rsi + 0xe4], al
movzx eax, byte [rsi + 0xe5]
test al, al
jle 0x180024d6e
dec al
mov byte [rsi + 0xe5], al
cmp byte [rsp + 0x68], 0
je 0x180024d87
mov rcx, rsi
call fcn.180025860
xor edx, edx
mov rcx, rsi
call fcn.180029c40
mov r8, qword [rbp - 0x68]
test r8, r8
je 0x180024dca
mov rdx, qword [rsi + 0x30]
cmp byte [rdx + 0x5a], 0
je 0x180024dca
mov rax, qword [0x1800c5c08]
mov rcx, qword [rax + 0x4210]
cmp rdx, qword [rcx]
je 0x180024dca
movzx eax, byte [rsi + 0x401]
and al, 5
cmp al, 1
je 0x180024dca
mov byte [rdx + 0x5a], 0
mov byte [r14 + 0x43f0], 0
mov byte [r8], 0
mov ebx, dword [rsp + 0x48]
test bl, 1
jne 0x180024e27
test byte [rsi + 0x401], 1
jne 0x180024e27
movss xmm2, dword [rsi + 0x84]
lea rdx, [rbp + 0x18]
movss xmm0, dword [rbp + 8]
mov r9, r8
movss xmm1, dword [rbp + 0x10]
addss xmm0, xmm2
mov r8, qword [rbp - 0x80]
subss xmm1, xmm2
mov rcx, rsi
movss dword [rbp + 0x18], xmm0
movss xmm0, dword [rbp + 0xc]
movss dword [rbp + 0x1c], xmm0
movss xmm0, dword [rbp + 0x14]
movss dword [rbp + 0x24], xmm0
movss dword [rbp + 0x20], xmm1
call fcn.180022080
mov dword [rsi + 0x278], 0
test byte [r14 + 8], 0x40
je 0x180025045
cmp qword [r14 + 0x4000], rsi
jne 0x180025006
movzx eax, byte [r14 + 0xdb9]
cmp byte [r14 + 0x71], al
jne 0x180025006
mov rax, qword [rsi + 0x3b0]
test dword [rax + 0xc], 0x200000
jne 0x180025006
mov r15, qword [0x1800c5c08]
mov eax, dword [rsi + 0x8c]
cmp byte [r15 + 0x71], 0
mov dword [r15 + 0x40b0], eax
mov r13, qword [rsi + 0x3b0]
jne 0x180024ee5
movss xmm0, dword [r15 + 0x3948]
movss xmm2, dword [r15 + 0x4064]
addss xmm0, xmm0
comiss xmm2, xmm15
addss xmm0, dword [r15 + 0x3d50]
movss xmm3, dword [r13 + 0x58]
jb 0x180024fff
movss xmm1, dword [r15 + 0x4068]
comiss xmm1, xmm15
jb 0x180024fff
comiss xmm3, xmm2
jbe 0x180024fff
comiss xmm0, xmm1
jbe 0x180024fff
mov ecx, 0x25
call fcn.18002cf70
test al, al
je 0x180024fff
mov rdi, qword [0x1800c5c08]
lea rdx, str._IMWINDOW
mov r8d, 0x20
lea rcx, [rdi + 0x4428]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea rcx, [rdi + 0x4480]
mov byte [rdi + 0x4448], 0
xor edx, edx
call fcn.180039d40
lea rax, [rdi + 0x4490]
xor ecx, ecx
mov qword [rdi + 0x4498], rcx
mov rbx, qword [0x1800c5c08]
mov qword [rdi + 0x4410], rax
mov qword [rax], r13
mov dword [rdi + 0x4418], 8
mov eax, dword [rdi + 0x3f60]
mov dword [rdi + 0x4424], eax
test byte [rbx + 0x4400], 1
jne 0x180024f72
call fcn.180025540
cmp dword [rbx + 0x4424], 0xffffffff
jne 0x180024f80
call fcn.18002ceb0
lea rcx, [r15 + 0x39d0]
mov byte [rbx + 0x43fd], 0
call fcn.180016720
lea rcx, [r15 + 0x3be0]
mov dword [r13 + 0x404], eax
call fcn.180016720
lea rcx, [r15 + 0x3bf0]
mov dword [r13 + 0x408], eax
call fcn.180016720
lea rcx, [r15 + 0x3c00]
mov dword [r13 + 0x40c], eax
call fcn.180016720
lea rcx, [r15 + 0x3c10]
mov dword [r13 + 0x410], eax
call fcn.180016720
lea rcx, [r15 + 0x3c20]
mov dword [r13 + 0x414], eax
call fcn.180016720
mov ebx, dword [rsp + 0x48]
xor edi, edi
mov dword [r13 + 0x418], eax
lea r13, [rsi + 0x230]
cmp byte [r14 + 0x43fc], 0
je 0x180025045
bt ebx, 0x15
jb 0x180025045
mov rax, qword [r14 + 0x4000]
test rax, rax
je 0x18002502b
cmp qword [rax + 0x3b0], rsi
je 0x180025045
cmp rsi, qword [rsi + 0x3b0]
jne 0x180025045
test dword [rsi + 0xc], 0x20000000
jne 0x180025045
mov rcx, rsi
call fcn.180038290
test byte [rsi + 0x401], 1
je 0x180025091
mov r8, qword [0x1800c5c08]
mov edx, dword [rsi + 0x434]
mov ecx, dword [r14 + 0x4098]
mov eax, dword [rsi + 0x8c]
mov dword [r8 + 0x40b0], eax
mov dword [r8 + 0x40b4], ecx
mov dword [r8 + 0x40b8], edx
movups xmm0, xmmword [rsi + 0x438]
movups xmmword [r8 + 0x40bc], xmm0
jmp 0x180025170
mov rax, qword [0x1800c5c08]
movss xmm6, dword [rbp + 0x14]
movss xmm7, dword [rbp + 0xc]
movaps xmm4, xmm6
movss xmm8, dword [rbp + 8]
movaps xmm2, xmm7
movss xmm0, dword [rax + 0x3970]
movss xmm1, dword [rax + 0x396c]
addss xmm4, xmm0
movss xmm9, dword [rbp + 0x10]
subss xmm2, xmm0
movss xmm5, dword [rax + 0xd9c]
movaps xmm0, xmm8
subss xmm0, xmm1
movaps xmm3, xmm9
addss xmm3, xmm1
comiss xmm5, xmm0
jb 0x180025137
movss xmm0, dword [rax + 0xda0]
comiss xmm0, xmm2
jb 0x180025137
comiss xmm3, xmm5
jbe 0x180025137
comiss xmm4, xmm0
jbe 0x180025137
mov rax, qword [rax + 0x4228]
movss xmm2, dword [rax + 0xc]
movss xmm3, dword [rax + 8]
movaps xmm0, xmm2
addss xmm0, dword [rax + 0x14]
movaps xmm1, xmm3
addss xmm1, dword [rax + 0x10]
comiss xmm0, xmm7
jbe 0x180025137
comiss xmm6, xmm2
jbe 0x180025137
comiss xmm1, xmm8
jbe 0x180025137
comiss xmm9, xmm3
ja 0x18002513b
mov dword [rsp + 0x70], edi
mov ecx, dword [r14 + 0x4098]
mov rdx, qword [0x1800c5c08]
mov eax, dword [rsi + 0x8c]
mov dword [rdx + 0x40b4], ecx
mov ecx, dword [rsp + 0x70]
mov dword [rdx + 0x40b8], ecx
mov dword [rdx + 0x40b0], eax
movups xmm0, xmmword [rbp + 8]
movups xmmword [rdx + 0x40bc], xmm0
movaps xmm9, xmmword [rsp + 0x1c0]
movaps xmm8, xmmword [rsp + 0x1d0]
movaps xmm7, xmmword [rsp + 0x1e0]
movaps xmm6, xmmword [rsp + 0x1f0]
jmp 0x18002526d
mov rcx, qword [rsi + 0x30]
mov rdx, qword [0x1800c5c08]
test rcx, rcx
je 0x1800251b0
mov eax, dword [rdx + 0x3f60]
mov dword [rcx + 0x64], eax
cmp qword [rdx + 0x4220], rcx
je 0x1800251ef
test rcx, rcx
je 0x1800251de
mov eax, dword [rcx + 0x28]
mov dword [rdx + 0x4218], eax
mov rax, qword [rdx + 0x3890]
mov qword [rdx + 0x4220], rcx
test rax, rax
je 0x1800251ef
call rax
jmp 0x1800251ef
mov dword [rdx + 0x4218], 0x3f800000
mov qword [rdx + 0x4220], rcx
mov rcx, qword [0x1800c5c08]
mov qword [rcx + 0x3fe0], rsi
movsxd rax, dword [rsi + 0x1d0]
cmp eax, 0xffffffff
je 0x180025219
imul rdx, rax, 0x218
add rdx, qword [rcx + 0x44e0]
jmp 0x18002521c
mov rdx, rbx
movss xmm0, dword [rcx + 0x3d54]
mov qword [rcx + 0x44b8], rdx
mulss xmm0, dword [rsi + 0x2b0]
mov rax, qword [rsi + 0x390]
mulss xmm0, dword [rsi + 0x2b4]
test rax, rax
je 0x18002524f
mulss xmm0, dword [rax + 0x2b0]
movss dword [rcx + 0x3d68], xmm0
lea r13, [rsi + 0x230]
movss dword [rcx + 0x3d50], xmm0
lea r12, [rsi + 0x228]
mov r15d, dword [rsp + 0x48]
mov edi, r15d
and edi, 0x1000000
je 0x18002528a
mov rax, qword [rsp + 0x58]
mov ebx, dword [rax + 0x178]
jmp 0x1800252cf
movsxd rcx, dword [rsi + 0x108]
xor edx, edx
mov rax, qword [rsi + 0x110]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, str.FOCUSSCOPE
call fcn.180016190
mov rcx, qword [0x1800c5c08]
mov ebx, eax
cmp dword [rcx + 0x401c], eax
jne 0x1800252cf
lea r8, str.FOCUSSCOPE
mov edx, 0xb
mov ecx, eax
call fcn.1800395e0
mov dword [rsi + 0x178], ebx
bt r15d, 0x1d
jb 0x180025353
mov rcx, qword [0x1800c5c08]
mov r9b, 1
mov r8, r13
mov rdx, r12
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rbx, qword [rcx + 0x3fe0]
mov rcx, qword [rbx + 0x2c0]
call fcn.1800432f0
mov rax, qword [rbx + 0x2c0]
mov rcx, qword [rax + 0x60]
movsxd rdx, dword [rax + 0x58]
add rdx, rdx
movss xmm0, dword [rcx + rdx*8 - 0xc]
movss xmm1, dword [rcx + rdx*8 - 8]
movss xmm2, dword [rcx + rdx*8 - 4]
mov eax, dword [rcx + rdx*8 - 0x10]
mov dword [rbx + 0x258], eax
movss dword [rbx + 0x25c], xmm0
movss dword [rbx + 0x260], xmm1
movss dword [rbx + 0x264], xmm2
mov eax, dword [rsp + 0x4c]
xor edx, edx
mov r13, qword [rsp + 0x200]
mov r12, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x258]
mov byte [rsi + 0xcd], 0
inc word [rsi + 0xd8]
mov dword [r14 + 0x40f0], edx
cmp eax, dword [rsp + 0x50]
je 0x18002550f
movzx eax, byte [rsi + 0x401]
and al, 5
cmp al, 1
jne 0x1800253bc
mov eax, dword [r14 + 0x3f60]
cmp dword [rsi + 0x284], eax
jne 0x1800253b5
mov byte [rsi + 0xed], 1
jmp 0x1800253bc
mov byte [rsi + 0xec], 1
test edi, edi
je 0x18002547a
test r15b, 0x40
jne 0x180025442
cmp byte [rsi + 0xe4], dl
jg 0x180025442
cmp byte [rsi + 0xe5], dl
jg 0x180025442
bt r15d, 0x17
jae 0x18002540a
cmp byte [r14 + 0x42ac], dl
je 0x18002540a
mov rcx, qword [r14 + 0x4268]
test rcx, rcx
je 0x18002540a
mov rax, qword [rsi + 0x3c0]
cmp qword [rcx + 0x3c0], rax
jne 0x18002540a
mov al, 1
jmp 0x18002540c
xor al, al
cmp byte [r14 + 0x55c4], dl
jne 0x180025442
test al, al
jne 0x180025442
movss xmm0, dword [rsi + 0x208]
comiss xmm0, dword [rsi + 0x210]
jae 0x18002543b
movss xmm0, dword [rsi + 0x20c]
comiss xmm0, dword [rsi + 0x214]
jb 0x180025442
mov byte [rsi + 0xec], 1
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x18002547a
cmp byte [rax + 0xce], dl
jne 0x18002545c
cmp byte [rax + 0xec], dl
jle 0x180025463
mov byte [rsi + 0xec], 1
cmp byte [rax + 0xce], dl
jne 0x180025473
cmp byte [rax + 0xed], dl
jle 0x18002547a
mov byte [rsi + 0xed], 1
comiss xmm15, dword [r14 + 0x3908]
jb 0x18002548b
mov byte [rsi + 0xec], 1
cmp byte [rsi + 0xec], dl
jg 0x1800254a9
cmp byte [rsi + 0xed], dl
jg 0x1800254a9
xor cl, cl
cmp byte [rsi + 0xee], cl
jg 0x1800254ab
xor al, al
jmp 0x1800254ad
mov cl, 1
mov al, 1
mov byte [rsi + 0xd2], al
movzx eax, byte [rsi + 0xef]
test al, al
jle 0x1800254cd
dec al
mov byte [rsi + 0xef], al
or dword [rsi + 0xc], 0xc0200
cmp byte [rsi + 0xce], dl
jne 0x1800254e1
cmp byte [rsi + 0xcb], dl
je 0x1800254e1
test cl, cl
je 0x180025502
cmp byte [rsi + 0xe4], dl
jg 0x180025502
cmp byte [rsi + 0xe5], dl
jg 0x180025502
cmp byte [rsi + 0xed], dl
jg 0x180025502
mov byte [rsi + 0xd0], 1
jmp 0x18002550f
mov byte [rsi + 0xd0], dl
mov word [rsi + 0x176], dx
cmp byte [rsi + 0xd0], dl
sete al
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.18008b900
movaps xmm15, xmmword [rsp + 0x160]
add rsp, 0x210
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret