Function at 0x18004bd70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1d0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x18009a028]
xor rax, rsp
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x60], r9d
mov r13, r8
mov qword [rsp + 0x78], r8
mov r15, rcx
mov qword [rbp - 0x50], rcx
mov rax, qword [rbp + 0x148]
mov qword [rbp - 0x78], rax
mov rbx, qword [0x18009b0f8]
mov rsi, rbx
mov qword [rsp + 0x58], rbx
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov r14, qword [rbx + 0x3ed0]
mov qword [rbp - 0x80], r14
cmp byte [r14 + 0xbb], 0
jne 0x18004e371
movsxd rcx, dword [r14 + 0xf0]
mov rax, qword [r14 + 0xf8]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
mov rcx, r15
call fcn.18001ad00
mov edi, eax
mov dword [rsp + 0x54], eax
mov rcx, qword [r14]
cmp dword [rcx + 0x3f18], eax
jne 0x18004be78
mov r8, r15
mov edx, 0xb
mov ecx, eax
call fcn.180030c70
mov rbx, qword [0x18009b0f8]
mov rcx, r15
cmp r15, 0xffffffffffffffff
jae 0x18004be9e
movzx edx, byte [rcx]
test dl, dl
je 0x18004be9e
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x18004be95
cmp byte [rax], dl
je 0x18004be9e
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x18004be81
movss xmm0, dword [rbx + 0x3c08]
xor eax, eax
movss xmm1, dword [0x18008e1a0]
xorps xmm9, xmm9
cmp r15, rcx
jne 0x18004bebf
xorps xmm11, xmm11
jmp 0x18004bf0e
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [0x18008e190]
movaps xmm2, xmm0
lea rdx, [rbp - 0x68]
mov rcx, qword [rbx + 0x3c00]
call fcn.180040710
movss xmm0, dword [rbp - 0x68]
addss xmm0, dword [0x18008e0f4]
cvttss2si eax, xmm0
movd xmm11, eax
cvtdq2ps xmm11, xmm11
movss xmm0, dword [rbp - 0x64]
movss dword [rbp - 0x5c], xmm11
movss xmm6, dword [rsi + 0x3810]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
mov rax, qword [rbx + 0x3ed0]
test byte [rbx + 0x4758], 1
je 0x18004bf41
movss xmm0, dword [rbx + 0x475c]
jmp 0x18004bf49
movss xmm0, dword [rax + 0x1bc]
movss xmm10, dword [0x18008e0fc]
comiss xmm9, xmm0
jbe 0x18004bf90
movss xmm1, dword [rax + 0x250]
cmp qword [rax + 0x1a8], 0
jne 0x18004bf74
cmp qword [rbx + 0x4b10], 0
je 0x18004bf7c
movss xmm1, dword [rax + 0x220]
subss xmm1, dword [rax + 0x100]
addss xmm1, xmm0
movaps xmm0, xmm10
maxss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov rdx, qword [rbp + 0x130]
mov rdx, qword [rdx]
lea rcx, [rbp - 0x68]
call fcn.180029a90
comiss xmm11, xmm9
jbe 0x18004bfc2
movaps xmm5, xmm11
addss xmm5, dword [rsi + 0x3824]
jmp 0x18004bfc5
xorps xmm5, xmm5
movss xmm4, dword [r14 + 0x104]
movaps xmm1, xmm4
movss xmm7, dword [rbp - 0x64]
addss xmm1, xmm7
movss xmm3, dword [r14 + 0x100]
movaps xmm0, xmm3
movss xmm8, dword [rbp - 0x68]
addss xmm0, xmm8
movss dword [rbp - 0x48], xmm3
movss dword [rbp - 0x44], xmm4
movss dword [rbp - 0x40], xmm0
movss dword [rbp - 0x3c], xmm1
movaps xmm2, xmm4
addss xmm2, xmm7
addss xmm5, xmm8
addss xmm5, xmm3
movss dword [rbp + 0x10], xmm3
movss dword [rbp + 0x14], xmm4
movss dword [rbp + 0x18], xmm5
movss dword [rbp + 0x1c], xmm2
subss xmm2, xmm4
subss xmm5, xmm3
movss dword [rbp - 0x68], xmm5
movss dword [rbp - 0x64], xmm2
movaps xmm1, xmm6
lea rcx, [rbp - 0x68]
call fcn.1800296c0
mov r9d, 0x400
lea r8, [rbp - 0x48]
mov edx, edi
lea rcx, [rbp + 0x10]
call fcn.180029830
test al, al
je 0x18004e371
mov ebx, dword [rsi + 0x4774]
mov edx, edi
lea rcx, [rbp - 0x48]
call fcn.18001e6d0
movzx r12d, al
mov byte [rsp + 0x53], al
mov eax, 1
test r12b, r12b
je 0x18004c08d
mov dword [rsi + 0x4a50], eax
mov rdi, qword [0x18009b0f8]
mov r9d, dword [rsp + 0x54]
test r9d, r9d
je 0x18004c0b0
cmp dword [rdi + 0x4be8], r9d
jne 0x18004c0b0
add rdi, 0x4be0
jmp 0x18004c0b2
xor edi, edi
shr ebx, 8
and bl, al
mov dword [rsp + 0x70], ebx
mov eax, dword [rsi + 0x3f30]
cmp eax, r9d
je 0x18004c0e5
cmp dword [rsi + 0x48c0], r9d
jne 0x18004c0e5
test byte [rsi + 0x48cc], 1
jne 0x18004c0e1
cmp dword [rsi + 0x48e4], 2
jne 0x18004c0e5
mov cl, 1
jmp 0x18004c0e7
xor cl, cl
mov byte [rsp + 0x51], cl
test r12b, r12b
je 0x18004c0fe
cmp byte [rsi + 0x3748], 0
je 0x18004c0fe
mov sil, 1
jmp 0x18004c101
xor sil, sil
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x6c], 0
xor r14b, r14b
test rdi, rdi
je 0x18004c11e
cmp byte [rdi + 0x6b], 1
je 0x18004c11e
mov r15b, 1
jmp 0x18004c121
xor r15b, r15b
test sil, sil
jne 0x18004c135
test cl, cl
jne 0x18004c135
test bl, bl
jne 0x18004c135
mov byte [rsp + 0x50], r14b
jmp 0x18004c13f
mov byte [rsp + 0x50], 1
cmp eax, r9d
jne 0x18004c148
test r15b, r15b
je 0x18004c3a2
mov rdi, qword [rsp + 0x58]
add rdi, 0x4be0
mov dword [rdi + 0xe80], 0xbe99999a
mov ecx, dword [rdi + 8]
call fcn.18004bcb0
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rbx + r13], r14b
jne 0x18004c170
lea esi, [rbx + 1]
mov ecx, dword [rdi + 0x3c]
cmp esi, ecx
jle 0x18004c1a7
test ecx, ecx
je 0x18004c192
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004c197
mov eax, 8
mov edx, esi
cmp eax, esi
cmovg edx, eax
lea rcx, [rdi + 0x38]
call fcn.180031ac0
mov dword [rdi + 0x38], esi
movsxd r8, esi
mov rdx, r13
mov rcx, qword [rdi + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x54]
cmp dword [rdi + 8], eax
jne 0x18004c204
test r15b, r15b
jne 0x18004c204
mov r13b, 1
cmp dword [rdi + 0x10], ebx
jne 0x18004c1fb
lea rsi, [rdi + 0x48]
lea r12, [rdi + 0x10]
cmp byte [rsi], r14b
je 0x18004c20f
mov r15, rsi
lea r12, [rdi + 0x10]
movsxd r8, ebx
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c20f
jmp 0x18004c208
lea r15, [rdi + 0x48]
mov rsi, r15
jmp 0x18004c208
lea rsi, [rdi + 0x48]
lea r12, [rdi + 0x10]
xor r13b, r13b
mov eax, dword [rsp + 0x54]
mov dword [rdi + 8], eax
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18004c246
test ecx, ecx
je 0x18004c231
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004c236
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.180031b50
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x18004c269
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor edx, edx
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.180031ac0
xor edx, edx
mov dword [rdi + 0x28], edx
mov byte [rsi], dl
mov rcx, qword [rsp + 0x78]
mov rsi, rcx
mov r15, qword [rdi + 0x20]
mov rbx, r15
movsxd r14, dword [rbp - 0x60]
dec r14
lea r14, [r15 + r14*2]
cmp r15, r14
jae 0x18004c2c3
nop
cmp byte [rsi], 0
je 0x18004c2bc
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.18001b020
movsxd rcx, eax
add rsi, rcx
movzx eax, word [rsp + 0x68]
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x18004c290
mov rcx, qword [rsp + 0x78]
xor edx, edx
mov word [rbx], dx
sub rbx, r15
sar rbx, 1
mov dword [rdi + 0xc], ebx
sub esi, ecx
mov dword [r12], esi
test r13b, r13b
je 0x18004c2fe
mov ecx, ebx
cmp dword [rdi + 0x54], ebx
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
mov ecx, ebx
cmp dword [rdi + 0x58], ebx
cmovl ecx, dword [rdi + 0x58]
mov dword [rdi + 0x58], ecx
cmp dword [rdi + 0x5c], ebx
cmovl ebx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], ebx
jmp 0x18004c340
mov qword [rdi + 0x50], 0
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], edx
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], 0
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], edx
mov byte [rdi + 0x68], 0
mov byte [rdi + 0x6b], 1
mov byte [rdi + 0x60], 0
mov dword [rdi + 0x64], edx
movzx r15d, byte [rsp + 0x51]
test r15b, r15b
je 0x18004c363
test r13b, r13b
je 0x18004c35e
mov rax, qword [rsp + 0x58]
test byte [rax + 0x48cc], 4
jne 0x18004c363
mov r14b, 1
jmp 0x18004c366
xor r14b, r14b
movzx esi, byte [rsp + 0x52]
cmp byte [rsp + 0x70], 0
jne 0x18004c392
test sil, sil
je 0x18004c385
mov rax, qword [rsp + 0x58]
cmp byte [rax + 0xe24], 0
jne 0x18004c392
movzx r12d, byte [rsp + 0x53]
mov r9d, dword [rsp + 0x54]
jmp 0x18004c3a8
mov r14b, 1
movzx r12d, byte [rsp + 0x53]
mov r9d, dword [rsp + 0x54]
jmp 0x18004c3a8
movzx r15d, byte [rsp + 0x51]
mov rax, qword [rsp + 0x58]
movzx r13d, byte [rax + 0x79]
mov byte [rsp + 0x53], r13b
movzx ebx, byte [rsp + 0x50]
cmp dword [rax + 0x3f30], r9d
je 0x18004c402
test bl, bl
je 0x18004c3f5
mov rdx, qword [rbp - 0x80]
mov ecx, r9d
call fcn.18001e3b0
mov rdx, qword [rbp - 0x80]
mov ecx, dword [rsp + 0x54]
call fcn.18002b140
mov rcx, qword [rbp - 0x80]
call fcn.180026890
mov rax, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x54]
cmp dword [rax + 0x3f30], r9d
jne 0x18004c484
test sil, sil
je 0x18004c425
mov rax, qword [0x18009b0f8]
mov dword [rax + 0x4588], r9d
mov dword [rax + 0x4584], r9d
mov word [rax + 0x458c], 0
mov rsi, qword [rsp + 0x58]
or dword [rsi + 0x4740], 3
mov rax, qword [0x18009b0f8]
mov dword [rax + 0x3fd0], r9d
mov dword [rax + 0x3fcc], r9d
mov word [rax + 0x3fd4], 0
mov dword [rax + 0x3fdc], r9d
mov dword [rax + 0x3fd8], r9d
mov word [rax + 0x3fe0], 0
test r13b, r13b
je 0x18004c489
mov dword [rax + 0x45f4], r9d
mov dword [rax + 0x45f0], r9d
mov word [rax + 0x45f8], 0
jmp 0x18004c489
mov rsi, qword [rsp + 0x58]
cmp dword [rsi + 0x3f30], r9d
jne 0x18004c4a5
test rdi, rdi
jne 0x18004c4a5
xor edx, edx
xor ecx, ecx
call fcn.18001e3b0
mov r9d, dword [rsp + 0x54]
mov ecx, dword [rsi + 0x3f30]
mov r8d, 1
cmp ecx, r9d
jne 0x18004c4d4
cmp byte [rsi + 0x3748], 0
je 0x18004c4d0
mov eax, dword [rsp + 0x6c]
movzx eax, al
test bl, bl
cmove eax, r8d
mov dword [rsp + 0x6c], eax
mov dl, 1
jmp 0x18004c4d6
xor dl, dl
mov byte [rsp + 0x51], dl
test rdi, rdi
je 0x18004c502
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c4ec
test r14b, r14b
je 0x18004c502
test dl, dl
je 0x18004c502
mov r10b, 1
mov byte [rsp + 0x50], r10b
xor r11b, r11b
mov byte [rsp + 0x52], r11b
jmp 0x18004c525
xor r11b, r11b
mov byte [rsp + 0x52], r11b
xor r10b, r10b
mov byte [rsp + 0x50], r10b
test dl, dl
jne 0x18004c520
mov byte [rsp + 0x50], r10b
cmp ecx, r9d
jne 0x18004c530
test rdi, rdi
je 0x18004c530
cmp byte [rdi + 0x48], 0
mov byte [rsp + 0x66], 1
jne 0x18004c535
mov byte [rsp + 0x66], 0
movss xmm6, dword [rbp - 0x48]
movss dword [rsp + 0x68], xmm6
movss xmm0, dword [0x18008e0c4]
cmp ecx, r9d
jne 0x18004ca12
mov byte [rdi + 0xe86], 0
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x4c], eax
mov dword [rdi + 0xe88], 0x40000
movzx edx, byte [rsi + 0xe10]
test dl, dl
sete al
mov byte [rsi + 0x3f3d], al
mov dword [rsi + 0x5e14], r8d
movss xmm1, dword [rsi + 0xe08]
subss xmm1, xmm6
subss xmm1, dword [rsi + 0x380c]
addss xmm1, dword [rdi + 0x50]
movss xmm2, dword [rsi + 0x3c08]
mulss xmm2, xmm0
test r14b, r14b
je 0x18004c5ce
xor r12d, r12d
mov dword [rdi + 0x58], r12d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r12b
lea rax, [rdi + 0xe85]
mov byte [rax], 1
jmp 0x18004c931
test r12b, r12b
je 0x18004c77f
cmp word [rsi + 0x3752], 2
jb 0x18004c77f
cmp byte [rsi + 0xe25], 0
jne 0x18004c77f
cmp byte [rdi + 0x6b], 0
je 0x18004c63e
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c63a
nop dword [rax]
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c63a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c63a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c610
movaps xmm2, xmm9
mov rcx, rdi
call fcn.18004a2a0
mov edx, eax
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], eax
mov byte [rdi + 0x6a], 0
movzx eax, word [rsi + 0x3752]
sub eax, 2
test al, 1
jne 0x18004c714
test edx, edx
je 0x18004c680
lea eax, [rdx - 1]
movsxd rcx, eax
mov rax, qword [rdi + 0x20]
cmp word [rax + rcx*2], 0xa
je 0x18004c680
xor cl, cl
jmp 0x18004c682
mov cl, 1
test cl, cl
jne 0x18004c6ac
mov r8d, 0x20000c
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov edx, dword [rdi + 0x54]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c6c6
cmp dword [rdi + 0x58], eax
jne 0x18004c6c1
mov dword [rdi + 0x5c], edx
mov dword [rdi + 0x58], edx
jmp 0x18004c6c6
mov dword [rdi + 0x54], eax
mov edx, eax
mov rcx, rdi
call fcn.180049ee0
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x5c], eax
mov ecx, dword [rdi + 0xc]
mov r8d, eax
mov edx, dword [rdi + 0x58]
cmp edx, eax
je 0x18004c701
cmp edx, ecx
jle 0x18004c6ea
mov dword [rdi + 0x58], ecx
mov edx, ecx
cmp eax, ecx
jle 0x18004c6f7
mov dword [rdi + 0x5c], ecx
mov r8d, ecx
mov eax, dword [rdi + 0x54]
cmp edx, r8d
jne 0x18004c701
mov dword [rdi + 0x54], edx
mov eax, edx
cmp eax, ecx
jle 0x18004c773
mov dword [rdi + 0x54], ecx
lea rax, [rdi + 0xe85]
jmp 0x18004c924
mov r8d, 0x200004
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov r8d, 0x600005
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov r8d, 0x600001
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 0
lea rax, [rdi + 0xe85]
jmp 0x18004c924
lea rbx, [rdi + 0xe85]
movzx ecx, byte [rbx]
cmp byte [rsi + 0x3748], 0
je 0x18004c885
test cl, cl
jne 0x18004c885
test r12b, r12b
je 0x18004c87d
cmp byte [rsi + 0xe25], cl
je 0x18004c816
cmp byte [rdi + 0x6b], cl
je 0x18004c7fe
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c7fa
nop word [rax + rax]
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c7fa
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c7fa
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c7d0
movaps xmm2, xmm9
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c80c
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x58], eax
mov rcx, rdi
call fcn.18004a2a0
jmp 0x18004c86d
cmp byte [rdi + 0x6b], 0
je 0x18004c85e
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c85a
nop dword [rax]
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c85a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c85a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c830
movaps xmm2, xmm9
mov rcx, rdi
call fcn.18004a2a0
mov dword [rdi + 0x58], eax
mov byte [rdi + 0x6a], 0
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov dword [rdi + 0xe80], 0xbe99999a
mov rax, rbx
jmp 0x18004c92e
mov rax, rbx
test dl, dl
je 0x18004c92e
test cl, cl
jne 0x18004c92e
movss xmm0, dword [rsi + 0xf8]
ucomiss xmm0, xmm9
jp 0x18004c8b8
jne 0x18004c8b8
movss xmm0, dword [rsi + 0xfc]
ucomiss xmm0, xmm9
jp 0x18004c8b8
je 0x18004c92e
cmp byte [rdi + 0x6b], 0
je 0x18004c8fe
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c8fa
nop
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c8fa
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c8fa
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c8d0
movaps xmm2, xmm9
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c90c
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x58], eax
mov rcx, rdi
call fcn.18004a2a0
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0xe84], 1
mov rax, rbx
mov dword [rdi + 0xe80], 0xbe99999a
xor r12d, r12d
cmp byte [rax], 0
je 0x18004c942
cmp byte [rsi + 0xe10], 0
jne 0x18004c942
mov byte [rax], 0
cmp byte [rsi + 0xe24], 0
je 0x18004c954
cmp byte [rsi + 0xe26], 0
je 0x18004c962
test r13b, r13b
je 0x18004c966
cmp byte [rsi + 0xe27], 0
je 0x18004c966
mov al, 1
jmp 0x18004c968
xor al, al
lea r14, [rsi + 0x37c0]
cmp dword [r14], 0
jle 0x18004ca0d
test al, al
jne 0x18004c9e9
test r15b, r15b
jne 0x18004c9e9
mov esi, r12d
mov rbx, r12
mov r13, qword [rsp + 0x58]
nop dword [rax]
mov rax, qword [r13 + 0x37c8]
movzx r8d, word [rax + rbx]
cmp r8d, 0x1f
jbe 0x18004c9d3
cmp r8d, 0x7f
je 0x18004c9d3
lea eax, [r8 - 0xe000]
cmp eax, 0x18ff
jbe 0x18004c9d3
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
inc esi
add rbx, 2
cmp esi, dword [r14]
jl 0x18004c990
movzx r13d, byte [rsp + 0x53]
mov rsi, qword [rsp + 0x58]
mov ecx, dword [r14 + 4]
test ecx, ecx
jns 0x18004ca0a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r12d
test eax, eax
cmovg edx, eax
mov rcx, r14
call fcn.180031b50
mov dword [r14], r12d
mov r9d, dword [rsp + 0x54]
xor r15b, r15b
mov byte [rsp + 0x65], r15b
cmp dword [rsi + 0x3f30], r9d
jne 0x18004d418
cmp byte [rsi + 0x3f3c], r15b
jne 0x18004d418
cmp byte [rsp + 0x6c], r15b
jne 0x18004d418
movaps xmm0, xmm7
subss xmm0, dword [rsi + 0x3810]
divss xmm0, dword [rsi + 0x3c08]
cvttss2si eax, xmm0
mov r15d, 1
mov ecx, r15d
cmp eax, r15d
cmovge ecx, eax
mov dword [rdi + 0x64], ecx
movzx eax, byte [rsi + 0xe25]
neg al
sbb ebx, ebx
and ebx, 0x400000
test r13b, r13b
je 0x18004caa3
movzx r12d, byte [rsi + 0xe26]
cmp byte [rsi + 0xe27], 0
je 0x18004caab
cmp byte [rsi + 0xe24], 0
jne 0x18004caab
test r12b, r12b
jne 0x18004caab
movzx r13d, r15b
jmp 0x18004caae
movzx r12d, byte [rsi + 0xe24]
xor r13b, r13b
mov r8d, r15d
mov edx, r9d
mov ecx, 0xa39
call fcn.1800295c0
mov r14d, dword [rsp + 0x54]
test al, al
jne 0x18004cae0
mov r8d, r15d
mov edx, r14d
mov ecx, 0x220a
call fcn.1800295c0
test al, al
mov byte [rsp + 0x60], 0
je 0x18004cae5
mov byte [rsp + 0x60], r15b
xor r8d, r8d
mov edx, r14d
mov ecx, 0xa24
call fcn.1800295c0
test al, al
jne 0x18004cb12
xor r8d, r8d
mov edx, r14d
mov ecx, 0x1209
call fcn.1800295c0
test al, al
mov byte [rsp + 0x63], 0
je 0x18004cb17
mov byte [rsp + 0x63], r15b
mov r8d, r15d
mov edx, r14d
mov ecx, 0xa37
call fcn.1800295c0
test al, al
jne 0x18004cb44
mov r8d, r15d
mov edx, r14d
mov ecx, 0x2209
call fcn.1800295c0
test al, al
mov byte [rsp + 0x64], 0
je 0x18004cb49
mov byte [rsp + 0x64], r15b
mov r8d, r15d
mov edx, r14d
mov ecx, 0xa3b
call fcn.1800295c0
test al, al
setne byte [rsp + 0x67]
mov r8d, r15d
mov edx, r14d
mov ecx, 0xa3a
call fcn.1800295c0
test al, al
jne 0x18004cb95
cmp byte [rsp + 0x53], al
je 0x18004cb8e
mov r8d, r15d
mov edx, r14d
mov ecx, 0x2a3b
call fcn.1800295c0
test al, al
jne 0x18004cb95
mov byte [rsp + 0x62], 0
jmp 0x18004cb9a
mov byte [rsp + 0x62], r15b
xor r8d, r8d
mov edx, r14d
mov ecx, 0xa22
call fcn.1800295c0
mov byte [rsp + 0x61], al
test byte [rsi + 8], 2
je 0x18004cbc0
test byte [rsi + 0xc], r15b
je 0x18004cbc0
movzx esi, r15b
jmp 0x18004cbc3
xor sil, sil
mov r8d, r15d
xor edx, edx
mov ecx, 0x20d
call fcn.180027790
test al, al
jne 0x18004cbec
mov r8d, r15d
xor edx, edx
mov ecx, 0x267
call fcn.180027790
test al, al
jne 0x18004cbec
xor r15b, r15b
test sil, sil
je 0x18004cc1c
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.180027790
test al, al
jne 0x18004cc17
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.180027790
test al, al
je 0x18004cc1c
mov r14b, 1
jmp 0x18004cc1f
xor r14b, r14b
mov r8d, 1
mov edx, dword [rsp + 0x54]
mov ecx, 0x20e
call fcn.1800295c0
test al, al
jne 0x18004cc59
test sil, sil
je 0x18004cc54
mov r8d, 1
mov edx, dword [rsp + 0x54]
mov ecx, 0x26c
call fcn.1800295c0
test al, al
jne 0x18004cc59
xor sil, sil
jmp 0x18004cc5c
mov sil, 1
xor edx, edx
mov ecx, 0x201
lea r8d, [rdx + 1]
call fcn.180027790
test al, al
je 0x18004ccdb
test r13b, r13b
je 0x18004cc7c
mov eax, 0x200004
jmp 0x18004cc8c
mov eax, 0x200000
test r12b, r12b
mov ecx, 0x20000c
cmovne eax, ecx
or ebx, eax
lea rdx, [rdi + 0x54]
mov r8d, ebx
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov rsi, qword [rsp + 0x58]
movzx edx, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x50]
xor r15b, r15b
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18004d40b
test dl, dl
je 0x18004d40b
mov al, 1
jmp 0x18004d40d
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.180027790
test al, al
je 0x18004cd14
test r13b, r13b
je 0x18004ccfd
mov ecx, 0x200005
or ebx, ecx
jmp 0x18004cc8e
mov ecx, 0x200001
mov eax, 0x20000d
test r12b, r12b
cmovne ecx, eax
or ebx, ecx
jmp 0x18004cc8e
mov r13d, 1
mov r8d, r13d
xor edx, edx
mov ecx, 0x203
call fcn.180027790
mov r8d, r13d
xor edx, edx
mov ecx, 0x204
call fcn.180027790
mov r8d, r13d
xor edx, edx
mov ecx, 0x205
call fcn.180027790
mov r8d, r13d
xor edx, edx
mov ecx, 0x206
call fcn.180027790
mov r8d, r13d
xor edx, edx
mov ecx, 0x207
call fcn.180027790
test al, al
je 0x18004cdaa
mov eax, ebx
or eax, 0x200006
or ebx, 0x200004
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 0xe24], 0
cmovne ebx, eax
mov r8d, ebx
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], r13b
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x18004ccb3
mov r8d, r13d
xor edx, edx
mov ecx, 0x208
call fcn.180027790
test al, al
je 0x18004cddf
mov eax, ebx
or eax, 0x200007
mov r8d, 0x200005
or r8d, ebx
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 0xe24], 0
cmovne r8d, eax
jmp 0x18004cd88
mov r8d, r13d
xor edx, edx
mov ecx, 0x20a
call fcn.180027790
movzx r13d, byte [rsp + 0x60]
test al, al
je 0x18004ce38
test r13b, r13b
jne 0x18004ce38
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004ce2d
test r12b, r12b
je 0x18004ce2d
lea rdx, [rdi + 0x54]
mov r8d, 0x60000d
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
or ebx, 0x200008
jmp 0x18004cc8e
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.180027790
test al, al
je 0x18004cefc
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004ce80
test r12b, r12b
je 0x18004ceb0
lea rdx, [rdi + 0x54]
mov r8d, 0x60000c
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov rsi, qword [rsp + 0x58]
or ebx, 0x200009
lea rdx, [rdi + 0x54]
mov r8d, ebx
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x18004ccb3
cmp byte [rsp + 0x53], 0
je 0x18004ce80
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 0xe27], 0
je 0x18004ce85
cmp byte [rsi + 0xe26], 0
jne 0x18004ce85
cmp byte [rsi + 0xe24], 0
jne 0x18004ce85
lea rdx, [rdi + 0x54]
mov r8d, 0x600004
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x18004ce85
test r15b, r15b
jne 0x18004d3d5
test r14b, r14b
jne 0x18004d3d5
test sil, sil
je 0x18004cf32
mov r15b, 1
mov byte [rsp + 0x65], r15b
mov byte [rsp + 0x6c], r15b
xor cl, cl
xor dl, dl
mov byte [rsp + 0x51], dl
mov rsi, qword [rsp + 0x58]
jmp 0x18004ccc0
movzx eax, byte [rsp + 0x67]
test al, al
jne 0x18004d39c
cmp byte [rsp + 0x62], al
jne 0x18004d39c
cmp byte [rsp + 0x61], al
je 0x18004cf6d
xor eax, eax
mov dword [rdi + 0x58], eax
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], 0
mov byte [rdi + 0xe84], 1
jmp 0x18004ccae
test r13b, r13b
jne 0x18004d183
cmp byte [rsp + 0x63], r13b
jne 0x18004d183
cmp byte [rsp + 0x64], r13b
je 0x18004ccae
mov rcx, qword [0x18009b0f8]
mov rax, qword [rcx + 0xb0]
test rax, rax
je 0x18004cfbd
mov rcx, qword [rcx + 0xc0]
call rax
mov rbx, rax
test rax, rax
je 0x18004ccae
mov rcx, qword [0x18009b0f8]
jmp 0x18004cfc4
lea rbx, [0x1800834eb]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x18004cfd0
test rcx, rcx
je 0x18004cfe4
inc dword [rcx + 0xf4]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
xor r12d, r12d
mov r14d, r12d
cmp byte [rbx], r12b
je 0x18004d043
mov rsi, rax
nop dword [rax]
nop word [rax + rax]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.18001b020
movsxd rcx, eax
add rbx, rcx
mov ecx, dword [rsp + 0x70]
lea eax, [rcx - 0x20]
cmp eax, 0xffdf
ja 0x18004d03e
mov word [rsi], cx
inc r14d
add rsi, 2
cmp byte [rbx], r12b
jne 0x18004d010
movsxd rax, r14d
mov word [r15 + rax*2], r12w
test r14d, r14d
jle 0x18004d15e
mov edx, dword [rdi + 0xc]
mov r8d, dword [rdi + 0x5c]
mov eax, dword [rdi + 0x58]
mov ecx, edx
cmp eax, r8d
je 0x18004d095
mov r9d, eax
cmp eax, edx
jle 0x18004d075
mov dword [rdi + 0x58], edx
mov r9d, edx
mov ecx, dword [rdi + 0xc]
mov r10d, r8d
cmp r8d, edx
jle 0x18004d086
mov dword [rdi + 0x5c], edx
mov r10d, edx
mov ecx, dword [rdi + 0xc]
mov r8d, r10d
mov eax, r9d
cmp r9d, r10d
jne 0x18004d095
mov dword [rdi + 0x54], r9d
mov r9d, dword [rdi + 0x54]
cmp r9d, edx
jle 0x18004d0a4
mov dword [rdi + 0x54], edx
mov r9d, edx
cmp eax, r8d
je 0x18004d0d2
mov edx, eax
cmp eax, ecx
jle 0x18004d0b4
mov dword [rdi + 0x58], ecx
mov edx, ecx
mov r10d, r8d
cmp r8d, ecx
jle 0x18004d0c2
mov dword [rdi + 0x5c], ecx
mov r10d, ecx
mov r8d, r10d
mov eax, edx
cmp edx, r10d
jne 0x18004d0d2
mov dword [rdi + 0x54], edx
mov r9d, edx
cmp r9d, ecx
jle 0x18004d0da
mov dword [rdi + 0x54], ecx
cmp eax, r8d
je 0x18004d116
lea rdx, [rdi + 0x54]
mov rcx, rdi
jge 0x18004d0fe
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18004a5e0
mov eax, dword [rdi + 0x58]
mov dword [rdi + 0x5c], eax
jmp 0x18004d10f
sub eax, r8d
mov r9d, eax
call fcn.18004a5e0
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r12b
mov r9d, r14d
mov r8, r15
mov edx, dword [rdi + 0x54]
mov rcx, rdi
call fcn.18004a110
test al, al
je 0x18004d157
mov esi, dword [rdi + 0x54]
lea rcx, [rdi + 0x74]
xor edx, edx
call fcn.18004b710
test rax, rax
je 0x18004d14f
mov dword [rax], esi
mov dword [rax + 4], r12d
mov dword [rax + 8], r14d
mov dword [rax + 0xc], 0xffffffff
add dword [rdi + 0x54], r14d
mov byte [rdi + 0x6a], r12b
mov byte [rdi + 0xe84], 1
test r15, r15
je 0x18004d175
mov rax, qword [0x18009b0f8]
test rax, rax
je 0x18004d175
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18004ccae
mov rsi, qword [rsp + 0x58]
cmp qword [rsi + 0xb8], 0
je 0x18004d2eb
mov eax, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
movzx r12d, byte [rsp + 0x50]
movzx r8d, byte [rsp + 0x52]
mov byte [rsp + 0x50], r12b
mov byte [rsp + 0x52], r8b
cmp ecx, eax
je 0x18004d1c0
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18004d1c7
xor eax, eax
mov edx, eax
mov eax, dword [rdi + 0xc]
movsxd r14, eax
mov rax, qword [rdi + 0x20]
lea r8, [rax + r14*2]
movsxd r15, edx
lea rdx, [rax + r15*2]
xor eax, eax
mov ecx, eax
mov r9d, 0x800
mov r12d, 0x80
nop dword [rax]
test r8, r8
je 0x18004d1fa
cmp rdx, r8
jae 0x18004d21d
movzx eax, word [rdx]
test ax, ax
je 0x18004d21d
add rdx, 2
cmp ax, r12w
jae 0x18004d210
inc ecx
jmp 0x18004d1f0
cmp ax, r9w
sbb eax, eax
add eax, 3
add ecx, eax
jmp 0x18004d1f0
inc ecx
mov rax, qword [0x18009b0f8]
test rax, rax
je 0x18004d231
inc dword [rax + 0xf4]
movsxd rbx, ecx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
mov rcx, qword [rdi + 0x20]
lea r11, [rcx + r14*2]
lea r10, [rcx + r15*2]
mov r9, rax
lea r14, [rax + rbx]
lea rbx, [r14 - 1]
cmp rax, rbx
jae 0x18004d2a2
nop dword [rax]
test r11, r11
je 0x18004d26a
cmp r10, r11
jae 0x18004d2a2
movzx eax, word [r10]
test ax, ax
je 0x18004d2a2
mov r8d, eax
add r10, 2
cmp eax, r12d
jae 0x18004d287
mov byte [r9], r8b
inc r9
jmp 0x18004d29d
mov edx, r14d
sub edx, r9d
dec edx
mov rcx, r9
call fcn.18001b1d0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x18004d260
mov byte [r9], 0
mov rax, qword [0x18009b0f8]
mov r8, qword [rax + 0xb8]
test r8, r8
je 0x18004d2cd
mov rdx, rsi
mov rcx, qword [rax + 0xc0]
call r8
mov rax, qword [0x18009b0f8]
test rsi, rsi
je 0x18004d2dd
test rax, rax
je 0x18004d2dd
dec dword [rax + 0xf4]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rsi, qword [rsp + 0x58]
test r13b, r13b
je 0x18004ccb3
mov eax, dword [rdi + 0x5c]
lea rbx, [rdi + 0x54]
cmp dword [rdi + 0x58], eax
jne 0x18004d311
xor eax, eax
mov dword [rdi + 0x58], eax
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rbx], eax
mov byte [rdi + 0x6a], 0
mov byte [rdi + 0xe84], 1
mov r8d, dword [rbx + 8]
mov eax, dword [rbx + 4]
cmp eax, r8d
je 0x18004ccb3
mov ecx, dword [rdi + 0xc]
cmp eax, ecx
jle 0x18004d334
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x18004d33f
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x18004d346
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x18004d34c
mov dword [rbx], ecx
cmp eax, r8d
je 0x18004d393
mov rdx, rbx
mov rcx, rdi
jge 0x18004d37c
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18004a5e0
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
mov dword [rbx], eax
mov byte [rbx + 0x16], 0
mov byte [rbx + 0x16], 0
jmp 0x18004ccb3
sub eax, r8d
mov r9d, eax
call fcn.18004a5e0
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
mov dword [rbx], eax
mov byte [rbx + 0x16], 0
mov byte [rbx + 0x16], 0
jmp 0x18004ccb3
mov r8d, eax
xor r8d, 1
add r8d, 0x20000a
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a760
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x18004ccae
mov rsi, qword [rsp + 0x58]
movzx ecx, byte [rsp + 0x50]
movzx edx, byte [rsp + 0x51]
cmp byte [rsi + 0x7c], 0
je 0x18004d401
xor eax, eax
mov dword [rdi + 0x58], eax
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], 0
jmp 0x18004ccbd
mov byte [rsp + 0x6c], 1
jmp 0x18004ccbd
xor al, al
or cl, al
mov byte [rsp + 0x50], cl
mov r9d, dword [rsp + 0x54]
xor r10d, r10d
mov r12d, r10d
mov r14d, r10d
cmp dword [rsi + 0x3f30], r9d
jne 0x18004d6aa
test r15b, r15b
je 0x18004d5b8
mov r9, qword [rdi + 0x40]
mov rax, qword [rsp + 0x78]
mov r8, r9
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d463
inc rax
test ecx, ecx
jne 0x18004d450
test edx, edx
je 0x18004d5b8
mov r12, r9
mov qword [rbp - 0x58], r9
mov r14d, dword [rdi + 0x38]
dec r14d
mov dword [rbp - 0x68], r14d
mov byte [rsp + 0x52], 1
mov qword [rbp + 0x10], r10
mov r15d, r10d
mov r13, r10
mov qword [rbp + 0x18], r10
test r14d, r14d
jle 0x18004d576
movsxd rbx, r14d
add rbx, r9
mov rsi, r9
mov r14d, r10d
test rbx, rbx
je 0x18004d4af
cmp rsi, rbx
jae 0x18004d4cf
cmp byte [rsi], 0
je 0x18004d4cf
mov r8, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18001b020
movsxd rcx, eax
add rsi, rcx
inc r14d
jmp 0x18004d4a5
lea r15d, [r14 + 1]
test r15d, r15d
jle 0x18004d513
mov esi, r15d
cmp r15d, 8
mov eax, 8
cmovl esi, eax
test esi, esi
jle 0x18004d513
mov rax, qword [0x18009b0f8]
test rax, rax
je 0x18004d4fd
inc dword [rax + 0xf4]
movsxd rcx, esi
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r13, rax
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x14], esi
mov dword [rbp + 0x10], r15d
mov rsi, r12
mov r14, r13
movsxd r12, r15d
lea r12, [r12*2 - 2]
add r12, r13
cmp r13, r12
jae 0x18004d567
test rbx, rbx
je 0x18004d53a
cmp rsi, rbx
jae 0x18004d567
cmp byte [rsi], 0
je 0x18004d567
mov r8, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18001b020
movsxd rcx, eax
add rsi, rcx
movzx eax, word [rsp + 0x70]
mov word [r14], ax
add r14, 2
cmp r14, r12
jb 0x18004d530
xor r10d, r10d
mov word [r14], r10w
mov r14d, dword [rbp - 0x68]
mov r12, qword [rbp - 0x58]
lea r9d, [r15 - 1]
test r14d, r14d
cmovle r9d, r10d
lea rdx, [rdi + 0x54]
mov r8, r13
mov rcx, rdi
call fcn.18004bbf0
nop
test r13, r13
je 0x18004d5b2
mov rax, qword [0x18009b0f8]
test rax, rax
je 0x18004d5a8
dec dword [rax + 0xf4]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
movzx r15d, byte [rsp + 0x65]
mov byte [rdi + 0x48], 1
mov eax, dword [rdi + 0x18]
lea ebx, [rax*4 + 1]
mov ecx, dword [rdi + 0x2c]
cmp ebx, ecx
jle 0x18004d5f1
test ecx, ecx
je 0x18004d5dc
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004d5e1
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.180031ac0
mov dword [rdi + 0x28], ebx
mov r10, qword [rdi + 0x20]
mov r9, qword [rdi + 0x30]
movsxd r11, ebx
add r11, r9
lea rbx, [r11 - 1]
cmp r9, rbx
jae 0x18004d64a
nop dword [rax + rax]
movzx eax, word [r10]
test ax, ax
je 0x18004d64a
mov r8d, eax
add r10, 2
cmp eax, 0x80
jae 0x18004d62f
mov byte [r9], r8b
inc r9
jmp 0x18004d645
mov edx, r11d
sub edx, r9d
dec edx
mov rcx, r9
call fcn.18001b1d0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x18004d610
mov byte [r9], 0
test r15b, r15b
mov r15, qword [rsp + 0x78]
jne 0x18004d6a0
mov r9, qword [rdi + 0x30]
mov rax, r9
mov r8, r15
sub r8, r9
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d683
inc rax
test ecx, ecx
jne 0x18004d670
mov rsi, qword [rsp + 0x58]
xor r10d, r10d
test edx, edx
je 0x18004d6af
mov r12, r9
mov r14d, dword [rdi + 0x10]
mov r9b, 1
mov byte [rsp + 0x52], r9b
jmp 0x18004d6b5
mov rsi, qword [rsp + 0x58]
xor r10d, r10d
jmp 0x18004d6af
mov r15, qword [rsp + 0x78]
movzx r9d, byte [rsp + 0x52]
mov r13d, dword [rsp + 0x54]
cmp dword [rsi + 0x5a70], r13d
jne 0x18004d767
cmp dword [rsi + 0x3f30], r13d
je 0x18004d760
mov rax, qword [0x18009b0f8]
mov ecx, dword [rax + 0x4774]
test cl, 0x20
je 0x18004d6ee
shr ecx, 6
test cl, 1
jmp 0x18004d708
mov edx, dword [rax + 0x476c]
mov ecx, dword [rax + 0x3f60]
cmp ecx, edx
jne 0x18004d760
test ecx, ecx
je 0x18004d760
cmp dword [rax + 0x3f30], edx
je 0x18004d760
cmp byte [rax + 0x3f65], 0
jne 0x18004d725
cmp dword [rax + 0x3f30], 0
jne 0x18004d760
cmp byte [rax + 0x3f40], 0
je 0x18004d760
mov r12, qword [rsi + 0x5a80]
mov r14d, dword [rsi + 0x5a78]
dec r14d
mov rax, r12
mov r8, r15
sub r8, r12
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d753
inc rax
test ecx, ecx
jne 0x18004d740
test edx, edx
setne al
or r9b, al
mov byte [rsp + 0x52], r9b
mov dword [rsi + 0x5a70], r10d
test r12, r12
je 0x18004d7f8
mov qword [rbp - 0x18], r10
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov qword [rbp - 0x30], rsi
mov dword [rbp - 0x28], 0x40000
mov dword [rbp - 0x24], 0x40000
mov qword [rbp - 0x10], r15
mov dword [rbp - 8], r14d
lea eax, [r14 + 1]
cmp dword [rbp - 0x60], eax
cmovge eax, dword [rbp - 0x60]
mov dword [rbp - 4], eax
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x30]
call fcn.180060400
mov r15, qword [rbp - 0x10]
mov qword [rsp + 0x78], r15
mov r8d, dword [rbp - 4]
lea ecx, [r8 - 1]
cmp dword [rbp - 8], ecx
cmovl ecx, dword [rbp - 8]
lea eax, [rcx + 1]
cmp eax, r8d
cmovl r8d, eax
movsxd rbx, r8d
cmp rbx, 1
jb 0x18004d7f8
jbe 0x18004d7f2
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [r15 + rbx - 1], 0
cmp byte [rsp + 0x6c], 0
je 0x18004d811
cmp dword [rsi + 0x3f30], r13d
jne 0x18004d811
xor edx, edx
xor ecx, ecx
call fcn.18001e3b0
mov r8d, 1
mov edx, r13d
lea rcx, [rbp - 0x48]
call fcn.18001cee0
mov rax, qword [0x18009b0f8]
movups xmm0, xmmword [rax + 0x391c]
movups xmmword [rbp + 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b290
mov r8d, eax
movss xmm0, dword [rsi + 0x3814]
movss dword [rsp + 0x20], xmm0
mov r9b, 1
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x48]
call fcn.18001cbf0
movaps xmm15, xmm8
addss xmm15, xmm6
movss xmm14, dword [rbp - 0x44]
movaps xmm13, xmm14
addss xmm13, xmm7
movss xmm5, dword [rsi + 0x380c]
movaps xmm0, xmm5
addss xmm0, xmm6
movaps xmm1, xmm14
addss xmm1, dword [rsi + 0x3810]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x20], xmm0
cmp byte [rsp + 0x66], 0
je 0x18004d8bb
mov r15, qword [rdi + 0x30]
mov qword [rsp + 0x78], r15
movzx ecx, byte [rsp + 0x51]
movzx r12d, byte [rsp + 0x50]
test cl, cl
jne 0x18004da1d
test r12b, r12b
jne 0x18004da1d
cmp dword [rsi + 0x3f30], r13d
jne 0x18004d8e6
movsxd r14, dword [rdi + 0x10]
jmp 0x18004d8fa
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [r15 + r14], 0
jne 0x18004d8f0
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x18004e18c
mov rax, qword [0x18009b0f8]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp + 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b290
mov r9d, eax
mov rax, qword [rbp - 0x80]
mov rdx, qword [rax + 0x298]
mov rcx, r14
movss xmm2, dword [rsi + 0x3c08]
mov r8, qword [rsi + 0x3c00]
test r9d, 0xff000000
je 0x18004e18c
test r14, r14
jne 0x18004d981
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r15 + rcx], 0
jne 0x18004d974
add rcx, r15
cmp r15, rcx
je 0x18004e18c
test r8, r8
jne 0x18004d997
mov rax, qword [rdx + 0x38]
mov r8, qword [rax + 8]
ucomiss xmm2, xmm9
jp 0x18004d9a8
jne 0x18004d9a8
mov rax, qword [rdx + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp - 0x78], xmm0
comiss xmm0, xmm6
jae 0x18004d9bd
movss dword [rbp - 0x78], xmm6
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm14
jae 0x18004d9ce
movss dword [rbp - 0x74], xmm14
comiss xmm15, dword [rbp - 0x70]
ja 0x18004d9db
movss dword [rbp - 0x70], xmm15
comiss xmm13, dword [rbp - 0x6c]
ja 0x18004d9e8
movss dword [rbp - 0x6c], xmm13
mov byte [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r15
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x20]
mov rcx, r8
call fcn.180040b20
jmp 0x18004e18c
movsxd rax, dword [rdi + 0x10]
mov qword [rbp - 0x78], rax
lea r14, [r15 + rax]
mov rsi, qword [rdi + 0x20]
movaps xmm7, xmm9
movaps xmm6, xmm9
xor r8d, r8d
mov r10d, r8d
mov r15d, r8d
mov r9d, 0xfffffc18
mov ebx, r9d
mov edx, r8d
test cl, cl
je 0x18004da5e
movsxd rax, dword [rdi + 0x54]
lea r10, [rsi + rax*2]
lea edx, [r8 + 1]
lea r9d, [r8 - 1]
test r12b, r12b
je 0x18004da7b
mov ecx, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], ecx
cmovl ecx, dword [rdi + 0x58]
movsxd rax, ecx
lea r15, [rsi + rax*2]
mov ebx, 0xffffffff
inc edx
mov ecx, r8d
mov rax, rsi
movzx r8d, word [rsi]
test r8w, r8w
je 0x18004dacd
nop dword [rax + rax]
cmp r8w, 0xa
jne 0x18004dabf
inc ecx
cmp r9d, 0xffffffff
jne 0x18004daad
cmp rax, r10
jb 0x18004daad
mov r9d, ecx
dec edx
test edx, edx
jle 0x18004dacd
cmp ebx, 0xffffffff
jne 0x18004dabf
cmp rax, r15
jb 0x18004dabf
mov ebx, ecx
dec edx
test edx, edx
jle 0x18004dacd
add rax, 2
movzx r8d, word [rax]
test r8w, r8w
jne 0x18004da90
inc ecx
mov r11d, ecx
cmp r9d, 0xffffffff
cmovne r11d, r9d
cmp ebx, 0xffffffff
cmove ebx, ecx
mov rdx, r10
cmp r10, rsi
jbe 0x18004db02
nop dword [rax + rax]
lea rax, [rdx - 2]
cmp word [rax], 0xa
je 0x18004db02
mov rdx, rax
cmp rax, rsi
ja 0x18004daf0
mov r13, qword [rsp + 0x58]
mov r8, qword [r13 + 0x3c00]
movss xmm4, dword [r13 + 0x3c08]
movaps xmm3, xmm4
divss xmm3, dword [r8 + 0x14]
movaps xmm1, xmm9
movaps xmm11, xmm9
cmp rdx, r10
jae 0x18004db70
nop dword [rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004db47
maxss xmm1, xmm11
movaps xmm11, xmm9
jmp 0x18004db6b
cmp ecx, 0xd
je 0x18004db6b
cmp ecx, dword [r8]
jge 0x18004db5c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004db62
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm3
addss xmm11, xmm0
cmp rdx, r10
jb 0x18004db30
maxss xmm11, xmm1
movd xmm12, r11d
cvtdq2ps xmm12, xmm12
mulss xmm12, xmm4
test ebx, ebx
js 0x18004dc00
mov rdx, r15
cmp r15, rsi
jbe 0x18004dba2
nop
lea rax, [rdx - 2]
cmp word [rax], 0xa
je 0x18004dba2
mov rdx, rax
cmp rax, rsi
ja 0x18004db90
movaps xmm2, xmm9
movaps xmm7, xmm9
cmp rdx, r15
jae 0x18004dbf1
nop
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004dbc6
maxss xmm2, xmm7
movaps xmm7, xmm9
jmp 0x18004dbec
cmp ecx, 0xd
je 0x18004dbec
cmp ecx, dword [r8]
jge 0x18004dbdb
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004dbe1
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm7, xmm0
cmp rdx, r15
jb 0x18004dbb0
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm4
maxss xmm7, xmm2
movzx r8d, byte [rsp + 0x51]
test r8b, r8b
je 0x18004dc67
cmp byte [rdi + 0xe84], 0
je 0x18004dc67
movaps xmm0, xmm8
mulss xmm0, dword [0x18008e0b0]
subss xmm8, xmm5
movss xmm2, dword [rdi + 0x50]
movaps xmm1, xmm11
comiss xmm2, xmm11
jbe 0x18004dc42
subss xmm1, xmm0
movaps xmm0, xmm9
maxss xmm0, xmm1
jmp 0x18004dc50
subss xmm1, xmm8
comiss xmm1, xmm2
jb 0x18004dc60
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
mov byte [rdi + 0xe84], 0
movss xmm10, dword [rdi + 0x50]
test r12b, r12b
je 0x18004deac
mov edx, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea rbx, [rsi + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rsi, [rsi + rax*2]
test r8b, r8b
je 0x18004dca2
movss xmm1, dword [0x18008e0fc]
jmp 0x18004dcaa
movss xmm1, dword [0x18008e0c8]
mov rax, qword [0x18009b0f8]
movups xmm0, xmmword [rax + 0x3b9c]
movups xmmword [rbp + 0x10], xmm0
mulss xmm1, dword [rax + 0x37d0]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b290
mov r15d, eax
movss xmm9, dword [rbp + 0x20]
addss xmm7, xmm9
subss xmm7, xmm10
movss xmm8, dword [rbp + 0x24]
addss xmm8, xmm6
xorps xmm1, xmm1
subss xmm8, xmm1
cmp rbx, rsi
jae 0x18004deb2
movss xmm6, dword [0x18008e110]
movss xmm5, dword [r13 + 0x3c08]
movaps xmm0, xmm5
addss xmm0, xmm13
comiss xmm8, xmm0
ja 0x18004deb2
comiss xmm14, xmm8
jbe 0x18004dd5c
cmp rbx, rsi
jae 0x18004de90
nop dword [rax + rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004de90
cmp rbx, rsi
jae 0x18004deb2
jmp 0x18004dd40
mov rdx, qword [r13 + 0x3c00]
movaps xmm3, xmm5
divss xmm3, dword [rdx + 0x14]
movaps xmm4, xmm1
movaps xmm2, xmm1
cmp rbx, rsi
jae 0x18004ddc4
nop word [rax + rax]
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004ddb7
cmp ecx, 0xd
je 0x18004ddb0
cmp ecx, dword [rdx]
jge 0x18004dda0
mov rax, qword [rdx + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004dda5
movss xmm1, dword [rdx + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rbx, rsi
jae 0x18004ddc1
jmp 0x18004dd80
xorps xmm4, xmm4
maxss xmm4, xmm2
xorps xmm2, xmm2
xorps xmm1, xmm1
maxss xmm2, xmm4
comiss xmm1, xmm2
jb 0x18004ddf8
cmp dword [rdx], 0x20
jle 0x18004dde0
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004dde5
movss xmm0, dword [rdx + 0x10]
mulss xmm0, dword [0x18008e0c4]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm2, xmm7
movaps xmm0, xmm8
addss xmm0, xmm6
addss xmm7, xmm1
movss xmm1, dword [0x18008e1a0]
subss xmm1, xmm5
addss xmm1, xmm8
movss xmm3, dword [rsp + 0x68]
maxss xmm7, xmm3
maxss xmm1, xmm14
movss dword [rbp + 0x10], xmm7
movss dword [rbp + 0x14], xmm1
minss xmm2, xmm15
minss xmm0, xmm13
movss dword [rbp + 0x18], xmm2
movss dword [rbp + 0x1c], xmm0
comiss xmm0, xmm14
jbe 0x18004de8d
comiss xmm13, xmm1
jbe 0x18004de8d
comiss xmm2, xmm3
jbe 0x18004de8d
comiss xmm15, xmm7
jbe 0x18004de8d
xor eax, eax
mov dword [rsp + 0x28], eax
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, r15d
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x10]
mov rax, qword [rbp - 0x80]
mov rcx, qword [rax + 0x298]
call fcn.18003c870
movss xmm9, dword [rbp + 0x20]
xorps xmm1, xmm1
movaps xmm7, xmm9
subss xmm7, xmm10
addss xmm8, dword [r13 + 0x3c08]
cmp rbx, rsi
jae 0x18004deb2
jmp 0x18004dd11
movss xmm9, dword [rbp + 0x20]
cmp qword [rbp - 0x78], 0x200000
jge 0x18004dfff
mov rax, qword [0x18009b0f8]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp + 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b290
mov r9d, eax
mov rbx, qword [rbp - 0x80]
mov rdx, qword [rbx + 0x298]
mov rcx, r14
subss xmm9, xmm10
movss dword [rbp - 0x80], xmm9
movss xmm0, dword [rbp + 0x24]
xorps xmm9, xmm9
subss xmm0, xmm9
movss dword [rbp - 0x7c], xmm0
mov rsi, r13
movss xmm2, dword [r13 + 0x3c08]
mov r8, qword [r13 + 0x3c00]
test eax, 0xff000000
je 0x18004e00a
mov r15, qword [rsp + 0x78]
test r14, r14
jne 0x18004df5d
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x18004df50
add rcx, r15
cmp r15, rcx
je 0x18004e00f
test r8, r8
jne 0x18004df73
mov rax, qword [rdx + 0x38]
mov r8, qword [rax + 8]
ucomiss xmm2, xmm9
jp 0x18004df84
jne 0x18004df84
mov rax, qword [rdx + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp - 0x78], xmm0
movss xmm8, dword [rsp + 0x68]
comiss xmm0, xmm8
jae 0x18004dfa2
movss dword [rbp - 0x78], xmm8
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm14
jae 0x18004dfb3
movss dword [rbp - 0x74], xmm14
comiss xmm15, dword [rbp - 0x70]
ja 0x18004dfc0
movss dword [rbp - 0x70], xmm15
comiss xmm13, dword [rbp - 0x6c]
ja 0x18004dfcd
movss dword [rbp - 0x6c], xmm13
mov byte [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r15
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x80]
mov rcx, r8
call fcn.180040b20
jmp 0x18004e016
xorps xmm9, xmm9
mov rsi, r13
mov rbx, qword [rbp - 0x80]
mov r15, qword [rsp + 0x78]
movss xmm8, dword [rsp + 0x68]
cmp byte [rsp + 0x51], 0
je 0x18004e178
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], 0
je 0x18004e060
comiss xmm9, xmm0
jae 0x18004e060
movss xmm1, dword [0x18008e104]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x18008e0e8]
comiss xmm1, xmm0
jae 0x18004e060
xor cl, cl
jmp 0x18004e062
mov cl, 1
addss xmm11, dword [rbp + 0x20]
subss xmm11, xmm10
cvttss2si eax, xmm11
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0x24]
addss xmm0, xmm12
subss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x10], xmm6
movaps xmm0, xmm7
subss xmm0, dword [rsi + 0x3c08]
addss xmm0, dword [0x18008e0c4]
movss dword [rbp + 0x14], xmm0
movaps xmm2, xmm6
movss xmm10, dword [0x18008e0fc]
addss xmm2, xmm10
movss dword [rbp + 0x18], xmm2
movaps xmm1, xmm7
subss xmm1, dword [0x18008e10c]
movss dword [rbp + 0x1c], xmm1
test cl, cl
je 0x18004e146
comiss xmm1, xmm14
jbe 0x18004e146
comiss xmm13, xmm0
jbe 0x18004e146
comiss xmm2, xmm8
jbe 0x18004e146
comiss xmm15, xmm6
jbe 0x18004e146
mov rax, qword [0x18009b0f8]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp - 0x6c], xmm0
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm1
lea rcx, [rbp - 0x78]
call fcn.18001b290
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x10]
mov rcx, qword [rbx + 0x298]
call fcn.18003c600
mov byte [rsi + 0x5ba0], 1
subss xmm6, xmm10
movss xmm0, dword [rsi + 0x3c08]
subss xmm7, xmm0
movss dword [rsi + 0x5ba4], xmm6
movss dword [rsi + 0x5ba8], xmm7
movss dword [rsi + 0x5bac], xmm0
jmp 0x18004e181
movss xmm10, dword [0x18008e0fc]
mov r13d, dword [rsp + 0x54]
movss xmm11, dword [rbp - 0x5c]
cmp byte [rsi + 0x5c58], 0
je 0x18004e306
mov rdi, qword [0x18009b0f8]
mov rbx, qword [rdi + 0x3ed0]
xor eax, eax
mov qword [rdi + 0x5c80], rax
mov qword [rdi + 0x5c78], rax
test r14, r14
jne 0x18004e1e3
mov r14, r15
cmp r15, 0xffffffffffffffff
jae 0x18004e1e3
movzx ecx, byte [r14]
test cl, cl
je 0x18004e1e3
lea rax, [r14 + 1]
cmp cl, 0x23
jne 0x18004e1da
cmp byte [rax], cl
je 0x18004e1e3
mov r14, rax
cmp rax, 0xffffffffffffffff
jb 0x18004e1c5
movss xmm0, dword [rdi + 0x3810]
addss xmm0, dword [rdi + 0x5c88]
addss xmm0, xmm10
movss xmm1, dword [rbp + 0x24]
movss dword [rdi + 0x5c88], xmm1
comiss xmm1, xmm0
jbe 0x18004e21d
lea rcx, [0x180085fe4]
call fcn.18002f670
mov byte [rdi + 0x5c8c], 1
lea r8, [0x18008bc65]
lea rdx, [0x18008bc64]
lea rcx, [rbp + 0x20]
call fcn.18002f6b0
mov eax, dword [rbx + 0x188]
mov ecx, dword [rdi + 0x5c90]
cmp ecx, eax
jle 0x18004e24c
mov dword [rdi + 0x5c90], eax
mov ecx, eax
mov esi, dword [rbx + 0x188]
sub esi, ecx
mov r13d, 1
nop word [rax + rax]
mov r8, r14
sub r8, r15
mov edx, 0xa
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, r14
test rax, rax
cmovne rbx, rax
cmp r15, rbx
jne 0x18004e287
cmp rbx, r14
je 0x18004e2e5
mov r9d, ebx
sub r9d, r15d
cmp byte [rdi + 0x5c8c], 0
lea edx, [rsi*4]
jne 0x18004e2a0
mov edx, r13d
mov qword [rsp + 0x20], r15
lea r8, [0x1800834eb]
lea rcx, str._s_.s
call fcn.18002f670
mov byte [rdi + 0x5c8c], 0
cmp byte [rbx], 0xa
jne 0x18004e2d7
lea rcx, [0x180085fe4]
call fcn.18002f670
mov byte [rdi + 0x5c8c], r13b
cmp rbx, r14
je 0x18004e2e5
lea r15, [rbx + 1]
jmp 0x18004e260
lea r8, [0x18008bc61]
lea rdx, [0x18008bc60]
lea rcx, [rbp + 0x20]
call fcn.18002f6b0
mov rsi, qword [rsp + 0x58]
mov r13d, dword [rsp + 0x54]
comiss xmm11, xmm9
jbe 0x18004e33a
movss xmm0, dword [rbp - 0x40]
addss xmm0, dword [rsi + 0x3824]
addss xmm14, dword [rsi + 0x3810]
mov r9b, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x50]
unpcklps xmm0, xmm14
movq rcx, xmm0
call fcn.18001b9b0
movzx r8d, byte [rsp + 0x52]
test r8b, r8b
je 0x18004e36b
mov rcx, qword [0x18009b0f8]
mov edx, dword [rcx + 0x3f30]
cmp edx, r13d
je 0x18004e35b
test edx, edx
jne 0x18004e364
mov word [rcx + 0x3f40], 0x101
or dword [rcx + 0x4774], 4
movzx eax, r8b
jmp 0x18004e373
xor al, al
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.180062040
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret