Function at 0x1800a4ad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
lea rbp, [rax - 0x1f8]
sub rsp, 0x2e8
mov qword [rax + 0x18], rsi
mov rsi, rdx
mov qword [rax - 0x18], rdi
mov qword [rax - 0x20], r12
mov r12d, r8d
mov qword [rax - 0x28], r13
xor r13d, r13d
mov qword [rax - 0x30], r14
mov qword [rax - 0x38], r15
cmp dword [rdx + 0x484], r13d
jge 0x1800a4b53
test byte [rdx], 2
lea rcx, [rdx + 0x58]
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0xffffffff
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
mov dword [rbp - 0x40], 0x1b00f5
je 0x1800a4b43
mov dword [rbp - 0x40], 0x20002
call fcn.18008c730
mov eax, dword [rsi + 0x58]
dec eax
mov dword [rsi + 0x484], eax
cmp dword [rsi + 0x488], r13d
jge 0x1800a4b93
test byte [rsi], 4
jne 0x1800a4b93
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x3c], 0xffffffff
lea rcx, [rsi + 0x58]
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
mov dword [rbp - 0x40], 0x400041
call fcn.18008c730
mov eax, dword [rsi + 0x58]
dec eax
mov dword [rsi + 0x488], eax
mov rcx, qword [rsi + 0x20]
mov qword [rsi + 8], r13
mov qword [rsi + 0x30], r13
mov qword [rsi + 0x38], r13
mov qword [rsi + 0x40], r13
test rcx, rcx
je 0x1800a4bc4
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a4bbe
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x1800a4be5
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a4bdf
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14d, dword [rsi + 0x68]
mov r15, r13
mov qword [rsi + 0x20], r13
mov rdi, r13
mov qword [rsi + 0x28], r13
mov edx, 8
mov byte [rsi + 0x1a], r13b
mov byte [rbp + 0x218], r13b
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x70], r13
mov dword [rsp + 0x6c], r14d
test r14d, r14d
jle 0x1800a4c52
cmp r14d, edx
mov eax, r14d
cmovl eax, edx
test eax, eax
jle 0x1800a4c52
mov rcx, qword [0x180377bf8]
test rcx, rcx
je 0x1800a4c39
inc dword [rcx + 0xf4]
cdqe
imul rcx, rax, 0x70
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rsp + 0x78], rax
mov edx, 8
mov ebx, dword [rsi + 0x48]
mov dword [rsp + 0x64], ebx
test ebx, ebx
jle 0x1800a4c8f
cmp ebx, 8
mov ecx, ebx
cmovl ecx, edx
test ecx, ecx
jle 0x1800a4c8f
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a4c7b
inc dword [rax + 0xf4]
movsxd rcx, ecx
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
mov qword [rbp - 0x70], rax
imul ecx, r14d, 0x70
xor edx, edx
movsxd r8, ecx
mov rcx, r15
call sub.VCRUNTIME140.dll_memset
mov ecx, ebx
xor edx, edx
shl ecx, 5
movsxd r8, ecx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
mov r15d, r13d
cmp dword [rsi + 0x68], r13d
jle 0x1800a4dd6
mov rbx, qword [rsp + 0x78]
mov r14, r13
add rbx, 0x44
nop dword [rax + rax]
mov rdi, qword [rsi + 0x70]
mov r8d, r13d
add rdi, r14
mov dword [rbx - 4], 0xffffffff
cmp dword [rsi + 0x48], r13d
jle 0x1800a4e3c
mov edx, 0xffffffff
mov r9, r13
mov eax, edx
cmp edx, 0xffffffff
jne 0x1800a4d21
mov rax, qword [rsi + 0x50]
mov rcx, qword [r9 + rax]
cmp qword [rdi + 0x80], rcx
jne 0x1800a4d12
mov dword [rbx - 4], r8d
mov edx, r8d
inc r8d
add r9, 8
mov eax, edx
cmp r8d, dword [rsi + 0x48]
jl 0x1800a4cf3
cmp eax, 0xffffffff
je 0x1800a4e3c
mov rdx, qword [rbp + 0x200]
lea rcx, [rbx - 0x44]
mov r9d, r12d
mov r8, rdi
call fcn.1800a3aa0
test al, al
je 0x1800a4e3c
mov eax, dword [rdi + 0x4c]
lea rdx, [0x18027368c]
movsxd r8, dword [rbx - 4]
shr eax, 8
and al, 1
shl r8, 5
or byte [rbp + 0x218], al
mov rax, qword [rdi + 0x38]
add r8, qword [rbp - 0x70]
test rax, rax
cmovne rdx, rax
mov qword [rbx - 0xc], rdx
cmp word [rdx], r13w
je 0x1800a4d9c
nop
movzx eax, word [rdx + 2]
test ax, ax
je 0x1800a4d9c
cmp dword [rbx], eax
mov ecx, eax
cmovge ecx, dword [rbx]
add rdx, 4
mov dword [rbx], ecx
cmp word [rdx], r13w
jne 0x1800a4d80
inc dword [r8]
mov ecx, dword [rbx]
cmp dword [r8 + 4], ecx
mov rsi, qword [rbp + 0x208]
cmovge ecx, dword [r8 + 4]
inc r15d
add rbx, 0x70
mov dword [r8 + 4], ecx
add r14, 0x88
cmp r15d, dword [rsi + 0x68]
jl 0x1800a4cd0
mov r14d, dword [rsp + 0x6c]
mov rdi, qword [rbp - 0x70]
movaps xmmword [rsp + 0x2b0], xmm6
mov r12d, r13d
movaps xmmword [rsp + 0x250], xmm12
mov dword [rsp + 0x70], r13d
test r14d, r14d
jle 0x1800a5137
mov r14, qword [rsp + 0x78]
mov esi, dword [rsp + 0x6c]
add r14, 0x58
mov qword [rbp - 0x78], rsi
nop dword [rax]
movsxd r15, dword [r14 - 0x18]
mov ebx, dword [r14 - 0x14]
mov ecx, dword [r14 - 4]
add ebx, 0x20
shl r15, 5
add r15, rdi
sar ebx, 5
cmp ebx, ecx
jle 0x1800a4e5d
test ecx, ecx
je 0x1800a4e43
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800a4e48
xor bl, bl
jmp 0x1800a5f8b
mov eax, 8
cmp eax, ebx
lea rdi, [r14 - 8]
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.180084070
jmp 0x1800a4e61
lea rdi, [r14 - 8]
mov dword [rdi], ebx
xor edx, edx
mov rcx, qword [r14]
movsxd r8, ebx
shl r8, 2
call sub.VCRUNTIME140.dll_memset
cmp dword [r15 + 0x10], 0
jne 0x1800a4ec7
mov ebx, dword [r15 + 4]
mov ecx, dword [r15 + 0x14]
add ebx, 0x20
sar ebx, 5
cmp ebx, ecx
jle 0x1800a4eb1
test ecx, ecx
je 0x1800a4e9c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800a4ea1
mov eax, 8
cmp eax, ebx
lea rcx, [r15 + 0x10]
mov edx, ebx
cmovg edx, eax
call fcn.180084070
mov dword [r15 + 0x10], ebx
xor edx, edx
mov rcx, qword [r15 + 0x18]
movsxd r8, ebx
shl r8, 2
call sub.VCRUNTIME140.dll_memset
mov r13, qword [r14 - 0x20]
cmp word [r13], 0
je 0x1800a4f6f
nop word [rax + rax]
movzx eax, word [r13 + 2]
test ax, ax
je 0x1800a4f6b
movzx edi, word [r13]
cmp edi, eax
ja 0x1800a4f5b
nop word [rax + rax]
mov rax, qword [r15 + 0x18]
mov esi, edi
movsxd rbx, edi
and esi, 0x1f
sar rbx, 5
mov eax, dword [rax + rbx*4]
bt eax, esi
jb 0x1800a4f4b
mov rcx, qword [r14 - 0x40]
mov edx, edi
call fcn.1800ac130
test eax, eax
je 0x1800a4f4b
inc dword [r14 - 0x10]
inc dword [r15 + 8]
mov rcx, qword [r14]
mov eax, dword [rcx + rbx*4]
bts eax, esi
mov dword [rcx + rbx*4], eax
mov rcx, qword [r15 + 0x18]
mov eax, dword [rcx + rbx*4]
bts eax, esi
mov dword [rcx + rbx*4], eax
inc r12d
movzx eax, word [r13 + 2]
inc edi
cmp edi, eax
jle 0x1800a4f00
mov dword [rsp + 0x70], r12d
add r13, 4
cmp word [r13], 0
jne 0x1800a4ee0
mov rsi, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x70]
add r14, 0x70
sub rsi, 1
mov qword [rbp - 0x78], rsi
jne 0x1800a4e10
mov rsi, qword [rsp + 0x78]
mov r15d, dword [rsp + 0x6c]
add rsi, 0x68
mov qword [rbp - 0x78], r15
movsxd rbx, dword [rsi - 0x20]
cmp ebx, dword [rsi - 4]
jle 0x1800a5005
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a4fb2
inc dword [rax + 0xf4]
lea rcx, [rbx + rbx*4]
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, qword [rsi]
mov rdi, rax
test rdx, rdx
je 0x1800a4fff
movsxd rcx, dword [rsi - 8]
lea r8, [rcx + rcx*4]
mov rcx, rax
shl r8, 3
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rsi]
test rcx, rcx
je 0x1800a4ff9
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a4ff9
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi], rdi
mov dword [rsi - 4], ebx
mov r13, qword [rsi - 0x10]
movsxd rax, dword [rsi - 0x18]
mov r14, r13
lea rax, [rax*4]
add rax, r13
mov qword [rbp - 0x48], rax
cmp r13, rax
jae 0x1800a50ef
xor r12d, r12d
nop dword [rax + rax]
mov r15d, dword [r14]
test r15d, r15d
je 0x1800a50de
mov edi, r12d
nop
bt r15d, edi
jae 0x1800a50cf
mov r8d, dword [rsi - 4]
lea rcx, [r14*8]
xor eax, eax
xorps xmm6, xmm6
mov qword [rbp - 0x20], rax
lea rax, [r13*8]
sub ecx, eax
and ecx, 0xffffffe0
add ecx, edi
movzx eax, cx
mov ecx, dword [rsi - 8]
movups xmmword [rbp - 0x30], xmm6
mov dword [rbp - 0x28], eax
cmp ecx, r8d
jne 0x1800a50a9
inc ecx
test r8d, r8d
je 0x1800a5094
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x1800a5099
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [rsi - 8]
call fcn.1800a6150
movsxd rax, dword [rsi - 8]
movups xmm0, xmmword [rbp - 0x30]
movsd xmm1, qword [rbp - 0x20]
lea rcx, [rax + rax*4]
mov rax, qword [rsi]
movups xmmword [rax + rcx*8], xmm6
movups xmmword [rax + rcx*8 + 0x10], xmm0
movsd qword [rax + rcx*8 + 0x20], xmm1
inc dword [rsi - 8]
inc edi
cmp edi, 0x20
jb 0x1800a5040
mov rax, qword [rbp - 0x48]
add r14, 4
cmp r14, rax
jb 0x1800a5030
mov r15, qword [rbp - 0x78]
mov rcx, qword [rsi - 0x10]
xor r13d, r13d
test rcx, rcx
je 0x1800a511b
mov rax, qword [0x180377bf8]
mov qword [rsi - 0x18], r13
test rax, rax
je 0x1800a5111
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi - 0x10], r13
add rsi, 0x70
sub r15, 1
mov qword [rbp - 0x78], r15
jne 0x1800a4f97
mov r12d, dword [rsp + 0x70]
mov r14d, dword [rsp + 0x6c]
mov eax, dword [rsp + 0x64]
test eax, eax
jle 0x1800a5185
mov rbx, qword [rbp - 0x70]
mov edi, eax
add rbx, 0x18
nop dword [rax]
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800a517b
mov rax, qword [0x180377bf8]
mov qword [rbx - 8], 0
test rax, rax
je 0x1800a5172
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx], r13
add rbx, 0x20
sub rdi, 1
jne 0x1800a5150
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1800a51aa
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a51a0
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x78], r13
mov rsi, r13
mov edi, 8
test r12d, r12d
jle 0x1800a51f1
cmp r12d, edi
mov eax, r12d
cmovl eax, edi
test eax, eax
jle 0x1800a51f1
mov rcx, qword [0x180377bf8]
test rcx, rcx
je 0x1800a51da
inc dword [rcx + 0xf4]
cdqe
lea rcx, [rax + rax*2]
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
mov qword [rbp - 0x78], rax
lea ecx, [r12 + r12*2]
xor edx, edx
shl ecx, 3
movsxd r8, ecx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x180377bf8]
mov dword [rsp + 0x70], r13d
test rcx, rcx
je 0x1800a521c
inc dword [rcx + 0xf4]
mov ecx, 0x40000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, qword [0x180377bf8]
mov rbx, rax
test rdx, rdx
je 0x1800a523c
inc dword [rdx + 0xf4]
mov ecx, 0x40
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
movss xmm12, dword [0x18027445c]
mov ecx, r13d
mov qword [rbp - 0x58], rax
mov r15d, edi
mov dword [rsp + 0x68], 1
mov r10d, r13d
mov qword [rax], rbx
mov dword [rbp - 0x80], ecx
test r14d, r14d
jle 0x1800a5613
mov rbx, qword [rsp + 0x78]
mov r9, r13
mov rdi, qword [rbp + 0x208]
add rbx, 0x60
mov r11d, r14d
mov qword [rbp - 0x18], r11
mov qword [rbp - 0x50], r13
nop dword [rax]
nop word [rax + rax]
mov edx, dword [rbx - 0x18]
mov r8, qword [rdi + 0x70]
test edx, edx
je 0x1800a55ec
movsxd rax, r10d
add r10d, edx
mov dword [rbp - 0x60], r10d
lea rcx, [rax + rax*2]
lea rax, [rsi + rcx*8]
mov qword [rbx - 0x30], rax
movss xmm1, dword [r9 + r8 + 0x50]
ucomiss xmm1, xmm12
je 0x1800a531b
mov byte [rsp + 0x60], 1
lea r9, [rbp + 0x50]
mov r8d, r13d
nop
mov eax, r8d
lea r9, [r9 + 1]
xorps xmm0, xmm0
mov edx, 0xff
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
cvttss2si rcx, xmm0
cmp ecx, edx
movzx eax, cl
cmovbe edx, eax
inc r8d
mov byte [r9 - 1], dl
cmp r8d, 0x100
jb 0x1800a52e0
mov r9, qword [rbp - 0x50]
jmp 0x1800a5320
mov byte [rsp + 0x60], 0
cmp dword [rbx], 0
mov r12d, r13d
mov eax, dword [rdi + 0x14]
mov dword [rbp - 0x68], eax
mov dword [rsp + 0x64], r13d
jle 0x1800a55e9
xor esi, esi
nop dword [rax]
mov r14, qword [rbx + 8]
mov rcx, qword [rbx - 0x48]
mov edx, dword [rsi + r14 + 0x18]
call fcn.1800ac130
test eax, eax
je 0x1800a55b1
mov r8d, dword [rbx - 0x3c]
mov edx, eax
mov rcx, qword [rbx - 0x48]
call fcn.1800ad130
test eax, eax
jne 0x1800a55b1
test byte [rbx - 0x40], 0x20
mov rax, qword [rbx - 0x48]
mov rdi, qword [rax + 0x78]
je 0x1800a5387
mov rcx, rdi
call fcn.1800b5870
test byte [rbx - 0x40], 0x40
je 0x1800a5395
mov rcx, rdi
call fcn.1800b5970
lea rax, [rdi + 0x30]
test rax, rax
je 0x1800a55b1
mov rax, qword [rbx - 0x48]
mov edx, dword [rbx - 0x38]
mov rdi, qword [rax + 0x78]
mov rcx, rdi
call fcn.1800afb70
test eax, eax
jne 0x1800a55b1
mov rax, qword [rbx - 0x48]
mov r9, qword [rax + 0x78]
add r9, 0x68
mov qword [rbp - 0x10], r9
mov r8d, dword [r9 + 4]
mov dword [rsi + r14], r8d
mov r12d, dword [r9]
mov dword [rsi + r14 + 4], r12d
mov rax, qword [rbx - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x90]
mov dword [rsi + r14 + 8], eax
mov rax, qword [rbx - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x94]
neg eax
mov dword [rsi + r14 + 0xc], eax
mov eax, dword [rdi + 0x58]
mov edi, dword [rsp + 0x70]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + r14 + 0x10], xmm0
cmp byte [r9 + 0x1a], 7
sete al
imul r12d, r8d
mov byte [rsi + r14 + 0x14], al
shl r12d, 2
lea eax, [r12 + rdi]
cmp eax, 0x40000
jle 0x1800a552b
mov rax, qword [0x180377bf8]
xor edi, edi
mov dword [rsp + 0x70], edi
test rax, rax
je 0x1800a5465
inc dword [rax + 0xf4]
mov ecx, 0x40000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8d, dword [rsp + 0x68]
mov qword [rbp - 0x48], rax
cmp r8d, r15d
jne 0x1800a5512
test r15d, r15d
je 0x1800a5494
mov eax, r15d
cdq
sub eax, edx
sar eax, 1
add eax, r15d
jmp 0x1800a5499
mov eax, 8
lea edi, [r8 + 1]
cmp eax, edi
cmovg edi, eax
cmp edi, r15d
jle 0x1800a550e
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a54b9
inc dword [rax + 0xf4]
movsxd rcx, edi
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rbp - 0x58]
mov r15, rax
test rcx, rcx
je 0x1800a5502
movsxd r8, dword [rsp + 0x68]
mov rdx, rcx
shl r8, 3
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x180377bf8]
test rdx, rdx
je 0x1800a54f8
dec dword [rdx + 0xf4]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8d, dword [rsp + 0x68]
mov qword [rbp - 0x58], r15
mov r15d, edi
mov edi, dword [rsp + 0x70]
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
movsxd rax, r8d
inc r8d
mov dword [rsp + 0x68], r8d
mov qword [rdx + rax*8], rcx
jmp 0x1800a5534
mov r8d, dword [rsp + 0x68]
mov rdx, qword [rbp - 0x58]
mov r9d, dword [rsi + r14]
movsxd rax, r8d
movsxd rcx, edi
add edi, r12d
mov dword [rsp + 0x70], edi
mov r8, qword [rdx + rax*8 - 8]
lea rax, [rbp + 0x50]
mov rdx, qword [rbp - 0x10]
add r8, rcx
cmp byte [rsp + 0x60], 0
mov ecx, 0
mov qword [rsi + r14 + 0x20], r8
cmove rax, rcx
mov qword [rsp + 0x20], rax
call fcn.1800a3c90
mov ecx, dword [rsi + r14]
add ecx, dword [rbp - 0x68]
mov rax, qword [rbx - 0x30]
mov r12d, dword [rsp + 0x64]
mov dword [rax + r13 + 4], ecx
mov ecx, dword [rsi + r14 + 4]
add ecx, dword [rbp - 0x68]
mov rax, qword [rbx - 0x30]
mov dword [rax + r13 + 8], ecx
mov rcx, qword [rbx - 0x30]
mov eax, dword [rcx + r13 + 8]
imul eax, dword [rcx + r13 + 4]
mov ecx, dword [rbp - 0x80]
add ecx, eax
mov dword [rbp - 0x80], ecx
jmp 0x1800a55b4
mov ecx, dword [rbp - 0x80]
inc r12d
add rsi, 0x28
add r13, 0x18
mov dword [rsp + 0x64], r12d
cmp r12d, dword [rbx]
jl 0x1800a5340
mov r9, qword [rbp - 0x50]
xor r13d, r13d
mov r10d, dword [rbp - 0x60]
mov r11, qword [rbp - 0x18]
mov rdi, qword [rbp + 0x208]
mov rsi, qword [rbp - 0x78]
jmp 0x1800a55ec
mov ecx, dword [rbp - 0x80]
add r9, 0x88
add rbx, 0x70
sub r11, 1
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x18], r11
jne 0x1800a52a0
mov r14d, dword [rsp + 0x6c]
mov edi, 8
mov r12, qword [rbp + 0x208]
mov ebx, dword [r12 + 0x10]
mov dword [r12 + 0x34], r13d
test ebx, ebx
jg 0x1800a5677
movd xmm0, ecx
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
sqrtss xmm1, xmm0
cvttss2si eax, xmm1
inc eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x1802749a0]
jb 0x1800a5653
mov ebx, 0x1000
jmp 0x1800a5677
comiss xmm0, dword [0x18027499c]
jb 0x1800a5663
mov ebx, 0x800
jmp 0x1800a5677
comiss xmm0, dword [0x180274990]
mov ebx, 0x200
mov eax, 0x400
cmovae ebx, eax
mov dword [r12 + 0x30], ebx
mov r15, r13
sub ebx, dword [r12 + 0x14]
mov qword [rbp - 0x48], r13
test ebx, ebx
jle 0x1800a56be
cmp ebx, 8
mov eax, ebx
cmovl eax, edi
test eax, eax
jle 0x1800a56be
mov rcx, qword [0x180377bf8]
test rcx, rcx
je 0x1800a56aa
inc dword [rcx + 0xf4]
movsxd rcx, eax
shl rcx, 4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp - 0x48], rax
mov edx, dword [r12 + 0x30]
lea rcx, [rbp]
mov r9, r15
mov dword [rsp + 0x20], ebx
call fcn.1800a46a0
mov ebx, dword [r12 + 0x58]
mov rdi, r13
test ebx, ebx
jle 0x1800a5716
cmp ebx, 8
mov ecx, ebx
mov eax, 8
cmovl ecx, eax
test ecx, ecx
jle 0x1800a5716
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5702
inc dword [rax + 0xf4]
movsxd rax, ecx
lea rcx, [rax + rax*2]
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
lea ecx, [rbx + rbx*2]
xor edx, edx
shl ecx, 3
movsxd r8, ecx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
cmp dword [r12 + 0x58], 0
mov r9d, r13d
jle 0x1800a576e
mov rdx, r13
lea r8, [rdi + 8]
nop dword [rax + rax]
mov rax, qword [r12 + 0x60]
lea rdx, [rdx + 0x20]
inc r9d
lea r8, [r8 + 0x18]
movzx ecx, word [rdx + rax - 0x20]
mov dword [r8 - 0x1c], ecx
mov rax, qword [r12 + 0x60]
movzx ecx, word [rdx + rax - 0x1e]
mov dword [r8 - 0x18], ecx
cmp r9d, dword [r12 + 0x58]
jl 0x1800a5740
mov r8d, ebx
lea rcx, [rbp]
mov rdx, rdi
call fcn.180084560
test ebx, ebx
jle 0x1800a57d6
mov r8, r13
lea rdx, [rdi + 0x10]
mov r9, rbx
nop dword [rax + rax]
cmp dword [rdx + 4], 0
je 0x1800a57c8
mov rcx, qword [r12 + 0x60]
movzx eax, word [rdx - 4]
mov word [r8 + rcx + 4], ax
mov rcx, qword [r12 + 0x60]
movzx eax, word [rdx]
mov word [r8 + rcx + 6], ax
mov ecx, dword [rdx - 8]
add ecx, dword [rdx]
cmp dword [r12 + 0x34], ecx
cmovge ecx, dword [r12 + 0x34]
mov dword [r12 + 0x34], ecx
add r8, 0x20
add rdx, 0x18
sub r9, 1
jne 0x1800a5790
test rdi, rdi
je 0x1800a57f6
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a57ed
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r14d, r14d
jle 0x1800a5869
mov rbx, qword [rsp + 0x78]
add rbx, 0x48
mov edi, r14d
mov r8d, dword [rbx]
test r8d, r8d
je 0x1800a585f
mov rdx, qword [rbx - 0x18]
lea rcx, [rbp]
call fcn.1800a48d0
cmp dword [rbx], 0
mov r8d, r13d
jle 0x1800a585f
mov rdx, r13
nop word [rax + rax]
mov rax, qword [rbx - 0x18]
cmp dword [rax + rdx + 0x14], 0
je 0x1800a5853
mov ecx, dword [rax + rdx + 0x10]
add ecx, dword [rax + rdx + 8]
cmp dword [r12 + 0x34], ecx
cmovge ecx, dword [r12 + 0x34]
mov dword [r12 + 0x34], ecx
inc r8d
add rdx, 0x18
cmp r8d, dword [rbx]
jl 0x1800a5830
add rbx, 0x70
sub rdi, 1
jne 0x1800a5807
test byte [r12], 1
mov eax, dword [r12 + 0x34]
jne 0x1800a589a
lea ecx, [rax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
lea ecx, [rax + 1]
movaps xmm2, xmm12
movsxd rax, dword [r12 + 0x30]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movsxd rbx, ecx
mov dword [r12 + 0x34], ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
imul rbx, rax
divss xmm2, xmm0
cmp byte [rbp + 0x218], 0
mov rax, qword [0x180377bf8]
movaps xmm0, xmm12
divss xmm0, xmm1
movss dword [r12 + 0x38], xmm2
movss dword [r12 + 0x3c], xmm0
je 0x1800a590d
lea rbx, [rbx*4]
test rax, rax
je 0x1800a58fd
inc dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r12 + 0x28], rax
jmp 0x1800a5926
test rax, rax
je 0x1800a5918
inc dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r12 + 0x20], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor al, al
movaps xmmword [rsp + 0x2a0], xmm7
movaps xmmword [rsp + 0x290], xmm8
mov byte [rbp + 0x208], al
test r14d, r14d
jle 0x1800a5ccd
mov rcx, qword [rsp + 0x78]
mov rsi, r13
movaps xmmword [rsp + 0x280], xmm9
add rcx, 8
movaps xmmword [rsp + 0x270], xmm10
movaps xmmword [rsp + 0x260], xmm11
movss xmm11, dword [0x180274318]
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x80], r14
cmp dword [rcx + 0x40], 0
je 0x1800a5c86
mov r9, qword [r12 + 0x70]
movss xmm6, dword [rcx - 4]
add r9, rsi
movss xmm7, dword [rcx]
mov qword [rbp - 0x60], r9
cmp byte [r9 + 0x48], 0
mov r15, qword [r9 + 0x80]
mov qword [rsp + 0x70], r15
jne 0x1800a59f4
mov rcx, r15
call fcn.18008a740
mov r9, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x50]
mov eax, dword [r9 + 0x14]
movss dword [r15 + 0x60], xmm6
movss dword [r15 + 0x64], xmm7
mov dword [r15 + 0x14], eax
mov qword [r15 + 0x48], r9
mov word [r15 + 0x50], r13w
mov qword [r15 + 0x40], r12
inc word [r15 + 0x50]
cmp dword [rcx + 0x40], 0
movss xmm0, dword [r15 + 0x60]
mov r8d, dword [r12 + 0x14]
addss xmm0, xmm11
movss xmm10, dword [r9 + 0x2c]
mov dword [rbp + 0x218], r8d
mov dword [rsp + 0x64], r13d
cvttss2si eax, xmm0
movd xmm9, eax
cvtdq2ps xmm9, xmm9
addss xmm9, dword [r9 + 0x30]
jle 0x1800a5c82
mov rdx, r13
mov rbx, r13
mov qword [rbp - 0x68], rdx
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rcx + 0x60]
mov rcx, qword [rcx + 0x28]
cmp dword [rdx + rcx + 4], 0
jne 0x1800a5a6a
cmp dword [rdx + rcx + 8], 0
je 0x1800a5c57
mov r14d, dword [rdx + rcx + 0x10]
movaps xmm2, xmm12
mov esi, dword [rdx + rcx + 0xc]
add r14d, r8d
mov edx, dword [rbx + rdi + 4]
add esi, r8d
mov ecx, dword [rbx + rdi]
movaps xmm1, xmm12
movd xmm0, dword [r12 + 0x34]
movd xmm8, dword [rbx + rdi + 0xc]
movd xmm3, dword [rbx + rdi + 8]
lea eax, [rdx + r14]
movzx r8d, word [rbx + rdi + 0x18]
cvtdq2ps xmm0, xmm0
movd xmm7, eax
lea eax, [rcx + rsi]
divss xmm2, xmm0
movd xmm0, dword [r12 + 0x30]
cvtdq2ps xmm0, xmm0
movd xmm5, r14d
divss xmm1, xmm0
movss xmm0, dword [rbx + rdi + 0x10]
movss dword [rsp + 0x58], xmm0
movd xmm6, eax
movd xmm4, esi
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm5, xmm5
mulss xmm7, xmm2
mulss xmm5, xmm2
movd xmm2, edx
mov rdx, r9
movss dword [rsp + 0x50], xmm7
cvtdq2ps xmm6, xmm6
cvtdq2ps xmm4, xmm4
mulss xmm6, xmm1
mulss xmm4, xmm1
movd xmm1, ecx
mov rcx, r15
movss dword [rsp + 0x48], xmm6
movss dword [rsp + 0x40], xmm5
movss dword [rsp + 0x38], xmm4
cvtdq2ps xmm8, xmm8
cvtdq2ps xmm3, xmm3
addss xmm8, xmm9
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
addss xmm3, xmm10
addss xmm2, xmm8
addss xmm1, xmm3
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm8
call fcn.18008ade0
cmp byte [rbx + rdi + 0x14], 0
movsxd rax, dword [r15 + 0x28]
lea rcx, [rax + rax*4]
mov rax, qword [r15 + 0x30]
je 0x1800a5b74
or dword [rax + rcx*8 - 0x28], 1
mov byte [rbp + 0x208], 1
movsxd r15, dword [r12 + 0x30]
mov rcx, qword [r12 + 0x20]
movsxd rdx, dword [rbx + rdi]
mov r10, qword [rbx + rdi + 0x20]
movsxd rax, r14d
imul rax, r15
movsxd r8, esi
mov esi, r13d
test rcx, rcx
je 0x1800a5bea
lea r11, [rcx + r8]
add r11, rax
cmp dword [rbx + rdi + 4], 0
jle 0x1800a5c43
lea r14, [rdx*4]
mov r9d, r13d
test edx, edx
jle 0x1800a5bda
mov rcx, r11
lea r8, [r10 + 3]
movzx eax, byte [r8]
lea r8, [r8 + 4]
mov byte [rcx], al
lea rcx, [rcx + 1]
mov edx, dword [rbx + rdi]
inc r9d
cmp r9d, edx
jl 0x1800a5bc1
inc esi
add r11, r15
add r10, r14
cmp esi, dword [rbx + rdi + 4]
jl 0x1800a5bb3
jmp 0x1800a5c43
cmp dword [rbx + rdi + 4], 0
lea rcx, [r8 + rax]
mov rax, qword [r12 + 0x28]
lea r11, [rax + rcx*4]
jle 0x1800a5c43
lea r15, [r15*4]
lea r14, [rdx*4]
nop
mov r8d, r13d
test edx, edx
jle 0x1800a5c35
mov r9, r10
mov rcx, r11
sub r9, r11
mov eax, dword [rcx + r9]
inc r8d
mov dword [rcx], eax
lea rcx, [rcx + 4]
mov edx, dword [rbx + rdi]
cmp r8d, edx
jl 0x1800a5c20
inc esi
add r11, r15
add r10, r14
cmp esi, dword [rbx + rdi + 4]
jl 0x1800a5c10
mov r8d, dword [rbp + 0x218]
mov r9, qword [rbp - 0x60]
mov r15, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x68]
mov edi, dword [rsp + 0x64]
add rdx, 0x18
mov rcx, qword [rbp - 0x50]
inc edi
add rbx, 0x28
mov dword [rsp + 0x64], edi
mov qword [rbp - 0x68], rdx
cmp edi, dword [rcx + 0x40]
jl 0x1800a5a50
mov rsi, qword [rbp - 0x18]
mov r14, qword [rbp - 0x80]
mov qword [rcx + 0x28], r13
add rcx, 0x70
add rsi, 0x88
sub r14, 1
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x18], rsi
jne 0x1800a5991
movaps xmm11, xmmword [rsp + 0x260]
movaps xmm10, xmmword [rsp + 0x270]
movaps xmm9, xmmword [rsp + 0x280]
movzx eax, byte [rbp + 0x208]
mov r15, qword [rbp - 0x48]
movaps xmm12, xmmword [rsp + 0x250]
mov r14, qword [rbp - 0x58]
mov byte [r12 + 0x1a], al
mov eax, dword [rsp + 0x68]
test eax, eax
jle 0x1800a5d1a
mov rbx, r14
mov edi, eax
nop dword [rax]
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800a5d0a
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5d0a
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rbx, 8
sub rdi, 1
jne 0x1800a5cf0
mov eax, dword [rsp + 0x6c]
test eax, eax
jle 0x1800a5d8c
mov rbx, qword [rsp + 0x78]
mov edi, eax
add rbx, 0x18
nop dword [rax]
mov rcx, qword [rbx + 0x50]
test rcx, rcx
je 0x1800a5d51
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5d4b
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x1800a5d72
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5d6c
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800a5d82
call fcn.1800abb30
mov qword [rbx], r13
add rbx, 0x70
sub rdi, 1
jne 0x1800a5d30
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x1800a5db6
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5da8
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x78], r13
mov rcx, r12
call fcn.18008a3f0
mov rcx, r12
call fcn.18008a530
cmp dword [r12 + 0x58], 0
mov edi, r13d
jle 0x1800a5ed5
mov rbx, r13
nop dword [rax + rax]
mov r10, qword [r12 + 0x60]
mov rsi, qword [rbx + r10 + 0x18]
test rsi, rsi
je 0x1800a5ec4
mov r11d, dword [rbx + r10 + 8]
test r11d, r11d
je 0x1800a5ec4
movzx ecx, word [rbx + r10 + 6]
movzx edx, word [rbx + r10 + 2]
movzx r8d, word [rbx + r10 + 4]
movzx r9d, word [rbx + r10]
movss xmm8, dword [rbx + r10 + 0x14]
movss xmm3, dword [rbx + r10 + 0x10]
lea eax, [rdx + rcx]
movss xmm0, dword [rbx + r10 + 0xc]
movss dword [rsp + 0x58], xmm0
movd xmm7, eax
lea eax, [r9 + r8]
movd xmm5, ecx
mov rcx, rsi
movd xmm4, r8d
movzx r8d, r11w
movd xmm2, edx
xor edx, edx
movd xmm6, eax
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm6, xmm6
mulss xmm7, dword [r12 + 0x3c]
mulss xmm6, dword [r12 + 0x38]
movss dword [rsp + 0x50], xmm7
cvtdq2ps xmm5, xmm5
movss dword [rsp + 0x48], xmm6
mulss xmm5, dword [r12 + 0x3c]
movd xmm1, r9d
cvtdq2ps xmm4, xmm4
movss dword [rsp + 0x40], xmm5
mulss xmm4, dword [r12 + 0x38]
cvtdq2ps xmm2, xmm2
movss dword [rsp + 0x38], xmm4
cvtdq2ps xmm1, xmm1
addss xmm2, xmm8
addss xmm1, xmm3
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm8
call fcn.18008ade0
inc edi
add rbx, 0x20
cmp edi, dword [r12 + 0x58]
jl 0x1800a5de0
cmp dword [r12 + 0x48], 0
movaps xmm8, xmmword [rsp + 0x290]
movaps xmm7, xmmword [rsp + 0x2a0]
movaps xmm6, xmmword [rsp + 0x2b0]
jle 0x1800a5f22
mov rbx, r13
nop dword [rax]
mov rax, qword [r12 + 0x50]
mov rcx, qword [rbx + rax]
cmp byte [rcx + 0x58], 0
je 0x1800a5f14
call fcn.18008a7f0
inc r13d
add rbx, 8
cmp r13d, dword [r12 + 0x48]
jl 0x1800a5f00
mov byte [r12 + 0x19], 1
mov bl, 1
test r15, r15
je 0x1800a5f4a
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5f41
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r14, r14
je 0x1800a5f6a
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5f61
dec dword [rax + 0xf4]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x1800a5f8b
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5f85
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x70]
mov r15, qword [rsp + 0x2c0]
mov r14, qword [rsp + 0x2c8]
mov r13, qword [rsp + 0x2d0]
mov r12, qword [rsp + 0x2d8]
mov rdi, qword [rsp + 0x2e0]
mov rsi, qword [rsp + 0x310]
test rcx, rcx
je 0x1800a5fdc
mov rax, qword [0x180377bf8]
test rax, rax
je 0x1800a5fd6
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x1800a6001
mov rcx, qword [0x180377bf8]
test rcx, rcx
je 0x1800a5ff8
dec dword [rcx + 0xf4]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, bl
add rsp, 0x2e8
pop rbx
pop rbp
ret