Function at 0x18002e0a8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2a8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x1800e0010]
xor rax, rsp
mov qword [rbp + 0xf8], rax
mov dword [rbp - 0x60], r9d
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x18], rdx
mov rdi, rcx
mov qword [rbp - 0x10], rcx
mov rsi, qword [0x1800e3b80]
mov qword [rbp - 0x68], rsi
mov rax, qword [rsi + 0x11c8]
mov ecx, 1
mov byte [rax + 0xb8], cl
mov r12, qword [rsi + 0x11c8]
xor r14d, r14d
cmp byte [r12 + 0xbb], r14b
jne 0x18002e346
mov ebx, dword [rbp + 0x218]
mov r13d, ebx
shr r13d, 0x1a
and r13b, cl
mov dword [rsp + 0x60], r13d
mov eax, ebx
shr eax, 0xe
and al, cl
mov dword [rsp + 0x64], eax
mov eax, ebx
shr eax, 0xf
and al, cl
mov dword [rbp - 0x50], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x58], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rbp - 0x70], eax
test r13b, r13b
je 0x18002e1ad
call fcn.1800156a0
mov rdx, rdi
mov rcx, r12
call fcn.18000af08
mov r15d, eax
mov dword [rsp + 0x78], eax
movss xmm0, dword [0x1800d9324]
movss dword [rbp - 0x40], xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.18000df98
test r13b, r13b
je 0x18002e1fe
movss xmm0, dword [rsi + 0xf28]
mulss xmm0, dword [0x1800d92a4]
jmp 0x18002e203
movss xmm0, dword [rbp - 0x24]
movss xmm6, dword [rsi + 0xb30]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.1800154bc
movaps xmm2, xmm0
mov rdx, qword [rbp + 0x210]
mov rdx, qword [rdx]
lea rcx, [rsp + 0x70]
call fcn.18001552c
xorps xmm15, xmm15
movss xmm13, dword [rbp - 0x28]
comiss xmm13, xmm15
jbe 0x18002e250
movaps xmm1, xmm13
addss xmm1, dword [rsi + 0xb44]
jmp 0x18002e253
xorps xmm1, xmm1
movss xmm9, dword [r12 + 0x104]
movss dword [rbp - 0x3c], xmm9
movaps xmm0, xmm9
movss xmm11, dword [rsp + 0x74]
addss xmm0, xmm11
movss xmm7, dword [r12 + 0x100]
movaps xmm12, xmm7
movss xmm10, dword [rsp + 0x70]
addss xmm12, xmm10
movss dword [rbp - 0x38], xmm12
movss dword [rbp + 0x80], xmm7
movss dword [rbp + 0x84], xmm9
movss dword [rbp + 0x88], xmm12
movss dword [rbp + 0x8c], xmm0
movaps xmm2, xmm9
addss xmm2, xmm11
addss xmm1, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x90], xmm7
movss dword [rbp + 0x94], xmm9
movss dword [rbp + 0x98], xmm1
movss dword [rbp + 0x9c], xmm2
mov qword [rbp - 0x48], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
subss xmm2, xmm9
subss xmm1, xmm7
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
lea rcx, [rsp + 0x70]
movaps xmm1, xmm6
call fcn.180015114
test r13b, r13b
je 0x18002e4f7
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.180015280
test al, al
jne 0x18002e3aa
call fcn.1800157c8
xor al, al
mov rcx, qword [rbp + 0xf8]
xor rcx, rsp
call fcn.18009bb70
lea r11, [rsp + 0x2a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r14d, dword [rsi + 0x1a68]
movups xmm0, xmmword [rsi + 0x1a60]
movups xmmword [rbp + 0xb8], xmm0
movss dword [r12 + 0x100], xmm7
movss dword [r12 + 0x104], xmm9
lea rdx, [rsi + 0xc3c]
mov ecx, 3
call fcn.180008cb8
movss xmm1, dword [rsi + 0xb34]
mov ecx, 7
call fcn.180008d54
movss xmm1, dword [rsi + 0xb38]
mov ecx, 8
call fcn.180008d54
and dword [rsp + 0x70], 0
and dword [rsp + 0x74], 0
lea rdx, [rsp + 0x70]
call fcn.180008dcc
movss xmm1, dword [rbp + 0x8c]
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
subss xmm1, xmm9
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movaps xmm0, xmm12
movss xmm7, dword [rbp + 0x80]
subss xmm0, xmm7
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x70]
mov edx, r15d
mov rcx, rdi
call fcn.18000e264
mov bl, al
mov ecx, 3
call fcn.180008e2c
call fcn.180008d14
test bl, bl
jne 0x18002e49a
call fcn.18000e438
jmp 0x18002e341
mov rbx, qword [rsi + 0x11c8]
mov qword [rbp - 0x48], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
mov word [rbx + 0x15e], cx
movss xmm0, dword [rsi + 0xb2c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [rsi + 0xb30]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
subss xmm10, dword [rbx + 0xac]
jmp 0x18002e551
bt ebx, 0x1c
jb 0x18002e547
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.180015280
test al, al
je 0x18002e346
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
movss xmm7, dword [rbp + 0x80]
mov r14d, dword [rsi + 0x1a68]
mov rbx, r12
mov edx, r15d
lea rcx, [rbp + 0x80]
call fcn.18000b4ac
mov cl, al
mov byte [rsp + 0x5f], al
xor r9d, r9d
lea edx, [r9 + 1]
test al, al
je 0x18002e577
mov dword [rsi + 0x1d48], edx
mov rdi, qword [0x1800e3b80]
test r15d, r15d
je 0x18002e595
cmp dword [rdi + 0x1ee0], r15d
jne 0x18002e595
add rdi, 0x1ed8
jmp 0x18002e598
mov rdi, r9
shr r14d, 8
and r14b, dl
mov dword [rbp - 0x4c], r14d
mov eax, dword [rsi + 0x1228]
mov r8d, 2
cmp eax, r15d
je 0x18002e5d4
cmp dword [rsi + 0x1bb8], r15d
jne 0x18002e5d4
test byte [rsi + 0x1bc4], dl
jne 0x18002e5ce
cmp dword [rsi + 0x1bdc], r8d
jne 0x18002e5d4
mov byte [rsp + 0x52], dl
jmp 0x18002e5d9
mov byte [rsp + 0x52], r9b
test cl, cl
je 0x18002e5e9
cmp byte [rsi + 0xa48], r9b
mov r15b, dl
jne 0x18002e5ec
mov r15b, r9b
mov byte [rsp + 0x54], r15b
test r13b, r13b
je 0x18002e620
test rdi, rdi
je 0x18002e620
test eax, eax
jne 0x18002e620
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.18000af08
cmp dword [rsi + 0x1258], eax
jne 0x18002e61d
mov ebx, 1
jmp 0x18002e62d
xor r9d, r9d
mov bl, r9b
test r13b, r13b
je 0x18002e65e
test rdi, rdi
je 0x18002e65e
lea rdx, str.SCROLLY
mov rcx, qword [rbp - 0x48]
call fcn.18000af08
xor r9d, r9d
cmp dword [rsi + 0x1228], eax
jne 0x18002e65e
lea eax, [r9 + 1]
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
jmp 0x18002e674
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
mov cl, r9b
mov byte [rsp + 0x51], cl
test r13b, r13b
je 0x18002e682
mov rax, qword [rbp - 0x48]
movss xmm6, dword [rax + 0x88]
jmp 0x18002e68e
movss xmm6, dword [0x1800d9318]
mov byte [rsp + 0x51], cl
mov edx, 1
test rdi, rdi
je 0x18002e6a5
mov al, r13b
xor al, dl
cmp byte [rdi + 0x6b], al
mov r13b, dl
jne 0x18002e6a8
mov r13b, r9b
test r15b, r15b
jne 0x18002e6cd
test bl, bl
jne 0x18002e6cd
cmp byte [rsp + 0x52], r9b
jne 0x18002e6cd
test r14b, r14b
jne 0x18002e6cd
mov byte [rsp + 0x53], r9b
test cl, cl
jne 0x18002e6d1
mov byte [rsp + 0x5d], r9b
jmp 0x18002e6e1
mov byte [rsp + 0x53], dl
mov byte [rsp + 0x5d], dl
mov eax, dword [rsp + 0x78]
cmp dword [rsi + 0x1228], eax
jne 0x18002e6ea
test r13b, r13b
je 0x18002e91a
lea rdi, [rsi + 0x1ed8]
mov dword [rdi + 0xe80], 0xbe99999a
or rbx, 0xffffffffffffffff
mov rax, qword [rbp - 0x78]
inc rbx
cmp byte [rax + rbx], r9b
jne 0x18002e703
lea r14d, [rbx + 1]
mov ecx, dword [rdi + 0x3c]
cmp r14d, ecx
jle 0x18002e742
test ecx, ecx
je 0x18002e727
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e72c
mov eax, 8
mov edx, r14d
cmp eax, r14d
cmovg edx, eax
lea rcx, [rdi + 0x38]
call fcn.18001c434
mov rax, qword [rbp - 0x78]
mov dword [rdi + 0x38], r14d
movsxd r8, r14d
mov rdx, rax
mov rcx, qword [rdi + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x78]
xor r8d, r8d
cmp dword [rdi + 8], eax
jne 0x18002e799
test r13b, r13b
jne 0x18002e799
lea r13d, [r8 + 1]
lea r14, [rdi + 0x10]
cmp dword [r14], ebx
jne 0x18002e794
mov r15, r14
cmp byte [rdi + 0x48], r8b
je 0x18002e7a0
movsxd r8, ebx
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x18002e7a0
mov r15, r14
jmp 0x18002e79d
lea r15, [rdi + 0x10]
mov r13b, r8b
mov qword [rsp + 0x70], r8
mov eax, dword [rsp + 0x78]
mov dword [rdi + 8], eax
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002e7df
test ecx, ecx
je 0x18002e7c7
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e7cc
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c55c
xor r8d, r8d
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x18002e806
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r8d
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c434
xor r8d, r8d
mov dword [rdi + 0x28], r8d
mov byte [rdi + 0x48], r8b
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov rbx, qword [rbp - 0x78]
mov r8, rbx
mov edx, dword [rbp - 0x60]
mov rcx, qword [rdi + 0x20]
call fcn.180008524
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, ebx
mov dword [r15], ecx
xor r9d, r9d
mov r14d, dword [rsp + 0x60]
test r13b, r13b
je 0x18002e86f
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
mov dword [rdi + 0x58], eax
cmp dword [rdi + 0x5c], edx
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
lea edx, [r9 + 1]
jmp 0x18002e8b5
mov qword [rdi + 0x50], r9
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], r9d
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], r9
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], r9d
mov byte [rdi + 0x68], r9b
mov edx, 1
mov al, r14b
xor al, dl
mov byte [rdi + 0x6b], al
mov byte [rdi + 0x60], r9b
mov dword [rdi + 0x64], r9d
test r14b, r14b
jne 0x18002e904
mov ecx, dword [rbp + 0x218]
test cl, 0x10
mov eax, dword [rsp + 0x58]
movzx eax, al
cmovne eax, edx
mov dword [rsp + 0x58], eax
cmp byte [rsp + 0x52], r9b
je 0x18002e8ea
test r13b, r13b
je 0x18002e8e6
test byte [rsi + 0x1bc4], 4
jne 0x18002e8ea
mov byte [rsp + 0x58], dl
cmp byte [rbp - 0x4c], r9b
jne 0x18002e900
cmp byte [rsp + 0x54], r9b
je 0x18002e904
cmp byte [rsi + 0x120], r9b
je 0x18002e904
mov byte [rsp + 0x58], dl
mov r15b, byte [rsp + 0x54]
test dword [rbp + 0x218], 0x2000
je 0x18002e91f
mov byte [rdi + 0x60], dl
jmp 0x18002e91f
mov r14d, dword [rsp + 0x60]
mov r8b, byte [rsi + 0x79]
mov byte [rsp + 0x5e], r8b
mov r13d, dword [rsp + 0x78]
mov bl, byte [rsp + 0x53]
cmp dword [rsi + 0x1228], r13d
je 0x18002e96e
test bl, bl
je 0x18002e961
mov rdx, r12
mov ecx, r13d
call fcn.18000b1b4
mov rdx, r12
mov ecx, r13d
call fcn.180016ad0
mov rcx, r12
call fcn.180012ec0
mov r8b, byte [rsp + 0x5e]
cmp dword [rsi + 0x1228], r13d
jne 0x18002ea88
xor r10d, r10d
test r15b, r15b
je 0x18002e98c
mov ecx, 0x281
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov eax, dword [rsi + 0x1a38]
or eax, 3
mov dword [rsi + 0x1a38], eax
mov r9d, dword [rbp + 0x218]
test r14b, r14b
jne 0x18002e9ac
test r9b, r9b
jns 0x18002e9b5
or eax, 0xc
mov dword [rsi + 0x1a38], eax
mov ecx, 0x207
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x208
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r14b, r14b
je 0x18002ea12
mov ecx, 0x205
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x206
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r8b, r8b
je 0x18002ea2d
mov ecx, 0x4000
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r9d, 0x440
je 0x18002ea46
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.180013b04
cmp dword [rsi + 0x1228], r13d
jne 0x18002ea88
test rdi, rdi
jne 0x18002ea5d
xor edx, edx
xor ecx, ecx
call fcn.18000b1b4
cmp dword [rsi + 0x1228], r13d
jne 0x18002ea88
xor r11d, r11d
lea r9d, [r11 + 1]
cmp byte [rsi + 0xa48], r11b
je 0x18002ea9b
cmp byte [rsp + 0x5d], r11b
jne 0x18002ea9b
test bl, bl
jne 0x18002ea9b
mov byte [rsp + 0x5c], r9b
jmp 0x18002ea9b
xor r11d, r11d
test rdi, rdi
je 0x18002eaa0
cmp byte [rsp + 0x51], r11b
je 0x18002eaa0
lea r9d, [r11 + 1]
mov cl, r9b
jmp 0x18002eaa3
mov cl, r11b
mov byte [rsp + 0x50], cl
mov r12d, dword [rsp + 0x58]
test rdi, rdi
je 0x18002eaca
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002eabe
test r12b, r12b
je 0x18002eaca
test cl, cl
je 0x18002eaca
mov r8d, 1
jmp 0x18002eacd
mov r8b, r11b
mov dword [rsp + 0x58], r8d
movzx r15d, r8b
mov byte [rsp + 0x7f], r11b
mov byte [rsp + 0x5d], r11b
mov eax, dword [rsp + 0x64]
test al, al
je 0x18002eba3
test rdi, rdi
je 0x18002eba3
test cl, cl
jne 0x18002eb02
test r8b, r8b
je 0x18002ebac
mov qword [rsp + 0x70], r11
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002eb37
test ecx, ecx
je 0x18002eb22
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002eb27
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c55c
mov dword [rdi + 0x18], ebx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r14, qword [rbp - 0x78]
mov r8, r14
mov edx, ebx
mov rcx, qword [rdi + 0x20]
call fcn.180008524
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, r14d
mov dword [rdi + 0x10], ecx
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
mov ecx, eax
cmp dword [rdi + 0x58], eax
cmovl ecx, dword [rdi + 0x58]
mov dword [rdi + 0x58], ecx
cmp dword [rdi + 0x5c], eax
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
xor r11d, r11d
mov r8d, r11d
cmp ecx, edx
cmovne r8d, r15d
mov dword [rsp + 0x58], r8d
mov cl, byte [rsp + 0x50]
mov eax, dword [rsp + 0x64]
test cl, cl
jne 0x18002ebb5
test r8b, r8b
jne 0x18002ebb5
cmp dword [rsi + 0x1228], r13d
jne 0x18002ebd1
test al, al
jne 0x18002ebd1
test rdi, rdi
je 0x18002ebd1
cmp byte [rdi + 0x48], r11b
je 0x18002ebd1
mov ebx, 1
mov al, bl
mov byte [rsp + 0x7e], bl
jmp 0x18002ebdd
mov al, r11b
mov byte [rsp + 0x7e], al
mov ebx, 1
cmp qword [rbp - 0x18], r11
je 0x18002ebf8
test al, al
je 0x18002ebed
mov rax, qword [rdi + 0x30]
jmp 0x18002ebf1
mov rax, qword [rbp - 0x78]
cmp byte [rax], r11b
mov al, bl
je 0x18002ebfb
mov al, r11b
mov byte [rsp + 0x53], al
cmp byte [rbp - 0x50], r11b
je 0x18002ec7a
test al, al
jne 0x18002ec7a
mov rcx, qword [rsi + 0xf20]
mov edx, 0x2a
call fcn.180022bfc
lea r9, [rsi + 0x2d68]
mov ecx, dword [rcx + 0x14]
mov dword [r9 + 0x14], ecx
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x64]
mov dword [r9 + 0x64], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x68]
mov dword [r9 + 0x68], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x6c]
mov dword [r9 + 0x6c], r8d
mov rdx, qword [rsi + 0xf20]
mov r8, qword [rdx + 0x40]
mov qword [r9 + 0x40], r8
mov qword [r9 + 0x38], rax
mov eax, dword [rax + 4]
mov dword [r9 + 0x10], eax
mov rcx, r9
call fcn.1800131f0
xor r11d, r11d
mov dword [rbp - 0x4c], r11d
cmp dword [rsi + 0x1228], r13d
jne 0x18002f065
mov eax, dword [rdi + 0x10]
mov dword [rbp - 0x4c], eax
mov byte [rdi + 0xe86], r11b
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x4c], eax
mov r14d, dword [rbp + 0x218]
mov dword [rdi + 0xe88], r14d
cmp byte [rsi + 0x110], r11b
sete al
mov byte [rsi + 0x1235], al
mov dword [rsi + 0x30f4], ebx
movss xmm2, dword [rsi + 0x108]
subss xmm2, xmm7
subss xmm2, dword [rsi + 0xb2c]
addss xmm2, dword [rdi + 0x50]
mov r15d, dword [rsp + 0x60]
test r15b, r15b
je 0x18002ecfb
movss xmm3, dword [rsi + 0x10c]
mov rax, qword [rbp - 0x48]
subss xmm3, dword [rax + 0x104]
jmp 0x18002ed0b
movss xmm3, dword [rsi + 0xf28]
mulss xmm3, dword [0x1800d9210]
test r12b, r12b
je 0x18002edd4
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
lea rax, [rdi + 0xe85]
mov byte [rax], bl
mov r12d, 1
cmp byte [rax], r11b
je 0x18002ed45
cmp byte [rsi + 0x110], r11b
jne 0x18002ed45
mov byte [rax], r11b
bt r14d, 0xa
jae 0x18002ed9e
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18001500c
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
test al, al
je 0x18002eda2
test cl, cl
jne 0x18002eda2
mov dword [rsp + 0x6c], 9
mov dword [rsp + 0x20], 2
mov edx, r14d
lea rcx, [rsp + 0x6c]
call fcn.18002dd28
xor r11d, r11d
test al, al
je 0x18002ed9e
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002dcfc
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
cmp byte [rsi + 0x120], r11b
je 0x18002edb4
cmp byte [rsi + 0x122], r11b
je 0x18002edcc
cmp byte [rsp + 0x5e], r11b
je 0x18002efbf
cmp byte [rsi + 0x123], r11b
je 0x18002efbf
mov al, r12b
jmp 0x18002efc2
mov al, byte [rsp + 0x5f]
test al, al
je 0x18002ef0a
mov r12d, 2
cmp word [rsi + 0xa52], r12w
jb 0x18002ef0a
cmp byte [rsi + 0x121], r11b
jne 0x18002ef0a
lea r14, [rdi + 0x54]
mov rdx, r14
mov rcx, rdi
call fcn.18002ca14
movzx eax, word [rsi + 0xa52]
sub eax, r12d
movsxd rdx, dword [r14]
test bl, al
jne 0x18002ee96
xor r8d, r8d
test edx, edx
je 0x18002ee3c
mov rax, qword [rdi + 0x20]
lea r9d, [r12 + 8]
cmp word [rax + rdx*2 - 2], r9w
mov cl, r8b
jne 0x18002ee3e
mov cl, bl
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ee4a
test cl, cl
jne 0x18002ee5a
mov edx, 0x20000c
mov rcx, rdi
call fcn.18002dcfc
mov edx, dword [r14]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ee7b
mov eax, dword [r14 + 8]
cmp dword [r14 + 4], eax
jne 0x18002ee76
mov dword [r14 + 8], edx
mov dword [r14 + 4], edx
jmp 0x18002ee7b
mov dword [r14], eax
mov edx, eax
mov rcx, rdi
call fcn.18002c624
mov dword [r14], eax
mov dword [rdi + 0x5c], eax
mov rdx, r14
mov rcx, rdi
call fcn.18002cc1c
jmp 0x18002eeea
mov rcx, qword [rdi + 0x20]
movzx ebx, word [rcx + rdx*2]
mov edx, 0x200004
mov rcx, rdi
call fcn.18002dcfc
mov edx, 0x600005
mov rcx, rdi
call fcn.18002dcfc
mov edx, 0x600001
mov rcx, rdi
call fcn.18002dcfc
mov eax, 0xa
cmp bx, ax
je 0x18002eee3
test r15b, r15b
je 0x18002eee3
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], ecx
mov dword [r14], ecx
mov byte [rdi + 0xe84], 0
mov dword [rdi + 0xe80], 0xbe99999a
lea rax, [rdi + 0xe85]
mov r14d, dword [rbp + 0x218]
xor r11d, r11d
jmp 0x18002ed2e
lea rbx, [rdi + 0xe85]
mov cl, byte [rbx]
cmp byte [rsi + 0xa48], r11b
je 0x18002ef55
test cl, cl
jne 0x18002ef55
test al, al
je 0x18002ef4d
lea rdx, [rdi + 0x54]
mov rcx, rdi
cmp byte [rsi + 0x121], r11b
je 0x18002ef3b
call fcn.18002ca74
jmp 0x18002ef40
call fcn.18002ca14
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
mov rax, rbx
jmp 0x18002ed2e
mov rax, rbx
cmp byte [rsi + 0x110], r11b
je 0x18002ed2e
test cl, cl
jne 0x18002ed2e
movss xmm0, dword [rsi + 0xf8]
ucomiss xmm0, xmm15
jp 0x18002ef91
jne 0x18002ef91
movss xmm0, dword [rsi + 0xfc]
ucomiss xmm0, xmm15
jp 0x18002ef91
je 0x18002ed2e
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002ca74
mov dword [rdi + 0xe80], 0xbe99999a
mov r12d, 1
mov byte [rdi + 0xe84], r12b
mov rax, rbx
xor r11d, r11d
jmp 0x18002ed34
mov al, r11b
lea rbx, [rsi + 0xac0]
cmp dword [rbx], r11d
jle 0x18002f065
test al, al
jne 0x18002f03f
test cl, cl
jne 0x18002f03f
cmp byte [rsp + 0x52], r11b
jne 0x18002f03f
mov r15d, r11d
mov r14, r11
mov r13d, dword [rbp + 0x218]
mov rax, qword [rsi + 0xac8]
movzx ecx, word [rax + r14]
mov dword [rsp + 0x6c], ecx
cmp ecx, 9
je 0x18002f02b
mov dword [rsp + 0x20], 2
mov edx, r13d
lea rcx, [rsp + 0x6c]
call fcn.18002dd28
xor r11d, r11d
test al, al
je 0x18002f02e
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002dcfc
xor r11d, r11d
add r15d, r12d
add r14, 2
cmp r15d, dword [rbx]
jl 0x18002efee
mov r13d, dword [rsp + 0x78]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18002f062
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r11d
test eax, eax
cmovg edx, eax
mov rcx, rbx
call fcn.18001c55c
xor r11d, r11d
mov dword [rbx], r11d
mov r12b, r11b
mov byte [rsp + 0x51], r11b
lea rax, [0x18009e6ea]
cmp dword [rsi + 0x1228], r13d
jne 0x18002fa9f
cmp byte [rsi + 0x1234], r11b
jne 0x18002fa9f
cmp byte [rsp + 0x5c], r11b
jne 0x18002fa9f
movaps xmm0, xmm11
subss xmm0, dword [rsi + 0xb30]
divss xmm0, dword [rsi + 0xf28]
cvttss2si eax, xmm0
mov r12d, 1
mov ecx, r12d
cmp eax, r12d
cmovge ecx, eax
mov dword [rsp + 0x6c], ecx
mov dword [rdi + 0x64], ecx
mov al, byte [rsi + 0x121]
neg al
sbb ebx, ebx
and ebx, 0x400000
mov r15b, byte [rsp + 0x5e]
lea rcx, [rsi + 0x120]
mov qword [rsp + 0x70], rcx
mov qword [rbp - 0x30], rcx
test r15b, r15b
je 0x18002f130
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov r14b, byte [rax]
mov byte [rsp + 0x52], r14b
cmp byte [rsi + 0x123], r11b
je 0x18002f144
mov byte [rsp + 0x52], r14b
cmp byte [rcx], r11b
jne 0x18002f144
mov byte [rsp + 0x52], r14b
test r14b, r14b
jne 0x18002f144
mov byte [rsp + 0x54], r12b
mov byte [rsp + 0x52], r14b
jmp 0x18002f149
mov al, byte [rcx]
mov byte [rsp + 0x52], al
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov byte [rsp + 0x54], r11b
mov r8d, r12d
mov edx, r13d
mov ecx, 0xa39
call fcn.18001500c
xor ecx, ecx
test al, al
jne 0x18002f175
mov r8d, r12d
mov edx, r13d
mov ecx, 0x220a
call fcn.18001500c
xor ecx, ecx
test al, al
je 0x18002f19d
mov r12d, dword [rsp + 0x64]
mov r14d, dword [rsp + 0x60]
test r12b, r12b
jne 0x18002f1a7
cmp byte [rbp - 0x50], cl
jne 0x18002f1a7
test r14b, r14b
je 0x18002f196
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f1a7
mov byte [rsp + 0x68], 1
jmp 0x18002f1ab
mov r14d, dword [rsp + 0x60]
mov r12d, dword [rsp + 0x64]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r13d
mov ecx, 0xa24
call fcn.18001500c
test al, al
jne 0x18002f1d3
xor r8d, r8d
mov edx, r13d
mov ecx, 0x1209
call fcn.18001500c
test al, al
je 0x18002f1f5
xor eax, eax
cmp byte [rbp - 0x50], al
jne 0x18002f1f5
test r14b, r14b
je 0x18002f1e7
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f1f5
mov eax, 1
mov byte [rsp + 0x7d], al
xor r14d, r14d
jmp 0x18002f201
xor r14d, r14d
mov byte [rsp + 0x7d], r14b
lea eax, [r14 + 1]
mov r8d, eax
mov edx, r13d
mov ecx, 0xa37
call fcn.18001500c
test al, al
jne 0x18002f22c
mov r8d, 1
mov edx, r13d
mov ecx, 0x2209
call fcn.18001500c
test al, al
je 0x18002f23c
test r12b, r12b
jne 0x18002f23c
mov eax, 1
mov byte [rsp + 0x5f], al
jmp 0x18002f246
mov byte [rsp + 0x5f], r14b
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3b
call fcn.18001500c
mov r14d, dword [rbp - 0x58]
test al, al
je 0x18002f273
test r12b, r12b
jne 0x18002f273
test r14b, r14b
je 0x18002f273
mov eax, 1
mov byte [rsp + 0x7c], al
jmp 0x18002f27d
mov byte [rsp + 0x7c], 0
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3a
call fcn.18001500c
test al, al
jne 0x18002f2b2
test r15b, r15b
je 0x18002f2ca
mov r8d, 1
mov edx, r13d
mov ecx, 0x2a3b
call fcn.18001500c
xor r15d, r15d
test al, al
je 0x18002f2cd
jmp 0x18002f2b5
xor r15d, r15d
test r12b, r12b
jne 0x18002f2cd
test r14b, r14b
je 0x18002f2cd
mov r12d, 1
mov r13b, r12b
jmp 0x18002f2d6
xor r15d, r15d
mov r13b, r15b
mov r12d, 1
xor r8d, r8d
mov edx, dword [rsp + 0x78]
mov ecx, 0xa22
call fcn.18001500c
mov byte [rbp - 0x80], al
test byte [rsi + 8], 2
je 0x18002f2f9
test byte [rsi + 0xc], r12b
mov r14b, r12b
jne 0x18002f2fc
mov r14b, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.180013c38
test al, al
jne 0x18002f325
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.180013c38
test al, al
jne 0x18002f325
mov r12b, r15b
test r14b, r14b
je 0x18002f35a
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.180013c38
test al, al
jne 0x18002f350
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.180013c38
test al, al
je 0x18002f35a
mov eax, 1
mov r15b, al
jmp 0x18002f35f
mov eax, 1
mov r8d, eax
mov edx, dword [rsp + 0x78]
mov ecx, 0x20e
call fcn.18001500c
xor ecx, ecx
test al, al
jne 0x18002f39d
test r14b, r14b
je 0x18002f393
lea r8d, [rcx + 1]
mov edx, dword [rsp + 0x78]
mov ecx, 0x26c
call fcn.18001500c
xor ecx, ecx
test al, al
jne 0x18002f39d
mov r14b, cl
mov eax, 1
jmp 0x18002f3a5
mov eax, 1
mov r14b, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f3ed
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200000
mov eax, 0x200004
cmp byte [rsp + 0x54], cl
cmovne edx, eax
or edx, ebx
mov rcx, rdi
call fcn.18002dcfc
xor r11d, r11d
mov r9d, 1
jmp 0x18002fa6e
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f419
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200001
mov eax, 0x200005
jmp 0x18002f3ce
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.180013c38
xor r11d, r11d
test al, al
je 0x18002f485
cmp byte [rsp + 0x60], r11b
je 0x18002f485
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002f474
mov rdx, qword [rbp - 0x48]
movss xmm0, dword [rdx + 0x88]
subss xmm0, dword [rsi + 0xf28]
maxss xmm0, xmm15
movss dword [rdx + 0x98], xmm0
mov dword [rdx + 0xa0], r11d
mov dword [rdx + 0xa8], r11d
jmp 0x18002f3e2
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200002]
jmp 0x18002f3d5
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.180013c38
xor r11d, r11d
test al, al
je 0x18002f502
cmp byte [rsp + 0x60], r11b
je 0x18002f502
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002f4f1
mov rax, qword [0x1800e3b80]
mov rcx, qword [rax + 0x11c8]
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
addss xmm0, dword [rsi + 0xf28]
minss xmm0, dword [rcx + 0x90]
movss dword [rax + 0x98], xmm0
mov dword [rax + 0xa0], r11d
mov dword [rax + 0xa8], r11d
jmp 0x18002f3e2
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200003]
jmp 0x18002f3d5
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f548
cmp byte [rsp + 0x60], cl
je 0x18002f548
or ebx, 0x20000e
mov edx, ebx
mov rcx, rdi
call fcn.18002dcfc
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
subss xmm6, xmm0
jmp 0x18002f3df
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f58e
cmp byte [rsp + 0x60], cl
je 0x18002f58e
or ebx, 0x20000f
mov edx, ebx
mov rcx, rdi
call fcn.18002dcfc
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
addss xmm6, xmm0
jmp 0x18002f3df
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.180013c38
test al, al
je 0x18002f5bb
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18002f3d5
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.180013c38
test al, al
je 0x18002f5de
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200005
jmp 0x18002f5af
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f628
cmp byte [rsp + 0x64], cl
jne 0x18002f628
cmp byte [rsp + 0x68], cl
jne 0x18002f628
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002f61b
cmp byte [rsp + 0x52], cl
je 0x18002f61b
mov edx, 0x60000d
mov rcx, rdi
call fcn.18002dcfc
or ebx, 0x200008
mov edx, ebx
jmp 0x18002f3d7
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.180013c38
xor r11d, r11d
mov r8d, dword [rsp + 0x64]
test al, al
je 0x18002f69a
test r8b, r8b
jne 0x18002f69a
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002f692
cmp byte [rsp + 0x52], r11b
je 0x18002f65f
mov edx, 0x60000c
jmp 0x18002f68a
cmp byte [rsp + 0x5e], r11b
je 0x18002f692
cmp byte [rsi + 0x123], r11b
je 0x18002f692
mov rax, qword [rbp + 0x90]
cmp byte [rax], r11b
jne 0x18002f692
mov rax, qword [rsp + 0x70]
cmp byte [rax], r11b
jne 0x18002f692
mov edx, 0x600004
mov rcx, rdi
call fcn.18002dcfc
or ebx, 0x200009
jmp 0x18002f621
test r12b, r12b
jne 0x18002f9df
test r15b, r15b
jne 0x18002f9df
test r14b, r14b
je 0x18002f709
test dword [rbp + 0x218], 0x100000
je 0x18002f6e7
mov eax, dword [rdi + 0x10]
test eax, eax
jg 0x18002f6d3
mov byte [rsp + 0x58], r11b
mov byte [rsp + 0x50], r11b
mov byte [rsp + 0x5c], 1
setg r12b
mov byte [rsp + 0x51], r12b
mov r9d, 1
jmp 0x18002fa73
mov r9d, 1
mov r12b, r9b
mov byte [rsp + 0x51], r9b
mov byte [rsp + 0x5c], r9b
mov cl, r11b
mov dl, r11b
mov byte [rsp + 0x50], dl
jmp 0x18002fa7b
movzx eax, byte [rsp + 0x7c]
test al, al
jne 0x18002f9be
test r13b, r13b
jne 0x18002f9be
cmp byte [rbp - 0x80], r11b
je 0x18002f748
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
jmp 0x18002fa6e
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x18002f8c2
cmp byte [rsp + 0x7d], r11b
jne 0x18002f8c2
cmp byte [rsp + 0x5f], r11b
je 0x18002f3e2
mov rax, qword [0x1800e3b80]
mov rdx, qword [rax + 0xb0]
test rdx, rdx
je 0x18002f7a0
mov rcx, qword [rax + 0xc0]
call rdx
mov rbx, rax
xor r11d, r11d
test rax, rax
je 0x18002f3e2
mov rax, qword [0x1800e3b80]
jmp 0x18002f7a7
lea rbx, [0x18009e6ea]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r11b
jne 0x18002f7ab
test rax, rax
je 0x18002f7c6
mov r9d, 1
add dword [rax + 0xf4], r9d
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x90], rax
xor r13d, r13d
mov r14d, r13d
cmp byte [rbx], r13b
je 0x18002f846
mov r12, rax
mov esi, dword [rbp + 0x218]
lea r15d, [r13 + 1]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x6c]
call fcn.180008384
movsxd rcx, eax
add rbx, rcx
mov dword [rsp + 0x20], 4
mov edx, esi
lea rcx, [rsp + 0x6c]
call fcn.18002dd28
test al, al
je 0x18002f836
movzx eax, word [rsp + 0x6c]
mov word [r12], ax
add r14d, r15d
add r12, 2
cmp byte [rbx], r13b
jne 0x18002f7f7
mov rsi, qword [rbp - 0x68]
mov r15, qword [rbp + 0x90]
movsxd rax, r14d
mov word [r15 + rax*2], r13w
test r14d, r14d
jle 0x18002f89d
lea rbx, [rdi + 0x54]
mov rdx, rbx
mov rcx, rdi
call fcn.18002cc1c
mov rcx, rdi
call fcn.18002ccd8
mov r9d, r14d
mov r8, r15
mov edx, dword [rbx]
mov rcx, rdi
call fcn.18002c78c
test al, al
je 0x18002f896
lea rcx, [rbx + 0x20]
mov r9d, r14d
xor r8d, r8d
mov edx, dword [rbx]
call fcn.18002d804
add dword [rbx], r14d
mov byte [rbx + 0x16], r13b
mov byte [rdi + 0xe84], 1
test r15, r15
je 0x18002f8b4
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002f8b4
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002f3df
cmp qword [rsi + 0xb8], r11
je 0x18002f969
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
cmp ecx, eax
je 0x18002f8e3
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18002f8e9
mov edx, r11d
mov eax, dword [rdi + 0xc]
movsxd r15, eax
mov rax, qword [rdi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.180008784
mov ecx, 1
lea r14d, [rcx + rax]
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002f91b
add dword [rax + 0xf4], ecx
movsxd rcx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov edx, r14d
mov rcx, rax
call fcn.1800086e4
mov rcx, rbx
call fcn.18000b6e8
test rbx, rbx
je 0x18002f95d
mov rcx, qword [0x1800e3b80]
test rcx, rcx
je 0x18002f95d
dec dword [rcx + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r11d, r11d
test r13b, r13b
je 0x18002f3e2
mov eax, dword [rdi + 0x5c]
lea rbx, [rdi + 0x54]
cmp dword [rdi + 0x58], eax
jne 0x18002f98e
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rbx], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x18002fa6e
mov rdx, rbx
mov rcx, rdi
call fcn.18002ccd8
xor r11d, r11d
mov byte [rbx + 0x16], r11b
jmp 0x18002f3e2
mov edx, eax
xor edx, 1
add edx, 0x20000a
mov rcx, rdi
call fcn.18002dcfc
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x18002f3df
mov edx, dword [rbp + 0x218]
mov eax, edx
shr eax, 0xb
mov r9d, 1
and al, r9b
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x18002fa0e
test r15b, r15b
jne 0x18002fa0e
test al, al
mov rax, qword [rsp + 0x70]
je 0x18002fa30
cmp byte [rax], r11b
jne 0x18002fa35
mov byte [rsp + 0x5d], r9b
cmp byte [rsi + 0x7c], r11b
je 0x18002fa69
test cl, cl
jne 0x18002fa69
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
jmp 0x18002fa6e
cmp byte [rax], r11b
jne 0x18002fa0e
test r8b, r8b
jne 0x18002fa6e
mov eax, 0xa
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x6c]
call fcn.18002dd28
xor r11d, r11d
test al, al
je 0x18002f3e2
mov edx, dword [rsp + 0x6c]
jmp 0x18002f3d7
mov byte [rsp + 0x5c], r9b
mov r12b, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x58]
mov dl, byte [rsp + 0x50]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002fa8a
test dl, dl
mov al, r9b
jne 0x18002fa8d
mov al, r11b
or cl, al
mov dword [rsp + 0x58], ecx
mov r13d, dword [rsp + 0x78]
lea rax, [0x18009e6ea]
mov qword [rbp - 0x58], r11
mov r14d, r11d
cmp dword [rsi + 0x1228], r13d
jne 0x18003002f
test r12b, r12b
je 0x18002fc38
cmp byte [rsp + 0x64], r11b
jne 0x18002fca1
test dword [rbp + 0x218], 0x100000
je 0x18002fb0d
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x20], r11d
mov r9d, dword [rdi + 0xc]
xor r8d, r8d
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002dc0c
mov r8d, dword [rdi + 0xc]
xor edx, edx
mov rcx, rdi
call fcn.18002c700
xor r11d, r11d
mov qword [rdi + 0x58], r11
mov dword [rdi + 0x54], r11d
jmp 0x18002fc47
mov rax, qword [rbp - 0x78]
mov r8, qword [rdi + 0x40]
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002fb31
add rax, r9
test ecx, ecx
jne 0x18002fb1e
test edx, edx
je 0x18002fc47
mov r12, qword [rdi + 0x40]
mov qword [rbp - 0x58], r12
mov r14d, dword [rdi + 0x38]
sub r14d, r9d
mov dword [rbp + 0x94], r11d
mov ebx, r11d
mov dword [rbp + 0x90], ebx
mov r15, r11
mov qword [rbp + 0x98], r11
test r14d, r14d
jle 0x18002fbf3
movsxd r13, r14d
add r13, r12
mov rdx, r13
mov rcx, r12
call fcn.1800085c4
mov edx, 1
lea ebx, [rdx + rax]
xor ecx, ecx
test ebx, ebx
jle 0x18002fbd0
mov r12d, ebx
lea eax, [rdx + 7]
cmp ebx, eax
cmovl r12d, eax
test r12d, r12d
jle 0x18002fbcc
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002fbad
add dword [rax + 0xf4], edx
movsxd rcx, r12d
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x94], r12d
xor ecx, ecx
mov r12, qword [rbp - 0x58]
mov dword [rbp + 0x90], ebx
mov qword [rsp + 0x20], rcx
mov r9, r13
mov r8, r12
mov edx, ebx
mov rcx, r15
call fcn.180008524
mov r13d, dword [rsp + 0x78]
xor r11d, r11d
lea eax, [rbx - 1]
mov r9d, r11d
test r14d, r14d
cmovg r9d, eax
lea rdx, [rdi + 0x54]
mov r8, r15
mov rcx, rdi
call fcn.18002dc78
nop
test r15, r15
je 0x18002fc31
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002fc27
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov r12b, byte [rsp + 0x51]
jmp 0x18002fc47
mov qword [rbp - 0x58], r11
cmp byte [rsp + 0x64], r11b
jne 0x18002fd38
mov byte [rdi + 0x48], 1
mov eax, dword [rdi + 0x18]
lea ebx, [rax*4 + 1]
mov ecx, dword [rdi + 0x2c]
cmp ebx, ecx
jle 0x18002fc80
test ecx, ecx
je 0x18002fc6b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002fc70
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c434
mov dword [rdi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x20]
mov edx, ebx
mov rcx, qword [rdi + 0x30]
call fcn.1800086e4
xor r11d, r11d
test r12b, r12b
je 0x18002fd38
cmp byte [rsp + 0x5d], r11b
je 0x18002fcb9
mov r12d, dword [rbp + 0x218]
test r12b, 0x20
jne 0x18002fd3f
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
mov r15, qword [rbp - 0x58]
test r15, r15
je 0x18003002a
test r13b, r13b
je 0x18002ffe7
mov qword [rbp + 0x58], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x48], 0x40000
mov eax, dword [rbp + 0x218]
mov dword [rbp + 0x4c], eax
mov qword [rbp + 0x60], r12
mov dword [rbp + 0x68], r14d
lea eax, [r14 + 1]
cmp dword [rbp - 0x60], eax
cmovge eax, dword [rbp - 0x60]
mov dword [rbp + 0x6c], eax
mov qword [rbp + 0x50], r11
lea rcx, [rbp + 0x40]
call r11
mov r12, qword [rbp + 0x60]
mov qword [rbp - 0x78], r12
mov ecx, dword [rbp + 0x6c]
lea r14d, [rcx - 1]
cmp dword [rbp + 0x68], r14d
cmovl r14d, dword [rbp + 0x68]
xor r11d, r11d
jmp 0x18002ffea
mov r12d, dword [rbp + 0x218]
test r12d, 0x801c0
je 0x18002ff9c
mov r15d, r11d
mov ebx, 0x40
test bl, r12b
je 0x18002fd74
xor r8d, r8d
mov edx, r13d
mov r13d, 0x200
mov ecx, r13d
call fcn.18001500c
xor r11d, r11d
test al, al
jne 0x18002fdb7
test r12b, r12b
jns 0x18002fdbc
mov ebx, 1
mov r8d, ebx
xor edx, edx
mov r13d, 0x203
mov ecx, r13d
call fcn.180013c38
xor r11d, r11d
test al, al
jne 0x18002fdb2
mov r8d, ebx
xor edx, edx
mov r13d, 0x204
mov ecx, r13d
call fcn.180013c38
xor r11d, r11d
test al, al
je 0x18002fdbc
mov ebx, 0x80
mov r15d, r13d
jmp 0x18002fddd
mov ebx, 0x80000
test ebx, r12d
je 0x18002fdcf
cmp byte [rdi + 0xe86], r11b
jne 0x18002fddd
mov eax, pe_nt_image_headers64
test eax, r12d
mov ebx, r11d
cmovne ebx, eax
test ebx, ebx
je 0x18002ff9c
mov dword [rbp + 0x18], r11d
mov word [rbp + 0x31], r11w
mov byte [rbp + 0x33], r11b
mov qword [rbp], rsi
mov dword [rbp + 8], ebx
mov dword [rbp + 0xc], r12d
mov qword [rbp + 0x10], r11
cmp byte [rsp + 0x64], r11b
mov rax, qword [rbp - 0x78]
jne 0x18002fe10
mov rax, qword [rdi + 0x30]
mov dword [rbp + 0x1c], r15d
mov qword [rbp + 0x20], rax
mov eax, dword [rdi + 0x10]
mov dword [rbp + 0x28], eax
mov eax, dword [rdi + 0x4c]
mov dword [rbp + 0x2c], eax
mov byte [rbp + 0x30], r11b
mov r11, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0x54]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.180008784
mov ebx, eax
mov dword [rbp + 0x34], eax
movsxd rdx, dword [rdi + 0x58]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.180008784
mov r12d, eax
mov dword [rbp + 0x38], eax
movsxd rdx, dword [rdi + 0x5c]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.180008784
mov r13d, eax
mov dword [rbp + 0x3c], eax
lea rcx, [rbp]
xor eax, eax
call rax
mov r15b, byte [rbp + 0x30]
movsxd rcx, dword [rbp + 0x34]
cmp ecx, ebx
jne 0x18002fe89
xor r11d, r11d
test r15b, r15b
je 0x18002fea8
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.1800085c4
mov dword [rdi + 0x54], eax
mov byte [rdi + 0xe84], 1
mov ecx, dword [rbp + 0x34]
xor r11d, r11d
movsxd rax, dword [rbp + 0x38]
cmp eax, r12d
jne 0x18002feb6
test r15b, r15b
je 0x18002fed7
cmp eax, ecx
jne 0x18002febf
mov ecx, dword [rdi + 0x54]
jmp 0x18002fed1
mov rcx, qword [rbp + 0x20]
lea rdx, [rcx + rax]
call fcn.1800085c4
mov ecx, eax
mov eax, dword [rbp + 0x38]
mov dword [rdi + 0x58], ecx
xor r11d, r11d
movsxd rcx, dword [rbp + 0x3c]
cmp ecx, r13d
jne 0x18002fee9
test r15b, r15b
je 0x18002ff9c
cmp ecx, eax
jne 0x18002fef2
mov eax, dword [rdi + 0x58]
jmp 0x18002ff04
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.1800085c4
xor r11d, r11d
mov dword [rdi + 0x5c], eax
test r15b, r15b
je 0x18002ff9c
mov r8d, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
mov rcx, rdi
call fcn.18002df10
mov ebx, dword [rbp + 0x28]
mov eax, dword [rbp - 0x4c]
mov r13d, dword [rbp - 0x70]
cmp ebx, eax
jle 0x18002ff6a
test r13b, r13b
je 0x18002ff6a
lea r15, [rdi + 0x18]
sub ebx, eax
add ebx, dword [r15]
mov ecx, dword [r15 + 4]
cmp ebx, ecx
jle 0x18002ff67
test ecx, ecx
je 0x18002ff53
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002ff58
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
mov rcx, r15
call fcn.18001c55c
mov dword [r15], ebx
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, qword [rbp + 0x20]
mov edx, dword [rdi + 0x18]
mov rcx, qword [rdi + 0x20]
call fcn.180008524
mov dword [rdi + 0xc], eax
mov eax, dword [rbp + 0x28]
mov dword [rdi + 0x10], eax
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
jmp 0x18002ffa0
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
cmp byte [rsp + 0x64], r11b
jne 0x18002fcc1
mov rax, qword [rdi + 0x30]
mov r8, r12
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002ffd2
add rax, r9
test ecx, ecx
jne 0x18002ffbf
test edx, edx
je 0x18002fcc1
mov r15, qword [rdi + 0x30]
mov r14d, dword [rdi + 0x10]
jmp 0x18002fcc5
mov ecx, dword [rbp - 0x60]
lea eax, [r14 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
mov eax, 1
cmp rbx, rax
jb 0x18003001a
jbe 0x180030015
lea r8, [rbx - 1]
mov rdx, r15
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r11d, r11d
mov byte [r12 + rbx - 1], r11b
mov ebx, 1
mov byte [rsp + 0x7f], bl
mov r13d, dword [rsp + 0x78]
jmp 0x180030034
mov r13d, dword [rsp + 0x78]
mov ebx, 1
cmp byte [rsp + 0x5c], r11b
je 0x180030050
cmp dword [rsi + 0x1228], r13d
jne 0x180030050
xor edx, edx
xor ecx, ecx
call fcn.18000b1b4
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
jne 0x1800300d1
mov r8d, ebx
mov edx, r13d
lea rcx, [rbp + 0x80]
call fcn.180009790
mov rax, qword [0x1800e3b80]
movdqu xmm0, xmmword [rax + 0xc3c]
movups xmmword [rbp + 0x90], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp + 0x9c], xmm0
lea rcx, [rbp + 0x90]
call fcn.1800087cc
mov r8d, eax
movss xmm5, dword [rsi + 0xb34]
movss dword [rsp + 0x20], xmm5
mov r9b, bl
mov rdx, qword [rbp + 0x88]
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180009618
xor r11d, r11d
movss dword [rbp + 0xa8], xmm7
movss dword [rbp + 0xac], xmm9
movaps xmm0, xmm7
addss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
movaps xmm1, xmm9
addss xmm1, xmm11
movss dword [rbp + 0xb4], xmm1
mov r10, qword [rbp - 0x48]
lea rax, [rbp + 0x90]
test r12b, r12b
je 0x180030126
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x90], xmm0
jmp 0x18003014a
addss xmm7, dword [rsi + 0xb2c]
movss dword [rbp + 0x90], xmm7
movaps xmm0, xmm9
addss xmm0, dword [rsi + 0xb30]
movss dword [rbp + 0x94], xmm0
movsd xmm0, qword [rax]
movsd qword [rbp + 0xa0], xmm0
movaps xmm14, xmm15
movaps xmm8, xmm15
cmp byte [rsp + 0x7e], r11b
je 0x18003016f
mov r15, qword [rdi + 0x30]
mov qword [rbp - 0x78], r15
jmp 0x180030173
mov r15, qword [rbp - 0x78]
mov r14, r11
mov qword [rbp - 0x30], r11
movzx r9d, byte [rsp + 0x53]
test r9b, r9b
je 0x1800301a4
mov rax, qword [rbp - 0x18]
mov r15, rax
mov qword [rbp - 0x78], rax
or r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], r11b
jne 0x180030194
add r14, rax
mov qword [rbp - 0x30], r14
mov r11b, byte [rsp + 0x50]
mov r8d, dword [rsp + 0x58]
test r11b, r11b
jne 0x1800302e1
test r8b, r8b
jne 0x1800302e1
xor r11d, r11d
test r12b, r12b
je 0x18003021c
mov ecx, r11d
mov dl, byte [r15]
lea r14, [r15 + 1]
test dl, dl
je 0x1800301ef
lea r8d, [r11 + 0xa]
lea eax, [rcx + 1]
cmp dl, r8b
cmovne eax, ecx
mov ecx, eax
mov dl, byte [r14]
add r14, rbx
test dl, dl
jne 0x1800301da
sub r14, rbx
mov eax, 0xa
cmp byte [r14], al
je 0x180030204
cmp byte [r14], 0xd
je 0x180030204
add ecx, ebx
movaps xmm14, xmm10
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [rsi + 0xf28]
jmp 0x180030252
test r9b, r9b
jne 0x180030240
cmp dword [rsi + 0x1228], r13d
jne 0x180030230
movsxd r14, dword [rdi + 0x10]
jmp 0x18003023d
or r14, 0xffffffffffffffff
inc r14
cmp byte [r15 + r14], r11b
jne 0x180030234
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x180030ad8
mov rcx, qword [0x1800e3b80]
mov rax, r9
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.1800087cc
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xa0]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rcx, qword [r10 + 0x298]
call fcn.180020bc0
xor r11d, r11d
jmp 0x180030ad3
xor r10d, r10d
test r9b, r9b
jne 0x1800302f4
movsxd r14, dword [rdi + 0x10]
add r14, r15
mov qword [rbp - 0x30], r14
mov r15, qword [rdi + 0x20]
movaps xmm5, xmm15
movaps xmm9, xmm15
mov r9, r10
mov r13, r10
mov edx, 0xfffffc18
mov r12d, edx
mov ecx, r10d
test r11b, r11b
je 0x180030323
movsxd rax, dword [rdi + 0x54]
lea r9, [r15 + rax*2]
or edx, 0xffffffff
mov ecx, ebx
test r8b, r8b
je 0x18003033e
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
cdqe
lea r13, [r15 + rax*2]
or r12d, 0xffffffff
add ecx, ebx
movzx eax, byte [rsp + 0x60]
add ecx, eax
mov ebx, r10d
mov rax, r15
movzx r8d, word [r15]
mov r11d, 0xa
test r8w, r8w
je 0x18003039f
lea esi, [r11 - 9]
cmp r8w, r11w
jne 0x18003038d
add ebx, esi
cmp edx, 0xffffffff
jne 0x180030379
cmp rax, r9
jb 0x180030379
mov edx, ebx
sub ecx, esi
test ecx, ecx
jle 0x18003039b
cmp r12d, 0xffffffff
jne 0x18003038d
cmp rax, r13
jb 0x18003038d
mov r12d, ebx
sub ecx, esi
test ecx, ecx
jle 0x18003039b
add rax, 2
movzx r8d, word [rax]
test r8w, r8w
jne 0x18003035f
mov rsi, qword [rbp - 0x68]
inc ebx
mov eax, ebx
cmp edx, 0xffffffff
cmovne eax, edx
mov dword [rbp - 0x4c], eax
cmp r12d, 0xffffffff
cmove r12d, ebx
mov r8, r9
cmp r9, r15
jbe 0x1800303ce
lea rax, [r8 - 2]
cmp word [rax], r11w
je 0x1800303ce
mov r8, rax
cmp rax, r15
ja 0x1800303bc
mov byte [rsp + 0x30], r10b
mov qword [rsp + 0x20], r10
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.18002c3f4
movss xmm7, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm12, dword [rbp - 0x4c]
cvtdq2ps xmm12, xmm12
mulss xmm12, xmm0
xor r11d, r11d
test r12d, r12d
js 0x18003045d
mov r8, r13
cmp r13, r15
jbe 0x180030424
lea ecx, [r11 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x180030424
mov r8, rax
cmp rax, r15
ja 0x180030413
mov byte [rsp + 0x30], r11b
mov qword [rsp + 0x20], r11
mov r9, r13
mov rdx, rsi
lea rcx, [rbp + 0x90]
call fcn.18002c3f4
movss xmm5, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm9, r12d
cvtdq2ps xmm9, xmm9
mulss xmm9, xmm0
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
je 0x180030479
movaps xmm14, xmm10
movd xmm8, ebx
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm0
mov r13b, byte [rsp + 0x50]
test r13b, r13b
je 0x1800305a4
cmp byte [rdi + 0xe84], r11b
je 0x1800305a4
test dword [rbp + 0x218], 0x1000
jne 0x1800304f0
movaps xmm0, xmm10
mulss xmm0, dword [0x1800d9200]
subss xmm10, dword [rsi + 0xb2c]
movss xmm2, dword [rdi + 0x50]
movaps xmm1, xmm7
comiss xmm2, xmm7
jbe 0x1800304d0
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
jmp 0x1800304de
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x1800304f4
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
jmp 0x1800304f4
mov dword [rdi + 0x50], r11d
test r12b, r12b
je 0x18003059d
movaps xmm0, xmm12
subss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
jbe 0x180030518
movaps xmm6, xmm15
maxss xmm6, xmm0
jmp 0x180030546
movss xmm2, dword [rsi + 0xb30]
addss xmm2, xmm2
movaps xmm1, xmm11
subss xmm1, xmm2
movaps xmm0, xmm12
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x180030546
movaps xmm6, xmm12
subss xmm6, xmm11
addss xmm6, xmm2
movss xmm2, dword [rsi + 0xb30]
comiss xmm15, xmm6
jbe 0x18003055a
movaps xmm2, xmm15
jmp 0x180030571
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm11
maxss xmm2, xmm15
minss xmm2, xmm6
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
movss xmm1, dword [rbp + 0xa4]
addss xmm1, xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rdi + 0xe84], r11b
movss xmm10, dword [rdi + 0x50]
movss xmm11, dword [0x1800d9248]
cmp byte [rsp + 0x58], r11b
je 0x18003084e
mov edx, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea r8, [r15 + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rbx, [r15 + rax*2]
test r13b, r13b
je 0x1800305e6
movaps xmm1, xmm11
jmp 0x1800305ee
movss xmm1, dword [0x1800d9214]
mov rax, qword [0x1800e3b80]
movdqu xmm0, xmmword [rax + 0xebc]
movups xmmword [rbp + 0x80], xmm0
mulss xmm1, dword [rax + 0xaf0]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x8c], xmm0
lea rcx, [rbp + 0x80]
call fcn.1800087cc
mov r15d, eax
test r12b, r12b
je 0x18003063c
movss dword [rbp - 0x40], xmm15
movaps xmm13, xmm15
jmp 0x180030645
movss xmm13, dword [0x1800d9270]
addss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
movss xmm6, dword [rbp + 0xa4]
addss xmm6, xmm9
subss xmm6, xmm15
mov qword [rsp + 0x70], r8
cmp r8, rbx
jae 0x180030848
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r12, qword [rbp - 0x48]
xor r13d, r13d
movaps xmm0, xmm3
addss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
ja 0x18003082e
comiss xmm4, xmm6
jbe 0x1800306d6
cmp r8, rbx
jae 0x180030810
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rsp + 0x70], r8
cmp ax, cx
je 0x180030810
cmp r8, rbx
jb 0x1800306b6
jmp 0x180030810
mov byte [rsp + 0x30], 1
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rdx, rsi
lea rcx, [rbp - 0x68]
call fcn.18002c3f4
movss xmm0, dword [rbp - 0x68]
comiss xmm15, xmm0
jb 0x180030736
mov rax, qword [rsi + 0xf20]
cmp dword [rax], 0x20
jle 0x180030719
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18003071e
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1800d9210]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x68], xmm0
movaps xmm2, xmm5
addss xmm2, xmm0
movaps xmm0, xmm13
addss xmm0, xmm6
addss xmm5, xmm15
movaps xmm1, xmm11
subss xmm1, dword [rsi + 0xf28]
addss xmm1, xmm6
maxss xmm5, dword [rbp + 0xa8]
movss xmm4, dword [rbp + 0xac]
maxss xmm1, xmm4
movss dword [rbp + 0x80], xmm5
movss dword [rbp + 0x84], xmm1
movss xmm9, dword [rbp + 0xb0]
minss xmm2, xmm9
movss xmm3, dword [rbp + 0xb4]
minss xmm0, xmm3
movss dword [rbp + 0x88], xmm2
movss dword [rbp + 0x8c], xmm0
comiss xmm0, xmm4
jbe 0x18003080b
comiss xmm3, xmm1
jbe 0x18003080b
comiss xmm2, dword [rbp + 0xa8]
jbe 0x18003080b
comiss xmm9, xmm5
jbe 0x18003080b
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm15
mov r9d, r15d
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x80]
mov rcx, qword [r12 + 0x298]
call fcn.180020828
movss xmm1, dword [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r8, qword [rsp + 0x70]
movss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
addss xmm6, dword [rsi + 0xf28]
cmp r8, rbx
jb 0x18003068f
movss xmm11, dword [0x1800d9248]
mov r14, qword [rbp - 0x30]
mov r12d, dword [rsp + 0x60]
mov r13b, byte [rsp + 0x50]
xor r11d, r11d
movss xmm13, dword [rbp - 0x28]
mov r15, qword [rbp - 0x78]
test r12b, r12b
jne 0x180030869
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x18003091c
mov rcx, qword [0x1800e3b80]
movzx eax, byte [rsp + 0x53]
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
movss xmm0, dword [rbp + 0xa0]
subss xmm0, xmm10
movss dword [rbp - 0x68], xmm0
movss xmm1, dword [rbp + 0xa4]
subss xmm1, xmm15
movss dword [rbp - 0x64], xmm1
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.1800087cc
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x68]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbx + 0x298]
call fcn.180020bc0
xor r11d, r11d
jmp 0x180030920
mov rbx, qword [rbp - 0x48]
test r13b, r13b
je 0x180030ac7
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], r11b
je 0x180030970
comiss xmm15, xmm0
jae 0x180030970
movss xmm1, dword [0x1800d9250]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x1800d9230]
xor r11d, r11d
comiss xmm1, xmm0
jae 0x180030970
mov cl, r11b
lea edi, [r11 + 1]
jmp 0x180030978
mov edi, 1
mov cl, dil
addss xmm7, dword [rbp + 0xa0]
subss xmm7, xmm10
cvttss2si eax, xmm7
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0xa4]
addss xmm0, xmm12
subss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x80], xmm6
movaps xmm1, xmm7
subss xmm1, dword [rsi + 0xf28]
addss xmm1, dword [0x1800d9210]
movss dword [rbp + 0x84], xmm1
movaps xmm3, xmm6
addss xmm3, xmm11
movss dword [rbp + 0x88], xmm3
movaps xmm2, xmm7
subss xmm2, dword [0x1800d9258]
movss dword [rbp + 0x8c], xmm2
test cl, cl
je 0x180030a82
comiss xmm2, dword [rbp + 0xac]
jbe 0x180030a82
movss xmm0, dword [rbp + 0xb4]
comiss xmm0, xmm1
jbe 0x180030a82
comiss xmm3, dword [rbp + 0xa8]
jbe 0x180030a82
movss xmm0, dword [rbp + 0xb0]
comiss xmm0, xmm6
jbe 0x180030a82
mov rax, qword [0x1800e3b80]
movdqu xmm0, xmmword [rax + 0xbcc]
movups xmmword [rbp - 0x28], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp - 0x1c], xmm0
movss dword [rbp - 0x68], xmm6
movss dword [rbp - 0x64], xmm2
lea rcx, [rbp - 0x28]
call fcn.1800087cc
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x80]
mov rcx, qword [rbx + 0x298]
call fcn.1800205dc
xor r11d, r11d
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
cmp byte [rsp + 0x64], r11b
jne 0x180030ad3
mov byte [rsi + 0x2e80], dil
subss xmm6, xmm11
movss xmm0, dword [rsi + 0xf28]
subss xmm7, xmm0
movss dword [rsi + 0x2e84], xmm6
movss dword [rsi + 0x2e88], xmm7
movss dword [rsi + 0x2e8c], xmm0
jmp 0x180030ad3
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
mov r9b, byte [rsp + 0x53]
mov ebx, dword [rbp - 0x50]
test bl, bl
je 0x180030aec
test r9b, r9b
jne 0x180030aec
call fcn.180013284
xor r11d, r11d
test r12b, r12b
je 0x180030b70
movss dword [rbp - 0x68], xmm14
addss xmm8, dword [rsi + 0xb30]
movss dword [rbp - 0x64], xmm8
lea rcx, [rbp - 0x68]
call fcn.18002abc4
mov ebx, dword [rsi + 0x1a44]
mov eax, ebx
or eax, 0x401
mov dword [rsi + 0x1a44], eax
call fcn.18000e438
mov eax, dword [rsi + 0x1a68]
and eax, 0x80
mov edi, dword [rbp + 0xc0]
or edi, eax
mov dword [rsi + 0x1a44], ebx
call fcn.1800157c8
xor r11d, r11d
mov ebx, dword [rbp - 0x50]
cmp dword [rsi + 0x1a60], r11d
jne 0x180030b70
mov eax, dword [rsp + 0x78]
mov dword [rsi + 0x1a60], eax
mov eax, dword [rbp + 0xbc]
mov dword [rsi + 0x1a64], eax
mov dword [rsi + 0x1a68], edi
cmp byte [rsi + 0x2f38], r11b
je 0x180030bb9
test bl, bl
je 0x180030b84
cmp byte [rsp + 0x53], 0
je 0x180030bb9
mov rax, qword [0x1800e3b80]
lea rcx, [0x1800c6290]
mov qword [rax + 0x2f58], rcx
lea rcx, [0x1800c628c]
mov qword [rax + 0x2f60], rcx
mov r8, r14
mov rdx, r15
lea rcx, [rbp + 0xa0]
call fcn.18001a2f8
comiss xmm13, xmm15
jbe 0x180030bf0
addss xmm12, dword [rsi + 0xb44]
addss xmm9, dword [rsi + 0xb30]
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
movaps xmm0, xmm12
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180008ee8
movzx edx, byte [rsp + 0x7f]
mov ecx, dword [rbp + 0x218]
test dl, dl
je 0x180030c1c
bt ecx, 0x1b
jb 0x180030c1c
mov rax, qword [0x1800e3b80]
mov word [rax + 0x1238], 0x101
or dword [rax + 0x1a68], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x5d]
cmovne eax, ecx
jmp 0x18002e348