Function at 0x180036ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x268
mov rbx, qword [0x180065d08]
mov r12, rcx
movaps xmmword [rax - 0x58], xmm6
mov r15, rbx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [rbx + 0x3ed8]
mov qword [rsp + 0x70], rbx
mov byte [rax + 0xb8], 1
mov rdi, qword [rbx + 0x3ed8]
mov qword [rbp - 0x78], rdi
cmp byte [rdi + 0xbb], 0
jne 0x180037125
mov r14d, dword [rbp + 0x1d8]
mov eax, r14d
shr eax, 0xe
mov esi, r14d
and al, 1
shr esi, 0x1a
mov dword [rsp + 0x60], eax
and sil, 1
mov eax, r14d
mov dword [rsp + 0x68], r14d
shr eax, 0xf
and al, 1
mov dword [rsp + 0x54], esi
mov dword [rbp - 0x58], eax
mov eax, r14d
shr eax, 0x10
not al
and al, 1
mov dword [rsp + 0x7c], eax
mov eax, r14d
shr eax, 0x12
and al, 1
mov dword [rbp - 4], eax
test sil, sil
je 0x180036d98
call fcn.180013e80
mov rbx, qword [0x180065d08]
movsxd rcx, dword [rdi + 0xf0]
xor edx, edx
mov rax, qword [rdi + 0xf8]
mov r8d, dword [rax + rcx*4 - 4]
mov rcx, r12
call fcn.180005c90
mov dword [rsp + 0x64], eax
mov r13d, eax
mov rcx, r12
cmp r12, 0xffffffffffffffff
jae 0x180036ddf
movzx edx, byte [rcx]
test dl, dl
je 0x180036ddf
cmp dl, 0x23
jne 0x180036dd6
cmp byte [rcx + 1], dl
je 0x180036ddf
inc rcx
cmp rcx, 0xffffffffffffffff
jb 0x180036dc5
movss xmm0, dword [rbx + 0x3c10]
xorps xmm11, xmm11
movss xmm1, dword [0x18005cbc0]
movss xmm9, dword [0x18005cb9c]
cmp r12, rcx
jne 0x180036e06
xorps xmm7, xmm7
jmp 0x180036e53
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 0x1b8]
mov rcx, qword [rbx + 0x3c08]
movaps xmm3, xmm9
mov qword [rsp + 0x28], r12
movaps xmm2, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.180029ce0
movss xmm0, dword [rbp + 0x1b8]
addss xmm0, dword [0x18005cab8]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x1bc]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 8], xmm7
test sil, sil
je 0x180036e6e
movss xmm0, dword [r15 + 0x3c10]
mulss xmm0, dword [0x18005cb28]
movss xmm6, dword [r15 + 0x3808]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.180013d00
mov rdx, qword [rbp + 0x1d0]
lea rcx, [rbp + 0x1b8]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.180013d80
comiss xmm7, xmm11
jbe 0x180036eb4
movaps xmm1, xmm7
addss xmm1, dword [r15 + 0x381c]
jmp 0x180036eb7
xorps xmm1, xmm1
movss xmm13, dword [rdi + 0x104]
lea rcx, [rbp + 0x1b8]
movss xmm7, dword [rdi + 0x100]
movaps xmm0, xmm13
movss xmm10, dword [rbp + 0x1b8]
movaps xmm2, xmm13
movss xmm12, dword [rbp + 0x1bc]
addss xmm1, xmm10
addss xmm2, xmm12
movss dword [rbp - 0x34], xmm13
addss xmm0, xmm12
movss dword [rbp - 0x18], xmm7
movaps xmm15, xmm7
movss dword [rbp - 0x14], xmm13
addss xmm15, xmm10
movss dword [rbp - 0x70], xmm7
addss xmm1, xmm7
movss dword [rbp - 0x6c], xmm13
movss dword [rbp - 0x64], xmm2
mov rbx, rdi
subss xmm2, xmm13
movss dword [rbp - 0xc], xmm0
xorps xmm0, xmm0
mov qword [rbp - 0x50], rbx
movss dword [rbp - 0x38], xmm15
movss dword [rbp - 0x68], xmm1
subss xmm1, xmm7
movss dword [rbp - 0x10], xmm15
movss dword [rbp + 0x1bc], xmm2
movups xmmword [rbp + 0x80], xmm0
movss dword [rbp + 0x1b8], xmm1
movaps xmm1, xmm6
call fcn.1800138a0
test sil, sil
je 0x1800371cc
mov r9d, 0x400
lea r8, [rbp - 0x18]
mov edx, r13d
lea rcx, [rbp - 0x70]
call fcn.180013a10
test al, al
je 0x180037120
movups xmm0, xmmword [r15 + 0x4778]
mov rbx, qword [0x180065d08]
lea rdx, [rbp - 0x70]
mov r12d, dword [r15 + 0x4780]
movups xmmword [rbp + 0x80], xmm0
mov dword [rbp - 0x70], 3
movss dword [rdi + 0x100], xmm7
lea rcx, [rbx + 0x4828]
movss dword [rdi + 0x104], xmm13
movups xmm0, xmmword [rbx + 0x38d4]
movups xmmword [rbp - 0x6c], xmm0
call fcn.18001b110
movups xmm0, xmmword [r15 + 0x3914]
mov ecx, 7
movups xmmword [rbx + 0x38d4], xmm0
movss xmm1, dword [r15 + 0x380c]
call fcn.180006680
movss xmm1, dword [r15 + 0x3810]
mov ecx, 8
call fcn.180006680
mov rbx, qword [0x180065d08]
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], 2
movss xmm1, dword [rbx + 0x37d0]
lea rcx, [rbx + 0x4838]
movss xmm0, dword [rbx + 0x37d4]
movss dword [rbp - 0x4c], xmm1
movss dword [rbp - 0x48], xmm0
call fcn.18001b010
movss xmm15, dword [rbp - 0x10]
lea r8, [rbp + 0x1b8]
movss xmm1, dword [rbp - 0xc]
movaps xmm0, xmm15
movss xmm13, dword [rbp - 0x14]
xor edi, edi
movss xmm7, dword [rbp - 0x18]
subss xmm1, xmm13
mov rcx, qword [rbp + 0x1b0]
subss xmm0, xmm7
mov edx, r13d
movss dword [rbp - 0x38], xmm15
movss dword [rbp - 0x34], xmm13
mov qword [rbx + 0x37d0], rdi
movss dword [rbp + 0x1bc], xmm1
movss dword [rbp + 0x1b8], xmm0
mov dword [rsp + 0x20], 4
call fcn.18000ba00
lea ecx, [rdi + 3]
movzx ebx, al
call fcn.180006700
mov r8, qword [0x180065d08]
cmp dword [r8 + 0x4828], 1
jl 0x180037117
lea r9d, [rdi + 1]
nop dword [rax + rax]
movsxd rax, dword [r8 + 0x4828]
dec r9d
mov rcx, qword [r8 + 0x4830]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x38a4], xmm0
dec dword [r8 + 0x4828]
test r9d, r9d
jg 0x1800370e0
test bl, bl
jne 0x18003716d
call fcn.18000bc60
call fcn.180013fb0
xor al, al
lea r11, [rsp + 0x268]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rbx, qword [r15 + 0x3ed8]
mov qword [rbp - 0x50], rbx
movsx ecx, word [rbx + 0x15e]
movss xmm0, dword [rbx + 0x100]
mov eax, dword [rbx + 0x158]
bts ecx, eax
subss xmm10, dword [rbx + 0xac]
mov word [rbx + 0x15e], cx
addss xmm0, dword [r15 + 0x3804]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [r15 + 0x3808]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
jmp 0x180037217
bt r14d, 0x1c
jb 0x18003720e
mov r9d, 0x400
lea r8, [rbp - 0x18]
mov edx, r13d
lea rcx, [rbp - 0x70]
call fcn.180013a10
test al, al
je 0x180037125
movss xmm15, dword [rbp - 0x10]
movss xmm13, dword [rbp - 0x14]
movss xmm7, dword [rbp - 0x18]
movss dword [rbp - 0x38], xmm15
movss dword [rbp - 0x34], xmm13
mov r12d, dword [r15 + 0x4780]
xor edi, edi
mov r8d, dword [r15 + 0x477c]
lea rcx, [rbp - 0x18]
mov edx, r13d
movaps xmmword [rsp + 0x230], xmm8
call fcn.180008950
mov byte [rsp + 0x5d], al
test al, al
je 0x180037246
mov dword [r15 + 0x4c08], 1
mov rsi, qword [0x180065d08]
test r13d, r13d
je 0x180037264
cmp dword [rsi + 0x4c20], r13d
jne 0x180037264
add rsi, 0x4c18
jmp 0x180037267
mov rsi, rdi
mov r14d, dword [r15 + 0x3f38]
shr r12d, 8
and r12b, 1
mov dword [rbp - 0x54], r12d
cmp r14d, r13d
je 0x1800372a3
cmp dword [r15 + 0x48d0], r13d
jne 0x1800372a3
test byte [r15 + 0x48dc], 1
jne 0x18003729c
cmp dword [r15 + 0x48f4], 2
jne 0x1800372a3
mov byte [rsp + 0x50], 1
jmp 0x1800372a8
mov byte [rsp + 0x50], 0
test al, al
je 0x1800372bb
cmp byte [r15 + 0x3740], 0
je 0x1800372bb
mov r13b, 1
jmp 0x1800372be
xor r13b, r13b
mov r10d, dword [rsp + 0x54]
mov byte [rbp + 0x1b8], r13b
test r10b, r10b
je 0x18003730f
test rsi, rsi
je 0x18003730f
test r14d, r14d
jne 0x18003730f
movsxd rcx, dword [rbx + 0xf0]
xor edx, edx
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, str.SCROLLY
call fcn.180005c90
cmp dword [r15 + 0x3f68], eax
jne 0x18003730a
mov dil, 1
xor ebx, ebx
jmp 0x18003731f
mov r10d, dword [rsp + 0x54]
xor dil, dil
mov ebx, r14d
test r10b, r10b
je 0x18003735e
test rsi, rsi
je 0x18003735e
mov r15, qword [rbp - 0x50]
lea rcx, str.SCROLLY
movsxd rdx, dword [r15 + 0xf0]
mov rax, qword [r15 + 0xf8]
mov r8d, dword [rax + rdx*4 - 4]
xor edx, edx
call fcn.180005c90
mov r10d, dword [rsp + 0x54]
cmp ebx, eax
jne 0x180037362
movss xmm9, dword [r15 + 0x88]
mov cl, 1
mov byte [rsp + 0x51], cl
jmp 0x18003737c
mov r15, qword [rbp - 0x50]
xor cl, cl
mov byte [rsp + 0x51], cl
test r10b, r10b
je 0x180037378
movss xmm9, dword [r15 + 0x88]
jmp 0x18003737c
mov byte [rsp + 0x51], cl
test rsi, rsi
je 0x180037391
movzx eax, r10b
xor al, 1
cmp byte [rsi + 0x6b], al
je 0x180037391
mov r15b, 1
jmp 0x180037394
xor r15b, r15b
test r13b, r13b
jne 0x1800373bb
test dil, dil
jne 0x1800373bb
cmp byte [rsp + 0x50], dil
jne 0x1800373bb
test r12b, r12b
jne 0x1800373bb
mov byte [rbp + 0x1e0], r12b
test cl, cl
jne 0x1800373c2
mov byte [rsp + 0x53], cl
jmp 0x1800373d1
mov byte [rbp + 0x1e0], 1
mov r13d, dword [rsp + 0x64]
mov byte [rsp + 0x53], 1
cmp r14d, r13d
jne 0x1800373e2
xor r13b, r13b
test r15b, r15b
je 0x180037640
mov r13d, dword [rsp + 0x64]
mov rsi, qword [rsp + 0x70]
add rsi, 0x4c18
mov ecx, dword [rsi + 8]
mov dword [rsi + 0xe80], 0xbe99999a
call fcn.180036bc0
mov r10, qword [rbp + 0x1c0]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [r10 + rbx], 0
jne 0x180037410
mov ecx, dword [rsi + 0x3c]
lea edi, [rbx + 1]
cmp edi, ecx
jle 0x180037448
test ecx, ecx
je 0x180037433
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180037438
mov eax, 8
cmp eax, edi
lea rcx, [rsi + 0x38]
mov edx, edi
cmovg edx, eax
call fcn.18001b550
mov dword [rsi + 0x38], edi
mov rcx, qword [rsi + 0x40]
movsxd r8, edi
mov rdi, qword [rbp + 0x1c0]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
cmp dword [rsi + 8], r13d
jne 0x18003748e
test r15b, r15b
jne 0x18003748e
mov r12b, 1
cmp dword [rsi + 0x10], ebx
jne 0x18003748e
cmp byte [rsi + 0x48], r15b
je 0x180037491
mov rcx, qword [rsi + 0x30]
mov rdx, rdi
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x180037491
xor r12b, r12b
movsxd r14, dword [rbp + 0x1c8]
mov dword [rsi + 8], r13d
mov ecx, dword [rsi + 0x1c]
lea ebx, [r14 + 1]
cmp ebx, ecx
jle 0x1800374cb
test ecx, ecx
je 0x1800374b6
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800374bb
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.18001b5e0
mov dword [rsi + 0x18], ebx
mov ecx, dword [rsi + 0x2c]
test ecx, ecx
jns 0x1800374ee
mov eax, ecx
cdq
sub eax, edx
xor edx, edx
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x28]
test eax, eax
cmovg edx, eax
call fcn.18001b550
mov rcx, qword [rbp + 0x1c0]
xor edx, edx
mov dword [rsi + 0x28], edx
dec r14
mov r15, qword [rsi + 0x20]
mov rdi, rcx
mov byte [rsi + 0x48], dl
mov rbx, r15
lea r14, [r15 + r14*2]
cmp r15, r14
jae 0x18003754c
cmp byte [rdi], 0
je 0x180037543
xor r8d, r8d
lea rcx, [rbp + 0x1e8]
mov rdx, rdi
call fcn.180005d40
movsxd rcx, eax
movzx eax, word [rbp + 0x1e8]
add rdi, rcx
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x180037513
mov rcx, qword [rbp + 0x1c0]
xor edx, edx
mov r10d, dword [rsp + 0x54]
sub edi, ecx
mov word [rbx], dx
sub rbx, r15
sar rbx, 1
mov dword [rsi + 0xc], ebx
mov dword [rsi + 0x10], edi
test r12b, r12b
je 0x18003758b
cmp dword [rsi + 0x54], ebx
mov ecx, ebx
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], ebx
mov dword [rsi + 0x54], ecx
mov ecx, ebx
cmovl ecx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], ebx
mov dword [rsi + 0x58], ecx
cmovl ebx, dword [rsi + 0x5c]
mov dword [rsi + 0x5c], ebx
jmp 0x1800375d2
movzx eax, r10b
mov qword [rsi + 0x50], 0
xor al, 1
mov dword [rsi + 0xe72], 0x630000
mov byte [rsi + 0x6b], al
mov dword [rsi + 0xe78], edx
mov dword [rsi + 0xe7c], 0x3e7
mov qword [rsi + 0x58], 0
mov word [rsi + 0x69], 1
mov dword [rsi + 0x70], edx
mov byte [rsi + 0x68], 0
mov byte [rsi + 0x60], 0
mov dword [rsi + 0x64], edx
xor r13b, r13b
test r10b, r10b
jne 0x180037629
mov r13d, dword [rsp + 0x68]
shr r13d, 4
and r13b, 1
cmp byte [rsp + 0x50], r10b
je 0x180037604
test r12b, r12b
je 0x180037601
mov rax, qword [rsp + 0x70]
test byte [rax + 0x48dc], 4
jne 0x180037604
mov r13b, 1
cmp byte [rbp - 0x54], 0
movzx edi, byte [rbp + 0x1b8]
jne 0x180037624
test dil, dil
je 0x180037630
mov rax, qword [rsp + 0x70]
cmp byte [rax + 0xe1c], 0
je 0x180037630
mov r13b, 1
jmp 0x180037630
movzx edi, byte [rbp + 0x1b8]
test dword [rsp + 0x68], 0x2000
je 0x180037647
mov byte [rsi + 0x60], 1
jmp 0x180037647
movzx edi, byte [rbp + 0x1b8]
mov r12, qword [rsp + 0x70]
mov ebx, dword [rsp + 0x64]
movzx r14d, byte [rbp + 0x1e0]
movzx r15d, byte [r12 + 0x59]
mov eax, dword [r12 + 0x3f38]
mov byte [rsp + 0x78], r15b
cmp eax, ebx
je 0x1800376b7
test r14b, r14b
je 0x1800377c9
mov rbx, qword [rbp - 0x78]
mov ecx, dword [rsp + 0x64]
mov rdx, rbx
call fcn.180008590
mov ecx, dword [rsp + 0x64]
mov rdx, rbx
call fcn.180015860
xor edx, edx
mov rcx, rbx
call fcn.180010c20
mov eax, dword [r12 + 0x3f38]
mov ebx, dword [rsp + 0x64]
mov r10d, dword [rsp + 0x54]
cmp eax, ebx
jne 0x1800377c9
test dil, dil
je 0x1800376d8
mov rcx, qword [0x180065d08]
mov edx, 0x281
call fcn.180004c50
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], 0
mov eax, dword [r12 + 0x4748]
mov r11d, dword [rsp + 0x68]
or eax, 3
mov dword [r12 + 0x4748], eax
test r10b, r10b
jne 0x1800376fa
test r11b, r11b
jns 0x180037705
or eax, 0xc
mov dword [r12 + 0x4748], eax
mov r9, qword [0x180065d08]
mov edx, 0x207
mov rcx, r9
call fcn.180004c50
mov edx, 0x208
mov rcx, r9
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], 0
call fcn.180004c50
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], 0
test r10b, r10b
je 0x180037771
mov edx, 0x205
mov rcx, r9
call fcn.180004c50
mov edx, 0x206
mov rcx, r9
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], 0
call fcn.180004c50
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], 0
test r15b, r15b
je 0x180037792
mov rcx, qword [0x180065d08]
mov edx, 0x4000
call fcn.180004c50
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], 0
test r11d, 0x440
je 0x1800377c9
mov ecx, 0x200
call fcn.180011960
mov rdx, qword [0x180065d08]
lea ecx, [rbx - 1]
cmp ecx, 0xfffffffd
mov ecx, ebx
jbe 0x1800377bc
mov ecx, dword [rdx + 0x4754]
cmp byte [rax + 4], 0
jbe 0x1800377c9
mov dword [rax + 0xc], ecx
mov byte [rax + 4], 0
mov eax, dword [r12 + 0x3f38]
cmp eax, ebx
jne 0x180037822
test rsi, rsi
jne 0x1800377eb
call fcn.180008690
mov eax, dword [r12 + 0x3f38]
cmp eax, ebx
jne 0x180037822
cmp byte [r12 + 0x3740], 0
mov byte [rbp + 0x1e8], 0
je 0x180037835
cmp byte [rsp + 0x53], 0
mov byte [rbp + 0x1e8], 0
jne 0x180037835
mov byte [rbp + 0x1e8], 0
test r14b, r14b
jne 0x180037835
mov byte [rbp + 0x1e8], 1
mov cl, 1
jmp 0x180037841
test rsi, rsi
je 0x180037839
cmp byte [rsp + 0x51], 0
mov byte [rbp + 0x1e8], 0
je 0x180037839
mov cl, 1
jmp 0x180037841
xor cl, cl
mov byte [rbp + 0x1e8], cl
mov byte [rbp + 0x1e0], cl
test rsi, rsi
je 0x180037861
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180037859
test r13b, r13b
je 0x180037861
test cl, cl
je 0x180037861
mov al, 1
jmp 0x180037863
xor al, al
mov edx, dword [rsp + 0x60]
mov byte [rbp + 0x1b8], al
mov byte [rsp + 0x52], 0
mov byte [rsp + 0x53], 0
test dl, dl
je 0x180037987
test rsi, rsi
je 0x180037987
test cl, cl
jne 0x180037894
test al, al
je 0x18003798f
mov r14d, dword [rbp + 0x1c8]
mov ecx, dword [rsi + 0x1c]
inc r14d
cmp r14d, ecx
jle 0x1800378cc
test ecx, ecx
je 0x1800378b5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800378ba
mov eax, 8
cmp eax, r14d
lea rcx, [rsi + 0x18]
mov edx, r14d
cmovg edx, eax
call fcn.18001b5e0
mov rcx, qword [rbp + 0x1c0]
mov dword [rsi + 0x18], r14d
mov rbx, rcx
mov r15, qword [rsi + 0x20]
movsxd r14, r14d
mov rdi, r15
dec r14
lea r14, [r15 + r14*2]
cmp r15, r14
jae 0x180037921
cmp byte [rbx], 0
je 0x18003791a
xor r8d, r8d
lea rcx, [rbp - 0x54]
mov rdx, rbx
call fcn.180005d40
movsxd rcx, eax
movzx eax, word [rbp - 0x54]
add rbx, rcx
mov word [rdi], ax
add rdi, 2
cmp rdi, r14
jb 0x1800378f0
mov rcx, qword [rbp + 0x1c0]
sub ebx, ecx
xor r8d, r8d
mov word [rdi], r8w
sub rdi, r15
movzx r15d, byte [rsp + 0x78]
sar rdi, 1
cmp dword [rsi + 0x54], edi
mov ecx, edi
mov edx, edi
mov dword [rsi + 0xc], edi
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], edi
mov dword [rsi + 0x54], ecx
mov ecx, r8d
cmovl edx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], edi
movzx r8d, byte [rbp + 0x1b8]
cmovl edi, dword [rsi + 0x5c]
cmp edx, edi
mov dword [rsi + 0x10], ebx
mov ebx, dword [rsp + 0x64]
cmovne ecx, r8d
mov dword [rsi + 0x58], edx
mov edx, dword [rsp + 0x60]
movzx eax, cl
mov byte [rbp + 0x1b8], cl
movzx ecx, byte [rbp + 0x1e0]
mov dword [rsi + 0x5c], edi
test cl, cl
jne 0x180037999
test al, al
jne 0x180037999
cmp dword [r12 + 0x3f38], ebx
jne 0x1800379ab
test dl, dl
jne 0x1800379ab
test rsi, rsi
je 0x1800379ab
mov byte [rbp - 0x7e], 1
cmp byte [rsi + 0x48], dl
jne 0x1800379af
mov byte [rbp - 0x7e], 0
cmp byte [rbp - 0x58], 0
je 0x180037a82
mov rdx, qword [r12 + 0x3c08]
cmp dword [rdx + 0x18], 0x2a
ja 0x1800379cd
mov r8, qword [rdx + 0x38]
jmp 0x1800379f1
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x1800379e5
mov r8, qword [rdx + 0x38]
jmp 0x1800379f1
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rdi, [r12 + 0x5ac0]
mov rbx, qword [0x180065d08]
mov dword [rdi + 0x14], eax
mov rax, qword [r12 + 0x3c08]
mov qword [rbp - 0x78], rdi
mov ecx, dword [rax + 0x64]
mov dword [rdi + 0x64], ecx
mov rax, qword [r12 + 0x3c08]
mov ecx, dword [rax + 0x68]
mov dword [rdi + 0x68], ecx
mov rax, qword [r12 + 0x3c08]
mov ecx, dword [rax + 0x6c]
mov dword [rdi + 0x6c], ecx
mov rax, qword [r12 + 0x3c08]
mov rcx, qword [rax + 0x40]
mov qword [rdi + 0x40], rcx
mov rcx, rdi
mov qword [rdi + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rdi + 0x10], eax
call fcn.180011090
lea rdx, [rbp - 0x78]
lea rcx, [rbx + 0x4848]
call fcn.18001b2b0
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rbx + 0x3ed8]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.180023430
mov r14d, dword [rsp + 0x64]
xor edi, edi
movss xmm0, dword [0x18005ca7c]
mov dword [rbp - 0x20], edi
cmp dword [r12 + 0x3f38], r14d
jne 0x180037f79
mov eax, dword [rsi + 0x10]
mov ebx, dword [rsp + 0x68]
mov byte [rsi + 0xe86], dil
mov dword [rsi + 0xe88], ebx
mov dword [rbp - 0x20], eax
mov eax, dword [rbp + 0x1c8]
mov dword [rsi + 0x4c], eax
movzx ecx, byte [r12 + 0xe08]
test cl, cl
sete al
mov byte [r12 + 0x3f45], al
movss xmm6, dword [r12 + 0xe00]
subss xmm6, xmm7
subss xmm6, dword [r12 + 0x3804]
addss xmm6, dword [rsi + 0x50]
cmp byte [rsp + 0x54], dil
je 0x180037b14
mov rax, qword [rbp - 0x50]
movss xmm2, dword [r12 + 0xe04]
subss xmm2, dword [rax + 0x104]
jmp 0x180037b22
movss xmm2, dword [r12 + 0x3c10]
mulss xmm2, xmm0
test r13b, r13b
je 0x180037b43
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], edi
mov byte [rsi + 0x6a], dil
mov byte [rsi + 0xe85], 1
jmp 0x180037e03
movzx edx, byte [rsp + 0x5d]
test dl, dl
je 0x180037cec
cmp word [r12 + 0x374a], 2
jb 0x180037cec
cmp byte [r12 + 0xe1d], dil
jne 0x180037cec
cmp byte [rsi + 0x6b], dil
je 0x180037b88
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rsi
call fcn.180034a30
movss xmm2, dword [rbp - 0x64]
movaps xmm1, xmm6
mov rcx, rsi
call fcn.180034fd0
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], eax
mov byte [rsi + 0x6a], dil
test byte [r12 + 0x374a], 1
jne 0x180037c5d
test eax, eax
je 0x180037bc6
movsxd rcx, eax
mov rax, qword [rsi + 0x20]
cmp word [rax + rcx*2 - 2], 0xa
je 0x180037bc6
xor cl, cl
jmp 0x180037bc8
mov cl, 1
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180037bd4
test cl, cl
jne 0x180037bff
mov r8d, 0x20000c
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180035430
mov eax, dword [rsi + 0x5c]
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
cmp dword [rsi + 0x58], eax
jne 0x180037c15
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180037c12
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x180037c15
mov dword [rsi + 0x54], eax
mov edx, dword [rsi + 0x54]
mov rcx, rsi
call fcn.180034c10
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x5c], eax
mov edx, dword [rsi + 0x5c]
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0xc]
cmp ecx, edx
je 0x180037c4c
cmp ecx, eax
jle 0x180037c3c
mov dword [rsi + 0x58], eax
mov ecx, eax
cmp edx, eax
jle 0x180037c45
mov dword [rsi + 0x5c], eax
mov edx, eax
cmp ecx, edx
jne 0x180037c4c
mov dword [rsi + 0x54], ecx
cmp dword [rsi + 0x54], eax
jle 0x180037df9
mov dword [rsi + 0x54], eax
jmp 0x180037df9
movsxd rcx, eax
lea rdx, [rsi + 0x54]
mov rax, qword [rsi + 0x20]
mov r8d, 0x200004
movzx ebx, word [rax + rcx*2]
mov rcx, rsi
call fcn.180035430
mov r8d, 0x600005
mov byte [rsi + 0xe84], 1
lea rdx, [rsi + 0x54]
mov dword [rsi + 0xe80], 0xbe99999a
mov rcx, rsi
call fcn.180035430
mov r8d, 0x600001
mov byte [rsi + 0xe84], 1
lea rdx, [rsi + 0x54]
mov dword [rsi + 0xe80], 0xbe99999a
mov rcx, rsi
call fcn.180035430
cmp bx, 0xa
je 0x180037cdc
cmp byte [rsp + 0x54], dil
je 0x180037cdc
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], ecx
mov dword [rsi + 0x54], ecx
mov ebx, dword [rsp + 0x68]
mov byte [rsi + 0xe84], dil
jmp 0x180037df9
movzx eax, byte [rsi + 0xe85]
cmp byte [r12 + 0x3740], dil
je 0x180037d8d
test al, al
jne 0x180037d8d
test dl, dl
je 0x180037e03
cmp byte [r12 + 0xe1d], dil
je 0x180037d59
cmp byte [rsi + 0x6b], dil
je 0x180037d35
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rsi
call fcn.180034a30
movss xmm2, dword [rbp - 0x64]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180037d43
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x58], eax
movaps xmm1, xmm6
mov rcx, rsi
call fcn.180034fd0
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
jmp 0x180037df9
cmp byte [rsi + 0x6b], dil
je 0x180037d73
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rsi
call fcn.180034a30
movss xmm2, dword [rbp - 0x64]
movaps xmm1, xmm6
mov rcx, rsi
call fcn.180034fd0
mov dword [rsi + 0x58], eax
mov byte [rsi + 0x6a], dil
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
jmp 0x180037df9
test cl, cl
je 0x180037e03
test al, al
jne 0x180037e03
movss xmm0, dword [r12 + 0xf0]
ucomiss xmm0, xmm11
jp 0x180037db9
jne 0x180037db9
movss xmm0, dword [r12 + 0xf4]
ucomiss xmm0, xmm11
jp 0x180037db9
je 0x180037e03
cmp byte [rsi + 0x6b], dil
je 0x180037dd3
xor r8d, r8d
lea rcx, [rbp - 0x70]
mov rdx, rsi
call fcn.180034a30
movss xmm2, dword [rbp - 0x64]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180037de1
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x58], eax
movaps xmm1, xmm6
mov rcx, rsi
call fcn.180034fd0
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
cmp byte [rsi + 0xe85], 0
je 0x180037e1e
cmp byte [r12 + 0xe08], 0
jne 0x180037e1e
mov byte [rsi + 0xe85], 0
bt ebx, 0xa
jae 0x180037e82
xor r8d, r8d
mov edx, r14d
mov ecx, 0x200
call fcn.1800137a0
mov ecx, dword [rsp + 0x60]
test al, al
je 0x180037e86
test cl, cl
jne 0x180037e86
mov edx, ebx
mov dword [rsp + 0x58], 9
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x20], 2
call fcn.1800367b0
test al, al
je 0x180037e82
mov r8d, dword [rsp + 0x58]
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180035430
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mov ecx, dword [rsp + 0x60]
cmp byte [r12 + 0xe1c], 0
je 0x180037e9c
cmp byte [r12 + 0xe1e], 0
je 0x180037eac
test r15b, r15b
je 0x180037eb0
cmp byte [r12 + 0xe1f], 0
je 0x180037eb0
mov al, 1
jmp 0x180037eb2
xor al, al
cmp dword [r12 + 0x37b8], 0
jle 0x180037f79
test al, al
jne 0x180037f46
test cl, cl
jne 0x180037f46
cmp byte [rsp + 0x50], cl
jne 0x180037f46
mov r15d, dword [rsp + 0x68]
xor eax, eax
mov ebx, eax
nop dword [rax]
mov rax, qword [r12 + 0x37c0]
movzx ecx, word [rbx + rax]
mov dword [rsp + 0x58], ecx
cmp ecx, 9
je 0x180037f30
mov edx, r15d
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x58]
call fcn.1800367b0
test al, al
je 0x180037f30
mov r8d, dword [rsp + 0x58]
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180035430
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
inc edi
add rbx, 2
cmp edi, dword [r12 + 0x37b8]
jl 0x180037ee0
movzx r15d, byte [rsp + 0x78]
mov ecx, dword [r12 + 0x37bc]
xor edi, edi
test ecx, ecx
jns 0x180037f71
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
lea rcx, [r12 + 0x37b8]
test eax, eax
cmovg edx, eax
call fcn.18001b5e0
mov dword [r12 + 0x37b8], edi
mov ecx, dword [r12 + 0x3f38]
xor r13b, r13b
mov byte [rsp + 0x51], r13b
mov eax, ecx
mov dword [rbp - 0x54], 0x201
cmp ecx, r14d
jne 0x180038b17
cmp byte [r12 + 0x3f44], r13b
jne 0x180038b17
cmp byte [rbp + 0x1e8], r13b
jne 0x180038b17
movaps xmm0, xmm12
mov ecx, 1
subss xmm0, dword [r12 + 0x3808]
divss xmm0, dword [r12 + 0x3c10]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
mov dword [rsi + 0x64], ecx
movzx eax, byte [r12 + 0xe1d]
neg al
mov dword [rsp + 0x58], ecx
sbb ebx, ebx
and ebx, 0x400000
test r15b, r15b
je 0x180038027
movzx eax, byte [r12 + 0xe1e]
mov byte [rsp + 0x50], al
cmp byte [r12 + 0xe1f], r13b
je 0x180038034
cmp byte [r12 + 0xe1c], r13b
jne 0x180038034
test al, al
jne 0x180038034
mov byte [rsp + 0x5c], 1
jmp 0x180038039
movzx eax, byte [r12 + 0xe1c]
mov byte [rsp + 0x50], al
mov byte [rsp + 0x5c], r13b
mov r8d, 1
mov edx, r14d
mov ecx, 0xa39
call fcn.1800137a0
test al, al
jne 0x180038067
mov r8d, 1
mov edx, r14d
mov ecx, 0x220a
call fcn.1800137a0
test al, al
je 0x180038092
mov r12d, dword [rsp + 0x60]
mov r13d, dword [rbp - 0x58]
mov edi, dword [rsp + 0x54]
test r12b, r12b
jne 0x18003809f
test r13b, r13b
jne 0x18003809f
test dil, dil
je 0x18003808b
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x18003809f
mov byte [rsp + 0x79], 1
jmp 0x1800380a4
mov edi, dword [rsp + 0x54]
mov r12d, dword [rsp + 0x60]
mov r13d, dword [rbp - 0x58]
mov byte [rsp + 0x79], 0
xor r8d, r8d
mov edx, r14d
mov ecx, 0xa24
call fcn.1800137a0
test al, al
jne 0x1800380cc
xor r8d, r8d
mov edx, r14d
mov ecx, 0x1209
call fcn.1800137a0
test al, al
je 0x1800380e4
test r13b, r13b
jne 0x1800380e4
test dil, dil
je 0x1800380de
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x1800380e4
mov byte [rbp - 0x7f], 1
jmp 0x1800380e8
mov byte [rbp - 0x7f], 0
mov r8d, 1
mov edx, r14d
mov ecx, 0xa37
call fcn.1800137a0
test al, al
jne 0x180038116
mov r8d, 1
mov edx, r14d
mov ecx, 0x2209
call fcn.1800137a0
test al, al
je 0x180038120
mov byte [rsp + 0x5d], 1
test r12b, r12b
je 0x180038125
mov byte [rsp + 0x5d], 0
mov r8d, 1
mov edx, r14d
mov ecx, 0xa3b
call fcn.1800137a0
mov edi, dword [rsp + 0x7c]
test al, al
je 0x18003814e
test r12b, r12b
jne 0x18003814e
mov byte [rbp - 0x80], 1
test dil, dil
jne 0x180038152
mov byte [rbp - 0x80], 0
mov r8d, 1
mov edx, r14d
mov ecx, 0xa3a
call fcn.1800137a0
test al, al
jne 0x180038185
test r15b, r15b
je 0x180038194
mov r8d, 1
mov edx, r14d
mov ecx, 0x2a3b
call fcn.1800137a0
test al, al
je 0x180038194
test r12b, r12b
jne 0x180038194
test dil, dil
je 0x180038194
mov r12b, 1
jmp 0x180038197
xor r12b, r12b
xor r8d, r8d
mov edx, r14d
mov ecx, 0xa22
call fcn.1800137a0
movzx r13d, al
mov rax, qword [rsp + 0x70]
test byte [rax + 8], 2
je 0x1800381c1
test byte [rax + 0xc], 1
je 0x1800381c1
mov dil, 1
jmp 0x1800381c4
xor dil, dil
xor edx, edx
mov ecx, 0x20d
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
jne 0x1800381f1
xor edx, edx
mov ecx, 0x267
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
jne 0x1800381f1
xor r15b, r15b
jmp 0x1800381f4
mov r15b, 1
test dil, dil
je 0x180038224
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.180011c50
test al, al
jne 0x18003821f
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.180011c50
test al, al
je 0x180038224
mov r14b, 1
jmp 0x180038227
xor r14b, r14b
mov edx, dword [rsp + 0x64]
mov r8d, 1
mov ecx, 0x20e
call fcn.1800137a0
test al, al
jne 0x180038261
test dil, dil
je 0x18003825c
mov edx, dword [rsp + 0x64]
mov r8d, 1
mov ecx, 0x26c
call fcn.1800137a0
test al, al
jne 0x180038261
xor dil, dil
jmp 0x180038264
mov dil, 1
xor edx, edx
mov ecx, 0x201
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x1800382c4
cmp byte [rsp + 0x5c], 0
je 0x180038286
mov eax, 0x200004
jmp 0x180038298
cmp byte [rsp + 0x50], 0
mov eax, 0x200000
mov ecx, 0x20000c
cmovne eax, ecx
or ebx, eax
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.180035430
mov dword [rsi + 0xe80], 0xbe99999a
mov byte [rsi + 0xe84], 1
mov rdi, qword [rsp + 0x70]
jmp 0x180038acb
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x1800382fe
cmp byte [rsp + 0x5c], 0
je 0x1800382e8
mov ecx, 0x200005
or ebx, ecx
jmp 0x18003829a
cmp byte [rsp + 0x50], 0
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or ebx, ecx
jmp 0x18003829a
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x180038391
cmp byte [rsp + 0x54], 0
je 0x180038391
mov rdi, qword [rsp + 0x70]
cmp byte [rdi + 0xe1c], 0
je 0x18003835f
mov r8, qword [rbp - 0x50]
xor eax, eax
movss xmm0, dword [r8 + 0x88]
subss xmm0, dword [rdi + 0x3c10]
mov dword [r8 + 0xa0], eax
mov dword [r8 + 0xa8], eax
maxss xmm0, xmm11
movss dword [r8 + 0x98], xmm0
jmp 0x180038acb
movzx eax, byte [rsp + 0x5c]
lea r8d, [rax*4 + 0x200002]
or r8d, ebx
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180035430
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x180038acb
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x180038411
cmp byte [rsp + 0x54], 0
je 0x180038411
mov rdi, qword [rsp + 0x70]
cmp byte [rdi + 0xe1c], 0
je 0x1800383ff
mov rdx, qword [rbp - 0x50]
mov rax, qword [0x180065d08]
movss xmm0, dword [rdx + 0x88]
mov rcx, qword [rax + 0x3ed8]
xor eax, eax
addss xmm0, dword [rdi + 0x3c10]
minss xmm0, dword [rcx + 0x90]
mov dword [rdx + 0xa0], eax
mov dword [rdx + 0xa8], eax
movss dword [rdx + 0x98], xmm0
jmp 0x180038acb
movzx eax, byte [rsp + 0x5c]
lea r8d, [rax*4 + 0x200003]
jmp 0x18003836c
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x180038472
cmp byte [rsp + 0x54], 0
je 0x180038472
or ebx, 0x20000e
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.180035430
movd xmm0, dword [rsp + 0x58]
mov rdi, qword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mulss xmm0, dword [rdi + 0x3c10]
subss xmm9, xmm0
jmp 0x180038acb
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x1800384d3
cmp byte [rsp + 0x54], 0
je 0x1800384d3
or ebx, 0x20000f
lea rdx, [rsi + 0x54]
mov r8d, ebx
mov rcx, rsi
call fcn.180035430
movd xmm0, dword [rsp + 0x58]
mov rdi, qword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mulss xmm0, dword [rdi + 0x3c10]
addss xmm9, xmm0
jmp 0x180038acb
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x18003850b
mov rdi, qword [rsp + 0x70]
mov eax, ebx
or eax, 0x200006
or ebx, 0x200004
cmp byte [rdi + 0xe1c], 0
cmovne ebx, eax
mov r8d, ebx
jmp 0x18003836f
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x180038544
mov rdi, qword [rsp + 0x70]
mov eax, ebx
or eax, 0x200007
mov r8d, 0x200005
or r8d, ebx
cmp byte [rdi + 0xe1c], 0
cmovne r8d, eax
jmp 0x18003836f
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x1800385a3
cmp byte [rsp + 0x60], 0
jne 0x1800385a3
cmp byte [rsp + 0x79], 0
jne 0x1800385a3
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180038598
cmp byte [rsp + 0x50], 0
je 0x180038598
lea rdx, [rsi + 0x54]
mov r8d, 0x60000d
mov rcx, rsi
call fcn.180035430
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
or ebx, 0x200008
jmp 0x18003829a
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.180011c50
mov r8d, dword [rsp + 0x60]
test al, al
je 0x180038666
test r8b, r8b
jne 0x180038666
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x1800385fb
cmp byte [rsp + 0x50], r8b
je 0x18003860e
lea rdx, [rsi + 0x54]
mov r8d, 0x60000c
mov rcx, rsi
call fcn.180035430
mov byte [rsi + 0xe84], 1
mov dword [rsi + 0xe80], 0xbe99999a
mov rdi, qword [rsp + 0x70]
or ebx, 0x200009
mov r8d, ebx
jmp 0x18003836f
cmp byte [rsp + 0x78], 0
je 0x1800385fb
mov rdi, qword [rsp + 0x70]
cmp byte [rdi + 0xe1f], 0
je 0x180038600
cmp byte [rdi + 0xe1e], 0
jne 0x180038600
cmp byte [rdi + 0xe1c], 0
jne 0x180038600
lea rdx, [rsi + 0x54]
mov r8d, 0x600004
mov rcx, rsi
call fcn.180035430
or ebx, 0x200009
mov byte [rsi + 0xe84], 1
mov r8d, ebx
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x18003836f
test r15b, r15b
jne 0x180038a41
test r14b, r14b
jne 0x180038a41
test dil, dil
je 0x1800386e6
test dword [rsp + 0x68], 0x100000
mov r10, qword [rbp + 0x1c0]
je 0x1800386c3
movzx eax, byte [r10]
test al, al
jne 0x1800386b0
xor r8b, r8b
mov byte [rbp + 0x1e8], 1
mov byte [rbp + 0x1b8], r8b
test al, al
mov byte [rbp + 0x1e0], r8b
mov rdi, qword [rsp + 0x70]
setne r13b
mov byte [rsp + 0x51], r13b
jmp 0x180038ad5
mov rdi, qword [rsp + 0x70]
mov r13b, 1
xor cl, cl
mov byte [rsp + 0x51], r13b
xor dl, dl
mov byte [rbp + 0x1e8], r13b
mov byte [rbp + 0x1e0], dl
jmp 0x180038ae3
movzx eax, byte [rbp - 0x80]
test al, al
jne 0x180038a19
test r12b, r12b
jne 0x180038a19
test r13b, r13b
je 0x180038723
mov rdi, qword [rsp + 0x70]
xor eax, eax
mov dword [rsi + 0x58], eax
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], r12b
mov byte [rsi + 0xe84], 1
jmp 0x180038acb
movzx r12d, byte [rsp + 0x79]
test r12b, r12b
jne 0x1800388c1
cmp byte [rbp - 0x7f], r12b
jne 0x1800388c1
cmp byte [rsp + 0x5d], r12b
je 0x1800382ba
mov rcx, qword [0x180065d08]
mov rax, qword [rcx + 0xa8]
test rax, rax
je 0x180038778
mov rcx, qword [rcx + 0xb8]
call rax
mov rbx, rax
test rax, rax
je 0x1800382ba
mov rcx, qword [0x180065d08]
jmp 0x18003877f
lea rbx, [0x1800569f6]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x180038786
test rcx, rcx
je 0x18003879a
inc dword [rcx + 0xec]
mov rdx, qword [0x180065cf8]
movsxd rcx, eax
lea rcx, [rcx*2 + 2]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
xor r12d, r12d
mov qword [rbp - 0x78], rax
mov r15, rax
mov r14d, r12d
cmp byte [rbx], r12b
je 0x180038817
mov r15d, dword [rsp + 0x68]
mov rdi, rax
nop dword [rax + rax]
xor r8d, r8d
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.180005d40
movsxd rcx, eax
mov edx, r15d
add rbx, rcx
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x58]
call fcn.1800367b0
test al, al
je 0x18003880e
movzx eax, word [rsp + 0x58]
inc r14d
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r12b
jne 0x1800387d0
mov r15, qword [rbp - 0x78]
movsxd rax, r14d
mov word [r15 + rax*2], r12w
test r14d, r14d
jle 0x180038891
mov edx, dword [rsi + 0x5c]
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0xc]
cmp ecx, edx
je 0x18003884a
cmp ecx, eax
jle 0x18003883a
mov dword [rsi + 0x58], eax
mov ecx, eax
cmp edx, eax
jle 0x180038843
mov dword [rsi + 0x5c], eax
mov edx, eax
cmp ecx, edx
jne 0x18003884a
mov dword [rsi + 0x54], ecx
cmp dword [rsi + 0x54], eax
jle 0x180038852
mov dword [rsi + 0x54], eax
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180035390
mov edx, dword [rsi + 0x54]
mov r9d, r14d
mov r8, r15
mov rcx, rsi
call fcn.180034e40
test al, al
je 0x18003888a
mov edx, dword [rsi + 0x54]
lea rcx, [rsi + 0x54]
mov r8d, r14d
call fcn.180036640
add dword [rsi + 0x54], r14d
mov byte [rsi + 0x6a], r12b
mov byte [rsi + 0xe84], 1
test r15, r15
je 0x1800388a8
mov rax, qword [0x180065d08]
test rax, rax
je 0x1800388a8
dec dword [rax + 0xec]
mov rdx, qword [0x180065cf8]
mov rcx, r15
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rdi, qword [rsp + 0x70]
jmp 0x180038acb
mov rdi, qword [rsp + 0x70]
cmp qword [rdi + 0xb0], 0
je 0x1800389cc
mov ecx, dword [rsi + 0x5c]
mov eax, dword [rsi + 0x58]
cmp eax, ecx
je 0x1800388eb
mov edx, ecx
cmovl ecx, eax
cmovge edx, eax
xor r13d, r13d
jmp 0x1800388f4
mov edx, dword [rsi + 0xc]
xor r13d, r13d
mov ecx, r13d
mov rax, qword [rsi + 0x20]
mov r9d, 0x800
movsxd r14, edx
mov r10d, 0x80
movsxd r15, ecx
mov ecx, r13d
lea r8, [rax + r14*2]
lea rdx, [rax + r15*2]
test r8, r8
je 0x18003891f
cmp rdx, r8
jae 0x180038942
movzx eax, word [rdx]
test ax, ax
je 0x180038942
add rdx, 2
cmp ax, r10w
jae 0x180038935
inc ecx
jmp 0x180038915
cmp ax, r9w
sbb eax, eax
add eax, 3
add ecx, eax
jmp 0x180038915
mov rax, qword [0x180065d08]
lea edi, [rcx + 1]
test rax, rax
je 0x180038957
inc dword [rax + 0xec]
mov rdx, qword [0x180065cf8]
movsxd rcx, edi
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rcx, qword [rsi + 0x20]
mov edx, edi
mov rbx, rax
lea r9, [rcx + r14*2]
lea r8, [rcx + r15*2]
mov rcx, rax
call fcn.180005fb0
mov r9, qword [0x180065d08]
mov rax, qword [r9 + 0xb0]
test rax, rax
je 0x1800389a5
mov rcx, qword [r9 + 0xb8]
mov rdx, rbx
call rax
mov r9, qword [0x180065d08]
test rbx, rbx
je 0x1800389b6
test r9, r9
je 0x1800389b6
dec dword [r9 + 0xec]
mov rdx, qword [0x180065cf8]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rdi, qword [rsp + 0x70]
jmp 0x1800389cf
xor r13d, r13d
test r12b, r12b
je 0x180038acb
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x1800389f1
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], r13d
mov byte [rsi + 0x6a], 0
mov byte [rsi + 0xe84], 1
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180038acb
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180035390
mov byte [rsi + 0x6a], 0
jmp 0x180038acb
mov r8d, eax
lea rdx, [rsi + 0x54]
xor r8d, 1
mov rcx, rsi
add r8d, 0x20000a
call fcn.180035430
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x1800382a9
mov edx, dword [rsp + 0x68]
mov eax, edx
mov ecx, dword [rsp + 0x54]
mov rdi, qword [rsp + 0x70]
shr eax, 0xb
and al, 1
test cl, cl
je 0x180038a71
test r14b, r14b
jne 0x180038a71
movzx ecx, byte [rdi + 0xe1c]
test al, al
je 0x180038a93
test cl, cl
jne 0x180038a97
mov ecx, dword [rsp + 0x54]
cmp byte [rdi + 0x5c], 0
mov byte [rsp + 0x53], 1
je 0x180038ac4
test cl, cl
jne 0x180038ac4
xor eax, eax
mov byte [rsi + 0x6a], cl
mov dword [rsi + 0x58], eax
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
jmp 0x180038acb
test cl, cl
jne 0x180038a6d
test r8b, r8b
jne 0x180038acb
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0xa
mov dword [rsp + 0x20], 2
call fcn.1800367b0
test al, al
je 0x180038acb
mov r8d, dword [rsp + 0x58]
jmp 0x18003836f
mov byte [rbp + 0x1e8], 1
mov r10, qword [rbp + 0x1c0]
xor r13b, r13b
movzx ecx, byte [rbp + 0x1b8]
movzx edx, byte [rbp + 0x1e0]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180038b03
test dl, dl
je 0x180038b03
mov al, 1
or cl, al
mov eax, dword [rdi + 0x3f38]
mov byte [rbp + 0x1b8], cl
xor edi, edi
jmp 0x180038b1e
xor al, al
or cl, al
mov eax, dword [rdi + 0x3f38]
mov byte [rbp + 0x1b8], cl
xor edi, edi
jmp 0x180038b1e
mov r10, qword [rbp + 0x1c0]
mov r15d, dword [rsp + 0x64]
mov r12, rdi
mov qword [rbp - 0x78], rdi
mov r14d, edi
mov dword [rsp + 0x7c], edi
cmp eax, r15d
jne 0x180038df8
test r13b, r13b
je 0x180038d2b
cmp byte [rsp + 0x60], 0
jne 0x180038de7
test dword [rsp + 0x68], 0x100000
je 0x180038bc3
movsxd rbx, dword [rsi + 0xc]
lea rcx, [rsi + 0x74]
mov r8d, ebx
mov byte [rsp + 0x52], 1
xor r9d, r9d
lea r12, [0x1800569f6]
xor edx, edx
call fcn.1800362e0
mov r9, rax
test rax, rax
je 0x180038ba5
test ebx, ebx
jle 0x180038ba5
mov rdx, rdi
nop dword [rax + rax]
mov rcx, qword [rsi + 0x20]
movzx eax, word [rcx + rdx*2]
mov word [r9 + rdx*2], ax
inc rdx
cmp rdx, rbx
jl 0x180038b90
mov r8d, dword [rsi + 0xc]
xor edx, edx
mov rcx, rsi
call fcn.180034d70
mov qword [rsi + 0x58], 0
mov dword [rsi + 0x54], edi
jmp 0x180038d36
mov r9, qword [rsi + 0x40]
mov rax, r10
mov r8, r9
sub r8, r10
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180038be3
inc rax
test ecx, ecx
jne 0x180038bd0
test edx, edx
je 0x180038d36
mov r14d, dword [rsi + 0x38]
mov r12, r9
dec r14d
mov qword [rbp - 0x78], r9
mov dword [rsp + 0x7c], r14d
mov r15d, edi
mov byte [rsp + 0x52], 1
mov r13, rdi
mov qword [rbp - 0x70], 0
mov qword [rbp - 0x68], rdi
test r14d, r14d
jle 0x180038cde
movsxd rbx, r14d
mov rdi, r9
add rbx, r9
xor eax, eax
mov r14d, eax
nop dword [rax]
test rbx, rbx
je 0x180038c3a
cmp rdi, rbx
jae 0x180038c5a
cmp byte [rdi], 0
je 0x180038c5a
mov r8, rbx
lea rcx, [rsp + 0x58]
mov rdx, rdi
call fcn.180005d40
movsxd rcx, eax
add rdi, rcx
inc r14d
jmp 0x180038c30
lea r15d, [r14 + 1]
test r15d, r15d
jle 0x180038c7f
cmp r15d, 8
lea rcx, [rbp - 0x70]
mov edx, r15d
mov eax, 8
cmovl edx, eax
call fcn.18001b5e0
mov r13, qword [rbp - 0x68]
mov rdi, r12
mov r14, r13
movsxd r12, r15d
lea r12, [r12*2 - 2]
add r12, r13
cmp r13, r12
jae 0x180038ccf
test rbx, rbx
je 0x180038ca2
cmp rdi, rbx
jae 0x180038ccf
cmp byte [rdi], 0
je 0x180038ccf
mov r8, rbx
lea rcx, [rsp + 0x58]
mov rdx, rdi
call fcn.180005d40
movsxd rcx, eax
movzx eax, word [rsp + 0x58]
add rdi, rcx
mov word [r14], ax
add r14, 2
cmp r14, r12
jb 0x180038c98
mov r12, qword [rbp - 0x78]
xor edi, edi
mov word [r14], di
mov r14d, dword [rsp + 0x7c]
lea r9d, [r15 - 1]
test r14d, r14d
lea rdx, [rsi + 0x54]
mov r8, r13
cmovle r9d, edi
mov rcx, rsi
call fcn.1800366f0
test r13, r13
je 0x180038d1e
mov rax, qword [0x180065d08]
test rax, rax
je 0x180038d0f
dec dword [rax + 0xec]
mov rdx, qword [0x180065cf8]
mov rcx, r13
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
movzx r13d, byte [rsp + 0x51]
mov r15d, dword [rsp + 0x64]
jmp 0x180038d36
cmp byte [rsp + 0x60], 0
jne 0x180038e48
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x52], al
mov eax, dword [rsi + 0x18]
mov byte [rsi + 0x48], 1
mov ecx, dword [rsi + 0x2c]
mov dword [rsp + 0x7c], r14d
lea ebx, [rax*4 + 1]
mov qword [rbp - 0x78], r12
cmp ebx, ecx
jle 0x180038d81
test ecx, ecx
je 0x180038d6c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180038d71
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x28]
mov edx, ebx
cmovg edx, eax
call fcn.18001b550
mov dword [rsi + 0x28], ebx
mov r9, qword [rsi + 0x30]
mov r10, qword [rsi + 0x20]
movsxd r11, ebx
add r11, r9
lea rbx, [r11 - 1]
cmp r9, rbx
jae 0x180038dde
mov r15d, 0x80
movzx eax, word [r10]
test ax, ax
je 0x180038dd9
add r10, 2
mov r8d, eax
cmp eax, r15d
jae 0x180038dbe
mov byte [r9], r8b
inc r9
jmp 0x180038dd4
mov edx, r11d
mov rcx, r9
sub edx, r9d
dec edx
call fcn.180005ef0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x180038da1
mov r15d, dword [rsp + 0x64]
mov byte [r9], 0
test r13b, r13b
je 0x180038e48
cmp byte [rsp + 0x53], 0
je 0x180038df8
mov edi, dword [rsp + 0x68]
test dil, 0x20
jne 0x180038e4c
mov r8d, dword [rsp + 0x60]
mov r10, qword [rbp + 0x1c0]
mov r13, qword [rsp + 0x70]
mov edi, dword [rsp + 0x64]
cmp dword [r13 + 0x5aa8], edi
jne 0x1800392d4
cmp dword [r13 + 0x3f38], edi
je 0x1800392c9
mov rax, qword [0x180065d08]
mov ecx, dword [rax + 0x4780]
test cl, 0x20
je 0x180039254
shr ecx, 6
and cl, 1
jmp 0x18003926e
mov edi, dword [rsp + 0x68]
test edi, 0x801c0
je 0x180039201
xor r13d, r13d
mov ebx, r13d
test dil, 0x40
je 0x180038e83
xor r8d, r8d
mov edx, r15d
mov ecx, 0x200
call fcn.1800137a0
test al, al
je 0x180038e83
lea eax, [r13 + 0x40]
mov ebx, 0x200
jmp 0x180038eee
test dil, dil
jns 0x180038ed0
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x180038eac
mov r10d, 0x80
mov ebx, 0x203
mov eax, r10d
jmp 0x180038ef4
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.180011c50
test al, al
je 0x180038ed0
mov r10d, 0x80
mov ebx, 0x204
mov eax, r10d
jmp 0x180038ef4
mov eax, 0x80000
test eax, edi
je 0x180038ee1
cmp byte [rsi + 0xe86], bl
jne 0x180038eee
mov eax, 0x100
test eax, edi
je 0x180039201
mov r10d, 0x80
mov rcx, qword [rsp + 0x70]
mov dword [rbp + 8], eax
mov rax, qword [rbp + 0x1c0]
mov qword [rbp], rcx
mov dword [rbp + 0x18], r13d
mov qword [rbp + 0x31], r13
mov dword [rbp + 0x39], r13d
mov word [rbp + 0x3d], r13w
mov byte [rbp + 0x3f], r13b
mov dword [rbp + 0xc], edi
mov qword [rbp + 0x10], r13
cmp byte [rsp + 0x60], r13b
jne 0x180038f2e
mov rax, qword [rsi + 0x30]
mov r8, qword [rsi + 0x20]
mov r9d, 0x800
mov qword [rbp + 0x20], rax
mov rcx, r8
mov eax, dword [rsi + 0x10]
mov dword [rbp + 0x28], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbp + 0x2c], eax
movsxd rax, dword [rsi + 0x54]
mov dword [rbp + 0x1c], ebx
mov ebx, r13d
mov byte [rbp + 0x30], r13b
lea rdx, [r8 + rax*2]
nop dword [rax]
test rdx, rdx
je 0x180038f6a
cmp rcx, rdx
jae 0x180038f8d
movzx eax, word [rcx]
test ax, ax
je 0x180038f8d
add rcx, 2
cmp ax, r10w
jae 0x180038f80
inc ebx
jmp 0x180038f60
cmp ax, r9w
sbb eax, eax
add eax, 3
add ebx, eax
jmp 0x180038f60
movsxd rax, dword [rsi + 0x58]
mov rcx, r8
mov dword [rbp + 0x34], ebx
mov r15d, r13d
lea rdx, [r8 + rax*2]
nop
test rdx, rdx
je 0x180038faa
cmp rcx, rdx
jae 0x180038fcf
movzx eax, word [rcx]
test ax, ax
je 0x180038fcf
add rcx, 2
cmp ax, r10w
jae 0x180038fc1
inc r15d
jmp 0x180038fa0
cmp ax, r9w
sbb eax, eax
add eax, 3
add r15d, eax
jmp 0x180038fa0
movsxd rax, dword [rsi + 0x5c]
mov r12d, r13d
mov dword [rbp + 0x38], r15d
lea rcx, [r8 + rax*2]
nop
test rcx, rcx
je 0x180038fea
cmp r8, rcx
jae 0x180039010
movzx eax, word [r8]
test ax, ax
je 0x180039010
add r8, 2
cmp ax, r10w
jae 0x180039002
inc r12d
jmp 0x180038fe0
cmp ax, r9w
sbb eax, eax
add eax, 3
add r12d, eax
jmp 0x180038fe0
lea rcx, [rbp]
mov dword [rbp + 0x3c], r12d
call r13
movsxd rax, dword [rbp + 0x34]
mov rcx, qword [rbp + 0x20]
movzx edx, byte [rbp + 0x30]
cmp eax, ebx
jne 0x18003902f
test dl, dl
je 0x180039080
lea rdi, [rcx + rax]
mov rbx, rcx
mov r14d, r13d
nop dword [rax]
test rdi, rdi
je 0x18003904a
cmp rbx, rdi
jae 0x18003906a
cmp byte [rbx], r13b
je 0x18003906a
mov r8, rdi
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.180005d40
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x180039040
mov eax, dword [rbp + 0x34]
mov rcx, qword [rbp + 0x20]
movzx edx, byte [rbp + 0x30]
mov dword [rsi + 0x54], r14d
mov byte [rsi + 0xe84], 1
movsxd r13, dword [rbp + 0x38]
cmp r13d, r15d
jne 0x18003908d
test dl, dl
je 0x1800390da
cmp r13d, eax
jne 0x180039098
mov r14d, dword [rsi + 0x54]
jmp 0x1800390d6
xor eax, eax
lea rdi, [rcx + r13]
mov r14d, eax
mov rbx, rcx
test rdi, rdi
je 0x1800390ae
cmp rbx, rdi
jae 0x1800390ce
cmp byte [rbx], 0
je 0x1800390ce
mov r8, rdi
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.180005d40
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x1800390a4
mov rcx, qword [rbp + 0x20]
movzx edx, byte [rbp + 0x30]
mov dword [rsi + 0x58], r14d
movsxd rax, dword [rbp + 0x3c]
cmp eax, r12d
jne 0x1800390eb
test dl, dl
je 0x1800391f8
cmp eax, r13d
jne 0x1800390f9
mov r14d, dword [rsi + 0x58]
xor r13d, r13d
jmp 0x180039138
xor r13d, r13d
lea rdi, [rcx + rax]
mov r14d, r13d
mov rbx, rcx
test rdi, rdi
je 0x180039110
cmp rbx, rdi
jae 0x180039130
cmp byte [rbx], r13b
je 0x180039130
mov r8, rdi
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.180005d40
movsxd rcx, eax
add rbx, rcx
inc r14d
jmp 0x180039106
mov rcx, qword [rbp + 0x20]
movzx edx, byte [rbp + 0x30]
mov dword [rsi + 0x5c], r14d
test dl, dl
je 0x1800391f8
mov r8d, dword [rbp + 0x28]
mov rdx, rcx
mov rcx, rsi
call fcn.180036990
mov eax, dword [rbp - 0x20]
mov ebx, dword [rbp + 0x28]
cmp ebx, eax
jle 0x180039196
cmp byte [rbp - 4], 0
je 0x180039196
mov ecx, dword [rsi + 0x1c]
sub ebx, eax
add ebx, dword [rsi + 0x18]
cmp ebx, ecx
jle 0x180039193
test ecx, ecx
je 0x18003917e
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180039183
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.18001b5e0
mov dword [rsi + 0x18], ebx
mov r15, qword [rsi + 0x20]
movsxd r14, dword [rsi + 0x18]
mov rbx, r15
mov rdi, qword [rbp + 0x20]
dec r14
lea r14, [r15 + r14*2]
cmp r15, r14
jae 0x1800391db
cmp byte [rdi], 0
je 0x1800391db
xor r8d, r8d
lea rcx, [rbp - 0x20]
mov rdx, rdi
call fcn.180005d40
movsxd rcx, eax
movzx eax, word [rbp - 0x20]
add rdi, rcx
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x1800391b1
mov word [rbx], r13w
sub rbx, r15
mov eax, dword [rbp + 0x28]
sar rbx, 1
mov dword [rsi + 0xc], ebx
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xe80], 0xbe99999a
mov r14d, dword [rsp + 0x7c]
mov r12, qword [rbp - 0x78]
mov r8d, dword [rsp + 0x60]
mov r10, qword [rbp + 0x1c0]
test r8b, r8b
jne 0x180038e04
mov r9, qword [rsi + 0x30]
mov r8, r10
mov rax, r9
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180039236
inc rax
test ecx, ecx
jne 0x180039223
mov r8d, dword [rsp + 0x60]
test edx, edx
je 0x180038e04
mov r14d, dword [rsi + 0x10]
mov r12, r9
mov byte [rsp + 0x52], 1
jmp 0x180038e04
mov edx, dword [rax + 0x4778]
mov ecx, dword [rax + 0x3f68]
cmp ecx, edx
jne 0x1800392c9
test ecx, ecx
je 0x1800392c9
cmp dword [rax + 0x3f38], edx
je 0x1800392c9
cmp byte [rax + 0x3f6d], 0
jne 0x18003928b
cmp dword [rax + 0x3f38], 0
jne 0x1800392c9
cmp byte [rax + 0x3f48], 0
je 0x1800392c9
test r8b, r8b
jne 0x1800392c9
mov r9, qword [r13 + 0x5ab8]
mov r8, r10
mov rax, r9
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800392b3
inc rax
test ecx, ecx
jne 0x1800392a0
test edx, edx
je 0x1800392c9
mov r14d, dword [r13 + 0x5ab0]
mov r12, r9
dec r14d
mov byte [rsp + 0x52], 1
xor edx, edx
mov dword [r13 + 0x5aa8], edx
jmp 0x1800392d6
xor edx, edx
test r12, r12
je 0x18003937f
cmp byte [rbp - 4], 0
je 0x180039346
mov eax, dword [rsp + 0x68]
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x4c], eax
xorps xmm0, xmm0
lea eax, [r14 + 1]
mov qword [rbp + 0x58], rdx
cmp dword [rbp + 0x1c8], eax
movdqa xmmword [rbp + 0x70], xmm0
cmovge eax, dword [rbp + 0x1c8]
mov dword [rbp + 0x6c], eax
mov qword [rbp + 0x40], r13
mov dword [rbp + 0x48], 0x40000
mov qword [rbp + 0x60], r10
mov dword [rbp + 0x68], r14d
mov qword [rbp + 0x50], rdx
call rdx
mov ecx, dword [rbp + 0x6c]
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x1c0], rax
lea r14d, [rcx - 1]
cmp dword [rbp + 0x68], r14d
cmovl r14d, dword [rbp + 0x68]
jmp 0x18003934c
mov ecx, dword [rbp + 0x1c8]
lea eax, [r14 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x18003937f
mov r14, qword [rbp + 0x1c0]
jbe 0x180039377
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + r14 - 1], 0
jmp 0x180039386
mov r14, qword [rbp + 0x1c0]
cmp dword [r13 + 0x3f38], edi
jne 0x1800393aa
cmp byte [rbp + 0x1e8], 0
je 0x18003939f
call fcn.180008690
jmp 0x1800393aa
mov dword [r13 + 0x5e54], 1
mov r11d, dword [rsp + 0x54]
movaps xmmword [rsp + 0x1d0], xmm14
test r11b, r11b
jne 0x180039482
mov r8d, 1
lea rcx, [rbp - 0x18]
mov edx, edi
call fcn.180007160
mov rax, qword [0x180065d08]
lea rcx, [rbp - 0x70]
movups xmm0, xmmword [rax + 0x3914]
movups xmmword [rbp - 0x70], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37c8]
movss dword [rbp - 0x64], xmm0
call fcn.180006030
movss xmm0, dword [r13 + 0x380c]
mov r8d, eax
mov rdx, qword [rbp - 0x10]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm13
movq rcx, xmm0
call fcn.180006e60
mov r11d, dword [rsp + 0x54]
movaps xmm4, xmm10
mov r10, qword [rbp - 0x50]
addss xmm4, xmm7
movaps xmm14, xmm13
movss dword [rbp - 0x30], xmm7
addss xmm7, dword [r13 + 0x3804]
movaps xmm0, xmm13
movss dword [rbp - 0x2c], xmm13
addss xmm0, dword [r13 + 0x3808]
addss xmm14, xmm12
movss dword [rbp + 0x1e8], xmm4
movss dword [rbp - 0x28], xmm4
movss dword [rbp - 0x78], xmm7
movss dword [rbp - 0x74], xmm0
movss dword [rbp - 0x24], xmm14
jmp 0x1800394c3
mov r10, qword [rbp - 0x50]
movaps xmm0, xmm7
addss xmm0, xmm10
movss dword [rbp - 0x30], xmm7
movaps xmm14, xmm13
movss dword [rbp - 0x2c], xmm13
addss xmm14, xmm12
movss dword [rbp + 0x1e8], xmm0
movss dword [rbp - 0x28], xmm0
movss dword [rbp - 0x24], xmm14
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp - 0x78], xmm0
cmp byte [rbp - 0x7e], 0
lea rax, [rbp - 0x78]
movsd xmm0, qword [rax]
movaps xmm8, xmm11
movsd qword [rbp - 0x40], xmm0
movss dword [rsp + 0x7c], xmm11
movss dword [rsp + 0x58], xmm11
je 0x1800394f3
mov r14, qword [rsi + 0x30]
mov qword [rbp + 0x1c0], r14
movzx eax, byte [rbp + 0x1e0]
movzx ecx, byte [rbp + 0x1b8]
test al, al
jne 0x180039627
test cl, cl
jne 0x180039627
test r11b, r11b
je 0x18003957a
movzx edx, byte [r14]
lea r15, [r14 + 1]
xor esi, esi
mov ecx, esi
test dl, dl
je 0x180039546
nop word [rax + rax]
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r15]
cmovne eax, ecx
inc r15
mov ecx, eax
test dl, dl
jne 0x180039530
movzx eax, byte [r15 - 1]
dec r15
cmp al, 0xa
je 0x180039558
cmp al, 0xd
je 0x180039558
inc ecx
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
movss dword [rsp + 0x7c], xmm10
mulss xmm8, dword [r13 + 0x3c10]
movss dword [rsp + 0x58], xmm8
jmp 0x1800395b1
cmp dword [r13 + 0x3f38], edi
jne 0x180039589
movsxd r15, dword [rsi + 0x10]
jmp 0x18003959a
mov r15, 0xffffffffffffffff
inc r15
cmp byte [r14 + r15], 0
jne 0x180039590
add r15, r14
xor esi, esi
mov rax, r15
sub rax, r14
cmp rax, 0x200000
jge 0x180039e61
mov rax, qword [0x180065d08]
lea r8, [rbp - 0x30]
test r11b, r11b
lea rcx, [rbp - 0x70]
cmovne r8, rsi
movups xmm0, xmmword [rax + 0x38a4]
movups xmmword [rbp - 0x70], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37c8]
movss dword [rbp - 0x64], xmm0
call fcn.180006030
movss xmm2, dword [r13 + 0x3c10]
lea r9, [rbp - 0x40]
mov rdx, qword [r13 + 0x3c08]
mov rcx, qword [r10 + 0x298]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
call fcn.180026340
jmp 0x180039e61
movsxd r12, dword [rsi + 0x10]
xor r10d, r10d
mov r8d, 0xfffffc18
movaps xmm7, xmm11
movaps xmm6, xmm11
mov r9d, r10d
mov edi, r10d
mov ebx, r8d
lea r15, [r12 + r14]
mov r14, qword [rsi + 0x20]
mov edx, r10d
test al, al
je 0x180039664
movsxd rax, dword [rsi + 0x54]
lea edx, [r10 + 1]
lea r8d, [r10 - 1]
lea r9, [r14 + rax*2]
test cl, cl
je 0x180039680
mov ecx, dword [rsi + 0x5c]
mov ebx, 0xffffffff
cmp dword [rsi + 0x58], ecx
cmovl ecx, dword [rsi + 0x58]
inc edx
movsxd rax, ecx
lea rdi, [r14 + rax*2]
movzx ecx, word [r14]
movzx eax, r11b
add edx, eax
mov rax, r14
test cx, cx
je 0x1800396cf
cmp cx, 0xa
jne 0x1800396c2
inc r10d
cmp r8d, 0xffffffff
jne 0x1800396af
cmp rax, r9
jb 0x1800396af
dec edx
mov r8d, r10d
test edx, edx
jle 0x1800396cf
cmp ebx, 0xffffffff
jne 0x1800396c2
cmp rax, rdi
jb 0x1800396c2
dec edx
mov ebx, r10d
test edx, edx
jle 0x1800396cf
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x180039692
inc r10d
mov rdx, r9
cmp r8d, 0xffffffff
mov r11d, r10d
cmovne r11d, r8d
cmp ebx, 0xffffffff
cmove ebx, r10d
cmp r9, r14
jbe 0x180039703
nop dword [rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x180039703
mov rdx, rax
cmp rax, r14
ja 0x1800396f0
mov r8, qword [r13 + 0x3c08]
movaps xmm1, xmm11
movss xmm3, dword [r13 + 0x3c10]
movaps xmm13, xmm11
movaps xmm2, xmm3
divss xmm2, dword [r8 + 0x14]
cmp rdx, r9
jae 0x180039770
nop dword [rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x180039747
maxss xmm1, xmm13
movaps xmm13, xmm11
jmp 0x18003976b
cmp ecx, 0xd
je 0x18003976b
cmp ecx, dword [r8]
jge 0x18003975c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x180039762
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm13, xmm0
cmp rdx, r9
jb 0x180039730
movd xmm15, r11d
maxss xmm13, xmm1
cvtdq2ps xmm15, xmm15
mulss xmm15, xmm3
test ebx, ebx
js 0x1800397fd
mov rdx, rdi
cmp rdi, r14
jbe 0x1800397a3
nop
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x1800397a3
mov rdx, rax
cmp rax, r14
ja 0x180039790
movaps xmm1, xmm11
movaps xmm7, xmm11
cmp rdx, rdi
jae 0x1800397ee
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x1800397c6
maxss xmm1, xmm7
movaps xmm7, xmm11
jmp 0x1800397e9
cmp ecx, 0xd
je 0x1800397e9
cmp ecx, dword [r8]
jge 0x1800397db
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x1800397e1
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm7, xmm0
cmp rdx, rdi
jb 0x1800397b0
movd xmm6, ebx
maxss xmm7, xmm1
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm3
mov r11d, dword [rsp + 0x54]
test r11b, r11b
je 0x180039823
movd xmm8, r10d
cvtdq2ps xmm8, xmm8
movss dword [rsp + 0x7c], xmm10
mulss xmm8, xmm3
movss dword [rsp + 0x58], xmm8
movzx r9d, byte [rbp + 0x1e0]
test r9b, r9b
je 0x180039961
cmp byte [rsi + 0xe84], 0
je 0x180039961
test dword [rsp + 0x68], 0x1000
jne 0x18003989d
movss xmm2, dword [rsi + 0x50]
movaps xmm0, xmm10
comiss xmm2, xmm13
mulss xmm0, dword [0x18005ca68]
movaps xmm1, xmm13
subss xmm10, dword [r13 + 0x3804]
jbe 0x18003987d
subss xmm1, xmm0
movaps xmm0, xmm11
maxss xmm0, xmm1
jmp 0x18003988b
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x1800398a2
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x50], xmm0
jmp 0x1800398a2
xor eax, eax
mov dword [rsi + 0x50], eax
test r11b, r11b
je 0x180039947
movss xmm2, dword [r13 + 0x3808]
movaps xmm0, xmm15
subss xmm0, dword [r13 + 0x3c10]
comiss xmm9, xmm0
jbe 0x1800398d2
movaps xmm9, xmm11
maxss xmm9, xmm0
jmp 0x1800398fd
movaps xmm3, xmm2
movaps xmm1, xmm12
addss xmm3, xmm2
movaps xmm0, xmm15
subss xmm1, xmm3
subss xmm0, xmm1
comiss xmm0, xmm9
jb 0x1800398fd
movaps xmm9, xmm15
subss xmm9, xmm12
addss xmm9, xmm3
comiss xmm11, xmm9
jbe 0x180039909
movaps xmm2, xmm11
jmp 0x180039921
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm12
maxss xmm2, xmm11
minss xmm2, xmm9
movss xmm1, dword [rbp - 0x3c]
mov rax, qword [rbp - 0x50]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
addss xmm1, xmm0
movss dword [rbp - 0x3c], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rsi + 0xe84], 0
movss xmm0, dword [rbp - 0x28]
movss xmm14, dword [rbp - 0x24]
movss dword [rbp + 0x1e8], xmm0
cmp byte [rbp + 0x1b8], 0
movss xmm9, dword [rsi + 0x50]
movss xmm12, dword [0x18005cac0]
je 0x180039ca2
mov edx, dword [rsi + 0x5c]
mov eax, edx
mov ecx, dword [rsi + 0x58]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [r14 + rax*2]
movsxd rax, edx
lea rdi, [r14 + rax*2]
test r9b, r9b
je 0x1800399a5
movaps xmm1, xmm12
jmp 0x1800399ad
movss xmm1, dword [0x18005ca84]
mov rax, qword [0x180065d08]
lea rcx, [rbp - 0x70]
movups xmm0, xmmword [rax + 0x3b94]
mulss xmm1, dword [rax + 0x37c8]
movups xmmword [rbp - 0x70], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x64], xmm0
call fcn.180006030
mov r14d, eax
test r11b, r11b
je 0x1800399eb
movaps xmm10, xmm11
jmp 0x1800399fd
movss xmm10, dword [0x18005cbc0]
movss xmm11, dword [0x18005cae8]
movss xmm5, dword [rbp - 0x40]
movss xmm8, dword [rbp - 0x3c]
addss xmm7, xmm5
addss xmm8, xmm6
subss xmm7, xmm9
subss xmm8, dword [0x18005c9fc]
cmp rbx, rdi
jae 0x180039be7
movss xmm4, dword [r13 + 0x3c10]
movaps xmm2, xmm4
movaps xmm0, xmm14
addss xmm0, xmm2
comiss xmm8, xmm0
ja 0x180039be2
movss xmm6, dword [rbp - 0x2c]
comiss xmm6, xmm8
jbe 0x180039a7b
cmp rbx, rdi
jae 0x180039bc0
nop word [rax + rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x180039bc0
cmp rbx, rdi
jb 0x180039a60
jmp 0x180039bc0
mov rdx, qword [r13 + 0x3c08]
xorps xmm0, xmm0
xorps xmm3, xmm3
xorps xmm1, xmm1
divss xmm2, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x180039ae1
nop word [rax + rax]
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x180039ad4
cmp ecx, 0xd
je 0x180039acd
cmp ecx, dword [rdx]
jge 0x180039ac0
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x180039ac5
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rbx, rdi
jb 0x180039aa0
jmp 0x180039ade
xorps xmm3, xmm3
maxss xmm3, xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
maxss xmm1, xmm3
comiss xmm0, xmm1
jb 0x180039b15
cmp dword [rdx], 0x20
jle 0x180039afd
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x180039b02
movss xmm0, dword [rdx + 0x10]
mulss xmm0, dword [0x18005ca7c]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm3, dword [rbp + 0x1e8]
addss xmm1, xmm7
addss xmm7, dword [0x18005c9fc]
movaps xmm2, xmm10
movaps xmm0, xmm11
subss xmm2, xmm4
movss xmm4, dword [rbp - 0x30]
addss xmm0, xmm8
minss xmm1, xmm3
maxss xmm7, xmm4
addss xmm2, xmm8
minss xmm0, xmm14
movss dword [rbp - 0x68], xmm1
movss dword [rbp - 0x70], xmm7
maxss xmm2, xmm6
comiss xmm0, xmm6
movss dword [rbp - 0x6c], xmm2
movss dword [rbp - 0x64], xmm0
jbe 0x180039bc0
comiss xmm14, xmm2
jbe 0x180039bc0
comiss xmm1, xmm4
jbe 0x180039bc0
comiss xmm3, xmm7
jbe 0x180039bc0
xor eax, eax
lea r8, [rbp - 0x68]
mov dword [rsp + 0x28], eax
lea rdx, [rbp - 0x70]
mov rax, qword [rbp - 0x50]
xorps xmm0, xmm0
mov r9d, r14d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rax + 0x298]
call fcn.180025cc0
movss xmm0, dword [rbp - 0x28]
movss xmm14, dword [rbp - 0x24]
movss xmm5, dword [rbp - 0x40]
movss dword [rbp + 0x1e8], xmm0
movss xmm4, dword [r13 + 0x3c10]
movaps xmm7, xmm5
subss xmm7, xmm9
movaps xmm2, xmm4
addss xmm8, xmm4
cmp rbx, rdi
jb 0x180039a34
mov r11d, dword [rsp + 0x54]
xorps xmm11, xmm11
test r11b, r11b
jne 0x180039bfd
cmp r12, 0x200000
jge 0x180039cac
mov rax, qword [0x180065d08]
subss xmm5, xmm9
test r11b, r11b
lea r8, [rbp - 0x30]
lea rcx, [rbp - 0x70]
movups xmm0, xmmword [rax + 0x38a4]
movss dword [rbp + 0x1b8], xmm5
movups xmmword [rbp - 0x70], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37c8]
mov eax, 0
cmovne r8, rax
movss dword [rbp - 0x64], xmm0
movss xmm0, dword [rbp - 0x3c]
subss xmm0, xmm11
movss dword [rbp + 0x1bc], xmm0
call fcn.180006030
mov rbx, qword [rbp - 0x50]
lea r9, [rbp + 0x1b8]
mov r14, qword [rbp + 0x1c0]
movss xmm2, dword [r13 + 0x3c10]
mov rdx, qword [r13 + 0x3c08]
mov rcx, qword [rbx + 0x298]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm11
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
call fcn.180026340
jmp 0x180039cb7
movss xmm5, dword [rbp - 0x40]
jmp 0x180039beb
mov r14, qword [rbp + 0x1c0]
mov rbx, qword [rbp - 0x50]
cmp byte [rbp + 0x1e0], 0
je 0x180039e4f
movss xmm0, dword [r13 + 0x18]
addss xmm0, dword [rsi + 0xe80]
movss dword [rsi + 0xe80], xmm0
cmp byte [r13 + 0x5b], 0
je 0x180039d05
comiss xmm11, xmm0
jae 0x180039d05
movss xmm1, dword [0x18005cac8]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x18005caa4]
comiss xmm1, xmm0
jae 0x180039d05
xor cl, cl
jmp 0x180039d07
mov cl, 1
movss xmm0, dword [rbp - 0x40]
addss xmm0, xmm13
subss xmm0, xmm9
cvttss2si eax, xmm0
movss xmm0, dword [rbp - 0x3c]
addss xmm0, xmm15
movd xmm6, eax
cvtdq2ps xmm6, xmm6
subss xmm0, xmm11
movss dword [rbp - 0x70], xmm6
movaps xmm3, xmm6
addss xmm3, xmm12
cvttss2si eax, xmm0
movss dword [rbp - 0x68], xmm3
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movaps xmm1, xmm7
movaps xmm2, xmm7
subss xmm1, dword [r13 + 0x3c10]
subss xmm2, dword [0x18005cad0]
addss xmm1, dword [0x18005ca7c]
movss dword [rbp - 0x64], xmm2
movss dword [rbp - 0x6c], xmm1
test cl, cl
je 0x180039dff
comiss xmm2, dword [rbp - 0x2c]
jbe 0x180039dff
movss xmm0, dword [rbp - 0x24]
comiss xmm0, xmm1
jbe 0x180039dff
comiss xmm3, dword [rbp - 0x30]
jbe 0x180039dff
movss xmm0, dword [rbp - 0x28]
comiss xmm0, xmm6
jbe 0x180039dff
mov rax, qword [0x180065d08]
lea rcx, [rbp - 0x18]
movss dword [rbp + 0x1b8], xmm6
movss dword [rbp + 0x1bc], xmm2
movups xmm0, xmmword [rax + 0x38a4]
movups xmmword [rbp - 0x18], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37c8]
movss dword [rbp - 0xc], xmm0
call fcn.180006030
mov rcx, qword [rbx + 0x298]
lea rdx, [rbp - 0x70]
mov r9d, eax
movss dword [rsp + 0x20], xmm12
lea r8, [rbp + 0x1b8]
call fcn.180025a60
movss xmm13, dword [rbp - 0x34]
xor esi, esi
movss xmm15, dword [rbp - 0x38]
mov edi, dword [rsp + 0x64]
cmp byte [rsp + 0x60], sil
jne 0x180039e61
movss xmm0, dword [r13 + 0x3c10]
subss xmm6, xmm12
subss xmm7, xmm0
movss dword [r13 + 0x5be4], xmm0
mov byte [r13 + 0x5bd8], 1
movss dword [r13 + 0x5bdc], xmm6
movss dword [r13 + 0x5be0], xmm7
jmp 0x180039e61
movss xmm13, dword [rbp - 0x34]
xor esi, esi
movss xmm15, dword [rbp - 0x38]
mov edi, dword [rsp + 0x64]
mov ebx, dword [rbp - 0x58]
movaps xmm14, xmmword [rsp + 0x1d0]
test bl, bl
je 0x180039e76
call fcn.180011130
cmp byte [rsp + 0x54], 0
je 0x18003a034
mov rcx, qword [0x180065d08]
movss xmm9, dword [rsp + 0x58]
addss xmm9, dword [r13 + 0x3808]
movss xmm0, dword [rsp + 0x7c]
mov rax, qword [rcx + 0x3ed8]
movss dword [rbp + 0x1b8], xmm0
movss dword [rbp + 0x1bc], xmm9
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x180039fe3
movss xmm7, dword [rax + 0x100]
lea rcx, [rbp + 0x1b8]
movss xmm8, dword [rax + 0x104]
movaps xmm6, xmm7
movss xmm1, dword [0x18005cbc0]
addss xmm6, xmm0
addss xmm9, xmm8
call fcn.1800138a0
mov r10, qword [0x180065d08]
movaps xmm0, xmm7
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm8
shufps xmm0, xmm0, 0xc6
mov eax, dword [r10 + 0x4758]
movss xmm0, xmm6
or eax, dword [r10 + 0x4764]
shufps xmm0, xmm0, 0x27
mov dword [r10 + 0x477c], eax
movss xmm0, xmm9
mov rax, qword [r10 + 0x3ed8]
shufps xmm0, xmm0, 0x39
movups xmmword [r10 + 0x4784], xmm0
mov dword [r10 + 0x4778], esi
movups xmmword [r10 + 0x4794], xmm0
mov dword [r10 + 0x4780], esi
mov qword [r10 + 0x4760], 0
comiss xmm9, dword [rax + 0x23c]
movups xmmword [rbp - 0x70], xmm0
jbe 0x180039fae
movss xmm0, dword [rax + 0x244]
comiss xmm0, xmm8
jbe 0x180039fae
comiss xmm6, dword [rax + 0x238]
jbe 0x180039fae
movss xmm0, dword [rax + 0x240]
comiss xmm0, xmm7
jbe 0x180039fae
mov dword [r10 + 0x4780], 0x200
jmp 0x180039fbf
cmp byte [r10 + 0x5c98], 0
je 0x180039fe3
mov dword [rbp - 0x54], 1
mov r8b, 1
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x70]
call fcn.180011e50
mov ecx, dword [r10 + 0x4780]
test al, al
cmovne ecx, dword [rbp - 0x54]
mov dword [r10 + 0x4780], ecx
or dword [r13 + 0x4764], 0x401
call fcn.18000bc60
mov eax, dword [r13 + 0x4780]
mov ebx, dword [rbp + 0x88]
and eax, 0x80
or ebx, eax
call fcn.180013fb0
cmp dword [r13 + 0x4778], 0
jne 0x18003a031
mov eax, dword [rbp + 0x84]
mov dword [r13 + 0x477c], eax
mov dword [r13 + 0x4778], edi
mov dword [r13 + 0x4780], ebx
mov ebx, dword [rbp - 0x58]
cmp byte [r13 + 0x5c98], 0
movaps xmm8, xmmword [rsp + 0x230]
je 0x18003a07d
test bl, bl
jne 0x18003a07d
mov rax, qword [0x180065d08]
lea rcx, [0x18005b890]
mov r8, r15
mov rdx, r14
mov qword [rax + 0x5cb8], rcx
lea rcx, [0x18005b88c]
mov qword [rax + 0x5cc0], rcx
lea rcx, [rbp - 0x40]
call fcn.180019fd0
movss xmm0, dword [rbp - 8]
comiss xmm0, xmm11
jbe 0x18003a0b9
addss xmm15, dword [r13 + 0x381c]
addss xmm13, dword [r13 + 0x3808]
mov rdx, qword [rbp + 0x1b0]
mov r9b, 1
xor r8d, r8d
movaps xmm0, xmm15
unpcklps xmm0, xmm13
movq rcx, xmm0
call fcn.180006980
movzx r8d, byte [rsp + 0x52]
mov edx, dword [rsp + 0x68]
test r8b, r8b
je 0x18003a0f3
bt edx, 0x1b
jb 0x18003a0f3
mov rax, qword [0x180065d08]
mov ecx, dword [rax + 0x3f38]
cmp ecx, edi
je 0x18003a0e3
test ecx, ecx
jne 0x18003a0ec
mov word [rax + 0x3f48], 0x101
or dword [rax + 0x4780], 4
movzx ecx, byte [rsp + 0x53]
test dl, 0x20
mov eax, r8d
cmovne eax, ecx
jmp 0x180037127