Function at 0x18003313c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x278
mov r14, qword [0x1800536b0]
mov rsi, rcx
movaps xmmword [rax - 0x58], xmm6
mov ecx, 1
movaps xmmword [rax - 0x68], xmm7
xor r13d, r13d
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [r14 + 0x11e0]
mov qword [rbp - 0x10], r14
mov byte [rax + 0xb8], cl
mov rdi, qword [r14 + 0x11e0]
mov qword [rbp - 0x28], rdi
cmp byte [rdi + 0xbb], r13b
jne 0x1800333ba
mov ebx, dword [rbp + 0x1e8]
mov eax, ebx
shr eax, 0xe
mov r12d, ebx
and al, cl
shr r12d, 0x1a
mov dword [rsp + 0x5c], eax
and r12b, cl
mov eax, ebx
mov dword [rsp + 0x64], r12d
shr eax, 0xf
and al, cl
mov dword [rbp - 0x58], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x68], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rbp - 0x80], eax
test r12b, r12b
je 0x180033233
call fcn.180010120
mov rdx, rsi
mov rcx, rdi
call fcn.180005690
movss xmm0, dword [0x18004e080]
lea rcx, [rbp + 8]
mov r9d, 1
movss dword [rbp - 0x54], xmm0
xor r8d, r8d
movss dword [rsp + 0x20], xmm0
mov rdx, rsi
mov dword [rsp + 0x68], eax
mov r15d, eax
call fcn.1800084a4
test r12b, r12b
je 0x180033285
movss xmm0, dword [r14 + 0xf18]
mulss xmm0, dword [0x18004e000]
jmp 0x18003328a
movss xmm0, dword [rbp + 0xc]
movss xmm6, dword [r14 + 0xb10]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18000ff4c
mov rdx, qword [rbp + 0x1e0]
lea rcx, [rbp + 0x1c8]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18000ffbc
movss xmm14, dword [rbp + 8]
xorps xmm8, xmm8
comiss xmm14, xmm8
jbe 0x1800332db
movaps xmm1, xmm14
addss xmm1, dword [r14 + 0xb24]
jmp 0x1800332de
xorps xmm1, xmm1
movss xmm9, dword [rdi + 0x104]
lea rcx, [rbp + 0x1c8]
movss xmm7, dword [rdi + 0x100]
movaps xmm0, xmm9
movss xmm10, dword [rbp + 0x1c8]
movaps xmm2, xmm9
movss xmm11, dword [rbp + 0x1cc]
addss xmm1, xmm10
addss xmm2, xmm11
movss dword [rbp - 0x50], xmm9
addss xmm0, xmm11
movss dword [rbp - 0x78], xmm7
movaps xmm13, xmm7
movss dword [rbp - 0x74], xmm9
addss xmm13, xmm10
movss dword [rbp - 0x38], xmm7
addss xmm1, xmm7
movss dword [rbp - 0x34], xmm9
movss dword [rbp - 0x2c], xmm2
subss xmm2, xmm9
movss dword [rbp - 0x6c], xmm0
xorps xmm0, xmm0
mov qword [rbp - 0x60], rdi
movss dword [rbp - 0x40], xmm13
movss dword [rbp - 0x30], xmm1
subss xmm1, xmm7
movss dword [rbp - 0x70], xmm13
movss dword [rbp + 0x1cc], xmm2
movups xmmword [rbp + 0x90], xmm0
movss dword [rbp + 0x1c8], xmm1
movaps xmm1, xmm6
call fcn.18000fbec
test r12b, r12b
je 0x18003356e
mov r9d, 0x400
lea r8, [rbp - 0x78]
mov edx, r15d
lea rcx, [rbp - 0x38]
call fcn.18000fd40
test al, al
jne 0x18003340f
call fcn.180010248
xor al, al
lea r11, [rsp + 0x278]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movups xmm0, xmmword [r14 + 0x1a7c]
mov r13d, dword [r14 + 0x1a84]
lea rdx, [r14 + 0xc1c]
mov ecx, 3
movss dword [rdi + 0x100], xmm7
movups xmmword [rbp + 0x90], xmm0
movss dword [rdi + 0x104], xmm9
call fcn.180003ba8
movss xmm1, dword [r14 + 0xb14]
mov ecx, 7
call fcn.180003c58
movss xmm1, dword [r14 + 0xb18]
mov ecx, 8
call fcn.180003c58
and dword [rbp + 0x1c8], 0
lea rdx, [rbp + 0x1c8]
and dword [rbp + 0x1cc], 0
mov ecx, 2
call fcn.180003cd0
movss xmm13, dword [rbp - 0x70]
lea r8, [rbp + 0x1c8]
movss xmm1, dword [rbp - 0x6c]
movaps xmm0, xmm13
movss xmm9, dword [rbp - 0x74]
mov r9d, 1
movss xmm7, dword [rbp - 0x78]
subss xmm1, xmm9
subss xmm0, xmm7
movss dword [rbp - 0x40], xmm13
mov edx, r15d
movss dword [rbp - 0x50], xmm9
mov rcx, rsi
mov dword [rsp + 0x20], 4
movss dword [rbp + 0x1cc], xmm1
movss dword [rbp + 0x1c8], xmm0
call fcn.180008794
mov ecx, 3
mov bl, al
call fcn.180003d5c
mov ecx, 1
call fcn.180003c04
test bl, bl
jne 0x18003350f
call fcn.180008a00
jmp 0x1800333b5
mov rbx, qword [r14 + 0x11e0]
mov qword [rbp - 0x60], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
subss xmm10, dword [rbx + 0xac]
mov word [rbx + 0x15e], cx
movss xmm0, dword [r14 + 0xb0c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [r14 + 0xb10]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
jmp 0x1800335b9
bt ebx, 0x1c
jb 0x1800335af
mov r9d, 0x400
lea r8, [rbp - 0x78]
mov edx, r15d
lea rcx, [rbp - 0x38]
call fcn.18000fd40
test al, al
je 0x1800333ba
movss xmm13, dword [rbp - 0x70]
movss xmm9, dword [rbp - 0x74]
movss xmm7, dword [rbp - 0x78]
movss dword [rbp - 0x40], xmm13
movss dword [rbp - 0x50], xmm9
mov r13d, dword [r14 + 0x1a84]
mov rbx, rdi
mov r8d, dword [r14 + 0x1a80]
lea rcx, [rbp - 0x78]
mov edx, r15d
call fcn.180005cc4
xor r8d, r8d
mov byte [rsp + 0x60], al
mov cl, al
lea edx, [r8 + 1]
test al, al
je 0x1800335e4
mov dword [r14 + 0x1f18], edx
mov rsi, qword [0x1800536b0]
test r15d, r15d
je 0x180033602
cmp dword [rsi + 0x1f30], r15d
jne 0x180033602
add rsi, 0x1f28
jmp 0x180033605
mov rsi, r8
mov eax, dword [r14 + 0x1240]
shr r13d, 8
and r13b, dl
mov qword [rbp], rsi
cmp eax, r15d
je 0x180033640
cmp dword [r14 + 0x1be0], r15d
jne 0x180033640
test byte [r14 + 0x1bec], dl
jne 0x180033638
cmp dword [r14 + 0x1c04], 2
jne 0x180033640
mov byte [rbp + 0x1f8], dl
jmp 0x180033647
mov byte [rbp + 0x1f8], r8b
test cl, cl
je 0x180033657
mov r15b, dl
cmp byte [r14 + 0xa48], r8b
jne 0x18003365a
mov r15b, r8b
mov byte [rbp + 0x1c8], r15b
test r12b, r12b
je 0x180033691
test rsi, rsi
je 0x180033691
test eax, eax
jne 0x180033691
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.180005690
cmp dword [r14 + 0x1270], eax
jne 0x18003368e
mov ebx, 1
jmp 0x18003369e
xor r8d, r8d
mov bl, r8b
test r12b, r12b
je 0x1800336d0
test rsi, rsi
je 0x1800336d0
mov rcx, qword [rbp - 0x60]
lea rdx, str.SCROLLY
call fcn.180005690
xor r8d, r8d
cmp dword [r14 + 0x1240], eax
jne 0x1800336d0
lea eax, [r8 + 1]
mov byte [rsp + 0x58], r8b
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x54], r8b
jmp 0x1800336e6
mov byte [rsp + 0x58], r8b
mov cl, r8b
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x54], r8b
test r12b, r12b
je 0x1800336f4
mov rax, qword [rbp - 0x60]
movss xmm6, dword [rax + 0x88]
jmp 0x180033700
movss xmm6, dword [0x18004e05c]
mov byte [rsp + 0x51], cl
mov r9d, 1
test rsi, rsi
je 0x180033719
mov al, r12b
mov r12b, r9b
xor al, r9b
cmp byte [rsi + 0x6b], al
jne 0x18003371c
mov r12b, r8b
test r15b, r15b
jne 0x180033743
test bl, bl
jne 0x180033743
cmp byte [rbp + 0x1f8], r8b
jne 0x180033743
test r13b, r13b
jne 0x180033743
mov byte [rsp + 0x52], r8b
test cl, cl
jne 0x180033748
mov byte [rsp + 0x59], r8b
jmp 0x18003375a
mov byte [rsp + 0x52], r9b
mov eax, dword [rsp + 0x68]
mov byte [rsp + 0x59], r9b
cmp dword [r14 + 0x1240], eax
jne 0x180033763
test r12b, r12b
je 0x1800339ac
lea rsi, [r14 + 0x1f28]
mov ecx, dword [rsi + 8]
mov qword [rbp], rsi
mov dword [rsi + 0xe80], 0xbe99999a
call fcn.180033074
mov r8, qword [rbp + 0x1d0]
or rbx, 0xffffffffffffffff
xor eax, eax
inc rbx
cmp byte [r8 + rbx], al
jne 0x18003378d
mov ecx, dword [rsi + 0x3c]
lea edi, [rbx + 1]
cmp edi, ecx
jle 0x1800337c4
test ecx, ecx
je 0x1800337af
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800337b4
mov eax, 8
cmp eax, edi
lea rcx, [rsi + 0x38]
mov edx, edi
cmovg edx, eax
call fcn.180016b10
mov dword [rsi + 0x38], edi
mov rcx, qword [rsi + 0x40]
movsxd r8, edi
mov rdi, qword [rbp + 0x1d0]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x68]
xor r8d, r8d
cmp dword [rsi + 8], eax
jne 0x180033814
test r12b, r12b
jne 0x180033814
lea r15d, [r8 + 1]
cmp dword [rsi + 0x10], ebx
jne 0x180033814
cmp byte [rsi + 0x48], r8b
je 0x180033817
mov rcx, qword [rsi + 0x30]
mov rdx, rdi
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x180033817
mov r15b, r8b
mov ebx, dword [rbp + 0x1d8]
mov r12d, dword [rsp + 0x68]
inc ebx
mov dword [rsi + 8], r12d
mov ecx, dword [rsi + 0x1c]
mov qword [rbp - 0x38], r8
cmp ebx, ecx
jle 0x18003385a
test ecx, ecx
je 0x180033842
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180033847
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.180016b9c
xor r8d, r8d
mov dword [rsi + 0x18], ebx
mov ecx, dword [rsi + 0x2c]
test ecx, ecx
jns 0x180033881
mov eax, ecx
cdq
sub eax, edx
mov edx, r8d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x28]
test eax, eax
cmovg edx, eax
call fcn.180016b10
xor r8d, r8d
mov rbx, qword [rbp + 0x1d0]
lea rax, [rbp - 0x38]
mov edx, dword [rbp + 0x1d8]
xor r9d, r9d
mov dword [rsi + 0x28], r8d
mov rcx, qword [rsi + 0x20]
mov byte [rsi + 0x48], r8b
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1800029b8
mov ecx, dword [rbp - 0x38]
xor r8d, r8d
sub ecx, ebx
mov dword [rsi + 0xc], eax
mov dword [rsi + 0x10], ecx
mov edx, eax
lea r9d, [r8 + 1]
test r15b, r15b
je 0x1800338ed
cmp dword [rsi + 0x54], eax
mov ecx, eax
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], eax
mov dword [rsi + 0x54], ecx
cmovl eax, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], edx
mov ecx, dword [rsp + 0x64]
cmovl edx, dword [rsi + 0x5c]
mov dword [rsi + 0x5c], edx
mov dword [rsi + 0x58], eax
jmp 0x180033932
mov ecx, dword [rsp + 0x64]
mov al, cl
xor al, r9b
mov qword [rsi + 0x50], r8
mov byte [rsi + 0x6b], al
mov dword [rsi + 0xe72], 0x630000
mov dword [rsi + 0xe78], r8d
mov dword [rsi + 0xe7c], 0x3e7
mov qword [rsi + 0x58], r8
mov word [rsi + 0x69], 1
mov dword [rsi + 0x70], r8d
mov byte [rsi + 0x68], r8b
mov byte [rsi + 0x60], r8b
mov dword [rsi + 0x64], r8d
test cl, cl
jne 0x18003398f
mov r9d, dword [rbp + 0x1e8]
test r9b, 0x10
mov eax, dword [rsp + 0x54]
mov r9d, 1
movzx eax, al
cmovne eax, r9d
mov dword [rsp + 0x54], eax
cmp byte [rbp + 0x1f8], r8b
je 0x180033973
test r15b, r15b
je 0x18003396e
test byte [r14 + 0x1bec], 4
jne 0x180033973
mov byte [rsp + 0x54], r9b
test r13b, r13b
jne 0x18003398a
cmp byte [rbp + 0x1c8], r8b
je 0x18003398f
cmp byte [r14 + 0x124], r8b
je 0x18003398f
mov byte [rsp + 0x54], r9b
test dword [rbp + 0x1e8], 0x2000
mov rdi, qword [rbp - 0x28]
mov r15b, byte [rbp + 0x1c8]
je 0x1800339b1
mov byte [rsi + 0x60], r9b
jmp 0x1800339b1
mov r12d, dword [rsp + 0x68]
mov r13b, byte [r14 + 0x59]
mov bl, byte [rsp + 0x52]
mov byte [rsp + 0x78], r13b
cmp dword [r14 + 0x1240], r12d
je 0x1800339eb
test bl, bl
je 0x1800339eb
mov rdx, rdi
mov ecx, r12d
call fcn.180005904
mov rdx, rdi
mov ecx, r12d
call fcn.180011934
xor edx, edx
mov rcx, rdi
call fcn.18000d154
xor edi, edi
cmp dword [r14 + 0x1240], r12d
jne 0x180033b2d
test r15b, r15b
je 0x180033a1b
mov rcx, qword [0x1800536b0]
mov edx, 0x281
call fcn.180001f48
mov dword [rax + 4], r12d
mov dword [rax], r12d
mov word [rax + 8], di
mov eax, dword [r14 + 0x1a50]
mov r10d, dword [rsp + 0x64]
or eax, 3
mov r11d, dword [rbp + 0x1e8]
mov dword [r14 + 0x1a50], eax
test r10b, r10b
jne 0x180033a42
test r11b, r11b
jns 0x180033a4c
or eax, 0xc
mov dword [r14 + 0x1a50], eax
mov r9, qword [0x1800536b0]
mov edx, 0x207
mov rcx, r9
call fcn.180001f48
mov edx, 0x208
mov rcx, r9
mov dword [rax + 4], r12d
mov dword [rax], r12d
mov word [rax + 8], di
call fcn.180001f48
mov dword [rax + 4], r12d
mov dword [rax], r12d
mov word [rax + 8], di
test r10b, r10b
je 0x180033ab8
mov edx, 0x205
mov rcx, r9
call fcn.180001f48
mov edx, 0x206
mov rcx, r9
mov dword [rax + 4], r12d
mov dword [rax], r12d
mov word [rax + 8], di
call fcn.180001f48
mov dword [rax + 4], r12d
mov dword [rax], r12d
mov word [rax + 8], di
test r13b, r13b
je 0x180033ad9
mov rcx, qword [0x1800536b0]
mov edx, 0x4000
call fcn.180001f48
mov dword [rax + 4], r12d
mov dword [rax], r12d
mov word [rax + 8], di
test r11d, 0x440
je 0x180033af2
xor r8d, r8d
mov edx, r12d
mov ecx, 0x200
call fcn.18000e368
cmp dword [r14 + 0x1240], r12d
jne 0x180033b2d
test rsi, rsi
jne 0x180033b09
xor edx, edx
xor ecx, ecx
call fcn.180005904
cmp dword [r14 + 0x1240], r12d
jne 0x180033b2d
cmp byte [r14 + 0xa48], dil
je 0x180033b39
cmp byte [rsp + 0x59], dil
jne 0x180033b39
test bl, bl
jne 0x180033b39
mov byte [rsp + 0x58], 1
jmp 0x180033b39
test rsi, rsi
je 0x180033b3d
cmp byte [rsp + 0x51], dil
je 0x180033b3d
mov cl, 1
jmp 0x180033b40
mov cl, dil
mov r12d, dword [rsp + 0x54]
mov byte [rbp + 0x1c8], cl
test rsi, rsi
je 0x180033b69
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180033b5d
test r12b, r12b
je 0x180033b69
test cl, cl
je 0x180033b69
mov r8d, 1
jmp 0x180033b6c
mov r8b, dil
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x54], r8d
movzx r15d, r8b
mov byte [rsp + 0x51], dil
mov byte [rsp + 0x59], dil
test al, al
je 0x180033c45
test rsi, rsi
je 0x180033c45
test cl, cl
jne 0x180033ba1
test r8b, r8b
je 0x180033c4e
mov ebx, dword [rbp + 0x1d8]
mov ecx, dword [rsi + 0x1c]
inc ebx
mov qword [rbp - 0x38], rdi
cmp ebx, ecx
jle 0x180033bd8
test ecx, ecx
je 0x180033bc3
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180033bc8
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x18]
mov edx, ebx
cmovg edx, eax
call fcn.180016b9c
mov rdi, qword [rbp + 0x1d0]
lea rax, [rbp - 0x38]
mov dword [rsi + 0x18], ebx
mov r8, rdi
mov rcx, qword [rsi + 0x20]
xor r9d, r9d
mov edx, ebx
mov qword [rsp + 0x20], rax
call fcn.1800029b8
mov ecx, dword [rbp - 0x38]
mov edx, eax
sub ecx, edi
mov dword [rsi + 0xc], eax
cmp dword [rsi + 0x54], eax
mov dword [rsi + 0x10], ecx
mov ecx, eax
cmovl ecx, dword [rsi + 0x54]
cmp dword [rsi + 0x58], eax
mov dword [rsi + 0x54], ecx
mov ecx, eax
cmovl ecx, dword [rsi + 0x58]
cmp dword [rsi + 0x5c], eax
mov eax, dword [rsp + 0x5c]
cmovl edx, dword [rsi + 0x5c]
xor edi, edi
cmp ecx, edx
mov dword [rsi + 0x58], ecx
mov cl, byte [rbp + 0x1c8]
mov r8d, edi
cmovne r8d, r15d
mov dword [rsi + 0x5c], edx
mov dword [rsp + 0x54], r8d
test cl, cl
jne 0x180033c5e
test r8b, r8b
jne 0x180033c5e
mov r15d, dword [rsp + 0x68]
cmp dword [r14 + 0x1240], r15d
jne 0x180033c77
jmp 0x180033c63
mov r15d, dword [rsp + 0x68]
test al, al
jne 0x180033c77
test rsi, rsi
je 0x180033c77
mov byte [rsp + 0x7b], 1
cmp byte [rsi + 0x48], dil
jne 0x180033c7c
mov byte [rsp + 0x7b], dil
cmp byte [rbp - 0x58], dil
je 0x180033d28
mov rcx, qword [r14 + 0xf10]
mov edx, 0x2a
call fcn.180022bf0
mov ecx, dword [rcx + 0x14]
lea rdi, [r14 + 0x2dd0]
mov rbx, qword [0x1800536b0]
mov r9, rax
mov dword [rdi + 0x14], ecx
mov rcx, qword [r14 + 0xf10]
mov qword [rbp - 0x38], rdi
mov edx, dword [rcx + 0x64]
mov dword [rdi + 0x64], edx
mov rcx, qword [r14 + 0xf10]
mov edx, dword [rcx + 0x68]
mov dword [rdi + 0x68], edx
mov rcx, qword [r14 + 0xf10]
mov edx, dword [rcx + 0x6c]
mov dword [rdi + 0x6c], edx
mov rcx, qword [r14 + 0xf10]
mov rax, qword [rcx + 0x40]
mov rcx, rdi
mov qword [rdi + 0x40], rax
mov qword [rdi + 0x38], r9
mov eax, dword [r9 + 4]
mov dword [rdi + 0x10], eax
call fcn.18000d4d8
lea rdx, [rbp - 0x38]
lea rcx, [rbx + 0x1b48]
call fcn.180016884
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rbx + 0x11e0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.18001d2d4
xor edi, edi
mov dword [rbp - 0x28], edi
cmp dword [r14 + 0x1240], r15d
jne 0x180034100
mov eax, dword [rsi + 0x10]
mov ebx, dword [rbp + 0x1e8]
mov byte [rsi + 0xe86], dil
mov dword [rsi + 0xe88], ebx
mov dword [rbp - 0x28], eax
mov eax, dword [rbp + 0x1d8]
mov dword [rsi + 0x4c], eax
cmp byte [r14 + 0x110], dil
sete al
mov byte [r14 + 0x124d], al
movss xmm2, dword [r14 + 0x108]
subss xmm2, xmm7
subss xmm2, dword [r14 + 0xb0c]
addss xmm2, dword [rsi + 0x50]
cmp byte [rsp + 0x64], dil
je 0x180033da4
mov rax, qword [rbp - 0x60]
movss xmm3, dword [r14 + 0x10c]
subss xmm3, dword [rax + 0x104]
jmp 0x180033db5
movss xmm3, dword [r14 + 0xf18]
mulss xmm3, dword [0x18004df80]
test r12b, r12b
je 0x180033ddc
mov eax, dword [rsi + 0xc]
mov r12d, 1
mov byte [rsi + 0xe85], r12b
mov dword [rsi + 0x58], edi
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], dil
jmp 0x180033f55
mov al, byte [rsp + 0x60]
test al, al
je 0x180033f0b
mov ecx, 2
cmp word [r14 + 0xa52], cx
jb 0x180033f0b
cmp byte [r14 + 0x125], dil
jne 0x180033f0b
lea rdi, [rsi + 0x54]
mov rcx, rsi
mov rdx, rdi
call fcn.1800319dc
mov r12d, 1
test byte [r14 + 0xa52], r12b
jne 0x180033e9e
xor eax, eax
cmp dword [rdi], eax
je 0x180033e46
movsxd rcx, dword [rdi]
lea edx, [r12 + 9]
mov rax, qword [rsi + 0x20]
cmp word [rax + rcx*2 - 2], dx
je 0x180033e46
xor edi, edi
mov cl, dil
jmp 0x180033e4b
mov cl, r12b
xor edi, edi
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180033e57
test cl, cl
jne 0x180033e64
mov edx, 0x20000c
mov rcx, rsi
call fcn.180032ca8
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180033e7f
cmp dword [rsi + 0x58], eax
jne 0x180033e7c
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x180033e7f
mov dword [rsi + 0x54], eax
mov edx, dword [rsi + 0x54]
mov rcx, rsi
call fcn.180031578
lea rdx, [rsi + 0x54]
mov dword [rsi + 0x54], eax
mov rcx, rsi
mov dword [rsi + 0x5c], eax
call fcn.180031be4
jmp 0x180033eff
movsxd rcx, dword [rdi]
mov edx, 0x200004
mov rax, qword [rsi + 0x20]
movzx ebx, word [rax + rcx*2]
mov rcx, rsi
call fcn.180032ca8
mov edx, 0x600005
mov rcx, rsi
call fcn.180032ca8
mov edx, 0x600001
mov rcx, rsi
call fcn.180032ca8
mov eax, 0xa
cmp bx, ax
je 0x180033ef0
xor eax, eax
cmp byte [rsp + 0x64], al
je 0x180033ef0
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
mov dword [rsi + 0x58], eax
mov dword [rsi + 0x5c], ecx
mov dword [rdi], ecx
mov ebx, dword [rbp + 0x1e8]
xor edi, edi
mov byte [rsi + 0xe84], dil
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x180033f55
cmp byte [r14 + 0xa48], dil
je 0x180033ff0
cmp byte [rsi + 0xe85], dil
jne 0x180033ff0
test al, al
je 0x180033f4f
lea rdx, [rsi + 0x54]
mov rcx, rsi
cmp byte [r14 + 0x125], dil
je 0x180033f40
call fcn.180031a3c
jmp 0x180033f45
call fcn.1800319dc
mov dword [rsi + 0xe80], 0xbe99999a
mov r12d, 1
cmp byte [rsi + 0xe85], dil
je 0x180033f6e
cmp byte [r14 + 0x110], dil
jne 0x180033f6e
mov byte [rsi + 0xe85], dil
bt ebx, 0xa
jae 0x180033fc7
xor r8d, r8d
mov edx, r15d
mov ecx, 0x200
call fcn.18000fae4
mov ecx, dword [rsp + 0x5c]
test al, al
je 0x180033fcb
test cl, cl
jne 0x180033fcb
mov r9, qword [rbp + 0x1f0]
lea rdx, [rsp + 0x70]
mov r8d, ebx
mov dword [rsp + 0x70], 9
mov rcx, r14
mov dword [rsp + 0x28], 2
call fcn.180032e7c
test al, al
je 0x180033fc7
mov edx, dword [rsp + 0x70]
mov rcx, rsi
call fcn.180032ca8
mov ecx, dword [rsp + 0x5c]
cmp byte [r14 + 0x124], dil
je 0x180033fdd
cmp byte [r14 + 0x126], dil
je 0x180033feb
test r13b, r13b
je 0x18003404a
cmp byte [r14 + 0x127], dil
je 0x18003404a
mov al, r12b
jmp 0x18003404d
cmp byte [r14 + 0x110], dil
je 0x180033f4f
cmp byte [rsi + 0xe85], dil
jne 0x180033f4f
ucomiss xmm8, dword [r14 + 0xf4]
jne 0x180034022
ucomiss xmm8, dword [r14 + 0xf8]
je 0x180033f4f
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180031a3c
mov r12d, 1
mov dword [rsi + 0xe80], 0xbe99999a
mov byte [rsi + 0xe84], r12b
jmp 0x180033f55
mov al, dil
cmp dword [r14 + 0xac0], edi
jle 0x180034100
test al, al
jne 0x1800340d8
test cl, cl
jne 0x1800340d8
cmp byte [rbp + 0x1f8], dil
jne 0x1800340d8
mov r13d, dword [rbp + 0x1e8]
xor r15d, r15d
mov ebx, r15d
mov rax, qword [r14 + 0xac8]
movzx ecx, word [rbx + rax]
mov dword [rbp + 0x1f8], ecx
cmp ecx, 9
je 0x1800340c1
mov r9, qword [rbp + 0x1f0]
lea rdx, [rbp + 0x1f8]
mov r8d, r13d
mov dword [rsp + 0x28], 2
mov rcx, r14
call fcn.180032e7c
test al, al
je 0x1800340c1
mov edx, dword [rbp + 0x1f8]
mov rcx, rsi
call fcn.180032ca8
add edi, r12d
add rbx, 2
cmp edi, dword [r14 + 0xac0]
jl 0x180034078
mov r13b, byte [rsp + 0x78]
xor edi, edi
lea rbx, [r14 + 0xac0]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x1800340fe
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.180016b9c
mov dword [rbx], edi
mov r12d, dword [rsp + 0x68]
mov r15b, dil
mov byte [rbp + 0x1f8], dil
cmp dword [r14 + 0x1240], r12d
jne 0x180034b2a
cmp byte [r14 + 0x124c], dil
jne 0x180034b2a
cmp byte [rsp + 0x58], dil
jne 0x180034b2a
movaps xmm0, xmm11
mov r15d, 1
subss xmm0, dword [r14 + 0xb10]
mov ecx, r15d
divss xmm0, dword [r14 + 0xf18]
cvttss2si eax, xmm0
cmp eax, r15d
cmovge ecx, eax
mov dword [rsi + 0x64], ecx
mov al, byte [r14 + 0x125]
neg al
mov dword [rsp + 0x70], ecx
sbb edi, edi
xor ebx, ebx
and edi, 0x400000
test r13b, r13b
je 0x1800341b0
mov al, byte [r14 + 0x126]
mov byte [rsp + 0x50], al
cmp byte [r14 + 0x127], bl
je 0x1800341bb
mov byte [rsp + 0x50], al
cmp byte [r14 + 0x124], bl
jne 0x1800341bb
mov byte [rsp + 0x50], al
cmp al, bl
jne 0x1800341bb
mov byte [rsp + 0x52], r15b
mov byte [rsp + 0x50], al
jmp 0x1800341bf
mov al, byte [r14 + 0x124]
mov byte [rsp + 0x50], al
mov byte [rsp + 0x52], bl
mov r8d, r15d
mov edx, r12d
mov ecx, 0xa39
call fcn.18000fae4
test al, al
jne 0x1800341e7
mov r8d, r15d
mov edx, r12d
mov ecx, 0x220a
call fcn.18000fae4
test al, al
je 0x18003420d
mov r15d, dword [rsp + 0x5c]
test r15b, r15b
jne 0x180034212
cmp byte [rbp - 0x58], bl
mov ebx, dword [rsp + 0x64]
jne 0x180034216
test bl, bl
je 0x180034206
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180034216
mov byte [rsp + 0x6c], 1
jmp 0x18003421c
mov r15d, dword [rsp + 0x5c]
mov ebx, dword [rsp + 0x64]
xor eax, eax
mov byte [rsp + 0x6c], al
xor r8d, r8d
mov edx, r12d
mov ecx, 0xa24
call fcn.18000fae4
test al, al
jne 0x180034244
xor r8d, r8d
mov edx, r12d
mov ecx, 0x1209
call fcn.18000fae4
test al, al
je 0x180034264
xor eax, eax
cmp byte [rbp - 0x58], al
jne 0x180034264
test bl, bl
je 0x180034257
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180034264
mov eax, 1
xor ebx, ebx
mov byte [rsp + 0x7a], al
jmp 0x18003426d
xor ebx, ebx
mov byte [rsp + 0x7a], bl
lea eax, [rbx + 1]
mov r8d, eax
mov edx, r12d
mov ecx, 0xa37
call fcn.18000fae4
test al, al
jne 0x180034298
mov r8d, 1
mov edx, r12d
mov ecx, 0x2209
call fcn.18000fae4
test al, al
je 0x1800342a8
test r15b, r15b
jne 0x1800342a8
mov eax, 1
mov byte [rsp + 0x60], al
jmp 0x1800342b1
mov byte [rsp + 0x60], bl
mov eax, 1
mov r8d, eax
mov edx, r12d
mov ecx, 0xa3b
call fcn.18000fae4
mov ebx, dword [rbp - 0x68]
test al, al
je 0x1800342dc
test r15b, r15b
jne 0x1800342dc
test bl, bl
je 0x1800342dc
mov eax, 1
mov byte [rsp + 0x79], al
jmp 0x1800342e6
mov byte [rsp + 0x79], 0
mov eax, 1
mov r8d, eax
mov edx, r12d
mov ecx, 0xa3a
call fcn.18000fae4
test al, al
jne 0x1800343b3
test r13b, r13b
je 0x180034321
mov r13d, 1
mov edx, r12d
mov r8d, r13d
mov ecx, 0x2a3b
call fcn.18000fae4
test al, al
jne 0x1800343b9
xor r15d, r15d
mov r13b, r15b
xor r8d, r8d
mov edx, r12d
mov ecx, 0xa22
call fcn.18000fae4
mov byte [rsp + 0x7c], al
mov eax, 2
lea r12d, [rax - 1]
test byte [r14 + 8], al
je 0x180034353
mov bl, r12b
test byte [r14 + 0xc], r12b
jne 0x180034356
mov bl, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.18000e4a8
test al, al
jne 0x18003437f
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.18000e4a8
test al, al
jne 0x18003437f
mov r12b, r15b
test bl, bl
je 0x1800343d2
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.18000e4a8
test al, al
jne 0x1800343a9
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.18000e4a8
test al, al
je 0x1800343d2
mov eax, 1
mov r15b, al
jmp 0x1800343d7
mov r13d, 1
test r15b, r15b
jne 0x180034321
xor r15d, r15d
test bl, bl
je 0x180034324
jmp 0x180034327
mov eax, 1
mov edx, dword [rsp + 0x68]
mov r8d, eax
mov ecx, 0x20e
call fcn.18000fae4
xor ecx, ecx
test al, al
jne 0x180034413
test bl, bl
je 0x18003440a
mov edx, dword [rsp + 0x68]
lea r8d, [rcx + 1]
mov ecx, 0x26c
call fcn.18000fae4
xor ecx, ecx
test al, al
jne 0x180034413
mov bl, cl
mov eax, 1
jmp 0x18003441a
mov eax, 1
mov bl, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x180034461
neg byte [rsp + 0x50]
mov eax, 0x200004
sbb edx, edx
and edx, 0xc
add edx, 0x200000
cmp byte [rsp + 0x52], cl
cmovne edx, eax
or edx, edi
mov rcx, rsi
call fcn.180032ca8
xor edi, edi
mov r9d, 1
jmp 0x180034af3
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x18003448d
neg byte [rsp + 0x50]
mov eax, 0x200005
sbb edx, edx
and edx, 0xc
add edx, 0x200001
jmp 0x180034443
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x1800344fc
cmp byte [rsp + 0x64], cl
je 0x1800344fc
cmp byte [r14 + 0x124], cl
je 0x1800344eb
mov r9, qword [rbp - 0x60]
xor edi, edi
movss xmm0, dword [r9 + 0x88]
subss xmm0, dword [r14 + 0xf18]
mov dword [r9 + 0xa0], edi
mov dword [r9 + 0xa8], edi
maxss xmm0, xmm8
movss dword [r9 + 0x98], xmm0
jmp 0x180034456
movzx eax, byte [rsp + 0x52]
lea edx, [rax*4 + 0x200002]
jmp 0x18003444a
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x180034578
cmp byte [rsp + 0x64], cl
je 0x180034578
cmp byte [r14 + 0x124], cl
je 0x180034567
mov rdx, qword [rbp - 0x60]
xor edi, edi
movss xmm0, dword [r14 + 0xf18]
mov rax, qword [0x1800536b0]
addss xmm0, dword [rdx + 0x88]
mov rcx, qword [rax + 0x11e0]
minss xmm0, dword [rcx + 0x90]
mov dword [rdx + 0xa0], edi
mov dword [rdx + 0xa8], edi
movss dword [rdx + 0x98], xmm0
jmp 0x180034456
movzx eax, byte [rsp + 0x52]
lea edx, [rax*4 + 0x200003]
jmp 0x18003444a
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x1800345bf
cmp byte [rsp + 0x64], cl
je 0x1800345bf
or edi, 0x20000e
mov rcx, rsi
mov edx, edi
call fcn.180032ca8
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [r14 + 0xf18]
subss xmm6, xmm0
jmp 0x180034454
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x180034606
cmp byte [rsp + 0x64], cl
je 0x180034606
or edi, 0x20000f
mov rcx, rsi
mov edx, edi
call fcn.180032ca8
movd xmm0, dword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [r14 + 0xf18]
addss xmm6, xmm0
jmp 0x180034454
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.18000e4a8
test al, al
je 0x180034634
mov al, byte [r14 + 0x124]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18003444a
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.18000e4a8
test al, al
je 0x180034658
mov al, byte [r14 + 0x124]
neg al
mov eax, 0x200005
jmp 0x180034628
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.18000e4a8
xor ecx, ecx
test al, al
je 0x1800346a2
cmp byte [rsp + 0x5c], cl
jne 0x1800346a2
cmp byte [rsp + 0x6c], cl
jne 0x1800346a2
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180034695
cmp byte [rsp + 0x50], cl
je 0x180034695
mov edx, 0x60000d
mov rcx, rsi
call fcn.180032ca8
or edi, 0x200008
mov edx, edi
jmp 0x18003444c
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.18000e4a8
mov r8d, dword [rsp + 0x5c]
xor ecx, ecx
test al, al
je 0x18003470d
test r8b, r8b
jne 0x18003470d
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180034705
cmp byte [rsp + 0x50], cl
je 0x1800346d7
mov edx, 0x60000c
jmp 0x1800346fd
cmp byte [rsp + 0x78], cl
je 0x180034705
cmp byte [r14 + 0x127], cl
je 0x180034705
cmp byte [r14 + 0x126], cl
jne 0x180034705
cmp byte [r14 + 0x124], cl
jne 0x180034705
mov edx, 0x600004
mov rcx, rsi
call fcn.180032ca8
or edi, 0x200009
jmp 0x18003469b
xor edi, edi
test r12b, r12b
jne 0x180034a4f
test r15b, r15b
jne 0x180034a4f
test bl, bl
je 0x180034789
test dword [rbp + 0x1e8], 0x100000
mov r8, qword [rbp + 0x1d0]
je 0x180034766
mov al, byte [r8]
test al, al
jne 0x180034750
mov byte [rsp + 0x54], dil
mov byte [rbp + 0x1c8], dil
mov byte [rsp + 0x58], 1
setne r15b
mov r9d, 1
mov byte [rbp + 0x1f8], r15b
jmp 0x180034b01
mov r9d, 1
mov dl, dil
mov r15b, r9b
mov byte [rbp + 0x1f8], r9b
mov byte [rsp + 0x58], r9b
mov byte [rbp + 0x1c8], dl
jmp 0x180034b0b
movzx eax, byte [rsp + 0x79]
test al, al
jne 0x180034a2e
test r13b, r13b
jne 0x180034a2e
cmp byte [rsp + 0x7c], dil
je 0x1800347c8
mov eax, dword [rsi + 0xc]
mov r9d, 1
mov byte [rsi + 0xe84], r9b
mov dword [rsi + 0x58], edi
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov byte [rsi + 0x6a], dil
jmp 0x180034af3
mov r13b, byte [rsp + 0x6c]
test r13b, r13b
jne 0x18003493c
cmp byte [rsp + 0x7a], dil
jne 0x18003493c
cmp byte [rsp + 0x60], dil
je 0x180034456
mov rax, qword [0x1800536b0]
mov rdx, qword [rax + 0xa8]
test rdx, rdx
je 0x18003481d
mov rcx, qword [rax + 0xb8]
call rdx
mov rbx, rax
test rax, rax
je 0x180034456
mov rax, qword [0x1800536b0]
jmp 0x180034824
lea rbx, [0x18004672e]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], dil
jne 0x180034828
test rax, rax
je 0x18003483c
inc dword [rax + 0xf0]
movsxd rcx, ecx
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r13d, r13d
mov qword [rbp - 0x38], rax
mov r15, rax
cmp byte [rbx], r13b
je 0x1800348c0
mov r15d, dword [rbp + 0x1e8]
lea esi, [r13 + 1]
mov r12, rax
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.180002818
mov r9, qword [rbp + 0x1f0]
lea rdx, [rsp + 0x70]
movsxd rcx, eax
mov r8d, r15d
add rbx, rcx
mov dword [rsp + 0x28], 4
mov rcx, r14
call fcn.180032e7c
test al, al
je 0x1800348b3
movzx eax, word [rsp + 0x70]
add edi, esi
mov word [r12], ax
add r12, 2
cmp byte [rbx], r13b
jne 0x18003486a
mov rsi, qword [rbp]
mov r15, qword [rbp - 0x38]
movsxd rax, edi
mov word [r15 + rax*2], r13w
test edi, edi
jle 0x180034915
lea rbx, [rsi + 0x54]
mov rcx, rsi
mov rdx, rbx
call fcn.180031be4
mov rcx, rsi
call fcn.180031ca0
mov edx, dword [rbx]
mov r9d, edi
mov r8, r15
mov rcx, rsi
call fcn.180031748
test al, al
je 0x18003490e
mov edx, dword [rbx]
lea rcx, [rbx + 0x20]
mov r9d, edi
xor r8d, r8d
call fcn.1800327c0
add dword [rbx], edi
mov byte [rbx + 0x16], r13b
mov byte [rsi + 0xe84], 1
xor edi, edi
test r15, r15
je 0x18003492e
mov rax, qword [0x1800536b0]
test rax, rax
je 0x18003492e
dec dword [rax + 0xf0]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180034456
cmp qword [r14 + 0xb0], rdi
je 0x1800349df
mov ecx, dword [rsi + 0x58]
mov eax, dword [rsi + 0x5c]
cmp ecx, eax
je 0x18003495d
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x180034962
mov eax, dword [rsi + 0xc]
mov edx, edi
movsxd r15, eax
mov rax, qword [rsi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.180002c18
mov edx, 1
lea edi, [rdx + rax]
mov rax, qword [0x1800536b0]
test rax, rax
je 0x180034993
add dword [rax + 0xf0], edx
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rsi + 0x20]
mov edx, edi
mov rbx, rax
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov rcx, rax
call fcn.180002b78
mov rcx, rbx
call fcn.180005e98
xor edi, edi
test rbx, rbx
je 0x1800349d6
mov rcx, qword [0x1800536b0]
test rcx, rcx
je 0x1800349d6
dec dword [rcx + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r13b, r13b
je 0x180034456
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
jne 0x180034a00
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], edi
mov byte [rsi + 0x6a], dil
mov r9d, 1
mov byte [rsi + 0xe84], r9b
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180034af3
lea rdx, [rsi + 0x54]
mov rcx, rsi
call fcn.180031ca0
mov byte [rsi + 0x6a], dil
jmp 0x180034456
mov edx, eax
mov rcx, rsi
xor edx, 1
add edx, 0x20000a
call fcn.180032ca8
mov eax, dword [rsi + 0x54]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x58], eax
jmp 0x180034456
mov edx, dword [rbp + 0x1e8]
mov r9d, 1
mov ecx, dword [rsp + 0x64]
mov eax, edx
shr eax, 0xb
and al, r9b
test cl, cl
je 0x180034a83
test r15b, r15b
jne 0x180034a83
mov cl, byte [r14 + 0x124]
test al, al
je 0x180034aa4
test cl, cl
jne 0x180034aa8
mov ecx, dword [rsp + 0x64]
mov byte [rsp + 0x59], r9b
cmp byte [r14 + 0x5c], dil
je 0x180034aee
test cl, cl
jne 0x180034aee
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0x5c], eax
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], edi
mov byte [rsi + 0x6a], dil
jmp 0x180034af3
test cl, cl
jne 0x180034a7f
test r8b, r8b
jne 0x180034af3
mov r9, qword [rbp + 0x1f0]
mov eax, 0xa
mov r8d, edx
mov dword [rsp + 0x70], eax
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x28], 2
mov rcx, r14
call fcn.180032e7c
test al, al
je 0x180034456
mov edx, dword [rsp + 0x70]
mov rcx, rsi
call fcn.180032ca8
jmp 0x180034456
mov byte [rsp + 0x58], r9b
mov r8, qword [rbp + 0x1d0]
mov r15b, byte [rbp + 0x1f8]
mov ecx, dword [rsp + 0x54]
mov dl, byte [rbp + 0x1c8]
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
je 0x180034b1a
mov al, r9b
test dl, dl
jne 0x180034b1d
mov al, dil
mov r12d, dword [rsp + 0x68]
or cl, al
mov dword [rsp + 0x54], ecx
jmp 0x180034b31
mov r8, qword [rbp + 0x1d0]
mov qword [rsp + 0x70], rdi
mov dword [rbp - 0x68], edi
cmp dword [r14 + 0x1240], r12d
jne 0x1800352a5
mov r13d, dword [rsp + 0x5c]
test r15b, r15b
je 0x180034cd5
test r13b, r13b
jne 0x180034d5f
test dword [rbp + 0x1e8], 0x100000
je 0x180034baf
mov r9d, dword [rsi + 0xc]
lea rax, [0x18004672e]
xor r8d, r8d
mov qword [rsp + 0x70], rax
lea rdx, [rsi + 0x54]
mov dword [rbp - 0x68], edi
mov rcx, rsi
mov byte [rsp + 0x51], 1
mov dword [rsp + 0x20], edi
call fcn.180032bb8
mov r8d, dword [rsi + 0xc]
xor edx, edx
mov rcx, rsi
call fcn.1800316bc
and qword [rsi + 0x58], 0
mov dword [rsi + 0x54], edi
jmp 0x180034cac
mov rax, r8
mov r9d, 1
mov r8, qword [rsi + 0x40]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180034bd2
add rax, r9
test ecx, ecx
jne 0x180034bbf
test edx, edx
je 0x180034cb1
mov r13d, dword [rsi + 0x38]
mov ebx, edi
mov r12, qword [rsi + 0x40]
sub r13d, r9d
mov qword [rsp + 0x70], r12
mov dword [rbp - 0x68], r13d
mov byte [rsp + 0x51], r9b
test r13d, r13d
jle 0x180034c69
movsxd r15, r13d
mov rcx, r12
add r15, r12
mov rdx, r15
call fcn.180002a58
mov r8d, 1
xor edx, edx
lea ebx, [r8 + rax]
test ebx, ebx
jle 0x180034c4d
lea ecx, [rdx + 8]
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x180034c4d
mov rcx, qword [0x1800536b0]
test rcx, rcx
je 0x180034c3c
add dword [rcx + 0xf0], r8d
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
xor edx, edx
mov qword [rsp + 0x20], rdx
mov r9, r15
mov edx, ebx
mov r8, r12
mov rcx, rdi
call fcn.1800029b8
mov r15b, byte [rbp + 0x1f8]
lea ecx, [rbx - 1]
mov r8, rdi
xor ebx, ebx
lea rdx, [rsi + 0x54]
mov r9d, ebx
test r13d, r13d
cmovg r9d, ecx
mov rcx, rsi
call fcn.180032c24
test rdi, rdi
je 0x180034ca7
mov rax, qword [0x1800536b0]
test rax, rax
je 0x180034c9e
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r12d, dword [rsp + 0x68]
mov r13d, dword [rsp + 0x5c]
mov eax, dword [rsi + 0x18]
mov byte [rsi + 0x48], 1
mov ecx, dword [rsi + 0x2c]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x180034d43
test ecx, ecx
je 0x180034d2e
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180034d33
mov byte [rsp + 0x51], dil
mov qword [rsp + 0x70], rdi
mov dword [rbp - 0x68], edi
test r13b, r13b
je 0x180034cb1
mov r15d, dword [rbp + 0x1e8]
test r15d, 0x801c0
je 0x18003524c
mov ebx, 0x40
test bl, r15b
je 0x180034ea6
xor r8d, r8d
mov edx, r12d
mov ecx, 0x200
call fcn.18000fae4
xor r12d, r12d
test al, al
je 0x180034ea9
mov edi, 0x200
jmp 0x180034f12
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x28]
mov edx, ebx
cmovg edx, eax
call fcn.180016b10
mov dword [rsi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rsi + 0x20]
mov edx, ebx
mov rcx, qword [rsi + 0x30]
call fcn.180002b78
xor edi, edi
test r15b, r15b
je 0x180034ce7
cmp byte [rsp + 0x59], dil
je 0x180034d77
mov r15d, dword [rbp + 0x1e8]
test r15b, 0x20
jne 0x180034cee
mov r12, qword [rbp + 0x1d0]
mov r13d, dword [rbp - 0x80]
mov ebx, dword [rsp + 0x5c]
mov r11, qword [rsp + 0x70]
mov r10d, dword [rbp - 0x68]
mov r15d, dword [rsp + 0x68]
cmp dword [r14 + 0x2db8], r15d
jne 0x180034e22
cmp dword [r14 + 0x1240], r15d
je 0x180034e1b
mov r9, qword [0x1800536b0]
call fcn.180008754
test al, al
je 0x180034e1b
cmp byte [r9 + 0x1275], dil
jne 0x180034dd5
cmp dword [r9 + 0x1240], edi
jne 0x180034e1b
cmp byte [r9 + 0x1250], dil
je 0x180034e1b
test bl, bl
jne 0x180034e1b
mov r9, qword [r14 + 0x2dc8]
mov r8, r12
mov rax, r9
sub r8, r9
mov ebx, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180034e01
add rax, rbx
test ecx, ecx
jne 0x180034dee
test edx, edx
je 0x180034e1b
mov r10d, dword [r14 + 0x2dc0]
mov r11, r9
sub r10d, ebx
mov qword [rsp + 0x70], r9
mov byte [rsp + 0x51], bl
mov dword [r14 + 0x2db8], edi
test r11, r11
je 0x1800352f2
test r13b, r13b
je 0x1800352bf
mov eax, dword [rbp + 0x1e8]
lea rcx, [rbp + 0x50]
mov dword [rbp + 0x5c], eax
xorps xmm0, xmm0
lea eax, [r10 + 1]
mov qword [rbp + 0x68], rdi
cmp dword [rbp + 0x1d8], eax
movdqa xmmword [rbp + 0x80], xmm0
cmovge eax, dword [rbp + 0x1d8]
mov dword [rbp + 0x7c], eax
mov qword [rbp + 0x50], r14
mov dword [rbp + 0x58], 0x40000
mov qword [rbp + 0x70], r12
mov dword [rbp + 0x78], r10d
mov qword [rbp + 0x60], rdi
call qword [rbp + 0x1f0]
mov ecx, dword [rbp + 0x7c]
mov r12, qword [rbp + 0x70]
mov r11, qword [rsp + 0x70]
mov qword [rbp + 0x1d0], r12
lea r10d, [rcx - 1]
cmp dword [rbp + 0x78], r10d
cmovl r10d, dword [rbp + 0x78]
jmp 0x1800352c5
xor r12d, r12d
test r15b, r15b
jns 0x180034ef1
mov ebx, 1
xor edx, edx
mov r8d, ebx
mov ecx, 0x203
call fcn.18000e4a8
test al, al
je 0x180034ed2
mov ebx, 0x80
mov edi, 0x203
jmp 0x180034f12
mov r8d, ebx
xor edx, edx
mov ecx, 0x204
call fcn.18000e4a8
test al, al
je 0x180034ef1
mov ebx, 0x80
mov edi, 0x204
jmp 0x180034f12
mov ebx, 0x80000
test ebx, r15d
je 0x180034f04
cmp byte [rsi + 0xe86], r12b
jne 0x180034f12
mov eax, 0x100
mov ebx, r12d
test eax, r15d
cmovne ebx, eax
test ebx, ebx
je 0x18003524a
mov rax, qword [rbp + 0x1d0]
mov dword [rbp + 0x28], r12d
mov word [rbp + 0x41], r12w
mov byte [rbp + 0x43], r12b
mov qword [rbp + 0x10], r14
mov dword [rbp + 0x18], ebx
mov dword [rbp + 0x1c], r15d
mov qword [rbp + 0x20], r12
test r13b, r13b
jne 0x180034f46
mov rax, qword [rsi + 0x30]
mov r11, qword [rsi + 0x20]
mov qword [rbp + 0x30], rax
mov rcx, r11
mov eax, dword [rsi + 0x10]
mov dword [rbp + 0x38], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbp + 0x3c], eax
movsxd rax, dword [rsi + 0x54]
mov dword [rbp + 0x2c], edi
mov byte [rbp + 0x40], r12b
lea rdx, [r11 + rax*2]
call fcn.180002c18
movsxd rdx, dword [rsi + 0x58]
mov rcx, r11
mov ebx, eax
mov dword [rbp + 0x44], eax
lea rdx, [r11 + rdx*2]
call fcn.180002c18
movsxd rdx, dword [rsi + 0x5c]
mov rcx, r11
mov r13d, eax
mov dword [rbp + 0x48], eax
lea rdx, [r11 + rdx*2]
call fcn.180002c18
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x1f8], eax
mov dword [rbp + 0x4c], eax
call qword [rbp + 0x1f0]
movsxd r12, dword [rbp + 0x44]
mov rdi, qword [rbp + 0x30]
mov r15b, byte [rbp + 0x40]
cmp r12d, ebx
jne 0x180034fc5
test r15b, r15b
je 0x180034fdb
lea rdx, [rdi + r12]
mov rcx, rdi
call fcn.180002a58
mov dword [rsi + 0x54], eax
mov byte [rsi + 0xe84], 1
movsxd rbx, dword [rbp + 0x48]
cmp ebx, r13d
jne 0x180034fe9
test r15b, r15b
je 0x180035002
cmp ebx, r12d
jne 0x180034ff3
mov eax, dword [rsi + 0x54]
jmp 0x180034fff
lea rdx, [rdi + rbx]
mov rcx, rdi
call fcn.180002a58
mov dword [rsi + 0x58], eax
movsxd rax, dword [rbp + 0x4c]
cmp eax, dword [rbp + 0x1f8]
jne 0x180035017
test r15b, r15b
je 0x18003524a
cmp eax, ebx
jne 0x180035020
mov eax, dword [rsi + 0x58]
jmp 0x18003502c
lea rdx, [rdi + rax]
mov rcx, rdi
call fcn.180002a58
mov dword [rsi + 0x5c], eax
test r15b, r15b
je 0x18003524a
movsxd rax, dword [rbp + 0x38]
mov rcx, qword [rsi + 0x20]
mov rbx, qword [0x1800536b0]
mov r13d, dword [rsi + 0xc]
mov qword [rbp - 0x38], rcx
lea rdx, [rdi + rax]
mov rcx, rdi
mov dword [rbp + 0x1f8], eax
call fcn.180002a58
mov r15d, eax
lea r12d, [rax*2 + 2]
cmp r12d, dword [rbx + 0x316c]
jle 0x1800350bb
mov rcx, qword [rbx + 0x3170]
test rcx, rcx
je 0x180035092
test rbx, rbx
je 0x18003508c
dec dword [rbx + 0xf0]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1800536b0]
test rax, rax
je 0x1800350a4
inc dword [rax + 0xf0]
movsxd rcx, r12d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbx + 0x3170], rax
mov dword [rbx + 0x316c], r12d
mov r12, qword [rbx + 0x3170]
lea edx, [r15 + 1]
movsxd r9, dword [rbp + 0x1f8]
xor ebx, ebx
add r9, rdi
mov qword [rsp + 0x20], rbx
mov rcx, r12
mov r8, rdi
call fcn.1800029b8
cmp r13d, r15d
mov eax, r15d
mov edx, ebx
cmovl eax, r13d
movsxd r10, eax
test eax, eax
jle 0x180035126
mov rcx, qword [rbp - 0x38]
lea r11d, [rbx + 1]
mov r9, r12
lea r14d, [rbx + 2]
sub r9, rcx
mov r8d, ebx
movzx eax, word [r9 + rcx]
cmp word [rcx], ax
jne 0x180035122
add edx, r11d
add r8, r11
add rcx, r14
cmp r8, r10
jl 0x18003510a
mov r14, qword [rbp - 0x10]
mov r11, qword [rbp - 0x38]
cmp edx, r13d
jne 0x180035138
cmp edx, r15d
je 0x1800351d4
lea ebx, [r13 - 1]
movsxd rdi, edx
movsxd rcx, ebx
lea r9d, [r15 - 1]
cmp rcx, rdi
jl 0x180035174
movsxd r8, r9d
cmp r8, rdi
jl 0x180035174
movzx eax, word [r12 + r8*2]
cmp word [r11 + rcx*2], ax
jne 0x180035174
mov eax, 1
sub ebx, eax
sub rcx, rax
sub r9d, eax
sub r8, rax
cmp rcx, rdi
jge 0x18003514e
sub r9d, edx
sub ebx, edx
mov r12d, 1
add r9d, r12d
lea r8d, [rbx + 1]
test r9d, r9d
jg 0x180035190
test r8d, r8d
jle 0x1800351d4
lea rcx, [rsi + 0x74]
call fcn.1800327c0
mov rdx, rax
test rax, rax
je 0x1800351d4
movsxd r8, ebx
inc r8
test r8, r8
jle 0x1800351d4
lea r9, [rdi + rdi]
mov r14d, 2
sub r9, rax
mov rax, qword [rsi + 0x20]
lea rcx, [r9 + rdx]
movzx ecx, word [rcx + rax]
mov word [rdx], cx
add rdx, r14
sub r8, r12
jne 0x1800351b9
mov r14, qword [rbp - 0x10]
mov ebx, dword [rbp + 0x38]
mov eax, dword [rbp - 0x28]
mov r13d, dword [rbp - 0x80]
cmp ebx, eax
jle 0x18003521b
test r13b, r13b
je 0x18003521b
lea rdi, [rsi + 0x18]
sub ebx, eax
add ebx, dword [rdi]
mov ecx, dword [rdi + 4]
cmp ebx, ecx
jle 0x180035219
test ecx, ecx
je 0x180035205
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18003520a
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.180016b9c
mov dword [rdi], ebx
mov r8, qword [rbp + 0x30]
xor edi, edi
mov edx, dword [rsi + 0x18]
xor r9d, r9d
mov rcx, qword [rsi + 0x20]
mov qword [rsp + 0x20], rdi
call fcn.1800029b8
mov dword [rsi + 0xc], eax
mov eax, dword [rbp + 0x38]
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xe80], 0xbe99999a
jmp 0x180035250
xor edi, edi
mov r13d, dword [rbp - 0x80]
mov ebx, dword [rsp + 0x5c]
mov r12, qword [rbp + 0x1d0]
test bl, bl
jne 0x180034d86
mov rax, qword [rsi + 0x30]
mov r8, r12
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180035286
add rax, r9
test ecx, ecx
jne 0x180035273
test edx, edx
je 0x180034d86
mov r11, qword [rsi + 0x30]
mov r10d, dword [rsi + 0x10]
mov qword [rsp + 0x70], r11
mov byte [rsp + 0x51], r9b
jmp 0x180034d8f
mov r12, qword [rbp + 0x1d0]
mov r10d, edi
mov r13d, dword [rbp - 0x80]
mov r11, rdi
mov ebx, dword [rsp + 0x5c]
jmp 0x180034d8f
mov ecx, dword [rbp + 0x1d8]
lea eax, [r10 + 1]
cmp eax, ecx
cmovl ecx, eax
mov eax, 1
movsxd rbx, ecx
cmp rbx, rax
jb 0x1800352f2
jbe 0x1800352ed
lea r8, [rbx - 1]
mov rdx, r11
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + r12 - 1], dil
cmp dword [r14 + 0x1240], r15d
jne 0x18003530f
cmp byte [rsp + 0x58], dil
je 0x1800353cd
xor edx, edx
xor ecx, ecx
call fcn.180005904
mov ebx, 1
mov r13d, dword [rsp + 0x64]
test r13b, r13b
jne 0x180035384
mov r8d, ebx
lea rcx, [rbp - 0x78]
mov edx, r15d
call fcn.1800048c0
mov rax, qword [0x1800536b0]
lea rcx, [rbp - 0x10]
movdqu xmm0, xmmword [rax + 0xc1c]
movups xmmword [rbp - 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 4], xmm0
call fcn.180002c60
movss xmm0, dword [r14 + 0xb14]
mov r8d, eax
mov rdx, qword [rbp - 0x70]
mov r9b, bl
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180004608
mov r10, qword [rbp - 0x60]
movaps xmm0, xmm10
movss dword [rbp - 0x20], xmm7
movaps xmm1, xmm9
movss dword [rbp - 0x1c], xmm9
addss xmm0, xmm7
addss xmm1, xmm11
lea rax, [rbp + 0x1f8]
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
test r13b, r13b
je 0x1800353de
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x1f8], xmm0
jmp 0x180035404
mov ebx, 1
mov dword [r14 + 0x3164], ebx
jmp 0x180035314
addss xmm7, dword [r14 + 0xb0c]
movaps xmm0, xmm9
addss xmm0, dword [r14 + 0xb10]
movss dword [rbp + 0x1f8], xmm7
movss dword [rbp + 0x1fc], xmm0
movaps xmm12, xmm8
movsd xmm0, qword [rax]
movsd qword [rbp - 0x48], xmm0
movss dword [rbp + 0x1f8], xmm8
cmp byte [rsp + 0x7b], dil
je 0x18003542c
mov r12, qword [rsi + 0x30]
mov qword [rbp + 0x1d0], r12
mov r11b, byte [rbp + 0x1c8]
mov r8d, dword [rsp + 0x54]
test r11b, r11b
jne 0x18003555d
test r8b, r8b
jne 0x18003555d
test r13b, r13b
je 0x1800354ae
mov dl, byte [r12]
lea rbx, [r12 + 1]
mov ecx, edi
test dl, dl
je 0x180035480
mov r10d, 1
lea r8d, [r10 + 9]
cmp dl, r8b
lea eax, [rcx + 1]
mov dl, byte [rbx]
cmovne eax, ecx
add rbx, r10
mov ecx, eax
test dl, dl
jne 0x180035468
mov r10, qword [rbp - 0x60]
mov eax, 1
sub rbx, rax
lea edx, [rax + 9]
cmp byte [rbx], dl
je 0x180035496
cmp byte [rbx], 0xd
je 0x180035496
add ecx, eax
movd xmm12, ecx
movaps xmm6, xmm10
cvtdq2ps xmm12, xmm12
mulss xmm12, dword [r14 + 0xf18]
jmp 0x1800354e3
cmp dword [r14 + 0x1240], r15d
jne 0x1800354bd
movsxd rbx, dword [rsi + 0x10]
jmp 0x1800354ca
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [r12 + rbx], dil
jne 0x1800354c1
movss xmm6, dword [rbp + 0x1f8]
add rbx, r12
mov rax, rbx
sub rax, r12
cmp rax, 0x200000
jge 0x180035555
mov rax, qword [0x1800536b0]
lea r8, [rbp - 0x20]
test r13b, r13b
lea rcx, [rbp - 0x78]
cmovne r8, rdi
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 0x6c], xmm0
call fcn.180002c60
movss xmm2, dword [r14 + 0xf18]
lea r9, [rbp - 0x48]
mov rdx, qword [r14 + 0xf10]
mov rcx, qword [r10 + 0x298]
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm8
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], eax
call fcn.18001f9bc
xor r10d, r10d
jmp 0x180035d27
movsxd rbx, dword [rsi + 0x10]
mov edx, 0xfffffc18
add rbx, r12
mov qword [rbp - 0x10], rdi
mov r12, qword [rsi + 0x20]
test r11b, r11b
mov r11d, 1
mov qword [rbp - 0x38], rbx
movaps xmm9, xmm8
movaps xmm7, xmm8
mov r9, rdi
mov r10, rdi
mov r15d, edx
mov ecx, edi
je 0x1800355a1
movsxd rax, dword [rsi + 0x54]
or edx, 0xffffffff
mov ecx, r11d
lea r9, [r12 + rax*2]
test r8b, r8b
je 0x1800355c1
mov eax, dword [rsi + 0x5c]
cmp dword [rsi + 0x58], eax
cmovl eax, dword [rsi + 0x58]
or r15d, 0xffffffff
cdqe
add ecx, r11d
lea r10, [r12 + rax*2]
mov qword [rbp - 0x10], r10
movzx r8d, word [r12]
xor r11d, r11d
movzx eax, r13b
add ecx, eax
mov rax, r12
test r8w, r8w
je 0x180035626
lea ebx, [r11 + 1]
lea esi, [rbx + 1]
lea r13d, [r11 + 0xa]
cmp r8w, r13w
jne 0x180035611
add edi, ebx
cmp edx, 0xffffffff
jne 0x1800355fd
cmp rax, r9
jb 0x1800355fd
sub ecx, ebx
mov edx, edi
test ecx, ecx
jle 0x18003561e
cmp r15d, 0xffffffff
jne 0x180035611
cmp rax, r10
jb 0x180035611
sub ecx, ebx
mov r15d, edi
test ecx, ecx
jle 0x18003561e
add rax, rsi
movzx r8d, word [rax]
test r8w, r8w
jne 0x1800355e3
mov rsi, qword [rbp]
mov rbx, qword [rbp - 0x38]
inc edi
mov r8, r9
cmp edx, 0xffffffff
mov r13d, edi
cmovne r13d, edx
cmp r15d, 0xffffffff
cmove r15d, edi
cmp r9, r12
jbe 0x180035658
mov ecx, 0xa
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x180035658
mov r8, rax
cmp rax, r12
ja 0x180035647
mov byte [rsp + 0x30], r11b
lea rcx, [rsp + 0x70]
mov rdx, r14
mov qword [rsp + 0x20], r11
call fcn.180031300
movss xmm5, dword [r14 + 0xf18]
xor r10d, r10d
movd xmm15, r13d
cvtdq2ps xmm15, xmm15
movss xmm13, dword [rax]
mulss xmm15, xmm5
test r15d, r15d
js 0x1800356e7
mov r9, qword [rbp - 0x10]
mov r8, r9
cmp r9, r12
jbe 0x1800356b4
lea ecx, [r10 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x1800356b4
mov r8, rax
cmp rax, r12
ja 0x1800356a3
mov byte [rsp + 0x30], r10b
lea rcx, [rbp - 0x68]
mov rdx, r14
mov qword [rsp + 0x20], r10
call fcn.180031300
movss xmm5, dword [r14 + 0xf18]
xor r10d, r10d
movd xmm7, r15d
cvtdq2ps xmm7, xmm7
movss xmm9, dword [rax]
mulss xmm7, xmm5
mov r13d, dword [rsp + 0x64]
test r13b, r13b
je 0x180035708
movd xmm12, edi
cvtdq2ps xmm12, xmm12
movss dword [rbp + 0x1f8], xmm10
mulss xmm12, xmm5
mov r15b, byte [rbp + 0x1c8]
test r15b, r15b
je 0x180035832
cmp byte [rsi + 0xe84], r10b
je 0x180035832
test dword [rbp + 0x1e8], 0x1000
jne 0x180035781
comiss xmm13, dword [rsi + 0x50]
movaps xmm1, xmm10
movaps xmm0, xmm13
mulss xmm1, dword [0x18004df60]
subss xmm10, dword [r14 + 0xb0c]
jae 0x180035760
subss xmm0, xmm1
maxss xmm0, xmm8
cvttss2si eax, xmm0
jmp 0x180035773
subss xmm0, xmm10
comiss xmm0, dword [rsi + 0x50]
jb 0x180035785
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x50], xmm0
jmp 0x180035785
mov dword [rsi + 0x50], r10d
test r13b, r13b
je 0x18003582b
movaps xmm0, xmm15
subss xmm0, dword [r14 + 0xf18]
comiss xmm0, xmm6
jae 0x1800357aa
movaps xmm6, xmm0
maxss xmm6, xmm8
jmp 0x1800357d9
movss xmm2, dword [r14 + 0xb10]
movaps xmm1, xmm11
addss xmm2, xmm2
movaps xmm0, xmm15
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x1800357d9
movaps xmm6, xmm15
subss xmm6, xmm11
addss xmm6, xmm2
comiss xmm6, xmm8
movss xmm2, dword [r14 + 0xb10]
jae 0x1800357ee
movaps xmm2, xmm8
jmp 0x180035805
addss xmm2, xmm2
addss xmm2, xmm12
subss xmm2, xmm11
maxss xmm2, xmm8
minss xmm2, xmm6
movss xmm1, dword [rbp - 0x44]
mov rax, qword [rbp - 0x60]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
addss xmm1, xmm0
movss dword [rbp - 0x44], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rsi + 0xe84], r10b
movss xmm10, dword [rsi + 0x50]
movss xmm11, dword [0x18004dfb4]
cmp byte [rsp + 0x54], r10b
je 0x180035ab4
mov edx, dword [rsi + 0x5c]
mov eax, edx
mov ecx, dword [rsi + 0x58]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea r8, [r12 + rax*2]
movsxd rax, edx
lea rdi, [r12 + rax*2]
test r15b, r15b
je 0x180035874
movaps xmm1, xmm11
jmp 0x18003587c
movss xmm1, dword [0x18004df84]
mov rax, qword [0x1800536b0]
lea rcx, [rbp - 0x78]
movdqu xmm0, xmmword [rax + 0xe9c]
mulss xmm1, dword [rax + 0xad0]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp - 0x6c], xmm0
call fcn.180002c60
mov r15d, eax
test r13b, r13b
je 0x1800358c1
movss dword [rbp - 0x54], xmm8
movaps xmm14, xmm8
jmp 0x1800358ca
movss xmm14, dword [0x18004dfd8]
movss xmm6, dword [rbp - 0x44]
mov qword [rbp - 0x28], r8
addss xmm6, xmm7
addss xmm9, dword [rbp - 0x48]
subss xmm9, xmm10
cmp r8, rdi
jae 0x180035aa7
movss xmm1, dword [rbp - 0x14]
xor ebx, ebx
movss xmm5, dword [rbp - 0x1c]
movss xmm11, dword [rbp - 0x54]
mov r13, qword [rbp - 0x60]
movaps xmm0, xmm1
addss xmm0, dword [r14 + 0xf18]
comiss xmm6, xmm0
ja 0x180035a8e
comiss xmm6, xmm5
jae 0x180035948
cmp r8, rdi
jae 0x180035a71
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rbp - 0x28], r8
cmp ax, cx
je 0x180035a71
cmp r8, rdi
jb 0x180035929
jmp 0x180035a71
lea rax, [rbp - 0x28]
mov byte [rsp + 0x30], 1
mov r9, rdi
mov qword [rsp + 0x20], rax
mov rdx, r14
lea rcx, [rbp - 0x10]
call fcn.180031300
movss xmm5, dword [rbp - 0x10]
comiss xmm5, xmm8
ja 0x1800359a7
mov rax, qword [r14 + 0xf10]
cmp dword [rax], 0x20
jle 0x18003598a
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18003598f
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x18004df80]
cvttss2si eax, xmm0
movd xmm5, eax
cvtdq2ps xmm5, xmm5
movss dword [rbp - 0x10], xmm5
movss xmm8, dword [rbp - 0x20]
movaps xmm1, xmm9
addss xmm1, xmm5
movaps xmm0, xmm11
subss xmm0, dword [r14 + 0xf18]
movss xmm5, dword [rbp - 0x1c]
movaps xmm7, xmm8
maxss xmm7, xmm9
movaps xmm2, xmm14
movss xmm9, dword [rbp - 0x18]
addss xmm2, xmm6
movaps xmm4, xmm9
movaps xmm3, xmm5
addss xmm0, xmm6
minss xmm4, xmm1
movss xmm1, dword [rbp - 0x14]
movss dword [rbp - 0x78], xmm7
maxss xmm3, xmm0
movaps xmm0, xmm1
minss xmm0, xmm2
movss dword [rbp - 0x70], xmm4
movss dword [rbp - 0x74], xmm3
comiss xmm5, xmm0
movss dword [rbp - 0x6c], xmm0
jae 0x180035a69
comiss xmm1, xmm3
jbe 0x180035a69
comiss xmm8, xmm4
jae 0x180035a69
comiss xmm9, xmm7
jbe 0x180035a69
mov rcx, qword [r13 + 0x298]
lea r8, [rbp - 0x70]
xorps xmm8, xmm8
mov dword [rsp + 0x28], ebx
mov r9d, r15d
movss dword [rsp + 0x20], xmm8
lea rdx, [rbp - 0x78]
call fcn.18001f71c
movss xmm2, dword [rbp - 0x54]
movss xmm1, dword [rbp - 0x14]
movss xmm5, dword [rbp - 0x1c]
movss dword [rbp - 0x54], xmm2
movss xmm11, dword [rbp - 0x54]
jmp 0x180035a6d
xorps xmm8, xmm8
mov r8, qword [rbp - 0x28]
movss xmm9, dword [rbp - 0x48]
subss xmm9, xmm10
addss xmm6, dword [r14 + 0xf18]
cmp r8, rdi
jb 0x180035901
movss xmm11, dword [0x18004dfb4]
xor r10d, r10d
mov rsi, qword [rbp]
mov rbx, qword [rbp - 0x38]
mov r13d, dword [rsp + 0x64]
mov r15b, byte [rbp + 0x1c8]
movss xmm14, dword [rbp + 8]
mov r12, qword [rbp + 0x1d0]
test r13b, r13b
jne 0x180035ad2
mov rax, rbx
sub rax, r12
cmp rax, 0x200000
jge 0x180035b6f
mov rax, qword [0x1800536b0]
lea r8, [rbp - 0x20]
test r13b, r13b
lea rcx, [rbp - 0x78]
cmovne r8, r10
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 0x6c], xmm0
movss xmm0, dword [rbp - 0x48]
subss xmm0, xmm10
movss dword [rbp + 0x1c8], xmm0
movss xmm0, dword [rbp - 0x44]
movss dword [rbp + 0x1cc], xmm0
call fcn.180002c60
mov rdi, qword [rbp - 0x60]
lea r9, [rbp + 0x1c8]
movss xmm2, dword [r14 + 0xf18]
mov rdx, qword [r14 + 0xf10]
mov qword [rsp + 0x40], r8
mov rcx, qword [rdi + 0x298]
movss dword [rsp + 0x38], xmm8
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], eax
call fcn.18001f9bc
xor r10d, r10d
jmp 0x180035b73
mov rdi, qword [rbp - 0x60]
test r15b, r15b
je 0x180035d0e
movss xmm0, dword [r14 + 0x18]
addss xmm0, dword [rsi + 0xe80]
movss dword [rsi + 0xe80], xmm0
cmp byte [r14 + 0x5b], r10b
je 0x180035bc0
comiss xmm0, xmm8
jbe 0x180035bc0
movss xmm1, dword [0x18004dfbc]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
xor r10d, r10d
comiss xmm0, dword [0x18004dfa0]
jbe 0x180035bc0
mov cl, r10b
lea esi, [r10 + 1]
jmp 0x180035bc8
mov esi, 1
mov cl, sil
movss xmm0, dword [rbp - 0x44]
addss xmm0, xmm15
addss xmm13, dword [rbp - 0x48]
subss xmm13, xmm10
cvttss2si eax, xmm13
movd xmm6, eax
cvtdq2ps xmm6, xmm6
cvttss2si eax, xmm0
movss dword [rbp - 0x78], xmm6
movaps xmm3, xmm6
addss xmm3, xmm11
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp - 0x70], xmm3
movaps xmm1, xmm7
movaps xmm2, xmm7
subss xmm1, dword [r14 + 0xf18]
subss xmm2, dword [0x18004dfc4]
addss xmm1, dword [0x18004df80]
movss dword [rbp - 0x6c], xmm2
movss dword [rbp - 0x74], xmm1
test cl, cl
je 0x180035cc0
movss xmm0, dword [rbp - 0x1c]
comiss xmm0, xmm2
jae 0x180035cc0
movss xmm0, dword [rbp - 0x14]
comiss xmm0, xmm1
jbe 0x180035cc0
movss xmm0, dword [rbp - 0x20]
comiss xmm0, xmm3
jae 0x180035cc0
movss xmm0, dword [rbp - 0x18]
comiss xmm0, xmm6
jbe 0x180035cc0
mov rax, qword [0x1800536b0]
lea rcx, [rbp - 0x10]
movss dword [rbp + 0x1c8], xmm6
movss dword [rbp + 0x1cc], xmm2
movdqu xmm0, xmmword [rax + 0xbac]
movups xmmword [rbp - 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xad0]
movss dword [rbp - 4], xmm0
call fcn.180002c60
mov rcx, qword [rdi + 0x298]
lea rdx, [rbp - 0x78]
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x1c8]
call fcn.18001f4d0
xor r10d, r10d
movss xmm9, dword [rbp - 0x50]
movss xmm13, dword [rbp - 0x40]
mov r15d, dword [rsp + 0x68]
cmp byte [rsp + 0x5c], r10b
jne 0x180035d1f
movss xmm0, dword [r14 + 0xf18]
subss xmm6, xmm11
subss xmm7, xmm0
movss dword [r14 + 0x2ef4], xmm0
mov byte [r14 + 0x2ee8], sil
movss dword [r14 + 0x2eec], xmm6
movss dword [r14 + 0x2ef0], xmm7
jmp 0x180035d1f
movss xmm9, dword [rbp - 0x50]
movss xmm13, dword [rbp - 0x40]
mov r15d, dword [rsp + 0x68]
movss xmm6, dword [rbp + 0x1f8]
mov edi, dword [rbp - 0x58]
test dil, dil
je 0x180035d37
call fcn.18000d574
xor r10d, r10d
test r13b, r13b
je 0x180035db5
addss xmm12, dword [r14 + 0xb10]
lea rcx, [rbp + 0x1c8]
movss dword [rbp + 0x1c8], xmm6
movss dword [rbp + 0x1cc], xmm12
call fcn.18002f1fc
or dword [r14 + 0x1a68], 0x401
call fcn.180008a00
mov eax, dword [r14 + 0x1a84]
mov edi, dword [rbp + 0x98]
and eax, 0x80
or edi, eax
call fcn.180010248
xor r10d, r10d
cmp dword [r14 + 0x1a7c], r10d
jne 0x180035db2
mov eax, dword [rbp + 0x94]
mov dword [r14 + 0x1a80], eax
mov dword [r14 + 0x1a7c], r15d
mov dword [r14 + 0x1a84], edi
mov edi, dword [rbp - 0x58]
cmp byte [r14 + 0x2fa8], r10b
je 0x180035df5
test dil, dil
jne 0x180035df5
mov rax, qword [0x1800536b0]
lea rcx, [0x18004ca94]
mov r8, rbx
mov rdx, r12
mov qword [rax + 0x2fc8], rcx
lea rcx, [0x18004ca90]
mov qword [rax + 0x2fd0], rcx
lea rcx, [rbp - 0x48]
call fcn.1800151e8
comiss xmm14, xmm8
jbe 0x180035e2b
addss xmm13, dword [r14 + 0xb24]
addss xmm9, dword [r14 + 0xb10]
mov rdx, qword [rbp + 0x1c0]
mov r9d, 1
xor r8d, r8d
unpcklps xmm13, xmm9
movq rcx, xmm13
call fcn.180003e18
movzx r10d, byte [rsp + 0x51]
mov r9d, dword [rbp + 0x1e8]
test r10b, r10b
je 0x180035e4c
bt r9d, 0x1b
jb 0x180035e4c
mov ecx, r15d
call fcn.180005a58
movzx ecx, byte [rsp + 0x59]
test r9b, 0x20
mov eax, r10d
cmovne eax, ecx
jmp 0x1800333bc