Function at 0x180028490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x208
mov rbx, qword [0x18003d8e0]
movaps xmmword [rax - 0x58], xmm6
mov r13, rbx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [rbx + 0x1a68]
mov qword [rsp + 0x60], rbx
mov byte [rax + 0x80], 1
mov r15, qword [rbx + 0x1a68]
mov qword [rbp - 0x58], r15
cmp byte [r15 + 0x83], 0
jne 0x1800288cf
mov ecx, dword [rbp + 0x178]
mov eax, ecx
shr eax, 0xe
mov edi, ecx
and al, 1
shr edi, 0x14
mov dword [rsp + 0x58], eax
and dil, 1
mov eax, ecx
mov dword [rsp + 0x6c], ecx
shr eax, 0xf
and al, 1
mov dword [rsp + 0x68], edi
mov dword [rbp - 0x40], eax
mov eax, ecx
shr eax, 0x10
not al
and al, 1
mov dword [rbp - 0x68], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rbp - 0x60], eax
test dil, dil
je 0x18002858b
call fcn.18000d870
mov rbx, qword [0x18003d8e0]
movsxd rcx, dword [r15 + 0xc0]
lea rsi, [0x18003277c]
mov rax, qword [r15 + 0xc8]
xor edx, edx
mov r8d, dword [rax + rcx*4 - 4]
mov rcx, rsi
call fcn.180003150
mov r12d, eax
mov dword [rbp - 0x6c], eax
cmp dword [rbx + 0x1ab0], eax
jne 0x1800285c3
mov dword [rbx + 0x1ab4], eax
cmp dword [rbx + 0x1aec], r12d
jne 0x1800285d3
mov byte [rbx + 0x1af0], 1
mov rcx, rsi
cmp rsi, 0xffffffffffffffff
jae 0x1800285fd
nop dword [rax]
movzx edx, byte [rcx]
test dl, dl
je 0x1800285fd
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x1800285f4
cmp byte [rax], dl
je 0x1800285fd
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x1800285e0
movss xmm0, dword [rbx + 0x1960]
xorps xmm12, xmm12
movss xmm1, dword [0x1800370e0]
cmp rsi, rcx
jne 0x18002861b
xorps xmm6, xmm6
jmp 0x18002866c
movss xmm3, dword [0x1800370d4]
lea rdx, [rbp + 0x158]
mov qword [rsp + 0x30], rcx
movaps xmm2, xmm0
mov rcx, qword [rbx + 0x1958]
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm1
call fcn.180020f70
movss xmm0, dword [rbp + 0x158]
addss xmm0, dword [0x18003704c]
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x15c]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rbp - 0x30], xmm6
test dil, dil
je 0x180028687
movss xmm0, dword [r13 + 0x1960]
mulss xmm0, dword [0x180037088]
movss xmm9, dword [r13 + 0x1594]
movaps xmm3, xmm9
addss xmm3, xmm9
addss xmm3, xmm0
call fcn.18000d420
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0x158]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18000d490
comiss xmm6, xmm12
jbe 0x1800286cf
movaps xmm1, xmm6
addss xmm1, dword [r13 + 0x15a8]
jmp 0x1800286d2
xorps xmm1, xmm1
movss xmm14, dword [r15 + 0xd0]
movss xmm13, dword [r15 + 0xd4]
movaps xmm15, xmm14
movss xmm11, dword [rbp + 0x158]
movaps xmm2, xmm13
movss xmm10, dword [rbp + 0x15c]
addss xmm1, xmm11
movss dword [rbp - 0x3c], xmm14
addss xmm15, xmm11
movss dword [rbp - 0x38], xmm11
movaps xmm7, xmm13
movss dword [rbp - 0x50], xmm13
addss xmm2, xmm10
movss dword [rbp - 0x18], xmm10
addss xmm7, xmm10
movss dword [rbp - 0x80], xmm14
addss xmm1, xmm14
movss dword [rbp - 0x34], xmm15
movaps xmm6, xmm13
movss dword [rbp - 0x7c], xmm13
movaps xmm8, xmm14
movss dword [rbp - 0x78], xmm15
movss dword [rbp - 0x74], xmm7
movss dword [rsp + 0x70], xmm14
movaps xmm0, xmm1
unpcklps xmm0, xmm2
movsd qword [rsp + 0x78], xmm0
movss dword [rsp + 0x74], xmm6
mov qword [rbp - 0x48], r15
test dil, dil
je 0x1800289a6
mov rdi, qword [rbx + 0x1a68]
test r12d, r12d
je 0x180028819
mov eax, dword [rdi + 0x13c]
or dword [rdi + 0x144], eax
cmp dword [rbx + 0x1bd8], r12d
je 0x1800287ac
cmp byte [rbx + 0x1c48], 0
je 0x180028819
mov rcx, qword [rbx + 0x1bd0]
mov rax, qword [rdi + 0x370]
cmp qword [rcx + 0x370], rax
jne 0x180028819
cmp rdi, rcx
je 0x1800287d4
mov eax, dword [rcx + 0xc]
or eax, dword [rdi + 0xc]
bt eax, 0x17
jae 0x180028819
mov r8d, r12d
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.18000f1e0
movss xmm15, dword [rbp - 0x78]
movss xmm13, dword [rbp - 0x7c]
movss xmm14, dword [rbp - 0x80]
movss xmm7, dword [rbp - 0x74]
movss xmm6, dword [rsp + 0x74]
movss xmm8, dword [rsp + 0x70]
movss dword [rbp - 0x34], xmm15
movss dword [rbp - 0x50], xmm13
movss dword [rbp - 0x3c], xmm14
movups xmm1, xmmword [rsp + 0x70]
xor esi, esi
mov dword [rdi + 0x110], r12d
mov dword [rdi + 0x114], esi
movups xmmword [rdi + 0x118], xmm1
mov dword [rbx + 0x1b70], esi
mov rax, qword [rbx + 0x1a68]
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xaa
shufps xmm1, xmm1, 0xff
comiss xmm1, dword [rax + 0x234]
jbe 0x18002887d
movss xmm0, dword [rax + 0x23c]
comiss xmm0, xmm6
jbe 0x18002887d
comiss xmm2, dword [rax + 0x230]
jbe 0x18002887d
movss xmm0, dword [rax + 0x238]
comiss xmm0, xmm8
ja 0x180028924
test r12d, r12d
je 0x18002888f
cmp r12d, dword [rbx + 0x1ab0]
je 0x180028924
cmp byte [rbx + 0x2f80], sil
jne 0x180028924
subss xmm1, xmm6
subss xmm2, xmm8
lea rcx, [rbp + 0x158]
movss dword [rbp + 0x15c], xmm1
movss xmm1, dword [r13 + 0x1594]
movss dword [rbp + 0x158], xmm2
call fcn.180005210
call fcn.18000d990
xor al, al
lea r11, [rsp + 0x208]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8b, 1
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.180008010
test al, al
je 0x180028941
or dword [rdi + 0x114], 1
movaps xmm0, xmm15
subss xmm7, xmm13
subss xmm0, xmm14
mov ecx, r12d
lea rdx, [rbp + 0x158]
movss dword [rbp + 0x15c], xmm7
movss dword [rbp + 0x158], xmm0
call fcn.180008670
test al, al
jne 0x18002897c
call fcn.180008400
jmp 0x1800288ca
mov r14, qword [r13 + 0x1a68]
mov qword [rbp - 0x48], r14
subss xmm11, dword [r14 + 0x74]
mov eax, dword [r14 + 0x13c]
or dword [r14 + 0x144], eax
movss dword [rbp - 0x38], xmm11
jmp 0x180028b02
subss xmm1, xmm14
subss xmm2, xmm13
lea rcx, [rbp + 0x158]
movss dword [rbp + 0x158], xmm1
movaps xmm1, xmm9
movss dword [rbp + 0x15c], xmm2
call fcn.180005210
mov rdi, qword [0x18003d8e0]
mov rbx, qword [rdi + 0x1a68]
test r12d, r12d
je 0x180028a6b
mov eax, dword [rbx + 0x13c]
or dword [rbx + 0x144], eax
cmp dword [rdi + 0x1bd8], r12d
je 0x180028a05
cmp byte [rdi + 0x1c48], 0
je 0x180028a6b
mov rcx, qword [rdi + 0x1bd0]
mov rax, qword [rbx + 0x370]
cmp qword [rcx + 0x370], rax
jne 0x180028a6b
cmp rbx, rcx
je 0x180028a2d
mov eax, dword [rcx + 0xc]
or eax, dword [rbx + 0xc]
bt eax, 0x17
jae 0x180028a6b
mov r8d, r12d
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.18000f1e0
movss xmm0, dword [rbp - 0x78]
movss xmm13, dword [rbp - 0x7c]
movss xmm14, dword [rbp - 0x80]
movss xmm6, dword [rsp + 0x74]
movss xmm8, dword [rsp + 0x70]
movss dword [rbp - 0x34], xmm0
movss dword [rbp - 0x50], xmm13
movss dword [rbp - 0x3c], xmm14
movups xmm0, xmmword [rsp + 0x70]
xor esi, esi
mov dword [rbx + 0x110], r12d
mov dword [rbx + 0x114], esi
movups xmmword [rbx + 0x118], xmm0
mov dword [rdi + 0x1b70], esi
mov rax, qword [rdi + 0x1a68]
shufps xmm0, xmm0, 0xff
comiss xmm0, dword [rax + 0x234]
jbe 0x180028aca
movss xmm0, dword [rax + 0x23c]
comiss xmm0, xmm6
jbe 0x180028aca
movss xmm0, dword [rsp + 0x78]
comiss xmm0, dword [rax + 0x230]
jbe 0x180028aca
movss xmm0, dword [rax + 0x238]
comiss xmm0, xmm8
ja 0x180028ae5
test r12d, r12d
je 0x180028ad8
cmp r12d, dword [rdi + 0x1ab0]
je 0x180028ae5
cmp byte [rdi + 0x2f80], sil
je 0x1800288cf
mov r8b, 1
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.180008010
test al, al
je 0x180028b02
or dword [rbx + 0x114], 1
mov edx, r12d
lea rcx, [rbp - 0x80]
call fcn.180005550
movzx r10d, al
mov byte [rbp - 0x4c], al
mov eax, 1
test r10b, r10b
je 0x180028b26
mov dword [r13 + 0x1ee0], eax
lea r14, [r13 + 0x1fd8]
mov edx, r12d
cmp dword [r14], r12d
mov rbx, r14
mov rcx, r15
cmovne rbx, rsi
mov qword [rsp + 0x50], rbx
call fcn.1800056b0
movzx esi, al
test al, al
je 0x180028b6c
cmp qword [r13 + 0x1d08], r15
jne 0x180028b6c
mov ecx, dword [r15 + 0x178]
cmp dword [r13 + 0x1d18], ecx
jne 0x180028b6c
mov r15b, 1
jmp 0x180028b7b
xor r15b, r15b
mov byte [rbp + 0x168], 1
test sil, sil
jne 0x180028b82
mov byte [rbp + 0x168], 0
test r10b, r10b
je 0x180028b96
cmp byte [r13 + 0x420], 0
je 0x180028b96
mov r13b, 1
jmp 0x180028b99
xor r13b, r13b
mov rax, qword [rsp + 0x60]
mov edi, dword [rax + 0x1ab0]
cmp edi, r12d
je 0x180028bc9
cmp dword [rax + 0x1be8], r12d
je 0x180028bc4
cmp dword [rax + 0x1bdc], r12d
jne 0x180028bc9
cmp dword [rax + 0x1bfc], 3
jne 0x180028bc9
mov r12b, 1
jmp 0x180028bcc
xor r12b, r12b
mov eax, dword [rsp + 0x68]
mov byte [rbp + 0x188], r12b
test al, al
je 0x180028c1e
test rbx, rbx
je 0x180028c1e
test edi, edi
jne 0x180028c1e
mov rax, qword [rbp - 0x48]
xor edx, edx
movsxd rcx, dword [rax + 0xc0]
mov rax, qword [rax + 0xc8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, str.SCROLLY
call fcn.180003150
mov rcx, qword [rsp + 0x60]
cmp dword [rcx + 0x1aec], eax
jne 0x180028c1a
mov bl, 1
jmp 0x180028c2c
mov eax, dword [rsp + 0x68]
xor bl, bl
test al, al
je 0x180028c59
cmp qword [rsp + 0x50], 0
je 0x180028c59
mov rax, qword [rbp - 0x48]
xor edx, edx
movsxd rcx, dword [rax + 0xc0]
mov rax, qword [rax + 0xc8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, str.SCROLLY
call fcn.180003150
cmp edi, eax
jne 0x180028c59
mov al, 1
jmp 0x180028c5b
xor al, al
mov ecx, dword [rbp - 0x6c]
mov byte [rbp + 0x150], al
mov byte [rbp + 0x158], 0
cmp edi, ecx
je 0x180028c8b
mov edx, dword [rsp + 0x6c]
test dl, 0x10
jne 0x180028c7d
test r12b, r12b
je 0x180028c8b
cmp byte [rsp + 0x68], 0
mov byte [rbp + 0x180], 1
je 0x180028c92
mov byte [rbp + 0x180], 0
test sil, sil
jne 0x180028cb3
test r13b, r13b
jne 0x180028cb3
test bl, bl
jne 0x180028cb3
test r12b, r12b
jne 0x180028cb3
test al, al
jne 0x180028cb6
mov r14, qword [rsp + 0x50]
jmp 0x180028ee2
mov r12b, 1
mov rax, qword [rsp + 0x50]
mov bl, 1
mov qword [rsp + 0x50], rax
cmp edi, ecx
je 0x180028edf
mov rsi, r14
mov qword [rsp + 0x50], r14
mov dword [r14 + 0xe70], 0xbe99999a
mov rax, 0xffffffffffffffff
mov r14, qword [rbp + 0x160]
nop dword [rax + rax]
cmp byte [r14 + rax + 1], 0
lea rax, [rax + 1]
jne 0x180028cf0
mov ecx, dword [rsi + 0x34]
lea ebx, [rax + 1]
cmp ebx, ecx
jle 0x180028d2a
test ecx, ecx
je 0x180028d15
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180028d1a
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x30]
mov edx, ebx
cmovg edx, eax
call fcn.1800139b0
mov dword [rsi + 0x30], ebx
mov rdx, r14
mov rcx, qword [rsi + 0x38]
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [rsi + 0x14]
cmp ecx, 0x21
jge 0x180028d6b
test ecx, ecx
je 0x180028d53
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180028d58
mov eax, 8
mov edx, 0x21
lea rcx, [rsi + 0x10]
cmp eax, edx
cmovg edx, eax
call fcn.180013a40
mov dword [rsi + 0x10], 0x21
mov ecx, dword [rsi + 0x24]
test ecx, ecx
jns 0x180028d96
mov eax, ecx
xor r8d, r8d
cdq
sub eax, edx
mov edx, r8d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x20]
test eax, eax
cmovg edx, eax
call fcn.1800139b0
xor eax, eax
mov rdi, r14
mov dword [rsi + 0x20], eax
mov r14, qword [rsi + 0x18]
mov byte [rsi + 0x40], al
mov rbx, r14
lea rsi, [r14 + 0x3e]
cmp r14, rsi
jae 0x180028de7
cmp byte [rdi], 0
je 0x180028de5
xor r8d, r8d
lea rcx, [rbp - 0x5c]
mov rdx, rdi
call fcn.180003510
movsxd rcx, eax
mov eax, dword [rbp - 0x5c]
add rdi, rcx
test eax, eax
je 0x180028de5
cmp eax, 0xffff
ja 0x180028de0
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x180028db1
xor eax, eax
sub edi, dword [rbp + 0x160]
mov word [rbx], ax
sub rbx, r14
mov r14, qword [rsp + 0x50]
sar rbx, 1
mov dword [r14 + 8], edi
mov edi, dword [rbp - 0x6c]
mov dword [r14 + 4], ebx
cmp dword [r14], edi
jne 0x180028e38
cmp dword [r14 + 0x4c], ebx
mov ecx, ebx
cmovl ecx, dword [r14 + 0x4c]
cmp dword [r14 + 0x50], ebx
mov dword [r14 + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [r14 + 0x50]
cmp dword [r14 + 0x54], ebx
mov dword [r14 + 0x50], ecx
cmovl ebx, dword [r14 + 0x54]
mov dword [r14 + 0x54], ebx
jmp 0x180028e9f
mov ecx, dword [rsp + 0x68]
mov dword [r14 + 0xe68], eax
mov dword [r14 + 0x60], eax
movzx eax, cl
xor al, 1
mov dword [r14], edi
mov qword [r14 + 0x48], 0
mov dword [r14 + 0xe62], 0x630000
mov dword [r14 + 0xe6c], 0x3e7
mov qword [r14 + 0x50], 0
mov dword [r14 + 0x58], 0x10000
mov byte [r14 + 0x5c], al
test cl, cl
jne 0x180028ea3
mov ecx, dword [rbp + 0x180]
test r15b, r15b
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rbp + 0x180], ecx
mov ecx, dword [rsp + 0x68]
mov r15d, dword [rsp + 0x6c]
bt r15d, 0xd
jae 0x180028eb4
mov byte [r14 + 0x58], 1
test cl, cl
jne 0x180028edb
cmp byte [rbp + 0x168], cl
jne 0x180028ed2
test r13b, r13b
je 0x180028edb
mov rax, qword [rsp + 0x60]
cmp byte [rax + 0x148], cl
je 0x180028edb
mov r13b, 1
movzx ebx, r13b
jmp 0x180028ef0
mov bl, 1
jmp 0x180028ee9
mov r14, rax
mov r15d, dword [rsp + 0x6c]
mov edi, ecx
mov r13d, dword [rbp + 0x180]
mov rsi, qword [rsp + 0x60]
cmp dword [rsi + 0x1ab0], edi
je 0x180028f81
test r12b, r12b
je 0x180028f81
mov rdx, qword [rbp - 0x58]
mov ecx, edi
call fcn.180005070
call fcn.180005140
mov rcx, rdx
call fcn.18000d1f0
mov eax, dword [rsi + 0x1ac4]
mov ecx, dword [rsp + 0x68]
or eax, 3
mov dword [rsi + 0x1ac4], eax
test cl, cl
jne 0x180028f3a
test r15b, r15b
jns 0x180028f43
or eax, 0xc
mov dword [rsi + 0x1ac4], eax
mov rax, qword [rsi + 0x1ad0]
or dword [rsi + 0x1ac8], 2
or rax, 0x180
mov qword [rsi + 0x1ad0], rax
test cl, cl
je 0x180028f6d
or rax, 0x60
mov qword [rsi + 0x1ad0], rax
test r15d, 0x440
je 0x180028f81
or rax, 1
mov qword [rsi + 0x1ad0], rax
mov r11, qword [0x18003d8e0]
mov qword [rsp + 0x70], r11
cmp dword [rsi + 0x1ab0], edi
jne 0x18002901b
test r14, r14
jne 0x180028ff6
mov ecx, dword [r11 + 0x1ab0]
test ecx, ecx
setne al
mov byte [r11 + 0x1abc], al
xor eax, eax
test ecx, ecx
je 0x180028fc6
mov dword [r11 + 0x1ab8], eax
mov word [r11 + 0x1abe], ax
mov dword [r11 + 0x1ab0], eax
mov byte [r11 + 0x1abd], 0
mov qword [r11 + 0x1ae0], rax
mov byte [r11 + 0x1ac0], 0
mov qword [r11 + 0x1ac4], 0
mov qword [r11 + 0x1ad0], rax
cmp dword [rsi + 0x1ab0], edi
jne 0x18002901b
cmp byte [rsi + 0x420], 0
je 0x180029029
test bl, bl
jne 0x180029029
test r12b, r12b
jne 0x180029029
mov byte [rbp + 0x158], 1
mov cl, 1
jmp 0x18002902f
test r14, r14
je 0x18002902d
cmp byte [rbp + 0x150], 0
je 0x18002902d
mov cl, 1
jmp 0x18002902f
xor cl, cl
mov byte [rbp + 0x168], cl
test r14, r14
je 0x18002904d
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
je 0x18002904d
test cl, cl
je 0x18002904d
mov r12b, 1
jmp 0x180029050
xor r12b, r12b
mov eax, dword [rsp + 0x58]
mov dword [rbp - 0x64], r12d
movzx r15d, r12b
mov byte [rbp - 0x6f], 0
mov byte [rbp + 0x180], 0
test al, al
je 0x18002918e
test r14, r14
je 0x18002918e
test cl, cl
jne 0x180029085
test r12b, r12b
je 0x180029197
mov ecx, dword [r14 + 0x14]
cmp ecx, 0x21
jge 0x1800290c1
test ecx, ecx
je 0x18002909d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800290a2
mov eax, 8
mov edx, 0x21
lea rcx, [r14 + 0x10]
cmp eax, edx
cmovg edx, eax
call fcn.180013a40
mov rax, qword [0x18003d8e0]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x160]
mov dword [r14 + 0x10], 0x21
mov rdi, rax
mov r14, qword [r14 + 0x18]
mov rbx, r14
lea rsi, [r14 + 0x40]
cmp r14, rsi
jae 0x180029124
cmp byte [rdi], 0
je 0x18002911d
xor r8d, r8d
lea rcx, [rbp + 0x150]
mov rdx, rdi
call fcn.180003510
movsxd rcx, eax
mov eax, dword [rbp + 0x150]
add rdi, rcx
test eax, eax
je 0x18002911d
cmp eax, 0xffff
ja 0x180029118
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x1800290e3
mov rax, qword [rbp + 0x160]
mov r11, qword [rsp + 0x70]
sub edi, eax
mov rsi, qword [rsp + 0x60]
xor edx, edx
mov eax, dword [rsp + 0x58]
mov r12d, edx
mov word [rbx], dx
sub rbx, r14
mov r14, qword [rsp + 0x50]
sar rbx, 1
mov ecx, ebx
cmp dword [r14 + 0x4c], ebx
mov dword [r14 + 4], ebx
cmovl ecx, dword [r14 + 0x4c]
cmp dword [r14 + 0x50], ebx
mov dword [r14 + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [r14 + 0x50]
cmp dword [r14 + 0x54], ebx
mov dword [r14 + 8], edi
cmovl ebx, dword [r14 + 0x54]
mov edi, dword [rbp - 0x6c]
cmp ecx, ebx
mov dword [r14 + 0x50], ecx
movzx ecx, byte [rbp + 0x168]
cmovne r12d, r15d
mov dword [rbp - 0x64], r12d
mov dword [r14 + 0x54], ebx
test cl, cl
jne 0x18002919f
test r12b, r12b
jne 0x18002919f
cmp dword [rsi + 0x1ab0], edi
jne 0x1800291b2
test al, al
jne 0x1800291b2
test r14, r14
je 0x1800291b2
mov byte [rbp - 0x70], 1
cmp byte [r14 + 0x40], al
jne 0x1800291b6
mov byte [rbp - 0x70], 0
cmp byte [rbp - 0x40], 0
je 0x1800292a4
mov rdx, qword [rsi + 0x1958]
cmp dword [rdx + 0x18], 0x2a
jg 0x1800291d3
mov r8, qword [rdx + 0x38]
jmp 0x1800291f7
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x1800291eb
mov r8, qword [rdx + 0x38]
jmp 0x1800291f7
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r8, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea rbx, [rsi + 0x2e68]
mov dword [rbx + 0x14], eax
mov rax, qword [rsi + 0x1958]
mov qword [rbp + 0x150], rbx
mov ecx, dword [rax + 0x60]
mov dword [rbx + 0x60], ecx
mov rax, qword [rsi + 0x1958]
movsd xmm0, qword [rax + 0x40]
movsd qword [rbx + 0x40], xmm0
mov rax, qword [rsi + 0x1958]
mov ecx, dword [rax + 0x64]
mov dword [rbx + 0x64], ecx
mov rax, qword [rsi + 0x1958]
mov ecx, dword [rax + 0x68]
mov dword [rbx + 0x68], ecx
mov rax, qword [rsi + 0x1958]
mov rcx, qword [rax + 0x48]
mov qword [rbx + 0x48], rcx
mov rcx, rbx
mov qword [rbx + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rbx + 0x10], eax
call fcn.18000d580
lea rdx, [rbp + 0x150]
lea rcx, [r11 + 0x1ba0]
call fcn.180013730
mov rdx, qword [rbx + 0x48]
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rdx + 8]
mov rcx, qword [rbx + 0x1a68]
mov rcx, qword [rcx + 0x2a8]
call fcn.18001b8e0
mov r11, qword [0x18003d8e0]
mov qword [rsp + 0x70], r11
movss xmm8, dword [0x180037024]
xor r15d, r15d
mov ecx, 0x20000c
mov dword [rbp - 0x5c], r15d
cmp dword [rsi + 0x1ab0], edi
jne 0x1800296dd
mov eax, dword [r14 + 8]
mov edx, dword [rsp + 0x6c]
mov dword [r14 + 0xe78], edx
mov dword [r14 + 0x44], 0x20
mov qword [r14 + 0xe80], r15
mov qword [r14 + 0xe88], r15
movzx edx, byte [rsi + 0x138]
test dl, dl
mov dword [rbp - 0x5c], eax
sete al
mov byte [rsi + 0x1abd], al
mov eax, 1
mov dword [rsi + 0x31ac], eax
movss xmm1, dword [rsi + 0x130]
subss xmm1, xmm14
subss xmm1, dword [rsi + 0x1590]
addss xmm1, dword [r14 + 0x48]
cmp byte [rsp + 0x68], r15b
je 0x18002934a
mov rax, qword [rbp - 0x48]
movss xmm2, dword [rsi + 0x134]
subss xmm2, dword [rax + 0xd4]
subss xmm2, dword [rsi + 0x1594]
jmp 0x180029357
movss xmm2, dword [rsi + 0x1960]
mulss xmm2, xmm8
movzx edi, byte [rsi + 0xc9]
test r13b, r13b
jne 0x1800294b8
movzx eax, byte [rbp - 0x4c]
test al, al
je 0x180029381
test dil, dil
jne 0x1800293d9
cmp byte [rsi + 0x425], r15b
jne 0x1800294b8
lea rbx, [r14 + 0xe75]
movzx ecx, byte [rbx]
cmp byte [rsi + 0x420], r15b
je 0x180029441
test cl, cl
jne 0x180029441
test al, al
je 0x1800293d1
cmp byte [r14 + 0x5c], r15b
je 0x1800293ae
movaps xmm2, xmm12
mov rcx, r14
call fcn.180026be0
mov dword [r14 + 0x4c], eax
mov dword [r14 + 0x50], eax
mov dword [r14 + 0x54], eax
mov byte [r14 + 0x5b], r15b
mov dword [r14 + 0xe70], 0xbe99999a
mov rax, rbx
jmp 0x1800294d6
cmp byte [rsi + 0x425], r15b
je 0x180029381
mov r8d, ecx
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800270d0
mov r8d, 0x60000d
mov byte [r14 + 0xe74], 1
lea rdx, [r14 + 0x4c]
mov dword [r14 + 0xe70], 0xbe99999a
mov rcx, r14
call fcn.1800270d0
mov rcx, qword [0x18003d8e0]
lea rax, [r14 + 0xe75]
mov qword [rsp + 0x70], rcx
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x1800294db
mov rax, rbx
test dl, dl
je 0x1800294d6
test cl, cl
jne 0x1800294d6
movss xmm0, dword [rsi + 0x3c0]
ucomiss xmm0, xmm12
jp 0x180029474
jne 0x180029474
movss xmm0, dword [rsi + 0x3c4]
ucomiss xmm0, xmm12
jp 0x180029474
je 0x1800294d6
cmp byte [r14 + 0x5c], r15b
je 0x18002947e
movaps xmm2, xmm12
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
jne 0x180029490
mov eax, dword [r14 + 0x4c]
mov dword [r14 + 0x50], eax
mov rcx, r14
call fcn.180026be0
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x4c], eax
mov rax, rbx
mov dword [r14 + 0xe70], 0xbe99999a
mov byte [r14 + 0xe74], 1
jmp 0x1800294d6
mov eax, dword [r14 + 4]
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x4c], eax
lea rax, [r14 + 0xe75]
mov byte [rax], 1
mov dword [r14 + 0x50], r15d
mov byte [r14 + 0x5b], r15b
mov rcx, qword [rsp + 0x70]
cmp byte [rax], r15b
je 0x1800294ec
cmp byte [rsi + 0x138], r15b
jne 0x1800294ec
mov byte [rax], r15b
cmp byte [rsi + 0x148], r15b
je 0x1800294fe
cmp byte [rsi + 0x14a], r15b
je 0x18002950c
test dil, dil
je 0x180029510
cmp byte [rsi + 0x14b], r15b
je 0x180029510
mov bl, 1
jmp 0x180029512
xor bl, bl
mov r8d, dword [rsp + 0x6c]
bt r8d, 0xa
jae 0x1800295dc
mov ecx, dword [rcx + 0x3c]
test ecx, ecx
js 0x1800295dc
call fcn.1800080e0
test al, al
mov eax, dword [rsp + 0x58]
je 0x1800295d5
test bl, bl
jne 0x1800295d5
cmp byte [rsi + 0x149], r15b
jne 0x1800295d5
test al, al
jne 0x1800295d5
mov rcx, qword [rsi + 0x1550]
movsxd rax, dword [rsi + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x180029584
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x1800295dc
cmp rcx, rdx
jb 0x180029572
mov edx, r8d
mov dword [rbp + 0x150], 9
lea rcx, [rbp + 0x150]
call fcn.180028330
test al, al
je 0x1800295c7
mov r8d, dword [rbp + 0x150]
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800270d0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
mov r11, qword [0x18003d8e0]
mov qword [rsp + 0x70], r11
jmp 0x1800295e1
mov r11, qword [rsp + 0x70]
jmp 0x1800295e5
mov r11, qword [rsp + 0x70]
mov eax, dword [rsp + 0x58]
cmp dword [rsi + 0x1548], r15d
jle 0x1800296d5
test bl, bl
jne 0x18002969b
test al, al
jne 0x18002969b
cmp byte [rbp + 0x188], r15b
jne 0x18002969b
mov rdx, qword [rsp + 0x60]
mov edi, r15d
mov r12d, dword [rsp + 0x6c]
mov rbx, r15
nop
mov rax, qword [rdx + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp + 0x150], ecx
cmp ecx, 9
jne 0x18002963f
cmp byte [rdx + 0x149], r15b
jne 0x18002967d
mov edx, r12d
lea rcx, [rbp + 0x150]
call fcn.180028330
test al, al
je 0x180029678
mov r8d, dword [rbp + 0x150]
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800270d0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
mov rdx, qword [rsp + 0x60]
inc edi
add rbx, 2
cmp edi, dword [rsi + 0x1548]
jl 0x180029620
mov r11, qword [0x18003d8e0]
mov r12d, dword [rbp - 0x64]
mov qword [rsp + 0x70], r11
mov ecx, dword [rsi + 0x154c]
test ecx, ecx
jns 0x1800296ce
mov eax, ecx
cdq
sub eax, edx
mov edx, r15d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x1548]
test eax, eax
cmovg edx, eax
call fcn.180013a40
mov r11, qword [0x18003d8e0]
mov qword [rsp + 0x70], r11
mov dword [rsi + 0x1548], r15d
mov rsi, qword [rsp + 0x60]
mov edi, dword [rbp - 0x6c]
xor cl, cl
cmp dword [rsi + 0x1ab0], edi
jne 0x18002a3f0
cmp byte [rsi + 0x1abc], cl
jne 0x18002a297
cmp byte [rbp + 0x158], cl
jne 0x18002a297
movzx edx, byte [rsi + 0x149]
movzx r8d, byte [rsi + 0xc9]
movzx eax, dl
neg al
movzx eax, byte [rsi + 0x148]
sbb r12d, r12d
and r12d, 0x400000
test r8b, r8b
je 0x18002974f
lea r9, [rsi + 0x14b]
mov qword [rbp - 0x58], r9
cmp byte [r9], cl
je 0x180029746
mov ecx, 1
test al, al
je 0x180029749
mov ecx, r15d
test ecx, ecx
je 0x18002977f
jmp 0x180029766
lea rcx, [rsi + 0x14b]
test al, al
je 0x180029778
cmp byte [rcx], r15b
jne 0x180029778
mov r9, rcx
mov qword [rbp - 0x58], rcx
cmp byte [rsi + 0x14a], r15b
jne 0x18002977f
test dl, dl
jne 0x18002977f
mov r13b, 1
jmp 0x180029782
mov r9, rcx
mov qword [rbp - 0x58], rcx
xor r13b, r13b
movzx ecx, al
test r8b, r8b
je 0x1800297b5
cmp byte [rsi + 0x14b], r15b
je 0x1800297b5
test dl, dl
je 0x1800297b5
movzx r14d, byte [rsi + 0x148]
movzx ecx, r14b
test r14b, r14b
jne 0x1800297b5
cmp byte [rsi + 0x14a], r15b
jne 0x1800297b5
mov bl, 1
jmp 0x1800297c0
xor bl, bl
movzx r14d, cl
test r8b, r8b
je 0x180029803
cmp byte [r9], 0
movzx r15d, byte [rsi + 0x14a]
je 0x180029807
test r14b, r14b
jne 0x180029807
test r15b, r15b
jne 0x180029807
mov sil, 1
mov rcx, qword [rsp + 0x60]
xor r8b, r8b
movzx r10d, sil
test dl, dl
je 0x18002982b
test r14b, r14b
jne 0x18002982b
cmp byte [rcx + 0x14a], r8b
jne 0x18002982b
cmp byte [r9], r8b
jne 0x18002982b
mov r9b, 1
jmp 0x18002982e
movzx r15d, cl
xor esi, esi
test r14b, r14b
je 0x1800297db
mov rcx, qword [rsp + 0x60]
test dl, dl
jne 0x1800297e0
cmp byte [rcx + 0x14a], sil
jne 0x1800297e0
cmp byte [r9], sil
jne 0x1800297e0
mov r8b, 1
xor r10d, r10d
xor r9b, r9b
test r13b, r13b
je 0x180029847
mov ecx, dword [r11 + 0x88]
test ecx, ecx
js 0x180029847
call fcn.1800080e0
test al, al
jne 0x18002985d
test r9b, r9b
je 0x180029887
mov ecx, dword [r11 + 0x64]
test ecx, ecx
js 0x180029887
call fcn.1800080e0
test al, al
je 0x180029887
cmp byte [rsp + 0x58], 0
mov rdi, qword [rsp + 0x50]
jne 0x18002988c
cmp byte [rbp - 0x40], 0
jne 0x18002988c
cmp byte [rsp + 0x68], 0
je 0x18002987e
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
je 0x18002988c
mov byte [rbp + 0x150], 1
jmp 0x180029893
mov rdi, qword [rsp + 0x50]
mov byte [rbp + 0x150], 0
test r13b, r13b
je 0x1800298ac
mov ecx, dword [r11 + 0x80]
test ecx, ecx
js 0x1800298ac
call fcn.1800080e0
test al, al
jne 0x1800298c2
test r8b, r8b
je 0x1800298dc
mov ecx, dword [r11 + 0x60]
test ecx, ecx
js 0x1800298dc
call fcn.1800080e0
test al, al
je 0x1800298dc
cmp byte [rbp - 0x40], 0
jne 0x1800298dc
cmp byte [rsp + 0x68], 0
je 0x1800298d7
mov eax, dword [rdi + 0x54]
cmp dword [rdi + 0x50], eax
je 0x1800298dc
mov dil, 1
jmp 0x1800298df
xor dil, dil
test r13b, r13b
je 0x1800298f8
mov ecx, dword [r11 + 0x84]
test ecx, ecx
js 0x1800298f8
call fcn.1800080e0
test al, al
jne 0x18002990e
test r9b, r9b
je 0x18002991d
mov ecx, dword [r11 + 0x60]
test ecx, ecx
js 0x18002991d
call fcn.1800080e0
test al, al
je 0x18002991d
mov r9d, dword [rsp + 0x58]
test r9b, r9b
jne 0x180029922
mov r11b, 1
jmp 0x180029925
mov r9d, dword [rsp + 0x58]
xor r11b, r11b
mov r8, qword [rsp + 0x70]
test r13b, r13b
je 0x180029953
mov ecx, dword [r8 + 0x90]
test ecx, ecx
js 0x180029953
call fcn.1800080e0
test al, al
je 0x180029953
test r9b, r9b
jne 0x180029953
cmp byte [rbp - 0x68], r9b
je 0x180029953
mov r9b, 1
jmp 0x18002995b
xor r9b, r9b
test r13b, r13b
je 0x18002996f
mov ecx, dword [r8 + 0x8c]
test ecx, ecx
js 0x18002996f
call fcn.1800080e0
test al, al
jne 0x180029987
test bl, bl
je 0x180029999
mov ecx, dword [r8 + 0x90]
test ecx, ecx
js 0x180029999
call fcn.1800080e0
test al, al
je 0x180029999
cmp byte [rsp + 0x58], 0
jne 0x180029999
cmp byte [rbp - 0x68], 0
je 0x180029999
mov r8b, 1
jmp 0x18002999c
xor r8b, r8b
mov rbx, qword [rsp + 0x70]
mov ecx, dword [rbx + 0x40]
test ecx, ecx
js 0x180029a08
call fcn.1800080e0
test al, al
je 0x180029a08
test r10b, r10b
je 0x1800299bd
mov ecx, 0x200004
jmp 0x1800299cd
mov ecx, 0x200000
mov eax, 0x20000c
test r15b, r15b
cmovne ecx, eax
or ecx, r12d
mov r8d, ecx
mov r14, qword [rsp + 0x50]
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800270d0
mov rcx, qword [0x18003d8e0]
mov qword [rsp + 0x70], rcx
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029cca
mov ecx, dword [rbx + 0x44]
test ecx, ecx
js 0x180029a2e
call fcn.1800080e0
test al, al
je 0x180029a2e
test r10b, r10b
je 0x180029a24
mov ecx, 0x200005
jmp 0x1800299cd
mov ecx, 0x200001
lea eax, [rcx + 0xc]
jmp 0x1800299c7
mov ecx, dword [rbx + 0x48]
mov r10, rbx
test ecx, ecx
js 0x180029a95
call fcn.1800080e0
mov ebx, dword [rsp + 0x68]
test al, al
je 0x180029a99
test bl, bl
je 0x180029a99
test r14b, r14b
mov r14, qword [rsp + 0x50]
je 0x180029a81
mov rdx, qword [rbp - 0x48]
xor r15d, r15d
mov rsi, qword [rsp + 0x60]
xor cl, cl
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [rsi + 0x1960]
mov dword [rdx + 0x70], r15d
maxss xmm0, xmm12
movss dword [rdx + 0x68], xmm0
jmp 0x180029cd4
movzx eax, sil
lea r8d, [rax*4 + 0x200002]
or r8d, r12d
jmp 0x1800299d8
mov ebx, dword [rsp + 0x68]
mov ecx, dword [r10 + 0x4c]
test ecx, ecx
js 0x180029b01
call fcn.1800080e0
test al, al
je 0x180029b01
test bl, bl
je 0x180029b01
test r14b, r14b
mov r14, qword [rsp + 0x50]
je 0x180029aed
mov rcx, qword [rbp - 0x48]
xor r15d, r15d
mov rax, qword [r10 + 0x1a68]
mov rsi, qword [rsp + 0x60]
movss xmm0, dword [rsi + 0x1960]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
mov dword [rcx + 0x70], r15d
movss dword [rcx + 0x68], xmm0
xor cl, cl
jmp 0x180029cd4
movzx eax, sil
lea r8d, [rax*4 + 0x200003]
or r8d, r12d
jmp 0x1800299d8
mov ecx, dword [r10 + 0x58]
test ecx, ecx
js 0x180029b2f
call fcn.1800080e0
test al, al
je 0x180029b2f
mov eax, r12d
mov r8d, 0x200004
or eax, 0x200006
or r8d, r12d
test r14b, r14b
cmovne r8d, eax
jmp 0x1800299d3
mov ecx, dword [r10 + 0x5c]
test ecx, ecx
js 0x180029b5d
call fcn.1800080e0
test al, al
je 0x180029b5d
mov eax, r12d
mov r8d, 0x200005
or eax, 0x200007
or r8d, r12d
test r14b, r14b
cmovne r8d, eax
jmp 0x1800299d3
mov ecx, dword [r10 + 0x64]
test ecx, ecx
js 0x180029b86
call fcn.1800080e0
mov esi, dword [rsp + 0x58]
test al, al
je 0x180029b8a
test sil, sil
jne 0x180029b8a
or r12d, 0x200008
mov r8d, r12d
jmp 0x1800299d3
mov esi, dword [rsp + 0x58]
mov ecx, dword [r10 + 0x68]
test ecx, ecx
js 0x180029c75
call fcn.1800080e0
test al, al
je 0x180029c75
test sil, sil
jne 0x180029c75
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx + 0x54]
cmp dword [rcx + 0x50], eax
jne 0x180029c36
test r15b, r15b
je 0x180029bea
lea rdx, [rcx + 0x4c]
mov r8d, 0x60000c
mov r14, rcx
call fcn.1800270d0
mov rsi, qword [rsp + 0x60]
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029c3e
mov rsi, qword [rsp + 0x60]
cmp byte [rsi + 0xc9], 0
je 0x180029c3b
mov rax, qword [rbp - 0x58]
cmp byte [rax], 0
je 0x180029c3b
cmp byte [rsi + 0x14a], 0
jne 0x180029c3b
test r14b, r14b
mov r14, rcx
jne 0x180029c3e
lea rdx, [rcx + 0x4c]
mov r8d, 0x600004
call fcn.1800270d0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029c3e
mov rsi, qword [rsp + 0x60]
mov r14, rcx
or r12d, 0x200009
lea rdx, [r14 + 0x4c]
mov r8d, r12d
mov rcx, r14
call fcn.1800270d0
mov rcx, qword [0x18003d8e0]
mov qword [rsp + 0x70], rcx
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029ccf
mov ecx, dword [r10 + 0x70]
test ecx, ecx
js 0x180029c86
call fcn.1800080e0
test al, al
jne 0x180029c9f
mov ecx, dword [r10 + 0x78]
test ecx, ecx
js 0x180029d2c
call fcn.1800080e0
test al, al
je 0x180029d2c
mov ecx, dword [rsp + 0x6c]
mov eax, ecx
shr eax, 0xb
and al, 1
test bl, bl
je 0x180029cb7
test al, al
je 0x180029cf6
test r14b, r14b
jne 0x180029cfb
mov byte [rbp + 0x158], 1
mov byte [rbp + 0x180], 1
mov r14, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
xor cl, cl
xor r15d, r15d
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
je 0x18002a287
cmp byte [rbp + 0x168], 0
je 0x18002a287
mov al, 1
jmp 0x18002a289
test r14b, r14b
jne 0x180029cb7
test sil, sil
jne 0x180029cc5
mov edx, ecx
mov dword [rbp + 0x150], 0xa
lea rcx, [rbp + 0x150]
call fcn.180028330
test al, al
je 0x180029df2
mov r8d, dword [rbp + 0x150]
jmp 0x1800299d3
mov ecx, dword [r10 + 0x74]
test ecx, ecx
js 0x180029d51
call fcn.1800080e0
test al, al
je 0x180029d51
mov r14, qword [rsp + 0x50]
mov cl, 1
mov rsi, qword [rsp + 0x60]
mov byte [rbp + 0x158], cl
jmp 0x180029cd1
test r9b, r9b
jne 0x18002a237
test r8b, r8b
jne 0x18002a237
test r13b, r13b
je 0x180029da9
mov ecx, dword [r10 + 0x7c]
test ecx, ecx
js 0x180029da9
call fcn.1800080e0
test al, al
je 0x180029da9
mov r14, qword [rsp + 0x50]
xor r15d, r15d
mov rsi, qword [rsp + 0x60]
xor cl, cl
mov eax, dword [r14 + 4]
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x4c], eax
mov dword [r14 + 0x50], r15d
mov byte [r14 + 0x5b], r15b
mov byte [r14 + 0xe74], 1
jmp 0x180029cd4
movzx r15d, byte [rbp + 0x150]
test r15b, r15b
jne 0x18002a02b
test dil, dil
jne 0x18002a02b
test r11b, r11b
je 0x180029cc5
mov rax, qword [r10 + 0x100]
test rax, rax
je 0x180029e03
mov rcx, qword [r10 + 0x110]
call rax
mov rbx, rax
test rax, rax
je 0x180029df2
mov r10, qword [0x18003d8e0]
jmp 0x180029e0a
mov rcx, qword [0x18003d8e0]
mov qword [rsp + 0x70], rcx
jmp 0x180029cc5
lea rbx, [0x1800368ee]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x180029e11
test r10, r10
je 0x180029e26
inc dword [r10 + 0x3bc]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r15d, r15d
mov qword [rbp + 0x188], rax
mov r14, rax
mov esi, r15d
cmp byte [rbx], r15b
je 0x180029ea1
mov r14d, dword [rsp + 0x6c]
mov rdi, rax
xor r8d, r8d
lea rcx, [rbp + 0x150]
mov rdx, rbx
call fcn.180003510
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp + 0x150], r15d
je 0x180029e9a
mov edx, r14d
lea rcx, [rbp + 0x150]
call fcn.180028330
test al, al
je 0x180029e95
movzx eax, word [rbp + 0x150]
inc esi
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r15b
jne 0x180029e51
mov r14, qword [rbp + 0x188]
movsxd rax, esi
mov word [r14 + rax*2], r15w
test esi, esi
jle 0x180029fee
mov r15, qword [rsp + 0x50]
mov r8d, dword [r15 + 0x54]
mov eax, dword [r15 + 0x50]
mov edx, dword [r15 + 4]
mov ecx, edx
cmp eax, r8d
je 0x180029ef7
mov r10d, eax
cmp eax, edx
jle 0x180029ed7
mov dword [r15 + 0x50], edx
mov r10d, edx
mov r9d, r8d
cmp r8d, edx
jle 0x180029ee8
mov dword [r15 + 0x54], edx
mov r9d, edx
mov ecx, edx
mov r8d, r9d
mov eax, r10d
cmp r10d, r9d
jne 0x180029ef7
mov dword [r15 + 0x4c], r10d
mov r10d, dword [r15 + 0x4c]
cmp r10d, edx
jle 0x180029f07
mov dword [r15 + 0x4c], edx
mov r10d, edx
cmp eax, r8d
je 0x180029f38
mov edx, eax
cmp eax, ecx
jle 0x180029f18
mov dword [r15 + 0x50], ecx
mov edx, ecx
mov r9d, r8d
cmp r8d, ecx
jle 0x180029f27
mov dword [r15 + 0x54], ecx
mov r9d, ecx
mov r8d, r9d
mov eax, edx
cmp edx, r9d
jne 0x180029f38
mov dword [r15 + 0x4c], edx
mov r10d, edx
cmp r10d, ecx
jle 0x180029f41
mov dword [r15 + 0x4c], ecx
cmp eax, r8d
je 0x180029f83
lea rdx, [r15 + 0x4c]
mov rcx, r15
jge 0x180029f67
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.180026f50
mov eax, dword [r15 + 0x50]
mov dword [r15 + 0x54], eax
jmp 0x180029f7a
sub eax, r8d
mov r9d, eax
call fcn.180026f50
mov eax, dword [r15 + 0x54]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x5b], 0
mov edx, dword [r15 + 0x4c]
mov r9d, esi
mov r8, r14
mov rcx, r15
call fcn.180026a30
test al, al
je 0x180029fcb
mov edi, dword [r15 + 0x4c]
lea rcx, [r15 + 0x64]
xor edx, edx
call fcn.180027ed0
test rax, rax
je 0x180029fc0
xor r8d, r8d
mov dword [rax], edi
mov dword [rax + 4], r8d
mov dword [rax + 8], esi
mov dword [rax + 0xc], 0xffffffff
add dword [r15 + 0x4c], esi
mov byte [r15 + 0x5b], 0
jmp 0x180029fe3
movzx eax, word [r15 + 0xe62]
test ax, ax
je 0x180029fe3
dec ax
mov word [r15 + 0xe62], ax
mov byte [r15 + 0xe74], 1
xor r15d, r15d
test r14, r14
je 0x18002a005
mov rax, qword [0x18003d8e0]
test rax, rax
je 0x18002a005
dec dword [rax + 0x3bc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x18003d8e0]
mov r14, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x70], rcx
xor cl, cl
jmp 0x180029cd4
mov rsi, qword [rsp + 0x60]
cmp qword [rsi + 0x108], 0
je 0x18002a17c
mov r12, qword [rsp + 0x50]
mov eax, dword [r12 + 0x54]
mov ecx, dword [r12 + 0x50]
cmp ecx, eax
je 0x18002a05e
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
xor r9d, r9d
jmp 0x18002a069
mov eax, dword [r12 + 4]
xor r9d, r9d
mov edx, r9d
movsxd rsi, eax
mov edi, r9d
mov rax, qword [r12 + 0x18]
mov ebx, 0x800
movsxd r14, edx
mov r15d, 0x3ff
mov r11d, 0x80
mov r13d, 0x2400
mov r10d, 0x2800
lea r8, [rax + rsi*2]
lea rdx, [rax + r14*2]
nop dword [rax]
test r8, r8
je 0x18002a0aa
cmp rdx, r8
jae 0x18002a0ed
movzx ecx, word [rdx]
test cx, cx
je 0x18002a0ed
add rdx, 2
cmp cx, r11w
jae 0x18002a0c0
inc edi
jmp 0x18002a0a0
cmp cx, bx
jae 0x18002a0ce
mov eax, 2
add edi, eax
jmp 0x18002a0a0
lea eax, [rcx + r13]
cmp ax, r15w
mov eax, r9d
jbe 0x18002a0e9
add cx, r10w
cmp cx, r15w
setbe al
add eax, 3
add edi, eax
jmp 0x18002a0a0
mov r10, qword [rsp + 0x70]
inc edi
movzx r15d, byte [rbp + 0x150]
test r10, r10
je 0x18002a108
inc dword [r10 + 0x3bc]
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [r12 + 0x18]
mov edx, edi
mov rbx, rax
lea r9, [rcx + rsi*2]
lea r8, [rcx + r14*2]
mov rcx, rax
call fcn.1800036d0
mov r9, qword [0x18003d8e0]
mov rax, qword [r9 + 0x108]
test rax, rax
je 0x18002a151
mov rcx, qword [r9 + 0x110]
mov rdx, rbx
call rax
mov r9, qword [0x18003d8e0]
test rbx, rbx
je 0x18002a162
test r9, r9
je 0x18002a162
dec dword [r9 + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdx, qword [0x18003d8e0]
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x70], rdx
mov r14, qword [rsp + 0x50]
test r15b, r15b
je 0x180029ccf
mov eax, dword [r14 + 0x54]
lea rbx, [r14 + 0x4c]
xor r15d, r15d
cmp dword [r14 + 0x50], eax
jne 0x18002a1ad
mov eax, dword [r14 + 4]
mov dword [r14 + 0x54], eax
mov dword [rbx], eax
mov dword [r14 + 0x50], r15d
mov byte [r14 + 0x5b], r15b
mov byte [r14 + 0xe74], 1
mov r8d, dword [rbx + 8]
mov eax, dword [rbx + 4]
cmp eax, r8d
je 0x18002a230
mov ecx, dword [r14 + 4]
cmp eax, ecx
jle 0x18002a1ce
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x18002a1d9
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x18002a1e0
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x18002a1e6
mov dword [rbx], ecx
cmp eax, r8d
je 0x18002a22c
mov rdx, rbx
mov rcx, r14
jge 0x18002a209
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.180026f50
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
jmp 0x18002a21a
sub eax, r8d
mov r9d, eax
call fcn.180026f50
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
mov dword [rbx], eax
mov rax, qword [0x18003d8e0]
mov qword [rsp + 0x70], rax
mov byte [rbx + 0xf], 0
mov byte [rbx + 0xf], 0
xor cl, cl
jmp 0x180029cd4
mov r14, qword [rsp + 0x50]
movzx r8d, r9b
mov rcx, r14
xor r8d, 1
add r8d, 0x20000a
lea rdx, [r14 + 0x4c]
call fcn.1800270d0
mov eax, dword [r14 + 0x4c]
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x50], eax
mov rax, qword [0x18003d8e0]
mov qword [rsp + 0x70], rax
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029cca
xor al, al
mov r12d, dword [rbp - 0x64]
mov edi, dword [rbp - 0x6c]
or r12b, al
mov dword [rbp - 0x64], r12d
cmp dword [rsi + 0x1ab0], edi
jne 0x18002a3f0
mov qword [rbp - 0x58], r15
mov r13d, r15d
mov dword [rbp - 0x68], r15d
test cl, cl
je 0x18002a52e
cmp byte [rsp + 0x58], 0
jne 0x18002a2f6
mov r9, qword [r14 + 0x38]
mov rax, qword [rbp + 0x160]
mov r8, r9
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002a2e3
inc rax
test ecx, ecx
jne 0x18002a2d0
test edx, edx
je 0x18002a2f6
mov r13d, dword [r14 + 0x30]
dec r13d
mov qword [rbp - 0x58], r9
mov dword [rbp - 0x68], r13d
cmp byte [rbp + 0x180], 0
mov r11d, dword [rsp + 0x6c]
je 0x18002a30e
test r11b, 0x20
jne 0x18002a533
mov r10, qword [rbp + 0x160]
mov r15d, dword [rbp - 0x60]
mov rdi, qword [rbp - 0x58]
test rdi, rdi
je 0x18002a3d5
mov ecx, 0x20
cmp dword [rbp - 0x5c], r13d
je 0x18002a394
test r15b, r15b
je 0x18002a394
xor edx, edx
mov dword [rbp + 0x28], 0x40000
lea eax, [r13 + 1]
mov qword [rbp + 0x38], rdx
cmp eax, ecx
mov dword [rbp + 0x2c], r11d
xorps xmm0, xmm0
mov qword [rbp + 0x40], r10
cmovle eax, ecx
mov dword [rbp + 0x48], r13d
lea rcx, [rbp + 0x28]
mov dword [rbp + 0x4c], eax
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x30], rdx
call rdx
mov ecx, dword [rbp + 0x4c]
mov r10, qword [rbp + 0x40]
mov rax, qword [0x18003d8e0]
mov qword [rbp + 0x160], r10
lea r13d, [rcx - 1]
mov qword [rsp + 0x70], rax
cmp dword [rbp + 0x48], r13d
cmovl r13d, dword [rbp + 0x48]
lea eax, [r13 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x18002a3d1
jbe 0x18002a3cb
lea r8, [rbx - 1]
mov rdx, rdi
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov rax, qword [0x18003d8e0]
mov r10, qword [rbp + 0x160]
mov qword [rsp + 0x70], rax
mov byte [rbx + r10 - 1], 0
mov byte [rbp - 0x6f], 1
mov edi, dword [rbp - 0x6c]
xor r15d, r15d
mov dword [r14 + 0xe78], r15d
mov qword [r14 + 0xe80], r15
mov qword [r14 + 0xe88], r15
cmp byte [rbp + 0x158], 0
mov r13, qword [rsp + 0x70]
je 0x18002a45e
cmp dword [rsi + 0x1ab0], edi
jne 0x18002a45e
mov ecx, dword [r13 + 0x1ab0]
test ecx, ecx
setne al
mov byte [r13 + 0x1abc], al
test ecx, ecx
je 0x18002a42e
mov dword [r13 + 0x1ab8], r15d
mov word [r13 + 0x1abe], 0
mov dword [r13 + 0x1ab0], r15d
mov byte [r13 + 0x1abd], 0
mov qword [r13 + 0x1ae0], r15
mov byte [r13 + 0x1ac0], 0
mov qword [r13 + 0x1ac4], 0
mov qword [r13 + 0x1ad0], r15
mov r11d, dword [rsp + 0x68]
test r11b, r11b
jne 0x18002aa89
mov r8d, 1
lea rcx, [rbp - 0x80]
mov edx, edi
call fcn.180004540
movss xmm9, dword [0x180037050]
mov ecx, 7
movaps xmm1, xmm9
call fcn.180003810
movss xmm0, dword [rsi + 0x1598]
mov r8d, eax
mov rdx, qword [rbp - 0x78]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm14
unpcklps xmm0, xmm13
movq rcx, xmm0
call fcn.180004200
movss xmm1, dword [rbp - 0x50]
movaps xmm0, xmm14
addss xmm0, dword [rsi + 0x1590]
addss xmm1, dword [rsi + 0x1594]
mov r13, qword [0x18003d8e0]
movaps xmm15, xmm14
mov r8, qword [rbp - 0x48]
addss xmm15, xmm11
mov r11d, dword [rsp + 0x68]
movss dword [rbp - 0x24], xmm13
addss xmm13, xmm10
movss dword [rbp + 0x158], xmm0
movss dword [rbp + 0x15c], xmm1
movss dword [rbp - 0x20], xmm15
movss dword [rbp + 0x188], xmm15
movss dword [rbp - 0x1c], xmm13
movss dword [rbp + 0x150], xmm13
jmp 0x18002aae1
mov r11d, dword [rsp + 0x6c]
cmp byte [rsp + 0x58], 0
jne 0x18002a59d
mov eax, dword [r14 + 0x10]
mov byte [r14 + 0x40], 1
mov ecx, dword [r14 + 0x24]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x18002a582
test ecx, ecx
je 0x18002a561
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002a566
mov eax, 8
cmp eax, ebx
lea rcx, [r14 + 0x20]
mov edx, ebx
cmovg edx, eax
call fcn.1800139b0
mov rax, qword [0x18003d8e0]
mov qword [rsp + 0x70], rax
mov dword [r14 + 0x20], ebx
xor r9d, r9d
mov r8, qword [r14 + 0x18]
mov edx, ebx
mov rcx, qword [r14 + 0x28]
call fcn.1800036d0
mov r11d, dword [rsp + 0x6c]
test r11d, 0x1c0
je 0x18002aa3f
mov r9, qword [rsp + 0x70]
mov r8d, 0x16
test r11b, 0x40
je 0x18002a5d5
mov ecx, dword [r9 + 0x3c]
test ecx, ecx
js 0x18002a5d5
call fcn.1800080e0
test al, al
je 0x18002a5d5
lea eax, [r8 + 0x2a]
mov r8d, r15d
jmp 0x18002a628
test r11b, r11b
jns 0x18002a61a
mov ecx, dword [r9 + 0x48]
test ecx, ecx
js 0x18002a5fa
call fcn.1800080e0
test al, al
je 0x18002a5fa
mov r10d, 0x80
mov eax, r10d
lea r8d, [r10 - 0x7d]
jmp 0x18002a62e
mov ecx, dword [r9 + 0x4c]
test ecx, ecx
js 0x18002a61a
call fcn.1800080e0
test al, al
je 0x18002a61a
mov r10d, 0x80
mov eax, r10d
lea r8d, [r10 - 0x7c]
jmp 0x18002a62e
mov eax, 0x100
test eax, r11d
je 0x18002aa3f
mov r10d, 0x80
mov r9, qword [r14 + 0x18]
mov ebx, r15d
mov dword [rbp - 0x10], eax
mov rdx, r9
mov rax, qword [r14 + 0x28]
mov r13d, 0x3ff
mov qword [rbp + 8], rax
mov eax, dword [r14 + 8]
mov dword [rbp + 0x10], eax
mov eax, dword [r14 + 0x44]
mov dword [rbp + 0x14], eax
movsxd rax, dword [r14 + 0x4c]
mov r14d, 0x2400
mov dword [rbp + 4], r8d
mov dword [rbp - 0xc], r11d
mov r11d, 0x800
mov qword [rbp + 0x188], r9
lea r8, [r9 + rax*2]
mov dword [rbp], r15d
mov r9d, 0x2800
mov qword [rbp + 0x19], r15
mov dword [rbp + 0x21], r15d
mov word [rbp + 0x25], r15w
mov byte [rbp + 0x27], 0
mov qword [rbp - 8], r15
mov byte [rbp + 0x18], 0
nop dword [rax]
test r8, r8
je 0x18002a6aa
cmp rdx, r8
jae 0x18002a6ee
movzx ecx, word [rdx]
test cx, cx
je 0x18002a6ee
add rdx, 2
cmp cx, r10w
jae 0x18002a6c0
inc ebx
jmp 0x18002a6a0
cmp cx, r11w
jae 0x18002a6cf
mov eax, 2
add ebx, eax
jmp 0x18002a6a0
lea eax, [r14 + rcx]
cmp ax, r13w
mov eax, r15d
jbe 0x18002a6ea
add cx, r9w
cmp cx, r13w
setbe al
add eax, 3
add ebx, eax
jmp 0x18002a6a0
mov r9, qword [rbp + 0x188]
mov r12d, r15d
mov r14, qword [rsp + 0x50]
mov rdx, r9
mov dword [rbp + 0x150], ebx
mov dword [rbp + 0x1c], ebx
movsxd rax, dword [r14 + 0x50]
lea r8, [r9 + rax*2]
mov r9d, 0x2400
test r8, r8
je 0x18002a721
cmp rdx, r8
jae 0x18002a774
movzx ecx, word [rdx]
test cx, cx
je 0x18002a774
add rdx, 2
cmp cx, r10w
jae 0x18002a738
inc r12d
jmp 0x18002a717
cmp cx, r11w
jae 0x18002a748
mov eax, 2
add r12d, eax
jmp 0x18002a717
lea eax, [r9 + rcx]
cmp ax, r13w
ja 0x18002a75a
mov eax, r15d
add r12d, eax
jmp 0x18002a717
mov eax, 0x2800
add cx, ax
mov eax, r15d
cmp cx, r13w
setbe al
add eax, 3
add r12d, eax
jmp 0x18002a717
mov r14, qword [rsp + 0x50]
xor r8d, r8d
mov dword [rbp + 0x188], r12d
mov ebx, 0x2400
mov dword [rbp + 0x20], r12d
mov r12d, 0x2800
movsxd rax, dword [r14 + 0x54]
mov r9, qword [r14 + 0x18]
lea rdx, [r9 + rax*2]
nop
test rdx, rdx
je 0x18002a7aa
cmp r9, rdx
jae 0x18002a7f1
movzx ecx, word [r9]
test cx, cx
je 0x18002a7f1
add r9, 2
cmp cx, r10w
jae 0x18002a7c2
inc r15d
jmp 0x18002a7a0
cmp cx, r11w
jae 0x18002a7d2
mov eax, 2
add r15d, eax
jmp 0x18002a7a0
lea eax, [rbx + rcx]
cmp ax, r13w
mov eax, r8d
jbe 0x18002a7ec
add cx, r12w
cmp cx, r13w
setbe al
add eax, 3
add r15d, eax
jmp 0x18002a7a0
lea rcx, [rbp - 0x10]
mov dword [rbp + 0x24], r15d
xor esi, esi
call rsi
movsxd rax, dword [rbp + 0x1c]
mov r14, qword [rbp + 8]
mov r12d, dword [rbp + 0x188]
mov r13d, dword [rbp - 0x68]
cmp eax, dword [rbp + 0x150]
je 0x18002a871
lea rdi, [r14 + rax]
mov rbx, r14
nop
test rdi, rdi
je 0x18002a82a
cmp rbx, rdi
jae 0x18002a85e
cmp byte [rbx], 0
je 0x18002a85e
mov r8, rdi
lea rcx, [rbp + 0x150]
mov rdx, rbx
call fcn.180003510
movsxd rcx, eax
mov eax, dword [rbp + 0x150]
add rbx, rcx
test eax, eax
je 0x18002a85e
mov ecx, 0xffff
cmp eax, ecx
ja 0x18002a820
inc esi
jmp 0x18002a820
mov rdx, qword [rsp + 0x50]
mov dword [rdx + 0x4c], esi
xor esi, esi
mov byte [rdx + 0xe74], 1
jmp 0x18002a876
mov rdx, qword [rsp + 0x50]
movsxd rax, dword [rbp + 0x20]
cmp eax, r12d
je 0x18002a8cc
lea rdi, [r14 + rax]
mov rbx, r14
test rdi, rdi
je 0x18002a890
cmp rbx, rdi
jae 0x18002a8c4
cmp byte [rbx], 0
je 0x18002a8c4
mov r8, rdi
lea rcx, [rbp + 0x150]
mov rdx, rbx
call fcn.180003510
movsxd rcx, eax
mov eax, dword [rbp + 0x150]
add rbx, rcx
test eax, eax
je 0x18002a8c4
mov ecx, 0xffff
cmp eax, ecx
ja 0x18002a886
inc esi
jmp 0x18002a886
mov rdx, qword [rsp + 0x50]
mov dword [rdx + 0x50], esi
movsxd rax, dword [rbp + 0x24]
xor r12d, r12d
cmp eax, r15d
je 0x18002a928
lea rdi, [r14 + rax]
mov rbx, r14
mov esi, r12d
test rdi, rdi
je 0x18002a8ec
cmp rbx, rdi
jae 0x18002a920
cmp byte [rbx], r12b
je 0x18002a920
mov r8, rdi
lea rcx, [rbp + 0x150]
mov rdx, rbx
call fcn.180003510
movsxd rcx, eax
mov eax, dword [rbp + 0x150]
add rbx, rcx
test eax, eax
je 0x18002a920
mov ecx, 0xffff
cmp eax, ecx
ja 0x18002a8e2
inc esi
jmp 0x18002a8e2
mov rdx, qword [rsp + 0x50]
mov dword [rdx + 0x54], esi
cmp byte [rbp + 0x18], 0
mov r15d, dword [rbp - 0x60]
je 0x18002aa1e
mov ebx, dword [rbp + 0x10]
mov eax, dword [rbp - 0x5c]
cmp ebx, eax
jle 0x18002a982
test r15b, r15b
je 0x18002a982
mov ecx, dword [rdx + 0x14]
lea rdi, [rdx + 0x10]
sub ebx, eax
add ebx, dword [rdi]
cmp ebx, ecx
jle 0x18002a980
test ecx, ecx
je 0x18002a963
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002a968
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.180013a40
mov rdx, qword [rsp + 0x50]
mov r14, qword [rbp + 8]
mov dword [rdi], ebx
mov rsi, qword [rdx + 0x18]
movsxd rdi, dword [rdx + 0x10]
mov rbx, rsi
dec rdi
lea rdi, [rsi + rdi*2]
cmp rsi, rdi
jae 0x18002a9dd
nop dword [rax]
cmp byte [r14], 0
je 0x18002a9dd
xor r8d, r8d
lea rcx, [rbp + 0x150]
mov rdx, r14
call fcn.180003510
movsxd rcx, eax
mov eax, dword [rbp + 0x150]
add r14, rcx
test eax, eax
je 0x18002a9dd
mov ecx, 0xffff
cmp eax, ecx
ja 0x18002a9d8
mov word [rbx], ax
add rbx, 2
cmp rbx, rdi
jb 0x18002a9a0
mov r14, qword [rsp + 0x50]
mov r11d, dword [rsp + 0x6c]
mov word [rbx], r12w
sub rbx, rsi
mov eax, dword [rbp + 0x10]
mov r12d, dword [rbp - 0x64]
mov rsi, qword [rsp + 0x60]
mov dword [r14 + 8], eax
mov rax, qword [0x18003d8e0]
sar rbx, 1
mov qword [rsp + 0x70], rax
mov dword [r14 + 4], ebx
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x18002aa43
mov rax, qword [0x18003d8e0]
mov r14, qword [rsp + 0x50]
mov r12d, dword [rbp - 0x64]
mov rsi, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x6c]
mov qword [rsp + 0x70], rax
jmp 0x18002aa43
mov r15d, dword [rbp - 0x60]
cmp byte [rsp + 0x58], 0
mov r10, qword [rbp + 0x160]
jne 0x18002a319
mov r9, qword [r14 + 0x28]
mov r8, r10
mov rax, r9
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002aa75
inc rax
test ecx, ecx
jne 0x18002aa62
test edx, edx
je 0x18002a319
mov r13d, dword [r14 + 8]
mov rdi, r9
jmp 0x18002a31d
mov r8, qword [rbp - 0x48]
movaps xmm2, xmm14
movss xmm9, dword [0x180037050]
addss xmm2, xmm11
movaps xmm1, xmm13
movss dword [rbp - 0x24], xmm13
addss xmm1, xmm10
movsd xmm0, qword [r8 + 0xd0]
movsd qword [rbp + 0x158], xmm0
movss dword [rbp + 0x188], xmm2
movaps xmm15, xmm2
movss dword [rbp - 0x20], xmm2
movss dword [rbp + 0x150], xmm1
movaps xmm13, xmm1
movss dword [rbp - 0x1c], xmm1
cmp byte [rbp - 0x70], 0
lea rax, [rbp + 0x158]
movss xmm10, dword [rax + 4]
movss dword [rbp - 0x28], xmm14
movss xmm14, dword [rax]
movss dword [rbp - 0x58], xmm14
movss dword [rbp + 0x158], xmm10
movss dword [rbp - 0x54], xmm10
movss dword [rbp - 0x5c], xmm12
movss dword [rbp - 0x68], xmm12
je 0x18002ab2d
mov rax, qword [r14 + 0x28]
mov qword [rbp + 0x160], rax
jmp 0x18002ab34
mov rax, qword [rbp + 0x160]
movzx ecx, byte [rbp + 0x168]
test cl, cl
jne 0x18002ad2d
test r12b, r12b
jne 0x18002ad2d
mov r12, qword [rbp + 0x160]
test r11b, r11b
je 0x18002abb8
movzx edx, byte [r12]
mov ecx, r15d
lea r15, [r12 + 1]
test dl, dl
je 0x18002ab86
nop dword [rax]
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r15]
cmovne eax, ecx
inc r15
mov ecx, eax
test dl, dl
jne 0x18002ab70
movzx eax, byte [r15 - 1]
dec r15
cmp al, 0xa
je 0x18002ab98
cmp al, 0xd
je 0x18002ab98
inc ecx
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
movss dword [rbp - 0x5c], xmm11
mulss xmm8, dword [rsi + 0x1960]
movss dword [rbp - 0x68], xmm8
jmp 0x18002abef
cmp dword [rsi + 0x1ab0], edi
jne 0x18002abc6
movsxd r15, dword [r14 + 8]
jmp 0x18002abda
mov r15, 0xffffffffffffffff
nop dword [rax]
inc r15
cmp byte [r12 + r15], 0
jne 0x18002abd0
add r15, r12
mov rax, r15
sub rax, r12
cmp rax, 0x200000
jge 0x18002b6c7
movaps xmm1, xmm9
xor ecx, ecx
call fcn.180003810
mov r10, qword [r8 + 0x2a8]
lea rcx, [rsi + 0x1960]
movss xmm2, dword [rsi + 0x1960]
lea r8, [rbp - 0x28]
test r11b, r11b
mov edi, 0
mov r11, qword [rsi + 0x1958]
mov r9d, eax
cmovne r8, rdi
mov rdx, r15
test eax, 0xff000000
je 0x18002b581
test r15, r15
jne 0x18002ac50
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [r12 + rdx], dil
jne 0x18002ac44
add rdx, r12
lea rcx, [rsi + 0x1960]
cmp r12, rdx
je 0x18002b581
test r11, r11
jne 0x18002ac6d
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
ucomiss xmm2, xmm12
jp 0x18002ac7e
jne 0x18002ac7e
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp - 0x80], xmm0
test r8, r8
je 0x18002ace5
movss xmm1, dword [r8]
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm1
jae 0x18002acab
movss dword [rbp - 0x80], xmm1
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rbp - 0x7c]
comiss xmm0, xmm1
jae 0x18002acc0
movss dword [rbp - 0x7c], xmm1
movss xmm0, dword [r8 + 8]
comiss xmm0, dword [rbp - 0x78]
ja 0x18002acd1
movss dword [rbp - 0x78], xmm0
movss xmm0, dword [r8 + 0xc]
comiss xmm0, dword [rbp - 0x74]
ja 0x18002ace2
movss dword [rbp - 0x74], xmm0
test r8, r8
setne al
mov rcx, r11
mov byte [rsp + 0x48], al
lea rax, [rbp - 0x80]
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
mov r9, qword [rbp - 0x58]
call fcn.180021190
mov r13, qword [0x18003d8e0]
lea rcx, [rsi + 0x1960]
jmp 0x18002b581
movsxd r12, dword [r14 + 8]
xor r10d, r10d
mov rsi, qword [r14 + 0x18]
mov r8d, 0xfffffc18
movaps xmm7, xmm12
movaps xmm6, xmm12
mov r9d, r10d
mov edi, r10d
lea r15, [rax + r12]
mov ebx, r8d
mov qword [rbp - 0x58], r15
mov edx, r10d
test cl, cl
je 0x18002ad6e
movsxd rax, dword [r14 + 0x4c]
lea edx, [r10 + 1]
lea r8d, [r10 - 1]
lea r9, [rsi + rax*2]
cmp byte [rbp - 0x64], dil
je 0x18002ad8f
mov ecx, dword [r14 + 0x54]
mov ebx, 0xffffffff
cmp dword [r14 + 0x50], ecx
cmovl ecx, dword [r14 + 0x50]
inc edx
movsxd rax, ecx
lea rdi, [rsi + rax*2]
movzx ecx, word [rsi]
movzx eax, r11b
mov r11d, r10d
add edx, eax
mov rax, rsi
test cx, cx
je 0x18002ade0
cmp cx, 0xa
jne 0x18002add3
inc r11d
cmp r8d, 0xffffffff
jne 0x18002adc0
cmp rax, r9
jb 0x18002adc0
dec edx
mov r8d, r11d
test edx, edx
jle 0x18002ade0
cmp ebx, 0xffffffff
jne 0x18002add3
cmp rax, rdi
jb 0x18002add3
dec edx
mov ebx, r11d
test edx, edx
jle 0x18002ade0
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x18002ada3
inc r11d
mov rdx, r9
cmp r8d, 0xffffffff
mov r10d, r11d
cmovne r10d, r8d
cmp ebx, 0xffffffff
cmove ebx, r11d
cmp r9, rsi
jbe 0x18002ae13
nop dword [rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18002ae13
mov rdx, rax
cmp rax, rsi
ja 0x18002ae00
mov r8, qword [r13 + 0x1958]
movaps xmm1, xmm12
movss xmm4, dword [r13 + 0x1960]
movaps xmm11, xmm12
divss xmm4, dword [r8 + 0x14]
cmp rdx, r9
jae 0x18002ae80
nop word [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18002ae57
maxss xmm1, xmm11
movaps xmm11, xmm12
jmp 0x18002ae7b
cmp ecx, 0xd
je 0x18002ae7b
cmp ecx, dword [r8]
jge 0x18002ae6c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18002ae72
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm4
addss xmm11, xmm0
cmp rdx, r9
jb 0x18002ae40
mov r9, qword [rsp + 0x60]
maxss xmm11, xmm1
movd xmm12, r10d
cvtdq2ps xmm12, xmm12
lea r14, [r9 + 0x1960]
movss xmm3, dword [r14]
mulss xmm12, xmm3
movss dword [rbp - 0x60], xmm11
movss dword [rbp - 0x6c], xmm12
test ebx, ebx
js 0x18002af32
mov rdx, rdi
cmp rdi, rsi
jbe 0x18002aed3
nop dword [rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18002aed3
mov rdx, rax
cmp rax, rsi
ja 0x18002aec0
xorps xmm5, xmm5
xorps xmm2, xmm2
xorps xmm6, xmm6
cmp rdx, rdi
jae 0x18002af21
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18002aef6
maxss xmm2, xmm6
movaps xmm6, xmm5
jmp 0x18002af1c
cmp ecx, 0xd
je 0x18002af1c
cmp ecx, dword [r8]
jge 0x18002af0b
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18002af11
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm6, xmm0
cmp rdx, rdi
jb 0x18002aee1
movd xmm7, ebx
maxss xmm6, xmm2
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm3
jmp 0x18002af35
xorps xmm5, xmm5
mov r10d, dword [rsp + 0x68]
movss xmm4, dword [rbp - 0x38]
test r10b, r10b
je 0x18002af5a
movd xmm2, r11d
cvtdq2ps xmm2, xmm2
movss dword [rbp - 0x5c], xmm4
mulss xmm2, xmm3
movss dword [rbp - 0x68], xmm2
movzx r8d, byte [rbp + 0x168]
mov rbx, qword [rsp + 0x50]
test r8b, r8b
je 0x18002b02c
cmp byte [rbx + 0xe74], 0
je 0x18002b02c
test dword [rsp + 0x6c], 0x1000
jne 0x18002afcd
movss xmm2, dword [rbx + 0x48]
movaps xmm0, xmm4
comiss xmm2, xmm11
mulss xmm0, dword [0x180037010]
movaps xmm1, xmm11
jbe 0x18002afae
subss xmm1, xmm0
movaps xmm0, xmm5
maxss xmm0, xmm1
jmp 0x18002afbb
subss xmm1, xmm4
comiss xmm1, xmm2
jb 0x18002afdc
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x48], xmm0
jmp 0x18002afdc
xor r8d, r8d
mov dword [rbx + 0x48], r8d
movzx r8d, byte [rbp + 0x168]
test r10b, r10b
je 0x18002b025
mov rax, qword [rbp - 0x48]
movaps xmm2, xmm12
subss xmm2, dword [r14]
movss xmm1, dword [rax + 0x58]
comiss xmm1, xmm2
jbe 0x18002b001
movaps xmm0, xmm5
maxss xmm0, xmm2
jmp 0x18002b00e
movaps xmm0, xmm12
subss xmm0, dword [rbp - 0x18]
maxss xmm0, xmm1
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
addss xmm10, xmm1
movss dword [rbp + 0x158], xmm10
mov byte [rbx + 0xe74], 0
cmp byte [rbp - 0x64], 0
movss xmm10, dword [rbx + 0x48]
je 0x18002b2a7
mov edx, dword [rbx + 0x54]
mov eax, edx
mov ecx, dword [rbx + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rdi, [rsi + rax*2]
test r8b, r8b
je 0x18002b064
movaps xmm1, xmm9
jmp 0x18002b06c
movss xmm1, dword [0x180037028]
mov ecx, 0x2f
call fcn.180003810
mov esi, eax
xorps xmm3, xmm3
test r10b, r10b
je 0x18002b08a
xorps xmm8, xmm8
xorps xmm9, xmm9
jmp 0x18002b09c
movss xmm8, dword [0x1800370e0]
movss xmm9, dword [0x180037068]
movaps xmm4, xmm14
addss xmm4, xmm6
movss xmm6, dword [rbp + 0x158]
addss xmm6, xmm7
subss xmm4, xmm10
subss xmm6, xmm3
cmp rbx, rdi
jae 0x18002b299
movss xmm11, dword [rbp + 0x150]
movss xmm12, dword [rbp + 0x188]
movss xmm7, dword [0x180037024]
mov r15, qword [rbp - 0x48]
movss xmm5, dword [r14]
movaps xmm0, xmm13
addss xmm0, xmm5
comiss xmm6, xmm0
ja 0x18002b272
movss xmm0, dword [rbp - 0x50]
comiss xmm0, xmm6
jbe 0x18002b12b
cmp rbx, rdi
jae 0x18002b25b
nop dword [rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18002b25b
cmp rbx, rdi
jb 0x18002b110
jmp 0x18002b25b
mov rdx, qword [r13 + 0x1958]
xorps xmm1, xmm1
movss xmm2, dword [r13 + 0x1960]
divss xmm2, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x18002b18e
nop dword [rax + rax]
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18002b184
cmp ecx, 0xd
je 0x18002b17d
cmp ecx, dword [rdx]
jge 0x18002b170
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18002b175
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rbx, rdi
jb 0x18002b150
jmp 0x18002b18e
xorps xmm3, xmm3
maxss xmm3, xmm1
xorps xmm1, xmm1
maxss xmm1, xmm3
xorps xmm3, xmm3
comiss xmm3, xmm1
jb 0x18002b1c8
mov rax, qword [r9 + 0x1958]
cmp dword [rax], 0x20
jle 0x18002b1b4
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18002b1b9
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm7
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm1, xmm4
movaps xmm2, xmm8
subss xmm2, xmm5
movaps xmm0, xmm9
movss xmm5, dword [rbp - 0x3c]
addss xmm0, xmm6
addss xmm4, xmm3
minss xmm1, xmm15
addss xmm2, xmm6
minss xmm0, xmm13
maxss xmm4, xmm5
movss dword [rbp - 0x78], xmm1
maxss xmm2, dword [rbp - 0x50]
comiss xmm0, dword [rbp - 0x50]
movss dword [rbp - 0x7c], xmm2
movss dword [rbp - 0x80], xmm4
movss dword [rbp - 0x74], xmm0
jbe 0x18002b25b
comiss xmm13, xmm2
jbe 0x18002b25b
comiss xmm1, xmm5
jbe 0x18002b25b
comiss xmm15, xmm4
jbe 0x18002b25b
mov rcx, qword [r15 + 0x2a8]
lea r8, [rbp - 0x78]
mov dword [rsp + 0x28], 0xf
lea rdx, [rbp - 0x80]
mov r9d, esi
movss dword [rsp + 0x20], xmm3
call fcn.18001da20
mov r9, qword [rsp + 0x60]
xorps xmm3, xmm3
mov r13, qword [0x18003d8e0]
movaps xmm4, xmm14
subss xmm4, xmm10
addss xmm6, dword [r14]
cmp rbx, rdi
jb 0x18002b0e0
mov r15, qword [rbp - 0x58]
mov r10d, dword [rsp + 0x68]
movss dword [rbp + 0x188], xmm12
movss xmm12, dword [rbp - 0x6c]
movss dword [rbp + 0x150], xmm11
movss xmm11, dword [rbp - 0x60]
mov rbx, qword [rsp + 0x50]
movss xmm8, dword [0x180037024]
test r10b, r10b
jne 0x18002b2b9
cmp r12, 0x200000
jge 0x18002b418
movss xmm9, dword [0x180037050]
xor ecx, ecx
movaps xmm1, xmm9
call fcn.180003810
cmp byte [rsp + 0x68], 0
lea r8, [rbp - 0x28]
movss xmm1, dword [rbp + 0x158]
movaps xmm0, xmm14
mov r12, qword [rbp - 0x48]
subss xmm0, xmm10
mov rsi, qword [rsp + 0x60]
xorps xmm3, xmm3
movss xmm2, dword [r14]
subss xmm1, xmm3
mov edi, 0
mov r9d, eax
mov r10, qword [r12 + 0x2a8]
cmovne r8, rdi
mov r11, qword [rsi + 0x1958]
mov rdx, r15
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm1
test eax, 0xff000000
je 0x18002b42f
mov r12, qword [rbp + 0x160]
test r15, r15
jne 0x18002b34e
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [r12 + rdx], dil
jne 0x18002b342
add rdx, r12
cmp r12, rdx
je 0x18002b42b
test r11, r11
jne 0x18002b364
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
ucomiss xmm2, xmm3
jp 0x18002b374
jne 0x18002b374
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm0, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp - 0x80], xmm0
test r8, r8
je 0x18002b3db
movss xmm1, dword [r8]
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm1
jae 0x18002b3a1
movss dword [rbp - 0x80], xmm1
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rbp - 0x7c]
comiss xmm0, xmm1
jae 0x18002b3b6
movss dword [rbp - 0x7c], xmm1
movss xmm0, dword [r8 + 8]
comiss xmm0, dword [rbp - 0x78]
ja 0x18002b3c7
movss dword [rbp - 0x78], xmm0
movss xmm0, dword [r8 + 0xc]
comiss xmm0, dword [rbp - 0x74]
ja 0x18002b3d8
movss dword [rbp - 0x74], xmm0
test r8, r8
setne al
mov rcx, r11
mov byte [rsp + 0x48], al
lea rax, [rbp - 0x80]
movss dword [rsp + 0x40], xmm3
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
mov r9, qword [rbp - 0x58]
call fcn.180021190
mov r13, qword [0x18003d8e0]
jmp 0x18002b428
movss xmm9, dword [0x180037050]
xor edi, edi
mov rsi, qword [rsp + 0x60]
xorps xmm3, xmm3
mov r12, qword [rbp - 0x48]
cmp byte [rbp + 0x168], 0
mov rcx, r14
je 0x18002b574
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rbx + 0xe70]
movss dword [rbx + 0xe70], xmm0
cmp byte [rsi + 0xca], 0
je 0x18002b480
comiss xmm3, xmm0
jae 0x18002b480
movss xmm1, dword [0x180037054]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x180037044]
comiss xmm1, xmm0
jae 0x18002b480
xor al, al
jmp 0x18002b482
mov al, 1
addss xmm14, xmm11
subss xmm14, xmm10
movss xmm10, dword [rbp + 0x158]
movaps xmm6, xmm10
addss xmm6, xmm12
xorps xmm12, xmm12
movss dword [rbp - 0x80], xmm14
movaps xmm2, xmm14
addss xmm2, xmm9
subss xmm6, xmm12
movss dword [rbp - 0x78], xmm2
movaps xmm0, xmm6
movaps xmm1, xmm6
subss xmm0, dword [r14]
subss xmm1, dword [0x180037060]
addss xmm0, xmm8
movss dword [rbp - 0x74], xmm1
movss dword [rbp - 0x7c], xmm0
test al, al
je 0x18002b54d
comiss xmm1, dword [rbp - 0x50]
jbe 0x18002b54d
movss xmm3, dword [rbp + 0x150]
comiss xmm3, xmm0
jbe 0x18002b54d
comiss xmm2, dword [rbp - 0x3c]
jbe 0x18002b54d
movss xmm0, dword [rbp + 0x188]
comiss xmm0, xmm14
jbe 0x18002b54d
movss dword [rbp + 0x15c], xmm1
xor ecx, ecx
movaps xmm1, xmm9
movss dword [rbp + 0x158], xmm14
call fcn.180003810
mov rcx, qword [r12 + 0x2a8]
lea rdx, [rbp - 0x80]
mov r9d, eax
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0x158]
call fcn.18001d7b0
mov r13, qword [0x18003d8e0]
cmp byte [rsp + 0x58], 0
mov rcx, r14
jne 0x18002b581
subss xmm6, dword [r14]
subss xmm14, xmm9
movss dword [rsi + 0x2f38], xmm6
movss dword [rsi + 0x2f34], xmm14
jmp 0x18002b581
movss xmm10, dword [rbp + 0x158]
xorps xmm12, xmm12
cmp byte [rsp + 0x68], 0
je 0x18002b6c0
mov rax, qword [r13 + 0x1a68]
movss xmm0, dword [rbp - 0x68]
addss xmm0, dword [rcx]
movss xmm1, dword [rbp - 0x5c]
mov byte [rax + 0x80], 1
addss xmm1, xmm12
mov rax, qword [r13 + 0x1a68]
movss dword [rbp + 0x15c], xmm0
cmp byte [rax + 0x83], 0
movss dword [rbp + 0x158], xmm1
jne 0x18002b6af
movss xmm8, dword [rax + 0xd0]
lea rcx, [rbp + 0x158]
movss xmm9, dword [rax + 0xd4]
movaps xmm7, xmm8
addss xmm7, xmm1
movaps xmm6, xmm9
movss xmm1, dword [0x1800370e0]
addss xmm6, xmm0
call fcn.180005210
mov r9, qword [0x18003d8e0]
movaps xmm0, xmm8
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm9
shufps xmm0, xmm0, 0xc6
mov r10, qword [r9 + 0x1a68]
movss xmm0, xmm7
shufps xmm0, xmm0, 0x27
movss xmm0, xmm6
shufps xmm0, xmm0, 0x39
movups xmmword [r10 + 0x118], xmm0
mov qword [r10 + 0x110], 0
mov dword [r9 + 0x1b70], edi
mov rax, qword [r9 + 0x1a68]
movups xmmword [rbp - 0x80], xmm0
comiss xmm6, dword [rax + 0x234]
jbe 0x18002b689
movss xmm0, dword [rax + 0x23c]
comiss xmm0, xmm9
jbe 0x18002b689
comiss xmm7, dword [rax + 0x230]
jbe 0x18002b689
movss xmm0, dword [rax + 0x238]
comiss xmm0, xmm8
ja 0x18002b693
cmp byte [r9 + 0x2f80], 0
je 0x18002b6af
mov r8b, 1
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x80]
call fcn.180008010
test al, al
je 0x18002b6af
or dword [r10 + 0x114], 1
call fcn.180008400
call fcn.18000d990
mov r13, qword [0x18003d8e0]
mov r12, qword [rbp + 0x160]
mov eax, dword [rbp - 0x40]
test al, al
je 0x18002b733
mov rax, qword [r13 + 0x1a68]
mov rbx, r13
mov rcx, qword [rax + 0x2a8]
dec dword [rcx + 0x70]
call fcn.18001b630
movsxd rcx, dword [r13 + 0x1ba0]
lea eax, [rcx - 1]
mov dword [r13 + 0x1ba0], eax
mov r13, qword [0x18003d8e0]
test eax, eax
jne 0x18002b71f
mov rcx, qword [r13 + 0xb8]
test rcx, rcx
jne 0x18002b72b
mov rax, qword [r13 + 0xa8]
mov rcx, qword [rax + 0x48]
mov rcx, qword [rcx]
jmp 0x18002b72b
mov rax, qword [rbx + 0x1ba8]
mov rcx, qword [rax + rcx*8 - 0x10]
call fcn.18000d580
mov eax, dword [rbp - 0x40]
cmp byte [rsi + 0x2f80], 0
je 0x18002b885
test al, al
jne 0x18002b885
mov rdx, qword [r13 + 0x1a68]
test r15, r15
jne 0x18002b77e
mov r15, r12
cmp r12, 0xffffffffffffffff
jae 0x18002b77e
nop dword [rax]
movzx ecx, byte [r15]
test cl, cl
je 0x18002b77e
lea rax, [r15 + 1]
cmp cl, 0x23
jne 0x18002b775
cmp byte [rax], cl
je 0x18002b77e
mov r15, rax
cmp rax, 0xffffffffffffffff
jb 0x18002b760
movss xmm0, dword [r13 + 0x2fa0]
addss xmm0, dword [0x180037050]
movss dword [r13 + 0x2fa0], xmm10
comiss xmm10, xmm0
jbe 0x18002b7aa
mov r14b, 1
mov byte [r13 + 0x2fa4], r14b
jmp 0x18002b7ad
xor r14b, r14b
mov ecx, dword [r13 + 0x2fa8]
mov rbx, r12
mov eax, dword [rdx + 0x108]
cmp ecx, eax
jle 0x18002b7ca
mov dword [r13 + 0x2fa8], eax
mov ecx, eax
mov esi, dword [rdx + 0x108]
sub esi, ecx
mov r8, r15
mov edx, 0xa
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov rdi, r15
cmovne rdi, rax
cmp rdi, r15
jne 0x18002b7f9
cmp rbx, rdi
je 0x18002b868
mov r9d, edi
sub r9d, ebx
test r14b, r14b
jne 0x18002b82f
cmp rbx, r12
jne 0x18002b82f
cmp byte [r13 + 0x2fa4], r14b
je 0x18002b81b
lea rcx, str._s_.s
jmp 0x18002b836
mov r8, rbx
lea rcx, str.__.s
mov edx, r9d
call fcn.180011f10
jmp 0x18002b84e
lea rcx, str._r_n_s_.s
lea r8, [0x1800368ee]
mov qword [rsp + 0x20], rbx
lea edx, [rsi*4]
call fcn.180011f10
mov rax, r13
mov ecx, 0x2fa4
mov byte [rcx + rax], 0
cmp rdi, r15
je 0x18002b879
lea rbx, [rdi + 1]
jmp 0x18002b7d2
test r14b, r14b
je 0x18002b879
lea rcx, [0x180036a08]
call fcn.180011f10
mov rsi, qword [rsp + 0x60]
mov r13, qword [0x18003d8e0]
movss xmm0, dword [rbp - 0x30]
comiss xmm0, xmm12
jbe 0x18002b8cb
movss xmm0, dword [rbp - 0x34]
lea rdx, [0x18003277c]
movss xmm1, dword [rbp - 0x50]
mov r9b, 1
addss xmm0, dword [rsi + 0x15a8]
addss xmm1, dword [rsi + 0x1594]
xor r8d, r8d
unpcklps xmm0, xmm1
movq rcx, xmm0
call fcn.180003a60
mov r13, qword [0x18003d8e0]
movzx ecx, byte [rbp - 0x6f]
mov edx, dword [rsp + 0x6c]
test cl, cl
je 0x18002b8f5
bt edx, 0x15
jb 0x18002b8f5
mov rax, qword [r13 + 0x1a68]
mov word [r13 + 0x1abf], 0x101
or dword [rax + 0x114], 4
mov eax, ecx
test dl, 0x20
movzx ecx, byte [rbp + 0x180]
cmovne eax, ecx
jmp 0x1800288d1