Function at 0x18004bd80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1d0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x180098028]
xor rax, rsp
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x60], r9d
mov r13, r8
mov qword [rsp + 0x78], r8
mov r15, rcx
mov qword [rbp - 0x50], rcx
mov rax, qword [rbp + 0x148]
mov qword [rbp - 0x78], rax
mov rbx, qword [0x1800990f8]
mov rsi, rbx
mov qword [rsp + 0x58], rbx
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov r14, qword [rbx + 0x3ed0]
mov qword [rbp - 0x80], r14
cmp byte [r14 + 0xbb], 0
jne 0x18004e381
movsxd rcx, dword [r14 + 0xf0]
mov rax, qword [r14 + 0xf8]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
mov rcx, r15
call fcn.18001ad10
mov edi, eax
mov dword [rsp + 0x54], eax
mov rcx, qword [r14]
cmp dword [rcx + 0x3f18], eax
jne 0x18004be88
mov r8, r15
mov edx, 0xb
mov ecx, eax
call fcn.180030c80
mov rbx, qword [0x1800990f8]
mov rcx, r15
cmp r15, 0xffffffffffffffff
jae 0x18004beae
movzx edx, byte [rcx]
test dl, dl
je 0x18004beae
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x18004bea5
cmp byte [rax], dl
je 0x18004beae
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x18004be91
movss xmm0, dword [rbx + 0x3c08]
xor eax, eax
movss xmm1, dword [0x18008c218]
xorps xmm9, xmm9
cmp r15, rcx
jne 0x18004becf
xorps xmm11, xmm11
jmp 0x18004bf1e
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm1
movss xmm3, dword [0x18008c208]
movaps xmm2, xmm0
lea rdx, [rbp - 0x68]
mov rcx, qword [rbx + 0x3c00]
call fcn.180040720
movss xmm0, dword [rbp - 0x68]
addss xmm0, dword [0x18008c150]
cvttss2si eax, xmm0
movd xmm11, eax
cvtdq2ps xmm11, xmm11
movss xmm0, dword [rbp - 0x64]
movss dword [rbp - 0x5c], xmm11
movss xmm6, dword [rsi + 0x3810]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
mov rax, qword [rbx + 0x3ed0]
test byte [rbx + 0x4758], 1
je 0x18004bf51
movss xmm0, dword [rbx + 0x475c]
jmp 0x18004bf59
movss xmm0, dword [rax + 0x1bc]
movss xmm10, dword [0x18008c158]
comiss xmm9, xmm0
jbe 0x18004bfa0
movss xmm1, dword [rax + 0x250]
cmp qword [rax + 0x1a8], 0
jne 0x18004bf84
cmp qword [rbx + 0x4b10], 0
je 0x18004bf8c
movss xmm1, dword [rax + 0x220]
subss xmm1, dword [rax + 0x100]
addss xmm1, xmm0
movaps xmm0, xmm10
maxss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov rdx, qword [rbp + 0x130]
mov rdx, qword [rdx]
lea rcx, [rbp - 0x68]
call fcn.180029aa0
comiss xmm11, xmm9
jbe 0x18004bfd2
movaps xmm5, xmm11
addss xmm5, dword [rsi + 0x3824]
jmp 0x18004bfd5
xorps xmm5, xmm5
movss xmm4, dword [r14 + 0x104]
movaps xmm1, xmm4
movss xmm7, dword [rbp - 0x64]
addss xmm1, xmm7
movss xmm3, dword [r14 + 0x100]
movaps xmm0, xmm3
movss xmm8, dword [rbp - 0x68]
addss xmm0, xmm8
movss dword [rbp - 0x48], xmm3
movss dword [rbp - 0x44], xmm4
movss dword [rbp - 0x40], xmm0
movss dword [rbp - 0x3c], xmm1
movaps xmm2, xmm4
addss xmm2, xmm7
addss xmm5, xmm8
addss xmm5, xmm3
movss dword [rbp + 0x10], xmm3
movss dword [rbp + 0x14], xmm4
movss dword [rbp + 0x18], xmm5
movss dword [rbp + 0x1c], xmm2
subss xmm2, xmm4
subss xmm5, xmm3
movss dword [rbp - 0x68], xmm5
movss dword [rbp - 0x64], xmm2
movaps xmm1, xmm6
lea rcx, [rbp - 0x68]
call fcn.1800296d0
mov r9d, 0x400
lea r8, [rbp - 0x48]
mov edx, edi
lea rcx, [rbp + 0x10]
call fcn.180029840
test al, al
je 0x18004e381
mov ebx, dword [rsi + 0x4774]
mov edx, edi
lea rcx, [rbp - 0x48]
call fcn.18001e6e0
movzx r12d, al
mov byte [rsp + 0x53], al
mov eax, 1
test r12b, r12b
je 0x18004c09d
mov dword [rsi + 0x4a50], eax
mov rdi, qword [0x1800990f8]
mov r9d, dword [rsp + 0x54]
test r9d, r9d
je 0x18004c0c0
cmp dword [rdi + 0x4be8], r9d
jne 0x18004c0c0
add rdi, 0x4be0
jmp 0x18004c0c2
xor edi, edi
shr ebx, 8
and bl, al
mov dword [rsp + 0x70], ebx
mov eax, dword [rsi + 0x3f30]
cmp eax, r9d
je 0x18004c0f5
cmp dword [rsi + 0x48c0], r9d
jne 0x18004c0f5
test byte [rsi + 0x48cc], 1
jne 0x18004c0f1
cmp dword [rsi + 0x48e4], 2
jne 0x18004c0f5
mov cl, 1
jmp 0x18004c0f7
xor cl, cl
mov byte [rsp + 0x51], cl
test r12b, r12b
je 0x18004c10e
cmp byte [rsi + 0x3748], 0
je 0x18004c10e
mov sil, 1
jmp 0x18004c111
xor sil, sil
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x6c], 0
xor r14b, r14b
test rdi, rdi
je 0x18004c12e
cmp byte [rdi + 0x6b], 1
je 0x18004c12e
mov r15b, 1
jmp 0x18004c131
xor r15b, r15b
test sil, sil
jne 0x18004c145
test cl, cl
jne 0x18004c145
test bl, bl
jne 0x18004c145
mov byte [rsp + 0x50], r14b
jmp 0x18004c14f
mov byte [rsp + 0x50], 1
cmp eax, r9d
jne 0x18004c158
test r15b, r15b
je 0x18004c3b2
mov rdi, qword [rsp + 0x58]
add rdi, 0x4be0
mov dword [rdi + 0xe80], 0xbe99999a
mov ecx, dword [rdi + 8]
call fcn.18004bcc0
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rbx + r13], r14b
jne 0x18004c180
lea esi, [rbx + 1]
mov ecx, dword [rdi + 0x3c]
cmp esi, ecx
jle 0x18004c1b7
test ecx, ecx
je 0x18004c1a2
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004c1a7
mov eax, 8
mov edx, esi
cmp eax, esi
cmovg edx, eax
lea rcx, [rdi + 0x38]
call fcn.180031ad0
mov dword [rdi + 0x38], esi
movsxd r8, esi
mov rdx, r13
mov rcx, qword [rdi + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x54]
cmp dword [rdi + 8], eax
jne 0x18004c214
test r15b, r15b
jne 0x18004c214
mov r13b, 1
cmp dword [rdi + 0x10], ebx
jne 0x18004c20b
lea rsi, [rdi + 0x48]
lea r12, [rdi + 0x10]
cmp byte [rsi], r14b
je 0x18004c21f
mov r15, rsi
lea r12, [rdi + 0x10]
movsxd r8, ebx
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18004c21f
jmp 0x18004c218
lea r15, [rdi + 0x48]
mov rsi, r15
jmp 0x18004c218
lea rsi, [rdi + 0x48]
lea r12, [rdi + 0x10]
xor r13b, r13b
mov eax, dword [rsp + 0x54]
mov dword [rdi + 8], eax
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18004c256
test ecx, ecx
je 0x18004c241
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004c246
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.180031b60
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x18004c279
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor edx, edx
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.180031ad0
xor edx, edx
mov dword [rdi + 0x28], edx
mov byte [rsi], dl
mov rcx, qword [rsp + 0x78]
mov rsi, rcx
mov r15, qword [rdi + 0x20]
mov rbx, r15
movsxd r14, dword [rbp - 0x60]
dec r14
lea r14, [r15 + r14*2]
cmp r15, r14
jae 0x18004c2d3
nop
cmp byte [rsi], 0
je 0x18004c2cc
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.18001b030
movsxd rcx, eax
add rsi, rcx
movzx eax, word [rsp + 0x68]
mov word [rbx], ax
add rbx, 2
cmp rbx, r14
jb 0x18004c2a0
mov rcx, qword [rsp + 0x78]
xor edx, edx
mov word [rbx], dx
sub rbx, r15
sar rbx, 1
mov dword [rdi + 0xc], ebx
sub esi, ecx
mov dword [r12], esi
test r13b, r13b
je 0x18004c30e
mov ecx, ebx
cmp dword [rdi + 0x54], ebx
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
mov ecx, ebx
cmp dword [rdi + 0x58], ebx
cmovl ecx, dword [rdi + 0x58]
mov dword [rdi + 0x58], ecx
cmp dword [rdi + 0x5c], ebx
cmovl ebx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], ebx
jmp 0x18004c350
mov qword [rdi + 0x50], 0
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], edx
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], 0
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], edx
mov byte [rdi + 0x68], 0
mov byte [rdi + 0x6b], 1
mov byte [rdi + 0x60], 0
mov dword [rdi + 0x64], edx
movzx r15d, byte [rsp + 0x51]
test r15b, r15b
je 0x18004c373
test r13b, r13b
je 0x18004c36e
mov rax, qword [rsp + 0x58]
test byte [rax + 0x48cc], 4
jne 0x18004c373
mov r14b, 1
jmp 0x18004c376
xor r14b, r14b
movzx esi, byte [rsp + 0x52]
cmp byte [rsp + 0x70], 0
jne 0x18004c3a2
test sil, sil
je 0x18004c395
mov rax, qword [rsp + 0x58]
cmp byte [rax + 0xe24], 0
jne 0x18004c3a2
movzx r12d, byte [rsp + 0x53]
mov r9d, dword [rsp + 0x54]
jmp 0x18004c3b8
mov r14b, 1
movzx r12d, byte [rsp + 0x53]
mov r9d, dword [rsp + 0x54]
jmp 0x18004c3b8
movzx r15d, byte [rsp + 0x51]
mov rax, qword [rsp + 0x58]
movzx r13d, byte [rax + 0x79]
mov byte [rsp + 0x53], r13b
movzx ebx, byte [rsp + 0x50]
cmp dword [rax + 0x3f30], r9d
je 0x18004c412
test bl, bl
je 0x18004c405
mov rdx, qword [rbp - 0x80]
mov ecx, r9d
call fcn.18001e3c0
mov rdx, qword [rbp - 0x80]
mov ecx, dword [rsp + 0x54]
call fcn.18002b150
mov rcx, qword [rbp - 0x80]
call fcn.1800268a0
mov rax, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x54]
cmp dword [rax + 0x3f30], r9d
jne 0x18004c494
test sil, sil
je 0x18004c435
mov rax, qword [0x1800990f8]
mov dword [rax + 0x4588], r9d
mov dword [rax + 0x4584], r9d
mov word [rax + 0x458c], 0
mov rsi, qword [rsp + 0x58]
or dword [rsi + 0x4740], 3
mov rax, qword [0x1800990f8]
mov dword [rax + 0x3fd0], r9d
mov dword [rax + 0x3fcc], r9d
mov word [rax + 0x3fd4], 0
mov dword [rax + 0x3fdc], r9d
mov dword [rax + 0x3fd8], r9d
mov word [rax + 0x3fe0], 0
test r13b, r13b
je 0x18004c499
mov dword [rax + 0x45f4], r9d
mov dword [rax + 0x45f0], r9d
mov word [rax + 0x45f8], 0
jmp 0x18004c499
mov rsi, qword [rsp + 0x58]
cmp dword [rsi + 0x3f30], r9d
jne 0x18004c4b5
test rdi, rdi
jne 0x18004c4b5
xor edx, edx
xor ecx, ecx
call fcn.18001e3c0
mov r9d, dword [rsp + 0x54]
mov ecx, dword [rsi + 0x3f30]
mov r8d, 1
cmp ecx, r9d
jne 0x18004c4e4
cmp byte [rsi + 0x3748], 0
je 0x18004c4e0
mov eax, dword [rsp + 0x6c]
movzx eax, al
test bl, bl
cmove eax, r8d
mov dword [rsp + 0x6c], eax
mov dl, 1
jmp 0x18004c4e6
xor dl, dl
mov byte [rsp + 0x51], dl
test rdi, rdi
je 0x18004c512
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c4fc
test r14b, r14b
je 0x18004c512
test dl, dl
je 0x18004c512
mov r10b, 1
mov byte [rsp + 0x50], r10b
xor r11b, r11b
mov byte [rsp + 0x52], r11b
jmp 0x18004c535
xor r11b, r11b
mov byte [rsp + 0x52], r11b
xor r10b, r10b
mov byte [rsp + 0x50], r10b
test dl, dl
jne 0x18004c530
mov byte [rsp + 0x50], r10b
cmp ecx, r9d
jne 0x18004c540
test rdi, rdi
je 0x18004c540
cmp byte [rdi + 0x48], 0
mov byte [rsp + 0x66], 1
jne 0x18004c545
mov byte [rsp + 0x66], 0
movss xmm6, dword [rbp - 0x48]
movss dword [rsp + 0x68], xmm6
movss xmm0, dword [0x18008c120]
cmp ecx, r9d
jne 0x18004ca22
mov byte [rdi + 0xe86], 0
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x4c], eax
mov dword [rdi + 0xe88], 0x40000
movzx edx, byte [rsi + 0xe10]
test dl, dl
sete al
mov byte [rsi + 0x3f3d], al
mov dword [rsi + 0x5e14], r8d
movss xmm1, dword [rsi + 0xe08]
subss xmm1, xmm6
subss xmm1, dword [rsi + 0x380c]
addss xmm1, dword [rdi + 0x50]
movss xmm2, dword [rsi + 0x3c08]
mulss xmm2, xmm0
test r14b, r14b
je 0x18004c5de
xor r12d, r12d
mov dword [rdi + 0x58], r12d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r12b
lea rax, [rdi + 0xe85]
mov byte [rax], 1
jmp 0x18004c941
test r12b, r12b
je 0x18004c78f
cmp word [rsi + 0x3752], 2
jb 0x18004c78f
cmp byte [rsi + 0xe25], 0
jne 0x18004c78f
cmp byte [rdi + 0x6b], 0
je 0x18004c64e
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c64a
nop dword [rax]
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c64a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c64a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c620
movaps xmm2, xmm9
mov rcx, rdi
call fcn.18004a2b0
mov edx, eax
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], eax
mov byte [rdi + 0x6a], 0
movzx eax, word [rsi + 0x3752]
sub eax, 2
test al, 1
jne 0x18004c724
test edx, edx
je 0x18004c690
lea eax, [rdx - 1]
movsxd rcx, eax
mov rax, qword [rdi + 0x20]
cmp word [rax + rcx*2], 0xa
je 0x18004c690
xor cl, cl
jmp 0x18004c692
mov cl, 1
test cl, cl
jne 0x18004c6bc
mov r8d, 0x20000c
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov edx, dword [rdi + 0x54]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c6d6
cmp dword [rdi + 0x58], eax
jne 0x18004c6d1
mov dword [rdi + 0x5c], edx
mov dword [rdi + 0x58], edx
jmp 0x18004c6d6
mov dword [rdi + 0x54], eax
mov edx, eax
mov rcx, rdi
call fcn.180049ef0
mov dword [rdi + 0x54], eax
mov dword [rdi + 0x5c], eax
mov ecx, dword [rdi + 0xc]
mov r8d, eax
mov edx, dword [rdi + 0x58]
cmp edx, eax
je 0x18004c711
cmp edx, ecx
jle 0x18004c6fa
mov dword [rdi + 0x58], ecx
mov edx, ecx
cmp eax, ecx
jle 0x18004c707
mov dword [rdi + 0x5c], ecx
mov r8d, ecx
mov eax, dword [rdi + 0x54]
cmp edx, r8d
jne 0x18004c711
mov dword [rdi + 0x54], edx
mov eax, edx
cmp eax, ecx
jle 0x18004c783
mov dword [rdi + 0x54], ecx
lea rax, [rdi + 0xe85]
jmp 0x18004c934
mov r8d, 0x200004
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov r8d, 0x600005
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov r8d, 0x600001
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 0
lea rax, [rdi + 0xe85]
jmp 0x18004c934
lea rbx, [rdi + 0xe85]
movzx ecx, byte [rbx]
cmp byte [rsi + 0x3748], 0
je 0x18004c895
test cl, cl
jne 0x18004c895
test r12b, r12b
je 0x18004c88d
cmp byte [rsi + 0xe25], cl
je 0x18004c826
cmp byte [rdi + 0x6b], cl
je 0x18004c80e
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c80a
nop word [rax + rax]
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c80a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c80a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c7e0
movaps xmm2, xmm9
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c81c
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x58], eax
mov rcx, rdi
call fcn.18004a2b0
jmp 0x18004c87d
cmp byte [rdi + 0x6b], 0
je 0x18004c86e
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c86a
nop dword [rax]
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c86a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c86a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c840
movaps xmm2, xmm9
mov rcx, rdi
call fcn.18004a2b0
mov dword [rdi + 0x58], eax
mov byte [rdi + 0x6a], 0
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov dword [rdi + 0xe80], 0xbe99999a
mov rax, rbx
jmp 0x18004c93e
mov rax, rbx
test dl, dl
je 0x18004c93e
test cl, cl
jne 0x18004c93e
movss xmm0, dword [rsi + 0xf8]
ucomiss xmm0, xmm9
jp 0x18004c8c8
jne 0x18004c8c8
movss xmm0, dword [rsi + 0xfc]
ucomiss xmm0, xmm9
jp 0x18004c8c8
je 0x18004c93e
cmp byte [rdi + 0x6b], 0
je 0x18004c90e
mov rcx, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0xc]
lea r9, [rcx + rax*2]
cmp rcx, r9
jae 0x18004c90a
nop
movzx edx, r11b
movzx eax, word [rcx]
add rcx, 2
cmp ax, 0xa
je 0x18004c90a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
cmp rcx, r9
jae 0x18004c90a
mov byte [rsp + 0x50], r10b
mov byte [rsp + 0x52], dl
jmp 0x18004c8e0
movaps xmm2, xmm9
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004c91c
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x58], eax
mov rcx, rdi
call fcn.18004a2b0
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0xe84], 1
mov rax, rbx
mov dword [rdi + 0xe80], 0xbe99999a
xor r12d, r12d
cmp byte [rax], 0
je 0x18004c952
cmp byte [rsi + 0xe10], 0
jne 0x18004c952
mov byte [rax], 0
cmp byte [rsi + 0xe24], 0
je 0x18004c964
cmp byte [rsi + 0xe26], 0
je 0x18004c972
test r13b, r13b
je 0x18004c976
cmp byte [rsi + 0xe27], 0
je 0x18004c976
mov al, 1
jmp 0x18004c978
xor al, al
lea r14, [rsi + 0x37c0]
cmp dword [r14], 0
jle 0x18004ca1d
test al, al
jne 0x18004c9f9
test r15b, r15b
jne 0x18004c9f9
mov esi, r12d
mov rbx, r12
mov r13, qword [rsp + 0x58]
nop dword [rax]
mov rax, qword [r13 + 0x37c8]
movzx r8d, word [rax + rbx]
cmp r8d, 0x1f
jbe 0x18004c9e3
cmp r8d, 0x7f
je 0x18004c9e3
lea eax, [r8 - 0xe000]
cmp eax, 0x18ff
jbe 0x18004c9e3
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
inc esi
add rbx, 2
cmp esi, dword [r14]
jl 0x18004c9a0
movzx r13d, byte [rsp + 0x53]
mov rsi, qword [rsp + 0x58]
mov ecx, dword [r14 + 4]
test ecx, ecx
jns 0x18004ca1a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r12d
test eax, eax
cmovg edx, eax
mov rcx, r14
call fcn.180031b60
mov dword [r14], r12d
mov r9d, dword [rsp + 0x54]
xor r15b, r15b
mov byte [rsp + 0x65], r15b
cmp dword [rsi + 0x3f30], r9d
jne 0x18004d428
cmp byte [rsi + 0x3f3c], r15b
jne 0x18004d428
cmp byte [rsp + 0x6c], r15b
jne 0x18004d428
movaps xmm0, xmm7
subss xmm0, dword [rsi + 0x3810]
divss xmm0, dword [rsi + 0x3c08]
cvttss2si eax, xmm0
mov r15d, 1
mov ecx, r15d
cmp eax, r15d
cmovge ecx, eax
mov dword [rdi + 0x64], ecx
movzx eax, byte [rsi + 0xe25]
neg al
sbb ebx, ebx
and ebx, 0x400000
test r13b, r13b
je 0x18004cab3
movzx r12d, byte [rsi + 0xe26]
cmp byte [rsi + 0xe27], 0
je 0x18004cabb
cmp byte [rsi + 0xe24], 0
jne 0x18004cabb
test r12b, r12b
jne 0x18004cabb
movzx r13d, r15b
jmp 0x18004cabe
movzx r12d, byte [rsi + 0xe24]
xor r13b, r13b
mov r8d, r15d
mov edx, r9d
mov ecx, 0xa39
call fcn.1800295d0
mov r14d, dword [rsp + 0x54]
test al, al
jne 0x18004caf0
mov r8d, r15d
mov edx, r14d
mov ecx, 0x220a
call fcn.1800295d0
test al, al
mov byte [rsp + 0x60], 0
je 0x18004caf5
mov byte [rsp + 0x60], r15b
xor r8d, r8d
mov edx, r14d
mov ecx, 0xa24
call fcn.1800295d0
test al, al
jne 0x18004cb22
xor r8d, r8d
mov edx, r14d
mov ecx, 0x1209
call fcn.1800295d0
test al, al
mov byte [rsp + 0x63], 0
je 0x18004cb27
mov byte [rsp + 0x63], r15b
mov r8d, r15d
mov edx, r14d
mov ecx, 0xa37
call fcn.1800295d0
test al, al
jne 0x18004cb54
mov r8d, r15d
mov edx, r14d
mov ecx, 0x2209
call fcn.1800295d0
test al, al
mov byte [rsp + 0x64], 0
je 0x18004cb59
mov byte [rsp + 0x64], r15b
mov r8d, r15d
mov edx, r14d
mov ecx, 0xa3b
call fcn.1800295d0
test al, al
setne byte [rsp + 0x67]
mov r8d, r15d
mov edx, r14d
mov ecx, 0xa3a
call fcn.1800295d0
test al, al
jne 0x18004cba5
cmp byte [rsp + 0x53], al
je 0x18004cb9e
mov r8d, r15d
mov edx, r14d
mov ecx, 0x2a3b
call fcn.1800295d0
test al, al
jne 0x18004cba5
mov byte [rsp + 0x62], 0
jmp 0x18004cbaa
mov byte [rsp + 0x62], r15b
xor r8d, r8d
mov edx, r14d
mov ecx, 0xa22
call fcn.1800295d0
mov byte [rsp + 0x61], al
test byte [rsi + 8], 2
je 0x18004cbd0
test byte [rsi + 0xc], r15b
je 0x18004cbd0
movzx esi, r15b
jmp 0x18004cbd3
xor sil, sil
mov r8d, r15d
xor edx, edx
mov ecx, 0x20d
call fcn.1800277a0
test al, al
jne 0x18004cbfc
mov r8d, r15d
xor edx, edx
mov ecx, 0x267
call fcn.1800277a0
test al, al
jne 0x18004cbfc
xor r15b, r15b
test sil, sil
je 0x18004cc2c
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.1800277a0
test al, al
jne 0x18004cc27
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.1800277a0
test al, al
je 0x18004cc2c
mov r14b, 1
jmp 0x18004cc2f
xor r14b, r14b
mov r8d, 1
mov edx, dword [rsp + 0x54]
mov ecx, 0x20e
call fcn.1800295d0
test al, al
jne 0x18004cc69
test sil, sil
je 0x18004cc64
mov r8d, 1
mov edx, dword [rsp + 0x54]
mov ecx, 0x26c
call fcn.1800295d0
test al, al
jne 0x18004cc69
xor sil, sil
jmp 0x18004cc6c
mov sil, 1
xor edx, edx
mov ecx, 0x201
lea r8d, [rdx + 1]
call fcn.1800277a0
test al, al
je 0x18004cceb
test r13b, r13b
je 0x18004cc8c
mov eax, 0x200004
jmp 0x18004cc9c
mov eax, 0x200000
test r12b, r12b
mov ecx, 0x20000c
cmovne eax, ecx
or ebx, eax
lea rdx, [rdi + 0x54]
mov r8d, ebx
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov rsi, qword [rsp + 0x58]
movzx edx, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x50]
xor r15b, r15b
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18004d41b
test dl, dl
je 0x18004d41b
mov al, 1
jmp 0x18004d41d
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.1800277a0
test al, al
je 0x18004cd24
test r13b, r13b
je 0x18004cd0d
mov ecx, 0x200005
or ebx, ecx
jmp 0x18004cc9e
mov ecx, 0x200001
mov eax, 0x20000d
test r12b, r12b
cmovne ecx, eax
or ebx, ecx
jmp 0x18004cc9e
mov r13d, 1
mov r8d, r13d
xor edx, edx
mov ecx, 0x203
call fcn.1800277a0
mov r8d, r13d
xor edx, edx
mov ecx, 0x204
call fcn.1800277a0
mov r8d, r13d
xor edx, edx
mov ecx, 0x205
call fcn.1800277a0
mov r8d, r13d
xor edx, edx
mov ecx, 0x206
call fcn.1800277a0
mov r8d, r13d
xor edx, edx
mov ecx, 0x207
call fcn.1800277a0
test al, al
je 0x18004cdba
mov eax, ebx
or eax, 0x200006
or ebx, 0x200004
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 0xe24], 0
cmovne ebx, eax
mov r8d, ebx
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], r13b
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x18004ccc3
mov r8d, r13d
xor edx, edx
mov ecx, 0x208
call fcn.1800277a0
test al, al
je 0x18004cdef
mov eax, ebx
or eax, 0x200007
mov r8d, 0x200005
or r8d, ebx
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 0xe24], 0
cmovne r8d, eax
jmp 0x18004cd98
mov r8d, r13d
xor edx, edx
mov ecx, 0x20a
call fcn.1800277a0
movzx r13d, byte [rsp + 0x60]
test al, al
je 0x18004ce48
test r13b, r13b
jne 0x18004ce48
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004ce3d
test r12b, r12b
je 0x18004ce3d
lea rdx, [rdi + 0x54]
mov r8d, 0x60000d
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
or ebx, 0x200008
jmp 0x18004cc9e
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.1800277a0
test al, al
je 0x18004cf0c
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18004ce90
test r12b, r12b
je 0x18004cec0
lea rdx, [rdi + 0x54]
mov r8d, 0x60000c
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov rsi, qword [rsp + 0x58]
or ebx, 0x200009
lea rdx, [rdi + 0x54]
mov r8d, ebx
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x18004ccc3
cmp byte [rsp + 0x53], 0
je 0x18004ce90
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 0xe27], 0
je 0x18004ce95
cmp byte [rsi + 0xe26], 0
jne 0x18004ce95
cmp byte [rsi + 0xe24], 0
jne 0x18004ce95
lea rdx, [rdi + 0x54]
mov r8d, 0x600004
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
jmp 0x18004ce95
test r15b, r15b
jne 0x18004d3e5
test r14b, r14b
jne 0x18004d3e5
test sil, sil
je 0x18004cf42
mov r15b, 1
mov byte [rsp + 0x65], r15b
mov byte [rsp + 0x6c], r15b
xor cl, cl
xor dl, dl
mov byte [rsp + 0x51], dl
mov rsi, qword [rsp + 0x58]
jmp 0x18004ccd0
movzx eax, byte [rsp + 0x67]
test al, al
jne 0x18004d3ac
cmp byte [rsp + 0x62], al
jne 0x18004d3ac
cmp byte [rsp + 0x61], al
je 0x18004cf7d
xor eax, eax
mov dword [rdi + 0x58], eax
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], 0
mov byte [rdi + 0xe84], 1
jmp 0x18004ccbe
test r13b, r13b
jne 0x18004d193
cmp byte [rsp + 0x63], r13b
jne 0x18004d193
cmp byte [rsp + 0x64], r13b
je 0x18004ccbe
mov rcx, qword [0x1800990f8]
mov rax, qword [rcx + 0xb0]
test rax, rax
je 0x18004cfcd
mov rcx, qword [rcx + 0xc0]
call rax
mov rbx, rax
test rax, rax
je 0x18004ccbe
mov rcx, qword [0x1800990f8]
jmp 0x18004cfd4
lea rbx, [0x1800814eb]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x18004cfe0
test rcx, rcx
je 0x18004cff4
inc dword [rcx + 0xf4]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
xor r12d, r12d
mov r14d, r12d
cmp byte [rbx], r12b
je 0x18004d053
mov rsi, rax
nop dword [rax]
nop word [rax + rax]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.18001b030
movsxd rcx, eax
add rbx, rcx
mov ecx, dword [rsp + 0x70]
lea eax, [rcx - 0x20]
cmp eax, 0xffdf
ja 0x18004d04e
mov word [rsi], cx
inc r14d
add rsi, 2
cmp byte [rbx], r12b
jne 0x18004d020
movsxd rax, r14d
mov word [r15 + rax*2], r12w
test r14d, r14d
jle 0x18004d16e
mov edx, dword [rdi + 0xc]
mov r8d, dword [rdi + 0x5c]
mov eax, dword [rdi + 0x58]
mov ecx, edx
cmp eax, r8d
je 0x18004d0a5
mov r9d, eax
cmp eax, edx
jle 0x18004d085
mov dword [rdi + 0x58], edx
mov r9d, edx
mov ecx, dword [rdi + 0xc]
mov r10d, r8d
cmp r8d, edx
jle 0x18004d096
mov dword [rdi + 0x5c], edx
mov r10d, edx
mov ecx, dword [rdi + 0xc]
mov r8d, r10d
mov eax, r9d
cmp r9d, r10d
jne 0x18004d0a5
mov dword [rdi + 0x54], r9d
mov r9d, dword [rdi + 0x54]
cmp r9d, edx
jle 0x18004d0b4
mov dword [rdi + 0x54], edx
mov r9d, edx
cmp eax, r8d
je 0x18004d0e2
mov edx, eax
cmp eax, ecx
jle 0x18004d0c4
mov dword [rdi + 0x58], ecx
mov edx, ecx
mov r10d, r8d
cmp r8d, ecx
jle 0x18004d0d2
mov dword [rdi + 0x5c], ecx
mov r10d, ecx
mov r8d, r10d
mov eax, edx
cmp edx, r10d
jne 0x18004d0e2
mov dword [rdi + 0x54], edx
mov r9d, edx
cmp r9d, ecx
jle 0x18004d0ea
mov dword [rdi + 0x54], ecx
cmp eax, r8d
je 0x18004d126
lea rdx, [rdi + 0x54]
mov rcx, rdi
jge 0x18004d10e
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18004a5f0
mov eax, dword [rdi + 0x58]
mov dword [rdi + 0x5c], eax
jmp 0x18004d11f
sub eax, r8d
mov r9d, eax
call fcn.18004a5f0
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r12b
mov r9d, r14d
mov r8, r15
mov edx, dword [rdi + 0x54]
mov rcx, rdi
call fcn.18004a120
test al, al
je 0x18004d167
mov esi, dword [rdi + 0x54]
lea rcx, [rdi + 0x74]
xor edx, edx
call fcn.18004b720
test rax, rax
je 0x18004d15f
mov dword [rax], esi
mov dword [rax + 4], r12d
mov dword [rax + 8], r14d
mov dword [rax + 0xc], 0xffffffff
add dword [rdi + 0x54], r14d
mov byte [rdi + 0x6a], r12b
mov byte [rdi + 0xe84], 1
test r15, r15
je 0x18004d185
mov rax, qword [0x1800990f8]
test rax, rax
je 0x18004d185
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18004ccbe
mov rsi, qword [rsp + 0x58]
cmp qword [rsi + 0xb8], 0
je 0x18004d2fb
mov eax, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
movzx r12d, byte [rsp + 0x50]
movzx r8d, byte [rsp + 0x52]
mov byte [rsp + 0x50], r12b
mov byte [rsp + 0x52], r8b
cmp ecx, eax
je 0x18004d1d0
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18004d1d7
xor eax, eax
mov edx, eax
mov eax, dword [rdi + 0xc]
movsxd r14, eax
mov rax, qword [rdi + 0x20]
lea r8, [rax + r14*2]
movsxd r15, edx
lea rdx, [rax + r15*2]
xor eax, eax
mov ecx, eax
mov r9d, 0x800
mov r12d, 0x80
nop dword [rax]
test r8, r8
je 0x18004d20a
cmp rdx, r8
jae 0x18004d22d
movzx eax, word [rdx]
test ax, ax
je 0x18004d22d
add rdx, 2
cmp ax, r12w
jae 0x18004d220
inc ecx
jmp 0x18004d200
cmp ax, r9w
sbb eax, eax
add eax, 3
add ecx, eax
jmp 0x18004d200
inc ecx
mov rax, qword [0x1800990f8]
test rax, rax
je 0x18004d241
inc dword [rax + 0xf4]
movsxd rbx, ecx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
mov rcx, qword [rdi + 0x20]
lea r11, [rcx + r14*2]
lea r10, [rcx + r15*2]
mov r9, rax
lea r14, [rax + rbx]
lea rbx, [r14 - 1]
cmp rax, rbx
jae 0x18004d2b2
nop dword [rax]
test r11, r11
je 0x18004d27a
cmp r10, r11
jae 0x18004d2b2
movzx eax, word [r10]
test ax, ax
je 0x18004d2b2
mov r8d, eax
add r10, 2
cmp eax, r12d
jae 0x18004d297
mov byte [r9], r8b
inc r9
jmp 0x18004d2ad
mov edx, r14d
sub edx, r9d
dec edx
mov rcx, r9
call fcn.18001b1e0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x18004d270
mov byte [r9], 0
mov rax, qword [0x1800990f8]
mov r8, qword [rax + 0xb8]
test r8, r8
je 0x18004d2dd
mov rdx, rsi
mov rcx, qword [rax + 0xc0]
call r8
mov rax, qword [0x1800990f8]
test rsi, rsi
je 0x18004d2ed
test rax, rax
je 0x18004d2ed
dec dword [rax + 0xf4]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rsi, qword [rsp + 0x58]
test r13b, r13b
je 0x18004ccc3
mov eax, dword [rdi + 0x5c]
lea rbx, [rdi + 0x54]
cmp dword [rdi + 0x58], eax
jne 0x18004d321
xor eax, eax
mov dword [rdi + 0x58], eax
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rbx], eax
mov byte [rdi + 0x6a], 0
mov byte [rdi + 0xe84], 1
mov r8d, dword [rbx + 8]
mov eax, dword [rbx + 4]
cmp eax, r8d
je 0x18004ccc3
mov ecx, dword [rdi + 0xc]
cmp eax, ecx
jle 0x18004d344
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x18004d34f
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x18004d356
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x18004d35c
mov dword [rbx], ecx
cmp eax, r8d
je 0x18004d3a3
mov rdx, rbx
mov rcx, rdi
jge 0x18004d38c
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.18004a5f0
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
mov dword [rbx], eax
mov byte [rbx + 0x16], 0
mov byte [rbx + 0x16], 0
jmp 0x18004ccc3
sub eax, r8d
mov r9d, eax
call fcn.18004a5f0
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
mov dword [rbx], eax
mov byte [rbx + 0x16], 0
mov byte [rbx + 0x16], 0
jmp 0x18004ccc3
mov r8d, eax
xor r8d, 1
add r8d, 0x20000a
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18004a770
mov byte [rdi + 0xe84], 1
mov dword [rdi + 0xe80], 0xbe99999a
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x18004ccbe
mov rsi, qword [rsp + 0x58]
movzx ecx, byte [rsp + 0x50]
movzx edx, byte [rsp + 0x51]
cmp byte [rsi + 0x7c], 0
je 0x18004d411
xor eax, eax
mov dword [rdi + 0x58], eax
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], 0
jmp 0x18004cccd
mov byte [rsp + 0x6c], 1
jmp 0x18004cccd
xor al, al
or cl, al
mov byte [rsp + 0x50], cl
mov r9d, dword [rsp + 0x54]
xor r10d, r10d
mov r12d, r10d
mov r14d, r10d
cmp dword [rsi + 0x3f30], r9d
jne 0x18004d6ba
test r15b, r15b
je 0x18004d5c8
mov r9, qword [rdi + 0x40]
mov rax, qword [rsp + 0x78]
mov r8, r9
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d473
inc rax
test ecx, ecx
jne 0x18004d460
test edx, edx
je 0x18004d5c8
mov r12, r9
mov qword [rbp - 0x58], r9
mov r14d, dword [rdi + 0x38]
dec r14d
mov dword [rbp - 0x68], r14d
mov byte [rsp + 0x52], 1
mov qword [rbp + 0x10], r10
mov r15d, r10d
mov r13, r10
mov qword [rbp + 0x18], r10
test r14d, r14d
jle 0x18004d586
movsxd rbx, r14d
add rbx, r9
mov rsi, r9
mov r14d, r10d
test rbx, rbx
je 0x18004d4bf
cmp rsi, rbx
jae 0x18004d4df
cmp byte [rsi], 0
je 0x18004d4df
mov r8, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18001b030
movsxd rcx, eax
add rsi, rcx
inc r14d
jmp 0x18004d4b5
lea r15d, [r14 + 1]
test r15d, r15d
jle 0x18004d523
mov esi, r15d
cmp r15d, 8
mov eax, 8
cmovl esi, eax
test esi, esi
jle 0x18004d523
mov rax, qword [0x1800990f8]
test rax, rax
je 0x18004d50d
inc dword [rax + 0xf4]
movsxd rcx, esi
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r13, rax
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x14], esi
mov dword [rbp + 0x10], r15d
mov rsi, r12
mov r14, r13
movsxd r12, r15d
lea r12, [r12*2 - 2]
add r12, r13
cmp r13, r12
jae 0x18004d577
test rbx, rbx
je 0x18004d54a
cmp rsi, rbx
jae 0x18004d577
cmp byte [rsi], 0
je 0x18004d577
mov r8, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18001b030
movsxd rcx, eax
add rsi, rcx
movzx eax, word [rsp + 0x70]
mov word [r14], ax
add r14, 2
cmp r14, r12
jb 0x18004d540
xor r10d, r10d
mov word [r14], r10w
mov r14d, dword [rbp - 0x68]
mov r12, qword [rbp - 0x58]
lea r9d, [r15 - 1]
test r14d, r14d
cmovle r9d, r10d
lea rdx, [rdi + 0x54]
mov r8, r13
mov rcx, rdi
call fcn.18004bc00
nop
test r13, r13
je 0x18004d5c2
mov rax, qword [0x1800990f8]
test rax, rax
je 0x18004d5b8
dec dword [rax + 0xf4]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
movzx r15d, byte [rsp + 0x65]
mov byte [rdi + 0x48], 1
mov eax, dword [rdi + 0x18]
lea ebx, [rax*4 + 1]
mov ecx, dword [rdi + 0x2c]
cmp ebx, ecx
jle 0x18004d601
test ecx, ecx
je 0x18004d5ec
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004d5f1
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.180031ad0
mov dword [rdi + 0x28], ebx
mov r10, qword [rdi + 0x20]
mov r9, qword [rdi + 0x30]
movsxd r11, ebx
add r11, r9
lea rbx, [r11 - 1]
cmp r9, rbx
jae 0x18004d65a
nop dword [rax + rax]
movzx eax, word [r10]
test ax, ax
je 0x18004d65a
mov r8d, eax
add r10, 2
cmp eax, 0x80
jae 0x18004d63f
mov byte [r9], r8b
inc r9
jmp 0x18004d655
mov edx, r11d
sub edx, r9d
dec edx
mov rcx, r9
call fcn.18001b1e0
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x18004d620
mov byte [r9], 0
test r15b, r15b
mov r15, qword [rsp + 0x78]
jne 0x18004d6b0
mov r9, qword [rdi + 0x30]
mov rax, r9
mov r8, r15
sub r8, r9
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d693
inc rax
test ecx, ecx
jne 0x18004d680
mov rsi, qword [rsp + 0x58]
xor r10d, r10d
test edx, edx
je 0x18004d6bf
mov r12, r9
mov r14d, dword [rdi + 0x10]
mov r9b, 1
mov byte [rsp + 0x52], r9b
jmp 0x18004d6c5
mov rsi, qword [rsp + 0x58]
xor r10d, r10d
jmp 0x18004d6bf
mov r15, qword [rsp + 0x78]
movzx r9d, byte [rsp + 0x52]
mov r13d, dword [rsp + 0x54]
cmp dword [rsi + 0x5a70], r13d
jne 0x18004d777
cmp dword [rsi + 0x3f30], r13d
je 0x18004d770
mov rax, qword [0x1800990f8]
mov ecx, dword [rax + 0x4774]
test cl, 0x20
je 0x18004d6fe
shr ecx, 6
test cl, 1
jmp 0x18004d718
mov edx, dword [rax + 0x476c]
mov ecx, dword [rax + 0x3f60]
cmp ecx, edx
jne 0x18004d770
test ecx, ecx
je 0x18004d770
cmp dword [rax + 0x3f30], edx
je 0x18004d770
cmp byte [rax + 0x3f65], 0
jne 0x18004d735
cmp dword [rax + 0x3f30], 0
jne 0x18004d770
cmp byte [rax + 0x3f40], 0
je 0x18004d770
mov r12, qword [rsi + 0x5a80]
mov r14d, dword [rsi + 0x5a78]
dec r14d
mov rax, r12
mov r8, r15
sub r8, r12
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004d763
inc rax
test ecx, ecx
jne 0x18004d750
test edx, edx
setne al
or r9b, al
mov byte [rsp + 0x52], r9b
mov dword [rsi + 0x5a70], r10d
test r12, r12
je 0x18004d808
mov qword [rbp - 0x18], r10
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov qword [rbp - 0x30], rsi
mov dword [rbp - 0x28], 0x40000
mov dword [rbp - 0x24], 0x40000
mov qword [rbp - 0x10], r15
mov dword [rbp - 8], r14d
lea eax, [r14 + 1]
cmp dword [rbp - 0x60], eax
cmovge eax, dword [rbp - 0x60]
mov dword [rbp - 4], eax
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x30]
call fcn.18005d650
mov r15, qword [rbp - 0x10]
mov qword [rsp + 0x78], r15
mov r8d, dword [rbp - 4]
lea ecx, [r8 - 1]
cmp dword [rbp - 8], ecx
cmovl ecx, dword [rbp - 8]
lea eax, [rcx + 1]
cmp eax, r8d
cmovl r8d, eax
movsxd rbx, r8d
cmp rbx, 1
jb 0x18004d808
jbe 0x18004d802
lea r8, [rbx - 1]
mov rdx, r12
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [r15 + rbx - 1], 0
cmp byte [rsp + 0x6c], 0
je 0x18004d821
cmp dword [rsi + 0x3f30], r13d
jne 0x18004d821
xor edx, edx
xor ecx, ecx
call fcn.18001e3c0
mov r8d, 1
mov edx, r13d
lea rcx, [rbp - 0x48]
call fcn.18001cef0
mov rax, qword [0x1800990f8]
movups xmm0, xmmword [rax + 0x391c]
movups xmmword [rbp + 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b2a0
mov r8d, eax
movss xmm0, dword [rsi + 0x3814]
movss dword [rsp + 0x20], xmm0
mov r9b, 1
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x48]
call fcn.18001cc00
movaps xmm15, xmm8
addss xmm15, xmm6
movss xmm14, dword [rbp - 0x44]
movaps xmm13, xmm14
addss xmm13, xmm7
movss xmm5, dword [rsi + 0x380c]
movaps xmm0, xmm5
addss xmm0, xmm6
movaps xmm1, xmm14
addss xmm1, dword [rsi + 0x3810]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x20], xmm0
cmp byte [rsp + 0x66], 0
je 0x18004d8cb
mov r15, qword [rdi + 0x30]
mov qword [rsp + 0x78], r15
movzx ecx, byte [rsp + 0x51]
movzx r12d, byte [rsp + 0x50]
test cl, cl
jne 0x18004da2d
test r12b, r12b
jne 0x18004da2d
cmp dword [rsi + 0x3f30], r13d
jne 0x18004d8f6
movsxd r14, dword [rdi + 0x10]
jmp 0x18004d90a
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [r15 + r14], 0
jne 0x18004d900
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x18004e19c
mov rax, qword [0x1800990f8]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp + 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b2a0
mov r9d, eax
mov rax, qword [rbp - 0x80]
mov rdx, qword [rax + 0x298]
mov rcx, r14
movss xmm2, dword [rsi + 0x3c08]
mov r8, qword [rsi + 0x3c00]
test r9d, 0xff000000
je 0x18004e19c
test r14, r14
jne 0x18004d991
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r15 + rcx], 0
jne 0x18004d984
add rcx, r15
cmp r15, rcx
je 0x18004e19c
test r8, r8
jne 0x18004d9a7
mov rax, qword [rdx + 0x38]
mov r8, qword [rax + 8]
ucomiss xmm2, xmm9
jp 0x18004d9b8
jne 0x18004d9b8
mov rax, qword [rdx + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp - 0x78], xmm0
comiss xmm0, xmm6
jae 0x18004d9cd
movss dword [rbp - 0x78], xmm6
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm14
jae 0x18004d9de
movss dword [rbp - 0x74], xmm14
comiss xmm15, dword [rbp - 0x70]
ja 0x18004d9eb
movss dword [rbp - 0x70], xmm15
comiss xmm13, dword [rbp - 0x6c]
ja 0x18004d9f8
movss dword [rbp - 0x6c], xmm13
mov byte [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r15
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x20]
mov rcx, r8
call fcn.180040b30
jmp 0x18004e19c
movsxd rax, dword [rdi + 0x10]
mov qword [rbp - 0x78], rax
lea r14, [r15 + rax]
mov rsi, qword [rdi + 0x20]
movaps xmm7, xmm9
movaps xmm6, xmm9
xor r8d, r8d
mov r10d, r8d
mov r15d, r8d
mov r9d, 0xfffffc18
mov ebx, r9d
mov edx, r8d
test cl, cl
je 0x18004da6e
movsxd rax, dword [rdi + 0x54]
lea r10, [rsi + rax*2]
lea edx, [r8 + 1]
lea r9d, [r8 - 1]
test r12b, r12b
je 0x18004da8b
mov ecx, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], ecx
cmovl ecx, dword [rdi + 0x58]
movsxd rax, ecx
lea r15, [rsi + rax*2]
mov ebx, 0xffffffff
inc edx
mov ecx, r8d
mov rax, rsi
movzx r8d, word [rsi]
test r8w, r8w
je 0x18004dadd
nop dword [rax + rax]
cmp r8w, 0xa
jne 0x18004dacf
inc ecx
cmp r9d, 0xffffffff
jne 0x18004dabd
cmp rax, r10
jb 0x18004dabd
mov r9d, ecx
dec edx
test edx, edx
jle 0x18004dadd
cmp ebx, 0xffffffff
jne 0x18004dacf
cmp rax, r15
jb 0x18004dacf
mov ebx, ecx
dec edx
test edx, edx
jle 0x18004dadd
add rax, 2
movzx r8d, word [rax]
test r8w, r8w
jne 0x18004daa0
inc ecx
mov r11d, ecx
cmp r9d, 0xffffffff
cmovne r11d, r9d
cmp ebx, 0xffffffff
cmove ebx, ecx
mov rdx, r10
cmp r10, rsi
jbe 0x18004db12
nop dword [rax + rax]
lea rax, [rdx - 2]
cmp word [rax], 0xa
je 0x18004db12
mov rdx, rax
cmp rax, rsi
ja 0x18004db00
mov r13, qword [rsp + 0x58]
mov r8, qword [r13 + 0x3c00]
movss xmm4, dword [r13 + 0x3c08]
movaps xmm3, xmm4
divss xmm3, dword [r8 + 0x14]
movaps xmm1, xmm9
movaps xmm11, xmm9
cmp rdx, r10
jae 0x18004db80
nop dword [rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004db57
maxss xmm1, xmm11
movaps xmm11, xmm9
jmp 0x18004db7b
cmp ecx, 0xd
je 0x18004db7b
cmp ecx, dword [r8]
jge 0x18004db6c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004db72
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm3
addss xmm11, xmm0
cmp rdx, r10
jb 0x18004db40
maxss xmm11, xmm1
movd xmm12, r11d
cvtdq2ps xmm12, xmm12
mulss xmm12, xmm4
test ebx, ebx
js 0x18004dc10
mov rdx, r15
cmp r15, rsi
jbe 0x18004dbb2
nop
lea rax, [rdx - 2]
cmp word [rax], 0xa
je 0x18004dbb2
mov rdx, rax
cmp rax, rsi
ja 0x18004dba0
movaps xmm2, xmm9
movaps xmm7, xmm9
cmp rdx, r15
jae 0x18004dc01
nop
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004dbd6
maxss xmm2, xmm7
movaps xmm7, xmm9
jmp 0x18004dbfc
cmp ecx, 0xd
je 0x18004dbfc
cmp ecx, dword [r8]
jge 0x18004dbeb
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004dbf1
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm7, xmm0
cmp rdx, r15
jb 0x18004dbc0
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm4
maxss xmm7, xmm2
movzx r8d, byte [rsp + 0x51]
test r8b, r8b
je 0x18004dc77
cmp byte [rdi + 0xe84], 0
je 0x18004dc77
movaps xmm0, xmm8
mulss xmm0, dword [0x18008c10c]
subss xmm8, xmm5
movss xmm2, dword [rdi + 0x50]
movaps xmm1, xmm11
comiss xmm2, xmm11
jbe 0x18004dc52
subss xmm1, xmm0
movaps xmm0, xmm9
maxss xmm0, xmm1
jmp 0x18004dc60
subss xmm1, xmm8
comiss xmm1, xmm2
jb 0x18004dc70
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
mov byte [rdi + 0xe84], 0
movss xmm10, dword [rdi + 0x50]
test r12b, r12b
je 0x18004debc
mov edx, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea rbx, [rsi + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rsi, [rsi + rax*2]
test r8b, r8b
je 0x18004dcb2
movss xmm1, dword [0x18008c158]
jmp 0x18004dcba
movss xmm1, dword [0x18008c124]
mov rax, qword [0x1800990f8]
movups xmm0, xmmword [rax + 0x3b9c]
movups xmmword [rbp + 0x10], xmm0
mulss xmm1, dword [rax + 0x37d0]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b2a0
mov r15d, eax
movss xmm9, dword [rbp + 0x20]
addss xmm7, xmm9
subss xmm7, xmm10
movss xmm8, dword [rbp + 0x24]
addss xmm8, xmm6
xorps xmm1, xmm1
subss xmm8, xmm1
cmp rbx, rsi
jae 0x18004dec2
movss xmm6, dword [0x18008c16c]
movss xmm5, dword [r13 + 0x3c08]
movaps xmm0, xmm5
addss xmm0, xmm13
comiss xmm8, xmm0
ja 0x18004dec2
comiss xmm14, xmm8
jbe 0x18004dd6c
cmp rbx, rsi
jae 0x18004dea0
nop dword [rax + rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004dea0
cmp rbx, rsi
jae 0x18004dec2
jmp 0x18004dd50
mov rdx, qword [r13 + 0x3c00]
movaps xmm3, xmm5
divss xmm3, dword [rdx + 0x14]
movaps xmm4, xmm1
movaps xmm2, xmm1
cmp rbx, rsi
jae 0x18004ddd4
nop word [rax + rax]
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004ddc7
cmp ecx, 0xd
je 0x18004ddc0
cmp ecx, dword [rdx]
jge 0x18004ddb0
mov rax, qword [rdx + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004ddb5
movss xmm1, dword [rdx + 0x10]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm2, xmm0
cmp rbx, rsi
jae 0x18004ddd1
jmp 0x18004dd90
xorps xmm4, xmm4
maxss xmm4, xmm2
xorps xmm2, xmm2
xorps xmm1, xmm1
maxss xmm2, xmm4
comiss xmm1, xmm2
jb 0x18004de08
cmp dword [rdx], 0x20
jle 0x18004ddf0
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004ddf5
movss xmm0, dword [rdx + 0x10]
mulss xmm0, dword [0x18008c120]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm2, xmm7
movaps xmm0, xmm8
addss xmm0, xmm6
addss xmm7, xmm1
movss xmm1, dword [0x18008c218]
subss xmm1, xmm5
addss xmm1, xmm8
movss xmm3, dword [rsp + 0x68]
maxss xmm7, xmm3
maxss xmm1, xmm14
movss dword [rbp + 0x10], xmm7
movss dword [rbp + 0x14], xmm1
minss xmm2, xmm15
minss xmm0, xmm13
movss dword [rbp + 0x18], xmm2
movss dword [rbp + 0x1c], xmm0
comiss xmm0, xmm14
jbe 0x18004de9d
comiss xmm13, xmm1
jbe 0x18004de9d
comiss xmm2, xmm3
jbe 0x18004de9d
comiss xmm15, xmm7
jbe 0x18004de9d
xor eax, eax
mov dword [rsp + 0x28], eax
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, r15d
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x10]
mov rax, qword [rbp - 0x80]
mov rcx, qword [rax + 0x298]
call fcn.18003c880
movss xmm9, dword [rbp + 0x20]
xorps xmm1, xmm1
movaps xmm7, xmm9
subss xmm7, xmm10
addss xmm8, dword [r13 + 0x3c08]
cmp rbx, rsi
jae 0x18004dec2
jmp 0x18004dd21
movss xmm9, dword [rbp + 0x20]
cmp qword [rbp - 0x78], 0x200000
jge 0x18004e00f
mov rax, qword [0x1800990f8]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp + 0x10], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp + 0x1c], xmm0
lea rcx, [rbp + 0x10]
call fcn.18001b2a0
mov r9d, eax
mov rbx, qword [rbp - 0x80]
mov rdx, qword [rbx + 0x298]
mov rcx, r14
subss xmm9, xmm10
movss dword [rbp - 0x80], xmm9
movss xmm0, dword [rbp + 0x24]
xorps xmm9, xmm9
subss xmm0, xmm9
movss dword [rbp - 0x7c], xmm0
mov rsi, r13
movss xmm2, dword [r13 + 0x3c08]
mov r8, qword [r13 + 0x3c00]
test eax, 0xff000000
je 0x18004e01a
mov r15, qword [rsp + 0x78]
test r14, r14
jne 0x18004df6d
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x18004df60
add rcx, r15
cmp r15, rcx
je 0x18004e01f
test r8, r8
jne 0x18004df83
mov rax, qword [rdx + 0x38]
mov r8, qword [rax + 8]
ucomiss xmm2, xmm9
jp 0x18004df94
jne 0x18004df94
mov rax, qword [rdx + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp - 0x78], xmm0
movss xmm8, dword [rsp + 0x68]
comiss xmm0, xmm8
jae 0x18004dfb2
movss dword [rbp - 0x78], xmm8
movss xmm0, dword [rbp - 0x74]
comiss xmm0, xmm14
jae 0x18004dfc3
movss dword [rbp - 0x74], xmm14
comiss xmm15, dword [rbp - 0x70]
ja 0x18004dfd0
movss dword [rbp - 0x70], xmm15
comiss xmm13, dword [rbp - 0x6c]
ja 0x18004dfdd
movss dword [rbp - 0x6c], xmm13
mov byte [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r15
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x80]
mov rcx, r8
call fcn.180040b30
jmp 0x18004e026
xorps xmm9, xmm9
mov rsi, r13
mov rbx, qword [rbp - 0x80]
mov r15, qword [rsp + 0x78]
movss xmm8, dword [rsp + 0x68]
cmp byte [rsp + 0x51], 0
je 0x18004e188
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], 0
je 0x18004e070
comiss xmm9, xmm0
jae 0x18004e070
movss xmm1, dword [0x18008c160]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x18008c144]
comiss xmm1, xmm0
jae 0x18004e070
xor cl, cl
jmp 0x18004e072
mov cl, 1
addss xmm11, dword [rbp + 0x20]
subss xmm11, xmm10
cvttss2si eax, xmm11
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0x24]
addss xmm0, xmm12
subss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x10], xmm6
movaps xmm0, xmm7
subss xmm0, dword [rsi + 0x3c08]
addss xmm0, dword [0x18008c120]
movss dword [rbp + 0x14], xmm0
movaps xmm2, xmm6
movss xmm10, dword [0x18008c158]
addss xmm2, xmm10
movss dword [rbp + 0x18], xmm2
movaps xmm1, xmm7
subss xmm1, dword [0x18008c168]
movss dword [rbp + 0x1c], xmm1
test cl, cl
je 0x18004e156
comiss xmm1, xmm14
jbe 0x18004e156
comiss xmm13, xmm0
jbe 0x18004e156
comiss xmm2, xmm8
jbe 0x18004e156
comiss xmm15, xmm6
jbe 0x18004e156
mov rax, qword [0x1800990f8]
movups xmm0, xmmword [rax + 0x38ac]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x37d0]
movss dword [rbp - 0x6c], xmm0
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm1
lea rcx, [rbp - 0x78]
call fcn.18001b2a0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x10]
mov rcx, qword [rbx + 0x298]
call fcn.18003c610
mov byte [rsi + 0x5ba0], 1
subss xmm6, xmm10
movss xmm0, dword [rsi + 0x3c08]
subss xmm7, xmm0
movss dword [rsi + 0x5ba4], xmm6
movss dword [rsi + 0x5ba8], xmm7
movss dword [rsi + 0x5bac], xmm0
jmp 0x18004e191
movss xmm10, dword [0x18008c158]
mov r13d, dword [rsp + 0x54]
movss xmm11, dword [rbp - 0x5c]
cmp byte [rsi + 0x5c58], 0
je 0x18004e316
mov rdi, qword [0x1800990f8]
mov rbx, qword [rdi + 0x3ed0]
xor eax, eax
mov qword [rdi + 0x5c80], rax
mov qword [rdi + 0x5c78], rax
test r14, r14
jne 0x18004e1f3
mov r14, r15
cmp r15, 0xffffffffffffffff
jae 0x18004e1f3
movzx ecx, byte [r14]
test cl, cl
je 0x18004e1f3
lea rax, [r14 + 1]
cmp cl, 0x23
jne 0x18004e1ea
cmp byte [rax], cl
je 0x18004e1f3
mov r14, rax
cmp rax, 0xffffffffffffffff
jb 0x18004e1d5
movss xmm0, dword [rdi + 0x3810]
addss xmm0, dword [rdi + 0x5c88]
addss xmm0, xmm10
movss xmm1, dword [rbp + 0x24]
movss dword [rdi + 0x5c88], xmm1
comiss xmm1, xmm0
jbe 0x18004e22d
lea rcx, [0x180083fe4]
call fcn.18002f680
mov byte [rdi + 0x5c8c], 1
lea r8, [0x180089c65]
lea rdx, [0x180089c64]
lea rcx, [rbp + 0x20]
call fcn.18002f6c0
mov eax, dword [rbx + 0x188]
mov ecx, dword [rdi + 0x5c90]
cmp ecx, eax
jle 0x18004e25c
mov dword [rdi + 0x5c90], eax
mov ecx, eax
mov esi, dword [rbx + 0x188]
sub esi, ecx
mov r13d, 1
nop word [rax + rax]
mov r8, r14
sub r8, r15
mov edx, 0xa
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, r14
test rax, rax
cmovne rbx, rax
cmp r15, rbx
jne 0x18004e297
cmp rbx, r14
je 0x18004e2f5
mov r9d, ebx
sub r9d, r15d
cmp byte [rdi + 0x5c8c], 0
lea edx, [rsi*4]
jne 0x18004e2b0
mov edx, r13d
mov qword [rsp + 0x20], r15
lea r8, [0x1800814eb]
lea rcx, str._s_.s
call fcn.18002f680
mov byte [rdi + 0x5c8c], 0
cmp byte [rbx], 0xa
jne 0x18004e2e7
lea rcx, [0x180083fe4]
call fcn.18002f680
mov byte [rdi + 0x5c8c], r13b
cmp rbx, r14
je 0x18004e2f5
lea r15, [rbx + 1]
jmp 0x18004e270
lea r8, [0x180089c61]
lea rdx, [0x180089c60]
lea rcx, [rbp + 0x20]
call fcn.18002f6c0
mov rsi, qword [rsp + 0x58]
mov r13d, dword [rsp + 0x54]
comiss xmm11, xmm9
jbe 0x18004e34a
movss xmm0, dword [rbp - 0x40]
addss xmm0, dword [rsi + 0x3824]
addss xmm14, dword [rsi + 0x3810]
mov r9b, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x50]
unpcklps xmm0, xmm14
movq rcx, xmm0
call fcn.18001b9c0
movzx r8d, byte [rsp + 0x52]
test r8b, r8b
je 0x18004e37b
mov rcx, qword [0x1800990f8]
mov edx, dword [rcx + 0x3f30]
cmp edx, r13d
je 0x18004e36b
test edx, edx
jne 0x18004e374
mov word [rcx + 0x3f40], 0x101
or dword [rcx + 0x4774], 4
movzx eax, r8b
jmp 0x18004e383
xor al, al
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.18005f3b0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret