Function at 0x18004c5c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x320
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
mov rax, qword [0x180150010]
xor rax, rsp
mov qword [rsp + 0x2a8], rax
mov rax, qword [0x1801512f8]
cmp qword [0x1801512f0], rax
je 0x18004e396
call qword [0x180151420]
mov r14, rax
mov qword [rsp + 0x1a8], rax
test rax, rax
je 0x18004e396
call qword [0x180151418]
mov rbx, rax
mov rdx, qword [0x180151128]
mov rcx, rax
call rdx
mov rdi, rax
mov qword [rsp + 0x38], rax
test rbx, rbx
je 0x18004e396
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x260], xmm1
xor r13d, r13d
mov r12d, r13d
mov qword [rsp + 0x270], r13
mov r15d, r13d
mov dword [rsp + 0x40], r13d
psrldq xmm1, 8
movq rsi, xmm1
mov qword [rsp + 0x30], rsi
xorps xmm8, xmm8
movss xmm12, dword [0x180145694]
movss xmm9, dword [0x180145704]
movss xmm10, dword [0x1801456c0]
nop word [rax + rax]
mov rax, qword [0x1801512f8]
mov rbx, qword [0x1801512f0]
sub rax, rbx
sar rax, 3
movsxd rcx, r15d
cmp rcx, rax
jae 0x18004e237
mov rbx, qword [rbx + rcx*8]
test rbx, rbx
je 0x18004e22a
mov rax, qword [0x180151128]
mov rcx, rbx
call rax
mov rsi, rax
test rax, rax
je 0x18004e225
cmp rdi, rax
je 0x18004e225
mov rax, qword [0x1801510b8]
mov r8d, 0xffffffff
lea rdx, str.get_IsDead
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004c73f
mov rax, qword [rax]
test rax, rax
je 0x18004c73f
mov rcx, rbx
call rax
movzx edi, al
jmp 0x18004c742
xor dil, dil
mov rax, qword [0x1801510b8]
mov r8d, 0xffffffff
lea rdx, str.get_IsDowned
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004c76f
mov rax, qword [rax]
test rax, rax
je 0x18004c76f
mov rcx, rbx
call rax
jmp 0x18004c771
xor al, al
test dil, dil
jne 0x18004e220
test al, al
je 0x18004c78b
cmp byte [0x180151088], dil
je 0x18004e220
mov rax, qword [0x180151130]
mov rcx, rbx
call rax
mov rdi, rax
test rax, rax
je 0x18004e220
mov rbx, qword [0x180151170]
mov rax, qword [0x180151100]
lea rcx, str.Animator
call rax
mov rdx, rax
mov rcx, rsi
call rbx
mov rsi, rax
test rax, rax
je 0x18004e220
mov ecx, dword [0x180150440]
test ecx, ecx
jne 0x18004c817
mov r9, qword [0x1801510b8]
lea r8d, [rcx - 1]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rax]
call r9
test rax, rax
je 0x18004c8c8
mov rax, qword [rax]
test rax, rax
je 0x18004c8c8
mov edx, 0xb
mov rcx, rsi
call rax
mov rbx, rax
jmp 0x18004c8cb
cmp ecx, 1
jne 0x18004c857
mov rax, qword [0x1801510b8]
lea r8d, [rcx - 2]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004c8c8
mov rax, qword [rax]
test rax, rax
je 0x18004c8c8
mov edx, 0xa
mov rcx, rsi
call rax
mov rbx, rax
jmp 0x18004c8cb
cmp ecx, 2
jne 0x18004c88f
mov rax, qword [0x1801510b8]
lea r8d, [rcx - 3]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004c8c8
mov rax, qword [rax]
test rax, rax
je 0x18004c8c8
mov edx, 7
mov rcx, rsi
call rax
mov rbx, rax
jmp 0x18004c8cb
cmp ecx, 3
jne 0x18004e1d7
mov rax, qword [0x1801510b8]
lea r8d, [rcx - 4]
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004c8c8
mov rax, qword [rax]
test rax, rax
je 0x18004c8c8
xor edx, edx
mov rcx, rsi
call rax
mov rbx, rax
jmp 0x18004c8cb
mov rbx, r13
test rbx, rbx
je 0x18004e220
mov qword [rsp + 0x20c], 0
mov dword [rsp + 0x208], 0
lea rdx, [rsp + 0x208]
mov rcx, rdi
call qword [0x1801511d0]
movss xmm0, dword [rsp + 0x208]
ucomiss xmm0, xmm8
jp 0x18004c911
je 0x18004e220
movss xmm0, dword [rsp + 0x20c]
ucomiss xmm0, xmm8
jp 0x18004c926
je 0x18004e220
mov qword [rsp + 0x234], 0
mov dword [rsp + 0x230], 0
lea rdx, [rsp + 0x230]
mov rcx, rbx
call qword [0x1801511d0]
movss xmm2, dword [rsp + 0x230]
ucomiss xmm2, xmm8
jp 0x18004c963
je 0x18004e220
movss xmm3, dword [rsp + 0x234]
ucomiss xmm3, xmm8
jp 0x18004c978
je 0x18004e220
mov qword [rsp + 0x20], r14
movss xmm1, dword [rsp + 0x238]
lea rcx, [rsp + 0x1c8]
call fcn.18004bda0
mov qword [rsp + 0x20], r14
movss xmm3, dword [rsp + 0x20c]
movss xmm2, dword [rsp + 0x208]
movss xmm1, dword [rsp + 0x210]
lea rcx, [rsp + 0x1b8]
call fcn.18004bda0
movss xmm0, dword [rsp + 0x1c8]
comiss xmm8, xmm0
jae 0x18004e220
movss xmm1, dword [rsp + 0x1cc]
comiss xmm8, xmm1
jae 0x18004e220
comiss xmm0, dword [0x180150438]
ja 0x18004e220
mov rdi, qword [rsp + 0x38]
comiss xmm1, dword [0x180150434]
ja 0x18004e225
mov rax, qword [0x180151190]
mov rcx, rdi
call rax
mov qword [rsp + 0x244], 0
mov dword [rsp + 0x240], 0
lea rdx, [rsp + 0x240]
mov rcx, rax
call qword [0x1801511d0]
movss xmm1, dword [rsp + 0x208]
subss xmm1, dword [rsp + 0x240]
movss xmm2, dword [rsp + 0x20c]
subss xmm2, dword [rsp + 0x244]
movss xmm0, dword [rsp + 0x210]
subss xmm0, dword [rsp + 0x248]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18004ca96
xorps xmm11, xmm11
sqrtss xmm11, xmm2
jmp 0x18004caa2
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm11, xmm0
cmp byte [0x180151083], 0
je 0x18004e140
mov r14d, dword [0x180150098]
or r14d, 0xffffff00
shl r14d, 8
or r14d, dword [0x180150094]
shl r14d, 8
or r14d, dword [0x180150090]
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm7, dword [rsp + 0x1b8]
movss xmm6, dword [rsp + 0x1bc]
cmp byte [0x180151087], 0
je 0x18004cbbb
movaps xmm0, xmm3
mulss xmm0, xmm12
movss dword [rsp + 0x44], xmm0
movss dword [rsp + 0x48], xmm2
movss dword [rsp + 0x4c], xmm7
movss dword [rsp + 0x50], xmm6
ucomiss xmm7, xmm8
jp 0x18004cb36
jne 0x18004cb36
ucomiss xmm6, xmm8
jp 0x18004cb36
je 0x18004cbbb
ucomiss xmm0, xmm8
jp 0x18004cb46
jne 0x18004cb46
ucomiss xmm2, xmm8
jp 0x18004cb46
je 0x18004cbbb
comiss xmm7, xmm3
ja 0x18004cbbb
comiss xmm6, xmm2
ja 0x18004cbbb
comiss xmm0, xmm3
ja 0x18004cbbb
comiss xmm2, xmm2
ja 0x18004cbbb
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x4c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x4c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
cmp byte [0x180151081], 0
je 0x18004cd1d
xorps xmm0, xmm0
movups xmmword [rsp + 0x288], xmm0
movups xmmword [rsp + 0x298], xmm0
movdqa xmm1, xmmword [0x180145db0]
movdqu xmmword [rsp + 0x218], xmm1
mov byte [rsp + 0x228], 0
xorps xmm2, xmm2
cvtss2sd xmm2, xmm11
movq r8, xmm2
lea rdx, [rsp + 0x219]
lea rcx, [rsp + 0x288]
call fcn.18004f750
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d8], xmm0
mov qword [rsp + 0x1e8], r13
mov qword [rsp + 0x1f0], r13
lea rax, [rsp + 0x288]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18004cc40
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x1d8]
call fcn.180004d00
nop
movss dword [rsp + 0x1b0], xmm7
movss dword [rsp + 0x1b4], xmm6
mov rcx, qword [0x180151210]
add rcx, 0x1de8
lea r9, [rsp + 0x1d8]
cmp qword [rsp + 0x1f0], 0x10
cmovae r9, qword [rsp + 0x1d8]
mov r8d, r14d
lea rdx, [rsp + 0x1b0]
call fcn.18002b830
nop
mov rdx, qword [rsp + 0x1f0]
cmp rdx, 0x10
jb 0x18004ccf1
inc rdx
mov rcx, qword [rsp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ccec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004ccec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800505dc
mov qword [rsp + 0x1e8], r13
mov qword [rsp + 0x1f0], 0xf
mov byte [rsp + 0x1d8], 0
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
cmp byte [0x180151080], 0
je 0x18004e138
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x218], xmm1
mov r15, r13
mov qword [rsp + 0x228], r13
mov edi, r13d
psrldq xmm1, 8
movq rbx, xmm1
nop
cmp edi, 0x16
jge 0x18004ce5d
mov rax, qword [0x1801510b8]
mov r8d, 0xffffffff
lea rdx, str.GetBoneTransformInternal
mov rcx, qword [rsi]
call rax
test rax, rax
je 0x18004ce46
mov rax, qword [rax]
test rax, rax
je 0x18004ce46
mov edx, edi
mov rcx, rsi
call rax
test rax, rax
je 0x18004ce46
mov qword [rsp + 0x254], 0
mov dword [rsp + 0x250], 0
lea rdx, [rsp + 0x250]
mov rcx, rax
call qword [0x1801511d0]
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x20], rax
movss xmm3, dword [rsp + 0x254]
movss xmm2, dword [rsp + 0x250]
movss xmm1, dword [rsp + 0x258]
lea rcx, [rsp + 0x278]
call fcn.18004bda0
cmp rbx, r15
je 0x18004ce1e
movsd xmm0, qword [rsp + 0x278]
movsd qword [rbx], xmm0
mov eax, dword [rsp + 0x280]
mov dword [rbx + 8], eax
add rbx, 0xc
mov qword [rsp + 0x220], rbx
jmp 0x18004ce46
lea r8, [rsp + 0x278]
mov rdx, rbx
lea rcx, [rsp + 0x218]
call fcn.18004f7b0
mov r15, qword [rsp + 0x228]
mov rbx, qword [rsp + 0x220]
inc edi
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
jmp 0x18004cd50
mov rbx, qword [rsp + 0x218]
movss xmm1, dword [rbx + 0x48]
movss xmm4, dword [rbx + 0x4c]
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm4
movss xmm5, dword [rbx + 0xfc]
movss xmm0, dword [rbx + 0x100]
movss dword [rsp + 0x5c], xmm5
movss dword [rsp + 0x60], xmm0
ucomiss xmm5, xmm8
jp 0x18004ceab
jne 0x18004ceab
ucomiss xmm0, xmm8
jp 0x18004ceab
je 0x18004cf30
ucomiss xmm1, xmm8
jp 0x18004cebb
jne 0x18004cebb
ucomiss xmm4, xmm8
jp 0x18004cebb
je 0x18004cf30
comiss xmm5, xmm3
ja 0x18004cf30
comiss xmm0, xmm2
ja 0x18004cf30
comiss xmm1, xmm3
ja 0x18004cf30
comiss xmm4, xmm2
ja 0x18004cf30
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x54]
lea rdx, [rsp + 0x5c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x54]
lea rdx, [rsp + 0x5c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x30]
movss xmm4, dword [rbx + 0x34]
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm4
movss xmm5, dword [rbx + 0x48]
movss xmm0, dword [rbx + 0x4c]
movss dword [rsp + 0x6c], xmm5
movss dword [rsp + 0x70], xmm0
ucomiss xmm5, xmm8
jp 0x18004cf70
jne 0x18004cf70
ucomiss xmm0, xmm8
jp 0x18004cf70
je 0x18004cff5
ucomiss xmm1, xmm8
jp 0x18004cf80
jne 0x18004cf80
ucomiss xmm4, xmm8
jp 0x18004cf80
je 0x18004cff5
comiss xmm5, xmm3
ja 0x18004cff5
comiss xmm0, xmm2
ja 0x18004cff5
comiss xmm1, xmm3
ja 0x18004cff5
comiss xmm4, xmm2
ja 0x18004cff5
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x6c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x6c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x18]
movss xmm4, dword [rbx + 0x1c]
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm4
movss xmm5, dword [rbx + 0x30]
movss xmm0, dword [rbx + 0x34]
movss dword [rsp + 0x7c], xmm5
movss dword [rsp + 0x80], xmm0
ucomiss xmm5, xmm8
jp 0x18004d038
jne 0x18004d038
ucomiss xmm0, xmm8
jp 0x18004d038
je 0x18004d0bd
ucomiss xmm1, xmm8
jp 0x18004d048
jne 0x18004d048
ucomiss xmm4, xmm8
jp 0x18004d048
je 0x18004d0bd
comiss xmm5, xmm3
ja 0x18004d0bd
comiss xmm0, xmm2
ja 0x18004d0bd
comiss xmm1, xmm3
ja 0x18004d0bd
comiss xmm4, xmm2
ja 0x18004d0bd
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x7c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x7c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx]
movss xmm5, dword [rbx + 4]
movss dword [rsp + 0x84], xmm1
movss dword [rsp + 0x88], xmm5
movss xmm4, dword [rbx + 0x18]
movss xmm0, dword [rbx + 0x1c]
movss dword [rsp + 0x8c], xmm4
movss dword [rsp + 0x90], xmm0
ucomiss xmm4, xmm8
jp 0x18004d108
jne 0x18004d108
ucomiss xmm0, xmm8
jp 0x18004d108
je 0x18004d19d
ucomiss xmm1, xmm8
jp 0x18004d11c
jne 0x18004d11c
ucomiss xmm5, xmm8
jp 0x18004d11c
je 0x18004d19d
comiss xmm4, xmm3
ja 0x18004d19d
comiss xmm0, xmm2
ja 0x18004d19d
comiss xmm1, xmm3
ja 0x18004d19d
comiss xmm5, xmm2
ja 0x18004d19d
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x84]
lea rdx, [rsp + 0x8c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x84]
lea rdx, [rsp + 0x8c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x3c]
movss xmm4, dword [rbx + 0x40]
movss dword [rsp + 0x94], xmm1
movss dword [rsp + 0x98], xmm4
movss xmm5, dword [rbx + 0xf0]
movss xmm0, dword [rbx + 0xf4]
movss dword [rsp + 0x9c], xmm5
movss dword [rsp + 0xa0], xmm0
ucomiss xmm5, xmm8
jp 0x18004d1ef
jne 0x18004d1ef
ucomiss xmm0, xmm8
jp 0x18004d1ef
je 0x18004d284
ucomiss xmm1, xmm8
jp 0x18004d203
jne 0x18004d203
ucomiss xmm4, xmm8
jp 0x18004d203
je 0x18004d284
comiss xmm5, xmm3
ja 0x18004d284
comiss xmm0, xmm2
ja 0x18004d284
comiss xmm1, xmm3
ja 0x18004d284
comiss xmm4, xmm2
ja 0x18004d284
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x94]
lea rdx, [rsp + 0x9c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x94]
lea rdx, [rsp + 0x9c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x24]
movss xmm4, dword [rbx + 0x28]
movss dword [rsp + 0xa4], xmm1
movss dword [rsp + 0xa8], xmm4
movss xmm5, dword [rbx + 0x3c]
movss xmm0, dword [rbx + 0x40]
movss dword [rsp + 0xac], xmm5
movss dword [rsp + 0xb0], xmm0
ucomiss xmm5, xmm8
jp 0x18004d2d0
jne 0x18004d2d0
ucomiss xmm0, xmm8
jp 0x18004d2d0
je 0x18004d365
ucomiss xmm1, xmm8
jp 0x18004d2e4
jne 0x18004d2e4
ucomiss xmm4, xmm8
jp 0x18004d2e4
je 0x18004d365
comiss xmm5, xmm3
ja 0x18004d365
comiss xmm0, xmm2
ja 0x18004d365
comiss xmm1, xmm3
ja 0x18004d365
comiss xmm4, xmm2
ja 0x18004d365
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0xa4]
lea rdx, [rsp + 0xac]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0xa4]
lea rdx, [rsp + 0xac]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xc]
movss xmm4, dword [rbx + 0x10]
movss dword [rsp + 0xb4], xmm1
movss dword [rsp + 0xb8], xmm4
movss xmm5, dword [rbx + 0x24]
movss xmm0, dword [rbx + 0x28]
movss dword [rsp + 0xbc], xmm5
movss dword [rsp + 0xc0], xmm0
ucomiss xmm5, xmm8
jp 0x18004d3b1
jne 0x18004d3b1
ucomiss xmm0, xmm8
jp 0x18004d3b1
je 0x18004d446
ucomiss xmm1, xmm8
jp 0x18004d3c5
jne 0x18004d3c5
ucomiss xmm4, xmm8
jp 0x18004d3c5
je 0x18004d446
comiss xmm5, xmm3
ja 0x18004d446
comiss xmm0, xmm2
ja 0x18004d446
comiss xmm1, xmm3
ja 0x18004d446
comiss xmm4, xmm2
ja 0x18004d446
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0xb4]
lea rdx, [rsp + 0xbc]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0xb4]
lea rdx, [rsp + 0xbc]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx]
movss xmm5, dword [rbx + 4]
movss dword [rsp + 0xc4], xmm1
movss dword [rsp + 0xc8], xmm5
movss xmm4, dword [rbx + 0xc]
movss xmm0, dword [rbx + 0x10]
movss dword [rsp + 0xcc], xmm4
movss dword [rsp + 0xd0], xmm0
ucomiss xmm4, xmm8
jp 0x18004d491
jne 0x18004d491
ucomiss xmm0, xmm8
jp 0x18004d491
je 0x18004d526
ucomiss xmm1, xmm8
jp 0x18004d4a5
jne 0x18004d4a5
ucomiss xmm5, xmm8
jp 0x18004d4a5
je 0x18004d526
comiss xmm4, xmm3
ja 0x18004d526
comiss xmm0, xmm2
ja 0x18004d526
comiss xmm1, xmm3
ja 0x18004d526
comiss xmm5, xmm2
ja 0x18004d526
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0xc4]
lea rdx, [rsp + 0xcc]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0xc4]
lea rdx, [rsp + 0xcc]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x54]
movss xmm5, dword [rbx + 0x58]
movss dword [rsp + 0xd4], xmm1
movss dword [rsp + 0xd8], xmm5
movss xmm4, dword [rbx]
movss xmm0, dword [rbx + 4]
movss dword [rsp + 0xdc], xmm4
movss dword [rsp + 0xe0], xmm0
ucomiss xmm4, xmm8
jp 0x18004d571
jne 0x18004d571
ucomiss xmm0, xmm8
jp 0x18004d571
je 0x18004d606
ucomiss xmm1, xmm8
jp 0x18004d585
jne 0x18004d585
ucomiss xmm5, xmm8
jp 0x18004d585
je 0x18004d606
comiss xmm4, xmm3
ja 0x18004d606
comiss xmm0, xmm2
ja 0x18004d606
comiss xmm1, xmm3
ja 0x18004d606
comiss xmm5, xmm2
ja 0x18004d606
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0xd4]
lea rdx, [rsp + 0xdc]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0xd4]
lea rdx, [rsp + 0xdc]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x60]
movss xmm4, dword [rbx + 0x64]
movss dword [rsp + 0xe4], xmm1
movss dword [rsp + 0xe8], xmm4
movss xmm5, dword [rbx + 0x54]
movss xmm0, dword [rbx + 0x58]
movss dword [rsp + 0xec], xmm5
movss dword [rsp + 0xf0], xmm0
ucomiss xmm5, xmm8
jp 0x18004d652
jne 0x18004d652
ucomiss xmm0, xmm8
jp 0x18004d652
je 0x18004d6e7
ucomiss xmm1, xmm8
jp 0x18004d666
jne 0x18004d666
ucomiss xmm4, xmm8
jp 0x18004d666
je 0x18004d6e7
comiss xmm5, xmm3
ja 0x18004d6e7
comiss xmm0, xmm2
ja 0x18004d6e7
comiss xmm1, xmm3
ja 0x18004d6e7
comiss xmm4, xmm2
ja 0x18004d6e7
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0xe4]
lea rdx, [rsp + 0xec]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0xe4]
lea rdx, [rsp + 0xec]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x6c]
movss xmm4, dword [rbx + 0x70]
movss dword [rsp + 0xf4], xmm1
movss dword [rsp + 0xf8], xmm4
movss xmm5, dword [rbx + 0x60]
movss xmm0, dword [rbx + 0x64]
movss dword [rsp + 0xfc], xmm5
movss dword [rsp + 0x100], xmm0
ucomiss xmm5, xmm8
jp 0x18004d733
jne 0x18004d733
ucomiss xmm0, xmm8
jp 0x18004d733
je 0x18004d7c8
ucomiss xmm1, xmm8
jp 0x18004d747
jne 0x18004d747
ucomiss xmm4, xmm8
jp 0x18004d747
je 0x18004d7c8
comiss xmm5, xmm3
ja 0x18004d7c8
comiss xmm0, xmm2
ja 0x18004d7c8
comiss xmm1, xmm3
ja 0x18004d7c8
comiss xmm4, xmm2
ja 0x18004d7c8
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0xf4]
lea rdx, [rsp + 0xfc]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0xf4]
lea rdx, [rsp + 0xfc]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x78]
movss xmm5, dword [rbx + 0x7c]
movss dword [rsp + 0x104], xmm1
movss dword [rsp + 0x108], xmm5
movss xmm4, dword [rbx + 0x6c]
movss xmm0, dword [rbx + 0x70]
movss dword [rsp + 0x10c], xmm4
movss dword [rsp + 0x110], xmm0
ucomiss xmm4, xmm8
jp 0x18004d814
jne 0x18004d814
ucomiss xmm0, xmm8
jp 0x18004d814
je 0x18004d8a9
ucomiss xmm1, xmm8
jp 0x18004d828
jne 0x18004d828
ucomiss xmm5, xmm8
jp 0x18004d828
je 0x18004d8a9
comiss xmm4, xmm3
ja 0x18004d8a9
comiss xmm0, xmm2
ja 0x18004d8a9
comiss xmm1, xmm3
ja 0x18004d8a9
comiss xmm5, xmm2
ja 0x18004d8a9
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x104]
lea rdx, [rsp + 0x10c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x104]
lea rdx, [rsp + 0x10c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x84]
movss xmm4, dword [rbx + 0x88]
movss dword [rsp + 0x114], xmm1
movss dword [rsp + 0x118], xmm4
movss xmm5, dword [rbx + 0x78]
movss xmm0, dword [rbx + 0x7c]
movss dword [rsp + 0x11c], xmm5
movss dword [rsp + 0x120], xmm0
ucomiss xmm5, xmm8
jp 0x18004d8fb
jne 0x18004d8fb
ucomiss xmm0, xmm8
jp 0x18004d8fb
je 0x18004d990
ucomiss xmm1, xmm8
jp 0x18004d90f
jne 0x18004d90f
ucomiss xmm4, xmm8
jp 0x18004d90f
je 0x18004d990
comiss xmm5, xmm3
ja 0x18004d990
comiss xmm0, xmm2
ja 0x18004d990
comiss xmm1, xmm3
ja 0x18004d990
comiss xmm4, xmm2
ja 0x18004d990
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x114]
lea rdx, [rsp + 0x11c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x114]
lea rdx, [rsp + 0x11c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x9c]
movss xmm5, dword [rbx + 0xa0]
movss dword [rsp + 0x124], xmm1
movss dword [rsp + 0x128], xmm5
movss xmm4, dword [rbx + 0x6c]
movss xmm0, dword [rbx + 0x70]
movss dword [rsp + 0x12c], xmm4
movss dword [rsp + 0x130], xmm0
ucomiss xmm4, xmm8
jp 0x18004d9e2
jne 0x18004d9e2
ucomiss xmm0, xmm8
jp 0x18004d9e2
je 0x18004da77
ucomiss xmm1, xmm8
jp 0x18004d9f6
jne 0x18004d9f6
ucomiss xmm5, xmm8
jp 0x18004d9f6
je 0x18004da77
comiss xmm4, xmm3
ja 0x18004da77
comiss xmm0, xmm2
ja 0x18004da77
comiss xmm1, xmm3
ja 0x18004da77
comiss xmm5, xmm2
ja 0x18004da77
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x124]
lea rdx, [rsp + 0x12c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x124]
lea rdx, [rsp + 0x12c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xb4]
movss xmm4, dword [rbx + 0xb8]
movss dword [rsp + 0x134], xmm1
movss dword [rsp + 0x138], xmm4
movss xmm5, dword [rbx + 0x9c]
movss xmm0, dword [rbx + 0xa0]
movss dword [rsp + 0x13c], xmm5
movss dword [rsp + 0x140], xmm0
ucomiss xmm5, xmm8
jp 0x18004dacf
jne 0x18004dacf
ucomiss xmm0, xmm8
jp 0x18004dacf
je 0x18004db64
ucomiss xmm1, xmm8
jp 0x18004dae3
jne 0x18004dae3
ucomiss xmm4, xmm8
jp 0x18004dae3
je 0x18004db64
comiss xmm5, xmm3
ja 0x18004db64
comiss xmm0, xmm2
ja 0x18004db64
comiss xmm1, xmm3
ja 0x18004db64
comiss xmm4, xmm2
ja 0x18004db64
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x134]
lea rdx, [rsp + 0x13c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x134]
lea rdx, [rsp + 0x13c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xcc]
movss xmm4, dword [rbx + 0xd0]
movss dword [rsp + 0x144], xmm1
movss dword [rsp + 0x148], xmm4
movss xmm5, dword [rbx + 0xb4]
movss xmm0, dword [rbx + 0xb8]
movss dword [rsp + 0x14c], xmm5
movss dword [rsp + 0x150], xmm0
ucomiss xmm5, xmm8
jp 0x18004dbbc
jne 0x18004dbbc
ucomiss xmm0, xmm8
jp 0x18004dbbc
je 0x18004dc51
ucomiss xmm1, xmm8
jp 0x18004dbd0
jne 0x18004dbd0
ucomiss xmm4, xmm8
jp 0x18004dbd0
je 0x18004dc51
comiss xmm5, xmm3
ja 0x18004dc51
comiss xmm0, xmm2
ja 0x18004dc51
comiss xmm1, xmm3
ja 0x18004dc51
comiss xmm4, xmm2
ja 0x18004dc51
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x144]
lea rdx, [rsp + 0x14c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x144]
lea rdx, [rsp + 0x14c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xe4]
movss xmm4, dword [rbx + 0xe8]
movss dword [rsp + 0x154], xmm1
movss dword [rsp + 0x158], xmm4
movss xmm5, dword [rbx + 0xcc]
movss xmm0, dword [rbx + 0xd0]
movss dword [rsp + 0x15c], xmm5
movss dword [rsp + 0x160], xmm0
ucomiss xmm5, xmm8
jp 0x18004dca9
jne 0x18004dca9
ucomiss xmm0, xmm8
jp 0x18004dca9
je 0x18004dd3e
ucomiss xmm1, xmm8
jp 0x18004dcbd
jne 0x18004dcbd
ucomiss xmm4, xmm8
jp 0x18004dcbd
je 0x18004dd3e
comiss xmm5, xmm3
ja 0x18004dd3e
comiss xmm0, xmm2
ja 0x18004dd3e
comiss xmm1, xmm3
ja 0x18004dd3e
comiss xmm4, xmm2
ja 0x18004dd3e
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x154]
lea rdx, [rsp + 0x15c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x154]
lea rdx, [rsp + 0x15c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0x90]
movss xmm4, dword [rbx + 0x94]
movss dword [rsp + 0x164], xmm1
movss dword [rsp + 0x168], xmm4
movss xmm5, dword [rbx + 0x6c]
movss xmm0, dword [rbx + 0x70]
movss dword [rsp + 0x16c], xmm5
movss dword [rsp + 0x170], xmm0
ucomiss xmm5, xmm8
jp 0x18004dd90
jne 0x18004dd90
ucomiss xmm0, xmm8
jp 0x18004dd90
je 0x18004de25
ucomiss xmm1, xmm8
jp 0x18004dda4
jne 0x18004dda4
ucomiss xmm4, xmm8
jp 0x18004dda4
je 0x18004de25
comiss xmm5, xmm3
ja 0x18004de25
comiss xmm0, xmm2
ja 0x18004de25
comiss xmm1, xmm3
ja 0x18004de25
comiss xmm4, xmm2
ja 0x18004de25
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x164]
lea rdx, [rsp + 0x16c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x164]
lea rdx, [rsp + 0x16c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xa8]
movss xmm4, dword [rbx + 0xac]
movss dword [rsp + 0x174], xmm1
movss dword [rsp + 0x178], xmm4
movss xmm5, dword [rbx + 0x90]
movss xmm0, dword [rbx + 0x94]
movss dword [rsp + 0x17c], xmm5
movss dword [rsp + 0x180], xmm0
ucomiss xmm5, xmm8
jp 0x18004de7d
jne 0x18004de7d
ucomiss xmm0, xmm8
jp 0x18004de7d
je 0x18004df12
ucomiss xmm1, xmm8
jp 0x18004de91
jne 0x18004de91
ucomiss xmm4, xmm8
jp 0x18004de91
je 0x18004df12
comiss xmm5, xmm3
ja 0x18004df12
comiss xmm0, xmm2
ja 0x18004df12
comiss xmm1, xmm3
ja 0x18004df12
comiss xmm4, xmm2
ja 0x18004df12
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x174]
lea rdx, [rsp + 0x17c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x174]
lea rdx, [rsp + 0x17c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xc0]
movss xmm4, dword [rbx + 0xc4]
movss dword [rsp + 0x184], xmm1
movss dword [rsp + 0x188], xmm4
movss xmm5, dword [rbx + 0xa8]
movss xmm0, dword [rbx + 0xac]
movss dword [rsp + 0x18c], xmm5
movss dword [rsp + 0x190], xmm0
ucomiss xmm5, xmm8
jp 0x18004df6a
jne 0x18004df6a
ucomiss xmm0, xmm8
jp 0x18004df6a
je 0x18004dfff
ucomiss xmm1, xmm8
jp 0x18004df7e
jne 0x18004df7e
ucomiss xmm4, xmm8
jp 0x18004df7e
je 0x18004dfff
comiss xmm5, xmm3
ja 0x18004dfff
comiss xmm0, xmm2
ja 0x18004dfff
comiss xmm1, xmm3
ja 0x18004dfff
comiss xmm4, xmm2
ja 0x18004dfff
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x184]
lea rdx, [rsp + 0x18c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x184]
lea rdx, [rsp + 0x18c]
call fcn.18002b060
movss xmm3, dword [0x180150438]
movss xmm2, dword [0x180150434]
movss xmm1, dword [rbx + 0xd8]
movss xmm4, dword [rbx + 0xdc]
movss dword [rsp + 0x194], xmm1
movss dword [rsp + 0x198], xmm4
movss xmm5, dword [rbx + 0xc0]
movss xmm0, dword [rbx + 0xc4]
movss dword [rsp + 0x19c], xmm5
movss dword [rsp + 0x1a0], xmm0
ucomiss xmm5, xmm8
jp 0x18004e057
jne 0x18004e057
ucomiss xmm0, xmm8
jp 0x18004e057
je 0x18004e0d9
ucomiss xmm1, xmm8
jp 0x18004e067
jne 0x18004e067
ucomiss xmm4, xmm8
jp 0x18004e067
je 0x18004e0d9
comiss xmm5, xmm3
ja 0x18004e0d9
comiss xmm0, xmm2
ja 0x18004e0d9
comiss xmm1, xmm3
ja 0x18004e0d9
comiss xmm4, xmm2
ja 0x18004e0d9
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm9
mov r9d, 0xff000000
lea r8, [rsp + 0x194]
lea rdx, [rsp + 0x19c]
call fcn.18002b060
mov rcx, qword [0x180151210]
add rcx, 0x1de8
movss dword [rsp + 0x20], xmm10
mov r9d, r14d
lea r8, [rsp + 0x194]
lea rdx, [rsp + 0x19c]
call fcn.18002b060
nop
sub r15, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul r15
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 2
mov rax, rbx
cmp rdx, 0x1000
jb 0x18004e126
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e126
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800505dc
mov r15d, dword [rsp + 0x40]
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x1a8]
movsd xmm0, qword [rsp + 0x1c8]
movsd qword [rsp + 0x1f8], xmm0
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0x200], eax
movss dword [rsp + 0x204], xmm11
mov rsi, qword [rsp + 0x30]
cmp rsi, r12
je 0x18004e19d
movups xmm0, xmmword [rsp + 0x1f8]
movups xmmword [rsi], xmm0
add rsi, 0x10
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x268], rsi
inc r15d
mov dword [rsp + 0x40], r15d
jmp 0x18004c6c0
lea r8, [rsp + 0x1f8]
mov rdx, rsi
lea rcx, [rsp + 0x260]
call fcn.18004f9c0
mov r12, qword [rsp + 0x270]
mov rsi, qword [rsp + 0x268]
mov qword [rsp + 0x30], rsi
inc r15d
mov dword [rsp + 0x40], r15d
jmp 0x18004c6c0
mov rcx, qword [rsp + 0x260]
test rcx, rcx
je 0x18004e21b
sub r12, rcx
and r12, 0xfffffffffffffff0
mov rax, rcx
cmp r12, 0x1000
jb 0x18004e213
add r12, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e213
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
call fcn.1800505dc
jmp 0x18004e396
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
inc r15d
mov dword [rsp + 0x40], r15d
jmp 0x18004c6c0
mov rdi, qword [rsp + 0x260]
cmp rdi, rsi
jne 0x18004e285
test rdi, rdi
je 0x18004e280
sub r12, rdi
and r12, 0xfffffffffffffff0
mov rax, rdi
cmp r12, 0x1000
jb 0x18004e275
add r12, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004e382
mov rdx, r12
mov rcx, rdi
call fcn.1800505dc
jmp 0x18004e396
cmp byte [0x180151085], 0
je 0x18004e355
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x218], xmm0
mov qword [rsp + 0x228], r13
sub rsi, rdi
mov rbx, rsi
sar rbx, 4
cmp rsi, 0x10
jb 0x18004e347
movabs rax, 0xfffffffffffffff
cmp rbx, rax
ja 0x18004e3eb
shl rbx, 4
cmp rbx, 0x1000
jb 0x18004e306
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x18004e3f0
call fcn.1800505a0
test rax, rax
je 0x18004e2ff
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x18004e316
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x18004e316
mov rcx, rbx
call fcn.1800505a0
mov r13, rax
mov qword [rsp + 0x218], r13
mov qword [rsp + 0x220], r13
add rbx, r13
mov qword [rsp + 0x228], rbx
mov r8, rsi
mov rdx, rdi
mov rcx, r13
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x220], rbx
lea rcx, [rsp + 0x218]
call fcn.18004c050
nop
test rdi, rdi
je 0x18004e394
sub r12, rdi
and r12, 0xfffffffffffffff0
mov rax, rdi
cmp r12, 0x1000
jb 0x18004e389
add r12, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
mov rcx, rdi
call fcn.1800505dc
jmp 0x18004e396
mov rcx, qword [rsp + 0x2a8]
xor rcx, rsp
call fcn.180050580
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.180009ae0
call fcn.180001300
int3