Function at 0x18002e0b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2a8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x1800e0010]
xor rax, rsp
mov qword [rbp + 0xf8], rax
mov dword [rbp - 0x60], r9d
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x18], rdx
mov rdi, rcx
mov qword [rbp - 0x10], rcx
mov rsi, qword [0x1800e3b80]
mov qword [rbp - 0x68], rsi
mov rax, qword [rsi + 0x11c8]
mov ecx, 1
mov byte [rax + 0xb8], cl
mov r12, qword [rsi + 0x11c8]
xor r14d, r14d
cmp byte [r12 + 0xbb], r14b
jne 0x18002e34e
mov ebx, dword [rbp + 0x218]
mov r13d, ebx
shr r13d, 0x1a
and r13b, cl
mov dword [rsp + 0x60], r13d
mov eax, ebx
shr eax, 0xe
and al, cl
mov dword [rsp + 0x64], eax
mov eax, ebx
shr eax, 0xf
and al, cl
mov dword [rbp - 0x50], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x58], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rbp - 0x70], eax
test r13b, r13b
je 0x18002e1b5
call fcn.1800156a0
mov rdx, rdi
mov rcx, r12
call fcn.18000af08
mov r15d, eax
mov dword [rsp + 0x78], eax
movss xmm0, dword [0x1800d91ac]
movss dword [rbp - 0x40], xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.18000df98
test r13b, r13b
je 0x18002e206
movss xmm0, dword [rsi + 0xf28]
mulss xmm0, dword [0x1800d912c]
jmp 0x18002e20b
movss xmm0, dword [rbp - 0x24]
movss xmm6, dword [rsi + 0xb30]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.1800154bc
movaps xmm2, xmm0
mov rdx, qword [rbp + 0x210]
mov rdx, qword [rdx]
lea rcx, [rsp + 0x70]
call fcn.18001552c
xorps xmm15, xmm15
movss xmm13, dword [rbp - 0x28]
comiss xmm13, xmm15
jbe 0x18002e258
movaps xmm1, xmm13
addss xmm1, dword [rsi + 0xb44]
jmp 0x18002e25b
xorps xmm1, xmm1
movss xmm9, dword [r12 + 0x104]
movss dword [rbp - 0x3c], xmm9
movaps xmm0, xmm9
movss xmm11, dword [rsp + 0x74]
addss xmm0, xmm11
movss xmm7, dword [r12 + 0x100]
movaps xmm12, xmm7
movss xmm10, dword [rsp + 0x70]
addss xmm12, xmm10
movss dword [rbp - 0x38], xmm12
movss dword [rbp + 0x80], xmm7
movss dword [rbp + 0x84], xmm9
movss dword [rbp + 0x88], xmm12
movss dword [rbp + 0x8c], xmm0
movaps xmm2, xmm9
addss xmm2, xmm11
addss xmm1, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x90], xmm7
movss dword [rbp + 0x94], xmm9
movss dword [rbp + 0x98], xmm1
movss dword [rbp + 0x9c], xmm2
mov qword [rbp - 0x48], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
subss xmm2, xmm9
subss xmm1, xmm7
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
lea rcx, [rsp + 0x70]
movaps xmm1, xmm6
call fcn.180015114
test r13b, r13b
je 0x18002e4ff
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.180015280
test al, al
jne 0x18002e3b2
call fcn.1800157c8
xor al, al
mov rcx, qword [rbp + 0xf8]
xor rcx, rsp
call fcn.18009b850
lea r11, [rsp + 0x2a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r14d, dword [rsi + 0x1a68]
movups xmm0, xmmword [rsi + 0x1a60]
movups xmmword [rbp + 0xb8], xmm0
movss dword [r12 + 0x100], xmm7
movss dword [r12 + 0x104], xmm9
lea rdx, [rsi + 0xc3c]
mov ecx, 3
call fcn.180008cb8
movss xmm1, dword [rsi + 0xb34]
mov ecx, 7
call fcn.180008d54
movss xmm1, dword [rsi + 0xb38]
mov ecx, 8
call fcn.180008d54
and dword [rsp + 0x70], 0
and dword [rsp + 0x74], 0
lea rdx, [rsp + 0x70]
call fcn.180008dcc
movss xmm1, dword [rbp + 0x8c]
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
subss xmm1, xmm9
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movaps xmm0, xmm12
movss xmm7, dword [rbp + 0x80]
subss xmm0, xmm7
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x70]
mov edx, r15d
mov rcx, rdi
call fcn.18000e264
mov bl, al
mov ecx, 3
call fcn.180008e2c
call fcn.180008d14
test bl, bl
jne 0x18002e4a2
call fcn.18000e438
jmp 0x18002e349
mov rbx, qword [rsi + 0x11c8]
mov qword [rbp - 0x48], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
mov word [rbx + 0x15e], cx
movss xmm0, dword [rsi + 0xb2c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [rsi + 0xb30]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
subss xmm10, dword [rbx + 0xac]
jmp 0x18002e559
bt ebx, 0x1c
jb 0x18002e54f
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.180015280
test al, al
je 0x18002e34e
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
movss xmm7, dword [rbp + 0x80]
mov r14d, dword [rsi + 0x1a68]
mov rbx, r12
mov edx, r15d
lea rcx, [rbp + 0x80]
call fcn.18000b4ac
mov cl, al
mov byte [rsp + 0x5f], al
xor r9d, r9d
lea edx, [r9 + 1]
test al, al
je 0x18002e57f
mov dword [rsi + 0x1d48], edx
mov rdi, qword [0x1800e3b80]
test r15d, r15d
je 0x18002e59d
cmp dword [rdi + 0x1ee0], r15d
jne 0x18002e59d
add rdi, 0x1ed8
jmp 0x18002e5a0
mov rdi, r9
shr r14d, 8
and r14b, dl
mov dword [rbp - 0x4c], r14d
mov eax, dword [rsi + 0x1228]
mov r8d, 2
cmp eax, r15d
je 0x18002e5dc
cmp dword [rsi + 0x1bb8], r15d
jne 0x18002e5dc
test byte [rsi + 0x1bc4], dl
jne 0x18002e5d6
cmp dword [rsi + 0x1bdc], r8d
jne 0x18002e5dc
mov byte [rsp + 0x52], dl
jmp 0x18002e5e1
mov byte [rsp + 0x52], r9b
test cl, cl
je 0x18002e5f1
cmp byte [rsi + 0xa48], r9b
mov r15b, dl
jne 0x18002e5f4
mov r15b, r9b
mov byte [rsp + 0x54], r15b
test r13b, r13b
je 0x18002e628
test rdi, rdi
je 0x18002e628
test eax, eax
jne 0x18002e628
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.18000af08
cmp dword [rsi + 0x1258], eax
jne 0x18002e625
mov ebx, 1
jmp 0x18002e635
xor r9d, r9d
mov bl, r9b
test r13b, r13b
je 0x18002e666
test rdi, rdi
je 0x18002e666
lea rdx, str.SCROLLY
mov rcx, qword [rbp - 0x48]
call fcn.18000af08
xor r9d, r9d
cmp dword [rsi + 0x1228], eax
jne 0x18002e666
lea eax, [r9 + 1]
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
jmp 0x18002e67c
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
mov cl, r9b
mov byte [rsp + 0x51], cl
test r13b, r13b
je 0x18002e68a
mov rax, qword [rbp - 0x48]
movss xmm6, dword [rax + 0x88]
jmp 0x18002e696
movss xmm6, dword [0x1800d91a0]
mov byte [rsp + 0x51], cl
mov edx, 1
test rdi, rdi
je 0x18002e6ad
mov al, r13b
xor al, dl
cmp byte [rdi + 0x6b], al
mov r13b, dl
jne 0x18002e6b0
mov r13b, r9b
test r15b, r15b
jne 0x18002e6d5
test bl, bl
jne 0x18002e6d5
cmp byte [rsp + 0x52], r9b
jne 0x18002e6d5
test r14b, r14b
jne 0x18002e6d5
mov byte [rsp + 0x53], r9b
test cl, cl
jne 0x18002e6d9
mov byte [rsp + 0x5d], r9b
jmp 0x18002e6e9
mov byte [rsp + 0x53], dl
mov byte [rsp + 0x5d], dl
mov eax, dword [rsp + 0x78]
cmp dword [rsi + 0x1228], eax
jne 0x18002e6f2
test r13b, r13b
je 0x18002e922
lea rdi, [rsi + 0x1ed8]
mov dword [rdi + 0xe80], 0xbe99999a
or rbx, 0xffffffffffffffff
mov rax, qword [rbp - 0x78]
inc rbx
cmp byte [rax + rbx], r9b
jne 0x18002e70b
lea r14d, [rbx + 1]
mov ecx, dword [rdi + 0x3c]
cmp r14d, ecx
jle 0x18002e74a
test ecx, ecx
je 0x18002e72f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e734
mov eax, 8
mov edx, r14d
cmp eax, r14d
cmovg edx, eax
lea rcx, [rdi + 0x38]
call fcn.18001c434
mov rax, qword [rbp - 0x78]
mov dword [rdi + 0x38], r14d
movsxd r8, r14d
mov rdx, rax
mov rcx, qword [rdi + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x78]
xor r8d, r8d
cmp dword [rdi + 8], eax
jne 0x18002e7a1
test r13b, r13b
jne 0x18002e7a1
lea r13d, [r8 + 1]
lea r14, [rdi + 0x10]
cmp dword [r14], ebx
jne 0x18002e79c
mov r15, r14
cmp byte [rdi + 0x48], r8b
je 0x18002e7a8
movsxd r8, ebx
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x18002e7a8
mov r15, r14
jmp 0x18002e7a5
lea r15, [rdi + 0x10]
mov r13b, r8b
mov qword [rsp + 0x70], r8
mov eax, dword [rsp + 0x78]
mov dword [rdi + 8], eax
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002e7e7
test ecx, ecx
je 0x18002e7cf
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e7d4
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c55c
xor r8d, r8d
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x18002e80e
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r8d
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c434
xor r8d, r8d
mov dword [rdi + 0x28], r8d
mov byte [rdi + 0x48], r8b
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov rbx, qword [rbp - 0x78]
mov r8, rbx
mov edx, dword [rbp - 0x60]
mov rcx, qword [rdi + 0x20]
call fcn.180008524
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, ebx
mov dword [r15], ecx
xor r9d, r9d
mov r14d, dword [rsp + 0x60]
test r13b, r13b
je 0x18002e877
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
mov dword [rdi + 0x58], eax
cmp dword [rdi + 0x5c], edx
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
lea edx, [r9 + 1]
jmp 0x18002e8bd
mov qword [rdi + 0x50], r9
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], r9d
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], r9
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], r9d
mov byte [rdi + 0x68], r9b
mov edx, 1
mov al, r14b
xor al, dl
mov byte [rdi + 0x6b], al
mov byte [rdi + 0x60], r9b
mov dword [rdi + 0x64], r9d
test r14b, r14b
jne 0x18002e90c
mov ecx, dword [rbp + 0x218]
test cl, 0x10
mov eax, dword [rsp + 0x58]
movzx eax, al
cmovne eax, edx
mov dword [rsp + 0x58], eax
cmp byte [rsp + 0x52], r9b
je 0x18002e8f2
test r13b, r13b
je 0x18002e8ee
test byte [rsi + 0x1bc4], 4
jne 0x18002e8f2
mov byte [rsp + 0x58], dl
cmp byte [rbp - 0x4c], r9b
jne 0x18002e908
cmp byte [rsp + 0x54], r9b
je 0x18002e90c
cmp byte [rsi + 0x120], r9b
je 0x18002e90c
mov byte [rsp + 0x58], dl
mov r15b, byte [rsp + 0x54]
test dword [rbp + 0x218], 0x2000
je 0x18002e927
mov byte [rdi + 0x60], dl
jmp 0x18002e927
mov r14d, dword [rsp + 0x60]
mov r8b, byte [rsi + 0x79]
mov byte [rsp + 0x5e], r8b
mov r13d, dword [rsp + 0x78]
mov bl, byte [rsp + 0x53]
cmp dword [rsi + 0x1228], r13d
je 0x18002e976
test bl, bl
je 0x18002e969
mov rdx, r12
mov ecx, r13d
call fcn.18000b1b4
mov rdx, r12
mov ecx, r13d
call fcn.180016ad0
mov rcx, r12
call fcn.180012ec0
mov r8b, byte [rsp + 0x5e]
cmp dword [rsi + 0x1228], r13d
jne 0x18002ea90
xor r10d, r10d
test r15b, r15b
je 0x18002e994
mov ecx, 0x281
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov eax, dword [rsi + 0x1a38]
or eax, 3
mov dword [rsi + 0x1a38], eax
mov r9d, dword [rbp + 0x218]
test r14b, r14b
jne 0x18002e9b4
test r9b, r9b
jns 0x18002e9bd
or eax, 0xc
mov dword [rsi + 0x1a38], eax
mov ecx, 0x207
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x208
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r14b, r14b
je 0x18002ea1a
mov ecx, 0x205
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x206
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r8b, r8b
je 0x18002ea35
mov ecx, 0x4000
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r9d, 0x440
je 0x18002ea4e
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.180013b04
cmp dword [rsi + 0x1228], r13d
jne 0x18002ea90
test rdi, rdi
jne 0x18002ea65
xor edx, edx
xor ecx, ecx
call fcn.18000b1b4
cmp dword [rsi + 0x1228], r13d
jne 0x18002ea90
xor r11d, r11d
lea r9d, [r11 + 1]
cmp byte [rsi + 0xa48], r11b
je 0x18002eaa3
cmp byte [rsp + 0x5d], r11b
jne 0x18002eaa3
test bl, bl
jne 0x18002eaa3
mov byte [rsp + 0x5c], r9b
jmp 0x18002eaa3
xor r11d, r11d
test rdi, rdi
je 0x18002eaa8
cmp byte [rsp + 0x51], r11b
je 0x18002eaa8
lea r9d, [r11 + 1]
mov cl, r9b
jmp 0x18002eaab
mov cl, r11b
mov byte [rsp + 0x50], cl
mov r12d, dword [rsp + 0x58]
test rdi, rdi
je 0x18002ead2
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002eac6
test r12b, r12b
je 0x18002ead2
test cl, cl
je 0x18002ead2
mov r8d, 1
jmp 0x18002ead5
mov r8b, r11b
mov dword [rsp + 0x58], r8d
movzx r15d, r8b
mov byte [rsp + 0x7f], r11b
mov byte [rsp + 0x5d], r11b
mov eax, dword [rsp + 0x64]
test al, al
je 0x18002ebab
test rdi, rdi
je 0x18002ebab
test cl, cl
jne 0x18002eb0a
test r8b, r8b
je 0x18002ebb4
mov qword [rsp + 0x70], r11
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002eb3f
test ecx, ecx
je 0x18002eb2a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002eb2f
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c55c
mov dword [rdi + 0x18], ebx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r14, qword [rbp - 0x78]
mov r8, r14
mov edx, ebx
mov rcx, qword [rdi + 0x20]
call fcn.180008524
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, r14d
mov dword [rdi + 0x10], ecx
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
mov ecx, eax
cmp dword [rdi + 0x58], eax
cmovl ecx, dword [rdi + 0x58]
mov dword [rdi + 0x58], ecx
cmp dword [rdi + 0x5c], eax
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
xor r11d, r11d
mov r8d, r11d
cmp ecx, edx
cmovne r8d, r15d
mov dword [rsp + 0x58], r8d
mov cl, byte [rsp + 0x50]
mov eax, dword [rsp + 0x64]
test cl, cl
jne 0x18002ebbd
test r8b, r8b
jne 0x18002ebbd
cmp dword [rsi + 0x1228], r13d
jne 0x18002ebd9
test al, al
jne 0x18002ebd9
test rdi, rdi
je 0x18002ebd9
cmp byte [rdi + 0x48], r11b
je 0x18002ebd9
mov ebx, 1
mov al, bl
mov byte [rsp + 0x7e], bl
jmp 0x18002ebe5
mov al, r11b
mov byte [rsp + 0x7e], al
mov ebx, 1
cmp qword [rbp - 0x18], r11
je 0x18002ec00
test al, al
je 0x18002ebf5
mov rax, qword [rdi + 0x30]
jmp 0x18002ebf9
mov rax, qword [rbp - 0x78]
cmp byte [rax], r11b
mov al, bl
je 0x18002ec03
mov al, r11b
mov byte [rsp + 0x53], al
cmp byte [rbp - 0x50], r11b
je 0x18002ec82
test al, al
jne 0x18002ec82
mov rcx, qword [rsi + 0xf20]
mov edx, 0x2a
call fcn.180022c04
lea r9, [rsi + 0x2d68]
mov ecx, dword [rcx + 0x14]
mov dword [r9 + 0x14], ecx
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x64]
mov dword [r9 + 0x64], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x68]
mov dword [r9 + 0x68], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x6c]
mov dword [r9 + 0x6c], r8d
mov rdx, qword [rsi + 0xf20]
mov r8, qword [rdx + 0x40]
mov qword [r9 + 0x40], r8
mov qword [r9 + 0x38], rax
mov eax, dword [rax + 4]
mov dword [r9 + 0x10], eax
mov rcx, r9
call fcn.1800131f0
xor r11d, r11d
mov dword [rbp - 0x4c], r11d
cmp dword [rsi + 0x1228], r13d
jne 0x18002f06d
mov eax, dword [rdi + 0x10]
mov dword [rbp - 0x4c], eax
mov byte [rdi + 0xe86], r11b
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x4c], eax
mov r14d, dword [rbp + 0x218]
mov dword [rdi + 0xe88], r14d
cmp byte [rsi + 0x110], r11b
sete al
mov byte [rsi + 0x1235], al
mov dword [rsi + 0x30f4], ebx
movss xmm2, dword [rsi + 0x108]
subss xmm2, xmm7
subss xmm2, dword [rsi + 0xb2c]
addss xmm2, dword [rdi + 0x50]
mov r15d, dword [rsp + 0x60]
test r15b, r15b
je 0x18002ed03
movss xmm3, dword [rsi + 0x10c]
mov rax, qword [rbp - 0x48]
subss xmm3, dword [rax + 0x104]
jmp 0x18002ed13
movss xmm3, dword [rsi + 0xf28]
mulss xmm3, dword [0x1800d90a0]
test r12b, r12b
je 0x18002eddc
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
lea rax, [rdi + 0xe85]
mov byte [rax], bl
mov r12d, 1
cmp byte [rax], r11b
je 0x18002ed4d
cmp byte [rsi + 0x110], r11b
jne 0x18002ed4d
mov byte [rax], r11b
bt r14d, 0xa
jae 0x18002eda6
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.18001500c
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
test al, al
je 0x18002edaa
test cl, cl
jne 0x18002edaa
mov dword [rsp + 0x6c], 9
mov dword [rsp + 0x20], 2
mov edx, r14d
lea rcx, [rsp + 0x6c]
call fcn.18002dd30
xor r11d, r11d
test al, al
je 0x18002eda6
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002dd04
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
cmp byte [rsi + 0x120], r11b
je 0x18002edbc
cmp byte [rsi + 0x122], r11b
je 0x18002edd4
cmp byte [rsp + 0x5e], r11b
je 0x18002efc7
cmp byte [rsi + 0x123], r11b
je 0x18002efc7
mov al, r12b
jmp 0x18002efca
mov al, byte [rsp + 0x5f]
test al, al
je 0x18002ef12
mov r12d, 2
cmp word [rsi + 0xa52], r12w
jb 0x18002ef12
cmp byte [rsi + 0x121], r11b
jne 0x18002ef12
lea r14, [rdi + 0x54]
mov rdx, r14
mov rcx, rdi
call fcn.18002ca1c
movzx eax, word [rsi + 0xa52]
sub eax, r12d
movsxd rdx, dword [r14]
test bl, al
jne 0x18002ee9e
xor r8d, r8d
test edx, edx
je 0x18002ee44
mov rax, qword [rdi + 0x20]
lea r9d, [r12 + 8]
cmp word [rax + rdx*2 - 2], r9w
mov cl, r8b
jne 0x18002ee46
mov cl, bl
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ee52
test cl, cl
jne 0x18002ee62
mov edx, 0x20000c
mov rcx, rdi
call fcn.18002dd04
mov edx, dword [r14]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ee83
mov eax, dword [r14 + 8]
cmp dword [r14 + 4], eax
jne 0x18002ee7e
mov dword [r14 + 8], edx
mov dword [r14 + 4], edx
jmp 0x18002ee83
mov dword [r14], eax
mov edx, eax
mov rcx, rdi
call fcn.18002c62c
mov dword [r14], eax
mov dword [rdi + 0x5c], eax
mov rdx, r14
mov rcx, rdi
call fcn.18002cc24
jmp 0x18002eef2
mov rcx, qword [rdi + 0x20]
movzx ebx, word [rcx + rdx*2]
mov edx, 0x200004
mov rcx, rdi
call fcn.18002dd04
mov edx, 0x600005
mov rcx, rdi
call fcn.18002dd04
mov edx, 0x600001
mov rcx, rdi
call fcn.18002dd04
mov eax, 0xa
cmp bx, ax
je 0x18002eeeb
test r15b, r15b
je 0x18002eeeb
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], ecx
mov dword [r14], ecx
mov byte [rdi + 0xe84], 0
mov dword [rdi + 0xe80], 0xbe99999a
lea rax, [rdi + 0xe85]
mov r14d, dword [rbp + 0x218]
xor r11d, r11d
jmp 0x18002ed36
lea rbx, [rdi + 0xe85]
mov cl, byte [rbx]
cmp byte [rsi + 0xa48], r11b
je 0x18002ef5d
test cl, cl
jne 0x18002ef5d
test al, al
je 0x18002ef55
lea rdx, [rdi + 0x54]
mov rcx, rdi
cmp byte [rsi + 0x121], r11b
je 0x18002ef43
call fcn.18002ca7c
jmp 0x18002ef48
call fcn.18002ca1c
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
mov rax, rbx
jmp 0x18002ed36
mov rax, rbx
cmp byte [rsi + 0x110], r11b
je 0x18002ed36
test cl, cl
jne 0x18002ed36
movss xmm0, dword [rsi + 0xf8]
ucomiss xmm0, xmm15
jp 0x18002ef99
jne 0x18002ef99
movss xmm0, dword [rsi + 0xfc]
ucomiss xmm0, xmm15
jp 0x18002ef99
je 0x18002ed36
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002ca7c
mov dword [rdi + 0xe80], 0xbe99999a
mov r12d, 1
mov byte [rdi + 0xe84], r12b
mov rax, rbx
xor r11d, r11d
jmp 0x18002ed3c
mov al, r11b
lea rbx, [rsi + 0xac0]
cmp dword [rbx], r11d
jle 0x18002f06d
test al, al
jne 0x18002f047
test cl, cl
jne 0x18002f047
cmp byte [rsp + 0x52], r11b
jne 0x18002f047
mov r15d, r11d
mov r14, r11
mov r13d, dword [rbp + 0x218]
mov rax, qword [rsi + 0xac8]
movzx ecx, word [rax + r14]
mov dword [rsp + 0x6c], ecx
cmp ecx, 9
je 0x18002f033
mov dword [rsp + 0x20], 2
mov edx, r13d
lea rcx, [rsp + 0x6c]
call fcn.18002dd30
xor r11d, r11d
test al, al
je 0x18002f036
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002dd04
xor r11d, r11d
add r15d, r12d
add r14, 2
cmp r15d, dword [rbx]
jl 0x18002eff6
mov r13d, dword [rsp + 0x78]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18002f06a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r11d
test eax, eax
cmovg edx, eax
mov rcx, rbx
call fcn.18001c55c
xor r11d, r11d
mov dword [rbx], r11d
mov r12b, r11b
mov byte [rsp + 0x51], r11b
lea rax, [0x18009e6ea]
cmp dword [rsi + 0x1228], r13d
jne 0x18002faa7
cmp byte [rsi + 0x1234], r11b
jne 0x18002faa7
cmp byte [rsp + 0x5c], r11b
jne 0x18002faa7
movaps xmm0, xmm11
subss xmm0, dword [rsi + 0xb30]
divss xmm0, dword [rsi + 0xf28]
cvttss2si eax, xmm0
mov r12d, 1
mov ecx, r12d
cmp eax, r12d
cmovge ecx, eax
mov dword [rsp + 0x6c], ecx
mov dword [rdi + 0x64], ecx
mov al, byte [rsi + 0x121]
neg al
sbb ebx, ebx
and ebx, 0x400000
mov r15b, byte [rsp + 0x5e]
lea rcx, [rsi + 0x120]
mov qword [rsp + 0x70], rcx
mov qword [rbp - 0x30], rcx
test r15b, r15b
je 0x18002f138
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov r14b, byte [rax]
mov byte [rsp + 0x52], r14b
cmp byte [rsi + 0x123], r11b
je 0x18002f14c
mov byte [rsp + 0x52], r14b
cmp byte [rcx], r11b
jne 0x18002f14c
mov byte [rsp + 0x52], r14b
test r14b, r14b
jne 0x18002f14c
mov byte [rsp + 0x54], r12b
mov byte [rsp + 0x52], r14b
jmp 0x18002f151
mov al, byte [rcx]
mov byte [rsp + 0x52], al
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov byte [rsp + 0x54], r11b
mov r8d, r12d
mov edx, r13d
mov ecx, 0xa39
call fcn.18001500c
xor ecx, ecx
test al, al
jne 0x18002f17d
mov r8d, r12d
mov edx, r13d
mov ecx, 0x220a
call fcn.18001500c
xor ecx, ecx
test al, al
je 0x18002f1a5
mov r12d, dword [rsp + 0x64]
mov r14d, dword [rsp + 0x60]
test r12b, r12b
jne 0x18002f1af
cmp byte [rbp - 0x50], cl
jne 0x18002f1af
test r14b, r14b
je 0x18002f19e
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f1af
mov byte [rsp + 0x68], 1
jmp 0x18002f1b3
mov r14d, dword [rsp + 0x60]
mov r12d, dword [rsp + 0x64]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r13d
mov ecx, 0xa24
call fcn.18001500c
test al, al
jne 0x18002f1db
xor r8d, r8d
mov edx, r13d
mov ecx, 0x1209
call fcn.18001500c
test al, al
je 0x18002f1fd
xor eax, eax
cmp byte [rbp - 0x50], al
jne 0x18002f1fd
test r14b, r14b
je 0x18002f1ef
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f1fd
mov eax, 1
mov byte [rsp + 0x7d], al
xor r14d, r14d
jmp 0x18002f209
xor r14d, r14d
mov byte [rsp + 0x7d], r14b
lea eax, [r14 + 1]
mov r8d, eax
mov edx, r13d
mov ecx, 0xa37
call fcn.18001500c
test al, al
jne 0x18002f234
mov r8d, 1
mov edx, r13d
mov ecx, 0x2209
call fcn.18001500c
test al, al
je 0x18002f244
test r12b, r12b
jne 0x18002f244
mov eax, 1
mov byte [rsp + 0x5f], al
jmp 0x18002f24e
mov byte [rsp + 0x5f], r14b
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3b
call fcn.18001500c
mov r14d, dword [rbp - 0x58]
test al, al
je 0x18002f27b
test r12b, r12b
jne 0x18002f27b
test r14b, r14b
je 0x18002f27b
mov eax, 1
mov byte [rsp + 0x7c], al
jmp 0x18002f285
mov byte [rsp + 0x7c], 0
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3a
call fcn.18001500c
test al, al
jne 0x18002f2ba
test r15b, r15b
je 0x18002f2d2
mov r8d, 1
mov edx, r13d
mov ecx, 0x2a3b
call fcn.18001500c
xor r15d, r15d
test al, al
je 0x18002f2d5
jmp 0x18002f2bd
xor r15d, r15d
test r12b, r12b
jne 0x18002f2d5
test r14b, r14b
je 0x18002f2d5
mov r12d, 1
mov r13b, r12b
jmp 0x18002f2de
xor r15d, r15d
mov r13b, r15b
mov r12d, 1
xor r8d, r8d
mov edx, dword [rsp + 0x78]
mov ecx, 0xa22
call fcn.18001500c
mov byte [rbp - 0x80], al
test byte [rsi + 8], 2
je 0x18002f301
test byte [rsi + 0xc], r12b
mov r14b, r12b
jne 0x18002f304
mov r14b, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.180013c38
test al, al
jne 0x18002f32d
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.180013c38
test al, al
jne 0x18002f32d
mov r12b, r15b
test r14b, r14b
je 0x18002f362
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.180013c38
test al, al
jne 0x18002f358
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.180013c38
test al, al
je 0x18002f362
mov eax, 1
mov r15b, al
jmp 0x18002f367
mov eax, 1
mov r8d, eax
mov edx, dword [rsp + 0x78]
mov ecx, 0x20e
call fcn.18001500c
xor ecx, ecx
test al, al
jne 0x18002f3a5
test r14b, r14b
je 0x18002f39b
lea r8d, [rcx + 1]
mov edx, dword [rsp + 0x78]
mov ecx, 0x26c
call fcn.18001500c
xor ecx, ecx
test al, al
jne 0x18002f3a5
mov r14b, cl
mov eax, 1
jmp 0x18002f3ad
mov eax, 1
mov r14b, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f3f5
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200000
mov eax, 0x200004
cmp byte [rsp + 0x54], cl
cmovne edx, eax
or edx, ebx
mov rcx, rdi
call fcn.18002dd04
xor r11d, r11d
mov r9d, 1
jmp 0x18002fa76
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f421
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200001
mov eax, 0x200005
jmp 0x18002f3d6
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.180013c38
xor r11d, r11d
test al, al
je 0x18002f48d
cmp byte [rsp + 0x60], r11b
je 0x18002f48d
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002f47c
mov rdx, qword [rbp - 0x48]
movss xmm0, dword [rdx + 0x88]
subss xmm0, dword [rsi + 0xf28]
maxss xmm0, xmm15
movss dword [rdx + 0x98], xmm0
mov dword [rdx + 0xa0], r11d
mov dword [rdx + 0xa8], r11d
jmp 0x18002f3ea
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200002]
jmp 0x18002f3dd
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.180013c38
xor r11d, r11d
test al, al
je 0x18002f50a
cmp byte [rsp + 0x60], r11b
je 0x18002f50a
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002f4f9
mov rax, qword [0x1800e3b80]
mov rcx, qword [rax + 0x11c8]
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
addss xmm0, dword [rsi + 0xf28]
minss xmm0, dword [rcx + 0x90]
movss dword [rax + 0x98], xmm0
mov dword [rax + 0xa0], r11d
mov dword [rax + 0xa8], r11d
jmp 0x18002f3ea
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200003]
jmp 0x18002f3dd
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f550
cmp byte [rsp + 0x60], cl
je 0x18002f550
or ebx, 0x20000e
mov edx, ebx
mov rcx, rdi
call fcn.18002dd04
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
subss xmm6, xmm0
jmp 0x18002f3e7
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f596
cmp byte [rsp + 0x60], cl
je 0x18002f596
or ebx, 0x20000f
mov edx, ebx
mov rcx, rdi
call fcn.18002dd04
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
addss xmm6, xmm0
jmp 0x18002f3e7
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.180013c38
test al, al
je 0x18002f5c3
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18002f3dd
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.180013c38
test al, al
je 0x18002f5e6
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200005
jmp 0x18002f5b7
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.180013c38
xor ecx, ecx
test al, al
je 0x18002f630
cmp byte [rsp + 0x64], cl
jne 0x18002f630
cmp byte [rsp + 0x68], cl
jne 0x18002f630
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002f623
cmp byte [rsp + 0x52], cl
je 0x18002f623
mov edx, 0x60000d
mov rcx, rdi
call fcn.18002dd04
or ebx, 0x200008
mov edx, ebx
jmp 0x18002f3df
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.180013c38
xor r11d, r11d
mov r8d, dword [rsp + 0x64]
test al, al
je 0x18002f6a2
test r8b, r8b
jne 0x18002f6a2
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002f69a
cmp byte [rsp + 0x52], r11b
je 0x18002f667
mov edx, 0x60000c
jmp 0x18002f692
cmp byte [rsp + 0x5e], r11b
je 0x18002f69a
cmp byte [rsi + 0x123], r11b
je 0x18002f69a
mov rax, qword [rbp + 0x90]
cmp byte [rax], r11b
jne 0x18002f69a
mov rax, qword [rsp + 0x70]
cmp byte [rax], r11b
jne 0x18002f69a
mov edx, 0x600004
mov rcx, rdi
call fcn.18002dd04
or ebx, 0x200009
jmp 0x18002f629
test r12b, r12b
jne 0x18002f9e7
test r15b, r15b
jne 0x18002f9e7
test r14b, r14b
je 0x18002f711
test dword [rbp + 0x218], 0x100000
je 0x18002f6ef
mov eax, dword [rdi + 0x10]
test eax, eax
jg 0x18002f6db
mov byte [rsp + 0x58], r11b
mov byte [rsp + 0x50], r11b
mov byte [rsp + 0x5c], 1
setg r12b
mov byte [rsp + 0x51], r12b
mov r9d, 1
jmp 0x18002fa7b
mov r9d, 1
mov r12b, r9b
mov byte [rsp + 0x51], r9b
mov byte [rsp + 0x5c], r9b
mov cl, r11b
mov dl, r11b
mov byte [rsp + 0x50], dl
jmp 0x18002fa83
movzx eax, byte [rsp + 0x7c]
test al, al
jne 0x18002f9c6
test r13b, r13b
jne 0x18002f9c6
cmp byte [rbp - 0x80], r11b
je 0x18002f750
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
jmp 0x18002fa76
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x18002f8ca
cmp byte [rsp + 0x7d], r11b
jne 0x18002f8ca
cmp byte [rsp + 0x5f], r11b
je 0x18002f3ea
mov rax, qword [0x1800e3b80]
mov rdx, qword [rax + 0xb0]
test rdx, rdx
je 0x18002f7a8
mov rcx, qword [rax + 0xc0]
call rdx
mov rbx, rax
xor r11d, r11d
test rax, rax
je 0x18002f3ea
mov rax, qword [0x1800e3b80]
jmp 0x18002f7af
lea rbx, [0x18009e6ea]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r11b
jne 0x18002f7b3
test rax, rax
je 0x18002f7ce
mov r9d, 1
add dword [rax + 0xf4], r9d
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x90], rax
xor r13d, r13d
mov r14d, r13d
cmp byte [rbx], r13b
je 0x18002f84e
mov r12, rax
mov esi, dword [rbp + 0x218]
lea r15d, [r13 + 1]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x6c]
call fcn.180008384
movsxd rcx, eax
add rbx, rcx
mov dword [rsp + 0x20], 4
mov edx, esi
lea rcx, [rsp + 0x6c]
call fcn.18002dd30
test al, al
je 0x18002f83e
movzx eax, word [rsp + 0x6c]
mov word [r12], ax
add r14d, r15d
add r12, 2
cmp byte [rbx], r13b
jne 0x18002f7ff
mov rsi, qword [rbp - 0x68]
mov r15, qword [rbp + 0x90]
movsxd rax, r14d
mov word [r15 + rax*2], r13w
test r14d, r14d
jle 0x18002f8a5
lea rbx, [rdi + 0x54]
mov rdx, rbx
mov rcx, rdi
call fcn.18002cc24
mov rcx, rdi
call fcn.18002cce0
mov r9d, r14d
mov r8, r15
mov edx, dword [rbx]
mov rcx, rdi
call fcn.18002c794
test al, al
je 0x18002f89e
lea rcx, [rbx + 0x20]
mov r9d, r14d
xor r8d, r8d
mov edx, dword [rbx]
call fcn.18002d80c
add dword [rbx], r14d
mov byte [rbx + 0x16], r13b
mov byte [rdi + 0xe84], 1
test r15, r15
je 0x18002f8bc
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002f8bc
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002f3e7
cmp qword [rsi + 0xb8], r11
je 0x18002f971
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
cmp ecx, eax
je 0x18002f8eb
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18002f8f1
mov edx, r11d
mov eax, dword [rdi + 0xc]
movsxd r15, eax
mov rax, qword [rdi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.180008784
mov ecx, 1
lea r14d, [rcx + rax]
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002f923
add dword [rax + 0xf4], ecx
movsxd rcx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov edx, r14d
mov rcx, rax
call fcn.1800086e4
mov rcx, rbx
call fcn.18000b6e8
test rbx, rbx
je 0x18002f965
mov rcx, qword [0x1800e3b80]
test rcx, rcx
je 0x18002f965
dec dword [rcx + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r11d, r11d
test r13b, r13b
je 0x18002f3ea
mov eax, dword [rdi + 0x5c]
lea rbx, [rdi + 0x54]
cmp dword [rdi + 0x58], eax
jne 0x18002f996
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rbx], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x18002fa76
mov rdx, rbx
mov rcx, rdi
call fcn.18002cce0
xor r11d, r11d
mov byte [rbx + 0x16], r11b
jmp 0x18002f3ea
mov edx, eax
xor edx, 1
add edx, 0x20000a
mov rcx, rdi
call fcn.18002dd04
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x18002f3e7
mov edx, dword [rbp + 0x218]
mov eax, edx
shr eax, 0xb
mov r9d, 1
and al, r9b
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x18002fa16
test r15b, r15b
jne 0x18002fa16
test al, al
mov rax, qword [rsp + 0x70]
je 0x18002fa38
cmp byte [rax], r11b
jne 0x18002fa3d
mov byte [rsp + 0x5d], r9b
cmp byte [rsi + 0x7c], r11b
je 0x18002fa71
test cl, cl
jne 0x18002fa71
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
jmp 0x18002fa76
cmp byte [rax], r11b
jne 0x18002fa16
test r8b, r8b
jne 0x18002fa76
mov eax, 0xa
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x6c]
call fcn.18002dd30
xor r11d, r11d
test al, al
je 0x18002f3ea
mov edx, dword [rsp + 0x6c]
jmp 0x18002f3df
mov byte [rsp + 0x5c], r9b
mov r12b, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x58]
mov dl, byte [rsp + 0x50]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002fa92
test dl, dl
mov al, r9b
jne 0x18002fa95
mov al, r11b
or cl, al
mov dword [rsp + 0x58], ecx
mov r13d, dword [rsp + 0x78]
lea rax, [0x18009e6ea]
mov qword [rbp - 0x58], r11
mov r14d, r11d
cmp dword [rsi + 0x1228], r13d
jne 0x180030037
test r12b, r12b
je 0x18002fc40
cmp byte [rsp + 0x64], r11b
jne 0x18002fca9
test dword [rbp + 0x218], 0x100000
je 0x18002fb15
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x20], r11d
mov r9d, dword [rdi + 0xc]
xor r8d, r8d
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002dc14
mov r8d, dword [rdi + 0xc]
xor edx, edx
mov rcx, rdi
call fcn.18002c708
xor r11d, r11d
mov qword [rdi + 0x58], r11
mov dword [rdi + 0x54], r11d
jmp 0x18002fc4f
mov rax, qword [rbp - 0x78]
mov r8, qword [rdi + 0x40]
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002fb39
add rax, r9
test ecx, ecx
jne 0x18002fb26
test edx, edx
je 0x18002fc4f
mov r12, qword [rdi + 0x40]
mov qword [rbp - 0x58], r12
mov r14d, dword [rdi + 0x38]
sub r14d, r9d
mov dword [rbp + 0x94], r11d
mov ebx, r11d
mov dword [rbp + 0x90], ebx
mov r15, r11
mov qword [rbp + 0x98], r11
test r14d, r14d
jle 0x18002fbfb
movsxd r13, r14d
add r13, r12
mov rdx, r13
mov rcx, r12
call fcn.1800085c4
mov edx, 1
lea ebx, [rdx + rax]
xor ecx, ecx
test ebx, ebx
jle 0x18002fbd8
mov r12d, ebx
lea eax, [rdx + 7]
cmp ebx, eax
cmovl r12d, eax
test r12d, r12d
jle 0x18002fbd4
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002fbb5
add dword [rax + 0xf4], edx
movsxd rcx, r12d
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x94], r12d
xor ecx, ecx
mov r12, qword [rbp - 0x58]
mov dword [rbp + 0x90], ebx
mov qword [rsp + 0x20], rcx
mov r9, r13
mov r8, r12
mov edx, ebx
mov rcx, r15
call fcn.180008524
mov r13d, dword [rsp + 0x78]
xor r11d, r11d
lea eax, [rbx - 1]
mov r9d, r11d
test r14d, r14d
cmovg r9d, eax
lea rdx, [rdi + 0x54]
mov r8, r15
mov rcx, rdi
call fcn.18002dc80
nop
test r15, r15
je 0x18002fc39
mov rax, qword [0x1800e3b80]
test rax, rax
je 0x18002fc2f
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov r12b, byte [rsp + 0x51]
jmp 0x18002fc4f
mov qword [rbp - 0x58], r11
cmp byte [rsp + 0x64], r11b
jne 0x18002fd40
mov byte [rdi + 0x48], 1
mov eax, dword [rdi + 0x18]
lea ebx, [rax*4 + 1]
mov ecx, dword [rdi + 0x2c]
cmp ebx, ecx
jle 0x18002fc88
test ecx, ecx
je 0x18002fc73
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002fc78
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c434
mov dword [rdi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x20]
mov edx, ebx
mov rcx, qword [rdi + 0x30]
call fcn.1800086e4
xor r11d, r11d
test r12b, r12b
je 0x18002fd40
cmp byte [rsp + 0x5d], r11b
je 0x18002fcc1
mov r12d, dword [rbp + 0x218]
test r12b, 0x20
jne 0x18002fd47
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
mov r15, qword [rbp - 0x58]
test r15, r15
je 0x180030032
test r13b, r13b
je 0x18002ffef
mov qword [rbp + 0x58], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x48], 0x40000
mov eax, dword [rbp + 0x218]
mov dword [rbp + 0x4c], eax
mov qword [rbp + 0x60], r12
mov dword [rbp + 0x68], r14d
lea eax, [r14 + 1]
cmp dword [rbp - 0x60], eax
cmovge eax, dword [rbp - 0x60]
mov dword [rbp + 0x6c], eax
mov qword [rbp + 0x50], r11
lea rcx, [rbp + 0x40]
call r11
mov r12, qword [rbp + 0x60]
mov qword [rbp - 0x78], r12
mov ecx, dword [rbp + 0x6c]
lea r14d, [rcx - 1]
cmp dword [rbp + 0x68], r14d
cmovl r14d, dword [rbp + 0x68]
xor r11d, r11d
jmp 0x18002fff2
mov r12d, dword [rbp + 0x218]
test r12d, 0x801c0
je 0x18002ffa4
mov r15d, r11d
mov ebx, 0x40
test bl, r12b
je 0x18002fd7c
xor r8d, r8d
mov edx, r13d
mov r13d, 0x200
mov ecx, r13d
call fcn.18001500c
xor r11d, r11d
test al, al
jne 0x18002fdbf
test r12b, r12b
jns 0x18002fdc4
mov ebx, 1
mov r8d, ebx
xor edx, edx
mov r13d, 0x203
mov ecx, r13d
call fcn.180013c38
xor r11d, r11d
test al, al
jne 0x18002fdba
mov r8d, ebx
xor edx, edx
mov r13d, 0x204
mov ecx, r13d
call fcn.180013c38
xor r11d, r11d
test al, al
je 0x18002fdc4
mov ebx, 0x80
mov r15d, r13d
jmp 0x18002fde5
mov ebx, 0x80000
test ebx, r12d
je 0x18002fdd7
cmp byte [rdi + 0xe86], r11b
jne 0x18002fde5
mov eax, pe_nt_image_headers64
test eax, r12d
mov ebx, r11d
cmovne ebx, eax
test ebx, ebx
je 0x18002ffa4
mov dword [rbp + 0x18], r11d
mov word [rbp + 0x31], r11w
mov byte [rbp + 0x33], r11b
mov qword [rbp], rsi
mov dword [rbp + 8], ebx
mov dword [rbp + 0xc], r12d
mov qword [rbp + 0x10], r11
cmp byte [rsp + 0x64], r11b
mov rax, qword [rbp - 0x78]
jne 0x18002fe18
mov rax, qword [rdi + 0x30]
mov dword [rbp + 0x1c], r15d
mov qword [rbp + 0x20], rax
mov eax, dword [rdi + 0x10]
mov dword [rbp + 0x28], eax
mov eax, dword [rdi + 0x4c]
mov dword [rbp + 0x2c], eax
mov byte [rbp + 0x30], r11b
mov r11, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0x54]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.180008784
mov ebx, eax
mov dword [rbp + 0x34], eax
movsxd rdx, dword [rdi + 0x58]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.180008784
mov r12d, eax
mov dword [rbp + 0x38], eax
movsxd rdx, dword [rdi + 0x5c]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.180008784
mov r13d, eax
mov dword [rbp + 0x3c], eax
lea rcx, [rbp]
xor eax, eax
call rax
mov r15b, byte [rbp + 0x30]
movsxd rcx, dword [rbp + 0x34]
cmp ecx, ebx
jne 0x18002fe91
xor r11d, r11d
test r15b, r15b
je 0x18002feb0
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.1800085c4
mov dword [rdi + 0x54], eax
mov byte [rdi + 0xe84], 1
mov ecx, dword [rbp + 0x34]
xor r11d, r11d
movsxd rax, dword [rbp + 0x38]
cmp eax, r12d
jne 0x18002febe
test r15b, r15b
je 0x18002fedf
cmp eax, ecx
jne 0x18002fec7
mov ecx, dword [rdi + 0x54]
jmp 0x18002fed9
mov rcx, qword [rbp + 0x20]
lea rdx, [rcx + rax]
call fcn.1800085c4
mov ecx, eax
mov eax, dword [rbp + 0x38]
mov dword [rdi + 0x58], ecx
xor r11d, r11d
movsxd rcx, dword [rbp + 0x3c]
cmp ecx, r13d
jne 0x18002fef1
test r15b, r15b
je 0x18002ffa4
cmp ecx, eax
jne 0x18002fefa
mov eax, dword [rdi + 0x58]
jmp 0x18002ff0c
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.1800085c4
xor r11d, r11d
mov dword [rdi + 0x5c], eax
test r15b, r15b
je 0x18002ffa4
mov r8d, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
mov rcx, rdi
call fcn.18002df18
mov ebx, dword [rbp + 0x28]
mov eax, dword [rbp - 0x4c]
mov r13d, dword [rbp - 0x70]
cmp ebx, eax
jle 0x18002ff72
test r13b, r13b
je 0x18002ff72
lea r15, [rdi + 0x18]
sub ebx, eax
add ebx, dword [r15]
mov ecx, dword [r15 + 4]
cmp ebx, ecx
jle 0x18002ff6f
test ecx, ecx
je 0x18002ff5b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002ff60
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
mov rcx, r15
call fcn.18001c55c
mov dword [r15], ebx
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, qword [rbp + 0x20]
mov edx, dword [rdi + 0x18]
mov rcx, qword [rdi + 0x20]
call fcn.180008524
mov dword [rdi + 0xc], eax
mov eax, dword [rbp + 0x28]
mov dword [rdi + 0x10], eax
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
jmp 0x18002ffa8
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
cmp byte [rsp + 0x64], r11b
jne 0x18002fcc9
mov rax, qword [rdi + 0x30]
mov r8, r12
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002ffda
add rax, r9
test ecx, ecx
jne 0x18002ffc7
test edx, edx
je 0x18002fcc9
mov r15, qword [rdi + 0x30]
mov r14d, dword [rdi + 0x10]
jmp 0x18002fccd
mov ecx, dword [rbp - 0x60]
lea eax, [r14 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
mov eax, 1
cmp rbx, rax
jb 0x180030022
jbe 0x18003001d
lea r8, [rbx - 1]
mov rdx, r15
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r11d, r11d
mov byte [r12 + rbx - 1], r11b
mov ebx, 1
mov byte [rsp + 0x7f], bl
mov r13d, dword [rsp + 0x78]
jmp 0x18003003c
mov r13d, dword [rsp + 0x78]
mov ebx, 1
cmp byte [rsp + 0x5c], r11b
je 0x180030058
cmp dword [rsi + 0x1228], r13d
jne 0x180030058
xor edx, edx
xor ecx, ecx
call fcn.18000b1b4
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
jne 0x1800300d9
mov r8d, ebx
mov edx, r13d
lea rcx, [rbp + 0x80]
call fcn.180009790
mov rax, qword [0x1800e3b80]
movdqu xmm0, xmmword [rax + 0xc3c]
movups xmmword [rbp + 0x90], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp + 0x9c], xmm0
lea rcx, [rbp + 0x90]
call fcn.1800087cc
mov r8d, eax
movss xmm5, dword [rsi + 0xb34]
movss dword [rsp + 0x20], xmm5
mov r9b, bl
mov rdx, qword [rbp + 0x88]
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180009618
xor r11d, r11d
movss dword [rbp + 0xa8], xmm7
movss dword [rbp + 0xac], xmm9
movaps xmm0, xmm7
addss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
movaps xmm1, xmm9
addss xmm1, xmm11
movss dword [rbp + 0xb4], xmm1
mov r10, qword [rbp - 0x48]
lea rax, [rbp + 0x90]
test r12b, r12b
je 0x18003012e
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x90], xmm0
jmp 0x180030152
addss xmm7, dword [rsi + 0xb2c]
movss dword [rbp + 0x90], xmm7
movaps xmm0, xmm9
addss xmm0, dword [rsi + 0xb30]
movss dword [rbp + 0x94], xmm0
movsd xmm0, qword [rax]
movsd qword [rbp + 0xa0], xmm0
movaps xmm14, xmm15
movaps xmm8, xmm15
cmp byte [rsp + 0x7e], r11b
je 0x180030177
mov r15, qword [rdi + 0x30]
mov qword [rbp - 0x78], r15
jmp 0x18003017b
mov r15, qword [rbp - 0x78]
mov r14, r11
mov qword [rbp - 0x30], r11
movzx r9d, byte [rsp + 0x53]
test r9b, r9b
je 0x1800301ac
mov rax, qword [rbp - 0x18]
mov r15, rax
mov qword [rbp - 0x78], rax
or r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], r11b
jne 0x18003019c
add r14, rax
mov qword [rbp - 0x30], r14
mov r11b, byte [rsp + 0x50]
mov r8d, dword [rsp + 0x58]
test r11b, r11b
jne 0x1800302e9
test r8b, r8b
jne 0x1800302e9
xor r11d, r11d
test r12b, r12b
je 0x180030224
mov ecx, r11d
mov dl, byte [r15]
lea r14, [r15 + 1]
test dl, dl
je 0x1800301f7
lea r8d, [r11 + 0xa]
lea eax, [rcx + 1]
cmp dl, r8b
cmovne eax, ecx
mov ecx, eax
mov dl, byte [r14]
add r14, rbx
test dl, dl
jne 0x1800301e2
sub r14, rbx
mov eax, 0xa
cmp byte [r14], al
je 0x18003020c
cmp byte [r14], 0xd
je 0x18003020c
add ecx, ebx
movaps xmm14, xmm10
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [rsi + 0xf28]
jmp 0x18003025a
test r9b, r9b
jne 0x180030248
cmp dword [rsi + 0x1228], r13d
jne 0x180030238
movsxd r14, dword [rdi + 0x10]
jmp 0x180030245
or r14, 0xffffffffffffffff
inc r14
cmp byte [r15 + r14], r11b
jne 0x18003023c
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x180030ae0
mov rcx, qword [0x1800e3b80]
mov rax, r9
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.1800087cc
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xa0]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rcx, qword [r10 + 0x298]
call fcn.180020bc8
xor r11d, r11d
jmp 0x180030adb
xor r10d, r10d
test r9b, r9b
jne 0x1800302fc
movsxd r14, dword [rdi + 0x10]
add r14, r15
mov qword [rbp - 0x30], r14
mov r15, qword [rdi + 0x20]
movaps xmm5, xmm15
movaps xmm9, xmm15
mov r9, r10
mov r13, r10
mov edx, 0xfffffc18
mov r12d, edx
mov ecx, r10d
test r11b, r11b
je 0x18003032b
movsxd rax, dword [rdi + 0x54]
lea r9, [r15 + rax*2]
or edx, 0xffffffff
mov ecx, ebx
test r8b, r8b
je 0x180030346
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
cdqe
lea r13, [r15 + rax*2]
or r12d, 0xffffffff
add ecx, ebx
movzx eax, byte [rsp + 0x60]
add ecx, eax
mov ebx, r10d
mov rax, r15
movzx r8d, word [r15]
mov r11d, 0xa
test r8w, r8w
je 0x1800303a7
lea esi, [r11 - 9]
cmp r8w, r11w
jne 0x180030395
add ebx, esi
cmp edx, 0xffffffff
jne 0x180030381
cmp rax, r9
jb 0x180030381
mov edx, ebx
sub ecx, esi
test ecx, ecx
jle 0x1800303a3
cmp r12d, 0xffffffff
jne 0x180030395
cmp rax, r13
jb 0x180030395
mov r12d, ebx
sub ecx, esi
test ecx, ecx
jle 0x1800303a3
add rax, 2
movzx r8d, word [rax]
test r8w, r8w
jne 0x180030367
mov rsi, qword [rbp - 0x68]
inc ebx
mov eax, ebx
cmp edx, 0xffffffff
cmovne eax, edx
mov dword [rbp - 0x4c], eax
cmp r12d, 0xffffffff
cmove r12d, ebx
mov r8, r9
cmp r9, r15
jbe 0x1800303d6
lea rax, [r8 - 2]
cmp word [rax], r11w
je 0x1800303d6
mov r8, rax
cmp rax, r15
ja 0x1800303c4
mov byte [rsp + 0x30], r10b
mov qword [rsp + 0x20], r10
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.18002c3fc
movss xmm7, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm12, dword [rbp - 0x4c]
cvtdq2ps xmm12, xmm12
mulss xmm12, xmm0
xor r11d, r11d
test r12d, r12d
js 0x180030465
mov r8, r13
cmp r13, r15
jbe 0x18003042c
lea ecx, [r11 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x18003042c
mov r8, rax
cmp rax, r15
ja 0x18003041b
mov byte [rsp + 0x30], r11b
mov qword [rsp + 0x20], r11
mov r9, r13
mov rdx, rsi
lea rcx, [rbp + 0x90]
call fcn.18002c3fc
movss xmm5, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm9, r12d
cvtdq2ps xmm9, xmm9
mulss xmm9, xmm0
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
je 0x180030481
movaps xmm14, xmm10
movd xmm8, ebx
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm0
mov r13b, byte [rsp + 0x50]
test r13b, r13b
je 0x1800305ac
cmp byte [rdi + 0xe84], r11b
je 0x1800305ac
test dword [rbp + 0x218], 0x1000
jne 0x1800304f8
movaps xmm0, xmm10
mulss xmm0, dword [0x1800d9090]
subss xmm10, dword [rsi + 0xb2c]
movss xmm2, dword [rdi + 0x50]
movaps xmm1, xmm7
comiss xmm2, xmm7
jbe 0x1800304d8
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
jmp 0x1800304e6
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x1800304fc
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
jmp 0x1800304fc
mov dword [rdi + 0x50], r11d
test r12b, r12b
je 0x1800305a5
movaps xmm0, xmm12
subss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
jbe 0x180030520
movaps xmm6, xmm15
maxss xmm6, xmm0
jmp 0x18003054e
movss xmm2, dword [rsi + 0xb30]
addss xmm2, xmm2
movaps xmm1, xmm11
subss xmm1, xmm2
movaps xmm0, xmm12
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x18003054e
movaps xmm6, xmm12
subss xmm6, xmm11
addss xmm6, xmm2
movss xmm2, dword [rsi + 0xb30]
comiss xmm15, xmm6
jbe 0x180030562
movaps xmm2, xmm15
jmp 0x180030579
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm11
maxss xmm2, xmm15
minss xmm2, xmm6
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
movss xmm1, dword [rbp + 0xa4]
addss xmm1, xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rdi + 0xe84], r11b
movss xmm10, dword [rdi + 0x50]
movss xmm11, dword [0x1800d90d4]
cmp byte [rsp + 0x58], r11b
je 0x180030856
mov edx, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea r8, [r15 + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rbx, [r15 + rax*2]
test r13b, r13b
je 0x1800305ee
movaps xmm1, xmm11
jmp 0x1800305f6
movss xmm1, dword [0x1800d90a4]
mov rax, qword [0x1800e3b80]
movdqu xmm0, xmmword [rax + 0xebc]
movups xmmword [rbp + 0x80], xmm0
mulss xmm1, dword [rax + 0xaf0]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x8c], xmm0
lea rcx, [rbp + 0x80]
call fcn.1800087cc
mov r15d, eax
test r12b, r12b
je 0x180030644
movss dword [rbp - 0x40], xmm15
movaps xmm13, xmm15
jmp 0x18003064d
movss xmm13, dword [0x1800d90f8]
addss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
movss xmm6, dword [rbp + 0xa4]
addss xmm6, xmm9
subss xmm6, xmm15
mov qword [rsp + 0x70], r8
cmp r8, rbx
jae 0x180030850
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r12, qword [rbp - 0x48]
xor r13d, r13d
movaps xmm0, xmm3
addss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
ja 0x180030836
comiss xmm4, xmm6
jbe 0x1800306de
cmp r8, rbx
jae 0x180030818
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rsp + 0x70], r8
cmp ax, cx
je 0x180030818
cmp r8, rbx
jb 0x1800306be
jmp 0x180030818
mov byte [rsp + 0x30], 1
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rdx, rsi
lea rcx, [rbp - 0x68]
call fcn.18002c3fc
movss xmm0, dword [rbp - 0x68]
comiss xmm15, xmm0
jb 0x18003073e
mov rax, qword [rsi + 0xf20]
cmp dword [rax], 0x20
jle 0x180030721
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x180030726
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1800d90a0]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x68], xmm0
movaps xmm2, xmm5
addss xmm2, xmm0
movaps xmm0, xmm13
addss xmm0, xmm6
addss xmm5, xmm15
movaps xmm1, xmm11
subss xmm1, dword [rsi + 0xf28]
addss xmm1, xmm6
maxss xmm5, dword [rbp + 0xa8]
movss xmm4, dword [rbp + 0xac]
maxss xmm1, xmm4
movss dword [rbp + 0x80], xmm5
movss dword [rbp + 0x84], xmm1
movss xmm9, dword [rbp + 0xb0]
minss xmm2, xmm9
movss xmm3, dword [rbp + 0xb4]
minss xmm0, xmm3
movss dword [rbp + 0x88], xmm2
movss dword [rbp + 0x8c], xmm0
comiss xmm0, xmm4
jbe 0x180030813
comiss xmm3, xmm1
jbe 0x180030813
comiss xmm2, dword [rbp + 0xa8]
jbe 0x180030813
comiss xmm9, xmm5
jbe 0x180030813
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm15
mov r9d, r15d
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x80]
mov rcx, qword [r12 + 0x298]
call fcn.180020830
movss xmm1, dword [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r8, qword [rsp + 0x70]
movss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
addss xmm6, dword [rsi + 0xf28]
cmp r8, rbx
jb 0x180030697
movss xmm11, dword [0x1800d90d4]
mov r14, qword [rbp - 0x30]
mov r12d, dword [rsp + 0x60]
mov r13b, byte [rsp + 0x50]
xor r11d, r11d
movss xmm13, dword [rbp - 0x28]
mov r15, qword [rbp - 0x78]
test r12b, r12b
jne 0x180030871
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x180030924
mov rcx, qword [0x1800e3b80]
movzx eax, byte [rsp + 0x53]
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
movss xmm0, dword [rbp + 0xa0]
subss xmm0, xmm10
movss dword [rbp - 0x68], xmm0
movss xmm1, dword [rbp + 0xa4]
subss xmm1, xmm15
movss dword [rbp - 0x64], xmm1
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.1800087cc
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x68]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbx + 0x298]
call fcn.180020bc8
xor r11d, r11d
jmp 0x180030928
mov rbx, qword [rbp - 0x48]
test r13b, r13b
je 0x180030acf
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], r11b
je 0x180030978
comiss xmm15, xmm0
jae 0x180030978
movss xmm1, dword [0x1800d90dc]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x1800d90c0]
xor r11d, r11d
comiss xmm1, xmm0
jae 0x180030978
mov cl, r11b
lea edi, [r11 + 1]
jmp 0x180030980
mov edi, 1
mov cl, dil
addss xmm7, dword [rbp + 0xa0]
subss xmm7, xmm10
cvttss2si eax, xmm7
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0xa4]
addss xmm0, xmm12
subss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x80], xmm6
movaps xmm1, xmm7
subss xmm1, dword [rsi + 0xf28]
addss xmm1, dword [0x1800d90a0]
movss dword [rbp + 0x84], xmm1
movaps xmm3, xmm6
addss xmm3, xmm11
movss dword [rbp + 0x88], xmm3
movaps xmm2, xmm7
subss xmm2, dword [0x1800d90e4]
movss dword [rbp + 0x8c], xmm2
test cl, cl
je 0x180030a8a
comiss xmm2, dword [rbp + 0xac]
jbe 0x180030a8a
movss xmm0, dword [rbp + 0xb4]
comiss xmm0, xmm1
jbe 0x180030a8a
comiss xmm3, dword [rbp + 0xa8]
jbe 0x180030a8a
movss xmm0, dword [rbp + 0xb0]
comiss xmm0, xmm6
jbe 0x180030a8a
mov rax, qword [0x1800e3b80]
movdqu xmm0, xmmword [rax + 0xbcc]
movups xmmword [rbp - 0x28], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp - 0x1c], xmm0
movss dword [rbp - 0x68], xmm6
movss dword [rbp - 0x64], xmm2
lea rcx, [rbp - 0x28]
call fcn.1800087cc
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x80]
mov rcx, qword [rbx + 0x298]
call fcn.1800205e4
xor r11d, r11d
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
cmp byte [rsp + 0x64], r11b
jne 0x180030adb
mov byte [rsi + 0x2e80], dil
subss xmm6, xmm11
movss xmm0, dword [rsi + 0xf28]
subss xmm7, xmm0
movss dword [rsi + 0x2e84], xmm6
movss dword [rsi + 0x2e88], xmm7
movss dword [rsi + 0x2e8c], xmm0
jmp 0x180030adb
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
mov r9b, byte [rsp + 0x53]
mov ebx, dword [rbp - 0x50]
test bl, bl
je 0x180030af4
test r9b, r9b
jne 0x180030af4
call fcn.180013284
xor r11d, r11d
test r12b, r12b
je 0x180030b78
movss dword [rbp - 0x68], xmm14
addss xmm8, dword [rsi + 0xb30]
movss dword [rbp - 0x64], xmm8
lea rcx, [rbp - 0x68]
call fcn.18002abcc
mov ebx, dword [rsi + 0x1a44]
mov eax, ebx
or eax, 0x401
mov dword [rsi + 0x1a44], eax
call fcn.18000e438
mov eax, dword [rsi + 0x1a68]
and eax, 0x80
mov edi, dword [rbp + 0xc0]
or edi, eax
mov dword [rsi + 0x1a44], ebx
call fcn.1800157c8
xor r11d, r11d
mov ebx, dword [rbp - 0x50]
cmp dword [rsi + 0x1a60], r11d
jne 0x180030b78
mov eax, dword [rsp + 0x78]
mov dword [rsi + 0x1a60], eax
mov eax, dword [rbp + 0xbc]
mov dword [rsi + 0x1a64], eax
mov dword [rsi + 0x1a68], edi
cmp byte [rsi + 0x2f38], r11b
je 0x180030bc1
test bl, bl
je 0x180030b8c
cmp byte [rsp + 0x53], 0
je 0x180030bc1
mov rax, qword [0x1800e3b80]
lea rcx, [0x1800c6290]
mov qword [rax + 0x2f58], rcx
lea rcx, [0x1800c628c]
mov qword [rax + 0x2f60], rcx
mov r8, r14
mov rdx, r15
lea rcx, [rbp + 0xa0]
call fcn.18001a2f8
comiss xmm13, xmm15
jbe 0x180030bf8
addss xmm12, dword [rsi + 0xb44]
addss xmm9, dword [rsi + 0xb30]
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
movaps xmm0, xmm12
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.180008ee8
movzx edx, byte [rsp + 0x7f]
mov ecx, dword [rbp + 0x218]
test dl, dl
je 0x180030c24
bt ecx, 0x1b
jb 0x180030c24
mov rax, qword [0x1800e3b80]
mov word [rax + 0x1238], 0x101
or dword [rax + 0x1a68], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x5d]
cmovne eax, ecx
jmp 0x18002e350