Function at 0x18002d77c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2a8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x18011a010]
xor rax, rsp
mov qword [rbp + 0xf8], rax
mov dword [rbp - 0x60], r9d
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x18], rdx
mov rdi, rcx
mov qword [rbp - 0x10], rcx
mov rsi, qword [0x18011dcc0]
mov qword [rbp - 0x68], rsi
mov rax, qword [rsi + 0x11c8]
mov ecx, 1
mov byte [rax + 0xb8], cl
mov r13, qword [rsi + 0x11c8]
xor r14d, r14d
cmp byte [r13 + 0xbb], r14b
jne 0x18002da17
mov ebx, dword [rbp + 0x218]
mov r12d, ebx
shr r12d, 0x1a
and r12b, cl
mov dword [rsp + 0x60], r12d
mov eax, ebx
shr eax, 0xe
and al, cl
mov dword [rsp + 0x64], eax
mov eax, ebx
shr eax, 0xf
and al, cl
mov dword [rbp - 0x50], eax
mov eax, ebx
shr eax, 0x10
not al
and al, cl
mov dword [rbp - 0x58], eax
mov eax, ebx
shr eax, 0x12
and al, cl
mov dword [rbp - 0x70], eax
test r12b, r12b
je 0x18002d880
call fcn.180015500
mov rdx, rdi
mov rcx, r13
call fcn.18000ad0c
mov r15d, eax
mov dword [rsp + 0x78], eax
movss xmm0, dword [0x18011320c]
movss dword [rbp - 0x40], xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 1
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.18000dd9c
test r12b, r12b
je 0x18002d8d1
movss xmm0, dword [rsi + 0xf28]
mulss xmm0, dword [0x18011313c]
jmp 0x18002d8d6
movss xmm0, dword [rbp - 0x24]
movss xmm6, dword [rsi + 0xb30]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
call fcn.18001531c
movaps xmm2, xmm0
mov rdx, qword [rbp + 0x210]
mov rdx, qword [rdx]
lea rcx, [rsp + 0x70]
call fcn.18001538c
xorps xmm15, xmm15
movss xmm13, dword [rbp - 0x28]
comiss xmm13, xmm15
jbe 0x18002d923
movaps xmm1, xmm13
addss xmm1, dword [rsi + 0xb44]
jmp 0x18002d926
xorps xmm1, xmm1
movss xmm9, dword [r13 + 0x104]
movss dword [rbp - 0x3c], xmm9
movaps xmm0, xmm9
movss xmm11, dword [rsp + 0x74]
addss xmm0, xmm11
movss xmm7, dword [r13 + 0x100]
movaps xmm12, xmm7
movss xmm10, dword [rsp + 0x70]
addss xmm12, xmm10
movss dword [rbp - 0x38], xmm12
movss dword [rbp + 0x80], xmm7
movss dword [rbp + 0x84], xmm9
movss dword [rbp + 0x88], xmm12
movss dword [rbp + 0x8c], xmm0
movaps xmm2, xmm9
addss xmm2, xmm11
addss xmm1, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x90], xmm7
movss dword [rbp + 0x94], xmm9
movss dword [rbp + 0x98], xmm1
movss dword [rbp + 0x9c], xmm2
mov qword [rbp - 0x48], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
subss xmm2, xmm9
subss xmm1, xmm7
movss dword [rsp + 0x70], xmm1
movss dword [rsp + 0x74], xmm2
lea rcx, [rsp + 0x70]
movaps xmm1, xmm6
call fcn.180014f74
test r12b, r12b
je 0x18002dbd1
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.1800150e0
test al, al
jne 0x18002da7b
call fcn.180015628
xor al, al
mov rcx, qword [rbp + 0xf8]
xor rcx, rsp
call fcn.18009d0f0
lea r11, [rsp + 0x2a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r14d, dword [rsi + 0x1a68]
movups xmm0, xmmword [rsi + 0x1a60]
movups xmmword [rbp + 0xb8], xmm0
movss dword [r13 + 0x100], xmm7
movss dword [r13 + 0x104], xmm9
lea rdx, [rsi + 0xc3c]
mov ecx, 3
call fcn.180008e5c
movss xmm1, dword [rsi + 0xb34]
mov ecx, 7
call fcn.180008f0c
movss xmm1, dword [rsi + 0xb38]
mov ecx, 8
call fcn.180008f0c
and dword [rsp + 0x70], 0
and dword [rsp + 0x74], 0
lea rdx, [rsp + 0x70]
call fcn.180008f84
movss xmm1, dword [rbp + 0x8c]
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
subss xmm1, xmm9
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movaps xmm0, xmm12
movss xmm7, dword [rbp + 0x80]
subss xmm0, xmm7
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov dword [rsp + 0x20], 4
mov r9d, 1
lea r8, [rsp + 0x70]
mov edx, r15d
mov rcx, rdi
call fcn.18000e060
mov bl, al
mov ecx, 3
call fcn.180008fe4
mov ecx, 1
call fcn.180008eb8
test bl, bl
jne 0x18002db74
call fcn.18000e294
jmp 0x18002da12
mov rbx, qword [rsi + 0x11c8]
mov qword [rbp - 0x48], rbx
movsx ecx, word [rbx + 0x15e]
mov eax, dword [rbx + 0x158]
bts ecx, eax
mov word [rbx + 0x15e], cx
movss xmm0, dword [rsi + 0xb2c]
addss xmm0, dword [rbx + 0x100]
movss dword [rbx + 0x100], xmm0
movss xmm1, dword [rsi + 0xb30]
addss xmm1, dword [rbx + 0x104]
movss dword [rbx + 0x104], xmm1
subss xmm10, dword [rbx + 0xac]
jmp 0x18002dc2b
bt ebx, 0x1c
jb 0x18002dc21
mov r9d, 0x400
lea r8, [rbp + 0x80]
mov edx, r15d
lea rcx, [rbp + 0x90]
call fcn.1800150e0
test al, al
je 0x18002da17
movss xmm12, dword [rbp + 0x88]
movss dword [rbp - 0x38], xmm12
movss xmm9, dword [rbp + 0x84]
movss dword [rbp - 0x3c], xmm9
movss xmm7, dword [rbp + 0x80]
mov r14d, dword [rsi + 0x1a68]
mov rbx, r13
mov edx, r15d
lea rcx, [rbp + 0x80]
call fcn.18000b2b0
mov cl, al
mov byte [rsp + 0x5f], al
xor r9d, r9d
lea edx, [r9 + 1]
test al, al
je 0x18002dc51
mov dword [rsi + 0x1d48], edx
mov rdi, qword [0x18011dcc0]
test r15d, r15d
je 0x18002dc6f
cmp dword [rdi + 0x1ee0], r15d
jne 0x18002dc6f
add rdi, 0x1ed8
jmp 0x18002dc72
mov rdi, r9
shr r14d, 8
and r14b, dl
mov dword [rbp - 0x4c], r14d
mov eax, dword [rsi + 0x1228]
mov r8d, 2
cmp eax, r15d
je 0x18002dcae
cmp dword [rsi + 0x1bb8], r15d
jne 0x18002dcae
test byte [rsi + 0x1bc4], dl
jne 0x18002dca8
cmp dword [rsi + 0x1bdc], r8d
jne 0x18002dcae
mov byte [rsp + 0x52], dl
jmp 0x18002dcb3
mov byte [rsp + 0x52], r9b
test cl, cl
je 0x18002dcc3
cmp byte [rsi + 0xa48], r9b
mov r15b, dl
jne 0x18002dcc6
mov r15b, r9b
mov byte [rsp + 0x54], r15b
test r12b, r12b
je 0x18002dcfa
test rdi, rdi
je 0x18002dcfa
test eax, eax
jne 0x18002dcfa
lea rdx, str.SCROLLY
mov rcx, rbx
call fcn.18000ad0c
cmp dword [rsi + 0x1258], eax
jne 0x18002dcf7
mov ebx, 1
jmp 0x18002dd07
xor r9d, r9d
mov bl, r9b
test r12b, r12b
je 0x18002dd38
test rdi, rdi
je 0x18002dd38
lea rdx, str.SCROLLY
mov rcx, qword [rbp - 0x48]
call fcn.18000ad0c
xor r9d, r9d
cmp dword [rsi + 0x1228], eax
jne 0x18002dd38
lea eax, [r9 + 1]
mov cl, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
jmp 0x18002dd4e
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x58], r9b
mov cl, r9b
mov byte [rsp + 0x51], cl
test r12b, r12b
je 0x18002dd5c
mov rax, qword [rbp - 0x48]
movss xmm6, dword [rax + 0x88]
jmp 0x18002dd68
movss xmm6, dword [0x180113200]
mov byte [rsp + 0x51], cl
mov edx, 1
test rdi, rdi
je 0x18002dd7f
mov al, r12b
xor al, dl
cmp byte [rdi + 0x6b], al
mov r12b, dl
jne 0x18002dd82
mov r12b, r9b
test r15b, r15b
jne 0x18002dda7
test bl, bl
jne 0x18002dda7
cmp byte [rsp + 0x52], r9b
jne 0x18002dda7
test r14b, r14b
jne 0x18002dda7
mov byte [rsp + 0x53], r9b
test cl, cl
jne 0x18002ddab
mov byte [rsp + 0x5d], r9b
jmp 0x18002ddbb
mov byte [rsp + 0x53], dl
mov byte [rsp + 0x5d], dl
mov eax, dword [rsp + 0x78]
cmp dword [rsi + 0x1228], eax
jne 0x18002ddc4
test r12b, r12b
je 0x18002dff7
lea rdi, [rsi + 0x1ed8]
mov dword [rdi + 0xe80], 0xbe99999a
or rbx, 0xffffffffffffffff
mov rax, qword [rbp - 0x78]
inc rbx
cmp byte [rax + rbx], r9b
jne 0x18002dddd
lea r14d, [rbx + 1]
mov ecx, dword [rdi + 0x3c]
cmp r14d, ecx
jle 0x18002de1c
test ecx, ecx
je 0x18002de01
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002de06
mov eax, 8
mov edx, r14d
cmp eax, r14d
cmovg edx, eax
lea rcx, [rdi + 0x38]
call fcn.18001c294
mov rax, qword [rbp - 0x78]
mov dword [rdi + 0x38], r14d
movsxd r8, r14d
mov rdx, rax
mov rcx, qword [rdi + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x78]
xor r8d, r8d
cmp dword [rdi + 8], eax
jne 0x18002de73
test r12b, r12b
jne 0x18002de73
lea r12d, [r8 + 1]
lea r14, [rdi + 0x10]
cmp dword [r14], ebx
jne 0x18002de6e
mov r15, r14
cmp byte [rdi + 0x48], r8b
je 0x18002de7a
movsxd r8, ebx
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xor r8d, r8d
test eax, eax
je 0x18002de7a
mov r15, r14
jmp 0x18002de77
lea r15, [rdi + 0x10]
mov r12b, r8b
mov qword [rsp + 0x70], r8
mov eax, dword [rsp + 0x78]
mov dword [rdi + 8], eax
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002deb9
test ecx, ecx
je 0x18002dea1
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002dea6
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c3bc
xor r8d, r8d
mov dword [rdi + 0x18], ebx
mov ecx, dword [rdi + 0x2c]
test ecx, ecx
jns 0x18002dee0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r8d
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c294
xor r8d, r8d
mov dword [rdi + 0x28], r8d
mov byte [rdi + 0x48], r8b
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov rbx, qword [rbp - 0x78]
mov r8, rbx
mov edx, dword [rbp - 0x60]
mov rcx, qword [rdi + 0x20]
call fcn.180008694
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, ebx
mov dword [r15], ecx
xor r9d, r9d
test r12b, r12b
je 0x18002df48
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
mov dword [rdi + 0x58], eax
cmp dword [rdi + 0x5c], edx
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
mov ecx, dword [rsp + 0x60]
lea edx, [r9 + 1]
jmp 0x18002df91
mov qword [rdi + 0x50], r9
mov dword [rdi + 0xe72], 0x630000
mov dword [rdi + 0xe78], r9d
mov dword [rdi + 0xe7c], 0x3e7
mov qword [rdi + 0x58], r9
mov word [rdi + 0x69], 1
mov dword [rdi + 0x70], r9d
mov byte [rdi + 0x68], r9b
mov edx, 1
mov ecx, dword [rsp + 0x60]
mov al, cl
xor al, dl
mov byte [rdi + 0x6b], al
mov byte [rdi + 0x60], r9b
mov dword [rdi + 0x64], r9d
test cl, cl
jne 0x18002dfdf
mov ecx, dword [rbp + 0x218]
test cl, 0x10
mov eax, dword [rsp + 0x58]
movzx eax, al
cmovne eax, edx
mov dword [rsp + 0x58], eax
cmp byte [rsp + 0x52], r9b
je 0x18002dfc5
test r12b, r12b
je 0x18002dfc1
test byte [rsi + 0x1bc4], 4
jne 0x18002dfc5
mov byte [rsp + 0x58], dl
cmp byte [rbp - 0x4c], r9b
jne 0x18002dfdb
cmp byte [rsp + 0x54], r9b
je 0x18002dfdf
cmp byte [rsi + 0x120], r9b
je 0x18002dfdf
mov byte [rsp + 0x58], dl
mov r12d, dword [rbp + 0x218]
mov r15b, byte [rsp + 0x54]
bt r12d, 0xd
jae 0x18002dffe
mov byte [rdi + 0x60], dl
jmp 0x18002dffe
mov r12d, dword [rbp + 0x218]
mov r8b, byte [rsi + 0x79]
mov byte [rsp + 0x5e], r8b
mov r14d, dword [rsp + 0x78]
mov bl, byte [rsp + 0x53]
cmp dword [rsi + 0x1228], r14d
je 0x18002e040
test bl, bl
je 0x18002e040
mov rdx, r13
mov ecx, r14d
call fcn.18000afb8
mov rdx, r13
mov ecx, r14d
call fcn.180016930
mov rcx, r13
call fcn.180012d20
mov r8b, byte [rsp + 0x5e]
mov r13d, r14d
cmp dword [rsi + 0x1228], r14d
jne 0x18002e126
xor r10d, r10d
test r15b, r15b
je 0x18002e06e
mov ecx, 0x281
call fcn.180007764
mov dword [rax + 4], r14d
mov dword [rax], r14d
mov word [rax + 8], r10w
mov eax, dword [rsi + 0x1a38]
or eax, 3
mov dword [rsi + 0x1a38], eax
mov r9d, dword [rsp + 0x60]
test r9b, r9b
jne 0x18002e08c
test r12b, r12b
jns 0x18002e095
or eax, 0xc
mov dword [rsi + 0x1a38], eax
mov ecx, 0x207
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x208
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r9b, r9b
je 0x18002e0f2
mov ecx, 0x205
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
mov ecx, 0x206
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r8b, r8b
je 0x18002e10d
mov ecx, 0x4000
call fcn.180007764
mov dword [rax + 4], r13d
mov dword [rax], r13d
mov word [rax + 8], r10w
test r12d, 0x440
je 0x18002e126
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.180013964
cmp dword [rsi + 0x1228], r13d
jne 0x18002e168
test rdi, rdi
jne 0x18002e13d
xor edx, edx
xor ecx, ecx
call fcn.18000afb8
cmp dword [rsi + 0x1228], r13d
jne 0x18002e168
xor r11d, r11d
lea r9d, [r11 + 1]
cmp byte [rsi + 0xa48], r11b
je 0x18002e17b
cmp byte [rsp + 0x5d], r11b
jne 0x18002e17b
test bl, bl
jne 0x18002e17b
mov byte [rsp + 0x5c], r9b
jmp 0x18002e17b
xor r11d, r11d
test rdi, rdi
je 0x18002e180
cmp byte [rsp + 0x51], r11b
je 0x18002e180
lea r9d, [r11 + 1]
mov cl, r9b
jmp 0x18002e183
mov cl, r11b
mov byte [rsp + 0x50], cl
mov r12d, dword [rsp + 0x58]
test rdi, rdi
je 0x18002e1aa
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002e19e
test r12b, r12b
je 0x18002e1aa
test cl, cl
je 0x18002e1aa
mov r8d, 1
jmp 0x18002e1ad
mov r8b, r11b
mov dword [rsp + 0x58], r8d
movzx r15d, r8b
mov byte [rsp + 0x7f], r11b
mov byte [rsp + 0x5d], r11b
mov eax, dword [rsp + 0x64]
test al, al
je 0x18002e283
test rdi, rdi
je 0x18002e283
test cl, cl
jne 0x18002e1e2
test r8b, r8b
je 0x18002e28c
mov qword [rsp + 0x70], r11
mov ebx, dword [rbp - 0x60]
inc ebx
mov ecx, dword [rdi + 0x1c]
cmp ebx, ecx
jle 0x18002e217
test ecx, ecx
je 0x18002e202
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002e207
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x18]
call fcn.18001c3bc
mov dword [rdi + 0x18], ebx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r14, qword [rbp - 0x78]
mov r8, r14
mov edx, ebx
mov rcx, qword [rdi + 0x20]
call fcn.180008694
mov edx, eax
mov dword [rdi + 0xc], eax
mov ecx, dword [rsp + 0x70]
sub ecx, r14d
mov dword [rdi + 0x10], ecx
mov ecx, eax
cmp dword [rdi + 0x54], eax
cmovl ecx, dword [rdi + 0x54]
mov dword [rdi + 0x54], ecx
mov ecx, eax
cmp dword [rdi + 0x58], eax
cmovl ecx, dword [rdi + 0x58]
mov dword [rdi + 0x58], ecx
cmp dword [rdi + 0x5c], eax
cmovl edx, dword [rdi + 0x5c]
mov dword [rdi + 0x5c], edx
xor r11d, r11d
mov r8d, r11d
cmp ecx, edx
cmovne r8d, r15d
mov dword [rsp + 0x58], r8d
mov cl, byte [rsp + 0x50]
mov eax, dword [rsp + 0x64]
test cl, cl
jne 0x18002e295
test r8b, r8b
jne 0x18002e295
cmp dword [rsi + 0x1228], r13d
jne 0x18002e2b1
test al, al
jne 0x18002e2b1
test rdi, rdi
je 0x18002e2b1
cmp byte [rdi + 0x48], r11b
je 0x18002e2b1
mov ebx, 1
mov al, bl
mov byte [rsp + 0x7e], bl
jmp 0x18002e2bd
mov al, r11b
mov byte [rsp + 0x7e], al
mov ebx, 1
cmp qword [rbp - 0x18], r11
je 0x18002e2d8
test al, al
je 0x18002e2cd
mov rax, qword [rdi + 0x30]
jmp 0x18002e2d1
mov rax, qword [rbp - 0x78]
cmp byte [rax], r11b
mov al, bl
je 0x18002e2db
mov al, r11b
mov byte [rsp + 0x53], al
cmp byte [rbp - 0x50], r11b
je 0x18002e35a
test al, al
jne 0x18002e35a
mov rcx, qword [rsi + 0xf20]
mov edx, 0x2a
call fcn.180022c40
lea r9, [rsi + 0x2d68]
mov ecx, dword [rcx + 0x14]
mov dword [r9 + 0x14], ecx
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x64]
mov dword [r9 + 0x64], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x68]
mov dword [r9 + 0x68], r8d
mov rdx, qword [rsi + 0xf20]
mov r8d, dword [rdx + 0x6c]
mov dword [r9 + 0x6c], r8d
mov rdx, qword [rsi + 0xf20]
mov r8, qword [rdx + 0x40]
mov qword [r9 + 0x40], r8
mov qword [r9 + 0x38], rax
mov eax, dword [rax + 4]
mov dword [r9 + 0x10], eax
mov rcx, r9
call fcn.180013050
xor r11d, r11d
mov dword [rbp - 0x4c], r11d
cmp dword [rsi + 0x1228], r13d
jne 0x18002e745
mov eax, dword [rdi + 0x10]
mov dword [rbp - 0x4c], eax
mov byte [rdi + 0xe86], r11b
mov eax, dword [rbp - 0x60]
mov dword [rdi + 0x4c], eax
mov r14d, dword [rbp + 0x218]
mov dword [rdi + 0xe88], r14d
cmp byte [rsi + 0x110], r11b
sete al
mov byte [rsi + 0x1235], al
mov dword [rsi + 0x30f4], ebx
movss xmm2, dword [rsi + 0x108]
subss xmm2, xmm7
subss xmm2, dword [rsi + 0xb2c]
addss xmm2, dword [rdi + 0x50]
mov r15d, dword [rsp + 0x60]
test r15b, r15b
je 0x18002e3db
movss xmm3, dword [rsi + 0x10c]
mov rax, qword [rbp - 0x48]
subss xmm3, dword [rax + 0x104]
jmp 0x18002e3eb
movss xmm3, dword [rsi + 0xf28]
mulss xmm3, dword [0x1801130a8]
test r12b, r12b
je 0x18002e4b4
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
lea rax, [rdi + 0xe85]
mov byte [rax], bl
mov r12d, 1
cmp byte [rax], r11b
je 0x18002e425
cmp byte [rsi + 0x110], r11b
jne 0x18002e425
mov byte [rax], r11b
bt r14d, 0xa
jae 0x18002e47e
xor r8d, r8d
mov edx, r13d
mov ecx, 0x200
call fcn.180014e6c
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
test al, al
je 0x18002e482
test cl, cl
jne 0x18002e482
mov dword [rsp + 0x6c], 9
mov dword [rsp + 0x20], 2
mov edx, r14d
lea rcx, [rsp + 0x6c]
call fcn.18002d3fc
xor r11d, r11d
test al, al
je 0x18002e47e
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002d3d0
xor r11d, r11d
mov ecx, dword [rsp + 0x64]
cmp byte [rsi + 0x120], r11b
je 0x18002e494
cmp byte [rsi + 0x122], r11b
je 0x18002e4ac
cmp byte [rsp + 0x5e], r11b
je 0x18002e69f
cmp byte [rsi + 0x123], r11b
je 0x18002e69f
mov al, r12b
jmp 0x18002e6a2
mov al, byte [rsp + 0x5f]
test al, al
je 0x18002e5ea
mov r12d, 2
cmp word [rsi + 0xa52], r12w
jb 0x18002e5ea
cmp byte [rsi + 0x121], r11b
jne 0x18002e5ea
lea r14, [rdi + 0x54]
mov rdx, r14
mov rcx, rdi
call fcn.18002c0e8
movzx eax, word [rsi + 0xa52]
sub eax, r12d
movsxd rdx, dword [r14]
test bl, al
jne 0x18002e576
xor r8d, r8d
test edx, edx
je 0x18002e51c
mov rax, qword [rdi + 0x20]
lea r9d, [r12 + 8]
cmp word [rax + rdx*2 - 2], r9w
mov cl, r8b
jne 0x18002e51e
mov cl, bl
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002e52a
test cl, cl
jne 0x18002e53a
mov edx, 0x20000c
mov rcx, rdi
call fcn.18002d3d0
mov edx, dword [r14]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002e55b
mov eax, dword [r14 + 8]
cmp dword [r14 + 4], eax
jne 0x18002e556
mov dword [r14 + 8], edx
mov dword [r14 + 4], edx
jmp 0x18002e55b
mov dword [r14], eax
mov edx, eax
mov rcx, rdi
call fcn.18002bcf8
mov dword [r14], eax
mov dword [rdi + 0x5c], eax
mov rdx, r14
mov rcx, rdi
call fcn.18002c2f0
jmp 0x18002e5ca
mov rcx, qword [rdi + 0x20]
movzx ebx, word [rcx + rdx*2]
mov edx, 0x200004
mov rcx, rdi
call fcn.18002d3d0
mov edx, 0x600005
mov rcx, rdi
call fcn.18002d3d0
mov edx, 0x600001
mov rcx, rdi
call fcn.18002d3d0
mov eax, 0xa
cmp bx, ax
je 0x18002e5c3
test r15b, r15b
je 0x18002e5c3
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x5c], ecx
mov dword [r14], ecx
mov byte [rdi + 0xe84], 0
mov dword [rdi + 0xe80], 0xbe99999a
lea rax, [rdi + 0xe85]
mov r14d, dword [rbp + 0x218]
xor r11d, r11d
jmp 0x18002e40e
lea rbx, [rdi + 0xe85]
mov cl, byte [rbx]
cmp byte [rsi + 0xa48], r11b
je 0x18002e635
test cl, cl
jne 0x18002e635
test al, al
je 0x18002e62d
lea rdx, [rdi + 0x54]
mov rcx, rdi
cmp byte [rsi + 0x121], r11b
je 0x18002e61b
call fcn.18002c148
jmp 0x18002e620
call fcn.18002c0e8
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
mov rax, rbx
jmp 0x18002e40e
mov rax, rbx
cmp byte [rsi + 0x110], r11b
je 0x18002e40e
test cl, cl
jne 0x18002e40e
movss xmm0, dword [rsi + 0xf8]
ucomiss xmm0, xmm15
jp 0x18002e671
jne 0x18002e671
movss xmm0, dword [rsi + 0xfc]
ucomiss xmm0, xmm15
jp 0x18002e671
je 0x18002e40e
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002c148
mov dword [rdi + 0xe80], 0xbe99999a
mov r12d, 1
mov byte [rdi + 0xe84], r12b
mov rax, rbx
xor r11d, r11d
jmp 0x18002e414
mov al, r11b
lea rbx, [rsi + 0xac0]
cmp dword [rbx], r11d
jle 0x18002e745
test al, al
jne 0x18002e71f
test cl, cl
jne 0x18002e71f
cmp byte [rsp + 0x52], r11b
jne 0x18002e71f
mov r15d, r11d
mov r14, r11
mov r13d, dword [rbp + 0x218]
mov rax, qword [rsi + 0xac8]
movzx ecx, word [rax + r14]
mov dword [rsp + 0x6c], ecx
cmp ecx, 9
je 0x18002e70b
mov dword [rsp + 0x20], 2
mov edx, r13d
lea rcx, [rsp + 0x6c]
call fcn.18002d3fc
xor r11d, r11d
test al, al
je 0x18002e70e
mov edx, dword [rsp + 0x6c]
mov rcx, rdi
call fcn.18002d3d0
xor r11d, r11d
add r15d, r12d
add r14, 2
cmp r15d, dword [rbx]
jl 0x18002e6ce
mov r13d, dword [rsp + 0x78]
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x18002e742
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r11d
test eax, eax
cmovg edx, eax
mov rcx, rbx
call fcn.18001c3bc
xor r11d, r11d
mov dword [rbx], r11d
mov r12b, r11b
mov byte [rsp + 0x51], r11b
lea rax, [0x1800a084a]
cmp dword [rsi + 0x1228], r13d
jne 0x18002f17f
cmp byte [rsi + 0x1234], r11b
jne 0x18002f17f
cmp byte [rsp + 0x5c], r11b
jne 0x18002f17f
movaps xmm0, xmm11
subss xmm0, dword [rsi + 0xb30]
divss xmm0, dword [rsi + 0xf28]
cvttss2si eax, xmm0
mov r12d, 1
mov ecx, r12d
cmp eax, r12d
cmovge ecx, eax
mov dword [rsp + 0x6c], ecx
mov dword [rdi + 0x64], ecx
mov al, byte [rsi + 0x121]
neg al
sbb ebx, ebx
and ebx, 0x400000
mov r15b, byte [rsp + 0x5e]
lea rcx, [rsi + 0x120]
mov qword [rsp + 0x70], rcx
mov qword [rbp - 0x30], rcx
test r15b, r15b
je 0x18002e810
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov r14b, byte [rax]
mov byte [rsp + 0x52], r14b
cmp byte [rsi + 0x123], r11b
je 0x18002e824
mov byte [rsp + 0x52], r14b
cmp byte [rcx], r11b
jne 0x18002e824
mov byte [rsp + 0x52], r14b
test r14b, r14b
jne 0x18002e824
mov byte [rsp + 0x54], r12b
mov byte [rsp + 0x52], r14b
jmp 0x18002e829
mov al, byte [rcx]
mov byte [rsp + 0x52], al
lea rax, [rsi + 0x122]
mov qword [rbp + 0x90], rax
mov byte [rsp + 0x54], r11b
mov r8d, r12d
mov edx, r13d
mov ecx, 0xa39
call fcn.180014e6c
xor ecx, ecx
test al, al
jne 0x18002e855
mov r8d, r12d
mov edx, r13d
mov ecx, 0x220a
call fcn.180014e6c
xor ecx, ecx
test al, al
je 0x18002e87d
mov r12d, dword [rsp + 0x64]
mov r14d, dword [rsp + 0x60]
test r12b, r12b
jne 0x18002e887
cmp byte [rbp - 0x50], cl
jne 0x18002e887
test r14b, r14b
je 0x18002e876
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002e887
mov byte [rsp + 0x68], 1
jmp 0x18002e88b
mov r14d, dword [rsp + 0x60]
mov r12d, dword [rsp + 0x64]
mov byte [rsp + 0x68], cl
xor r8d, r8d
mov edx, r13d
mov ecx, 0xa24
call fcn.180014e6c
test al, al
jne 0x18002e8b3
xor r8d, r8d
mov edx, r13d
mov ecx, 0x1209
call fcn.180014e6c
test al, al
je 0x18002e8d5
xor eax, eax
cmp byte [rbp - 0x50], al
jne 0x18002e8d5
test r14b, r14b
je 0x18002e8c7
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002e8d5
mov eax, 1
mov byte [rsp + 0x7d], al
xor r14d, r14d
jmp 0x18002e8e1
xor r14d, r14d
mov byte [rsp + 0x7d], r14b
lea eax, [r14 + 1]
mov r8d, eax
mov edx, r13d
mov ecx, 0xa37
call fcn.180014e6c
test al, al
jne 0x18002e90c
mov r8d, 1
mov edx, r13d
mov ecx, 0x2209
call fcn.180014e6c
test al, al
je 0x18002e91c
test r12b, r12b
jne 0x18002e91c
mov eax, 1
mov byte [rsp + 0x5f], al
jmp 0x18002e926
mov byte [rsp + 0x5f], r14b
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3b
call fcn.180014e6c
mov r14d, dword [rbp - 0x58]
test al, al
je 0x18002e953
test r12b, r12b
jne 0x18002e953
test r14b, r14b
je 0x18002e953
mov eax, 1
mov byte [rsp + 0x7c], al
jmp 0x18002e95d
mov byte [rsp + 0x7c], 0
mov eax, 1
mov r8d, eax
mov edx, r13d
mov ecx, 0xa3a
call fcn.180014e6c
test al, al
jne 0x18002e992
test r15b, r15b
je 0x18002e9aa
mov r8d, 1
mov edx, r13d
mov ecx, 0x2a3b
call fcn.180014e6c
xor r15d, r15d
test al, al
je 0x18002e9ad
jmp 0x18002e995
xor r15d, r15d
test r12b, r12b
jne 0x18002e9ad
test r14b, r14b
je 0x18002e9ad
mov r12d, 1
mov r13b, r12b
jmp 0x18002e9b6
xor r15d, r15d
mov r13b, r15b
mov r12d, 1
xor r8d, r8d
mov edx, dword [rsp + 0x78]
mov ecx, 0xa22
call fcn.180014e6c
mov byte [rbp - 0x80], al
test byte [rsi + 8], 2
je 0x18002e9d9
test byte [rsi + 0xc], r12b
mov r14b, r12b
jne 0x18002e9dc
mov r14b, r15b
mov r8d, r12d
xor edx, edx
mov ecx, 0x20d
call fcn.180013a98
test al, al
jne 0x18002ea05
mov r8d, r12d
xor edx, edx
mov ecx, 0x267
call fcn.180013a98
test al, al
jne 0x18002ea05
mov r12b, r15b
test r14b, r14b
je 0x18002ea3a
xor r8d, r8d
xor edx, edx
mov ecx, 0x26e
call fcn.180013a98
test al, al
jne 0x18002ea30
xor r8d, r8d
xor edx, edx
mov ecx, 0x26d
call fcn.180013a98
test al, al
je 0x18002ea3a
mov eax, 1
mov r15b, al
jmp 0x18002ea3f
mov eax, 1
mov r8d, eax
mov edx, dword [rsp + 0x78]
mov ecx, 0x20e
call fcn.180014e6c
xor ecx, ecx
test al, al
jne 0x18002ea7d
test r14b, r14b
je 0x18002ea73
lea r8d, [rcx + 1]
mov edx, dword [rsp + 0x78]
mov ecx, 0x26c
call fcn.180014e6c
xor ecx, ecx
test al, al
jne 0x18002ea7d
mov r14b, cl
mov eax, 1
jmp 0x18002ea85
mov eax, 1
mov r14b, al
mov r8d, eax
xor edx, edx
mov ecx, 0x201
call fcn.180013a98
xor ecx, ecx
test al, al
je 0x18002eacd
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200000
mov eax, 0x200004
cmp byte [rsp + 0x54], cl
cmovne edx, eax
or edx, ebx
mov rcx, rdi
call fcn.18002d3d0
xor r11d, r11d
mov r9d, 1
jmp 0x18002f14e
xor edx, edx
mov ecx, 0x202
lea r8d, [rdx + 1]
call fcn.180013a98
xor ecx, ecx
test al, al
je 0x18002eaf9
neg byte [rsp + 0x52]
sbb edx, edx
and edx, 0xc
add edx, 0x200001
mov eax, 0x200005
jmp 0x18002eaae
xor edx, edx
mov ecx, 0x203
lea r8d, [rdx + 1]
call fcn.180013a98
xor r11d, r11d
test al, al
je 0x18002eb65
cmp byte [rsp + 0x60], r11b
je 0x18002eb65
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002eb54
mov rdx, qword [rbp - 0x48]
movss xmm0, dword [rdx + 0x88]
subss xmm0, dword [rsi + 0xf28]
maxss xmm0, xmm15
movss dword [rdx + 0x98], xmm0
mov dword [rdx + 0xa0], r11d
mov dword [rdx + 0xa8], r11d
jmp 0x18002eac2
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200002]
jmp 0x18002eab5
xor edx, edx
mov ecx, 0x204
lea r8d, [rdx + 1]
call fcn.180013a98
xor r11d, r11d
test al, al
je 0x18002ebe2
cmp byte [rsp + 0x60], r11b
je 0x18002ebe2
mov rax, qword [rbp - 0x30]
cmp byte [rax], r11b
je 0x18002ebd1
mov rax, qword [0x18011dcc0]
mov rcx, qword [rax + 0x11c8]
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
addss xmm0, dword [rsi + 0xf28]
minss xmm0, dword [rcx + 0x90]
movss dword [rax + 0x98], xmm0
mov dword [rax + 0xa0], r11d
mov dword [rax + 0xa8], r11d
jmp 0x18002eac2
movzx eax, byte [rsp + 0x54]
lea edx, [rax*4 + 0x200003]
jmp 0x18002eab5
xor edx, edx
mov ecx, 0x205
lea r8d, [rdx + 1]
call fcn.180013a98
xor ecx, ecx
test al, al
je 0x18002ec28
cmp byte [rsp + 0x60], cl
je 0x18002ec28
or ebx, 0x20000e
mov edx, ebx
mov rcx, rdi
call fcn.18002d3d0
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
subss xmm6, xmm0
jmp 0x18002eabf
xor edx, edx
mov ecx, 0x206
lea r8d, [rdx + 1]
call fcn.180013a98
xor ecx, ecx
test al, al
je 0x18002ec6e
cmp byte [rsp + 0x60], cl
je 0x18002ec6e
or ebx, 0x20000f
mov edx, ebx
mov rcx, rdi
call fcn.18002d3d0
movd xmm0, dword [rsp + 0x6c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rsi + 0xf28]
addss xmm6, xmm0
jmp 0x18002eabf
xor edx, edx
mov ecx, 0x207
lea r8d, [rdx + 1]
call fcn.180013a98
test al, al
je 0x18002ec9b
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200004
sbb edx, edx
and edx, 2
add edx, eax
jmp 0x18002eab5
xor edx, edx
mov ecx, 0x208
lea r8d, [rdx + 1]
call fcn.180013a98
test al, al
je 0x18002ecbe
mov rax, qword [rbp - 0x30]
mov al, byte [rax]
neg al
mov eax, 0x200005
jmp 0x18002ec8f
xor edx, edx
mov ecx, 0x20a
lea r8d, [rdx + 1]
call fcn.180013a98
xor ecx, ecx
test al, al
je 0x18002ed08
cmp byte [rsp + 0x64], cl
jne 0x18002ed08
cmp byte [rsp + 0x68], cl
jne 0x18002ed08
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ecfb
cmp byte [rsp + 0x52], cl
je 0x18002ecfb
mov edx, 0x60000d
mov rcx, rdi
call fcn.18002d3d0
or ebx, 0x200008
mov edx, ebx
jmp 0x18002eab7
xor edx, edx
mov ecx, 0x20b
lea r8d, [rdx + 1]
call fcn.180013a98
xor r11d, r11d
mov r8d, dword [rsp + 0x64]
test al, al
je 0x18002ed7a
test r8b, r8b
jne 0x18002ed7a
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
jne 0x18002ed72
cmp byte [rsp + 0x52], r11b
je 0x18002ed3f
mov edx, 0x60000c
jmp 0x18002ed6a
cmp byte [rsp + 0x5e], r11b
je 0x18002ed72
cmp byte [rsi + 0x123], r11b
je 0x18002ed72
mov rax, qword [rbp + 0x90]
cmp byte [rax], r11b
jne 0x18002ed72
mov rax, qword [rsp + 0x70]
cmp byte [rax], r11b
jne 0x18002ed72
mov edx, 0x600004
mov rcx, rdi
call fcn.18002d3d0
or ebx, 0x200009
jmp 0x18002ed01
test r12b, r12b
jne 0x18002f0bf
test r15b, r15b
jne 0x18002f0bf
test r14b, r14b
je 0x18002ede9
test dword [rbp + 0x218], 0x100000
je 0x18002edc7
mov eax, dword [rdi + 0x10]
test eax, eax
jg 0x18002edb3
mov byte [rsp + 0x58], r11b
mov byte [rsp + 0x50], r11b
mov byte [rsp + 0x5c], 1
setg r12b
mov byte [rsp + 0x51], r12b
mov r9d, 1
jmp 0x18002f153
mov r9d, 1
mov r12b, r9b
mov byte [rsp + 0x51], r9b
mov byte [rsp + 0x5c], r9b
mov cl, r11b
mov dl, r11b
mov byte [rsp + 0x50], dl
jmp 0x18002f15b
movzx eax, byte [rsp + 0x7c]
test al, al
jne 0x18002f09e
test r13b, r13b
jne 0x18002f09e
cmp byte [rbp - 0x80], r11b
je 0x18002ee28
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
jmp 0x18002f14e
mov r13b, byte [rsp + 0x68]
test r13b, r13b
jne 0x18002efa2
cmp byte [rsp + 0x7d], r11b
jne 0x18002efa2
cmp byte [rsp + 0x5f], r11b
je 0x18002eac2
mov rax, qword [0x18011dcc0]
mov rdx, qword [rax + 0xb0]
test rdx, rdx
je 0x18002ee80
mov rcx, qword [rax + 0xc0]
call rdx
mov rbx, rax
xor r11d, r11d
test rax, rax
je 0x18002eac2
mov rax, qword [0x18011dcc0]
jmp 0x18002ee87
lea rbx, [0x1800a084a]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r11b
jne 0x18002ee8b
test rax, rax
je 0x18002eea6
mov r9d, 1
add dword [rax + 0xf4], r9d
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x90], rax
xor r13d, r13d
mov r14d, r13d
cmp byte [rbx], r13b
je 0x18002ef26
mov r12, rax
mov esi, dword [rbp + 0x218]
lea r15d, [r13 + 1]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x6c]
call fcn.1800084f4
movsxd rcx, eax
add rbx, rcx
mov dword [rsp + 0x20], 4
mov edx, esi
lea rcx, [rsp + 0x6c]
call fcn.18002d3fc
test al, al
je 0x18002ef16
movzx eax, word [rsp + 0x6c]
mov word [r12], ax
add r14d, r15d
add r12, 2
cmp byte [rbx], r13b
jne 0x18002eed7
mov rsi, qword [rbp - 0x68]
mov r15, qword [rbp + 0x90]
movsxd rax, r14d
mov word [r15 + rax*2], r13w
test r14d, r14d
jle 0x18002ef7d
lea rbx, [rdi + 0x54]
mov rdx, rbx
mov rcx, rdi
call fcn.18002c2f0
mov rcx, rdi
call fcn.18002c3ac
mov r9d, r14d
mov r8, r15
mov edx, dword [rbx]
mov rcx, rdi
call fcn.18002be60
test al, al
je 0x18002ef76
lea rcx, [rbx + 0x20]
mov r9d, r14d
xor r8d, r8d
mov edx, dword [rbx]
call fcn.18002ced8
add dword [rbx], r14d
mov byte [rbx + 0x16], r13b
mov byte [rdi + 0xe84], 1
test r15, r15
je 0x18002ef94
mov rax, qword [0x18011dcc0]
test rax, rax
je 0x18002ef94
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002eabf
cmp qword [rsi + 0xb8], r11
je 0x18002f049
mov ecx, dword [rdi + 0x58]
mov eax, dword [rdi + 0x5c]
cmp ecx, eax
je 0x18002efc3
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18002efc9
mov edx, r11d
mov eax, dword [rdi + 0xc]
movsxd r15, eax
mov rax, qword [rdi + 0x20]
movsxd r12, edx
lea rdx, [rax + r15*2]
lea rcx, [rax + r12*2]
call fcn.1800088f4
mov ecx, 1
lea r14d, [rcx + rax]
mov rax, qword [0x18011dcc0]
test rax, rax
je 0x18002effb
add dword [rax + 0xf4], ecx
movsxd rcx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea r9, [rcx + r15*2]
lea r8, [rcx + r12*2]
mov edx, r14d
mov rcx, rax
call fcn.180008854
mov rcx, rbx
call fcn.18000b4ec
test rbx, rbx
je 0x18002f03d
mov rcx, qword [0x18011dcc0]
test rcx, rcx
je 0x18002f03d
dec dword [rcx + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r11d, r11d
test r13b, r13b
je 0x18002eac2
mov eax, dword [rdi + 0x5c]
lea rbx, [rdi + 0x54]
cmp dword [rdi + 0x58], eax
jne 0x18002f06e
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rbx], eax
mov byte [rdi + 0x6a], r11b
mov r9d, 1
mov byte [rdi + 0xe84], r9b
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x18002f14e
mov rdx, rbx
mov rcx, rdi
call fcn.18002c3ac
xor r11d, r11d
mov byte [rbx + 0x16], r11b
jmp 0x18002eac2
mov edx, eax
xor edx, 1
add edx, 0x20000a
mov rcx, rdi
call fcn.18002d3d0
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x58], eax
jmp 0x18002eabf
mov edx, dword [rbp + 0x218]
mov eax, edx
shr eax, 0xb
mov r9d, 1
and al, r9b
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x18002f0ee
test r15b, r15b
jne 0x18002f0ee
test al, al
mov rax, qword [rsp + 0x70]
je 0x18002f110
cmp byte [rax], r11b
jne 0x18002f115
mov byte [rsp + 0x5d], r9b
cmp byte [rsi + 0x7c], r11b
je 0x18002f149
test cl, cl
jne 0x18002f149
mov dword [rdi + 0x58], r11d
mov eax, dword [rdi + 0xc]
mov dword [rdi + 0x5c], eax
mov dword [rdi + 0x54], eax
mov byte [rdi + 0x6a], r11b
jmp 0x18002f14e
cmp byte [rax], r11b
jne 0x18002f0ee
test r8b, r8b
jne 0x18002f14e
mov eax, 0xa
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x6c]
call fcn.18002d3fc
xor r11d, r11d
test al, al
je 0x18002eac2
mov edx, dword [rsp + 0x6c]
jmp 0x18002eab7
mov byte [rsp + 0x5c], r9b
mov r12b, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x58]
mov dl, byte [rsp + 0x50]
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
je 0x18002f16a
test dl, dl
mov al, r9b
jne 0x18002f16d
mov al, r11b
or cl, al
mov dword [rsp + 0x58], ecx
mov r13d, dword [rsp + 0x78]
lea rax, [0x1800a084a]
mov qword [rbp - 0x58], r11
mov r14d, r11d
cmp dword [rsi + 0x1228], r13d
jne 0x18002f70f
test r12b, r12b
je 0x18002f318
cmp byte [rsp + 0x64], r11b
jne 0x18002f381
test dword [rbp + 0x218], 0x100000
je 0x18002f1ed
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x20], r11d
mov r9d, dword [rdi + 0xc]
xor r8d, r8d
lea rdx, [rdi + 0x54]
mov rcx, rdi
call fcn.18002d2e0
mov r8d, dword [rdi + 0xc]
xor edx, edx
mov rcx, rdi
call fcn.18002bdd4
xor r11d, r11d
mov qword [rdi + 0x58], r11
mov dword [rdi + 0x54], r11d
jmp 0x18002f327
mov rax, qword [rbp - 0x78]
mov r8, qword [rdi + 0x40]
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002f211
add rax, r9
test ecx, ecx
jne 0x18002f1fe
test edx, edx
je 0x18002f327
mov r12, qword [rdi + 0x40]
mov qword [rbp - 0x58], r12
mov r14d, dword [rdi + 0x38]
sub r14d, r9d
mov dword [rbp + 0x94], r11d
mov ebx, r11d
mov dword [rbp + 0x90], ebx
mov r15, r11
mov qword [rbp + 0x98], r11
test r14d, r14d
jle 0x18002f2d3
movsxd r13, r14d
add r13, r12
mov rdx, r13
mov rcx, r12
call fcn.180008734
mov edx, 1
lea ebx, [rdx + rax]
xor ecx, ecx
test ebx, ebx
jle 0x18002f2b0
mov r12d, ebx
lea eax, [rdx + 7]
cmp ebx, eax
cmovl r12d, eax
test r12d, r12d
jle 0x18002f2ac
mov rax, qword [0x18011dcc0]
test rax, rax
je 0x18002f28d
add dword [rax + 0xf4], edx
movsxd rcx, r12d
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x94], r12d
xor ecx, ecx
mov r12, qword [rbp - 0x58]
mov dword [rbp + 0x90], ebx
mov qword [rsp + 0x20], rcx
mov r9, r13
mov r8, r12
mov edx, ebx
mov rcx, r15
call fcn.180008694
mov r13d, dword [rsp + 0x78]
xor r11d, r11d
lea eax, [rbx - 1]
mov r9d, r11d
test r14d, r14d
cmovg r9d, eax
lea rdx, [rdi + 0x54]
mov r8, r15
mov rcx, rdi
call fcn.18002d34c
nop
test r15, r15
je 0x18002f311
mov rax, qword [0x18011dcc0]
test rax, rax
je 0x18002f307
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov r12b, byte [rsp + 0x51]
jmp 0x18002f327
mov qword [rbp - 0x58], r11
cmp byte [rsp + 0x64], r11b
jne 0x18002f418
mov byte [rdi + 0x48], 1
mov eax, dword [rdi + 0x18]
lea ebx, [rax*4 + 1]
mov ecx, dword [rdi + 0x2c]
cmp ebx, ecx
jle 0x18002f360
test ecx, ecx
je 0x18002f34b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002f350
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rdi + 0x28]
call fcn.18001c294
mov dword [rdi + 0x28], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x20]
mov edx, ebx
mov rcx, qword [rdi + 0x30]
call fcn.180008854
xor r11d, r11d
test r12b, r12b
je 0x18002f418
cmp byte [rsp + 0x5d], r11b
je 0x18002f399
mov r12d, dword [rbp + 0x218]
test r12b, 0x20
jne 0x18002f41f
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
mov r15, qword [rbp - 0x58]
test r15, r15
je 0x18002f70a
test r13b, r13b
je 0x18002f6c7
mov qword [rbp + 0x58], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x40], rsi
mov dword [rbp + 0x48], 0x40000
mov eax, dword [rbp + 0x218]
mov dword [rbp + 0x4c], eax
mov qword [rbp + 0x60], r12
mov dword [rbp + 0x68], r14d
lea eax, [r14 + 1]
cmp dword [rbp - 0x60], eax
cmovge eax, dword [rbp - 0x60]
mov dword [rbp + 0x6c], eax
mov qword [rbp + 0x50], r11
lea rcx, [rbp + 0x40]
call r11
mov r12, qword [rbp + 0x60]
mov qword [rbp - 0x78], r12
mov ecx, dword [rbp + 0x6c]
lea r14d, [rcx - 1]
cmp dword [rbp + 0x68], r14d
cmovl r14d, dword [rbp + 0x68]
xor r11d, r11d
jmp 0x18002f6ca
mov r12d, dword [rbp + 0x218]
test r12d, 0x801c0
je 0x18002f67c
mov r15d, r11d
mov ebx, 0x40
test bl, r12b
je 0x18002f454
xor r8d, r8d
mov edx, r13d
mov r13d, 0x200
mov ecx, r13d
call fcn.180014e6c
xor r11d, r11d
test al, al
jne 0x18002f497
test r12b, r12b
jns 0x18002f49c
mov ebx, 1
mov r8d, ebx
xor edx, edx
mov r13d, 0x203
mov ecx, r13d
call fcn.180013a98
xor r11d, r11d
test al, al
jne 0x18002f492
mov r8d, ebx
xor edx, edx
mov r13d, 0x204
mov ecx, r13d
call fcn.180013a98
xor r11d, r11d
test al, al
je 0x18002f49c
mov ebx, 0x80
mov r15d, r13d
jmp 0x18002f4bd
mov ebx, 0x80000
test ebx, r12d
je 0x18002f4af
cmp byte [rdi + 0xe86], r11b
jne 0x18002f4bd
mov eax, pe_nt_image_headers64
test eax, r12d
mov ebx, r11d
cmovne ebx, eax
test ebx, ebx
je 0x18002f67c
mov dword [rbp + 0x18], r11d
mov word [rbp + 0x31], r11w
mov byte [rbp + 0x33], r11b
mov qword [rbp], rsi
mov dword [rbp + 8], ebx
mov dword [rbp + 0xc], r12d
mov qword [rbp + 0x10], r11
cmp byte [rsp + 0x64], r11b
mov rax, qword [rbp - 0x78]
jne 0x18002f4f0
mov rax, qword [rdi + 0x30]
mov dword [rbp + 0x1c], r15d
mov qword [rbp + 0x20], rax
mov eax, dword [rdi + 0x10]
mov dword [rbp + 0x28], eax
mov eax, dword [rdi + 0x4c]
mov dword [rbp + 0x2c], eax
mov byte [rbp + 0x30], r11b
mov r11, qword [rdi + 0x20]
movsxd rax, dword [rdi + 0x54]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.1800088f4
mov ebx, eax
mov dword [rbp + 0x34], eax
movsxd rdx, dword [rdi + 0x58]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.1800088f4
mov r12d, eax
mov dword [rbp + 0x38], eax
movsxd rdx, dword [rdi + 0x5c]
lea rdx, [r11 + rdx*2]
mov rcx, r11
call fcn.1800088f4
mov r13d, eax
mov dword [rbp + 0x3c], eax
lea rcx, [rbp]
xor eax, eax
call rax
mov r15b, byte [rbp + 0x30]
movsxd rcx, dword [rbp + 0x34]
cmp ecx, ebx
jne 0x18002f569
xor r11d, r11d
test r15b, r15b
je 0x18002f588
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.180008734
mov dword [rdi + 0x54], eax
mov byte [rdi + 0xe84], 1
mov ecx, dword [rbp + 0x34]
xor r11d, r11d
movsxd rax, dword [rbp + 0x38]
cmp eax, r12d
jne 0x18002f596
test r15b, r15b
je 0x18002f5b7
cmp eax, ecx
jne 0x18002f59f
mov ecx, dword [rdi + 0x54]
jmp 0x18002f5b1
mov rcx, qword [rbp + 0x20]
lea rdx, [rcx + rax]
call fcn.180008734
mov ecx, eax
mov eax, dword [rbp + 0x38]
mov dword [rdi + 0x58], ecx
xor r11d, r11d
movsxd rcx, dword [rbp + 0x3c]
cmp ecx, r13d
jne 0x18002f5c9
test r15b, r15b
je 0x18002f67c
cmp ecx, eax
jne 0x18002f5d2
mov eax, dword [rdi + 0x58]
jmp 0x18002f5e4
mov rdx, rcx
mov rcx, qword [rbp + 0x20]
add rdx, rcx
call fcn.180008734
xor r11d, r11d
mov dword [rdi + 0x5c], eax
test r15b, r15b
je 0x18002f67c
mov r8d, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
mov rcx, rdi
call fcn.18002d5e4
mov ebx, dword [rbp + 0x28]
mov eax, dword [rbp - 0x4c]
mov r13d, dword [rbp - 0x70]
cmp ebx, eax
jle 0x18002f64a
test r13b, r13b
je 0x18002f64a
lea r15, [rdi + 0x18]
sub ebx, eax
add ebx, dword [r15]
mov ecx, dword [r15 + 4]
cmp ebx, ecx
jle 0x18002f647
test ecx, ecx
je 0x18002f633
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002f638
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
mov rcx, r15
call fcn.18001c3bc
mov dword [r15], ebx
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, qword [rbp + 0x20]
mov edx, dword [rdi + 0x18]
mov rcx, qword [rdi + 0x20]
call fcn.180008694
mov dword [rdi + 0xc], eax
mov eax, dword [rbp + 0x28]
mov dword [rdi + 0x10], eax
mov dword [rdi + 0xe80], 0xbe99999a
xor r11d, r11d
jmp 0x18002f680
mov r13d, dword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
cmp byte [rsp + 0x64], r11b
jne 0x18002f3a1
mov rax, qword [rdi + 0x30]
mov r8, r12
sub r8, rax
mov r9d, 1
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002f6b2
add rax, r9
test ecx, ecx
jne 0x18002f69f
test edx, edx
je 0x18002f3a1
mov r15, qword [rdi + 0x30]
mov r14d, dword [rdi + 0x10]
jmp 0x18002f3a5
mov ecx, dword [rbp - 0x60]
lea eax, [r14 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
mov eax, 1
cmp rbx, rax
jb 0x18002f6fa
jbe 0x18002f6f5
lea r8, [rbx - 1]
mov rdx, r15
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r11d, r11d
mov byte [r12 + rbx - 1], r11b
mov ebx, 1
mov byte [rsp + 0x7f], bl
mov r13d, dword [rsp + 0x78]
jmp 0x18002f714
mov r13d, dword [rsp + 0x78]
mov ebx, 1
cmp byte [rsp + 0x5c], r11b
je 0x18002f730
cmp dword [rsi + 0x1228], r13d
jne 0x18002f730
xor edx, edx
xor ecx, ecx
call fcn.18000afb8
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
jne 0x18002f7b1
mov r8d, ebx
mov edx, r13d
lea rcx, [rbp + 0x80]
call fcn.180009594
mov rax, qword [0x18011dcc0]
movdqu xmm0, xmmword [rax + 0xc3c]
movups xmmword [rbp + 0x90], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp + 0x9c], xmm0
lea rcx, [rbp + 0x90]
call fcn.18000893c
mov r8d, eax
movss xmm5, dword [rsi + 0xb34]
movss dword [rsp + 0x20], xmm5
mov r9b, bl
mov rdx, qword [rbp + 0x88]
movaps xmm0, xmm7
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.18000941c
xor r11d, r11d
movss dword [rbp + 0xa8], xmm7
movss dword [rbp + 0xac], xmm9
movaps xmm0, xmm7
addss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
movaps xmm1, xmm9
addss xmm1, xmm11
movss dword [rbp + 0xb4], xmm1
mov r10, qword [rbp - 0x48]
lea rax, [rbp + 0x90]
test r12b, r12b
je 0x18002f806
movsd xmm0, qword [r10 + 0x100]
movsd qword [rbp + 0x90], xmm0
jmp 0x18002f82a
addss xmm7, dword [rsi + 0xb2c]
movss dword [rbp + 0x90], xmm7
movaps xmm0, xmm9
addss xmm0, dword [rsi + 0xb30]
movss dword [rbp + 0x94], xmm0
movsd xmm0, qword [rax]
movsd qword [rbp + 0xa0], xmm0
movaps xmm14, xmm15
movaps xmm8, xmm15
cmp byte [rsp + 0x7e], r11b
je 0x18002f84f
mov r15, qword [rdi + 0x30]
mov qword [rbp - 0x78], r15
jmp 0x18002f853
mov r15, qword [rbp - 0x78]
mov r14, r11
mov qword [rbp - 0x30], r11
movzx r9d, byte [rsp + 0x53]
test r9b, r9b
je 0x18002f884
mov rax, qword [rbp - 0x18]
mov r15, rax
mov qword [rbp - 0x78], rax
or r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], r11b
jne 0x18002f874
add r14, rax
mov qword [rbp - 0x30], r14
mov r11b, byte [rsp + 0x50]
mov r8d, dword [rsp + 0x58]
test r11b, r11b
jne 0x18002f9c1
test r8b, r8b
jne 0x18002f9c1
xor r11d, r11d
test r12b, r12b
je 0x18002f8fc
mov ecx, r11d
mov dl, byte [r15]
lea r14, [r15 + 1]
test dl, dl
je 0x18002f8cf
lea r8d, [r11 + 0xa]
lea eax, [rcx + 1]
cmp dl, r8b
cmovne eax, ecx
mov ecx, eax
mov dl, byte [r14]
add r14, rbx
test dl, dl
jne 0x18002f8ba
sub r14, rbx
mov eax, 0xa
cmp byte [r14], al
je 0x18002f8e4
cmp byte [r14], 0xd
je 0x18002f8e4
add ecx, ebx
movaps xmm14, xmm10
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [rsi + 0xf28]
jmp 0x18002f932
test r9b, r9b
jne 0x18002f920
cmp dword [rsi + 0x1228], r13d
jne 0x18002f910
movsxd r14, dword [rdi + 0x10]
jmp 0x18002f91d
or r14, 0xffffffffffffffff
inc r14
cmp byte [r15 + r14], r11b
jne 0x18002f914
add r14, r15
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x1800301b8
mov rcx, qword [0x18011dcc0]
mov rax, r9
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.18000893c
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xa0]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rcx, qword [r10 + 0x298]
call fcn.180020a4c
xor r11d, r11d
jmp 0x1800301b3
xor r10d, r10d
test r9b, r9b
jne 0x18002f9d4
movsxd r14, dword [rdi + 0x10]
add r14, r15
mov qword [rbp - 0x30], r14
mov r15, qword [rdi + 0x20]
movaps xmm5, xmm15
movaps xmm9, xmm15
mov r9, r10
mov r13, r10
mov edx, 0xfffffc18
mov r12d, edx
mov ecx, r10d
test r11b, r11b
je 0x18002fa03
movsxd rax, dword [rdi + 0x54]
lea r9, [r15 + rax*2]
or edx, 0xffffffff
mov ecx, ebx
test r8b, r8b
je 0x18002fa1e
mov eax, dword [rdi + 0x5c]
cmp dword [rdi + 0x58], eax
cmovl eax, dword [rdi + 0x58]
cdqe
lea r13, [r15 + rax*2]
or r12d, 0xffffffff
add ecx, ebx
movzx eax, byte [rsp + 0x60]
add ecx, eax
mov ebx, r10d
mov rax, r15
movzx r8d, word [r15]
mov r11d, 0xa
test r8w, r8w
je 0x18002fa7f
lea esi, [r11 - 9]
cmp r8w, r11w
jne 0x18002fa6d
add ebx, esi
cmp edx, 0xffffffff
jne 0x18002fa59
cmp rax, r9
jb 0x18002fa59
mov edx, ebx
sub ecx, esi
test ecx, ecx
jle 0x18002fa7b
cmp r12d, 0xffffffff
jne 0x18002fa6d
cmp rax, r13
jb 0x18002fa6d
mov r12d, ebx
sub ecx, esi
test ecx, ecx
jle 0x18002fa7b
add rax, 2
movzx r8d, word [rax]
test r8w, r8w
jne 0x18002fa3f
mov rsi, qword [rbp - 0x68]
inc ebx
mov eax, ebx
cmp edx, 0xffffffff
cmovne eax, edx
mov dword [rbp - 0x4c], eax
cmp r12d, 0xffffffff
cmove r12d, ebx
mov r8, r9
cmp r9, r15
jbe 0x18002faae
lea rax, [r8 - 2]
cmp word [rax], r11w
je 0x18002faae
mov r8, rax
cmp rax, r15
ja 0x18002fa9c
mov byte [rsp + 0x30], r10b
mov qword [rsp + 0x20], r10
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.18002bac8
movss xmm7, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm12, dword [rbp - 0x4c]
cvtdq2ps xmm12, xmm12
mulss xmm12, xmm0
xor r11d, r11d
test r12d, r12d
js 0x18002fb3d
mov r8, r13
cmp r13, r15
jbe 0x18002fb04
lea ecx, [r11 + 0xa]
lea rax, [r8 - 2]
cmp word [rax], cx
je 0x18002fb04
mov r8, rax
cmp rax, r15
ja 0x18002faf3
mov byte [rsp + 0x30], r11b
mov qword [rsp + 0x20], r11
mov r9, r13
mov rdx, rsi
lea rcx, [rbp + 0x90]
call fcn.18002bac8
movss xmm5, dword [rax]
movss xmm0, dword [rsi + 0xf28]
movd xmm9, r12d
cvtdq2ps xmm9, xmm9
mulss xmm9, xmm0
xor r11d, r11d
mov r12d, dword [rsp + 0x60]
test r12b, r12b
je 0x18002fb59
movaps xmm14, xmm10
movd xmm8, ebx
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm0
mov r13b, byte [rsp + 0x50]
test r13b, r13b
je 0x18002fc84
cmp byte [rdi + 0xe84], r11b
je 0x18002fc84
test dword [rbp + 0x218], 0x1000
jne 0x18002fbd0
movaps xmm0, xmm10
mulss xmm0, dword [0x180113098]
subss xmm10, dword [rsi + 0xb2c]
movss xmm2, dword [rdi + 0x50]
movaps xmm1, xmm7
comiss xmm2, xmm7
jbe 0x18002fbb0
subss xmm1, xmm0
movaps xmm0, xmm15
maxss xmm0, xmm1
jmp 0x18002fbbe
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x18002fbd4
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x50], xmm0
jmp 0x18002fbd4
mov dword [rdi + 0x50], r11d
test r12b, r12b
je 0x18002fc7d
movaps xmm0, xmm12
subss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
jbe 0x18002fbf8
movaps xmm6, xmm15
maxss xmm6, xmm0
jmp 0x18002fc26
movss xmm2, dword [rsi + 0xb30]
addss xmm2, xmm2
movaps xmm1, xmm11
subss xmm1, xmm2
movaps xmm0, xmm12
subss xmm0, xmm1
comiss xmm0, xmm6
jb 0x18002fc26
movaps xmm6, xmm12
subss xmm6, xmm11
addss xmm6, xmm2
movss xmm2, dword [rsi + 0xb30]
comiss xmm15, xmm6
jbe 0x18002fc3a
movaps xmm2, xmm15
jmp 0x18002fc51
addss xmm2, xmm2
addss xmm2, xmm8
subss xmm2, xmm11
maxss xmm2, xmm15
minss xmm2, xmm6
mov rax, qword [rbp - 0x48]
movss xmm0, dword [rax + 0x88]
subss xmm0, xmm2
movss xmm1, dword [rbp + 0xa4]
addss xmm1, xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rax + 0x88], xmm2
mov byte [rdi + 0xe84], r11b
movss xmm10, dword [rdi + 0x50]
movss xmm11, dword [0x1801130dc]
cmp byte [rsp + 0x58], r11b
je 0x18002ff2e
mov edx, dword [rdi + 0x5c]
mov ecx, dword [rdi + 0x58]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea r8, [r15 + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rbx, [r15 + rax*2]
test r13b, r13b
je 0x18002fcc6
movaps xmm1, xmm11
jmp 0x18002fcce
movss xmm1, dword [0x1801130ac]
mov rax, qword [0x18011dcc0]
movdqu xmm0, xmmword [rax + 0xebc]
movups xmmword [rbp + 0x80], xmm0
mulss xmm1, dword [rax + 0xaf0]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x8c], xmm0
lea rcx, [rbp + 0x80]
call fcn.18000893c
mov r15d, eax
test r12b, r12b
je 0x18002fd1c
movss dword [rbp - 0x40], xmm15
movaps xmm13, xmm15
jmp 0x18002fd25
movss xmm13, dword [0x180113100]
addss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
movss xmm6, dword [rbp + 0xa4]
addss xmm6, xmm9
subss xmm6, xmm15
mov qword [rsp + 0x70], r8
cmp r8, rbx
jae 0x18002ff28
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r12, qword [rbp - 0x48]
xor r13d, r13d
movaps xmm0, xmm3
addss xmm0, dword [rsi + 0xf28]
comiss xmm6, xmm0
ja 0x18002ff0e
comiss xmm4, xmm6
jbe 0x18002fdb6
cmp r8, rbx
jae 0x18002fef0
mov ecx, 0xa
movzx eax, word [r8]
add r8, 2
mov qword [rsp + 0x70], r8
cmp ax, cx
je 0x18002fef0
cmp r8, rbx
jb 0x18002fd96
jmp 0x18002fef0
mov byte [rsp + 0x30], 1
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rdx, rsi
lea rcx, [rbp - 0x68]
call fcn.18002bac8
movss xmm0, dword [rbp - 0x68]
comiss xmm15, xmm0
jb 0x18002fe16
mov rax, qword [rsi + 0xf20]
cmp dword [rax], 0x20
jle 0x18002fdf9
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18002fdfe
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1801130a8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x68], xmm0
movaps xmm2, xmm5
addss xmm2, xmm0
movaps xmm0, xmm13
addss xmm0, xmm6
addss xmm5, xmm15
movaps xmm1, xmm11
subss xmm1, dword [rsi + 0xf28]
addss xmm1, xmm6
maxss xmm5, dword [rbp + 0xa8]
movss xmm4, dword [rbp + 0xac]
maxss xmm1, xmm4
movss dword [rbp + 0x80], xmm5
movss dword [rbp + 0x84], xmm1
movss xmm9, dword [rbp + 0xb0]
minss xmm2, xmm9
movss xmm3, dword [rbp + 0xb4]
minss xmm0, xmm3
movss dword [rbp + 0x88], xmm2
movss dword [rbp + 0x8c], xmm0
comiss xmm0, xmm4
jbe 0x18002feeb
comiss xmm3, xmm1
jbe 0x18002feeb
comiss xmm2, dword [rbp + 0xa8]
jbe 0x18002feeb
comiss xmm9, xmm5
jbe 0x18002feeb
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm15
mov r9d, r15d
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x80]
mov rcx, qword [r12 + 0x298]
call fcn.180020630
movss xmm1, dword [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
movss xmm3, dword [rbp + 0xb4]
movss xmm4, dword [rbp + 0xac]
movss xmm11, dword [rbp - 0x40]
mov r8, qword [rsp + 0x70]
movss xmm5, dword [rbp + 0xa0]
subss xmm5, xmm10
addss xmm6, dword [rsi + 0xf28]
cmp r8, rbx
jb 0x18002fd6f
movss xmm11, dword [0x1801130dc]
mov r14, qword [rbp - 0x30]
mov r12d, dword [rsp + 0x60]
mov r13b, byte [rsp + 0x50]
xor r11d, r11d
movss xmm13, dword [rbp - 0x28]
mov r15, qword [rbp - 0x78]
test r12b, r12b
jne 0x18002ff49
mov rax, r14
sub rax, r15
cmp rax, 0x200000
jge 0x18002fffc
mov rcx, qword [0x18011dcc0]
movzx eax, byte [rsp + 0x53]
add rax, rax
movdqu xmm0, xmmword [rcx + rax*8 + 0xbcc]
movups xmmword [rbp + 0x80], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0xaf0]
movss dword [rbp + 0x8c], xmm0
movss xmm0, dword [rbp + 0xa0]
subss xmm0, xmm10
movss dword [rbp - 0x68], xmm0
movss xmm1, dword [rbp + 0xa4]
subss xmm1, xmm15
movss dword [rbp - 0x64], xmm1
lea r8, [rbp + 0xa8]
test r12b, r12b
cmovne r8, r11
lea rcx, [rbp + 0x80]
call fcn.18000893c
mov qword [rsp + 0x40], r8
movss dword [rsp + 0x38], xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x68]
movss xmm2, dword [rsi + 0xf28]
mov rdx, qword [rsi + 0xf20]
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbx + 0x298]
call fcn.180020a4c
xor r11d, r11d
jmp 0x180030000
mov rbx, qword [rbp - 0x48]
test r13b, r13b
je 0x1800301a7
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rdi + 0xe80]
movss dword [rdi + 0xe80], xmm0
cmp byte [rsi + 0x7b], r11b
je 0x180030050
comiss xmm15, xmm0
jae 0x180030050
movss xmm1, dword [0x1801130e4]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x1801130c8]
xor r11d, r11d
comiss xmm1, xmm0
jae 0x180030050
mov cl, r11b
lea edi, [r11 + 1]
jmp 0x180030058
mov edi, 1
mov cl, dil
addss xmm7, dword [rbp + 0xa0]
subss xmm7, xmm10
cvttss2si eax, xmm7
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0xa4]
addss xmm0, xmm12
subss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x80], xmm6
movaps xmm1, xmm7
subss xmm1, dword [rsi + 0xf28]
addss xmm1, dword [0x1801130a8]
movss dword [rbp + 0x84], xmm1
movaps xmm3, xmm6
addss xmm3, xmm11
movss dword [rbp + 0x88], xmm3
movaps xmm2, xmm7
subss xmm2, dword [0x1801130ec]
movss dword [rbp + 0x8c], xmm2
test cl, cl
je 0x180030162
comiss xmm2, dword [rbp + 0xac]
jbe 0x180030162
movss xmm0, dword [rbp + 0xb4]
comiss xmm0, xmm1
jbe 0x180030162
comiss xmm3, dword [rbp + 0xa8]
jbe 0x180030162
movss xmm0, dword [rbp + 0xb0]
comiss xmm0, xmm6
jbe 0x180030162
mov rax, qword [0x18011dcc0]
movdqu xmm0, xmmword [rax + 0xbcc]
movups xmmword [rbp - 0x28], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0xaf0]
movss dword [rbp - 0x1c], xmm0
movss dword [rbp - 0x68], xmm6
movss dword [rbp - 0x64], xmm2
lea rcx, [rbp - 0x28]
call fcn.18000893c
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x80]
mov rcx, qword [rbx + 0x298]
call fcn.1800203e4
xor r11d, r11d
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
cmp byte [rsp + 0x64], r11b
jne 0x1800301b3
mov byte [rsi + 0x2e80], dil
subss xmm6, xmm11
movss xmm0, dword [rsi + 0xf28]
subss xmm7, xmm0
movss dword [rsi + 0x2e84], xmm6
movss dword [rsi + 0x2e88], xmm7
movss dword [rsi + 0x2e8c], xmm0
jmp 0x1800301b3
movss xmm9, dword [rbp - 0x3c]
movss xmm12, dword [rbp - 0x38]
mov r9b, byte [rsp + 0x53]
mov ebx, dword [rbp - 0x50]
test bl, bl
je 0x1800301cc
test r9b, r9b
jne 0x1800301cc
call fcn.1800130e4
xor r11d, r11d
test r12b, r12b
je 0x180030250
movss dword [rbp - 0x68], xmm14
addss xmm8, dword [rsi + 0xb30]
movss dword [rbp - 0x64], xmm8
lea rcx, [rbp - 0x68]
call fcn.18002a7c0
mov ebx, dword [rsi + 0x1a44]
mov eax, ebx
or eax, 0x401
mov dword [rsi + 0x1a44], eax
call fcn.18000e294
mov eax, dword [rsi + 0x1a68]
and eax, 0x80
mov edi, dword [rbp + 0xc0]
or edi, eax
mov dword [rsi + 0x1a44], ebx
call fcn.180015628
xor r11d, r11d
mov ebx, dword [rbp - 0x50]
cmp dword [rsi + 0x1a60], r11d
jne 0x180030250
mov eax, dword [rsp + 0x78]
mov dword [rsi + 0x1a60], eax
mov eax, dword [rbp + 0xbc]
mov dword [rsi + 0x1a64], eax
mov dword [rsi + 0x1a68], edi
cmp byte [rsi + 0x2f38], r11b
je 0x180030299
test bl, bl
je 0x180030264
cmp byte [rsp + 0x53], 0
je 0x180030299
mov rax, qword [0x18011dcc0]
lea rcx, [0x180110d58]
mov qword [rax + 0x2f58], rcx
lea rcx, [0x180110d54]
mov qword [rax + 0x2f60], rcx
mov r8, r14
mov rdx, r15
lea rcx, [rbp + 0xa0]
call fcn.18001a158
comiss xmm13, xmm15
jbe 0x1800302d0
addss xmm12, dword [rsi + 0xb44]
addss xmm9, dword [rsi + 0xb30]
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
movaps xmm0, xmm12
unpcklps xmm0, xmm9
movq rcx, xmm0
call fcn.1800090a0
movzx edx, byte [rsp + 0x7f]
mov ecx, dword [rbp + 0x218]
test dl, dl
je 0x1800302fc
bt ecx, 0x1b
jb 0x1800302fc
mov rax, qword [0x18011dcc0]
mov word [rax + 0x1238], 0x101
or dword [rax + 0x1a68], 4
test cl, 0x20
mov eax, edx
movzx ecx, byte [rsp + 0x5d]
cmovne eax, ecx
jmp 0x18002da19