Function at 0x1800488f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x250
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x180074010]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov dword [rbp - 0x68], r9d
mov qword [rbp - 0x48], r8
mov r15, rcx
mov qword [rbp - 0x28], rcx
mov rax, qword [rbp + 0x1c0]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x90], rax
mov rbx, qword [0x180074ff8]
mov r13, rbx
mov qword [rsp + 0x78], rbx
mov rax, qword [rbx + 0x1c08]
mov byte [rax + 0x90], 1
mov rdi, qword [rbx + 0x1c08]
mov qword [rbp - 0x20], rdi
cmp byte [rdi + 0x93], 0
jne 0x180048ca9
mov r14d, dword [rbp + 0x1b8]
mov dword [rsp + 0x74], r14d
mov esi, r14d
shr esi, 0x1a
and sil, 1
mov dword [rsp + 0x68], esi
mov eax, r14d
shr eax, 0xe
and al, 1
mov dword [rsp + 0x6c], eax
mov eax, r14d
shr eax, 0xf
and al, 1
mov dword [rbp - 0x3c], eax
mov eax, r14d
shr eax, 0x10
not al
and al, 1
mov dword [rsp + 0x54], eax
mov eax, r14d
shr eax, 0x12
and al, 1
mov dword [rbp - 0x7c], eax
test sil, sil
je 0x180048a1b
call fcn.180026920
mov rbx, qword [0x180074ff8]
movsxd rcx, dword [rdi + 0xc8]
mov rax, qword [rdi + 0xd0]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
mov rcx, r15
call fcn.180019db0
mov r12d, eax
mov dword [rbp - 0x50], eax
cmp dword [rbx + 0x1c50], eax
jne 0x180048a4c
mov dword [rbx + 0x1c54], eax
cmp dword [rbx + 0x1c90], r12d
jne 0x180048a5c
mov byte [rbx + 0x1c94], 1
mov rcx, r15
cmp r15, 0xffffffffffffffff
jae 0x180048a82
movzx edx, byte [rcx]
test dl, dl
je 0x180048a82
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x180048a79
cmp byte [rax], dl
je 0x180048a82
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x180048a65
movss xmm0, dword [rbx + 0x1978]
xor eax, eax
movss xmm1, dword [0x180068188]
movss xmm9, dword [0x180068174]
xorps xmm8, xmm8
cmp r15, rcx
jne 0x180048aab
xorps xmm7, xmm7
jmp 0x180048af4
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm1
movaps xmm3, xmm9
movaps xmm2, xmm0
lea rdx, [rbp - 0x60]
mov rcx, qword [rbx + 0x1970]
call fcn.18003bd60
movss xmm0, dword [rbp - 0x60]
addss xmm0, dword [0x1800680c8]
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss xmm0, dword [rbp - 0x5c]
movss dword [rbp - 0x30], xmm7
test sil, sil
je 0x180048b0f
movss xmm0, dword [r13 + 0x1978]
mulss xmm0, dword [0x180068114]
movss xmm6, dword [r13 + 0x1598]
movaps xmm3, xmm6
addss xmm3, xmm6
addss xmm3, xmm0
mov rax, qword [rbx + 0x1c08]
test byte [rbx + 0x1cac], 1
je 0x180048b3d
movss xmm0, dword [rbx + 0x1cb0]
jmp 0x180048b45
movss xmm0, dword [rax + 0x194]
movss xmm13, dword [0x1800680d0]
comiss xmm8, xmm0
jbe 0x180048b8c
movss xmm1, dword [rax + 0x238]
cmp qword [rax + 0x178], 0
jne 0x180048b70
cmp qword [rbx + 0x2018], 0
je 0x180048b78
movss xmm1, dword [rax + 0x208]
subss xmm1, dword [rax + 0xd8]
addss xmm1, xmm0
movaps xmm0, xmm13
maxss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov rdx, qword [rbp + 0x1b0]
mov rdx, qword [rdx]
lea rcx, [rbp - 0x60]
call fcn.180026820
comiss xmm7, xmm8
jbe 0x180048bbe
movaps xmm1, xmm7
addss xmm1, dword [r13 + 0x15ac]
jmp 0x180048bc1
xorps xmm1, xmm1
movss xmm12, dword [rdi + 0xdc]
movss dword [rbp - 0x40], xmm12
movaps xmm0, xmm12
movss xmm11, dword [rbp - 0x5c]
addss xmm0, xmm11
movss xmm7, dword [rdi + 0xd8]
movss dword [rbp - 0x34], xmm7
movaps xmm14, xmm7
movss xmm10, dword [rbp - 0x60]
addss xmm14, xmm10
movss dword [rbp - 0x38], xmm14
movss dword [rbp + 0x78], xmm7
movss dword [rbp + 0x7c], xmm12
movss dword [rbp + 0x80], xmm14
movss dword [rbp + 0x84], xmm0
movaps xmm2, xmm12
addss xmm2, xmm11
addss xmm1, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x60], xmm7
movss dword [rbp + 0x64], xmm12
movss dword [rbp + 0x68], xmm1
movss dword [rbp + 0x6c], xmm2
mov rbx, rdi
mov qword [rbp - 0x60], rbx
test sil, sil
je 0x180048f4f
mov edi, 1
mov r9d, edi
lea r8, [rbp + 0x78]
mov edx, r12d
lea rcx, [rbp + 0x60]
call fcn.1800264e0
test al, al
jne 0x180048d0d
movss xmm0, dword [rbp + 0x68]
subss xmm0, dword [rbp + 0x60]
movss dword [rbp - 0x58], xmm0
movss xmm1, dword [rbp + 0x6c]
subss xmm1, dword [rbp + 0x64]
movss dword [rbp - 0x54], xmm1
movss xmm1, dword [r13 + 0x1598]
lea rcx, [rbp - 0x58]
call fcn.180026390
call fcn.180026a50
xor al, al
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.18005b400
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov esi, dword [r13 + 0x1cc8]
mov rbx, qword [0x180074ff8]
mov dword [rbp + 0x60], 3
movups xmm0, xmmword [rbx + 0x1650]
movups xmmword [rbp + 0x64], xmm0
lea rcx, [rbx + 0x1d60]
lea rdx, [rbp + 0x60]
call fcn.18002d060
movups xmm0, xmmword [r13 + 0x1690]
movups xmmword [rbx + 0x1650], xmm0
movss xmm1, dword [r13 + 0x159c]
mov ecx, 7
call fcn.18001adf0
movss xmm1, dword [r13 + 0x15a0]
mov ecx, 8
call fcn.18001adf0
movss xmm1, dword [rbp + 0x84]
movss xmm12, dword [rbp + 0x7c]
movss dword [rbp - 0x40], xmm12
subss xmm1, xmm12
movss xmm14, dword [rbp + 0x80]
movss dword [rbp - 0x38], xmm14
movaps xmm0, xmm14
movss xmm7, dword [rbp + 0x78]
movss dword [rbp - 0x34], xmm7
subss xmm0, xmm7
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm1
mov dword [rsp + 0x20], 4
movzx r9d, dil
lea r8, [rbp - 0x60]
mov edx, r12d
mov rcx, r15
call fcn.180020810
movzx r11d, al
mov r8, qword [0x180074ff8]
movsxd rcx, dword [r8 + 0x1d70]
lea rdx, [rcx + rcx*2]
mov r9, qword [r8 + 0x1d78]
movsxd rcx, dword [r9 + rdx*4 - 0xc]
lea r10, [rcx + rcx*2]
lea rbx, [0x180060f30]
mov ecx, dword [rbx + r10*4 + 8]
cmp dword [rbx + r10*4], 8
jne 0x180048e41
mov eax, dword [rbx + r10*4 + 4]
cmp eax, edi
jne 0x180048e22
mov eax, dword [r9 + rdx*4 - 8]
mov dword [rcx + r8 + 0x1558], eax
jmp 0x180048e41
cmp eax, 2
jne 0x180048e41
mov eax, dword [r9 + rdx*4 - 8]
mov dword [rcx + r8 + 0x1558], eax
mov eax, dword [r9 + rdx*4 - 4]
mov dword [rcx + r8 + 0x155c], eax
movsxd rcx, dword [r8 + 0x1d70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d70], eax
lea rax, [rcx - 2]
lea rcx, [rax + rax*2]
mov rdx, qword [r8 + 0x1d78]
movsxd rax, dword [rdx + rcx*4]
lea r10, [rax + rax*2]
mov r9d, dword [rbx + r10*4 + 8]
cmp dword [rbx + r10*4], 8
jne 0x180048ea9
mov eax, dword [rbx + r10*4 + 4]
cmp eax, edi
jne 0x180048e8c
mov eax, dword [rdx + rcx*4 + 4]
mov dword [r9 + r8 + 0x1558], eax
jmp 0x180048ea9
cmp eax, 2
jne 0x180048ea9
mov eax, dword [rdx + rcx*4 + 4]
mov dword [r9 + r8 + 0x1558], eax
mov eax, dword [rdx + rcx*4 + 8]
mov dword [r9 + r8 + 0x155c], eax
dec dword [r8 + 0x1d70]
movsxd rax, dword [r8 + 0x1d60]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1d68]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x162
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1d60]
test r11b, r11b
jne 0x180048ef0
call fcn.180020ad0
jmp 0x180048ca4
mov rbx, qword [r13 + 0x1c08]
mov qword [rbp - 0x60], rbx
movsx ecx, word [rbx + 0x12a]
mov eax, dword [rbx + 0x124]
bts ecx, eax
mov word [rbx + 0x12a], cx
movss xmm0, dword [r13 + 0x1594]
addss xmm0, dword [rbx + 0xd8]
movss dword [rbx + 0xd8], xmm0
movss xmm1, dword [r13 + 0x1598]
addss xmm1, dword [rbx + 0xdc]
movss dword [rbx + 0xdc], xmm1
subss xmm10, dword [rbx + 0x84]
jmp 0x180048fc4
subss xmm2, xmm12
subss xmm1, xmm7
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x64], xmm2
movaps xmm1, xmm6
lea rcx, [rsp + 0x60]
call fcn.180026390
mov edi, 1
bt r14d, 0x1c
jb 0x180048fbd
mov r9d, edi
lea r8, [rbp + 0x78]
mov edx, r12d
lea rcx, [rbp + 0x60]
call fcn.1800264e0
test al, al
je 0x180048ca9
movss xmm14, dword [rbp + 0x80]
movss dword [rbp - 0x38], xmm14
movss xmm12, dword [rbp + 0x7c]
movss dword [rbp - 0x40], xmm12
movss xmm7, dword [rbp + 0x78]
movss dword [rbp - 0x34], xmm7
mov esi, dword [r13 + 0x1cc8]
mov edx, r12d
lea rcx, [rbp + 0x78]
call fcn.18001cf70
mov byte [rbp - 0x7d], al
test al, al
je 0x180048fde
mov dword [r13 + 0x1f70], edi
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
lea r15, [r14 + 0x20d8]
cmp dword [r15], r12d
mov ecx, 0
cmovne r15, rcx
mov qword [rsp + 0x60], r15
mov r12d, esi
shr r12d, 8
and r12b, 1
shr esi, 9
and sil, 1
mov dword [rbp - 0x4c], esi
test al, al
je 0x180049028
cmp byte [r13 + 0x420], cl
je 0x180049028
mov r14b, 1
jmp 0x18004902b
xor r14b, r14b
mov byte [rsp + 0x59], r14b
mov edi, dword [r13 + 0x1c50]
mov eax, dword [rbp - 0x50]
cmp edi, eax
je 0x18004905f
cmp dword [r13 + 0x1e0c], eax
je 0x18004905a
cmp dword [r13 + 0x1e00], eax
jne 0x18004905f
cmp dword [r13 + 0x1e24], 2
jne 0x18004905f
mov r13b, 1
jmp 0x180049062
xor r13b, r13b
mov byte [rbp - 0x7f], r13b
mov eax, dword [rsp + 0x68]
test al, al
je 0x1800490ad
test r15, r15
je 0x1800490ad
test edi, edi
jne 0x1800490ad
movsxd rcx, dword [rbx + 0xc8]
mov rax, qword [rbx + 0xd0]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
lea rcx, str.SCROLLY
call fcn.180019db0
mov rcx, qword [rsp + 0x78]
cmp dword [rcx + 0x1c90], eax
jne 0x1800490a9
mov bl, 1
jmp 0x1800490b8
mov eax, dword [rsp + 0x68]
xor bl, bl
test al, al
je 0x1800490e5
test r15, r15
je 0x1800490e5
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 0xc8]
mov rax, qword [rax + 0xd0]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
lea rcx, str.SCROLLY
call fcn.180019db0
cmp edi, eax
jne 0x1800490e5
mov cl, 1
jmp 0x1800490e7
xor cl, cl
mov byte [rsp + 0x50], cl
mov byte [rsp + 0x70], 0
mov edx, dword [rbp - 0x50]
cmp edi, edx
je 0x180049112
mov eax, dword [rsp + 0x74]
test al, 0x10
jne 0x180049104
test r13b, r13b
je 0x180049112
mov eax, dword [rsp + 0x68]
test al, al
jne 0x180049116
mov byte [rbp - 0x70], 1
jmp 0x18004912c
mov eax, dword [rsp + 0x68]
mov byte [rbp - 0x70], 0
test al, al
je 0x18004912c
mov rax, qword [rbp - 0x60]
movss xmm9, dword [rax + 0x60]
mov eax, dword [rsp + 0x68]
test r15, r15
je 0x18004913e
xor al, 1
cmp byte [r15 + 0x63], al
je 0x18004913e
mov r15b, 1
jmp 0x180049141
xor r15b, r15b
test r14b, r14b
jne 0x180049164
test bl, bl
jne 0x180049164
test r13b, r13b
jne 0x180049164
test r12b, r12b
jne 0x180049164
test sil, sil
jne 0x180049164
test cl, cl
jne 0x180049167
mov byte [rsp + 0x58], r13b
jmp 0x180049170
mov r13b, 1
mov byte [rsp + 0x58], 1
cmp edi, edx
jne 0x180049179
test r15b, r15b
je 0x1800493b1
mov rsi, qword [rsp + 0x78]
add rsi, 0x20d8
mov qword [rsp + 0x60], rsi
mov dword [rsi + 0xe78], 0xbe99999a
mov rax, 0xffffffffffffffff
mov rcx, qword [rbp - 0x48]
nop
lea rax, [rax + 1]
cmp byte [rcx + rax], 0
jne 0x1800491a0
lea ebx, [rax + 1]
mov ecx, dword [rsi + 0x34]
cmp ebx, ecx
jle 0x1800491e3
test ecx, ecx
je 0x1800491c3
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800491c8
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rsi + 0x30]
call fcn.18002d550
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov dword [rsi + 0x30], ebx
movsxd r8, ebx
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rsi + 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov ebx, dword [rbp - 0x68]
inc ebx
mov ecx, dword [rsi + 0x14]
cmp ebx, ecx
jle 0x180049231
test ecx, ecx
je 0x180049211
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180049216
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [rsi + 0x10]
call fcn.18002d6b0
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov dword [rsi + 0x10], ebx
mov ecx, dword [rsi + 0x24]
test ecx, ecx
jns 0x180049261
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
mov edx, ecx
test eax, eax
cmovg edx, eax
lea rcx, [rsi + 0x20]
call fcn.18002d550
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
xor edx, edx
mov dword [rsi + 0x20], edx
mov byte [rsi + 0x40], dl
mov rcx, qword [rbp - 0x48]
mov rdi, rcx
mov r14, qword [rsi + 0x18]
mov rbx, r14
movsxd rsi, dword [rbp - 0x68]
dec rsi
lea rsi, [r14 + rsi*2]
cmp r14, rsi
jae 0x1800492ba
cmp byte [rdi], 0
je 0x1800492b4
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.18001a0d0
movsxd rcx, eax
add rdi, rcx
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x1800492b4
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x180049287
mov rcx, qword [rbp - 0x48]
xor edx, edx
mov word [rbx], dx
sub rbx, r14
sar rbx, 1
mov r14, qword [rsp + 0x60]
mov dword [r14 + 4], ebx
sub edi, ecx
mov dword [r14 + 8], edi
mov edi, dword [rbp - 0x50]
cmp dword [r14], edi
jne 0x180049310
test r15b, r15b
jne 0x180049310
mov ecx, ebx
cmp dword [r14 + 0x4c], ebx
cmovl ecx, dword [r14 + 0x4c]
mov dword [r14 + 0x4c], ecx
mov ecx, ebx
cmp dword [r14 + 0x50], ebx
cmovl ecx, dword [r14 + 0x50]
mov dword [r14 + 0x50], ecx
cmp dword [r14 + 0x54], ebx
cmovl ebx, dword [r14 + 0x54]
mov dword [r14 + 0x54], ebx
mov ebx, dword [rsp + 0x68]
jmp 0x18004937e
mov dword [r14], edi
mov qword [r14 + 0x48], 0
mov dword [r14 + 0xe6a], 0x630000
mov dword [r14 + 0xe70], edx
mov dword [r14 + 0xe74], 0x3e7
mov qword [r14 + 0x50], 0
mov word [r14 + 0x61], 1
mov dword [r14 + 0x68], edx
mov byte [r14 + 0x60], 0
mov ebx, dword [rsp + 0x68]
movzx eax, bl
xor al, 1
mov byte [r14 + 0x63], al
mov byte [r14 + 0x58], 0
mov dword [r14 + 0x5c], edx
test bl, bl
jne 0x18004937e
mov edx, dword [rbp - 0x70]
movzx edx, dl
test r12b, r12b
mov eax, 1
cmovne edx, eax
mov dword [rbp - 0x70], edx
mov r15d, dword [rsp + 0x74]
bt r15d, 0xd
jae 0x18004938f
mov byte [r14 + 0x58], 1
test bl, bl
jne 0x1800493c1
cmp byte [rbp - 0x4c], bl
jne 0x1800493ab
cmp byte [rsp + 0x59], bl
je 0x1800493c1
mov rax, qword [rsp + 0x78]
cmp byte [rax + 0x140], bl
je 0x1800493c1
mov byte [rbp - 0x70], 1
jmp 0x1800493c1
mov r14, qword [rsp + 0x60]
mov edi, edx
mov ebx, dword [rsp + 0x68]
mov r15d, dword [rsp + 0x74]
mov rsi, qword [rsp + 0x78]
cmp dword [rsi + 0x1c50], edi
je 0x18004945f
test r13b, r13b
je 0x18004945f
mov rdx, qword [rbp - 0x20]
mov ecx, edi
call fcn.18001cea0
call fcn.180028020
mov rcx, rdx
call fcn.1800259f0
mov eax, dword [rsi + 0x1c64]
or eax, 3
mov dword [rsi + 0x1c64], eax
test bl, bl
jne 0x18004940b
test r15b, r15b
jns 0x180049414
or eax, 0xc
mov dword [rsi + 0x1c64], eax
or dword [rsi + 0x1c68], 2
mov rax, qword [rsi + 0x1c70]
or rax, 0x180
mov qword [rsi + 0x1c70], rax
test bl, bl
je 0x18004943e
or rax, 0x60
mov qword [rsi + 0x1c70], rax
mov r12, qword [0x180074ff8]
mov qword [rbp + 0x60], r12
test r15d, 0x440
je 0x180049463
or rax, 1
mov qword [rsi + 0x1c70], rax
jmp 0x180049463
mov r12, qword [rbp + 0x60]
cmp dword [rsi + 0x1c50], edi
jne 0x18004950e
test r14, r14
jne 0x1800494e7
mov ecx, dword [r12 + 0x1c50]
test ecx, ecx
setne al
mov byte [r12 + 0x1c5c], al
xor r8d, r8d
test ecx, ecx
je 0x1800494ad
mov dword [r12 + 0x1c58], r8d
mov word [r12 + 0x1c5f], r8w
mov dword [r12 + 0x1c8c], 0xffffffff
mov dword [r12 + 0x1c50], r8d
mov word [r12 + 0x1c5d], 0
mov qword [r12 + 0x1c80], r8
mov word [r12 + 0x1c61], 0
mov qword [r12 + 0x1c64], 0
mov qword [r12 + 0x1c70], r8
cmp dword [rsi + 0x1c50], edi
jne 0x18004950e
cmp byte [rsi + 0x420], 0
je 0x18004951a
cmp byte [rsp + 0x58], 0
jne 0x18004951a
test r13b, r13b
jne 0x18004951a
mov byte [rsp + 0x70], 1
mov r13b, 1
jmp 0x180049522
test r14, r14
je 0x18004951f
cmp byte [rsp + 0x50], 0
je 0x18004951f
mov r13b, 1
jmp 0x180049522
xor r13b, r13b
mov byte [rsp + 0x50], r13b
test r14, r14
je 0x18004953f
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
je 0x18004953f
test r13b, r13b
je 0x18004953f
mov dl, 1
jmp 0x180049541
xor dl, dl
mov dword [rbp - 0x4c], edx
movzx r15d, dl
mov byte [rbp - 0x80], 0
mov byte [rsp + 0x59], 0
mov eax, dword [rsp + 0x6c]
test al, al
je 0x180049655
test r14, r14
je 0x180049655
test r13b, r13b
jne 0x180049573
test dl, dl
je 0x18004965e
mov esi, dword [rbp - 0x68]
inc esi
mov ecx, dword [r14 + 0x14]
cmp esi, ecx
jle 0x1800495af
test ecx, ecx
je 0x18004958f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180049594
mov eax, 8
mov edx, esi
cmp eax, esi
cmovg edx, eax
lea rcx, [r14 + 0x10]
call fcn.18002d6b0
mov r12, qword [0x180074ff8]
mov qword [rbp + 0x60], r12
mov dword [r14 + 0x10], esi
mov rcx, qword [rbp - 0x48]
mov rdi, rcx
mov r14, qword [r14 + 0x18]
mov rbx, r14
movsxd rsi, esi
dec rsi
lea rsi, [r14 + rsi*2]
cmp r14, rsi
jae 0x180049601
cmp byte [rdi], 0
je 0x1800495fd
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.18001a0d0
movsxd rcx, eax
add rdi, rcx
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x1800495fd
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x1800495d0
mov rcx, qword [rbp - 0x48]
xor r8d, r8d
mov word [rbx], r8w
sub rbx, r14
sar rbx, 1
mov rdx, qword [rsp + 0x60]
mov dword [rdx + 4], ebx
sub edi, ecx
mov dword [rdx + 8], edi
mov ecx, ebx
cmp dword [rdx + 0x4c], ebx
cmovl ecx, dword [rdx + 0x4c]
mov dword [rdx + 0x4c], ecx
mov ecx, ebx
cmp dword [rdx + 0x50], ebx
cmovl ecx, dword [rdx + 0x50]
mov dword [rdx + 0x50], ecx
cmp dword [rdx + 0x54], ebx
cmovl ebx, dword [rdx + 0x54]
mov dword [rdx + 0x54], ebx
mov edx, r8d
cmp ecx, ebx
cmovne edx, r15d
mov dword [rbp - 0x4c], edx
mov rsi, qword [rsp + 0x78]
mov edi, dword [rbp - 0x50]
mov eax, dword [rsp + 0x6c]
test r13b, r13b
jne 0x180049666
test dl, dl
jne 0x180049666
cmp dword [rsi + 0x1c50], edi
jne 0x180049680
mov r15, qword [rsp + 0x60]
test al, al
jne 0x180049685
test r15, r15
je 0x180049685
cmp byte [r15 + 0x40], al
je 0x180049685
mov byte [rbp - 0x7e], 1
jmp 0x180049689
mov r15, qword [rsp + 0x60]
mov byte [rbp - 0x7e], 0
cmp byte [rbp - 0x3c], 0
je 0x18004975e
mov rdx, qword [rsi + 0x1970]
cmp dword [rdx + 0x18], 0x2a
ja 0x1800496a6
mov r8, qword [rdx + 0x38]
jmp 0x1800496ca
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x1800496be
mov r8, qword [rdx + 0x38]
jmp 0x1800496ca
lea rcx, [rcx + rcx*4]
mov rax, qword [rdx + 0x30]
lea r8, [rax + rcx*8]
lea rbx, [rsi + 0x2f70]
mov eax, dword [rdx + 0x14]
mov dword [rbx + 0x14], eax
mov rax, qword [rsi + 0x1970]
mov ecx, dword [rax + 0x5c]
mov dword [rbx + 0x5c], ecx
mov rax, qword [rsi + 0x1970]
mov ecx, dword [rax + 0x60]
mov dword [rbx + 0x60], ecx
mov rax, qword [rsi + 0x1970]
mov ecx, dword [rax + 0x64]
mov dword [rbx + 0x64], ecx
mov rax, qword [rsi + 0x1970]
mov rcx, qword [rax + 0x40]
mov qword [rbx + 0x40], rcx
mov qword [rbx + 0x38], r8
mov eax, dword [r8 + 4]
mov dword [rbx + 0x10], eax
mov qword [rbp - 0x20], rbx
mov rcx, rbx
call fcn.180025c50
lea rcx, [r12 + 0x1d80]
lea rdx, [rbp - 0x20]
call fcn.18002d2d0
mov rax, qword [r12 + 0x1c08]
mov rdx, qword [rbx + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x280]
call fcn.180035550
mov r13, qword [0x180074ff8]
mov qword [rbp + 0x60], r13
jmp 0x180049762
mov r13, qword [rbp + 0x60]
xor r8d, r8d
mov dword [rbp - 0x78], r8d
mov ecx, 0x20000c
movss xmm0, dword [0x180068094]
cmp dword [rsi + 0x1c50], edi
jne 0x180049b93
mov eax, dword [r15 + 8]
mov dword [rbp - 0x78], eax
mov byte [r15 + 0xe7e], r8b
mov eax, dword [rbp - 0x68]
mov dword [r15 + 0x44], eax
mov eax, dword [rsp + 0x74]
mov dword [r15 + 0xe80], eax
mov r14, qword [rbp - 0x58]
mov qword [r15 + 0xe88], r14
mov r12, qword [rbp + 0x90]
mov qword [r15 + 0xe90], r12
movzx edx, byte [rsi + 0x130]
test dl, dl
sete al
mov byte [rsi + 0x1c5d], al
mov dword [rsi + 0x3340], 1
movss xmm1, dword [rsi + 0x128]
subss xmm1, xmm7
subss xmm1, dword [rsi + 0x1594]
addss xmm1, dword [r15 + 0x48]
cmp byte [rsp + 0x68], r8b
je 0x18004980e
movss xmm2, dword [rsi + 0x12c]
mov rax, qword [rbp - 0x60]
subss xmm2, dword [rax + 0xdc]
jmp 0x18004981a
movss xmm2, dword [rsi + 0x1978]
mulss xmm2, xmm0
movzx edi, byte [rsi + 0xc9]
cmp byte [rbp - 0x70], r8b
jne 0x18004997c
movzx eax, byte [rbp - 0x7d]
test al, al
je 0x180049845
test dil, dil
jne 0x18004989e
cmp byte [rsi + 0x425], r8b
jne 0x18004997c
lea rbx, [r15 + 0xe7d]
movzx ecx, byte [rbx]
cmp byte [rsi + 0x420], r8b
je 0x180049905
test cl, cl
jne 0x180049905
test al, al
je 0x180049896
cmp byte [r15 + 0x63], r8b
je 0x180049872
movaps xmm2, xmm8
mov rcx, r15
call fcn.180046e10
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x54], eax
mov byte [r15 + 0x62], 0
mov dword [r15 + 0xe78], 0xbe99999a
mov rax, rbx
jmp 0x18004999a
cmp byte [rsi + 0x425], r8b
je 0x180049845
mov r8d, ecx
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov r8d, 0x60000d
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
lea rax, [r15 + 0xe7d]
mov r13, qword [0x180074ff8]
mov qword [rbp + 0x60], r13
jmp 0x18004999a
mov rax, rbx
test dl, dl
je 0x18004999a
test cl, cl
jne 0x18004999a
movss xmm0, dword [rsi + 0x3b4]
ucomiss xmm0, xmm8
jp 0x180049938
jne 0x180049938
movss xmm0, dword [rsi + 0x3b8]
ucomiss xmm0, xmm8
jp 0x180049938
je 0x18004999a
cmp byte [r15 + 0x63], r8b
je 0x180049942
movaps xmm2, xmm8
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x180049954
mov eax, dword [r15 + 0x4c]
mov dword [r15 + 0x50], eax
mov rcx, r15
call fcn.180046e10
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0xe78], 0xbe99999a
mov byte [r15 + 0xe7c], 1
mov rax, rbx
jmp 0x18004999a
mov dword [r15 + 0x50], r8d
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x62], r8b
lea rax, [r15 + 0xe7d]
mov byte [rax], 1
cmp byte [rax], 0
je 0x1800499ab
cmp byte [rsi + 0x130], 0
jne 0x1800499ab
mov byte [rax], 0
cmp byte [rsi + 0x140], 0
je 0x1800499bd
cmp byte [rsi + 0x142], 0
je 0x1800499cb
test dil, dil
je 0x1800499cf
cmp byte [rsi + 0x143], 0
je 0x1800499cf
mov bl, 1
jmp 0x1800499d1
xor bl, bl
mov r10d, dword [rsp + 0x74]
bt r10d, 0xa
jae 0x180049a9b
mov ecx, dword [r13 + 0x3c]
test ecx, ecx
js 0x180049a9b
call fcn.180020750
test al, al
mov eax, dword [rsp + 0x6c]
je 0x180049a9f
test bl, bl
jne 0x180049a9f
cmp byte [rsi + 0x141], bl
jne 0x180049a9f
test al, al
jne 0x180049a9f
mov rcx, qword [rsi + 0x1550]
movsxd rax, dword [rsi + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x180049a43
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x180049a9b
cmp rcx, rdx
jb 0x180049a31
mov dword [rbp - 0x70], 9
mov dword [rsp + 0x20], 2
mov r9, r12
mov r8, r14
mov edx, r10d
lea rcx, [rbp - 0x70]
call fcn.1800486f0
test al, al
je 0x180049a8b
lea rdx, [r15 + 0x4c]
mov r8d, dword [rbp - 0x70]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov r13, qword [0x180074ff8]
mov r10d, dword [rsp + 0x74]
mov qword [rbp + 0x60], r13
mov eax, dword [rsp + 0x6c]
cmp dword [rsi + 0x1548], 0
jle 0x180049b8b
test bl, bl
jne 0x180049b50
test al, al
jne 0x180049b50
cmp byte [rbp - 0x7f], al
jne 0x180049b50
xor eax, eax
mov edi, eax
mov ebx, eax
mov rdx, qword [rsp + 0x78]
mov rax, qword [rdx + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp - 0x70], ecx
cmp ecx, 9
jne 0x180049aec
cmp byte [rdx + 0x141], 0
jne 0x180049b32
mov dword [rsp + 0x20], 2
mov r9, r12
mov r8, r14
mov edx, r10d
lea rcx, [rbp - 0x70]
call fcn.1800486f0
test al, al
je 0x180049b2d
lea rdx, [r15 + 0x4c]
mov r8d, dword [rbp - 0x70]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov rdx, qword [rsp + 0x78]
inc edi
add rbx, 2
cmp edi, dword [rsi + 0x1548]
mov r10d, dword [rsp + 0x74]
jl 0x180049ad0
mov r13, qword [0x180074ff8]
mov qword [rbp + 0x60], r13
mov ecx, dword [rsi + 0x154c]
test ecx, ecx
jns 0x180049b83
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
mov edx, ecx
test eax, eax
cmovg edx, eax
lea rcx, [rsi + 0x1548]
call fcn.18002d6b0
mov r13, qword [0x180074ff8]
mov qword [rbp + 0x60], r13
xor eax, eax
mov dword [rsi + 0x1548], eax
mov edi, dword [rbp - 0x50]
mov rsi, qword [rsp + 0x78]
xor cl, cl
cmp dword [rsi + 0x1c50], edi
jne 0x18004a813
cmp byte [rsi + 0x1c5c], cl
jne 0x18004a813
cmp byte [rsp + 0x70], cl
jne 0x18004a813
movaps xmm0, xmm11
subss xmm0, dword [rsi + 0x1598]
divss xmm0, dword [rsi + 0x1978]
cvttss2si eax, xmm0
mov r12d, 1
cmp eax, r12d
cmovge r12d, eax
mov dword [r15 + 0x5c], r12d
movzx eax, byte [rsi + 0x141]
neg al
sbb ebx, ebx
and ebx, 0x400000
movzx eax, byte [rsi + 0xc9]
test al, al
je 0x180049c0e
mov r8d, dword [rsi + 0x3bc]
cmp r8d, 0xa
jne 0x180049c0e
mov r10b, 1
jmp 0x180049c1c
mov r8d, dword [rsi + 0x3bc]
xor r10b, r10b
test al, al
je 0x180049c42
movzx r14d, byte [rsi + 0x142]
cmp byte [rsi + 0x143], cl
je 0x180049c4a
cmp byte [rsi + 0x140], cl
jne 0x180049c4a
test r14b, r14b
jne 0x180049c4a
mov r11b, 1
cmp r8d, 8
jmp 0x180049c5b
movzx r14d, byte [rsi + 0x140]
xor r11b, r11b
test al, al
je 0x180049c57
cmp r8d, 8
jmp 0x180049c5b
cmp r8d, 1
sete r15b
test r15b, r15b
je 0x180049c78
mov ecx, dword [r13 + 0x88]
test ecx, ecx
js 0x180049c78
call fcn.180020750
test al, al
jne 0x180049c8f
cmp r8d, 2
jne 0x180049cbd
mov ecx, dword [r13 + 0x64]
test ecx, ecx
js 0x180049cbd
call fcn.180020750
test al, al
je 0x180049cbd
mov esi, dword [rbp - 0x3c]
mov edi, dword [rsp + 0x68]
mov r9, qword [rsp + 0x60]
cmp byte [rsp + 0x6c], 0
jne 0x180049cc9
test sil, sil
jne 0x180049cc9
test dil, dil
je 0x180049cb6
mov eax, dword [r9 + 0x54]
cmp dword [r9 + 0x50], eax
je 0x180049cc9
mov byte [rsp + 0x58], 1
jmp 0x180049cce
mov r9, qword [rsp + 0x60]
mov edi, dword [rsp + 0x68]
mov esi, dword [rbp - 0x3c]
mov byte [rsp + 0x58], 0
test r15b, r15b
je 0x180049ce7
mov ecx, dword [r13 + 0x80]
test ecx, ecx
js 0x180049ce7
call fcn.180020750
test al, al
jne 0x180049cfe
cmp r8d, 1
jne 0x180049d17
mov ecx, dword [r13 + 0x60]
test ecx, ecx
js 0x180049d17
call fcn.180020750
test al, al
je 0x180049d17
test sil, sil
jne 0x180049d17
test dil, dil
je 0x180049d12
mov eax, dword [r9 + 0x54]
cmp dword [r9 + 0x50], eax
je 0x180049d17
mov sil, 1
jmp 0x180049d1a
xor sil, sil
test r15b, r15b
je 0x180049d33
mov ecx, dword [r13 + 0x84]
test ecx, ecx
js 0x180049d33
call fcn.180020750
test al, al
jne 0x180049d4a
cmp r8d, 2
jne 0x180049d59
mov ecx, dword [r13 + 0x60]
test ecx, ecx
js 0x180049d59
call fcn.180020750
test al, al
je 0x180049d59
mov r8d, dword [rsp + 0x6c]
test r8b, r8b
jne 0x180049d5e
mov dil, 1
jmp 0x180049d61
mov r8d, dword [rsp + 0x6c]
xor dil, dil
test r15b, r15b
je 0x180049d8e
mov ecx, dword [r13 + 0x90]
test ecx, ecx
js 0x180049d8e
call fcn.180020750
test al, al
je 0x180049d8e
test r8b, r8b
mov r8d, dword [rsp + 0x54]
jne 0x180049d93
test r8b, r8b
je 0x180049d93
mov r9b, 1
jmp 0x180049d9b
mov r8d, dword [rsp + 0x54]
xor r9b, r9b
test r15b, r15b
je 0x180049daf
mov ecx, dword [r13 + 0x8c]
test ecx, ecx
js 0x180049daf
call fcn.180020750
test al, al
jne 0x180049dc8
test r10b, r10b
je 0x180049dd9
mov ecx, dword [r13 + 0x90]
test ecx, ecx
js 0x180049dd9
call fcn.180020750
test al, al
je 0x180049dd9
cmp byte [rsp + 0x6c], 0
jne 0x180049dd9
test r8b, r8b
je 0x180049dd9
mov r8b, 1
jmp 0x180049ddc
xor r8b, r8b
mov ecx, dword [r13 + 0x40]
test ecx, ecx
js 0x180049e4a
call fcn.180020750
test al, al
je 0x180049e4a
test r11b, r11b
je 0x180049df9
mov ecx, 0x200004
jmp 0x180049e09
mov ecx, 0x200000
mov eax, 0x20000c
test r14b, r14b
cmovne ecx, eax
or ecx, ebx
mov r8d, ecx
mov r15, qword [rsp + 0x60]
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov rcx, qword [0x180074ff8]
mov qword [rbp + 0x60], rcx
mov r14, rcx
mov rsi, qword [rsp + 0x78]
jmp 0x18004a21c
mov ecx, dword [r13 + 0x44]
test ecx, ecx
js 0x180049e71
call fcn.180020750
test al, al
je 0x180049e71
test r11b, r11b
je 0x180049e67
mov ecx, 0x200005
jmp 0x180049e09
mov ecx, 0x200001
lea eax, [rcx + 0xc]
jmp 0x180049e03
mov ecx, dword [r13 + 0x48]
test ecx, ecx
js 0x180049f17
call fcn.180020750
mov r10d, dword [rsp + 0x68]
test al, al
je 0x180049f1c
test r10b, r10b
je 0x180049f1c
mov rsi, qword [rsp + 0x78]
mov r15, qword [rsp + 0x60]
cmp byte [rsi + 0x140], 0
je 0x180049ed6
mov rdx, qword [rbp - 0x60]
movss xmm0, dword [rdx + 0x60]
subss xmm0, dword [rsi + 0x1978]
maxss xmm0, xmm8
movss dword [rdx + 0x70], xmm0
xor eax, eax
mov dword [rdx + 0x78], eax
mov dword [rdx + 0x80], eax
jmp 0x18004a218
movzx eax, r11b
lea r8d, [rax*4 + 0x200002]
or r8d, ebx
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov rcx, qword [0x180074ff8]
mov qword [rbp + 0x60], rcx
mov r14, rcx
jmp 0x18004a21c
mov r10d, dword [rsp + 0x68]
mov ecx, dword [r13 + 0x4c]
test ecx, ecx
js 0x180049f88
call fcn.180020750
test al, al
je 0x180049f88
test r10b, r10b
je 0x180049f88
mov rsi, qword [rsp + 0x78]
mov r15, qword [rsp + 0x60]
cmp byte [rsi + 0x140], 0
je 0x180049f77
mov rax, qword [r13 + 0x1c08]
mov rcx, qword [rbp - 0x60]
movss xmm0, dword [rcx + 0x60]
addss xmm0, dword [rsi + 0x1978]
minss xmm0, dword [rax + 0x68]
movss dword [rcx + 0x70], xmm0
xor eax, eax
mov dword [rcx + 0x78], eax
mov dword [rcx + 0x80], eax
jmp 0x18004a218
movzx eax, r11b
lea r8d, [rax*4 + 0x200003]
jmp 0x180049ee2
mov ecx, dword [r13 + 0x50]
test ecx, ecx
js 0x180049ff8
call fcn.180020750
test al, al
je 0x180049ff8
test r10b, r10b
je 0x180049ff8
or ebx, 0x20000e
mov r15, qword [rsp + 0x60]
lea rdx, [r15 + 0x4c]
mov r8d, ebx
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
movd xmm0, r12d
cvtdq2ps xmm0, xmm0
mov rsi, qword [rsp + 0x78]
mulss xmm0, dword [rsi + 0x1978]
subss xmm9, xmm0
mov rcx, qword [0x180074ff8]
mov qword [rbp + 0x60], rcx
mov r14, rcx
jmp 0x18004a21c
mov ecx, dword [r13 + 0x54]
test ecx, ecx
js 0x18004a068
call fcn.180020750
test al, al
je 0x18004a068
test r10b, r10b
je 0x18004a068
or ebx, 0x20000f
mov r15, qword [rsp + 0x60]
lea rdx, [r15 + 0x4c]
mov r8d, ebx
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
movd xmm0, r12d
cvtdq2ps xmm0, xmm0
mov rsi, qword [rsp + 0x78]
mulss xmm0, dword [rsi + 0x1978]
addss xmm9, xmm0
mov rcx, qword [0x180074ff8]
mov qword [rbp + 0x60], rcx
mov r14, rcx
jmp 0x18004a21c
mov ecx, dword [r13 + 0x58]
test ecx, ecx
js 0x18004a0a3
call fcn.180020750
test al, al
je 0x18004a0a3
mov eax, ebx
or eax, 0x200006
mov r8d, 0x200004
or r8d, ebx
mov rsi, qword [rsp + 0x78]
cmp byte [rsi + 0x140], 0
cmovne r8d, eax
mov r15, qword [rsp + 0x60]
jmp 0x180049ee5
mov ecx, dword [r13 + 0x5c]
test ecx, ecx
js 0x18004a0c3
call fcn.180020750
test al, al
je 0x18004a0c3
mov eax, ebx
or eax, 0x200007
mov r8d, 0x200005
jmp 0x18004a086
mov ecx, dword [r13 + 0x64]
test ecx, ecx
js 0x18004a0ec
call fcn.180020750
mov r11d, dword [rsp + 0x6c]
test al, al
je 0x18004a0f1
test r11b, r11b
jne 0x18004a0f1
or ebx, 0x200008
mov r8d, ebx
jmp 0x180049e0e
mov r11d, dword [rsp + 0x6c]
mov ecx, dword [r13 + 0x68]
test ecx, ecx
js 0x18004a1bb
call fcn.180020750
test al, al
je 0x18004a1bb
test r11b, r11b
jne 0x18004a1bb
mov r15, qword [rsp + 0x60]
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x18004a14c
test r14b, r14b
je 0x18004a15f
lea rdx, [r15 + 0x4c]
mov r8d, 0x60000c
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov rsi, qword [rsp + 0x78]
or ebx, 0x200009
mov r8d, ebx
jmp 0x180049ee5
mov rsi, qword [rsp + 0x78]
cmp byte [rsi + 0xc9], 0
je 0x18004a151
cmp byte [rsi + 0x143], 0
je 0x18004a151
cmp byte [rsi + 0x142], 0
jne 0x18004a151
cmp byte [rsi + 0x140], 0
jne 0x18004a151
lea rdx, [r15 + 0x4c]
mov r8d, 0x600004
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
or ebx, 0x200009
mov r8d, ebx
jmp 0x180049ee5
mov ecx, dword [r13 + 0x70]
test ecx, ecx
js 0x18004a1cc
call fcn.180020750
test al, al
jne 0x18004a1e5
mov ecx, dword [r13 + 0x78]
test ecx, ecx
js 0x18004a28e
call fcn.180020750
test al, al
je 0x18004a28e
mov edx, dword [rsp + 0x74]
mov eax, edx
shr eax, 0xb
and al, 1
mov rsi, qword [rsp + 0x78]
test r10b, r10b
je 0x18004a209
movzx ecx, byte [rsi + 0x140]
test al, al
je 0x18004a249
test cl, cl
jne 0x18004a24d
mov byte [rsp + 0x70], 1
mov byte [rsp + 0x59], 1
mov r15, qword [rsp + 0x60]
mov r14, qword [rbp + 0x60]
xor cl, cl
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x18004a804
cmp byte [rsp + 0x50], 0
je 0x18004a804
mov al, 1
mov edx, dword [rbp - 0x4c]
or dl, al
mov dword [rbp - 0x4c], edx
mov edi, dword [rbp - 0x50]
jmp 0x18004a817
test cl, cl
jne 0x18004a209
test r11b, r11b
jne 0x18004a213
mov dword [rsp + 0x54], 0xa
mov dword [rsp + 0x20], 2
mov r9, qword [rbp + 0x90]
mov r8, qword [rbp - 0x58]
lea rcx, [rsp + 0x54]
call fcn.1800486f0
test al, al
je 0x18004a35d
mov r15, qword [rsp + 0x60]
mov r8d, dword [rsp + 0x54]
jmp 0x180049ee5
mov ecx, dword [r13 + 0x74]
test ecx, ecx
js 0x18004a2b8
call fcn.180020750
test al, al
je 0x18004a2b8
mov cl, 1
mov byte [rsp + 0x70], cl
mov r14, qword [rbp + 0x60]
mov r15, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
jmp 0x18004a21e
test r9b, r9b
jne 0x18004a79d
test r8b, r8b
jne 0x18004a79d
test r15b, r15b
je 0x18004a311
mov ecx, dword [r13 + 0x7c]
test ecx, ecx
js 0x18004a311
call fcn.180020750
test al, al
je 0x18004a311
mov r15, qword [rsp + 0x60]
xor eax, eax
mov dword [r15 + 0x50], eax
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x62], r8b
mov byte [r15 + 0xe7c], 1
mov r14, qword [rbp + 0x60]
mov rsi, qword [rsp + 0x78]
jmp 0x18004a21c
movzx r15d, byte [rsp + 0x58]
test r15b, r15b
jne 0x18004a573
test sil, sil
jne 0x18004a573
test dil, dil
je 0x18004a7f1
mov rax, qword [r13 + 0x100]
test rax, rax
je 0x18004a375
mov rcx, qword [r13 + 0x110]
call rax
mov rbx, rax
test rax, rax
je 0x18004a358
mov r13, qword [0x180074ff8]
jmp 0x18004a37c
mov rsi, qword [rsp + 0x78]
mov rcx, qword [0x180074ff8]
mov qword [rbp + 0x60], rcx
mov r14, rcx
mov r15, qword [rsp + 0x60]
jmp 0x18004a21c
lea rbx, [0x18005fa6b]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x18004a383
test r13, r13
je 0x18004a398
inc dword [r13 + 0x3b0]
inc eax
movsxd rcx, eax
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov qword [rbp - 0x20], rax
xor r13d, r13d
mov esi, r13d
cmp byte [rbx], r13b
je 0x18004a423
mov rdi, rax
mov r15, qword [rbp - 0x58]
mov r12, qword [rbp + 0x90]
mov r14d, dword [rsp + 0x74]
nop dword [rax + rax]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x54]
call fcn.18001a0d0
movsxd rcx, eax
add rbx, rcx
cmp dword [rsp + 0x54], r13d
je 0x18004a41f
mov dword [rsp + 0x20], 5
mov r9, r12
mov r8, r15
mov edx, r14d
lea rcx, [rsp + 0x54]
call fcn.1800486f0
test al, al
je 0x18004a41a
movzx eax, word [rsp + 0x54]
mov word [rdi], ax
inc esi
add rdi, 2
cmp byte [rbx], r13b
jne 0x18004a3d0
mov r14, qword [rbp - 0x20]
movsxd rax, esi
mov word [r14 + rax*2], r13w
mov r15, qword [rsp + 0x60]
test esi, esi
jle 0x18004a54e
mov edx, dword [r15 + 4]
mov r8d, dword [r15 + 0x54]
mov eax, dword [r15 + 0x50]
mov ecx, edx
cmp eax, r8d
je 0x18004a479
mov r9d, eax
cmp eax, edx
jle 0x18004a459
mov dword [r15 + 0x50], edx
mov r9d, edx
mov r10d, r8d
cmp r8d, edx
jle 0x18004a46a
mov dword [r15 + 0x54], edx
mov r10d, edx
mov ecx, edx
mov r8d, r10d
mov eax, r9d
cmp r9d, r10d
jne 0x18004a479
mov dword [r15 + 0x4c], r9d
mov r10d, dword [r15 + 0x4c]
cmp r10d, edx
jle 0x18004a489
mov dword [r15 + 0x4c], edx
mov r10d, edx
cmp eax, r8d
je 0x18004a4ba
mov edx, eax
cmp eax, ecx
jle 0x18004a49a
mov dword [r15 + 0x50], ecx
mov edx, ecx
mov r9d, r8d
cmp r8d, ecx
jle 0x18004a4a9
mov dword [r15 + 0x54], ecx
mov r9d, ecx
mov r8d, r9d
mov eax, edx
cmp edx, r9d
jne 0x18004a4ba
mov dword [r15 + 0x4c], edx
mov r10d, edx
cmp r10d, ecx
jle 0x18004a4c3
mov dword [r15 + 0x4c], ecx
cmp eax, r8d
je 0x18004a504
lea rdx, [r15 + 0x4c]
mov rcx, r15
jge 0x18004a4e9
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.180047180
mov eax, dword [r15 + 0x50]
mov dword [r15 + 0x54], eax
jmp 0x18004a4fc
sub eax, r8d
mov r9d, eax
call fcn.180047180
mov eax, dword [r15 + 0x54]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x62], r13b
mov r9d, esi
mov r8, r14
mov edx, dword [r15 + 0x4c]
mov rcx, r15
call fcn.180046c80
test al, al
je 0x18004a546
mov edi, dword [r15 + 0x4c]
lea rcx, [r15 + 0x6c]
xor edx, edx
call fcn.180048210
test rax, rax
je 0x18004a53e
mov dword [rax], edi
mov dword [rax + 4], r13d
mov dword [rax + 8], esi
mov dword [rax + 0xc], 0xffffffff
add dword [r15 + 0x4c], esi
mov byte [r15 + 0x62], r13b
mov byte [r15 + 0xe7c], 1
test r14, r14
je 0x18004a565
mov rax, qword [0x180074ff8]
test rax, rax
je 0x18004a565
dec dword [rax + 0x3b0]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180049e32
mov rsi, qword [rsp + 0x78]
cmp qword [rsi + 0x108], 0
je 0x18004a6dd
mov r12, qword [rsp + 0x60]
mov eax, dword [r12 + 0x54]
mov ecx, dword [r12 + 0x50]
cmp ecx, eax
je 0x18004a5a3
mov edx, eax
cmovl edx, ecx
cmovge eax, ecx
jmp 0x18004a5ac
xor eax, eax
mov edx, eax
mov eax, dword [r12 + 4]
movsxd rdi, eax
mov rax, qword [r12 + 0x18]
lea r8, [rax + rdi*2]
movsxd r14, edx
lea rdx, [rax + r14*2]
xor eax, eax
mov ecx, eax
mov r9d, 0x80
mov r10d, 0x800
nop
test r8, r8
je 0x18004a5da
cmp rdx, r8
jae 0x18004a5fd
movzx eax, word [rdx]
test ax, ax
je 0x18004a5fd
add rdx, 2
cmp ax, r9w
jae 0x18004a5f0
inc ecx
jmp 0x18004a5d0
cmp ax, r10w
sbb eax, eax
add eax, 3
add ecx, eax
jmp 0x18004a5d0
inc ecx
test r13, r13
je 0x18004a60b
inc dword [r13 + 0x3b0]
movsxd rbx, ecx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
mov rcx, qword [r12 + 0x18]
lea r11, [rcx + rdi*2]
lea r10, [rcx + r14*2]
mov r9, rax
lea rdi, [rax + rbx]
lea rbx, [rdi - 1]
cmp rax, rbx
jae 0x18004a687
mov r15d, 0x80
nop dword [rax]
test r11, r11
je 0x18004a64a
cmp r10, r11
jae 0x18004a681
movzx eax, word [r10]
test ax, ax
je 0x18004a681
mov r8d, eax
add r10, 2
cmp eax, r15d
jae 0x18004a667
mov byte [r9], r8b
inc r9
jmp 0x18004a67c
mov edx, edi
sub edx, r9d
dec edx
mov rcx, r9
call fcn.18001a280
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x18004a640
movzx r15d, byte [rsp + 0x58]
mov byte [r9], 0
mov rax, qword [0x180074ff8]
mov r8, qword [rax + 0x108]
test r8, r8
je 0x18004a6b2
mov rdx, rsi
mov rcx, qword [rax + 0x110]
call r8
mov rax, qword [0x180074ff8]
test rsi, rsi
je 0x18004a6c2
test rax, rax
je 0x18004a6c2
dec dword [rax + 0x3b0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov rsi, qword [rsp + 0x78]
jmp 0x18004a6e1
mov r14, qword [rbp + 0x60]
test r15b, r15b
mov r15, qword [rsp + 0x60]
je 0x18004a21c
mov eax, dword [r15 + 0x54]
lea rbx, [r15 + 0x4c]
cmp dword [r15 + 0x50], eax
jne 0x18004a712
xor eax, eax
mov dword [r15 + 0x50], eax
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [rbx], eax
mov byte [r15 + 0x62], 0
mov byte [r15 + 0xe7c], 1
mov r8d, dword [rbx + 8]
mov eax, dword [rbx + 4]
cmp eax, r8d
je 0x18004a21c
mov ecx, dword [r15 + 4]
cmp eax, ecx
jle 0x18004a737
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x18004a742
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x18004a749
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x18004a74f
mov dword [rbx], ecx
cmp eax, r8d
je 0x18004a794
mov rdx, rbx
mov rcx, r15
jge 0x18004a772
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.180047180
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
jmp 0x18004a783
sub eax, r8d
mov r9d, eax
call fcn.180047180
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
mov dword [rbx], eax
mov byte [rbx + 0x16], 0
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov byte [rbx + 0x16], 0
jmp 0x18004a21c
mov r15, qword [rsp + 0x60]
movzx r8d, r9b
xor r8d, 1
add r8d, 0x20000a
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.180047300
mov byte [r15 + 0xe7c], 1
mov dword [r15 + 0xe78], 0xbe99999a
mov eax, dword [r15 + 0x4c]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x50], eax
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov rsi, qword [rsp + 0x78]
jmp 0x18004a21c
mov r14, qword [rbp + 0x60]
mov r15, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
jmp 0x18004a21c
xor al, al
mov edx, dword [rbp - 0x4c]
or dl, al
mov dword [rbp - 0x4c], edx
mov edi, dword [rbp - 0x50]
jmp 0x18004a817
mov r14, qword [rbp + 0x60]
cmp dword [rsi + 0x1c50], edi
jne 0x18004afcd
xor esi, esi
mov qword [rbp - 0x70], rsi
mov r13d, esi
test cl, cl
je 0x18004aa3e
cmp byte [rsp + 0x6c], sil
jne 0x18004aa1f
mov r9, qword [r15 + 0x38]
mov rax, qword [rbp - 0x48]
mov r8, r9
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004a863
inc rax
test ecx, ecx
jne 0x18004a850
test edx, edx
je 0x18004aa1f
mov qword [rbp - 0x70], r9
mov r13d, dword [r15 + 0x30]
dec r13d
xor ecx, ecx
mov qword [rbp - 0x20], rcx
mov r14d, ecx
mov r12d, ecx
mov qword [rbp - 0x18], rcx
test r13d, r13d
jle 0x18004a973
movsxd rbx, r13d
add rbx, r9
mov rdi, r9
mov esi, ecx
nop word [rax + rax]
test rbx, rbx
je 0x18004a8aa
cmp rdi, rbx
jae 0x18004a8d0
cmp byte [rdi], 0
je 0x18004a8d0
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x54]
call fcn.18001a0d0
movsxd rcx, eax
add rdi, rcx
cmp dword [rsp + 0x54], 0
je 0x18004a8d0
inc esi
jmp 0x18004a8a0
lea r14d, [rsi + 1]
test r14d, r14d
jle 0x18004a911
mov edi, r14d
cmp r14d, 8
mov eax, 8
cmovl edi, eax
test edi, edi
jle 0x18004a911
mov rax, qword [rbp + 0x60]
test rax, rax
je 0x18004a8fb
inc dword [rax + 0x3b0]
movsxd rcx, edi
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x1c], edi
mov dword [rbp - 0x20], r14d
mov rdi, qword [rbp - 0x70]
mov rsi, r12
movsxd r15, r14d
dec r15
lea r15, [r12 + r15*2]
cmp r12, r15
jae 0x18004a969
nop dword [rax + rax]
test rbx, rbx
je 0x18004a93a
cmp rdi, rbx
jae 0x18004a969
cmp byte [rdi], 0
je 0x18004a969
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x54]
call fcn.18001a0d0
movsxd rcx, eax
add rdi, rcx
mov eax, dword [rsp + 0x54]
test eax, eax
je 0x18004a969
mov word [rsi], ax
add rsi, 2
cmp rsi, r15
jb 0x18004a930
xor eax, eax
mov word [rsi], ax
mov r15, qword [rsp + 0x60]
lea ebx, [r14 - 1]
test r13d, r13d
mov esi, 0
cmovle ebx, esi
movsxd rdi, dword [r15 + 4]
lea rcx, [r15 + 0x6c]
mov r9d, ebx
mov r8d, edi
xor edx, edx
call fcn.180048400
mov r9, rax
test rax, rax
je 0x18004a9c5
test edi, edi
jle 0x18004a9c5
mov edx, esi
nop word [rax + rax]
mov rcx, qword [r15 + 0x18]
movzx eax, word [rcx + rdx*2]
mov word [r9 + rdx*2], ax
inc rdx
cmp rdx, rdi
jl 0x18004a9b0
mov r8d, dword [r15 + 4]
xor edx, edx
mov rcx, r15
call fcn.180046bb0
test ebx, ebx
jle 0x18004a9f3
mov r9d, ebx
mov r8, r12
xor edx, edx
mov rcx, r15
call fcn.180046c80
test al, al
je 0x18004a9f3
mov dword [r15 + 0x4c], ebx
mov byte [r15 + 0x62], sil
test r12, r12
je 0x18004aa14
mov rax, qword [0x180074ff8]
test rax, rax
je 0x18004aa0a
dec dword [rax + 0x3b0]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov r9d, dword [rsp + 0x74]
cmp byte [rsp + 0x59], 0
je 0x18004aa31
test r9b, 0x20
jne 0x18004aa43
mov r12d, dword [rbp - 0x7c]
mov rdi, qword [rbp - 0x48]
jmp 0x18004aef5
mov r9d, dword [rsp + 0x74]
cmp byte [rsp + 0x6c], 0
jne 0x18004aafc
mov byte [r15 + 0x40], 1
mov eax, dword [r15 + 0x10]
lea ebx, [rax*4 + 1]
mov ecx, dword [r15 + 0x24]
cmp ebx, ecx
jle 0x18004aa95
test ecx, ecx
je 0x18004aa75
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004aa7a
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [r15 + 0x20]
call fcn.18002d550
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov dword [r15 + 0x20], ebx
mov r10, qword [r15 + 0x18]
mov r9, qword [r15 + 0x28]
movsxd r11, ebx
add r11, r9
lea rbx, [r11 - 1]
cmp r9, rbx
jae 0x18004aaf3
mov r15d, 0x80
movzx eax, word [r10]
test ax, ax
je 0x18004aaee
mov r8d, eax
add r10, 2
cmp eax, r15d
jae 0x18004aad3
mov byte [r9], r8b
inc r9
jmp 0x18004aae9
mov edx, r11d
sub edx, r9d
dec edx
mov rcx, r9
call fcn.18001a280
movsxd rcx, eax
add r9, rcx
cmp r9, rbx
jb 0x18004aab6
mov r15, qword [rsp + 0x60]
mov byte [r9], 0
mov r9d, dword [rsp + 0x74]
test r9d, 0x801c0
je 0x18004aeb5
mov r8d, 0x16
test r9b, 0x40
je 0x18004ab2f
mov ecx, dword [r14 + 0x3c]
test ecx, ecx
js 0x18004ab2f
call fcn.180020750
test al, al
je 0x18004ab2f
lea eax, [r8 + 0x2a]
mov r8d, esi
jmp 0x18004ab96
test r9b, r9b
jns 0x18004ab74
mov ecx, dword [r14 + 0x48]
test ecx, ecx
js 0x18004ab54
call fcn.180020750
test al, al
je 0x18004ab54
mov r10d, 0x80
mov eax, r10d
lea r8d, [r10 - 0x7d]
jmp 0x18004ab9c
mov ecx, dword [r14 + 0x4c]
test ecx, ecx
js 0x18004ab74
call fcn.180020750
test al, al
je 0x18004ab74
mov r10d, 0x80
mov eax, r10d
lea r8d, [r10 - 0x7c]
jmp 0x18004ab9c
mov eax, 0x80000
test eax, r9d
je 0x18004ab88
cmp byte [r15 + 0xe7e], 0
jne 0x18004ab96
mov eax, 0x100
test eax, r9d
je 0x18004aeb5
mov r10d, 0x80
mov dword [rbp], esi
mov qword [rbp + 0x19], rsi
mov dword [rbp + 0x21], esi
mov word [rbp + 0x25], si
mov byte [rbp + 0x27], 0
mov dword [rbp - 0x10], eax
mov dword [rbp - 0xc], r9d
mov rax, qword [rbp + 0x90]
mov qword [rbp - 8], rax
mov dword [rbp + 4], r8d
mov rax, qword [r15 + 0x28]
mov qword [rbp + 8], rax
mov eax, dword [r15 + 8]
mov dword [rbp + 0x10], eax
mov eax, dword [r15 + 0x44]
mov dword [rbp + 0x14], eax
mov byte [rbp + 0x18], 0
mov r8, qword [r15 + 0x18]
movsxd rax, dword [r15 + 0x4c]
lea rdx, [r8 + rax*2]
mov rcx, r8
mov ebx, esi
mov r9d, 0x800
test rdx, rdx
je 0x18004abff
cmp rcx, rdx
jae 0x18004ac22
movzx eax, word [rcx]
test ax, ax
je 0x18004ac22
add rcx, 2
cmp ax, r10w
jae 0x18004ac15
inc ebx
jmp 0x18004abf5
cmp ax, r9w
sbb eax, eax
add eax, 3
add ebx, eax
jmp 0x18004abf5
mov dword [rbp + 0x1c], ebx
movsxd rax, dword [r15 + 0x50]
lea rdx, [r8 + rax*2]
mov rcx, r8
mov r14d, esi
test rdx, rdx
je 0x18004ac3d
cmp rcx, rdx
jae 0x18004ac62
movzx eax, word [rcx]
test ax, ax
je 0x18004ac62
add rcx, 2
cmp ax, r10w
jae 0x18004ac54
inc r14d
jmp 0x18004ac33
cmp ax, r9w
sbb eax, eax
add eax, 3
add r14d, eax
jmp 0x18004ac33
mov dword [rbp + 0x20], r14d
movsxd rax, dword [r15 + 0x54]
lea rcx, [r8 + rax*2]
mov r15d, esi
test rcx, rcx
je 0x18004ac7b
cmp r8, rcx
jae 0x18004aca1
movzx eax, word [r8]
test ax, ax
je 0x18004aca1
add r8, 2
cmp ax, r10w
jae 0x18004ac93
inc r15d
jmp 0x18004ac71
cmp ax, r9w
sbb eax, eax
add eax, 3
add r15d, eax
jmp 0x18004ac71
mov dword [rbp + 0x24], r15d
lea rcx, [rbp - 0x10]
call qword [rbp - 0x58]
movzx r12d, byte [rbp + 0x18]
movsxd rcx, dword [rbp + 0x1c]
cmp ecx, ebx
jne 0x18004acbe
test r12b, r12b
je 0x18004ad0c
mov rbx, qword [rbp + 8]
lea rdi, [rbx + rcx]
test rdi, rdi
je 0x18004acd0
cmp rbx, rdi
jae 0x18004acf6
cmp byte [rbx], 0
je 0x18004acf6
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x54]
call fcn.18001a0d0
movsxd rcx, eax
add rbx, rcx
cmp dword [rsp + 0x54], 0
je 0x18004acf6
inc esi
jmp 0x18004acc6
mov rdx, qword [rsp + 0x60]
mov dword [rdx + 0x4c], esi
mov byte [rdx + 0xe7c], 1
mov ecx, dword [rbp + 0x1c]
xor esi, esi
jmp 0x18004ad11
mov rdx, qword [rsp + 0x60]
movsxd rax, dword [rbp + 0x20]
cmp eax, r14d
jne 0x18004ad1f
test r12b, r12b
je 0x18004ad6b
cmp eax, ecx
jne 0x18004ad28
mov esi, dword [rdx + 0x4c]
jmp 0x18004ad68
mov rbx, qword [rbp + 8]
lea rdi, [rbx + rax]
test rdi, rdi
je 0x18004ad3a
cmp rbx, rdi
jae 0x18004ad60
cmp byte [rbx], 0
je 0x18004ad60
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x54]
call fcn.18001a0d0
movsxd rcx, eax
add rbx, rcx
cmp dword [rsp + 0x54], 0
je 0x18004ad60
inc esi
jmp 0x18004ad30
mov eax, dword [rbp + 0x20]
mov rdx, qword [rsp + 0x60]
mov dword [rdx + 0x50], esi
movsxd rcx, dword [rbp + 0x24]
cmp ecx, r15d
jne 0x18004ad7d
test r12b, r12b
je 0x18004aea0
cmp ecx, eax
jne 0x18004ad8c
mov r15, qword [rsp + 0x60]
mov esi, dword [r15 + 0x50]
jmp 0x18004adcd
mov rbx, qword [rbp + 8]
lea rdi, [rbx + rcx]
xor eax, eax
mov esi, eax
test rdi, rdi
je 0x18004ada2
cmp rbx, rdi
jae 0x18004adc8
cmp byte [rbx], 0
je 0x18004adc8
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x54]
call fcn.18001a0d0
movsxd rcx, eax
add rbx, rcx
cmp dword [rsp + 0x54], 0
je 0x18004adc8
inc esi
jmp 0x18004ad98
mov r15, qword [rsp + 0x60]
mov dword [r15 + 0x54], esi
test r12b, r12b
je 0x18004aea5
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp - 0x78]
mov r12d, dword [rbp - 0x7c]
cmp eax, ecx
jle 0x18004ae25
test r12b, r12b
je 0x18004ae25
mov ebx, dword [r15 + 0x10]
sub ebx, ecx
add ebx, eax
mov ecx, dword [r15 + 0x14]
cmp ebx, ecx
jle 0x18004ae21
test ecx, ecx
je 0x18004ae0c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18004ae11
mov eax, 8
mov edx, ebx
cmp eax, ebx
cmovg edx, eax
lea rcx, [r15 + 0x10]
call fcn.18002d6b0
mov dword [r15 + 0x10], ebx
mov rdi, qword [rbp + 8]
mov r14, qword [r15 + 0x18]
mov rbx, r14
movsxd rsi, dword [r15 + 0x10]
dec rsi
lea rsi, [r14 + rsi*2]
cmp r14, rsi
jae 0x18004ae6d
cmp byte [rdi], 0
je 0x18004ae6d
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.18001a0d0
movsxd rcx, eax
add rdi, rcx
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x18004ae6d
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x18004ae40
xor eax, eax
mov word [rbx], ax
sub rbx, r14
sar rbx, 1
mov dword [r15 + 4], ebx
mov eax, dword [rbp + 0x10]
mov dword [r15 + 8], eax
mov dword [r15 + 0xe78], 0xbe99999a
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov r9d, dword [rsp + 0x74]
jmp 0x18004aeb9
mov r15, qword [rsp + 0x60]
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov r9d, dword [rsp + 0x74]
mov r12d, dword [rbp - 0x7c]
mov rdi, qword [rbp - 0x48]
cmp byte [rsp + 0x6c], 0
jne 0x18004aef5
mov r9, qword [r15 + 0x28]
mov rax, r9
mov r8, rdi
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004aee4
inc rax
test ecx, ecx
jne 0x18004aed1
test edx, edx
je 0x18004aef0
mov qword [rbp - 0x70], r9
mov r13d, dword [r15 + 8]
mov r9d, dword [rsp + 0x74]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x18004afac
test r12b, r12b
je 0x18004af71
xor eax, eax
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x28], 0x40000
mov dword [rbp + 0x2c], r9d
mov qword [rbp + 0x40], rdi
mov dword [rbp + 0x48], r13d
lea eax, [r13 + 1]
cmp dword [rbp - 0x68], eax
cmovge eax, dword [rbp - 0x68]
mov dword [rbp + 0x4c], eax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0x28]
call qword [rbp - 0x58]
mov rdi, qword [rbp + 0x40]
mov qword [rbp - 0x48], rdi
mov edx, dword [rbp + 0x4c]
lea r13d, [rdx - 1]
cmp dword [rbp + 0x48], r13d
cmovl r13d, dword [rbp + 0x48]
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov rcx, qword [rbp - 0x70]
jmp 0x18004af74
mov edx, dword [rbp - 0x68]
lea eax, [r13 + 1]
cmp eax, edx
cmovl edx, eax
movsxd rbx, edx
cmp rbx, 1
jb 0x18004afa8
jbe 0x18004afa3
lea r8, [rbx - 1]
mov rdx, rcx
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r14, qword [0x180074ff8]
mov qword [rbp + 0x60], r14
mov byte [rbx + rdi - 1], 0
mov byte [rbp - 0x80], 1
xor ebx, ebx
mov dword [r15 + 0xe80], ebx
mov qword [r15 + 0xe88], rbx
mov qword [r15 + 0xe90], rbx
mov rsi, qword [rsp + 0x78]
mov edi, dword [rbp - 0x50]
jmp 0x18004afcf
xor ebx, ebx
mov r15, qword [rbp + 0x60]
cmp byte [rsp + 0x70], 0
je 0x18004b049
cmp dword [rsi + 0x1c50], edi
jne 0x18004b049
mov ecx, dword [r15 + 0x1c50]
test ecx, ecx
setne al
mov byte [r15 + 0x1c5c], al
test ecx, ecx
je 0x18004b015
mov dword [r15 + 0x1c58], ebx
mov word [r15 + 0x1c5f], 0
mov dword [r15 + 0x1c8c], 0xffffffff
mov dword [r15 + 0x1c50], ebx
mov word [r15 + 0x1c5d], 0
mov qword [r15 + 0x1c80], rbx
mov word [r15 + 0x1c61], 0
mov qword [r15 + 0x1c64], 0
mov qword [r15 + 0x1c70], rbx
mov r10d, dword [rsp + 0x68]
test r10b, r10b
jne 0x18004b125
mov r8d, 1
mov edx, edi
lea rcx, [rbp + 0x78]
call fcn.18001c580
mov rax, qword [0x180074ff8]
movups xmm0, xmmword [rax + 0x1690]
movups xmmword [rbp - 0x20], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x1558]
movss dword [rbp - 0x14], xmm0
lea rcx, [rbp - 0x20]
call fcn.18001a340
mov r8d, eax
movss xmm0, dword [rsi + 0x159c]
movss dword [rsp + 0x20], xmm0
mov r9b, 1
mov rdx, qword [rbp + 0x80]
movaps xmm0, xmm7
unpcklps xmm0, xmm12
movq rcx, xmm0
call fcn.18001c290
movaps xmm2, xmm10
addss xmm2, xmm7
movss dword [rbp - 0x78], xmm2
movss dword [rbp + 0x98], xmm2
movaps xmm15, xmm12
addss xmm15, xmm11
movss dword [rbp + 0x9c], xmm15
movaps xmm0, xmm7
addss xmm0, dword [rsi + 0x1594]
movss dword [rbp - 0x58], xmm0
movaps xmm1, xmm12
addss xmm1, dword [rsi + 0x1598]
movss dword [rbp - 0x54], xmm1
lea r11, [rbp - 0x58]
movss dword [rsp + 0x54], xmm15
mov r15, qword [0x180074ff8]
mov r8, qword [rbp - 0x60]
mov r10d, dword [rsp + 0x68]
jmp 0x18004b16b
movaps xmm2, xmm10
addss xmm2, xmm7
movss dword [rbp - 0x78], xmm2
movss dword [rbp + 0x98], xmm2
movaps xmm1, xmm11
addss xmm1, xmm12
movss dword [rsp + 0x54], xmm1
movaps xmm15, xmm1
movss dword [rbp + 0x9c], xmm1
mov r8, qword [rbp - 0x60]
movsd xmm0, qword [r8 + 0xd8]
movsd qword [rbp - 0x20], xmm0
lea r11, [rbp - 0x20]
movss dword [rbp - 0x70], xmm2
movss dword [rbp + 0x94], xmm12
movss dword [rbp + 0x90], xmm7
movsd xmm0, qword [r11]
movsd qword [rbp + 0x88], xmm0
xorps xmm5, xmm5
xorps xmm1, xmm1
movss dword [rbp - 0x68], xmm1
xorps xmm7, xmm7
movss dword [rbp - 0x7c], xmm7
mov r12, qword [rsp + 0x60]
cmp byte [rbp - 0x7e], 0
je 0x18004b1b7
mov r14, qword [r12 + 0x28]
mov qword [rbp - 0x48], r14
jmp 0x18004b1bb
mov r14, qword [rbp - 0x48]
movzx eax, byte [rsp + 0x50]
mov ecx, dword [rbp - 0x4c]
test al, al
jne 0x18004b3bf
test cl, cl
jne 0x18004b3bf
test r10b, r10b
je 0x18004b231
mov ecx, ebx
movzx edx, byte [r14]
lea rdi, [r14 + 1]
test dl, dl
je 0x18004b205
nop word [rax + rax]
lea eax, [rcx + 1]
cmp dl, 0xa
cmovne eax, ecx
mov ecx, eax
movzx edx, byte [rdi]
inc rdi
test dl, dl
jne 0x18004b1f0
dec rdi
movzx eax, byte [rdi]
cmp al, 0xa
je 0x18004b215
cmp al, 0xd
je 0x18004b215
inc ecx
movss dword [rbp - 0x68], xmm10
movd xmm7, ecx
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [rsi + 0x1978]
movss dword [rbp - 0x7c], xmm7
jmp 0x18004b26f
cmp dword [rsi + 0x1c50], edi
jne 0x18004b240
movsxd rdi, dword [r12 + 8]
jmp 0x18004b25a
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x18004b250
add rdi, r14
mov rax, rdi
sub rax, r14
cmp rax, 0x200000
jge 0x18004bcc1
movups xmm0, xmmword [r15 + 0x1620]
movups xmmword [rbp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r15 + 0x1558]
movss dword [rbp + 0x84], xmm0
lea rcx, [rbp + 0x78]
call fcn.18001a340
mov r9d, eax
mov r8, qword [r8 + 0x280]
lea rdx, [rbp + 0x90]
test r10b, r10b
cmovne rdx, rbx
mov rcx, rdi
movss xmm2, dword [rsi + 0x1978]
mov r10, qword [rsi + 0x1970]
test eax, 0xff000000
je 0x18004bcc1
test rdi, rdi
jne 0x18004b2ed
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r14 + rcx], 0
jne 0x18004b2e0
add rcx, r14
cmp r14, rcx
je 0x18004bcc1
test r10, r10
jne 0x18004b303
mov rax, qword [r8 + 0x38]
mov r10, qword [rax + 8]
xorps xmm8, xmm8
ucomiss xmm2, xmm8
jp 0x18004b318
jne 0x18004b318
mov rax, qword [r8 + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x78], xmm0
test rdx, rdx
je 0x18004b37f
movss xmm1, dword [rdx]
movss xmm0, dword [rbp + 0x78]
comiss xmm0, xmm1
jae 0x18004b33c
movss dword [rbp + 0x78], xmm1
movss xmm1, dword [rdx + 4]
movss xmm0, dword [rbp + 0x7c]
comiss xmm0, xmm1
jae 0x18004b350
movss dword [rbp + 0x7c], xmm1
movss xmm0, dword [rdx + 8]
comiss xmm0, dword [rbp + 0x80]
ja 0x18004b366
movss dword [rbp + 0x80], xmm0
movss xmm0, dword [rdx + 0xc]
comiss xmm0, dword [rbp + 0x84]
ja 0x18004b37c
movss dword [rbp + 0x84], xmm0
test rdx, rdx
setne al
mov byte [rsp + 0x48], al
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
mov r9, qword [r11]
mov rdx, r8
mov rcx, r10
call fcn.18003bfd0
mov r15, qword [0x180074ff8]
jmp 0x18004bcc5
movsxd r13, dword [r12 + 8]
lea rdi, [r14 + r13]
mov r14, qword [r12 + 0x18]
xorps xmm6, xmm6
xorps xmm8, xmm8
mov r9, rbx
mov rsi, rbx
mov r8d, 0xfffffc18
mov ebx, r8d
xor r11d, r11d
mov edx, r11d
test al, al
je 0x18004b3fe
movsxd rax, dword [r12 + 0x4c]
lea r9, [r14 + rax*2]
lea edx, [r11 + 1]
lea r8d, [r11 - 1]
test cl, cl
je 0x18004b420
mov ecx, dword [r12 + 0x54]
cmp dword [r12 + 0x50], ecx
cmovl ecx, dword [r12 + 0x50]
movsxd rax, ecx
lea rsi, [r14 + rax*2]
mov ebx, 0xffffffff
inc edx
movzx eax, r10b
add edx, eax
mov r10d, r11d
mov rax, r14
movzx ecx, word [r14]
test cx, cx
je 0x18004b471
cmp cx, 0xa
jne 0x18004b465
inc r10d
cmp r8d, 0xffffffff
jne 0x18004b452
cmp rax, r9
jb 0x18004b452
mov r8d, r10d
dec edx
test edx, edx
jle 0x18004b471
cmp ebx, 0xffffffff
jne 0x18004b465
cmp rax, rsi
jb 0x18004b465
mov ebx, r10d
dec edx
test edx, edx
jle 0x18004b471
add rax, 2
movzx ecx, word [rax]
test cx, cx
jne 0x18004b435
inc r10d
mov r11d, r10d
cmp r8d, 0xffffffff
cmovne r11d, r8d
cmp ebx, 0xffffffff
cmove ebx, r10d
mov rdx, r9
cmp r9, r14
jbe 0x18004b4a2
nop
lea rax, [rdx - 2]
cmp word [rax], 0xa
je 0x18004b4a2
mov rdx, rax
cmp rax, r14
ja 0x18004b490
mov r8, qword [r15 + 0x1970]
movss xmm4, dword [r15 + 0x1978]
divss xmm4, dword [r8 + 0x14]
movaps xmm1, xmm5
movaps xmm13, xmm5
cmp rdx, r9
jae 0x18004b504
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004b4db
maxss xmm1, xmm13
movaps xmm13, xmm5
jmp 0x18004b4ff
cmp ecx, 0xd
je 0x18004b4ff
cmp ecx, dword [r8]
jge 0x18004b4f0
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004b4f6
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm4
addss xmm13, xmm0
cmp rdx, r9
jb 0x18004b4c4
maxss xmm13, xmm1
mov r9, qword [rsp + 0x78]
movss xmm3, dword [r9 + 0x1978]
movd xmm14, r11d
cvtdq2ps xmm14, xmm14
mulss xmm14, xmm3
test ebx, ebx
js 0x18004b5a3
mov rdx, rsi
cmp rsi, r14
jbe 0x18004b543
lea rax, [rdx - 2]
cmp word [rax], 0xa
je 0x18004b543
mov rdx, rax
cmp rax, r14
ja 0x18004b531
movaps xmm2, xmm5
movaps xmm8, xmm5
cmp rdx, rsi
jae 0x18004b593
nop
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004b567
maxss xmm2, xmm8
movaps xmm8, xmm5
jmp 0x18004b58e
cmp ecx, 0xd
je 0x18004b58e
cmp ecx, dword [r8]
jge 0x18004b57c
mov rax, qword [r8 + 8]
movss xmm1, dword [rax + rcx*4]
jmp 0x18004b582
movss xmm1, dword [r8 + 0x10]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm8, xmm0
cmp rdx, rsi
jb 0x18004b550
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm3
maxss xmm8, xmm2
mov r11d, dword [rsp + 0x68]
test r11b, r11b
je 0x18004b5c4
movss dword [rbp - 0x68], xmm10
movd xmm7, r10d
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm3
movss dword [rbp - 0x7c], xmm7
movzx r8d, byte [rsp + 0x50]
test r8b, r8b
je 0x18004b6ea
cmp byte [r12 + 0xe7c], 0
je 0x18004b6ea
test dword [rsp + 0x74], 0x1000
jne 0x18004b641
movaps xmm0, xmm10
mulss xmm0, dword [0x180068080]
subss xmm10, dword [r9 + 0x1594]
movss xmm2, dword [r12 + 0x48]
movaps xmm1, xmm13
comiss xmm2, xmm13
jbe 0x18004b61f
subss xmm1, xmm0
movaps xmm0, xmm5
maxss xmm0, xmm1
jmp 0x18004b62d
subss xmm1, xmm10
comiss xmm1, xmm2
jb 0x18004b648
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r12 + 0x48], xmm0
jmp 0x18004b648
xor eax, eax
mov dword [r12 + 0x48], eax
test r11b, r11b
je 0x18004b6e1
movaps xmm0, xmm14
subss xmm0, dword [r9 + 0x1978]
comiss xmm9, xmm0
jbe 0x18004b66f
movaps xmm9, xmm5
maxss xmm9, xmm0
jmp 0x18004b691
movaps xmm0, xmm14
subss xmm0, xmm11
comiss xmm0, xmm9
jb 0x18004b691
movss xmm9, dword [r9 + 0x1598]
addss xmm9, xmm9
addss xmm9, xmm0
movss xmm2, dword [r9 + 0x1598]
comiss xmm5, xmm9
jbe 0x18004b6a5
movaps xmm2, xmm5
jmp 0x18004b6bb
addss xmm2, xmm2
addss xmm2, xmm7
subss xmm2, xmm11
maxss xmm2, xmm5
minss xmm2, xmm9
mov rax, qword [rbp - 0x60]
movss xmm0, dword [rax + 0x60]
subss xmm0, xmm2
movss xmm1, dword [rbp + 0x8c]
addss xmm1, xmm0
movss dword [rbp + 0x8c], xmm1
movss dword [rax + 0x60], xmm2
mov byte [r12 + 0xe7c], 0
movss xmm12, dword [r12 + 0x48]
cmp byte [rbp - 0x4c], 0
je 0x18004b98a
mov edx, dword [r12 + 0x54]
mov ecx, dword [r12 + 0x50]
mov eax, edx
cmp ecx, edx
cmovl eax, ecx
cdqe
lea rbx, [r14 + rax*2]
cmovge edx, ecx
movsxd rax, edx
lea rsi, [r14 + rax*2]
test r8b, r8b
je 0x18004b72b
movss xmm1, dword [0x1800680d0]
jmp 0x18004b733
movss xmm1, dword [0x180068098]
movups xmm0, xmmword [r15 + 0x1910]
movups xmmword [rbp + 0x78], xmm0
mulss xmm1, dword [r15 + 0x1558]
shufps xmm0, xmm0, 0xff
mulss xmm0, xmm1
movss dword [rbp + 0x84], xmm0
lea rcx, [rbp + 0x78]
call fcn.18001a340
mov r14d, eax
xorps xmm5, xmm5
test r11b, r11b
je 0x18004b776
xorps xmm10, xmm10
xorps xmm11, xmm11
jmp 0x18004b788
movss xmm10, dword [0x180068188]
movss xmm11, dword [0x1800680e8]
movss xmm9, dword [rbp + 0x88]
addss xmm8, xmm9
subss xmm8, xmm12
movss xmm7, dword [rbp + 0x8c]
addss xmm7, xmm6
subss xmm7, xmm5
cmp rbx, rsi
jae 0x18004b993
movss xmm6, dword [0x180068094]
nop dword [rax]
movss xmm4, dword [r9 + 0x1978]
movaps xmm0, xmm15
addss xmm0, xmm4
comiss xmm7, xmm0
ja 0x18004b983
movss xmm0, dword [rbp - 0x40]
comiss xmm0, xmm7
jbe 0x18004b80b
cmp rbx, rsi
jae 0x18004b968
nop dword [rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004b968
cmp rbx, rsi
jb 0x18004b7f0
jmp 0x18004b968
mov rdx, qword [r15 + 0x1970]
movss xmm2, dword [r15 + 0x1978]
divss xmm2, dword [rdx + 0x14]
movaps xmm3, xmm5
movaps xmm1, xmm5
cmp rbx, rsi
jae 0x18004b86c
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004b862
cmp ecx, 0xd
je 0x18004b826
cmp ecx, dword [rdx]
jge 0x18004b853
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
mulss xmm0, xmm2
addss xmm1, xmm0
jmp 0x18004b826
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
jmp 0x18004b826
movaps xmm3, xmm5
maxss xmm3, xmm1
movaps xmm1, xmm5
maxss xmm1, xmm3
comiss xmm5, xmm1
jb 0x18004b8a3
mov rax, qword [r9 + 0x1970]
cmp dword [rax], 0x20
jle 0x18004b88f
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004b894
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm1, xmm8
movaps xmm0, xmm11
addss xmm0, xmm7
addss xmm8, xmm5
movaps xmm2, xmm10
subss xmm2, xmm4
addss xmm2, xmm7
movss xmm4, dword [rbp - 0x34]
maxss xmm8, xmm4
maxss xmm2, dword [rbp - 0x40]
movss dword [rbp + 0x78], xmm8
movss dword [rbp + 0x7c], xmm2
movss xmm3, dword [rbp - 0x78]
minss xmm1, xmm3
minss xmm0, xmm15
movss dword [rbp + 0x80], xmm1
movss dword [rbp + 0x84], xmm0
comiss xmm0, dword [rbp - 0x40]
jbe 0x18004b968
comiss xmm15, xmm2
jbe 0x18004b968
comiss xmm1, xmm4
jbe 0x18004b968
comiss xmm3, xmm8
jbe 0x18004b968
xor eax, eax
mov dword [rsp + 0x28], eax
movss dword [rsp + 0x20], xmm5
mov r9d, r14d
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x78]
mov rax, qword [rbp - 0x60]
mov rcx, qword [rax + 0x280]
call fcn.180037dd0
movss xmm0, dword [rbp - 0x70]
movss dword [rbp - 0x70], xmm0
movss xmm0, dword [rsp + 0x54]
movss dword [rsp + 0x54], xmm0
mov r15, qword [0x180074ff8]
movss xmm9, dword [rbp + 0x88]
xorps xmm5, xmm5
mov r9, qword [rsp + 0x78]
movaps xmm8, xmm9
subss xmm8, xmm12
addss xmm7, dword [r9 + 0x1978]
cmp rbx, rsi
jb 0x18004b7c0
mov r11d, dword [rsp + 0x68]
jmp 0x18004b993
movss xmm9, dword [rbp + 0x88]
test r11b, r11b
jne 0x18004b9a5
cmp r13, 0x200000
jge 0x18004bb1c
movups xmm0, xmmword [r15 + 0x1620]
movups xmmword [rbp + 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r15 + 0x1558]
movss dword [rbp + 0x84], xmm0
lea rcx, [rbp + 0x78]
call fcn.18001a340
mov r9d, eax
mov rbx, qword [rbp - 0x60]
mov r8, qword [rbx + 0x280]
mov rcx, rdi
subss xmm9, xmm12
movss dword [rbp - 0x58], xmm9
movss xmm0, dword [rbp + 0x8c]
xorps xmm5, xmm5
subss xmm0, xmm5
movss dword [rbp - 0x54], xmm0
mov rsi, qword [rsp + 0x78]
movss xmm2, dword [rsi + 0x1978]
mov r10, qword [rsi + 0x1970]
lea rdx, [rbp + 0x90]
test r11b, r11b
mov eax, 0
cmovne rdx, rax
test r9d, 0xff000000
je 0x18004bb25
mov r14, qword [rbp - 0x48]
test rdi, rdi
jne 0x18004ba4f
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r14 + rcx], al
jne 0x18004ba43
add rcx, r14
cmp r14, rcx
je 0x18004bb29
test r10, r10
jne 0x18004ba65
mov rax, qword [r8 + 0x38]
mov r10, qword [rax + 8]
ucomiss xmm2, xmm5
jp 0x18004ba75
jne 0x18004ba75
mov rax, qword [r8 + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp + 0x78], xmm0
test rdx, rdx
je 0x18004badc
movss xmm1, dword [rdx]
movss xmm0, dword [rbp + 0x78]
comiss xmm0, xmm1
jae 0x18004ba99
movss dword [rbp + 0x78], xmm1
movss xmm1, dword [rdx + 4]
movss xmm0, dword [rbp + 0x7c]
comiss xmm0, xmm1
jae 0x18004baad
movss dword [rbp + 0x7c], xmm1
movss xmm0, dword [rdx + 8]
comiss xmm0, dword [rbp + 0x80]
ja 0x18004bac3
movss dword [rbp + 0x80], xmm0
movss xmm0, dword [rdx + 0xc]
comiss xmm0, dword [rbp + 0x84]
ja 0x18004bad9
movss dword [rbp + 0x84], xmm0
test rdx, rdx
setne al
mov byte [rsp + 0x48], al
movss dword [rsp + 0x40], xmm5
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
mov r9, qword [rbp - 0x58]
mov rdx, r8
mov rcx, r10
call fcn.18003bfd0
mov r15, qword [0x180074ff8]
xorps xmm5, xmm5
jmp 0x18004bb29
mov rsi, qword [rsp + 0x78]
mov rbx, qword [rbp - 0x60]
mov r14, qword [rbp - 0x48]
cmp byte [rsp + 0x50], 0
je 0x18004bcac
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [r12 + 0xe78]
movss dword [r12 + 0xe78], xmm0
cmp byte [rsi + 0xca], 0
je 0x18004bb79
comiss xmm5, xmm0
jae 0x18004bb79
movss xmm1, dword [0x1800680d8]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x1800680b8]
comiss xmm1, xmm0
jae 0x18004bb79
xor cl, cl
jmp 0x18004bb7b
mov cl, 1
addss xmm13, dword [rbp + 0x88]
subss xmm13, xmm12
cvttss2si eax, xmm13
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm0, dword [rbp + 0x8c]
addss xmm0, xmm14
xorps xmm8, xmm8
subss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x78], xmm6
movaps xmm0, xmm7
subss xmm0, dword [rsi + 0x1978]
addss xmm0, dword [0x180068094]
movss dword [rbp + 0x7c], xmm0
movaps xmm2, xmm6
movss xmm13, dword [0x1800680d0]
addss xmm2, xmm13
movss dword [rbp + 0x80], xmm2
movaps xmm1, xmm7
subss xmm1, dword [0x1800680e4]
movss dword [rbp + 0x84], xmm1
movss xmm12, dword [rbp - 0x40]
test cl, cl
je 0x18004bc80
comiss xmm1, xmm12
jbe 0x18004bc80
movss xmm3, dword [rsp + 0x54]
comiss xmm3, xmm0
jbe 0x18004bc80
comiss xmm2, dword [rbp - 0x34]
jbe 0x18004bc80
movss xmm0, dword [rbp - 0x70]
comiss xmm0, xmm6
jbe 0x18004bc80
movups xmm0, xmmword [r15 + 0x1620]
movups xmmword [rbp - 0x20], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r15 + 0x1558]
movss dword [rbp - 0x14], xmm0
movss dword [rbp - 0x58], xmm6
movss dword [rbp - 0x54], xmm1
lea rcx, [rbp - 0x20]
call fcn.18001a340
mov r9d, eax
movss dword [rsp + 0x20], xmm13
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0x78]
mov rcx, qword [rbx + 0x280]
call fcn.180037b60
mov r15, qword [0x180074ff8]
movss xmm14, dword [rbp - 0x38]
cmp byte [rsp + 0x6c], 0
jne 0x18004bcc5
subss xmm6, xmm13
subss xmm7, dword [rsi + 0x1978]
movss dword [rsi + 0x3080], xmm6
movss dword [rsi + 0x3084], xmm7
jmp 0x18004bcc5
movss xmm12, dword [rbp - 0x40]
movss xmm13, dword [0x1800680d0]
movss xmm14, dword [rbp - 0x38]
xorps xmm8, xmm8
mov ebx, dword [rbp - 0x3c]
test bl, bl
je 0x18004bd54
mov rbx, r15
mov rax, qword [r15 + 0x1c08]
mov rcx, qword [rax + 0x280]
movsxd rdx, dword [rcx + 0x68]
lea eax, [rdx - 1]
mov dword [rcx + 0x68], eax
test eax, eax
jne 0x18004bcf3
xor eax, eax
jmp 0x18004bcfc
mov rax, qword [rcx + 0x70]
mov rax, qword [rax + rdx*8 - 0x10]
mov qword [rcx + 0x98], rax
call fcn.180035300
movsxd rcx, dword [r15 + 0x1d80]
lea eax, [rcx - 1]
mov dword [r15 + 0x1d80], eax
mov r15, qword [0x180074ff8]
test eax, eax
jne 0x18004bd40
mov rcx, qword [r15 + 0xb8]
test rcx, rcx
jne 0x18004bd4c
mov rax, qword [r15 + 0xa8]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx]
jmp 0x18004bd4c
mov rax, qword [rbx + 0x1d88]
mov rcx, qword [rax + rcx*8 - 0x10]
call fcn.180025c50
mov ebx, dword [rbp - 0x3c]
cmp byte [rsp + 0x68], 0
je 0x18004bdfe
movss xmm1, dword [rbp - 0x68]
movss dword [rbp - 0x58], xmm1
movss xmm3, dword [rbp - 0x7c]
addss xmm3, dword [rsi + 0x1598]
movss dword [rbp - 0x54], xmm3
mov rax, qword [r15 + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [r15 + 0x1c08]
cmp byte [rax + 0x93], 0
jne 0x18004bded
movss xmm2, dword [rax + 0xd8]
addss xmm1, xmm2
movss xmm0, dword [rax + 0xdc]
addss xmm3, xmm0
movss dword [rbp + 0x78], xmm2
movss dword [rbp + 0x7c], xmm0
movss dword [rbp + 0x80], xmm1
movss dword [rbp + 0x84], xmm3
movss xmm1, dword [0x180068188]
lea rcx, [rbp - 0x58]
call fcn.180026390
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x78]
call fcn.1800264e0
call fcn.180020ad0
call fcn.180026a50
mov r15, qword [0x180074ff8]
cmp byte [rsi + 0x30ec], 0
je 0x18004bf82
test bl, bl
jne 0x18004bf82
mov rbx, qword [r15 + 0x1c08]
xor eax, eax
mov qword [r15 + 0x3118], rax
mov qword [r15 + 0x3110], rax
test rdi, rdi
jne 0x18004be55
mov rdi, r14
cmp r14, 0xffffffffffffffff
jae 0x18004be55
movzx ecx, byte [rdi]
test cl, cl
je 0x18004be55
lea rax, [rdi + 1]
cmp cl, 0x23
jne 0x18004be4c
cmp byte [rax], cl
je 0x18004be55
mov rdi, rax
cmp rax, 0xffffffffffffffff
jb 0x18004be38
movss xmm0, dword [r15 + 0x1598]
addss xmm0, dword [r15 + 0x3120]
addss xmm0, xmm13
movss xmm1, dword [rbp + 0x8c]
movss dword [r15 + 0x3120], xmm1
comiss xmm1, xmm0
jbe 0x18004be96
lea rcx, [0x180066464]
call fcn.18002b9c0
mov byte [r15 + 0x3124], 1
lea r8, [0x180066cb5]
lea rdx, [0x180066cb4]
lea rcx, [rbp + 0x88]
call fcn.18002ba00
mov ecx, dword [r15 + 0x3128]
mov eax, dword [rbx + 0x158]
cmp ecx, eax
jle 0x18004beca
mov dword [r15 + 0x3128], eax
mov ecx, eax
mov esi, dword [rbx + 0x158]
sub esi, ecx
mov r8, rdi
sub r8, r14
mov edx, 0xa
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rdi
test rax, rax
cmovne rbx, rax
cmp r14, rbx
jne 0x18004bef9
cmp rbx, rdi
je 0x18004bf5c
mov r9d, ebx
sub r9d, r14d
cmp byte [r15 + 0x3124], 0
lea edx, [rsi*4]
jne 0x18004bf15
mov edx, 1
mov qword [rsp + 0x20], r14
lea r8, [0x18005fa6b]
lea rcx, str._s_.s
call fcn.18002b9c0
mov byte [r15 + 0x3124], 0
cmp byte [rbx], 0xa
jne 0x18004bf4e
lea rcx, [0x180066464]
call fcn.18002b9c0
mov byte [r15 + 0x3124], 1
cmp rbx, rdi
je 0x18004bf5c
lea r14, [rbx + 1]
jmp 0x18004bed2
lea r8, [0x180066cb1]
lea rdx, [0x180066cb0]
lea rcx, [rbp + 0x88]
call fcn.18002ba00
mov r15, qword [0x180074ff8]
mov rsi, qword [rsp + 0x78]
movss xmm0, dword [rbp - 0x30]
comiss xmm0, xmm8
jbe 0x18004bfc2
addss xmm14, dword [rsi + 0x15ac]
addss xmm12, dword [rsi + 0x1598]
mov r9b, 1
xor r8d, r8d
mov rdx, qword [rbp - 0x28]
movaps xmm0, xmm14
unpcklps xmm0, xmm12
movq rcx, xmm0
call fcn.18001ae70
mov r15, qword [0x180074ff8]
movzx ecx, byte [rbp - 0x80]
mov eax, dword [rsp + 0x74]
test cl, cl
je 0x18004bfe6
bt eax, 0x1b
jb 0x18004bfe6
mov word [r15 + 0x1c60], 0x101
or dword [r15 + 0x1cc8], 4
test al, 0x20
mov eax, ecx
movzx ecx, byte [rsp + 0x59]
cmovne eax, ecx
jmp 0x180048cab