Function at 0x18004d180
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x220
mov r8, qword [0x18010eee8]
mov r14, rcx
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
mov rax, qword [r8 + 0x1af0]
mov byte [rax + 0x80], 1
mov rdi, qword [r8 + 0x1af0]
cmp byte [rdi + 0x83], 0
jne 0x18004d395
mov ecx, dword [rbp + 0x188]
mov ebx, ecx
mov r13, qword [0x18010eee8]
mov eax, ecx
shr eax, 0xe
and al, 1
shr ebx, 0x14
mov dword [rsp + 0x58], eax
and bl, 1
mov eax, ecx
mov qword [rsp + 0x68], r13
shr eax, 0xf
and al, 1
mov dword [rsp + 0x60], ecx
mov dword [rbp - 0x58], eax
mov eax, ecx
shr eax, 0x10
not al
mov dword [rsp + 0x70], ebx
and al, 1
mov dword [rbp - 0x68], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rbp - 0x7c], eax
test bl, bl
je 0x18004d252
call fcn.180028e30
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.18002c730
movss xmm8, dword [0x18005f6a0]
lea rcx, [rbp + 0x48]
mov r9b, 1
movss dword [rsp + 0x20], xmm8
xor r8d, r8d
mov dword [rsp + 0x7c], eax
mov rdx, r14
mov esi, eax
call fcn.180029440
test bl, bl
je 0x18004d29f
movss xmm7, dword [r13 + 0x19a8]
mulss xmm7, dword [0x18005f5e8]
jmp 0x18004d2a4
movss xmm7, dword [rbp + 0x4c]
movss xmm6, dword [r13 + 0x1594]
call fcn.1800291d0
mov rdx, qword [rbp + 0x180]
addss xmm6, xmm6
movaps xmm2, xmm0
lea rcx, [rbp + 0x60]
mov rdx, qword [rdx]
addss xmm6, xmm7
movaps xmm3, xmm6
call fcn.1800290e0
movss xmm4, dword [rbp + 0x48]
xorps xmm12, xmm12
comiss xmm4, xmm12
jbe 0x18004d2ed
addss xmm4, dword [r13 + 0x15a8]
jmp 0x18004d2f0
xorps xmm4, xmm4
movss xmm3, dword [rdi + 0xd0]
mov r15d, 1
movss xmm14, dword [rbp + 0x64]
movaps xmm1, xmm3
movss xmm13, dword [rbp + 0x60]
movaps xmm0, xmm14
mov qword [rbp - 0x70], rdi
addss xmm4, xmm13
addss xmm1, xmm13
lea rcx, [rbp + 0x50]
addss xmm0, dword [rdi + 0xd4]
movss dword [rbp - 0x48], xmm3
movss xmm2, dword [rdi + 0xd4]
addss xmm4, xmm3
movss dword [rbp - 0x44], xmm2
movss dword [rbp - 0x40], xmm1
movss dword [rbp - 0x3c], xmm0
movaps xmm0, xmm2
movss dword [rbp + 0x50], xmm3
addss xmm0, xmm14
movss dword [rbp + 0x54], xmm2
movss dword [rbp + 0x58], xmm4
movss dword [rbp + 0x5c], xmm0
test bl, bl
je 0x18004d493
lea r8, [rbp - 0x48]
mov edx, esi
call fcn.18002e220
test al, al
jne 0x18004d3d1
movss xmm1, dword [r13 + 0x1594]
lea rcx, [rbp + 0x50]
call fcn.18002e4b0
call fcn.18002adb0
xor al, al
lea r11, [rsp + 0x220]
movaps xmm6, xmmword [r11 - 0x20]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm12, xmmword [r11 - 0x80]
movaps xmm13, xmmword [r11 - 0x90]
movaps xmm14, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [r13 + 0x170c]
mov ecx, 3
call fcn.180032fc0
movss xmm1, dword [r13 + 0x1598]
mov ecx, 6
call fcn.1800330b0
movss xmm1, dword [r13 + 0x159c]
mov ecx, 7
call fcn.1800330b0
lea rdx, [r13 + 0x1590]
mov ecx, r15d
call fcn.180033020
movss xmm0, dword [rbp - 0x40]
lea r8, [rbp - 8]
movss xmm1, dword [rbp - 0x3c]
movzx r9d, r15b
subss xmm0, dword [rbp - 0x48]
subss xmm1, dword [rbp - 0x44]
mov edx, esi
mov dword [rsp + 0x20], 0x10004
mov rcx, r14
movss dword [rbp - 8], xmm0
movss dword [rbp - 4], xmm1
call fcn.180028c20
mov ecx, 3
movzx ebx, al
call fcn.180032a90
mov ecx, r15d
call fcn.180032a40
test bl, bl
jne 0x18004d472
call fcn.18002a880
jmp 0x18004d390
mov r14, qword [r13 + 0x1af0]
mov qword [rbp - 0x70], r14
mov eax, dword [r14 + 0x140]
or dword [r14 + 0x148], eax
subss xmm13, dword [r14 + 0x74]
jmp 0x18004d4b8
movss xmm1, dword [r13 + 0x1594]
call fcn.18002e4b0
lea r8, [rbp - 0x48]
mov edx, esi
lea rcx, [rbp + 0x50]
call fcn.18002e220
test al, al
je 0x18004d395
mov qword [rsp + 0x218], r12
lea rcx, [rbp - 0x48]
mov edx, esi
movaps xmmword [rsp + 0x170], xmm15
call fcn.18002e360
mov byte [rsp + 0x5d], al
movzx ebx, al
test al, al
je 0x18004d4e6
mov dword [r13 + 0x1f78], r15d
xor eax, eax
lea r14, [r13 + 0x2070]
cmp dword [r14], esi
mov r15d, eax
mov edx, esi
mov rcx, rdi
cmove r15, r14
mov qword [rbp - 8], r15
call fcn.18002bf40
movzx esi, al
test al, al
je 0x18004d52b
cmp qword [r13 + 0x1da0], rdi
jne 0x18004d52b
mov ecx, dword [rdi + 0x1b0]
cmp dword [r13 + 0x1db0], ecx
jne 0x18004d52b
mov r12b, 1
jmp 0x18004d538
xor r12b, r12b
mov byte [rsp + 0x54], 1
test sil, sil
jne 0x18004d53d
mov byte [rsp + 0x54], 0
test bl, bl
je 0x18004d550
cmp byte [r13 + 0x420], 0
je 0x18004d550
mov r13b, 1
jmp 0x18004d553
xor r13b, r13b
mov rdx, qword [rsp + 0x68]
mov ecx, dword [rsp + 0x7c]
mov eax, dword [rdx + 0x1b38]
cmp eax, ecx
je 0x18004d586
cmp dword [rdx + 0x1c7c], ecx
je 0x18004d57f
cmp dword [rdx + 0x1c70], ecx
jne 0x18004d586
cmp dword [rdx + 0x1c90], 3
jne 0x18004d586
mov byte [rsp + 0x50], 1
jmp 0x18004d58b
mov byte [rsp + 0x50], 0
cmp byte [rsp + 0x70], 0
je 0x18004d5bf
test r15, r15
je 0x18004d5bf
test eax, eax
jne 0x18004d5bf
mov rcx, qword [rbp - 0x70]
lea rdx, str.SCROLLY
xor r8d, r8d
call fcn.18002c790
mov rdx, qword [rsp + 0x68]
cmp dword [rdx + 0x1b78], eax
jne 0x18004d5bf
mov bl, 1
jmp 0x18004d5cc
xor bl, bl
cmp byte [rsp + 0x70], bl
je 0x18004d5f0
test r15, r15
je 0x18004d5f0
mov rcx, qword [rbp - 0x70]
lea rdx, str.SCROLLY
xor r8d, r8d
call fcn.18002c790
mov rdx, qword [rsp + 0x68]
cmp dword [rdx + 0x1b38], eax
jne 0x18004d5f0
mov cl, 1
jmp 0x18004d5f2
xor cl, cl
mov eax, dword [rdx + 0x1b38]
mov r8d, dword [rsp + 0x7c]
movzx edx, byte [rsp + 0x50]
mov byte [rsp + 0x53], cl
mov byte [rsp + 0x5c], 0
cmp eax, r8d
je 0x18004d627
test byte [rsp + 0x60], 0x10
jne 0x18004d61b
test dl, dl
je 0x18004d627
cmp byte [rsp + 0x70], 0
mov byte [rsp + 0x74], 1
je 0x18004d62c
mov byte [rsp + 0x74], 0
test sil, sil
jne 0x18004d757
test r13b, r13b
jne 0x18004d757
test bl, bl
jne 0x18004d757
test dl, dl
jne 0x18004d757
test cl, cl
jne 0x18004d75a
mov r12d, dword [rsp + 0x60]
mov r14d, dword [rsp + 0x74]
mov r13, qword [rsp + 0x68]
mov eax, dword [rsp + 0x7c]
cmp dword [r13 + 0x1b38], eax
je 0x18004d704
test sil, sil
je 0x18004d704
mov rdx, rdi
mov ecx, eax
call fcn.180035b70
mov ecx, dword [rsp + 0x7c]
mov rdx, rdi
call fcn.180035e40
mov rcx, rdi
call fcn.18002bd40
mov eax, dword [r13 + 0x1b4c]
mov ecx, dword [rsp + 0x70]
or eax, 3
mov dword [r13 + 0x1b4c], eax
test cl, cl
jne 0x18004d6bb
test r12b, r12b
jns 0x18004d6c5
or eax, 0xc
mov dword [r13 + 0x1b4c], eax
mov rax, qword [r13 + 0x1b58]
or dword [r13 + 0x1b50], 2
or rax, 0x180
mov qword [r13 + 0x1b58], rax
test cl, cl
je 0x18004d6f0
or rax, 0x60
mov qword [r13 + 0x1b58], rax
test r12d, 0x440
je 0x18004d704
or rax, 1
mov qword [r13 + 0x1b58], rax
mov edi, dword [rsp + 0x7c]
cmp dword [r13 + 0x1b38], edi
jne 0x18004d8e6
test r15, r15
jne 0x18004d71f
call fcn.180029b70
cmp dword [r13 + 0x1b38], edi
jne 0x18004d8e6
cmp byte [r13 + 0x420], 0
je 0x18004d8f2
test bl, bl
jne 0x18004d8f2
test sil, sil
jne 0x18004d8f2
mov byte [rsp + 0x5c], 1
mov dl, 1
jmp 0x18004d8f8
mov sil, 1
mov bl, 1
cmp eax, r8d
je 0x18004d656
mov r15, r14
mov qword [rbp - 8], r14
mov dword [r14 + 0xe70], 0xbe99999a
mov rax, 0xffffffffffffffff
mov r14, qword [rbp + 0x170]
nop word [rax + rax]
cmp byte [r14 + rax + 1], 0
lea rax, [rax + 1]
jne 0x18004d790
lea ebx, [rax + 1]
mov edx, ebx
lea rcx, [r15 + 0x30]
call fcn.180052c30
mov rcx, qword [r15 + 0x38]
mov rdx, r14
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
mov ebx, dword [rbp + 0x178]
lea rcx, [r15 + 0x10]
xor r8d, r8d
mov qword [rbp - 0x60], r8
lea edx, [rbx + 1]
call fcn.18003f670
lea rcx, [r15 + 0x20]
xor edx, edx
call fcn.180052c30
mov rcx, qword [r15 + 0x18]
lea rax, [rbp - 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov r8, r14
mov byte [r15 + 0x40], 0
mov edx, ebx
call fcn.18002d760
mov ecx, dword [rbp - 0x60]
mov r8d, eax
sub ecx, r14d
mov dword [r15 + 4], eax
mov eax, dword [rsp + 0x7c]
mov dword [r15 + 8], ecx
cmp dword [r15], eax
jne 0x18004d849
cmp dword [r15 + 0x4c], r8d
mov edx, r8d
mov ecx, r8d
cmovl edx, dword [r15 + 0x4c]
cmp dword [r15 + 0x50], r8d
mov dword [r15 + 0x4c], edx
cmovl ecx, dword [r15 + 0x50]
cmp dword [r15 + 0x54], r8d
mov dword [r15 + 0x50], ecx
cmovl r8d, dword [r15 + 0x54]
mov ecx, dword [rsp + 0x70]
mov dword [r15 + 0x54], r8d
jmp 0x18004d8a6
xor ecx, ecx
mov dword [r15], eax
mov qword [r15 + 0x48], rcx
mov dword [r15 + 0xe68], ecx
mov qword [r15 + 0x50], rcx
mov dword [r15 + 0x60], ecx
mov ecx, dword [rsp + 0x70]
movzx eax, cl
xor al, 1
mov dword [r15 + 0xe62], 0x630000
mov dword [r15 + 0xe6c], 0x3e7
mov dword [r15 + 0x58], 0x10000
mov byte [r15 + 0x5c], al
test cl, cl
jne 0x18004d8a6
mov edx, dword [rsp + 0x74]
test r12b, r12b
movzx edx, dl
mov eax, 1
cmovne edx, eax
mov dword [rsp + 0x74], edx
mov r12d, dword [rsp + 0x60]
bt r12d, 0xd
jae 0x18004d8b7
mov byte [r15 + 0x58], 1
test cl, cl
jne 0x18004d8df
cmp byte [rsp + 0x54], cl
jne 0x18004d8d3
test r13b, r13b
je 0x18004d8df
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x148], cl
je 0x18004d8df
mov r14b, 1
movzx ebx, r14b
jmp 0x18004d660
mov bl, 1
jmp 0x18004d65b
test r15, r15
je 0x18004d8f6
cmp byte [rsp + 0x53], 0
je 0x18004d8f6
mov dl, 1
jmp 0x18004d8f8
xor dl, dl
mov byte [rsp + 0x51], dl
test r15, r15
je 0x18004d913
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x18004d913
test dl, dl
je 0x18004d913
mov cl, 1
jmp 0x18004d915
xor cl, cl
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x74], ecx
movzx edi, cl
mov byte [rbp - 0x7e], 0
mov byte [rsp + 0x54], 0
test al, al
je 0x18004d9d6
test r15, r15
je 0x18004d9d6
test dl, dl
jne 0x18004d946
test cl, cl
je 0x18004d9fb
mov esi, dword [rbp + 0x178]
lea rcx, [r15 + 0x10]
xor eax, eax
mov qword [rbp - 0x60], rax
lea edx, [rsi + 1]
call fcn.18003f670
mov r12, qword [rbp + 0x170]
lea rax, [rbp - 0x60]
mov edx, dword [r15 + 0x10]
mov r8, r12
mov rcx, qword [r15 + 0x18]
xor r9d, r9d
mov qword [rsp + 0x20], rax
call fcn.18002d760
mov ecx, dword [rbp - 0x60]
mov edx, eax
sub ecx, r12d
mov dword [r15 + 4], eax
cmp dword [r15 + 0x4c], eax
mov r8d, eax
mov dword [r15 + 8], ecx
cmovl edx, dword [r15 + 0x4c]
cmp dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], edx
mov edx, eax
cmovl edx, dword [r15 + 0x50]
cmp dword [r15 + 0x54], eax
mov dword [r15 + 0x50], edx
cmovl r8d, dword [r15 + 0x54]
xor eax, eax
cmp edx, r8d
mov dword [r15 + 0x54], r8d
movzx edx, byte [rsp + 0x51]
mov ecx, eax
mov eax, dword [rsp + 0x58]
cmovne ecx, edi
mov dword [rsp + 0x74], ecx
jmp 0x18004d9dc
mov esi, dword [rbp + 0x178]
test dl, dl
jne 0x18004d9e4
test cl, cl
je 0x18004da01
mov ebx, dword [rsp + 0x7c]
test al, al
jne 0x18004da0e
test r15, r15
je 0x18004da0e
cmp byte [r15 + 0x40], al
je 0x18004da0e
mov al, 1
jmp 0x18004da10
mov esi, dword [rbp + 0x178]
mov ebx, dword [rsp + 0x7c]
cmp dword [r13 + 0x1b38], ebx
je 0x18004d9e8
xor al, al
cmp qword [rbp + 0x168], 0
mov byte [rbp - 0x7f], al
je 0x18004da37
test al, al
je 0x18004da27
mov rax, qword [r15 + 0x28]
jmp 0x18004da2e
mov rax, qword [rbp + 0x170]
cmp byte [rax], 0
jne 0x18004da37
mov al, 1
jmp 0x18004da39
xor al, al
cmp byte [rbp - 0x58], 0
mov byte [rsp + 0x52], al
je 0x18004dad8
test al, al
jne 0x18004dad8
mov rcx, qword [r13 + 0x19a0]
mov edx, 0x2a
call fcn.18003bb30
mov rcx, qword [r13 + 0x19a0]
lea r10, [r13 + 0x2f00]
mov r9, rax
mov edx, dword [rcx + 0x14]
mov dword [r10 + 0x14], edx
mov rcx, qword [r13 + 0x19a0]
mov edx, dword [rcx + 0x60]
mov rcx, r10
mov dword [r10 + 0x60], edx
mov rdx, qword [r13 + 0x19a0]
movsd xmm0, qword [rdx + 0x40]
movsd qword [r10 + 0x40], xmm0
mov rdx, qword [r13 + 0x19a0]
mov r8d, dword [rdx + 0x64]
mov dword [r10 + 0x64], r8d
mov rdx, qword [r13 + 0x19a0]
mov eax, dword [rdx + 0x68]
mov dword [r10 + 0x68], eax
mov rax, qword [r13 + 0x19a0]
mov rdx, qword [rax + 0x48]
mov qword [r10 + 0x48], rdx
mov qword [r10 + 0x38], r9
mov eax, dword [r9 + 4]
mov dword [r10 + 0x10], eax
call fcn.180032de0
mov r12, qword [rbp + 0x198]
xor r10d, r10d
mov r8d, 0x20000c
mov rax, qword [rbp + 0x190]
movss xmm15, dword [0x18005f570]
mov dword [rbp - 0x60], r10d
cmp dword [r13 + 0x1b38], ebx
jne 0x18004dedb
mov ecx, dword [r15 + 8]
mov qword [r15 + 0xe80], rax
mov dword [r15 + 0x44], esi
mov qword [r15 + 0xe88], r12
mov dword [rbp - 0x60], ecx
mov ecx, dword [rsp + 0x60]
mov dword [r15 + 0xe78], ecx
movzx edx, byte [r13 + 0x138]
test dl, dl
sete al
mov byte [r13 + 0x1b45], al
mov eax, 1
mov dword [r13 + 0x3234], eax
movss xmm6, dword [r13 + 0x130]
subss xmm6, dword [rbp - 0x48]
subss xmm6, dword [r13 + 0x1590]
addss xmm6, dword [r15 + 0x48]
cmp byte [rsp + 0x70], r10b
je 0x18004db91
mov rax, qword [rbp - 0x70]
movss xmm2, dword [r13 + 0x134]
subss xmm2, dword [rax + 0xd4]
subss xmm2, dword [r13 + 0x1594]
jmp 0x18004db9f
movss xmm2, dword [r13 + 0x19a8]
mulss xmm2, xmm15
movzx edi, byte [r13 + 0xc9]
test r14b, r14b
jne 0x18004dd0e
movzx eax, byte [rsp + 0x5d]
test al, al
je 0x18004dbcb
test dil, dil
jne 0x18004dc37
cmp byte [r13 + 0x425], r10b
jne 0x18004dd0e
lea rbx, [r15 + 0xe75]
movzx ecx, byte [rbx]
cmp byte [r13 + 0x420], r10b
je 0x18004dc90
test cl, cl
jne 0x18004dc90
test al, al
je 0x18004dc2f
cmp byte [r15 + 0x5c], r10b
je 0x18004dc08
xor r8d, r8d
lea rcx, [rbp - 0x28]
mov rdx, r15
call fcn.18004fe30
movss xmm2, dword [rbp - 0x1c]
movaps xmm1, xmm6
mov rcx, r15
call fcn.180052f50
mov dword [r15 + 0x4c], eax
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x54], eax
mov byte [r15 + 0x5b], 0
mov dword [r15 + 0xe70], 0xbe99999a
mov rax, rbx
jmp 0x18004dd2c
cmp byte [r13 + 0x425], r10b
je 0x18004dbcb
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.1800536e0
mov r8d, 0x60000d
mov byte [r15 + 0xe74], 1
lea rdx, [r15 + 0x4c]
mov dword [r15 + 0xe70], 0xbe99999a
mov rcx, r15
call fcn.1800536e0
lea rax, [r15 + 0xe75]
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x18004dd2c
mov rax, rbx
test dl, dl
je 0x18004dd2c
test cl, cl
jne 0x18004dd2c
ucomiss xmm12, dword [r13 + 0x3c0]
jne 0x18004dcb7
ucomiss xmm12, dword [r13 + 0x3c4]
je 0x18004dd2c
cmp byte [r15 + 0x5c], r10b
je 0x18004dcd1
xor r8d, r8d
lea rcx, [rbp - 0x28]
mov rdx, r15
call fcn.18004fe30
movss xmm2, dword [rbp - 0x1c]
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x18004dce3
mov eax, dword [r15 + 0x4c]
mov dword [r15 + 0x50], eax
movaps xmm1, xmm6
mov rcx, r15
call fcn.180052f50
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
mov rax, rbx
mov dword [r15 + 0xe70], 0xbe99999a
mov byte [r15 + 0xe74], 1
jmp 0x18004dd2c
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
lea rax, [r15 + 0xe75]
mov byte [rax], 1
mov dword [r15 + 0x50], r10d
mov byte [r15 + 0x5b], r10b
cmp byte [rax], 0
je 0x18004dd3e
cmp byte [r13 + 0x138], 0
jne 0x18004dd3e
mov byte [rax], 0
cmp byte [r13 + 0x148], 0
je 0x18004dd52
cmp byte [r13 + 0x14a], 0
je 0x18004dd61
test dil, dil
je 0x18004dd65
cmp byte [r13 + 0x14b], 0
je 0x18004dd65
mov bl, 1
jmp 0x18004dd67
xor bl, bl
mov edx, dword [rsp + 0x60]
bt edx, 0xa
jae 0x18004df69
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004df69
mov dl, 1
call fcn.18002df90
test al, al
mov eax, dword [rsp + 0x58]
je 0x18004df5d
test bl, bl
jne 0x18004df5d
cmp byte [r13 + 0x149], bl
jne 0x18004df5d
test al, al
jne 0x18004df5d
mov rcx, qword [r13 + 0x1550]
movsxd rax, dword [r13 + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x18004dde6
nop
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x18004df51
cmp rcx, rdx
jb 0x18004ddd0
mov r14, qword [rbp + 0x190]
lea rcx, [rbp - 0x78]
mov edx, dword [rsp + 0x60]
mov r8, r14
mov r9, r12
mov dword [rbp - 0x78], 9
call fcn.18004fa70
test al, al
je 0x18004de2e
mov r8d, dword [rbp - 0x78]
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.1800536e0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
mov eax, dword [rsp + 0x58]
mov edx, dword [rsp + 0x60]
cmp dword [r13 + 0x1548], 0
jle 0x18004ded4
test bl, bl
jne 0x18004dec6
test al, al
jne 0x18004dec6
cmp byte [rsp + 0x50], al
jne 0x18004dec6
xor eax, eax
mov edi, eax
mov ebx, eax
nop dword [rax]
mov rax, qword [r13 + 0x1550]
movzx ecx, word [rbx + rax]
mov dword [rbp - 0x78], ecx
cmp ecx, 9
jne 0x18004de7d
cmp byte [r13 + 0x149], 0
jne 0x18004deb3
mov r9, r12
lea rcx, [rbp - 0x78]
mov r8, r14
call fcn.18004fa70
test al, al
je 0x18004deb3
mov r8d, dword [rbp - 0x78]
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.1800536e0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
mov edx, dword [rsp + 0x60]
inc edi
add rbx, 2
cmp edi, dword [r13 + 0x1548]
jl 0x18004de60
xor edx, edx
lea rcx, [r13 + 0x1548]
call fcn.18003f670
mov ebx, dword [rsp + 0x7c]
xor r10d, r10d
xor cl, cl
cmp dword [r13 + 0x1b38], ebx
jne 0x18004ee92
cmp byte [r13 + 0x1b44], cl
jne 0x18004ea1a
cmp byte [rsp + 0x5c], cl
jne 0x18004ea1a
movzx r8d, byte [r13 + 0xc9]
movzx edx, byte [r13 + 0x149]
movzx eax, dl
mov byte [rbp - 0x7d], r8b
neg al
movzx eax, byte [r13 + 0x148]
sbb esi, esi
and esi, 0x400000
test r8b, r8b
je 0x18004df79
lea r9, [r13 + 0x14b]
mov qword [rbp - 0x78], r9
cmp byte [r9], cl
je 0x18004df48
mov ecx, 1
test al, al
je 0x18004df4b
mov ecx, r10d
test ecx, ecx
je 0x18004dfaa
jmp 0x18004df90
mov r14, qword [rbp + 0x190]
jmp 0x18004de2e
mov r14, qword [rbp + 0x190]
jmp 0x18004de32
mov r14, qword [rbp + 0x190]
mov eax, dword [rsp + 0x58]
jmp 0x18004de36
lea rcx, [r13 + 0x14b]
test al, al
je 0x18004dfa3
cmp byte [rcx], 0
jne 0x18004dfa3
mov r9, rcx
mov qword [rbp - 0x78], rcx
cmp byte [r13 + 0x14a], 0
jne 0x18004dfaa
test dl, dl
jne 0x18004dfaa
mov r12b, 1
jmp 0x18004dfad
mov r9, rcx
mov qword [rbp - 0x78], rcx
xor r12b, r12b
mov byte [rsp + 0x53], r12b
movzx ecx, al
test r8b, r8b
je 0x18004dfe7
cmp byte [r13 + 0x14b], 0
je 0x18004dfe7
test dl, dl
je 0x18004dfe7
movzx eax, byte [r13 + 0x148]
movzx ecx, al
test al, al
jne 0x18004dfe7
cmp byte [r13 + 0x14a], al
jne 0x18004dfe7
mov byte [rsp + 0x78], 1
jmp 0x18004dff4
mov byte [rsp + 0x78], 0
movzx eax, cl
test r8b, r8b
je 0x18004e04b
cmp byte [r9], 0
movzx ecx, byte [r13 + 0x14a]
mov byte [rsp + 0x50], cl
je 0x18004e054
test al, al
jne 0x18004e054
test cl, cl
jne 0x18004e054
mov r13b, 1
mov r8, qword [rsp + 0x68]
xor bl, bl
mov byte [rsp + 0x50], cl
movzx r14d, r13b
test dl, dl
je 0x18004e077
mov byte [rsp + 0x50], cl
test al, al
jne 0x18004e077
mov byte [rsp + 0x50], cl
cmp byte [r8 + 0x14a], bl
jne 0x18004e077
mov byte [rsp + 0x50], cl
cmp byte [r9], bl
jne 0x18004e077
mov dil, 1
mov byte [rsp + 0x50], cl
jmp 0x18004e07a
mov byte [rsp + 0x50], cl
mov byte [rsp + 0x78], 0
xor r13d, r13d
test al, al
je 0x18004e011
mov r8, qword [rsp + 0x68]
test dl, dl
jne 0x18004e016
cmp byte [r8 + 0x14a], r13b
jne 0x18004e016
cmp byte [r9], r13b
jne 0x18004e016
mov bl, 1
xor r14d, r14d
xor dil, dil
test r12b, r12b
je 0x18004e09b
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x18004e09b
mov dl, 1
call fcn.18002df90
test al, al
jne 0x18004e0b9
test dil, dil
je 0x18004e0dd
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004e0dd
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e0dd
cmp byte [rsp + 0x58], 0
jne 0x18004e0dd
cmp byte [rbp - 0x58], 0
jne 0x18004e0dd
cmp byte [rsp + 0x70], 0
je 0x18004e0d7
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x18004e0dd
mov byte [rbp - 0x80], 1
jmp 0x18004e0e1
mov byte [rbp - 0x80], 0
test r12b, r12b
je 0x18004e102
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x18004e102
mov dl, 1
call fcn.18002df90
test al, al
jne 0x18004e11f
test bl, bl
je 0x18004e13d
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004e13d
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e13d
cmp byte [rbp - 0x58], 0
jne 0x18004e13d
cmp byte [rsp + 0x70], 0
je 0x18004e136
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x18004e13d
mov byte [rsp + 0x5d], 1
jmp 0x18004e142
mov byte [rsp + 0x5d], 0
test r12b, r12b
je 0x18004e163
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x18004e163
mov dl, 1
call fcn.18002df90
test al, al
jne 0x18004e181
test dil, dil
je 0x18004e18f
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x18004e18f
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e18f
mov edi, dword [rsp + 0x58]
test dil, dil
jne 0x18004e193
mov r12b, 1
jmp 0x18004e196
mov edi, dword [rsp + 0x58]
xor r12b, r12b
movzx ebx, byte [rsp + 0x53]
test bl, bl
je 0x18004e1cb
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004e1cb
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e1cb
test dil, dil
jne 0x18004e1cb
cmp byte [rbp - 0x68], dil
je 0x18004e1cb
mov dil, 1
jmp 0x18004e1d2
xor dil, dil
test bl, bl
je 0x18004e1ee
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x18004e1ee
mov dl, 1
call fcn.18002df90
test al, al
jne 0x18004e211
cmp byte [rsp + 0x78], 0
je 0x18004e222
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x18004e222
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e222
cmp byte [rsp + 0x58], 0
jne 0x18004e222
cmp byte [rbp - 0x68], 0
je 0x18004e222
mov bl, 1
jmp 0x18004e224
xor bl, bl
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x18004e271
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e271
test r14b, r14b
je 0x18004e249
mov ecx, 0x200004
jmp 0x18004e25b
cmp byte [rsp + 0x50], 0
mov ecx, 0x200000
mov eax, 0x20000c
cmovne ecx, eax
or ecx, esi
lea rdx, [r15 + 0x4c]
mov r8d, ecx
mov rcx, r15
call fcn.1800536e0
jmp 0x18004e9db
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x18004e2d2
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e2d2
test r14b, r14b
je 0x18004e2aa
mov ecx, 0x200005
lea rdx, [r15 + 0x4c]
or esi, ecx
mov rcx, r15
mov r8d, esi
call fcn.1800536e0
jmp 0x18004e9db
cmp byte [rsp + 0x50], 0
lea rdx, [r15 + 0x4c]
mov ecx, 0x200001
mov eax, 0x20000d
cmovne ecx, eax
or esi, ecx
mov rcx, r15
mov r8d, esi
call fcn.1800536e0
jmp 0x18004e9db
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004e349
mov dl, 1
call fcn.18002df90
mov r14d, dword [rsp + 0x70]
test al, al
je 0x18004e34e
test r14b, r14b
je 0x18004e34e
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x148], 0
je 0x18004e329
mov rbx, qword [rbp - 0x70]
mov r13, rax
mov rcx, rbx
movss xmm1, dword [rbx + 0x58]
subss xmm1, dword [rax + 0x19a8]
maxss xmm1, xmm12
call fcn.180036150
jmp 0x18004e9f3
movzx eax, r13b
lea rdx, [r15 + 0x4c]
mov rcx, r15
lea r8d, [rax*4 + 0x200002]
or r8d, esi
call fcn.1800536e0
jmp 0x18004e9db
mov r14d, dword [rsp + 0x70]
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x18004e3c7
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e3c7
test r14b, r14b
je 0x18004e3c7
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x148], 0
je 0x18004e3a7
call fcn.18002ccb0
mov rax, qword [rbp - 0x70]
mov r13, qword [rsp + 0x68]
mov rcx, rax
movss xmm1, dword [r13 + 0x19a8]
addss xmm1, dword [rax + 0x58]
minss xmm1, xmm0
call fcn.180036150
jmp 0x18004e9f3
movzx eax, r13b
lea rdx, [r15 + 0x4c]
mov rcx, r15
lea r8d, [rax*4 + 0x200003]
or r8d, esi
call fcn.1800536e0
jmp 0x18004e9db
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x18004e425
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e425
mov eax, esi
mov r8d, 0x200004
or eax, 0x200006
mov r13, qword [rsp + 0x68]
or r8d, esi
cmp byte [r13 + 0x148], 0
cmovne r8d, eax
lea rdx, [r15 + 0x4c]
mov rcx, r15
call fcn.1800536e0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x18004e9f3
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x18004e44d
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e44d
mov eax, esi
mov r8d, 0x200005
or eax, 0x200007
jmp 0x18004e3ed
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x18004e48a
mov dl, 1
call fcn.18002df90
mov r13d, dword [rsp + 0x58]
test al, al
je 0x18004e48f
test r13b, r13b
jne 0x18004e48f
or esi, 0x200008
lea rdx, [r15 + 0x4c]
mov r8d, esi
mov rcx, r15
call fcn.1800536e0
jmp 0x18004e9db
mov r13d, dword [rsp + 0x58]
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x18004e55d
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e55d
test r13b, r13b
jne 0x18004e55d
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
jne 0x18004e4ef
cmp byte [rsp + 0x50], r13b
je 0x18004e502
lea rdx, [r15 + 0x4c]
mov r8d, 0x60000c
mov rcx, r15
call fcn.1800536e0
mov byte [r15 + 0xe74], 1
mov dword [r15 + 0xe70], 0xbe99999a
mov r13, qword [rsp + 0x68]
or esi, 0x200009
mov r8d, esi
jmp 0x18004e401
cmp byte [rbp - 0x7d], 0
je 0x18004e4ef
mov rax, qword [rbp - 0x78]
mov r13, qword [rsp + 0x68]
cmp byte [rax], 0
je 0x18004e4f4
cmp byte [r13 + 0x14a], 0
jne 0x18004e4f4
cmp byte [r13 + 0x148], 0
jne 0x18004e4f4
lea rdx, [r15 + 0x4c]
mov r8d, 0x600004
mov rcx, r15
call fcn.1800536e0
or esi, 0x200009
mov byte [r15 + 0xe74], 1
mov r8d, esi
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x18004e401
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x18004e576
mov dl, 1
call fcn.18002df90
test al, al
jne 0x18004e58f
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x18004e601
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e601
mov edx, dword [rsp + 0x60]
mov eax, edx
mov r13, qword [rsp + 0x68]
shr eax, 0xb
and al, 1
test r14b, r14b
je 0x18004e5b4
movzx ecx, byte [r13 + 0x148]
test al, al
je 0x18004e5c3
test cl, cl
jne 0x18004e5c7
mov byte [rsp + 0x5c], 1
mov byte [rsp + 0x54], 1
jmp 0x18004e9f3
test cl, cl
jne 0x18004e5b4
cmp byte [rsp + 0x58], 0
jne 0x18004e9f3
mov r9, qword [rbp + 0x198]
lea rcx, [rbp - 0x68]
mov r8, qword [rbp + 0x190]
mov dword [rbp - 0x68], 0xa
call fcn.18004fa70
test al, al
je 0x18004e9f3
mov r8d, dword [rbp - 0x68]
jmp 0x18004e401
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x18004e62a
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e62a
mov r13, qword [rsp + 0x68]
mov cl, 1
mov byte [rsp + 0x5c], cl
jmp 0x18004e9f5
test dil, dil
jne 0x18004e9b4
test bl, bl
jne 0x18004e9b4
cmp byte [rsp + 0x53], bl
je 0x18004e675
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x18004e675
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004e675
xor eax, eax
mov byte [r15 + 0x5b], bl
mov dword [r15 + 0x50], eax
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x4c], eax
jmp 0x18004e9e6
movzx r13d, byte [rbp - 0x80]
test r13b, r13b
jne 0x18004e889
cmp byte [rsp + 0x5d], r13b
jne 0x18004e889
test r12b, r12b
je 0x18004e9ee
call fcn.18002c1d0
mov rbx, rax
test rax, rax
je 0x18004e9ee
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x18004e6b0
movsxd rcx, eax
lea rcx, [rcx*2 + 2]
call fcn.18002eb60
xor r13d, r13d
mov qword [rbp - 0x28], rax
mov r14, rax
mov esi, r13d
cmp byte [rbx], r13b
je 0x18004e73c
mov r12, qword [rbp + 0x198]
mov rdi, rax
mov r15, qword [rbp + 0x190]
mov r14d, dword [rsp + 0x60]
xor r8d, r8d
lea rcx, [rbp - 0x78]
mov rdx, rbx
call fcn.18002d1c0
movsxd rcx, eax
add rbx, rcx
cmp dword [rbp - 0x78], r13d
je 0x18004e734
mov r9, r12
lea rcx, [rbp - 0x78]
mov r8, r15
mov edx, r14d
call fcn.18004fa70
test al, al
je 0x18004e72f
movzx eax, word [rbp - 0x78]
inc esi
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r13b
jne 0x18004e6f1
mov r15, qword [rbp - 8]
mov r14, qword [rbp - 0x28]
movsxd rax, esi
mov word [r14 + rax*2], r13w
test esi, esi
jle 0x18004e87c
mov r8d, dword [r15 + 0x54]
mov eax, dword [r15 + 0x50]
mov edx, dword [r15 + 4]
mov ecx, edx
cmp eax, r8d
je 0x18004e78d
mov r9d, eax
cmp eax, edx
jle 0x18004e76d
mov dword [r15 + 0x50], edx
mov r9d, edx
mov r10d, r8d
cmp r8d, edx
jle 0x18004e77e
mov dword [r15 + 0x54], edx
mov r10d, edx
mov ecx, edx
mov r8d, r10d
mov eax, r9d
cmp r9d, r10d
jne 0x18004e78d
mov dword [r15 + 0x4c], r9d
mov r9d, dword [r15 + 0x4c]
cmp r9d, edx
jle 0x18004e79d
mov dword [r15 + 0x4c], edx
mov r9d, edx
cmp eax, r8d
je 0x18004e7ce
mov edx, eax
cmp eax, ecx
jle 0x18004e7ae
mov dword [r15 + 0x50], ecx
mov edx, ecx
mov r10d, r8d
cmp r8d, ecx
jle 0x18004e7bd
mov dword [r15 + 0x54], ecx
mov r10d, ecx
mov r8d, r10d
mov eax, edx
cmp edx, r10d
jne 0x18004e7ce
mov dword [r15 + 0x4c], edx
mov r9d, edx
cmp r9d, ecx
jle 0x18004e7d7
mov dword [r15 + 0x4c], ecx
cmp eax, r8d
je 0x18004e818
lea rdx, [r15 + 0x4c]
mov rcx, r15
jge 0x18004e7fd
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.1800533e0
mov eax, dword [r15 + 0x50]
mov dword [r15 + 0x54], eax
jmp 0x18004e810
sub eax, r8d
mov r9d, eax
call fcn.1800533e0
mov eax, dword [r15 + 0x54]
mov dword [r15 + 0x50], eax
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0x5b], r13b
mov edx, dword [r15 + 0x4c]
mov r9d, esi
mov r8, r14
mov rcx, r15
call fcn.18004fd10
test al, al
je 0x18004e85c
mov edi, dword [r15 + 0x4c]
lea rcx, [r15 + 0x64]
xor edx, edx
call fcn.180052ce0
test rax, rax
je 0x18004e852
mov dword [rax], edi
mov dword [rax + 4], r13d
mov dword [rax + 8], esi
mov dword [rax + 0xc], 0xffffffff
add dword [r15 + 0x4c], esi
mov byte [r15 + 0x5b], r13b
jmp 0x18004e874
movzx eax, word [r15 + 0xe62]
test ax, ax
je 0x18004e874
dec ax
mov word [r15 + 0xe62], ax
mov byte [r15 + 0xe74], 1
mov rcx, r14
call fcn.18002eb80
jmp 0x18004e9ee
mov rax, qword [rsp + 0x68]
cmp qword [rax + 0x108], 0
je 0x18004e901
mov eax, dword [r15 + 0x54]
mov ecx, dword [r15 + 0x50]
cmp ecx, eax
je 0x18004e8ae
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x18004e8b6
xor eax, eax
mov edx, eax
mov eax, dword [r15 + 4]
movsxd r14, eax
mov rax, qword [r15 + 0x18]
movsxd rsi, edx
lea rdx, [rax + r14*2]
lea rcx, [rax + rsi*2]
call fcn.18002d6c0
lea ebx, [rax + 1]
movsxd rcx, ebx
call fcn.18002eb60
mov rcx, qword [r15 + 0x18]
mov edx, ebx
mov rdi, rax
lea r9, [rcx + r14*2]
lea r8, [rcx + rsi*2]
mov rcx, rax
call fcn.18002da00
mov rcx, rdi
call fcn.180035c40
mov rcx, rdi
call fcn.18002eb80
test r13b, r13b
je 0x18004e9ee
mov eax, dword [r15 + 0x54]
lea rbx, [r15 + 0x4c]
cmp dword [r15 + 0x50], eax
jne 0x18004e92d
xor eax, eax
mov byte [r15 + 0x5b], 0
mov dword [r15 + 0x50], eax
mov eax, dword [r15 + 4]
mov dword [r15 + 0x54], eax
mov dword [rbx], eax
mov byte [r15 + 0xe74], 1
mov r8d, dword [rbx + 8]
mov eax, dword [rbx + 4]
cmp eax, r8d
je 0x18004e9ee
mov ecx, dword [r15 + 4]
cmp eax, ecx
jle 0x18004e952
mov dword [rbx + 4], ecx
mov eax, ecx
cmp r8d, ecx
jle 0x18004e95d
mov dword [rbx + 8], ecx
mov r8d, ecx
cmp eax, r8d
jne 0x18004e964
mov dword [rbx], eax
cmp dword [rbx], ecx
jle 0x18004e96a
mov dword [rbx], ecx
cmp eax, r8d
je 0x18004e9ae
mov rdx, rbx
mov rcx, r15
jge 0x18004e997
sub r8d, eax
mov r9d, r8d
mov r8d, eax
call fcn.1800533e0
mov eax, dword [rbx + 4]
mov dword [rbx + 8], eax
mov dword [rbx], eax
mov byte [rbx + 0xf], 0
mov byte [rbx + 0xf], 0
jmp 0x18004e9ee
sub eax, r8d
mov r9d, eax
call fcn.1800533e0
mov eax, dword [rbx + 8]
mov dword [rbx + 4], eax
mov dword [rbx], eax
mov byte [rbx + 0xf], 0
mov byte [rbx + 0xf], 0
jmp 0x18004e9ee
movzx r8d, dil
lea rdx, [r15 + 0x4c]
xor r8d, 1
mov rcx, r15
add r8d, 0x20000a
call fcn.1800536e0
mov eax, dword [r15 + 0x4c]
mov dword [r15 + 0x54], eax
mov dword [r15 + 0x50], eax
mov dword [r15 + 0xe70], 0xbe99999a
mov byte [r15 + 0xe74], 1
mov r13, qword [rsp + 0x68]
xor cl, cl
mov eax, dword [r15 + 0x54]
cmp dword [r15 + 0x50], eax
je 0x18004ea0a
cmp byte [rsp + 0x51], 0
je 0x18004ea0a
mov al, 1
jmp 0x18004ea0c
xor al, al
mov edx, dword [rsp + 0x74]
mov ebx, dword [rsp + 0x7c]
or dl, al
mov dword [rsp + 0x74], edx
cmp dword [r13 + 0x1b38], ebx
jne 0x18004ee92
xor r14d, r14d
mov r12d, r14d
mov esi, r14d
test cl, cl
je 0x18004ebfe
cmp byte [rsp + 0x58], sil
jne 0x18004eb66
mov r9, qword [r15 + 0x38]
mov rax, qword [rbp + 0x170]
mov r8, r9
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004ea67
inc rax
test ecx, ecx
jne 0x18004ea54
test edx, edx
je 0x18004eb66
mov esi, dword [r15 + 0x30]
mov r12, r9
dec esi
mov ebx, r14d
mov rdi, r14
test esi, esi
jle 0x18004ead2
movsxd r14, esi
mov rcx, r9
add r14, r9
mov rdx, r14
call fcn.18002d360
lea ebx, [rax + 1]
test ebx, ebx
jle 0x18004eab8
mov ecx, 8
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x18004eab8
movsxd rcx, eax
add rcx, rcx
call fcn.18002eb60
mov rdi, rax
xor eax, eax
mov r9, r14
mov r8, r12
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, rdi
call fcn.18002d760
xor r14d, r14d
dec ebx
lea rcx, [r15 + 0x64]
test esi, esi
cmovle ebx, r14d
movsxd r14, dword [r15 + 4]
mov r8d, r14d
mov r9d, ebx
xor edx, edx
call fcn.180052ed0
mov r9, rax
test rax, rax
je 0x18004eb27
mov r8, r14
test r14d, r14d
jle 0x18004eb27
xor r14d, r14d
mov edx, r14d
nop word [rax + rax]
mov rcx, qword [r15 + 0x18]
movzx eax, word [rcx + rdx*2]
mov word [r9 + rdx*2], ax
inc rdx
cmp rdx, r8
jl 0x18004eb10
jmp 0x18004eb2a
xor r14d, r14d
mov r8d, dword [r15 + 4]
xor edx, edx
mov rcx, r15
call fcn.18004fc70
test ebx, ebx
jle 0x18004eb59
mov r9d, ebx
mov r8, rdi
xor edx, edx
mov rcx, r15
call fcn.18004fd10
test al, al
je 0x18004eb59
mov dword [r15 + 0x4c], ebx
mov byte [r15 + 0x5b], 0
test rdi, rdi
je 0x18004eb66
mov rcx, rdi
call fcn.18002eb80
cmp byte [rsp + 0x54], 0
je 0x18004eb7b
mov edi, dword [rsp + 0x60]
test dil, 0x20
jne 0x18004ec02
mov r10, qword [rbp + 0x170]
mov ebx, dword [rbp - 0x7c]
test r12, r12
je 0x18004ee77
test bl, bl
je 0x18004ee57
xor eax, eax
mov dword [rbp], 0x40000
mov qword [rbp + 0x10], rax
lea rcx, [rbp]
mov eax, dword [rsp + 0x60]
xorps xmm0, xmm0
mov dword [rbp + 4], eax
lea eax, [rsi + 1]
cmp dword [rbp + 0x178], eax
movdqu xmmword [rbp + 0x28], xmm0
cmovge eax, dword [rbp + 0x178]
mov dword [rbp + 0x24], eax
mov rax, qword [rbp + 0x198]
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], r10
mov dword [rbp + 0x20], esi
call qword [rbp + 0x190]
mov ecx, dword [rbp + 0x24]
mov r10, qword [rbp + 0x18]
mov qword [rbp + 0x170], r10
lea esi, [rcx - 1]
cmp dword [rbp + 0x20], esi
cmovl esi, dword [rbp + 0x20]
jmp 0x18004ee5d
mov edi, dword [rsp + 0x60]
cmp byte [rsp + 0x58], 0
jne 0x18004ec36
mov edx, dword [r15 + 0x10]
lea rcx, [r15 + 0x20]
mov byte [r15 + 0x40], 1
lea edx, [rdx*4 + 1]
call fcn.180052c30
mov r8, qword [r15 + 0x18]
xor r9d, r9d
mov edx, dword [r15 + 0x20]
mov rcx, qword [r15 + 0x28]
call fcn.18002da00
test edi, 0x1c0
je 0x18004ee04
mov ebx, 0x16
test dil, 0x40
je 0x18004ec6e
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x18004ec6e
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004ec6e
lea eax, [rbx + 0x2a]
mov ebx, r14d
jmp 0x18004ecc6
test dil, dil
jns 0x18004ecb9
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x18004ec96
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004ec96
mov eax, 0x80
lea ebx, [rax - 0x7d]
jmp 0x18004ecc6
mov rax, qword [0x18010eee8]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x18004ecb9
mov dl, 1
call fcn.18002df90
test al, al
je 0x18004ecb9
mov eax, 0x80
lea ebx, [rax - 0x7c]
jmp 0x18004ecc6
mov eax, pe_nt_image_headers64
test eax, edi
je 0x18004ee04
mov dword [rbp], eax
mov rax, qword [rbp + 0x198]
mov qword [rbp + 8], rax
mov rax, qword [r15 + 0x28]
mov qword [rbp + 0x18], rax
mov eax, dword [r15 + 8]
mov dword [rbp + 0x20], eax
mov eax, dword [r15 + 0x44]
mov dword [rbp + 0x24], eax
movsxd rax, dword [r15 + 0x4c]
mov dword [rbp + 0x14], ebx
mov rbx, qword [r15 + 0x18]
mov rcx, rbx
mov dword [rbp + 0x10], r14d
mov qword [rbp + 0x29], r14
mov dword [rbp + 0x31], r14d
lea rdx, [rbx + rax*2]
mov word [rbp + 0x35], r14w
mov byte [rbp + 0x37], 0
mov dword [rbp + 4], edi
mov byte [rbp + 0x28], 0
call fcn.18002d6c0
movsxd rdx, dword [r15 + 0x50]
mov rcx, rbx
mov edi, eax
mov dword [rbp + 0x2c], eax
lea rdx, [rbx + rdx*2]
call fcn.18002d6c0
movsxd rdx, dword [r15 + 0x54]
mov rcx, rbx
mov r14d, eax
mov dword [rbp + 0x30], eax
lea rdx, [rbx + rdx*2]
call fcn.18002d6c0
lea rcx, [rbp]
mov dword [rbp + 0x34], eax
mov ebx, eax
call qword [rbp + 0x190]
movsxd rcx, dword [rbp + 0x2c]
cmp ecx, edi
je 0x18004ed7a
mov rdx, rcx
mov rcx, qword [rbp + 0x18]
add rdx, rcx
call fcn.18002d360
mov dword [r15 + 0x4c], eax
mov byte [r15 + 0xe74], 1
movsxd rax, dword [rbp + 0x30]
cmp eax, r14d
je 0x18004ed94
mov rcx, qword [rbp + 0x18]
lea rdx, [rcx + rax]
call fcn.18002d360
mov dword [r15 + 0x50], eax
movsxd rax, dword [rbp + 0x34]
cmp eax, ebx
je 0x18004edad
mov rcx, qword [rbp + 0x18]
lea rdx, [rcx + rax]
call fcn.18002d360
mov dword [r15 + 0x54], eax
cmp byte [rbp + 0x28], 0
mov ebx, dword [rbp - 0x7c]
je 0x18004ee07
mov edx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x60]
cmp edx, eax
jle 0x18004edd1
test bl, bl
je 0x18004edd1
lea rcx, [r15 + 0x10]
sub edx, eax
add edx, dword [rcx]
call fcn.18003f670
mov r8, qword [rbp + 0x18]
xor eax, eax
mov edx, dword [r15 + 0x10]
xor r9d, r9d
mov rcx, qword [r15 + 0x18]
mov qword [rsp + 0x20], rax
call fcn.18002d760
mov dword [r15 + 4], eax
mov eax, dword [rbp + 0x20]
mov dword [r15 + 8], eax
mov dword [r15 + 0xe70], 0xbe99999a
jmp 0x18004ee07
mov ebx, dword [rbp - 0x7c]
cmp byte [rsp + 0x58], 0
mov r10, qword [rbp + 0x170]
jne 0x18004eb85
mov r9, qword [r15 + 0x28]
mov r8, r10
mov rax, r9
sub r8, r9
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18004ee43
inc rax
test ecx, ecx
jne 0x18004ee30
test edx, edx
je 0x18004eb85
mov esi, dword [r15 + 8]
mov r12, r9
jmp 0x18004eb85
mov ecx, dword [rbp + 0x178]
lea eax, [rsi + 1]
mov rdx, r12
cmp eax, ecx
cmovl ecx, eax
movsxd r8, ecx
mov rcx, r10
call fcn.18002d180
mov byte [rbp - 0x7e], 1
mov ebx, dword [rsp + 0x7c]
xor eax, eax
mov dword [r15 + 0xe78], eax
mov qword [r15 + 0xe80], rax
mov qword [r15 + 0xe88], rax
cmp byte [rsp + 0x5c], 0
je 0x18004eea7
cmp dword [r13 + 0x1b38], ebx
jne 0x18004eea7
call fcn.180029b70
mov r10d, dword [rsp + 0x70]
movaps xmmword [rsp + 0x1c0], xmm10
test r10b, r10b
jne 0x18004ef64
mov r8d, 1
lea rcx, [rbp - 0x48]
mov edx, ebx
call fcn.180033ab0
movss xmm10, dword [0x18005f58c]
mov ecx, 0x10
movss xmm6, dword [r13 + 0x1598]
movaps xmm1, xmm10
call fcn.18002c580
mov rdx, qword [rbp - 0x40]
mov r9b, 1
mov rcx, qword [rbp - 0x48]
mov r8d, eax
movss dword [rsp + 0x20], xmm6
call fcn.180033900
movss xmm2, dword [rbp - 0x48]
lea rax, [rbp - 0x60]
movss xmm3, dword [rbp - 0x44]
movaps xmm0, xmm2
mov r10d, dword [rsp + 0x70]
addss xmm0, xmm13
mov r14, qword [rbp - 0x70]
movaps xmm1, xmm14
movss dword [rbp - 0x38], xmm2
addss xmm1, xmm3
movss dword [rbp - 0x34], xmm3
movss dword [rbp - 0x30], xmm0
movaps xmm0, xmm3
movss dword [rbp - 0x2c], xmm1
addss xmm0, dword [r13 + 0x1594]
addss xmm2, dword [r13 + 0x1590]
movss dword [rbp - 0x5c], xmm0
movss dword [rbp - 0x60], xmm2
jmp 0x18004efb1
movss xmm1, dword [rbp - 0x48]
lea rax, [rbp - 0x28]
movss xmm3, dword [rbp - 0x44]
movaps xmm0, xmm13
mov r14, qword [rbp - 0x70]
addss xmm0, xmm1
movss xmm10, dword [0x18005f58c]
movss dword [rbp - 0x38], xmm1
movaps xmm1, xmm3
addss xmm1, xmm14
movss dword [rbp - 0x34], xmm3
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm1
movsd xmm0, qword [r14 + 0xd0]
movsd qword [rbp - 0x28], xmm0
cmp byte [rbp - 0x7f], 0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x50], xmm0
movss dword [rbp - 0x78], xmm12
movss dword [rbp - 0x7c], xmm12
je 0x18004efd9
mov rsi, qword [r15 + 0x28]
mov qword [rbp + 0x170], rsi
jmp 0x18004efe0
mov rsi, qword [rbp + 0x170]
movzx r12d, byte [rsp + 0x52]
xor r11d, r11d
mov edi, r11d
test r12b, r12b
je 0x18004f01c
mov rax, qword [rbp + 0x168]
mov rdi, 0xffffffffffffffff
mov rsi, rax
mov qword [rbp + 0x170], rax
nop dword [rax]
inc rdi
cmp byte [rax + rdi], r11b
jne 0x18004f010
add rdi, rax
movzx eax, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x74]
movaps xmmword [rsp + 0x1d0], xmm9
test al, al
jne 0x18004f133
test cl, cl
jne 0x18004f133
test r10b, r10b
je 0x18004f09a
movzx edx, byte [rsi]
lea rdi, [rsi + 1]
mov ecx, r11d
test dl, dl
je 0x18004f066
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [rdi]
cmovne eax, ecx
inc rdi
mov ecx, eax
test dl, dl
jne 0x18004f051
movzx eax, byte [rdi - 1]
dec rdi
cmp al, 0xa
je 0x18004f077
cmp al, 0xd
je 0x18004f077
inc ecx
movd xmm9, ecx
lea rbx, [r13 + 0x19a8]
cvtdq2ps xmm9, xmm9
movss dword [rbp - 0x78], xmm13
mulss xmm9, dword [rbx]
movss dword [rbp - 0x7c], xmm9
jmp 0x18004f0da
test r12b, r12b
jne 0x18004f0c1
cmp dword [r13 + 0x1b38], ebx
jne 0x18004f0ae
movsxd rdi, dword [r15 + 8]
jmp 0x18004f0be
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rsi + rdi], r11b
jne 0x18004f0b5
add rdi, rsi
mov rax, rdi
sub rax, rsi
cmp rax, 0x200000
jge 0x18004f9a0
lea rbx, [r13 + 0x19a8]
mov ecx, r12d
movaps xmm1, xmm10
call fcn.18002c580
cmp byte [rsp + 0x70], 0
lea rdx, [rbp - 0x38]
movss xmm2, dword [rbx]
lea r9, [rbp - 0x50]
mov rcx, qword [r14 + 0x2b0]
mov r8d, 0
cmovne rdx, r8
mov qword [rsp + 0x40], rdx
mov rdx, qword [r13 + 0x19a0]
movss dword [rsp + 0x38], xmm12
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], eax
call fcn.18003afd0
jmp 0x18004f8f4
movaps xmmword [rsp + 0x1b0], xmm11
test r12b, r12b
jne 0x18004f148
movsxd rdi, dword [r15 + 8]
add rdi, rsi
mov r9, qword [r15 + 0x18]
mov r8d, 0xfffffc18
mov qword [rbp + 0x38], r9
mov r14d, r8d
movaps xmm7, xmm12
movaps xmm6, xmm12
mov rsi, r11
mov r12, r11
mov edx, r11d
test al, al
je 0x18004f17f
movsxd rax, dword [r15 + 0x4c]
mov edx, 1
lea rsi, [r9 + rax*2]
lea r8d, [rdx - 2]
test cl, cl
je 0x18004f19f
mov ecx, dword [r15 + 0x54]
mov r14d, 0xffffffff
cmp dword [r15 + 0x50], ecx
cmovl ecx, dword [r15 + 0x50]
inc edx
movsxd rax, ecx
lea r12, [r9 + rax*2]
movzx ecx, word [r9]
mov ebx, r11d
movzx eax, r10b
add edx, eax
mov rax, r9
test cx, cx
je 0x18004f1f1
cmp cx, 0xa
jne 0x18004f1e4
inc ebx
cmp r8d, 0xffffffff
jne 0x18004f1d0
cmp rax, rsi
jb 0x18004f1d0
dec edx
mov r8d, ebx
test edx, edx
jle 0x18004f1f1
cmp r14d, 0xffffffff
jne 0x18004f1e4
cmp rax, r12
jb 0x18004f1e4
dec edx
mov r14d, ebx
test edx, edx
jle 0x18004f1f1
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x18004f1b4
inc ebx
mov rdx, r9
cmp r8d, 0xffffffff
mov r13d, ebx
mov rcx, rsi
cmovne r13d, r8d
cmp r14d, 0xffffffff
cmove r14d, ebx
call fcn.18002d160
mov rcx, qword [0x18010eee8]
mov rdx, rax
movaps xmm11, xmm12
movaps xmm1, xmm12
mov r8, qword [rcx + 0x19a0]
movss xmm2, dword [rcx + 0x19a8]
divss xmm2, dword [r8 + 0x14]
cmp rax, rsi
jae 0x18004f27f
nop dword [rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004f257
maxss xmm11, xmm1
movaps xmm1, xmm12
jmp 0x18004f27a
cmp ecx, 0xd
je 0x18004f27a
cmp ecx, dword [r8]
jge 0x18004f26c
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004f272
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rdx, rsi
jb 0x18004f240
mov rax, qword [rsp + 0x68]
maxss xmm11, xmm1
mov rsi, qword [rbp + 0x38]
movd xmm8, r13d
cvtdq2ps xmm8, xmm8
lea rcx, [rax + 0x19a8]
mov qword [rbp - 0x28], rcx
movss xmm0, dword [rax + 0x19a8]
mulss xmm8, xmm0
movss dword [rbp - 0x60], xmm11
movss dword [rbp - 0x68], xmm8
test r14d, r14d
js 0x18004f35a
mov rdx, rsi
mov rcx, r12
call fcn.18002d160
mov rcx, qword [0x18010eee8]
mov rdx, rax
movaps xmm6, xmm12
movaps xmm1, xmm12
mov r8, qword [rcx + 0x19a0]
movss xmm2, dword [rcx + 0x19a8]
divss xmm2, dword [r8 + 0x14]
cmp rax, r12
jae 0x18004f33e
nop word [rax + rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18004f316
maxss xmm6, xmm1
movaps xmm1, xmm12
jmp 0x18004f339
cmp ecx, 0xd
je 0x18004f339
cmp ecx, dword [r8]
jge 0x18004f32b
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004f331
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rdx, r12
jb 0x18004f300
mov r12, qword [rbp - 0x28]
maxss xmm6, xmm1
movd xmm7, r14d
cvtdq2ps xmm7, xmm7
movss xmm0, dword [r12]
mulss xmm7, xmm0
jmp 0x18004f35d
mov r12, rcx
mov r13d, dword [rsp + 0x70]
test r13b, r13b
je 0x18004f381
movd xmm9, ebx
cvtdq2ps xmm9, xmm9
movss dword [rbp - 0x78], xmm13
mulss xmm9, xmm0
movss dword [rbp - 0x7c], xmm9
movzx r8d, byte [rsp + 0x51]
test r8b, r8b
je 0x18004f457
cmp byte [r15 + 0xe74], 0
je 0x18004f457
test dword [rsp + 0x60], 0x1000
jne 0x18004f401
movss xmm2, dword [r15 + 0x48]
movaps xmm1, xmm13
comiss xmm11, xmm2
mulss xmm1, dword [0x18005f558]
movaps xmm0, xmm11
jae 0x18004f3e0
subss xmm0, xmm1
maxss xmm0, xmm12
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r15 + 0x48], xmm0
jmp 0x18004f407
subss xmm0, xmm13
comiss xmm0, xmm2
jb 0x18004f407
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r15 + 0x48], xmm0
jmp 0x18004f407
xor eax, eax
mov dword [r15 + 0x48], eax
test r13b, r13b
je 0x18004f44f
mov rax, qword [rbp - 0x70]
movaps xmm1, xmm8
subss xmm1, dword [r12]
movss xmm2, dword [rax + 0x58]
comiss xmm1, xmm2
jae 0x18004f42b
maxss xmm1, xmm12
jmp 0x18004f438
movaps xmm1, xmm8
subss xmm1, xmm14
maxss xmm1, xmm2
movss xmm0, dword [rbp - 0x4c]
subss xmm2, xmm1
addss xmm0, xmm2
movss dword [rbp - 0x4c], xmm0
movss dword [rax + 0x58], xmm1
mov byte [r15 + 0xe74], 0
cmp byte [rsp + 0x74], 0
movss xmm13, dword [r15 + 0x48]
je 0x18004f6eb
mov edx, dword [r15 + 0x54]
mov eax, edx
mov ecx, dword [r15 + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rsi, [rsi + rax*2]
test r8b, r8b
je 0x18004f492
movaps xmm1, xmm10
jmp 0x18004f49a
movss xmm1, dword [0x18005f574]
mov ecx, 0x33
call fcn.18002c580
mov r14d, eax
test r13b, r13b
je 0x18004f4b6
movaps xmm14, xmm12
movaps xmm15, xmm12
jmp 0x18004f4c8
movss xmm14, dword [0x18005f6a0]
movss xmm15, dword [0x18005f5c0]
movss xmm12, dword [rbp - 0x50]
movaps xmm4, xmm12
addss xmm4, xmm6
movss xmm6, dword [rbp - 0x4c]
addss xmm6, xmm7
subss xmm4, xmm13
cmp rbx, rsi
jae 0x18004f6de
movss xmm7, dword [rbp - 0x2c]
xorps xmm11, xmm11
movss xmm9, dword [rbp - 0x30]
movss xmm8, dword [rbp - 0x34]
movss xmm10, dword [rbp - 0x38]
mov r15, qword [rsp + 0x68]
mov r13, qword [rbp - 0x70]
nop dword [rax]
nop word [rax + rax]
movss xmm5, dword [r12]
movaps xmm0, xmm7
addss xmm0, xmm5
comiss xmm6, xmm0
ja 0x18004f6c9
comiss xmm6, xmm8
jae 0x18004f560
cmp rbx, rsi
jae 0x18004f6b1
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18004f6b1
cmp rbx, rsi
jb 0x18004f545
jmp 0x18004f6c9
mov rax, qword [0x18010eee8]
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rdx, qword [rax + 0x19a0]
movss xmm3, dword [rax + 0x19a8]
divss xmm3, dword [rdx + 0x14]
cmp rbx, rsi
jae 0x18004f5d0
nop dword [rax + rax]
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18004f5c4
cmp ecx, 0xd
je 0x18004f5bd
cmp ecx, dword [rdx]
jge 0x18004f5b0
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18004f5b5
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm3
addss xmm1, xmm0
cmp rbx, rsi
jb 0x18004f590
jmp 0x18004f5d0
movaps xmm2, xmm1
movaps xmm1, xmm11
maxss xmm2, xmm11
maxss xmm2, xmm1
comiss xmm2, xmm11
ja 0x18004f60c
mov rax, qword [r15 + 0x19a0]
cmp dword [rax], 0x20
jle 0x18004f5f4
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18004f5f9
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x18005f570]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm0, xmm14
addss xmm2, xmm4
subss xmm0, xmm5
movaps xmm1, xmm15
addss xmm1, xmm6
movaps xmm3, xmm8
movaps xmm5, xmm10
maxss xmm5, xmm4
movaps xmm4, xmm9
minss xmm4, xmm2
addss xmm0, xmm6
movss dword [rbp - 0x28], xmm5
movss dword [rbp - 0x20], xmm4
maxss xmm3, xmm0
movaps xmm0, xmm7
minss xmm0, xmm1
movss dword [rbp - 0x24], xmm3
comiss xmm8, xmm0
movss dword [rbp - 0x1c], xmm0
jae 0x18004f6b1
comiss xmm7, xmm3
jbe 0x18004f6b1
comiss xmm10, xmm4
jae 0x18004f6b1
comiss xmm9, xmm5
jbe 0x18004f6b1
mov rcx, qword [r13 + 0x2b0]
lea r8, [rbp - 0x20]
mov dword [rsp + 0x28], 0xf
lea rdx, [rbp - 0x28]
mov r9d, r14d
movss dword [rsp + 0x20], xmm11
call fcn.18003ae30
movss xmm7, dword [rbp - 0x2c]
movss xmm9, dword [rbp - 0x30]
movss xmm8, dword [rbp - 0x34]
movss xmm10, dword [rbp - 0x38]
movss xmm12, dword [rbp - 0x50]
movaps xmm4, xmm12
subss xmm4, xmm13
addss xmm6, dword [r12]
cmp rbx, rsi
jb 0x18004f520
movss xmm11, dword [rbp - 0x60]
movss xmm8, dword [rbp - 0x68]
mov r15, qword [rbp - 8]
mov r13d, dword [rsp + 0x70]
movss xmm15, dword [0x18005f570]
xorps xmm12, xmm12
mov rsi, qword [rbp + 0x170]
test r13b, r13b
jne 0x18004f709
mov rax, rdi
sub rax, rsi
cmp rax, 0x200000
jge 0x18004f78c
movss xmm9, dword [0x18005f58c]
movzx ecx, byte [rsp + 0x52]
movaps xmm1, xmm9
call fcn.18002c580
movss xmm0, dword [rbp - 0x50]
lea rcx, [rbp - 0x38]
mov r14, qword [rbp - 0x70]
subss xmm0, xmm13
movss xmm2, dword [r12]
lea r9, [rbp - 0x28]
test r13b, r13b
mov r8d, 0
mov r13, qword [rsp + 0x68]
cmovne rcx, r8
mov qword [rsp + 0x40], rcx
mov rcx, qword [r14 + 0x2b0]
mov rdx, qword [r13 + 0x19a0]
movss dword [rsp + 0x38], xmm12
movss dword [rbp - 0x28], xmm0
movss xmm0, dword [rbp - 0x4c]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
movss dword [rbp - 0x24], xmm0
mov dword [rsp + 0x20], eax
call fcn.18003afd0
jmp 0x18004f79e
movss xmm9, dword [0x18005f58c]
mov r13, qword [rsp + 0x68]
mov r14, qword [rbp - 0x70]
cmp byte [rsp + 0x51], 0
mov rbx, r12
je 0x18004f8dc
movss xmm0, dword [r13 + 0x18]
addss xmm0, dword [r15 + 0xe70]
movss dword [r15 + 0xe70], xmm0
cmp byte [r13 + 0xca], 0
je 0x18004f7ee
comiss xmm0, xmm12
jbe 0x18004f7ee
movss xmm1, dword [0x1800647e4]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm0, dword [0x18005f580]
jbe 0x18004f7ee
xor al, al
jmp 0x18004f7f0
mov al, 1
movss xmm7, dword [rbp - 0x4c]
movss xmm6, dword [rbp - 0x50]
addss xmm7, xmm8
addss xmm6, xmm11
movaps xmm1, xmm7
movaps xmm2, xmm7
subss xmm6, xmm13
subss xmm1, dword [r12]
subss xmm2, dword [0x18005f5a4]
movss dword [rbp + 0x38], xmm6
movaps xmm3, xmm6
addss xmm1, xmm15
movss dword [rbp + 0x44], xmm2
addss xmm3, xmm9
movss dword [rbp + 0x3c], xmm1
movss dword [rbp + 0x40], xmm3
test al, al
je 0x18004f8aa
movss xmm0, dword [rbp - 0x34]
comiss xmm0, xmm2
jae 0x18004f8aa
movss xmm0, dword [rbp - 0x2c]
comiss xmm0, xmm1
jbe 0x18004f8aa
movss xmm0, dword [rbp - 0x38]
comiss xmm0, xmm3
jae 0x18004f8aa
movss xmm0, dword [rbp - 0x30]
comiss xmm0, xmm6
jbe 0x18004f8aa
mov rbx, qword [r14 + 0x2b0]
movaps xmm1, xmm9
xor ecx, ecx
call fcn.18002c580
movss xmm0, dword [rbp + 0x38]
lea r8, [rbp - 0x28]
movss xmm1, dword [rbp + 0x44]
lea rdx, [rbp + 0x38]
mov r9d, eax
movss dword [rbp - 0x28], xmm0
mov rcx, rbx
movss dword [rbp - 0x24], xmm1
movss dword [rsp + 0x20], xmm9
call fcn.180039d80
cmp byte [rsp + 0x58], 0
mov rbx, r12
movss xmm8, dword [0x18005f6a0]
jne 0x18004f8e5
subss xmm7, dword [r12]
subss xmm6, xmm9
movss dword [r13 + 0x2fc4], xmm7
movss dword [r13 + 0x2fc0], xmm6
jmp 0x18004f8e5
movss xmm8, dword [0x18005f6a0]
movzx r12d, byte [rsp + 0x52]
movaps xmm11, xmmword [rsp + 0x1b0]
cmp byte [rsp + 0x70], 0
je 0x18004f99b
mov rcx, qword [0x18010eee8]
movss xmm0, dword [rbp - 0x78]
movss dword [rbp - 0x70], xmm0
movss xmm0, dword [rbp - 0x7c]
addss xmm0, dword [rbx]
movss dword [rbp - 0x6c], xmm0
mov rax, qword [rcx + 0x1af0]
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1af0]
cmp byte [rax + 0x83], 0
jne 0x18004f991
movss xmm0, dword [rax + 0xd0]
lea rcx, [rbp - 0x70]
movss xmm3, dword [rbp - 0x70]
movaps xmm1, xmm8
movss xmm2, dword [rbp - 0x6c]
addss xmm3, xmm0
addss xmm2, dword [rax + 0xd4]
movss dword [rbp - 0x28], xmm0
movss xmm0, dword [rax + 0xd4]
movss dword [rbp - 0x24], xmm0
movss dword [rbp - 0x20], xmm3
movss dword [rbp - 0x1c], xmm2
call fcn.18002e4f0
xor r8d, r8d
lea rcx, [rbp - 0x28]
xor edx, edx
call fcn.18002e220
call fcn.18002a880
call fcn.18002adb0
movss xmm3, dword [rbp - 0x44]
mov eax, dword [rbp - 0x58]
movaps xmm15, xmmword [rsp + 0x170]
movaps xmm10, xmmword [rsp + 0x1c0]
movaps xmm9, xmmword [rsp + 0x1d0]
test al, al
je 0x18004f9d4
test r12b, r12b
jne 0x18004f9d4
call fcn.180032960
movss xmm3, dword [rbp - 0x44]
mov eax, dword [rbp - 0x58]
cmp byte [r13 + 0x3008], 0
je 0x18004f9fb
test al, al
je 0x18004f9e7
test r12b, r12b
je 0x18004f9fb
mov r8, rdi
lea rcx, [rbp - 0x50]
mov rdx, rsi
call fcn.18002e8d0
movss xmm3, dword [rbp - 0x44]
movss xmm0, dword [rbp + 0x48]
comiss xmm0, xmm12
mov r12, qword [rsp + 0x218]
jbe 0x18004fa3f
movss xmm0, dword [rbp - 0x40]
mov r9b, 1
addss xmm0, dword [r13 + 0x15a8]
addss xmm3, dword [r13 + 0x1594]
mov rdx, qword [rbp + 0x160]
xor r8d, r8d
unpcklps xmm0, xmm3
movq rcx, xmm0
call fcn.180033d40
movzx edi, byte [rbp - 0x7e]
mov ebx, dword [rsp + 0x60]
test dil, dil
je 0x18004fa5b
bt ebx, 0x15
jb 0x18004fa5b
mov ecx, dword [rsp + 0x7c]
call fcn.18002eb40
movzx ecx, byte [rsp + 0x54]
test bl, 0x20
mov eax, edi
cmovne eax, ecx
jmp 0x18004d397