Function at 0x180027970
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18003c010]
xor rax, rsp
mov qword [rbp + 0x78], rax
mov rbx, qword [0x180069158]
mov qword [rbp - 0x60], r8
mov r13, rbx
mov qword [rsp + 0x60], rbx
mov rax, qword [rbx + 0x1a18]
mov byte [rax + 0x80], 1
mov r15, qword [rbx + 0x1a18]
mov qword [rsp + 0x78], r15
cmp byte [r15 + 0x83], 0
jne 0x180027d8d
mov ecx, dword [rbp + 0x178]
mov eax, ecx
shr eax, 0xe
mov edi, ecx
and al, 1
shr edi, 0x14
mov dword [rsp + 0x54], eax
and dil, 1
mov eax, ecx
mov dword [rsp + 0x5c], edi
shr eax, 0xf
and al, 1
mov dword [rbp - 0x40], eax
mov eax, ecx
shr eax, 0x10
not al
and al, 1
mov dword [rsp + 0x6c], eax
mov eax, ecx
shr eax, 0x12
and al, 1
mov dword [rbp - 0x80], eax
test dil, dil
je 0x180027a6e
call fcn.18000cfc0
mov rbx, qword [0x180069158]
movsxd rax, dword [r15 + 0xc0]
lea rsi, str.CurrentFov
mov r8, qword [r15 + 0xc8]
xor edx, edx
mov rcx, rsi
mov r8d, dword [r8 + rax*4 - 4]
call fcn.1800025b0
mov r12d, eax
mov dword [rbp - 0x6c], eax
cmp dword [rbx + 0x1a60], eax
jne 0x180027aa6
mov dword [rbx + 0x1a64], eax
cmp dword [rbx + 0x1a9c], r12d
jne 0x180027ab6
mov byte [rbx + 0x1aa0], 1
mov rcx, rsi
cmp rsi, 0xffffffffffffffff
jae 0x180027add
nop
movzx edx, byte [rcx]
test dl, dl
je 0x180027add
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x180027ad4
cmp byte [rax], dl
je 0x180027add
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x180027ac0
movss xmm1, dword [0x180035fc4]
movss xmm0, dword [rbx + 0x1910]
movss dword [rbp - 0x30], xmm1
cmp rsi, rcx
jne 0x180027afc
xorps xmm6, xmm6
jmp 0x180027b44
movss xmm3, dword [0x180035fb8]
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x30], rcx
movaps xmm2, xmm0
mov rcx, qword [rbx + 0x1908]
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm1
call fcn.180020430
movss xmm0, dword [rbp - 0x58]
addss xmm0, dword [0x180035f34]
cvttss2si eax, xmm0
movss xmm0, dword [rbp - 0x54]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rbp - 0x2c], xmm6
xorps xmm12, xmm12
test dil, dil
je 0x180027b63
movss xmm0, dword [r13 + 0x1910]
mulss xmm0, dword [0x180035f70]
movss xmm9, dword [r13 + 0x1594]
movaps xmm3, xmm9
addss xmm3, xmm9
addss xmm3, xmm0
call fcn.18000ca30
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp - 0x58]
movaps xmm2, xmm0
mov rdx, qword [rdx]
call fcn.18000caa0
comiss xmm6, xmm12
jbe 0x180027ba8
movaps xmm1, xmm6
addss xmm1, dword [r13 + 0x15a8]
jmp 0x180027bab
xorps xmm1, xmm1
movss xmm14, dword [r15 + 0xd0]
movss xmm15, dword [r15 + 0xd4]
movaps xmm13, xmm14
movss xmm10, dword [rbp - 0x58]
movaps xmm2, xmm15
movss xmm11, dword [rbp - 0x54]
addss xmm1, xmm10
movss dword [rbp - 0x3c], xmm14
addss xmm13, xmm10
movss dword [rbp - 0x38], xmm10
movaps xmm7, xmm15
movss dword [rbp - 0x50], xmm15
addss xmm2, xmm11
movss dword [rbp - 0x28], xmm14
addss xmm7, xmm11
movss dword [rbp - 0x24], xmm15
addss xmm1, xmm14
movss dword [rbp - 0x34], xmm13
movaps xmm6, xmm15
movss dword [rbp - 0x20], xmm13
movaps xmm8, xmm14
movss dword [rbp + 0x58], xmm14
movss dword [rbp - 0x1c], xmm7
movss dword [rbp + 0x5c], xmm6
movaps xmm0, xmm1
unpcklps xmm0, xmm2
movsd qword [rbp + 0x60], xmm0
mov qword [rbp - 0x48], r15
test dil, dil
je 0x180027e6b
mov rdi, qword [rbx + 0x1a18]
test r12d, r12d
je 0x180027ce1
mov eax, dword [rdi + 0x13c]
or dword [rdi + 0x144], eax
cmp dword [rbx + 0x1b88], r12d
je 0x180027c76
cmp byte [rbx + 0x1bf8], 0
je 0x180027ce1
mov rcx, qword [rbx + 0x1b80]
mov rax, qword [rdi + 0x370]
cmp qword [rcx + 0x370], rax
jne 0x180027ce1
cmp rdi, rcx
je 0x180027c9e
mov eax, dword [rdi + 0xc]
or eax, dword [rcx + 0xc]
bt eax, 0x17
jae 0x180027ce1
mov r8d, r12d
lea rdx, [rbp - 0x28]
mov rcx, rdi
call fcn.18000ea00
movss xmm13, dword [rbp - 0x20]
movss xmm15, dword [rbp - 0x24]
movss xmm14, dword [rbp - 0x28]
movss xmm7, dword [rbp - 0x1c]
movss xmm6, dword [rbp + 0x5c]
movss xmm8, dword [rbp + 0x58]
movss dword [rbp - 0x34], xmm13
movss dword [rbp - 0x50], xmm15
movss dword [rbp - 0x3c], xmm14
movups xmm1, xmmword [rbp + 0x58]
xor esi, esi
mov dword [rdi + 0x110], r12d
mov dword [rdi + 0x114], esi
movups xmmword [rdi + 0x118], xmm1
mov dword [rbx + 0x1b20], esi
mov rax, qword [rbx + 0x1a18]
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xaa
shufps xmm1, xmm1, 0xff
comiss xmm1, dword [rax + 0x234]
jbe 0x180027d44
movss xmm0, dword [rax + 0x23c]
comiss xmm0, xmm6
jbe 0x180027d44
comiss xmm2, dword [rax + 0x230]
jbe 0x180027d44
movss xmm0, dword [rax + 0x238]
comiss xmm0, xmm8
ja 0x180027df4
test r12d, r12d
je 0x180027d56
cmp r12d, dword [rbx + 0x1a60]
je 0x180027df4
cmp byte [rbx + 0x2f30], sil
jne 0x180027df4
subss xmm1, xmm6
subss xmm2, xmm8
lea rcx, [rbp - 0x58]
movss dword [rbp - 0x54], xmm1
movss xmm1, dword [r13 + 0x1594]
movss dword [rbp - 0x58], xmm2
call fcn.180004640
call fcn.18000d0e0
xor al, al
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.18002f0e0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r8b, 1
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x58]
call fcn.180007450
test al, al
je 0x180027e0f
or dword [rdi + 0x114], 1
movaps xmm0, xmm13
subss xmm7, xmm15
subss xmm0, xmm14
mov ecx, r12d
lea rdx, [rbp - 0x78]
movss dword [rbp - 0x74], xmm7
movss dword [rbp - 0x78], xmm0
call fcn.180007af0
test al, al
jne 0x180027e41
call fcn.180007860
jmp 0x180027d88
mov r14, qword [r13 + 0x1a18]
mov qword [rbp - 0x48], r14
subss xmm10, dword [r14 + 0x74]
mov eax, dword [r14 + 0x13c]
or dword [r14 + 0x144], eax
movss dword [rbp - 0x38], xmm10
jmp 0x180027fba
subss xmm1, xmm14
subss xmm2, xmm15
lea rcx, [rbp - 0x78]
movss dword [rbp - 0x78], xmm1
movaps xmm1, xmm9
movss dword [rbp - 0x74], xmm2
call fcn.180004640
mov rdi, qword [0x180069158]
mov rbx, qword [rdi + 0x1a18]
test r12d, r12d
je 0x180027f25
mov eax, dword [rbx + 0x13c]
or dword [rbx + 0x144], eax
cmp dword [rdi + 0x1b88], r12d
je 0x180027ec1
cmp byte [rdi + 0x1bf8], 0
je 0x180027f25
mov rcx, qword [rdi + 0x1b80]
mov rax, qword [rbx + 0x370]
cmp qword [rcx + 0x370], rax
jne 0x180027f25
cmp rbx, rcx
je 0x180027ee9
mov eax, dword [rbx + 0xc]
or eax, dword [rcx + 0xc]
bt eax, 0x17
jae 0x180027f25
mov r8d, r12d
lea rdx, [rbp - 0x28]
mov rcx, rbx
call fcn.18000ea00
movss xmm0, dword [rbp - 0x20]
movss xmm15, dword [rbp - 0x24]
movss xmm14, dword [rbp - 0x28]
movss xmm6, dword [rbp + 0x5c]
movss xmm8, dword [rbp + 0x58]
movss dword [rbp - 0x34], xmm0
movss dword [rbp - 0x50], xmm15
movss dword [rbp - 0x3c], xmm14
movups xmm1, xmmword [rbp + 0x58]
xor esi, esi
mov dword [rbx + 0x110], r12d
mov dword [rbx + 0x114], esi
movups xmmword [rbx + 0x118], xmm1
mov dword [rdi + 0x1b20], esi
mov rax, qword [rdi + 0x1a18]
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xff
comiss xmm0, dword [rax + 0x234]
jbe 0x180027f84
movss xmm0, dword [rax + 0x23c]
comiss xmm0, xmm6
jbe 0x180027f84
shufps xmm1, xmm1, 0xaa
comiss xmm1, dword [rax + 0x230]
jbe 0x180027f84
movss xmm0, dword [rax + 0x238]
comiss xmm0, xmm8
ja 0x180027f9f
test r12d, r12d
je 0x180027f92
cmp r12d, dword [rdi + 0x1a60]
je 0x180027f9f
cmp byte [rdi + 0x2f30], sil
je 0x180027d8d
mov r8b, 1
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x58]
call fcn.180007450
test al, al
je 0x180027fba
or dword [rbx + 0x114], 1
mov edx, r12d
lea rcx, [rbp - 0x28]
call fcn.180004980
mov byte [rsp + 0x71], al
movzx r10d, al
test al, al
je 0x180027fdd
mov dword [r13 + 0x1e90], 1
lea r14, [r13 + 0x1f88]
mov edx, r12d
cmp dword [r14], r12d
mov rbx, r14
mov rcx, r15
cmovne rbx, rsi
mov qword [rbp + 0x58], rbx
call fcn.180004ae0
movzx esi, al
test al, al
je 0x180028022
cmp qword [r13 + 0x1cb8], r15
jne 0x180028022
mov ecx, dword [r15 + 0x178]
cmp dword [r13 + 0x1cc8], ecx
jne 0x180028022
mov r15b, 1
jmp 0x18002802f
xor r15b, r15b
mov byte [rsp + 0x53], 1
test sil, sil
jne 0x180028034
mov byte [rsp + 0x53], 0
test r10b, r10b
je 0x180028048
cmp byte [r13 + 0x420], 0
je 0x180028048
mov r13b, 1
jmp 0x18002804b
xor r13b, r13b
mov rax, qword [rsp + 0x60]
mov edi, dword [rax + 0x1a60]
cmp edi, r12d
je 0x18002807b
cmp dword [rax + 0x1b98], r12d
je 0x180028076
cmp dword [rax + 0x1b8c], r12d
jne 0x18002807b
cmp dword [rax + 0x1bac], 3
jne 0x18002807b
mov r12b, 1
jmp 0x18002807e
xor r12b, r12b
mov eax, dword [rsp + 0x5c]
mov byte [rsp + 0x51], r12b
test al, al
je 0x1800280ce
test rbx, rbx
je 0x1800280ce
test edi, edi
jne 0x1800280ce
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.1800025b0
mov rcx, qword [rsp + 0x60]
cmp dword [rcx + 0x1a9c], eax
jne 0x1800280ca
mov bl, 1
jmp 0x1800280db
mov eax, dword [rsp + 0x5c]
xor bl, bl
test al, al
je 0x180028108
cmp qword [rbp + 0x58], 0
je 0x180028108
mov rcx, qword [rbp - 0x48]
xor edx, edx
movsxd rax, dword [rcx + 0xc0]
mov r8, qword [rcx + 0xc8]
lea rcx, str.SCROLLY
mov r8d, dword [r8 + rax*4 - 4]
call fcn.1800025b0
cmp edi, eax
jne 0x180028108
mov al, 1
jmp 0x18002810a
xor al, al
mov ecx, dword [rbp - 0x6c]
mov byte [rsp + 0x52], al
mov byte [rsp + 0x58], 0
cmp edi, ecx
je 0x180028136
mov edx, dword [rbp + 0x178]
test dl, 0x10
jne 0x18002812a
test r12b, r12b
je 0x180028136
cmp byte [rsp + 0x5c], 0
mov byte [rsp + 0x68], 1
je 0x18002813b
mov byte [rsp + 0x68], 0
test sil, sil
jne 0x18002815b
test r13b, r13b
jne 0x18002815b
test bl, bl
jne 0x18002815b
test r12b, r12b
jne 0x18002815b
test al, al
jne 0x18002815e
mov r14, qword [rbp + 0x58]
jmp 0x18002837a
mov r12b, 1
mov rax, qword [rbp + 0x58]
mov bl, 1
mov qword [rbp + 0x58], rax
cmp edi, ecx
je 0x180028377
mov rsi, r14
mov qword [rbp + 0x58], r14
mov dword [r14 + 0xe70], 0xbe99999a
mov rax, 0xffffffffffffffff
mov r14, qword [rbp - 0x60]
nop dword [rax]
cmp byte [r14 + rax + 1], 0
lea rax, [rax + 1]
jne 0x180028190
mov ecx, dword [rsi + 0x34]
lea ebx, [rax + 1]
cmp ebx, ecx
jle 0x1800281ca
test ecx, ecx
je 0x1800281b5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800281ba
mov eax, 8
cmp eax, ebx
lea rcx, [rsi + 0x30]
mov edx, ebx
cmovg edx, eax
call fcn.180012f30
mov dword [rsi + 0x30], ebx
mov rdx, r14
mov rcx, qword [rsi + 0x38]
movsxd r8, ebx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [rsi + 0x14]
cmp ecx, 0x21
jge 0x18002820b
test ecx, ecx
je 0x1800281f3
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1800281f8
mov eax, 8
mov edx, 0x21
lea rcx, [rsi + 0x10]
cmp eax, edx
cmovg edx, eax
call fcn.180012fc0
mov dword [rsi + 0x10], 0x21
mov ecx, dword [rsi + 0x24]
test ecx, ecx
jns 0x180028236
mov eax, ecx
xor r8d, r8d
cdq
sub eax, edx
mov edx, r8d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x20]
test eax, eax
cmovg edx, eax
call fcn.180012f30
xor eax, eax
mov rdi, r14
mov dword [rsi + 0x20], eax
mov r14, qword [rsi + 0x18]
mov byte [rsi + 0x40], al
mov rbx, r14
lea rsi, [r14 + 0x3e]
cmp r14, rsi
jae 0x180028287
cmp byte [rdi], 0
je 0x180028285
xor r8d, r8d
lea rcx, [rbp - 0x68]
mov rdx, rdi
call fcn.180002970
movsxd rcx, eax
mov eax, dword [rbp - 0x68]
add rdi, rcx
test eax, eax
je 0x180028285
cmp eax, 0xffff
ja 0x180028280
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x180028251
xor eax, eax
sub edi, dword [rbp - 0x60]
mov word [rbx], ax
sub rbx, r14
mov r14, qword [rbp + 0x58]
sar rbx, 1
mov dword [r14 + 8], edi
mov edi, dword [rbp - 0x6c]
mov dword [r14 + 4], ebx
cmp dword [r14], edi
jne 0x1800282d4
cmp dword [r14 + 0x4c], ebx
mov ecx, ebx
cmovl ecx, dword [r14 + 0x4c]
cmp dword [r14 + 0x50], ebx
mov dword [r14 + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [r14 + 0x50]
cmp dword [r14 + 0x54], ebx
mov dword [r14 + 0x50], ecx
cmovl ebx, dword [r14 + 0x54]
mov dword [r14 + 0x54], ebx
jmp 0x180028337
mov ecx, dword [rsp + 0x5c]
mov dword [r14 + 0xe68], eax
mov dword [r14 + 0x60], eax
movzx eax, cl
xor al, 1
mov dword [r14], edi
mov qword [r14 + 0x48], 0
mov dword [r14 + 0xe62], 0x630000
mov dword [r14 + 0xe6c], 0x3e7
mov qword [r14 + 0x50], 0
mov dword [r14 + 0x58], 0x10000
mov byte [r14 + 0x5c], al
test cl, cl
jne 0x18002833b
mov ecx, dword [rsp + 0x68]
test r15b, r15b
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0x5c]
mov r15d, dword [rbp + 0x178]
bt r15d, 0xd
jae 0x18002834e
mov byte [r14 + 0x58], 1
test cl, cl
jne 0x180028373
cmp byte [rsp + 0x53], cl
jne 0x18002836a
test r13b, r13b
je 0x180028373
mov rax, qword [rsp + 0x60]
cmp byte [rax + 0x148], cl
je 0x180028373
mov r13b, 1
movzx ebx, r13b
jmp 0x180028388
mov bl, 1
jmp 0x180028383
mov r14, rax
mov r15d, dword [rbp + 0x178]
mov edi, ecx
mov r13d, dword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
cmp dword [rsi + 0x1a60], edi
je 0x180028426
test r12b, r12b
je 0x18002841a
mov rdx, qword [rsp + 0x78]
mov ecx, edi
call fcn.1800044b0
call fcn.180004580
mov rcx, rdx
call fcn.18000c740
mov eax, dword [rsi + 0x1a74]
mov ecx, dword [rsp + 0x5c]
or eax, 3
mov dword [rsi + 0x1a74], eax
test cl, cl
jne 0x1800283d3
test r15b, r15b
jns 0x1800283dc
or eax, 0xc
mov dword [rsi + 0x1a74], eax
mov rax, qword [rsi + 0x1a80]
or dword [rsi + 0x1a78], 2
or rax, 0x180
mov qword [rsi + 0x1a80], rax
test cl, cl
je 0x180028406
or rax, 0x60
mov qword [rsi + 0x1a80], rax
test r15d, 0x440
je 0x18002841a
or rax, 1
mov qword [rsi + 0x1a80], rax
cmp dword [rsi + 0x1a60], edi
jne 0x1800284a6
test r14, r14
jne 0x180028483
mov rdx, qword [0x180069158]
mov ecx, dword [rdx + 0x1a60]
test ecx, ecx
setne al
mov byte [rdx + 0x1a6c], al
xor eax, eax
test ecx, ecx
je 0x180028456
mov dword [rdx + 0x1a68], eax
mov word [rdx + 0x1a6e], ax
mov dword [rdx + 0x1a60], eax
mov byte [rdx + 0x1a6d], 0
mov qword [rdx + 0x1a90], rax
mov byte [rdx + 0x1a70], 0
mov qword [rdx + 0x1a74], 0
mov qword [rdx + 0x1a80], rax
cmp dword [rsi + 0x1a60], edi
jne 0x1800284a6
cmp byte [rsi + 0x420], 0
je 0x1800284b2
test bl, bl
jne 0x1800284b2
test r12b, r12b
jne 0x1800284b2
mov byte [rsp + 0x58], 1
mov cl, 1
jmp 0x1800284b8
test r14, r14
je 0x1800284b6
cmp byte [rsp + 0x52], 0
je 0x1800284b6
mov cl, 1
jmp 0x1800284b8
xor cl, cl
mov byte [rsp + 0x50], cl
test r14, r14
je 0x1800284d4
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
je 0x1800284d4
test cl, cl
je 0x1800284d4
mov r12b, 1
jmp 0x1800284d7
xor r12b, r12b
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x68], r12d
movzx r15d, r12b
mov byte [rsp + 0x70], 0
mov byte [rsp + 0x53], 0
test al, al
je 0x1800285fb
test r14, r14
je 0x1800285fb
test cl, cl
jne 0x18002850c
test r12b, r12b
je 0x180028604
mov ecx, dword [r14 + 0x14]
cmp ecx, 0x21
jge 0x18002853c
test ecx, ecx
je 0x180028524
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180028529
mov eax, 8
mov edx, 0x21
lea rcx, [r14 + 0x10]
cmp eax, edx
cmovg edx, eax
call fcn.180012fc0
mov rax, qword [rbp - 0x60]
mov dword [r14 + 0x10], 0x21
mov rdi, rax
mov r14, qword [r14 + 0x18]
mov rbx, r14
lea rsi, [r14 + 0x40]
cmp r14, rsi
jae 0x180028598
nop dword [rax + rax]
cmp byte [rdi], 0
je 0x180028594
xor r8d, r8d
lea rcx, [rbp - 0x68]
mov rdx, rdi
call fcn.180002970
movsxd rcx, eax
mov eax, dword [rbp - 0x68]
add rdi, rcx
test eax, eax
je 0x180028594
cmp eax, 0xffff
ja 0x18002858f
mov word [rbx], ax
add rbx, 2
cmp rbx, rsi
jb 0x180028560
mov rax, qword [rbp - 0x60]
mov rsi, qword [rsp + 0x60]
sub edi, eax
mov eax, dword [rsp + 0x54]
xor edx, edx
mov word [rbx], dx
mov r12d, edx
sub rbx, r14
mov r14, qword [rbp + 0x58]
sar rbx, 1
mov ecx, ebx
cmp dword [r14 + 0x4c], ebx
mov dword [r14 + 4], ebx
cmovl ecx, dword [r14 + 0x4c]
cmp dword [r14 + 0x50], ebx
mov dword [r14 + 0x4c], ecx
mov ecx, ebx
cmovl ecx, dword [r14 + 0x50]
cmp dword [r14 + 0x54], ebx
mov dword [r14 + 8], edi
cmovl ebx, dword [r14 + 0x54]
mov edi, dword [rbp - 0x6c]
cmp ecx, ebx
mov dword [r14 + 0x50], ecx
movzx ecx, byte [rsp + 0x50]
cmovne r12d, r15d
mov dword [rsp + 0x68], r12d
mov dword [r14 + 0x54], ebx
test cl, cl
jne 0x18002860c
test r12b, r12b
jne 0x18002860c
cmp dword [rsi + 0x1a60], edi
jne 0x18002861f
test al, al
jne 0x18002861f
test r14, r14
je 0x18002861f
mov byte [rbp - 0x70], 1
cmp byte [r14 + 0x40], al
jne 0x180028623
mov byte [rbp - 0x70], 0
cmp byte [rbp - 0x40], 0
je 0x1800286d1
mov rdx, qword [rsi + 0x1908]
cmp dword [rdx + 0x18], 0x2a
jg 0x180028640
mov r9, qword [rdx + 0x38]
jmp 0x180028664
mov rax, qword [rdx + 0x20]
movzx ecx, word [rax + 0x54]
mov eax, 0xffff
cmp cx, ax
jne 0x180028658
mov r9, qword [rdx + 0x38]
jmp 0x180028664
mov rax, qword [rdx + 0x30]
lea rcx, [rcx + rcx*4]
lea r9, [rax + rcx*8]
mov eax, dword [rdx + 0x14]
lea r8, [rsi + 0x2e18]
mov dword [r8 + 0x14], eax
mov rax, qword [rsi + 0x1908]
mov ecx, dword [rax + 0x60]
mov dword [r8 + 0x60], ecx
mov rcx, r8
mov rax, qword [rsi + 0x1908]
movsd xmm0, qword [rax + 0x40]
movsd qword [r8 + 0x40], xmm0
mov rax, qword [rsi + 0x1908]
mov edx, dword [rax + 0x64]
mov dword [r8 + 0x64], edx
mov rax, qword [rsi + 0x1908]
mov edx, dword [rax + 0x68]
mov dword [r8 + 0x68], edx
mov rax, qword [rsi + 0x1908]
mov rdx, qword [rax + 0x48]
mov qword [r8 + 0x48], rdx
mov qword [r8 + 0x38], r9
mov eax, dword [r9 + 4]
mov dword [r8 + 0x10], eax
call fcn.18000cc40
xor r15d, r15d
mov r8d, 0x20000c
mov dword [rbp - 0x68], r15d
cmp dword [rsi + 0x1a60], edi
jne 0x180028ad0
mov eax, dword [r14 + 8]
mov ecx, dword [rbp + 0x178]
mov dword [r14 + 0xe78], ecx
mov dword [r14 + 0x44], 0x20
mov qword [r14 + 0xe80], r15
mov qword [r14 + 0xe88], r15
movzx edx, byte [rsi + 0x138]
mov dword [rsi + 0x315c], 1
test dl, dl
mov dword [rbp - 0x68], eax
sete al
mov byte [rsi + 0x1a6d], al
movss xmm1, dword [rsi + 0x130]
subss xmm1, xmm14
subss xmm1, dword [rsi + 0x1590]
addss xmm1, dword [r14 + 0x48]
cmp byte [rsp + 0x5c], r15b
je 0x180028770
mov rax, qword [rbp - 0x48]
movss xmm2, dword [rsi + 0x134]
subss xmm2, dword [rax + 0xd4]
subss xmm2, dword [rsi + 0x1594]
jmp 0x180028780
movss xmm2, dword [rsi + 0x1910]
mulss xmm2, dword [0x180035f0c]
movzx edi, byte [rsi + 0xc9]
test r13b, r13b
jne 0x180028920
movzx eax, byte [rsp + 0x71]
test al, al
je 0x1800287af
test dil, dil
jne 0x180028848
cmp byte [rsi + 0x425], r15b
jne 0x180028920
lea rbx, [r14 + 0xe75]
movzx ecx, byte [rbx]
cmp byte [rsi + 0x420], r15b
je 0x1800288a5
test cl, cl
jne 0x1800288a5
test al, al
je 0x1800287ff
cmp byte [r14 + 0x5c], r15b
je 0x1800287dc
movaps xmm2, xmm12
mov rcx, r14
call fcn.180026250
mov dword [r14 + 0x4c], eax
mov dword [r14 + 0x50], eax
mov dword [r14 + 0x54], eax
mov byte [r14 + 0x5b], r15b
mov dword [r14 + 0xe70], 0xbe99999a
mov rax, rbx
mov ecx, dword [rbp + 0x178]
cmp byte [rax], r15b
je 0x180028819
cmp byte [rsi + 0x138], r15b
jne 0x180028819
mov byte [rax], r15b
cmp byte [rsi + 0x148], r15b
je 0x18002882b
cmp byte [rsi + 0x14a], r15b
je 0x180028841
test dil, dil
je 0x180028943
cmp byte [rsi + 0x14b], r15b
je 0x180028943
mov bl, 1
jmp 0x180028945
cmp byte [rsi + 0x425], r15b
je 0x1800287af
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800266f0
mov r8d, 0x60000d
mov byte [r14 + 0xe74], 1
lea rdx, [r14 + 0x4c]
mov dword [r14 + 0xe70], 0xbe99999a
mov rcx, r14
call fcn.1800266f0
lea rax, [r14 + 0xe75]
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180028802
mov rax, rbx
test dl, dl
je 0x180028802
test cl, cl
jne 0x180028802
movss xmm0, dword [rsi + 0x3c0]
ucomiss xmm0, xmm12
jp 0x1800288dc
jne 0x1800288dc
movss xmm0, dword [rsi + 0x3c4]
ucomiss xmm0, xmm12
jp 0x1800288dc
je 0x180028802
cmp byte [r14 + 0x5c], r15b
je 0x1800288e6
movaps xmm2, xmm12
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
jne 0x1800288f8
mov eax, dword [r14 + 0x4c]
mov dword [r14 + 0x50], eax
mov rcx, r14
call fcn.180026250
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x4c], eax
mov dword [r14 + 0xe70], 0xbe99999a
mov byte [r14 + 0xe74], 1
jmp 0x1800287ff
mov eax, dword [r14 + 4]
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x4c], eax
lea rax, [r14 + 0xe75]
mov byte [rax], 1
mov dword [r14 + 0x50], r15d
mov byte [r14 + 0x5b], r15b
jmp 0x180028808
xor bl, bl
bt ecx, 0xa
jae 0x1800289f2
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x1800289f2
call fcn.180007520
test al, al
mov eax, dword [rsp + 0x54]
je 0x1800289f6
test bl, bl
jne 0x1800289f6
cmp byte [rsi + 0x149], r15b
jne 0x1800289f6
test al, al
jne 0x1800289f6
mov rcx, qword [rsi + 0x1550]
movsxd rax, dword [rsi + 0x1548]
lea rdx, [rcx + rax*2]
cmp rcx, rdx
jae 0x1800289b2
nop
movzx eax, word [rcx]
add rcx, 2
cmp ax, 9
je 0x1800289f2
cmp rcx, rdx
jb 0x1800289a0
mov edx, dword [rbp + 0x178]
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x78], 9
call fcn.1800277d0
test al, al
je 0x1800289f2
mov r8d, dword [rsp + 0x78]
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800266f0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
mov eax, dword [rsp + 0x54]
cmp dword [rsi + 0x1548], r15d
jle 0x180028ac8
test bl, bl
jne 0x180028a9a
test al, al
jne 0x180028a9a
cmp byte [rsp + 0x51], r15b
jne 0x180028a9a
mov rdx, qword [rsp + 0x60]
mov edi, r15d
mov r12d, dword [rbp + 0x178]
mov rbx, r15
mov rax, qword [rdx + 0x1550]
movzx ecx, word [rax + rbx]
mov dword [rsp + 0x78], ecx
cmp ecx, 9
jne 0x180028a4d
cmp byte [rdx + 0x149], r15b
jne 0x180028a87
mov edx, r12d
lea rcx, [rsp + 0x78]
call fcn.1800277d0
test al, al
je 0x180028a82
mov r8d, dword [rsp + 0x78]
lea rdx, [r14 + 0x4c]
mov rcx, r14
call fcn.1800266f0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
mov rdx, qword [rsp + 0x60]
inc edi
add rbx, 2
cmp edi, dword [rsi + 0x1548]
jl 0x180028a30
mov r12d, dword [rsp + 0x68]
mov ecx, dword [rsi + 0x154c]
test ecx, ecx
jns 0x180028ac1
mov eax, ecx
cdq
sub eax, edx
mov edx, r15d
sar eax, 1
add eax, ecx
lea rcx, [rsi + 0x1548]
test eax, eax
cmovg edx, eax
call fcn.180012fc0
mov dword [rsi + 0x1548], r15d
mov rsi, qword [rsp + 0x60]
mov edi, dword [rbp - 0x6c]
xor cl, cl
cmp dword [rsi + 0x1a60], edi
jne 0x180029bcc
cmp byte [rsi + 0x1a6c], cl
jne 0x18002958e
cmp byte [rsp + 0x58], cl
jne 0x18002958e
movzx edx, byte [rsi + 0x149]
movzx r8d, byte [rsi + 0xc9]
movzx eax, dl
neg al
movzx eax, byte [rsi + 0x148]
sbb r13d, r13d
and r13d, 0x400000
test r8b, r8b
je 0x180028b40
lea r9, [rsi + 0x14b]
mov qword [rbp - 0x78], r9
cmp byte [r9], cl
je 0x180028b37
mov ecx, 1
test al, al
je 0x180028b3a
mov ecx, r15d
test ecx, ecx
je 0x180028b70
jmp 0x180028b57
lea rcx, [rsi + 0x14b]
test al, al
je 0x180028b69
cmp byte [rcx], r15b
jne 0x180028b69
mov r9, rcx
mov qword [rbp - 0x78], rcx
cmp byte [rsi + 0x14a], r15b
jne 0x180028b70
test dl, dl
jne 0x180028b70
mov r10b, 1
jmp 0x180028b73
mov r9, rcx
mov qword [rbp - 0x78], rcx
xor r10b, r10b
mov byte [rsp + 0x51], r10b
movzx ecx, al
test r8b, r8b
je 0x180028bac
cmp byte [rsi + 0x14b], r15b
je 0x180028bac
test dl, dl
je 0x180028bac
movzx r15d, byte [rsi + 0x148]
movzx ecx, r15b
test r15b, r15b
jne 0x180028bac
cmp byte [rsi + 0x14a], r15b
jne 0x180028bac
mov dil, 1
jmp 0x180028bb8
xor dil, dil
movzx r15d, cl
test r8b, r8b
je 0x180028bf6
cmp byte [r9], 0
movzx r12d, byte [rsi + 0x14a]
je 0x180028bfa
test r15b, r15b
jne 0x180028bfa
test r12b, r12b
jne 0x180028bfa
mov r14b, 1
xor r8b, r8b
movzx r11d, r14b
test dl, dl
je 0x180028c1a
test r15b, r15b
jne 0x180028c1a
cmp byte [rsi + 0x14a], r8b
jne 0x180028c1a
cmp byte [r9], r8b
jne 0x180028c1a
mov r9b, 1
jmp 0x180028c1d
movzx r12d, cl
xor r14d, r14d
test r15b, r15b
je 0x180028bd3
test dl, dl
jne 0x180028bd3
cmp byte [rsi + 0x14a], r14b
jne 0x180028bd3
cmp byte [r9], r14b
jne 0x180028bd3
mov r8b, 1
xor r11d, r11d
xor r9b, r9b
test r10b, r10b
je 0x180028c3c
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x88]
test ecx, ecx
js 0x180028c3c
call fcn.180007520
test al, al
jne 0x180028c58
test r9b, r9b
je 0x180028c81
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x180028c81
call fcn.180007520
test al, al
je 0x180028c81
cmp byte [rsp + 0x54], 0
mov esi, dword [rsp + 0x5c]
mov rbx, qword [rbp + 0x58]
jne 0x180028c89
cmp byte [rbp - 0x40], 0
jne 0x180028c89
test sil, sil
je 0x180028c7a
mov eax, dword [rbx + 0x54]
cmp dword [rbx + 0x50], eax
je 0x180028c89
mov byte [rsp + 0x52], 1
jmp 0x180028c8e
mov rbx, qword [rbp + 0x58]
mov esi, dword [rsp + 0x5c]
mov byte [rsp + 0x52], 0
test r10b, r10b
je 0x180028cad
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x80]
test ecx, ecx
js 0x180028cad
call fcn.180007520
test al, al
jne 0x180028cc9
test r8b, r8b
je 0x180028ce1
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x180028ce1
call fcn.180007520
test al, al
je 0x180028ce1
cmp byte [rbp - 0x40], 0
jne 0x180028ce1
test sil, sil
je 0x180028cdc
mov eax, dword [rbx + 0x54]
cmp dword [rbx + 0x50], eax
je 0x180028ce1
mov sil, 1
jmp 0x180028ce4
xor sil, sil
test r10b, r10b
je 0x180028d03
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x84]
test ecx, ecx
js 0x180028d03
call fcn.180007520
test al, al
jne 0x180028d1f
test r9b, r9b
je 0x180028d2d
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x60]
test ecx, ecx
js 0x180028d2d
call fcn.180007520
test al, al
je 0x180028d2d
mov r8d, dword [rsp + 0x54]
test r8b, r8b
jne 0x180028d32
mov bl, 1
jmp 0x180028d34
mov r8d, dword [rsp + 0x54]
xor bl, bl
test r10b, r10b
je 0x180028d67
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x180028d67
call fcn.180007520
test al, al
je 0x180028d67
test r8b, r8b
mov r8d, dword [rsp + 0x6c]
jne 0x180028d6c
test r8b, r8b
je 0x180028d6c
mov r10b, 1
jmp 0x180028d76
mov r8d, dword [rsp + 0x6c]
xor r10b, r10b
cmp byte [rsp + 0x51], r10b
je 0x180028d90
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x8c]
test ecx, ecx
js 0x180028d90
call fcn.180007520
test al, al
jne 0x180028daf
test dil, dil
je 0x180028dc2
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x90]
test ecx, ecx
js 0x180028dc2
call fcn.180007520
test al, al
je 0x180028dc2
mov edi, dword [rsp + 0x54]
test dil, dil
jne 0x180028dc6
test r8b, r8b
je 0x180028dc6
mov r9b, 1
jmp 0x180028dc9
mov edi, dword [rsp + 0x54]
xor r9b, r9b
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x40]
test ecx, ecx
js 0x180028e2a
call fcn.180007520
test al, al
je 0x180028e2a
test r11b, r11b
je 0x180028dec
mov ecx, 0x200004
jmp 0x180028dfc
mov ecx, 0x200000
mov eax, 0x20000c
test r12b, r12b
cmovne ecx, eax
or ecx, r13d
mov r8d, ecx
mov r14, qword [rbp + 0x58]
mov rcx, r14
lea rdx, [r14 + 0x4c]
call fcn.1800266f0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029104
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x44]
test ecx, ecx
js 0x180028e57
call fcn.180007520
test al, al
je 0x180028e57
test r11b, r11b
je 0x180028e4d
mov ecx, 0x200005
jmp 0x180028dfc
mov ecx, 0x200001
lea eax, [rcx + 0xc]
jmp 0x180028df6
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x180028ec3
call fcn.180007520
mov r11d, dword [rsp + 0x5c]
test al, al
je 0x180028ec8
test r11b, r11b
je 0x180028ec8
test r15b, r15b
je 0x180028eaf
mov rdx, qword [rbp - 0x48]
xor r15d, r15d
mov rsi, qword [rsp + 0x60]
xor cl, cl
mov r14, qword [rbp + 0x58]
movss xmm0, dword [rdx + 0x58]
subss xmm0, dword [rsi + 0x1910]
mov dword [rdx + 0x70], r15d
maxss xmm0, xmm12
movss dword [rdx + 0x68], xmm0
jmp 0x18002910e
movzx eax, r14b
lea r8d, [rax*4 + 0x200002]
or r8d, r13d
jmp 0x180028e02
mov r11d, dword [rsp + 0x5c]
mov r8, qword [0x180069158]
mov ecx, dword [r8 + 0x4c]
test ecx, ecx
js 0x180028f37
call fcn.180007520
test al, al
je 0x180028f37
test r11b, r11b
je 0x180028f37
test r15b, r15b
je 0x180028f23
mov rcx, qword [rbp - 0x48]
xor r15d, r15d
mov rax, qword [r8 + 0x1a18]
mov rsi, qword [rsp + 0x60]
mov r14, qword [rbp + 0x58]
movss xmm0, dword [rsi + 0x1910]
addss xmm0, dword [rcx + 0x58]
minss xmm0, dword [rax + 0x60]
mov dword [rcx + 0x70], r15d
movss dword [rcx + 0x68], xmm0
xor cl, cl
jmp 0x18002910e
movzx eax, r14b
lea r8d, [rax*4 + 0x200003]
or r8d, r13d
jmp 0x180028e02
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x58]
test ecx, ecx
js 0x180028f6b
call fcn.180007520
test al, al
je 0x180028f6b
mov eax, r13d
mov r8d, 0x200004
or eax, 0x200006
or r8d, r13d
test r15b, r15b
cmovne r8d, eax
jmp 0x180028e02
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x5c]
test ecx, ecx
js 0x180028f9f
call fcn.180007520
test al, al
je 0x180028f9f
mov eax, r13d
mov r8d, 0x200005
or eax, 0x200007
or r8d, r13d
test r15b, r15b
cmovne r8d, eax
jmp 0x180028e02
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x64]
test ecx, ecx
js 0x180028fca
call fcn.180007520
test al, al
je 0x180028fca
test dil, dil
jne 0x180028fca
or r13d, 0x200008
mov r8d, r13d
jmp 0x180028e02
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x68]
test ecx, ecx
js 0x1800290a9
call fcn.180007520
test al, al
je 0x1800290a9
test dil, dil
jne 0x1800290a9
mov r14, qword [rbp + 0x58]
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
jne 0x18002902a
test r12b, r12b
je 0x18002905d
lea rdx, [r14 + 0x4c]
mov r8d, 0x60000c
mov rcx, r14
call fcn.1800266f0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
mov rsi, qword [rsp + 0x60]
or r13d, 0x200009
lea rdx, [r14 + 0x4c]
mov r8d, r13d
mov rcx, r14
call fcn.1800266f0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029109
mov rsi, qword [rsp + 0x60]
cmp byte [rsi + 0xc9], 0
je 0x18002902f
mov rax, qword [rbp - 0x78]
cmp byte [rax], 0
je 0x18002902f
cmp byte [rsi + 0x14a], 0
jne 0x18002902f
test r15b, r15b
jne 0x18002902f
lea rdx, [r14 + 0x4c]
mov r8d, 0x600004
mov rcx, r14
call fcn.1800266f0
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x18002902f
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x70]
test ecx, ecx
js 0x1800290c0
call fcn.180007520
test al, al
jne 0x1800290db
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x78]
test ecx, ecx
js 0x18002915a
call fcn.180007520
test al, al
je 0x18002915a
mov ecx, dword [rbp + 0x178]
mov eax, ecx
shr eax, 0xb
and al, 1
test r11b, r11b
je 0x1800290f6
test al, al
je 0x18002912e
test r15b, r15b
jne 0x180029133
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x53], 1
mov r14, qword [rbp + 0x58]
mov rsi, qword [rsp + 0x60]
xor cl, cl
xor r15d, r15d
mov eax, dword [r14 + 0x54]
cmp dword [r14 + 0x50], eax
je 0x18002957c
cmp byte [rsp + 0x50], 0
je 0x18002957c
mov al, 1
jmp 0x18002957e
test r15b, r15b
jne 0x1800290f6
test dil, dil
jne 0x180029100
mov edx, ecx
mov dword [rsp + 0x78], 0xa
lea rcx, [rsp + 0x78]
call fcn.1800277d0
test al, al
je 0x180029100
mov r8d, dword [rsp + 0x78]
jmp 0x180028e02
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x74]
test ecx, ecx
js 0x180029182
call fcn.180007520
test al, al
je 0x180029182
mov r14, qword [rbp + 0x58]
mov cl, 1
mov rsi, qword [rsp + 0x60]
mov byte [rsp + 0x58], cl
jmp 0x18002910b
test r10b, r10b
jne 0x180029539
test r9b, r9b
jne 0x180029539
cmp byte [rsp + 0x51], r9b
je 0x1800291e1
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x7c]
test ecx, ecx
js 0x1800291e1
call fcn.180007520
test al, al
je 0x1800291e1
mov r14, qword [rbp + 0x58]
xor r15d, r15d
mov rsi, qword [rsp + 0x60]
xor cl, cl
mov eax, dword [r14 + 4]
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x4c], eax
mov dword [r14 + 0x50], r15d
mov byte [r14 + 0x5b], r15b
mov byte [r14 + 0xe74], 1
jmp 0x18002910e
movzx r15d, byte [rsp + 0x52]
test r15b, r15b
jne 0x1800293a0
test sil, sil
jne 0x1800293a0
test bl, bl
je 0x180029100
mov rcx, qword [0x180069158]
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x18002922a
mov rcx, qword [rcx + 0x110]
call rax
mov rbx, rax
test rax, rax
jne 0x180029231
jmp 0x180029100
lea rbx, [0x18003161e]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x180029240
mov rcx, qword [0x180069158]
test rcx, rcx
je 0x18002925b
inc dword [rcx + 0x3bc]
movsxd rcx, eax
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r15d, r15d
mov qword [rbp - 0x78], rax
mov r14, rax
mov esi, r15d
cmp byte [rbx], r15b
je 0x1800292d5
mov r14d, dword [rbp + 0x178]
mov rdi, rax
nop dword [rax + rax]
xor r8d, r8d
lea rcx, [rsp + 0x6c]
mov rdx, rbx
call fcn.180002970
movsxd rcx, eax
add rbx, rcx
cmp dword [rsp + 0x6c], r15d
je 0x1800292d1
mov edx, r14d
lea rcx, [rsp + 0x6c]
call fcn.1800277d0
test al, al
je 0x1800292cc
movzx eax, word [rsp + 0x6c]
inc esi
mov word [rdi], ax
add rdi, 2
cmp byte [rbx], r15b
jne 0x180029290
mov r14, qword [rbp - 0x78]
movsxd rax, esi
mov word [r14 + rax*2], r15w
test esi, esi
jle 0x180029370
mov rdi, qword [rbp + 0x58]
mov edx, dword [rdi + 0x54]
mov ecx, dword [rdi + 0x50]
mov eax, dword [rdi + 4]
cmp ecx, edx
je 0x18002930f
cmp ecx, eax
jle 0x1800292ff
mov dword [rdi + 0x50], eax
mov ecx, eax
cmp edx, eax
jle 0x180029308
mov dword [rdi + 0x54], eax
mov edx, eax
cmp ecx, edx
jne 0x18002930f
mov dword [rdi + 0x4c], ecx
cmp dword [rdi + 0x4c], eax
jle 0x180029317
mov dword [rdi + 0x4c], eax
lea rdx, [rdi + 0x4c]
mov rcx, rdi
call fcn.1800265b0
mov edx, dword [rdi + 0x4c]
mov r9d, esi
mov r8, r14
mov rcx, rdi
call fcn.1800260a0
test al, al
je 0x180029353
mov edx, dword [rdi + 0x4c]
lea rcx, [rdi + 0x64]
mov r9d, esi
xor r8d, r8d
call fcn.1800273a0
add dword [rdi + 0x4c], esi
mov byte [rdi + 0x5b], r15b
jmp 0x180029369
movzx eax, word [rdi + 0xe62]
test ax, ax
je 0x180029369
dec ax
mov word [rdi + 0xe62], ax
mov byte [rdi + 0xe74], 1
test r14, r14
je 0x180029387
mov rax, qword [0x180069158]
test rax, rax
je 0x180029387
dec dword [rax + 0x3bc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r14, qword [rbp + 0x58]
xor cl, cl
mov rsi, qword [rsp + 0x60]
jmp 0x18002910e
mov rsi, qword [rsp + 0x60]
cmp qword [rsi + 0x108], 0
je 0x1800294e3
mov r12, qword [rbp + 0x58]
mov eax, dword [r12 + 0x54]
mov ecx, dword [r12 + 0x50]
cmp ecx, eax
je 0x1800293d2
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
xor r9d, r9d
jmp 0x1800293dd
mov eax, dword [r12 + 4]
xor r9d, r9d
mov edx, r9d
movsxd rsi, eax
mov edi, r9d
mov rax, qword [r12 + 0x18]
mov ebx, 0x2800
movsxd r14, edx
mov r15d, 0x3ff
mov r10d, 0x80
mov r11d, 0x800
mov r12d, 0x2400
lea r8, [rax + rsi*2]
lea rdx, [rax + r14*2]
test r8, r8
je 0x18002941a
cmp rdx, r8
jae 0x18002945d
movzx ecx, word [rdx]
test cx, cx
je 0x18002945d
add rdx, 2
cmp cx, r10w
jae 0x180029430
inc edi
jmp 0x180029410
cmp cx, r11w
jae 0x18002943f
mov eax, 2
add edi, eax
jmp 0x180029410
lea eax, [r12 + rcx]
cmp ax, r15w
mov eax, r9d
jbe 0x180029459
add cx, bx
cmp cx, r15w
setbe al
add eax, 3
add edi, eax
jmp 0x180029410
mov rax, qword [0x180069158]
inc edi
movzx r15d, byte [rsp + 0x52]
mov r12, qword [rbp + 0x58]
test rax, rax
je 0x18002947b
inc dword [rax + 0x3bc]
movsxd rcx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [r12 + 0x18]
mov edx, edi
mov rbx, rax
lea r9, [rcx + rsi*2]
lea r8, [rcx + r14*2]
mov rcx, rax
call fcn.180002b30
mov r9, qword [0x180069158]
mov rax, qword [r9 + 0x108]
test rax, rax
je 0x1800294c4
mov rcx, qword [r9 + 0x110]
mov rdx, rbx
call rax
mov r9, qword [0x180069158]
test rbx, rbx
je 0x1800294d5
test r9, r9
je 0x1800294d5
dec dword [r9 + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rsi, qword [rsp + 0x60]
mov r14, qword [rbp + 0x58]
test r15b, r15b
je 0x180029109
mov eax, dword [r14 + 0x54]
lea rbx, [r14 + 0x4c]
xor r15d, r15d
cmp dword [r14 + 0x50], eax
jne 0x180029513
mov eax, dword [r14 + 4]
mov dword [r14 + 0x54], eax
mov dword [rbx], eax
mov dword [r14 + 0x50], r15d
mov byte [r14 + 0x5b], r15b
mov byte [r14 + 0xe74], 1
mov eax, dword [rbx + 8]
cmp dword [rbx + 4], eax
je 0x180029532
mov rdx, rbx
mov rcx, r14
call fcn.1800265b0
mov byte [rbx + 0xf], 0
xor cl, cl
jmp 0x18002910e
mov r14, qword [rbp + 0x58]
movzx r8d, r10b
mov rcx, r14
xor r8d, 1
add r8d, 0x20000a
lea rdx, [r14 + 0x4c]
call fcn.1800266f0
mov eax, dword [r14 + 0x4c]
mov dword [r14 + 0x54], eax
mov dword [r14 + 0x50], eax
mov byte [r14 + 0xe74], 1
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029104
xor al, al
mov r12d, dword [rsp + 0x68]
mov edi, dword [rbp - 0x6c]
or r12b, al
mov dword [rsp + 0x68], r12d
cmp dword [rsi + 0x1a60], edi
jne 0x180029bcc
mov ebx, dword [rsp + 0x54]
mov r13d, r15d
mov qword [rbp - 0x78], r15
mov dword [rsp + 0x78], r15d
test cl, cl
je 0x180029608
test bl, bl
jne 0x1800295e7
mov r9, qword [r14 + 0x38]
mov rax, qword [rbp - 0x60]
mov r8, r9
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800295d3
inc rax
test ecx, ecx
jne 0x1800295c0
test edx, edx
je 0x1800295e7
mov r13d, dword [r14 + 0x30]
dec r13d
mov qword [rbp - 0x78], r9
mov dword [rsp + 0x78], r13d
cmp byte [rsp + 0x53], 0
mov r9d, dword [rbp + 0x178]
je 0x1800295fb
test r9b, 0x20
jne 0x18002960f
mov r15d, dword [rbp - 0x80]
mov r10, qword [rbp - 0x60]
jmp 0x180029b12
mov r9d, dword [rbp + 0x178]
test bl, bl
jne 0x18002966c
mov eax, dword [r14 + 0x10]
mov byte [r14 + 0x40], 1
mov ecx, dword [r14 + 0x24]
lea ebx, [rax*4 + 1]
cmp ebx, ecx
jle 0x18002964f
test ecx, ecx
je 0x18002963a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18002963f
mov eax, 8
cmp eax, ebx
lea rcx, [r14 + 0x20]
mov edx, ebx
cmovg edx, eax
call fcn.180012f30
mov dword [r14 + 0x20], ebx
xor r9d, r9d
mov r8, qword [r14 + 0x18]
mov edx, ebx
mov rcx, qword [r14 + 0x28]
call fcn.180002b30
mov r9d, dword [rbp + 0x178]
test r9d, 0x1c0
je 0x180029ac8
mov r8d, 0x16
test r9b, 0x40
je 0x1800296a5
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x3c]
test ecx, ecx
js 0x1800296a5
call fcn.180007520
test al, al
je 0x1800296a5
lea eax, [r8 + 0x2a]
mov r8d, r15d
jmp 0x180029704
test r9b, r9b
jns 0x1800296f6
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x48]
test ecx, ecx
js 0x1800296d0
call fcn.180007520
test al, al
je 0x1800296d0
mov r10d, 0x80
mov eax, r10d
lea r8d, [r10 - 0x7d]
jmp 0x18002970a
mov rax, qword [0x180069158]
mov ecx, dword [rax + 0x4c]
test ecx, ecx
js 0x1800296f6
call fcn.180007520
test al, al
je 0x1800296f6
mov r10d, 0x80
mov eax, r10d
lea r8d, [r10 - 0x7c]
jmp 0x18002970a
mov ecx, 0x100
mov eax, r15d
test ecx, r9d
cmovne eax, ecx
mov r10d, 0x80
test eax, eax
je 0x180029ac8
mov dword [rbp - 0x18], eax
mov ebx, r15d
mov rax, qword [r14 + 0x28]
mov edi, 0x2400
mov qword [rbp], rax
mov r13d, 0x3ff
mov eax, dword [r14 + 8]
mov r11d, 0x800
mov dword [rbp + 8], eax
mov eax, dword [r14 + 0x44]
mov dword [rbp + 0xc], eax
movsxd rax, dword [r14 + 0x4c]
mov dword [rbp - 0x14], r9d
mov r9, qword [r14 + 0x18]
mov r14d, 0x2800
mov dword [rbp - 4], r8d
mov rdx, r9
mov dword [rbp - 8], r15d
mov qword [rbp + 0x11], r15
lea r8, [r9 + rax*2]
mov dword [rbp + 0x19], r15d
mov word [rbp + 0x1d], r15w
mov byte [rbp + 0x1f], 0
mov qword [rbp - 0x10], r15
mov byte [rbp + 0x10], 0
nop dword [rax]
test r8, r8
je 0x18002978a
cmp rdx, r8
jae 0x1800297cd
movzx ecx, word [rdx]
test cx, cx
je 0x1800297cd
add rdx, 2
cmp cx, r10w
jae 0x1800297a0
inc ebx
jmp 0x180029780
cmp cx, r11w
jae 0x1800297af
mov eax, 2
add ebx, eax
jmp 0x180029780
lea eax, [rdi + rcx]
cmp ax, r13w
mov eax, r15d
jbe 0x1800297c9
add cx, r14w
cmp cx, r13w
setbe al
add eax, 3
add ebx, eax
jmp 0x180029780
mov r14, qword [rbp + 0x58]
mov rdx, r9
mov dword [rsp + 0x6c], ebx
mov r12d, r15d
mov dword [rbp + 0x14], ebx
movsxd rax, dword [r14 + 0x50]
lea r8, [r9 + rax*2]
mov r9d, 0x2800
nop dword [rax]
test r8, r8
je 0x1800297fa
cmp rdx, r8
jae 0x180029840
movzx ecx, word [rdx]
test cx, cx
je 0x180029840
add rdx, 2
cmp cx, r10w
jae 0x180029811
inc r12d
jmp 0x1800297f0
cmp cx, r11w
jae 0x180029821
mov eax, 2
add r12d, eax
jmp 0x1800297f0
lea eax, [rdi + rcx]
cmp ax, r13w
mov eax, r15d
jbe 0x18002983b
add cx, r9w
cmp cx, r13w
setbe al
add eax, 3
add r12d, eax
jmp 0x1800297f0
mov r14, qword [rbp + 0x58]
xor r8d, r8d
mov dword [rbp + 0x18], r12d
mov ebx, 0x2800
movsxd rax, dword [r14 + 0x54]
mov r9, qword [r14 + 0x18]
lea rdx, [r9 + rax*2]
nop dword [rax]
test rdx, rdx
je 0x18002986a
cmp r9, rdx
jae 0x1800298b0
movzx ecx, word [r9]
test cx, cx
je 0x1800298b0
add r9, 2
cmp cx, r10w
jae 0x180029882
inc r15d
jmp 0x180029860
cmp cx, r11w
jae 0x180029892
mov eax, 2
add r15d, eax
jmp 0x180029860
lea eax, [rdi + rcx]
cmp ax, r13w
mov eax, r8d
jbe 0x1800298ab
add cx, bx
cmp cx, r13w
setbe al
add eax, 3
add r15d, eax
jmp 0x180029860
lea rcx, [rbp - 0x18]
mov dword [rbp + 0x1c], r15d
xor esi, esi
call rsi
movsxd rax, dword [rbp + 0x14]
mov r14, qword [rbp]
mov r13d, dword [rsp + 0x78]
cmp eax, dword [rsp + 0x6c]
je 0x180029922
lea rdi, [r14 + rax]
mov rbx, r14
test rdi, rdi
je 0x1800298e0
cmp rbx, rdi
jae 0x180029910
cmp byte [rbx], 0
je 0x180029910
mov r8, rdi
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.180002970
movsxd rcx, eax
mov eax, dword [rsp + 0x78]
add rbx, rcx
test eax, eax
je 0x180029910
mov ecx, 0xffff
cmp eax, ecx
ja 0x1800298d6
inc esi
jmp 0x1800298d6
mov rdx, qword [rbp + 0x58]
mov dword [rdx + 0x4c], esi
xor esi, esi
mov byte [rdx + 0xe74], 1
jmp 0x180029926
mov rdx, qword [rbp + 0x58]
movsxd rax, dword [rbp + 0x18]
cmp eax, r12d
je 0x180029977
lea rdi, [r14 + rax]
mov rbx, r14
test rdi, rdi
je 0x180029940
cmp rbx, rdi
jae 0x180029970
cmp byte [rbx], 0
je 0x180029970
mov r8, rdi
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.180002970
movsxd rcx, eax
mov eax, dword [rsp + 0x78]
add rbx, rcx
test eax, eax
je 0x180029970
mov ecx, 0xffff
cmp eax, ecx
ja 0x180029936
inc esi
jmp 0x180029936
mov rdx, qword [rbp + 0x58]
mov dword [rdx + 0x50], esi
movsxd rax, dword [rbp + 0x1c]
xor r12d, r12d
cmp eax, r15d
je 0x1800299d1
lea rdi, [r14 + rax]
mov rbx, r14
mov esi, r12d
nop dword [rax]
test rdi, rdi
je 0x18002999a
cmp rbx, rdi
jae 0x1800299ca
cmp byte [rbx], r12b
je 0x1800299ca
mov r8, rdi
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.180002970
movsxd rcx, eax
mov eax, dword [rsp + 0x78]
add rbx, rcx
test eax, eax
je 0x1800299ca
mov ecx, 0xffff
cmp eax, ecx
ja 0x180029990
inc esi
jmp 0x180029990
mov rdx, qword [rbp + 0x58]
mov dword [rdx + 0x54], esi
cmp byte [rbp + 0x10], 0
mov r15d, dword [rbp - 0x80]
je 0x180029ab1
mov ebx, dword [rbp + 8]
mov eax, dword [rbp - 0x68]
cmp ebx, eax
jle 0x180029a2a
test r15b, r15b
je 0x180029a2a
mov ecx, dword [rdx + 0x14]
lea rdi, [rdx + 0x10]
sub ebx, eax
add ebx, dword [rdi]
cmp ebx, ecx
jle 0x180029a28
test ecx, ecx
je 0x180029a0c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x180029a11
mov eax, 8
cmp eax, ebx
mov edx, ebx
mov rcx, rdi
cmovg edx, eax
call fcn.180012fc0
mov rdx, qword [rbp + 0x58]
mov r14, qword [rbp]
mov dword [rdi], ebx
mov rsi, qword [rdx + 0x18]
movsxd rdi, dword [rdx + 0x10]
mov rbx, rsi
dec rdi
lea rdi, [rsi + rdi*2]
cmp rsi, rdi
jae 0x180029a7a
cmp byte [r14], 0
je 0x180029a7a
xor r8d, r8d
lea rcx, [rsp + 0x78]
mov rdx, r14
call fcn.180002970
movsxd rcx, eax
mov eax, dword [rsp + 0x78]
add r14, rcx
test eax, eax
je 0x180029a7a
mov ecx, 0xffff
cmp eax, ecx
ja 0x180029a75
mov word [rbx], ax
add rbx, 2
cmp rbx, rdi
jb 0x180029a41
mov r14, qword [rbp + 0x58]
mov r9d, dword [rbp + 0x178]
mov word [rbx], r12w
sub rbx, rsi
mov eax, dword [rbp + 8]
mov r12d, dword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
sar rbx, 1
mov dword [r14 + 4], ebx
mov dword [r14 + 8], eax
mov dword [r14 + 0xe70], 0xbe99999a
jmp 0x180029acc
mov r14, qword [rbp + 0x58]
mov r12d, dword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r9d, dword [rbp + 0x178]
jmp 0x180029acc
mov r15d, dword [rbp - 0x80]
cmp byte [rsp + 0x54], 0
mov r10, qword [rbp - 0x60]
jne 0x180029b12
mov r9, qword [r14 + 0x28]
mov r8, r10
mov rax, r9
sub r8, r9
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180029af7
inc rax
test ecx, ecx
jne 0x180029ae4
test edx, edx
je 0x180029b0b
mov r13d, dword [r14 + 8]
mov rdi, r9
mov r9d, dword [rbp + 0x178]
jmp 0x180029b16
mov r9d, dword [rbp + 0x178]
mov rdi, qword [rbp - 0x78]
test rdi, rdi
je 0x180029bb1
mov ecx, 0x20
cmp dword [rbp - 0x68], r13d
je 0x180029b7e
test r15b, r15b
je 0x180029b7e
xor edx, edx
mov dword [rbp + 0x20], 0x40000
lea eax, [r13 + 1]
mov qword [rbp + 0x30], rdx
cmp eax, ecx
mov dword [rbp + 0x24], r9d
xorps xmm0, xmm0
mov qword [rbp + 0x38], r10
cmovle eax, ecx
mov dword [rbp + 0x40], r13d
lea rcx, [rbp + 0x20]
mov dword [rbp + 0x44], eax
movdqu xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x28], rdx
call rdx
mov ecx, dword [rbp + 0x44]
mov r10, qword [rbp + 0x38]
mov qword [rbp - 0x60], r10
lea r13d, [rcx - 1]
cmp dword [rbp + 0x40], r13d
cmovl r13d, dword [rbp + 0x40]
lea eax, [r13 + 1]
cmp eax, ecx
cmovl ecx, eax
movsxd rbx, ecx
cmp rbx, 1
jb 0x180029bac
jbe 0x180029ba6
lea r8, [rbx - 1]
mov rdx, rdi
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r10, qword [rbp - 0x60]
mov byte [rbx + r10 - 1], 0
mov byte [rsp + 0x70], 1
mov edi, dword [rbp - 0x6c]
xor r15d, r15d
mov dword [r14 + 0xe78], r15d
mov qword [r14 + 0xe80], r15
mov qword [r14 + 0xe88], r15
cmp byte [rsp + 0x58], 0
je 0x180029c35
cmp dword [rsi + 0x1a60], edi
jne 0x180029c35
mov rdx, qword [0x180069158]
mov ecx, dword [rdx + 0x1a60]
test ecx, ecx
setne al
mov byte [rdx + 0x1a6c], al
test ecx, ecx
je 0x180029c07
mov dword [rdx + 0x1a68], r15d
mov word [rdx + 0x1a6e], 0
mov dword [rdx + 0x1a60], r15d
mov byte [rdx + 0x1a6d], 0
mov qword [rdx + 0x1a90], r15
mov byte [rdx + 0x1a70], 0
mov qword [rdx + 0x1a74], 0
mov qword [rdx + 0x1a80], r15
mov r11d, dword [rsp + 0x5c]
test r11b, r11b
jne 0x180029cee
mov r8d, 1
lea rcx, [rbp - 0x28]
mov edx, edi
call fcn.180003a40
movss xmm7, dword [0x180035f38]
mov ecx, 7
movaps xmm1, xmm7
call fcn.180002c70
movss xmm0, dword [rsi + 0x1598]
mov r8d, eax
mov rdx, qword [rbp - 0x20]
mov r9b, 1
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm14
unpcklps xmm0, xmm15
movq rcx, xmm0
call fcn.180003640
mov r10, qword [rbp - 0x48]
movaps xmm1, xmm15
addss xmm1, dword [rsi + 0x1594]
mov r11d, dword [rsp + 0x5c]
movaps xmm12, xmm15
addss xmm12, xmm11
movss dword [rbp + 0x6c], xmm15
movaps xmm0, xmm14
movaps xmm13, xmm10
addss xmm0, dword [rsi + 0x1590]
addss xmm13, xmm14
movss dword [rbp - 0x74], xmm1
movss dword [rbp + 0x74], xmm12
movaps xmm15, xmm12
movss dword [rbp - 0x78], xmm0
movss dword [rbp + 0x70], xmm13
movss dword [rbp - 0x80], xmm13
jmp 0x180029d34
mov r10, qword [rbp - 0x48]
movaps xmm1, xmm14
movss xmm7, dword [0x180035f38]
addss xmm1, xmm10
movss dword [rbp + 0x6c], xmm15
addss xmm15, xmm11
movsd xmm0, qword [r10 + 0xd0]
movsd qword [rbp - 0x78], xmm0
movss dword [rbp - 0x80], xmm1
movaps xmm13, xmm1
movss dword [rbp + 0x70], xmm1
movaps xmm12, xmm15
movss dword [rbp + 0x74], xmm15
cmp byte [rbp - 0x70], 0
lea rax, [rbp - 0x78]
movss xmm8, dword [rax + 4]
xorps xmm9, xmm9
movss dword [rbp + 0x68], xmm14
movss xmm14, dword [rax]
movss dword [rsp + 0x6c], xmm8
movss dword [rbp - 0x68], xmm9
movss dword [rsp + 0x78], xmm9
je 0x180029d71
mov r13, qword [r14 + 0x28]
mov qword [rbp - 0x60], r13
jmp 0x180029d75
mov r13, qword [rbp - 0x60]
movzx eax, byte [rsp + 0x50]
test al, al
jne 0x180029f67
test r12b, r12b
jne 0x180029f67
test r11b, r11b
je 0x180029df2
movzx edx, byte [r13]
lea r12, [r13 + 1]
mov ecx, r15d
test dl, dl
je 0x180029db7
cmp dl, 0xa
lea eax, [rcx + 1]
movzx edx, byte [r12]
cmovne eax, ecx
inc r12
mov ecx, eax
test dl, dl
jne 0x180029da0
movzx eax, byte [r12 - 1]
dec r12
cmp al, 0xa
je 0x180029dca
cmp al, 0xd
je 0x180029dca
inc ecx
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
movss dword [rbp - 0x68], xmm10
mulss xmm8, dword [rsi + 0x1910]
movss dword [rsp + 0x78], xmm8
movss xmm8, dword [rsp + 0x6c]
jmp 0x180029e2f
cmp dword [rsi + 0x1a60], edi
jne 0x180029e00
movsxd r12, dword [r14 + 8]
jmp 0x180029e1a
mov r12, 0xffffffffffffffff
nop word [rax + rax]
inc r12
cmp byte [r12 + r13], 0
jne 0x180029e10
add r12, r13
mov rax, r12
sub rax, r13
cmp rax, 0x200000
jge 0x18002a797
movaps xmm1, xmm7
xor ecx, ecx
call fcn.180002c70
movss xmm2, dword [rsi + 0x1910]
lea r8, [rbp + 0x68]
mov r10, qword [r10 + 0x2a8]
lea rcx, [rsi + 0x1910]
test r11b, r11b
mov r9d, eax
mov r11, qword [rsi + 0x1908]
mov rdx, r12
cmovne r8, r15
test eax, 0xff000000
je 0x18002a75f
test r12, r12
jne 0x180029e8d
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp byte [rdx + r13], 0
jne 0x180029e80
add rdx, r13
lea rcx, [rsi + 0x1910]
cmp r13, rdx
je 0x18002a75f
test r11, r11
jne 0x180029eaa
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
ucomiss xmm2, xmm9
jp 0x180029ebb
jne 0x180029ebb
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm1, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp - 0x28], xmm1
test r8, r8
je 0x180029f1d
movss xmm0, dword [r8]
comiss xmm1, xmm0
jae 0x180029ee3
movss dword [rbp - 0x28], xmm0
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rbp - 0x24]
comiss xmm0, xmm1
jae 0x180029ef8
movss dword [rbp - 0x24], xmm1
movss xmm0, dword [r8 + 8]
comiss xmm0, dword [rbp - 0x20]
ja 0x180029f09
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [r8 + 0xc]
comiss xmm0, dword [rbp - 0x1c]
ja 0x180029f1a
movss dword [rbp - 0x1c], xmm0
test r8, r8
setne al
movaps xmm0, xmm14
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm9
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
unpcklps xmm0, xmm8
mov dword [rsp + 0x20], r9d
movq r9, xmm0
call fcn.180020650
lea rcx, [rsi + 0x1910]
jmp 0x18002a75f
movsxd r15, dword [r14 + 8]
xor r10d, r10d
mov rsi, qword [r14 + 0x18]
mov r8d, 0xfffffc18
xorps xmm7, xmm7
xorps xmm6, xmm6
mov r9d, r10d
mov edi, r10d
lea r12, [r15 + r13]
mov ebx, r8d
mov qword [rbp - 0x78], r12
mov edx, r10d
test al, al
je 0x180029fa6
movsxd rax, dword [r14 + 0x4c]
lea edx, [r10 + 1]
lea r8d, [r10 - 1]
lea r9, [rsi + rax*2]
mov r13d, dword [rsp + 0x68]
test r13b, r13b
je 0x180029fcb
mov ecx, dword [r14 + 0x54]
mov ebx, 0xffffffff
cmp dword [r14 + 0x50], ecx
cmovl ecx, dword [r14 + 0x50]
inc edx
movsxd rax, ecx
lea rdi, [rsi + rax*2]
movzx ecx, word [rsi]
movzx eax, r11b
mov r11d, r10d
add edx, eax
mov rax, rsi
test cx, cx
je 0x18002a01d
nop
cmp cx, 0xa
jne 0x18002a010
inc r11d
cmp r8d, 0xffffffff
jne 0x180029ffd
cmp rax, r9
jb 0x180029ffd
dec edx
mov r8d, r11d
test edx, edx
jle 0x18002a01d
cmp ebx, 0xffffffff
jne 0x18002a010
cmp rax, rdi
jb 0x18002a010
dec edx
mov ebx, r11d
test edx, edx
jle 0x18002a01d
movzx ecx, word [rax + 2]
add rax, 2
test cx, cx
jne 0x180029fe0
inc r11d
mov rdx, r9
cmp r8d, 0xffffffff
mov r10d, r11d
cmovne r10d, r8d
cmp ebx, 0xffffffff
cmove ebx, r11d
cmp r9, rsi
jbe 0x18002a053
nop word [rax + rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18002a053
mov rdx, rax
cmp rax, rsi
ja 0x18002a040
mov rax, qword [0x180069158]
movaps xmm1, xmm9
movaps xmm10, xmm9
mov r8, qword [rax + 0x1908]
movss xmm3, dword [rax + 0x1910]
divss xmm3, dword [r8 + 0x14]
cmp rdx, r9
jae 0x18002a0c0
nop dword [rax]
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18002a097
maxss xmm1, xmm10
movaps xmm10, xmm9
jmp 0x18002a0bb
cmp ecx, 0xd
je 0x18002a0bb
cmp ecx, dword [r8]
jge 0x18002a0ac
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18002a0b2
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm3
addss xmm10, xmm0
cmp rdx, r9
jb 0x18002a080
mov r9, qword [rsp + 0x60]
maxss xmm10, xmm1
movd xmm11, r10d
cvtdq2ps xmm11, xmm11
lea r14, [r9 + 0x1910]
movss xmm2, dword [r14]
mulss xmm11, xmm2
movss dword [rsp + 0x68], xmm10
movss dword [rbp - 0x6c], xmm11
test ebx, ebx
js 0x18002a16d
mov rdx, rdi
cmp rdi, rsi
jbe 0x18002a113
nop dword [rax]
cmp word [rdx - 2], 0xa
lea rax, [rdx - 2]
je 0x18002a113
mov rdx, rax
cmp rax, rsi
ja 0x18002a100
movaps xmm1, xmm9
movaps xmm6, xmm9
cmp rdx, rdi
jae 0x18002a15e
movzx ecx, word [rdx]
add rdx, 2
cmp ecx, 0xa
jne 0x18002a136
maxss xmm1, xmm6
movaps xmm6, xmm9
jmp 0x18002a159
cmp ecx, 0xd
je 0x18002a159
cmp ecx, dword [r8]
jge 0x18002a14b
mov rax, qword [r8 + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18002a151
movss xmm0, dword [r8 + 0x10]
mulss xmm0, xmm3
addss xmm6, xmm0
cmp rdx, rdi
jb 0x18002a120
movd xmm7, ebx
maxss xmm6, xmm1
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm2
mov r10d, dword [rsp + 0x5c]
movss xmm3, dword [rbp - 0x38]
test r10b, r10b
je 0x18002a193
movd xmm4, r11d
cvtdq2ps xmm4, xmm4
movss dword [rbp - 0x68], xmm3
mulss xmm4, xmm2
movss dword [rsp + 0x78], xmm4
movzx r8d, byte [rsp + 0x50]
mov rbx, qword [rbp + 0x58]
test r8b, r8b
je 0x18002a262
cmp byte [rbx + 0xe74], 0
je 0x18002a262
test dword [rbp + 0x178], 0x1000
jne 0x18002a206
movss xmm2, dword [rbx + 0x48]
movaps xmm0, xmm3
comiss xmm2, xmm10
mulss xmm0, dword [0x180035ef8]
movaps xmm1, xmm10
jbe 0x18002a1e7
subss xmm1, xmm0
movaps xmm0, xmm9
maxss xmm0, xmm1
jmp 0x18002a1f4
subss xmm1, xmm3
comiss xmm1, xmm2
jb 0x18002a213
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x48], xmm0
jmp 0x18002a213
xor r8d, r8d
mov dword [rbx + 0x48], r8d
movzx r8d, byte [rsp + 0x50]
test r10b, r10b
je 0x18002a25b
mov rax, qword [rbp - 0x48]
movaps xmm2, xmm11
subss xmm2, dword [r14]
movss xmm1, dword [rax + 0x58]
comiss xmm1, xmm2
jbe 0x18002a239
movaps xmm0, xmm9
maxss xmm0, xmm2
jmp 0x18002a246
movaps xmm0, xmm11
subss xmm0, dword [rbp - 0x54]
maxss xmm0, xmm1
subss xmm1, xmm0
movss dword [rax + 0x58], xmm0
addss xmm8, xmm1
movss dword [rsp + 0x6c], xmm8
mov byte [rbx + 0xe74], 0
movss xmm9, dword [rbx + 0x48]
test r13b, r13b
je 0x18002a4c3
mov edx, dword [rbx + 0x54]
mov eax, edx
mov ecx, dword [rbx + 0x50]
cmp ecx, edx
cmovl eax, ecx
cmovge edx, ecx
cdqe
lea rbx, [rsi + rax*2]
movsxd rax, edx
lea rdi, [rsi + rax*2]
test r8b, r8b
je 0x18002a29d
movss xmm1, dword [0x180035f38]
jmp 0x18002a2a5
movss xmm1, dword [0x180035f10]
mov ecx, 0x2a
call fcn.180002c70
mov esi, eax
test r10b, r10b
je 0x18002a2c2
xorps xmm8, xmm8
movss dword [rbp - 0x30], xmm8
jmp 0x18002a2cb
movss xmm8, dword [0x180035f50]
movaps xmm4, xmm14
addss xmm4, xmm6
movss xmm6, dword [rsp + 0x6c]
addss xmm6, xmm7
xorps xmm7, xmm7
subss xmm4, xmm9
subss xmm6, xmm7
cmp rbx, rdi
jae 0x18002a4b8
movss xmm10, dword [rbp - 0x80]
movss xmm11, dword [rbp - 0x3c]
mov r12, qword [rbp - 0x48]
nop dword [rax]
nop word [rax + rax]
movss xmm5, dword [r14]
movaps xmm0, xmm12
addss xmm0, xmm5
comiss xmm6, xmm0
ja 0x18002a49c
movss xmm0, dword [rbp - 0x50]
comiss xmm0, xmm6
jbe 0x18002a35b
cmp rbx, rdi
jae 0x18002a485
nop dword [rax]
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
je 0x18002a485
cmp rbx, rdi
jb 0x18002a340
jmp 0x18002a485
mov rax, qword [0x180069158]
movaps xmm3, xmm7
movaps xmm1, xmm7
mov rdx, qword [rax + 0x1908]
movss xmm2, dword [rax + 0x1910]
divss xmm2, dword [rdx + 0x14]
cmp rbx, rdi
jae 0x18002a3bf
movzx ecx, word [rbx]
add rbx, 2
cmp ecx, 0xa
je 0x18002a3b5
cmp ecx, 0xd
je 0x18002a3ae
cmp ecx, dword [rdx]
jge 0x18002a3a1
mov rax, qword [rdx + 8]
movss xmm0, dword [rax + rcx*4]
jmp 0x18002a3a6
movss xmm0, dword [rdx + 0x10]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp rbx, rdi
jb 0x18002a381
jmp 0x18002a3bf
movaps xmm3, xmm7
maxss xmm3, xmm1
movaps xmm1, xmm7
maxss xmm1, xmm3
comiss xmm7, xmm1
jb 0x18002a3fa
mov rax, qword [r9 + 0x1908]
cmp dword [rax], 0x20
jle 0x18002a3e2
mov rax, qword [rax + 8]
movss xmm0, dword [rax + 0x80]
jmp 0x18002a3e7
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x180035f0c]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [rbp - 0x30]
addss xmm1, xmm4
subss xmm2, xmm5
movaps xmm0, xmm8
movaps xmm3, xmm4
addss xmm0, xmm6
addss xmm3, xmm7
minss xmm1, xmm13
addss xmm2, xmm6
minss xmm0, xmm12
maxss xmm3, xmm11
movss dword [rbp - 0x20], xmm1
maxss xmm2, dword [rbp - 0x50]
comiss xmm0, dword [rbp - 0x50]
movss dword [rbp - 0x24], xmm2
movss dword [rbp - 0x28], xmm3
movss dword [rbp - 0x1c], xmm0
jbe 0x18002a485
comiss xmm12, xmm2
jbe 0x18002a485
comiss xmm1, xmm11
jbe 0x18002a485
comiss xmm13, xmm3
jbe 0x18002a485
mov rcx, qword [r12 + 0x2a8]
lea r8, [rbp - 0x20]
mov dword [rsp + 0x28], 0xf
lea rdx, [rbp - 0x28]
mov r9d, esi
movss dword [rsp + 0x20], xmm7
call fcn.18001d180
mov r9, qword [rsp + 0x60]
movaps xmm4, xmm14
subss xmm4, xmm9
addss xmm6, dword [r14]
cmp rbx, rdi
jb 0x18002a310
movss xmm11, dword [rbp - 0x6c]
mov r12, qword [rbp - 0x78]
mov r10d, dword [rsp + 0x5c]
movss dword [rbp - 0x80], xmm10
movss xmm10, dword [rsp + 0x68]
mov rbx, qword [rbp + 0x58]
movss xmm8, dword [rsp + 0x6c]
test r10b, r10b
jne 0x18002a4d5
cmp r15, 0x200000
jge 0x18002a624
movss xmm7, dword [0x180035f38]
xor ecx, ecx
movaps xmm1, xmm7
call fcn.180002c70
mov rsi, qword [rsp + 0x60]
lea r8, [rbp + 0x68]
mov rdi, qword [rbp - 0x48]
test r10b, r10b
movss xmm2, dword [r14]
mov r9d, eax
mov eax, 0
movaps xmm3, xmm14
mov r11, qword [rsi + 0x1908]
subss xmm3, xmm9
mov r10, qword [rdi + 0x2a8]
cmovne r8, rax
movaps xmm4, xmm8
xorps xmm5, xmm5
subss xmm4, xmm5
mov rdx, r12
test r9d, 0xff000000
je 0x18002a638
mov r13, qword [rbp - 0x60]
test r12, r12
jne 0x18002a55c
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp byte [rdx + r13], al
jne 0x18002a550
add rdx, r13
cmp r13, rdx
je 0x18002a63c
test r11, r11
jne 0x18002a572
mov rax, qword [r10 + 0x38]
mov r11, qword [rax + 8]
ucomiss xmm2, xmm5
jp 0x18002a582
jne 0x18002a582
mov rax, qword [r10 + 0x38]
movss xmm2, dword [rax + 0x10]
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x68]
add rcx, rcx
movups xmm1, xmmword [rax + rcx*8 - 0x10]
movups xmmword [rbp - 0x28], xmm1
test r8, r8
je 0x18002a5e4
movss xmm0, dword [r8]
comiss xmm1, xmm0
jae 0x18002a5aa
movss dword [rbp - 0x28], xmm0
movss xmm1, dword [r8 + 4]
movss xmm0, dword [rbp - 0x24]
comiss xmm0, xmm1
jae 0x18002a5bf
movss dword [rbp - 0x24], xmm1
movss xmm0, dword [r8 + 8]
comiss xmm0, dword [rbp - 0x20]
ja 0x18002a5d0
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [r8 + 0xc]
comiss xmm0, dword [rbp - 0x1c]
ja 0x18002a5e1
movss dword [rbp - 0x1c], xmm0
test r8, r8
setne al
movaps xmm0, xmm3
mov byte [rsp + 0x48], al
mov rcx, r11
movss dword [rsp + 0x40], xmm5
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rdx
mov rdx, r10
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
unpcklps xmm0, xmm4
mov dword [rsp + 0x20], r9d
movq r9, xmm0
call fcn.180020650
xorps xmm5, xmm5
jmp 0x18002a63c
movss xmm7, dword [0x180035f38]
xorps xmm5, xmm5
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rbp - 0x48]
mov r13, qword [rbp - 0x60]
cmp byte [rsp + 0x50], 0
mov rcx, r14
je 0x18002a75b
movss xmm0, dword [rsi + 0x18]
addss xmm0, dword [rbx + 0xe70]
movss dword [rbx + 0xe70], xmm0
cmp byte [rsi + 0xca], 0
je 0x18002a68b
comiss xmm5, xmm0
jae 0x18002a68b
movss xmm1, dword [0x180035f3c]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm1, dword [0x180035f2c]
comiss xmm1, xmm0
jae 0x18002a68b
xor al, al
jmp 0x18002a68d
mov al, 1
addss xmm14, xmm10
movaps xmm6, xmm8
addss xmm6, xmm11
subss xmm14, xmm9
xorps xmm9, xmm9
subss xmm6, xmm9
movss dword [rbp - 0x28], xmm14
movaps xmm2, xmm14
addss xmm2, xmm7
movaps xmm0, xmm6
movaps xmm1, xmm6
subss xmm0, dword [r14]
subss xmm1, dword [0x180035f48]
movss dword [rbp - 0x20], xmm2
addss xmm0, dword [0x180035f0c]
movss dword [rbp - 0x1c], xmm1
movss dword [rbp - 0x24], xmm0
test al, al
je 0x18002a734
comiss xmm1, dword [rbp - 0x50]
jbe 0x18002a734
comiss xmm15, xmm0
jbe 0x18002a734
comiss xmm2, dword [rbp - 0x3c]
jbe 0x18002a734
movss xmm0, dword [rbp - 0x80]
comiss xmm0, xmm14
jbe 0x18002a734
movss dword [rbp - 0x54], xmm1
xor ecx, ecx
movaps xmm1, xmm7
movss dword [rbp - 0x58], xmm14
call fcn.180002c70
mov rcx, qword [rdi + 0x2a8]
lea rdx, [rbp - 0x28]
mov r9d, eax
movss dword [rsp + 0x20], xmm7
lea r8, [rbp - 0x58]
call fcn.18001cf10
cmp byte [rsp + 0x54], 0
mov rcx, r14
jne 0x18002a75f
subss xmm6, dword [r14]
subss xmm14, xmm7
movss dword [rsi + 0x2ee8], xmm6
movss dword [rsi + 0x2ee4], xmm14
jmp 0x18002a75f
xorps xmm9, xmm9
cmp byte [rsp + 0x5c], 0
je 0x18002a797
movss xmm0, dword [rbp - 0x68]
addss xmm0, xmm9
movss dword [rbp - 0x58], xmm0
movss xmm0, dword [rsp + 0x78]
addss xmm0, dword [rcx]
lea rcx, [rbp - 0x58]
movss dword [rbp - 0x54], xmm0
call fcn.180025020
call fcn.180007860
call fcn.18000d0e0
mov eax, dword [rbp - 0x40]
test al, al
je 0x18002a7a6
call fcn.18000cce0
mov eax, dword [rbp - 0x40]
cmp byte [rsi + 0x2f30], 0
je 0x18002a8fd
test al, al
jne 0x18002a8fd
mov rsi, qword [0x180069158]
mov r14, qword [rsi + 0x1a18]
test r12, r12
jne 0x18002a7f7
mov r12, r13
cmp r13, 0xffffffffffffffff
jae 0x18002a7f7
movzx ecx, byte [r12]
test cl, cl
je 0x18002a7f7
lea rax, [r12 + 1]
cmp cl, 0x23
jne 0x18002a7ee
cmp byte [rax], cl
je 0x18002a7f7
mov r12, rax
cmp rax, 0xffffffffffffffff
jb 0x18002a7d7
movss xmm0, dword [rsi + 0x2f50]
addss xmm0, xmm7
movss dword [rsi + 0x2f50], xmm8
comiss xmm8, xmm0
jbe 0x18002a81e
mov r15b, 1
mov byte [rsi + 0x2f54], r15b
jmp 0x18002a821
xor r15b, r15b
mov ecx, dword [rsi + 0x2f58]
mov rbx, r13
mov eax, dword [r14 + 0x108]
cmp ecx, eax
jle 0x18002a83d
mov dword [rsi + 0x2f58], eax
mov ecx, eax
mov r14d, dword [r14 + 0x108]
sub r14d, ecx
nop word [rax + rax]
mov r8, r12
mov edx, 0xa
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov rdi, r12
cmovne rdi, rax
cmp rdi, r12
jne 0x18002a877
cmp rbx, rdi
je 0x18002a8e7
mov r9d, edi
sub r9d, ebx
test r15b, r15b
jne 0x18002a8ad
cmp rbx, r13
jne 0x18002a8ad
cmp byte [rsi + 0x2f54], r15b
je 0x18002a899
lea rcx, str._s_.s
jmp 0x18002a8b4
mov r8, rbx
lea rcx, str.__.s
mov edx, r9d
call fcn.180011850
jmp 0x18002a8cd
lea rcx, str._r_n_s_.s
lea r8, [0x18003161e]
mov qword [rsp + 0x20], rbx
lea edx, [r14*4]
call fcn.180011850
mov rax, rsi
mov ecx, 0x2f54
mov byte [rax + rcx], 0
cmp rdi, r12
je 0x18002a8f8
lea rbx, [rdi + 1]
jmp 0x18002a850
test r15b, r15b
je 0x18002a8f8
lea rcx, [0x180031738]
call fcn.180011850
mov rsi, qword [rsp + 0x60]
movss xmm0, dword [rbp - 0x2c]
comiss xmm0, xmm9
jbe 0x18002a93c
movss xmm0, dword [rbp - 0x34]
lea rdx, str.CurrentFov
movss xmm1, dword [rbp - 0x50]
mov r9b, 1
addss xmm0, dword [rsi + 0x15a8]
addss xmm1, dword [rsi + 0x1594]
xor r8d, r8d
unpcklps xmm0, xmm1
movq rcx, xmm0
call fcn.180002ec0
movzx ecx, byte [rsp + 0x70]
mov edx, dword [rbp + 0x178]
test cl, cl
je 0x18002a96f
bt edx, 0x15
jb 0x18002a96f
mov rax, qword [0x180069158]
mov word [rax + 0x1a6f], 0x101
mov rax, qword [rax + 0x1a18]
or dword [rax + 0x114], 4
mov eax, ecx
test dl, 0x20
movzx ecx, byte [rsp + 0x53]
cmovne eax, ecx
jmp 0x180027d8f