Function at 0x18009e210
Capabilities:
Encode data using base64

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
movzx edx, word [rcx + 0x104]
mov rbx, rcx
mov r8d, dword [rcx + 0x22c]
xor r14d, r14d
mov eax, 0x1e
mov dword [rsp + 0x90], r14d
mov esi, 0xffff
lea ecx, [rdx + r8]
add ecx, ecx
cmp ecx, eax
cmovb ecx, eax
movzx eax, word [rbx + 0x144]
cmp eax, ecx
jbe 0x18009e269
cmp ecx, esi
cmova ecx, esi
mov word [rbx + 0x144], cx
mov dword [rbx + 0x3b0], r14d
mov dword [rbx + 0x3b8], r14d
test dx, dx
je 0x18009e2a6
lea ecx, [rdx + rdx*4]
mov r9d, 0x32
add ecx, ecx
mov eax, 0xcccccccd
cmp ecx, r9d
cmovb ecx, r9d
mul r8d
shr edx, 3
cmp edx, r9d
cmovb edx, r9d
lea r8d, [rdx + rcx]
jmp 0x18009e2b1
imul r8d, r8d, 0x16
add r8d, 0x12c
mov dword [rbx + 0x3b4], r8d
mov rax, qword [rbx]
imul ecx, dword [rax + 0x10], 0x64
cmp r8d, ecx
jbe 0x18009e2cd
mov dword [rbx + 0x3b4], ecx
mov r8d, ecx
movzx r10d, word [rbx + 0x17e]
lea rax, [0x18009bf10]
cmp word [rbx + 0x17c], r10w
lea r11, [0x180099d90]
mov dword [rbx + 0x3bc], r8d
lea rdx, [0x1800a1a80]
mov dword [rbx + 0x1a4], r14d
lea r8, [0x18009bf20]
cmove r8, rax
lea rcx, [0x18009bdf0]
lea rax, [0x1800a1a40]
cmove rdx, rax
lea rax, [0x18009bdb0]
cmove rcx, rax
lea rax, [0x180099da0]
cmove rax, r11
mov qword [rbx + 0x388], rax
mov qword [rbx + 0x390], r8
mov qword [rbx + 0x398], rdx
mov qword [rbx + 0x3a0], rcx
mov rcx, rbx
mov rax, qword [rbx + 0x230]
mov qword [rbx + 0x248], rax
mov rax, qword [rbx + 0x2d8]
mov qword [rbx + 0x2f0], rax
mov eax, dword [rbx + 0x208]
mov dword [rbx + 0x204], eax
call fcn.180099c40
movzx eax, byte [rbx + 0x1dc]
lea r9, [0x18009c0c0]
lea r11, [0x18009c140]
lea rsi, [0x18009bf50]
lea r8, [0x18009c100]
lea rdx, [0x18009c080]
lea rbp, [0x18009bfb0]
lea r15, [0x18009c010]
lea r10, [0x18009bf80]
lea rdi, [0x180000000]
cmp eax, 7
ja case.default.0x18009e3d4
mov ecx, dword [rdi + rax*4 + 0xa0d2c]
add rcx, rdi
jmp rcx
mov qword [rbx + 0x358], r10
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], r9
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], r11
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], rsi
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], r8
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], rdx
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], rbp
jmp case.default.0x18009e3d4
mov qword [rbx + 0x358], r15
mov esi, 2
mov word [rbx + 0x3ac], r14w
lea r11, [rbx + 0x18]
lea r15, [rbx + 0x21c]
mov r12, r11
lea r13d, [rsi + 0x7f]
movsxd rdx, dword [rbx + 0x218]
mov ebp, pe_nt_image_headers64
mov r9, rdx
mov qword [rsp + 0x30], r15
add r9, qword [rbx + 0x210]
movzx r8d, byte [r9]
mov byte [rbx + 0x220], r8b
movsx ecx, byte [r8 + rdi + 0xf8db0]
mov dword [rbx + 0x224], ecx
test ecx, ecx
jns 0x18009e495
lea eax, [rdx + 1]
mov r12, r11
cmp eax, dword [r15]
jge 0x1800a0cf0
movzx eax, byte [r9 + 1]
imul eax, ecx
mov ecx, esi
sub ecx, eax
mov dword [rbx + 0x224], ecx
lea eax, [rdx + rcx]
cmp eax, dword [r15]
jg 0x1800a0cf0
movzx ecx, byte [r8 + rdi + 0xf8cb0]
mov edx, dword [rbx + 0x1c]
mov eax, ecx
shr eax, 4
sub edx, eax
mov dword [rbx + 0x30], edx
jns 0x18009e501
cmp byte [rbx + 0x34d], 0
jne 0x1800a0c5f
movzx edx, r14w
test cl, 0xf0
jbe 0x18009e4fa
nop
mov rax, qword [rbx + 0x28]
movzx ecx, dx
inc dx
mov dword [rax + rcx*4], r14d
movzx r8d, byte [rbx + 0x220]
movzx eax, byte [r8 + rdi + 0xf8cb0]
shr al, 4
movzx eax, al
cmp dx, ax
jb 0x18009e4d0
mov dword [rbx + 0x30], r14d
mov edx, r14d
cmp r8b, 0x91
jne 0x18009e51f
mov rax, qword [rbx]
mov rcx, qword [rax + 0x410]
test rcx, rcx
je 0x18009e51a
mov ecx, dword [rcx]
jmp 0x18009e52e
mov ecx, dword [rbx + 0x34]
jmp 0x18009e533
movzx eax, r8b
movzx ecx, byte [rax + rdi + 0xf8cb0]
and ecx, 0xf
add ecx, edx
mov dword [rbx + 0x34], ecx
mov r10d, dword [rbx + 0x20]
lea r12, [rbx + 0x18]
cmp ecx, r10d
jg 0x1800a0ce0
mov r9, qword [rbx + 0x28]
mov eax, edx
movzx r11d, r8b
mov byte [rbx + 0x228], 1
mov dword [r12], r14d
lea rsi, [r9 + rax*4]
cmp r11d, 0x92
ja case.default.0x18009e575
mov ecx, dword [rdi + r11*4 + 0xa0d4c]
add rcx, rdi
jmp rcx
movzx eax, r8b
mov edx, 0x4000
and al, 1
movzx ecx, al
shl cx, 0xe
movzx eax, cx
xor ax, dx
cmp r8b, 4
jae 0x18009e5b1
mov word [rbx + 0x1ca], cx
mov word [rbx + 0x1cc], ax
mov word [rbx + 0x1c6], cx
mov word [rbx + 0x1c8], ax
test r8b, 2
jne 0x18009e5ee
mov word [rbx + 0x1ce], cx
mov word [rbx + 0x1d0], ax
jmp 0x18009e5ee
movzx r8d, word [rsi]
lea r9, [rbx + 0x1ca]
movzx edx, word [rsi + 4]
mov rcx, rbx
call fcn.18009bb00
test al, al
jne case.0x18009e575.33
mov eax, dword [rbx + 0x1ca]
mov dword [rbx + 0x1c6], eax
mov rcx, rbx
call fcn.180099c40
mov r10d, 1
mov esi, 2
xor ebp, ebp
mov eax, dword [r12]
test eax, eax
je 0x1800a0c01
cmp eax, 0x80
jne 0x1800a0ca2
mov r8, qword [rbx + 0x278]
test r8, r8
je 0x1800a0b4f
mov eax, dword [rbx + 0x270]
lea rcx, [rax + rax*2]
lea rdx, [r8 + rcx*8]
jmp 0x1800a0b52
movzx r8d, word [rsi]
lea r9, [rbx + 0x1ce]
movzx edx, word [rsi + 4]
mov rcx, rbx
call fcn.18009bb00
test al, al
je 0x18009e5ee
xor ebp, ebp
lea r10d, [rbp + 1]
lea esi, [rbp + 2]
jmp 0x18009e603
movsx ecx, word [rsi]
movsx eax, word [rsi + 4]
test ecx, ecx
jne 0x18009e676
test eax, eax
je 0x18009e5e2
mov dword [rsp + 0xa0], ecx
lea rcx, [rsp + 0xa0]
mov dword [rsp + 0xa4], eax
call fcn.18008b620
mov eax, dword [rsp + 0xa0]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [rbx + 0x1ca], ax
mov eax, dword [rsp + 0xa4]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [rbx + 0x1cc], ax
jmp 0x18009e5e2
movsx ecx, word [rsi]
movsx eax, word [rsi + 4]
test ecx, ecx
jne 0x18009e6d7
test eax, eax
je 0x18009e5ee
mov dword [rsp + 0xa8], ecx
lea rcx, [rsp + 0xa8]
mov dword [rsp + 0xac], eax
call fcn.18008b620
mov eax, dword [rsp + 0xa8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [rbx + 0x1ce], ax
mov eax, dword [rsp + 0xac]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [rbx + 0x1d0], ax
jmp 0x18009e5ee
movsx eax, word [rbx + 0x1ca]
mov dword [rsi], eax
movsx eax, word [rbx + 0x1cc]
mov dword [rsi + 4], eax
jmp case.0x18009e575.33
movsx eax, word [rbx + 0x1ce]
mov dword [rsi], eax
movsx eax, word [rbx + 0x1d0]
mov dword [rsi + 4], eax
jmp case.0x18009e575.33
mov eax, dword [rbx + 0x1ca]
mov dword [rbx + 0x1ce], eax
jmp 0x18009e5ee
mov rdx, rsi
mov rcx, rbx
call fcn.18009a630
jmp case.0x18009e575.33
movzx eax, word [rsi]
mov word [rbx + 0x1c0], ax
jmp case.0x18009e575.33
movzx eax, word [rsi]
mov word [rbx + 0x1c2], ax
jmp case.0x18009e575.33
movzx eax, word [rsi]
mov word [rbx + 0x1c4], ax
jmp case.0x18009e575.33
mov ecx, dword [rsi]
test ecx, ecx
je 0x18009e7fb
cmp ecx, 1
je 0x18009e7d5
mov r10d, 1
xor ebp, ebp
mov esi, 2
cmp byte [rbx + 0x34d], bpl
je 0x18009e603
mov dword [r12], 0x86
jmp 0x18009e603
movups xmm0, xmmword [rbx + 0xf8]
movups xmm1, xmmword [rbx + 0x108]
movups xmmword [rbx + 0x38], xmm0
movups xmm0, xmmword [rbx + 0x118]
movups xmmword [rbx + 0x48], xmm1
movups xmm1, xmmword [rbx + 0x128]
jmp 0x18009e81f
movups xmm0, xmmword [rbx + 0x138]
movups xmm1, xmmword [rbx + 0x148]
movups xmmword [rbx + 0x38], xmm0
movups xmm0, xmmword [rbx + 0x158]
movups xmmword [rbx + 0x48], xmm1
movups xmm1, xmmword [rbx + 0x168]
movups xmmword [rbx + 0x58], xmm0
movups xmmword [rbx + 0x68], xmm1
movzx eax, word [rsi]
mov word [rbx + 0x1fc], ax
jmp case.0x18009e575.33
mov ecx, dword [rsi]
test ecx, ecx
je 0x18009e86e
cmp ecx, 1
jne 0x18009e7ae
movups xmm0, xmmword [rbx + 0xf8]
movups xmm1, xmmword [rbx + 0x108]
movups xmmword [rbx + 0x78], xmm0
movups xmm0, xmmword [rbx + 0x118]
movups xmmword [rbx + 0x88], xmm1
movups xmm1, xmmword [rbx + 0x128]
jmp 0x18009e895
movups xmm0, xmmword [rbx + 0x138]
movups xmm1, xmmword [rbx + 0x148]
movups xmmword [rbx + 0x78], xmm0
movups xmm0, xmmword [rbx + 0x158]
movups xmmword [rbx + 0x88], xmm1
movups xmm1, xmmword [rbx + 0x168]
movups xmmword [rbx + 0x98], xmm0
movups xmmword [rbx + 0xa8], xmm1
movzx eax, word [rsi]
mov word [rbx + 0x1fe], ax
jmp case.0x18009e575.33
mov ecx, dword [rsi]
test ecx, ecx
je 0x18009e8ed
cmp ecx, 1
jne 0x18009e7ae
movups xmm0, xmmword [rbx + 0xf8]
movups xmm1, xmmword [rbx + 0x108]
movups xmmword [rbx + 0xb8], xmm0
movups xmm0, xmmword [rbx + 0x118]
movups xmmword [rbx + 0xc8], xmm1
movups xmm1, xmmword [rbx + 0x128]
jmp 0x18009e917
movups xmm0, xmmword [rbx + 0x138]
movups xmm1, xmmword [rbx + 0x148]
movups xmmword [rbx + 0xb8], xmm0
movups xmm0, xmmword [rbx + 0x158]
movups xmmword [rbx + 0xc8], xmm1
movups xmm1, xmmword [rbx + 0x168]
movups xmmword [rbx + 0xd8], xmm0
movups xmmword [rbx + 0xe8], xmm1
movzx eax, word [rsi]
mov word [rbx + 0x200], ax
jmp case.0x18009e575.33
mov ecx, dword [rsi]
test ecx, ecx
je 0x18009e969
cmp ecx, 1
jne 0x18009e7ae
movups xmm0, xmmword [rbx + 0xf8]
movups xmm1, xmmword [rbx + 0x108]
movups xmmword [rbx + 0x38], xmm0
movups xmm0, xmmword [rbx + 0x118]
movups xmmword [rbx + 0x48], xmm1
movups xmm1, xmmword [rbx + 0x128]
jmp 0x18009e98d
movups xmm0, xmmword [rbx + 0x138]
movups xmm1, xmmword [rbx + 0x148]
movups xmmword [rbx + 0x38], xmm0
movups xmm0, xmmword [rbx + 0x158]
movups xmmword [rbx + 0x48], xmm1
movups xmm1, xmmword [rbx + 0x168]
movups xmmword [rbx + 0x58], xmm0
movups xmmword [rbx + 0x68], xmm1
movups xmm0, xmmword [rbx + 0x38]
movups xmm1, xmmword [rbx + 0x48]
movups xmmword [rbx + 0x78], xmm0
movups xmm0, xmmword [rbx + 0x58]
movups xmmword [rbx + 0x88], xmm1
movups xmm1, xmmword [rbx + 0x68]
movups xmmword [rbx + 0x98], xmm0
movups xmm0, xmmword [rbx + 0x38]
movups xmmword [rbx + 0xa8], xmm1
movups xmm1, xmmword [rbx + 0x48]
movups xmmword [rbx + 0xb8], xmm0
movups xmm0, xmmword [rbx + 0x58]
movups xmmword [rbx + 0xc8], xmm1
movups xmm1, xmmword [rbx + 0x68]
movups xmmword [rbx + 0xd8], xmm0
movups xmmword [rbx + 0xe8], xmm1
movzx eax, word [rsi]
mov word [rbx + 0x1fc], ax
movzx eax, word [rsi]
mov word [rbx + 0x1fe], ax
movzx eax, word [rsi]
mov word [rbx + 0x200], ax
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov esi, 2
lea r10d, [rsi - 1]
test eax, eax
jns 0x18009ea29
mov dword [r12], 0x84
jmp 0x18009e601
mov ecx, 0xffff
cmp eax, ecx
cmovg eax, ecx
mov dword [rbx + 0x1d4], eax
jmp 0x18009e601
mov r10d, 1
lea rax, [0x18009c0c0]
mov dword [rbx + 0x1dc], r10d
mov qword [rbx + 0x358], rax
jmp 0x18009e5fc
lea rax, [0x18009c100]
mov dword [rbx + 0x1dc], r14d
mov qword [rbx + 0x358], rax
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov dword [rbx + 0x1d8], eax
jmp case.0x18009e575.33
mov edi, 1
nop word [rax + rax]
mov rcx, rbx
call fcn.18009c180
cmp al, 1
je case.0x18009e575.33
movzx ecx, byte [rbx + 0x220]
sub ecx, 0x58
je 0x18009eab5
cmp ecx, 1
jne 0x18009eab7
dec edi
jmp 0x18009eab7
inc edi
test edi, edi
jne 0x18009ea90
jmp case.0x18009e575.33
mov ecx, dword [rsi]
test ecx, ecx
jne 0x18009eaca
test edx, edx
je 0x18009eb38
mov edx, dword [rbx + 0x218]
add edx, ecx
mov dword [rbx + 0x218], edx
js 0x18009eb38
movsxd rax, dword [rbx + 0x288]
test eax, eax
jle 0x18009eafa
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x290]
mov rcx, qword [rax + rcx*8 - 8]
cmp edx, dword [rcx + 8]
jg 0x18009eb38
mov byte [rbx + 0x228], 0
cmp dword [rsi], 0
jge case.0x18009e575.33
inc dword [rbx + 0x3b8]
xor ebp, ebp
mov eax, dword [rbx + 0x3b8]
lea esi, [rbp + 2]
lea r10d, [rbp + 1]
cmp eax, dword [rbx + 0x3bc]
jbe 0x18009e603
mov dword [r12], 0x8b
jmp 0x18009e603
mov dword [r12], 0x84
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov dword [rbx + 0x1e4], eax
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov dword [rbx + 0x1e8], eax
jmp case.0x18009e575.33
mov edx, dword [rbx + 0x1a8]
mov ecx, dword [rsi]
call fcn.1800880b0
mov dword [rbx + 0x1ec], eax
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov dword [rsi + 4], eax
jmp case.0x18009e575.33
mov dword [rbx + 0x34], r14d
jmp case.0x18009e575.33
mov ecx, dword [rsi]
mov eax, dword [rsi + 4]
mov dword [rsi], eax
mov dword [rsi + 4], ecx
jmp case.0x18009e575.33
mov eax, dword [rbx + 0x1c]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov eax, dword [rsi]
test eax, eax
jle 0x18009ebbd
cmp eax, edx
jg 0x18009ebbd
sub edx, eax
movsxd rax, edx
mov ecx, dword [r9 + rax*4]
mov dword [rsi], ecx
jmp case.0x18009e575.33
cmp byte [rbx + 0x34d], 0
je 0x18009ebce
mov dword [r12], 0x86
mov ecx, r14d
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov r8d, dword [rsi]
test r8d, r8d
jle 0x18009e7ae
cmp r8d, edx
jg 0x18009e7ae
sub edx, r8d
movsxd rax, edx
mov edi, dword [r9 + rax*4]
lea rcx, [r9 + rax*4]
lea eax, [r8 - 1]
movsxd r8, eax
lea eax, [rdx + 1]
movsxd rdx, eax
shl r8, 2
lea rdx, [r9 + rdx*4]
call sub.VCRUNTIME140.dll_memmove
movsxd rcx, dword [rbx + 0x30]
mov rax, qword [rbx + 0x28]
mov dword [rax + rcx*4 - 4], edi
jmp case.0x18009e575.33
movzx ebp, word [rsi]
cmp bp, word [rbx + 0x84]
jae 0x18009e7ae
movzx esi, word [rsi + 4]
cmp si, word [rbx + 0x44]
jae 0x18009e7ae
mov rax, qword [rbx + 0x90]
mov rcx, rbx
lea r9, [rax + rbp*8]
mov rax, qword [rbx + 0x50]
mov r8d, dword [rax + rsi*8 + 4]
mov edx, dword [rax + rsi*8]
sub r8d, dword [r9 + 4]
sub edx, dword [r9]
call qword [rbx + 0x360]
movzx r8d, bp
mov rcx, rbx
cdq
sub eax, edx
lea rdx, [rbx + 0x78]
sar eax, 1
mov r9d, eax
mov edi, eax
call qword [rbx + 0x378]
neg edi
lea rdx, [rbx + 0x38]
mov r9d, edi
movzx r8d, si
mov rcx, rbx
call qword [rbx + 0x378]
jmp case.0x18009e575.33
movzx ecx, word [rsi]
cmp cx, word [rbx + 0x44]
jae 0x18009e7ae
cmp word [rbx + 0x1ce], 0
mov edx, 0xff
mov eax, 0xf7
cmove eax, edx
mov rdx, qword [rbx + 0x60]
add rdx, rcx
movzx r8d, al
movzx eax, r8b
and al, 0xef
cmp word [rbx + 0x1d0], 0
movzx ecx, al
cmove ecx, r8d
and byte [rdx], cl
jmp case.0x18009e575.33
mov r10d, dword [rbx + 0x280]
mov r8d, dword [rsi + 4]
inc r10d
cmp r8d, r10d
jae 0x18009ee01
mov r9, qword [rbx + 0x268]
test r9, r9
je 0x18009ed17
lea rcx, [r8 + r8*2]
lea rdx, [r9 + rcx*8]
jmp 0x18009ed1a
mov rdx, r14
mov eax, dword [rbx + 0x260]
cmp r10d, eax
jne 0x18009ed2b
cmp dword [rdx + 0xc], r8d
je 0x18009ed59
mov rdx, r9
test r9, r9
je 0x18009ee01
lea rcx, [rax + rax*2]
lea rax, [r9 + rcx*8]
cmp rdx, rax
jae 0x18009ed53
cmp dword [rdx + 0xc], r8d
je 0x18009ed59
add rdx, 0x18
cmp rdx, rax
jb 0x18009ed44
je 0x18009ee01
cmp byte [rdx + 0x10], 0
je 0x18009ee01
movsxd rax, dword [rbx + 0x288]
cmp eax, dword [rbx + 0x28c]
jl 0x18009ed7f
mov dword [r12], 0x82
jmp case.0x18009e575.33
cmp dword [rsi], 0
jle case.0x18009e575.33
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x290]
lea r8, [rax + rcx*8]
mov eax, dword [rbx + 0x208]
mov dword [r8], eax
mov rcx, rbx
mov eax, dword [rbx + 0x218]
inc eax
mov dword [r8 + 4], eax
mov eax, dword [rsi]
mov dword [r8 + 8], eax
mov qword [r8 + 0x10], rdx
inc dword [rbx + 0x288]
mov r8d, dword [rdx + 4]
mov edx, dword [rdx]
call fcn.18009a2f0
xor ebp, ebp
mov byte [rbx + 0x228], 0
mov eax, dword [rsi]
add dword [rbx + 0x3b0], eax
mov eax, dword [rbx + 0x3b0]
lea esi, [rbp + 2]
lea r10d, [rbp + 1]
cmp eax, dword [rbx + 0x3b4]
jbe 0x18009e603
mov dword [r12], 0x8b
jmp 0x18009e603
mov dword [r12], 0x86
jmp case.0x18009e575.33
mov r10d, dword [rbx + 0x280]
mov r8d, dword [rsi]
inc r10d
cmp r8d, r10d
jae 0x18009ee01
mov r9, qword [rbx + 0x268]
test r9, r9
je 0x18009ee01
mov eax, dword [rbx + 0x260]
lea rcx, [r8 + r8*2]
lea rdx, [r9 + rcx*8]
cmp r10d, eax
jne 0x18009ee45
cmp dword [rdx + 0xc], r8d
je 0x18009ee69
lea rcx, [rax + rax*2]
mov rdx, r9
lea rax, [r9 + rcx*8]
cmp r9, rax
jae 0x18009ee64
cmp dword [rdx + 0xc], r8d
je 0x18009ee69
add rdx, 0x18
cmp rdx, rax
jb 0x18009ee55
cmp rdx, rax
je 0x18009ee01
cmp byte [rdx + 0x10], 0
je 0x18009ee01
movsxd rax, dword [rbx + 0x288]
mov r10d, 1
cmp eax, dword [rbx + 0x28c]
jl 0x18009ee91
mov dword [r12], 0x82
jmp 0x18009e5fc
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x290]
lea r8, [rax + rcx*8]
mov eax, dword [rbx + 0x208]
mov dword [r8], eax
mov rcx, rbx
mov eax, dword [rbx + 0x218]
mov dword [r8 + 8], r10d
inc eax
mov dword [r8 + 4], eax
mov qword [r8 + 0x10], rdx
inc dword [rbx + 0x288]
mov r8d, dword [rdx + 4]
mov edx, dword [rdx]
call fcn.18009a2f0
mov byte [rbx + 0x228], 0
jmp 0x18009e5fc
mov rdx, rsi
mov rcx, rbx
call fcn.18009a150
jmp case.0x18009e575.33
movsxd rcx, dword [rbx + 0x288]
test ecx, ecx
jg 0x18009ef05
mov dword [r12], 0x88
jmp case.0x18009e575.33
lea eax, [rcx - 1]
mov dword [rbx + 0x288], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x290]
dec dword [rax + rcx*8 - 0x10]
lea rdx, [rax + rcx*8]
mov byte [rbx + 0x228], 0
cmp dword [rdx - 0x10], 0
jle 0x18009ef46
inc dword [rbx + 0x288]
mov rax, qword [rdx - 8]
mov ecx, dword [rax + 4]
mov dword [rbx + 0x218], ecx
jmp case.0x18009e575.33
mov r8d, dword [rdx - 0x14]
mov rcx, rbx
mov edx, dword [rdx - 0x18]
call fcn.18009a2f0
jmp case.0x18009e575.33
movzx esi, word [rsi]
cmp si, word [rbx + 0x44]
jae 0x18009e7ae
test r8b, 1
je 0x18009efe1
mov rax, qword [rbx + 0x50]
mov rcx, rbx
mov r8d, dword [rax + rsi*8 + 4]
mov edx, dword [rax + rsi*8]
call qword [rbx + 0x360]
mov edi, eax
lea rcx, [0x18009c100]
mov rax, qword [rbx + 0x358]
cmp rax, rcx
jne 0x18009efd0
mov ecx, dword [rbx + 0x1b8]
test edi, edi
js 0x18009efb9
lea edx, [rcx + rdi]
mov eax, 0x20
and edx, 0xffffffc0
cmp edx, 0xffffffe0
lea ecx, [rdx + 0x20]
cmovge eax, ecx
sub eax, edi
jmp 0x18009efe4
sub ecx, edi
mov edx, 0xffffffe0
and ecx, 0xffffffc0
mov eax, edx
sub eax, ecx
test eax, eax
cmovg eax, edx
sub eax, edi
jmp 0x18009efe4
mov r8d, 3
mov edx, edi
mov rcx, rbx
call rax
sub eax, edi
jmp 0x18009efe4
mov eax, r14d
lea rdx, [rbx + 0x38]
mov r9d, eax
movzx r8d, si
mov rcx, rbx
call qword [rbx + 0x378]
mov word [rbx + 0x1c0], si
mov word [rbx + 0x1c2], si
jmp case.0x18009e575.33
mov rcx, rbx
call fcn.18009a910
jmp case.0x18009e575.33
mov rcx, rbx
call fcn.18009b420
jmp case.0x18009e575.33
mov rdx, rsi
mov rcx, rbx
call fcn.18009b1b0
jmp case.0x18009e575.33
mov rdx, rsi
mov rcx, rbx
call fcn.18009b8e0
jmp case.0x18009e575.33
mov rdx, rsi
mov rcx, rbx
call fcn.18009b620
jmp case.0x18009e575.33
mov rcx, rbx
call fcn.18009a360
jmp case.0x18009e575.33
movzx edi, word [rsi]
cmp di, word [rbx + 0x84]
jae 0x18009e7ae
movzx eax, word [rbx + 0x1c0]
cmp ax, word [rbx + 0x44]
jae 0x18009e7ae
cmp word [rbx + 0x1fe], 0
jne 0x18009f0cd
mov rcx, qword [rbx + 0x88]
mov edx, eax
mov rax, qword [rbx + 0x48]
movzx r8d, di
mov rax, qword [rax + rdx*8]
lea rdx, [rbx + 0x78]
mov qword [rcx + rdi*8], rax
mov rcx, rbx
mov r9d, dword [rsi + 4]
call qword [rbx + 0x380]
mov rax, qword [rbx + 0x88]
mov rcx, qword [rbx + 0x90]
mov rax, qword [rax + rdi*8]
mov qword [rcx + rdi*8], rax
movzx ecx, word [rbx + 0x1c0]
mov rax, qword [rbx + 0x50]
lea r9, [rax + rcx*8]
mov rax, qword [rbx + 0x90]
mov rcx, rbx
mov r8d, dword [rax + rdi*8 + 4]
mov edx, dword [rax + rdi*8]
sub r8d, dword [r9 + 4]
sub edx, dword [r9]
call qword [rbx + 0x360]
mov r9d, dword [rsi + 4]
lea rdx, [rbx + 0x78]
sub r9d, eax
movzx r8d, di
mov rcx, rbx
call qword [rbx + 0x378]
movzx eax, word [rbx + 0x1c0]
xor ebp, ebp
mov word [rbx + 0x1c2], ax
mov word [rbx + 0x1c4], di
lea r10d, [rbp + 1]
lea esi, [rbp + 2]
test byte [rbx + 0x220], r10b
je 0x18009e603
mov word [rbx + 0x1c0], di
jmp 0x18009e603
mov r8d, dword [rbx + 0x1d4]
cmp dword [rbx + 0x1c], r8d
jl 0x18009f209
movzx eax, word [rbx + 0x44]
cmp word [rbx + 0x1c0], ax
jae 0x18009f209
mov ecx, edx
test r8d, r8d
jle 0x18009f21c
nop word [rax + rax]
movsxd rax, edx
lea ecx, [rdx - 1]
mov dword [rbx + 0x30], ecx
movzx edi, word [r9 + rax*4 - 4]
cmp di, word [rbx + 0x84]
jb 0x18009f1a7
cmp byte [rbx + 0x34d], 0
jne 0x18009ee01
jmp 0x18009f1f2
movzx ecx, word [rbx + 0x1c0]
mov rax, qword [rbx + 0x50]
lea r9, [rax + rcx*8]
mov rax, qword [rbx + 0x90]
mov rcx, rbx
mov r8d, dword [rax + rdi*8 + 4]
mov edx, dword [rax + rdi*8]
sub r8d, dword [r9 + 4]
sub edx, dword [r9]
call qword [rbx + 0x360]
lea rdx, [rbx + 0x78]
movzx r8d, di
neg eax
mov rcx, rbx
mov r9d, eax
call qword [rbx + 0x378]
mov ecx, dword [rbx + 0x30]
mov r9, qword [rbx + 0x28]
dec dword [rbx + 0x1d4]
mov edx, ecx
cmp dword [rbx + 0x1d4], 0
jg 0x18009f180
jmp 0x18009f21c
cmp byte [rbx + 0x34d], 0
mov ecx, edx
je 0x18009f21c
mov dword [r12], 0x86
mov r10d, 1
mov dword [rbx + 0x34], ecx
mov dword [rbx + 0x1d4], r10d
jmp 0x18009e5fc
mov esi, 2
lea rax, [0x18009c080]
mov dword [rbx + 0x1dc], esi
mov qword [rbx + 0x358], rax
lea r10d, [rsi - 1]
jmp 0x18009e601
movzx ebp, word [rsi]
cmp bp, word [rbx + 0x44]
jae 0x18009f383
mov edx, dword [rsi + 4]
cmp edx, dword [rbx + 0x22c]
jae 0x18009f383
mov rax, qword [rbx + 0x390]
lea rcx, [0x18009bf10]
cmp rax, rcx
jne 0x18009f28e
mov rax, qword [rbx + 0x230]
mov edi, dword [rax + rdx*4]
jmp 0x18009f295
mov rcx, rbx
call rax
mov edi, eax
cmp word [rbx + 0x1fc], 0
jne 0x18009f2da
movsx edx, word [rbx + 0x1ce]
mov ecx, edi
call fcn.18009d960
mov rcx, qword [rbx + 0x48]
mov dword [rcx + rbp*8], eax
mov ecx, edi
movsx edx, word [rbx + 0x1d0]
call fcn.18009d960
mov rcx, qword [rbx + 0x48]
mov dword [rcx + rbp*8 + 4], eax
mov rax, qword [rbx + 0x48]
mov rcx, qword [rbx + 0x50]
mov rax, qword [rax + rbp*8]
mov qword [rcx + rbp*8], rax
mov rax, qword [rbx + 0x50]
mov rcx, rbx
mov r8d, dword [rax + rbp*8 + 4]
mov edx, dword [rax + rbp*8]
call qword [rbx + 0x360]
test byte [rbx + 0x220], 1
mov esi, eax
je 0x18009f35a
mov eax, edi
lea rcx, [0x18009c080]
sub eax, esi
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rbx + 0x1e4]
mov rax, qword [rbx + 0x358]
cmovg edi, esi
mov edx, edi
cmp rax, rcx
jne 0x18009f34d
mov edi, dword [rbx + 0x1b8]
test edx, edx
js 0x18009f33b
lea eax, [rdi + 0x10]
mov edi, r14d
add eax, edx
and eax, 0xffffffe0
cmovge edi, eax
jmp 0x18009f35a
sub edi, edx
add edi, 0x10
and edi, 0xffffffe0
neg edi
test edi, edi
cmovg edi, r14d
jmp 0x18009f35a
mov r8d, 3
mov rcx, rbx
call rax
mov edi, eax
sub edi, esi
lea rdx, [rbx + 0x38]
mov r9d, edi
movzx r8d, bp
mov rcx, rbx
call qword [rbx + 0x378]
mov word [rbx + 0x1c0], bp
mov word [rbx + 0x1c2], bp
jmp case.0x18009e575.33
cmp byte [rbx + 0x34d], 0
je 0x18009f394
mov dword [r12], 0x86
mov word [rbx + 0x1c0], bp
mov word [rbx + 0x1c2], bp
jmp case.0x18009e575.33
sub r10d, dword [rbx + 0x1c]
movsxd rcx, dword [rbx + 0x218]
inc r10d
mov rax, qword [rbx + 0x210]
movzx r11d, byte [rcx + rax + 1]
cmp r11d, r10d
mov r10d, 1
jb 0x18009f3da
mov dword [r12], 0x82
jmp 0x18009e5fc
movzx r9d, r10w
cmp r10w, r11w
ja 0x18009f41b
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbx + 0x218]
movzx r8d, r9w
inc r9w
add eax, r8d
movsxd rcx, eax
mov rax, qword [rbx + 0x210]
movzx edx, byte [rcx + rax + 1]
mov dword [rsi + r8*4 - 4], edx
cmp r9w, r11w
jbe 0x18009f3f0
add dword [rbx + 0x34], r11d
jmp 0x18009e5fc
sub r10d, dword [rbx + 0x1c]
movsxd rdx, dword [rbx + 0x218]
inc r10d
mov rax, qword [rbx + 0x210]
movzx r11d, byte [rdx + rax + 1]
cmp r11d, r10d
jb 0x18009f451
mov dword [r12], 0x82
jmp case.0x18009e575.33
lea eax, [rdx + 2]
mov dword [rbx + 0x218], eax
test r11b, r11b
je 0x18009f49b
mov r9, r11
movsxd rcx, dword [rbx + 0x218]
lea rsi, [rsi + 4]
lea eax, [rcx + 2]
mov dword [rbx + 0x218], eax
mov rax, qword [rbx + 0x210]
movzx r8d, byte [rcx + rax + 1]
movzx edx, byte [rcx + rax]
movsx eax, bp
imul eax, edx
add ax, r8w
cwde
mov dword [rsi - 4], eax
sub r9, 1
jne 0x18009f462
add dword [rbx + 0x34], r11d
mov byte [rbx + 0x228], 0
jmp case.0x18009e575.33
mov r14d, dword [rsi]
movzx ebp, word [rbx + 0x2d0]
cmp r14d, ebp
jae 0x18009e7ae
cmp dword [rbx + 0x204], 3
jne 0x18009f57d
mov rax, qword [rbx + 0x2f0]
cmp qword [rbx + 0x2d8], rax
jne 0x18009f57d
movzx edi, word [rbx + 0x2e0]
cmp edi, ebp
jae 0x18009f545
mov rcx, qword [rbx + 0x10]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x28], rax
lea r9d, [rbp*4]
mov rax, qword [rbx + 0x2e8]
lea r8d, [rdi*4]
mov edx, 1
mov qword [rsp + 0x20], rax
call fcn.18008d4d0
mov qword [rbx + 0x2e8], rax
mov eax, dword [rsp + 0x98]
test eax, eax
je 0x18009f543
mov dword [r12], eax
mov word [rbx + 0x2e0], di
jmp case.0x18009e575.33
mov edi, ebp
mov rdx, qword [rbx + 0x2d8]
xor ebp, ebp
mov rcx, qword [rbx + 0x2e8]
movzx r8d, di
shl r8, 2
mov dword [r12], ebp
mov word [rbx + 0x2e0], di
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbx + 0x2e8]
mov qword [rbx + 0x2d8], rax
jmp 0x18009f57f
xor ebp, ebp
mov eax, dword [rsi + 4]
mov esi, 2
mov rcx, qword [rbx + 0x2d8]
lea r10d, [rsi - 1]
mov dword [rcx + r14*4], eax
jmp 0x18009e603
mov ecx, dword [rsi]
movzx eax, word [rbx + 0x2d0]
cmp ecx, eax
jb 0x18009f5d6
xor ebp, ebp
lea r10d, [rbp + 1]
cmp byte [rbx + 0x34d], bpl
je 0x18009f5c9
mov dword [r12], 0x86
mov esi, 2
jmp 0x18009e603
mov dword [rsi], r14d
mov esi, 2
jmp 0x18009e603
mov rax, qword [rbx + 0x2d8]
mov ecx, dword [rax + rcx*4]
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov edi, dword [rsi]
cmp edi, dword [rbx + 0x22c]
jae 0x18009e7ae
mov rax, qword [rbx + 0x398]
lea rcx, [0x1800a1a40]
mov esi, dword [rsi + 4]
cmp rax, rcx
mov rcx, rbx
jne 0x18009f631
call fcn.18009bd10
xor ebp, ebp
lea r10d, [rbp + 1]
cmp dword [r12], ebp
jne 0x18009f5bf
mov rax, qword [rbx + 0x230]
mov dword [rax + rdi*4], esi
lea esi, [rbp + 2]
jmp 0x18009e603
mov r8d, esi
mov edx, edi
call rax
jmp case.0x18009e575.33
mov edx, dword [rsi]
cmp edx, dword [rbx + 0x22c]
jae 0x18009f5a8
mov rax, qword [rbx + 0x390]
lea rcx, [0x18009bf10]
cmp rax, rcx
jne 0x18009f66f
mov rax, qword [rbx + 0x230]
mov eax, dword [rax + rdx*4]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rcx, rbx
call rax
mov dword [rsi], eax
jmp case.0x18009e575.33
mov ecx, dword [rsi]
movzx eax, word [rbx + 0xc4]
cmp ecx, eax
jb 0x18009f6a3
cmp byte [rbx + 0x34d], 0
je 0x18009f699
mov dword [r12], 0x86
mov eax, r14d
mov dword [rsi], eax
jmp case.0x18009e575.33
test r8b, 1
je 0x18009f6c8
mov rax, qword [rbx + 0xc8]
mov r8d, dword [rax + rcx*8 + 4]
mov edx, dword [rax + rcx*8]
mov rcx, rbx
call qword [rbx + 0x368]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rax, qword [rbx + 0xd0]
mov r8d, dword [rax + rcx*8 + 4]
mov edx, dword [rax + rcx*8]
mov rcx, rbx
call qword [rbx + 0x360]
mov dword [rsi], eax
jmp case.0x18009e575.33
movzx edi, word [rsi]
cmp di, word [rbx + 0xc4]
jae 0x18009e7ae
mov rax, qword [rbx + 0xd0]
lea r14, [rdi*8]
mov rcx, rbx
mov r8d, dword [r14 + rax + 4]
mov edx, dword [r14 + rax]
call qword [rbx + 0x360]
mov r9d, dword [rsi + 4]
lea rdx, [rbx + 0xb8]
sub r9d, eax
movzx r8d, di
mov rcx, rbx
call qword [rbx + 0x378]
xor ebp, ebp
lea esi, [rbp + 2]
lea r10d, [rbp + 1]
cmp word [rbx + 0x200], bp
jne 0x18009e603
mov rax, qword [rbx + 0xd0]
mov rcx, qword [rbx + 0xc8]
mov rax, qword [r14 + rax]
mov qword [r14 + rcx], rax
jmp 0x18009e603
movzx edx, word [rsi]
movzx r9d, word [rsi + 4]
cmp dx, word [rbx + 0x44]
jae 0x18009f883
cmp r9w, word [rbx + 0x84]
jae 0x18009f883
test r8b, 1
je 0x18009f7b8
mov rax, qword [rbx + 0x90]
mov rcx, rbx
lea r9, [rax + r9*8]
mov rax, qword [rbx + 0x50]
mov r8d, dword [rax + rdx*8 + 4]
mov edx, dword [rax + rdx*8]
sub edx, dword [r9]
sub r8d, dword [r9 + 4]
call qword [rbx + 0x360]
mov dword [rsi], eax
jmp case.0x18009e575.33
cmp word [rbx + 0x1fc], 0
je 0x18009f854
cmp word [rbx + 0x1fe], 0
je 0x18009f854
mov rax, qword [rbx + 0x58]
lea r14, [rax + rdx*8]
mov rax, qword [rbx + 0x98]
mov edx, dword [rbx + 0x180]
lea rbp, [rax + r9*8]
cmp edx, dword [rbx + 0x184]
jne 0x18009f820
mov r8d, dword [r14 + 4]
mov rcx, rbx
mov edx, dword [r14]
sub r8d, dword [rbp + 4]
sub edx, dword [rbp]
call qword [rbx + 0x368]
mov edx, dword [rbx + 0x180]
mov ecx, eax
call fcn.1800880b0
mov dword [rsi], eax
jmp case.0x18009e575.33
mov ecx, dword [r14]
sub ecx, dword [rbp]
call fcn.1800880b0
mov ecx, dword [r14 + 4]
mov edi, eax
sub ecx, dword [rbp + 4]
mov edx, dword [rbx + 0x184]
call fcn.1800880b0
mov r8d, eax
mov edx, edi
mov rcx, rbx
call qword [rbx + 0x368]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rax, qword [rbx + 0x48]
mov rcx, rbx
mov r8d, dword [rax + rdx*8 + 4]
lea rdx, [rax + rdx*8]
mov rax, qword [rbx + 0x88]
mov edx, dword [rdx]
sub r8d, dword [rax + r9*8 + 4]
sub edx, dword [rax + r9*8]
call qword [rbx + 0x368]
mov dword [rsi], eax
jmp case.0x18009e575.33
cmp byte [rbx + 0x34d], 0
je 0x18009f894
mov dword [r12], 0x86
mov eax, r14d
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rax, qword [rbx + 0x388]
lea rcx, [0x180099d90]
cmp rax, rcx
jne 0x18009f8bf
movzx eax, word [rbx + 0x1a0]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rcx, rbx
call rax
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rax, qword [rbx]
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x23
jne 0x18009f908
mov rax, qword [rbx + 0x388]
lea rcx, [0x180099d90]
cmp rax, rcx
jne 0x18009f8fc
movzx eax, word [rbx + 0x1a0]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rcx, rbx
call rax
mov dword [rsi], eax
jmp case.0x18009e575.33
mov eax, dword [rbx + 0x178]
mov dword [rsi], eax
jmp case.0x18009e575.33
mov byte [rbx + 0x1e0], 1
jmp case.0x18009e575.33
mov byte [rbx + 0x1e0], 0
jmp case.0x18009e575.33
mov dword [r12], 0x87
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
mov ecx, r14d
cmp dword [rsi], eax
setl cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
mov ecx, r14d
cmp dword [rsi], eax
setle cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
mov ecx, r14d
cmp dword [rsi], eax
setg cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
mov ecx, r14d
cmp dword [rsi], eax
setge cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
mov ecx, r14d
cmp dword [rsi], eax
sete cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
mov ecx, r14d
cmp dword [rsi], eax
setne cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov r9, qword [rbx + 0x358]
lea rcx, [0x18009c080]
mov eax, dword [rsi]
cmp r9, rcx
jne 0x18009fa09
mov edx, dword [rbx + 0x1b8]
test eax, eax
js 0x18009f9e6
add edx, 0x10
mov ecx, r14d
add eax, edx
mov edx, r14d
and eax, 0xffffffe0
cmovge edx, eax
and dl, 0x7f
cmp dl, 0x40
sete cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
sub edx, eax
mov ecx, r14d
add edx, 0x10
and edx, 0xffffffe0
neg edx
test edx, edx
cmovg edx, r14d
and dl, 0x7f
cmp dl, 0x40
sete cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov r8d, 3
mov edx, eax
mov rcx, rbx
call r9
mov ecx, r14d
mov edx, eax
and dl, 0x7f
cmp dl, 0x40
sete cl
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov rax, qword [rbx + 0x358]
lea rcx, [0x18009c080]
mov edx, dword [rsi]
cmp rax, rcx
jne 0x18009fa89
mov ecx, dword [rbx + 0x1b8]
test edx, edx
js 0x18009fa69
lea eax, [rcx + 0x10]
mov ecx, r14d
add eax, edx
and eax, 0xffffffe0
cmovge ecx, eax
mov eax, r14d
test cl, 0x7f
sete al
mov dword [rsi], eax
jmp case.0x18009e575.33
sub ecx, edx
mov eax, r14d
add ecx, 0x10
and ecx, 0xffffffe0
neg ecx
test ecx, ecx
cmovg ecx, r14d
test cl, 0x7f
sete al
mov dword [rsi], eax
jmp case.0x18009e575.33
mov r8d, 3
mov rcx, rbx
call rax
mov ecx, eax
mov eax, r14d
test cl, 0x7f
sete al
mov dword [rsi], eax
jmp case.0x18009e575.33
cmp dword [rsi], 0
jne case.0x18009e575.33
mov edi, 1
xor sil, sil
mov rcx, rbx
call fcn.18009c180
cmp al, 1
je case.0x18009e575.33
movzx ecx, byte [rbx + 0x220]
sub ecx, 0x1b
je 0x18009fae5
sub ecx, 0x3d
je 0x18009fae1
cmp ecx, 1
jne 0x18009faec
sub edi, ecx
jmp 0x18009fae8
inc edi
jmp 0x18009faec
cmp edi, 1
sete sil
test sil, sil
je 0x18009fab7
jmp case.0x18009e575.33
cmp dword [rsi], 0
je 0x18009fb11
cmp dword [rsi + 4], 0
je 0x18009fb11
mov r10d, 1
mov eax, r10d
mov dword [rsi], eax
jmp 0x18009e5fc
mov eax, r14d
mov r10d, 1
mov dword [rsi], eax
jmp 0x18009e5fc
cmp dword [rsi], 0
jne 0x18009fb3c
cmp dword [rsi + 4], 0
jne 0x18009fb3c
mov eax, r14d
mov r10d, 1
mov dword [rsi], eax
jmp 0x18009e5fc
mov r10d, 1
mov eax, r10d
mov dword [rsi], eax
jmp 0x18009e5fc
cmp dword [rsi], 0
mov eax, r14d
sete al
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rax, qword [rbx + 0x388]
lea rcx, [0x180099d90]
cmp rax, rcx
jne 0x18009fb78
movzx ebp, word [rbx + 0x1a0]
jmp 0x18009fb82
mov rcx, rbx
call rax
mov edx, dword [rbx + 0x30]
mov ebp, eax
mov esi, dword [rsi]
mov r10d, 1
mov edi, r10d
cmp esi, r10d
jb 0x18009fcc0
lea rcx, [rbx + 0x34d]
nop dword [rax]
movsxd rax, dword [rbx + 0x30]
cmp eax, 2
jl 0x18009fcaa
mov rcx, qword [rbx + 0x28]
lea edx, [rax - 2]
mov dword [rbx + 0x30], edx
movzx r8d, word [rcx + rax*4 - 4]
cmp r8w, word [rbx + 0x44]
jae 0x18009fc7e
movsxd rax, edx
movzx edx, byte [rbx + 0x220]
mov r9d, dword [rcx + rax*4]
mov ecx, r9d
shr ecx, 4
and ecx, 0xf
sub edx, 0x71
je 0x18009fbee
cmp edx, 1
jne 0x18009fbf1
add ecx, 0x20
jmp 0x18009fbf1
add ecx, 0x10
movzx eax, word [rbx + 0x1f0]
add eax, ecx
cmp ebp, eax
jne 0x18009fc72
and r9d, 0xf
sub r9d, 8
js 0x18009fc0b
inc r9d
movzx eax, word [rbx + 0x1f2]
mov ecx, 6
sub ecx, eax
mov rax, qword [rbx]
shl r9d, cl
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x28
jne 0x18009fc65
cmp byte [rbx + 0x3ab], 0
je 0x18009fc65
cmp byte [rbx + 0x3ac], 0
je 0x18009fc47
cmp byte [rbx + 0x3ad], 0
jne 0x18009fc72
cmp byte [rbx + 0x34c], 0
je 0x18009fc5a
cmp word [rbx + 0x1d0], 0
jne 0x18009fc65
mov rax, qword [rbx + 0x60]
test byte [r8 + rax], 0x10
je 0x18009fc72
lea rdx, [rbx + 0x38]
mov rcx, rbx
call qword [rbx + 0x378]
mov edx, dword [rbx + 0x30]
lea rcx, [rbx + 0x34d]
jmp 0x18009fc92
lea rcx, [rbx + 0x34d]
cmp byte [rcx], 0
je 0x18009fc92
mov dword [r12], 0x86
inc edi
cmp edi, esi
jbe 0x18009fba0
mov r10d, 1
mov dword [rbx + 0x34], edx
jmp 0x18009e5fc
cmp byte [rcx], 0
je 0x18009fcb3
mov dword [r12], r13d
mov dword [rbx + 0x30], r14d
mov edx, r14d
mov r10d, 1
mov dword [rbx + 0x34], edx
jmp 0x18009e5fc
movzx eax, word [rsi]
mov word [rbx + 0x1f0], ax
jmp case.0x18009e575.33
mov eax, dword [rsi]
xor ebp, ebp
lea esi, [rbp + 2]
lea r10d, [rbp + 1]
cmp eax, 6
jbe 0x18009fcf4
mov dword [r12], 0x84
jmp 0x18009e603
mov word [rbx + 0x1f2], ax
jmp 0x18009e603
mov eax, dword [rsi + 4]
add dword [rsi], eax
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
sub dword [rsi], eax
jmp case.0x18009e575.33
mov r8d, dword [rsi + 4]
test r8d, r8d
jne 0x18009fd2a
mov dword [r12], 0x85
jmp case.0x18009e575.33
mov ecx, dword [rsi]
mov edx, 0x40
call fcn.180088020
mov dword [rsi], eax
jmp case.0x18009e575.33
mov edx, dword [rsi + 4]
mov r8d, 0x40
mov ecx, dword [rsi]
call fcn.180087f80
mov dword [rsi], eax
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov r10d, 1
test eax, eax
jns 0x18009e5fc
neg eax
mov dword [rsi], eax
jmp 0x18009e5fc
mov eax, dword [rsi]
neg eax
mov dword [rsi], eax
jmp case.0x18009e575.33
and dword [rsi], 0xffffffc0
jmp case.0x18009e575.33
mov eax, dword [rsi]
add eax, 0x3f
and eax, 0xffffffc0
mov dword [rsi], eax
jmp case.0x18009e575.33
mov rax, qword [rbx + 0x358]
lea rcx, [0x18009c080]
mov edx, dword [rsi]
and r11d, 3
cmp rax, rcx
jne 0x18009fde0
mov ecx, dword [rbx + r11*4 + 0x1ac]
test edx, edx
js 0x18009fdc9
lea eax, [rcx + 0x10]
mov ecx, r14d
add eax, edx
and eax, 0xffffffe0
cmovge ecx, eax
mov dword [rsi], ecx
jmp case.0x18009e575.33
sub ecx, edx
add ecx, 0x10
and ecx, 0xffffffe0
neg ecx
test ecx, ecx
cmovg ecx, r14d
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov r8d, r11d
mov rcx, rbx
call rax
mov ecx, eax
mov dword [rsi], eax
jmp case.0x18009e575.33
mov ecx, dword [rsi]
movzx eax, r8b
and eax, 3
mov edx, dword [rbx + rax*4 + 0x1ac]
test ecx, ecx
js 0x18009fe17
lea eax, [rdx + rcx]
mov ecx, r14d
test eax, eax
cmovns ecx, eax
mov dword [rsi], ecx
jmp case.0x18009e575.33
sub ecx, edx
test ecx, ecx
cmovg ecx, r14d
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov edi, dword [rsi]
cmp edi, dword [rbx + 0x22c]
jae 0x18009e7ae
mov edx, dword [rbx + 0x1a8]
mov ecx, dword [rsi + 4]
call fcn.1800880b0
mov rcx, qword [rbx + 0x230]
mov dword [rcx + rdi*4], eax
jmp case.0x18009e575.33
mov rax, qword [rbx + 0x388]
lea rcx, [0x180099d90]
cmp rax, rcx
jne 0x18009fe6d
movzx ebp, word [rbx + 0x1a0]
jmp 0x18009fe77
mov rcx, rbx
call rax
mov edx, dword [rbx + 0x30]
mov ebp, eax
mov esi, dword [rsi]
mov r10d, 1
mov edi, r10d
cmp esi, r10d
jb 0x18009fcc0
lea rcx, [rbx + 0x34d]
movsxd rax, dword [rbx + 0x30]
cmp eax, 2
jl 0x18009fcaa
mov rcx, qword [rbx + 0x28]
lea edx, [rax - 2]
mov dword [rbx + 0x30], edx
movzx r8d, word [rcx + rax*4 - 4]
cmp r8w, word [rbx + 0x44]
jae 0x18009ff70
movsxd rax, edx
movzx edx, byte [rbx + 0x220]
mov r9d, dword [rcx + rax*4]
mov ecx, r9d
shr ecx, 4
and ecx, 0xf
sub edx, 0x71
je 0x18009fee0
cmp edx, 1
jne 0x18009fee3
add ecx, 0x20
jmp 0x18009fee3
add ecx, 0x10
movzx eax, word [rbx + 0x1f0]
add eax, ecx
cmp ebp, eax
jne 0x18009ff64
and r9d, 0xf
sub r9d, 8
js 0x18009fefd
inc r9d
movzx eax, word [rbx + 0x1f2]
mov ecx, 6
sub ecx, eax
mov rax, qword [rbx]
shl r9d, cl
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x28
jne 0x18009ff57
cmp byte [rbx + 0x3ab], 0
je 0x18009ff57
cmp byte [rbx + 0x3ac], 0
je 0x18009ff39
cmp byte [rbx + 0x3ad], 0
jne 0x18009ff64
cmp byte [rbx + 0x34c], 0
je 0x18009ff4c
cmp word [rbx + 0x1d0], 0
jne 0x18009ff57
mov rax, qword [rbx + 0x60]
test byte [r8 + rax], 0x10
je 0x18009ff64
lea rdx, [rbx + 0x38]
mov rcx, rbx
call qword [rbx + 0x378]
mov edx, dword [rbx + 0x30]
lea rcx, [rbx + 0x34d]
jmp 0x18009ff84
lea rcx, [rbx + 0x34d]
cmp byte [rcx], 0
je 0x18009ff84
mov dword [r12], 0x86
inc edi
cmp edi, esi
jbe 0x18009fe92
mov r10d, 1
mov dword [rbx + 0x34], edx
jmp 0x18009e5fc
mov rax, qword [rbx + 0x388]
lea rcx, [0x180099d90]
cmp rax, rcx
jne 0x18009ffb9
movzx r15d, word [rbx + 0x1a0]
jmp 0x18009ffc1
mov rcx, rbx
call rax
mov r15d, eax
mov r14d, dword [rsi]
mov r10d, 1
mov ebp, r10d
cmp r14d, r10d
jb 0x1800a00b5
nop word [rax + rax]
movsxd rcx, dword [rbx + 0x30]
cmp ecx, 2
jl 0x1800a00ca
mov rdx, qword [rbx + 0x28]
lea eax, [rcx - 2]
mov dword [rbx + 0x30], eax
mov esi, dword [rdx + rcx*4 - 4]
cmp esi, dword [rbx + 0x22c]
jb 0x1800a0022
cmp byte [rbx + 0x34d], 0
je 0x1800a00a4
mov r15, qword [rsp + 0x30]
mov dword [r12], 0x86
jmp case.0x18009e575.33
mov edi, dword [rdx + rcx*4 - 8]
mov ecx, edi
movzx edx, byte [rbx + 0x220]
shr ecx, 4
and ecx, 0xf
sub edx, 0x74
je 0x1800a0044
cmp edx, 1
jne 0x1800a0047
add ecx, 0x20
jmp 0x1800a0047
add ecx, 0x10
movzx eax, word [rbx + 0x1f0]
add eax, ecx
cmp r15d, eax
jne 0x1800a00a4
and edi, 0xf
sub edi, 8
js 0x1800a005f
inc edi
movzx eax, word [rbx + 0x1f2]
mov ecx, 6
sub ecx, eax
mov rax, qword [rbx + 0x3a0]
shl edi, cl
lea rcx, [0x18009bdb0]
cmp rax, rcx
mov rcx, rbx
jne 0x1800a009d
call fcn.18009bd10
cmp dword [r12], 0
jne 0x1800a00a4
mov rax, qword [rbx + 0x230]
add dword [rax + rsi*4], edi
jmp 0x1800a00a4
mov r8d, edi
mov edx, esi
call rax
inc ebp
cmp ebp, r14d
jbe 0x18009ffe0
mov r10d, 1
xor ebp, ebp
mov eax, dword [rbx + 0x30]
lea esi, [rbp + 2]
mov r15, qword [rsp + 0x30]
mov dword [rbx + 0x34], eax
jmp 0x18009e603
cmp byte [rbx + 0x34d], 0
je 0x1800a00d7
mov dword [r12], r13d
mov r15, qword [rsp + 0x30]
xor ebp, ebp
mov eax, ebp
mov dword [rbx + 0x30], ebp
mov dword [rbx + 0x34], eax
lea r10d, [rbp + 1]
lea esi, [rbp + 2]
jmp 0x18009e603
mov r8d, dword [rsi]
mov ecx, r8d
and ecx, 0xc0
je 0x1800a0128
sub ecx, 0x40
je 0x1800a010f
sub ecx, 0x40
je 0x1800a011c
cmp ecx, 0x40
jne 0x1800a0132
mov eax, 0x4000
mov dword [rbx + 0x2f8], eax
jmp 0x1800a0132
mov dword [rbx + 0x2f8], 0x8000
jmp 0x1800a0132
mov dword [rbx + 0x2f8], 0x2000
mov eax, r8d
and eax, 0x30
je 0x1800a018d
cmp eax, 0x10
je 0x1800a0176
cmp eax, 0x20
je 0x1800a0163
cmp eax, 0x30
jne 0x1800a0194
mov eax, dword [rbx + 0x2f8]
lea eax, [rax + rax*2]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbx + 0x2fc], eax
jmp 0x1800a0194
mov eax, dword [rbx + 0x2f8]
cdq
sub eax, edx
sar eax, 1
mov dword [rbx + 0x2fc], eax
jmp 0x1800a0194
mov eax, dword [rbx + 0x2f8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbx + 0x2fc], eax
jmp 0x1800a0194
mov dword [rbx + 0x2fc], r14d
mov ecx, dword [rbx + 0x2f8]
and r8d, 0xf
jne 0x1800a01a5
lea eax, [rcx - 1]
jmp 0x1800a01b5
lea eax, [r8 - 4]
imul eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
sar ecx, 8
mov dword [rbx + 0x2f8], ecx
sar dword [rbx + 0x2fc], 8
sar eax, 8
mov dword [rbx + 0x300], eax
lea rax, [0x18009bfb0]
mov qword [rbx + 0x358], rax
mov dword [rbx + 0x1dc], 6
jmp case.0x18009e575.33
mov r8d, dword [rsi]
mov ecx, r8d
and ecx, 0xc0
je 0x1800a0220
sub ecx, 0x40
je 0x1800a0208
sub ecx, 0x40
je 0x1800a0214
cmp ecx, 0x40
jne 0x1800a022a
mov dword [rbx + 0x2f8], 0x2d41
jmp 0x1800a022a
mov dword [rbx + 0x2f8], 0x5a82
jmp 0x1800a022a
mov dword [rbx + 0x2f8], 0x16a0
mov eax, r8d
and eax, 0x30
je 0x1800a0285
cmp eax, 0x10
je 0x1800a026e
cmp eax, 0x20
je 0x1800a025b
cmp eax, 0x30
jne 0x1800a028c
mov eax, dword [rbx + 0x2f8]
lea eax, [rax + rax*2]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbx + 0x2fc], eax
jmp 0x1800a028c
mov eax, dword [rbx + 0x2f8]
cdq
sub eax, edx
sar eax, 1
mov dword [rbx + 0x2fc], eax
jmp 0x1800a028c
mov eax, dword [rbx + 0x2f8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbx + 0x2fc], eax
jmp 0x1800a028c
mov dword [rbx + 0x2fc], r14d
mov ecx, dword [rbx + 0x2f8]
and r8d, 0xf
jne 0x1800a029d
lea eax, [rcx - 1]
jmp 0x1800a02ad
lea eax, [r8 - 4]
imul eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
sar ecx, 8
mov dword [rbx + 0x2f8], ecx
sar dword [rbx + 0x2fc], 8
sar eax, 8
mov dword [rbx + 0x300], eax
lea rax, [0x18009c010]
mov qword [rbx + 0x358], rax
mov dword [rbx + 0x1dc], 7
jmp case.0x18009e575.33
cmp dword [rsi + 4], 0
je case.0x18009e575.33
jmp case.0x18009e575.28
cmp dword [rsi + 4], 0
jne case.0x18009e575.33
jmp case.0x18009e575.28
lea rax, [0x18009bf80]
mov dword [rbx + 0x1dc], 5
mov qword [rbx + 0x358], rax
jmp case.0x18009e575.33
lea rax, [0x18009c140]
mov dword [rbx + 0x1dc], 4
mov qword [rbx + 0x358], rax
jmp case.0x18009e575.33
lea rax, [0x18009bf50]
mov dword [rbx + 0x1dc], 3
mov qword [rbx + 0x358], rax
jmp case.0x18009e575.33
mov rax, qword [rbx]
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x28
jne 0x1800a0389
cmp byte [rbx + 0x3ab], 0
je 0x1800a0389
cmp byte [rbx + 0x3ac], 0
je 0x1800a0389
cmp byte [rbx + 0x3ad], 0
mov ecx, edx
jne 0x18009f21c
mov eax, dword [rbx + 0x1d4]
mov ecx, edx
cmp dword [rbx + 0x1c], eax
jge 0x1800a03ac
cmp byte [rbx + 0x34d], 0
je 0x18009f21c
mov dword [r12], r13d
jmp 0x18009f21c
test eax, eax
jle 0x18009f21c
nop dword [rax]
nop dword [rax + rax]
lea ecx, [rdx - 1]
movsxd rax, edx
mov dword [rbx + 0x30], ecx
movzx edx, word [r9 + rax*4 - 4]
cmp dx, word [rbx + 0x104]
jb 0x1800a03e7
cmp byte [rbx + 0x34d], 0
jne 0x18009ee01
jmp 0x1800a03f9
mov rax, qword [rbx + 0x120]
xor byte [rax + rdx], 1
mov ecx, dword [rbx + 0x30]
mov r9, qword [rbx + 0x28]
dec dword [rbx + 0x1d4]
mov edx, ecx
cmp dword [rbx + 0x1d4], 0
jg 0x1800a03c0
jmp 0x18009f21c
mov rax, qword [rbx]
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x28
jne 0x1800a043e
cmp byte [rbx + 0x3ab], 0
je 0x1800a043e
cmp byte [rbx + 0x3ac], 0
je 0x1800a043e
cmp byte [rbx + 0x3ad], 0
jne case.0x18009e575.33
movzx r8d, word [rsi + 4]
movzx eax, word [rbx + 0x104]
cmp r8w, ax
jae 0x18009e7ae
movzx edx, word [rsi]
cmp dx, ax
jae 0x18009e7ae
cmp dx, r8w
ja case.0x18009e575.33
nop word [rax + rax]
mov rax, qword [rbx + 0x120]
movzx ecx, dx
inc dx
or byte [rcx + rax], 1
cmp dx, r8w
jbe 0x1800a0470
jmp case.0x18009e575.33
mov rax, qword [rbx]
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x28
jne 0x1800a04bb
cmp byte [rbx + 0x3ab], 0
je 0x1800a04bb
cmp byte [rbx + 0x3ac], 0
je 0x1800a04bb
cmp byte [rbx + 0x3ad], 0
jne case.0x18009e575.33
movzx r8d, word [rsi + 4]
movzx eax, word [rbx + 0x104]
cmp r8w, ax
jae 0x18009e7ae
movzx edx, word [rsi]
cmp dx, ax
jae 0x18009e7ae
cmp dx, r8w
ja case.0x18009e575.33
nop word [rax + rax]
mov rax, qword [rbx + 0x120]
movzx ecx, dx
inc dx
and byte [rcx + rax], 0xfe
cmp dx, r8w
jbe 0x1800a04f0
jmp case.0x18009e575.33
mov eax, dword [rsi]
mov edx, 0xff
movzx ecx, al
cmp ecx, edx
jne 0x1800a0526
mov byte [rbx + 0x1f5], 1
jmp case.0x18009e575.33
test al, al
je 0x1800a05bf
test ebp, eax
je 0x1800a0544
movzx eax, word [rbx + 0x1a0]
cmp eax, ecx
ja 0x1800a0544
mov byte [rbx + 0x1f5], 1
test dword [rsi], 0x200
je 0x1800a055c
cmp byte [rbx + 0x1bd], 0
je 0x1800a055c
mov byte [rbx + 0x1f5], 1
test dword [rsi], 0x400
je 0x1800a0574
cmp byte [rbx + 0x1be], 0
je 0x1800a0574
mov byte [rbx + 0x1f5], 1
test dword [rsi], 0x800
je 0x1800a058e
movzx eax, word [rbx + 0x1a0]
cmp eax, ecx
jbe 0x1800a058e
mov byte [rbx + 0x1f5], 0
test dword [rsi], 0x1000
je 0x1800a05a6
cmp byte [rbx + 0x1bd], 0
je 0x1800a05a6
mov byte [rbx + 0x1f5], 0
test dword [rsi], 0x2000
je case.0x18009e575.33
cmp byte [rbx + 0x1be], 0
je case.0x18009e575.33
mov byte [rbx + 0x1f5], 0
jmp case.0x18009e575.33
mov rdx, rsi
mov rcx, rbx
call fcn.18009b000
jmp case.0x18009e575.33
mov r9d, dword [rsi]
mov ecx, r14d
mov rdx, qword [rbx]
test r9b, 1
je 0x1800a05f4
mov rax, qword [rdx + 0x90]
mov ecx, dword [rax + 0x78]
mov rax, rdx
test r9b, 2
je 0x1800a0608
cmp byte [rbx + 0x1bd], 0
je 0x1800a0608
or ecx, ebp
test r9b, 4
je 0x1800a061b
cmp byte [rbx + 0x1be], 0
je 0x1800a061b
bts ecx, 9
test r9b, 8
je 0x1800a0632
cmp qword [rax + 0x410], 0
mov rdx, rax
je 0x1800a0632
bts ecx, 0xa
test r9b, 0x20
je 0x1800a0645
cmp byte [rbx + 0x3a8], 0
je 0x1800a0645
bts ecx, 0xc
mov rax, qword [rdx + 0x90]
cmp dword [rax + 0x78], 0x28
jne 0x1800a06b2
cmp byte [rbx + 0x3a9], 0
je 0x1800a06b2
mov edx, ecx
bts edx, 0xd
test r9b, 0x40
cmove edx, ecx
mov r8d, edx
test ebp, r9d
je 0x1800a067e
cmp byte [rbx + 0x3aa], 0
je 0x1800a067e
bts r8d, 0xf
mov ecx, r8d
bts ecx, 0x11
bt r9d, 0xa
cmovae ecx, r8d
mov edx, ecx
bts edx, 0x12
bt r9d, 0xb
cmovae edx, ecx
mov ecx, edx
bt r9d, 0xc
jae 0x1800a06b2
cmp byte [rbx + 0x3ae], 0
je 0x1800a06b2
bts ecx, 0x13
mov dword [rsi], ecx
jmp case.0x18009e575.33
cmp dword [rbx + 0x204], 3
jne 0x1800a06cf
mov dword [r12], 0x9c
jmp case.0x18009e575.33
mov rdi, qword [rbx + 0x278]
test rdi, rdi
je 0x1800a0703
mov eax, dword [rbx + 0x270]
lea rcx, [rax + rax*2]
lea rax, [rdi + rcx*8]
cmp rdi, rax
jae 0x1800a0701
mov ecx, dword [rsi]
cmp dword [rdi + 0xc], ecx
je 0x1800a06fe
add rdi, 0x18
cmp rdi, rax
jb 0x1800a06f0
cmp rdi, rax
jne 0x1800a071d
mov eax, dword [rbx + 0x270]
cmp eax, dword [rbx + 0x274]
jae 0x1800a07b2
inc eax
mov dword [rbx + 0x270], eax
mov eax, dword [rsi]
mov ecx, 0xff
cmp eax, ecx
ja 0x1800a07b2
movzx eax, al
mov dword [rdi + 0xc], eax
mov eax, dword [rbx + 0x218]
inc eax
mov dword [rdi + 4], eax
mov eax, dword [rbx + 0x208]
mov dword [rdi], eax
mov byte [rdi + 0x10], 1
mov eax, dword [rsi]
cmp eax, dword [rbx + 0x284]
jbe 0x1800a075c
movzx eax, al
mov dword [rbx + 0x284], eax
mov rcx, rbx
call fcn.18009c180
test al, al
jne case.0x18009e575.33
nop dword [rax]
movzx ecx, byte [rbx + 0x220]
sub ecx, 0x2c
je 0x1800a07a5
sub ecx, 1
je 0x1800a0797
cmp ecx, 0x5c
je 0x1800a07a5
mov rcx, rbx
call fcn.18009c180
test al, al
je 0x1800a0770
jmp case.0x18009e575.33
mov eax, dword [rbx + 0x218]
mov dword [rdi + 8], eax
jmp case.0x18009e575.33
mov dword [r12], 0x89
jmp case.0x18009e575.33
mov dword [r12], 0x8d
jmp case.0x18009e575.33
mov edx, dword [rsi + 8]
mov ecx, dword [rsi + 4]
mov eax, dword [rsi]
mov dword [rsi + 8], eax
mov dword [rsi + 4], edx
mov dword [rsi], ecx
jmp case.0x18009e575.33
mov eax, dword [rsi + 4]
xor ebp, ebp
lea r10d, [rbp + 1]
cmp eax, dword [rsi]
jle 0x18009f5bf
mov dword [rsi], eax
lea esi, [rbp + 2]
jmp 0x18009e603
mov eax, dword [rsi + 4]
xor ebp, ebp
lea r10d, [rbp + 1]
cmp eax, dword [rsi]
jge 0x18009f5bf
mov dword [rsi], eax
lea esi, [rbp + 2]
jmp 0x18009e603
mov eax, dword [rsi]
xor ebp, ebp
lea esi, [rbp + 2]
lea r10d, [rbp + 1]
test eax, eax
js 0x18009e603
movzx eax, ax
mov dword [rbx + 0x1f8], eax
jmp 0x18009e603
mov r8d, dword [rsi + 4]
mov r10d, 1
mov edx, dword [rsi]
lea ecx, [r8 - 1]
cmp ecx, 2
ja 0x1800a08b3
mov eax, r10d
shl eax, cl
test edx, edx
je 0x1800a0851
cmp edx, eax
jne 0x18009e7b4
mov ecx, dword [rbx + 0x204]
cmp ecx, 2
jne 0x1800a0871
not al
and al, byte [rbx + 0x1f4]
or al, dl
mov byte [rbx + 0x1f4], al
jmp 0x18009e5fc
cmp ecx, 3
jne 0x1800a08a5
cmp r8d, ecx
jne 0x1800a08a5
mov rax, qword [rbx]
mov esi, 2
mov rcx, qword [rax + 0x90]
cmp dword [rcx + 0x78], 0x28
jne 0x18009e601
cmp edx, 4
setne al
mov byte [rbx + 0x3ab], al
jmp 0x18009e601
cmp byte [rbx + 0x34d], 0
jne 0x1800a08c0
jmp 0x18009e5fc
cmp byte [rbx + 0x34d], 0
je 0x18009e5fc
mov dword [r12], 0x86
jmp 0x18009e5fc
mov rax, qword [rbx]
mov r8, qword [rax + 0x410]
test r8, r8
je case.0x18009e575.40
sub r10d, dword [rbx + 0x1c]
mov r11d, dword [r8]
inc r10d
mov r8, qword [r8 + 0x10]
cmp r11d, r10d
jb 0x1800a0900
mov dword [r12], 0x82
jmp case.0x18009e575.33
test r8, r8
je 0x1800a09d9
mov edx, r14d
test r11d, r11d
je case.0x18009e575.33
cmp r11d, 0x10
jb 0x1800a09ac
lea eax, [r11 - 1]
lea r9, [rsi + rax*4]
lea rax, [r8 + rax*4]
cmp rsi, rax
ja 0x1800a0935
cmp r9, r8
jae 0x1800a09ac
mov r10d, r11d
and r10d, 0xfffffff0
mov eax, 2
mov r9d, 8
movd xmm1, eax
nop dword [rax + rax]
movdqu xmm0, xmmword [r8 + rdx*4]
lea eax, [r9 - 4]
psrad xmm0, xmm1
movdqu xmmword [rsi + rdx*4], xmm0
add edx, 0x10
movdqu xmm0, xmmword [r8 + rax*4]
psrad xmm0, xmm1
movdqu xmmword [rsi + rax*4], xmm0
mov eax, r9d
movdqu xmm0, xmmword [r8 + rax*4]
psrad xmm0, xmm1
movdqu xmmword [rsi + rax*4], xmm0
lea eax, [r9 + 4]
add r9d, 0x10
movdqu xmm0, xmmword [r8 + rax*4]
psrad xmm0, xmm1
movdqu xmmword [rsi + rax*4], xmm0
cmp edx, r10d
jb 0x1800a0950
cmp edx, r11d
jae case.0x18009e575.33
mov eax, edx
sub r8, rsi
sub r11d, edx
mov edx, r11d
lea rcx, [rsi + rax*4]
nop dword [rax + rax]
mov eax, dword [r8 + rcx]
lea rcx, [rcx + 4]
sar eax, 2
mov dword [rcx - 4], eax
sub rdx, 1
jne 0x1800a09c0
jmp case.0x18009e575.33
test r11d, r11d
je case.0x18009e575.33
mov r8, r11
xor edx, edx
shl r8, 2
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
jmp case.0x18009e575.33
mov rcx, rbx
call fcn.18009bbe0
jmp case.0x18009e575.33
mov rax, qword [rbx]
cmp qword [rax + 0x410], 0
je case.0x18009e575.40
mov dword [rsi], 0x11
jmp case.0x18009e575.33
cmp r8b, 0xe0
jb 0x1800a0a33
mov rdx, rsi
mov rcx, rbx
call fcn.18009ad90
jmp case.0x18009e575.33
cmp r8b, 0xc0
jb 0x1800a0a49
mov rdx, rsi
mov rcx, rbx
call fcn.18009ab70
jmp case.0x18009e575.33
cmp r8b, 0xb8
jb 0x1800a0ad5
sub r10d, dword [rbx + 0x1c]
mov eax, 0xb7
movzx ecx, r8b
inc r10d
sub cx, ax
movzx eax, cx
cmp eax, r10d
jb 0x1800a0a7b
mov dword [r12], 0x82
jmp case.0x18009e575.33
inc dword [rbx + 0x218]
cmp r14w, cx
jae 0x1800a0ac9
movzx r9d, cx
nop dword [rax + rax]
movsxd rcx, dword [rbx + 0x218]
lea rsi, [rsi + 4]
lea eax, [rcx + 2]
mov dword [rbx + 0x218], eax
mov rax, qword [rbx + 0x210]
movzx r8d, byte [rcx + rax + 1]
movzx edx, byte [rcx + rax]
movsx eax, bp
imul eax, edx
add ax, r8w
cwde
mov dword [rsi - 4], eax
sub r9, 1
jne 0x1800a0a90
mov byte [rbx + 0x228], 0
jmp case.0x18009e575.33
cmp r8b, 0xb0
jb case.0x18009e575.40
sub r10d, dword [rbx + 0x1c]
mov eax, 0xaf
inc r10d
movzx r11d, r8b
sub r11w, ax
movzx eax, r11w
cmp eax, r10d
mov r10d, 1
jb 0x1800a0b0f
mov dword [r12], 0x82
jmp 0x18009e5fc
movzx r9d, r10w
cmp r10w, r11w
ja 0x18009e5fc
nop dword [rax]
mov eax, dword [rbx + 0x218]
movzx r8d, r9w
inc r9w
add eax, r8d
movsxd rcx, eax
mov rax, qword [rbx + 0x210]
movzx edx, byte [rcx + rax]
mov dword [rsi + r8*4 - 4], edx
cmp r9w, r11w
jbe 0x1800a0b20
jmp 0x18009e5fc
mov rdx, rbp
cmp r8, rdx
jae 0x1800a0c92
cmp byte [r8 + 0x10], 0
je 0x1800a0b6f
movzx eax, byte [r8 + 0xc]
cmp byte [rbx + 0x220], al
je 0x1800a0b75
add r8, 0x18
jmp 0x1800a0b52
movsxd rax, dword [rbx + 0x288]
cmp eax, dword [rbx + 0x28c]
jge 0x1800a0c82
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x290]
lea rdx, [rax + rcx*8]
mov eax, dword [rbx + 0x208]
mov dword [rdx], eax
mov eax, dword [rbx + 0x218]
inc eax
mov dword [rdx + 8], r10d
mov dword [rdx + 4], eax
mov qword [rdx + 0x10], r8
movsxd rcx, dword [r8]
mov r9d, dword [r8 + 4]
lea eax, [rcx - 1]
cmp eax, 2
ja 0x1800a0c72
lea rax, [rcx + 0x29]
add rax, rax
mov rdx, qword [rbx + rax*8]
test rdx, rdx
je 0x1800a0c67
cmp r9d, dword [rbx + rax*8 + 8]
jg 0x1800a0cf0
mov qword [rbx + 0x210], rdx
mov eax, dword [rbx + rax*8 + 8]
mov dword [r15], eax
mov dword [rbx + 0x218], r9d
mov dword [rbx + 0x208], ecx
jmp 0x1800a0c38
cmp byte [rbx + 0x228], 0
mov eax, dword [rbx + 0x34]
mov dword [rbx + 0x1c], eax
je 0x1800a0c1c
mov eax, dword [rbx + 0x224]
add dword [rbx + 0x218], eax
mov edi, dword [rsp + 0x90]
inc edi
mov dword [rsp + 0x90], edi
cmp edi, 0xf4240
ja 0x1800a0cd0
mov eax, dword [r15]
cmp dword [rbx + 0x218], eax
jge 0x1800a0ca7
cmp byte [rbx + 0x304], 0
jne 0x1800a0cb0
lea r11, [rbx + 0x18]
xor r14d, r14d
lea rdi, [0x180000000]
jmp 0x18009e43b
mov dword [r11], r13d
jmp 0x1800a0cfa
mov r13d, 0x8a
jmp 0x1800a0cf6
mov dword [r12], 0x84
mov r13d, 0x84
jmp 0x1800a0cfa
mov dword [r12], 0x86
mov r13d, 0x86
jmp 0x1800a0cfa
mov dword [r12], 0x80
mov r13d, 0x80
jmp 0x1800a0cfa
mov r13d, eax
jmp 0x1800a0cfa
cmp dword [rbx + 0x288], 0
jg 0x1800a0cf0
mov rax, qword [rbx + 0x248]
mov qword [rbx + 0x230], rax
mov rax, qword [rbx + 0x2f0]
mov qword [rbx + 0x2d8], rax
xor eax, eax
jmp 0x1800a0d19
mov dword [r12], 0x8b
mov r13d, 0x8b
jmp 0x1800a0cfa
mov dword [r12], 0x82
mov r13d, 0x82
jmp 0x1800a0cfa
mov r13d, 0x83
mov dword [r12], r13d
mov rcx, qword [rbx + 0x248]
mov eax, r13d
mov qword [rbx + 0x230], rcx
mov rcx, qword [rbx + 0x2f0]
mov qword [rbx + 0x2d8], rcx
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret