Function at 0x18012d8a0
Capabilities:
Write file on windows

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x20238
call fcn.1801339d0
sub rsp, rax
mov rax, qword [0x180161180]
xor rax, rsp
mov qword [rsp + 0x20220], rax
mov dword [rsp + 0x201d0], 0x80004021
mov dword [rsp + 0x814c], 0x78
mov qword [rsp + 0x8180], 0
mov qword [rsp + 0x8160], 0
mov qword [rsp + 0x201c8], 0
mov qword [rsp + 0x8178], 0
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0x201e0], 0
mov qword [rsp + 0x201c0], 0
mov qword [rsp + 0x181a0], 0
mov qword [rsp + 0x8140], 0
mov qword [rsp + 0x201d8], 0
mov dword [rsp + 0x8148], 0
mov dword [rsp + 0x18194], 0
mov dword [rsp + 0x181b0], 0
mov dword [rsp + 0x8158], 0
mov dword [rsp + 0x8154], 0
mov dword [rsp + 0x8150], 0
mov dword [rsp + 0x8168], 0
mov dword [rsp + 0x6c], 0
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x18190], 0
mov dword [rsp + 0x181ac], 0
mov dword [rsp + 0x64], 0
mov dword [rsp + 0x181a8], 0
mov dword [rsp + 0x18198], 0
mov qword [rsp + 0x8170], 0
mov dword [rsp + 0x60], 0
mov qword [rsp + 0x201f0], 0
mov qword [rsp + 0x8188], 0
mov dword [rsp + 0x201e8], 0x90000
lea r8, [0x18005f6c8]
lea rdx, [0x180064690]
mov ecx, 1
call fcn.1801276b0
mov rdx, qword [rsp + 0x20250]
add rdx, 8
lea rcx, [rsp + 0x201f8]
call fcn.180131df0
lea rcx, [rsp + 0x201f8]
call fcn.180131e30
nop
mov rax, qword [rsp + 0x20258]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x20258]
lea r8, [0x180062178]
lea rdx, [0x180064690]
mov ecx, 2
call fcn.1801276b0
mov edx, dword [rsp + 0x20260]
mov dword [rsp + 0x20], edx
mov r9d, dword [rsp + 0x20260]
lea r8, [0x180060520]
lea rdx, [0x180064690]
mov ecx, 2
call fcn.1801276b0
mov rcx, qword [rsp + 0x20250]
call fcn.18012d780
mov rax, qword [rsp + 0x20250]
add rax, 0x38
mov dword [rsp + 0x28], 0x104
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rsp + 0x20258]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x18012db71
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x814c], eax
mov ecx, dword [rsp + 0x201d0]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov rcx, qword [rsp + 0x20250]
add rcx, 0x38
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 0x104
mov qword [rsp + 0x20], rcx
mov r9, qword [rsp + 0x20258]
lea r8, [0x180064630]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x20250]
add rax, 0x38
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x20258]
lea r8, [0x180064608]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
cmp dword [rsp + 0x20260], 0
jne 0x18012de07
mov rax, qword [rsp + 0x20250]
mov byte [rax + 0x240], 1
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
mov rcx, qword [rsp + 0x20258]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdx, rax
mov rax, qword [rsp + 0x20250]
mov qword [rax + 0x258], rdx
mov rax, qword [rsp + 0x20250]
cmp qword [rax + 0x258], 0xffffffffffffffff
jne 0x18012dc70
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x814c], eax
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x20258]
lea r8, [0x18005ff90]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rdi, [rsp + 0xe8]
xor eax, eax
mov ecx, 0x2c
rep stosb byte [rdi], al
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x8158]
mov r8d, 0x2c
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x258]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x18012dd3f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x814c], eax
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0x8158]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0x2c
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x20250]
mov r9, qword [r9 + 0x258]
lea r8, [0x1800645c0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov eax, dword [rsp + 0x8158]
cmp rax, 0x2c
je 0x18012dde4
mov dword [rsp + 0x814c], 0x3e4
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], 0x2c
mov eax, dword [rsp + 0x8158]
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0x8158]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0x2c
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x20250]
mov r9, qword [r9 + 0x258]
lea r8, [0x18005fcd0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
jmp 0x180130280
mov rax, qword [rsp + 0x20250]
cmp qword [rax + 0x260], 0
jne 0x18012de38
lea rcx, [0x180061ea0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdx, rax
mov rax, qword [rsp + 0x20250]
mov qword [rax + 0x260], rdx
mov rax, qword [rsp + 0x20250]
cmp qword [rax + 0x260], 0
jne 0x18012dea1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x814c], eax
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [0x180061ea0]
lea r8, [0x180061eb0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rdx, [0x1800645a8]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x260]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x201f0], rax
cmp qword [rsp + 0x201f0], 0
jne 0x18012df3b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x814c], eax
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [0x1800645a8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x20250]
mov r9, qword [r9 + 0x260]
lea r8, [0x180061e48]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rdx, qword [rsp + 0x20250]
add rdx, 0x30
xor ecx, ecx
call qword [rsp + 0x201f0]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012dfbc
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov rcx, qword [rsp + 0x20250]
add rcx, 0x30
mov r9, qword [rsp + 0x20250]
add r9, 0x30
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
lea r8, [0x180064540]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rdx, qword [rsp + 0x20250]
add rdx, 0x38
mov rax, qword [rsp + 0x20250]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e041
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov r9, qword [rsp + 0x20250]
add r9, 0x38
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r8, [0x1800644f0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rdx, [0x1800644d0]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x260]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8188], rax
cmp qword [rsp + 0x8188], 0
jne 0x18012e0db
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x814c], eax
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [0x1800644d0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x20250]
mov r9, qword [r9 + 0x260]
lea r8, [0x180061e48]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rcx, [rsp + 0x8178]
call qword [rsp + 0x8188]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e14e
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x8178]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x8178]
lea r8, [0x180064460]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x8178]
mov rax, qword [rax]
lea r8, [rsp + 0xe0]
lea rdx, [0x18005f5e8]
mov rcx, qword [rsp + 0x8178]
call qword [rax]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e1c9
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0xe0]
lea r8, [0x1800643f0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
lea rdx, [rsp + 0x201e8]
mov rcx, qword [rsp + 0xe0]
call qword [rax + 0x48]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e23e
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x201e8]
lea r8, [0x180064390]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov eax, dword [rsp + 0x201e8]
mov dword [rsp + 0x20214], eax
cmp dword [rsp + 0x20214], 0x40000
je 0x18012e282
cmp dword [rsp + 0x20214], 0x70000
je 0x18012e2a1
cmp dword [rsp + 0x20214], 0x80000
je 0x18012e2c0
cmp dword [rsp + 0x20214], 0x90000
je 0x18012e2df
jmp 0x18012e2fe
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064358]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e31b
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064320]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e31b
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x1800642e8]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e31b
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x1800642b0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e31b
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064278]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov dword [rsp + 0x201e8], 0x90000
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064230]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
mov edx, dword [rsp + 0x201e8]
mov rcx, qword [rsp + 0xe0]
call qword [rax + 0x50]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e3b7
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x1800641d0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
lea rdx, [rsp + 0x201e8]
mov rcx, qword [rsp + 0xe0]
call qword [rax + 0x48]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e42c
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x201e8]
lea r8, [0x180064170]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov eax, dword [rsp + 0x201e8]
mov dword [rsp + 0x20218], eax
cmp dword [rsp + 0x20218], 0x40000
je 0x18012e470
cmp dword [rsp + 0x20218], 0x70000
je 0x18012e48f
cmp dword [rsp + 0x20218], 0x80000
je 0x18012e4ae
cmp dword [rsp + 0x20218], 0x90000
je 0x18012e4cd
jmp 0x18012e4ec
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064130]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e509
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x1800640f8]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e509
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x1800640c0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e509
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064088]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012e509
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180064050]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov dword [rsp + 0x201e8], 0x90000
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
lea r8, [rsp + 0x201e0]
mov edx, dword [rsp + 0x201e8]
mov rcx, qword [rsp + 0xe0]
call qword [rax + 0x18]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e59d
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x201e0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x201e8]
lea r8, [0x180063ff0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x201e0]
mov rax, qword [rax]
lea r8, [rsp + 0x201c0]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x201e0]
call qword [rax + 0x78]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e619
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x201c0]
lea r8, [0x180063f90]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x201c0]
mov rax, qword [rax]
lea r8, [rsp + 0x8160]
lea rdx, [0x18005f5d8]
mov rcx, qword [rsp + 0x201c0]
call qword [rax]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e694
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x8160]
lea r8, [0x180063f30]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
lea r8, [rsp + 0x8140]
lea rdx, [0x18005f5f8]
mov rcx, qword [rsp + 0xe0]
call qword [rax]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e70f
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x8140]
lea r8, [0x180063ec0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x8140]
mov rax, qword [rax]
lea r8, [rsp + 0x8154]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rax + 0x18]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e78b
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x8154]
lea r8, [0x180063e60]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov r9d, dword [rsp + 0x8154]
lea r8, [0x180063e30]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
mov dword [rsp + 0x8148], 0
jmp 0x18012e7c9
mov eax, dword [rsp + 0x8148]
add eax, 1
mov dword [rsp + 0x8148], eax
mov eax, dword [rsp + 0x8154]
cmp dword [rsp + 0x8148], eax
jae 0x18012e8e1
lea rdi, [rsp + 0x8190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
mov dword [rsp + 0x8150], 0x4000
mov rdi, qword [rsp + 0x8140]
mov rdi, qword [rdi]
lea rax, [rsp + 0x8150]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x8190]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rdi + 0x30]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e8a4
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x8150]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063dc0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8154]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063d80]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012e7b8
mov dword [rsp + 0x8148], 0
jmp 0x18012e8ff
mov eax, dword [rsp + 0x8148]
add eax, 1
mov dword [rsp + 0x8148], eax
mov eax, dword [rsp + 0x8154]
cmp dword [rsp + 0x8148], eax
jae 0x18012efe2
lea rdi, [rsp + 0x8190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
mov dword [rsp + 0x8150], 0x4000
mov rdi, qword [rsp + 0x8140]
mov rdi, qword [rdi]
lea rax, [rsp + 0x8150]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x8190]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rdi + 0x30]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012e9da
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x8150]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063d10]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rdi, [rsp + 0x10190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
cmp dword [rsp + 0x20260], 1
jne 0x18012ea0b
lea rdx, [0x180063cc8]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
jmp 0x18012ea1f
lea rdx, [0x180063c98]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
lea rdx, [rsp + 0x10190]
lea rcx, [rsp + 0x8190]
call fcn.18013275c
test rax, rax
je 0x18012ead6
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x8190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdx, rcx
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x10190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp rdx, rcx
jne 0x18012ead6
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8148]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x180063c50]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012efe2
lea rdi, [rsp + 0x10190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
cmp dword [rsp + 0x20260], 1
jne 0x18012eb07
lea rdx, [0x180063c00]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
jmp 0x18012eb1b
lea rdx, [0x180063bc8]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
lea rdx, [rsp + 0x10190]
lea rcx, [rsp + 0x8190]
call fcn.18013275c
test rax, rax
je 0x18012ebd2
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x8190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdx, rcx
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x10190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp rdx, rcx
jne 0x18012ebd2
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8148]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x180063b80]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012efe2
lea rdi, [rsp + 0x10190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
cmp dword [rsp + 0x20260], 1
jne 0x18012ec03
lea rdx, [0x180063b30]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
jmp 0x18012ec17
lea rdx, [0x180063af8]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
lea rdx, [rsp + 0x10190]
lea rcx, [rsp + 0x8190]
call fcn.18013275c
test rax, rax
je 0x18012ecce
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x8190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdx, rcx
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x10190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp rdx, rcx
jne 0x18012ecce
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8148]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x180063ab0]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012efe2
lea rdi, [rsp + 0x10190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
cmp dword [rsp + 0x20260], 1
jne 0x18012ecff
lea rdx, [0x180063a60]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
jmp 0x18012ed13
lea rdx, [0x180063a28]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
lea rdx, [rsp + 0x10190]
lea rcx, [rsp + 0x8190]
call fcn.18013275c
test rax, rax
je 0x18012edca
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x8190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdx, rcx
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x10190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp rdx, rcx
jne 0x18012edca
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8148]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x1800639e0]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012efe2
lea rdi, [rsp + 0x10190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
cmp dword [rsp + 0x20260], 1
jne 0x18012edfb
lea rdx, [0x1800639a0]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
jmp 0x18012ee0f
lea rdx, [0x180063968]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
lea rdx, [rsp + 0x10190]
lea rcx, [rsp + 0x8190]
call fcn.18013275c
test rax, rax
je 0x18012eec6
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x8190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdx, rcx
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x10190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp rdx, rcx
jne 0x18012eec6
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8148]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x180063920]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012efe2
lea rdi, [rsp + 0x10190]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
cmp dword [rsp + 0x20260], 1
jne 0x18012eef7
lea rdx, [0x1800638e0]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
jmp 0x18012ef0b
lea rdx, [0x1800638a8]
lea rcx, [rsp + 0x10190]
call fcn.1800ecb10
lea rdx, [rsp + 0x10190]
lea rcx, [rsp + 0x8190]
call fcn.18013275c
test rax, rax
je 0x18012efbf
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x8190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdx, rcx
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x10190]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp rdx, rcx
jne 0x18012efbf
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8148]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x180063860]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012efe2
mov dword [rsp + 0x814c], 0x490
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
jmp 0x18012e8ee
cmp dword [rsp + 0x201d0], 0
jge 0x18012f024
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x10190]
lea r8, [0x180063810]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov dword [rsp + 0x60], 0
cmp dword [rsp + 0x20260], 0x62
jg 0x18012f03e
mov dword [rsp + 0x60], 1
mov rdi, qword [rsp + 0x8140]
mov rdi, qword [rdi]
mov dword [rsp + 0x30], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 3
lea r9, [0x180062970]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rdi + 0x50]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f0ee
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063770]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012f1d8
mov r9d, dword [rsp + 0x60]
lea r8, [0x180063740]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
mov dword [rsp + 0x6c], 1
mov rdi, qword [rsp + 0x8140]
mov rdi, qword [rdi]
mov dword [rsp + 0x30], 4
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r9, [0x1800629c0]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rdi + 0x50]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f1c0
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 4
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x1800636a0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012f1d8
lea r8, [0x180063668]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
mov rax, qword [rsp + 0x8140]
mov rax, qword [rax]
lea r9, [rsp + 0x68]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rax + 0x20]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f263
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063600]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov r9d, dword [rsp + 0x68]
lea r8, [0x1800635c8]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
mov dword [rsp + 0x18190], 0
jmp 0x18012f29e
mov eax, dword [rsp + 0x18190]
add eax, 1
mov dword [rsp + 0x18190], eax
mov eax, dword [rsp + 0x68]
cmp dword [rsp + 0x18190], eax
jae 0x18012f40f
lea rdi, [rsp + 0x181c0]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
mov dword [rsp + 0x8168], 0x4000
mov rdi, qword [rsp + 0x8140]
mov rdi, qword [rdi]
lea rax, [rsp + 0x8168]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x181c0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x181a0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x18190]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rdi + 0x38]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f3a8
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x8168]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x181c0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x181a0]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x18190]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063550]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rax, [rsp + 0x181c0]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x18190]
lea r8, [0x180063500]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
cmp qword [rsp + 0x181a0], 0
je 0x18012f40a
mov rax, qword [rsp + 0x181a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x181a0]
call qword [rax + 0x10]
mov qword [rsp + 0x181a0], 0
jmp 0x18012f28d
mov dword [rsp + 0x18190], 0
jmp 0x18012f42d
mov eax, dword [rsp + 0x18190]
add eax, 1
mov dword [rsp + 0x18190], eax
mov eax, dword [rsp + 0x68]
cmp dword [rsp + 0x18190], eax
jae 0x18012f6b0
lea rdi, [rsp + 0x181c0]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
mov dword [rsp + 0x8168], 0x4000
mov rdi, qword [rsp + 0x8140]
mov rdi, qword [rdi]
lea rax, [rsp + 0x8168]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x181c0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x181a0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x18190]
mov r8d, dword [rsp + 0x8148]
lea rdx, [0x18005f5a8]
mov rcx, qword [rsp + 0x8140]
call qword [rdi + 0x38]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f537
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x8168]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x181c0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x181a0]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x18190]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x8148]
lea r8, [0x180063550]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rdi, [rsp + 0x130]
xor eax, eax
mov ecx, 0x8000
rep stosb byte [rdi], al
mov eax, dword [rsp + 0x20260]
mov dword [rsp + 0x2021c], eax
mov eax, dword [rsp + 0x2021c]
sub eax, 1
mov dword [rsp + 0x2021c], eax
cmp dword [rsp + 0x2021c], 0x61
ja case.0x18012f592.3
movsxd rax, dword [rsp + 0x2021c]
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x130550]
mov eax, dword [rcx + rax*4 + 0x130544]
add rax, rcx
jmp rax
lea rdx, [0x1800634a0]
lea rcx, [rsp + 0x130]
call fcn.1800ecb10
jmp 0x18012f5ee
mov r8d, dword [rsp + 0x20260]
lea rdx, [0x180063450]
lea rcx, [rsp + 0x130]
call fcn.1800ecb10
jmp 0x18012f5ee
mov eax, dword [rsp + 0x20260]
cdq
mov ecx, 0x3e8
idiv ecx
mov r8d, eax
lea rdx, [0x180063418]
lea rcx, [rsp + 0x130]
call fcn.1800ecb10
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x181c0]
call fcn.18013275c
test rax, rax
je 0x18012f660
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
lea rax, [rsp + 0x181c0]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x18190]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x130]
lea r8, [0x1800633d8]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
jmp 0x18012f6b0
mov dword [rsp + 0x814c], 0x490
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
cmp qword [rsp + 0x181a0], 0
je 0x18012f6ab
mov rax, qword [rsp + 0x181a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x181a0]
call qword [rax + 0x10]
mov qword [rsp + 0x181a0], 0
jmp 0x18012f41c
cmp dword [rsp + 0x201d0], 0
jge 0x18012f6f2
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x130]
lea r8, [0x180063390]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x181a0]
mov rax, qword [rax]
lea r8, [rsp + 0x201c8]
lea rdx, [0x18005f5d8]
mov rcx, qword [rsp + 0x181a0]
call qword [rax]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f76d
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x201c8]
lea r8, [0x180063320]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov dword [rsp + 0x181ac], 0
mov rax, qword [rsp + 0x201c8]
mov rax, qword [rax]
lea r8, [rsp + 0x181ac]
xor edx, edx
mov rcx, qword [rsp + 0x201c8]
call qword [rax + 0x20]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f7ef
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x181ac]
lea r8, [0x1800632c0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov ecx, dword [rsp + 0x181ac]
call fcn.1800eb9ac
mov qword [rsp + 0x20200], rax
mov rax, qword [rsp + 0x20200]
mov qword [rsp + 0x8170], rax
cmp qword [rsp + 0x8170], 0
jne 0x18012f874
mov dword [rsp + 0x814c], 0xe
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x181ac]
lea r8, [0x180060018]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x201c8]
mov rax, qword [rax]
lea r8, [rsp + 0x181ac]
mov rdx, qword [rsp + 0x8170]
mov rcx, qword [rsp + 0x201c8]
call qword [rax + 0x20]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f8fe
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x181ac]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x8170]
lea r8, [0x180063260]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x8160]
mov rax, qword [rax]
mov rdx, qword [rsp + 0x8170]
mov rcx, qword [rsp + 0x8160]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012f973
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x8170]
lea r8, [0x180063200]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
cmp dword [rsp + 0x60], 1
jne 0x18012fc6a
lea r8, [0x1800631c8]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
mov rax, qword [rsp + 0x181a0]
mov rax, qword [rax]
lea r8, [rsp + 0x201d8]
lea rdx, [0x18005f608]
mov rcx, qword [rsp + 0x181a0]
call qword [rax]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fa11
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x201d8]
lea r8, [0x180063150]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x18012fc6a
mov rax, qword [rsp + 0x201d8]
mov rax, qword [rax]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x60]
mov r8d, 3
lea rdx, [0x180062970]
mov rcx, qword [rsp + 0x201d8]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fa99
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], 4
lea r9, [rsp + 0x60]
lea r8, [0x1800630d0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov dword [rsp + 0x64], 0x64
mov rax, qword [rsp + 0x201d8]
mov rax, qword [rax]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x64]
xor r8d, r8d
lea rdx, [0x180062988]
mov rcx, qword [rsp + 0x201d8]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fb26
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], 4
lea r9, [rsp + 0x64]
lea r8, [0x180063050]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov dword [rsp + 0x181a8], 0
mov rax, qword [rsp + 0x201d8]
mov rax, qword [rax]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x181a8]
xor r8d, r8d
lea rdx, [0x1800629a0]
mov rcx, qword [rsp + 0x201d8]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fbc8
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 4
lea rax, [rsp + 0x181a8]
mov qword [rsp + 0x20], rax
lea r9, [0x1800629a0]
lea r8, [0x180062fc0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov dword [rsp + 0x18198], 0
mov rax, qword [rsp + 0x201d8]
mov rax, qword [rax]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x18198]
xor r8d, r8d
lea rdx, [0x1800629b0]
mov rcx, qword [rsp + 0x201d8]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fc6a
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 4
lea rax, [rsp + 0x18198]
mov qword [rsp + 0x20], rax
lea r9, [0x1800629a0]
lea r8, [0x180062f30]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov rax, qword [rsp + 0x201e0]
mov rax, qword [rax]
mov rdx, qword [rsp + 0x201c0]
mov rcx, qword [rsp + 0x201e0]
call qword [rax + 0x68]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fcdf
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x201c0]
lea r8, [0x180062ee0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x20250]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax]
mov rdx, qword [rsp + 0x201e0]
call qword [rax + 0x20]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fd5c
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x201e0]
lea r8, [0x180062e90]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x20250]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax]
lea rdx, [rsp + 0x18194]
call qword [rax + 0x30]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012fdd9
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x18194]
lea r8, [0x180062e40]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov r9d, dword [rsp + 0x18194]
lea r8, [0x180062e20]
lea rdx, [0x180064690]
mov ecx, 3
call fcn.1801276b0
lea rdi, [rsp + 0x118]
xor eax, eax
mov ecx, 0x12
rep stosb byte [rdi], al
mov eax, 1
mov word [rsp + 0x118], ax
mov eax, 2
mov word [rsp + 0x11a], ax
mov dword [rsp + 0x11c], 0xac44
mov dword [rsp + 0x120], 0x2b110
mov eax, 4
mov word [rsp + 0x124], ax
mov eax, 0x10
mov word [rsp + 0x126], ax
xor eax, eax
mov word [rsp + 0x128], ax
lea rdi, [rsp + 0x80]
xor eax, eax
mov ecx, 0x58
rep stosb byte [rdi], al
lea rdi, [rsp + 0x80]
lea rsi, [0x18005f5a8]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x90]
lea rsi, [0x18005f5b8]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xa0], 1
mov dword [rsp + 0xa4], 0
movzx eax, word [rsp + 0x124]
mov dword [rsp + 0xa8], eax
lea rdi, [rsp + 0xac]
lea rsi, [0x18005f5c8]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0xc0], 0
movzx eax, word [rsp + 0x128]
add rax, 0x12
mov dword [rsp + 0xc8], eax
lea rax, [rsp + 0x118]
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0x181b0], 0
jmp 0x18012ff23
mov eax, dword [rsp + 0x181b0]
add eax, 1
mov dword [rsp + 0x181b0], eax
mov eax, dword [rsp + 0x18194]
cmp dword [rsp + 0x181b0], eax
jae 0x1801301fb
mov rax, qword [rsp + 0x20250]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax]
lea r8, [rsp + 0x8180]
mov edx, dword [rsp + 0x181b0]
call qword [rax + 0x38]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18012ffc8
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x8180]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x181b0]
lea r8, [0x180062dd0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x8180]
mov rax, qword [rax]
lea rdx, [rsp + 0x8130]
mov rcx, qword [rsp + 0x8180]
call qword [rax + 0x18]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x18013003d
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x8130]
lea r8, [0x180062d80]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
lea rdx, [0x18005f5a8]
lea rcx, [rsp + 0x8130]
call fcn.1801305c0
test eax, eax
je 0x1801300ae
mov dword [rsp + 0x814c], 0x57
mov dword [rsp + 0x201d0], 0x80070057
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x814c]
lea r8, [0x180062d20]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x8180]
mov rax, qword [rax]
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x8180]
call qword [rax + 0x28]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x180130123
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x80]
lea r8, [0x180062cd0]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rax, qword [rsp + 0x20250]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax]
mov r8, qword [rsp + 0x8180]
mov edx, dword [rsp + 0x181b0]
call qword [rax + 0x40]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x1801301b4
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x8180]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x181b0]
lea r8, [0x180062c80]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov rcx, qword [rsp + 0x20250]
mov eax, dword [rsp + 0x181b0]
mov dword [rcx + 0x244], eax
cmp qword [rsp + 0x8180], 0
je 0x1801301f6
mov rax, qword [rsp + 0x8180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8180]
call qword [rax + 0x10]
mov qword [rsp + 0x8180], 0
jmp 0x18012ff12
mov rax, qword [rsp + 0x20250]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x20250]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax]
call qword [rax + 0x58]
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x180130262
mov eax, dword [rsp + 0x201d0]
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x814c]
lea r8, [0x180062c38]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
jmp 0x180130280
mov dword [rsp + 0x814c], 0
mov ecx, dword [rsp + 0x814c]
call fcn.180094b00
mov dword [rsp + 0x201d0], eax
cmp dword [rsp + 0x201d0], 0
jge 0x180130297
mov rcx, qword [rsp + 0x20250]
call fcn.18012d780
cmp qword [rsp + 0x8170], 0
je 0x1801302bf
mov rax, qword [rsp + 0x8170]
mov qword [rsp + 0x20208], rax
mov rcx, qword [rsp + 0x20208]
call fcn.1800ec288
cmp qword [rsp + 0x181a0], 0
je 0x1801302ec
mov rax, qword [rsp + 0x181a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x181a0]
call qword [rax + 0x10]
mov qword [rsp + 0x181a0], 0
cmp qword [rsp + 0x8140], 0
je 0x180130319
mov rax, qword [rsp + 0x8140]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8140]
call qword [rax + 0x10]
mov qword [rsp + 0x8140], 0
cmp qword [rsp + 0x8180], 0
je 0x180130346
mov rax, qword [rsp + 0x8180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8180]
call qword [rax + 0x10]
mov qword [rsp + 0x8180], 0
cmp qword [rsp + 0x201c8], 0
je 0x180130373
mov rax, qword [rsp + 0x201c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x201c8]
call qword [rax + 0x10]
mov qword [rsp + 0x201c8], 0
cmp qword [rsp + 0x8160], 0
je 0x1801303a0
mov rax, qword [rsp + 0x8160]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8160]
call qword [rax + 0x10]
mov qword [rsp + 0x8160], 0
cmp qword [rsp + 0x8178], 0
je 0x1801303cd
mov rax, qword [rsp + 0x8178]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8178]
call qword [rax + 0x10]
mov qword [rsp + 0x8178], 0
cmp qword [rsp + 0xe0], 0
je 0x1801303fa
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe0]
call qword [rax + 0x10]
mov qword [rsp + 0xe0], 0
cmp qword [rsp + 0x201e0], 0
je 0x180130427
mov rax, qword [rsp + 0x201e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x201e0]
call qword [rax + 0x10]
mov qword [rsp + 0x201e0], 0
cmp qword [rsp + 0x201c0], 0
je 0x180130454
mov rax, qword [rsp + 0x201c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x201c0]
call qword [rax + 0x10]
mov qword [rsp + 0x201c0], 0
cmp qword [rsp + 0x201d8], 0
je 0x180130481
mov rax, qword [rsp + 0x201d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x201d8]
call qword [rax + 0x10]
mov qword [rsp + 0x201d8], 0
jmp 0x1801304d4
cmp dword [rsp + 0x814c], 0
jne 0x1801304f8
lea r8, [0x18005f618]
lea rdx, [0x180064690]
mov ecx, 1
call fcn.1801276b0
jmp 0x180130520
mov eax, dword [rsp + 0x814c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x814c]
lea r8, [0x180061970]
lea rdx, [0x180064690]
xor ecx, ecx
call fcn.1801276b0
mov eax, dword [rsp + 0x201d0]
mov rcx, qword [rsp + 0x20220]
xor rcx, rsp
call fcn.1800eb430
add rsp, 0x20238
pop rdi
pop rsi
ret