Function at 0x180229f70
Capabilities:
Check for software breakpoints
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rdi
sub rsp, 0x480
mov eax, dword [rcx + 0x554]
mov rbx, rcx
test eax, eax
jne 0x18022a10c
mov byte [rcx + 0x558], al
lea rax, [rcx + 0x638]
xor edx, edx
mov qword [rcx + 0xa658], rax
add rcx, 0x55c
mov r8d, 0xb4
call fcn.18024adb8
lea rcx, [rbx + 0xb26c]
xor edx, edx
mov r8d, 0x1200
call fcn.18024adb8
lea rcx, [rbx + 0x2c57c]
xor edx, edx
mov r8d, 0x80
call fcn.18024adb8
xor eax, eax
lea rcx, [rbx + 0xa660]
mov dword [rbx + 0x2d0b8], eax
mov dword [rbx + 0x2d0bc], eax
mov dword [rbx + 0x2d0c0], eax
mov dword [rbx + 0x2d0c4], eax
mov dword [rbx + 0x2d0c8], eax
mov dword [rbx + 0x2d0cc], eax
mov dword [rbx + 0x2d0d0], eax
mov dword [rbx + 0x2d0d4], eax
mov dword [rbx + 0x2c5fc], eax
mov dword [rbx + 0x2c600], eax
mov dword [rbx + 0x2c604], eax
mov byte [rbx + 0x2d0d8], al
mov word [rbx + 0x2d0d9], ax
mov dword [rbx + 0x2d0dc], eax
mov dword [rbx + 0x2d0e0], eax
mov dword [rbx + 0x2d0e4], eax
mov dword [rbx + 0x2d0e8], eax
mov byte [rbx + 0x2d0ec], al
xor edx, edx
mov r8d, 0xbdc
mov byte [rbx + 0x2d0ed], al
call fcn.18024adb8
xor eax, eax
lea rcx, [rbx + 0x2c608]
mov dword [rbx + 0x2d0f0], eax
mov dword [rbx + 0x2d0f4], eax
xor edx, edx
mov r8d, 0x6a0
mov dword [rbx + 0x2d0f8], eax
call fcn.18024adb8
lea rcx, [rbx + 0x2cca8]
xor edx, edx
mov r8d, 0x410
call fcn.18024adb8
lea rcx, [rbx + 0xc474]
mov r8d, pe_nt_image_headers64
xor edx, edx
call fcn.18024adb8
lea rcx, [rbx + 0xc574]
xor edx, edx
mov r8d, 0x20000
call fcn.18024adb8
xor ebp, ebp
or edi, 0xffffffff
mov dword [rbx + 0x2c574], ebp
mov dword [rbx + 0x2c578], ebp
mov dword [rbx + 0x550], ebp
mov byte [rbx + 0x610], bpl
mov byte [rbx + 0x611], bpl
mov byte [rbx + 0x612], bpl
mov dword [rbx + 0xc46c], ebp
mov dword [rbx + 0xc470], edi
add rsp, 0x480
pop rdi
pop rbp
pop rbx
ret
mov qword [rsp + 0x478], rsi
mov qword [rsp + 0x470], r12
mov qword [rsp + 0x468], r13
mov qword [rsp + 0x460], r14
mov qword [rsp + 0x458], r15
cmp eax, 2
jne 0x18022afd6
xor ebp, ebp
mov r14d, 1
mov dword [rsp + 0x4a0], r14d
mov edi, ebp
cmp dword [rcx + 0x2d138], ebp
jbe 0x18022a1d0
nop word [rax + rax]
lea rdx, [rsp + 0x420]
lea rcx, [rbx + 0x2d128]
mov r8d, edi
call fcn.1802400f0
cmp dword [rsp + 0x420], 0x11
jne 0x18022a1c6
mov esi, dword [rsp + 0x424]
cmp byte [rsp + 0x440], bpl
jne 0x18022a1a7
lea rdx, [0x18005b4c0]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
cmp byte [rsp + 0x442], bpl
jne 0x18022a1c6
lea rdx, [0x18005b4f0]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc edi
cmp edi, dword [rbx + 0x2d138]
jb 0x18022a160
mov edi, ebp
cmp dword [rbx + 0x628], ebp
jbe 0x18022a21c
nop word [rax + rax]
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x618]
mov r8d, edi
call fcn.18023f9f0
cmp byte [rsp + 0x5c], bpl
jne 0x18022a212
mov r8d, dword [rsp + 0x54]
lea rdx, [0x18005b518]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc edi
cmp edi, dword [rbx + 0x628]
jb 0x18022a1e0
mov rax, qword [rbx + 0xb248]
cmp dword [rax], ebp
jbe 0x18022a3c2
mov rsi, rbp
mov r8d, 0xffff
mov r14d, esi
nop word [rax + rax]
mov rcx, qword [rbx + 0xb258]
mov r12, qword [rbx + 0xb250]
movzx eax, word [rsi + r12 + 4]
lea rdx, [rax + rax*2]
movzx eax, word [rsi + r12 + 6]
movzx edi, word [rcx + rdx*4 + 6]
movzx r13d, word [rcx + rdx*4 + 8]
movzx r15d, word [rcx + rdx*4 + 0xa]
imul edi, eax
imul r13d, eax
imul r15d, eax
test edi, edi
je 0x18022a305
movzx edx, word [rsi + r12 + 8]
cmp dx, r8w
je 0x18022a305
movzx eax, dx
lea rcx, [rax + rax*2]
cmp byte [rbx + rcx*4 + 0x55c], bpl
jne 0x18022a2be
movzx r9d, dx
lea rdx, [0x18005b550]
mov r8d, r14d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov r8d, 0xffff
movzx eax, word [rsi + r12 + 8]
movzx r9d, word [rsi + r12 + 0xa]
lea rcx, [rax + rax*2]
mov edx, dword [rbx + rcx*4 + 0x560]
cmp r9d, edx
jae 0x18022a2e2
lea eax, [r9 + rdi]
cmp eax, edx
jbe 0x18022a305
lea eax, [r9 + rdi]
lea rdx, [0x18005b5a0]
mov r8d, r14d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
mov r8d, 0xffff
cmp word [rsi + r12 + 0xc], r8w
je 0x18022a359
mov edi, ebp
test r13d, r13d
je 0x18022a359
nop word [rax + rax]
movzx r9d, word [rsi + r12 + 0xc]
add r9d, edi
lea rcx, [r9 + r9*8]
cmp byte [rbx + rcx*4 + 0xb26c], bpl
jne 0x18022a34c
lea rdx, [0x18005b600]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc edi
cmp edi, r13d
jb 0x18022a320
mov r8d, 0xffff
cmp word [rsi + r12 + 0xe], r8w
je 0x18022a3a5
mov edi, ebp
test r15d, r15d
je 0x18022a3a5
nop dword [rax + rax]
movzx r9d, word [rsi + r12 + 0xe]
add r9d, edi
cmp byte [rbx + r9*8 + 0x2c57c], bpl
jne 0x18022a398
lea rdx, [0x18005b640]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc edi
cmp edi, r15d
jb 0x18022a370
mov r8d, 0xffff
mov rax, qword [rbx + 0xb248]
inc r14d
add rsi, 0x10
cmp r14d, dword [rax]
jb 0x18022a240
mov r14d, 1
mov rax, qword [rbx + 0xb248]
mov r12d, ebp
mov edi, ebp
cmp dword [rax + 8], ebp
jbe 0x18022a447
mov rsi, rbp
nop word [rax + rax]
mov rax, qword [rbx + 0xb260]
mov r8d, r12d
mov r9d, dword [rsi + rax]
lea rcx, [r8 + r8*2]
add r12d, r9d
cmp byte [rbx + rcx*4 + 0xa660], bpl
jne 0x18022a413
lea rdx, [0x18005b680]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022a435
mov eax, dword [rbx + rcx*4 + 0xa664]
cmp eax, r9d
je 0x18022a435
lea rdx, [0x18005b6d0]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xb248]
inc edi
add rsi, 0x10
cmp edi, dword [rax + 8]
jb 0x18022a3e0
mov esi, ebp
lea rdi, [rbx + 0xa664]
cmp byte [rdi - 3], bpl
jne 0x18022a470
cmp dword [rdi], 1
jne 0x18022a470
lea rdx, [0x18005b730]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc esi
add rdi, 0xc
cmp esi, 0xfd
jb 0x18022a450
mov eax, dword [rbx + 0x534]
mov r15d, 4
cmp eax, 2
jne 0x18022a5f7
cmp byte [rbx + 0x2c5fc], bpl
jne 0x18022a4b3
lea rdx, [0x18005b770]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022a567
cmp dword [rbx + 0x2c604], ebp
jne 0x18022a518
mov rax, qword [rbx + 0xa658]
mov r8d, ebp
add rax, 0x8010
nop dword [rax + rax]
cmp dword [rax], ebp
jne 0x18022a4e6
inc r8d
add rax, 0x28
cmp r8d, 0x10
jb 0x18022a4d0
jmp 0x18022a567
lea rdx, [0x18005b7a0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x4b8]
mov dword [rsp + 0x4b8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov esi, ebp
mov rdi, rbp
nop dword [rax]
mov rax, qword [rbx + 0xa658]
cmp dword [rdi + rax + 0x8010], ebp
je 0x18022a55c
mov ecx, dword [rdi + rax + 0x8014]
mov r8d, dword [rbx + 0x2c604]
cmp ecx, r8d
je 0x18022a55c
mov dword [rsp + 0x20], ecx
lea rdx, [0x18005b800]
mov r9d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc esi
add rdi, 0x28
cmp esi, 0x10
jb 0x18022a520
mov dword [rsp + 0x4a0], ebp
or edi, 0xffffffff
lea rsi, [rbx + 0x2d0f8]
lea r12, [rbx + 0x2d0b8]
mov r13, r15
cmp byte [rsi], bpl
je 0x18022a5b5
lea eax, [rdi + 2]
mov dword [rsp + 0x4a0], eax
cmp byte [r12], bpl
jne 0x18022a5bc
lea rdx, [0x18005b8e0]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov eax, dword [rsp + 0x4a0]
jmp 0x18022a5bc
mov eax, dword [rsp + 0x4a0]
inc edi
add r12, 8
inc rsi
sub r13, 1
jne 0x18022a582
test eax, eax
jne 0x18022aabb
cmp byte [rbx + 0x2d0b8], bpl
jne 0x18022aabb
lea rdx, [0x18005b918]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022aabb
test eax, eax
jne 0x18022a659
cmp byte [rbx + 0x2d0e4], bpl
jne 0x18022aabb
cmp byte [rbx + 0x2d0dc], bpl
je 0x18022aabb
cmp dword [rbx + 0x2d0e0], 0xc
je 0x18022aabb
mov eax, dword [rbx + 0x2d0e8]
test eax, eax
je 0x18022aabb
cmp eax, 5
je 0x18022aabb
cmp eax, 7
je 0x18022aabb
lea rdx, [0x18005b940]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022aabb
cmp eax, 5
jne 0x18022a845
cmp dword [rbx + 0x2c578], ebp
jne 0x18022a681
lea rdx, [0x18005ba70]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022aabb
mov rax, qword [rbx + 0xa658]
mov r13d, 0x1000
mov ecx, dword [rax + 0x800c]
add ecx, dword [rax + 4]
mov eax, ecx
cmp rax, r13
jbe 0x18022a6bb
lea rdx, [0x18005bab0]
mov r9d, r13d
mov r8d, r13d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1802267a0
inc dword [rbx + 0x1c]
cmp byte [rbx + 0x23], bpl
jne 0x18022aabb
mov al, 1
mov esi, ebp
lea rdi, [rbx + 0xc578]
cmp byte [rdi - 4], bpl
je 0x18022a703
cmp byte [rdi + 4], bpl
je 0x18022a703
mov r9d, dword [rdi]
mov r8d, dword [rbx + 0x2c578]
cmp r9d, r8d
je 0x18022a703
lea rdx, [0x18005bb40]
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.180226700
inc dword [rbx + 0x1c]
xor al, al
inc esi
add rdi, 0x10
cmp esi, 0x2000
jb 0x18022a6d0
test al, al
je 0x18022aabb
mov r8d, dword [rbx + 0x2c578]
mov eax, dword [rbx + 0x2c574]
xor edx, edx
div r8d
mov ecx, eax
cmp r8d, 0x40
ja 0x18022a73d
mov eax, pe_nt_image_headers64
jmp 0x18022a81f
cmp r8d, 0x44
ja 0x18022a74d
mov eax, 0xf0
jmp 0x18022a81f
cmp r8d, 0x48
ja 0x18022a75d
mov eax, 0xe0
jmp 0x18022a81f
cmp r8d, 0x4c
ja 0x18022a76d
mov eax, 0xd0
jmp 0x18022a81f
cmp r8d, 0x54
ja 0x18022a77d
mov eax, 0xc0
jmp 0x18022a81f
cmp r8d, 0x5c
ja 0x18022a78d
mov eax, 0xb0
jmp 0x18022a81f
cmp r8d, 0x64
ja 0x18022a79d
mov eax, 0xa0
jmp 0x18022a81f
cmp r8d, 0x70
ja 0x18022a7aa
mov eax, 0x90
jmp 0x18022a81f
cmp r8d, 0x80
ja 0x18022a7ba
mov eax, 0x80
jmp 0x18022a81f
cmp r8d, 0x90
ja 0x18022a7ca
mov eax, 0x70
jmp 0x18022a81f
cmp r8d, 0xa8
ja 0x18022a7da
mov eax, 0x60
jmp 0x18022a81f
cmp r8d, 0xcc
ja 0x18022a7ea
mov eax, 0x50
jmp 0x18022a81f
mov eax, pe_nt_image_headers64
cmp r8d, eax
ja 0x18022a7fb
mov eax, 0x40
jmp 0x18022a81f
cmp r8d, 0x154
ja 0x18022a80b
mov eax, 0x30
jmp 0x18022a81f
mov eax, 0x10
mov edi, 0x20
cmp r8d, 0x200
cmovbe eax, edi
cmp ecx, eax
jbe 0x18022aabb
mov dword [rsp + 0x20], ecx
lea rdx, [0x18005bc20]
mov r9d, eax
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022aabb
cmp eax, r15d
jne 0x18022aabb
cmp byte [rbx + 0x2ccb0], bpl
jne 0x18022a869
lea rdx, [0x18005bd20]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
cmp byte [rbx + 0x2ccb1], bpl
jne 0x18022a8a4
lea rdx, [0x18005bd60]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3e0]
mov dword [rsp + 0x3e0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x2ccb4]
test ecx, ecx
je 0x18022a918
mov edx, dword [rbx + 0x2ccac]
sub edx, 1
je 0x18022a8fd
sub edx, 1
je 0x18022a8e0
cmp edx, 1
jne 0x18022a918
mov eax, ecx
and eax, 0x30
cmp eax, ecx
je 0x18022a918
lea rdx, [0x18005be00]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022a918
mov eax, ecx
and eax, 0x70
cmp eax, ecx
je 0x18022a918
lea rdx, [0x18005bda0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022a918
mov eax, ecx
and eax, 0x30
cmp eax, ecx
je 0x18022a918
lea rdx, [0x18005be60]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rdi, r15
mov r10, rbp
mov r12d, 0xb32f
mov r15d, 0x20
mov r13d, 0x2146
lea rsi, [rbx + 0x2ccb8]
nop word [rax + rax]
mov rax, qword [rbx + 0xa658]
mov r8, rbp
mov edx, r14d
mov ecx, dword [rax + r10 + 0x8510]
mov r11, rdi
or dword [rsi], ecx
mov rax, qword [rbx + 0xa658]
movzx ecx, byte [rax + r10 + 0x852c]
mov byte [rsi + 0x14], cl
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + r10 + 0x8530]
mov dword [rsi + 0x18], ecx
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + r10 + 0x8534]
mov dword [rsi + 0x1c], ecx
mov r9, qword [rbx + 0xa658]
mov eax, edx
rol eax, 4
and eax, dword [r9 + r10 + 0x8510]
test al, 0xf0
je 0x18022a9b8
lea rax, [r8 + r13]
lea rcx, [r8 + r12]
mov eax, dword [r9 + rax*4]
mov dword [rbx + rcx*4], eax
rol edx, 1
inc r8
sub r11, 1
jne 0x18022a991
add rsi, 0x20
add r10, 0x28
add r13, 0xa
add r12, 8
sub r15, 1
jne 0x18022a940
mov r12d, ebp
mov rsi, rbp
lea edi, [r11 + 0x20]
nop word [rax + rax]
mov rax, qword [rbx + 0xa658]
cmp dword [rax + rsi + 0x8010], ebp
je 0x18022aa2c
mov ecx, dword [rax + rsi + 0x8014]
mov r8d, dword [rbx + 0x2cca8]
cmp ecx, r8d
je 0x18022aa2c
mov dword [rsp + 0x20], ecx
lea rdx, [0x18005bed0]
mov r9d, r12d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
inc r12d
add rsi, 0x28
cmp r12d, edi
jb 0x18022a9f0
mov rcx, qword [rbx + 0xa658]
mov r9d, ebp
add rcx, 0x8010
nop dword [rax]
mov eax, dword [rcx]
test al, 0x10
je 0x18022aa59
inc r9d
test al, 0x20
je 0x18022aa60
inc r9d
test al, 0x40
je 0x18022aa67
inc r9d
test al, al
jns 0x18022aa6e
inc r9d
add rcx, 0x28
sub rdi, 1
jne 0x18022aa50
mov ecx, dword [rbx + 0x2cca8]
mov eax, ecx
imul eax, r9d
cmp eax, 0xf80
jbe 0x18022aaab
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, [0x18005bfe0]
mov rcx, rbx
mov r8d, 0xf80
call fcn.180226700
inc dword [rbx + 0x1c]
xor edx, edx
mov rcx, rbx
call fcn.180238cb0
mov r15d, 4
mov edx, ebp
lea r10, [0x18005c0e4]
lea r9, [0x180034acf]
mov dword [rsp + 0x4b0], edx
mov rax, qword [rbx + 0xa658]
lea r12, [rax + 0x8010]
mov qword [rsp + 0x48], r12
test edx, edx
je 0x18022ab1c
mov ecx, dword [rbx + 0x534]
cmp ecx, 4
je 0x18022aafd
cmp ecx, 3
jne 0x18022ad7d
cmp edx, 1
jne 0x18022ab10
lea r12, [rax + 0x8510]
mov qword [rsp + 0x48], r12
jmp 0x18022ab1c
lea r12, [rax + 0x8a10]
mov qword [rsp + 0x48], r12
mov ecx, 2
mov esi, ebp
mov dword [rsp + 0x4a8], ebp
mov qword [rsp + 0x40], rcx
lea rdi, [r12 + 0xc]
cmp byte [rdi + 0x10], 0
je 0x18022ac9c
mov ecx, dword [rdi - 0xc]
test ecx, ecx
jne 0x18022ab80
cmp dword [rbx + 0x534], 2
mov r8d, dword [rdi + 0x14]
mov rax, r9
mov r9d, dword [rdi + 0x18]
cmove rax, r10
lea rdx, [0x18005c0f0]
mov rcx, rbx
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call fcn.180226700
inc dword [rbx + 0x1c]
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
test cl, 0x10
je 0x18022ab8b
cmp dword [rdi - 4], 0
jne 0x18022abaa
test cl, 0x20
je 0x18022ab95
cmp dword [rdi], 0
jne 0x18022abaa
test cl, 0x40
je 0x18022aba0
cmp dword [rdi + 4], 0
jne 0x18022abaa
test cl, cl
jns 0x18022ac1c
cmp dword [rdi + 8], 0
je 0x18022ac1c
xor cl, cl
lea rdx, [rdi - 4]
mov r8, r15
nop word [rax + rax]
mov eax, dword [rdx]
movzx ecx, cl
add eax, 0xfffffff5
cmp eax, 0xb
cmovbe ecx, r14d
add rdx, 4
sub r8, 1
jne 0x18022abc0
test cl, cl
jne 0x18022ac7b
mov eax, dword [rdi + 0x18]
cmp dword [rbx + 0x534], 2
mov r8, r9
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x14]
lea rdx, [0x18005c150]
cmove r8, r10
mov r9d, esi
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
mov edx, dword [rdi + 0x14]
cmp esi, edx
je 0x18022ac89
lea r8, [rdx + rdx*4]
mov eax, dword [r12 + r8*8]
test eax, eax
je 0x18022ac82
cmp eax, ecx
jne 0x18022ac46
cmp dword [rbx + 0x534], 0
jne 0x18022ac97
mov eax, dword [r12 + r8*8 + 0x18]
cmp dword [rdi + 0xc], eax
je 0x18022ac90
mov eax, dword [rdi + 0x18]
cmp dword [rbx + 0x534], 2
mov r8, r9
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
lea rdx, [0x18005c210]
cmove r8, r10
mov r9d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
mov rcx, qword [rsp + 0x40]
jmp 0x18022ac9c
mov rcx, qword [rsp + 0x40]
cmp dword [rdi - 0xc], 0
je 0x18022ad23
mov r12, rbp
mov rbp, qword [rsp + 0x48]
mov esi, r14d
mov r14d, dword [rsp + 0x4a8]
xor r13b, r13b
nop dword [rax]
mov eax, esi
rol eax, 4
and eax, dword [rdi - 0xc]
test al, 0xf0
je 0x18022ad01
lea rax, [rcx + r12]
mov ecx, dword [rbp + rax*4]
test ecx, ecx
je 0x18022ace7
cmp ecx, 0xb
jl 0x18022ace2
cmp ecx, 0x16
jle 0x18022ad01
mov r13b, 1
jmp 0x18022ad01
test r13b, r13b
je 0x18022ad01
lea rdx, [0x18005c2e0]
mov r8d, r14d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rcx, qword [rsp + 0x40]
rol esi, 1
inc r12
sub r15, 1
jne 0x18022acc0
mov esi, dword [rsp + 0x4a8]
mov r12, qword [rsp + 0x48]
xor ebp, ebp
lea r14d, [rbp + 1]
inc esi
add rcx, 0xa
add rdi, 0x28
lea r9, [0x180034acf]
lea r10, [0x18005c0e4]
mov r15d, 4
mov dword [rsp + 0x4a8], esi
mov qword [rsp + 0x40], rcx
cmp esi, 0x20
jb 0x18022ab34
mov edx, dword [rsp + 0x4b0]
lea r9, [0x180034acf]
lea r10, [0x18005c0e4]
inc edx
mov dword [rsp + 0x4b0], edx
cmp edx, 3
jb 0x18022aad2
mov r8d, dword [rsp + 0x4a0]
mov rax, rbp
mov rdx, rbp
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rdx
mov r15d, ebp
nop dword [rax + rax]
mov ecx, ebp
mov dword [rsp + 0x4a8], ecx
test r8d, r8d
je 0x18022aeed
mov r8, rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x4b0], rax
mov rdx, rax
nop word [rax + rax]
mov rax, qword [rbx + 0xa658]
cmp dword [rax + rdx + 0x8f10], 0
je 0x18022aeaa
mov rsi, rbp
mov ebp, dword [rsp + 0x4a8]
xor r12b, r12b
mov edi, r14d
mov r13d, 4
nop dword [rax + rax]
mov rcx, qword [rbx + 0xa658]
mov eax, edi
rol eax, 4
and eax, dword [rdx + rcx + 0x8f10]
test al, 0xf0
je 0x18022ae92
lea rax, [r8 + rsi]
mov ecx, dword [rcx + rax*4 + 0x8f14]
test ecx, ecx
je 0x18022ae35
cmp ecx, 0xb
jl 0x18022ae30
cmp ecx, 0x16
jle 0x18022ae92
mov r12b, 1
jmp 0x18022ae92
test r12b, r12b
je 0x18022ae92
cmp dword [rbx + 0x534], 2
jne 0x18022ae70
cmp byte [rbx + 0x23], 0
je 0x18022ae70
lea rdx, [0x18005c3a0]
mov r9d, ebp
mov r8d, r15d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rdx, qword [rsp + 0x4b0]
mov r8, qword [rsp + 0x48]
jmp 0x18022ae92
lea rdx, [0x18005c470]
mov r8d, r15d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rdx, qword [rsp + 0x4b0]
mov r8, qword [rsp + 0x48]
rol edi, 1
inc rsi
sub r13, 1
jne 0x18022ae00
mov ecx, dword [rsp + 0x4a8]
xor ebp, ebp
inc ecx
add rdx, 0x280
add r8, 0xa0
mov dword [rsp + 0x4a8], ecx
mov qword [rsp + 0x4b0], rdx
mov qword [rsp + 0x48], r8
cmp ecx, dword [rsp + 0x4a0]
jb 0x18022add0
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x4a0]
add rdx, 5
add rax, 0x14
inc r15d
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], rax
cmp r15d, 0x20
jb 0x18022ada0
movzx eax, byte [rbx + 0x2d0fd]
cmp byte [rbx + 0x2d0fc], al
je 0x18022af2d
lea rdx, [0x18005c530]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
movzx eax, byte [rbx + 0x2d0ff]
cmp byte [rbx + 0x2d0fe], al
je 0x18022af4e
lea rdx, [0x18005c650]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
cmp byte [rbx + 0x2d0fe], 0
jne 0x18022af8f
cmp byte [rbx + 0x23], 0
jne 0x18022af8f
mov rax, qword [rbx + 0x38]
cmp word [rax + 2], 5
je 0x18022af8f
lea rax, [rbx + 0xb288]
nop
cmp byte [rax - 0x1c], 0
je 0x18022af81
cmp byte [rax], 0
jne 0x18022afc2
cmp byte [rax + 1], 0
jne 0x18022afc2
inc ebp
add rax, 0x24
cmp ebp, 0x80
jb 0x18022af70
mov r14, qword [rsp + 0x460]
mov r13, qword [rsp + 0x468]
mov r12, qword [rsp + 0x470]
mov rsi, qword [rsp + 0x478]
mov r15, qword [rsp + 0x458]
add rsp, 0x480
pop rdi
pop rbp
pop rbx
ret
lea rdx, [0x18005c780]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022af8f
mov eax, dword [rcx + 0x48]
lea r11, [0x180000000]
add eax, 0xfffffff7
cmp eax, 0xc5
ja case.0x18022b004.52
cdqe
movzx eax, byte [r11 + rax + 0x232854]
mov ecx, dword [r11 + rax*4 + 0x2327a4]
add rcx, r11
jmp rcx
mov r8d, dword [rbx + 0x58]
lea rax, [r8 + r8*2]
cmp byte [rbx + rax*4 + 0x55c], 0
je 0x18022b051
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005c810]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x404]
mov dword [rsp + 0x404], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + rax*4 + 0x55c], 1
mov edx, dword [rbx + 0x80]
test edx, edx
jne 0x18022b07b
mov r13d, 0x1000
mov byte [rbx + rax*4 + 0x55d], 1
mov dword [rbx + rax*4 + 0x560], r13d
jmp 0x18022b090
mov r13d, 0x1000
cmp edx, r13d
cmovb r13d, edx
mov dword [rbx + rax*4 + 0x560], r13d
mov eax, dword [rbx + 0x510]
lea rcx, [r8 + r8*2 + 0x159]
mov dword [rbx + rcx*4], eax
jmp 0x18022af8f
cmp dword [rbx + 0x510], 3
jne 0x18022af8f
cmp byte [rbx + 0x2d0f0], 0
je 0x18022b0f5
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005c870]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x40c]
mov dword [rsp + 0x40c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x514]
mov r13d, 0x1000
mov r9d, eax
shr r9d, 4
test al, 0xf
jne 0x18022b129
cmp r9d, r13d
ja 0x18022b129
test r9d, r9d
je 0x18022b129
mov byte [rbx + 0x2d0f0], 1
mov dword [rbx + 0x2d0f4], r9d
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x18005c8e0]
mov r8d, r13d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x414]
mov dword [rsp + 0x414], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 8], 0
je 0x18022b1a8
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005c9a0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x68], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rax + 8], 1
mov edx, dword [rbx + 0x510]
mov r13d, 0x1000
cmp edx, r13d
jbe 0x18022b1ff
mov eax, dword [rbx + 0x530]
mov r8d, edx
lea rdx, [0x18005ca00]
mov r9d, r13d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x330]
mov dword [rsp + 0x330], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp edx, r13d
mov ecx, r13d
cmovb ecx, edx
mov dword [rax + 4], ecx
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0x800c]
add ecx, dword [rax + 4]
add ecx, dword [rbx + 0x514]
cmp ecx, r13d
jbe 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005ca60]
mov r8d, r13d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x510]
mov r13d, 0x1000
cmp r8d, r13d
jb 0x18022b2b2
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cad0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x248]
mov dword [rsp + 0x248], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rdx, qword [rbx + 0xa658]
cmp dword [rdx + r8*8 + 0xc], 0
je 0x18022b2f4
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cb30]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x78], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x514]
mov eax, dword [rdx + 4]
mov ecx, dword [rdx + 0x800c]
add eax, r9d
add eax, ecx
cmp eax, r13d
jbe 0x18022b34a
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cb80]
mov r8d, r13d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3a8]
mov dword [rsp + 0x3a8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x518]
cmp r8d, 0x10
je 0x18022b3a5
cmp r8d, 0x30
je 0x18022b3a5
cmp r8d, 0x70
je 0x18022b3a5
cmp r8d, 0xf0
je 0x18022b3a5
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cc00]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x80]
mov dword [rsp + 0x80], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
lea eax, [r9 + rcx]
cmp eax, ecx
cmova ecx, eax
mov dword [rdx + 0x800c], ecx
mov edx, dword [rbx + 0x510]
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rbx + 0x518]
mov dword [rcx + rdx*8 + 0xc], eax
mov edx, dword [rbx + 0x510]
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rbx + 0x514]
mov dword [rcx + rdx*8 + 0x10], eax
jmp 0x18022af8f
movsxd r10, dword [rbx + 0x58]
mov eax, r10d
lea r11, [rax + rax*8]
cmp byte [rbx + r11*4 + 0xb26c], 0
je 0x18022b439
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cc60]
mov r8d, r10d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x250]
mov dword [rsp + 0x250], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + r11*4 + 0xb26c], 1
mov byte [rbx + r11*4 + 0xb288], 0
xor ebp, ebp
mov byte [rbx + r11*4 + 0xb289], 0
mov dword [rbx + r11*4 + 0xb28c], ebp
mov edx, dword [rbx + 0x510]
lea eax, [rdx - 1]
cmp eax, 9
ja case.default.0x18022b484
lea r8, [0x180000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x23291c]
add rcx, r8
jmp rcx
mov r8d, dword [rbx + 0x524]
test r8d, r8d
je 0x18022b579
mov eax, dword [rbx + 0x530]
lea rdx, [0x18005cca0]
mov r9d, r10d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x88]
mov dword [rsp + 0x88], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [rbx + 0x534], ebp
je 0x18022b529
cmp byte [rbx + 0x22], bpl
jne 0x18022b529
mov eax, dword [rbx + 0x530]
mov r8d, dword [rbx + 0x524]
lea rdx, [0x18005cd10]
mov r9d, r10d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x338]
mov dword [rsp + 0x338], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [rbx + 0x524], ebp
jne 0x18022b579
cmp byte [rbx + 0x22], bpl
jne 0x18022b579
mov eax, dword [rbx + 0x530]
lea rdx, [0x18005cd80]
mov r9d, r10d
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x90]
mov dword [rsp + 0x90], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + r11*4 + 0xb270], edx
mov r8, rbp
lea rdx, [rbx + 0x514]
nop dword [rax + rax]
mov r9d, dword [rdx]
lea eax, [r9 - 1]
cmp eax, 8
ja 0x18022b5cf
lea rcx, [r10 + 0x4f5]
inc ebp
add rdx, 4
lea rax, [r8 + rcx*8]
inc r8
add rcx, rax
mov dword [rbx + rcx*4], r9d
cmp ebp, 4
jb 0x18022b590
mov eax, dword [rbx + 0x524]
mov dword [rbx + r11*4 + 0xb284], eax
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x18005ce30]
mov r9d, r10d
mov r8d, ebp
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x258]
mov dword [rsp + 0x258], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cde0]
mov r8d, r10d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x98]
mov dword [rsp + 0x98], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x58]
cmp byte [rbx + r8*8 + 0x2c57c], 0
je 0x18022b695
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005ce90]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x400]
mov dword [rsp + 0x400], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + r8*8 + 0x2c57c], 1
mov ecx, dword [rbx + 0x510]
cmp ecx, 2
ja 0x18022b6b6
mov dword [rbx + r8*8 + 0x2c580], ecx
jmp 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005ced0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xa0]
mov dword [rsp + 0xa0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x610], 0
jne 0x18022b741
mov byte [rbx + 0x610], 1
cmp byte [rbx + 0x611], 0
je 0x18022b741
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005cf20]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x260]
mov dword [rsp + 0x260], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x58]
cmp ecx, 4
jb 0x18022b78e
mov eax, dword [rbx + 0x530]
mov r8d, ecx
lea rdx, [0x18005cfa0]
mov r9d, 3
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xa8]
mov dword [rsp + 0xa8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rcx + rbx + 0x2d0f8], 0
je 0x18022b7d4
mov r9d, dword [rbx + 0x530]
mov r8d, ecx
lea rdx, [0x18005d000]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x340]
mov dword [rsp + 0x340], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rcx + rbx + 0x2d0f8], 1
mov dword [rbx + 0x550], ecx
jmp 0x18022af8f
cmp dword [rbx + 0x100], 0
jne 0x18022af8f
mov eax, dword [rbx + 0x50]
mov ecx, dword [rbx + 0x510]
cmp eax, 1
je 0x18022bb59
cmp eax, 2
je 0x18022ba14
cmp eax, 0x18
jle 0x18022af8f
cmp eax, 0x1a
jle 0x18022b929
cmp eax, 0x1b
jne 0x18022af8f
movsxd r9, dword [rbx + 0x58]
test ecx, ecx
je 0x18022b8f0
cmp ecx, 0x20
ja 0x18022b8f0
lea r8d, [r9 + rcx]
cmp r8d, 0x20
ja 0x18022b8f0
dec r8d
mov edx, r9d
cmp r9d, r8d
ja 0x18022af8f
lea rcx, [r9 + r9*4]
shl rcx, 3
nop word [rax + rax]
mov rax, qword [rbx + 0xa658]
cmp byte [rcx + rax + 0x852c], 0
jne 0x18022b8b7
mov dword [rcx + rax + 0x8530], r9d
mov rax, qword [rbx + 0xa658]
inc edx
mov dword [rcx + rax + 0x8534], r8d
mov rax, qword [rbx + 0xa658]
add rcx, 0x28
mov byte [rcx + rax + 0x8504], 1
cmp edx, r8d
jbe 0x18022b870
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d090]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xb0]
mov dword [rsp + 0xb0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d040]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x268]
mov dword [rsp + 0x268], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd r9, dword [rbx + 0x80]
cmp eax, 0x19
jne 0x18022b945
mov r10, qword [rbx + 0xa658]
add r10, 0x8010
jmp 0x18022b953
mov r10, qword [rbx + 0xa658]
add r10, 0x8a10
test ecx, ecx
je 0x18022b9db
cmp ecx, 0x20
ja 0x18022b9db
lea r8d, [r9 + rcx]
cmp r8d, 0x20
ja 0x18022b9db
dec r8d
mov edx, r9d
cmp r9d, r8d
ja 0x18022af8f
lea rax, [r9 + r9*4]
lea rcx, [r10 + rax*8 + 0x1c]
cmp byte [rcx], 0
jne 0x18022b9a2
mov dword [rcx + 4], r9d
mov dword [rcx + 8], r8d
inc edx
mov byte [rcx], 1
add rcx, 0x28
cmp edx, r8d
jbe 0x18022b982
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d090]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xb8]
mov dword [rsp + 0xb8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d040]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3b0]
mov dword [rsp + 0x3b0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov edx, dword [rbx + 0x534]
movsxd r9, dword [rbx + 0x58]
test edx, edx
je 0x18022ba67
sub edx, 1
je 0x18022ba52
sub edx, 1
je 0x18022ba4b
sub edx, 1
je 0x18022ba44
cmp edx, 1
jne 0x18022ba3b
lea edi, [rdx + 0x1f]
jmp 0x18022ba6c
mov edi, dword [rsp + 0x4a0]
jmp 0x18022ba6c
mov edi, 0x20
jmp 0x18022ba6c
mov edi, 0x20
jmp 0x18022ba6c
cmp byte [rbx + 0x22], 0
mov edi, 0x20
mov eax, 0x10
cmovne eax, edi
mov edi, eax
jmp 0x18022ba6c
mov edi, 8
test ecx, ecx
je 0x18022bb20
cmp ecx, edi
ja 0x18022bb20
lea r8d, [r9 + rcx]
cmp r8d, edi
ja 0x18022bb20
dec r8d
mov edx, r9d
cmp r9d, r8d
ja 0x18022af8f
lea rcx, [r9 + r9*8]
shl rcx, 2
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx + 0x9928], 0
jne 0x18022bae7
mov dword [rax + rcx + 0x992c], r9d
mov rax, qword [rbx + 0xa658]
inc edx
mov dword [rax + rcx + 0x9930], r8d
mov rax, qword [rbx + 0xa658]
add rcx, 0x24
mov byte [rax + rcx + 0x9904], 1
cmp edx, r8d
jbe 0x18022baa0
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d140]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xc0]
mov dword [rsp + 0xc0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d0f0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x270]
mov dword [rsp + 0x270], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov edx, dword [rbx + 0x534]
test edx, edx
je 0x18022bbc2
sub edx, 1
je 0x18022bbaa
sub edx, 1
je 0x18022bb8f
cmp edx, 1
jne 0x18022bb7f
mov edx, dword [rbx + 0x80]
mov edi, 0x20
jmp 0x18022bbca
mov edx, dword [rsp + 0x4a0]
mov edi, dword [rsp + 0x4a0]
jmp 0x18022bbca
cmp byte [rbx + 0x22], 0
mov edx, dword [rbx + 0x80]
mov edi, 0x20
mov eax, 0x10
cmovne eax, edi
mov edi, eax
jmp 0x18022bbca
cmp byte [rbx + 0x22], 0
mov edx, dword [rbx + 0x58]
mov edi, 0x20
mov eax, 0x10
cmovne eax, edi
mov edi, eax
jmp 0x18022bbca
mov edx, dword [rbx + 0x58]
mov edi, 0x20
test ecx, ecx
je 0x18022bc81
cmp ecx, edi
ja 0x18022bc81
lea r9d, [rdx + rcx]
cmp r9d, edi
ja 0x18022bc81
dec r9d
mov r8d, edx
movsxd rax, edx
cmp edx, r9d
ja 0x18022af8f
lea rcx, [rax + rax*4]
shl rcx, 3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx + 0x802c], 0
jne 0x18022bc48
mov dword [rax + rcx + 0x8030], edx
mov rax, qword [rbx + 0xa658]
inc r8d
mov dword [rax + rcx + 0x8034], r9d
mov rax, qword [rbx + 0xa658]
add rcx, 0x28
mov byte [rax + rcx + 0x8004], 1
cmp r8d, r9d
jbe 0x18022bc01
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d090]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xc8]
mov dword [rsp + 0xc8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d040]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x348]
mov dword [rsp + 0x348], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x611], 1
mov eax, dword [rbx + 0x550]
cmp byte [rbx + rax*8 + 0x2d0b8], 0
je 0x18022bd4c
cmp byte [rbx + 0x23], 0
je 0x18022bd13
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005d1a0]
mov r8d, eax
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xd0]
mov dword [rsp + 0xd0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d200]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x278]
mov dword [rsp + 0x278], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + rax*8 + 0x2d0b8], 1
mov edx, dword [rbx + 0x510]
mov ecx, edx
sub ecx, 1
je 0x18022bda4
sub ecx, 2
je 0x18022bda4
cmp ecx, 2
je 0x18022bda4
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d250]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xd8]
mov dword [rsp + 0xd8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x550]
mov dword [rbx + rax*8 + 0x2d0bc], edx
jmp 0x18022af8f
mov r9d, dword [rbx + 0x510]
cmp r9d, 0x400
jbe 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x18005d2a0]
mov r8d, 0x400
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022af8f
cmp byte [rbx + 0x2d0d9], 0
je 0x18022be13
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d320]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov r8d, dword [rbx + 0x510]
cmp r8d, 0x20
jbe 0x18022be51
mov eax, dword [rbx + 0x530]
mov r9d, r8d
lea rdx, [0x18005d370]
mov r8d, 0x20
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0d9], 1
jmp 0x18022af8f
cmp r8d, 1
jae 0x18022be70
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005d3e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0d9], 1
jmp 0x18022af8f
cmp byte [rbx + 0x2c5fc], 0
je 0x18022bebe
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d440]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3e8]
mov dword [rsp + 0x3e8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x2c5fc], 1
mov ecx, dword [rbx + 0x510]
mov dword [rbx + 0x2c600], ecx
cmp byte [rbx + 0x23], 0
jne 0x18022bf18
lea eax, [rcx - 8]
cmp eax, 0x1f
ja 0x18022bf18
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d490]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xe0]
mov dword [rsp + 0xe0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
call fcn.180241290
mov dword [rbx + 0x2c604], eax
test eax, eax
jne 0x18022bf68
cmp dword [rbx + 0x2c600], eax
je 0x18022bf68
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d510]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x280]
mov dword [rsp + 0x280], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x510]
mov dword [rbx + 0x2c600], eax
jmp 0x18022af8f
mov ecx, dword [rbx + 0x50]
cmp ecx, 0x28
jne 0x18022c008
cmp byte [rbx + 0x23], 0
jne 0x18022bfa4
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d560]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
cmp dword [rax + 0xa018], 0
je 0x18022bfcd
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d5c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov edi, dword [rbx + 0xe4]
cmp edi, 0x30
je 0x18022bff6
cmp edi, 0x10
je 0x18022bff6
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d610]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov dword [rax + 0xa018], edi
jmp 0x18022af8f
mov r8, qword [rbx + 0xa658]
mov r9d, dword [rbx + 0x534]
lea rdx, [r8 + 0x8010]
test r9d, r9d
je 0x18022c53a
sub r9d, 2
je 0x18022c42e
sub r9d, 1
je 0x18022c2b9
sub r9d, 1
je 0x18022c1eb
cmp r9d, 1
je 0x18022c053
mov r8d, dword [rbx + 0x58]
jmp 0x18022c452
sub ecx, 0x20
je 0x18022c18b
sub ecx, 1
je 0x18022c12b
sub ecx, 1
je 0x18022c0cb
cmp ecx, 2
jne 0x18022c257
cmp byte [r8 + 0xa014], 0
je 0x18022c096
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d970]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
cmp dword [rbx + 0xe4], 0
je 0x18022c0b8
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d9e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov byte [rax + 0xa014], 1
jmp 0x18022af8f
cmp dword [r8 + 0xa010], 0
je 0x18022c0ee
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d870]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov edi, dword [rbx + 0xe4]
test edi, edi
je 0x18022c100
test edi, 0xffffff8f
je 0x18022c119
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d8d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov dword [rax + 0xa010], edi
jmp 0x18022af8f
cmp dword [r8 + 0xa00c], 0
je 0x18022c14e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d770]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov edi, dword [rbx + 0xe4]
test edi, edi
je 0x18022c160
test edi, 0xffffff8f
je 0x18022c179
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d7d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov dword [rax + 0xa00c], edi
jmp 0x18022af8f
cmp dword [r8 + 0xa008], 0
je 0x18022c1ae
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d670]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov edi, dword [rbx + 0xe4]
test edi, edi
je 0x18022c1c0
test edi, 0xffffff8f
je 0x18022c1d9
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005d6d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov dword [rax + 0xa008], edi
jmp 0x18022af8f
sub ecx, 0xb
je 0x18022c28b
sub ecx, 0xe
je 0x18022c274
sub ecx, 2
je 0x18022c264
cmp ecx, 1
jne 0x18022c257
cmp dword [rbx + 0x2ccb4], 0
je 0x18022c225
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dd70]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov eax, dword [rbx + 0xe4]
mov dword [rbx + 0x2ccb4], eax
test eax, eax
jne 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ddc0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022af8f
mov r8d, dword [rsp + 0x4a0]
jmp 0x18022c452
lea rdx, [r8 + 0x8510]
mov r8d, dword [rbx + 0x58]
jmp 0x18022c452
mov r8d, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rcx, [r8 + r8*4]
mov dword [rdx + rcx*8 + 4], eax
jmp 0x18022c452
cmp byte [rbx + 0x2ccb3], 0
je 0x18022c2ad
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dd20]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2ccb3], 1
jmp 0x18022af8f
add ecx, 0xfffffff5
cmp ecx, 0x10
ja case.0x18022c2d3.12
movsxd rax, ecx
mov ecx, dword [r11 + rax*4 + 0x232944]
add rcx, r11
jmp rcx
cmp byte [r8 + 0xa000], 0
je 0x18022c2f8
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005da60]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov byte [rax + 0xa000], 1
jmp 0x18022af8f
cmp byte [r8 + 0xa005], 0
je 0x18022c32e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dac0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov byte [rax + 0xa005], 1
jmp 0x18022af8f
cmp byte [r8 + 0xa002], 0
je 0x18022c364
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005db20]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov byte [rax + 0xa002], 1
jmp 0x18022af8f
cmp byte [r8 + 0xa004], 0
je 0x18022c39a
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005db80]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov byte [rax + 0xa004], 1
jmp 0x18022af8f
lea rdx, [r8 + 0x8510]
mov r8d, dword [rbx + 0x58]
jmp 0x18022c452
cmp byte [rbx + 0x2c626], 0
jne 0x18022c3ff
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dbe0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xe8]
mov dword [rsp + 0xe8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x58]
lea rdx, [r8 + 0x8a10]
mov r8d, dword [rbx + 0x80]
lea rcx, [r8 + r8*4]
mov dword [rdx + rcx*8 + 4], eax
jmp 0x18022c452
mov r8d, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rcx, [r8 + r8*4]
mov dword [rdx + rcx*8 + 4], eax
jmp 0x18022c452
cmp ecx, 0xb
je 0x18022c50c
cmp ecx, 0x25
je 0x18022c4de
mov r8d, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rcx, [r8 + r8*4]
mov dword [rdx + rcx*8 + 4], eax
mov r10d, dword [rbx + 0xe4]
mov r9d, r8d
lea r11, [r9 + r9*4]
test dword [rdx + r11*8], r10d
je 0x18022c49f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005df10]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x350]
mov dword [rsp + 0x350], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
xor ebp, ebp
mov r14d, 1
lea ebx, [rbp + 4]
mov r8, rbp
nop dword [rax]
mov eax, r14d
rol eax, 4
and eax, r10d
test al, 0xf0
je 0x18022c4c9
lea rax, [r9 + r9*4]
lea rcx, [r8 + rax*2]
mov dword [rdx + rcx*4 + 8], ebp
rol r14d, 1
inc r8
sub rbx, 1
jne 0x18022c4b0
or dword [rdx + r11*8], r10d
jmp 0x18022af8f
cmp byte [rbx + 0x2d0da], 0
je 0x18022c500
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005de70]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0da], 1
jmp 0x18022af8f
cmp byte [rbx + 0x2d0d8], 0
je 0x18022c52e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005de20]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0d8], 1
jmp 0x18022af8f
cmp ecx, 0x23
jne 0x18022af8f
cmp byte [rbx + 0x2d0ec], 0
je 0x18022c565
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dec0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0ec], 1
jmp 0x18022af8f
cmp dword [rbx + 0x534], 2
mov r9d, dword [rbx + 0xe4]
jne 0x18022c59f
mov r8d, dword [rbx + 0x80]
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rbx + 0x58]
lea rdx, [r8 + r8*4]
mov dword [rcx + rdx*8 + 0x8014], eax
jmp 0x18022c5a3
mov r8d, dword [rbx + 0x58]
mov eax, r8d
lea r11, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
test dword [rax + r11*8 + 0x8010], r9d
je 0x18022c5f4
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005df10]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xf0]
mov dword [rsp + 0xf0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x510]
cmp eax, 6
je 0x18022c608
cmp eax, 8
jne 0x18022c782
cmp dword [rbx + 0x534], 1
jne 0x18022c782
cmp r9d, 0x10
je 0x18022c669
cmp r9d, 0x20
je 0x18022c669
cmp r9d, 0x40
je 0x18022c669
cmp r9d, 0x80
je 0x18022c669
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dff0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x288]
mov dword [rsp + 0x288], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
xor ebp, ebp
movsxd r10, r8d
mov r14d, 1
mov r8, rbp
nop word [rax + rax]
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r9b, al
je 0x18022c6f2
mov rcx, qword [rbx + 0xa658]
lea rax, [r10 + r10*4]
lea rdx, [r8 + rax*2]
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8018], eax
mov eax, dword [rbx + 0x510]
cmp eax, 6
je 0x18022c6d9
cmp eax, 8
jne 0x18022c6f2
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9da8]
test eax, eax
jne 0x18022c710
inc eax
mov dword [rcx + 0x9da8], eax
jmp 0x18022c6f2
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9da4]
test eax, eax
jne 0x18022c749
inc eax
mov dword [rcx + 0x9da4], eax
inc ebp
inc r8
cmp ebp, 4
jb 0x18022c680
mov rax, qword [rbx + 0xa658]
or dword [rax + r11*8 + 0x8010], r9d
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e090]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xf8]
mov dword [rsp + 0xf8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e040]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3b8]
mov dword [rsp + 0x3b8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dfa0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x100]
mov dword [rsp + 0x100], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rcx, qword [rbx + 0xa658]
mov edx, dword [rbx + 0x534]
sub edx, 2
lea rsi, [rcx + 0x8010]
lea rdi, [rcx + 0x9d90]
je 0x18022c8cb
sub edx, 1
je 0x18022c837
cmp edx, 1
je 0x18022c7f1
mov ebp, dword [rbx + 0x58]
jmp 0x18022c8dd
mov eax, dword [rbx + 0x50]
cmp eax, 0x19
je 0x18022c820
cmp eax, 0x1b
jne 0x18022c814
mov ebp, dword [rbx + 0x58]
lea rsi, [rcx + 0x8510]
lea rdi, [rcx + 0x9de8]
jmp 0x18022c8dd
mov ebp, dword [rsp + 0x4a0]
jmp 0x18022c8dd
mov ebp, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rcx, [rbp + rbp*4]
mov dword [rsi + rcx*8 + 4], eax
jmp 0x18022c8dd
mov edx, dword [rbx + 0x50]
sub edx, 0x1a
je 0x18022c86e
cmp edx, 1
je 0x18022c85b
mov ebp, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rcx, [rbp + rbp*4]
mov dword [rsi + rcx*8 + 4], eax
jmp 0x18022c8dd
mov ebp, dword [rbx + 0x58]
lea rsi, [rcx + 0x8510]
lea rdi, [rcx + 0x9de8]
jmp 0x18022c8dd
cmp byte [rbx + 0x2c626], 0
jne 0x18022c8b0
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dbe0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x290]
mov dword [rsp + 0x290], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ebp, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rsi, [rcx + 0x8a10]
lea rcx, [rbp + rbp*4]
mov dword [rsi + rcx*8 + 4], eax
jmp 0x18022c8dd
mov ebp, dword [rbx + 0x80]
mov eax, dword [rbx + 0x58]
lea rcx, [rbp + rbp*4]
mov dword [rsi + rcx*8 + 4], eax
mov r12d, dword [rbx + 0xe4]
mov eax, ebp
lea r15, [rax + rax*4]
test dword [rsi + r15*8], r12d
je 0x18022c92c
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005df10]
mov r8d, ebp
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x108]
mov dword [rsp + 0x108], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov edx, dword [rbx + 0x510]
test edx, edx
jle 0x18022d03d
cmp edx, 3
jle 0x18022c9b6
lea eax, [rdx - 0xb]
cmp eax, 0xb
ja 0x18022d03d
cmp dword [rbx + 0x50], 0x1b
jne 0x18022c97d
mov ecx, dword [rbx + 0x534]
cmp ecx, 4
je 0x18022c9e9
cmp ecx, 3
jne 0x18022c971
mov rax, qword [rbx + 0xa658]
cmp dword [rax], 4
je 0x18022c9e9
mov rax, qword [rbx + 0xa658]
cmp dword [rax], 5
je 0x18022c9e9
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e0e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x358]
mov dword [rsp + 0x358], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x534]
cmp ecx, 2
je 0x18022c9e9
cmp ecx, 1
je 0x18022c9e9
cmp ecx, 4
jne 0x18022c9d1
cmp dword [rbx + 0x50], 0x1b
je 0x18022c9e9
cmp ecx, 3
jne 0x18022d03d
mov rax, qword [rbx + 0xa658]
cmp dword [rax], ecx
jne 0x18022d03d
cmp ecx, 3
je 0x18022c9f7
cmp ecx, 4
jne case.default.0x18022ca6e
cmp ecx, 3
jne 0x18022ca05
mov r13d, dword [rbx + 0x2c614]
jmp 0x18022ca0c
mov r13d, dword [rbx + 0x2ccac]
lea eax, [rdx - 0xb]
cmp eax, 0xb
ja 0x18022ca4f
cmp r12d, 0x10
je 0x18022ca4f
cmp r12d, 0x20
je 0x18022ca4f
cmp r12d, 0x40
je 0x18022ca4f
cmp r12d, 0x80
je 0x18022ca4f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e130]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea r11, [0x180000000]
mov edx, dword [rbx + 0x510]
lea eax, [rdx - 0xb]
cmp eax, 0xb
ja case.default.0x18022ca6e
cdqe
mov ecx, dword [r11 + rax*4 + 0x232988]
add rcx, r11
jmp rcx
cmp r13d, 3
je case.default.0x18022ca6e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e190]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x110]
mov dword [rsp + 0x110], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp r13d, 2
je case.default.0x18022ca6e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e1f0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x298]
mov dword [rsp + 0x298], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp r13d, 1
je case.default.0x18022ca6e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e250]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x118]
mov dword [rsp + 0x118], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd r8, ebp
xor ebp, ebp
dec edx
lea r14d, [rbp + 1]
cmp edx, 0x15
ja case.0x18022cb4f.4
movsxd rax, edx
mov ecx, dword [r11 + rax*4 + 0x2329b8]
add rcx, r11
jmp rcx
mov eax, dword [rdi + 0x28]
test eax, eax
je 0x18022cb91
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e2b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x410]
mov dword [rsp + 0x410], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x28], eax
mov rdx, rbp
nop dword [rax]
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r12b, al
je 0x18022cbe3
lea rax, [r8 + r8*4]
lea rcx, [rdx + rax*2]
mov eax, dword [rbx + 0x510]
mov dword [rsi + rcx*4 + 8], eax
mov eax, dword [rbx + 0x510]
add eax, 0xfffffffe
cmp eax, r14d
ja 0x18022cbe3
mov eax, dword [rdi + 4]
cmp eax, 8
ja 0x18022cffe
inc eax
mov dword [rdi + 4], eax
inc ebp
inc rdx
cmp ebp, 4
jb 0x18022cba0
or dword [rsi + r15*8], r12d
jmp 0x18022af8f
mov eax, dword [rdi + 0x2c]
test eax, eax
je 0x18022cc36
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e310]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x120]
mov dword [rsp + 0x120], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x2c], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x30]
test eax, eax
je 0x18022cc80
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e370]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2a0]
mov dword [rsp + 0x2a0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x30], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x34]
test eax, eax
je 0x18022ccca
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e3d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x128]
mov dword [rsp + 0x128], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x34], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x38]
test eax, eax
je 0x18022cd14
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e430]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x360]
mov dword [rsp + 0x360], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x38], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x3c]
test eax, eax
je 0x18022cd5e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e490]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x130]
mov dword [rsp + 0x130], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x3c], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x40]
test eax, eax
je 0x18022cda8
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e4f0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x2a8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x40], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x44]
test eax, eax
je 0x18022cdf2
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e550]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x138]
mov dword [rsp + 0x138], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x44], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x48]
test eax, eax
je 0x18022ce3c
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e5b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3c0]
mov dword [rsp + 0x3c0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x48], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x4c]
test eax, eax
je 0x18022ce86
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e610]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x140]
mov dword [rsp + 0x140], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x4c], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x50]
test eax, eax
je 0x18022ced0
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e670]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2b0]
mov dword [rsp + 0x2b0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x50], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi + 0x54]
test eax, eax
je 0x18022cf1a
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e6d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x148]
mov dword [rsp + 0x148], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x54], eax
jmp case.0x18022cb4f.4
mov eax, dword [rdi]
test eax, eax
je 0x18022cf63
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e730]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x368]
mov dword [rsp + 0x368], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi], eax
jmp case.0x18022cb4f.4
lea rax, [r8 + r8*4]
mov edx, ebp
mov r9, rbp
mov r10d, dword [rsi + rax*8]
nop dword [rax]
lea ecx, [rdx + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r10b, al
je 0x18022cfa8
lea rax, [r8 + r8*4]
lea rcx, [r9 + rax*2]
mov eax, dword [rsi + rcx*4 + 8]
cmp eax, 2
je 0x18022cfb5
cmp eax, 3
je 0x18022cfb5
inc edx
inc r9
cmp edx, 4
jb 0x18022cf80
inc dword [rdi + 8]
cmp dword [rdi + 8], 2
jbe case.0x18022cb4f.4
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e780]
mov r8d, 2
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x150]
mov dword [rsp + 0x150], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e830]
mov r8d, 8
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2b8]
mov dword [rsp + 0x2b8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e0e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x158]
mov dword [rsp + 0x158], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd rdi, dword [rbx + 0x58]
mov r10d, dword [rbx + 0xe4]
mov eax, edi
lea r11, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
test dword [rax + r11*8 + 0x8010], r10d
je 0x18022d0d4
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e8b0]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3f0]
mov dword [rsp + 0x3f0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
xor ebp, ebp
mov r14d, 1
lea esi, [rbp + 4]
mov r8, rbp
mov edx, r14d
nop word [rax + rax]
mov eax, edx
rol eax, 4
and eax, r10d
test al, 0xf0
je 0x18022d112
lea rax, [rdi + rdi*4]
lea rcx, [r8 + rax*2]
mov rax, qword [rbx + 0xa658]
mov dword [rax + rcx*4 + 0x8018], ebp
rol edx, 1
inc r8
sub rsi, r14
jne 0x18022d0f0
mov eax, dword [rbx + 0x510]
test eax, eax
jle 0x18022d1f7
cmp eax, 5
jle 0x18022d149
cmp eax, 7
jg 0x18022d1f7
cmp byte [rbx + 0x22], bpl
je 0x18022d1f7
mov byte [rbx + 0x2d0e4], r14b
mov rdx, qword [rbx + 0xa658]
cmp dword [rdx + r11*8 + 0x8010], ebp
je 0x18022d199
lea r8, [rdi + rdi*4]
mov r9d, dword [rdx + r8*8 + 0x8010]
nop word [rax + rax]
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r9b, al
je 0x18022d192
mov eax, dword [rbx + 0x510]
cmp dword [rdx + r8*8 + 0x8028], eax
jne 0x18022d1bb
inc ebp
cmp ebp, 4
jb 0x18022d170
mov eax, dword [rbx + 0x510]
mov dword [rdx + r11*8 + 0x8028], eax
mov rax, qword [rbx + 0xa658]
or dword [rax + r11*8 + 0x8010], r10d
jmp 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e990]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x160]
mov dword [rsp + 0x160], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e940]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2c0]
mov dword [rsp + 0x2c0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd rsi, dword [rbx + 0x58]
mov r10d, dword [rbx + 0xe4]
mov eax, esi
lea rdi, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
test dword [rax + rdi*8 + 0x8010], r10d
je 0x18022d291
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005df10]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x168]
mov dword [rsp + 0x168], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
sub ecx, 7
je 0x18022d2e6
sub ecx, 2
je 0x18022d2e6
cmp ecx, 1
je 0x18022d2df
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dfa0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x370]
mov dword [rsp + 0x370], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x2d0e4], 1
cmp r10d, 0x10
je 0x18022d33a
cmp r10d, 0x20
je 0x18022d33a
cmp r10d, 0x40
je 0x18022d33a
cmp r10d, 0x80
je 0x18022d33a
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dff0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x170]
mov dword [rsp + 0x170], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
xor ebp, ebp
mov r14d, 1
mov r8d, ebp
mov r9, rbp
nop dword [rax + rax]
lea ecx, [r8 + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r10b, al
je 0x18022d3f3
mov rcx, qword [rbx + 0xa658]
lea rax, [rsi + rsi*4]
lea rdx, [r9 + rax*2]
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8018], eax
mov ecx, dword [rbx + 0x510]
sub ecx, 7
je 0x18022d3d6
sub ecx, 2
je 0x18022d3b7
cmp ecx, r14d
jne 0x18022d3f3
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9db4]
test eax, eax
jne 0x18022d44c
inc eax
mov dword [rcx + 0x9db4], eax
jmp 0x18022d3f3
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9db0]
test eax, eax
jne 0x18022d485
inc eax
mov dword [rcx + 0x9db0], eax
jmp 0x18022d3f3
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9dac]
test eax, eax
jne 0x18022d4be
inc eax
mov dword [rcx + 0x9dac], eax
inc r8d
inc r9
cmp r8d, 4
jb 0x18022d350
cmp dword [rbx + 0x514], r14d
je 0x18022d4f7
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005eb00]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x180]
mov dword [rsp + 0x180], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005eab0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2c8]
mov dword [rsp + 0x2c8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ea60]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x178]
mov dword [rsp + 0x178], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ea10]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3c8]
mov dword [rsp + 0x3c8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rdx, qword [rbx + 0xa658]
cmp dword [rdx + rdi*8 + 0x8010], ebp
je 0x18022d543
lea r8, [rsi + rsi*4]
mov r9d, dword [rdx + r8*8 + 0x8010]
nop word [rax + rax]
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r9b, al
je 0x18022d53c
cmp dword [rdx + r8*8 + 0x8028], r14d
jne 0x18022d55f
inc ebp
cmp ebp, 4
jb 0x18022d520
mov dword [rdx + rdi*8 + 0x8028], r14d
mov rax, qword [rbx + 0xa658]
or dword [rax + rdi*8 + 0x8010], r10d
jmp 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e990]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2d0]
mov dword [rsp + 0x2d0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd rsi, dword [rbx + 0x58]
mov r10, qword [rbx + 0xa658]
mov r11d, dword [rbx + 0xe4]
mov eax, esi
lea r12, [rax + rax*4]
test dword [r10 + r12*8 + 0x8010], r11d
je 0x18022d5f9
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005df10]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x188]
mov dword [rsp + 0x188], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
lea eax, [rcx - 1]
cmp eax, 4
ja 0x18022db5e
mov r14d, 1
xor ebp, ebp
cmp ecx, r14d
je 0x18022d8db
cmp ecx, r14d
jle 0x18022d95b
cmp ecx, 3
jle 0x18022d7d7
cmp ecx, 5
jg 0x18022d95b
cmp r11d, 0x10
je 0x18022d68b
cmp r11d, 0x20
je 0x18022d68b
cmp r11d, 0x40
je 0x18022d68b
cmp r11d, 0x80
je 0x18022d68b
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ecb0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x378]
mov dword [rsp + 0x378], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, ebp
mov r10, rbp
lea ecx, [r9 + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r11b, al
je 0x18022d70c
mov rcx, qword [rbx + 0xa658]
lea rax, [rsi + rsi*4]
lea rdx, [r10 + rax*2]
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8018], eax
mov ecx, dword [rbx + 0x510]
sub ecx, 4
je 0x18022d6ef
cmp ecx, r14d
jne 0x18022d70c
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9da0]
test eax, eax
jne 0x18022d765
inc eax
mov dword [rcx + 0x9da0], eax
jmp 0x18022d70c
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9d9c]
test eax, eax
jne 0x18022d79e
inc eax
mov dword [rcx + 0x9d9c], eax
inc r9d
inc r10
cmp r9d, 4
jb 0x18022d691
cmp dword [rbx + 0x514], r14d
je 0x18022d95b
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005ede0]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x198]
mov dword [rsp + 0x198], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ed90]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x190]
mov dword [rsp + 0x190], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ed30]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2d8]
mov dword [rsp + 0x2d8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
lea rax, [rsi + rsi*4]
mov edx, ebp
mov r9, rbp
mov edi, dword [r10 + rax*8 + 0x8010]
nop dword [rax + rax]
lea ecx, [rdx + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test dil, al
je 0x18022d81c
lea rax, [rsi + rsi*4]
lea rcx, [r9 + rax*2]
mov eax, dword [r10 + rcx*4 + 0x8018]
cmp eax, 2
je 0x18022d82d
cmp eax, 3
je 0x18022d82d
inc edx
inc r9
cmp edx, 4
jb 0x18022d7f0
inc dword [r10 + 0x9d98]
mov rax, qword [rbx + 0xa658]
cmp dword [rax + 0x9d98], 2
jbe 0x18022d87c
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e780]
mov r8d, 2
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x408]
mov dword [rsp + 0x408], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x514]
cmp eax, 2
jl 0x18022d89f
cmp eax, 3
jle 0x18022d95b
cmp eax, 6
jne 0x18022d89f
cmp byte [rbx + 0x22], bpl
jne 0x18022d95b
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005ec10]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [r10 + 0x9d90]
test eax, eax
je 0x18022d91f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e730]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2e0]
mov dword [rsp + 0x2e0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [r10 + 0x9d90], eax
mov eax, dword [rbx + 0x514]
mov dword [rbx + 0x2d0e8], eax
mov eax, dword [rbx + 0x514]
cmp eax, 4
jl 0x18022db22
cmp eax, 5
jle 0x18022d95b
cmp eax, 7
jne 0x18022db22
cmp byte [rbx + 0x22], bpl
je 0x18022db22
mov r9d, ebp
mov r10, rbp
lea ecx, [r9 + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r11b, al
je 0x18022d9bc
mov rcx, qword [rbx + 0xa658]
lea rax, [rsi + rsi*4]
lea rdx, [r10 + rax*2]
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8018], eax
mov eax, dword [rbx + 0x510]
add eax, 0xfffffffe
cmp eax, r14d
ja 0x18022d9bc
mov rcx, qword [rbx + 0xa658]
mov eax, dword [rcx + 0x9d94]
cmp eax, 8
ja 0x18022da6b
inc eax
mov dword [rcx + 0x9d94], eax
inc r9d
inc r10
cmp r9d, 4
jb 0x18022d961
mov eax, dword [rbx + 0x514]
test eax, eax
jle 0x18022dae6
cmp eax, 5
jle 0x18022d9f5
cmp eax, 7
jg 0x18022dae6
cmp byte [rbx + 0x22], bpl
je 0x18022dae6
mov byte [rbx + 0x2d0e4], r14b
mov rdx, qword [rbx + 0xa658]
cmp dword [rdx + r12*8 + 0x8010], ebp
je 0x18022da49
lea r9, [rsi + rsi*4]
mov r8d, dword [rdx + r9*8 + 0x8010]
nop word [rax + rax]
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r8b, al
je 0x18022da42
mov eax, dword [rbx + 0x514]
cmp dword [rdx + r9*8 + 0x8028], eax
jne 0x18022daaa
inc ebp
cmp ebp, 4
jb 0x18022da20
mov eax, dword [rbx + 0x514]
mov dword [rdx + r12*8 + 0x8028], eax
mov rax, qword [rbx + 0xa658]
or dword [rax + r12*8 + 0x8010], r11d
jmp 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e830]
mov r8d, 8
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1a8]
mov dword [rsp + 0x1a8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e990]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x380]
mov dword [rsp + 0x380], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e940]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1b0]
mov dword [rsp + 0x1b0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005eb60]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2e8]
mov dword [rsp + 0x2e8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e0e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1b8]
mov dword [rsp + 0x1b8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x611], 1
mov eax, dword [rbx + 0x50]
cmp eax, 0xc
je 0x18022dbbd
cmp eax, 0xf
je 0x18022dbeb
cmp eax, 0x25
jle 0x18022dc43
cmp eax, 0x27
jg 0x18022dc43
movzx ecx, byte [rbx + 0x2d0dc]
test cl, cl
je 0x18022dc16
cmp dword [rbx + 0x2d0e0], eax
jne 0x18022dc16
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ee70]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022dc33
cmp byte [rbx + 0x2d0ed], 0
je 0x18022dc0d
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ef40]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0ed], 1
jmp 0x18022dc43
test cl, cl
je 0x18022dc33
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005eec0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0dc], 1
mov eax, dword [rbx + 0x50]
mov dword [rbx + 0x2d0e0], eax
movsxd rdx, dword [rbx + 0x58]
mov r9d, dword [rbx + 0xc470]
mov r10d, dword [rbx + 0xe4]
cmp edx, r9d
jb 0x18022dc99
mov eax, dword [rbx + 0x530]
mov r8d, edx
lea rdx, [0x18005ef90]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3d0]
mov dword [rsp + 0x3d0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0xc46c]
lea ecx, [rdx + 1]
mov r9d, edx
cmp eax, ecx
cmova ecx, eax
mov dword [rbx + 0xc46c], ecx
mov eax, dword [rbx + 0x550]
shl rax, 5
add rax, r9
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
test dword [rax + rcx*4 + 0x8f10], r10d
je 0x18022dd0e
mov r9d, dword [rbx + 0x530]
mov r8d, edx
lea rdx, [0x18005f020]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1c0]
mov dword [rsp + 0x1c0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
xor ebp, ebp
mov r8, rdx
mov r14d, 1
lea r11d, [rbp + 4]
mov rdx, rbp
mov eax, r14d
rol eax, 4
and eax, r10d
test al, 0xf0
je 0x18022dd4f
mov ecx, dword [rbx + 0x550]
shl rcx, 5
add rcx, r8
lea rax, [rdx + rcx*4]
add rcx, rax
mov rax, qword [rbx + 0xa658]
mov dword [rax + rcx*4 + 0x8f14], ebp
rol r14d, 1
inc rdx
sub r11, 1
jne 0x18022dd20
mov eax, dword [rbx + 0x550]
shl rax, 5
add rax, r9
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
or dword [rax + rcx*4 + 0x8f10], r10d
mov rax, qword [rbx + 0xa658]
lea rcx, [r9 + r9*8]
or dword [rax + rcx*4 + 0x9910], r10d
jmp 0x18022af8f
mov byte [rbx + 0x611], 1
mov r9d, dword [rbx + 0x550]
movsxd rcx, dword [rbx + 0x58]
mov r10, qword [rbx + 0xa658]
mov r11d, dword [rbx + 0xe4]
mov rax, r9
shl rax, 5
mov edi, ecx
add rax, rdi
lea rax, [rax + rax*4]
test dword [r10 + rax*4 + 0x8f10], r11d
je 0x18022de09
mov r9d, dword [rbx + 0x530]
mov r8d, ecx
lea rdx, [0x18005f0b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2f0]
mov dword [rsp + 0x2f0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x510]
cmp eax, 7
je 0x18022de1d
cmp eax, 9
jne 0x18022dfc4
cmp dword [rbx + 0x534], 2
jne 0x18022dfc4
cmp r11d, 0x10
je 0x18022de7e
cmp r11d, 0x20
je 0x18022de7e
cmp r11d, 0x40
je 0x18022de7e
cmp r11d, 0x80
je 0x18022de7e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dff0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1c8]
mov dword [rsp + 0x1c8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
imul r9, r9, 0x58
xor ebp, ebp
mov rsi, rcx
mov r8, rbp
mov r14d, 1
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r11b, al
je 0x18022df0c
mov edx, dword [rbx + 0x550]
mov rcx, qword [rbx + 0xa658]
shl rdx, 5
add rdx, rsi
lea rax, [r8 + rdx*4]
add rdx, rax
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8f14], eax
mov eax, dword [rbx + 0x510]
cmp eax, 7
je 0x18022def2
cmp eax, 9
jne 0x18022df0c
mov eax, dword [r9 + r10 + 0x9eb8]
test eax, eax
jne 0x18022df52
inc eax
mov dword [r9 + r10 + 0x9eb8], eax
jmp 0x18022df0c
mov eax, dword [r9 + r10 + 0x9eb4]
test eax, eax
jne 0x18022df8b
inc eax
mov dword [r9 + r10 + 0x9eb4], eax
inc ebp
inc r8
cmp ebp, 4
jb 0x18022de90
mov eax, dword [rbx + 0x550]
shl rax, 5
add rax, rdi
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
or dword [rax + rcx*4 + 0x8f10], r11d
mov rax, qword [rbx + 0xa658]
lea rcx, [rdi + rdi*8]
or dword [rax + rcx*4 + 0x9910], r11d
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f190]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x388]
mov dword [rsp + 0x388], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f140]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1d0]
mov dword [rsp + 0x1d0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005dfa0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2f8]
mov dword [rsp + 0x2f8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x611], 1
mov r9d, dword [rbx + 0x550]
movsxd rbp, dword [rbx + 0x58]
mov rdx, qword [rbx + 0xa658]
mov esi, dword [rbx + 0xe4]
mov rax, r9
shl rax, 5
mov r13d, ebp
add rax, r13
lea rax, [rax + rax*4]
test dword [rdx + rax*4 + 0x8f10], esi
je 0x18022e072
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005f0b0]
mov r8d, ebp
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1d8]
mov dword [rsp + 0x1d8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x510]
lea eax, [r8 - 1]
cmp eax, 0x15
ja case.0x18022e09c.4
cdqe
movzx eax, byte [r11 + rax + 0x232a20]
mov ecx, dword [r11 + rax*4 + 0x232a10]
add rcx, r11
jmp rcx
mov ecx, dword [rbx + 0x534]
cmp ecx, 3
jne 0x18022e0b5
mov eax, dword [rdx]
cmp eax, 4
je 0x18022e11b
cmp eax, 5
je 0x18022e11b
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e0e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3f8]
mov dword [rsp + 0x3f8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x534]
cmp ecx, 2
je 0x18022e11b
cmp ecx, 1
je 0x18022e11b
cmp ecx, 4
je 0x18022e11b
cmp ecx, 3
jne case.0x18022e09c.2
cmp dword [rdx], ecx
je 0x18022e11b
mov ecx, dword [rbx + 0x534]
cmp ecx, 2
jne case.0x18022e09c.4
cmp ecx, 3
je 0x18022e12e
imul r9, r9, 0x58
lea rdi, [r9 + rdx + 0x9e98]
jmp 0x18022e15c
mov eax, dword [rdx]
cmp eax, 3
je 0x18022e150
add eax, 0xfffffffc
cmp eax, 1
ja 0x18022e146
lea rdi, [rdx + 0x9e40]
jmp 0x18022e15c
mov rdi, qword [rsp + 0x4a0]
jmp 0x18022e15c
imul r9, r9, 0x58
lea rdi, [r9 + rdx + 0x9e98]
cmp ecx, 3
jne case.default.0x18022e1c6
lea eax, [r8 - 0xb]
cmp eax, 0xb
ja 0x18022e1a5
cmp esi, 0x10
je 0x18022e1a5
cmp esi, 0x20
je 0x18022e1a5
cmp esi, 0x40
je 0x18022e1a5
cmp esi, 0x80
je 0x18022e1a5
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e130]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea r11, [0x180000000]
mov r8d, dword [rbx + 0x510]
lea eax, [r8 - 0xb]
cmp eax, 0xb
ja case.default.0x18022e1c6
cdqe
mov ecx, dword [r11 + rax*4 + 0x232a38]
add rcx, r11
jmp rcx
cmp dword [rbx + 0x2c614], 3
je case.default.0x18022e1c6
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e190]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1e0]
mov dword [rsp + 0x1e0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [rbx + 0x2c614], 2
je case.default.0x18022e1c6
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e1f0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x300]
mov dword [rsp + 0x300], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [rbx + 0x2c614], 1
je case.default.0x18022e1c6
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e250]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1e8]
mov dword [rsp + 0x1e8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r12, rbp
xor ebp, ebp
dec r8d
lea r14d, [rbp + 1]
cmp r8d, 0x15
ja case.0x18022e2b6.6
movsxd rax, r8d
mov ecx, dword [r11 + rax*4 + 0x232a68]
add rcx, r11
jmp rcx
mov eax, dword [rdi + 0x28]
test eax, eax
je 0x18022e2f8
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f1e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x390]
mov dword [rsp + 0x390], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x28], eax
mov r8, rbp
lea ecx, [rbp + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test sil, al
je 0x18022e359
mov edx, dword [rbx + 0x550]
mov rcx, qword [rbx + 0xa658]
shl rdx, 5
add rdx, r12
lea rax, [r8 + rdx*4]
add rdx, rax
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8f14], eax
mov eax, dword [rbx + 0x510]
add eax, 0xfffffffe
cmp eax, r14d
ja 0x18022e359
mov eax, dword [rdi + 4]
cmp eax, 8
ja 0x18022e948
inc eax
mov dword [rdi + 4], eax
inc ebp
inc r8
cmp ebp, 4
jb 0x18022e300
mov eax, dword [rbx + 0x550]
shl rax, 5
add rax, r13
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
or dword [rax + rcx*4 + 0x8f10], esi
mov rax, qword [rbx + 0xa658]
lea rcx, [r13 + r13*8]
or dword [rax + rcx*4 + 0x9910], esi
jmp 0x18022af8f
mov eax, dword [rdi + 0x2c]
test eax, eax
je 0x18022e3da
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f240]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1f0]
mov dword [rsp + 0x1f0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x2c], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x30]
test eax, eax
je 0x18022e424
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f2a0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x308]
mov dword [rsp + 0x308], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x30], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x34]
test eax, eax
je 0x18022e46e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f300]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1f8]
mov dword [rsp + 0x1f8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x34], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x38]
test eax, eax
je 0x18022e4b8
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f360]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3d8]
mov dword [rsp + 0x3d8], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x38], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x3c]
test eax, eax
je 0x18022e502
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f3c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x200]
mov dword [rsp + 0x200], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x3c], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x40]
test eax, eax
je 0x18022e54c
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f420]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x310]
mov dword [rsp + 0x310], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x40], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x44]
test eax, eax
je 0x18022e596
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f480]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x208]
mov dword [rsp + 0x208], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x44], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x48]
test eax, eax
je 0x18022e5e0
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f4e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x398]
mov dword [rsp + 0x398], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x48], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x4c]
test eax, eax
je 0x18022e62a
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f540]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x210]
mov dword [rsp + 0x210], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x4c], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x50]
test eax, eax
je 0x18022e674
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f5a0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x318]
mov dword [rsp + 0x318], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x50], eax
jmp case.0x18022e2b6.6
mov eax, dword [rdi + 0x54]
test eax, eax
je 0x18022e6be
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f600]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x218]
mov dword [rsp + 0x218], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi + 0x54], eax
jmp case.0x18022e2b6.6
cmp esi, 0xf0
je 0x18022e709
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f660]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x418]
mov dword [rsp + 0x418], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rdi]
test eax, eax
je 0x18022e748
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f6b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x220]
mov dword [rsp + 0x220], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
inc eax
mov dword [rdi], eax
jmp case.0x18022e2b6.6
mov r9d, dword [rbx + 0x550]
mov r10, qword [rbx + 0xa658]
mov edx, ebp
shl r9, 5
mov r8, rbp
add r9, r12
lea rax, [r9 + r9*4]
mov r11d, dword [r10 + rax*4 + 0x8f10]
nop word [rax + rax]
lea ecx, [rdx + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test r11b, al
je 0x18022e7ac
lea rax, [r8 + r9*4]
lea rcx, [r9 + rax]
mov eax, dword [r10 + rcx*4 + 0x8f14]
cmp eax, 2
je 0x18022e7b9
cmp eax, 3
je 0x18022e7b9
inc edx
inc r8
cmp edx, 4
jb 0x18022e780
inc dword [rdi + 8]
cmp dword [rdi + 8], 2
jbe case.0x18022e2b6.6
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e780]
mov r8d, 2
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x320]
mov dword [rsp + 0x320], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp esi, 0x10
je 0x18022e852
cmp esi, 0x20
je 0x18022e852
cmp esi, 0x40
je 0x18022e852
cmp esi, 0x80
je 0x18022e852
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ecb0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x228]
mov dword [rsp + 0x228], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, ebp
mov r9, rbp
nop dword [rax + rax]
lea ecx, [r8 + 4]
mov eax, r14d
shl eax, cl
and eax, 0xf0
test sil, al
je 0x18022e8c5
mov edx, dword [rbx + 0x550]
mov rcx, qword [rbx + 0xa658]
shl rdx, 5
add rdx, r12
lea rax, [r9 + rdx*4]
add rdx, rax
mov eax, dword [rbx + 0x510]
mov dword [rcx + rdx*4 + 0x8f14], eax
mov ecx, dword [rbx + 0x510]
sub ecx, 4
je 0x18022e8b9
cmp ecx, r14d
jne 0x18022e8c5
mov eax, dword [rdi + 0x10]
test eax, eax
jne 0x18022e8d6
inc eax
mov dword [rdi + 0x10], eax
jmp 0x18022e8c5
mov eax, dword [rdi + 0xc]
test eax, eax
jne 0x18022e90f
inc eax
mov dword [rdi + 0xc], eax
inc r8d
inc r9
cmp r8d, 4
jb 0x18022e860
jmp case.0x18022e2b6.6
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f760]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3a0]
mov dword [rsp + 0x3a0], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f700]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x230]
mov dword [rsp + 0x230], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005e830]
mov r8d, 8
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x328]
mov dword [rsp + 0x328], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005e0e0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x238]
mov dword [rsp + 0x238], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x558], 0
je 0x18022e9e2
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f7c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x558], 1
mov rax, qword [rbx + 0x38]
mov ecx, dword [rax]
and ecx, 0xf0
cmp ecx, 0x50
jb 0x18022ea39
test dword [rbx + 0x510], 0xffffc7ff
je 0x18022ea1f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f808]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
bt dword [rbx + 0x510], 0xc
jae 0x18022af8f
mov byte [rbx + 0x2d0fc], 1
jmp 0x18022af8f
test dword [rbx + 0x510], 0xffffb7ff
je 0x18022ea5e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f808]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
bt dword [rbx + 0x510], 0xe
jae 0x18022af8f
mov rax, qword [rbx + 0x38]
cmp word [rax + 2], 5
jne 0x18022ea90
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f850]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov byte [rbx + 0x2d0fe], 1
jmp 0x18022af8f
cmp byte [rbx + 0x610], 0
je 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f8d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x534]
cmp eax, 3
jne 0x18022eb93
mov ecx, dword [rbx + 0x510]
cmp ecx, 1
jb 0x18022eb4f
cmp ecx, 0x20
ja 0x18022eb4f
cmp byte [rbx + 0x2c620], 0
je 0x18022eb3d
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005f9d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x240]
mov dword [rsp + 0x240], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2c60c], ecx
mov byte [rbx + 0x2c620], 1
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
mov r9d, 0x20
lea rdx, [0x18005f970]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea r8d, [r9 - 0x1f]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x64]
mov dword [rsp + 0x64], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp eax, 4
jne 0x18022af8f
mov ecx, dword [rbx + 0x510]
cmp ecx, 0x20
jbe 0x18022ebe6
mov eax, dword [rbx + 0x530]
mov r9d, ecx
lea rdx, [0x18005fa40]
mov r8d, 0x20
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x6c]
mov dword [rsp + 0x6c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2ccb0], 0
je 0x18022ec22
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005faa0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x74]
mov dword [rsp + 0x74], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2cca8], ecx
mov byte [rbx + 0x2ccb0], 1
jmp 0x18022af8f
cmp byte [rbx + 0x2c621], 0
je 0x18022ec70
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fb10]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x7c]
mov dword [rsp + 0x7c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
cmp ecx, 0x20
jbe 0x18022ecc0
mov eax, dword [rbx + 0x530]
mov r9d, ecx
lea rdx, [0x18005fb80]
mov r8d, 0x20
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x84]
mov dword [rsp + 0x84], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2c610], ecx
mov byte [rbx + 0x2c621], 1
jmp 0x18022af8f
mov ecx, dword [rbx + 0x510]
lea eax, [rcx - 1]
cmp eax, 2
ja 0x18022eda0
mov eax, dword [rbx + 0x534]
cmp eax, 3
jne 0x18022ed43
cmp byte [rbx + 0x2c622], 0
je 0x18022ed31
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fc50]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x8c]
mov dword [rsp + 0x8c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2c614], ecx
mov byte [rbx + 0x2c622], 1
jmp 0x18022af8f
cmp eax, 4
jne 0x18022af8f
cmp byte [rbx + 0x2ccb1], 0
je 0x18022ed8e
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fc50]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x94]
mov dword [rsp + 0x94], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2ccac], ecx
mov byte [rbx + 0x2ccb1], 1
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fbe0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x9c]
mov dword [rsp + 0x9c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x510]
dec eax
cmp eax, 3
ja 0x18022ee34
cmp byte [rbx + 0x2c623], 0
je 0x18022ee28
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fd30]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xa4]
mov dword [rsp + 0xa4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x2c623], 1
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fca0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xac]
mov dword [rsp + 0xac], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
lea eax, [rcx - 1]
cmp eax, 3
ja 0x18022eecf
cmp byte [rbx + 0x2c624], 0
je 0x18022eebd
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fe20]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xb4]
mov dword [rsp + 0xb4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2c61c], ecx
mov byte [rbx + 0x2c624], 1
jmp 0x18022af8f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fd90]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xbc]
mov dword [rsp + 0xbc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2c625], 0
je 0x18022ef4a
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005fe80]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xc4]
mov dword [rsp + 0xc4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movss xmm1, dword [rbx + 0x510]
movss xmm0, dword [0x1800685f8]
comiss xmm0, xmm1
ja 0x18022ef74
comiss xmm1, dword [0x1800687e0]
ja 0x18022ef74
mov byte [rbx + 0x2c625], 1
jmp 0x18022af8f
movsd xmm3, qword [0x1800687d8]
movsd xmm2, qword [0x180068590]
mov eax, dword [rbx + 0x530]
unpcklps xmm1, xmm1
mov dword [rsp + 0x28], eax
lea rdx, [0x18005fee0]
cvtps2pd xmm0, xmm1
movq r9, xmm3
movq r8, xmm2
mov rcx, rbx
movsd qword [rsp + 0x20], xmm0
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xcc]
mov dword [rsp + 0xcc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0xa001], 0
je 0x18022f01f
mov r8d, dword [rbx + 0x530]
lea rdx, [0x18005ff40]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xd4]
mov dword [rsp + 0xd4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
or edi, 0xffffffff
cmp ecx, 1
jb 0x18022f03d
cmp ecx, edi
ja 0x18022f03d
mov byte [rax + 0xa001], 1
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x18005ffc0]
mov r9d, edi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov rcx, rbx
mov r8d, 1
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xdc]
mov dword [rsp + 0xdc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0xa003], 0
je 0x18022f0cf
mov r8d, dword [rbx + 0x530]
lea rdx, [0x180060030]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xe4]
mov dword [rsp + 0xe4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
or edi, 0xffffffff
cmp ecx, 1
jb 0x18022f0ed
cmp ecx, edi
ja 0x18022f0ed
mov byte [rax + 0xa003], 1
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x1800600b0]
mov r9d, edi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov rcx, rbx
mov r8d, 1
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xec]
mov dword [rsp + 0xec], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x23], 0
je 0x18022f2c4
mov ecx, dword [rbx + 0x510]
cmp ecx, 1
jb 0x18022f277
cmp ecx, 0x400
ja 0x18022f277
mov edx, dword [rbx + 0x514]
cmp edx, 1
jb 0x18022f22a
cmp edx, 0x400
ja 0x18022f22a
mov r8d, dword [rbx + 0x518]
cmp r8d, 1
jb 0x18022f1e0
cmp r8d, 0x40
ja 0x18022f1e0
imul r8d, edx
imul r8d, ecx
cmp r8d, 0x400
jbe 0x18022f360
mov eax, dword [rbx + 0x530]
lea rdx, [0x180060240]
mov r9d, 0x400
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xf4]
mov dword [rsp + 0xf4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
lea rdx, [0x1800601e0]
mov r9d, 1
mov dword [rsp + 0x28], eax
mov rcx, rbx
mov dword [rsp + 0x20], 0x40
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0xfc]
mov dword [rsp + 0xfc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
mov r8d, edx
lea rdx, [0x180060180]
mov dword [rsp + 0x28], eax
mov r9d, 1
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x104]
mov dword [rsp + 0x104], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
mov r8d, ecx
lea rdx, [0x180060120]
mov dword [rsp + 0x28], eax
mov r9d, 1
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x10c]
mov dword [rsp + 0x10c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x510]
cmp ecx, 1
jb 0x18022f403
cmp ecx, 0x300
ja 0x18022f403
mov edx, dword [rbx + 0x514]
cmp edx, 1
jb 0x18022f3b6
cmp edx, 0x300
ja 0x18022f3b6
mov r8d, dword [rbx + 0x518]
cmp r8d, 1
jb 0x18022f36c
cmp r8d, 0x40
ja 0x18022f36c
imul r8d, edx
imul r8d, ecx
cmp r8d, 0x300
jbe 0x18022f360
mov eax, dword [rbx + 0x530]
lea rdx, [0x1800603b0]
mov r9d, 0x300
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x114]
mov dword [rsp + 0x114], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rbx + 0x2c578], r8d
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x1800601e0]
mov r9d, 1
mov dword [rsp + 0x28], eax
mov rcx, rbx
mov dword [rsp + 0x20], 0x40
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x11c]
mov dword [rsp + 0x11c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
mov r8d, edx
lea rdx, [0x180060330]
mov dword [rsp + 0x28], eax
mov r9d, 1
mov rcx, rbx
mov dword [rsp + 0x20], 0x300
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x124]
mov dword [rsp + 0x124], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
mov r8d, ecx
lea rdx, [0x1800602b0]
mov dword [rsp + 0x28], eax
mov r9d, 1
mov rcx, rbx
mov dword [rsp + 0x20], 0x300
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x12c]
mov dword [rsp + 0x12c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd rdx, dword [rbx + 0x58]
mov eax, edx
lea rcx, [rax + rax*8]
cmp byte [rbx + rcx*4 + 0xb26c], 0
je 0x18022f4a0
mov r9d, dword [rbx + 0x530]
mov r8d, edx
lea rdx, [0x18005cc60]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x134]
mov dword [rsp + 0x134], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + rcx*4 + 0xb26c], 1
mov byte [rbx + rcx*4 + 0xb288], 1
mov byte [rbx + rcx*4 + 0xb289], 0
xor ebp, ebp
mov r14d, 1
mov dword [rbx + rcx*4 + 0xb28c], ebp
mov dword [rbx + rcx*4 + 0xb270], 0xb
mov dword [rbx + rcx*4 + 0xb284], r14d
lea rcx, [rdx + rdx*8 + 0x2c9d]
jmp 0x18022f58c
movsxd r8, dword [rbx + 0x58]
mov eax, r8d
lea rcx, [rax + rax*8]
cmp byte [rbx + rcx*4 + 0xb26c], 0
je 0x18022f535
mov r9d, dword [rbx + 0x530]
lea rdx, [0x18005cc60]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x13c]
mov dword [rsp + 0x13c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + rcx*4 + 0xb26c], 1
mov byte [rbx + rcx*4 + 0xb288], 0
mov byte [rbx + rcx*4 + 0xb289], 1
mov edx, dword [rbx + 0x510]
mov dword [rbx + rcx*4 + 0xb28c], edx
test edx, edx
je 0x18022f5a4
test dl, 3
jne 0x18022f5a4
cmp edx, 0x800
ja 0x18022f5a4
mov dword [rbx + rcx*4 + 0xb270], 0xc
mov r14d, 1
mov dword [rbx + rcx*4 + 0xb284], r14d
lea rcx, [r8 + r8*8 + 0x2c9d]
movabs rdx, 0x600000006
mov qword [rbx + rcx*4], rdx
mov qword [rbx + rcx*4 + 8], rdx
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
mov r9d, 0x800
mov rcx, rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
lea rdx, [0x180060440]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x144]
mov dword [rsp + 0x144], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd r10, dword [rbx + 0x58]
mov edx, r10d
shl rdx, 5
cmp byte [rdx + rbx + 0xc488], 0
je 0x18022f63b
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180060508]
mov r8d, r10d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x14c]
mov dword [rsp + 0x14c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0xc46c]
cmp r10d, r9d
jae 0x18022f689
mov eax, dword [rbx + 0x530]
lea rdx, [0x180060550]
dec r9d
mov r8d, r10d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x154]
mov dword [rsp + 0x154], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0xc470]
mov ecx, r10d
cmp eax, r10d
cmovb ecx, eax
xor ebp, ebp
mov dword [rbx + 0xc470], ecx
mov byte [rdx + rbx + 0xc488], 1
mov byte [rdx + rbx + 0xc489], 0
mov byte [rdx + rbx + 0xc48a], 0
mov dword [rdx + rbx + 0xc48c], ebp
mov r8d, dword [rbx + 0x510]
lea eax, [r8 - 1]
cmp eax, 9
ja case.default.0x18022f6e0
cdqe
mov ecx, dword [r11 + rax*4 + 0x232ac0]
add rcx, r11
jmp rcx
mov dword [rdx + rbx + 0xc474], r8d
lea rcx, [rbx + 0x514]
mov rdx, rbp
mov r8d, dword [rcx]
lea eax, [r8 - 1]
cmp eax, 8
ja 0x18022f743
lea rax, [rdx + r10*8]
inc ebp
add rcx, 4
inc rdx
mov dword [rbx + rax*4 + 0xc478], r8d
cmp ebp, 4
jb 0x18022f6f4
mov eax, dword [rbx + 0x524]
test eax, eax
je 0x18022af8f
btr eax, 0x10
test eax, eax
je 0x18022af8f
mov r9d, dword [rbx + 0x530]
mov r8d, r10d
jmp 0x18022f919
mov eax, dword [rbx + 0x530]
lea rdx, [0x1800606d0]
mov r9d, r10d
mov r8d, ebp
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x15c]
mov dword [rsp + 0x15c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x1800605f0]
mov r8d, r10d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x164]
mov dword [rsp + 0x164], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180060680]
mov r8d, r10d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x16c]
mov dword [rsp + 0x16c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
movsxd r8, dword [rbx + 0x58]
mov edx, r8d
shl rdx, 5
cmp byte [rdx + rbx + 0xc488], 0
je 0x18022f84b
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180060508]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x174]
mov dword [rsp + 0x174], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0xc46c]
cmp r8d, r9d
jae 0x18022f896
mov eax, dword [rbx + 0x530]
lea rdx, [0x180060550]
dec r9d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x17c]
mov dword [rsp + 0x17c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0xc470]
mov ecx, r8d
cmp eax, r8d
cmovb ecx, eax
xor ebp, ebp
mov rax, r8
mov dword [rbx + 0xc470], ecx
mov byte [rdx + rbx + 0xc488], 1
mov byte [rdx + rbx + 0xc489], 1
mov byte [rdx + rbx + 0xc48a], 0
mov dword [rdx + rbx + 0xc48c], ebp
shl rax, 5
mov dword [rdx + rbx + 0xc474], 0xb
movabs rdx, 0x600000006
mov qword [rax + rbx + 0xc478], rdx
mov qword [rax + rbx + 0xc480], rdx
mov eax, dword [rbx + 0x510]
test eax, eax
je 0x18022af8f
btr eax, 0x10
test eax, eax
je 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180060730]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022af8f
movsxd r8, dword [rbx + 0x58]
mov edi, r8d
shl rdi, 5
cmp byte [rdi + rbx + 0xc488], 0
je 0x18022f97e
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180060508]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x184]
mov dword [rsp + 0x184], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0xc46c]
cmp r8d, r9d
jae 0x18022f9c9
mov eax, dword [rbx + 0x530]
lea rdx, [0x180060550]
dec r9d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x18c]
mov dword [rsp + 0x18c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0xc470]
mov ecx, r8d
cmp eax, r8d
cmovb ecx, eax
mov dword [rbx + 0xc470], ecx
mov byte [rdi + rbx + 0xc488], 1
mov byte [rdi + rbx + 0xc489], 0
mov byte [rdi + rbx + 0xc48a], 1
mov ecx, dword [rbx + 0x510]
mov dword [rdi + rbx + 0xc48c], ecx
test ecx, ecx
je 0x18022fa8e
test cl, 3
jne 0x18022fa8e
cmp ecx, 0x800
ja 0x18022fa8e
mov eax, dword [rbx + 0x514]
test eax, eax
je 0x18022fa5d
test eax, 0xff7effff
je 0x18022fa42
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180060870]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
bt dword [rbx + 0x514], 0x17
jae 0x18022af8f
mov byte [rdi + rbx + 0xc48b], 1
jmp 0x18022af8f
movabs rdx, 0x600000006
mov dword [rdi + rbx + 0xc474], 0xc
mov rax, r8
shl rax, 5
mov qword [rax + rbx + 0xc478], rdx
mov qword [rax + rbx + 0xc480], rdx
jmp 0x18022af8f
mov eax, dword [rbx + 0x530]
lea rdx, [0x1800607a0]
mov r9d, 0x800
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x194]
mov dword [rsp + 0x194], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x58]
mov rcx, r8
mov rax, r8
add rcx, rcx
cmp byte [rbx + rcx*8 + 0xc574], 0
je 0x18022fb24
mov r9d, dword [rbx + 0x530]
lea rdx, [0x1800608c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x19c]
mov dword [rsp + 0x19c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x510]
test r9b, 3
jne 0x18022fbcf
test r9d, r9d
je 0x18022fbcf
mov byte [rbx + rcx*8 + 0xc574], 1
add rax, 0xc58
mov byte [rbx + rcx*8 + 0xc57c], 0
add rax, rax
xor ebp, ebp
mov dword [rbx + rax*8], ebp
mov eax, dword [rbx + 0x510]
shr eax, 2
mov dword [rbx + rcx*8 + 0xc578], eax
lea ecx, [rax*4]
cmp ecx, eax
jb 0x18022fb96
mov eax, dword [rbx + 0x2c574]
add ecx, eax
cmp ecx, eax
jb 0x18022fb96
cmp ecx, 0x8000
ja 0x18022fb96
mov dword [rbx + 0x2c574], ecx
jmp 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x1800609b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1a4]
mov dword [rsp + 0x1a4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
lea rdx, [0x180060920]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1ac]
mov dword [rsp + 0x1ac], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x58]
mov rcx, r8
mov rdx, r8
add rcx, rcx
cmp byte [rbx + rcx*8 + 0xc574], 0
je 0x18022fc5b
mov r9d, dword [rbx + 0x530]
lea rdx, [0x1800608c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1b4]
mov dword [rsp + 0x1b4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + rcx*8 + 0xc574], 1
mov byte [rbx + rcx*8 + 0xc57c], 1
mov r9d, dword [rbx + 0x510]
add rdx, 0xc58
add rdx, rdx
mov dword [rbx + rdx*8], r9d
test r9b, 3
jne 0x18022fcfb
test r9d, r9d
je 0x18022fcfb
mov eax, dword [rbx + 0x514]
mov dword [rbx + rcx*8 + 0xc578], eax
mov ecx, eax
imul ecx, dword [rbx + rdx*8]
cmp ecx, eax
jb 0x18022fcc2
mov eax, dword [rbx + 0x2c574]
lea edx, [rcx + rax]
cmp edx, eax
jb 0x18022fcc2
cmp edx, 0x8000
ja 0x18022fcc2
mov dword [rbx + 0x2c574], edx
jmp 0x18022af8f
mov r9d, dword [rbx + 0x530]
lea rdx, [0x1800609b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1bc]
mov dword [rsp + 0x1bc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [rbx + 0x530]
lea rdx, [0x180060a30]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1c4]
mov dword [rsp + 0x1c4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov byte [rbx + 0x612], 0
jmp 0x18022af8f
mov eax, dword [rbx + 0x510]
lea rdx, [rsp + 0x420]
mov rcx, rbx
mov dword [rsp + 0x424], eax
mov dword [rsp + 0x420], 0x11
call fcn.180226b50
jmp 0x18022af8f
mov esi, dword [rbx + 0x510]
mov eax, dword [rbx + 0x514]
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x618]
or edi, 0xffffffff
mov dword [rsp + 0x54], esi
mov dword [rsp + 0x58], eax
mov byte [rsp + 0x5c], 0
mov dword [rsp + 0x50], edi
call fcn.18023f7a0
test rax, rax
je 0x18022fdc4
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180062db0]
mov r8d, esi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022fdd5
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x618]
call fcn.18023f810
xor ebp, ebp
cmp dword [rbx + 0x514], ebp
jbe 0x18022af8f
mov rdi, rbp
nop word [rax + rax]
mov rax, qword [rbx + 0x518]
lea rdx, [rsp + 0x420]
mov dword [rsp + 0x420], 0x11
mov ecx, dword [rdi + rax]
mov dword [rsp + 0x424], ecx
mov rcx, rbx
call fcn.180226ab0
add rdi, 4
mov dword [rax + 8], esi
mov dword [rax + 0xc], ebp
inc ebp
cmp ebp, dword [rbx + 0x514]
jb 0x18022fdf0
jmp 0x18022af8f
xor ebp, ebp
mov esi, ebp
cmp dword [rbx + 0x518], ebp
jbe 0x18022fef1
mov r12, rbp
or edi, 0xffffffff
nop dword [rax + rax]
mov rax, qword [rbx + 0x520]
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x618]
mov r13d, dword [r12 + rax]
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x58], ebp
mov dword [rsp + 0x54], r13d
mov byte [rsp + 0x5c], bpl
call fcn.18023f7a0
mov r11, rax
test rax, rax
jne 0x18022fea4
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180062e00]
mov r8d, r13d
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022fedf
movzx eax, word [rbx + 0x510]
mov dword [r11], eax
mov byte [r11 + 0xc], 1
mov r9d, dword [r11 + 8]
mov r8d, dword [rbx + 0x514]
cmp r9d, r8d
je 0x18022fedf
mov eax, dword [rbx + 0x530]
lea rdx, [0x180062e60]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
inc esi
add r12, 4
cmp esi, dword [rbx + 0x518]
jb 0x18022fe50
mov r11, qword [rbx + 0xb248]
movzx ecx, word [rbx + 0x510]
mov edx, ebp
mov r10d, dword [r11 + 8]
mov edi, ecx
test r10d, r10d
je 0x18022ff36
mov r8, rbp
nop
test ecx, ecx
je 0x18022ffb5
mov rax, qword [rbx + 0xb260]
mov r9d, dword [r8 + rax]
cmp r9d, ecx
ja 0x18022ff97
inc edx
sub ecx, r9d
add r8, 0x10
cmp edx, r10d
jb 0x18022ff10
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180062ff0]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
movzx edi, word [rbx + 0x512]
test edi, edi
je 0x18022af8f
movzx r8d, word [rbx + 0x510]
add r8d, ebp
cmp r8d, 0xfd
jb 0x180230010
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180063060]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18023005d
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180062f60]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022ff36
mov rcx, qword [rbx + 0xb260]
mov eax, edx
mov edx, dword [rbx + 0x518]
add rax, rax
cmp dword [rcx + rax*8 + 4], edx
jne 0x18022ffef
mov ecx, dword [rcx + rax*8 + 0xc]
mov r8, rdx
mov rdx, qword [rbx + 0x520]
add rcx, r11
shl r8, 2
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x18022ff52
mov r9d, dword [rbx + 0x530]
lea rdx, [0x180062ed0]
mov r8d, edi
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18022ff52
lea rdx, [r8 + r8*2]
cmp byte [rbx + rdx*4 + 0xa660], 0
je 0x180230039
mov r9d, dword [rbx + 0x530]
lea rdx, [0x1800630c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x18023005d
mov byte [rbx + rdx*4 + 0xa660], 1
mov eax, edi
lea rcx, [r8 + r8*2 + 0x299a]
sub eax, ebp
mov dword [rbx + rdx*4 + 0xa664], eax
mov eax, dword [rbx + 0x514]
mov dword [rbx + rcx*4], eax
inc ebp
cmp ebp, edi
jb 0x18022ff61
jmp 0x18022af8f
xor ebp, ebp
lea r14d, [rbp + 1]
cmp byte [rbx + 0x612], bpl
jne 0x180230300
cmp dword [rbx + 0x534], 2
mov r15d, r14d
jne 0x1802300aa
mov r15d, ebp
mov eax, ebp
lea rcx, [rbx + 0x2d0f8]
cmp byte [rcx], bpl
je 0x1802300a0
lea r15d, [rax + 1]
inc eax
inc rcx
cmp eax, 4
jb 0x180230097
mov r12d, ebp
mov rsi, rbp
mov qword [rsp + 0x4a0], rbp
nop dword [rax + rax]
mov rdx, qword [rbx + 0xa658]
cmp byte [rsi + rdx + 0x9928], 0
je 0x1802302da
cmp byte [rdx + 0xa001], 0
jne 0x1802300e7
cmp byte [rdx + 0xa003], 0
je 0x180230101
cmp r12d, dword [rsi + rdx + 0x992c]
je 0x180230101
cmp r12d, dword [rsi + rdx + 0x9930]
je 0x180230101
movzx r8d, r14b
jmp 0x180230104
xor r8b, r8b
mov eax, dword [rsi + rdx + 0x992c]
cmp r12d, eax
jne 0x180230120
mov eax, dword [rsi + rdx + 0x9910]
mov dword [rsi + rdx + 0x9914], eax
jmp 0x180230137
test r8b, r8b
jne 0x180230137
lea rcx, [rax + rax*8]
mov eax, dword [rsi + rdx + 0x9910]
and dword [rdx + rcx*4 + 0x9914], eax
mov rax, qword [rbx + 0xa658]
cmp dword [rax + rsi + 0x9910], 0
jne 0x18023017d
test r8b, r8b
jne 0x1802302da
mov r9d, dword [rax + rsi + 0x9930]
mov r8d, dword [rax + rsi + 0x992c]
lea rdx, [0x180060af0]
mov rcx, rbx
mov dword [rsp + 0x20], r12d
call fcn.180226700
inc dword [rbx + 0x1c]
jmp 0x1802302da
test r15d, r15d
je 0x18023024c
mov rdi, rbp
mov r13d, r15d
mov ebp, 4
mov r8, qword [rbx + 0xa658]
mov eax, dword [rdi + r8 + 0x8f10]
test al, 0x10
je 0x1802301af
cmp dword [rdi + r8 + 0x8f14], 0
jne 0x1802301dc
test al, 0x20
je 0x1802301be
cmp dword [rdi + r8 + 0x8f18], 0
jne 0x1802301dc
test al, 0x40
je 0x1802301cd
cmp dword [rdi + r8 + 0x8f1c], 0
jne 0x1802301dc
test al, al
jns 0x180230234
cmp dword [rdi + r8 + 0x8f20], 0
je 0x180230234
xor cl, cl
lea rdx, [rdi + r8 + 0x8f14]
mov r9, rbp
nop dword [rax]
mov eax, dword [rdx]
movzx ecx, cl
add eax, 0xfffffff5
cmp eax, 0xb
cmovbe ecx, r14d
add rdx, rbp
sub r9, r14
jne 0x1802301f0
test cl, cl
jne 0x180230234
mov eax, dword [rsi + r8 + 0x9930]
mov r9d, dword [rsi + r8 + 0x992c]
lea rdx, [0x180060b50]
mov r8d, r12d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
add rdi, 0x280
sub r13, r14
jne 0x180230191
mov rbp, qword [rsp + 0x4a0]
mov rcx, qword [rbx + 0xa658]
mov r9d, dword [rsi + rcx + 0x9930]
cmp r12d, r9d
jne 0x1802302da
mov edx, dword [rsi + rcx + 0x992c]
lea rax, [rdx + rdx*8]
cmp dword [rcx + rax*4 + 0x9914], 0
jne 0x18023028a
mov r8d, edx
lea rdx, [0x180060c10]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + rsi + 0x992c]
inc ecx
movsxd rax, ecx
cmp ecx, r12d
jae 0x1802302da
lea r8, [rax + rax*8]
mov r9d, r12d
shl r8, 2
sub r9d, ecx
mov rdx, qword [rbx + 0xa658]
add r8, 0x24
sub r9, r14
mov eax, dword [rsi + rdx + 0x992c]
lea rcx, [rax + rax*8]
mov eax, dword [rdx + rcx*4 + 0x9914]
mov dword [r8 + rdx + 0x98f0], eax
jne 0x1802302b0
add rbp, 0x14
inc r12d
add rsi, 0x24
mov qword [rsp + 0x4a0], rbp
cmp r12d, 0x20
jb 0x1802300c0
xor ebp, ebp
lea r11, [0x180000000]
mov byte [rbx + 0x612], r14b
cmp dword [rbx + 0x4d0], 0
mov edi, ebp
mov r15, rbp
jbe 0x18022af8f
mov r13d, 0x1000
nop
lea r8, [r15 + r15*2]
shl r8, 6
movsxd rax, dword [r8 + rbx + 0x50]
cmp eax, 0x28
ja case.0x180230341.4
mov ecx, dword [r11 + rax*4 + 0x232ae8]
add rcx, r11
jmp rcx
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 4]
cmp dword [r8 + rbx + 0x58], ecx
jb case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180060ca0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1cc]
mov dword [rsp + 0x1cc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x534]
xor r11b, r11b
sub ecx, 2
je 0x1802303ea
cmp ecx, r14d
je 0x1802303c2
mov r12d, ebp
mov r10, rbp
jmp 0x18023040f
cmp dword [r8 + rbx + 0x100], 0
jne 0x1802303de
mov eax, dword [rbx + 0x2c60c]
cmp dword [r8 + rbx + 0x58], eax
jae 0x180231a5b
mov r10, r14
mov r12d, r14d
movzx r11d, r10b
jmp 0x18023040f
cmp dword [r8 + rbx + 0x100], 0
jne 0x180230406
mov eax, dword [rbx + 0x2c604]
cmp dword [r8 + rbx + 0x58], eax
jae 0x180231ab4
mov r10, r14
mov r12d, r14d
mov r11b, r10b
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x180230499
sub ecx, r14d
je 0x180230442
cmp ecx, r14d
jne 0x1802304a1
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x1802304a1
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
jmp 0x1802304a1
mov r9d, dword [r8 + rbx + 0xe4]
lea rax, [r15 + r15*2]
shl rax, 4
add rax, r10
mov esi, dword [rbx + rax*4 + 0x100]
test esi, esi
jne 0x1802304e0
lea rax, [r10 + r10*4]
lea rcx, [r8 + rax*8]
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8010]
not edx
test r9d, edx
jne 0x180231b0d
cmp esi, 2
jne 0x1802304f9
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0x802c], 0
je 0x180231b84
cmp esi, 2
jne 0x180230516
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0x8010]
not ecx
test r9d, ecx
jne 0x180231bd9
cmp esi, 3
jne 0x180230540
lea rax, [r10 + r10*4]
lea rcx, [r8 + rax*8]
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx*8 + 0x802c], 0
je 0x180231c34
cmp esi, 3
jne case.0x180230341.4
lea rax, [r10 + r10*4]
lea rcx, [r8 + rax*8]
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8010]
not edx
test r9d, edx
je case.0x180230341.4
lea r9d, [rdi + 1]
mov eax, edi
lea r8, [0x180034acf]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x28], r9d
mov eax, r12d
shl rdx, 6
lea rcx, [rax + rax*4]
test r11b, r11b
lea rax, [rbx + rdx]
lea rdi, [0x18005c0e4]
mov ecx, dword [rax + rcx*8 + 0x58]
mov eax, dword [rbx + 0x530]
cmovne r8, rdi
lea rdx, [rcx + rcx*4]
mov rcx, qword [rbx + 0xa658]
mov dword [rsp + 0x20], eax
mov r9d, dword [rcx + rdx*8 + 0x8030]
lea rdx, [0x180060f50]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x204]
mov dword [rsp + 0x204], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x534]
sub ecx, 3
je 0x180230631
cmp ecx, r14d
jne 0x18023065a
cmp dword [r8 + rbx + 0x100], 0
jne 0x180230624
mov eax, dword [rbx + 0x2cca8]
cmp dword [r8 + rbx + 0x58], eax
jae 0x180231cab
mov esi, r14d
mov dword [rsp + 0x4a0], r14d
jmp 0x180230661
cmp dword [r8 + rbx + 0x100], 0
jne 0x18023064d
mov eax, dword [rbx + 0x2c60c]
cmp dword [r8 + rbx + 0x58], eax
jae 0x180231d04
mov esi, r14d
mov dword [rsp + 0x4a0], r14d
jmp 0x180230661
mov esi, dword [rsp + 0x4a0]
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x1802306eb
sub ecx, r14d
je 0x180230694
cmp ecx, r14d
jne 0x1802306f3
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x1802306f3
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
jmp 0x1802306f3
mov r9d, dword [r8 + rbx + 0xe4]
lea rax, [r15 + r15*2]
mov r10d, esi
shl rax, 4
add rax, r10
mov r11d, dword [rbx + rax*4 + 0x100]
test r11d, r11d
jne 0x180230737
lea rax, [r10 + r10*4]
lea rcx, [r8 + rax*8]
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8010]
not edx
test r9d, edx
jne 0x180231d5d
cmp r11d, 2
jne 0x180230751
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0x802c], 0
je 0x180231db6
cmp r11d, 2
jne 0x18023076f
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0x8010]
not ecx
test r9d, ecx
jne 0x180231df3
cmp r11d, 3
jne 0x18023079a
lea rax, [r10 + r10*4]
lea rcx, [r8 + rax*8]
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx*8 + 0x802c], 0
je 0x180231e36
cmp r11d, 3
jne case.0x180230341.4
lea rax, [r10 + r10*4]
lea rcx, [r8 + rax*8]
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8010]
not edx
test r9d, edx
je case.0x180230341.4
mov r9d, dword [rbx + 0x530]
lea r8d, [rdi + 1]
mov eax, esi
lea rdx, [rax + rax*4]
mov eax, edi
mov dword [rsp + 0x20], r8d
lea rcx, [rax + rax*2]
shl rcx, 6
lea rax, [rbx + rcx]
mov ecx, dword [rax + rdx*8 + 0x58]
mov rax, qword [rbx + 0xa658]
lea rdx, [rcx + rcx*4]
mov rcx, rbx
mov r8d, dword [rax + rdx*8 + 0x8030]
lea rdx, [0x180061270]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x23c]
mov dword [rsp + 0x23c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x1802308c4
sub ecx, r14d
je 0x18023086d
cmp ecx, r14d
jne 0x1802308cc
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x1802308cc
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
jmp 0x1802308cc
mov r9d, dword [r8 + rbx + 0xe4]
lea rax, [r15 + r15*2]
shl rax, 6
mov r10d, dword [rax + rbx + 0x100]
test r10d, r10d
jne 0x180230903
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8510]
not edx
test r9d, edx
jne 0x180231e95
cmp r10d, 2
jne 0x18023091d
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0x852c], 0
je 0x180231ee4
cmp r10d, 2
jne 0x18023093b
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0x8510]
not ecx
test r9d, ecx
jne 0x180231f21
cmp r10d, 3
jne 0x18023095f
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx*8 + 0x852c], 0
je 0x180231f64
cmp r10d, 3
jne case.0x180230341.4
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8510]
not edx
test r9d, edx
je case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea edx, [rdi + 1]
lea rcx, [rax + rax*2]
mov dword [rsp + 0x20], edx
lea rdx, [0x1800614f0]
shl rcx, 6
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov r8d, dword [rax + rcx*8 + 0x8530]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x264]
mov dword [rsp + 0x264], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [r8 + rbx + 0x100], 0
jne 0x180230a08
mov eax, dword [rbx + 0x2c610]
cmp dword [r8 + rbx + 0x58], eax
jae 0x180231fbb
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x180230a92
sub ecx, r14d
je 0x180230a3b
cmp ecx, r14d
jne 0x180230a9a
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x180230a9a
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
jmp 0x180230a9a
mov r9d, dword [r8 + rbx + 0xe4]
lea rax, [r15 + r15*2]
shl rax, 6
mov r10d, dword [rax + rbx + 0x104]
test r10d, r10d
jne 0x180230ad4
mov eax, dword [r8 + rbx + 0x80]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8a10]
not edx
test r9d, edx
jne 0x180232014
cmp r10d, 2
jne 0x180230aee
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0x8a2c], 0
je 0x180232066
cmp r10d, 2
jne 0x180230b0c
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0x8a10]
not ecx
test r9d, ecx
jne 0x1802320a3
cmp r10d, 3
jne 0x180230b33
mov eax, dword [r8 + rbx + 0x80]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx*8 + 0x8a2c], 0
je 0x1802320e6
cmp r10d, 3
jne case.0x180230341.4
mov eax, dword [r8 + rbx + 0x80]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*8 + 0x8a10]
not edx
test r9d, edx
je case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea edx, [rdi + 1]
lea rcx, [rax + rax*2]
mov dword [rsp + 0x20], edx
lea rdx, [0x180061760]
shl rcx, 6
mov eax, dword [rcx + rbx + 0x80]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 0xa658]
mov r8d, dword [rax + rcx*8 + 0x8a30]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x294]
mov dword [rsp + 0x294], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x180230c50
sub ecx, r14d
je 0x180230bf9
cmp ecx, r14d
jne 0x180230c58
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x180230c58
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
jmp 0x180230c58
mov r9d, dword [r8 + rbx + 0xe4]
mov r10d, dword [r8 + rbx + 0x100]
test r10d, r10d
jne 0x180230c87
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*8]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*4 + 0x9910]
not edx
test r9d, edx
jne 0x18023213e
cmp r10d, 2
jne 0x180230ca1
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0x9928], 0
je 0x18023218d
cmp r10d, 2
jne 0x180230cbf
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0x9914]
not ecx
test r9d, ecx
jne 0x1802321ca
cmp r10d, 3
jne 0x180230ce3
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*8]
mov rax, qword [rbx + 0xa658]
cmp byte [rax + rcx*4 + 0x9928], 0
je 0x18023220d
cmp r10d, 3
jne case.0x180230341.4
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*8]
mov rax, qword [rbx + 0xa658]
mov edx, dword [rax + rcx*4 + 0x9914]
not edx
test r9d, edx
je case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea edx, [rdi + 1]
lea rcx, [rax + rax*2]
mov dword [rsp + 0x20], edx
lea rdx, [0x1800619e0]
shl rcx, 6
mov eax, dword [rcx + rbx + 0x58]
lea rcx, [rax + rax*8]
mov rax, qword [rbx + 0xa658]
mov r8d, dword [rax + rcx*4 + 0x992c]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2bc]
mov dword [rsp + 0x2bc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [r8 + rbx + 0x58]
mov rcx, qword [rbx + 0xa658]
mov r10d, dword [rcx + rax*8 + 0xc]
test r10d, r10d
je 0x1802322d0
cmp dword [r8 + rbx + 0x104], 0
jne 0x180230da7
mov eax, dword [rcx + rax*8 + 0x10]
cmp dword [r8 + rbx + 0x80], eax
jae 0x180232264
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x180230e31
sub ecx, r14d
je 0x180230dda
cmp ecx, r14d
jne 0x180230e39
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x180230e39
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
jmp 0x180230e39
mov r9d, dword [r8 + rbx + 0xe4]
not r10d
test r9d, r10d
je case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061c00]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2cc]
mov dword [rsp + 0x2cc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [r8 + rbx + 0x100], 0
jne case.0x180230341.4
mov eax, dword [r8 + rbx + 0x58]
cmp byte [rbx + rax*8 + 0x2c57c], 0
jne case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061c70]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2dc]
mov dword [rsp + 0x2dc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [r8 + rbx + 0x58]
cmp byte [rax + rbx + 0x2d0f8], 0
jne case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061cd0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2e4]
mov dword [rsp + 0x2e4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp dword [r8 + rbx + 0x100], 0
jne case.0x180230341.4
mov eax, dword [r8 + rbx + 0x58]
lea rcx, [rax + rax*8]
cmp byte [rbx + rcx*4 + 0xb26c], 0
jne case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061d30]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2ec]
mov dword [rsp + 0x2ec], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [r8 + rbx + 0x100]
cmp eax, 2
je case.0x180230341.4
cmp eax, 3
je case.0x180230341.4
mov eax, dword [r8 + rbx + 0x58]
cmp eax, 0xf
jae 0x1802323df
mov rcx, rax
lea rax, [rax + rax*2]
cmp byte [rbx + rax*4 + 0x55c], 0
je 0x180232390
mov edx, dword [r8 + rbx + 0x104]
test edx, edx
jne 0x180231051
cmp byte [rbx + rax*4 + 0x55d], dl
je 0x18023103c
cmp dword [r8 + rbx + 0x80], r13d
jae 0x18023231f
mov eax, dword [rbx + rax*4 + 0x560]
cmp dword [r8 + rbx + 0x80], eax
jae 0x18023231f
cmp edx, 2
je 0x18023105f
cmp edx, 3
jne case.0x180230341.4
lea rax, [rcx + rcx*2 + 0x159]
cmp dword [rbx + rax*4], r14d
je case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061ef0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2fc]
mov dword [rsp + 0x2fc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0f0], 0
je 0x18023242e
cmp dword [r8 + rbx + 0x100], 0
jne case.0x180230341.4
mov eax, dword [rbx + 0x2d0f4]
cmp dword [r8 + rbx + 0x58], eax
jb case.0x180230341.4
mov r9d, dword [rbx + 0x2d0f4]
mov eax, edi
lea ecx, [rdi + 1]
mov dword [rsp + 0x30], ecx
lea rdx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
shl rdx, 6
mov dword [rsp + 0x28], eax
mov rcx, rbx
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061ff0]
mov dword [rsp + 0x20], r13d
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x314]
mov dword [rsp + 0x314], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [rbx + 0x534]
sub ecx, 2
je 0x180231178
sub ecx, r14d
je 0x180231169
cmp ecx, r14d
jne 0x180231186
movzx eax, byte [rbx + 0x2ccb3]
jmp 0x18023117e
mov rax, qword [rbx + 0xa658]
mov al, byte [rax + 0xa000]
jmp 0x18023117e
mov al, byte [rbx + 0x2d0d8]
test al, al
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062070]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x324]
mov dword [rsp + 0x324], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0da], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800620d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x32c]
mov dword [rsp + 0x32c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0dc], 0
je 0x18023246b
cmp dword [rbx + 0x2d0e0], 0xc
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062190]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x334]
mov dword [rsp + 0x334], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0dc], 0
je 0x1802324a8
cmp dword [rbx + 0x2d0e0], 0x26
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062280]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x344]
mov dword [rsp + 0x344], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0dc], 0
je 0x1802324e5
cmp dword [rbx + 0x2d0e0], 0x27
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062370]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x354]
mov dword [rsp + 0x354], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0ec], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062400]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x364]
mov dword [rsp + 0x364], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
cmp byte [rbx + 0x2d0ed], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062460]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x36c]
mov dword [rsp + 0x36c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x180232522
sub ecx, r14d
je 0x1802313dd
cmp ecx, r14d
jne 0x180231432
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x180231432
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0xa018]
not ecx
test r9d, ecx
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062530]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x374]
mov dword [rsp + 0x374], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0xa005], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800625a0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x384]
mov dword [rsp + 0x384], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0xa002], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062610]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x38c]
mov dword [rsp + 0x38c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0xa004], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062680]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x394]
mov dword [rsp + 0x394], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x18023255f
sub ecx, r14d
je 0x1802315b1
cmp ecx, r14d
jne 0x180231606
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x180231606
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0xa008]
not ecx
test r9d, ecx
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062760]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x39c]
mov dword [rsp + 0x39c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x18023259c
sub ecx, r14d
je 0x180231692
cmp ecx, r14d
jne 0x1802316e7
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x1802316e7
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0xa00c]
not ecx
test r9d, ecx
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062840]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3ac]
mov dword [rsp + 0x3ac], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, dword [r8 + rbx + 0xd4]
mov r9d, ebp
test ecx, ecx
je 0x1802325d9
sub ecx, r14d
je 0x180231773
cmp ecx, r14d
jne 0x1802317c8
mov ecx, dword [r8 + rbx + 0xe8]
mov r9d, r14d
add ecx, 4
shl r9d, cl
and r9d, 0xf0
jmp 0x1802317c8
movzx ecx, byte [r8 + rbx + 0xe7]
mov r9d, r14d
mov edx, r14d
add ecx, 4
shl r9d, cl
movzx ecx, byte [r8 + rbx + 0xe6]
add ecx, 4
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe5]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
movzx ecx, byte [r8 + rbx + 0xe4]
or r9d, edx
add ecx, 4
mov edx, r14d
shl edx, cl
or r9d, edx
and r9d, 0xf0
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 0xa010]
not ecx
test r9d, ecx
je case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062930]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3bc]
mov dword [rsp + 0x3bc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
cmp byte [rax + 0xa014], 0
jne case.0x180230341.4
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800629b0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3cc]
mov dword [rsp + 0x3cc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [r8 + rbx + 0x58]
cmp eax, 8
jae 0x18023188a
shl rax, 5
cmp byte [rax + rbx + 0xc488], 0
jne case.0x180230341.4
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180062a20]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3d4]
mov dword [rsp + 0x3d4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, dword [r8 + rbx + 0x58]
cmp eax, 0x2000
jae 0x180232684
add rax, rax
cmp byte [rbx + rax*8 + 0xc574], 0
je 0x180232684
cmp dword [r8 + rbx + 0x104], 0
jne case.0x180230341.4
mov eax, dword [rbx + rax*8 + 0xc578]
cmp dword [r8 + rbx + 0x80], eax
jae 0x180232616
mov r12d, dword [r8 + rbx + 0x10c]
mov esi, ebp
test r12d, r12d
jle 0x180231a3e
lea r10, [r8 + rbx + 0x100]
lea r9, [r8 + rbx + 0x70]
nop word [rax + rax]
mov eax, dword [r10]
add eax, 0xfffffffe
cmp eax, r14d
ja 0x180231a2b
mov eax, dword [r9 - 0x10]
test eax, eax
je 0x180231a18
cmp eax, 3
jne 0x180231a2b
mov ecx, dword [r9 - 0xc]
mov r8d, dword [r9]
mov r11, qword [rbx + 0xa658]
add ecx, 4
mov edx, r14d
shl edx, cl
and edx, 0xf0
test byte [r11 + r8*8 + 0xc], dl
je 0x1802326d3
mov eax, dword [r11 + r8*8 + 0x10]
cmp dword [r9 + 8], eax
jb 0x180231a2b
movsxd r11, esi
mov eax, edi
lea r9d, [rdi + 1]
lea r10, [rax + rax*2]
lea rax, [r11 + r11*4]
shl r10, 6
lea rcx, [r10 + rax*8]
mov rax, qword [rbx + 0xa658]
mov r8d, dword [rcx + rbx + 0x70]
mov edx, dword [rax + r8*8 + 0x10]
lea rax, [r11 + r11*4 + 0xf]
lea rcx, [r10 + rax*8]
mov eax, dword [rbx + 0x530]
dec edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r9d
mov r9d, dword [rcx + rbx]
mov dword [rsp + 0x20], edx
lea rdx, [0x180062cb0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3ec]
mov dword [rsp + 0x3ec], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
mov ecx, dword [rax + 4]
cmp dword [r9], ecx
jae 0x18023272d
inc esi
add r10, 4
add r9, 0x28
cmp esi, r12d
jl 0x180231940
inc edi
inc r15
cmp edi, dword [rbx + 0x4d0]
jae 0x18022af8f
lea r11, [0x180000000]
jmp 0x180230320
mov r9d, dword [rbx + 0x2c60c]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
mov dword [rsp + 0x28], ecx
shl rdx, 6
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180060d90]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1d4]
mov dword [rsp + 0x1d4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x2c604]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
mov dword [rsp + 0x28], ecx
shl rdx, 6
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180060d00]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1dc]
mov dword [rsp + 0x1dc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
lea r9d, [rdi + 1]
mov eax, edi
lea r10, [0x180034acf]
lea rcx, [rax + rax*2]
mov eax, r12d
mov dword [rsp + 0x28], r9d
shl rcx, 6
lea r8, [rax + rax*4]
mov eax, dword [rbx + 0x530]
lea rdx, [rbx + rcx]
test r11b, r11b
lea rdi, [0x18005c0e4]
mov r9d, dword [rdx + r8*8 + 0x58]
cmovne r10, rdi
lea rdx, [0x180060e20]
mov r8, r10
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1e4]
mov dword [rsp + 0x1e4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea eax, [rdi + 1]
test r11b, r11b
lea rdi, [0x18005c0e4]
lea r8, [0x180034acf]
lea rdx, [0x180060ea0]
mov rcx, rbx
cmovne r8, rdi
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1ec]
mov dword [rsp + 0x1ec], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
lea eax, [rdi + 1]
test r11b, r11b
lea r8, [0x180034acf]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x530]
lea rdi, [0x18005c0e4]
cmovne r8, rdi
lea rdx, [0x180060f50]
mov rcx, rbx
xor r9d, r9d
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1f4]
mov dword [rsp + 0x1f4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, edi
lea r8, [0x180034acf]
lea rdx, [rax + rax*2]
mov eax, r12d
lea rcx, [rax + rax*4]
shl rdx, 6
test r11b, r11b
lea rax, [rbx + rdx]
lea rdx, [0x180060ff0]
mov r9d, dword [rax + rcx*8 + 0x58]
lea eax, [rdi + 1]
lea rdi, [0x18005c0e4]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0x530]
cmovne r8, rdi
mov dword [rsp + 0x28], eax
mov rcx, rbx
mov dword [rsp + 0x20], r9d
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x1fc]
mov dword [rsp + 0x1fc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x2cca8]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
mov dword [rsp + 0x28], ecx
shl rdx, 6
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x1800610a0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x20c]
mov dword [rsp + 0x20c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x2c60c]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
mov dword [rsp + 0x28], ecx
shl rdx, 6
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x1800610a0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x214]
mov dword [rsp + 0x214], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, esi
lea edx, [rdi + 1]
lea r8, [rax + rax*4]
mov eax, edi
mov dword [rsp + 0x20], edx
lea rcx, [rax + rax*2]
lea rdx, [0x180061140]
shl rcx, 6
lea rax, [rbx + rcx]
mov rcx, rbx
mov r8d, dword [rax + r8*8 + 0x58]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x21c]
mov dword [rsp + 0x21c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800611c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x224]
mov dword [rsp + 0x224], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea eax, [rdi + 1]
lea rdx, [0x180061270]
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x22c]
mov dword [rsp + 0x22c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, esi
lea rdx, [rax + rax*4]
mov eax, edi
lea rcx, [rax + rax*2]
shl rcx, 6
lea rax, [rbx + rcx]
mov rcx, rbx
mov r8d, dword [rax + rdx*8 + 0x58]
lea eax, [rdi + 1]
lea rdx, [0x180061310]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x530]
mov r9d, r8d
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x234]
mov dword [rsp + 0x234], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x1800613c0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x244]
mov dword [rsp + 0x244], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180061440]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x24c]
mov dword [rsp + 0x24c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea eax, [rdi + 1]
lea rdx, [0x1800614f0]
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x254]
mov dword [rsp + 0x254], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, edi
lea rcx, [rax + rax*2]
lea eax, [rdi + 1]
shl rcx, 6
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x530]
mov edx, dword [rcx + rbx + 0x58]
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r9d, edx
mov r8d, edx
lea rdx, [0x180061590]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x25c]
mov dword [rsp + 0x25c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x2c610]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
mov dword [rsp + 0x28], ecx
shl rdx, 6
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061640]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x26c]
mov dword [rsp + 0x26c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x80]
lea rdx, [0x1800616e0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x274]
mov dword [rsp + 0x274], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180060ea0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x27c]
mov dword [rsp + 0x27c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea eax, [rdi + 1]
lea rdx, [0x180061760]
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x284]
mov dword [rsp + 0x284], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, edi
lea rdx, [0x180061800]
lea rcx, [rax + rax*2]
lea eax, [rdi + 1]
shl rcx, 6
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x530]
mov r8d, dword [rcx + rbx + 0x80]
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r9d, r8d
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x28c]
mov dword [rsp + 0x28c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x1800618b0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x29c]
mov dword [rsp + 0x29c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180061930]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2a4]
mov dword [rsp + 0x2a4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
lea eax, [rdi + 1]
lea rdx, [0x1800619e0]
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2ac]
mov dword [rsp + 0x2ac], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, edi
lea rcx, [rax + rax*2]
lea eax, [rdi + 1]
shl rcx, 6
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x530]
mov edx, dword [rcx + rbx + 0x58]
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov r9d, edx
mov r8d, edx
lea rdx, [0x180061a80]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2b4]
mov dword [rsp + 0x2b4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rcx, qword [rbx + 0xa658]
mov eax, edi
lea r8, [rax + rax*2]
lea eax, [rdi + 1]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0x530]
shl r8, 6
mov edx, dword [r8 + rbx + 0x58]
mov r8d, dword [r8 + rbx + 0x80]
mov dword [rsp + 0x28], eax
mov eax, dword [rcx + rdx*8 + 0x10]
mov r9d, edx
lea rdx, [0x180061b90]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2c4]
mov dword [rsp + 0x2c4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061b30]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2d4]
mov dword [rsp + 0x2d4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, edi
lea r8, [rax + rax*2]
lea eax, [rdi + 1]
mov dword [rsp + 0x38], eax
mov eax, dword [rbx + 0x530]
shl r8, 6
mov edx, dword [r8 + rbx + 0x58]
mov r8d, dword [r8 + rbx + 0x80]
mov dword [rsp + 0x30], eax
lea rcx, [rdx + rdx*2]
mov r9d, edx
lea rdx, [0x180061e40]
mov eax, dword [rbx + rcx*4 + 0x560]
mov rcx, rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x2f4]
mov dword [rsp + 0x2f4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061de0]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x304]
mov dword [rsp + 0x304], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180061d90]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x30c]
mov dword [rsp + 0x30c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180061f80]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x31c]
mov dword [rsp + 0x31c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062130]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x33c]
mov dword [rsp + 0x33c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062220]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x34c]
mov dword [rsp + 0x34c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x180062310]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x35c]
mov dword [rsp + 0x35c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800624c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x37c]
mov dword [rsp + 0x37c], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800626f0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3a4]
mov dword [rsp + 0x3a4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800627d0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3b4]
mov dword [rsp + 0x3b4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r8d, dword [rbx + 0x530]
lea r9d, [rdi + 1]
lea rdx, [0x1800628c0]
mov rcx, rbx
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3c4]
mov dword [rsp + 0x3c4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov eax, edi
lea r8, [rax + rax*2]
lea eax, [rdi + 1]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0x530]
shl r8, 6
mov edx, dword [r8 + rbx + 0x58]
mov r8d, dword [r8 + rbx + 0x80]
mov dword [rsp + 0x28], eax
mov rcx, rdx
mov r9d, edx
lea rdx, [0x180062af0]
add rcx, rcx
mov eax, dword [rbx + rcx*8 + 0xc578]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3dc]
mov dword [rsp + 0x3dc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
mov eax, edi
lea ecx, [rdi + 1]
lea rdx, [rax + rax*2]
mov dword [rsp + 0x20], ecx
mov rcx, rbx
shl rdx, 6
mov r8d, dword [rdx + rbx + 0x58]
lea rdx, [0x180062a80]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3e4]
mov dword [rsp + 0x3e4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, dword [rbx + 0x530]
movsxd rax, esi
lea edx, [rdi + 1]
lea r8, [rax + rax*4]
mov eax, edi
mov dword [rsp + 0x20], edx
lea rcx, [rax + rax*2]
lea rdx, [0x180062c20]
shl rcx, 6
lea rax, [rbx + rcx]
mov rcx, rbx
mov r8d, dword [rax + r8*8 + 0x70]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3f4]
mov dword [rsp + 0x3f4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3
mov rax, qword [rbx + 0xa658]
lea r11d, [rdi + 1]
lea r8d, [rsi + 1]
mov r10d, dword [rax + 4]
movsxd rax, esi
lea r9, [rax + rax*4]
mov eax, edi
dec r10d
lea rcx, [rax + rax*2]
mov eax, dword [rbx + 0x530]
shl rcx, 6
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r11d
lea rdx, [rbx + rcx]
mov rcx, rbx
mov dword [rsp + 0x20], r10d
mov r9d, dword [rdx + r9*8 + 0x70]
lea rdx, [0x180062b60]
call fcn.180226700
inc dword [rbx + 0x1c]
lea rdx, [0x18025d1e8]
lea rcx, [rsp + 0x3fc]
mov dword [rsp + 0x3fc], 0x80004005
call sub.msvcrt.dll__CxxThrowException
int3