Function at 0x180043030
Capabilities:
Encrypt data using speck

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c8
movdqa xmmword [rsp + 0x2b0], xmm15
movdqa xmmword [rsp + 0x2a0], xmm14
movdqa xmmword [rsp + 0x290], xmm13
movdqa xmmword [rsp + 0x280], xmm12
movdqa xmmword [rsp + 0x270], xmm11
movdqa xmmword [rsp + 0x260], xmm10
movdqa xmmword [rsp + 0x250], xmm9
movdqa xmmword [rsp + 0x240], xmm8
movdqa xmmword [rsp + 0x230], xmm7
movaps xmmword [rsp + 0x220], xmm6
mov r14, r9
mov r15, r8
mov qword [rsp + 0x140], rdx
mov r13, rcx
mov rbx, qword [rsp + 0x330]
test r9, r9
je 0x1800431f5
lea rax, [r15 + r14]
xor edx, edx
movdqa xmm0, xmmword [str.xn__]
mov rcx, r15
jmp 0x1800430ef
xor r9d, r9d
mov rdx, r9
cmp rcx, rax
je 0x180043f4f
movzx r10d, byte [rcx]
test r10b, r10b
js 0x180043110
inc rcx
mov r8d, r10d
cmp r8d, 0x2e
je 0x1800430e0
jmp 0x1800431a0
mov r8d, r10d
and r8d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp r10b, 0xdf
jbe 0x18004316a
movzx r9d, byte [rcx + 2]
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
cmp r10b, 0xf0
jb 0x180043180
movzx r10d, byte [rcx + 3]
add rcx, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and r10d, 0x3f
or r10d, r9d
or r10d, r8d
mov r8d, r10d
cmp r8d, 0x2e
je 0x1800430e0
jmp 0x1800431a0
add rcx, 2
shl r8d, 6
or r8d, r11d
cmp r8d, 0x2e
jne 0x1800431a0
jmp 0x1800430e0
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov r8d, r9d
cmp r8d, 0x2e
je 0x1800430e0
nop dword [rax + rax]
test rdx, rdx
jne 0x1800431ab
cmp r8d, 0x2d
je 0x1800431f5
mov r9d, 5
cmp rdx, 5
jae 0x1800431da
movdqa xmmword [rsp + 0x50], xmm0
cmp rdx, 4
je 0x18004749c
cmp r8d, dword [rsp + rdx*4 + 0x50]
jne 0x1800431da
inc rdx
mov r9, rdx
cmp rdx, 4
je 0x1800431f5
lea edx, [r8 - 0x7b]
cmp edx, 0xffffffe5
ja 0x1800430e3
add r8d, 0xffffffc6
cmp r8d, 0xfffffff6
jae 0x1800430e3
mov qword [rsp + 0x200], r13
mov r8, qword [rsp + 0x140]
mov eax, dword [r8 + 0x30]
movzx ecx, byte [r8 + 0x34]
add r14, r15
xorps xmm6, xmm6
movups xmmword [rsp + 0xb8], xmm6
mov byte [rsp + 0xc8], 0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x60], 0
mov word [rsp + 0x64], 0
mov byte [rsp + 0x68], 0
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
mov dword [rsp + 0x74], 0
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x7c], 0
mov byte [rsp + 0x80], 0
mov dword [rsp + 0x84], 0
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x90], r14
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xa0], 0
mov byte [rsp + 0xb4], cl
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x118], rcx
mov qword [r8 + 0x10], 0
mov dword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov rcx, qword [rbx + 0x10]
mov qword [rsp + 0x138], rcx
movups xmmword [rsp + 0x182], xmm6
lea r12, [rsp + 0x60]
mov dword [rsp + 0xb0], eax
mov dword [rsp + 0xd0], 0
mov word [rsp + 0xd4], 0
movzx eax, word [rsp + 0x190]
mov word [rsp + 0xe6], ax
movdqu xmm0, xmmword [rsp + 0x180]
movdqu xmmword [rsp + 0xd6], xmm0
mov dword [rsp + 0xf0], 0x110000
mov byte [rsp + 0xf4], 0
lea rsi, [0x1801230dc]
mov edi, 0xff
lea rbx, [0x180126bac]
xor ecx, ecx
mov ebp, dword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
test ebp, ebp
je 0x1800433a0
test rcx, rcx
je 0x180043457
mov rdx, qword [rsp + 0xe8]
cmp rcx, 1
jne 0x180043e95
cmp rax, rdx
jb 0x180043ed5
mov qword [rsp + 0xe8], 0
jmp 0x1800433dd
test rcx, rcx
je 0x180043457
movzx edx, word [rsp + 0xd4]
cmp rcx, 1
jne 0x180043e9f
cmp dx, 4
ja 0x18004749c
cmp rax, rdx
jb 0x180043ecd
test rdx, rdx
je 0x1800433dd
mov word [rsp + 0xd4], 0
mov qword [rsp + 0x50], 0
jmp 0x180043457
mov r14d, ebp
mov eax, 0xdee95c4d
imul r14, rax
shr r14, 0x29
lea edx, [r14 + 0x1100]
mov rcx, r12
call fcn.180041800
imul eax, r14d, 0x24c
mov ecx, ebp
sub ecx, eax
imul eax, ecx, 0x925
shr eax, 0x10
add eax, 0x1161
movzx edx, ax
mov rcx, r12
call fcn.180041800
mov eax, ebp
shr eax, 2
imul rax, rax, 0x24924925
shr rax, 0x20
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
add ecx, eax
sub ebp, ecx
je 0x180043457
add ebp, 0x11a7
mov edx, ebp
mov rcx, r12
call fcn.180041800
mov rdx, qword [rsp + 0xc0]
test rdx, rdx
jne 0x180043750
movzx ecx, byte [rsp + 0xb0]
cmp cl, 2
je 0x180043953
mov r8, qword [rsp + 0xa0]
mov r14, qword [rsp + 0x88]
mov r10, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
movzx r11d, byte [rsp + 0xb1]
mov r13, qword [rsp + 0xa8]
test r8, r8
je 0x1800434c4
cmp r8, r13
jne 0x180043c3e
mov qword [rsp + 0xa0], 0
cmp r14, r10
je 0x18004394b
lea rdx, [r14 + 1]
mov qword [rsp + 0x88], rdx
movzx r8d, byte [r14]
test r8b, r8b
js 0x180043500
mov r14, rdx
mov edx, r8d
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jae 0x1800435b0
jmp 0x1800437a0
mov edx, r8d
and edx, 0x1f
lea r9, [r14 + 2]
mov qword [rsp + 0x88], r9
movzx ebp, byte [r14 + 1]
and ebp, 0x3f
cmp r8b, 0xdf
jbe 0x180043578
lea r15, [r14 + 3]
mov qword [rsp + 0x88], r15
movzx r9d, byte [r14 + 2]
shl ebp, 6
and r9d, 0x3f
or r9d, ebp
cmp r8b, 0xf0
jb 0x18004358f
lea r8, [r14 + 4]
mov qword [rsp + 0x88], r8
movzx ebp, byte [r14 + 3]
and edx, 7
shl edx, 0x12
shl r9d, 6
and ebp, 0x3f
or ebp, r9d
or ebp, edx
mov r14, r8
mov edx, ebp
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jae 0x1800435b0
jmp 0x1800437a0
shl edx, 6
or edx, ebp
mov r14, r9
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jae 0x1800435b0
jmp 0x1800437a0
shl edx, 0xc
or r9d, edx
mov r14, r15
mov edx, r9d
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jb 0x1800437a0
nop dword [rax]
cmp edx, 0x110000
je 0x18004394b
lea r8d, [rdx - 0x61]
cmp r8d, 0x1a
jb 0x1800437a0
lea r8d, [rdx - 0x30]
cmp r8d, 0xa
jb 0x1800437a0
mov r8d, 0x75a
xor ebp, ebp
mov r9d, 0x75a
jmp 0x1800435f8
mov r9, r8
sub r8, rbp
jbe 0x18004362d
shr r8, 1
add r8, rbp
xor r15d, r15d
cmp dword [rsi + r8*8], edx
setne r15b
cmovb r15d, edi
cmp r15b, 1
je 0x1800435f0
movzx ebp, r15b
cmp ebp, 0xff
jne 0x180043640
inc r8
mov rbp, r8
mov r8, r9
sub r8, rbp
ja 0x1800435f8
dec rbp
mov r8, rbp
cmp rbp, 0x759
ja 0x18004749c
movzx ebp, word [rsi + r8*8 + 4]
mov r9d, ebp
and r9d, 0x7fff
test bp, bp
js 0x180043667
movzx r8d, word [rsi + r8*8]
mov ebp, edx
sub bp, r8w
movzx r9d, r9w
add r9d, ebp
movzx r8d, r9w
cmp r8d, 0x1f73
jae 0x18004749c
movzx r9d, r9w
movzx ebp, byte [rbx + r9*4]
mov r8d, 0
cmp ebp, 1
je case.default.0x1800436a1
mov r8d, ebp
lea r15, [0x180047944]
movsxd r8, dword [r15 + r8*4]
add r8, r15
jmp r8
mov ecx, dword [rsp + 0x60]
mov rax, qword [rsp + 0xb8]
test ecx, ecx
je 0x1800439c3
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x78]
jmp 0x1800439d8
cmp edx, 0x110000
je 0x18004394b
cmp byte [rsp + 0xc8], 0
je 0x18004386c
cmp edx, 0x80
jb 0x18004344f
lea ebp, [rdx - 0xac00]
cmp ebp, 0x2ba4
jb 0x1800433e8
imul ecx, edx, 0x9e3779b9
imul eax, edx, 0x31415926
xor ecx, eax
imul r8, rcx, 0xee4
shr r8, 0x1f
and r8d, 0xfffffffe
lea r9, [0x180146c74]
movzx r8d, word [r8 + r9]
add r8d, edx
imul r8d, r8d, 0x9e3779b9
xor r8d, eax
imul r8, r8, 0xee4
shr r8, 0x1d
and r8d, 0xfffffff8
lea r9, [0x180148a3c]
mov r14, qword [r8 + r9]
cmp edx, r14d
jne 0x180043c69
mov rax, r14
shr rax, 0x20
movzx ecx, ax
cmp ecx, 0x1668
jae 0x18004749c
shr r14, 0x30
movzx eax, ax
mov ecx, 0x1667
sub rcx, rax
cmp rcx, r14
jb 0x18004749c
lea rcx, [0x18015015c]
lea r13, [rcx + rax*4]
test r14, r14
jne 0x180043ceb
jmp 0x180043457
cmp edx, 0x80
jb 0x18004344f
lea ebp, [rdx - 0xac00]
cmp ebp, 0x2ba4
jb 0x1800433e8
imul eax, edx, 0x9e3779b9
imul ecx, edx, 0x31415926
xor eax, ecx
imul rax, rax, 0x80d
shr rax, 0x20
lea r8, [0x18013e6b8]
movzx eax, word [r8 + rax*2]
add eax, edx
imul eax, eax, 0x9e3779b9
xor eax, ecx
imul rax, rax, 0x80d
shr rax, 0x20
lea rcx, [0x18013f6d4]
mov r14, qword [rcx + rax*8]
cmp edx, r14d
jne 0x18004344f
mov rax, r14
shr rax, 0x20
movzx ecx, ax
cmp ecx, 0xd4f
jae 0x18004749c
shr r14, 0x30
movzx eax, ax
mov ecx, 0xd4e
sub rcx, rax
cmp rcx, r14
jb 0x18004749c
test r14, r14
je 0x180043457
lea rcx, [0x18014373c]
lea r13, [rcx + rax*4]
shl r14, 2
xor r15d, r15d
nop word cs:[rax + rax]
mov edx, dword [r13 + r15]
mov rcx, r12
call fcn.180041800
add r15, 4
cmp r14, r15
jne 0x180043930
jmp 0x180043457
mov byte [rsp + 0xb0], 2
cmp dword [rsp + 0x60], 0
je 0x180043969
mov rax, qword [rsp + 0x78]
test rax, rax
jne 0x180043977
jmp 0x180043e20
movzx eax, word [rsp + 0x64]
test rax, rax
je 0x180043e20
mov rcx, r12
call fcn.1800410b0
mov ecx, dword [rsp + 0x60]
test ecx, ecx
je 0x1800439a6
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0xc0], rdx
mov rax, qword [rsp + 0xb8]
test ecx, ecx
jne 0x180043764
jmp 0x1800439c3
movzx edx, word [rsp + 0x64]
mov qword [rsp + 0xc0], rdx
mov rax, qword [rsp + 0xb8]
test ecx, ecx
jne 0x180043764
movzx r9d, word [rsp + 0x64]
lea r8, [rsp + 0x68]
cmp r9, 5
jae 0x18004749c
cmp rax, r9
jae 0x18004749c
mov r14d, dword [r8 + rax*8 + 4]
inc rax
cmp rax, rdx
jne 0x180043aa0
test ecx, ecx
je 0x180043aaa
mov rax, qword [rsp + 0x78]
sub rax, rdx
je 0x180043ab8
xor ecx, ecx
nop word [rax + rax]
mov rdx, qword [rsp + 0xc0]
add rdx, rcx
cmp dword [rsp + 0x60], 0
je 0x180043a40
mov r8, qword [rsp + 0x78]
cmp rdx, r8
jae 0x18004749c
mov r9, qword [rsp + 0x68]
jmp 0x180043a5e
movzx r8d, word [rsp + 0x64]
cmp r8, 5
jae 0x18004749c
lea r9, [rsp + 0x68]
cmp rdx, r8
jae 0x18004749c
cmp rcx, r8
jae 0x18004749c
movzx r8d, byte [r9 + rdx*8]
mov edx, dword [r9 + rdx*8 + 4]
mov byte [r9 + rcx*8], r8b
mov dword [r9 + rcx*8 + 4], edx
lea rdx, [rcx + 1]
mov rcx, rdx
cmp rax, rdx
jne 0x180043a10
mov ecx, dword [rsp + 0x60]
test ecx, ecx
jne 0x180043abc
movzx ecx, word [rsp + 0x64]
cmp rax, rcx
jae 0x180043ac8
mov word [rsp + 0x64], ax
jmp 0x180043ac8
mov qword [rsp + 0xb8], rax
jmp 0x180043ad3
movzx eax, word [rsp + 0x64]
sub rax, rdx
jne 0x180043a08
test ecx, ecx
je 0x180043a8e
cmp qword [rsp + 0x78], rax
jb 0x180043ac8
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0xb8]
movups xmmword [rax], xmm6
imul eax, r14d, 0x9e3779b9
imul ecx, r14d, 0x31415926
xor eax, ecx
imul rax, rax, 0x39a
shr rax, 0x1f
and eax, 0xfffffffe
lea rdx, [0x18013acdc]
movzx eax, word [rax + rdx]
add eax, r14d
imul eax, eax, 0x9e3779b9
xor eax, ecx
imul rax, rax, 0x39a
shr rax, 0x1e
and eax, 0xfffffffc
lea rcx, [0x18013b410]
mov ebp, dword [rax + rcx]
mov eax, ebp
shr eax, 8
cmp eax, r14d
mov eax, 0
cmovne ebp, eax
mov r13d, dword [rsp + 0xf0]
cmp r13d, 0x110000
jne 0x180043b60
test bpl, bpl
jne 0x180043e10
mov dword [rsp + 0xf0], r14d
jmp 0x180043457
cmp byte [rsp + 0xf4], 0
je 0x180043b92
cmp byte [rsp + 0xf5], bpl
jae 0x180043bb2
mov ecx, r13d
mov edx, r14d
call fcn.1800e99f0
cmp eax, 0x110000
je 0x180043bbb
mov dword [rsp + 0xf0], eax
jmp 0x180043457
mov ecx, r13d
mov edx, r14d
call fcn.1800e99f0
cmp eax, 0x110000
jne 0x180043c5d
test bpl, bpl
jne 0x180043bbb
jmp 0x180043e88
test bpl, bpl
je 0x180043e61
cmp dword [rsp + 0xd0], 0
je 0x180043c05
mov rdx, qword [rsp + 0xe8]
cmp rdx, qword [rsp + 0xe0]
jne 0x180043bec
lea rcx, [rsp + 0xd8]
call fcn.1800419e0
mov rdx, qword [rsp + 0xe8]
mov rax, qword [rsp + 0xd8]
mov dword [rax + rdx*4], r14d
inc rdx
mov qword [rsp + 0xe8], rdx
jmp 0x180043c29
movzx eax, word [rsp + 0xd4]
cmp rax, 3
ja 0x180043d95
mov dword [rsp + rax*4 + 0xd8], r14d
inc eax
mov word [rsp + 0xd4], ax
mov byte [rsp + 0xf4], 1
mov byte [rsp + 0xf5], bpl
jmp 0x180043457
lea rax, [r8 + 1]
mov qword [rsp + 0xa0], rax
movzx eax, byte [r8]
test al, al
js 0x180043d1b
mov edx, eax
jmp 0x1800437a0
mov dword [rsp + 0xf0], eax
jmp 0x180043457
imul rcx, rcx, 0x80d
shr rcx, 0x20
lea r8, [0x18013e6b8]
movzx ecx, word [r8 + rcx*2]
add ecx, edx
imul ecx, ecx, 0x9e3779b9
xor ecx, eax
imul rax, rcx, 0x80d
shr rax, 0x20
lea rcx, [0x18013f6d4]
mov r14, qword [rcx + rax*8]
cmp edx, r14d
jne 0x18004344f
mov rax, r14
shr rax, 0x20
movzx ecx, ax
cmp ecx, 0xd4f
jae 0x18004749c
shr r14, 0x30
movzx eax, ax
mov ecx, 0xd4e
sub rcx, rax
cmp rcx, r14
jb 0x18004749c
lea rcx, [0x18014373c]
lea r13, [rcx + rax*4]
test r14, r14
je 0x180043457
shl r14, 2
xor r15d, r15d
nop word cs:[rax + rax]
mov edx, dword [r13 + r15]
mov rcx, r12
call fcn.180041800
add r15, 4
cmp r14, r15
jne 0x180043d00
jmp 0x180043457
mov edx, eax
and edx, 0x1f
lea rcx, [r8 + 2]
mov qword [rsp + 0xa0], rcx
movzx r9d, byte [r8 + 1]
and r9d, 0x3f
cmp al, 0xdf
jbe 0x180043d7e
lea rcx, [r8 + 3]
mov qword [rsp + 0xa0], rcx
movzx ecx, byte [r8 + 2]
shl r9d, 6
and ecx, 0x3f
or ecx, r9d
cmp al, 0xf0
jb 0x180043d89
lea rax, [r8 + 4]
mov qword [rsp + 0xa0], rax
movzx eax, byte [r8 + 3]
and edx, 7
shl edx, 0x12
shl ecx, 6
and eax, 0x3f
or eax, ecx
or eax, edx
jmp 0x180043c56
shl edx, 6
or edx, r9d
jmp 0x1800437a0
shl edx, 0xc
or ecx, edx
mov edx, ecx
jmp 0x1800437a0
lea rcx, [rsp + 0x1b0]
lea rdx, [rsp + 0xd4]
mov r8d, r14d
call fcn.180105a00
cmp dword [rsp + 0xd0], 0
je 0x180043dd9
cmp qword [rsp + 0xe0], 0
je 0x180043dd9
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
movdqu xmm0, xmmword [rsp + 0x1b0]
movdqu xmm1, xmmword [rsp + 0x1c0]
lea rax, [rsp + 0xb8]
movdqu xmmword [rax + 0x28], xmm1
movdqu xmmword [rax + 0x18], xmm0
jmp 0x180043c29
mov r13d, r14d
jmp 0x180043f30
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x58], 0
mov r13d, dword [rsp + 0xf0]
mov ecx, 2
mov eax, 0
cmp r13d, 0x110000
je 0x18004334d
mov dword [rsp + 0xf0], 0x110000
jmp 0x180043f30
mov dword [rsp + 0xf0], r14d
mov byte [rsp + 0xf4], 0
mov qword [rsp + 0x50], 1
mov qword [rsp + 0x58], 0
jmp 0x180043f30
mov dword [rsp + 0xf0], r14d
jmp 0x180043f30
cmp rax, rdx
jae 0x180043eec
mov rcx, r14
jmp 0x180043eb6
cmp dx, 5
jae 0x18004749c
lea rcx, [rsp + 0xd8]
cmp rax, rdx
jae 0x180043efa
mov r13d, dword [rcx + rax*4]
inc rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x58], rax
jmp 0x180043f30
lea r14, [rsp + 0xd8]
mov r13d, dword [r14 + rax*4]
inc rax
mov qword [rsp + 0x50], 1
mov qword [rsp + 0x58], rax
jmp 0x180043f30
mov qword [rsp + 0xe8], 0
jmp 0x180043f09
test rdx, rdx
je 0x180043f09
mov word [rsp + 0xd4], 0
mov r13d, dword [rsp + 0xf0]
mov dword [rsp + 0xf0], 0x110000
cmp r13d, 0x110000
je 0x180044298
nop dword [rax]
mov rcx, qword [rsp + 0x140]
mov edx, r13d
call fcn.1800059a0
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
jmp 0x18004334d
mov rax, qword [rbx + 8]
mov r12, qword [rbx + 0x10]
sub rax, r12
cmp rax, r14
jb 0x180044281
mov rcx, qword [rbx]
add rcx, r12
mov rdx, r15
mov r8, r14
call fcn.1800f64f0
add r12, r14
mov qword [rbx + 0x10], r12
xor ebp, ebp
xor r14d, r14d
mov dword [rsp + 0x118], 0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
xor r10d, r10d
xor r11d, r11d
xor esi, esi
xor edi, edi
xor r12d, r12d
xor r15d, r15d
mov rax, qword [rsp + 0x140]
cmp byte [rax + 0x32], 0
je 0x1800441b0
mov dword [rsp + 0x30], r14d
mov rax, rbx
mov rbx, qword [rbx]
mov r14, qword [rax + 0x10]
movabs rax, 0x2e0000002e
test r14, r14
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x110], esi
mov dword [rsp + 0x158], edi
mov dword [rsp + 0x24], r15d
mov dword [rsp + 0x138], ebp
je 0x1800440da
cmp byte [rbx + r14 - 1], 0x2e
jne 0x180044007
dec r14
je 0x1800440ef
mov dword [rsp + 0x38], r12d
mov esi, r10d
mov ebp, r9d
mov r12d, r8d
mov r15d, edx
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], 1
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 1
lea rdi, [rsp + 0x50]
nop word cs:[rax + rax]
mov rcx, rdi
call fcn.180040d50
test rax, rax
je 0x180044082
test rdx, rdx
jne 0x180044070
test rax, rax
mov edx, r15d
mov r8d, r12d
mov r9d, ebp
mov r10d, esi
mov r11d, dword [rsp + 0x28]
mov esi, dword [rsp + 0x110]
mov r15d, dword [rsp + 0x24]
mov r12d, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x138]
movabs rax, 0x2e0000002e
je 0x1800440cc
mov r12b, 1
cmp r14, 0xfd
ja 0x1800441a8
jmp 0x180044102
cmp r14, 0xfd
jbe 0x180044102
jmp 0x1800441a8
xor r14d, r14d
mov r12b, 1
cmp r14, 0xfd
ja 0x1800441a8
jmp 0x180044102
xor r14d, r14d
mov r12b, 1
cmp r14, 0xfd
ja 0x1800441a8
mov dword [rsp + 0x38], r12d
mov esi, r10d
mov ebp, r9d
mov r12d, r8d
mov r15d, edx
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], 1
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 1
lea rdi, [rsp + 0x50]
nop dword [rax]
mov rcx, rdi
call fcn.180040d50
test rax, rax
je 0x180044173
cmp rdx, 0x40
jb 0x180044160
test rax, rax
mov edx, r15d
mov r8d, r12d
mov r9d, ebp
mov r10d, esi
mov r11d, dword [rsp + 0x28]
mov esi, dword [rsp + 0x110]
mov edi, dword [rsp + 0x158]
mov r15d, dword [rsp + 0x24]
mov r12d, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x138]
je 0x1800441ab
mov dil, 1
mov r14d, dword [rsp + 0x30]
mov eax, r14d
or al, bpl
mov ebx, dword [rsp + 0x118]
mov ecx, ebx
or cl, dl
or cl, al
mov eax, r8d
or al, r9b
or al, r10b
or al, cl
mov ecx, r11d
or cl, sil
or cl, dil
or cl, r12b
or cl, al
mov al, 2
or cl, r15b
je 0x180044211
mov byte [r13 + 1], r14b
mov byte [r13 + 2], bl
mov byte [r13 + 3], dl
mov byte [r13 + 4], r8b
mov byte [r13 + 5], r9b
mov byte [r13 + 6], r10b
mov byte [r13 + 7], r11b
mov byte [r13 + 8], sil
mov byte [r13 + 9], dil
mov byte [r13 + 0xa], r12b
mov byte [r13 + 0xb], r15b
mov eax, ebp
mov byte [r13], al
movaps xmm6, xmmword [rsp + 0x220]
movaps xmm7, xmmword [rsp + 0x230]
movaps xmm8, xmmword [rsp + 0x240]
movaps xmm9, xmmword [rsp + 0x250]
movaps xmm10, xmmword [rsp + 0x260]
movaps xmm11, xmmword [rsp + 0x270]
movaps xmm12, xmmword [rsp + 0x280]
movaps xmm13, xmmword [rsp + 0x290]
movaps xmm14, xmmword [rsp + 0x2a0]
movaps xmm15, xmmword [rsp + 0x2b0]
add rsp, 0x2c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rbx
mov rdx, r12
mov r8, r14
call fcn.180105950
mov r12, qword [rbx + 0x10]
jmp 0x180043f63
cmp dword [rsp + 0x60], 0
je 0x1800442bb
cmp qword [rsp + 0x70], 0
je 0x1800442bb
mov r8, qword [rsp + 0x68]
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test ebp, ebp
mov rbx, qword [rsp + 0x330]
je 0x1800442e4
cmp qword [rsp + 0xe0], 0
je 0x1800442e4
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
movabs rdi, 0x8080808080808080
mov qword [rsp + 0x180], 8
xorps xmm6, xmm6
movups xmmword [rsp + 0x188], xmm6
mov rcx, qword [rsp + 0x140]
mov rax, qword [rcx]
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], rcx
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], rcx
mov qword [rsp + 0x1d0], 0
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x1e0], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x1e8], rax
mov word [rsp + 0x1f0], 1
mov rax, qword [rsp + 0x118]
and rax, 0xffffffffffff00ff
mov qword [rsp + 0x1a0], rax
mov r15d, 0xff
movdqa xmm7, xmmword [0x18010da30]
movdqa xmm8, xmmword [0x18010d770]
movdqa xmm14, xmmword [0x18010d8a0]
movdqa xmm15, xmmword [0x18010da90]
movdqa xmm9, xmmword [0x18010daa0]
movdqa xmm10, xmmword [0x18010dab0]
movdqa xmm12, xmmword [0x18010dad0]
movdqa xmm13, xmmword [0x18010dae0]
movdqa xmm11, xmmword [0x18010daf0]
xor esi, esi
mov dword [rsp + 0x24], 0
jmp 0x180044408
mov byte [rsp + 0x40], 1
mov sil, 1
mov al, 1
mov dword [rsp + 0x24], eax
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
lea rcx, [rsp + 0x1b0]
call fcn.180040d50
test rax, rax
je 0x180046144
mov rbp, rax
mov r13, rdx
test sil, 1
je 0x18004444e
mov rdx, qword [rbx + 0x10]
cmp rdx, qword [rbx + 8]
jne 0x180044440
mov rcx, rbx
call fcn.180005ae0
mov rdx, qword [rbx + 0x10]
mov rax, qword [rbx]
mov byte [rax + rdx], 0x2e
inc rdx
mov qword [rbx + 0x10], rdx
cmp r13, 4
jb 0x180044461
cmp dword [rbp], 0x2d2d6e78
je 0x1800445fb
test byte [rsp + 0x24], 1
jne 0x1800445af
test r13, r13
lea r14, [0x180136914]
je 0x1800445a7
mov rax, rbp
add rax, r13
mov rcx, rbp
jmp 0x180044490
cmp rcx, rax
je 0x1800445a7
movzx r9d, byte [rcx]
test r9b, r9b
js 0x1800444a1
inc rcx
mov edx, r9d
jmp 0x180044504
mov edx, r9d
and edx, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp r9b, 0xdf
jbe 0x1800444eb
movzx r8d, byte [rcx + 2]
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
cmp r9b, 0xf0
jb 0x1800444f7
movzx r9d, byte [rcx + 3]
add rcx, 4
and edx, 7
shl edx, 0x12
shl r8d, 6
and r9d, 0x3f
or r9d, r8d
or r9d, edx
jmp 0x18004449c
add rcx, 2
shl edx, 6
or edx, r10d
jmp 0x180044504
add rcx, 3
shl edx, 0xc
or r8d, edx
mov edx, r8d
lea r8d, [rdx - 0x21]
cmp r8d, 0x5e
jb 0x180044487
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x18004453c
mov r9, r8
sub r8, r10
jbe 0x180044487
shr r8, 1
add r8, r10
lea r11, [r8 + r8*2]
xor esi, esi
cmp dword [r14 + r11*4], edx
seta sil
cmp dword [r14 + r11*4 + 4], edx
cmovb esi, r15d
cmp sil, 1
je 0x180044530
movzx r10d, sil
cmp r10d, 0xff
jne 0x18004457f
inc r8
mov r10, r8
mov r8, r9
sub r8, r10
ja 0x18004453c
jmp 0x180044487
movzx edx, byte [r14 + r11*4 + 8]
cmp rdx, 0x11
ja 0x180044487
mov r8d, 0x20003
bt r8, rdx
jae 0x180044487
mov al, 1
mov dword [rsp + 0x24], eax
jmp 0x1800445af
mov dword [rsp + 0x24], 0
mov rcx, rbp
mov rdx, r13
mov r8, qword [rsp + 0x118]
lea r9, [rsp + 0x40]
call fcn.1800422d0
mov rax, qword [rbx + 8]
mov r14, qword [rbx + 0x10]
sub rax, r14
cmp rax, r13
jb 0x180044a33
mov rcx, qword [rbx]
add rcx, r14
mov rdx, rbp
mov r8, r13
call fcn.1800f64f0
add r13, r14
mov qword [rbx + 0x10], r13
mov sil, 1
jmp 0x180044408
lea r12, [rbp + 4]
add r13, 0xfffffffffffffffc
mov qword [rsp + 0x190], 0
lea rax, [rbp + 0xb]
and rax, 0xfffffffffffffff8
sub rax, r12
mov rcx, rbp
add rcx, 3
mov r14, r13
jmp 0x18004462f
cmp r14, r13
ja 0x180044718
mov r8, r14
sub r8, rax
and r8d, 0xf
cmp r14, rax
mov r9d, 0
mov rdx, r14
cmova rdx, rax
cmovae r9, r8
mov r8, r14
sub r8, r9
jb 0x18004749c
lea r11, [rcx + r14]
xor r10d, r10d
cmp r9, r10
je 0x180044677
inc r10
cmp byte [r11], 0x2d
lea r11, [r11 - 1]
jne 0x180044660
sub r14, r10
jmp 0x1800446ca
mov r9, r8
cmp r8, rdx
jbe 0x1800446ae
lea r8, [r9 - 0x10]
movdqu xmm0, xmmword [rbp + r9 - 0xc]
movdqa xmm1, xmm0
pxor xmm1, xmm7
paddq xmm1, xmm8
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq r10, xmm1
test r10, rdi
je 0x180044677
cmp r9, r14
ja 0x18004749c
mov r14, r9
sub r14, 1
jb 0x180044718
cmp byte [rcx + r9], 0x2d
mov r9, r14
jne 0x1800446ba
mov r8, r14
inc r8
je 0x180044626
cmp r13, r8
jb 0x180044626
cmp byte [r12 + r14], 0x2d
jne 0x180044626
test r14, r14
je 0x18004575c
cmp r14, r13
ja 0x180047511
mov rsi, r13
sub rsi, r8
jbe 0x180045766
cmp byte [r12 + r8], 0xbf
jg 0x18004576c
jmp 0x180047524
lea rax, [0x180159498]
mov qword [rsp + 0x38], rax
xor r14d, r14d
mov rsi, r13
mov rcx, r14
cmp r14, 8
jb 0x18004578e
mov rcx, qword [rsp + 0x38]
lea rdx, [rcx + 7]
and rdx, 0xfffffffffffffff8
mov rax, rdx
sub rax, rcx
mov rcx, r14
cmp rax, r14
ja 0x18004578e
mov rcx, qword [rsp + 0x38]
test qword [rcx], rdi
jne 0x1800443ec
cmp rdx, qword [rsp + 0x38]
mov ecx, 8
cmove rax, rcx
lea rcx, [r14 - 8]
cmp rax, rcx
jae 0x180044793
mov rdx, qword [rsp + 0x38]
test qword [rdx + rax], rdi
jne 0x1800443ec
add rax, 8
cmp rax, rcx
jb 0x18004477b
mov rax, qword [rsp + 0x38]
test qword [rax + rcx], rdi
jne 0x1800443ec
test rsi, rsi
je 0x180044a4a
add rsi, r12
xor eax, eax
mov qword [rsp + 0x28], rax
mov r15d, 0x48
mov dword [rsp + 0x30], 0x80
mov ebx, r14d
xor ebp, ebp
lea r9d, [r15 + 0x1a]
inc r12
mov r10d, r15d
neg r10d
mov r11d, 1
mov r13d, 0x24
mov ecx, ebp
movzx eax, byte [r12 - 1]
lea edx, [rax - 0x30]
cmp dl, 0xa
jb 0x180044806
lea edx, [rax - 0x41]
cmp dl, 0x1a
jb 0x18004480a
add al, 0x9f
mov edx, eax
cmp al, 0x19
jbe 0x18004480a
jmp 0x1800443ec
add al, 0xea
mov edx, eax
test r11d, r11d
je 0x18004749c
movzx r8d, dl
mov eax, ecx
not eax
xor edx, edx
div r11d
cmp eax, r8d
jb 0x1800443ec
mov eax, r11d
imul eax, r8d
add ecx, eax
lea eax, [r10 + r13]
cmp r13d, r9d
mov edx, 0x1a
cmovae eax, edx
cmp r13d, r15d
mov edx, 1
cmovbe eax, edx
cmp eax, r8d
ja 0x180044891
mov r8d, 0x24
sub r8d, eax
mov eax, r8d
mul r11d
jo 0x1800443ec
cmp r12, rsi
je 0x1800443ec
add r13d, 0x24
imul r11d, r8d
inc r12
movzx eax, byte [r12 - 1]
lea edx, [rax - 0x30]
cmp dl, 0xa
jae 0x1800447f1
jmp 0x180044806
inc ebx
je 0x18004749c
mov eax, ecx
sub eax, ebp
test ebp, ebp
mov r8d, 2
mov edx, 0x2bc
cmove r8d, edx
xor r15d, r15d
xor edx, edx
div r8d
mov r8d, eax
xor edx, edx
div ebx
add eax, r8d
cmp eax, 0x1c8
jb 0x1800448fa
xor r15d, r15d
mov r9d, 0xd41d41d5
mov edx, eax
imul rdx, r9
shr rdx, 0x20
mov r8d, eax
sub r8d, edx
shr r8d, 1
add r8d, edx
shr r8d, 5
add r15d, 0x24
cmp eax, 0x3e57
mov eax, r8d
ja 0x1800448d0
jmp 0x1800448fd
mov r8d, eax
lea eax, [r8*4]
lea eax, [rax + rax*8]
add r8d, 0x26
xor edx, edx
div r8w
mov r13d, eax
mov eax, ecx
xor edx, edx
div ebx
add dword [rsp + 0x30], eax
jb 0x1800443ec
mov eax, ecx
xor edx, edx
div ebx
mov eax, dword [rsp + 0x30]
xor eax, 0xd800
add eax, 0xffef0000
cmp eax, 0xffef0800
jb 0x1800443ec
mov ebp, edx
mov r8, qword [rsp + 0x180]
mov edi, edx
cmp qword [rsp + 0x28], 0
je 0x180044980
mov rax, qword [rsp + 0x28]
shl rax, 4
xor ecx, ecx
jmp 0x18004496e
add rcx, 0x10
cmp rax, rcx
je 0x180044980
mov rdx, qword [r8 + rcx]
cmp rdx, rdi
jb 0x180044965
inc rdx
mov qword [r8 + rcx], rdx
jmp 0x180044965
mov rdx, qword [rsp + 0x28]
cmp rdx, qword [rsp + 0x188]
jne 0x1800449ac
lea rcx, [rsp + 0x180]
call fcn.180040be0
mov r8, qword [rsp + 0x180]
mov rdx, qword [rsp + 0x190]
movzx eax, r13w
add r15d, eax
mov rax, rdx
shl rax, 4
mov qword [r8 + rax], rdi
mov ecx, dword [rsp + 0x30]
mov dword [r8 + rax + 8], ecx
lea rcx, [rdx + 1]
mov rax, rcx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x190], rcx
inc ebp
cmp r12, rsi
movabs rdi, 0x8080808080808080
jne 0x1800447c8
mov qword [rsp + 0x100], r8
cmp qword [rsp + 0x28], 0x15
jae 0x1800457c7
cmp qword [rsp + 0x28], 1
jbe 0x180045efd
mov r8d, 1
mov rsi, qword [rsp + 0x100]
mov rcx, rsi
mov r13, qword [rsp + 0x28]
mov rdx, r13
call fcn.180040ca0
mov r9, rsi
jmp 0x180044a55
mov rcx, rbx
mov rdx, r14
mov r8, r13
call fcn.180105950
mov r14, qword [rbx + 0x10]
jmp 0x1800445db
mov r9, qword [rsp + 0x180]
xor r13d, r13d
lea r8, [r14 + r13]
mov rbx, qword [rsp + 0x330]
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x10]
mov qword [rsp + 0x110], rcx
sub rax, rcx
cmp rax, r8
mov r12, qword [rsp + 0x38]
mov rsi, r9
jb 0x1800457af
lea rax, [r12 + r14]
mov qword [rsp + 0x30], rax
test r9, r9
mov r15d, 0xff
mov qword [rsp + 0x28], r13
je 0x180044cc6
xor edi, edi
xor ebx, ebx
cmp rdi, r13
jb 0x180044b3d
cmp r12, qword [rsp + 0x30]
je 0x180044cd4
movzx eax, byte [r12]
test al, al
js 0x180044acd
inc r12
mov ebp, eax
jmp 0x180044b56
mov ebp, eax
and ebp, 0x1f
movzx edx, byte [r12 + 1]
and edx, 0x3f
cmp al, 0xdf
jbe 0x180044b0d
movzx ecx, byte [r12 + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp al, 0xf0
jb 0x180044b18
movzx eax, byte [r12 + 3]
add r12, 4
and ebp, 7
shl ebp, 0x12
shl ecx, 6
and eax, 0x3f
or eax, ecx
or ebp, eax
jmp 0x180044b56
add r12, 2
shl ebp, 6
or ebp, edx
jmp 0x180044b56
add r12, 3
shl ebp, 0xc
or ebp, ecx
jmp 0x180044b56
mov rax, qword [r14]
mov byte [rax + rdx], bpl
inc rdx
mov qword [r14 + 0x10], rdx
inc rbx
cmp rdi, r13
jae 0x180044aaf
mov rax, rdi
shl rax, 4
cmp rbx, qword [r9 + rax]
jne 0x180044bf5
inc rdi
mov ebp, dword [r9 + rax + 8]
cmp ebp, 0x80
jae 0x180044b81
mov r14, qword [rsp + 0x330]
mov rdx, qword [r14 + 0x10]
cmp rdx, qword [r14 + 8]
jne 0x180044b23
mov rcx, r14
call fcn.180005ae0
mov r9, rsi
mov rdx, qword [r14 + 0x10]
jmp 0x180044b23
mov dword [rsp + 0x50], 0
cmp ebp, 0x10000
mov r14d, 4
sbb r14, 0
cmp ebp, 0x800
mov eax, 2
cmovb r14, rax
cmp r14, 2
je 0x180044c05
cmp r14, 3
je 0x180044c24
cmp r14, 4
jne 0x18004749c
mov r13, r12
mov eax, ebp
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x50], al
mov eax, ebp
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x51], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x52], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x53], bpl
jmp 0x180044c4e
cmp r12, qword [rsp + 0x30]
jne 0x180044aba
jmp 0x180046140
mov r13, r12
mov eax, ebp
shr eax, 6
and al, 0x1f
or al, 0xc0
mov byte [rsp + 0x50], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x51], bpl
jmp 0x180044c4e
mov r13, r12
mov eax, ebp
shr eax, 0xc
and al, 0xf
or al, 0xe0
mov byte [rsp + 0x50], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x51], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x52], bpl
mov rcx, qword [rsp + 0x330]
mov rax, qword [rcx + 8]
mov r12, qword [rcx + 0x10]
sub rax, r12
cmp rax, r14
jb 0x180044caa
mov r15, qword [rsp + 0x330]
mov rcx, qword [r15]
add rcx, r12
lea rdx, [rsp + 0x50]
mov r8, r14
call fcn.1800f64f0
add r12, r14
mov qword [r15 + 0x10], r12
inc rbx
mov r15d, 0xff
mov r12, r13
mov r13, qword [rsp + 0x28]
mov r9, rsi
cmp rdi, r13
jae 0x180044aaf
jmp 0x180044b3d
mov r15, qword [rsp + 0x330]
mov rcx, r15
mov rdx, r12
mov r8, r14
call fcn.180105950
mov r12, qword [r15 + 0x10]
jmp 0x180044c66
test r14, r14
jne 0x180044d2f
test r13, r13
jne 0x180046142
mov rbx, qword [rsp + 0x330]
mov r14, qword [rbx]
mov rdx, qword [rbx + 0x10]
mov r8, qword [rsp + 0x110]
test r8, r8
je 0x180044ecf
mov r12, rdx
sub r12, r8
movabs rdi, 0x8080808080808080
jbe 0x180044ede
cmp byte [r14 + r8], 0xbf
jg 0x180044ee4
jmp 0x180047504
mov rax, qword [rbx]
mov byte [rax + rdx], dil
inc rdx
mov qword [rbx + 0x10], rdx
cmp r12, qword [rsp + 0x30]
je 0x180044ccb
movzx ecx, byte [r12]
test cl, cl
js 0x180044d3f
inc r12
mov edi, ecx
jmp 0x180044d9d
mov edi, ecx
and edi, 0x1f
movzx edx, byte [r12 + 1]
and edx, 0x3f
cmp cl, 0xe0
jb 0x180044d81
movzx eax, byte [r12 + 2]
shl edx, 6
and eax, 0x3f
or eax, edx
cmp cl, 0xf0
jb 0x180044d8c
movzx ecx, byte [r12 + 3]
add r12, 4
and edi, 7
shl edi, 0x12
shl eax, 6
and ecx, 0x3f
or ecx, eax
or edi, ecx
jmp 0x180044d95
add r12, 2
shl edi, 6
or edi, edx
jmp 0x180044d95
add r12, 3
shl edi, 0xc
or edi, eax
cmp edi, 0x80
jae 0x180044dbc
mov rdx, qword [rbx + 0x10]
cmp rdx, qword [rbx + 8]
jne 0x180044d1a
mov rcx, rbx
call fcn.180005ae0
mov rdx, qword [rbx + 0x10]
jmp 0x180044d1a
mov dword [rsp + 0x50], 0
cmp edi, 0x10000
mov r14d, 4
sbb r14, 0
cmp edi, 0x800
mov eax, 2
cmovb r14, rax
cmp r14, 2
je 0x180044e30
cmp r14, 3
je 0x180044e4f
cmp r14, 4
jne 0x18004749c
mov r13, r12
mov eax, edi
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x50], al
mov eax, edi
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x51], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x52], al
and dil, 0x3f
or dil, 0x80
mov byte [rsp + 0x53], dil
jmp 0x180044e79
mov r13, r12
mov eax, edi
shr eax, 6
and al, 0x1f
or al, 0xc0
mov byte [rsp + 0x50], al
and dil, 0x3f
or dil, 0x80
mov byte [rsp + 0x51], dil
jmp 0x180044e79
mov r13, r12
mov eax, edi
shr eax, 0xc
and al, 0xf
or al, 0xe0
mov byte [rsp + 0x50], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x51], al
and dil, 0x3f
or dil, 0x80
mov byte [rsp + 0x52], dil
mov rax, qword [rbx + 8]
mov r12, qword [rbx + 0x10]
sub rax, r12
cmp rax, r14
jb 0x180044ebb
mov rcx, qword [rbx]
add rcx, r12
lea rdx, [rsp + 0x50]
mov r8, r14
call fcn.1800f64f0
add r12, r14
mov qword [rbx + 0x10], r12
mov r12, r13
mov r13, qword [rsp + 0x28]
cmp r12, qword [rsp + 0x30]
jne 0x180044d2f
jmp 0x180044ccb
mov rcx, rbx
mov rdx, r12
mov r8, r14
call fcn.180105950
mov r12, qword [rbx + 0x10]
jmp 0x180044e89
mov r12, rdx
movabs rdi, 0x8080808080808080
jmp 0x180044ee4
jne 0x180047504
add r14, r8
test byte [rsp + 0x24], 1
jne 0x180045033
test r12, r12
je 0x18004502b
lea rax, [r14 + r12]
mov rcx, r14
jmp 0x180044f0d
cmp rcx, rax
je 0x18004502b
movzx r9d, byte [rcx]
test r9b, r9b
js 0x180044f1e
inc rcx
mov edx, r9d
jmp 0x180044f81
mov edx, r9d
and edx, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp r9b, 0xdf
jbe 0x180044f68
movzx r8d, byte [rcx + 2]
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
cmp r9b, 0xf0
jb 0x180044f74
movzx r9d, byte [rcx + 3]
add rcx, 4
and edx, 7
shl edx, 0x12
shl r8d, 6
and r9d, 0x3f
or r9d, r8d
or r9d, edx
jmp 0x180044f19
add rcx, 2
shl edx, 6
or edx, r10d
jmp 0x180044f81
add rcx, 3
shl edx, 0xc
or r8d, edx
mov edx, r8d
lea r8d, [rdx - 0x21]
cmp r8d, 0x5e
jb 0x180044f04
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x180044fac
mov r9, r8
sub r8, r10
jbe 0x180044f04
shr r8, 1
add r8, r10
lea r11, [r8 + r8*2]
xor esi, esi
lea r15, [0x180136914]
cmp dword [r15 + r11*4], edx
seta sil
cmp dword [r15 + r11*4 + 4], edx
mov r15d, 0xff
cmovb esi, r15d
cmp sil, 1
je 0x180044fa0
movzx r10d, sil
cmp r10d, 0xff
jne 0x180044ffc
inc r8
mov r10, r8
mov r8, r9
sub r8, r10
ja 0x180044fac
jmp 0x180044f04
lea rdx, [0x180136914]
movzx edx, byte [rdx + r11*4 + 8]
cmp rdx, 0x11
ja 0x180044f04
mov r8d, 0x20003
bt r8, rdx
jae 0x180044f04
mov al, 1
mov dword [rsp + 0x24], eax
jmp 0x180045033
mov dword [rsp + 0x24], 0
movq xmm0, qword [rsp + 0x40]
movzx eax, byte [rsp + 0x49]
pshufd xmm1, xmm0, 0x55
por xmm1, xmm0
movdqa xmm0, xmm1
psrld xmm0, 0x10
por xmm0, xmm1
movdqa xmm1, xmm0
psrlw xmm1, 8
por xmm1, xmm0
movd ecx, xmm1
or cl, byte [rsp + 0x48]
or al, byte [rsp + 0x4a]
or al, cl
mov sil, 1
or al, byte [rsp + 0x4b]
jne 0x180044408
test r12, r12
je 0x180046111
lea rdi, [r14 + r12]
xor r8d, r8d
xor eax, eax
mov rcx, r14
movzx edx, byte [rcx]
test dl, dl
js 0x1800450a0
inc rcx
jmp 0x18004513a
mov r9d, edx
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp dl, 0xe0
jb 0x1800450f5
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp dl, 0xf0
jb 0x180045105
movzx edx, byte [rcx + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and edx, 0x3f
or edx, r10d
or edx, r9d
cmp edx, 0x110000
je 0x180045f0f
add rcx, 4
jmp 0x180045113
add rcx, 2
shl r9d, 6
or r9d, r11d
mov edx, r9d
jmp 0x180045113
add rcx, 3
shl r9d, 0xc
or r10d, r9d
mov edx, r10d
cmp edx, 0x7f
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
jbe 0x18004513a
jmp 0x1800451c8
inc rcx
cmp edx, 0x80
jae 0x1800451c5
cmp rcx, rdi
je 0x180045f1d
movzx edx, byte [rcx]
test dl, dl
jns 0x18004512b
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x18004519f
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x1800451b2
movzx edx, byte [rcx + 3]
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0x110000
je 0x180045f1d
add rcx, 4
jmp 0x18004512e
add rcx, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x18004512e
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
jmp 0x18004512e
xor r8d, r8d
mov r9d, r8d
imul r8d, edx, 0x9e3779b9
imul r10d, edx, 0x31415926
xor r8d, r10d
imul r8, r8, 0x39a
shr r8, 0x1f
and r8d, 0xfffffffe
lea r11, [0x18013acdc]
movzx r8d, word [r8 + r11]
add r8d, edx
imul r8d, r8d, 0x9e3779b9
xor r8d, r10d
imul r8, r8, 0x39a
shr r8, 0x1e
and r8d, 0xfffffffc
lea r10, [0x18013b410]
mov r8d, dword [r8 + r10]
mov r10d, r8d
shr r10d, 8
cmp r10d, edx
mov r10d, 0
cmovne r8d, r10d
cmp r9b, r8b
jbe 0x180045240
test r8b, r8b
jne case.0x18004543a.3907
lea r9d, [rdx - 0x340]
cmp r9d, 4
ja 0x180045257
cmp r9d, 2
jne case.0x18004543a.3907
cmp edx, 0xd56
jg 0x1800452cc
cmp edx, 0x9de
jg 0x18004531b
cmp edx, 0x93b
jg 0x180045474
lea r9d, [rdx - 0x30f]
cmp r9d, 0x36
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
ja 0x1800452a6
movabs r10, 0x48020000001005
bt r10, r9
jb 0x1800455bf
lea r9d, [rdx - 0x374]
cmp r9d, 0x13
ja case.0x18004543a.3908
mov r10d, 0x80401
bt r10d, r9d
jb case.0x18004543a.3907
jmp case.0x18004543a.3908
cmp edx, 0x11126
jg 0x180045390
cmp edx, 0x102d
jle 0x1800453e4
cmp edx, 0x1f70
jg 0x1800454e2
cmp edx, 0x102e
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x1800455bf
cmp edx, 0x1b35
je 0x1800455bf
jmp case.0x18004543a.3908
cmp edx, 0xbd6
jg 0x18004543d
cmp edx, 0xbbd
jg 0x1800455a9
lea r9d, [rdx - 0xb3e]
cmp r9d, 0x19
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
ja 0x18004535e
mov r10d, 0x3000001
bt r10d, r9d
jb 0x1800455bf
lea r9d, [rdx - 0xa33]
cmp r9d, 0x2b
ja 0x18004537f
movabs r10, 0x80000000009
bt r10, r9
jb case.0x18004543a.3907
cmp edx, 0x9df
jne case.0x18004543a.3908
jmp case.0x18004543a.3907
cmp edx, 0x114af
jle 0x1800454ab
lea r9d, [rdx - 0x114b0]
cmp r9d, 0xd
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
ja 0x1800453c7
mov r10d, 0x2401
bt r10d, r9d
jb 0x1800455bf
cmp edx, 0x115af
je 0x1800455bf
cmp edx, 0x11930
je 0x1800455bf
jmp case.0x18004543a.3908
lea r9d, [rdx - 0xdca]
cmp r9d, 0x15
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
ja 0x18004540f
mov r10d, 0x200021
bt r10d, r9d
jb 0x1800455bf
cmp edx, 0xd57
je 0x1800455bf
lea r9d, [rdx - 0xf43]
cmp r9d, 0x76
ja case.0x18004543a.3908
lea r10, [0x180047534]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp edx, 0xcc1
jg 0x18004554f
cmp edx, 0xbd7
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x1800455bf
cmp edx, 0xc56
je 0x1800455bf
jmp case.0x18004543a.3908
cmp edx, 0x93c
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x1800455bf
cmp edx, 0x9be
je 0x1800455bf
cmp edx, 0x9d7
je 0x1800455bf
jmp case.0x18004543a.3908
cmp edx, 0x11127
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x1800455bf
cmp edx, 0x1133e
je 0x1800455bf
cmp edx, 0x11357
je 0x1800455bf
jmp case.0x18004543a.3908
cmp edx, 0xfa0f
jle 0x180045572
cmp edx, 0x110ba
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x1800455bf
lea r9d, [rdx - 0xfa10]
cmp r9d, 0x12
ja 0x180045525
mov r10d, 0x50005
bt r10d, r9d
jb case.0x18004543a.3907
lea r9d, [rdx - 0xfb1d]
cmp r9d, 0x21
ja case.0x18004543a.3908
movabs r10, 0x200000005
bt r10, r9
jb case.0x18004543a.3907
jmp case.0x18004543a.3908
cmp edx, 0xcc2
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x1800455bf
cmp edx, 0xd3e
je 0x1800455bf
jmp case.0x18004543a.3908
cmp edx, 0x2125
jg 0x1800455cf
lea r9d, [rdx - 0x1f71]
cmp r9d, 0x8c
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
ja case.0x18004543a.3908
lea r10, [0x180047710]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp edx, 0xbbe
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
jne case.0x18004543a.3908
mov al, 2
cmp rcx, rdi
jne 0x180045091
jmp 0x180045f1d
lea r9d, [rdx - 0x2329]
cmp r9d, 2
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
jb case.0x18004543a.3907
cmp edx, 0x2126
je case.0x18004543a.3907
cmp edx, 0x2adc
je case.0x18004543a.3907
movd xmm1, edx
pshufd xmm0, xmm1, 0
movdqa xmm2, xmm0
paddd xmm2, xmmword [0x18010da50]
movdqa xmm3, xmm0
paddd xmm3, xmmword [0x18010da60]
pxor xmm3, xmm14
movdqa xmm4, xmm9
pcmpgtd xmm4, xmm3
pxor xmm2, xmm14
movdqa xmm3, xmm10
pcmpgtd xmm3, xmm2
packssdw xmm3, xmm4
pmovmskb r9d, xmm3
test r9d, r9d
jne case.0x18004543a.3907
pshufd xmm1, xmm1, 0x50
pand xmm1, xmmword [0x18010da40]
pshufd xmm2, xmm1, 4
pcmpeqd xmm2, xmmword [0x18010da70]
movdqa xmm3, xmm0
paddd xmm3, xmmword [0x18010da80]
pxor xmm3, xmm14
movdqa xmm4, xmm15
pcmpgtd xmm4, xmm3
por xmm4, xmm2
movmskps r9d, xmm4
test r9b, r9b
jne case.0x18004543a.3907
lea r9d, [rdx - 0x1d1bb]
cmp r9d, 6
jb case.0x18004543a.3907
lea r9d, [rdx - 0x2f800]
cmp r9d, 0x21e
jb case.0x18004543a.3907
movd r9d, xmm1
cmp r9d, 0x2000
je case.0x18004543a.3907
cmp r9d, 0x212a
je case.0x18004543a.3907
cmp r9d, 0xfb40
je case.0x18004543a.3907
movdqa xmm1, xmm0
paddd xmm1, xmmword [0x18010dac0]
paddd xmm0, xmm12
pxor xmm0, xmm14
movdqa xmm2, xmm13
pcmpgtd xmm2, xmm0
pxor xmm1, xmm14
movdqa xmm0, xmm11
pcmpgtd xmm0, xmm1
packssdw xmm2, xmm0
pmovmskb r10d, xmm2
test r10d, r10d
jne 0x1800455bf
lea r10d, [rdx - 0x11a8]
cmp r10d, 0x1b
jb 0x1800455bf
add edx, 0xffffcf67
cmp edx, 2
jb 0x1800455bf
cmp r9d, 0x330
jne 0x1800455c1
jmp 0x1800455bf
mov qword [rsp + 0x38], r12
jmp 0x180044724
jne 0x180047524
add r8, r12
mov qword [rsp + 0x38], r12
mov r12, r8
movabs rdi, 0x8080808080808080
mov rcx, r14
cmp r14, 8
jae 0x180044737
mov rax, rcx
sub rax, 1
jb 0x1800447a2
mov rdx, qword [rsp + 0x38]
cmp byte [rdx + rcx - 1], 0
mov rcx, rax
jns 0x18004578e
jmp 0x1800443ec
mov rcx, rbx
mov rdx, qword [rsp + 0x110]
call fcn.180105950
mov r9, rsi
jmp 0x180044a85
mov rsi, rdx
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x1800457f3
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18004749c
mov qword [0x180168b78], rax
mov rcx, qword [rsp + 0x28]
lea r8, [rcx*8]
movabs rcx, 0x7ffffffffffffff0
and r8, rcx
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x120], rax
test rax, rax
je 0x18004749c
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x180045852
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18004749c
mov qword [0x180168b78], rax
mov r8d, 0x100
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18004749c
mov r11, rax
mov eax, 1
sub rax, rsi
mov qword [rsp + 0x168], rax
mov r10, qword [rsp + 0x100]
lea rax, [r10 + 0x20]
mov qword [rsp + 0x160], rax
lea rax, [r10 + 8]
mov qword [rsp + 0x198], rax
lea rax, [r10 - 8]
mov qword [rsp + 0x1f8], rax
lea rax, [r10 - 0x10]
mov qword [rsp + 0x178], rax
mov eax, 0x10
mov qword [rsp + 0x170], rax
xor esi, esi
xor ebx, ebx
mov r13, qword [rsp + 0x28]
jmp 0x1800458e5
mov ebx, 1
mov rsi, qword [rsp + 0x148]
cmp rsi, r13
jae 0x180045ec8
mov r8, r13
sub r8, rsi
mov rax, rsi
shl rax, 4
lea rcx, [r10 + rax]
cmp r8, 2
mov rbp, rbx
mov qword [rsp + 0x128], r11
jae 0x18004590f
mov rdx, r13
jmp 0x180045a4e
mov rdx, qword [rcx]
mov r9, qword [rcx + 0x10]
cmp r9, rdx
jae 0x180045930
cmp r8, 2
jne 0x18004594a
lea rdx, [rsi + 2]
mov r8d, 2
jmp 0x1800459e3
cmp r8, 2
jne 0x18004598c
lea rdx, [rsi + 2]
mov r8d, 2
mov r13, qword [rsp + 0x28]
jmp 0x180045a4e
mov r10, qword [rsp + 0x168]
lea r11, [r10 + rsi]
mov r10, qword [rsp + 0x160]
lea rdi, [r10 + rax]
mov r10d, 2
mov rbx, r9
mov r15, rbx
mov rbx, qword [rdi]
cmp rbx, r15
jae 0x1800459cf
lea r15, [r11 + r10]
inc r15
inc r10
add rdi, 0x10
cmp r15, 2
jne 0x18004596b
jmp 0x1800459cc
mov r10, qword [rsp + 0x168]
lea r11, [r10 + rsi]
mov r10, qword [rsp + 0x160]
lea rdi, [r10 + rax]
mov r10d, 2
mov rbx, r9
mov r15, rbx
mov rbx, qword [rdi]
cmp rbx, r15
jb 0x1800459cf
lea r15, [r11 + r10]
inc r15
inc r10
add rdi, 0x10
cmp r15, 2
jne 0x1800459ad
mov r10, r8
lea r11, [r10 + rsi]
mov r8, r10
cmp r9, rdx
mov rdx, r11
mov r13, qword [rsp + 0x28]
jae 0x180045a4e
cmp rdx, rsi
jb 0x18004749c
mov r15, rdx
cmp rdx, qword [rsp + 0x28]
ja 0x18004749c
cmp r8, 2
jb 0x180045a46
mov rdx, r8
shr rdx, 1
add rax, qword [rsp + 0x198]
lea r9, [rsi + r8]
shl r9, 4
add r9, qword [rsp + 0x1f8]
mov r10, qword [rax - 8]
mov r11d, dword [rax]
mov rdi, qword [r9 - 8]
mov ebx, dword [r9]
mov qword [rax - 8], rdi
mov dword [rax], ebx
mov qword [r9 - 8], r10
mov dword [r9], r11d
add rax, 0x10
add r9, 0xfffffffffffffff0
dec rdx
jne 0x180045a1e
mov r13, qword [rsp + 0x28]
mov rdx, r15
mov r12, rdx
sub r12, rsi
jb 0x18004749c
cmp rdx, r13
ja 0x18004749c
jae 0x180045a9e
cmp r8, 0xa
jae 0x180045a9e
lea r12, [rsi + 0xa]
cmp r12, r13
cmovae r12, r13
mov qword [rsp + 0x148], r12
sub r12, rsi
jb 0x18004749c
cmp r8, 2
mov eax, 1
cmovb r8, rax
mov rdx, r12
call fcn.180040ca0
jmp 0x180045aa6
mov qword [rsp + 0x148], rdx
mov rbx, rbp
cmp rbp, qword [rsp + 0x170]
jne 0x180045b3e
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x180045ae0
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18004749c
mov qword [0x180168b78], rax
mov rbx, rbp
mov r8, rbp
shl r8, 5
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18004749c
mov r13, rax
lea rax, [rbx + rbx]
mov qword [rsp + 0x170], rax
mov r8, rbx
shl r8, 4
mov rcx, r13
mov rdi, qword [rsp + 0x128]
mov rdx, rdi
call fcn.1800f64f0
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
mov r11, r13
jmp 0x180045b46
mov r11, qword [rsp + 0x128]
mov rax, rbx
shl rax, 4
mov qword [r11 + rax], r12
mov qword [r11 + rax + 8], rsi
inc rbx
mov rax, rbx
cmp rbx, 2
mov r13, qword [rsp + 0x28]
mov r10, qword [rsp + 0x100]
mov qword [rsp + 0x128], r11
jae 0x180045c0f
jmp 0x1800458d4
mov rdx, rsi
mov rsi, qword [rsp + 0x30]
mov r15, qword [rsp + 0xf8]
sub r12, rdx
mov rcx, rbp
mov r8, r12
call fcn.1800f64f0
mov rax, qword [rsp + 0x1a8]
add rax, rdi
mov rcx, qword [rsp + 0x150]
mov qword [rcx], rax
mov rax, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x130]
mov qword [rcx], rax
lea rdx, [r15 + 0x10]
mov rax, qword [rsp + 0x158]
not rax
add rsi, rax
shl rsi, 4
mov rcx, r15
mov r8, rsi
call fcn.1800f64f0
mov rax, qword [rsp + 0x110]
cmp rax, 1
mov r13, qword [rsp + 0x28]
mov r10, qword [rsp + 0x100]
mov r11, qword [rsp + 0x128]
jbe 0x1800458cf
mov rbx, rax
lea rsi, [rax - 1]
mov rcx, rsi
shl rcx, 4
mov rax, qword [r11 + rcx]
mov rcx, qword [r11 + rcx + 8]
add rcx, rax
cmp rcx, r13
je 0x180045c7a
mov rdx, rbx
shl rdx, 4
mov r8, qword [rdx + r11 - 0x20]
cmp r8, rax
jbe 0x180045c7a
cmp rbx, 2
jbe 0x180045eb4
lea r12, [rbx - 3]
mov rcx, r12
shl rcx, 4
mov rcx, qword [r11 + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x180045c8f
cmp rbx, 3
jbe 0x180045ebe
add r8, rcx
cmp qword [rdx + r11 - 0x40], r8
jbe 0x180045c8f
jmp 0x1800458d4
cmp rbx, 3
jb 0x180045c94
lea r12, [rbx - 3]
mov rcx, r12
shl rcx, 4
mov rcx, qword [r11 + rcx]
cmp rcx, rax
jb 0x180045c98
lea r12, [rbx - 2]
cmp rbx, r12
jbe 0x18004749c
lea rax, [r12 + 1]
mov qword [rsp + 0x30], rbx
cmp rbx, rax
jbe 0x18004749c
mov rcx, r12
shl rcx, 4
mov rbp, qword [r11 + rcx + 8]
shl rax, 4
mov rdx, qword [r11 + rax]
mov rbx, qword [r11 + rax + 8]
add rbx, rdx
mov r15, rbx
sub r15, rbp
jb 0x18004749c
mov qword [rsp + 0x158], r12
mov qword [rsp + 0x110], rsi
cmp rbx, r13
ja 0x18004749c
mov qword [rsp + 0x1a8], rdx
lea rdx, [r11 + rcx]
mov qword [rsp + 0xf8], rdx
mov rdi, qword [r11 + rcx]
lea rcx, [r11 + rax]
mov qword [rsp + 0x150], rcx
add rax, r11
add rax, 8
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x108], rbp
shl rbp, 4
add rbp, r10
mov r12, rdi
shl r12, 4
lea r13, [r12 + rbp]
shl rbx, 4
mov rsi, r15
sub rsi, rdi
cmp rsi, rdi
jae 0x180045e05
mov r12, rsi
shl r12, 4
mov r15, qword [rsp + 0x120]
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.1800f64f0
add r12, r15
test rdi, rdi
jle 0x180045e94
test rsi, rsi
mov rsi, qword [rsp + 0x30]
jle 0x180045ea4
add rbx, qword [rsp + 0x178]
mov r9, qword [rsp + 0x120]
mov r15, qword [rsp + 0xf8]
mov rax, r13
mov rcx, r12
mov rdx, qword [r12 - 0x10]
mov r8, qword [r13 - 0x10]
cmp rdx, r8
mov r13d, 0
sbb r13, r13
cmp rdx, r8
mov r12d, 0
adc r12, 0xffffffffffffffff
shl r13, 4
add r13, rax
shl r12, 4
add r12, rcx
cmp rdx, r8
mov rax, r12
cmovb rax, r13
movdqu xmm0, xmmword [rax]
movdqu xmmword [rbx], xmm0
cmp r13, rbp
jbe 0x180045dfa
add rbx, 0xfffffffffffffff0
cmp r12, r9
ja 0x180045da4
mov rbp, r13
mov rdx, r9
jmp 0x180045b90
mov rsi, qword [rsp + 0x120]
mov rcx, rsi
mov rdx, rbp
mov r8, r12
call fcn.1800f64f0
add r12, rsi
test rdi, rdi
jle 0x180045b80
cmp r15, rdi
jle 0x180045b80
add rbx, qword [rsp + 0x100]
mov rdx, rsi
mov rsi, qword [rsp + 0x30]
mov r15, qword [rsp + 0xf8]
mov r8, rdx
mov rcx, qword [r13]
xor edx, edx
xor eax, eax
cmp rcx, qword [r8]
setae dl
setb cl
mov r9, r8
cmovb r9, r13
movdqu xmm0, xmmword [r9]
movdqu xmmword [rbp], xmm0
add rbp, 0x10
shl rdx, 4
add rdx, r8
cmp rdx, r12
jae 0x180045b90
mov al, cl
shl rax, 4
add r13, rax
cmp r13, rbx
jb 0x180045e48
jmp 0x180045b90
mov rbp, r13
mov rdx, qword [rsp + 0x120]
jmp 0x180045b83
mov rbp, r13
mov rdx, qword [rsp + 0x120]
jmp 0x180045b88
mov ebx, 2
jmp 0x1800458d4
mov ebx, 3
jmp 0x1800458d4
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, r11
mov rsi, qword [sym.imp.kernel32.dll_HeapFree]
call rsi
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, qword [rsp + 0x120]
call rsi
mov r9, qword [rsp + 0x100]
jmp 0x180044a55
mov r13, qword [rsp + 0x28]
mov r9, qword [rsp + 0x100]
jmp 0x180044a55
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
test al, al
je 0x180046111
movzx eax, al
cmp eax, 1
je case.0x18004543a.3907
lea rcx, [rsp + 0x98]
movups xmmword [rcx], xmm6
movups xmmword [rsp + 0x210], xmm6
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x60], 0
mov word [rsp + 0x64], 0
mov byte [rsp + 0x68], 0
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
mov dword [rsp + 0x74], 0
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x7c], 0
mov byte [rsp + 0x80], 0
mov dword [rsp + 0x84], 0
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], rdi
mov byte [rsp + 0xa8], 0
mov dword [rsp + 0xb0], 0
mov word [rsp + 0xb4], 0
movzx eax, word [rsp + 0x21e]
mov word [rcx + 0x2e], ax
movdqu xmm0, xmmword [rsp + 0x20e]
movdqu xmmword [rcx + 0x1e], xmm0
mov dword [rsp + 0xd0], 0x110000
mov byte [rsp + 0xd4], 0
mov rbx, r14
cmp rbx, rdi
je 0x180046085
movzx ebp, byte [rbx]
test bpl, bpl
js 0x180046009
inc rbx
jmp 0x180046067
mov eax, ebp
and eax, 0x1f
movzx edx, byte [rbx + 1]
and edx, 0x3f
cmp bpl, 0xdf
jbe 0x18004604f
movzx ecx, byte [rbx + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp bpl, 0xf0
jb 0x18004605c
movzx ebp, byte [rbx + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and ebp, 0x3f
or ebp, ecx
or ebp, eax
cmp ebp, 0x110000
je 0x180046085
add rbx, 4
jmp 0x180046067
add rbx, 2
shl eax, 6
or eax, edx
mov ebp, eax
jmp 0x180046067
add rbx, 3
shl eax, 0xc
or ecx, eax
mov ebp, ecx
lea rcx, [rsp + 0x50]
call fcn.180041aa0
mov r15b, 1
cmp eax, 0x110000
je 0x18004609b
cmp eax, ebp
je 0x180045ff3
jmp 0x18004609b
lea rcx, [rsp + 0x50]
call fcn.180041aa0
cmp eax, 0x110000
setne r15b
neg r15b
cmp dword [rsp + 0x60], 0
je 0x1800460be
cmp qword [rsp + 0x70], 0
je 0x1800460be
mov r8, qword [rsp + 0x68]
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
cmp dword [rsp + 0xb0], 0
je 0x1800460ea
cmp qword [rsp + 0xc0], 0
je 0x1800460ea
mov r8, qword [rsp + 0xb8]
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test r15b, r15b
mov rbx, qword [rsp + 0x330]
mov r15d, 0xff
je 0x180046111
mov byte [rsp + 0x45], 1
movabs rdi, 0x8080808080808080
jmp 0x180044408
mov rcx, r14
mov rdx, r12
mov r8, qword [rsp + 0x1a0]
lea r9, [rsp + 0x40]
call fcn.1800422d0
movabs rdi, 0x8080808080808080
jmp 0x180044408
jmp 0x180046140
jmp 0x180046142
mov rcx, qword [rbx]
mov rdi, qword [rbx + 0x10]
mov rax, rdi
mov r8, qword [rsp + 0x138]
test r8, r8
je 0x180046179
mov rax, rdi
sub rax, r8
jbe 0x180046177
cmp byte [rcx + r8], 0xbf
jg 0x180046179
mov rdx, rdi
mov r9, rdi
call fcn.180103d90
ud2
jne 0x18004616a
add rcx, r8
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 1
test byte [rsp + 0x24], 1
lea r14, [0x180136914]
lea r15, [rsp + 0x50]
jne 0x1800461ef
mov rcx, r15
call fcn.180040d50
test rax, rax
jne 0x1800461dd
jmp 0x180046a65
mov esi, 0xff
mov ebx, 0x62f8
mov rcx, r15
call fcn.180040d50
test rax, rax
je 0x180046a65
test rdx, rdx
je 0x1800461f9
movzx r8d, byte [rax]
test r8b, r8b
js 0x180046221
lea r9, [rax + 1]
mov ecx, r8d
jmp 0x180046281
mov ecx, r8d
and ecx, 0x1f
movzx r11d, byte [rax + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x18004626b
movzx r10d, byte [rax + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x180046277
lea r9, [rax + 4]
movzx r8d, byte [rax + 3]
and ecx, 7
shl ecx, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or ecx, r8d
jmp 0x180046281
lea r9, [rax + 2]
shl ecx, 6
or ecx, r11d
jmp 0x180046281
lea r9, [rax + 3]
shl ecx, 0xc
or ecx, r10d
add rdx, rax
mov r8d, 0x5a6
xor r11d, r11d
mov r10d, 0x5a6
jmp 0x18004629d
mov r10, r8
sub r8, r11
jbe 0x1800462fd
shr r8, 1
add r8, r11
lea r13, [r8 + r8*2]
xor ebp, ebp
cmp dword [r14 + r13*4], ecx
seta bpl
cmp dword [r14 + r13*4 + 4], ecx
cmovb ebp, esi
cmp bpl, 1
je 0x180046295
movzx r11d, bpl
cmp r11d, 0xff
jne 0x1800462dc
inc r8
mov r11, r8
mov r8, r10
sub r8, r11
ja 0x18004629d
jmp 0x1800462fd
movzx ecx, byte [r14 + r13*4 + 8]
test rcx, rcx
je 0x180046446
cmp ecx, 0x11
je 0x180046446
cmp ecx, 9
jne 0x180046a60
cmp r9, rdx
je 0x1800463f5
movzx r8d, byte [r9]
test r8b, r8b
js 0x180046317
inc r9
mov ecx, r8d
jmp 0x180046377
mov ecx, r8d
and ecx, 0x1f
movzx r11d, byte [r9 + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x180046361
movzx r10d, byte [r9 + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x18004636d
movzx r8d, byte [r9 + 3]
add r9, 4
and ecx, 7
shl ecx, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or ecx, r8d
jmp 0x180046377
add r9, 2
shl ecx, 6
or ecx, r11d
jmp 0x180046377
add r9, 3
shl ecx, 0xc
or ecx, r10d
mov r8d, 0x5a6
xor r11d, r11d
mov r10d, 0x5a6
jmp 0x180046394
mov r10, r8
sub r8, r11
jbe 0x1800462fd
shr r8, 1
add r8, r11
lea r13, [r8 + r8*2]
xor ebp, ebp
cmp dword [r14 + r13*4], ecx
seta bpl
cmp dword [r14 + r13*4 + 4], ecx
cmovb ebp, esi
cmp bpl, 1
je 0x180046388
movzx r11d, bpl
cmp r11d, 0xff
jne 0x1800463d6
inc r8
mov r11, r8
mov r8, r10
sub r8, r11
ja 0x180046394
jmp 0x1800462fd
movzx ecx, byte [r14 + r13*4 + 8]
cmp rcx, 0xe
ja 0x180046a60
bt rbx, rcx
jb 0x1800462fd
jmp 0x180046a60
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x180046405
dec rdx
jmp 0x1800465f6
movzx r8d, byte [rdx - 2]
add rdx, 0xfffffffffffffffe
cmp r8b, 0xc0
jge 0x1800465aa
movzx r9d, byte [rdx - 1]
dec rdx
cmp r9b, 0xc0
jge 0x1800465dd
movzx r10d, byte [rdx - 1]
dec rdx
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x1800465e1
cmp r9, rdx
je 0x1800465b0
xor r8d, r8d
mov dword [rsp + 0x118], 0
movzx r11d, byte [r9]
test r11b, r11b
js 0x18004646e
inc r9
mov r10d, r11d
jmp 0x1800464d8
mov r10d, r11d
and r10d, 0x1f
movzx r13d, byte [r9 + 1]
and r13d, 0x3f
cmp r11b, 0xdf
jbe 0x1800464b9
movzx ebp, byte [r9 + 2]
shl r13d, 6
and ebp, 0x3f
or ebp, r13d
cmp r11b, 0xf0
jb 0x1800464c6
movzx r11d, byte [r9 + 3]
add r9, 4
and r10d, 7
shl r10d, 0x12
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
or r10d, r11d
jmp 0x1800464d1
add r9, 2
shl r10d, 6
or r10d, r13d
jmp 0x1800464d1
add r9, 3
shl r10d, 0xc
or r10d, ebp
lea r14, [0x180136914]
mov r11d, 0x5a6
xor ebp, ebp
mov r13d, 0x5a6
jmp 0x1800464fb
mov r13, r11
lea r14, [0x180136914]
sub r11, rbp
jbe 0x180046a60
shr r11, 1
add r11, rbp
lea r12, [r11 + r11*2]
mov rcx, r14
xor r14d, r14d
cmp dword [rcx + r12*4], r10d
seta r14b
cmp dword [rcx + r12*4 + 4], r10d
cmovb r14d, esi
cmp r14b, 1
je 0x1800464e8
movzx ebp, r14b
cmp ebp, 0xff
jne 0x180046548
inc r11
mov rbp, r11
mov r11, r13
lea r14, [0x180136914]
sub r11, rbp
ja 0x1800464fb
jmp 0x180046a60
lea r10, [0x180136914]
movzx r10d, byte [r10 + r12*4 + 8]
cmp r10d, 1
je 0x180046573
cmp r10d, 5
jne 0x18004657f
mov cl, 1
mov dword [rsp + 0x118], ecx
lea r14, [0x180136914]
jmp 0x18004659f
mov r8b, 1
lea r14, [0x180136914]
jmp 0x18004659f
cmp r10, 0x11
lea r14, [0x180136914]
ja 0x180046a60
mov ecx, 0x260fb
bt rcx, r10
jae 0x180046a60
cmp r9, rdx
jne 0x18004645d
jmp 0x1800465be
and r8d, 0x1f
jmp 0x1800465ec
mov dword [rsp + 0x118], 0
xor r8d, r8d
movzx r9d, byte [rdx - 1]
test r9b, r9b
js 0x180046834
dec rdx
cmp rdx, rax
jne 0x18004687d
jmp 0x180046915
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
cmp rdx, rax
je 0x1800466e9
cmp ecx, 0x110000
je 0x1800461f9
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x180046628
mov r9, r8
sub r8, r10
jbe 0x180046759
shr r8, 1
add r8, r10
lea r11, [r8 + r8*2]
xor ebp, ebp
cmp dword [r14 + r11*4], ecx
seta bpl
cmp dword [r14 + r11*4 + 4], ecx
cmovb ebp, esi
cmp bpl, 1
je 0x18004661c
movzx r10d, bpl
cmp r10d, 0xff
jne 0x18004666a
inc r8
mov r10, r8
mov r8, r9
sub r8, r10
ja 0x180046628
jmp 0x180046759
cmp byte [r14 + r11*4 + 8], 0xd
jne 0x180046759
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x180046686
dec rdx
jmp 0x1800465f6
movzx r8d, byte [rdx - 2]
cmp r8b, 0xc0
jge 0x1800466b6
movzx r9d, byte [rdx - 3]
cmp r9b, 0xc0
jge 0x1800466c0
movzx r10d, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x1800466c8
add rdx, 0xfffffffffffffffe
and r8d, 0x1f
jmp 0x1800466d3
add rdx, 0xfffffffffffffffd
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
lea r14, [0x180136914]
jmp 0x1800465f6
cmp ecx, 0x110000
je 0x1800461f9
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x18004670c
mov rdx, rax
sub rax, r8
jbe 0x180046759
shr rax, 1
add rax, r8
lea r9, [rax + rax*2]
xor r10d, r10d
cmp dword [r14 + r9*4], ecx
seta r10b
cmp dword [r14 + r9*4 + 4], ecx
cmovb r10d, esi
cmp r10b, 1
je 0x180046704
movzx r8d, r10b
cmp r8d, 0xff
jne 0x18004674d
inc rax
mov r8, rax
mov rax, rdx
sub rax, r8
ja 0x18004670c
jmp 0x180046759
cmp byte [r14 + r9*4 + 8], 0xd
je 0x1800461f9
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x180046774
mov rdx, rax
sub rax, r8
jbe 0x1800461f9
shr rax, 1
add rax, r8
lea r9, [rax + rax*2]
xor r10d, r10d
cmp dword [r14 + r9*4], ecx
seta r10b
cmp dword [r14 + r9*4 + 4], ecx
cmovb r10d, esi
cmp r10b, 1
je 0x180046768
movzx r8d, r10b
cmp r8d, 0xff
jne 0x1800467b8
inc rax
mov r8, rax
mov rax, rdx
sub rax, r8
ja 0x180046774
jmp 0x1800461f9
cmp byte [r14 + r9*4 + 8], 9
je 0x1800461f9
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x1800467df
mov rdx, rax
sub rax, r8
jbe 0x180046a60
shr rax, 1
add rax, r8
lea r9, [rax + rax*2]
xor r10d, r10d
cmp dword [r14 + r9*4], ecx
seta r10b
cmp dword [r14 + r9*4 + 4], ecx
cmovb r10d, esi
cmp r10b, 1
je 0x1800467d3
movzx r8d, r10b
cmp r8d, 0xff
jne 0x180046823
inc rax
mov r8, rax
mov rax, rdx
sub rax, r8
ja 0x1800467df
jmp 0x180046a60
cmp byte [r14 + r9*4 + 8], 5
je 0x1800461f9
jmp 0x180046a60
movzx r10d, byte [rdx - 2]
add rdx, 0xfffffffffffffffe
cmp r10b, 0xc0
jge 0x180046865
movzx r11d, byte [rdx - 1]
dec rdx
cmp r11b, 0xc0
jge 0x180046a4c
movzx ebp, byte [rdx - 1]
dec rdx
jmp 0x180046a39
add rdx, 0xfffffffffffffffe
and r10d, 0x1f
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp rdx, rax
je 0x180046915
cmp r9d, 0x110000
lea r14, [0x180136914]
je 0x180046a60
mov r10d, 0x5a6
xor r13d, r13d
mov r11d, 0x5a6
jmp 0x1800468ae
mov r11, r10
sub r10, r13
jbe 0x18004698b
shr r10, 1
add r10, r13
lea r12, [r10 + r10*2]
xor ebp, ebp
cmp dword [r14 + r12*4], r9d
seta bpl
cmp dword [r14 + r12*4 + 4], r9d
cmovb ebp, esi
cmp bpl, 1
je 0x1800468a2
movzx ebp, bpl
cmp ebp, 0xff
jne 0x1800468ef
inc r10
mov r13, r10
mov r10, r11
sub r10, r13
ja 0x1800468ae
jmp 0x18004698b
cmp byte [r14 + r12*4 + 8], 0xd
jne 0x18004698b
movzx r9d, byte [rdx - 1]
test r9b, r9b
js 0x180046a17
dec rdx
cmp rdx, rax
jne 0x18004687d
cmp r9d, 0x110000
lea r14, [0x180136914]
je 0x180046a60
mov eax, 0x5a6
xor r10d, r10d
mov edx, 0x5a6
jmp 0x180046940
mov rdx, rax
sub rax, r10
jbe 0x18004698b
shr rax, 1
add rax, r10
lea r11, [rax + rax*2]
xor ebp, ebp
cmp dword [r14 + r11*4], r9d
seta bpl
cmp dword [r14 + r11*4 + 4], r9d
cmovb ebp, esi
cmp bpl, 1
je 0x180046938
movzx r10d, bpl
cmp r10d, 0xff
jne 0x18004697f
inc rax
mov r10, rax
mov rax, rdx
sub rax, r10
ja 0x180046940
jmp 0x18004698b
cmp byte [r14 + r11*4 + 8], 0xd
je 0x180046a60
mov eax, 0x5a6
xor r10d, r10d
mov edx, 0x5a6
jmp 0x1800469a6
mov rdx, rax
sub rax, r10
jbe 0x180046a60
shr rax, 1
add rax, r10
lea r11, [rax + rax*2]
xor ebp, ebp
cmp dword [r14 + r11*4], r9d
seta bpl
cmp dword [r14 + r11*4 + 4], r9d
cmovb ebp, esi
cmp bpl, 1
je 0x18004699a
movzx r10d, bpl
cmp r10d, 0xff
jne 0x1800469e5
inc rax
mov r10, rax
mov rax, rdx
sub rax, r10
ja 0x1800469a6
jmp 0x180046a60
movzx eax, byte [r14 + r11*4 + 8]
cmp rax, 0x11
ja 0x180046a60
mov ecx, 0x20023
bt rcx, rax
jae 0x180046a60
test r8b, 1
je 0x1800461f9
mov eax, dword [rsp + 0x118]
and al, 1
je 0x1800461f9
jmp 0x180046a60
movzx r10d, byte [rdx - 2]
cmp r10b, 0xc0
jge 0x180046861
movzx r11d, byte [rdx - 3]
cmp r11b, 0xc0
jge 0x180046a48
movzx ebp, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and ebp, 7
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
jmp 0x180046a50
add rdx, 0xfffffffffffffffd
and r11d, 0xf
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
jmp 0x180046869
mov byte [rsp + 0x42], 1
movzx ebp, byte [rsp + 0x40]
movzx r14d, byte [rsp + 0x41]
movzx eax, byte [rsp + 0x42]
mov dword [rsp + 0x118], eax
movzx eax, byte [rsp + 0x43]
mov dword [rsp + 0x170], eax
movzx eax, byte [rsp + 0x44]
mov dword [rsp + 0x168], eax
movzx eax, byte [rsp + 0x45]
mov dword [rsp + 0x160], eax
movzx eax, byte [rsp + 0x46]
mov dword [rsp + 0x198], eax
movzx eax, byte [rsp + 0x47]
mov dword [rsp + 0x28], eax
movzx eax, byte [rsp + 0x48]
mov dword [rsp + 0x110], eax
movzx eax, byte [rsp + 0x49]
mov dword [rsp + 0x158], eax
movzx r12d, byte [rsp + 0x4a]
movzx r15d, byte [rsp + 0x4b]
cmp qword [rsp + 0x188], 0
mov rbx, qword [rsp + 0x330]
je 0x180046b07
mov r8, qword [rsp + 0x180]
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rdi, qword [rbx + 0x10]
test rdi, rdi
je 0x180046b59
js 0x18004749c
movzx eax, byte [0x180168bb8]
mov rcx, qword [0x180168b78]
test rcx, rcx
jne 0x180046b3a
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x180046b4a
mov rcx, rax
mov qword [0x180168b78], rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
jne 0x180046b5e
mov ecx, 1
mov rdx, rdi
call fcn.180103b10
ud2
mov eax, 1
mov rcx, qword [rbx + 0x10]
mov qword [rsp + 0x60], rcx
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x50], xmm0
mov qword [rbx], rax
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], 0
mov rax, qword [rsp + 0x140]
lea rsi, [rax + 0x18]
cmp qword [rax + 0x20], 0
je 0x180046ba3
mov r8, qword [rsi]
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0x60]
mov qword [rsi + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rsi], xmm0
mov rcx, qword [rsp + 0x140]
mov rax, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x28]
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 1
xor ecx, ecx
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x24], r15d
mov dword [rsp + 0x38], r12d
jmp 0x180046c30
xor r13d, r13d
mov qword [rbx + 0x10], r13
mov cl, 1
mov qword [rsp + 0x178], rcx
mov dword [rsp + 0x138], ebp
lea rcx, [rsp + 0x50]
call fcn.180040d50
test rax, rax
je 0x1800474a0
mov rsi, rax
mov r13, rdx
test byte [rsp + 0x178], 1
mov r11d, 0x1a
je 0x180046c92
mov rdx, qword [rbx + 0x10]
cmp rdx, qword [rbx + 8]
jne 0x180046c84
mov rcx, rbx
call fcn.180005ae0
mov r11d, 0x1a
mov rdx, qword [rbx + 0x10]
mov rax, qword [rbx]
mov byte [rax + rdx], 0x2e
inc rdx
mov qword [rbx + 0x10], rdx
mov rcx, r13
cmp r13, 8
mov edi, ebp
jb 0x180046d05
lea rdx, [rsi + 7]
and rdx, 0xfffffffffffffff8
mov rax, rdx
sub rax, rsi
mov rcx, r13
cmp rax, r13
ja 0x180046d05
movabs rcx, 0x8080808080808080
test qword [rsi], rcx
jne 0x180046d1c
cmp rdx, rsi
mov ecx, 8
cmove rax, rcx
lea rcx, [r13 - 8]
cmp rax, rcx
jae 0x180046cf0
movabs rdx, 0x8080808080808080
test qword [rsi + rax], rdx
jne 0x180046d1c
add rax, 8
cmp rax, rcx
jb 0x180046cd7
movabs rax, 0x8080808080808080
test qword [rsi + rcx], rax
jne 0x180046d1c
jmp 0x180047455
mov rax, rcx
sub rax, 1
jb 0x180047455
cmp byte [rsi + rcx - 1], 0
mov rcx, rax
jns 0x180046d05
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
sub rcx, rax
mov qword [rsp + 0x148], rax
cmp rcx, 3
jbe 0x180046e3b
mov rcx, qword [rbx]
mov dword [rcx + rax], 0x2d2d6e78
add rax, 4
mov qword [rbx + 0x10], rax
mov al, 1
mov qword [rsp + 0x178], rax
test r13, r13
je 0x180046c3f
mov rax, rsi
add rax, r13
mov r13, rax
mov rbx, rsi
xor esi, esi
mov dword [rsp + 0x130], 0
mov qword [rsp + 0xf8], rbx
jmp 0x180046d8e
mov ebp, edi
inc esi
cmp rbx, r13
je 0x180046e67
movzx edx, byte [rbx]
test dl, dl
js 0x180046d9a
inc rbx
jmp 0x180046dff
mov eax, edx
and eax, 0x1f
movzx r8d, byte [rbx + 1]
and r8d, 0x3f
cmp dl, 0xdf
jbe 0x180046de6
movzx ecx, byte [rbx + 2]
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
cmp dl, 0xf0
jb 0x180046df4
movzx edx, byte [rbx + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and edx, 0x3f
or edx, ecx
or edx, eax
cmp edx, 0x110000
je 0x180046e60
add rbx, 4
jmp 0x180046dff
add rbx, 2
shl eax, 6
or eax, r8d
mov edx, eax
jmp 0x180046dff
add rbx, 3
shl eax, 0xc
or ecx, eax
mov edx, ecx
mov eax, esi
inc eax
mov dword [rsp + 0x150], eax
je 0x180047412
cmp edx, 0x80
jae 0x180046d81
mov rcx, qword [rsp + 0x330]
call fcn.1800059a0
mov r11d, 0x1a
inc dword [rsp + 0x130]
jmp 0x180046d81
mov r8d, 4
mov rcx, rbx
mov rdx, qword [rsp + 0x148]
call fcn.180105950
mov r11d, 0x1a
mov rax, qword [rbx + 0x10]
jmp 0x180046d39
mov dword [rsp + 0x150], esi
cmp dword [rsp + 0x130], 0
mov rbx, qword [rsp + 0x330]
mov rsi, qword [rsp + 0xf8]
je 0x180046eab
mov rdx, qword [rbx + 0x10]
cmp rdx, qword [rbx + 8]
jne 0x180046e9d
mov rcx, rbx
call fcn.180005ae0
mov r11d, 0x1a
mov rdx, qword [rbx + 0x10]
mov rax, qword [rbx]
mov byte [rax + rdx], 0x2d
inc rdx
mov qword [rbx + 0x10], rdx
mov ecx, dword [rsp + 0x130]
cmp ecx, dword [rsp + 0x150]
jae 0x180046c3f
mov eax, 0x80
mov r10d, 0x48
xor r8d, r8d
mov edx, ecx
mov qword [rsp + 0x128], r13
mov rcx, rsi
mov ebx, edx
mov rsi, r10
jmp 0x180046eec
inc rcx
cmp eax, ebp
jbe 0x180046f8a
cmp rcx, r13
je 0x18004749c
movzx ebp, byte [rcx]
test bpl, bpl
jns 0x180046ee1
mov edx, ebp
and edx, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp bpl, 0xdf
jbe 0x180046f52
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp bpl, 0xf0
jb 0x180046f63
movzx ebp, byte [rcx + 3]
and edx, 7
shl edx, 0x12
shl r9d, 6
and ebp, 0x3f
or ebp, r9d
or ebp, edx
cmp ebp, 0x110000
je 0x18004749c
mov r10, rsi
add rcx, 4
jmp 0x180046ee4
add rcx, 2
shl edx, 6
or edx, r10d
mov ebp, edx
mov r10, rsi
jmp 0x180046ee4
add rcx, 3
shl edx, 0xc
or r9d, edx
mov ebp, r9d
mov r10, rsi
jmp 0x180046ee4
inc rcx
cmp ebp, edx
mov r9d, edx
cmovb r9d, ebp
cmp edx, eax
cmovae ebp, r9d
cmp rcx, r13
je 0x180047029
movzx edx, byte [rcx]
test dl, dl
jns 0x180046f78
mov r9d, edx
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp dl, 0xdf
jbe 0x180046ff1
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp dl, 0xf0
jb 0x18004700a
movzx edx, byte [rcx + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and edx, 0x3f
or edx, r10d
or edx, r9d
cmp edx, 0x110000
mov r11d, 0x1a
je 0x180047026
add rcx, 4
jmp 0x18004701e
add rcx, 2
shl r9d, 6
or r9d, r11d
mov edx, r9d
mov r11d, 0x1a
jmp 0x180046f7b
add rcx, 3
shl r9d, 0xc
or r10d, r9d
mov edx, r10d
mov r11d, 0x1a
mov r10, rsi
jmp 0x180046f7b
mov r10, rsi
mov ecx, ebx
inc ecx
je 0x18004749c
mov r9d, ebp
sub r9d, eax
mov eax, r8d
not eax
xor edx, edx
div ecx
cmp r9d, eax
ja 0x180047412
mov edx, r9d
imul edx, ecx
add edx, r8d
mov dword [rsp + 0x108], edx
mov rsi, qword [rsp + 0xf8]
mov rcx, rsi
jmp 0x180047084
mov r9d, ebx
mov r8d, dword [rsp + 0x108]
cmp rcx, r13
mov rsi, qword [rsp + 0xf8]
je 0x1800473dc
movzx eax, byte [rcx]
test al, al
js 0x180047094
inc rcx
cmp eax, ebp
jae 0x18004710f
jmp 0x180047102
mov r9, rcx
mov ecx, eax
and ecx, 0x1f
movzx r8d, byte [r9 + 1]
and r8d, 0x3f
cmp al, 0xdf
jbe 0x1800470e2
movzx edx, byte [r9 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp al, 0xf0
jb 0x1800470f0
movzx eax, byte [r9 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and eax, 0x3f
or eax, edx
or eax, ecx
cmp eax, 0x110000
je 0x1800473fe
add r9, 4
jmp 0x1800470fb
add r9, 2
shl ecx, 6
or ecx, r8d
mov eax, ecx
jmp 0x1800470fb
add r9, 3
shl ecx, 0xc
or edx, ecx
mov eax, edx
mov rcx, r9
cmp eax, ebp
jae 0x18004710f
inc dword [rsp + 0x108]
je 0x180047412
cmp eax, ebp
jne 0x180047068
mov qword [rsp + 0x100], rcx
mov dword [rsp + 0x120], ebx
lea r12d, [r10 + 0x1a]
lea ecx, [r10 - 0x24]
neg ecx
cmp r12d, 0x25
cmovb ecx, r11d
cmp r10d, 0x24
mov eax, 1
cmovae ecx, eax
mov eax, dword [rsp + 0x108]
mov r13d, eax
cmp eax, ecx
mov rbx, qword [rsp + 0x330]
jae 0x18004722c
mov edx, 0x61
cmp r13d, 0x1a
jb 0x180047178
mov edx, 0x16
cmp r13d, 0x24
jae 0x18004749c
add edx, r13d
mov rcx, rbx
call fcn.1800059a0
mov ecx, dword [rsp + 0x120]
mov r9d, ecx
inc r9d
mov r14d, dword [rsp + 0x30]
mov r12d, dword [rsp + 0x38]
mov eax, dword [rsp + 0x130]
je 0x18004749c
cmp ecx, eax
mov ecx, 2
mov eax, 0x2bc
cmove ecx, eax
xor r8d, r8d
mov eax, dword [rsp + 0x108]
xor edx, edx
div ecx
mov ecx, eax
xor edx, edx
div r9d
add eax, ecx
cmp eax, 0x1c8
mov edi, dword [rsp + 0x138]
mov r15d, dword [rsp + 0x24]
mov esi, 0xd41d41d5
mov r13, qword [rsp + 0x128]
jb 0x180047391
xor ecx, ecx
mov r11d, 0x1a
nop dword [rax]
mov edx, eax
imul rdx, rsi
shr rdx, 0x20
mov r10d, eax
sub r10d, edx
shr r10d, 1
add r10d, edx
shr r10d, 5
add ecx, 0x24
cmp eax, 0x3e57
mov eax, r10d
ja 0x180047200
jmp 0x18004739c
mov r15d, r10d
neg r15d
mov esi, 0x48
mov r13d, dword [rsp + 0x108]
mov qword [rsp + 0x1a8], r15
jmp 0x180047289
mov rax, qword [rbx]
mov byte [rax + rdx], r14b
inc rdx
mov qword [rbx + 0x10], rdx
mov eax, r13d
xor edx, edx
div edi
lea ecx, [r15 + rsi]
cmp esi, r12d
cmovae ecx, r11d
cmp esi, r10d
mov edx, 1
cmovbe ecx, edx
add esi, 0x24
mov r13d, eax
cmp eax, ecx
jb 0x18004715e
mov edi, ecx
sub edi, 0x24
je 0x18004749c
sub r13d, ecx
neg edi
mov eax, r13d
xor edx, edx
div edi
add edx, ecx
mov r14d, 0x61
cmp edx, 0x1a
jb 0x1800472bc
mov r14d, 0x16
cmp edx, 0x24
jae 0x18004749c
add r14d, edx
cmp r14d, 0x80
jae 0x180047310
mov rdx, qword [rbx + 0x10]
cmp rdx, qword [rbx + 8]
jne 0x180047250
mov rcx, rbx
mov r15d, r12d
mov r12d, ebp
mov rbp, r10
call fcn.180005ae0
mov r10, rbp
mov ebp, r12d
mov r12d, r15d
mov r15, qword [rsp + 0x1a8]
mov r11d, 0x1a
mov rdx, qword [rbx + 0x10]
jmp 0x180047250
mov rcx, rbx
movzx ebx, r14w
shr ebx, 6
mov rax, qword [rcx + 8]
mov rdx, qword [rcx + 0x10]
sub rax, rdx
cmp rax, 1
jbe 0x18004735a
mov r8, qword [rsp + 0x330]
mov rax, qword [r8]
and r14d, 0x3f
shl r14d, 8
movzx ecx, bx
mov rbx, r8
or ecx, r14d
or ecx, 0x80c0
mov word [rax + rdx], cx
add rdx, 2
jmp 0x18004725a
mov r8d, 2
mov rcx, qword [rsp + 0x330]
mov qword [rsp + 0x1a0], r10
call fcn.180105950
mov r10, qword [rsp + 0x1a0]
mov r11d, 0x1a
mov rax, qword [rsp + 0x330]
mov rdx, qword [rax + 0x10]
jmp 0x18004732b
xor ecx, ecx
mov r10d, eax
mov r11d, 0x1a
lea eax, [r10*4]
lea eax, [rax + rax*8]
add r10d, 0x26
xor edx, edx
div r10w
movzx r10d, ax
add r10d, ecx
mov dword [rsp + 0x108], r8d
mov ebx, r9d
mov rcx, qword [rsp + 0x100]
cmp rcx, r13
mov rsi, qword [rsp + 0xf8]
jne 0x180047084
inc r8d
inc ebp
mov edx, r9d
mov eax, ebp
cmp r9d, dword [rsp + 0x150]
mov rbx, qword [rsp + 0x330]
jb 0x180046ed7
jmp 0x18004740b
mov r9d, ebx
mov r8d, dword [rsp + 0x108]
jmp 0x1800473dc
mov ebp, edi
jmp 0x180046c3f
mov rbx, qword [rsp + 0x330]
mov rax, qword [rbx + 0x10]
mov bpl, 1
mov cl, 1
mov r13, qword [rsp + 0x148]
cmp rax, r13
jb 0x180046c30
mov bpl, 1
test r13, r13
je 0x180046c27
cmp rax, r13
jbe 0x180047480
mov rax, qword [rbx]
cmp byte [rax + r13], 0xbf
jg 0x180046c2a
jmp 0x18004749c
mov rax, qword [rbx + 8]
mov rbp, qword [rbx + 0x10]
sub rax, rbp
cmp rax, r13
jb 0x180047488
mov rcx, qword [rbx]
add rcx, rbp
mov rdx, rsi
mov r8, r13
call fcn.1800f64f0
add r13, rbp
mov ebp, edi
jmp 0x180046c2a
je 0x180046c2a
jmp 0x18004749c
mov rcx, rbx
mov rdx, rbp
mov r8, r13
call fcn.180105950
mov rbp, qword [rbx + 0x10]
jmp 0x180047465
ud2
mov r13, qword [rsp + 0x200]
mov edx, dword [rsp + 0x170]
mov r8d, dword [rsp + 0x168]
mov r9d, dword [rsp + 0x160]
mov r10d, dword [rsp + 0x198]
mov r11d, dword [rsp + 0x28]
mov esi, dword [rsp + 0x110]
mov edi, dword [rsp + 0x158]
mov rax, qword [rsp + 0x140]
cmp byte [rax + 0x32], 0
jne 0x180043fb5
jmp 0x1800441b0
ud2
mov rcx, r14
mov r9, rdx
call fcn.180103d90
ud2
mov rcx, r12
mov rdx, r13
xor r8d, r8d
mov r9, r14
call fcn.180103d90
ud2
mov rcx, r12
mov rdx, r13
mov r9, r13
call fcn.180103d90
ud2