Function at 0x180209c10
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rsi
sub rsp, 0x178
mov qword [rax - 0x18], rbx
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
xor r14d, r14d
test byte [rcx + 0xcef4], 0x80
mov qword [rax - 0x40], r15
mov r15, qword [rcx + 0xd078]
mov qword [rsp + 0x1a0], r15
mov r13, rcx
mov qword [rsp + 0x80], r14
mov dword [rsp + 0x9c], r14d
mov r12, r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea ebp, [r14 + 1]
jne 0x180209f6c
mov rdi, qword [rcx + 0x18]
test rdi, rdi
je 0x180209c89
mov rbx, qword [rdi]
jmp 0x180209c8c
mov rbx, r14
test rdi, rdi
je 0x180209f6c
nop word [rax + rax]
cmp dword [rdi + 0x78], 0x50000002
jne 0x180209f57
lea rax, [rsp + 0x48]
lea rdx, [rsp + 0x198]
mov r9, rdi
mov qword [rsp + 0x30], rax
mov r8d, 0x20400002
mov rcx, r13
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xffffffff
call fcn.18019f360
mov esi, eax
test eax, eax
js 0x18020ca49
lea rax, [rsp + 0x48]
lea rdx, [rsp + 0x1a8]
mov r9, rdi
mov qword [rsp + 0x30], rax
mov r8d, 0x20000001
mov rcx, r13
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xffffffff
call fcn.18019f360
mov esi, eax
test eax, eax
js 0x18020ca42
mov rdx, qword [rdi + 0x18]
mov r13, qword [rsp + 0x198]
mov r14, qword [rsp + 0x1a8]
mov rcx, qword [r13 + 0x18]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
mov rax, qword [rdx + 0x18]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x28]
mov rcx, qword [r14 + 0x28]
mov rax, qword [rax]
mov qword [rcx], rax
xor eax, eax
mov ebp, eax
mov r12, rax
mov rax, qword [r13 + 0x28]
mov r9d, dword [r15 + 0x18]
mov ecx, ebp
lea rdx, [rax + rcx*8]
mov rax, qword [rsp + 0x190]
mov dword [rsp + 0x28], 0x11
mov r8, qword [rax + 0xd078]
mov rcx, rax
mov dword [rsp + 0x20], ebp
call fcn.18019f030
mov esi, eax
test eax, eax
js 0x18020ca09
mov rax, qword [r13 + 0x28]
mov rcx, qword [r14 + 0x18]
inc ebp
mov rax, qword [r12 + rax]
add r12, 8
mov qword [r12 + rcx - 8], rax
mov rax, qword [rdi + 0x28]
mov rdx, qword [rax]
mov rax, qword [r13 + 0x28]
mov rcx, qword [r12 + rax - 8]
mov rax, qword [rdx + 0xd0]
mov qword [rcx + 0xd0], rax
movzx eax, byte [rdx + 0xd8]
mov byte [rcx + 0xd8], al
cmp ebp, 2
jb 0x180209d72
xor r14d, r14d
mov ebp, r14d
nop
test rdi, rdi
je 0x180209f39
mov rax, qword [rdi + 8]
mov rsi, qword [rdi]
test rax, rax
je 0x180209e22
mov r13, qword [rsp + 0x190]
mov qword [rax], rsi
jmp 0x180209e2e
mov r13, qword [rsp + 0x190]
mov qword [r13 + 0x18], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x180209e40
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x180209e48
mov rax, qword [rdi + 8]
mov qword [r13 + 0x20], rax
lea rdx, [rdi + 0x18]
lea rcx, [rdi + 0x7c]
mov qword [rdi], 0xffffffffffffffff
mov qword [rdi + 8], 0xffffffffffffffff
call fcn.180193c50
lea rdx, [rdi + 0x28]
lea rcx, [rdi + 0x7e]
call fcn.180193c50
mov rcx, rdi
call fcn.1801979c0
inc ebp
mov rdi, rsi
cmp ebp, 1
jb 0x180209e00
mov r12, qword [rsp + 0x48]
mov ecx, r14d
test r12, r12
je 0x180209eaa
mov rax, r12
nop word [rax + rax]
mov rax, qword [rax]
inc ecx
test rax, rax
jne 0x180209ea0
lea eax, [rcx - 1]
add dword [r13 + 0x14], eax
test rsi, rsi
je 0x180209ef9
test r12, r12
je 0x180209f2f
mov rax, qword [rsi + 8]
mov qword [r12 + 8], rax
mov rax, qword [rsi + 8]
test rax, rax
je 0x180209ed2
mov qword [rax], r12
jmp 0x180209ed6
mov qword [r13 + 0x18], r12
mov rax, qword [rsp + 0x50]
mov r12, r14
mov qword [rsp + 0x48], r14
mov qword [rax], rsi
mov qword [rsi + 8], rax
or dword [r13 + 0x28], 7
mov esi, r14d
mov qword [rsp + 0x50], r14
jmp 0x180209f4b
mov rax, qword [r13 + 0x20]
test rax, rax
je 0x180209f07
mov qword [rax], r12
jmp 0x180209f0b
mov qword [r13 + 0x18], r12
test r12, r12
je 0x180209f19
mov rax, qword [r13 + 0x20]
mov qword [r12 + 8], rax
mov rax, qword [rsp + 0x50]
mov r12, r14
mov qword [rsp + 0x48], r14
mov qword [r13 + 0x20], rax
mov qword [rsp + 0x50], r14
or dword [r13 + 0x28], 7
mov esi, r14d
jmp 0x180209f4b
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x190]
mov esi, 0x80004005
test esi, esi
js 0x18020ca3b
inc dword [r15 + 0x18]
mov rdi, rbx
test rbx, rbx
je 0x180209f67
mov rbx, qword [rbx]
jmp 0x180209ca0
mov ebp, 1
test byte [r13 + 0xcef4], 1
je 0x18020a2cf
mov rax, qword [r13 + 0x20]
mov r13, qword [r13 + 0x18]
mov qword [rsp + 0x198], rax
test r13, r13
je 0x180209f95
mov rbx, qword [r13]
jmp 0x180209f98
mov rbx, r14
test r13, r13
je 0x18020a2c7
mov rdi, qword [rsp + 0x190]
nop dword [rax]
cmp qword [r13 + 8], rax
je 0x18020a2bd
test dword [r13 + 0x78], 0xfff00000
je 0x18020a29c
mov r8d, dword [r13 + 0x20]
test r8d, r8d
je 0x18020a29c
mov rax, qword [r13 + 0x28]
mov rcx, qword [rax]
mov rax, qword [rcx + 0xa8]
movzx ecx, byte [rax + 0x10]
shr cl, 5
test cl, 1
je 0x18020a294
mov r9d, dword [r13 + 0x10]
mov ecx, r14d
test r9d, r9d
je 0x18020a019
mov rdx, qword [r13 + 0x18]
mov rax, qword [rdx]
cmp ecx, dword [rax + 0xcc]
jne 0x18020a019
inc ecx
add rdx, 8
cmp ecx, r9d
jb 0x18020a003
cmp ecx, r9d
je 0x18020a28a
mov edx, ebp
cmp r9d, 1
jbe 0x18020a057
mov rcx, qword [r13 + 0x18]
add rcx, 8
mov rax, qword [rcx - 8]
mov r10d, dword [rax + 0xcc]
nop dword [rax]
mov rax, qword [rcx]
cmp r10d, dword [rax + 0xcc]
jne 0x18020a057
inc edx
add rcx, 8
cmp edx, r9d
jb 0x18020a040
cmp edx, r9d
je 0x18020a280
and r8d, 0xfffff
lea rdx, [rsp + 0x1a8]
or r9d, 0xffffffff
bts r8d, 0x1c
mov rcx, rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.18019f4b0
mov esi, eax
test eax, eax
js 0x18020c9ff
mov eax, dword [r13 + 0x68]
mov rbp, qword [rsp + 0x1a8]
mov dword [rbp + 0x68], eax
mov rax, qword [r13 + 0x70]
mov qword [rbp + 0x70], rax
cmp dword [r13 + 0x20], 0
mov rax, qword [r13 + 0x28]
mov rcx, qword [rax]
mov rax, qword [rcx + 0xd0]
movzx r15d, byte [rcx + 0xd8]
mov qword [rsp + 0x78], rax
jbe 0x18020a26a
xor eax, eax
mov rdi, rax
nop word [rax + rax]
mov rax, qword [r13 + 0x28]
mov rcx, qword [rbp + 0x28]
mov dword [rsp + 0x28], 0x11
mov rax, qword [rdi + rax]
mov dword [rsp + 0x20], r14d
mov qword [rdi + rcx], rax
mov rax, qword [r13 + 0x28]
mov ecx, r14d
lea rdx, [rax + rcx*8]
mov rax, qword [rsp + 0x1a0]
mov r9d, dword [rax + 0x18]
mov rax, qword [rsp + 0x190]
mov r8, qword [rax + 0xd078]
mov rcx, rax
call fcn.18019f030
mov esi, eax
test eax, eax
js 0x18020c9f0
mov rax, qword [r13 + 0x28]
mov rcx, qword [rbp + 0x18]
inc r14d
mov rax, qword [rdi + rax]
add rdi, 8
mov qword [rdi + rcx - 8], rax
mov rax, qword [rbp + 0x18]
mov rcx, qword [rdi + rax - 8]
mov byte [rcx + 0xd8], r15b
mov rax, qword [rbp + 0x18]
mov rcx, qword [rdi + rax - 8]
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0xd0], rax
mov rax, qword [rbp + 0x28]
mov rdx, qword [rdi + rax - 8]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rdi + rax - 8]
mov rax, qword [rdx + 0x98]
mov qword [rcx + 0x98], rax
mov rax, qword [rbp + 0x28]
mov rcx, qword [rdi + rax - 8]
mov rax, qword [rbp + 0x18]
mov rdx, qword [rdi + rax - 8]
mov rax, qword [rcx + 0x140]
mov qword [rdx + 0x140], rax
mov rax, qword [rcx + 0x148]
mov qword [rdx + 0x148], rax
mov rax, qword [rcx + 0x150]
mov qword [rdx + 0x150], rax
mov rax, qword [rcx + 0x158]
mov qword [rdx + 0x158], rax
mov rax, qword [rcx + 0x160]
mov qword [rdx + 0x160], rax
mov rax, qword [rcx + 0x168]
mov qword [rdx + 0x168], rax
mov rax, qword [rcx + 0x170]
mov qword [rdx + 0x170], rax
mov rax, qword [rcx + 0x178]
mov qword [rdx + 0x178], rax
mov rax, qword [rcx + 0x180]
mov qword [rdx + 0x180], rax
mov eax, dword [rcx + 0x98]
xor eax, dword [rdx + 0x98]
and eax, 0x1f00000
xor qword [rdx + 0x98], rax
mov rax, qword [rbp + 0x28]
mov rdx, qword [rdi + rax - 8]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rdi + rax - 8]
mov eax, dword [rdx + 0xa4]
mov dword [rcx + 0xa4], eax
cmp r14d, dword [r13 + 0x20]
jb 0x18020a0e0
mov rdi, qword [rsp + 0x190]
mov r15, qword [rsp + 0x1a0]
mov rax, qword [rsp + 0x198]
inc dword [r15 + 0x18]
jmp 0x18020a29c
mov rax, qword [rsp + 0x198]
jmp 0x18020a29c
mov rax, qword [rsp + 0x198]
jmp 0x18020a29c
mov rax, qword [rsp + 0x198]
mov r13, rbx
test rbx, rbx
je 0x18020a2b3
mov rbx, qword [rbx]
xor r14d, r14d
lea ebp, [r14 + 1]
jmp 0x180209fb0
mov r13, qword [rsp + 0x190]
jmp 0x18020a2cf
mov r13, qword [rsp + 0x190]
jmp 0x18020a2cf
mov r13, qword [rsp + 0x190]
cmp dword [r13 + 0xcea0], 0
je 0x18020a456
test byte [r13 + 0xcef9], 4
jne 0x18020a456
mov rcx, r13
call fcn.1801b3770
mov esi, eax
test eax, eax
js 0x18020ca5e
mov rdi, qword [r13 + 0x18]
test rdi, rdi
je 0x18020a30e
mov rbx, qword [rdi]
xor r10d, r10d
jmp 0x18020a314
xor r10d, r10d
mov rbx, r10
test rdi, rdi
je 0x18020a456
nop dword [rax]
mov edx, dword [rdi + 0x78]
mov eax, edx
and eax, 0xf0000000
cmp eax, 0x60000000
je 0x18020a340
mov ecx, edx
call fcn.18024179c
test al, al
je 0x18020a446
mov ecx, edx
call fcn.18024179c
mov ebp, r10d
test al, al
setne bpl
inc ebp
mov r9d, dword [rdi + 0x78]
mov eax, r9d
and eax, 0xf0000000
cmp eax, 0xa0000000
jne 0x18020a38c
mov eax, r9d
and eax, 0xfff00000
cmp eax, 0xa1300000
je 0x18020a384
cmp eax, 0xa1400000
je 0x18020a384
and r9d, 0xfffff
jmp 0x18020a3af
mov r9d, 1
jmp 0x18020a3af
mov eax, r9d
and eax, 0xfff00000
cmp eax, 0x68700000
je 0x18020a3ab
cmp eax, 0x68800000
je 0x18020a3ab
and r9d, 0xfffff
jmp 0x18020a3af
mov r9d, dword [rdi + 0x10]
mov ecx, r9d
imul ecx, ebp
lea eax, [rcx + r9]
cmp eax, dword [rdi + 0x10]
ja 0x18020a446
mov rax, qword [rdi + 0x18]
lea r8, [rax + rcx*8]
test r9d, r9d
je 0x18020a446
test r9d, r9d
je 0x18020a3f8
mov rcx, r8
mov edx, r9d
nop word [rax + rax]
mov rax, qword [rcx]
add rcx, 8
or qword [rax + 0x98], 0x80
sub rdx, 1
jne 0x18020a3e0
mov ecx, r10d
test r9d, r9d
je 0x18020a419
mov rdx, r8
mov rax, qword [rdx]
cmp dword [rax + 0xcc], ecx
jne 0x18020a419
inc ecx
add rdx, 8
cmp ecx, r9d
jb 0x18020a403
cmp ecx, r9d
je 0x18020a43f
lea rax, [r15 + 0x18]
mov rdx, rdi
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.180209600
mov esi, eax
test eax, eax
js 0x18020ca34
xor r10d, r10d
inc ebp
jmp 0x18020a352
mov rdi, rbx
test rbx, rbx
je 0x18020a456
mov rbx, qword [rbx]
jmp 0x18020a320
cmp dword [r13 + 0xcea0], 0
mov esi, 4
je 0x18020ab2b
mov rdi, qword [r13 + 0x18]
test rdi, rdi
je 0x18020a47a
mov rbx, qword [rdi]
xor r9d, r9d
jmp 0x18020a480
xor r9d, r9d
mov rbx, r9
test rdi, rdi
je 0x18020ab2b
mov r14, qword [rsp + 0x190]
movabs r11, 0xfefefefefefefefe
nop dword [rax + rax]
mov eax, dword [rdi + 0x78]
and eax, 0xfff00000
cmp eax, 0x50400000
jne 0x18020ab1b
cmp dword [rdi + 0x10], 8
mov rdx, qword [rdi + 0x18]
mov rax, qword [rdx]
mov rax, qword [rax + 0xa8]
jne 0x18020a560
mov eax, dword [rax + 0x10]
bt rax, 9
jb 0x18020a560
mov r8, rdx
mov r10, rsi
nop
mov rax, qword [r8]
add r8, 8
mov ecx, dword [rax + 0xcc]
mov eax, 1
shl eax, cl
or r9d, eax
sub r10, 1
jne 0x18020a4e0
cmp r9d, 0xf
jne 0x18020a560
mov r8, rsi
nop word [rax + rax]
mov rcx, qword [rdx]
add rdx, 8
sub r8, 1
mov eax, dword [rcx + 0xcc]
mov qword [rsp + rax*8 + 0xb0], rcx
jne 0x18020a510
xor r9d, r9d
mov r8, rsi
mov rdx, r9
nop word [rax + rax]
mov rax, qword [rsp + rdx + 0xb0]
mov rcx, qword [rdi + 0x18]
add rdx, 8
sub r8, 1
mov qword [rdx + rcx - 8], rax
jne 0x18020a540
jmp 0x18020ab1b
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020a572
xor r12d, r12d
mov rcx, r12
jmp 0x18020a588
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movabs r11, 0xfefefefefefefefe
xor r12d, r12d
mov rcx, rax
cmp qword [rcx + 0x30], 0
je 0x18020a5b4
mov rbp, qword [rcx + 0x30]
test rbp, rbp
jne 0x18020a59d
mov rbp, r12
jmp 0x18020a5c9
mov rax, qword [rbp]
mov qword [rcx + 0x30], rax
test rax, rax
jne 0x18020a5ae
mov qword [rcx + 0x38], r12
mov qword [rbp], r11
jmp 0x18020a5c9
mov rcx, qword [rcx + 0x28]
mov edx, 0x80
lea r8d, [rdx - 0x70]
call fcn.180243b70
mov rbp, rax
test rbp, rbp
je 0x18020a78b
or r9d, 0xffffffff
mov edx, 0x10000004
mov rcx, rbp
or r8d, r9d
mov qword [rbp], 0xffffffffffffffff
mov qword [rbp + 8], 0xffffffffffffffff
mov dword [rbp + 0x10], r12d
mov dword [rbp + 0x20], r12d
mov dword [rbp + 0x30], 0xffffffff
mov dword [rbp + 0x78], r12d
mov qword [rbp + 0x18], r12
mov word [rbp + 0x7c], r12w
mov qword [rbp + 0x28], r12
mov word [rbp + 0x7e], r12w
mov dword [rbp + 0x38], r12d
mov dword [rbp + 0x3c], r12d
mov dword [rbp + 0x40], r12d
mov qword [rbp + 0x48], 0xffffffffffffffff
mov dword [rbp + 0x50], r12d
mov dword [rbp + 0x68], r12d
mov qword [rbp + 0x70], r12
mov byte [rsp + 0x20], 0
call fcn.180193d40
mov esi, eax
test eax, eax
js 0x18020a692
mov eax, dword [rdi + 0x68]
mov dword [rbp + 0x68], eax
mov rax, qword [rdi + 0x70]
mov qword [rbp + 0x70], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 8], rax
test rax, rax
je 0x18020a679
mov qword [rax], rbp
mov qword [rsp + 0x50], rbp
mov esi, r12d
mov qword [rbp], r12
mov r14, rbp
jmp 0x18020a790
mov qword [rsp + 0x48], rbp
mov qword [rbp], r12
mov qword [rsp + 0x50], rbp
mov esi, r12d
mov r14, rbp
jmp 0x18020a790
cmp word [rbp + 0x7c], 0
je 0x18020a6e7
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020a6a8
mov rax, r12
jmp 0x18020a6ae
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [rbp + 0x7c]
cmp ecx, dword [rax + 0x250]
ja 0x18020a6de
mov r8, qword [rbp + 0x18]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x18020a6de
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rbp + 0x7c], r12w
mov qword [rbp + 0x18], r12
cmp word [rbp + 0x7e], 0
je 0x18020a73c
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020a6fd
mov rax, r12
jmp 0x18020a703
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [rbp + 0x7e]
cmp ecx, dword [rax + 0x250]
ja 0x18020a733
mov r8, qword [rbp + 0x28]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x18020a733
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rbp + 0x7e], r12w
mov qword [rbp + 0x28], r12
mov ecx, dword [0x18025e63c]
test ecx, ecx
js 0x18020a790
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov r12, rax
test rax, rax
je 0x18020a790
mov edx, 0xfe
mov rcx, rbp
lea r8d, [rdx - 0x7e]
call fcn.18024adb8
xor eax, eax
mov qword [rbp], rax
mov rax, qword [r12 + 0x38]
test rax, rax
je 0x18020a77f
mov qword [rax], rbp
mov qword [r12 + 0x38], rbp
jmp 0x18020a790
mov qword [r12 + 0x30], rbp
mov qword [r12 + 0x38], rbp
jmp 0x18020a790
mov esi, 0x8007000e
test esi, esi
js 0x18020ca2d
lea rax, [rsp + 0x48]
lea rdx, [rsp + 0x198]
mov r9, rdi
mov qword [rsp + 0x30], rax
mov r8d, 0x50400004
mov rcx, r13
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xffffffff
call fcn.18019f360
mov esi, eax
test eax, eax
js 0x18020ca26
mov rax, qword [rdi + 0x28]
mov r13, qword [rsp + 0x198]
mov rax, qword [rax]
mov rcx, qword [r13 + 0x28]
mov qword [rcx], rax
xor eax, eax
mov r12d, eax
mov rbp, rax
mov eax, dword [rdi + 0x10]
shr eax, 1
cmp r12d, eax
jae 0x18020a802
mov eax, r12d
jmp 0x18020a804
dec eax
mov rcx, qword [r14 + 0x18]
mov edx, eax
mov rax, qword [rdi + 0x18]
mov rax, qword [rax + rdx*8]
mov dword [rsp + 0x28], 0x11
mov dword [rsp + 0x20], r12d
mov qword [rcx + rbp], rax
mov rax, qword [r14 + 0x28]
mov r9d, dword [r15 + 0x18]
mov ecx, r12d
lea rdx, [rax + rcx*8]
mov rax, qword [rsp + 0x190]
mov r8, qword [rax + 0xd078]
mov rcx, rax
call fcn.18019f030
mov esi, eax
test eax, eax
js 0x18020c9e1
mov rax, qword [rdi + 0x28]
inc r12d
add rbp, 8
mov rdx, qword [rax]
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax + rbp - 8]
mov rax, qword [rdx + 0xd0]
mov qword [rcx + 0xd0], rax
movzx eax, byte [rdx + 0xd8]
mov byte [rcx + 0xd8], al
mov rax, qword [r14 + 0x18]
mov rdx, qword [rax + rbp - 8]
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax + rbp - 8]
mov eax, dword [rdx + 0xa4]
mov dword [rcx + 0xa4], eax
mov rax, qword [r14 + 0x28]
mov rcx, qword [r13 + 0x18]
mov rax, qword [rax + rbp - 8]
mov qword [rcx + rbp - 8], rax
mov edx, dword [rdi + 0x78]
mov rax, qword [rdi + 0x18]
mov rcx, qword [r13 + 0x18]
and edx, 0xfffff
mov rax, qword [rax + rdx*8]
mov qword [rcx + rbp + 0x18], rax
cmp r12d, 4
jb 0x18020a7f3
xor r9d, r9d
mov r12d, r9d
nop
test rdi, rdi
je 0x18020aaee
mov rax, qword [rdi + 8]
mov rbp, qword [rdi]
test rax, rax
je 0x18020a902
mov r13, qword [rsp + 0x190]
mov qword [rax], rbp
jmp 0x18020a90e
mov r13, qword [rsp + 0x190]
mov qword [r13 + 0x18], rbp
mov rcx, qword [rdi]
test rcx, rcx
je 0x18020a920
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x18020a928
mov rax, qword [rdi + 8]
mov qword [r13 + 0x20], rax
mov qword [rdi], 0xffffffffffffffff
mov qword [rdi + 8], 0xffffffffffffffff
cmp word [rdi + 0x7c], 0
je 0x18020a98f
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020a94d
mov rax, r9
jmp 0x18020a956
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r9d, r9d
movzx ecx, word [rdi + 0x7c]
cmp ecx, dword [rax + 0x250]
ja 0x18020a986
mov r8, qword [rdi + 0x18]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x18020a986
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rdi + 0x7c], r9w
mov qword [rdi + 0x18], r9
cmp word [rdi + 0x7e], 0
je 0x18020a9e7
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020a9a5
mov rax, r9
jmp 0x18020a9ae
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r9d, r9d
movzx ecx, word [rdi + 0x7e]
cmp ecx, dword [rax + 0x250]
ja 0x18020a9de
mov r8, qword [rdi + 0x28]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x18020a9de
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rdi + 0x7e], r9w
mov qword [rdi + 0x28], r9
mov ecx, dword [0x18025e63c]
test ecx, ecx
js 0x18020aa35
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
test rax, rax
je 0x18020aa32
mov edx, 0xfe
mov rcx, rdi
lea r8d, [rdx - 0x7e]
call fcn.18024adb8
xor r9d, r9d
mov qword [rdi], r9
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x18020aa28
mov qword [rax], rdi
mov qword [rsi + 0x38], rdi
jmp 0x18020aa35
mov qword [rsi + 0x30], rdi
mov qword [rsi + 0x38], rdi
jmp 0x18020aa35
xor r9d, r9d
inc r12d
mov rdi, rbp
cmp r12d, 1
jb 0x18020a8e0
mov r12, qword [rsp + 0x48]
mov ecx, r9d
test r12, r12
je 0x18020aa5f
mov rax, r12
mov rax, qword [rax]
inc ecx
test rax, rax
jne 0x18020aa55
lea eax, [rcx - 1]
add dword [r13 + 0x14], eax
test rbp, rbp
je 0x18020aaae
test r12, r12
je 0x18020aae4
mov rax, qword [rbp + 8]
mov qword [r12 + 8], rax
mov rax, qword [rbp + 8]
test rax, rax
je 0x18020aa87
mov qword [rax], r12
jmp 0x18020aa8b
mov qword [r13 + 0x18], r12
mov rax, qword [rsp + 0x50]
mov r12, r9
mov qword [rsp + 0x48], r9
mov qword [rax], rbp
mov qword [rbp + 8], rax
or dword [r13 + 0x28], 7
mov qword [rsp + 0x50], r9
mov esi, r9d
jmp 0x18020ab00
mov rax, qword [r13 + 0x20]
test rax, rax
je 0x18020aabc
mov qword [rax], r12
jmp 0x18020aac0
mov qword [r13 + 0x18], r12
test r12, r12
je 0x18020aace
mov rax, qword [r13 + 0x20]
mov qword [r12 + 8], rax
mov rax, qword [rsp + 0x50]
mov r12, r9
mov qword [rsp + 0x48], r9
mov qword [r13 + 0x20], rax
mov qword [rsp + 0x50], r9
or dword [r13 + 0x28], 7
mov esi, r9d
jmp 0x18020ab00
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x190]
mov esi, 0x80004005
test esi, esi
js 0x18020ca1f
inc dword [r15 + 0x18]
mov esi, 4
movabs r11, 0xfefefefefefefefe
mov rdi, rbx
test rbx, rbx
je 0x18020ab2b
mov rbx, qword [rbx]
jmp 0x18020a4a0
movzx eax, byte [r13 + 0xcef4]
test al, 4
jne 0x18020ab3f
test al, 2
je 0x18020b186
mov rcx, r13
call fcn.1801b3770
mov esi, eax
test eax, eax
js 0x18020ca57
mov rdi, qword [r13 + 0x18]
test rdi, rdi
je 0x18020ab6a
mov rbx, qword [rdi]
xor r11d, r11d
mov qword [rsp + 0x1a8], rbx
jmp 0x18020ab78
xor r11d, r11d
mov rbx, r11
mov qword [rsp + 0x1a8], rbx
test rdi, rdi
je 0x18020b186
mov eax, dword [rdi + 0x78]
and eax, 0xfff00000
cmp eax, 0x10000000
jne 0x18020b16e
mov r15, qword [rdi + 0x28]
mov qword [rsp + 0x78], r15
mov rax, qword [r15]
mov rcx, qword [rax + 0xa8]
movzx eax, byte [rcx + 0x10]
shr al, 5
test al, 1
jne 0x18020b16e
mov r14d, dword [rdi + 0x20]
mov r10d, r11d
mov r13d, r11d
mov byte [rsp + 0x198], 0
mov byte [rsp + 0x199], 0
mov byte [rsp + 0x19a], 0
mov byte [rsp + 0x19b], 0
mov r9d, r11d
test r14d, r14d
je 0x18020acaa
mov rax, qword [rdi + 0x18]
mov rbx, r15
mov rbp, r11
mov rsi, rax
sub rbx, rax
mov r15, rax
nop
mov rax, qword [rsi]
mov rdx, qword [rbx + rsi]
mov ecx, dword [rax + 0xcc]
cmp dword [rdx + 0xcc], ecx
jne 0x18020ac18
inc r10d
mov edx, r11d
mov r8, r11
test r9d, r9d
je 0x18020ac89
mov rax, qword [r15 + rbp]
mov rcx, r15
mov r11d, dword [rax + 0xcc]
mov rax, qword [rcx]
cmp dword [rax + 0xcc], r11d
je 0x18020ac50
inc edx
inc r8
add rcx, 8
cmp edx, r9d
jb 0x18020ac31
xor r11d, r11d
jmp 0x18020ac89
mov rdx, qword [r15 + r8*8]
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
je 0x18020ac83
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
jne 0x18020ac83
mov eax, dword [rdx + 0xcc]
mov byte [rsp + rax + 0x198], 1
inc r13d
xor r11d, r11d
inc r9d
add rbp, 8
add rsi, 8
cmp r9d, r14d
jb 0x18020ac00
mov rbx, qword [rsp + 0x1a8]
mov r15, qword [rsp + 0x78]
test r14d, r14d
je 0x18020acec
mov rcx, qword [rdi + 0x18]
mov r8, r14
sub r15, rcx
nop dword [rax]
mov rax, qword [rcx]
mov edx, dword [rax + 0xcc]
mov rax, qword [rcx + r15]
cmp dword [rax + 0xcc], edx
jne 0x18020ace2
cmp byte [rsp + rdx + 0x198], 0
je 0x18020ace2
dec r10d
add rcx, 8
sub r8, 1
jne 0x18020acc0
cmp r10d, r14d
je 0x18020b15c
lea eax, [r13 + 1]
cmp eax, r14d
jae 0x18020b152
cmp r10d, 1
ja 0x18020ad1b
test r13d, r13d
je 0x18020b166
cmp r10d, 1
jbe 0x18020adf1
mov r13, qword [rsp + 0x190]
and r10d, 0xfffff
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
bts r10d, 0x1c
lea rdx, [rsp + 0x68]
mov r9, rdi
mov rcx, r13
mov r8d, r10d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xffffffff
call fcn.18019f360
mov esi, eax
test eax, eax
js 0x18020ca18
xor r11d, r11d
mov r9d, r11d
cmp dword [rdi + 0x20], r11d
jbe 0x18020adec
mov rdx, r11
mov r8, r11
mov r11, qword [rsp + 0x68]
nop dword [rax]
mov rax, qword [rdi + 0x18]
mov rcx, qword [rdx + rax]
mov r10d, dword [rcx + 0xcc]
cmp byte [rsp + r10 + 0x198], 0
jne 0x18020add5
mov rax, qword [rdi + 0x28]
mov rcx, qword [rdx + rax]
cmp dword [rcx + 0xcc], r10d
jne 0x18020add5
mov rax, qword [r11 + 0x28]
add r8, 8
mov qword [r8 + rax - 8], rcx
mov rax, qword [rdi + 0x18]
mov rcx, qword [r11 + 0x18]
mov rax, qword [rdx + rax]
mov qword [r8 + rcx - 8], rax
mov rax, qword [rdi + 0x18]
mov qword [rdx + rax], 0xffffffffffffffff
inc r9d
add rdx, 8
cmp r9d, dword [rdi + 0x20]
jb 0x18020ad80
mov r12, qword [rsp + 0x48]
xor r11d, r11d
jmp 0x18020adf1
mov r12, qword [rsp + 0x48]
mov edx, dword [rdi + 0x10]
mov r13d, r11d
test edx, edx
je 0x18020af23
mov r12, r11
mov rax, qword [rdi + 0x18]
cmp qword [r12 + rax], 0xffffffffffffffff
lea rcx, [r12 + rax]
je 0x18020af0b
mov rax, qword [rcx]
mov r8d, r11d
mov ebp, dword [rax + 0xcc]
cmp r13d, edx
jae 0x18020ae4e
sub edx, r13d
nop dword [rax]
cmp qword [rcx], 0xffffffffffffffff
je 0x18020ae44
mov rax, qword [rcx]
cmp ebp, dword [rax + 0xcc]
jne 0x18020ae44
inc r8d
add rcx, 8
sub rdx, 1
jne 0x18020ae30
mov rcx, qword [rsp + 0x190]
lea rax, [rsp + 0x48]
and r8d, 0xfffff
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x58]
bts r8d, 0x1c
mov r9, rdi
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xffffffff
call fcn.18019f360
mov esi, eax
test eax, eax
js 0x18020c9cf
mov r9d, r13d
cmp r13d, dword [rdi + 0x10]
jae 0x18020af08
mov r10, qword [rsp + 0x58]
xor r11d, r11d
mov rdx, r12
mov r8, r11
nop word [rax + rax]
mov rax, qword [rdi + 0x18]
cmp qword [rdx + rax], 0xffffffffffffffff
je 0x18020aef9
mov rax, qword [rdx + rax]
cmp ebp, dword [rax + 0xcc]
jne 0x18020aef9
mov rax, qword [rdi + 0x28]
mov rcx, qword [r10 + 0x28]
add r8, 8
mov rax, qword [rdx + rax]
mov qword [r8 + rcx - 8], rax
mov rax, qword [rdi + 0x18]
mov rcx, qword [r10 + 0x18]
mov rax, qword [rdx + rax]
mov qword [r8 + rcx - 8], rax
mov rax, qword [rdi + 0x18]
mov qword [rdx + rax], 0xffffffffffffffff
inc r9d
add rdx, 8
cmp r9d, dword [rdi + 0x10]
jb 0x18020aeb0
jmp 0x18020af0b
xor r11d, r11d
mov edx, dword [rdi + 0x10]
inc r13d
add r12, 8
cmp r13d, edx
jb 0x18020ae02
mov r12, qword [rsp + 0x48]
mov r13d, r11d
test rdi, rdi
je 0x18020b137
mov rax, qword [rdi + 8]
mov rbp, qword [rdi]
test rax, rax
je 0x18020af48
mov rdx, qword [rsp + 0x190]
mov qword [rax], rbp
jmp 0x18020af54
mov rdx, qword [rsp + 0x190]
mov qword [rdx + 0x18], rbp
mov rcx, qword [rdi]
test rcx, rcx
je 0x18020af66
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x18020af6e
mov rax, qword [rdi + 8]
mov qword [rdx + 0x20], rax
mov qword [rdi], 0xffffffffffffffff
mov qword [rdi + 8], 0xffffffffffffffff
cmp word [rdi + 0x7c], 0
je 0x18020afd5
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020af93
mov rax, r11
jmp 0x18020af9c
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r11d, r11d
movzx ecx, word [rdi + 0x7c]
cmp ecx, dword [rax + 0x250]
ja 0x18020afcc
mov r8, qword [rdi + 0x18]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x18020afcc
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rdi + 0x7c], r11w
mov qword [rdi + 0x18], r11
cmp word [rdi + 0x7e], 0
je 0x18020b02d
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020afeb
mov rax, r11
jmp 0x18020aff4
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r11d, r11d
movzx ecx, word [rdi + 0x7e]
cmp ecx, dword [rax + 0x250]
ja 0x18020b024
mov r8, qword [rdi + 0x28]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x18020b024
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rdi + 0x7e], r11w
mov qword [rdi + 0x28], r11
mov ecx, dword [0x18025e63c]
test ecx, ecx
js 0x18020b07b
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
test rax, rax
je 0x18020b078
mov edx, 0xfe
mov rcx, rdi
lea r8d, [rdx - 0x7e]
call fcn.18024adb8
xor r11d, r11d
mov qword [rdi], r11
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x18020b06e
mov qword [rax], rdi
mov qword [rsi + 0x38], rdi
jmp 0x18020b07b
mov qword [rsi + 0x30], rdi
mov qword [rsi + 0x38], rdi
jmp 0x18020b07b
xor r11d, r11d
inc r13d
mov rdi, rbp
cmp r13d, 1
jb 0x18020af26
mov ecx, r11d
test r12, r12
je 0x18020b0a0
mov rax, r12
mov rax, qword [rax]
inc ecx
test rax, rax
jne 0x18020b096
mov r13, qword [rsp + 0x190]
lea eax, [rcx - 1]
add dword [r13 + 0x14], eax
test rbp, rbp
je 0x18020b0f7
test r12, r12
je 0x18020b12d
mov rax, qword [rbp + 8]
mov qword [r12 + 8], rax
mov rax, qword [rbp + 8]
test rax, rax
je 0x18020b0d0
mov qword [rax], r12
jmp 0x18020b0d4
mov qword [r13 + 0x18], r12
mov rax, qword [rsp + 0x50]
mov r12, r11
mov qword [rsp + 0x48], r11
mov qword [rax], rbp
mov qword [rbp + 8], rax
or dword [r13 + 0x28], 7
mov qword [rsp + 0x50], r11
mov esi, r11d
jmp 0x18020b144
mov rax, qword [r13 + 0x20]
test rax, rax
je 0x18020b105
mov qword [rax], r12
jmp 0x18020b109
mov qword [r13 + 0x18], r12
test r12, r12
je 0x18020b117
mov rax, qword [r13 + 0x20]
mov qword [r12 + 8], rax
mov rax, qword [rsp + 0x50]
mov r12, r11
mov qword [rsp + 0x48], r11
mov qword [r13 + 0x20], rax
mov qword [rsp + 0x50], r11
or dword [r13 + 0x28], 7
mov esi, r11d
jmp 0x18020b144
mov r13, qword [rsp + 0x190]
mov esi, 0x80004005
test esi, esi
jns 0x18020b16e
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
jmp 0x18020b16e
mov r13, qword [rsp + 0x190]
jmp 0x18020b16e
mov r13, qword [rsp + 0x190]
mov rdi, rbx
test rbx, rbx
je 0x18020b186
mov rbx, qword [rbx]
mov qword [rsp + 0x1a8], rbx
jmp 0x18020ab81
mov rcx, r13
call fcn.1801b3770
mov esi, eax
test eax, eax
js 0x18020ca50
mov rcx, qword [rsp + 0x1a0]
mov eax, dword [rcx + 0x18]
cmp eax, 0x3ffffffd
jbe 0x18020b1c1
mov rdi, qword [rsp + 0x80]
xor ebx, ebx
mov esi, 0x80070216
lea ebp, [rbx + 1]
jmp 0x18020b262
shl eax, 2
mov ecx, 4
mov ebp, 1
test eax, eax
cmove eax, ecx
mov rcx, qword [r13 + 0xd250]
test eax, eax
mov ebx, eax
mov dword [rsp + 0x9c], eax
cmove rbx, rbp
test rcx, rcx
je 0x18020b1fb
mov rax, qword [rcx + 0x10]
sub rax, qword [rcx + 8]
cmp rbx, rax
jbe 0x18020b21d
lea rcx, [r13 + 0xd250]
mov rdx, rbx
call fcn.1800c57b0
test eax, eax
je 0x18020b21d
xor ebx, ebx
mov rdi, rbx
mov qword [rsp + 0x80], rbx
jmp 0x18020b24f
mov rcx, qword [r13 + 0xd250]
test rcx, rcx
je 0x18020b23c
mov rax, qword [rcx + 8]
lea rdi, [rax + rcx + 0x18]
mov qword [rsp + 0x80], rdi
jmp 0x18020b249
xor eax, eax
mov rdi, rax
mov qword [rsp + 0x80], rax
add qword [rcx + 8], rbx
xor ebx, ebx
mov rcx, qword [rsp + 0x1a0]
mov esi, 0x8007000e
test rdi, rdi
cmovne esi, ebx
test esi, esi
js 0x18020ca63
mov r8d, dword [rcx + 0x18]
xor edx, edx
mov rcx, rdi
shl r8, 2
call fcn.18024adb8
mov edx, dword [r13 + 0xc]
or r11d, 0xffffffff
inc r11d
cmp r11d, edx
jae 0x18020b316
mov rax, qword [r13 + 0xce58]
mov rcx, qword [rax + r11*8]
cmp qword [rcx + 0x30], 0
je 0x18020b284
mov rcx, qword [rcx + 0x30]
mov rdx, qword [rcx]
nop dword [rax]
mov rax, qword [rcx + 0xa8]
mov byte [rcx + 0x48], 0
cmp qword [r13 + 0xd078], rax
jne 0x18020b2dd
mov r8d, dword [rcx + 0xc8]
mov eax, dword [rcx + 0xcc]
cmp eax, dword [rdi + r8*4]
jb 0x18020b2dd
inc eax
mov dword [rdi + r8*4], eax
test rdx, rdx
je 0x18020b2ea
mov rcx, rdx
mov rdx, qword [rdx]
jmp 0x18020b311
mov r8d, dword [r13 + 0xc]
nop
inc r11d
cmp r11d, r8d
jae 0x18020b316
mov rax, qword [r13 + 0xce58]
mov rdx, qword [rax + r11*8]
cmp qword [rdx + 0x30], 0
je 0x18020b2f0
mov rcx, qword [rdx + 0x30]
mov rdx, qword [rcx]
test rcx, rcx
jne 0x18020b2b0
mov r14, qword [r13 + 0x20]
mov qword [rsp + 0x68], r14
test r14, r14
je 0x18020c98d
lea rbp, [0x180012bf0]
nop
mov ecx, dword [r14 + 0x78]
mov rax, qword [r14 + 8]
mov qword [rsp + 0x78], rax
test ecx, 0xfff00000
je 0x18020c96b
mov eax, dword [r14 + 0x10]
xor edx, edx
mov edi, ecx
and edi, 0xfffff
div edi
cmp dword [r14 + 0x20], 0
mov esi, eax
je 0x18020b460
mov edx, ecx
shr edx, 0x1c
cmp edx, 1
je 0x18020b3de
cmp edx, 2
je 0x18020b3de
cmp edx, 3
je 0x18020b3de
cmp edx, 4
je 0x18020b3de
and ecx, 0xfff00000
cmp ecx, 0x90b00000
ja 0x18020b3ba
cmp ecx, 0x90b00000
je 0x18020b3de
cmp ecx, 0x90000000
je 0x18020b3de
cmp ecx, 0x90200000
je 0x18020b3de
cmp ecx, 0x90300000
je 0x18020b3de
cmp ecx, 0x90a00000
je 0x18020b3de
jmp 0x18020b460
cmp ecx, 0x90c00000
je 0x18020b3de
cmp ecx, 0x90e00000
je 0x18020b3de
cmp ecx, 0x90f00000
je 0x18020b3de
cmp ecx, 0x91100000
jne 0x18020b460
mov rdx, qword [r14 + 0x28]
lea r8, [rsp + 0xe8]
mov r9d, edi
mov rcx, r13
mov byte [rsp + 0x20], 1
call fcn.1801b2b50
test esi, esi
je 0x18020b460
nop
mov rax, qword [r14 + 0x18]
mov ecx, ebx
imul ecx, dword [r14 + 0x20]
lea rcx, [rax + rcx*8]
test edi, edi
je 0x18020b45a
lea r9, [rsp + 0xb0]
lea r10, [rsp + 0xe8]
mov r8d, edi
mov r11d, edi
nop dword [rax]
mov eax, dword [r10]
add r9, 8
add r10, 4
sub r11, 1
mov rdx, qword [rcx + rax*8]
mov qword [r9 - 8], rdx
jne 0x18020b430
lea rdx, [rsp + 0xb0]
shl r8, 3
call sub.msvcrt.dll_memcpy
inc ebx
cmp ebx, esi
jb 0x18020b400
mov r13d, dword [r14 + 0x78]
xor eax, eax
mov dword [rsp + 0x1a8], eax
mov eax, r13d
mov dword [rsp + 0x198], r13d
and eax, 0xfff00000
cmp eax, 0x10000000
jne 0x18020b6e8
mov rax, qword [r14 + 0x28]
mov r12, qword [rax]
mov rax, qword [r12 + 0xa8]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1a0], rcx
test rcx, 0x1004
jne 0x18020b6e8
mov rdx, qword [rsp + 0x190]
test byte [rdx + 0xcef4], 1
je 0x18020b4ca
test cl, 0x20
jne 0x18020b6e8
mov rbp, qword [r14 + 0x18]
mov rax, qword [rbp]
mov rcx, qword [rax + 0xa8]
cmp qword [rdx + 0xd078], rcx
jne 0x18020b6d8
cmp dword [r14 + 0x10], 0
jbe 0x18020b6e1
mov r15d, dword [rdx + 0xd218]
mov r14d, dword [r14 + 0x10]
mov r13, qword [rsp + 0x1a0]
and r15d, 4
lea rsi, [rsp + 0x1a8]
mov r11, qword [rbp]
mov rdi, qword [r11 + 0x100]
test r15d, r15d
je 0x18020b542
mov rcx, qword [r12 + 0x108]
test rcx, rcx
je 0x18020b542
mov rax, qword [r11 + 0x108]
test rax, rax
je 0x18020b542
cmp rcx, rax
jne 0x18020b6b1
mov rbx, qword [r12 + 0xd0]
cmp rbx, 0xffffffffffffffff
je 0x18020b5de
test r13b, 0x20
je 0x18020b5da
mov ecx, dword [rdi + 0x78]
call fcn.1802425f8
test al, al
je 0x18020b5d6
mov r10d, dword [rdi + 0x10]
xor ecx, ecx
mov r9d, ecx
test r10d, r10d
je 0x18020b5e0
mov r8, qword [rdi + 0x18]
nop dword [rax]
mov rcx, qword [r8]
mov eax, dword [rcx + 0x98]
mov rdx, qword [rcx + 0xa8]
shr rax, 0x18
test al, 1
jne 0x18020b5c6
mov eax, dword [rdx + 0x10]
test rax, 0x800290
je 0x18020b6b1
mov rax, qword [rcx + 0xc0]
cmp rax, 0xffffffffffffffff
je 0x18020b5c6
mov eax, dword [rax + 0x98]
shr rax, 0x18
test al, 1
je 0x18020b6b1
inc r9d
add r8, 8
cmp r9d, r10d
jb 0x18020b580
xor ecx, ecx
jmp 0x18020b5e0
xor ecx, ecx
jmp 0x18020b5e0
xor ecx, ecx
jmp 0x18020b5e0
xor ecx, ecx
cmp rbx, qword [r11 + 0xd0]
jne 0x18020b6b1
movzx eax, byte [r11 + 0xd8]
cmp byte [r12 + 0xd8], al
jne 0x18020b6b1
mov r9d, dword [rdi + 0x20]
mov edx, ecx
test r9d, r9d
je 0x18020b63c
mov rax, qword [rsp + 0x68]
mov rcx, qword [rdi + 0x28]
mov r8d, dword [rax + 0x30]
nop dword [rax + rax]
mov rax, qword [rcx]
cmp r8d, dword [rax + 0x28]
jne 0x18020b63a
cmp r8d, dword [rax + 0x38]
jne 0x18020b63a
inc edx
add rcx, 8
cmp edx, r9d
jb 0x18020b620
xor ecx, ecx
cmp edx, r9d
jne 0x18020b6b1
mov r8d, ecx
test r9d, r9d
je 0x18020b693
mov rdx, qword [rdi + 0x28]
nop dword [rax]
mov rax, qword [rdx]
mov rcx, qword [rax + 0xd0]
cmp rcx, 0xffffffffffffffff
je 0x18020b687
mov rax, qword [rcx + 0x100]
cmp rax, 0xffffffffffffffff
je 0x18020b672
mov ecx, dword [rax + 0x30]
jmp 0x18020b675
or ecx, 0xffffffff
cmp rdi, 0xffffffffffffffff
je 0x18020b680
mov eax, dword [rdi + 0x30]
jmp 0x18020b683
or eax, 0xffffffff
cmp ecx, eax
jae 0x18020b693
inc r8d
add rdx, 8
cmp r8d, r9d
jb 0x18020b650
cmp r8d, r9d
jne 0x18020b6b1
mov eax, dword [rdi + 0x78]
and eax, 0xfff00000
cmp eax, 0x23300000
je 0x18020b6b1
cmp eax, 0x12900000
je 0x18020b6b1
mov byte [rsi], 1
add rbp, 8
inc rsi
sub r14, 1
jne 0x18020b510
mov r13d, dword [rsp + 0x198]
mov r14, qword [rsp + 0x68]
lea rbp, [0x180012bf0]
jmp 0x18020b6e8
lea rbp, [0x180012bf0]
jmp 0x18020b6e8
lea rbp, [0x180012bf0]
mov eax, r13d
shr eax, 0x1c
cmp eax, 1
je 0x18020b747
cmp eax, 2
je 0x18020b747
cmp eax, 3
je 0x18020b747
cmp eax, 4
je 0x18020b747
and r13d, 0xfff00000
cmp r13d, 0x90b00000
ja 0x18020b878
cmp r13d, 0x90b00000
je 0x18020b747
cmp r13d, 0x90000000
je 0x18020b747
cmp r13d, 0x90200000
je 0x18020b747
cmp r13d, 0x90300000
je 0x18020b747
cmp r13d, 0x90a00000
jne 0x18020b8ac
cmp dword [r14 + 0x20], 0
mov qword [rsp + 0xa0], 0xffffffffffffffff
mov qword [rsp + 0xa8], 0xffffffffffffffff
jbe 0x18020b79a
mov r8, qword [r14 + 0x28]
mov r9d, dword [r14 + 0x20]
lea rdx, [rsp + 0xa0]
nop word [rax + rax]
mov rax, qword [r8]
add rdx, 4
add r8, 8
sub r9, 1
mov ecx, dword [rax + 0xcc]
mov dword [rdx - 4], ecx
jne 0x18020b780
mov r13, qword [rsp + 0x190]
xor esi, esi
mov edi, esi
mov rbx, rsi
nop dword [rax]
mov rax, qword [r13]
mov r8, r14
mov edx, edi
mov rcx, r13
call qword [rax + 0x60]
test al, al
je 0x18020b802
mov r8d, esi
mov rcx, rsi
nop dword [rax]
mov edx, dword [rsp + rcx*4 + 0xa0]
cmp edx, 0xffffffff
je 0x18020b7f0
cmp byte [rsp + rcx + 0x1a8], sil
jne 0x18020b7f0
lea rax, [rbx + rcx]
cmp dword [rbp + rax*4], edx
jne 0x18020b7fc
inc r8d
inc rcx
cmp r8d, 4
jb 0x18020b7d0
cmp r8d, 4
je 0x18020b80d
inc edi
add rbx, 4
cmp edi, 0x18
jb 0x18020b7b0
cmp edi, 0x18
je 0x18020c96b
xor r11b, r11b
mov ecx, esi
mov byte [rsp + 0x198], r11b
mov dword [rsp + 0x98], ecx
nop word [rax + rax]
mov rdi, qword [rsp + 0x68]
mov r14d, dword [rdi + 0x78]
mov eax, r14d
and eax, 0xf0000000
cmp eax, 0xa0000000
jne 0x18020b8e8
mov eax, r14d
and eax, 0xfff00000
cmp eax, 0xa1300000
je 0x18020b8da
cmp eax, 0xa1400000
je 0x18020b8da
and r14d, 0xfffff
mov ebx, 1
mov dword [rsp + 0x40], r14d
jmp 0x18020b91f
cmp r13d, 0x90c00000
je 0x18020b747
cmp r13d, 0x90e00000
je 0x18020b747
cmp r13d, 0x90f00000
je 0x18020b747
cmp r13d, 0x91100000
je 0x18020b747
xor esi, esi
lea rcx, [rsp + 0xa0]
mov eax, esi
nop dword [rax + rax]
mov dword [rcx], eax
inc eax
add rcx, 4
cmp eax, 4
jb 0x18020b8c0
mov r13, qword [rsp + 0x190]
jmp 0x18020b816
mov ebx, 1
mov r14d, ebx
mov dword [rsp + 0x40], ebx
jmp 0x18020b91f
mov eax, r14d
and eax, 0xfff00000
cmp eax, 0x68700000
je 0x18020b911
cmp eax, 0x68800000
je 0x18020b911
and r14d, 0xfffff
mov ebx, 1
mov dword [rsp + 0x40], r14d
jmp 0x18020b91f
mov r14d, dword [rdi + 0x10]
mov ebx, 1
mov dword [rsp + 0x40], r14d
imul ecx, r14d
lea eax, [rcx + r14]
cmp eax, dword [rdi + 0x10]
ja 0x18020c8b2
mov rax, qword [rdi + 0x18]
lea rbp, [rax + rcx*8]
mov qword [rsp + 0x58], rbp
test r14d, r14d
je 0x18020c8b2
xor eax, eax
xor r8b, r8b
mov r10d, esi
mov dword [rsp + 0x70], esi
mov r9d, esi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x1a0], r8d
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x8c], eax
mov dword [rsp + 0x90], eax
mov dword [rsp + 0x94], eax
mov r15, rsi
test r14d, r14d
je 0x18020c040
nop dword [rax]
mov r14, qword [rbp + r15*8]
mov rax, qword [r14 + 0xa8]
cmp qword [r13 + 0xd078], rax
jne 0x18020c0b6
mov r13, qword [r14 + 0x100]
cmp r13, 0xffffffffffffffff
je 0x18020c0b6
movzx edx, byte [r14 + 0x48]
movzx r8d, r8b
test dl, dl
cmovne r8d, ebx
mov dword [rsp + 0x1a0], r8d
mov r8d, dword [r14 + 0xcc]
cmp dword [rsp + r8*4 + 0x88], 0
jne 0x18020b9eb
inc r10d
mov dword [rsp + 0x70], r10d
mov eax, dword [r14 + 0xcc]
mov r12d, dword [r13 + 0x78]
inc dword [rsp + rax*4 + 0x88]
mov eax, r12d
and eax, 0xfff00000
cmp eax, 0x23300000
jne 0x18020ba24
mov r13, qword [rsp + 0x190]
mov r8b, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c01e
cmp eax, 0x14500000
jne 0x18020ba43
mov r13, qword [rsp + 0x190]
mov r8b, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c01e
cmp eax, 0x70100000
ja 0x18020bba1
cmp eax, 0x70100000
je 0x18020bbf4
cmp eax, 0x51b00000
ja 0x18020bafe
cmp eax, 0x51b00000
je 0x18020bbf0
cmp eax, 0x50700000
ja 0x18020baca
cmp eax, 0x50700000
je 0x18020bac1
cmp eax, 0x50400000
ja 0x18020baaf
cmp eax, 0x50400000
je 0x18020bac1
test eax, eax
je 0x18020baa8
cmp eax, 0x50000000
je 0x18020bac1
cmp eax, 0x50200000
jne 0x18020bcf6
mov ecx, ebx
jmp 0x18020bc0c
mov ecx, esi
jmp 0x18020bc0c
cmp eax, 0x50500000
je 0x18020bac1
cmp eax, 0x50600000
jne 0x18020bcf6
mov ecx, dword [r13 + 0x20]
jmp 0x18020bc0c
cmp eax, 0x50800000
je 0x18020bac1
cmp eax, 0x50900000
je 0x18020bac1
cmp eax, 0x51500000
je 0x18020bbf0
cmp eax, 0x51600000
je 0x18020bbf0
cmp eax, 0x51a00000
je 0x18020bbf0
jmp 0x18020bcf6
cmp eax, 0x68500000
ja 0x18020bb6e
cmp eax, 0x68500000
je 0x18020bb52
cmp eax, 0x52400000
ja 0x18020bb40
cmp eax, 0x52400000
je 0x18020bac1
cmp eax, 0x51c00000
je 0x18020bbf0
cmp eax, 0x51f00000
je 0x18020bbf0
cmp eax, 0x52000000
je 0x18020bbf0
jmp 0x18020bcf6
cmp eax, 0x67c00000
je 0x18020bb60
cmp eax, 0x68400000
jne 0x18020bcf6
mov ecx, r12d
and ecx, 0xfffff
jmp 0x18020bc0c
mov ecx, r12d
and ecx, 0xfffff
jmp 0x18020bc0c
cmp eax, 0x68600000
je 0x18020bb9a
cmp eax, 0x68700000
je 0x18020bb52
cmp eax, 0x68800000
je 0x18020bb52
cmp eax, 0x68900000
je 0x18020bb9a
cmp eax, 0x70000000
je 0x18020bac1
jmp 0x18020bcf6
mov ecx, 2
jmp 0x18020bc0c
cmp eax, 0xa0800000
ja 0x18020bc68
cmp eax, 0xa0800000
je 0x18020bc0a
cmp eax, 0xa0200000
ja 0x18020bc40
cmp eax, 0xa0200000
je 0x18020bc0a
cmp eax, 0x90700000
ja 0x18020bbf8
cmp eax, 0x90700000
je 0x18020bac1
cmp eax, 0x70300000
je 0x18020bbf4
cmp eax, 0x80000000
je 0x18020bbf0
cmp eax, 0x80200000
jne 0x18020bcf6
mov ecx, ebx
jmp 0x18020bc0c
mov ecx, ebx
jmp 0x18020bc0c
cmp eax, 0xa0000000
je 0x18020bc0a
cmp eax, 0xa0100000
jne 0x18020bcf6
mov ecx, ebx
mov ebx, dword [r13 + 0x20]
lea eax, [rcx + rcx]
cmp eax, ebx
ja 0x18020bd3c
test ecx, ecx
je 0x18020bd3c
mov r13, qword [rsp + 0x190]
mov r8b, 1
mov ebx, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c01e
cmp eax, 0xa0300000
je 0x18020bc0a
cmp eax, 0xa0400000
je 0x18020bc0a
cmp eax, 0xa0500000
je 0x18020bc0a
cmp eax, 0xa0600000
je 0x18020bc0a
cmp eax, 0xa0700000
je 0x18020bc0a
jmp 0x18020bcf6
cmp eax, 0xa0f00000
ja 0x18020bcbf
cmp eax, 0xa0f00000
je 0x18020bc0a
cmp eax, 0xa0c00000
ja 0x18020bca7
cmp eax, 0xa0c00000
je 0x18020bc0a
cmp eax, 0xa0900000
je 0x18020bc0a
cmp eax, 0xa0a00000
je 0x18020bc0a
cmp eax, 0xa0b00000
je 0x18020bc0a
jmp 0x18020bcf6
cmp eax, 0xa0d00000
je 0x18020bc0a
cmp eax, 0xa0e00000
je 0x18020bc0a
jmp 0x18020bcf6
cmp eax, 0xa1000000
je 0x18020bc0a
cmp eax, 0xa1100000
je 0x18020bc0a
cmp eax, 0xa1200000
je 0x18020bc0a
cmp eax, 0xa1300000
je 0x18020bc0a
cmp eax, 0xa1400000
je 0x18020bc0a
mov ecx, r12d
call fcn.180242918
test al, al
jne 0x18020bd35
mov ecx, r12d
call fcn.180242af8
test al, al
jne 0x18020bd35
mov eax, r12d
and eax, 0xf0000000
cmp eax, 0x60000000
jne 0x18020bd27
mov ecx, 4
jmp 0x18020bc0c
mov ecx, r12d
and ecx, 0xfffff
jmp 0x18020bc0c
mov ecx, ebx
jmp 0x18020bc0c
mov eax, r12d
shr eax, 0x1c
cmp eax, 1
je 0x18020bd90
cmp eax, 2
je 0x18020bd90
cmp eax, 3
je 0x18020bd90
cmp eax, 4
je 0x18020bd90
mov eax, r12d
and eax, 0xfff00000
cmp eax, 0x90b00000
ja 0x18020bea3
cmp eax, 0x90b00000
je 0x18020bd90
cmp eax, 0x90000000
je 0x18020bd90
cmp eax, 0x90200000
je 0x18020bd90
cmp eax, 0x90300000
je 0x18020bd90
cmp eax, 0x90a00000
jne 0x18020becf
test dl, dl
je 0x18020bf83
cmp byte [rsp + r15 + 0x1a8], 0
jne 0x18020bdac
test r11b, r11b
je 0x18020bf83
mov r11d, dword [rsp + r15*4 + 0xa0]
cmp r11d, r8d
je 0x18020bf7b
xor eax, eax
or edi, 0xffffffff
or rsi, 0xffffffffffffffff
or r9d, edi
mov ecx, eax
mov r8, rax
test ebx, ebx
je 0x18020bf05
mov rbp, qword [r13 + 0x28]
mov rdx, rbp
nop dword [rax]
cmp r14, qword [rdx]
mov rax, qword [rdx]
cmove edi, ecx
cmp r11d, dword [rax + 0xcc]
jne 0x18020bdf8
mov r9d, ecx
mov rsi, r8
inc ecx
inc r8
add rdx, 8
cmp ecx, ebx
jb 0x18020bde0
cmp edi, 0xffffffff
je 0x18020bf3b
cmp r9d, 0xffffffff
je 0x18020bf1b
mov eax, dword [r13 + 0x10]
and r12d, 0xfffff
xor edx, edx
div r12d
mov ebx, eax
xor eax, eax
mov r8d, eax
test ebx, ebx
je 0x18020be6c
mov r11d, dword [r13 + 0x78]
mov r10, qword [r13 + 0x18]
and r11d, 0xfffff
sub edi, r9d
nop word [rax + rax]
lea eax, [rdi + r9]
mov rdx, qword [r10 + rax*8]
mov eax, r9d
cmp rdx, qword [r10 + rax*8]
jne 0x18020be6c
inc r8d
add r9d, r11d
cmp r8d, ebx
jb 0x18020be50
cmp r8d, ebx
jne 0x18020bf5b
mov rax, qword [rbp + rsi*8]
mov rbp, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
movzx r11d, byte [rsp + 0x198]
mov rdi, qword [rsp + 0x68]
mov qword [rbp + r15*8], rax
xor esi, esi
jmp 0x18020bf83
cmp eax, 0x90c00000
je 0x18020bd90
cmp eax, 0x90e00000
je 0x18020bd90
cmp eax, 0x90f00000
je 0x18020bd90
cmp eax, 0x91100000
je 0x18020bd90
cmp ebx, 1
jbe 0x18020bed9
cmp r9d, r8d
jne 0x18020bee8
cmp dword [rsp + r8*4 + 0x88], 1
jbe 0x18020c009
mov r13, qword [rsp + 0x190]
mov r8b, 1
mov ebx, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c01e
mov r9d, dword [rsp + 0x60]
mov r11b, byte [rsp + 0x198]
mov rdi, qword [rsp + 0x68]
xor esi, esi
jmp 0x18020bf83
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x58]
mov r11b, byte [rsp + 0x198]
mov rdi, qword [rsp + 0x68]
xor esi, esi
jmp 0x18020bf83
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x58]
mov r11b, byte [rsp + 0x198]
mov rdi, qword [rsp + 0x68]
xor esi, esi
jmp 0x18020bf83
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x58]
mov r11b, byte [rsp + 0x198]
mov rdi, qword [rsp + 0x68]
xor esi, esi
jmp 0x18020bf83
mov r11b, byte [rsp + 0x198]
mov r13, qword [rsp + 0x190]
test byte [r13 + 0xcefd], 1
jne 0x18020bfeb
mov eax, dword [rdi + 0x78]
and eax, 0xfff00000
cmp eax, 0x10700000
je 0x18020bfb9
cmp eax, 0x10900000
je 0x18020bfb9
cmp eax, 0x10b00000
je 0x18020bfb9
cmp eax, 0x10c00000
jne 0x18020bfdc
mov eax, dword [r14 + 0xcc]
cmp dword [rsp + rax*4 + 0x88], 1
jbe 0x18020bffa
mov r8b, 1
mov ebx, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c01e
mov r8d, dword [rsp + 0x1a0]
mov ebx, 1
jmp 0x18020c01e
mov r8d, dword [rsp + 0x1a0]
mov ebx, 1
jmp 0x18020c01e
mov r8d, dword [rsp + 0x1a0]
mov ebx, 1
jmp 0x18020c01e
mov r8d, dword [rsp + 0x1a0]
mov r13, qword [rsp + 0x190]
mov ebx, 1
mov r14d, dword [rsp + 0x40]
inc r9d
inc r15
mov dword [rsp + 0x60], r9d
cmp r9d, r14d
jb 0x18020b990
test r8b, r8b
jne 0x18020c0f5
mov eax, dword [rdi + 0x78]
and eax, 0xfff00000
cmp eax, 0x10000000
je 0x18020c079
mov ecx, esi
lea rax, [rsp + 0x88]
nop dword [rax]
cmp dword [rax], r14d
je 0x18020c0d6
inc ecx
add rax, 4
cmp ecx, 4
jb 0x18020c060
test r8b, r8b
jne 0x18020c0fc
mov r15, qword [rsp + 0x58]
mov rax, qword [r15]
mov ecx, dword [rax + 0xc8]
mov rax, qword [rsp + 0x80]
cmp r10d, dword [rax + rcx*4]
je 0x18020c101
cmp dword [rdi + 0x20], 0
mov ecx, esi
jbe 0x18020c101
lea rax, [rsp + 0x1a8]
cmp byte [rax], 0
je 0x18020c0e8
inc ecx
inc rax
cmp ecx, dword [rdi + 0x20]
jb 0x18020c0a5
jmp 0x18020c101
mov r14d, dword [rsp + 0x40]
cmp r9d, r14d
jae 0x18020c037
mov r15, qword [rsp + 0x58]
mov r8b, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c101
mov r15, qword [rsp + 0x58]
mov r8b, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c101
mov r8b, 1
mov dword [rsp + 0x1a0], r8d
jmp 0x18020c101
mov r15, qword [rsp + 0x58]
jmp 0x18020c101
mov r15, qword [rsp + 0x58]
mov r12d, esi
test r14d, r14d
je 0x18020c234
lea rbp, [rsp + 0x1a8]
cmp byte [rbp], 0
je 0x18020c21c
mov rax, qword [rsi + r15]
mov rdx, qword [rax + 0x100]
cmp rdx, 0xffffffffffffffff
je 0x18020c234
mov rax, qword [rdi + 0x28]
mov ebx, dword [rdx + 0x20]
mov rcx, qword [rax + rsi]
mov rdi, qword [rcx + 0xa8]
test ebx, ebx
je 0x18020c21c
mov r9, qword [rdx + 0x28]
lea rcx, [rsp + 0x1a8]
mov rdx, r15
mov rax, qword [r9]
mov r11, qword [rax + 0xa8]
xor eax, eax
mov r8d, eax
nop dword [rax]
cmp byte [rcx], 0
je 0x18020c17d
mov rax, qword [rdx]
cmp qword [r9], rax
je 0x18020c18e
inc r8d
inc rcx
add rdx, 8
cmp r8d, r14d
jb 0x18020c170
jmp 0x18020c191
mov r11, rdi
mov r10d, 1
cmp ebx, r10d
jbe 0x18020c20f
mov r13d, dword [rsp + 0x1a0]
add r9, 8
nop dword [rax + rax]
xor eax, eax
lea rcx, [rsp + 0x1a8]
mov rdx, r15
mov r8d, eax
cmp byte [rcx], 0
je 0x18020c1cd
mov rax, qword [rdx]
cmp qword [r9], rax
je 0x18020c1de
inc r8d
inc rcx
add rdx, 8
cmp r8d, r14d
jb 0x18020c1c0
jmp 0x18020c1e3
cmp r11, rdi
jne 0x18020c239
test r13b, r13b
jne 0x18020c239
cmp r8d, r14d
jne 0x18020c1f9
mov rax, qword [r9]
cmp qword [rax + 0xa8], r11
jne 0x18020c239
inc r10d
add r9, 8
cmp r10d, ebx
jb 0x18020c1b0
mov r8d, dword [rsp + 0x1a0]
jmp 0x18020c21c
mov r8d, dword [rsp + 0x1a0]
test r8b, r8b
jne 0x18020c239
mov rdi, qword [rsp + 0x68]
inc r12d
inc rbp
add rsi, 8
cmp r12d, r14d
jb 0x18020c115
test r8b, r8b
je 0x18020c269
mov ecx, dword [rsp + 0x98]
mov r13, qword [rsp + 0x190]
mov r11b, byte [rsp + 0x198]
inc ecx
xor eax, eax
xor esi, esi
mov dword [rsp + 0x98], ecx
mov dword [rsp + 0x1a8], eax
jmp 0x18020b830
xor edi, edi
mov byte [rsp + 0x198], 1
mov r13d, edi
test r14d, r14d
je 0x18020c451
mov r14, qword [rsp + 0x58]
lea rax, [rsp + 0xb0]
mov rbp, rdi
lea r15, [rsp + 0x1a8]
lea r12, [rsp + 0xa0]
sub r14, rax
cmp byte [r15], 0
je 0x18020c2f4
mov rax, qword [rsp + 0x68]
lea rbx, [rsp + rbp + 0xb0]
mov rdx, qword [rax + 0x28]
mov rax, qword [rdx + rbp]
mov qword [rbx], rax
cmp qword [rax + 0x108], 0
jne 0x18020c412
mov rcx, qword [r14 + rbx]
mov rdx, rax
mov rax, qword [rcx + 0x108]
mov qword [rdx + 0x108], rax
mov eax, dword [rcx + 0x110]
mov dword [rdx + 0x110], eax
jmp 0x18020c412
lea rbx, [rsp + rbp + 0xb0]
mov rdi, qword [r14 + rbx]
mov eax, dword [rdi + 0xcc]
cmp dword [rsp + rax*4 + 0x88], 1
jne 0x18020c322
mov eax, dword [r12]
mov qword [rbx], rdi
mov dword [rdi + 0xcc], eax
jmp 0x18020c412
mov r9d, dword [rdi + 0xc8]
mov r8, qword [rdi + 0xa8]
mov rcx, qword [rsp + 0x190]
mov eax, r13d
mov dword [rsp + 0x28], 0x11
lea rdx, [rsp + rax*8 + 0xb0]
mov eax, dword [r12]
mov dword [rsp + 0x20], eax
call fcn.18019f030
mov esi, eax
test eax, eax
js 0x18020c9bd
mov rax, qword [rdi + 0x108]
mov rcx, qword [rbx]
mov rdx, rdi
mov qword [rcx + 0x108], rax
mov eax, dword [rdi + 0x110]
mov dword [rcx + 0x110], eax
mov rax, qword [rdi + 0x128]
mov qword [rcx + 0x128], rax
mov eax, dword [rdi + 0x130]
mov dword [rcx + 0x130], eax
mov eax, dword [rdi + 0x134]
mov dword [rcx + 0x134], eax
mov eax, dword [rdi + 0x13c]
mov dword [rcx + 0x13c], eax
mov eax, dword [rdi + 0x48]
mov dword [rcx + 0x48], eax
mov rax, qword [rdi + 0x98]
mov qword [rcx + 0x98], rax
mov rax, qword [rdi + 0xd0]
mov qword [rcx + 0xd0], rax
movzx eax, byte [rdi + 0xd8]
mov byte [rcx + 0xd8], al
call fcn.18019a160
mov eax, dword [rdi + 0xa4]
mov dword [rcx + 0xa4], eax
mov eax, dword [rdi + 0xc8]
mov rcx, qword [rsp + 0x80]
inc dword [rcx + rax*4]
mov eax, dword [rdi + 0xcc]
dec dword [rsp + rax*4 + 0x88]
mov rax, qword [r14 + rbx]
mov ecx, dword [rax + 0x98]
bt rcx, 0xf
jae 0x18020c431
mov rax, qword [rbx]
or qword [rax + 0x98], 0x8000
inc r13d
inc r15
add r12, 4
add rbp, 8
cmp r13d, dword [rsp + 0x40]
jb 0x18020c2a2
mov r14d, dword [rsp + 0x40]
xor edi, edi
xor bpl, bpl
mov r15d, edi
mov dword [rsp + 0x1a0], edi
test r14d, r14d
je 0x18020c833
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
mov qword [rsp + 0x70], rbx
nop word [rax + rax]
mov r11, qword [rcx]
cmp byte [r11 + 0x48], 0
jne 0x18020c816
mov r12d, edi
mov sil, 1
cmp r15d, r14d
jae 0x18020c4fb
lea r10, [rsp + 0xb0]
mov r9d, r14d
mov r8, rdi
sub r10, rbx
sub r9d, r15d
nop dword [rax]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x100]
cmp qword [r11 + 0x100], rax
jne 0x18020c4ec
mov rax, qword [r10 + rcx]
mov qword [rsp + r8 + 0xf8], rdx
add r8, 8
mov qword [rsp + r8 + 0x110], rax
inc r12d
movzx esi, sil
cmp rdx, rax
mov byte [rdx + 0x48], 1
cmovne esi, edi
add rcx, 8
sub r9, 1
jne 0x18020c4b0
mov rcx, qword [rsp + 0x70]
mov r13, qword [r11 + 0x100]
mov edi, dword [r13 + 0x78]
mov eax, edi
shr eax, 0x1c
cmp eax, 1
je 0x18020c558
cmp eax, 2
je 0x18020c558
cmp eax, 3
je 0x18020c558
cmp eax, 4
je 0x18020c558
mov eax, edi
and eax, 0xfff00000
cmp eax, 0x90b00000
ja 0x18020c5bd
cmp eax, 0x90b00000
je 0x18020c558
cmp eax, 0x90000000
je 0x18020c558
cmp eax, 0x90200000
je 0x18020c558
cmp eax, 0x90300000
je 0x18020c558
cmp eax, 0x90a00000
jne 0x18020c5e1
mov eax, dword [r13 + 0x10]
xor edx, edx
mov ecx, edi
and ecx, 0xfffff
mov bl, 1
div ecx
mov r14d, eax
xor eax, eax
mov r9d, eax
test r12d, r12d
je 0x18020c6cc
mov r8d, dword [r13 + 0x20]
lea r11, [rsp + 0xd8]
lea r10, [rsp + 0xf8]
nop
mov ecx, eax
test r8d, r8d
je 0x18020c6b8
mov rdx, qword [r10]
mov rax, qword [r13 + 0x28]
cmp qword [rax], rdx
je 0x18020c6a7
inc ecx
add rax, 8
cmp ecx, r8d
jb 0x18020c5a2
xor eax, eax
jmp 0x18020c6b8
cmp eax, 0x90c00000
je 0x18020c558
cmp eax, 0x90e00000
je 0x18020c558
cmp eax, 0x90f00000
je 0x18020c558
cmp eax, 0x91100000
je 0x18020c558
test sil, sil
jne 0x18020c814
xor edi, edi
mov r8d, edi
cmp dword [r13 + 0x20], edi
jbe 0x18020c621
mov rdx, rdi
nop dword [rax + rax]
mov rax, qword [r13 + 0x28]
inc r8d
add rdx, 8
mov rcx, qword [rax + rdx - 8]
mov qword [rcx + 0x100], 0xffffffffffffffff
cmp r8d, dword [r13 + 0x20]
jb 0x18020c600
mov r10d, edi
cmp dword [r13 + 0x20], edi
jbe 0x18020c66b
mov r8, rdi
nop dword [rax]
mov r9, qword [r13 + 0x28]
mov ecx, edi
mov rax, rdi
mov rdx, qword [r9 + r8]
nop dword [rax]
cmp rdx, qword [rbx + rax*8]
je 0x18020c652
inc ecx
inc rax
cmp ecx, r14d
jb 0x18020c640
jmp 0x18020c65e
mov rax, qword [rsp + rax*8 + 0xb0]
mov qword [r9 + r8], rax
inc r10d
add r8, 8
cmp r10d, dword [r13 + 0x20]
jb 0x18020c630
mov r8d, edi
cmp dword [r13 + 0x20], edi
jbe 0x18020c7fa
mov rdx, rdi
nop dword [rax + rax]
mov rax, qword [r13 + 0x28]
inc r8d
add rdx, 8
mov rcx, qword [rax + rdx - 8]
mov qword [rcx + 0x100], r13
cmp r8d, dword [r13 + 0x20]
jb 0x18020c680
mov rcx, qword [rsp + 0x70]
jmp 0x18020c816
movzx ebx, bl
cmp r9d, ecx
mov eax, 0
cmovne ebx, eax
mov dword [r11], ecx
inc r9d
add r10, 8
add r11, 4
cmp r9d, r12d
jb 0x18020c590
cmp r12d, dword [r13 + 0x20]
jne 0x18020c6df
test sil, sil
je 0x18020c6df
test bl, bl
jne 0x18020c801
mov rcx, qword [rsp + 0x190]
and edi, 0xfff00000
mov r8d, r12d
xor r8d, edi
mov eax, r14d
lea rdx, [rsp + 0xd0]
and r8d, 0xfffff
mov r9, r13
imul eax, r12d
xor r8d, edi
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
call fcn.18019f360
mov esi, eax
test eax, eax
js 0x18020c9ab
mov rbx, qword [rsp + 0xd0]
mov esi, edi
test r12d, r12d
je 0x18020c7b2
lea rbp, [rsp + 0xd8]
xor r15d, r15d
nop dword [rax + rax]
mov rcx, qword [rbx + 0x28]
mov rax, qword [rsp + rdi + 0x118]
mov r9d, r15d
mov qword [rdi + rcx], rax
test r14d, r14d
je 0x18020c799
mov r11d, dword [rbp]
mov r10d, esi
nop
mov rax, qword [r13 + 0x18]
mov rcx, qword [rbx + 0x18]
mov r8d, r9d
imul r8d, dword [r13 + 0x20]
add r8d, r11d
mov edx, r10d
inc r9d
mov rax, qword [rax + r8*8]
add r10d, r12d
mov qword [rcx + rdx*8], rax
cmp r9d, r14d
jb 0x18020c770
inc esi
add rdi, 8
add rbp, 4
cmp esi, r12d
jb 0x18020c750
mov r15d, dword [rsp + 0x1a0]
xor edi, edi
mov rcx, qword [rsp + 0x190]
mov r9d, 3
mov r8, rbx
mov rdx, r13
call fcn.18019fa20
mov esi, eax
test eax, eax
js 0x18020c999
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov r14d, dword [rsp + 0x40]
cmp rax, r13
mov bpl, 1
cmove rax, rbx
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x78], rax
jmp 0x18020c816
mov rcx, qword [rsp + 0x70]
jmp 0x18020c816
mov rcx, qword [rsp + 0x70]
mov r14d, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
xor edi, edi
jmp 0x18020c816
xor edi, edi
inc r15d
add rcx, 8
mov dword [rsp + 0x1a0], r15d
mov qword [rsp + 0x70], rcx
cmp r15d, r14d
jb 0x18020c480
test r14d, r14d
je 0x18020c866
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0xb0]
mov ecx, r14d
sub rdx, r8
nop dword [rax + rax]
mov rax, qword [r8 + rdx]
add r8, 8
sub rcx, 1
mov qword [r8 - 8], rax
mov byte [rax + 0x48], 1
jne 0x18020c850
test bpl, bpl
je 0x18020c88b
mov r13, qword [rsp + 0x190]
mov rcx, r13
call fcn.1801b3770
mov esi, eax
test eax, eax
jns 0x18020c893
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ecx, dword [rsp + 0x98]
mov r11b, byte [rsp + 0x198]
inc ecx
xor esi, esi
mov dword [rsp + 0x98], ecx
jmp 0x18020b830
mov eax, dword [rdi + 0x78]
and eax, 0xfff00000
cmp eax, 0x10000000
jne 0x18020c96b
cmp dword [rdi + 0x20], 0
mov ebx, esi
mov r11d, esi
jbe 0x18020c960
mov rdx, rsi
mov r9, rsi
lea r10, [rsp + 0x1a8]
cmp byte [r10], 0
jne 0x18020c90a
mov rcx, qword [rdi + 0x28]
inc ebx
add rdx, 8
mov rax, qword [rcx + r9]
mov qword [rcx + rdx - 8], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rcx + r9]
mov qword [rcx + rdx - 8], rax
jmp 0x18020c93f
mov rax, qword [rdi + 0x28]
mov r8, qword [rdx + rax]
cmp qword [r8 + 0x108], 0
jne 0x18020c93f
mov rax, qword [rdi + 0x18]
mov rcx, qword [rdx + rax]
mov rax, qword [rcx + 0x108]
mov qword [r8 + 0x108], rax
mov eax, dword [rcx + 0x110]
mov dword [r8 + 0x110], eax
inc r11d
inc r10
add r9, 8
cmp r11d, dword [rdi + 0x20]
jb 0x18020c8e2
test ebx, ebx
je 0x18020c960
mov eax, ebx
and eax, 0xfffff
bts eax, 0x1c
jmp 0x18020c962
mov eax, esi
mov dword [rdi + 0x78], eax
mov dword [rdi + 0x10], ebx
mov dword [rdi + 0x20], ebx
mov rcx, qword [rsp + 0x78]
mov ebx, 0
lea rbp, [0x180012bf0]
mov r14, rcx
mov qword [rsp + 0x68], rcx
test rcx, rcx
jne 0x18020b330
xor eax, eax
mov esi, eax
lea ebp, [rax + 1]
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
jmp 0x18020ca63
mov r13, qword [rsp + 0x190]
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
jmp 0x18020ca63
mov ebp, 1
lea rcx, [rsp + 0x48]
call fcn.1800c5e00
cmp qword [rsp + 0x80], 0
mov r11d, dword [rsp + 0x9c]
mov r15, qword [rsp + 0x148]
mov r14, qword [rsp + 0x150]
mov r12, qword [rsp + 0x160]
mov rdi, qword [rsp + 0x168]
mov rbx, qword [rsp + 0x170]
lea rcx, [r13 + 0xd250]
mov r13, qword [rsp + 0x158]
je 0x18020cae2
mov rdx, qword [rcx]
test r11, r11
cmove r11, rbp
cmp r11, qword [rdx + 8]
jae 0x18020cad7
sub qword [rdx + 8], r11
mov eax, esi
add rsp, 0x178
pop rsi
pop rbp
ret
mov rax, qword [rdx]
mov qword [rcx], rax
call fcn.1800c56f0
mov eax, esi
add rsp, 0x178
pop rsi
pop rbp
ret