Function at 0x1801e48c0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rsi
push rdi
sub rsp, 0x188
mov qword [rax - 0x20], rbp
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
xor r15d, r15d
mov rbp, rcx
mov qword [rsp + 0x50], r15
mov dword [rsp + 0x70], r15d
mov qword [rsp + 0x48], r15
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
mov dword [rsp + 0x74], r15d
mov byte [rsp + 0x1b8], r15b
mov qword [rsp + 0xc0], 0xffffffffffffffff
call fcn.1801b3770
mov edi, dword [rbp + 0xc]
xor r13b, r13b
mov byte [rsp + 0x1a8], r13b
or edx, 0xffffffff
inc edx
cmp edx, edi
jae 0x1801e4993
mov rax, qword [rbp + 0xce58]
mov rax, qword [rax + rdx*8]
cmp qword [rax + 0x30], r15
je 0x1801e4931
mov rax, qword [rax + 0x30]
mov rcx, qword [rax]
nop
mov qword [rax + 0x48], 0xffffffffffffffff
mov qword [rax + 0x50], r15
test rcx, rcx
je 0x1801e4969
mov rax, rcx
mov rcx, qword [rcx]
jmp 0x1801e498e
mov edi, dword [rbp + 0xc]
nop dword [rax]
inc edx
cmp edx, edi
jae 0x1801e4993
mov rax, qword [rbp + 0xce58]
mov rcx, qword [rax + rdx*8]
cmp qword [rcx + 0x30], r15
je 0x1801e4970
mov rax, qword [rcx + 0x30]
mov rcx, qword [rax]
test rax, rax
jne 0x1801e4950
mov r14, qword [rbp + 0x18]
xorpd xmm8, xmm8
movsd xmm9, qword [0x180068590]
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x170], r12
mov esi, 1
movaps xmmword [rsp + 0x140], xmm6
test r14, r14
je 0x1801e54cc
nop dword [rax + rax]
mov eax, dword [r14 + 0x78]
and eax, 0xfff00000
je 0x1801e54a0
cmp eax, 0x20000000
je 0x1801e49f1
cmp eax, 0x20400000
jne 0x1801e54a0
mov ecx, dword [r14 + 0x20]
mov rbx, r15
mov edi, r15d
mov dword [rsp + 0xb8], r15d
mov qword [rsp + 0x58], rbx
test ecx, ecx
je 0x1801e54a0
mov rdx, qword [r14 + 0x18]
mov eax, edi
mov dword [rsp + 0xa8], r15d
lea r8, [rdx + rax*8]
lea eax, [rcx + rdi]
lea rcx, [rdx + rax*8]
mov rax, r15
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x60], rax
mov rdi, qword [rcx]
mov rdx, qword [r8]
sub rsi, rax
mov qword [rsp + 0xf0], rdx
mov qword [rsp + 0xf8], rdi
mov r8, qword [rsp + rax*8 + 0xf0]
mov rax, qword [r8 + 0xa8]
mov qword [rsp + 0x78], rsi
movzx ecx, byte [rax + 0x10]
shr cl, 1
test cl, 1
je 0x1801e5441
cmp qword [r8 + 0xc0], 0xffffffffffffffff
jne 0x1801e5441
cmp qword [r8 + 0xb8], 0xffffffffffffffff
jne 0x1801e5441
cmp rdx, 0xffffffffffffffff
je 0x1801e4aeb
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e4aeb
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
je 0x1801e4aeb
cmp rdi, 0xffffffffffffffff
je 0x1801e4aeb
mov rax, qword [rdi + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e4aeb
mov eax, dword [rdi + 0x98]
shr rax, 0x18
test al, 1
jne 0x1801e5441
mov rdi, qword [r8 + 0x100]
mov eax, dword [rdi + 0x78]
xor eax, dword [r14 + 0x78]
test eax, 0xfff00000
jne 0x1801e5441
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + rcx*8 + 0xc8]
mov rcx, rdi
mov rdx, qword [rdx]
call fcn.180195150
mov rdx, qword [rdi + 0x18]
xor r11b, r11b
mov ecx, eax
mov qword [rsp + 0xa0], 0xffffffffffffffff
mov byte [rsp + 0x1b0], r11b
lea r8, [rdx + rcx*8]
mov ecx, dword [rdi + 0x20]
mov rdi, qword [rsp + 0x60]
add ecx, eax
mov rax, qword [r8]
mov qword [rsp + 0xd8], r8
lea rcx, [rdx + rcx*8]
mov qword [rsp + 0x100], rax
mov rax, qword [rcx]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0x108], rax
mov r12, qword [rsp + rdi*8 + 0xf0]
cmp dword [r12 + 0x3c], 1
jne 0x1801e4bf4
cmp qword [r8], rax
je 0x1801e4bf4
mov rdx, qword [rsp + rsi*8 + 0xc8]
lea r9, [rsp + 0x90]
lea r8, [rsp + 0xa0]
mov rdx, qword [rdx]
mov rcx, rbp
mov dword [rsp + 0x20], r15d
call fcn.1801e37f0
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + rdi*8 + 0xc8]
mov rdx, qword [rdx]
lea r9, [rsp + 0x90]
lea r8, [rsp + 0x1b0]
mov rcx, rbp
mov qword [rsp + 0x1b0], rax
mov dword [rsp + 0x20], r15d
call fcn.1801e37f0
test eax, eax
setns r11b
mov byte [rsp + 0x1b0], r11b
mov eax, 2
mov r10d, 3
lea r15, [rsp + 0xe0]
mov dword [rsp + 0x40], eax
mov r13, rax
mov qword [rsp + 0x68], r10
mov r9, qword [rsp + r13*8 + 0xf0]
cmp r9, 0xffffffffffffffff
je 0x1801e4d3c
mov rax, qword [r9 + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e4d38
mov eax, dword [r9 + 0x98]
shr rax, 0x18
test al, 1
je 0x1801e4d26
mov rdx, qword [rsp + rsi*8 + 0xf0]
cmp rdx, 0xffffffffffffffff
je 0x1801e4d2c
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e4d32
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
je 0x1801e4d20
inc dword [rbp + 0x694]
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax + rbx*8]
mov eax, dword [rbp + 0x69c]
inc dword [rbp + 0x698]
and eax, 0xff000000
mov qword [rsp + 0x90], rcx
cmp eax, 0xb000000
jne 0x1801e4d09
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e5106
bt eax, 8
jb 0x1801e4cd5
movzx eax, byte [rbp + 0x690]
jmp 0x1801e4d0f
xor edx, edx
lea rcx, [rsp + 0x90]
nop
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x1801e50f4
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e50fd
inc edx
add rcx, 8
cmp edx, 1
jb 0x1801e4ce0
mov al, byte [rbp + 0x690]
test al, al
jne 0x1801e5134
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e4d3c
mov eax, dword [rsp + 0x40]
jmp 0x1801e4d3c
mov eax, dword [rsp + 0x40]
jmp 0x1801e4d3c
mov eax, dword [rsp + 0x40]
jmp 0x1801e4d3c
mov eax, dword [rsp + 0x40]
cmp dword [r12 + 0x3c], 1
jne 0x1801e502e
mov rdi, qword [rsp + rsi*8 + 0xf0]
mov rcx, qword [rdi + 0x100]
cmp rcx, 0xffffffffffffffff
je 0x1801e4d7c
mov rax, qword [r12 + 0x100]
cmp rax, 0xffffffffffffffff
je 0x1801e4d70
mov eax, dword [rax + 0x30]
jmp 0x1801e4d73
or eax, 0xffffffff
cmp dword [rcx + 0x30], eax
jae 0x1801e510f
cmp qword [rdi + 0xc0], 0xffffffffffffffff
jne 0x1801e50eb
cmp qword [rdi + 0xb8], 0xffffffffffffffff
jne 0x1801e50aa
cmp r9, 0xffffffffffffffff
je 0x1801e4eed
mov rax, qword [r9 + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e4eed
mov eax, dword [r9 + 0x98]
shr rax, 0x18
test al, 1
je 0x1801e4eed
cmp rdi, 0xffffffffffffffff
je 0x1801e4df7
mov rax, qword [rdi + 0xa8]
mov edx, dword [rax + 0x10]
shr rdx, 8
test dl, 1
je 0x1801e4df7
mov eax, dword [rdi + 0x98]
shr rax, 0x18
test al, 1
jne 0x1801e4eed
lea r8, [rsp + 0xe8]
mov rdx, rbp
mov rcx, r9
call fcn.180199870
mov esi, eax
test eax, eax
js 0x1801e7431
mov eax, dword [r14 + 0x78]
movsd xmm0, qword [rsp + 0xe8]
and eax, 0xfff00000
cmp eax, 0x20000000
jne 0x1801e4e3a
ucomisd xmm0, xmm8
jp 0x1801e4e3a
je 0x1801e509a
cmp eax, 0x20400000
jne 0x1801e4e4e
ucomisd xmm0, xmm9
jp 0x1801e4e4e
je 0x1801e505a
inc dword [rbp + 0x6ac]
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax + rbx*8]
mov eax, dword [rbp + 0x6b4]
inc dword [rbp + 0x6b0]
and eax, 0xff000000
mov qword [rsp + 0x90], rcx
cmp eax, 0xb000000
jne 0x1801e4ecc
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e508a
bt eax, 8
jb 0x1801e4e99
movzx eax, byte [rbp + 0x6a8]
jmp 0x1801e4ed2
xor edx, edx
lea rcx, [rsp + 0x90]
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x1801e506a
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e507a
inc edx
add rcx, 8
cmp edx, 1
jb 0x1801e4ea3
mov al, byte [rbp + 0x6a8]
test al, al
jne 0x1801e5237
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsp + 0x40]
mov r10, qword [rsp + 0x68]
jmp 0x1801e502e
mov rbx, qword [rsp + r13*8 + 0xc8]
mov rcx, qword [r15]
mov rax, qword [rbx]
cmp qword [rcx], rax
je 0x1801e5118
inc dword [rbp + 0x6c4]
mov rax, qword [r14 + 0x28]
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rbp + 0x6cc]
inc dword [rbp + 0x6c8]
and eax, 0xff000000
mov qword [rsp + 0x90], rcx
cmp eax, 0xb000000
jne 0x1801e4f89
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e50dd
bt eax, 8
jb 0x1801e4f54
movzx eax, byte [rbp + 0x6c0]
jmp 0x1801e4f8f
xor edx, edx
lea rcx, [rsp + 0x90]
nop
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x1801e50c1
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e50cf
inc edx
add rcx, 8
cmp edx, 1
jb 0x1801e4f60
mov al, byte [rbp + 0x6c0]
test al, al
je 0x1801e5126
xor r8b, r8b
test r11b, r11b
jne 0x1801e4fdd
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rbx]
lea r9, [rsp + 0x90]
lea r8, [rsp + 0xb0]
mov rcx, rbp
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x20], 0
call fcn.1801e37f0
mov r10, qword [rsp + 0x68]
test eax, eax
setns r8b
mov rdi, qword [rsp + rsi*8 + 0xc8]
mov rdx, qword [rdi]
cmp rdx, 0xffffffffffffffff
je 0x1801e5013
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e5013
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
jne 0x1801e50b3
test r8b, r8b
jne 0x1801e533a
cmp rdx, qword [rbx]
je 0x1801e533a
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
inc eax
dec r10
inc r13
sub r15, 8
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x68], r10
cmp eax, 4
jae 0x1801e5435
movzx r11d, byte [rsp + 0x1b0]
jmp 0x1801e4c13
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsp + 0x40]
mov r10, qword [rsp + 0x68]
jmp 0x1801e502e
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsp + 0x40]
mov r10, qword [rsp + 0x68]
jmp 0x1801e502e
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsp + 0x40]
mov r10, qword [rsp + 0x68]
jmp 0x1801e502e
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsp + 0x40]
mov r10, qword [rsp + 0x68]
jmp 0x1801e502e
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsp + 0x40]
mov r10, qword [rsp + 0x68]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x1801e502e
mov eax, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x1801e502e
mov rcx, qword [rsp + rsi*8 + 0xf0]
lea r8, [rsp + 0x98]
mov rdx, rbp
movapd xmm6, xmm8
call fcn.180199870
mov esi, eax
test eax, eax
js 0x1801e7431
mov rcx, qword [rsp + r13*8 + 0xf0]
lea r8, [rsp + 0x80]
mov rdx, rbp
call fcn.180199870
mov esi, eax
test eax, eax
js 0x1801e7431
mov eax, dword [r14 + 0x78]
and eax, 0xfff00000
cmp eax, 0x20000000
je 0x1801e51a8
cmp eax, 0x20400000
jne 0x1801e51ba
movsd xmm6, qword [rsp + 0x80]
mulsd xmm6, qword [rsp + 0x98]
jmp 0x1801e51ba
movsd xmm6, qword [rsp + 0x80]
addsd xmm6, qword [rsp + 0x98]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + rcx*8 + 0xc8]
mov rax, qword [rsp + rax*8 + 0xc8]
mov rdx, qword [rsp + rdx*8 + 0xc8]
mov rax, qword [rax]
xor r15d, r15d
mov qword [rcx], rax
mov r8, qword [rbp + 0xd040]
mov dword [rsp + 0x30], r15d
lea r9d, [r15 + 4]
mov rcx, rbp
mov dword [rsp + 0x28], r15d
movsd qword [rsp + 0x20], xmm6
call fcn.18019f150
mov esi, eax
test eax, eax
js 0x1801e7431
mov rax, qword [r14 + 0x28]
mov r13b, 1
mov rcx, qword [rax + rbx*8]
mov byte [rsp + 0x1a8], r13b
mov qword [rcx + 0x48], 0xffffffffffffffff
jmp 0x1801e5441
mov rcx, qword [rsp + r13*8 + 0xc8]
mov rdx, qword [rsp + 0x78]
xor r15d, r15d
mov rax, qword [rcx]
mov rdx, qword [rsp + rdx*8 + 0xc8]
mov r13b, 1
mov rdi, qword [rdx]
mov qword [rdx], rax
movabs rax, 0xfff0000000000000
mov qword [rcx], rdi
mov qword [r12 + 0x108], r15
mov dword [r12 + 0x110], r15d
mov qword [rsp + 0x1a8], rax
mov qword [r12 + 0x140], r15
mov qword [r12 + 0x178], r15
movsd xmm0, qword [rsp + 0x1a8]
movsd qword [r12 + 0x158], xmm0
mov qword [r12 + 0x180], 0xffffffffffffffff
mov qword [r12 + 0x148], r15
mov qword [r12 + 0x150], r15
movabs rax, 0x7ff0000000000000
mov qword [rsp + 0x1a8], rax
movabs rax, 0x8000000000000000
mov qword [r12 + 0x168], rax
movabs rax, 0x7fffffffffffffff
movsd xmm1, qword [rsp + 0x1a8]
movsd qword [r12 + 0x160], xmm1
mov qword [r12 + 0x170], rax
and qword [r12 + 0x98], 0xfffffffffe0fffef
mov qword [r12 + 0x48], 0xffffffffffffffff
mov rax, qword [r14 + 0x28]
mov byte [rsp + 0x1a8], r13b
mov rcx, qword [rax + rbx*8]
mov qword [rcx + 0x48], 0xffffffffffffffff
jmp 0x1801e5441
mov rcx, qword [rsp + r10*8 + 0xc8]
mov rbx, qword [rsp + 0x58]
xor r15d, r15d
mov rax, qword [rcx]
mov rdx, rdi
mov rdi, qword [rdi]
mov qword [rdx], rax
mov qword [rcx], rdi
mov qword [r12 + 0x108], r15
mov dword [r12 + 0x110], r15d
mov qword [r12 + 0x140], r15
mov qword [r12 + 0x178], r15
mov qword [r12 + 0x180], 0xffffffffffffffff
mov qword [r12 + 0x148], r15
mov qword [r12 + 0x150], r15
movabs rax, 0xfff0000000000000
mov r13b, 1
mov qword [rsp + 0x1a8], rax
movabs rax, 0x7ff0000000000000
movsd xmm0, qword [rsp + 0x1a8]
mov qword [rsp + 0x1a8], rax
movabs rax, 0x8000000000000000
movsd qword [r12 + 0x158], xmm0
mov qword [r12 + 0x168], rax
movabs rax, 0x7fffffffffffffff
movsd xmm1, qword [rsp + 0x1a8]
movsd qword [r12 + 0x160], xmm1
mov qword [r12 + 0x170], rax
and qword [r12 + 0x98], 0xfffffffffe0fffef
mov qword [r12 + 0x48], 0xffffffffffffffff
mov rax, qword [r14 + 0x28]
mov byte [rsp + 0x1a8], r13b
mov rcx, qword [rax + rbx*8]
mov qword [rcx + 0x48], 0xffffffffffffffff
jmp 0x1801e5441
movzx r13d, byte [rsp + 0x1a8]
xor r15d, r15d
mov ecx, dword [rsp + 0xa8]
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0xc8]
inc ecx
inc rax
mov esi, 1
mov dword [rsp + 0xa8], ecx
cmp ecx, 2
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x60], rax
jb 0x1801e4a41
mov edi, dword [rsp + 0xb8]
mov ecx, dword [r14 + 0x20]
inc rbx
inc edi
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0xb8], edi
cmp edi, ecx
jb 0x1801e4a10
mov r14, qword [r14]
test r14, r14
jne 0x1801e49d0
test r13b, r13b
je 0x1801e54cc
xor r13b, r13b
mov rcx, rbp
mov byte [rsp + 0x1b8], 1
mov byte [rsp + 0x1a8], r13b
call fcn.1801b3770
mov r14, qword [rbp + 0x18]
test r14, r14
je 0x1801e54e2
mov rdi, qword [r14]
mov qword [rsp + 0xa0], rdi
jmp 0x1801e54ed
mov rdi, r15
mov qword [rsp + 0xa0], r15
test r14, r14
je 0x1801e620d
nop word [rax + rax]
test dword [r14 + 0x78], 0xfff00000
je 0x1801e6198
mov eax, dword [r14 + 0x20]
xor dl, dl
test eax, eax
je 0x1801e55d7
mov r8, qword [r14 + 0x28]
mov r9, rax
mov rax, qword [r8]
movzx edx, dl
mov ecx, dword [rax + 0x98]
test rcx, 0xc00000
cmovne edx, esi
add r8, 8
sub r9, 1
jne 0x1801e5523
test dl, dl
je 0x1801e55d7
inc dword [rbp + 0x7b4]
mov eax, dword [rbp + 0x7bc]
mov r8d, dword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
inc dword [rbp + 0x7b8]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e55c9
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e6198
bt eax, 8
jb 0x1801e558e
movzx eax, byte [rbp + 0x7b0]
jmp 0x1801e55cf
mov ecx, r15d
test r8d, r8d
je 0x1801e55c9
nop word [rax + rax]
mov rax, qword [rdx]
cmp rax, 0xffffffffffffffff
je 0x1801e6198
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e6198
inc ecx
add rdx, 8
cmp ecx, r8d
jb 0x1801e55a0
mov al, byte [rbp + 0x7b0]
test al, al
je 0x1801e6198
mov eax, dword [r14 + 0x78]
and eax, 0xfff00000
cmp eax, 0x10b00000
jne 0x1801e6198
or r8, 0xffffffffffffffff
cmp dword [r14 + 0x10], 0
mov qword [rsp + 0x1b0], r8
mov qword [rsp + 0x98], r8
jbe 0x1801e6195
mov rdi, qword [rsp + 0x1a0]
xor ebp, ebp
nop word [rax + rax]
mov rax, qword [r14 + 0x18]
mov rdx, qword [rax + rbp]
mov rax, qword [rdx + 0xa8]
movzx ecx, byte [rax + 0x10]
shr cl, 1
test cl, 1
je 0x1801e58b1
cmp qword [rdx + 0xc0], 0xffffffffffffffff
jne 0x1801e58b1
cmp qword [rdx + 0xb8], 0xffffffffffffffff
jne 0x1801e58b1
mov r12, qword [rdx + 0x100]
mov eax, dword [r12 + 0x78]
and eax, 0xfff00000
cmp eax, 0x20400000
jne 0x1801e58b1
mov rcx, r12
call fcn.180195150
xor r10d, r10d
mov r13d, eax
mov ebx, r10d
nop word [rax + rax]
mov edx, dword [r12 + 0x20]
mov rcx, qword [r12 + 0x18]
imul edx, ebx
add edx, r13d
mov r9, qword [rcx + rdx*8]
mov rcx, qword [r9 + 0xa8]
movzx eax, byte [rcx + 0x10]
shr al, 1
test al, 1
je 0x1801e5894
cmp qword [r9 + 0xc0], 0xffffffffffffffff
jne 0x1801e586c
cmp qword [r9 + 0xb8], 0xffffffffffffffff
jne 0x1801e5862
mov rsi, qword [r9 + 0x100]
mov eax, dword [rsi + 0x78]
and eax, 0xfff00000
cmp eax, 0x10c00000
jne 0x1801e589e
cmp dword [r9 + 0x3c], 1
jne 0x1801e57fa
mov rax, qword [r14 + 0x28]
mov edx, dword [r9 + 0xa4]
mov rcx, qword [rax + rbp]
mov eax, dword [rcx + 0xa4]
cmp eax, 5
je 0x1801e5757
cmp edx, 5
je 0x1801e5757
cmp eax, 4
je 0x1801e574f
cmp edx, 4
je 0x1801e574f
cmp eax, 3
je 0x1801e5747
cmp edx, 3
je 0x1801e5747
cmp eax, 2
je 0x1801e573f
cmp edx, 2
je 0x1801e573f
mov r8d, 0x10
jmp 0x1801e575d
mov r8d, 2
jmp 0x1801e575d
mov r8d, 3
jmp 0x1801e575d
mov r8d, 4
jmp 0x1801e575d
mov r8d, 5
cmp r8d, edx
je 0x1801e57fa
inc dword [rdi + 0x6dc]
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax + rbp]
mov eax, dword [rdi + 0x6e4]
inc dword [rdi + 0x6e0]
and eax, 0xff000000
mov qword [rsp + 0xb0], rcx
cmp eax, 0xb000000
jne 0x1801e57e1
mov eax, dword [rdi + 0xd228]
test al, al
jns 0x1801e57fa
bt eax, 8
jb 0x1801e57ad
movzx eax, byte [rdi + 0x6d8]
jmp 0x1801e57e7
mov edx, r10d
lea rcx, [rsp + 0xb0]
nop dword [rax + rax]
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x1801e57fa
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e57fa
inc edx
add rcx, 8
cmp edx, 1
jb 0x1801e57c0
mov al, byte [rdi + 0x6d8]
test al, al
je 0x1801e57fa
mov dword [r9 + 0xa4], r8d
mov byte [rsp + 0x1a8], 1
test byte [rdi + 0xcef5], 1
je 0x1801e588a
cmp dword [r14 + 0x20], 1
jne 0x1801e5880
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax + rbp]
cmp dword [rcx + 0xa4], 3
jne 0x1801e5876
mov rdx, r9
mov rcx, rsi
call fcn.180195150
mov ecx, eax
mov rax, qword [rsi + 0x18]
mov r8, qword [rax + rcx*8]
mov rax, qword [r12 + 0x18]
mov ecx, 1
sub ecx, ebx
mov qword [rsp + 0x1b0], r8
imul ecx, dword [r12 + 0x20]
add ecx, r13d
xor r10d, r10d
mov r9, qword [rax + rcx*8]
mov qword [rsp + 0x98], r9
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
jmp 0x1801e58a6
mov r8, qword [rsp + 0x1b0]
inc ebx
cmp ebx, 2
jb 0x1801e5690
inc r15d
add rbp, 8
cmp r15d, dword [r14 + 0x10]
jb 0x1801e5620
mov rdi, qword [rsp + 0xa0]
cmp r8, 0xffffffffffffffff
je 0x1801e6152
mov rbp, qword [rsp + 0x1a0]
inc dword [rbp + 0x6dc]
mov eax, dword [rbp + 0x6e4]
mov r8d, dword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
inc dword [rbp + 0x6e0]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e5959
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e617b
bt eax, 8
jb 0x1801e591f
movzx eax, byte [rbp + 0x6d8]
jmp 0x1801e595f
xor r15d, r15d
mov ecx, r15d
test r8d, r8d
je 0x1801e5959
nop word [rax + rax]
mov rax, qword [rdx]
cmp rax, 0xffffffffffffffff
je 0x1801e6167
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e6171
inc ecx
add rdx, 8
cmp ecx, r8d
jb 0x1801e5930
mov al, byte [rbp + 0x6d8]
test al, al
je 0x1801e6188
xor r15d, r15d
mov r12, r15
mov qword [rsp + 0x80], r15
mov r13, r15
cmp dword [0x18025e63c], r12d
mov qword [rsp + 0x88], r15
jge 0x1801e598e
mov rcx, r15
jmp 0x1801e599d
mov ecx, dword [0x18025e63c]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, rax
cmp qword [rcx + 0x30], r12
je 0x1801e59d0
mov rbx, qword [rcx + 0x30]
test rbx, rbx
jne 0x1801e59b1
mov rbx, r15
jmp 0x1801e59e5
mov rax, qword [rbx]
mov qword [rcx + 0x30], rax
test rax, rax
jne 0x1801e59c1
mov qword [rcx + 0x38], r15
movabs rax, 0xfefefefefefefefe
mov qword [rbx], rax
jmp 0x1801e59e5
mov rcx, qword [rcx + 0x28]
mov edx, 0x80
lea r8d, [rdx - 0x70]
call fcn.180243b70
mov rbx, rax
test rbx, rbx
je 0x1801e5bb8
or r9d, 0xffffffff
mov edx, 0x50100004
mov rcx, rbx
or r8d, r9d
mov qword [rbx], 0xffffffffffffffff
mov qword [rbx + 8], 0xffffffffffffffff
mov dword [rbx + 0x10], r15d
mov dword [rbx + 0x20], r15d
mov dword [rbx + 0x30], 0xffffffff
mov dword [rbx + 0x78], r15d
mov qword [rbx + 0x18], r15
mov word [rbx + 0x7c], r15w
mov qword [rbx + 0x28], r15
mov word [rbx + 0x7e], r15w
mov dword [rbx + 0x38], r15d
mov dword [rbx + 0x3c], r15d
mov dword [rbx + 0x40], r15d
mov qword [rbx + 0x48], 0xffffffffffffffff
mov dword [rbx + 0x50], r15d
mov dword [rbx + 0x68], r15d
mov qword [rbx + 0x70], r15
mov byte [rsp + 0x20], r12b
call fcn.180193d40
mov esi, eax
test eax, eax
js 0x1801e5a9d
mov eax, dword [r14 + 0x68]
mov esi, r15d
mov r12, rbx
mov dword [rbx + 0x68], eax
mov rax, qword [r14 + 0x70]
mov qword [rbx + 8], r15
mov qword [rbx], r15
mov qword [rsp + 0x80], rbx
mov r13, rbx
mov qword [rbx + 0x70], rax
mov qword [rsp + 0x88], rbx
mov r15, rbx
mov qword [rsp + 0x60], rbx
jmp 0x1801e5bc9
cmp word [rbx + 0x7c], r12w
je 0x1801e5af2
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e5ab3
mov rax, r15
jmp 0x1801e5ab9
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [rbx + 0x7c]
cmp ecx, dword [rax + 0x250]
ja 0x1801e5ae9
mov r8, qword [rbx + 0x18]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x1801e5ae9
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rbx + 0x7c], r15w
mov qword [rbx + 0x18], r15
cmp word [rbx + 0x7e], r12w
je 0x1801e5b47
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e5b08
mov rax, r15
jmp 0x1801e5b0e
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [rbx + 0x7e]
cmp ecx, dword [rax + 0x250]
ja 0x1801e5b3e
mov r8, qword [rbx + 0x28]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x1801e5b3e
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rbx + 0x7e], r15w
mov qword [rbx + 0x28], r15
mov ecx, dword [0x18025e63c]
test ecx, ecx
js 0x1801e5bc4
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbp, rax
test rax, rax
je 0x1801e5ba9
mov edx, 0xfe
mov rcx, rbx
lea r8d, [rdx - 0x7e]
call fcn.18024adb8
mov qword [rbx], r15
mov rax, qword [rbp + 0x38]
test rax, rax
je 0x1801e5b92
mov r15, qword [rsp + 0x60]
mov qword [rax], rbx
mov qword [rbp + 0x38], rbx
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e5bc9
mov r15, qword [rsp + 0x60]
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rbx
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e5bc9
mov r15, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e5bc9
mov r15, qword [rsp + 0x60]
mov esi, 0x8007000e
jmp 0x1801e5bc9
mov r15, qword [rsp + 0x60]
test esi, esi
js 0x1801e61fb
cmp dword [0x18025e63c], 0
jge 0x1801e5be1
xor ebp, ebp
mov rcx, rbp
jmp 0x1801e5bf2
mov ecx, dword [0x18025e63c]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor ebp, ebp
mov rcx, rax
cmp qword [rcx + 0x30], 0
je 0x1801e5c26
mov rbx, qword [rcx + 0x30]
test rbx, rbx
jne 0x1801e5c07
mov rbx, rbp
jmp 0x1801e5c3b
mov rax, qword [rbx]
mov qword [rcx + 0x30], rax
test rax, rax
jne 0x1801e5c17
mov qword [rcx + 0x38], rbp
movabs rax, 0xfefefefefefefefe
mov qword [rbx], rax
jmp 0x1801e5c3b
mov rcx, qword [rcx + 0x28]
mov edx, 0x80
lea r8d, [rdx - 0x70]
call fcn.180243b70
mov rbx, rax
test rbx, rbx
je 0x1801e5de9
or r9d, 0xffffffff
mov edx, 0x10000001
mov rcx, rbx
or r8d, r9d
mov qword [rbx], 0xffffffffffffffff
mov qword [rbx + 8], 0xffffffffffffffff
mov dword [rbx + 0x10], ebp
mov dword [rbx + 0x20], ebp
mov dword [rbx + 0x30], 0xffffffff
mov dword [rbx + 0x78], ebp
mov qword [rbx + 0x18], rbp
mov word [rbx + 0x7c], bp
mov qword [rbx + 0x28], rbp
mov word [rbx + 0x7e], bp
mov dword [rbx + 0x38], ebp
mov dword [rbx + 0x3c], ebp
mov dword [rbx + 0x40], ebp
mov qword [rbx + 0x48], 0xffffffffffffffff
mov dword [rbx + 0x50], ebp
mov dword [rbx + 0x68], ebp
mov qword [rbx + 0x70], rbp
mov byte [rsp + 0x20], 0
call fcn.180193d40
mov esi, eax
test eax, eax
js 0x1801e5cf6
mov eax, dword [r14 + 0x68]
mov dword [rbx + 0x68], eax
mov rax, qword [r14 + 0x70]
mov qword [rbx + 8], r13
mov qword [rbx + 0x70], rax
test r13, r13
je 0x1801e5ccb
mov qword [r13], rbx
jmp 0x1801e5cd6
mov r12, rbx
mov qword [rsp + 0x80], rbx
mov qword [rbx], rbp
mov r13, rbx
mov qword [rsp + 0x88], rbx
mov esi, ebp
mov qword [rsp + 0xe8], rbx
xor r8d, r8d
jmp 0x1801e5dfb
cmp word [rbx + 0x7c], 0
je 0x1801e5d4a
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e5d0c
mov rax, rbp
jmp 0x1801e5d12
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [rbx + 0x7c]
cmp ecx, dword [rax + 0x250]
ja 0x1801e5d42
mov r8, qword [rbx + 0x18]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x1801e5d42
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rbx + 0x7c], bp
mov qword [rbx + 0x18], rbp
cmp word [rbx + 0x7e], 0
je 0x1801e5d9e
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e5d60
mov rax, rbp
jmp 0x1801e5d66
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [rbx + 0x7e]
cmp ecx, dword [rax + 0x250]
ja 0x1801e5d96
mov r8, qword [rbx + 0x28]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x1801e5d96
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [rbx + 0x7e], bp
mov qword [rbx + 0x28], rbp
mov ecx, dword [0x18025e63c]
test ecx, ecx
js 0x1801e5df3
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbp, rax
test rax, rax
je 0x1801e5df8
mov edx, 0xfe
mov rcx, rbx
lea r8d, [rdx - 0x7e]
call fcn.18024adb8
xor r8d, r8d
mov qword [rbx], r8
mov rax, qword [rbp + 0x38]
test rax, rax
je 0x1801e5ddf
mov qword [rax], rbx
mov qword [rbp + 0x38], rbx
jmp 0x1801e5dfb
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rbx
jmp 0x1801e5dfb
mov esi, 0x8007000e
xor r8d, r8d
jmp 0x1801e5dfb
xor r8d, r8d
jmp 0x1801e5dfb
xor r8d, r8d
test esi, esi
js 0x1801e61e1
mov rax, qword [r15 + 0x18]
mov rcx, qword [rsp + 0x1b0]
mov ebx, r8d
mov qword [rax + 8], rcx
mov rax, qword [r15 + 0x18]
mov rbp, r8
mov qword [rax], rcx
mov rax, qword [r15 + 0x18]
mov rcx, qword [rsp + 0x98]
mov qword [rax + 0x18], rcx
mov rax, qword [r15 + 0x18]
mov qword [rax + 0x10], rcx
nop dword [rax + rax]
mov rax, qword [r15 + 0x28]
mov ecx, ebx
mov dword [rsp + 0x28], 0x11
lea rdx, [rax + rcx*8]
mov rax, qword [rsp + 0x1a0]
mov dword [rsp + 0x20], r8d
mov r8, qword [rax + 0xd078]
xor r9d, r9d
mov rcx, rax
call fcn.18019f030
mov esi, eax
test eax, eax
js 0x1801e61c7
mov rax, qword [r14 + 0x28]
inc ebx
add rbp, 8
mov rdx, qword [rax]
mov rax, qword [r15 + 0x28]
mov r8d, 0
mov rcx, qword [rax + rbp - 8]
mov rax, qword [rdx + 0xd0]
mov qword [rcx + 0xd0], rax
movzx eax, byte [rdx + 0xd8]
mov byte [rcx + 0xd8], al
mov rax, qword [r14 + 0x28]
mov rdx, qword [rax]
mov rax, qword [r15 + 0x28]
mov rcx, qword [rax + rbp - 8]
mov eax, dword [rdx + 0xa4]
mov dword [rcx + 0xa4], eax
mov rax, qword [r15 + 0x28]
mov rcx, qword [rax + rbp - 8]
mov qword [rcx + 0x100], r15
cmp ebx, 4
jb 0x1801e5e40
mov rax, qword [r15 + 0x28]
mov rdx, qword [rsp + 0xe8]
xor r15d, r15d
mov rax, qword [rax + 0x10]
mov rcx, qword [rdx + 0x18]
mov ebp, r15d
mov qword [rcx], rax
mov rax, qword [r14 + 0x28]
mov rcx, qword [rdx + 0x28]
mov rax, qword [rax]
mov qword [rcx], rax
mov rax, qword [rdx + 0x28]
mov rcx, qword [rax]
mov qword [rcx + 0x100], rdx
test r14, r14
je 0x1801e611b
mov rax, qword [r14 + 8]
mov rsi, qword [r14]
test rax, rax
je 0x1801e5f42
mov rdx, qword [rsp + 0x1a0]
mov qword [rax], rsi
jmp 0x1801e5f4e
mov rdx, qword [rsp + 0x1a0]
mov qword [rdx + 0x18], rsi
mov rcx, qword [r14]
test rcx, rcx
je 0x1801e5f60
mov rax, qword [r14 + 8]
mov qword [rcx + 8], rax
jmp 0x1801e5f68
mov rax, qword [r14 + 8]
mov qword [rdx + 0x20], rax
mov qword [r14], 0xffffffffffffffff
mov qword [r14 + 8], 0xffffffffffffffff
cmp word [r14 + 0x7c], r15w
je 0x1801e5fcd
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e5f8d
mov rax, r15
jmp 0x1801e5f93
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [r14 + 0x7c]
cmp ecx, dword [rax + 0x250]
ja 0x1801e5fc4
mov r8, qword [r14 + 0x18]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x1801e5fc4
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [r14 + 0x7c], r15w
mov qword [r14 + 0x18], r15
cmp word [r14 + 0x7e], r15w
je 0x1801e6023
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e5fe3
mov rax, r15
jmp 0x1801e5fe9
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [r14 + 0x7e]
cmp ecx, dword [rax + 0x250]
ja 0x1801e601a
mov r8, qword [r14 + 0x28]
dec ecx
movsxd rdx, ecx
shl rdx, 5
add rdx, qword [rax + 0x248]
test r8, r8
je 0x1801e601a
mov rax, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r8
mov word [r14 + 0x7e], r15w
mov qword [r14 + 0x28], r15
mov ecx, dword [0x18025e63c]
test ecx, ecx
js 0x1801e6065
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rax, rax
je 0x1801e6065
mov edx, 0xfe
mov rcx, r14
lea r8d, [rdx - 0x7e]
call fcn.18024adb8
mov qword [r14], r15
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1801e605d
mov qword [rax], r14
jmp 0x1801e6061
mov qword [rbx + 0x30], r14
mov qword [rbx + 0x38], r14
inc ebp
mov r14, rsi
cmp ebp, 1
jb 0x1801e5f20
mov ecx, r15d
test r12, r12
je 0x1801e608a
mov rax, r12
nop
mov rax, qword [rax]
inc ecx
test rax, rax
jne 0x1801e6080
mov rbp, qword [rsp + 0x1a0]
lea eax, [rcx - 1]
add dword [rbp + 0x14], eax
test rsi, rsi
je 0x1801e60de
test r12, r12
je 0x1801e6112
mov rax, qword [rsi + 8]
mov qword [r12 + 8], rax
mov rax, qword [rsi + 8]
test rax, rax
je 0x1801e60b9
mov qword [rax], r12
jmp 0x1801e60bd
mov qword [rbp + 0x18], r12
mov qword [r13], rsi
mov qword [rsi + 8], r13
or dword [rbp + 0x28], 7
mov esi, r15d
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], r15
jmp 0x1801e6128
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x1801e60ec
mov qword [rax], r12
jmp 0x1801e60f0
mov qword [rbp + 0x18], r12
test r12, r12
je 0x1801e60fe
mov rax, qword [rbp + 0x20]
mov qword [r12 + 8], rax
mov qword [rbp + 0x20], r13
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], r15
or dword [rbp + 0x28], 7
mov esi, r15d
jmp 0x1801e6128
mov rbp, qword [rsp + 0x1a0]
mov esi, 0x80004005
test esi, esi
js 0x1801e61b5
mov rcx, rbp
call fcn.1801b3770
lea rcx, [rsp + 0x80]
mov r13b, 1
mov byte [rsp + 0x1a8], r13b
call fcn.1800c5e00
jmp 0x1801e6198
mov rbp, qword [rsp + 0x1a0]
mov r13b, byte [rsp + 0x1a8]
xor r15d, r15d
jmp 0x1801e6198
mov r13b, byte [rsp + 0x1a8]
jmp 0x1801e6198
mov r13b, byte [rsp + 0x1a8]
jmp 0x1801e6198
mov r13b, byte [rsp + 0x1a8]
xor r15d, r15d
jmp 0x1801e6198
mov r13b, byte [rsp + 0x1a8]
xor r15d, r15d
jmp 0x1801e6198
xor r15d, r15d
mov r14, rdi
test rdi, rdi
je 0x1801e620d
mov rdi, qword [rdi]
mov esi, 1
mov qword [rsp + 0xa0], rdi
jmp 0x1801e5500
lea rcx, [rsp + 0x80]
call fcn.1800c5e00
jmp 0x1801e7431
lea rcx, [rsp + 0x80]
call fcn.1800c5e00
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e7431
lea rcx, [rsp + 0x80]
call fcn.1800c5e00
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e7431
lea rcx, [rsp + 0x80]
call fcn.1800c5e00
jmp 0x1801e7431
movaps xmmword [rsp + 0x130], xmm7
test r13b, r13b
jne 0x1801e73cd
cmp byte [rsp + 0x1b8], r13b
jne 0x1801e73cd
mov r12d, r15d
mov dword [rsp + 0x1b8], r15d
mov r15, qword [rbp + 0x20]
test r15, r15
je 0x1801e6251
mov rbx, qword [r15 + 8]
xor r10d, r10d
mov qword [rsp + 0x1b0], rbx
jmp 0x1801e625f
xor r10d, r10d
mov rbx, r10
mov qword [rsp + 0x1b0], rbx
test r15, r15
je 0x1801e738e
movsd xmm6, qword [0x1800685e8]
movsd xmm7, qword [0x1800685b0]
mov esi, 8
movabs rdx, 0x3ff0000000000000
nop word [rax + rax]
mov eax, dword [r15 + 0x78]
and eax, 0xfff00000
cmp eax, 0x20000000
je 0x1801e62ab
cmp eax, 0x20400000
jne 0x1801e735e
mov r13d, dword [r15 + 0x20]
mov dword [rsp + 0x40], r13d
cmp r13d, r12d
jbe 0x1801e65b4
mov eax, dword [rsp + 0x74]
mov r12d, 0x10
cmp r13d, r12d
cmova r12d, r13d
cmp qword [rsp + 0x48], 0
mov dword [rsp + 0x1b8], r12d
je 0x1801e631c
mov rdx, qword [rbp + 0xd310]
test rax, rax
mov ecx, 1
cmove rax, rcx
cmp rax, qword [rdx + 8]
jae 0x1801e62fd
sub qword [rdx + 8], rax
jmp 0x1801e6321
mov rax, qword [rdx]
lea rcx, [rbp + 0xd310]
mov qword [rbp + 0xd310], rax
call fcn.1800c56f0
xor r10d, r10d
lea ecx, [r10 + 1]
jmp 0x1801e6321
mov ecx, 1
cmp qword [rsp + 0x50], 0
mov r14, qword [rsp + 0x1a0]
mov eax, dword [rsp + 0x70]
lea rdi, [r14 + 0xd280]
mov qword [rsp + 0x48], r10
mov dword [rsp + 0x74], r10d
je 0x1801e636d
mov rdx, qword [rdi]
test rax, rax
cmove rax, rcx
cmp rax, qword [rdx + 8]
jae 0x1801e635c
sub qword [rdx + 8], rax
jmp 0x1801e636d
mov rax, qword [rdx]
mov rcx, rdi
mov qword [rdi], rax
call fcn.1800c56f0
xor r10d, r10d
mov qword [rsp + 0x50], r10
mov dword [rsp + 0x70], r10d
cmp r12d, 0x1ffffffe
jbe 0x1801e638a
mov esi, 0x80070216
jmp 0x1801e640c
mov rcx, qword [rdi]
lea eax, [r12*8]
test eax, eax
cmove eax, esi
test eax, eax
mov esi, eax
mov dword [rsp + 0x70], eax
mov eax, 1
cmove rsi, rax
test rcx, rcx
je 0x1801e63bd
mov rax, qword [rcx + 0x10]
sub rax, qword [rcx + 8]
cmp rsi, rax
jbe 0x1801e63dc
mov rdx, rsi
mov rcx, rdi
call fcn.1800c57b0
test eax, eax
je 0x1801e63d9
xor r10d, r10d
mov rax, r10
mov qword [rsp + 0x50], rax
jmp 0x1801e6400
xor r10d, r10d
mov rcx, qword [rdi]
test rcx, rcx
je 0x1801e63f4
mov rax, qword [rcx + 8]
lea rax, [rax + rcx + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x1801e63fc
mov rax, r10
mov qword [rsp + 0x50], rax
add qword [rcx + 8], rsi
mov esi, 0x8007000e
test rax, rax
cmovne esi, r10d
test esi, esi
js 0x1801e7421
cmp r12d, 0x1ffffffe
jbe 0x1801e6427
mov esi, 0x80070216
jmp 0x1801e64bd
lea eax, [r12*8]
mov ecx, 8
test eax, eax
cmove eax, ecx
mov rcx, qword [rbp + 0xd310]
test eax, eax
mov edi, eax
mov dword [rsp + 0x74], eax
mov eax, 1
cmove rdi, rax
test rcx, rcx
je 0x1801e6463
mov rax, qword [rcx + 0x10]
sub rax, qword [rcx + 8]
cmp rdi, rax
jbe 0x1801e6483
lea rcx, [rbp + 0xd310]
mov rdx, rdi
call fcn.1800c57b0
test eax, eax
je 0x1801e6483
xor r10d, r10d
mov rax, r10
mov qword [rsp + 0x48], rax
jmp 0x1801e64b1
mov rcx, qword [rbp + 0xd310]
test rcx, rcx
je 0x1801e64a2
mov rax, qword [rcx + 8]
xor r10d, r10d
lea rax, [rax + rcx + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x1801e64ad
xor r10d, r10d
mov rax, r10
mov qword [rsp + 0x48], rax
add qword [rcx + 8], rdi
mov esi, 0x8007000e
test rax, rax
cmovne esi, r10d
test esi, esi
js 0x1801e7417
movabs rdx, 0x3ff0000000000000
mov esi, r10d
test r13d, r13d
je 0x1801e655b
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov rbp, r10
mov r12, rcx
mov rdi, rbx
sub r12, rbx
mov qword [rdi], 0xffffffffffffffff
mov qword [r12 + rdi], rdx
mov rdx, qword [r15 + 0x28]
mov rdx, qword [rdx + rbp]
mov eax, esi
mov dword [rsp + 0x20], r10d
lea r9, [rcx + rax*8]
lea r8, [rbx + rax*8]
mov rcx, r14
call fcn.1801e37f0
test eax, eax
js 0x1801e6550
mov rax, qword [r15 + 0x28]
mov rcx, qword [rax + rbp]
cmp qword [rdi], rcx
je 0x1801e6550
mov rcx, qword [rsp + 0x48]
inc esi
add rbp, 8
add rdi, 8
movabs rdx, 0x3ff0000000000000
mov r10d, 0
cmp esi, r13d
jb 0x1801e64f1
mov rbx, qword [rsp + 0x1b0]
xor r10d, r10d
cmp esi, r13d
jne 0x1801e7268
mov dil, 1
mov ecx, r10d
movzx edx, dil
test r13d, r13d
je 0x1801e65c1
mov r8, qword [rsp + 0x48]
mov rax, r8
nop dword [rax + rax]
test ecx, ecx
je 0x1801e6593
movsd xmm0, qword [rax]
ucomisd xmm0, qword [rax - 8]
jp 0x1801e6591
je 0x1801e6593
xor dl, dl
movsd xmm0, qword [rax]
comisd xmm6, xmm0
ja 0x1801e65a4
comisd xmm0, xmm9
jbe 0x1801e65a7
xor dil, dil
inc ecx
add rax, 8
cmp ecx, r13d
jb 0x1801e6580
jmp 0x1801e65c6
mov r14, qword [rsp + 0x1a0]
jmp 0x1801e64cf
mov r8, qword [rsp + 0x48]
movsxd r14, r13d
test dl, dl
je 0x1801e6d10
movsd xmm0, qword [r8]
ucomisd xmm7, xmm0
jp 0x1801e67f1
jne 0x1801e67f1
mov rbp, qword [rsp + 0x1a0]
mov edi, dword [r15 + 0x20]
mov rdx, qword [r15 + 0x28]
mov eax, dword [rbp + 0x6fc]
inc dword [rbp + 0x6f8]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e665a
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e7244
bt eax, 8
jb 0x1801e662b
movzx eax, byte [rbp + 0x6f0]
jmp 0x1801e6660
mov ecx, r10d
test edi, edi
je 0x1801e665a
mov rax, qword [rdx]
cmp rax, 0xffffffffffffffff
je 0x1801e71fc
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e7220
inc ecx
add rdx, 8
cmp ecx, edi
jb 0x1801e6632
mov al, byte [rbp + 0x6f0]
test al, al
je 0x1801e733f
mov eax, r13d
xor sil, sil
and eax, 0xfffff
bts eax, 0x1d
cmp dword [r15 + 0x78], eax
je 0x1801e672d
lea rdi, [r15 + 0x7c]
mov dword [r15 + 0x78], eax
lea ebp, [r13 + r13]
movzx eax, word [rdi]
mov sil, 1
cmp ebp, eax
jbe 0x1801e6706
cmp word [rdi], 0
je 0x1801e66ed
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e66ad
mov rax, r10
jmp 0x1801e66b6
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r10d, r10d
movzx ecx, word [rdi]
cmp ecx, dword [rax + 0x250]
ja 0x1801e66e5
mov rdx, qword [r15 + 0x18]
dec ecx
movsxd rcx, ecx
shl rcx, 5
add rcx, qword [rax + 0x248]
test rdx, rdx
je 0x1801e66e5
mov rax, qword [rcx + 8]
mov qword [rdx], rax
mov qword [rcx + 8], rdx
mov word [rdi], r10w
mov qword [r15 + 0x18], r10
lea r8, [r15 + 0x18]
mov rdx, rdi
mov ecx, ebp
call fcn.180193b70
test eax, eax
js 0x1801e7377
xor r10d, r10d
mov dword [r15 + 0x10], ebp
test ebp, ebp
je 0x1801e6725
mov rdi, qword [r15 + 0x18]
mov ecx, ebp
mov rbp, qword [rsp + 0x1a0]
or rax, 0xffffffffffffffff
rep stosq qword [rdi], rax
jmp 0x1801e672d
mov rbp, qword [rsp + 0x1a0]
test r13d, r13d
je 0x1801e6788
mov r9, qword [rsp + 0x50]
mov rax, r10
lea rcx, [r14*8]
mov r8, r13
nop word [rax + rax]
mov rdx, qword [r15 + 0x18]
mov rdi, qword [r9 + rax]
cmp qword [rax + rdx], rdi
je 0x1801e6765
mov qword [rax + rdx], rdi
mov sil, 1
mov rdx, qword [r15 + 0x18]
mov rdi, qword [r9 + rax]
cmp qword [rcx + rdx], rdi
je 0x1801e677a
mov qword [rcx + rdx], rdi
mov sil, 1
add rax, 8
add rcx, 8
sub r8, 1
jne 0x1801e6750
test sil, sil
je 0x1801e6793
inc dword [rbp + 0x6f4]
mov al, byte [rsp + 0x1a8]
test al, al
jne 0x1801e67ca
test sil, sil
jne 0x1801e67ca
mov r12d, dword [rsp + 0x1b8]
xor r13b, r13b
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, 1
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
ucomisd xmm9, xmm0
jp 0x1801e68f5
jne 0x1801e68f5
mov rbp, qword [rsp + 0x1a0]
inc dword [rbp + 0x85c]
mov eax, dword [rbp + 0x864]
mov edi, dword [r15 + 0x20]
mov rdx, qword [r15 + 0x28]
inc dword [rbp + 0x860]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e6888
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e71d8
bt eax, 8
jb 0x1801e684d
movzx eax, byte [rbp + 0x858]
jmp 0x1801e688e
mov ecx, r10d
test edi, edi
je 0x1801e6888
nop word [rax + rax]
mov rax, qword [rdx]
cmp rax, 0xffffffffffffffff
je 0x1801e7190
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e71b4
inc ecx
add rdx, 8
cmp ecx, edi
jb 0x1801e6860
mov al, byte [rbp + 0x858]
test al, al
je 0x1801e731e
mov eax, r13d
mov dword [r15 + 0x10], r13d
mov dword [r15 + 0x20], r13d
and eax, 0xfffff
bts eax, 0x1c
mov dword [r15 + 0x78], eax
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x1801e68ce
mov rcx, qword [r15 + 0x18]
mov r8, r13
mov rdx, rax
shl r8, 3
call sub.msvcrt.dll_memcpy
xor r10d, r10d
mov r12d, dword [rsp + 0x1b8]
mov r13b, 1
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
ucomisd xmm8, xmm0
jp 0x1801e6baa
jne 0x1801e6baa
mov rbp, qword [rsp + 0x1a0]
inc dword [rbp + 0x844]
mov eax, dword [rbp + 0x84c]
mov edi, dword [r15 + 0x20]
mov rdx, qword [r15 + 0x28]
inc dword [rbp + 0x848]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e6988
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e716c
bt eax, 8
jb 0x1801e6951
movzx eax, byte [rbp + 0x840]
jmp 0x1801e698e
mov ecx, r10d
test edi, edi
je 0x1801e6988
nop dword [rax + rax]
mov rax, qword [rdx]
cmp rax, 0xffffffffffffffff
je 0x1801e7124
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e7148
inc ecx
add rdx, 8
cmp ecx, edi
jb 0x1801e6960
mov al, byte [rbp + 0x840]
test al, al
je 0x1801e72fd
mov rdi, qword [rsp + 0xc0]
mov eax, r13d
mov dword [r15 + 0x10], r13d
and eax, 0xfffff
mov dword [r15 + 0x20], r13d
bts eax, 0x1c
mov dword [r15 + 0x78], eax
cmp rdi, 0xffffffffffffffff
jne 0x1801e6b5f
mov ecx, dword [0x18025e63c]
mov rsi, qword [rbp + 0xd040]
test ecx, ecx
jns 0x1801e69d6
mov rcx, r10
jmp 0x1801e69e2
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r10d, r10d
mov rcx, rax
cmp qword [rcx + 0x18], 0
je 0x1801e6a16
mov rdi, qword [rcx + 0x18]
test rdi, rdi
jne 0x1801e69f7
mov rdi, r10
jmp 0x1801e6a2d
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
test rax, rax
jne 0x1801e6a07
mov qword [rcx + 0x20], r10
movabs rax, 0xfefefefefefefefe
mov qword [rdi], rax
jmp 0x1801e6a2d
mov rcx, qword [rcx + 0x10]
mov edx, 0x188
mov r8d, 0x10
call fcn.180243b70
mov rdi, rax
test rdi, rdi
je 0x1801e6b47
xor r12d, r12d
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
mov dword [rdi + 0xa0], 0xffffffff
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x78], r12
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x88], r12
mov qword [rdi + 0x90], r12
mov qword [rdi + 0x40], r12
mov qword [rdi + 0xa8], 0xffffffffffffffff
call fcn.1801992b0
mov esi, eax
test eax, eax
js 0x1801e6ad2
lea r9d, [r12 + 4]
movapd xmm2, xmm8
mov rdx, rbp
mov dword [rdi + 0xa4], 4
call fcn.18019a200
mov esi, eax
test eax, eax
js 0x1801e6ad2
mov r8b, 1
mov rdx, rdi
mov rcx, rbp
call fcn.18019ec70
mov esi, eax
test eax, eax
js 0x1801e6ad2
xor r10d, r10d
mov qword [rsp + 0xc0], rdi
mov esi, r10d
jmp 0x1801e6b57
mov rcx, rdi
call fcn.1801991c0
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e6ae9
mov rbp, r12
jmp 0x1801e6af2
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbp, rax
mov edx, 0xfe
mov r8d, 0x188
mov rcx, rdi
call fcn.18024adb8
xor r10d, r10d
mov qword [rdi], r10
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x1801e6b2d
mov qword [rax], rdi
mov qword [rbp + 0x20], rdi
mov rbp, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
jmp 0x1801e6b57
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], rdi
mov rbp, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0xc0]
jmp 0x1801e6b57
mov rdi, qword [rsp + 0xc0]
mov esi, 0x8007000e
xor r10d, r10d
test esi, esi
js 0x1801e7429
test r13d, r13d
je 0x1801e6b83
mov rcx, r10
mov rdx, r13
nop word [rax + rax]
mov rax, qword [r15 + 0x18]
add rcx, 8
sub rdx, 1
mov qword [rcx + rax - 8], rdi
jne 0x1801e6b70
mov r12d, dword [rsp + 0x1b8]
mov r13b, 1
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
ucomisd xmm6, xmm0
jp 0x1801e6d10
jne 0x1801e6d10
mov rbp, qword [rsp + 0x1a0]
mov edi, dword [r15 + 0x20]
mov rcx, qword [r15 + 0x28]
mov eax, dword [rbp + 0x87c]
inc dword [rbp + 0x878]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e6c38
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e7100
bt eax, 8
jb 0x1801e6bff
movzx eax, byte [rbp + 0x870]
jmp 0x1801e6c3e
mov edx, r10d
test edi, edi
je 0x1801e6c38
nop word [rax + rax]
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x1801e70b8
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e70dc
inc edx
add rcx, 8
cmp edx, edi
jb 0x1801e6c10
mov al, byte [rbp + 0x870]
test al, al
je 0x1801e72dc
mov eax, r13d
xor r8b, r8b
and eax, 0xfffff
or eax, 0x10400000
cmp dword [r15 + 0x78], eax
je 0x1801e6c6b
mov dword [r15 + 0x78], eax
mov dword [r15 + 0x10], r13d
mov dword [r15 + 0x20], r13d
mov r8b, 1
test r13d, r13d
je 0x1801e6ca7
mov rbx, qword [rsp + 0x50]
mov rax, r10
mov rdi, r13
nop dword [rax + rax]
mov rcx, qword [r15 + 0x18]
mov rdx, qword [rax + rbx]
cmp qword [rax + rcx], rdx
je 0x1801e6c95
mov qword [rax + rcx], rdx
mov r8b, 1
add rax, 8
sub rdi, 1
jne 0x1801e6c80
mov rbx, qword [rsp + 0x1b0]
test r8b, r8b
je 0x1801e6cb2
inc dword [rbp + 0x874]
mov al, byte [rsp + 0x1a8]
test al, al
jne 0x1801e6ce9
test r8b, r8b
jne 0x1801e6ce9
mov r12d, dword [rsp + 0x1b8]
xor r13b, r13b
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, 1
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
mov rbp, qword [rsp + 0x1a0]
test byte [rbp + 0xcef6], 0x80
je 0x1801e6d2a
test dil, dil
je 0x1801e7294
mov eax, dword [rbp + 0x72c]
mov edi, dword [r15 + 0x20]
mov rdx, qword [r15 + 0x28]
inc dword [rbp + 0x728]
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x1801e6d98
mov eax, dword [rbp + 0xd228]
test al, al
jns 0x1801e7094
bt eax, 8
jb 0x1801e6d67
movzx eax, byte [rbp + 0x720]
jmp 0x1801e6d9e
mov ecx, r10d
test edi, edi
je 0x1801e6d98
nop
mov rax, qword [rdx]
cmp rax, 0xffffffffffffffff
je 0x1801e704c
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x1801e7070
inc ecx
add rdx, 8
cmp ecx, edi
jb 0x1801e6d70
mov al, byte [rbp + 0x720]
test al, al
je 0x1801e72b8
xor dl, dl
mov eax, r13d
and eax, 0xfffff
mov byte [rsp + 0x1b0], dl
or eax, 0x20400000
cmp dword [r15 + 0x78], eax
je 0x1801e6e6e
lea rdi, [r15 + 0x7c]
mov dword [r15 + 0x78], eax
lea esi, [r13 + r13]
movzx eax, word [rdi]
mov dl, 1
mov byte [rsp + 0x1b0], dl
cmp esi, eax
jbe 0x1801e6e59
cmp word [rdi], 0
je 0x1801e6e38
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x1801e6df8
mov rax, r10
jmp 0x1801e6e01
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r10d, r10d
movzx ecx, word [rdi]
cmp ecx, dword [rax + 0x250]
ja 0x1801e6e30
mov rdx, qword [r15 + 0x18]
dec ecx
movsxd rcx, ecx
shl rcx, 5
add rcx, qword [rax + 0x248]
test rdx, rdx
je 0x1801e6e30
mov rax, qword [rcx + 8]
mov qword [rdx], rax
mov qword [rcx + 8], rdx
mov word [rdi], r10w
mov qword [r15 + 0x18], r10
lea r8, [r15 + 0x18]
mov rdx, rdi
mov ecx, esi
call fcn.180193b70
test eax, eax
js 0x1801e7377
movzx edx, byte [rsp + 0x1b0]
xor r10d, r10d
mov dword [r15 + 0x10], esi
test esi, esi
je 0x1801e6e6e
mov rdi, qword [r15 + 0x18]
mov ecx, esi
or rax, 0xffffffffffffffff
rep stosq qword [rdi], rax
mov r8d, dword [rsp + 0x40]
mov r13d, r10d
test r8d, r8d
je 0x1801e6fd3
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
shl r14, 3
sub rcx, rax
mov r12, r10
mov rbp, rax
mov qword [rsp + 0xb0], rcx
nop
mov rax, qword [r15 + 0x18]
mov rcx, qword [rcx + rbp]
cmp qword [r12 + rax], rcx
je 0x1801e6ebb
mov dl, 1
mov qword [r12 + rax], rcx
mov byte [rsp + 0x1b0], dl
mov rax, qword [r15 + 0x18]
mov rdi, qword [r14 + rax]
cmp rdi, 0xffffffffffffffff
je 0x1801e6f13
mov eax, dword [rdi + 0x98]
shr rax, 0x18
test al, 1
je 0x1801e6f13
mov rdx, qword [rsp + 0x1a0]
lea r8, [rsp + 0x98]
mov rcx, rdi
call fcn.180199870
mov esi, eax
test eax, eax
js 0x1801e740d
movsd xmm0, qword [rsp + 0x98]
mov dl, byte [rsp + 0x1b0]
mov r8d, dword [rsp + 0x40]
xor r10d, r10d
jmp 0x1801e6f21
movapd xmm0, xmm8
movsd qword [rsp + 0x98], xmm0
test rdi, rdi
je 0x1801e6f56
cmp rdi, 0xffffffffffffffff
je 0x1801e6f56
mov rax, qword [rdi + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x1801e6f56
mov eax, dword [rdi + 0x98]
shr rax, 0x18
test al, 1
je 0x1801e6f56
ucomisd xmm0, qword [rbp]
jp 0x1801e6f56
je 0x1801e6fad
mov rax, qword [r15 + 0x18]
movsd xmm0, qword [rbp]
lea ecx, [r13 + r8]
lea rdx, [rax + rcx*8]
mov rax, qword [rsp + 0x1a0]
mov dword [rsp + 0x30], r10d
mov r8, qword [rax + 0xd040]
mov dword [rsp + 0x28], r10d
mov r9d, 4
movsd qword [rsp + 0x20], xmm0
mov rcx, rax
call fcn.18019f150
mov esi, eax
test eax, eax
js 0x1801e7403
mov r8d, dword [rsp + 0x40]
mov dl, 1
mov byte [rsp + 0x1b0], dl
mov rcx, qword [rsp + 0xb0]
inc r13d
add r12, 8
add r14, 8
add rbp, 8
mov r10d, 0
cmp r13d, r8d
jb 0x1801e6ea0
test dl, dl
je 0x1801e6fe7
mov rbp, qword [rsp + 0x1a0]
inc dword [rbp + 0x724]
jmp 0x1801e6fef
mov rbp, qword [rsp + 0x1a0]
mov al, byte [rsp + 0x1a8]
test al, al
jne 0x1801e7025
test dl, dl
jne 0x1801e7025
mov r12d, dword [rsp + 0x1b8]
xor r13b, r13b
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, 1
movabs rdx, 0x3ff0000000000000
mov byte [rsp + 0x1a8], r13b
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov rbp, qword [rsp + 0x1a0]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
jmp 0x1801e735e
mov r12d, dword [rsp + 0x1b8]
mov r13b, byte [rsp + 0x1a8]
movabs rdx, 0x3ff0000000000000
mov esi, 8
mov r15, rbx
test rbx, rbx
je 0x1801e7389
mov rbx, qword [rbx + 8]
mov qword [rsp + 0x1b0], rbx
jmp 0x1801e6290
mov rbp, qword [rsp + 0x1a0]
mov esi, 0x8007000e
jmp 0x1801e7429
test r13b, r13b
jne 0x1801e73b8
mov rcx, rbp
call fcn.1801a1590
mov esi, eax
test eax, eax
js 0x1801e73f9
mov rcx, rbp
call fcn.18019ffa0
mov esi, eax
test eax, eax
js 0x1801e73f9
mov rcx, rbp
call fcn.1801a6ac0
mov esi, eax
test eax, eax
js 0x1801e73f9
mov rbp, qword [rsp + 0x1a0]
xor eax, eax
test r13b, r13b
mov esi, eax
sete sil
jmp 0x1801e7429
mov rcx, rbp
call fcn.1801a1590
mov esi, eax
test eax, eax
js 0x1801e73f9
mov rcx, rbp
call fcn.18019ffa0
mov esi, eax
test eax, eax
js 0x1801e73f9
mov rcx, rbp
call fcn.1801a6ac0
mov esi, eax
test eax, eax
cmovns esi, r15d
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e7429
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e7429
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e7429
mov rbp, qword [rsp + 0x1a0]
jmp 0x1801e7429
mov rbp, qword [rsp + 0x1a0]
movaps xmm7, xmmword [rsp + 0x130]
cmp qword [rsp + 0x48], 0
mov eax, dword [rsp + 0x74]
movaps xmm9, xmmword [rsp + 0x110]
movaps xmm8, xmmword [rsp + 0x120]
movaps xmm6, xmmword [rsp + 0x140]
mov r15, qword [rsp + 0x158]
mov r14, qword [rsp + 0x160]
mov r13, qword [rsp + 0x168]
mov r12, qword [rsp + 0x170]
mov rbx, qword [rsp + 0x180]
lea rcx, [rbp + 0xd310]
je 0x1801e74ae
mov rdx, qword [rcx]
test rax, rax
mov edi, 1
cmove rax, rdi
cmp rax, qword [rdx + 8]
jae 0x1801e74a1
sub qword [rdx + 8], rax
jmp 0x1801e74b3
mov rax, qword [rdx]
mov qword [rcx], rax
call fcn.1800c56f0
jmp 0x1801e74b3
mov edi, 1
cmp qword [rsp + 0x50], 0
mov eax, dword [rsp + 0x70]
lea rcx, [rbp + 0xd280]
mov rbp, qword [rsp + 0x178]
je 0x1801e74f9
mov rdx, qword [rcx]
test rax, rax
cmove rax, rdi
cmp rax, qword [rdx + 8]
jae 0x1801e74ee
sub qword [rdx + 8], rax
mov eax, esi
add rsp, 0x188
pop rdi
pop rsi
ret
mov rax, qword [rdx]
mov qword [rcx], rax
call fcn.1800c56f0
mov eax, esi
add rsp, 0x188
pop rdi
pop rsi
ret