Function at 0x18004ae20
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0x98
mov r11, rdx
mov rax, r9
imul edx, ecx, 0x5e4
mov r10, r8
mov edi, ecx
mov dword [rbp - 0x25], edx
cmp ecx, edx
ja 0x18004bbb8
mov rsi, qword [rbp + 0x7f]
xor ebx, ebx
mov r14, qword [rbp + 0x77]
mov r9d, dword [rbp - 0x39]
mov r12d, dword [rbp + 0x57]
mov r15, qword [rbp - 9]
mov r8d, dword [rbp - 0x35]
lea r13, [0x1800a9369]
cmp edi, 0x2fb7
ja 0x18004b323
je 0x18004b317
cmp edi, 0x141c
ja 0x18004b240
je 0x18004b21c
cmp edi, 0x23
je 0x18004b143
cmp edi, 0x2c
je 0x18004b108
cmp edi, 0xfff
jne 0x18004b125
mov r13d, ebx
mov dword [rbp - 0x29], ebx
mov edi, ebx
cmp dword [rax], ebx
jbe 0x18004b0eb
nop word [rax + rax]
mov edx, 0x8e
nop word [rax + rax]
mov eax, edx
sub eax, 0x8e
je 0x18004b0b7
sub eax, 0x44
je 0x18004b0aa
cmp eax, 0x44
jne 0x18004b0c4
mov eax, edi
imul rcx, rax, 0x38
mov r15, qword [rcx + r10 + 8]
mov r10d, dword [rbp - 0x21]
test r10d, r10d
je 0x18004b0e1
lea eax, [r10 - 1]
cmp eax, 0xf
ja case.0x18004af47.12
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x4bbec]
add rcx, rdx
jmp rcx
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea rdx, [rbp - 0x39]
xor ecx, ecx
lea r8d, [r9 + 0x17]
call fcn.180028e30
jmp 0x18004b08c
lea r8, [rbp - 0x39]
mov edx, 0xfd
mov rcx, r15
call fcn.18000edb0
jmp 0x18004b08c
mov eax, dword [r15]
lea r8, [rbp - 0x39]
mov edx, 0xe9
mov dword [rbp - 0x31], eax
lea rcx, [rbp - 0x31]
call fcn.18000df60
jmp 0x18004b08c
xor r9d, r9d
mov dword [rbp - 0x31], r12d
lea r8, [rbp - 0x39]
mov edx, 0x99
lea rcx, [rbp - 0x31]
call fcn.180027520
jmp 0x18004b08c
lea r9, [rbp - 0x39]
mov dword [rbp - 0x31], r12d
xor edx, edx
lea rcx, [rbp - 0x31]
mov r8d, 0x99
call fcn.18002ab50
jmp 0x18004b08c
add r13d, 2
mov dword [rbp - 0x29], r13d
mov r10, qword [rbp + 0x67]
mov edx, 0x116
jmp 0x18004b0c4
mov r9, r15
mov dword [rbp - 0x31], r12d
mov r8d, 0xa4
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x39]
call fcn.180027880
jmp 0x18004b08c
mov r9d, 0x10f
mov dword [rbp - 0x31], r12d
mov r8, r15
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x31]
call fcn.18005a9c0
jmp 0x18004b08c
mov r9d, 0xed
mov dword [rbp - 0x31], r12d
mov r8, r15
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x31]
call fcn.1800525f0
jmp 0x18004b08c
mov r9d, 0xd7
mov dword [rbp - 0x31], r12d
lea r8, [rbp - 0x39]
mov rcx, r15
lea rdx, [rbp - 0x31]
call fcn.180059b40
jmp 0x18004b08c
lea r9, [rbp - 0x39]
xor r8d, r8d
mov edx, 0xe4
mov rcx, r15
call fcn.180054230
jmp 0x18004b08c
lea r9, [rbp - 0x39]
mov dword [rbp - 0x31], r12d
lea r8, [rbp - 0x31]
mov edx, 0x19
mov rcx, r15
call fcn.180027ee0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
add r13d, r9d
mov dword [rbp - 0x29], r13d
mov r10, qword [rbp + 0x67]
mov edx, 0x116
jmp 0x18004b0c4
mov eax, edi
imul rcx, rax, 0x38
mov r12d, dword [rcx + r10 + 0x10]
jmp 0x18004b0c4
mov eax, edi
imul rcx, rax, 0x38
mov eax, dword [rcx + r10]
mov dword [rbp - 0x21], eax
add edx, 0x44
cmp edx, 0x19e
jb 0x18004aef0
mov rax, qword [rbp + 0x6f]
inc edi
cmp edi, dword [rax]
jb 0x18004aee0
mov r8d, dword [rbp - 0x35]
mov ecx, dword [rbp + 0x57]
mov edx, dword [rbp - 0x25]
mov edi, 0xfff
jmp 0x18004b125
mov r8d, dword [rbp - 0x35]
mov eax, 0x10
mov edx, dword [rbp - 0x25]
mov edi, 0x6f27
mov dword [rbp - 9], eax
jmp 0x18004b122
mov ecx, 0x10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x19], rax
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
mov edx, dword [rbp - 0x25]
mov ecx, dword [rbp + 0x57]
imul eax, ecx, 0x74
add edi, eax
cmp edi, edx
ja 0x18004bbb8
mov r10, qword [rbp + 0x67]
mov rax, qword [rbp + 0x6f]
mov r11, qword [rbp + 0x5f]
jmp 0x18004ae81
test r10, r10
jne 0x18004b18b
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x31]
mov qword [rsp + 0x40], rbx
lea r8, str.VPSIGNBrm128
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov edx, 0xcd
mov qword [rsp + 0x28], rbx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x31], ebx
call fcn.180026490
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
test r14, r14
jne 0x18004b1d3
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x31]
mov qword [rsp + 0x40], rbx
lea r8, str.d__kd_d_
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov edx, 0xcd
mov qword [rsp + 0x28], rbx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x31], ebx
call fcn.180026490
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
test rsi, rsi
jne 0x18004b11f
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x31]
mov qword [rsp + 0x40], rbx
lea r8, str.S_GETPC_B64_vi
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov edx, 0xcd
mov qword [rsp + 0x28], rbx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x31], ebx
call fcn.180026490
jmp 0x18004b117
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x18004bbdf
mov rax, qword [rax]
mov qword [rcx], rax
mov qword [rcx + 8], rbx
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
jmp 0x18004b122
cmp edi, 0x1fdb
je 0x18004b292
cmp edi, 0x280c
jne 0x18004b125
mov rax, qword [r10]
test rax, rax
jne 0x18004b268
mov rax, qword [rbp - 0x19]
mov qword [r10], rax
jmp 0x18004b125
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004b27d
mov rax, rcx
mov rcx, qword [rcx + 8]
test rcx, rcx
jne 0x18004b271
mov rcx, qword [rbp - 0x19]
mov qword [rax + 8], rcx
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
jmp 0x18004b122
mov r13d, dword [rbp - 0x29]
mov r8d, r13d
mov dword [rbp - 0x35], r13d
cmp r13d, 0x80
jae 0x18004b2ad
mov eax, 2
jmp 0x18004b2db
cmp r13d, 0x100
jae 0x18004b2bd
mov eax, 3
jmp 0x18004b2db
cmp r13d, 0x10000
jae 0x18004b2cd
mov eax, 4
jmp 0x18004b2db
cmp r13d, 0x1000000
jae 0x18004b305
mov eax, 5
add r13d, eax
mov dword [rbp - 0x29], r13d
cmp dword [rsi], r13d
jae 0x18004b2fc
mov eax, 6
mov dword [rsi], r13d
mov dword [rbp - 9], eax
mov edi, 0x6f27
jmp 0x18004b122
mov dword [rbp - 0x29], r13d
jmp 0x18004b125
mov eax, 0x10
mov edi, 0x6f27
mov dword [rbp - 9], eax
jmp 0x18004b122
mov r9d, ebx
mov dword [rbp - 0x39], r9d
jmp 0x18004b125
cmp edi, 0x5f4b
ja 0x18004bba4
je 0x18004b46a
cmp edi, 0x3bfc
je 0x18004bbe4
cmp edi, 0x3f93
je 0x18004b35d
cmp edi, 0x4f6f
jne 0x18004b125
sub dword [rsi], r9d
jmp 0x18004b125
cmp dword [r11], 0xd
setne cl
add cl, 0x30
mov byte [r9 + r14], cl
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
inc r9d
mov dword [rbp - 0x39], r9d
cmp r8d, 0x80
jae 0x18004b39b
mov byte [r9 + r14], r8b
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
inc r9d
mov dword [rbp - 0x39], r9d
jmp 0x18004b122
cmp r8d, 0x100
jae 0x18004b3cf
mov byte [r9 + r14], 0x81
mov eax, dword [rbp - 0x39]
inc eax
mov dword [rbp - 0x39], eax
mov ecx, eax
movzx eax, byte [rbp - 0x35]
mov byte [rcx + r14], al
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
inc r9d
mov dword [rbp - 0x39], r9d
jmp 0x18004b122
cmp r8d, 0x10000
jae 0x18004b3f3
mov byte [r9 + r14], 0x82
mov eax, dword [rbp - 0x39]
inc eax
mov dword [rbp - 0x39], eax
mov ecx, eax
mov eax, dword [rbp - 0x35]
shr eax, 8
mov byte [rcx + r14], al
jmp 0x18004b3a9
cmp r8d, 0x1000000
jae 0x18004b122
mov edx, 0x117
cmp edx, 0x117
je 0x18004b41b
cmp edx, 0x1de
jne 0x18004b457
mov byte [r9 + r14], r8b
jmp 0x18004b448
mov byte [r9 + r14], 0x83
mov eax, dword [rbp - 0x39]
inc eax
mov dword [rbp - 0x39], eax
mov ecx, eax
mov eax, dword [rbp - 0x35]
shr eax, 0x10
mov byte [rcx + r14], al
mov eax, dword [rbp - 0x39]
inc eax
mov dword [rbp - 0x39], eax
mov ecx, eax
mov eax, dword [rbp - 0x35]
shr eax, 8
mov byte [rcx + r14], al
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
inc r9d
mov dword [rbp - 0x39], r9d
add edx, 0xc7
cmp edx, 0x2a5
jb 0x18004b405
jmp 0x18004b11f
mov r13d, ebx
cmp dword [rax], ebx
jbe 0x18004bb6a
mov edx, 0xed
nop word [rax + rax]
cmp edx, 0xed
je 0x18004bb34
cmp edx, 0x178
je 0x18004bb21
cmp edx, 0x203
jne 0x18004bb42
mov r10d, dword [rbp - 0x21]
test r10d, r10d
je 0x18004bb64
lea eax, [r10 - 1]
cmp eax, 0xf
ja case.0x18004b4d1.12
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x4bc2c]
add rcx, rdx
jmp rcx
mov edi, 0x56
mov eax, edi
sub eax, 0x56
je 0x18004b4fc
sub eax, 1
je 0x18004b4f7
cmp eax, 1
jne 0x18004b53d
mov r10, qword [rbp + 0x67]
mov edx, 0x203
jmp 0x18004bb42
sub dword [rsi], r8d
jmp 0x18004b53d
mov eax, dword [rsi]
xor r8d, r8d
mov dword [rbp - 0x35], eax
mov eax, dword [r15]
mov edx, r9d
lea r9, [rbp - 0x35]
mov dword [rbp - 0x31], eax
lea ecx, [r8 + 0x11]
lea rax, [rbp - 0x31]
add rdx, r14
mov qword [rsp + 0x20], rax
call fcn.180024cb0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
mov dword [rbp - 0x39], r9d
inc edi
cmp edi, 0x59
jb 0x18004b4d8
mov edi, 0x108
nop dword [rax]
mov eax, edi
sub eax, 0x107
je 0x18004b4e9
cmp eax, 1
jne 0x18004b595
mov eax, dword [rsi]
lea rcx, [rbp - 0x35]
mov r8d, r9d
mov rdx, r15
add r8, r14
mov dword [rbp - 0x35], eax
mov r9d, 0x87
call fcn.18002b8b0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
sub dword [rsi], r8d
mov dword [rbp - 0x39], r9d
dec edi
cmp edi, 0x106
ja 0x18004b550
mov edi, 0xd2
cmp edi, 0xd2
je 0x18004b5ba
cmp edi, 0x1e5a
je 0x18004ba4e
jmp 0x18004b5f6
mov eax, dword [rsi]
xor edx, edx
mov dword [rbp - 0x35], eax
xor r8d, r8d
mov eax, dword [r15]
mov ecx, r9d
lea r9, [rbp - 0x31]
add rcx, r14
mov dword [rbp - 0x31], eax
lea rax, [rbp - 0x35]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea ecx, [rdx + 0x32]
call fcn.180034b90
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
add edi, 0x1d88
cmp edi, 0x3b10
jbe 0x18004b5a4
mov r8d, dword [rbp - 0x35]
mov edi, 4
nop dword [rax]
cmp edi, 4
je 0x18004b623
cmp edi, 0xad
je 0x18004b4e9
jmp 0x18004b667
mov eax, dword [rsi]
lea rdx, [rbp - 0x35]
mov dword [rbp - 0x35], eax
mov r8d, 0x52
mov eax, r9d
mov rcx, r15
add rax, r14
mov dword [rbp - 0x31], r12d
lea r9, [rbp - 0x31]
mov qword [rsp + 0x20], rax
call fcn.180024340
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
sub dword [rsi], r8d
mov dword [rbp - 0x39], r9d
add edi, 0xa9
cmp edi, 0x156
jb 0x18004b610
mov edi, 0x8f
nop word [rax + rax]
cmp edi, 0x8f
je 0x18004b6a3
cmp edi, 0xd68
je 0x18004b69e
cmp edi, 0x1a41
je 0x18004b4e9
jmp 0x18004b6e1
sub dword [rsi], r8d
jmp 0x18004b6e1
mov eax, dword [rsi]
lea r8, [rbp - 0x31]
mov edx, r9d
lea rcx, [rbp - 0x35]
add rdx, r14
mov dword [rbp - 0x35], eax
mov r9, r15
mov dword [rbp - 0x31], r12d
mov dword [rsp + 0x20], 0xd9
call fcn.18000d900
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
mov dword [rbp - 0x39], r9d
add edi, 0xcd9
cmp edi, 0x268b
jbe 0x18004b680
mov edi, 0xc1
cmp edi, 0xc1
je 0x18004b70a
cmp edi, 0x53af
je 0x18004ba4e
jmp 0x18004b73c
mov eax, dword [rsi]
lea r8, [rbp - 0x35]
mov ecx, r9d
mov edx, 0xe5
add rcx, r14
mov dword [rbp - 0x35], eax
lea r9, [rbp - 0x31]
mov dword [rbp - 0x31], r12d
mov qword [rsp + 0x20], r15
call fcn.18005b070
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
add edi, 0x52ee
cmp edi, 0xa5dc
jbe 0x18004b6f4
mov ecx, 0xf0
nop
mov eax, ecx
sub eax, 0xef
je 0x18004b7a4
cmp eax, 1
jne 0x18004b77d
mov byte [r9 + r14], 5
mov eax, dword [rbp - 0x39]
inc eax
mov dword [rbp - 0x39], eax
mov byte [rax + r14], bl
mov r9d, dword [rbp - 0x39]
inc r9d
add dword [rsi], 0xfffffffe
mov dword [rbp - 0x39], r9d
dec ecx
cmp ecx, 0xee
ja 0x18004b750
mov r8d, dword [rbp - 0x35]
mov edi, 0xcd
mov eax, edi
sub eax, 0xcd
je 0x18004b7b6
cmp eax, 1
je 0x18004ba59
jmp 0x18004b7f4
mov r8d, dword [rbp - 0x35]
mov edx, 0x203
mov r10, qword [rbp + 0x67]
jmp 0x18004bb42
mov eax, dword [rsi]
lea rdx, [rbp - 0x35]
mov dword [rbp - 0x35], eax
add r9, r14
lea rax, [rbp - 0x31]
mov dword [rbp - 0x31], r12d
mov r8d, 0x10e
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.18003fbc0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
mov dword [rbp - 0x39], r9d
inc edi
cmp edi, 0xcf
jb 0x18004b790
mov edi, 0xca
mov eax, edi
sub eax, 0xca
je 0x18004b817
cmp eax, 1
je 0x18004ba4e
jmp 0x18004b84d
mov eax, dword [rsi]
lea r8, [rbp - 0x31]
mov ecx, r9d
mov rdx, r15
mov dword [rbp - 0x35], eax
add rcx, r14
lea rax, [rbp - 0x35]
mov dword [rbp - 0x31], r12d
mov r9d, 0xec
mov qword [rsp + 0x20], rax
call fcn.180025cd0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
inc edi
cmp edi, 0xcc
jb 0x18004b803
mov r8d, dword [rbp - 0x35]
mov edi, 0x87
mov eax, edi
sub eax, 0x86
je 0x18004ba59
cmp eax, 1
jne 0x18004b8b7
mov eax, dword [rsi]
lea r8, [rbp - 0x35]
mov edx, r9d
mov ecx, 0x66
mov dword [rbp - 0x35], eax
add rdx, r14
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rbx
mov r9, r15
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x31], r12d
call fcn.180056b30
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
mov dword [rbp - 0x39], r9d
dec edi
cmp edi, 0x85
ja 0x18004b860
mov edi, 0x1f
nop word [rax + rax]
mov eax, edi
sub eax, 0x1d
je 0x18004b4e9
sub eax, 1
je 0x18004b8ee
cmp eax, 1
jne 0x18004b929
mov r8d, dword [rsi]
mov dword [rbp - 0x35], r8d
jmp 0x18004b929
mov r8d, r9d
lea rdx, [rbp - 0x31]
add r8, r14
mov dword [rbp - 0x31], r12d
lea r9, [rbp - 0x35]
mov qword [rsp + 0x20], r15
mov ecx, 0xa8
call fcn.180021830
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
sub dword [rsi], r8d
mov dword [rbp - 0x39], r9d
dec edi
cmp edi, 0x1c
ja 0x18004b8d0
mov edi, 0xb
cmp edi, 0xb
je 0x18004b948
cmp edi, 0x160
je 0x18004b4e9
jmp 0x18004b97f
mov eax, dword [rsi]
lea r8, [rbp - 0x35]
mov edx, r9d
mov rcx, r15
add rdx, r14
mov dword [rbp - 0x35], eax
mov r9d, 0x12d
call fcn.18001a3b0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
sub dword [rsi], r8d
mov dword [rbp - 0x39], r9d
add edi, 0x155
cmp edi, 0x2aa
jbe 0x18004b935
mov edi, 0x7a
mov eax, edi
sub eax, 0x7a
je 0x18004b9a4
cmp eax, 1
je 0x18004ba59
jmp 0x18004b9e2
mov eax, dword [rsi]
lea rdx, [rbp - 0x31]
mov ecx, r9d
mov r8, r15
add rcx, r14
mov dword [rbp - 0x35], eax
lea r9, [rbp - 0x35]
mov dword [rbp - 0x31], r12d
mov dword [rsp + 0x20], 0x10d
call fcn.1800433f0
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
mov dword [rbp - 0x39], r9d
inc edi
cmp edi, 0x7c
jb 0x18004b992
mov r10d, dword [rbp - 0x21]
mov ecx, 0xfb
mov eax, ecx
sub eax, 0xfb
je 0x18004ba6a
cmp eax, 0x2b
jne 0x18004ba71
mov eax, r9d
lea rcx, [rbp - 0x35]
mov qword [rsp + 0x48], rcx
add rax, r14
mov qword [rsp + 0x40], rbx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8, r15
mov qword [rsp + 0x28], rbx
mov edx, 0xda
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x31], r12d
call fcn.180026490
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
mov dword [rbp - 0x39], r9d
sub dword [rsi], r8d
mov edx, 0x203
mov r10, qword [rbp + 0x67]
jmp 0x18004bb42
mov r8d, dword [rsi]
mov dword [rbp - 0x35], r8d
add ecx, 0x2b
cmp ecx, 0x151
jb 0x18004b9f2
mov edi, 0x6d
nop word [rax + rax]
cmp edi, 0xa0
jae case.0x18004b4d1.12
mov eax, edi
sub eax, 0x6d
je 0x18004bb0e
sub eax, 0x11
je 0x18004baba
cmp eax, 0x11
je 0x18004b4e9
mov r10d, dword [rbp - 0x21]
add edi, 0x11
jmp 0x18004ba90
mov eax, r9d
lea rcx, [rbp - 0x35]
mov qword [rsp + 0x28], rcx
lea r9, [rbp - 0x31]
add rax, r14
mov dword [rbp - 0x11], r10d
mov ecx, 0x23
mov qword [rsp + 0x20], rax
mov r8, r15
mov dword [rbp - 0x31], r12d
lea rdx, [rbp - 0x11]
call fcn.18004ae20
test eax, eax
jne 0x18004bb77
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, r8d
sub dword [rsi], r8d
mov r10d, dword [rbp - 0x21]
add edi, 0x11
mov dword [rbp - 0x39], r9d
jmp 0x18004ba90
mov r8d, dword [rsi]
add edi, 0x11
mov r10d, dword [rbp - 0x21]
mov dword [rbp - 0x35], r8d
jmp 0x18004ba90
mov eax, r13d
imul rcx, rax, 0x38
mov r12d, dword [rcx + r10 + 0x10]
mov r15, qword [rcx + r10 + 8]
jmp 0x18004bb42
mov eax, r13d
imul rcx, rax, 0x38
mov eax, dword [rcx + r10]
mov dword [rbp - 0x21], eax
add edx, 0x8b
cmp edx, 0x28e
jb 0x18004b480
mov rax, qword [rbp + 0x6f]
inc r13d
cmp r13d, dword [rax]
jb 0x18004b475
mov edx, dword [rbp - 0x25]
mov ecx, dword [rbp + 0x57]
mov edi, 0x5f4b
mov dword [rsi], r9d
jmp 0x18004b125
mov r9d, dword [rbp - 0x39]
mov edi, 0x6f27
mov r8d, dword [rbp - 0x35]
mov edx, dword [rbp - 0x25]
mov dword [rbp - 9], eax
jmp 0x18004b122
mov edx, dword [rbp - 0x25]
mov eax, 0x10
mov dword [rbp - 9], eax
mov edi, 0x6f27
jmp 0x18004b122
cmp edi, 0x6f27
je 0x18004bbd0
cmp edi, 0x7f03
jne 0x18004b125
mov rax, qword [rbp - 9]
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov eax, ebx
mov edi, 0x6f27
mov dword [rbp - 9], ebx
jmp 0x18004b122
mov rax, rbx
jmp 0x18004bbbc
mov rax, qword [rbp - 0x19]
jmp 0x18004bbbc