Function at 0x180026850
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c8]
sub rsp, 0x2c8
mov edi, dword [rbp + 0x210]
lea eax, [rcx - 0xf]
xor r11d, r11d
mov dword [rsp + 0x58], eax
mov r13, rdx
mov r15d, ecx
lea rdx, [0x180000000]
lea esi, [r11 + 0xa]
cmp ecx, eax
jbe 0x180027c5d
mov r12, qword [rsp + 0x40]
mov dword [rsp + 0x48], edi
lea eax, [r15 - 0xc7]
cmp eax, 0x12
ja case.0x1800268ca.203
mov ecx, dword [rdx + rax*4 + 0x2a628]
add rcx, rdx
jmp rcx
mov ecx, 0x1d
mov eax, ecx
sub eax, 0x1d
je 0x18002690a
sub eax, 1
je 0x1800268fc
cmp eax, 1
jne 0x180026b42
mov eax, edi
add rsp, 0x2c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edi, 1
mov dword [rsp + 0x48], edi
jmp 0x180026b42
movzx eax, byte [r9]
cmp al, 0x22
je 0x1800269c8
cmp al, 0x5c
jne 0x180026a80
mov ebx, 0x17
cmp ebx, 0x17
je 0x18002693d
cmp ebx, 0x467
jne 0x1800269ac
mov dword [r13], 2
jmp 0x180026b2c
cmp dword [r13 + 4], 0
jne 0x1800269ac
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffd
jae 0x1800269a4
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x30]
xor r9d, r9d
mov byte [rsp + 0x30], 0x5c
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
je 0x1800269ac
mov ecx, 0x48
mov eax, ecx
sub eax, 0x47
je case.0x1800285a1.233
cmp eax, 1
jne 0x18002699b
mov edi, 6
mov dword [rsp + 0x48], edi
dec ecx
cmp ecx, 0x46
ja 0x180026982
jmp 0x1800269ac
mov dword [r13 + 4], 1
add ebx, 0x450
cmp ebx, 0x8a0
jbe 0x180026923
mov r8, qword [rbp + 0x220]
xor r11d, r11d
mov r15d, 0x2a
nop
cmp r15d, 0x2a
je 0x1800269e5
cmp r15d, 0x52
je 0x180026b2c
jmp 0x180026a65
cmp qword [r13 + 8], 0
je 0x180026a4b
mov ebx, 0x61
mov eax, ebx
sub eax, 0x60
je 0x180026a03
cmp eax, 1
jne 0x180026a35
mov dword [r13], r11d
jmp 0x180026a35
mov rax, qword [r8 + 0x20]
test rax, rax
je 0x180026a15
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
mov r8, qword [rbp + 0x220]
dec ebx
mov r11d, 0
cmp ebx, 0x5f
ja 0x1800269f1
jmp 0x180026a65
mov eax, 0x10c
cmp eax, 0x10c
je 0x180027f89
add eax, 3
cmp eax, 0x10f
jb 0x180026a50
mov r8, qword [rbp + 0x220]
add r15d, 0x28
mov r11d, 0
cmp r15d, 0x7a
jb 0x1800269d0
mov r14, qword [rbp + 0x228]
mov ebx, 0x1d
nop dword [rax]
mov eax, ebx
sub eax, 0x1c
je 0x180026b2c
cmp eax, 1
jne 0x180026b21
cmp dword [r13 + 4], 0
jne 0x180026b21
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffe
jae 0x180026b19
movzx eax, byte [r14]
lea rcx, [rsp + 0x30]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
mov byte [rsp + 0x30], al
call fcn.180015080
cmp eax, 1
je 0x180026b21
mov ecx, 0x107
nop dword [rax]
mov eax, ecx
sub eax, 0x107
je 0x180026b04
cmp eax, 1
je case.0x1800285a1.233
jmp 0x180026b0d
mov edi, 6
mov dword [rsp + 0x48], edi
inc ecx
cmp ecx, 0x109
jb 0x180026af0
jmp 0x180026b21
mov dword [r13 + 4], 1
dec ebx
cmp ebx, 0x1b
ja 0x180026a90
mov r8, qword [rbp + 0x220]
mov ecx, 0x1d
mov r9, qword [rbp + 0x228]
xor r11d, r11d
inc ecx
cmp ecx, 0x20
jb 0x1800268d1
mov r15d, 0xd5
jmp case.0x1800268ca.203
mov byte [r12 + r13], 0
jmp case.0x1800268ca.203
mov eax, dword [r13]
cmp eax, 0x1b
ja case.default.0x180026b79
mov ecx, dword [rdx + rax*4 + 0x2a674]
add rcx, rdx
jmp rcx
mov ecx, 0x48
mov eax, ecx
sub eax, 0x47
je case.0x1800268ca.216
cmp eax, 1
je case.0x1800268ca.215
dec ecx
cmp ecx, 0x46
ja 0x180026b80
mov eax, 0x23
cmp eax, 0x23
je 0x1800276b0
add eax, 0x173e
cmp eax, 0x173e
jbe 0x180026ba0
mov eax, 0x3d
nop word [rax + rax]
cmp eax, 0x3d
je 0x180026b4d
cmp eax, 0x63
je case.0x1800268ca.216
add eax, 0x26
cmp eax, 0x89
jb 0x180026bc0
mov eax, 0x3f
nop dword [rax]
cmp eax, 0x3f
je case.0x1800268ca.211
cmp eax, 0x2721
je case.0x1800268ca.216
add eax, 0x26e2
cmp eax, 0x4dc4
jbe 0x180026be0
mov eax, 0x122
cmp eax, 0x122
je case.0x1800268ca.210
cmp eax, 0x9344
je case.0x1800268ca.216
add eax, 0x9222
cmp eax, 0x12444
jbe 0x180026c05
mov ecx, 0x5a
nop dword [rax]
mov eax, ecx
sub eax, 0x59
je case.0x1800268ca.216
cmp eax, 1
je 0x180027c29
dec ecx
cmp ecx, 0x58
ja 0x180026c30
nop dword [rax + rax]
mov r14d, 0xda
jmp case.default.0x180027c83
mov eax, 0x9b
cmp eax, 0x9b
je case.0x180027c83.216
add eax, 0x33
cmp eax, 0xce
jb 0x180026c60
mov ecx, 0x4b
nop word [rax + rax]
mov eax, ecx
sub eax, 0x4a
je case.0x1800268ca.216
cmp eax, 1
je case.0x180027c83.215
dec ecx
cmp ecx, 0x49
ja 0x180026c80
mov ecx, 0x71
mov eax, ecx
sub eax, 0x71
je case.0x180027c83.213
cmp eax, 1
je case.0x1800268ca.216
inc ecx
cmp ecx, 0x73
jb 0x180026ca0
nop dword [rax + rax]
mov edx, 0xb4
lea r14d, [rdx + 0x20]
nop dword [rax]
mov eax, edx
sub eax, 0xb4
je 0x180027fe8
cmp eax, 1
jne 0x18002801a
mov eax, 1
jmp 0x1800268e8
mov ecx, 0xb
mov eax, ecx
sub eax, esi
je case.0x1800268ca.216
cmp eax, 1
je case.0x180027c83.211
dec ecx
cmp ecx, 9
ja 0x180026cf5
mov ecx, 0xfc
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xfc
je case.0x180027c83.209
cmp eax, 1
je case.0x1800268ca.216
inc ecx
cmp ecx, 0xfe
jb 0x180026d20
mov eax, 0x54
cmp eax, 0x54
je case.0x180027c83.208
add eax, 0x13
cmp eax, 0x67
jb 0x180026d45
mov ecx, 0xcb
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcb
je case.0x180027c83.206
cmp eax, 1
je case.0x1800268ca.216
inc ecx
cmp ecx, 0xcd
jb 0x180026d60
mov ecx, 0x12c
nop word [rax + rax]
mov eax, ecx
sub eax, 0x12b
je case.0x1800268ca.216
cmp eax, 1
je case.0x180027c83.205
dec ecx
cmp ecx, 0x12a
ja 0x180026d90
mov ebx, 0xde
lea r14d, [rbx - 0x12]
nop dword [rax]
mov eax, ebx
sub eax, 0xde
je 0x180027fac
sub eax, 1
je 0x180027f9b
cmp eax, 1
je 0x180026ce6
jmp 0x180027fb6
mov eax, 0xfb
nop dword [rax]
cmp eax, 0xfb
je 0x180027d5c
add eax, 0x8e
cmp eax, 0x189
jb 0x180026df0
mov ecx, 0x11f
nop dword [rax]
mov eax, ecx
sub eax, 0x11e
je case.0x1800268ca.216
cmp eax, 1
je 0x180027da4
dec ecx
cmp ecx, 0x11d
ja 0x180026e10
mov ecx, 0x67
mov eax, ecx
sub eax, 0x66
je case.0x1800268ca.216
cmp eax, 1
je 0x180027dc6
dec ecx
cmp ecx, 0x65
ja 0x180026e35
mov ecx, 0xdc
nop word [rax + rax]
mov eax, ecx
sub eax, 0xdb
je case.0x1800268ca.216
cmp eax, 1
je 0x180027de7
dec ecx
cmp ecx, 0xda
ja 0x180026e60
mov ecx, 0xdb
nop word [rax + rax]
mov eax, ecx
sub eax, 0xdb
je 0x180027e0e
cmp eax, 0x37
je case.0x1800268ca.216
add ecx, 0x37
cmp ecx, 0x149
jb 0x180026e90
mov ecx, 0x3f
nop word [rax + rax]
mov eax, ecx
sub eax, 0x3e
je case.0x1800268ca.216
cmp eax, 1
je 0x180027e7f
dec ecx
cmp ecx, 0x3d
ja 0x180026ec0
mov eax, 0xcb
cmp eax, 0xcb
je 0x180027ea6
add eax, 0x60be
cmp eax, 0x60be
jbe 0x180026ee0
mov ecx, 0xb6
nop dword [rax]
mov eax, ecx
sub eax, 0xb6
je 0x180027ecd
cmp eax, 1
je case.0x1800268ca.216
inc ecx
cmp ecx, 0xb8
jb 0x180026f00
mov eax, 0x56
cmp eax, 0x56
je 0x180027ef2
cmp eax, 0x1076
je case.0x1800268ca.216
add eax, 0x1020
cmp eax, 0x2040
jbe 0x180026f25
mov eax, 0x3b
nop word [rax + rax]
cmp eax, 0x3b
je 0x180027f17
cmp eax, 0xd23
je case.0x1800268ca.216
add eax, 0xce8
cmp eax, 0x19d0
jbe 0x180026f50
mov eax, 0x42
cmp eax, 0x42
je 0x180027f64
add eax, 0x17fa
cmp eax, 0x17fa
jbe 0x180026f75
mov eax, 0xfb
nop
cmp eax, 0xfb
je 0x180027f89
add eax, 0x4b
cmp eax, 0x146
jb 0x180026f90
jmp case.0x1800268ca.203
mov r15d, 0xd7
jmp case.0x1800268ca.203
mov ecx, 0xe
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe
je 0x180026fee
sub eax, 1
je 0x180026fda
cmp eax, 1
je case.0x1800285a1.233
jmp 0x1800270bd
mov edi, 1
mov r15d, 0xd4
mov dword [rsp + 0x48], edi
jmp 0x1800270bd
movsx eax, byte [r9]
add eax, 0xffffffde
cmp eax, 0x53
ja case.0x180027012.36
cdqe
movzx eax, byte [rdx + rax + 0x2a6f0]
mov ecx, dword [rdx + rax*4 + 0x2a6e4]
add rcx, rdx
jmp rcx
mov r14, qword [rbp + 0x228]
mov ebx, 0x4e
mov eax, ebx
sub eax, 0x4d
je 0x1800270aa
cmp eax, 1
jne 0x180027085
cmp dword [r13 + 4], 0
jne 0x180027085
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffe
jae 0x18002707d
movzx eax, byte [r14]
lea rcx, [rsp + 0x30]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
mov byte [rsp + 0x30], al
call fcn.180015080
cmp eax, 1
je 0x180027085
mov eax, 6
jmp 0x1800268e8
mov dword [r13 + 4], 1
dec ebx
cmp ebx, 0x4c
ja 0x180027020
mov ebx, 0x6e
cmp ebx, 0x6e
je 0x1800270d7
cmp ebx, 0x1d38
je 0x1800270cd
cmp ebx, 0x3a02
jne 0x18002714f
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0xe
inc ecx
cmp ecx, 0x11
jb 0x180026fc0
jmp case.0x1800268ca.203
mov dword [r13], 3
jmp 0x18002714f
cmp dword [r13 + 4], 0
jne 0x18002714f
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffa
jae 0x180027147
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x30]
xor r9d, r9d
mov byte [rsp + 0x30], 0x75
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
je 0x18002714f
mov ecx, 0xb9
nop dword [rax]
mov eax, ecx
sub eax, 0xb8
je case.0x1800285a1.233
cmp eax, 1
jne 0x18002713b
mov edi, 6
mov dword [rsp + 0x48], edi
dec ecx
cmp ecx, 0xb7
ja 0x180027120
jmp 0x18002714f
mov dword [r13 + 4], 1
add ebx, 0x1cca
cmp ebx, 0x565e
jbe 0x180027091
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0x96
mov eax, ecx
sub eax, 0x96
je 0x180027188
cmp eax, 1
je case.0x1800285a1.233
jmp 0x180027191
mov edi, 7
mov dword [rsp + 0x48], edi
inc ecx
cmp ecx, 0x98
jb 0x180027174
jmp 0x1800270b8
mov r12, r11
mov qword [rsp + 0x40], r11
mov r10, 0xffffffffffffffff
nop
inc r10
cmp byte [r10 + r13], 0
jne 0x1800271b0
mov qword [rbp - 0x78], r10
jmp case.0x1800268ca.203
mov r14d, 9
nop dword [rax]
cmp r14d, 9
je 0x18002720e
cmp r14d, 0x288
je 0x18002725c
cmp r14d, 0x507
je 0x1800271fa
cmp r14d, 0x786
je case.0x1800285a1.233
jmp 0x180027334
mov edi, 1
mov r15d, 0xd0
mov dword [rsp + 0x48], edi
jmp 0x180027334
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x180027232.49
cdqe
movzx eax, byte [rdx + rax + 0x2a74c]
mov ecx, dword [rdx + rax*4 + 0x2a744]
add rcx, rdx
jmp rcx
mov ebx, 0x18
nop dword [rax]
cmp ebx, 0x18
je 0x180027267
cmp ebx, 0x7a
jne 0x1800272f0
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov r14d, 0x288
jmp 0x180027334
cmp dword [r13 + 4], 0
jne 0x1800272e8
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffd
jae 0x1800272e0
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x30]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x30], al
call fcn.180015080
cmp eax, 1
je 0x1800272e8
mov eax, 0xf9
cmp eax, 0xf9
je 0x1800272c9
cmp eax, 0x198
je case.0x1800285a1.233
jmp 0x1800272d2
mov edi, 6
mov dword [rsp + 0x48], edi
add eax, 0x9f
cmp eax, 0x237
jb 0x1800272b5
jmp 0x1800272e8
mov dword [r13 + 4], 1
mov dword [r13], 6
add ebx, 0x62
cmp ebx, 0xdc
jb 0x180027240
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0x4b
mov eax, ecx
sub eax, 0x4b
je 0x180027324
cmp eax, 1
je case.0x1800285a1.233
jmp 0x18002732d
mov edi, 7
mov dword [rsp + 0x48], edi
inc ecx
cmp ecx, 0x4d
jb 0x180027312
add r14d, 0x27f
cmp r14d, 0x9fc
jbe 0x1800271d0
jmp case.0x1800268ca.203
mov r15d, 0xd8
jmp case.0x1800268ca.203
mov qword [rsp + 0x70], r11
jmp case.0x1800268ca.203
mov r9, qword [rsp + 0x70]
mov r8d, r11d
mov r10, qword [rbp - 0x78]
cmp r9, r10
jae case.0x1800268ca.203
nop word [rax + rax]
mov eax, 0x116
cmp eax, 0x116
je 0x1800273a5
cmp eax, 0xc14c
jne 0x18002749a
mov r15d, 0xc8
inc r9
jmp 0x18002749a
movsx edx, byte [r9 + r13]
mov ecx, edx
sub ecx, 9
je 0x1800273ce
sub ecx, 1
je 0x1800273ce
sub ecx, 3
je 0x1800273ce
sub ecx, 0x13
je 0x1800273ce
cmp ecx, 2
je 0x180027402
mov byte [r12 + r13], dl
jmp 0x180027492
mov ecx, 0x6f
mov eax, ecx
sub eax, 0x6f
je 0x1800273e5
cmp eax, 0x78
je 0x180027495
jmp 0x1800273f7
cmp r8d, 1
jne 0x1800273f7
movzx eax, byte [r9 + r13]
mov byte [r12 + r13], al
inc r12
add ecx, 0x78
cmp ecx, 0x15f
jb 0x1800273d3
mov edx, 0xd4
mov eax, edx
sub eax, 0xd2
je 0x180027489
sub eax, 1
je 0x18002746f
cmp eax, 1
jne 0x180027474
test r8d, r8d
je 0x180027426
cmp r8d, eax
je 0x180027443
jmp 0x180027474
mov eax, 0xff
nop dword [rax + rax]
cmp eax, 0xff
je 0x180027469
add eax, 0x7d82
cmp eax, 0x7d82
jbe 0x180027430
mov ecx, 0x1d
mov eax, ecx
sub eax, 0x1d
je 0x180027456
cmp eax, 1
je 0x18002746f
jmp 0x180027460
cmp byte [r9 + r13 - 1], 0x5c
cmovne r8d, r11d
inc ecx
cmp ecx, 0x1f
jb 0x180027448
jmp 0x180027474
mov r8d, 1
mov edx, 0xd3
dec edx
cmp edx, 0xd1
ja 0x180027407
movzx edx, byte [r9 + r13]
mov byte [r12 + r13], dl
jmp 0x180027492
movzx eax, byte [r9 + r13]
mov byte [r12 + r13], al
inc r12
mov eax, 0x116
add eax, 0xc036
cmp eax, 0x1806c
jbe 0x180027385
mov qword [rsp + 0x70], r9
mov qword [rsp + 0x40], r12
cmp r9, r10
jb 0x180027380
jmp case.0x1800268ca.203
mov eax, 0xfe
cmp eax, 0xfe
je 0x1800274f4
cmp eax, 0xbd82
je 0x180027545
cmp eax, 0x17a06
je 0x1800274e9
cmp eax, 0x2368a
je case.0x1800285a1.233
jmp 0x18002754a
mov edi, 1
mov dword [rsp + 0x48], edi
jmp 0x18002754a
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x180027518.49
cdqe
movzx eax, byte [rdx + rax + 0x2a78c]
mov ecx, dword [rdx + rax*4 + 0x2a784]
add rcx, rdx
jmp rcx
mov ebx, 0xf8
nop
mov eax, ebx
sub eax, 0xf8
je 0x18002756f
sub eax, 1
je 0x180027565
cmp eax, 1
jne 0x1800275df
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0xbd82
add eax, 0xbc84
cmp eax, 0x2f210
jbe 0x1800274c7
mov r15d, 0xd3
jmp case.0x1800268ca.203
mov dword [r13], 4
jmp 0x1800275df
cmp dword [r13 + 4], 0
jne 0x1800275df
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffb
jae 0x1800275d7
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x30]
xor r9d, r9d
mov byte [rsp + 0x30], 0x75
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
je 0x1800275df
mov eax, 0x1d
cmp eax, 0x1d
je 0x1800275c4
cmp eax, 0x37
je case.0x1800285a1.233
jmp 0x1800275cd
mov edi, 6
mov dword [rsp + 0x48], edi
add eax, 0x1a
cmp eax, 0x51
jb 0x1800275b4
jmp 0x1800275df
mov dword [r13 + 4], 1
inc ebx
cmp ebx, 0xfb
jb 0x180027520
nop dword [rax]
mov eax, 7
jmp 0x1800268e8
mov r15d, 0xd2
jmp case.0x1800268ca.203
mov r15d, 0xee
mov dword [rsp + 0x68], r15d
mov eax, r15d
sub eax, 0xee
je 0x18002763a
sub eax, 1
je case.0x18002765e.9
sub eax, 1
je 0x18002762f
cmp eax, 1
je case.0x1800285a1.233
jmp 0x180027680
mov edi, 1
mov dword [rsp + 0x48], edi
jmp 0x180027680
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002765e.23
cdqe
movzx eax, byte [rdx + rax + 0x2a800]
mov ecx, dword [rdx + rax*4 + 0x2a7c4]
add rcx, rdx
jmp rcx
mov eax, 0x87
cmp eax, 0x87
je 0x1800276c5
cmp eax, 0x1b6c
je 0x1800276bb
cmp eax, 0x3651
jne 0x1800276c9
mov r15d, 0xef
mov r8, qword [rbp + 0x220]
lea rdx, [0x180000000]
mov r9, qword [rbp + 0x228]
inc r15d
mov dword [rsp + 0x68], r15d
mov r11d, 0
cmp r15d, 0xf2
jb 0x180027610
mov r15d, 0xd6
jmp case.0x1800268ca.203
mov dword [r13], 1
jmp 0x1800276c9
mov dword [r13 + 4], r11d
add eax, 0x1ae5
cmp eax, 0x50af
jbe 0x180027665
mov ebx, 0x3c
nop word [rax + rax]
mov eax, ebx
sub eax, 0x3b
je 0x180027723
cmp eax, 1
jne 0x1800276fd
mov rax, qword [r8]
test rax, rax
je 0x1800276fd
call rax
mov r8, qword [rbp + 0x220]
dec ebx
cmp ebx, 0x3a
ja 0x1800276e0
mov ebx, 0x7d
nop dword [rax]
cmp ebx, 0x7d
je 0x180027730
cmp ebx, 0x4baf
je case.0x18002765e.9
jmp 0x18002774a
mov dword [r13], 0x19
jmp case.0x18002765e.9
mov rax, qword [r8 + 8]
test rax, rax
je 0x180027742
call rax
mov r8, qword [rbp + 0x220]
mov dword [r13], 0x1a
add ebx, 0x4b32
cmp ebx, 0x9664
jbe 0x180027710
nop dword [rax + rax]
mov rax, qword [r8 + 0x10]
test rax, rax
je case.0x18002765e.9
call rax
jmp case.0x18002765e.9
mov ebx, 0x8d
nop dword [rax]
mov eax, ebx
sub eax, 0x8c
je case.0x18002765e.9
cmp eax, 1
jne 0x1800277ac
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1800277a4
call rax
mov r8, qword [rbp + 0x220]
mov dword [r13], 0x1a
dec ebx
cmp ebx, 0x8b
ja 0x180027780
nop word [rax + rax]
mov dword [r13], 7
jmp case.0x18002765e.9
mov ecx, 0xe6
mov eax, ecx
sub eax, 0xe6
je 0x1800277e6
cmp eax, 1
je case.0x18002765e.9
jmp 0x1800277ea
mov dword [r13], esi
inc ecx
cmp ecx, 0xe8
jb 0x1800277d2
mov ecx, 0x79
nop dword [rax]
mov eax, ecx
sub eax, 0x78
je case.0x18002765e.9
cmp eax, 1
jne 0x180027818
mov dword [r13], 0xe
dec ecx
cmp ecx, 0x77
ja 0x180027800
mov ebx, 0xca
mov eax, ebx
sub eax, 0xca
je 0x180027838
cmp eax, 1
je case.0x18002765e.9
jmp 0x18002784a
mov rax, qword [r8 + 0x48]
test rax, rax
je 0x18002784a
call rax
mov r8, qword [rbp + 0x220]
inc ebx
cmp ebx, 0xcc
jb 0x180027824
mov ebx, 0x70
nop dword [rax]
cmp ebx, 0x70
je 0x18002787a
cmp ebx, 0x2a00
jne 0x180027885
mov dword [r13], 0x1b
jmp case.0x18002765e.9
mov rax, qword [r8 + 0x50]
test rax, rax
je 0x180027885
call rax
add ebx, 0x2990
cmp ebx, 0x5320
ja 0x18002789c
mov r8, qword [rbp + 0x220]
jmp 0x180027860
xor r11d, r11d
mov ebx, 0x6a
mov eax, ebx
sub eax, 0x6a
je 0x18002791f
sub eax, 1
je 0x1800278e6
sub eax, 1
je 0x1800278c0
cmp eax, 1
je case.0x18002765e.9
jmp 0x180027923
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x30]
xor r9d, r9d
mov byte [rsp + 0x30], 0x30
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
jne 0x180027073
jmp 0x180027923
lea r9, [rsp + 0x60]
mov dword [r13], 0x11
xor r8d, r8d
mov qword [rsp + 0x60], 5
xor edx, edx
mov dword [rsp + 0x20], 0x75
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
jmp 0x180027923
mov dword [r13 + 4], r11d
inc ebx
mov r11d, 0
cmp ebx, 0x6e
jb 0x1800278a4
mov r9, qword [rbp + 0x228]
mov r14d, 0x69
mov dword [rsp + 0x60], r14d
nop word [rax + rax]
mov eax, r14d
sub eax, 0x65
je case.0x18002765e.9
sub eax, 1
je 0x1800279ca
sub eax, 1
je 0x18002798a
sub eax, 1
je 0x18002797d
cmp eax, 1
jne 0x180027aa4
mov dword [r13 + 4], r11d
jmp 0x180027aa4
mov dword [r13], 0x18
jmp 0x180027aa4
lea r9, [rsp + 0x60]
mov qword [rsp + 0x60], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
mov rax, qword [sym.imp.KERNEL32.dll__lcreat]
mov qword [rsp + 0x50], rax
jmp 0x180027aa4
movzx eax, byte [r9]
lea rcx, [rsp + 0x30]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
mov byte [rsp + 0x30], al
call fcn.180015080
cmp eax, 1
je 0x180027a1b
mov eax, 0xc2
cmp eax, 0xc2
je 0x180027a06
cmp eax, 0x535c
je case.0x1800285a1.233
jmp 0x180027a0f
mov edi, 6
mov dword [rsp + 0x48], edi
add eax, 0x529a
cmp eax, 0xa534
jbe 0x1800279f2
mov r13, qword [rsp + 0x50]
mov ebx, 0x5e
mov edi, 0x636c
lea r15d, [rbx + 0x14]
lea r12d, [rbx + 1]
mov eax, ebx
sub eax, 0x5e
je 0x180027a74
sub eax, 0x17
je 0x180027a64
sub eax, 0x17
je 0x180027a5b
cmp eax, 0x17
jne 0x180027a7f
mov r8, r13
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.18002ef70
jmp 0x180027a7f
mov dword [rbp - 0x80], 0xa7025
jmp 0x180027a7f
mov word [rsp + 0x7b], r15w
mov dword [rsp + 0x7c], 0x20746165
jmp 0x180027a7f
mov word [rsp + 0x78], r12w
mov word [rsp + 0x79], di
add ebx, 0x17
cmp ebx, 0xba
jb 0x180027a32
mov edi, dword [rsp + 0x48]
mov r14d, dword [rsp + 0x60]
mov r15d, dword [rsp + 0x68]
mov r13, qword [rbp + 0x218]
mov r12, qword [rsp + 0x40]
mov r9, qword [rbp + 0x228]
dec r14d
mov dword [rsp + 0x60], r14d
mov r11d, 0
cmp r14d, 0x64
ja 0x180027950
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3a
je 0x180027b4d
sub eax, 1
je 0x180027aee
sub eax, 1
je 0x180027ae8
cmp eax, 1
jne 0x180027b1d
mov qword [r13], 0x17
jmp 0x180027b1d
mov qword [r13 + 8], r11
jmp 0x180027b1d
lea r9, [rsp + 0x68]
mov qword [rsp + 0x68], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
dec ebx
mov r11d, 0
cmp ebx, 0x39
ja 0x180027ac8
mov eax, 0x20
nop
cmp eax, 0x20
je 0x180027b76
cmp eax, 0xbf
je case.0x1800285a1.233
cmp eax, 0x15e
je case.0x18002765e.9
jmp 0x180027b7f
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x30]
xor r9d, r9d
mov byte [rsp + 0x30], 0x2d
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
jne 0x180027073
jmp case.0x18002765e.9
mov edi, 7
mov dword [rsp + 0x48], edi
add eax, 0x9f
cmp eax, 0x1fd
jb 0x180027b30
jmp 0x180027680
mov eax, 0x7c
cmp eax, 0x7c
je 0x180027bc0
cmp eax, 0x135
je 0x180027c19
cmp eax, 0x1ee
je 0x180027bb5
cmp eax, 0x2a7
je case.0x1800285a1.233
jmp 0x180027c19
mov edi, 1
mov dword [rsp + 0x48], edi
jmp 0x180027c19
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x180027be4.49
cdqe
movzx eax, byte [rdx + rax + 0x2a880]
mov ecx, dword [rdx + rax*4 + 0x2a878]
add rcx, rdx
jmp rcx
mov ebx, 0x8a
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x8a
je 0x180027c85
cmp eax, 1
jne 0x180027d0e
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0x7c
add eax, 0xb9
cmp eax, 0x360
jb 0x180027b95
mov r15d, 0xd1
mov eax, dword [rsp + 0x58]
lea rdx, [0x180000000]
mov r8, qword [rbp + 0x220]
dec r15d
mov r9, qword [rbp + 0x228]
xor r11d, r11d
cmp r15d, eax
ja 0x1800268b0
mov ecx, dword [rbp + 0x210]
mov r14d, ecx
cmp r14d, eax
jbe 0x180028558
lea eax, [r14 - 0xcc]
cmp eax, 0xe
ja case.default.0x180027c83
mov ecx, dword [rdx + rax*4 + 0x2a8b8]
add rcx, rdx
jmp rcx
cmp dword [r13 + 4], 0
jne 0x180027d06
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffc
jae 0x180027cfe
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x30]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x30], al
call fcn.180015080
cmp eax, 1
je 0x180027d06
mov eax, 0x90
cmp eax, 0x90
je 0x180027ce7
cmp eax, 0x1710
je case.0x1800285a1.233
jmp 0x180027cf0
mov edi, 6
mov dword [rsp + 0x48], edi
add eax, 0x1680
cmp eax, 0x2d00
jbe 0x180027cd3
jmp 0x180027d06
mov dword [r13 + 4], 1
mov dword [r13], 5
inc ebx
cmp ebx, 0x8c
jb 0x180027bf0
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0x7a
nop
cmp eax, 0x7a
je 0x180027d42
cmp eax, 0x4ad2
je case.0x1800285a1.233
jmp 0x180027d4b
mov edi, 7
mov dword [rsp + 0x48], edi
add eax, 0x4a58
cmp eax, 0x94b0
jbe 0x180027d30
jmp 0x180027c14
mov rax, qword [rsp + 0x40]
movzx r14d, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x30], r14b
mov r15d, 0xda
mov ecx, dword [rbp + 0x210]
mov r8, qword [rbp + 0x220]
lea rdx, [0x180000000]
mov r9, qword [rbp + 0x228]
inc r15d
xor r11d, r11d
jmp 0x18002857b
mov rax, qword [rsp + 0x40]
mov r15d, 0xdb
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
movzx eax, byte [rbp + 0x210]
mov byte [rsp + 0x30], al
jmp 0x180027d7e
mov r15, qword [rsp + 0x40]
movzx r14d, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x30], r14b
jmp 0x180028c90
mov rax, qword [rsp + 0x40]
movzx r14d, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x30], r14b
mov r15d, 0xde
jmp 0x180027d7e
mov rax, qword [rsp + 0x40]
movzx r14d, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x30], r14b
mov r15d, 0x93
mov eax, r15d
sub eax, 0x90
je case.0x1800285a1.233
sub eax, 1
je 0x180029a62
sub eax, 1
je 0x1800296d3
cmp eax, 1
jne 0x180029a67
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180027e7d.14
cdqe
movzx eax, byte [rdx + rax + 0x2a90c]
mov ecx, dword [rdx + rax*4 + 0x2a8f4]
add rcx, rdx
jmp rcx
mov rax, qword [rsp + 0x40]
movzx r14d, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x30], r14b
mov r15d, 0xe1
jmp 0x180027d7e
mov rax, qword [rsp + 0x40]
mov r15d, 0xe2
movzx r14d, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x30], r14b
jmp 0x180027d7e
mov rax, qword [rsp + 0x40]
mov r15d, 0xe3
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
movzx eax, byte [rbp + 0x210]
mov byte [rsp + 0x30], al
jmp 0x180027d7e
mov rax, qword [rsp + 0x40]
mov r15d, 0xe4
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
movzx eax, byte [rbp + 0x210]
mov byte [rsp + 0x30], al
jmp 0x180027d7e
movzx edx, byte [rbp + 0x210]
mov rax, qword [rsp + 0x40]
mov r12, qword [rsp + 0x40]
mov byte [rsp + 0x30], dl
lea rdx, [0x180000000]
mov qword [rsp + 0x40], rax
mov ecx, 0xcd
nop dword [rax]
mov eax, ecx
sub eax, 0xcd
je 0x180029300
sub eax, 0x4d
je 0x1800292f6
cmp eax, 0x4d
je case.0x1800285a1.233
jmp 0x1800293f0
mov rax, qword [rsp + 0x40]
movzx edx, byte [rbp + 0x210]
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x30], dl
mov r15d, 0xe7
jmp 0x180027d7e
mov eax, esi
jmp 0x1800268e8
mov r14d, 0xd7
jmp case.default.0x180027c83
mov dword [r13], r11d
mov rax, qword [r8 + 0x40]
test rax, rax
je 0x180027fb6
call rax
jmp 0x180027fb6
cmp byte [r9], 0x6c
jne case.0x180027518.49
mov r8, qword [rbp + 0x220]
inc ebx
mov r9, qword [rbp + 0x228]
mov r11d, 0
cmp ebx, 0xe1
jb 0x180026dc0
jmp case.default.0x180027c83
mov r14d, 0xd3
jmp case.default.0x180027c83
cmp byte [r9], 0x61
je 0x180028012
mov ecx, 0x123
mov eax, ecx
sub eax, 0x122
je case.0x1800285a1.233
cmp eax, 1
jne 0x180028008
lea edi, [rax + 6]
dec ecx
cmp ecx, 0x121
ja 0x180027ff3
mov dword [r13], 0xb
inc edx
cmp edx, 0xb6
jb 0x180026cd0
jmp case.default.0x180027c83
mov ecx, 0xfa
lea r14d, [rcx - 0x29]
mov eax, ecx
sub eax, 0xfa
je 0x180028056
sub eax, 1
je 0x18002804f
cmp eax, 1
je case.0x1800285a1.233
jmp 0x180028068
mov edi, 1
jmp 0x180028068
cmp byte [r9], 0x73
jne case.0x180027518.49
mov dword [r13], 0xd
inc ecx
cmp ecx, 0xfd
jb 0x180028036
jmp case.default.0x180027c83
mov eax, 0x111
nop dword [rax]
cmp eax, 0x111
je 0x1800280a8
cmp eax, 0x432f
je 0x18002809b
cmp eax, 0x854d
je case.0x1800285a1.233
jmp 0x1800280ff
mov edi, 1
mov r14d, 0xd9
jmp 0x1800280ff
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x1800280cc.49
cdqe
movzx eax, byte [rdx + rax + 0x2a98c]
mov ecx, dword [rdx + rax*4 + 0x2a984]
add rcx, rdx
jmp rcx
mov ebx, 0x5c
cmp ebx, 0x5c
je 0x18002811e
cmp ebx, 0x3af0
je 0x180028114
cmp ebx, 0x7584
jne 0x180028175
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0x111
add eax, 0x421e
cmp eax, 0xc65a
jbe 0x180028080
jmp case.default.0x180027c83
mov dword [r13], 1
jmp 0x180028175
cmp dword [r13 + 4], 0
jne 0x180028175
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffe
jae 0x18002816d
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x30]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x30], al
call fcn.180015080
cmp eax, 1
jne 0x180027073
jmp 0x180028175
mov dword [r13 + 4], 1
add ebx, 0x3a94
cmp ebx, 0xafbc
jbe 0x1800280d3
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0xef
nop word [rax + rax]
mov eax, ecx
sub eax, 0xef
je 0x1800281b4
cmp eax, 0x2b
je case.0x1800285a1.233
jmp 0x1800281b9
mov edi, 7
add ecx, 0x2b
cmp ecx, 0x145
jb 0x1800281a0
jmp 0x1800280fa
mov ebx, 0xf
mov r14d, 0xd5
cmp ebx, 0xf
je 0x18002820f
cmp ebx, 0x6f9
je 0x1800281fe
cmp ebx, 0xde3
je 0x1800281f7
cmp ebx, 0x14cd
je case.0x1800285a1.233
jmp 0x180028245
mov edi, 1
jmp 0x180028245
mov dword [r13], r11d
mov rax, qword [r8 + 0x30]
test rax, rax
je 0x180028245
call rax
jmp 0x180028245
cmp byte [r9], 0x65
je 0x180028245
mov eax, 0x8b
nop word [rax + rax]
cmp eax, 0x8b
je 0x180028234
cmp eax, 0x423e
je case.0x1800285a1.233
jmp 0x180028239
mov edi, 7
add eax, 0x41b3
cmp eax, 0x8366
jbe 0x180028220
mov r8, qword [rbp + 0x220]
add ebx, 0x6ea
mov r9, qword [rbp + 0x228]
mov r11d, 0
cmp ebx, 0x1ba8
jbe 0x1800281d4
jmp case.default.0x180027c83
mov ecx, 0xcb
lea r14d, [rcx + 0xd]
nop dword [rax]
cmp ecx, 0xcb
je 0x1800282ad
cmp ecx, 0x3782
je 0x18002829e
cmp ecx, 0x6e39
je case.0x1800285a1.233
jmp 0x1800282db
mov dword [r13], 8
mov edi, 1
jmp 0x1800282db
cmp byte [r9], 0x72
je 0x1800282db
mov eax, 0x50
cmp eax, 0x50
je 0x1800282ca
cmp eax, 0x2cb0
je case.0x1800285a1.233
jmp 0x1800282cf
mov edi, 7
add eax, 0x2c60
cmp eax, 0x58c0
jbe 0x1800282b8
add ecx, 0x36b7
cmp ecx, 0xa425
jbe 0x180028280
jmp case.default.0x180027c83
mov edx, 0x30
mov r14d, 0xcd
nop dword [rax]
mov eax, edx
sub eax, 0x30
je 0x180028326
sub eax, 0x60
je 0x180028317
cmp eax, 0x60
je case.0x1800285a1.233
jmp 0x180028355
mov dword [r13], 0x10
mov edi, 1
jmp 0x180028355
cmp byte [r9], 0x6c
je 0x180028355
mov ecx, 0x8f
mov eax, ecx
sub eax, 0x8f
je 0x180028345
cmp eax, 0x77
je case.0x1800285a1.233
jmp 0x18002834a
mov edi, 7
add ecx, 0x77
cmp ecx, 0x17d
jb 0x180028331
add edx, 0x60
cmp edx, 0x150
jb 0x180028300
jmp case.default.0x180027c83
mov ecx, 0xee
nop word [rax + rax]
cmp ecx, 0xee
je 0x180028395
cmp ecx, 0xadda
je 0x18002838e
cmp ecx, 0x15ac6
je case.0x1800285a1.233
jmp 0x1800283cd
mov edi, 1
jmp 0x1800283cd
cmp byte [r9], 0x75
je 0x1800283c5
mov eax, 0xa5
cmp eax, 0xa5
je 0x1800283b4
cmp eax, 0x5091
je case.0x1800285a1.233
jmp 0x1800283b9
mov edi, 7
add eax, 0x4fec
cmp eax, 0x9fd8
jbe 0x1800283a0
mov dword [r13], 9
add ecx, 0xacec
cmp ecx, 0x206c4
jbe 0x180028370
jmp case.default.0x180027c83
mov eax, 0xf2
lea r14d, [rax - 0x24]
nop dword [rax]
cmp eax, 0xf2
je 0x180028412
cmp eax, 0x8366
je 0x18002840b
cmp eax, 0x105da
je case.0x1800285a1.233
jmp 0x180028424
mov edi, 1
jmp 0x180028424
cmp byte [r9], 0x75
jne case.0x180027518.49
mov dword [r13], 0xf
add eax, 0x8274
cmp eax, 0x1875c
jbe 0x1800283f0
jmp case.default.0x180027c83
mov r14d, 0xd0
jmp case.default.0x180027c83
mov edx, 0x100
mov eax, edx
sub eax, 0x100
je 0x180028468
sub eax, 1
je 0x18002845e
cmp eax, 1
je 0x180026ce6
jmp 0x180028492
mov dword [r13], 0xc
jmp 0x180028492
cmp byte [r9], 0x6c
je 0x180028492
mov ecx, 0xf1
mov eax, ecx
sub eax, 0xf0
je case.0x1800285a1.233
cmp eax, 1
jne 0x180028488
lea edi, [rax + 6]
dec ecx
cmp ecx, 0xef
ja 0x180028473
inc edx
cmp edx, 0x103
jb 0x180028445
jmp case.default.0x180027c83
mov ebx, 0xd9
nop word [rax + rax]
mov eax, ebx
sub eax, 0xd6
je case.0x1800285a1.233
sub eax, 1
je 0x18002850d
sub eax, 1
je 0x1800284fc
cmp eax, 1
jne 0x180028512
cmp byte [r9], 0x65
je 0x180028512
mov eax, 0x6d
cmp eax, 0x6d
je 0x1800284e9
cmp eax, 0x2431
je case.0x1800285a1.233
jmp 0x1800284ee
mov edi, 7
add eax, 0x23c4
cmp eax, 0x4788
jbe 0x1800284d7
jmp 0x180028512
mov dword [r13], r11d
mov rax, qword [r8 + 0x38]
test rax, rax
je 0x180028512
call rax
jmp 0x180028512
mov edi, 1
mov r8, qword [rbp + 0x220]
dec ebx
mov r9, qword [rbp + 0x228]
mov r11d, 0
cmp ebx, 0xd5
ja 0x1800284b0
mov eax, dword [rsp + 0x58]
lea rdx, [0x180000000]
mov r8, qword [rbp + 0x220]
dec r14d
mov r9, qword [rbp + 0x228]
xor r11d, r11d
jmp 0x180027c60
mov rax, qword [rsp + 0x40]
mov r12, qword [rsp + 0x40]
mov ecx, dword [rbp + 0x210]
mov r15d, ecx
mov qword [rsp + 0x40], rax
movzx eax, byte [rbp + 0x210]
mov byte [rsp + 0x30], al
lea eax, [rcx + 0x10]
cmp r15d, eax
jae case.0x1800285a1.233
lea eax, [r15 - 0xda]
cmp eax, 0xf
ja case.default.0x1800285a1
mov ecx, dword [rdx + rax*4 + 0x2a9c4]
add rcx, rdx
jmp rcx
mov r15, qword [rbp + 0x220]
mov r14d, 0x118
mov eax, r14d
sub eax, 0x118
je 0x1800285d6
sub eax, 1
je 0x18002862b
sub eax, 1
je 0x1800285cf
cmp eax, 1
je case.0x1800285a1.233
jmp 0x180028631
mov edi, 1
jmp 0x180028631
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800285fa.14
cdqe
movzx eax, byte [rdx + rax + 0x2aa1c]
mov ecx, dword [rdx + rax*4 + 0x2aa04]
add rcx, rdx
jmp rcx
mov ebx, 0x100
cmp ebx, 0x100
je 0x18002864c
cmp ebx, 0x1a8
jne 0x18002869e
mov dword [r13], 0x12
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov r14d, 0x119
inc r14d
cmp r14d, 0x11c
jb 0x1800285b0
mov r15d, 0xdb
jmp 0x180027d7e
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
xor r9d, r9d
mov byte [rsp + 0x38], 0x2e
mov r8, rax
lea rcx, [rsp + 0x38]
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
jne 0x180027073
add ebx, 0xa8
cmp ebx, 0x250
jb 0x180028601
mov ebx, 0x10b
cmp ebx, 0x10b
je 0x1800286fb
cmp ebx, 0xb89b
je 0x1800286d3
cmp ebx, 0x1702b
je 0x18002861d
jmp 0x180028716
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
xor eax, eax
mov dword [r13], eax
jmp 0x180028716
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180027073
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x180028716
mov rcx, qword [rcx]
call rax
add ebx, 0xb790
cmp ebx, 0x226b0
jbe 0x1800286b5
mov ebx, 0xb5
nop dword [rax]
cmp ebx, 0xb5
je 0x1800287e2
cmp ebx, 0x179
je 0x1800287ce
cmp ebx, 0x23d
je 0x180028765
cmp ebx, 0x301
jne 0x18002879c
mov dword [r13], 0x1a
jmp 0x18002861d
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x180028795
call qword [rax + 8]
mov r15, qword [rbp + 0x220]
add ebx, 0xc4
cmp ebx, 0x3c5
jb 0x180028730
mov ebx, 0xbc
nop
cmp ebx, 0xbc
je 0x180028888
cmp ebx, 0x47f8
je 0x1800287ef
cmp ebx, 0x8f34
je 0x180028758
jmp 0x180028826
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x18002879c
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x18002879c
cmp qword [r13 + 8], 0
je 0x180027073
jmp 0x18002879c
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x18002881f
call qword [rax + 0x18]
mov r15, qword [rbp + 0x220]
add ebx, 0x473c
cmp ebx, 0xd5b4
jbe 0x1800287b0
mov ebx, 0x121
nop dword [rax]
mov eax, ebx
sub eax, 0x11e
je 0x18002861d
sub eax, 1
je 0x1800288f8
sub eax, 1
je 0x1800288d6
cmp eax, 1
jne 0x180028917
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180027073
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x180028917
mov rcx, qword [rcx]
call rax
jmp 0x180028917
mov rcx, qword [r13 + 8]
test rcx, rcx
jne 0x1800288bf
mov edx, 0xcb
nop word [rax + rax]
mov eax, edx
sub eax, 0xca
je case.0x1800285a1.233
cmp eax, 1
jne 0x1800288b5
lea edi, [rax + 5]
dec edx
cmp edx, 0xc9
ja 0x1800288a0
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x180028826
mov rcx, qword [rcx]
call rax
jmp 0x180028826
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x180028917
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x180028908
call qword [rax + 0x48]
mov r15, qword [rbp + 0x220]
mov dword [r13], 0x1b
dec ebx
cmp ebx, 0x11d
ja 0x180028840
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0x81
nop dword [rax + rax]
cmp eax, 0x81
je case.0x180027518.49
cmp eax, 0x13a
je 0x18002862b
add eax, 0xb9
cmp eax, 0x1f3
jb 0x180028940
jmp 0x180028631
mov ecx, 0x22
nop dword [rax]
mov eax, ecx
sub eax, 0x20
je 0x180026ce6
sub eax, 1
je 0x180028b13
cmp eax, 1
jne 0x180028b19
movsx eax, byte [r9]
add eax, 0xffffffd5
cmp eax, 0xe
ja case.0x1800289a9.44
cdqe
mov ecx, dword [rdx + rax*4 + 0x2aa94]
add rcx, rdx
jmp rcx
mov ebx, 0x45
mov eax, ebx
sub eax, 0x45
je 0x180028a26
sub eax, 1
je 0x1800289c7
cmp eax, 1
je 0x180028a55
jmp 0x180028a2a
movzx eax, byte [r9]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
je 0x180028a15
mov eax, 0x9c
nop
cmp eax, 0x9c
je 0x180028a04
cmp eax, 0x2db4
je case.0x1800285a1.233
jmp 0x180028a09
mov edi, 6
add eax, 0x2d18
cmp eax, 0x5a30
jbe 0x1800289f0
mov r9, qword [rbp + 0x228]
mov dword [r13], 0x16
jmp 0x180028a2a
mov dword [r13 + 4], r11d
inc ebx
mov r11d, 0
cmp ebx, 0x48
jb 0x1800289b0
mov ebx, 0xe5
mov eax, ebx
sub eax, 0xe5
je 0x180028a66
cmp eax, 0x5b
jne 0x180028ac5
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0x22
jmp 0x180028b19
cmp dword [r13 + 4], 0
jne 0x180028abd
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffe
jae 0x180028ab5
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
jne 0x180027073
jmp 0x180028abd
mov dword [r13 + 4], 1
mov dword [r13], 0x15
add ebx, 0x5b
cmp ebx, 0x19b
jb 0x180028a40
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0xac
cmp eax, 0xac
je 0x180028afb
cmp eax, 0x6b8
je case.0x1800285a1.233
jmp 0x180028b00
mov edi, 7
add eax, 0x60c
cmp eax, 0xc18
jbe 0x180028ae7
mov ecx, 0x22
jmp 0x180028b19
mov r15d, 0xdf
dec ecx
mov r11d, 0
cmp ecx, 0x1f
ja 0x180028970
jmp 0x180027d7e
mov r14d, 0x94
mov eax, r14d
sub eax, 0x94
je 0x180028b56
sub eax, 1
je 0x180028c6c
cmp eax, 1
je 0x180026ce6
jmp 0x180028c76
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x180028b72
cdqe
mov ecx, dword [rdx + rax*4 + 0x2aad0]
add rcx, rdx
jmp rcx
mov ebx, 0x11d
nop dword [rax]
mov eax, ebx
sub eax, 0x11c
je 0x180028c5e
cmp eax, 1
jne 0x180028c19
cmp dword [r13 + 4], 0
jne 0x180028c11
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xffffffffffffffff
jae 0x180028c09
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
je 0x180028c11
mov eax, 0x19
cmp eax, 0x19
je 0x180028bf6
cmp eax, 0xcfd
je case.0x1800285a1.233
jmp 0x180028bfb
mov edi, 6
add eax, 0xce4
cmp eax, 0x19c8
jbe 0x180028be4
jmp 0x180028c11
mov dword [r13 + 4], 1
mov dword [r13], 0x13
dec ebx
cmp ebx, 0x11b
ja 0x180028b80
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0xc8
nop word [rax + rax]
mov eax, ecx
sub eax, 0xc8
je case.0x180027518.49
cmp eax, 1
je 0x180028c6c
inc ecx
cmp ecx, 0xca
jb 0x180028c40
jmp 0x180028c76
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov r14d, 0x95
lea r15d, [r14 + 0x47]
inc r14d
cmp r14d, 0x97
jb 0x180028b35
jmp 0x180027d7e
mov r15, qword [rsp + 0x40]
mov eax, 0x63
cmp eax, 0x63
je 0x180028cbb
cmp eax, 0x4284
je 0x180028cb1
cmp eax, 0x84a5
je case.0x1800285a1.233
jmp 0x1800292cf
mov edi, 1
jmp 0x1800292cf
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180028cdf.15
cdqe
movzx eax, byte [rdx + rax + 0x2ab14]
mov ecx, dword [rdx + rax*4 + 0x2aaf8]
add rcx, rdx
jmp rcx
mov eax, 0x94
cmp eax, 0x94
je 0x180028d22
add eax, 0x92
cmp eax, 0x126
jb 0x180028ce6
mov ebx, 0x7f
nop
cmp ebx, 0x7f
je 0x180028d8f
cmp ebx, 0x184f
je 0x180028d85
cmp ebx, 0x301f
je 0x1800292c3
jmp 0x180028de6
cmp dword [r13 + 4], 0
jne 0x1800292c3
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xffffffffffffffff
jae 0x180028d78
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
jne 0x180027073
jmp 0x1800292c3
mov dword [r13 + 4], 1
jmp 0x1800292c3
mov dword [r13], 0x14
jmp 0x180028de6
movzx eax, byte [r9]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
je 0x180028ddf
mov ecx, 0xfc
nop word [rax + rax]
mov eax, ecx
sub eax, 0xfb
je case.0x1800285a1.233
cmp eax, 1
jne 0x180028dd5
lea edi, [rax + 5]
dec ecx
cmp ecx, 0xfa
ja 0x180028dc0
mov r9, qword [rbp + 0x228]
add ebx, 0x17d0
cmp ebx, 0x4770
jbe 0x180028d00
mov ebx, 0x24
nop dword [rax]
cmp ebx, 0x24
je 0x180028e66
cmp ebx, 0xad
je 0x180028e2b
cmp ebx, 0x136
je 0x180028e23
cmp ebx, 0x1bf
je 0x1800292c3
jmp 0x180028e71
xor eax, eax
mov dword [r13], eax
jmp 0x180028e71
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x180028e44
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x180028e71
cmp qword [r13 + 8], 0
je 0x180027073
add ebx, 0x89
cmp ebx, 0x248
jb 0x180028e00
mov r14d, 0x71
nop word [rax + rax]
cmp r14d, 0x3f5
ja 0x180028fd8
je 0x180028fbf
cmp r14d, 0x71
je 0x180028fb5
cmp r14d, 0x125
je 0x180028f7c
cmp r14d, 0x1d9
je 0x180028f48
cmp r14d, 0x28d
je 0x180028f37
cmp r14d, 0x341
jne 0x18002905b
test r12, r12
je 0x180028f12
mov ebx, 0x96
mov eax, ebx
sub eax, 0x95
je 0x180028f03
cmp eax, 1
jne 0x180028f08
mov rdx, r12
mov rcx, r15
call qword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x180028f08
xor eax, eax
mov r12d, eax
dec ebx
cmp ebx, 0x94
ja 0x180028ee7
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x18002905b
mov rcx, r15
call qword [sym.imp.USER32.dll_GetDC]
mov r12, rax
jmp 0x18002905b
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r15, rax
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x220]
mov rdx, qword [rax + 0x28]
test rdx, rdx
je 0x18002905b
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rdx
jmp 0x18002905b
cmp qword [r13 + 8], 0
jne 0x180028faa
mov ecx, 0x1a
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x19
je case.0x1800285a1.233
cmp eax, 1
jne 0x180028fa3
lea edi, [rax + 5]
dec ecx
cmp ecx, 0x18
ja 0x180028f90
xor eax, eax
mov qword [rbp - 0x70], rax
jmp 0x18002905b
mov byte [rsp + 0x30], 1
jmp 0x18002905b
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x18002905b
call qword [rax + 8]
jmp 0x18002905b
cmp r14d, 0x4a9
je 0x18002904f
cmp r14d, 0x55d
je 0x180029033
cmp r14d, 0x611
je 0x180029002
cmp r14d, 0x6c5
je 0x1800292c3
jmp 0x18002905b
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x30]
cmp dword [rsp + 0x58], ecx
cmovne ecx, eax
mov byte [rsp + 0x30], cl
test cl, cl
je 0x18002905b
mov r8d, dword [rsp + 0x74]
lea r9, [rsp + 0x78]
mov edx, dword [rsp + 0x70]
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetViewportExtEx]
jmp 0x18002905b
lea rdx, [rsp + 0x70]
mov dword [r13], 0x1a
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetViewportExtEx]
mov dword [rsp + 0x58], eax
jmp 0x18002905b
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
add r14d, 0xb4
cmp r14d, 0x779
jb 0x180028e90
mov r15d, 0x32
nop word [rax + rax]
mov eax, r15d
sub eax, 0x32
je 0x180029111
sub eax, 1
je 0x1800290e0
sub eax, 1
je 0x1800290c4
sub eax, 1
je 0x1800290a9
cmp eax, 1
je 0x1800292c3
jmp 0x1800291cc
mov edx, dword [rsp + 0x68]
lea rcx, [rbp - 0x68]
mov dword [r13], 0x1a
call qword [sym.imp.ADVAPI32.dll_EncryptionDisable]
jmp 0x1800291cc
mov r14, qword [rbp + 0x220]
cmp qword [r14], 0
je 0x1800290d5
call qword [r14 + 0x18]
xor eax, eax
mov dword [rsp + 0x68], eax
jmp 0x1800291cc
mov eax, dword [0x18004ce48]
movups xmm0, xmmword [str.NameDirectory_]
mov dword [rbp - 0x50], eax
movzx eax, word [0x18004ce4c]
movsd xmm1, qword [0x18004ce40]
movups xmmword [rbp - 0x68], xmm0
mov word [rbp - 0x4c], ax
movsd qword [rbp - 0x58], xmm1
jmp 0x1800291cc
mov r14, qword [rbp + 0x220]
cmp qword [r14 + 0x28], 0
je 0x180029183
mov ebx, 0x5b
cmp ebx, 0x5b
je 0x180029168
cmp ebx, 0x19f3
je 0x18002915b
cmp ebx, 0x338b
jne 0x180029173
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x180029173
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call qword [r14 + 0x28]
jmp 0x180029173
cmp qword [r13 + 8], 0
je 0x180027073
add ebx, 0x1998
cmp ebx, 0x4cc8
jbe 0x180029124
jmp 0x1800291cc
mov r14d, 0x5a
nop dword [rax]
cmp r14d, 0x5a
jne 0x1800291bc
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
xor eax, eax
mov qword [r13 + 8], rax
add r14d, 0x3d2c
cmp r14d, 0x3d2c
jbe 0x180029190
inc r15d
cmp r15d, 0x37
jb 0x180029080
mov ebx, 0xde
nop
mov eax, ebx
sub eax, 0xde
je 0x18002925f
sub eax, 1
je 0x180029244
sub eax, 1
je 0x180029222
sub eax, 1
je 0x18002920e
cmp eax, 1
jne 0x180029294
mov dword [r13], 0x1b
jmp 0x1800292c3
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x180029294
call rax
jmp 0x180029294
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x180029294
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x180029294
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x180029294
cmp qword [r13 + 8], 0
jne 0x180029294
mov ecx, 0x88
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x88
je 0x180029284
cmp eax, 0x78
je case.0x1800285a1.233
jmp 0x180029289
mov edi, 6
add ecx, 0x78
cmp ecx, 0x178
jb 0x180029270
inc ebx
cmp ebx, 0xe3
jb 0x1800291e0
mov ecx, 0xe8
mov eax, ecx
sub eax, 0xe7
je 0x1800292c3
cmp eax, 1
je case.0x180027518.49
dec ecx
cmp ecx, 0xe6
ja 0x1800292a7
mov eax, 0x63
lea rdx, [0x180000000]
mov r15, qword [rsp + 0x40]
add eax, 0x4221
mov r9, qword [rbp + 0x228]
cmp eax, 0xc663
jbe 0x180028c95
mov r15d, 0xdd
jmp 0x180027d7e
mov edi, 1
jmp 0x1800293f0
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180029324.13
cdqe
movzx eax, byte [rdx + rax + 0x2aba0]
mov ecx, dword [rdx + rax*4 + 0x2ab8c]
add rcx, rdx
jmp rcx
mov rax, qword [r8 + 8]
test rax, rax
je case.0x180029324.9
call rax
jmp 0x1800293e4
mov eax, 0x12a
nop dword [rax]
cmp eax, 0x12a
je 0x180029382
add eax, 0x8d
cmp eax, 0x1b7
jb 0x180029350
mov ebx, 0x121
cmp ebx, 0x121
je 0x180029399
cmp ebx, 0x3ab4
je 0x18002938f
cmp ebx, 0x7447
je 0x1800293e4
jmp 0x1800293a4
mov rax, qword [r8 + 0x18]
test rax, rax
je case.0x180029324.9
call rax
jmp 0x1800293e4
mov dword [r13], 0x1b
jmp 0x1800293a4
mov rax, qword [r8 + 0x50]
test rax, rax
je 0x1800293a4
call rax
mov r8, qword [rbp + 0x220]
add ebx, 0x3993
cmp ebx, 0xacb9
jbe 0x180029368
mov ecx, 0xfa
nop
mov eax, ecx
sub eax, 0xf8
je 0x1800293e4
sub eax, 1
je case.0x1800285a1.233
cmp eax, 1
jne 0x1800293da
lea edi, [rax + 6]
dec ecx
cmp ecx, 0xf7
ja 0x1800293c0
lea rdx, [0x180000000]
mov ecx, 0xcd
mov r8, qword [rbp + 0x220]
add ecx, 0x4d
mov r9, qword [rbp + 0x228]
cmp ecx, 0x1b4
jb 0x180027f40
mov r15d, 0xe6
jmp 0x180027d7e
mov ecx, 0xbb
nop dword [rax]
mov eax, ecx
sub eax, 0xbb
je 0x180029446
sub eax, 1
je 0x180029439
cmp eax, 1
je case.0x1800285a1.233
jmp 0x1800294b7
mov edi, 1
mov r15d, 0xe5
jmp 0x1800294b7
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002946a.12
cdqe
movzx eax, byte [rdx + rax + 0x2ac28]
mov ecx, dword [rdx + rax*4 + 0x2ac18]
add rcx, rdx
jmp rcx
mov ecx, 0x19
mov eax, ecx
sub eax, 0x18
je case.0x18002946a.9
cmp eax, 1
jne 0x180029485
mov qword [r13 + 8], r11
mov dword [r13], eax
dec ecx
cmp ecx, 0x17
ja 0x180029471
mov ebx, 0xca
mov eax, ebx
sub eax, 0xca
je 0x1800294e1
sub eax, 0x33
je 0x1800294d7
cmp eax, 0x33
jne 0x1800294ec
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0xbb
mov r8, qword [rbp + 0x220]
inc ecx
mov r11d, 0
cmp ecx, 0xbe
jb 0x180029420
jmp 0x180027d7e
mov dword [r13], 0x1a
jmp 0x1800294ec
mov rax, qword [r8 + 8]
test rax, rax
je 0x1800294ec
call rax
mov r8, qword [rbp + 0x220]
add ebx, 0x33
cmp ebx, 0x163
jb 0x180029491
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0xd6
cmp eax, 0xd6
je 0x180029525
cmp eax, 0x93f6
je case.0x1800285a1.233
jmp 0x18002952a
mov edi, 7
add eax, 0x9320
cmp eax, 0x12640
jbe 0x180029511
jmp case.0x18002946a.9
mov ecx, 0xfd
mov eax, ecx
sub eax, 0xfb
je 0x180026ce6
sub eax, 1
je 0x180029643
cmp eax, 1
jne 0x180029643
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18002957b
cdqe
mov ecx, dword [rdx + rax*4 + 0x2aca0]
add rcx, rdx
jmp rcx
mov ebx, 0xb8
mov eax, ebx
sub eax, 0xb6
je 0x180029630
sub eax, 1
je 0x1800295e9
cmp eax, 1
jne 0x1800295f1
cmp dword [r13 + 4], 0
jne 0x1800295f1
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffe
jae 0x1800295df
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
jmp 0x1800295f1
mov dword [r13 + 4], 1
jmp 0x1800295f1
mov dword [r13], 0x15
dec ebx
cmp ebx, 0xb5
ja 0x180029582
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0xe7
nop
cmp eax, 0xe7
je case.0x180027518.49
cmp eax, 0x1776
je 0x18002963e
add eax, 0x168f
cmp eax, 0x2d1e
jbe 0x180029610
jmp 0x18002963e
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0xfd
dec ecx
cmp ecx, 0xfa
ja 0x180029540
mov r15d, 0xe2
jmp 0x180027d7e
cmp dword [r13 + 4], 0
jne 0x1800296d3
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xfffffffffffffffe
jae 0x1800296de
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
je 0x1800296d3
mov ecx, 0xe3
nop
mov eax, ecx
sub eax, 0xe3
je 0x1800296c4
cmp eax, 1
je case.0x1800285a1.233
jmp 0x1800296c9
mov edi, 6
inc ecx
cmp ecx, 0xe5
jb 0x1800296b0
mov r15d, 0x92
jmp 0x180029a67
mov dword [r13 + 4], 1
mov r15d, 0x92
jmp 0x180029a67
mov ebx, 0x123
cmp ebx, 0x123
je 0x180029753
cmp ebx, 0xc261
je 0x18002971f
cmp ebx, 0x1839f
jne 0x18002975e
xor eax, eax
mov r15d, 0x92
mov dword [r13], eax
jmp 0x180029a67
mov rax, qword [r8 + 0x28]
test rax, rax
je 0x180029731
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x18002975e
cmp qword [r13 + 8], 0
je 0x180027073
add ebx, 0xc13e
cmp ebx, 0x243ba
ja case.0x180027e7d.13
mov r8, qword [rbp + 0x220]
jmp 0x1800296f6
mov r14d, 0xad
nop dword [rax + rax]
mov eax, r14d
sub eax, 0xad
je 0x1800297f9
sub eax, 1
je 0x1800297bc
sub eax, 1
je 0x1800297a2
cmp eax, 1
je 0x1800296d3
jmp 0x18002982f
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x1800297b2
call qword [rax + 8]
mov dword [r13], 0x1a
jmp 0x18002982f
mov rax, qword [rbp + 0x220]
lea rbx, [r13 + 8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x1800297d8
mov rcx, qword [rbx]
mov rcx, qword [rcx]
call rax
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0xb5
mov rcx, rbx
call fcn.18002af70
jmp 0x18002982f
cmp qword [r13 + 8], 0
jne 0x18002982f
mov ecx, 0x119
nop word [rax + rax]
mov eax, ecx
sub eax, 0x118
je case.0x1800285a1.233
cmp eax, 1
jne 0x180029825
lea edi, [rax + 5]
dec ecx
cmp ecx, 0x117
ja 0x180029810
inc r14d
cmp r14d, 0xb1
jb 0x180029780
mov r14d, 0xd9
mov eax, r14d
sub eax, 0xd9
je 0x18002986f
sub eax, 0x4a
je 0x180029862
cmp eax, 0x4a
je 0x1800296d3
jmp 0x180029932
mov dword [r13], 0x1a
jmp 0x180029932
mov rdx, qword [rbp + 0x220]
cmp qword [rdx + 0x28], 0
je 0x1800298f5
mov ebx, 0xe2
mov eax, ebx
sub eax, 0xe2
je 0x1800298b9
sub eax, 1
je 0x18002989d
cmp eax, 1
jne 0x1800298e9
xor eax, eax
mov qword [r13 + 8], rax
jmp 0x1800298e9
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call qword [rdx + 0x28]
mov rcx, qword [r13 + 8]
call fcn.180035574
mov rdx, qword [rbp + 0x220]
jmp 0x1800298e9
cmp qword [r13 + 8], 0
jne 0x1800298e9
mov ecx, 0xa6
mov eax, ecx
sub eax, 0xa6
je 0x1800298d9
cmp eax, 0x1f
je case.0x1800285a1.233
jmp 0x1800298de
mov edi, 6
add ecx, 0x1f
cmp ecx, 0xe4
jb 0x1800298c5
inc ebx
cmp ebx, 0xe5
jb 0x180029882
jmp 0x180029922
mov ebx, 0x36
nop word [rax + rax]
cmp ebx, 0x36
jne 0x180029914
mov rcx, qword [r13 + 8]
call fcn.180035574
xor eax, eax
mov qword [r13 + 8], rax
add ebx, 0x125a
cmp ebx, 0x125a
jbe 0x180029900
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x180029932
call qword [rax + 0x18]
add r14d, 0x4a
cmp r14d, 0x1b7
jb 0x180029845
mov r14d, 0xde
nop dword [rax]
cmp r14d, 0xde
je 0x180029981
cmp r14d, 0x534
je 0x180029974
cmp r14d, 0x98a
je 0x1800296d3
jmp 0x180029a22
mov dword [r13], 0x1b
jmp 0x180029a22
mov rax, qword [rbp + 0x220]
cmp qword [rax + 0x28], 0
je 0x1800299df
mov ebx, 0xd2
cmp ebx, 0xd2
je 0x1800299b5
cmp ebx, 0x92d6
jne 0x1800299cf
mov rcx, qword [r13 + 8]
call fcn.180035574
xor eax, eax
mov qword [r13 + 8], rax
jmp 0x1800299c8
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180027073
mov rcx, qword [rcx]
call qword [rax + 0x28]
mov rax, qword [rbp + 0x220]
add ebx, 0x9204
cmp ebx, 0x12408
jbe 0x180029994
jmp 0x180029a10
mov ebx, 0x28
cmp ebx, 0x28
je 0x1800299f9
cmp ebx, 0x780
jne 0x180029a02
xor eax, eax
mov qword [r13 + 8], rax
jmp 0x180029a02
mov rcx, qword [r13 + 8]
call fcn.180035574
add ebx, 0x758
cmp ebx, 0xeb0
jbe 0x1800299e4
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x180029a22
call rax
add r14d, 0x456
cmp r14d, 0xd02
jbe 0x180029950
mov eax, 0x4a
nop dword [rax + rax]
cmp eax, 0x4a
je case.0x180027518.49
cmp eax, 0x1d32
je 0x1800296d3
add eax, 0x1ce8
cmp eax, 0x39d0
jbe 0x180029a40
jmp 0x180029a67
mov edi, 1
mov r8, qword [rbp + 0x220]
lea rdx, [0x180000000]
mov r9, qword [rbp + 0x228]
dec r15d
cmp r15d, 0x8f
ja 0x180027e30
mov r15d, 0xe0
jmp 0x180027d7e
mov r14d, 0x27
nop dword [rax]
mov eax, r14d
sub eax, 0x24
je case.0x1800285a1.233
sub eax, 1
je 0x180029e82
sub eax, 1
je case.0x180029ae7.9
cmp eax, 1
jne 0x180029e8d
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.0x180029ae7.19
cdqe
movzx eax, byte [rdx + rax + 0x2acf4]
mov ecx, dword [rdx + rax*4 + 0x2acc8]
add rcx, rdx
jmp rcx
mov ecx, 0xa5
nop
mov eax, ecx
sub eax, 0xa4
je case.0x180029ae7.9
cmp eax, 1
jne 0x180029b06
mov dword [r13], eax
mov qword [r13 + 8], r11
dec ecx
cmp ecx, 0xa3
ja 0x180029af0
mov ebx, 0xec
cmp ebx, 0xec
je 0x180029b42
cmp ebx, 0x199
je 0x180029b38
cmp ebx, 0x246
jne 0x180029b4c
mov r14d, 0x26
jmp 0x180029e8d
mov dword [r13], 0x19
jmp 0x180029b4c
mov rax, qword [r8]
test rax, rax
je 0x180029b4c
call rax
mov r8, qword [rbp + 0x220]
add ebx, 0xad
cmp ebx, 0x2f3
jb 0x180029b15
mov eax, 0xe7
cmp eax, 0xe7
je 0x180029b8c
add eax, 0x7380
cmp eax, 0x7380
jbe 0x180029b66
mov eax, 0x17
nop
cmp eax, 0x17
je 0x180029ba9
cmp eax, 0x44
je case.0x180029ae7.9
jmp 0x180029bb1
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x10]
test rax, rax
je case.0x180029ae7.9
call rax
mov r14d, 0x26
jmp 0x180029e8d
mov dword [r13], 7
add eax, 0x2d
cmp eax, 0x71
jb 0x180029b80
mov ecx, 0x11b
nop
mov eax, ecx
sub eax, 0x11b
je 0x180029bd4
cmp eax, 0x1a
je case.0x180029ae7.9
jmp 0x180029bd8
mov dword [r13], esi
add ecx, 0x1a
cmp ecx, 0x14f
jb 0x180029bc0
mov eax, 0x52
cmp eax, 0x52
je 0x180029bfa
cmp eax, 0x1e1c
je case.0x180029ae7.9
jmp 0x180029c02
mov dword [r13], 0xe
add eax, 0x1dca
cmp eax, 0x3b94
jbe 0x180029be8
mov ebx, 0x46
cmp ebx, 0x46
je 0x180029c54
cmp ebx, 0xe0
je 0x180029c2e
cmp ebx, 0x17a
je case.0x180029ae7.9
jmp 0x180029c8b
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x38]
xor r9d, r9d
mov byte [rsp + 0x38], 0x30
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
jne 0x180027073
jmp 0x180029c8b
lea r9, [rsp + 0x50]
mov dword [r13], 0x11
xor r8d, r8d
mov qword [rsp + 0x50], 5
xor edx, edx
mov dword [rsp + 0x20], 0x75
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
add ebx, 0x9a
cmp ebx, 0x214
jb 0x180029c13
mov ebx, 0x91
cmp ebx, 0x91
je 0x180029d0b
cmp ebx, 0x41b4
jne 0x180029d61
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
je case.0x180029ae7.9
mov eax, 0xa7
nop dword [rax + rax]
cmp eax, 0xa7
je 0x180029da0
cmp eax, 0x3ab6
je case.0x1800285a1.233
jmp 0x180029da5
lea r9, [rsp + 0x50]
mov dword [r13], 0x18
xor r8d, r8d
mov qword [rsp + 0x50], 5
xor edx, edx
mov dword [rsp + 0x20], 0x75
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
jne 0x180029d61
mov ecx, 0x6c
mov eax, ecx
sub eax, 0x6c
je 0x180029d55
cmp eax, 1
je case.0x1800285a1.233
jmp 0x180029d5a
mov edi, 6
inc ecx
cmp ecx, 0x6e
jb 0x180029d43
add ebx, 0x4123
cmp ebx, 0x8246
jbe 0x180029ca2
mov ebx, 0x84
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x84
je 0x180029e2f
sub eax, 1
je 0x180029dc0
cmp eax, 1
je case.0x180029ae7.9
jmp 0x180029e37
mov edi, 6
add eax, 0x3a0f
cmp eax, 0x741e
jbe 0x180029cf0
mov r14d, 0x26
jmp 0x180029e8d
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], 8
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
xor r9d, r9d
mov byte [rsp + 0x38], 0x2d
mov r8, rax
lea rcx, [rsp + 0x38]
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
je 0x180029e37
mov ecx, 0x3e
mov eax, ecx
sub eax, 0x3d
je case.0x1800285a1.233
cmp eax, 1
jne 0x180029e26
lea edi, [rax + 5]
dec ecx
cmp ecx, 0x3c
ja 0x180029e13
jmp 0x180029e37
mov dword [r13], 0x17
inc ebx
cmp ebx, 0x87
jb 0x180029d80
mov eax, 0xc2
nop word [rax + rax]
cmp eax, 0xc2
je 0x180029e6f
cmp eax, 0x189
je case.0x1800285a1.233
cmp eax, 0x250
je case.0x180029ae7.9
jmp 0x180029e74
mov edi, 7
add eax, 0xc7
cmp eax, 0x317
jb 0x180029e50
jmp 0x180029e8d
mov edi, 1
mov r15d, 0xe8
mov r8, qword [rbp + 0x220]
lea rdx, [0x180000000]
mov r9, qword [rbp + 0x228]
dec r14d
mov r11d, 0
cmp r14d, 0x23
ja 0x180029aa0
mov edi, esi
jmp 0x180027d7e
mov ecx, 0x71
mov eax, ecx
sub eax, 0x71
je 0x180029edf
sub eax, 0x14
je 0x180029ed8
cmp eax, 0x14
je case.0x1800285a1.233
jmp 0x180029f21
mov edi, 1
jmp 0x180029f21
movsx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x180029efb
cdqe
mov ecx, dword [rdx + rax*4 + 0x2ad68]
add rcx, rdx
jmp rcx
mov ebx, 0xe0
mov eax, ebx
sub eax, 0xe0
je 0x180029f41
sub eax, 1
je 0x180029f37
cmp eax, 1
jne 0x180029f66
lea rdx, [0x180000000]
mov ecx, 0x71
add ecx, 0x14
cmp ecx, 0xad
jb 0x180029ec1
mov r15d, 0xe3
jmp 0x180027d7e
mov dword [r13], 0x11
jmp 0x180029f66
movzx eax, byte [r9]
lea rcx, [rsp + 0x38]
mov r8, qword [r13 + 8]
xor r9d, r9d
mov edx, 0xfd
mov byte [rsp + 0x38], al
call fcn.180015080
mov r9, qword [rbp + 0x228]
inc ebx
cmp ebx, 0xe3
jb 0x180029f02
mov r14d, 0xb4
mov eax, r14d
sub eax, 0xb4
je 0x180029f9d
cmp eax, 1
jne 0x18002a050
mov r9, qword [rbp + 0x228]
mov dword [r13], 0x18
jmp 0x180029f15
cmp dword [r13 + 4], 0
jne 0x18002a050
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xffffffffffffffff
jae 0x18002a050
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
mov r8, rax
test rax, rax
jne 0x18002a023
mov ecx, 0xdd
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xdd
je 0x18002a014
cmp eax, 1
je case.0x1800285a1.233
jmp 0x18002a019
mov edi, 6
inc ecx
cmp ecx, 0xdf
jb 0x18002a000
mov rax, qword [rbp + 0x228]
lea rcx, [rsp + 0x38]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rsp + 0x38], al
call fcn.180015080
cmp eax, 1
jne 0x180027073
mov dword [r13 + 4], eax
inc r14d
cmp r14d, 0xb6
jb 0x180029f76
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov eax, 0x31
cmp eax, 0x31
je case.0x180027518.49
cmp eax, 0x1d49
je 0x180029f1c
add eax, 0x1d18
cmp eax, 0x3a30
jbe 0x18002a073
jmp 0x180029f1c
mov r15d, 0x61
nop
mov eax, r15d
sub eax, 0x61
je 0x18002a0c4
sub eax, 1
je 0x18002a111
sub eax, 1
je 0x18002a0bd
cmp eax, 1
je case.0x1800285a1.233
jmp 0x18002a117
mov edi, 1
jmp 0x18002a117
movsx eax, byte [r9]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002a0e8.16
cdqe
movzx eax, byte [rdx + rax + 0x2adb0]
mov ecx, dword [rdx + rax*4 + 0x2ad90]
add rcx, rdx
jmp rcx
mov r14d, 0xe4
mov eax, r14d
sub eax, 0xe4
je 0x18002a12b
cmp eax, 0x2a
jne 0x18002a206
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov r15d, 0x62
inc r15d
cmp r15d, 0x65
jb 0x18002a0a0
mov r15d, 0xe4
jmp 0x180027d7e
cmp dword [r13 + 4], 0
jne 0x18002a206
mov r9, qword [r13 + 8]
xor r8d, r8d
xor edx, edx
mov ecx, 0x125
call fcn.180020200
cmp rax, 0xffffffffffffffff
jae 0x18002a1fe
mov ebx, 0x7d
cmp ebx, 0x7d
je 0x18002a1bb
cmp ebx, 0x113
jne 0x18002a1ea
mov rax, qword [rbp + 0x228]
lea edx, [rbx - 0x16]
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x60]
xor r9d, r9d
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.180015080
cmp eax, 1
je 0x18002a1ea
mov ecx, 0xdb
mov eax, ecx
sub eax, 0xdb
je 0x18002a1a9
cmp eax, 8
je case.0x1800285a1.233
jmp 0x18002a1ae
mov edi, 6
add ecx, 8
cmp ecx, 0xeb
jb 0x18002a195
jmp 0x18002a1ea
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
add ebx, 0x96
cmp ebx, 0x1a9
jb 0x18002a158
jmp 0x18002a206
mov dword [r13 + 4], 1
add r14d, 0x2a
cmp r14d, 0x138
jb 0x18002a0f0
mov ebx, 0x8f
nop dword [rax]
mov eax, ebx
sub eax, 0x8d
je 0x18002a2bc
sub eax, 1
je 0x18002a268
cmp eax, 1
jne 0x18002a28c
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
test rax, rax
je 0x180027073
jmp 0x18002a28c
mov r8, qword [r13 + 8]
lea rcx, [rsp + 0x48]
xor r9d, r9d
mov byte [rsp + 0x48], 0x2e
mov edx, 0xfd
call fcn.180015080
cmp eax, 1
jne 0x180027073
dec ebx
cmp ebx, 0x8c
ja 0x18002a220
mov ebx, 0xa4
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xa4
je 0x18002a2d3
sub eax, 0x1e
je 0x18002a2c9
cmp eax, 0x1e
je 0x18002a103
jmp 0x18002a34e
mov dword [r13], 0x12
jmp 0x18002a103
mov qword [r13], 0x14
jmp 0x18002a34e
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], 5
xor r8d, r8d
mov dword [rsp + 0x20], 0x75
xor edx, edx
xor ecx, ecx
call fcn.1800080e0
mov qword [r13 + 8], rax
mov r8, rax
test rax, rax
je 0x180027073
mov rax, qword [rbp + 0x228]
lea rcx, [rbp - 0x78]
xor r9d, r9d
mov edx, 0xfd
movzx eax, byte [rax]
mov byte [rbp - 0x78], al
call fcn.180015080
cmp eax, 1
je 0x18002a34e
mov ecx, 0x10
nop dword [rax]
mov eax, ecx
sub eax, 0x10
je 0x18002a342
cmp eax, 1
je case.0x1800285a1.233
jmp 0x18002a347
mov edi, 6
inc ecx
cmp ecx, 0x12
jb 0x18002a330
add ebx, 0x1e
cmp ebx, 0xfe
jb 0x18002a2a0
mov ebx, 0x13
mov eax, ebx
sub eax, 0x10
je 0x18002a426
sub eax, 1
je 0x18002a3ca
sub eax, 1
je 0x18002a3af
cmp eax, 1
jne 0x18002a3ea
cmp qword [r13 + 8], 0
jne 0x18002a3ea
mov eax, 0xb9
cmp eax, 0xb9
je 0x18002a39c
cmp eax, 0x2706
je case.0x1800285a1.233
jmp 0x18002a3a1
mov edi, 6
add eax, 0x264d
cmp eax, 0x4c9a
jbe 0x18002a388
jmp 0x18002a3ea
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a3ea
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x18002a3ea
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
dec ebx
cmp ebx, 0xf
ja 0x18002a362
mov ebx, 0x10e
nop word [rax + rax]
cmp ebx, 0x10e
je 0x18002a46d
cmp ebx, 0x1c4
je 0x18002a44b
cmp ebx, 0x27a
je 0x18002a431
cmp ebx, 0x330
je 0x18002a103
jmp 0x18002a48f
xor eax, eax
mov dword [r13], eax
jmp 0x18002a103
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x18002a441
call qword [rax + 8]
mov dword [r13], 0x1a
jmp 0x18002a48f
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
jmp 0x18002a48f
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180027073
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a48f
mov rcx, qword [rcx]
call rax
add ebx, 0xb6
cmp ebx, 0x3e6
jb 0x18002a400
mov ebx, 0x19
mov eax, ebx
sub eax, 0x19
je 0x18002a4fa
sub eax, 0x3b
je 0x18002a4c8
cmp eax, 0x3b
jne 0x18002a542
mov dword [r13], 0x1a
jmp 0x18002a103
xor eax, eax
lea rcx, [r13 + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
xor edx, edx
call fcn.18002af70
mov rax, qword [rbp + 0x220]
cmp qword [rax], 0
je 0x18002a542
call qword [rax + 0x18]
jmp 0x18002a542
mov rcx, qword [r13 + 8]
test rcx, rcx
jne 0x18002a52d
mov eax, 0xe6
cmp eax, 0xe6
je 0x18002a51c
cmp eax, 0x25bc
je case.0x1800285a1.233
jmp 0x18002a521
mov edi, 6
add eax, 0x24d6
cmp eax, 0x49ac
jbe 0x18002a508
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a542
mov rcx, qword [rcx]
call rax
add ebx, 0x3b
cmp ebx, 0xca
jb 0x18002a4a6
mov r14d, 0x52
mov eax, r14d
sub eax, 0x52
je 0x18002a5d4
sub eax, 1
je 0x18002a597
sub eax, 1
je 0x18002a583
sub eax, 1
je 0x18002a579
cmp eax, 1
je 0x18002a103
jmp 0x18002a5df
mov dword [r13], 0x1b
jmp 0x18002a5df
mov rax, qword [rbp + 0x220]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x18002a5df
call rax
jmp 0x18002a5df
mov rax, qword [rbp + 0x220]
lea rbx, [r13 + 8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a5b3
mov rcx, qword [rbx]
mov rcx, qword [rcx]
call rax
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0xb5
mov rcx, rbx
call fcn.18002af70
jmp 0x18002a5df
cmp qword [r13 + 8], 0
je 0x180027073
inc r14d
cmp r14d, 0x57
jb 0x18002a557
mov r9, qword [rbp + 0x228]
lea rdx, [0x180000000]
mov ecx, 0x89
nop
mov eax, ecx
sub eax, 0x88
je 0x18002a111
cmp eax, 1
je case.0x180027518.49
dec ecx
cmp ecx, 0x87
ja 0x18002a600
jmp 0x18002a117