Function at 0x180006f20
Capabilities:
Access peb ldr_data
Check os version
Get system information on windows
Parse pe header
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x478
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0xf4], 8
mov dword [rsp + 0xf8], 0x12
cmp dword [rsp + 0xf8], 0
jle 0x180006fb9
mov eax, dword [rsp + 0xf8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180006f9b
mov dword [rsp + 0xf4], 4
mov eax, dword [rsp + 0xf8]
dec eax
mov dword [rsp + 0xf8], eax
jmp 0x180006f59
mov dword [rsp + 0xf4], 0
mov eax, dword [rsp + 0xf8]
sub eax, 2
mov dword [rsp + 0xf8], eax
jmp 0x180006f59
mov dword [rsp + 0x108], 1
mov dword [rsp + 0x100], 0x10
cmp dword [rsp + 0x100], 0
jle 0x18000702f
mov eax, dword [rsp + 0x100]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007011
mov dword [rsp + 0x108], 4
mov eax, dword [rsp + 0x100]
dec eax
mov dword [rsp + 0x100], eax
jmp 0x180006fcf
mov dword [rsp + 0x108], 0
mov eax, dword [rsp + 0x100]
sub eax, 2
mov dword [rsp + 0x100], eax
jmp 0x180006fcf
mov dword [rsp + 0xf0], 5
mov dword [rsp + 0x104], 4
mov eax, dword [rsp + 0x104]
test eax, eax
jle 0x1800070b3
mov eax, dword [rsp + 0x104]
cmp eax, 1
jle 0x180007082
mov eax, dword [rsp + 0xf0]
and eax, 0x1952
mov dword [rsp + 0xf0], eax
mov eax, dword [rsp + 0x104]
sub eax, 2
mov dword [rsp + 0x104], eax
jmp 0x180007045
mov eax, dword [rsp + 0xf0]
cmp eax, 0x806
jle 0x1800070a1
mov eax, dword [rsp + 0xf0]
and eax, 0x7f
mov dword [rsp + 0xf0], eax
mov eax, dword [rsp + 0x104]
dec eax
mov dword [rsp + 0x104], eax
jmp 0x180007045
mov dword [rsp + 0x10c], 4
mov dword [rsp + 0xfc], 0x13
cmp dword [rsp + 0xfc], 0
jle 0x180007129
mov eax, dword [rsp + 0xfc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000710b
mov dword [rsp + 0x10c], 0
mov eax, dword [rsp + 0xfc]
dec eax
mov dword [rsp + 0xfc], eax
jmp 0x1800070c9
mov dword [rsp + 0x10c], 0
mov eax, dword [rsp + 0xfc]
sub eax, 2
mov dword [rsp + 0xfc], eax
jmp 0x1800070c9
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x28], 0
cmp qword [rsp + 0x480], 0
jne 0x180007834
call fcn.180006f10
mov qword [rsp + 0xe8], rax
xor eax, eax
cmp eax, 1
je 0x180007832
mov rax, qword [rsp + 0xe8]
movzx eax, word [rax]
cmp eax, 0x5a4d
jne 0x18000781a
mov rax, qword [rsp + 0xe8]
movsxd rax, dword [rax + 0x3c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x118], 2
mov dword [rsp + 0x120], 0xa
mov eax, dword [rsp + 0x120]
test eax, eax
jle 0x18000720f
mov eax, dword [rsp + 0x120]
cmp eax, 1
jle 0x1800071dc
mov eax, dword [rsp + 0x118]
and eax, 0x2106
mov dword [rsp + 0x118], eax
mov eax, dword [rsp + 0x120]
sub eax, 2
mov dword [rsp + 0x120], eax
jmp 0x18000719f
mov eax, dword [rsp + 0x118]
cmp eax, 0x80c
jle 0x1800071fd
mov eax, dword [rsp + 0x118]
and eax, 0x85
mov dword [rsp + 0x118], eax
mov eax, dword [rsp + 0x120]
dec eax
mov dword [rsp + 0x120], eax
jmp 0x18000719f
mov dword [rsp + 0x12c], 7
mov dword [rsp + 0x138], 0xb
mov eax, dword [rsp + 0x138]
test eax, eax
jle 0x180007295
mov eax, dword [rsp + 0x138]
cmp eax, 1
jle 0x180007262
mov eax, dword [rsp + 0x12c]
and eax, 0x66b
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x138]
sub eax, 2
mov dword [rsp + 0x138], eax
jmp 0x180007225
mov eax, dword [rsp + 0x12c]
cmp eax, 0x80d
jle 0x180007283
mov eax, dword [rsp + 0x12c]
and eax, 0x86
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x138]
dec eax
mov dword [rsp + 0x138], eax
jmp 0x180007225
mov dword [rsp + 0x114], 4
mov dword [rsp + 0x130], 0x11
cmp dword [rsp + 0x130], 0
jle 0x18000730a
mov eax, dword [rsp + 0x130]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800072ed
mov dword [rsp + 0x114], 0
mov eax, dword [rsp + 0x130]
dec eax
mov dword [rsp + 0x130], eax
jmp 0x1800072ab
mov dword [rsp + 0x114], 4
mov eax, dword [rsp + 0x130]
dec eax
mov dword [rsp + 0x130], eax
jmp 0x1800072ab
mov dword [rsp + 0x110], 3
mov dword [rsp + 0x11c], 0xa
mov eax, dword [rsp + 0x11c]
test eax, eax
jle 0x180007390
mov eax, dword [rsp + 0x11c]
cmp eax, 1
jle 0x18000735d
mov eax, dword [rsp + 0x110]
and eax, 0x107d
mov dword [rsp + 0x110], eax
mov eax, dword [rsp + 0x11c]
sub eax, 2
mov dword [rsp + 0x11c], eax
jmp 0x180007320
mov eax, dword [rsp + 0x110]
cmp eax, 0x80c
jle 0x18000737e
mov eax, dword [rsp + 0x110]
and eax, 0x85
mov dword [rsp + 0x110], eax
mov eax, dword [rsp + 0x11c]
dec eax
mov dword [rsp + 0x11c], eax
jmp 0x180007320
mov dword [rsp + 0x13c], 2
mov dword [rsp + 0x128], 0x13
cmp dword [rsp + 0x128], 0
jle 0x180007407
mov eax, dword [rsp + 0x128]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800073e9
mov dword [rsp + 0x13c], 4
mov eax, dword [rsp + 0x128]
sub eax, 2
mov dword [rsp + 0x128], eax
jmp 0x1800073a6
mov dword [rsp + 0x13c], 4
mov eax, dword [rsp + 0x128]
sub eax, 2
mov dword [rsp + 0x128], eax
jmp 0x1800073a6
mov dword [rsp + 0x134], 4
mov dword [rsp + 0x124], 0x13
cmp dword [rsp + 0x124], 0
jle 0x18000747d
mov eax, dword [rsp + 0x124]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000745f
mov dword [rsp + 0x134], 0
mov eax, dword [rsp + 0x124]
dec eax
mov dword [rsp + 0x124], eax
jmp 0x18000741d
mov dword [rsp + 0x134], 0
mov eax, dword [rsp + 0x124]
sub eax, 2
mov dword [rsp + 0x124], eax
jmp 0x18000741d
cmp qword [rsp + 0x30], 0x40
jb 0x18000781a
cmp qword [rsp + 0x30], 0x400
jae 0x18000781a
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x4550
jne 0x18000781a
mov dword [rsp + 0x148], 3
mov dword [rsp + 0x15c], 8
mov eax, dword [rsp + 0x15c]
test eax, eax
jle 0x180007547
mov eax, dword [rsp + 0x15c]
cmp eax, 1
jle 0x180007514
mov eax, dword [rsp + 0x148]
and eax, 0x11d0
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x15c]
sub eax, 2
mov dword [rsp + 0x15c], eax
jmp 0x1800074d7
mov eax, dword [rsp + 0x148]
cmp eax, 0x80a
jle 0x180007535
mov eax, dword [rsp + 0x148]
and eax, 0x83
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x15c]
dec eax
mov dword [rsp + 0x15c], eax
jmp 0x1800074d7
mov dword [rsp + 0x16c], 0
mov dword [rsp + 0x170], 0x14
cmp dword [rsp + 0x170], 0
jle 0x1800075bc
mov eax, dword [rsp + 0x170]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000759f
mov dword [rsp + 0x16c], 4
mov eax, dword [rsp + 0x170]
dec eax
mov dword [rsp + 0x170], eax
jmp 0x18000755d
mov dword [rsp + 0x16c], 0
mov eax, dword [rsp + 0x170]
dec eax
mov dword [rsp + 0x170], eax
jmp 0x18000755d
mov dword [rsp + 0x144], 5
mov dword [rsp + 0x168], 4
mov eax, dword [rsp + 0x168]
test eax, eax
jle 0x180007640
mov eax, dword [rsp + 0x168]
cmp eax, 1
jle 0x18000760f
mov eax, dword [rsp + 0x144]
and eax, 0x1952
mov dword [rsp + 0x144], eax
mov eax, dword [rsp + 0x168]
sub eax, 2
mov dword [rsp + 0x168], eax
jmp 0x1800075d2
mov eax, dword [rsp + 0x144]
cmp eax, 0x806
jle 0x18000762e
mov eax, dword [rsp + 0x144]
and eax, 0x7f
mov dword [rsp + 0x144], eax
mov eax, dword [rsp + 0x168]
dec eax
mov dword [rsp + 0x168], eax
jmp 0x1800075d2
mov dword [rsp + 0x158], 7
mov dword [rsp + 0x14c], 0x14
cmp dword [rsp + 0x14c], 0
jle 0x1800076b6
mov eax, dword [rsp + 0x14c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007699
mov dword [rsp + 0x158], 0
mov eax, dword [rsp + 0x14c]
sub eax, 2
mov dword [rsp + 0x14c], eax
jmp 0x180007656
mov dword [rsp + 0x158], 0
mov eax, dword [rsp + 0x14c]
dec eax
mov dword [rsp + 0x14c], eax
jmp 0x180007656
mov dword [rsp + 0x174], 5
mov dword [rsp + 0x164], 0xf
cmp dword [rsp + 0x164], 0
jle 0x18000772b
mov eax, dword [rsp + 0x164]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000770e
mov dword [rsp + 0x174], 0
mov eax, dword [rsp + 0x164]
dec eax
mov dword [rsp + 0x164], eax
jmp 0x1800076cc
mov dword [rsp + 0x174], 4
mov eax, dword [rsp + 0x164]
dec eax
mov dword [rsp + 0x164], eax
jmp 0x1800076cc
mov dword [rsp + 0x154], 7
mov dword [rsp + 0x160], 0xd
cmp dword [rsp + 0x160], 0
jle 0x1800077a1
mov eax, dword [rsp + 0x160]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007784
mov dword [rsp + 0x154], 0
mov eax, dword [rsp + 0x160]
sub eax, 2
mov dword [rsp + 0x160], eax
jmp 0x180007741
mov dword [rsp + 0x154], 4
mov eax, dword [rsp + 0x160]
dec eax
mov dword [rsp + 0x160], eax
jmp 0x180007741
mov dword [rsp + 0x150], 4
mov dword [rsp + 0x140], 0x15
cmp dword [rsp + 0x140], 0
jle 0x180007818
mov eax, dword [rsp + 0x140]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800077fa
mov dword [rsp + 0x150], 0
mov eax, dword [rsp + 0x140]
sub eax, 2
mov dword [rsp + 0x140], eax
jmp 0x1800077b7
mov dword [rsp + 0x150], 0
mov eax, dword [rsp + 0x140]
sub eax, 2
mov dword [rsp + 0x140], eax
jmp 0x1800077b7
jmp 0x180007832
mov rax, qword [rsp + 0xe8]
dec rax
mov qword [rsp + 0xe8], rax
jmp 0x180007157
jmp 0x180007844
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0xe8], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x180008f8a
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x50]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x68]
movzx eax, word [rax + 0x48]
mov word [rsp + 0xd8], ax
mov qword [rsp + 0x20], 0
mov ecx, dword [rsp + 0x20]
call fcn.18000bc30
mov eax, eax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xd0]
movzx eax, byte [rax]
cmp eax, 0x61
jl 0x1800078f3
mov rax, qword [rsp + 0xd0]
movzx eax, byte [rax]
sub eax, 0x20
cdqe
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
jmp 0x18000790e
mov rax, qword [rsp + 0xd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xd0]
inc rax
mov qword [rsp + 0xd0], rax
movzx eax, word [rsp + 0xd8]
dec ax
mov word [rsp + 0xd8], ax
movzx eax, word [rsp + 0xd8]
test eax, eax
jne 0x1800078b1
cmp dword [rsp + 0x20], 0x6a4abc5b
jne 0x18000837b
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
add rax, 0x88
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x24]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
mov eax, 3
mov word [rsp + 0xd8], ax
movzx eax, word [rsp + 0xd8]
test eax, eax
jle 0x180008376
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.18000bc40
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0xec0e4e8e
je 0x180007a54
cmp dword [rsp + 0x50], 0x7c0dfcaa
je 0x180007a54
cmp dword [rsp + 0x50], 0x91afca54
jne 0x180007fe7
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x190], 7
mov dword [rsp + 0x17c], 0x11
cmp dword [rsp + 0x17c], 0
jle 0x180007aeb
mov eax, dword [rsp + 0x17c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007acd
mov dword [rsp + 0x190], 0
mov eax, dword [rsp + 0x17c]
dec eax
mov dword [rsp + 0x17c], eax
jmp 0x180007a8b
mov dword [rsp + 0x190], 4
mov eax, dword [rsp + 0x17c]
sub eax, 2
mov dword [rsp + 0x17c], eax
jmp 0x180007a8b
mov dword [rsp + 0x180], 3
mov dword [rsp + 0x194], 0xf
cmp dword [rsp + 0x194], 0
jle 0x180007b62
mov eax, dword [rsp + 0x194]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007b44
mov dword [rsp + 0x180], 0
mov eax, dword [rsp + 0x194]
sub eax, 2
mov dword [rsp + 0x194], eax
jmp 0x180007b01
mov dword [rsp + 0x180], 4
mov eax, dword [rsp + 0x194]
sub eax, 2
mov dword [rsp + 0x194], eax
jmp 0x180007b01
mov dword [rsp + 0x188], 7
mov dword [rsp + 0x184], 0xa
mov eax, dword [rsp + 0x184]
test eax, eax
jle 0x180007be8
mov eax, dword [rsp + 0x184]
cmp eax, 1
jle 0x180007bb5
mov eax, dword [rsp + 0x188]
and eax, 0x23c7
mov dword [rsp + 0x188], eax
mov eax, dword [rsp + 0x184]
sub eax, 2
mov dword [rsp + 0x184], eax
jmp 0x180007b78
mov eax, dword [rsp + 0x188]
cmp eax, 0x80c
jle 0x180007bd6
mov eax, dword [rsp + 0x188]
and eax, 0x85
mov dword [rsp + 0x188], eax
mov eax, dword [rsp + 0x184]
dec eax
mov dword [rsp + 0x184], eax
jmp 0x180007b78
mov dword [rsp + 0x178], 4
mov dword [rsp + 0x18c], 0x11
cmp dword [rsp + 0x18c], 0
jle 0x180007c5d
mov eax, dword [rsp + 0x18c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007c40
mov dword [rsp + 0x178], 0
mov eax, dword [rsp + 0x18c]
dec eax
mov dword [rsp + 0x18c], eax
jmp 0x180007bfe
mov dword [rsp + 0x178], 4
mov eax, dword [rsp + 0x18c]
dec eax
mov dword [rsp + 0x18c], eax
jmp 0x180007bfe
mov rax, qword [rsp + 0x88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe0]
lea rax, [rcx + rax*4]
mov qword [rsp + 0xe0], rax
cmp dword [rsp + 0x50], 0xec0e4e8e
jne 0x180007ca8
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
jmp 0x180007fd4
cmp dword [rsp + 0x50], 0x7c0dfcaa
jne 0x180007cd4
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x70], rax
jmp 0x180007fd4
cmp dword [rsp + 0x50], 0x91afca54
jne 0x180007fd4
mov dword [rsp + 0x1b8], 3
mov dword [rsp + 0x1c4], 9
mov eax, dword [rsp + 0x1c4]
test eax, eax
jle 0x180007d68
mov eax, dword [rsp + 0x1c4]
cmp eax, 1
jle 0x180007d35
mov eax, dword [rsp + 0x1b8]
and eax, 0x15f8
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x1c4]
sub eax, 2
mov dword [rsp + 0x1c4], eax
jmp 0x180007cf8
mov eax, dword [rsp + 0x1b8]
cmp eax, 0x80b
jle 0x180007d56
mov eax, dword [rsp + 0x1b8]
and eax, 0x84
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x1c4]
dec eax
mov dword [rsp + 0x1c4], eax
jmp 0x180007cf8
mov dword [rsp + 0x1c0], 2
mov dword [rsp + 0x1ac], 0x13
cmp dword [rsp + 0x1ac], 0
jle 0x180007ddf
mov eax, dword [rsp + 0x1ac]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007dc1
mov dword [rsp + 0x1c0], 4
mov eax, dword [rsp + 0x1ac]
sub eax, 2
mov dword [rsp + 0x1ac], eax
jmp 0x180007d7e
mov dword [rsp + 0x1c0], 4
mov eax, dword [rsp + 0x1ac]
sub eax, 2
mov dword [rsp + 0x1ac], eax
jmp 0x180007d7e
mov dword [rsp + 0x1a4], 1
mov dword [rsp + 0x19c], 0x15
cmp dword [rsp + 0x19c], 0
jle 0x180007e55
mov eax, dword [rsp + 0x19c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007e38
mov dword [rsp + 0x1a4], 4
mov eax, dword [rsp + 0x19c]
sub eax, 2
mov dword [rsp + 0x19c], eax
jmp 0x180007df5
mov dword [rsp + 0x1a4], 0
mov eax, dword [rsp + 0x19c]
dec eax
mov dword [rsp + 0x19c], eax
jmp 0x180007df5
mov dword [rsp + 0x1bc], 4
mov dword [rsp + 0x1a0], 0x13
cmp dword [rsp + 0x1a0], 0
jle 0x180007ecb
mov eax, dword [rsp + 0x1a0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007ead
mov dword [rsp + 0x1bc], 0
mov eax, dword [rsp + 0x1a0]
dec eax
mov dword [rsp + 0x1a0], eax
jmp 0x180007e6b
mov dword [rsp + 0x1bc], 0
mov eax, dword [rsp + 0x1a0]
sub eax, 2
mov dword [rsp + 0x1a0], eax
jmp 0x180007e6b
mov dword [rsp + 0x1a8], 7
mov dword [rsp + 0x1b4], 0xd
cmp dword [rsp + 0x1b4], 0
jle 0x180007f41
mov eax, dword [rsp + 0x1b4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007f24
mov dword [rsp + 0x1a8], 0
mov eax, dword [rsp + 0x1b4]
sub eax, 2
mov dword [rsp + 0x1b4], eax
jmp 0x180007ee1
mov dword [rsp + 0x1a8], 4
mov eax, dword [rsp + 0x1b4]
dec eax
mov dword [rsp + 0x1b4], eax
jmp 0x180007ee1
mov dword [rsp + 0x1b0], 0
mov dword [rsp + 0x198], 0x15
cmp dword [rsp + 0x198], 0
jle 0x180007fb7
mov eax, dword [rsp + 0x198]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180007f99
mov dword [rsp + 0x1b0], 4
mov eax, dword [rsp + 0x198]
dec eax
mov dword [rsp + 0x198], eax
jmp 0x180007f57
mov dword [rsp + 0x1b0], 0
mov eax, dword [rsp + 0x198]
sub eax, 2
mov dword [rsp + 0x198], eax
jmp 0x180007f57
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x58], rax
movzx eax, word [rsp + 0xd8]
dec ax
mov word [rsp + 0xd8], ax
mov dword [rsp + 0x1d0], 2
mov dword [rsp + 0x1d4], 0xa
mov eax, dword [rsp + 0x1d4]
test eax, eax
jle 0x18000806d
mov eax, dword [rsp + 0x1d4]
cmp eax, 1
jle 0x18000803a
mov eax, dword [rsp + 0x1d0]
and eax, 0x2106
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1d4]
sub eax, 2
mov dword [rsp + 0x1d4], eax
jmp 0x180007ffd
mov eax, dword [rsp + 0x1d0]
cmp eax, 0x80c
jle 0x18000805b
mov eax, dword [rsp + 0x1d0]
and eax, 0x85
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1d4]
dec eax
mov dword [rsp + 0x1d4], eax
jmp 0x180007ffd
mov dword [rsp + 0x1dc], 4
mov dword [rsp + 0x1e4], 3
mov eax, dword [rsp + 0x1e4]
test eax, eax
jle 0x1800080f1
mov eax, dword [rsp + 0x1e4]
cmp eax, 1
jle 0x1800080c0
mov eax, dword [rsp + 0x1dc]
and eax, 0x1891
mov dword [rsp + 0x1dc], eax
mov eax, dword [rsp + 0x1e4]
sub eax, 2
mov dword [rsp + 0x1e4], eax
jmp 0x180008083
mov eax, dword [rsp + 0x1dc]
cmp eax, 0x805
jle 0x1800080df
mov eax, dword [rsp + 0x1dc]
and eax, 0x7e
mov dword [rsp + 0x1dc], eax
mov eax, dword [rsp + 0x1e4]
dec eax
mov dword [rsp + 0x1e4], eax
jmp 0x180008083
mov dword [rsp + 0x1e0], 0
mov dword [rsp + 0x1cc], 0xd
cmp dword [rsp + 0x1cc], 0
jle 0x180008167
mov eax, dword [rsp + 0x1cc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008149
mov dword [rsp + 0x1e0], 4
mov eax, dword [rsp + 0x1cc]
dec eax
mov dword [rsp + 0x1cc], eax
jmp 0x180008107
mov dword [rsp + 0x1e0], 0
mov eax, dword [rsp + 0x1cc]
sub eax, 2
mov dword [rsp + 0x1cc], eax
jmp 0x180008107
mov dword [rsp + 0x1d8], 7
mov dword [rsp + 0x1c8], 0x10
cmp dword [rsp + 0x1c8], 0
jle 0x1800081dd
mov eax, dword [rsp + 0x1c8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800081c0
mov dword [rsp + 0x1d8], 0
mov eax, dword [rsp + 0x1c8]
sub eax, 2
mov dword [rsp + 0x1c8], eax
jmp 0x18000817d
mov dword [rsp + 0x1d8], 0
mov eax, dword [rsp + 0x1c8]
dec eax
mov dword [rsp + 0x1c8], eax
jmp 0x18000817d
mov rax, qword [rsp + 0x48]
add rax, 4
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x1f0], 6
mov dword [rsp + 0x1fc], 0xa
mov eax, dword [rsp + 0x1fc]
test eax, eax
jle 0x180008271
mov eax, dword [rsp + 0x1fc]
cmp eax, 1
jle 0x18000823e
mov eax, dword [rsp + 0x1f0]
and eax, 0x1f29
mov dword [rsp + 0x1f0], eax
mov eax, dword [rsp + 0x1fc]
sub eax, 2
mov dword [rsp + 0x1fc], eax
jmp 0x180008201
mov eax, dword [rsp + 0x1f0]
cmp eax, 0x80c
jle 0x18000825f
mov eax, dword [rsp + 0x1f0]
and eax, 0x85
mov dword [rsp + 0x1f0], eax
mov eax, dword [rsp + 0x1fc]
dec eax
mov dword [rsp + 0x1fc], eax
jmp 0x180008201
mov dword [rsp + 0x1f4], 2
mov dword [rsp + 0x1f8], 0x10
cmp dword [rsp + 0x1f8], 0
jle 0x1800082e7
mov eax, dword [rsp + 0x1f8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800082c9
mov dword [rsp + 0x1f4], 4
mov eax, dword [rsp + 0x1f8]
dec eax
mov dword [rsp + 0x1f8], eax
jmp 0x180008287
mov dword [rsp + 0x1f4], 4
mov eax, dword [rsp + 0x1f8]
sub eax, 2
mov dword [rsp + 0x1f8], eax
jmp 0x180008287
mov dword [rsp + 0x1e8], 8
mov dword [rsp + 0x1ec], 0x12
cmp dword [rsp + 0x1ec], 0
jle 0x18000835d
mov eax, dword [rsp + 0x1ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000833f
mov dword [rsp + 0x1e8], 4
mov eax, dword [rsp + 0x1ec]
dec eax
mov dword [rsp + 0x1ec], eax
jmp 0x1800082fd
mov dword [rsp + 0x1e8], 0
mov eax, dword [rsp + 0x1ec]
sub eax, 2
mov dword [rsp + 0x1ec], eax
jmp 0x1800082fd
mov rax, qword [rsp + 0x88]
add rax, 2
mov qword [rsp + 0x88], rax
jmp 0x180007a01
jmp 0x180008c53
cmp dword [rsp + 0x20], 0x3cfa685d
jne 0x180008c53
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
add rax, 0x88
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x24]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
mov eax, 1
mov word [rsp + 0xd8], ax
movzx eax, word [rsp + 0xd8]
test eax, eax
jle 0x180008c53
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.18000bc40
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0x534c0ab8
jne 0x1800086d9
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x21c], 2
mov dword [rsp + 0x208], 0x13
cmp dword [rsp + 0x208], 0
jle 0x18000850f
mov eax, dword [rsp + 0x208]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800084f1
mov dword [rsp + 0x21c], 4
mov eax, dword [rsp + 0x208]
sub eax, 2
mov dword [rsp + 0x208], eax
jmp 0x1800084ae
mov dword [rsp + 0x21c], 4
mov eax, dword [rsp + 0x208]
sub eax, 2
mov dword [rsp + 0x208], eax
jmp 0x1800084ae
mov dword [rsp + 0x200], 2
mov dword [rsp + 0x204], 0xa
mov eax, dword [rsp + 0x204]
test eax, eax
jle 0x180008595
mov eax, dword [rsp + 0x204]
cmp eax, 1
jle 0x180008562
mov eax, dword [rsp + 0x200]
and eax, 0x2106
mov dword [rsp + 0x200], eax
mov eax, dword [rsp + 0x204]
sub eax, 2
mov dword [rsp + 0x204], eax
jmp 0x180008525
mov eax, dword [rsp + 0x200]
cmp eax, 0x80c
jle 0x180008583
mov eax, dword [rsp + 0x200]
and eax, 0x85
mov dword [rsp + 0x200], eax
mov eax, dword [rsp + 0x204]
dec eax
mov dword [rsp + 0x204], eax
jmp 0x180008525
mov dword [rsp + 0x218], 5
mov dword [rsp + 0x20c], 0xf
cmp dword [rsp + 0x20c], 0
jle 0x18000860a
mov eax, dword [rsp + 0x20c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800085ed
mov dword [rsp + 0x218], 0
mov eax, dword [rsp + 0x20c]
dec eax
mov dword [rsp + 0x20c], eax
jmp 0x1800085ab
mov dword [rsp + 0x218], 4
mov eax, dword [rsp + 0x20c]
dec eax
mov dword [rsp + 0x20c], eax
jmp 0x1800085ab
mov dword [rsp + 0x214], 0
mov dword [rsp + 0x210], 0xe
cmp dword [rsp + 0x210], 0
jle 0x180008680
mov eax, dword [rsp + 0x210]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008663
mov dword [rsp + 0x214], 4
mov eax, dword [rsp + 0x210]
sub eax, 2
mov dword [rsp + 0x210], eax
jmp 0x180008620
mov dword [rsp + 0x214], 4
mov eax, dword [rsp + 0x210]
dec eax
mov dword [rsp + 0x210], eax
jmp 0x180008620
mov rax, qword [rsp + 0x88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe0]
lea rax, [rcx + rax*4]
mov qword [rsp + 0xe0], rax
cmp dword [rsp + 0x50], 0x534c0ab8
jne 0x1800086c6
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
movzx eax, word [rsp + 0xd8]
dec ax
mov word [rsp + 0xd8], ax
mov dword [rsp + 0x224], 8
mov dword [rsp + 0x234], 0x12
cmp dword [rsp + 0x234], 0
jle 0x18000874f
mov eax, dword [rsp + 0x234]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008731
mov dword [rsp + 0x224], 4
mov eax, dword [rsp + 0x234]
dec eax
mov dword [rsp + 0x234], eax
jmp 0x1800086ef
mov dword [rsp + 0x224], 0
mov eax, dword [rsp + 0x234]
sub eax, 2
mov dword [rsp + 0x234], eax
jmp 0x1800086ef
mov dword [rsp + 0x230], 4
mov dword [rsp + 0x24c], 0x11
cmp dword [rsp + 0x24c], 0
jle 0x1800087c5
mov eax, dword [rsp + 0x24c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800087a7
mov dword [rsp + 0x230], 4
mov eax, dword [rsp + 0x24c]
dec eax
mov dword [rsp + 0x24c], eax
jmp 0x180008765
mov dword [rsp + 0x230], 4
mov eax, dword [rsp + 0x24c]
sub eax, 2
mov dword [rsp + 0x24c], eax
jmp 0x180008765
mov dword [rsp + 0x238], 4
mov dword [rsp + 0x220], 0x15
cmp dword [rsp + 0x220], 0
jle 0x18000883c
mov eax, dword [rsp + 0x220]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000881e
mov dword [rsp + 0x238], 0
mov eax, dword [rsp + 0x220]
sub eax, 2
mov dword [rsp + 0x220], eax
jmp 0x1800087db
mov dword [rsp + 0x238], 0
mov eax, dword [rsp + 0x220]
sub eax, 2
mov dword [rsp + 0x220], eax
jmp 0x1800087db
mov dword [rsp + 0x240], 7
mov dword [rsp + 0x228], 4
mov eax, dword [rsp + 0x228]
test eax, eax
jle 0x1800088c0
mov eax, dword [rsp + 0x228]
cmp eax, 1
jle 0x18000888f
mov eax, dword [rsp + 0x240]
and eax, 0x21f3
mov dword [rsp + 0x240], eax
mov eax, dword [rsp + 0x228]
sub eax, 2
mov dword [rsp + 0x228], eax
jmp 0x180008852
mov eax, dword [rsp + 0x240]
cmp eax, 0x806
jle 0x1800088ae
mov eax, dword [rsp + 0x240]
and eax, 0x7f
mov dword [rsp + 0x240], eax
mov eax, dword [rsp + 0x228]
dec eax
mov dword [rsp + 0x228], eax
jmp 0x180008852
mov dword [rsp + 0x22c], 3
mov dword [rsp + 0x23c], 8
mov eax, dword [rsp + 0x23c]
test eax, eax
jle 0x180008946
mov eax, dword [rsp + 0x23c]
cmp eax, 1
jle 0x180008913
mov eax, dword [rsp + 0x22c]
and eax, 0x11d0
mov dword [rsp + 0x22c], eax
mov eax, dword [rsp + 0x23c]
sub eax, 2
mov dword [rsp + 0x23c], eax
jmp 0x1800088d6
mov eax, dword [rsp + 0x22c]
cmp eax, 0x80a
jle 0x180008934
mov eax, dword [rsp + 0x22c]
and eax, 0x83
mov dword [rsp + 0x22c], eax
mov eax, dword [rsp + 0x23c]
dec eax
mov dword [rsp + 0x23c], eax
jmp 0x1800088d6
mov dword [rsp + 0x248], 8
mov dword [rsp + 0x254], 0xc
cmp dword [rsp + 0x254], 0
jle 0x1800089bc
mov eax, dword [rsp + 0x254]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000899e
mov dword [rsp + 0x248], 4
mov eax, dword [rsp + 0x254]
dec eax
mov dword [rsp + 0x254], eax
jmp 0x18000895c
mov dword [rsp + 0x248], 0
mov eax, dword [rsp + 0x254]
sub eax, 2
mov dword [rsp + 0x254], eax
jmp 0x18000895c
mov dword [rsp + 0x244], 3
mov dword [rsp + 0x250], 0x12
cmp dword [rsp + 0x250], 0
jle 0x180008a33
mov eax, dword [rsp + 0x250]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008a15
mov dword [rsp + 0x244], 4
mov eax, dword [rsp + 0x250]
sub eax, 2
mov dword [rsp + 0x250], eax
jmp 0x1800089d2
mov dword [rsp + 0x244], 0
mov eax, dword [rsp + 0x250]
sub eax, 2
mov dword [rsp + 0x250], eax
jmp 0x1800089d2
mov rax, qword [rsp + 0x48]
add rax, 4
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x26c], 6
mov dword [rsp + 0x258], 7
mov eax, dword [rsp + 0x258]
test eax, eax
jle 0x180008ac7
mov eax, dword [rsp + 0x258]
cmp eax, 1
jle 0x180008a94
mov eax, dword [rsp + 0x26c]
and eax, 0x169a
mov dword [rsp + 0x26c], eax
mov eax, dword [rsp + 0x258]
sub eax, 2
mov dword [rsp + 0x258], eax
jmp 0x180008a57
mov eax, dword [rsp + 0x26c]
cmp eax, 0x809
jle 0x180008ab5
mov eax, dword [rsp + 0x26c]
and eax, 0x82
mov dword [rsp + 0x26c], eax
mov eax, dword [rsp + 0x258]
dec eax
mov dword [rsp + 0x258], eax
jmp 0x180008a57
mov dword [rsp + 0x270], 2
mov dword [rsp + 0x274], 0x10
cmp dword [rsp + 0x274], 0
jle 0x180008b3d
mov eax, dword [rsp + 0x274]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008b1f
mov dword [rsp + 0x270], 4
mov eax, dword [rsp + 0x274]
dec eax
mov dword [rsp + 0x274], eax
jmp 0x180008add
mov dword [rsp + 0x270], 4
mov eax, dword [rsp + 0x274]
sub eax, 2
mov dword [rsp + 0x274], eax
jmp 0x180008add
mov dword [rsp + 0x264], 2
mov dword [rsp + 0x260], 5
mov eax, dword [rsp + 0x260]
test eax, eax
jle 0x180008bc3
mov eax, dword [rsp + 0x260]
cmp eax, 1
jle 0x180008b90
mov eax, dword [rsp + 0x264]
and eax, 0x204d
mov dword [rsp + 0x264], eax
mov eax, dword [rsp + 0x260]
sub eax, 2
mov dword [rsp + 0x260], eax
jmp 0x180008b53
mov eax, dword [rsp + 0x264]
cmp eax, 0x807
jle 0x180008bb1
mov eax, dword [rsp + 0x264]
and eax, 0x80
mov dword [rsp + 0x264], eax
mov eax, dword [rsp + 0x260]
dec eax
mov dword [rsp + 0x260], eax
jmp 0x180008b53
mov dword [rsp + 0x268], 4
mov dword [rsp + 0x25c], 0x15
cmp dword [rsp + 0x25c], 0
jle 0x180008c3a
mov eax, dword [rsp + 0x25c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008c1c
mov dword [rsp + 0x268], 0
mov eax, dword [rsp + 0x25c]
sub eax, 2
mov dword [rsp + 0x25c], eax
jmp 0x180008bd9
mov dword [rsp + 0x268], 0
mov eax, dword [rsp + 0x25c]
sub eax, 2
mov dword [rsp + 0x25c], eax
jmp 0x180008bd9
mov rax, qword [rsp + 0x88]
add rax, 2
mov qword [rsp + 0x88], rax
jmp 0x180008438
cmp qword [rsp + 0x38], 0
je 0x180008f78
cmp qword [rsp + 0x70], 0
je 0x180008f78
cmp qword [rsp + 0x58], 0
je 0x180008f78
cmp qword [rsp + 0x28], 0
je 0x180008f78
mov dword [rsp + 0x288], 1
mov dword [rsp + 0x29c], 3
mov eax, dword [rsp + 0x29c]
test eax, eax
jle 0x180008d07
mov eax, dword [rsp + 0x29c]
cmp eax, 1
jle 0x180008cd6
mov eax, dword [rsp + 0x288]
and eax, 0x1907
mov dword [rsp + 0x288], eax
mov eax, dword [rsp + 0x29c]
sub eax, 2
mov dword [rsp + 0x29c], eax
jmp 0x180008c99
mov eax, dword [rsp + 0x288]
cmp eax, 0x805
jle 0x180008cf5
mov eax, dword [rsp + 0x288]
and eax, 0x7e
mov dword [rsp + 0x288], eax
mov eax, dword [rsp + 0x29c]
dec eax
mov dword [rsp + 0x29c], eax
jmp 0x180008c99
mov dword [rsp + 0x290], 7
mov dword [rsp + 0x294], 9
mov eax, dword [rsp + 0x294]
test eax, eax
jle 0x180008d8d
mov eax, dword [rsp + 0x294]
cmp eax, 1
jle 0x180008d5a
mov eax, dword [rsp + 0x290]
and eax, 0x19b6
mov dword [rsp + 0x290], eax
mov eax, dword [rsp + 0x294]
sub eax, 2
mov dword [rsp + 0x294], eax
jmp 0x180008d1d
mov eax, dword [rsp + 0x290]
cmp eax, 0x80b
jle 0x180008d7b
mov eax, dword [rsp + 0x290]
and eax, 0x84
mov dword [rsp + 0x290], eax
mov eax, dword [rsp + 0x294]
dec eax
mov dword [rsp + 0x294], eax
jmp 0x180008d1d
mov dword [rsp + 0x28c], 0
mov dword [rsp + 0x280], 0x15
cmp dword [rsp + 0x280], 0
jle 0x180008e03
mov eax, dword [rsp + 0x280]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008de5
mov dword [rsp + 0x28c], 4
mov eax, dword [rsp + 0x280]
dec eax
mov dword [rsp + 0x280], eax
jmp 0x180008da3
mov dword [rsp + 0x28c], 0
mov eax, dword [rsp + 0x280]
sub eax, 2
mov dword [rsp + 0x280], eax
jmp 0x180008da3
mov dword [rsp + 0x298], 3
mov dword [rsp + 0x2a4], 9
mov eax, dword [rsp + 0x2a4]
test eax, eax
jle 0x180008e89
mov eax, dword [rsp + 0x2a4]
cmp eax, 1
jle 0x180008e56
mov eax, dword [rsp + 0x298]
and eax, 0x15f8
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x2a4]
sub eax, 2
mov dword [rsp + 0x2a4], eax
jmp 0x180008e19
mov eax, dword [rsp + 0x298]
cmp eax, 0x80b
jle 0x180008e77
mov eax, dword [rsp + 0x298]
and eax, 0x84
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x2a4]
dec eax
mov dword [rsp + 0x2a4], eax
jmp 0x180008e19
mov dword [rsp + 0x278], 8
mov dword [rsp + 0x27c], 0x12
cmp dword [rsp + 0x27c], 0
jle 0x180008eff
mov eax, dword [rsp + 0x27c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008ee1
mov dword [rsp + 0x278], 4
mov eax, dword [rsp + 0x27c]
dec eax
mov dword [rsp + 0x27c], eax
jmp 0x180008e9f
mov dword [rsp + 0x278], 0
mov eax, dword [rsp + 0x27c]
sub eax, 2
mov dword [rsp + 0x27c], eax
jmp 0x180008e9f
mov dword [rsp + 0x2a0], 2
mov dword [rsp + 0x284], 0x13
cmp dword [rsp + 0x284], 0
jle 0x180008f76
mov eax, dword [rsp + 0x284]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180008f58
mov dword [rsp + 0x2a0], 4
mov eax, dword [rsp + 0x284]
sub eax, 2
mov dword [rsp + 0x284], eax
jmp 0x180008f15
mov dword [rsp + 0x2a0], 4
mov eax, dword [rsp + 0x284]
sub eax, 2
mov dword [rsp + 0x284], eax
jmp 0x180008f15
jmp 0x180008f8a
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
jmp 0x18000787a
mov rax, qword [rsp + 0xe8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x98], 0
cmp qword [rsp + 0x488], 0
je 0x1800091a0
mov rax, qword [rsp + 0x30]
mov r9d, dword [rax + 0x50]
mov r8d, dword [rsp + 0xc8]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x488]
call fcn.18000b2e0
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x1800091a0
mov dword [rsp + 0x2b4], 7
mov dword [rsp + 0x2bc], 0xb
mov eax, dword [rsp + 0x2bc]
test eax, eax
jle 0x18000909f
mov eax, dword [rsp + 0x2bc]
cmp eax, 1
jle 0x18000906c
mov eax, dword [rsp + 0x2b4]
and eax, 0x66b
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0x2bc]
sub eax, 2
mov dword [rsp + 0x2bc], eax
jmp 0x18000902f
mov eax, dword [rsp + 0x2b4]
cmp eax, 0x80d
jle 0x18000908d
mov eax, dword [rsp + 0x2b4]
and eax, 0x86
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0x2bc]
dec eax
mov dword [rsp + 0x2bc], eax
jmp 0x18000902f
mov dword [rsp + 0x2b0], 4
mov dword [rsp + 0x2b8], 3
mov eax, dword [rsp + 0x2b8]
test eax, eax
jle 0x180009123
mov eax, dword [rsp + 0x2b8]
cmp eax, 1
jle 0x1800090f2
mov eax, dword [rsp + 0x2b0]
and eax, 0xdd8
mov dword [rsp + 0x2b0], eax
mov eax, dword [rsp + 0x2b8]
sub eax, 2
mov dword [rsp + 0x2b8], eax
jmp 0x1800090b5
mov eax, dword [rsp + 0x2b0]
cmp eax, 0x805
jle 0x180009111
mov eax, dword [rsp + 0x2b0]
and eax, 0x7e
mov dword [rsp + 0x2b0], eax
mov eax, dword [rsp + 0x2b8]
dec eax
mov dword [rsp + 0x2b8], eax
jmp 0x1800090b5
mov dword [rsp + 0x2ac], 0
mov dword [rsp + 0x2a8], 0xd
cmp dword [rsp + 0x2a8], 0
jle 0x180009199
mov eax, dword [rsp + 0x2a8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000917b
mov dword [rsp + 0x2ac], 4
mov eax, dword [rsp + 0x2a8]
dec eax
mov dword [rsp + 0x2a8], eax
jmp 0x180009139
mov dword [rsp + 0x2ac], 0
mov eax, dword [rsp + 0x2a8]
sub eax, 2
mov dword [rsp + 0x2a8], eax
jmp 0x180009139
xor eax, eax
jmp 0x18000b2c5
mov dword [rsp + 0x2c4], 1
mov dword [rsp + 0x2c0], 0x15
cmp dword [rsp + 0x2c0], 0
jle 0x180009216
mov eax, dword [rsp + 0x2c0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800091f9
mov dword [rsp + 0x2c4], 4
mov eax, dword [rsp + 0x2c0]
sub eax, 2
mov dword [rsp + 0x2c0], eax
jmp 0x1800091b6
mov dword [rsp + 0x2c4], 0
mov eax, dword [rsp + 0x2c0]
dec eax
mov dword [rsp + 0x2c0], eax
jmp 0x1800091b6
mov dword [rsp + 0x2d0], 6
mov dword [rsp + 0x2ec], 0xa
mov eax, dword [rsp + 0x2ec]
test eax, eax
jle 0x18000929c
mov eax, dword [rsp + 0x2ec]
cmp eax, 1
jle 0x180009269
mov eax, dword [rsp + 0x2d0]
and eax, 0x1f29
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x2ec]
sub eax, 2
mov dword [rsp + 0x2ec], eax
jmp 0x18000922c
mov eax, dword [rsp + 0x2d0]
cmp eax, 0x80c
jle 0x18000928a
mov eax, dword [rsp + 0x2d0]
and eax, 0x85
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x2ec]
dec eax
mov dword [rsp + 0x2ec], eax
jmp 0x18000922c
mov dword [rsp + 0x2e0], 1
mov dword [rsp + 0x2cc], 0x10
cmp dword [rsp + 0x2cc], 0
jle 0x180009312
mov eax, dword [rsp + 0x2cc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800092f4
mov dword [rsp + 0x2e0], 4
mov eax, dword [rsp + 0x2cc]
dec eax
mov dword [rsp + 0x2cc], eax
jmp 0x1800092b2
mov dword [rsp + 0x2e0], 0
mov eax, dword [rsp + 0x2cc]
sub eax, 2
mov dword [rsp + 0x2cc], eax
jmp 0x1800092b2
mov dword [rsp + 0x2d8], 0
mov dword [rsp + 0x2dc], 0x14
cmp dword [rsp + 0x2dc], 0
jle 0x180009387
mov eax, dword [rsp + 0x2dc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000936a
mov dword [rsp + 0x2d8], 4
mov eax, dword [rsp + 0x2dc]
dec eax
mov dword [rsp + 0x2dc], eax
jmp 0x180009328
mov dword [rsp + 0x2d8], 0
mov eax, dword [rsp + 0x2dc]
dec eax
mov dword [rsp + 0x2dc], eax
jmp 0x180009328
mov dword [rsp + 0x2c8], 1
mov dword [rsp + 0x2e4], 3
mov eax, dword [rsp + 0x2e4]
test eax, eax
jle 0x18000940b
mov eax, dword [rsp + 0x2e4]
cmp eax, 1
jle 0x1800093da
mov eax, dword [rsp + 0x2c8]
and eax, 0x1907
mov dword [rsp + 0x2c8], eax
mov eax, dword [rsp + 0x2e4]
sub eax, 2
mov dword [rsp + 0x2e4], eax
jmp 0x18000939d
mov eax, dword [rsp + 0x2c8]
cmp eax, 0x805
jle 0x1800093f9
mov eax, dword [rsp + 0x2c8]
and eax, 0x7e
mov dword [rsp + 0x2c8], eax
mov eax, dword [rsp + 0x2e4]
dec eax
mov dword [rsp + 0x2e4], eax
jmp 0x18000939d
mov dword [rsp + 0x2e8], 5
mov dword [rsp + 0x2d4], 0xf
cmp dword [rsp + 0x2d4], 0
jle 0x180009480
mov eax, dword [rsp + 0x2d4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009463
mov dword [rsp + 0x2e8], 0
mov eax, dword [rsp + 0x2d4]
dec eax
mov dword [rsp + 0x2d4], eax
jmp 0x180009421
mov dword [rsp + 0x2e8], 4
mov eax, dword [rsp + 0x2d4]
dec eax
mov dword [rsp + 0x2d4], eax
jmp 0x180009421
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x50]
mov r9d, 0x40
mov r8d, 0x3000
mov edx, eax
mov rcx, qword [rsp + 0x98]
call qword [rsp + 0x58]
mov qword [rsp + 0x80], rax
cmp qword [rsp + 0x80], 0
jne 0x180009942
mov dword [rsp + 0x2fc], 3
mov dword [rsp + 0x300], 0xc
cmp dword [rsp + 0x300], 0
jle 0x180009530
mov eax, dword [rsp + 0x300]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009512
mov dword [rsp + 0x2fc], 0
mov eax, dword [rsp + 0x300]
sub eax, 2
mov dword [rsp + 0x300], eax
jmp 0x1800094cf
mov dword [rsp + 0x2fc], 4
mov eax, dword [rsp + 0x300]
sub eax, 2
mov dword [rsp + 0x300], eax
jmp 0x1800094cf
mov dword [rsp + 0x2f8], 3
mov dword [rsp + 0x304], 9
mov eax, dword [rsp + 0x304]
test eax, eax
jle 0x1800095b6
mov eax, dword [rsp + 0x304]
cmp eax, 1
jle 0x180009583
mov eax, dword [rsp + 0x2f8]
and eax, 0x15f8
mov dword [rsp + 0x2f8], eax
mov eax, dword [rsp + 0x304]
sub eax, 2
mov dword [rsp + 0x304], eax
jmp 0x180009546
mov eax, dword [rsp + 0x2f8]
cmp eax, 0x80b
jle 0x1800095a4
mov eax, dword [rsp + 0x2f8]
and eax, 0x84
mov dword [rsp + 0x2f8], eax
mov eax, dword [rsp + 0x304]
dec eax
mov dword [rsp + 0x304], eax
jmp 0x180009546
mov dword [rsp + 0x2f0], 4
mov dword [rsp + 0x2f4], 0x11
cmp dword [rsp + 0x2f4], 0
jle 0x18000962b
mov eax, dword [rsp + 0x2f4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000960e
mov dword [rsp + 0x2f0], 0
mov eax, dword [rsp + 0x2f4]
dec eax
mov dword [rsp + 0x2f4], eax
jmp 0x1800095cc
mov dword [rsp + 0x2f0], 4
mov eax, dword [rsp + 0x2f4]
dec eax
mov dword [rsp + 0x2f4], eax
jmp 0x1800095cc
mov dword [rsp + 0x324], 9
mov dword [rsp + 0x30c], 5
mov eax, dword [rsp + 0x30c]
test eax, eax
jle 0x1800096b1
mov eax, dword [rsp + 0x30c]
cmp eax, 1
jle 0x18000967e
mov eax, dword [rsp + 0x324]
and eax, 0x10a2
mov dword [rsp + 0x324], eax
mov eax, dword [rsp + 0x30c]
sub eax, 2
mov dword [rsp + 0x30c], eax
jmp 0x180009641
mov eax, dword [rsp + 0x324]
cmp eax, 0x807
jle 0x18000969f
mov eax, dword [rsp + 0x324]
and eax, 0x80
mov dword [rsp + 0x324], eax
mov eax, dword [rsp + 0x30c]
dec eax
mov dword [rsp + 0x30c], eax
jmp 0x180009641
mov dword [rsp + 0x320], 8
mov dword [rsp + 0x328], 3
mov eax, dword [rsp + 0x328]
test eax, eax
jle 0x180009735
mov eax, dword [rsp + 0x328]
cmp eax, 1
jle 0x180009704
mov eax, dword [rsp + 0x320]
and eax, 0x1fed
mov dword [rsp + 0x320], eax
mov eax, dword [rsp + 0x328]
sub eax, 2
mov dword [rsp + 0x328], eax
jmp 0x1800096c7
mov eax, dword [rsp + 0x320]
cmp eax, 0x805
jle 0x180009723
mov eax, dword [rsp + 0x320]
and eax, 0x7e
mov dword [rsp + 0x320], eax
mov eax, dword [rsp + 0x328]
dec eax
mov dword [rsp + 0x328], eax
jmp 0x1800096c7
mov dword [rsp + 0x318], 6
mov dword [rsp + 0x334], 0xa
mov eax, dword [rsp + 0x334]
test eax, eax
jle 0x1800097bb
mov eax, dword [rsp + 0x334]
cmp eax, 1
jle 0x180009788
mov eax, dword [rsp + 0x318]
and eax, 0x1f29
mov dword [rsp + 0x318], eax
mov eax, dword [rsp + 0x334]
sub eax, 2
mov dword [rsp + 0x334], eax
jmp 0x18000974b
mov eax, dword [rsp + 0x318]
cmp eax, 0x80c
jle 0x1800097a9
mov eax, dword [rsp + 0x318]
and eax, 0x85
mov dword [rsp + 0x318], eax
mov eax, dword [rsp + 0x334]
dec eax
mov dword [rsp + 0x334], eax
jmp 0x18000974b
mov dword [rsp + 0x314], 1
mov dword [rsp + 0x32c], 3
mov eax, dword [rsp + 0x32c]
test eax, eax
jle 0x18000983f
mov eax, dword [rsp + 0x32c]
cmp eax, 1
jle 0x18000980e
mov eax, dword [rsp + 0x314]
and eax, 0x1907
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x32c]
sub eax, 2
mov dword [rsp + 0x32c], eax
jmp 0x1800097d1
mov eax, dword [rsp + 0x314]
cmp eax, 0x805
jle 0x18000982d
mov eax, dword [rsp + 0x314]
and eax, 0x7e
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x32c]
dec eax
mov dword [rsp + 0x32c], eax
jmp 0x1800097d1
mov dword [rsp + 0x310], 7
mov dword [rsp + 0x308], 0x10
cmp dword [rsp + 0x308], 0
jle 0x1800098b5
mov eax, dword [rsp + 0x308]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009898
mov dword [rsp + 0x310], 0
mov eax, dword [rsp + 0x308]
sub eax, 2
mov dword [rsp + 0x308], eax
jmp 0x180009855
mov dword [rsp + 0x310], 0
mov eax, dword [rsp + 0x308]
dec eax
mov dword [rsp + 0x308], eax
jmp 0x180009855
mov dword [rsp + 0x31c], 7
mov dword [rsp + 0x330], 0xb
mov eax, dword [rsp + 0x330]
test eax, eax
jle 0x18000993b
mov eax, dword [rsp + 0x330]
cmp eax, 1
jle 0x180009908
mov eax, dword [rsp + 0x31c]
and eax, 0x66b
mov dword [rsp + 0x31c], eax
mov eax, dword [rsp + 0x330]
sub eax, 2
mov dword [rsp + 0x330], eax
jmp 0x1800098cb
mov eax, dword [rsp + 0x31c]
cmp eax, 0x80d
jle 0x180009929
mov eax, dword [rsp + 0x31c]
and eax, 0x86
mov dword [rsp + 0x31c], eax
mov eax, dword [rsp + 0x330]
dec eax
mov dword [rsp + 0x330], eax
jmp 0x1800098cb
xor eax, eax
jmp 0x18000b2c5
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x54]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x68]
dec rcx
mov qword [rsp + 0x68], rcx
test rax, rax
je 0x1800099b7
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0xd0]
movzx ecx, byte [rcx]
mov byte [rax], cl
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xd0]
inc rax
mov qword [rsp + 0xd0], rax
jmp 0x18000996c
mov rax, qword [rsp + 0x30]
movzx eax, word [rax + 0x14]
mov rcx, qword [rsp + 0x30]
lea rax, [rcx + rax + 0x18]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x30]
movzx eax, word [rax + 6]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x60]
dec rcx
mov qword [rsp + 0x60], rcx
test rax, rax
je 0x180009d7c
mov rax, qword [rsp + 0x68]
mov eax, dword [rax + 0xc]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x68]
mov eax, dword [rax + 0x14]
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x68]
mov eax, dword [rax + 0x10]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
dec rcx
mov qword [rsp + 0x40], rcx
test rax, rax
je 0x180009a89
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x20]
movzx ecx, byte [rcx]
mov byte [rax], cl
mov rax, qword [rsp + 0xd0]
inc rax
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
jmp 0x180009a3e
mov dword [rsp + 0x344], 1
mov dword [rsp + 0x340], 0x15
cmp dword [rsp + 0x340], 0
jle 0x180009aff
mov eax, dword [rsp + 0x340]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009ae2
mov dword [rsp + 0x344], 4
mov eax, dword [rsp + 0x340]
sub eax, 2
mov dword [rsp + 0x340], eax
jmp 0x180009a9f
mov dword [rsp + 0x344], 0
mov eax, dword [rsp + 0x340]
dec eax
mov dword [rsp + 0x340], eax
jmp 0x180009a9f
mov dword [rsp + 0x358], 3
mov dword [rsp + 0x360], 0x12
cmp dword [rsp + 0x360], 0
jle 0x180009b76
mov eax, dword [rsp + 0x360]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009b58
mov dword [rsp + 0x358], 4
mov eax, dword [rsp + 0x360]
sub eax, 2
mov dword [rsp + 0x360], eax
jmp 0x180009b15
mov dword [rsp + 0x358], 0
mov eax, dword [rsp + 0x360]
sub eax, 2
mov dword [rsp + 0x360], eax
jmp 0x180009b15
mov dword [rsp + 0x33c], 4
mov dword [rsp + 0x354], 3
mov eax, dword [rsp + 0x354]
test eax, eax
jle 0x180009bfa
mov eax, dword [rsp + 0x354]
cmp eax, 1
jle 0x180009bc9
mov eax, dword [rsp + 0x33c]
and eax, 0x1891
mov dword [rsp + 0x33c], eax
mov eax, dword [rsp + 0x354]
sub eax, 2
mov dword [rsp + 0x354], eax
jmp 0x180009b8c
mov eax, dword [rsp + 0x33c]
cmp eax, 0x805
jle 0x180009be8
mov eax, dword [rsp + 0x33c]
and eax, 0x7e
mov dword [rsp + 0x33c], eax
mov eax, dword [rsp + 0x354]
dec eax
mov dword [rsp + 0x354], eax
jmp 0x180009b8c
mov dword [rsp + 0x364], 5
mov dword [rsp + 0x350], 0xf
cmp dword [rsp + 0x350], 0
jle 0x180009c6f
mov eax, dword [rsp + 0x350]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009c52
mov dword [rsp + 0x364], 0
mov eax, dword [rsp + 0x350]
dec eax
mov dword [rsp + 0x350], eax
jmp 0x180009c10
mov dword [rsp + 0x364], 4
mov eax, dword [rsp + 0x350]
dec eax
mov dword [rsp + 0x350], eax
jmp 0x180009c10
mov dword [rsp + 0x34c], 4
mov dword [rsp + 0x35c], 3
mov eax, dword [rsp + 0x35c]
test eax, eax
jle 0x180009cf3
mov eax, dword [rsp + 0x35c]
cmp eax, 1
jle 0x180009cc2
mov eax, dword [rsp + 0x34c]
and eax, 0xdd8
mov dword [rsp + 0x34c], eax
mov eax, dword [rsp + 0x35c]
sub eax, 2
mov dword [rsp + 0x35c], eax
jmp 0x180009c85
mov eax, dword [rsp + 0x34c]
cmp eax, 0x805
jle 0x180009ce1
mov eax, dword [rsp + 0x34c]
and eax, 0x7e
mov dword [rsp + 0x34c], eax
mov eax, dword [rsp + 0x35c]
dec eax
mov dword [rsp + 0x35c], eax
jmp 0x180009c85
mov dword [rsp + 0x348], 0
mov dword [rsp + 0x338], 0xd
cmp dword [rsp + 0x338], 0
jle 0x180009d69
mov eax, dword [rsp + 0x338]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009d4b
mov dword [rsp + 0x348], 4
mov eax, dword [rsp + 0x338]
dec eax
mov dword [rsp + 0x338], eax
jmp 0x180009d09
mov dword [rsp + 0x348], 0
mov eax, dword [rsp + 0x338]
sub eax, 2
mov dword [rsp + 0x338], eax
jmp 0x180009d09
mov rax, qword [rsp + 0x68]
add rax, 0x28
mov qword [rsp + 0x68], rax
jmp 0x1800099dd
mov rax, qword [rsp + 0x30]
add rax, 0x90
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp dword [rax], 0
je 0x18000aa64
xor eax, eax
test eax, eax
jne 0x180009dba
xor eax, eax
test eax, eax
jne 0x180009dc0
xor eax, eax
test eax, eax
jne 0x180009dc6
mov rax, qword [rsp + 0x20]
mov eax, dword [rax + 0xc]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [rsp + 0x38]
mov qword [rsp + 0xe8], rax
cmp qword [rsp + 0xe8], 0
jne 0x180009f99
xor eax, eax
test eax, eax
jne 0x180009e00
mov dword [rsp + 0x374], 0
mov dword [rsp + 0x368], 0x15
cmp dword [rsp + 0x368], 0
jle 0x180009e7c
mov eax, dword [rsp + 0x368]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180009e5e
mov dword [rsp + 0x374], 4
mov eax, dword [rsp + 0x368]
dec eax
mov dword [rsp + 0x368], eax
jmp 0x180009e1c
mov dword [rsp + 0x374], 0
mov eax, dword [rsp + 0x368]
sub eax, 2
mov dword [rsp + 0x368], eax
jmp 0x180009e1c
mov dword [rsp + 0x370], 7
mov dword [rsp + 0x37c], 0xb
mov eax, dword [rsp + 0x37c]
test eax, eax
jle 0x180009f02
mov eax, dword [rsp + 0x37c]
cmp eax, 1
jle 0x180009ecf
mov eax, dword [rsp + 0x370]
and eax, 0x66b
mov dword [rsp + 0x370], eax
mov eax, dword [rsp + 0x37c]
sub eax, 2
mov dword [rsp + 0x37c], eax
jmp 0x180009e92
mov eax, dword [rsp + 0x370]
cmp eax, 0x80d
jle 0x180009ef0
mov eax, dword [rsp + 0x370]
and eax, 0x86
mov dword [rsp + 0x370], eax
mov eax, dword [rsp + 0x37c]
dec eax
mov dword [rsp + 0x37c], eax
jmp 0x180009e92
mov dword [rsp + 0x36c], 4
mov dword [rsp + 0x378], 3
mov eax, dword [rsp + 0x378]
test eax, eax
jle 0x180009f86
mov eax, dword [rsp + 0x378]
cmp eax, 1
jle 0x180009f55
mov eax, dword [rsp + 0x36c]
and eax, 0x1494
mov dword [rsp + 0x36c], eax
mov eax, dword [rsp + 0x378]
sub eax, 2
mov dword [rsp + 0x378], eax
jmp 0x180009f18
mov eax, dword [rsp + 0x36c]
cmp eax, 0x805
jle 0x180009f74
mov eax, dword [rsp + 0x36c]
and eax, 0x7e
mov dword [rsp + 0x36c], eax
mov eax, dword [rsp + 0x378]
dec eax
mov dword [rsp + 0x378], eax
jmp 0x180009f18
mov rax, qword [rsp + 0x20]
add rax, 0x14
mov qword [rsp + 0x20], rax
jmp 0x180009dac
mov rax, qword [rsp + 0x20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x20]
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
cmp qword [rax], 0
je 0x18000a8df
cmp qword [rsp + 0x40], 0
je 0x18000a3bf
mov rax, qword [rsp + 0x40]
movabs rcx, 0x8000000000000000
mov rax, qword [rax]
and rax, rcx
test rax, rax
je 0x18000a3bf
mov rax, qword [rsp + 0xe8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
add rax, 0x88
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x3a4], 7
mov dword [rsp + 0x3a8], 9
mov eax, dword [rsp + 0x3a8]
test eax, eax
jle 0x18000a100
mov eax, dword [rsp + 0x3a8]
cmp eax, 1
jle 0x18000a0cd
mov eax, dword [rsp + 0x3a4]
and eax, 0x19b6
mov dword [rsp + 0x3a4], eax
mov eax, dword [rsp + 0x3a8]
sub eax, 2
mov dword [rsp + 0x3a8], eax
jmp 0x18000a090
mov eax, dword [rsp + 0x3a4]
cmp eax, 0x80b
jle 0x18000a0ee
mov eax, dword [rsp + 0x3a4]
and eax, 0x84
mov dword [rsp + 0x3a4], eax
mov eax, dword [rsp + 0x3a8]
dec eax
mov dword [rsp + 0x3a8], eax
jmp 0x18000a090
mov dword [rsp + 0x394], 7
mov dword [rsp + 0x3a0], 0xd
cmp dword [rsp + 0x3a0], 0
jle 0x18000a176
mov eax, dword [rsp + 0x3a0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a159
mov dword [rsp + 0x394], 0
mov eax, dword [rsp + 0x3a0]
sub eax, 2
mov dword [rsp + 0x3a0], eax
jmp 0x18000a116
mov dword [rsp + 0x394], 4
mov eax, dword [rsp + 0x3a0]
dec eax
mov dword [rsp + 0x3a0], eax
jmp 0x18000a116
mov dword [rsp + 0x3ac], 2
mov dword [rsp + 0x390], 0x13
cmp dword [rsp + 0x390], 0
jle 0x18000a1ed
mov eax, dword [rsp + 0x390]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a1cf
mov dword [rsp + 0x3ac], 4
mov eax, dword [rsp + 0x390]
sub eax, 2
mov dword [rsp + 0x390], eax
jmp 0x18000a18c
mov dword [rsp + 0x3ac], 4
mov eax, dword [rsp + 0x390]
sub eax, 2
mov dword [rsp + 0x390], eax
jmp 0x18000a18c
mov dword [rsp + 0x38c], 3
mov dword [rsp + 0x398], 8
mov eax, dword [rsp + 0x398]
test eax, eax
jle 0x18000a273
mov eax, dword [rsp + 0x398]
cmp eax, 1
jle 0x18000a240
mov eax, dword [rsp + 0x38c]
and eax, 0x11d0
mov dword [rsp + 0x38c], eax
mov eax, dword [rsp + 0x398]
sub eax, 2
mov dword [rsp + 0x398], eax
jmp 0x18000a203
mov eax, dword [rsp + 0x38c]
cmp eax, 0x80a
jle 0x18000a261
mov eax, dword [rsp + 0x38c]
and eax, 0x83
mov dword [rsp + 0x38c], eax
mov eax, dword [rsp + 0x398]
dec eax
mov dword [rsp + 0x398], eax
jmp 0x18000a203
mov dword [rsp + 0x388], 7
mov dword [rsp + 0x380], 0x10
cmp dword [rsp + 0x380], 0
jle 0x18000a2e9
mov eax, dword [rsp + 0x380]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a2cc
mov dword [rsp + 0x388], 0
mov eax, dword [rsp + 0x380]
sub eax, 2
mov dword [rsp + 0x380], eax
jmp 0x18000a289
mov dword [rsp + 0x388], 0
mov eax, dword [rsp + 0x380]
dec eax
mov dword [rsp + 0x380], eax
jmp 0x18000a289
mov dword [rsp + 0x384], 5
mov dword [rsp + 0x39c], 4
mov eax, dword [rsp + 0x39c]
test eax, eax
jle 0x18000a36d
mov eax, dword [rsp + 0x39c]
cmp eax, 1
jle 0x18000a33c
mov eax, dword [rsp + 0x384]
and eax, 0x1952
mov dword [rsp + 0x384], eax
mov eax, dword [rsp + 0x39c]
sub eax, 2
mov dword [rsp + 0x39c], eax
jmp 0x18000a2ff
mov eax, dword [rsp + 0x384]
cmp eax, 0x806
jle 0x18000a35b
mov eax, dword [rsp + 0x384]
and eax, 0x7f
mov dword [rsp + 0x384], eax
mov eax, dword [rsp + 0x39c]
dec eax
mov dword [rsp + 0x39c], eax
jmp 0x18000a2ff
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
and rax, 0xffff
mov rcx, qword [rsp + 0x90]
mov ecx, dword [rcx + 0x10]
sub rax, rcx
mov rcx, qword [rsp + 0xe0]
lea rax, [rcx + rax*4]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x68]
mov qword [rcx], rax
jmp 0x18000a434
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0], rax
xor eax, eax
test eax, eax
jne 0x18000a3dd
xor eax, eax
test eax, eax
jne 0x18000a3e3
xor eax, eax
test eax, eax
jne 0x18000a3e9
mov rax, qword [rsp + 0xd0]
add rax, 2
mov rdx, rax
mov rcx, qword [rsp + 0xe8]
call qword [rsp + 0x70]
mov qword [rsp + 0x3b0], rax
cmp qword [rsp + 0x3b0], 0
jne 0x18000a424
xor eax, eax
jmp 0x18000b2c5
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x3b0]
mov qword [rax], rcx
mov dword [rsp + 0x3c8], 8
mov dword [rsp + 0x3d0], 3
mov eax, dword [rsp + 0x3d0]
test eax, eax
jle 0x18000a4b8
mov eax, dword [rsp + 0x3d0]
cmp eax, 1
jle 0x18000a487
mov eax, dword [rsp + 0x3c8]
and eax, 0x1fed
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3d0]
sub eax, 2
mov dword [rsp + 0x3d0], eax
jmp 0x18000a44a
mov eax, dword [rsp + 0x3c8]
cmp eax, 0x805
jle 0x18000a4a6
mov eax, dword [rsp + 0x3c8]
and eax, 0x7e
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3d0]
dec eax
mov dword [rsp + 0x3d0], eax
jmp 0x18000a44a
mov dword [rsp + 0x3cc], 1
mov dword [rsp + 0x3c4], 0x10
cmp dword [rsp + 0x3c4], 0
jle 0x18000a52e
mov eax, dword [rsp + 0x3c4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a510
mov dword [rsp + 0x3cc], 4
mov eax, dword [rsp + 0x3c4]
dec eax
mov dword [rsp + 0x3c4], eax
jmp 0x18000a4ce
mov dword [rsp + 0x3cc], 0
mov eax, dword [rsp + 0x3c4]
sub eax, 2
mov dword [rsp + 0x3c4], eax
jmp 0x18000a4ce
mov dword [rsp + 0x3c0], 3
mov dword [rsp + 0x3d4], 0xf
cmp dword [rsp + 0x3d4], 0
jle 0x18000a5a5
mov eax, dword [rsp + 0x3d4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a587
mov dword [rsp + 0x3c0], 0
mov eax, dword [rsp + 0x3d4]
sub eax, 2
mov dword [rsp + 0x3d4], eax
jmp 0x18000a544
mov dword [rsp + 0x3c0], 4
mov eax, dword [rsp + 0x3d4]
sub eax, 2
mov dword [rsp + 0x3d4], eax
jmp 0x18000a544
mov dword [rsp + 0x3b8], 2
mov dword [rsp + 0x3bc], 0xa
mov eax, dword [rsp + 0x3bc]
test eax, eax
jle 0x18000a62b
mov eax, dword [rsp + 0x3bc]
cmp eax, 1
jle 0x18000a5f8
mov eax, dword [rsp + 0x3b8]
and eax, 0x2106
mov dword [rsp + 0x3b8], eax
mov eax, dword [rsp + 0x3bc]
sub eax, 2
mov dword [rsp + 0x3bc], eax
jmp 0x18000a5bb
mov eax, dword [rsp + 0x3b8]
cmp eax, 0x80c
jle 0x18000a619
mov eax, dword [rsp + 0x3b8]
and eax, 0x85
mov dword [rsp + 0x3b8], eax
mov eax, dword [rsp + 0x3bc]
dec eax
mov dword [rsp + 0x3bc], eax
jmp 0x18000a5bb
mov rax, qword [rsp + 0x68]
add rax, 8
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x40], 0
je 0x18000a8da
mov dword [rsp + 0x3e0], 4
mov dword [rsp + 0x3f4], 3
mov eax, dword [rsp + 0x3f4]
test eax, eax
jle 0x18000a6c9
mov eax, dword [rsp + 0x3f4]
cmp eax, 1
jle 0x18000a698
mov eax, dword [rsp + 0x3e0]
and eax, 0xdd8
mov dword [rsp + 0x3e0], eax
mov eax, dword [rsp + 0x3f4]
sub eax, 2
mov dword [rsp + 0x3f4], eax
jmp 0x18000a65b
mov eax, dword [rsp + 0x3e0]
cmp eax, 0x805
jle 0x18000a6b7
mov eax, dword [rsp + 0x3e0]
and eax, 0x7e
mov dword [rsp + 0x3e0], eax
mov eax, dword [rsp + 0x3f4]
dec eax
mov dword [rsp + 0x3f4], eax
jmp 0x18000a65b
mov dword [rsp + 0x3dc], 6
mov dword [rsp + 0x3fc], 0xa
mov eax, dword [rsp + 0x3fc]
test eax, eax
jle 0x18000a74f
mov eax, dword [rsp + 0x3fc]
cmp eax, 1
jle 0x18000a71c
mov eax, dword [rsp + 0x3dc]
and eax, 0x1f29
mov dword [rsp + 0x3dc], eax
mov eax, dword [rsp + 0x3fc]
sub eax, 2
mov dword [rsp + 0x3fc], eax
jmp 0x18000a6df
mov eax, dword [rsp + 0x3dc]
cmp eax, 0x80c
jle 0x18000a73d
mov eax, dword [rsp + 0x3dc]
and eax, 0x85
mov dword [rsp + 0x3dc], eax
mov eax, dword [rsp + 0x3fc]
dec eax
mov dword [rsp + 0x3fc], eax
jmp 0x18000a6df
mov dword [rsp + 0x3e8], 0
mov dword [rsp + 0x3ec], 0x14
cmp dword [rsp + 0x3ec], 0
jle 0x18000a7c4
mov eax, dword [rsp + 0x3ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a7a7
mov dword [rsp + 0x3e8], 4
mov eax, dword [rsp + 0x3ec]
dec eax
mov dword [rsp + 0x3ec], eax
jmp 0x18000a765
mov dword [rsp + 0x3e8], 0
mov eax, dword [rsp + 0x3ec]
dec eax
mov dword [rsp + 0x3ec], eax
jmp 0x18000a765
mov dword [rsp + 0x3d8], 4
mov dword [rsp + 0x3e4], 3
mov eax, dword [rsp + 0x3e4]
test eax, eax
jle 0x18000a848
mov eax, dword [rsp + 0x3e4]
cmp eax, 1
jle 0x18000a817
mov eax, dword [rsp + 0x3d8]
and eax, 0x1891
mov dword [rsp + 0x3d8], eax
mov eax, dword [rsp + 0x3e4]
sub eax, 2
mov dword [rsp + 0x3e4], eax
jmp 0x18000a7da
mov eax, dword [rsp + 0x3d8]
cmp eax, 0x805
jle 0x18000a836
mov eax, dword [rsp + 0x3d8]
and eax, 0x7e
mov dword [rsp + 0x3d8], eax
mov eax, dword [rsp + 0x3e4]
dec eax
mov dword [rsp + 0x3e4], eax
jmp 0x18000a7da
mov dword [rsp + 0x3f0], 2
mov dword [rsp + 0x3f8], 4
mov eax, dword [rsp + 0x3f8]
test eax, eax
jle 0x18000a8cc
mov eax, dword [rsp + 0x3f8]
cmp eax, 1
jle 0x18000a89b
mov eax, dword [rsp + 0x3f0]
and eax, 0x1176
mov dword [rsp + 0x3f0], eax
mov eax, dword [rsp + 0x3f8]
sub eax, 2
mov dword [rsp + 0x3f8], eax
jmp 0x18000a85e
mov eax, dword [rsp + 0x3f0]
cmp eax, 0x806
jle 0x18000a8ba
mov eax, dword [rsp + 0x3f0]
and eax, 0x7f
mov dword [rsp + 0x3f0], eax
mov eax, dword [rsp + 0x3f8]
dec eax
mov dword [rsp + 0x3f8], eax
jmp 0x18000a85e
mov rax, qword [rsp + 0x40]
add rax, 8
mov qword [rsp + 0x40], rax
jmp 0x180009fce
mov dword [rsp + 0x404], 3
mov dword [rsp + 0x40c], 0xa
mov eax, dword [rsp + 0x40c]
test eax, eax
jle 0x18000a965
mov eax, dword [rsp + 0x40c]
cmp eax, 1
jle 0x18000a932
mov eax, dword [rsp + 0x404]
and eax, 0x107d
mov dword [rsp + 0x404], eax
mov eax, dword [rsp + 0x40c]
sub eax, 2
mov dword [rsp + 0x40c], eax
jmp 0x18000a8f5
mov eax, dword [rsp + 0x404]
cmp eax, 0x80c
jle 0x18000a953
mov eax, dword [rsp + 0x404]
and eax, 0x85
mov dword [rsp + 0x404], eax
mov eax, dword [rsp + 0x40c]
dec eax
mov dword [rsp + 0x40c], eax
jmp 0x18000a8f5
mov dword [rsp + 0x410], 0
mov dword [rsp + 0x408], 0xd
cmp dword [rsp + 0x408], 0
jle 0x18000a9db
mov eax, dword [rsp + 0x408]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000a9bd
mov dword [rsp + 0x410], 4
mov eax, dword [rsp + 0x408]
dec eax
mov dword [rsp + 0x408], eax
jmp 0x18000a97b
mov dword [rsp + 0x410], 0
mov eax, dword [rsp + 0x408]
sub eax, 2
mov dword [rsp + 0x408], eax
jmp 0x18000a97b
mov dword [rsp + 0x414], 7
mov dword [rsp + 0x400], 0x11
cmp dword [rsp + 0x400], 0
jle 0x18000aa51
mov eax, dword [rsp + 0x400]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000aa33
mov dword [rsp + 0x414], 0
mov eax, dword [rsp + 0x400]
dec eax
mov dword [rsp + 0x400], eax
jmp 0x18000a9f1
mov dword [rsp + 0x414], 4
mov eax, dword [rsp + 0x400]
sub eax, 2
mov dword [rsp + 0x400], eax
jmp 0x18000a9f1
mov rax, qword [rsp + 0x20]
add rax, 0x14
mov qword [rsp + 0x20], rax
jmp 0x180009dac
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x30]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x30]
add rax, 0xb0
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
cmp dword [rax + 4], 0
je 0x18000b278
mov rax, qword [rsp + 0xd0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp dword [rax + 4], 0
je 0x18000b278
mov rax, qword [rsp + 0x20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x418], 3
mov dword [rsp + 0x420], 0xa
mov eax, dword [rsp + 0x420]
test eax, eax
jle 0x18000ab74
mov eax, dword [rsp + 0x420]
cmp eax, 1
jle 0x18000ab41
mov eax, dword [rsp + 0x418]
and eax, 0x107d
mov dword [rsp + 0x418], eax
mov eax, dword [rsp + 0x420]
sub eax, 2
mov dword [rsp + 0x420], eax
jmp 0x18000ab04
mov eax, dword [rsp + 0x418]
cmp eax, 0x80c
jle 0x18000ab62
mov eax, dword [rsp + 0x418]
and eax, 0x85
mov dword [rsp + 0x418], eax
mov eax, dword [rsp + 0x420]
dec eax
mov dword [rsp + 0x420], eax
jmp 0x18000ab04
mov dword [rsp + 0x424], 4
mov dword [rsp + 0x430], 3
mov eax, dword [rsp + 0x430]
test eax, eax
jle 0x18000abf8
mov eax, dword [rsp + 0x430]
cmp eax, 1
jle 0x18000abc7
mov eax, dword [rsp + 0x424]
and eax, 0x1891
mov dword [rsp + 0x424], eax
mov eax, dword [rsp + 0x430]
sub eax, 2
mov dword [rsp + 0x430], eax
jmp 0x18000ab8a
mov eax, dword [rsp + 0x424]
cmp eax, 0x805
jle 0x18000abe6
mov eax, dword [rsp + 0x424]
and eax, 0x7e
mov dword [rsp + 0x424], eax
mov eax, dword [rsp + 0x430]
dec eax
mov dword [rsp + 0x430], eax
jmp 0x18000ab8a
mov dword [rsp + 0x434], 5
mov dword [rsp + 0x42c], 0xf
cmp dword [rsp + 0x42c], 0
jle 0x18000ac6d
mov eax, dword [rsp + 0x42c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ac50
mov dword [rsp + 0x434], 0
mov eax, dword [rsp + 0x42c]
dec eax
mov dword [rsp + 0x42c], eax
jmp 0x18000ac0e
mov dword [rsp + 0x434], 4
mov eax, dword [rsp + 0x42c]
dec eax
mov dword [rsp + 0x42c], eax
jmp 0x18000ac0e
mov dword [rsp + 0x428], 2
mov dword [rsp + 0x41c], 5
mov eax, dword [rsp + 0x41c]
test eax, eax
jle 0x18000acf3
mov eax, dword [rsp + 0x41c]
cmp eax, 1
jle 0x18000acc0
mov eax, dword [rsp + 0x428]
and eax, 0x204d
mov dword [rsp + 0x428], eax
mov eax, dword [rsp + 0x41c]
sub eax, 2
mov dword [rsp + 0x41c], eax
jmp 0x18000ac83
mov eax, dword [rsp + 0x428]
cmp eax, 0x807
jle 0x18000ace1
mov eax, dword [rsp + 0x428]
and eax, 0x80
mov dword [rsp + 0x428], eax
mov eax, dword [rsp + 0x41c]
dec eax
mov dword [rsp + 0x41c], eax
jmp 0x18000ac83
mov rax, qword [rsp + 0x20]
mov eax, dword [rax + 4]
sub rax, 8
xor edx, edx
mov ecx, 2
div rcx
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0x444], 4
mov dword [rsp + 0x43c], 0x13
cmp dword [rsp + 0x43c], 0
jle 0x18000ad87
mov eax, dword [rsp + 0x43c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ad69
mov dword [rsp + 0x444], 0
mov eax, dword [rsp + 0x43c]
dec eax
mov dword [rsp + 0x43c], eax
jmp 0x18000ad27
mov dword [rsp + 0x444], 0
mov eax, dword [rsp + 0x43c]
sub eax, 2
mov dword [rsp + 0x43c], eax
jmp 0x18000ad27
mov dword [rsp + 0x440], 8
mov dword [rsp + 0x44c], 0xc
cmp dword [rsp + 0x44c], 0
jle 0x18000adfd
mov eax, dword [rsp + 0x44c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000addf
mov dword [rsp + 0x440], 4
mov eax, dword [rsp + 0x44c]
dec eax
mov dword [rsp + 0x44c], eax
jmp 0x18000ad9d
mov dword [rsp + 0x440], 0
mov eax, dword [rsp + 0x44c]
sub eax, 2
mov dword [rsp + 0x44c], eax
jmp 0x18000ad9d
mov dword [rsp + 0x438], 3
mov dword [rsp + 0x448], 0xf
cmp dword [rsp + 0x448], 0
jle 0x18000ae74
mov eax, dword [rsp + 0x448]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ae56
mov dword [rsp + 0x438], 0
mov eax, dword [rsp + 0x448]
sub eax, 2
mov dword [rsp + 0x448], eax
jmp 0x18000ae13
mov dword [rsp + 0x438], 4
mov eax, dword [rsp + 0x448]
sub eax, 2
mov dword [rsp + 0x448], eax
jmp 0x18000ae13
mov rax, qword [rsp + 0x20]
add rax, 8
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd0]
dec rcx
mov qword [rsp + 0xd0], rcx
test rax, rax
je 0x18000b25b
mov rax, qword [rsp + 0x40]
movzx eax, word [rax]
shr ax, 0xc
and ax, 0xf
movzx eax, ax
cmp eax, 0xa
jne 0x18000af09
mov eax, 0xfff
mov rcx, qword [rsp + 0x40]
movzx ecx, word [rcx]
and cx, ax
movzx eax, cx
movzx eax, ax
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx + rax]
add rax, qword [rsp + 0xe8]
mov ecx, 0xfff
mov rdx, qword [rsp + 0x40]
movzx edx, word [rdx]
and dx, cx
movzx ecx, dx
movzx ecx, cx
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
jmp 0x18000b043
mov rax, qword [rsp + 0x40]
movzx eax, word [rax]
shr ax, 0xc
and ax, 0xf
movzx eax, ax
cmp eax, 3
jne 0x18000af69
mov eax, 0xfff
mov rcx, qword [rsp + 0x40]
movzx ecx, word [rcx]
and cx, ax
movzx eax, cx
movzx eax, ax
mov rcx, qword [rsp + 0x68]
mov eax, dword [rcx + rax]
add eax, dword [rsp + 0xe8]
mov ecx, 0xfff
mov rdx, qword [rsp + 0x40]
movzx edx, word [rdx]
and dx, cx
movzx ecx, dx
movzx ecx, cx
mov rdx, qword [rsp + 0x68]
mov dword [rdx + rcx], eax
jmp 0x18000b043
mov rax, qword [rsp + 0x40]
movzx eax, word [rax]
shr ax, 0xc
and ax, 0xf
movzx eax, ax
cmp eax, 1
jne 0x18000afd9
mov eax, 0xfff
mov rcx, qword [rsp + 0x40]
movzx ecx, word [rcx]
and cx, ax
movzx eax, cx
movzx eax, ax
mov rcx, qword [rsp + 0xe8]
shr rcx, 0x10
and rcx, 0xffff
movzx ecx, cx
mov rdx, qword [rsp + 0x68]
movzx eax, word [rdx + rax]
add eax, ecx
mov ecx, 0xfff
mov rdx, qword [rsp + 0x40]
movzx edx, word [rdx]
and dx, cx
movzx ecx, dx
movzx ecx, cx
mov rdx, qword [rsp + 0x68]
mov word [rdx + rcx], ax
jmp 0x18000b043
mov rax, qword [rsp + 0x40]
movzx eax, word [rax]
shr ax, 0xc
and ax, 0xf
movzx eax, ax
cmp eax, 2
jne 0x18000b043
mov eax, 0xfff
mov rcx, qword [rsp + 0x40]
movzx ecx, word [rcx]
and cx, ax
movzx eax, cx
movzx eax, ax
mov rcx, qword [rsp + 0xe8]
and rcx, 0xffff
movzx ecx, cx
mov rdx, qword [rsp + 0x68]
movzx eax, word [rdx + rax]
add eax, ecx
mov ecx, 0xfff
mov rdx, qword [rsp + 0x40]
movzx edx, word [rdx]
and dx, cx
movzx ecx, dx
movzx ecx, cx
mov rdx, qword [rsp + 0x68]
mov word [rdx + rcx], ax
mov dword [rsp + 0x460], 8
mov dword [rsp + 0x468], 3
mov eax, dword [rsp + 0x468]
test eax, eax
jle 0x18000b0c7
mov eax, dword [rsp + 0x468]
cmp eax, 1
jle 0x18000b096
mov eax, dword [rsp + 0x460]
and eax, 0x1fed
mov dword [rsp + 0x460], eax
mov eax, dword [rsp + 0x468]
sub eax, 2
mov dword [rsp + 0x468], eax
jmp 0x18000b059
mov eax, dword [rsp + 0x460]
cmp eax, 0x805
jle 0x18000b0b5
mov eax, dword [rsp + 0x460]
and eax, 0x7e
mov dword [rsp + 0x460], eax
mov eax, dword [rsp + 0x468]
dec eax
mov dword [rsp + 0x468], eax
jmp 0x18000b059
mov dword [rsp + 0x458], 4
mov dword [rsp + 0x450], 0x15
cmp dword [rsp + 0x450], 0
jle 0x18000b13e
mov eax, dword [rsp + 0x450]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000b120
mov dword [rsp + 0x458], 0
mov eax, dword [rsp + 0x450]
sub eax, 2
mov dword [rsp + 0x450], eax
jmp 0x18000b0dd
mov dword [rsp + 0x458], 0
mov eax, dword [rsp + 0x450]
sub eax, 2
mov dword [rsp + 0x450], eax
jmp 0x18000b0dd
mov dword [rsp + 0x454], 3
mov dword [rsp + 0x45c], 8
mov eax, dword [rsp + 0x45c]
test eax, eax
jle 0x18000b1c4
mov eax, dword [rsp + 0x45c]
cmp eax, 1
jle 0x18000b191
mov eax, dword [rsp + 0x454]
and eax, 0x11d0
mov dword [rsp + 0x454], eax
mov eax, dword [rsp + 0x45c]
sub eax, 2
mov dword [rsp + 0x45c], eax
jmp 0x18000b154
mov eax, dword [rsp + 0x454]
cmp eax, 0x80a
jle 0x18000b1b2
mov eax, dword [rsp + 0x454]
and eax, 0x83
mov dword [rsp + 0x454], eax
mov eax, dword [rsp + 0x45c]
dec eax
mov dword [rsp + 0x45c], eax
jmp 0x18000b154
mov dword [rsp + 0x464], 2
mov dword [rsp + 0x46c], 4
mov eax, dword [rsp + 0x46c]
test eax, eax
jle 0x18000b248
mov eax, dword [rsp + 0x46c]
cmp eax, 1
jle 0x18000b217
mov eax, dword [rsp + 0x464]
and eax, 0x1176
mov dword [rsp + 0x464], eax
mov eax, dword [rsp + 0x46c]
sub eax, 2
mov dword [rsp + 0x46c], eax
jmp 0x18000b1da
mov eax, dword [rsp + 0x464]
cmp eax, 0x806
jle 0x18000b236
mov eax, dword [rsp + 0x464]
and eax, 0x7f
mov dword [rsp + 0x464], eax
mov eax, dword [rsp + 0x46c]
dec eax
mov dword [rsp + 0x46c], eax
jmp 0x18000b1da
mov rax, qword [rsp + 0x40]
add rax, 2
mov qword [rsp + 0x40], rax
jmp 0x18000ae82
mov rax, qword [rsp + 0x20]
mov eax, dword [rax + 4]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
jmp 0x18000aac5
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x28]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
xor eax, eax
test eax, eax
jne 0x18000b293
xor r8d, r8d
xor edx, edx
mov rcx, 0xffffffffffffffff
call qword [rsp + 0x28]
mov r8d, 0xf1a7d42b
mov edx, 1
mov rcx, qword [rsp + 0x80]
call qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
add rsp, 0x478
ret