Function at 0x426d5a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xa68
movaps xmmword [rsp + 0xa20], xmm6
movaps xmmword [rsp + 0xa30], xmm7
movaps xmmword [rsp + 0xa40], xmm8
movaps xmmword [rsp + 0xa50], xmm9
mov qword [rsp + 0xab0], rcx
mov qword [rsp + 0xab8], rdx
movsxd rdx, dword [rcx + 0x1d0]
mov rbx, qword [rcx + 0x1e0]
mov r15, qword [rbx + rdx*8]
mov ebx, dword [r15 + 0x18]
mov edi, dword [r15 + 0x14]
mov dword [rsp + 0x48], edi
test bl, 8
jne 0x4275ce
test ebx, 0x40000004
je 0x426f7e
mov r10, qword [rsp + 0xab8]
lea r11, [r10 + rdi*4]
cmp r10, r11
jae 0x42a5bf
mov r12, r10
not r12
add r12, r11
shr r12, 2
and r12d, 7
mov rax, r10
add rax, 4
mov r14d, dword [rax - 4]
sub r14d, 3
mov dword [rsp + 0x28], r14d
cmp r11, rax
jbe 0x426f44
test r12, r12
je 0x426ee6
cmp r12, 1
je 0x426ec9
cmp r12, 2
je 0x426eb3
cmp r12, 3
je 0x426ea0
cmp r12, 4
je 0x426e87
cmp r12, 5
je 0x426e71
cmp r12, 6
je 0x426e5c
mov edi, dword [rax]
add rax, 4
lea ebp, [rdi + r14*2]
add r14d, ebp
mov dword [rsp + 0x28], r14d
mov edx, dword [rax]
add rax, 4
mov esi, dword [rsp + 0x28]
lea r9d, [rdx + rsi*2]
add esi, r9d
mov dword [rsp + 0x28], esi
mov r8d, dword [rax]
add rax, 4
mov ecx, dword [rsp + 0x28]
lea r14d, [r8 + rcx*2]
add ecx, r14d
mov dword [rsp + 0x28], ecx
mov r13d, dword [rax]
add rax, 4
mov r10d, dword [rsp + 0x28]
lea r12d, [r13 + r10*2]
add r10d, r12d
mov dword [rsp + 0x28], r10d
mov edi, dword [rax]
add rax, 4
mov ebp, dword [rsp + 0x28]
lea edx, [rdi + rbp*2]
add ebp, edx
mov dword [rsp + 0x28], ebp
mov r9d, dword [rax]
add rax, 4
mov esi, dword [rsp + 0x28]
lea r8d, [r9 + rsi*2]
add esi, r8d
mov dword [rsp + 0x28], esi
add rax, 4
mov ecx, dword [rax - 4]
mov r14d, dword [rsp + 0x28]
lea r13d, [rcx + r14*2]
add r14d, r13d
mov dword [rsp + 0x28], r14d
cmp r11, rax
jbe 0x426f44
mov esi, r14d
mov r10d, dword [rax]
lea r12d, [r10 + rsi*2]
add esi, r12d
mov edi, dword [rax + 4]
lea ebp, [rdi + rsi*2]
add esi, ebp
mov edx, dword [rax + 8]
lea r9d, [rdx + rsi*2]
add esi, r9d
mov r8d, dword [rax + 0xc]
lea ecx, [r8 + rsi*2]
add esi, ecx
mov r14d, dword [rax + 0x10]
lea r13d, [r14 + rsi*2]
add esi, r13d
mov r10d, dword [rax + 0x14]
lea r12d, [r10 + rsi*2]
add esi, r12d
mov edi, dword [rax + 0x18]
lea ebp, [rdi + rsi*2]
add esi, ebp
add rax, 0x20
mov edx, dword [rax - 4]
lea r9d, [rdx + rsi*2]
add esi, r9d
cmp r11, rax
ja 0x426ee9
mov dword [rsp + 0x28], esi
mov r11d, dword [r15 + 0xbc]
test r11d, r11d
je 0x426fa0
mov eax, dword [r15 + 0xa4]
test eax, eax
mov r9d, 1
sete sil
movzx r8d, sil
mov rdx, qword [rsp + 0xab8]
mov rcx, qword [rsp + 0xab0]
call fcn.004439ff
jmp 0x426fa0
mov r9d, ebx
and r9d, 0x4000000c
je 0x4275de
cmp r9d, 8
je 0x42780b
mov dword [rsp + 0x28], 0xffffffff
mov dword [r15 + 4], 0x18
mov r8, qword [r15 + 0x70]
mov rcx, qword [r15]
mov qword [r8], rcx
mov r14, qword [r15 + 8]
mov qword [r8 + 8], r14
mov r13, qword [r15 + 0x10]
mov qword [r8 + 0x10], r13
mov r10, qword [r15 + 0x18]
mov qword [r8 + 0x18], r10
mov r12, qword [rsp + 0xab0]
mov edi, dword [r12 + 0x64]
test edi, edi
je 0x42702c
mov rbp, qword [r12 + 0x58]
mov rsi, r12
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, rbp
call fcn.00432115
mov edx, dword [rbp]
sub dword [rsi + 0x60], edx
mov rcx, rbp
add rbp, 0x18
call fcn.004321e7
sub dword [rsi + 0x64], 1
jne 0x426fe3
mov r9, qword [rsp + 0xab0]
mov rcx, qword [r9 + 0x58]
call sub.msvcrt.dll_free
mov r11, qword [rsp + 0xab0]
mov qword [r11 + 0x58], 0
mov r8d, dword [rsp + 0x48]
test r8d, r8d
je 0x42774e
mov rax, qword [r15 + 0x70]
mov rcx, qword [rax]
mov qword [r15], rcx
mov r14, qword [rax + 8]
mov qword [r15 + 8], r14
mov r13, qword [rax + 0x10]
mov qword [r15 + 0x10], r13
mov r10, qword [rax + 0x18]
mov qword [r15 + 0x18], r10
mov r12d, dword [r15 + 0xa4]
mov dword [rsp + 0x50], r12d
mov edi, ebx
and edi, 0x400000
mov qword [rsp + 0x98], r8
mov ebp, ebx
and ebp, 8
mov dword [rsp + 0x30], ebp
mov esi, ebx
and esi, 0x40000004
mov dword [rsp + 0x7c], esi
mov edx, dword [r15 + 0xbc]
test edx, edx
jne 0x427120
cmp r12d, 5
jle 0x427120
test edi, edi
je 0x42a51e
lea rdi, [rsp + 0x140]
mov qword [rsp + 0x70], rdi
mov ecx, 0x11b
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov dword [rsp + 0x78], 0xf0000000
mov r9d, dword [rsp + 0x30]
test r9d, r9d
jne 0x42a367
mov r11, qword [rsp + 0x98]
mov r8d, dword [rsp + 0x7c]
test r8d, r8d
je 0x42a511
lea r14, [r11*4]
mov rcx, r14
call sub.msvcrt.dll_malloc
mov qword [rsp + 0x60], rax
mov r8, r14
mov rdx, qword [rsp + 0xab8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rsp + 0x54], 1
jmp 0x427159
test edi, edi
je 0x4277d5
lea rdi, [rsp + 0x140]
mov qword [rsp + 0x70], rdi
mov ecx, 0x11b
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov dword [rsp + 0x78], 0xf0000000
mov dword [rsp + 0x54], 0
mov qword [rsp + 0x60], 0
mov eax, ebx
and eax, 0x80
mov dword [rsp + 0x5c], eax
mov r13d, ebx
and r13d, 0x100
mov dword [rsp + 0x68], r13d
mov r10d, ebx
and r10d, 0x40
mov dword [rsp + 0x4c], r10d
mov r12d, ebx
and r12d, 0x4000000c
mov dword [rsp + 0x58], r12d
mov ebp, ebx
and ebp, 0x20000000
mov dword [rsp + 0xa8], ebp
and ebx, 0x10
mov dword [rsp + 0x6c], ebx
mov edx, dword [rsp + 0x48]
lea ecx, [rdx + rdx]
mov rbx, rcx
mov dword [rsp + 0xac], ecx
mov rdi, qword [rsp + 0xab8]
lea rsi, [rdi + rcx*4]
mov qword [rsp + 0xa0], rsi
lea r9d, [rcx - 1]
mov dword [rsp + 0xbc], r9d
cmp dword [rsp + 0x7c], 1
sbb r11, r11
not r11
add r11, 2
imul r11, qword [rsp + 0x98]
shl r11, 2
mov qword [rsp + 0x80], r11
lea r8, [r15 + 0xd8]
mov qword [rsp + 0x40], r8
lea rbp, [r15 + 0x1c8]
lea r14d, [rdx - 1]
lea r13, [rdi + r14*4 + 4]
mov qword [rsp + 0x90], r13
lea r10, [rdi + r14*8 + 8]
mov qword [rsp + 0x88], r10
mov r12, rdi
shr r12, 2
neg r12
and r12d, 3
mov dword [rsp + 0xb8], r12d
sub ebx, r12d
mov dword [rsp + 0xc8], ebx
lea rdx, [rdi + r12*4]
mov qword [rsp + 0xc0], rdx
mov ecx, ebx
shr ecx, 2
shl rcx, 4
add rcx, rdx
mov qword [rsp + 0xb0], rcx
and ebx, 0xfffffffc
mov dword [rsp + 0xcc], ebx
mov ebx, ebx
shl rbx, 2
mov qword [rsp + 0xd0], rbx
mov edi, dword [rsp + 0x50]
mov dword [rsp + 0x24], 0xffffffff
lea r12, [rsp + 0xe0]
pxor xmm6, xmm6
mov rsi, qword [r15 + 0x1b8]
mov qword [rsp + 0x38], rsi
lea r9d, [rdi + 1]
movsxd rcx, r9d
call sub.msvcrt.dll_malloc
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 2
lea r11d, [rdi - 1]
test edi, edi
je 0x4273d2
mov rdx, rbp
lea r8, [rax + r11 + 1]
lea r14, [r11 + 1]
and r14d, 3
je 0x427351
cmp r14, 1
je 0x427329
cmp r14, 2
je 0x42730e
movzx r13d, byte [rbp]
lea edi, [r13 + 5]
and edi, 0x1f
mov r10d, dword [rbp + 4]
shl r10d, 5
or edi, r10d
mov byte [rax], dil
add rax, 1
lea rdx, [rbp + 0x60]
movzx ecx, byte [rdx]
lea ebx, [rcx + 5]
and ebx, 0x1f
mov esi, dword [rdx + 4]
shl esi, 5
or ebx, esi
mov byte [rax], bl
add rax, 1
add rdx, 0x60
add rax, 1
movzx r9d, byte [rdx]
lea r14d, [r9 + 5]
and r14d, 0x1f
mov r13d, dword [rdx + 4]
shl r13d, 5
or r14d, r13d
mov byte [rax - 1], r14b
add rdx, 0x60
cmp rax, r8
je 0x4273ce
movzx edi, byte [rdx]
lea ecx, [rdi + 5]
and ecx, 0x1f
mov r10d, dword [rdx + 4]
shl r10d, 5
or ecx, r10d
mov byte [rax], cl
movzx ebx, byte [rdx + 0x60]
lea esi, [rbx + 5]
and esi, 0x1f
mov r9d, dword [rdx + 0x64]
shl r9d, 5
or esi, r9d
mov byte [rax + 1], sil
movzx r14d, byte [rdx + 0xc0]
lea r13d, [r14 + 5]
and r13d, 0x1f
mov edi, dword [rdx + 0xc4]
shl edi, 5
or r13d, edi
mov byte [rax + 2], r13b
add rax, 4
movzx ecx, byte [rdx + 0x120]
lea ebx, [rcx + 5]
and ebx, 0x1f
mov r10d, dword [rdx + 0x124]
shl r10d, 5
or ebx, r10d
mov byte [rax - 1], bl
add rdx, 0x180
cmp rax, r8
jne 0x427351
lea edi, [r11 + 1]
mov dword [rsp + 0xe0], edi
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
mov r13d, dword [r15 + 0xa4]
lea eax, [r13 + r13 + 1]
movsxd rcx, eax
call sub.msvcrt.dll_malloc
mov rsi, rax
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 3
mov ebx, r13d
sub ebx, 1
js 0x427564
movsxd r11, r13d
lea r8, [r11 + r11*2]
shl r8, 5
lea r14, [r15 + r8 + 0x170]
and r13d, 3
je 0x4274c5
cmp r13d, 1
je 0x427497
cmp r13d, 2
je 0x427472
mov ecx, dword [r14]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x428fd2
sub ebx, 1
sub r14, 0x60
mov ecx, dword [r14]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x428e60
sub ebx, 1
sub r14, 0x60
mov ecx, dword [r14]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x4288df
sub ebx, 1
sub r14, 0x60
cmp ebx, 0xffffffff
je 0x42755d
mov ecx, dword [r14]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x427ec2
lea r13d, [rbx - 1]
mov ebx, r13d
lea rdi, [r14 - 0x60]
mov ecx, dword [r14 - 0x60]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x427ed8
lea ebx, [r13 - 1]
mov ecx, dword [rdi - 0x60]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x4280a4
lea ebx, [r13 - 2]
mov ecx, dword [rdi - 0xc0]
call fcn.00440fe4
test al, al
jne 0x42755d
test dword [r15 + 0x18], 0x40000004
je 0x4280b9
lea ebx, [r13 - 3]
lea r14, [rdi - 0x120]
cmp r13d, 2
jne 0x4274c5
mov r13d, dword [r15 + 0xa4]
test r13d, r13d
jle 0x427858
lea r13, [r15 + 0x1d0]
xor r14d, r14d
jmp 0x42759e
mov dword [r13 + 4], 0
mov dword [r13], 0
add r14d, 1
add r13, 0x60
cmp r14d, dword [r15 + 0xa4]
jge 0x427858
cmp r14d, ebx
jg 0x427579
mov ecx, dword [r13]
call fcn.00440fe4
mov byte [rsi], al
movsx ecx, al
call fcn.00441013
mov dword [r13], eax
test dword [r15 + 0x18], 0x40000004
je 0x427e9e
add rsi, 1
jmp 0x427589
mov r9d, ebx
and r9d, 0x4000000c
jne 0x427789
mov r12d, dword [rsp + 0x48]
add r12d, r12d
mov r13, qword [rsp + 0xab8]
lea r14, [r13 + r12*4]
cmp r13, r14
jae 0x42a59a
mov rdx, r13
not rdx
add rdx, r14
shr rdx, 3
and edx, 3
mov edi, dword [r13]
mov esi, dword [r13 + 4]
lea ebp, [rdi + rsi - 9]
lea r8d, [rbp + rdi*2]
mov dword [rsp + 0x28], r8d
add r13, 8
cmp r14, r13
jbe 0x427709
test rdx, rdx
je 0x42a4df
cmp rdx, 1
je 0x427688
cmp rdx, 2
je 0x42766c
mov r9d, dword [r13]
mov ecx, dword [rsp + 0x28]
lea r10d, [r9 + rcx*8]
add r10d, ecx
add r10d, dword [r13 + 4]
lea r12d, [r10 + r9*2]
mov dword [rsp + 0x28], r12d
mov r13, qword [rsp + 0xab8]
add r13, 0x10
mov eax, dword [r13]
mov edi, dword [rsp + 0x28]
lea edx, [rax + rdi*8]
add edx, edi
add edx, dword [r13 + 4]
lea esi, [rdx + rax*2]
mov dword [rsp + 0x28], esi
add r13, 8
mov ebp, dword [r13]
mov r8d, dword [rsp + 0x28]
lea r9d, [rbp + r8*8]
add r9d, r8d
add r9d, dword [r13 + 4]
lea r8d, [r9 + rbp*2]
mov dword [rsp + 0x28], r8d
add r13, 8
mov ecx, r8d
cmp r14, r13
jbe 0x427709
mov r10d, dword [r13]
lea r11d, [r10 + rcx*8]
add r11d, ecx
add r11d, dword [r13 + 4]
lea r12d, [r11 + r10*2]
mov eax, dword [r13 + 8]
lea edi, [rax + r12*8]
add edi, r12d
add edi, dword [r13 + 0xc]
lea esi, [rdi + rax*2]
mov ebp, dword [r13 + 0x10]
lea edx, [rbp + rsi*8]
add edx, esi
add edx, dword [r13 + 0x14]
lea r9d, [rdx + rbp*2]
mov r8d, dword [r13 + 0x18]
lea ecx, [r8 + r9*8]
add ecx, r9d
add ecx, dword [r13 + 0x1c]
lea ecx, [rcx + r8*2]
add r13, 0x20
cmp r14, r13
ja 0x4276b2
mov dword [rsp + 0x28], ecx
mov r14d, dword [r15 + 0xbc]
test r14d, r14d
je 0x426fa0
mov ebx, dword [r15 + 0xa4]
test ebx, ebx
mov r9d, 1
sete r13b
movzx r8d, r13b
mov rdx, qword [rsp + 0xab8]
mov rcx, qword [rsp + 0xab0]
call fcn.004474f1
mov ebx, dword [r15 + 0x18]
jmp 0x426fa0
mov eax, 1
movaps xmm6, xmmword [rsp + 0xa20]
movaps xmm7, xmmword [rsp + 0xa30]
movaps xmm8, xmmword [rsp + 0xa40]
movaps xmm9, xmmword [rsp + 0xa50]
add rsp, 0xa68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test ebx, 0x40000004
je 0x426f8e
mov esi, dword [r15 + 0xbc]
test esi, esi
je 0x426f98
mov ebp, dword [r15 + 0xa4]
test ebp, ebp
mov r9d, 0
sete r8b
movzx r8d, r8b
mov rdx, qword [rsp + 0xab8]
call fcn.004439ff
mov dword [rsp + 0x28], 0xffffffff
jmp 0x426fa0
lea rdi, [rsp + 0x140]
mov qword [rsp + 0x70], rdi
mov ecx, 0x11b
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov dword [rsp + 0x78], 0xfff00000
mov dword [rsp + 0x54], 0
mov qword [rsp + 0x60], 0
jmp 0x427159
mov ecx, dword [r15 + 0xbc]
test ecx, ecx
je 0x426f98
mov r10d, dword [r15 + 0xa4]
test r10d, r10d
mov r9d, 0
sete r11b
movzx r8d, r11b
mov rdx, qword [rsp + 0xab8]
mov rcx, qword [rsp + 0xab0]
call fcn.004474f1
mov ebx, dword [r15 + 0x18]
mov dword [rsp + 0x28], 0xffffffff
jmp 0x426fa0
sub rsi, qword [rsp + 0xe8]
mov dword [rsp + 0xe0], esi
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
mov ebx, dword [r15 + 0xa4]
mov ecx, 0x100
call sub.msvcrt.dll_malloc
mov rdi, rax
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 4
test ebx, ebx
je 0x428e76
mov r10d, dword [r15 + 0x1c8]
cmp r10d, 8
jg 0x427de4
test r10d, r10d
js 0x427e49
je 0x427942
lea r13, [r15 + 0x1d8]
sub r10d, 1
lea rsi, [r15 + r10*4 + 0x1dc]
jmp 0x4278e9
add rdi, 2
add r13, 4
cmp rsi, r13
je 0x427937
mov ecx, dword [r13]
call fcn.00440e67
mov r14d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r13], eax
mov word [rdi], r14w
test dword [r15 + 0x18], 0x40000004
jne 0x4278dc
mov ecx, dword [r13 + 0x20]
call fcn.00440e67
mov r14d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r13 + 0x20], eax
mov word [rdi + 2], r14w
add rdi, 4
add r13, 4
cmp rsi, r13
jne 0x4278e9
mov r10d, edi
sub r10d, dword [rsp + 0xe8]
cmp ebx, 1
je 0x427bd0
lea rdx, [r15 + 0x238]
lea r9d, [rbx - 2]
lea rcx, [r9 + r9*2]
shl rcx, 5
lea rax, [r15 + rcx + 0x298]
mov r11, rax
sub r11, rdx
sub r11, 0x60
shr r11, 5
movabs r8, 0x2aaaaaaaaaaaaab
imul r11, r8
add r11, 1
and r11d, 3
je 0x427a85
cmp r11, 1
je 0x427a39
cmp r11, 2
je 0x4279f6
mov qword [r15 + 0x238], 0
mov qword [rdx + 8], 0
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], 0
mov qword [r15 + 0x258], 0
mov qword [r15 + 0x260], 0
mov qword [r15 + 0x268], 0
mov qword [r15 + 0x270], 0
lea rdx, [r15 + 0x298]
mov qword [rdx], 0
mov qword [rdx + 8], 0
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], 0
mov qword [rdx + 0x20], 0
mov qword [rdx + 0x28], 0
mov qword [rdx + 0x30], 0
mov qword [rdx + 0x38], 0
add rdx, 0x60
mov qword [rdx], 0
mov qword [rdx + 8], 0
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], 0
mov qword [rdx + 0x20], 0
mov qword [rdx + 0x28], 0
mov qword [rdx + 0x30], 0
mov qword [rdx + 0x38], 0
add rdx, 0x60
cmp rdx, rax
je 0x427bd0
mov qword [rdx], 0
mov qword [rdx + 8], 0
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], 0
mov qword [rdx + 0x20], 0
mov qword [rdx + 0x28], 0
mov qword [rdx + 0x30], 0
mov qword [rdx + 0x38], 0
mov qword [rdx + 0x60], 0
mov qword [rdx + 0x68], 0
mov qword [rdx + 0x70], 0
mov qword [rdx + 0x78], 0
mov qword [rdx + 0x80], 0
mov qword [rdx + 0x88], 0
mov qword [rdx + 0x90], 0
mov qword [rdx + 0x98], 0
mov qword [rdx + 0xc0], 0
mov qword [rdx + 0xc8], 0
mov qword [rdx + 0xd0], 0
mov qword [rdx + 0xd8], 0
mov qword [rdx + 0xe0], 0
mov qword [rdx + 0xe8], 0
mov qword [rdx + 0xf0], 0
mov qword [rdx + 0xf8], 0
mov qword [rdx + 0x120], 0
mov qword [rdx + 0x128], 0
mov qword [rdx + 0x130], 0
mov qword [rdx + 0x138], 0
mov qword [rdx + 0x140], 0
mov qword [rdx + 0x148], 0
mov qword [rdx + 0x150], 0
mov qword [rdx + 0x158], 0
add rdx, 0x180
cmp rdx, rax
jne 0x427a85
mov dword [rsp + 0xe0], r10d
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
mov rdx, r12
mov rcx, r15
call fcn.00436e72
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
mov ebx, dword [rsp + 0x30]
test ebx, ebx
jne 0x42868f
mov edi, dword [rsp + 0x5c]
test edi, edi
jne 0x42861e
mov r9d, dword [rsp + 0x68]
test r9d, r9d
jne 0x4285af
mov rcx, qword [rsp + 0xab0]
call fcn.00425999
mov rbx, qword [r15 + 0x78]
mov rax, qword [r15 + 0x70]
mov edi, dword [rax + 4]
lea r10, [rax + rdi + 0xc]
mov qword [r15 + 0xf8], 0
mov dword [r15 + 0x100], 0
mov qword [r15 + 0xd8], r10
mov qword [r15 + 0xe8], r10
mov qword [r15 + 0xe0], rbx
lea r13, [0x0042559b]
mov qword [r15 + 0xf0], r13
mov rsi, qword [rsp + 0xab0]
mov r14d, dword [rsi + 0xe0]
test r14d, r14d
jne 0x428521
mov edx, dword [rsp + 0x30]
test edx, edx
jne 0x428127
mov ebx, dword [rsp + 0x7c]
test ebx, ebx
je 0x42889a
mov ebx, dword [r15 + 0xbc]
test ebx, ebx
je 0x428f8a
mov dword [rsp + 0x34], 0
xor ebx, ebx
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, r15
call fcn.0043842f
mov rcx, qword [rsp + 0xab0]
mov edx, dword [rcx + 0x14]
mov r11d, edx
and r11d, 0x800000
movapd xmm7, xmm6
mov dword [rsp + 0x2c], 0
test ebx, ebx
jne 0x4286be
test r11d, r11d
je 0x427d2d
addsd xmm7, qword [r15 + 0x198]
movsd qword [r15 + 0x198], xmm7
mov rcx, r15
call fcn.0043711b
mov r11d, dword [r15 + 0xf8]
test r11d, r11d
jne 0x4286b7
mov ecx, dword [r15 + 0xfc]
mov rsi, qword [r15 + 0xe8]
mov r13d, 1
test ecx, ecx
jne 0x427d7f
mov rax, rsi
sub rax, qword [r15 + 0xd8]
mov r8d, eax
test al, 1
je 0x427ef5
or dword [r15 + 0x100], 1
mov ecx, 1
mov r8d, r13d
shl r8d, cl
or r8d, dword [r15 + 0x100]
mov dword [r15 + 0x100], r8d
add ecx, 1
mov dword [r15 + 0xfc], ecx
cmp ecx, 0x10
jne 0x427d59
mov word [rsi], r8w
mov qword [r15 + 0xfc], 0
add rsi, 2
mov qword [r15 + 0xe8], rsi
cmp rsi, qword [r15 + 0xe0]
jne 0x427d5d
mov rcx, qword [rsp + 0x40]
call qword [r15 + 0xf0]
mov ecx, dword [r15 + 0xfc]
mov rsi, qword [r15 + 0xe8]
jmp 0x427d59
mov ecx, dword [r15 + 0x1d8]
call fcn.00440e67
mov r14d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x1d8], eax
mov word [rdi], r14w
mov ecx, dword [r15 + 0x1dc]
call fcn.00440e67
mov r13d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x1dc], eax
mov word [rdi + 2], r13w
test dword [r15 + 0x18], 0x40000004
je 0x4280d1
add rdi, 4
mov r10d, edi
sub r10d, dword [rsp + 0xe8]
jmp 0x427942
mov ecx, dword [r15 + 0x1d8]
call fcn.00440e67
mov r13d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x1d8], eax
mov word [rdi], r13w
mov ecx, dword [r15 + 0x1f8]
call fcn.00440e67
mov esi, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x1f8], eax
mov word [rdi + 2], si
add rdi, 4
mov r10d, edi
sub r10d, dword [rsp + 0xe8]
jmp 0x427942
lea rdi, [rsi + 2]
mov ecx, dword [r13 + 4]
call fcn.00440fe4
mov byte [rsi + 1], al
movsx ecx, al
call fcn.00441013
mov dword [r13 + 4], eax
mov rsi, rdi
jmp 0x427589
mov ecx, dword [r14 + 4]
call fcn.00440fe4
test al, al
je 0x4274e3
jmp 0x42755d
mov ecx, dword [rdi + 4]
nop dword [rax + rax]
call fcn.00440fe4
test al, al
je 0x427509
nop dword [rax]
jmp 0x42755d
mov rbx, qword [rsp + 0x40]
mov rdi, rbx
mov ecx, 0x30
xor eax, eax
and ebx, 1
jne 0x428fc7
test dil, 2
jne 0x428fbd
test dil, 4
jne 0x428fb4
mov esi, ecx
and esi, 0xffffffe0
lea r9d, [rsi - 1]
shr r9d, 5
and r9d, 7
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov edx, 0x20
cmp edx, esi
jb 0x42a7c5
add rdx, rdi
test cl, 0x10
je 0x427f60
mov rdi, rdx
stosq qword [rdi], rax
stosq qword [rdi], rax
mov rdx, rdi
test cl, 8
je 0x427f6d
mov rdi, rdx
stosq qword [rdi], rax
mov rdx, rdi
test cl, 4
je 0x427f79
mov rdi, rdx
stosd dword [rdi], eax
mov rdx, rdi
test cl, 2
je 0x427f86
mov rdi, rdx
stosw word [rdi], ax
mov rdx, rdi
and ecx, 1
je 0x427f8f
mov rdi, rdx
stosb byte [rdi], al
mov r13, qword [r15 + 0x70]
test r8d, r8d
je 0x427fd1
mov esi, dword [r13 + 4]
lea rax, [r13 + rsi + 8]
mov byte [rax], 0x8a
mov edx, r8d
shr edx, 1
mov byte [rax + 1], dl
mov ecx, r8d
shr ecx, 9
mov byte [rax + 2], cl
mov r11d, r8d
shr r11d, 0x11
mov byte [rax + 3], r11b
mov r13, qword [r15 + 0x70]
mov ebx, dword [r13 + 4]
lea r8d, [r8 + rbx + 4]
mov dword [r13 + 4], r8d
mov r9d, dword [rsp + 0x28]
mov dword [r13 + 0x1c], r9d
mov r10, qword [rsp + 0xab0]
mov r14d, dword [r10 + 0xe0]
test r14d, r14d
je 0x428348
lea rdi, [r15 + 0x108]
mov esi, dword [r15 + 0x128]
test esi, esi
jne 0x428f37
mov ecx, dword [r15 + 0x12c]
mov rsi, qword [r15 + 0x118]
mov r13d, 1
test ecx, ecx
jne 0x428043
mov rcx, rsi
sub rcx, qword [r15 + 0x108]
mov r9d, ecx
and ecx, 1
je 0x428424
or dword [r15 + 0x130], 1
mov ecx, 1
mov edx, r13d
shl edx, cl
or edx, dword [r15 + 0x130]
mov dword [r15 + 0x130], edx
add ecx, 1
mov dword [r15 + 0x12c], ecx
cmp ecx, 0x10
jne 0x42801c
mov word [rsi], dx
mov qword [r15 + 0x12c], 0
add rsi, 2
mov qword [r15 + 0x118], rsi
cmp rsi, qword [r15 + 0x110]
jne 0x428020
mov rcx, rdi
call qword [r15 + 0x120]
mov ecx, dword [r15 + 0x12c]
mov rsi, qword [r15 + 0x118]
jmp 0x42801c
mov ecx, dword [rdi - 0x5c]
call fcn.00440fe4
test al, al
je 0x427527
jmp 0x42755d
mov ecx, dword [rdi - 0xbc]
call fcn.00440fe4
test al, al
je 0x427548
jmp 0x42755d
mov ecx, dword [r15 + 0x1f8]
call fcn.00440e67
mov esi, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x1f8], eax
mov word [rdi + 4], si
mov ecx, dword [r15 + 0x1fc]
call fcn.00440e67
mov r14d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x1fc], eax
mov word [rdi + 6], r14w
add rdi, 8
mov r10d, edi
sub r10d, dword [rsp + 0xe8]
jmp 0x427942
mov r14d, dword [rsp + 0x58]
test r14d, r14d
jne 0x4288f5
mov ebx, dword [r15 + 0xbc]
test ebx, ebx
jne 0x427cce
mov esi, dword [rsp + 0x6c]
test esi, esi
jne 0x42a132
mov edi, dword [r15 + 0xa4]
test edi, edi
je 0x428328
sub edi, 1
lea rsi, [rdi + rdi*2]
shl rsi, 5
lea r14, [r15 + rsi + 0x228]
mov rbx, rbp
mov r8, r14
sub r8, rbp
sub r8, 0x60
shr r8, 5
movabs r10, 0x2aaaaaaaaaaaaab
imul r8, r10
add r8, 1
and r8d, 7
je 0x428283
cmp r8, 1
je 0x428261
cmp r8, 2
je 0x428248
cmp r8, 3
je 0x42822f
cmp r8, 4
je 0x428216
cmp r8, 5
je 0x4281fd
cmp r8, 6
je 0x4281e4
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbp
call fcn.00425e9b
lea rbx, [rbp + 0x60]
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbx
call fcn.00425e9b
add rbx, 0x60
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbx
call fcn.00425e9b
add rbx, 0x60
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbx
call fcn.00425e9b
add rbx, 0x60
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbx
call fcn.00425e9b
add rbx, 0x60
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbx
call fcn.00425e9b
add rbx, 0x60
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0xab8]
mov rcx, rbx
call fcn.00425e9b
add rbx, 0x60
cmp rbx, r14
je 0x428328
mov edi, dword [rsp + 0x48]
mov r13, qword [rsp + 0xab8]
mov r8d, edi
mov rdx, r13
mov rcx, rbx
call fcn.00425e9b
lea rcx, [rbx + 0x60]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
lea rcx, [rbx + 0xc0]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
lea rcx, [rbx + 0x120]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
lea rcx, [rbx + 0x180]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
lea rcx, [rbx + 0x1e0]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
lea rcx, [rbx + 0x240]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
lea rcx, [rbx + 0x2a0]
mov r8d, edi
mov rdx, r13
call fcn.00425e9b
add rbx, 0x300
cmp rbx, r14
jne 0x42828f
mov ebx, dword [rsp + 0x48]
and ebx, 7
mov edx, dword [rsp + 0x54]
test edx, edx
jne 0x429c4e
mov dword [rsp + 0x34], 0
jmp 0x427cd8
mov edi, dword [rsp + 0x2c]
test edi, edi
je 0x42835b
mov dword [r10 + 0xf0], 1
mov r10d, dword [r15 + 0xa4]
mov r8d, dword [rsp + 0x54]
test r8d, r8d
je 0x429002
cmp r10d, 5
jle 0x429002
mov eax, dword [rsp + 0x34]
test dword [rsp + 0x78], eax
je 0x429002
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x1e4], eax
mov ecx, 0x11b
mov rdi, r15
mov rsi, qword [rsp + 0x70]
rep movsq qword [rdi], qword [rsi]
mov dword [r15 + 0xa4], 5
mov r13, qword [r15 + 0x70]
mov rbx, qword [r15]
mov qword [r13], rbx
mov rdx, qword [r15 + 8]
mov qword [r13 + 8], rdx
mov r14, qword [r15 + 0x10]
mov qword [r13 + 0x10], r14
mov r9, qword [r15 + 0x18]
mov qword [r13 + 0x18], r9
mov r11, qword [rsp + 0x60]
test r11, r11
je 0x4283f3
mov r8, qword [rsp + 0x80]
mov rdx, r11
mov rcx, qword [rsp + 0xab8]
call sub.msvcrt.dll_memcpy
mov r10d, 0xffffffff
mov r8d, dword [rsp + 0x30]
test r8d, r8d
mov eax, dword [rsp + 0x24]
cmovne eax, r10d
mov dword [rsp + 0x24], eax
cmove r10d, dword [rsp + 0x28]
mov dword [rsp + 0x28], r10d
mov edi, dword [r15 + 0xa4]
jmp 0x42729a
mov r8d, 0x30
xor eax, eax
test dil, 1
jne 0x429bc5
test dil, 2
jne 0x429bba
test dil, 4
jne 0x429bb0
mov r11d, r8d
and r11d, 0xffffffe0
lea ebx, [r11 - 1]
shr ebx, 5
and ebx, 7
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov r10d, 0x20
cmp r10d, r11d
jb 0x42a604
mov r11d, r10d
add r11, rdi
test r8b, 0x10
je 0x42848f
mov rdi, r11
stosq qword [rdi], rax
stosq qword [rdi], rax
mov r11, rdi
test r8b, 8
je 0x42849d
mov rdi, r11
stosq qword [rdi], rax
mov r11, rdi
test r8b, 4
je 0x4284aa
mov rdi, r11
stosd dword [rdi], eax
mov r11, rdi
test r8b, 2
je 0x4284b8
mov rdi, r11
stosw word [rdi], ax
mov r11, rdi
and r8d, 1
je 0x4284c2
mov rdi, r11
stosb byte [rdi], al
mov r14, qword [r15 + 0x80]
test r9d, r9d
je 0x428514
mov r10d, dword [rsp + 0x2c]
test r10d, r10d
je 0x428514
mov r8d, dword [r14 + 4]
lea rax, [r14 + r8 + 8]
mov byte [rax], 0x8b
mov r13d, r9d
shr r13d, 1
mov byte [rax + 1], r13b
mov edx, r9d
shr edx, 9
mov byte [rax + 2], dl
mov ecx, r9d
shr ecx, 0x11
mov byte [rax + 3], cl
mov r14, qword [r15 + 0x80]
mov ebx, dword [r14 + 4]
lea r9d, [r9 + rbx + 4]
mov dword [r14 + 4], r9d
mov edi, dword [rsp + 0x24]
mov dword [r14 + 0x1c], edi
jmp 0x42835b
mov dword [r15 + 4], 0x18
mov r9, qword [r15 + 0x80]
mov rcx, qword [r15]
mov qword [r9], rcx
mov r11, qword [r15 + 8]
mov qword [r9 + 8], r11
mov r8, qword [r15 + 0x10]
mov qword [r9 + 0x10], r8
mov rdx, qword [r15 + 0x18]
mov qword [r9 + 0x18], rdx
mov ebx, dword [rsp + 0x4c]
test ebx, ebx
jne 0x428e7e
mov r10, qword [r15 + 0x88]
mov r9, qword [r15 + 0x80]
mov ecx, dword [r9 + 4]
lea r11, [r9 + rcx + 0xc]
mov qword [r15 + 0x128], 0
mov dword [r15 + 0x130], 0
mov qword [r15 + 0x108], r11
mov qword [r15 + 0x118], r11
mov qword [r15 + 0x110], r10
lea r8, [0x0042559b]
mov qword [r15 + 0x120], r8
jmp 0x427ca7
mov ecx, 4
call sub.msvcrt.dll_malloc
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 9
movzx ecx, byte [r15 + 0x174]
mov byte [rax], cl
movzx r11d, byte [r15 + 0x175]
mov byte [rax + 1], r11b
movzx r8d, byte [r15 + 0x176]
mov byte [rax + 2], r8b
movzx edx, byte [r15 + 0x177]
mov byte [rax + 3], dl
mov dword [rsp + 0xe0], 4
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
jmp 0x427c39
mov ecx, 4
call sub.msvcrt.dll_malloc
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 8
movzx r10d, byte [r15 + 0x178]
mov byte [rax], r10b
movzx r13d, byte [r15 + 0x179]
mov byte [rax + 1], r13b
movzx esi, byte [r15 + 0x17a]
mov byte [rax + 2], sil
movzx r14d, byte [r15 + 0x17b]
mov byte [rax + 3], r14b
mov dword [rsp + 0xe0], 4
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
jmp 0x427c2b
mov rdx, r12
mov rcx, r15
call fcn.00436f1f
mov rdx, qword [r15 + 0x70]
mov r8, qword [r15 + 0x78]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
jmp 0x427c1f
xor eax, eax
jmp 0x427753
mov eax, dword [r15 + 0xa4]
test eax, eax
je 0x427d16
sub eax, 1
lea rsi, [rax + rax*2]
shl rsi, 5
lea r8, [r15 + rsi + 0x228]
mov rax, rbp
mov r10, r8
sub r10, rbp
and r10d, 0x20
je 0x42872f
mov edi, dword [rbp]
sub edi, 1
cmp edi, 7
jbe 0x42a37d
lea rax, [rbp + 0x60]
cmp rax, r8
jne 0x42872f
jmp 0x427d16
lea r13, [rax + 0x60]
mov r10d, dword [rax + 0x60]
lea r9d, [r10 - 1]
cmp r9d, 7
jbe 0x428ceb
lea rax, [r13 + 0x60]
cmp rax, r8
je 0x427d16
mov esi, dword [rax]
lea r10d, [rsi - 1]
cmp r10d, 7
ja 0x42870c
mov rdi, qword [rax + 0x10]
mov qword [rsp + 0x100], rdi
mov r9, qword [rax + 0x18]
mov qword [rsp + 0x108], r9
mov r13, qword [rax + 0x20]
mov qword [rsp + 0x110], r13
mov r14, qword [rax + 0x28]
mov qword [rsp + 0x118], r14
mov rcx, qword [rax + 0x30]
mov qword [rsp + 0x120], rcx
mov rdx, qword [rax + 0x38]
mov qword [rsp + 0x128], rdx
mov rsi, qword [rax + 0x40]
mov qword [rsp + 0x130], rsi
mov r10, qword [rax + 0x48]
mov qword [rsp + 0x138], r10
movsxd rdi, ebx
mov r9d, dword [rsp + rdi*4 + 0x100]
mov dword [rax + 0x10], r9d
mov r13d, dword [rsp + rdi*4 + 0x120]
mov dword [rax + 0x30], r13d
add ebx, 1
mov r14d, ebx
and r14d, 7
mov ecx, dword [rsp + r14*4 + 0x100]
mov dword [rax + 0x14], ecx
mov edx, dword [rsp + r14*4 + 0x120]
mov dword [rax + 0x34], edx
lea ebx, [rbx + 1]
mov esi, ebx
and esi, 7
mov r10d, dword [rsp + rsi*4 + 0x100]
mov dword [rax + 0x18], r10d
mov edi, dword [rsp + rsi*4 + 0x120]
mov dword [rax + 0x38], edi
add ebx, 1
mov r9d, ebx
and r9d, 7
mov r13d, dword [rsp + r9*4 + 0x100]
mov dword [rax + 0x1c], r13d
mov r14d, dword [rsp + r9*4 + 0x120]
mov dword [rax + 0x3c], r14d
add ebx, 1
mov ecx, ebx
and ecx, 7
mov edx, dword [rsp + rcx*4 + 0x100]
mov dword [rax + 0x20], edx
mov esi, dword [rsp + rcx*4 + 0x120]
mov dword [rax + 0x40], esi
add ebx, 1
mov edi, ebx
and edi, 7
mov r10d, dword [rsp + rdi*4 + 0x100]
mov dword [rax + 0x24], r10d
mov r9d, dword [rsp + rdi*4 + 0x120]
mov dword [rax + 0x44], r9d
add ebx, 1
mov r13d, ebx
and r13d, 7
mov r14d, dword [rsp + r13*4 + 0x100]
mov dword [rax + 0x28], r14d
mov ecx, dword [rsp + r13*4 + 0x120]
mov dword [rax + 0x48], ecx
add ebx, 1
mov edx, ebx
and edx, 7
mov esi, dword [rsp + rdx*4 + 0x100]
mov dword [rax + 0x2c], esi
mov edi, dword [rsp + rdx*4 + 0x120]
mov dword [rax + 0x4c], edi
lea ebx, [rbx + 1]
and ebx, 7
jmp 0x42870c
mov esi, dword [rsp + 0x58]
test esi, esi
je 0x428135
cmp dword [rsp + 0x58], 8
je 0x429372
mov rdi, qword [rsp + 0xab0]
mov edx, dword [rdi + 0x14]
mov r11d, edx
and r11d, 0x800000
mov dword [rsp + 0x34], 0
movapd xmm7, xmm6
mov dword [rsp + 0x2c], 0
jmp 0x427d16
mov ecx, dword [r14 + 4]
call fcn.00440fe4
test al, al
je 0x4274b5
jmp 0x42755d
mov ebx, dword [rsp + 0x7c]
test ebx, ebx
je 0x4288a6
mov rsi, qword [rsp + 0xab8]
mov dword [rsp + 0x34], 0
movapd xmm7, xmm6
xor ebx, ebx
mov dword [rsp + 0x2c], 0
mov r13d, 1
movsd xmm9, qword [0x004642d8]
movsd xmm8, qword [0x004642e0]
mov edi, dword [rsp + 0x24]
mov qword [rsp + 0xd8], r12
mov r12d, dword [rsp + 0x28]
add rsi, 4
mov edx, dword [rsi - 4]
lea eax, [rdx + rdi*2]
add edi, eax
mov r10d, dword [rsp + 0x4c]
test r10d, r10d
je 0x4289d0
mov r9, qword [rsp + 0x38]
test r9, r9
je 0x429355
movsx ecx, word [r9]
add r9, 2
mov qword [rsp + 0x38], r9
mov r14d, dword [r15 + 0x190]
movsx r11d, r14w
cmp r14d, r11d
je 0x428fe8
movzx eax, r14w
imul eax, ecx
sar eax, 9
mov r10d, r14d
sar r10d, 9
and r10d, 0xffffff80
imul r10d, ecx
lea r8d, [rax + r10 + 1]
sar r8d, 1
neg r8d
mov r9d, dword [rsp + 0xa8]
test r9d, r9d
je 0x4289c2
test ecx, ecx
js 0x429b89
add edx, r8d
mov ecx, edx
neg ecx
mov dword [r15 + 0x190], ecx
mov r11d, dword [r15 + 0xa4]
lea r8d, [r11 - 1]
test r11d, r11d
je 0x429b31
lea rax, [r8 + r8*2]
shl rax, 5
lea r9, [r15 + rax + 0x228]
mov r11, rbp
movsxd r10, ebx
mov rax, r9
sub rax, rbp
test al, 0x20
je 0x428ab1
mov eax, dword [rbp]
cmp eax, 8
jg 0x428f51
mov r14d, dword [rbp + r10*4 + 0x10]
movsx ecx, r14w
cmp r14d, ecx
je 0x428f75
mov r11d, dword [rbp + 8]
movzx ecx, r14w
imul ecx, r11d
sar ecx, 9
sar r14d, 9
and r14d, 0xffffff80
imul r14d, r11d
lea r14d, [rcx + r14 + 1]
sar r14d, 1
mov dword [rbp + 0x50], r14d
sub edx, r14d
lea r11, [rbp + 0x60]
cmp r11, r9
jne 0x428ab1
jmp 0x428b43
test al, 1
je 0x428cd9
mov eax, dword [rcx + 0x10]
add eax, eax
sub eax, dword [rcx + 0x14]
mov dword [rcx + 0x18], eax
movsx r11d, ax
cmp r11d, eax
je 0x428b25
mov r14d, dword [rcx + 8]
movzx r11d, ax
imul r11d, r14d
sar r11d, 9
sar eax, 9
and eax, 0xffffff80
imul eax, r14d
lea eax, [r11 + rax + 1]
sar eax, 1
mov dword [rcx + 0x50], eax
sub edx, eax
lea r11, [rcx + 0x60]
cmp r11, r9
je 0x428b43
mov eax, dword [r11]
cmp eax, 8
jle 0x428ca7
test al, 1
mov eax, dword [r11 + 0x10]
je 0x428ccb
add eax, eax
sub eax, dword [r11 + 0x14]
mov dword [r11 + 0x18], eax
movsx ecx, ax
cmp ecx, eax
je 0x428cb9
mov r14d, dword [r11 + 8]
movzx ecx, ax
imul ecx, r14d
sar ecx, 9
sar eax, 9
and eax, 0xffffff80
imul eax, r14d
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [r11 + 0x50], eax
sub edx, eax
lea rcx, [r11 + 0x60]
mov eax, dword [r11 + 0x60]
cmp eax, 8
jg 0x428a5e
mov eax, dword [rcx + r10*4 + 0x10]
movsx r11d, ax
cmp eax, r11d
jne 0x428a7e
imul eax, dword [rcx + 8]
add eax, 0x200
sar eax, 0xa
mov dword [rcx + 0x50], eax
sub edx, eax
lea r11, [rcx + 0x60]
cmp r11, r9
jne 0x428ab1
lea r14, [r8 + r8*2]
shl r14, 5
add r14, rbp
mov eax, edx
test edx, edx
jns 0x428b56
not eax
or dword [rsp + 0x34], eax
xor r8d, r8d
mov rcx, r15
call fcn.00437d53
cmp rbp, r14
ja 0x428bfd
movsxd r8, ebx
jmp 0x428bb4
mov edx, dword [r14 + 0x18]
test edx, edx
je 0x428b9b
test eax, eax
je 0x428b9b
xor edx, eax
sar edx, 0x1f
mov ecx, dword [r14 + 4]
xor ecx, edx
mov r9d, dword [r14 + 8]
sub r9d, edx
mov r10d, r9d
add r10d, ecx
mov dword [r14 + 8], r10d
mov r11d, dword [r14 + 0x10]
mov dword [r14 + 0x14], r11d
add eax, dword [r14 + 0x50]
mov dword [r14 + 0x10], eax
sub r14, 0x60
cmp r14, rbp
jb 0x428bfd
mov edx, dword [r14]
cmp edx, 8
jg 0x428b73
mov ecx, dword [r14 + r8*4 + 0x10]
test ecx, ecx
je 0x428be6
test eax, eax
je 0x428be6
xor ecx, eax
sar ecx, 0x1f
mov r9d, dword [r14 + 4]
xor r9d, ecx
mov r10d, dword [r14 + 8]
sub r10d, ecx
mov r11d, r10d
add r11d, r9d
mov dword [r14 + 8], r11d
add eax, dword [r14 + 0x50]
add edx, ebx
and edx, 7
mov dword [r14 + rdx*4 + 0x10], eax
sub r14, 0x60
cmp r14, rbp
jae 0x428bb4
add dword [r15 + 0x190], eax
add ebx, 1
and ebx, 7
lea r14d, [rax + r12*2]
add r12d, r14d
cmp edi, r12d
mov r8d, dword [rsp + 0x2c]
cmovne r8d, r13d
mov dword [rsp + 0x2c], r8d
mov rdx, qword [rsp + 0xab0]
mov r11d, dword [rdx + 0x14]
mov dword [rsp + 0x24], r11d
and r11d, 0x800000
je 0x428c83
sub eax, dword [rsi - 4]
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
mulsd xmm0, xmm0
addsd xmm7, xmm0
movsd xmm1, qword [r15 + 0x1a0]
mulsd xmm1, xmm9
mulsd xmm0, xmm8
addsd xmm0, xmm1
movsd qword [r15 + 0x1a0], xmm0
comisd xmm0, xmmword [r15 + 0x1a8]
jbe 0x428c83
movsd qword [r15 + 0x1a8], xmm0
cmp rsi, qword [rsp + 0x90]
jne 0x428944
mov dword [rsp + 0x24], edi
mov dword [rsp + 0x28], r12d
mov r12, qword [rsp + 0xd8]
jmp 0x427d0e
mov eax, dword [r11 + r10*4 + 0x10]
movsx r14d, ax
cmp eax, r14d
jne 0x428ade
imul eax, dword [r11 + 8]
add eax, 0x200
sar eax, 0xa
jmp 0x428afc
lea eax, [rax + rax*2]
sub eax, dword [r11 + 0x14]
sar eax, 1
jmp 0x428acf
mov r14d, dword [rcx + 0x10]
lea eax, [r14 + r14*2]
sub eax, dword [rcx + 0x14]
sar eax, 1
jmp 0x428a6e
mov r14, qword [rax + 0x70]
mov qword [rsp + 0x100], r14
mov rcx, qword [rax + 0x78]
mov qword [rsp + 0x108], rcx
mov rdx, qword [rax + 0x80]
mov qword [rsp + 0x110], rdx
mov rsi, qword [rax + 0x88]
mov qword [rsp + 0x118], rsi
lea rdi, [rax + 0x90]
mov rax, qword [rax + 0x90]
mov qword [rsp + 0x120], rax
mov r10, qword [rdi + 8]
mov qword [rsp + 0x128], r10
mov r9, qword [rdi + 0x10]
mov qword [rsp + 0x130], r9
mov r14, qword [rdi + 0x18]
mov qword [rsp + 0x138], r14
movsxd rcx, ebx
mov edx, dword [rsp + rcx*4 + 0x100]
mov dword [r13 + 0x10], edx
mov esi, dword [rsp + rcx*4 + 0x120]
mov dword [r13 + 0x30], esi
add ebx, 1
mov edi, ebx
and edi, 7
mov eax, dword [rsp + rdi*4 + 0x100]
mov dword [r13 + 0x14], eax
mov r10d, dword [rsp + rdi*4 + 0x120]
mov dword [r13 + 0x34], r10d
lea ebx, [rbx + 1]
mov r9d, ebx
and r9d, 7
mov r14d, dword [rsp + r9*4 + 0x100]
mov dword [r13 + 0x18], r14d
mov ecx, dword [rsp + r9*4 + 0x120]
mov dword [r13 + 0x38], ecx
add ebx, 1
mov edx, ebx
and edx, 7
mov esi, dword [rsp + rdx*4 + 0x100]
mov dword [r13 + 0x1c], esi
mov edi, dword [rsp + rdx*4 + 0x120]
mov dword [r13 + 0x3c], edi
add ebx, 1
mov eax, ebx
and eax, 7
mov r10d, dword [rsp + rax*4 + 0x100]
mov dword [r13 + 0x20], r10d
mov r9d, dword [rsp + rax*4 + 0x120]
mov dword [r13 + 0x40], r9d
add ebx, 1
mov r14d, ebx
and r14d, 7
mov ecx, dword [rsp + r14*4 + 0x100]
mov dword [r13 + 0x24], ecx
mov edx, dword [rsp + r14*4 + 0x120]
mov dword [r13 + 0x44], edx
add ebx, 1
mov esi, ebx
and esi, 7
mov edi, dword [rsp + rsi*4 + 0x100]
mov dword [r13 + 0x28], edi
mov eax, dword [rsp + rsi*4 + 0x120]
mov dword [r13 + 0x48], eax
add ebx, 1
mov r9d, ebx
and r9d, 7
mov r10d, dword [rsp + r9*4 + 0x100]
mov dword [r13 + 0x2c], r10d
mov r14d, dword [rsp + r9*4 + 0x120]
mov dword [r13 + 0x4c], r14d
lea ebx, [rbx + 1]
and ebx, 7
jmp 0x428722
mov ecx, dword [r14 + 4]
call fcn.00440fe4
test al, al
je 0x427490
jmp 0x42755d
xor r10d, r10d
jmp 0x427bd0
mov ecx, 0xc
call sub.msvcrt.dll_malloc
mov r13, rax
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 7
mov ecx, dword [r15 + 0x190]
call fcn.00440e67
mov edi, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x190], eax
mov word [r13], di
mov ecx, dword [r15 + 0x180]
call fcn.00440e67
mov esi, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x180], eax
mov word [r13 + 2], si
test dword [r15 + 0x18], 0x40000004
je 0x429c02
lea rdi, [r13 + 4]
mov ecx, dword [r15 + 0x188]
mov eax, ecx
or eax, dword [r15 + 0x18c]
jne 0x429bd1
sub rdi, qword [rsp + 0xe8]
mov dword [rsp + 0xe0], edi
mov rdx, qword [r15 + 0x80]
mov r8, qword [r15 + 0x88]
mov rcx, r12
call fcn.00432115
mov rcx, r12
call fcn.004321e7
jmp 0x42855a
mov r11d, dword [rsp + 0x2c]
test r11d, r11d
jne 0x4286b7
mov r14, qword [r15 + 0x80]
jmp 0x428514
test al, 1
je 0x429b1d
mov r14d, dword [rbp + 0x10]
add r14d, r14d
sub r14d, dword [rbp + 0x14]
mov dword [rbp + 0x18], r14d
movsx eax, r14w
cmp eax, r14d
jne 0x428a26
imul r14d, dword [rbp + 8]
add r14d, 0x200
sar r14d, 0xa
jmp 0x428a49
mov ebx, dword [rsp + 0x48]
mov r9d, ebx
mov r8d, dword [r15 + 0xa4]
mov rdx, rbp
mov rcx, qword [rsp + 0xab8]
call fcn.00426a26
mov dword [rsp + 0x34], eax
and ebx, 7
jmp 0x427cd8
stosd dword [rdi], eax
sub ecx, 4
jmp 0x427f21
stosw word [rdi], ax
sub ecx, 2
jmp 0x427f17
stosb byte [rdi], al
mov ecx, 0x2f
jmp 0x427f0d
mov ecx, dword [r14 + 4]
call fcn.00440fe4
test al, al
je 0x42746b
jmp 0x42755d
mov r8d, r14d
imul r8d, ecx
add r8d, 0x200
sar r8d, 0xa
neg r8d
jmp 0x4289ad
cmp dword [rsp + 0x50], r10d
je 0x42932a
jle 0x42931f
movsxd rbp, r10d
lea r12, [rbp + rbp*2]
shl r12, 5
lea r13, [r15 + r12 + 0x1d8]
mov edx, dword [rsp + 0x50]
lea ebx, [rdx - 1]
mov edx, ebx
sub edx, r10d
mov r14, rdx
add r14, rbp
lea r9, [r14 + r14*2]
shl r9, 5
lea rcx, [r15 + r9 + 0x238]
mov rsi, rcx
sub rsi, r13
sub rsi, 0x60
shr rsi, 5
movabs r11, 0x2aaaaaaaaaaaaab
imul rsi, r11
add rsi, 1
and esi, 3
je 0x429187
cmp rsi, 1
je 0x42912a
cmp rsi, 2
je 0x4290d6
mov dword [r13 - 4], 0
mov dword [r13 - 8], 0
mov qword [r13], 0
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x28], 0
mov qword [r13 + 0x30], 0
mov qword [r13 + 0x38], 0
add r13, 0x60
mov dword [r13 - 4], 0
mov dword [r13 - 8], 0
mov qword [r13], 0
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x28], 0
mov qword [r13 + 0x30], 0
mov qword [r13 + 0x38], 0
add r13, 0x60
mov dword [r13 - 4], 0
mov dword [r13 - 8], 0
mov qword [r13], 0
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x28], 0
mov qword [r13 + 0x30], 0
mov qword [r13 + 0x38], 0
add r13, 0x60
cmp rcx, r13
je 0x42931f
mov dword [r13 - 4], 0
mov dword [r13 - 8], 0
mov qword [r13], 0
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x28], 0
mov qword [r13 + 0x30], 0
mov qword [r13 + 0x38], 0
mov dword [r13 + 0x5c], 0
mov dword [r13 + 0x58], 0
mov qword [r13 + 0x60], 0
mov qword [r13 + 0x68], 0
mov qword [r13 + 0x70], 0
mov qword [r13 + 0x78], 0
mov qword [r13 + 0x80], 0
mov qword [r13 + 0x88], 0
mov qword [r13 + 0x90], 0
mov qword [r13 + 0x98], 0
mov dword [r13 + 0xbc], 0
mov dword [r13 + 0xb8], 0
mov qword [r13 + 0xc0], 0
mov qword [r13 + 0xc8], 0
mov qword [r13 + 0xd0], 0
mov qword [r13 + 0xd8], 0
mov qword [r13 + 0xe0], 0
mov qword [r13 + 0xe8], 0
mov qword [r13 + 0xf0], 0
mov qword [r13 + 0xf8], 0
mov dword [r13 + 0x11c], 0
mov dword [r13 + 0x118], 0
mov qword [r13 + 0x120], 0
mov qword [r13 + 0x128], 0
mov qword [r13 + 0x130], 0
mov qword [r13 + 0x138], 0
mov qword [r13 + 0x140], 0
mov qword [r13 + 0x148], 0
mov qword [r13 + 0x150], 0
mov qword [r13 + 0x158], 0
add r13, 0x180
cmp rcx, r13
jne 0x429187
mov edi, dword [rsp + 0x50]
mov dword [r15 + 0xa4], edi
mov r10, qword [rsp + 0x60]
test r10, r10
je 0x42933c
mov rcx, r10
call sub.msvcrt.dll_free
mov r8, qword [rsp + 0x98]
add qword [r15 + 0x98], r8
mov eax, 1
jmp 0x427753
mov ecx, dword [r15 + 0x188]
add ecx, dword [r15 + 0x180]
mov dword [r15 + 0x180], ecx
sar ecx, 0x10
jmp 0x428975
mov rsi, qword [rsp + 0xab8]
mov dword [rsp + 0x34], 0
movapd xmm7, xmm6
xor ebx, ebx
mov dword [rsp + 0x2c], 0
movsd xmm8, qword [0x004642a8]
mov qword [rsp + 0xd8], r12
mov edi, dword [rsp + 0x28]
mov r9d, dword [rsi]
add rsi, 8
mov r12d, dword [rsi - 4]
mov r13d, dword [rsp + 0x24]
lea eax, [r9 + r13*8]
add eax, r13d
lea ecx, [rax + r9*2]
add ecx, r12d
mov dword [rsp + 0x24], ecx
mov r10d, dword [rsp + 0x4c]
test r10d, r10d
je 0x4294b2
mov r14, qword [rsp + 0x38]
test r14, r14
je 0x429ae3
movsx eax, word [r14]
add r14, 2
mov qword [rsp + 0x38], r14
mov edx, dword [r15 + 0x190]
movsx r8d, dx
cmp edx, r8d
je 0x429aac
movzx r13d, dx
imul r13d, eax
sar r13d, 9
mov ecx, edx
sar ecx, 9
and ecx, 0xffffff80
imul ecx, eax
lea r11d, [r13 + rcx + 1]
sar r11d, 1
neg r11d
mov r10d, dword [rsp + 0xa8]
test r10d, r10d
je 0x42943b
test eax, eax
js 0x429b3d
add r9d, r11d
mov r14d, r9d
neg r14d
mov dword [r15 + 0x190], r14d
cmp qword [rsp + 0x38], 0
je 0x429ac6
mov r11d, dword [r15 + 0x194]
movsx r8d, r11w
cmp r11d, r8d
je 0x429a92
movzx r10d, r11w
imul r10d, eax
sar r10d, 9
mov ecx, r11d
sar ecx, 9
and ecx, 0xffffff80
imul ecx, eax
lea r13d, [r10 + rcx + 1]
sar r13d, 1
neg r13d
mov r14d, dword [rsp + 0xa8]
test r14d, r14d
je 0x4294a3
test eax, eax
js 0x429b63
add r12d, r13d
mov edx, r12d
neg edx
mov dword [r15 + 0x194], edx
mov r11d, dword [rsp + 0x6c]
test r11d, r11d
je 0x4294c8
sub r9d, r12d
mov r8d, r9d
sar r8d, 1
add r12d, r8d
mov r13d, dword [r15 + 0xa4]
lea r10d, [r13 - 1]
test r13d, r13d
je 0x429b11
lea rcx, [r10 + r10*2]
shl rcx, 5
lea r8, [r15 + rcx + 0x228]
mov rax, rbp
movsxd r11, ebx
jmp 0x429586
mov ecx, dword [rax + 0x10]
mov edx, dword [rax + 0x30]
and r14d, 1
je 0x429865
add ecx, ecx
sub ecx, dword [rax + 0x14]
add edx, edx
sub edx, dword [rax + 0x34]
mov dword [rax + 0x38], edx
mov dword [rax + 0x18], ecx
movsx r13d, cx
cmp r13d, ecx
je 0x429888
mov r14d, dword [rax + 8]
movzx r13d, cx
imul r13d, r14d
sar r13d, 9
sar ecx, 9
and ecx, 0xffffff80
imul ecx, r14d
lea ecx, [r13 + rcx + 1]
sar ecx, 1
mov dword [rax + 0x50], ecx
sub r9d, ecx
movsx ecx, dx
cmp edx, ecx
je 0x4295e4
mov r14d, dword [rax + 0xc]
movzx r13d, dx
imul r13d, r14d
sar r13d, 9
sar edx, 9
and edx, 0xffffff80
imul edx, r14d
lea edx, [r13 + rdx + 1]
sar edx, 1
mov dword [rax + 0x54], edx
sub r12d, edx
add rax, 0x60
cmp rax, r8
je 0x429600
mov r14d, dword [rax]
cmp r14d, 8
jg 0x4294f7
test r14d, r14d
jle 0x42989a
mov edx, dword [rax + r11*4 + 0x10]
movsx r14d, dx
cmp edx, r14d
je 0x4299ab
mov r13d, dword [rax + 8]
movzx ecx, dx
imul ecx, r13d
sar ecx, 9
sar edx, 9
and edx, 0xffffff80
imul edx, r13d
lea edx, [rcx + rdx + 1]
sar edx, 1
mov dword [rax + 0x50], edx
sub r9d, edx
mov edx, dword [rax + r11*4 + 0x30]
movsx r14d, dx
cmp edx, r14d
jne 0x429556
imul edx, dword [rax + 0xc]
add edx, 0x200
sar edx, 0xa
mov dword [rax + 0x54], edx
sub r12d, edx
add rax, 0x60
cmp rax, r8
jne 0x429586
lea r13, [r10 + r10*2]
shl r13, 5
add r13, rbp
mov r10d, r9d
test r9d, r9d
jns 0x429616
not r10d
mov r8d, r12d
test r12d, r12d
jns 0x429621
not r8d
or r10d, r8d
or dword [rsp + 0x34], r10d
xor r8d, r8d
mov edx, r9d
mov rcx, r15
call fcn.00437d53
mov r14d, eax
mov r8d, 1
mov edx, r12d
mov rcx, r15
call fcn.00437d53
cmp rbp, r13
ja 0x429775
movsxd r9, ebx
jmp 0x4296e1
mov r10d, dword [r13 + 0x18]
test r10d, r10d
je 0x429688
test r14d, r14d
je 0x429688
xor r10d, r14d
sar r10d, 0x1f
mov r12d, dword [r13 + 4]
xor r12d, r10d
mov edx, dword [r13 + 8]
sub edx, r10d
mov ecx, edx
add ecx, r12d
mov dword [r13 + 8], ecx
mov r8d, dword [r13 + 0x38]
test r8d, r8d
je 0x4296b4
test eax, eax
je 0x4296b4
xor r8d, eax
sar r8d, 0x1f
mov r10d, dword [r13 + 4]
xor r10d, r8d
mov edx, dword [r13 + 0xc]
sub edx, r8d
mov r11d, edx
add r11d, r10d
mov dword [r13 + 0xc], r11d
mov r12d, dword [r13 + 0x10]
mov dword [r13 + 0x14], r12d
mov ecx, dword [r13 + 0x30]
mov dword [r13 + 0x34], ecx
add r14d, dword [r13 + 0x50]
mov dword [r13 + 0x10], r14d
add eax, dword [r13 + 0x54]
mov dword [r13 + 0x30], eax
sub r13, 0x60
cmp r13, rbp
jb 0x429775
mov r12d, dword [r13]
cmp r12d, 8
jg 0x42965c
test r12d, r12d
jle 0x4298f8
add r12d, ebx
and r12d, 7
mov ecx, dword [r13 + r9*4 + 0x10]
test ecx, ecx
je 0x42972a
test r14d, r14d
je 0x42972a
xor ecx, r14d
sar ecx, 0x1f
mov edx, dword [r13 + 4]
xor edx, ecx
mov r8d, dword [r13 + 8]
sub r8d, ecx
mov r10d, r8d
add r10d, edx
mov dword [r13 + 8], r10d
add r14d, dword [r13 + 0x50]
movsxd r12, r12d
lea rcx, [r13 + r12*4]
mov dword [rcx + 0x10], r14d
mov edx, dword [r13 + r9*4 + 0x30]
test edx, edx
je 0x429761
test eax, eax
je 0x429761
xor edx, eax
sar edx, 0x1f
mov r8d, dword [r13 + 4]
xor r8d, edx
mov r11d, dword [r13 + 0xc]
sub r11d, edx
add r11d, r8d
mov dword [r13 + 0xc], r11d
add eax, dword [r13 + 0x54]
mov dword [rcx + 0x30], eax
sub r13, 0x60
cmp r13, rbp
jae 0x4296e1
mov r13d, dword [rsp + 0x6c]
test r13d, r13d
je 0x42978b
mov r9d, r14d
sar r9d, 1
sub eax, r9d
add r14d, eax
add dword [r15 + 0x190], r14d
add dword [r15 + 0x194], eax
add ebx, 1
and ebx, 7
lea r8d, [r14 + rdi*8]
add edi, r8d
add edi, eax
lea edi, [rdi + r14*2]
cmp dword [rsp + 0x24], edi
mov r10d, 1
cmove r10d, dword [rsp + 0x2c]
mov dword [rsp + 0x2c], r10d
mov rdx, qword [rsp + 0xab0]
mov r11d, dword [rdx + 0x14]
mov dword [rsp + 0x28], r11d
and r11d, 0x800000
je 0x429846
sub r14d, dword [rsi - 8]
pxor xmm0, xmm0
cvtsi2sd xmm0, r14d
mulsd xmm0, xmm0
movapd xmm2, xmm0
sub eax, dword [rsi - 4]
pxor xmm3, xmm3
cvtsi2sd xmm3, eax
mulsd xmm3, xmm3
addsd xmm2, xmm3
mulsd xmm2, xmm8
addsd xmm7, xmm2
movsd xmm4, qword [0x004642d8]
mulsd xmm4, qword [r15 + 0x1a0]
mulsd xmm2, qword [0x004642e0]
addsd xmm2, xmm4
movsd qword [r15 + 0x1a0], xmm2
comisd xmm2, xmmword [r15 + 0x1a8]
jbe 0x429846
movsd qword [r15 + 0x1a8], xmm2
cmp qword [rsp + 0x88], rsi
jne 0x4293a5
mov r12, qword [rsp + 0xd8]
mov dword [rsp + 0x28], edi
jmp 0x427d0e
lea ecx, [rcx + rcx*2]
sub ecx, dword [rax + 0x14]
sar ecx, 1
lea edx, [rdx + rdx*2]
sub edx, dword [rax + 0x34]
sar edx, 1
mov dword [rax + 0x38], edx
mov dword [rax + 0x18], ecx
movsx r13d, cx
cmp r13d, ecx
jne 0x429524
imul ecx, dword [rax + 8]
add ecx, 0x200
sar ecx, 0xa
jmp 0x429545
cmp r14d, 0xffffffff
je 0x429a1f
mov edx, dword [rax + 0x30]
cmp r14d, 0xfffffffe
je 0x429a74
mov ecx, dword [rax + 0x10]
movsx r13d, cx
cmp r13d, ecx
je 0x4299bd
mov r14d, dword [rax + 8]
movzx r13d, cx
imul r13d, r14d
sar r13d, 9
sar ecx, 9
and ecx, 0xffffff80
imul ecx, r14d
lea ecx, [r13 + rcx + 1]
sar ecx, 1
mov dword [rax + 0x50], ecx
sub r9d, ecx
movsx ecx, dx
cmp ecx, edx
jne 0x429556
jmp 0x4295e4
cmp r12d, 0xffffffff
je 0x4299cf
mov r8d, dword [r13 + 0x30]
mov ecx, dword [r13 + 0x54]
add ecx, eax
cmp r12d, 0xfffffffe
je 0x429a2e
mov r10d, dword [r13 + 0x10]
mov edx, dword [r13 + 0x50]
add edx, r14d
test r10d, r10d
je 0x42995e
test r14d, r14d
je 0x42995e
xor r10d, r14d
sar r10d, 0x1f
mov r11d, dword [r13 + 8]
xor r11d, r10d
mov r14d, dword [r13 + 4]
sub r14d, r10d
add r11d, r14d
cmp r11d, 0x400
mov r12d, 0x400
cmovge r11d, r12d
xor r11d, r10d
sub r11d, r10d
mov dword [r13 + 8], r11d
test r8d, r8d
je 0x429999
test eax, eax
je 0x429999
xor eax, r8d
sar eax, 0x1f
mov r8d, dword [r13 + 0xc]
xor r8d, eax
mov r10d, dword [r13 + 4]
sub r10d, eax
add r8d, r10d
cmp r8d, 0x400
mov r11d, 0x400
cmovge r8d, r11d
xor r8d, eax
sub r8d, eax
mov dword [r13 + 0xc], r8d
mov dword [r13 + 0x30], edx
mov dword [r13 + 0x10], ecx
mov eax, ecx
mov r14d, edx
jmp 0x4296d4
imul edx, dword [rax + 8]
add edx, 0x200
sar edx, 0xa
jmp 0x4295cc
imul ecx, dword [rax + 8]
add ecx, 0x200
sar ecx, 0xa
jmp 0x4298e2
mov r8d, dword [r13 + 0x50]
add r8d, r14d
mov dword [r13 + 0x30], r8d
mov ecx, dword [r13 + 0xc]
movsx edx, r8w
cmp r8d, edx
je 0x429a80
movzx r11d, r8w
imul r11d, ecx
sar r11d, 9
mov r12d, r8d
sar r12d, 9
and r12d, 0xffffff80
imul ecx, r12d
lea ecx, [r11 + rcx + 1]
sar ecx, 1
mov dword [r13 + 0x54], ecx
mov r10d, dword [r13 + 0x10]
add ecx, eax
mov edx, r8d
jmp 0x429921
mov dword [rax + 0x30], r9d
mov ecx, dword [rax + 0x10]
mov edx, r9d
jmp 0x4298b4
mov dword [r13 + 0x10], ecx
mov edx, dword [r13 + 8]
movsx r11d, cx
cmp r11d, ecx
je 0x429b00
movzx r12d, cx
imul r12d, edx
sar r12d, 9
mov r10d, ecx
sar r10d, 9
and r10d, 0xffffff80
imul edx, r10d
lea edx, [r12 + rdx + 1]
sar edx, 1
mov dword [r13 + 0x50], edx
add edx, r14d
mov r10d, ecx
jmp 0x429921
mov dword [rax + 0x10], r12d
mov ecx, r12d
jmp 0x4298b4
imul ecx, r8d
add ecx, 0x200
sar ecx, 0xa
jmp 0x429a0d
mov r13d, r11d
imul r13d, eax
add r13d, 0x200
sar r13d, 0xa
neg r13d
jmp 0x42948e
mov r11d, edx
imul r11d, eax
add r11d, 0x200
sar r11d, 0xa
neg r11d
jmp 0x429426
mov eax, dword [r15 + 0x18c]
add eax, dword [r15 + 0x184]
mov dword [r15 + 0x184], eax
sar eax, 0x10
jmp 0x429457
mov eax, dword [r15 + 0x188]
add eax, dword [r15 + 0x180]
mov dword [r15 + 0x180], eax
sar eax, 0x10
jmp 0x4293f0
imul edx, ecx
add edx, 0x200
sar edx, 0xa
jmp 0x429a65
lea r13, [r15 + 0x168]
jmp 0x42960b
mov r11d, dword [rbp + 0x10]
lea r14d, [r11 + r11*2]
sub r14d, dword [rbp + 0x14]
sar r14d, 1
jmp 0x428f64
lea r14, [r15 + 0x168]
jmp 0x428b4e
test r11d, r11d
je 0x42943b
cmp edx, r11d
je 0x42a58c
mov edx, r9d
neg edx
mov dword [r15 + 0x190], edx
add r9d, r11d
jmp 0x42944b
test r13d, r13d
je 0x4294a3
cmp r11d, r13d
je 0x42a57e
mov eax, r12d
neg eax
mov dword [r15 + 0x194], eax
add r12d, r13d
jmp 0x4294b2
test r8d, r8d
je 0x4289c2
cmp r14d, r8d
je 0x42a570
mov r14d, edx
neg r14d
mov dword [r15 + 0x190], r14d
add edx, r8d
jmp 0x4289d0
stosd dword [rdi], eax
sub r8d, 4
jmp 0x42844a
stosw word [rdi], ax
sub r8d, 2
jmp 0x428440
stosb byte [rdi], al
mov r8d, 0x2f
jmp 0x428436
call fcn.00440e67
mov r13d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x188], eax
mov word [rdi], r13w
test dword [r15 + 0x18], 0x40000004
je 0x42a4e8
add rdi, 2
jmp 0x428f05
mov ecx, dword [r15 + 0x194]
call fcn.00440e67
mov r14d, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x194], eax
mov word [r13 + 4], r14w
mov ecx, dword [r15 + 0x184]
call fcn.00440e67
mov ebx, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x184], eax
lea rdi, [r13 + 8]
mov word [r13 + 6], bx
jmp 0x428eef
mov r11d, dword [rsp + 0xac]
test r11d, r11d
je 0x42833b
cmp dword [rsp + 0xbc], 0xa
jbe 0x42a5e7
mov eax, dword [rsp + 0xb8]
test eax, eax
je 0x42a5a7
mov rsi, qword [rsp + 0xab8]
mov r8d, dword [rsi]
mov r10, qword [rsp + 0xab8]
lea rcx, [r10 + 4]
test r8d, r8d
jns 0x429c9b
not r8d
mov r9d, r8d
mov edi, dword [rsp + 0xac]
lea r14d, [rdi - 2]
cmp dword [rsp + 0xb8], 1
je 0x429d12
mov r13, qword [rsp + 0xab8]
mov r9d, dword [r13 + 4]
lea rcx, [r13 + 8]
test r9d, r9d
js 0x42a559
or r9d, r8d
mov edx, dword [rsp + 0xac]
lea r14d, [rdx - 3]
cmp dword [rsp + 0xb8], 3
jne 0x429d12
mov r11, qword [rsp + 0xab8]
mov r14d, dword [r11 + 8]
mov rcx, qword [rsp + 0xab8]
lea rcx, [rcx + 0xc]
test r14d, r14d
jns 0x429d04
not r14d
or r9d, r14d
mov eax, dword [rsp + 0xac]
lea r14d, [rax - 4]
mov rsi, qword [rsp + 0xc0]
mov r10, rsi
pxor xmm5, xmm5
movdqa xmm7, xmm5
mov r8, qword [rsp + 0xb0]
sub r8, rsi
sub r8, 0x10
shr r8, 4
add r8, 1
and r8d, 7
je 0x429e94
cmp r8, 1
je 0x429e61
cmp r8, 2
je 0x429e39
cmp r8, 3
je 0x429e11
cmp r8, 4
je 0x429de9
cmp r8, 5
je 0x429dbe
cmp r8, 6
je 0x429d96
movdqa xmm9, xmmword [rsi]
pcmpgtd xmm5, xmm9
movdqa xmm1, xmm9
pandn xmm1, xmm5
pandn xmm5, xmm9
por xmm5, xmm1
add r10, 0x10
movdqa xmm8, xmmword [r10]
movdqa xmm0, xmm7
pcmpgtd xmm0, xmm8
movdqa xmm2, xmm8
pandn xmm2, xmm0
pandn xmm0, xmm8
por xmm0, xmm2
por xmm5, xmm0
add r10, 0x10
movdqa xmm3, xmmword [r10]
movdqa xmm9, xmm7
pcmpgtd xmm9, xmm3
movdqa xmm4, xmm3
pandn xmm4, xmm9
pandn xmm9, xmm3
por xmm9, xmm4
por xmm5, xmm9
add r10, 0x10
movdqa xmm8, xmmword [r10]
movdqa xmm1, xmm7
pcmpgtd xmm1, xmm8
movdqa xmm0, xmm8
pandn xmm0, xmm1
pandn xmm1, xmm8
por xmm1, xmm0
por xmm5, xmm1
add r10, 0x10
movdqa xmm2, xmmword [r10]
movdqa xmm3, xmm7
pcmpgtd xmm3, xmm2
movdqa xmm9, xmm2
pandn xmm9, xmm3
pandn xmm3, xmm2
por xmm3, xmm9
por xmm5, xmm3
add r10, 0x10
movdqa xmm8, xmmword [r10]
movdqa xmm1, xmm7
pcmpgtd xmm1, xmm8
movdqa xmm4, xmm8
pandn xmm4, xmm1
pandn xmm1, xmm8
por xmm1, xmm4
por xmm5, xmm1
add r10, 0x10
movdqa xmm0, xmmword [r10]
movdqa xmm2, xmm7
pcmpgtd xmm2, xmm0
movdqa xmm3, xmm0
pandn xmm3, xmm2
pandn xmm2, xmm0
por xmm2, xmm3
por xmm5, xmm2
add r10, 0x10
cmp r10, qword [rsp + 0xb0]
je 0x429fd2
movdqa xmm9, xmmword [r10]
movdqa xmm8, xmm7
pcmpgtd xmm8, xmm9
movdqa xmm1, xmm9
pandn xmm1, xmm8
pandn xmm8, xmm9
por xmm8, xmm1
por xmm5, xmm8
movdqa xmm0, xmmword [r10 + 0x10]
movdqa xmm2, xmm7
pcmpgtd xmm2, xmm0
movdqa xmm4, xmm0
pandn xmm4, xmm2
pandn xmm2, xmm0
por xmm2, xmm4
por xmm5, xmm2
movdqa xmm3, xmmword [r10 + 0x20]
movdqa xmm9, xmm7
pcmpgtd xmm9, xmm3
movdqa xmm8, xmm3
pandn xmm8, xmm9
pandn xmm9, xmm3
por xmm9, xmm8
por xmm5, xmm9
movdqa xmm0, xmmword [r10 + 0x30]
movdqa xmm1, xmm7
pcmpgtd xmm1, xmm0
movdqa xmm2, xmm0
pandn xmm2, xmm1
pandn xmm1, xmm0
por xmm1, xmm2
por xmm5, xmm1
movdqa xmm3, xmmword [r10 + 0x40]
movdqa xmm9, xmm7
pcmpgtd xmm9, xmm3
movdqa xmm4, xmm3
pandn xmm4, xmm9
pandn xmm9, xmm3
por xmm9, xmm4
por xmm5, xmm9
movdqa xmm8, xmmword [r10 + 0x50]
movdqa xmm0, xmm7
pcmpgtd xmm0, xmm8
movdqa xmm1, xmm8
pandn xmm1, xmm0
pandn xmm0, xmm8
por xmm0, xmm1
por xmm5, xmm0
movdqa xmm2, xmmword [r10 + 0x60]
movdqa xmm3, xmm7
pcmpgtd xmm3, xmm2
movdqa xmm9, xmm2
pandn xmm9, xmm3
pandn xmm3, xmm2
por xmm3, xmm9
por xmm5, xmm3
movdqa xmm8, xmmword [r10 + 0x70]
movdqa xmm0, xmm7
pcmpgtd xmm0, xmm8
movdqa xmm4, xmm8
pandn xmm4, xmm0
pandn xmm0, xmm8
por xmm0, xmm4
por xmm5, xmm0
sub r10, 0xffffffffffffff80
cmp r10, qword [rsp + 0xb0]
jne 0x429e94
movdqa xmm7, xmm5
psrldq xmm7, 8
por xmm5, xmm7
movdqa xmm1, xmm5
psrldq xmm1, 4
por xmm5, xmm1
movd edi, xmm5
or edi, r9d
mov dword [rsp + 0x34], edi
add rcx, qword [rsp + 0xd0]
mov r9d, dword [rsp + 0xcc]
sub r14d, r9d
cmp dword [rsp + 0xc8], r9d
je 0x427cd8
mov r13d, dword [rcx]
test r13d, r13d
jns 0x42a023
not r13d
or dword [rsp + 0x34], r13d
test r14d, r14d
je 0x427cd8
mov edx, dword [rcx + 4]
test edx, edx
jns 0x42a03a
not edx
or dword [rsp + 0x34], edx
cmp r14d, 1
je 0x427cd8
mov r11d, dword [rcx + 8]
test r11d, r11d
jns 0x42a054
not r11d
or dword [rsp + 0x34], r11d
cmp r14d, 2
je 0x427cd8
mov eax, dword [rcx + 0xc]
test eax, eax
js 0x42a543
or dword [rsp + 0x34], eax
cmp r14d, 3
je 0x427cd8
mov esi, dword [rcx + 0x10]
test esi, esi
js 0x42a54a
or dword [rsp + 0x34], esi
cmp r14d, 4
je 0x427cd8
mov r8d, dword [rcx + 0x14]
test r8d, r8d
js 0x42a551
or dword [rsp + 0x34], r8d
cmp r14d, 5
je 0x427cd8
mov r10d, dword [rcx + 0x18]
test r10d, r10d
js 0x42a561
or dword [rsp + 0x34], r10d
cmp r14d, 6
je 0x427cd8
mov edi, dword [rcx + 0x1c]
test edi, edi
js 0x42a569
or dword [rsp + 0x34], edi
cmp r14d, 7
je 0x427cd8
mov r9d, dword [rcx + 0x20]
test r9d, r9d
jns 0x42a0f2
not r9d
or dword [rsp + 0x34], r9d
cmp r14d, 8
je 0x427cd8
mov r13d, dword [rcx + 0x24]
test r13d, r13d
jns 0x42a10d
not r13d
or dword [rsp + 0x34], r13d
cmp r14d, 9
je 0x427cd8
mov r14d, dword [rcx + 0x28]
test r14d, r14d
jns 0x42a128
not r14d
or dword [rsp + 0x34], r14d
jmp 0x427cd8
mov r14, qword [rsp + 0xa0]
cmp qword [rsp + 0xab8], r14
jae 0x428150
mov r11, qword [rsp + 0xab8]
not r11
add r11, r14
shr r11, 3
and r11d, 7
mov rax, qword [rsp + 0xab8]
mov ecx, dword [rax + 4]
mov r13d, dword [rax]
mov dword [rsp + 0x2c], r13d
sub r13d, ecx
mov r9, qword [rsp + 0xab8]
mov dword [r9], r13d
sar r13d, 1
add r13d, ecx
mov dword [r9 + 4], r13d
mov rdi, r9
add rdi, 8
cmp r14, rdi
jbe 0x428150
test r11, r11
je 0x42a2a1
cmp r11, 1
je 0x42a279
cmp r11, 2
je 0x42a262
cmp r11, 3
je 0x42a248
cmp r11, 4
je 0x42a22d
cmp r11, 5
je 0x42a219
cmp r11, 6
je 0x42a1fe
mov r8d, dword [rdi + 4]
mov edx, dword [r9 + 8]
mov dword [rsp + 0x2c], edx
mov r10d, edx
sub r10d, r8d
mov rbx, qword [rsp + 0xab8]
mov dword [rbx + 8], r10d
sar r10d, 1
add r10d, r8d
mov dword [rdi + 4], r10d
add rdi, 8
mov r14d, dword [rdi + 4]
mov r11d, dword [rdi]
sub r11d, r14d
mov dword [rdi], r11d
sar r11d, 1
add r11d, r14d
mov dword [rdi + 4], r11d
add rdi, 8
mov eax, dword [rdi + 4]
mov ecx, dword [rdi]
sub ecx, eax
mov dword [rdi], ecx
sar ecx, 1
add ecx, eax
mov dword [rdi + 4], ecx
add rdi, 8
mov r13d, dword [rdi + 4]
mov r9d, dword [rdi]
sub r9d, r13d
mov dword [rdi], r9d
sar r9d, 1
add r9d, r13d
mov dword [rdi + 4], r9d
add rdi, 8
mov esi, dword [rdi + 4]
mov r8d, dword [rdi]
sub r8d, esi
mov dword [rdi], r8d
sar r8d, 1
add r8d, esi
mov dword [rdi + 4], r8d
add rdi, 8
mov r10d, dword [rdi + 4]
mov edx, dword [rdi]
sub edx, r10d
mov dword [rdi], edx
sar edx, 1
add edx, r10d
mov dword [rdi + 4], edx
add rdi, 8
mov ebx, dword [rdi + 4]
mov r14d, dword [rdi]
sub r14d, ebx
mov dword [rdi], r14d
sar r14d, 1
add r14d, ebx
mov dword [rdi + 4], r14d
add rdi, 8
cmp qword [rsp + 0xa0], rdi
jbe 0x428150
mov r11d, dword [rdi + 4]
mov eax, dword [rdi]
sub eax, r11d
mov dword [rdi], eax
sar eax, 1
add eax, r11d
mov dword [rdi + 4], eax
mov ecx, dword [rdi + 0xc]
mov r13d, dword [rdi + 8]
sub r13d, ecx
mov dword [rdi + 8], r13d
sar r13d, 1
add r13d, ecx
mov dword [rdi + 0xc], r13d
mov r9d, dword [rdi + 0x14]
mov esi, dword [rdi + 0x10]
sub esi, r9d
mov dword [rdi + 0x10], esi
sar esi, 1
add esi, r9d
mov dword [rdi + 0x14], esi
mov r8d, dword [rdi + 0x1c]
mov r10d, dword [rdi + 0x18]
sub r10d, r8d
mov dword [rdi + 0x18], r10d
sar r10d, 1
add r10d, r8d
mov dword [rdi + 0x1c], r10d
mov ebx, dword [rdi + 0x24]
mov edx, dword [rdi + 0x20]
sub edx, ebx
mov dword [rdi + 0x20], edx
sar edx, 1
add edx, ebx
mov dword [rdi + 0x24], edx
mov r14d, dword [rdi + 0x2c]
mov r11d, dword [rdi + 0x28]
sub r11d, r14d
mov dword [rdi + 0x28], r11d
sar r11d, 1
add r11d, r14d
mov dword [rdi + 0x2c], r11d
mov eax, dword [rdi + 0x34]
mov ecx, dword [rdi + 0x30]
sub ecx, eax
mov dword [rdi + 0x30], ecx
sar ecx, 1
add ecx, eax
mov dword [rdi + 0x34], ecx
mov r13d, dword [rdi + 0x3c]
mov r9d, dword [rdi + 0x38]
sub r9d, r13d
mov dword [rdi + 0x38], r9d
sar r9d, 1
add r9d, r13d
mov dword [rdi + 0x3c], r9d
add rdi, 0x40
cmp qword [rsp + 0xa0], rdi
ja 0x42a2a1
jmp 0x428150
mov dword [rsp + 0x54], 1
mov qword [rsp + 0x60], 0
jmp 0x427159
mov r9, qword [rbp + 0x10]
mov qword [rsp + 0x100], r9
mov r13, qword [rbp + 0x18]
mov qword [rsp + 0x108], r13
mov r14, qword [rbp + 0x20]
mov qword [rsp + 0x110], r14
mov rcx, qword [rbp + 0x28]
mov qword [rsp + 0x118], rcx
mov rdx, qword [rbp + 0x30]
mov qword [rsp + 0x120], rdx
mov rax, qword [rbp + 0x38]
mov qword [rsp + 0x128], rax
mov rsi, qword [rbp + 0x40]
mov qword [rsp + 0x130], rsi
mov r10, qword [rbp + 0x48]
mov qword [rsp + 0x138], r10
movsxd rdi, ebx
mov r9d, dword [rsp + rdi*4 + 0x100]
mov dword [rbp + 0x10], r9d
mov r13d, dword [rsp + rdi*4 + 0x120]
mov dword [rbp + 0x30], r13d
add ebx, 1
mov r14d, ebx
and r14d, 7
mov ecx, dword [rsp + r14*4 + 0x100]
mov dword [rbp + 0x14], ecx
mov edx, dword [rsp + r14*4 + 0x120]
mov dword [rbp + 0x34], edx
lea ebx, [rbx + 1]
mov eax, ebx
and eax, 7
mov esi, dword [rsp + rax*4 + 0x100]
mov dword [rbp + 0x18], esi
mov r10d, dword [rsp + rax*4 + 0x120]
mov dword [rbp + 0x38], r10d
add ebx, 1
mov edi, ebx
and edi, 7
mov r9d, dword [rsp + rdi*4 + 0x100]
mov dword [rbp + 0x1c], r9d
mov r13d, dword [rsp + rdi*4 + 0x120]
mov dword [rbp + 0x3c], r13d
add ebx, 1
mov r14d, ebx
and r14d, 7
mov ecx, dword [rsp + r14*4 + 0x100]
mov dword [rbp + 0x20], ecx
mov edx, dword [rsp + r14*4 + 0x120]
mov dword [rbp + 0x40], edx
add ebx, 1
mov eax, ebx
and eax, 7
mov esi, dword [rsp + rax*4 + 0x100]
mov dword [rbp + 0x24], esi
mov r10d, dword [rsp + rax*4 + 0x120]
mov dword [rbp + 0x44], r10d
add ebx, 1
mov edi, ebx
and edi, 7
mov r9d, dword [rsp + rdi*4 + 0x100]
mov dword [rbp + 0x28], r9d
mov r13d, dword [rsp + rdi*4 + 0x120]
mov dword [rbp + 0x48], r13d
add ebx, 1
mov r14d, ebx
and r14d, 7
mov ecx, dword [rsp + r14*4 + 0x100]
mov dword [rbp + 0x2c], ecx
mov edx, dword [rsp + r14*4 + 0x120]
mov dword [rbp + 0x4c], edx
lea ebx, [rbx + 1]
and ebx, 7
jmp 0x4286fe
mov ecx, dword [rsp + 0x28]
jmp 0x4276b2
mov ecx, dword [r15 + 0x18c]
call fcn.00440e67
mov esi, eax
mov ecx, eax
call fcn.00440f99
mov dword [r15 + 0x18c], eax
mov word [rdi + 2], si
add rdi, 4
jmp 0x428f05
lea r14, [r11*8]
jmp 0x4270f6
lea rdi, [rsp + 0x140]
mov qword [rsp + 0x70], rdi
mov ecx, 0x11b
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov dword [rsp + 0x78], 0xfff00000
jmp 0x4270ca
not eax
jmp 0x42a06e
not esi
jmp 0x42a087
not r8d
jmp 0x42a0a2
not r9d
jmp 0x429ccc
not r10d
jmp 0x42a0be
not edi
jmp 0x42a0d8
test r8d, r8d
js 0x42a5d5
sub r8d, 1
jmp 0x429b9b
test r13d, r13d
js 0x42a5de
sub r13d, 1
jmp 0x429b75
test r11d, r11d
js 0x42a5cc
sub r11d, 1
jmp 0x429b4f
mov dword [rsp + 0x28], 0xffffffff
jmp 0x427709
mov r14d, dword [rsp + 0xbc]
xor r9d, r9d
mov rcx, qword [rsp + 0xab8]
jmp 0x429d12
mov dword [rsp + 0x28], 0xffffffff
jmp 0x426f44
add r11d, 1
jmp 0x429b4f
add r8d, 1
jmp 0x429b9b
add r13d, 1
jmp 0x429b75
mov r14d, dword [rsp + 0xbc]
mov rcx, qword [rsp + 0xab8]
mov dword [rsp + 0x34], 0
jmp 0x42a018
test ebx, ebx
je 0x42a6ed
cmp ebx, 1
je 0x42a6ca
cmp ebx, 2
je 0x42a6b0
cmp ebx, 3
je 0x42a696
cmp ebx, 4
je 0x42a67c
cmp ebx, 5
je 0x42a662
cmp ebx, 6
je 0x42a648
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x38], rax
mov r10d, 0x40
mov r14d, r10d
mov qword [rdi + r14], rax
mov qword [rdi + r14 + 8], rax
mov qword [rdi + r14 + 0x10], rax
mov qword [rdi + r14 + 0x18], rax
add r10d, 0x20
mov esi, r10d
mov qword [rdi + rsi], rax
mov qword [rdi + rsi + 8], rax
mov qword [rdi + rsi + 0x10], rax
mov qword [rdi + rsi + 0x18], rax
add r10d, 0x20
mov r13d, r10d
mov qword [rdi + r13], rax
mov qword [rdi + r13 + 8], rax
mov qword [rdi + r13 + 0x10], rax
mov qword [rdi + r13 + 0x18], rax
add r10d, 0x20
mov edx, r10d
mov qword [rdi + rdx], rax
mov qword [rdi + rdx + 8], rax
mov qword [rdi + rdx + 0x10], rax
mov qword [rdi + rdx + 0x18], rax
add r10d, 0x20
mov ecx, r10d
mov qword [rdi + rcx], rax
mov qword [rdi + rcx + 8], rax
mov qword [rdi + rcx + 0x10], rax
mov qword [rdi + rcx + 0x18], rax
add r10d, 0x20
mov ebx, r10d
mov qword [rdi + rbx], rax
mov qword [rdi + rbx + 8], rax
mov qword [rdi + rbx + 0x10], rax
mov qword [rdi + rbx + 0x18], rax
add r10d, 0x20
cmp r10d, r11d
jae 0x428479
mov r14d, r10d
mov qword [rdi + r14], rax
mov qword [rdi + r14 + 8], rax
mov qword [rdi + r14 + 0x10], rax
mov qword [rdi + r14 + 0x18], rax
lea esi, [r10 + 0x20]
mov qword [rdi + rsi], rax
mov qword [rdi + rsi + 8], rax
mov qword [rdi + rsi + 0x10], rax
mov qword [rdi + rsi + 0x18], rax
lea r13d, [r10 + 0x40]
mov qword [rdi + r13], rax
mov qword [rdi + r13 + 8], rax
mov qword [rdi + r13 + 0x10], rax
mov qword [rdi + r13 + 0x18], rax
lea edx, [r10 + 0x60]
mov qword [rdi + rdx], rax
mov qword [rdi + rdx + 8], rax
mov qword [rdi + rdx + 0x10], rax
mov qword [rdi + rdx + 0x18], rax
lea ecx, [r10 + 0x80]
mov qword [rdi + rcx], rax
mov qword [rdi + rcx + 8], rax
mov qword [rdi + rcx + 0x10], rax
mov qword [rdi + rcx + 0x18], rax
lea ebx, [r10 + 0xa0]
mov qword [rdi + rbx], rax
mov qword [rdi + rbx + 8], rax
mov qword [rdi + rbx + 0x10], rax
mov qword [rdi + rbx + 0x18], rax
lea r14d, [r10 + 0xc0]
mov qword [rdi + r14], rax
mov qword [rdi + r14 + 8], rax
mov qword [rdi + r14 + 0x10], rax
mov qword [rdi + r14 + 0x18], rax
lea esi, [r10 + 0xe0]
mov qword [rdi + rsi], rax
mov qword [rdi + rsi + 8], rax
mov qword [rdi + rsi + 0x10], rax
mov qword [rdi + rsi + 0x18], rax
add r10d, 0x100
cmp r10d, r11d
jae 0x428479
jmp 0x42a6ed
test r9d, r9d
je 0x42a8ac
cmp r9d, 1
je 0x42a88b
cmp r9d, 2
je 0x42a873
cmp r9d, 3
je 0x42a85a
cmp r9d, 4
je 0x42a841
cmp r9d, 5
je 0x42a828
cmp r9d, 6
je 0x42a80f
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x38], rax
mov edx, 0x40
mov r10d, edx
mov qword [rdi + r10], rax
mov qword [rdi + r10 + 8], rax
mov qword [rdi + r10 + 0x10], rax
mov qword [rdi + r10 + 0x18], rax
add edx, 0x20
mov r14d, edx
mov qword [rdi + r14], rax
mov qword [rdi + r14 + 8], rax
mov qword [rdi + r14 + 0x10], rax
mov qword [rdi + r14 + 0x18], rax
add edx, 0x20
mov r11d, edx
mov qword [rdi + r11], rax
mov qword [rdi + r11 + 8], rax
mov qword [rdi + r11 + 0x10], rax
mov qword [rdi + r11 + 0x18], rax
add edx, 0x20
mov r13d, edx
mov qword [rdi + r13], rax
mov qword [rdi + r13 + 8], rax
mov qword [rdi + r13 + 0x10], rax
mov qword [rdi + r13 + 0x18], rax
add edx, 0x20
mov ebx, edx
mov qword [rdi + rbx], rax
mov qword [rdi + rbx + 8], rax
mov qword [rdi + rbx + 0x10], rax
mov qword [rdi + rbx + 0x18], rax
add edx, 0x20
mov r9d, edx
mov qword [rdi + r9], rax
mov qword [rdi + r9 + 8], rax
mov qword [rdi + r9 + 0x10], rax
mov qword [rdi + r9 + 0x18], rax
add edx, 0x20
cmp edx, esi
jae 0x427f4e
mov r10d, edx
mov qword [rdi + r10], rax
mov qword [rdi + r10 + 8], rax
mov qword [rdi + r10 + 0x10], rax
mov qword [rdi + r10 + 0x18], rax
lea r14d, [rdx + 0x20]
mov qword [rdi + r14], rax
mov qword [rdi + r14 + 8], rax
mov qword [rdi + r14 + 0x10], rax
mov qword [rdi + r14 + 0x18], rax
lea r11d, [rdx + 0x40]
mov qword [rdi + r11], rax
mov qword [rdi + r11 + 8], rax
mov qword [rdi + r11 + 0x10], rax
mov qword [rdi + r11 + 0x18], rax
lea r13d, [rdx + 0x60]
mov qword [rdi + r13], rax
mov qword [rdi + r13 + 8], rax
mov qword [rdi + r13 + 0x10], rax
mov qword [rdi + r13 + 0x18], rax
lea ebx, [rdx + 0x80]
mov qword [rdi + rbx], rax
mov qword [rdi + rbx + 8], rax
mov qword [rdi + rbx + 0x10], rax
mov qword [rdi + rbx + 0x18], rax
lea r9d, [rdx + 0xa0]
mov qword [rdi + r9], rax
mov qword [rdi + r9 + 8], rax
mov qword [rdi + r9 + 0x10], rax
mov qword [rdi + r9 + 0x18], rax
lea r10d, [rdx + 0xc0]
mov qword [rdi + r10], rax
mov qword [rdi + r10 + 8], rax
mov qword [rdi + r10 + 0x10], rax
mov qword [rdi + r10 + 0x18], rax
lea r14d, [rdx + 0xe0]
mov qword [rdi + r14], rax
mov qword [rdi + r14 + 8], rax
mov qword [rdi + r14 + 0x10], rax
mov qword [rdi + r14 + 0x18], rax
add edx, 0x100
cmp edx, esi
jae 0x427f4e
jmp 0x42a8ac