Function at 0x18004a2c0
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe60]
sub rsp, 0xf60
mov r8, qword [0x180096dc0]
xor r13d, r13d
movabs rax, 0xdbf06daf303fac65
cmp r8, rax
mov r15, rcx
movabs rsi, 0xd79a16697bb981ec
cmove r8, r13
mov qword [rbp + 0xeb8], r13
lea r12d, [r13 + 0xf]
mov qword [0x180096dc0], r8
test r8, r8
je 0x18004a36a
nop
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xf7847af4
je 0x18004a355
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004a330
mov r8, qword [r8 + 0x280]
test r8, r8
jne 0x18004a320
jmp 0x18004a36a
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r8 + rcx*8 + 0x20]
test rax, rax
jne 0x18004a8ff
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004a3c7
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004a496
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004a3a0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004a390
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004a42c
lea rax, [rbp - 0x20]
mov r8, r9
lea rcx, [rbp - 0x20]
sub r8, rax
nop
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004a42c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004a410
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004a46a
lea rdx, [rbp + 0x9e0]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004a44e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004a46a
movzx eax, word [rbx + 0x58]
inc r8d
add r9, 2
inc rdx
inc r10d
cmp r8d, eax
jl 0x18004a440
lea rcx, [rbp + 0x9e0]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004a4a7
cmp rbx, rdi
je 0x18004a60e
mov rbx, qword [rbx]
jmp 0x18004a3f0
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004a618
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004a60e
cmp byte [0x1800970f1], r13b
jne 0x18004a60e
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004a543
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004a51a
mov esi, r12d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004a4f0
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004a524
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004a55f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004a55f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004a550
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004a5ed
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004a570
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004a5ca
lea rbx, [rax + 0x18]
nop word [rax + rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004a5a0
mov qword [rsi + 0x200], r13
mov r12d, 0xf
jmp 0x18004a5cd
mov rsi, r13
lea rdx, [rbp - 0x20]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004a60e
movsxd rbx, edx
lea rdx, [rbp - 0x20]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
jne 0x18004a8ed
mov ecx, 0xc41671d
call fcn.1800497d0
test al, al
je 0x18004a910
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004a687
nop dword [rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004a766
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004a660
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004a650
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004a6fc
lea rax, [rbp + 0x160]
mov r8, r9
lea rcx, [rbp + 0x160]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004a6fc
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004a6e0
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004a73a
lea rdx, [rbp + 0xe0]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004a71e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004a73a
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004a710
lea rcx, [rbp + 0xe0]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004a777
cmp rbx, rdi
je 0x18004a8de
mov rbx, qword [rbx]
jmp 0x18004a6b0
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004a8e8
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004a8de
cmp byte [0x1800970f1], r13b
jne 0x18004a8de
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004a813
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004a7ea
mov esi, r12d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004a7c0
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004a7f4
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004a82f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004a82f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004a820
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004a8ba
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004a840
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004a894
lea rbx, [rax + 0x18]
nop word [rax + rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004a870
mov qword [rsi + 0x200], r13
jmp 0x18004a897
mov rsi, r13
lea rdx, [rbp + 0x160]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004a8de
movsxd rbx, edx
lea rdx, [rbp + 0x160]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
je 0x18004a910
mov edx, 0xf7847af4
mov rcx, r14
call fcn.180048a60
test rax, rax
je 0x18004a910
lea r8, [rbp + 0xeb8]
mov edx, 8
mov rcx, r15
call rax
mov rax, qword [rbp + 0xeb8]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x38], 1
mov qword [rsp + 0x30], rax
call fcn.1800475b0
test al, al
jne 0x18004c330
mov r8, qword [0x180096dc0]
movabs rax, 0xdbf06daf303fac65
mov dword [rbp + 0xea8], r13d
cmp r8, rax
cmove r8, r13
mov qword [0x180096dc0], r8
test r8, r8
je 0x18004a997
nop
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x1817d45c
je 0x18004aad6
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004a970
mov r8, qword [r8 + 0x280]
test r8, r8
jne 0x18004a960
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004a9f7
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004aaf6
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004a9d0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004a9c0
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004aa6c
lea rax, [rbp + 0x2e0]
mov r8, r9
lea rcx, [rbp + 0x2e0]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004aa6c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004aa50
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004aaaa
lea rdx, [rbp + 0xce0]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004aa8e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004aaaa
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004aa80
lea rcx, [rbp + 0xce0]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004ab0d
cmp rbx, rdi
je 0x18004ac80
mov rbx, qword [rbx]
jmp 0x18004aa20
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r8 + rcx*8 + 0x20]
test rax, rax
je 0x18004a997
mov r15d, 0xf
jmp 0x18004af7a
movsxd rax, edx
mov r15d, 0xf
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004ac90
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004ac80
cmp byte [0x1800970f1], r13b
jne 0x18004ac80
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004abb3
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov r15d, 0xf
mov rdi, rax
test rax, rax
je 0x18004ab8a
mov esi, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004ab60
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004ab94
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004abd5
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004abcf
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004abc0
mov r15d, 0xf
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop
cmp dword [rax], r13d
je 0x18004ac5a
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004abe0
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004ac34
mov r12d, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004ac10
mov qword [rsi + 0x200], r13
jmp 0x18004ac37
mov rsi, r13
lea rdx, [rbp + 0x2e0]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004ac86
movsxd rbx, edx
lea rdx, [rbp + 0x2e0]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
jmp 0x18004ac86
mov r15d, 0xf
movabs rsi, 0xd79a16697bb981ec
test r14, r14
jne 0x18004af6d
mov ecx, 0xc41671d
call fcn.1800497d0
test al, al
je 0x18004af9c
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004ad07
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004ade6
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004ace0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004acd0
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004ad7c
lea rax, [rbp + 0x460]
mov r8, r9
lea rcx, [rbp + 0x460]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004ad7c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004ad60
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004adba
lea rdx, [rbp + 0x260]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004ad9e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004adba
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004ad90
lea rcx, [rbp + 0x260]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004adf7
cmp rbx, rdi
je 0x18004af5e
mov rbx, qword [rbx]
jmp 0x18004ad30
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004af68
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004af5e
cmp byte [0x1800970f1], r13b
jne 0x18004af5e
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004ae93
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004ae6a
mov esi, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004ae40
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004ae74
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004aeaf
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004aeaf
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004aea0
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004af3a
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004aec0
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004af14
mov r12d, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004aef0
mov qword [rsi + 0x200], r13
jmp 0x18004af17
mov rsi, r13
lea rdx, [rbp + 0x460]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004af5e
movsxd rbx, edx
lea rdx, [rbp + 0x460]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
je 0x18004af9c
mov edx, 0x1817d45c
mov rcx, r14
call fcn.180048a60
test rax, rax
je 0x18004af9c
lea rcx, [rbp + 0xea8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x30]
lea edx, [r9 + 0x19]
call rax
cmp dword [rbp + 0xea8], r13d
je 0x18004c330
mov edx, dword [rbp + 0xea8]
lea rcx, [rsp + 0x48]
call fcn.180040150
lea rcx, [rsp + 0x48]
xor edx, edx
call fcn.18003fcb0
mov r8, qword [0x180096dc0]
movabs rdi, 0xdbf06daf303fac65
cmp r8, rdi
mov rbx, rax
mov qword [rbp + 0xeb0], rax
cmove r8, r13
mov qword [0x180096dc0], r8
test r8, r8
je 0x18004b04a
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x1817d45c
je 0x18004b035
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004b010
mov r8, qword [r8 + 0x280]
test r8, r8
jne 0x18004b000
jmp 0x18004b04a
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r8 + rcx*8 + 0x20]
test rax, rax
jne 0x18004b608
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004b0a7
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004b186
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b080
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004b070
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004b11c
lea rax, [rbp + 0x5e0]
mov r8, r9
lea rcx, [rbp + 0x5e0]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004b11c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004b100
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004b15a
lea rdx, [rbp + 0x860]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004b13e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004b15a
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004b130
lea rcx, [rbp + 0x860]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004b197
cmp rbx, rdi
je 0x18004b2fe
mov rbx, qword [rbx]
jmp 0x18004b0d0
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004b308
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004b2fe
cmp byte [0x1800970f1], r13b
jne 0x18004b2fe
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004b233
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004b20a
mov esi, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004b1e0
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004b214
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004b24f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004b24f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004b240
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004b2da
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b260
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004b2b4
mov r12d, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004b290
mov qword [rsi + 0x200], r13
jmp 0x18004b2b7
mov rsi, r13
lea rdx, [rbp + 0x5e0]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004b2fe
movsxd rbx, edx
lea rdx, [rbp + 0x5e0]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
jne 0x18004b5e1
mov ecx, 0xc41671d
call fcn.1800497d0
test al, al
je 0x18004c326
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004b377
nop dword [rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004b456
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b350
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004b340
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004b3ec
lea rax, [rbp + 0x760]
mov r8, r9
lea rcx, [rbp + 0x760]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004b3ec
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004b3d0
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004b42a
lea rdx, [rbp + 0x3e0]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004b40e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004b42a
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004b400
lea rcx, [rbp + 0x3e0]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004b467
cmp rbx, rdi
je 0x18004b5ce
mov rbx, qword [rbx]
jmp 0x18004b3a0
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004b5d8
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004b5ce
cmp byte [0x1800970f1], r13b
jne 0x18004b5ce
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004b503
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004b4da
mov esi, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004b4b0
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004b4e4
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004b51f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004b51f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004b510
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004b5aa
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b530
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004b584
mov r12d, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004b560
mov qword [rsi + 0x200], r13
jmp 0x18004b587
mov rsi, r13
lea rdx, [rbp + 0x760]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004b5ce
movsxd rbx, edx
lea rdx, [rbp + 0x760]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
je 0x18004c326
mov edx, 0x1817d45c
mov rcx, r14
call fcn.180048a60
mov rbx, qword [rbp + 0xeb0]
movabs rdi, 0xdbf06daf303fac65
test rax, rax
je 0x18004c326
mov r9d, dword [rbp + 0xea8]
lea rcx, [rbp + 0xea8]
mov r8, rbx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x30]
mov edx, 0x19
call rax
test eax, eax
je 0x18004c326
mov r8, qword [0x180096dc0]
cmp r8, rdi
cmove r8, r13
mov qword [0x180096dc0], r8
test r8, r8
je 0x18004b69a
nop dword [rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x78d7ad2d
je 0x18004b685
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004b660
mov r8, qword [r8 + 0x280]
test r8, r8
jne 0x18004b650
jmp 0x18004b69a
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r8 + rcx*8 + 0x20]
test rax, rax
jne 0x18004bc58
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004b6f7
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004b7d6
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b6d0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004b6c0
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004b76c
lea rax, [rbp + 0x8e0]
mov r8, r9
lea rcx, [rbp + 0x8e0]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004b76c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004b750
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004b7aa
lea rdx, [rbp + 0xb60]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004b78e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004b7aa
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004b780
lea rcx, [rbp + 0xb60]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004b7e7
cmp rbx, rdi
je 0x18004b94e
mov rbx, qword [rbx]
jmp 0x18004b720
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004b958
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004b94e
cmp byte [0x1800970f1], r13b
jne 0x18004b94e
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004b883
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004b85a
mov esi, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004b830
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004b864
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004b89f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004b89f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004b890
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004b92a
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b8b0
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004b904
mov r12d, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004b8e0
mov qword [rsi + 0x200], r13
jmp 0x18004b907
mov rsi, r13
lea rdx, [rbp + 0x8e0]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004b94e
movsxd rbx, edx
lea rdx, [rbp + 0x8e0]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
jne 0x18004bc31
mov ecx, 0xc41671d
call fcn.1800497d0
test al, al
je 0x18004c326
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004b9c7
nop dword [rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004baa6
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004b9a0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004b990
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004ba3c
lea rax, [rbp + 0xa60]
mov r8, r9
lea rcx, [rbp + 0xa60]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004ba3c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004ba20
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004ba7a
lea rdx, [rbp + 0x560]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004ba5e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004ba7a
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004ba50
lea rcx, [rbp + 0x560]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004bab7
cmp rbx, rdi
je 0x18004bc1e
mov rbx, qword [rbx]
jmp 0x18004b9f0
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004bc28
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004bc1e
cmp byte [0x1800970f1], r13b
jne 0x18004bc1e
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004bb53
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004bb2a
mov esi, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004bb00
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004bb34
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004bb6f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004bb6f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004bb60
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004bbfa
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004bb80
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004bbd4
mov r12d, r15d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004bbb0
mov qword [rsi + 0x200], r13
jmp 0x18004bbd7
mov rsi, r13
lea rdx, [rbp + 0xa60]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004bc1e
movsxd rbx, edx
lea rdx, [rbp + 0xa60]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
je 0x18004c326
mov edx, 0x78d7ad2d
mov rcx, r14
call fcn.180048a60
mov rbx, qword [rbp + 0xeb0]
movabs rdi, 0xdbf06daf303fac65
test rax, rax
je 0x18004c326
mov rcx, qword [rbx]
call rax
mov r15, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x18004c326
mov r8, qword [0x180096dc0]
cmp r8, rdi
cmove r8, r13
mov qword [0x180096dc0], r8
test r8, r8
je 0x18004bcda
nop dword [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xf2409daf
je 0x18004bcc5
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004bca0
mov r8, qword [r8 + 0x280]
test r8, r8
jne 0x18004bc90
jmp 0x18004bcda
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r8 + rcx*8 + 0x20]
test rax, rax
jne 0x18004c28a
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004bd37
nop word [rax + rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004be14
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004bd10
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004bd00
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004bdac
lea rax, [rbp + 0xbe0]
mov r8, r9
lea rcx, [rbp + 0xbe0]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004bdac
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004bd90
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004bdea
lea rdx, [rsp + 0x60]
nop dword [rax + rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004bdce
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004bdea
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004bdc0
lea rcx, [rsp + 0x60]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004be25
cmp rbx, rdi
je 0x18004bf8e
mov rbx, qword [rbx]
jmp 0x18004bd60
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004bf98
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004bf8e
cmp byte [0x1800970f1], r13b
jne 0x18004bf8e
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004bec3
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004be9a
mov esi, 0xf
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004be70
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004bea4
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004bedf
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004bedf
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004bed0
mov edx, r13d
mov rcx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004bf6a
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004bef0
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004bf44
mov r12d, 0xf
lea rbx, [rax + 0x18]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r12d
jns 0x18004bf20
mov qword [rsi + 0x200], r13
jmp 0x18004bf47
mov rsi, r13
lea rdx, [rbp + 0xbe0]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004bf8e
movsxd rbx, edx
lea rdx, [rbp + 0xbe0]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
movabs rsi, 0xd79a16697bb981ec
test r14, r14
jne 0x18004c26d
mov ecx, 0xc41671d
call fcn.1800497d0
test al, al
je 0x18004c326
mov r8, qword [0x180096db8]
cmp r8, rsi
cmove r8, r13
mov qword [0x180096db8], r8
test r8, r8
je 0x18004c007
nop dword [rax]
mov edx, r13d
mov rcx, r13
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xc41671d
je 0x18004c0e6
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004bfe0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004bfd0
mov rax, qword gs:[0x30]
mov r14, r13
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r9, qword [rbx + 0x60]
mov r10d, r13d
mov edx, r13d
cmp r13w, word [rbx + 0x58]
ja 0x18004c07c
lea rax, [rbp + 0xd60]
mov r8, r9
lea rcx, [rbp + 0xd60]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r13w, ax
je 0x18004c07c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004c060
mov r8d, r13d
cmp r13w, word [rbx + 0x58]
jae 0x18004c0ba
lea rdx, [rbp + 0x6e0]
nop dword [rax]
movzx ecx, byte [r9]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004c09e
add cl, 0xe0
mov byte [rdx], cl
test cl, cl
je 0x18004c0ba
movzx eax, word [rbx + 0x58]
inc r8d
inc r10d
add r9, 2
inc rdx
cmp r8d, eax
jl 0x18004c090
lea rcx, [rbp + 0x6e0]
mov edx, r10d
call fcn.180065760
xor eax, 0xe427ce1
cmp eax, 0xc41671d
je 0x18004c0f7
cmp rbx, rdi
je 0x18004c264
mov rbx, qword [rbx]
jmp 0x18004c030
movsxd rax, edx
shl rax, 5
mov r14, qword [rax + r8 + 0x18]
jmp 0x18004c264
mov r14, qword [rbx + 0x30]
test r14, r14
je 0x18004c326
cmp byte [0x1800970f1], r13b
jne 0x18004c264
mov rdi, qword [0x180096db8]
test rdi, rdi
jne 0x18004c193
mov ecx, 0x208
mov byte [0x1800970f1], 1
call fcn.1800472c0
mov rdi, rax
test rax, rax
je 0x18004c16a
mov esi, 0xf
lea rbx, [rax + 0x18]
nop
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec esi
jns 0x18004c140
mov qword [rdi + 0x200], r13
mov qword [0x180096db8], rdi
jmp 0x18004c174
mov rdi, r13
mov qword [0x180096db8], r13
mov edx, 0xc489c0d7
mov ecx, 0x6e729370
call fcn.180049ad0
mov byte [0x1800970f1], r13b
mov qword [0x180096db0], rax
jmp 0x18004c1af
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004c1af
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004c1a0
mov r8d, r13d
mov rdx, r13
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r13d
je 0x18004c240
inc rdx
inc r8d
add rax, 0x20
cmp rdx, 0x10
jl 0x18004c1c0
mov ecx, 0x208
call fcn.1800472c0
mov rsi, rax
test rax, rax
je 0x18004c21a
lea rbx, [rax + 0x18]
mov r15d, 0xf
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041a90
mov dword [rbx - 8], r13d
mov qword [rbx], r13
add rbx, 0x20
dec r15d
jns 0x18004c1f1
mov r15, qword [rsp + 0x40]
mov qword [rsi + 0x200], r13
jmp 0x18004c21d
mov rsi, r13
lea rdx, [rbp + 0xd60]
mov rcx, rsi
mov qword [rsi + 0x18], r14
call fcn.180042fa0
mov dword [rsi + 0x10], 0xc41671d
mov qword [rdi + 0x200], rsi
jmp 0x18004c264
movsxd rbx, r8d
lea rdx, [rbp + 0xd60]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r14
call fcn.180042fa0
mov dword [rbx + 0x10], 0xc41671d
test r14, r14
je 0x18004c326
mov edx, 0xf2409daf
mov rcx, r14
call fcn.180048a60
mov rbx, qword [rbp + 0xeb0]
test rax, rax
je 0x18004c326
movzx edx, byte [r15]
mov rcx, qword [rbx]
dec edx
call rax
test rax, rax
je 0x18004c326
mov eax, dword [rax]
cmp eax, 0x2100
ja 0x18004c2db
je 0x18004c2d3
test eax, eax
je 0x18004c2cb
cmp eax, 0x1000
je 0x18004c2c3
cmp eax, 0x2000
jne 0x18004c306
mov r13d, 3
jmp 0x18004c306
mov r13d, 2
jmp 0x18004c306
mov r13d, 1
jmp 0x18004c306
mov r13d, 4
jmp 0x18004c306
cmp eax, 0x3000
je 0x18004c300
cmp eax, 0x4000
je 0x18004c2f8
cmp eax, 0x5000
jne 0x18004c306
mov r13d, 7
jmp 0x18004c306
mov r13d, 6
jmp 0x18004c306
mov r13d, 5
lea rcx, [rsp + 0x48]
call fcn.18003fca0
cmp byte [rsp + 0x38], 0
je 0x18004c321
lea rcx, [rsp + 0x30]
call fcn.180047770
mov eax, r13d
jmp 0x18004c343
lea rcx, [rsp + 0x48]
call fcn.18003fca0
cmp byte [rsp + 0x38], r13b
je 0x18004c341
lea rcx, [rsp + 0x30]
call fcn.180047770
xor eax, eax
mov rbx, qword [rsp + 0xfa0]
add rsp, 0xf60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret