Function at 0x180043dd0
Capabilities:
Encrypt data using speck

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d8
movdqa xmmword [rsp + 0x2c0], xmm15
movdqa xmmword [rsp + 0x2b0], xmm14
movdqa xmmword [rsp + 0x2a0], xmm13
movdqa xmmword [rsp + 0x290], xmm12
movdqa xmmword [rsp + 0x280], xmm11
movdqa xmmword [rsp + 0x270], xmm10
movdqa xmmword [rsp + 0x260], xmm9
movdqa xmmword [rsp + 0x250], xmm8
movdqa xmmword [rsp + 0x240], xmm7
movaps xmmword [rsp + 0x230], xmm6
mov r14, r9
mov r15, r8
mov qword [rsp + 0x158], rdx
mov r13, rcx
mov rbp, qword [rsp + 0x340]
test r9, r9
je 0x180043f95
lea rax, [r15 + r14]
xor edx, edx
movdqa xmm0, xmmword [str.xn__]
mov rcx, r15
jmp 0x180043e8f
xor r9d, r9d
mov rdx, r9
cmp rcx, rax
je 0x180044cff
movzx r10d, byte [rcx]
test r10b, r10b
js 0x180043eb0
inc rcx
mov r8d, r10d
cmp r8d, 0x2e
je 0x180043e80
jmp 0x180043f40
mov r8d, r10d
and r8d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp r10b, 0xdf
jbe 0x180043f0a
movzx r9d, byte [rcx + 2]
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
cmp r10b, 0xf0
jb 0x180043f20
movzx r10d, byte [rcx + 3]
add rcx, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and r10d, 0x3f
or r10d, r9d
or r10d, r8d
mov r8d, r10d
cmp r8d, 0x2e
je 0x180043e80
jmp 0x180043f40
add rcx, 2
shl r8d, 6
or r8d, r11d
cmp r8d, 0x2e
jne 0x180043f40
jmp 0x180043e80
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov r8d, r9d
cmp r8d, 0x2e
je 0x180043e80
nop dword [rax + rax]
test rdx, rdx
jne 0x180043f4b
cmp r8d, 0x2d
je 0x180043f95
mov r9d, 5
cmp rdx, 5
jae 0x180043f7a
movdqa xmmword [rsp + 0x60], xmm0
cmp rdx, 4
je 0x1800481ae
cmp r8d, dword [rsp + rdx*4 + 0x60]
jne 0x180043f7a
inc rdx
mov r9, rdx
cmp rdx, 4
je 0x180043f95
lea edx, [r8 - 0x7b]
cmp edx, 0xffffffe5
ja 0x180043e83
add r8d, 0xffffffc6
cmp r8d, 0xfffffff6
jae 0x180043e83
mov qword [rsp + 0x210], r13
mov r8, qword [rsp + 0x158]
mov eax, dword [r8 + 0x30]
movzx ecx, byte [r8 + 0x34]
add r14, r15
xorps xmm6, xmm6
movups xmmword [rsp + 0xc8], xmm6
mov byte [rsp + 0xd8], 0
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x70], 0
mov word [rsp + 0x74], 0
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x7c], 0
mov byte [rsp + 0x80], 0
mov dword [rsp + 0x84], 0
mov byte [rsp + 0x88], 0
mov dword [rsp + 0x8c], 0
mov byte [rsp + 0x90], 0
mov dword [rsp + 0x94], 0
mov qword [rsp + 0x98], r15
mov qword [rsp + 0xa0], r14
lea rdx, [rsp + 0x48]
mov qword [rsp + 0xa8], rdx
mov qword [rsp + 0xb0], 0
mov byte [rsp + 0xc4], cl
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x30], rcx
mov qword [r8 + 0x10], 0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov rcx, qword [rbp + 0x10]
mov qword [rsp + 0x140], rcx
movups xmmword [rsp + 0x19a], xmm6
lea r12, [rsp + 0x70]
mov dword [rsp + 0xc0], eax
mov dword [rsp + 0xe0], 0
mov word [rsp + 0xe4], 0
movzx eax, word [rsp + 0x1a8]
mov word [rsp + 0xf6], ax
movdqu xmm0, xmmword [rsp + 0x198]
movdqu xmmword [rsp + 0xe6], xmm0
mov dword [rsp + 0x100], 0x110000
mov byte [rsp + 0x104], 0
lea rsi, [0x180127624]
mov edi, 0xff
lea rbx, [0x18012b0f4]
xor ecx, ecx
mov ebp, dword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
test ebp, ebp
je 0x180044140
test rcx, rcx
je 0x1800441f7
mov rdx, qword [rsp + 0xf8]
cmp rcx, 1
jne 0x180044c45
cmp rax, rdx
jb 0x180044c85
mov qword [rsp + 0xf8], 0
jmp 0x18004417d
test rcx, rcx
je 0x1800441f7
movzx edx, word [rsp + 0xe4]
cmp rcx, 1
jne 0x180044c4f
cmp dx, 4
ja 0x1800481ae
cmp rax, rdx
jb 0x180044c7d
test rdx, rdx
je 0x18004417d
mov word [rsp + 0xe4], 0
mov qword [rsp + 0x60], 0
jmp 0x1800441f7
mov r14d, ebp
mov eax, 0xdee95c4d
imul r14, rax
shr r14, 0x29
lea edx, [r14 + 0x1100]
mov rcx, r12
call fcn.1800425a0
imul eax, r14d, 0x24c
mov ecx, ebp
sub ecx, eax
imul eax, ecx, 0x925
shr eax, 0x10
add eax, 0x1161
movzx edx, ax
mov rcx, r12
call fcn.1800425a0
mov eax, ebp
shr eax, 2
imul rax, rax, 0x24924925
shr rax, 0x20
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
add ecx, eax
sub ebp, ecx
je 0x1800441f7
add ebp, 0x11a7
mov edx, ebp
mov rcx, r12
call fcn.1800425a0
mov rdx, qword [rsp + 0xd0]
test rdx, rdx
jne 0x1800444f0
movzx ecx, byte [rsp + 0xc0]
cmp cl, 2
je 0x1800446f3
mov r8, qword [rsp + 0xb0]
mov r14, qword [rsp + 0x98]
mov r10, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
movzx r11d, byte [rsp + 0xc1]
mov r13, qword [rsp + 0xb8]
test r8, r8
je 0x180044264
cmp r8, r13
jne 0x1800449ee
mov qword [rsp + 0xb0], 0
cmp r14, r10
je 0x1800446eb
lea rdx, [r14 + 1]
mov qword [rsp + 0x98], rdx
movzx r8d, byte [r14]
test r8b, r8b
js 0x1800442a0
mov r14, rdx
mov edx, r8d
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jae 0x180044350
jmp 0x180044543
mov edx, r8d
and edx, 0x1f
lea r9, [r14 + 2]
mov qword [rsp + 0x98], r9
movzx ebp, byte [r14 + 1]
and ebp, 0x3f
cmp r8b, 0xdf
jbe 0x180044318
lea r15, [r14 + 3]
mov qword [rsp + 0x98], r15
movzx r9d, byte [r14 + 2]
shl ebp, 6
and r9d, 0x3f
or r9d, ebp
cmp r8b, 0xf0
jb 0x18004432f
lea r8, [r14 + 4]
mov qword [rsp + 0x98], r8
movzx ebp, byte [r14 + 3]
and edx, 7
shl edx, 0x12
shl r9d, 6
and ebp, 0x3f
or ebp, r9d
or ebp, edx
mov r14, r8
mov edx, ebp
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jae 0x180044350
jmp 0x180044543
shl edx, 6
or edx, ebp
mov r14, r9
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jae 0x180044350
jmp 0x180044543
shl edx, 0xc
or r9d, edx
mov r14, r15
mov edx, r9d
lea r8d, [rdx - 0x2d]
cmp r8d, 2
jb 0x180044543
nop dword [rax]
cmp edx, 0x110000
je 0x1800446eb
lea r8d, [rdx - 0x61]
cmp r8d, 0x1a
jb 0x180044543
lea r8d, [rdx - 0x30]
cmp r8d, 0xa
jb 0x180044543
mov r8d, 0x75a
xor ebp, ebp
mov r9d, 0x75a
jmp 0x180044398
mov r9, r8
sub r8, rbp
jbe 0x1800443cd
shr r8, 1
add r8, rbp
xor r15d, r15d
cmp dword [rsi + r8*8], edx
setne r15b
cmovb r15d, edi
cmp r15b, 1
je 0x180044390
movzx ebp, r15b
cmp ebp, 0xff
jne 0x1800443e0
inc r8
mov rbp, r8
mov r8, r9
sub r8, rbp
ja 0x180044398
dec rbp
mov r8, rbp
cmp rbp, 0x759
ja 0x1800481ae
movzx ebp, word [rsi + r8*8 + 4]
mov r9d, ebp
and r9d, 0x7fff
test bp, bp
js 0x180044407
movzx r8d, word [rsi + r8*8]
mov ebp, edx
sub bp, r8w
movzx r9d, r9w
add r9d, ebp
movzx r8d, r9w
cmp r8d, 0x1f73
jae 0x1800481ae
movzx r9d, r9w
movzx ebp, byte [rbx + r9*4]
mov r8d, 0
cmp ebp, 1
je case.default.0x180044441
mov r8d, ebp
lea r15, [0x180048658]
movsxd r8, dword [r15 + r8*4]
add r8, r15
jmp r8
mov ecx, dword [rsp + 0x70]
mov rax, qword [rsp + 0xc8]
test ecx, ecx
je 0x180044769
mov r8, qword [rsp + 0x78]
mov r9, qword [rsp + 0x88]
jmp 0x18004477e
cmp edx, 0x110000
je 0x1800446eb
cmp byte [rsp + 0xd8], 0
je 0x18004460f
cmp edx, 0x80
jb 0x1800441ef
lea ebp, [rdx - 0xac00]
cmp ebp, 0x2ba4
jb 0x180044188
imul ecx, edx, 0x9e3779b9
imul eax, edx, 0x31415926
xor ecx, eax
imul r8, rcx, 0xee4
shr r8, 0x1f
and r8d, 0xfffffffe
lea r9, [0x18014b064]
movzx r8d, word [r8 + r9]
add r8d, edx
imul r8d, r8d, 0x9e3779b9
xor r8d, eax
imul r8, r8, 0xee4
shr r8, 0x1d
and r8d, 0xfffffff8
lea r9, [0x18014ce2c]
mov r14, qword [r8 + r9]
cmp edx, r14d
jne 0x180044a19
mov rax, r14
shr rax, 0x20
movzx ecx, ax
cmp ecx, 0x1668
jae 0x1800481ae
shr r14, 0x30
movzx eax, ax
mov ecx, 0x1667
sub rcx, rax
cmp rcx, r14
jb 0x1800481ae
lea rcx, [0x18015454c]
lea r13, [rcx + rax*4]
test r14, r14
jne 0x180044a9b
jmp 0x1800441f7
cmp edx, 0x80
jb 0x1800441ef
lea ebp, [rdx - 0xac00]
cmp ebp, 0x2ba4
jb 0x180044188
imul eax, edx, 0x9e3779b9
imul ecx, edx, 0x31415926
xor eax, ecx
imul rax, rax, 0x80d
shr rax, 0x20
lea r8, [0x180142aa8]
movzx eax, word [r8 + rax*2]
add eax, edx
imul eax, eax, 0x9e3779b9
xor eax, ecx
imul rax, rax, 0x80d
shr rax, 0x20
lea rcx, [0x180143ac4]
mov r14, qword [rcx + rax*8]
cmp edx, r14d
jne 0x1800441ef
mov rax, r14
shr rax, 0x20
movzx ecx, ax
cmp ecx, 0xd4f
jae 0x1800481ae
shr r14, 0x30
movzx eax, ax
mov ecx, 0xd4e
sub rcx, rax
cmp rcx, r14
jb 0x1800481ae
test r14, r14
je 0x1800441f7
lea rcx, [0x180147b2c]
lea r13, [rcx + rax*4]
shl r14, 2
xor r15d, r15d
nop word cs:[rax + rax]
mov edx, dword [r13 + r15]
mov rcx, r12
call fcn.1800425a0
add r15, 4
cmp r14, r15
jne 0x1800446d0
jmp 0x1800441f7
mov byte [rsp + 0xc0], 2
cmp dword [rsp + 0x70], 0
je 0x18004470c
mov rax, qword [rsp + 0x88]
test rax, rax
jne 0x18004471a
jmp 0x180044bd0
movzx eax, word [rsp + 0x74]
test rax, rax
je 0x180044bd0
mov rcx, r12
call fcn.180041e50
mov ecx, dword [rsp + 0x70]
test ecx, ecx
je 0x18004474c
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0xd0], rdx
mov rax, qword [rsp + 0xc8]
test ecx, ecx
jne 0x180044504
jmp 0x180044769
movzx edx, word [rsp + 0x74]
mov qword [rsp + 0xd0], rdx
mov rax, qword [rsp + 0xc8]
test ecx, ecx
jne 0x180044504
movzx r9d, word [rsp + 0x74]
lea r8, [rsp + 0x78]
cmp r9, 5
jae 0x1800481ae
cmp rax, r9
jae 0x1800481ae
mov r14d, dword [r8 + rax*8 + 4]
inc rax
cmp rax, rdx
jne 0x180044850
test ecx, ecx
je 0x18004485a
mov rax, qword [rsp + 0x88]
sub rax, rdx
je 0x180044868
xor ecx, ecx
nop word cs:[rax + rax]
mov rdx, qword [rsp + 0xd0]
add rdx, rcx
cmp dword [rsp + 0x70], 0
je 0x1800447f0
mov r8, qword [rsp + 0x88]
cmp rdx, r8
jae 0x1800481ae
mov r9, qword [rsp + 0x78]
jmp 0x18004480e
movzx r8d, word [rsp + 0x74]
cmp r8, 5
jae 0x1800481ae
lea r9, [rsp + 0x78]
cmp rdx, r8
jae 0x1800481ae
cmp rcx, r8
jae 0x1800481ae
movzx r8d, byte [r9 + rdx*8]
mov edx, dword [r9 + rdx*8 + 4]
mov byte [r9 + rcx*8], r8b
mov dword [r9 + rcx*8 + 4], edx
lea rdx, [rcx + 1]
mov rcx, rdx
cmp rax, rdx
jne 0x1800447c0
mov ecx, dword [rsp + 0x70]
test ecx, ecx
jne 0x18004486c
movzx ecx, word [rsp + 0x74]
cmp rax, rcx
jae 0x18004487e
mov word [rsp + 0x74], ax
jmp 0x18004487e
mov qword [rsp + 0xc8], rax
jmp 0x180044889
movzx eax, word [rsp + 0x74]
sub rax, rdx
jne 0x1800447b1
test ecx, ecx
je 0x18004483e
cmp qword [rsp + 0x88], rax
jb 0x18004487e
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0xc8]
movups xmmword [rax], xmm6
imul eax, r14d, 0x9e3779b9
imul ecx, r14d, 0x31415926
xor eax, ecx
imul rax, rax, 0x39a
shr rax, 0x1f
and eax, 0xfffffffe
lea rdx, [0x18013f0cc]
movzx eax, word [rax + rdx]
add eax, r14d
imul eax, eax, 0x9e3779b9
xor eax, ecx
imul rax, rax, 0x39a
shr rax, 0x1e
and eax, 0xfffffffc
lea rcx, [0x18013f800]
mov ebp, dword [rax + rcx]
mov eax, ebp
shr eax, 8
cmp eax, r14d
mov eax, 0
cmovne ebp, eax
mov r13d, dword [rsp + 0x100]
cmp r13d, 0x110000
jne 0x180044910
test bpl, bpl
jne 0x180044bc0
mov dword [rsp + 0x100], r14d
jmp 0x1800441f7
cmp byte [rsp + 0x104], 0
je 0x180044942
cmp byte [rsp + 0x105], bpl
jae 0x180044962
mov ecx, r13d
mov edx, r14d
call fcn.1800ec880
cmp eax, 0x110000
je 0x18004496b
mov dword [rsp + 0x100], eax
jmp 0x1800441f7
mov ecx, r13d
mov edx, r14d
call fcn.1800ec880
cmp eax, 0x110000
jne 0x180044a0d
test bpl, bpl
jne 0x18004496b
jmp 0x180044c38
test bpl, bpl
je 0x180044c11
cmp dword [rsp + 0xe0], 0
je 0x1800449b5
mov rdx, qword [rsp + 0xf8]
cmp rdx, qword [rsp + 0xf0]
jne 0x18004499c
lea rcx, [rsp + 0xe8]
call fcn.180042780
mov rdx, qword [rsp + 0xf8]
mov rax, qword [rsp + 0xe8]
mov dword [rax + rdx*4], r14d
inc rdx
mov qword [rsp + 0xf8], rdx
jmp 0x1800449d9
movzx eax, word [rsp + 0xe4]
cmp rax, 3
ja 0x180044b45
mov dword [rsp + rax*4 + 0xe8], r14d
inc eax
mov word [rsp + 0xe4], ax
mov byte [rsp + 0x104], 1
mov byte [rsp + 0x105], bpl
jmp 0x1800441f7
lea rax, [r8 + 1]
mov qword [rsp + 0xb0], rax
movzx eax, byte [r8]
test al, al
js 0x180044acb
mov edx, eax
jmp 0x180044543
mov dword [rsp + 0x100], eax
jmp 0x1800441f7
imul rcx, rcx, 0x80d
shr rcx, 0x20
lea r8, [0x180142aa8]
movzx ecx, word [r8 + rcx*2]
add ecx, edx
imul ecx, ecx, 0x9e3779b9
xor ecx, eax
imul rax, rcx, 0x80d
shr rax, 0x20
lea rcx, [0x180143ac4]
mov r14, qword [rcx + rax*8]
cmp edx, r14d
jne 0x1800441ef
mov rax, r14
shr rax, 0x20
movzx ecx, ax
cmp ecx, 0xd4f
jae 0x1800481ae
shr r14, 0x30
movzx eax, ax
mov ecx, 0xd4e
sub rcx, rax
cmp rcx, r14
jb 0x1800481ae
lea rcx, [0x180147b2c]
lea r13, [rcx + rax*4]
test r14, r14
je 0x1800441f7
shl r14, 2
xor r15d, r15d
nop word cs:[rax + rax]
mov edx, dword [r13 + r15]
mov rcx, r12
call fcn.1800425a0
add r15, 4
cmp r14, r15
jne 0x180044ab0
jmp 0x1800441f7
mov edx, eax
and edx, 0x1f
lea rcx, [r8 + 2]
mov qword [rsp + 0xb0], rcx
movzx r9d, byte [r8 + 1]
and r9d, 0x3f
cmp al, 0xdf
jbe 0x180044b2e
lea rcx, [r8 + 3]
mov qword [rsp + 0xb0], rcx
movzx ecx, byte [r8 + 2]
shl r9d, 6
and ecx, 0x3f
or ecx, r9d
cmp al, 0xf0
jb 0x180044b39
lea rax, [r8 + 4]
mov qword [rsp + 0xb0], rax
movzx eax, byte [r8 + 3]
and edx, 7
shl edx, 0x12
shl ecx, 6
and eax, 0x3f
or eax, ecx
or eax, edx
jmp 0x180044a06
shl edx, 6
or edx, r9d
jmp 0x180044543
shl edx, 0xc
or ecx, edx
mov edx, ecx
jmp 0x180044543
lea rcx, [rsp + 0x1b8]
lea rdx, [rsp + 0xe4]
mov r8d, r14d
call fcn.180108650
cmp dword [rsp + 0xe0], 0
je 0x180044b89
cmp qword [rsp + 0xf0], 0
je 0x180044b89
mov r8, qword [rsp + 0xe8]
mov rcx, qword [0x18016cb80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
movdqu xmm0, xmmword [rsp + 0x1b8]
movdqu xmm1, xmmword [rsp + 0x1c8]
lea rax, [rsp + 0xc8]
movdqu xmmword [rax + 0x28], xmm1
movdqu xmmword [rax + 0x18], xmm0
jmp 0x1800449d9
mov r13d, r14d
jmp 0x180044ce0
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x68], 0
mov r13d, dword [rsp + 0x100]
mov ecx, 2
mov eax, 0
cmp r13d, 0x110000
je 0x1800440f6
mov dword [rsp + 0x100], 0x110000
jmp 0x180044ce0
mov dword [rsp + 0x100], r14d
mov byte [rsp + 0x104], 0
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x68], 0
jmp 0x180044ce0
mov dword [rsp + 0x100], r14d
jmp 0x180044ce0
cmp rax, rdx
jae 0x180044c9c
mov rcx, r14
jmp 0x180044c66
cmp dx, 5
jae 0x1800481ae
lea rcx, [rsp + 0xe8]
cmp rax, rdx
jae 0x180044caa
mov r13d, dword [rcx + rax*4]
inc rax
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x68], rax
jmp 0x180044ce0
lea r14, [rsp + 0xe8]
mov r13d, dword [r14 + rax*4]
inc rax
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x68], rax
jmp 0x180044ce0
mov qword [rsp + 0xf8], 0
jmp 0x180044cb9
test rdx, rdx
je 0x180044cb9
mov word [rsp + 0xe4], 0
mov r13d, dword [rsp + 0x100]
mov dword [rsp + 0x100], 0x110000
cmp r13d, 0x110000
je 0x18004503d
nop dword [rax]
mov rcx, qword [rsp + 0x158]
mov edx, r13d
call fcn.180006080
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
jmp 0x1800440f6
mov rax, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
sub rax, r12
cmp rax, r14
jb 0x180045026
mov rcx, qword [rbp]
add rcx, r12
mov rdx, r15
mov r8, r14
call fcn.1800f8be0
add r12, r14
mov qword [rbp + 0x10], r12
xor r12d, r12d
xor edx, edx
xor r8d, r8d
xor r9d, r9d
xor r10d, r10d
xor r11d, r11d
xor esi, esi
xor edi, edi
xor ebx, ebx
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x30], 0
xor r15d, r15d
mov rax, qword [rsp + 0x158]
cmp byte [rax + 0x32], 0
je 0x180044f53
mov dword [rsp + 0x140], ebx
mov rbx, qword [rbp]
mov r14, qword [rbp + 0x10]
movabs rcx, 0x2e0000002e
test r14, r14
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x130], esi
mov dword [rsp + 0x150], edi
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x2c], r12d
je 0x180044e8c
cmp byte [rbx + r14 - 1], 0x2e
jne 0x180044db8
dec r14
je 0x180044e8c
mov esi, r10d
mov r15d, r9d
mov r12d, r8d
mov ebp, edx
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], 1
mov qword [rsp + 0x98], rcx
mov word [rsp + 0xa0], 1
lea rdi, [rsp + 0x60]
nop word cs:[rax + rax]
mov rcx, rdi
call fcn.180041af0
test rax, rax
je 0x180044e32
test rdx, rdx
jne 0x180044e20
test rax, rax
mov edx, ebp
mov r8d, r12d
mov r9d, r15d
mov r10d, esi
mov r11d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x130]
mov edi, dword [rsp + 0x150]
mov r15d, dword [rsp + 0x40]
mov r12d, dword [rsp + 0x2c]
movabs rcx, 0x2e0000002e
je 0x180044e7e
mov al, 1
mov dword [rsp + 0x30], eax
cmp r14, 0xfd
ja 0x180044f40
jmp 0x180044ea2
cmp r14, 0xfd
jbe 0x180044ea2
jmp 0x180044f40
xor r14d, r14d
mov al, 1
mov dword [rsp + 0x30], eax
cmp r14, 0xfd
ja 0x180044f40
mov esi, r10d
mov r15d, r9d
mov r12d, r8d
mov ebp, edx
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], 1
mov qword [rsp + 0x98], rcx
mov word [rsp + 0xa0], 1
lea rdi, [rsp + 0x60]
nop dword [rax]
mov rcx, rdi
call fcn.180041af0
test rax, rax
je 0x180044f13
cmp rdx, 0x40
jb 0x180044f00
test rax, rax
mov edx, ebp
mov r8d, r12d
mov r9d, r15d
mov r10d, esi
mov r11d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x130]
mov edi, dword [rsp + 0x150]
mov r15d, dword [rsp + 0x40]
mov r12d, dword [rsp + 0x2c]
je 0x180044f4c
mov bpl, 1
mov ebx, dword [rsp + 0x140]
jmp 0x180044f57
mov ebx, dword [rsp + 0x140]
mov ebp, dword [rsp + 0x58]
mov eax, edx
or al, r12b
mov ecx, r8d
or cl, r9b
or cl, al
mov eax, r10d
or al, r11b
or al, sil
or al, cl
mov ecx, edi
or cl, bl
or cl, bpl
mov r14d, dword [rsp + 0x30]
or cl, r14b
or cl, al
mov al, 2
or cl, r15b
je 0x180044fb6
mov byte [r13 + 1], dl
mov byte [r13 + 2], r8b
mov byte [r13 + 3], r9b
mov byte [r13 + 4], r10b
mov byte [r13 + 5], r11b
mov byte [r13 + 6], sil
mov byte [r13 + 7], dil
mov byte [r13 + 8], bl
mov byte [r13 + 9], bpl
mov byte [r13 + 0xa], r14b
mov byte [r13 + 0xb], r15b
mov eax, r12d
mov byte [r13], al
movaps xmm6, xmmword [rsp + 0x230]
movaps xmm7, xmmword [rsp + 0x240]
movaps xmm8, xmmword [rsp + 0x250]
movaps xmm9, xmmword [rsp + 0x260]
movaps xmm10, xmmword [rsp + 0x270]
movaps xmm11, xmmword [rsp + 0x280]
movaps xmm12, xmmword [rsp + 0x290]
movaps xmm13, xmmword [rsp + 0x2a0]
movaps xmm14, xmmword [rsp + 0x2b0]
movaps xmm15, xmmword [rsp + 0x2c0]
add rsp, 0x2d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rbp
mov rdx, r12
mov r8, r14
call fcn.1801085a0
mov r12, qword [rbp + 0x10]
jmp 0x180044d13
cmp dword [rsp + 0x70], 0
je 0x180045063
cmp qword [rsp + 0x80], 0
je 0x180045063
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x18016cb80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test ebp, ebp
mov rbx, qword [rsp + 0x30]
je 0x180045089
cmp qword [rsp + 0xf0], 0
je 0x180045089
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
movabs rdi, 0x8080808080808080
mov qword [rsp + 0x198], 8
xorps xmm6, xmm6
movups xmmword [rsp + 0x1a0], xmm6
mov rcx, qword [rsp + 0x158]
mov rax, qword [rcx]
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x1c0], rcx
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x1e0], rcx
mov qword [rsp + 0x1e8], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x1f0], rax
mov word [rsp + 0x1f8], 1
mov rax, rbx
and rax, 0xffffffffffff00ff
mov qword [rsp + 0x190], rax
mov r15d, 0xff
movdqa xmm7, xmmword [0x180111a90]
movdqa xmm8, xmmword [0x1801117d0]
movdqa xmm14, xmmword [0x180111900]
movdqa xmm15, xmmword [0x180111af0]
movdqa xmm9, xmmword [0x180111b00]
movdqa xmm10, xmmword [0x180111b10]
movdqa xmm12, xmmword [0x180111b30]
movdqa xmm13, xmmword [0x180111b40]
movdqa xmm11, xmmword [0x180111b50]
xor esi, esi
mov dword [rsp + 0x2c], 0
jmp 0x1800451a5
mov byte [rsp + 0x48], 1
mov sil, 1
mov al, 1
mov dword [rsp + 0x2c], eax
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
lea rcx, [rsp + 0x1b8]
call fcn.180041af0
test rax, rax
je 0x180046ec4
mov rbp, rax
mov r13, rdx
test sil, 1
je 0x1800451f3
mov rsi, qword [rsp + 0x340]
mov rdx, qword [rsi + 0x10]
cmp rdx, qword [rsi + 8]
jne 0x1800451e5
mov rcx, rsi
call fcn.18003e980
mov rdx, qword [rsi + 0x10]
mov rax, qword [rsi]
mov byte [rax + rdx], 0x2e
inc rdx
mov qword [rsi + 0x10], rdx
cmp r13, 4
jb 0x180045206
cmp dword [rbp], 0x2d2d6e78
je 0x1800453a6
test byte [rsp + 0x2c], 1
jne 0x18004534f
test r13, r13
lea r14, [0x18013ad04]
je 0x180045347
mov rax, rbp
add rax, r13
mov rcx, rbp
jmp 0x180045235
cmp rcx, rax
je 0x180045347
movzx r9d, byte [rcx]
test r9b, r9b
js 0x180045246
inc rcx
mov edx, r9d
jmp 0x1800452a9
mov edx, r9d
and edx, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp r9b, 0xdf
jbe 0x180045290
movzx r8d, byte [rcx + 2]
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
cmp r9b, 0xf0
jb 0x18004529c
movzx r9d, byte [rcx + 3]
add rcx, 4
and edx, 7
shl edx, 0x12
shl r8d, 6
and r9d, 0x3f
or r9d, r8d
or r9d, edx
jmp 0x180045241
add rcx, 2
shl edx, 6
or edx, r10d
jmp 0x1800452a9
add rcx, 3
shl edx, 0xc
or r8d, edx
mov edx, r8d
lea r8d, [rdx - 0x21]
cmp r8d, 0x5e
jb 0x18004522c
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x1800452dc
mov r9, r8
sub r8, r10
jbe 0x18004522c
shr r8, 1
add r8, r10
lea r11, [r8 + r8*2]
xor esi, esi
cmp dword [r14 + r11*4], edx
seta sil
cmp dword [r14 + r11*4 + 4], edx
cmovb esi, r15d
cmp sil, 1
je 0x1800452d0
movzx r10d, sil
cmp r10d, 0xff
jne 0x18004531f
inc r8
mov r10, r8
mov r8, r9
sub r8, r10
ja 0x1800452dc
jmp 0x18004522c
movzx edx, byte [r14 + r11*4 + 8]
cmp rdx, 0x11
ja 0x18004522c
mov r8d, 0x20003
bt r8, rdx
jae 0x18004522c
mov al, 1
mov dword [rsp + 0x2c], eax
jmp 0x18004534f
mov dword [rsp + 0x2c], 0
mov rcx, rbp
mov rdx, r13
mov r8, rbx
lea r9, [rsp + 0x48]
call fcn.180043070
mov rcx, qword [rsp + 0x340]
mov rax, qword [rcx + 8]
mov r14, qword [rcx + 0x10]
sub rax, r14
cmp rax, r13
jb 0x1800457de
mov rsi, qword [rsp + 0x340]
mov rcx, qword [rsi]
add rcx, r14
mov rdx, rbp
mov r8, r13
call fcn.1800f8be0
add r13, r14
mov qword [rsi + 0x10], r13
mov sil, 1
jmp 0x1800451a5
lea r12, [rbp + 4]
add r13, 0xfffffffffffffffc
mov qword [rsp + 0x1a8], 0
lea rax, [rbp + 0xb]
and rax, 0xfffffffffffffff8
sub rax, r12
mov rcx, rbp
add rcx, 3
mov r14, r13
jmp 0x1800453da
cmp r14, r13
ja 0x1800454c3
mov r8, r14
sub r8, rax
and r8d, 0xf
cmp r14, rax
mov r9d, 0
mov rdx, r14
cmova rdx, rax
cmovae r9, r8
mov r8, r14
sub r8, r9
jb 0x1800481ae
lea r11, [rcx + r14]
xor r10d, r10d
cmp r9, r10
je 0x180045422
inc r10
cmp byte [r11], 0x2d
lea r11, [r11 - 1]
jne 0x18004540b
sub r14, r10
jmp 0x180045475
mov r9, r8
cmp r8, rdx
jbe 0x180045459
lea r8, [r9 - 0x10]
movdqu xmm0, xmmword [rbp + r9 - 0xc]
movdqa xmm1, xmm0
pxor xmm1, xmm7
paddq xmm1, xmm8
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq r10, xmm1
test r10, rdi
je 0x180045422
cmp r9, r14
ja 0x1800481ae
mov r14, r9
sub r14, 1
jb 0x1800454c3
cmp byte [rcx + r9], 0x2d
mov r9, r14
jne 0x180045465
mov r8, r14
inc r8
je 0x1800453d1
cmp r13, r8
jb 0x1800453d1
cmp byte [r12 + r14], 0x2d
jne 0x1800453d1
test r14, r14
je 0x180045a5d
cmp r14, r13
ja 0x180048223
mov rsi, r13
sub rsi, r8
jbe 0x180045a67
cmp byte [r12 + r8], 0xbf
jg 0x180045a6d
jmp 0x180048236
lea rax, [0x18015db18]
mov qword [rsp + 0x58], rax
xor r14d, r14d
mov rsi, r13
mov rcx, r14
cmp r14, 8
jb 0x180045a8f
mov rcx, qword [rsp + 0x58]
lea rdx, [rcx + 7]
and rdx, 0xfffffffffffffff8
mov rax, rdx
sub rax, rcx
mov rcx, r14
cmp rax, r14
ja 0x180045a8f
mov rcx, qword [rsp + 0x58]
test qword [rcx], rdi
jne 0x18004518c
cmp rdx, qword [rsp + 0x58]
mov ecx, 8
cmove rax, rcx
lea rcx, [r14 - 8]
cmp rax, rcx
jae 0x18004553e
mov rdx, qword [rsp + 0x58]
test qword [rdx + rax], rdi
jne 0x18004518c
add rax, 8
cmp rax, rcx
jb 0x180045526
mov rax, qword [rsp + 0x58]
test qword [rax + rcx], rdi
jne 0x18004518c
test rsi, rsi
je 0x1800457fd
add rsi, r12
xor eax, eax
mov qword [rsp + 0x38], rax
mov r15d, 0x48
mov dword [rsp + 0x40], 0x80
mov ebx, r14d
xor ebp, ebp
lea r9d, [r15 + 0x1a]
inc r12
mov r10d, r15d
neg r10d
mov r11d, 1
mov r13d, 0x24
mov ecx, ebp
movzx eax, byte [r12 - 1]
lea edx, [rax - 0x30]
cmp dl, 0xa
jb 0x1800455b1
lea edx, [rax - 0x41]
cmp dl, 0x1a
jb 0x1800455b5
add al, 0x9f
mov edx, eax
cmp al, 0x19
jbe 0x1800455b5
jmp 0x18004518c
add al, 0xea
mov edx, eax
test r11d, r11d
je 0x1800481ae
movzx r8d, dl
mov eax, ecx
not eax
xor edx, edx
div r11d
cmp eax, r8d
jb 0x18004518c
mov eax, r11d
imul eax, r8d
add ecx, eax
lea eax, [r10 + r13]
cmp r13d, r9d
mov edx, 0x1a
cmovae eax, edx
cmp r13d, r15d
mov edx, 1
cmovbe eax, edx
cmp eax, r8d
ja 0x18004563c
mov r8d, 0x24
sub r8d, eax
mov eax, r8d
mul r11d
jo 0x18004518c
cmp r12, rsi
je 0x18004518c
add r13d, 0x24
imul r11d, r8d
inc r12
movzx eax, byte [r12 - 1]
lea edx, [rax - 0x30]
cmp dl, 0xa
jae 0x18004559c
jmp 0x1800455b1
inc ebx
je 0x1800481ae
mov eax, ecx
sub eax, ebp
test ebp, ebp
mov r8d, 2
mov edx, 0x2bc
cmove r8d, edx
xor r15d, r15d
xor edx, edx
div r8d
mov r8d, eax
xor edx, edx
div ebx
add eax, r8d
cmp eax, 0x1c8
jb 0x1800456a5
xor r15d, r15d
mov r9d, 0xd41d41d5
mov edx, eax
imul rdx, r9
shr rdx, 0x20
mov r8d, eax
sub r8d, edx
shr r8d, 1
add r8d, edx
shr r8d, 5
add r15d, 0x24
cmp eax, 0x3e57
mov eax, r8d
ja 0x18004567b
jmp 0x1800456a8
mov r8d, eax
lea eax, [r8*4]
lea eax, [rax + rax*8]
add r8d, 0x26
xor edx, edx
div r8w
mov r13d, eax
mov eax, ecx
xor edx, edx
div ebx
add dword [rsp + 0x40], eax
jb 0x18004518c
mov eax, ecx
xor edx, edx
div ebx
mov eax, dword [rsp + 0x40]
xor eax, 0xd800
add eax, 0xffef0000
cmp eax, 0xffef0800
jb 0x18004518c
mov ebp, edx
mov r8, qword [rsp + 0x198]
mov edi, edx
cmp qword [rsp + 0x38], 0
je 0x18004572b
mov rax, qword [rsp + 0x38]
shl rax, 4
xor ecx, ecx
jmp 0x180045719
add rcx, 0x10
cmp rax, rcx
je 0x18004572b
mov rdx, qword [r8 + rcx]
cmp rdx, rdi
jb 0x180045710
inc rdx
mov qword [r8 + rcx], rdx
jmp 0x180045710
mov rdx, qword [rsp + 0x38]
cmp rdx, qword [rsp + 0x1a0]
jne 0x180045757
lea rcx, [rsp + 0x198]
call fcn.180041980
mov r8, qword [rsp + 0x198]
mov rdx, qword [rsp + 0x1a8]
movzx eax, r13w
add r15d, eax
mov rax, rdx
shl rax, 4
mov qword [r8 + rax], rdi
mov ecx, dword [rsp + 0x40]
mov dword [r8 + rax + 8], ecx
lea rcx, [rdx + 1]
mov rax, rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x1a8], rcx
inc ebp
cmp r12, rsi
movabs rdi, 0x8080808080808080
jne 0x180045573
mov qword [rsp + 0x118], r8
cmp qword [rsp + 0x38], 0x15
jae 0x180046546
cmp qword [rsp + 0x38], 1
jbe 0x180046c7c
mov r8d, 1
mov rsi, qword [rsp + 0x118]
mov rcx, rsi
mov r13, qword [rsp + 0x38]
mov rdx, r13
call fcn.180041a40
mov r9, rsi
jmp 0x180045808
mov rsi, qword [rsp + 0x340]
mov rcx, rsi
mov rdx, r14
mov r8, r13
call fcn.1801085a0
mov r14, qword [rsi + 0x10]
jmp 0x18004537e
mov r9, qword [rsp + 0x198]
xor r13d, r13d
lea r8, [r14 + r13]
mov r15, qword [rsp + 0x340]
mov rax, qword [r15 + 8]
mov rcx, qword [r15 + 0x10]
mov qword [rsp + 0x130], rcx
sub rax, rcx
cmp rax, r8
mov r12, qword [rsp + 0x58]
mov rsi, r9
jb 0x180045ab0
lea rax, [r12 + r14]
mov qword [rsp + 0x40], rax
test r9, r9
je 0x180045ad5
xor edi, edi
xor ebx, ebx
mov qword [rsp + 0x38], r13
cmp rdi, r13
jb 0x1800458ea
cmp r12, qword [rsp + 0x40]
je 0x180045ae3
movzx eax, byte [r12]
test al, al
js 0x18004587a
inc r12
mov ebp, eax
jmp 0x180045903
mov ebp, eax
and ebp, 0x1f
movzx edx, byte [r12 + 1]
and edx, 0x3f
cmp al, 0xdf
jbe 0x1800458ba
movzx ecx, byte [r12 + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp al, 0xf0
jb 0x1800458c5
movzx eax, byte [r12 + 3]
add r12, 4
and ebp, 7
shl ebp, 0x12
shl ecx, 6
and eax, 0x3f
or eax, ecx
or ebp, eax
jmp 0x180045903
add r12, 2
shl ebp, 6
or ebp, edx
jmp 0x180045903
add r12, 3
shl ebp, 0xc
or ebp, ecx
jmp 0x180045903
mov rax, qword [r15]
mov byte [rax + rdx], bpl
inc rdx
mov qword [r15 + 0x10], rdx
inc rbx
cmp rdi, r13
jae 0x18004585c
mov rax, rdi
shl rax, 4
cmp rbx, qword [r9 + rax]
jne 0x1800459a2
inc rdi
mov ebp, dword [r9 + rax + 8]
cmp ebp, 0x80
jae 0x18004592e
mov r15, qword [rsp + 0x340]
mov rdx, qword [r15 + 0x10]
cmp rdx, qword [r15 + 8]
jne 0x1800458d0
mov rcx, r15
call fcn.18003e980
mov r9, rsi
mov rdx, qword [r15 + 0x10]
jmp 0x1800458d0
mov dword [rsp + 0x60], 0
cmp ebp, 0x10000
mov r14d, 4
sbb r14, 0
cmp ebp, 0x800
mov eax, 2
cmovb r14, rax
cmp r14, 2
je 0x1800459b2
cmp r14, 3
je 0x1800459d1
cmp r14, 4
jne 0x1800481ae
mov r13, r12
mov eax, ebp
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x60], al
mov eax, ebp
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x61], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x62], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x63], bpl
jmp 0x1800459fb
cmp r12, qword [rsp + 0x40]
jne 0x180045867
jmp 0x180046ec0
mov r13, r12
mov eax, ebp
shr eax, 6
and al, 0x1f
or al, 0xc0
mov byte [rsp + 0x60], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x61], bpl
jmp 0x1800459fb
mov r13, r12
mov eax, ebp
shr eax, 0xc
and al, 0xf
or al, 0xe0
mov byte [rsp + 0x60], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x61], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x62], bpl
mov r15, qword [rsp + 0x340]
mov rax, qword [r15 + 8]
mov r12, qword [r15 + 0x10]
sub rax, r12
cmp rax, r14
jb 0x180045a49
mov rcx, qword [r15]
add rcx, r12
lea rdx, [rsp + 0x60]
mov r8, r14
call fcn.1800f8be0
add r12, r14
mov qword [r15 + 0x10], r12
inc rbx
mov r12, r13
mov r13, qword [rsp + 0x38]
mov r9, rsi
cmp rdi, r13
jae 0x18004585c
jmp 0x1800458ea
mov rcx, r15
mov rdx, r12
mov r8, r14
call fcn.1801085a0
mov r12, qword [r15 + 0x10]
jmp 0x180045a13
mov qword [rsp + 0x58], r12
jmp 0x1800454cf
jne 0x180048236
add r8, r12
mov qword [rsp + 0x58], r12
mov r12, r8
movabs rdi, 0x8080808080808080
mov rcx, r14
cmp r14, 8
jae 0x1800454e2
mov rax, rcx
sub rax, 1
jb 0x18004554d
mov rdx, qword [rsp + 0x58]
cmp byte [rdx + rcx - 1], 0
mov rcx, rax
jns 0x180045a8f
jmp 0x18004518c
mov rcx, r15
mov rdx, qword [rsp + 0x130]
call fcn.1801085a0
mov r9, rsi
lea rax, [r12 + r14]
mov qword [rsp + 0x40], rax
test r9, r9
jne 0x18004584a
test r14, r14
jne 0x180045b41
test r13, r13
jne 0x180046ec2
mov r14, qword [r15]
mov rdx, qword [r15 + 0x10]
mov r8, qword [rsp + 0x130]
test r8, r8
je 0x180045cdc
mov r12, rdx
sub r12, r8
movabs rdi, 0x8080808080808080
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
jbe 0x180045cf6
cmp byte [r14 + r8], 0xbf
jg 0x180045cfc
jmp 0x180048216
mov rax, qword [r15]
mov byte [rax + rdx], dil
inc rdx
mov qword [r15 + 0x10], rdx
cmp r12, qword [rsp + 0x40]
je 0x180045ada
movzx ecx, byte [r12]
test cl, cl
js 0x180045b51
inc r12
mov edi, ecx
jmp 0x180045baf
mov edi, ecx
and edi, 0x1f
movzx edx, byte [r12 + 1]
and edx, 0x3f
cmp cl, 0xe0
jb 0x180045b93
movzx eax, byte [r12 + 2]
shl edx, 6
and eax, 0x3f
or eax, edx
cmp cl, 0xf0
jb 0x180045b9e
movzx ecx, byte [r12 + 3]
add r12, 4
and edi, 7
shl edi, 0x12
shl eax, 6
and ecx, 0x3f
or ecx, eax
or edi, ecx
jmp 0x180045ba7
add r12, 2
shl edi, 6
or edi, edx
jmp 0x180045ba7
add r12, 3
shl edi, 0xc
or edi, eax
cmp edi, 0x80
jae 0x180045bce
mov rdx, qword [r15 + 0x10]
cmp rdx, qword [r15 + 8]
jne 0x180045b2c
mov rcx, r15
call fcn.18003e980
mov rdx, qword [r15 + 0x10]
jmp 0x180045b2c
mov dword [rsp + 0x60], 0
cmp edi, 0x10000
mov r14d, 4
sbb r14, 0
cmp edi, 0x800
mov eax, 2
cmovb r14, rax
cmp r14, 2
je 0x180045c42
cmp r14, 3
je 0x180045c61
cmp r14, 4
jne 0x1800481ae
mov rbx, r12
mov eax, edi
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x60], al
mov eax, edi
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x61], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x62], al
and dil, 0x3f
or dil, 0x80
mov byte [rsp + 0x63], dil
jmp 0x180045c8b
mov rbx, r12
mov eax, edi
shr eax, 6
and al, 0x1f
or al, 0xc0
mov byte [rsp + 0x60], al
and dil, 0x3f
or dil, 0x80
mov byte [rsp + 0x61], dil
jmp 0x180045c8b
mov rbx, r12
mov eax, edi
shr eax, 0xc
and al, 0xf
or al, 0xe0
mov byte [rsp + 0x60], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x61], al
and dil, 0x3f
or dil, 0x80
mov byte [rsp + 0x62], dil
mov rax, qword [r15 + 8]
mov r12, qword [r15 + 0x10]
sub rax, r12
cmp rax, r14
jb 0x180045cc8
mov rcx, qword [r15]
add rcx, r12
lea rdx, [rsp + 0x60]
mov r8, r14
call fcn.1800f8be0
add r12, r14
mov qword [r15 + 0x10], r12
mov r12, rbx
cmp r12, qword [rsp + 0x40]
jne 0x180045b41
jmp 0x180045ada
mov rcx, r15
mov rdx, r12
mov r8, r14
call fcn.1801085a0
mov r12, qword [r15 + 0x10]
jmp 0x180045c9b
mov r12, rdx
movabs rdi, 0x8080808080808080
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
jmp 0x180045cfc
jne 0x180048216
add r14, r8
test byte [rsp + 0x2c], 1
jne 0x180045e4b
test r12, r12
je 0x180045e43
lea rax, [r14 + r12]
mov rcx, r14
jmp 0x180045d25
cmp rcx, rax
je 0x180045e43
movzx r9d, byte [rcx]
test r9b, r9b
js 0x180045d36
inc rcx
mov edx, r9d
jmp 0x180045d99
mov edx, r9d
and edx, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp r9b, 0xdf
jbe 0x180045d80
movzx r8d, byte [rcx + 2]
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
cmp r9b, 0xf0
jb 0x180045d8c
movzx r9d, byte [rcx + 3]
add rcx, 4
and edx, 7
shl edx, 0x12
shl r8d, 6
and r9d, 0x3f
or r9d, r8d
or r9d, edx
jmp 0x180045d31
add rcx, 2
shl edx, 6
or edx, r10d
jmp 0x180045d99
add rcx, 3
shl edx, 0xc
or r8d, edx
mov edx, r8d
lea r8d, [rdx - 0x21]
cmp r8d, 0x5e
jb 0x180045d1c
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x180045dc4
mov r9, r8
sub r8, r10
jbe 0x180045d1c
shr r8, 1
add r8, r10
lea r11, [r8 + r8*2]
xor esi, esi
lea r15, [0x18013ad04]
cmp dword [r15 + r11*4], edx
seta sil
cmp dword [r15 + r11*4 + 4], edx
mov r15d, 0xff
cmovb esi, r15d
cmp sil, 1
je 0x180045db8
movzx r10d, sil
cmp r10d, 0xff
jne 0x180045e14
inc r8
mov r10, r8
mov r8, r9
sub r8, r10
ja 0x180045dc4
jmp 0x180045d1c
lea rdx, [0x18013ad04]
movzx edx, byte [rdx + r11*4 + 8]
cmp rdx, 0x11
ja 0x180045d1c
mov r8d, 0x20003
bt r8, rdx
jae 0x180045d1c
mov al, 1
mov dword [rsp + 0x2c], eax
jmp 0x180045e4b
mov dword [rsp + 0x2c], 0
movq xmm0, qword [rsp + 0x48]
movzx eax, byte [rsp + 0x51]
pshufd xmm1, xmm0, 0x55
por xmm1, xmm0
movdqa xmm0, xmm1
psrld xmm0, 0x10
por xmm0, xmm1
movdqa xmm1, xmm0
psrlw xmm1, 8
por xmm1, xmm0
movd ecx, xmm1
or cl, byte [rsp + 0x50]
or al, byte [rsp + 0x52]
or al, cl
mov sil, 1
or al, byte [rsp + 0x53]
jne 0x1800451a5
test r12, r12
je 0x180046e99
lea rdi, [r14 + r12]
xor r8d, r8d
xor eax, eax
mov rcx, r14
movzx edx, byte [rcx]
test dl, dl
js 0x180045eb8
inc rcx
jmp 0x180045f4f
mov r9d, edx
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp dl, 0xe0
jb 0x180045f0d
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp dl, 0xf0
jb 0x180045f1d
movzx edx, byte [rcx + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and edx, 0x3f
or edx, r10d
or edx, r9d
cmp edx, 0x110000
je 0x180046c8e
add rcx, 4
jmp 0x180045f2b
add rcx, 2
shl r9d, 6
or r9d, r11d
mov edx, r9d
jmp 0x180045f2b
add rcx, 3
shl r9d, 0xc
or r10d, r9d
mov edx, r10d
cmp edx, 0x7f
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
jbe 0x180045f4f
jmp 0x180045fdd
inc rcx
cmp edx, 0x80
jae 0x180045fda
cmp rcx, rdi
je 0x180046c99
movzx edx, byte [rcx]
test dl, dl
jns 0x180045f40
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x180045fb4
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x180045fc7
movzx edx, byte [rcx + 3]
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0x110000
je 0x180046c99
add rcx, 4
jmp 0x180045f43
add rcx, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x180045f43
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
jmp 0x180045f43
xor r8d, r8d
mov r9d, r8d
imul r8d, edx, 0x9e3779b9
imul r10d, edx, 0x31415926
xor r8d, r10d
imul r8, r8, 0x39a
shr r8, 0x1f
and r8d, 0xfffffffe
lea r11, [0x18013f0cc]
movzx r8d, word [r8 + r11]
add r8d, edx
imul r8d, r8d, 0x9e3779b9
xor r8d, r10d
imul r8, r8, 0x39a
shr r8, 0x1e
and r8d, 0xfffffffc
lea r10, [0x18013f800]
mov r8d, dword [r8 + r10]
mov r10d, r8d
shr r10d, 8
cmp r10d, edx
mov r10d, 0
cmovne r8d, r10d
cmp r9b, r8b
jbe 0x180046055
test r8b, r8b
jne case.0x180046240.3907
lea r9d, [rdx - 0x340]
cmp r9d, 4
ja 0x18004606c
cmp r9d, 2
jne case.0x180046240.3907
cmp edx, 0xd56
jg 0x1800460de
cmp edx, 0x9de
jg 0x18004612a
cmp edx, 0x93b
jg 0x180046277
lea r9d, [rdx - 0x30f]
cmp r9d, 0x36
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
ja 0x1800460b8
movabs r10, 0x48020000001005
bt r10, r9
jb 0x1800463ac
lea r9d, [rdx - 0x374]
cmp r9d, 0x13
ja case.0x180046240.3908
mov r10d, 0x80401
bt r10d, r9d
jb case.0x180046240.3907
jmp case.0x180046240.3908
cmp edx, 0x11126
jg 0x18004619c
cmp edx, 0x102d
jle 0x1800461ed
cmp edx, 0x1f70
jg 0x1800462df
cmp edx, 0x102e
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x1800463ac
cmp edx, 0x1b35
je 0x1800463ac
jmp case.0x180046240.3908
cmp edx, 0xbd6
jg 0x180046243
cmp edx, 0xbbd
jg 0x180046399
lea r9d, [rdx - 0xb3e]
cmp r9d, 0x19
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
ja 0x18004616a
mov r10d, 0x3000001
bt r10d, r9d
jb 0x1800463ac
lea r9d, [rdx - 0xa33]
cmp r9d, 0x2b
ja 0x18004618b
movabs r10, 0x80000000009
bt r10, r9
jb case.0x180046240.3907
cmp edx, 0x9df
jne case.0x180046240.3908
jmp case.0x180046240.3907
cmp edx, 0x114af
jle 0x1800462ab
lea r9d, [rdx - 0x114b0]
cmp r9d, 0xd
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
ja 0x1800461d0
mov r10d, 0x2401
bt r10d, r9d
jb 0x1800463ac
cmp edx, 0x115af
je 0x1800463ac
cmp edx, 0x11930
je 0x1800463ac
jmp case.0x180046240.3908
lea r9d, [rdx - 0xdca]
cmp r9d, 0x15
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
ja 0x180046215
mov r10d, 0x200021
bt r10d, r9d
jb 0x1800463ac
cmp edx, 0xd57
je 0x1800463ac
lea r9d, [rdx - 0xf43]
cmp r9d, 0x76
ja case.0x180046240.3908
lea r10, [0x180048248]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp edx, 0xcc1
jg 0x180046345
cmp edx, 0xbd7
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x1800463ac
cmp edx, 0xc56
je 0x1800463ac
jmp case.0x180046240.3908
cmp edx, 0x93c
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x1800463ac
cmp edx, 0x9be
je 0x1800463ac
cmp edx, 0x9d7
je 0x1800463ac
jmp case.0x180046240.3908
cmp edx, 0x11127
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x1800463ac
cmp edx, 0x1133e
je 0x1800463ac
cmp edx, 0x11357
je 0x1800463ac
jmp case.0x180046240.3908
cmp edx, 0xfa0f
jle 0x180046365
cmp edx, 0x110ba
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x1800463ac
lea r9d, [rdx - 0xfa10]
cmp r9d, 0x12
ja 0x18004631b
mov r10d, 0x50005
bt r10d, r9d
jb case.0x180046240.3907
lea r9d, [rdx - 0xfb1d]
cmp r9d, 0x21
ja case.0x180046240.3908
movabs r10, 0x200000005
bt r10, r9
jb case.0x180046240.3907
jmp case.0x180046240.3908
cmp edx, 0xcc2
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x1800463ac
cmp edx, 0xd3e
je 0x1800463ac
jmp case.0x180046240.3908
cmp edx, 0x2125
jg 0x1800463bc
lea r9d, [rdx - 0x1f71]
cmp r9d, 0x8c
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
ja case.0x180046240.3908
lea r10, [0x180048424]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp edx, 0xbbe
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
jne case.0x180046240.3908
mov al, 2
cmp rcx, rdi
jne 0x180045ea9
jmp 0x180046c99
lea r9d, [rdx - 0x2329]
cmp r9d, 2
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
jb case.0x180046240.3907
cmp edx, 0x2126
je case.0x180046240.3907
cmp edx, 0x2adc
je case.0x180046240.3907
movd xmm1, edx
pshufd xmm0, xmm1, 0
movdqa xmm2, xmm0
paddd xmm2, xmmword [0x180111ab0]
movdqa xmm3, xmm0
paddd xmm3, xmmword [0x180111ac0]
pxor xmm3, xmm14
movdqa xmm4, xmm9
pcmpgtd xmm4, xmm3
pxor xmm2, xmm14
movdqa xmm3, xmm10
pcmpgtd xmm3, xmm2
packssdw xmm3, xmm4
pmovmskb r9d, xmm3
test r9d, r9d
jne case.0x180046240.3907
pshufd xmm1, xmm1, 0x50
pand xmm1, xmmword [0x180111aa0]
pshufd xmm2, xmm1, 4
pcmpeqd xmm2, xmmword [0x180111ad0]
movdqa xmm3, xmm0
paddd xmm3, xmmword [0x180111ae0]
pxor xmm3, xmm14
movdqa xmm4, xmm15
pcmpgtd xmm4, xmm3
por xmm4, xmm2
movmskps r9d, xmm4
test r9b, r9b
jne case.0x180046240.3907
lea r9d, [rdx - 0x1d1bb]
cmp r9d, 6
jb case.0x180046240.3907
lea r9d, [rdx - 0x2f800]
cmp r9d, 0x21e
jb case.0x180046240.3907
movd r9d, xmm1
cmp r9d, 0x2000
je case.0x180046240.3907
cmp r9d, 0x212a
je case.0x180046240.3907
cmp r9d, 0xfb40
je case.0x180046240.3907
movdqa xmm1, xmm0
paddd xmm1, xmmword [0x180111b20]
paddd xmm0, xmm12
pxor xmm0, xmm14
movdqa xmm2, xmm13
pcmpgtd xmm2, xmm0
pxor xmm1, xmm14
movdqa xmm0, xmm11
pcmpgtd xmm0, xmm1
packssdw xmm2, xmm0
pmovmskb r10d, xmm2
test r10d, r10d
jne 0x1800463ac
lea r10d, [rdx - 0x11a8]
cmp r10d, 0x1b
jb 0x1800463ac
add edx, 0xffffcf67
cmp edx, 2
jb 0x1800463ac
cmp r9d, 0x330
jne 0x1800463ae
jmp 0x1800463ac
mov rsi, rdx
movzx eax, byte [0x18016cbc0]
mov rax, qword [0x18016cb80]
test rax, rax
jne 0x180046572
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800481ae
mov qword [0x18016cb80], rax
mov rcx, qword [rsp + 0x38]
lea r8, [rcx*8]
movabs rcx, 0x7ffffffffffffff0
and r8, rcx
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x110], rax
test rax, rax
je 0x1800481ae
movzx eax, byte [0x18016cbc0]
mov rax, qword [0x18016cb80]
test rax, rax
jne 0x1800465d1
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800481ae
mov qword [0x18016cb80], rax
mov r8d, 0x100
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x1800481ae
mov r11, rax
mov eax, 1
sub rax, rsi
mov qword [rsp + 0x170], rax
mov r10, qword [rsp + 0x118]
lea rax, [r10 + 0x20]
mov qword [rsp + 0x168], rax
lea rax, [r10 + 8]
mov qword [rsp + 0x208], rax
lea rax, [r10 - 8]
mov qword [rsp + 0x200], rax
lea rax, [r10 - 0x10]
mov qword [rsp + 0x188], rax
mov eax, 0x10
mov qword [rsp + 0x178], rax
xor esi, esi
xor ebx, ebx
mov r13, qword [rsp + 0x38]
jmp 0x180046664
mov ebx, 1
mov rsi, qword [rsp + 0x180]
cmp rsi, r13
jae 0x180046c47
mov r8, r13
sub r8, rsi
mov rax, rsi
shl rax, 4
lea rcx, [r10 + rax]
cmp r8, 2
mov rbp, rbx
mov qword [rsp + 0x148], r11
jae 0x18004668e
mov rdx, r13
jmp 0x1800467cd
mov rdx, qword [rcx]
mov r9, qword [rcx + 0x10]
cmp r9, rdx
jae 0x1800466af
cmp r8, 2
jne 0x1800466c9
lea rdx, [rsi + 2]
mov r8d, 2
jmp 0x180046762
cmp r8, 2
jne 0x18004670b
lea rdx, [rsi + 2]
mov r8d, 2
mov r13, qword [rsp + 0x38]
jmp 0x1800467cd
mov r10, qword [rsp + 0x170]
lea r11, [r10 + rsi]
mov r10, qword [rsp + 0x168]
lea rdi, [r10 + rax]
mov r10d, 2
mov rbx, r9
mov r15, rbx
mov rbx, qword [rdi]
cmp rbx, r15
jae 0x18004674e
lea r15, [r11 + r10]
inc r15
inc r10
add rdi, 0x10
cmp r15, 2
jne 0x1800466ea
jmp 0x18004674b
mov r10, qword [rsp + 0x170]
lea r11, [r10 + rsi]
mov r10, qword [rsp + 0x168]
lea rdi, [r10 + rax]
mov r10d, 2
mov rbx, r9
mov r15, rbx
mov rbx, qword [rdi]
cmp rbx, r15
jb 0x18004674e
lea r15, [r11 + r10]
inc r15
inc r10
add rdi, 0x10
cmp r15, 2
jne 0x18004672c
mov r10, r8
lea r11, [r10 + rsi]
mov r8, r10
cmp r9, rdx
mov rdx, r11
mov r13, qword [rsp + 0x38]
jae 0x1800467cd
cmp rdx, rsi
jb 0x1800481ae
mov r15, rdx
cmp rdx, qword [rsp + 0x38]
ja 0x1800481ae
cmp r8, 2
jb 0x1800467c5
mov rdx, r8
shr rdx, 1
add rax, qword [rsp + 0x208]
lea r9, [rsi + r8]
shl r9, 4
add r9, qword [rsp + 0x200]
mov r10, qword [rax - 8]
mov r11d, dword [rax]
mov rdi, qword [r9 - 8]
mov ebx, dword [r9]
mov qword [rax - 8], rdi
mov dword [rax], ebx
mov qword [r9 - 8], r10
mov dword [r9], r11d
add rax, 0x10
add r9, 0xfffffffffffffff0
dec rdx
jne 0x18004679d
mov r13, qword [rsp + 0x38]
mov rdx, r15
mov r12, rdx
sub r12, rsi
jb 0x1800481ae
cmp rdx, r13
ja 0x1800481ae
jae 0x18004681d
cmp r8, 0xa
jae 0x18004681d
lea r12, [rsi + 0xa]
cmp r12, r13
cmovae r12, r13
mov qword [rsp + 0x180], r12
sub r12, rsi
jb 0x1800481ae
cmp r8, 2
mov eax, 1
cmovb r8, rax
mov rdx, r12
call fcn.180041a40
jmp 0x180046825
mov qword [rsp + 0x180], rdx
mov rbx, rbp
cmp rbp, qword [rsp + 0x178]
jne 0x1800468bd
movzx eax, byte [0x18016cbc0]
mov rax, qword [0x18016cb80]
test rax, rax
jne 0x18004685f
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800481ae
mov qword [0x18016cb80], rax
mov rbx, rbp
mov r8, rbp
shl r8, 5
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x1800481ae
mov r13, rax
lea rax, [rbx + rbx]
mov qword [rsp + 0x178], rax
mov r8, rbx
shl r8, 4
mov rcx, r13
mov rdi, qword [rsp + 0x148]
mov rdx, rdi
call fcn.1800f8be0
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
mov r11, r13
jmp 0x1800468c5
mov r11, qword [rsp + 0x148]
mov rax, rbx
shl rax, 4
mov qword [r11 + rax], r12
mov qword [r11 + rax + 8], rsi
inc rbx
mov rax, rbx
cmp rbx, 2
mov r13, qword [rsp + 0x38]
mov r10, qword [rsp + 0x118]
mov qword [rsp + 0x148], r11
jae 0x18004698e
jmp 0x180046653
mov rdx, rsi
mov rsi, qword [rsp + 0x40]
mov r15, qword [rsp + 0x120]
sub r12, rdx
mov rcx, rbp
mov r8, r12
call fcn.1800f8be0
mov rax, qword [rsp + 0x138]
add rax, rdi
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x160]
mov qword [rcx], rax
lea rdx, [r15 + 0x10]
mov rax, qword [rsp + 0x150]
not rax
add rsi, rax
shl rsi, 4
mov rcx, r15
mov r8, rsi
call fcn.1800f8be0
mov rax, qword [rsp + 0x130]
cmp rax, 1
mov r13, qword [rsp + 0x38]
mov r10, qword [rsp + 0x118]
mov r11, qword [rsp + 0x148]
jbe 0x18004664e
mov rbx, rax
lea rsi, [rax - 1]
mov rcx, rsi
shl rcx, 4
mov rax, qword [r11 + rcx]
mov rcx, qword [r11 + rcx + 8]
add rcx, rax
cmp rcx, r13
je 0x1800469f9
mov rdx, rbx
shl rdx, 4
mov r8, qword [rdx + r11 - 0x20]
cmp r8, rax
jbe 0x1800469f9
cmp rbx, 2
jbe 0x180046c33
lea r12, [rbx - 3]
mov rcx, r12
shl rcx, 4
mov rcx, qword [r11 + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x180046a0e
cmp rbx, 3
jbe 0x180046c3d
add r8, rcx
cmp qword [rdx + r11 - 0x40], r8
jbe 0x180046a0e
jmp 0x180046653
cmp rbx, 3
jb 0x180046a13
lea r12, [rbx - 3]
mov rcx, r12
shl rcx, 4
mov rcx, qword [r11 + rcx]
cmp rcx, rax
jb 0x180046a17
lea r12, [rbx - 2]
cmp rbx, r12
jbe 0x1800481ae
lea rax, [r12 + 1]
mov qword [rsp + 0x40], rbx
cmp rbx, rax
jbe 0x1800481ae
mov rcx, r12
shl rcx, 4
mov rbp, qword [r11 + rcx + 8]
shl rax, 4
mov rdx, qword [r11 + rax]
mov rbx, qword [r11 + rax + 8]
add rbx, rdx
mov r15, rbx
sub r15, rbp
jb 0x1800481ae
mov qword [rsp + 0x150], r12
mov qword [rsp + 0x130], rsi
cmp rbx, r13
ja 0x1800481ae
mov qword [rsp + 0x138], rdx
lea rdx, [r11 + rcx]
mov qword [rsp + 0x120], rdx
mov rdi, qword [r11 + rcx]
lea rcx, [r11 + rax]
mov qword [rsp + 0x1b0], rcx
add rax, r11
add rax, 8
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x128], rbp
shl rbp, 4
add rbp, r10
mov r12, rdi
shl r12, 4
lea r13, [r12 + rbp]
shl rbx, 4
mov rsi, r15
sub rsi, rdi
cmp rsi, rdi
jae 0x180046b84
mov r12, rsi
shl r12, 4
mov r15, qword [rsp + 0x110]
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.1800f8be0
add r12, r15
test rdi, rdi
jle 0x180046c13
test rsi, rsi
mov rsi, qword [rsp + 0x40]
jle 0x180046c23
add rbx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x110]
mov r15, qword [rsp + 0x120]
mov rax, r13
mov rcx, r12
mov rdx, qword [r12 - 0x10]
mov r8, qword [r13 - 0x10]
cmp rdx, r8
mov r13d, 0
sbb r13, r13
cmp rdx, r8
mov r12d, 0
adc r12, 0xffffffffffffffff
shl r13, 4
add r13, rax
shl r12, 4
add r12, rcx
cmp rdx, r8
mov rax, r12
cmovb rax, r13
movdqu xmm0, xmmword [rax]
movdqu xmmword [rbx], xmm0
cmp r13, rbp
jbe 0x180046b79
add rbx, 0xfffffffffffffff0
cmp r12, r9
ja 0x180046b23
mov rbp, r13
mov rdx, r9
jmp 0x18004690f
mov rsi, qword [rsp + 0x110]
mov rcx, rsi
mov rdx, rbp
mov r8, r12
call fcn.1800f8be0
add r12, rsi
test rdi, rdi
jle 0x1800468ff
cmp r15, rdi
jle 0x1800468ff
add rbx, qword [rsp + 0x118]
mov rdx, rsi
mov rsi, qword [rsp + 0x40]
mov r15, qword [rsp + 0x120]
mov r8, rdx
mov rcx, qword [r13]
xor edx, edx
xor eax, eax
cmp rcx, qword [r8]
setae dl
setb cl
mov r9, r8
cmovb r9, r13
movdqu xmm0, xmmword [r9]
movdqu xmmword [rbp], xmm0
add rbp, 0x10
shl rdx, 4
add rdx, r8
cmp rdx, r12
jae 0x18004690f
mov al, cl
shl rax, 4
add r13, rax
cmp r13, rbx
jb 0x180046bc7
jmp 0x18004690f
mov rbp, r13
mov rdx, qword [rsp + 0x110]
jmp 0x180046902
mov rbp, r13
mov rdx, qword [rsp + 0x110]
jmp 0x180046907
mov ebx, 2
jmp 0x180046653
mov ebx, 3
jmp 0x180046653
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, r11
mov rsi, qword [sym.imp.kernel32.dll_HeapFree]
call rsi
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, qword [rsp + 0x110]
call rsi
mov r9, qword [rsp + 0x118]
jmp 0x180045808
mov r13, qword [rsp + 0x38]
mov r9, qword [rsp + 0x118]
jmp 0x180045808
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
test al, al
je 0x180046e99
movzx eax, al
cmp eax, 1
je case.0x180046240.3907
lea rcx, [rsp + 0xa8]
movups xmmword [rcx], xmm6
movups xmmword [rsp + 0x220], xmm6
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x70], 0
mov word [rsp + 0x74], 0
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x7c], 0
mov byte [rsp + 0x80], 0
mov dword [rsp + 0x84], 0
mov byte [rsp + 0x88], 0
mov dword [rsp + 0x8c], 0
mov byte [rsp + 0x90], 0
mov dword [rsp + 0x94], 0
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0xb8], 0
mov dword [rsp + 0xc0], 0
mov word [rsp + 0xc4], 0
movzx eax, word [rsp + 0x22e]
mov word [rcx + 0x2e], ax
movdqu xmm0, xmmword [rsp + 0x21e]
movdqu xmmword [rcx + 0x1e], xmm0
mov dword [rsp + 0xe0], 0x110000
mov byte [rsp + 0xe4], 0
mov rbx, r14
cmp rbx, rdi
je 0x180046e0d
movzx ebp, byte [rbx]
test bpl, bpl
js 0x180046d91
inc rbx
jmp 0x180046def
mov eax, ebp
and eax, 0x1f
movzx edx, byte [rbx + 1]
and edx, 0x3f
cmp bpl, 0xdf
jbe 0x180046dd7
movzx ecx, byte [rbx + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp bpl, 0xf0
jb 0x180046de4
movzx ebp, byte [rbx + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and ebp, 0x3f
or ebp, ecx
or ebp, eax
cmp ebp, 0x110000
je 0x180046e0d
add rbx, 4
jmp 0x180046def
add rbx, 2
shl eax, 6
or eax, edx
mov ebp, eax
jmp 0x180046def
add rbx, 3
shl eax, 0xc
or ecx, eax
mov ebp, ecx
lea rcx, [rsp + 0x60]
call fcn.180042840
mov r15b, 1
cmp eax, 0x110000
je 0x180046e23
cmp eax, ebp
je 0x180046d7b
jmp 0x180046e23
lea rcx, [rsp + 0x60]
call fcn.180042840
cmp eax, 0x110000
setne r15b
neg r15b
cmp dword [rsp + 0x70], 0
je 0x180046e49
cmp qword [rsp + 0x80], 0
je 0x180046e49
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x18016cb80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
cmp dword [rsp + 0xc0], 0
je 0x180046e75
cmp qword [rsp + 0xd0], 0
je 0x180046e75
mov r8, qword [rsp + 0xc8]
mov rcx, qword [0x18016cb80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test r15b, r15b
mov rbx, qword [rsp + 0x30]
mov r15d, 0xff
je 0x180046e99
mov byte [rsp + 0x4d], 1
movabs rdi, 0x8080808080808080
jmp 0x1800451a5
mov rcx, r14
mov rdx, r12
mov r8, qword [rsp + 0x190]
lea r9, [rsp + 0x48]
call fcn.180043070
movabs rdi, 0x8080808080808080
jmp 0x1800451a5
jmp 0x180046ec0
jmp 0x180046ec2
mov rax, qword [rsp + 0x340]
mov rcx, qword [rax]
mov rdi, qword [rax + 0x10]
mov rax, rdi
mov r8, qword [rsp + 0x140]
test r8, r8
je 0x180046f01
mov rax, rdi
sub rax, r8
jbe 0x180046eff
cmp byte [rcx + r8], 0xbf
jg 0x180046f01
mov rdx, rdi
mov r9, rdi
call fcn.1801063d0
ud2
jne 0x180046ef2
add rcx, r8
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x98], rax
mov word [rsp + 0xa0], 1
test byte [rsp + 0x2c], 1
lea r14, [0x18013ad04]
lea r15, [rsp + 0x60]
jne 0x180046f7d
mov rcx, r15
call fcn.180041af0
test rax, rax
jne 0x180046f6b
jmp 0x1800477e7
mov esi, 0xff
mov ebx, 0x62f8
mov rcx, r15
call fcn.180041af0
test rax, rax
je 0x1800477e7
test rdx, rdx
je 0x180046f87
movzx r8d, byte [rax]
test r8b, r8b
js 0x180046faf
lea r9, [rax + 1]
mov ecx, r8d
jmp 0x18004700f
mov ecx, r8d
and ecx, 0x1f
movzx r11d, byte [rax + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x180046ff9
movzx r10d, byte [rax + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x180047005
lea r9, [rax + 4]
movzx r8d, byte [rax + 3]
and ecx, 7
shl ecx, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or ecx, r8d
jmp 0x18004700f
lea r9, [rax + 2]
shl ecx, 6
or ecx, r11d
jmp 0x18004700f
lea r9, [rax + 3]
shl ecx, 0xc
or ecx, r10d
add rdx, rax
mov r8d, 0x5a6
xor r11d, r11d
mov r10d, 0x5a6
jmp 0x18004702b
mov r10, r8
sub r8, r11
jbe 0x18004708b
shr r8, 1
add r8, r11
lea r13, [r8 + r8*2]
xor ebp, ebp
cmp dword [r14 + r13*4], ecx
seta bpl
cmp dword [r14 + r13*4 + 4], ecx
cmovb ebp, esi
cmp bpl, 1
je 0x180047023
movzx r11d, bpl
cmp r11d, 0xff
jne 0x18004706a
inc r8
mov r11, r8
mov r8, r10
sub r8, r11
ja 0x18004702b
jmp 0x18004708b
movzx ecx, byte [r14 + r13*4 + 8]
test rcx, rcx
je 0x1800471d4
cmp ecx, 0x11
je 0x1800471d4
cmp ecx, 9
jne 0x1800477e2
cmp r9, rdx
je 0x180047183
movzx r8d, byte [r9]
test r8b, r8b
js 0x1800470a5
inc r9
mov ecx, r8d
jmp 0x180047105
mov ecx, r8d
and ecx, 0x1f
movzx r11d, byte [r9 + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x1800470ef
movzx r10d, byte [r9 + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x1800470fb
movzx r8d, byte [r9 + 3]
add r9, 4
and ecx, 7
shl ecx, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or ecx, r8d
jmp 0x180047105
add r9, 2
shl ecx, 6
or ecx, r11d
jmp 0x180047105
add r9, 3
shl ecx, 0xc
or ecx, r10d
mov r8d, 0x5a6
xor r11d, r11d
mov r10d, 0x5a6
jmp 0x180047122
mov r10, r8
sub r8, r11
jbe 0x18004708b
shr r8, 1
add r8, r11
lea r13, [r8 + r8*2]
xor ebp, ebp
cmp dword [r14 + r13*4], ecx
seta bpl
cmp dword [r14 + r13*4 + 4], ecx
cmovb ebp, esi
cmp bpl, 1
je 0x180047116
movzx r11d, bpl
cmp r11d, 0xff
jne 0x180047164
inc r8
mov r11, r8
mov r8, r10
sub r8, r11
ja 0x180047122
jmp 0x18004708b
movzx ecx, byte [r14 + r13*4 + 8]
cmp rcx, 0xe
ja 0x1800477e2
bt rbx, rcx
jb 0x18004708b
jmp 0x1800477e2
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x180047193
dec rdx
jmp 0x18004737b
movzx r8d, byte [rdx - 2]
add rdx, 0xfffffffffffffffe
cmp r8b, 0xc0
jge 0x180047332
movzx r9d, byte [rdx - 1]
dec rdx
cmp r9b, 0xc0
jge 0x180047362
movzx r10d, byte [rdx - 1]
dec rdx
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x180047366
cmp r9, rdx
je 0x180047338
xor r8d, r8d
mov dword [rsp + 0x30], 0
movzx r11d, byte [r9]
test r11b, r11b
js 0x1800471f9
inc r9
mov r10d, r11d
jmp 0x180047263
mov r10d, r11d
and r10d, 0x1f
movzx r13d, byte [r9 + 1]
and r13d, 0x3f
cmp r11b, 0xdf
jbe 0x180047244
movzx ebp, byte [r9 + 2]
shl r13d, 6
and ebp, 0x3f
or ebp, r13d
cmp r11b, 0xf0
jb 0x180047251
movzx r11d, byte [r9 + 3]
add r9, 4
and r10d, 7
shl r10d, 0x12
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
or r10d, r11d
jmp 0x18004725c
add r9, 2
shl r10d, 6
or r10d, r13d
jmp 0x18004725c
add r9, 3
shl r10d, 0xc
or r10d, ebp
lea r14, [0x18013ad04]
mov r11d, 0x5a6
xor ebp, ebp
mov r13d, 0x5a6
jmp 0x180047286
mov r13, r11
lea r14, [0x18013ad04]
sub r11, rbp
jbe 0x1800477e2
shr r11, 1
add r11, rbp
lea r12, [r11 + r11*2]
mov rcx, r14
xor r14d, r14d
cmp dword [rcx + r12*4], r10d
seta r14b
cmp dword [rcx + r12*4 + 4], r10d
cmovb r14d, esi
cmp r14b, 1
je 0x180047273
movzx ebp, r14b
cmp ebp, 0xff
jne 0x1800472d3
inc r11
mov rbp, r11
mov r11, r13
lea r14, [0x18013ad04]
sub r11, rbp
ja 0x180047286
jmp 0x1800477e2
lea r10, [0x18013ad04]
movzx r10d, byte [r10 + r12*4 + 8]
cmp r10d, 1
je 0x1800472fb
cmp r10d, 5
jne 0x180047307
mov cl, 1
mov dword [rsp + 0x30], ecx
lea r14, [0x18013ad04]
jmp 0x180047327
mov r8b, 1
lea r14, [0x18013ad04]
jmp 0x180047327
cmp r10, 0x11
lea r14, [0x18013ad04]
ja 0x1800477e2
mov ecx, 0x260fb
bt rcx, r10
jae 0x1800477e2
cmp r9, rdx
jne 0x1800471e8
jmp 0x180047343
and r8d, 0x1f
jmp 0x180047371
mov dword [rsp + 0x30], 0
xor r8d, r8d
movzx r9d, byte [rdx - 1]
test r9b, r9b
js 0x1800475b9
dec rdx
cmp rdx, rax
jne 0x180047602
jmp 0x18004769a
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
cmp rdx, rax
je 0x18004746e
cmp ecx, 0x110000
je 0x180046f87
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x1800473ad
mov r9, r8
sub r8, r10
jbe 0x1800474de
shr r8, 1
add r8, r10
lea r11, [r8 + r8*2]
xor ebp, ebp
cmp dword [r14 + r11*4], ecx
seta bpl
cmp dword [r14 + r11*4 + 4], ecx
cmovb ebp, esi
cmp bpl, 1
je 0x1800473a1
movzx r10d, bpl
cmp r10d, 0xff
jne 0x1800473ef
inc r8
mov r10, r8
mov r8, r9
sub r8, r10
ja 0x1800473ad
jmp 0x1800474de
cmp byte [r14 + r11*4 + 8], 0xd
jne 0x1800474de
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x18004740b
dec rdx
jmp 0x18004737b
movzx r8d, byte [rdx - 2]
cmp r8b, 0xc0
jge 0x18004743b
movzx r9d, byte [rdx - 3]
cmp r9b, 0xc0
jge 0x180047445
movzx r10d, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x18004744d
add rdx, 0xfffffffffffffffe
and r8d, 0x1f
jmp 0x180047458
add rdx, 0xfffffffffffffffd
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
lea r14, [0x18013ad04]
jmp 0x18004737b
cmp ecx, 0x110000
je 0x180046f87
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x180047491
mov rdx, rax
sub rax, r8
jbe 0x1800474de
shr rax, 1
add rax, r8
lea r9, [rax + rax*2]
xor r10d, r10d
cmp dword [r14 + r9*4], ecx
seta r10b
cmp dword [r14 + r9*4 + 4], ecx
cmovb r10d, esi
cmp r10b, 1
je 0x180047489
movzx r8d, r10b
cmp r8d, 0xff
jne 0x1800474d2
inc rax
mov r8, rax
mov rax, rdx
sub rax, r8
ja 0x180047491
jmp 0x1800474de
cmp byte [r14 + r9*4 + 8], 0xd
je 0x180046f87
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x1800474f9
mov rdx, rax
sub rax, r8
jbe 0x180046f87
shr rax, 1
add rax, r8
lea r9, [rax + rax*2]
xor r10d, r10d
cmp dword [r14 + r9*4], ecx
seta r10b
cmp dword [r14 + r9*4 + 4], ecx
cmovb r10d, esi
cmp r10b, 1
je 0x1800474ed
movzx r8d, r10b
cmp r8d, 0xff
jne 0x18004753d
inc rax
mov r8, rax
mov rax, rdx
sub rax, r8
ja 0x1800474f9
jmp 0x180046f87
cmp byte [r14 + r9*4 + 8], 9
je 0x180046f87
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x180047564
mov rdx, rax
sub rax, r8
jbe 0x1800477e2
shr rax, 1
add rax, r8
lea r9, [rax + rax*2]
xor r10d, r10d
cmp dword [r14 + r9*4], ecx
seta r10b
cmp dword [r14 + r9*4 + 4], ecx
cmovb r10d, esi
cmp r10b, 1
je 0x180047558
movzx r8d, r10b
cmp r8d, 0xff
jne 0x1800475a8
inc rax
mov r8, rax
mov rax, rdx
sub rax, r8
ja 0x180047564
jmp 0x1800477e2
cmp byte [r14 + r9*4 + 8], 5
je 0x180046f87
jmp 0x1800477e2
movzx r10d, byte [rdx - 2]
add rdx, 0xfffffffffffffffe
cmp r10b, 0xc0
jge 0x1800475ea
movzx r11d, byte [rdx - 1]
dec rdx
cmp r11b, 0xc0
jge 0x1800477ce
movzx ebp, byte [rdx - 1]
dec rdx
jmp 0x1800477bb
add rdx, 0xfffffffffffffffe
and r10d, 0x1f
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp rdx, rax
je 0x18004769a
cmp r9d, 0x110000
lea r14, [0x18013ad04]
je 0x1800477e2
mov r10d, 0x5a6
xor r13d, r13d
mov r11d, 0x5a6
jmp 0x180047633
mov r11, r10
sub r10, r13
jbe 0x180047710
shr r10, 1
add r10, r13
lea r12, [r10 + r10*2]
xor ebp, ebp
cmp dword [r14 + r12*4], r9d
seta bpl
cmp dword [r14 + r12*4 + 4], r9d
cmovb ebp, esi
cmp bpl, 1
je 0x180047627
movzx ebp, bpl
cmp ebp, 0xff
jne 0x180047674
inc r10
mov r13, r10
mov r10, r11
sub r10, r13
ja 0x180047633
jmp 0x180047710
cmp byte [r14 + r12*4 + 8], 0xd
jne 0x180047710
movzx r9d, byte [rdx - 1]
test r9b, r9b
js 0x180047799
dec rdx
cmp rdx, rax
jne 0x180047602
cmp r9d, 0x110000
lea r14, [0x18013ad04]
je 0x1800477e2
mov eax, 0x5a6
xor r10d, r10d
mov edx, 0x5a6
jmp 0x1800476c5
mov rdx, rax
sub rax, r10
jbe 0x180047710
shr rax, 1
add rax, r10
lea r11, [rax + rax*2]
xor ebp, ebp
cmp dword [r14 + r11*4], r9d
seta bpl
cmp dword [r14 + r11*4 + 4], r9d
cmovb ebp, esi
cmp bpl, 1
je 0x1800476bd
movzx r10d, bpl
cmp r10d, 0xff
jne 0x180047704
inc rax
mov r10, rax
mov rax, rdx
sub rax, r10
ja 0x1800476c5
jmp 0x180047710
cmp byte [r14 + r11*4 + 8], 0xd
je 0x1800477e2
mov eax, 0x5a6
xor r10d, r10d
mov edx, 0x5a6
jmp 0x18004772b
mov rdx, rax
sub rax, r10
jbe 0x1800477e2
shr rax, 1
add rax, r10
lea r11, [rax + rax*2]
xor ebp, ebp
cmp dword [r14 + r11*4], r9d
seta bpl
cmp dword [r14 + r11*4 + 4], r9d
cmovb ebp, esi
cmp bpl, 1
je 0x18004771f
movzx r10d, bpl
cmp r10d, 0xff
jne 0x18004776a
inc rax
mov r10, rax
mov rax, rdx
sub rax, r10
ja 0x18004772b
jmp 0x1800477e2
movzx eax, byte [r14 + r11*4 + 8]
cmp rax, 0x11
ja 0x1800477e2
mov ecx, 0x20023
bt rcx, rax
jae 0x1800477e2
test r8b, 1
je 0x180046f87
mov eax, dword [rsp + 0x30]
and al, 1
je 0x180046f87
jmp 0x1800477e2
movzx r10d, byte [rdx - 2]
cmp r10b, 0xc0
jge 0x1800475e6
movzx r11d, byte [rdx - 3]
cmp r11b, 0xc0
jge 0x1800477ca
movzx ebp, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and ebp, 7
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
jmp 0x1800477d2
add rdx, 0xfffffffffffffffd
and r11d, 0xf
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
jmp 0x1800475ee
mov byte [rsp + 0x4a], 1
movzx r12d, byte [rsp + 0x48]
movzx eax, byte [rsp + 0x49]
mov dword [rsp + 0x180], eax
movzx eax, byte [rsp + 0x4a]
mov dword [rsp + 0x178], eax
movzx eax, byte [rsp + 0x4b]
mov dword [rsp + 0x170], eax
movzx eax, byte [rsp + 0x4c]
mov dword [rsp + 0x168], eax
movzx eax, byte [rsp + 0x4d]
mov dword [rsp + 0x38], eax
movzx eax, byte [rsp + 0x4e]
mov dword [rsp + 0x130], eax
movzx eax, byte [rsp + 0x4f]
mov dword [rsp + 0x150], eax
movzx ebx, byte [rsp + 0x50]
movzx eax, byte [rsp + 0x51]
mov dword [rsp + 0x58], eax
movzx esi, byte [rsp + 0x52]
movzx r15d, byte [rsp + 0x53]
cmp qword [rsp + 0x1a0], 0
mov rbp, qword [rsp + 0x340]
je 0x180047885
mov r8, qword [rsp + 0x198]
mov rcx, qword [0x18016cb80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x1800478d7
js 0x1800481ae
movzx eax, byte [0x18016cbc0]
mov rcx, qword [0x18016cb80]
test rcx, rcx
jne 0x1800478b8
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800478c8
mov rcx, rax
mov qword [0x18016cb80], rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
jne 0x1800478dc
mov ecx, 1
mov rdx, rdi
call fcn.180106200
ud2
mov eax, 1
mov dword [rsp + 0x30], esi
mov rcx, qword [rbp + 0x10]
mov qword [rsp + 0x70], rcx
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x60], xmm0
mov qword [rbp], rax
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], 0
mov rax, qword [rsp + 0x158]
lea rsi, [rax + 0x18]
cmp qword [rax + 0x20], 0
je 0x180047927
mov r8, qword [rsi]
mov rcx, qword [0x18016cb80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0x70]
mov qword [rsi + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x60]
movdqu xmmword [rsi], xmm0
mov rcx, qword [rsp + 0x158]
mov rax, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x28]
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x98], rax
mov word [rsp + 0xa0], 1
xor ecx, ecx
movabs rdi, 0x8080808080808080
mov dword [rsp + 0x140], ebx
mov dword [rsp + 0x40], r15d
jmp 0x1800479c1
xor r13d, r13d
mov qword [rbp + 0x10], r13
mov cl, 1
mov qword [rsp + 0x190], rcx
mov dword [rsp + 0x2c], r12d
lea rcx, [rsp + 0x60]
call fcn.180041af0
test rax, rax
je 0x1800481b2
mov rsi, rax
mov r13, rdx
test byte [rsp + 0x190], 1
je 0x180047a16
mov rdx, qword [rbp + 0x10]
cmp rdx, qword [rbp + 8]
jne 0x180047a07
mov rcx, rbp
call fcn.18003e980
mov rdx, qword [rbp + 0x10]
mov rax, qword [rbp]
mov byte [rax + rdx], 0x2e
inc rdx
mov qword [rbp + 0x10], rdx
mov rcx, r13
cmp r13, 8
mov qword [rsp + 0x160], rsi
jb 0x180047a71
lea rdx, [rsi + 7]
and rdx, 0xfffffffffffffff8
mov rax, rdx
sub rax, rsi
mov rcx, r13
cmp rax, r13
ja 0x180047a71
test qword [rsi], rdi
jne 0x180047a88
cmp rdx, rsi
mov ecx, 8
cmove rax, rcx
lea rcx, [r13 - 8]
cmp rax, rcx
jae 0x180047a66
test qword [rsi + rax], rdi
jne 0x180047a88
add rax, 8
cmp rax, rcx
jb 0x180047a57
test qword [rsi + rcx], rdi
jne 0x180047a88
jmp 0x180048100
mov rax, rcx
sub rax, 1
jb 0x180048100
cmp byte [rsi + rcx - 1], 0
mov rcx, rax
jns 0x180047a71
mov rax, qword [rbp + 8]
mov rdx, qword [rbp + 0x10]
sub rax, rdx
mov qword [rsp + 0x188], rdx
cmp rax, 3
jbe 0x180047bcf
mov rax, qword [rbp]
mov dword [rax + rdx], 0x2d2d6e78
add rdx, 4
mov qword [rbp + 0x10], rdx
mov cl, 1
mov qword [rsp + 0x190], rcx
test r13, r13
je 0x1800479ce
mov rcx, rsi
add rcx, r13
mov r14, rcx
xor r13d, r13d
xor r8d, r8d
mov rdi, rsi
jmp 0x180047af6
mov byte [rax + rdx], sil
inc rdx
mov qword [rbp + 0x10], rdx
inc r8d
cmp rdi, r14
je 0x180047bf1
movzx esi, byte [rdi]
test sil, sil
js 0x180047b09
inc rdi
inc r13d
jmp 0x180047b8b
mov ecx, esi
and ecx, 0x1f
movzx r9d, byte [rdi + 1]
and r9d, 0x3f
cmp sil, 0xdf
jbe 0x180047b5e
mov r10d, r8d
movzx r8d, byte [rdi + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp sil, 0xf0
jb 0x180047b6c
movzx esi, byte [rdi + 3]
and ecx, 7
shl ecx, 0x12
shl r8d, 6
and esi, 0x3f
or esi, r8d
or esi, ecx
cmp esi, 0x110000
je 0x180047bee
add rdi, 4
jmp 0x180047b79
add rdi, 2
shl ecx, 6
or ecx, r9d
mov esi, ecx
jmp 0x180047b7c
add rdi, 3
shl ecx, 0xc
or r8d, ecx
mov esi, r8d
mov r8d, r10d
inc r13d
cmp esi, 0x80
jae 0x180047aed
cmp rdx, qword [rbp + 8]
jne 0x180047adf
mov rcx, rbp
mov ebx, r15d
mov r15d, r12d
mov r12, r14
mov r14d, r13d
mov r13d, r8d
call fcn.18003e980
mov r8d, r13d
mov r13d, r14d
mov r14, r12
mov r12d, r15d
mov r15d, ebx
mov ebx, dword [rsp + 0x140]
mov rax, qword [rbp]
mov rdx, qword [rbp + 0x10]
jmp 0x180047adf
mov r8d, 4
mov rcx, rbp
mov rdx, qword [rsp + 0x188]
call fcn.1801085a0
mov rdx, qword [rbp + 0x10]
jmp 0x180047aa5
mov r8d, r10d
test r8d, r8d
movabs rdi, 0x8080808080808080
mov rsi, qword [rsp + 0x160]
je 0x180047c39
cmp rdx, qword [rbp + 8]
jne 0x180047c2a
mov rcx, rbp
mov dword [rsp + 0x110], r8d
call fcn.18003e980
mov r8d, dword [rsp + 0x110]
mov rdx, qword [rbp + 0x10]
mov rax, qword [rbp]
mov byte [rax + rdx], 0x2d
inc rdx
mov qword [rbp + 0x10], rdx
cmp r8d, r13d
jae 0x1800479ce
mov eax, 0x80
mov r11d, 0x48
mov ecx, r8d
xor r8d, r8d
mov dword [rsp + 0x110], ecx
mov dword [rsp + 0x138], ecx
mov qword [rsp + 0x118], r14
mov dword [rsp + 0x148], r13d
mov rcx, rsi
jmp 0x180047c81
inc rcx
cmp eax, ebp
jbe 0x180047d16
cmp rcx, r14
je 0x1800481ae
movzx ebp, byte [rcx]
test bpl, bpl
jns 0x180047c76
mov edx, ebp
and edx, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp bpl, 0xdf
jbe 0x180047ce4
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp bpl, 0xf0
jb 0x180047cf2
movzx ebp, byte [rcx + 3]
and edx, 7
shl edx, 0x12
shl r9d, 6
and ebp, 0x3f
or ebp, r9d
or ebp, edx
cmp ebp, 0x110000
je 0x1800481ae
add rcx, 4
jmp 0x180047c79
add rcx, 2
shl edx, 6
or edx, r10d
mov ebp, edx
jmp 0x180047c79
add rcx, 3
shl edx, 0xc
or r9d, edx
mov ebp, r9d
jmp 0x180047c79
inc rcx
cmp ebp, edx
mov r9d, edx
cmovb r9d, ebp
cmp edx, eax
cmovae ebp, r9d
cmp rcx, r14
je 0x180047da9
movzx edx, byte [rcx]
test dl, dl
jns 0x180047d04
mov rdi, r11
mov r9d, edx
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp dl, 0xdf
jbe 0x180047d7d
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp dl, 0xf0
jb 0x180047d93
movzx edx, byte [rcx + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and edx, 0x3f
or edx, r10d
or edx, r9d
cmp edx, 0x110000
mov r11, rdi
je 0x180047da9
add rcx, 4
jmp 0x180047d07
add rcx, 2
shl r9d, 6
or r9d, r11d
mov edx, r9d
mov r11, rdi
jmp 0x180047d07
add rcx, 3
shl r9d, 0xc
or r10d, r9d
mov edx, r10d
mov r11, rdi
jmp 0x180047d07
mov ecx, dword [rsp + 0x138]
inc ecx
je 0x1800481ae
mov r9d, ebp
sub r9d, eax
mov eax, r8d
not eax
xor edx, edx
div ecx
cmp r9d, eax
ja 0x180048139
mov edx, r9d
imul edx, ecx
add edx, r8d
mov dword [rsp + 0x128], edx
mov rcx, rsi
mov dword [rsp + 0x120], ebp
jmp 0x180047e05
mov r9d, dword [rsp + 0x138]
mov r8d, dword [rsp + 0x128]
cmp rcx, r14
je 0x1800480bd
movzx eax, byte [rcx]
test al, al
js 0x180047e15
inc rcx
cmp eax, ebp
jae 0x180047e90
jmp 0x180047e83
mov r9, rcx
mov ecx, eax
and ecx, 0x1f
movzx r8d, byte [r9 + 1]
and r8d, 0x3f
cmp al, 0xdf
jbe 0x180047e63
movzx edx, byte [r9 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp al, 0xf0
jb 0x180047e71
movzx eax, byte [r9 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and eax, 0x3f
or eax, edx
or eax, ecx
cmp eax, 0x110000
je 0x1800480d7
add r9, 4
jmp 0x180047e7c
add r9, 2
shl ecx, 6
or ecx, r8d
mov eax, ecx
jmp 0x180047e7c
add r9, 3
shl ecx, 0xc
or edx, ecx
mov eax, edx
mov rcx, r9
cmp eax, ebp
jae 0x180047e90
inc dword [rsp + 0x128]
je 0x180048139
cmp eax, ebp
jne 0x180047dec
mov qword [rsp + 0x1b0], rcx
lea esi, [r11 + 0x1a]
lea ecx, [r11 - 0x24]
neg ecx
cmp esi, 0x25
mov eax, 0x1a
cmovb ecx, eax
cmp r11d, 0x24
mov eax, 1
cmovae ecx, eax
mov eax, dword [rsp + 0x128]
mov r13d, eax
cmp eax, ecx
jae 0x180047fac
mov edx, 0x61
cmp r13d, 0x1a
jb 0x180047eed
mov edx, 0x16
cmp r13d, 0x24
jae 0x1800481ae
add edx, r13d
mov rcx, qword [rsp + 0x340]
call fcn.180006080
mov eax, dword [rsp + 0x138]
mov r9d, eax
inc r9d
mov r11d, 0xd41d41d5
mov rsi, qword [rsp + 0x160]
je 0x1800481ae
cmp eax, dword [rsp + 0x110]
mov ecx, 2
mov eax, 0x2bc
cmove ecx, eax
xor r8d, r8d
mov eax, dword [rsp + 0x128]
xor edx, edx
div ecx
mov ecx, eax
xor edx, edx
div r9d
add eax, ecx
cmp eax, 0x1c8
mov r12d, dword [rsp + 0x2c]
mov ebx, dword [rsp + 0x140]
mov r15d, dword [rsp + 0x40]
mov r14, qword [rsp + 0x118]
mov r13d, dword [rsp + 0x148]
jb 0x180048074
xor ecx, ecx
mov ebp, dword [rsp + 0x120]
nop
mov edx, eax
imul rdx, r11
shr rdx, 0x20
mov r10d, eax
sub r10d, edx
shr r10d, 1
add r10d, edx
shr r10d, 5
add ecx, 0x24
cmp eax, 0x3e57
mov eax, r10d
ja 0x180047f80
jmp 0x180048080
mov r15d, r11d
neg r15d
mov ebx, 0x48
mov r13d, dword [rsp + 0x128]
jmp 0x18004800e
mov rax, qword [r12]
mov byte [rax + rdx], r14b
inc rdx
mov qword [r12 + 0x10], rdx
mov eax, r13d
xor edx, edx
div edi
lea ecx, [r15 + rbx]
cmp ebx, esi
mov edx, 0x1a
cmovae ecx, edx
cmp ebx, r11d
mov edx, 1
cmovbe ecx, edx
add ebx, 0x24
mov r13d, eax
cmp eax, ecx
jb 0x180047ed3
mov edi, ecx
sub edi, 0x24
je 0x1800481ae
sub r13d, ecx
neg edi
mov eax, r13d
xor edx, edx
div edi
add edx, ecx
mov r14d, 0x61
cmp edx, 0x1a
jb 0x180048041
mov r14d, 0x16
cmp edx, 0x24
jae 0x1800481ae
add r14d, edx
mov r12, qword [rsp + 0x340]
mov rdx, qword [r12 + 0x10]
cmp rdx, qword [r12 + 8]
jne 0x180047fd0
mov rcx, r12
mov rbp, r11
call fcn.18003e980
mov r11, rbp
mov rdx, qword [r12 + 0x10]
jmp 0x180047fd0
xor ecx, ecx
mov r10d, eax
mov ebp, dword [rsp + 0x120]
lea eax, [r10*4]
lea eax, [rax + rax*8]
add r10d, 0x26
xor edx, edx
div r10w
movzx r11d, ax
add r11d, ecx
mov dword [rsp + 0x128], r8d
mov dword [rsp + 0x138], r9d
mov rcx, qword [rsp + 0x1b0]
cmp rcx, r14
jne 0x180047e05
inc r8d
inc ebp
mov dword [rsp + 0x138], r9d
mov eax, ebp
cmp r9d, r13d
jb 0x180047c71
jmp 0x1800480e9
mov r9d, dword [rsp + 0x138]
mov r8d, dword [rsp + 0x128]
jmp 0x1800480bd
movabs rdi, 0x8080808080808080
mov rbp, qword [rsp + 0x340]
jmp 0x1800479ce
mov rax, qword [rbp + 8]
mov rbp, qword [rbp + 0x10]
sub rax, rbp
cmp rax, r13
jb 0x18004818f
mov rsi, qword [rsp + 0x340]
mov rcx, qword [rsi]
add rcx, rbp
mov rdx, qword [rsp + 0x160]
mov r8, r13
call fcn.1800f8be0
add r13, rbp
mov rbp, rsi
jmp 0x1800479bb
movabs rdi, 0x8080808080808080
mov rbp, qword [rsp + 0x340]
mov rax, qword [rbp + 0x10]
mov r12b, 1
mov cl, 1
mov r13, qword [rsp + 0x188]
cmp rax, r13
jb 0x1800479c1
mov r12b, 1
test r13, r13
je 0x1800479b8
cmp rax, r13
jbe 0x180048187
mov rax, qword [rbp]
cmp byte [rax + r13], 0xbf
jg 0x1800479bb
jmp 0x1800481ae
je 0x1800479bb
jmp 0x1800481ae
mov rsi, qword [rsp + 0x340]
mov rcx, rsi
mov rdx, rbp
mov r8, r13
call fcn.1801085a0
mov rbp, qword [rsi + 0x10]
jmp 0x180048110
ud2
mov r13, qword [rsp + 0x210]
mov edx, dword [rsp + 0x180]
mov r8d, dword [rsp + 0x178]
mov r9d, dword [rsp + 0x170]
mov r10d, dword [rsp + 0x168]
mov r11d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x130]
mov edi, dword [rsp + 0x150]
mov rax, qword [rsp + 0x158]
cmp byte [rax + 0x32], 0
jne 0x180044d68
jmp 0x180044f53
ud2
mov rcx, r14
mov r9, rdx
call fcn.1801063d0
ud2
mov rcx, r12
mov rdx, r13
xor r8d, r8d
mov r9, r14
call fcn.1801063d0
ud2
mov rcx, r12
mov rdx, r13
mov r9, r13
call fcn.1801063d0
ud2