Function at 0x1800d0d60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x438
mov qword [rsp + 0x3f8], 0x48ec
mov eax, 0x8662
mov word [rsp + 0x48], ax
mov rax, qword [0x180147280]
mov byte [rsp + 0x34], al
mov dword [rsp + 0x5c], 0x331b0664
mov eax, dword [0x18014711c]
mov word [rsp + 0x38], ax
movzx eax, word [0x180147260]
movsx rax, ax
mov qword [rsp + 0x68], rax
mov eax, 0x69b2
mov word [rsp + 0x4c], ax
mov dword [rsp + 0x58], 0x6afc928
movzx eax, byte [0x1801472b8]
mov byte [rsp + 0x31], al
mov byte [rsp + 0x35], 0x24
mov dword [rsp + 0x54], 0x606f
movsxd rax, dword [0x1801472b4]
mov qword [rsp + 0x88], rax
mov eax, 0xa190
mov word [rsp + 0x3c], ax
movzx eax, byte [0x180147156]
mov byte [rsp + 0x30], al
movzx eax, word [0x180147274]
mov word [rsp + 0x64], ax
mov eax, dword [0x180147258]
mov word [rsp + 0x44], ax
mov eax, 0xffffec7f
mov word [rsp + 0x50], ax
mov eax, 0xffffbddf
mov word [rsp + 0x40], ax
mov byte [rsp + 0x32], 0x76
movzx eax, byte [0x18014719e]
mov byte [rsp + 0x36], al
mov eax, 0x927154f3
mov qword [rsp + 0x70], rax
movzx eax, byte [0x180147172]
mov byte [rsp + 0x33], al
mov eax, dword [0x1801472b0]
mov qword [rsp + 0x80], rax
movzx eax, byte [0x180147156]
mov byte [rsp + 0x11c], al
mov dword [rsp + 0x398], 0x7a4d71e2
mov dword [rsp + 0x3f0], 0x4f6f694b
mov dword [rsp + 0x39c], 0xaef358de
mov byte [rsp + 0x11d], 0x23
mov dword [rsp + 0x3a0], 6
mov eax, 0xce8495a0
mov qword [rsp + 0x400], rax
mov eax, 0xffff89be
mov word [rsp + 0x2f8], ax
movzx eax, word [0x180147260]
cwde
mov dword [rsp + 0x3a4], eax
mov eax, dword [0x180147258]
mov word [rsp + 0x2f4], ax
mov qword [rsp + 0x408], 0xbd
mov dword [rsp + 0x3a8], 0x3162
mov dword [rsp + 0x3ac], 0xb4741073
mov eax, 0x2e6
mov word [rsp + 0x2e0], ax
mov qword [rsp + 0x410], 0x14e4
mov eax, dword [0x180147290]
mov dword [rsp + 0x3b0], eax
mov eax, dword [0x181593c50]
mov dword [rsp + 0xf4], eax
mov rax, qword [0x180147240]
cmp qword [0x180147290], rax
ja 0x1800d0f58
mov dword [rsp + 0x294], 1
jmp 0x1800d0f63
mov dword [rsp + 0x294], 0
cmp qword [0x180147290], 0xa
jg 0x1800d0f7a
mov dword [rsp + 0x290], 1
jmp 0x1800d0f85
mov dword [rsp + 0x290], 0
mov eax, dword [rsp + 0x290]
cmp dword [rsp + 0x294], eax
jge 0x1800d10eb
mov eax, dword [rsp + 0x5c]
cdqe
movabs rcx, 0x4e683d1049932
cmp rax, rcx
jl 0x1800d0fbb
mov dword [rsp + 0x29c], 1
jmp 0x1800d0fc6
mov dword [rsp + 0x29c], 0
mov rax, qword [rsp + 0x88]
not rax
mov ecx, 0xde095753
cmp rax, rcx
jae 0x1800d0fe8
mov dword [rsp + 0x298], 1
jmp 0x1800d0ff3
mov dword [rsp + 0x298], 0
mov eax, dword [rsp + 0x298]
cmp dword [rsp + 0x29c], eax
je 0x1800d1010
mov dword [rsp + 0x138], 1
jmp 0x1800d101b
mov dword [rsp + 0x138], 0
mov rax, qword [rsp + 0x68]
test rax, rax
jne 0x1800d1039
cmp dword [rsp + 0x58], 0
jne 0x1800d1039
mov dword [rsp + 0x130], 0
jmp 0x1800d1044
mov dword [rsp + 0x130], 1
movzx eax, word [rsp + 0x48]
movzx eax, ax
cmp rax, qword [rsp + 0x70]
ja 0x1800d1060
mov dword [rsp + 0x2a0], 1
jmp 0x1800d106b
mov dword [rsp + 0x2a0], 0
mov eax, dword [rsp + 0x2a0]
cmp dword [rsp + 0x130], eax
jl 0x1800d1088
mov dword [rsp + 0x134], 1
jmp 0x1800d1093
mov dword [rsp + 0x134], 0
mov eax, dword [rsp + 0x134]
mov ecx, dword [rsp + 0x138]
add ecx, eax
mov eax, ecx
not eax
test eax, eax
je 0x1800d10c6
mov qword [0x180147230], 2
movsx eax, byte [rsp + 0x30]
sub eax, 0xb3dcc13
mov byte [rsp + 0x35], al
jmp 0x1800d10eb
mov eax, dword [0x18014724c]
test eax, eax
jne 0x1800d10eb
mov rax, qword [0x180147290]
add rax, 0x16
mov rcx, qword [rsp + 0x70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0xf4]
add eax, 0xa0
mov dword [rsp + 0x304], eax
mov eax, dword [rsp + 0xf4]
add eax, 0x3bd
mov dword [rsp + 0x3b4], eax
mov dword [rsp + 0x5c], 1
movzx eax, byte [0x18014719e]
movzx eax, al
movsx ecx, byte [0x18014711b]
lea eax, [rcx + rax - 0x3444]
mov byte [0x18014711b], al
movsx eax, word [0x180147174]
mov ecx, dword [0x180147264]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x5c]
imul ecx, eax
mov eax, ecx
mov eax, eax
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x13c], eax
cmp dword [rsp + 0x13c], 0
je 0x1800d1180
cmp dword [rsp + 0x13c], 1
je 0x1800d11aa
jmp 0x1800d11c0
movzx eax, byte [0x18014719e]
movzx eax, al
xor eax, 0xd4
movsx ecx, byte [rsp + 0x31]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x31], al
mov eax, 1
mov word [0x180147224], ax
jmp 0x1800d11c0
movzx eax, word [rsp + 0x44]
movsx rax, ax
sub rax, 0x21000604
not rax
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0xf4]
add eax, 0xac
mov dword [rsp + 0x300], eax
xor edx, edx
xor ecx, ecx
call fcn.1800d0450
movzx eax, al
mov qword [0x180147268], rax
movzx eax, word [0x18014728c]
cwde
test eax, eax
je 0x1800d11f9
mov byte [0x18014711b], 0xb7
mov eax, dword [0x181593c50]
mov dword [rsp + 0xf8], eax
mov eax, dword [rsp + 0x54]
movsx cx, byte [rsp + 0x30]
movzx edx, byte [rsp + 0x34]
movzx edx, dl
movzx r8d, byte [0x18014719e]
movzx r8d, r8b
mov word [rsp + 0xf0], r8w
movzx r9d, word [0x1801472b4]
mov word [rsp + 0x20], r9w
movzx r9d, ax
movzx r8d, cx
movzx eax, word [rsp + 0xf0]
movzx ecx, ax
call fcn.1800d09f0
movzx eax, ax
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
je 0x1800d1279
movsx eax, word [0x180147248]
sub eax, 0x45739b39
mov word [rsp + 0x44], ax
jmp 0x1800d131f
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x1800d131f
mov rax, qword [rsp + 0x88]
mov rcx, qword [0x180147250]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x180147250]
add rcx, rax
mov rax, rcx
mov qword [0x180147250], rax
cmp qword [0x180147230], 0
jne 0x1800d12ca
mov dword [rsp + 0x140], 1
jmp 0x1800d12d5
mov dword [rsp + 0x140], 0
movzx eax, byte [rsp + 0x32]
movsx eax, al
mov ecx, dword [rsp + 0x140]
and ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x30]
movsx edx, byte [0x180147173]
add ecx, edx
sub eax, ecx
test eax, eax
jne 0x1800d1309
mov dword [rsp + 0x144], 1
jmp 0x1800d1314
mov dword [rsp + 0x144], 0
mov eax, dword [rsp + 0x144]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0xf8]
add eax, 0x1f5
mov dword [rsp + 0x2c0], eax
movzx eax, byte [rsp + 0x32]
movsx eax, al
test eax, eax
jne 0x1800d134b
mov dword [rsp + 0x14c], 1
jmp 0x1800d1356
mov dword [rsp + 0x14c], 0
movzx eax, word [rsp + 0x4c]
cwde
test eax, eax
jne 0x1800d136d
mov dword [rsp + 0x148], 1
jmp 0x1800d1378
mov dword [rsp + 0x148], 0
mov eax, dword [rsp + 0x148]
mov ecx, dword [rsp + 0x14c]
sub ecx, eax
mov eax, ecx
cdqe
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
movabs rcx, 0xaae0e6d1c6504
imul rax, rcx
mov byte [0x180147176], al
mov eax, dword [rsp + 0xf8]
add eax, 0x16e
mov dword [rsp + 0x3b8], eax
cmp dword [0x180147264], 0
je 0x1800d1403
movzx eax, word [rsp + 0x44]
movsx rax, ax
mov rcx, qword [rsp + 0x68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
movzx eax, word [rsp + 0x4c]
mov ecx, 2
imul rcx, rcx, 0x427e
lea rdx, [0x1817230a0]
mov word [rdx + rcx], ax
jmp 0x1800d1419
mov eax, dword [0x1801472b4]
not eax
test eax, eax
je 0x1800d1419
mov eax, 0xa9
mov word [rsp + 0x3c], ax
mov eax, dword [rsp + 0xf8]
add eax, 0x202
mov dword [rsp + 0x2c4], eax
mov qword [rsp + 0x68], 0
mov eax, 8
imul rax, rax, 0xbc4a
lea rcx, [0x18164ee70]
movzx edx, byte [0x180147172]
movzx edx, dl
sub rdx, qword [rcx + rax]
mov rax, rdx
mov byte [0x180147172], al
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x3d0], rax
cmp qword [rsp + 0x3d0], 0
je 0x1800d1479
jmp 0x1800d14ae
cmp dword [0x180147274], 0
je 0x1800d1492
movsx eax, word [0x180147248]
mov dword [rsp + 0x150], eax
jmp 0x1800d14a1
movzx eax, byte [rsp + 0x33]
movsx eax, al
mov dword [rsp + 0x150], eax
mov eax, dword [rsp + 0x150]
mov dword [0x180147298], eax
mov eax, dword [0x181593c50]
mov dword [rsp + 0xfc], eax
mov byte [rsp + 0x34], 1
movzx eax, word [rsp + 0x50]
movsx rax, ax
movabs rcx, 0x65537705e12c7
add rax, rcx
mov word [rsp + 0x50], ax
movzx eax, byte [rsp + 0x34]
mov byte [rsp + 0x2fc], al
cmp byte [rsp + 0x2fc], 1
je 0x1800d14f5
jmp 0x1800d1512
mov rax, qword [0x180147268]
sub rax, 0x3367
mov rcx, qword [rsp + 0x68]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0xfc]
add eax, 0x38
mov dword [rsp + 0x3bc], eax
cmp dword [0x1801472b4], 0
je 0x1800d153d
movzx eax, byte [rsp + 0x36]
movzx eax, al
mov dword [rsp + 0x154], eax
jmp 0x1800d154a
movzx eax, word [rsp + 0x44]
cwde
mov dword [rsp + 0x154], eax
movzx eax, byte [rsp + 0x154]
mov byte [0x180147176], al
mov eax, dword [rsp + 0xfc]
add eax, 0x1e9
mov dword [rsp + 0x3c4], eax
movzx eax, word [0x180147270]
movsx rax, ax
movabs rcx, 0x85c227ecf7bf8
imul rax, rcx
mov dword [0x180147298], eax
movsx eax, word [0x1801472b8]
movzx ecx, word [0x180147270]
movsx ecx, cx
imul eax, ecx
mov word [0x1801472b8], ax
mov eax, dword [rsp + 0xfc]
add eax, 0x164
mov dword [rsp + 0x24c], eax
movsx eax, word [0x180147174]
sub eax, 0x79
cdqe
mov qword [rsp + 0x70], rax
movzx edx, byte [0x180147250]
xor ecx, ecx
call fcn.1800d0450
movzx eax, al
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
jb 0x1800d179b
cmp dword [0x1801472b4], 0
je 0x1800d1665
movzx eax, byte [0x18014719e]
movzx eax, al
movabs rcx, 0xac774433da68a
sub rax, rcx
mov word [rsp + 0x4c], ax
mov eax, dword [rsp + 0x54]
mov ecx, dword [0x18014724c]
imul eax, ecx
mov eax, eax
movzx ecx, word [rsp + 0x48]
movzx ecx, cx
add rax, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
movzx ecx, byte [rsp + 0x36]
movzx ecx, cl
not ecx
mov edx, dword [0x1801472b4]
xor edx, ecx
mov ecx, edx
movsxd rcx, ecx
mov rdx, qword [0x180147290]
imul rdx, rcx
mov rcx, rdx
imul rax, rcx
mov byte [rsp + 0x36], al
jmp 0x1800d179b
movsx eax, byte [rsp + 0x31]
movzx ecx, byte [0x180147176]
movzx ecx, cl
cmp eax, ecx
jle 0x1800d1685
mov dword [rsp + 0x160], 1
jmp 0x1800d1690
mov dword [rsp + 0x160], 0
cmp qword [0x180147240], 0
jne 0x1800d16a7
mov dword [rsp + 0x158], 1
jmp 0x1800d16b2
mov dword [rsp + 0x158], 0
movzx eax, word [0x1801471dc]
cmp eax, dword [rsp + 0x158]
jne 0x1800d16cf
mov dword [rsp + 0x15c], 1
jmp 0x1800d16da
mov dword [rsp + 0x15c], 0
mov eax, dword [rsp + 0x15c]
cmp dword [rsp + 0x160], eax
jl 0x1800d1711
movzx eax, word [0x1801471dc]
mov rcx, qword [rsp + 0x70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x70], rax
jmp 0x1800d179b
cmp dword [rsp + 0x58], 0
je 0x1800d1761
movzx eax, word [rsp + 0x50]
cwde
movzx ecx, word [rsp + 0x38]
movsx ecx, cx
movabs rdx, 0xffffffff7cb7d8ab
lea rcx, [rcx + rdx]
add eax, ecx
mov word [rsp + 0x38], ax
movzx eax, byte [rsp + 0x32]
movsx eax, al
movzx ecx, word [0x18014728c]
movsx ecx, cx
sub eax, ecx
movzx ecx, byte [rsp + 0x32]
movsx ecx, cl
or ecx, eax
mov eax, ecx
mov byte [rsp + 0x32], al
jmp 0x1800d179b
movzx eax, word [rsp + 0x48]
movzx eax, ax
test eax, eax
je 0x1800d179b
movsx rax, byte [0x1801471c6]
movabs rcx, 0x659f91c9d7e60
imul rax, rcx
movzx ecx, word [0x18014727c]
movsx rcx, cx
add rcx, rax
mov rax, rcx
mov word [0x18014727c], ax
movsx rax, byte [rsp + 0x35]
mov rcx, qword [0x180147268]
add rax, rcx
mov byte [rsp + 0x35], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800d0730
cwde
mov dword [0x18014711c], eax
cmp qword [rsp + 0x80], 0
jne 0x1800d1851
movzx eax, word [rsp + 0x38]
movsx rax, ax
cmp rax, qword [0x180147240]
jbe 0x1800d17f0
mov dword [rsp + 0x164], 1
jmp 0x1800d17fb
mov dword [rsp + 0x164], 0
mov eax, dword [rsp + 0x164]
not eax
test eax, eax
jne 0x1800d1851
movzx eax, word [rsp + 0x38]
cwde
test eax, eax
je 0x1800d181e
movzx eax, byte [rsp + 0x33]
movsx eax, al
test eax, eax
jne 0x1800d1851
movzx eax, byte [0x180147177]
movsx eax, al
test eax, eax
jne 0x1800d1839
mov dword [rsp + 0x168], 1
jmp 0x1800d1844
mov dword [rsp + 0x168], 0
mov eax, dword [rsp + 0x54]
cmp eax, dword [rsp + 0x168]
je 0x1800d18cc
mov qword [0x180147280], 0
movabs rax, 0x41f5a2b943da9
mov rcx, qword [0x180147228]
imul rcx, rax
mov rax, rcx
mov word [0x180147224], ax
movsx eax, byte [rsp + 0x30]
movzx ecx, byte [0x180147157]
movzx ecx, cl
xor eax, ecx
mov byte [rsp + 0x30], al
mov rax, qword [0x180147280]
mov qword [rsp + 0x3d8], rax
cmp qword [rsp + 0x3d8], 0
je 0x1800d18ac
jmp 0x1800d18ca
movsx eax, byte [rsp + 0x31]
imul eax, eax, 0xdd53d4fb
mov word [rsp + 0x3c], ax
movzx eax, word [rsp + 0x44]
cwde
shl eax, 3
mov word [rsp + 0x38], ax
jmp 0x1800d18f2
mov eax, dword [0x18014720c]
test eax, eax
je 0x1800d18f2
movzx eax, word [0x18014725c]
movsx ecx, word [0x180147174]
lea eax, [rcx + rax + 0x4bac3a4f]
mov word [0x180147174], ax
mov qword [rsp + 0x378], 0
mov qword [rsp + 0x2a8], 8
mov rax, qword [0x180147268]
test rax, rax
je 0x1800d1937
movsx eax, byte [rsp + 0x31]
test eax, eax
je 0x1800d1937
mov eax, dword [0x180147258]
cdqe
add rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x114], 0
movzx eax, word [rsp + 0x3c]
movzx eax, ax
test eax, eax
je 0x1800d1968
movsx rax, byte [0x180147173]
movabs rcx, 0x30b1aaff772b2
add rax, rcx
mov word [rsp + 0x3c], ax
movzx eax, byte [rsp + 0x36]
movzx eax, al
test eax, eax
je 0x1800d19ab
movzx eax, byte [0x180147172]
movzx eax, al
test eax, eax
je 0x1800d1990
mov eax, 0xffffc1a8
mov word [0x180147270], ax
jmp 0x1800d19a9
movsx eax, word [0x180147248]
imul eax, eax, 0x40d2
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
jmp 0x1800d19c4
cmp qword [0x180147240], 0
je 0x1800d19c4
mov rax, qword [0x1801472a8]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x418]
lea rcx, str.tenant_display_nam
mov rdi, rax
mov rsi, rcx
mov ecx, 0x13
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x418]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
cdqe
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x90], 0
mov eax, 0xffffb6af
mov word [rsp + 0x38], ax
mov dword [rsp + 0x2f0], 0x40
movsx eax, word [0x1801472b8]
movzx ecx, byte [0x180147156]
cmp eax, ecx
je 0x1800d1a34
mov dword [rsp + 0x170], 1
jmp 0x1800d1a3f
mov dword [rsp + 0x170], 0
movsx eax, word [0x1801472b8]
cmp eax, 0x2c
je 0x1800d1a58
mov dword [rsp + 0x16c], 1
jmp 0x1800d1a63
mov dword [rsp + 0x16c], 0
mov eax, dword [rsp + 0x16c]
cmp dword [rsp + 0x170], eax
jg 0x1800d1a75
jmp 0x1800d1aa7
movsx eax, byte [rsp + 0x35]
mov ecx, dword [rsp + 0x58]
add ecx, eax
mov eax, ecx
mov eax, eax
movsx rcx, byte [rsp + 0x35]
mov rdx, qword [rsp + 0x68]
sub rcx, rdx
movsx rdx, byte [rsp + 0x30]
imul rcx, rdx
xor rax, rcx
not rax
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x2bc], 4
mov rax, qword [rsp + 0x68]
sub rax, qword [rsp + 0x70]
test rax, rax
je 0x1800d1ace
mov dword [rsp + 0x180], 1
jmp 0x1800d1ad9
mov dword [rsp + 0x180], 0
mov eax, dword [rsp + 0x54]
test eax, eax
je 0x1800d1afc
movzx eax, word [0x18014728c]
cwde
not eax
test eax, eax
je 0x1800d1afc
mov dword [rsp + 0x178], 1
jmp 0x1800d1b07
mov dword [rsp + 0x178], 0
cmp qword [0x180147228], 0x22
jg 0x1800d1b1e
mov dword [rsp + 0x174], 1
jmp 0x1800d1b29
mov dword [rsp + 0x174], 0
mov eax, dword [rsp + 0x174]
cmp dword [rsp + 0x178], eax
jl 0x1800d1b46
mov dword [rsp + 0x17c], 1
jmp 0x1800d1b51
mov dword [rsp + 0x17c], 0
mov eax, dword [rsp + 0x17c]
cmp dword [rsp + 0x180], eax
je 0x1800d1b92
mov eax, dword [rsp + 0x5c]
add eax, 0x1ee5aad1
cdqe
mov qword [0x180147250], rax
movzx eax, word [rsp + 0x40]
movsx rax, ax
movabs rcx, 0xbd5813553c39c
sub rax, rcx
mov dword [rsp + 0x58], eax
jmp 0x1800d1c3d
mov eax, dword [0x180147264]
shr eax, 2
mov byte [rsp + 0x32], al
movsx eax, byte [rsp + 0x30]
add eax, 0x72ed
cdqe
movzx ecx, word [rsp + 0x48]
movzx ecx, cx
not ecx
movsxd rcx, ecx
mov rdx, qword [rsp + 0x68]
not rdx
add rcx, rdx
imul rax, rcx
test rax, rax
jne 0x1800d1bd9
mov dword [rsp + 0x184], 1
jmp 0x1800d1be4
mov dword [rsp + 0x184], 0
movzx eax, word [rsp + 0x38]
cwde
movzx ecx, word [rsp + 0x4c]
movsx ecx, cx
xor eax, ecx
movzx ecx, word [rsp + 0x38]
movsx ecx, cx
not ecx
mov edx, dword [rsp + 0x5c]
not edx
add ecx, edx
imul eax, ecx
xor eax, dword [rsp + 0x184]
test eax, eax
jne 0x1800d1c22
mov qword [rsp + 0x368], 1
jmp 0x1800d1c2e
mov qword [rsp + 0x368], 0
mov rax, qword [rsp + 0x368]
mov qword [0x180147250], rax
mov dword [rsp + 0x2cc], 0x20
mov dword [rsp + 0x2d4], 0x100
movzx eax, word [rsp + 0x38]
movsx rax, ax
sub rax, qword [0x180147290]
movzx ecx, word [rsp + 0x38]
movsx rcx, cx
sub rcx, rax
mov rax, rcx
mov word [rsp + 0x38], ax
mov byte [rsp + 0xb0], 0x58
mov byte [rsp + 0xb1], 0x48
mov byte [rsp + 0xb2], 0x83
mov byte [rsp + 0xb3], 0xe8
mov byte [rsp + 0xb4], 5
mov byte [rsp + 0xb5], 0x50
mov byte [rsp + 0xb6], 0x51
mov byte [rsp + 0xb7], 0x52
mov byte [rsp + 0xb8], 0x41
mov byte [rsp + 0xb9], 0x50
mov byte [rsp + 0xba], 0x41
mov byte [rsp + 0xbb], 0x51
mov byte [rsp + 0xbc], 0x41
mov byte [rsp + 0xbd], 0x52
mov byte [rsp + 0xbe], 0x41
mov byte [rsp + 0xbf], 0x53
mov byte [rsp + 0xc0], 0x48
mov byte [rsp + 0xc1], 0xb9
mov byte [rsp + 0xc2], 0x88
mov byte [rsp + 0xc3], 0x77
mov byte [rsp + 0xc4], 0x66
mov byte [rsp + 0xc5], 0x55
mov byte [rsp + 0xc6], 0x44
mov byte [rsp + 0xc7], 0x33
mov byte [rsp + 0xc8], 0x22
mov byte [rsp + 0xc9], 0x11
mov byte [rsp + 0xca], 0x90
mov byte [rsp + 0xcb], 0x90
mov byte [rsp + 0xcc], 0x48
mov byte [rsp + 0xcd], 0x89
mov byte [rsp + 0xce], 8
mov byte [rsp + 0xcf], 0x90
mov byte [rsp + 0xd0], 0x90
mov byte [rsp + 0xd1], 0x48
mov byte [rsp + 0xd2], 0x83
mov byte [rsp + 0xd3], 0xec
mov byte [rsp + 0xd4], 0x40
mov byte [rsp + 0xd5], 0x90
mov byte [rsp + 0xd6], 0x90
mov byte [rsp + 0xd7], 0xe8
mov byte [rsp + 0xd8], 0x11
mov byte [rsp + 0xd9], 0
mov byte [rsp + 0xda], 0
mov byte [rsp + 0xdb], 0
mov byte [rsp + 0xdc], 0x48
mov byte [rsp + 0xdd], 0x83
mov byte [rsp + 0xde], 0xc4
mov byte [rsp + 0xdf], 0x40
mov byte [rsp + 0xe0], 0x41
mov byte [rsp + 0xe1], 0x5b
mov byte [rsp + 0xe2], 0x41
mov byte [rsp + 0xe3], 0x5a
mov byte [rsp + 0xe4], 0x41
mov byte [rsp + 0xe5], 0x59
mov byte [rsp + 0xe6], 0x41
mov byte [rsp + 0xe7], 0x58
mov byte [rsp + 0xe8], 0x5a
mov byte [rsp + 0xe9], 0x59
mov byte [rsp + 0xea], 0x58
mov byte [rsp + 0xeb], 0xff
mov byte [rsp + 0xec], 0xe0
mov byte [rsp + 0xed], 0x90
mov rcx, qword [rsp + 0x458]
call fcn.180041bd0
mov qword [rsp + 0x370], rax
cmp qword [rsp + 0x370], 0
jne 0x1800d1f5f
movzx eax, word [0x180147278]
movsx rax, ax
cmp rax, qword [rsp + 0x70]
ja 0x1800d1f01
mov rax, qword [0x180147280]
not rax
mov ecx, dword [0x18014711c]
movsxd rcx, ecx
sub rax, rcx
movzx ecx, byte [rsp + 0x32]
movsx ecx, cl
not ecx
movzx edx, byte [0x18014719e]
movzx edx, dl
add ecx, edx
movsxd rcx, ecx
movzx edx, word [rsp + 0x4c]
movsx rdx, dx
movabs rdi, 0xd7591aaa58fa8
imul rdx, rdi
not rdx
add rcx, rdx
sub rax, rcx
mov qword [0x180147250], rax
movzx eax, word [rsp + 0x40]
mov word [0x180147248], ax
jmp 0x1800d1f31
movzx eax, byte [0x180147157]
movzx eax, al
test eax, eax
je 0x1800d1f31
movsx rax, byte [0x1801471c6]
mov ecx, dword [rsp + 0x54]
mov ecx, ecx
movabs rdx, 0xcbd131c7d3603
add rcx, rdx
add rax, rcx
mov dword [rsp + 0x54], eax
mov eax, 2
imul rax, rax, 0x72aa
lea rcx, [0x1817230a0]
movzx eax, word [rcx + rax]
mov ecx, dword [0x18014711c]
sub ecx, eax
mov eax, ecx
mov dword [0x18014711c], eax
xor eax, eax
jmp 0x1800d44e7
mov rdx, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x370]
call fcn.180043360
mov qword [rsp + 0x120], rax
cmp qword [rsp + 0x120], 0
jne 0x1800d2055
movzx eax, byte [rsp + 0x34]
movzx eax, al
movzx ecx, byte [rsp + 0x36]
movzx ecx, cl
mov word [rsp + 0x20], ax
movzx r9d, cx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800d09f0
mov word [0x180147288], ax
movzx eax, word [0x180147288]
test eax, eax
je 0x1800d2000
movsx eax, word [rsp + 0x64]
movzx ecx, byte [0x18014719e]
movzx ecx, cl
cmp eax, ecx
je 0x1800d1feb
movzx eax, word [rsp + 0x3c]
movzx eax, ax
sub eax, 4
cdqe
mov qword [0x1801472a8], rax
jmp 0x1800d2000
xor eax, eax
cmp eax, 0xfaefafed
je 0x1800d2000
mov eax, 0x1911
mov word [0x180147260], ax
movzx eax, byte [rsp + 0x32]
movsx eax, al
test eax, eax
je 0x1800d2028
mov rax, qword [0x180147268]
sub rax, 8
mov ecx, dword [rsp + 0x54]
mov ecx, ecx
sub rax, rcx
mov byte [0x180147156], al
jmp 0x1800d204e
movzx eax, word [rsp + 0x4c]
cwde
test eax, eax
je 0x1800d204e
movsx rax, byte [rsp + 0x31]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
xor eax, eax
jmp 0x1800d44e7
mov rax, qword [rsp + 0x470]
add rax, 0x3e
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x120]
mov r8, qword [rsp + 0x450]
mov edx, 3
lea rcx, [0x1800d4cd0]
call fcn.180082490
mov qword [rsp + 0x128], rax
mov eax, dword [rsp + 0x300]
mov ecx, dword [rsp + 0x304]
cmp eax, ecx
je 0x1800d25a8
cmp dword [0x180147274], 0
je 0x1800d2161
mov byte [0x180147157], 1
mov rax, qword [rsp + 0x88]
add rax, qword [0x180147290]
mov qword [rsp + 0x88], rax
imul rax, qword [rsp + 0x70], 0xb69a
mov qword [0x180147228], rax
movzx eax, byte [0x180147157]
mov byte [rsp + 0x188], al
cmp byte [rsp + 0x188], 0
je 0x1800d2104
cmp byte [rsp + 0x188], 1
je 0x1800d2125
jmp 0x1800d215f
mov eax, 0xf66245b4
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0x58]
movabs rcx, 0xc95c20ced061
add rax, rcx
mov byte [rsp + 0x32], al
jmp 0x1800d215f
movzx eax, byte [rsp + 0x32]
movsx eax, al
movsx ecx, word [0x1801472b8]
add eax, ecx
movzx ecx, byte [rsp + 0x32]
movsx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x32], al
movsxd rax, dword [0x180147274]
movabs rcx, 0x4df150a7ec31a
add rax, rcx
mov word [rsp + 0x3c], ax
jmp 0x1800d21a4
movsx eax, byte [rsp + 0x31]
test eax, eax
je 0x1800d21a4
mov eax, dword [0x181593c50]
mov qword [rsp + 0x68], rax
movsx eax, byte [rsp + 0x30]
test eax, eax
je 0x1800d218d
mov eax, dword [0x180147298]
mov dword [rsp + 0x18c], eax
jmp 0x1800d2198
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x18c], eax
movzx eax, byte [rsp + 0x18c]
mov byte [rsp + 0x36], al
cmp qword [rsp + 0x128], 0
jne 0x1800d25a8
mov qword [rsp + 0x70], 3
movsx eax, byte [rsp + 0x31]
movsx ecx, byte [rsp + 0x30]
sub eax, ecx
movsx ecx, byte [rsp + 0x31]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x31], al
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x2e8], rax
cmp qword [rsp + 0x2e8], 0
je 0x1800d220c
cmp qword [rsp + 0x2e8], 1
je 0x1800d2266
cmp qword [rsp + 0x2e8], 3
je 0x1800d2295
jmp 0x1800d22b0
movzx eax, byte [0x18014719e]
movzx eax, al
mov rcx, qword [rsp + 0x88]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
movzx eax, byte [rsp + 0x33]
movsx rax, al
mov rcx, qword [0x180147238]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x180147238]
add rcx, rax
mov rax, rcx
mov qword [0x180147238], rax
jmp 0x1800d22b0
movzx eax, word [rsp + 0x40]
movsx rax, ax
movabs rcx, 0xde59bf052b615
sub rax, rcx
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x58]
add eax, 0xa319913
mov word [0x18014727c], ax
jmp 0x1800d22b0
movsx eax, byte [rsp + 0x31]
sub eax, 0xdb
movzx ecx, byte [0x18014719f]
sub ecx, eax
mov eax, ecx
mov byte [0x18014719f], al
movzx eax, word [rsp + 0x3c]
movzx eax, ax
sub eax, 0xd1c558bc
mov eax, eax
mov qword [0x1801472a8], rax
movsx eax, byte [0x18014711b]
test eax, eax
je 0x1800d22e1
movsx eax, byte [0x18014711b]
mov dword [rsp + 0x190], eax
jmp 0x1800d22ee
movzx eax, word [rsp + 0x38]
cwde
mov dword [rsp + 0x190], eax
movzx eax, byte [rsp + 0x190]
mov byte [rsp + 0x34], al
mov eax, dword [0x181593c50]
mov dword [rsp + 0x100], eax
movzx eax, byte [0x180147172]
movzx eax, al
test eax, eax
je 0x1800d232e
mov eax, 0x95
mov word [0x180147270], ax
mov qword [0x180147230], 0xb4
jmp 0x1800d2353
movsx eax, byte [rsp + 0x30]
test eax, eax
je 0x1800d2353
movzx eax, byte [0x180147157]
movzx eax, al
movzx ecx, word [0x180147278]
movsx ecx, cx
add eax, ecx
mov byte [0x180147157], al
mov eax, dword [rsp + 0x100]
add eax, 0x20a
mov dword [rsp + 0x1a0], eax
movsx eax, word [0x180147224]
movsx ecx, word [0x180147174]
cmp eax, ecx
jg 0x1800d2385
mov dword [rsp + 0x198], 1
jmp 0x1800d2390
mov dword [rsp + 0x198], 0
movsx eax, word [0x180147224]
cmp eax, 0x42
jg 0x1800d23a9
mov dword [rsp + 0x194], 1
jmp 0x1800d23b4
mov dword [rsp + 0x194], 0
mov eax, dword [rsp + 0x194]
cmp dword [rsp + 0x198], eax
jg 0x1800d23fe
movzx eax, word [rsp + 0x48]
movzx eax, ax
mov rcx, qword [0x1801472a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1801472a8]
sub rcx, rax
mov rax, rcx
mov qword [0x1801472a8], rax
mov rax, qword [rsp + 0x88]
mov word [0x18014727c], ax
jmp 0x1800d2410
movzx eax, word [rsp + 0x50]
cwde
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x100]
add eax, 0x3e2
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x70]
mov dword [0x180147264], eax
mov eax, dword [rsp + 0x100]
add eax, 0x137
mov dword [rsp + 0x308], eax
mov eax, dword [rsp + 0x19c]
mov ecx, dword [rsp + 0x1a0]
sub eax, ecx
mov ecx, dword [rsp + 0x19c]
mov edx, dword [rsp + 0x1a0]
imul ecx, edx
imul eax, ecx
mov ecx, dword [rsp + 0x308]
cmp eax, ecx
je 0x1800d25a8
mov r8w, 0xff
mov dx, 0xc4
mov cx, 0xc0
call fcn.1800d0730
mov word [0x180147260], ax
movzx eax, word [rsp + 0x4c]
cwde
movzx ecx, byte [0x18014719f]
cmp eax, ecx
je 0x1800d252d
mov byte [0x18014719f], 1
mov byte [0x180147176], 0x1d
movzx eax, byte [0x18014719f]
mov byte [rsp + 0x1a4], al
cmp byte [rsp + 0x1a4], 0
je 0x1800d24d3
cmp byte [rsp + 0x1a4], 1
je 0x1800d250b
jmp 0x1800d252b
movsx rax, byte [rsp + 0x30]
mov rcx, qword [0x180147250]
lea rax, [rax + rcx + 0x5f00]
mov byte [rsp + 0x30], al
mov eax, dword [0x180147258]
cdqe
mov rcx, qword [0x180147290]
imul rcx, rax
mov rax, rcx
mov qword [0x180147290], rax
jmp 0x1800d252b
movzx eax, byte [rsp + 0x33]
movsx eax, al
imul eax, eax, 0xd419
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x54]
add eax, dword [0x1801472a0]
mov dword [rsp + 0x54], eax
jmp 0x1800d2572
movzx eax, word [rsp + 0x50]
cwde
test eax, eax
jne 0x1800d254c
mov eax, dword [rsp + 0x5c]
test eax, eax
jne 0x1800d254c
mov dword [rsp + 0x1a8], 0
jmp 0x1800d2557
mov dword [rsp + 0x1a8], 1
movzx eax, word [rsp + 0x4c]
cwde
cmp eax, dword [rsp + 0x1a8]
jl 0x1800d2572
mov eax, 0x244c
mov word [0x18014728c], ax
mov rax, qword [rsp + 0x88]
imul rax, rax, 0xa4a9
mov byte [rsp + 0x30], al
movsx eax, word [0x1801472b8]
mov ecx, dword [rsp + 0x58]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x58]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x58], eax
xor eax, eax
jmp 0x1800d44e7
movabs rax, 0xfffb238fc9d677ba
sub rax, qword [0x180147230]
mov word [rsp + 0x4c], ax
movzx eax, byte [rsp + 0x34]
movzx eax, al
xor eax, 0xa2
cdqe
mov rcx, qword [rsp + 0x68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x94], 0
jmp 0x1800d25fa
mov eax, dword [rsp + 0x94]
inc eax
mov dword [rsp + 0x94], eax
cmp dword [rsp + 0x94], 8
jge 0x1800d269e
mov qword [0x180147280], 0x7270
movsx eax, byte [rsp + 0x35]
movzx ecx, byte [rsp + 0x33]
movsx ecx, cl
sub eax, ecx
mov word [rsp + 0x44], ax
movzx eax, word [0x18014728c]
cwde
mov ecx, dword [0x1801472a4]
sub eax, ecx
mov word [0x18014728c], ax
mov rax, qword [rsp + 0x68]
test rax, rax
jne 0x1800d2655
mov dword [rsp + 0x1ac], 1
jmp 0x1800d2660
mov dword [rsp + 0x1ac], 0
mov eax, dword [0x18014711c]
mov ecx, dword [rsp + 0x1ac]
add ecx, eax
mov eax, ecx
mov word [rsp + 0x50], ax
movsxd rax, dword [rsp + 0x94]
movsxd rcx, dword [rsp + 0x94]
mov rdx, qword [rsp + 0x120]
movzx eax, byte [rdx + rax]
mov byte [rsp + rcx + 0x378], al
jmp 0x1800d25ea
lea r9, [rsp + 0xb0]
mov r8, qword [rsp + 0x378]
mov edx, 2
lea rcx, [0x1800d4500]
call fcn.180082490
movzx eax, word [rsp + 0x38]
cwde
test eax, eax
jne 0x1800d26d6
mov dword [rsp + 0x1b0], 1
jmp 0x1800d26e1
mov dword [rsp + 0x1b0], 0
mov eax, dword [rsp + 0x58]
cmp dword [rsp + 0x1b0], eax
ja 0x1800d26fb
mov dword [rsp + 0x1b4], 1
jmp 0x1800d2706
mov dword [rsp + 0x1b4], 0
mov eax, dword [rsp + 0x54]
cmp dword [rsp + 0x1b4], eax
je 0x1800d2715
jmp 0x1800d2748
movzx eax, byte [0x180147172]
movzx eax, al
test eax, eax
jne 0x1800d2748
movzx eax, byte [0x180147177]
movsx eax, al
movsx ecx, word [rsp + 0x64]
add eax, ecx
movzx ecx, byte [0x180147177]
movsx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [0x180147177], al
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x2d8], rax
lea rax, [rsp + 0x114]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x2f0]
lea r8, [rsp + 0x2a8]
lea rdx, [rsp + 0x2d8]
mov rcx, qword [rsp + 0x450]
call fcn.1800027c3
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x1800d295a
movsx rax, word [0x1801472b8]
imul rax, qword [0x180147228]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
inc rax
mov qword [rsp + 0x80], rax
mov eax, 4
mov word [0x180147260], ax
movzx eax, word [0x180147270]
cwde
movsx ecx, word [0x1801472b8]
sub eax, ecx
mov word [rsp + 0x40], ax
movzx eax, word [0x180147260]
cwde
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0
je 0x1800d283c
cmp dword [rsp + 0x98], 1
je 0x1800d28ce
cmp dword [rsp + 0x98], 2
je 0x1800d28fc
cmp dword [rsp + 0x98], 3
je 0x1800d2918
cmp dword [rsp + 0x98], 4
je 0x1800d2932
jmp 0x1800d2951
movzx eax, byte [rsp + 0x32]
movsx eax, al
test eax, eax
jne 0x1800d2855
mov dword [rsp + 0x1b8], 1
jmp 0x1800d2860
mov dword [rsp + 0x1b8], 0
movzx eax, byte [0x180147172]
movzx eax, al
add rax, qword [rsp + 0x80]
not rax
movzx ecx, byte [0x18014719f]
mov edx, dword [rsp + 0x54]
add ecx, edx
mov ecx, ecx
imul rax, rcx
movzx ecx, word [rsp + 0x40]
movsx ecx, cx
movzx edx, byte [0x180147157]
movzx edx, dl
add ecx, edx
mov edx, dword [rsp + 0x1b8]
mov edi, dword [0x180147274]
sub edi, edx
mov edx, edi
sub ecx, edx
movsxd rcx, ecx
add rax, rcx
mov dword [0x18014724c], eax
imul rax, qword [0x180147230], 0x6b
mov byte [0x180147157], al
jmp 0x1800d2951
movsx eax, word [rsp + 0x64]
sub eax, 0x9f
mov word [rsp + 0x3c], ax
movabs rax, 0x44366445ad90d
mov rcx, qword [rsp + 0x70]
imul rcx, rax
mov rax, rcx
mov word [0x1801472b8], ax
jmp 0x1800d2951
mov eax, 0x48d8
mov word [0x1801472b8], ax
movzx eax, word [0x181593c50]
mov word [0x1801471dc], ax
jmp 0x1800d2951
movsxd rax, dword [0x18014729c]
movabs rcx, 0x2d031e50a363c
add rax, rcx
mov byte [rsp + 0x32], al
jmp 0x1800d2951
movzx eax, word [0x180147270]
cwde
sar eax, 3
mov dword [rsp + 0x5c], eax
movsx eax, byte [0x18014711b]
sub eax, 0x9e841d71
mov byte [rsp + 0x30], al
mov eax, dword [rsp + 0x60]
jmp 0x1800d44e7
movzx eax, word [0x18014725c]
mov ecx, dword [rsp + 0x5c]
cmp eax, ecx
jg 0x1800d2a0b
movsx rax, byte [rsp + 0x31]
cmp qword [rsp + 0x70], rax
jne 0x1800d2987
mov dword [rsp + 0x1c0], 1
jmp 0x1800d2992
mov dword [rsp + 0x1c0], 0
cmp qword [rsp + 0x70], 0x2d
jne 0x1800d29a7
mov dword [rsp + 0x1bc], 1
jmp 0x1800d29b2
mov dword [rsp + 0x1bc], 0
mov eax, dword [rsp + 0x1bc]
cmp dword [rsp + 0x1c0], eax
jl 0x1800d2a06
cmp dword [0x180147274], 0
jne 0x1800d29d9
mov qword [rsp + 0x360], 1
jmp 0x1800d29e5
mov qword [rsp + 0x360], 0
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x360]
add rcx, rax
mov rax, rcx
mov word [0x180147248], ax
mov byte [0x180147176], 0x5d
jmp 0x1800d2af9
movsx eax, byte [rsp + 0x30]
test eax, eax
jne 0x1800d2a1f
cmp dword [rsp + 0x58], 0
je 0x1800d2aa0
mov rax, qword [rsp + 0x68]
test rax, rax
jne 0x1800d2a37
mov qword [rsp + 0x380], 1
jmp 0x1800d2a43
mov qword [rsp + 0x380], 0
movzx eax, word [rsp + 0x50]
cwde
movzx ecx, byte [rsp + 0x33]
movsx ecx, cl
sub eax, ecx
cdqe
mov rcx, qword [rsp + 0x380]
mov rdx, qword [rsp + 0x70]
sub rdx, rcx
mov rcx, rdx
add rax, rcx
movzx ecx, word [0x18014727c]
movsx rcx, cx
add rcx, qword [0x1801472a8]
movzx edx, word [0x180147270]
movsx edx, dx
movzx edi, word [rsp + 0x48]
movzx edi, di
sub edx, edi
movsxd rdx, edx
add rcx, rdx
and rax, rcx
mov byte [rsp + 0x34], al
jmp 0x1800d2af9
movzx eax, word [0x180147288]
mov ecx, dword [0x18014711c]
cmp eax, ecx
jne 0x1800d2acb
movzx eax, word [0x18014728c]
cwde
movsx ecx, byte [0x18014711b]
sub eax, ecx
mov word [0x18014728c], ax
jmp 0x1800d2af9
cmp dword [0x180147298], 0
jne 0x1800d2af9
movzx eax, word [0x180147288]
add eax, 0x8aaccd14
mov byte [0x18014719e], al
movzx eax, byte [0x180147157]
movzx eax, al
sar eax, 6
mov dword [0x18014729c], eax
mov rax, qword [rsp + 0x120]
add rax, 5
mov rcx, qword [rsp + 0x128]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e0], rax
movsx eax, byte [0x1801471c6]
test eax, eax
je 0x1800d2b37
movzx eax, word [0x180147270]
cwde
mov dword [rsp + 0x1c4], eax
jmp 0x1800d2b42
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x1c4], eax
movzx eax, byte [rsp + 0x1c4]
mov byte [rsp + 0x35], al
imul eax, dword [0x180147264], 0xe8
mov byte [rsp + 0x34], al
mov byte [rsp + 0xa4], 0xe8
mov byte [rsp + 0xa5], 0
mov byte [rsp + 0xa6], 0
mov byte [rsp + 0xa7], 0
mov byte [rsp + 0xa8], 0
movzx eax, word [rsp + 0x3c]
movzx eax, ax
sub eax, 0x1e71
cdqe
mov qword [0x180147238], rax
mov dword [rsp + 0x9c], 0
jmp 0x1800d2bb7
mov eax, dword [rsp + 0x9c]
inc eax
mov dword [rsp + 0x9c], eax
cmp dword [rsp + 0x9c], 4
jge 0x1800d332b
movzx eax, byte [0x181593c50]
mov byte [0x180147173], al
movzx eax, word [0x18014725c]
mov ecx, dword [rsp + 0x5c]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [0x181593c50]
mov dword [rsp + 0x104], eax
mov rax, qword [0x180147280]
add rax, 0xae28
mov dword [0x18014724c], eax
mov eax, dword [rsp + 0x104]
add eax, 0x348
mov dword [rsp + 0x2b4], eax
xor edx, edx
movzx ecx, byte [rsp + 0x33]
call fcn.1800d0450
movzx eax, al
mov dword [0x18014720c], eax
mov eax, dword [0x18014720c]
test eax, eax
jle 0x1800d2c4c
mov dword [rsp + 0x1cc], 1
jmp 0x1800d2c57
mov dword [rsp + 0x1cc], 0
mov eax, dword [0x18014720c]
cmp eax, 0x3f
jle 0x1800d2c6f
mov dword [rsp + 0x1c8], 1
jmp 0x1800d2c7a
mov dword [rsp + 0x1c8], 0
mov eax, dword [rsp + 0x1c8]
cmp dword [rsp + 0x1cc], eax
jle 0x1800d2dd7
mov rax, qword [0x180147228]
not rax
cmp qword [0x180147230], rax
jl 0x1800d2cc2
mov eax, dword [0x18014711c]
test eax, eax
je 0x1800d2cc2
movzx eax, word [rsp + 0x48]
movzx eax, ax
imul eax, eax, 0xb87a
mov dword [rsp + 0x58], eax
jmp 0x1800d2dd2
movzx eax, word [rsp + 0x40]
cwde
movzx ecx, word [rsp + 0x4c]
movsx ecx, cx
cmp eax, ecx
jne 0x1800d2d62
movsx eax, word [0x180147224]
test eax, eax
jne 0x1800d2cf0
mov dword [rsp + 0x1d0], 1
jmp 0x1800d2cfb
mov dword [rsp + 0x1d0], 0
movzx eax, word [rsp + 0x48]
movzx eax, ax
movzx ecx, word [rsp + 0x48]
movzx ecx, cx
add eax, ecx
movsx ecx, word [0x180147248]
mov edx, dword [0x18014724c]
imul edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x1d0]
sub edx, ecx
mov ecx, edx
imul eax, ecx
test eax, eax
jne 0x1800d2d40
mov eax, 1
mov word [rsp + 0xa2], ax
jmp 0x1800d2d4a
xor eax, eax
mov word [rsp + 0xa2], ax
movzx eax, word [rsp + 0xa2]
mov word [rsp + 0x4c], ax
mov qword [rsp + 0x68], 0xe2
jmp 0x1800d2dd2
movabs rax, 0x677ec331da59d
xor ecx, ecx
cmp rcx, rax
je 0x1800d2db9
movsx rax, word [0x1801472b8]
sub rax, qword [rsp + 0x80]
mov word [0x1801472b8], ax
movzx eax, word [0x1801471dc]
mov ecx, dword [0x180147298]
not ecx
add eax, ecx
movzx ecx, byte [rsp + 0x36]
movzx ecx, cl
not ecx
movzx edx, byte [0x180147156]
imul ecx, edx
imul eax, ecx
mov word [rsp + 0x38], ax
jmp 0x1800d2dd2
xor eax, eax
cmp eax, 1
je 0x1800d2dd2
movzx eax, byte [0x180147172]
movzx eax, al
imul eax, eax, 0x4c
mov word [rsp + 0x64], ax
jmp 0x1800d2e5e
movzx eax, byte [rsp + 0x32]
movsx eax, al
test eax, eax
je 0x1800d2e33
movsx eax, byte [0x180147173]
cmp eax, 0xf7
jge 0x1800d2e33
movsxd rax, dword [0x18014729c]
movabs rcx, 0xce5374d9b16d4
add rax, rcx
mov word [rsp + 0x40], ax
mov eax, dword [rsp + 0x54]
mov eax, eax
mov rcx, qword [0x180147240]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x180147240]
sub rcx, rax
mov rax, rcx
mov qword [0x180147240], rax
jmp 0x1800d2e5e
movzx eax, byte [0x180147176]
movzx eax, al
movsx ecx, byte [0x1801471c6]
cmp eax, ecx
jne 0x1800d2e5e
cmp qword [0x180147240], 0
jne 0x1800d2e5e
movzx eax, word [rsp + 0x40]
cwde
not eax
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x104]
add eax, 0x11b
mov dword [rsp + 0xac], eax
mov eax, dword [0x180147264]
add eax, 0x3712436f
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x104]
add eax, 0x81
mov dword [rsp + 0x2b8], eax
movzx edx, word [0x180147288]
mov cx, 0x6f
call fcn.1800cffc0
mov word [rsp + 0x38], ax
movzx eax, word [rsp + 0x38]
cwde
test eax, eax
je 0x1800d2eec
mov eax, dword [0x180147258]
cdqe
sub rax, qword [rsp + 0x80]
test rax, rax
jne 0x1800d2ed4
mov dword [rsp + 0x1d4], 1
jmp 0x1800d2edf
mov dword [rsp + 0x1d4], 0
mov eax, dword [rsp + 0x1d4]
mov dword [rsp + 0x5c], eax
jmp 0x1800d2f0b
movzx eax, word [rsp + 0x44]
cwde
test eax, eax
je 0x1800d2f0b
movzx eax, word [rsp + 0x40]
cwde
sub eax, 0xcd
cdqe
mov qword [rsp + 0x80], rax
mov eax, dword [0x181593c50]
mov dword [rsp + 0x108], eax
movsx eax, word [0x1801472b8]
test eax, eax
jne 0x1800d2fda
movzx eax, word [rsp + 0x48]
movzx eax, ax
test eax, eax
jne 0x1800d2fda
mov dword [0x18014729c], 0x39
cmp qword [0x180147230], 0
jne 0x1800d2f59
mov qword [rsp + 0x388], 1
jmp 0x1800d2f65
mov qword [rsp + 0x388], 0
movsx rax, byte [rsp + 0x35]
mov rcx, qword [0x1801472a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x388]
sub rcx, rax
mov rax, rcx
test rax, rax
jne 0x1800d2f98
mov dword [rsp + 0x1d8], 1
jmp 0x1800d2fa3
mov dword [rsp + 0x1d8], 0
movzx eax, word [rsp + 0x40]
cwde
movzx ecx, word [0x18014725c]
add eax, ecx
movzx ecx, byte [rsp + 0x33]
movsx ecx, cl
movzx edx, word [0x180147288]
not edx
imul ecx, edx
sub eax, ecx
mov ecx, dword [rsp + 0x1d8]
imul ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
jmp 0x1800d3010
movzx eax, byte [0x180147177]
movsx rax, al
movabs rcx, 0xf776b9951ee1c
xor rax, rcx
mov qword [0x180147280], rax
movzx eax, word [rsp + 0x3c]
movzx eax, ax
movzx ecx, word [rsp + 0x3c]
movzx ecx, cx
sub eax, ecx
mov word [rsp + 0x3c], ax
mov eax, dword [rsp + 0x108]
add eax, 0x24d
mov dword [rsp + 0x2b0], eax
movzx eax, word [rsp + 0x48]
movzx eax, ax
imul eax, eax, 0
movzx ecx, byte [rsp + 0x32]
movsx ecx, cl
not ecx
cmp eax, ecx
jle 0x1800d3049
mov dword [rsp + 0x1e4], 1
jmp 0x1800d3054
mov dword [rsp + 0x1e4], 0
cmp qword [0x180147238], 0
jne 0x1800d306b
mov dword [rsp + 0x1dc], 1
jmp 0x1800d3076
mov dword [rsp + 0x1dc], 0
movzx eax, word [0x18014728c]
cwde
imul eax, dword [rsp + 0x1dc]
test eax, eax
je 0x1800d30a9
cmp qword [rsp + 0x70], 0
jne 0x1800d309c
movzx eax, word [rsp + 0x50]
cwde
test eax, eax
je 0x1800d30a9
mov dword [rsp + 0x1e0], 1
jmp 0x1800d30b4
mov dword [rsp + 0x1e0], 0
mov eax, dword [rsp + 0x1e0]
not eax
cmp dword [rsp + 0x1e4], eax
jg 0x1800d3240
movzx eax, word [0x18014725c]
test eax, eax
jne 0x1800d30e2
mov dword [rsp + 0x1e8], 1
jmp 0x1800d30ed
mov dword [rsp + 0x1e8], 0
movzx eax, word [rsp + 0x3c]
movzx eax, ax
cmp eax, dword [rsp + 0x1e8]
jl 0x1800d310b
mov dword [rsp + 0x1f0], 1
jmp 0x1800d3116
mov dword [rsp + 0x1f0], 0
movzx eax, byte [0x18014719f]
cmp rax, qword [0x180147290]
je 0x1800d3133
mov dword [rsp + 0x1ec], 1
jmp 0x1800d313e
mov dword [rsp + 0x1ec], 0
mov eax, dword [rsp + 0x1ec]
cmp dword [rsp + 0x1f0], eax
jge 0x1800d315b
mov dword [rsp + 0x1f8], 1
jmp 0x1800d3166
mov dword [rsp + 0x1f8], 0
movzx eax, byte [0x180147156]
mov ecx, dword [rsp + 0x54]
cmp eax, ecx
je 0x1800d3183
mov qword [rsp + 0x390], 1
jmp 0x1800d318f
mov qword [rsp + 0x390], 0
movabs rax, 0xca63056ee7f7f
cmp qword [rsp + 0x390], rax
jge 0x1800d31b0
mov dword [rsp + 0x1f4], 1
jmp 0x1800d31bb
mov dword [rsp + 0x1f4], 0
mov eax, dword [rsp + 0x1f4]
cmp dword [rsp + 0x1f8], eax
jge 0x1800d3240
movsx eax, word [0x180147248]
sub eax, 0x997aa1b2
movzx ecx, word [rsp + 0x3c]
movzx ecx, cx
sub ecx, eax
mov eax, ecx
mov word [rsp + 0x3c], ax
movzx eax, word [rsp + 0x4c]
cwde
test eax, eax
jne 0x1800d3200
mov qword [rsp + 0x310], 1
jmp 0x1800d320c
mov qword [rsp + 0x310], 0
movzx eax, word [rsp + 0x44]
movsx rax, ax
xor rax, qword [0x180147230]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x310]
and rdx, rcx
mov rcx, rdx
imul rax, rcx
movsx rcx, word [rsp + 0x64]
add rax, rcx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x108]
add eax, 0x35d
mov dword [rsp + 0x3c0], eax
movzx eax, byte [0x180147176]
movzx eax, al
movabs rcx, 0xb979d71a252ee
imul rax, rcx
mov word [rsp + 0x3c], ax
mov eax, dword [rsp + 0x108]
add eax, 0x354
mov dword [rsp + 0x1fc], eax
mov eax, dword [rsp + 0x1fc]
mov ecx, dword [rsp + 0x2b0]
imul eax, ecx
mov ecx, dword [rsp + 0x1fc]
add ecx, 6
cmp eax, ecx
je 0x1800d3326
movzx eax, byte [0x18014719e]
movzx eax, al
sub eax, 0xcb1c
cdqe
mov rcx, qword [0x180147230]
sub rcx, rax
mov rax, rcx
mov qword [0x180147230], rax
movsxd rax, dword [rsp + 0x9c]
movsx eax, byte [rsp + rax + 0x3e0]
mov ecx, dword [rsp + 0xac]
mov edx, dword [rsp + 0x2b4]
sub ecx, edx
mov edx, dword [rsp + 0xac]
mov edi, dword [rsp + 0xac]
sub edx, edi
mov edi, dword [rsp + 0x2b8]
mov esi, dword [rsp + 0xac]
sub edi, esi
imul edx, edi
imul ecx, edx
sub eax, ecx
mov ecx, dword [rsp + 0x9c]
inc ecx
movsxd rcx, ecx
mov byte [rsp + rcx + 0xa4], al
jmp 0x1800d2ba7
movzx eax, byte [rsp + 0x33]
movsx eax, al
test eax, eax
je 0x1800d3348
mov rax, qword [0x180147250]
mov qword [rsp + 0x318], rax
jmp 0x1800d3357
mov rax, qword [0x180147280]
mov qword [rsp + 0x318], rax
movzx eax, byte [rsp + 0x318]
mov byte [0x180147176], al
movzx eax, word [0x180147270]
cwde
add eax, 0x2b79
mov word [0x180147174], ax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x2d8], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 5
lea r8, [rsp + 0xa4]
mov rdx, qword [rsp + 0x2d8]
mov rcx, qword [rsp + 0x450]
call fcn.180002125
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jne 0x1800d33d5
mov eax, dword [rsp + 0x90]
cmp rax, 5
je 0x1800d36cd
mov eax, 2
mov word [0x180147174], ax
mov eax, dword [0x18014729c]
xor eax, 0x30dfb774
mov byte [rsp + 0x30], al
movsx eax, word [0x180147174]
mov dword [rsp + 0x10c], eax
cmp dword [rsp + 0x10c], 0
je 0x1800d3429
cmp dword [rsp + 0x10c], 1
je 0x1800d3545
cmp dword [rsp + 0x10c], 2
je 0x1800d3573
jmp 0x1800d3594
movzx eax, word [0x18014727c]
cwde
movzx ecx, word [rsp + 0x40]
movsx ecx, cx
sub eax, ecx
movzx ecx, byte [rsp + 0x34]
movzx ecx, cl
movzx edx, word [0x180147278]
movsx edx, dx
sub ecx, edx
add eax, ecx
test eax, eax
jne 0x1800d3464
mov eax, 1
mov word [rsp + 0xa0], ax
jmp 0x1800d346e
xor eax, eax
mov word [rsp + 0xa0], ax
movzx eax, word [rsp + 0xa0]
mov word [rsp + 0x40], ax
movzx eax, byte [rsp + 0x36]
movzx eax, al
sub rax, qword [0x180147250]
mov rcx, qword [0x180147228]
add rcx, rax
mov rax, rcx
test rax, rax
jne 0x1800d34aa
mov qword [rsp + 0x328], 1
jmp 0x1800d34b6
mov qword [rsp + 0x328], 0
movzx eax, byte [rsp + 0x36]
movzx eax, al
test eax, eax
jne 0x1800d34d0
mov qword [rsp + 0x320], 1
jmp 0x1800d34dc
mov qword [rsp + 0x320], 0
movsx eax, word [rsp + 0x64]
movsx ecx, byte [rsp + 0x31]
not ecx
sub eax, ecx
cdqe
movabs rcx, 0x2145154930c5b
mov rdx, qword [rsp + 0x320]
add rcx, rdx
add rax, rcx
not rax
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
test rax, rax
jne 0x1800d3528
mov qword [rsp + 0x330], 1
jmp 0x1800d3534
mov qword [rsp + 0x330], 0
mov rax, qword [rsp + 0x330]
mov qword [0x180147268], rax
jmp 0x1800d3594
movzx eax, byte [0x180147156]
movzx ecx, word [rsp + 0x48]
movzx ecx, cx
add eax, ecx
movsx ecx, word [0x180147248]
sub eax, ecx
mov byte [0x180147156], al
movzx eax, word [rsp + 0x50]
cwde
mov dword [0x1801472b4], eax
jmp 0x1800d3594
movzx eax, byte [0x180147156]
mov ecx, dword [0x18014729c]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x18014729c]
add ecx, eax
mov eax, ecx
mov dword [0x18014729c], eax
movsx rax, byte [rsp + 0x35]
cmp qword [0x180147250], rax
jl 0x1800d35b0
mov dword [rsp + 0x204], 1
jmp 0x1800d35bb
mov dword [rsp + 0x204], 0
cmp qword [0x180147250], 1
jl 0x1800d35d2
mov dword [rsp + 0x200], 1
jmp 0x1800d35dd
mov dword [rsp + 0x200], 0
mov eax, dword [rsp + 0x200]
cmp dword [rsp + 0x204], eax
jg 0x1800d3625
cmp dword [0x1801472b0], 0
je 0x1800d3607
movzx eax, word [rsp + 0x3c]
movzx eax, ax
mov dword [rsp + 0x208], eax
jmp 0x1800d3614
mov eax, dword [0x180147264]
mov dword [rsp + 0x208], eax
movzx eax, byte [rsp + 0x208]
mov byte [rsp + 0x31], al
jmp 0x1800d36c4
movzx eax, word [0x180147278]
cwde
test eax, eax
jne 0x1800d363e
mov dword [rsp + 0x214], 1
jmp 0x1800d3649
mov dword [rsp + 0x214], 0
cmp dword [0x180147264], 0
jne 0x1800d365f
mov dword [rsp + 0x20c], 1
jmp 0x1800d366a
mov dword [rsp + 0x20c], 0
movsx eax, byte [rsp + 0x31]
cmp eax, dword [rsp + 0x20c]
jg 0x1800d3685
mov dword [rsp + 0x210], 1
jmp 0x1800d3690
mov dword [rsp + 0x210], 0
mov eax, dword [rsp + 0x210]
cmp dword [rsp + 0x214], eax
jge 0x1800d36c4
movzx eax, word [0x181593c50]
mov word [0x180147224], ax
mov eax, dword [rsp + 0x5c]
sub eax, dword [0x180147298]
mov ecx, dword [rsp + 0x5c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x60]
jmp 0x1800d44e7
mov eax, dword [rsp + 0x5c]
movzx ecx, word [rsp + 0x4c]
movsx ecx, cx
cmp eax, ecx
je 0x1800d36eb
mov eax, dword [0x181593c50]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x470]
add rax, 0x3e
mov qword [rsp + 0x2a8], rax
lea rax, [rsp + 0x114]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x2bc]
lea r8, [rsp + 0x2a8]
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0x450]
call fcn.1800027c3
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x2c0]
mov ecx, dword [rsp + 0x2c4]
xor eax, ecx
cmp eax, 0xfffffdc5
je 0x1800d3768
cmp dword [rsp + 0x60], 0
je 0x1800d3768
mov eax, 0xffffe985
mov word [0x1801472b8], ax
mov eax, dword [rsp + 0x60]
jmp 0x1800d44e7
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 0x3e
lea r8, [rsp + 0xb0]
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x450]
call fcn.180002125
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jne 0x1800d37b4
mov eax, dword [rsp + 0x90]
cmp rax, 0x3e
je 0x1800d3c9b
movzx eax, word [0x180147278]
cwde
movzx ecx, byte [rsp + 0x36]
movzx ecx, cl
imul eax, ecx
movzx ecx, word [0x180147278]
movsx ecx, cx
and ecx, eax
mov eax, ecx
mov word [0x180147278], ax
movsx rax, byte [rsp + 0x30]
imul rax, qword [0x180147250]
movsx rcx, byte [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov byte [rsp + 0x30], al
mov eax, dword [0x181593c50]
mov dword [rsp + 0x110], eax
mov rax, qword [0x180147238]
not rax
movzx ecx, byte [0x180147157]
movzx ecx, cl
xor rax, rcx
mov rcx, qword [rsp + 0x88]
not rcx
mov rdx, qword [0x180147280]
xor rdx, rcx
mov rcx, rdx
add rax, rcx
mov byte [rsp + 0x30], al
movzx eax, word [rsp + 0x40]
movsx rax, ax
sub rax, qword [0x180147240]
mov word [0x18014727c], ax
mov eax, dword [rsp + 0x110]
add eax, 0xc3
mov dword [rsp + 0x3cc], eax
mov eax, dword [0x180147258]
cdqe
cmp qword [rsp + 0x80], rax
je 0x1800d3886
mov dword [rsp + 0x21c], 1
jmp 0x1800d3891
mov dword [rsp + 0x21c], 0
cmp qword [rsp + 0x80], 0x26
je 0x1800d38a9
mov dword [rsp + 0x218], 1
jmp 0x1800d38b4
mov dword [rsp + 0x218], 0
mov eax, dword [rsp + 0x218]
cmp dword [rsp + 0x21c], eax
jle 0x1800d38e3
movsx eax, word [0x180147174]
and eax, 0x7bbee18b
mov word [rsp + 0x38], ax
mov eax, dword [0x181593c50]
mov dword [0x1801472a0], eax
jmp 0x1800d390b
mov eax, dword [0x180147264]
movabs rcx, 0x6d3cebf0495b6
xor rax, rcx
mov dword [rsp + 0x5c], eax
movsx eax, byte [0x18014711b]
sub eax, 0xc440
mov word [rsp + 0x3c], ax
mov eax, dword [rsp + 0x110]
add eax, 0x14c
mov dword [rsp + 0x2c8], eax
movzx eax, word [rsp + 0x44]
cwde
movzx ecx, byte [0x18014719f]
cmp eax, ecx
jle 0x1800d393c
mov dword [rsp + 0x224], 1
jmp 0x1800d3947
mov dword [rsp + 0x224], 0
movzx eax, word [rsp + 0x44]
cwde
cmp eax, 1
jle 0x1800d395f
mov dword [rsp + 0x220], 1
jmp 0x1800d396a
mov dword [rsp + 0x220], 0
mov eax, dword [rsp + 0x220]
cmp dword [rsp + 0x224], eax
jge 0x1800d3a48
movzx eax, word [0x1801471dc]
cmp rax, qword [rsp + 0x80]
jl 0x1800d39ca
movzx eax, byte [0x180147176]
movzx eax, al
test eax, eax
je 0x1800d39ac
mov eax, dword [0x180147258]
mov dword [rsp + 0x228], eax
jmp 0x1800d39bb
movzx eax, word [0x180147260]
cwde
mov dword [rsp + 0x228], eax
movzx eax, word [rsp + 0x228]
mov word [rsp + 0x50], ax
jmp 0x1800d3a48
movzx eax, word [rsp + 0x38]
cwde
not eax
add eax, 0x1c29
test eax, eax
je 0x1800d3a48
movsx eax, byte [rsp + 0x31]
sub eax, 0x3257
mov byte [0x180147177], al
movsx eax, word [0x1801472b8]
movzx ecx, word [0x18014727c]
movsx ecx, cx
add eax, ecx
test eax, eax
jne 0x1800d3a10
mov qword [rsp + 0x338], 1
jmp 0x1800d3a1c
mov qword [rsp + 0x338], 0
mov eax, dword [rsp + 0x58]
movzx ecx, byte [rsp + 0x34]
movzx ecx, cl
movabs rdx, 0xee556d326ab66
sub rdx, rcx
mov rcx, rdx
sub rcx, qword [rsp + 0x338]
imul rax, rcx
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x110]
add eax, 0x32e
mov dword [rsp + 0x22c], eax
mov eax, dword [rsp + 0x22c]
mov ecx, dword [rsp + 0x2c8]
or eax, ecx
add eax, 0x5116
mov ecx, dword [rsp + 0x22c]
sub ecx, 0x199
xor ecx, 0x1bb
cmp eax, ecx
je 0x1800d3c9b
cmp dword [0x180147264], 0x1b4d
jbe 0x1800d3aa4
mov dword [rsp + 0x238], 1
jmp 0x1800d3aaf
mov dword [rsp + 0x238], 0
mov rax, qword [0x180147280]
not rax
cmp qword [0x180147290], rax
jg 0x1800d3acf
mov dword [rsp + 0x234], 1
jmp 0x1800d3ada
mov dword [rsp + 0x234], 0
movsx eax, word [rsp + 0x64]
movzx ecx, word [rsp + 0x3c]
movzx ecx, cx
cmp eax, ecx
jle 0x1800d3af8
mov dword [rsp + 0x230], 1
jmp 0x1800d3b03
mov dword [rsp + 0x230], 0
mov eax, dword [rsp + 0x230]
cmp dword [rsp + 0x234], eax
jle 0x1800d3b20
mov dword [rsp + 0x23c], 1
jmp 0x1800d3b2b
mov dword [rsp + 0x23c], 0
movzx eax, word [rsp + 0x50]
cwde
sub eax, dword [rsp + 0x238]
cmp eax, dword [rsp + 0x23c]
jg 0x1800d3c03
movsx eax, byte [rsp + 0x31]
test eax, eax
jne 0x1800d3b67
mov rax, qword [0x180147280]
test rax, rax
jne 0x1800d3b67
mov dword [rsp + 0x244], 0
jmp 0x1800d3b72
mov dword [rsp + 0x244], 1
cmp qword [rsp + 0x80], 0
jne 0x1800d3b8b
mov qword [rsp + 0x340], 1
jmp 0x1800d3b97
mov qword [rsp + 0x340], 0
mov rax, qword [rsp + 0x340]
cmp qword [rsp + 0x70], rax
jbe 0x1800d3bb3
mov dword [rsp + 0x240], 1
jmp 0x1800d3bbe
mov dword [rsp + 0x240], 0
mov eax, dword [rsp + 0x240]
cmp dword [rsp + 0x244], eax
jg 0x1800d3be1
movzx eax, byte [rsp + 0x33]
movsx eax, al
add eax, 0xe8
mov dword [rsp + 0x54], eax
jmp 0x1800d3c03
xor eax, eax
cmp eax, 1
je 0x1800d3c03
movzx eax, byte [rsp + 0x32]
movsx eax, al
mov ecx, 4
imul rcx, rcx, 0xa
lea rdx, [0x1817357d0]
mov dword [rdx + rcx], eax
mov byte [rsp + 0x31], 1
movzx eax, word [0x1801471dc]
sar eax, 2
mov word [rsp + 0x44], ax
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x248], al
cmp byte [rsp + 0x248], 0
je 0x1800d3c39
cmp byte [rsp + 0x248], 1
je 0x1800d3c4b
jmp 0x1800d3c92
mov rax, qword [rsp + 0x70]
add rax, 0x8070
mov qword [rsp + 0x68], rax
jmp 0x1800d3c92
mov eax, dword [0x181593c50]
mov dword [0x180147264], eax
movzx eax, byte [0x180147176]
movzx eax, al
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x68]
sub rcx, rdx
movzx edx, byte [rsp + 0x36]
movzx edx, dl
movzx edi, word [rsp + 0x3c]
movzx edi, di
and edx, edi
movsxd rdx, edx
xor rcx, rdx
sub rax, rcx
mov dword [0x180147298], eax
mov eax, dword [rsp + 0x60]
jmp 0x1800d44e7
mov rax, qword [rsp + 0x128]
add rax, 0x3e
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x20], rcx
mov r9, qword [rsp + 0x470]
mov r8, qword [rsp + 0x468]
mov rdx, rax
mov rcx, qword [rsp + 0x450]
call fcn.180002125
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x24c]
sub eax, 0x31a
mov ecx, dword [rsp + 0x24c]
or ecx, 0xf7
add ecx, 0x29b
cmp eax, ecx
je 0x1800d3e7b
mov eax, dword [0x18014711c]
cdqe
mov rcx, qword [rsp + 0x88]
cmp rax, rcx
jne 0x1800d3d21
mov dword [rsp + 0x254], 1
jmp 0x1800d3d2c
mov dword [rsp + 0x254], 0
mov eax, dword [0x18014711c]
cmp eax, 0x45
jne 0x1800d3d44
mov dword [rsp + 0x250], 1
jmp 0x1800d3d4f
mov dword [rsp + 0x250], 0
mov eax, dword [rsp + 0x250]
cmp dword [rsp + 0x254], eax
je 0x1800d3d97
mov eax, dword [0x180147264]
mov rcx, qword [rsp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
movzx eax, word [0x18014727c]
movsx rax, ax
mov rcx, qword [rsp + 0x68]
add rax, rcx
mov word [0x18014727c], ax
jmp 0x1800d3dd2
movsx eax, byte [rsp + 0x35]
movzx ecx, byte [rsp + 0x34]
movzx ecx, cl
not ecx
cmp eax, ecx
jge 0x1800d3dd2
movsx ax, byte [rsp + 0x30]
mov word [0x180147248], ax
movzx eax, byte [0x180147157]
movzx eax, al
movzx ecx, word [rsp + 0x38]
movsx ecx, cx
imul eax, ecx
mov byte [0x180147157], al
cmp dword [rsp + 0x60], 0
jne 0x1800d3dee
mov eax, dword [rsp + 0x90]
cmp rax, qword [rsp + 0x470]
je 0x1800d3e7b
mov qword [0x180147250], 0
mov eax, dword [0x180147274]
xor eax, 1
mov word [rsp + 0x3c], ax
mov rax, qword [0x180147250]
mov qword [rsp + 0x3e8], rax
cmp qword [rsp + 0x3e8], 0
je 0x1800d3e23
jmp 0x1800d3e4a
mov qword [0x180147280], 0x96
mov eax, dword [rsp + 0x58]
mov rcx, qword [0x180147280]
add rax, rcx
not rax
add rax, qword [0x180147290]
mov byte [rsp + 0x34], al
movzx eax, byte [0x181593c50]
mov byte [rsp + 0x32], al
movzx eax, word [rsp + 0x50]
movsx rax, ax
movabs rcx, 0x9bcbcf717b46
add rax, rcx
mov word [0x18014728c], ax
mov eax, dword [rsp + 0x60]
jmp 0x1800d44e7
lea rax, [rsp + 0x114]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x2cc]
lea r8, [rsp + 0x2a8]
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0x450]
call fcn.1800027c3
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x1800d430e
movsx eax, word [0x180147224]
cmp eax, 0xf3a168a4
jne 0x1800d3ed7
mov dword [rsp + 0x258], 1
jmp 0x1800d3ee2
mov dword [rsp + 0x258], 0
movzx eax, byte [rsp + 0x33]
movsx eax, al
cmp dword [rsp + 0x258], eax
jle 0x1800d3f40
movsx eax, byte [rsp + 0x30]
not eax
cdqe
mov rcx, qword [0x180147250]
not rcx
cmp rax, rcx
jl 0x1800d3f18
mov dword [rsp + 0x25c], 1
jmp 0x1800d3f23
mov dword [rsp + 0x25c], 0
movzx eax, byte [rsp + 0x33]
movsx eax, al
cmp eax, dword [rsp + 0x25c]
jne 0x1800d3f40
movzx eax, word [0x181593c50]
mov word [rsp + 0x40], ax
mov eax, dword [0x181593c50]
mov dword [rsp + 0x118], eax
movsx eax, byte [rsp + 0x31]
movzx ecx, byte [rsp + 0x36]
movzx ecx, cl
cmp eax, ecx
je 0x1800d3fab
xor eax, eax
cmp eax, 1
je 0x1800d3fa9
movzx eax, byte [0x180147157]
movzx eax, al
sub eax, 0x9e5
cdqe
mov qword [rsp + 0x80], rax
movzx eax, word [rsp + 0x44]
cwde
test eax, eax
je 0x1800d3f93
movzx eax, byte [rsp + 0x35]
mov byte [rsp + 0x78], al
jmp 0x1800d3f9e
movzx eax, byte [0x180147173]
mov byte [rsp + 0x78], al
movsx eax, byte [rsp + 0x78]
mov dword [0x18014711c], eax
jmp 0x1800d3fed
movzx eax, word [rsp + 0x38]
cwde
test eax, eax
jne 0x1800d3fc3
mov qword [rsp + 0x348], 1
jmp 0x1800d3fcf
mov qword [rsp + 0x348], 0
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x348], rax
jb 0x1800d3fed
mov byte [rsp + 0x33], 0xf7
mov eax, 8
mov word [rsp + 0x38], ax
mov eax, dword [rsp + 0x118]
add eax, 0x392
mov dword [rsp + 0x2d0], eax
cmp dword [rsp + 0x58], 0
jne 0x1800d4022
mov eax, dword [0x1801472a4]
mov ecx, dword [rsp + 0x5c]
cmp eax, ecx
je 0x1800d4022
mov dword [rsp + 0x26c], 1
jmp 0x1800d402d
mov dword [rsp + 0x26c], 0
movsx eax, word [rsp + 0x64]
movzx ecx, byte [0x180147176]
movzx ecx, cl
cmp eax, ecx
jl 0x1800d404d
mov dword [rsp + 0x264], 1
jmp 0x1800d4058
mov dword [rsp + 0x264], 0
movzx eax, byte [rsp + 0x36]
movzx eax, al
not eax
test eax, eax
je 0x1800d407e
movsx eax, word [0x180147248]
test eax, eax
jne 0x1800d407e
mov dword [rsp + 0x260], 1
jmp 0x1800d4089
mov dword [rsp + 0x260], 0
mov eax, dword [rsp + 0x260]
cmp dword [rsp + 0x264], eax
jg 0x1800d40a6
mov dword [rsp + 0x268], 1
jmp 0x1800d40b1
mov dword [rsp + 0x268], 0
mov eax, dword [rsp + 0x268]
cmp dword [rsp + 0x26c], eax
jg 0x1800d411e
cmp qword [rsp + 0x80], 0
je 0x1800d40d8
movzx eax, word [0x18014727c]
cwde
test eax, eax
jne 0x1800d4101
mov eax, dword [rsp + 0x58]
not eax
movzx ecx, byte [0x18014719f]
cmp eax, ecx
ja 0x1800d40ff
movsxd rax, dword [0x1801472a0]
mov rcx, qword [0x1801472a8]
not rcx
cmp rax, rcx
je 0x1800d4101
jmp 0x1800d411e
cmp qword [0x1801472a8], 0
je 0x1800d411e
movzx eax, word [0x18014728c]
cwde
sar eax, 1
cdqe
mov qword [0x180147240], rax
mov eax, dword [rsp + 0x118]
add eax, 0x1f3
mov dword [rsp + 0x270], eax
movzx ecx, byte [0x180147157]
call fcn.1800d0200
movzx eax, al
mov word [rsp + 0x44], ax
movzx eax, word [rsp + 0x44]
cwde
test eax, eax
jl 0x1800d4177
movsx eax, byte [rsp + 0x30]
movzx ecx, byte [rsp + 0x33]
movsx ecx, cl
cmp eax, ecx
je 0x1800d4175
movzx eax, byte [0x181593c50]
mov byte [rsp + 0x30], al
mov eax, dword [rsp + 0x54]
inc eax
mov dword [rsp + 0x54], eax
jmp 0x1800d41ad
cmp qword [0x1801472a8], 0
je 0x1800d41ad
mov eax, 0x875a8458
mov rcx, qword [rsp + 0x70]
add rcx, rax
mov rax, rcx
mov byte [rsp + 0x30], al
movzx eax, word [rsp + 0x40]
cwde
add eax, 0x3da6e928
movsx ecx, byte [rsp + 0x35]
sub ecx, eax
mov eax, ecx
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x118]
add eax, 0x8a
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x2d0]
mov ecx, dword [rsp + 0x270]
and eax, ecx
mov ecx, dword [rsp + 0x270]
mov edx, 0x1d7
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x1800d430e
movzx eax, word [rsp + 0x38]
cwde
cmp dword [0x1801472b0], eax
jae 0x1800d4203
mov dword [rsp + 0x274], 1
jmp 0x1800d420e
mov dword [rsp + 0x274], 0
movsx eax, byte [rsp + 0x35]
cmp eax, dword [rsp + 0x274]
je 0x1800d4229
mov dword [rsp + 0x27c], 1
jmp 0x1800d4234
mov dword [rsp + 0x27c], 0
movzx eax, word [0x180147260]
cwde
mov ecx, dword [0x1801472a4]
cmp eax, ecx
jbe 0x1800d4254
mov qword [rsp + 0x350], 1
jmp 0x1800d4260
mov qword [rsp + 0x350], 0
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x350], rax
jbe 0x1800d427c
mov dword [rsp + 0x278], 1
jmp 0x1800d4287
mov dword [rsp + 0x278], 0
mov eax, dword [rsp + 0x278]
cmp dword [rsp + 0x27c], eax
jle 0x1800d42ac
mov rax, qword [0x180147250]
sub rax, 0x4fca26e5
mov dword [0x180147264], eax
jmp 0x1800d4305
movzx eax, byte [0x18014719f]
test eax, eax
je 0x1800d4305
movzx eax, byte [rsp + 0x32]
movsx rax, al
movzx ecx, word [rsp + 0x48]
movzx ecx, cx
mov rdx, qword [0x180147238]
add rdx, rax
mov rax, rdx
add rcx, rax
mov rax, rcx
movzx ecx, byte [0x18014719e]
movzx ecx, cl
movsx edx, word [0x180147224]
imul ecx, edx
mov edx, dword [0x1801472b0]
sub edx, ecx
mov ecx, edx
mov ecx, ecx
sub rax, rcx
mov word [0x180147288], ax
mov eax, dword [rsp + 0x60]
jmp 0x1800d44e7
mov dx, 0xca
mov cx, 0xee
call fcn.1800cffc0
movzx eax, ax
mov qword [0x1801472a8], rax
cmp qword [0x1801472a8], 0
je 0x1800d4492
movzx eax, byte [rsp + 0x33]
movsx eax, al
movzx ecx, word [rsp + 0x38]
movsx ecx, cx
cmp eax, ecx
je 0x1800d4354
mov dword [rsp + 0x284], 1
jmp 0x1800d435f
mov dword [rsp + 0x284], 0
movzx eax, byte [rsp + 0x33]
movsx eax, al
cmp eax, 0x64
je 0x1800d4379
mov dword [rsp + 0x280], 1
jmp 0x1800d4384
mov dword [rsp + 0x280], 0
mov eax, dword [rsp + 0x280]
cmp dword [rsp + 0x284], eax
jge 0x1800d43b4
movzx eax, byte [rsp + 0x32]
movsx rax, al
movabs rcx, 0xe2314a6abdbbf
imul rax, rcx
mov byte [rsp + 0x30], al
jmp 0x1800d4490
movzx eax, word [rsp + 0x38]
cwde
test eax, eax
je 0x1800d4401
cmp qword [0x180147238], 0
je 0x1800d43d9
mov rax, qword [0x180147250]
mov qword [rsp + 0x358], rax
jmp 0x1800d43e5
mov eax, dword [rsp + 0x58]
mov qword [rsp + 0x358], rax
movzx eax, word [rsp + 0x358]
mov word [rsp + 0x38], ax
mov dword [0x1801472a4], 0xc10078d9
jmp 0x1800d4490
movzx eax, word [rsp + 0x48]
movzx eax, ax
test eax, eax
jne 0x1800d441a
mov dword [rsp + 0x288], 1
jmp 0x1800d4425
mov dword [rsp + 0x288], 0
movzx eax, byte [rsp + 0x34]
movzx eax, al
cmp eax, dword [rsp + 0x288]
jle 0x1800d4490
movsxd rax, dword [0x1801472a0]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
je 0x1800d4490
movzx eax, byte [0x180147177]
movsx eax, al
test eax, eax
jne 0x1800d4462
mov dword [rsp + 0x28c], 1
jmp 0x1800d446d
mov dword [rsp + 0x28c], 0
movzx eax, byte [rsp + 0x34]
movzx eax, al
mov ecx, dword [rsp + 0x28c]
sub ecx, eax
mov eax, ecx
movsx ecx, word [0x1801472b8]
imul eax, ecx
mov dword [0x18014720c], eax
jmp 0x1800d44bb
movsx eax, word [0x180147248]
movzx ecx, word [rsp + 0x40]
movsx ecx, cx
xor eax, ecx
mov word [0x18014728c], ax
movzx eax, byte [rsp + 0x34]
movzx eax, al
add eax, 0x41
mov byte [0x180147173], al
mov edx, dword [rsp + 0x2d4]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetConsoleTitleA]
movzx eax, word [rsp + 0x3c]
movzx eax, ax
sar eax, 7
mov byte [rsp + 0x33], al
mov dword [0x1801472b4], 2
mov eax, dword [rsp + 0x60]
add rsp, 0x438
pop rdi
pop rsi
ret