Function at 0x18020cca0
Capabilities:
Get thread local storage value

Disassembly:
mov r11, rsp
push r14
push r15
sub rsp, 0x158
mov rax, qword [0x18025e100]
xor rax, rsp
mov qword [rsp + 0x108], rax
mov qword [r11 + 0x20], rbx
xor eax, eax
mov qword [r11 - 0x18], rbp
mov qword [r11 - 0x20], rsi
mov qword [r11 - 0x28], rdi
mov qword [rsp + 0x50], rcx
mov ebx, edx
mov dword [rsp + 0x64], edx
mov qword [rsp + 0x68], rax
mov dword [rsp + 0xd8], eax
mov qword [r11 - 0x30], r12
mov r12, rcx
mov ecx, edx
mov eax, 4
xor edx, edx
mov edi, 1
mov qword [rsp + 0xf0], r8
shl edi, cl
mov rcx, r12
div edi
mov r14d, eax
mov dword [rsp + 0x44], eax
call fcn.18020cb00
mov rcx, qword [r12 + 0xd240]
mov ebp, eax
mov dword [rsp + 0x70], eax
test rcx, rcx
je 0x18020cd37
call fcn.18020cb00
add ebp, eax
mov dword [rsp + 0x70], ebp
mov eax, dword [r12 + 0x14]
mov qword [rsp + 0x130], r13
mov ecx, 8
lea esi, [rbp + rax*2]
imul esi, r14d
lea eax, [rsi + rsi]
cmp eax, 0x1ffffffe
jbe 0x18020cd68
mov rdi, qword [rsp + 0x68]
mov r15d, 0x80070216
jmp 0x18020cda9
lea r13d, [rax*8]
test r13d, r13d
cmove r13d, ecx
lea rcx, [r12 + 0xd298]
mov edx, r13d
mov dword [rsp + 0xd8], r13d
call fcn.1800c58b0
mov r15d, 0x8007000e
test rax, rax
mov rdi, rax
mov qword [rsp + 0x68], rax
mov eax, 0
cmovne r15d, eax
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm7
test r15d, r15d
js 0x18020eef2
lea r13, [rdi + rsi*8]
mov ecx, esi
mov qword [rsp + 0x98], r13
test esi, esi
je 0x18020cde0
or rax, 0xffffffffffffffff
rep stosq qword [rdi], rax
mov rdi, qword [rsp + 0x68]
mov rdx, qword [r12 + 0xd040]
lea r8, [rsp + 0x90]
mov rcx, r12
mov byte [rsp + 0x40], 0
call fcn.18019f710
mov r15d, eax
test eax, eax
js 0x18020eeea
mov r10, qword [rsp + 0x90]
xor eax, eax
or qword [r10 + 0x10], 0x400
mov dword [r10 + 0x18], eax
mov rcx, qword [r12 + 0xd240]
test rcx, rcx
je 0x18020cf46
mov r9d, r14d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x20], ebx
call fcn.18020cb70
mov r15d, eax
test eax, eax
js 0x18020eee2
xor eax, eax
mov ebx, eax
test esi, esi
je 0x18020cf3e
nop dword [rax + rax]
mov rdx, qword [rdi]
cmp rdx, 0xffffffffffffffff
je 0x18020cf26
mov rcx, qword [rsp + 0x68]
mov eax, ebx
lea r8, [rcx + rax*8]
mov rcx, r12
call fcn.18019f810
mov r15d, eax
test eax, eax
js 0x18020eed2
mov rcx, qword [rdi]
mov r10, qword [rsp + 0x90]
mov rdx, qword [rcx + 0xa8]
cmp rdx, r10
je 0x18020cf0f
test rdx, rdx
je 0x18020cedf
cmp rdx, 0xffffffffffffffff
je 0x18020cedf
mov r8, qword [rcx + 8]
test r8, r8
je 0x18020cebe
mov rax, qword [rcx]
mov qword [r8], rax
jmp 0x18020cec5
mov rax, qword [rcx]
mov qword [rdx + 0x30], rax
mov r8, qword [rcx]
test r8, r8
je 0x18020ced7
mov rax, qword [rcx + 8]
mov qword [r8 + 8], rax
jmp 0x18020cedf
mov rax, qword [rcx + 8]
mov qword [rdx + 0x38], rax
cmp r10, 0xffffffffffffffff
je 0x18020cf08
mov rax, qword [r10 + 0x38]
mov qword [rcx + 8], rax
mov rax, qword [r10 + 0x38]
test rax, rax
je 0x18020cefb
mov qword [rax], rcx
jmp 0x18020ceff
mov qword [r10 + 0x30], rcx
xor eax, eax
mov qword [rcx], rax
mov qword [r10 + 0x38], rcx
mov qword [rcx + 0xa8], r10
mov rax, qword [rdi]
mov ecx, dword [rax + 0xc8]
inc ecx
cmp dword [r10 + 0x18], ecx
jae 0x18020cf2e
mov dword [r10 + 0x18], ecx
jmp 0x18020cf2e
mov r10, qword [rsp + 0x90]
inc ebx
add rdi, 8
cmp ebx, esi
jb 0x18020ce60
jmp 0x18020cf46
mov r10, qword [rsp + 0x90]
mov rcx, r12
call fcn.180190d20
xor esi, esi
movsd xmm6, qword [0x1800685a0]
movsd xmm7, qword [0x1800685d8]
mov r8d, esi
mov dword [rsp + 0x48], esi
nop word [rax + rax]
mov ecx, dword [r12 + 0xc]
mov ebx, esi
mov dword [rsp + 0x58], ebx
test ecx, ecx
je 0x18020cf94
mov rax, qword [r12 + 0xce58]
mov r11, qword [rax]
mov qword [rsp + 0x100], r11
jmp 0x18020cf9f
mov r11, rsi
mov qword [rsp + 0x100], rsi
test ecx, ecx
je 0x18020dc76
test r8d, r8d
jne 0x18020cfc3
mov eax, dword [r11 + 0x10]
and eax, 0x900
cmp rax, 0x900
jne 0x18020dc0b
jmp 0x18020cfde
cmp r8d, 1
jne 0x18020cfde
mov eax, dword [r11 + 0x10]
and eax, 0x500
cmp rax, 0x500
jne 0x18020dc0b
cmp r11, r10
je 0x18020dc0b
mov dword [rsp + 0x60], esi
test r8d, r8d
jne 0x18020d0d9
mov rdx, qword [r11 + 8]
lea r8, [rsp + 0xf8]
mov r9b, 0x63
mov rcx, r12
mov qword [rsp + 0x20], r11
call fcn.180190c30
test eax, eax
js 0x18020d08c
mov rdi, qword [rsp + 0xf8]
test rdi, rdi
je 0x18020d0bb
movzx ecx, byte [rdi]
call sub.msvcrt.dll_tolower
cmp eax, 0x63
jne 0x18020d0ac
movzx ecx, byte [rdi + 1]
lea rsi, [rdi + 1]
call sub.msvcrt.dll_isdigit
test eax, eax
je 0x18020d09b
movzx ecx, byte [rdi + 2]
add rdi, 2
call sub.msvcrt.dll_isdigit
test eax, eax
je 0x18020d064
movzx ecx, byte [rdi + 1]
inc rdi
call sub.msvcrt.dll_isdigit
test eax, eax
jne 0x18020d054
movzx eax, byte [rdi]
test al, al
je 0x18020d06f
cmp al, 0x3b
jne 0x18020d0ca
mov rcx, rsi
call sub.msvcrt.dll_atoi
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
mov dword [rsp + 0x60], eax
xor esi, esi
jmp 0x18020d0d9
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
jmp 0x18020d0d9
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
xor esi, esi
jmp 0x18020d0d9
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
jmp 0x18020d0d9
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
jmp 0x18020d0d9
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
xor esi, esi
mov ecx, dword [r11 + 0x18]
mov dword [rsp + 0xa8], 0xf
mov dword [rsp + 0xac], 0xf
shl ecx, 2
mov dword [rsp + 0xb0], 0xf
mov dword [rsp + 0xb4], 0xf
test ecx, ecx
je 0x18020d11a
mov rdi, r13
or rax, 0xffffffffffffffff
rep stosq qword [rdi], rax
mov rdi, qword [r11 + 0x30]
mov dword [rsp + 0x78], esi
test rdi, rdi
je 0x18020d171
mov ebp, dword [rsp + 0x64]
mov ebx, esi
nop dword [rax]
cmp qword [rdi + 0xc0], 0xffffffffffffffff
jne 0x18020d15d
mov edx, dword [rdi + 0xc8]
mov ecx, ebp
lea eax, [rdx + 1]
cmp eax, ebx
cmova ebx, eax
mov eax, dword [rdi + 0xcc]
shr eax, cl
imul edx, r14d
add eax, edx
mov qword [r13 + rax*8], rdi
mov rdi, qword [rdi]
test rdi, rdi
jne 0x18020d130
mov ebp, dword [rsp + 0x70]
mov dword [rsp + 0x78], ebx
mov ebx, dword [rsp + 0x58]
test r8d, r8d
je 0x18020d310
mov eax, dword [r12 + 0x534]
inc dword [r12 + 0x530]
mov qword [rsp + 0xe0], 0xffffffffffffffff
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x18020d1f9
mov eax, dword [r12 + 0xd228]
test al, al
jns 0x18020d310
bt eax, 8
jb 0x18020d1c3
movzx eax, byte [r12 + 0x528]
jmp 0x18020d201
mov edx, esi
lea rcx, [rsp + 0xe0]
nop dword [rax]
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x18020d310
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x18020d310
inc edx
add rcx, 8
cmp edx, 1
jb 0x18020d1d0
mov al, byte [r12 + 0x528]
test al, al
je 0x18020d310
cmp dword [r11 + 0x18], 0
jbe 0x18020d343
mov r12d, dword [r11 + 0x18]
mov ebp, esi
jmp 0x18020d223
mov r14d, r9d
mov r9d, esi
test r14d, r14d
je 0x18020d2e2
mov esi, ebp
lea r11, [rsp + 0xa8]
xor ebx, ebx
nop dword [rax + rax]
mov eax, esi
mov r10, qword [r13 + rax*8]
cmp r10, 0xffffffffffffffff
je 0x18020d2ce
mov edx, ebx
mov edi, ebp
lea r8, [rsp + 0xa8]
nop dword [rax]
cmp r9d, edx
je 0x18020d2c1
mov eax, edi
mov rcx, qword [r13 + rax*8]
cmp rcx, 0xffffffffffffffff
je 0x18020d2c1
mov eax, dword [r10 + 0x98]
shr rax, 0x18
test al, 1
je 0x18020d2a4
mov eax, dword [rcx + 0x98]
shr rax, 0x18
test al, 1
je 0x18020d2a4
mov rax, qword [rcx + 0x148]
cmp qword [r10 + 0x148], rax
sete al
test al, al
jne 0x18020d2c1
mov ecx, edx
mov eax, 1
shl eax, cl
mov ecx, r9d
not eax
and dword [r11], eax
mov eax, 1
shl eax, cl
not eax
and dword [r8], eax
inc edx
inc edi
add r8, 4
cmp edx, r14d
jb 0x18020d260
inc r9d
inc esi
add r11, 4
cmp r9d, r14d
jb 0x18020d240
xor esi, esi
mov r9d, dword [rsp + 0x44]
add ebp, r9d
sub r12, 1
jne 0x18020d220
mov ebx, dword [rsp + 0x58]
mov r11, qword [rsp + 0x100]
mov r8d, dword [rsp + 0x48]
mov ebp, dword [rsp + 0x70]
mov r12, qword [rsp + 0x50]
jmp 0x18020d348
mov r9d, dword [rsp + 0x44]
mov dword [rsp + 0xa8], 1
mov dword [rsp + 0xac], 2
mov dword [rsp + 0xb0], 4
mov dword [rsp + 0xb4], 8
jmp 0x18020d348
mov r9d, dword [rsp + 0x44]
test r9d, r9d
je 0x18020d37c
lea rdx, [rsp + 0xa8]
mov edi, r9d
nop dword [rax + rax]
mov ecx, dword [rdx]
mov eax, esi
bt ecx, eax
jb 0x18020d370
inc eax
cmp eax, r9d
jb 0x18020d364
mov dword [rdx], eax
add rdx, 4
sub rdi, 1
jne 0x18020d360
mov r14d, esi
mov dword [rsp + 0x5c], esi
test ebp, ebp
je 0x18020d5f4
nop dword [rax + rax]
test r8d, r8d
jne 0x18020d39e
test r14d, r14d
jne 0x18020dc91
lea r13, [0x180012bf0]
mov r14d, esi
mov dword [rsp + 0xa0], esi
mov qword [rsp + 0xe0], r13
test r14d, r14d
je 0x18020d459
test r8d, r8d
je 0x18020d5ce
mov eax, dword [r12 + 0x54c]
inc dword [r12 + 0x548]
mov qword [rsp + 0x80], 0xffffffffffffffff
and eax, 0xff000000
cmp eax, 0xb000000
jne 0x18020d449
mov eax, dword [r12 + 0xd228]
test al, al
jns 0x18020d5ce
bt eax, 8
jb 0x18020d412
movzx eax, byte [r12 + 0x540]
jmp 0x18020d451
mov edx, esi
lea rcx, [rsp + 0x80]
nop dword [rax]
mov rax, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x18020d5ce
mov eax, dword [rax + 0x98]
bt rax, 0xf
jb 0x18020d5ce
inc edx
add rcx, 8
cmp edx, 1
jb 0x18020d420
mov al, byte [r12 + 0x540]
test al, al
je 0x18020d5ce
mov edi, esi
test r9d, r9d
je 0x18020d491
mov rdx, rsi
mov eax, dword [rsp + rdx + 0xa8]
mov ecx, dword [r13 + rax*4]
mov dword [rsp + rdx + 0xb8], ecx
cmp ecx, r9d
jae 0x18020d488
inc edi
add rdx, 4
cmp edi, r9d
jb 0x18020d463
jmp 0x18020d491
cmp edi, r9d
jb 0x18020d5a0
mov r12d, dword [r11 + 0x18]
test r12d, r12d
je 0x18020d599
mov ebx, dword [rsp + 0x5c]
mov r12, qword [rsp + 0x98]
mov r14d, dword [rsp + 0x60]
xor r13d, r13d
mov ebp, r13d
nop word [rax + rax]
mov r10d, r13d
test r9d, r9d
je 0x18020d568
lea r11d, [rsi + rbx]
mov r8d, ebp
add r11d, r14d
imul r11d, r9d
lea r9, [rsp + 0xb8]
nop word [rax + rax]
mov ecx, dword [r9]
mov eax, r8d
mov rdi, qword [r12 + rax*8]
mov rax, qword [rsp + 0x68]
add ecx, r11d
mov rdx, qword [rax + rcx*8]
cmp rdi, 0xffffffffffffffff
je 0x18020d54a
cmp rdx, 0xffffffffffffffff
je 0x18020d54a
cmp dword [rsp + 0x48], 1
jne 0x18020d55b
mov eax, dword [rdi + 0x98]
shr rax, 0x18
test al, 1
je 0x18020d55b
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
je 0x18020d55b
mov rax, qword [rdx + 0x148]
cmp qword [rdi + 0x148], rax
sete al
test al, al
je 0x18020d55b
inc r10d
inc r8d
add r9, 4
cmp r10d, dword [rsp + 0x44]
jb 0x18020d4f0
mov r11, qword [rsp + 0x100]
mov r9d, dword [rsp + 0x44]
cmp r10d, r9d
jne 0x18020d57c
inc esi
add ebp, r9d
cmp esi, dword [r11 + 0x18]
jb 0x18020d4c0
mov ebx, dword [rsp + 0x58]
mov r12d, dword [r11 + 0x18]
mov r13, qword [rsp + 0xe0]
mov r14d, dword [rsp + 0xa0]
mov r8d, dword [rsp + 0x48]
cmp esi, r12d
je 0x18020d5c6
xor esi, esi
mov r12, qword [rsp + 0x50]
inc r14d
add r13, 0x10
mov dword [rsp + 0xa0], r14d
mov qword [rsp + 0xe0], r13
cmp r14d, 0x18
jb 0x18020d3b7
cmp r14d, 0x18
jne 0x18020d5ef
xor esi, esi
mov r14d, dword [rsp + 0x5c]
mov ebp, dword [rsp + 0x70]
mov r12, qword [rsp + 0x50]
inc r14d
mov dword [rsp + 0x5c], r14d
cmp r14d, ebp
jb 0x18020d390
jmp 0x18020d5f4
mov r14d, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x78]
mov edx, dword [rsp + 0x60]
mov r10, qword [rsp + 0x90]
add ecx, r14d
add ecx, edx
cmp dword [r10 + 0x18], ecx
jae 0x18020d613
mov dword [r10 + 0x18], ecx
mov rbp, qword [r11 + 0x30]
test rbp, rbp
jne 0x18020d624
xor r9d, r9d
mov rdi, r9
jmp 0x18020d62b
mov rdi, qword [rbp]
xor r9d, r9d
test rbp, rbp
je 0x18020dbdd
mov r12, qword [rsp + 0x50]
nop dword [rax]
mov r13d, dword [rbp + 0xc8]
add r13d, r14d
add r13d, edx
test byte [r12 + 0xcefe], 1
jne 0x18020d945
cmp r8d, 1
je 0x18020d945
cmp qword [rbp + 0xc0], 0xffffffffffffffff
jne 0x18020d945
cmp qword [rbp + 0xb8], 0xffffffffffffffff
jne 0x18020d945
test byte [r12 + 0xcefb], 0x20
jne 0x18020d69c
mov eax, dword [r11 + 0x10]
bt rax, 0xb
jb 0x18020d9c7
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020d6ae
xor r15d, r15d
mov rcx, r15
jmp 0x18020d6ba
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r15d, r15d
mov rcx, rax
cmp qword [rcx + 0x18], 0
je 0x18020d6ee
mov rsi, qword [rcx + 0x18]
test rsi, rsi
jne 0x18020d6cf
mov rsi, r15
jmp 0x18020d705
mov rax, qword [rsi]
mov qword [rcx + 0x18], rax
test rax, rax
jne 0x18020d6df
mov qword [rcx + 0x20], r15
movabs rax, 0xfefefefefefefefe
mov qword [rsi], rax
jmp 0x18020d705
mov rcx, qword [rcx + 0x10]
mov edx, 0x188
mov r8d, 0x10
call fcn.180243b70
mov rsi, rax
test rsi, rsi
je 0x18020d88e
mov rdx, rbp
mov rcx, rsi
mov qword [rsi], r15
mov qword [rsi + 8], r15
mov qword [rsi + 0x78], r15
mov qword [rsi + 0x80], r15
mov qword [rsi + 0x88], r15
mov qword [rsi + 0x90], r15
mov dword [rsi + 0xa0], 0xffffffff
mov qword [rsi + 0xa8], 0xffffffffffffffff
mov qword [rsi + 0x40], r15
call fcn.1801994e0
mov r15d, eax
test eax, eax
js 0x18020d81c
mov rdx, qword [rsi + 0xa8]
mov eax, dword [rdx + 0x10]
bt rax, 8
jae 0x18020d7c2
cmp qword [rsi + 0xc0], 0xffffffffffffffff
jne 0x18020d7c2
cmp qword [rsi + 0xb8], 0xffffffffffffffff
jne 0x18020d7c2
movsd xmm1, qword [rsi + 0x140]
or qword [rsi + 0x98], 0x1000010
mov rcx, qword [rsi + 0x98]
cvttsd2si eax, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
andpd xmm1, xmm6
comisd xmm7, xmm1
jbe 0x18020d7c2
bts rcx, 0x15
mov qword [rsi + 0x98], rcx
mov rcx, rsi
call fcn.18019c4f0
test al, al
je 0x18020d7d9
or qword [rsi + 0x98], 0x20000
mov rax, qword [rdx + 0x10]
test al, 0x10
je 0x18020d7f0
bt rax, 0x15
jae 0x18020d7f0
or qword [rsi + 0x98], 0x10
mov eax, dword [r12 + 0x10]
mov r8, rsi
mov qword [rsp + 0xe8], rsi
mov dword [rsi + 0xa0], eax
inc dword [r12 + 0x10]
or dword [r12 + 0x28], 4
xor r9d, r9d
mov r15d, r9d
jmp 0x18020d89f
call fcn.1801991c0
mov ecx, dword [0x18025e63c]
test ecx, ecx
jns 0x18020d832
xor eax, eax
mov r12, rax
jmp 0x18020d83b
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov r12, rax
mov edx, 0xfe
mov r8d, 0x188
mov rcx, rsi
call fcn.18024adb8
xor r9d, r9d
mov qword [rsi], r9
mov rax, qword [r12 + 0x20]
test rax, rax
je 0x18020d875
mov r8, qword [rsp + 0xe8]
mov qword [rax], rsi
mov qword [r12 + 0x20], rsi
mov r12, qword [rsp + 0x50]
jmp 0x18020d89f
mov r8, qword [rsp + 0xe8]
mov qword [r12 + 0x18], rsi
mov qword [r12 + 0x20], rsi
mov r12, qword [rsp + 0x50]
jmp 0x18020d89f
mov r8, qword [rsp + 0xe8]
mov r15d, 0x8007000e
xor r9d, r9d
test r15d, r15d
js 0x18020eeca
mov rcx, qword [r8 + 0xa8]
mov r10, qword [rsp + 0x90]
mov dword [r8 + 0xc8], r13d
cmp rcx, r10
je 0x18020d92e
test rcx, rcx
je 0x18020d900
cmp rcx, 0xffffffffffffffff
je 0x18020d900
mov rdx, qword [r8 + 8]
test rdx, rdx
je 0x18020d8df
mov rax, qword [r8]
mov qword [rdx], rax
jmp 0x18020d8e6
mov rax, qword [r8]
mov qword [rcx + 0x30], rax
mov rdx, qword [r8]
test rdx, rdx
je 0x18020d8f8
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
jmp 0x18020d900
mov rax, qword [r8 + 8]
mov qword [rcx + 0x38], rax
cmp r10, 0xffffffffffffffff
je 0x18020d927
mov rax, qword [r10 + 0x38]
mov qword [r8 + 8], rax
mov rax, qword [r10 + 0x38]
test rax, rax
je 0x18020d91c
mov qword [rax], r8
jmp 0x18020d920
mov qword [r10 + 0x30], r8
mov qword [r8], r9
mov qword [r10 + 0x38], r8
mov qword [r8 + 0xa8], r10
mov r11, qword [rsp + 0x100]
mov qword [rbp + 0xe0], r8
mov rbp, r8
jmp 0x18020d9c7
mov rcx, qword [rbp + 0xa8]
mov dword [rbp + 0xc8], r13d
cmp rcx, r10
je 0x18020d9c7
test rcx, rcx
je 0x18020d998
cmp rcx, 0xffffffffffffffff
je 0x18020d998
mov rdx, qword [rbp + 8]
test rdx, rdx
je 0x18020d975
mov rax, qword [rbp]
mov qword [rdx], rax
jmp 0x18020d97d
mov rax, qword [rbp]
mov qword [rcx + 0x30], rax
mov rdx, qword [rbp]
test rdx, rdx
je 0x18020d990
mov rax, qword [rbp + 8]
mov qword [rdx + 8], rax
jmp 0x18020d998
mov rax, qword [rbp + 8]
mov qword [rcx + 0x38], rax
cmp r10, 0xffffffffffffffff
je 0x18020d9c0
mov rax, qword [r10 + 0x38]
mov qword [rbp + 8], rax
mov rax, qword [r10 + 0x38]
test rax, rax
je 0x18020d9b4
mov qword [rax], rbp
jmp 0x18020d9b8
mov qword [r10 + 0x30], rbp
mov qword [rbp], r9
mov qword [r10 + 0x38], rbp
mov qword [rbp + 0xa8], r10
mov ecx, dword [rsp + 0x64]
mov eax, dword [rbp + 0xcc]
mov r9, qword [rbp + 0xc0]
shr rax, cl
mov edx, dword [rsp + rax*4 + 0xb8]
mov r8d, edx
shl r8d, cl
mov dword [rbp + 0xcc], r8d
cmp r9, 0xffffffffffffffff
jne 0x18020dac3
imul r13d, dword [rsp + 0x44]
mov r8, qword [rsp + 0x68]
add r13d, edx
cmp qword [r8 + r13*8], r9
jne 0x18020da16
mov qword [r8 + r13*8], rbp
jmp 0x18020dbc1
mov rcx, qword [r12 + 0xd038]
mov rdx, qword [rbp + 0xa8]
cmp rdx, rcx
je 0x18020daae
test rdx, rdx
je 0x18020da78
cmp rdx, 0xffffffffffffffff
je 0x18020da78
mov r8, qword [rbp + 8]
test r8, r8
je 0x18020da4b
mov rax, qword [rbp]
mov qword [r8], rax
jmp 0x18020da53
mov rax, qword [rbp]
mov qword [rdx + 0x30], rax
mov r8, qword [rbp]
test r8, r8
je 0x18020da6b
mov rax, qword [rbp + 8]
mov qword [r8 + 8], rax
mov r8, qword [rsp + 0x68]
jmp 0x18020da78
mov rax, qword [rbp + 8]
mov r8, qword [rsp + 0x68]
mov qword [rdx + 0x38], rax
test rcx, rcx
je 0x18020daa7
cmp rcx, 0xffffffffffffffff
je 0x18020daa7
mov rax, qword [rcx + 0x38]
mov qword [rbp + 8], rax
mov rax, qword [rcx + 0x38]
test rax, rax
je 0x18020da99
mov qword [rax], rbp
jmp 0x18020da9d
mov qword [rcx + 0x30], rbp
xor eax, eax
mov qword [rbp], rax
mov qword [rcx + 0x38], rbp
mov qword [rbp + 0xa8], rcx
mov rax, qword [r8 + r13*8]
mov byte [rsp + 0x40], 1
mov qword [rbp + 0xe0], rax
jmp 0x18020dbc1
mov rcx, qword [r10 + 0x30]
or rdx, 0xffffffffffffffff
test rcx, rcx
je 0x18020dbc1
cmp rbp, rcx
je 0x18020db12
cmp qword [rcx + 0xe0], rcx
jne 0x18020db12
cmp qword [rcx + 0xc0], r9
jne 0x18020db12
mov eax, dword [rbp + 0xc8]
cmp dword [rcx + 0xc8], eax
jne 0x18020db12
cmp dword [rcx + 0xcc], r8d
jne 0x18020db12
mov eax, dword [rbp + 0xf8]
cmp dword [rcx + 0xf8], eax
cmove rdx, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18020dad4
cmp rdx, 0xffffffffffffffff
je 0x18020dbc1
mov rax, qword [rdx + 0xe0]
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0xe0], rax
mov rcx, qword [r12 + 0xd038]
cmp rdx, rcx
je 0x18020dbbc
test rdx, rdx
je 0x18020db86
cmp rdx, 0xffffffffffffffff
je 0x18020db86
mov r8, qword [rbp + 8]
test r8, r8
je 0x18020db63
mov rax, qword [rbp]
mov qword [r8], rax
jmp 0x18020db6b
mov rax, qword [rbp]
mov qword [rdx + 0x30], rax
mov r8, qword [rbp]
test r8, r8
je 0x18020db7e
mov rax, qword [rbp + 8]
mov qword [r8 + 8], rax
jmp 0x18020db86
mov rax, qword [rbp + 8]
mov qword [rdx + 0x38], rax
test rcx, rcx
je 0x18020dbb5
cmp rcx, 0xffffffffffffffff
je 0x18020dbb5
mov rax, qword [rcx + 0x38]
mov qword [rbp + 8], rax
mov rax, qword [rcx + 0x38]
test rax, rax
je 0x18020dba7
mov qword [rax], rbp
jmp 0x18020dbab
mov qword [rcx + 0x30], rbp
xor eax, eax
mov qword [rbp], rax
mov qword [rcx + 0x38], rbp
mov qword [rbp + 0xa8], rcx
mov byte [rsp + 0x40], 1
mov rbp, rdi
test rdi, rdi
je 0x18020dbe2
mov rdi, qword [rdi]
mov r8d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x60]
xor r9d, r9d
jmp 0x18020d640
mov r12, qword [rsp + 0x50]
test byte [r12 + 0xcefe], 1
jne 0x18020dc2d
mov r8d, dword [rsp + 0x48]
cmp r8d, 1
je 0x18020dc32
mov r13, qword [rsp + 0x98]
mov ebp, dword [rsp + 0x70]
mov r14d, dword [rsp + 0x44]
xor esi, esi
mov eax, dword [r12 + 0xc]
inc ebx
mov dword [rsp + 0x58], ebx
cmp ebx, eax
jb 0x18020dc4f
mov r11, rsi
mov qword [rsp + 0x100], rsi
mov ebx, eax
mov dword [rsp + 0x58], eax
jmp 0x18020dc63
mov r8d, dword [rsp + 0x48]
and qword [r11 + 0x10], 0xfffffffffffff3ff
mov r13, qword [rsp + 0x98]
mov ebp, dword [rsp + 0x70]
mov r14d, dword [rsp + 0x44]
xor esi, esi
jmp 0x18020dc0b
mov rax, qword [r12 + 0xce58]
mov r11, qword [rax + rbx*8]
mov qword [rsp + 0x100], r11
mov r10, qword [rsp + 0x90]
cmp ebx, dword [r12 + 0xc]
jb 0x18020cfa7
inc r8d
mov dword [rsp + 0x48], r8d
cmp r8d, 2
jae 0x18020dcc1
mov r10, qword [rsp + 0x90]
jmp 0x18020cf70
mov eax, dword [r11 + 0x28]
lea r9, [0x180058ff0]
xor edx, edx
mov r8d, 0xfb0
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.18019df20
mov r15d, 0x80004001
mov r14d, 1
jmp 0x18020eef8
movzx ebx, byte [rsp + 0x40]
test bl, bl
je 0x18020dcfa
xor edx, edx
mov rcx, r12
call fcn.180190da0
mov rcx, r12
mov edi, eax
call fcn.180190fd0
test eax, eax
je 0x18020dcee
test edi, edi
je 0x18020dcee
mov r15d, 1
jmp 0x18020dcf1
mov r15d, esi
test r15d, r15d
js 0x18020eeda
mov edi, dword [r12 + 0xc]
or ebp, 0xffffffff
mov edx, ebp
inc edx
cmp edx, edi
jae 0x18020de1c
mov rax, qword [r12 + 0xce58]
mov rcx, qword [rax + rdx*8]
cmp qword [rcx + 0x30], 0
je 0x18020dd04
mov rax, qword [rcx + 0x10]
bt rax, 8
jae 0x18020dd04
test rax, 0xc00
jne 0x18020dd04
mov rcx, qword [rcx + 0x30]
mov r9, qword [rcx]
nop dword [rax + rax]
mov r8, qword [rcx + 0xa8]
mov dword [rcx + 0xc8], ebp
mov rdi, qword [r12 + 0xd040]
cmp r8, rdi
je 0x18020ddca
test r8, r8
je 0x18020dd97
cmp r8, 0xffffffffffffffff
je 0x18020dd97
mov r10, qword [rcx + 8]
test r10, r10
je 0x18020dd76
mov rax, qword [rcx]
mov qword [r10], rax
jmp 0x18020dd7d
mov rax, qword [rcx]
mov qword [r8 + 0x30], rax
mov r10, qword [rcx]
test r10, r10
je 0x18020dd8f
mov rax, qword [rcx + 8]
mov qword [r10 + 8], rax
jmp 0x18020dd97
mov rax, qword [rcx + 8]
mov qword [r8 + 0x38], rax
test rdi, rdi
je 0x18020ddc3
cmp rdi, 0xffffffffffffffff
je 0x18020ddc3
mov rax, qword [rdi + 0x38]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x18020ddb8
mov qword [rax], rcx
jmp 0x18020ddbc
mov qword [rdi + 0x30], rcx
mov qword [rcx], rsi
mov qword [rdi + 0x38], rcx
mov qword [rcx + 0xa8], rdi
test r9, r9
je 0x18020ddd7
mov rcx, r9
mov r9, qword [r9]
jmp 0x18020de13
mov edi, dword [r12 + 0xc]
nop dword [rax]
inc edx
cmp edx, edi
jae 0x18020de1c
mov rax, qword [r12 + 0xce58]
mov rcx, qword [rax + rdx*8]
cmp qword [rcx + 0x30], 0
je 0x18020dde0
mov rax, qword [rcx + 0x10]
bt rax, 8
jae 0x18020dde0
test rax, 0xc00
jne 0x18020dde0
mov rcx, qword [rcx + 0x30]
mov r9, qword [rcx]
test rcx, rcx
jne 0x18020dd40
mov r13, qword [r12 + 0x18]
mov qword [rsp + 0x98], r13
test r13, r13
je 0x18020eb4f
movabs rcx, 0x101010101010101
nop dword [rax]
mov edx, dword [r13 + 0x78]
mov r14d, edx
mov dword [rsp + 0x5c], edx
and r14d, 0xfff00000
mov dword [rsp + 0x48], r14d
je 0x18020eb36
mov r9d, 1
xor r11d, r11d
mov eax, edx
shr eax, 0x1c
mov dword [rsp + 0xb0], 2
mov dword [rsp + 0xb4], 3
mov dword [rsp + 0xa8], r11d
mov dword [rsp + 0xac], r9d
cmp eax, r9d
je 0x18020dea5
cmp eax, 2
je 0x18020dea5
cmp eax, 3
je 0x18020dea5
cmp eax, 4
jne 0x18020df0c
mov r10d, dword [rsp + 0x44]
mov edi, r11d
test r10d, r10d
je 0x18020df0c
mov r9d, dword [r13 + 0x20]
mov r14d, dword [rsp + 0x64]
mov r8, r11
lea rdx, [rsp + 0xa8]
cmp edi, r9d
jae 0x18020dee2
mov rax, qword [r13 + 0x28]
mov rcx, qword [rax + r8]
mov eax, dword [rcx + 0xcc]
mov ecx, r14d
shr eax, cl
mov dword [rdx], eax
jmp 0x18020dee4
mov dword [rdx], ebp
inc edi
add r8, 8
add rdx, 4
cmp edi, r10d
jb 0x18020dec6
mov r14d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x5c]
movabs rcx, 0x101010101010101
mov r9d, 1
mov r8d, r11d
mov dword [rsp + 0x58], r11d
mov edi, dword [r13 + 0x10]
xor eax, eax
mov qword [rsp + 0xb8], 0xffffffffffffffff
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x8c], eax
mov eax, edx
mov qword [rsp + 0xc0], 0xffffffffffffffff
shr eax, 0x1c
mov qword [rsp + 0xc8], 0xffffffffffffffff
mov qword [rsp + 0xd0], 0xffffffffffffffff
mov qword [rsp + 0x100], rcx
mov esi, r11d
mov r10d, r11d
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x60], r11d
mov rbp, r11
mov qword [rsp + 0x70], r11
mov dword [rsp + 0xa0], edi
cmp eax, 0xa
jne 0x18020dfb4
cmp r14d, 0xa1300000
je 0x18020dfd5
cmp r14d, 0xa1400000
je 0x18020dfd5
mov r9d, edx
and r9d, 0xfffff
jmp 0x18020dfd5
cmp r14d, 0x68700000
je 0x18020dfd2
cmp r14d, 0x68800000
je 0x18020dfd2
mov r9d, edx
and r9d, 0xfffff
jmp 0x18020dfd5
mov r9d, edi
mov ecx, r9d
imul ecx, r10d
lea eax, [rcx + r9]
cmp eax, edi
ja 0x18020e4bb
mov rax, qword [r13 + 0x18]
lea r13, [rax + rcx*8]
test r9d, r9d
je 0x18020e4b3
movsxd r12, esi
mov eax, r8d
test r8d, r8d
je 0x18020e2de
sub eax, 1
je 0x18020e16f
cmp eax, 1
jne 0x18020e2ba
test r9d, r9d
je 0x18020e2ba
mov r14, qword [rsp + 0x70]
mov ebp, r9d
nop dword [rax + rax]
mov r9, qword [r13]
add r9, 0xb8
mov rdx, qword [r9]
cmp rdx, 0xffffffffffffffff
jne 0x18020e04c
mov r15d, r11d
jmp 0x18020e14d
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x18020e14a
cmp qword [rdx + 0xc0], 0xffffffffffffffff
jne 0x18020e14a
mov rax, qword [rsp + 0x50]
lea r10, [rsp + 0xa8]
movzx ebx, byte [rax + 0xcef4]
shr bl, 2
not bl
and bl, 1
mov byte [rsp + r14 + 0x100], bl
xor eax, eax
mov ecx, eax
mov rdi, rax
test esi, esi
je 0x18020e0f3
mov r8, qword [r9]
nop word [rax + rax]
mov rdx, qword [rsp + rdi*8 + 0xb8]
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
je 0x18020e0ea
mov eax, dword [r8 + 0x98]
shr rax, 0x18
test al, 1
je 0x18020e0ea
mov rax, qword [r8 + 0x148]
cmp qword [rdx + 0x148], rax
sete al
test al, al
jne 0x18020e0f3
inc ecx
inc rdi
cmp ecx, esi
jb 0x18020e0b0
cmp ecx, dword [rsp + 0x44]
jae 0x18020e13f
cmp ecx, esi
jne 0x18020e10d
mov rax, qword [r9]
inc esi
inc r12
mov qword [rsp + r12*8 + 0xb0], rax
test bl, bl
jne 0x18020e122
mov ecx, dword [r10]
mov eax, 1
shl eax, cl
or dword [rsp + rdi*4 + 0x80], eax
inc r11d
add r9, 8
add r10, 4
cmp r11d, 1
jb 0x18020e095
xor r11d, r11d
mov r15d, r11d
jmp 0x18020e14d
mov r15d, 1
xor r11d, r11d
jmp 0x18020e14d
mov r15d, r11d
add r13, 8
sub rbp, 1
jne 0x18020e030
mov r14d, dword [rsp + 0x48]
mov rbp, qword [rsp + 0x70]
mov r10d, dword [rsp + 0x60]
jmp 0x18020e2ba
test r9d, r9d
je 0x18020e2ba
mov r14, qword [rsp + 0x70]
mov ebp, r9d
mov r9, qword [r13]
add r9, 0xc0
mov rdx, qword [r9]
cmp rdx, 0xffffffffffffffff
jne 0x18020e19c
mov r15d, r11d
jmp 0x18020e29d
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x18020e29a
cmp qword [rdx + 0xc0], 0xffffffffffffffff
jne 0x18020e29a
mov rax, qword [rsp + 0x50]
lea r10, [rsp + 0xa8]
movzx ebx, byte [rax + 0xcef4]
shr bl, 2
not bl
and bl, 1
mov byte [rsp + r14 + 0x100], bl
xor eax, eax
mov ecx, eax
mov rdi, rax
test esi, esi
je 0x18020e243
mov r8, qword [r9]
nop word [rax + rax]
mov rdx, qword [rsp + rdi*8 + 0xb8]
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test al, 1
je 0x18020e23a
mov eax, dword [r8 + 0x98]
shr rax, 0x18
test al, 1
je 0x18020e23a
mov rax, qword [r8 + 0x148]
cmp qword [rdx + 0x148], rax
sete al
test al, al
jne 0x18020e243
inc ecx
inc rdi
cmp ecx, esi
jb 0x18020e200
cmp ecx, dword [rsp + 0x44]
jae 0x18020e28f
cmp ecx, esi
jne 0x18020e25d
mov rax, qword [r9]
inc esi
inc r12
mov qword [rsp + r12*8 + 0xb0], rax
test bl, bl
jne 0x18020e272
mov ecx, dword [r10]
mov eax, 1
shl eax, cl
or dword [rsp + rdi*4 + 0x80], eax
inc r11d
add r9, 8
add r10, 4
cmp r11d, 1
jb 0x18020e1e5
xor r11d, r11d
mov r15d, r11d
jmp 0x18020e29d
mov r15d, 1
xor r11d, r11d
jmp 0x18020e29d
mov r15d, r11d
add r13, 8
sub rbp, 1
jne 0x18020e180
mov r14d, dword [rsp + 0x48]
mov rbp, qword [rsp + 0x70]
mov r10d, dword [rsp + 0x60]
cmp r15d, 1
jne 0x18020e464
mov r13, qword [rsp + 0x98]
mov r8d, dword [rsp + 0x44]
mov rbp, qword [rsp + 0x50]
mov r9d, r15d
jmp 0x18020e714
mov r8, qword [r13]
cmp r8, 0xffffffffffffffff
jne 0x18020e2f0
mov r15d, r11d
jmp 0x18020e464
mov rax, qword [r8 + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x18020e461
cmp qword [r8 + 0xc0], 0xffffffffffffffff
jne 0x18020e461
mov rax, qword [rsp + 0x50]
mov r15d, 1
movzx eax, byte [rax + 0xcef4]
mov edi, r15d
shr al, 2
not al
and al, 1
mov byte [rsp + rbp + 0x100], al
cmp r9d, r15d
jbe 0x18020e395
lea rdx, [r13 + 8]
cmp byte [rsp + rbp + 0x100], 0
je 0x18020e395
mov eax, dword [r8 + 0x98]
mov rcx, qword [rdx]
shr rax, 0x18
test r15b, al
je 0x18020e382
mov eax, dword [rcx + 0x98]
shr rax, 0x18
test r15b, al
je 0x18020e382
mov rax, qword [rcx + 0x148]
cmp qword [r8 + 0x148], rax
sete al
test al, al
jne 0x18020e38a
mov byte [rsp + rbp + 0x100], 0
inc edi
add rdx, 8
cmp edi, r9d
jb 0x18020e341
test r9d, r9d
je 0x18020e459
mov r8d, dword [rsp + 0x44]
lea r10, [rsp + 0xa8]
lea rbx, [rsp + r12*8 + 0xb8]
xor eax, eax
mov ecx, eax
mov rdi, rax
test esi, esi
je 0x18020e40c
mov r8, qword [r13]
mov rdx, qword [rsp + rdi*8 + 0xb8]
mov eax, dword [rdx + 0x98]
shr rax, 0x18
test r15b, al
je 0x18020e3fe
mov eax, dword [r8 + 0x98]
shr rax, 0x18
test r15b, al
je 0x18020e3fe
mov rax, qword [r8 + 0x148]
cmp qword [rdx + 0x148], rax
sete al
test al, al
jne 0x18020e407
inc ecx
inc rdi
cmp ecx, esi
jb 0x18020e3c2
mov r8d, dword [rsp + 0x44]
cmp ecx, r8d
jae 0x18020e49b
cmp ecx, esi
jne 0x18020e427
mov rax, qword [r13]
inc esi
add rbx, 8
mov qword [rbx - 8], rax
cmp byte [rsp + rbp + 0x100], 0
jne 0x18020e440
mov ecx, dword [r10]
mov eax, r15d
shl eax, cl
or dword [rsp + rdi*4 + 0x80], eax
inc r11d
add r13, 8
add r10, 4
cmp r11d, r9d
jb 0x18020e3b3
mov r10d, dword [rsp + 0x60]
xor r11d, r11d
mov r15d, r11d
jmp 0x18020e464
mov r15d, r11d
mov edx, dword [rsp + 0x5c]
mov edi, dword [rsp + 0xa0]
mov eax, dword [rsp + 0x78]
mov r13, qword [rsp + 0x98]
mov r8d, dword [rsp + 0x58]
inc r10d
inc rbp
mov dword [rsp + 0x60], r10d
mov r9d, 1
mov qword [rsp + 0x70], rbp
jmp 0x18020df91
mov r13, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x50]
mov r9, r15
xor r11d, r11d
jmp 0x18020e714
mov r13, qword [rsp + 0x98]
mov esi, dword [rsp + 0x44]
mov rbp, qword [rsp + 0x50]
mov r8, qword [rsp + 0x68]
lea rax, [rsp + 0x80]
mov r9d, esi
mov rdx, r13
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb8]
mov rcx, rbp
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x20], eax
call fcn.180218530
test eax, eax
js 0x18020e70a
mov r12d, dword [rsp + 0x58]
xor r11d, r11d
mov ebp, r11d
nop dword [rax]
mov edx, dword [r13 + 0x78]
mov eax, edx
mov dword [rsp + 0x5c], edx
and eax, 0xf0000000
cmp eax, 0xa0000000
jne 0x18020e562
mov r14d, edx
and r14d, 0xfff00000
mov dword [rsp + 0x48], r14d
cmp r14d, 0xa1300000
je 0x18020e557
cmp r14d, 0xa1400000
je 0x18020e557
mov ebx, edx
mov r8d, 1
and ebx, 0xfffff
jmp 0x18020e59d
mov r8d, 1
mov ebx, r8d
jmp 0x18020e59d
mov r14d, edx
and r14d, 0xfff00000
mov dword [rsp + 0x48], r14d
cmp r14d, 0x68700000
je 0x18020e593
cmp r14d, 0x68800000
je 0x18020e593
mov ebx, edx
mov r8d, 1
and ebx, 0xfffff
jmp 0x18020e59d
mov ebx, dword [r13 + 0x10]
mov r8d, 1
mov ecx, ebx
imul ecx, ebp
lea eax, [rcx + rbx]
cmp eax, dword [r13 + 0x10]
ja 0x18020e6ff
mov rax, qword [r13 + 0x18]
lea rdi, [rax + rcx*8]
test ebx, ebx
je 0x18020e6ff
mov eax, r12d
test r12d, r12d
je 0x18020e6a3
sub eax, 1
je 0x18020e643
cmp eax, 1
jne 0x18020e6f5
mov esi, r11d
test ebx, ebx
je 0x18020e6f1
nop word [rax + rax]
mov rdx, qword [rdi]
add rdx, 0xb8
cmp qword [rdx], 0xffffffffffffffff
jne 0x18020e605
mov r15d, r11d
jmp 0x18020e625
mov r9d, dword [rsp + 0x44]
lea rcx, [rsp + 0xb8]
call fcn.180217dc0
mov r15d, eax
test eax, eax
js 0x18020eebd
xor r11d, r11d
inc esi
add rdi, 8
mov r8d, 1
cmp esi, ebx
jb 0x18020e5f0
mov esi, dword [rsp + 0x44]
inc ebp
xor r11d, r11d
jmp 0x18020e510
mov esi, r11d
test ebx, ebx
je 0x18020e6e3
nop
mov rdx, qword [rdi]
add rdx, 0xc0
cmp qword [rdx], 0xffffffffffffffff
jne 0x18020e665
mov r15d, r11d
jmp 0x18020e685
mov r9d, dword [rsp + 0x44]
lea rcx, [rsp + 0xb8]
call fcn.180217dc0
mov r15d, eax
test eax, eax
js 0x18020eeb0
xor r11d, r11d
inc esi
add rdi, 8
mov r8d, 1
cmp esi, ebx
jb 0x18020e650
mov esi, dword [rsp + 0x44]
inc ebp
xor r11d, r11d
jmp 0x18020e510
cmp qword [rdi], 0xffffffffffffffff
jne 0x18020e6b6
mov r15d, r11d
inc ebp
xor r11d, r11d
jmp 0x18020e510
lea rcx, [rsp + 0xb8]
mov r9d, esi
mov r8d, ebx
mov rdx, rdi
call fcn.180217dc0
mov r15d, eax
test eax, eax
jns 0x18020e6f5
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov esi, dword [rsp + 0x44]
inc ebp
xor r11d, r11d
jmp 0x18020e510
mov esi, dword [rsp + 0x44]
inc ebp
xor r11d, r11d
jmp 0x18020e510
mov bl, 1
mov byte [rsp + 0x40], bl
jmp 0x18020eb05
xor r11d, r11d
mov r8d, esi
lea r9d, [r11 + 1]
mov r12d, r11d
mov edx, dword [r13 + 0x78]
xor eax, eax
mov qword [rsp + 0xb8], 0xffffffffffffffff
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x8c], eax
mov eax, edx
mov qword [rsp + 0xc0], 0xffffffffffffffff
and eax, 0xf0000000
mov qword [rsp + 0xc8], 0xffffffffffffffff
mov qword [rsp + 0xd0], 0xffffffffffffffff
mov dword [rsp + 0x5c], edx
cmp eax, 0xa0000000
jne 0x18020e7ab
mov r14d, edx
and r14d, 0xfff00000
mov dword [rsp + 0x48], r14d
cmp r14d, 0xa1300000
je 0x18020e7a6
cmp r14d, 0xa1400000
je 0x18020e7a6
mov esi, edx
and esi, 0xfffff
jmp 0x18020e7da
mov esi, r9d
jmp 0x18020e7da
mov r14d, edx
and r14d, 0xfff00000
mov dword [rsp + 0x48], r14d
cmp r14d, 0x68700000
je 0x18020e7d6
cmp r14d, 0x68800000
je 0x18020e7d6
mov esi, edx
and esi, 0xfffff
jmp 0x18020e7da
mov esi, dword [r13 + 0x10]
mov ecx, r12d
imul ecx, esi
lea eax, [rcx + rsi]
cmp eax, dword [r13 + 0x10]
ja 0x18020eafb
mov rax, qword [r13 + 0x18]
lea rbx, [rax + rcx*8]
test esi, esi
je 0x18020eb01
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x18020ea02
sub eax, 1
je 0x18020e912
cmp eax, 1
jne 0x18020eae3
mov ebp, r11d
test esi, esi
je 0x18020eae3
nop word [rax + rax]
mov rdi, qword [rbx]
mov dword [rsp + 0x80], r9d
mov rdx, qword [rdi + 0xb8]
mov qword [rsp + 0xb8], rdx
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x18020e8fa
cmp qword [rdx + 0xc0], 0xffffffffffffffff
jne 0x18020e8fa
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x80]
mov r9d, r8d
mov r8, qword [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x64]
mov rdx, r13
mov dword [rsp + 0x20], eax
call fcn.180218530
mov r15d, eax
test eax, eax
js 0x18020eea3
cmp qword [rdi + 0xb8], 0xffffffffffffffff
jne 0x18020e8c7
xor r11d, r11d
mov r15d, r11d
lea r9d, [r11 + 1]
jmp 0x18020e8fa
mov r9d, dword [rsp + 0x44]
mov r14d, 1
lea rdx, [rdi + 0xb8]
lea rcx, [rsp + 0xb8]
mov r8d, r14d
call fcn.180217dc0
mov r15d, eax
test eax, eax
js 0x18020ee9c
xor r11d, r11d
mov r9, r14
mov r8d, dword [rsp + 0x44]
inc ebp
add rbx, 8
cmp ebp, esi
jb 0x18020e830
jmp 0x18020eae3
mov ebp, r11d
test esi, esi
je 0x18020eae3
nop dword [rax]
mov rdi, qword [rbx]
mov dword [rsp + 0x80], r9d
mov rdx, qword [rdi + 0xc0]
mov qword [rsp + 0xb8], rdx
mov rax, qword [rdx + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x18020e9ea
cmp qword [rdx + 0xc0], 0xffffffffffffffff
jne 0x18020e9ea
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x80]
mov r9d, r8d
mov r8, qword [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x64]
mov rdx, r13
mov dword [rsp + 0x20], eax
call fcn.180218530
mov r15d, eax
test eax, eax
js 0x18020ee8f
cmp qword [rdi + 0xc0], 0xffffffffffffffff
jne 0x18020e9b7
xor r11d, r11d
mov r15d, r11d
lea r9d, [r11 + 1]
jmp 0x18020e9ea
mov r9d, dword [rsp + 0x44]
mov r14d, 1
lea rdx, [rdi + 0xc0]
lea rcx, [rsp + 0xb8]
mov r8d, r14d
call fcn.180217dc0
mov r15d, eax
test eax, eax
js 0x18020ee88
xor r11d, r11d
mov r9, r14
mov r8d, dword [rsp + 0x44]
inc ebp
add rbx, 8
cmp ebp, esi
jb 0x18020e920
jmp 0x18020eae3
lea r10, [rsp + 0xb8]
mov edx, r11d
lea r9, [rsp + 0x80]
sub r10, rbx
mov r8, rbx
nop dword [rax + rax]
cmp edx, esi
jae 0x18020ea6d
mov rdi, qword [r8]
cmp rdi, 0xffffffffffffffff
je 0x18020ea5e
mov rax, qword [rdi + 0xa8]
mov ecx, dword [rax + 0x10]
shr rcx, 8
test cl, 1
je 0x18020ea5e
mov eax, dword [rdi + 0x98]
shr rax, 0x18
test al, 1
je 0x18020ea5e
mov ecx, edx
mov eax, 1
mov qword [r10 + r8], rdi
shl eax, cl
mov dword [r9], eax
inc edx
add r8, 8
add r9, 4
cmp edx, 4
jb 0x18020ea20
mov edi, dword [rsp + 0x44]
mov r8, qword [rsp + 0x68]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb8]
mov r9d, edi
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x64]
mov rdx, r13
mov rcx, rbp
mov dword [rsp + 0x20], eax
call fcn.180218530
mov r15d, eax
test eax, eax
js 0x18020ee7b
cmp qword [rbx], 0xffffffffffffffff
jne 0x18020eabf
xor r11d, r11d
mov r15d, r11d
jmp 0x18020eae3
lea rcx, [rsp + 0xb8]
mov r9d, edi
mov r8d, esi
mov rdx, rbx
call fcn.180217dc0
mov r15d, eax
test eax, eax
js 0x18020ee6b
xor r11d, r11d
mov r8d, dword [rsp + 0x44]
mov rbp, qword [rsp + 0x50]
inc r12d
mov r9d, 1
jmp 0x18020e717
mov bl, byte [rsp + 0x40]
jmp 0x18020eb05
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x58]
movabs rcx, 0x101010101010101
mov r9d, 1
inc r8d
mov dword [rsp + 0x58], r8d
cmp r8d, 3
jb 0x18020df14
mov r12, qword [rsp + 0x50]
or ebp, 0xffffffff
jmp 0x18020eb3a
mov bl, byte [rsp + 0x40]
mov r13, qword [r13]
mov qword [rsp + 0x98], r13
test r13, r13
jne 0x18020de40
mov rsi, qword [rsp + 0x90]
xor r11b, r11b
mov edx, ebp
or qword [rsi + 0x10], 0x40
mov edi, dword [r12 + 0xc]
inc edx
cmp edx, edi
jae 0x18020ec81
mov rax, qword [r12 + 0xce58]
mov rcx, qword [rax + rdx*8]
cmp qword [rcx + 0x30], 0
je 0x18020eb66
mov rax, qword [rcx + 0x10]
bt rax, 8
jae 0x18020eb66
test rax, 0xc00
jne 0x18020eb66
mov rcx, qword [rcx + 0x30]
xor ebx, ebx
mov r9, qword [rcx]
nop
cmp dword [rcx + 0xc8], ebp
jne 0x18020ec30
mov rdi, qword [r12 + 0xd038]
mov r8, qword [rcx + 0xa8]
cmp r8, rdi
je 0x18020ec30
test r8, r8
je 0x18020ebfd
cmp r8, 0xffffffffffffffff
je 0x18020ebfd
mov r10, qword [rcx + 8]
test r10, r10
je 0x18020ebdc
mov rax, qword [rcx]
mov qword [r10], rax
jmp 0x18020ebe3
mov rax, qword [rcx]
mov qword [r8 + 0x30], rax
mov r10, qword [rcx]
test r10, r10
je 0x18020ebf5
mov rax, qword [rcx + 8]
mov qword [r10 + 8], rax
jmp 0x18020ebfd
mov rax, qword [rcx + 8]
mov qword [r8 + 0x38], rax
test rdi, rdi
je 0x18020ec29
cmp rdi, 0xffffffffffffffff
je 0x18020ec29
mov rax, qword [rdi + 0x38]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x18020ec1e
mov qword [rax], rcx
jmp 0x18020ec22
mov qword [rdi + 0x30], rcx
mov qword [rcx], rbx
mov qword [rdi + 0x38], rcx
mov qword [rcx + 0xa8], rdi
test r9, r9
je 0x18020ec3d
mov rcx, r9
mov r9, qword [r9]
jmp 0x18020ec74
mov edi, dword [r12 + 0xc]
inc edx
cmp edx, edi
jae 0x18020ec7d
mov rax, qword [r12 + 0xce58]
mov rcx, qword [rax + rdx*8]
cmp qword [rcx + 0x30], rbx
je 0x18020ec42
mov rax, qword [rcx + 0x10]
bt rax, 8
jae 0x18020ec42
test rax, 0xc00
jne 0x18020ec42
mov rcx, qword [rcx + 0x30]
mov r9, qword [rcx]
test rcx, rcx
jne 0x18020eba0
mov bl, byte [rsp + 0x40]
mov edx, dword [r12 + 0xc]
inc ebp
cmp ebp, edx
jae 0x18020edda
mov rax, qword [r12 + 0xce58]
mov rcx, qword [rax + rbp*8]
cmp qword [rcx + 0x30], 0
je 0x18020ec86
mov eax, dword [rcx + 0x10]
and eax, 0x140
cmp rax, 0x140
jne 0x18020ec86
mov rcx, qword [rcx + 0x30]
xor esi, esi
mov r14d, 1
mov r8, qword [rcx]
nop word [rax + rax]
mov rdi, qword [rcx + 0xa8]
test byte [r12 + 0xcefe], r14b
je 0x18020ecef
mov eax, dword [rdi + 0x10]
bt rax, 0xa
jb 0x18020ed76
mov eax, dword [rdi + 0x10]
bt rax, 0xb
jb 0x18020ed76
mov rdx, qword [r12 + 0xd040]
cmp rdi, rdx
je 0x18020ed76
test rdi, rdi
je 0x18020ed43
cmp rdi, 0xffffffffffffffff
je 0x18020ed43
mov r9, qword [rcx + 8]
test r9, r9
je 0x18020ed22
mov rax, qword [rcx]
mov qword [r9], rax
jmp 0x18020ed29
mov rax, qword [rcx]
mov qword [rdi + 0x30], rax
mov r9, qword [rcx]
test r9, r9
je 0x18020ed3b
mov rax, qword [rcx + 8]
mov qword [r9 + 8], rax
jmp 0x18020ed43
mov rax, qword [rcx + 8]
mov qword [rdi + 0x38], rax
test rdx, rdx
je 0x18020ed6f
cmp rdx, 0xffffffffffffffff
je 0x18020ed6f
mov rax, qword [rdx + 0x38]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x38]
test rax, rax
je 0x18020ed64
mov qword [rax], rcx
jmp 0x18020ed68
mov qword [rdx + 0x30], rcx
mov qword [rcx], rsi
mov qword [rdx + 0x38], rcx
mov qword [rcx + 0xa8], rdx
cmp qword [rcx + 0xc0], 0xffffffffffffffff
movzx r11d, r11b
cmovne r11d, r14d
test r8, r8
je 0x18020ed93
mov rcx, r8
mov r8, qword [r8]
jmp 0x18020edc7
mov edx, dword [r12 + 0xc]
inc ebp
cmp ebp, edx
jae 0x18020edd0
mov rax, qword [r12 + 0xce58]
mov rcx, qword [rax + rbp*8]
cmp qword [rcx + 0x30], rsi
je 0x18020ed98
mov eax, dword [rcx + 0x10]
and eax, 0x140
cmp rax, 0x140
jne 0x18020ed98
mov rcx, qword [rcx + 0x30]
mov r8, qword [rcx]
test rcx, rcx
jne 0x18020ecd0
mov rsi, qword [rsp + 0x90]
jmp 0x18020ede0
mov r14d, 1
mov rax, qword [r12 + 0xd040]
or qword [rax + 0x10], 0x40
test r11b, r11b
je 0x18020ee02
mov rax, qword [r12 + 0xd040]
or qword [rax + 0x10], 0x400
mov rax, qword [r12 + 0xd040]
xor edi, edi
mov dword [rax + 0x18], edi
mov rax, qword [r12 + 0xd040]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x18020ee4a
cmp qword [rcx + 0xc0], 0xffffffffffffffff
jne 0x18020ee42
mov rdx, qword [r12 + 0xd040]
mov eax, dword [rcx + 0xc8]
cmp dword [rdx + 0x18], eax
ja 0x18020ee42
inc eax
mov dword [rdx + 0x18], eax
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18020ee20
test bl, bl
je 0x18020ee58
xor edx, edx
mov rcx, r12
call fcn.1801a3240
mov rax, qword [rsp + 0xf0]
mov r15d, edi
mov qword [rax], rsi
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov r12, qword [rsp + 0x50]
mov r14d, 1
jmp 0x18020eef8
mov r14d, 1
jmp 0x18020eef8
mov r14d, 1
jmp 0x18020eef8
mov r14d, 1
jmp 0x18020eef8
mov r14d, 1
jmp 0x18020eef8
mov r14d, 1
jmp 0x18020eef8
mov r14d, 1
cmp qword [rsp + 0x68], 0
mov eax, dword [rsp + 0xd8]
movaps xmm7, xmmword [rsp + 0x110]
movaps xmm6, xmmword [rsp + 0x120]
mov r13, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x140]
mov rsi, qword [rsp + 0x148]
mov rbp, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x188]
lea rcx, [r12 + 0xd298]
mov r12, qword [rsp + 0x138]
je 0x18020ef70
mov rdx, qword [rcx]
test rax, rax
cmove rax, r14
cmp rax, qword [rdx + 8]
jae 0x18020ef65
sub qword [rdx + 8], rax
jmp 0x18020ef70
mov rax, qword [rdx]
mov qword [rcx], rax
call fcn.1800c56f0
mov eax, r15d
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.18024a670
add rsp, 0x158
pop r15
pop r14
ret