Function at 0x1800fc6b0
Capabilities:
Allocate or change rwx memory

Disassembly:
test rdx, rdx
je 0x18010067d
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1450
call fcn.1801698f0
sub rsp, rax
movaps xmmword [rsp + 0x1440], xmm6
mov rax, qword [0x180515618]
xor rax, rsp
mov qword [rsp + 0x1430], rax
mov r13, rdx
mov ebx, ecx
mov qword [rsp + 0x168], rdx
xor esi, esi
mov qword [rsp + 0xc78], rsi
mov qword [rsp + 0xc88], rsi
mov qword [rsp + 0xc90], rsi
mov qword [rsp + 0xc88], rsi
mov qword [rsp + 0xc90], 0xf
mov byte [rsp + 0xc78], sil
mov qword [rsp + 0xc88], rsi
mov byte [rsp + 0xc78], sil
mov byte [rsp + 0x48], sil
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1800e4ec0
nop
cmp ebx, 1
jne 0x1800fd420
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rsi
lea rcx, [rsp + 0xa8]
call fcn.18012d390
mov r15d, eax
mov r14d, esi
mov dword [rsp + 0x2e0], esi
nop
cmp r14d, r15d
jae 0x1800fd345
mov byte [rsp + 0x68], 0
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.1800e4ec0
nop
lea rax, [rsp + 0x210]
mov qword [rsp + 0x2d0], rax
mov eax, r14d
imul rdi, rax, 0x88
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x210], dl
xor ecx, ecx
mov qword [rsp + 0x218], rcx
mov ebx, dword [rax + rdi]
lea rcx, [rsp + 0x218]
call fcn.1800f14f0
mov byte [rsp + 0x210], 6
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x218], rbx
lea rax, [rsp + 0x210]
mov qword [rsp + 0x3f8], rax
lea rdx, [0x1801e6ba4]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x210]
mov byte [rax], cl
mov byte [rsp + 0x210], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x218]
mov qword [rax + 8], rdx
mov qword [rsp + 0x218], rcx
movzx edx, byte [rsp + 0x210]
lea rcx, [rsp + 0x218]
call fcn.1800f14f0
lea rax, [rsp + 0x200]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x200], dl
xor ecx, ecx
mov qword [rsp + 0x208], rcx
movsxd rbx, dword [rax + rdi + 4]
lea rcx, [rsp + 0x208]
call fcn.1800f14f0
mov byte [rsp + 0x200], 5
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x208], rbx
lea rax, [rsp + 0x200]
mov qword [rsp + 0x418], rax
lea rdx, [0x1801e6bac]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x200]
mov byte [rax], cl
mov byte [rsp + 0x200], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x208]
mov qword [rax + 8], rdx
mov qword [rsp + 0x208], rcx
movzx edx, byte [rsp + 0x200]
lea rcx, [rsp + 0x208]
call fcn.1800f14f0
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x1f0], dl
xor ecx, ecx
mov qword [rsp + 0x1f8], rcx
movsxd rbx, dword [rax + rdi + 8]
lea rcx, [rsp + 0x1f8]
call fcn.1800f14f0
mov byte [rsp + 0x1f0], 5
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x1f8], rbx
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x3e0], rax
lea rdx, [0x1801e6bb0]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x1f0]
mov byte [rax], cl
mov byte [rsp + 0x1f0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x1f8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x1f8], rcx
movzx edx, byte [rsp + 0x1f0]
lea rcx, [rsp + 0x1f8]
call fcn.1800f14f0
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x1a0], dl
xor ecx, ecx
mov qword [rsp + 0x1a8], rcx
movss xmm6, dword [rax + rdi + 0xc]
lea rcx, [rsp + 0x1a8]
call fcn.1800f14f0
mov byte [rsp + 0x1a0], 7
cvtps2pd xmm0, xmm6
movsd qword [rsp + 0x400], xmm0
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0xf0], rax
lea rdx, [0x1801e6bb8]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x1a0]
mov byte [rax], cl
mov byte [rsp + 0x1a0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x1a8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x1a8], rcx
movzx edx, byte [rsp + 0x1a0]
lea rcx, [rsp + 0x1a8]
call fcn.1800f14f0
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x1e0], dl
xor ecx, ecx
mov qword [rsp + 0x1e8], rcx
movsxd rbx, dword [rax + rdi + 0x10]
lea rcx, [rsp + 0x1e8]
call fcn.1800f14f0
mov byte [rsp + 0x1e0], 5
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x1e8], rbx
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x120], rax
lea rdx, [0x1801e6bc0]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x1e0]
mov byte [rax], cl
mov byte [rsp + 0x1e0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x1e8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x1e8], rcx
movzx edx, byte [rsp + 0x1e0]
lea rcx, [rsp + 0x1e8]
call fcn.1800f14f0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x1d0], dl
xor ecx, ecx
mov qword [rsp + 0x1d8], rcx
movsxd rbx, dword [rax + rdi + 0x14]
lea rcx, [rsp + 0x1d8]
call fcn.1800f14f0
mov byte [rsp + 0x1d0], 5
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x1d8], rbx
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0xe0], rax
lea rdx, [0x1801e6bc8]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x1d0]
mov byte [rax], cl
mov byte [rsp + 0x1d0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x1d8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x1d8], rcx
movzx edx, byte [rsp + 0x1d0]
lea rcx, [rsp + 0x1d8]
call fcn.1800f14f0
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x1c0], dl
xor ecx, ecx
mov qword [rsp + 0x1c8], rcx
movsxd rbx, dword [rax + rdi + 0x18]
lea rcx, [rsp + 0x1c8]
call fcn.1800f14f0
mov byte [rsp + 0x1c0], 5
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x1c8], rbx
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x3c0], rax
lea rdx, [0x1801e6bd8]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x1c0]
mov byte [rax], cl
mov byte [rsp + 0x1c0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x1c8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x1c8], rcx
movzx edx, byte [rsp + 0x1c0]
lea rcx, [rsp + 0x1c8]
call fcn.1800f14f0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x1b0], dl
xor ecx, ecx
mov qword [rsp + 0x1b8], rcx
movzx ebx, byte [rax + rdi + 0x1c]
lea rcx, [rsp + 0x1b8]
call fcn.1800f14f0
mov byte [rsp + 0x1b0], 4
mov byte [rsp + 0x408], bl
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x350], rax
lea rdx, [0x1801e6be0]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x1b0]
mov byte [rax], cl
mov byte [rsp + 0x1b0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x1b8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x1b8], rcx
movzx edx, byte [rsp + 0x1b0]
lea rcx, [rsp + 0x1b8]
call fcn.1800f14f0
lea rax, [rsp + 0x250]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x250], dl
xor ecx, ecx
mov qword [rsp + 0x258], rcx
movzx ebx, byte [rax + rdi + 0x1d]
lea rcx, [rsp + 0x258]
call fcn.1800f14f0
mov byte [rsp + 0x250], 4
mov byte [rsp + 0x410], bl
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x258], rax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x370], rax
lea rdx, [0x1801e6be8]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x250]
mov byte [rax], cl
mov byte [rsp + 0x250], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x258]
mov qword [rax + 8], rdx
mov qword [rsp + 0x258], rcx
movzx edx, byte [rsp + 0x250]
lea rcx, [rsp + 0x258]
call fcn.1800f14f0
lea rax, [rsp + 0x190]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x190], dl
xor ecx, ecx
mov qword [rsp + 0x198], rcx
movzx ebx, byte [rax + rdi + 0x1e]
lea rcx, [rsp + 0x198]
call fcn.1800f14f0
mov byte [rsp + 0x190], 4
mov byte [rsp + 0x4d8], bl
mov rax, qword [rsp + 0x4d8]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x340], rax
lea rdx, [0x1801e6bf0]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x190]
mov byte [rax], cl
mov byte [rsp + 0x190], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x198]
mov qword [rax + 8], rdx
mov qword [rsp + 0x198], rcx
movzx edx, byte [rsp + 0x190]
lea rcx, [rsp + 0x198]
call fcn.1800f14f0
lea rax, [rsp + 0x180]
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x180], dl
xor ecx, ecx
mov qword [rsp + 0x188], rcx
movzx ebx, byte [rax + rdi + 0x1f]
lea rcx, [rsp + 0x188]
call fcn.1800f14f0
mov byte [rsp + 0x180], 4
mov byte [rsp + 0x4d0], bl
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x2f0], rax
lea rdx, [0x1801e6bf8]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x180]
mov byte [rax], cl
mov byte [rsp + 0x180], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x188]
mov qword [rax + 8], rdx
mov qword [rsp + 0x188], rcx
movzx edx, byte [rsp + 0x180]
lea rcx, [rsp + 0x188]
call fcn.1800f14f0
lea rax, [rsp + 0x240]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x240], dl
xor ecx, ecx
mov qword [rsp + 0x248], rcx
movzx ebx, byte [rax + rdi + 0x20]
lea rcx, [rsp + 0x248]
call fcn.1800f14f0
mov byte [rsp + 0x240], 4
mov byte [rsp + 0x480], bl
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x310], rax
lea rdx, [0x1801e6c00]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x240]
mov byte [rax], cl
mov byte [rsp + 0x240], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x248]
mov qword [rax + 8], rdx
mov qword [rsp + 0x248], rcx
movzx edx, byte [rsp + 0x240]
lea rcx, [rsp + 0x248]
call fcn.1800f14f0
lea rax, [rsp + 0x230]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x230], dl
xor ecx, ecx
mov qword [rsp + 0x238], rcx
movzx ebx, byte [rax + rdi + 0x21]
lea rcx, [rsp + 0x238]
call fcn.1800f14f0
mov byte [rsp + 0x230], 4
mov byte [rsp + 0x4c8], bl
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0x238], rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x330], rax
lea rdx, [0x1801e6c04]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x230]
mov byte [rax], cl
mov byte [rsp + 0x230], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x238]
mov qword [rax + 8], rdx
mov qword [rsp + 0x238], rcx
movzx edx, byte [rsp + 0x230]
lea rcx, [rsp + 0x238]
call fcn.1800f14f0
lea rax, [rsp + 0x220]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0xa8]
xor dl, dl
mov byte [rsp + 0x220], dl
xor ecx, ecx
mov qword [rsp + 0x228], rcx
movzx ebx, byte [rax + rdi + 0x22]
lea rcx, [rsp + 0x228]
call fcn.1800f14f0
mov byte [rsp + 0x220], 4
mov byte [rsp + 0x3b0], bl
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x228], rax
lea rax, [rsp + 0x220]
mov qword [rsp + 0xc0], rax
lea rdx, [0x1801e6c0c]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x220]
mov byte [rax], cl
mov byte [rsp + 0x220], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x228]
mov qword [rax + 8], rdx
mov qword [rsp + 0x228], rcx
movzx edx, byte [rsp + 0x220]
lea rcx, [rsp + 0x228]
call fcn.1800f14f0
lea rax, [rsp + 0xad0]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0xa8]
add rdx, 0x28
add rdx, rdi
lea rcx, [rsp + 0x1240]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xad0]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x158], rax
lea rdx, [0x1801e6c14]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x1240]
call fcn.1800cffc0
lea rax, [rsp + 0xae0]
mov qword [rsp + 0x170], rax
mov rdx, qword [rsp + 0xa8]
add rdx, 0x48
add rdx, rdi
lea rcx, [rsp + 0x1260]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xae0]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x90], rax
lea rdx, [0x1801e6c20]
lea rcx, [rsp + 0x68]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x1260]
call fcn.1800cffc0
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.1800fb860
nop
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.1800f14f0
inc r14d
mov dword [rsp + 0x2e0], r14d
jmp 0x1800fc790
lea r14, [rsp + 0xa8]
lea r15, [rsp + 0xb0]
lea r12, [rsp + 0xb8]
mov r8, qword [rsp + 0xa8]
test r8, r8
je 0x18010046a
mov rdi, qword [rsp + 0xb0]
mov rbx, r8
mov qword [rsp + 0x4c0], rbx
cmp rbx, rdi
je 0x1800fd3a7
mov rcx, rbx
call fcn.1800e8300
add rbx, 0x88
mov qword [rsp + 0x4c0], rbx
mov r8, qword [rsp + 0xa8]
jmp 0x1800fd381
mov rcx, qword [rsp + 0xb8]
sub rcx, r8
movabs rax, 0x7878787878787879
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x88
mov qword [rsp + 0x4b8], rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x1800fd409
add rdx, 0x27
mov qword [rsp + 0x4b8], rdx
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18010067e
mov rcx, r8
call fcn.1801690e8
mov qword [r14], rsi
mov qword [r15], rsi
mov qword [r12], rsi
jmp 0x18010046a
cmp ebx, 2
jne 0x1800fdb1f
lea rcx, [rsp + 0x288]
call fcn.18012d120
nop
mov r14d, esi
mov dword [rsp + 0x2dc], esi
movabs r15, 0x8421084210842109
nop dword [rax + rax]
mov ebx, r14d
mov rcx, qword [rsp + 0x290]
sub rcx, qword [rsp + 0x288]
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbx, rdx
jae 0x1800fdb0d
mov byte [rsp + 0xd0], 0
xor edx, edx
lea rcx, [rsp + 0xd8]
call fcn.1800e4ec0
nop
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x90], rax
imul rdi, rbx, 0xf8
mov rax, qword [rsp + 0x288]
xor dl, dl
mov byte [rsp + 0xe0], dl
xor ecx, ecx
mov qword [rsp + 0xe8], rcx
movsxd rbx, dword [rax + rdi + 0x44]
lea rcx, [rsp + 0xe8]
call fcn.1800f14f0
mov byte [rsp + 0xe0], 5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0xe8], rbx
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x158], rax
lea rdx, [0x1801e6c2c]
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0xe0]
mov byte [rax], cl
mov byte [rsp + 0xe0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0xe8]
mov qword [rax + 8], rdx
mov qword [rsp + 0xe8], rcx
movzx edx, byte [rsp + 0xe0]
lea rcx, [rsp + 0xe8]
call fcn.1800f14f0
lea rax, [rsp + 0xaf0]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x288]
add rdx, 0x98
add rdx, rdi
lea rcx, [rsp + 0x1280]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xaf0]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0xc0], rax
lea rdx, [0x1801e6c14]
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x1280]
call fcn.1800cffc0
lea rax, [rsp + 0x110]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x288]
movsxd rbx, dword [rax + rdi + 0x78]
mov dword [rsp + 0x418], ebx
xor dl, dl
mov byte [rsp + 0x110], dl
xor eax, eax
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.1800f14f0
mov byte [rsp + 0x110], 5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x118], rbx
lea rax, [rsp + 0x110]
mov qword [rsp + 0x330], rax
lea rdx, [0x1801e6c30]
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x110]
mov byte [rax], cl
mov byte [rsp + 0x110], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x118]
mov qword [rax + 8], rdx
mov qword [rsp + 0x118], rcx
movzx edx, byte [rsp + 0x110]
lea rcx, [rsp + 0x118]
call fcn.1800f14f0
lea rax, [rsp + 0x120]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x288]
xor dl, dl
mov byte [rsp + 0x120], dl
xor ecx, ecx
mov qword [rsp + 0x128], rcx
movss xmm6, dword [rax + rdi + 0x24]
lea rcx, [rsp + 0x128]
call fcn.1800f14f0
mov byte [rsp + 0x120], 7
cvtps2pd xmm0, xmm6
movsd qword [rsp + 0xa0], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x310], rax
lea rdx, [0x1801e6c38]
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x120]
mov byte [rax], cl
mov byte [rsp + 0x120], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x128]
mov qword [rax + 8], rdx
mov qword [rsp + 0x128], rcx
movzx edx, byte [rsp + 0x120]
lea rcx, [rsp + 0x128]
call fcn.1800f14f0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0x288]
xor dl, dl
mov byte [rsp + 0x130], dl
xor ecx, ecx
mov qword [rsp + 0x138], rcx
movss xmm6, dword [rax + rdi + 0x28]
lea rcx, [rsp + 0x138]
call fcn.1800f14f0
mov byte [rsp + 0x130], 7
cvtps2pd xmm0, xmm6
movsd qword [rsp + 0x2d0], xmm0
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x2f0], rax
lea rdx, [0x1801e6c3c]
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x130]
mov byte [rax], cl
mov byte [rsp + 0x130], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x138]
mov qword [rax + 8], rdx
mov qword [rsp + 0x138], rcx
movzx edx, byte [rsp + 0x130]
lea rcx, [rsp + 0x138]
call fcn.1800f14f0
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0x288]
xor dl, dl
mov byte [rsp + 0xf0], dl
xor ecx, ecx
mov qword [rsp + 0xf8], rcx
movsxd rbx, dword [rax + rdi + 0x38]
lea rcx, [rsp + 0xf8]
call fcn.1800f14f0
mov byte [rsp + 0xf0], 5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0xf8], rbx
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x340], rax
lea rdx, [0x1801e6c40]
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0xf0]
mov byte [rax], cl
mov byte [rsp + 0xf0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0xf8]
mov qword [rax + 8], rdx
mov qword [rsp + 0xf8], rcx
movzx edx, byte [rsp + 0xf0]
lea rcx, [rsp + 0xf8]
call fcn.1800f14f0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x288]
xor dl, dl
mov byte [rsp + 0x100], dl
xor ecx, ecx
mov qword [rsp + 0x108], rcx
movsxd rbx, dword [rax + rdi + 0x48]
lea rcx, [rsp + 0x108]
call fcn.1800f14f0
mov byte [rsp + 0x100], 5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x108], rbx
lea rax, [rsp + 0x100]
mov qword [rsp + 0x370], rax
lea rdx, str.banghuiID
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x100]
mov byte [rax], cl
mov byte [rsp + 0x100], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x108]
mov qword [rax + 8], rdx
mov qword [rsp + 0x108], rcx
movzx edx, byte [rsp + 0x100]
lea rcx, [rsp + 0x108]
call fcn.1800f14f0
lea rax, [rsp + 0xb00]
mov qword [rsp + 0x360], rax
mov rdx, qword [rsp + 0x288]
add rdx, 0x50
add rdx, rdi
lea rcx, [rsp + 0x1140]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xb00]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x350], rax
lea rdx, str.banghuiName
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x1140]
call fcn.1800cffc0
lea rax, [rsp + 0xb10]
mov qword [rsp + 0x3a0], rax
mov rdx, qword [rsp + 0x288]
add rdx, 0xd8
add rdx, rdi
lea rcx, [rsp + 0x1160]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xb10]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x3c0], rax
lea rdx, str.classname
lea rcx, [rsp + 0xd0]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x1160]
call fcn.1800cffc0
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x48]
call fcn.1800fb860
nop
movzx edx, byte [rsp + 0xd0]
lea rcx, [rsp + 0xd8]
call fcn.1800f14f0
inc r14d
mov dword [rsp + 0x2dc], r14d
jmp 0x1800fd450
lea rcx, [rsp + 0x288]
call fcn.1800e7cf0
jmp 0x18010046a
cmp ebx, 3
jne 0x1800fdbd2
call fcn.18012f740
movsxd rbx, eax
mov dword [rsp + 0x3f0], ebx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x90], rax
xor dl, dl
mov byte [rsp + 0x78], dl
xor eax, eax
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x80]
call fcn.1800f14f0
mov byte [rsp + 0x78], 5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x80], rbx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x158], rax
lea rdx, [0x1801e6c30]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x78]
mov byte [rax], cl
mov byte [rsp + 0x78], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x80]
mov qword [rax + 8], rdx
mov qword [rsp + 0x80], rcx
movzx edx, byte [rsp + 0x78]
lea rcx, [rsp + 0x80]
call fcn.1800f14f0
jmp 0x18010046a
cmp ebx, 4
jne 0x1800fdd50
mov rdi, qword [0x18051b180]
mov qword [rsp + 0x4b0], rdi
mov r14, qword [0x18051b188]
cmp rdi, r14
je 0x18010046a
mov byte [rsp + 0x278], 0
xor edx, edx
lea rcx, [rsp + 0x280]
call fcn.1800e4ec0
nop
lea rax, [rsp + 0x3a0]
mov qword [rsp + 0x90], rax
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x1180]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x170], rax
lea rdx, [0x1801e6bd8]
lea rcx, [rsp + 0x278]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x1180]
call fcn.1800cffc0
lea rax, [rsp + 0xb20]
mov qword [rsp + 0x158], rax
lea rdx, [rdi + 8]
lea rcx, [rsp + 0x11a0]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xb20]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x78], rax
lea rdx, [0x1801e6c14]
lea rcx, [rsp + 0x278]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x11a0]
call fcn.1800cffc0
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x48]
call fcn.1800fb860
nop
movzx edx, byte [rsp + 0x278]
lea rcx, [rsp + 0x280]
call fcn.1800f14f0
add rdi, 0x68
mov qword [rsp + 0x4b0], rdi
jmp 0x1800fdbf1
cmp ebx, 5
jne 0x1800fde17
movsxd rbx, dword [0x180230c90]
mov dword [rsp + 0x3f8], ebx
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x90], rax
xor dl, dl
mov byte [rsp + 0xc0], dl
xor eax, eax
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0xc8]
call fcn.1800f14f0
mov byte [rsp + 0xc0], 5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0xc8], rbx
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x158], rax
lea rdx, str.runing
lea rcx, [rsp + 0x48]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0xc0]
mov byte [rax], cl
mov byte [rsp + 0xc0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0xc8]
mov qword [rax + 8], rdx
mov qword [rsp + 0xc8], rcx
movzx edx, byte [rsp + 0xc0]
lea rcx, [rsp + 0xc8]
call fcn.1800f14f0
jmp 0x18010046a
lea eax, [rbx - 6]
cmp eax, 2
jbe 0x1800ff834
cmp ebx, 9
jne 0x1800fe319
mov qword [rsp + 0xc98], rsi
mov qword [rsp + 0xca8], rsi
mov qword [rsp + 0xcb0], rsi
mov qword [rsp + 0xca8], rsi
mov qword [rsp + 0xcb0], 0xf
mov byte [rsp + 0xc98], 0
lea r8d, [rbx + 0xb]
lea rdx, [0x1801e6d10]
lea rcx, [rsp + 0xc98]
call fcn.1800d0120
nop
lea r8d, [rbx - 8]
lea rdx, [rsp + 0xc98]
lea rcx, [rsp + 0x520]
call fcn.180116580
nop
mov rdx, qword [rsp + 0xcb0]
cmp rdx, 0x10
jb 0x1800fdee6
inc rdx
mov qword [rsp + 0x4a8], rdx
mov rcx, qword [rsp + 0xc98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fdee1
add rdx, 0x27
mov qword [rsp + 0x4a8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180100684
call fcn.1801690e8
mov qword [rsp + 0xca8], rsi
mov qword [rsp + 0xcb0], 0xf
mov byte [rsp + 0xc98], 0
mov qword [rsp + 0xcb8], rsi
mov qword [rsp + 0xcc8], rsi
mov qword [rsp + 0xcd0], rsi
mov qword [rsp + 0xcc8], rsi
mov qword [rsp + 0xcd0], 0xf
mov byte [rsp + 0xcb8], 0
mov r8d, 0x21
lea rdx, [0x1801e6d28]
lea rcx, [rsp + 0xcb8]
call fcn.1800d0120
nop
mov r8d, 1
lea rdx, [rsp + 0xcb8]
lea rcx, [rsp + 0x508]
call fcn.180116580
nop
mov rdx, qword [rsp + 0xcd0]
cmp rdx, 0x10
jb 0x1800fdfc0
inc rdx
mov qword [rsp + 0x4a0], rdx
mov rcx, qword [rsp + 0xcb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fdfbb
add rdx, 0x27
mov qword [rsp + 0x4a0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18010068a
call fcn.1801690e8
mov qword [rsp + 0xcc8], rsi
mov qword [rsp + 0xcd0], 0xf
mov byte [rsp + 0xcb8], 0
mov qword [rsp + 0xc58], rsi
mov qword [rsp + 0xc68], rsi
mov qword [rsp + 0xc70], rsi
mov qword [rsp + 0xc68], rsi
mov qword [rsp + 0xc70], 0xf
mov byte [rsp + 0xc58], 0
mov r8d, 0x21
lea rdx, [0x1801e6d50]
lea rcx, [rsp + 0xc58]
call fcn.1800d0120
nop
mov r8d, 1
lea rdx, [rsp + 0xc58]
lea rcx, [rsp + 0x4f0]
call fcn.180116580
nop
mov rdx, qword [rsp + 0xc70]
cmp rdx, 0x10
jb 0x1800fe09a
inc rdx
mov qword [rsp + 0x498], rdx
mov rcx, qword [rsp + 0xc58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fe095
add rdx, 0x27
mov qword [rsp + 0x498], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180100690
call fcn.1801690e8
mov qword [rsp + 0xc68], rsi
mov qword [rsp + 0xc70], 0xf
mov byte [rsp + 0xc58], 0
mov rax, qword [rsp + 0x528]
mov rdx, qword [rsp + 0x520]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x1800fe12f
lea rax, [rsp + 0xb30]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x11c0]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xb30]
call fcn.1800d0820
mov rbx, rax
lea rdx, [0x1801e6d74]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x11c0]
call fcn.1800cffc0
jmp 0x1800fe172
lea rax, [rsp + 0xb40]
mov qword [rsp + 0x90], rax
lea rdx, [0x1801e4e9b]
lea rcx, [rsp + 0xb40]
call fcn.1800d04f0
mov rbx, rax
lea rdx, [0x1801e6d74]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
mov rax, qword [rsp + 0x510]
mov rdx, qword [rsp + 0x508]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x1800fe1eb
lea rax, [rsp + 0xb50]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x11e0]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xb50]
call fcn.1800d0820
mov rbx, rax
lea rdx, [0x1801e6d7c]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x11e0]
call fcn.1800cffc0
jmp 0x1800fe22e
lea rax, [rsp + 0xb60]
mov qword [rsp + 0x90], rax
lea rdx, [0x1801e4e9b]
lea rcx, [rsp + 0xb60]
call fcn.1800d04f0
mov rbx, rax
lea rdx, [0x1801e6d7c]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
mov rax, qword [rsp + 0x4f8]
mov rdx, qword [rsp + 0x4f0]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x1800fe2a7
lea rax, [rsp + 0xb70]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x1200]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xb70]
call fcn.1800d0820
mov rbx, rax
lea rdx, [0x1801e6d84]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x1200]
call fcn.1800cffc0
jmp 0x1800fe2eb
lea rax, [rsp + 0xb80]
mov qword [rsp + 0x90], rax
lea rdx, [0x1801e4e9b]
lea rcx, [rsp + 0xb80]
call fcn.1800d04f0
mov rbx, rax
lea rdx, [0x1801e6d84]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x4f0]
call fcn.1800ef9a0
nop
lea rcx, [rsp + 0x508]
call fcn.1800ef9a0
nop
lea rcx, [rsp + 0x520]
call fcn.1800ef9a0
jmp 0x18010046a
cmp ebx, 0xa
jne 0x1800ff545
lea rax, [rsp + 0xba0]
mov qword [rsp + 0x90], rax
lea rdx, [0x1801e6da0]
lea rcx, [rsp + 0xe80]
call fcn.1800d0540
nop
lea rdx, [0x1801e6dc0]
lea rcx, [rsp + 0xe98]
call fcn.1800d0540
nop
lea rdx, [0x1801e6de0]
lea rcx, [rsp + 0xeb0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e00]
lea rcx, [rsp + 0xec8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e20]
lea rcx, [rsp + 0xee0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e40]
lea rcx, [rsp + 0xef8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e60]
lea rcx, [rsp + 0xf10]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e80]
lea rcx, [rsp + 0xf28]
call fcn.1800d0540
nop
lea rdx, [0x1801e6ea0]
lea rcx, [rsp + 0xf40]
call fcn.1800d0540
nop
lea rax, [rsp + 0xe80]
mov qword [rsp + 0xb90], rax
lea rax, [rsp + 0xf58]
mov qword [rsp + 0xb98], rax
lea rax, [rsp + 0xe80]
mov qword [rsp + 0x3c0], rax
lea rax, [rsp + 0xf58]
mov qword [rsp + 0x3c8], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0xba0]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e6d90]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0xf]
lea rcx, [rsp + 0xe80]
call fcn.180169470
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x170], rax
lea rdx, [0x1801e6da0]
lea rcx, [rsp + 0xd00]
call fcn.1800d0540
nop
lea rdx, [0x1801e6ed8]
lea rcx, [rsp + 0xd18]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e20]
lea rcx, [rsp + 0xd30]
call fcn.1800d0540
nop
lea rdx, [0x1801e6ef8]
lea rcx, [rsp + 0xd48]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e40]
lea rcx, [rsp + 0xd60]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e60]
lea rcx, [rsp + 0xd78]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e80]
lea rcx, [rsp + 0xd90]
call fcn.1800d0540
nop
lea rdx, [0x1801e6ea0]
lea rcx, [rsp + 0xda8]
call fcn.1800d0540
nop
lea rax, [rsp + 0xd00]
mov qword [rsp + 0xbb0], rax
lea rax, [rsp + 0xdc0]
mov qword [rsp + 0xbb8], rax
lea rax, [rsp + 0xd00]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0xdc0]
mov qword [rsp + 0x98], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0xbc0]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e6ec8]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x10]
lea rcx, [rsp + 0xd00]
call fcn.180169470
lea rax, [rsp + 0x788]
mov qword [rsp + 0x158], rax
lea rdx, [0x1801e6ed8]
lea rcx, [rsp + 0xdc0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f28]
lea rcx, [rsp + 0xdd8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f48]
lea rcx, [rsp + 0xdf0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f68]
lea rcx, [rsp + 0xe08]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f88]
lea rcx, [rsp + 0xe20]
call fcn.1800d0540
nop
lea rdx, [0x1801e6fa8]
lea rcx, [rsp + 0xe38]
call fcn.1800d0540
nop
lea rdx, [0x1801e6fc8]
lea rcx, [rsp + 0xe50]
call fcn.1800d0540
nop
lea rdx, [0x1801e6fe8]
lea rcx, [rsp + 0xe68]
call fcn.1800d0540
nop
lea rax, [rsp + 0xdc0]
mov qword [rsp + 0x778], rax
lea rax, [rsp + 0xe80]
mov qword [rsp + 0x780], rax
lea rax, [rsp + 0xdc0]
mov qword [rsp + 0x170], rax
lea rax, [rsp + 0xe80]
mov qword [rsp + 0x178], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x788]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e6f18]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x10]
lea rcx, [rsp + 0xdc0]
call fcn.180169470
lea rax, [rsp + 0x7a8]
mov qword [rsp + 0x78], rax
lea rdx, [0x1801e7018]
lea rcx, [rsp + 0xf60]
call fcn.1800d0540
nop
lea rdx, [0x1801e7038]
lea rcx, [rsp + 0xf78]
call fcn.1800d0540
nop
lea rdx, [0x1801e7058]
lea rcx, [rsp + 0xf90]
call fcn.1800d0540
nop
lea rdx, [0x1801e7078]
lea rcx, [rsp + 0xfa8]
call fcn.1800d0540
nop
lea rdx, [0x1801e7098]
lea rcx, [rsp + 0xfc0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f28]
lea rcx, [rsp + 0xfd8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f48]
lea rcx, [rsp + 0xff0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6fa8]
lea rcx, [rsp + 0x1008]
call fcn.1800d0540
nop
lea rdx, [0x1801e6fc8]
lea rcx, [rsp + 0x1020]
call fcn.1800d0540
nop
lea rax, [rsp + 0xf60]
mov qword [rsp + 0x798], rax
lea rax, [rsp + 0x1038]
mov qword [rsp + 0x7a0], rax
lea rax, [rsp + 0xf60]
mov qword [rsp + 0x3e0], rax
lea rax, [rsp + 0x1038]
mov qword [rsp + 0x3e8], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x7a8]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7008]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0xf]
lea rcx, [rsp + 0xf60]
call fcn.180169470
lea rax, [rsp + 0x7c8]
mov qword [rsp + 0xc0], rax
lea rdx, [0x1801e70c8]
lea rcx, [rsp + 0x1340]
call fcn.1800d0540
nop
lea rdx, [0x1801e70e8]
lea rcx, [rsp + 0x1358]
call fcn.1800d0540
nop
lea rdx, [0x1801e7108]
lea rcx, [rsp + 0x1370]
call fcn.1800d0540
nop
lea rdx, [0x1801e7128]
lea rcx, [rsp + 0x1388]
call fcn.1800d0540
nop
lea rdx, [0x1801e7148]
lea rcx, [rsp + 0x13a0]
call fcn.1800d0540
nop
lea rdx, [0x1801e6dc0]
lea rcx, [rsp + 0x13b8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6de0]
lea rcx, [rsp + 0x13d0]
call fcn.1800d0540
nop
lea rdx, [0x1801e7098]
lea rcx, [rsp + 0x13e8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f68]
lea rcx, [rsp + 0x1400]
call fcn.1800d0540
nop
lea rdx, [0x1801e6f88]
lea rcx, [rsp + 0x1418]
call fcn.1800d0540
nop
lea rax, [rsp + 0x1340]
mov qword [rsp + 0x7b8], rax
lea rax, [rsp + 0x1430]
mov qword [rsp + 0x7c0], rax
lea rax, [rsp + 0x1340]
mov qword [rsp + 0x3d0], rax
lea rax, [rsp + 0x1430]
mov qword [rsp + 0x3d8], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x7c8]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e70b8]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0xe]
lea rcx, [rsp + 0x1340]
call fcn.180169470
lea rax, [rsp + 0x7e8]
mov qword [rsp + 0x278], rax
lea rdx, [0x1801e7178]
lea rcx, [rsp + 0x1040]
call fcn.1800d0540
nop
lea rdx, [0x1801e7198]
lea rcx, [rsp + 0x1058]
call fcn.1800d0540
nop
lea rdx, [0x1801e6e00]
lea rcx, [rsp + 0x1070]
call fcn.1800d0540
nop
lea rdx, [0x1801e71b8]
lea rcx, [rsp + 0x1088]
call fcn.1800d0540
nop
lea rdx, [0x1801e6ef8]
lea rcx, [rsp + 0x10a0]
call fcn.1800d0540
nop
lea rdx, [0x1801e71d8]
lea rcx, [rsp + 0x10b8]
call fcn.1800d0540
nop
lea rdx, [0x1801e71f8]
lea rcx, [rsp + 0x10d0]
call fcn.1800d0540
nop
lea rdx, [0x1801e7218]
lea rcx, [rsp + 0x10e8]
call fcn.1800d0540
nop
lea rdx, [0x1801e6fe8]
lea rcx, [rsp + 0x1100]
call fcn.1800d0540
nop
lea rax, [rsp + 0x1040]
mov qword [rsp + 0x7d8], rax
lea rax, [rsp + 0x1118]
mov qword [rsp + 0x7e0], rax
lea rax, [rsp + 0x1040]
mov qword [rsp + 0x4e0], rax
lea rax, [rsp + 0x1118]
mov qword [rsp + 0x4e8], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x7e8]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7168]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0xf]
lea rcx, [rsp + 0x1040]
call fcn.180169470
lea rax, [rsp + 0x808]
mov qword [rsp + 0x330], rax
lea rdx, [0x1801e7248]
lea rcx, [rsp + 0x538]
call fcn.1800d0540
nop
lea rdx, [0x1801e7268]
lea rcx, [rsp + 0x550]
call fcn.1800d0540
nop
lea rax, [rsp + 0x538]
mov qword [rsp + 0x7f8], rax
lea rax, [rsp + 0x568]
mov qword [rsp + 0x800], rax
lea rax, [rsp + 0x538]
mov qword [rsp + 0x260], rax
lea rax, [rsp + 0x568]
mov qword [rsp + 0x268], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x808]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7238]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x538]
call fcn.180169470
lea rax, [rsp + 0x828]
mov qword [rsp + 0x320], rax
lea rdx, [0x1801e7178]
lea rcx, [rsp + 0x568]
call fcn.1800d0540
nop
lea rdx, [0x1801e7268]
lea rcx, [rsp + 0x580]
call fcn.1800d0540
nop
lea rax, [rsp + 0x568]
mov qword [rsp + 0x818], rax
lea rax, [rsp + 0x598]
mov qword [rsp + 0x820], rax
lea rax, [rsp + 0x568]
mov qword [rsp + 0x330], rax
lea rax, [rsp + 0x598]
mov qword [rsp + 0x338], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0x828]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7288]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x568]
call fcn.180169470
lea rax, [rsp + 0x848]
mov qword [rsp + 0x310], rax
lea rdx, [0x1801e70c8]
lea rcx, [rsp + 0x598]
call fcn.1800d0540
nop
lea rdx, [0x1801e7018]
lea rcx, [rsp + 0x5b0]
call fcn.1800d0540
nop
lea rax, [rsp + 0x598]
mov qword [rsp + 0x838], rax
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x840], rax
lea rax, [rsp + 0x598]
mov qword [rsp + 0x320], rax
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x328], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x848]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7298]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x598]
call fcn.180169470
lea rax, [rsp + 0x868]
mov qword [rsp + 0x300], rax
lea rdx, [0x1801e72b8]
lea rcx, [rsp + 0x5c8]
call fcn.1800d0540
nop
lea rdx, [0x1801e71b8]
lea rcx, [rsp + 0x5e0]
call fcn.1800d0540
nop
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x858], rax
lea rax, [rsp + 0x5f8]
mov qword [rsp + 0x860], rax
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x310], rax
lea rax, [rsp + 0x5f8]
mov qword [rsp + 0x318], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x868]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e72a8]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x5c8]
call fcn.180169470
lea rax, [rsp + 0x888]
mov qword [rsp + 0x2f0], rax
lea rdx, [0x1801e7148]
lea rcx, [rsp + 0x5f8]
call fcn.1800d0540
nop
lea rdx, [0x1801e72b8]
lea rcx, [rsp + 0x610]
call fcn.1800d0540
nop
lea rax, [rsp + 0x5f8]
mov qword [rsp + 0x878], rax
lea rax, [rsp + 0x628]
mov qword [rsp + 0x880], rax
lea rax, [rsp + 0x5f8]
mov qword [rsp + 0x300], rax
lea rax, [rsp + 0x628]
mov qword [rsp + 0x308], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x888]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e72d8]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x5f8]
call fcn.180169470
lea rax, [rsp + 0x8a8]
mov qword [rsp + 0x390], rax
lea rdx, [0x1801e72f8]
lea rcx, [rsp + 0x628]
call fcn.1800d0540
nop
lea rdx, [0x1801e7198]
lea rcx, [rsp + 0x640]
call fcn.1800d0540
nop
lea rax, [rsp + 0x628]
mov qword [rsp + 0x898], rax
lea rax, [rsp + 0x658]
mov qword [rsp + 0x8a0], rax
lea rax, [rsp + 0x628]
mov qword [rsp + 0x2f0], rax
lea rax, [rsp + 0x658]
mov qword [rsp + 0x2f8], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x8a8]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e72e8]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x628]
call fcn.180169470
lea rax, [rsp + 0x8c8]
mov qword [rsp + 0x340], rax
lea rdx, [0x1801e7328]
lea rcx, [rsp + 0x658]
call fcn.1800d0540
nop
lea rdx, [0x1801e7218]
lea rcx, [rsp + 0x670]
call fcn.1800d0540
nop
lea rax, [rsp + 0x658]
mov qword [rsp + 0x8b8], rax
lea rax, [rsp + 0x688]
mov qword [rsp + 0x8c0], rax
lea rax, [rsp + 0x658]
mov qword [rsp + 0x390], rax
lea rax, [rsp + 0x688]
mov qword [rsp + 0x398], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x8c8]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7318]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x658]
call fcn.180169470
lea rax, [rsp + 0x8e8]
mov qword [rsp + 0x380], rax
lea rdx, [0x1801e7358]
lea rcx, [rsp + 0x688]
call fcn.1800d0540
nop
lea rdx, [0x1801e71d8]
lea rcx, [rsp + 0x6a0]
call fcn.1800d0540
nop
lea rax, [rsp + 0x688]
mov qword [rsp + 0x8d8], rax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x8e0], rax
lea rax, [rsp + 0x688]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x348], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x8e8]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7348]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x688]
call fcn.180169470
lea rax, [rsp + 0x908]
mov qword [rsp + 0x370], rax
lea rdx, [0x1801e7128]
lea rcx, [rsp + 0x6b8]
call fcn.1800d0540
nop
lea rdx, [0x1801e7078]
lea rcx, [rsp + 0x6d0]
call fcn.1800d0540
nop
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x8f8], rax
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x380], rax
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x388], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x908]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7378]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x6b8]
call fcn.180169470
lea rax, [rsp + 0x928]
mov qword [rsp + 0x360], rax
lea rdx, [0x1801e7108]
lea rcx, [rsp + 0x6e8]
call fcn.1800d0540
nop
lea rdx, [0x1801e7058]
lea rcx, [rsp + 0x700]
call fcn.1800d0540
nop
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x918], rax
lea rax, [rsp + 0x718]
mov qword [rsp + 0x920], rax
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x370], rax
lea rax, [rsp + 0x718]
mov qword [rsp + 0x378], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x928]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7388]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x6e8]
call fcn.180169470
lea rax, [rsp + 0x948]
mov qword [rsp + 0x350], rax
lea rdx, [0x1801e73a8]
lea rcx, [rsp + 0x718]
call fcn.1800d0540
nop
lea rdx, [0x1801e71f8]
lea rcx, [rsp + 0x730]
call fcn.1800d0540
nop
lea rax, [rsp + 0x718]
mov qword [rsp + 0x938], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x940], rax
lea rax, [rsp + 0x718]
mov qword [rsp + 0x360], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x368], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x948]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e7398]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x718]
call fcn.180169470
lea rax, [rsp + 0x968]
mov qword [rsp + 0x3a0], rax
lea rdx, [0x1801e70e8]
lea rcx, [rsp + 0x748]
call fcn.1800d0540
nop
lea rdx, [0x1801e7038]
lea rcx, [rsp + 0x760]
call fcn.1800d0540
nop
lea rax, [rsp + 0x748]
mov qword [rsp + 0x958], rax
lea rax, [rsp + 0x778]
mov qword [rsp + 0x960], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x350], rax
lea rax, [rsp + 0x778]
mov qword [rsp + 0x358], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x968]
call fcn.1800e3ab0
mov rbx, rax
lea rdx, [0x1801e73c8]
lea rcx, [rsp + 0x48]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea r9, [0x1800e71c0]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x748]
call fcn.180169470
jmp 0x18010046a
cmp ebx, 0xb
jne 0x1800ff6dc
lea rcx, [rsp + 0x140]
call fcn.18012db50
nop
mov r14, qword [rsp + 0x148]
mov rcx, r14
mov rdi, qword [rsp + 0x140]
sub rcx, rdi
movabs rax, 0x4ec4ec4ec4ec4ec5
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jne 0x1800ff5cb
lea rcx, [rsp + 0xbe8]
call fcn.18012d550
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.1800e8df0
nop
lea rcx, [rsp + 0xbe8]
call fcn.1800efc90
mov r14, qword [rsp + 0x148]
mov rdi, qword [rsp + 0x140]
mov qword [rsp + 0x490], rdi
cmp rdi, r14
je 0x1800ff6ca
mov byte [rsp + 0x158], 0
xor edx, edx
lea rcx, [rsp + 0x160]
call fcn.1800e4ec0
nop
lea rax, [rsp + 0x978]
mov qword [rsp + 0x90], rax
lea rdx, [rdi + 0x48]
lea rcx, [rsp + 0x1220]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0x978]
call fcn.1800d0820
mov rbx, rax
lea rdx, [0x1801e6c14]
lea rcx, [rsp + 0x158]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x1220]
call fcn.1800cffc0
lea rax, [rsp + 0x988]
mov qword [rsp + 0x170], rax
lea rdx, [rdi + 8]
lea rcx, [rsp + 0x988]
call fcn.1800d0450
mov rbx, rax
lea rdx, [0x1801e73d8]
lea rcx, [rsp + 0x158]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x48]
call fcn.1800fb860
nop
movzx edx, byte [rsp + 0x158]
lea rcx, [rsp + 0x160]
call fcn.1800f14f0
add rdi, 0x68
jmp 0x1800ff5cb
lea rcx, [rsp + 0x140]
call fcn.1800efc90
jmp 0x18010046a
cmp ebx, 0xc
jne 0x18010046a
mov qword [rsp + 0xc18], rsi
mov qword [rsp + 0xc28], rsi
mov qword [rsp + 0xc30], rsi
mov qword [rsp + 0xc28], rsi
mov qword [rsp + 0xc30], 0xf
mov byte [rsp + 0xc18], 0
lea r8d, [rbx + 0xd]
lea rdx, str.return_meGetAllXiaoInfo__
lea rcx, [rsp + 0xc18]
call fcn.1800d0120
nop
lea r8d, [rbx - 0xb]
lea rdx, [rsp + 0xc18]
lea rcx, [rsp + 0x2a0]
call fcn.180116580
nop
mov rdx, qword [rsp + 0xc30]
cmp rdx, 0x10
jb 0x1800ff79f
inc rdx
mov qword [rsp + 0x488], rdx
mov rcx, qword [rsp + 0xc18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ff79a
add rdx, 0x27
mov qword [rsp + 0x488], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180100696
call fcn.1801690e8
mov qword [rsp + 0xc28], rsi
mov qword [rsp + 0xc30], 0xf
mov byte [rsp + 0xc18], 0
mov rax, qword [rsp + 0x2a8]
mov rdx, qword [rsp + 0x2a0]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x1800ff822
lea rax, [rsp + 0x998]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x12a0]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0x998]
call fcn.1800d0820
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x12a0]
call fcn.1800cffc0
nop
lea rcx, [rsp + 0x2a0]
call fcn.1800ef9a0
jmp 0x18010046a
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
cmp ebx, 6
jne 0x1800ff981
xor edx, edx
lea rcx, [rsp + 0xbd0]
call fcn.18012e5f0
mov rdi, rax
lea rax, [rsp + 0x30]
cmp rax, rdi
je 0x1800ff965
lea r15, [rsp + 0x30]
lea r12, [rsp + 0x38]
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x1800ff931
mov r14, qword [rsp + 0x38]
mov rbx, r8
mov qword [rsp + 0x428], rbx
cmp rbx, r14
je 0x1800ff8b6
mov rcx, rbx
call fcn.1800e7eb0
add rbx, 0xb0
mov qword [rsp + 0x428], rbx
mov r8, qword [rsp + 0x30]
jmp 0x1800ff893
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs r14, 0x2e8ba2e8ba2e8ba3
mov rax, r14
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xb0
mov qword [rsp + 0x478], rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x1800ff918
add rdx, 0x27
mov qword [rsp + 0x478], rdx
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18010069c
mov rcx, r8
call fcn.1801690e8
mov qword [r15], rsi
mov qword [r12], rsi
lea rax, [rsp + 0x40]
mov qword [rax], rsi
jmp 0x1800ff93b
movabs r14, 0x2e8ba2e8ba2e8ba3
mov rax, qword [rdi]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
mov qword [rsp + 0x38], rax
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x40], rax
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
jmp 0x1800ff96f
movabs r14, 0x2e8ba2e8ba2e8ba3
lea rcx, [rsp + 0xbd0]
call fcn.1800efb30
jmp 0x1800ffc05
cmp ebx, 7
jne 0x1800ffabe
lea rcx, [rsp + 0xc00]
call fcn.18012fa00
mov rdi, rax
lea rax, [rsp + 0x30]
cmp rax, rdi
je 0x1800ffaa2
lea r15, [rsp + 0x30]
lea r12, [rsp + 0x38]
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x1800ffa6e
mov r14, qword [rsp + 0x38]
mov rbx, r8
mov qword [rsp + 0x470], rbx
cmp rbx, r14
je 0x1800ff9f3
mov rcx, rbx
call fcn.1800e7eb0
add rbx, 0xb0
mov qword [rsp + 0x470], rbx
mov r8, qword [rsp + 0x30]
jmp 0x1800ff9d0
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs r14, 0x2e8ba2e8ba2e8ba3
mov rax, r14
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xb0
mov qword [rsp + 0x468], rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x1800ffa55
add rdx, 0x27
mov qword [rsp + 0x468], rdx
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801006a2
mov rcx, r8
call fcn.1801690e8
mov qword [r15], rsi
mov qword [r12], rsi
lea rax, [rsp + 0x40]
mov qword [rax], rsi
jmp 0x1800ffa78
movabs r14, 0x2e8ba2e8ba2e8ba3
mov rax, qword [rdi]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
mov qword [rsp + 0x38], rax
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x40], rax
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
jmp 0x1800ffaac
movabs r14, 0x2e8ba2e8ba2e8ba3
lea rcx, [rsp + 0xc00]
call fcn.1800efb30
jmp 0x1800ffc05
cmp ebx, 8
jne 0x1800ffbfb
lea rcx, [rsp + 0xc38]
call fcn.18012e770
mov rdi, rax
lea rax, [rsp + 0x30]
cmp rax, rdi
je 0x1800ffbe2
lea r15, [rsp + 0x30]
lea r12, [rsp + 0x38]
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x1800ffbae
mov r14, qword [rsp + 0x38]
mov rbx, r8
mov qword [rsp + 0x460], rbx
nop dword [rax]
cmp rbx, r14
je 0x1800ffb33
mov rcx, rbx
call fcn.1800e7eb0
add rbx, 0xb0
mov qword [rsp + 0x460], rbx
mov r8, qword [rsp + 0x30]
jmp 0x1800ffb10
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs r14, 0x2e8ba2e8ba2e8ba3
mov rax, r14
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xb0
mov qword [rsp + 0x458], rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x1800ffb95
add rdx, 0x27
mov qword [rsp + 0x458], rdx
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801006a8
mov rcx, r8
call fcn.1801690e8
mov qword [r15], rsi
mov qword [r12], rsi
lea rax, [rsp + 0x40]
mov qword [rax], rsi
jmp 0x1800ffbb8
movabs r14, 0x2e8ba2e8ba2e8ba3
mov rax, qword [rdi]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
mov qword [rsp + 0x38], rax
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x40], rax
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
jmp 0x1800ffbec
movabs r14, 0x2e8ba2e8ba2e8ba3
lea rcx, [rsp + 0xc38]
call fcn.1800efb30
jmp 0x1800ffc05
movabs r14, 0x2e8ba2e8ba2e8ba3
mov r15d, esi
mov dword [rsp + 0x2d8], esi
nop
mov ebx, r15d
mov rcx, qword [rsp + 0x38]
sub rcx, qword [rsp + 0x30]
mov rax, r14
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbx, rdx
jae 0x1801003b0
mov byte [rsp + 0x58], 0
xor edx, edx
lea rcx, [rsp + 0x60]
call fcn.1800e4ec0
nop
imul rdi, rbx, 0xb0
mov rax, qword [rsp + 0x30]
cmp qword [rdi + rax + 0xa8], 0
je 0x180100391
lea rcx, [rsp + 0x9a8]
mov qword [rsp + 0x90], rcx
lea rdx, [rax + 0xa8]
add rdx, rdi
lea rcx, [rsp + 0x9a8]
call fcn.1800d05f0
mov rbx, rax
mov qword [rsp + 0x170], rax
lea rdx, [0x1801e6c7c]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0x9b8]
mov qword [rsp + 0x158], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x28
add rdx, rdi
lea rcx, [rsp + 0x12c0]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0x9b8]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x78], rax
lea rdx, [0x1801e6c14]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x12c0]
call fcn.1800cffc0
lea rax, [rsp + 0x9c8]
mov qword [rsp + 0xc0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x48
add rdx, rdi
lea rcx, [rsp + 0x12e0]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0x9c8]
call fcn.1800d0820
mov rbx, rax
mov qword [rsp + 0x278], rax
lea rdx, [0x1801e6c80]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
nop
lea rcx, [rsp + 0x12e0]
call fcn.1800cffc0
lea rax, [rsp + 0x9d8]
mov qword [rsp + 0x330], rax
mov rdx, qword [rsp + 0x30]
add rdx, 4
add rdx, rdi
lea rcx, [rsp + 0x9d8]
call fcn.1800d0450
mov rbx, rax
mov qword [rsp + 0x320], rax
lea rdx, [0x1801e6c88]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0x9e8]
mov qword [rsp + 0x310], rax
mov rdx, qword [rsp + 0x30]
add rdx, 8
add rdx, rdi
lea rcx, [rsp + 0x9e8]
call fcn.1800d0450
mov rbx, rax
mov qword [rsp + 0x300], rax
lea rdx, [0x1801e6c98]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0x9f8]
mov qword [rsp + 0x2f0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x24
add rdx, rdi
lea rcx, [rsp + 0x9f8]
call fcn.1800d0450
mov rbx, rax
mov qword [rsp + 0x390], rax
lea rdx, [0x1801e6ca8]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa08]
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x30]
add rdx, rdi
lea rcx, [rsp + 0xa08]
call fcn.1800d0450
mov rbx, rax
mov qword [rsp + 0x380], rax
lea rdx, [0x1801e6bac]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa18]
mov qword [rsp + 0x370], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x10
add rdx, rdi
lea rcx, [rsp + 0xa18]
call fcn.1800d0450
mov rbx, rax
mov qword [rsp + 0x360], rax
lea rdx, [0x1801e6cb4]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa28]
mov qword [rsp + 0x350], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x20
add rdx, rdi
lea rcx, [rsp + 0xa28]
call fcn.1800d0450
mov rbx, rax
mov qword [rsp + 0x3a0], rax
lea rdx, [0x1801e6cbc]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa38]
mov qword [rsp + 0x3c0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x18
add rdx, rdi
lea rcx, [rsp + 0xa38]
call fcn.1800d0400
mov rbx, rax
mov qword [rsp + 0xd0], rax
lea rdx, [0x1801e6cc4]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa48]
mov qword [rsp + 0xe0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0xc
add rdx, rdi
lea rcx, [rsp + 0xa48]
call fcn.1800d04a0
mov rbx, rax
mov qword [rsp + 0x110], rax
lea rdx, [0x1801e6ccc]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa58]
mov qword [rsp + 0x120], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x1a
add rdx, rdi
lea rcx, [rsp + 0xa58]
call fcn.1800d0400
mov rbx, rax
mov qword [rsp + 0x130], rax
lea rdx, [0x1801e6cd4]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa68]
mov qword [rsp + 0xf0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x1b
add rdx, rdi
lea rcx, [rsp + 0xa68]
call fcn.1800d0400
mov rbx, rax
mov qword [rsp + 0x100], rax
lea rdx, [0x1801e6cdc]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa78]
mov qword [rsp + 0x3e0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x1c
add rdx, rdi
lea rcx, [rsp + 0xa78]
call fcn.1800d0400
mov rbx, rax
mov qword [rsp + 0x3d0], rax
lea rdx, [0x1801e6ce4]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.1800f14f0
lea rax, [rsp + 0xa88]
mov qword [rsp + 0x2d0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x88
add rdx, rdi
lea rcx, [rsp + 0x1300]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xa88]
call fcn.1800d0820
mov rbx, rax
lea rdx, [0x1801e6cec]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x1300]
call fcn.1800cffc0
lea rax, [rsp + 0xa98]
mov qword [rsp + 0xa0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x68
add rdx, rdi
lea rcx, [rsp + 0x1320]
call fcn.1801380b0
nop
mov rdx, rax
lea rcx, [rsp + 0xa98]
call fcn.1800d0820
mov rbx, rax
lea rdx, [0x1801e6cf4]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
nop
lea rcx, [rsp + 0x1320]
call fcn.1800cffc0
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x3b0], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0x14
add rdx, rdi
lea rcx, [rsp + 0x2c0]
call fcn.1800d0450
mov rbx, rax
lea rdx, [0x1801e6d00]
lea rcx, [rsp + 0x58]
call fcn.1800d0900
mov rcx, rax
mov rdx, rbx
call fcn.1800e8d20
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x48]
call fcn.1800fb860
nop
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.1800f14f0
inc r15d
mov dword [rsp + 0x2d8], r15d
jmp 0x1800ffc10
lea r15, [rsp + 0x30]
lea r12, [rsp + 0x38]
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x18010046a
mov rdi, qword [rsp + 0x38]
mov rbx, r8
mov qword [rsp + 0x450], rbx
cmp rbx, rdi
je 0x1801003fb
mov rcx, rbx
call fcn.1800e7eb0
add rbx, 0xb0
mov qword [rsp + 0x450], rbx
mov r8, qword [rsp + 0x30]
jmp 0x1801003d8
mov rcx, qword [rsp + 0x40]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xb0
mov qword [rsp + 0x448], rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x180100453
add rdx, 0x27
mov qword [rsp + 0x448], rdx
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801006ae
mov rcx, r8
call fcn.1801690e8
mov qword [r15], rsi
mov qword [r12], rsi
lea rax, [rsp + 0x40]
mov qword [rax], rsi
mov dword [rsp + 0x28], esi
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, 0xffffffff
lea rdx, [rsp + 0x1120]
lea rcx, [rsp + 0x48]
call fcn.1800f2cd0
nop
mov rdx, rax
lea rcx, [rsp + 0xc78]
call fcn.1800e8d60
nop
lea rcx, [rsp + 0x1120]
call fcn.1800cffc0
lea rdx, [rsp + 0xc78]
lea rcx, [rsp + 0xcd8]
call fcn.180139750
nop
mov rdx, rax
lea rcx, [rsp + 0xc78]
call fcn.1800e8d60
nop
lea rcx, [rsp + 0xcd8]
call fcn.1800cffc0
nop
movzx edx, byte [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.1800f14f0
nop
jmp 0x1801004fe
xor r8d, r8d
mov rdx, r13
mov rcx, qword [0x18051b4f0]
call fcn.180132430
mov ecx, dword [rsp + 0xc88]
mov dword [rsp + 0x270], ecx
lea edx, [rcx + 0xa]
cmp eax, edx
jae 0x1801005b9
mov r8d, edx
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov rcx, qword [0x18051b4f0]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x168], rax
test rax, rax
je 0x1801005ed
lea rdx, [r13 + 4]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x168]
mov rcx, qword [0x18051b4f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [r13 + 8]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x270]
mov rcx, qword [0x18051b4f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9d, dword [rsp + 0x270]
mov rdx, qword [rsp + 0x168]
jmp 0x1801005c0
lea rdx, [r13 + 8]
mov r9, rcx
lea r8, [rsp + 0xc78]
cmp qword [rsp + 0xc90], 0x10
mov qword [rsp + 0x20], rsi
cmovae r8, qword [rsp + 0xc78]
mov rcx, qword [0x18051b4f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
mov rdx, qword [rsp + 0xc90]
cmp rdx, 0x10
jb 0x180100630
inc rdx
mov rcx, qword [rsp + 0xc78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18010062b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801006b4
call fcn.1801690e8
mov qword [rsp + 0xc88], rsi
mov qword [rsp + 0xc90], 0xf
mov byte [rsp + 0xc78], 0
mov rcx, qword [rsp + 0x1430]
xor rcx, rsp
call fcn.180169060
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
int3