Function at 0x18000e1c0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x2e8
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x48], 0xffffffffffffffff
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0xd8], 4
mov dword [rsp + 0xe8], 3
mov eax, dword [rsp + 0xe8]
test eax, eax
jle 0x18000e290
mov eax, dword [rsp + 0xe8]
cmp eax, 1
jle 0x18000e25f
mov eax, dword [rsp + 0xd8]
and eax, 0x1494
mov dword [rsp + 0xd8], eax
mov eax, dword [rsp + 0xe8]
sub eax, 2
mov dword [rsp + 0xe8], eax
jmp 0x18000e222
mov eax, dword [rsp + 0xd8]
cmp eax, 0x805
jle 0x18000e27e
mov eax, dword [rsp + 0xd8]
and eax, 0x7e
mov dword [rsp + 0xd8], eax
mov eax, dword [rsp + 0xe8]
dec eax
mov dword [rsp + 0xe8], eax
jmp 0x18000e222
mov dword [rsp + 0xe0], 6
mov dword [rsp + 0xf4], 0xa
mov eax, dword [rsp + 0xf4]
test eax, eax
jle 0x18000e316
mov eax, dword [rsp + 0xf4]
cmp eax, 1
jle 0x18000e2e3
mov eax, dword [rsp + 0xe0]
and eax, 0x1f29
mov dword [rsp + 0xe0], eax
mov eax, dword [rsp + 0xf4]
sub eax, 2
mov dword [rsp + 0xf4], eax
jmp 0x18000e2a6
mov eax, dword [rsp + 0xe0]
cmp eax, 0x80c
jle 0x18000e304
mov eax, dword [rsp + 0xe0]
and eax, 0x85
mov dword [rsp + 0xe0], eax
mov eax, dword [rsp + 0xf4]
dec eax
mov dword [rsp + 0xf4], eax
jmp 0x18000e2a6
mov dword [rsp + 0xe4], 8
mov dword [rsp + 0xec], 3
mov eax, dword [rsp + 0xec]
test eax, eax
jle 0x18000e39a
mov eax, dword [rsp + 0xec]
cmp eax, 1
jle 0x18000e369
mov eax, dword [rsp + 0xe4]
and eax, 0x1fed
mov dword [rsp + 0xe4], eax
mov eax, dword [rsp + 0xec]
sub eax, 2
mov dword [rsp + 0xec], eax
jmp 0x18000e32c
mov eax, dword [rsp + 0xe4]
cmp eax, 0x805
jle 0x18000e388
mov eax, dword [rsp + 0xe4]
and eax, 0x7e
mov dword [rsp + 0xe4], eax
mov eax, dword [rsp + 0xec]
dec eax
mov dword [rsp + 0xec], eax
jmp 0x18000e32c
mov dword [rsp + 0xd4], 1
mov dword [rsp + 0xd0], 0x15
cmp dword [rsp + 0xd0], 0
jle 0x18000e410
mov eax, dword [rsp + 0xd0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e3f3
mov dword [rsp + 0xd4], 4
mov eax, dword [rsp + 0xd0]
sub eax, 2
mov dword [rsp + 0xd0], eax
jmp 0x18000e3b0
mov dword [rsp + 0xd4], 0
mov eax, dword [rsp + 0xd0]
dec eax
mov dword [rsp + 0xd0], eax
jmp 0x18000e3b0
mov dword [rsp + 0xdc], 5
mov dword [rsp + 0xf0], 5
mov eax, dword [rsp + 0xf0]
test eax, eax
jle 0x18000e496
mov eax, dword [rsp + 0xf0]
cmp eax, 1
jle 0x18000e463
mov eax, dword [rsp + 0xdc]
and eax, 0x9c1
mov dword [rsp + 0xdc], eax
mov eax, dword [rsp + 0xf0]
sub eax, 2
mov dword [rsp + 0xf0], eax
jmp 0x18000e426
mov eax, dword [rsp + 0xdc]
cmp eax, 0x807
jle 0x18000e484
mov eax, dword [rsp + 0xdc]
and eax, 0x80
mov dword [rsp + 0xdc], eax
mov eax, dword [rsp + 0xf0]
dec eax
mov dword [rsp + 0xf0], eax
jmp 0x18000e426
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + 0x300]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0xffffffffffffffff
jne 0x18000e93d
mov dword [rsp + 0x108], 7
mov dword [rsp + 0xfc], 4
mov eax, dword [rsp + 0xfc]
test eax, eax
jle 0x18000e560
mov eax, dword [rsp + 0xfc]
cmp eax, 1
jle 0x18000e52f
mov eax, dword [rsp + 0x108]
and eax, 0x21f3
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0xfc]
sub eax, 2
mov dword [rsp + 0xfc], eax
jmp 0x18000e4f2
mov eax, dword [rsp + 0x108]
cmp eax, 0x806
jle 0x18000e54e
mov eax, dword [rsp + 0x108]
and eax, 0x7f
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0xfc]
dec eax
mov dword [rsp + 0xfc], eax
jmp 0x18000e4f2
mov dword [rsp + 0x110], 0
mov dword [rsp + 0x114], 0x14
cmp dword [rsp + 0x114], 0
jle 0x18000e5d5
mov eax, dword [rsp + 0x114]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e5b8
mov dword [rsp + 0x110], 4
mov eax, dword [rsp + 0x114]
dec eax
mov dword [rsp + 0x114], eax
jmp 0x18000e576
mov dword [rsp + 0x110], 0
mov eax, dword [rsp + 0x114]
dec eax
mov dword [rsp + 0x114], eax
jmp 0x18000e576
mov dword [rsp + 0xf8], 5
mov dword [rsp + 0x10c], 4
mov eax, dword [rsp + 0x10c]
test eax, eax
jle 0x18000e659
mov eax, dword [rsp + 0x10c]
cmp eax, 1
jle 0x18000e628
mov eax, dword [rsp + 0xf8]
and eax, 0x1952
mov dword [rsp + 0xf8], eax
mov eax, dword [rsp + 0x10c]
sub eax, 2
mov dword [rsp + 0x10c], eax
jmp 0x18000e5eb
mov eax, dword [rsp + 0xf8]
cmp eax, 0x806
jle 0x18000e647
mov eax, dword [rsp + 0xf8]
and eax, 0x7f
mov dword [rsp + 0xf8], eax
mov eax, dword [rsp + 0x10c]
dec eax
mov dword [rsp + 0x10c], eax
jmp 0x18000e5eb
mov dword [rsp + 0x124], 0
mov dword [rsp + 0x118], 0xe
cmp dword [rsp + 0x118], 0
jle 0x18000e6cf
mov eax, dword [rsp + 0x118]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e6b2
mov dword [rsp + 0x124], 4
mov eax, dword [rsp + 0x118]
sub eax, 2
mov dword [rsp + 0x118], eax
jmp 0x18000e66f
mov dword [rsp + 0x124], 4
mov eax, dword [rsp + 0x118]
dec eax
mov dword [rsp + 0x118], eax
jmp 0x18000e66f
mov dword [rsp + 0x120], 4
mov dword [rsp + 0x100], 0x13
cmp dword [rsp + 0x100], 0
jle 0x18000e745
mov eax, dword [rsp + 0x100]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e727
mov dword [rsp + 0x120], 0
mov eax, dword [rsp + 0x100]
dec eax
mov dword [rsp + 0x100], eax
jmp 0x18000e6e5
mov dword [rsp + 0x120], 0
mov eax, dword [rsp + 0x100]
sub eax, 2
mov dword [rsp + 0x100], eax
jmp 0x18000e6e5
mov dword [rsp + 0x104], 9
mov dword [rsp + 0x11c], 4
mov eax, dword [rsp + 0x11c]
test eax, eax
jle 0x18000e7c9
mov eax, dword [rsp + 0x11c]
cmp eax, 1
jle 0x18000e798
mov eax, dword [rsp + 0x104]
and eax, 0x197d
mov dword [rsp + 0x104], eax
mov eax, dword [rsp + 0x11c]
sub eax, 2
mov dword [rsp + 0x11c], eax
jmp 0x18000e75b
mov eax, dword [rsp + 0x104]
cmp eax, 0x806
jle 0x18000e7b7
mov eax, dword [rsp + 0x104]
and eax, 0x7f
mov dword [rsp + 0x104], eax
mov eax, dword [rsp + 0x11c]
dec eax
mov dword [rsp + 0x11c], eax
jmp 0x18000e75b
mov dword [rsp + 0x13c], 5
mov dword [rsp + 0x12c], 0xf
cmp dword [rsp + 0x12c], 0
jle 0x18000e83e
mov eax, dword [rsp + 0x12c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e821
mov dword [rsp + 0x13c], 0
mov eax, dword [rsp + 0x12c]
dec eax
mov dword [rsp + 0x12c], eax
jmp 0x18000e7df
mov dword [rsp + 0x13c], 4
mov eax, dword [rsp + 0x12c]
dec eax
mov dword [rsp + 0x12c], eax
jmp 0x18000e7df
mov dword [rsp + 0x130], 2
mov dword [rsp + 0x138], 0x10
cmp dword [rsp + 0x138], 0
jle 0x18000e8b4
mov eax, dword [rsp + 0x138]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e896
mov dword [rsp + 0x130], 4
mov eax, dword [rsp + 0x138]
dec eax
mov dword [rsp + 0x138], eax
jmp 0x18000e854
mov dword [rsp + 0x130], 4
mov eax, dword [rsp + 0x138]
sub eax, 2
mov dword [rsp + 0x138], eax
jmp 0x18000e854
mov dword [rsp + 0x128], 9
mov dword [rsp + 0x134], 4
mov eax, dword [rsp + 0x134]
test eax, eax
jle 0x18000e938
mov eax, dword [rsp + 0x134]
cmp eax, 1
jle 0x18000e907
mov eax, dword [rsp + 0x128]
and eax, 0x197d
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x134]
sub eax, 2
mov dword [rsp + 0x134], eax
jmp 0x18000e8ca
mov eax, dword [rsp + 0x128]
cmp eax, 0x806
jle 0x18000e926
mov eax, dword [rsp + 0x128]
and eax, 0x7f
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x134]
dec eax
mov dword [rsp + 0x134], eax
jmp 0x18000e8ca
jmp 0x18000fed5
mov rcx, qword [rsp + 0x48]
call fcn.18000c5d0
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jne 0x18000eb3f
mov dword [rsp + 0x148], 8
mov dword [rsp + 0x14c], 0x12
cmp dword [rsp + 0x14c], 0
jle 0x18000e9cc
mov eax, dword [rsp + 0x14c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000e9ae
mov dword [rsp + 0x148], 4
mov eax, dword [rsp + 0x14c]
dec eax
mov dword [rsp + 0x14c], eax
jmp 0x18000e96c
mov dword [rsp + 0x148], 0
mov eax, dword [rsp + 0x14c]
sub eax, 2
mov dword [rsp + 0x14c], eax
jmp 0x18000e96c
mov dword [rsp + 0x140], 4
mov dword [rsp + 0x15c], 0x11
cmp dword [rsp + 0x15c], 0
jle 0x18000ea41
mov eax, dword [rsp + 0x15c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ea24
mov dword [rsp + 0x140], 0
mov eax, dword [rsp + 0x15c]
dec eax
mov dword [rsp + 0x15c], eax
jmp 0x18000e9e2
mov dword [rsp + 0x140], 4
mov eax, dword [rsp + 0x15c]
dec eax
mov dword [rsp + 0x15c], eax
jmp 0x18000e9e2
mov dword [rsp + 0x144], 5
mov dword [rsp + 0x154], 4
mov eax, dword [rsp + 0x154]
test eax, eax
jle 0x18000eac5
mov eax, dword [rsp + 0x154]
cmp eax, 1
jle 0x18000ea94
mov eax, dword [rsp + 0x144]
and eax, 0x1952
mov dword [rsp + 0x144], eax
mov eax, dword [rsp + 0x154]
sub eax, 2
mov dword [rsp + 0x154], eax
jmp 0x18000ea57
mov eax, dword [rsp + 0x144]
cmp eax, 0x806
jle 0x18000eab3
mov eax, dword [rsp + 0x144]
and eax, 0x7f
mov dword [rsp + 0x144], eax
mov eax, dword [rsp + 0x154]
dec eax
mov dword [rsp + 0x154], eax
jmp 0x18000ea57
mov dword [rsp + 0x150], 0
mov dword [rsp + 0x158], 0x14
cmp dword [rsp + 0x158], 0
jle 0x18000eb3a
mov eax, dword [rsp + 0x158]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000eb1d
mov dword [rsp + 0x150], 4
mov eax, dword [rsp + 0x158]
dec eax
mov dword [rsp + 0x158], eax
jmp 0x18000eadb
mov dword [rsp + 0x150], 0
mov eax, dword [rsp + 0x158]
dec eax
mov dword [rsp + 0x158], eax
jmp 0x18000eadb
jmp 0x18000fed5
lea rax, [rsp + 0xc0]
lea rcx, [0x18005b5c0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xe
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0xe79
lea r9, [rsp + 0x98]
lea r8, [rsp + 0x80]
mov edx, 0xd
lea rcx, [rsp + 0xc0]
call fcn.18003bca0
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x18000ed3f
mov dword [rsp + 0x160], 4
mov dword [rsp + 0x16c], 3
mov eax, dword [rsp + 0x16c]
test eax, eax
jle 0x18000ec2e
mov eax, dword [rsp + 0x16c]
cmp eax, 1
jle 0x18000ebfd
mov eax, dword [rsp + 0x160]
and eax, 0x1494
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x16c]
sub eax, 2
mov dword [rsp + 0x16c], eax
jmp 0x18000ebc0
mov eax, dword [rsp + 0x160]
cmp eax, 0x805
jle 0x18000ec1c
mov eax, dword [rsp + 0x160]
and eax, 0x7e
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x16c]
dec eax
mov dword [rsp + 0x16c], eax
jmp 0x18000ebc0
mov dword [rsp + 0x168], 7
mov dword [rsp + 0x174], 0xb
mov eax, dword [rsp + 0x174]
test eax, eax
jle 0x18000ecb4
mov eax, dword [rsp + 0x174]
cmp eax, 1
jle 0x18000ec81
mov eax, dword [rsp + 0x168]
and eax, 0x66b
mov dword [rsp + 0x168], eax
mov eax, dword [rsp + 0x174]
sub eax, 2
mov dword [rsp + 0x174], eax
jmp 0x18000ec44
mov eax, dword [rsp + 0x168]
cmp eax, 0x80d
jle 0x18000eca2
mov eax, dword [rsp + 0x168]
and eax, 0x86
mov dword [rsp + 0x168], eax
mov eax, dword [rsp + 0x174]
dec eax
mov dword [rsp + 0x174], eax
jmp 0x18000ec44
mov dword [rsp + 0x164], 7
mov dword [rsp + 0x170], 9
mov eax, dword [rsp + 0x170]
test eax, eax
jle 0x18000ed3a
mov eax, dword [rsp + 0x170]
cmp eax, 1
jle 0x18000ed07
mov eax, dword [rsp + 0x164]
and eax, 0x19b6
mov dword [rsp + 0x164], eax
mov eax, dword [rsp + 0x170]
sub eax, 2
mov dword [rsp + 0x170], eax
jmp 0x18000ecca
mov eax, dword [rsp + 0x164]
cmp eax, 0x80b
jle 0x18000ed28
mov eax, dword [rsp + 0x164]
and eax, 0x84
mov dword [rsp + 0x164], eax
mov eax, dword [rsp + 0x170]
dec eax
mov dword [rsp + 0x170], eax
jmp 0x18000ecca
jmp 0x18000fed5
mov dword [rsp + 0x18c], 7
mov dword [rsp + 0x178], 0x11
cmp dword [rsp + 0x178], 0
jle 0x18000edb5
mov eax, dword [rsp + 0x178]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ed97
mov dword [rsp + 0x18c], 0
mov eax, dword [rsp + 0x178]
dec eax
mov dword [rsp + 0x178], eax
jmp 0x18000ed55
mov dword [rsp + 0x18c], 4
mov eax, dword [rsp + 0x178]
sub eax, 2
mov dword [rsp + 0x178], eax
jmp 0x18000ed55
mov dword [rsp + 0x180], 4
mov dword [rsp + 0x188], 0x11
cmp dword [rsp + 0x188], 0
jle 0x18000ee2b
mov eax, dword [rsp + 0x188]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ee0d
mov dword [rsp + 0x180], 4
mov eax, dword [rsp + 0x188]
dec eax
mov dword [rsp + 0x188], eax
jmp 0x18000edcb
mov dword [rsp + 0x180], 4
mov eax, dword [rsp + 0x188]
sub eax, 2
mov dword [rsp + 0x188], eax
jmp 0x18000edcb
mov dword [rsp + 0x184], 1
mov dword [rsp + 0x17c], 0x15
cmp dword [rsp + 0x17c], 0
jle 0x18000eea1
mov eax, dword [rsp + 0x17c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ee84
mov dword [rsp + 0x184], 4
mov eax, dword [rsp + 0x17c]
sub eax, 2
mov dword [rsp + 0x17c], eax
jmp 0x18000ee41
mov dword [rsp + 0x184], 0
mov eax, dword [rsp + 0x17c]
dec eax
mov dword [rsp + 0x17c], eax
jmp 0x18000ee41
lea rax, [rsp + 0xa0]
lea rcx, [0x18005b5d0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xe
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x849
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x70]
mov edx, 0xd
lea rcx, [rsp + 0xa0]
call fcn.18003bca0
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x190], 3
mov dword [rsp + 0x194], 0xa
mov eax, dword [rsp + 0x194]
test eax, eax
jle 0x18000ef82
mov eax, dword [rsp + 0x194]
cmp eax, 1
jle 0x18000ef4f
mov eax, dword [rsp + 0x190]
and eax, 0x107d
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x194]
sub eax, 2
mov dword [rsp + 0x194], eax
jmp 0x18000ef12
mov eax, dword [rsp + 0x190]
cmp eax, 0x80c
jle 0x18000ef70
mov eax, dword [rsp + 0x190]
and eax, 0x85
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x194]
dec eax
mov dword [rsp + 0x194], eax
jmp 0x18000ef12
mov dword [rsp + 0x1a0], 2
mov dword [rsp + 0x1a4], 4
mov eax, dword [rsp + 0x1a4]
test eax, eax
jle 0x18000f006
mov eax, dword [rsp + 0x1a4]
cmp eax, 1
jle 0x18000efd5
mov eax, dword [rsp + 0x1a0]
and eax, 0x1176
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a4]
sub eax, 2
mov dword [rsp + 0x1a4], eax
jmp 0x18000ef98
mov eax, dword [rsp + 0x1a0]
cmp eax, 0x806
jle 0x18000eff4
mov eax, dword [rsp + 0x1a0]
and eax, 0x7f
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a4]
dec eax
mov dword [rsp + 0x1a4], eax
jmp 0x18000ef98
mov dword [rsp + 0x198], 3
mov dword [rsp + 0x19c], 8
mov eax, dword [rsp + 0x19c]
test eax, eax
jle 0x18000f08c
mov eax, dword [rsp + 0x19c]
cmp eax, 1
jle 0x18000f059
mov eax, dword [rsp + 0x198]
and eax, 0x11d0
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x19c]
sub eax, 2
mov dword [rsp + 0x19c], eax
jmp 0x18000f01c
mov eax, dword [rsp + 0x198]
cmp eax, 0x80a
jle 0x18000f07a
mov eax, dword [rsp + 0x198]
and eax, 0x83
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x19c]
dec eax
mov dword [rsp + 0x19c], eax
jmp 0x18000f01c
cmp qword [rsp + 0xb8], 0
jne 0x18000f5f9
mov dword [rsp + 0x1b4], 7
mov dword [rsp + 0x1c8], 0xd
cmp dword [rsp + 0x1c8], 0
jle 0x18000f111
mov eax, dword [rsp + 0x1c8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f0f4
mov dword [rsp + 0x1b4], 0
mov eax, dword [rsp + 0x1c8]
sub eax, 2
mov dword [rsp + 0x1c8], eax
jmp 0x18000f0b1
mov dword [rsp + 0x1b4], 4
mov eax, dword [rsp + 0x1c8]
dec eax
mov dword [rsp + 0x1c8], eax
jmp 0x18000f0b1
mov dword [rsp + 0x1c4], 0
mov dword [rsp + 0x1b0], 0x15
cmp dword [rsp + 0x1b0], 0
jle 0x18000f187
mov eax, dword [rsp + 0x1b0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f169
mov dword [rsp + 0x1c4], 4
mov eax, dword [rsp + 0x1b0]
dec eax
mov dword [rsp + 0x1b0], eax
jmp 0x18000f127
mov dword [rsp + 0x1c4], 0
mov eax, dword [rsp + 0x1b0]
sub eax, 2
mov dword [rsp + 0x1b0], eax
jmp 0x18000f127
mov dword [rsp + 0x1b8], 9
mov dword [rsp + 0x1cc], 4
mov eax, dword [rsp + 0x1cc]
test eax, eax
jle 0x18000f20b
mov eax, dword [rsp + 0x1cc]
cmp eax, 1
jle 0x18000f1da
mov eax, dword [rsp + 0x1b8]
and eax, 0x197d
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x1cc]
sub eax, 2
mov dword [rsp + 0x1cc], eax
jmp 0x18000f19d
mov eax, dword [rsp + 0x1b8]
cmp eax, 0x806
jle 0x18000f1f9
mov eax, dword [rsp + 0x1b8]
and eax, 0x7f
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x1cc]
dec eax
mov dword [rsp + 0x1cc], eax
jmp 0x18000f19d
mov dword [rsp + 0x1a8], 5
mov dword [rsp + 0x1c0], 4
mov eax, dword [rsp + 0x1c0]
test eax, eax
jle 0x18000f28f
mov eax, dword [rsp + 0x1c0]
cmp eax, 1
jle 0x18000f25e
mov eax, dword [rsp + 0x1a8]
and eax, 0x1952
mov dword [rsp + 0x1a8], eax
mov eax, dword [rsp + 0x1c0]
sub eax, 2
mov dword [rsp + 0x1c0], eax
jmp 0x18000f221
mov eax, dword [rsp + 0x1a8]
cmp eax, 0x806
jle 0x18000f27d
mov eax, dword [rsp + 0x1a8]
and eax, 0x7f
mov dword [rsp + 0x1a8], eax
mov eax, dword [rsp + 0x1c0]
dec eax
mov dword [rsp + 0x1c0], eax
jmp 0x18000f221
mov dword [rsp + 0x1ac], 4
mov dword [rsp + 0x1bc], 3
mov eax, dword [rsp + 0x1bc]
test eax, eax
jle 0x18000f313
mov eax, dword [rsp + 0x1bc]
cmp eax, 1
jle 0x18000f2e2
mov eax, dword [rsp + 0x1ac]
and eax, 0x1891
mov dword [rsp + 0x1ac], eax
mov eax, dword [rsp + 0x1bc]
sub eax, 2
mov dword [rsp + 0x1bc], eax
jmp 0x18000f2a5
mov eax, dword [rsp + 0x1ac]
cmp eax, 0x805
jle 0x18000f301
mov eax, dword [rsp + 0x1ac]
and eax, 0x7e
mov dword [rsp + 0x1ac], eax
mov eax, dword [rsp + 0x1bc]
dec eax
mov dword [rsp + 0x1bc], eax
jmp 0x18000f2a5
mov dword [rsp + 0x1d0], 5
mov dword [rsp + 0x1e8], 4
mov eax, dword [rsp + 0x1e8]
test eax, eax
jle 0x18000f397
mov eax, dword [rsp + 0x1e8]
cmp eax, 1
jle 0x18000f366
mov eax, dword [rsp + 0x1d0]
and eax, 0x1952
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1e8]
sub eax, 2
mov dword [rsp + 0x1e8], eax
jmp 0x18000f329
mov eax, dword [rsp + 0x1d0]
cmp eax, 0x806
jle 0x18000f385
mov eax, dword [rsp + 0x1d0]
and eax, 0x7f
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1e8]
dec eax
mov dword [rsp + 0x1e8], eax
jmp 0x18000f329
mov dword [rsp + 0x1e4], 0
mov dword [rsp + 0x1ec], 0x14
cmp dword [rsp + 0x1ec], 0
jle 0x18000f40c
mov eax, dword [rsp + 0x1ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f3ef
mov dword [rsp + 0x1e4], 4
mov eax, dword [rsp + 0x1ec]
dec eax
mov dword [rsp + 0x1ec], eax
jmp 0x18000f3ad
mov dword [rsp + 0x1e4], 0
mov eax, dword [rsp + 0x1ec]
dec eax
mov dword [rsp + 0x1ec], eax
jmp 0x18000f3ad
mov dword [rsp + 0x1fc], 7
mov dword [rsp + 0x1f0], 0x11
cmp dword [rsp + 0x1f0], 0
jle 0x18000f481
mov eax, dword [rsp + 0x1f0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f464
mov dword [rsp + 0x1fc], 0
mov eax, dword [rsp + 0x1f0]
dec eax
mov dword [rsp + 0x1f0], eax
jmp 0x18000f422
mov dword [rsp + 0x1fc], 0
mov eax, dword [rsp + 0x1f0]
dec eax
mov dword [rsp + 0x1f0], eax
jmp 0x18000f422
mov dword [rsp + 0x1d8], 1
mov dword [rsp + 0x1d4], 0x15
cmp dword [rsp + 0x1d4], 0
jle 0x18000f4f7
mov eax, dword [rsp + 0x1d4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f4da
mov dword [rsp + 0x1d8], 4
mov eax, dword [rsp + 0x1d4]
sub eax, 2
mov dword [rsp + 0x1d4], eax
jmp 0x18000f497
mov dword [rsp + 0x1d8], 0
mov eax, dword [rsp + 0x1d4]
dec eax
mov dword [rsp + 0x1d4], eax
jmp 0x18000f497
mov dword [rsp + 0x1e0], 3
mov dword [rsp + 0x1f8], 0x12
cmp dword [rsp + 0x1f8], 0
jle 0x18000f56e
mov eax, dword [rsp + 0x1f8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f550
mov dword [rsp + 0x1e0], 4
mov eax, dword [rsp + 0x1f8]
sub eax, 2
mov dword [rsp + 0x1f8], eax
jmp 0x18000f50d
mov dword [rsp + 0x1e0], 0
mov eax, dword [rsp + 0x1f8]
sub eax, 2
mov dword [rsp + 0x1f8], eax
jmp 0x18000f50d
mov dword [rsp + 0x1dc], 7
mov dword [rsp + 0x1f4], 0xb
mov eax, dword [rsp + 0x1f4]
test eax, eax
jle 0x18000f5f4
mov eax, dword [rsp + 0x1f4]
cmp eax, 1
jle 0x18000f5c1
mov eax, dword [rsp + 0x1dc]
and eax, 0x66b
mov dword [rsp + 0x1dc], eax
mov eax, dword [rsp + 0x1f4]
sub eax, 2
mov dword [rsp + 0x1f4], eax
jmp 0x18000f584
mov eax, dword [rsp + 0x1dc]
cmp eax, 0x80d
jle 0x18000f5e2
mov eax, dword [rsp + 0x1dc]
and eax, 0x86
mov dword [rsp + 0x1dc], eax
mov eax, dword [rsp + 0x1f4]
dec eax
mov dword [rsp + 0x1f4], eax
jmp 0x18000f584
jmp 0x18000fed5
mov dword [rsp + 0x204], 4
mov dword [rsp + 0x21c], 0x11
cmp dword [rsp + 0x21c], 0
jle 0x18000f66e
mov eax, dword [rsp + 0x21c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f651
mov dword [rsp + 0x204], 0
mov eax, dword [rsp + 0x21c]
dec eax
mov dword [rsp + 0x21c], eax
jmp 0x18000f60f
mov dword [rsp + 0x204], 4
mov eax, dword [rsp + 0x21c]
dec eax
mov dword [rsp + 0x21c], eax
jmp 0x18000f60f
mov dword [rsp + 0x20c], 4
mov dword [rsp + 0x218], 3
mov eax, dword [rsp + 0x218]
test eax, eax
jle 0x18000f6f2
mov eax, dword [rsp + 0x218]
cmp eax, 1
jle 0x18000f6c1
mov eax, dword [rsp + 0x20c]
and eax, 0xdd8
mov dword [rsp + 0x20c], eax
mov eax, dword [rsp + 0x218]
sub eax, 2
mov dword [rsp + 0x218], eax
jmp 0x18000f684
mov eax, dword [rsp + 0x20c]
cmp eax, 0x805
jle 0x18000f6e0
mov eax, dword [rsp + 0x20c]
and eax, 0x7e
mov dword [rsp + 0x20c], eax
mov eax, dword [rsp + 0x218]
dec eax
mov dword [rsp + 0x218], eax
jmp 0x18000f684
mov dword [rsp + 0x200], 3
mov dword [rsp + 0x208], 0xa
mov eax, dword [rsp + 0x208]
test eax, eax
jle 0x18000f778
mov eax, dword [rsp + 0x208]
cmp eax, 1
jle 0x18000f745
mov eax, dword [rsp + 0x200]
and eax, 0x107d
mov dword [rsp + 0x200], eax
mov eax, dword [rsp + 0x208]
sub eax, 2
mov dword [rsp + 0x208], eax
jmp 0x18000f708
mov eax, dword [rsp + 0x200]
cmp eax, 0x80c
jle 0x18000f766
mov eax, dword [rsp + 0x200]
and eax, 0x85
mov dword [rsp + 0x200], eax
mov eax, dword [rsp + 0x208]
dec eax
mov dword [rsp + 0x208], eax
jmp 0x18000f708
mov dword [rsp + 0x210], 2
mov dword [rsp + 0x220], 0x10
cmp dword [rsp + 0x220], 0
jle 0x18000f7ee
mov eax, dword [rsp + 0x220]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f7d0
mov dword [rsp + 0x210], 4
mov eax, dword [rsp + 0x220]
dec eax
mov dword [rsp + 0x220], eax
jmp 0x18000f78e
mov dword [rsp + 0x210], 4
mov eax, dword [rsp + 0x220]
sub eax, 2
mov dword [rsp + 0x220], eax
jmp 0x18000f78e
mov dword [rsp + 0x214], 8
mov dword [rsp + 0x224], 0xc
cmp dword [rsp + 0x224], 0
jle 0x18000f864
mov eax, dword [rsp + 0x224]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f846
mov dword [rsp + 0x214], 4
mov eax, dword [rsp + 0x224]
dec eax
mov dword [rsp + 0x224], eax
jmp 0x18000f804
mov dword [rsp + 0x214], 0
mov eax, dword [rsp + 0x224]
sub eax, 2
mov dword [rsp + 0x224], eax
jmp 0x18000f804
mov eax, dword [rsp + 0x40]
mov r9d, 0x40
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
call qword [rsp + 0xb8]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x18000fd06
mov dword [rsp + 0x244], 0
mov dword [rsp + 0x238], 0xe
cmp dword [rsp + 0x238], 0
jle 0x18000f906
mov eax, dword [rsp + 0x238]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f8e9
mov dword [rsp + 0x244], 4
mov eax, dword [rsp + 0x238]
sub eax, 2
mov dword [rsp + 0x238], eax
jmp 0x18000f8a6
mov dword [rsp + 0x244], 4
mov eax, dword [rsp + 0x238]
dec eax
mov dword [rsp + 0x238], eax
jmp 0x18000f8a6
mov dword [rsp + 0x230], 1
mov dword [rsp + 0x23c], 3
mov eax, dword [rsp + 0x23c]
test eax, eax
jle 0x18000f98a
mov eax, dword [rsp + 0x23c]
cmp eax, 1
jle 0x18000f959
mov eax, dword [rsp + 0x230]
and eax, 0x1907
mov dword [rsp + 0x230], eax
mov eax, dword [rsp + 0x23c]
sub eax, 2
mov dword [rsp + 0x23c], eax
jmp 0x18000f91c
mov eax, dword [rsp + 0x230]
cmp eax, 0x805
jle 0x18000f978
mov eax, dword [rsp + 0x230]
and eax, 0x7e
mov dword [rsp + 0x230], eax
mov eax, dword [rsp + 0x23c]
dec eax
mov dword [rsp + 0x23c], eax
jmp 0x18000f91c
mov dword [rsp + 0x22c], 7
mov dword [rsp + 0x228], 0x10
cmp dword [rsp + 0x228], 0
jle 0x18000fa00
mov eax, dword [rsp + 0x228]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000f9e3
mov dword [rsp + 0x22c], 0
mov eax, dword [rsp + 0x228]
sub eax, 2
mov dword [rsp + 0x228], eax
jmp 0x18000f9a0
mov dword [rsp + 0x22c], 0
mov eax, dword [rsp + 0x228]
dec eax
mov dword [rsp + 0x228], eax
jmp 0x18000f9a0
mov dword [rsp + 0x234], 6
mov dword [rsp + 0x240], 0xa
mov eax, dword [rsp + 0x240]
test eax, eax
jle 0x18000fa86
mov eax, dword [rsp + 0x240]
cmp eax, 1
jle 0x18000fa53
mov eax, dword [rsp + 0x234]
and eax, 0x1f29
mov dword [rsp + 0x234], eax
mov eax, dword [rsp + 0x240]
sub eax, 2
mov dword [rsp + 0x240], eax
jmp 0x18000fa16
mov eax, dword [rsp + 0x234]
cmp eax, 0x80c
jle 0x18000fa74
mov eax, dword [rsp + 0x234]
and eax, 0x85
mov dword [rsp + 0x234], eax
mov eax, dword [rsp + 0x240]
dec eax
mov dword [rsp + 0x240], eax
jmp 0x18000fa16
mov dword [rsp + 0x258], 8
mov dword [rsp + 0x26c], 0xc
cmp dword [rsp + 0x26c], 0
jle 0x18000fafc
mov eax, dword [rsp + 0x26c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000fade
mov dword [rsp + 0x258], 4
mov eax, dword [rsp + 0x26c]
dec eax
mov dword [rsp + 0x26c], eax
jmp 0x18000fa9c
mov dword [rsp + 0x258], 0
mov eax, dword [rsp + 0x26c]
sub eax, 2
mov dword [rsp + 0x26c], eax
jmp 0x18000fa9c
mov dword [rsp + 0x254], 7
mov dword [rsp + 0x24c], 4
mov eax, dword [rsp + 0x24c]
test eax, eax
jle 0x18000fb80
mov eax, dword [rsp + 0x24c]
cmp eax, 1
jle 0x18000fb4f
mov eax, dword [rsp + 0x254]
and eax, 0x21f3
mov dword [rsp + 0x254], eax
mov eax, dword [rsp + 0x24c]
sub eax, 2
mov dword [rsp + 0x24c], eax
jmp 0x18000fb12
mov eax, dword [rsp + 0x254]
cmp eax, 0x806
jle 0x18000fb6e
mov eax, dword [rsp + 0x254]
and eax, 0x7f
mov dword [rsp + 0x254], eax
mov eax, dword [rsp + 0x24c]
dec eax
mov dword [rsp + 0x24c], eax
jmp 0x18000fb12
mov dword [rsp + 0x264], 7
mov dword [rsp + 0x260], 0x11
cmp dword [rsp + 0x260], 0
jle 0x18000fbf5
mov eax, dword [rsp + 0x260]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000fbd8
mov dword [rsp + 0x264], 0
mov eax, dword [rsp + 0x260]
dec eax
mov dword [rsp + 0x260], eax
jmp 0x18000fb96
mov dword [rsp + 0x264], 0
mov eax, dword [rsp + 0x260]
dec eax
mov dword [rsp + 0x260], eax
jmp 0x18000fb96
mov dword [rsp + 0x25c], 3
mov dword [rsp + 0x268], 9
mov eax, dword [rsp + 0x268]
test eax, eax
jle 0x18000fc7b
mov eax, dword [rsp + 0x268]
cmp eax, 1
jle 0x18000fc48
mov eax, dword [rsp + 0x25c]
and eax, 0x15f8
mov dword [rsp + 0x25c], eax
mov eax, dword [rsp + 0x268]
sub eax, 2
mov dword [rsp + 0x268], eax
jmp 0x18000fc0b
mov eax, dword [rsp + 0x25c]
cmp eax, 0x80b
jle 0x18000fc69
mov eax, dword [rsp + 0x25c]
and eax, 0x84
mov dword [rsp + 0x25c], eax
mov eax, dword [rsp + 0x268]
dec eax
mov dword [rsp + 0x268], eax
jmp 0x18000fc0b
mov dword [rsp + 0x250], 2
mov dword [rsp + 0x248], 5
mov eax, dword [rsp + 0x248]
test eax, eax
jle 0x18000fd01
mov eax, dword [rsp + 0x248]
cmp eax, 1
jle 0x18000fcce
mov eax, dword [rsp + 0x250]
and eax, 0x204d
mov dword [rsp + 0x250], eax
mov eax, dword [rsp + 0x248]
sub eax, 2
mov dword [rsp + 0x248], eax
jmp 0x18000fc91
mov eax, dword [rsp + 0x250]
cmp eax, 0x807
jle 0x18000fcef
mov eax, dword [rsp + 0x250]
and eax, 0x80
mov dword [rsp + 0x250], eax
mov eax, dword [rsp + 0x248]
dec eax
mov dword [rsp + 0x248], eax
jmp 0x18000fc91
jmp 0x18000fed5
mov dword [rsp + 0xb0], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0xb0]
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x18000fec3
mov dword [rsp + 0x280], 6
mov dword [rsp + 0x270], 7
mov eax, dword [rsp + 0x270]
test eax, eax
jle 0x18000fdc5
mov eax, dword [rsp + 0x270]
cmp eax, 1
jle 0x18000fd92
mov eax, dword [rsp + 0x280]
and eax, 0x169a
mov dword [rsp + 0x280], eax
mov eax, dword [rsp + 0x270]
sub eax, 2
mov dword [rsp + 0x270], eax
jmp 0x18000fd55
mov eax, dword [rsp + 0x280]
cmp eax, 0x809
jle 0x18000fdb3
mov eax, dword [rsp + 0x280]
and eax, 0x82
mov dword [rsp + 0x280], eax
mov eax, dword [rsp + 0x270]
dec eax
mov dword [rsp + 0x270], eax
jmp 0x18000fd55
mov dword [rsp + 0x274], 8
mov dword [rsp + 0x278], 0x12
cmp dword [rsp + 0x278], 0
jle 0x18000fe3b
mov eax, dword [rsp + 0x278]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000fe1d
mov dword [rsp + 0x274], 4
mov eax, dword [rsp + 0x278]
dec eax
mov dword [rsp + 0x278], eax
jmp 0x18000fddb
mov dword [rsp + 0x274], 0
mov eax, dword [rsp + 0x278]
sub eax, 2
mov dword [rsp + 0x278], eax
jmp 0x18000fddb
mov dword [rsp + 0x27c], 5
mov dword [rsp + 0x284], 5
mov eax, dword [rsp + 0x284]
test eax, eax
jle 0x18000fec1
mov eax, dword [rsp + 0x284]
cmp eax, 1
jle 0x18000fe8e
mov eax, dword [rsp + 0x27c]
and eax, 0x9c1
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x284]
sub eax, 2
mov dword [rsp + 0x284], eax
jmp 0x18000fe51
mov eax, dword [rsp + 0x27c]
cmp eax, 0x807
jle 0x18000feaf
mov eax, dword [rsp + 0x27c]
and eax, 0x80
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x284]
dec eax
mov dword [rsp + 0x284], eax
jmp 0x18000fe51
jmp 0x18000fed5
mov dword [rsp + 0x50], 1
xor eax, eax
test eax, eax
jne 0x18000e20c
cmp qword [rsp + 0x48], 0xffffffffffffffff
je 0x18000fee8
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x50], 0
jne 0x180010090
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov dword [rsp + 0x298], 6
mov dword [rsp + 0x29c], 0xa
mov eax, dword [rsp + 0x29c]
test eax, eax
jle 0x18000ff8c
mov eax, dword [rsp + 0x29c]
cmp eax, 1
jle 0x18000ff59
mov eax, dword [rsp + 0x298]
and eax, 0x1f29
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x29c]
sub eax, 2
mov dword [rsp + 0x29c], eax
jmp 0x18000ff1c
mov eax, dword [rsp + 0x298]
cmp eax, 0x80c
jle 0x18000ff7a
mov eax, dword [rsp + 0x298]
and eax, 0x85
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x29c]
dec eax
mov dword [rsp + 0x29c], eax
jmp 0x18000ff1c
mov dword [rsp + 0x28c], 2
mov dword [rsp + 0x290], 0xa
mov eax, dword [rsp + 0x290]
test eax, eax
jle 0x180010012
mov eax, dword [rsp + 0x290]
cmp eax, 1
jle 0x18000ffdf
mov eax, dword [rsp + 0x28c]
and eax, 0x2106
mov dword [rsp + 0x28c], eax
mov eax, dword [rsp + 0x290]
sub eax, 2
mov dword [rsp + 0x290], eax
jmp 0x18000ffa2
mov eax, dword [rsp + 0x28c]
cmp eax, 0x80c
jle 0x180010000
mov eax, dword [rsp + 0x28c]
and eax, 0x85
mov dword [rsp + 0x28c], eax
mov eax, dword [rsp + 0x290]
dec eax
mov dword [rsp + 0x290], eax
jmp 0x18000ffa2
mov dword [rsp + 0x294], 4
mov dword [rsp + 0x288], 0x15
cmp dword [rsp + 0x288], 0
jle 0x180010089
mov eax, dword [rsp + 0x288]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001006b
mov dword [rsp + 0x294], 0
mov eax, dword [rsp + 0x288]
sub eax, 2
mov dword [rsp + 0x288], eax
jmp 0x180010028
mov dword [rsp + 0x294], 0
mov eax, dword [rsp + 0x288]
sub eax, 2
mov dword [rsp + 0x288], eax
jmp 0x180010028
xor eax, eax
jmp 0x180010395
mov rax, qword [rsp + 0x308]
mov rcx, qword [rsp + 0x58]
mov qword [rax], rcx
mov rax, qword [rsp + 0x310]
mov ecx, dword [rsp + 0x40]
mov dword [rax], ecx
mov dword [rsp + 0x2c4], 1
mov dword [rsp + 0x2b4], 0x10
cmp dword [rsp + 0x2b4], 0
jle 0x180010124
mov eax, dword [rsp + 0x2b4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180010106
mov dword [rsp + 0x2c4], 4
mov eax, dword [rsp + 0x2b4]
dec eax
mov dword [rsp + 0x2b4], eax
jmp 0x1800100c4
mov dword [rsp + 0x2c4], 0
mov eax, dword [rsp + 0x2b4]
sub eax, 2
mov dword [rsp + 0x2b4], eax
jmp 0x1800100c4
mov dword [rsp + 0x2b8], 0
mov dword [rsp + 0x2bc], 0x14
cmp dword [rsp + 0x2bc], 0
jle 0x180010199
mov eax, dword [rsp + 0x2bc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18001017c
mov dword [rsp + 0x2b8], 4
mov eax, dword [rsp + 0x2bc]
dec eax
mov dword [rsp + 0x2bc], eax
jmp 0x18001013a
mov dword [rsp + 0x2b8], 0
mov eax, dword [rsp + 0x2bc]
dec eax
mov dword [rsp + 0x2bc], eax
jmp 0x18001013a
mov dword [rsp + 0x2cc], 2
mov dword [rsp + 0x2b0], 0x13
cmp dword [rsp + 0x2b0], 0
jle 0x180010210
mov eax, dword [rsp + 0x2b0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800101f2
mov dword [rsp + 0x2cc], 4
mov eax, dword [rsp + 0x2b0]
sub eax, 2
mov dword [rsp + 0x2b0], eax
jmp 0x1800101af
mov dword [rsp + 0x2cc], 4
mov eax, dword [rsp + 0x2b0]
sub eax, 2
mov dword [rsp + 0x2b0], eax
jmp 0x1800101af
mov dword [rsp + 0x2c8], 7
mov dword [rsp + 0x2a0], 0x11
cmp dword [rsp + 0x2a0], 0
jle 0x180010286
mov eax, dword [rsp + 0x2a0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180010268
mov dword [rsp + 0x2c8], 0
mov eax, dword [rsp + 0x2a0]
dec eax
mov dword [rsp + 0x2a0], eax
jmp 0x180010226
mov dword [rsp + 0x2c8], 4
mov eax, dword [rsp + 0x2a0]
sub eax, 2
mov dword [rsp + 0x2a0], eax
jmp 0x180010226
mov dword [rsp + 0x2a4], 2
mov dword [rsp + 0x2a8], 0xa
mov eax, dword [rsp + 0x2a8]
test eax, eax
jle 0x18001030c
mov eax, dword [rsp + 0x2a8]
cmp eax, 1
jle 0x1800102d9
mov eax, dword [rsp + 0x2a4]
and eax, 0x2106
mov dword [rsp + 0x2a4], eax
mov eax, dword [rsp + 0x2a8]
sub eax, 2
mov dword [rsp + 0x2a8], eax
jmp 0x18001029c
mov eax, dword [rsp + 0x2a4]
cmp eax, 0x80c
jle 0x1800102fa
mov eax, dword [rsp + 0x2a4]
and eax, 0x85
mov dword [rsp + 0x2a4], eax
mov eax, dword [rsp + 0x2a8]
dec eax
mov dword [rsp + 0x2a8], eax
jmp 0x18001029c
mov dword [rsp + 0x2ac], 4
mov dword [rsp + 0x2c0], 3
mov eax, dword [rsp + 0x2c0]
test eax, eax
jle 0x180010390
mov eax, dword [rsp + 0x2c0]
cmp eax, 1
jle 0x18001035f
mov eax, dword [rsp + 0x2ac]
and eax, 0x1494
mov dword [rsp + 0x2ac], eax
mov eax, dword [rsp + 0x2c0]
sub eax, 2
mov dword [rsp + 0x2c0], eax
jmp 0x180010322
mov eax, dword [rsp + 0x2ac]
cmp eax, 0x805
jle 0x18001037e
mov eax, dword [rsp + 0x2ac]
and eax, 0x7e
mov dword [rsp + 0x2ac], eax
mov eax, dword [rsp + 0x2c0]
dec eax
mov dword [rsp + 0x2c0], eax
jmp 0x180010322
mov eax, 1
mov rcx, qword [rsp + 0x2d0]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x2e8
pop rdi
pop rsi
ret