Function at 0x180086d00
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x1b8
mov rax, qword [rsp + 0x1d0]
movsxd rcx, dword [rax + 0x1b0]
mov rax, qword [rsp + 0x1d0]
mov rax, qword [rax + rcx*8 + 0x1c0]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0xc4]
mov dword [rsp + 0x20], eax
mov ecx, dword [rsp + 0x28]
and ecx, 0x7c0000
shr ecx, 0x12
mov eax, 1
shl eax, cl
add eax, 2
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x58], 0
mov rax, qword [rsp + 0x48]
mov edx, dword [rax + 0xc0]
add edx, dword [rsp + 0x1e0]
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
add eax, dword [rcx + 0x14]
cmp edx, eax
jbe 0x180086dc2
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
add eax, dword [rcx + 0x14]
mov rcx, qword [rsp + 0x48]
sub eax, dword [rcx + 0xc0]
mov dword [rsp + 0x1e0], eax
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0xa0], 0
je 0x180086e59
mov rax, qword [rsp + 0x1d0]
cmp dword [rax + 0xd0], 1
je 0x180086dfe
mov rax, qword [rsp + 0x1d0]
cmp dword [rax + 0x1c], 1
je 0x180086dfe
mov eax, dword [rsp + 0x28]
and eax, 4
test eax, eax
je 0x180086e18
mov eax, dword [rsp + 0x1e0]
shl eax, 2
mov ecx, eax
mov rdi, qword [rsp + 0x1d8]
xor eax, eax
rep stosb byte [rdi], al
jmp 0x180086e30
mov eax, dword [rsp + 0x1e0]
shl eax, 3
mov ecx, eax
mov rdi, qword [rsp + 0x1d8]
xor eax, eax
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0xc0]
add ecx, dword [rsp + 0x1e0]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xc0], ecx
mov eax, dword [rsp + 0x1e0]
jmp 0x1800890fe
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x180086e7d
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
jne 0x180086e7d
mov eax, dword [rsp + 0x24]
shl eax, 1
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
jne 0x18008719e
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
je 0x18008719e
mov ecx, dword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x180086f3b
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x50], rax
jae 0x180086f39
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800977f0
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
cmp ecx, 0x80000000
jne 0x180086f37
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
mov dword [rsp + 0x38], eax
jmp 0x180086f39
jmp 0x180086edc
jmp 0x180086f59
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x48]
call fcn.180098a40
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x50], rax
jae 0x180087199
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
mov dword [rsp + 0x3c], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x180086fb0
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18008712f
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x180087031
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x180086ff7
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0x70], eax
jmp 0x180087017
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax + 0x14]
mov eax, dword [rdx + 0x10]
sub eax, ecx
sar eax, 1
mov rcx, qword [rsp + 0x30]
add eax, dword [rcx + 0x10]
mov dword [rsp + 0x70], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x14], eax
mov dword [rsp + 0x78], 0
jmp 0x180087057
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0x70], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax]
mov eax, dword [rsp + 0x58]
add eax, ecx
and eax, 7
mov dword [rsp + 0x78], eax
movsx eax, word [rsp + 0x70]
cmp dword [rsp + 0x70], eax
je 0x18008709c
mov edx, dword [rsp + 0x70]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0x70]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x148], eax
jmp 0x1800870b8
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0x70]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x148], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x148]
add eax, ecx
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x70], 0
je 0x180087110
cmp dword [rsp + 0x3c], 0
je 0x180087110
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x70]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0x7c], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x7c]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0x7c]
mov eax, dword [rax + 8]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x3c], eax
movsxd rdx, dword [rsp + 0x78]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x3c]
mov dword [rcx + rdx*4 + 0x10], eax
jmp 0x180086fa2
mov eax, dword [rsp + 0x3c]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x180087158
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
mov dword [rsp + 0x38], eax
jmp 0x180087199
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x3c]
mov dword [rcx], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*2]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
jmp 0x180086f66
jmp 0x180088dc6
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
jne 0x18008762e
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
jne 0x18008762e
mov eax, dword [rsp + 0x1e0]
shl eax, 1
mov ecx, eax
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x80], rax
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x1800872a0
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x180087218
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18008729e
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800977f0
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
cmp dword [rax], 0x80000000
je 0x180087276
xor r8d, r8d
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.1800977f0
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rax + 4], edx
mov rax, qword [rsp + 0x50]
cmp dword [rax + 4], 0x80000000
jne 0x180087299
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
xor edx, edx
mov ecx, 2
div ecx
mov dword [rsp + 0x38], eax
jmp 0x18008729e
jmp 0x18008720a
jmp 0x1800872be
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x48]
call fcn.180098a40
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x1800872ed
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x1800874b5
mov eax, dword [rsp + 0x28]
and eax, 0x7c0000
shr eax, 0x12
cmp eax, 0x10
jb 0x180087334
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.180089110
jmp 0x1800874b0
cmp dword [rsp + 0x40], 0
je 0x180087388
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x11
jne 0x180087388
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 0x11
jne 0x180087388
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.18008b0b0
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x1800874b0
cmp dword [rsp + 0x40], 0
je 0x1800873dc
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x11
jne 0x1800873dc
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 0x12
jne 0x1800873dc
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.18008ada0
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x1800874b0
cmp dword [rsp + 0x40], 0
je 0x180087430
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x12
jne 0x180087430
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 0x12
jne 0x180087430
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.18008b3b0
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x1800874b0
cmp dword [rsp + 0x40], 0
je 0x180087496
mov rax, qword [rsp + 0x30]
cmp dword [rax], 1
jl 0x180087496
mov rax, qword [rsp + 0x30]
cmp dword [rax], 7
jg 0x180087496
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 1
jl 0x180087496
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 7
jg 0x180087496
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.18008b6e0
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x1800874b0
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.18008a1a0
jmp 0x1800872df
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x18008754e
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x1800874e1
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18008754c
mov rax, qword [rsp + 0x50]
mov edx, dword [rax]
sar edx, 1
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax + 4]
sub ecx, edx
mov rax, qword [rsp + 0x50]
mov dword [rax + 4], ecx
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax + 4]
mov rax, qword [rsp + 0x50]
mov dword [rax], ecx
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
shl ecx, 1
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*8]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax + 4]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
jmp 0x1800874d3
jmp 0x1800875a5
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x18008756b
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x1800875a5
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
shl ecx, 1
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*8]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax + 4]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
jmp 0x18008755d
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x1800875c2
mov rax, qword [rsp + 0x50]
add rax, 0x40
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18008761b
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jg 0x1800875f6
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 4]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x180087619
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
xor edx, edx
mov ecx, 2
div ecx
mov dword [rsp + 0x38], eax
jmp 0x18008761b
jmp 0x1800875b4
mov eax, dword [rsp + 0x1e0]
and eax, 7
mov dword [rsp + 0x58], eax
jmp 0x180088dc6
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x180087a72
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
je 0x180087a72
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x38], 0
jmp 0x180087670
mov eax, dword [rsp + 0x38]
add eax, 1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x1e0]
cmp dword [rsp + 0x38], eax
jae 0x180087a6d
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800977f0
mov dword [rsp + 0x3c], eax
cmp dword [rsp + 0x3c], 0x80000000
jne 0x1800876a5
jmp 0x180087a6d
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x1800876d4
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x180087882
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x180087757
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x18008771e
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0x88], eax
jmp 0x18008773a
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
sar eax, 1
mov dword [rsp + 0x88], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x14], eax
mov dword [rsp + 0x90], 0
jmp 0x180087783
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax]
mov eax, dword [rsp + 0x58]
add eax, ecx
and eax, 7
mov dword [rsp + 0x90], eax
movsx eax, word [rsp + 0x88]
cmp dword [rsp + 0x88], eax
je 0x1800877d4
mov edx, dword [rsp + 0x88]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0x88]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x14c], eax
jmp 0x1800877f3
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0x88]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x14c], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x14c]
add eax, ecx
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x88], 0
je 0x18008785d
cmp dword [rsp + 0x3c], 0
je 0x18008785d
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x88]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0x94], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x94]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0x94]
mov eax, dword [rax + 8]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x3c], eax
movsxd rdx, dword [rsp + 0x90]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x3c]
mov dword [rcx + rdx*4 + 0x10], eax
jmp 0x1800876c6
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x28]
and eax, 0x40
test eax, eax
je 0x180087a1b
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x178]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x180]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x178], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x178]
sar eax, 0x10
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x48]
movsx ecx, word [rax + 0x188]
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x188], ecx
je 0x180087934
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x188]
and ecx, 0xffff
imul ecx, dword [rsp + 0x98]
sar ecx, 9
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
and eax, 0xffff0000
sar eax, 9
imul eax, dword [rsp + 0x98]
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [rsp + 0x150], eax
jmp 0x180087956
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x98]
imul eax, dword [rcx + 0x188]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x150], eax
mov eax, dword [rsp + 0x150]
neg eax
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20000000
test eax, eax
je 0x1800879f1
cmp dword [rsp + 0x98], 0
jge 0x1800879f1
cmp dword [rsp + 0x9c], 0
je 0x1800879f1
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
cmp dword [rsp + 0x9c], eax
jne 0x1800879d7
cmp dword [rsp + 0x9c], 0
jge 0x1800879b8
mov eax, dword [rsp + 0x9c]
add eax, 1
mov dword [rsp + 0x154], eax
jmp 0x1800879c9
mov eax, dword [rsp + 0x9c]
sub eax, 1
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x154]
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x9c]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
jmp 0x180087a02
mov ecx, dword [rsp + 0x60]
neg ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
mov eax, dword [rsp + 0x9c]
mov ecx, dword [rsp + 0x60]
sub ecx, eax
mov eax, dword [rsp + 0x3c]
add eax, ecx
mov dword [rsp + 0x3c], eax
jmp 0x180087a29
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0x3c]
add eax, ecx
mov dword [rsp + 0x3c], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*2]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x3c]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x180087a4f
jmp 0x180087a6d
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x3c]
mov dword [rcx], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
jmp 0x180087665
jmp 0x180088dc6
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
je 0x180088dbe
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
jne 0x180088dbe
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x38], 0
jmp 0x180087ab8
mov eax, dword [rsp + 0x38]
add eax, 1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x1e0]
cmp dword [rsp + 0x38], eax
jae 0x180088dbc
mov dword [rsp + 0xa0], 0
mov dword [rsp + 0xa8], 0
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800977f0
mov dword [rsp + 0xb0], eax
cmp dword [rsp + 0xb0], 0x80000000
je 0x180087b2c
lea r8, [rsp + 0x64]
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.1800977f0
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0x80000000
jne 0x180087b31
jmp 0x180088dbc
mov eax, dword [rsp + 0x28]
and eax, 0x20
test eax, eax
je 0x180088097
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov ecx, dword [rsp + 0x64]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x180087b97
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18008805c
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0
jle 0x180087d7f
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x180087c42
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x180087c08
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0xbc], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
mov dword [rsp + 0xb8], eax
jmp 0x180087c40
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
sar eax, 1
mov dword [rsp + 0xbc], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
sar eax, 1
mov dword [rsp + 0xb8], eax
jmp 0x180087c6c
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0xbc], eax
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x30]
mov dword [rsp + 0xb8], eax
movsx eax, word [rsp + 0xbc]
cmp dword [rsp + 0xbc], eax
je 0x180087cbd
mov edx, dword [rsp + 0xbc]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xbc]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x158], eax
jmp 0x180087cdc
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xbc]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x158], eax
mov ecx, dword [rsp + 0x158]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
movsx eax, word [rsp + 0xb8]
cmp dword [rsp + 0xb8], eax
je 0x180087d44
mov edx, dword [rsp + 0xb8]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xb8]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x15c], eax
jmp 0x180087d63
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xb8]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x15c], eax
mov ecx, dword [rsp + 0x15c]
mov eax, dword [rsp + 0xa8]
add eax, ecx
mov dword [rsp + 0xa8], eax
jmp 0x180088057
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xffffffff
jne 0x180087ea5
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x10]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], ecx
je 0x180087de2
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x10]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x160], eax
jmp 0x180087e02
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rcx + 0x10]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x160], eax
mov ecx, dword [rsp + 0x160]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
movsx eax, word [rsp + 0xa0]
cmp dword [rsp + 0xa0], eax
je 0x180087e6a
mov edx, dword [rsp + 0xa0]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xa0]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x164], eax
jmp 0x180087e89
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xa0]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x164], eax
mov ecx, dword [rsp + 0x164]
mov eax, dword [rsp + 0xa8]
add eax, ecx
mov dword [rsp + 0xa8], eax
jmp 0x180088057
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x30]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x30], ecx
je 0x180087efa
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x30]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x168], eax
jmp 0x180087f1a
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rcx + 0x30]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x168], eax
mov ecx, dword [rsp + 0x168]
mov eax, dword [rsp + 0xa8]
add eax, ecx
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xfffffffd
jne 0x180087fd0
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x10]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], ecx
je 0x180087f94
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x10]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x16c], eax
jmp 0x180087fb4
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rcx + 0x10]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x16c], eax
mov ecx, dword [rsp + 0x16c]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
jmp 0x180088057
movsx eax, word [rsp + 0xa8]
cmp dword [rsp + 0xa8], eax
je 0x180088021
mov edx, dword [rsp + 0xa8]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xa8]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x170], eax
jmp 0x180088040
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xa8]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x170], eax
mov ecx, dword [rsp + 0x170]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
jmp 0x180087b89
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x180088097
mov ecx, dword [rsp + 0xa0]
sar ecx, 1
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0xa8], eax
mov ecx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x1800880c6
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x180088930
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0
jle 0x1800883f8
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x1800881a0
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x18008813b
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
mov dword [rsp + 0xc0], eax
jmp 0x180088173
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
sar eax, 1
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
sar eax, 1
mov dword [rsp + 0xc0], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x14], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
mov dword [rcx + 0x34], eax
mov dword [rsp + 0xc8], 0
jmp 0x1800881e1
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0xc4], eax
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x30]
mov dword [rsp + 0xc0], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax]
mov eax, dword [rsp + 0x58]
add eax, ecx
and eax, 7
mov dword [rsp + 0xc8], eax
movsx eax, word [rsp + 0xc4]
cmp dword [rsp + 0xc4], eax
je 0x180088232
mov edx, dword [rsp + 0xc4]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xc4]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x174], eax
jmp 0x180088251
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xc4]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x174], eax
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0x174]
add eax, ecx
mov dword [rsp + 0xac], eax
movsx eax, word [rsp + 0xc0]
cmp dword [rsp + 0xc0], eax
je 0x1800882b9
mov edx, dword [rsp + 0xc0]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xc0]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x178], eax
jmp 0x1800882d8
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xc0]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x178], eax
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0x178]
add eax, ecx
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xc4], 0
je 0x18008834b
cmp dword [rsp + 0xb0], 0
je 0x18008834b
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xc4]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xcc], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xcc]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xcc]
mov eax, dword [rax + 8]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
cmp dword [rsp + 0xc0], 0
je 0x1800883a7
cmp dword [rsp + 0xb4], 0
je 0x1800883a7
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xc0]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xd0], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd0]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xd0]
mov eax, dword [rax + 0xc]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xb0], eax
movsxd rdx, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb0]
mov dword [rcx + rdx*4 + 0x10], eax
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0xb4], eax
movsxd rdx, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb4]
mov dword [rcx + rdx*4 + 0x30], eax
jmp 0x18008892b
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xffffffff
jne 0x180088687
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x10]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], ecx
je 0x18008845b
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x10]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x17c], eax
jmp 0x18008847b
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rcx + 0x10]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x17c], eax
mov ecx, dword [rsp + 0x17c]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xac], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], 0
je 0x180088532
cmp dword [rsp + 0xb0], 0
je 0x180088532
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rax + 0x10]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xd4], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd4]
mov edx, dword [rcx + 8]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xd4]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 8], 0x400
jle 0x180088512
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rcx + 8]
xor ecx, eax
sub ecx, dword [rsp + 0xd4]
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xb0], eax
movsx eax, word [rsp + 0xac]
cmp dword [rsp + 0xac], eax
je 0x180088591
mov edx, dword [rsp + 0xac]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xac]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x180], eax
jmp 0x1800885b0
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xac]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x180], eax
mov ecx, dword [rsp + 0x180]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xac], 0
je 0x180088665
cmp dword [rsp + 0xb4], 0
je 0x180088665
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xac]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xd8], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd8]
mov edx, dword [rcx + 0xc]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xd8]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0xc], 0x400
jle 0x180088645
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd8]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
sub ecx, dword [rsp + 0xd8]
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0xb4], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb4]
mov dword [rcx + 0x10], eax
jmp 0x18008892b
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x30]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x30], ecx
je 0x1800886dc
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x30]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x184], eax
jmp 0x1800886fc
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rcx + 0x30]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x184], eax
mov ecx, dword [rsp + 0x184]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x30], 0
je 0x1800887b3
cmp dword [rsp + 0xb4], 0
je 0x1800887b3
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rax + 0x30]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xdc], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xdc]
mov edx, dword [rcx + 0xc]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xdc]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0xc], 0x400
jle 0x180088793
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xdc]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
sub ecx, dword [rsp + 0xdc]
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0xb4], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xfffffffd
jne 0x1800887e9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0xa4], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb4]
mov dword [rcx + 0x10], eax
movsx eax, word [rsp + 0xa4]
cmp dword [rsp + 0xa4], eax
je 0x18008883a
mov edx, dword [rsp + 0xa4]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xa4]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x188], eax
jmp 0x180088859
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xa4]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x188], eax
mov ecx, dword [rsp + 0x188]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xac], eax
cmp dword [rsp + 0xa4], 0
je 0x18008890e
cmp dword [rsp + 0xb0], 0
je 0x18008890e
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xa4]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xe0], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xe0]
mov edx, dword [rcx + 8]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xe0]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 8], 0x400
jle 0x1800888ee
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xe0]
mov ecx, dword [rcx + 8]
xor ecx, eax
sub ecx, dword [rsp + 0xe0]
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xb0], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb0]
mov dword [rcx + 0x30], eax
jmp 0x1800880b8
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20
test eax, eax
jne 0x1800889ac
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov ecx, dword [rsp + 0x64]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa8], eax
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x1800889ac
mov ecx, dword [rsp + 0xa0]
sar ecx, 1
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0xa8], eax
mov ecx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x1800889e7
mov ecx, dword [rsp + 0xb0]
sar ecx, 1
mov eax, dword [rsp + 0xb4]
sub eax, ecx
mov dword [rsp + 0xb4], eax
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0x28]
and eax, 0x40
test eax, eax
je 0x180088d14
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xa0]
sub eax, ecx
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x178]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x180]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x178], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x178]
sar eax, 0x10
mov dword [rsp + 0xe4], eax
mov rax, qword [rsp + 0x48]
movsx ecx, word [rax + 0x188]
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x188], ecx
je 0x180088a9f
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x188]
and ecx, 0xffff
imul ecx, dword [rsp + 0xe4]
sar ecx, 9
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
and eax, 0xffff0000
sar eax, 9
imul eax, dword [rsp + 0xe4]
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [rsp + 0x18c], eax
jmp 0x180088ac1
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0xe4]
imul eax, dword [rcx + 0x188]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x18c], eax
mov eax, dword [rsp + 0x18c]
neg eax
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20000000
test eax, eax
je 0x180088b5c
cmp dword [rsp + 0xe4], 0
jge 0x180088b5c
cmp dword [rsp + 0xe8], 0
je 0x180088b5c
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
cmp dword [rsp + 0xe8], eax
jne 0x180088b42
cmp dword [rsp + 0xe8], 0
jge 0x180088b23
mov eax, dword [rsp + 0xe8]
add eax, 1
mov dword [rsp + 0x190], eax
jmp 0x180088b34
mov eax, dword [rsp + 0xe8]
sub eax, 1
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0xe8]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
jmp 0x180088b6d
mov ecx, dword [rsp + 0x60]
neg ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
mov ecx, dword [rsp + 0xe8]
mov eax, dword [rsp + 0xa0]
sub eax, ecx
mov dword [rsp + 0xb0], eax
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0x64], eax
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x17c]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x184]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x17c], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x17c]
sar eax, 0x10
mov dword [rsp + 0xe4], eax
mov rax, qword [rsp + 0x48]
movsx ecx, word [rax + 0x18c]
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x18c], ecx
je 0x180088c2d
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x18c]
and ecx, 0xffff
imul ecx, dword [rsp + 0xe4]
sar ecx, 9
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x18c]
and eax, 0xffff0000
sar eax, 9
imul eax, dword [rsp + 0xe4]
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [rsp + 0x194], eax
jmp 0x180088c4f
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0xe4]
imul eax, dword [rcx + 0x18c]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x194]
neg eax
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20000000
test eax, eax
je 0x180088cea
cmp dword [rsp + 0xe4], 0
jge 0x180088cea
cmp dword [rsp + 0xe8], 0
je 0x180088cea
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x18c]
cmp dword [rsp + 0xe8], eax
jne 0x180088cd0
cmp dword [rsp + 0xe8], 0
jge 0x180088cb1
mov eax, dword [rsp + 0xe8]
add eax, 1
mov dword [rsp + 0x198], eax
jmp 0x180088cc2
mov eax, dword [rsp + 0xe8]
sub eax, 1
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x64]
mov ecx, dword [rsp + 0xe8]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x18c], ecx
jmp 0x180088cfb
mov ecx, dword [rsp + 0x64]
neg ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x18c], ecx
mov ecx, dword [rsp + 0xe8]
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0xb4], eax
jmp 0x180088d30
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0xb4], eax
mov eax, dword [rsp + 0xb0]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jg 0x180088d54
mov eax, dword [rsp + 0xb4]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x180088d56
jmp 0x180088dbc
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xb0]
lea ecx, [rcx + rax*2]
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*8]
add ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0xb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0xb4]
mov dword [rcx], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
jmp 0x180087aad
jmp 0x180088dc6
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x1e0]
cmp dword [rsp + 0x38], eax
je 0x180088e4d
mov eax, dword [rsp + 0x28]
and eax, 4
test eax, eax
je 0x180088deb
mov dword [rsp + 0x19c], 4
jmp 0x180088df6
mov dword [rsp + 0x19c], 8
mov eax, dword [rsp + 0x1e0]
imul eax, dword [rsp + 0x19c]
mov ecx, eax
mov rdi, qword [rsp + 0x1d8]
xor eax, eax
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xa0], 1
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x140], 0
je 0x180088e4d
mov rcx, qword [rsp + 0x48]
add rcx, 0x130
call fcn.180096b40
cmp dword [rsp + 0x58], 0
je 0x180088f61
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x180088e87
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x180088f61
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0
jle 0x180088f5c
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jg 0x180088f5c
lea rdi, [rsp + 0x110]
mov rsi, qword [rsp + 0x30]
add rsi, 0x10
mov ecx, 0x20
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0xf0]
mov rsi, qword [rsp + 0x30]
add rsi, 0x30
mov ecx, 0x20
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xec], 0
jmp 0x180088f08
mov eax, dword [rsp + 0xec]
add eax, 1
mov dword [rsp + 0xec], eax
cmp dword [rsp + 0xec], 8
jge 0x180088f5c
movsxd rax, dword [rsp + 0x58]
movsxd rdx, dword [rsp + 0xec]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + rax*4 + 0x110]
mov dword [rcx + rdx*4 + 0x10], eax
movsxd rax, dword [rsp + 0x58]
movsxd rdx, dword [rsp + 0xec]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + rax*4 + 0xf0]
mov dword [rcx + rdx*4 + 0x30], eax
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
jmp 0x180088ef7
jmp 0x180088e79
mov r8d, dword [rsp + 0x38]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
call fcn.18008ba40
mov eax, dword [rsp + 0x28]
and eax, 0x80
test eax, eax
je 0x180088ffc
mov rax, qword [rsp + 0x1d0]
mov eax, dword [rax + 0xc8]
and eax, 0x10
test eax, eax
je 0x180088ffc
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
je 0x180088fb7
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x1a0], eax
jmp 0x180088fc4
mov eax, dword [rsp + 0x38]
shl eax, 1
mov dword [rsp + 0x1a0], eax
mov rax, qword [rsp + 0x48]
movzx eax, byte [rax + 0x173]
mov r8d, 0x7f
sub r8d, eax
mov rax, qword [rsp + 0x1d0]
add r8d, dword [rax + 0xcc]
mov edx, dword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1d8]
call fcn.18009acc0
mov eax, dword [rsp + 0x28]
and eax, 0x40000000
test eax, eax
je 0x1800890d1
mov eax, dword [rsp + 0x38]
shl eax, 1
mov ecx, eax
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x140], rax
mov ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x130], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x138], eax
mov ecx, dword [rsp + 0x138]
mov eax, dword [rsp + 0x138]
sub eax, 1
mov dword [rsp + 0x138], eax
test ecx, ecx
je 0x1800890d1
mov rax, qword [rsp + 0x130]
sub rax, 4
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x140]
sub rax, 4
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140]
sub rax, 4
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rcx], eax
jmp 0x18008904c
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0xc0]
add ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xc0], ecx
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x20]
mov dword [rcx + 0xc4], eax
mov eax, dword [rsp + 0x38]
add rsp, 0x1b8
pop rdi
pop rsi
ret