Function at 0x18009d6e0
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x1b8
mov rax, qword [rsp + 0x1d0]
movsxd rcx, dword [rax + 0x1b0]
mov rax, qword [rsp + 0x1d0]
mov rax, qword [rax + rcx*8 + 0x1c0]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0xc4]
mov dword [rsp + 0x20], eax
mov ecx, dword [rsp + 0x28]
and ecx, 0x7c0000
shr ecx, 0x12
mov eax, 1
shl eax, cl
add eax, 2
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x58], 0
mov rax, qword [rsp + 0x48]
mov edx, dword [rax + 0xc0]
add edx, dword [rsp + 0x1e0]
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
add eax, dword [rcx + 0x14]
cmp edx, eax
jbe 0x18009d7a2
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x48]
add eax, dword [rcx + 0x14]
mov rcx, qword [rsp + 0x48]
sub eax, dword [rcx + 0xc0]
mov dword [rsp + 0x1e0], eax
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0xa0], 0
je 0x18009d839
mov rax, qword [rsp + 0x1d0]
cmp dword [rax + 0xd0], 1
je 0x18009d7de
mov rax, qword [rsp + 0x1d0]
cmp dword [rax + 0x1c], 1
je 0x18009d7de
mov eax, dword [rsp + 0x28]
and eax, 4
test eax, eax
je 0x18009d7f8
mov eax, dword [rsp + 0x1e0]
shl eax, 2
mov ecx, eax
mov rdi, qword [rsp + 0x1d8]
xor eax, eax
rep stosb byte [rdi], al
jmp 0x18009d810
mov eax, dword [rsp + 0x1e0]
shl eax, 3
mov ecx, eax
mov rdi, qword [rsp + 0x1d8]
xor eax, eax
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0xc0]
add ecx, dword [rsp + 0x1e0]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xc0], ecx
mov eax, dword [rsp + 0x1e0]
jmp 0x18009fade
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x18009d85d
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
jne 0x18009d85d
mov eax, dword [rsp + 0x24]
shl eax, 1
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
jne 0x18009db7e
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
je 0x18009db7e
mov ecx, dword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x18009d91b
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x50], rax
jae 0x18009d919
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800ae1d0
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
cmp ecx, 0x80000000
jne 0x18009d917
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
mov dword [rsp + 0x38], eax
jmp 0x18009d919
jmp 0x18009d8bc
jmp 0x18009d939
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x48]
call fcn.1800af420
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x68]
cmp qword [rsp + 0x50], rax
jae 0x18009db79
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
mov dword [rsp + 0x3c], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x18009d990
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18009db0f
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x18009da11
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x18009d9d7
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0x70], eax
jmp 0x18009d9f7
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax + 0x14]
mov eax, dword [rdx + 0x10]
sub eax, ecx
sar eax, 1
mov rcx, qword [rsp + 0x30]
add eax, dword [rcx + 0x10]
mov dword [rsp + 0x70], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x14], eax
mov dword [rsp + 0x78], 0
jmp 0x18009da37
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0x70], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax]
mov eax, dword [rsp + 0x58]
add eax, ecx
and eax, 7
mov dword [rsp + 0x78], eax
movsx eax, word [rsp + 0x70]
cmp dword [rsp + 0x70], eax
je 0x18009da7c
mov edx, dword [rsp + 0x70]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0x70]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x148], eax
jmp 0x18009da98
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0x70]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x148], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x148]
add eax, ecx
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x70], 0
je 0x18009daf0
cmp dword [rsp + 0x3c], 0
je 0x18009daf0
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x70]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0x7c], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x7c]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0x7c]
mov eax, dword [rax + 8]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x3c], eax
movsxd rdx, dword [rsp + 0x78]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x3c]
mov dword [rcx + rdx*4 + 0x10], eax
jmp 0x18009d982
mov eax, dword [rsp + 0x3c]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x18009db38
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
mov dword [rsp + 0x38], eax
jmp 0x18009db79
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x3c]
mov dword [rcx], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*2]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
jmp 0x18009d946
jmp 0x18009f7a6
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
jne 0x18009e00e
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
jne 0x18009e00e
mov eax, dword [rsp + 0x1e0]
shl eax, 1
mov ecx, eax
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x80], rax
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x18009dc80
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x18009dbf8
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18009dc7e
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800ae1d0
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
cmp dword [rax], 0x80000000
je 0x18009dc56
xor r8d, r8d
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.1800ae1d0
mov edx, eax
mov rax, qword [rsp + 0x50]
mov dword [rax + 4], edx
mov rax, qword [rsp + 0x50]
cmp dword [rax + 4], 0x80000000
jne 0x18009dc79
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
xor edx, edx
mov ecx, 2
div ecx
mov dword [rsp + 0x38], eax
jmp 0x18009dc7e
jmp 0x18009dbea
jmp 0x18009dc9e
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x48]
call fcn.1800af420
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x18009dccd
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18009de95
mov eax, dword [rsp + 0x28]
and eax, 0x7c0000
shr eax, 0x12
cmp eax, 0x10
jb 0x18009dd14
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.18009faf0
jmp 0x18009de90
cmp dword [rsp + 0x40], 0
je 0x18009dd68
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x11
jne 0x18009dd68
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 0x11
jne 0x18009dd68
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.1800a1a90
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x18009de90
cmp dword [rsp + 0x40], 0
je 0x18009ddbc
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x11
jne 0x18009ddbc
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 0x12
jne 0x18009ddbc
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.1800a1780
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x18009de90
cmp dword [rsp + 0x40], 0
je 0x18009de10
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0x12
jne 0x18009de10
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 0x12
jne 0x18009de10
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.1800a1d90
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x18009de90
cmp dword [rsp + 0x40], 0
je 0x18009de76
mov rax, qword [rsp + 0x30]
cmp dword [rax], 1
jl 0x18009de76
mov rax, qword [rsp + 0x30]
cmp dword [rax], 7
jg 0x18009de76
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 1
jl 0x18009de76
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x60], 7
jg 0x18009de76
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.1800a20c0
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
jmp 0x18009de90
mov r8d, dword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x30]
call fcn.1800a0b80
jmp 0x18009dcbf
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x18009df2e
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x18009dec1
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18009df2c
mov rax, qword [rsp + 0x50]
mov edx, dword [rax]
sar edx, 1
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax + 4]
sub ecx, edx
mov rax, qword [rsp + 0x50]
mov dword [rax + 4], ecx
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax + 4]
mov rax, qword [rsp + 0x50]
mov dword [rax], ecx
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
shl ecx, 1
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*8]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax + 4]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
jmp 0x18009deb3
jmp 0x18009df85
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x18009df4b
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18009df85
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax]
shl ecx, 1
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*8]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax]
mov rax, qword [rsp + 0x50]
add ecx, dword [rax + 4]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
jmp 0x18009df3d
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
jmp 0x18009dfa2
mov rax, qword [rsp + 0x50]
add rax, 0x40
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x50], rax
jae 0x18009dffb
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jg 0x18009dfd6
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 4]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x18009dff9
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x50]
sub rax, rcx
sar rax, 2
xor edx, edx
mov ecx, 2
div ecx
mov dword [rsp + 0x38], eax
jmp 0x18009dffb
jmp 0x18009df94
mov eax, dword [rsp + 0x1e0]
and eax, 7
mov dword [rsp + 0x58], eax
jmp 0x18009f7a6
mov eax, dword [rsp + 0x28]
and eax, 8
test eax, eax
je 0x18009e452
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
je 0x18009e452
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x38], 0
jmp 0x18009e050
mov eax, dword [rsp + 0x38]
add eax, 1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x1e0]
cmp dword [rsp + 0x38], eax
jae 0x18009e44d
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800ae1d0
mov dword [rsp + 0x3c], eax
cmp dword [rsp + 0x3c], 0x80000000
jne 0x18009e085
jmp 0x18009e44d
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x18009e0b4
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18009e262
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x18009e137
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x18009e0fe
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0x88], eax
jmp 0x18009e11a
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
sar eax, 1
mov dword [rsp + 0x88], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x14], eax
mov dword [rsp + 0x90], 0
jmp 0x18009e163
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax]
mov eax, dword [rsp + 0x58]
add eax, ecx
and eax, 7
mov dword [rsp + 0x90], eax
movsx eax, word [rsp + 0x88]
cmp dword [rsp + 0x88], eax
je 0x18009e1b4
mov edx, dword [rsp + 0x88]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0x88]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x14c], eax
jmp 0x18009e1d3
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0x88]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x14c], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x14c]
add eax, ecx
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x88], 0
je 0x18009e23d
cmp dword [rsp + 0x3c], 0
je 0x18009e23d
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x88]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0x94], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x94]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0x94]
mov eax, dword [rax + 8]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x3c], eax
movsxd rdx, dword [rsp + 0x90]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x3c]
mov dword [rcx + rdx*4 + 0x10], eax
jmp 0x18009e0a6
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x28]
and eax, 0x40
test eax, eax
je 0x18009e3fb
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x178]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x180]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x178], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x178]
sar eax, 0x10
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x48]
movsx ecx, word [rax + 0x188]
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x188], ecx
je 0x18009e314
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x188]
and ecx, 0xffff
imul ecx, dword [rsp + 0x98]
sar ecx, 9
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
and eax, 0xffff0000
sar eax, 9
imul eax, dword [rsp + 0x98]
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [rsp + 0x150], eax
jmp 0x18009e336
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x98]
imul eax, dword [rcx + 0x188]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x150], eax
mov eax, dword [rsp + 0x150]
neg eax
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20000000
test eax, eax
je 0x18009e3d1
cmp dword [rsp + 0x98], 0
jge 0x18009e3d1
cmp dword [rsp + 0x9c], 0
je 0x18009e3d1
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
cmp dword [rsp + 0x9c], eax
jne 0x18009e3b7
cmp dword [rsp + 0x9c], 0
jge 0x18009e398
mov eax, dword [rsp + 0x9c]
add eax, 1
mov dword [rsp + 0x154], eax
jmp 0x18009e3a9
mov eax, dword [rsp + 0x9c]
sub eax, 1
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x154]
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x9c]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
jmp 0x18009e3e2
mov ecx, dword [rsp + 0x60]
neg ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
mov eax, dword [rsp + 0x9c]
mov ecx, dword [rsp + 0x60]
sub ecx, eax
mov eax, dword [rsp + 0x3c]
add eax, ecx
mov dword [rsp + 0x3c], eax
jmp 0x18009e409
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0x3c]
add eax, ecx
mov dword [rsp + 0x3c], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*2]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x3c]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x18009e42f
jmp 0x18009e44d
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x3c]
mov dword [rcx], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
jmp 0x18009e045
jmp 0x18009f7a6
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x80], 0
je 0x18009f79e
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
jne 0x18009f79e
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x38], 0
jmp 0x18009e498
mov eax, dword [rsp + 0x38]
add eax, 1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x1e0]
cmp dword [rsp + 0x38], eax
jae 0x18009f79c
mov dword [rsp + 0xa0], 0
mov dword [rsp + 0xa8], 0
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.1800ae1d0
mov dword [rsp + 0xb0], eax
cmp dword [rsp + 0xb0], 0x80000000
je 0x18009e50c
lea r8, [rsp + 0x64]
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.1800ae1d0
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0x80000000
jne 0x18009e511
jmp 0x18009f79c
mov eax, dword [rsp + 0x28]
and eax, 0x20
test eax, eax
je 0x18009ea77
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov ecx, dword [rsp + 0x64]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x18009e577
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18009ea3c
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0
jle 0x18009e75f
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x18009e622
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x18009e5e8
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0xbc], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
mov dword [rsp + 0xb8], eax
jmp 0x18009e620
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
sar eax, 1
mov dword [rsp + 0xbc], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
sar eax, 1
mov dword [rsp + 0xb8], eax
jmp 0x18009e64c
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0xbc], eax
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x30]
mov dword [rsp + 0xb8], eax
movsx eax, word [rsp + 0xbc]
cmp dword [rsp + 0xbc], eax
je 0x18009e69d
mov edx, dword [rsp + 0xbc]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xbc]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x158], eax
jmp 0x18009e6bc
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xbc]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x158], eax
mov ecx, dword [rsp + 0x158]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
movsx eax, word [rsp + 0xb8]
cmp dword [rsp + 0xb8], eax
je 0x18009e724
mov edx, dword [rsp + 0xb8]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xb8]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x15c], eax
jmp 0x18009e743
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xb8]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x15c], eax
mov ecx, dword [rsp + 0x15c]
mov eax, dword [rsp + 0xa8]
add eax, ecx
mov dword [rsp + 0xa8], eax
jmp 0x18009ea37
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xffffffff
jne 0x18009e885
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x10]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], ecx
je 0x18009e7c2
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x10]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x160], eax
jmp 0x18009e7e2
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rcx + 0x10]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x160], eax
mov ecx, dword [rsp + 0x160]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
movsx eax, word [rsp + 0xa0]
cmp dword [rsp + 0xa0], eax
je 0x18009e84a
mov edx, dword [rsp + 0xa0]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xa0]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x164], eax
jmp 0x18009e869
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xa0]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x164], eax
mov ecx, dword [rsp + 0x164]
mov eax, dword [rsp + 0xa8]
add eax, ecx
mov dword [rsp + 0xa8], eax
jmp 0x18009ea37
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x30]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x30], ecx
je 0x18009e8da
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x30]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x168], eax
jmp 0x18009e8fa
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rcx + 0x30]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x168], eax
mov ecx, dword [rsp + 0x168]
mov eax, dword [rsp + 0xa8]
add eax, ecx
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xfffffffd
jne 0x18009e9b0
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x10]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], ecx
je 0x18009e974
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x10]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x16c], eax
jmp 0x18009e994
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rcx + 0x10]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x16c], eax
mov ecx, dword [rsp + 0x16c]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
jmp 0x18009ea37
movsx eax, word [rsp + 0xa8]
cmp dword [rsp + 0xa8], eax
je 0x18009ea01
mov edx, dword [rsp + 0xa8]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xa8]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x170], eax
jmp 0x18009ea20
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xa8]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x170], eax
mov ecx, dword [rsp + 0x170]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
jmp 0x18009e569
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x18009ea77
mov ecx, dword [rsp + 0xa0]
sar ecx, 1
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0xa8], eax
mov ecx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x18009eaa6
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18009f310
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0
jle 0x18009edd8
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jle 0x18009eb80
mov rax, qword [rsp + 0x30]
mov eax, dword [rax]
and eax, 1
test eax, eax
je 0x18009eb1b
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
shl eax, 1
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
mov dword [rsp + 0xc0], eax
jmp 0x18009eb53
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x14]
sar eax, 1
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
imul eax, eax, 3
mov rcx, qword [rsp + 0x30]
sub eax, dword [rcx + 0x34]
sar eax, 1
mov dword [rsp + 0xc0], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x14], eax
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
mov dword [rcx + 0x34], eax
mov dword [rsp + 0xc8], 0
jmp 0x18009ebc1
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x10]
mov dword [rsp + 0xc4], eax
movsxd rcx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + rcx*4 + 0x30]
mov dword [rsp + 0xc0], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rax]
mov eax, dword [rsp + 0x58]
add eax, ecx
and eax, 7
mov dword [rsp + 0xc8], eax
movsx eax, word [rsp + 0xc4]
cmp dword [rsp + 0xc4], eax
je 0x18009ec12
mov edx, dword [rsp + 0xc4]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xc4]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x174], eax
jmp 0x18009ec31
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xc4]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x174], eax
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0x174]
add eax, ecx
mov dword [rsp + 0xac], eax
movsx eax, word [rsp + 0xc0]
cmp dword [rsp + 0xc0], eax
je 0x18009ec99
mov edx, dword [rsp + 0xc0]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xc0]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x178], eax
jmp 0x18009ecb8
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xc0]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x178], eax
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0x178]
add eax, ecx
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xc4], 0
je 0x18009ed2b
cmp dword [rsp + 0xb0], 0
je 0x18009ed2b
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xc4]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xcc], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xcc]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xcc]
mov eax, dword [rax + 8]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
cmp dword [rsp + 0xc0], 0
je 0x18009ed87
cmp dword [rsp + 0xb4], 0
je 0x18009ed87
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xc0]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xd0], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd0]
mov edx, dword [rcx + 4]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xd0]
mov eax, dword [rax + 0xc]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xb0], eax
movsxd rdx, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb0]
mov dword [rcx + rdx*4 + 0x10], eax
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0xb4], eax
movsxd rdx, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb4]
mov dword [rcx + rdx*4 + 0x30], eax
jmp 0x18009f30b
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xffffffff
jne 0x18009f067
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x10]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], ecx
je 0x18009ee3b
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x10]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x17c], eax
jmp 0x18009ee5b
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rcx + 0x10]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x17c], eax
mov ecx, dword [rsp + 0x17c]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xac], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x10], 0
je 0x18009ef12
cmp dword [rsp + 0xb0], 0
je 0x18009ef12
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rax + 0x10]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xd4], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd4]
mov edx, dword [rcx + 8]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xd4]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 8], 0x400
jle 0x18009eef2
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd4]
mov ecx, dword [rcx + 8]
xor ecx, eax
sub ecx, dword [rsp + 0xd4]
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xb0], eax
movsx eax, word [rsp + 0xac]
cmp dword [rsp + 0xac], eax
je 0x18009ef71
mov edx, dword [rsp + 0xac]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov eax, dword [rsp + 0xac]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x180], eax
jmp 0x18009ef90
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rsp + 0xac]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x180], eax
mov ecx, dword [rsp + 0x180]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xac], 0
je 0x18009f045
cmp dword [rsp + 0xb4], 0
je 0x18009f045
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xac]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xd8], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd8]
mov edx, dword [rcx + 0xc]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xd8]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0xc], 0x400
jle 0x18009f025
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xd8]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
sub ecx, dword [rsp + 0xd8]
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0xb4], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb4]
mov dword [rcx + 0x10], eax
jmp 0x18009f30b
mov rax, qword [rsp + 0x30]
movsx ecx, word [rax + 0x30]
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x30], ecx
je 0x18009f0bc
mov rax, qword [rsp + 0x30]
mov edx, dword [rax + 0x30]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 0xc]
sar edx, 9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x30]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 0xc]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x184], eax
jmp 0x18009f0dc
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 0xc]
imul eax, dword [rcx + 0x30]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x184], eax
mov ecx, dword [rsp + 0x184]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x30], 0
je 0x18009f193
cmp dword [rsp + 0xb4], 0
je 0x18009f193
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rax + 0x30]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xdc], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xdc]
mov edx, dword [rcx + 0xc]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xdc]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0xc], 0x400
jle 0x18009f173
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xdc]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
sub ecx, dword [rsp + 0xdc]
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xc], ecx
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0xb4], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xfffffffd
jne 0x18009f1c9
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0xa4], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb4]
mov dword [rcx + 0x10], eax
movsx eax, word [rsp + 0xa4]
cmp dword [rsp + 0xa4], eax
je 0x18009f21a
mov edx, dword [rsp + 0xa4]
and edx, 0xffff
mov rax, qword [rsp + 0x30]
imul edx, dword [rax + 8]
sar edx, 9
mov eax, dword [rsp + 0xa4]
and eax, 0xffff0000
sar eax, 9
mov rcx, qword [rsp + 0x30]
imul eax, dword [rcx + 8]
lea eax, [rdx + rax + 1]
sar eax, 1
mov dword [rsp + 0x188], eax
jmp 0x18009f239
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
imul eax, dword [rsp + 0xa4]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x188], eax
mov ecx, dword [rsp + 0x188]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xac], eax
cmp dword [rsp + 0xa4], 0
je 0x18009f2ee
cmp dword [rsp + 0xb0], 0
je 0x18009f2ee
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xa4]
xor eax, ecx
sar eax, 0x1f
mov dword [rsp + 0xe0], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xe0]
mov edx, dword [rcx + 8]
xor edx, eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0xe0]
mov eax, dword [rax + 4]
sub eax, ecx
mov ecx, edx
add ecx, eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 8], 0x400
jle 0x18009f2ce
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], 0x400
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xe0]
mov ecx, dword [rcx + 8]
xor ecx, eax
sub ecx, dword [rsp + 0xe0]
mov rax, qword [rsp + 0x30]
mov dword [rax + 8], ecx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0xb0], eax
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0xb0]
mov dword [rcx + 0x30], eax
jmp 0x18009ea98
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20
test eax, eax
jne 0x18009f38c
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov ecx, dword [rsp + 0x64]
mov eax, dword [rsp + 0xb4]
add eax, ecx
mov dword [rsp + 0xa8], eax
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x18009f38c
mov ecx, dword [rsp + 0xa0]
sar ecx, 1
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0xa8], eax
mov ecx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0xa0]
add eax, ecx
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0x28]
and eax, 0x10
test eax, eax
je 0x18009f3c7
mov ecx, dword [rsp + 0xb0]
sar ecx, 1
mov eax, dword [rsp + 0xb4]
sub eax, ecx
mov dword [rsp + 0xb4], eax
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xb0]
add eax, ecx
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0x28]
and eax, 0x40
test eax, eax
je 0x18009f6f4
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xa0]
sub eax, ecx
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x178]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x180]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x178], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x178]
sar eax, 0x10
mov dword [rsp + 0xe4], eax
mov rax, qword [rsp + 0x48]
movsx ecx, word [rax + 0x188]
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x188], ecx
je 0x18009f47f
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x188]
and ecx, 0xffff
imul ecx, dword [rsp + 0xe4]
sar ecx, 9
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
and eax, 0xffff0000
sar eax, 9
imul eax, dword [rsp + 0xe4]
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [rsp + 0x18c], eax
jmp 0x18009f4a1
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0xe4]
imul eax, dword [rcx + 0x188]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x18c], eax
mov eax, dword [rsp + 0x18c]
neg eax
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20000000
test eax, eax
je 0x18009f53c
cmp dword [rsp + 0xe4], 0
jge 0x18009f53c
cmp dword [rsp + 0xe8], 0
je 0x18009f53c
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x188]
cmp dword [rsp + 0xe8], eax
jne 0x18009f522
cmp dword [rsp + 0xe8], 0
jge 0x18009f503
mov eax, dword [rsp + 0xe8]
add eax, 1
mov dword [rsp + 0x190], eax
jmp 0x18009f514
mov eax, dword [rsp + 0xe8]
sub eax, 1
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0xe8]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
jmp 0x18009f54d
mov ecx, dword [rsp + 0x60]
neg ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x188], ecx
mov ecx, dword [rsp + 0xe8]
mov eax, dword [rsp + 0xa0]
sub eax, ecx
mov dword [rsp + 0xb0], eax
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0x64], eax
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x17c]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x184]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x17c], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x17c]
sar eax, 0x10
mov dword [rsp + 0xe4], eax
mov rax, qword [rsp + 0x48]
movsx ecx, word [rax + 0x18c]
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x18c], ecx
je 0x18009f60d
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x18c]
and ecx, 0xffff
imul ecx, dword [rsp + 0xe4]
sar ecx, 9
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x18c]
and eax, 0xffff0000
sar eax, 9
imul eax, dword [rsp + 0xe4]
lea eax, [rcx + rax + 1]
sar eax, 1
mov dword [rsp + 0x194], eax
jmp 0x18009f62f
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0xe4]
imul eax, dword [rcx + 0x18c]
add eax, 0x200
sar eax, 0xa
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x194]
neg eax
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x28]
and eax, 0x20000000
test eax, eax
je 0x18009f6ca
cmp dword [rsp + 0xe4], 0
jge 0x18009f6ca
cmp dword [rsp + 0xe8], 0
je 0x18009f6ca
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x18c]
cmp dword [rsp + 0xe8], eax
jne 0x18009f6b0
cmp dword [rsp + 0xe8], 0
jge 0x18009f691
mov eax, dword [rsp + 0xe8]
add eax, 1
mov dword [rsp + 0x198], eax
jmp 0x18009f6a2
mov eax, dword [rsp + 0xe8]
sub eax, 1
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0x64]
mov ecx, dword [rsp + 0xe8]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x18c], ecx
jmp 0x18009f6db
mov ecx, dword [rsp + 0x64]
neg ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x18c], ecx
mov ecx, dword [rsp + 0xe8]
mov eax, dword [rsp + 0xa8]
sub eax, ecx
mov dword [rsp + 0xb4], eax
jmp 0x18009f710
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0xb4], eax
mov eax, dword [rsp + 0xb0]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jg 0x18009f734
mov eax, dword [rsp + 0xb4]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [rsp + 0x24]
jle 0x18009f736
jmp 0x18009f79c
mov ecx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0xb0]
lea ecx, [rcx + rax*2]
mov eax, dword [rsp + 0x20]
lea ecx, [rcx + rax*8]
add ecx, dword [rsp + 0xb4]
mov eax, dword [rsp + 0x20]
add eax, ecx
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0xb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0xb4]
mov dword [rcx], eax
mov rax, qword [rsp + 0x50]
add rax, 4
mov qword [rsp + 0x50], rax
jmp 0x18009e48d
jmp 0x18009f7a6
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x1e0]
cmp dword [rsp + 0x38], eax
je 0x18009f82d
mov eax, dword [rsp + 0x28]
and eax, 4
test eax, eax
je 0x18009f7cb
mov dword [rsp + 0x19c], 4
jmp 0x18009f7d6
mov dword [rsp + 0x19c], 8
mov eax, dword [rsp + 0x1e0]
imul eax, dword [rsp + 0x19c]
mov ecx, eax
mov rdi, qword [rsp + 0x1d8]
xor eax, eax
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xa0], 1
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x140], 0
je 0x18009f82d
mov rcx, qword [rsp + 0x48]
add rcx, 0x130
call fcn.1800ad520
cmp dword [rsp + 0x58], 0
je 0x18009f941
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
add rax, 0x1c0
mov qword [rsp + 0x30], rax
jmp 0x18009f867
mov rax, qword [rsp + 0x30]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
sub eax, 1
mov dword [rsp + 0x40], eax
test ecx, ecx
je 0x18009f941
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0
jle 0x18009f93c
mov rax, qword [rsp + 0x30]
cmp dword [rax], 8
jg 0x18009f93c
lea rdi, [rsp + 0x110]
mov rsi, qword [rsp + 0x30]
add rsi, 0x10
mov ecx, 0x20
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0xf0]
mov rsi, qword [rsp + 0x30]
add rsi, 0x30
mov ecx, 0x20
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xec], 0
jmp 0x18009f8e8
mov eax, dword [rsp + 0xec]
add eax, 1
mov dword [rsp + 0xec], eax
cmp dword [rsp + 0xec], 8
jge 0x18009f93c
movsxd rax, dword [rsp + 0x58]
movsxd rdx, dword [rsp + 0xec]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + rax*4 + 0x110]
mov dword [rcx + rdx*4 + 0x10], eax
movsxd rax, dword [rsp + 0x58]
movsxd rdx, dword [rsp + 0xec]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + rax*4 + 0xf0]
mov dword [rcx + rdx*4 + 0x30], eax
mov eax, dword [rsp + 0x58]
add eax, 1
and eax, 7
mov dword [rsp + 0x58], eax
jmp 0x18009f8d7
jmp 0x18009f859
mov r8d, dword [rsp + 0x38]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
call fcn.1800a2420
mov eax, dword [rsp + 0x28]
and eax, 0x80
test eax, eax
je 0x18009f9dc
mov rax, qword [rsp + 0x1d0]
mov eax, dword [rax + 0xc8]
and eax, 0x10
test eax, eax
je 0x18009f9dc
mov eax, dword [rsp + 0x28]
and eax, 0x40000004
test eax, eax
je 0x18009f997
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x1a0], eax
jmp 0x18009f9a4
mov eax, dword [rsp + 0x38]
shl eax, 1
mov dword [rsp + 0x1a0], eax
mov rax, qword [rsp + 0x48]
movzx eax, byte [rax + 0x173]
mov r8d, 0x7f
sub r8d, eax
mov rax, qword [rsp + 0x1d0]
add r8d, dword [rax + 0xcc]
mov edx, dword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1d8]
call fcn.1800b16a0
mov eax, dword [rsp + 0x28]
and eax, 0x40000000
test eax, eax
je 0x18009fab1
mov eax, dword [rsp + 0x38]
shl eax, 1
mov ecx, eax
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x140], rax
mov ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x1d8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x130], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x138], eax
mov ecx, dword [rsp + 0x138]
mov eax, dword [rsp + 0x138]
sub eax, 1
mov dword [rsp + 0x138], eax
test ecx, ecx
je 0x18009fab1
mov rax, qword [rsp + 0x130]
sub rax, 4
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x140]
sub rax, 4
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140]
sub rax, 4
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rcx], eax
jmp 0x18009fa2c
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0xc0]
add ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xc0], ecx
mov rcx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x20]
mov dword [rcx + 0xc4], eax
mov eax, dword [rsp + 0x38]
add rsp, 0x1b8
pop rdi
pop rsi
ret