Function at 0x18000ab68
Capabilities:
Get hostname
Link many functions at runtime
Reference wmi statements

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1518]
mov eax, 0x15f0
call fcn.18021a410
sub rsp, rax
mov rax, qword [0x1802e9850]
xor rax, rsp
mov qword [rbp + 0x14e0], rax
xor r13d, r13d
lea rsi, [0x1802b282b]
mov dword [rbp + 0x1f0], r13d
lea rcx, [rbp + 0x1d0]
mov rdx, rsi
mov qword [rbp + 0x640], r13
mov edi, r13d
mov qword [rbp + 0x650], r13
lea ebx, [r13 + 0xf]
mov qword [rbp + 0x4e8], r13
mov qword [rbp + 0x658], rbx
mov qword [rbp + 0x500], rbx
mov qword [rbp + 0x638], rbx
mov qword [rbp + 0x4e0], rbx
mov qword [rbp + 0x5b8], rbx
mov qword [rbp + 0x598], rbx
mov qword [rbp + 0x618], rbx
mov qword [rbp + 0x5f8], rbx
mov qword [rbp + 0x5d8], rbx
mov qword [rbp + 0x398], rbx
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x4c0], rbx
mov qword [rbp + 0x558], rbx
mov qword [rbp + 0x410], rbx
mov qword [rbp + 0x1e8], rbx
mov qword [rbp + 0x4f8], r13
mov qword [rbp + 0x620], r13
mov qword [rbp + 0x630], r13
mov qword [rbp + 0x4c8], r13
mov qword [rbp + 0x4d8], r13
mov qword [rbp + 0x5a0], r13
mov qword [rbp + 0x5b0], r13
mov qword [rbp + 0x580], r13
mov qword [rbp + 0x590], r13
mov qword [rbp + 0x600], r13
mov qword [rbp + 0x610], r13
mov qword [rbp + 0x5e0], r13
mov qword [rbp + 0x5f0], r13
mov qword [rbp + 0x5c0], r13
mov qword [rbp + 0x5d0], r13
mov qword [rbp + 0x380], r13
mov qword [rbp + 0x390], r13
mov qword [rbp + 0x560], r13
mov qword [rbp + 0x570], r13
mov qword [rbp + 0x4a8], r13
mov qword [rbp + 0x4b8], r13
mov qword [rbp + 0x540], r13
mov qword [rbp + 0x550], r13
mov qword [rbp + 0x3f8], r13
mov qword [rbp + 0x408], r13
mov qword [rbp + 0x1d0], r13
mov qword [rbp + 0x1e0], r13
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x218], r13
lea rcx, [rbp + 0x218]
mov qword [rbp + 0x228], r13
mov qword [rbp + 0x230], rbx
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x238], r13
lea rcx, [rbp + 0x238]
mov qword [rbp + 0x248], r13
mov qword [rbp + 0x250], rbx
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x258], r13
lea rcx, [rbp + 0x258]
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], rbx
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x278], r13
lea rcx, [rbp + 0x278]
mov qword [rbp + 0x288], r13
mov qword [rbp + 0x290], rbx
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x318], r13
mov qword [rbp + 0x328], r13
mov qword [rbp + 0x330], rbx
lea rcx, [rbp + 0x318]
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x2d8], r13
lea rcx, [rbp + 0x2d8]
mov qword [rbp + 0x2e8], r13
mov qword [rbp + 0x2f0], rbx
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x2f8], r13
lea rcx, [rbp + 0x2f8]
mov qword [rbp + 0x308], r13
mov qword [rbp + 0x310], rbx
call fcn.180008180
mov rdx, rsi
mov qword [rbp + 0x2b8], r13
lea rcx, [rbp + 0x2b8]
mov qword [rbp + 0x2c8], r13
mov qword [rbp + 0x2d0], rbx
call fcn.180008180
xorps xmm0, xmm0
mov qword [rbp + 0x428], r13
xorps xmm1, xmm1
mov qword [rbp + 0x3d0], r13
movdqu xmmword [rbp + 0x418], xmm0
mov esi, r13d
mov qword [rbp + 0x348], r13
movdqu xmmword [rbp + 0x3c0], xmm1
movdqu xmmword [rbp + 0x338], xmm0
call fcn.18006286c
cmp qword [0x1802ea740], 0x10
lea rbx, [0x1802ea728]
mov rcx, rbx
cmovae rcx, qword [0x1802ea728]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
jne 0x18000ae93
mov r12, r13
mov qword [rbp - 0x68], r13
jmp 0x18000aed5
cmp qword [0x1802eaaa0], 0x10
lea rdx, [0x1802eaa88]
mov rcx, r14
cmovae rdx, qword [0x1802eaa88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x18000aec3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x18000ae8a
call rax
mov rcx, r14
mov qword [rbp - 0x68], rax
mov r12, rax
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x128]
mov qword [rbp - 0x40], r13
call fcn.180081698
mov r14, rax
cmp qword [rax + 0x18], 0x10
jb 0x18000aef2
mov r14, qword [rax]
cmp qword [0x1802ea740], 0x10
mov rcx, rbx
cmovae rcx, qword [0x1802ea728]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, rax
test rax, rax
je 0x18000af4d
cmp qword [0x1802ea700], 0x10
lea rdx, [0x1802ea6e8]
mov rcx, rax
cmovae rdx, qword [0x1802ea6e8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000af44
mov r8, r14
mov edx, 1
xor ecx, ecx
call rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdx, qword [rbp + 0x140]
mov r15d, 0x10
cmp rdx, r15
jb 0x18000af93
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000af8e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea98
call fcn.18009a21c
cmp qword [0x1802ea740], r15
cmovae rbx, qword [0x1802ea728]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x18000afe4
cmp qword [0x1802ead80], r15
lea rdx, [0x1802ead68]
mov rcx, rax
cmovae rdx, qword [0x1802ead68]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x18000b51a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x128]
call fcn.1800893b4
lea rcx, [rbp + 0x1d0]
cmp rcx, rax
je 0x18000b00e
mov r8b, r13b
lea rcx, [rbp + 0x1d0]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
mov ebx, 0x1000
cmp rdx, r15
jb 0x18000b04f
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b04a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea9e
call fcn.18009a21c
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.180084b10
lea rcx, [rbp + 0x218]
cmp rcx, rax
je 0x18000b080
mov r8b, r13b
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b0bc
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b0b7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaa4
call fcn.18009a21c
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.1800876d4
lea rcx, [rbp + 0x238]
cmp rcx, rax
je 0x18000b0ed
mov r8b, r13b
lea rcx, [rbp + 0x238]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b129
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b124
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaaa
call fcn.18009a21c
lea rdx, [rbp + 0x128]
call fcn.1800896a4
lea rcx, [rbp + 0x258]
cmp rcx, rax
je 0x18000b153
mov r8b, r13b
lea rcx, [rbp + 0x258]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b18f
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b18a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eab0
call fcn.18009a21c
lea rdx, [rbp + 0x128]
call fcn.18008eb74
lea rcx, [rbp + 0x278]
cmp rcx, rax
je 0x18000b1b9
mov r8b, r13b
lea rcx, [rbp + 0x278]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b1f5
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b1f0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eab6
call fcn.18009a21c
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.180089fbc
lea rcx, [rbp + 0x318]
cmp rcx, rax
je 0x18000b226
mov r8b, r13b
lea rcx, [rbp + 0x318]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b262
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b25d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eabc
call fcn.18009a21c
lea rdx, [rbp + 0x128]
call fcn.18008e2cc
lea rcx, [rbp + 0x2f8]
cmp rcx, rax
je 0x18000b28c
mov r8b, r13b
lea rcx, [rbp + 0x2f8]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b2c8
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b2c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eac2
call fcn.18009a21c
lea rdx, [rbp + 0x128]
call fcn.18008eb00
lea rcx, [rbp + 0x2b8]
cmp rcx, rax
je 0x18000b2f2
mov r8b, r13b
lea rcx, [rbp + 0x2b8]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000b32e
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b329
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eac8
call fcn.18009a21c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x1fffff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18000b3e9
lea rcx, [0x1802b4918]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.ZwQueryInformationProcess
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, 0x30
mov qword [rsp + 0x20], r13
lea r8, [rbp + 0xe8]
xor edx, edx
mov rcx, rbx
call rax
test eax, eax
js 0x18000b3e0
mov edx, dword [rbp + 0xf0]
lea rax, [rbp + 0x120]
add edx, 0x68
mov qword [rbp + 0x120], r13
mov r9d, 2
mov word [rbp + 0x170], r13w
lea r8, [rbp + 0x170]
mov qword [rsp + 0x20], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x18000b3e0
cmp qword [rbp + 0x120], 2
jne 0x18000b3e0
cmp word [rbp + 0x170], 0x70
je 0x18000eace
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [0x1802eaa60], r15
lea r14, [0x1802eaa48]
mov rcx, r14
cmovae rcx, qword [0x1802eaa48]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x18000b443
cmp qword [0x1802ea6a0], r15
lea rdx, [0x1802ea688]
mov rcx, rax
cmovae rdx, qword [0x1802ea688]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000b43a
xor edx, edx
xor ecx, ecx
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp qword [0x1802eaa60], r15
cmovae r14, qword [0x1802eaa48]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x18000b4b9
cmp qword [0x1802ea900], r15
lea rdx, [0x1802ea8e8]
mov rcx, rax
cmovae rdx, qword [0x1802ea8e8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000b4b0
mov qword [rsp + 0x40], r13
xor r9d, r9d
mov dword [rsp + 0x38], r13d
xor r8d, r8d
mov qword [rsp + 0x30], r13
or edx, 0xffffffff
mov dword [rsp + 0x28], 3
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rax, [rbp + 0xe0]
mov qword [rbp + 0xe0], r13
lea r9, [0x1802a56d0]
mov qword [rsp + 0x20], rax
lea rcx, [0x1802a56e0]
call fcn.18005c948
cmp qword [rbp + 0x270], r15
lea rdx, [rbp + 0x258]
lea rcx, [rsp + 0x68]
mov qword [rbp + 0xd0], r13
cmovae rdx, qword [rbp + 0x258]
call fcn.18000a0cc
mov rdx, qword [rax]
test rdx, rdx
je 0x18000bb93
mov rdx, qword [rdx]
jmp 0x18000bb96
call rax
mov rcx, r14
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp ebx, 0xb7
jne 0x18000afe4
mov rcx, r12
call fcn.18005c6a0
lea rcx, [rbp + 0x338]
call fcn.180007098
lea rcx, [rbp + 0x3c0]
call fcn.180007098
lea rcx, [rbp + 0x418]
call fcn.180007098
mov rdx, qword [rbp + 0x2d0]
mov ebx, 0x1000
cmp rdx, r15
jb 0x18000b5a0
mov rcx, qword [rbp + 0x2b8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b59b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x310]
mov edi, 0xf
mov qword [rbp + 0x2c8], r13
mov qword [rbp + 0x2d0], rdi
mov byte [rbp + 0x2b8], r13b
cmp rdx, r15
jb 0x18000b5f6
mov rcx, qword [rbp + 0x2f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b5f1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x2f0]
mov qword [rbp + 0x308], r13
mov qword [rbp + 0x310], rdi
mov byte [rbp + 0x2f8], r13b
cmp rdx, r15
jb 0x18000b647
mov rcx, qword [rbp + 0x2d8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b642
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x330]
mov qword [rbp + 0x2e8], r13
mov qword [rbp + 0x2f0], rdi
mov byte [rbp + 0x2d8], r13b
cmp rdx, r15
jb 0x18000b698
mov rcx, qword [rbp + 0x318]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b693
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x290]
mov qword [rbp + 0x328], r13
mov qword [rbp + 0x330], rdi
mov byte [rbp + 0x318], r13b
cmp rdx, r15
jb 0x18000b6e9
mov rcx, qword [rbp + 0x278]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b6e4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x270]
mov qword [rbp + 0x288], r13
mov qword [rbp + 0x290], rdi
mov byte [rbp + 0x278], r13b
cmp rdx, r15
jb 0x18000b73a
mov rcx, qword [rbp + 0x258]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b735
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x250]
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], rdi
mov byte [rbp + 0x258], r13b
cmp rdx, r15
jb 0x18000b78b
mov rcx, qword [rbp + 0x238]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b786
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x230]
mov qword [rbp + 0x248], r13
mov qword [rbp + 0x250], rdi
mov byte [rbp + 0x238], r13b
cmp rdx, r15
jb 0x18000b7dc
mov rcx, qword [rbp + 0x218]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b7d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x1e8]
mov qword [rbp + 0x228], r13
mov qword [rbp + 0x230], rdi
mov byte [rbp + 0x218], r13b
cmp rdx, r15
jb 0x18000b82d
mov rcx, qword [rbp + 0x1d0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b828
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x410]
mov qword [rbp + 0x1e0], r13
mov qword [rbp + 0x1e8], rdi
mov byte [rbp + 0x1d0], r13b
cmp rdx, r15
jb 0x18000b87e
mov rcx, qword [rbp + 0x3f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b879
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x558]
cmp rdx, r15
jb 0x18000b8ba
mov rcx, qword [rbp + 0x540]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b8b5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x4c0]
cmp rdx, r15
jb 0x18000b8f6
mov rcx, qword [rbp + 0x4a8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b8f1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x578]
cmp rdx, r15
jb 0x18000b932
mov rcx, qword [rbp + 0x560]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b92d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x398]
cmp rdx, r15
jb 0x18000b96e
mov rcx, qword [rbp + 0x380]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b969
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x5d8]
cmp rdx, r15
jb 0x18000b9aa
mov rcx, qword [rbp + 0x5c0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b9a5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x5f8]
cmp rdx, r15
jb 0x18000b9e6
mov rcx, qword [rbp + 0x5e0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b9e1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x618]
cmp rdx, r15
jb 0x18000ba22
mov rcx, qword [rbp + 0x600]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ba1d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x598]
cmp rdx, r15
jb 0x18000ba5e
mov rcx, qword [rbp + 0x580]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ba59
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x5b8]
cmp rdx, r15
jb 0x18000ba9a
mov rcx, qword [rbp + 0x5a0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ba95
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x4e0]
cmp rdx, r15
jb 0x18000bad6
mov rcx, qword [rbp + 0x4c8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000bad1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x638]
cmp rdx, r15
jb 0x18000bb12
mov rcx, qword [rbp + 0x620]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000bb0d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x500]
cmp rdx, r15
jb 0x18000bb4e
mov rcx, qword [rbp + 0x4e8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000bb49
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x658]
cmp rdx, r15
jb 0x18000e9ef
mov rcx, qword [rbp + 0x640]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000bb89
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
jmp 0x18000e9ef
mov rdx, r13
mov rcx, qword [rbp + 0xe0]
lea r8, [rbp + 0xd0]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r13
xor r8d, r8d
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [rax + 0x18]
lea rcx, [rsp + 0x68]
call fcn.18000a144
mov rcx, qword [rbp + 0xd0]
call fcn.180060b64
cmp qword [rbp + 0x230], r15
lea rdx, [rbp + 0x218]
lea rcx, [rsp + 0x70]
mov qword [rbp + 0xc8], r13
cmovae rdx, qword [rbp + 0x218]
call fcn.18000a0cc
mov rbx, qword [rax]
test rbx, rbx
je 0x18000bc13
mov rbx, qword [rbx]
jmp 0x18000bc16
mov rbx, r13
cmp qword [rbp + 0x1e8], r15
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x68]
cmovae rdx, qword [rbp + 0x1d0]
call fcn.18000a0cc
mov rdx, qword [rax]
test rdx, rdx
je 0x18000bc43
mov rdx, qword [rdx]
jmp 0x18000bc46
mov rdx, r13
mov rcx, qword [rbp + 0xd0]
lea r8, [rbp + 0xc8]
mov qword [rsp + 0x28], r8
mov r9d, 0x30
mov r8, rbx
mov qword [rsp + 0x20], r13
mov rax, qword [rcx]
call qword [rax + LoadRegTypeLib]
lea rcx, [rsp + 0x68]
call fcn.18000a144
lea rcx, [rsp + 0x70]
call fcn.18000a144
mov rcx, qword [rbp + 0xc8]
mov r14d, 1
mov qword [rbp + 0xd8], r13
mov dword [rbp + 0x148], r13d
test rcx, rcx
je 0x18000bcf9
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xd8]
or edx, 0xffffffff
mov r8d, r14d
call qword [rax + 0x20]
cmp dword [rbp + 0x148], r13d
je 0x18000bcea
mov rcx, qword [rbp + 0xd8]
add esi, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
jne 0x18000bca4
jmp 0x18000bcf1
mov rcx, qword [rbp + 0xc8]
test esi, esi
jne 0x18000bf6a
cmp qword [rbp + 0x290], r15
lea rdx, [rbp + 0x278]
lea rcx, [rsp + 0x68]
mov qword [rbp + 0xd0], r13
cmovae rdx, qword [rbp + 0x278]
call fcn.18000a0cc
mov rcx, qword [rax]
test rcx, rcx
je 0x18000bd2d
mov rdx, qword [rcx]
jmp 0x18000bd30
mov rdx, r13
mov rcx, qword [rbp + 0xe0]
lea r8, [rbp + 0xd0]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r13
xor r8d, r8d
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [rax + 0x18]
lea rcx, [rsp + 0x68]
call fcn.18000a144
mov rcx, qword [rbp + 0xd0]
call fcn.180060b64
cmp qword [rbp + 0x250], r15
lea rdx, [rbp + 0x238]
lea rcx, [rsp + 0x70]
mov qword [rbp + 0xc8], r13
cmovae rdx, qword [rbp + 0x238]
call fcn.18000a0cc
mov rbx, qword [rax]
test rbx, rbx
je 0x18000bdad
mov rbx, qword [rbx]
jmp 0x18000bdb0
mov rbx, r13
cmp qword [rbp + 0x1e8], r15
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x68]
cmovae rdx, qword [rbp + 0x1d0]
call fcn.18000a0cc
mov rdx, qword [rax]
test rdx, rdx
je 0x18000bddd
mov rdx, qword [rdx]
jmp 0x18000bde0
mov rdx, r13
mov rcx, qword [rbp + 0xd0]
lea r8, [rbp + 0xc8]
mov qword [rsp + 0x28], r8
mov r9d, 0x30
mov r8, rbx
mov qword [rsp + 0x20], r13
mov rax, qword [rcx]
call qword [rax + LoadRegTypeLib]
lea rcx, [rsp + 0x68]
call fcn.18000a144
lea rcx, [rsp + 0x70]
call fcn.18000a144
mov rcx, qword [rbp + 0xc8]
mov qword [rbp + 0xd8], r13
mov dword [rbp + 0x148], r13d
test rcx, rcx
je 0x18000be8d
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xd8]
or edx, 0xffffffff
mov r8d, r14d
call qword [rax + 0x20]
cmp dword [rbp + 0x148], r13d
je 0x18000be7e
mov rcx, qword [rbp + 0xd8]
add esi, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
jne 0x18000be38
jmp 0x18000be85
mov rcx, qword [rbp + 0xc8]
test esi, esi
jne 0x18000bf6a
lea rdx, str.SELECT__FROM_Win32_VoltageProbe
lea rcx, [rsp + 0x70]
call fcn.18000a0cc
mov rcx, qword [rax]
test rcx, rcx
je 0x18000beab
mov rbx, qword [rcx]
jmp 0x18000beae
mov rbx, r13
lea rdx, [0x1802b496c]
lea rcx, [rsp + 0x68]
call fcn.18000a0cc
mov rcx, qword [rax]
test rcx, rcx
je 0x18000becc
mov rdx, qword [rcx]
jmp 0x18000becf
mov rdx, r13
mov rcx, qword [rbp + 0xd0]
lea r8, [rbp + 0xc8]
mov qword [rsp + 0x28], r8
mov r9d, 0x30
mov r8, rbx
mov qword [rsp + 0x20], r13
mov rax, qword [rcx]
call qword [rax + LoadRegTypeLib]
lea rcx, [rsp + 0x68]
call fcn.18000a144
lea rcx, [rsp + 0x70]
call fcn.18000a144
mov qword [rbp + 0xd8], r13
mov dword [rbp + 0x148], r13d
jmp 0x18000bf55
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xd8]
or edx, 0xffffffff
mov r8d, r14d
call qword [rax + 0x20]
cmp dword [rbp + 0x148], r13d
je 0x18000bf63
mov rcx, qword [rbp + 0xd8]
add esi, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
jne 0x18000bf1d
jmp 0x18000bf6a
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xd0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xe0]
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.18005c9ec
mov ebx, 0xf
mov qword [rbp + 0x488], r13
lea rdx, [0x1802b4970]
mov qword [rbp + 0x4a0], rbx
lea rcx, [rbp + 0x488]
mov qword [rbp + 0x498], r13
call fcn.180008180
lea rcx, [rbp + 0x128]
call fcn.180016b3c
lea rcx, [rbp + 0x2d8]
cmp rcx, rax
je 0x18000bfe6
mov r8b, r13b
lea rcx, [rbp + 0x2d8]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
mov r14d, 0x1000
cmp rdx, r15
jb 0x18000c028
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c023
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ead6
call fcn.18009a21c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.18022b0c0
call fcn.18022b094
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x118]
call fcn.180067550
lea rcx, [0x1802ea4e8]
cmp rcx, rax
je 0x18000c064
mov r8b, r13b
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c0a0
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c09b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eadc
call fcn.18009a21c
mov rcx, qword [0x1802f7630]
lea r8, [rbp + 0x8e0]
mov r9d, 0x400
mov qword [rbp + 0x160], r13
mov edx, 0x65
mov qword [rbp + 0x168], rbx
mov byte [rbp + 0x150], r13b
call qword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
je 0x18000c1ad
lea rdx, [rbp + 0x8e0]
mov qword [rbp + 0x150], r13
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x168], rbx
call fcn.180008180
lea r8, [rbp + 0x150]
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.180072764
lea rcx, [0x1802ea4e8]
cmp rcx, rax
je 0x18000c135
mov r8b, r13b
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000c171
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c16c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eae2
call fcn.18009a21c
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c1ad
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c1a8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eae8
call fcn.18009a21c
xorps xmm0, xmm0
mov qword [rbp + 0x150], r13
xor eax, eax
lea rdx, [0x1802ea4e8]
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x538], rax
movups xmmword [rbp + 0x528], xmm0
movdqu xmmword [rbp + 0x160], xmm0
call fcn.180008270
lea rdx, [rsp + 0x78]
call fcn.1800669c8
mov r8, rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x528]
call fcn.180017284
lea rcx, [rbp + 0x128]
mov qword [rbp + 0x1b0], r13
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], rbx
call fcn.180016e54
lea rcx, [rbp + 0x1b0]
cmp rcx, rax
je 0x18000c241
mov r8b, r13b
lea rcx, [rbp + 0x1b0]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000c27d
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c278
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaee
call fcn.18009a21c
movdqa xmm0, xmmword [0x1802b50a0]
lea rdx, [0x1802b282b]
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x150], r13
movdqu xmmword [rbp + 0x160], xmm0
call fcn.180008180
xorps xmm0, xmm0
mov qword [rbp - 0x60], r13
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x60]
movdqu xmmword [rbp - 0x50], xmm0
call fcn.180008270
lea rdx, [rsp + 0x78]
call fcn.18006be1c
mov r9, rax
lea r8, [rbp - 0x60]
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x128]
mov qword [rsp + 0x20], rax
call fcn.180075e28
lea rcx, [rbp + 0x1b0]
cmp rcx, rax
je 0x18000c30a
mov r8b, r13b
lea rcx, [rbp + 0x1b0]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000c346
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c341
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaf4
call fcn.18009a21c
cmp qword [rbp + 0x1c8], r15
lea rcx, [rbp + 0x1b0]
mov rax, qword [rbp + 0x1c0]
lea rdx, [rbp + 0x128]
cmovae rcx, qword [rbp + 0x1b0]
cmp byte [rax + rcx - 1], 0x5c
jne 0x18000c49f
call fcn.18006be1c
mov r9, qword [rbp + 0x1c0]
lea rdx, [rbp - 0x60]
dec r9
lea rcx, [rbp + 0x1b0]
xor r8d, r8d
mov rbx, rax
call fcn.180007348
mov rdx, rax
lea rcx, [rbp + 0x150]
mov r8, rbx
call fcn.180009044
lea rcx, [rbp + 0x1b0]
cmp rcx, rax
je 0x18000c3ca
mov r8b, r13b
lea rcx, [rbp + 0x1b0]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c406
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c401
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea92
call fcn.18009a21c
mov rdx, qword [rbp - 0x48]
mov ebx, 0xf
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x168], rbx
mov byte [rbp + 0x150], r13b
cmp rdx, r15
jb 0x18000c456
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c451
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea92
call fcn.18009a21c
mov rdx, qword [rbp + 0x140]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], rbx
mov byte [rbp - 0x60], r13b
cmp rdx, r15
jb 0x18000c4fc
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c4f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea92
jmp 0x18000c4f7
call fcn.18006be1c
mov rdx, rax
cmp qword [rax + 0x18], r15
jb 0x18000c4b0
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x1b0]
call fcn.1800081fc
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000c4fc
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c4f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eafa
call fcn.18009a21c
xorps xmm0, xmm0
mov qword [rbp + 0x3a0], r13
lea rdx, [rbp + 0x1b0]
mov qword [rbp + 0x3b0], r13
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x3b8], rbx
movdqu xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x468], r13
mov qword [rbp + 0x478], r13
mov qword [rbp + 0x480], rbx
mov qword [rbp + 0x448], r13
mov qword [rbp + 0x458], r13
mov qword [rbp + 0x460], rbx
mov qword [rbp + 0x150], r13
call fcn.180008270
lea rax, [rbp + 0x448]
lea r9, [rbp + 0x468]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x3a0]
lea rdx, [rbp + 0x150]
call fcn.18007a000
lea rdx, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], 0x20
lea rcx, [rbp + 0x8c0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x678]
call fcn.18000a6c8
lea rdx, [rbp + 0x128]
mov qword [rbp + 0x1f8], r13
mov r14b, r13b
mov qword [rbp + 0x208], r13
mov qword [rbp + 0x210], rbx
call fcn.18007a448
lea rcx, [rbp + 0x1f8]
cmp rcx, rax
je 0x18000c5f2
mov r8b, r13b
lea rcx, [rbp + 0x1f8]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
mov ebx, 0x1000
cmp rdx, r15
jb 0x18000c633
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c62e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eb00
call fcn.18009a21c
lea rdx, [rbp + 0x528]
mov qword [rbp + 0x298], r13
lea rcx, [rbp - 0x60]
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], 0xf
call fcn.18000ebb0
mov r8, rax
lea rdx, [rbp + 0x128]
call fcn.1800645a0
lea rcx, [rbp + 0x298]
cmp rcx, rax
je 0x18000c689
mov r8b, r13b
lea rcx, [rbp + 0x298]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000c6c5
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c6c0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eb06
call fcn.18009a21c
lea r8, [rbp + 0x298]
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.180072764
lea rcx, [rbp + 0x298]
cmp rcx, rax
je 0x18000c6fd
mov r8b, r13b
lea rcx, [rbp + 0x298]
mov rdx, rax
call fcn.180008314
mov rdx, qword [rbp + 0x140]
cmp rdx, r15
jb 0x18000c739
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c734
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eb0c
call fcn.18009a21c
lea rcx, [0x1802b282b]
call fcn.180221f40
cmp qword [rbp + 0x2b0], r15
lea rcx, [rbp + 0x298]
mov r8, qword [rbp + 0x2a8]
cmovae rcx, qword [rbp + 0x298]
cmp r8, rax
jne 0x18000cd92
lea rdx, [0x1802b282b]
call fcn.18021c370
test eax, eax
jne 0x18000cd92
mov rcx, r12
call fcn.18005c6a0
mov rdx, qword [rbp + 0x2b0]
cmp rdx, r15
jb 0x18000c7c3
mov rcx, qword [rbp + 0x298]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c7be
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x210]
mov edi, 0xf
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], rdi
mov byte [rbp + 0x298], r13b
cmp rdx, r15
jb 0x18000c819
mov rcx, qword [rbp + 0x1f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c814
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x690]
mov qword [rbp + 0x208], r13
mov qword [rbp + 0x210], rdi
mov byte [rbp + 0x1f8], r13b
cmp rdx, r15
jb 0x18000c86a
mov rcx, qword [rbp + 0x678]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c865
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x460]
mov qword [rbp + 0x688], r13
mov qword [rbp + 0x690], rdi
mov byte [rbp + 0x678], r13b
cmp rdx, r15
jb 0x18000c8bb
mov rcx, qword [rbp + 0x448]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c8b6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x480]
mov qword [rbp + 0x458], r13
mov qword [rbp + 0x460], rdi
mov byte [rbp + 0x448], r13b
cmp rdx, r15
jb 0x18000c90c
mov rcx, qword [rbp + 0x468]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c907
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x3b8]
mov qword [rbp + 0x478], r13
mov qword [rbp + 0x480], rdi
mov byte [rbp + 0x468], r13b
cmp rdx, r15
jb 0x18000c95d
mov rcx, qword [rbp + 0x3a0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c958
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x1c8]
mov qword [rbp + 0x3b0], r13
mov qword [rbp + 0x3b8], rdi
mov byte [rbp + 0x3a0], r13b
cmp rdx, r15
jb 0x18000c9ae
mov rcx, qword [rbp + 0x1b0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c9a9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rcx, qword [rbp + 0x528]
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], rdi
mov byte [rbp + 0x1b0], r13b
test rcx, rcx
je 0x18000c9ff
mov rdx, qword [rbp + 0x538]
mov rax, rcx
sub rdx, rcx
cmp rdx, rbx
jb 0x18000c9fa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x4a0]
cmp rdx, r15
jb 0x18000ca3b
mov rcx, qword [rbp + 0x488]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ca36
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
lea rcx, [rbp + 0x338]
mov qword [rbp + 0x498], r13
mov qword [rbp + 0x4a0], rdi
mov byte [rbp + 0x488], r13b
call fcn.180007098
lea rcx, [rbp + 0x3c0]
call fcn.180007098
lea rcx, [rbp + 0x418]
call fcn.180007098
mov rdx, qword [rbp + 0x2d0]
cmp rdx, r15
jb 0x18000cab0
mov rcx, qword [rbp + 0x2b8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000caab
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x310]
mov qword [rbp + 0x2c8], r13
mov qword [rbp + 0x2d0], rdi
mov byte [rbp + 0x2b8], r13b
cmp rdx, r15
jb 0x18000cb01
mov rcx, qword [rbp + 0x2f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cafc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x2f0]
mov qword [rbp + 0x308], r13
mov qword [rbp + 0x310], rdi
mov byte [rbp + 0x2f8], r13b
cmp rdx, r15
jb 0x18000cb52
mov rcx, qword [rbp + 0x2d8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cb4d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x330]
mov qword [rbp + 0x2e8], r13
mov qword [rbp + 0x2f0], rdi
mov byte [rbp + 0x2d8], r13b
cmp rdx, r15
jb 0x18000cba3
mov rcx, qword [rbp + 0x318]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cb9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x290]
mov qword [rbp + 0x328], r13
mov qword [rbp + 0x330], rdi
mov byte [rbp + 0x318], r13b
cmp rdx, r15
jb 0x18000cbf4
mov rcx, qword [rbp + 0x278]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cbef
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x270]
mov qword [rbp + 0x288], r13
mov qword [rbp + 0x290], rdi
mov byte [rbp + 0x278], r13b
cmp rdx, r15
jb 0x18000cc45
mov rcx, qword [rbp + 0x258]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cc40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x250]
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], rdi
mov byte [rbp + 0x258], r13b
cmp rdx, r15
jb 0x18000cc96
mov rcx, qword [rbp + 0x238]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cc91
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x230]
mov qword [rbp + 0x248], r13
mov qword [rbp + 0x250], rdi
mov byte [rbp + 0x238], r13b
cmp rdx, r15
jb 0x18000cce7
mov rcx, qword [rbp + 0x218]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cce2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x1e8]
mov qword [rbp + 0x228], r13
mov qword [rbp + 0x230], rdi
mov byte [rbp + 0x218], r13b
cmp rdx, r15
jb 0x18000cd38
mov rcx, qword [rbp + 0x1d0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cd33
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
mov rdx, qword [rbp + 0x410]
mov qword [rbp + 0x1e0], r13
mov qword [rbp + 0x1e8], rdi
mov byte [rbp + 0x1d0], r13b
cmp rdx, r15
jb 0x18000e953
mov rcx, qword [rbp + 0x3f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cd88
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ea8c
call fcn.18009a21c
jmp 0x18000e953
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.180081de4
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.1800074a4
lea rcx, [rbp + 0x128]
call fcn.180007448
mov rcx, qword [0x1802f7630]
lea r8, [rbp + 0xce0]
mov r15d, 0x400
mov edx, 0x66
mov r9d, r15d
call qword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
je 0x18000ce3a
lea rdx, [rbp + 0xce0]
lea rcx, [rbp + 0x128]
call fcn.1800074c4
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x118]
call fcn.180072764
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x128]
call fcn.180007448
lea rcx, [rbp + 0x750]
call fcn.180005714
lea rdx, [rsp + 0x78]
call fcn.1800669c8
lea rdx, [rbp + 0x560]
mov rbx, rax
lea rcx, [rbp - 0x38]
call fcn.180007504
mov rdx, rax
lea rcx, [rbp + 0x750]
mov r8, rbx
call fcn.180017284
lea rdx, [rbp + 0x750]
lea rcx, [rbp - 0x60]
call fcn.18000ebb0
mov r8, rax
lea rdx, [rbp + 0x128]
call fcn.1800645a0
mov rdx, rax
lea rcx, [rbp + 0x4a8]
call fcn.1800074a4
lea rcx, [rbp + 0x128]
call fcn.180007448
lea r8, [rbp + 0x4a8]
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.180072764
mov rdx, rax
lea rcx, [rbp + 0x4a8]
call fcn.1800074a4
lea rcx, [rbp + 0x128]
call fcn.180007448
lea rcx, [rbp + 0x2b8]
call fcn.1800073c8
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18000f878
lea rcx, [rbp + 0x4a8]
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.18000f878
lea r9, [rsp + 0x60]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x660]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x418]
call fcn.18000f31c
lea rcx, [rbp + 0x660]
call fcn.180007098
lea rcx, [rbp + 0x120]
call fcn.180007100
lea rcx, [rsp + 0x60]
call fcn.180007100
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x118]
call fcn.18008b60c
mov rdx, rax
lea rcx, [rbp + 0x540]
call fcn.1800074a4
lea rcx, [rbp + 0x128]
call fcn.180007448
mov rcx, qword [0x1802f7630]
lea r8, [rbp + 0x10e0]
mov r9d, r15d
mov edx, 0x67
call qword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
je 0x18000d003
lea rdx, [rbp + 0x10e0]
lea rcx, [rbp + 0x128]
call fcn.1800074c4
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x118]
call fcn.180072764
mov rdx, rax
lea rcx, [rbp + 0x540]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x128]
call fcn.180007448
lea rcx, [rbp + 0x660]
call fcn.180005714
lea rdx, [rsp + 0x78]
call fcn.1800669c8
lea rdx, [rbp + 0x540]
mov rbx, rax
lea rcx, [rbp - 0x38]
call fcn.180007504
mov rdx, rax
lea rcx, [rbp + 0x660]
mov r8, rbx
call fcn.180017284
lea rdx, [rbp + 0x660]
lea rcx, [rbp - 0x60]
call fcn.18000ebb0
mov r8, rax
lea rdx, [rbp + 0x128]
call fcn.1800645a0
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.1800074a4
lea rcx, [rbp + 0x128]
call fcn.180007448
lea r8, [rbp + 0x3f8]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x118]
call fcn.180072764
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x2b8]
call fcn.1800073c8
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18000f878
lea rcx, [rbp + 0x3f8]
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.18000f878
lea r9, [rsp + 0x60]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x3c0]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rbp + 0x120]
call fcn.180007100
lea rcx, [rsp + 0x60]
call fcn.180007100
lea rcx, [rbp + 0x678]
call fcn.18000fcd8
lea rcx, [rbp + 0x418]
mov edx, 6
test al, al
je 0x18000d1f0
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rcx, rax
call fcn.180227ef8
cmp esi, eax
jg 0x18000d1c9
call fcn.18000a5fc
mov r12d, 1
test al, al
je 0x18000d1cf
lea rdx, [rbp + 0x678]
mov edi, r12d
lea rcx, [rsp + 0x78]
call fcn.180007504
mov r8, rax
lea rdx, [rbp + 0x128]
call fcn.18008f9a4
mov rcx, rax
call fcn.18000f770
mov rdx, rax
lea rcx, [rbp + 0x8c0]
call fcn.18022686c
test eax, eax
jne 0x18000d1cf
call fcn.18000a644
cmp al, r12b
je 0x18000d1cf
call fcn.18000aaf4
cmp al, r12b
je 0x18000d1cf
mov bl, r13b
jmp 0x18000d1d2
mov r12d, 1
mov bl, r12b
test r12b, dil
je 0x18000d1e6
and edi, 0xfffffffe
lea rcx, [rbp + 0x128]
call fcn.180007e60
test bl, bl
je 0x18000d2a9
jmp 0x18000d234
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rcx, rax
call fcn.180227ef8
cmp esi, eax
jg 0x18000d22e
call fcn.18000a5fc
test al, al
je 0x18000d22e
call fcn.18000aaf4
mov r12d, 1
cmp al, r12b
je 0x18000d234
call fcn.18000a644
cmp al, r12b
jne 0x18000d2a9
jmp 0x18000d234
mov r12d, 1
lea rdx, [0x1802b4974]
lea rcx, [rsp + 0x60]
call fcn.18000f878
lea rcx, [rbp + 0x298]
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.18000f878
lea r9, [rsp + 0x60]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x338]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rbp + 0x120]
call fcn.180007100
lea rcx, [rsp + 0x60]
call fcn.180007100
lea rcx, [rbp + 0x3c0]
call fcn.18000f2ec
mov r15, rax
mov ebx, r13d
test eax, eax
jle 0x18000d36f
movsxd rsi, ebx
lea rcx, [rbp + 0x3c0]
mov rdx, rsi
call fcn.18000f2e0
mov rcx, rax
lea rdx, [rbp + 0x2f8]
call fcn.180009374
test al, al
jne 0x18000d331
lea rdx, [rbp + 0x150]
or edi, 6
call fcn.18006a7e0
mov r8, rax
lea rdx, [rbp + 0x2d8]
lea rcx, [rbp + 0x128]
call fcn.180009264
mov rdx, rsi
lea rcx, [rbp + 0x3c0]
mov r8, rax
call fcn.18000f2e0
mov rcx, rax
mov rdx, r8
call fcn.180009374
mov sil, r13b
test al, al
je 0x18000d334
mov sil, r12b
test dil, 4
je 0x18000d349
and edi, 0xfffffffb
lea rcx, [rbp + 0x128]
call fcn.180007448
test dil, 2
je 0x18000d35e
and edi, 0xfffffffd
lea rcx, [rbp + 0x150]
call fcn.180007448
test sil, sil
jne 0x18000d37b
add ebx, r12d
cmp ebx, r15d
jl 0x18000d2c3
lea rcx, [rbp + 0x338]
call fcn.18000f2f8
lea rcx, [rbp + 0x710]
call fcn.1800074ec
lea rcx, [rbp + 0x3d8]
call fcn.1800074ec
lea rcx, [rbp + 0x788]
call fcn.1800074ec
lea rcx, [rbp + 0x768]
call fcn.1800074ec
lea rcx, [rbp + 0x198]
mov qword [rbp + 0x120], r13
mov r15, r13
call fcn.180005714
lea rcx, [rbp + 0x198]
call fcn.18000f4ec
lea rcx, [rbp + 0x698]
call fcn.180005714
lea rcx, [rbp + 0x698]
call fcn.1800061a8
lea rcx, [rbp + 0x6b0]
call fcn.180005714
lea rcx, [rbp + 0x6b0]
call fcn.1800061a8
lea rcx, [rbp + 0x6f8]
call fcn.180005714
lea rcx, [rbp + 0x6f8]
call fcn.1800061a8
lea rcx, [rbp + 0x198]
mov ebx, r13d
call fcn.18000f2ec
test rax, rax
je 0x18000d45e
mov rdx, r13
lea rcx, [rbp + 0x198]
call fcn.18000f2e0
mov rcx, rax
lea rdx, [0x1802b282b]
call fcn.18000f870
add ebx, r12d
lea rcx, [rbp + 0x198]
movsxd rdx, ebx
call fcn.18000f2ec
cmp rdx, rax
jb 0x18000d42c
lea rcx, [rbp + 0x338]
mov dword [rsp + 0x60], r13d
mov esi, r13d
call fcn.18000f2ec
test rax, rax
je 0x18000e79a
mov rbx, r13
lea rcx, [rbp + 0x350]
call fcn.180005714
lea rcx, [rbp + 0x350]
call fcn.1800061a8
lea rcx, [rbp + 0x6c8]
call fcn.180005714
lea rcx, [rbp + 0x6c8]
call fcn.1800061a8
lea rcx, [rbp + 0x368]
call fcn.180005714
lea rcx, [rbp + 0x368]
call fcn.1800061a8
lea rcx, [rbp + 0x430]
call fcn.180005714
lea rcx, [rbp + 0x430]
call fcn.1800061a8
lea rcx, [rbp + 0x6e0]
call fcn.180005714
lea rcx, [rbp + 0x6e0]
call fcn.1800061a8
lea rdx, [0x1802b4978]
lea rcx, [rbp + 0x38]
call fcn.18000f878
mov rdx, rbx
lea rcx, [rbp + 0x338]
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.18000f878
lea r9, [rbp + 0x38]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x350]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rbp + 0x10]
call fcn.180007100
lea rcx, [rbp + 0x38]
call fcn.180007100
lea rdx, [rbp + 0x150]
call fcn.18007b68c
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.18000f878
mov rdx, r12
lea rcx, [rbp + 0x350]
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.18000f878
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x6c8]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rbp + 0x40]
call fcn.180007100
lea rcx, [rbp + 0x48]
call fcn.180007100
lea rcx, [rbp + 0x150]
call fcn.180007448
mov edx, 2
lea rcx, [rbp + 0x350]
call fcn.18000f2e0
mov rcx, rax
lea rdx, [rbp + 0x488]
call fcn.180009374
movzx edi, r13b
test al, al
lea rdx, [rbp + 0x150]
cmovne edi, r12d
call fcn.18007b68c
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.18000f878
mov edx, 3
lea rcx, [rbp + 0x350]
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.18000f878
lea r9, [rbp + 0x58]
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x368]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rbp + 0x50]
call fcn.180007100
lea rcx, [rbp + 0x58]
call fcn.180007100
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rdx, [rbp + 0x150]
call fcn.18007b68c
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.18000f878
mov edx, 4
lea rcx, [rbp + 0x350]
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.18000f878
lea r9, [rbp - 0x18]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rbp + 0x60]
call fcn.180007100
lea rcx, [rbp - 0x18]
call fcn.180007100
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rdx, [rbp + 0x150]
call fcn.18007b68c
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.18000f878
mov edx, 5
lea rcx, [rbp + 0x350]
call fcn.18000f2e0
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.18000f878
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x178]
call fcn.180075b78
mov rdx, rax
lea rcx, [rbp + 0x6e0]
call fcn.18000f31c
lea rcx, [rbp + 0x178]
call fcn.180007098
lea rcx, [rsp + 0x70]
call fcn.180007100
lea rcx, [rsp + 0x68]
call fcn.180007100
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rdx, [rbp + 0x730]
call fcn.18006a7e0
mov r8d, 6
lea rdx, [rbp + 0x178]
mov rbx, rax
call fcn.18006d0ec
mov edx, 6
lea rcx, [rbp + 0x350]
mov r8, rax
call fcn.18000f2e0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.180009264
mov rdx, rax
lea rcx, [rbp + 0x150]
mov r8, rbx
call fcn.180009044
mov rdx, rax
lea rcx, [rbp + 0x710]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp - 0x60]
call fcn.180007448
lea rcx, [rbp + 0x178]
call fcn.180007448
lea rcx, [rbp + 0x730]
call fcn.180007448
test dil, dil
jne 0x18000d915
lea rcx, [rbp + 0x368]
mov edi, r13d
call fcn.18000f2ec
test rax, rax
je 0x18000e47a
mov rbx, r13
mov rdx, rbx
lea rcx, [rbp + 0x368]
call fcn.18000f2e0
mov rcx, rax
lea rdx, [rbp + 0x3a0]
call fcn.180009374
test al, al
jne 0x18000d915
mov rdx, rbx
lea rcx, [rbp + 0x368]
call fcn.18000f2e0
mov rcx, rax
lea rdx, [rbp + 0x468]
call fcn.180009374
test al, al
jne 0x18000d915
mov rdx, rbx
lea rcx, [rbp + 0x368]
call fcn.18000f2e0
mov rcx, rax
lea rdx, [rbp + 0x448]
call fcn.180009374
test al, al
jne 0x18000d915
add edi, r12d
lea rcx, [rbp + 0x368]
movsxd rbx, edi
call fcn.18000f2ec
cmp rbx, rax
jb 0x18000d893
jmp 0x18000e47a
lea rcx, [rbp + 0x430]
mov dword [rbp + 0x170], r13d
call fcn.18000f2ec
test rax, rax
je 0x18000e47a
mov r8d, 6
lea rdx, [rbp + 0x150]
call fcn.18006d0ec
mov rdx, rax
lea rcx, [rbp + 0x3d8]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
mov rdx, r13
lea rcx, [rbp + 0x430]
call fcn.18000f2e0
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.180007504
lea r8, [rbp + 0x3d8]
mov rdi, rax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp - 0x38]
call fcn.1800092d0
mov rdx, r13
lea rcx, [rbp + 0x6c8]
mov rbx, rax
call fcn.18000f2e0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180007504
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.18001738c
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x150]
call fcn.1800092d0
mov rcx, rax
call fcn.180016ff8
lea rcx, [rbp + 0x150]
mov bl, al
call fcn.180007448
test bl, bl
je 0x18000ea81
xor r12b, r12b
test r14b, r14b
jne 0x18000dc69
lea rdx, [rbp + 0x150]
call fcn.18007c12c
mov rdx, rax
lea rcx, [rbp + 0x788]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rdx, [rsp + 0x78]
call fcn.18007ca44
lea rdx, [rbp + 0x788]
mov rdi, rax
lea rcx, [rbp - 0x38]
call fcn.180007504
lea r8, [rbp + 0x3d8]
mov rbx, rax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp - 0x10]
call fcn.1800092d0
mov rdx, rax
lea rcx, [rbp + 0x150]
mov r9, rdi
mov r8, rbx
call fcn.180005c24
mov rdx, rax
lea rcx, [rbp + 0x768]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x768]
call fcn.18000fcd8
test al, al
je 0x18000dc8d
lea rcx, [rbp + 0x178]
call fcn.180005714
lea rdx, [rsp + 0x78]
call fcn.18007ca44
lea rdx, [rbp + 0x768]
mov rsi, rax
lea rcx, [rbp - 0x38]
call fcn.180007504
lea rdx, [rbp + 0x788]
mov rdi, rax
lea rcx, [rbp - 0x10]
call fcn.180007504
lea r8, [rbp + 0x3d8]
mov rbx, rax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x18]
call fcn.1800092d0
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp + 0x178]
mov r8, rbx
call fcn.180005764
mov eax, 1
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x1f8]
mov r14b, al
lea rcx, [rbp + 0x150]
mov r12b, al
call fcn.1800092d0
mov rdx, rax
lea rcx, [rbp + 0x640]
call fcn.1800074a4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x508]
call fcn.180005714
lea rcx, [rbp + 0x508]
call fcn.1800061a8
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x150]
call fcn.18000ebb0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.180015d7c
mov rdx, rax
lea rcx, [rbp + 0x508]
call fcn.18000eb20
lea rcx, [rbp - 0x60]
call fcn.180006150
lea rdx, [rbp + 0x508]
lea rcx, [rbp + 0x150]
call fcn.18000ebb0
mov rdx, rax
call fcn.18006d248
mov rdx, qword [rbp + 0x510]
mov rcx, rax
mov rdi, qword [rbp + 0x508]
sub rdx, rdi
call fcn.1800185a0
mov qword [rbp - 0x40], rax
mov rbx, rax
test rax, rax
je 0x18000ea1f
mov rax, qword [rbp + 0x178]
lea rdx, [rbp + 0xa8]
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x510], rdi
call fcn.18007d4f0
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
mov rcx, rbx
call fcn.180018d18
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x120], rax
mov r15, rax
call fcn.180007448
test r15, r15
je 0x18000ea1f
lea rcx, [rbp + 0x508]
call fcn.180006150
lea rcx, [rbp + 0x178]
call fcn.180006150
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x620]
call fcn.1800073d8
jmp 0x18000dc8d
mov rax, qword [rbp - 0x40]
mov edx, 1
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x120], r15
cmp r14b, dl
jne 0x18000dc8d
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x120], r15
lea rcx, [rbp + 0x710]
call fcn.1800073c8
mov rcx, rax
call fcn.180016350
lea rcx, [rbp + 0x730]
call fcn.180005714
lea rcx, [rbp + 0x730]
call fcn.1800061a8
lea rdx, [rbp + 0x710]
lea rcx, [rsp + 0x78]
call fcn.180007504
lea rdx, [rbp - 0x38]
mov rsi, rax
call fcn.18007ca44
lea rdx, [rbp + 0x150]
mov rdi, rax
call fcn.18006d7ec
mov rdx, r13
lea rcx, [rbp + 0x6e0]
mov r8, rax
call fcn.18000f2e0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180009264
lea r8, [rbp + 0x3d8]
mov rbx, rax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x18]
call fcn.1800092d0
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp - 0x60]
mov r8, rbx
call fcn.1800046e8
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.18000f31c
lea rcx, [rbp - 0x60]
call fcn.180007098
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x730]
xor r13d, r13d
call fcn.18000f2ec
test rax, rax
je 0x18000de35
xor edi, edi
lea r15d, [r13 + 1]
mov rdx, rdi
lea rcx, [rbp + 0x730]
call fcn.18000f2e0
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.180007504
mov rcx, rax
call fcn.180015418
test al, al
jne 0x18000de13
lea rcx, [rbp + 0x198]
xor esi, esi
call fcn.18000f2ec
test rax, rax
je 0x18000de13
xor ebx, ebx
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.18000f2e0
mov rcx, rax
call fcn.18000fc90
test al, al
jne 0x18000dde7
add esi, r15d
lea rcx, [rbp + 0x198]
movsxd rbx, esi
call fcn.18000f2ec
cmp rbx, rax
jb 0x18000ddb3
jmp 0x18000de13
mov rdx, rdi
lea rcx, [rbp + 0x730]
call fcn.18000f2e0
mov rdx, rbx
lea rcx, [rbp + 0x198]
mov r8, rax
call fcn.18000f2e0
mov rcx, rax
mov rdx, r8
call fcn.1800073d8
add r13d, r15d
lea rcx, [rbp + 0x730]
movsxd rdi, r13d
call fcn.18000f2ec
cmp rdi, rax
jb 0x18000dd76
mov r15, qword [rbp + 0x120]
lea rcx, [rbp + 0x7b0]
call fcn.180005754
lea rdx, [rbp + 0x508]
call fcn.18008e5bc
lea rdx, [rbp + 0x178]
mov rbx, rax
call fcn.18006a7e0
mov r8, rax
lea rdx, [rbp + 0x710]
lea rcx, [rbp - 0x60]
call fcn.180009264
mov rdx, rax
lea rcx, [rbp + 0x150]
mov r8, rbx
call fcn.180009044
mov rcx, rax
call fcn.1800073c8
mov rdx, rax
lea rcx, [rbp + 0x7b0]
mov r8d, 2
call fcn.180006eec
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp - 0x60]
call fcn.180007448
lea rcx, [rbp + 0x178]
call fcn.180007448
lea rcx, [rbp + 0x508]
call fcn.180007448
lea rcx, [rbp + 0x7b0]
call fcn.18000eb14
test al, al
je 0x18000e007
lea rdx, [rsp + 0x78]
call fcn.18006be1c
lea rdx, [rbp - 0x38]
mov rsi, rax
call fcn.18006a7e0
lea rdx, [rbp - 0x10]
mov rdi, rax
call fcn.18008eb00
mov r8d, 6
lea rdx, [rbp + 0x18]
mov rbx, rax
call fcn.18006d0ec
mov rdx, rax
lea rcx, [rbp + 0x68]
mov r8, rbx
call fcn.180009044
mov rdx, rax
lea r8, [rbp + 0x2d8]
lea rcx, [rbp + 0x88]
call fcn.1800091f8
mov rdx, rax
lea rcx, [rbp + 0x508]
mov r8, rdi
call fcn.180009044
mov rdx, rax
lea r8, [rbp + 0x3a0]
lea rcx, [rbp + 0x178]
call fcn.1800091f8
mov rdx, rax
lea rcx, [rbp - 0x60]
mov r8, rsi
call fcn.180009044
mov r8, rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x118]
call fcn.18006f2fc
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.18000fbf4
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp - 0x60]
call fcn.180007448
lea rcx, [rbp + 0x178]
call fcn.180007448
lea rcx, [rbp + 0x508]
call fcn.180007448
lea rcx, [rbp + 0x88]
call fcn.180007448
lea rcx, [rbp + 0x68]
call fcn.180007448
lea rcx, [rbp + 0x18]
call fcn.180007448
lea rcx, [rbp - 0x10]
call fcn.180007448
lea rcx, [rbp - 0x38]
call fcn.180007448
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rcx, [rbp + 0x7b0]
call fcn.180006e38
mov r13d, 1
cmp r14b, r13b
jne 0x18000e1ca
cmp r12b, r13b
jne 0x18000e1ca
lea rdx, [rsp + 0x78]
call fcn.18007e0a8
lea rdx, [rbp - 0x38]
mov rsi, rax
call fcn.18007ca44
lea rdx, [rbp - 0x10]
mov rdi, rax
call fcn.18007d8c4
lea r8, [rbp + 0x3d8]
mov rbx, rax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x18]
call fcn.1800092d0
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp - 0x60]
mov r8, rbx
call fcn.1800046e8
mov rdx, rax
lea rcx, [rbp + 0x698]
call fcn.18000f31c
lea rcx, [rbp - 0x60]
call fcn.180007098
lea rdx, [rbp + 0x150]
call fcn.18006a7e0
lea r8d, [r13 + 4]
mov rsi, rax
lea rdx, [rbp + 0x88]
call fcn.18006d0ec
lea rdx, [rbp + 0x68]
mov rdi, rax
call fcn.18006a7e0
lea rcx, [rbp + 0x18]
mov rbx, rax
call fcn.1800142e8
mov rdx, rax
lea rcx, [rbp - 0x10]
mov r8, rbx
call fcn.180009044
mov rdx, rax
lea rcx, [rbp - 0x38]
mov r8, rdi
call fcn.180009044
mov rdx, rax
lea rcx, [rsp + 0x78]
mov r8, rsi
call fcn.180009044
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rcx, [rbp - 0x38]
call fcn.180007448
lea rcx, [rbp - 0x10]
call fcn.180007448
lea rcx, [rbp + 0x18]
call fcn.180007448
lea rcx, [rbp + 0x68]
call fcn.180007448
lea rcx, [rbp + 0x88]
call fcn.180007448
lea rcx, [rbp + 0x150]
call fcn.180007448
lea rcx, [rbp + 0x380]
call fcn.1800073c8
mov rcx, rax
call fcn.180016350
lea rdx, [rbp + 0x380]
lea rcx, [rsp + 0x78]
call fcn.180007504
lea rdx, [rbp - 0x38]
mov rsi, rax
call fcn.18007ca44
lea rdx, [rbp - 0x10]
mov rdi, rax
call fcn.18007f1a8
mov rbx, rax
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x18]
call fcn.1800092d0
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp - 0x60]
mov r8, rbx
call fcn.1800046e8
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.18000f31c
lea rcx, [rbp - 0x60]
call fcn.180007098
lea rcx, [rbp + 0x128]
call fcn.1800074ec
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp - 0x38]
call fcn.180007504
lea rdx, [rbp + 0x710]
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.180007504
mov rdx, rax
lea rcx, [rsp + 0x78]
mov r9, rbx
call fcn.1800144ac
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
cmp r14b, r13b
jne 0x18000e3df
cmp r12b, r13b
jne 0x18000e3df
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x5a0]
call fcn.1800073d8
lea rdx, [rsp + 0x78]
call fcn.18007fd30
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rdx, [rbp - 0x10]
call fcn.18007b6e8
lea r8, [rbp + 0x4e8]
mov rbx, rax
lea rdx, [rbp + 0x380]
lea rcx, [rbp - 0x38]
call fcn.1800092d0
mov rdx, rax
lea rcx, [rsp + 0x78]
mov r8, rbx
call fcn.180009044
mov rdx, rax
lea rcx, [rbp + 0x4c8]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rcx, [rbp - 0x38]
call fcn.180007448
lea rcx, [rbp - 0x10]
call fcn.180007448
lea rdx, [0x1802b282b]
lea rcx, [rsp + 0x78]
call fcn.1800074c4
lea rdx, [rbp + 0x5a0]
mov rdi, rax
lea rcx, [rbp - 0x38]
call fcn.180007504
lea rdx, [rbp + 0x4c8]
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.180007504
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.180015ee4
lea rdx, [rbp + 0x18]
call fcn.18007babc
mov r8d, 3
lea rdx, [rbp - 0x10]
mov rbx, rax
call fcn.18006d0ec
mov r8, rax
lea rdx, [rbp + 0x380]
lea rcx, [rbp - 0x38]
call fcn.180009264
mov rdx, rax
lea rcx, [rsp + 0x78]
mov r8, rbx
call fcn.180009044
mov rdx, rax
lea rcx, [rbp + 0x580]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rcx, [rbp - 0x38]
call fcn.180007448
lea rcx, [rbp - 0x10]
call fcn.180007448
lea rcx, [rbp + 0x18]
call fcn.180007448
call fcn.18005ca50
lea rdx, [rbp + 0x4c8]
lea rcx, [rbp - 0x38]
call fcn.180007504
lea rdx, [rsp + 0x78]
mov rdi, rax
call fcn.18007b6e8
mov r8, rax
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp - 0x10]
call fcn.180009264
lea rdx, [rbp + 0x580]
mov rbx, rax
lea rcx, [rbp + 0x18]
call fcn.180007504
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.180003b24
lea rcx, [rsp + 0x78]
call fcn.180007448
test r12b, r12b
jne 0x18000e416
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x1f8]
lea rcx, [rsp + 0x78]
call fcn.1800092d0
mov rcx, rax
call fcn.1800073c8
mov rcx, rax
call fcn.18005c724
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rcx, [rbp + 0x730]
call fcn.18000f2f8
lea rcx, [rbp + 0x128]
call fcn.180007448
lea rcx, [rbp + 0x7b0]
call fcn.180005724
lea rcx, [rbp + 0x730]
call fcn.180007098
mov r12d, dword [rbp + 0x170]
lea rcx, [rbp + 0x430]
add r12d, r13d
mov dword [rbp + 0x170], r12d
movsxd r13, r12d
call fcn.18000f2ec
cmp r13, rax
jb 0x18000d931
mov esi, dword [rsp + 0x60]
xor r13d, r13d
lea r12d, [r13 + 1]
lea rcx, [rbp + 0x350]
call fcn.18000f2f8
lea rcx, [rbp + 0x6c8]
call fcn.18000f2f8
lea rcx, [rbp + 0x368]
call fcn.18000f2f8
lea rcx, [rbp + 0x430]
call fcn.18000f2f8
lea rcx, [rbp + 0x6e0]
call fcn.18000f2f8
lea rcx, [rbp + 0x6e0]
call fcn.180007098
lea rcx, [rbp + 0x430]
call fcn.180007098
lea rcx, [rbp + 0x368]
call fcn.180007098
lea rcx, [rbp + 0x6c8]
call fcn.180007098
lea rcx, [rbp + 0x350]
call fcn.180007098
add esi, r12d
lea rcx, [rbp + 0x338]
mov dword [rsp + 0x60], esi
movsxd rbx, esi
call fcn.18000f2ec
cmp rbx, rax
jb 0x18000d47e
cmp r14b, r12b
jne 0x18000e79a
lea rcx, [rbp + 0x198]
mov ebx, r13d
call fcn.18000f2ec
test rax, rax
je 0x18000e55c
mov rdx, r13
lea rcx, [rbp + 0x198]
call fcn.18000f2e0
mov rcx, rax
call fcn.18000fcd8
add ebx, r12d
lea rcx, [rbp + 0x198]
movsxd rdx, ebx
call fcn.18000f2ec
cmp rdx, rax
jb 0x18000e531
lea rcx, [rbp + 0x198]
mov edi, r13d
call fcn.18000f2ec
test rax, rax
je 0x18000e5c3
mov rbx, r13
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.18000f2e0
mov rcx, rax
call fcn.18000fcd8
test al, al
je 0x18000e5ac
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.18000f2e0
mov rdx, rax
lea rcx, [rbp + 0x6f8]
call fcn.180007054
add edi, r12d
lea rcx, [rbp + 0x198]
movsxd rbx, edi
call fcn.18000f2ec
cmp rbx, rax
jb 0x18000e573
lea rdx, [rbp - 0x38]
call fcn.180081200
lea rdx, [rbp + 0x6f8]
mov rbx, rax
lea rcx, [rbp + 0x150]
call fcn.18000f3bc
mov r8, rax
lea rdx, [rsp + 0x78]
mov r9, rbx
call fcn.18007be90
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rdx, [rbp - 0x10]
call fcn.180081200
lea rdx, [rbp + 0x698]
mov rbx, rax
lea rcx, [rbp + 0x150]
call fcn.18000f3bc
mov r8, rax
lea rdx, [rsp + 0x78]
mov r9, rbx
call fcn.18007be90
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rdx, [rbp + 0x18]
call fcn.180081200
lea rdx, [rbp + 0x6b0]
mov rbx, rax
lea rcx, [rbp + 0x150]
call fcn.18000f3bc
mov r8, rax
lea rdx, [rsp + 0x78]
mov r9, rbx
call fcn.18007be90
mov rdx, rax
lea rcx, [rbp + 0x5c0]
call fcn.1800074a4
lea rcx, [rsp + 0x78]
call fcn.180007448
lea rcx, [rbp + 0x5c0]
call fcn.1800073c8
lea rcx, [rbp + 0x5e0]
mov qword [rsp + 0x68], rax
call fcn.1800073c8
lea rcx, [rbp + 0x600]
mov qword [rsp + 0x70], rax
call fcn.1800073c8
lea rcx, [rbp + 0x580]
mov qword [rbp - 0x18], rax
call fcn.1800073c8
lea rcx, [rbp + 0x5a0]
mov r13, rax
call fcn.1800073c8
lea rcx, [rbp + 0x4c8]
mov r12, rax
call fcn.1800073c8
lea rcx, [rbp + 0x380]
mov r15, rax
call fcn.1800073c8
lea rcx, [rbp + 0x620]
mov r14, rax
call fcn.1800073c8
lea rcx, [rbp + 0x4e8]
mov rsi, rax
call fcn.1800073c8
lea rcx, [0x1802ea4c8]
mov rdi, rax
call fcn.1800073c8
lea rcx, [rbp + 0x640]
mov rbx, rax
call fcn.1800073c8
mov rcx, rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov r9, rsi
mov rax, qword [rbp - 0x18]
mov r8, rdi
mov qword [rsp + 0x40], rax
mov rdx, rbx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
call qword [rbp + 0x120]
mov rcx, qword [rbp - 0x40]
call fcn.180018ea0
lea rcx, [rbp + 0x6f8]
call fcn.18000f2f8
lea rcx, [rbp + 0x338]
call fcn.18000f2f8
lea rcx, [rbp + 0x198]
call fcn.18000f2f8
lea rcx, [rbp + 0x698]
call fcn.18000f2f8
lea rcx, [rbp + 0x6b0]
call fcn.18000f2f8
mov rcx, qword [rbp - 0x68]
call fcn.18005c6a0
lea rcx, [rbp + 0x6f8]
call fcn.180007098
lea rcx, [rbp + 0x6b0]
call fcn.180007098
lea rcx, [rbp + 0x698]
call fcn.180007098
lea rcx, [rbp + 0x198]
call fcn.180007098
lea rcx, [rbp + 0x768]
call fcn.180007448
lea rcx, [rbp + 0x788]
call fcn.180007448
lea rcx, [rbp + 0x3d8]
call fcn.180007448
lea rcx, [rbp + 0x710]
call fcn.180007448
lea rcx, [rbp + 0x660]
call fcn.180006150
lea rcx, [rbp + 0x750]
call fcn.180006150
lea rcx, [rbp + 0x298]
call fcn.180007448
lea rcx, [rbp + 0x1f8]
call fcn.180007448
lea rcx, [rbp + 0x678]
call fcn.180007448
lea rcx, [rbp + 0x448]
call fcn.180007448
lea rcx, [rbp + 0x468]
call fcn.180007448
lea rcx, [rbp + 0x3a0]
call fcn.180007448
lea rcx, [rbp + 0x1b0]
call fcn.180007448
lea rcx, [rbp + 0x528]
call fcn.180006150
lea rcx, [rbp + 0x488]
call fcn.180007448
lea rcx, [rbp + 0x338]
call fcn.180007098
lea rcx, [rbp + 0x3c0]
call fcn.180007098
lea rcx, [rbp + 0x418]
call fcn.180007098
lea rcx, [rbp + 0x2b8]
call fcn.180007448
lea rcx, [rbp + 0x2f8]
call fcn.180007448
lea rcx, [rbp + 0x2d8]
call fcn.180007448
lea rcx, [rbp + 0x318]
call fcn.180007448
lea rcx, [rbp + 0x278]
call fcn.180007448
lea rcx, [rbp + 0x258]
call fcn.180007448
lea rcx, [rbp + 0x238]
call fcn.180007448
lea rcx, [rbp + 0x218]
call fcn.180007448
lea rcx, [rbp + 0x1d0]
call fcn.180007448
lea rcx, [rbp + 0x3f8]
call fcn.180007448
lea rcx, [rbp + 0x540]
call fcn.180007448
lea rcx, [rbp + 0x4a8]
call fcn.180007448
lea rcx, [rbp + 0x560]
call fcn.180007448
lea rcx, [rbp + 0x380]
call fcn.180007448
lea rcx, [rbp + 0x5c0]
call fcn.180007448
lea rcx, [rbp + 0x5e0]
call fcn.180007448
lea rcx, [rbp + 0x600]
call fcn.180007448
lea rcx, [rbp + 0x580]
call fcn.180007448
lea rcx, [rbp + 0x5a0]
call fcn.180007448
lea rcx, [rbp + 0x4c8]
call fcn.180007448
lea rcx, [rbp + 0x620]
call fcn.180007448
lea rcx, [rbp + 0x4e8]
call fcn.180007448
lea rcx, [rbp + 0x640]
call fcn.180007448
mov rcx, qword [rbp + 0x14e0]
xor rcx, rsp
call fcn.180219840
lea r11, [rsp + 0x15f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, qword [rbp - 0x68]
call fcn.18005c6a0
lea rcx, [rbp + 0x508]
call fcn.180006150
lea rcx, [rbp + 0x178]
call fcn.180006150
lea rcx, [rbp + 0x6e0]
call fcn.180007098
lea rcx, [rbp + 0x430]
call fcn.180007098
lea rcx, [rbp + 0x368]
call fcn.180007098
lea rcx, [rbp + 0x6c8]
call fcn.180007098
lea rcx, [rbp + 0x350]
call fcn.180007098
jmp 0x18000e7d3
mov rcx, qword [rbp - 0x68]
call fcn.18005c6a0
jmp 0x18000ea40
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
xor ecx, ecx
call fcn.180222ed8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3
call fcn.1802218a8
int3