Function at 0x18000aa70
Capabilities:
Get hostname
Link many functions at runtime
Reference wmi statements

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x958]
sub rsp, 0xa30
mov rax, qword [0x1802e8850]
xor rax, rsp
mov qword [rbp + 0x920], rax
xor r13d, r13d
lea rsi, [0x1802b182b]
mov dword [rbp + 0x1f0], r13d
lea rcx, [rbp + 0x1d0]
mov rdx, rsi
mov qword [rbp + 0x660], r13
mov edi, r13d
mov qword [rbp + 0x670], r13
lea ebx, [r13 + 0xf]
mov qword [rbp + 0x640], r13
mov qword [rbp + 0x678], rbx
mov qword [rbp + 0x658], rbx
mov qword [rbp + 0x500], rbx
mov qword [rbp + 0x638], rbx
mov qword [rbp + 0x4e0], rbx
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x558], rbx
mov qword [rbp + 0x618], rbx
mov qword [rbp + 0x5f8], rbx
mov qword [rbp + 0x5d8], rbx
mov qword [rbp + 0x3d8], rbx
mov qword [rbp + 0x5b8], rbx
mov qword [rbp + 0x330], rbx
mov qword [rbp + 0x598], rbx
mov qword [rbp + 0x448], rbx
mov qword [rbp + 0x1e8], rbx
mov qword [rbp + 0x650], r13
mov qword [rbp + 0x4e8], r13
mov qword [rbp + 0x4f8], r13
mov qword [rbp + 0x620], r13
mov qword [rbp + 0x630], r13
mov qword [rbp + 0x4c8], r13
mov qword [rbp + 0x4d8], r13
mov qword [rbp + 0x560], r13
mov qword [rbp + 0x570], r13
mov qword [rbp + 0x540], r13
mov qword [rbp + 0x550], r13
mov qword [rbp + 0x600], r13
mov qword [rbp + 0x610], r13
mov qword [rbp + 0x5e0], r13
mov qword [rbp + 0x5f0], r13
mov qword [rbp + 0x5c0], r13
mov qword [rbp + 0x5d0], r13
mov qword [rbp + 0x3c0], r13
mov qword [rbp + 0x3d0], r13
mov qword [rbp + 0x5a0], r13
mov qword [rbp + 0x5b0], r13
mov qword [rbp + 0x318], r13
mov qword [rbp + 0x328], r13
mov qword [rbp + 0x580], r13
mov qword [rbp + 0x590], r13
mov qword [rbp + 0x430], r13
mov qword [rbp + 0x440], r13
mov qword [rbp + 0x1d0], r13
mov qword [rbp + 0x1e0], r13
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x238], r13
lea rcx, [rbp + 0x238]
mov qword [rbp + 0x248], r13
mov qword [rbp + 0x250], rbx
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x258], r13
lea rcx, [rbp + 0x258]
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], rbx
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x298], r13
lea rcx, [rbp + 0x298]
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], rbx
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x278], r13
lea rcx, [rbp + 0x278]
mov qword [rbp + 0x288], r13
mov qword [rbp + 0x290], rbx
call fcn.180008160
mov qword [rbp + 0x338], r13
mov rdx, rsi
mov qword [rbp + 0x348], r13
lea rcx, [rbp + 0x338]
mov qword [rbp + 0x350], rbx
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x2b8], r13
lea rcx, [rbp + 0x2b8]
mov qword [rbp + 0x2c8], r13
mov qword [rbp + 0x2d0], rbx
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x2f8], r13
lea rcx, [rbp + 0x2f8]
mov qword [rbp + 0x308], r13
mov qword [rbp + 0x310], rbx
call fcn.180008160
mov rdx, rsi
mov qword [rbp + 0x2d8], r13
lea rcx, [rbp + 0x2d8]
mov qword [rbp + 0x2e8], r13
mov qword [rbp + 0x2f0], rbx
call fcn.180008160
xorps xmm0, xmm0
mov qword [rbp + 0x460], r13
xorps xmm1, xmm1
mov qword [rbp + 0x408], r13
movdqu xmmword [rbp + 0x450], xmm0
mov esi, r13d
mov qword [rbp + 0x368], r13
movdqu xmmword [rbp + 0x3f8], xmm1
movdqu xmmword [rbp + 0x358], xmm0
call fcn.18006263c
cmp qword [0x1802e9700], 0x10
lea rbx, [0x1802e96e8]
mov rcx, rbx
cmovae rcx, qword [0x1802e96e8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
jne 0x18000adaa
mov r12, r13
mov qword [rbp - 0x48], r13
jmp 0x18000adec
cmp qword [0x1802e9a60], 0x10
lea rdx, [0x1802e9a48]
mov rcx, r14
cmovae rdx, qword [0x1802e9a48]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x18000adda
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x18000ada1
call rax
mov rcx, r14
mov qword [rbp - 0x48], rax
mov r12, rax
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x150]
mov qword [rbp - 0x18], r13
call fcn.1800810e8
mov r14, rax
cmp qword [rax + 0x18], 0x10
jb 0x18000ae09
mov r14, qword [rax]
cmp qword [0x1802e9700], 0x10
mov rcx, rbx
cmovae rcx, qword [0x1802e96e8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, rax
test rax, rax
je 0x18000ae64
cmp qword [0x1802e96c0], 0x10
lea rdx, [0x1802e96a8]
mov rcx, rax
cmovae rdx, qword [0x1802e96a8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000ae5b
mov r8, r14
mov edx, 1
xor ecx, ecx
call rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdx, qword [rbp + 0x168]
mov r15d, 0x10
mov r14d, 0x1000
cmp rdx, r15
jb 0x18000aeac
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000aea7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e87b
call fcn.1800995a0
cmp qword [0x1802e9700], r15
cmovae rbx, qword [0x1802e96e8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x18000aefd
cmp qword [0x1802e9d40], r15
lea rdx, [0x1802e9d28]
mov rcx, rax
cmovae rdx, qword [0x1802e9d28]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x18000b433
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x150]
call fcn.180088a84
lea rcx, [rbp + 0x1d0]
cmp rcx, rax
je 0x18000af27
mov r8b, r13b
lea rcx, [rbp + 0x1d0]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
mov ebx, 0x1000
cmp rdx, r15
jb 0x18000af68
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000af63
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e881
call fcn.1800995a0
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.1800841e0
lea rcx, [rbp + 0x238]
cmp rcx, rax
je 0x18000af99
mov r8b, r13b
lea rcx, [rbp + 0x238]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000afd5
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000afd0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e887
call fcn.1800995a0
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.180086da4
lea rcx, [rbp + 0x258]
cmp rcx, rax
je 0x18000b006
mov r8b, r13b
lea rcx, [rbp + 0x258]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000b042
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b03d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e88d
call fcn.1800995a0
lea rdx, [rbp + 0x150]
call fcn.180088d74
lea rcx, [rbp + 0x298]
cmp rcx, rax
je 0x18000b06c
mov r8b, r13b
lea rcx, [rbp + 0x298]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000b0a8
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b0a3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e893
call fcn.1800995a0
lea rdx, [rbp + 0x150]
call fcn.18008dee8
lea rcx, [rbp + 0x278]
cmp rcx, rax
je 0x18000b0d2
mov r8b, r13b
lea rcx, [rbp + 0x278]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000b10e
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b109
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e899
call fcn.1800995a0
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.18008968c
lea rcx, [rbp + 0x338]
cmp rcx, rax
je 0x18000b13f
mov r8b, r13b
lea rcx, [rbp + 0x338]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000b17b
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b176
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e89f
call fcn.1800995a0
lea rdx, [rbp + 0x150]
call fcn.18008d640
lea rcx, [rbp + 0x2f8]
cmp rcx, rax
je 0x18000b1a5
mov r8b, r13b
lea rcx, [rbp + 0x2f8]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000b1e1
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b1dc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8a5
call fcn.1800995a0
lea rdx, [rbp + 0x150]
call fcn.18008de74
lea rcx, [rbp + 0x2d8]
cmp rcx, rax
je 0x18000b20b
mov r8b, r13b
lea rcx, [rbp + 0x2d8]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000b247
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b242
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8ab
call fcn.1800995a0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x1fffff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18000b302
lea rcx, [0x1802b3900]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.ZwQueryInformationProcess
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, 0x30
mov qword [rsp + 0x20], r13
lea r8, [rbp + 0x108]
xor edx, edx
mov rcx, rbx
call rax
test eax, eax
js 0x18000b2f9
mov edx, dword [rbp + 0x110]
lea rax, [rbp + 0x140]
add edx, 0x68
mov qword [rbp + 0x140], r13
mov r9d, 2
mov word [rbp + 0x170], r13w
lea r8, [rbp + 0x170]
mov qword [rsp + 0x20], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x18000b2f9
cmp qword [rbp + 0x140], 2
jne 0x18000b2f9
cmp word [rbp + 0x170], 0x70
je 0x18000e8b1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [0x1802e9a20], r15
lea r14, [0x1802e9a08]
mov rcx, r14
cmovae rcx, qword [0x1802e9a08]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x18000b35c
cmp qword [0x1802e9660], r15
lea rdx, [0x1802e9648]
mov rcx, rax
cmovae rdx, qword [0x1802e9648]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000b353
xor edx, edx
xor ecx, ecx
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp qword [0x1802e9a20], r15
cmovae r14, qword [0x1802e9a08]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x18000b3d2
cmp qword [0x1802e98c0], r15
lea rdx, [0x1802e98a8]
mov rcx, rax
cmovae rdx, qword [0x1802e98a8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000b3c9
mov qword [rsp + 0x40], r13
xor r9d, r9d
mov dword [rsp + 0x38], r13d
xor r8d, r8d
mov qword [rsp + 0x30], r13
or edx, 0xffffffff
mov dword [rsp + 0x28], 3
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rax, [rbp + 0x100]
mov qword [rbp + 0x100], r13
lea r9, [0x1802a46d0]
mov qword [rsp + 0x20], rax
lea rcx, [0x1802a46e0]
call fcn.18005c718
cmp qword [rbp + 0x2b0], r15
lea rdx, [rbp + 0x298]
lea rcx, [rsp + 0x60]
mov qword [rbp + 0xf0], r13
cmovae rdx, qword [rbp + 0x298]
call fcn.18000a0f0
mov rdx, qword [rax]
test rdx, rdx
je 0x18000bae8
mov rdx, qword [rdx]
jmp 0x18000baeb
call rax
mov rcx, r14
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp ebx, 0xb7
jne 0x18000aefd
mov rcx, r12
call fcn.18005c470
lea rcx, [rbp + 0x358]
call fcn.180007078
lea rcx, [rbp + 0x3f8]
call fcn.180007078
lea rcx, [rbp + 0x450]
call fcn.180007078
mov rdx, qword [rbp + 0x2f0]
mov ebx, 0x1000
cmp rdx, r15
jb 0x18000b4b9
mov rcx, qword [rbp + 0x2d8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b4b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x310]
mov edi, 0xf
mov qword [rbp + 0x2e8], r13
mov qword [rbp + 0x2f0], rdi
mov byte [rbp + 0x2d8], r13b
cmp rdx, r15
jb 0x18000b50f
mov rcx, qword [rbp + 0x2f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b50a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x2d0]
mov qword [rbp + 0x308], r13
mov qword [rbp + 0x310], rdi
mov byte [rbp + 0x2f8], r13b
cmp rdx, r15
jb 0x18000b560
mov rcx, qword [rbp + 0x2b8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b55b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x350]
mov qword [rbp + 0x2c8], r13
mov qword [rbp + 0x2d0], rdi
mov byte [rbp + 0x2b8], r13b
cmp rdx, r15
jb 0x18000b5b1
mov rcx, qword [rbp + 0x338]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b5ac
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x290]
mov qword [rbp + 0x348], r13
mov qword [rbp + 0x350], rdi
mov byte [rbp + 0x338], r13b
cmp rdx, r15
jb 0x18000b602
mov rcx, qword [rbp + 0x278]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b5fd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x2b0]
mov qword [rbp + 0x288], r13
mov qword [rbp + 0x290], rdi
mov byte [rbp + 0x278], r13b
cmp rdx, r15
jb 0x18000b653
mov rcx, qword [rbp + 0x298]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b64e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x270]
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], rdi
mov byte [rbp + 0x298], r13b
cmp rdx, r15
jb 0x18000b6a4
mov rcx, qword [rbp + 0x258]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b69f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x250]
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], rdi
mov byte [rbp + 0x258], r13b
cmp rdx, r15
jb 0x18000b6f5
mov rcx, qword [rbp + 0x238]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b6f0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x1e8]
mov qword [rbp + 0x248], r13
mov qword [rbp + 0x250], rdi
mov byte [rbp + 0x238], r13b
cmp rdx, r15
jb 0x18000b746
mov rcx, qword [rbp + 0x1d0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b741
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x448]
mov qword [rbp + 0x1e0], r13
mov qword [rbp + 0x1e8], rdi
mov byte [rbp + 0x1d0], r13b
cmp rdx, r15
jb 0x18000b797
mov rcx, qword [rbp + 0x430]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b792
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x598]
cmp rdx, r15
jb 0x18000b7d3
mov rcx, qword [rbp + 0x580]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b7ce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x330]
cmp rdx, r15
jb 0x18000b80f
mov rcx, qword [rbp + 0x318]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b80a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x5b8]
cmp rdx, r15
jb 0x18000b84b
mov rcx, qword [rbp + 0x5a0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b846
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x3d8]
cmp rdx, r15
jb 0x18000b887
mov rcx, qword [rbp + 0x3c0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b882
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x5d8]
cmp rdx, r15
jb 0x18000b8c3
mov rcx, qword [rbp + 0x5c0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b8be
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x5f8]
cmp rdx, r15
jb 0x18000b8ff
mov rcx, qword [rbp + 0x5e0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b8fa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x618]
cmp rdx, r15
jb 0x18000b93b
mov rcx, qword [rbp + 0x600]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b936
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x558]
cmp rdx, r15
jb 0x18000b977
mov rcx, qword [rbp + 0x540]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b972
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x578]
cmp rdx, r15
jb 0x18000b9b3
mov rcx, qword [rbp + 0x560]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b9ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x4e0]
cmp rdx, r15
jb 0x18000b9ef
mov rcx, qword [rbp + 0x4c8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000b9ea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x638]
cmp rdx, r15
jb 0x18000ba2b
mov rcx, qword [rbp + 0x620]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ba26
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x500]
cmp rdx, r15
jb 0x18000ba67
mov rcx, qword [rbp + 0x4e8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ba62
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x658]
cmp rdx, r15
jb 0x18000baa3
mov rcx, qword [rbp + 0x640]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ba9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x678]
cmp rdx, r15
jb 0x18000e7d2
mov rcx, qword [rbp + 0x660]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000bade
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
jmp 0x18000e7d2
mov rdx, r13
mov rcx, qword [rbp + 0x100]
lea r8, [rbp + 0xf0]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r13
xor r8d, r8d
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [rax + 0x18]
lea rcx, [rsp + 0x60]
call fcn.18000a168
mov rcx, qword [rbp + 0xf0]
call fcn.180060934
cmp qword [rbp + 0x250], r15
lea rdx, [rbp + 0x238]
lea rcx, [rbp - 0x70]
mov qword [rbp + 0xe8], r13
cmovae rdx, qword [rbp + 0x238]
call fcn.18000a0f0
mov rbx, qword [rax]
test rbx, rbx
je 0x18000bb67
mov rbx, qword [rbx]
jmp 0x18000bb6a
mov rbx, r13
cmp qword [rbp + 0x1e8], r15
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 0x1d0]
call fcn.18000a0f0
mov rdx, qword [rax]
test rdx, rdx
je 0x18000bb97
mov rdx, qword [rdx]
jmp 0x18000bb9a
mov rdx, r13
mov rcx, qword [rbp + 0xf0]
lea r8, [rbp + 0xe8]
mov qword [rsp + 0x28], r8
mov r9d, 0x30
mov r8, rbx
mov qword [rsp + 0x20], r13
mov rax, qword [rcx]
call qword [rax + LoadRegTypeLib]
lea rcx, [rsp + 0x60]
call fcn.18000a168
lea rcx, [rbp - 0x70]
call fcn.18000a168
mov rcx, qword [rbp + 0xe8]
mov r14d, 1
mov qword [rbp + 0xf8], r13
mov dword [rbp + 0x148], r13d
test rcx, rcx
je 0x18000bc4c
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xf8]
or edx, 0xffffffff
mov r8d, r14d
call qword [rax + 0x20]
cmp dword [rbp + 0x148], r13d
je 0x18000bc3d
mov rcx, qword [rbp + 0xf8]
add esi, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
jne 0x18000bbf7
jmp 0x18000bc44
mov rcx, qword [rbp + 0xe8]
test esi, esi
jne 0x18000beb9
cmp qword [rbp + 0x290], r15
lea rdx, [rbp + 0x278]
lea rcx, [rsp + 0x60]
mov qword [rbp + 0xf0], r13
cmovae rdx, qword [rbp + 0x278]
call fcn.18000a0f0
mov rcx, qword [rax]
test rcx, rcx
je 0x18000bc80
mov rdx, qword [rcx]
jmp 0x18000bc83
mov rdx, r13
mov rcx, qword [rbp + 0x100]
lea r8, [rbp + 0xf0]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r13
xor r8d, r8d
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [rax + 0x18]
lea rcx, [rsp + 0x60]
call fcn.18000a168
mov rcx, qword [rbp + 0xf0]
call fcn.180060934
cmp qword [rbp + 0x270], r15
lea rdx, [rbp + 0x258]
lea rcx, [rbp - 0x70]
mov qword [rbp + 0xe8], r13
cmovae rdx, qword [rbp + 0x258]
call fcn.18000a0f0
mov rbx, qword [rax]
test rbx, rbx
je 0x18000bcff
mov rbx, qword [rbx]
jmp 0x18000bd02
mov rbx, r13
cmp qword [rbp + 0x1e8], r15
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 0x1d0]
call fcn.18000a0f0
mov rdx, qword [rax]
test rdx, rdx
je 0x18000bd2f
mov rdx, qword [rdx]
jmp 0x18000bd32
mov rdx, r13
mov rcx, qword [rbp + 0xf0]
lea r8, [rbp + 0xe8]
mov qword [rsp + 0x28], r8
mov r9d, 0x30
mov r8, rbx
mov qword [rsp + 0x20], r13
mov rax, qword [rcx]
call qword [rax + LoadRegTypeLib]
lea rcx, [rsp + 0x60]
call fcn.18000a168
lea rcx, [rbp - 0x70]
call fcn.18000a168
mov rcx, qword [rbp + 0xe8]
mov qword [rbp + 0xf8], r13
mov dword [rbp + 0x148], r13d
test rcx, rcx
je 0x18000bdde
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xf8]
or edx, 0xffffffff
mov r8d, r14d
call qword [rax + 0x20]
cmp dword [rbp + 0x148], r13d
je 0x18000bdcf
mov rcx, qword [rbp + 0xf8]
add esi, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
jne 0x18000bd89
jmp 0x18000bdd6
mov rcx, qword [rbp + 0xe8]
test esi, esi
jne 0x18000beb9
lea rdx, str.SELECT__FROM_Win32_VoltageProbe
lea rcx, [rbp - 0x70]
call fcn.18000a0f0
mov rcx, qword [rax]
test rcx, rcx
je 0x18000bdfb
mov rbx, qword [rcx]
jmp 0x18000bdfe
mov rbx, r13
lea rdx, [0x1802b3954]
lea rcx, [rsp + 0x60]
call fcn.18000a0f0
mov rcx, qword [rax]
test rcx, rcx
je 0x18000be1c
mov rdx, qword [rcx]
jmp 0x18000be1f
mov rdx, r13
mov rcx, qword [rbp + 0xf0]
lea r8, [rbp + 0xe8]
mov qword [rsp + 0x28], r8
mov r9d, 0x30
mov r8, rbx
mov qword [rsp + 0x20], r13
mov rax, qword [rcx]
call qword [rax + LoadRegTypeLib]
lea rcx, [rsp + 0x60]
call fcn.18000a168
lea rcx, [rbp - 0x70]
call fcn.18000a168
mov qword [rbp + 0xf8], r13
mov dword [rbp + 0x148], r13d
jmp 0x18000bea4
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xf8]
or edx, 0xffffffff
mov r8d, r14d
call qword [rax + 0x20]
cmp dword [rbp + 0x148], r13d
je 0x18000beb2
mov rcx, qword [rbp + 0xf8]
add esi, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
jne 0x18000be6c
jmp 0x18000beb9
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xf0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.18005c7bc
mov ebx, 0xf
mov qword [rbp + 0x4a8], r13
lea rdx, [0x1802b3958]
mov qword [rbp + 0x4c0], rbx
lea rcx, [rbp + 0x4a8]
mov qword [rbp + 0x4b8], r13
call fcn.180008160
lea rcx, [rbp + 0x150]
call fcn.18001690c
lea rcx, [rbp + 0x2b8]
cmp rcx, rax
je 0x18000bf35
mov r8b, r13b
lea rcx, [rbp + 0x2b8]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
mov r14d, 0x1000
cmp rdx, r15
jb 0x18000bf77
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000bf72
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8b9
call fcn.1800995a0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.18022a450
call fcn.18022a424
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0x138]
call fcn.180067320
xorps xmm0, xmm0
mov qword [rsp + 0x68], r13
xor eax, eax
lea rdx, [rbp + 0x770]
lea rcx, [rsp + 0x68]
mov qword [rbp + 0x538], rax
movups xmmword [rbp + 0x528], xmm0
movdqu xmmword [rsp + 0x78], xmm0
call fcn.180008250
lea rdx, [rbp - 0x68]
call fcn.180066798
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x528]
call fcn.180017054
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x1b0], r13
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], rbx
call fcn.180016c24
lea rcx, [rbp + 0x1b0]
cmp rcx, rax
je 0x18000c027
mov r8b, r13b
lea rcx, [rbp + 0x1b0]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c063
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c05e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8bf
call fcn.1800995a0
movdqa xmm0, xmmword [0x1802b4090]
lea rdx, [0x1802b182b]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x68], r13
movdqu xmmword [rsp + 0x78], xmm0
call fcn.180008160
xorps xmm0, xmm0
mov qword [rbp - 0x40], r13
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x40]
movdqu xmmword [rbp - 0x30], xmm0
call fcn.180008250
lea rdx, [rbp - 0x68]
call fcn.18006b86c
mov r9, rax
lea r8, [rbp - 0x40]
lea rax, [rsp + 0x68]
lea rdx, [rbp + 0x150]
mov qword [rsp + 0x20], rax
call fcn.180075878
lea rcx, [rbp + 0x1b0]
cmp rcx, rax
je 0x18000c0e7
mov r8b, r13b
lea rcx, [rbp + 0x1b0]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c123
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c11e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8c5
call fcn.1800995a0
cmp qword [rbp + 0x1c8], r15
lea rcx, [rbp + 0x1b0]
mov rax, qword [rbp + 0x1c0]
lea rdx, [rbp + 0x150]
cmovae rcx, qword [rbp + 0x1b0]
cmp byte [rax + rcx - 1], 0x5c
jne 0x18000c26e
call fcn.18006b86c
mov r9, qword [rbp + 0x1c0]
lea rdx, [rbp - 0x40]
dec r9
lea rcx, [rbp + 0x1b0]
xor r8d, r8d
mov rbx, rax
call fcn.180007328
mov rdx, rax
lea rcx, [rsp + 0x68]
mov r8, rbx
call fcn.180009068
lea rcx, [rbp + 0x1b0]
cmp rcx, rax
je 0x18000c1a5
mov r8b, r13b
lea rcx, [rbp + 0x1b0]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp - 0x80]
cmp rdx, r15
jb 0x18000c1dc
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c1d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e875
call fcn.1800995a0
mov rdx, qword [rbp - 0x28]
mov ebx, 0xf
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], rbx
mov byte [rsp + 0x68], r13b
cmp rdx, r15
jb 0x18000c225
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c220
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e875
call fcn.1800995a0
mov rdx, qword [rbp + 0x168]
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rbx
mov byte [rbp - 0x40], r13b
cmp rdx, r15
jb 0x18000c2cb
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c2c6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e875
jmp 0x18000c2c6
call fcn.18006b86c
mov rdx, rax
cmp qword [rax + 0x18], r15
jb 0x18000c27f
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x1b0]
call fcn.1800081dc
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c2cb
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x18000c2c6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8cb
call fcn.1800995a0
xorps xmm0, xmm0
mov qword [rbp + 0x410], r13
lea rdx, [rbp + 0x1b0]
mov qword [rbp + 0x420], r13
lea rcx, [rsp + 0x68]
mov qword [rbp + 0x428], rbx
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp + 0x488], r13
mov qword [rbp + 0x498], r13
mov qword [rbp + 0x4a0], rbx
mov qword [rbp + 0x468], r13
mov qword [rbp + 0x478], r13
mov qword [rbp + 0x480], rbx
mov qword [rsp + 0x68], r13
call fcn.180008250
lea rax, [rbp + 0x468]
lea r9, [rbp + 0x488]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x410]
lea rdx, [rsp + 0x68]
call fcn.180079a50
lea rdx, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], 0x20
lea rcx, [rbp + 0x900]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x710]
call fcn.18000a658
lea rdx, [rbp + 0x150]
mov qword [rbp + 0x218], r13
mov r14b, r13b
mov qword [rbp + 0x228], r13
mov qword [rbp + 0x230], rbx
call fcn.180079e98
lea rcx, [rbp + 0x218]
cmp rcx, rax
je 0x18000c3b9
mov r8b, r13b
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
mov ebx, 0x1000
cmp rdx, r15
jb 0x18000c3fa
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c3f5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8d1
call fcn.1800995a0
lea rdx, [rbp + 0x528]
mov qword [rbp + 0x1f8], r13
lea rcx, [rbp - 0x40]
mov qword [rbp + 0x208], r13
mov qword [rbp + 0x210], 0xf
call fcn.18000e980
mov r8, rax
lea rdx, [rbp + 0x150]
call fcn.180064370
lea rcx, [rbp + 0x1f8]
cmp rcx, rax
je 0x18000c450
mov r8b, r13b
lea rcx, [rbp + 0x1f8]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c48c
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c487
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8d7
call fcn.1800995a0
lea r8, [rbp + 0x1f8]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.1800721b4
lea rcx, [rbp + 0x1f8]
cmp rcx, rax
je 0x18000c4c4
mov r8b, r13b
lea rcx, [rbp + 0x1f8]
mov rdx, rax
call fcn.1800082f4
mov rdx, qword [rbp + 0x168]
cmp rdx, r15
jb 0x18000c500
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c4fb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e8dd
call fcn.1800995a0
lea rcx, [0x1802b182b]
call fcn.1802212d0
cmp qword [rbp + 0x210], r15
lea rcx, [rbp + 0x1f8]
mov r8, qword [rbp + 0x208]
cmovae rcx, qword [rbp + 0x1f8]
cmp r8, rax
jne 0x18000cc24
lea rdx, [0x1802b182b]
call fcn.18021b6f0
test eax, eax
jne 0x18000cc24
mov rcx, r12
call fcn.18005c470
mov rdx, qword [rbp + 0x210]
cmp rdx, r15
jb 0x18000c58a
mov rcx, qword [rbp + 0x1f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c585
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x230]
mov edi, 0xf
mov qword [rbp + 0x208], r13
mov qword [rbp + 0x210], rdi
mov byte [rbp + 0x1f8], r13b
cmp rdx, r15
jb 0x18000c5e0
mov rcx, qword [rbp + 0x218]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c5db
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x728]
mov qword [rbp + 0x228], r13
mov qword [rbp + 0x230], rdi
mov byte [rbp + 0x218], r13b
cmp rdx, r15
jb 0x18000c631
mov rcx, qword [rbp + 0x710]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c62c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x480]
mov qword [rbp + 0x720], r13
mov qword [rbp + 0x728], rdi
mov byte [rbp + 0x710], r13b
cmp rdx, r15
jb 0x18000c682
mov rcx, qword [rbp + 0x468]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c67d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x4a0]
mov qword [rbp + 0x478], r13
mov qword [rbp + 0x480], rdi
mov byte [rbp + 0x468], r13b
cmp rdx, r15
jb 0x18000c6d3
mov rcx, qword [rbp + 0x488]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c6ce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x428]
mov qword [rbp + 0x498], r13
mov qword [rbp + 0x4a0], rdi
mov byte [rbp + 0x488], r13b
cmp rdx, r15
jb 0x18000c724
mov rcx, qword [rbp + 0x410]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c71f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x1c8]
mov qword [rbp + 0x420], r13
mov qword [rbp + 0x428], rdi
mov byte [rbp + 0x410], r13b
cmp rdx, r15
jb 0x18000c775
mov rcx, qword [rbp + 0x1b0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c770
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rcx, qword [rbp + 0x528]
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], rdi
mov byte [rbp + 0x1b0], r13b
test rcx, rcx
je 0x18000c7c6
mov rdx, qword [rbp + 0x538]
mov rax, rcx
sub rdx, rcx
cmp rdx, rbx
jb 0x18000c7c1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x788]
cmp rdx, r15
jb 0x18000c802
mov rcx, qword [rbp + 0x770]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c7fd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x4c0]
mov qword [rbp + 0x780], r13
mov qword [rbp + 0x788], rdi
mov byte [rbp + 0x770], r13b
cmp rdx, r15
jb 0x18000c853
mov rcx, qword [rbp + 0x4a8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c84e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
lea rcx, [rbp + 0x358]
mov qword [rbp + 0x4b8], r13
mov qword [rbp + 0x4c0], rdi
mov byte [rbp + 0x4a8], r13b
call fcn.180007078
lea rcx, [rbp + 0x3f8]
call fcn.180007078
lea rcx, [rbp + 0x450]
call fcn.180007078
mov rdx, qword [rbp + 0x2f0]
cmp rdx, r15
jb 0x18000c8c8
mov rcx, qword [rbp + 0x2d8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c8c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x310]
mov qword [rbp + 0x2e8], r13
mov qword [rbp + 0x2f0], rdi
mov byte [rbp + 0x2d8], r13b
cmp rdx, r15
jb 0x18000c919
mov rcx, qword [rbp + 0x2f8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c914
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x2d0]
mov qword [rbp + 0x308], r13
mov qword [rbp + 0x310], rdi
mov byte [rbp + 0x2f8], r13b
cmp rdx, r15
jb 0x18000c96a
mov rcx, qword [rbp + 0x2b8]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c965
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x350]
mov qword [rbp + 0x2c8], r13
mov qword [rbp + 0x2d0], rdi
mov byte [rbp + 0x2b8], r13b
cmp rdx, r15
jb 0x18000c9bb
mov rcx, qword [rbp + 0x338]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000c9b6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x290]
mov qword [rbp + 0x348], r13
mov qword [rbp + 0x350], rdi
mov byte [rbp + 0x338], r13b
cmp rdx, r15
jb 0x18000ca0c
mov rcx, qword [rbp + 0x278]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ca07
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x2b0]
mov qword [rbp + 0x288], r13
mov qword [rbp + 0x290], rdi
mov byte [rbp + 0x278], r13b
cmp rdx, r15
jb 0x18000ca5d
mov rcx, qword [rbp + 0x298]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000ca58
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x270]
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], rdi
mov byte [rbp + 0x298], r13b
cmp rdx, r15
jb 0x18000caae
mov rcx, qword [rbp + 0x258]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000caa9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x250]
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], rdi
mov byte [rbp + 0x258], r13b
cmp rdx, r15
jb 0x18000caff
mov rcx, qword [rbp + 0x238]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cafa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x1e8]
mov qword [rbp + 0x248], r13
mov qword [rbp + 0x250], rdi
mov byte [rbp + 0x238], r13b
cmp rdx, r15
jb 0x18000cb50
mov rcx, qword [rbp + 0x1d0]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cb4b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x448]
mov qword [rbp + 0x1e0], r13
mov qword [rbp + 0x1e8], rdi
mov byte [rbp + 0x1d0], r13b
cmp rdx, r15
jb 0x18000cba1
mov rcx, qword [rbp + 0x430]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cb9c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
mov rdx, qword [rbp + 0x598]
cmp rdx, r15
jb 0x18000cbdd
mov rcx, qword [rbp + 0x580]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18000cbd8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e86f
call fcn.1800995a0
lea rcx, [rbp + 0x318]
call fcn.1800089ac
test al, al
je 0x18000cc0a
mov r8, qword [rbp + 0x330]
lea rcx, [rbp + 0x318]
mov rdx, qword [rbp + 0x318]
inc r8
call fcn.1800089b8
mov qword [rbp + 0x328], r13
mov qword [rbp + 0x330], rdi
mov byte [rbp + 0x318], r13b
jmp 0x18000e742
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.180081834
mov rdx, rax
lea rcx, [rbp + 0x5a0]
call fcn.180007484
lea rcx, [rbp + 0x150]
call fcn.180007428
lea rcx, [rbp + 0x790]
call fcn.1800056f4
lea rdx, [rbp - 0x68]
call fcn.180066798
lea rdx, [rbp + 0x5a0]
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.1800074e4
mov rdx, rax
lea rcx, [rbp + 0x790]
mov r8, rbx
call fcn.180017054
lea rdx, [rbp + 0x790]
lea rcx, [rbp - 0x40]
call fcn.18000e980
mov r8, rax
lea rdx, [rbp + 0x150]
call fcn.180064370
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.180007484
lea rcx, [rbp + 0x150]
call fcn.180007428
lea r8, [rbp + 0x318]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.1800721b4
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.180007484
lea rcx, [rbp + 0x150]
call fcn.180007428
lea rcx, [rbp + 0x2d8]
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.18000f648
lea rcx, [rbp + 0x318]
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.18000f648
lea r9, [rbp - 0x20]
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x6f8]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x450]
call fcn.18000f0ec
lea rcx, [rbp + 0x6f8]
call fcn.180007078
lea rcx, [rbp + 0x140]
call fcn.1800070e0
lea rcx, [rbp - 0x20]
call fcn.1800070e0
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.18008acdc
mov rdx, rax
lea rcx, [rbp + 0x580]
call fcn.180007484
lea rcx, [rbp + 0x150]
call fcn.180007428
lea rcx, [rbp + 0x6f8]
call fcn.1800056f4
lea rdx, [rbp - 0x68]
call fcn.180066798
lea rdx, [rbp + 0x580]
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.1800074e4
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x6f8]
call fcn.180017054
lea rdx, [rbp + 0x6f8]
lea rcx, [rbp - 0x40]
call fcn.18000e980
mov r8, rax
lea rdx, [rbp + 0x150]
call fcn.180064370
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.180007484
lea rcx, [rbp + 0x150]
call fcn.180007428
lea r8, [rbp + 0x430]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x138]
call fcn.1800721b4
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.180007484
lea rcx, [rbp + 0x150]
call fcn.180007428
lea rcx, [rbp + 0x2d8]
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.18000f648
lea rcx, [rbp + 0x430]
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.18000f648
lea r9, [rbp - 0x78]
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp + 0x170]
call fcn.1800070e0
lea rcx, [rbp - 0x78]
call fcn.1800070e0
lea rcx, [rbp + 0x710]
call fcn.18000faa8
lea rcx, [rbp + 0x450]
mov edx, 6
test al, al
je 0x18000cfec
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rcx, rax
call fcn.180227288
cmp esi, eax
jg 0x18000cf50
call fcn.18000a610
mov r12d, 1
test al, al
je 0x18000cf56
lea rdx, [rbp + 0x710]
mov edi, r12d
lea rcx, [rbp - 0x68]
call fcn.1800074e4
mov r8, rax
lea rdx, [rbp + 0x150]
call fcn.18008ed18
mov rcx, rax
call fcn.18000f540
mov rdx, rax
lea rcx, [rbp + 0x900]
call fcn.180225bfc
test eax, eax
jne 0x18000cf56
mov bl, r13b
jmp 0x18000cf59
mov r12d, 1
mov bl, r12b
test r12b, dil
je 0x18000cf6d
and edi, 0xfffffffe
lea rcx, [rbp + 0x150]
call fcn.180007e40
test bl, bl
je 0x18000d086
lea rdx, [0x1802b395c]
lea rcx, [rbp + 0x140]
call fcn.18000f648
lea rcx, [rbp + 0x1f8]
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.18000f648
lea r9, [rbp + 0x140]
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x358]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp - 0x78]
call fcn.1800070e0
lea rcx, [rbp + 0x140]
call fcn.1800070e0
jmp 0x18000d086
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rcx, rax
call fcn.180227288
cmp esi, eax
jg 0x18000d00e
call fcn.18000a610
test al, al
jne 0x18000d080
lea rdx, [0x1802b395c]
lea rcx, [rbp + 0x140]
call fcn.18000f648
lea rcx, [rbp + 0x1f8]
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.18000f648
lea r9, [rbp + 0x140]
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x358]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp - 0x78]
call fcn.1800070e0
lea rcx, [rbp + 0x140]
call fcn.1800070e0
mov r12d, 1
lea rcx, [rbp + 0x3f8]
call fcn.18000f0bc
mov r15, rax
mov ebx, r13d
test eax, eax
jle 0x18000d148
movsxd rsi, ebx
lea rcx, [rbp + 0x3f8]
mov rdx, rsi
call fcn.18000f0b0
mov rcx, rax
lea rdx, [rbp + 0x2f8]
call fcn.180009398
test al, al
jne 0x18000d10c
lea rdx, [rsp + 0x68]
or edi, 6
call fcn.18006a230
mov r8, rax
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x150]
call fcn.180009288
mov rdx, rsi
lea rcx, [rbp + 0x3f8]
mov r8, rax
call fcn.18000f0b0
mov rcx, rax
mov rdx, r8
call fcn.180009398
mov sil, r13b
test al, al
je 0x18000d10f
mov sil, r12b
test dil, 4
je 0x18000d124
and edi, 0xfffffffb
lea rcx, [rbp + 0x150]
call fcn.180007428
test dil, 2
je 0x18000d137
and edi, 0xfffffffd
lea rcx, [rsp + 0x68]
call fcn.180007428
test sil, sil
jne 0x18000d154
add ebx, r12d
cmp ebx, r15d
jl 0x18000d0a0
lea rcx, [rbp + 0x358]
call fcn.18000f0c8
lea rcx, [rbp + 0x730]
call fcn.1800074cc
lea rcx, [rbp + 0x3a0]
call fcn.1800074cc
lea rcx, [rbp + 0x7c8]
call fcn.1800074cc
lea rcx, [rbp + 0x7a8]
call fcn.1800074cc
lea rcx, [rbp + 0x198]
mov qword [rbp + 0x140], r13
mov r12, r13
call fcn.1800056f4
lea rcx, [rbp + 0x198]
call fcn.18000f2bc
lea rcx, [rbp + 0x698]
call fcn.1800056f4
lea rcx, [rbp + 0x698]
call fcn.180006188
lea rcx, [rbp + 0x6b0]
call fcn.1800056f4
lea rcx, [rbp + 0x6b0]
call fcn.180006188
lea rcx, [rbp + 0x680]
call fcn.1800056f4
lea rcx, [rbp + 0x680]
call fcn.180006188
lea rcx, [rbp + 0x198]
mov ebx, r13d
call fcn.18000f0bc
mov r15d, 1
test rax, rax
je 0x18000d23d
mov rdx, r13
lea rcx, [rbp + 0x198]
call fcn.18000f0b0
mov rcx, rax
lea rdx, [0x1802b182b]
call fcn.18000f640
add ebx, r15d
lea rcx, [rbp + 0x198]
movsxd rdx, ebx
call fcn.18000f0bc
cmp rdx, rax
jb 0x18000d20b
lea rcx, [rbp + 0x358]
mov dword [rbp - 0x20], r13d
mov esi, r13d
call fcn.18000f0bc
test rax, rax
je 0x18000e565
mov rbx, r13
lea rcx, [rbp + 0x370]
call fcn.1800056f4
lea rcx, [rbp + 0x370]
call fcn.180006188
lea rcx, [rbp + 0x6c8]
call fcn.1800056f4
lea rcx, [rbp + 0x6c8]
call fcn.180006188
lea rcx, [rbp + 0x388]
call fcn.1800056f4
lea rcx, [rbp + 0x388]
call fcn.180006188
lea rcx, [rbp + 0x3e0]
call fcn.1800056f4
lea rcx, [rbp + 0x3e0]
call fcn.180006188
lea rcx, [rbp + 0x6e0]
call fcn.1800056f4
lea rcx, [rbp + 0x6e0]
call fcn.180006188
lea rdx, [0x1802b3960]
lea rcx, [rbp + 0x58]
call fcn.18000f648
mov rdx, rbx
lea rcx, [rbp + 0x358]
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.18000f648
lea r9, [rbp + 0x58]
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x370]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp - 0x78]
call fcn.1800070e0
lea rcx, [rbp + 0x58]
call fcn.1800070e0
lea rdx, [rsp + 0x68]
call fcn.18007b0dc
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.18000f648
mov rdx, r15
lea rcx, [rbp + 0x370]
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.18000f648
lea r9, [rbp + 0x68]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x6c8]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp + 0x60]
call fcn.1800070e0
lea rcx, [rbp + 0x68]
call fcn.1800070e0
lea rcx, [rsp + 0x68]
call fcn.180007428
mov edx, 2
lea rcx, [rbp + 0x370]
call fcn.18000f0b0
mov rcx, rax
lea rdx, [rbp + 0x4a8]
call fcn.180009398
movzx edi, r13b
test al, al
lea rdx, [rsp + 0x68]
cmovne edi, r15d
call fcn.18007b0dc
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.18000f648
mov edx, 3
lea rcx, [rbp + 0x370]
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.18000f648
lea r9, [rbp + 0x78]
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x388]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp + 0x70]
call fcn.1800070e0
lea rcx, [rbp + 0x78]
call fcn.1800070e0
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rdx, [rsp + 0x68]
call fcn.18007b0dc
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.18000f648
mov edx, 4
lea rcx, [rbp + 0x370]
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.18000f648
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp + 0x80]
call fcn.1800070e0
lea rcx, [rbp + 0x10]
call fcn.1800070e0
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rdx, [rsp + 0x68]
call fcn.18007b0dc
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18000f648
mov edx, 5
lea rcx, [rbp + 0x370]
call fcn.18000f0b0
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.18000f648
lea r9, [rsp + 0x60]
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x178]
call fcn.1800755c8
mov rdx, rax
lea rcx, [rbp + 0x6e0]
call fcn.18000f0ec
lea rcx, [rbp + 0x178]
call fcn.180007078
lea rcx, [rbp - 0x70]
call fcn.1800070e0
lea rcx, [rsp + 0x60]
call fcn.1800070e0
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rdx, [rbp + 0x750]
call fcn.18006a230
mov r8d, 6
lea rdx, [rbp + 0x178]
mov rbx, rax
call fcn.18006cb3c
mov edx, 6
lea rcx, [rbp + 0x370]
mov r8, rax
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009288
mov rdx, rax
lea rcx, [rsp + 0x68]
mov r8, rbx
call fcn.180009068
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.180007484
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp - 0x40]
call fcn.180007428
lea rcx, [rbp + 0x178]
call fcn.180007428
lea rcx, [rbp + 0x750]
call fcn.180007428
test dil, dil
jne 0x18000d6e5
lea rcx, [rbp + 0x388]
mov edi, r13d
call fcn.18000f0bc
test rax, rax
je 0x18000e233
mov rbx, r13
mov rdx, rbx
lea rcx, [rbp + 0x388]
call fcn.18000f0b0
mov rcx, rax
lea rdx, [rbp + 0x410]
call fcn.180009398
test al, al
jne 0x18000d6e5
mov rdx, rbx
lea rcx, [rbp + 0x388]
call fcn.18000f0b0
mov rcx, rax
lea rdx, [rbp + 0x488]
call fcn.180009398
test al, al
jne 0x18000d6e5
mov rdx, rbx
lea rcx, [rbp + 0x388]
call fcn.18000f0b0
mov rcx, rax
lea rdx, [rbp + 0x468]
call fcn.180009398
test al, al
jne 0x18000d6e5
add edi, r15d
lea rcx, [rbp + 0x388]
movsxd rbx, edi
call fcn.18000f0bc
cmp rbx, rax
jb 0x18000d663
jmp 0x18000e233
lea rcx, [rbp + 0x3e0]
mov dword [rbp + 0x170], r13d
call fcn.18000f0bc
test rax, rax
je 0x18000e233
mov r8d, 6
lea rdx, [rsp + 0x68]
call fcn.18006cb3c
mov rdx, rax
lea rcx, [rbp + 0x3a0]
call fcn.180007484
lea rcx, [rsp + 0x68]
call fcn.180007428
mov rdx, r13
lea rcx, [rbp + 0x3e0]
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp + 0x3a0]
call fcn.1800073b8
mov rdx, r13
lea rcx, [rbp + 0x3e0]
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1800074e4
lea r8, [rbp + 0x3a0]
mov rdi, rax
lea rdx, [rbp + 0x218]
lea rcx, [rbp - 0x10]
call fcn.1800092f4
mov rdx, r13
lea rcx, [rbp + 0x6c8]
mov rbx, rax
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1800074e4
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.18001715c
lea r8, [rbp + 0x3a0]
lea rdx, [rbp + 0x218]
lea rcx, [rsp + 0x68]
call fcn.1800092f4
mov rcx, rax
call fcn.180016dc8
lea rcx, [rsp + 0x68]
mov bl, al
call fcn.180007428
test bl, bl
je 0x18000e864
xor r15b, r15b
test r14b, r14b
jne 0x18000da3c
lea rdx, [rsp + 0x68]
call fcn.18007bb7c
mov rdx, rax
lea rcx, [rbp + 0x7c8]
call fcn.180007484
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rdx, [rbp - 0x68]
call fcn.18007c494
lea rdx, [rbp + 0x7c8]
mov rdi, rax
lea rcx, [rbp - 0x10]
call fcn.1800074e4
lea r8, [rbp + 0x3a0]
mov rbx, rax
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x18]
call fcn.1800092f4
mov rdx, rax
lea rcx, [rsp + 0x68]
mov r9, rdi
mov r8, rbx
call fcn.180005c04
mov rdx, rax
lea rcx, [rbp + 0x7a8]
call fcn.180007484
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp + 0x7a8]
call fcn.18000faa8
test al, al
je 0x18000da60
lea rcx, [rbp + 0x178]
call fcn.1800056f4
lea rdx, [rbp - 0x68]
call fcn.18007c494
lea rdx, [rbp + 0x7a8]
mov rsi, rax
lea rcx, [rbp - 0x10]
call fcn.1800074e4
lea rdx, [rbp + 0x7c8]
mov rdi, rax
lea rcx, [rbp + 0x18]
call fcn.1800074e4
lea r8, [rbp + 0x3a0]
mov rbx, rax
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x38]
call fcn.1800092f4
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp + 0x178]
mov r8, rbx
call fcn.180005744
mov eax, 1
lea r8, [rbp + 0x3a0]
lea rdx, [rbp + 0x218]
mov r14b, al
lea rcx, [rsp + 0x68]
mov r15b, al
call fcn.1800092f4
mov rdx, rax
lea rcx, [rbp + 0x660]
call fcn.180007484
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp + 0x508]
call fcn.1800056f4
lea rcx, [rbp + 0x508]
call fcn.180006188
lea rdx, [rbp + 0x178]
lea rcx, [rsp + 0x68]
call fcn.18000e980
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180015b4c
mov rdx, rax
lea rcx, [rbp + 0x508]
call fcn.18000e8f0
lea rcx, [rbp - 0x40]
call fcn.180006130
lea rdx, [rbp + 0x508]
lea rcx, [rsp + 0x68]
call fcn.18000e980
mov rdx, rax
call fcn.18006cc98
mov rdx, qword [rbp + 0x510]
mov rcx, rax
mov rdi, qword [rbp + 0x508]
sub rdx, rdi
call fcn.180018370
mov qword [rbp - 0x18], rax
mov rbx, rax
test rax, rax
je 0x18000e802
mov rax, qword [rbp + 0x178]
lea rdx, [rbp + 0xc8]
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x510], rdi
call fcn.18007cf40
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
mov rcx, rbx
call fcn.180018ae8
lea rcx, [rbp + 0xc8]
mov qword [rbp + 0x140], rax
mov r12, rax
call fcn.180007428
test r12, r12
je 0x18000e802
lea rcx, [rbp + 0x508]
call fcn.180006130
lea rcx, [rbp + 0x178]
call fcn.180006130
lea rdx, [rbp + 0x730]
lea rcx, [rbp + 0x620]
call fcn.1800073b8
jmp 0x18000da60
mov rax, qword [rbp - 0x18]
mov edx, 1
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x140], r12
cmp r14b, dl
jne 0x18000da60
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x140], r12
lea rcx, [rbp + 0x730]
call fcn.1800073a8
mov rcx, rax
call fcn.180016120
lea rcx, [rbp + 0x750]
call fcn.1800056f4
lea rcx, [rbp + 0x750]
call fcn.180006188
lea rdx, [rbp + 0x730]
lea rcx, [rbp - 0x68]
call fcn.1800074e4
lea rdx, [rbp - 0x10]
mov rsi, rax
call fcn.18007c494
lea rdx, [rsp + 0x68]
mov rdi, rax
call fcn.18006d23c
mov rdx, r13
lea rcx, [rbp + 0x6e0]
mov r8, rax
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.180009288
lea r8, [rbp + 0x3a0]
mov rbx, rax
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x38]
call fcn.1800092f4
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp - 0x40]
mov r8, rbx
call fcn.1800046c8
mov rdx, rax
lea rcx, [rbp + 0x750]
call fcn.18000f0ec
lea rcx, [rbp - 0x40]
call fcn.180007078
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp + 0x750]
xor r13d, r13d
call fcn.18000f0bc
test rax, rax
je 0x18000dc02
xor edi, edi
lea r12d, [r13 + 1]
mov rdx, rdi
lea rcx, [rbp + 0x750]
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1800074e4
mov rcx, rax
call fcn.1800151e8
test al, al
jne 0x18000dbe0
lea rcx, [rbp + 0x198]
xor esi, esi
call fcn.18000f0bc
test rax, rax
je 0x18000dbe0
xor ebx, ebx
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.18000f0b0
mov rcx, rax
call fcn.18000fa60
test al, al
jne 0x18000dbb4
add esi, r12d
lea rcx, [rbp + 0x198]
movsxd rbx, esi
call fcn.18000f0bc
cmp rbx, rax
jb 0x18000db80
jmp 0x18000dbe0
mov rdx, rdi
lea rcx, [rbp + 0x750]
call fcn.18000f0b0
mov rdx, rbx
lea rcx, [rbp + 0x198]
mov r8, rax
call fcn.18000f0b0
mov rcx, rax
mov rdx, r8
call fcn.1800073b8
add r13d, r12d
lea rcx, [rbp + 0x750]
movsxd rdi, r13d
call fcn.18000f0bc
cmp rdi, rax
jb 0x18000db44
mov r12, qword [rbp + 0x140]
lea rcx, [rbp + 0x7f0]
call fcn.180005734
lea rdx, [rbp + 0x508]
call fcn.18008d930
lea rdx, [rbp + 0x178]
mov rbx, rax
call fcn.18006a230
mov r8, rax
lea rdx, [rbp + 0x730]
lea rcx, [rbp - 0x40]
call fcn.180009288
mov rdx, rax
lea rcx, [rsp + 0x68]
mov r8, rbx
call fcn.180009068
mov rcx, rax
call fcn.1800073a8
mov rdx, rax
lea rcx, [rbp + 0x7f0]
mov r8d, 2
call fcn.180006ecc
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp - 0x40]
call fcn.180007428
lea rcx, [rbp + 0x178]
call fcn.180007428
lea rcx, [rbp + 0x508]
call fcn.180007428
lea rcx, [rbp + 0x7f0]
call fcn.18000e8e4
test al, al
je 0x18000ddd0
lea rdx, [rbp - 0x68]
call fcn.18006b86c
lea rdx, [rbp - 0x10]
mov rsi, rax
call fcn.18006a230
lea rdx, [rbp + 0x18]
mov rdi, rax
call fcn.18008de74
mov r8d, 6
lea rdx, [rbp + 0x38]
mov rbx, rax
call fcn.18006cb3c
mov rdx, rax
lea rcx, [rbp + 0x88]
mov r8, rbx
call fcn.180009068
mov rdx, rax
lea r8, [rbp + 0x2b8]
lea rcx, [rbp + 0xa8]
call fcn.18000921c
mov rdx, rax
lea rcx, [rbp + 0x508]
mov r8, rdi
call fcn.180009068
mov rdx, rax
lea r8, [rbp + 0x410]
lea rcx, [rbp + 0x178]
call fcn.18000921c
mov rdx, rax
lea rcx, [rbp - 0x40]
mov r8, rsi
call fcn.180009068
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x138]
call fcn.18006ed4c
mov rdx, rax
lea rcx, [rbp + 0x7f0]
call fcn.18000f9c4
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp - 0x40]
call fcn.180007428
lea rcx, [rbp + 0x178]
call fcn.180007428
lea rcx, [rbp + 0x508]
call fcn.180007428
lea rcx, [rbp + 0xa8]
call fcn.180007428
lea rcx, [rbp + 0x88]
call fcn.180007428
lea rcx, [rbp + 0x38]
call fcn.180007428
lea rcx, [rbp + 0x18]
call fcn.180007428
lea rcx, [rbp - 0x10]
call fcn.180007428
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rcx, [rbp + 0x7f0]
call fcn.180006e18
mov r13d, 1
cmp r14b, r13b
jne 0x18000df91
cmp r15b, r13b
jne 0x18000df91
lea rdx, [rbp - 0x68]
call fcn.18007daf8
lea rdx, [rbp - 0x10]
mov rsi, rax
call fcn.18007c494
lea rdx, [rbp + 0x18]
mov rdi, rax
call fcn.18007d314
lea r8, [rbp + 0x3a0]
mov rbx, rax
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x38]
call fcn.1800092f4
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp - 0x40]
mov r8, rbx
call fcn.1800046c8
mov rdx, rax
lea rcx, [rbp + 0x698]
call fcn.18000f0ec
lea rcx, [rbp - 0x40]
call fcn.180007078
lea rdx, [rsp + 0x68]
call fcn.18006a230
lea r8d, [r13 + 4]
mov rsi, rax
lea rdx, [rbp + 0xa8]
call fcn.18006cb3c
lea rdx, [rbp + 0x88]
mov rdi, rax
call fcn.18006a230
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.1800140b8
mov rdx, rax
lea rcx, [rbp + 0x18]
mov r8, rbx
call fcn.180009068
mov rdx, rax
lea rcx, [rbp - 0x10]
mov r8, rdi
call fcn.180009068
mov rdx, rax
lea rcx, [rbp - 0x68]
mov r8, rsi
call fcn.180009068
mov rdx, rax
lea rcx, [rbp + 0x3c0]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rcx, [rbp - 0x10]
call fcn.180007428
lea rcx, [rbp + 0x18]
call fcn.180007428
lea rcx, [rbp + 0x38]
call fcn.180007428
lea rcx, [rbp + 0x88]
call fcn.180007428
lea rcx, [rbp + 0xa8]
call fcn.180007428
lea rcx, [rsp + 0x68]
call fcn.180007428
lea rcx, [rbp + 0x3c0]
call fcn.1800073a8
mov rcx, rax
call fcn.180016120
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp - 0x68]
call fcn.1800074e4
lea rdx, [rbp - 0x10]
mov rsi, rax
call fcn.18007c494
lea rdx, [rbp + 0x18]
mov rdi, rax
call fcn.18007ebf8
mov rbx, rax
lea r8, [rbp + 0x3a0]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x38]
call fcn.1800092f4
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9, rdi
lea rcx, [rbp - 0x40]
mov r8, rbx
call fcn.1800046c8
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.18000f0ec
lea rcx, [rbp - 0x40]
call fcn.180007078
lea rcx, [rbp + 0x150]
call fcn.1800074cc
lea rdx, [rbp + 0x410]
lea rcx, [rbp - 0x10]
call fcn.1800074e4
lea rdx, [rbp + 0x730]
mov rbx, rax
lea rcx, [rbp + 0x18]
call fcn.1800074e4
mov rdx, rax
lea rcx, [rbp - 0x68]
mov r9, rbx
call fcn.18001427c
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
cmp r14b, r13b
jne 0x18000e19b
cmp r15b, r13b
jne 0x18000e19b
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x560]
call fcn.1800073b8
lea rdx, [rbp - 0x68]
call fcn.18007f780
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rdx, [rbp + 0x18]
call fcn.18007b138
lea r8, [rbp + 0x4e8]
mov rbx, rax
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp - 0x10]
call fcn.1800092f4
mov rdx, rax
lea rcx, [rbp - 0x68]
mov r8, rbx
call fcn.180009068
mov rdx, rax
lea rcx, [rbp + 0x4c8]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rcx, [rbp - 0x10]
call fcn.180007428
lea rcx, [rbp + 0x18]
call fcn.180007428
lea rdx, [0x1802b182b]
lea rcx, [rbp - 0x68]
call fcn.1800074a4
lea rdx, [rbp + 0x560]
mov rdi, rax
lea rcx, [rbp - 0x10]
call fcn.1800074e4
lea rdx, [rbp + 0x4c8]
mov rbx, rax
lea rcx, [rbp + 0x18]
call fcn.1800074e4
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.180015cb4
lea rdx, [rbp + 0x38]
call fcn.18007b50c
mov r8d, 3
lea rdx, [rbp + 0x18]
mov rbx, rax
call fcn.18006cb3c
mov r8, rax
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp - 0x10]
call fcn.180009288
mov rdx, rax
lea rcx, [rbp - 0x68]
mov r8, rbx
call fcn.180009068
mov rdx, rax
lea rcx, [rbp + 0x540]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rcx, [rbp - 0x10]
call fcn.180007428
lea rcx, [rbp + 0x18]
call fcn.180007428
lea rcx, [rbp + 0x38]
call fcn.180007428
call fcn.18005c820
lea rdx, [rbp + 0x4c8]
lea rcx, [rbp - 0x10]
call fcn.1800074e4
lea rdx, [rbp - 0x68]
mov rdi, rax
call fcn.18007b138
mov r8, rax
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x18]
call fcn.180009288
lea rdx, [rbp + 0x540]
mov rbx, rax
lea rcx, [rbp + 0x38]
call fcn.1800074e4
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.180003b04
lea rcx, [rbp - 0x68]
call fcn.180007428
test r15b, r15b
jne 0x18000e1d0
lea r8, [rbp + 0x3a0]
lea rdx, [rbp + 0x218]
lea rcx, [rbp - 0x68]
call fcn.1800092f4
mov rcx, rax
call fcn.1800073a8
mov rcx, rax
call fcn.18005c4f4
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rcx, [rbp + 0x750]
call fcn.18000f0c8
lea rcx, [rbp + 0x150]
call fcn.180007428
lea rcx, [rbp + 0x7f0]
call fcn.180005704
lea rcx, [rbp + 0x750]
call fcn.180007078
mov r15d, dword [rbp + 0x170]
lea rcx, [rbp + 0x3e0]
add r15d, r13d
mov dword [rbp + 0x170], r15d
movsxd r13, r15d
call fcn.18000f0bc
cmp r13, rax
jb 0x18000d701
mov esi, dword [rbp - 0x20]
xor r13d, r13d
lea r15d, [r13 + 1]
lea rcx, [rbp + 0x370]
call fcn.18000f0c8
lea rcx, [rbp + 0x6c8]
call fcn.18000f0c8
lea rcx, [rbp + 0x388]
call fcn.18000f0c8
lea rcx, [rbp + 0x3e0]
call fcn.18000f0c8
lea rcx, [rbp + 0x6e0]
call fcn.18000f0c8
lea rcx, [rbp + 0x6e0]
call fcn.180007078
lea rcx, [rbp + 0x3e0]
call fcn.180007078
lea rcx, [rbp + 0x388]
call fcn.180007078
lea rcx, [rbp + 0x6c8]
call fcn.180007078
lea rcx, [rbp + 0x370]
call fcn.180007078
add esi, r15d
lea rcx, [rbp + 0x358]
mov dword [rbp - 0x20], esi
movsxd rbx, esi
call fcn.18000f0bc
cmp rbx, rax
jb 0x18000d25c
cmp r14b, r15b
jne 0x18000e565
lea rcx, [rbp + 0x198]
mov ebx, r13d
call fcn.18000f0bc
test rax, rax
je 0x18000e314
mov rdx, r13
lea rcx, [rbp + 0x198]
call fcn.18000f0b0
mov rcx, rax
call fcn.18000faa8
add ebx, r15d
lea rcx, [rbp + 0x198]
movsxd rdx, ebx
call fcn.18000f0bc
cmp rdx, rax
jb 0x18000e2e9
lea rcx, [rbp + 0x198]
mov edi, r13d
call fcn.18000f0bc
test rax, rax
je 0x18000e37b
mov rbx, r13
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.18000f0b0
mov rcx, rax
call fcn.18000faa8
test al, al
je 0x18000e364
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.18000f0b0
mov rdx, rax
lea rcx, [rbp + 0x680]
call fcn.180007034
add edi, r15d
lea rcx, [rbp + 0x198]
movsxd rbx, edi
call fcn.18000f0bc
cmp rbx, rax
jb 0x18000e32b
lea rcx, [rbp - 0x68]
call fcn.1800140b8
mov rdx, rax
lea rcx, [rbp + 0x640]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rdx, [rbp - 0x10]
call fcn.180080c50
lea rdx, [rbp + 0x680]
mov rbx, rax
lea rcx, [rsp + 0x68]
call fcn.18000f18c
mov r8, rax
lea rdx, [rbp - 0x68]
mov r9, rbx
call fcn.18007b8e0
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rdx, [rbp + 0x18]
call fcn.180080c50
lea rdx, [rbp + 0x698]
mov rbx, rax
lea rcx, [rsp + 0x68]
call fcn.18000f18c
mov r8, rax
lea rdx, [rbp - 0x68]
mov r9, rbx
call fcn.18007b8e0
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rdx, [rbp + 0x38]
call fcn.180080c50
lea rdx, [rbp + 0x6b0]
mov rbx, rax
lea rcx, [rsp + 0x68]
call fcn.18000f18c
mov r8, rax
lea rdx, [rbp - 0x68]
mov r9, rbx
call fcn.18007b8e0
mov rdx, rax
lea rcx, [rbp + 0x5c0]
call fcn.180007484
lea rcx, [rbp - 0x68]
call fcn.180007428
lea rcx, [rbp + 0x5c0]
call fcn.1800073a8
lea rcx, [rbp + 0x5e0]
mov qword [rsp + 0x60], rax
call fcn.1800073a8
lea rcx, [rbp + 0x600]
mov qword [rbp - 0x70], rax
call fcn.1800073a8
lea rcx, [rbp + 0x540]
mov qword [rbp + 0x10], rax
call fcn.1800073a8
lea rcx, [rbp + 0x560]
mov r13, rax
call fcn.1800073a8
lea rcx, [rbp + 0x4c8]
mov r12, rax
call fcn.1800073a8
lea rcx, [rbp + 0x3c0]
mov r15, rax
call fcn.1800073a8
lea rcx, [rbp + 0x620]
mov r14, rax
call fcn.1800073a8
lea rcx, [rbp + 0x4e8]
mov rsi, rax
call fcn.1800073a8
lea rcx, [rbp + 0x640]
mov rdi, rax
call fcn.1800073a8
lea rcx, [rbp + 0x660]
mov rbx, rax
call fcn.1800073a8
mov rcx, rax
mov r9, rsi
mov rax, qword [rsp + 0x60]
mov r8, rdi
mov qword [rsp + 0x50], rax
mov rdx, rbx
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
call qword [rbp + 0x140]
mov rcx, qword [rbp - 0x18]
call fcn.180018c70
lea rcx, [rbp + 0x680]
call fcn.18000f0c8
lea rcx, [rbp + 0x358]
call fcn.18000f0c8
lea rcx, [rbp + 0x198]
call fcn.18000f0c8
lea rcx, [rbp + 0x698]
call fcn.18000f0c8
lea rcx, [rbp + 0x6b0]
call fcn.18000f0c8
mov rcx, qword [rbp - 0x48]
call fcn.18005c470
lea rcx, [rbp + 0x680]
call fcn.180007078
lea rcx, [rbp + 0x6b0]
call fcn.180007078
lea rcx, [rbp + 0x698]
call fcn.180007078
lea rcx, [rbp + 0x198]
call fcn.180007078
lea rcx, [rbp + 0x7a8]
call fcn.180007428
lea rcx, [rbp + 0x7c8]
call fcn.180007428
lea rcx, [rbp + 0x3a0]
call fcn.180007428
lea rcx, [rbp + 0x730]
call fcn.180007428
lea rcx, [rbp + 0x6f8]
call fcn.180006130
lea rcx, [rbp + 0x790]
call fcn.180006130
lea rcx, [rbp + 0x1f8]
call fcn.180007428
lea rcx, [rbp + 0x218]
call fcn.180007428
lea rcx, [rbp + 0x710]
call fcn.180007428
lea rcx, [rbp + 0x468]
call fcn.180007428
lea rcx, [rbp + 0x488]
call fcn.180007428
lea rcx, [rbp + 0x410]
call fcn.180007428
lea rcx, [rbp + 0x1b0]
call fcn.180007428
lea rcx, [rbp + 0x528]
call fcn.180006130
lea rcx, [rbp + 0x770]
call fcn.180007428
lea rcx, [rbp + 0x4a8]
call fcn.180007428
lea rcx, [rbp + 0x358]
call fcn.180007078
lea rcx, [rbp + 0x3f8]
call fcn.180007078
lea rcx, [rbp + 0x450]
call fcn.180007078
lea rcx, [rbp + 0x2d8]
call fcn.180007428
lea rcx, [rbp + 0x2f8]
call fcn.180007428
lea rcx, [rbp + 0x2b8]
call fcn.180007428
lea rcx, [rbp + 0x338]
call fcn.180007428
lea rcx, [rbp + 0x278]
call fcn.180007428
lea rcx, [rbp + 0x298]
call fcn.180007428
lea rcx, [rbp + 0x258]
call fcn.180007428
lea rcx, [rbp + 0x238]
call fcn.180007428
lea rcx, [rbp + 0x1d0]
call fcn.180007428
lea rcx, [rbp + 0x430]
call fcn.180007428
lea rcx, [rbp + 0x580]
call fcn.180007428
lea rcx, [rbp + 0x318]
call fcn.180007428
lea rcx, [rbp + 0x5a0]
call fcn.180007428
lea rcx, [rbp + 0x3c0]
call fcn.180007428
lea rcx, [rbp + 0x5c0]
call fcn.180007428
lea rcx, [rbp + 0x5e0]
call fcn.180007428
lea rcx, [rbp + 0x600]
call fcn.180007428
lea rcx, [rbp + 0x540]
call fcn.180007428
lea rcx, [rbp + 0x560]
call fcn.180007428
lea rcx, [rbp + 0x4c8]
call fcn.180007428
lea rcx, [rbp + 0x620]
call fcn.180007428
lea rcx, [rbp + 0x4e8]
call fcn.180007428
lea rcx, [rbp + 0x640]
call fcn.180007428
lea rcx, [rbp + 0x660]
call fcn.180007428
mov rcx, qword [rbp + 0x920]
xor rcx, rsp
call fcn.180218bc0
lea r11, [rsp + 0xa30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, qword [rbp - 0x48]
call fcn.18005c470
lea rcx, [rbp + 0x508]
call fcn.180006130
lea rcx, [rbp + 0x178]
call fcn.180006130
lea rcx, [rbp + 0x6e0]
call fcn.180007078
lea rcx, [rbp + 0x3e0]
call fcn.180007078
lea rcx, [rbp + 0x388]
call fcn.180007078
lea rcx, [rbp + 0x6c8]
call fcn.180007078
lea rcx, [rbp + 0x370]
call fcn.180007078
jmp 0x18000e59e
mov rcx, qword [rbp - 0x48]
call fcn.18005c470
jmp 0x18000e823
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
xor ecx, ecx
call fcn.180222268
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3
call fcn.180220c38
int3