Function at 0x18000d0e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x80
lea eax, [r9 + 0x790]
mov esi, r9d
mov dword [rbp - 0x50], eax
mov r11, rdx
mov rdi, rcx
cmp r9d, eax
jae 0x18000d213
mov r9d, dword [rbp + 0x38]
xor edx, edx
mov ecx, dword [rbp + 0x38]
mov qword [rsp + 0xa0], rbx
mov rbx, qword [rbp + 0x40]
mov qword [rsp + 0x78], r12
mov r12d, dword [rbp + 0x38]
mov qword [rsp + 0x70], r13
mov r13, qword [rbp - 0x30]
mov qword [rsp + 0x68], r14
mov r14, qword [rbp + 0x48]
mov qword [rsp + 0x60], r15
mov r15, qword [rbp - 0x30]
mov dword [rbp - 0x48], r9d
mov dword [rbp - 0x4c], ecx
nop dword [rax + rax]
cmp esi, 0x174
ja 0x18000d403
je 0x18000d3f9
cmp esi, 0xeb
ja 0x18000d355
je 0x18000d31d
mov eax, esi
sub eax, 0x72
je 0x18000d2aa
sub eax, 0xf
je 0x18000d21e
cmp eax, 0x10
jne 0x18000d1d9
mov r14, qword [rdi + 8]
mov rsi, qword [rdi]
cmp rsi, r14
je 0x18000d1d2
nop dword [rax]
xor r9d, r9d
mov r8, rsi
mov edx, 0xba
xor ecx, ecx
call fcn.18002c910
add rsi, 0x10
cmp rsi, r14
jne 0x18000d1b0
mov ecx, dword [rbp - 0x4c]
mov r9d, dword [rbp - 0x48]
mov r14, qword [rbp + 0x48]
mov esi, dword [rbp + 0x38]
mov eax, dword [rbp - 0x50]
mov r8, qword [rbp + 0x30]
add esi, 0x79
mov r11, qword [rbp + 0x28]
mov edx, 0
mov dword [rbp + 0x38], esi
cmp esi, eax
jb 0x18000d160
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
mov rbx, qword [rsp + 0xa0]
mov r15, qword [rsp + 0x60]
add rsp, 0x80
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x20], rdx
mov r9d, 0x8c
lea rdx, [rbp + 0x38]
mov byte [rbx + 0xc], 0
xor r8d, r8d
mov dword [rbp + 0x38], 1
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 4], al
cmp byte [r14 + 0x49876], 0
je 0x18000d278
mov r9d, 0x8c
mov dword [rbp + 0x38], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp + 0x38]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 5], al
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
mov r9d, dword [rbp - 0x48]
movsxd rcx, eax
imul r15, rcx, 0x118
mov ecx, dword [rbp - 0x4c]
add r15, 0x71b8
mov dword [rbx + 8], eax
add r15, r14
jmp 0x18000d1d9
mov r9d, dword [rbx]
mov dword [rbp - 0x48], r9d
cmp dword [rdi + 0x34], r9d
jne 0x18000d2d3
mov eax, dword [r14]
cmp dword [rdi + 0x38], eax
jne 0x18000d2d3
mov eax, dword [r8]
cmp dword [rdi + 0x30], eax
jne 0x18000d2d3
mov eax, dword [r11]
cmp dword [rdi + 0x4c], eax
je 0x18000d1f7
mov eax, dword [r8]
mov ecx, dword [r14]
mov dword [rbp - 0x4c], ecx
cmp eax, 1
jne 0x18000d302
lea eax, [r9 + 1]
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
mov dword [rbp - 0x48], eax
lea eax, [rcx + 1]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [rbp - 0x4c], eax
jmp 0x18000d1d9
cmp eax, 2
jne 0x18000d1d9
lea eax, [rcx + 1]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [rbp - 0x4c], eax
jmp 0x18000d1d9
mov ecx, dword [r11]
mov eax, dword [rbx]
lea eax, [rax + rcx*2]
mov ecx, dword [rbp - 0x4c]
add eax, 0xf
cdq
and edx, 0xf
add eax, edx
and eax, 0xfffffff0
mov dword [rdi + 0x44], eax
mov eax, dword [r11]
lea eax, [rax*2 + 0xf]
add eax, r9d
cdq
and edx, 0xf
add eax, edx
and eax, 0xfffffff0
mov dword [rdi + 0x48], eax
jmp 0x18000d1d9
mov eax, esi
sub eax, 0xfb
je 0x18000d3a0
sub eax, 0x69
je 0x18000d38a
cmp eax, 0xf
jne 0x18000d1d9
movsx rax, byte [r15 + 2]
lea r13, [r14 + 0x3a74]
imul rcx, rax, 0x374
add r13, rcx
mov ecx, dword [rbp - 0x4c]
jmp 0x18000d1d9
mov eax, dword [rbx]
mov dword [rdi + 0x34], eax
mov eax, dword [r14]
mov dword [rdi + 0x38], eax
mov eax, dword [r11]
mov dword [rdi + 0x4c], eax
jmp 0x18000d1d9
mov ecx, dword [rbx]
test ecx, ecx
je 0x18000d3db
sub ecx, 1
je 0x18000d3c9
cmp ecx, 1
mov ecx, dword [rbp - 0x4c]
jne 0x18000d1d9
mov rax, qword [rdi + 0x49748]
mov qword [r14], rax
mov eax, dword [rdi + 0x49780]
jmp 0x18000d3ee
mov rax, qword [rdi + 0x49740]
mov qword [r14], rax
mov eax, dword [rdi + 0x49780]
jmp 0x18000d3eb
mov rax, qword [rdi + 0x49738]
mov qword [r14], rax
mov eax, dword [rdi + 0x4977c]
mov ecx, dword [rbp - 0x4c]
cdq
sub eax, edx
sar eax, 1
mov dword [r8], eax
mov eax, dword [rbp - 0x50]
mov esi, 0x174
jmp 0x18000d1dc
cmp esi, 0x265
ja 0x18000dbeb
je 0x18000dbca
mov eax, esi
sub eax, 0x1dd
je 0x18000dbbe
sub eax, 0xf
je 0x18000d45b
cmp eax, 0x6a
jne 0x18000d1d9
mov eax, dword [r8]
mov dword [rdi + 0x30], eax
mov ecx, dword [r11]
mov eax, dword [r14]
lea edx, [rax + rcx*2]
imul edx, dword [rdi + 0x44]
movsxd rcx, edx
call fcn.18004bd24
mov ecx, dword [rbp - 0x4c]
mov r9d, dword [rbp - 0x48]
mov qword [rdi + 0x18], rax
jmp 0x18000d1d9
cmp byte [rbx + 4], 0
jne 0x18000d4d0
cmp byte [r15 + 3], 0
je 0x18000d48d
xor esi, esi
mov dword [rbp - 0x40], 1
mov r9d, 0x8c
mov qword [rsp + 0x20], rsi
xor r8d, r8d
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.180015470
jmp 0x18000d491
xor al, al
xor esi, esi
mov byte [rbx + 0xc], al
lea rcx, [rbp - 0x40]
mov eax, dword [r13 + 0x350]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp - 0x40], eax
lea edx, [r9 + 0x4b]
call fcn.180020700
mov r9d, 0x8c
mov dword [rbp - 0x38], eax
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.180015470
jmp 0x18000d4d8
xor esi, esi
mov byte [rbx + 0xc], 0
mov eax, esi
mov dword [rbx + 0x10], eax
cmp byte [rbx + 0xc], 0
jne 0x18000dafe
mov eax, 0x115
mov dword [rbp - 0x40], eax
jmp 0x18000d4f2
xor esi, esi
sub eax, 0x111
je 0x18000da32
sub eax, 1
je 0x18000da23
sub eax, 1
je 0x18000d990
sub eax, 1
je 0x18000d741
cmp eax, 1
jne 0x18000daeb
cmp byte [r15 + 0x114], 0
jle 0x18000d55a
nop dword [rax + rax]
mov r9d, 0x10
mov dword [rbp - 0x38], 1
xor r8d, r8d
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.18002f940
movsx eax, byte [r15 + 0x114]
inc esi
cmp esi, eax
jl 0x18000d530
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
mov dword [rbx + 0x14], eax
cmp byte [r15 + 0x1f], 0
je 0x18000d59a
mov r9d, 0x8c
mov dword [rbp - 0x38], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.180015470
jmp 0x18000d59c
mov al, 1
mov byte [rbx + 0x18], al
cmp byte [r13 + 0x1a4], 1
jne 0x18000d5d1
mov r9d, 0x8c
mov dword [rbp - 0x38], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x19], al
movzx eax, byte [r14 + 0x49874]
sub al, 0x13
cmp al, 1
jbe 0x18000daeb
mov esi, 0xdf
nop dword [rax + rax]
mov eax, esi
sub eax, 0xdd
je 0x18000d6f6
sub eax, 1
je 0x18000d72e
cmp eax, 1
jne 0x18000d72e
mov eax, dword [r13 + 0x1cc]
lea rdx, [rbp - 0x38]
mov r9d, 0x8c
mov dword [rbp - 0x38], eax
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov rcx, rdi
call fcn.180015470
mov r9d, 0x8c
mov dword [rbx + 0x1c], eax
xor r8d, r8d
mov dword [rbp - 0x38], 1
lea rdx, [rbp - 0x38]
mov qword [rsp + 0x20], 0
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x20], al
test al, al
mov eax, dword [r13 + 0x254]
mov dword [rbp - 0x30], eax
jne 0x18000d6a6
mov dword [rbp - 0x38], eax
lea r8, [rbp - 0x38]
mov rax, qword [r14 + 0x47fc0]
lea rdx, [rbp - 0x30]
mov r9, rdi
mov qword [rsp + 0x20], rax
mov ecx, 0x3e
call fcn.18003e240
mov eax, dword [r13 + 0x254]
mov dword [rbx + 0x9c], eax
jmp 0x18000d72e
xor r9d, r9d
lea rcx, [rbp - 0x30]
xor r8d, r8d
lea edx, [r9 + 0x4b]
call fcn.180020700
test eax, eax
jle 0x18000d6e9
mov r9d, 0x8c
mov dword [rbp - 0x30], eax
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov dword [rbx + 0x24], eax
mov dword [rbx + 0x9c], eax
jmp 0x18000d72e
xor eax, eax
mov dword [rbx + 0x24], eax
mov dword [rbx + 0x9c], eax
jmp 0x18000d72e
cmp byte [r13 + 0x300], 0
je 0x18000d72a
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x30], al
jmp 0x18000d72e
mov byte [rbx + 0x30], 0
dec esi
cmp esi, 0xdc
ja 0x18000d5f0
jmp 0x18000daeb
cmp byte [r13 + 0x243], 0
je 0x18000d792
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov r9d, 0x8c
mov byte [rbx + 0x31], al
xor r8d, r8d
mov dword [rbp - 0x30], 1
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], rsi
mov rcx, rdi
call fcn.180015470
jmp 0x18000d798
mov byte [rbx + 0x31], 0
xor al, al
mov byte [rbx + 0x32], al
cmp dword [rbx + 0x14], 1
ja 0x18000daeb
mov esi, 0x129
nop word [rax + rax]
cmp esi, 0x129
je 0x18000d8f3
cmp esi, 0x777f
je 0x18000d8a6
cmp esi, 0xedd5
je 0x18000d800
cmp esi, 0x1642b
jne 0x18000d979
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
mov ecx, 5
mov dword [rbx + 0x50], eax
sub ecx, eax
mov dword [rbx + 0xa0], ecx
jmp 0x18000d979
cmp byte [r15 + 5], 0
je 0x18000d82e
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
jmp 0x18000d830
xor al, al
mov byte [rbx + 0x49], al
cmp byte [rbx + 0x30], 0
je 0x18000d979
cmp dword [rbx + 0x14], 0
jne 0x18000d86a
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
jmp 0x18000d86c
mov al, 1
mov byte [rbx + 0x4a], al
test al, al
je 0x18000d879
cmp dword [rbx + 0x34], 1
jg 0x18000d883
cmp al, 0
jne 0x18000d89a
cmp dword [rbx + 0x38], 1
jle 0x18000d89a
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
mov dword [rbx + 0x4c], eax
jmp 0x18000d979
mov dword [rbx + 0x4c], 0
jmp 0x18000d979
cmp byte [r15 + 0x10d], 0
je 0x18000d8b6
cmp r12d, 1
jg 0x18000d8bc
mov word [rbx + 0x3c], 0
cmp dword [rbx + 0x14], 0
jne 0x18000d979
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x48], al
jmp 0x18000d979
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x33], al
test al, al
je 0x18000d94c
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
inc eax
cmp dword [rbx + 0x14], 0
mov dword [rbx + 0x34], eax
jne 0x18000d95c
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
inc eax
jmp 0x18000d959
movsx eax, byte [r15 + 6]
mov dword [rbx + 0x34], eax
movsx eax, byte [r15 + 7]
mov dword [rbx + 0x38], eax
movsxd rax, dword [rbx + 0x9c]
imul rcx, rax, 0xb0
mov rax, qword [r14 + 0x47fc0]
mov r12d, dword [rcx + rax + 0xac]
add esi, 0x7656
cmp esi, 0x1d958
jbe 0x18000d7b0
jmp 0x18000daeb
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x4c]
call fcn.1800298f0
mov dword [rbx + 0x54], eax
cmp byte [r15 + 0x1c], 0
je 0x18000d9de
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x4c]
call fcn.1800298f0
xor r9d, r9d
mov dword [rbx + 0x58], eax
xor edx, edx
mov qword [rsp + 0x20], rdi
xor ecx, ecx
lea r8d, [r9 + 0x4c]
call fcn.1800298f0
jmp 0x18000d9e3
mov dword [rbx + 0x58], esi
mov eax, esi
mov dword [rbx + 0x5c], eax
cmp byte [r15 + 0xff], 0
je 0x18000da19
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x60], al
jmp 0x18000daeb
xor al, al
mov byte [rbx + 0x60], al
jmp 0x18000daeb
mov eax, dword [r15 + 0x104]
mov dword [rbx + 0x64], eax
jmp 0x18000daeb
cmp byte [rbx + 0x60], 0
mov eax, dword [r15 + 0x108]
mov dword [rbx + 0x68], eax
je 0x18000daa0
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x61], al
test al, al
jne 0x18000daab
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x4c]
call fcn.1800298f0
xor r9d, r9d
mov qword [rsp + 0x20], rdi
add eax, eax
xor edx, edx
xor ecx, ecx
mov dword [rbx + 0x64], eax
lea r8d, [r9 + 0x4c]
call fcn.1800298f0
add eax, eax
mov dword [rbx + 0x68], eax
jmp 0x18000daab
movzx eax, byte [r15 + 0x100]
mov byte [rbx + 0x61], al
cmp byte [r15 + 0xfd], 0
je 0x18000daeb
cmp byte [rbx + 0x31], 0
jne 0x18000dac7
cmp byte [rbx + 0x32], 0
jne 0x18000dac7
cmp byte [rbx + 0x61], 0
jne 0x18000daeb
mov r9d, 0x8c
mov dword [rbp - 0x30], 1
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
mov byte [rbx + 0x6c], al
mov eax, dword [rbp - 0x40]
dec eax
mov dword [rbp - 0x40], eax
cmp eax, 0x110
ja 0x18000d4f0
cmp byte [r15 + 0x22], 0
jne 0x18000db0c
cmp byte [r15 + 0x21], 0
je 0x18000db36
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
mov dword [rbx + 0x70], eax
test eax, eax
jle 0x18000db36
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
inc eax
mov dword [rbx + 0x74], eax
cmp byte [r15 + 0x115], 0
je 0x18000db8c
mov r8, rdi
xor edx, edx
mov ecx, 0xec
call fcn.18002e760
xor esi, esi
mov dword [rbx + 0x78], eax
test eax, eax
jle 0x18000db8c
nop dword [rax + rax]
mov r9d, 0x8c
mov dword [rbp - 0x30], 8
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.180015470
inc esi
cmp esi, dword [rbx + 0x78]
jl 0x18000db60
cmp byte [rbx + 0xc], 0
movsxd rax, dword [rbx + 0x10]
je 0x18000dbaf
mov rcx, rax
mov rax, qword [r15 + 0xd8]
movsxd rdx, dword [rax + rcx*4]
mov rax, qword [r15 + 0xe0]
mov eax, dword [rax + rdx*4 - 4]
mov ecx, dword [rbp - 0x4c]
mov r9d, dword [rbp - 0x48]
mov dword [rbx + 0x7c], eax
jmp 0x18000d1d6
mov dword [rdi + 0x3c], r9d
mov dword [rdi + 0x40], ecx
jmp 0x18000d1d9
mov eax, dword [rbx + 0x10]
mov dword [rbx + 0x84], eax
mov dword [rbx + 0x80], eax
mov eax, dword [r15 + 8]
add eax, dword [rbx + 0x54]
mov dword [rbx + 0x88], eax
jmp 0x18000d1d9
mov eax, esi
sub eax, 0x2cf
je 0x18000dd00
sub eax, 0xf
je 0x18000dca0
cmp eax, 0x6a
jne 0x18000d1d9
cmp dword [r8], 0
je 0x18000dc8b
mov eax, dword [r11]
lea ecx, [rcx + rax*2]
imul ecx, dword [rdi + 0x48]
movsxd rcx, ecx
call fcn.18004bd24
mov ecx, dword [rbp - 0x4c]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax]
lea ecx, [rcx + rax*2]
imul ecx, dword [rdi + 0x48]
movsxd rcx, ecx
call fcn.18004bd24
mov r9d, dword [rdi + 0x48]
mov r10, rax
mov qword [rdi + 0x28], rax
mov ecx, r9d
mov rax, qword [rbp + 0x28]
movsxd r8, dword [rax]
imul ecx, r8d
add ecx, ecx
movsxd rdx, ecx
add rdx, r8
add rdx, qword [rdi + 0x20]
mov qword [rdi + 8], rdx
movsxd rcx, dword [rax]
imul r9d, ecx
lea eax, [r9 + r9]
mov r9d, dword [rbp - 0x48]
movsxd rdx, eax
add rdx, r10
add rdx, rcx
mov ecx, dword [rbp - 0x4c]
mov qword [rdi + 0x10], rdx
jmp 0x18000d1d9
mov qword [rdi + 0x20], rdx
mov qword [rdi + 0x28], rdx
mov qword [rdi + 8], rdx
mov qword [rdi + 0x10], rdx
jmp 0x18000d1d9
mov ecx, dword [rbx + 0x14]
test ecx, ecx
je 0x18000dce2
sub ecx, 1
je 0x18000dcc4
cmp ecx, 1
jne 0x18000dcf3
mov ecx, dword [rbp - 0x4c]
mov esi, 0x2de
mov dword [rbx + 0x8c], edx
jmp 0x18000d1d9
cmp byte [rbx + 0x49], 0
mov eax, edx
mov ecx, dword [rbp - 0x4c]
mov esi, 0x2de
setne al
inc eax
mov dword [rbx + 0x8c], eax
jmp 0x18000d1d9
movzx eax, byte [rbx + 0x49]
neg al
sbb ecx, ecx
add ecx, 2
mov dword [rbx + 0x8c], ecx
mov ecx, dword [rbp - 0x4c]
mov esi, 0x2de
jmp 0x18000d1d9
movsxd rdx, dword [r11]
mov eax, dword [rdi + 0x44]
imul eax, edx
add eax, eax
movsxd rcx, eax
add rcx, qword [rdi + 0x18]
add rcx, rdx
mov qword [rdi], rcx
mov ecx, dword [rbp - 0x4c]
jmp 0x18000d1d9