Function at 0x18004d300
Capabilities:
Resume thread

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xa8
mov r13d, dword [rbp + 0x7f]
mov rsi, rdx
mov r14, rcx
lea eax, [r13 + 0x8c0]
mov dword [rbp - 0x51], eax
cmp r13d, eax
ja 0x18004d6d3
movzx eax, byte [rbp + 0x7f]
mov r12, qword [rbp - 0x11]
mov ebx, dword [rbp + 0x7f]
mov r10d, dword [rbp - 0x4d]
mov dword [rbp - 0x31], eax
mov eax, dword [rbp - 0x51]
lea r11, [0x1800a2830]
mov edi, r10d
cmp r13d, 0x6683
ja 0x18004d8f2
je 0x18004d8b4
cmp r13d, 0x2f7a
ja 0x18004d592
je 0x18004d6d3
cmp r13d, 0x175d
ja 0x18004d54b
je 0x18004dc98
mov eax, r13d
sub eax, 0x168b
je 0x18004d525
sub eax, 0x46
je 0x18004d3ec
cmp eax, 0x46
jne 0x18004dc77
mov r9d, 0x643c
mov dword [rbp - 0x41], 0
lea r8, [rbp - 0x41]
xor edx, edx
mov rcx, r14
call fcn.180019880
test eax, eax
je 0x18004dc73
mov eax, dword [rbp - 9]
mov dword [r14 + 8], eax
jmp 0x18004dc73
cmp r10d, 0x2d
jne 0x18004d400
mov rcx, rsi
call fcn.180065dbc
mov r10d, eax
mov dword [rbp - 0x4d], eax
mov r15, qword [rbp + 0x77]
xor r13d, r13d
mov eax, r13d
cmp edi, 0x2d
sete al
mov dword [rbp - 9], eax
mov edi, 0x28d8
nop dword [rax + rax]
mov eax, edi
sub eax, 0x28d8
je 0x18004d4c1
sub eax, 0x36
je 0x18004d44e
cmp eax, 0x36
jne 0x18004d506
mov rcx, rsi
call fcn.180065dbc
mov r10d, eax
mov dword [rbp - 0x4d], eax
jmp 0x18004d506
mov rax, qword [rbp + 0x77]
mov esi, dword [rbp - 0x29]
mov eax, dword [rax]
cmp esi, eax
je 0x18004d51a
mov r9d, 0x51e4
mov dword [rbp - 0x41], eax
lea r8, [rbp - 0x41]
mov rdx, r14
mov rcx, r14
call fcn.180009380
test eax, eax
jne 0x18004d6d6
mov qword [rsp + 0x40], r13
lea rcx, [rbp - 0x41]
mov dword [rsp + 0x38], 0x7a7a
xor r9d, r9d
mov qword [rsp + 0x30], r13
mov r8, r14
mov qword [rsp + 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], r13
mov dword [rbp - 0x41], esi
call fcn.18005a0d0
test eax, eax
jne 0x18004d6d6
mov r10d, dword [rbp - 0x4d]
mov r15, qword [rbp + 0x77]
jmp 0x18004d502
movsxd r8, dword [r15]
mov esi, r13d
mov dword [rbp - 0x29], r13d
mov rax, r13
test r8, r8
jle 0x18004d4fd
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz_]
movsx edx, byte [rax + rcx]
cmp edx, r10d
je 0x18004d4fa
inc esi
inc rax
cmp rax, r8
jl 0x18004d4e0
mov dword [rbp - 0x29], esi
mov edi, 0x28d8
mov rsi, qword [rbp + 0x57]
add edi, 0x36
cmp edi, 0x2944
jbe 0x18004d420
jmp 0x18004d413
mov r13d, 0x16d1
jmp 0x18004dc77
xor r9d, r9d
mov r8d, 0x3c53
mov rdx, r14
xor ecx, ecx
call fcn.180053580
mov rcx, rsi
call fcn.180065dbc
mov r10d, eax
mov dword [rbp - 0x4d], eax
jmp 0x18004dc77
mov eax, r13d
sub eax, 0x2eee
je 0x18004d56a
cmp eax, 0x46
mov eax, dword [rbp - 0x51]
jne 0x18004dc7a
mov byte [rbp - 0x35], 1
jmp 0x18004dc7a
cmp byte [r14 + 0x19], 0
je 0x18004dca8
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x18004dc9f
mov byte [r14 + 0x19], 0
jmp 0x18004dc73
cmp r13d, 0x65b1
ja 0x18004d65a
je 0x18004d62e
mov eax, r13d
sub eax, 0x64df
je 0x18004d61a
sub eax, 0x46
je 0x18004d5e7
cmp eax, 0x46
jne 0x18004dc77
mov eax, dword [r14]
lea rdx, [rbp - 0x41]
xor r9d, r9d
mov dword [rbp - 0x41], eax
mov r8d, 0x4743
xor ecx, ecx
call fcn.180036dd0
mov dword [rbp - 0x39], eax
test eax, eax
jne 0x18004d6d6
jmp 0x18004dc73
cmp qword [rbp + 0x6f], 0
jne 0x18004dc77
lea r9, str.Sat_17_Sep_a
lea r8, [0x180082820]
mov dword [rbp - 0x41], 0
mov edx, 0x5836
lea rcx, [rbp - 0x41]
call fcn.18000e4c0
jmp 0x18004dc73
cmp qword [rbp + 0x77], 0
jne 0x18004dc77
lea r9, str.Book_Signing
jmp 0x18004d5f9
movsxd rax, dword [r14]
mov ecx, 8
shl rax, 7
mov edi, dword [rax + r11 + 0xc]
mov dword [rbp - 0x25], edi
call fcn.180064534
mov ecx, edi
mov qword [rbp - 0x19], rax
call fcn.180064534
mov r12, rax
jmp 0x18004dc73
mov eax, r13d
sub eax, 0x65f7
je 0x18004d6a6
cmp eax, 0x46
jne 0x18004dc77
xor eax, eax
mov dword [rbp - 0x39], eax
mov eax, dword [rbp - 0x25]
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], 0
mov r9d, 0x7077
xor r8d, r8d
mov qword [rbp - 0x41], rax
xor edx, edx
mov qword [rsp + 0x20], r12
mov r13d, 0x663d
call fcn.18001dad0
jmp 0x18004dc73
mov r15, qword [rbp - 0x19]
test r15, r15
je 0x18004d6b4
test r12, r12
jne 0x18004d727
mov edi, 0x2aba
nop dword [rax]
mov eax, edi
sub eax, 0x2aba
je 0x18004d6f3
sub eax, 0x10
je 0x18004d6ea
cmp eax, 0x10
jne 0x18004d70d
mov eax, dword [rbp - 0x35]
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov dword [rbp - 0x35], 0xd
jmp 0x18004d70d
test r15, r15
je 0x18004d700
mov rcx, r15
call fcn.18006452c
test r12, r12
je 0x18004d70d
mov rcx, r12
call fcn.18006452c
add edi, 0x10
cmp edi, 0x2ada
jbe 0x18004d6c0
mov r9, qword [rbp + 0x67]
lea r11, [0x1800a2830]
mov r10d, dword [rbp - 0x4d]
xor edi, edi
cmp dword [r9], edi
jbe 0x18004dc77
mov esi, 0x1d08
nop word [rax + rax]
mov eax, esi
sub eax, 0x1d08
je 0x18004d863
sub eax, 0x54
je 0x18004d7e7
sub eax, 0x54
je 0x18004d7c4
cmp eax, 0x54
jne 0x18004d79c
mov r8d, dword [rbp - 0x25]
xor ecx, ecx
test r8d, r8d
je 0x18004d79c
mov r15, qword [rbp + 0x6f]
mov rdx, r12
mov eax, dword [r9]
sub rdx, r15
test eax, eax
je 0x18004d798
movzx eax, byte [rdx + r15]
inc ecx
mov byte [r15], al
inc r15
dec dword [r9]
mov eax, dword [r9]
mov qword [rbp + 0x6f], r15
cmp ecx, r8d
jb 0x18004d778
mov r15, qword [rbp - 0x19]
add esi, 0x54
lea r11, [0x1800a2830]
cmp esi, 0x1e04
jbe 0x18004d740
cmp dword [r9], 0
jbe 0x18004dc73
lea r11, [0x1800a2830]
jmp 0x18004d732
movsxd rax, dword [r14]
mov rdx, r12
shl rax, 7
mov rcx, r15
call qword [rax + r11 + 0x68]
mov dword [rbp - 0x39], eax
test eax, eax
jne 0x18004d672
mov r9, qword [rbp + 0x67]
jmp 0x18004d798
movsxd rax, dword [r14]
mov rcx, r15
shl rax, 7
call qword [rax + r11 + 0x58]
mov dword [rbp - 0x39], eax
cmp eax, 0
jne 0x18004d672
mov rcx, qword [rbp + 0x57]
lea r9, [0x1800a2830]
movsxd rax, dword [r14]
mov rdx, qword [rbp + 0x77]
shl rax, 7
mov r8d, dword [rcx]
mov rcx, r15
call qword [rax + r9 + 0x60]
mov dword [rbp - 0x39], eax
cmp eax, 0
jne 0x18004d672
movsxd rax, dword [r14]
lea r9, [0x1800a2830]
shl rax, 7
mov r8d, 4
mov rdx, r12
mov rcx, r15
call qword [rax + r9 + 0x60]
mov dword [rbp - 0x39], eax
cmp eax, 0
jne 0x18004d672
mov r9, qword [rbp + 0x67]
jmp 0x18004d79c
mov ecx, 0x306d
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x306d
je 0x18004d88f
cmp eax, 0x22
jne 0x18004d8a2
mov eax, edi
mov byte [r12 + 3], dil
shr eax, 8
mov byte [r12 + 2], al
jmp 0x18004d8a2
mov eax, edi
shr eax, 0x18
mov byte [r12], al
mov eax, edi
shr eax, 0x10
mov byte [r12 + 1], al
add ecx, 0x22
cmp ecx, 0x308f
jbe 0x18004d870
inc edi
jmp 0x18004d79c
mov rsi, qword [rbp - 0x19]
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], 0
mov r9d, 0x7077
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov qword [rbp - 0x41], 8
call fcn.18001dad0
mov rcx, r12
call fcn.18006452c
mov rcx, rsi
jmp 0x18004dc6e
cmp r13d, 0x7dd8
ja 0x18004da18
je 0x18004d9e2
cmp r13d, 0x7d06
ja 0x18004d99a
je 0x18004d985
mov eax, r13d
sub eax, 0x66c9
je 0x18004dcb1
sub eax, 0x15b1
je 0x18004d969
cmp eax, 0x46
jne 0x18004dc77
mov r15, qword [rbp + 0x6f]
mov eax, dword [r15]
test al, 2
je 0x18004d943
or eax, 1
mov dword [r15], eax
mov eax, dword [rsi]
mov edi, 0
test al, 7
setne dil
sar eax, 3
add edi, eax
movsxd rcx, edi
mov dword [rbp - 0x21], edi
call fcn.180064534
mov qword [rbp - 0x11], rax
jmp 0x18004dc73
cmp dword [rsi], 1
jle 0x18004d97b
mov rax, qword [rbp + 0x77]
cmp dword [rax], 0
jg 0x18004dc77
mov eax, 0xfffffffd
jmp 0x18004d6d6
cmp qword [rbp - 0x11], 0
jne 0x18004dc7a
mov eax, 0xfffffffe
jmp 0x18004d6d6
mov eax, r13d
sub eax, 0x7d4c
je 0x18004d9b9
cmp eax, 0x46
mov eax, dword [rbp - 0x51]
jne 0x18004dc7a
mov byte [rbp - 0x49], 0
jmp 0x18004dc7a
mov ecx, dword [rsi]
and ecx, 7
jne 0x18004d9c9
mov byte [rbp - 0x31], 0xff
jmp 0x18004dc77
mov eax, 8
mov edx, 0xff
sub eax, ecx
movzx ecx, al
sar edx, cl
mov dword [rbp - 0x31], edx
jmp 0x18004dc77
mov edx, dword [rsi]
xor ecx, ecx
mov eax, edx
and al, 7
cmp al, 1
mov rax, qword [rbp + 0x6f]
sete cl
mov dword [rbp - 5], ecx
test byte [rax], 8
je 0x18004da0f
mov ecx, 1
mov eax, 0x80
sub ecx, edx
and ecx, 7
sar eax, cl
or byte [rbp - 0x49], al
mov byte [rbp + 0x7f], 1
jmp 0x18004dc77
mov eax, r13d
sub eax, 0x7e1e
je 0x18004dac4
sub eax, 0x46
je 0x18004da4f
sub eax, 0x46
je 0x18004dc64
sub eax, 0x46
je 0x18004da47
cmp eax, 0x46
je 0x18004d6d3
jmp 0x18004dc77
mov dword [rbp - 0x35], ebx
jmp 0x18004dc77
mov rax, qword [rbp + 0x6f]
test byte [rax], 2
je 0x18004dabd
mov r9, r14
mov qword [rsp + 0x20], r14
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bfe
call fcn.18002dd60
mov ebx, eax
test eax, eax
jne 0x18004dc64
xor eax, eax
mov dword [rbp - 0x41], 1
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x41]
mov dword [rsp + 0x38], 0x7a7a
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8, r14
mov qword [rsp + 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.18005a0d0
mov ebx, eax
test eax, eax
jne 0x18004dc64
mov r10d, dword [rbp - 0x4d]
xor ebx, ebx
jmp 0x18004dc77
mov rax, qword [rbp + 0x6f]
movzx edx, byte [rbp + 0x7f]
movsxd rdi, dword [rbp - 0x21]
movsxd r14, dword [rbp - 5]
mov r15, rdi
mov ecx, dword [rax]
movzx eax, dl
or al, 3
and cl, 1
movzx esi, al
cmove esi, edx
nop word [rax + rax]
mov rbx, qword [rbp - 0x11]
mov edx, edi
mov rcx, rbx
call r9
cmp eax, edi
jne 0x18004dc57
mov eax, dword [rbp - 0x31]
lea r9, [rbp + 0x7f]
and byte [rbx], al
mov r8, rbx
movzx ecx, byte [rbx]
mov rax, qword [rbp + 0x57]
mov dword [rbp + 0x7f], edi
mov rdi, qword [rbp + 0x4f]
mov rdx, rdi
mov eax, dword [rax]
dec eax
and eax, 7
bts ecx, eax
movzx eax, byte [rbp - 0x49]
mov byte [rbx], cl
mov ecx, 0x681e
or byte [r14 + rbx], al
or byte [r15 + rbx - 1], sil
call fcn.18000dd30
mov byte [rbp + 0x7f], sil
mov ebx, eax
test eax, eax
jne 0x18004dc60
mov rax, qword [rbp + 0x77]
lea r9, [rbp - 0x2d]
mov r8d, 0x1247
lea rcx, [rbp + 0x7f]
mov rdx, rdi
mov eax, dword [rax]
mov dword [rbp + 0x7f], eax
call fcn.180036dd0
mov byte [rbp + 0x7f], sil
mov ebx, eax
test eax, eax
jne 0x18004dc60
mov eax, dword [rbp - 0x2d]
test eax, eax
je 0x18004dc3a
mov rcx, qword [rbp + 0x6f]
test byte [rcx], 2
je 0x18004dc3a
mov edi, 0x21be
mov byte [rbp + 0x7f], sil
cmp edi, edi
jne 0x18004dc28
mov rax, qword [rbp + 0x4f]
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, rax
mov dword [rbp - 0x41], 1
mov edx, 0x84a
call fcn.18001c810
mov ebx, eax
test eax, eax
jne 0x18004dc60
mov r9, qword [rbp + 0x4f]
xor r8d, r8d
mov rdx, r9
mov qword [rsp + 0x20], 0
mov ecx, 0x353c
call fcn.180057f10
mov rbx, rax
test eax, eax
jne 0x18004dc60
mov rax, qword [rbp + 0x77]
lea r9, [rbp - 0x2d]
mov rdx, qword [rbp + 0x4f]
lea rcx, [rbp - 0x41]
mov r8d, 0x1247
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
call fcn.180036dd0
mov ebx, eax
test eax, eax
jne 0x18004dc60
add edi, 0x64
cmp edi, 0x21be
jbe 0x18004dba2
mov eax, dword [rbp - 0x2d]
mov r9, qword [rbp + 0x67]
mov edi, dword [rbp - 0x21]
mov r8, qword [rbp + 0x5f]
mov byte [rbp + 0x7f], sil
test eax, eax
je 0x18004daf0
mov r14, qword [rbp + 0x4f]
jmp 0x18004dc73
mov ebx, 0xfffffffd
mov byte [rbp + 0x7f], sil
mov r14, qword [rbp + 0x4f]
mov rcx, qword [rbp - 0x11]
mov r13d, 0x7eaa
call fcn.18006452c
mov r10d, dword [rbp - 0x4d]
mov eax, dword [rbp - 0x51]
add r13d, 0x46
cmp r13d, eax
ja 0x18004d6d3
mov r9, qword [rbp + 0x67]
mov rsi, qword [rbp + 0x57]
mov r8, qword [rbp + 0x5f]
jmp 0x18004d35e
xor eax, eax
jmp 0x18004d6d6
mov byte [rbp - 0x35], 0
jmp 0x18004d6d3
mov byte [rbp - 0x35], 1
jmp 0x18004d6d3
mov eax, dword [rbp - 0x39]
jmp 0x18004d6d6