Function at 0x18003af80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20a0]
mov eax, 0x21a0
call fcn.180086430
sub rsp, rax
movaps xmmword [rsp + 0x2190], xmm6
movaps xmmword [rsp + 0x2180], xmm7
movaps xmmword [rsp + 0x2170], xmm8
movaps xmmword [rsp + 0x2160], xmm9
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x2050], rax
mov r10, qword [rbp + 0x2100]
lea edi, [rcx - 0xd]
mov r11d, dword [rsp + 0x60]
mov r13, r9
mov r9, qword [rsp + 0x68]
mov r12, r8
mov r8, qword [rbp + 0x2110]
mov esi, ecx
mov r14, qword [rbp + 0x2108]
mov r15d, dword [rsp + 0x60]
mov qword [rbp - 0x48], r8
mov qword [rsp + 0x70], r9
mov qword [rsp + 0x48], rdx
mov dword [rbp - 0x68], ecx
mov qword [rbp - 0x70], r10
mov dword [rsp + 0x30], r11d
cmp ecx, edi
jbe 0x18003b286
mov eax, dword [rsp + 0x60]
lea ebx, [rcx - 0xe]
mov rcx, qword [rsp + 0x68]
lea rsi, [0x180000000]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x68]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x58], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rbp - 0x60], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x80], rax
nop dword [rax]
cmp ebx, 0x28
ja case.0x18003b08b.11
movzx eax, byte [rsi + rbx + 0x3bd54]
mov ecx, dword [rsi + rax*4 + 0x3bd1c]
add rcx, rsi
jmp rcx
mov eax, dword [r13]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], eax
lea rdx, [rsp + 0x78]
mov eax, dword [r12]
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x78], eax
mov r8d, 0xeb
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.18001a970
mov rdx, qword [rsp + 0x48]
mov r11d, eax
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x70]
mov dword [rsp + 0x30], eax
jmp case.0x18003b08b.11
mov qword [rbp - 0x30], r14
jmp case.0x18003b08b.11
mov eax, dword [rdx]
mov dword [rbp - 0x28], eax
mov qword [rbp - 0x18], r10
jmp case.0x18003b08b.11
xor eax, eax
mov dword [rsp + 0x40], eax
jmp case.0x18003b08b.11
test r10, r10
je 0x18003b24f
test r8, r8
je 0x18003b24f
test r14, r14
je 0x18003b24f
cmp dword [r13], 1
ja 0x18003b24f
cmp dword [r12], 4
ja 0x18003b24f
xor eax, eax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
jmp case.0x18003b08b.11
lea r8, [rsp + 0x38]
mov qword [rbp - 0x50], 0x40
mov edx, SHSetInstanceExplorer
mov qword [rsp + 0x38], ILClone
lea rcx, [rbp - 0x50]
call fcn.1800385f0
mov rdx, qword [rsp + 0x48]
mov r8, rax
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x70]
mov r11d, dword [rsp + 0x30]
mov qword [rsp + 0x38], rax
jmp 0x18003b23d
test r11d, r11d
je case.0x18003b08b.11
mov dword [rsp + 0x50], r11d
jmp case.0x18003b08b.0
lea r9, [rsp + 0x68]
mov dword [rsp + 0x60], 0
lea r8, [rsp + 0x60]
mov qword [rsp + 0x68], 0x9a00
mov edx, 0x11f
lea rcx, [0x180096770]
call fcn.1800236a0
mov rdx, qword [rsp + 0x48]
mov r9, rax
mov r10, qword [rbp - 0x70]
mov r11d, dword [rsp + 0x30]
mov dword [rax + 4], 0x100
mov dword [rax], 0x100
mov qword [rsp + 0x70], rax
add rax, 8
mov qword [rbp - 0x60], rax
lea rax, [r9 + 0x228]
mov qword [rbp - 0x80], rax
jmp case.0x18003b08b.11
mov esi, dword [r8]
lea eax, [rsi + 1]
cmp eax, 4
ja 0x18003b25c
mov dword [r10 + 0x18], esi
lea rsi, [0x180000000]
mov dword [rsp + 0x50], 0
jmp case.0x18003b08b.11
lea rcx, [r9 + 0x1230]
mov qword [rbp - 0x58], rcx
lea rcx, [r9 + 0x7a3c]
mov qword [rbp - 0x78], rcx
jmp case.0x18003b08b.11
xor r15d, r15d
mov r8, qword [rsp + 0x38]
dec ebx
lea eax, [rbx + 0xe]
cmp eax, edi
jbe 0x18003b2be
mov r8, qword [rbp - 0x48]
jmp 0x18003b070
mov dword [rsp + 0x50], 0xfffffffe
jmp case.0x18003b08b.0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, esi
lea rdx, str.TPEMFIsJobActive
mov rcx, rax
call fcn.180085950
mov dword [rsp + 0x50], 0xffffffff
jmp case.0x18003b08b.0
mov r8, qword [rsp + 0x68]
mov r13, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x68]
mov ebx, dword [rsp + 0x60]
mov qword [rsp + 0x38], r8
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x78], rcx
mov dword [rsp + 0x40], ebx
jmp 0x18003b2cd
mov ebx, dword [rsp + 0x40]
mov rax, qword [rbp - 0x80]
mov esi, dword [rbp - 0x68]
mov rdi, qword [rbp - 0x58]
imul ecx, esi, 0x1ee
mov r12d, esi
mov dword [rsp + 0x58], esi
mov dword [rbp - 0x50], ecx
cmp esi, ecx
ja case.0x18003b08b.0
movsd xmm9, qword [0x18009f160]
movsd xmm8, qword [0x18009f218]
mov esi, dword [rbp - 0x50]
movsxd rcx, r15d
mov qword [rsp + 0x48], rcx
movsxd r14, ebx
nop word [rax + rax]
cmp r12d, 0x86c
ja 0x18003bc1a
je case.0x18003b08b.0
cmp r12d, 0x43
ja 0x18003b51c
je 0x18003b4ed
cmp r12d, 0x1c
je 0x18003b43d
cmp r12d, 0x29
je 0x18003b3fe
cmp r12d, 0x36
jne 0x18003bcc0
mov rdx, r8
lea ecx, [r12 + 0x29]
call fcn.18006fff0
mov ecx, 1
mov ebx, 0xff
mov dword [rsp + 0x58], ecx
nop dword [rax]
mov eax, ebx
sub eax, 2
je 0x18003b38b
sub eax, 0x90
je 0x18003b3bc
cmp eax, 0x6d
jne 0x18003b3ae
mov dword [0x1800a6c78], ecx
jmp 0x18003b3ae
mov eax, dword [pe_dos_header]
lea r9, [rsp + 0x58]
lea r8, [rbp - 0x40]
mov dword [rbp - 0x40], eax
mov edx, 0x34
xor ecx, ecx
call fcn.180030540
mov ecx, dword [rsp + 0x58]
add ebx, 0x90
cmp ebx, 0x2af
jb 0x18003b370
lea r8, [rsp + 0x38]
mov qword [rsp + 0x58], 1
mov edx, SHSetInstanceExplorer
mov qword [rsp + 0x38], 0x400
lea rcx, [rsp + 0x58]
call fcn.1800385f0
mov rcx, qword [rsp + 0x48]
mov r8, rax
mov r9, qword [rsp + 0x70]
mov r11d, dword [rsp + 0x30]
mov qword [rsp + 0x38], rax
jmp 0x18003bcc0
mov rax, qword [rbp - 0x48]
lea r8, [rbp - 0x30]
xor r9d, r9d
mov edx, 0xb2
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp - 0x10], eax
call fcn.180038010
mov dword [rsp + 0x30], eax
mov r11d, eax
test eax, eax
je 0x18003bce7
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x70]
jmp 0x18003bcc0
mov r8, r9
xor edx, edx
mov ecx, 0xfc
call fcn.180059a10
mov r15, qword [rbp - 0x70]
lea rbx, [rdi + 8]
mov rdi, qword [rbp - 0x80]
mov esi, 1
sub rdi, qword [rbp - 0x58]
movd xmm7, dword [r15 + 4]
cvtdq2pd xmm7, xmm7
nop dword [rax + rax]
movd xmm6, esi
lea r9, [rsp + 0x58]
cvtdq2pd xmm6, xmm6
xor edx, edx
xor ecx, ecx
mov r8d, 0xa2
mulsd xmm6, xmm7
mulsd xmm6, xmm9
movsd qword [rsp + 0x58], xmm6
call fcn.180035cc0
mov qword [rdi + rbx], rax
lea r8, [rsp + 0x58]
movsd xmm0, qword [r15 + 0x30]
lea rdx, [rbp - 0x38]
mov ecx, 0xf4
movsd qword [rbp - 0x38], xmm0
movsd qword [rsp + 0x58], xmm6
call fcn.18007a020
inc esi
mov qword [rbx], rax
lea rbx, [rbx + 8]
cmp esi, 0x201
jl 0x18003b470
mov r8, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x70]
mov r11d, dword [rsp + 0x30]
jmp 0x18003bcc0
mov rax, qword [rbp - 0x48]
lea r9, [rsp + 0x58]
mov r8, r10
mov dword [rsp + 0x58], 0
lea rdx, [rbp - 0x38]
mov ecx, 0x118
mov rax, qword [rax]
mov qword [rbp - 0x38], rax
call fcn.180060e10
mov dword [rsp + 0x50], eax
jmp 0x18003b4d4
cmp r12d, 0x444
je 0x18003b561
cmp r12d, 0x63f
jne 0x18003bcc0
cmp r11d, 4
je 0x18003b543
mov r12d, 0x126b
jmp 0x18003bcc0
mov rcx, qword [rbp - 0x48]
lea r8, [rbp - 0x30]
mov eax, dword [rbp - 0x10]
mov edx, 0x35
sub dword [rcx], eax
xor ecx, ecx
call fcn.180040f80
jmp 0x18003b4d4
mov r12d, 0x3e
nop word [rax + rax]
cmp r12d, 0x3e
je 0x18003b6e6
mov r15, qword [rbp - 0x78]
cmp r12d, 0xc0
jne 0x18003b832
mov dword [r15 + r14*4], 0x201
lea rcx, [rbp + 0x1848]
mov dword [r9 + 0x7a38], ebx
lea rdx, [rax + 0x18]
lea r8d, [r12 - 0x80]
nop word [rax + rax]
movsxd rax, dword [rcx - 4]
movsd xmm0, qword [rdx - 0x10]
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx]
movsd xmm0, qword [rdx - 8]
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx + 4]
movsd xmm0, qword [rbp + rax*8 + 0x830]
addsd xmm0, qword [rdx]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx + 8]
movsd xmm0, qword [rdx + 8]
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx + 0xc]
movsd xmm0, qword [rdx + 0x10]
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx + 0x10]
movsd xmm0, qword [rdx + 0x18]
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx + 0x14]
movsd xmm0, qword [rdx + 0x20]
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
movsxd rax, dword [rcx + 0x18]
add rcx, 0x20
movsd xmm0, qword [rdx + 0x28]
add rdx, 0x40
addsd xmm0, qword [rbp + rax*8 + 0x830]
movsd qword [rbp + rax*8 + 0x830], xmm0
sub r8, 1
jne 0x18003b5b0
lea esi, [r8 + 0x40]
lea r8d, [rsi - 1]
lea rax, [rbp + 0x838]
lea rdx, [rbp + 0x24]
nop dword [rax + rax]
mov ecx, dword [rdx]
test ecx, ecx
je 0x18003b6cc
movsd xmm1, qword [rax]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [rax], xmm1
jmp 0x18003b6d3
mov qword [rax], 0
add rdx, 4
add rax, 8
sub r8, 1
jne 0x18003b6b0
jmp 0x18003b82d
mov r13, qword [rbp - 0x78]
lea rdx, [rcx*8]
mov r15, 0xfffffffffffffff8
lea r10, [rbp + 0x1848]
mov edi, 8
lea rcx, [rax + 0x18]
mov r9d, 3
sub r15, rax
sub rdi, rax
mov dword [r13], 1
mov r11, 0xfffffffffffffff0
mov esi, 1
mov r8d, r9d
sub r11, rax
nop
movsd xmm0, qword [rcx - 0x10]
subsd xmm0, qword [rdx + rax]
comisd xmm0, xmm8
jbe 0x18003b758
lea rdx, [r8 - 2]
mov dword [r13 + r14*4 + 4], esi
inc ebx
mov qword [rsp + 0x48], rdx
inc r14
lea rdx, [r11 + rcx]
movsd xmm0, qword [rcx - 8]
subsd xmm0, qword [rdx + rax]
inc dword [rbp + r14*4 + 0x20]
mov dword [r10 - 4], ebx
comisd xmm0, xmm8
jbe 0x18003b791
lea rax, [r8 - 1]
inc ebx
mov qword [rsp + 0x48], rax
lea rdx, [r15 + rcx]
lea eax, [r9 - 1]
inc r14
mov dword [r13 + r14*4], eax
mov rax, qword [rbp - 0x80]
movsd xmm0, qword [rcx]
subsd xmm0, qword [rdx + rax]
inc dword [rbp + r14*4 + 0x20]
mov dword [r10], ebx
comisd xmm0, xmm8
jbe 0x18003b7be
mov rdx, rcx
mov dword [r13 + r14*4 + 4], r9d
sub rdx, rax
mov qword [rsp + 0x48], r8
inc ebx
inc r14
movsd xmm0, qword [rcx + 8]
subsd xmm0, qword [rdx + rax]
inc dword [rbp + r14*4 + 0x20]
mov dword [r10 + 4], ebx
comisd xmm0, xmm8
jbe 0x18003b7f7
lea rax, [r8 + 1]
inc ebx
mov qword [rsp + 0x48], rax
lea rdx, [rdi + rcx]
lea eax, [r9 + 1]
inc r14
mov dword [r13 + r14*4], eax
mov rax, qword [rbp - 0x80]
inc dword [rbp + r14*4 + 0x20]
add esi, 4
mov dword [r10 + 8], ebx
add r9d, 4
add r10, 0x10
add rcx, 0x20
add r8, 4
cmp r9d, 0x203
jl 0x18003b730
mov r9, qword [rsp + 0x70]
inc ebx
inc r14
mov r15, r13
mov rcx, qword [rsp + 0x48]
mov rax, qword [rbp - 0x80]
add r12d, 0x82
cmp r12d, 0x142
jb 0x18003b570
mov r13, qword [rbp - 0x60]
mov edx, ILClone
mov dword [rsp + 0x40], ebx
mov ebx, dword [rsp + 0x78]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xf
je 0x18003b8f6
cmp eax, 1
jne 0x18003bace
cmp esi, 0xc1
jge 0x18003b8b1
movsxd rax, ebx
inc ebx
lea rcx, [rax*4]
mov eax, 0xc0
sub eax, esi
add rcx, r13
shr eax, 2
add ebx, eax
nop dword [rax + rax]
mov dword [rcx], esi
lea rcx, [rcx + 4]
add esi, 4
cmp esi, 0xc1
jl 0x18003b8a0
cmp esi, 0x201
jae 0x18003bace
movsxd rax, ebx
inc ebx
lea rcx, [rax*4]
mov eax, 0x200
sub eax, esi
add rcx, r13
shr eax, 3
add ebx, eax
nop dword [rax]
mov dword [rcx], esi
lea rcx, [rcx + 4]
add esi, 8
cmp esi, 0x201
jl 0x18003b8e0
jmp 0x18003bace
mov esi, 0x31
mov dword [r13], 1
mov dword [r13 + 4], 2
lea rax, [r13 + 0xc0]
mov dword [r13 + 8], 3
mov dword [r13 + 0xc], 4
lea ebx, [rsi + 0x17]
mov dword [r13 + 0x10], 5
mov dword [r13 + 0x14], 6
mov dword [r13 + 0x18], 7
mov dword [r13 + 0x1c], 8
mov dword [r13 + 0x20], 9
mov dword [r13 + 0x24], 0xa
mov dword [r13 + 0x28], ILClone
mov dword [r13 + 0x2c], ILClone
mov dword [r13 + 0x30], ILClone
mov dword [r13 + 0x34], ILClone
mov dword [r13 + 0x38], ILClone
mov dword [r13 + 0x3c], ILClone
mov dword [r13 + 0x40], reloc.SHELL32.dll_ILRemoveLastID
mov dword [r13 + 0x44], reloc.SHELL32.dll_ILClone
mov dword [r13 + 0x48], 0x13
mov dword [r13 + 0x4c], 0x14
mov dword [r13 + 0x50], 0x15
mov dword [r13 + 0x54], 0x16
mov dword [r13 + 0x58], 0x17
mov dword [r13 + 0x5c], 0x18
mov dword [r13 + 0x60], 0x19
mov dword [r13 + 0x64], 0x1a
mov dword [r13 + 0x68], 0x1b
mov dword [r13 + 0x6c], 0x1c
mov dword [r13 + 0x70], 0x1d
mov dword [r13 + 0x74], 0x1e
mov dword [r13 + 0x78], 0x1f
mov dword [r13 + 0x7c], 0x20
mov dword [r13 + 0x80], 0x21
mov dword [r13 + 0x84], 0x22
mov dword [r13 + 0x88], 0x23
mov dword [r13 + 0x8c], 0x24
mov dword [r13 + 0x90], PathMakeUniqueName
mov dword [r13 + 0x94], PathMakeUniqueName
mov dword [r13 + 0x98], PathMakeUniqueName
mov dword [r13 + 0x9c], PathMakeUniqueName
mov dword [r13 + 0xa0], PathMakeUniqueName
mov dword [r13 + 0xa4], PathMakeUniqueName
mov dword [r13 + 0xa8], PathMakeUniqueName
mov dword [r13 + 0xac], PathMakeUniqueName
mov dword [r13 + 0xb0], PathMakeUniqueName
mov dword [r13 + 0xb4], PathMakeUniqueName
mov dword [r13 + 0xb8], reloc.SHELL32.dll_PathMakeUniqueName
mov dword [r13 + 0xbc], 0x30
nop word [rax + rax]
mov dword [rax], esi
lea rax, [rax + 4]
add esi, 2
cmp esi, 0x61
jl 0x18003bac0
inc edx
cmp edx, 0x11
jb 0x18003b860
mov rax, qword [rbp - 0x70]
mov dword [rsp + 0x78], ebx
mov ebx, dword [rsp + 0x40]
cmp dword [rax + 0x88], 4
jle 0x18003bbfc
mov r12d, 0x7f
nop dword [rax + rax]
cmp r12d, 0x7f
je 0x18003bb84
cmp r12d, 0x118
jne 0x18003bbdf
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x88
lea rdx, str.Performing_cleanup_operations
mov rcx, rax
call fcn.180085950
mov r15, r13
xor esi, esi
mov r13, qword [rbp - 0x80]
movsxd rdi, dword [r15]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movsd xmm0, qword [r13 + rdi*8]
lea rdx, str.VmodlVimEventVmSuspendingEvent
mov rcx, rax
movsd qword [rsp + 0x20], xmm0
mov r9d, edi
mov r8d, esi
call fcn.180085950
inc esi
lea r15, [r15 + 4]
cmp esi, 0x88
jl 0x18003bb40
mov r13, qword [rbp - 0x60]
jmp 0x18003bbdb
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, str.NvSmartMax_mutex32
mov rcx, rax
call fcn.180085950
xor esi, esi
xor ebx, ebx
test r14, r14
jle 0x18003bbdb
nop word [rax + rax]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, dword [r15 + rbx*4]
lea rdx, str.jfjjdfefebklmdbmenmlehlopoocnoeh
mov rcx, rax
mov r8d, esi
call fcn.180085950
inc esi
inc rbx
cmp rbx, r14
jl 0x18003bbb0
mov ebx, dword [rsp + 0x40]
mov r15, qword [rbp - 0x78]
add r12d, 0x99
cmp r12d, 0x1b1
jb 0x18003bb00
mov r9, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x48]
mov r12d, dword [rsp + 0x58]
mov r8, qword [rsp + 0x38]
mov r11d, dword [rsp + 0x30]
mov qword [rsp + 0x50], r9
jmp 0x18003bcc0
cmp r12d, 0xa35
je case.0x18003b08b.0
cmp r12d, 0xc55
je 0x18003bcb8
cmp r12d, 0x103e
je 0x18003bca6
cmp r12d, 0x126b
je case.0x18003b08b.0
cmp r12d, 0x1881
jne 0x18003bcc0
lea r8, [rbp - 0x30]
mov edx, 0x35
xor ecx, ecx
call fcn.180040f80
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x50]
mov rcx, qword [rbp + 0x2050]
xor rcx, rsp
call fcn.1800864a0
lea r11, [rsp + 0x21a0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, r8
mov ecx, 0x5f
call fcn.18006fff0
jmp 0x18003b4d4
mov dword [rsp + 0x50], 0
imul eax, dword [rbp - 0x68], 0x26
add r12d, eax
mov dword [rsp + 0x58], r12d
cmp r12d, dword [rbp - 0x50]
ja case.0x18003b08b.0
mov ebx, dword [rsp + 0x40]
mov rax, qword [rbp - 0x80]
mov r10, qword [rbp - 0x70]
mov rdi, qword [rbp - 0x58]
jmp 0x18003b310
xor ecx, ecx
lea r8, [rbp - 0x30]
mov edx, 0x35
cmp dword [rbp - 0x10], ecx
jbe 0x18003bd09
call fcn.180040f80
mov dword [rsp + 0x50], 0xfffffff9
jmp case.0x18003b08b.0
call fcn.180040f80
mov dword [rsp + 0x50], 0xfffffff8
jmp case.0x18003b08b.0