Function at 0x180044c10
Capabilities:
Get geographical location
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2620]
mov eax, 0x2720
call fcn.180077ba0
sub rsp, rax
mov rax, qword [0x1800923a0]
xor rax, rsp
mov qword [rbp + 0x2610], rax
mov r10, qword [rbp + 0x2690]
mov r15, rdx
mov rdx, qword [rbp + 0x2680]
xor r11d, r11d
mov r14, qword [rbp + 0x2688]
mov r13, r9
mov rsi, qword [rbp + 0x2698]
mov r12, r8
imul eax, ecx, 0x5fa
mov ebx, ecx
mov dword [rsp + 0x40], ecx
mov qword [rbp - 0x80], rdx
mov qword [rsp + 0x60], r10
mov dword [rsp + 0x38], eax
cmp ecx, eax
ja 0x180044d49
mov rdi, qword [rsp + 0x48]
lea r8d, [r11 + 0x65]
nop dword [rax + rax]
cmp ebx, 0x393b
ja 0x180044f59
je 0x180044f2c
cmp ebx, 0x107
ja 0x180044e83
je 0x180044e48
mov eax, ebx
sub eax, 0x55
je 0x180044e0a
sub eax, 0x15
je 0x180044d07
sub eax, 0x1f
je 0x180044cf1
cmp eax, 0x18
jne 0x180044d3a
mov byte [rbp + 0x460], 0x57
mov dword [rbp + 0x461], 0x74534153
jmp 0x180044d3a
mov dword [rbp + 0x4b8], 0x730073
mov dword [rbp + 0x4bc], 0x65006c
jmp 0x180044d3a
mov qword [rdx + 8], r11
mov r9d, 0x40
mov qword [rdx], r11
mov r8d, 0x1000
mov rdx, qword [r10 + 0x10]
xor ecx, ecx
call qword [r14]
mov rdi, rax
mov rdx, qword [rbp - 0x80]
mov r10, qword [rsp + 0x60]
xor r11d, r11d
lea r8d, [r11 + 0x65]
mov ecx, dword [rsp + 0x40]
imul eax, ecx, 0x5a
add ebx, eax
cmp ebx, dword [rsp + 0x38]
jbe 0x180044ca0
mov rax, qword [rsp + 0x48]
movzx r8d, byte [rsp + 0x30]
movzx edx, byte [rsp + 0x30]
mov rdi, qword [rsp + 0x48]
movzx ebx, byte [rsp + 0x30]
movzx r13d, byte [rsp + 0x30]
movzx r12d, byte [rsp + 0x30]
mov dword [rsp + 0x38], ecx
mov r10d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x38]
mov qword [rbp - 0x78], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x38]
mov qword [rsp + 0x48], rdi
mov r9, qword [rsp + 0x48]
mov r15, qword [rsp + 0x48]
mov dword [rsp + 0x6c], eax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x70], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x50], r8d
mov byte [rsp + 0x31], dl
mov dword [rsp + 0x54], r10d
mov qword [rbp - 0x60], r9
mov qword [rbp - 0x68], r15
mov byte [rsp + 0x30], bl
mov eax, dword [rsp + 0x40]
add eax, 0x10
cmp ecx, eax
jae case.0x180044e08.138
lea eax, [rcx - 0x89]
cmp eax, 0x61
ja case.0x180044e08.139
lea r9, [0x180000000]
movzx eax, byte [r9 + rax + 0x4594c]
mov ecx, dword [r9 + rax*4 + 0x45910]
add rcx, r9
jmp rcx
test r14, r14
je 0x180044e1d
mov rax, qword [r10 + 8]
mov rcx, qword [rax + 0x3588]
mov qword [r14], rcx
test rdx, rdx
je 0x180044e2e
mov rax, qword [r10 + 8]
mov ecx, dword [rax + 0x3590]
mov dword [rdx], ecx
test rsi, rsi
je 0x180044d36
mov rax, qword [r10 + 8]
mov ecx, dword [rax + 0x3594]
mov dword [rsi], ecx
jmp 0x180044d36
mov rax, qword [rdx]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov r9d, 0x54
lea rax, [rsp + 0x48]
mov dword [rsp + 0x78], r11d
mov qword [rsp + 0x28], rax
mov rdx, rsi
mov rcx, r14
mov qword [rsp + 0x20], r10
call fcn.18001a830
mov dword [rsp + 0x58], eax
jmp 0x180044d26
cmp ebx, 0x1e37
je 0x180044f10
cmp ebx, 0x25ae
je 0x180044ec6
cmp ebx, 0x30b3
jne 0x180044d3a
mov dword [rbp + 0x4c0], 0x790061
mov dword [rbp + 0x4c4], 0x320033
mov dword [rbp + 0x4c8], 0x64002e
jmp 0x180044d3a
test rdi, rdi
je case.0x1800456fd.0
cmp qword [r10 + 0x18], 0x10
mov rdx, r10
jb 0x180044edc
mov rdx, qword [r10]
mov r8, qword [r10 + 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r10, qword [rsp + 0x60]
mov rdx, qword [rbp - 0x80]
mov byte [rsp + 0x58], 1
mov eax, dword [r10 + 0x20]
add rax, rdi
mov qword [rdx + 8], rax
mov eax, dword [r10 + 0x24]
add rax, rdi
mov qword [rdx], rax
jmp 0x180044d2f
test r12, r12
je 0x180044d3a
mov rax, qword [r10 + 8]
mov ecx, dword [rax + 0x3598]
mov dword [r12], ecx
jmp 0x180044d36
mov r8d, 4
mov byte [rbp + 0x465], 0
lea rdx, [0x18008adbc]
lea rcx, [rbp + 0x465]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x469], 0
jmp 0x180044d26
cmp ebx, 0x5d7d
ja 0x180045036
je case.0x180044e08.138
cmp ebx, 0x3c19
je 0x180045004
cmp ebx, 0x4af2
je case.0x180044e08.138
cmp ebx, 0x532e
jne 0x180044d3a
mov r9, qword [r10 + 8]
mov rcx, r14
mov r8, qword [rdx]
mov edx, 1
mov r9, qword [r9 + 0x2278]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rdx, qword [rbp - 0x80]
mov qword [rdx], rax
test rax, rax
jne 0x180044d2a
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx + 0x2278]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x18004508c
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 8]
mov rcx, qword [rcx + 0x2278]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
je 0x180044d26
mov dword [rsp + 0x58], 2
jmp case.0x180044e08.138
test r13, r13
je 0x18004501b
mov rax, qword [r10 + 8]
mov ecx, dword [rax + 0x359c]
mov dword [r13], ecx
mov ecx, dword [rsp + 0x40]
test r15, r15
je 0x180044d3a
mov rax, qword [r10 + 8]
mov ecx, dword [rax + 0x35a0]
mov dword [r15], ecx
jmp 0x180044d36
cmp ebx, 0x60dd
je 0x180045099
cmp ebx, 0x71d5
je 0x18004505c
cmp ebx, 0xa572
jne 0x180044d3a
mov dword [rsp + 0x58], r11d
jmp 0x180044d3a
mov r8d, 1
lea rdx, [0x18008add3]
lea rcx, [rbp + 0x469]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x46a], 0
mov dword [rbp + 0x4a0], 0x730077
jmp 0x180044d26
mov dword [rsp + 0x58], 1
jmp case.0x180044e08.138
xor r9d, r9d
mov dword [rbp + 0x4cc], 0x6c006c
lea rdx, [rbp + 0x4b8]
mov word [rbp + 0x4d0], r11w
lea r8d, [r9 + 0x4e]
lea ecx, [r8 + 0x3d]
call fcn.18001eff0
mov r15, qword [rsp + 0x60]
lea r9, [rsp + 0x38]
xor r8d, r8d
mov dword [rsp + 0x38], 0x14
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x20], 0xec
mov rsi, rax
mov rcx, qword [r15]
mov qword [rsp + 0x48], rcx
xor ecx, ecx
call fcn.180032960
cmp al, 2
jne 0x180045274
nop
mov r8d, 0x2000
lea rdx, [rbp + 0x610]
mov rcx, r14
call rsi
test eax, eax
jle 0x180045274
mov r10, qword [rbp - 0x80]
movsxd rdi, eax
mov rdx, qword [r10 + 0x18]
mov rcx, qword [r10 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180045164
lea rax, [rcx + rdi]
mov qword [r10 + 0x10], rax
mov rax, r10
cmp rdx, 0x10
jb 0x180045148
mov rax, qword [r10]
lea rbx, [rax + rcx]
mov r8, rdi
mov rcx, rbx
lea rdx, [rbp + 0x610]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18004517e
lea r9, [rbp + 0x610]
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
mov rcx, r10
call fcn.180001fa0
mov rax, qword [r15]
lea r9, [rsp + 0x38]
xor r8d, r8d
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x38], 0x14
xor ecx, ecx
mov dword [rsp + 0x20], 0xec
call fcn.180032960
cmp al, 2
je 0x180045100
movzx eax, byte [rsp + 0x30]
mov r10, qword [rsp + 0x48]
mov dword [rsp + 0x50], eax
movzx eax, byte [rsp + 0x30]
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x54], eax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x48]
mov qword [rbp - 0x60], rdx
mov qword [rbp - 0x78], r10
mov rax, qword [rsp + 0x48]
mov r11d, dword [rsp + 0x38]
mov r15, qword [rsp + 0x48]
movzx r13d, byte [rsp + 0x30]
movzx r12d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x38]
mov qword [rbp - 0x70], rax
movzx eax, byte [rsp + 0x30]
mov dword [rsp + 0x68], r11d
mov r11d, dword [rsp + 0x38]
mov byte [rsp + 0x30], al
mov dword [rsp + 0x6c], r11d
mov qword [rbp - 0x68], r15
mov dword [rsp + 0x70], r9d
mov rax, qword [rbp - 0x80]
mov dword [rsp + 0x38], 0x89
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x58], rax
inc dword [rsp + 0x38]
movzx edx, byte [rsp + 0x31]
xor r11d, r11d
mov rdi, qword [rsp + 0x48]
movzx ebx, byte [rsp + 0x30]
mov r8d, dword [rsp + 0x50]
mov r10d, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x38]
jmp 0x180044dcf
movzx eax, byte [rsp + 0x30]
mov r10, qword [rsp + 0x48]
mov dword [rsp + 0x50], eax
movzx eax, byte [rsp + 0x30]
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x54], eax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x78], r10
jmp 0x1800451e8
test r8b, r8b
je case.0x180044e08.139
mov r15, qword [rbp - 0x78]
mov ebx, 0x48
nop dword [rax]
cmp ebx, 0x7d28
ja 0x180045347
je 0x18004533a
cmp ebx, 0x48
je 0x18004532b
cmp ebx, 0x29e8
je 0x180045321
cmp ebx, 0x5388
jne 0x1800453b3
xor edx, edx
lea rcx, [rbp + 0x60]
mov r8d, 0x24c
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x60]
call qword [sym.imp.GDI32.dll_CreateColorSpaceW]
mov r8d, 0x80000000
lea rdx, [rsp + 0x78]
mov rcx, r15
mov rdi, rax
call qword [sym.imp.WINMM.dll_mixerGetID]
mov r10d, eax
mov dword [rsp + 0x54], eax
jmp 0x1800453a9
mov dword [rsp + 0x78], r11d
jmp 0x1800453b3
mov dl, 1
mov qword [rbp - 0x78], r11
mov byte [rsp + 0x31], dl
mov r15, r11
jmp 0x1800453b3
test rdi, rdi
jne 0x1800453b3
xor dl, dl
mov byte [rsp + 0x31], dl
jmp 0x1800453b3
cmp ebx, 0xa6c8
je 0x180045381
cmp ebx, 0xd068
jne 0x1800453b3
test r8b, r8b
je 0x1800453b3
mov ecx, dword [rsp + 0x78]
lea rdx, [rbp + 0x30]
xorps xmm0, xmm0
mov r8d, 0x30
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
call qword [sym.imp.WINMM.dll_mixerGetDevCapsA]
jmp 0x1800453a4
test r10d, r10d
movzx eax, r8b
mov ecx, r11d
cmove ecx, eax
movzx r8d, cl
mov dword [rsp + 0x50], r8d
test dl, dl
je 0x1800453b3
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteColorSpace]
mov r10d, dword [rsp + 0x54]
movzx edx, byte [rsp + 0x31]
mov r8d, dword [rsp + 0x50]
add ebx, 0x29a0
mov r11d, 0
cmp ebx, 0xf9c0
jbe 0x1800452c0
mov r15, qword [rbp - 0x68]
mov qword [rsp + 0x48], rdi
jmp case.0x180044e08.139
mov dword [rbp + 0x47b], 0x6e755274
jmp case.0x180044e08.139
mov eax, 0x6c
mov word [rbp + 0x474], ax
jmp case.0x180044e08.139
xor r9d, r9d
mov qword [rsp + 0x20], r11
xor r8d, r8d
mov edx, 0xdc
xor ecx, ecx
call fcn.18006f030
mov byte [rsp + 0x58], al
jmp case.0x180044e08.139
mov eax, 0x6974
mov word [rbp + 0x47f], ax
jmp case.0x180044e08.139
mov eax, 0x73
mov word [rbp + 0x47a], ax
jmp case.0x180044e08.139
mov eax, 0x2e
mov dword [rbp + 0x4a4], 0x5f0032
mov word [rbp + 0x4ac], ax
mov dword [rbp + 0x4a8], 0x320033
jmp case.0x180044e08.139
movzx eax, word [0x18008ae10]
lea r8, [rbp + 0x460]
movups xmm0, xmmword [str.CJavaAdapt_r::GetTypeInfo]
lea rdx, [rbp + 0x4a0]
mov word [rbp + 0x4f0], ax
movsd xmm1, qword [0x18008ae08]
mov al, 1
xor r9d, r9d
mov dword [rsp + 0x50], eax
mov ecx, 0x8b
mov byte [rbp + 0x487], 0
movups xmmword [rbp + 0x4d8], xmm0
movsd qword [rbp + 0x4e8], xmm1
call fcn.18001eff0
mov qword [rbp - 0x60], rax
jmp case.0x180044e08.139
mov eax, 0x6f48
mov dword [rbp + 0x475], 0x6d6956
mov word [rbp + 0x478], ax
jmp case.0x180044e08.139
call qword [sym.imp.WINMM.dll_mixerGetNumDevs]
mov ecx, 0x202
lea rdx, [rbp + 0x2b0]
mov edi, eax
call qword [rbp - 0x60]
test eax, eax
je 0x1800456ad
xor edx, edx
mov ebx, edx
nop dword [rax + rax]
cmp ebx, 7
ja case.default.0x18004551d
lea r8, [0x180000000]
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0x459b0]
add rcx, r8
jmp rcx
mov dword [rsp + 0x68], edx
jmp case.default.0x18004551d
mov r8d, dword [rsp + 0x6c]
xorps xmm0, xmm0
mov ecx, dword [rsp + 0x68]
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
mov dword [rbp + 0x20], eax
movups xmmword [rbp - 0x30], xmm0
lea edx, [rax + 2]
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
call qword [sym.imp.GDI32.dll_CreatePen]
xor r8d, r8d
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x488]
mov qword [rbp - 0x70], rax
call qword [sym.imp.WINMM.dll_mmioOpenW]
mov r15, rax
mov qword [rbp - 0x68], rax
jmp 0x180045693
mov ecx, edx
movzx eax, r13b
mov rdx, qword [rbp - 0x70]
test rdx, rdx
cmovne ecx, eax
movzx r13d, cl
test r15, r15
jne 0x1800455aa
lea edx, [r15 + 0x10]
xor ecx, ecx
call qword [sym.imp.WINMM.dll_mmioClose]
mov rdx, qword [rbp - 0x70]
xor r12b, r12b
test r13b, r13b
je 0x1800455b8
mov rcx, rdx
call qword [sym.imp.GDI32.dll_DeleteObject]
test r12b, r12b
je 0x1800455fc
xor r8d, r8d
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [sym.imp.WINMM.dll_mmioGetInfo]
test eax, eax
je 0x1800455de
xor r12b, r12b
mov byte [rsp + 0x58], r12b
jmp 0x180045693
xor r8d, r8d
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [sym.imp.WINMM.dll_mmioSetInfo]
mov edx, 0x10
mov rcx, r15
call qword [sym.imp.WINMM.dll_mmioClose]
mov byte [rsp + 0x58], 0
jmp 0x180045693
movabs rax, 0x6900720074005f
mov qword [rbp + 0x48a], rax
mov eax, dword [0x18008af8e]
mov dword [rbp + 0x492], eax
movzx eax, word [0x18008af92]
mov word [rbp + 0x496], ax
jmp case.default.0x18004551d
mov r8d, 1
lea rdx, [0x18008b056]
lea rcx, [rbp + 0x488]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edx, edx
mov r13b, 1
mov dword [rsp + 0x6c], edx
movzx r12d, r13b
jmp case.default.0x18004551d
mov word [rbp + 0x498], dx
mov r8d, 2
lea rdx, [0x18008b09a]
jmp 0x180045686
mov word [rbp + 0x488], dx
mov r8d, 1
lea rdx, [0x18008b140]
lea rcx, [rbp + 0x488]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edx, edx
inc ebx
lea eax, [rbx + 0xf5]
cmp eax, 0xfd
jb 0x180045500
movzx ebx, byte [rsp + 0x30]
mov eax, dword [rsp + 0x50]
mov ecx, 0
movzx eax, al
test edi, edi
mov edx, 0x90
cmove eax, ecx
mov rcx, qword [rsp + 0x60]
xor r8d, r8d
mov dword [rsp + 0x50], eax
call fcn.18003e670
test al, al
jne 0x180045865
mov edi, 5
cmp edi, 5
ja case.default.0x1800456fd
lea rdx, [0x180000000]
mov eax, edi
mov ecx, dword [rdx + rax*4 + 0x459d0]
add rcx, rdx
jmp rcx
mov eax, 0x3a
lea rcx, [rbp + 0x450]
mov word [rbp + 0x450], ax
dec rcx
mov eax, 0x49
mov word [rbp + 0x451], ax
mov eax, 0x57
mov word [rbp + 0x452], ax
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180045730
movzx eax, word [0x18008a6c0]
mov word [rcx], ax
jmp case.default.0x1800456fd
call qword [sym.imp.WINMM.dll_midiOutGetNumDevs]
mov dword [rsp + 0x70], eax
jmp case.default.0x1800456fd
xor eax, eax
lea r9, [rbp - 0x58]
mov ecx, eax
lea r8, [rbp - 0x50]
cmp dword [rsp + 0x70], ecx
lea rdx, [rbp + 0x488]
movzx eax, bl
cmovne ecx, eax
movzx ebx, cl
mov byte [rsp + 0x30], cl
lea rcx, [rbp + 0x450]
call qword [sym.imp.dbghelp.dll_SymMatchFileName]
test bl, bl
je case.default.0x1800456fd
mov ebx, 0x119
xor r15d, r15d
nop dword [rax]
cmp ebx, 0x119
je 0x1800457c1
cmp ebx, 0x1ba
jne 0x1800457dc
mov ecx, esi
lea rdx, [rbp - 0x40]
mov r8d, r14d
call qword [sym.imp.WINMM.dll_midiOutGetDevCapsA]
jmp 0x1800457dc
xorps xmm0, xmm0
xor eax, eax
mov esi, r15d
mov dword [rbp - 0x10], eax
movups xmmword [rbp - 0x40], xmm0
lea r14d, [rax + 0x34]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
add ebx, 0xa1
cmp ebx, 0x25b
jb 0x1800457a0
mov r15, qword [rbp - 0x68]
movzx ebx, byte [rsp + 0x30]
jmp case.default.0x1800456fd
movups xmm0, xmmword [str.GeolocationEven_]
movzx eax, byte [0x18008b1b0]
mov bl, 1
mov byte [rsp + 0x30], bl
movups xmmword [rbp + 0x488], xmm0
mov byte [rbp + 0x498], al
jmp case.default.0x1800456fd
mov eax, 0x49
mov word [rbp + 0x454], ax
mov eax, 0x57
mov word [rbp + 0x455], ax
mov eax, dword [str.rIWr]
mov dword [rbp + 0x456], eax
movzx eax, word [0x18008b1bc]
mov word [rbp + 0x45a], ax
movzx eax, byte [0x18008b1be]
mov byte [rbp + 0x45c], al
dec edi
lea eax, [rdi + 0x3d]
cmp eax, 0x3c
ja 0x1800456e1
xor eax, eax
lea r8, [rbp + 0x500]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.dbghelp.dll_FindExecutableImageEx]
jmp case.0x180044e08.139
mov eax, 0x56
mov dword [rbp + 0x4ae], 0x6c0064
mov word [rbp + 0x470], ax
mov dword [rbp + 0x471], 0x646f6d
mov dword [rbp + 0x4b2], 0x6c
jmp case.0x180044e08.139
mov eax, 0x6f66
mov dword [rbp + 0x481], 0x6e49656d
mov word [rbp + 0x485], ax
jmp case.0x180044e08.139
mov byte [rsp + 0x58], 0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rbp + 0x2610]
xor rcx, rsp
call fcn.180077c10
mov rbx, qword [rsp + 0x2760]
add rsp, 0x2720
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret