Function at 0x18000bf50
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1178]
mov eax, 0x1278
call fcn.18006ce90
sub rsp, rax
movdqa xmm0, xmmword [0x18009c320]
mov r12, r8
mov r8d, edx
movdqa xmmword [rbp - 0x20], xmm0
imul eax, r8d, 0xb40
mov r10, r9
xor r9d, r9d
mov byte [rbp - 0x30], 0
mov edx, 0xf
mov qword [rsp + 0x70], r9
mov rbx, rcx
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], r9b
mov edi, r8d
mov dword [rbp - 0x7c], eax
lea r15d, [r9 + 2]
cmp r8d, eax
ja 0x18000e6a4
mov r13, qword [rbp + 0x11c0]
mov ebx, 0xfa5
mov r14, qword [rbp + 0x11c0]
mov rsi, qword [rbp + 0x11c0]
lea r11, [0x180000000]
cmp edi, 0x62c3
ja 0x18000e118
je 0x18000e0a5
cmp edi, 0x83
ja 0x18000c193
je 0x18000c187
cmp edi, 9
je 0x18000e33b
cmp edi, 0x60
je 0x18000c169
cmp edi, 0x73
jne case.0x18000c207.76
mov rax, qword [r10]
mov rcx, qword [rax]
mov rdx, qword [rcx]
movzx eax, word [rdx]
cmp ax, 0x10
je 0x18000c116
mov ecx, 0x25a
cmp ax, cx
je 0x18000c116
cmp ax, 0x1a
jne 0x18000c0ae
mov word [0x1800ce8f8], r9w
test r12, r12
je case.0x18000c207.76
movsxd rax, dword [rdx + 6]
test eax, eax
je case.0x18000c207.76
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r12 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r12 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r12 + 0x40], xmm0
jmp case.0x18000c207.76
mov ecx, 0x258
cmp ax, cx
jne 0x18000c10a
mov word [0x1800ce8f8], r9w
test r12, r12
je case.0x18000c207.76
movsxd rax, dword [rdx + 2]
test eax, eax
je case.0x18000c207.76
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r12 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r12 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r12 + 0x40], xmm0
jmp case.0x18000c207.76
mov word [0x1800ce8f8], bx
jmp case.0x18000c207.76
mov word [0x1800ce8f8], r9w
test r12, r12
je 0x18000c15b
movsxd rax, dword [rdx + 2]
test eax, eax
je 0x18000c15b
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r12 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r12 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r12 + 0x40], xmm0
mov eax, 0x600
mov word [rdx + 0xe], ax
jmp case.0x18000c207.76
movups xmm0, xmmword [r10]
mov eax, dword [r10 + 0x10]
mov dword [rbp - 0x80], r9d
movaps xmmword [rbp + 0x990], xmm0
mov dword [rbp + 0x9a0], eax
jmp case.0x18000c207.76
mov byte [0x1800b6109], 0
jmp case.0x18000c207.76
mov eax, edi
sub eax, 0xc2
je 0x18000e049
sub eax, 0x1e
je 0x18000c1dd
cmp eax, 0x4780
jne case.0x18000c207.76
mov ecx, 0xffffffae
mov word [rbp + 0xaea], r9w
lea rdx, [rbp + 0x590]
mov dword [rbp + 0xaec], r9d
call qword [0x1800ce8f0]
mov r8d, dword [rbp + 0x11c8]
jmp case.0x18000c207.76
movsxd rdx, dword [r10]
lea eax, [rdx + 0xc8]
cmp eax, 0x149
ja case.0x18000c207.76
cdqe
movzx eax, byte [r11 + rax + 0xea04]
mov ecx, dword [r11 + rax*4 + 0xe810]
add rcx, r11
jmp rcx
mov edi, 0x81
nop
mov eax, edi
sub eax, 0x7d
je 0x18000c436
sub eax, 1
je 0x18000c38b
sub eax, 1
je 0x18000c2c6
sub eax, 1
je 0x18000c28e
cmp eax, 1
jne 0x18000c3bc
xor r8d, r8d
lea rcx, [rbp - 0x68]
mov edx, 0xfc
call fcn.180024f40
xor r8d, r8d
lea rcx, [rbp - 0x50]
xor edx, edx
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [rbp + 0x20]
mov dword [rbp - 0x40], eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
movups xmmword [rbp - 0x50], xmm1
lea r9d, [rax + 0x26]
mov qword [rsp + 0x20], rax
call fcn.180016550
mov r13, rax
jmp 0x18000c3bc
mov edx, 0x5c
mov rcx, r13
call fcn.18006db00
xor r9d, r9d
mov qword [rbp - 0x78], rax
mov r8, r13
xor edx, edx
xor ecx, ecx
mov byte [rax], 0
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rcx, r13
mov qword [0x1800be690], rax
call fcn.180072184
jmp 0x18000c3bc
mov rcx, qword [0x1800be690]
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000c36c
mov ebx, 0x8b
cmp ebx, 0x8b
je 0x18000c313
cmp ebx, 0x14a
jne 0x18000c35e
mov edx, r15d
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
jmp 0x18000c35e
mov r8d, 0xff
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov r8d, 0xff
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x170]
call fcn.180071acc
mov rcx, rax
lea rdx, str.mdiclient
call fcn.18007cb70
test eax, eax
je 0x18000c37f
add ebx, 0xbf
cmp ebx, 0x209
jb 0x18000c2f2
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000c2e0
jmp 0x18000c3bc
mov rcx, r14
mov qword [0x1800be6a8], rcx
jmp 0x18000c392
mov rcx, qword [0x1800be6a8]
mov edi, 0x7e
lea edx, [rdi - 0x79]
call qword [sym.imp.USER32.dll_GetWindow]
xor r9d, r9d
lea r8, [0x1800be158]
lea ecx, [rdi - 0x58]
mov qword [0x1800be6c8], rax
xor edx, edx
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
dec edi
cmp edi, 0x7c
ja 0x18000c210
xor r9d, r9d
mov dword [rsp + 0x30], 0x90
xor r8d, r8d
mov qword [rsp + 0x28], r9
xor edx, edx
mov qword [rsp + 0x20], r9
xor ecx, ecx
xor r9d, r9d
call fcn.18000f790
test al, al
jne 0x18000c517
mov ebx, 0x5f
lea r15, [0x1800be368]
xor edi, edi
mov eax, ebx
sub eax, 0x5f
je 0x18000c4a2
sub eax, 1
je 0x18000c482
cmp eax, 1
jne 0x18000c506
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
mov ecx, 0x86
call fcn.180061fe0
jmp 0x18000c506
lea r8, str.IDR_COMBOBOX_BUTTON_F_BOTTOM
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
xor ebx, ebx
xor r8d, r8d
xor edx, edx
mov qword [0x1800be478], rax
mov qword [rsp + 0x28], rbx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xa]
call fcn.18005a0a0
mov qword [0x1800b6140], rbx
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov qword [rsp + 0x28], r15
lea rcx, [rbp - 0x68]
xor r9d, r9d
mov dword [rsp + 0x20], 0x55
xor r8d, r8d
xor edx, edx
call fcn.18006a500
jmp 0x18000c506
mov rax, qword [r12]
mov r9d, 0x6c
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x30], rax
xor edx, edx
lea rax, [rsp + 0x58]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.18005b050
mov edx, dword [0x1800be158]
xor r9d, r9d
xor r8d, r8d
lea ecx, [r9 + 0x25]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov rcx, qword [0x1800ce7a0]
test rcx, rcx
je 0x18000c506
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
inc ebx
cmp ebx, 0x62
jb 0x18000c401
mov r15d, 2
mov rcx, qword [0x1800be478]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov ebx, 0xf3
nop word [rax + rax]
mov eax, ebx
sub eax, 0xf3
je 0x18000c5e8
cmp eax, 0x71
jne 0x18000c608
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000c7a2
mov rcx, qword [0x1800be6c8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000c79b
mov ebx, 0x79
xor r12d, r12d
mov eax, ebx
sub eax, 0x79
je 0x18000c723
sub eax, 0xc
je 0x18000c6ed
cmp eax, 0xc
jne 0x18000c785
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000c6c1
mov ebx, 0x7d
nop word [rax + rax]
mov eax, ebx
sub eax, 0x7d
je 0x18000c66b
cmp eax, 1
jne 0x18000c6b6
mov edx, r15d
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
jmp 0x18000c6b6
mov qword [rsp + 0x50], r9
lea rdx, [rsp + 0x50]
xor r9d, r9d
mov r8d, 0x109
xor ecx, ecx
call fcn.18002ca50
movsxd rsi, eax
xor r9d, r9d
add ebx, 0x71
cmp ebx, 0x1d5
jb 0x18000c540
mov dword [rsp + 0x58], r9d
mov rax, qword [r12]
lea rcx, [rbp + 0x270]
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov dword [rsp + 0x38], 0x2a
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], r9
xor edx, edx
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.1800217a0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov r8d, 0xff
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov r8d, 0xff
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x170]
call fcn.180071acc
mov rcx, rax
lea rdx, str.mdiclient
call fcn.18007cb70
test eax, eax
je 0x18000c6dc
inc ebx
cmp ebx, 0x7f
jb 0x18000c5c0
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000c5a1
mov ebx, 0x91
jmp 0x18000c785
mov qword [0x1800be6c8], r14
mov ebx, 0x91
jmp 0x18000c785
xor r9d, r9d
mov r8, r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rcx, r13
mov qword [0x1800be690], rax
call fcn.180072184
mov rcx, qword [0x1800be690]
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
jmp 0x18000c785
xor r8d, r8d
lea rcx, [rbp - 0x68]
mov edx, 0xfc
call fcn.180024f40
mov qword [rsp + 0x30], r12
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x28], r12
mov r9d, 0x26
xor r8d, r8d
mov qword [rsp + 0x20], r12
movsd xmm0, qword [rax + 0x10]
xor edx, edx
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x38], xmm0
mov eax, dword [rbp + 0x38]
movups xmmword [rbp - 0x50], xmm1
mov dword [rbp - 0x40], eax
call fcn.180016550
mov edx, 0x5c
mov rcx, rax
mov r13, rax
call fcn.18006db00
mov qword [rbp - 0x78], rax
mov byte [rax], r12b
add ebx, 0xc
cmp ebx, 0x9d
jb 0x18000c584
mov r12, qword [rbp + 0x11d0]
mov rsi, qword [0x1800be6c8]
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x58], rax
mov r8d, 0x9d
mov qword [rsp + 0x50], rsi
lea rcx, [rsp + 0x58]
call fcn.180033ce0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x58], r9d
mov edx, 0x112
lea r9, [rsp + 0x58]
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.1800588e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x50], rax
mov ecx, 0x124
mov dword [rsp + 0x58], r9d
call fcn.180058f70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov dword [rsp + 0x20], 0x77
call fcn.18006a500
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
mov dword [rsp + 0x30], 0x123
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x58], r9d
xor r9d, r9d
call fcn.1800480d0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
mov ecx, 0xe8
call fcn.180058f70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov r8d, 0x9f
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x58], r9d
call fcn.180055000
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor edx, edx
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea rax, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rsp + 0x50]
mov r8d, 0xb1
mov qword [rsp + 0x20], rax
call fcn.180031bb0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x58], r9d
xor r8d, r8d
lea r9, [rsp + 0x58]
mov qword [rsp + 0x50], rax
mov ecx, 0xee
call fcn.18001e630
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov edx, 6
mov qword [rsp + 0x50], rax
call fcn.180020d40
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov r9d, 0xfc
mov qword [rsp + 0x50], rax
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.1800663d0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
lea ecx, [r8 + 0x36]
call fcn.180067fe0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov edx, 0xb2
call fcn.180063800
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
mov r8d, 0xbd
mov qword [rsp + 0x20], r9
xor ecx, ecx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.18001e160
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov edx, 0x104
mov qword [rsp + 0x50], rax
call fcn.180066c20
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov ecx, 0xd2
call fcn.180039960
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
lea rcx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
lea edx, [r9 + 0x31]
call fcn.180043de0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x50], rax
xor edx, edx
lea rax, [rsp + 0x50]
mov dword [rsp + 0x58], r9d
mov r9d, 0xed
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180056b50
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], r9
mov edx, 0x11c
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.18001a760
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x28], r9
xor edx, edx
mov qword [rsp + 0x20], r9
mov ecx, 0xed
lea r9, [rsp + 0x58]
mov qword [rsp + 0x50], rax
call fcn.18000a630
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov ecx, 0x97
mov qword [rsp + 0x50], rax
call fcn.180009c70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov r8d, 0xba
call fcn.1800071f0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rbp + 0x270]
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r9
mov r9d, 0x10b
call fcn.180055ee0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
jmp 0x18000cb8c
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], r9
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov dword [rsp + 0x20], 0x40
call fcn.180042900
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor edx, edx
lea rax, [rsp + 0x50]
mov ecx, 0xe3
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r9
xor r9d, r9d
call fcn.1800501a0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov edx, 0xf6
mov qword [rsp + 0x50], rax
call fcn.180066c20
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov dword [rsp + 0x20], 0xb7
lea rcx, [rbp - 0x68]
call fcn.180023d60
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x58], r9d
lea rdx, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x68]
mov dword [rsp + 0x20], 0x10
call fcn.180023d60
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor edx, edx
mov r9d, 0x6d
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.18003e730
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], r9
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor edx, edx
mov dword [rsp + 0x20], 0x43
call fcn.180037640
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor edx, edx
lea rax, [rsp + 0x50]
xor ecx, ecx
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r9
mov r9d, 0x6c
call fcn.18005b050
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor edx, edx
mov qword [rsp + 0x28], r9
xor ecx, ecx
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [rsp + 0x50]
mov r8d, 0x121
mov qword [rsp + 0x20], rax
call fcn.1800156a0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
lea ecx, [r8 + 0x74]
call fcn.18003ec20
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
lea rcx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov edx, 0xa4
call fcn.180043de0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
jmp 0x18000dfa2
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov ecx, 0x62
mov qword [rsp + 0x50], rax
call fcn.180038fe0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov edx, 0x10c
call fcn.180047da0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
mov r8d, 0x8e
call fcn.180055000
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
mov r8d, 0x15a
lea rcx, [rbp + 0x270]
call fcn.180051ae0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov edx, 0x10b
mov qword [rsp + 0x50], rax
call fcn.1800338d0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
mov r8d, 0xe9
call fcn.180055000
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
jmp 0x18000dec2
mov dword [rsp + 0x58], r9d
jmp 0x18000de84
mov dword [rsp + 0x58], r9d
jmp 0x18000defc
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov r8d, 0x6d
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.180054b40
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
mov r9d, 0xa6
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.180069700
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov r8d, 0xf7
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.1800461e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor edx, edx
lea rax, [rsp + 0x50]
mov dword [rsp + 0x30], 0xc3
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], r9
xor r9d, r9d
call fcn.18000f790
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov edx, 0xf5
call fcn.180060110
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor edx, edx
mov qword [rsp + 0x20], r9
xor ecx, ecx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8d, 0xea
call fcn.180030650
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov ecx, 0xea
mov qword [rsp + 0x50], rax
call fcn.180021490
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov edx, 0x10e
xor ecx, ecx
call fcn.180058380
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x28], r9
xor edx, edx
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov dword [rsp + 0x20], 0x36
call fcn.180066820
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov r8d, 0xbe
xor ecx, ecx
jmp 0x18000df07
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov r8d, 0x92
xor ecx, ecx
call fcn.18002ef20
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov edx, 0xf7
mov qword [rsp + 0x50], rax
call fcn.1800338d0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea ecx, [rdx + 0x2d]
call fcn.180061190
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor edx, edx
mov qword [rsp + 0x40], r9
xor ecx, ecx
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r9
lea r8d, [rdx + 0x49]
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.1800604b0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor r8d, r8d
mov r9d, 0x45
mov qword [rsp + 0x50], rax
xor edx, edx
call fcn.180026c10
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
jmp 0x18000df33
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor edx, edx
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov ecx, 0x89
call fcn.18005f540
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor edx, edx
mov ecx, 0x118
call fcn.180019020
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea edx, [r8 + 0x62]
call fcn.18005e340
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov edx, 0xe7
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.180025c00
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov edx, 0x117
call fcn.18004e450
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
mov ecx, 0xd9
call fcn.180058f70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov edx, 0x91
call fcn.180056500
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor edx, edx
mov r9d, 0x82
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.180052a20
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov r9d, 0x50
mov qword [rsp + 0x50], rax
xor edx, edx
xor ecx, ecx
call fcn.180046a90
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x30], r9
xor edx, edx
mov qword [rsp + 0x28], r9
xor ecx, ecx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x20], 0x4d
call fcn.18004d680
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor edx, edx
lea rax, [rsp + 0x50]
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], r9
mov r9d, 0x88
call fcn.18005b050
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov ecx, 0x8a
mov qword [rsp + 0x50], rax
call fcn.180009c70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
jmp 0x18000ddd2
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], r9
xor edx, edx
mov r9d, 0x7f
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.180057710
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov edx, 0xf0
call fcn.180063800
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov edx, 0x12a
xor ecx, ecx
jmp 0x18000df3d
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov ecx, 0x19
mov qword [rsp + 0x50], rax
call fcn.180013480
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x30], r9
xor edx, edx
mov dword [rsp + 0x28], 0xc2
xor ecx, ecx
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov qword [rsp + 0x50], rax
call fcn.180028780
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea edx, [r9 + 0x67]
call fcn.1800056b0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
mov edx, 0x90
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.18003d2a0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], r9
xor r8d, r8d
mov dword [rsp + 0x28], 0x8d
xor ecx, ecx
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov qword [rsp + 0x50], rax
call fcn.1800685b0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x20], r9
mov edx, 0x128
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.180024c20
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [rsp + 0x50]
xor edx, edx
mov r8d, 0x11a
mov qword [rsp + 0x20], rax
call fcn.180065490
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov ecx, 0x96
call fcn.180065a30
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x30], r9
xor r8d, r8d
mov qword [rsp + 0x58], rdx
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x28], 0xaf
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov qword [rsp + 0x50], rax
call fcn.1800685b0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x30], r9
xor r8d, r8d
mov dword [rsp + 0x28], 0x11
xor edx, edx
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov qword [rsp + 0x50], rax
call fcn.18002a130
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
lea edx, [r8 + 0x2c]
call fcn.180063800
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov r9d, 0x64
mov qword [rsp + 0x50], rax
xor edx, edx
xor ecx, ecx
call fcn.1800078b0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
lea ecx, [rdx + 0x1e]
call fcn.180065200
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov edx, 0xd8
xor ecx, ecx
call fcn.180058380
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
mov r8d, 0x10a
lea rcx, [rbp - 0x68]
call fcn.180035b50
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rcx, qword [r12]
call fcn.180065f90
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rcx, qword [r12]
call fcn.180064d60
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x58], r9d
lea rcx, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x50], rax
lea edx, [r9 + 0x24]
call fcn.18001f4e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
jmp 0x18000cde8
mov rcx, qword [r12]
call fcn.18005a740
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rcx, qword [r12]
call fcn.180059fd0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov edi, 0x105
nop dword [rax + rax]
mov eax, edi
sub eax, 0x105
je 0x18000d99e
sub eax, 1
je 0x18000d96c
cmp eax, 1
je 0x18000c471
jmp 0x18000db81
mov rax, qword [r12]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x50], rsi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x87
call fcn.180056500
jmp 0x18000db7e
mov qword [rsp + 0x50], r9
lea rdx, [rsp + 0x50]
xor r9d, r9d
mov r8d, 0x109
xor ecx, ecx
call fcn.18002ca50
movsxd rsi, eax
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000db7e
mov rcx, qword [0x1800be6c8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000db77
mov r12, qword [rbp - 0x78]
mov ebx, 0xf
nop word [rax + rax]
mov eax, ebx
sub eax, 0xd
je 0x18000dab0
sub eax, 1
je 0x18000da6c
cmp eax, 1
jne 0x18000db61
xor r8d, r8d
lea rcx, [rbp - 0x68]
mov edx, 0xfc
call fcn.180024f40
xor r8d, r8d
lea rcx, [rbp - 0x50]
xor edx, edx
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [rbp + 0x50]
mov dword [rbp - 0x40], eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
movups xmmword [rbp - 0x50], xmm1
lea r9d, [rax + 0x26]
mov qword [rsp + 0x20], rax
call fcn.180016550
mov edx, 0x5c
mov rcx, rax
mov r13, rax
call fcn.18006db00
mov r12, rax
jmp 0x18000db61
xor r9d, r9d
mov byte [r12], 0
mov r8, r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rcx, r13
mov qword [0x1800be690], rax
call fcn.180072184
mov rcx, qword [0x1800be690]
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
jmp 0x18000db61
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000db42
mov ebx, 0x125
mov eax, ebx
sub eax, 0x125
je 0x18000db21
sub eax, 0x69
je 0x18000db09
cmp eax, 0x69
jne 0x18000db37
lea rcx, [rbp + 0x170]
call fcn.180071acc
mov rcx, rax
lea rdx, str.mdiclient
call fcn.18007cb70
test eax, eax
je 0x18000db55
mov edx, r15d
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
jmp 0x18000db37
mov r8d, 0xff
lea rdx, [rbp + 0x170]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x18000db37
mov r8d, 0xff
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextW]
add ebx, 0x69
cmp ebx, 0x260
jb 0x18000dac6
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18000dab0
jmp 0x18000db5c
mov qword [0x1800be6c8], r14
mov ebx, 0xd
dec ebx
cmp ebx, 0xc
ja 0x18000d9f0
mov qword [rbp - 0x78], r12
mov r12, qword [rbp + 0x11d0]
mov rsi, qword [0x1800be6c8]
xor r9d, r9d
inc edi
cmp edi, 0x108
jb 0x18000d950
mov rax, qword [r12]
mov r9d, 0x10d
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.180056b50
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], r9d
jmp 0x18000de42
mov dword [rsp + 0x58], 1
jmp 0x18000c61c
mov rax, qword [r12]
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov edx, 0x112
mov dword [rsp + 0x58], 1
xor ecx, ecx
call fcn.1800588e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x50], rax
mov ecx, 0x124
mov dword [rsp + 0x58], 1
call fcn.180058f70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x50]
mov dword [rsp + 0x30], 0x123
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov dword [rsp + 0x58], 1
call fcn.1800480d0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov r8d, 0x9f
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x58], 1
call fcn.180055000
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor edx, edx
lea rax, [rsp + 0x58]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
xor ecx, ecx
lea rax, [rsp + 0x50]
mov r8d, 0xb1
mov qword [rsp + 0x20], rax
call fcn.180031bb0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], r9
mov r8d, 0xbd
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov dword [rsp + 0x58], 1
call fcn.18001e160
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x58]
xor r9d, r9d
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
lea edx, [r9 + 0x31]
call fcn.180043de0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x50], rax
mov r9d, 0xed
lea rax, [rsp + 0x50]
mov dword [rsp + 0x58], 1
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180056b50
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov rax, qword [r12]
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov edx, 0xf4
xor ecx, ecx
call fcn.1800588e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x50], rax
lea edx, [r9 + 0x24]
call fcn.18001f4e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov rax, qword [r12]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x68]
lea rax, [rsp + 0x58]
xor r8d, r8d
mov edx, 0xc5
mov qword [rsp + 0x20], rax
call fcn.180057300
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov rax, qword [r12]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor edx, edx
mov dword [rsp + 0x20], 0xa8
lea rcx, [rsp + 0x58]
call fcn.180032ac0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov r9d, 0x89
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rcx, [rsp + 0x50]
call fcn.18000eb50
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov r8d, 0xb5
lea rcx, [rsp + 0x58]
mov rax, qword [r12]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.180056f70
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov edx, 0x71
lea rcx, [rsp + 0x58]
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.1800187a0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r8, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov edx, 0xa4
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
call fcn.180043de0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov dword [rsp + 0x58], 1
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov r9d, 0x20
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.1800170e0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
lea r9, [rsp + 0x58]
xor r8d, r8d
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x58], 1
mov ecx, 0xee
call fcn.18001e630
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov rax, qword [r12]
xor r8d, r8d
mov qword [rsp + 0x30], r9
xor edx, edx
mov dword [rsp + 0x28], 0xd5
xor ecx, ecx
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.180007fd0
mov r8d, dword [rbp + 0x11c8]
mov edi, 0xa8e0
jmp 0x18000e315
mov eax, dword [r10]
lea r8, [rsp + 0x58]
mov dword [rbp + 0x10dc], eax
lea rcx, [rbp + 0xd80]
lea rax, [rbp + 0x480]
mov dword [rsp + 0x58], 0x200
xor r9d, r9d
mov qword [rbp + 0x10d2], rax
mov rdx, r12
mov dword [rsp + 0x20], 0x157
call fcn.1800108e0
mov ecx, 0xffffff33
lea rdx, [rbp + 0xb80]
call qword [0x1800ce8f0]
mov r8d, dword [rbp + 0x11c8]
jmp case.0x18000c207.76
lea r9, [rbp - 0x30]
mov r8d, 0xd9
lea rdx, [rsp + 0x60]
mov rcx, r10
call fcn.18005a820
test al, al
je 0x18000e525
xor ebx, ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rbx
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0x28]
call fcn.18002c0c0
test al, al
je 0x18000e46c
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rbx
xor r8d, r8d
lea edx, [rbx + 0x6f]
xor ecx, ecx
call fcn.18005fbb0
mov r8d, dword [rbp + 0x11c8]
mov qword [rbp - 0x70], rax
jmp 0x18000e315
cmp edi, 0xc503
ja 0x18000e248
je 0x18000e1cd
cmp edi, 0x9060
je 0x18000e14f
cmp edi, 0x9242
je 0x18000e598
cmp edi, 0xa8e0
jne case.0x18000c207.76
jmp 0x18000e315
movsxd rax, dword [rbp + 0xaec]
test eax, eax
je 0x18000e1b3
cmp word [0x1800ce8f8], 0
jne 0x18000e18b
mov qword [rsp + 0x50], rax
mov r9d, 0x12d
lea rax, [rsp + 0x50]
mov r8, r12
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180056b50
mov dword [rbp - 0x80], eax
xor r9d, r9d
movsxd rax, dword [rbp + 0xaec]
test eax, eax
je 0x18000e1b3
mov qword [rsp + 0x20], r9
lea rcx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor edx, edx
lea r8d, [r9 + 0x5b]
call fcn.180008760
movzx eax, word [rbp + 0xaea]
mov r8d, dword [rbp + 0x11c8]
mov word [0x1800ce8f8], ax
jmp case.0x18000c207.76
cmp qword [rbp - 0x70], 0
jne case.0x18000c207.76
mov rbx, qword [rbp + 0x11c0]
lea rax, [rbp + 0x60]
mov rcx, rbx
mov byte [rbp + 0x60], 0
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e1f0
jmp 0x18000e3c3
cmp edi, 0xd860
je 0x18000e792
cmp edi, 0x12743
je 0x18000e2d8
cmp edi, 0x18983
jne case.0x18000c207.76
mov rbx, qword [rbp + 0x11c0]
lea rax, [rbp + 0x60]
mov rcx, rbx
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e280
jmp 0x18000e3c3
mov rbx, qword [0x1800de938]
cmp rbx, qword [0x1800de940]
je 0x18000e30a
mov rcx, qword [rbp - 0x70]
call qword [rbx]
test al, al
je 0x18000e609
add rbx, 8
cmp rbx, qword [0x1800de940]
jne 0x18000e2e8
mov r8d, dword [rbp + 0x11c8]
mov byte [0x1800b6109], 1
mov byte [rbp + 0x60], 1
mov ebx, 0xfa5
lea eax, [r8 + r8*2]
shl eax, 6
add edi, eax
cmp edi, dword [rbp - 0x7c]
ja 0x18000e698
mov r10, qword [rbp + 0x11d8]
xor r9d, r9d
jmp 0x18000bfec
movsxd rcx, dword [r12]
mov rbx, qword [rbp + 0x11c0]
mov rax, rcx
and eax, 7
sar rcx, 3
movzx eax, byte [rax + r11 + 0xb5150]
test byte [rcx + r10], al
mov rcx, rbx
lea rax, [rbp + 0x60]
setne byte [rbp + 0x60]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e370
mov rdx, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rcx], eax
cmp rdx, 0x10
jb 0x18000e407
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e3ff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e808
call fcn.18006cae4
xor r9d, r9d
mov qword [rsp + 0x70], r9
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x18]
mov qword [rsp + 0x78], 0xf
cmp rdx, 0x10
jb 0x18000e455
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e450
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e808
call fcn.18006cae4
mov rax, rbx
add rsp, 0x1278
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov byte [rbp + 0x60], bl
lea rax, [rbp + 0x60]
mov rbx, qword [rbp + 0x11c0]
mov rcx, rbx
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e480
mov rdx, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rcx], eax
cmp rdx, 0x10
jb 0x18000e514
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e50f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e808
call fcn.18006cae4
xor edi, edi
mov qword [rsp + 0x70], rdi
mov byte [rsp + 0x60], dil
jmp 0x18000e411
mov rbx, qword [rbp + 0x11c0]
lea rax, [rbp + 0x60]
mov rcx, rbx
mov byte [rbp + 0x60], 0
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e540
jmp 0x18000e4d3
mov rbx, qword [rbp + 0x11c0]
lea rax, [rbp + 0x480]
mov rcx, rbx
mov word [0x1800ce8f8], r9w
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e5b1
jmp 0x18000e3c3
mov rax, qword [rbp - 0x70]
lea r8, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea ecx, [rdx + 0x3e]
call fcn.180012c80
mov rbx, qword [rbp + 0x11c0]
lea rax, [rbp + 0x60]
mov rcx, rbx
mov byte [rbp + 0x60], 0
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e640
jmp 0x18000e4d3
mov rdx, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x11c0]
mov rcx, rbx
lea rax, [rbp + 0x60]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e6b0
mov eax, dword [rax]
mov dword [rcx], eax
cmp rdx, 0x10
jb 0x18000e73f
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e73a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e808
call fcn.18006cae4
mov rdx, qword [rbp - 0x18]
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], al
cmp rdx, 0x10
jb 0x18000e455
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e450
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e808
jmp 0x18000e450
mov eax, dword [rbp - 0x80]
mov rbx, qword [rbp + 0x11c0]
mov dword [rbp + 0x60], eax
mov rcx, rbx
lea rax, [rbp + 0x60]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r15, 1
jne 0x18000e7b0
jmp 0x18000e3c3
call fcn.180070f14
int3