Function at 0x18001fa5c
Capabilities:
Identify system language via api

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x18]
sub rsp, 0x118
mov rax, qword [0x180067a78]
xor rax, rsp
mov qword [rbp + 8], rax
mov al, byte [0x180067587]
mov r13, rcx
mov eax, dword [0x180067608]
mov r14d, 0x64
movzx esi, byte [0x1800675cc]
mov dword [rsp + 0x7c], eax
mov dword [rbp - 0x58], 0x18f2f397
mov dword [rbp - 0x74], 0x9b463bca
mov eax, dword [0x180067634]
mov dword [rsp + 0x68], eax
movabs rax, 0x844f22de5925e
mov qword [rbp - 0x68], rax
movzx eax, word [0x180067584]
movzx ecx, byte [0x1800675fb]
mov qword [rbp - 0x40], rax
movsx rax, word [0x18006756c]
mov word [rsp + 0x54], cx
mov byte [rsp + 0x50], 0x69
mov qword [rbp - 0x60], rax
mov byte [rsp + 0x53], 0xb1
mov byte [rsp + 0x52], cl
mov rdi, qword [0x180067620]
movsx rax, byte [0x18006756e]
mov qword [rbp - 0x50], rax
mov r12d, dword [0x18006759c]
movsx eax, byte [0x1800675f8]
mov ebx, dword [0x180067664]
mov word [rsp + 0x58], ax
mov eax, dword [0x18006761c]
mov dword [rbp - 0x80], eax
mov eax, dword [0x180067630]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1800675fa]
mov word [rsp + 0x64], ax
mov eax, 0x71
mov dword [rsp + 0x74], 0xaf
mov byte [rsp + 0x51], 0x6c
mov word [rsp + 0x54], ax
mov eax, dword [0x1800675f4]
mov qword [rbp - 0x68], rax
movzx eax, word [0x180067584]
mov dword [rsp + 0x78], eax
mov eax, 0xc2b8
mov word [rsp + 0x54], ax
mov rax, qword [0x180067600]
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x68], 0xf89a
mov eax, dword [0x1800675f0]
mov eax, 0xe4b5
mov qword [rbp - 0x20], r9
mov word [rsp + 0x54], ax
movsx rax, word [0x180067670]
mov qword [rbp - 0x68], rax
mov eax, 0xd05a
mov word [rsp + 0x54], r14w
mov word [rsp + 0x54], ax
mov dword [rbp - 0x30], r8d
mov qword [rbp - 0x28], rdx
call qword [sym.imp.KERNEL32.dll_GetOEMCP]
xor r15d, r15d
mov eax, eax
mov qword [rbp - 0x68], rax
mov edx, r15d
mov rax, qword [rbp - 0x68]
mov ecx, r15d
cmp rax, r14
mov rax, qword [rbp - 0x68]
setle dl
test rax, rax
setle cl
cmp ecx, edx
je 0x18001fc0d
mov rax, qword [0x180067600]
not rax
cmp rax, 0xcf
jle 0x18001fc0d
sub byte [0x1800675f8], r12b
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x6c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0x54]
test ax, ax
je 0x18001fca0
movsx rcx, byte [rsp + 0x53]
mov edx, r15d
mov rax, qword [0x180067640]
cmp rcx, rax
mov al, byte [rsp + 0x53]
mov ecx, r15d
setge dl
cmp edx, ecx
jne 0x18001fc59
mov eax, 0x89
mov word [rsp + 0x58], ax
jmp 0x18001fcb9
movzx eax, word [rsp + 0x60]
test ax, ax
je 0x18001fcb9
mov rax, qword [rbp - 0x60]
mov rdx, r15
movzx ecx, r12w
add rcx, rax
mov qword [rbp - 0x60], rcx
mov ecx, r15d
mov eax, dword [rsp + 0x7c]
test eax, eax
mov eax, dword [rbp - 0x80]
sete cl
imul eax, ecx
mov rcx, qword [0x180067620]
test eax, eax
sete dl
add cx, si
add cx, dx
mov word [rsp + 0x54], cx
jmp 0x18001fcb9
test ebx, ebx
je 0x18001fcb9
mov rax, qword [rbp - 0x50]
mov ecx, 0xa9934fb4
add rax, rcx
mov qword [rbp - 0x40], rax
mov byte [rsp + 0x51], 0xcb
mov eax, dword [rsp + 0x6c]
xor r8d, r8d
add eax, 0x4be
mov edx, 0xe5
mov dword [rbp - 0x44], eax
lea ecx, [r8 + 0x3b]
call fcn.180031dcc
mov qword [0x1800675d0], rax
mov edx, r15d
mov rax, qword [0x1800675d0]
mov r8d, 0xe3
mov rax, qword [0x1800675d0]
mov eax, dword [rsp + 0x6c]
add eax, 0x4b5
movzx r14d, r12w
mov dword [rbp - 0x38], eax
test sil, sil
movzx eax, word [rsp + 0x54]
mov ecx, r14d
sete dl
not ecx
sub edx, eax
mov eax, dword [rsp + 0x7c]
sub ecx, eax
mov rax, qword [rbp - 0x60]
imul edx, ecx
mov rcx, r15
cmp byte [0x1800675ff], r15b
sete cl
and rax, rcx
sub rdx, rax
mov eax, dword [0x18006759c]
test eax, eax
sete al
sub dl, al
mov byte [0x180067587], dl
mov eax, dword [rsp + 0x74]
add eax, 0x742716c5
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x74d
mov dword [rsp + 0x78], eax
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x6c], eax
movsx rax, word [0x180067670]
cmp rax, rdi
jbe 0x18001fe0b
mov eax, dword [rsp + 0x7c]
mov edx, r15d
movsx ecx, byte [0x1800675f8]
cmp ecx, eax
mov eax, r15d
sete dl
cmp byte [0x1800675f8], 0x54
sete al
cmp edx, eax
jbe 0x18001fdb7
movsxd rdi, dword [0x1800675cc]
movabs rax, 0x8e2e333e90336
add rdi, rax
jmp 0x18001fe21
cmp qword [0x180067648], r15
mov ecx, r15d
movzx eax, byte [0x1800675fa]
sete cl
cmp eax, ecx
jb 0x18001fe21
movsx eax, byte [rsp + 0x50]
mov rcx, r15
mov edx, dword [0x180067630]
imul edx, eax
imul eax, r14d, 0x3e0d
sub edx, eax
mov dword [rbp - 0x74], edx
movzx eax, word [rsp + 0x60]
cmp ax, r8w
mov rax, qword [rbp - 0x40]
sete cl
inc eax
add ecx, eax
movzx eax, r12w
xor ecx, eax
mov dword [rbp - 0x74], ecx
jmp 0x18001fe21
mov eax, dword [0x18006761c]
test eax, eax
movzx ebx, word [0x18006763c]
cmovne ebx, dword [str.hZn0]
mov eax, dword [rsp + 0x6c]
add eax, 0x4cf
mov dword [rsp + 0x5c], eax
movsx rcx, byte [rsp + 0x50]
call qword [sym.imp.USER32.dll_IsZoomed]
mov eax, eax
mov qword [0x180067678], rax
mov eax, dword [rsp + 0x6c]
add eax, 0x42a
mov dword [rsp + 0x78], eax
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x6c]
add eax, 0x5a7
mov dword [rbp - 0x78], eax
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x6c], eax
movsx eax, word [0x180067638]
cmp esi, eax
jge 0x18001febc
movzx ecx, word [rsp + 0x64]
mov eax, dword [0x18006761c]
cmp ecx, eax
jl 0x18001ff1e
mov eax, dword [rbp - 0x80]
movzx edx, byte [0x1800675bf]
sub edx, eax
movsx eax, byte [rsp + 0x52]
mov ebx, dword [0x18006759c]
add eax, edx
add ebx, eax
movzx eax, word [rsp + 0x60]
sub al, byte [0x180067674]
not ebx
mov byte [rsp + 0x51], al
jmp 0x18001ff1e
mov al, byte [rsp + 0x51]
test al, al
je 0x18001fef5
movzx ecx, byte [0x180067586]
add ecx, 0x3c6cb2be
mov dword [0x180067660], ecx
mov al, byte [0x1800675f9]
mov cl, byte [0x180067587]
and cl, al
mov al, byte [0x1800675f9]
sub al, cl
mov byte [0x1800675f9], al
jmp 0x18001ff1e
cmp dword [0x180067618], r15d
je 0x18001ff1e
mov eax, dword [0x18006760c]
test eax, eax
je 0x18001ff1e
movsxd rcx, dword [str.hZn0]
mov rax, qword [0x180067640]
sub ecx, eax
mov dword [str.hZn0], ecx
mov eax, dword [rsp + 0x6c]
mov r9d, 1
add eax, 0x7a4
mov dword [rbp - 0x70], eax
mov eax, dword [0x18006761c]
cmp eax, esi
jg 0x18001ff44
mov eax, dword [rsp + 0x7c]
test eax, eax
cmovne ebx, r9d
mov eax, dword [rsp + 0x6c]
add eax, 0x4bd
mov dword [rsp + 0x78], eax
mov eax, dword [0x180bd5d30]
mov dword [0x18006759c], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x469
mov dword [rbp - 0x48], eax
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x6c], eax
mov rax, qword [0x180067600]
not rax
test rax, rax
je 0x18001ff93
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x18001ff93
mov r8d, 0xfffffffe
jmp 0x18001ff97
or r8d, 0xffffffff
mov rcx, qword [rbp - 0x50]
mov edx, r15d
mov rax, qword [rbp - 0x40]
cmp rax, rcx
setb dl
xor edx, r8d
not edx
test edx, edx
jne 0x18001ffc6
mov eax, r9d
sub al, byte [0x180067648]
movzx ecx, al
imul esi, ecx
imul ebx, edi, 0x2fb
mov eax, dword [rsp + 0x6c]
xor r9d, r9d
movsx r8, word [0x180067638]
add eax, 0x41e
mov edx, 0xcc
mov dword [rsp + 0x70], eax
xor ecx, ecx
mov qword [rsp + 0x20], 0xb4
call fcn.180031504
mov dword [0x180067674], eax
test eax, eax
je 0x180020011
movzx ecx, word [rsp + 0x64]
movzx eax, byte [0x1800675fb]
sub cx, ax
mov word [rsp + 0x64], cx
mov eax, dword [rsp + 0x6c]
mov ecx, dword [0x1800675f4]
add eax, 0x421
mov dword [rbp - 0x7c], eax
call qword [sym.imp.USER32.dll_GetLastActivePopup]
mov byte [0x1800675ff], al
mov edx, 0x110c4f
mov eax, dword [rsp + 0x6c]
mov r9d, 0xae
add eax, 0xa910
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x68]
movsx ecx, word [rsp + 0x58]
add byte [0x180067583], al
mov eax, dword [str.hZn0]
sub eax, ecx
mov dword [str.hZn0], eax
mov eax, dword [0x180bd5d30]
mov dword [str.hZn0], eax
movsx eax, byte [rsp + 0x52]
imul eax, eax, 0xffffff94
mov byte [0x1800675f8], al
mov eax, dword [rbp - 0x38]
mov eax, dword [rbp - 0x44]
mov ecx, dword [rbp - 0x7c]
mov eax, dword [rsp + 0x70]
imul ecx, eax
mov eax, dword [rsp + 0x70]
sub edx, ecx
xor ecx, ecx
sub edx, eax
mov eax, dword [rsp + 0x70]
sub edx, eax
mov eax, dword [0x180bd5d30]
mov dword [rbp - 0x44], edx
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x70]
add eax, 0x492
mov dword [rsp + 0x6c], eax
movzx edx, byte [rsp + 0x51]
mov r8, qword [rbp - 0x68]
call fcn.180031a60
mov dword [0x180067650], eax
mov edi, 1
movsx ecx, byte [rsp + 0x52]
mov eax, 0x92f
xor cx, ax
mov r15b, bl
mov word [rsp + 0x58], cx
mov eax, dword [rsp + 0x70]
add eax, 0x480
mov dword [rsp + 0x78], eax
mov rax, qword [0x180067640]
add ax, di
movsx ecx, ax
movsx eax, word [0x18006756c]
imul eax, ecx
mov word [0x18006756c], ax
mov eax, dword [rsp + 0x70]
add eax, 0x8281
mov dword [rbp - 0x7c], eax
call qword [sym.imp.USER32.dll_GetFocus]
xor r8d, r8d
test rax, rax
je 0x18002013c
mov r8d, edi
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetUpdateRect]
xor r8d, r8d
movzx ecx, word [rsp + 0x64]
mov r9d, 0x60
movzx eax, word [rsp + 0x54]
cmp ax, cx
jb 0x180020184
movsx ecx, word [rsp + 0x58]
mov edx, r8d
movzx eax, word [rsp + 0x54]
cmp ecx, eax
movzx eax, word [rsp + 0x58]
mov ecx, r8d
setge dl
cmp ax, r9w
setge cl
cmp edx, ecx
jae 0x18002018a
mov eax, dword [rbp - 0x58]
shl al, 6
mov byte [0x18006756f], al
jmp 0x18002018a
mov eax, dword [str.hZn0]
mov edx, dword [rbp - 0x7c]
mov edi, 0x26ab
mov eax, dword [rsp + 0x6c]
or edx, eax
mov eax, dword [rsp + 0x6c]
imul eax, eax, 0x5cc4
add eax, 0xfe578586
add eax, edx
mov dword [rbp - 0x38], eax
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x70]
add eax, 0x400
mov dword [rsp + 0x78], eax
movzx ecx, word [rsp + 0x54]
mov eax, dword [rsp + 0x74]
cmp ecx, eax
jg 0x180020211
mov r9d, 0xf4
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180031a60
xor r8d, r8d
mov qword [0x180067658], rax
test rax, rax
je 0x180020223
mov eax, dword [rbp - 0x80]
mov ecx, 0x90
sub cl, al
mov eax, dword [0x180067618]
add r15b, cl
add eax, 0x831d1de1
mov dword [0x1800675f4], eax
jmp 0x180020223
mov al, byte [0x1800675ff]
sar al, 3
movsx eax, al
mov dword [0x180067618], eax
mov eax, dword [rsp + 0x70]
add eax, 0xe85c
cmp word [0x180067638], r8w
mov dword [rbp - 0x7c], eax
je 0x180020244
test sil, sil
je 0x180020244
xor esi, esi
mov edx, esi
jmp 0x18002024b
mov edx, 1
xor esi, esi
mov al, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x53]
imul ecx, edx
not ecx
test ecx, ecx
jle 0x180020293
mov al, byte [0x1800675cc]
sub al, 0x2d
mov byte [rsp + 0x50], al
mov rax, qword [0x180067620]
mov cl, byte [rsp + 0x51]
not al
add cl, al
movzx eax, word [rsp + 0x64]
not al
movsx ecx, cl
movsx edx, al
imul edx, ecx
mov byte [0x18006762a], dl
jmp 0x180020326
mov ecx, dword [0x180067650]
mov r8d, esi
movzx eax, word [0x18006763c]
not ecx
cmp eax, ecx
mov edx, esi
movsx rcx, byte [rsp + 0x50]
mov rax, qword [rbp - 0x50]
setl r8b
cmp rax, rcx
setbe dl
cmp edx, r8d
jb 0x1800202dd
movsx edx, byte [0x1800675ff]
mov ecx, 0xffffd3f4
movsx ecx, cx
imul edx, ecx
mov word [0x180067638], dx
jmp 0x180020326
movzx eax, word [rsp + 0x54]
test ax, ax
je 0x180020316
movzx eax, byte [0x180067586]
movsx rdx, word [rsp + 0x60]
xor rdx, rax
mov qword [0x180067648], 0x37f1
movsx eax, word [0x180067670]
add eax, 0xb00d30dc
add eax, edx
mov dword [rsp + 0x68], eax
jmp 0x180020326
cmp word [0x180067654], si
je 0x180020326
movsx ebx, byte [rsp + 0x53]
not ebx
mov eax, dword [rsp + 0x70]
add eax, 0x4a3
mov dword [rsp + 0x70], eax
mov al, byte [0x1800675e8]
mov byte [0x180067583], al
mov eax, dword [rsp + 0x68]
sub eax, 0x9d
mov qword [0x180067658], rax
jmp 0x18002049c
movsx rcx, byte [0x18006756f]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rsi
mov r8d, 0xd4
call fcn.180031504
mov word [rsp + 0x58], ax
mov edx, esi
movzx eax, word [rsp + 0x58]
mov ecx, esi
cmp ax, 0x28
movzx eax, word [rsp + 0x58]
setl dl
test ax, ax
sets cl
cmp ecx, edx
jb 0x1800203c5
mov ecx, dword [0x180067650]
mov eax, dword [rsp + 0x74]
imul ecx, eax
movsx eax, byte [0x18006756e]
cmp word [0x1800675fc], si
cmovne eax, ecx
mov dword [rsp + 0x74], ecx
cdqe
mov qword [0x180067648], rax
jmp 0x18002046a
movsx eax, byte [0x1800675be]
cmp dword [0x180067618], eax
ja 0x180020413
mov rax, qword [rbp - 0x68]
mov rdx, rsi
mov ecx, dword [0x1800675f4]
not ecx
and rax, rcx
cmp byte [0x18006762a], sil
sete dl
add rdx, rax
mov eax, dword [rsp + 0x74]
mov rdi, qword [rbp - 0x68]
imul eax, eax, 0xffff22ce
cdqe
imul rdi, rax
not rdi
imul rdi, rdx
not rdi
jmp 0x18002046a
mov ecx, dword [0x180067630]
mov rax, qword [rbp - 0x40]
cmp rax, rcx
ja 0x18002043e
movzx eax, word [0x180067584]
test ax, ax
je 0x180020435
movsxd rdi, dword [rsp + 0x74]
jmp 0x18002046a
mov rdi, qword [0x180067640]
jmp 0x18002046a
movsxd rcx, dword [rsp + 0x74]
mov edx, esi
mov rax, qword [rbp - 0x50]
cmp rax, rcx
movzx eax, word [rsp + 0x54]
seta dl
cmp edx, eax
je 0x18002046a
movsx eax, byte [0x18006756e]
add eax, 0x2eb0
cdqe
mov qword [rbp - 0x50], rax
mov eax, dword [rsp + 0x68]
add eax, 0xee
cmp qword [0x180067648], rax
jne 0x1800204bf
movzx eax, word [rsp + 0x54]
mov r8d, dword [rbp - 0x74]
movsx edx, byte [rsp + 0x50]
or r8d, eax
movsx ecx, bl
imul edx, ecx
xor dl, r8b
mov byte [0x1800675f9], dl
mov dword [0x180067650], 0x9a45ceaa
mov ecx, dword [0x180067650]
mov eax, dword [rsp + 0x7c]
add eax, ecx
cmp qword [0x180067668], rax
je 0x180020354
mov ecx, dword [rbp - 0x78]
mov eax, dword [rsp + 0x5c]
xor ecx, eax
mov edx, dword [rsp + 0x5c]
mov eax, dword [rsp + 0x5c]
xor edx, eax
mov eax, dword [rsp + 0x70]
imul edx, ecx
imul ecx, eax, 0xe
mov eax, dword [rsp + 0x70]
sub eax, ecx
mov ecx, dword [rbp - 0x7c]
add ecx, eax
xor ecx, 0xafed
sub ecx, edx
mov dword [rsp + 0x70], ecx
mov rax, qword [rbp - 0x50]
xor rax, 0x85a6
mov qword [rbp - 0x68], rax
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x5c], eax
movzx eax, byte [0x1800675bf]
cmp eax, dword [0x180067618]
jb 0x180020580
cmp qword [0x180067668], rsi
je 0x180020554
movsx ecx, word [rsp + 0x58]
mov edx, dword [rsp + 0x7c]
not ecx
movzx eax, byte [0x1800675fb]
add edx, ecx
imul ecx, eax, 0x612f
and edx, 0xb333716a
sub ecx, 0x558c80bf
imul ecx, edx
mov dword [0x180067630], ecx
jmp 0x180020580
movsx eax, word [0x180ce4768]
mov ecx, dword [rsp + 0x68]
and ecx, eax
mov dword [rsp + 0x68], ecx
mov al, byte [rsp + 0x50]
test al, al
je 0x180020575
mov eax, dword [0x18006759c]
jmp 0x180020579
mov rax, qword [rbp - 0x60]
mov word [0x18006756c], ax
mov eax, dword [rsp + 0x5c]
add eax, 0x91b0
cmp dword [0x180067608], esi
mov dword [rsp + 0x78], eax
mov rax, rsi
mov r8, qword [rbp - 0x40]
sete al
movzx ecx, word [0x1800675cc]
imul r8, rax
movzx eax, bx
add ax, word [0x1800675f4]
add r8, qword [0x180067668]
movzx edx, ax
imul edx, ecx
movabs rcx, 0xb86ad005696d6
mov eax, ebx
and rax, rcx
xor dx, r8w
mov word [rsp + 0x54], dx
mov qword [rbp - 0x60], rax
mov eax, dword [rsp + 0x5c]
add eax, 0x4ae
mov dword [rbp - 0x78], eax
movsx ecx, byte [rsp + 0x52]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov eax, eax
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
test rax, rax
js 0x18002060d
lea eax, [r14 + 0x630137a3]
mov dword [rbp - 0x74], eax
jmp 0x180020660
mov rax, qword [rbp - 0x40]
mov rcx, rsi
test rax, rax
mov rax, qword [0x180067640]
sete cl
add rax, rcx
je 0x180020647
mov eax, dword [0x1800675f4]
add eax, 0x252f717c
mov dword [0x18006761c], eax
movsxd rax, dword [0x1800675cc]
mov qword [0x180067678], rax
jmp 0x180020660
mov eax, dword [rsp + 0x68]
mov cl, byte [0x1800675fa]
movzx eax, word [rsp + 0x58]
add cl, cl
add al, cl
mov byte [0x1800675fa], al
mov eax, dword [rsp + 0x5c]
lea rcx, [rbp - 8]
movups xmm0, xmmword [str.Warning]
add eax, 0x3f3
mov dword [rbp - 0x7c], eax
movdqu xmmword [rbp - 8], xmm0
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov byte [0x180067586], al
movsx ecx, byte [rsp + 0x53]
add ecx, 0x166ce119
mov dword [rbp - 0x74], ecx
mov eax, dword [rbp - 0x78]
imul ecx, eax, 0x9f55
mov eax, dword [rbp - 0x7c]
or eax, 0x84
sub ecx, eax
xor ecx, 0x2e99da5
mov dword [rsp + 0x6c], ecx
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [0x180067664], eax
test eax, eax
je 0x1800206db
movsx ecx, byte [0x1800675be]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov eax, eax
mov qword [rbp - 0x50], rax
jmp 0x1800206df
mov al, byte [rsp + 0x50]
mov eax, dword [0x180bd5d30]
mov r14d, 0xd7
mov dword [rsp + 0x5c], eax
movsx rdx, byte [0x18006756f]
movsx rax, byte [0x18006756f]
sub rdx, rax
mov rax, qword [0x180067678]
add al, dl
mov byte [0x18006756f], al
movabs rax, 0x8ffdb1bcbd302
mov qword [0x180067668], rax
mov eax, dword [rsp + 0x5c]
add eax, 0x3e2
mov dword [rbp - 0x7c], eax
mov dword [rsp + 0x74], 4
movzx ecx, word [rsp + 0x60]
mov rax, qword [rbp - 0x60]
xor cx, ax
mov word [0x18006763c], cx
mov ecx, dword [rsp + 0x74]
dec ecx
sub ecx, 1
je 0x180020799
sub ecx, 1
je 0x18002078a
cmp ecx, 1
jne 0x1800207ad
movsxd rdx, dword [0x18006761c]
movsxd rax, dword [0x18006761c]
sub rdx, rax
mov rax, qword [0x180067610]
add eax, edx
mov dword [0x18006761c], eax
mov eax, dword [0x1800675f0]
xor eax, ebx
sub ebx, eax
jmp 0x1800207ad
movsx eax, byte [0x1800675ff]
imul ecx, eax, 0x112f16c2
jmp 0x1800207a7
movsx eax, byte [0x1800675f9]
movsx ecx, byte [rsp + 0x52]
add ecx, eax
mov dword [0x180067630], ecx
mov eax, dword [rsp + 0x5c]
add eax, 0x49b
mov dword [rbp - 0x78], eax
mov ecx, dword [rbp - 0x74]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov byte [0x18006756f], al
mov eax, dword [rsp + 0x5c]
add eax, 0x472
mov dword [rsp + 0x78], eax
mov ecx, dword [rbp - 0x78]
mov eax, dword [rbp - 0x7c]
or ecx, eax
mov eax, dword [0x180bd5d30]
xor ecx, 0x9d
movsd xmm0, qword [str.win:Warning]
mov dword [rbp - 0x7c], ecx
lea rcx, [rbp - 0x18]
mov dword [rsp + 0x5c], eax
mov eax, dword [0x18004ba88]
mov dword [rbp - 0x10], eax
movsd qword [rbp - 0x18], xmm0
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [0x18006762a], al
mov eax, dword [rsp + 0x5c]
add eax, 0xa0a5
mov dword [rsp + 0x78], eax
mov rax, qword [0x180067640]
test rax, rax
je 0x18002084b
movzx eax, word [rsp + 0x60]
cmp r14w, ax
je 0x18002085e
movsx rax, word [0x180067638]
sub qword [0x180067658], rax
jmp 0x18002085e
test r12w, r12w
je 0x18002085e
mov eax, dword [0x180bd5d30]
mov qword [0x180067620], rax
mov eax, dword [rsp + 0x5c]
add eax, 0x481a
mov dword [rbp - 0x78], eax
mov byte [0x180067586], 2
mov rax, qword [0x180067610]
add eax, 0xbea
mov dword [0x18006761c], eax
movzx eax, byte [0x180067586]
mov ecx, eax
test al, al
je 0x18002090b
sub ecx, 1
je 0x1800208d8
cmp ecx, 1
jne 0x18002092d
movsx eax, byte [0x18006762a]
mov ecx, 0xf9ccd5ce
sub ecx, eax
movzx eax, word [rsp + 0x54]
sub ecx, eax
mov eax, dword [0x1800675f0]
add ecx, eax
mov rax, qword [0x180067640]
add rax, 0xffffffffffffffef
add rcx, rax
mov rax, qword [0x180067600]
add al, cl
mov byte [rsp + 0x50], al
jmp 0x18002092d
movsxd rax, dword [0x180067650]
mov rdx, qword [0x180067658]
sub rdx, rax
mov eax, dword [0x180067650]
add eax, edx
mov dword [0x180067650], eax
mov rax, qword [0x180067600]
sar rax, 5
mov word [0x180067584], ax
jmp 0x18002092d
mov eax, dword [0x1800675f4]
lea ecx, [rdi + rax*2]
movzx eax, word [0x180067654]
mov dword [0x1800675f4], ecx
imul ecx, eax, 0x9b78
mov dword [0x180067608], ecx
mov eax, dword [rsp + 0x5c]
add eax, 0x439
mov dword [rsp + 0x5c], eax
mov ecx, dword [rsp + 0x7c]
mov rax, qword [0x180067610]
cmp rax, rcx
je 0x180020a48
mov dword [0x180067660], 4
mov eax, 0x4327
add ax, word [0x18006756c]
mov word [rsp + 0x64], ax
movsx rax, word [rsp + 0x58]
mov qword [0x180c57f00], rax
mov eax, dword [0x180067660]
test eax, eax
je 0x180020a3a
sub eax, 1
je 0x180020a2c
sub eax, 1
je 0x180020a11
sub eax, 1
je 0x180020a07
cmp eax, 1
jne 0x180020a52
cmp word [0x1800675fc], si
mov rax, rsi
movabs r8, 0xdb00377c3731f
sete al
sub r8, rax
movzx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x60]
sub r8, rax
sub ecx, dword [0x180067664]
movzx eax, word [0x180067608]
movzx ecx, cx
not ax
movzx edx, ax
imul edx, ecx
or dx, r8w
mov word [0x180067584], dx
mov cl, byte [0x180067587]
mov al, byte [0x180067587]
sub cl, al
mov al, byte [rsp + 0x52]
sub cl, al
mov byte [0x180067587], cl
jmp 0x180020a52
mov rax, qword [rbp - 0x60]
mov byte [rsp + 0x53], al
jmp 0x180020a52
mov ecx, dword [0x18006761c]
test ecx, ecx
movzx eax, byte [0x1800675bf]
movzx edx, bl
cmovne edx, eax
mov byte [rsp + 0x53], dl
jmp 0x180020a52
mov eax, dword [rsp + 0x68]
test eax, eax
jne 0x180020a52
mov rbx, qword [rbp - 0x40]
jmp 0x180020a52
mov al, byte [0x1800675cc]
sub al, 5
mov byte [rsp + 0x51], al
jmp 0x180020a52
mov dword [0x1800675cc], 0x80
mov rax, qword [0x180067678]
test rax, rax
je 0x180020a67
movzx eax, word [0x180067674]
jmp 0x180020a6c
movzx eax, byte [rsp + 0x51]
movzx ecx, word [0x18006756c]
mov r9d, 0x27
mov word [0x18006763c], ax
movzx eax, word [0x180067658]
and ax, cx
sub cx, ax
mov word [0x18006756c], cx
mov ecx, dword [rbp - 0x48]
mov eax, dword [rbp - 0x48]
sub ecx, eax
mov edx, dword [rbp - 0x70]
mov eax, dword [rsp + 0x5c]
sub edx, 0x29f
imul r8d, eax, 0x363
mov eax, dword [rsp + 0x5c]
imul edx, ecx
add r8d, edx
sub r8d, eax
mov eax, dword [rbp - 0x78]
sub r8d, eax
mov al, byte [0x180067648]
xor al, r9b
sub r8d, 0xe00b8
add byte [0x180067583], al
mov dword [rbp - 0x2c], r8d
mov byte [0x180067587], 3
movzx eax, byte [0x180067587]
mov ecx, eax
test al, al
je 0x180020b53
sub ecx, 1
je 0x180020b29
sub ecx, 1
je 0x180020b0d
cmp ecx, 1
jne 0x180020b6d
movzx eax, r12w
mov qword [0x180d53820], rax
jmp 0x180020b6d
mov eax, dword [0x18006761c]
mov ecx, 0x9f
mov r14b, byte [0x1800675f8]
sub cl, al
add byte [0x1800675fa], cl
jmp 0x180020b6d
mov eax, dword [0x180067630]
imul ecx, eax, 0x94
movsx eax, byte [0x1800675f8]
mov dword [0x180067664], ecx
mov ecx, 0x6567
and ax, cx
or word [0x180067654], ax
jmp 0x180020b6d
mov al, byte [rsp + 0x51]
test al, al
movsx rax, word [0x180067670]
jne 0x180020b67
mov rax, qword [rbp - 0x50]
mov dword [0x180067664], eax
mov eax, dword [0x180bd5d30]
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x5c], eax
xor ecx, ecx
mov qword [rsp + 0x20], rsi
call fcn.180031504
mov qword [rbp - 0x68], rax
mov edx, esi
mov rax, qword [rbp - 0x68]
mov ecx, esi
cmp rax, 0x35
mov rax, qword [rbp - 0x68]
setne dl
test rax, rax
setne cl
cmp ecx, edx
je 0x180020c12
mov al, byte [0x180067586]
mov ecx, esi
mov rax, qword [0x1800675e0]
mov rax, qword [rbp - 0x60]
not ax
sub ax, word [0x1800675e8]
mov word [rsp + 0x60], ax
mov rax, qword [rbp - 0x50]
mov r8d, dword [rsp + 0x74]
test rax, rax
movzx eax, r15b
sete cl
sub ecx, eax
movzx eax, word [0x180067654]
inc ecx
add r8d, eax
mov rax, qword [rbp - 0x60]
imul r8d, ecx
movzx ecx, byte [0x180067586]
neg rax
sbb edx, edx
not edx
and edx, 0x87
xor ecx, edx
add ecx, r8d
mov dword [rbp - 0x74], ecx
jmp 0x180020c5f
movsx ecx, byte [rsp + 0x50]
not ecx
test ecx, ecx
je 0x180020c2c
mov al, byte [rsp + 0x51]
sub al, 0xd
sub r14b, byte [0x180d11df4]
jmp 0x180020c5b
movzx eax, byte [0x1800675fb]
mov ecx, esi
cmp rax, qword [0x180067648]
mov eax, esi
setbe cl
cmp dword [0x180067664], 0xfffff5ad
setge al
cmp eax, ecx
jae 0x180020c5f
mov rax, qword [0x180067620]
xor al, 0xd4
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x5c]
add eax, 0x3f4
mov dword [rsp + 0x78], eax
call qword [sym.imp.USER32.dll_IsWow64Message]
mov eax, eax
mov ecx, 0x30
mov qword [rbp - 0x50], rax
mov eax, dword [rsp + 0x5c]
add eax, 0x3748
mov dword [rbp - 0x78], eax
call fcn.180030f20
mov dword [0x1800675f4], eax
test eax, eax
je 0x180020ce1
mov ecx, dword [0x180067634]
mov edx, esi
mov eax, dword [rbp - 0x80]
cmp ecx, eax
mov eax, dword [0x180067634]
mov ecx, esi
setbe dl
cmp eax, 5
setbe cl
cmp edx, ecx
ja 0x180020cc6
mov al, byte [0x180dce262]
mov byte [rsp + 0x51], al
jmp 0x180020d0d
cmp word [0x180067638], si
mov edx, esi
movsx eax, byte [rsp + 0x50]
sete dl
sub dx, ax
mov word [rsp + 0x58], dx
jmp 0x180020d0d
movzx eax, byte [0x1800675bf]
not eax
movsxd rcx, eax
mov rax, qword [rbp - 0x40]
cmp rax, rcx
jbe 0x180020d0d
mov al, byte [rsp + 0x51]
dec al
mov byte [rsp + 0x52], al
movzx eax, word [rsp + 0x58]
add al, 0x80
mov byte [0x18006756e], al
mov eax, dword [rsp + 0x5c]
add eax, 0x7490
mov dword [rbp - 0x70], eax
mov ecx, dword [0x180067634]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov eax, eax
mov qword [rbp - 0x60], rax
movzx eax, byte [rsp + 0x51]
mov edx, dword [0x180067630]
movsx ecx, byte [0x1800675be]
add edx, eax
movzx eax, byte [0x1800675bf]
add ecx, eax
mov dword [0x180067608], 4
movzx eax, word [rsp + 0x54]
add ax, word [0x180067668]
movsxd r8, ecx
add r8, rdx
add ax, r8w
mov word [rsp + 0x64], ax
mov eax, dword [0x180067608]
test eax, eax
je 0x180020e01
sub eax, 1
je 0x180020de6
sub eax, 1
je 0x180020dca
sub eax, 1
je 0x180020da8
cmp eax, 1
jne 0x180020e18
movzx eax, r15b
mov ecx, 0x20fa
add ax, cx
mov word [0x1800675fc], ax
jmp 0x180020e18
movzx eax, word [0x18006763c]
add eax, 0x5995a274
mov dword [0x180067660], eax
mov al, byte [0x180067586]
inc al
mov byte [0x180067586], al
jmp 0x180020e18
mov al, byte [0x180067587]
mov cl, byte [rsp + 0x50]
add cl, al
mov al, byte [0x180067587]
and cl, al
mov byte [0x180067587], cl
jmp 0x180020e18
movsx eax, byte [0x1800675be]
mov ecx, 0xc78a
movzx edx, ax
imul edx, ecx
mov word [0x1800675fc], dx
jmp 0x180020e18
movzx eax, byte [0x1800675fa]
mov r12d, 0x8f
imul eax, eax, 0x4d
mov word [0x180067628], ax
mov ecx, dword [rbp - 0x70]
mov eax, dword [rbp - 0x78]
sub ecx, eax
xor ecx, 0x66
mov eax, 0x4060
sub eax, ecx
mov dword [rsp + 0x78], eax
mov ecx, dword [0x180067634]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov word [rsp + 0x58], ax
test r15b, r15b
jne 0x180020e4b
movzx eax, word [0x180067584]
mov eax, dword [rbp - 0x58]
mov edx, esi
mov rcx, qword [rbp - 0x68]
mov ebx, 1
movsx rax, word [0x18006756c]
not rcx
cmp rcx, rax
movzx eax, word [rsp + 0x54]
setne dl
add eax, edx
je 0x180020e83
mov rax, qword [rbp - 0x40]
add r12w, ax
mov byte [0x180067583], bl
jmp 0x180020e99
mov eax, dword [0x180067608]
lea edx, [rax + rax]
movsx eax, word [rsp + 0x58]
sub edx, eax
mov dword [0x180067608], edx
cmp qword [0x1800675e8], rsi
mov ecx, esi
mov eax, dword [0x180bd5d30]
mov edx, esi
mov dword [rsp + 0x5c], eax
sete cl
sub ecx, dword [0x180067674]
movzx eax, byte [rsp + 0x51]
sub cx, ax
mov word [rsp + 0x54], cx
mov eax, dword [rsp + 0x5c]
add eax, 0x41e
mov dword [rbp - 0x70], eax
mov qword [rbp - 0x68], 0x1a
mov eax, dword [rsp + 0x5c]
add eax, 0x42f
mov dword [rbp - 0x70], eax
movsx ecx, byte [rsp + 0x52]
mov eax, dword [0x18006761c]
cmp ecx, eax
mov al, byte [rsp + 0x52]
mov ecx, esi
setg dl
cmp al, 0x15
setg cl
cmp edx, ecx
jae 0x180020f27
mov al, byte [0x1800675f8]
sar al, 7
movsx eax, al
mov word [0x180067670], ax
movsx eax, word [rsp + 0x60]
add eax, 0x15
cdqe
mov qword [0x180067658], rax
mov eax, dword [rsp + 0x5c]
mov r8d, esi
add eax, 0x91d3
mov dword [rbp - 0x70], eax
mov rax, qword [0x1800675d8]
mov qword [0x180067648], rax
movsx eax, byte [0x18006756f]
movsx ecx, byte [rsp + 0x50]
imul ecx, eax
lea rax, [rdi + 0x7cb]
movsxd rdx, ecx
mov ecx, 0x3b
and rdx, rax
mov qword [rbp - 0x68], rdx
movsx eax, byte [rsp + 0x50]
movzx edx, word [0x18006763c]
cmp edx, eax
mov eax, esi
setl r8b
cmp dx, cx
setb al
cmp r8d, eax
jae 0x180020ffb
test r15b, r15b
jne 0x180020f98
cmp word [0x180067638], si
mov edx, esi
je 0x180020f9a
mov edx, ebx
movsx ecx, byte [rsp + 0x52]
movzx eax, word [rsp + 0x60]
cmp ax, cx
movzx eax, r12w
cmovle edx, ebx
cmp eax, edx
jbe 0x180020fbf
movzx eax, word [rsp + 0x64]
mov dword [0x180edad60], eax
jmp 0x180021019
mov rax, qword [rbp - 0x50]
not rax
test rax, rax
je 0x180021019
mov eax, dword [0x1800675f0]
add eax, dword [0x1800675f4]
sete byte [rsp + 0x50]
movzx eax, word [0x180067670]
test ax, ax
mov al, byte [rsp + 0x53]
jne 0x180020ff0
mov al, byte [rsp + 0x50]
movsx eax, al
mov dword [0x180067608], eax
jmp 0x180021019
movsxd rdi, dword [0x180067650]
movabs rax, 0xcf40883e4b673
sub rdi, rax
mov al, byte [rsp + 0x50]
add al, bl
mov byte [rsp + 0x50], al
mov eax, dword [rbp - 0x70]
mov ecx, 0x92c8
sub ecx, eax
mov eax, dword [0x180bd5d30]
mov dword [rbp - 0x74], ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x572
mov dword [rbp - 0x48], eax
movsx rcx, word [rsp + 0x60]
mov rax, qword [rbp - 0x60]
cmp rax, rcx
je 0x1800210ef
movzx r8d, byte [0x1800675fb]
xor ecx, ecx
mov rdx, qword [0x180067610]
call fcn.180031dcc
mov qword [rbp - 0x50], rax
mov ecx, esi
mov al, byte [rsp + 0x53]
test al, al
movzx eax, word [rsp + 0x64]
sete cl
cmp ecx, eax
jae 0x1800210cf
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [rbp - 0x58], eax
mov edx, esi
mov eax, dword [rbp - 0x58]
mov ecx, esi
cmp eax, 0x60
mov eax, dword [rbp - 0x58]
sete dl
test eax, eax
sete cl
cmp ecx, edx
jbe 0x180021123
mov al, byte [rsp + 0x53]
test al, al
je 0x1800210be
movsx eax, byte [0x18006756f]
imul eax, eax, 0xbb5cf0ce
mov dword [rsp + 0x68], eax
jmp 0x180021123
mov rax, qword [rbp - 0x40]
add eax, 0x83
mov dword [0x180067608], eax
jmp 0x180021123
cmp word [0x180067654], si
je 0x180021123
movsx eax, byte [0x18006762a]
add eax, 0x609e
cdqe
mov qword [0x1800675d8], rax
jmp 0x180021123
mov eax, dword [rbp - 0x58]
mov edx, esi
mov rcx, qword [0x180067610]
movsx rax, byte [0x1800675be]
not rcx
add rdi, rax
mov rax, qword [rbp - 0x68]
add rax, rcx
movsx eax, byte [rsp + 0x52]
sete dl
sub edx, eax
not edx
movsxd rax, edx
mov qword [rbp - 0x60], rax
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x44]
add ecx, eax
mov dword [rbp - 0x70], ecx
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x38]
add ecx, eax
mov al, byte [0x1800675fb]
shr al, 7
mov dword [rbp - 0x70], ecx
mov qword [rbp - 0x68], rsi
mov byte [0x180067587], al
mov rax, qword [rbp - 0x68]
test rax, rax
jne 0x180021184
movsx eax, byte [0x1800675f9]
mov dword [rsp + 0x68], eax
movzx ecx, word [0x180067584]
mov rax, qword [0x180067610]
sub rcx, rax
movzx eax, word [0x180067584]
and ax, cx
mov word [0x180067584], ax
mov eax, dword [0x180bd5d30]
mov dword [rsp + 0x5c], eax
mov al, byte [0x180067658]
and al, 0x13
mov byte [0x180067583], al
mov rax, qword [rbp - 0x60]
test rdi, rdi
jne 0x1800211ac
movzx eax, word [0x180067584]
mov word [rsp + 0x58], ax
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rsp + 0x70]
add ecx, eax
mov dword [rbp - 0x44], ecx
lea rcx, str.gdi32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov qword [0x1800675e0], rcx
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rsp + 0x6c]
add ecx, eax
mov al, byte [0x18006756e]
sub byte [0x1800675be], al
mov dword [rbp - 0x78], ecx
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x7c]
add ecx, eax
lea eax, [rdi - 0x32]
mov dword [rsp + 0x5c], ecx
mov byte [0x18006756e], al
mov eax, dword [rbp - 0x2c]
mov dword [rbp - 0x34], eax
call qword [sym.imp.KERNEL32.dll_GetThreadUILanguage]
movzx eax, ax
mov edx, esi
mov dword [rsp + 0x68], eax
mov ecx, esi
mov eax, dword [rsp + 0x68]
cmp eax, 0x45
mov eax, dword [rsp + 0x68]
setbe dl
test eax, eax
sete cl
cmp ecx, edx
jbe 0x180021253
movsx ecx, word [rsp + 0x58]
mov eax, dword [0x180067650]
not ecx
cmp eax, ecx
jle 0x180021253
movsx ecx, byte [0x18006756f]
sub ecx, 0x8711
mov dword [rsp + 0x68], ecx
mov ecx, dword [rbp - 0x70]
mov eax, dword [rbp - 0x48]
imul ecx, eax
mov eax, dword [rbp - 0x48]
cmp eax, ecx
je 0x180021275
mov rax, qword [rbp - 0x40]
sub al, 0x38
add r14b, al
test r13, r13
je 0x18002151b
mov r15d, dword [rbp - 0x30]
lea rax, [rbp - 0x34]
mov r8, qword [rbp - 0x28]
lea rcx, [0x18003f4aa]
mov qword [rsp + 0x40], rsi
mov r9d, r15d
mov qword [rsp + 0x38], rsi
mov rdx, r13
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rax
call fcn.18001abb0
mov r8d, dword [rbp - 0x78]
mov rsi, rax
mov ecx, dword [rbp - 0x44]
add r8d, ecx
mov r9d, dword [rbp - 0x74]
mov ecx, dword [rsp + 0x78]
add r9d, ecx
mov edx, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x5c]
imul r9d, r8d
imul edx, ecx
cmp r9d, edx
je 0x18002151f
movsx edx, byte [rsp + 0x50]
mov ecx, 0x8e
call fcn.180031bbc
mov dword [rbp - 0x80], eax
movsx ecx, byte [0x18006756f]
movzx eax, byte [rsp + 0x51]
cmp eax, ecx
jle 0x18002133b
movzx ecx, word [0x180067584]
xor r12d, r12d
mov rax, qword [0x180067610]
xor cl, byte [0x1800675fc]
test rax, rax
not cl
movzx eax, word [rsp + 0x58]
sete dl
add dl, cl
sub dl, byte [0x180067648]
sub dl, al
mov eax, dword [rbp - 0x80]
add al, 0x1b
add al, dl
mov byte [0x18006762a], al
jmp 0x180021366
mov al, byte [rsp + 0x53]
mov rcx, qword [0x180067620]
xor al, 0x2c
mov byte [0x18006756e], al
xor rcx, 0xe3
mov al, byte [0x180067586]
add al, cl
mov byte [0x180067586], al
xor r12d, r12d
mov eax, dword [rsp + 0x68]
movsx ecx, byte [0x18006756e]
add eax, 0xd2
mov byte [0x1800675fb], 0xcf
cmp ecx, eax
jne 0x180021410
movzx ebx, r14b
mov r12d, 1
lea eax, [rcx + rbx]
cmp eax, r12d
jne 0x180021408
mov rcx, qword [rbp - 0x50]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0x86
lea edx, [r9 + 0x30]
call fcn.180031504
mov qword [rbp - 0x50], rax
movabs rax, 0xfe9beb84b7a94
cmp rdi, rax
jbe 0x1800213d1
mov al, byte [rsp + 0x52]
movzx eax, word [0x180067670]
movzx eax, word [0x180067670]
mov eax, dword [0x180bd5d30]
mov dword [rbp - 0x80], eax
movsxd rax, dword [rsp + 0x74]
mov qword [0x180067668], rax
mov eax, dword [rsp + 0x68]
movsx ecx, byte [0x18006756e]
add eax, 0xd2
mov byte [0x1800675fb], 0xcf
cmp ecx, eax
je 0x18002138f
xor r12d, r12d
lea ebx, [r12 + 1]
test rsi, rsi
jne 0x18002151f
mov edx, dword [0x18006759c]
xor ecx, ecx
call fcn.180031bbc
cmp eax, 0x46
mov dword [0x180067608], eax
mov edx, r12d
mov ecx, r12d
sete dl
test eax, eax
sete cl
cmp ecx, edx
jbe 0x1800214b7
mov qword [rbp - 0x60], 4
mov eax, dword [0x180067650]
mov rax, qword [rbp - 0x60]
dec rax
mov dword [0x180067618], 0x2d18f41d
sub rax, 1
je 0x1800214ad
sub rax, 1
je 0x1800214a1
cmp rax, 1
jne 0x1800214b7
movsx ecx, byte [0x1800675ff]
movzx eax, r14b
imul eax, ecx
cdqe
mov qword [0x180067640], rax
mov rax, qword [0x180067610]
imul rcx, rax, 0xdcac
mov eax, dword [rbp - 0x80]
add eax, ecx
mov dword [rbp - 0x80], eax
jmp 0x1800214b7
mov eax, 0x397f
mov word [rsp + 0x64], ax
jmp 0x1800214b7
movzx eax, word [rsp + 0x64]
mov word [rsp + 0x54], ax
mov r8d, 0x75e8
mov r9d, 0x407fd840
mov dword [0x18006760c], r8d
mov eax, dword [rbp - 0x58]
add eax, r9d
movsxd rcx, eax
mov rax, qword [0x1800675d0]
cmp rax, rcx
jne 0x18002151b
mov eax, dword [rsp + 0x68]
mov rcx, qword [0x1800675d0]
add rcx, rax
cmp rcx, rbx
jne 0x18002151b
movsx ecx, byte [0x1800675be]
mov dword [0x180067618], ecx
mov dword [0x18006760c], r8d
mov ecx, dword [rbp - 0x58]
add ecx, r9d
movsxd rdx, ecx
mov rcx, qword [0x1800675d0]
cmp rcx, rdx
je 0x1800214df
mov eax, ebx
jmp 0x18002155c
cmp dword [rbp - 0x34], r15d
jbe 0x18002152c
mov eax, 2
jmp 0x18002155c
movsx ecx, byte [rsp + 0x53]
mov eax, 0x6e5e
add cx, ax
mov al, byte [0x1800675be]
sub al, 0x58
mov word [0x180067638], cx
mov rcx, qword [rbp - 0x20]
mov byte [0x1800675fe], al
mov eax, dword [rbp - 0x34]
shr eax, 3
mov dword [rcx], eax
xor eax, eax
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.18003f550
add rsp, 0x118
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret