Function at 0x18001bb50
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x270
mov rax, qword [0x1800a98a0]
xor rax, rsp
mov qword [rsp + 0x260], rax
mov rbx, qword [0x1800aa260]
lea rax, [sym.USER32.dll_DwmGetDxRgn]
cmp qword [sym.USER32.dll_DwmGetDxRgn], rax
jne 0x18001c318
lea rcx, [rsp + 0x50]
call fcn.18001c390
test rbx, rbx
jne 0x18001bbac
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
mov rbx, rax
test rax, rax
je 0x18001c331
lea rdx, str.ImmWINNLSEnableIME
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmWINNLSGetEnableStatus
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSendIMEMessageExW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSendIMEMessageExA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIMPGetIMEW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIMPGetIMEA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIMPQueryIMEW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIMPQueryIMEA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIMPSetIMEW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIMPSetIMEA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmAssociateContext
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmEscapeA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmEscapeW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetCompositionStringA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetCompositionStringW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetCompositionWindow
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetContext
mov qword [0x1800a9568], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetDefaultIMEWnd
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmIsIME
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmReleaseContext
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmRegisterClient
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetCompositionFontW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetCompositionFontA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetCompositionFontW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetCompositionFontA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetCompositionWindow
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmNotifyIME
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmLockIMC
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmUnlockIMC
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmLoadIME
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetOpenStatus
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmFreeLayout
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmActivateLayout
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetCandidateWindow
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetCandidateWindow
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmConfigureIMEW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetConversionStatus
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetConversionStatus
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetStatusWindowPos
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetImeInfoEx
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmLockImeDpi
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmUnlockImeDpi
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetOpenStatus
mov qword [sym.USER32.dll_CheckBannedOneCoreTransformApi], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetActiveContext
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmTranslateMessage
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmLoadLayout
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmProcessKey
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmPutImeMenuItemsIntoMappedFile
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmGetProperty
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetCompositionStringA
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSetCompositionStringW
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmEnumInputContext
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.ImmSystemHandler
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmTIMActivate
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmRestoreToolbarWnd
mov qword [0x1800a9698], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmHideToolbarWnd
mov qword [sym.USER32.dll_CheckBannedOneCoreTransformApi], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmDispatchDefImeMessage
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmNotify
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmSetDefaultRemoteKeyboardLayout
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
lea rdx, str.CtfImmGetCompatibleKeyboardLayout
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x18001c318
mov qword [sym.USER32.dll_DwmGetDxRgn], rax
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.180033470
add rsp, 0x270
pop rbx
ret
lea rax, [rsp + 0x38]
mov dword [rsp + 0x30], 0x40000
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x30]
mov rcx, 0xfffffffffffffffa
call fcn.180027770
cmp dword [rsp + 0x30], 0x40001
je 0x18001c37f
mov r8d, 8
xor edx, edx
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadLibraryExW]
mov qword [0x1800aa260], rax
jmp 0x18001c318
xor r8d, r8d
jmp 0x18001c369