Function at 0x18004dc60
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x260
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x180085028]
xor rax, rsp
mov qword [rbp + 0x110], rax
movzx r15d, dl
mov byte [rsp + 0x30], dl
mov r14, rcx
mov rax, qword [0x180086010]
test rax, rax
je 0x18004dcc6
inc dword [rax + 0x3b0]
mov ecx, 0x3f48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r13d, r13d
test rax, rax
je 0x18004dce8
xor edx, edx
mov rcx, rax
call fcn.1800150e0
mov rcx, rax
jmp 0x18004dceb
mov rcx, r13
mov rax, qword [0x180086010]
test rax, rax
cmove rax, rcx
mov qword [0x180086010], rax
call fcn.18001baa0
mov rbx, qword [0x180086010]
mov dword [rbx + 0x1560], 0x40c00000
mov qword [rbx + 0x1564], 0x40c00000
mov dword [rbx + 0x1594], 0x40c00000
mov qword [rbx + 0x1598], 0x40800000
mov dword [rbx + 0x15a4], 0x40c00000
mov dword [rbx + 0x15a8], 0x40800000
mov dword [rbx + 0x1578], 0x3f000000
mov dword [rbx + 0x157c], 0x3f000000
mov qword [rbx + 0x15cc], 0x41400000
mov dword [rbx + 0x156c], 0x3f000000
mov dword [rbx + 0x1588], 0x3f000000
mov dword [rbx + 0x1590], 0x3f000000
mov dword [rbx + 0x15a0], r13d
mov dword [rbx + 0x1584], r13d
mov dword [rbx + 0x15d8], r13d
mov dword [rbx + 0x15e0], r13d
mov dword [rbx + 0x158c], r13d
movaps xmm0, xmmword [0x18007acb0]
movups xmmword [rbx + 0x1620], xmm0
movaps xmm1, xmmword [0x18007ac00]
movups xmmword [rbx + 0x1630], xmm1
movaps xmm0, xmmword [0x18007ab00]
movups xmmword [rbx + 0x1640], xmm0
xorps xmm1, xmm1
movups xmmword [rbx + 0x1650], xmm1
movaps xmm0, xmmword [0x18007aa80]
movups xmmword [rbx + 0x1660], xmm0
movaps xmm1, xmmword [0x18007ab50]
movups xmmword [rbx + 0x1670], xmm1
xorps xmm0, xmm0
movups xmmword [rbx + 0x1680], xmm0
movaps xmm1, xmmword [0x18007ab10]
movups xmmword [rbx + 0x1690], xmm1
movaps xmm0, xmmword [0x18007ab50]
movups xmmword [rbx + 0x16a0], xmm0
movaps xmm1, xmmword [0x18007ab80]
movups xmmword [rbx + 0x16b0], xmm1
movaps xmm0, xmmword [0x18007aba0]
movups xmmword [rbx + 0x16c0], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x16d0], xmm0
movups xmmword [rbx + 0x16e0], xmm0
movaps xmm1, xmmword [0x18007ab10]
movups xmmword [rbx + 0x16f0], xmm1
movaps xmm0, xmmword [0x18007aa00]
movups xmmword [rbx + 0x1700], xmm0
movaps xmm1, xmmword [0x18007ab70]
movups xmmword [rbx + 0x1710], xmm1
movaps xmm0, xmmword [0x18007ac10]
movups xmmword [rbx + 0x1720], xmm0
movaps xmm1, xmmword [0x18007ac70]
movups xmmword [rbx + 0x1730], xmm1
movaps xmm0, xmmword [0x18007ab80]
movups xmmword [rbx + 0x1740], xmm0
movaps xmm1, xmmword [0x18007ab20]
movups xmmword [rbx + 0x1750], xmm1
movaps xmm0, xmm1
movups xmmword [rbx + 0x1760], xmm1
movaps xmm1, xmmword [0x18007ab50]
movups xmmword [rbx + 0x1770], xmm1
movups xmmword [rbx + 0x1780], xmm0
movaps xmm1, xmmword [0x18007ab80]
movups xmmword [rbx + 0x1790], xmm1
movaps xmm0, xmmword [0x18007ab50]
movups xmmword [rbx + 0x17a0], xmm0
movaps xmm1, xmmword [0x18007ab20]
movups xmmword [rbx + 0x17b0], xmm1
movaps xmm0, xmmword [0x18007ab40]
movups xmmword [rbx + 0x17c0], xmm0
movaps xmm1, xmmword [0x18007ab70]
movups xmmword [rbx + 0x17d0], xmm1
movaps xmm0, xmmword [0x18007ab20]
movups xmmword [rbx + 0x17e0], xmm0
movaps xmm1, xmmword [0x18007ab80]
movups xmmword [rbx + 0x17f0], xmm1
movaps xmm0, xmmword [0x18007ab70]
movups xmmword [rbx + 0x1800], xmm0
movaps xmm1, xmmword [0x18007ab20]
movups xmmword [rbx + 0x1810], xmm1
movaps xmm0, xmmword [0x18007ab80]
movups xmmword [rbx + 0x1820], xmm0
movaps xmm1, xmmword [0x18007ab50]
movups xmmword [rbx + 0x1830], xmm1
movaps xmm0, xmmword [0x18007ab20]
movups xmmword [rbx + 0x1840], xmm0
movaps xmm1, xmmword [0x18007ab80]
movups xmmword [rbx + 0x1850], xmm1
movaps xmm0, xmmword [0x18007aaa0]
movups xmmword [rbx + 0x1860], xmm0
movaps xmm1, xmmword [0x18007abf0]
movups xmmword [rbx + 0x1870], xmm1
movaps xmm0, xmmword [0x18007ac50]
movups xmmword [rbx + 0x1880], xmm0
movaps xmm1, xmmword [0x18007abd0]
movups xmmword [rbx + 0x1890], xmm1
movaps xmm0, xmmword [0x18007aae0]
movups xmmword [rbx + 0x18a0], xmm0
movaps xmm1, xmmword [0x18007aad0]
movups xmmword [rbx + 0x18b0], xmm1
movaps xmm0, xmmword [0x18007a9b0]
movups xmmword [rbx + 0x1910], xmm0
movaps xmm1, xmmword [0x18007aa60]
movups xmmword [rbx + 0x1920], xmm1
movaps xmm0, xmmword [0x18007aca0]
movups xmmword [rbx + 0x1930], xmm0
movaps xmm1, xmmword [0x18007aa30]
movups xmmword [rbx + 0x1940], xmm1
movaps xmm0, xmmword [0x18007a970]
movups xmmword [rbx + 0x1950], xmm0
movaps xmm1, xmmword [0x18007a9a0]
movups xmmword [rbx + 0x1960], xmm1
mov qword [rbx + 0x20], r13
mov qword [rbx + 0x28], r13
or dword [rbx + 8], 0x20
lea r9, [rbp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x180055740]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x18004e57b
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.18000ce50
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp - 0x80], xmm6
movups xmmword [rbp - 0x70], xmm6
movups xmmword [rbp - 0x40], xmm6
movups xmmword [rbp - 0x30], xmm6
mov qword [rbp], rax
mov byte [rbp - 0x74], 1
mov dword [rbp - 0x68], 3
mov dword [rbp - 0x64], 1
mov dword [rbp - 0x3c], 0x7f7fffff
mov dword [rbp - 0x30], 0x3f800000
mov eax, 0xffff
mov word [rbp - 0x2c], ax
mov dword [rbp - 0x6c], 0x41700000
mov rax, qword [rbx + 0xa8]
mov qword [rbp + 0x38], rax
call fcn.180051dac
lea rcx, str.tahoma.ttf
mov qword [rbp + 0x40], rcx
mov ecx, 0xa
mov qword [rbp + 0x48], rcx
lea r8, [rbp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.1800034f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea r15, [rbp + 0x50]
mov rsi, qword [rbp + 0x50]
mov r12, qword [rbp + 0x68]
cmp r12, 8
cmovae r15, rsi
movabs rbx, 0x7ffffffffffffffe
mov rdi, qword [rbp + 0x60]
cmp rdi, rbx
ja 0x18004e9b3
cmp rdi, 8
jae 0x18004e13e
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 7
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x38], xmm0
jmp 0x18004e1ed
mov rax, rdi
or rax, 7
cmp rax, rbx
jbe 0x18004e15a
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x18004e18d
mov rbx, rax
cmp rax, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x18004e9ad
add rcx, rcx
cmp rcx, 0x1000
jb 0x18004e1bc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004e9ad
mov rcx, rax
call fcn.180052628
mov rcx, rax
test rax, rax
je 0x18004e519
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18004e1cb
test rcx, rcx
je 0x18004e1c8
call fcn.180052628
jmp 0x18004e1cb
mov rax, r13
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rbx
lea r8, [rdi*2 + 2]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x38]
call fcn.180003720
lea r15, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae r15, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x48]
call fcn.180051dac
mov r13d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
movdqa xmm1, xmmword [0x18007a890]
movdqu xmmword [rsp + 0x68], xmm1
mov byte [rsp + 0x58], 0
test rdi, rdi
je 0x18004e2ac
cmp rdi, 0x7fffffff
ja 0x18004e9b9
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, edi
mov rdx, r15
mov ecx, eax
call fcn.180051e1c
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x18004e9bf
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rsp + 0x58]
call fcn.1800071d0
lea r9, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae r9, qword [rsp + 0x58]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, r15
mov ecx, r13d
call fcn.180051e1c
shr rax, 0x20
test eax, eax
jne 0x18004e9c7
lea rbx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rbx, qword [rsp + 0x58]
xor r13d, r13d
mov qword [rbp + 0x40], r13
lea r8, [rbp + 0x40]
mov rcx, rbx
call fcn.180016590
mov rdi, rax
test rax, rax
je 0x18004e440
movaps xmm2, xmmword [rbp - 0x80]
movaps xmmword [rbp + 0x80], xmm2
movaps xmm3, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x90], xmm3
movaps xmmword [rbp + 0xa0], xmm6
xorps xmm4, xmm4
movaps xmmword [rbp + 0xb0], xmm4
movaps xmm5, xmmword [rbp - 0x40]
movaps xmmword [rbp + 0xc0], xmm5
movaps xmm1, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0xd0], xmm1
xorps xmm7, xmm7
movaps xmmword [rbp + 0xe0], xmm7
xorps xmm8, xmm8
movaps xmmword [rbp + 0xf0], xmm8
movsd xmm9, qword [rbp]
movsd qword [rbp + 0x100], xmm9
movdqa xmm0, xmm1
psrldq xmm0, 6
movd eax, xmm0
test al, al
jne 0x18004e3f0
mov r9, 0xffffffffffffffff
nop word [rax + rax]
inc r9
cmp byte [rbx + r9], r13b
jne 0x18004e360
add r9, rbx
cmp r9, rbx
jbe 0x18004e388
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x18004e388
cmp al, 0x5c
je 0x18004e388
mov r9, rcx
cmp rcx, rbx
ja 0x18004e371
movsd xmm0, qword [0x18007a778]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, 0x28
lea rcx, [rbp + 0xd6]
call fcn.180016330
movsd xmm9, qword [rbp + 0x100]
movaps xmm8, xmmword [rbp + 0xf0]
movaps xmm7, xmmword [rbp + 0xe0]
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmm5, xmmword [rbp + 0xc0]
movaps xmm4, xmmword [rbp + 0xb0]
movaps xmm6, xmmword [rbp + 0xa0]
movaps xmm3, xmmword [rbp + 0x90]
movaps xmm2, xmmword [rbp + 0x80]
movaps xmmword [rbp - 0x80], xmm2
movaps xmmword [rbp - 0x70], xmm3
movaps xmmword [rbp - 0x60], xmm6
movaps xmmword [rbp - 0x50], xmm4
movaps xmmword [rbp - 0x40], xmm5
movaps xmmword [rbp - 0x30], xmm1
movaps xmmword [rbp - 0x20], xmm7
movaps xmmword [rbp - 0x10], xmm8
movsd qword [rbp], xmm9
mov qword [rbp - 0x80], rdi
mov eax, dword [rbp + 0x40]
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x6c], 0x41700000
lea rax, [0x180078760]
mov qword [rbp - 0x48], rax
lea rdx, [rbp - 0x80]
mov rcx, qword [rbp + 0x38]
call fcn.180034ff0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x18004e47d
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e478
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004e519
call fcn.1800529ec
movdqa xmm0, xmmword [0x18007a890]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], r13b
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x18004e4ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e4c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004e519
call fcn.1800529ec
movdqa xmm0, xmmword [0x18007a870]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r13w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x18004e525
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e520
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e520
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800529ec
movdqa xmm0, xmmword [0x18007a870]
movdqu xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], r13w
cmp r12, 8
jb 0x18004e575
lea rdx, [r12*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18004e56d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e56d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1800529ec
movzx r15d, byte [rsp + 0x30]
mov rax, qword [0x180085060]
mov rsi, qword [rax + 8]
mov rbx, qword [0x180086010]
lea rcx, [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x18004e75e
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x18004e75e
mov rax, qword [0x180086010]
test rax, rax
je 0x18004e5c3
inc dword [rax + 0x3b0]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x18004e5f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x18004e5f3
mov rdi, r13
mov qword [rbx + 0xe8], rdi
lea rax, str.imgui_impl_win32
mov qword [rbx + 0xd8], rax
or dword [rbx + 0xc], 6
mov qword [rdi], rsi
mov byte [rdi + 0x2d], 1
mov rax, qword [rbp + 0x38]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x40]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
mov qword [rbx + 0x120], rsi
mov dword [rbx + 0x3c], 9
mov dword [rbx + 0x40], 0x25
mov dword [rbx + 0x44], 0x27
mov dword [rbx + 0x48], 0x26
mov dword [rbx + 0x4c], 0x28
mov dword [rbx + 0x50], 0x21
mov dword [rbx + 0x54], 0x22
mov dword [rbx + 0x58], 0x24
mov dword [rbx + 0x5c], 0x23
mov dword [rbx + 0x60], 0x2d
mov dword [rbx + 0x64], 0x2e
mov dword [rbx + 0x68], 8
mov dword [rbx + 0x6c], 0x20
mov dword [rbx + 0x70], 0xd
mov dword [rbx + 0x74], 0x1b
mov dword [rbx + 0x78], 0xd
mov dword [rbx + 0x7c], 0x41
mov dword [rbx + 0x80], 0x43
mov dword [rbx + 0x84], 0x56
mov dword [rbx + 0x88], 0x58
mov dword [rbx + 0x8c], 0x59
mov dword [rbx + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x50], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x58], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x60], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x68], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x70], rax
mov rbx, r13
mov rcx, qword [rbp + rbx*8 + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x18004e732
inc rbx
cmp rbx, 5
jl 0x18004e714
jmp 0x18004e75e
mov qword [rdi + 0x30], rsi
lea rdx, str.XInputGetCapabilities
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x38], rax
lea rdx, str.XInputGetState
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
test r15b, r15b
je 0x18004e8ba
mov qword [0x180086050], r14
mov rax, qword [r14]
lea r8, [0x180086028]
lea rdx, [0x180079bb0]
mov rcx, r14
call qword [rax + 0x38]
mov rcx, qword [0x180086028]
mov rax, qword [rcx]
lea rdx, [0x180086048]
call qword [rax + 0x140]
call fcn.18004dbe0
mov r14, qword [0x180086048]
mov rsi, qword [0x180086028]
mov rdi, qword [0x180086010]
test rdi, rdi
je 0x18004e7c1
inc dword [rdi + 0x3b0]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x18004e802
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x18004e805
mov rbx, r13
mov qword [rdi + 0xf0], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0xe0], rax
or dword [rdi + 0xc], 8
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
mov rax, qword [rsi]
lea r8, [rbp + 0x40]
lea rdx, [0x1800798a8]
mov rcx, rsi
call qword [rax]
test eax, eax
jne 0x18004e882
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
lea r8, [rbp + 0x30]
lea rdx, [0x1800798b8]
call qword [rax + 0x30]
test eax, eax
jne 0x18004e882
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx]
lea r8, [rbp + 0x38]
lea rdx, [0x1800798c8]
call qword [rax + 0x30]
test eax, eax
jne 0x18004e882
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x38]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x18004e891
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x18004e8a0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 8]
call fcn.18003a810
jmp 0x18004e923
mov rbx, qword [0x180086010]
test rbx, rbx
je 0x18004e8cc
inc dword [rbx + 0x3b0]
mov ecx, 0x28
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x18004e8fb
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x18004e8fe
mov rax, r13
mov qword [rbx + 0xf0], rax
lea rcx, [0x1800798d8]
mov qword [rbx + 0xe0], rcx
or dword [rbx + 0xc], 8
mov qword [rax], r14
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
lea r8, [0x18004db50]
mov edx, 0xfffffffc
mov rcx, qword [0x180085060]
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180086108], rax
lea r9, [0x18004db50]
lea r8, [0x180086108]
lea rdx, str.WndProc_hooked__n_tOriginal:_0x_X_n_tNew:_0x_X_n
mov rcx, qword [0x180085088]
call fcn.18004c790
nop
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1800523a0
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800011b0
int3
call fcn.180001250
int3
call fcn.180001680
int3
mov ecx, eax
call fcn.1800034b0
int3
mov ecx, eax
call fcn.1800034b0
int3