Function at 0x18003ba60
Capabilities:
Check for software breakpoints
Get graphical window text

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x918]
sub rsp, 0xa18
lea eax, [r9 + 0x12]
mov edi, r9d
mov dword [rbp - 0x78], eax
mov r14, rdx
cmp r9d, eax
jae 0x18003bd30
mov rsi, qword [rsp + 0x48]
mov r12, qword [rbp - 0x70]
mov r15, qword [rsp + 0x48]
mov r13, qword [rbp + 0x980]
mov r10, qword [rbp + 0x988]
lea eax, [rdi - 0x11e]
mov r8d, 2
lea rdx, [0x1800d6110]
xor r9d, r9d
lea r11, [0x180000000]
lea ebx, [r8 - 1]
cmp eax, 0x3e
ja case.0x18003baff.304
movzx eax, byte [r11 + rax + 0x3c608]
mov ecx, dword [r11 + rax*4 + 0x3c5bc]
add rcx, r11
jmp rcx
mov dword [rsp + 0x28], 0x10
lea rdx, [rbp + 0x20]
mov dword [rsp + 0x20], r9d
xor r8d, r8d
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageW]
mov r14, rax
test rax, rax
jne 0x18003bb34
xor ebx, ebx
mov qword [rsp + 0x60], rbx
jmp 0x18003bc50
mov r13, qword [rsp + 0x68]
mov edi, 0xd4
mov r12d, 1
mov eax, edi
sub eax, 0xd3
je 0x18003bb63
mov rbx, qword [rsp + 0x60]
cmp eax, r12d
jne 0x18003bc2c
mov r13, r14
jmp 0x18003bc2c
mov rcx, qword [0x1800d6218]
lea r8, [0x180005a00]
mov edx, 0xfffffffc
mov qword [rsp + 0x60], r12
mov qword [rbp - 0x68], r15
call qword [sym.imp.USER32.dll_SetWindowLongW]
movsxd rcx, eax
mov qword [0x1800d57d8], rcx
test eax, eax
je 0x18003bc25
mov ebx, 0x101
nop dword [rax]
cmp ebx, 0x101
je 0x18003bbb9
cmp ebx, 0xaaaa
jne 0x18003bc10
mov qword [0x1800d6210], r15
jmp 0x18003bc10
mov rcx, qword [0x1800d6218]
mov r9, r13
mov r8, r15
mov edx, 0x430
call qword [sym.imp.USER32.dll_SendNotifyMessageW]
mov rcx, qword [0x1800d6218]
lea rdx, [rbp - 0x28]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x1800d6218]
lea rdx, [rbp - 0x28]
mov r8d, r12d
call qword [sym.imp.USER32.dll_InvalidateRect]
xor ecx, ecx
lea rdx, [0x1800d6110]
nop
movzx eax, byte [rbp + rcx + 0x20]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x18003bc00
add ebx, 0xa9a9
cmp ebx, 0x15352
jbe 0x18003bba0
mov rbx, qword [rsp + 0x60]
jmp 0x18003bc2c
xor ebx, ebx
mov qword [rsp + 0x60], rbx
dec edi
cmp edi, 0xd2
ja 0x18003bb44
mov r12, qword [rbp - 0x70]
mov edi, dword [rbp + 0x978]
mov qword [rsp + 0x68], r13
mov r13, qword [rbp + 0x980]
mov rax, qword [r13]
lea rdx, [rsp + 0x70]
mov r8d, 0x92
mov qword [rbp - 0x48], rax
lea rcx, [rbp - 0x48]
mov dword [rsp + 0x70], ebx
call fcn.18004ff10
mov r14, qword [rbp + 0x968]
jmp case.0x18003baff.304
movzx eax, word [0x1800a1bc4]
mov rsi, qword [rsp + 0x48]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1800a1bc6]
mov byte [rsp + 0x46], al
jmp case.0x18003baff.304
mov dword [rbp + 0x780], r9d
jmp case.0x18003baff.304
mov rax, qword [r13]
lea rdx, [rbp + 0x220]
mov ecx, 0xfffffe58
mov qword [rbp + 0x772], rax
mov dword [rbp + 0x784], r14d
mov dword [rbp + 0x788], r9d
call qword [0x1800d5910]
jmp case.0x18003baff.304
cmp qword [0x1800d6218], 0
je 0x18003be39
mov edi, 0xcc
nop dword [rax]
cmp edi, 0xcc
je 0x18003bd9d
cmp edi, 0x155
jne 0x18003be1b
cmp qword [rbp - 0x50], 0
jne 0x18003be1b
mov ebx, 0xda
cmp ebx, 0xda
je 0x18003bd53
cmp ebx, 0x39e8
je 0x18003bd4a
cmp ebx, 0x72f6
jne 0x18003bd88
mov eax, dword [rbp + 0x978]
add rsp, 0xa18
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [0x1800d6210], r9
jmp 0x18003bd88
mov rax, qword [r13]
lea rdx, [rsp + 0x78]
mov r8d, 0x92
mov qword [rbp - 0x58], rax
lea rcx, [rbp - 0x58]
mov dword [rsp + 0x78], 1
call fcn.18004ff10
xor r9d, r9d
mov qword [0x1800d6218], r9
mov byte [0x1800d6110], r9b
add ebx, 0x390e
cmp ebx, 0xab2a
jbe 0x18003bd18
mov ebx, 1
jmp 0x18003be14
lea rax, [rbp + 0x20]
mov r8, rdx
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18003bdc3
inc rax
test ecx, ecx
jne 0x18003bdb0
test edx, edx
jne 0x18003bdd4
cmp r15, qword [0x1800d6210]
je 0x18003c253
mov r9, qword [rsp + 0x68]
mov edx, 0x431
mov r8, qword [rbp - 0x68]
mov rcx, qword [0x1800d6218]
call qword [sym.imp.USER32.dll_SendNotifyMessageW]
mov rcx, qword [0x1800d6218]
lea rdx, [rbp - 0x28]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x1800d6218]
lea rdx, [rbp - 0x28]
mov r8d, ebx
call qword [sym.imp.USER32.dll_InvalidateRect]
lea rdx, [0x1800d6110]
add edi, 0x89
mov r9d, 0
cmp edi, 0x1de
jb 0x18003bcf0
mov edi, dword [rbp + 0x978]
cmp qword [0x1800c56c8], 0
jne 0x18003c026
mov r13, qword [rbp - 0x38]
mov r14d, 0x4b
mov r12, qword [rbp - 0x40]
nop word [rax + rax]
mov eax, r14d
sub eax, 0x4b
je 0x18003bf8b
sub eax, 0x33
je 0x18003bf6d
sub eax, 0x33
je 0x18003be88
cmp eax, 0x33
je 0x18003bf4b
jmp 0x18003bfea
mov rcx, r13
call fcn.180073cf4
mov rcx, qword [0x1800c56b0]
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18003bf2e
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x18003bf0d
cmp eax, 0xf
jne 0x18003bf23
mov r8d, 0xff
lea rdx, [rbp + 0x120]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp + 0x120]
call fcn.1800737f4
mov rcx, rax
lea rdx, str.mdiclient
call fcn.180078e00
test eax, eax
je 0x18003bf44
mov edx, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
jmp 0x18003bf23
mov r8d, 0xff
lea rdx, [rbp + 0x810]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
add ebx, 0xf
cmp ebx, 0xb6
jb 0x18003beb7
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x18003bea5
jmp 0x18003bfea
mov qword [0x1800c56e8], rdi
mov rax, qword [0x1800c56e8]
mov edi, 0x15b
mov dword [rbp + 0x978], edi
mov qword [0x1800d6218], rax
lea r14d, [rdi - 0x77]
jmp 0x18003bff0
xor r9d, r9d
mov byte [r12], 0
mov r8, r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExW]
mov qword [0x1800c56b0], rax
jmp 0x18003bfea
mov qword [rsp + 0x30], r9
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], r9
xor r8d, r8d
mov qword [rsp + 0x20], r9
xor edx, edx
mov r9d, 0x22
call fcn.18000d5f0
movups xmm0, xmmword [rbp - 0x18]
mov eax, dword [rbp - 8]
lea rcx, [rbp]
xor r9d, r9d
mov dword [rbp + 0x10], eax
xor edx, edx
mov qword [rsp + 0x20], 0
movups xmmword [rbp], xmm0
lea r8d, [r9 + 0x6f]
call fcn.18000d1f0
mov edx, 0x5c
mov rcx, rax
mov r13, rax
call fcn.18006f960
mov r12, rax
mov edi, dword [rbp + 0x978]
add r14d, 0x33
mov r9d, 0
cmp r14d, 0x117
jb 0x18003be60
mov r14, qword [rbp + 0x968]
mov qword [rbp - 0x40], r12
mov r12, qword [rbp - 0x70]
mov qword [rbp - 0x38], r13
mov r13, qword [rbp + 0x980]
jmp case.0x18003baff.304
mov rax, qword [0x1800c56c8]
mov qword [0x1800d6218], rax
jmp case.0x18003baff.304
cmp qword [0x1800d6218], 0
jne 0x18003c0b7
cmp qword [rbp - 0x50], 0
jne 0x18003c0b7
mov ebx, 0x82
nop
cmp ebx, 0x82
je 0x18003c066
cmp ebx, 0x334a
je 0x18003bd30
jmp 0x18003c0a3
mov rax, qword [r13]
lea rdx, [rbp + 0x978]
mov r8d, 0x92
mov qword [rbp - 0x58], rax
lea rcx, [rbp - 0x58]
mov dword [rbp + 0x978], r9d
call fcn.18004ff10
xor r9d, r9d
mov qword [0x1800d6218], r9
mov byte [0x1800d6110], r9b
mov qword [0x1800d6210], r9
add ebx, 0x32c8
cmp ebx, 0x6590
jbe 0x18003c050
mov r8d, 2
mov rax, qword [r13]
lea rcx, [rbp - 0x30]
xor edx, edx
mov word [rsp + 0x50], r8w
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x50]
mov qword [rbp - 0x30], rax
lea r8d, [rdx + 0x28]
call fcn.180068730
movsxd r15, eax
jmp case.0x18003baff.304
cmp qword [r14 + 0x20], 0
je case.0x18003baff.304
mov r9d, 0x122
mov dword [rbp + 0x978], 9
lea r8, str.__title_
mov rcx, r13
lea rdx, [rbp + 0x978]
call fcn.180060dd0
lea r9, [0x18005fc70]
mov r8d, 0xe1
lea rdx, [r14 + 0x20]
mov rcx, r13
call fcn.18005fa90
jmp case.0x18003baff.304
cmp qword [r13], 0
je 0x18003c5a9
mov dword [rbp + 0x77c], 4
jmp case.0x18003baff.304
mov rax, qword [rsp + 0x48]
mov r12, qword [rsp + 0x48]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x70], r12
mov dword [rsp + 0x40], r9d
test r13, r13
je 0x18003c174
test r10, r10
jne case.0x18003baff.304
mov eax, 0xffffffff
jmp 0x18003bd36
cmp dword [r14], 0
jne 0x18003c27e
mov rax, qword [r13]
lea r9, [rsp + 0x48]
mov r8d, 0x10c
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x58]
mov word [rsp + 0x58], bx
lea rcx, [rbp + 0x20]
call fcn.180059270
mov qword [rbp - 0x50], rax
mov byte [rbp + rax + 0x20], 0
jmp case.0x18003baff.304
mov qword [rsp + 0x68], r9
mov qword [0x1800d6218], r9
jmp case.0x18003baff.304
mov qword [rbp - 0x68], r9
jmp case.0x18003baff.304
mov dword [rbp - 0x80], r8d
lea rdx, [rbp - 0x80]
lea r8, [0x1800a14ec]
mov r9d, 0x122
mov rcx, r13
call fcn.180060dd0
dec dword [r13 + 0x14]
jmp case.0x18003baff.304
mov qword [rsp + 0x60], r9
mov r15, r9
mov qword [0x1800d6210], r9
jmp case.0x18003baff.304
mov rax, r15
test r15, r15
je 0x18003c21b
sub rax, 2
je case.0x18003baff.301
cmp rax, 1
je case.0x18003baff.301
jmp case.0x18003baff.304
mov edx, dword [0x1800c5178]
mov r15, rbx
test edx, edx
je case.0x18003baff.301
xor r9d, r9d
xor r8d, r8d
lea ecx, [r9 + 0x25]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov edi, 0x15a
inc edi
mov dword [rbp + 0x978], edi
cmp edi, dword [rbp - 0x78]
jae 0x18003bd30
jmp 0x18003baba
mov rax, qword [r13]
lea rdx, [rbp + 0x978]
mov r8d, 0x92
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
mov dword [rbp + 0x978], ebx
call fcn.18004ff10
jmp 0x18003bd30
mov rcx, qword [0x1800d6218]
test rcx, rcx
je 0x18003bd30
mov r9, qword [rsp + 0x68]
mov edx, 0x431
mov r8, qword [rbp - 0x68]
call qword [sym.imp.USER32.dll_SendNotifyMessageW]
jmp 0x18003bd30
cmp dword [r14], 1
mov r13d, ebx
jle 0x18003c5a9
mov r11, qword [rbp + 0x970]
mov r15, rbx
mov ebx, dword [rbp + 0x978]
mov eax, dword [rsp + 0x40]
test eax, eax
jne 0x18003c56d
mov rax, qword [r11 + r15*8]
movzx ecx, byte [rax]
cmp cl, 0x2d
jne 0x18003c56d
cmp byte [rax + 1], cl
jne 0x18003c2f9
cmp byte [rax + 2], 0
jne 0x18003c2f9
mov eax, 1
mov dword [rsp + 0x40], eax
jmp 0x18003c597
cmp cl, 0x2d
jne 0x18003c56d
lea rcx, [rax + 1]
movzx eax, byte [rax + 1]
test al, al
je 0x18003c56d
cmp al, 0x2d
jne 0x18003c495
mov r14d, 0xf9
mov eax, r14d
sub eax, 0xf9
je 0x18003c426
sub eax, 0x71
je 0x18003c3db
sub eax, 0x71
je 0x18003c41e
cmp eax, 0x71
jne 0x18003c46a
mov ecx, dword [rsi + 0xc]
test ecx, ecx
jne 0x18003c36e
mov r8, qword [rbp + 0x960]
lea ecx, [rax - 0x32]
mov rdx, qword [r11 + r15*8]
call r10
test eax, eax
jne 0x18003bd36
jmp 0x18003c46a
mov rdi, qword [rbp - 0x60]
test rdi, rdi
jne 0x18003c39b
cmp dword [rsi + 0x10], 1
jne 0x18003c3c1
mov r8, qword [rbp + 0x960]
lea ecx, [rdi + 0x3a]
mov rdx, qword [r11 + r15*8]
call r10
test eax, eax
jne 0x18003bd36
jmp 0x18003c46a
cmp dword [rsi + 0x10], 0
jne 0x18003c3c1
mov r8, qword [rbp + 0x960]
mov ecx, 0x3d
mov rdx, qword [r11 + r15*8]
call r10
test eax, eax
jne 0x18003bd36
jmp 0x18003c46a
mov r8, qword [rbp + 0x960]
mov rdx, rdi
call r10
test eax, eax
jne 0x18003bd36
jmp 0x18003c46a
mov rax, qword [rbp + 0x980]
mov rsi, rax
cmp dword [rax + 0xc], 0
je 0x18003c46a
movsxd rdi, ebx
mov rdx, qword [rsi]
test rdx, rdx
je 0x18003c412
mov r8, rdi
mov rcx, r12
call fcn.180073a60
test eax, eax
jne 0x18003c412
mov rax, qword [rsi]
cmp byte [rdi + rax], 0
je 0x18003c41e
add rsi, 0x18
cmp dword [rsi + 0xc], 0
jne 0x18003c3f2
jmp 0x18003c46a
mov r14d, 0x1db
jmp 0x18003c46a
mov r12, qword [r11 + r15*8]
mov edx, 0x3d
add r12, 2
mov rcx, r12
call fcn.18006f8e0
mov qword [rbp - 0x60], rax
mov rdi, rax
test rax, rax
je 0x18003c455
mov ebx, edi
sub ebx, r12d
inc rdi
mov qword [rbp - 0x60], rdi
jmp 0x18003c46a
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [r12 + rbx], 0
jne 0x18003c460
mov r10, qword [rbp + 0x988]
add r14d, 0x71
mov r11, qword [rbp + 0x970]
cmp r14d, 0x2bd
jb 0x18003c320
mov r14, qword [rbp + 0x968]
jmp 0x18003c58c
mov r12, rcx
test al, al
je 0x18003c593
mov rcx, qword [rbp + 0x980]
mov rsi, rcx
cmp dword [rcx + 0xc], 0
je 0x18003c4bf
cmp byte [rsi + 8], al
je 0x18003c4bf
add rsi, 0x18
cmp dword [rsi + 0xc], 0
jne 0x18003c4b0
mov ecx, dword [rsi + 0xc]
test ecx, ecx
jne 0x18003c4dd
mov r8, qword [rbp + 0x960]
lea rdx, [rsp + 0x44]
mov byte [rsp + 0x45], al
mov ecx, 0x3f
jmp 0x18003c522
mov eax, dword [rsi + 0x10]
test eax, eax
jne 0x18003c4ed
mov r8, qword [rbp + 0x960]
jmp 0x18003c520
cmp byte [r12 + 1], 0
jne 0x18003c566
lea r8d, [r13 + 1]
cmp r8d, dword [r14]
jge 0x18003c514
mov rdx, qword [r11 + r15*8 + 8]
cmp byte [rdx], 0x2d
jne 0x18003c549
cmp byte [rdx + 1], 0x2d
jne 0x18003c549
cmp byte [rdx + 2], 0
jne 0x18003c549
mov r8, qword [rbp + 0x960]
cmp eax, 2
jne 0x18003c551
xor edx, edx
call r10
test eax, eax
jne 0x18003bd36
movzx eax, byte [r12 + 1]
inc r12
mov r10, qword [rbp + 0x988]
mov r11, qword [rbp + 0x970]
jmp 0x18003c498
mov r13d, r8d
inc r15
jmp 0x18003c573
movzx eax, byte [r12]
lea rdx, [rsp + 0x44]
mov byte [rsp + 0x45], al
mov ecx, 0x3a
jmp 0x18003c57a
lea rdx, [r12 + 1]
jmp 0x18003c573
mov rdx, qword [r11 + r15*8]
xor ecx, ecx
mov r8, qword [rbp + 0x960]
call r10
test eax, eax
jne 0x18003bd36
mov r10, qword [rbp + 0x988]
mov r11, qword [rbp + 0x970]
mov eax, dword [rsp + 0x40]
inc r13d
inc r15
cmp r13d, dword [r14]
jl 0x18003c2c8
xor r9d, r9d
mov eax, r9d
jmp 0x18003bd36
mov eax, dword [rbp + 0x788]
jmp 0x18003bd36