Function at 0x18000aad0
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5e8]
sub rsp, 0x6c0
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x180123010]
xor rax, rsp
mov qword [rbp + 0x5b0], rax
mov r13, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov rbx, qword [rcx + 0x140]
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000b7f8
mov r8d, 0x208
lea rdx, [rbp + 0x1a0]
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rax, [rbp + 0x1a0]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x18000ab76
test r8, r8
je 0x18000b7f8
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x58]
call fcn.180007b60
nop
lea rdx, [rsp + 0x58]
lea rcx, [r13 + 0x1e8]
call fcn.1800076d0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18000ac10
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ac0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ac0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov rbx, qword [r13 + 0x140]
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx + 0x198]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000b7f8
mov r8d, 0x208
lea rdx, [rbp + 0x1a0]
mov rcx, qword [rbx + 0x198]
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rax, [rbp + 0x1a0]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18000ac80
test r8, r8
je 0x18000b7f8
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x58]
call fcn.180007b60
nop
lea rdx, [rsp + 0x58]
lea rcx, [r13 + 0x208]
call fcn.1800076d0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18000ad1b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ad16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ad16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov rcx, qword [r13 + 0x140]
mov rax, qword [rcx]
call qword [rax + 0x118]
mov dword [r13 + 0x228], eax
mov rcx, qword [r13 + 0x140]
mov rax, qword [rcx]
lea rdx, [rbp - 0x28]
call qword [rax + VarUI4FromDisp]
nop
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
lea rcx, [r13 + 0x1e8]
cmp qword [r13 + 0x200], 8
jb 0x18000ad81
mov rcx, qword [r13 + 0x1e8]
mov r9, qword [rbp - 0x18]
mov r10, qword [r13 + 0x1f8]
mov r8, r10
cmp r9, r10
cmovb r8, r9
test r8, r8
je 0x18000adb6
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x18000ae16
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x18000ada0
cmp r10, r9
jb 0x18000ae16
ja 0x18000ae16
mov rbx, qword [r13 + 0x140]
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.USER32.dll_SetFocus]
mov edx, 0x3e9
mov rcx, rbx
call fcn.18002add0
test rax, rax
je 0x18000adef
mov r8, qword [rax]
mov dl, 1
mov rcx, rax
call qword [r8 + 0x30]
mov edx, 0x3eb
mov rcx, rbx
call fcn.18002add0
test rax, rax
je 0x18000b7a4
mov r8, qword [rax]
xor edx, edx
mov rcx, rax
call qword [r8 + 0x30]
jmp 0x18000b7a4
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov r8d, 0x19
lea rdx, [0x1800dcfa0]
lea rcx, [rsp + 0x58]
call fcn.180007b60
nop
lea rax, [rsp + 0x58]
mov r10, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x70]
cmp rsi, 8
cmovae rax, r10
lea rcx, [r13 + 0x208]
cmp qword [r13 + 0x220], 8
jb 0x18000ae7b
mov rcx, qword [r13 + 0x208]
mov r11, qword [rsp + 0x68]
mov rdi, qword [r13 + 0x218]
mov rdx, rdi
cmp r11, rdi
cmovb rdx, r11
test rdx, rdx
je 0x18000aebc
nop word [rax + rax]
movzx r8d, word [rcx]
movzx r9d, word [rax]
cmp r8w, r9w
jne 0x18000aec6
add rcx, 2
add rax, 2
sub rdx, 1
jne 0x18000aea0
cmp rdi, r11
jae 0x18000aed5
mov ebx, r14d
jmp 0x18000aedb
mov ebx, 1
cmp r8w, r9w
cmovb ebx, r14d
jmp 0x18000aedb
mov ebx, r12d
seta bl
cmp rsi, 8
jb 0x18000af19
lea rdx, [rsi*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x18000af11
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000af11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r10
call fcn.1800c8c14
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
test ebx, ebx
jne 0x18000af8a
mov rbx, qword [r13 + 0x140]
mov rcx, qword [rbx + 0x198]
call qword [sym.imp.USER32.dll_SetFocus]
mov edx, 0x3ea
mov rcx, rbx
call fcn.18002add0
test rax, rax
je 0x18000af63
mov r8, qword [rax]
mov dl, 1
mov rcx, rax
call qword [r8 + 0x30]
mov edx, 0x3ec
mov rcx, rbx
call fcn.18002add0
test rax, rax
je 0x18000b7a4
mov r8, qword [rax]
xor edx, edx
mov rcx, rax
call qword [r8 + 0x30]
jmp 0x18000b7a4
mov edx, 0x3f3
mov rcx, qword [r13 + 0x140]
call fcn.18002add0
mov rcx, rax
mov dword [rsp + 0x20], r12d
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
call sub.VCRUNTIME140.dll___RTDynamicCast
test rax, rax
je 0x18000afd4
mov rax, qword [rax + 0x50]
test rax, rax
je 0x18000afca
mov r14d, dword [rax + 0x40]
cmp r14d, 0x3f5
sete al
mov byte [r13 + 0x1e0], al
lea rsi, [r13 + 0x1a0]
mov rdi, qword [rsi + 0x10]
cmp rdi, 1
jb 0x18000b05e
mov rbx, r12
test rdi, rdi
je 0x18000b05e
cmp qword [rsi + 0x10], rbx
jbe 0x18000b834
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000b00b
mov rax, qword [rsi]
movzx edx, word [rax + rbx*2]
lea rcx, [0x1800dcfd4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000b029
inc rbx
cmp rbx, rdi
jb 0x18000aff4
test rbx, rbx
je 0x18000b05e
mov r8, qword [rsi + 0x10]
cmp r8, rbx
cmovb rbx, r8
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000b046
mov rcx, qword [rsi]
sub r8, rbx
mov qword [rsi + 0x10], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.1800ca0e8
mov r15, qword [rsi + 0x10]
cmp r15, 1
jb 0x18000b10c
mov rbx, r15
test r15, r15
je 0x18000b10c
lea r14, [r15*2 - 2]
lea rdi, [rbx - 1]
cmp qword [rsi + 0x10], rdi
jbe 0x18000b840
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000b09b
mov rax, qword [rsi]
movzx edx, word [r14 + rax]
lea rcx, [0x1800dcfd4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000b0be
mov rbx, rdi
sub r14, 2
test rdi, rdi
jne 0x18000b080
cmp rbx, r15
jae 0x18000b10c
mov r8, qword [rsi + 0x10]
cmp r8, rbx
jb 0x18000b82e
sub r15, rbx
mov rax, r8
sub rax, rbx
cmp rax, r15
cmovb r15, rax
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000b0ed
mov rax, qword [rsi]
lea rcx, [rax + rbx*2]
sub r8, r15
mov qword [rsi + 0x10], r8
sub r8, rbx
lea r8, [r8*2 + 2]
lea rdx, [rcx + r15*2]
call fcn.1800ca0e8
lea rdi, [r13 + 0x180]
mov r14, qword [rdi + 0x10]
cmp r14, 1
jb 0x18000b18f
mov rbx, r12
test r14, r14
je 0x18000b18f
cmp qword [rdi + 0x10], rbx
jbe 0x18000b846
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000b13c
mov rax, qword [rdi]
movzx edx, word [rax + rbx*2]
lea rcx, [0x1800dcfd4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000b15a
inc rbx
cmp rbx, r14
jb 0x18000b125
test rbx, rbx
je 0x18000b18f
mov r8, qword [rdi + 0x10]
cmp r8, rbx
cmovb rbx, r8
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000b177
mov rcx, qword [rdi]
sub r8, rbx
mov qword [rdi + 0x10], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.1800ca0e8
mov r12, qword [rdi + 0x10]
cmp r12, 1
jb 0x18000b23d
mov rbx, r12
test r12, r12
je 0x18000b23d
lea r15, [r12*2 - 2]
lea r14, [rbx - 1]
cmp qword [rdi + 0x10], r14
jbe 0x18000b828
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000b1cc
mov rax, qword [rdi]
movzx edx, word [r15 + rax]
lea rcx, [0x1800dcfd4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000b1ef
mov rbx, r14
sub r15, 2
test r14, r14
jne 0x18000b1b1
cmp rbx, r12
jae 0x18000b23d
mov r8, qword [rdi + 0x10]
cmp r8, rbx
jb 0x18000b83a
sub r12, rbx
mov rax, r8
sub rax, rbx
cmp rax, r12
cmovb r12, rax
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000b21e
mov rax, qword [rdi]
lea rcx, [rax + rbx*2]
sub r8, r12
mov qword [rdi + 0x10], r8
sub r8, rbx
lea r8, [r8*2 + 2]
lea rdx, [rcx + r12*2]
call fcn.1800ca0e8
cmp byte [r13 + 0x1e0], 0
je 0x18000b253
mov rcx, rsi
call fcn.18001a2b0
test al, al
jne 0x18000b265
xor r8d, r8d
lea rdx, [0x1800dc488]
mov rcx, rsi
call fcn.180007b60
xor r12d, r12d
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], r12b
lea rdx, [rbp - 0x68]
mov rcx, r13
call fcn.18000b880
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov word [rbp], r12w
lea r8d, [r12 + 0x11]
lea rdx, [0x1800dcfd8]
lea rcx, [rbp]
call fcn.180007b60
nop
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
lea r8d, [r12 + 0x12]
lea rdx, str._api_advise_report
lea rcx, [rbp + 0x20]
call fcn.180007b60
nop
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], r12b
cmp qword [r13 + 0x230], r12
jne 0x18000b389
lea ecx, [r12 + 0x40]
call fcn.1800c8ec0
mov rbx, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov dword [rax + 0x28], r12d
lea ecx, [r12 + 0x28]
call fcn.1800c8ec0
mov qword [rbx + 0x30], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov byte [rbx + 0x38], r12b
mov dword [rbx + 0x3c], 0xa
mov r14, qword [r13 + 0x230]
mov qword [r13 + 0x230], rbx
test r14, r14
je 0x18000b389
mov qword [rsp + 0x58], r14
mov rcx, r14
call fcn.180056160
lea edx, [r12 + 0x40]
mov rcx, r14
call fcn.1800c8c14
lea rcx, [rbp + 0x80]
call fcn.180016bb0
nop
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
mov rax, qword [rbp + 0xa8]
test rax, rax
jne 0x18000b3ca
call fcn.1800c891c
mov qword [rbp + 0xa8], rax
test rax, rax
jne 0x18000b3ca
lea ecx, [rax + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18000b45b
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1800c8a4c
lea rax, [rbp + 0x80]
mov qword [rbp + 0x90], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x98], eax
lea r14, [0x180125bf8]
mov qword [rsp + 0x58], r14
mov byte [rsp + 0x60], 0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rsp + 0x60], 1
mov rax, qword [0x180125c20]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0x90]
mov qword [0x180125c20], rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x20], r12
lea r9, [0x18000daf0]
mov r8, rbx
mov edx, 0x64
mov rcx, qword [0x180124f60]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
xor edx, edx
mov rcx, qword [r13 + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov r8d, 3
lea rdx, [0x1800dd028]
lea rcx, [rsp + 0x78]
call fcn.18000d3b0
nop
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov r8d, 0x20
lea rdx, str.c6456bfa0e6312b0ccfe238a4c0dcabd
lea rcx, [rsp + 0x58]
call fcn.18000d3b0
nop
mov rax, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x18000b4db
mov rdi, qword [rdi]
mov r9d, 0xfde9
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.180020820
mov ebx, 2
mov dword [rsp + 0x40], ebx
and ebx, 0xfffffffd
mov dword [rsp + 0x40], ebx
or ebx, 1
mov dword [rsp + 0x40], ebx
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x18000b515
mov rsi, qword [rsi]
mov r9d, 0xfde9
mov r8d, eax
mov rdx, rsi
lea rcx, [rbp + 0x40]
call fcn.180020820
or ebx, 0x10
mov dword [rsp + 0x40], ebx
and ebx, 0xffffffef
mov dword [rsp + 0x40], ebx
or ebx, 8
mov dword [rsp + 0x40], ebx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x58]
mov rcx, qword [r13 + 0x230]
call fcn.180034150
movzx edi, al
and ebx, 0xfffffff7
mov dword [rsp + 0x40], ebx
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x18000b5c5
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b5c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b5c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
and ebx, 0xfffffffe
mov dword [rsp + 0x40], ebx
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x18000b61a
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b615
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b615
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x18000b66a
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b665
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b665
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000b6bc
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b6b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b6b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
test dil, dil
je 0x18000b6e7
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [r13 + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
nop
lea rcx, [rbp + 0x80]
call fcn.180016ea0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000b732
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b72d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b72d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rcx, [rbp + 0x20]
call fcn.180007ae0
nop
lea rcx, [rbp]
call fcn.180007ae0
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000b794
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b78f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b78f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x18000b7e7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b7e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b7e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8c14
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
mov rcx, qword [rbp + 0x5b0]
xor rcx, rsp
call fcn.1800c8bf0
lea r11, [rsp + 0x6c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18000dad0
nop
call fcn.18000dad0
int3
call fcn.18000dad0
int3
call fcn.18000dad0
int3
call fcn.18000dad0
int3
call fcn.18000dad0
int3