Function at 0x180048220
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x1a8
mov dword [rsp + 0x20], 0
mov eax, 0xa
mov word [rsp + 0x40], ax
movsx rax, word [rsp + 0x40]
lea rcx, [0x180087f80]
cmp dword [rcx + rax*4], 1
jne 0x18004827d
movsx rax, word [rsp + 0x40]
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x40]
lea rdx, [0x180087f80]
mov dword [rdx + rcx*4], eax
jmp 0x180048289
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x39000]
cmp dword [rsp + 0x20], eax
jge 0x180048495
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x78], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
movsxd rdx, dword [rsp + 0x78]
lea r8, [0x180087f80]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180087f80]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x39000]
mov ecx, dword [rsp + 0x1c0]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x20]
cmp eax, 3
jge 0x1800483ce
mov dword [rsp + 0x8c], 1
mov eax, dword [rsp + 0x8c]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x18004836b
xor r9d, r9d
lea r8, [0x1800779e0]
lea rdx, [0x1800779e8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x54], eax
jmp 0x18004837f
mov eax, dword [rsp + 0x54]
inc eax
mov dword [rsp + 0x54], eax
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x39000]
cmp dword [rsp + 0x54], eax
jge 0x1800483c9
movsxd rax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x20]
mov edx, dword [rsp + 0x54]
sub edx, ecx
mov ecx, edx
movsxd rcx, ecx
mov rdx, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x1b0]
movzx eax, byte [r8 + rax + 0x38ff6]
mov byte [rdx + rcx + 0x38ff6], al
jmp 0x180048375
jmp 0x180048495
mov dword [rsp + 0x38], 0
jmp 0x1800483e2
mov eax, dword [rsp + 0x38]
inc eax
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 3
jge 0x180048468
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1b0]
cmp eax, dword [rcx + 0x39000]
jge 0x180048429
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov eax, ecx
cdqe
mov rcx, qword [rsp + 0x1b0]
movzx eax, byte [rcx + rax + 0x38ff6]
mov byte [rsp + 0x27], al
jmp 0x180048455
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1b0]
sub eax, dword [rcx + 0x39000]
cdqe
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x27], al
movsxd rax, dword [rsp + 0x38]
movzx ecx, byte [rsp + 0x27]
mov byte [rsp + rax + 0x64], cl
jmp 0x1800483d8
lea rcx, [rsp + 0x64]
call fcn.180047a40
mov ecx, 1
imul rcx, rcx, 0
mov r8d, eax
movzx edx, byte [rsp + rcx + 0x64]
mov rcx, qword [rsp + 0x1b0]
call fcn.180047ff0
jmp 0x18004827f
mov rax, qword [rsp + 0x1b0]
mov ecx, dword [rsp + 0x20]
mov eax, dword [rax + 0x39000]
sub eax, ecx
mov rcx, qword [rsp + 0x1b0]
mov dword [rcx + 0x39000], eax
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 0
cmp dword [rsp + 0x1c0], 0
jle 0x180048ce7
cmp dword [rsp + 0x1c0], 3
jl 0x1800487b4
mov dword [rsp + 0x90], 1
mov eax, dword [rsp + 0x90]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x180048520
xor r9d, r9d
lea r8, [0x1800779ec]
lea rdx, [0x1800779f4]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rsp + 0x6c], 1
mov eax, dword [rsp + 0x6c]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x18004854f
xor r9d, r9d
lea r8, [0x1800779f8]
lea rdx, [0x180077a00]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rsp + 0x30], 0
mov rcx, qword [rsp + 0x1b8]
call fcn.180047a40
mov dword [rsp + 0x68], eax
movsxd rax, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x1b0]
movsx eax, word [rcx + rax*2 + 0x30008]
mov dword [rsp + 0x58], eax
jmp 0x18004859d
movsxd rax, dword [rsp + 0x58]
imul rax, rax, 6
mov rcx, qword [rsp + 0x1b0]
movsx eax, word [rcx + rax + 8]
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0xffffffff
je 0x1800487b2
mov eax, dword [rsp + 0x58]
add eax, 0x8000
mov rcx, qword [rsp + 0x1b0]
sub eax, dword [rcx + 0x38ffc]
cdq
and edx, 0x7fff
add eax, edx
and eax, 0x7fff
sub eax, edx
mov ecx, 0x8000
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x20], 0
jmp 0x1800485f0
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 3
jge 0x1800486bc
cmp dword [rsp + 0x20], 0
jge 0x180048631
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x38ffc]
add eax, dword [rsp + 0x20]
and eax, 0x7fff
cdqe
mov rcx, qword [rsp + 0x1b0]
movzx eax, byte [rcx + rax + 0x30ff6]
mov byte [rsp + 0x26], al
jmp 0x180048646
movsxd rax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x26], al
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x20]
sub ecx, eax
mov eax, ecx
test eax, eax
jge 0x180048689
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x38ffc]
add eax, dword [rsp + 0x20]
sub eax, dword [rsp + 0x5c]
and eax, 0x7fff
cdqe
mov rcx, qword [rsp + 0x1b0]
movzx eax, byte [rcx + rax + 0x30ff6]
mov byte [rsp + 0x28], al
jmp 0x1800486a7
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x20]
sub ecx, eax
mov eax, ecx
cdqe
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x28], al
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x28]
cmp eax, ecx
je 0x1800486b7
jmp 0x1800486bc
jmp 0x1800485e6
mov eax, 8
mov word [rsp + 0x44], ax
movsx rax, word [rsp + 0x44]
lea rcx, [0x180087f80]
cmp dword [rcx + rax*4], 1
jne 0x1800486fb
movsx rax, word [rsp + 0x44]
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x44]
lea rdx, [0x180087f80]
mov dword [rdx + rcx*4], eax
cmp dword [rsp + 0x20], 3
jne 0x1800487ad
mov dword [rsp + 0x88], 1
mov eax, dword [rsp + 0x88]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x18004873b
xor r9d, r9d
lea r8, [0x180077a04]
lea rdx, [0x180077a0c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, SafeArrayGetDim
mov word [rsp + 0x34], ax
movsx rax, word [rsp + 0x34]
lea rcx, [0x180087f80]
cmp dword [rcx + rax*4], 1
jne 0x18004877a
movsx rax, word [rsp + 0x34]
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x34]
lea rdx, [0x180087f80]
mov dword [rdx + rcx*4], eax
movsxd rax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x5c]
mov dword [rsp + rax*8 + 0xa0], ecx
movsxd rax, dword [rsp + 0x30]
mov dword [rsp + rax*8 + 0xa4], 3
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0x20
jl 0x1800487ad
jmp 0x1800487b2
jmp 0x180048583
jmp 0x1800487c4
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x68], 0xffffffff
cmp dword [rsp + 0x30], 0
jle 0x180048ab9
mov dword [rsp + 0x2c], 3
mov eax, dword [rsp + 0x1c0]
cmp dword [rsp + 0x2c], eax
jge 0x18004892d
mov dword [rsp + 0x50], 0
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x20], eax
jmp 0x180048804
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x20], eax
jge 0x18004890d
cmp dword [rsp + 0x2c], 0
jge 0x180048848
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x38ffc]
add eax, dword [rsp + 0x2c]
and eax, 0x7fff
cdqe
mov rcx, qword [rsp + 0x1b0]
movzx eax, byte [rcx + rax + 0x30ff6]
mov byte [rsp + 0x24], al
jmp 0x18004885d
movsxd rax, dword [rsp + 0x2c]
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x24], al
movsxd rax, dword [rsp + 0x20]
mov eax, dword [rsp + rax*8 + 0xa0]
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
test eax, eax
jge 0x1800488b0
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x38ffc]
add eax, dword [rsp + 0x2c]
movsxd rcx, dword [rsp + 0x20]
sub eax, dword [rsp + rcx*8 + 0xa0]
and eax, 0x7fff
cdqe
mov rcx, qword [rsp + 0x1b0]
movzx eax, byte [rcx + rax + 0x30ff6]
mov byte [rsp + 0x25], al
jmp 0x1800488d6
movsxd rax, dword [rsp + 0x20]
mov eax, dword [rsp + rax*8 + 0xa0]
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
cdqe
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x25], al
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x25]
cmp eax, ecx
jne 0x180048908
movsxd rax, dword [rsp + 0x20]
mov rax, qword [rsp + rax*8 + 0xa0]
movsxd rcx, dword [rsp + 0x50]
mov qword [rsp + rcx*8 + 0xa0], rax
mov eax, dword [rsp + 0x50]
inc eax
mov dword [rsp + 0x50], eax
jmp 0x1800487fa
cmp dword [rsp + 0x50], 0
jne 0x180048916
jmp 0x18004892d
mov eax, dword [rsp + 0x2c]
inc eax
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x30], eax
jmp 0x1800487d7
mov eax, 8
imul rax, rax, 0
mov ecx, dword [rsp + 0x2c]
mov dword [rsp + rax + 0xa4], ecx
cmp dword [rsp + 0x4c], 0
jle 0x180048a7d
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x80], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
movsxd rdx, dword [rsp + 0x80]
lea r8, [0x180087f80]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180087f80]
mov dword [rdx + rcx], eax
mov eax, 8
imul rax, rax, 0
mov ecx, dword [rsp + 0x4c]
inc ecx
cmp dword [rsp + rax + 0xa4], ecx
jle 0x180048a53
movzx edx, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x1b0]
call fcn.180047b20
mov eax, 8
imul rax, rax, 0
mov rax, qword [rsp + rax + 0xa0]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x70], 1
mov eax, dword [rsp + 0x70]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x180048a30
xor r9d, r9d
lea r8, [0x180077a10]
lea rdx, [0x180077a18]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x3c], 1
jmp 0x180048a7b
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x1b0]
call fcn.180047c40
mov eax, dword [rsp + 0x4c]
dec eax
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x4c], 0
jmp 0x180048ab4
mov eax, 8
imul rax, rax, 0
mov rax, qword [rsp + rax + 0xa0]
mov qword [rsp + 0x48], rax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x1b8]
movzx eax, byte [rcx + rax]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x3c], 1
jmp 0x180048b86
cmp dword [rsp + 0x4c], 0
jle 0x180048aed
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x1b0]
call fcn.180047c40
mov eax, dword [rsp + 0x4c]
dec eax
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x4c], 0
jmp 0x180048b86
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x1b8]
movzx edx, byte [rcx + rax]
mov rcx, qword [rsp + 0x1b0]
call fcn.180047b20
mov dword [rsp + 0x3c], 1
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x74], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
movsxd rdx, dword [rsp + 0x74]
lea r8, [0x180087f80]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180087f80]
mov dword [rdx + rcx], eax
cmp dword [rsp + 0x3c], 0
jle 0x180048ce2
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x7c], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
movsxd rdx, dword [rsp + 0x7c]
lea r8, [0x180087f80]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180087f80]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180087f80]
mov dword [rdx + rcx], eax
cmp dword [rsp + 0x1c0], 3
jl 0x180048c34
mov rcx, qword [rsp + 0x1b8]
call fcn.180047a40
mov r8d, eax
mov rax, qword [rsp + 0x1b8]
movzx edx, byte [rax]
mov rcx, qword [rsp + 0x1b0]
call fcn.180047ff0
jmp 0x180048c7b
mov rax, qword [rsp + 0x1b0]
movsxd rax, dword [rax + 0x39000]
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b8]
movzx edx, byte [rdx]
mov byte [rcx + rax + 0x38ff6], dl
mov rax, qword [rsp + 0x1b0]
mov eax, dword [rax + 0x39000]
inc eax
mov rcx, qword [rsp + 0x1b0]
mov dword [rcx + 0x39000], eax
mov rax, qword [rsp + 0x1b8]
inc rax
mov qword [rsp + 0x1b8], rax
mov eax, dword [rsp + 0x1c0]
dec eax
mov dword [rsp + 0x1c0], eax
mov eax, dword [rsp + 0x3c]
dec eax
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x84], 1
mov eax, dword [rsp + 0x84]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x180048cdd
xor r9d, r9d
lea r8, [0x180077a1c]
lea rdx, [0x180077a24]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x180048b86
jmp 0x1800484cf
add rsp, 0x1a8
ret