Function at 0x18000a8f0
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5e8]
sub rsp, 0x6c0
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x180122010]
xor rax, rsp
mov qword [rbp + 0x5b0], rax
mov r13, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov rbx, qword [rcx + 0x140]
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000b618
mov r8d, 0x208
lea rdx, [rbp + 0x1a0]
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rax, [rbp + 0x1a0]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x18000a996
test r8, r8
je 0x18000b618
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x58]
call fcn.180007980
nop
lea rdx, [rsp + 0x58]
lea rcx, [r13 + 0x1e8]
call fcn.1800074f0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18000aa30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000aa2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000aa2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov rbx, qword [r13 + 0x140]
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx + 0x198]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18000b618
mov r8d, 0x208
lea rdx, [rbp + 0x1a0]
mov rcx, qword [rbx + 0x198]
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rax, [rbp + 0x1a0]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18000aaa0
test r8, r8
je 0x18000b618
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x58]
call fcn.180007980
nop
lea rdx, [rsp + 0x58]
lea rcx, [r13 + 0x208]
call fcn.1800074f0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x18000ab3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ab36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ab36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov rcx, qword [r13 + 0x140]
mov rax, qword [rcx]
call qword [rax + 0x118]
mov dword [r13 + 0x228], eax
mov rcx, qword [r13 + 0x140]
mov rax, qword [rcx]
lea rdx, [rbp - 0x28]
call qword [rax + VarUI4FromDisp]
nop
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
lea rcx, [r13 + 0x1e8]
cmp qword [r13 + 0x200], 8
jb 0x18000aba1
mov rcx, qword [r13 + 0x1e8]
mov r9, qword [rbp - 0x18]
mov r10, qword [r13 + 0x1f8]
mov r8, r10
cmp r9, r10
cmovb r8, r9
test r8, r8
je 0x18000abd6
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x18000ac36
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x18000abc0
cmp r10, r9
jb 0x18000ac36
ja 0x18000ac36
mov rbx, qword [r13 + 0x140]
mov rcx, qword [rbx + 0xb0]
call qword [sym.imp.USER32.dll_SetFocus]
mov edx, 0x3e9
mov rcx, rbx
call fcn.18002d010
test rax, rax
je 0x18000ac0f
mov r8, qword [rax]
mov dl, 1
mov rcx, rax
call qword [r8 + 0x30]
mov edx, 0x3eb
mov rcx, rbx
call fcn.18002d010
test rax, rax
je 0x18000b5c4
mov r8, qword [rax]
xor edx, edx
mov rcx, rax
call qword [r8 + 0x30]
jmp 0x18000b5c4
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov r8d, 0x19
lea rdx, [0x1800dbf40]
lea rcx, [rsp + 0x58]
call fcn.180007980
nop
lea rax, [rsp + 0x58]
mov r10, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x70]
cmp rsi, 8
cmovae rax, r10
lea rcx, [r13 + 0x208]
cmp qword [r13 + 0x220], 8
jb 0x18000ac9b
mov rcx, qword [r13 + 0x208]
mov r11, qword [rsp + 0x68]
mov rdi, qword [r13 + 0x218]
mov rdx, rdi
cmp r11, rdi
cmovb rdx, r11
test rdx, rdx
je 0x18000acdc
nop word [rax + rax]
movzx r8d, word [rcx]
movzx r9d, word [rax]
cmp r8w, r9w
jne 0x18000ace6
add rcx, 2
add rax, 2
sub rdx, 1
jne 0x18000acc0
cmp rdi, r11
jae 0x18000acf5
mov ebx, r14d
jmp 0x18000acfb
mov ebx, 1
cmp r8w, r9w
cmovb ebx, r14d
jmp 0x18000acfb
mov ebx, r12d
seta bl
cmp rsi, 8
jb 0x18000ad39
lea rdx, [rsi*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x18000ad31
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ad31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r10
call fcn.1800c8554
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
test ebx, ebx
jne 0x18000adaa
mov rbx, qword [r13 + 0x140]
mov rcx, qword [rbx + 0x198]
call qword [sym.imp.USER32.dll_SetFocus]
mov edx, 0x3ea
mov rcx, rbx
call fcn.18002d010
test rax, rax
je 0x18000ad83
mov r8, qword [rax]
mov dl, 1
mov rcx, rax
call qword [r8 + 0x30]
mov edx, 0x3ec
mov rcx, rbx
call fcn.18002d010
test rax, rax
je 0x18000b5c4
mov r8, qword [rax]
xor edx, edx
mov rcx, rax
call qword [r8 + 0x30]
jmp 0x18000b5c4
mov edx, 0x3f3
mov rcx, qword [r13 + 0x140]
call fcn.18002d010
mov rcx, rax
mov dword [rsp + 0x20], r12d
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
call sub.VCRUNTIME140.dll___RTDynamicCast
test rax, rax
je 0x18000adf4
mov rax, qword [rax + 0x50]
test rax, rax
je 0x18000adea
mov r14d, dword [rax + 0x40]
cmp r14d, 0x3f5
sete al
mov byte [r13 + 0x1e0], al
lea rsi, [r13 + 0x1a0]
mov rdi, qword [rsi + 0x10]
cmp rdi, 1
jb 0x18000ae7e
mov rbx, r12
test rdi, rdi
je 0x18000ae7e
cmp qword [rsi + 0x10], rbx
jbe 0x18000b654
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000ae2b
mov rax, qword [rsi]
movzx edx, word [rax + rbx*2]
lea rcx, [0x1800dbf74]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000ae49
inc rbx
cmp rbx, rdi
jb 0x18000ae14
test rbx, rbx
je 0x18000ae7e
mov r8, qword [rsi + 0x10]
cmp r8, rbx
cmovb rbx, r8
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000ae66
mov rcx, qword [rsi]
sub r8, rbx
mov qword [rsi + 0x10], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.1800c9a28
mov r15, qword [rsi + 0x10]
cmp r15, 1
jb 0x18000af2c
mov rbx, r15
test r15, r15
je 0x18000af2c
lea r14, [r15*2 - 2]
lea rdi, [rbx - 1]
cmp qword [rsi + 0x10], rdi
jbe 0x18000b660
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000aebb
mov rax, qword [rsi]
movzx edx, word [r14 + rax]
lea rcx, [0x1800dbf74]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000aede
mov rbx, rdi
sub r14, 2
test rdi, rdi
jne 0x18000aea0
cmp rbx, r15
jae 0x18000af2c
mov r8, qword [rsi + 0x10]
cmp r8, rbx
jb 0x18000b64e
sub r15, rbx
mov rax, r8
sub rax, rbx
cmp rax, r15
cmovb r15, rax
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000af0d
mov rax, qword [rsi]
lea rcx, [rax + rbx*2]
sub r8, r15
mov qword [rsi + 0x10], r8
sub r8, rbx
lea r8, [r8*2 + 2]
lea rdx, [rcx + r15*2]
call fcn.1800c9a28
lea rdi, [r13 + 0x180]
mov r14, qword [rdi + 0x10]
cmp r14, 1
jb 0x18000afaf
mov rbx, r12
test r14, r14
je 0x18000afaf
cmp qword [rdi + 0x10], rbx
jbe 0x18000b666
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000af5c
mov rax, qword [rdi]
movzx edx, word [rax + rbx*2]
lea rcx, [0x1800dbf74]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000af7a
inc rbx
cmp rbx, r14
jb 0x18000af45
test rbx, rbx
je 0x18000afaf
mov r8, qword [rdi + 0x10]
cmp r8, rbx
cmovb rbx, r8
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000af97
mov rcx, qword [rdi]
sub r8, rbx
mov qword [rdi + 0x10], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.1800c9a28
mov r12, qword [rdi + 0x10]
cmp r12, 1
jb 0x18000b05d
mov rbx, r12
test r12, r12
je 0x18000b05d
lea r15, [r12*2 - 2]
lea r14, [rbx - 1]
cmp qword [rdi + 0x10], r14
jbe 0x18000b648
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000afec
mov rax, qword [rdi]
movzx edx, word [r15 + rax]
lea rcx, [0x1800dbf74]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x18000b00f
mov rbx, r14
sub r15, 2
test r14, r14
jne 0x18000afd1
cmp rbx, r12
jae 0x18000b05d
mov r8, qword [rdi + 0x10]
cmp r8, rbx
jb 0x18000b65a
sub r12, rbx
mov rax, r8
sub rax, rbx
cmp rax, r12
cmovb r12, rax
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x18000b03e
mov rax, qword [rdi]
lea rcx, [rax + rbx*2]
sub r8, r12
mov qword [rdi + 0x10], r8
sub r8, rbx
lea r8, [r8*2 + 2]
lea rdx, [rcx + r12*2]
call fcn.1800c9a28
cmp byte [r13 + 0x1e0], 0
je 0x18000b073
mov rcx, rsi
call fcn.18001a0d0
test al, al
jne 0x18000b085
xor r8d, r8d
lea rdx, [0x1800db478]
mov rcx, rsi
call fcn.180007980
xor r12d, r12d
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], r12b
lea rdx, [rbp - 0x68]
mov rcx, r13
call fcn.18000b6a0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov word [rbp], r12w
lea r8d, [r12 + 0x11]
lea rdx, [0x1800dbf78]
lea rcx, [rbp]
call fcn.180007980
nop
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
lea r8d, [r12 + 0x12]
lea rdx, str._api_advise_report
lea rcx, [rbp + 0x20]
call fcn.180007980
nop
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], r12b
cmp qword [r13 + 0x230], r12
jne 0x18000b1a9
lea ecx, [r12 + 0x40]
call fcn.1800c8800
mov rbx, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov dword [rax + 0x28], r12d
lea ecx, [r12 + 0x28]
call fcn.1800c8800
mov qword [rbx + 0x30], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov byte [rbx + 0x38], r12b
mov dword [rbx + 0x3c], 0xa
mov r14, qword [r13 + 0x230]
mov qword [r13 + 0x230], rbx
test r14, r14
je 0x18000b1a9
mov qword [rsp + 0x58], r14
mov rcx, r14
call fcn.180055ad0
lea edx, [r12 + 0x40]
mov rcx, r14
call fcn.1800c8554
lea rcx, [rbp + 0x80]
call fcn.1800169d0
nop
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
mov rax, qword [rbp + 0xa8]
test rax, rax
jne 0x18000b1ea
call fcn.1800c825c
mov qword [rbp + 0xa8], rax
test rax, rax
jne 0x18000b1ea
lea ecx, [rax + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18000b27b
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1800c838c
lea rax, [rbp + 0x80]
mov qword [rbp + 0x90], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x98], eax
lea r14, [0x180124be8]
mov qword [rsp + 0x58], r14
mov byte [rsp + 0x60], 0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rsp + 0x60], 1
mov rax, qword [0x180124c10]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0x90]
mov qword [0x180124c10], rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x20], r12
lea r9, [0x18000d910]
mov r8, rbx
mov edx, 0x64
mov rcx, qword [0x180123f50]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
xor edx, edx
mov rcx, qword [r13 + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov r8d, 3
lea rdx, [0x1800dbfc8]
lea rcx, [rsp + 0x78]
call fcn.18000d1d0
nop
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov r8d, 0x20
lea rdx, str.c6456bfa0e6312b0ccfe238a4c0dcabd
lea rcx, [rsp + 0x58]
call fcn.18000d1d0
nop
mov rax, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x18000b2fb
mov rdi, qword [rdi]
mov r9d, 0xfde9
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.180020640
mov ebx, 2
mov dword [rsp + 0x40], ebx
and ebx, 0xfffffffd
mov dword [rsp + 0x40], ebx
or ebx, 1
mov dword [rsp + 0x40], ebx
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x18000b335
mov rsi, qword [rsi]
mov r9d, 0xfde9
mov r8d, eax
mov rdx, rsi
lea rcx, [rbp + 0x40]
call fcn.180020640
or ebx, 0x10
mov dword [rsp + 0x40], ebx
and ebx, 0xffffffef
mov dword [rsp + 0x40], ebx
or ebx, 8
mov dword [rsp + 0x40], ebx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x58]
mov rcx, qword [r13 + 0x230]
call fcn.180036390
movzx edi, al
and ebx, 0xfffffff7
mov dword [rsp + 0x40], ebx
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x18000b3e5
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b3e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b3e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
and ebx, 0xfffffffe
mov dword [rsp + 0x40], ebx
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x18000b43a
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b435
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b435
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x18000b48a
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b485
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b485
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000b4dc
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b4d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b4d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
test dil, dil
je 0x18000b507
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [r13 + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
nop
lea rcx, [rbp + 0x80]
call fcn.180016cc0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000b552
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b54d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b54d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rcx, [rbp + 0x20]
call fcn.180007900
nop
lea rcx, [rbp]
call fcn.180007900
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000b5b4
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b5af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b5af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x18000b607
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b602
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b602
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c8554
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
mov rcx, qword [rbp + 0x5b0]
xor rcx, rsp
call fcn.1800c8530
lea r11, [rsp + 0x6c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18000d8f0
nop
call fcn.18000d8f0
int3
call fcn.18000d8f0
int3
call fcn.18000d8f0
int3
call fcn.18000d8f0
int3
call fcn.18000d8f0
int3