Function at 0x18001e4a0
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xc8
imul eax, r8d, 0xdc
mov r14d, r8d
mov rsi, rdx
mov r10, rcx
mov r15d, r8d
mov dword [rbp - 0x1d], eax
cmp r8d, eax
ja 0x18001ee21
mov r8, qword [rbp - 0x69]
xor ebx, ebx
mov rdi, qword [rbp + 0x7f]
mov r12, qword [rbp - 0x41]
movzx r13d, byte [rbp + 0x77]
mov qword [rbp - 0x59], r8
lea rdx, [0x180000000]
mov r9d, 0xffffffff
cmp r15d, 0x5c4
ja 0x18001ebc6
je 0x18001e5d0
cmp r15d, 0x24
je 0x18001e59e
cmp r15d, 0x42
je 0x18001eda1
cmp r15d, 0xd4
je 0x18001ec66
cmp r15d, 0x2f4
je 0x18001e652
cmp r15d, 0x56a
jne 0x18001edda
mov rax, qword [r10 + 0x10]
cmp rax, qword [r10 + 8]
ja 0x18001e589
xor edx, edx
lea r9, [rbp - 0x69]
add rax, 5
mov rcx, r10
mov qword [rbp - 0x69], rax
lea r8d, [rdx + 0x45]
call fcn.18001b880
cmp eax, 1
jne 0x18001edf1
mov r10, qword [rbp + 0x67]
mov r8, qword [rbp - 0x59]
mov rdx, qword [r10]
mov rdi, rbx
mov rcx, qword [r10 + 8]
movzx eax, byte [rsi]
mov byte [rdx + rcx], al
jmp 0x18001edda
lea rdx, [rbp - 0x69]
mov qword [rbp - 0x49], r10
mov ecx, 0x53
mov qword [rbp - 0x69], 8
call fcn.18001b9c0
mov r8, qword [rbp - 0x59]
mov r12, rax
mov qword [rbp - 0x41], rax
jmp 0x18001edda
mov r15, qword [rbp - 0x49]
movsxd rax, dword [r15]
cmp eax, 6
ja case.default.0x18001e5ea
mov ecx, dword [rdx + rax*4 + 0x1ee3c]
add rcx, rdx
jmp rcx
mov byte [rbp - 0x79], 0x7d
jmp 0x18001e5f6
mov byte [rbp - 0x79], 0x5d
mov r8d, 0x42
lea rdx, [rbp - 0x79]
mov rcx, r12
call fcn.18001e4a0
cmp eax, 1
jne 0x18001e912
mov r10, qword [rbp + 0x67]
lea rdx, [0x180000000]
mov rax, qword [r15 + 0x20]
test rax, rax
je 0x18001edf6
cmp r15, r10
je 0x18001edf6
mov r15, qword [r15 + 0x10]
mov qword [rbp - 0x49], r15
test r15, r15
jne 0x18001e660
mov r8, qword [rbp - 0x59]
mov r15d, 0x2f4
mov qword [rbp - 0x49], rax
jmp 0x18001edda
mov r15, qword [rbp - 0x49]
nop word [rax + rax]
mov r14d, 0x110
nop word [rax + rax]
cmp r14d, 0x206
jae 0x18001eb75
mov eax, r14d
sub eax, 0x110
je 0x18001eab0
sub eax, 0x52
je 0x18001e6e4
cmp eax, 0x52
jne 0x18001eade
mov r14d, 0x1b4
cmp qword [r15 + 0x28], rbx
je 0x18001eb75
mov esi, 0x51
nop
mov eax, esi
sub eax, 0x51
je 0x18001ea8d
sub eax, 1
je 0x18001ea6c
sub eax, 1
je 0x18001ea59
sub eax, 1
je 0x18001ea36
cmp eax, 1
je 0x18001eb20
jmp 0x18001ea91
movsxd rax, dword [r15]
cmp eax, 6
ja case.default.0x18001e6fa
mov ecx, dword [rdx + rax*4 + 0x1ee58]
add rcx, rdx
jmp rcx
mov r14d, 0x116
cmp r14d, 0x11b
jae case.0x18001e6fa.1
mov eax, r14d
sub eax, 0x116
je 0x18001e91e
sub eax, 1
je 0x18001e8b3
sub eax, 1
je 0x18001e786
sub eax, 1
je 0x18001e73e
cmp eax, 1
je 0x18001e699
inc r14d
jmp 0x18001e702
cmp byte [rbp + 0x7f], bl
je 0x18001e941
lea r8, [rbp - 0x69]
mov qword [rbp - 0x69], rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesDecodeIncrementalHandleCreate]
mov rcx, qword [rbp - 9]
mov dword [rbp - 0x31], eax
test rcx, rcx
je 0x18001e76b
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x18001e941
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
inc r14d
jmp 0x18001e702
movzx eax, byte [rbp + 0x7f]
mov ecx, ebx
cmp dword [rbp - 0x31], ebx
cmove ecx, eax
mov rax, qword [r15 + 0x20]
mov byte [rbp + 0x7f], cl
test rax, rax
je 0x18001e7fc
cmp dword [rax], 2
jne 0x18001e941
cmp qword [r15 + 0x28], rbx
je 0x18001e7b6
mov byte [rbp - 0x79], 0x3a
jmp 0x18001e8fb
mov esi, 0x64
nop dword [rax + rax]
cmp esi, 0x64
je 0x18001e7d9
cmp esi, 0x3458
jne 0x18001e7e2
mov dword [rbp - 0x61], 8
jmp 0x18001ee21
lea r8, [rbp - 0x41]
call fcn.18000f3b0
add esi, 0x33f4
cmp esi, 0x67e8
jbe 0x18001e7c0
mov r12, qword [rbp - 0x41]
inc r14d
jmp 0x18001e702
cmp qword [r15 + 0x28], rbx
je 0x18001e80b
mov byte [rbp - 0x79], 0x3a
jmp 0x18001e8fb
mov esi, 0x88
cmp esi, 0x12a90
ja 0x18001e878
je 0x18001e863
cmp esi, 0x88
je 0x18001e855
cmp esi, 0x63e0
je 0x18001e84f
cmp esi, 0xc738
jne 0x18001e895
mov rcx, qword [rbp - 0x11]
mov qword [rbp + 0x6f], rbx
call qword [sym.imp.USER32.dll_GetWindowDC]
mov qword [rbp - 0x19], rax
cmp rax, 0
jne 0x18001e895
xor r13b, r13b
jmp 0x18001e895
mov qword [rbp - 0x11], rbx
jmp 0x18001e895
lea r8, [rbp - 0x41]
mov r13b, 1
call fcn.18000f3b0
jmp 0x18001e895
test r13b, r13b
je 0x18001e895
mov rdx, qword [rbp - 0x19]
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x18001e895
cmp esi, 0x18de8
je 0x18001e88e
cmp esi, 0x1f140
je 0x18001ee21
jmp 0x18001e895
mov dword [rbp - 0x61], 8
add esi, 0x6358
cmp esi, 0x25410
jbe 0x18001e810
mov r12, qword [rbp - 0x41]
inc r14d
jmp 0x18001e702
mov r8, qword [r15 + 8]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [r8 + rax], bl
jne 0x18001e8c0
lea r9, [rbp - 0x69]
mov qword [rbp - 0x69], rax
mov edx, 0x6f
mov rcx, r12
call fcn.180004a50
cmp eax, 1
jne 0x18001e912
lea r9, [rbp - 9]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesEncodeIncrementalHandleCreate]
mov dword [rbp - 0x31], eax
mov byte [rbp - 0x79], 0x22
mov r8d, 0x42
lea rdx, [rbp - 0x79]
mov rcx, r12
call fcn.18001e4a0
cmp eax, 1
je 0x18001e941
mov dword [rbp - 0x61], 6
jmp 0x18001ee21
mov r8d, 0x42
mov byte [rbp + 0x7f], 1
lea rdx, [rbp - 0x79]
mov byte [rbp - 0x79], 0x22
mov rcx, r12
call fcn.18001e4a0
cmp eax, 1
jne 0x18001e912
mov qword [rbp - 9], rbx
inc r14d
jmp 0x18001e702
mov esi, 0xcc
nop
cmp esi, 0xcc
je 0x18001e972
cmp esi, 0x175
je 0x18001eb36
cmp esi, 0x21e
je 0x18001e699
jmp 0x18001e98b
mov r8d, 3
lea rdx, [0x180066562]
lea rcx, [rbp - 0x51]
call fcn.18003a150
mov byte [rbp - 0x4e], bl
add esi, 0xa9
cmp esi, 0x2c7
jb 0x18001e950
mov esi, 0xff
nop
cmp esi, 0xf30c
ja case.0x18001e6fa.6
cmp esi, 0xff
je 0x18001ea0a
cmp esi, 0x3dc2
je 0x18001e9dc
cmp esi, 0x7a85
je 0x18001eb75
cmp esi, 0xb748
je 0x18001e699
add esi, 0x3cc3
jmp 0x18001e9a0
lea r9, [rbp - 0x69]
mov qword [rbp - 0x69], 5
lea r8, [rbp - 0x39]
mov edx, 0x6f
mov rcx, r12
call fcn.180004a50
cmp eax, 1
jne 0x18001e912
add esi, 0x3cc3
jmp 0x18001e9a0
movzx eax, word [0x1800665e6]
add esi, 0x3cc3
mov word [rbp - 0x39], ax
movzx eax, byte [0x1800665e8]
mov byte [rbp - 0x37], al
mov eax, 0x6573
mov word [rbp - 0x36], ax
mov byte [rbp - 0x34], bl
jmp 0x18001e9a0
cmp byte [rbp - 0x70], bl
je 0x18001ea91
mov rcx, qword [rbp - 0x29]
mov edx, 1
mov r8d, edx
call qword [sym.imp.COMCTL32.dll_FlatSB_ShowScrollBar]
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.COMCTL32.dll_UninitializeFlatSB]
jmp 0x18001ea91
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.COMCTL32.dll_InitializeFlatSB]
test eax, eax
jne 0x18001ea91
mov byte [rbp - 0x70], al
jmp 0x18001ea91
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r15, qword [r15 + 0x28]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r15
cmp rax, 0
je 0x18001ea91
mov qword [rbp - 0x29], rbx
jmp 0x18001ea91
mov byte [rbp - 0x70], 1
inc esi
cmp esi, 0x56
jb 0x18001e6b0
mov r10, qword [rbp + 0x67]
lea rdx, [0x180000000]
add r14d, 0x52
jmp 0x18001e670
cmp qword [r15 + 0x18], rbx
je 0x18001eade
cmp r15, r10
je 0x18001eade
mov r8d, 0x42
mov byte [rbp - 0x79], 0x2c
lea rdx, [rbp - 0x79]
mov rcx, r12
call fcn.18001e4a0
cmp eax, 1
jne 0x18001e912
mov r10, qword [rbp + 0x67]
add r14d, 0x52
lea rdx, [0x180000000]
jmp 0x18001e670
mov byte [rbp - 0x79], 0x7b
mov r8d, 0x42
lea rdx, [rbp - 0x79]
mov rcx, r12
call fcn.18001e4a0
cmp eax, 1
jne 0x18001e912
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x18001eb75
mov r15, rax
mov qword [rbp - 0x49], rax
nop dword [rax]
mov r10, qword [rbp + 0x67]
lea rdx, [0x180000000]
jmp 0x18001e660
mov byte [rbp - 0x79], 0x5b
jmp 0x18001eaf2
mov r8d, 1
lea rdx, [0x180066546]
lea rcx, [rbp - 0x4e]
call fcn.18003a150
lea r8, [rbp - 0x51]
mov byte [rbp - 0x4d], bl
mov qword [rbp - 0x69], 4
lea r9, [rbp - 0x69]
mov edx, 0x6f
mov rcx, r12
call fcn.180004a50
cmp eax, 1
jne 0x18001e912
mov rsi, qword [rbp + 0x6f]
mov r14d, dword [rbp + 0x77]
mov r8, qword [rbp - 0x59]
mov r15d, 0x2f4
jmp 0x18001edda
mov r8, qword [r15 + 8]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r8 + rax], bl
jne 0x18001eb97
mov qword [rbp - 0x69], rax
jmp 0x18001eb5b
lea r8, str.null
jmp 0x18001eb53
mov r14d, dword [rbp + 0x77]
mov r8, qword [rbp - 0x59]
mov rsi, qword [rbp + 0x6f]
mov r15d, 0x5c4
jmp 0x18001edda
cmp r15d, 0x894
je 0x18001ee11
cmp r15d, 0xa92
je 0x18001edca
cmp r15d, 0xfba
je 0x18001edb3
cmp r15d, 0x14e2
je 0x18001eda7
cmp r15d, 0x1a0a
jne 0x18001edda
mov esi, 0x2d
nop dword [rax]
mov eax, esi
sub eax, 0x2d
je 0x18001ec30
sub eax, 1
je 0x18001ec27
cmp eax, 1
je 0x18001ee21
jmp 0x18001ec55
mov dword [rbp - 0x61], 1
jmp 0x18001ec55
movzx eax, byte [rbp - 0x71]
mov ecx, ebx
mov rdx, qword [rbp + 7]
test rdx, rdx
cmovne ecx, eax
mov byte [rbp - 0x71], cl
cmp cl, 0
je 0x18001ec55
mov rcx, r8
call qword [sym.imp.IMM32.dll_ImmReleaseContext]
mov r8, qword [rbp - 0x59]
inc esi
cmp esi, 0x30
jb 0x18001ec10
mov r10, qword [rbp + 0x67]
mov r9d, 0xffffffff
mov r14d, 0x37
nop dword [rax]
cmp r14d, 0x37
je 0x18001ec88
cmp r14d, 0xaf5
je 0x18001ee21
jmp 0x18001ed81
cmp qword [r10 + 0x10], 8
jne 0x18001ed16
mov esi, 0x101
nop dword [rax + rax]
mov eax, esi
sub eax, 0x100
je 0x18001ee21
cmp eax, 1
jne 0x18001ed0b
cmp qword [r10 + 0x18], 0x10
mov rcx, r10
jb 0x18001ecbf
mov rcx, qword [r10]
mov dword [rsp + 0x28], 0x67
lea r9, [rbp - 0x69]
lea r8, [rbp - 0x21]
mov qword [rsp + 0x20], rbx
xor edx, edx
mov qword [rbp - 0x69], 8
call fcn.180013dc0
mov ecx, dword [rbp - 0x21]
xor edx, edx
mov r10, qword [rbp + 0x67]
mov r9d, 0xffffffff
mov eax, r9d
div rcx
xor edx, edx
mov rcx, rax
mov rax, 0xffffffffffffffff
div rcx
mov qword [rbp - 0x61], rax
add esi, r9d
cmp esi, 0xff
ja 0x18001eca0
cmp qword [r10 + 0x10], 0x10
jne 0x18001ed7d
mov esi, 0x37
mov eax, esi
sub eax, 0x36
je 0x18001ee21
cmp eax, 1
jne 0x18001ed75
cmp qword [r10 + 0x18], 0x10
mov rcx, r10
jb 0x18001ed3f
mov rcx, qword [r10]
mov dword [rsp + 0x28], 0x67
lea r9, [rbp - 0x69]
lea r8, [rbp - 1]
mov qword [rsp + 0x20], rbx
xor edx, edx
mov qword [rbp - 0x69], 0x10
call fcn.180013dc0
mov rax, qword [rbp - 1]
mov r9d, 0xffffffff
mov r10, qword [rbp + 0x67]
mov qword [rbp - 0x61], rax
add esi, r9d
cmp esi, 0x35
ja 0x18001ed22
mov qword [rbp - 0x61], rbx
add r14d, 0xabe
cmp r14d, 0x157c
jbe 0x18001ec70
mov rsi, qword [rbp + 0x6f]
mov r8, qword [rbp - 0x59]
mov r14d, dword [rbp + 0x77]
mov byte [rbp - 0x71], 1
jmp 0x18001edda
mov rcx, qword [r10 + 8]
mov rax, qword [r10]
mov byte [rcx + rax], bl
jmp 0x18001edda
inc qword [r10 + 8]
mov rcx, r8
call qword [sym.imp.IMM32.dll_ImmGetContext]
mov r8, qword [rbp - 0x59]
mov qword [rbp + 7], rax
jmp 0x18001edda
mov rcx, rdi
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r8, rbx
mov qword [rbp - 0x59], rbx
lea eax, [r14 + r14*4]
lea r15d, [r15 + rax*4]
cmp r15d, dword [rbp - 0x1d]
ja 0x18001ee21
mov r10, qword [rbp + 0x67]
jmp 0x18001e4fd
mov dword [rbp - 0x61], ebx
jmp 0x18001ee21
mov r8, r12
mov edx, 0x54
xor ecx, ecx
call fcn.1800022f0
mov qword [rsi], rax
mov dword [rbp - 0x61], 1
jmp 0x18001ee21
lea r8, [rbp - 0x41]
call fcn.18000f3b0
mov dword [rbp - 0x61], 0xa
mov rax, qword [rbp - 0x61]
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret