Function at 0x18005be6c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x358]
sub rsp, 0x420
mov qword [rbp + 0xe8], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1800c5470]
xor rax, rsp
mov qword [rbp + 0x310], rax
mov rdi, r8
mov rsi, rdx
mov r12, rcx
xor r13d, r13d
test rdx, rdx
je 0x18005c666
test r8, r8
je 0x18005c666
call fcn.18005b5e4
mov rcx, rax
call fcn.18005b708
test al, al
je 0x18005beea
mov dword [rdi + 4], r13d
mov qword [rdi + 0xc], r13
or dword [rdi + 8], 0xffffffff
xor eax, eax
jmp 0x18005c66b
mov r14d, 1
lea rcx, [rbp - 0x60]
call fcn.18003f2f0
nop
lea rdx, str.360SAFE
or r15, 0xffffffffffffffff
mov rax, r15
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005bf08
mov r8d, eax
lea rcx, [rbp + 0x60]
call fcn.180005498
lea rdx, str.360User
mov rax, r15
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005bf28
mov r8d, eax
lea rcx, [rbp + 0x68]
call fcn.180005498
lea rdx, str.global_popup
mov rax, r15
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005bf48
mov r8d, eax
lea rcx, [rbp + 0x70]
call fcn.180005498
mov dword [rbp + 0x78], 2
lea rcx, [0x18008aed4]
mov rax, r15
inc rax
cmp word [rcx + rax*2], r13w
jne 0x18005bf6f
mov r8d, eax
mov rdx, rcx
lea rcx, [rbp + 0x90]
call fcn.180005498
mov dword [rsp + 0x38], r13d
mov rax, qword [r12]
lea rdx, [rsp + 0x38]
mov rcx, r12
call qword [rax + 0x28]
mov eax, dword [rbp + 0x30]
cmp dword [rsp + 0x38], r14d
cmove eax, r14d
mov dword [rbp + 0x30], eax
lea rcx, [rbp + 0x100]
call fcn.18005f3a4
nop
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x30], eax
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x34], eax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x54], rax
mov byte [rsp + 0x28], r13b
lea rax, [rbp + 0x4c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x44]
lea rcx, [rbp + 0x100]
call fcn.180060174
lea rcx, [rbp + 0x100]
call fcn.1800600e8
test eax, eax
je 0x18005c018
mov eax, r14d
jmp 0x18005c031
lea rcx, [rbp + 0x100]
call fcn.180060db0
mov eax, r13d
cmp dword [rbp + 0x158], r14d
sete al
mov dword [rbp + 0x28], eax
call fcn.18005f270
mov dword [rbp + 0x2c], eax
call fcn.18005fb10
mov dword [rbp + 0x38], eax
call fcn.18005ff20
mov dword [rbp + 0x3c], eax
lea rcx, [rbp + 0x100]
call fcn.18005fff0
mov dword [rbp + 0x34], eax
mov ebx, r13d
mov dword [rbp - 0x78], 8
lea rcx, [rbp - 0x78]
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x18005c08a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [rbp - 0x74]
mov eax, 0x45e7b273
mul ecx
mov ebx, edx
shr ebx, 0xe
mov dword [rbp + 0x40], ebx
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x100]
call fcn.180060578
call fcn.180060080
mov dword [rbp + 0x5c], eax
mov rax, r15
lea rdx, [0x18008aed4]
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005c0b2
mov r8d, eax
lea rcx, [rbp - 0x60]
call fcn.180005498
lea rdx, [rsi + 4]
test rdx, rdx
jne 0x18005c0d6
mov eax, r13d
jmp 0x18005c0e3
mov rax, r15
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005c0d9
mov r8d, eax
lea rcx, [rbp - 0x58]
call fcn.180005498
lea rdx, [rsi + 0x46]
test rdx, rdx
jne 0x18005c0fd
mov eax, r13d
jmp 0x18005c10a
mov rax, r15
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005c100
mov r8d, eax
lea rcx, [rbp - 0x50]
call fcn.180005498
lea rdx, [rsi + 0x88]
test rdx, rdx
jne 0x18005c127
mov eax, r13d
jmp 0x18005c134
mov rax, r15
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005c12a
mov r8d, eax
lea rcx, [rbp - 0x48]
call fcn.180005498
mov eax, dword [rsi + 0xca]
mov dword [rbp - 0x30], eax
mov eax, dword [rsi + 0xce]
mov dword [rbp - 0x2c], eax
mov eax, dword [rsi + 0xd2]
mov dword [rbp - 0x28], eax
lea rcx, [r12 + 0x60]
call fcn.18005a8d8
mov dword [rsp + 0x3c], r13d
lea r15, [r12 + 0x58]
mov rcx, r15
call fcn.18005cad4
mov dword [rbp + 0xb0], eax
mov rcx, r15
call fcn.18005c9f4
mov dword [rbp + 0xb4], eax
call fcn.1800197dc
test eax, eax
je 0x18005c1c0
call fcn.1800572cc
mov rbx, rax
call fcn.18005b0f4
sub rbx, rax
mov rax, rbx
cqo
xor rax, rdx
sub rax, rdx
imul rcx, qword [r12 + 0x68], 0x3e8
cmp rax, rcx
mov eax, r14d
jb 0x18005c1c3
mov eax, r13d
mov dword [rbp + 0xb8], eax
lea rdx, [rsp + 0x3c]
mov rcx, r15
call fcn.18005c960
mov dword [rbp + 0xbc], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0xc8], eax
mov eax, r13d
cmp dword [r12 + 0x74], r13d
setbe al
mov dword [rbp + 0xc0], eax
call fcn.18005a800
mov dword [rbp + 0xc4], eax
mov r15, qword [r12 + 0x50]
mov qword [rbp + 0xf0], r15
test r15, r15
je 0x18005c21f
or edx, 0xffffffff
mov rcx, r15
call fcn.180056140
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r13
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp + 0x1a0]
call sub.msvcrt.dll_memset
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.msvcrt.dll__time64]
lea rcx, [rsp + 0x30]
call fcn.180041cd0
nop
lea rdx, [0x18008ad94]
or r12, 0xffffffffffffffff
mov rax, r12
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005c267
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.1800057ac
lea rdx, str.360PopupCfg.dat
mov rax, r12
inc rax
cmp word [rdx + rax*2], r13w
jne 0x18005c288
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.1800057ac
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.1800416ac
mov ebx, eax
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov ecx, r12d
lock xadd dword [rdx + 0x10], ecx
add ecx, r12d
test ecx, ecx
jg 0x18005c2d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movabs rax, 0x6666666666666667
test ebx, ebx
je 0x18005c3a6
mov r11d, dword [rsi + 0xca]
mov r10, r13
mov r8d, r13d
mov rcx, qword [rbp + 0x1e8]
mov r9, qword [rbp + 0x1e0]
sub rcx, r9
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18005c354
mov rcx, r9
cmp dword [rcx], r11d
je 0x18005c32f
add r8d, r14d
add rcx, 0x14
movsxd rax, r8d
cmp rax, rdx
jb 0x18005c319
jmp 0x18005c354
movsxd rax, r8d
lea rcx, [rax + rax*4]
movups xmm0, xmmword [r9 + rcx*4]
movups xmmword [rbp + 0xd0], xmm0
mov eax, dword [r9 + rcx*4 + 0x10]
mov dword [rbp + 0xe0], eax
mov r10, qword [rbp + 0xdc]
mov r8, qword [rbp - 0x70]
mov rax, r8
sub rax, r10
cqo
xor rax, rdx
sub rax, rdx
mov qword [rbp - 0x20], rax
mov ecx, dword [rbp + 0x1cc]
mov dword [rbp - 0x18], ecx
mov ecx, dword [rbp + 0x1d0]
mov dword [rbp - 0x14], ecx
mov ecx, dword [rbp + 0x1d4]
mov dword [rbp - 0x10], ecx
sub r8, qword [rbp + 0x1d8]
mov rax, r8
cqo
xor rax, rdx
sub rax, rdx
mov qword [rbp - 8], rax
mov eax, dword [rbp + 0x1c8]
mov dword [rbp], eax
jmp 0x18005c3be
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r13
mov dword [rbp - 0x10], r13d
mov qword [rbp - 8], rax
mov dword [rbp], r13d
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x68], r13d
mov rbx, r13
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x78], r13d
mov eax, dword [rsi + 0xd6]
mov dword [rbp - 0x80], eax
mov r12d, r13d
lea rax, vtable.CSimpleBuffer.0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.18003fb5c
mov r13, qword [rsp + 0x48]
test r13, r13
jne 0x18005c42a
lea rax, vtable.CSimpleBuffer.0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], r13
jmp 0x18005c5b0
call fcn.18000a7ac
mov rcx, rax
test rax, rax
je 0x18005c69b
mov rax, qword [rax]
call qword [rax + ILCombine]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x68]
call fcn.18003fa7c
lea rcx, [rbp + 0x200]
call fcn.180017b44
nop
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x80]
mov r8, r13
mov rbx, qword [rbp - 0x68]
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.1800188c0
xor r13d, r13d
test eax, eax
je 0x18005c4a0
cmp dword [rsp + 0x78], r13d
jbe 0x18005c4a0
mov r12d, r14d
jmp 0x18005c4ba
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x18005c4b5
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x78], r13d
lea rcx, [rbp + 0x200]
call fcn.180017c90
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18005c4e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, vtable.CSimpleBuffer.0
mov qword [rsp + 0x40], rax
cmp dword [rsp + 0x54], r13d
jne 0x18005c500
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rbx, qword [rsp + 0x70]
test r12d, r12d
je 0x18005c5b0
test rbx, rbx
je 0x18005c52e
lea rcx, [rsp + 0x58]
call fcn.180042088
mov rbx, qword [rsp + 0x70]
jmp 0x18005c531
mov eax, r13d
test eax, eax
je 0x18005c5b0
mov r14d, dword [rsp + 0x58]
test r14d, r14d
je 0x18005c594
mov eax, dword [rsi + 0xca]
mov dword [rbp + 0x180], eax
mov eax, dword [rsi + 0xce]
mov dword [rbp + 0x184], eax
mov eax, dword [rsi + 0xd2]
mov dword [rbp + 0x188], eax
lea rcx, [rbp + 0x18c]
call qword [sym.imp.msvcrt.dll__time64]
mov r8d, dword [rsp + 0x68]
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x1a0]
call fcn.180041bb8
lea rcx, [rbp + 0x1a0]
call fcn.180041b14
mov dword [rdi + 4], r14d
mov eax, dword [rsp + 0x60]
mov dword [rdi + 0xc], eax
mov eax, dword [rsp + 0x5c]
mov dword [rdi + 8], eax
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x10], eax
mov r14d, r13d
test rbx, rbx
je 0x18005c5c3
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov qword [rsp + 0x70], r13
mov r8, qword [rbp + 0x1e0]
test r8, r8
je 0x18005c637
mov rcx, qword [rbp + 0x1f0]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 2
mov rax, r8
cmp rdx, 0x1000
jb 0x18005c61d
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005c695
mov rcx, r8
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r13
test r15, r15
je 0x18005c64b
mov rcx, qword [r15]
test rcx, rcx
je 0x18005c64b
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
nop
lea rcx, [rbp + 0x100]
call fcn.18005f498
nop
lea rcx, [rbp - 0x60]
call fcn.18003f7c8
mov eax, r14d
jmp 0x18005c66b
mov eax, 0x80070057
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.1800782d0
mov rbx, qword [rsp + 0x478]
add rsp, 0x420
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180070720
nop
mov ecx, 0x80004005
call fcn.18000a540
int3