Function at 0x18000be20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov dword [rax + 8], ecx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r13, qword [rsp + 0x98]
mov ecx, 0x58
mov r12, r9
mov r14, r8
mov r15, rdx
and qword [r13], 0
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_malloc]
nop dword [rax + rax]
xor r9d, r9d
mov rbx, rax
test rax, rax
je 0x18000c0e2
mov qword [rax], r9
mov qword [rax + 8], r9
mov qword [rax + 0x10], r9
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], 0xb5
mov qword [rax + 0x20], r9
mov qword [rax + 0x28], r9
mov qword [rax + 0x30], r9
mov dword [rax + 0x38], r9d
mov qword [rax + 0x50], r9
test r14, r14
je 0x18000bf76
or rbp, 0xffffffffffffffff
inc rbp
cmp word [r14 + rbp*2], r9w
jne 0x18000beac
mov rdx, rbp
mov rcx, rbx
call fcn.18000bcbc
xor r9d, r9d
mov esi, eax
test eax, eax
js 0x18000bf36
mov rcx, qword [rbx]
lea rdx, [rbp + 1]
test rdx, rdx
je 0x18000bf1e
cmp rdx, 0x7fffffff
ja 0x18000bf26
mov rdi, rbx
cmp rbp, 0x7ffffffe
ja 0x18000bf29
sub r14, rcx
lea r8, [rdx - 1]
test r8, r8
je 0x18000bf0d
movzx eax, word [r14 + rcx]
test ax, ax
je 0x18000bf0d
mov word [rcx], ax
mov rdx, r8
add rcx, 2
jmp 0x18000beee
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r9w
jmp 0x18000bf2d
mov rdi, rbx
test rdx, rdx
je 0x18000bf2d
mov rdi, rbx
mov word [rcx], r9w
lea r14, [rdi + 8]
mov qword [r14], rbp
jmp 0x18000bf3d
lea r14, [rbx + 8]
mov rdi, rbx
test esi, esi
jns 0x18000bf84
mov rcx, qword [rdi]
test rcx, rcx
je 0x18000bf5b
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
xor r9d, r9d
mov qword [rdi], r9
mov rcx, rdi
mov qword [r14], r9
mov qword [rbx + 0x10], r9
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_free]
nop dword [rax + rax]
jmp 0x18000c0e7
mov qword [rax + 8], r9
mov esi, r9d
mov qword [rax + 0x10], r9
mov rdi, rbx
mov r14d, dword [rsp + 0x60]
cmp r14d, 1
jne 0x18000bfb1
mov rcx, qword [r15 + 0x48]
mov rax, rcx
neg rax
sbb edx, edx
and edx, 0x4e
dec edx
mov dword [rbx + 0x1c], edx
call qword [sym.imp.GDI32.dll_DeleteObject]
nop dword [rax + rax]
jmp 0x18000bfbd
mov rax, qword [r15 + 0x48]
or dword [rbx + 0x1c], 0xffffffff
mov qword [rdi + 0x20], rax
mov rax, qword [r15 + 0x20]
xor ecx, ecx
mov qword [rdi + 0x28], rax
mov rax, qword [r15 + 0x28]
mov qword [rdi + 0x30], rax
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x18000bfe4
mov eax, dword [rax + 0x40]
jmp 0x18000c07e
mov rax, qword [rsp + 0x80]
cmp qword [rax + 8], rcx
jbe 0x18000bffd
mov rax, qword [rax]
mov rcx, qword [rax]
mov eax, dword [rcx + 0x40]
jmp 0x18000c076
test r12, r12
je 0x18000c01b
mov eax, dword [r12]
mov dword [rsp + 0x98], eax
mov eax, dword [r12 + 4]
mov dword [rsp + 0x9c], eax
jmp 0x18000c023
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x98]
mov edx, 2
call qword [sym.imp.USER32.dll_MonitorFromPoint]
nop dword [rax + rax]
lea r9, [rsp + 0x24]
xor edx, edx
mov rcx, rax
lea r8, [rsp + 0x20]
call qword [sym.imp.api_ms_win_shcore_scaling_l1_1_1.dll_GetDpiForMonitor]
nop dword [rax + rax]
xor ecx, ecx
test eax, eax
jns 0x18000c07a
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0x98]
call fcn.18000a5dc
mov eax, dword [rsp + 0x98]
xor ecx, ecx
jmp 0x18000c07e
mov eax, dword [rsp + 0x20]
mov dword [rdi + 0x40], eax
mov edx, 0x200
mov eax, 0x800
test dword [r15 + 8], eax
je 0x18000c09b
mov dword [rbx + 0x18], eax
mov eax, 0xa00
jmp 0x18000c0b4
cmp qword [r15 + 0x18], rcx
je 0x18000c0af
mov dword [rbx + 0x18], 0x10
mov eax, 0x210
jmp 0x18000c0b4
mov dword [rbx + 0x18], ecx
mov eax, edx
test dword [r15 + 8], edx
je 0x18000c0bd
mov dword [rbx + 0x18], eax
mov al, byte [0x180016d58]
mov byte [rdi + 0x44], al
mov eax, dword [rsp + 0x90]
shr eax, 3
and al, 1
mov dword [rdi + 0x38], ecx
mov byte [rdi + 0x45], al
mov dword [rdi + 0x3c], r14d
mov qword [r13], rdi
jmp 0x18000c0e7
mov esi, 0x8007000e
mov rbx, qword [rsp + 0x68]
mov eax, esi
mov rsi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret