Function at 0x18004d8a0
Capabilities:
Enumerate gui resources
Get common file path

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x4c0]
sub rsp, 0x5c0
lea rdx, [rbp + 0x2a0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
xor r12d, r12d
test eax, eax
je 0x18004da9a
mov qword [rsp + 0x68], r12
lea rax, [rbp + 0x2a0]
mov qword [rbp - 0x80], 7
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp word [rax + rbx*2], r12w
jne 0x18004d8f0
cmp rbx, 7
ja 0x18004d924
mov qword [rsp + 0x78], rbx
lea rdx, [rbp + 0x2a0]
add rbx, rbx
lea rcx, [rsp + 0x68]
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rbx + 0x68], r12w
jmp 0x18004d986
movabs rsi, 0x7ffffffffffffffe
cmp rbx, rsi
ja 0x18004e54f
mov rax, rbx
or rax, 7
cmp rax, rsi
ja 0x18004d952
mov ecx, 0xa
mov rsi, rax
cmp rax, rcx
cmovb rsi, rcx
lea rdx, [rsi + 1]
call fcn.180051db0
mov qword [rsp + 0x78], rbx
lea rdx, [rbp + 0x2a0]
add rbx, rbx
mov qword [rbp - 0x80], rsi
mov r8, rbx
mov rcx, rax
mov rdi, rax
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rbx], r12w
mov qword [rsp + 0x68], rdi
lea rcx, [rbp + 0x110]
call fcn.1800500a0
cmp qword [rbp - 0x80], 8
lea r8, [rsp + 0x68]
mov rax, qword [rsp + 0x78]
lea rdx, [rbp + 0xd0]
cmovae r8, qword [rsp + 0x68]
lea rcx, [rbp + 0x110]
lea r9, [r8 + rax*2]
call fcn.180050e50
lea rcx, [rbp + 0x110]
call fcn.18004ffb0
mov rdx, qword [0x180294e38]
cmp rdx, 0x10
jb 0x18004da07
mov rcx, qword [0x180294e20]
inc rdx
cmp rdx, 0x1000
jb 0x18004da02
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18004da7b
mov rcx, r8
call fcn.1800f8c40
movups xmm1, xmmword [rbp + 0xe0]
mov rdx, qword [rbp - 0x80]
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], 0xf
movups xmm0, xmmword [rbp + 0xd0]
mov byte [rbp + 0xd0], r12b
movups xmmword [0x180294e30], xmm1
movups xmmword [0x180294e20], xmm0
cmp rdx, 8
jb 0x18004da87
mov rcx, qword [rsp + 0x68]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004da82
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004da82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800f8c40
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r12w
mov rsi, qword [0x180294e30]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x1e
jb 0x18004e543
cmp qword [0x180294e38], 0x10
lea rdi, [rbp - 0x60]
mov qword [rsp + 0x5b8], r14
mov ebx, 0xf
mov qword [rsp + 0x5b0], r15
lea r14, [rsi + 0x1e]
lea r15, [0x180294e20]
mov qword [rbp - 0x60], r12
cmovae r15, qword [0x180294e20]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
cmp r14, rbx
jbe 0x18004db76
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x18004db38
mov rbx, rcx
movabs rax, 0x8000000000000027
mov rcx, rax
call fcn.1800f8c04
test rax, rax
je 0x18004de5f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18004db72
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004db60
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004e549
jmp 0x18004db19
test rcx, rcx
je 0x18004db6f
call fcn.1800f8c04
mov rdi, rax
jmp 0x18004db72
mov rdi, r12
mov qword [rbp - 0x60], rdi
mov r8, rsi
mov qword [rbp - 0x50], r14
mov rdx, r15
mov qword [rbp - 0x48], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.AXAXAXAXAXAXAXAXAXAXAXA.bundle]
lea rbx, [rbp - 0x60]
lea rcx, [rbp + 0x238]
movups xmmword [rdi + rsi], xmm0
movsd xmm1, qword [0x180121740]
movsd qword [rdi + rsi + 0x10], xmm1
mov eax, dword [0x180121748]
mov dword [rdi + rsi + 0x18], eax
movzx eax, word [0x18012174c]
mov word [rdi + rsi + 0x1c], ax
lea rax, [0x180121700]
mov byte [rdi + r14], r12b
cmp qword [rbp - 0x48], 0x10
mov qword [rbp + 0x190], rax
cmovae rbx, qword [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r9d, r9d
lea rdx, [rbp + 0x198]
xor r8d, r8d
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rbp + 0x190]
lea rdi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x190], rdi
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x18c], edx
lea rcx, [rbp + 0x198]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov byte [rbp + 0x214], r12b
lea rcx, [rbp + 0x198]
mov qword [rbp + 0x198], rax
mov byte [rbp + 0x209], r12b
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov rax, qword [0x1802bdc60]
mov edx, 0x22
mov rcx, rbx
mov qword [rbp + 0x218], r12
mov qword [rbp + 0x20c], rax
mov qword [rbp + 0x200], r12
lea r8d, [rdx + 0x1e]
call qword [sym.imp.MSVCP140.dll_struct__iobuf____ptr64___cdecl_std::_Fiopen_char_const____ptr64__int__int_]
mov rbx, rax
test rax, rax
je 0x18004dda0
lea rcx, [rbp + 0x198]
mov byte [rbp + 0x214], 1
mov byte [rbp + 0x209], r12b
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
lea r9, [rbp + 0x500]
mov qword [rbp - 0x70], r12
lea r8, [rbp + 0x508]
mov qword [rbp + 0x508], r12
lea rdx, [rbp - 0x70]
mov qword [rbp + 0x500], r12
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__get_stream_buffer_pointers]
mov r9, qword [rbp + 0x500]
lea rcx, [rbp + 0x198]
mov r8, qword [rbp + 0x508]
mov rdx, qword [rbp - 0x70]
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_char____ptr64____ptr64__char____ptr64____ptr64__int____ptr64__char____ptr64____ptr64__char____ptr64____ptr64__int____ptr64____ptr64]
mov rax, qword [0x1802bdc60]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x198]
mov qword [rbp + 0x20c], rax
mov qword [rbp + 0x218], rbx
mov qword [rbp + 0x200], r12
call qword [sym.imp.MSVCP140.dll_public:_class_std::locale___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::getloc_void____ptr64]
mov rcx, rax
call fcn.180052690
mov rcx, rax
mov rbx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::codecvt_base::always_noconv_void_const___ptr64]
test al, al
je 0x18004dd68
mov qword [rbp + 0x200], r12
jmp 0x18004dd7c
lea rcx, [rbp + 0x198]
mov qword [rbp + 0x200], rbx
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18004ddc2
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x18004ddc2
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
jmp 0x18004ddc2
mov rax, qword [rbp + 0x190]
xor r8d, r8d
movsxd rcx, dword [rax + 4]
lea edx, [r8 + 2]
lea rax, [rbp + 0x190]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov r8d, 0x1a55b
lea rdx, str.UnityFS
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x190], rdi
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x18c], edx
lea rcx, [rbp + 0x198]
call fcn.18004f210
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x238]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x18004de6b
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004de66
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004de66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800f8c40
mov qword [rbp - 0x50], r12
lea rcx, [rbp - 0x10]
mov qword [rbp - 0x48], 0xf
movabs rax, 0xd1b130d320d094f8
mov byte [rbp - 0x60], r12b
movabs rsi, 0xfa41645890a277f9
mov qword [rsp + 0x60], rax
movabs r14, 0x7ddf7f494c2e80c6
mov rax, qword [rsp + 0x60]
movabs rbx, 0xb4c2439245bdf5bf
mov qword [rbp - 0x10], rax
movabs rdi, 0x1a7911437ad82004
movabs rax, 0x7615756d03b44269
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 8], rax
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x60]
mov qword [rbp], rax
mov qword [rsp + 0x60], r14
mov rax, qword [rsp + 0x60]
mov qword [rbp + 8], rax
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], rdi
mov qword [rbp + 0xf0], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xf8], rax
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x100], rax
mov qword [rsp + 0x60], r14
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp - 0x10]
movdqa xmm1, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0xf0]
mov qword [rbp + 0x108], rax
pxor xmm1, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm1
movdqa xmmword [rbp - 0x10], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x180296ae0], rax
lea rcx, [rbp - 0x30]
movabs rax, 0xd5ae13eb31d49bea
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x30], rax
movabs rax, 0x1a157d2754aa457d
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xc8], rax
movdqa xmm0, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call fcn.18000da90
call fcn.18000ea60
call fcn.1800118f0
call fcn.180007680
mov rax, qword [0x180296ac8]
test rax, rax
jne 0x18004e020
nop word [rax + rax]
lea rdx, [0x180296ac8]
lea rcx, [0x18004e560]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [0x180296ac8]
test rax, rax
je 0x18004e000
mov qword [rbp + 0xa0], rax
xor r9d, r9d
lea rax, [rbp - 0x40]
mov qword [rbp + 0x4f8], r12
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov qword [rsp + 0x50], r12
lea rax, [rbp - 0x38]
mov qword [rsp + 0x48], rax
lea edx, [r9 + 1]
lea rax, [rbp + 0x4f8]
mov qword [rbp - 0x38], r12
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x70]
mov qword [rbp - 0x40], r12
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x4f0]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x4f0], 0xb000
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
mov dword [rbp + 0x90], r12d
mov qword [rbp + 0x98], 1
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0x80], 0x1c
mov dword [rbp + 0x94], 0x20
mov dword [rbp + 0x8c], 1
mov qword [rbp + 0xa8], 1
mov dword [rbp + 0x88], r12d
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jns 0x18004e46e
movabs rcx, 0xb4ae43fb45dcf5f9
mov qword [rbp + 0x500], rcx
mov rax, qword [rbp + 0x500]
mov qword [rbp - 0x70], rax
movabs rax, 0x1a7911267aaa2071
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp - 0x68], rax
mov qword [rbp + 0x500], rbx
mov rax, qword [rbp + 0x500]
mov qword [rbp - 0x20], rax
mov qword [rbp + 0x500], rdi
mov rax, qword [rbp + 0x500]
movdqa xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x18], rax
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp + 0x500], rcx
movabs rcx, 0x93040a612dfada2e
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x10], rax
movabs rax, 0x1a0d11637abc2061
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x18], rax
movabs rax, 0xfa33643b90827796
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x20], rax
movabs rax, 0x7dba7f3d4c4f80a3
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x28], rax
movabs rax, 0x4a56747510f7ace3
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x30], rax
movabs rax, 0x6e74d0878e3907c9
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x38], rax
movabs rax, 0x78df951560bfb028
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x40], rax
movabs rax, 0xf4dba0dc34714ebf
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x48], rax
movabs rax, 0x37cf017978200603
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x50], rax
movabs rax, 0xc0c724fb2c78204d
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x58], rax
movabs rax, 0xe0061059b2856a69
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x500], rcx
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x500], rbx
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x500], rdi
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x500], rsi
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x500], r14
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x128], rax
movabs rax, 0x4a12744610b3acc3
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x130], rax
movabs rax, 0x6e10d0a78e0807f8
mov qword [rbp + 0x500], rax
lea r8, [rbp - 0x70]
mov rax, qword [rbp + 0x500]
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x138], rax
mov r9d, 0x10
movabs rax, 0x78bc957c60c9b04d
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x140], rax
movabs rax, 0xf4b5a0bd34514eda
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x148], rax
movabs rax, 0x37b8010a78000667
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x150], rax
movabs rax, 0xc0a424db2c08202c
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x158], rax
movabs rax, 0xe0681030b2e46a01
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x500], rcx
xor ecx, ecx
mov rax, qword [rbp + 0x500]
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x110]
movdqa xmm1, xmmword [rbp + 0x20]
pxor xmm1, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [rbp + 0x40]
pxor xmm1, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm0, xmmword [rbp + 0x50]
pxor xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm1, xmmword [rbp + 0x60]
mov qword [rbp + 0x168], rax
pxor xmm1, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp + 0x60], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x18004e525
mov rax, qword [rbp + 0x4f8]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x40]
mov qword [0x180296a10], rax
mov rax, qword [rcx + 0x68]
mov rcx, qword [rbp - 0x40]
mov qword [0x180296a38], rax
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x4f8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x180296ac8]
lea r8, [0x18004d0b0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x180296c80], rax
call fcn.18008d1e0
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.18008d710
lea rdx, [0x18004d260]
lea rcx, [0x180296a10]
call fcn.18008ca10
call fcn.18008d260
call fcn.18008d1e0
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.18008d710
lea rdx, [0x18004d1d0]
lea rcx, [0x180296a38]
call fcn.18008ca10
call fcn.18008d260
mov r14, qword [rsp + 0x5b8]
mov r15, qword [rsp + 0x5b0]
add rsp, 0x5c0
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800065c0
int3
call fcn.1800063e0
int3
call fcn.1800065c0
int3