Function at 0x18005a9a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x218
mov qword [rsp + 0x180], 0xfffffffffffffffe
mov eax, SafeArrayUnaccessData
mov word [rsp + 0x2c], ax
movsx rax, word [rsp + 0x2c]
lea rcx, [0x180095500]
cmp dword [rcx + rax*4], 1
jne 0x18005aa06
movsx rax, word [rsp + 0x2c]
lea rcx, [0x180095500]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x2c]
lea rdx, [0x180095500]
mov dword [rdx + rcx*4], eax
mov rcx, qword [rsp + 0x228]
call fcn.180063460
mov rcx, qword [rsp + 0x230]
mov ecx, dword [rcx]
or ecx, eax
mov dword [rsp + 0x34], ecx
mov rax, qword [rsp + 0x230]
mov ecx, dword [rsp + 0x34]
mov dword [rax], ecx
mov edx, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x220]
call fcn.1800632a0
lea rax, [0x18008aa24]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x60], 0
mov rax, qword [rsp + 0xc8]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x61
jne 0x18005aab1
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x18005aab1
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 0xc
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rcx, qword [rsp + 0x220]
call fcn.180063210
and eax, 0x80
test eax, eax
je 0x18005aaf6
mov rcx, qword [rsp + 0x228]
call fcn.180063210
and eax, 3
mov rcx, qword [rsp + 0x230]
mov r8d, dword [rcx]
mov edx, eax
mov rcx, qword [rsp + 0x220]
call fcn.1800633c0
jmp 0x18005abdd
mov dword [rsp + 0x58], 0
mov eax, dword [rsp + 0x58]
cmp eax, 0x194ab329
jne 0x18005ab24
lea r8, str.Local5415215762264372832200594328293530725689663273289158608x
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov qword [rsp + 0x1a0], rax
jmp 0x18005ab4c
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rcx, qword [rsp + 0x220]
call fcn.180025f60
cmp qword [rax], 0
je 0x18005ab70
mov rcx, qword [rsp + 0x220]
call fcn.180063460
test eax, eax
jne 0x18005ab87
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
mov rcx, qword [rsp + 0x220]
call fcn.180063420
mov dword [rsp + 0x7c], 0
mov eax, dword [rsp + 0x7c]
cmp eax, 0x351a839
jne 0x18005abb5
lea r8, str.Local5662985289313469122686028424468479312634665136849361712x
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov qword [rsp + 0x1a8], rax
jmp 0x18005abdd
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
and eax, 0x800000
test eax, eax
je 0x18005acc7
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 2
lea r8, [0x180095500]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 1
lea r8, [0x180095500]
mov edx, dword [r8 + rdx]
cmp dword [rcx + rax], edx
jae 0x18005ac72
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 0x230]
add rax, 4
mov rdx, qword [rsp + 0x228]
mov rcx, rax
call fcn.180058f20
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x18005aca2
mov eax, dword [rsp + 0x40]
jmp 0x18005b8d7
mov dword [rsp + 0x90], 6
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [rsp + 0x90]
movsxd rcx, ecx
lea rdx, [0x180095500]
mov dword [rdx + rcx*4], eax
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
and eax, 0x800000
test eax, eax
je 0x18005ace4
mov dword [rsp + 0x38], 0x800001
jmp 0x18005acec
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x68], eax
xor r9d, r9d
mov r8, qword [rsp + 0x220]
mov edx, 1
lea rcx, [rsp + 0x120]
call fcn.1800628f0
xor r9d, r9d
mov r8, qword [rsp + 0x228]
mov edx, dword [rsp + 0x68]
lea rcx, [rsp + 0x1b0]
call fcn.1800628f0
lea rcx, [rsp + 0x1b0]
call fcn.180063230
mov r8d, SafeArrayGetDim
mov rdx, qword [rsp + 0x230]
mov rcx, rax
call fcn.180049bd0
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
and eax, 0x20000
test eax, eax
je 0x18005b0be
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 2
lea r8, [0x180095500]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 1
lea r8, [0x180095500]
mov edx, dword [r8 + rdx]
cmp dword [rcx + rax], edx
jae 0x18005ade5
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov dword [rsp + 0xb0], 0
mov eax, dword [rsp + 0xb0]
cmp eax, 0x253ff6a5
jne 0x18005ae19
lea r8, str.Local208202904500515500325848976136511232024344369281789970712x
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov qword [rsp + 0x198], rax
jmp 0x18005ae41
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
and eax, 0x200000
test eax, eax
je 0x18005afaf
call fcn.180063310
and eax, 0x3f
mov r8d, eax
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov dword [rsp + 0x78], 0
mov eax, dword [rsp + 0x78]
cmp eax, 0xa72f50d9
jne 0x18005aec5
lea r8, str.Local763280800381352263612281364010995642442085165600149198868x
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov qword [rsp + 0x188], rax
jmp 0x18005aeed
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
call fcn.180063310
and eax, 0x3f
mov r8d, eax
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 2
lea r8, [0x180095500]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 1
lea r8, [0x180095500]
mov edx, dword [r8 + rdx]
cmp dword [rcx + rax], edx
jae 0x18005afaa
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
jmp 0x18005b09b
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 2
lea r8, [0x180095500]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 1
lea r8, [0x180095500]
mov edx, dword [r8 + rdx]
cmp dword [rcx + rax], edx
jae 0x18005b02d
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
xor r8d, r8d
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
xor r8d, r8d
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov ecx, dword [rsp + 0x238]
call fcn.180063390
mov ecx, dword [rsp + 0x238]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x238], eax
mov dword [rsp + 0x24], 0
mov qword [rsp + 0x48], 0
lea rcx, [rsp + 0x1b0]
call fcn.180063140
test rax, rax
je 0x18005b7f1
mov dword [rsp + 0x24], 0
lea rax, [0x18008aa74]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x70], 0
mov rax, qword [rsp + 0xd8]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x61
jne 0x18005b15c
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x18005b15c
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 0xc
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x1b0]
call fcn.180059970
mov byte [rsp + 0x22], al
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x1b0]
call fcn.180059970
mov byte [rsp + 0x21], al
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x1b0]
call fcn.180059970
mov byte [rsp + 0x20], al
mov dword [rsp + 0xa0], SafeArrayGetDim
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [rsp + 0xa0]
movsxd rcx, ecx
lea rdx, [0x180095500]
mov dword [rdx + rcx*4], eax
movzx eax, byte [rsp + 0x22]
and eax, 0xfc
sar eax, 2
mov r8d, eax
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov dword [rsp + 0x80], 0
mov eax, dword [rsp + 0x80]
cmp eax, 0x373c351
jne 0x18005b23b
lea r8, str.Local242520501615173878815898300067602016027325984001498736928x
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov qword [rsp + 0x190], rax
jmp 0x18005b263
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
movzx eax, byte [rsp + 0x22]
and eax, 3
shl eax, 4
movzx ecx, byte [rsp + 0x21]
and ecx, 0xf0
sar ecx, 4
add eax, ecx
mov r8d, eax
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
cmp dword [rsp + 0x24], 1
jle 0x18005b30c
movzx eax, byte [rsp + 0x21]
and eax, 0xf
movzx ecx, byte [rsp + 0x20]
and ecx, 0xc0
sar ecx, 6
lea eax, [rcx + rax*4]
mov r8d, eax
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
lea rax, [0x18008ab94]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x50], 0
mov rax, qword [rsp + 0x110]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x61
jne 0x18005b37b
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x18005b37b
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 0xc
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
cmp dword [rsp + 0x24], 2
jle 0x18005b3c1
movzx eax, byte [rsp + 0x20]
and eax, 0x3f
mov r8d, eax
mov rax, qword [rsp + 0x230]
mov edx, dword [rax]
lea rcx, [rsp + 0x238]
call fcn.180062fc0
mov eax, eax
mov rcx, qword [rsp + 0x240]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
xor eax, 0xfffffa5b
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
movzx eax, byte [rsp + 0x20]
and eax, 0xaa
test eax, eax
je 0x18005b404
mov dword [rsp + 0x3c], 1
jmp 0x18005b40c
mov dword [rsp + 0x3c], 0
movsxd rax, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0x48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
xor eax, 0xfffffa52
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
add eax, 0x4020a1d
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
xor eax, 0x420000
and eax, 0x420000
test eax, eax
jne 0x18005b6a4
mov rax, qword [0x180095438]
cmp qword [rsp + 0x48], rax
jbe 0x18005b6a4
cmp qword [0x18011ff60], 0
jne 0x18005b51b
mov ecx, 0x38
call fcn.1800499d8
mov qword [rsp + 0xb8], rax
cmp qword [rsp + 0xb8], 0
je 0x18005b4f0
mov r8d, SafeArrayCopy
lea rdx, str.___________:
mov rcx, qword [rsp + 0xb8]
call fcn.180056db0
mov qword [rsp + 0xc0], rax
jmp 0x18005b4fc
mov qword [rsp + 0xc0], 0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
mov qword [0x18011ff60], rax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
xor eax, 0xfffffa3b
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov qword [rsp + 0x48], 0
call fcn.180063310
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantCopyInd]
xor edx, edx
div ecx
mov eax, edx
add eax, 0x3e8
mov eax, eax
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x88], 0
jmp 0x18005b598
mov rax, qword [rsp + 0x88]
inc rax
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0xf0]
cmp qword [rsp + 0x88], rax
jae 0x18005b6a4
lea rax, [0x18008abe4]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x98], 0
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x61
jne 0x18005b629
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x18005b629
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 0xc
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov rcx, qword [0x18011ff60]
call fcn.180001c50
mov qword [rsp + 0xf8], rax
call fcn.180063310
mov eax, eax
mov qword [rsp + 0xe0], rax
mov rcx, qword [0x18011ff60]
call fcn.180025f60
mov qword [rsp + 0xe8], rax
xor edx, edx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
mov rcx, qword [rsp + 0xe8]
div qword [rcx]
mov rax, rdx
mov rcx, qword [rsp + 0xf8]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x28], al
movzx eax, byte [rsp + 0x28]
mov edx, eax
lea rcx, [rsp + 0x120]
call fcn.18005a020
jmp 0x18005b585
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
xor eax, 0x60000
and eax, 0x60000
test eax, eax
jne 0x18005b7ec
movzx eax, byte [rsp + 0x20]
and eax, 7
cmp eax, 7
jne 0x18005b7ec
movzx eax, byte [rsp + 0x20]
and eax, 0xa0
cmp eax, 0xa0
jne 0x18005b79d
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 2
lea r8, [0x180095500]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180095500]
mov edx, 4
imul rdx, rdx, 1
lea r8, [0x180095500]
mov edx, dword [r8 + rdx]
cmp dword [rcx + rax], edx
jae 0x18005b764
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov edx, 0x20
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov dword [rsp + 0xb4], SafeArrayUnaccessData
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [rsp + 0xb4]
movsxd rcx, ecx
lea rdx, [0x180095500]
mov dword [rdx + rcx*4], eax
jmp 0x18005b7ec
mov edx, SafeArrayGetDim
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov edx, 0xa
lea rcx, [rsp + 0x120]
call fcn.18005a020
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180095500]
mov eax, dword [rcx + rax]
xor eax, 0xfffff9f5
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
jmp 0x18005b0cf
mov rax, qword [rsp + 0x230]
mov eax, dword [rax]
and eax, 0x10000
test eax, eax
je 0x18005b8ba
lea rax, [0x18008ac74]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xa8], 0
mov rax, qword [rsp + 0xd0]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x61
jne 0x18005b883
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0xa8], rax
cmp qword [rsp + 0xa8], 0
jne 0x18005b883
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180095500]
mov edx, dword [rcx + rax]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 0xc
lea rdx, [0x180095500]
mov dword [rdx + rcx], eax
mov dword [rsp + 0x30], 0
jmp 0x18005b897
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, 3
sub eax, dword [rsp + 0x24]
cmp dword [rsp + 0x30], eax
jge 0x18005b8ba
mov edx, 0x3d
lea rcx, [rsp + 0x120]
call fcn.18005a020
jmp 0x18005b88d
lea rcx, [rsp + 0x120]
call fcn.18005a7b0
movzx eax, al
test eax, eax
jne 0x18005b8d5
mov eax, 0xfffffffc
jmp 0x18005b8d7
xor eax, eax
add rsp, 0x218
ret