Function at 0x1800409f0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov rdi, qword [rbp - 0x80]
mov r11d, edx
mov ebx, dword [rbp + 0x98]
mov r10, r8
mov r13, r9
mov qword [rbp - 0x80], rdi
mov r9d, dword [rbp + 0x98]
mov rdx, rcx
mov ecx, dword [rbp + 0x98]
lea r8d, [r11 + 0x12]
mov dword [rsp + 0x6c], r8d
mov eax, r11d
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x68], r9d
mov dword [rbp - 0x78], ecx
cmp r11d, r8d
jae 0x180041090
mov r15d, dword [rbp + 0x98]
mov r14d, dword [rbp + 0x98]
mov r12d, dword [rbp + 0x98]
mov r13d, dword [rbp + 0x98]
mov rsi, qword [rbp + 0xa8]
add eax, 0xffffffb1
lea r11, [0x180000000]
cmp eax, 0x4f
ja case.0x180040aa9.97
movzx eax, byte [r11 + rax + 0x418a4]
mov ecx, dword [r11 + rax*4 + 0x41858]
add rcx, r11
jmp rcx
lea eax, [r9 + r9]
xor r8d, r8d
lea r9, [rsp + 0x60]
mov dword [rsp + 0x60], eax
lea rcx, [rbp + 0x28]
lea edx, [r8 + 0x6d]
call fcn.180058000
test eax, eax
jne 0x1800417d3
mov r9d, dword [rsp + 0x68]
mov r8d, dword [rsp + 0x6c]
mov eax, dword [rsp + 0x78]
mov r10, qword [rbp + 0xa0]
inc eax
mov dword [rsp + 0x78], eax
cmp eax, r8d
jae 0x180041082
mov rdx, qword [rbp + 0x90]
jmp 0x180040a86
xor r8d, r8d
mov dword [rsp + 0x60], r9d
lea r9, [rsp + 0x60]
lea rcx, [rbp - 0x50]
lea edx, [r8 + 0x6d]
call fcn.180058000
test eax, eax
jne 0x180041835
mov rax, qword [rbp + 0xa0]
lea r9, [rsp + 0x60]
xor r8d, r8d
lea rcx, [rbp + 0x10]
mov eax, dword [rax]
sub eax, dword [rsp + 0x68]
lea edx, [r8 + 0x6d]
mov dword [rsp + 0x60], eax
call fcn.180058000
test eax, eax
je 0x180040ad0
mov edi, 0x3b8
lea rdx, [rbp - 0x50]
mov ecx, 0x32
call fcn.18003ef60
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
test r10, r10
jne 0x180040bce
xor ecx, ecx
lea rax, str._serviceId
mov qword [rsp + 0x58], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x50], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x48], rcx
xor r8d, r8d
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
mov r8d, dword [rsp + 0x6c]
mov r9d, dword [rsp + 0x68]
test rsi, rsi
jne case.0x180040aa9.97
lea rax, str.Names_count
xor ecx, ecx
lea rdx, [0x180077149]
mov qword [rsp + 0x58], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x50], rcx
xor r8d, r8d
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
jmp 0x180040ad0
mov eax, r15d
movzx ecx, byte [rax + r10]
test cl, cl
jns 0x180040d0a
mov edx, 0x20
cmp edx, 0x20
je 0x180040ce7
cmp edx, 0x3e0
je 0x180040c95
cmp edx, 0x7a0
je 0x180040c8d
cmp edx, 0xb60
jne 0x180040cf3
test r14d, r14d
je 0x180040c88
nop word [rax + rax]
mov eax, r15d
inc r15d
shl r12d, 8
movzx ecx, byte [rax + r10]
or r12d, ecx
add r14d, 0xffffffff
jne 0x180040c70
dec r14d
jmp 0x180040cf3
xor r12d, r12d
inc r15d
jmp 0x180040cf3
lea eax, [r14 - 1]
cmp eax, 2
ja 0x180040cad
mov rcx, qword [rbp + 0xb0]
lea eax, [r14 + r15]
cmp eax, dword [rcx]
jbe 0x180040cf3
mov eax, 0x4c
cmp eax, 0x4c
je 0x180040cd4
cmp eax, 0x1a6c
jne 0x180040cd9
mov eax, ebx
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ebx, 7
add eax, 0x1a20
cmp eax, 0x3440
jbe 0x180040cb2
jmp 0x180040cf3
mov eax, r15d
movzx r14d, byte [rax + r10]
and r14d, 0x7f
add edx, 0x3c0
cmp edx, 0xf00
jbe 0x180040c40
jmp case.0x180040aa9.97
mov r12d, ecx
and r12d, 0x7f
inc r15d
jmp case.0x180040aa9.97
test rdi, rdi
je 0x180041060
xor edx, edx
mov rcx, rdi
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
jmp 0x180040ad0
mov dword [rbp - 0x78], 0xfffffffe
jmp case.0x180040aa9.97
test rdx, rdx
jne case.0x180040aa9.97
lea rax, str.D3DRS_CULLMODE
jmp 0x180040bde
mov rax, qword [rbp + 0xb0]
cmp dword [rax], 2
jb 0x180040d71
movzx eax, byte [r10]
and al, 0x1f
cmp al, 0x13
je case.0x180040aa9.97
mov eax, 7
jmp 0x180040cc0
test r10, r10
jne 0x180040dd6
xor ecx, ecx
lea rax, str.isi_Walloon
mov qword [rsp + 0x58], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x50], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x48], rcx
xor r8d, r8d
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
mov r10, qword [rbp + 0xa0]
mov eax, dword [r10 + 4]
lea rcx, [rsp + 0x60]
xor r9d, r9d
mov dword [rsp + 0x60], eax
xor r8d, r8d
lea edx, [r9 + 0x69]
call fcn.1800084d0
test eax, eax
jne 0x180041070
mov eax, 0xc9
nop
cmp eax, 0xc9
je 0x180040e14
cmp eax, 0x180
je 0x180040cbe
jmp 0x180040e19
mov ebx, 0x7fffffff
add eax, 0xb7
cmp eax, 0x237
jb 0x180040e00
jmp 0x180040ad0
mov r15d, 1
jmp case.0x180040aa9.97
xor r8d, r8d
mov dword [rsp + 0x60], r9d
lea r9, [rsp + 0x60]
lea rcx, [rbp - 0x38]
lea edx, [r8 + 0x6d]
call fcn.180058000
test eax, eax
je 0x180040ad0
mov edi, 0x37f
lea rdx, [rbp + 0x10]
jmp 0x180040b52
mov rax, qword [rbp + 0xb0]
lea rcx, [rbp - 8]
xor r8d, r8d
mov eax, dword [rax]
sub eax, r9d
lea edx, [r8 + 0x6d]
lea r9, [rsp + 0x60]
mov dword [rsp + 0x60], eax
call fcn.180058000
test eax, eax
jne 0x180041793
mov ecx, dword [rsp + 0x68]
lea r9, [rsp + 0x60]
xor r8d, r8d
lea eax, [rcx + rcx]
lea rcx, [rbp - 0x68]
mov dword [rsp + 0x60], eax
lea edx, [r8 + 0x6d]
call fcn.180058000
test eax, eax
jne 0x1800417ba
jmp 0x180040ad0
mov r9d, dword [r10]
mov rax, qword [rbp + 0xb0]
mov eax, dword [rax]
cmp r9d, eax
cmovge r9d, eax
sar r9d, 1
mov dword [rsp + 0x68], r9d
jmp case.0x180040aa9.97
mov rax, qword [rbp + 0xb0]
lea r9, [rsp + 0x70]
mov r8d, 0xd3
lea rdx, [rsp + 0x60]
mov rcx, r10
mov eax, dword [rax]
mov dword [rsp + 0x60], eax
call fcn.180057a00
test eax, eax
je 0x180040ad0
mov edx, 0x4e
mov ecx, edx
sub ecx, 0x4e
je 0x180040f23
cmp ecx, 0x38
je 0x180040cbe
jmp 0x180040f25
mov ebx, eax
add edx, 0x38
cmp edx, 0xbe
jb 0x180040f11
jmp 0x180040ad0
lea rdx, [0x180078c50]
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rdi, rax
mov qword [rbp - 0x80], rax
jmp 0x180040ad0
xor r14d, r14d
test r12d, r12d
je case.0x180040aa9.97
mov rsi, qword [rbp + 0xa8]
nop dword [rax]
nop dword [rax + rax]
mov edi, IUnknown_GetWindow
mov eax, edi
sub eax, 0xa8
je 0x180040fba
cmp eax, 0x58
jne 0x180040fe6
cmp r13d, 0xffffffff
jne 0x180040fb5
mov eax, 0x9f
nop
cmp eax, 0x9f
je 0x180040fa4
cmp eax, 0x27c0
je 0x180040cbe
jmp 0x180040fa9
mov ebx, reloc.SHELL32.dll_ILFindLastID
add eax, 0x2721
cmp eax, 0x4e42
jbe 0x180040f90
mov byte [rsi], r13b
jmp 0x180040fe6
mov eax, r15d
lea r8, [rsp + 0x60]
xor r9d, r9d
movzx ecx, byte [rax + r10]
mov dword [rsp + 0x60], ecx
lea edx, [r9 + 0x1c]
xor ecx, ecx
call fcn.1800324e0
mov r10, qword [rbp + 0xa0]
mov r13d, eax
inc r15d
add edi, 0x58
cmp edi, 0x158
jb 0x180040f75
inc r14d
inc rsi
cmp r14d, r12d
jb 0x180040f70
mov rdi, qword [rbp - 0x80]
mov rsi, qword [rbp + 0xa8]
jmp 0x180040ad0
cmp r12d, dword [rdx]
jbe 0x18004103d
mov ecx, 0x17
nop word [rax + rax]
mov eax, ecx
sub eax, 0x16
je 0x180040cbe
cmp eax, 1
jne 0x180041036
mov dword [rdx], r12d
lea ebx, [rax + 5]
dec ecx
cmp ecx, 0x15
ja 0x180041020
mov rcx, qword [rbp + 0xb0]
lea eax, [r12 + r15]
cmp eax, dword [rcx]
ja 0x180040d71
jmp case.0x180040aa9.97
mov dword [rdx], r14d
xor ebx, ebx
jmp case.0x180040aa9.97
mov eax, 1
jmp 0x180040cc0
mov rax, qword [rbp + 0xa0]
mov rax, qword [rax + 8]
mov eax, dword [rax]
jmp 0x180040cc0
mov r13, qword [rbp + 0xa8]
mov r11d, dword [rbp + 0x98]
lea ecx, [r11 + 0xa9e]
mov eax, r11d
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x6c], ecx
cmp r11d, ecx
jae 0x1800414a7
mov ecx, dword [rsp + 0x70]
mov rsi, qword [rbp - 0x80]
mov r14, qword [rbp - 0x80]
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp - 0x80]
mov edx, dword [rsp + 0x6c]
cmp eax, 0x1a1
ja 0x1800412ef
je 0x1800412ce
cmp eax, 0xe6
ja 0x18004125c
je 0x180041168
sub eax, 0x4f
je 0x180041147
sub eax, 0x12
je 0x18004111d
sub eax, 0x12
je 0x180041102
cmp eax, 0x24
je 0x180040cbe
jmp 0x18004147c
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov rcx, rdi
mov dword [r13], eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_rewind]
jmp 0x18004146f
lea eax, [r9 + r9]
xor r8d, r8d
lea r9, [rsp + 0x78]
mov dword [rsp + 0x78], eax
lea rcx, [rbp - 0x20]
lea edx, [r8 + 0x6d]
call fcn.180058000
test eax, eax
jne 0x1800416b3
jmp 0x18004146f
movsxd rcx, ecx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x70], rax
cmp rax, 0
jne 0x18004146f
mov eax, 0xfffffffe
jmp 0x180040cc0
mov rax, qword [rbp + 0xb0]
lea rdx, [rsp + 0x78]
mov rcx, qword [rbp - 0x70]
mov r9, r10
mov r8d, 0x62
mov eax, dword [rax]
mov dword [rsp + 0x78], eax
call fcn.180032030
mov r13d, eax
test eax, eax
je 0x1800411d3
mov edi, 0x10e
cmp edi, 0x10e
je 0x1800411bb
cmp edi, 0xcb8e
je 0x1800411b6
cmp edi, 0x1960e
je 0x180040cbe
jmp 0x1800411c5
mov ebx, r13d
jmp 0x1800411c5
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add edi, 0xca80
cmp edi, 0x25f80
jbe 0x180041198
mov ecx, dword [rsp + 0x70]
xor edi, edi
mov dword [rsp + 0x78], edi
test ecx, ecx
jle 0x180041253
mov r13, qword [rbp - 0x70]
nop word [rax + rax]
movsx ecx, byte [r13]
mov rdx, qword [rbp + 0xa8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
cmp eax, 0xffffffff
jne 0x180041242
mov edi, 0xdf
nop dword [rax]
mov eax, edi
sub eax, 0xdf
je 0x180041224
cmp eax, 0x62
je 0x180040cbe
jmp 0x180041233
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, 0xfffffffd
add edi, 0x62
cmp edi, 0x1a3
jb 0x180041210
mov edi, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x70]
inc edi
inc r13
mov dword [rsp + 0x78], edi
cmp edi, ecx
jl 0x1800411f0
mov rdi, qword [rbp - 0x80]
jmp 0x180041473
sub eax, 0xf8
je 0x1800412c1
sub eax, 0x12
je 0x180041295
sub eax, 0x73
je 0x180041284
cmp eax, 0x12
jne 0x18004147c
mov eax, dword [r10]
sub eax, r9d
mov dword [rbp + 0x10], eax
jmp 0x18004147c
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor ebx, ebx
jmp 0x18004146f
mov eax, dword [r13]
inc eax
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rbp + 0xb0]
xor edx, edx
mov qword [rcx], rax
mov rcx, rax
movsxd r8, dword [r13]
call sub.VCRUNTIME140.dll_memset
jmp 0x18004146f
mov dword [rbp - 0x38], r9d
mov dword [rbp - 0x50], r9d
jmp 0x18004147c
mov rax, qword [rbp + 0xb0]
mov r9, rdi
movsxd r8, dword [r13]
mov edx, 1
mov rcx, qword [rax]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
jmp 0x18004146f
cmp eax, 0x2cf
ja 0x18004143a
je 0x180040cbe
sub eax, 0x214
je 0x180040cbe
sub eax, 0x12
je 0x180041429
sub eax, 0x12
je 0x18004141c
cmp eax, 0x85
jne 0x18004147c
mov edx, 0x52
nop dword [rax]
cmp edx, 0x2a9a
ja 0x1800413a8
je 0x1800413a2
cmp edx, 0x52
je 0x180041391
cmp edx, 0xe6a
je 0x180041387
cmp edx, 0x1c82
jne 0x180041404
test r9d, r9d
jle 0x180041404
mov ecx, r9d
nop
mov eax, dword [r15]
add r15, 4
mov dword [rsi], eax
add rsi, 4
mov eax, dword [r12]
add r12, 4
mov dword [r14], eax
add r14, 4
sub rcx, 1
jne 0x180041360
jmp 0x180041404
mov rsi, qword [rbp - 0x40]
mov r14, qword [rbp - 0x28]
jmp 0x180041404
mov rax, qword [rbp + 0xb0]
mov r15, qword [r10 + 0x10]
mov r12, qword [rax + 0x10]
jmp 0x180041404
mov rsi, qword [rbp + 0x20]
jmp 0x180041404
cmp edx, 0x38b2
je 0x1800413e8
cmp edx, 0x46ca
jne 0x180041404
mov r8, qword [rbp + 0xb0]
mov ecx, r9d
mov r14, qword [rbp + 8]
cmp r9d, dword [r8]
jge 0x180041404
nop dword [rax + rax]
mov eax, dword [r12]
inc ecx
mov dword [r14], eax
add r12, 4
add r14, 4
cmp ecx, dword [r8]
jl 0x1800413d0
jmp 0x180041404
mov ecx, r9d
cmp r9d, dword [r10]
jge 0x180041404
mov eax, dword [r15]
inc ecx
mov dword [rsi], eax
add r15, 4
add rsi, 4
cmp ecx, dword [r10]
jl 0x1800413f0
add edx, 0xe18
cmp edx, 0x5490
jbe 0x180041330
mov ecx, dword [rsp + 0x70]
jmp 0x180041478
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor ebx, ebx
jmp 0x18004146f
mov rax, qword [rbp + 0xb0]
mov eax, dword [rax]
sub eax, r9d
mov dword [rbp - 8], eax
jmp 0x18004147c
sub eax, 0x354
je 0x180041457
sub eax, 0x12
je 0x180040cbe
cmp eax, 0x85
jne 0x18004147c
lea r8, [rbp - 0x38]
jmp 0x18004145b
lea r8, [rbp - 0x50]
xor r9d, r9d
mov dword [rsp + 0x20], 0x8e
xor edx, edx
xor ecx, ecx
call fcn.180037c30
mov ecx, dword [rsp + 0x70]
mov r9d, dword [rsp + 0x68]
mov edx, dword [rsp + 0x6c]
mov eax, dword [rsp + 0x60]
add eax, 0x97
mov dword [rsp + 0x60], eax
cmp eax, edx
jae 0x1800414a0
mov r10, qword [rbp + 0xa0]
mov r13, qword [rbp + 0xa8]
jmp 0x1800410c3
mov r11d, dword [rbp + 0x98]
mov edi, r11d
lea eax, [r11 + 0x402]
cmp edi, eax
jae 0x180040cbe
cmp edi, 0x262
ja 0x18004174e
je 0x180041745
cmp edi, 0x145
ja 0x180041687
je 0x180041629
mov eax, edi
sub eax, 0x61
je 0x1800415d9
sub eax, 0x39
je 0x1800415a6
sub eax, 0x39
je 0x180041556
cmp eax, 0x39
jne 0x180040b5c
lea rax, [rbp - 0x50]
xor edx, edx
lea r9, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x28]
mov ecx, IUnknown_GetWindow
call fcn.180005cc0
test eax, eax
jne 0x18004172c
lea r9, [rbp - 0x50]
mov edx, 0x94
lea r8, [rbp - 0x68]
lea rcx, [rbp - 0x68]
call fcn.180057660
test eax, eax
jne 0x18004172c
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
mov r9d, 0x54
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 8]
call fcn.18002c7e0
test eax, eax
jne 0x18004172c
lea r9d, [rax + 0x4a]
lea r8, [rbp - 0x68]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x50]
call fcn.180026790
test eax, eax
jne 0x18004172c
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
mov r9d, 0x54
lea r8, [rbp - 0x68]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x10]
call fcn.18002c7e0
test eax, eax
jne 0x18004172c
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
mov r9d, 0x4a
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x38]
call fcn.180026790
test eax, eax
jne 0x18004172c
lea r9d, [rax + 0x4a]
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 8]
call fcn.180026790
test eax, eax
jne 0x18004172c
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
mov dword [rsp + 0x60], r9d
lea r8, [rsp + 0x60]
lea r9, [rbp - 0x68]
xor edx, edx
mov ecx, 0xde
call fcn.180067590
test eax, eax
jne 0x18004172c
mov ecx, dword [rsp + 0x68]
lea r9, [rbp - 0x20]
lea r8, [rsp + 0x60]
xor edx, edx
lea eax, [rcx + rcx]
mov ecx, 0xde
mov dword [rsp + 0x60], eax
call fcn.180067590
test eax, eax
jne 0x18004172c
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
mov eax, edi
sub eax, 0x17e
je 0x180041707
sub eax, 0x39
je 0x1800416cc
sub eax, 0x39
je 0x18004172c
cmp eax, 0x39
jne 0x180040b5c
lea rdx, [rbp - 0x20]
lea ecx, [rax - 7]
call fcn.18003ef60
mov r9d, dword [rsp + 0x68]
mov edi, 0x229
mov r11d, dword [rbp + 0x98]
add edi, 0x39
jmp 0x1800414aa
mov rax, qword [rbp + 0xa8]
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x68]
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, IUnknown_GetWindow
call fcn.180005cc0
test eax, eax
jne 0x18004172c
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
mov dword [rbp - 0x78], eax
jmp 0x1800414aa
lea rax, [rbp - 0x68]
xor edx, edx
lea r9, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x28]
mov ecx, IUnknown_GetWindow
call fcn.180005cc0
test eax, eax
je 0x180040b5c
mov r9d, dword [rsp + 0x68]
mov edi, 0x1f0
mov r11d, dword [rbp + 0x98]
add edi, 0x39
jmp 0x1800414aa
lea rdx, [rbp + 0x28]
jmp 0x180040b52
cmp edi, 0x37f
ja 0x1800417ec
je 0x180040e57
mov eax, edi
sub eax, 0x29b
je 0x1800417d3
sub eax, 0x39
je 0x1800417ac
sub eax, 0x39
je 0x180041785
cmp eax, 0x39
jne 0x180040b5c
lea rdx, [rbp - 0x38]
jmp 0x180040b52
lea rdx, [rbp - 8]
mov ecx, 0x32
call fcn.18003ef60
mov r9d, dword [rsp + 0x68]
mov edi, 0x30d
mov r11d, dword [rbp + 0x98]
add edi, 0x39
jmp 0x1800414aa
lea rdx, [rbp - 0x68]
mov ecx, 0x32
call fcn.18003ef60
mov r9d, dword [rsp + 0x68]
mov edi, 0x2d4
mov r11d, dword [rbp + 0x98]
add edi, 0x39
jmp 0x1800414aa
mov r9d, dword [rsp + 0x68]
mov edi, 0x29b
mov r11d, dword [rbp + 0x98]
add edi, 0x39
jmp 0x1800414aa
mov eax, edi
sub eax, 0x3b8
je 0x180040b49
sub eax, 0x39
je 0x180041835
cmp eax, 0x39
jne 0x180040b5c
mov eax, 0x10c
nop dword [rax]
cmp eax, 0x10c
je 0x18004184e
add eax, 0x57
cmp eax, 0x163
jb 0x180041810
mov r9d, dword [rsp + 0x68]
add edi, 0x39
mov r11d, dword [rbp + 0x98]
jmp 0x1800414aa
mov r9d, dword [rsp + 0x68]
mov edi, 0x3f1
mov r11d, dword [rbp + 0x98]
add edi, 0x39
jmp 0x1800414aa
mov eax, dword [rbp - 0x78]
jmp 0x180040cc0