Function at 0x14009a500
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4a8]
sub rsp, 0x5a8
movzx eax, byte [r9 + 8]
mov rdi, r9
sub al, 2
mov rsi, r8
test al, 0xf7
mov r14, rdx
lea rax, [r9 + 0x20]
mov r15, rcx
jne 0x14009a549
lea rax, [r8 + 0x70]
movzx edx, word [rdx]
lea r12, [0x140000000]
xor ebx, ebx
movaps xmmword [rsp + 0x590], xmm6
mov qword [rsp + 0x48], rax
movaps xmmword [rsp + 0x580], xmm7
mov byte [rsp + 0x30], 0
lea r13d, [rbx + 1]
test dx, dx
je 0x14009d4a6
lea r9d, [rbx + 0x20]
xorps xmm7, xmm7
cmp dx, 0x2d
jne 0x14009a58e
xor r13b, r13b
jmp 0x14009a597
mov r13b, 1
cmp dx, 0x2b
jne 0x14009a5a0
movzx edx, word [r14 + 2]
add r14, 2
mov r15, r14
mov r12, r14
test dx, dx
je 0x14009d492
mov qword [rsp + 0x38], r14
mov r8, r14
test r14, r14
je 0x14009a5f5
nop dword [rax]
lea rcx, [0x1400f6270]
movzx eax, r9w
nop dword [rax + rax]
cmp dx, ax
je 0x14009a616
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x14009a5d0
movzx edx, word [r8 + 2]
add r8, 2
mov qword [rsp + 0x38], r8
test dx, dx
jne 0x14009a5c0
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp word [r14 + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14009a600
lea r8, [r14 + rax*2]
mov qword [rsp + 0x38], r8
cmp r8, r14
je 0x14009d3d1
movzx eax, word [r8]
lea rdx, str.Section
mov rcx, r14
mov word [rsp + 0x34], ax
mov word [r8], bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a64c
mov byte [rsi + 0x1a6], 1
jmp case.0x14009be9f.7
lea rdx, str.AltSubmit
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a686
cmp byte [rdi + 8], 0xc
je 0x14009a686
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 2
and al, 0xfd
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
mov r8d, 7
lea rdx, str.Checked
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a72d
lea rdx, str.Gray
lea rcx, [r14 + 0xe]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a6ca
movzx eax, r13b
add eax, eax
mov dword [rsi + 0x80], eax
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0xa
jne 0x14009a6e9
mov ecx, dword [rsi + 0x10]
mov eax, ecx
and eax, 0xfffffffb
or ecx, 4
test r13b, r13b
cmove ecx, eax
mov dword [rsi + 0x10], ecx
jmp case.0x14009be9f.7
cmp word [r14 + 0xe], 0
je 0x14009a71e
lea rcx, [r14 + 0xe]
call fcn.140014ec0
mov dword [rsi + 0x80], eax
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0xffffffff
jne 0x14009d3c3
mov dword [rsi + 0x80], 2
jmp 0x14009d3c3
movzx eax, r13b
mov dword [rsi + 0x80], eax
jmp case.0x14009be9f.7
mov r8d, 6
lea rdx, str.Choose
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a7fd
test r13b, r13b
je case.0x14009be9f.7
movzx ecx, byte [rdi + 8]
add r14, 0xc
sub ecx, 0xd
je 0x14009a7b1
cmp ecx, 1
mov rcx, r14
je 0x14009a788
call fcn.140014ec0
mov dword [rsi + 0x3c], eax
mov r9d, SafeArrayAllocDescriptor
cmp eax, 1
jge 0x14009d3c3
mov dword [rsi + 0x3c], ebx
jmp 0x14009d3c3
lea rdx, [rsi + 0x154]
call fcn.1400be9a0
mov dword [rsi + 0x194], eax
mov r9d, SafeArrayAllocDescriptor
cmp eax, 3
jne 0x14009d3c3
or dword [rsi], 2
jmp 0x14009d3c3
lea rdx, str.None
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a7d1
mov dword [rsi + 0x3c], 2
jmp case.0x14009be9f.7
lea rdx, [rsi + 0x154]
mov r8b, 1
mov rcx, r14
call fcn.1400bea60
mov r9d, SafeArrayAllocDescriptor
test eax, eax
je 0x14009d3c3
mov dword [rsi + 0x3c], 1
jmp 0x14009d3c3
lea rdx, str.Border
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a831
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a825
or dword [rsi], 0x800000
jmp 0x14009d3c3
or dword [rsi + 4], 0x800000
jmp 0x14009d3c3
lea rdx, str.VScroll
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a865
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a859
or dword [rsi], 0x200000
jmp 0x14009d3c3
or dword [rsi + 4], 0x200000
jmp 0x14009d3c3
mov r8d, 7
lea rdx, str.HScroll
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a8db
cmp byte [rdi + 8], 0xb
jne 0x14009a89e
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009af46
or dword [rsi + 4], 0x8000
jmp 0x14009d3c3
test r13b, r13b
je 0x14009a8cf
or dword [rsi], 0x100000
cmp word [r14 + 0xe], 0
je 0x14009a8c2
lea rcx, [r14 + 0xe]
call fcn.140014ec0
mov dword [rsi + 0x7c], eax
jmp case.0x14009be9f.7
mov eax, 0xffffffff
mov dword [rsi + 0x7c], eax
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x100000
jmp case.0x14009be9f.7
lea rdx, str.Tabstop
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a903
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a920
or dword [rsi], 0x10000
jmp 0x14009d3c3
lea rdx, str.NoTab
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a92c
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a8f8
or dword [rsi + 4], 0x10000
jmp 0x14009d3c3
lea rdx, str.Group
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a95a
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ac6a
or dword [rsi], 0x20000
jmp 0x14009d3c3
lea rdx, str.Redraw
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a983
movzx eax, r13b
xor eax, 1
add eax, 3
mov dword [rsi + 0x19c], eax
jmp case.0x14009be9f.7
mov r8d, 8
lea rdx, str.Disabled
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009aa41
cmp word [r14 + 0x10], ax
lea rcx, [r14 + 0x10]
je 0x14009a9b9
call fcn.140014ec0
test eax, eax
jne 0x14009a9b9
xor r13b, 1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009a9ef
mov edx, ebx
test r13b, r13b
sete dl
call qword [sym.imp.USER32.dll_EnableWindow]
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x10
and al, 0xef
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
test r13b, r13b
je 0x14009aa1a
or dword [rsi], 0x8000000
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x10
and al, 0xef
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x8000000
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x10
and al, 0xef
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
mov r8d, 6
lea rdx, str.Hidden
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009aac2
cmp word [r14 + 0xc], ax
lea rcx, [r14 + 0xc]
je 0x14009aa73
call fcn.140014ec0
test eax, eax
jne 0x14009aa73
xor r13b, 1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009aa8e
test r13b, r13b
mov edx, 4
cmovne edx, ebx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x14009aaa2
test r13b, r13b
je 0x14009aa9c
or dword [rsi + 4], 0x10000000
jmp 0x14009aaa2
or dword [rsi], 0x10000000
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 8
and al, 0xf7
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
lea rdx, str.Wrap
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ab5a
movzx eax, byte [rdi + 8]
dec eax
cmp eax, 0x12
ja case.0x14009be9f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9db78]
add rcx, r9
jmp rcx
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ab13
or dword [rsi + 4], 0x1f
jmp 0x14009d3c3
and dword [rsi], 0xffffffec
or dword [rsi], 0xc
jmp 0x14009d3c3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ab35
or dword [rsi + 4], 0x100080
jmp 0x14009d3c3
or dword [rsi], 0x80
jmp 0x14009d3c3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b252
or dword [rsi], 0x200
jmp 0x14009d3c3
mov r8d, 0xa
lea rdx, str.Background
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009ac32
movzx ecx, byte [rdi + 8]
add r14, 0x14
sub ecx, 0xa
je 0x14009abd6
sub ecx, 1
je 0x14009abd6
sub ecx, 7
je 0x14009abd6
cmp ecx, 7
je 0x14009abd6
test r13b, r13b
je 0x14009abc9
and byte [rdi + 9], 0xdf
lea rdx, str.Trans
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov r9d, SafeArrayAllocDescriptor
test eax, eax
jne 0x14009abc0
or byte [rdi + 9], 0x40
jmp 0x14009d3c3
and byte [rdi + 9], 0xbf
jmp 0x14009d3c3
and byte [rdi + 9], 0xbf
or byte [rdi + 9], 0x20
jmp case.0x14009be9f.7
test r13b, r13b
je 0x14009ac26
mov rcx, r14
call fcn.1400c05c0
mov dword [rsi + 0x74], eax
cmp eax, 0xffffffff
jne case.0x14009be9f.7
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov ecx, eax
movzx r8d, ax
shr ecx, 0x10
and r8d, 0xffffff00
movzx edx, cl
movzx eax, al
or r8d, edx
shl eax, 0x10
or r8d, eax
mov dword [rsi + 0x74], r8d
jmp case.0x14009be9f.7
mov dword [rsi + 0x74], 0xff000000
jmp case.0x14009be9f.7
lea rdx, str.Group
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009a940
lea rdx, str.Theme
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ac76
mov byte [rsi + 0x1a7], r13b
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x20000
jmp 0x14009d3c3
mov r8d, 4
lea rdx, str.Hwnd
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009ae09
mov r13, qword [rbp + 0x4f0]
lea rbx, [r14 + 8]
mov rcx, qword [r13 + 0x128]
test rcx, rcx
je 0x14009ad99
xor r15d, r15d
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x70]
mov dword [rbp - 0x80], r15d
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x68]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x60], r15d
mov qword [rbp - 0x60], rax
lea r9d, [r15 + 2]
lea rax, str.HasKey
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x70], rax
lea r8, [rbp + 8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
cmp qword [rbp - 0x18], r15
jne 0x14009d408
mov rcx, qword [r13 + 0x128]
lea rax, [0x1400e0684]
mov dword [rbp - 0x80], r15d
lea rdx, [rbp - 0x68]
mov qword [rsp + 0x70], rbx
lea r9d, [r15 + 1]
mov dword [rsp + 0x60], r15d
lea r8, [rbp + 8]
mov qword [rsp + 0x50], rax
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
cmp word [rbx + rcx*2 + 2], r15w
lea rcx, [rcx + 1]
jne 0x14009ad60
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsi + 0x1c8], rax
movzx ecx, word [rbx]
lea rbx, [rbx + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14009ad81
jmp case.0x14009be9f.7
cmp word [rbx], 0
jne 0x14009adaa
xor eax, eax
mov qword [rsi + 0x20], rax
jmp case.0x14009be9f.7
lea rax, [rbp + 0x4f8]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
mov rdx, rbx
mov dword [rsp + 0x20], 3
lea rcx, [0x140118bf0]
call fcn.14003d2b0
test rax, rax
jne 0x14009ae00
cmp byte [rbp + 0x4f8], al
lea rcx, [0x140118bf0]
mov r9d, dword [rsp + 0x40]
mov rdx, rbx
setne al
xor r8d, r8d
inc eax
mov dword [rsp + 0x20], eax
call fcn.14003d7f0
mov qword [rsi + 0x20], rax
jmp case.0x14009be9f.7
mov r8d, 4
lea rdx, str.Icon
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009ae69
cmp byte [rdi + 8], 0xa
jne 0x14009ae4c
lea rdx, str.Small
lea rcx, [r14 + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov ecx, 2
cmovne ecx, ebx
mov dword [rsi + 0x14], ecx
jmp case.0x14009be9f.7
test r13b, r13b
je case.0x14009be9f.7
lea rcx, [r14 + 8]
call fcn.140014ec0
mov dword [rsi + 0x84], eax
jmp case.0x14009be9f.7
lea rdx, str.Report
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ae89
mov dword [rsi + 0x14], 1
jmp case.0x14009be9f.7
lea rdx, str.List
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009aea9
mov dword [rsi + 0x14], 3
jmp case.0x14009be9f.7
lea rdx, str.Tile
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009aec9
mov dword [rsi + 0x14], 4
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0xa
jne 0x14009af90
lea rdx, [0x1400fedc8]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009af00
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b43d
or dword [rsi + 4], 0x4000
jmp 0x14009d3c3
cmp byte [rdi + 8], 0xa
jne 0x14009af90
mov r8d, 6
lea rdx, str.NoSort
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009af5d
lea rcx, [r14 + 0xc]
lea rdx, [0x1400fedc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009af51
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a892
or dword [rsi], 0x8000
jmp 0x14009d3c3
mov byte [rsi + 0x1a8], r13b
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0xa
jne 0x14009af90
lea rdx, str.Grid
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009af90
mov ecx, dword [rsi + 0x10]
mov eax, ecx
and eax, 0xfffffffe
or ecx, 1
test r13b, r13b
cmove ecx, eax
mov dword [rsi + 0x10], ecx
jmp case.0x14009be9f.7
mov r8d, 5
lea rdx, str.Count
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009afbb
lea rcx, [r14 + 0xa]
call fcn.140014ec0
mov dword [rsi + 0x78], eax
jmp case.0x14009be9f.7
mov r8d, 2
lea rdx, [0x1401007a4]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b121
lea rdi, [r14 + 4]
nop dword [rax]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009afef
cmp ax, 9
jne 0x14009aff5
add rdi, 2
jmp 0x14009afe0
test ax, ax
je case.0x14009be9f.7
cmp ax, 0x2d
je case.0x14009be9f.7
cmp ax, 0x2b
jne 0x14009b018
lea rax, [rdi + 2]
mov rdi, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14009b050
movzx eax, word [rdi + 2]
mov ecx, 0xffdf
sub ax, 0x58
test cx, ax
jne 0x14009b050
movzx ecx, word [rdi + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14009b050
add rdi, 4
mov r12d, 1
mov esi, r12d
xor r15d, r15d
jmp 0x14009b05a
xor r15d, r15d
mov esi, r15d
lea r12d, [r15 + 1]
movzx ebx, word [rdi]
mov ecx, r15d
cmp ebx, 0x20
je 0x14009b0c7
cmp ebx, 9
je 0x14009b0c7
test ebx, ebx
je 0x14009b0e5
cmp ebx, 0x2e
je case.0x14009be9f.7
test rsi, rsi
je 0x14009b0af
movzx ecx, bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r15d
sete cl
test ecx, ecx
je 0x14009b0b7
test ebx, 0xffffff80
jne case.0x14009be9f.7
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
jmp case.0x14009be9f.7
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x14009b091
movzx ebx, word [rdi + 2]
add rdi, 2
mov ecx, r12d
cmp ebx, 0x20
jne 0x14009b065
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009b0d6
cmp ax, 9
jne 0x14009b0dc
add rdi, 2
jmp 0x14009b0c7
test ax, ax
jne case.0x14009be9f.7
test ecx, ecx
je case.0x14009be9f.7
lea rcx, [r14 + 4]
call fcn.140025b20
mov rdx, qword [rbp + 0x500]
mov r9d, SafeArrayAllocDescriptor
mov ecx, dword [rdx + 0x10]
test r13b, r13b
je 0x14009b115
or ecx, eax
mov dword [rdx + 0x10], ecx
jmp 0x14009d3c3
not eax
and eax, ecx
mov dword [rdx + 0x10], eax
jmp 0x14009d3c3
mov r8d, 9
lea rdx, str.ImageList
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b158
test r13b, r13b
je case.0x14009be9f.7
lea rcx, [r14 + 0x12]
call fcn.140025b20
mov ecx, eax
mov qword [rsi + 0x18], rcx
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 4
jne 0x14009b189
lea rdx, str.Default
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b189
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009bb25
or dword [rsi], 1
jmp 0x14009d3c3
cmp byte [rdi + 8], 5
jne 0x14009b1ba
lea rdx, str.Check3
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b1ba
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b779
or dword [rsi], 6
jmp 0x14009d3c3
lea rdx, str.ReadOnly
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b25e
movzx ecx, byte [rdi + 8]
sub ecx, 9
je 0x14009b42e
sub ecx, 1
je 0x14009b243
sub ecx, 1
je 0x14009b22b
cmp ecx, 1
jne case.0x14009be9f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009b211
movzx r8d, r13b
xor r9d, r9d
mov edx, 0xcf
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009be9f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b2c6
or dword [rsi], 0x800
jmp 0x14009d3c3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b472
or dword [rsi + 4], 8
jmp 0x14009d3c3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ab4f
or dword [rsi + 4], 0x200
jmp 0x14009d3c3
lea rdx, str.Multi
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b2d2
sub ecx, 9
je 0x14009b211
sub ecx, 1
je 0x14009b2ae
sub ecx, 2
je 0x14009b9e7
cmp ecx, 2
jne case.0x14009be9f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b2a5
or dword [rsi], 2
jmp 0x14009d3c3
or dword [rsi + 4], 2
jmp 0x14009d3c3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b9f6
or dword [rsi + 4], 4
jmp 0x14009d3c3
or dword [rsi + 4], 0x800
jmp 0x14009d3c3
cmp cl, 0xc
jne 0x14009b30b
lea rdx, str.WantReturn
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b30b
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b2ff
or dword [rsi], 0x1000
jmp 0x14009d3c3
or dword [rsi + 4], 0x1000
jmp 0x14009d3c3
cmp byte [rdi + 8], 0xc
jne 0x14009b37f
lea rdx, str.WantTab
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b345
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x80
and al, 0x7f
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0xc
jne 0x14009b37f
lea rdx, str.WantCtrlA
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b37f
movzx ecx, byte [rdi + 9]
movzx eax, cl
and cl, 0xfd
or al, 2
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
movzx eax, byte [rdi + 8]
sub al, 0xa
cmp al, 1
ja 0x14009b3bd
lea rdx, str.WantF2
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b3bd
movzx ecx, byte [rdi + 9]
movzx eax, cl
and cl, 0x7f
or al, 0x80
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0xc
jne 0x14009b3f1
lea rdx, str.Number
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b3f1
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b48b
or dword [rsi], 0x2000
jmp 0x14009d3c3
lea rdx, str.Lowercase
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b448
movzx eax, byte [rdi + 8]
cmp al, 0xc
jne 0x14009b424
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b6e9
or dword [rsi], 0x10
jmp 0x14009d3c3
sub al, 7
cmp al, 1
ja case.0x14009be9f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009aef4
or dword [rsi], 0x4000
jmp 0x14009d3c3
lea rdx, str.Uppercase
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b497
cmp cl, 0xc
jne 0x14009b47a
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b23a
or dword [rsi], 8
jmp 0x14009d3c3
sub cl, 7
cmp cl, 1
ja case.0x14009be9f.7
jmp case.0x14009aafd.3
or dword [rsi + 4], 0x2000
jmp 0x14009d3c3
cmp cl, 0xc
jne 0x14009b533
mov r8d, 8
lea rdx, str.Password
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b533
movzx eax, word [r14 + 0x10]
mov word [rsi + 0x1a0], ax
test r13b, r13b
je 0x14009b50c
or dword [rsi], 0x20
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009b529
xor r9d, r9d
mov edx, 0xcc
test ax, ax
jne 0x14009b4f9
mov r8d, 0x25cf
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009be9f.7
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x20
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009b529
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009be9f.7
mov r8d, 5
lea rdx, str.Limit
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b584
test r13b, r13b
je 0x14009b577
cmp word [r14 + 0xa], ax
je 0x14009b56a
lea rcx, [r14 + 0xa]
call fcn.140014ec0
mov dword [rsi + 0x78], eax
jmp case.0x14009be9f.7
mov eax, 0xffffffff
mov dword [rsi + 0x78], eax
jmp case.0x14009be9f.7
mov eax, 0x80000000
mov dword [rsi + 0x78], eax
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 8
jne 0x14009b5a2
lea rdx, str.Simple
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je case.0x14009aafd.16
mov r8d, 4
lea rdx, str.Sort
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b61d
sub ecx, 7
je 0x14009bafd
sub ecx, 1
je 0x14009bafd
sub ecx, 1
je 0x14009b292
cmp ecx, 1
jne case.0x14009be9f.7
test r13b, r13b
je 0x14009b614
lea rcx, [r14 + 8]
lea rdx, str.Desc
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov r9d, SafeArrayAllocDescriptor
mov ecx, r9d
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovne ecx, eax
or dword [rsi], ecx
jmp 0x14009d3c3
or dword [rsi + 4], 0x30
jmp case.0x14009be9f.7
cmp cl, 0x10
jne 0x14009b657
lea rdx, str.Horz
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b657
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b64e
mov eax, dword [rsi]
and eax, 0xffffffef
or eax, 0x40
mov dword [rsi], eax
jmp 0x14009d3c3
or dword [rsi + 4], 0x40
jmp 0x14009d3c3
cmp byte [rdi + 8], 0x11
jne 0x14009b703
lea rdx, str.Invert
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009b325
cmp byte [rdi + 8], 0x11
jne 0x14009b703
lea rdx, str.NoTicks
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009b40d
cmp byte [rdi + 8], 0x11
jne 0x14009b703
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, str.TickInterval
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b703
mov byte [rsi + 0x1a4], 1
test r13b, r13b
je 0x14009b6f2
or dword [rsi], 1
lea rcx, [r14 + 0x18]
cmp word [r14 + 0x18], ax
setne al
mov byte [rsi + 0x1a5], al
call fcn.140014ec0
mov dword [rsi + 0x48], eax
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x10
jmp 0x14009d3c3
or dword [rsi + 4], 1
mov eax, 0xffffffff
mov dword [rsi + 0x48], eax
jmp case.0x14009be9f.7
mov r8d, 4
lea rdx, str.Line
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b782
cmp cl, 0x11
jne 0x14009b740
test r13b, r13b
je case.0x14009be9f.7
lea rcx, [r14 + 8]
call fcn.140014ec0
mov dword [rsi + 0x4c], eax
jmp case.0x14009be9f.7
cmp cl, 0xb
jne case.0x14009be9f.7
movzx ebx, word [r14 + 8]
test ebx, 0xffffff80
jne 0x14009b76a
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009b76a
and ebx, 0xffffffdf
cmp bx, 0x53
jne case.0x14009be9f.7
jmp 0x14009b1a3
or dword [rsi + 4], 6
jmp 0x14009d3c3
cmp cl, 0x11
jne 0x14009b7bb
mov r8d, 4
lea rdx, str.Page
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b7bb
test r13b, r13b
je case.0x14009be9f.7
lea rcx, [r14 + 8]
call fcn.140014ec0
mov dword [rsi + 0x50], eax
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0x11
jne 0x14009b7fd
mov r8d, 5
lea rdx, str.Thick
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b7fd
test r13b, r13b
je 0x14009b7f4
or dword [rsi], 0x40
lea rcx, [r14 + 0xa]
call fcn.140014ec0
mov dword [rsi + 0x54], eax
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x40
jmp case.0x14009be9f.7
mov r8d, 7
lea rdx, str.ToolTip
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b8ea
cmp cl, 0x11
jne case.0x14009be9f.7
test r13b, r13b
je 0x14009b8de
mov dword [rsi + 0x58], 0xffffffff
movzx ebx, word [r14 + 0xe]
test ebx, 0xffffff80
je 0x14009b84a
lea ecx, [rax - 1]
jmp 0x14009b861
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, dword [rsi + 0x58]
test eax, eax
je 0x14009b861
and ebx, 0xffffffdf
cmp ebx, 0x42
je 0x14009b8c8
cmp ebx, 0x4c
je 0x14009b8b2
cmp ebx, 0x52
je 0x14009b89c
cmp ebx, 0x54
jne 0x14009b888
xor ecx, ecx
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009be9f.7
test ecx, ecx
jns 0x14009b8cd
xor eax, eax
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009be9f.7
mov ecx, 3
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009be9f.7
mov ecx, 1
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009be9f.7
mov ecx, 2
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x100
jmp case.0x14009be9f.7
cmp cl, 0x11
jne 0x14009b9bf
mov r8d, 5
lea rdx, str.Buddy
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b9bf
test r13b, r13b
je case.0x14009be9f.7
movzx ebx, word [r14 + 0xa]
test bx, bx
je case.0x14009be9f.7
lea rdx, [r14 + 0xc]
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [0x140118bf0]
call fcn.14003d2b0
mov r9, rax
test rax, rax
je case.0x14009be9f.7
cmp byte [rax + 0x23], 0
jne 0x14009b965
mov r9, qword [rax + 0x10]
test byte [r9 + 0x22], 2
jne case.0x14009be9f.7
mov r13, qword [rbp + 0x4f0]
mov eax, dword [r13 + 0x20]
lea r8d, [rax - 1]
cmp r8d, eax
jae case.0x14009be9f.7
nop dword [rax + rax]
mov eax, r8d
imul rdx, rax, 0x58
add rdx, qword [r13 + 0x28]
cmp qword [rdx + 0x10], r9
jne 0x14009b9b1
cmp bx, 0x31
jne 0x14009b9ad
mov qword [rsi + 0x60], rdx
jmp 0x14009b9b1
mov qword [rsi + 0x68], rdx
dec r8d
cmp r8d, dword [r13 + 0x20]
jb 0x14009b990
jmp case.0x14009be9f.7
lea rdx, str.Vertical
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b9fe
movzx eax, byte [rdi + 8]
cmp al, 0x11
je 0x14009b292
cmp al, 0x12
jne case.0x14009be9f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b2bd
or dword [rsi], 4
jmp 0x14009d3c3
mov r8d, 5
lea rdx, str.Range
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009bac2
test r13b, r13b
je case.0x14009be9f.7
cmp word [r14 + 0xa], ax
je case.0x14009be9f.7
movzx eax, byte [rdi + 8]
lea rcx, [r14 + 0xa]
sub al, 0xd
cmp al, 1
jbe 0x14009ba76
mov byte [rsi + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 1
call fcn.140014ec0
mov edx, 0x2d
mov dword [rsi + 0x40], eax
lea rcx, [r14 + 0xc]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je case.0x14009be9f.7
lea rcx, [rax + 2]
call fcn.140014ec0
mov dword [rsi + 0x44], eax
jmp case.0x14009be9f.7
lea rdx, [rsi + 0x174]
call fcn.1400be9a0
mov dword [rsi + 0x198], eax
test eax, eax
je case.0x14009be9f.7
mov rcx, qword [rdi]
test rcx, rcx
je case.0x14009be9f.7
cmp byte [rdi + 8], 0xd
lea r9, [rsi + 0x174]
mov r8d, eax
mov edx, 0x1012
mov eax, 0x1004
cmove edx, eax
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0x12
jne 0x14009bae0
lea rdx, str.Smooth
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je case.0x14009aafd.16
lea rdx, str.Buttons
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009bb2e
cmp cl, 0x13
jne 0x14009bb17
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009bed3
or dword [rsi], 0x100
jmp 0x14009d3c3
cmp cl, 0xb
jne case.0x14009be9f.7
jmp case.0x14009aafd.16
or dword [rsi + 4], 1
jmp 0x14009d3c3
cmp cl, 0x13
jne 0x14009bb69
lea rdx, str.Bottom
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bb69
mov eax, dword [rsi + 4]
test r13b, r13b
je 0x14009bb5e
or dword [rsi], 2
bts eax, 7
mov dword [rsi + 4], eax
jmp case.0x14009be9f.7
or eax, 2
mov dword [rsi + 4], eax
jmp case.0x14009be9f.7
cmp byte [rdi + 8], 0x18
jne 0x14009bbbe
mov r8d, 5
lea rdx, str.Class
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009bbbe
mov rcx, qword [0x140115790]
lea r8, [rbp + 0x30]
lea rdx, [r14 + 0xa]
call qword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [rsi + 0x1ac], ax
test ax, ax
jne case.0x14009be9f.7
lea r8, [r14 + 0xa]
lea rdx, str.Unregistered_window_class.
jmp 0x14009d320
lea rdx, str.Center
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bca6
movzx eax, byte [rdi + 8]
dec eax
cmp eax, 0x10
ja case.0x14009be9f.7
cdqe
lea r9, [0x140000000]
test r13b, r13b
je 0x14009bc2f
mov ecx, dword [r9 + rax*4 + 0x9dbc4]
add rcx, r9
jmp rcx
or dword [rsi], 8
or dword [rsi + 4], 4
jmp case.0x14009be9f.7
or dword [rsi], 1
or dword [rsi + 4], 0x1e
jmp case.0x14009be9f.7
or dword [rsi], 0x300
jmp case.0x14009be9f.7
or dword [rsi], 1
or dword [rsi + 4], 2
jmp case.0x14009be9f.7
mov ecx, dword [r9 + rax*4 + 0x9dc08]
add rcx, r9
jmp rcx
or dword [rsi + 4], 8
jmp case.0x14009be9f.7
or dword [rsi + 4], 0x1f
jmp case.0x14009be9f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009bc7f
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0x300
jne 0x14009d3c3
or dword [rsi + 4], eax
jmp 0x14009d3c3
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
jne 0x14009d3c3
and ecx, 0xfffffcff
mov dword [rsi], ecx
jmp 0x14009d3c3
lea rdx, str.Right
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bdea
movzx eax, byte [rdi + 8]
dec eax
test r13b, r13b
je 0x14009bd50
cmp eax, 0x16
ja case.0x14009be9f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9dc4c]
add rcx, r9
jmp rcx
or dword [rsi + 4], 8
or dword [rsi], 4
jmp case.0x14009be9f.7
or dword [rsi], 0x20
jmp case.0x14009be9f.7
or dword [rsi], 2
or dword [rsi + 4], 0x1d
jmp case.0x14009be9f.7
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
or dword [rsi + 4], 0x100
bts ecx, 9
mov dword [rsi], ecx
movzx eax, byte [rdi + 8]
sub al, 5
cmp al, 1
ja 0x14009d3c3
or ecx, r9d
mov dword [rsi], ecx
jmp 0x14009d3c3
or dword [rsi], 2
or dword [rsi + 4], 1
jmp case.0x14009be9f.7
or dword [rsi], 0x282
jmp case.0x14009be9f.7
cmp eax, 0x12
ja case.0x14009be9f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9dca8]
add rcx, r9
jmp rcx
or dword [rsi + 4], 0x20
jmp case.0x14009be9f.7
or dword [rsi], 4
or dword [rsi + 4], 8
jmp case.0x14009be9f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009bdb9
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0x300
je 0x14009d3c3
or dword [rsi + 4], 0x200
jmp 0x14009d3c3
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je 0x14009d3c3
btr ecx, 9
mov dword [rsi], ecx
jmp 0x14009d3c3
or dword [rsi + 4], 0x82
jmp case.0x14009be9f.7
lea rdx, str.Left
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bf10
movzx eax, byte [rdi + 8]
test r13b, r13b
je 0x14009be7f
dec eax
cmp eax, 0x12
ja case.0x14009be9f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9dcf4]
add rcx, r9
jmp rcx
or dword [rsi + 4], 4
or dword [rsi], 8
jmp case.0x14009be9f.7
mov ecx, dword [rsi + 4]
mov r9d, SafeArrayAllocDescriptor
or dword [rsi], 0x100
bts ecx, 9
mov dword [rsi + 4], ecx
movzx eax, byte [rdi + 8]
sub al, 5
cmp al, 1
ja 0x14009d3c3
or ecx, r9d
mov dword [rsi + 4], ecx
jmp 0x14009d3c3
or dword [rsi + 4], 3
jmp case.0x14009be9f.7
or dword [rsi], 0x280
or dword [rsi + 4], 2
jmp case.0x14009be9f.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x14009be9f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9dd40]
add rcx, r9
jmp rcx
or dword [rsi + 4], 0xc
jmp case.0x14009be9f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009bedf
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0x300
je 0x14009d3c3
or dword [rsi + 4], 0x100
jmp 0x14009d3c3
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je 0x14009d3c3
btr ecx, 8
mov dword [rsi], ecx
jmp 0x14009d3c3
or dword [rsi + 4], 0x80
jmp case.0x14009be9f.7
mov rdi, r14
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009bf22
cmp ax, 9
jne 0x14009bf28
add rdi, 2
jmp 0x14009bf13
test ax, ax
je 0x14009d3a9
cmp ax, 0x2d
je 0x14009c019
cmp ax, 0x2b
jne 0x14009bf4b
lea rax, [rdi + 2]
mov rdi, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14009bf80
movzx eax, word [rdi + 2]
mov ecx, 0xffdf
sub ax, 0x58
test cx, ax
jne 0x14009bf80
movzx ecx, word [rdi + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14009bf7e
add rdi, 4
mov esi, 1
xor ebx, ebx
jmp 0x14009bf83
xor ebx, ebx
mov rsi, rbx
mov ecx, ebx
movzx ebx, word [rdi]
cmp ebx, 0x20
je 0x14009bff0
nop dword [rax]
cmp ebx, 9
je 0x14009bff0
test ebx, ebx
je 0x14009c00a
cmp ebx, 0x2e
je 0x14009c012
test rsi, rsi
je 0x14009bfce
movzx ecx, bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x14009bfd6
test ebx, 0xffffff80
jne 0x14009c012
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
jmp 0x14009c012
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x14009bfb7
movzx ebx, word [rdi + 2]
add rdi, 2
mov ecx, 1
cmp ebx, 0x20
jne 0x14009bf90
nop dword [rax + rax]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009bfff
cmp ax, 9
jne 0x14009c005
add rdi, 2
jmp 0x14009bff0
test ax, ax
jne 0x14009c012
test ecx, ecx
jne 0x14009d3a2
mov rsi, qword [rbp + 0x500]
add r14, 2
cmp word [r14], 0
jne 0x14009c0f4
test r13b, r13b
je 0x14009c04d
mov rax, qword [rbp + 0x518]
test rax, rax
je 0x14009c04d
cmp byte [rax + 0x23], 0
jne 0x14009c043
mov rax, qword [rax + 0x10]
test byte [rax + 0x21], 2
jne 0x14009c0f4
movzx ebx, word [r15]
test ebx, 0xffffff80
jne 0x14009c06d
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c06d
and ebx, 0xffffffdf
cmp ebx, 0x43
je 0x14009c0b7
cmp ebx, 0x47
je 0x14009c094
cmp ebx, 0x56
jne 0x14009d316
mov rcx, qword [rbp + 0x508]
mov qword [rcx + 0x10], 0
jmp case.0x14009be9f.7
mov rbx, qword [rbp + 0x508]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14009c0aa
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rbx + 0x18], 0
jmp case.0x14009be9f.7
test r13b, r13b
jne case.0x14009be9f.7
mov rcx, qword [rbp + 0x508]
cmp byte [rcx + 8], 2
je case.0x14009be9f.7
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0xff000000
je case.0x14009be9f.7
mov dword [rax], 0xff000000
mov byte [rsi + 0x1a3], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15]
test ebx, 0xffffff80
jne 0x14009c114
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c114
and ebx, 0xffffffdf
add ebx, 0xffffffbf
cmp ebx, 0x18
ja case.0x14009c135.66
lea r9, [0x140000000]
movsxd rax, ebx
mov ecx, dword [r9 + rax*4 + 0x9dd84]
add rcx, r9
jmp rcx
mov rdi, qword [rbp + 0x508]
movzx eax, byte [rdi + 8]
cmp al, 3
je 0x14009d42d
cmp al, 0x12
je 0x14009d42d
mov rax, qword [rbp + 0x4f0]
mov rcx, qword [rax + 0x128]
test rcx, rcx
je 0x14009c1c3
lea rax, [rsp + 0x70]
mov dword [rbp - 0x80], 0
mov qword [rbp - 0x70], rax
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x58], rax
lea r8, [rbp + 8]
mov qword [rsp + 0x78], 0xffffffffffffffff
xor r9d, r9d
mov rax, qword [rcx]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdx
lea rdx, [rsp + 0x50]
call qword [rax + gethostname]
cmp dword [rsp + 0x60], 6
jne 0x14009c1c3
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jne 0x14009c203
mov r8, qword [rbp + 0x518]
lea rcx, [0x140118bf0]
mov r9d, 4
mov rdx, r14
call fcn.1400331b0
mov rbx, rax
test rax, rax
jne 0x14009c203
lea rdx, [0x1400ffd00]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009d424
or byte [rdi + 9], 1
movzx eax, byte [rdi + 8]
dec al
cmp al, 1
ja 0x14009c213
or dword [rsi], 0x100
test rbx, rbx
je 0x14009c221
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x14009c230
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rdi + 0x18], rbx
jmp case.0x14009be9f.7
cmp dword [rsi + 0x150], 0x32
jae case.0x14009be9f.7
mov rcx, r14
call fcn.140025b20
mov ecx, dword [rsi + 0x150]
mov dword [rsi + rcx*4 + 0x88], eax
inc dword [rsi + 0x150]
jmp case.0x14009be9f.7
mov r13, qword [rbp + 0x4f0]
mov rcx, qword [r13 + 0x128]
test rcx, rcx
je 0x14009c389
xor r15d, r15d
mov qword [rsp + 0x78], 0xffffffffffffffff
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], 0xffffffffffffffff
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x58]
lea rax, [rsp + 0x70]
mov dword [rsp + 0x60], r15d
mov qword [rbp - 0x50], rax
lea r9d, [r15 + 2]
lea rax, str.HasKey
mov dword [rbp - 0x80], r15d
mov qword [rsp + 0x50], rax
lea r8, [rbp + 8]
mov qword [rsp + 0x70], r14
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
cmp qword [rbp - 0x18], r15
jne 0x14009d436
mov rcx, qword [r13 + 0x128]
lea rax, [0x1400e0684]
mov dword [rsp + 0x60], r15d
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x50], r14
lea r9d, [r15 + 1]
mov dword [rbp - 0x80], r15d
lea r8, [rbp + 8]
mov qword [rsp + 0x70], rax
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
cmp word [r14 + rcx*2 + 2], r15w
lea rcx, [rcx + 1]
jne 0x14009c340
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rbp + 0x508]
mov qword [rcx + 0x50], rax
nop word [rax + rax]
movzx ecx, word [r14]
lea r14, [r14 + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14009c370
jmp case.0x14009be9f.7
cmp word [r14], 0
je 0x14009d32c
lea rax, [rsp + 0x36]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x44]
mov rdx, r14
mov dword [rsp + 0x20], 3
lea rcx, [0x140118bf0]
call fcn.14003d2b0
xor r15d, r15d
mov r8, rax
test rax, rax
jne 0x14009c3f8
mov r9d, dword [rsp + 0x44]
lea rcx, [0x140118bf0]
mov eax, r15d
mov rdx, r14
cmp byte [rsp + 0x36], al
setne al
inc eax
mov dword [rsp + 0x20], eax
call fcn.14003d7f0
mov r8, rax
test rax, rax
je 0x14009d32c
cmp byte [r8 + 0x23], 0
jne 0x14009c403
mov r8, qword [r8 + 0x10]
movzx eax, byte [r8 + 0x22]
and al, 0x22
cmp al, 2
je 0x14009d486
mov r9d, dword [r13 + 0x20]
mov edx, r15d
test r9d, r9d
je 0x14009c43a
mov r10, qword [r13 + 0x28]
mov eax, edx
imul rcx, rax, 0x58
cmp qword [rcx + r10 + 0x10], r8
je 0x14009d451
inc edx
cmp edx, r9d
jb 0x14009c422
mov rcx, qword [rbp + 0x508]
mov qword [rcx + 0x10], r8
jmp case.0x14009be9f.7
mov rcx, qword [rbp + 0x508]
cmp byte [rcx + 8], 2
je case.0x14009be9f.7
mov rcx, r14
call fcn.1400c05c0
mov r8d, eax
cmp eax, 0xffffffff
jne 0x14009c499
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov ecx, eax
movzx r8d, ax
shr ecx, 0x10
and r8d, 0xffffff00
movzx edx, cl
movzx eax, al
or r8d, edx
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0x48]
cmp dword [rcx], r8d
jne 0x14009c4b0
lea rax, [rsi + 0x70]
cmp rcx, rax
jne case.0x14009be9f.7
mov dword [rcx], r8d
mov byte [rsi + 0x1a3], 1
jmp case.0x14009be9f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c4df
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c4df
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009c526
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c515
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [r13 + 0xd0]
add eax, ecx
mov dword [rsi + 0x30], eax
jmp case.0x14009be9f.7
mov rcx, r14
call fcn.140014ec0
mov rcx, qword [rbp + 0x4f0]
cmp byte [rcx + 0x110], 0
je 0x14009c557
cmp eax, 0xffffffff
je 0x14009c557
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x30], eax
jmp case.0x14009be9f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c57f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c57f
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009c5c6
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c5b5
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [r13 + 0xd4]
add eax, ecx
mov dword [rsi + 0x34], eax
jmp case.0x14009be9f.7
mov rcx, r14
call fcn.140014ec0
mov rcx, qword [rbp + 0x4f0]
cmp byte [rcx + 0x110], 0
je 0x14009c5f7
cmp eax, 0xffffffff
je 0x14009c5f7
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x34], eax
jmp case.0x14009be9f.7
movzx eax, word [r14]
cmp eax, 0x2b
jne 0x14009c75e
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009c62b
lea edx, [rax - 0x29]
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c62b
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c641
mov r13, qword [rbp + 0x4f0]
mov edi, dword [r13 + 0xc0]
jmp 0x14009c673
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov edi, eax
cmp byte [r13 + 0x110], 0
je 0x14009c673
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
mov r14, qword [rbp + 0x508]
movzx ebx, byte [r14 + 0xa]
cmp bl, 0xff
je 0x14009c6bf
mov r9d, dword [r13 + 0x20]
xor r15d, r15d
xor r8b, r8b
mov edx, r15d
test r9d, r9d
je 0x14009c6bf
mov r10, qword [r13 + 0x28]
nop word [rax + rax]
mov eax, edx
imul r11, rax, 0x58
add r11, r10
cmp byte [r11 + 8], 0x13
jne 0x14009c6b8
cmp r8b, bl
je 0x14009c6f4
inc r8b
inc edx
cmp edx, r9d
jb 0x14009c6a0
mov eax, dword [r13 + 0xd0]
mov r9d, SafeArrayAllocDescriptor
add eax, dword [r13 + 0xc8]
add eax, edi
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], eax
jne 0x14009d3c3
mov eax, dword [r13 + 0xcc]
mov dword [rsi + 0x2c], eax
jmp 0x14009d3c3
test r11, r11
je 0x14009c6bf
movzx r8d, byte [r14 + 0xb]
lea rax, [r10 + 0xa]
mov edx, r15d
mov rcx, r9
cmp byte [rax + 1], r8b
jne 0x14009c714
cmp byte [rax], bl
jne 0x14009c714
inc edx
add rax, 0x58
sub rcx, 1
jne 0x14009c708
test edx, edx
jne 0x14009c6bf
mov rdx, qword [r11]
lea r8, [rbp - 0x48]
mov rcx, r13
call fcn.1400a5000
mov ecx, dword [rbp - 0x48]
mov r9d, SafeArrayAllocDescriptor
add ecx, edi
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], ecx
jne 0x14009d3c3
mov ecx, dword [r13 + 0xc4]
add ecx, dword [rbp - 0x44]
mov dword [rsi + 0x2c], ecx
jmp 0x14009d3c3
mov ebx, eax
test eax, 0xffffff80
jne 0x14009c77b
mov edx, 2
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c77b
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c7c0
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c7b1
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xc0]
mov dword [rsi + 0x28], ecx
jmp 0x14009c8fb
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c7e0
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c7e0
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009c842
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c816
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xc8]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], ecx
jne 0x14009d3c3
mov eax, dword [r13 + 0xcc]
mov dword [rsi + 0x2c], eax
jmp 0x14009d3c3
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c862
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c862
and ebx, 0xffffffdf
cmp bx, 0x53
jne 0x14009c8cb
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c898
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xe0]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], ecx
jne 0x14009d3c3
mov eax, dword [r13 + 0xec]
add eax, dword [r13 + 0xc4]
mov dword [rsi + 0x2c], eax
jmp 0x14009d3c3
mov rcx, r14
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
cmp byte [r13 + 0x110], 0
je 0x14009c8f8
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x28], eax
cmp dword [rsi + 0x2c], 0x80000000
mov r9d, SafeArrayAllocDescriptor
jne 0x14009d3c3
mov eax, dword [r13 + 0xdc]
add eax, dword [r13 + 0xc4]
mov dword [rsi + 0x2c], eax
jmp 0x14009d3c3
movzx eax, word [r14]
cmp eax, 0x2b
jne 0x14009ca7e
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009c950
lea edx, [rax - 0x29]
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c950
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c966
mov r13, qword [rbp + 0x4f0]
mov edi, dword [r13 + 0xc4]
jmp 0x14009c998
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov edi, eax
cmp byte [r13 + 0x110], 0
je 0x14009c998
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
mov r14, qword [rbp + 0x508]
movzx ebx, byte [r14 + 0xa]
cmp bl, 0xff
je 0x14009c9df
mov r9d, dword [r13 + 0x20]
xor r15d, r15d
xor r8b, r8b
mov edx, r15d
test r9d, r9d
je 0x14009c9df
mov r10, qword [r13 + 0x28]
nop
mov eax, edx
imul r11, rax, 0x58
add r11, r10
cmp byte [r11 + 8], 0x13
jne 0x14009c9d8
cmp r8b, bl
je 0x14009ca14
inc r8b
inc edx
cmp edx, r9d
jb 0x14009c9c0
mov eax, dword [r13 + 0xd4]
mov r9d, SafeArrayAllocDescriptor
add eax, dword [r13 + 0xcc]
add eax, edi
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], eax
jne 0x14009d3c3
mov eax, dword [r13 + 0xc8]
mov dword [rsi + 0x28], eax
jmp 0x14009d3c3
test r11, r11
je 0x14009c9df
movzx r8d, byte [r14 + 0xb]
lea rax, [r10 + 0xa]
mov edx, r15d
mov rcx, r9
cmp byte [rax + 1], r8b
jne 0x14009ca34
cmp byte [rax], bl
jne 0x14009ca34
inc edx
add rax, 0x58
sub rcx, 1
jne 0x14009ca28
test edx, edx
jne 0x14009c9df
mov rdx, qword [r11]
lea r8, [rbp - 0x38]
mov rcx, r13
call fcn.1400a5000
mov ecx, dword [rbp - 0x34]
mov r9d, SafeArrayAllocDescriptor
add ecx, edi
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], ecx
jne 0x14009d3c3
mov ecx, dword [r13 + 0xc0]
add ecx, dword [rbp - 0x38]
mov dword [rsi + 0x28], ecx
jmp 0x14009d3c3
mov ebx, eax
test eax, 0xffffff80
jne 0x14009ca9b
mov edx, 2
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ca9b
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009cae0
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009cad1
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xc4]
mov dword [rsi + 0x2c], ecx
jmp 0x14009cc1b
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cb00
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cb00
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009cb62
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009cb36
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xcc]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], ecx
jne 0x14009d3c3
mov eax, dword [r13 + 0xc8]
mov dword [rsi + 0x28], eax
jmp 0x14009d3c3
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cb82
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cb82
and ebx, 0xffffffdf
cmp bx, 0x53
jne 0x14009cbeb
lea rcx, [r15 + 4]
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009cbb8
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xe4]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], ecx
jne 0x14009d3c3
mov eax, dword [r13 + 0xe8]
add eax, dword [r13 + 0xc0]
mov dword [rsi + 0x28], eax
jmp 0x14009d3c3
mov rcx, r14
call fcn.140014ec0
mov r13, qword [rbp + 0x4f0]
cmp byte [r13 + 0x110], 0
je 0x14009cc18
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x2c], eax
cmp dword [rsi + 0x28], 0x80000000
mov r9d, SafeArrayAllocDescriptor
jne 0x14009d3c3
mov eax, dword [r13 + 0xd8]
add eax, dword [r13 + 0xc0]
mov dword [rsi + 0x28], eax
jmp 0x14009d3c3
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cc64
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cc64
and ebx, 0xffffffdf
cmp bx, 0x58
jne 0x14009cdd0
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cc8f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cc8f
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009cca1
mov byte [rsi + 0x1c0], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ccc2
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ccc2
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009ccd4
mov byte [rsi + 0x1c2], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ccf5
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ccf5
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009cd0a
mov dword [rsi + 0x1b0], 1
jmp case.0x14009be9f.7
cmp word [r15 + 4], 0
jne 0x14009cd21
mov dword [rsi + 0x1b0], 0x3f800000
jmp case.0x14009be9f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009cdb3
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009cdb3
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014ec0
test eax, eax
je 0x14009cdb3
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014ec0
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014ec0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1b0], xmm6
jp case.0x14009be9f.7
jne case.0x14009be9f.7
lea rcx, [r15 + 4]
call fcn.140028fa0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1b0], xmm1
jmp case.0x14009be9f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cdf0
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cdf0
and ebx, 0xffffffdf
cmp bx, 0x59
jne 0x14009cf5c
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ce1b
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ce1b
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009ce2d
mov byte [rsi + 0x1c1], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ce4e
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ce4e
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009ce60
mov byte [rsi + 0x1c3], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ce81
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ce81
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009ce96
mov dword [rsi + 0x1b4], 1
jmp case.0x14009be9f.7
cmp word [r15 + 4], 0
jne 0x14009cead
mov dword [rsi + 0x1b4], 0x3f800000
jmp case.0x14009be9f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009cf3f
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009cf3f
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014ec0
test eax, eax
je 0x14009cf3f
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014ec0
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014ec0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1b4], xmm6
jp case.0x14009be9f.7
jne case.0x14009be9f.7
lea rcx, [r15 + 4]
call fcn.140028fa0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1b4], xmm1
jmp case.0x14009be9f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cf7c
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cf7c
and ebx, 0xffffffdf
cmp bx, 0x57
jne 0x14009d0b2
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cfa7
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cfa7
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009cfb9
mov byte [rsi + 0x1c0], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cfda
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cfda
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009cfec
mov byte [rsi + 0x1c4], 1
jmp case.0x14009be9f.7
cmp word [r15 + 4], 0
jne 0x14009d003
mov dword [rsi + 0x1b8], 0x3f800000
jmp case.0x14009be9f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009d095
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009d095
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014ec0
test eax, eax
je 0x14009d095
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014ec0
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014ec0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1b8], xmm6
jp case.0x14009be9f.7
jne case.0x14009be9f.7
lea rcx, [r15 + 4]
call fcn.140028fa0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1b8], xmm1
jmp case.0x14009be9f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009d0d2
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009d0d2
and ebx, 0xffffffdf
cmp bx, 0x48
jne case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009d0fd
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009d0fd
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009d10f
mov byte [rsi + 0x1c1], 1
jmp case.0x14009be9f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009d130
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009d130
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009d142
mov byte [rsi + 0x1c5], 1
jmp case.0x14009be9f.7
cmp word [r15 + 4], 0
jne 0x14009d159
mov dword [rsi + 0x1bc], 0x3f800000
jmp case.0x14009be9f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009d1eb
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009d1eb
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014ec0
test eax, eax
je 0x14009d1eb
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014ec0
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014ec0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1bc], xmm6
jp case.0x14009be9f.7
jne case.0x14009be9f.7
lea rcx, [r15 + 4]
call fcn.140028fa0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1bc], xmm1
jmp case.0x14009be9f.7
mov rcx, r14
call fcn.140028fa0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x38], xmm1
jmp case.0x14009be9f.7
movzx ebx, word [r15]
test ebx, 0xffffff80
jne 0x14009d241
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009d241
and ebx, 0xffffffdf
cmp bx, 0x45
jne 0x14009d316
mov rdi, r14
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009d25f
cmp ax, 9
jne 0x14009d265
add rdi, 2
jmp 0x14009d250
test ax, ax
je 0x14009d316
cmp ax, 0x2d
je 0x14009d316
cmp ax, 0x2b
jne 0x14009d288
lea rax, [rdi + 2]
mov rdi, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14009d2bc
movzx eax, word [rdi + 2]
mov ecx, 0xffdf
sub ax, 0x58
test cx, ax
jne 0x14009d2bc
movzx ecx, word [rdi + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14009d2bc
add rdi, 4
mov esi, 1
xor r15d, r15d
jmp 0x14009d2c2
xor r15d, r15d
mov esi, r15d
movzx ebx, word [rdi]
mov ecx, r15d
cmp ebx, 0x20
je 0x14009d360
cmp ebx, 9
je 0x14009d360
test ebx, ebx
je 0x14009d37a
cmp ebx, 0x2e
je 0x14009d316
test rsi, rsi
je 0x14009d340
movzx ecx, bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r15d
sete cl
test ecx, ecx
je 0x14009d348
test ebx, 0xffffff80
jne 0x14009d316
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
lea rdx, str.Invalid_option.
mov r8, r12
lea rcx, [0x140118bf0]
call fcn.14004dd50
movzx eax, word [rsp + 0x34]
mov rcx, qword [rsp + 0x38]
mov word [rcx], ax
xor eax, eax
jmp 0x14009db53
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x14009d301
movzx ebx, word [rdi + 2]
add rdi, 2
mov ecx, 1
cmp ebx, 0x20
jne 0x14009d2d1
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009d36f
cmp ax, 9
jne 0x14009d375
add rdi, 2
jmp 0x14009d360
test ax, ax
jne 0x14009d316
test ecx, ecx
je 0x14009d316
mov rcx, r14
call fcn.140025b20
mov rcx, qword [rbp + 0x500]
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009d39d
or dword [rcx + 8], eax
jmp 0x14009d3c3
or dword [rcx + 0xc], eax
jmp 0x14009d3c3
mov rsi, qword [rbp + 0x500]
mov rcx, r14
call fcn.140025b20
test r13b, r13b
je 0x14009d3ba
or dword [rsi], eax
jmp case.0x14009be9f.7
or dword [rsi + 4], eax
mov r9d, SafeArrayAllocDescriptor
mov r8, qword [rsp + 0x38]
movzx eax, word [rsp + 0x34]
mov word [r8], ax
mov r14, r8
movzx edx, word [r14]
cmp dx, 0x20
je 0x14009d3e4
cmp dx, 9
jne 0x14009d3ea
add r14, 2
jmp 0x14009d3d4
mov rsi, qword [rbp + 0x500]
mov rdi, qword [rbp + 0x508]
test dx, dx
je 0x14009d492
xor ebx, ebx
jmp 0x14009a583
lea r8, [r14 - 2]
lea rdx, str.The_same_variable_cannot_be_used_for_more_than_one_control.
lea rcx, [0x140118bf0]
call fcn.14004dd50
jmp 0x14009db53
lea rdx, str.Target_label_does_not_exist.
jmp 0x14009d45f
lea rdx, str.This_control_type_should_not_have_an_associated_subroutine.
jmp 0x14009d45f
mov rcx, qword [rbp + 0x508]
cmp qword [rcx], r15
je 0x14009d44c
call fcn.14000e400
jmp 0x14009db53
mov r8, r12
jmp 0x14009d40c
mov rdi, qword [rbp + 0x508]
lea rdx, str.The_same_variable_cannot_be_used_for_more_than_one_control.
mov rcx, qword [rsp + 0x38]
movzx eax, word [rsp + 0x34]
mov word [rcx], ax
cmp qword [rdi], 0
jne 0x14009d442
mov r8, r12
lea rcx, [0x140118bf0]
call fcn.14004dd50
jmp 0x14009db53
lea rdx, str.A_controls_variable_must_be_global_or_static.
jmp 0x14009d31d
mov r15, qword [rbp + 0x4f0]
lea r12, [0x140000000]
mov r13d, 1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009db4e
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r8d, dword [rsi]
mov ebx, r8d
mov edx, dword [rsi + 4]
mov r14d, eax
or ebx, eax
mov ecx, edx
not ecx
and ebx, ecx
movzx ecx, byte [rdi + 8]
add ecx, 0xfffffffe
cmp ecx, 8
ja case.0x14009d4eb.9
movsxd rax, ecx
mov ecx, dword [r12 + rax*4 + 0x9dde8]
add rcx, r12
jmp rcx
mov eax, ebx
xor eax, r14d
and eax, 0xf
xor ebx, eax
jmp case.0x14009d4eb.9
and ebx, 0xfffffff7
or ebx, 7
jmp case.0x14009d4eb.9
test bl, 1
je 0x14009d50e
and ebx, 0xfffffff1
or ebx, 1
jmp 0x14009d511
and ebx, 0xfffffff0
mov eax, dword [r15 + 0x30]
mov edi, dword [rbp + 0x510]
cmp edi, eax
jne 0x14009d5a6
test dl, 1
je 0x14009d549
mov rcx, qword [r15 + 8]
xor r9d, r9d
mov r8, r13
mov dword [r15 + 0x30], 0xffffffff
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
or r14d, 1
mov rdi, qword [rbp + 0x508]
movsxd rax, dword [rsi + 0x78]
test eax, eax
je 0x14009d6b3
movzx ecx, byte [rdi + 8]
cmp cl, 0xc
jne 0x14009d68b
mov rcx, qword [rdi]
xor r9d, r9d
mov edx, 0xc5
test eax, eax
jns 0x14009d6aa
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rsi + 0x78], 0x80000000
je 0x14009d6b3
test bl, 4
jne 0x14009d6b3
and ebx, 0xffefff7f
jmp 0x14009d6b3
test r8b, 1
je 0x14009d549
cmp eax, dword [r15 + 0x20]
jae 0x14009d5f1
mov rcx, qword [r15 + 0x28]
mov edx, 0xfffffff0
imul r8, rax, 0x58
mov rcx, qword [r8 + rcx]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r15 + 0x28]
mov r9, r13
mov r8d, eax
mov edx, 0xf4
mov eax, dword [r15 + 0x30]
and r8d, 0xfffe
imul r10, rax, 0x58
mov rcx, qword [r10 + rcx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r15 + 8]
lea r8d, [rdi + 3]
xor r9d, r9d
mov dword [r15 + 0x30], edi
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14009d549
mov eax, ebx
and eax, 6
cmp al, 6
jne 0x14009d624
and ebx, 0xfffffff6
or ebx, 6
jmp case.0x14009d4eb.9
and ebx, 0xfffffff3
or ebx, 3
jmp case.0x14009d4eb.9
and ebx, 0xfffffff9
or ebx, 9
jmp case.0x14009d4eb.9
test bl, 1
je 0x14009d64a
and ebx, 0xfffffff1
or ebx, 1
jmp case.0x14009d4eb.9
and ebx, 0xfffffff2
or ebx, 2
jmp case.0x14009d4eb.9
mov eax, dword [rsi + 0x14]
cmp eax, 0xffffffff
je case.0x14009d4eb.9
mov rcx, qword [rdi]
mov r8d, eax
xor r9d, r9d
mov edx, 0x108e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rsi + 0x14]
cmp eax, 4
je case.0x14009d4eb.9
and ebx, 0xfffffffc
or ebx, eax
jmp case.0x14009d4eb.9
cmp cl, 0xf
jne 0x14009d6b3
mov rcx, qword [rdi]
mov edx, 0x403
test eax, eax
jns 0x14009d6a4
xor r9d, r9d
xor r8d, r8d
jmp 0x14009d6ad
mov r9d, 6
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
xor sil, sil
cmp r14d, ebx
je 0x14009d7b7
mov r12, qword [rbp + 0x508]
xor dil, dil
mov sil, 1
movzx eax, byte [r12 + 8]
cmp al, 4
je 0x14009d75d
cmp al, 9
je 0x14009d703
cmp al, 0x12
jne 0x14009d773
mov rcx, qword [r12]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x4f8], eax
jmp 0x14009d773
mov eax, r14d
and eax, 0x100000
bt ebx, 0x14
jae 0x14009d74c
test eax, eax
jne 0x14009d773
mov r15, qword [rbp + 0x500]
mov eax, dword [r15 + 0x7c]
test eax, eax
jns 0x14009d73f
mov rcx, qword [r12]
lea rdx, [rbp - 0x28]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp - 0x20]
sub eax, dword [rbp - 0x28]
lea eax, [rax + rax*2]
mov dword [r15 + 0x7c], eax
movsxd r8, eax
xor r9d, r9d
mov edx, 0x194
jmp 0x14009d769
test eax, eax
je 0x14009d773
xor r9d, r9d
mov edx, 0x194
xor r8d, r8d
jmp 0x14009d769
movzx r8d, bx
mov r9, r13
mov edx, 0xf4
mov rcx, qword [r12]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r12]
mov r8d, ebx
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14009d79b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14009d7be
mov rcx, qword [r12]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r14d
movzx edi, dil
cmovne edi, r13d
jmp 0x14009d7be
movzx edi, byte [rbp + 0x508]
mov rcx, qword [rbp + 0x508]
mov edx, 0xffffffec
movzx r12d, sil
mov rcx, qword [rcx]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r13d, eax
mov r15d, eax
mov rax, qword [rbp + 0x500]
or r15d, dword [rax + 8]
mov ecx, dword [rax + 0xc]
not ecx
and r15d, ecx
cmp r13d, r15d
je 0x14009d859
movzx ecx, sil
test sil, sil
mov eax, 1
cmove ecx, eax
and r12b, dil
movzx esi, cl
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, r15d
mov edx, 0xffffffec
mov r15, qword [rbp + 0x508]
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14009d83c
movzx edi, r12b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14009d859
mov rcx, qword [r15]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r13d
movzx edi, r12b
mov eax, 1
cmovne edi, eax
mov r13, qword [rbp + 0x508]
cmp byte [r13 + 8], 0xa
jne 0x14009d8cf
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, qword [rbp + 0x500]
mov r15, rax
mov eax, dword [r12 + 0x10]
cmp r15d, eax
je 0x14009d8d6
test sil, sil
jne 0x14009d89b
mov sil, 1
xor dil, dil
mov rcx, qword [r13]
mov r9, rax
xor r8d, r8d
mov edx, 0x1036
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, r15d
je 0x14009d8db
mov dil, 1
jmp 0x14009d8d6
mov r12, qword [rbp + 0x500]
test sil, sil
je 0x14009d8f5
mov eax, dword [rsp + 0x30]
test dil, dil
movzx eax, al
mov r15d, 1
cmovne eax, r15d
mov dword [rsp + 0x30], eax
jmp 0x14009d8fb
mov r15d, 1
movzx eax, byte [r13 + 8]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x14009d91f.13
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9de0c]
add rcx, rdx
jmp rcx
cmp byte [r12 + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 0
je case.0x14009d91f.13
cmp dword [r12 + 0x44], 0x7fff
jg 0x14009d969
cmp dword [r12 + 0x40], 0xffff8001
jl 0x14009d969
and byte [r13 + 9], 0x7f
mov edx, 0x465
movzx ecx, word [r12 + 0x40]
movzx eax, word [r12 + 0x44]
shl ecx, 0x10
or ecx, eax
movsxd r9, ecx
jmp 0x14009da9c
or byte [r13 + 9], 0x80
mov edx, 0x46f
movsxd r9, dword [r12 + 0x44]
movsxd r8, dword [r12 + 0x40]
jmp 0x14009da9f
mov r8, r12
mov rdx, r13
call fcn.1400a4660
test dword [r12 + 4], 0x100
je case.0x14009d91f.13
xor r9d, r9d
mov edx, 0x41d
jmp 0x14009da9c
mov r8, r12
mov rdx, r13
call fcn.1400a47d0
jmp case.0x14009d91f.13
cmp byte [r12 + 0x1a3], 0
je 0x14009d9da
mov r9d, dword [r13 + 0x20]
xor r8d, r8d
mov rcx, qword [r13]
mov edx, 0x111e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r12 + 0x74]
cmp eax, 0xffffffff
je case.0x14009d91f.13
cmp eax, 0xff000000
jne 0x14009d9fa
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColor]
mov r9d, eax
mov edx, 0x111d
jmp 0x14009da9c
mov rcx, qword [rbp + 0x4f0]
mov r9d, ebx
mov r8, r12
mov rdx, r13
call fcn.1400a48b0
cmp r14d, ebx
je case.0x14009d91f.13
mov r8d, dword [rbp + 0x4f8]
xor r9d, r9d
mov edx, 0x402
jmp 0x14009da9f
mov eax, dword [r12 + 0x150]
test eax, eax
je case.0x14009d91f.13
mov rcx, qword [r13]
lea r9, [r12 + 0x88]
mov r8d, eax
mov edx, 0xcb
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
jmp 0x14009daad
mov eax, dword [r12 + 0x150]
test eax, eax
je case.0x14009d91f.13
mov rcx, qword [r13]
lea r9, [r12 + 0x88]
mov r8d, eax
mov edx, 0x192
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
jmp 0x14009daad
mov eax, dword [r12 + 0x74]
cmp eax, 0xffffffff
je case.0x14009d91f.13
mov r9d, eax
mov edx, 0x2001
xor r8d, r8d
mov rcx, qword [r13]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [rsp + 0x30]
mov eax, dword [r12 + 0x19c]
test eax, eax
je 0x14009daea
mov rcx, qword [r13]
cmp eax, 3
mov eax, 0
sete al
xor r9d, r9d
mov r8, rax
lea edx, [r9 + 0xb]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r12 + 0x19c], 3
jne 0x14009daea
cmp byte [r13 + 8], 0xb
jne 0x14009daee
test bl, bl
je 0x14009dafd
mov rcx, qword [r13]
mov r8d, r15d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
test sil, sil
je 0x14009db4e
test dil, dil
jne 0x14009db4e
mov rax, qword [0x140112060]
lea rdx, [0x1400f5d6c]
test byte [rax + 0x140], 1
jne 0x14009db38
mov rcx, qword [0x1401156c0]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400c3f40
jmp 0x14009db4e
mov rcx, qword [0x1401192c0]
lea r9, [0x1400e0684]
xor r8d, r8d
call fcn.14004d4a0
mov eax, 1
movaps xmm7, xmmword [rsp + 0x580]
movaps xmm6, xmmword [rsp + 0x590]
add rsp, 0x5a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret