Function at 0x14004c870
Capabilities:
Enumerate gui resources
Lock the desktop

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp + 0x20], r9d
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov r14, qword [0x140296e90]
xor eax, eax
movsxd rdi, r9d
movsxd r15, r8d
movsxd r13, edx
mov rsi, rcx
mov ebx, eax
test r14, r14
je 0x14004c8ef
cmp qword [r14], rbx
jne 0x14004c8d6
lea rdx, str.F:CheckPointsTPDrv_builderSuperMan1LibSynList.h
lea rcx, str.m_pItem
mov r8d, 0x60
call fcn.1400eb260
mov rcx, qword [r14]
mov rdx, r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
jne 0x14004c912
mov r14, qword [r14 + 8]
test r14, r14
jne 0x14004c8b8
xor eax, eax
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r14, qword [r14]
test r14, r14
je 0x14004c8ef
mov r12d, dword [rbp + 0x1f0]
mov edx, 1
test r12d, r12d
je 0x14004cbaf
xor ecx, ecx
mov dword [rsp + 0x78], ecx
cmp edi, 0x1b
jne 0x14004c94f
mov eax, dword [0x140296c90]
add eax, 0xffffdc84
cmp eax, edx
ja 0x14004c968
mov dword [rsp + 0x78], edx
jmp 0x14004c968
cmp edi, 0x49
jne 0x14004c968
mov eax, dword [0x140296c90]
add eax, 0xffffdc84
cmp eax, edx
cmovbe ecx, edx
mov dword [rsp + 0x78], ecx
lea rax, [rsi + 0xc0]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rbp - 0x78], rax
call fcn.140059050
mov qword [rsp + 0x40], rax
add rax, 0x20
mov rcx, rax
mov qword [rbp - 0x80], rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x48], 1
cmp dword [rax + 0x18], ebx
jne 0x14004c9d4
mov r8d, dword [rsp + 0x78]
xor r9d, r9d
mov rcx, r14
lea edx, [r9 + 1]
call fcn.14002ae10
mov dword [r14 + 0xc44], 1
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x40]
inc dword [rax + 0x18]
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [rsp + 0x48], ebx
jne 0x14004c9fa
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x78]
call fcn.140059150
jmp 0x14004c8ef
cmp dword [rsi + 0x90], ebx
je 0x14004ca70
test byte [r14 + 0x864], 1
je 0x14004ca70
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14004e7c0
lea rcx, [rsi + 0x68]
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
call fcn.140039ae0
test eax, eax
je 0x14004ca70
cmp eax, dword [rsi + 0x6c]
jae 0x14004ca70
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x14004ca70
cmp word [rcx], bx
je 0x14004ca70
cmp edi, 0xb
je 0x14004ca70
xor edx, edx
mov r8d, 0x22001
call qword [sym.imp.WINMM.dll_PlaySoundW]
cmp dword [r14 + 0x7c8], ebx
je 0x14004cafe
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14004e7c0
lea rcx, [rsi + 0x68]
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
call fcn.140039ae0
test eax, eax
je 0x14004cafe
cmp eax, dword [rsi + 0x6c]
jae 0x14004cafe
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x14004cafe
cmp word [rcx], bx
je 0x14004cafe
mov edx, dword [r14 + 0x7c8]
dec edx
jne 0x14004cafe
lea r8, [rsp + 0x48]
lea rdx, [0x14014b980]
mov dword [rsp + 0x48], ebx
call fcn.140100f50
mov edx, dword [rsp + 0x48]
test edx, edx
je 0x14004cafe
mov rcx, r14
call fcn.14002c4e0
cmp dword [rsi + 0x90], ebx
je 0x14004cb10
test byte [r14 + 0x864], 1
jne 0x14004cb19
cmp dword [r14 + 0x7c8], ebx
je 0x14004cb4a
cmp edi, 0x39
ja 0x14004cb4a
movabs rcx, 0x200000010010020
bt rcx, rdi
jae 0x14004cb4a
mov ecx, edi
call fcn.14004fcb0
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
call fcn.14004e7c0
cmp edi, 0x62
ja case.0x14004cb6c.4
lea rdx, [0x140000000]
movzx eax, byte [rdx + rdi + 0x4de78]
mov ecx, dword [rdx + rax*4 + 0x4de70]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x40]
mov eax, dword [rdx + 0x18]
test eax, eax
jle 0x14004cba3
dec eax
mov dword [rdx + 0x18], eax
jne 0x14004cba3
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.14002ae10
mov dword [r14 + 0xc44], ebx
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x14004cb6c.4
lea rax, [rsi + 0xc0]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rbp - 0x78], rax
call fcn.14005af90
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14004c8ef
xor edx, edx
mov dword [rsp + 0x78], edx
test r15b, 0x10
je 0x14004cc36
cmp qword [r14 + 0x788], rdx
je 0x14004cc36
mov rcx, qword [0x140296048]
call qword [sym.imp.USER32.dll_GetDC]
mov ecx, r15d
mov r8d, r12d
sar ecx, 0xc
mov rdx, rax
mov rdi, rax
movzx r9d, cl
mov rcx, r14
mov qword [rsp + 0x20], rbx
dec r9d
call fcn.1400277c0
mov rcx, qword [0x140296048]
mov rdx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [rbp + 0x1e8]
xor edx, edx
cmp edi, 0x62
ja case.0x14004cc5d.4
lea r8, [0x140000000]
movsxd rax, edi
movzx eax, byte [r8 + rax + 0x4dfb8]
mov ecx, dword [r8 + rax*4 + 0x4dedc]
add rcx, r8
jmp rcx
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140054160
mov ebx, eax
jmp case.0x14004cc5d.4
mov r15d, 1
mov ebx, r15d
jmp 0x14004cf0d
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140054260
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov edx, r13d
mov rcx, rsi
call fcn.140055100
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov edx, r13d
mov rcx, rsi
call fcn.1400551d0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov edx, edi
mov rcx, rsi
call fcn.1400546c0
mov ebx, eax
jmp case.0x14004cc5d.4
test r12d, r12d
je 0x14004cdb4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne 0x14004cdb4
lea r9d, [rax + 5]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140055db0
mov ebx, eax
test eax, eax
jne 0x14004cdb9
cmp dword [r14 + 0x848], eax
je 0x14004cdb9
mov rcx, qword [0x140296048]
shl r13d, 0x10
mov r8, r15
movsxd r9, r13d
mov edx, 0x9002
or r9, 5
call qword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
test r12d, r12d
sete al
jmp 0x14004d321
mov ebx, 1
xor eax, eax
test r12d, r12d
sete al
jmp 0x14004d321
test r12d, r12d
je case.0x14004cc5d.11
mov rbx, qword [r14 + 0xce0]
mov rcx, r14
mov rdx, rbx
call fcn.140028ff0
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400bbdd0
test al, al
jns case.0x14004cc5d.11
mov rdx, qword [r14 + 0xc50]
mov rcx, r14
call fcn.140028ff0
mov r15d, 1
mov ebx, r15d
jmp 0x14004d794
mov r15d, 1
test r12d, r12d
je 0x14004cc8f
mov edx, r15d
mov rcx, r14
call fcn.14002b8f0
mov ebx, eax
jmp 0x14004d794
mov edx, r12d
mov rcx, r14
call fcn.14002b8f0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
lea r8d, [rax + 4]
mov r9d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140054d20
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
lea r8d, [rax + 8]
jmp 0x14004ce54
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
mov r9d, r12d
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140054d20
mov ebx, eax
jmp 0x14004d794
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
lea r8d, [rax + 2]
jmp 0x14004ce54
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cefa
mov r15d, 1
mov ebx, r15d
jmp 0x14004d794
mov edx, r13d
mov rcx, rsi
call fcn.140056870
mov ebx, eax
mov r15d, 1
xor r13d, r13d
mov rdi, qword [rsp + 0x40]
mov esi, dword [r14 + 0xc4c]
test esi, esi
je 0x14004cf38
lea rcx, [r14 + 0x8a8]
call fcn.140009f30
mov ecx, r13d
cmp eax, esi
setge cl
test ecx, ecx
jne 0x14004cf71
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x18]
test eax, eax
jle 0x14004cf67
dec eax
mov dword [rdi + 0x18], eax
jne 0x14004cf67
xor r9d, r9d
mov r8d, r15d
xor edx, edx
mov rcx, r14
call fcn.14002ae10
mov dword [r14 + 0xc44], r13d
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp - 0x78]
mov rdx, rdi
call fcn.140059150
mov eax, ebx
jmp 0x14004c8f1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140056150
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.1400561c0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne 0x14004cdb4
test r12d, r12d
je 0x14004cdb4
lea r9d, [rax + 0x10]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140055db0
mov ebx, eax
xor eax, eax
test r12d, r12d
sete al
jmp 0x14004d321
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140057450
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140057490
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140055430
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140055560
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.1400556d0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.140055800
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov rcx, rsi
call fcn.1400558d0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140057620
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140057c30
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004cc89
mov r9d, 1
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140057da0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
call fcn.1400f02e0
lea rdx, [rbp - 0x70]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.Photos_PhotoCanvas
lea rcx, [rbp - 0x70]
mov r8d, 0x12
call fcn.1400fd324
test eax, eax
jne 0x14004d1d2
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053e10
test eax, eax
je 0x14004d1d2
mov rcx, rsi
test r12d, r12d
je 0x14004d27b
mov edx, 1
call fcn.140058090
mov r9d, 1
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140057da0
jmp case.0x14004cc5d.4
xor edx, edx
call fcn.140058090
mov eax, 1
jmp 0x14004c8f1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
mov r9d, r15d
mov r8d, edi
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], r12d
call fcn.140056940
mov ebx, eax
jmp case.0x14004cc5d.4
test r12d, r12d
sete dl
mov dword [rsp + 0x78], edx
test r12d, r12d
je 0x14004d2f8
mov edx, 0x10
mov rcx, r14
call fcn.14002f4e0
mov dword [rsp + 0x30], r15d
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov r8d, edi
xor edx, edx
mov rcx, r14
mov dword [rsp + 0x20], ebx
call fcn.14002f5c0
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne 0x14004d31d
mov r9d, r12d
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140056aa0
mov ebx, eax
mov eax, dword [rsp + 0x78]
test eax, eax
je case.0x14004cc5d.4
lea rcx, [r14 + 0x50]
call fcn.140009730
test al, al
jne case.0x14004cc5d.4
xor edx, edx
mov rcx, r14
call fcn.140018150
jmp case.0x14004cc5d.4
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.4
call qword [sym.imp.USER32.dll_LockWorkStation]
jmp case.0x14004cc5d.4
test r12d, r12d
je 0x14004cc89
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140056ea0
mov ebx, eax
jmp case.0x14004cc5d.4
mov r15d, 1
test r12d, r12d
je 0x14004d3a1
mov ebx, r15d
jmp 0x14004d3ae
mov edx, r15d
mov rcx, r14
call fcn.140018150
mov ebx, eax
mov dword [r14 + 0x850], r15d
test r12d, r12d
je 0x14004cf0d
lea rcx, [r14 + 0x118]
cmp word [rcx], 0
je 0x14004d794
mov r8, qword [0x140296048]
xor r9d, r9d
xor edx, edx
call fcn.1400f3d40
jmp 0x14004d794
test r12d, r12d
je 0x14004d3f8
mov r15d, 1
mov ebx, r15d
jmp 0x14004d794
xor edx, edx
mov rcx, r14
call fcn.140018150
jmp 0x14004cf05
xor r13d, r13d
test r12d, r12d
je 0x14004d41d
mov r15d, 1
mov ebx, r15d
jmp 0x14004d797
mov edx, r13d
mov rcx, r14
cmp dword [r14 + 0x848], edx
sete dl
call fcn.140018150
mov r15d, 1
mov ebx, eax
jmp 0x14004cf10
mov edx, r12d
mov rcx, r14
call fcn.140018150
mov ebx, eax
jmp case.0x14004cc5d.4
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140057210
mov ebx, eax
jmp case.0x14004cc5d.4
test r12d, r12d
je 0x14004d4c9
mov rax, qword [0x140295e60]
lea rcx, [0x140295e60]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x140295e60]
mov edx, eax
mov rax, qword [0x140295e60]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.1400572c0
mov ebx, eax
jmp case.0x14004cc5d.4
cmp edi, 0x45
mov rdi, qword [rsp + 0x40]
jne 0x14004d566
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x18]
test eax, eax
jle 0x14004d507
dec eax
mov dword [rdi + 0x18], eax
jne 0x14004d507
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.14002ae10
mov dword [r14 + 0xc44], ebx
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [0x140295e60]
lea rcx, [0x140295e60]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x140295e60]
mov edx, eax
mov rax, qword [0x140295e60]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.140053a20
test eax, eax
jne 0x14004d574
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.1400572c0
mov ebx, eax
mov r15d, 1
xor r13d, r13d
jmp 0x14004cf15
mov r15d, 1
xor r13d, r13d
mov ebx, r15d
jmp 0x14004cf15
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r15d
call fcn.140057090
mov ebx, eax
jmp 0x14004d794
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
mov r9d, r15d
jmp 0x14004d5ad
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
xor r9d, r9d
mov r8d, r15d
jmp 0x14004d5b0
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
mov r9d, r15d
mov r8d, r15d
jmp 0x14004d5b0
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
xor r9d, r9d
lea r8d, [r15 + 1]
jmp 0x14004d5b0
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
mov r9d, r15d
lea r8d, [r15 + 1]
jmp 0x14004d5b0
test r12d, r12d
je 0x14004cc89
mov ecx, 0x32
call fcn.14004fcb0
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
mov rdi, rax
call fcn.14004e7c0
lea rcx, [rsi + 0x68]
mov r9, rdi
mov r8d, r15d
mov edx, r13d
call fcn.140039ae0
test eax, eax
je case.0x14004cc5d.4
cmp eax, dword [rsi + 0x6c]
jae case.0x14004cc5d.4
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rdi, qword [rcx + rax + 8]
test rdi, rdi
je case.0x14004cc5d.4
cmp word [rdi], bx
je case.0x14004cc5d.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
mov r9, rdi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.1400572c0
mov ebx, eax
jmp case.0x14004cc5d.4
test r12d, r12d
je 0x14004cf07
mov rax, qword [0x140295650]
lea rcx, [0x140295650]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rax, rax
je case.0x14004cc5d.4
cmp qword [rax + 0x10], rbx
je case.0x14004cc5d.4
cmp qword [rax + 0x18], rbx
je case.0x14004cc5d.4
cmp dword [r14 + 0xb78], 0x10
mov rcx, r14
je 0x14004d7a5
mov edx, 0x10
call fcn.14002b830
mov r15d, 1
xor r13d, r13d
test r12d, r12d
jne 0x14004cf7d
jmp 0x14004cf10
xor edx, edx
jmp 0x14004d789
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
test r12d, r12d
je 0x14004d7e0
lea r9d, [rax + 1]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140057da0
mov r15d, 1
mov ebx, eax
jmp 0x14004d7e9
mov r15d, 1
mov ebx, r15d
test byte [r14 + 0x84c], 2
je 0x14004d794
cmp dword [r14 + 0x848], 0
je 0x14004d794
test r12d, r12d
je 0x14004cf0d
mov rcx, qword [r14 + 0x58]
test rcx, rcx
jne 0x14004d813
lea rcx, [r14 + 0x70]
mov rax, qword [rcx]
mov r8d, r15d
mov edx, 0x1000320
call qword [rax + 0x30]
jmp 0x14004d794
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
mov r15d, 1
test eax, eax
jne 0x14004ce03
mov eax, r15d
lea rdx, [0x140217b70]
lea rcx, [0x1400ef8b0]
mov qword [rbp - 0x80], r15
xor edi, edi
mov qword [0x140217b70], rax
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rsp + 0x48], edi
cmp dword [rsi + 0xbc], ebx
jne 0x14004d794
lea rcx, [rsp + 0x48]
call fcn.1400f33a0
test al, al
je 0x14004d8ed
cmp dword [rsp + 0x48], ebx
jne 0x14004d794
lea r9d, [r15 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x5c], rdi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x58], 0xd
call fcn.140097a90
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov dword [rsp + 0x5c], 2
call fcn.140097a90
jmp 0x14004d794
cmp dword [0x140217b70], ebx
je 0x14004d919
cmp dword [0x140217b74], ebx
jbe 0x14004d919
cmp dword [0x1402954d0], ebx
jne 0x14004d919
mov rcx, rsi
call fcn.140055ba0
mov dword [0x1402954d0], r15d
jmp 0x14004d794
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov dword [0x1402954d0], edi
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x5c], rdi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x58], 0x5b
call fcn.140097a90
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov qword [rsp + 0x58], 9
call fcn.140097a90
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov dword [rsp + 0x58], 9
mov dword [rsp + 0x5c], 2
call fcn.140097a90
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov dword [rsp + 0x58], 0x5b
mov dword [rsp + 0x5c], 2
call fcn.140097a90
mov dword [rsi + 0xbc], r15d
mov rcx, qword [0x140296048]
lea r9, [0x1400581a0]
mov r8d, 0x1f4
mov rdx, rsi
call qword [sym.imp.USER32.dll_SetTimer]
xor r13d, r13d
test rax, rax
jne 0x14004d797
mov dword [rsi + 0xbc], edi
jmp 0x14004d797
test r12d, r12d
je 0x14004cf07
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.11
lea rcx, [rsp + 0x48]
xor edi, edi
mov dword [rsp + 0x48], edi
call fcn.1400f33a0
lea r15d, [rdi + 1]
test al, al
je 0x14004dae5
mov qword [rsp + 0x5c], rdi
mov qword [rsp + 0x68], rdi
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov dword [rsp + 0x50], r15d
mov edx, r15d
cmp dword [rsp + 0x48], ebx
je 0x14004daab
mov dword [rsp + 0x58], 0x1b
call fcn.140097a90
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov dword [rsp + 0x58], 0x1b
mov dword [rsp + 0x5c], 2
call fcn.140097a90
mov dword [rsi + 0xbc], edi
mov dword [0x1402954d0], edi
jmp 0x14004d794
mov dword [rsp + 0x58], 0xd
call fcn.140097a90
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov dword [rsp + 0x5c], 2
call fcn.140097a90
mov dword [0x1402954d0], edi
jmp 0x14004d794
mov rax, r15
lea rdx, [0x140217b70]
lea rcx, [0x1400ef8b0]
mov qword [rbp - 0x80], r15
mov qword [0x140217b70], rax
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x140217b70], ebx
jne 0x14004db17
mov rcx, rsi
call fcn.140055ba0
mov dword [0x1402954d0], edi
jmp 0x14004d794
test r12d, r12d
je 0x14004cc89
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.4
lea rcx, [rsp + 0x48]
xor edi, edi
mov dword [rsp + 0x48], edi
call fcn.1400f33a0
test al, al
je 0x14004db5f
cmp dword [rsp + 0x48], ebx
jne case.0x14004cc5d.4
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x5c], rdi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x58], 0x11
call fcn.140097a90
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x58], 0xa4
call fcn.140097a90
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x58], 0x10
call fcn.140097a90
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x58], 9
call fcn.140097a90
mov r15d, 1
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov r9d, 0x28
mov dword [rsp + 0x58], 9
mov dword [rsp + 0x5c], 2
call fcn.140097a90
lea r9d, [r15 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov dword [rsp + 0x58], 0x10
mov dword [rsp + 0x5c], 2
call fcn.140097a90
lea r9d, [r15 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov dword [rsp + 0x58], 0xa4
mov dword [rsp + 0x5c], 2
call fcn.140097a90
mov dword [rsp + 0x58], 0x11
xor r13d, r13d
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov r9d, 0x28
mov edx, r15d
mov dword [rsp + 0x5c], 2
call fcn.140097a90
jmp 0x14004d797
test r12d, r12d
je 0x14004cc89
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
test eax, eax
jne case.0x14004cc5d.4
lea rcx, [rsp + 0x48]
xor edi, edi
mov dword [rsp + 0x48], edi
call fcn.1400f33a0
test al, al
je 0x14004dcef
cmp dword [rsp + 0x48], ebx
jne case.0x14004cc5d.4
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x5c], rdi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x58], 0x11
call fcn.140097a90
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x58], 0xa4
call fcn.140097a90
mov r9d, 0x28
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x58], 9
call fcn.140097a90
mov r15d, 1
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov r9d, 0x28
mov dword [rsp + 0x58], 9
mov dword [rsp + 0x5c], 2
call fcn.140097a90
lea r9d, [r15 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov dword [rsp + 0x58], 0xa4
mov dword [rsp + 0x5c], 2
call fcn.140097a90
mov dword [rsp + 0x58], 0x11
jmp 0x14004d8c6
test r12d, r12d
je 0x14004cc89
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140053a20
xor r13d, r13d
test eax, eax
jne 0x14004de21
mov dword [rsp + 0x48], r13d
mov edi, r13d
nop word [rax + rax]
lea rcx, [rsp + 0x48]
call fcn.1400f33a0
movzx eax, al
test eax, eax
jne 0x14004de2c
lea ecx, [rax + 0x32]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jl 0x14004de00
mov r15d, 1
jmp 0x14004d797
mov r15d, 1
cmp dword [rsp + 0x48], ebx
jne 0x14004d797
lea r9d, [r15 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x140295650]
mov edx, r15d
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x5c], r13
mov qword [rsp + 0x68], r13
mov dword [rsp + 0x58], 0xd
call fcn.140097a90
jmp 0x14004dc8b