Function at 0x1400a11b0
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xb0
mov rcx, rdx
mov rbx, r9
mov r13, r8
call fcn.1400323a0
mov r15d, eax
test eax, eax
je 0x1400a1b3f
mov r9, qword [rbp + 0x7f]
mov r8, qword [rbp + 0x77]
mov rdx, qword [rbp + 0x6f]
mov rcx, qword [rbp + 0x67]
call fcn.140086740
mov r14, rax
test rax, rax
je 0x1400a1b3f
mov rdx, rbx
mov rcx, rax
call fcn.1400e9630
mov rsi, rax
test rax, rax
je 0x1400a1b3f
mov eax, dword gs:[0x48]
xor r12d, r12d
mov dword [rbp - 0x59], eax
lea eax, [r15 - 1]
lea edi, [r12 + 1]
cmp eax, 0x10
ja case.default.0x1400a125e
lea rdx, [0x140000000]
movsxd rcx, eax
mov eax, dword [rdx + rcx*4 + 0xa223c]
add rax, rdx
jmp rax
lea rax, [rbp - 0x51]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov edx, 0xf0
mov rcx, rsi
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
cmp r15d, edi
mov rax, r12
sete al
cmp qword [rbp - 0x51], rax
je case.default.0x1400a125e
xor edx, edx
mov rcx, r14
xor r15b, r15b
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r13d, eax
test eax, eax
je 0x1400a12ea
cmp eax, dword [0x1401430c0]
je 0x1400a12ea
mov rcx, r14
call fcn.1400e9c60
test al, al
jne 0x1400a12ea
mov ecx, dword [0x1401430c0]
mov r8d, edi
mov edx, r13d
call qword [sym.imp.USER32.dll_AttachThreadInput]
test eax, eax
setne r15b
cmp r14, rsi
jne 0x1400a12fa
mov rcx, rsi
call fcn.1400e9c00
mov r14, rax
mov rcx, r14
call qword [sym.imp.USER32.dll_SetActiveWindow]
lea rdx, [rbp - 0x41]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x1400a1330
mov ecx, r12d
mov eax, r12d
mov r8d, r12d
mov dword [rbp - 0x39], r12d
mov r9d, r12d
mov dword [rbp - 0x41], r12d
mov dword [rbp - 0x3d], ecx
mov dword [rbp - 0x35], eax
jmp 0x1400a133e
mov eax, dword [rbp - 0x35]
mov r8d, dword [rbp - 0x39]
mov ecx, dword [rbp - 0x3d]
mov r9d, dword [rbp - 0x41]
sub eax, ecx
sub r8d, r9d
cdq
sub eax, edx
sar eax, 1
movzx ebx, ax
mov eax, r8d
mov r8, rdi
cdq
shl ebx, 0x10
sub eax, edx
mov edx, 0x201
sar eax, 1
movzx ecx, ax
or rbx, rcx
mov rcx, rsi
mov r9, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov r9, rbx
xor r8d, r8d
mov edx, 0x202
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageW]
test r15b, r15b
je case.default.0x1400a125e
mov ecx, dword [0x1401430c0]
xor r8d, r8d
mov edx, r13d
call qword [sym.imp.USER32.dll_AttachThreadInput]
jmp case.default.0x1400a125e
mov edx, edi
mov rcx, rsi
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.default.0x1400a125e
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.default.0x1400a125e
mov edx, 4
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x1400a125e
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x1400a125e
cmp word [r13], r12w
je 0x1400a16eb
mov edx, 0xfffffff0
mov r12d, 0xffffffec
cmp r15d, 7
cmove r12d, edx
mov rcx, rsi
mov edx, r12d
call qword [sym.imp.USER32.dll_GetWindowLongW]
movzx edx, word [r13]
lea rcx, [0x140122a78]
mov edi, eax
call qword [sym.imp.MSVCR100.dll_wcschr]
test rax, rax
jne 0x1400a1437
mov rcx, r13
call fcn.1400050b0
mov rbx, rax
jmp 0x1400a1467
lea rcx, [r13 + 2]
call fcn.1400050b0
movzx ecx, word [r13]
cmp ecx, 0x2b
je 0x1400a1463
cmp ecx, 0x2d
je 0x1400a145d
cmp ecx, 0x5e
jne 0x1400a1458
xor eax, edi
jmp 0x1400a1465
mov ebx, dword [rbp - 0x59]
jmp 0x1400a1467
not eax
and eax, edi
jmp 0x1400a1465
or eax, edi
mov ebx, eax
cmp ebx, edi
jne 0x1400a173b
mov rsi, qword [0x140140268]
movzx eax, byte [rsi + 0x23]
test al, al
jne 0x1400a14a1
mov byte [rsp + 0x20], 1
mov rcx, qword [rsi + 0x10]
lea rdx, [0x140103674]
xor r9d, r9d
or r8, 0xffffffffffffffff
call fcn.1400e6e20
mov edi, eax
jmp 0x1400a1b4a
lea r14, [0x140103674]
mov edi, 1
cmp qword [rsi + 8], r14
jne 0x1400a14bc
mov r13, qword [rsi + 0x10]
shr r13, 1
jmp 0x1400a14bf
mov r13, rdi
lea rcx, [r13 + 1]
lea r12, [rcx + rcx]
cmp al, 2
jne 0x1400a14dd
mov rdx, r13
mov rcx, r14
call fcn.140006bc0
mov edi, eax
jmp 0x1400a1b4a
mov r8, qword [0x14013b0d0]
cmp r12, r8
jbe 0x1400a1510
cmp r12, qword [rsi + 0x18]
jbe 0x1400a1510
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
mov edi, eax
jmp 0x1400a1b4a
cmp rcx, 2
jae 0x1400a152c
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 3]
call fcn.1400e74d0
mov eax, edi
jmp 0x1400a1b4a
movzx eax, byte [rsi + 0x21]
test al, 2
je 0x1400a1549
mov rcx, qword [rsi]
and al, 0x3d
mov byte [rsi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rsi + 0x18]
and byte [rsi + 0x21], 0x82
cmp r12, r9
jbe 0x1400a16bf
movzx r10d, byte [rsi + 0x20]
movzx eax, r10b
cmp r10b, dil
jbe 0x1400a1579
cmp al, 2
je 0x1400a15bb
mov rbx, qword [rbp - 0x49]
mov rax, qword [rbp - 0x49]
jmp 0x1400a16b3
mov ebx, 0x80
cmp r12, rbx
ja 0x1400a15bb
cmp r12, 8
ja 0x1400a1590
mov ebx, 8
jmp 0x1400a159c
mov eax, reloc.WSOCK32.dll_recv
cmp r12, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400dd290
test rax, rax
jne 0x1400a1899
xor r12d, r12d
mov edi, r12d
mov eax, r12d
jmp 0x1400a1b4a
cmp r12, 0x20
jae 0x1400a15cb
mov ebx, SafeArrayAllocDescriptor
jmp 0x1400a1677
mov ebx, 0x208
cmp r12, rbx
jb 0x1400a1677
cmp r12, 0x50000
jae 0x1400a1631
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400a15f8
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x1400a1627
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400a1627
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x1400a1677
cmp r12, 0x320000
jae 0x1400a1644
lea rbx, [r12 + 0x8000]
jmp 0x1400a1677
cmp r12, 0xc80000
jae 0x1400a166f
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x1400a1677
lea rbx, [r12 + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x1400a1699
test r9, r9
je 0x1400a1699
mov rcx, qword [rsi + 8]
movzx r12d, dil
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x1400a169c
xor r12b, r12b
test rbx, rbx
js 0x1400a16f2
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
je 0x1400a16f2
mov byte [rsi + 0x20], 2
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], rbx
and byte [rsi + 0x21], 0x7f
mov rcx, qword [rsi + 8]
cmp rcx, r14
je 0x1400a16d6
lea r8, [r13 + r13]
mov rdx, r14
call qword [sym.imp.MSVCR100.dll_memmove]
mov rax, qword [rsi + 8]
lea rcx, [r13 + r13]
xor r12d, r12d
mov word [rcx + rax], r12w
mov qword [rsi + 0x10], rcx
mov eax, edi
jmp 0x1400a1b4a
test r12b, r12b
je 0x1400a170b
lea rax, [0x140141fa8]
xor r12d, r12d
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], r12
jmp 0x1400a1716
mov rax, qword [rsi + 8]
xor r12d, r12d
mov word [rax], r12w
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
mov qword [rsi + 0x10], r12
call fcn.14005f7b0
mov edi, eax
jmp 0x1400a1b4a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, ebx
mov edx, r12d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x1400a1764
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400a1b3f
mov edx, r12d
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, edi
je 0x1400a1b3f
mov edi, 1
xor edx, edx
mov rcx, rsi
mov r8d, edi
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rsi, qword [0x140140268]
movzx eax, byte [rsi + 0x23]
test al, al
jne 0x1400a17a4
mov byte [rsp + 0x20], dil
jmp 0x1400a1483
lea r14, [0x140103674]
cmp qword [rsi + 8], r14
jne 0x1400a17ba
mov r13, qword [rsi + 0x10]
shr r13, 1
jmp 0x1400a17bd
mov r13, rdi
lea rcx, [r13 + 1]
lea r12, [rcx + rcx]
cmp al, 2
jne 0x1400a17db
mov rdx, r13
mov rcx, r14
call fcn.140006bc0
mov edi, eax
jmp 0x1400a1b4a
mov r8, qword [0x14013b0d0]
cmp r12, r8
jbe 0x1400a180e
cmp r12, qword [rsi + 0x18]
jbe 0x1400a180e
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
mov edi, eax
jmp 0x1400a1b4a
cmp rcx, 2
jb 0x1400a1516
movzx eax, byte [rsi + 0x21]
test al, 2
je 0x1400a1835
mov rcx, qword [rsi]
and al, 0x3d
mov byte [rsi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rsi + 0x18]
and byte [rsi + 0x21], 0x82
cmp r12, r9
jbe 0x1400a16bf
movzx r10d, byte [rsi + 0x20]
movzx eax, r10b
cmp r10b, dil
jbe 0x1400a1865
cmp al, 2
je 0x1400a18a2
mov rbx, qword [rbp - 0x49]
mov rax, qword [rbp - 0x49]
jmp 0x1400a16b3
mov ebx, 0x80
cmp r12, rbx
ja 0x1400a18a2
cmp r12, 8
ja 0x1400a187c
mov ebx, 8
jmp 0x1400a1888
mov eax, reloc.WSOCK32.dll_recv
cmp r12, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400dd290
test rax, rax
je 0x1400a15ad
mov byte [rsi + 0x20], dil
jmp 0x1400a16b3
cmp r12, 0x20
jae 0x1400a18b2
mov ebx, SafeArrayAllocDescriptor
jmp 0x1400a195e
mov ebx, 0x208
cmp r12, rbx
jb 0x1400a195e
cmp r12, 0x50000
jae 0x1400a1918
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400a18df
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x1400a190e
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400a190e
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x1400a195e
cmp r12, 0x320000
jae 0x1400a192b
lea rbx, [r12 + 0x8000]
jmp 0x1400a195e
cmp r12, 0xc80000
jae 0x1400a1956
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x1400a195e
lea rbx, [r12 + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x1400a1980
test r9, r9
je 0x1400a1980
mov rcx, qword [rsi + 8]
movzx r12d, dil
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x1400a1983
xor r12b, r12b
test rbx, rbx
js 0x1400a199a
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
jne 0x1400a16af
test r12b, r12b
je 0x1400a19b3
lea rax, [0x140141fa8]
xor r12d, r12d
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], r12
jmp 0x1400a19be
mov rax, qword [rsi + 8]
xor r12d, r12d
mov word [rax], r12w
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
mov qword [rsi + 0x10], r12
call fcn.14005f7b0
mov edi, eax
jmp 0x1400a1b4a
cmp r15d, 9
mov r8, r12
mov edx, 0x14f
sete r8b
xor r9d, r9d
jmp 0x1400a1f20
cmp word [r13], r12w
je 0x1400a1a0f
mov rcx, r13
call fcn.14001db30
mov r13d, eax
jmp 0x1400a1a12
mov r13d, edi
mov eax, 0x25
mov ebx, 0x27
cmp r15d, 0xb
cmove ebx, eax
xor edx, edx
movzx ecx, bl
call fcn.1400244f0
movzx r11d, ax
shl r11d, 0x10
movsxd r14, r11d
test r13d, r13d
jle case.default.0x1400a125e
mov r15, r14
mov eax, 0xc0000001
movzx ebx, bl
or r15, rdi
or r14, rax
mov r9, r15
mov r8, rbx
mov edx, 0x100
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [rbp - 0x59]
xor ecx, ecx
cmp dword [0x1401430c0], eax
mov dword [0x14013b0c8], r12d
je 0x1400a1a82
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400a1a89
mov edx, edi
call fcn.140001b80
mov r9, r14
mov r8, rbx
mov edx, 0x101
mov rcx, rsi
mov dword [0x14013b0c8], edi
call qword [sym.imp.USER32.dll_PostMessageW]
dec r13
jne 0x1400a1a52
jmp case.default.0x1400a125e
cmp word [rbx], r12w
jne 0x1400a1aca
lea rdx, [rbp - 0x29]
mov r8d, SafeArrayAllocDescriptor
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rbx, [rbp - 0x29]
lea rdx, str.Combo
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1ae5
mov edx, 0x143
jmp 0x1400a1afe
lea rdx, str.List
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1b3f
mov edx, 0x180
lea rax, [rbp - 0x51]
mov r9, r13
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rcx, rsi
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
mov rax, qword [rbp - 0x51]
cmp rax, 0xffffffffffffffff
je 0x1400a1b3f
cmp rax, 0xfffffffffffffffe
jne case.default.0x1400a125e
mov rcx, qword [rbp + 0x47]
mov dl, 1
call fcn.14005e3f0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp word [r13], r12w
je 0x1400a1b3f
mov rcx, r13
call fcn.14001db30
mov r13d, eax
dec r13d
js 0x1400a1b3f
cmp word [rbx], r12w
jne 0x1400a1b9f
lea rdx, [rbp - 0x29]
mov r8d, SafeArrayAllocDescriptor
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rbx, [rbp - 0x29]
lea rdx, str.Combo
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1bba
mov edx, 0x144
jmp 0x1400a1bd7
lea rdx, str.List
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1b3f
mov edx, 0x182
lea rax, [rbp - 0x51]
movsxd r8, r13d
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov rcx, rsi
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
cmp qword [rbp - 0x51], 0xffffffffffffffff
jmp 0x1400a1f45
cmp word [r13], r12w
je 0x1400a1b3f
mov rcx, r13
call fcn.14001db30
mov r13d, eax
dec r13d
js 0x1400a1b3f
cmp word [rbx], r12w
jne 0x1400a1c4e
lea rdx, [rbp - 0x29]
mov r8d, SafeArrayAllocDescriptor
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rbx, [rbp - 0x29]
lea rdx, str.Combo
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1d2d
mov edx, 0x14e
mov ebx, 9
lea rax, [rbp - 0x51]
movsxd r8, r13d
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
cmp qword [rbp - 0x51], 0xffffffffffffffff
je 0x1400a1b3f
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetParent]
mov r13, rax
test rax, rax
je 0x1400a1b3f
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
test eax, eax
je 0x1400a1b3f
movzx r14d, ax
lea rax, [rbp - 0x51]
movsxd r8, r14d
mov r9, rsi
mov qword [rsp + 0x30], rax
mov edx, 0x111
mov rcx, r13
bts r8, 0x10
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
movzx eax, bx
mov r9, rsi
mov edx, 0x111
shl eax, 0x10
mov rcx, r13
movsxd r8, eax
or r8, r14
jmp 0x1400a1f23
lea rdx, str.List
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1b3f
mov edx, 0xfffffff0
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, 2
and eax, 0x808
neg eax
sbb edx, edx
add edx, 0x186
cmp edx, 0x185
jne 0x1400a1c70
lea rax, [rbp - 0x51]
movsxd r9, r13d
mov r8, rdi
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], ebx
jmp 0x1400a1c8f
cmp word [rbx], r12w
jne 0x1400a1db0
lea rdx, [rbp - 0x29]
mov r8d, SafeArrayAllocDescriptor
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rbx, [rbp - 0x29]
lea rdx, str.Combo
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1e53
mov edx, 0x14d
mov ebx, 9
lea rax, [rbp - 0x51]
mov r9, r13
or r8, 0xffffffffffffffff
mov qword [rsp + 0x30], rax
mov rcx, rsi
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
cmp qword [rbp - 0x51], 0xffffffffffffffff
je 0x1400a1b3f
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetParent]
mov r13, rax
test rax, rax
je 0x1400a1b3f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
mov r14d, eax
test eax, eax
jne 0x1400a1e4a
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400a1b3f
movzx r14d, r14w
jmp 0x1400a1cd6
lea rdx, str.List
mov rcx, rbx
call fcn.1400e0a80
test rax, rax
je 0x1400a1b3f
mov edx, 0xfffffff0
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, 0x18f
mov edx, 0x18c
test eax, 0x808
mov ebx, 2
cmovne edx, ecx
cmp edx, ecx
jne 0x1400a1dd2
lea rax, [rbp - 0x49]
mov edx, ecx
mov r9, r13
mov qword [rsp + 0x30], rax
or r8, 0xffffffffffffffff
mov rcx, rsi
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
mov r9, qword [rbp - 0x49]
cmp r9, 0xffffffffffffffff
je 0x1400a1b3f
lea rax, [rbp - 0x51]
mov r8, rdi
mov edx, 0x185
mov qword [rsp + 0x30], rax
mov rcx, rsi
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
cmp qword [rbp - 0x51], 0xffffffffffffffff
jne 0x1400a1e0f
jmp 0x1400a1b3f
mov r9, r13
mov r8, rdi
mov edx, 0xc2
mov rcx, rsi
lea rax, [rbp - 0x51]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a1b3f
mov rax, qword [0x14013b0f8]
cmp dword [rax + 0x78], 0xffffffff
jle 0x1400a1f7f
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x1401430c0], eax
mov rax, qword [0x14013b0f8]
mov ecx, dword [rax + 0x78]
jne 0x1400a1f79
mov edx, edi
call fcn.140001b80
jmp 0x1400a1f7f
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rsi, qword [0x140140268]
movzx eax, byte [rsi + 0x23]
test al, al
jne 0x1400a1fb1
mov rcx, qword [rsi + 0x10]
lea rdx, [0x140103674]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], dil
call fcn.1400e6e20
mov edi, eax
jmp 0x1400a1b4a
lea r14, [0x140103674]
cmp qword [rsi + 8], r14
jne 0x1400a1fc7
mov r15, qword [rsi + 0x10]
shr r15, 1
jmp 0x1400a1fca
mov r15, rdi
lea rcx, [r15 + 1]
lea r13, [rcx + rcx]
cmp al, 2
jne 0x1400a1fe8
mov rdx, r15
mov rcx, r14
call fcn.140006bc0
mov edi, eax
jmp 0x1400a1b4a
mov r8, qword [0x14013b0d0]
cmp r13, r8
jbe 0x1400a201b
cmp r13, qword [rsi + 0x18]
jbe 0x1400a201b
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
mov edi, eax
jmp 0x1400a1b4a
cmp rcx, 2
jae 0x1400a2037
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 3]
call fcn.1400e74d0
mov eax, edi
jmp 0x1400a1b4a
movzx eax, byte [rsi + 0x21]
test al, 2
je 0x1400a2054
mov rcx, qword [rsi]
and al, 0x3d
mov byte [rsi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rsi + 0x18]
and byte [rsi + 0x21], 0x82
cmp r13, r9
jbe 0x1400a21ca
movzx r10d, byte [rsi + 0x20]
movzx eax, r10b
cmp r10b, dil
jbe 0x1400a2084
cmp al, 2
je 0x1400a20c8
mov rbx, qword [rbp - 0x49]
mov rax, qword [rbp - 0x49]
jmp 0x1400a21be
mov ebx, 0x80
cmp r13, rbx
ja 0x1400a20c8
cmp r13, 8
ja 0x1400a209b
mov ebx, 8
jmp 0x1400a20a7
mov eax, reloc.WSOCK32.dll_recv
cmp r13, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400dd290
test rax, rax
jne 0x1400a20bf
mov edi, r12d
mov eax, r12d
jmp 0x1400a1b4a
mov byte [rsi + 0x20], dil
jmp 0x1400a21be
cmp r13, 0x20
jae 0x1400a20d8
mov ebx, SafeArrayAllocDescriptor
jmp 0x1400a2182
mov ebx, 0x208
cmp r13, rbx
jb 0x1400a2182
cmp r13, 0x50000
jae 0x1400a213e
pxor xmm0, xmm0
cvtsi2sd xmm0, r13
test r13, r13
jns 0x1400a2105
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x1400a2134
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400a2134
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x1400a2182
cmp r13, 0x320000
jae 0x1400a2150
lea rbx, [r13 + 0x8000]
jmp 0x1400a2182
cmp r13, 0xc80000
jae 0x1400a217b
movabs rax, 0x47ae147ae147ae15
mov rbx, r13
mul r13
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r13
jmp 0x1400a2182
lea rbx, [r13 + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x1400a21a4
test r9, r9
je 0x1400a21a4
mov rcx, qword [rsi + 8]
movzx r13d, dil
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x1400a21a7
xor r13b, r13b
test rbx, rbx
js 0x1400a21f8
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
je 0x1400a21f8
mov byte [rsi + 0x20], 2
and byte [rsi + 0x21], 0x7f
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], rbx
mov rcx, qword [rsi + 8]
cmp rcx, r14
je 0x1400a21e0
lea r8, [r15 + r15]
mov rdx, r14
call qword [sym.imp.MSVCR100.dll_memmove]
mov rax, qword [rsi + 8]
lea rcx, [r15 + r15]
mov word [rcx + rax], r12w
mov qword [rsi + 0x10], rcx
mov eax, edi
jmp 0x1400a1b4a
test r13b, r13b
je 0x1400a220e
lea rax, [0x140141fa8]
mov qword [rsi + 0x18], r12
mov qword [rsi + 8], rax
jmp 0x1400a2216
mov rax, qword [rsi + 8]
mov word [rax], r12w
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
mov qword [rsi + 0x10], r12
call fcn.14005f7b0
mov edi, eax
jmp 0x1400a1b4a