Function at 0x180005e90
Capabilities:
Check http status code
Inspect section memory permissions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x4410
call fcn.18011bdc0
sub rsp, rax
mov rax, qword [0x1801903f8]
xor rax, rsp
mov qword [rsp + 0x4400], rax
xor r13d, r13d
movabs rax, 0x100010000
mov rbp, rcx
mov qword [rsp + 0x80], rax
xor eax, eax
lea r15, str.32770
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rax
movabs rax, 0x1000010002
mov r14, rdx
lea rsi, str.Tencent_QQBar
mov qword [rsp + 0x128], rax
xor eax, eax
lea rbx, str.AfxWnd42
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], rax
movabs rax, 0x1000010004
lea rdi, str.TXGuiFoundation
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x208]
xor edx, edx
mov dword [rsp + 0x70], r13d
mov qword [rsp + 0x1d0], rax
mov dword [rsp + 0x74], 1
mov dword [rsp + 0x78], 2
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], r13
mov dword [rsp + 0xa0], r13d
mov dword [rsp + 0xa4], r13d
mov dword [rsp + 0xa8], r13d
mov dword [rsp + 0xac], r13d
mov dword [rsp + 0xb0], 1
mov qword [rsp + 0xb8], r13
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], r13
mov dword [rsp + 0xd0], 0x3e9
mov dword [rsp + 0xd4], r13d
mov dword [rsp + 0xd8], 2
mov dword [rsp + 0xdc], 1
mov dword [rsp + 0xe0], r13d
mov dword [rsp + 0x118], r13d
mov dword [rsp + 0x11c], reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rsp + 0x120], 2
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], r15
mov qword [rsp + 0x140], r13
mov dword [rsp + 0x148], r13d
mov dword [rsp + 0x14c], r13d
mov dword [rsp + 0x150], r13d
mov dword [rsp + 0x154], r13d
mov dword [rsp + 0x158], 1
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x170], r13
mov dword [rsp + 0x178], 0x3e9
mov dword [rsp + 0x17c], r13d
mov dword [rsp + 0x180], 2
mov dword [rsp + 0x184], 1
mov dword [rsp + 0x188], r13d
mov dword [rsp + 0x1c0], r13d
mov dword [rsp + 0x1c4], reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rsp + 0x1c8], 1
mov qword [rsp + 0x1d8], r13
mov qword [rsp + 0x1e0], rdi
mov qword [rsp + 0x1e8], r13
mov dword [rsp + 0x1f0], r13d
mov dword [rsp + 0x1f4], 0x40000
mov dword [rsp + 0x1f8], r13d
mov dword [rsp + 0x1fc], r13d
mov dword [rsp + 0x200], r13d
call fcn.18007ead0
mov dword [rsp + 0x268], r13d
movabs rax, 0x10000000010001
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x2b0]
xor edx, edx
mov dword [rsp + 0x26c], 0x100000
mov dword [rsp + 0x270], 1
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], r13
mov qword [rsp + 0x288], rdi
mov qword [rsp + 0x290], r13
mov dword [rsp + 0x298], r13d
mov dword [rsp + 0x29c], 0x10060000
mov dword [rsp + 0x2a0], r13d
mov dword [rsp + 0x2a4], r13d
mov dword [rsp + 0x2a8], r13d
call fcn.18007ead0
movabs rax, 0x2100010001
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x358]
xor edx, edx
mov dword [rsp + 0x310], r13d
mov dword [rsp + 0x314], 0x800000
mov dword [rsp + 0x318], 1
mov qword [rsp + 0x320], rax
mov qword [rsp + 0x328], r13
mov qword [rsp + 0x330], rdi
mov qword [rsp + 0x338], r13
mov dword [rsp + 0x340], r13d
mov dword [rsp + 0x344], 0x10060000
mov dword [rsp + 0x348], r13d
mov dword [rsp + 0x34c], r13d
mov dword [rsp + 0x350], r13d
call fcn.18007ead0
movabs rax, 0x2100010002
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x400]
xor edx, edx
mov dword [rsp + 0x3b8], r13d
mov dword [rsp + 0x3bc], 0x800000
mov dword [rsp + 0x3c0], 1
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3d8], rdi
mov qword [rsp + 0x3e0], r13
mov dword [rsp + 0x3e8], r13d
mov dword [rsp + 0x3ec], 0x10060000
mov dword [rsp + 0x3f0], r13d
mov dword [rsp + 0x3f4], r13d
mov dword [rsp + 0x3f8], r13d
call fcn.18007ead0
movabs rax, 0x202010000
mov qword [rsp + 0x470], rax
lea rax, str.__oxFrame.class__
mov dword [rsp + 0x460], 1
mov qword [rsp + 0x480], rax
lea rax, str.Internet_Explorer_Server
mov dword [rsp + 0x464], 2
mov qword [rsp + 0x4b0], rax
xor eax, eax
mov dword [rsp + 0x468], 2
mov qword [rsp + 0x478], r13
mov qword [rsp + 0x488], r13
mov dword [rsp + 0x490], r13d
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e8], rax
mov qword [rsp + 0x4f0], rax
mov qword [rsp + 0x4f8], rax
mov qword [rsp + 0x500], rax
mov dword [rsp + 0x494], r13d
mov dword [rsp + 0x498], r13d
mov dword [rsp + 0x49c], r13d
mov dword [rsp + 0x4a0], 1
mov qword [rsp + 0x4a8], r13
mov qword [rsp + 0x4b8], r13
mov dword [rsp + 0x4c0], r13d
mov dword [rsp + 0x4c4], r13d
mov dword [rsp + 0x4c8], 2
mov dword [rsp + 0x4cc], 4
mov dword [rsp + 0x4d0], r13d
mov dword [rsp + 0x508], 1
movabs rcx, 0x201010000
lea rax, str.ICQ_Contact_List_Window
lea r8d, [r13 + 0x60]
mov qword [rsp + 0x558], rax
xor eax, eax
mov qword [rsp + 0x518], rcx
mov qword [rsp + 0x580], rax
mov qword [rsp + 0x588], rax
mov qword [rsp + 0x590], rax
mov qword [rsp + 0x598], rax
mov qword [rsp + 0x5a0], rax
mov qword [rsp + 0x5a8], rax
lea rax, str.ICQ
mov qword [rsp + 0x5c0], rcx
lea rcx, [rsp + 0x6a0]
mov qword [rsp + 0x600], rax
xor eax, eax
xor edx, edx
mov qword [rsp + 0x628], rax
mov qword [rsp + 0x630], rax
mov qword [rsp + 0x638], rax
mov qword [rsp + 0x640], rax
mov qword [rsp + 0x648], rax
mov qword [rsp + 0x650], rax
movabs rax, 0x4000010001
mov dword [rsp + 0x50c], 2
mov dword [rsp + 0x510], 2
mov qword [rsp + 0x668], rax
lea rax, str.NETEASE_POPO_FRAME_FF098E9C_F0C6_454c_88AA_3CBCFB54F90F
mov qword [rsp + 0x520], r13
mov qword [rsp + 0x528], r15
mov qword [rsp + 0x530], r13
mov dword [rsp + 0x538], r13d
mov qword [rsp + 0x678], rax
mov dword [rsp + 0x53c], r13d
mov dword [rsp + 0x540], r13d
mov dword [rsp + 0x544], r13d
mov dword [rsp + 0x548], 1
mov qword [rsp + 0x550], r13
mov qword [rsp + 0x560], r13
mov dword [rsp + 0x568], r13d
mov dword [rsp + 0x56c], r13d
mov dword [rsp + 0x570], 2
mov dword [rsp + 0x574], 1
mov dword [rsp + 0x578], r13d
mov dword [rsp + 0x5b0], 1
mov dword [rsp + 0x5b4], 2
mov dword [rsp + 0x5b8], 2
mov qword [rsp + 0x5c8], r13
mov qword [rsp + 0x5d0], r15
mov qword [rsp + 0x5d8], r13
mov dword [rsp + 0x5e0], r13d
mov dword [rsp + 0x5e4], r13d
mov dword [rsp + 0x5e8], r13d
mov dword [rsp + 0x5ec], r13d
mov dword [rsp + 0x5f0], 1
mov qword [rsp + 0x5f8], r13
mov qword [rsp + 0x608], r13
mov dword [rsp + 0x610], r13d
mov dword [rsp + 0x614], r13d
mov dword [rsp + 0x618], 2
mov dword [rsp + 0x61c], 1
mov dword [rsp + 0x620], r13d
mov dword [rsp + 0x658], r13d
mov dword [rsp + 0x65c], 0x40
mov dword [rsp + 0x660], 1
mov qword [rsp + 0x670], r13
mov qword [rsp + 0x680], r13
mov dword [rsp + 0x688], r13d
mov dword [rsp + 0x68c], r13d
mov dword [rsp + 0x690], r13d
mov dword [rsp + 0x694], r13d
mov dword [rsp + 0x698], r13d
call fcn.18007ead0
movabs rax, 0x4000010002
mov qword [rsp + 0x710], rax
mov dword [rsp + 0x700], r13d
mov dword [rsp + 0x704], 0x40
lea rax, str.NETEASE_POPO2_FRAME_FF098E9C_F0C6_454c_88AA_3CBCFB54F90F
mov dword [rsp + 0x708], 1
mov qword [rsp + 0x718], r13
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x748]
xor edx, edx
mov qword [rsp + 0x720], rax
mov qword [rsp + 0x728], r13
mov dword [rsp + 0x730], r13d
mov dword [rsp + 0x734], r13d
mov dword [rsp + 0x738], r13d
mov dword [rsp + 0x73c], r13d
mov dword [rsp + 0x740], r13d
call fcn.18007ead0
movabs rax, 0x8000010000
mov qword [rsp + 0x7b8], rax
lea rax, str.tSkMainForm.UnicodeClass
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x7f0]
xor edx, edx
mov dword [rsp + 0x7a8], r13d
mov qword [rsp + 0x7c8], rax
mov dword [rsp + 0x7ac], 0x80
mov dword [rsp + 0x7b0], 1
mov qword [rsp + 0x7c0], r13
mov qword [rsp + 0x7d0], r13
mov dword [rsp + 0x7d8], r13d
mov dword [rsp + 0x7dc], r13d
mov dword [rsp + 0x7e0], r13d
mov dword [rsp + 0x7e4], r13d
mov dword [rsp + 0x7e8], r13d
call fcn.18007ead0
lea rax, str.TZapMainForm.UnicodeClass
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x898]
movabs rdi, 0x8000010003
xor edx, edx
mov qword [rsp + 0x870], rax
mov dword [rsp + 0x850], r13d
mov dword [rsp + 0x854], 0x80
mov dword [rsp + 0x858], 1
mov qword [rsp + 0x860], rdi
mov qword [rsp + 0x868], r13
mov qword [rsp + 0x878], r13
mov dword [rsp + 0x880], r13d
mov dword [rsp + 0x884], r13d
mov dword [rsp + 0x888], r13d
mov dword [rsp + 0x88c], r13d
mov dword [rsp + 0x890], r13d
call fcn.18007ead0
lea rax, str.tSkMainForm
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x940]
xor edx, edx
mov qword [rsp + 0x918], rax
mov dword [rsp + 0x8f8], r13d
mov dword [rsp + 0x8fc], 0x80
mov dword [rsp + 0x900], 1
mov qword [rsp + 0x908], rdi
mov qword [rsp + 0x910], r13
mov qword [rsp + 0x920], r13
mov dword [rsp + 0x928], r13d
mov dword [rsp + 0x92c], r13d
mov dword [rsp + 0x930], r13d
mov dword [rsp + 0x934], r13d
mov dword [rsp + 0x938], r13d
call fcn.18007ead0
lea rax, str.TZapMainForm
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x9e8]
xor edx, edx
mov qword [rsp + 0x9c0], rax
mov dword [rsp + 0x9a0], r13d
mov dword [rsp + 0x9a4], 0x80
mov dword [rsp + 0x9a8], 1
mov qword [rsp + 0x9b0], rdi
mov qword [rsp + 0x9b8], r13
mov qword [rsp + 0x9c8], r13
mov dword [rsp + 0x9d0], r13d
mov dword [rsp + 0x9d4], r13d
mov dword [rsp + 0x9d8], r13d
mov dword [rsp + 0x9dc], r13d
mov dword [rsp + 0x9e0], r13d
call fcn.18007ead0
movabs rax, 0x8000010004
lea r12, str.Chrome_WidgetWin_1
lea rdi, str.Skype
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0xa90]
xor edx, edx
mov qword [rsp + 0xa68], r12
mov qword [rsp + 0xa70], rdi
mov dword [rsp + 0xa48], r13d
mov dword [rsp + 0xa4c], 0x80
mov dword [rsp + 0xa50], 1
mov qword [rsp + 0xa58], rax
mov qword [rsp + 0xa60], r13
mov dword [rsp + 0xa78], r13d
mov dword [rsp + 0xa7c], 0x10c80000
mov dword [rsp + 0xa80], r13d
mov dword [rsp + 0xa84], r13d
mov dword [rsp + 0xa88], 1
call fcn.18007ead0
movabs rax, 0x8000010005
mov dword [rsp + 0xaf0], r13d
mov qword [rsp + 0xb00], rax
lea rax, str.ApplicationFrameWindow
mov dword [rsp + 0xaf4], 0x80
mov qword [rsp + 0xb10], rax
lea rax, str.ApplicationFrameTitleBarWindow
mov dword [rsp + 0xaf8], 2
mov qword [rsp + 0xb40], rax
xor eax, eax
mov qword [rsp + 0xb08], r13
mov qword [rsp + 0xb68], rax
mov qword [rsp + 0xb70], rax
mov qword [rsp + 0xb78], rax
mov qword [rsp + 0xb80], rax
mov qword [rsp + 0xb88], rax
mov qword [rsp + 0xb90], rax
movabs rax, 0x10000010002
mov qword [rsp + 0xb18], rdi
mov dword [rsp + 0xb20], r13d
mov qword [rsp + 0xba8], rax
lea rax, str.AfxWnd42u
mov dword [rsp + 0xb24], r13d
mov qword [rsp + 0xbe8], rax
xor eax, eax
mov dword [rsp + 0xb28], r13d
mov dword [rsp + 0xb2c], r13d
mov dword [rsp + 0xb30], 1
mov qword [rsp + 0xb38], r13
mov qword [rsp + 0xc10], rax
mov qword [rsp + 0xc18], rax
mov qword [rsp + 0xc20], rax
mov qword [rsp + 0xc28], rax
mov qword [rsp + 0xc30], rax
mov qword [rsp + 0xc38], rax
mov qword [rsp + 0xb48], r13
mov dword [rsp + 0xb50], r13d
mov dword [rsp + 0xb54], r13d
mov dword [rsp + 0xb58], 2
mov dword [rsp + 0xb5c], 1
mov dword [rsp + 0xb60], r13d
mov dword [rsp + 0xb98], r13d
mov dword [rsp + 0xb9c], 0x100
mov dword [rsp + 0xba0], 2
mov qword [rsp + 0xbb0], r13
mov qword [rsp + 0xbb8], r15
mov qword [rsp + 0xbc0], r13
mov dword [rsp + 0xbc8], r13d
mov dword [rsp + 0xbcc], r13d
mov dword [rsp + 0xbd0], r13d
mov dword [rsp + 0xbd4], r13d
mov dword [rsp + 0xbd8], 1
mov qword [rsp + 0xbe0], r13
mov qword [rsp + 0xbf0], r13
mov dword [rsp + 0xbf8], 0x3e9
mov dword [rsp + 0xbfc], r13d
mov dword [rsp + 0xc00], 2
mov dword [rsp + 0xc04], 1
mov dword [rsp + 0xc08], r13d
mov dword [rsp + 0xc40], r13d
mov dword [rsp + 0xc44], 0x100
mov dword [rsp + 0xc48], 2
movabs rax, 0x10000010001
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0xd30]
mov qword [rsp + 0xc50], rax
xor eax, eax
xor edx, edx
mov qword [rsp + 0xcb8], rax
mov qword [rsp + 0xcc0], rax
mov qword [rsp + 0xcc8], rax
mov qword [rsp + 0xcd0], rax
mov qword [rsp + 0xcd8], rax
mov qword [rsp + 0xce0], rax
movabs rax, 0x20000010001
mov qword [rsp + 0xc58], r13
mov qword [rsp + 0xc60], r15
mov qword [rsp + 0xcf8], rax
lea rax, str.SametimeConnect
mov qword [rsp + 0xc68], r13
mov dword [rsp + 0xc70], r13d
mov dword [rsp + 0xc74], r13d
mov dword [rsp + 0xc78], r13d
mov qword [rsp + 0xd08], rax
mov dword [rsp + 0xc7c], r13d
mov dword [rsp + 0xc80], 1
mov qword [rsp + 0xc88], r13
mov qword [rsp + 0xc90], rsi
mov qword [rsp + 0xc98], r13
mov dword [rsp + 0xca0], 0x3e9
mov dword [rsp + 0xca4], r13d
mov dword [rsp + 0xca8], 2
mov dword [rsp + 0xcac], r13d
mov dword [rsp + 0xcb0], r13d
mov dword [rsp + 0xce8], r13d
mov dword [rsp + 0xcec], 0x200
mov dword [rsp + 0xcf0], 1
mov qword [rsp + 0xd00], r13
mov qword [rsp + 0xd10], r13
mov dword [rsp + 0xd18], r13d
mov dword [rsp + 0xd1c], r13d
mov dword [rsp + 0xd20], r13d
mov dword [rsp + 0xd24], r13d
mov dword [rsp + 0xd28], r13d
call fcn.18007ead0
movabs rax, 0x20000010020
lea rdi, str.SWT_Window0
mov qword [rsp + 0xda0], rax
xor eax, eax
lea rsi, str.SysTreeView32
mov qword [rsp + 0xe08], rax
mov qword [rsp + 0xe10], rax
mov qword [rsp + 0xe18], rax
mov qword [rsp + 0xe20], rax
mov qword [rsp + 0xe28], rax
mov qword [rsp + 0xe30], rax
movabs rax, 0x20000010010
mov dword [rsp + 0xd90], r13d
mov dword [rsp + 0xd94], 0x200
mov dword [rsp + 0xd98], 2
mov qword [rsp + 0xda8], r13
mov qword [rsp + 0xdb0], rdi
mov qword [rsp + 0xe48], rax
mov qword [rsp + 0xdb8], r13
mov dword [rsp + 0xdc0], r13d
mov dword [rsp + 0xdc4], 0x30000
mov dword [rsp + 0xdc8], r13d
mov dword [rsp + 0xdcc], r13d
mov dword [rsp + 0xdd0], 1
mov qword [rsp + 0xdd8], r13
mov qword [rsp + 0xde0], rsi
mov qword [rsp + 0xde8], r13
mov dword [rsp + 0xdf0], r13d
mov dword [rsp + 0xdf4], r13d
mov dword [rsp + 0xdf8], 2
mov dword [rsp + 0xdfc], 7
mov dword [rsp + 0xe00], r13d
mov dword [rsp + 0xe38], r13d
mov dword [rsp + 0xe3c], 0x200
mov dword [rsp + 0xe40], 2
mov qword [rsp + 0xe50], r13
mov qword [rsp + 0xe58], rdi
mov qword [rsp + 0xe60], r13
xor eax, eax
lea rcx, str.IBM_Lotus_Sametime_Connect
mov dword [rsp + 0xe68], r13d
mov qword [rsp + 0xeb0], rax
mov qword [rsp + 0xeb8], rax
mov qword [rsp + 0xec0], rax
mov qword [rsp + 0xec8], rax
mov qword [rsp + 0xed0], rax
mov qword [rsp + 0xed8], rax
movabs rax, 0x20000010008
mov dword [rsp + 0xe6c], 0x30000
mov dword [rsp + 0xe70], r13d
mov qword [rsp + 0xef0], rax
xor eax, eax
mov dword [rsp + 0xe74], r13d
mov qword [rsp + 0xf58], rax
mov qword [rsp + 0xf60], rax
mov qword [rsp + 0xf68], rax
mov qword [rsp + 0xf70], rax
mov qword [rsp + 0xf78], rax
mov qword [rsp + 0xf80], rax
movabs rax, 0x20000010004
mov dword [rsp + 0xe78], 1
mov qword [rsp + 0xe80], r13
mov qword [rsp + 0xf98], rax
xor eax, eax
mov qword [rsp + 0xe88], rsi
mov qword [rsp + 0x1000], rax
mov qword [rsp + 0x1008], rax
mov qword [rsp + 0x1010], rax
mov qword [rsp + 0x1018], rax
mov qword [rsp + 0x1020], rax
mov qword [rsp + 0x1028], rax
movabs rax, 0x20000010002
mov qword [rsp + 0xe90], r13
mov dword [rsp + 0xe98], r13d
mov dword [rsp + 0xe9c], r13d
mov dword [rsp + 0xea0], 2
mov dword [rsp + 0xea4], 8
mov dword [rsp + 0xea8], r13d
mov dword [rsp + 0xee0], r13d
mov dword [rsp + 0xee4], 0x200
mov dword [rsp + 0xee8], 2
mov qword [rsp + 0xef8], r13
mov qword [rsp + 0xf00], rdi
mov qword [rsp + 0xf08], rcx
mov dword [rsp + 0xf10], r13d
mov dword [rsp + 0xf14], r13d
mov dword [rsp + 0xf18], r13d
mov dword [rsp + 0xf1c], r13d
mov dword [rsp + 0xf20], 1
mov qword [rsp + 0xf28], r13
mov qword [rsp + 0xf30], rsi
mov qword [rsp + 0xf38], r13
mov dword [rsp + 0xf40], r13d
mov dword [rsp + 0xf44], r13d
mov dword [rsp + 0xf48], 2
mov dword [rsp + 0xf4c], 7
mov dword [rsp + 0xf50], r13d
mov dword [rsp + 0xf88], r13d
mov dword [rsp + 0xf8c], 0x200
mov dword [rsp + 0xf90], 2
mov qword [rsp + 0xfa0], r13
mov qword [rsp + 0xfa8], rdi
mov qword [rsp + 0xfb0], rcx
mov dword [rsp + 0xfb8], r13d
mov dword [rsp + 0xfbc], r13d
mov dword [rsp + 0xfc0], r13d
mov dword [rsp + 0xfc4], r13d
mov dword [rsp + 0xfc8], 1
mov qword [rsp + 0xfd0], r13
mov qword [rsp + 0xfd8], rsi
mov qword [rsp + 0xfe0], r13
mov dword [rsp + 0xfe8], r13d
mov dword [rsp + 0xfec], r13d
mov dword [rsp + 0xff0], 2
mov dword [rsp + 0xff4], 6
mov dword [rsp + 0xff8], r13d
mov dword [rsp + 0x1030], r13d
mov dword [rsp + 0x1034], 0x200
mov dword [rsp + 0x1038], 1
mov qword [rsp + 0x1040], rax
mov qword [rsp + 0x1058], rcx
lea rax, str.SWT_Window1
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x1078]
xor edx, edx
mov qword [rsp + 0x1050], rax
mov qword [rsp + 0x1048], r13
mov dword [rsp + 0x1060], r13d
mov dword [rsp + 0x1064], r13d
mov dword [rsp + 0x1068], r13d
mov dword [rsp + 0x106c], r13d
mov dword [rsp + 0x1070], r13d
call fcn.18007ead0
movabs rax, 0x20000010040
mov qword [rsp + 0x10e8], rax
lea rax, str.IBM_Sametime_Connect
lea r8d, [r13 + 0x60]
lea rcx, [rsp + 0x1120]
xor edx, edx
mov dword [rsp + 0x10d8], r13d
mov qword [rsp + 0x1100], rax
mov dword [rsp + 0x10dc], 0x200
mov dword [rsp + 0x10e0], 1
mov qword [rsp + 0x10f0], r13
mov qword [rsp + 0x10f8], rdi
mov dword [rsp + 0x1108], r13d
mov dword [rsp + 0x110c], 0x30000
mov dword [rsp + 0x1110], r13d
mov dword [rsp + 0x1114], r13d
mov dword [rsp + 0x1118], r13d
call fcn.18007ead0
movabs rax, 0x40000010000
mov qword [rsp + 0x1190], rax
lea rax, str.Tree1
lea rdx, str.StandardFrame
mov qword [rsp + 0x1208], rax
lea rcx, str.WebControl
lea rax, [0x18012c5e0]
movabs rdi, 0x40002010008
mov dword [rsp + 0x1180], 1
mov dword [rsp + 0x1184], 0x400
mov qword [rsp + 0x1250], rax
mov dword [rsp + 0x1188], 3
mov qword [rsp + 0x1198], r13
mov qword [rsp + 0x11a0], r13
mov qword [rsp + 0x11a8], r13
mov dword [rsp + 0x11b0], r13d
mov dword [rsp + 0x11b4], r13d
mov dword [rsp + 0x11b8], r13d
mov dword [rsp + 0x11bc], r13d
mov dword [rsp + 0x11c0], r13d
mov qword [rsp + 0x11c8], r13
mov qword [rsp + 0x11d0], r15
mov qword [rsp + 0x11d8], r13
mov dword [rsp + 0x11e0], r13d
mov dword [rsp + 0x11e4], r13d
mov dword [rsp + 0x11e8], r13d
mov dword [rsp + 0x11ec], r13d
mov dword [rsp + 0x11f0], 1
mov qword [rsp + 0x11f8], r13
mov qword [rsp + 0x1200], rsi
mov dword [rsp + 0x1210], 0x40a
mov dword [rsp + 0x1214], r13d
mov dword [rsp + 0x1218], 2
mov dword [rsp + 0x121c], 1
mov dword [rsp + 0x1220], r13d
mov dword [rsp + 0x1228], r13d
mov dword [rsp + 0x122c], 0x400
mov dword [rsp + 0x1230], 2
mov qword [rsp + 0x1238], rdi
mov qword [rsp + 0x1240], r13
mov qword [rsp + 0x1248], rdx
mov dword [rsp + 0x1258], r13d
mov dword [rsp + 0x125c], r13d
mov dword [rsp + 0x1260], r13d
mov dword [rsp + 0x1264], r13d
mov dword [rsp + 0x1268], 1
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], rcx
mov qword [rsp + 0x1280], r13
xor eax, eax
mov dword [rsp + 0x1288], r13d
mov dword [rsp + 0x128c], r13d
mov qword [rsp + 0x12a0], rax
mov qword [rsp + 0x12a8], rax
mov qword [rsp + 0x12b0], rax
mov qword [rsp + 0x12b8], rax
mov qword [rsp + 0x12c0], rax
mov qword [rsp + 0x12c8], rax
lea rax, [0x18012c5d0]
mov dword [rsp + 0x1290], 2
mov dword [rsp + 0x1294], 1
mov qword [rsp + 0x12f8], rax
xor eax, eax
mov dword [rsp + 0x1298], r13d
mov qword [rsp + 0x1348], rax
mov qword [rsp + 0x1350], rax
mov qword [rsp + 0x1358], rax
mov qword [rsp + 0x1360], rax
mov qword [rsp + 0x1368], rax
mov qword [rsp + 0x1370], rax
movabs rax, 0x1200010001
mov dword [rsp + 0x12d0], r13d
mov dword [rsp + 0x12d4], 0x400
mov qword [rsp + 0x1388], rax
lea rax, str.SuperTabCtrl
mov dword [rsp + 0x12d8], 2
mov qword [rsp + 0x13c8], rax
xor eax, eax
mov qword [rsp + 0x12e0], rdi
mov qword [rsp + 0x13f0], rax
mov qword [rsp + 0x13f8], rax
mov qword [rsp + 0x1400], rax
mov qword [rsp + 0x1408], rax
mov qword [rsp + 0x1410], rax
mov qword [rsp + 0x1418], rax
movabs rax, 0x40002010010
mov qword [rsp + 0x12e8], r13
mov qword [rsp + 0x12f0], rdx
mov dword [rsp + 0x1300], r13d
mov dword [rsp + 0x1304], r13d
mov dword [rsp + 0x1308], r13d
mov qword [rsp + 0x1430], rax
mov dword [rsp + 0x130c], r13d
mov dword [rsp + 0x1310], 1
mov qword [rsp + 0x1318], r13
mov qword [rsp + 0x1320], rcx
mov qword [rsp + 0x1328], r13
mov dword [rsp + 0x1330], r13d
mov dword [rsp + 0x1334], r13d
mov dword [rsp + 0x1338], 2
mov dword [rsp + 0x133c], 1
mov dword [rsp + 0x1340], r13d
mov dword [rsp + 0x1378], r13d
mov dword [rsp + 0x137c], 0x400
mov dword [rsp + 0x1380], 2
mov qword [rsp + 0x1390], r13
mov qword [rsp + 0x1398], rdx
mov qword [rsp + 0x13a0], r13
mov dword [rsp + 0x13a8], r13d
mov dword [rsp + 0x13ac], r13d
mov dword [rsp + 0x13b0], r13d
mov dword [rsp + 0x13b4], r13d
mov dword [rsp + 0x13b8], 1
mov qword [rsp + 0x13c0], r13
mov qword [rsp + 0x13d0], r13
mov dword [rsp + 0x13d8], r13d
mov dword [rsp + 0x13dc], r13d
mov dword [rsp + 0x13e0], 2
mov dword [rsp + 0x13e4], 1
mov dword [rsp + 0x13e8], r13d
mov dword [rsp + 0x1420], r13d
mov dword [rsp + 0x1424], 0x400
mov dword [rsp + 0x1428], 2
mov qword [rsp + 0x1438], r13
mov qword [rsp + 0x1440], rdx
mov qword [rsp + 0x1448], r13
mov dword [rsp + 0x1450], r13d
mov dword [rsp + 0x1454], r13d
mov dword [rsp + 0x1458], r13d
mov dword [rsp + 0x145c], r13d
lea rax, str.StandardWindow
lea rcx, str.WindowsForms10.Window.8.app.0.
mov dword [rsp + 0x1460], 1
mov qword [rsp + 0x1470], rax
lea rax, str.WorkingPage
mov qword [rsp + 0x1468], r13
mov qword [rsp + 0x1478], rax
xor eax, eax
mov dword [rsp + 0x1480], r13d
mov qword [rsp + 0x1498], rax
mov qword [rsp + 0x14a0], rax
mov qword [rsp + 0x14a8], rax
mov qword [rsp + 0x14b0], rax
mov qword [rsp + 0x14b8], rax
mov qword [rsp + 0x14c0], rax
movabs rax, 0x80000010002
mov dword [rsp + 0x1484], r13d
mov dword [rsp + 0x1488], 2
mov qword [rsp + 0x14d8], rax
lea rax, str.WindowsForms10.RichEdit50W.app.0.
mov dword [rsp + 0x148c], r13d
mov qword [rsp + 0x1518], rax
xor eax, eax
mov dword [rsp + 0x1490], r13d
mov qword [rsp + 0x1540], rax
mov qword [rsp + 0x1548], rax
mov qword [rsp + 0x1550], rax
mov qword [rsp + 0x1558], rax
mov qword [rsp + 0x1560], rax
mov qword [rsp + 0x1568], rax
movabs rax, 0x80000010001
mov dword [rsp + 0x14c8], r13d
mov dword [rsp + 0x14cc], 0x800
mov qword [rsp + 0x1580], rax
lea rax, str.WindowsForms10.RichEdit20W.app.0.
mov dword [rsp + 0x14d0], 2
mov qword [rsp + 0x15c0], rax
xor eax, eax
mov qword [rsp + 0x14e0], r13
mov qword [rsp + 0x15e8], rax
mov qword [rsp + 0x15f0], rax
mov qword [rsp + 0x15f8], rax
mov qword [rsp + 0x1600], rax
mov qword [rsp + 0x1608], rax
mov qword [rsp + 0x1610], rax
movabs rax, 0x80000010004
mov qword [rsp + 0x14e8], rcx
mov qword [rsp + 0x14f0], r13
mov dword [rsp + 0x14f8], r13d
mov dword [rsp + 0x14fc], r13d
mov dword [rsp + 0x1500], r13d
mov dword [rsp + 0x1504], r13d
mov dword [rsp + 0x1508], 1
mov qword [rsp + 0x1510], r13
mov qword [rsp + 0x1520], r13
mov dword [rsp + 0x1528], r13d
mov dword [rsp + 0x152c], 0x460100c0
mov dword [rsp + 0x1530], 2
mov dword [rsp + 0x1534], 2
mov dword [rsp + 0x1538], r13d
mov dword [rsp + 0x1570], r13d
mov dword [rsp + 0x1574], 0x800
mov dword [rsp + 0x1578], 2
mov qword [rsp + 0x1588], r13
mov qword [rsp + 0x1590], rcx
mov qword [rsp + 0x1598], r13
mov dword [rsp + 0x15a0], r13d
mov dword [rsp + 0x15a4], r13d
mov dword [rsp + 0x15a8], r13d
mov dword [rsp + 0x15ac], r13d
mov dword [rsp + 0x15b0], 1
mov qword [rsp + 0x15b8], r13
mov qword [rsp + 0x15c8], r13
mov dword [rsp + 0x15d0], r13d
mov dword [rsp + 0x15d4], 0x460100c0
mov dword [rsp + 0x15d8], 2
mov dword [rsp + 0x15dc], 2
mov dword [rsp + 0x15e0], r13d
mov dword [rsp + 0x1618], r13d
mov dword [rsp + 0x161c], 0x800
mov dword [rsp + 0x1620], 2
mov qword [rsp + 0x1628], rax
lea rax, str.FxRichEdit
lea rcx, str.FxWnd
mov qword [rsp + 0x1668], rax
xor eax, eax
mov qword [rsp + 0x1630], r13
mov qword [rsp + 0x1690], rax
mov qword [rsp + 0x1698], rax
mov qword [rsp + 0x16a0], rax
mov qword [rsp + 0x16a8], rax
mov qword [rsp + 0x16b0], rax
mov qword [rsp + 0x16b8], rax
movabs rax, 0x80001010008
mov qword [rsp + 0x1638], rcx
mov qword [rsp + 0x1640], r13
mov qword [rsp + 0x16d0], rax
lea rax, str.FxEdit
mov dword [rsp + 0x1648], r13d
mov qword [rsp + 0x1710], rax
xor eax, eax
mov dword [rsp + 0x164c], r13d
mov qword [rsp + 0x1738], rax
mov qword [rsp + 0x1740], rax
mov qword [rsp + 0x1748], rax
mov qword [rsp + 0x1750], rax
mov qword [rsp + 0x1758], rax
mov qword [rsp + 0x1760], rax
movabs rax, 0x80000010008
mov dword [rsp + 0x1650], r13d
mov dword [rsp + 0x1654], r13d
mov qword [rsp + 0x1778], rax
lea rax, str.FetionBaseDialog
mov dword [rsp + 0x1658], 1
mov qword [rsp + 0x1788], rax
mov qword [rsp + 0x17b8], rax
lea rax, str.AppBoxPage
mov qword [rsp + 0x17c0], rax
xor eax, eax
mov qword [rsp + 0x1660], r13
mov qword [rsp + 0x1670], r13
mov dword [rsp + 0x1678], r13d
mov dword [rsp + 0x167c], 0x80
mov qword [rsp + 0x17e0], rax
mov qword [rsp + 0x17e8], rax
mov dword [rsp + 0x1680], 2
mov dword [rsp + 0x1684], 1
mov dword [rsp + 0x1688], r13d
mov dword [rsp + 0x16c0], r13d
mov dword [rsp + 0x16c4], 0x800
mov dword [rsp + 0x16c8], 2
mov qword [rsp + 0x16d8], r13
mov qword [rsp + 0x16e0], rcx
mov qword [rsp + 0x16e8], r13
mov dword [rsp + 0x16f0], r13d
mov dword [rsp + 0x16f4], 0xc0000
mov dword [rsp + 0x16f8], r13d
mov dword [rsp + 0x16fc], r13d
mov dword [rsp + 0x1700], 1
mov qword [rsp + 0x1708], r13
mov qword [rsp + 0x1718], r13
mov dword [rsp + 0x1720], r13d
mov dword [rsp + 0x1724], 0x80
mov dword [rsp + 0x1728], 2
mov dword [rsp + 0x172c], 1
mov dword [rsp + 0x1730], r13d
mov dword [rsp + 0x1768], r13d
mov dword [rsp + 0x176c], 0x800
mov dword [rsp + 0x1770], 2
mov qword [rsp + 0x1780], r13
mov qword [rsp + 0x1790], r13
mov dword [rsp + 0x1798], r13d
mov dword [rsp + 0x179c], r13d
mov dword [rsp + 0x17a0], r13d
mov dword [rsp + 0x17a4], r13d
mov dword [rsp + 0x17a8], 1
mov qword [rsp + 0x17b0], r13
mov dword [rsp + 0x17c8], r13d
mov dword [rsp + 0x17cc], r13d
mov dword [rsp + 0x17d0], 2
mov dword [rsp + 0x17d4], 1
mov dword [rsp + 0x17d8], r13d
xor edi, edi
mov qword [rsp + 0x17f0], rax
mov qword [rsp + 0x17f8], rax
mov qword [rsp + 0x1800], rax
mov qword [rsp + 0x1808], rax
movabs rax, 0x80000010010
mov qword [rsp + 0x1820], rax
lea rax, [0x18012c418]
mov dword [rsp + 0x1810], r13d
mov qword [rsp + 0x1838], rax
xor eax, eax
mov qword [rsp + 0x1828], r13
mov qword [rsp + 0x1888], rax
mov qword [rsp + 0x1890], rax
mov qword [rsp + 0x1898], rax
mov qword [rsp + 0x18a0], rax
mov qword [rsp + 0x18a8], rax
mov qword [rsp + 0x18b0], rax
movabs rax, 0x100000010001
mov dword [rsp + 0x1840], r13d
mov dword [rsp + 0x1848], r13d
mov dword [rsp + 0x184c], r13d
mov qword [rsp + 0x1858], r13
mov qword [rsp + 0x18c8], rax
lea rax, str.Google_Talk___Google_Xmpp_Client_GUI_Window
lea r15, str.Chrome_RenderWidgetHostHWND
lea r13, str.Chrome_Legacy_Window
lea r8d, [rdi + 0x60]
lea rcx, [rsp + 0x1900]
xor edx, edx
mov qword [rsp + 0x18d8], rax
mov dword [rsp + 0x1814], 0x800
mov dword [rsp + 0x1818], 2
mov qword [rsp + 0x1830], r12
mov dword [rsp + 0x1844], 0x10010000
mov dword [rsp + 0x1850], 1
mov qword [rsp + 0x1860], r15
mov qword [rsp + 0x1868], r13
mov dword [rsp + 0x1870], edi
mov dword [rsp + 0x1874], edi
mov dword [rsp + 0x1878], 2
mov dword [rsp + 0x187c], 1
mov dword [rsp + 0x1880], edi
mov dword [rsp + 0x18b8], edi
mov dword [rsp + 0x18bc], 0x1000
mov dword [rsp + 0x18c0], 1
mov qword [rsp + 0x18d0], rdi
mov qword [rsp + 0x18e0], rdi
mov dword [rsp + 0x18e8], edi
mov dword [rsp + 0x18ec], edi
mov dword [rsp + 0x18f0], edi
mov dword [rsp + 0x18f4], edi
mov dword [rsp + 0x18f8], edi
call fcn.18007ead0
movabs rax, 0x200000010001
lea r8d, [rdi + 0x60]
lea rcx, [rsp + 0x19a8]
mov qword [rsp + 0x1970], rax
lea rax, str.BaseGui
xor edx, edx
mov dword [rsp + 0x1960], edi
mov dword [rsp + 0x1964], 0x2000
mov dword [rsp + 0x1968], 1
mov qword [rsp + 0x1980], rax
mov qword [rsp + 0x1978], rdi
mov qword [rsp + 0x1988], rdi
mov dword [rsp + 0x1990], edi
mov dword [rsp + 0x1994], edi
mov dword [rsp + 0x1998], edi
mov dword [rsp + 0x199c], edi
mov dword [rsp + 0x19a0], edi
call fcn.18007ead0
movabs rcx, 0x400000010001
mov dword [rsp + 0x1a08], edi
mov dword [rsp + 0x1a0c], 0x4000
mov dword [rsp + 0x1a10], 3
mov qword [rsp + 0x1a20], rdi
mov qword [rsp + 0x1a28], rdi
mov qword [rsp + 0x1a18], rcx
mov qword [rsp + 0x1a30], rdi
mov dword [rsp + 0x1a38], edi
lea rax, str.nano_wui_button
lea rdx, [0x18012c318]
mov dword [rsp + 0x1a3c], 0x30000
mov qword [rsp + 0x1a58], rax
lea rax, str.Button
mov dword [rsp + 0x1a40], edi
mov qword [rsp + 0x1a88], rax
lea rax, str.nano_wui_static
mov dword [rsp + 0x1a44], edi
mov qword [rsp + 0x1b00], rax
lea rax, str.ATL:
mov dword [rsp + 0x1a48], 1
mov qword [rsp + 0x1b78], rax
xor eax, eax
mov qword [rsp + 0x1a50], rdi
mov qword [rsp + 0x1a60], rdi
mov dword [rsp + 0x1a68], edi
mov dword [rsp + 0x1a6c], edi
mov qword [rsp + 0x1bd0], rax
mov qword [rsp + 0x1bd8], rax
mov qword [rsp + 0x1be0], rax
mov qword [rsp + 0x1be8], rax
mov qword [rsp + 0x1bf0], rax
mov qword [rsp + 0x1bf8], rax
mov dword [rsp + 0x1a70], 2
mov dword [rsp + 0x1a74], 2
mov dword [rsp + 0x1a78], 3
mov qword [rsp + 0x1a80], rdi
mov qword [rsp + 0x1a90], rdi
mov dword [rsp + 0x1a98], edi
mov dword [rsp + 0x1a9c], edi
mov dword [rsp + 0x1aa0], 3
mov dword [rsp + 0x1aa4], edi
mov dword [rsp + 0x1aa8], edi
mov dword [rsp + 0x1ab0], edi
mov dword [rsp + 0x1ab4], 0x4000
mov dword [rsp + 0x1ab8], 3
mov qword [rsp + 0x1ac0], rcx
mov qword [rsp + 0x1ac8], rdi
mov qword [rsp + 0x1ad0], rdi
mov qword [rsp + 0x1ad8], rdi
mov dword [rsp + 0x1ae0], edi
mov dword [rsp + 0x1ae4], 0x30000
mov dword [rsp + 0x1ae8], edi
mov dword [rsp + 0x1aec], edi
mov dword [rsp + 0x1af0], 1
mov qword [rsp + 0x1af8], rdi
mov qword [rsp + 0x1b08], rdi
mov dword [rsp + 0x1b10], edi
mov dword [rsp + 0x1b14], edi
mov dword [rsp + 0x1b18], 2
mov dword [rsp + 0x1b1c], 2
mov dword [rsp + 0x1b20], 3
mov qword [rsp + 0x1b28], rdi
mov qword [rsp + 0x1b30], rdx
mov qword [rsp + 0x1b38], rdi
mov dword [rsp + 0x1b40], edi
mov dword [rsp + 0x1b44], edi
mov dword [rsp + 0x1b48], 3
mov dword [rsp + 0x1b4c], edi
mov dword [rsp + 0x1b50], edi
mov dword [rsp + 0x1b58], edi
mov dword [rsp + 0x1b5c], 0x4000
mov dword [rsp + 0x1b60], 2
mov qword [rsp + 0x1b68], rcx
mov qword [rsp + 0x1b70], rdi
mov qword [rsp + 0x1b80], rdi
mov dword [rsp + 0x1b88], edi
mov dword [rsp + 0x1b8c], 0x30000
mov dword [rsp + 0x1b90], edi
mov dword [rsp + 0x1b94], edi
mov dword [rsp + 0x1b98], 1
mov qword [rsp + 0x1ba0], rdi
mov qword [rsp + 0x1ba8], rdx
mov qword [rsp + 0x1bb0], rdi
mov dword [rsp + 0x1bb8], edi
mov dword [rsp + 0x1bbc], edi
mov dword [rsp + 0x1bc0], 2
mov dword [rsp + 0x1bc4], 1
mov dword [rsp + 0x1bc8], 3
mov dword [rsp + 0x1c00], 1
lea r8, str.32770
lea rax, str.AfxWnd42s
lea rdx, str.SysListView32
movabs rcx, 0x800000010001
mov qword [rsp + 0x1c50], rax
movabs rax, 0x800000010002
mov dword [rsp + 0x1c04], 0x8000
mov dword [rsp + 0x1c08], 3
mov qword [rsp + 0x1c18], rdi
mov qword [rsp + 0x1d60], rax
mov qword [rsp + 0x1c10], rcx
mov qword [rsp + 0x1c20], r8
mov qword [rsp + 0x1c28], rdi
mov dword [rsp + 0x1c30], edi
mov dword [rsp + 0x1c34], edi
mov dword [rsp + 0x1c38], edi
mov dword [rsp + 0x1c3c], edi
mov dword [rsp + 0x1c40], 1
mov qword [rsp + 0x1c48], rdi
mov qword [rsp + 0x1c58], rdi
mov dword [rsp + 0x1c60], edi
mov dword [rsp + 0x1c64], edi
mov dword [rsp + 0x1c68], 2
mov dword [rsp + 0x1c6c], 1
mov dword [rsp + 0x1c70], 1
mov qword [rsp + 0x1c78], rdi
mov qword [rsp + 0x1c80], rdx
mov qword [rsp + 0x1c88], rdi
mov dword [rsp + 0x1c90], edi
mov dword [rsp + 0x1c94], edi
mov dword [rsp + 0x1c98], 2
mov dword [rsp + 0x1c9c], 2
mov dword [rsp + 0x1ca0], edi
mov dword [rsp + 0x1ca8], 1
mov dword [rsp + 0x1cac], 0x8000
mov dword [rsp + 0x1cb0], 3
mov qword [rsp + 0x1cb8], rcx
mov qword [rsp + 0x1cc0], rdi
mov qword [rsp + 0x1cc8], r8
mov qword [rsp + 0x1cd0], rdi
mov dword [rsp + 0x1cd8], edi
mov dword [rsp + 0x1cdc], edi
mov dword [rsp + 0x1ce0], edi
mov dword [rsp + 0x1ce4], edi
mov dword [rsp + 0x1ce8], 1
mov qword [rsp + 0x1cf0], rdi
mov qword [rsp + 0x1cf8], rbx
mov qword [rsp + 0x1d00], rdi
mov dword [rsp + 0x1d08], edi
mov dword [rsp + 0x1d0c], edi
mov dword [rsp + 0x1d10], 2
mov dword [rsp + 0x1d14], 1
mov dword [rsp + 0x1d18], 1
mov qword [rsp + 0x1d20], rdi
mov qword [rsp + 0x1d28], rdx
mov qword [rsp + 0x1d30], rdi
mov dword [rsp + 0x1d38], edi
mov dword [rsp + 0x1d3c], edi
mov dword [rsp + 0x1d40], 2
mov dword [rsp + 0x1d44], 2
mov dword [rsp + 0x1d48], edi
mov dword [rsp + 0x1d50], 1
mov dword [rsp + 0x1d54], 0x8000
mov dword [rsp + 0x1d58], 3
mov qword [rsp + 0x1d68], rdi
mov qword [rsp + 0x1d70], r8
mov qword [rsp + 0x1d78], rdi
mov dword [rsp + 0x1d80], edi
mov dword [rsp + 0x1d84], edi
mov dword [rsp + 0x1d88], edi
mov dword [rsp + 0x1d8c], edi
mov dword [rsp + 0x1d90], 1
mov qword [rsp + 0x1d98], rdi
mov qword [rsp + 0x1da0], r8
mov qword [rsp + 0x1da8], rdi
mov dword [rsp + 0x1db0], edi
mov dword [rsp + 0x1db4], edi
mov dword [rsp + 0x1db8], 2
mov dword [rsp + 0x1dbc], 1
mov dword [rsp + 0x1dc0], 1
mov qword [rsp + 0x1dc8], rdi
mov qword [rsp + 0x1dd0], rdx
movabs rax, 0x800000010004
lea r12, str.Qt5QWindowIcon
lea r8d, [rdi + 0x60]
lea rcx, [rsp + 0x1e40]
xor edx, edx
mov qword [rsp + 0x1e18], r12
mov qword [rsp + 0x1dd8], rdi
mov dword [rsp + 0x1de0], 0x3e8
mov dword [rsp + 0x1de4], edi
mov dword [rsp + 0x1de8], 2
mov dword [rsp + 0x1dec], 1
mov dword [rsp + 0x1df0], edi
mov dword [rsp + 0x1df8], edi
mov dword [rsp + 0x1dfc], 0x8000
mov dword [rsp + 0x1e00], 1
mov qword [rsp + 0x1e08], rax
mov qword [rsp + 0x1e10], rdi
mov qword [rsp + 0x1e20], rdi
mov dword [rsp + 0x1e28], edi
mov dword [rsp + 0x1e2c], edi
mov dword [rsp + 0x1e30], edi
mov dword [rsp + 0x1e34], edi
mov dword [rsp + 0x1e38], edi
call fcn.18007ead0
movabs rax, 0x1000000010001
lea r8d, [rdi + 0x60]
mov qword [rsp + 0x1eb0], rax
lea rax, str.Tfm_login
lea rcx, [rsp + 0x1ee8]
xor edx, edx
mov dword [rsp + 0x1ea0], edi
mov dword [rsp + 0x1ea4], 0x10000
mov qword [rsp + 0x1ec0], rax
mov dword [rsp + 0x1ea8], 1
mov qword [rsp + 0x1eb8], rdi
mov qword [rsp + 0x1ec8], rdi
mov dword [rsp + 0x1ed0], edi
mov dword [rsp + 0x1ed4], edi
mov dword [rsp + 0x1ed8], edi
mov dword [rsp + 0x1edc], edi
mov dword [rsp + 0x1ee0], edi
call fcn.18007ead0
movabs rax, 0x4000000010001
lea rcx, str.32770
mov qword [rsp + 0x1f68], rcx
lea rbx, str.Shell_Embedding
lea rcx, str.AfxFrameOrView80u
mov qword [rsp + 0x1f58], rax
mov qword [rsp + 0x2000], rax
mov dword [rsp + 0x1f48], 1
mov qword [rsp + 0x1f98], rcx
mov dword [rsp + 0x1f4c], 0x40000
mov dword [rsp + 0x1f50], 3
mov qword [rsp + 0x1f60], rdi
mov qword [rsp + 0x1f70], rdi
mov dword [rsp + 0x1f78], edi
mov dword [rsp + 0x1f7c], 0x10010000
mov dword [rsp + 0x1f80], edi
mov dword [rsp + 0x1f84], edi
mov dword [rsp + 0x1f88], 1
mov qword [rsp + 0x1f90], rdi
mov qword [rsp + 0x1fa0], rdi
mov dword [rsp + 0x1fa8], edi
mov dword [rsp + 0x1fac], edi
mov dword [rsp + 0x1fb0], 2
mov dword [rsp + 0x1fb4], 2
mov dword [rsp + 0x1fb8], 1
mov qword [rsp + 0x1fc0], rdi
mov qword [rsp + 0x1fc8], rbx
mov qword [rsp + 0x1fd0], rdi
mov dword [rsp + 0x1fd8], edi
mov dword [rsp + 0x1fdc], edi
mov dword [rsp + 0x1fe0], 2
mov dword [rsp + 0x1fe4], 1
mov dword [rsp + 0x1fe8], edi
mov dword [rsp + 0x1ff0], 1
mov dword [rsp + 0x1ff4], 0x40000
mov dword [rsp + 0x1ff8], 3
mov qword [rsp + 0x2008], rdi
lea rax, str.UCMainFrameWindowClass
mov qword [rsp + 0x2010], rax
movabs rax, 0x8000000010001
mov qword [rsp + 0x2040], rcx
mov qword [rsp + 0x20a8], rax
lea rax, str.NotesContactListFrame
lea r8d, [rdi + 0x60]
lea rcx, [rsp + 0x20e0]
xor edx, edx
mov qword [rsp + 0x2018], rdi
mov qword [rsp + 0x20b8], rax
mov dword [rsp + 0x2020], edi
mov dword [rsp + 0x2024], 0x10010000
mov dword [rsp + 0x2028], edi
mov dword [rsp + 0x202c], edi
mov dword [rsp + 0x2030], 1
mov qword [rsp + 0x2038], rdi
mov qword [rsp + 0x2048], rdi
mov dword [rsp + 0x2050], edi
mov dword [rsp + 0x2054], edi
mov dword [rsp + 0x2058], 2
mov dword [rsp + 0x205c], 2
mov dword [rsp + 0x2060], 1
mov qword [rsp + 0x2068], rdi
mov qword [rsp + 0x2070], rbx
mov qword [rsp + 0x2078], rdi
mov dword [rsp + 0x2080], edi
mov dword [rsp + 0x2084], edi
mov dword [rsp + 0x2088], 2
mov dword [rsp + 0x208c], 1
mov dword [rsp + 0x2090], edi
mov dword [rsp + 0x2098], edi
mov dword [rsp + 0x209c], 0x80000
mov dword [rsp + 0x20a0], 1
mov qword [rsp + 0x20b0], rdi
mov qword [rsp + 0x20c0], rdi
mov dword [rsp + 0x20c8], edi
mov dword [rsp + 0x20cc], 0x20000
mov dword [rsp + 0x20d0], edi
mov dword [rsp + 0x20d4], edi
mov dword [rsp + 0x20d8], edi
call fcn.18007ead0
movabs rax, 0x40000000010001
mov qword [rsp + 0x2150], rax
lea rax, str.32770
lea rdx, str.wxWindow
mov qword [rsp + 0x2190], rsi
mov qword [rsp + 0x2160], rax
xor eax, eax
movabs rsi, 0x100000000010001
mov dword [rsp + 0x2140], edi
mov dword [rsp + 0x2144], 0x400000
mov qword [rsp + 0x21b8], rax
mov qword [rsp + 0x21c0], rax
mov qword [rsp + 0x21c8], rax
mov qword [rsp + 0x21d0], rax
mov qword [rsp + 0x21d8], rax
mov qword [rsp + 0x21e0], rax
mov dword [rsp + 0x2148], 2
mov qword [rsp + 0x2158], rdi
mov qword [rsp + 0x2168], rdi
mov dword [rsp + 0x2170], edi
mov dword [rsp + 0x2174], 0xc0000
mov dword [rsp + 0x2178], edi
mov dword [rsp + 0x217c], edi
mov dword [rsp + 0x2180], 1
mov qword [rsp + 0x2188], rdi
mov qword [rsp + 0x2198], rdi
mov dword [rsp + 0x21a0], edi
mov dword [rsp + 0x21a4], 0x15
mov dword [rsp + 0x21a8], 2
mov dword [rsp + 0x21ac], 2
mov dword [rsp + 0x21b0], edi
mov dword [rsp + 0x21e8], edi
mov dword [rsp + 0x21ec], 0x1000000
mov dword [rsp + 0x21f0], 2
mov qword [rsp + 0x21f8], rsi
mov qword [rsp + 0x2200], rdi
mov qword [rsp + 0x2208], rdx
mov qword [rsp + 0x2210], rdi
mov dword [rsp + 0x2218], edi
mov dword [rsp + 0x221c], 0x90000
mov qword [rsp + 0x2260], rax
mov qword [rsp + 0x2268], rax
mov qword [rsp + 0x2270], rax
mov qword [rsp + 0x2278], rax
mov qword [rsp + 0x2280], rax
mov qword [rsp + 0x2288], rax
lea rax, str.SkinScrollWnd
lea rcx, str.RICHEDIT50W
mov dword [rsp + 0x2220], edi
mov qword [rsp + 0x2388], rax
lea rax, str.SkinScrollMidWnd
mov dword [rsp + 0x2224], edi
mov dword [rsp + 0x2228], 1
mov qword [rsp + 0x2230], rdi
mov qword [rsp + 0x2238], rcx
mov qword [rsp + 0x23b8], rax
mov qword [rsp + 0x2240], rdi
mov dword [rsp + 0x2248], edi
mov dword [rsp + 0x224c], edi
mov dword [rsp + 0x2250], 2
mov dword [rsp + 0x2254], 1
mov dword [rsp + 0x2258], edi
mov dword [rsp + 0x2290], edi
mov dword [rsp + 0x2294], 0x1000000
mov dword [rsp + 0x2298], 3
mov qword [rsp + 0x22a0], rsi
mov qword [rsp + 0x22a8], rdi
mov qword [rsp + 0x22b0], rdx
mov qword [rsp + 0x22b8], rdi
mov dword [rsp + 0x22c0], edi
mov dword [rsp + 0x22c4], 0x90000
mov dword [rsp + 0x22c8], edi
mov dword [rsp + 0x22cc], edi
mov dword [rsp + 0x22d0], 1
mov qword [rsp + 0x22d8], rdi
mov qword [rsp + 0x22e0], rdx
mov qword [rsp + 0x22e8], rdi
mov dword [rsp + 0x22f0], edi
mov dword [rsp + 0x22f4], edi
mov dword [rsp + 0x22f8], 2
mov dword [rsp + 0x22fc], 1
mov dword [rsp + 0x2300], 1
mov qword [rsp + 0x2308], rdi
mov qword [rsp + 0x2310], rcx
mov qword [rsp + 0x2318], rdi
mov dword [rsp + 0x2320], edi
mov dword [rsp + 0x2324], edi
mov dword [rsp + 0x2328], 2
mov dword [rsp + 0x232c], 1
mov dword [rsp + 0x2330], edi
mov dword [rsp + 0x2338], edi
mov dword [rsp + 0x233c], 0x1000000
mov dword [rsp + 0x2340], 3
mov qword [rsp + 0x2348], rsi
mov qword [rsp + 0x2350], rdi
mov qword [rsp + 0x2358], rdx
mov qword [rsp + 0x2360], rdi
mov dword [rsp + 0x2368], edi
mov dword [rsp + 0x236c], 0x90000
mov dword [rsp + 0x2370], edi
mov dword [rsp + 0x2374], edi
mov dword [rsp + 0x2378], 1
mov qword [rsp + 0x2380], rdi
mov qword [rsp + 0x2390], rdi
mov dword [rsp + 0x2398], edi
mov dword [rsp + 0x239c], edi
mov dword [rsp + 0x23a0], 2
mov dword [rsp + 0x23a4], 1
mov dword [rsp + 0x23a8], 1
mov qword [rsp + 0x23b0], rdi
mov qword [rsp + 0x23c0], rdi
mov dword [rsp + 0x23c8], edi
mov dword [rsp + 0x23cc], edi
mov dword [rsp + 0x23d0], 2
mov dword [rsp + 0x23d4], 1
mov dword [rsp + 0x23d8], edi
mov dword [rsp + 0x23e0], edi
mov dword [rsp + 0x23e4], 0x1000000
mov dword [rsp + 0x23e8], 1
mov qword [rsp + 0x23f0], rsi
mov qword [rsp + 0x23f8], rdi
xor eax, eax
lea rdi, str.LINE
lea rcx, [rsp + 0x2428]
lea r8d, [rax + 0x60]
xor edx, edx
mov qword [rsp + 0x2400], r12
mov qword [rsp + 0x2408], rdi
mov dword [rsp + 0x2410], eax
mov dword [rsp + 0x2414], 0x10000
mov dword [rsp + 0x2418], eax
mov dword [rsp + 0x241c], eax
mov dword [rsp + 0x2420], eax
call fcn.18007ead0
xor r11d, r11d
lea rax, str.Qt5152QWindowIcon
mov qword [rsp + 0x2498], rsi
xor esi, esi
lea rcx, [rsp + 0x24d0]
lea r8d, [r11 + 0x60]
xor edx, edx
mov dword [rsp + 0x2488], r11d
mov dword [rsp + 0x248c], 0x1000000
mov dword [rsp + 0x2490], 1
mov qword [rsp + 0x24a0], rsi
mov qword [rsp + 0x24a8], rax
mov qword [rsp + 0x24b0], rdi
mov dword [rsp + 0x24b8], esi
mov dword [rsp + 0x24bc], 0x10000
mov dword [rsp + 0x24c0], esi
mov dword [rsp + 0x24c4], esi
mov dword [rsp + 0x24c8], esi
call fcn.18007ead0
movabs rax, 0x200000000010000
mov qword [rsp + 0x2540], rax
lea rax, [0x18012c318]
lea rdi, str.32770
mov qword [rsp + 0x2580], rax
lea rax, str.SysTabControl32
mov dword [rsp + 0x2530], esi
mov qword [rsp + 0x25b0], rax
movabs rax, 0x400000000010001
mov dword [rsp + 0x2534], 0x2000000
mov qword [rsp + 0x25e8], rax
lea rax, str.CommunicatorMainWindowClass
mov dword [rsp + 0x2538], 3
mov qword [rsp + 0x2548], rsi
mov qword [rsp + 0x2550], rdi
mov qword [rsp + 0x2558], rsi
mov qword [rsp + 0x25f8], rax
mov dword [rsp + 0x2560], esi
mov dword [rsp + 0x2564], esi
mov dword [rsp + 0x2568], esi
mov dword [rsp + 0x256c], esi
mov dword [rsp + 0x2570], 1
mov qword [rsp + 0x2578], rsi
mov qword [rsp + 0x2588], rsi
mov dword [rsp + 0x2590], 0x4cc
mov dword [rsp + 0x2594], esi
mov dword [rsp + 0x2598], 2
mov dword [rsp + 0x259c], 1
mov dword [rsp + 0x25a0], 3
mov qword [rsp + 0x25a8], rsi
mov qword [rsp + 0x25b8], rsi
mov dword [rsp + 0x25c0], 0x409
mov dword [rsp + 0x25c4], esi
mov dword [rsp + 0x25c8], 3
mov dword [rsp + 0x25cc], esi
mov dword [rsp + 0x25d0], esi
mov dword [rsp + 0x25d8], esi
mov dword [rsp + 0x25dc], 0x4000000
mov dword [rsp + 0x25e0], 1
mov qword [rsp + 0x25f0], rsi
mov qword [rsp + 0x2600], rsi
mov dword [rsp + 0x2608], esi
mov dword [rsp + 0x260c], esi
mov dword [rsp + 0x2610], esi
mov dword [rsp + 0x2614], esi
mov dword [rsp + 0x2618], esi
xor edx, edx
lea r8d, [rsi + 0x60]
lea rcx, [rsp + 0x2620]
call fcn.18007ead0
movabs rax, 0x800000000010000
lea r8d, [rsi + 0x60]
mov qword [rsp + 0x2690], rax
lea rax, str.WeChatloginWndForPC
lea rcx, [rsp + 0x26c8]
xor edx, edx
mov dword [rsp + 0x2680], esi
mov dword [rsp + 0x2684], 0x8000000
mov qword [rsp + 0x26a0], rax
mov dword [rsp + 0x2688], 1
mov qword [rsp + 0x2698], rsi
mov qword [rsp + 0x26a8], rsi
mov dword [rsp + 0x26b0], esi
mov dword [rsp + 0x26b4], esi
mov dword [rsp + 0x26b8], esi
mov dword [rsp + 0x26bc], esi
mov dword [rsp + 0x26c0], esi
call fcn.18007ead0
movabs rax, 0x800000000020000
lea r8d, [rsi + 0x60]
mov qword [rsp + 0x2738], rax
lea rax, str.WeChatMainWndForPC
lea rcx, [rsp + 0x2770]
xor edx, edx
mov dword [rsp + 0x2728], esi
mov dword [rsp + 0x272c], 0x8000000
mov qword [rsp + 0x2748], rax
mov dword [rsp + 0x2730], 1
mov qword [rsp + 0x2740], rsi
mov qword [rsp + 0x2750], rsi
mov dword [rsp + 0x2758], esi
mov dword [rsp + 0x275c], esi
mov dword [rsp + 0x2760], esi
mov dword [rsp + 0x2764], esi
mov dword [rsp + 0x2768], esi
call fcn.18007ead0
movabs rax, 0x800000000040000
lea r8d, [rsi + 0x60]
mov qword [rsp + 0x27e0], rax
lea rax, str.ChatWnd
lea rcx, [rsp + 0x2818]
xor edx, edx
mov dword [rsp + 0x27d0], esi
mov dword [rsp + 0x27d4], 0x8000000
mov qword [rsp + 0x27f0], rax
mov dword [rsp + 0x27d8], 1
mov qword [rsp + 0x27e8], rsi
mov qword [rsp + 0x27f8], rsi
mov dword [rsp + 0x2800], esi
mov dword [rsp + 0x2804], esi
mov dword [rsp + 0x2808], esi
mov dword [rsp + 0x280c], esi
mov dword [rsp + 0x2810], esi
call fcn.18007ead0
movabs rax, 0x8000000000010000
lea r8d, [rsi + 0x60]
mov qword [rsp + 0x2888], rax
lea rax, str.WeChatLogin
lea rcx, [rsp + 0x28c0]
xor edx, edx
mov dword [rsp + 0x2878], esi
mov dword [rsp + 0x287c], 0x80000000
mov qword [rsp + 0x2898], rax
mov dword [rsp + 0x2880], 1
mov qword [rsp + 0x2890], rsi
mov qword [rsp + 0x28a0], rsi
mov dword [rsp + 0x28a8], esi
mov dword [rsp + 0x28ac], 0x10000000
mov dword [rsp + 0x28b0], esi
mov dword [rsp + 0x28b4], esi
mov dword [rsp + 0x28b8], esi
call fcn.18007ead0
movabs rax, 0x8000000000020000
mov dword [rsp + 0x2920], esi
mov qword [rsp + 0x2930], rax
lea rax, str.WeWorkWindow
mov dword [rsp + 0x2924], 0x80000000
mov dword [rsp + 0x2928], 1
mov qword [rsp + 0x2938], rsi
mov qword [rsp + 0x2940], rax
lea r8d, [rsi + 0x60]
lea rcx, [rsp + 0x2968]
xor edx, edx
mov qword [rsp + 0x2948], rsi
mov dword [rsp + 0x2950], esi
mov dword [rsp + 0x2954], 0x30000000
mov dword [rsp + 0x2958], esi
mov dword [rsp + 0x295c], esi
mov dword [rsp + 0x2960], esi
call fcn.18007ead0
movabs rax, 0x1000000000010001
lea r8d, [rsi + 0x60]
mov qword [rsp + 0x29d8], rax
lea rax, [0x18012c018]
lea rcx, [rsp + 0x2a10]
xor edx, edx
mov dword [rsp + 0x29c8], esi
mov dword [rsp + 0x29cc], 0x10000000
mov qword [rsp + 0x29f0], rax
mov dword [rsp + 0x29d0], 1
mov qword [rsp + 0x29e0], rsi
mov qword [rsp + 0x29e8], rdi
mov dword [rsp + 0x29f8], esi
mov dword [rsp + 0x29fc], esi
mov dword [rsp + 0x2a00], esi
mov dword [rsp + 0x2a04], esi
mov dword [rsp + 0x2a08], esi
call fcn.18007ead0
movabs rax, 0x1000000000010002
lea r8d, [rsi + 0x60]
mov qword [rsp + 0x2a80], rax
lea rax, str.MainC00Users0Public0Documents0KK50
lea rcx, [rsp + 0x2b60]
mov qword [rsp + 0x2a90], rax
lea rax, str.ContactListFrame
xor edx, edx
mov qword [rsp + 0x2ac0], rax
xor eax, eax
mov dword [rsp + 0x2a70], esi
mov qword [rsp + 0x2ae8], rax
mov qword [rsp + 0x2af0], rax
mov qword [rsp + 0x2af8], rax
mov qword [rsp + 0x2b00], rax
mov qword [rsp + 0x2b08], rax
mov qword [rsp + 0x2b10], rax
movabs rax, 0x1000000000010003
mov dword [rsp + 0x2a74], 0x10000000
mov dword [rsp + 0x2a78], 2
mov qword [rsp + 0x2b28], rax
lea rax, str.C00Users0Public0Documents0KK60Files0KK
mov qword [rsp + 0x2a88], rsi
mov qword [rsp + 0x2a98], rsi
mov dword [rsp + 0x2aa0], esi
mov dword [rsp + 0x2aa4], esi
mov qword [rsp + 0x2b38], rax
mov dword [rsp + 0x2aa8], esi
mov dword [rsp + 0x2aac], esi
mov dword [rsp + 0x2ab0], 1
mov qword [rsp + 0x2ab8], rsi
mov qword [rsp + 0x2ac8], rsi
mov dword [rsp + 0x2ad0], esi
mov dword [rsp + 0x2ad4], esi
mov dword [rsp + 0x2ad8], 2
mov dword [rsp + 0x2adc], 1
mov dword [rsp + 0x2ae0], esi
mov dword [rsp + 0x2b18], esi
mov dword [rsp + 0x2b1c], 0x10000000
mov dword [rsp + 0x2b20], 1
mov qword [rsp + 0x2b30], rsi
mov qword [rsp + 0x2b40], rsi
mov dword [rsp + 0x2b48], esi
mov dword [rsp + 0x2b4c], esi
mov dword [rsp + 0x2b50], esi
mov dword [rsp + 0x2b54], esi
mov dword [rsp + 0x2b58], esi
call fcn.18007ead0
movabs rax, 0x1000000000010004
mov dword [rsp + 0x2bc0], esi
mov qword [rsp + 0x2bd0], rax
mov dword [rsp + 0x2bc4], 0x10000000
mov dword [rsp + 0x2bc8], 2
xor eax, eax
lea rdx, str.32770
lea rcx, str.IMO_UISkinWindow
mov qword [rsp + 0x2c38], rax
mov qword [rsp + 0x2c40], rax
mov qword [rsp + 0x2c48], rax
mov qword [rsp + 0x2c50], rax
mov qword [rsp + 0x2c58], rax
mov qword [rsp + 0x2c60], rax
movabs rax, 0x2000000000010000
lea rdi, str.Chrome_WidgetWin_0
mov qword [rsp + 0x2ce8], rbx
xor ebx, ebx
mov qword [rsp + 0x2c78], rax
mov qword [rsp + 0x2d20], rax
lea rax, str.Afx:00400000:0
mov qword [rsp + 0x2bd8], rsi
mov qword [rsp + 0x2be0], rdi
mov qword [rsp + 0x2be8], rsi
mov dword [rsp + 0x2bf0], esi
mov dword [rsp + 0x2bf4], 0x10c30000
mov qword [rsp + 0x2d30], rax
mov dword [rsp + 0x2bf8], esi
mov dword [rsp + 0x2bfc], esi
mov dword [rsp + 0x2c00], 1
mov qword [rsp + 0x2c08], rsi
mov qword [rsp + 0x2c10], r15
mov qword [rsp + 0x2c18], r13
mov dword [rsp + 0x2c20], esi
mov dword [rsp + 0x2c24], 0x10000000
mov dword [rsp + 0x2c28], 2
mov dword [rsp + 0x2c2c], 1
mov dword [rsp + 0x2c30], 3
mov dword [rsp + 0x2c68], esi
mov dword [rsp + 0x2c6c], 0x20000000
mov dword [rsp + 0x2c70], 3
mov qword [rsp + 0x2c80], rsi
mov qword [rsp + 0x2c88], rdx
mov qword [rsp + 0x2c90], rsi
mov dword [rsp + 0x2c98], esi
mov dword [rsp + 0x2c9c], 0x20000
mov dword [rsp + 0x2ca0], esi
mov dword [rsp + 0x2ca4], esi
mov dword [rsp + 0x2ca8], 1
mov qword [rsp + 0x2cb0], rsi
mov qword [rsp + 0x2cb8], rcx
mov qword [rsp + 0x2cc0], rsi
mov dword [rsp + 0x2cc8], esi
mov dword [rsp + 0x2ccc], esi
mov dword [rsp + 0x2cd0], 2
mov dword [rsp + 0x2cd4], 1
mov dword [rsp + 0x2cd8], 1
mov qword [rsp + 0x2ce0], rsi
mov qword [rsp + 0x2cf0], rbx
mov dword [rsp + 0x2cf8], ebx
mov dword [rsp + 0x2cfc], ebx
mov dword [rsp + 0x2d00], 2
mov dword [rsp + 0x2d04], 1
mov dword [rsp + 0x2d08], ebx
mov dword [rsp + 0x2d10], ebx
mov dword [rsp + 0x2d14], 0x20000000
mov dword [rsp + 0x2d18], 3
mov qword [rsp + 0x2d28], rbx
mov qword [rsp + 0x2d38], rbx
mov dword [rsp + 0x2d40], ebx
mov dword [rsp + 0x2d44], ebx
mov dword [rsp + 0x2d48], ebx
mov dword [rsp + 0x2d4c], ebx
mov dword [rsp + 0x2d50], 1
mov qword [rsp + 0x2d58], rbx
mov qword [rsp + 0x2d60], rdx
mov qword [rsp + 0x2d68], rbx
mov dword [rsp + 0x2d70], ebx
mov dword [rsp + 0x2d74], 0x20000
mov dword [rsp + 0x2d78], 2
mov dword [rsp + 0x2d7c], 1
mov dword [rsp + 0x2d80], 1
mov qword [rsp + 0x2d88], rbx
mov qword [rsp + 0x2d90], rcx
mov qword [rsp + 0x2d98], rbx
mov dword [rsp + 0x2da0], ebx
xor eax, eax
movabs rdx, 0x4000000000010000
lea rcx, [0x18012bed8]
mov qword [rsp + 0x2e30], rax
mov qword [rsp + 0x2e38], rax
mov qword [rsp + 0x2e40], rax
mov qword [rsp + 0x2e48], rax
mov qword [rsp + 0x2e50], rax
mov qword [rsp + 0x2e58], rax
lea rax, str.StandardFrame
lea rsi, str.Chrome_WidgetWin_1
mov dword [rsp + 0x2da4], ebx
mov qword [rsp + 0x2e80], rax
xor eax, eax
mov dword [rsp + 0x2da8], 2
mov qword [rsp + 0x2ed8], rax
mov qword [rsp + 0x2ee0], rax
mov qword [rsp + 0x2ee8], rax
mov qword [rsp + 0x2ef0], rax
mov qword [rsp + 0x2ef8], rax
mov qword [rsp + 0x2f00], rax
lea rax, str.StandardFrame_DingTalk
mov dword [rsp + 0x2dac], 1
mov dword [rsp + 0x2db0], ebx
mov dword [rsp + 0x2db8], ebx
mov dword [rsp + 0x2dbc], 0x40000000
mov dword [rsp + 0x2dc0], 2
mov qword [rsp + 0x2f28], rax
mov qword [rsp + 0x2dc8], rdx
mov qword [rsp + 0x2dd0], rbx
mov qword [rsp + 0x2dd8], rsi
mov qword [rsp + 0x2de0], rcx
mov dword [rsp + 0x2de8], ebx
mov dword [rsp + 0x2dec], ebx
mov dword [rsp + 0x2df0], ebx
mov dword [rsp + 0x2df4], ebx
mov dword [rsp + 0x2df8], 1
mov qword [rsp + 0x2e00], rbx
mov qword [rsp + 0x2e08], r15
mov qword [rsp + 0x2e10], rbx
mov dword [rsp + 0x2e18], ebx
mov dword [rsp + 0x2e1c], ebx
mov dword [rsp + 0x2e20], 2
mov dword [rsp + 0x2e24], 1
mov dword [rsp + 0x2e28], ebx
mov dword [rsp + 0x2e60], ebx
mov dword [rsp + 0x2e64], 0x40000000
mov dword [rsp + 0x2e68], 2
mov qword [rsp + 0x2e70], rdx
mov qword [rsp + 0x2e78], rbx
mov qword [rsp + 0x2e88], rcx
mov dword [rsp + 0x2e90], ebx
mov dword [rsp + 0x2e94], ebx
mov dword [rsp + 0x2e98], ebx
mov dword [rsp + 0x2e9c], ebx
mov dword [rsp + 0x2ea0], 1
mov qword [rsp + 0x2ea8], rbx
mov qword [rsp + 0x2eb0], r15
mov qword [rsp + 0x2eb8], rbx
mov dword [rsp + 0x2ec0], ebx
mov dword [rsp + 0x2ec4], ebx
mov dword [rsp + 0x2ec8], 2
mov dword [rsp + 0x2ecc], 4
mov dword [rsp + 0x2ed0], ebx
mov dword [rsp + 0x2f08], ebx
mov dword [rsp + 0x2f0c], 0x40000000
mov dword [rsp + 0x2f10], 3
mov qword [rsp + 0x2f18], rdx
mov qword [rsp + 0x2f20], rbx
mov qword [rsp + 0x2f30], rbx
mov dword [rsp + 0x2f38], ebx
mov dword [rsp + 0x2f3c], ebx
mov dword [rsp + 0x2f40], ebx
mov dword [rsp + 0x2f44], ebx
mov dword [rsp + 0x2f48], 1
mov qword [rsp + 0x2f50], rbx
mov qword [rsp + 0x2f58], rdi
mov qword [rsp + 0x2f60], rbx
mov dword [rsp + 0x2f68], ebx
mov dword [rsp + 0x2f6c], ebx
mov dword [rsp + 0x2f70], 2
movabs rax, 0x4000010000
lea r8d, [rbx + 0x60]
lea rcx, [rsp + 0x30a0]
mov qword [rsp + 0x2fc0], rax
lea rax, str.LxMainWebUIClass
xor edx, edx
mov qword [rsp + 0x2fd0], rax
lea rax, [0x18012be74]
mov dword [rsp + 0x2f74], 3
mov qword [rsp + 0x2fd8], rax
lea rax, str.CefBrowserWindow
mov dword [rsp + 0x2f78], 1
mov qword [rsp + 0x3000], rax
movabs rax, 0x400010001
mov qword [rsp + 0x2f80], rbx
mov qword [rsp + 0x3068], rax
lea rax, str.MideaConnectWin
mov qword [rsp + 0x2f88], r15
mov qword [rsp + 0x2f90], rbx
mov dword [rsp + 0x2f98], ebx
mov dword [rsp + 0x2f9c], ebx
mov qword [rsp + 0x3080], rax
mov dword [rsp + 0x2fa0], 2
mov dword [rsp + 0x2fa4], 1
mov dword [rsp + 0x2fa8], ebx
mov dword [rsp + 0x2fb0], ebx
mov dword [rsp + 0x2fb4], 0x40
mov dword [rsp + 0x2fb8], 3
mov qword [rsp + 0x2fc8], rbx
mov dword [rsp + 0x2fe0], ebx
mov dword [rsp + 0x2fe4], ebx
mov dword [rsp + 0x2fe8], ebx
mov dword [rsp + 0x2fec], ebx
mov dword [rsp + 0x2ff0], 1
mov qword [rsp + 0x2ff8], rbx
mov qword [rsp + 0x3008], rbx
mov dword [rsp + 0x3010], ebx
mov dword [rsp + 0x3014], ebx
mov dword [rsp + 0x3018], 2
mov dword [rsp + 0x301c], 1
mov dword [rsp + 0x3020], 1
mov qword [rsp + 0x3028], rbx
mov qword [rsp + 0x3030], rdi
mov qword [rsp + 0x3038], rbx
mov dword [rsp + 0x3040], ebx
mov dword [rsp + 0x3044], ebx
mov dword [rsp + 0x3048], 2
mov dword [rsp + 0x304c], 1
mov dword [rsp + 0x3050], ebx
mov dword [rsp + 0x3058], ebx
mov dword [rsp + 0x305c], 4
mov dword [rsp + 0x3060], 1
mov qword [rsp + 0x3070], rbx
mov qword [rsp + 0x3078], r12
mov dword [rsp + 0x3088], ebx
mov dword [rsp + 0x308c], ebx
mov dword [rsp + 0x3090], ebx
mov dword [rsp + 0x3094], ebx
mov dword [rsp + 0x3098], ebx
call fcn.18007ead0
movabs rax, 0x2000000010000
mov dword [rsp + 0x3100], ebx
mov dword [rsp + 0x3104], 0x20000
mov qword [rsp + 0x3110], rax
lea rax, [0x18012be28]
mov dword [rsp + 0x3108], 2
mov qword [rsp + 0x3118], rbx
mov qword [rsp + 0x3120], rsi
mov dword [rsp + 0x3130], ebx
mov qword [rsp + 0x3128], rax
mov dword [rsp + 0x3134], 0x10c20000
mov dword [rsp + 0x3138], ebx
mov dword [rsp + 0x313c], ebx
mov dword [rsp + 0x3140], 1
mov qword [rsp + 0x3148], rbx
mov qword [rsp + 0x3150], r15
mov qword [rsp + 0x3158], r13
mov dword [rsp + 0x3160], ebx
mov dword [rsp + 0x3164], 0x10000000
mov dword [rsp + 0x3168], 2
mov dword [rsp + 0x316c], 1
xor eax, eax
lea rdx, [0x18012be1c]
movabs rcx, 0x200000010002
mov qword [rsp + 0x3178], rax
mov qword [rsp + 0x3180], rax
mov qword [rsp + 0x3188], rax
mov qword [rsp + 0x3190], rax
mov qword [rsp + 0x3198], rax
mov qword [rsp + 0x31a0], rax
movabs rax, 0x800010000
mov dword [rsp + 0x3170], 3
mov dword [rsp + 0x31a8], ebx
mov qword [rsp + 0x31b8], rax
lea rax, str.Zalo
mov dword [rsp + 0x31ac], 8
mov qword [rsp + 0x31d0], rax
xor eax, eax
mov dword [rsp + 0x31b0], 2
mov qword [rsp + 0x31c0], rbx
mov qword [rsp + 0x31c8], rsi
mov dword [rsp + 0x31d8], ebx
mov qword [rsp + 0x3220], rax
mov qword [rsp + 0x3228], rax
mov qword [rsp + 0x3230], rax
mov qword [rsp + 0x3238], rax
mov qword [rsp + 0x3240], rax
mov qword [rsp + 0x3248], rax
mov qword [rsp + 0x32c8], rax
mov qword [rsp + 0x32d0], rax
mov qword [rsp + 0x32d8], rax
mov qword [rsp + 0x32e0], rax
mov qword [rsp + 0x32e8], rax
mov qword [rsp + 0x32f0], rax
mov dword [rsp + 0x31dc], 0x10c20000
mov dword [rsp + 0x31e0], ebx
mov dword [rsp + 0x31e4], ebx
mov dword [rsp + 0x31e8], 1
mov qword [rsp + 0x31f0], rbx
mov qword [rsp + 0x31f8], r15
mov qword [rsp + 0x3200], rbx
mov dword [rsp + 0x3208], ebx
mov dword [rsp + 0x320c], 0x10000000
mov dword [rsp + 0x3210], 2
mov dword [rsp + 0x3214], 1
mov dword [rsp + 0x3218], ebx
mov dword [rsp + 0x3250], ebx
mov dword [rsp + 0x3254], 0x2000
mov dword [rsp + 0x3258], 2
mov qword [rsp + 0x3260], rcx
mov qword [rsp + 0x3268], rbx
mov qword [rsp + 0x3270], rsi
mov qword [rsp + 0x3278], rdx
mov dword [rsp + 0x3280], ebx
mov dword [rsp + 0x3284], 0x10c20000
mov dword [rsp + 0x3288], ebx
mov dword [rsp + 0x328c], ebx
mov dword [rsp + 0x3290], 1
mov qword [rsp + 0x3298], rbx
mov qword [rsp + 0x32a0], r15
mov qword [rsp + 0x32a8], r13
mov dword [rsp + 0x32b0], ebx
mov dword [rsp + 0x32b4], 0x10000000
mov dword [rsp + 0x32b8], 2
mov dword [rsp + 0x32bc], 1
mov dword [rsp + 0x32c0], 3
mov dword [rsp + 0x32f8], ebx
mov dword [rsp + 0x32fc], 0x2000
mov dword [rsp + 0x3300], 2
mov qword [rsp + 0x3308], rcx
mov qword [rsp + 0x3310], rbx
mov qword [rsp + 0x3318], rdi
mov qword [rsp + 0x3320], rdx
mov dword [rsp + 0x3328], ebx
mov dword [rsp + 0x332c], 0x100a0000
mov dword [rsp + 0x3330], ebx
mov dword [rsp + 0x3334], ebx
mov dword [rsp + 0x3338], 1
mov qword [rsp + 0x3340], rbx
mov qword [rsp + 0x3348], r15
mov qword [rsp + 0x3350], r13
mov dword [rsp + 0x3358], ebx
mov qword [rsp + 0x3370], rax
mov qword [rsp + 0x3378], rax
mov qword [rsp + 0x3380], rax
mov qword [rsp + 0x3388], rax
mov qword [rsp + 0x3390], rax
mov qword [rsp + 0x3398], rax
mov qword [rsp + 0x33b0], rcx
or rcx, 0xffffffffffffffff
lea rax, str.Lark
mov qword [rsp + 0x33c8], rax
xor eax, eax
mov qword [rsp + 0x33c0], rdi
mov qword [rsp + 0x3418], rax
mov qword [rsp + 0x3420], rax
mov qword [rsp + 0x3428], rax
mov qword [rsp + 0x3430], rax
mov qword [rsp + 0x3438], rax
mov qword [rsp + 0x3440], rax
movabs rax, 0x2000010000
lea rdi, [0x1801a9200]
mov dword [rsp + 0x335c], 0x10000000
mov qword [rsp + 0x3458], rax
lea rax, str.WhatsApp
mov dword [rsp + 0x3360], 2
mov qword [rsp + 0x3470], rax
xor eax, eax
mov dword [rsp + 0x3364], 1
repne scasw ax, word [rdi]
mov dword [rsp + 0x3368], 3
mov dword [rsp + 0x33a0], ebx
not rcx
mov dword [rsp + 0x33a4], 0x2000
mov dword [rsp + 0x33a8], 2
mov qword [rsp + 0x33b8], rbx
mov dword [rsp + 0x33d0], ebx
mov dword [rsp + 0x33d4], 0x100a0000
mov dword [rsp + 0x33d8], ebx
mov dword [rsp + 0x33dc], ebx
mov dword [rsp + 0x33e0], 1
mov qword [rsp + 0x33e8], rbx
mov qword [rsp + 0x33f0], r15
mov qword [rsp + 0x33f8], r13
mov dword [rsp + 0x3400], ebx
mov dword [rsp + 0x3404], 0x10000000
mov dword [rsp + 0x3408], 2
mov dword [rsp + 0x340c], 1
mov dword [rsp + 0x3410], 3
mov dword [rsp + 0x3448], ebx
mov dword [rsp + 0x344c], 0x20
mov dword [rsp + 0x3450], 2
mov qword [rsp + 0x3460], rbx
mov qword [rsp + 0x3468], rsi
mov dword [rsp + 0x3478], ebx
mov dword [rsp + 0x347c], 0x10c20000
mov dword [rsp + 0x3480], ebx
mov dword [rsp + 0x3484], ebx
mov dword [rsp + 0x3488], 1
mov qword [rsp + 0x3490], rbx
mov qword [rsp + 0x3498], r15
mov qword [rsp + 0x34a0], r13
mov dword [rsp + 0x34a8], ebx
mov dword [rsp + 0x34ac], 0x10000000
mov dword [rsp + 0x34b0], 2
mov dword [rsp + 0x34b4], 1
mov dword [rsp + 0x34b8], 3
mov qword [rsp + 0x34c0], rax
mov qword [rsp + 0x34c8], rax
mov qword [rsp + 0x34d0], rax
mov qword [rsp + 0x34d8], rax
mov qword [rsp + 0x34e0], rax
mov qword [rsp + 0x34e8], rax
cmp rcx, 1
jne 0x180009f0c
call fcn.180005bf0
lea rcx, [rsp + 0x3fe2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3fe0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x3fe0]
mov r8d, 0x104
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetClassNameW]
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x3fe0]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18000af85
lea edx, [rax - 0x10]
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowLongW]
lea rcx, [rsp + 0x34f8]
xor edx, edx
mov r8d, 0x318
mov dword [rsp + 0x48], ebx
mov qword [rsp + 0x34f0], rbx
mov r15d, eax
mov dword [rsp + 0x44], eax
call fcn.18007ead0
lea rcx, [rsp + 0x3810]
xor edx, edx
mov r8d, 0x198
call fcn.18007ead0
mov r13d, ebx
mov rax, rbx
mov qword [rsp + 0x60], rbx
mov rsi, rax
imul rsi, rsi, 0xa8
mov rdx, qword [rsp + rsi + 0x90]
test rdx, rdx
je 0x18000a002
movzx eax, word [rdx]
cmp word [rsp + 0x3fe0], ax
jne 0x18000aa67
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x3fe0]
call fcn.18007f540
test eax, eax
jne 0x18000aa67
mov ecx, dword [rsp + rsi + 0xa4]
test ecx, ecx
je 0x18000a01a
mov eax, r15d
and eax, ecx
cmp eax, ecx
jne 0x18000aa67
cmp qword [rsp + rsi + 0x98], 0
je 0x18000a088
lea rcx, [rsp + 0x3dd2]
xor edx, edx
mov r8d, 0x208
mov word [rsp + 0x3dd0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x3dd0]
mov r8d, 0x104
mov rcx, rbp
call fcn.180013a90
mov rdx, qword [rsp + rsi + 0x98]
or rcx, 0xffffffffffffffff
mov rdi, rdx
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x3dd0]
call fcn.18007f540
test eax, eax
jne 0x18000aa67
cmp dword [0x1801b0450], 0
mov r12, rbp
je 0x18000a0cb
lea rax, [rsp + 0x3fe0]
lea r9, str.CheckWndIsIM_1___d____08x____s_
lea r8, [0x18012b1a8]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + rsi + 0x74]
lea rcx, [0x1801afb58]
mov dword [rsp + 0x28], eax
or edx, 0xffffffff
mov dword [rsp + 0x20], r13d
call fcn.1800b3b40
mov edi, dword [rsp + rsi + 0x78]
cmp edi, 1
jbe 0x18000a172
lea rcx, [rsp + 0x34f0]
xor edx, edx
mov r8d, 0x4b8
call fcn.18007ead0
movsxd rax, r13d
xor ebx, ebx
mov qword [rsp + rsi + 0xb8], rbp
lea r9d, [rdi - 1]
mov rdx, rbp
imul rax, rax, 0xa8
cmp dword [rsp + rsi + 0x74], 0x800
lea r8, [rsp + rax + 0xb8]
lea rcx, [rsp + 0x34f0]
jne 0x18000a12c
mov dword [rsp + 0x38], 1
jmp 0x18000a130
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call fcn.18002d9a0
cmp qword [rsp + 0x34f0], 0
mov qword [rsp + rsi + 0xb8], rbx
jbe 0x18000aa67
cmp dword [rsp + rsi + 0x70], 0
mov rbx, qword [rsp + 0x34f8]
je 0x18000a172
mov rcx, rbx
call fcn.18002d5b0
mov r12, rax
cmp dword [0x1801b0450], 0
je 0x18000a198
lea r9, str.CheckWndIsIM_2
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
call fcn.1800b3b40
mov ecx, dword [rsp + rsi + 0x74]
cmp ecx, 1
jne 0x18000a1bb
lea edx, [rcx + 4]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
jne 0x18000ab73
jmp 0x18000aa67
cmp ecx, 0x40000000
je 0x18000ab3b
cmp ecx, 0x20000000
je 0x18000aaf5
cmp ecx, 0x10
jne 0x18000a2b9
movabs rax, 0x1000010004
cmp qword [rsp + rsi + 0x80], rax
jne 0x18000ab73
lea edx, [rcx - 0xf]
lea r8, [rsp + 0x40]
xor esi, esi
mov rcx, rbp
mov dword [rsp + 0x40], esi
call fcn.18002d5e0
cmp dword [0x1801a92a4], 0x11
je 0x18000a227
test rax, rax
je 0x18000aa67
cmp dword [rsp + 0x40], 1
jne 0x18000aa67
lea rcx, [rsp + 0x3bc2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3bc0], si
call fcn.18007ead0
lea rdx, [rsp + 0x3bc0]
mov r8d, 0x103
mov rcx, rbp
call fcn.180013a90
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x3bc0]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18000aa67
lea r8, [0x18012c318]
xor r9d, r9d
xor edx, edx
mov rcx, rbp
call qword [sym.imp.USER32.dll_FindWindowExW]
test rax, rax
jne 0x18000aa67
lea r8, str.QQEdit
xor r9d, r9d
xor edx, edx
mov rcx, rbp
call qword [sym.imp.USER32.dll_FindWindowExW]
test rax, rax
je 0x18000ab75
jmp 0x18000aa67
cmp ecx, 0x100
jne 0x18000a2f5
movabs rax, 0x10000010001
cmp qword [rsp + rsi + 0x80], rax
jne 0x18000ab73
mov edx, 5
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x18000ab73
jmp 0x18000aa67
cmp ecx, 2
jne 0x18000a33c
movabs rax, 0x202010000
cmp qword [rsp + rsi + 0x80], rax
jne 0x18000ab73
lea rdx, [rsp + 0x40]
xor esi, esi
mov rcx, rbx
mov dword [rsp + 0x40], esi
call fcn.180005d70
test eax, eax
je 0x18000aa67
cmp dword [rsp + 0x40], esi
jne 0x18000ab75
jmp 0x18000aa67
cmp ecx, 0x800
jne 0x18000a3a0
xor r11d, r11d
lea r8, [rsp + 0x40]
mov rcx, rbx
lea edx, [r11 + 3]
mov dword [rsp + 0x40], r11d
call fcn.18002d5e0
test rax, rax
je 0x18000a36d
cmp dword [rsp + 0x40], 3
je 0x18000aa67
movabs rax, 0x80001010008
cmp qword [rsp + rsi + 0x80], rax
jne 0x18000ab73
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongW]
test al, 4
jne 0x18000ab73
jmp 0x18000aa67
cmp ecx, 0x400
jne 0x18000a48e
mov rax, qword [rsp + rsi + 0x80]
movabs rdx, 0x40002010008
cmp rax, rdx
je 0x18000a48e
movabs rdx, 0x1200010001
cmp rax, rdx
je 0x18000a48e
xor edi, edi
lea r8, [rsp + 0x40]
mov rcx, rbx
lea edx, [rdi + 5]
mov dword [rsp + 0x40], edi
call fcn.18002d5e0
lea rcx, [rsp + 0x3bc2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3bc0], di
mov r15, rax
call fcn.18007ead0
lea rdx, [rsp + 0x3bc0]
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rsi, [rsp + 0x3bc0]
lea rdi, str.WWUI.SuperListView
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetLBound
repe cmpsw word [rsi], word [rdi]
jne 0x18000ab73
test r15, r15
je 0x18000a454
cmp dword [rsp + 0x40], 5
jae 0x18000ab73
cmp dword [0x1801b0450], 0
je 0x18000a484
lea r9, str.CheckWndIsIM_pass__d_0x_08x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
call fcn.1800b3b40
mov r15d, dword [rsp + 0x44]
jmp 0x18000aa67
cmp ecx, 0x2000
jne 0x18000a4fd
mov rcx, qword [rsp + rsi + 0x98]
lea rdx, [0x18012be1c]
call fcn.18007f704
test eax, eax
je 0x18000ab73
mov rcx, qword [rsp + rsi + 0x98]
lea rdx, str.Lark
call fcn.18007f704
test eax, eax
je 0x18000ab73
mov edx, 0xfffffff0
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0x10
jae 0x18000aa67
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne 0x18000ab73
jmp 0x18000aa67
cmp ecx, 0x40000
jne 0x18000a534
xor esi, esi
lea r8, [rsp + 0x40]
mov rcx, rbx
lea edx, [rsi + 3]
mov dword [rsp + 0x40], esi
call fcn.18002d5e0
test rax, rax
je 0x18000aa67
cmp dword [rsp + 0x40], 3
jae 0x18000ab75
jmp 0x18000aa67
cmp ecx, 0x200
jne 0x18000a795
mov rax, qword [rsp + rsi + 0x80]
movabs rcx, 0x20000010010
cmp rax, rcx
je 0x18000a626
movabs rcx, 0x20000010020
cmp rax, rcx
je 0x18000a626
movabs rcx, 0x20000010040
cmp rax, rcx
jne 0x18000ab73
cmp qword [rsp + rsi + 0x98], 0
je 0x18000ab73
xor r11d, r11d
lea rcx, [rsp + 0x3bc2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3bc0], r11w
call fcn.18007ead0
lea rdx, [rsp + 0x3bc0]
mov r8d, 0x103
mov rcx, r12
call fcn.180013a90
mov rdx, qword [rsp + rsi + 0x98]
or rcx, 0xffffffffffffffff
mov rdi, rdx
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x3bc0]
call fcn.18007f320
test eax, eax
je 0x18000ab73
cmp dword [0x1801b0450], 0
je 0x18000aa67
lea r9, str.CheckWndIsIM_SameTime_9_...
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
call fcn.1800b3b40
jmp 0x18000aa67
lea rcx, [rsp + 0x3dd2]
xor esi, esi
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3dd0], si
call fcn.18007ead0
lea rdx, [rsp + 0x3dd0]
mov r8d, 0x103
mov rcx, r12
call fcn.180013a90
lea rdx, str.IBM_Lotus
lea rcx, [rsp + 0x3dd0]
call fcn.18007dfc8
test rax, rax
je 0x18000aa67
lea rcx, [rsp + 0x41f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x41f0], si
call fcn.18007ead0
call fcn.1800d08e0
test eax, eax
je 0x18000a6b6
lea rdx, [rsp + 0x41f0]
mov r8d, 0x103
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
jmp 0x18000a707
lea rcx, [rsp + 0x39b1]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x39b0], sil
call fcn.18007ead0
lea rdx, [rsp + 0x39b0]
mov r8d, 0x103
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea r8, [rsp + 0x41f0]
lea rcx, [rsp + 0x39b0]
mov r9d, 0x104
or edx, 0xffffffff
call fcn.18000fa70
lea rcx, [rsp + 0x41f0]
mov edx, VarDateFromDisp
call fcn.18007e844
mov rdi, rax
test rax, rax
je 0x18000aa67
lea rcx, [rsp + 0x3bc2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3bc0], si
call fcn.18007ead0
lea rcx, [rsp + 0x3bc0]
xor edx, edx
mov r8d, 0x104
call fcn.18007ead0
lea rdx, [rdi + 2]
lea rcx, [rsp + 0x3bc0]
mov r8d, 0x103
call fcn.18007ea70
lea rdx, str.notes2
lea rcx, [rsp + 0x3bc0]
mov r8d, 6
call fcn.18007f540
test eax, eax
je 0x18000ab75
jmp 0x18000aa67
cmp ecx, 0x100000
jne 0x18000a814
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne 0x18000aa67
or rcx, 0xffffffffffffffff
lea rdi, [0x1801a9200]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
jne 0x18000a7d3
call fcn.180005bf0
test eax, eax
je 0x18000aa67
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x1801a9200]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18000aa67
lea r8d, [rax + 5]
lea rdx, str.qqcrm
lea rcx, [0x1801a9200]
call fcn.18007f540
test eax, eax
je 0x18000ab73
jmp 0x18000aa67
cmp ecx, 0x800000
jne 0x18000a883
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x1801a9200]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
jne 0x18000a842
call fcn.180005bf0
test eax, eax
je 0x18000aa67
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x1801a9200]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18000aa67
lea r8d, [rax + 5]
lea rdx, str.qqeim
lea rcx, [0x1801a9200]
call fcn.18007f540
test eax, eax
je 0x18000ab73
jmp 0x18000aa67
cmp ecx, 0x40
je 0x18000aadc
cmp ecx, 0x8000
jne 0x18000a95d
movabs rax, 0x800000010004
cmp qword [rsp + rsi + 0x80], rax
jne 0x18000ab73
lea rcx, [rsp + 0x39b2]
xor esi, esi
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x39b0], si
call fcn.18007ead0
lea rdx, [rsp + 0x39b0]
mov r8d, 0x103
mov rcx, r12
call fcn.180013a90
cmp dword [0x1801b0450], esi
je 0x18000a917
lea rax, [rsp + 0x39b0]
lea r9, str.CheckWndIsIM_FeiQ___s_
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x39b0]
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 7
jb 0x18000aa67
lea r8d, [rax + 6]
lea rdx, [0x18012bc50]
lea rcx, [rsp + 0x39b0]
call fcn.18007f320
test eax, eax
je 0x18000ab75
jmp 0x18000aa67
cmp ecx, 0x10000000
jne 0x18000aa29
mov rax, qword [rsp + rsi + 0x80]
movabs rcx, 0x1000000000010003
cmp rax, rcx
jne 0x18000a990
bt r15d, 0x1f
jae 0x18000ab73
jmp 0x18000aa67
movabs rcx, 0x1000000000010004
xor esi, esi
cmp rax, rcx
jne 0x18000ab75
lea rcx, [rsp + 0x3bc2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3bc0], si
call fcn.18007ead0
lea rdx, [rsp + 0x3bc0]
mov r8d, 0x103
mov rcx, r12
call fcn.180013a90
cmp dword [0x1801b0450], esi
je 0x18000aa0a
lea rax, [rsp + 0x3bc0]
lea r9, str.CheckWndIsIM_KK___s_
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rdx, [0x18012c018]
lea rcx, [rsp + 0x3bc0]
call fcn.18007dfc8
test rax, rax
jne 0x18000ab75
jmp 0x18000aa67
cmp ecx, 0x20000
jne 0x18000aa8b
xor eax, eax
lea rdx, [rsp + 0x50]
xor esi, esi
mov rcx, r12
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], eax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [rsp + 0x58]
sub edx, dword [rsp + 0x50]
cmp edx, 0x190
jg 0x18000ab75
mov rax, qword [rsp + 0x60]
inc r13d
mov ebx, 0
inc rax
mov qword [rsp + 0x60], rax
cmp r13d, 0x50
jb 0x180009fb2
jmp 0x18000af81
movsxd rax, r13d
imul rax, rax, 0xa8
cmp dword [rsp + rax + 0x74], 0x20
jne 0x18000ab73
cmp dword [0x1801b0450], 0
mov r12, rbx
je 0x18000ab73
lea r9, str.CheckWndIsIM_IM_WhatsApp_0x_08x_0x_08x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.1800b3b40
jmp 0x18000ab73
cmp dword [0x1801b0450], 0
mov r12, rbx
je 0x18000ab73
lea r9, str.CheckWndIsIM_IM_LX__d_0x_08x_0x_08x
jmp 0x18000ab4e
movsxd rcx, r13d
lea rdx, str.32770
mov r8d, 6
imul rcx, rcx, 0xa8
mov rcx, qword [rsp + rcx + 0x90]
call fcn.18007f320
test eax, eax
cmovne r12, rbx
cmp dword [0x1801b0450], 0
je 0x18000ab73
mov qword [rsp + 0x30], rbx
lea r9, str.CheckWndIsIM_IM_IMO__d_0x_08x_0x_08x
mov qword [rsp + 0x28], r12
jmp 0x18000ab58
cmp dword [0x1801b0450], 0
mov r12, rbx
je 0x18000ab73
lea r9, str.CheckWndIsIM_IM_DINGTALK__d_0x_08x_0x_08x
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov dword [rsp + 0x20], r13d
call fcn.1800b3b40
xor esi, esi
movsxd rdi, r13d
mov qword [r14], r12
mov dword [r14 + 0x14], 1
mov dword [rsp + 0x48], 1
imul rdi, rdi, 0xa8
mov eax, dword [rsp + rdi + 0x74]
mov dword [r14 + 0x10], eax
mov rax, qword [rsp + rdi + 0x80]
mov qword [r14 + 0x18], rax
cmp dword [0x1801b0450], 0
je 0x18000abd6
lea r9, str.CheckWndIsIM__i_d___0x_08x_
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
call fcn.1800b3b40
mov eax, dword [rsp + rdi + 0x74]
cmp eax, 0x10
jne 0x18000af2d
lea rcx, [rsp + 0x3dd2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x3dd0], si
call fcn.18007ead0
lea rdx, [rsp + 0x3dd0]
mov r8d, 0x104
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movabs rbx, 0x1000010004
cmp qword [rsp + rdi + 0x80], rbx
jne 0x18000aeff
lea rcx, [rsp + 0x39b2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x39b0], si
call fcn.18007ead0
mov rcx, qword [r14]
lea rdx, [rsp + 0x39b0]
mov r8d, 0x104
call fcn.180013a90
lea rcx, [rsp + 0x39b0]
call fcn.1801141ec
cmp dword [0x1801a92a4], 0x11
jne 0x18000ac8e
mov dword [r14 + 0x10], 1
movabs rax, 0x1100010001
jmp 0x18000ae55
lea rdx, [0x18012ba88]
lea rcx, [rsp + 0x39b0]
call fcn.18007dfc8
lea rcx, [rsp + 0x39b0]
test rax, rax
je 0x18000ada1
lea rdx, str.qq2009
mov dword [r14 + 0x10], 1
call fcn.18007dfc8
test rax, rax
je 0x18000acdb
movabs rax, 0x100010003
jmp 0x18000ae55
lea rdx, str.qq201
lea rcx, [rsp + 0x39b0]
call fcn.18007dfc8
lea rcx, [rsp + 0x39b0]
test rax, rax
je 0x18000ad47
movabs rax, 0x100010004
lea rdx, str.qq2012
mov qword [r14 + 0x18], rax
call fcn.18007dfc8
test rax, rax
jne 0x18000ad38
lea rdx, str.qq2013
lea rcx, [rsp + 0x39b0]
call fcn.18007dfc8
test rax, rax
je 0x18000ae59
movabs rax, 0x100010005
jmp 0x18000ae55
lea rdx, str.internation
call fcn.18007dfc8
test rax, rax
movabs rax, 0x100010005
mov qword [r14 + 0x18], rax
jne 0x18000ae59
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x44]
mov dword [rsp + 0x44], esi
mov dword [rsp + 0x40], esi
call fcn.180013ff0
mov edx, dword [rsp + 0x44]
shr edx, 0x10
cmp dx, 5
jb 0x18000ae59
movabs rax, 0x100010006
jmp 0x18000ae55
lea rdx, [0x18012ba28]
call fcn.18007dfc8
test rax, rax
je 0x18000ae59
lea rdx, str.tm2008
lea rcx, [rsp + 0x39b0]
call fcn.18007dfc8
movabs rcx, 0x1000010008
lea rdx, str.tm2013
test rax, rax
cmovne rcx, rbx
mov qword [r14 + 0x18], rcx
lea rcx, [rsp + 0x39b0]
call fcn.18007dfc8
test rax, rax
jne 0x18000ae11
lea rdx, str.tm2014
lea rcx, [rsp + 0x39b0]
call fcn.18007dfc8
test rax, rax
je 0x18000ae1f
movabs rax, 0x1000010010
mov qword [r14 + 0x18], rax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x44]
mov dword [rsp + 0x44], esi
mov dword [rsp + 0x40], esi
call fcn.180013ff0
mov edx, dword [rsp + 0x44]
mov eax, edx
shr eax, 0x10
cmp ax, 1
jb 0x18000ae59
cmp dx, 0x60
jb 0x18000ae59
movabs rax, 0x1000010020
mov qword [r14 + 0x18], rax
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x1801a9200]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18000aea8
lea r8d, [rax + 5]
lea rdx, str.qqeim
lea rcx, [0x1801a9200]
call fcn.18007f540
test eax, eax
jne 0x18000aea8
movabs rax, 0x2100010001
mov dword [r14 + 0x10], 0x800000
mov qword [r14 + 0x18], rax
jmp 0x18000af81
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x1801a9200]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18000af81
lea r8d, [rax + 6]
lea rdx, str.qidian
lea rcx, [0x1801a9200]
call fcn.18007f540
test eax, eax
jne 0x18000af81
movabs rax, 0x2100010002
mov dword [r14 + 0x10], 0x800000
mov qword [r14 + 0x18], rax
jmp 0x18000af81
lea r8, str.Tencent_BarMgr_Class_Ver1.0
xor r9d, r9d
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_FindWindowExW]
neg rax
movabs rax, 0x1000010002
sbb rcx, rcx
add rcx, rax
mov qword [r14 + 0x18], rcx
jmp 0x18000af81
cmp eax, 0x80
jne 0x18000af72
movabs rax, 0x8000010000
cmp qword [rsp + rdi + 0x80], rax
jne 0x18000af81
lea r8, str.TConversationsControl
xor r9d, r9d
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_FindWindowExW]
test rax, rax
je 0x18000af81
movabs rax, 0x8000010003
mov qword [r14 + 0x18], rax
jmp 0x18000af81
cmp eax, 0x1000000
jne 0x18000af81
mov rcx, qword [r14]
call fcn.180014e70
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x4400]
xor rcx, rsp
call fcn.18007e1e0
mov rbx, qword [rsp + 0x4460]
add rsp, 0x4410
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret