Function at 0x14011c300
Capabilities:
Get keyboard layout
Log keystrokes
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x210
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov qword [rsp + 0x260], rbx
mov rax, qword [0x14025e510]
xor rax, rsp
mov qword [rsp + 0x200], rax
mov rdi, rdx
mov rsi, rcx
call fcn.14000b818
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000b8bc
nop
test rsi, rsi
je 0x14011dc79
cmp qword [rsi + 0x40], 0
je 0x14011dc79
cmp dword [rdi + 8], 0x113
jne 0x14011c3af
mov rax, qword [rsi + 0x368]
cmp qword [rdi], rax
jne 0x14011c3af
lea rcx, [rsi + 0x110]
mov rax, qword [rcx]
mov edx, dword [rdi + 0x10]
call qword [rax + 0xc0]
test al, al
je 0x14011c3af
cmp dword [rsp + 0x50], 0
je 0x14011c3a5
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, 1
jmp 0x14011dc8e
cmp dword [rdi + 8], 0x13
jne 0x14011c3e6
cmp qword [rsi + 0xf0], 0
je 0x14011c3cc
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x920]
nop
cmp dword [rsp + 0x50], 0
je 0x14011c3df
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov rcx, rsi
call fcn.140117670
mov r15, rax
test byte [rsi + 0x1d8], 4
jne 0x14011c433
test rax, rax
je 0x14011c419
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14011c419
mov rcx, r15
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x14011c433
cmp dword [rsp + 0x50], 0
je 0x14011c42c
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov eax, dword [rdi + 8]
cmp eax, 6
je 0x14011dc54
cmp eax, 0x1c
je 0x14011dc54
cmp eax, 7
je 0x14011dc54
cmp eax, 8
je 0x14011dc54
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x598]
movzx r12d, al
mov byte [rsp + 0x40], al
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x8d0]
test al, al
je 0x14011c564
mov ecx, dword [rdi + 8]
cmp ecx, 0x111
jne 0x14011c4e1
movzx edx, word [rdi + 0x10]
mov eax, 0xe150
cmp dx, ax
je 0x14011c519
mov eax, 0xe151
cmp dx, ax
je 0x14011c519
mov eax, 0xe130
cmp dx, ax
je 0x14011c519
mov eax, 0xe131
cmp dx, ax
je 0x14011c519
mov eax, 0xe132
cmp dx, ax
je 0x14011c519
mov eax, 0xe133
cmp dx, ax
je 0x14011c519
mov eax, 0xe134
cmp dx, ax
je 0x14011c519
mov eax, 0xe135
cmp dx, ax
je 0x14011c519
cmp ecx, 0x222
je 0x14011c519
cmp ecx, 0x224
je 0x14011c519
cmp ecx, 0x223
je 0x14011c519
cmp ecx, 0x225
je 0x14011c519
cmp ecx, 0x226
je 0x14011c519
cmp ecx, 0x227
je 0x14011c519
cmp ecx, 0x228
jne 0x14011c564
test r12b, r12b
je 0x14011c53b
cmp dword [rsp + 0x50], 0
je 0x14011c531
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, 1
jmp 0x14011dc8e
mov rcx, rsi
call fcn.1400695b0
test al, al
je 0x14011c564
cmp dword [rsp + 0x50], 0
je 0x14011c55a
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, 1
jmp 0x14011dc8e
xor bl, bl
mov dword [rsp + 0x84], ebx
mov ebp, 1
test byte [rsi + 0x1d8], 4
jne 0x14011c5a7
test r12b, r12b
jne 0x14011c5a7
mov rcx, qword [rsi + 0xf0]
test rcx, rcx
je 0x14011c5a7
cmp qword [rcx + 0x40], 0
je 0x14011c5a7
call fcn.1400650f0
movzx ebx, bl
test al, al
cmovne ebx, ebp
mov dword [rsp + 0x84], ebx
xor r13b, r13b
mov dword [rsp + 0x80], r13d
call qword [sym.imp.USER32.dll_GetFocus]
mov rcx, rax
call fcn.14001256c
mov rbx, rax
test rax, rax
je 0x14011c672
lea rdx, str.CComboBox
mov rcx, rax
call fcn.14001b150
test eax, eax
je 0x14011c612
mov rcx, rbx
call fcn.14000a5c4
test al, 3
je 0x14011c672
xor r9d, r9d
xor r8d, r8d
mov edx, 0x157
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14011c672
mov byte [rsp + 0x80], bpl
jmp 0x14011c672
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001256c
mov rbx, rax
test rax, rax
je 0x14011c672
lea rdx, str.CComboBox
mov rcx, rax
call fcn.14001b150
test eax, eax
je 0x14011c672
mov rcx, rbx
call fcn.14000a5c4
test al, 3
je 0x14011c672
xor r9d, r9d
xor r8d, r8d
mov edx, 0x157
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
movzx r13d, r13b
test eax, eax
cmovne r13d, ebp
mov dword [rsp + 0x80], r13d
mov r14d, dword [rdi + 8]
cmp r14d, 0x111
jne 0x14011c6ac
cmp word [rdi + 0x12], 0
jne 0x14011dc0b
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r11w, ax
shr r11d, 0xf
and r11b, bpl
mov byte [0x14027471d], r11b
jmp 0x14011dc0b
xor r13d, r13d
cmp r14d, 0x104
je 0x14011c6d9
cmp r14d, 0x105
je 0x14011c6d9
cmp r14d, 0x100
je 0x14011c6d9
cmp r14d, 0x101
jne 0x14011dbd4
jmp 0x14011c6f2
cmp r14d, 0x101
je 0x14011c6f2
cmp r14d, 0x105
je 0x14011c6f2
mov dword [rsp + 0x60], r13d
jmp 0x14011c6f6
mov dword [rsp + 0x60], ebp
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x80000000
mov dword [rsp + 0x5c], eax
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x80000000
mov dword [rsp + 0x58], eax
movzx ebx, word [rdi + 0x1a]
and ebx, 0x2000
mov dword [rsp + 0x64], ebx
mov ecx, reloc.SHELL32.dll_SHCreateDirectory
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r11w, ax
shr r11d, 0xf
and r11b, bpl
movzx r12d, word [rdi + 0x10]
je 0x14011c88f
cmp r12w, 0x12
je 0x14011c88f
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14011c88f
call fcn.140008c24
mov r11, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14011c78e
mov ecx, 0x80004005
call fcn.1400052e0
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
mov ecx, ebp
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x105
or eax, ecx
jge 0x14011c7c5
mov edx, 0x105
lea rcx, [rsp + 0x78]
call fcn.140004ec0
mov rbx, qword [rsp + 0x78]
mov r8d, 0x104
mov rdx, rbx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetClassNameW]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.14002fac8
test eax, eax
js 0x14011c880
cmp eax, dword [rbx - 0xc]
jg 0x14011c880
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r13w
lea rcx, [rsp + 0x78]
call fcn.140048a20
lea rdx, [0x1402001b0]
lea rcx, [rsp + 0x78]
call fcn.14011c1e0
test al, al
je 0x14011c85a
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14011c840
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp dword [rsp + 0x50], 0
je 0x14011c853
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14011c88b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0x64]
jmp 0x14011c88f
mov ecx, 0x80070057
call fcn.1400052e0
nop
mov ebx, dword [rsp + 0x64]
mov rax, qword [rdi + 0x10]
cmp rax, 0x12
jne 0x14011c8cf
movzx ecx, byte [rsi + 0x3a9]
test cl, 4
je 0x14011c8cf
cmp dword [rsp + 0x60], 0
je 0x14011c8cf
and cl, 0xfb
mov byte [rsi + 0x3a9], cl
cmp dword [rsp + 0x50], 0
je 0x14011c8c8
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
test ebx, ebx
je 0x14011c938
cmp rax, 0x12
je 0x14011c938
cmp rax, 0x60
jb 0x14011c8e5
cmp rax, 0x69
jbe 0x14011c92a
cmp rax, 0x2d
je 0x14011c92a
cmp rax, 0x23
je 0x14011c92a
cmp rax, 0x28
je 0x14011c92a
cmp rax, 0x22
je 0x14011c92a
cmp rax, 0x25
je 0x14011c92a
cmp rax, 0xc
je 0x14011c92a
cmp rax, 0x27
je 0x14011c92a
cmp rax, 0x24
je 0x14011c92a
cmp rax, 0x26
je 0x14011c92a
cmp rax, 0x21
je 0x14011c92a
and byte [rsi + 0x3a9], 0xfb
jmp 0x14011c938
mov byte [0x14027471d], 1
or byte [rsi + 0x3a9], 4
test byte [rsi + 0x3a9], 4
je 0x14011c95b
cmp dword [rsp + 0x50], 0
je 0x14011c954
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov bl, byte [rsp + 0x40]
test bl, bl
jne 0x14011cc7b
cmp qword [rsi + 0x40], 0
je 0x14011cc6f
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x910]
mov r11, rax
mov dword [rsp + 0x68], 0x7fffffff
mov dword [rsp + 0x6c], 0x7fffffff
test rax, rax
je 0x14011cc9f
movzx ecx, word [rax + 2]
cmp qword [rdi + 0x10], rcx
jne 0x14011cc93
mov ecx, dword [rsp + 0x64]
neg ecx
sbb edx, edx
and edx, 0x10
mov r9d, dword [rsp + 0x58]
mov eax, r9d
neg eax
sbb ecx, ecx
and ecx, 4
or edx, ecx
mov r8d, dword [rsp + 0x5c]
mov eax, r8d
neg eax
sbb ecx, ecx
and ecx, 8
or edx, ecx
movzx eax, byte [r11]
and eax, 0x1c
cmp eax, edx
jne 0x14011cca9
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x14011cc87
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14011cc5f
mov rcx, rax
call fcn.1400125b0
test rax, rax
je 0x14011cc4f
mov rdx, rax
lea rcx, str.CExtToolControlBar
call fcn.14001b184
mov rdi, rax
test rax, rax
je 0x14011cc3f
mov rax, qword [rsi + 0xf0]
test rax, rax
je 0x14011ca5a
mov ecx, r13d
cmp rax, qword [rdi + 0xf0]
sete cl
jmp 0x14011ca8f
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001256c
mov rbx, rax
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001256c
mov ecx, r13d
cmp rbx, rax
sete cl
mov rbx, qword [rsp + 0x78]
test ecx, ecx
je 0x14011cc2f
lea rcx, [0x1402726f8]
call fcn.1400558f0
mov rcx, rax
mov rdx, rbx
call fcn.14005ae50
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14011cc1f
lea rdx, [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x14011cc0c
mov r8, qword [rdi]
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
call qword [r8 + 0x880]
test eax, eax
js 0x14011cbf9
mov edx, eax
mov rcx, rdi
call fcn.1401210e0
mov rbx, rax
test rax, rax
je 0x14011cbe6
lea rdx, str.CExtBarMdiDocButton
mov rcx, rax
call fcn.14001b150
test eax, eax
jne 0x14011cbd3
mov r8, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [r8 + 0x50]
mov ebx, eax
test eax, eax
je 0x14011cbc0
lea rcx, [0x1402726f8]
call fcn.1400558f0
mov rcx, rax
mov r8d, ebx
mov rdx, qword [rsp + 0x78]
call fcn.140055b40
test rax, rax
je 0x14011cbad
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xa8]
test al, al
jne 0x14011cb9a
cmp dword [rsp + 0x60], 0
jne 0x14011cb80
call fcn.14000b840
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
mov rdx, rbx
mov r8d, ebp
call qword [rax + 0x148]
nop
cmp dword [rsp + 0x50], 0
je 0x14011cb93
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov bl, byte [rsp + 0x40]
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
jmp 0x14011cca9
mov r8d, dword [rsp + 0x5c]
mov r9d, dword [rsp + 0x58]
mov eax, dword [rsp + 0x64]
test eax, eax
je 0x14011cd89
test byte [rsi + 0x378], 1
jne 0x14011cd89
cmp r14d, 0x104
je 0x14011cd89
cmp r14d, 0x105
je 0x14011cd89
cmp r12w, 0x60
je 0x14011cd61
cmp r12w, 0x61
je 0x14011cd61
cmp r12w, 0x62
je 0x14011cd61
cmp r12w, 0x63
je 0x14011cd61
cmp r12w, 0x64
je 0x14011cd61
cmp r12w, 0x65
je 0x14011cd61
cmp r12w, 0x66
je 0x14011cd61
cmp r12w, 0x67
je 0x14011cd61
cmp r12w, 0x68
je 0x14011cd61
cmp r12w, 0x69
je 0x14011cd61
cmp r12w, 0x2d
je 0x14011cd61
cmp r12w, 0x22
je 0x14011cd61
cmp r12w, 0x28
je 0x14011cd61
cmp r12w, 0x25
je 0x14011cd61
cmp r12w, 0xc
je 0x14011cd61
cmp r12w, 0x27
je 0x14011cd61
cmp r12w, 0x24
je 0x14011cd61
cmp r12w, 0x26
je 0x14011cd61
cmp r12w, 0x21
jne 0x14011cd89
mov byte [0x14027471e], 1
mov byte [0x14027471d], 0
cmp dword [rsp + 0x50], 0
je 0x14011cd82
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp byte [0x14027471e], 0
je 0x14011cdb3
mov byte [0x14027471e], 0
cmp dword [rsp + 0x50], 0
je 0x14011cdac
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp r12w, 0x12
jne 0x14011d080
test r8d, r8d
jne 0x14011d080
test r9d, r9d
jne 0x14011d080
test bl, bl
je 0x14011cdee
cmp dword [rsp + 0x50], r9d
je 0x14011cde7
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp byte [rsp + 0x84], 0
jne 0x14011d066
cmp byte [rsp + 0x80], 0
jne 0x14011d066
test byte [rsi + 0x378], 1
je 0x14011ce5d
cmp dword [rsp + 0x60], 0
jne 0x14011ce34
cmp dword [rsp + 0x50], 0
je 0x14011ce2d
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c8]
nop
cmp dword [rsp + 0x50], 0
je 0x14011ce56
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x60], 0
jne 0x14011ce85
mov byte [0x14027471d], 0
cmp dword [rsp + 0x50], 0
je 0x14011ce7e
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp byte [0x14027471d], 0
jne 0x14011d04c
cmp byte [0x140274730], 0
jne 0x14011d032
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x6d8]
test eax, eax
je 0x14011d029
call fcn.1400794f0
test eax, eax
jne 0x14011ceda
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x14011ceda
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1f]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [0x140274731], 0
test r15, r15
je 0x14011cf77
mov rcx, r15
call fcn.14001256c
mov rcx, rax
call fcn.140065d60
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
cmp r15, rax
je 0x14011cf77
cmp r15, qword [rbx + 0x40]
je 0x14011cf77
mov edx, 0xfffffff0
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
bt rax, 0x1e
jae 0x14011cf36
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x14011cf77
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
je 0x14011cf5d
cmp rax, r15
je 0x14011cf77
cmp rax, qword [rbx + 0x40]
je 0x14011cf77
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne 0x14011cf44
cmp dword [rsp + 0x50], 0
je 0x14011cf70
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov rax, qword [rsi]
or r8d, 0xffffffff
lea edx, [r8 + 0x13]
mov rcx, rsi
call qword [rax + 0x768]
mov r12d, eax
test eax, eax
jns 0x14011cff4
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x6d8]
mov edi, eax
mov ebx, r13d
test eax, eax
jle 0x14011cfd5
nop word [rax + rax]
mov edx, ebx
mov rcx, rsi
call fcn.1401210e0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x318]
test al, al
jne 0x14011cfd2
inc ebx
cmp ebx, edi
jl 0x14011cfb0
jmp 0x14011cfd5
mov r12d, ebx
test r12d, r12d
jns 0x14011cff4
cmp dword [rsp + 0x50], 0
je 0x14011cfed
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov rax, qword [rsi]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
mov rcx, rsi
call qword [rax + 0x760]
nop
cmp dword [rsp + 0x50], 0
je 0x14011d022
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp byte [0x14027471d], 0
jne 0x14011d04c
cmp dword [rsp + 0x50], 0
je 0x14011d045
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d05f
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d079
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
test byte [rsi + 0x1d8], 4
jne 0x14011d321
test eax, eax
je 0x14011d321
cmp r12w, 0x20
je 0x14011d0c6
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x8d0]
test al, al
je 0x14011d31d
cmp r12w, 0x6d
je 0x14011d0c6
mov eax, 0xbd
cmp r12w, ax
jne 0x14011d317
test bl, bl
je 0x14011d0e4
cmp dword [rsp + 0x50], 0
je 0x14011d0dd
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x60], 0
je 0x14011d105
cmp dword [rsp + 0x50], 0
je 0x14011d0fe
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
call fcn.14001256c
mov rbx, rax
test rax, rax
je 0x14011d2fd
mov rdi, qword [rax + 0x40]
test rdi, rdi
je 0x14011d2fd
mov rcx, rsi
call fcn.140178760
test rax, rax
jne 0x14011d13e
mov rax, r13
jmp 0x14011d142
mov rax, qword [rax + 0x40]
cmp rdi, rax
je 0x14011d16f
mov rcx, rbx
call fcn.14000a5c4
bt eax, 0x1f
jae 0x14011d16f
cmp dword [rsp + 0x50], 0
je 0x14011d168
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov byte [0x140274731], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x598]
test al, al
jne 0x14011d2e3
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c8]
cmp r12w, 0x20
jne 0x14011d1d1
mov rax, qword [rsi]
mov r8d, ebp
xor edx, edx
mov rcx, rsi
call qword [rax + 0x940]
test eax, eax
jne 0x14011d2e3
cmp dword [rsp + 0x50], eax
je 0x14011d1ca
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp r14d, 0x100
je 0x14011d2c9
cmp r14d, 0x101
je 0x14011d2c9
mov dword [rsp + 0x8c], r13d
mov rax, qword [rsi]
lea rdx, [rsp + 0x8c]
mov rcx, rsi
call qword [rax + 0x8e8]
test rax, rax
jne 0x14011d22c
mov byte [0x14027471d], 1
cmp dword [rsp + 0x50], eax
je 0x14011d225
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x6d8]
test eax, eax
jle 0x14011d29b
mov rax, qword [rsi]
xor edx, edx
mov rcx, rsi
call qword [rax + 0x7a8]
lea rdx, str.CExtBarMdiDocButton
mov rcx, rax
call fcn.14001b150
test eax, eax
je 0x14011d29b
call fcn.1400794f0
test eax, eax
jne 0x14011d284
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x14011d284
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1f]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.140123cf0
jmp 0x14011d2e3
mov rax, qword [rsi]
mov r8d, ebp
xor edx, edx
mov rcx, rsi
call qword [rax + 0x948]
test eax, eax
jne 0x14011d2e3
cmp dword [rsp + 0x50], eax
je 0x14011d2c2
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d2dc
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d2f6
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d310
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov eax, dword [rsp + 0x64]
jmp 0x14011d321
mov eax, dword [rsp + 0x64]
cmp byte [rsp + 0x84], 0
jne 0x14011d335
cmp byte [rsp + 0x80], 0
je 0x14011d353
test bl, bl
jne 0x14011d353
cmp dword [rsp + 0x50], 0
je 0x14011d34c
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
test eax, eax
jne 0x14011d3c7
test byte [rsi + 0x378], 1
je 0x14011d8db
cmp r12w, 0x25
je 0x14011d8d4
cmp r12w, 0x27
je 0x14011d8cd
cmp r12w, 0x26
je 0x14011d8c6
cmp r12w, 0x28
je 0x14011d8bf
cmp r12w, 0x73
je 0x14011d8b8
cmp r12w, 0xd
je 0x14011d8b1
cmp r12w, 0x20
je 0x14011d8aa
cmp r12w, 0x1b
je 0x14011d8a3
cmp r12w, 9
je 0x14011d89c
test bl, bl
jne 0x14011d895
mov r15d, dword [rsp + 0x60]
test r15d, r15d
je 0x14011d416
test byte [rsi + 0x3a9], 4
je 0x14011d3fc
cmp dword [rsp + 0x50], 0
je 0x14011d3f5
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d40f
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
lea rcx, [rsp + 0x100]
call qword [sym.imp.USER32.dll_GetKeyboardState]
movzx edi, r12w
xor edx, edx
mov ecx, edi
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov ebx, eax
call fcn.14000d854
mov ecx, dword [rax + 0x60]
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov word [rsp + 0x70], r13w
mov word [rsp + 0x72], r13w
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], ebp
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x100]
mov edx, ebx
mov ecx, edi
call qword [sym.imp.USER32.dll_ToUnicodeEx]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_CharUpperW]
movzx edx, word [rsp + 0x70]
test dx, dx
je 0x14011d837
mov rcx, rsi
call fcn.14012d5a0
mov edi, eax
test eax, eax
jns 0x14011d777
mov edx, 0xa
lea rcx, [rsp + 0xc0]
call fcn.14001bc2c
nop
cmp qword [rsi + 0xf0], 0
jne 0x14011d587
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001256c
mov rdx, rax
lea rcx, str.CFrameWnd
call fcn.14001b184
test rax, rax
jne 0x14011d587
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001256c
mov edx, 5
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
call fcn.14001256c
mov rdi, rax
test rax, rax
je 0x14011d645
nop dword [rax]
mov rdx, rdi
lea rcx, str.CExtToolControlBar
call fcn.14001b184
mov rbx, rax
test rax, rax
je 0x14011d563
cmp qword [rax + 0x40], 0
je 0x14011d563
cmp rax, rsi
je 0x14011d563
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x2d0]
test eax, eax
je 0x14011d563
mov rdx, rbx
lea rcx, [rsp + 0xc0]
call fcn.14001bd2c
mov edx, 2
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
call fcn.14001256c
mov rdi, rax
test rax, rax
jne 0x14011d520
jmp 0x14011d645
lea rcx, [rsp + 0x90]
call fcn.140066010
nop
mov dword [rsp + 0x68], 0xfffffc18
mov dword [rsp + 0x6c], 0xfffffc18
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x5ff
lea r8, [rsp + 0x90]
xor edx, edx
mov rcx, rsi
call fcn.14006c960
mov rbx, r13
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
jle 0x14011d638
test rbx, rbx
js 0x14011d632
cmp rbx, rcx
jge 0x14011d632
mov rdx, qword [rsp + 0x98]
mov rdx, qword [rdx + rbx*8]
lea rcx, str.CExtToolControlBar
call fcn.14001b184
test rax, rax
je 0x14011d61a
cmp qword [rax + 0x40], 0
je 0x14011d61a
cmp rax, rsi
je 0x14011d61a
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.14001bd2c
inc r13d
inc rbx
movsxd rax, r13d
mov rcx, qword [rsp + 0xa0]
cmp rax, rcx
jl 0x14011d5d7
jmp 0x14011d638
call fcn.1400093e4
nop
lea rcx, [rsp + 0x90]
call fcn.140066030
mov rbx, qword [rsp + 0xc8]
nop dword [rax]
test rbx, rbx
je 0x14011d748
mov rdi, qword [rbx + 0x10]
mov rbx, qword [rbx]
movzx edx, word [rsp + 0x70]
mov rcx, rdi
call fcn.14012d5a0
mov r12d, eax
test eax, eax
js 0x14011d650
mov edx, eax
mov rcx, rdi
call fcn.1401210e0
mov rbx, rax
call fcn.1400794f0
test eax, eax
jne 0x14011d6a8
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x14011d6a8
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1f]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c8]
mov r11, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [r11 + 0x1c8]
test al, al
je 0x14011d6f9
mov byte [0x140274731], 0
mov r10, qword [rdi]
movzx eax, byte [rsi + 0x3a8]
shr eax, 6
and eax, 1
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, ebp
mov edx, r12d
mov rcx, rdi
call qword [r10 + 0x760]
jmp 0x14011d720
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ecx, ax
shr ecx, 0xf
test ecx, ecx
setne byte [0x14027471d]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x280]
nop
lea rcx, [rsp + 0xc0]
call fcn.14001bc54
nop
cmp dword [rsp + 0x50], 0
je 0x14011d741
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov byte [0x14027471d], 1
lea rcx, [rsp + 0xc0]
call fcn.14001bc54
nop
cmp dword [rsp + 0x50], 0
je 0x14011d770
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov edx, eax
mov rcx, rsi
call fcn.1401210e0
mov rbx, rax
call fcn.1400794f0
test eax, eax
jne 0x14011d7ab
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x14011d7ab
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1f]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c8]
mov r11, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [r11 + 0x1c8]
test al, al
je 0x14011d7f6
mov byte [0x140274731], 0
movzx eax, byte [rsi + 0x3a8]
shr eax, 6
and eax, 1
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, ebp
mov edx, edi
mov rcx, rsi
call fcn.140123cf0
jmp 0x14011d81d
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ecx, ax
shr ecx, 0xf
test ecx, ecx
setne byte [0x14027471d]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x280]
nop
cmp dword [rsp + 0x50], 0
je 0x14011d830
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov byte [0x14027471d], 1
test byte [rsi + 0x378], 1
je 0x14011d87b
mov eax, dword [rsp + 0x64]
test eax, eax
je 0x14011d861
cmp r12w, 0x28
je 0x14011d8e0
cmp r12w, 0x26
je 0x14011d8e0
cmp dword [rsp + 0x50], 0
je 0x14011d874
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011d88e
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
jmp 0x14011d8e0
mov r15d, dword [rsp + 0x60]
test byte [rsi + 0x378], 1
je 0x14011dbcf
cmp byte [rsp + 0x40], 0
jne 0x14011dbc8
test r15d, r15d
je 0x14011d917
cmp dword [rsp + 0x50], 0
je 0x14011d910
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov bx, r12w
cmp r12w, 0x28
je 0x14011d929
cmp r12w, 0x26
jne 0x14011d932
test eax, eax
je 0x14011d932
mov ebx, 0x73
mov rax, qword [rsi]
movzx r8d, word [rsi + 0x37c]
movzx edx, bx
mov rcx, rsi
call qword [rax + 0x768]
test eax, eax
js 0x14011d955
mov dword [rsi + 0x37c], eax
jmp 0x14011d9d0
cmp bx, 9
jne 0x14011d96e
cmp dword [rsp + 0x58], 0
je 0x14011d969
mov ebx, 0x25
jmp 0x14011d96e
mov ebx, 0x27
movzx eax, bx
add eax, 0xfffffff3
cmp eax, 0x66
ja case.0x14011d998.17
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x11dcd0]
mov ecx, dword [rdx + rax*4 + 0x11dcbc]
add rcx, rdx
jmp rcx
mov r9d, ebp
xor r8d, r8d
mov edx, dword [rsi + 0x37c]
mov rcx, rsi
call fcn.140120620
mov dword [rsi + 0x37c], eax
jmp 0x14011d9d0
mov r9d, ebp
mov r8d, ebp
mov edx, dword [rsi + 0x37c]
mov rcx, rsi
call fcn.140120620
mov dword [rsi + 0x37c], eax
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x6d8]
mov ecx, dword [rsi + 0x37c]
test ecx, ecx
jns 0x14011d9f3
dec eax
mov dword [rsi + 0x37c], eax
jmp case.0x14011d998.17
cmp ecx, eax
jl case.0x14011d998.17
mov dword [rsi + 0x37c], r13d
jmp case.0x14011d998.17
call fcn.1400794f0
test eax, eax
jne 0x14011db3d
mov edx, dword [rsi + 0x37c]
test edx, edx
js 0x14011db3d
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x7a8]
mov rbx, rax
mov r8, qword [rax]
xor edx, edx
mov rcx, rax
call qword [r8 + 0x1c8]
test al, al
je 0x14011dac9
call fcn.1400794f0
test eax, eax
jne 0x14011da6f
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x14011da6f
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1f]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [rsi + 0x37c]
movzx eax, byte [rsi + 0x378]
test al, 1
je 0x14011da94
and al, 0xfe
mov byte [rsi + 0x378], al
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x728]
mov rax, qword [rsi]
xor edx, edx
mov rcx, rsi
call qword [rax + 0x8c0]
movzx r11d, byte [rsi + 0x3a8]
shr r11d, 6
and r11d, 1
mov dword [rsp + 0x20], r11d
xor r9d, r9d
mov r8d, ebp
mov edx, ebx
mov rcx, rsi
call fcn.140123cf0
jmp 0x14011db23
cmp r12w, 0xd
je 0x14011dad7
cmp r12w, 0x20
jne 0x14011daf5
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x6c], r13d
mov rax, qword [rbx]
xor r8d, r8d
mov rdx, qword [rsp + 0x68]
mov rcx, rbx
call qword [rax + 0x268]
movzx eax, byte [rsi + 0x378]
test al, 1
je 0x14011db14
and al, 0xfe
mov byte [rsi + 0x378], al
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x728]
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c0]
nop
cmp dword [rsp + 0x50], 0
je 0x14011db36
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011db50
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
movzx eax, byte [rsi + 0x378]
test al, 1
je 0x14011db76
and al, 0xfe
mov byte [rsi + 0x378], al
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x728]
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c0]
nop
cmp dword [rsp + 0x50], 0
je 0x14011db98
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c0]
nop
cmp dword [rsp + 0x50], 0
je 0x14011dbc1
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
mov r12b, byte [rsp + 0x40]
jmp 0x14011dbd4
mov r12b, byte [rsp + 0x40]
cmp r14d, 0x7b
jne 0x14011dc0b
cmp byte [0x140274730], 0
jne 0x14011dbf1
test byte [rsi + 0x378], 1
jne 0x14011dbf1
test r12b, r12b
je 0x14011dc0b
cmp dword [rsp + 0x50], 0
je 0x14011dc04
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
mov eax, ebp
jmp 0x14011dc8e
test byte [rsi + 0x378], 1
je 0x14011dc3d
test r12b, r12b
jne 0x14011dc3d
lea eax, [r14 - 0x200]
cmp eax, 9
ja 0x14011dc3d
cmp r14d, 0x200
je 0x14011dc3d
mov rax, qword [rsi]
mov edx, ebp
mov rcx, rsi
call qword [rax + 0x8c8]
nop
cmp dword [rsp + 0x50], 0
je 0x14011dc50
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
and byte [rsi + 0x3a9], 0xfb
mov byte [0x14027471d], 1
cmp dword [rsp + 0x50], 0
je 0x14011dc75
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
jmp 0x14011dc8e
cmp dword [rsp + 0x50], 0
je 0x14011dc8c
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
call fcn.14000abd0
xor eax, eax
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.14002f990
mov rbx, qword [rsp + 0x260]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret