Function at 0x140084f80
Capabilities:
Get graphical window text

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x248]
sub rsp, 0x310
movaps xmmword [rax - 0x48], xmm6
lea rsi, [0x140000000]
movzx eax, word [rdx]
mov r12, r9
mov byte [rsp + 0x30], 0
mov r15, r8
mov r13, rcx
test ax, ax
je 0x140086dda
movss xmm6, dword [rbp + 0x258]
cmp ax, 0x2d
jne 0x140084fe0
xor r14b, r14b
jmp 0x140084fe9
mov r14b, 1
cmp ax, 0x2b
jne 0x140084ff1
movzx eax, word [rdx + 2]
add rdx, 2
test ax, ax
je 0x140086dda
mov rdi, rdx
nop dword [rax]
cmp ax, 0x20
je 0x140085019
cmp ax, 9
je 0x140085019
movzx eax, word [rdi + 2]
add rdi, 2
test ax, ax
jne 0x140085000
mov qword [rsp + 0x40], rdi
cmp rdi, rdx
je case.0x14008660f.7
mov ebx, 0x101
lea rcx, [rsp + 0x70]
mov rax, rdi
sub rax, rdx
sar rax, 1
inc rax
cmp rax, rbx
cmovb rbx, rax
lea r8, [rbx - 1]
call fcn.1400d3cf4
xor edi, edi
lea rdx, [0x14010e108]
lea rcx, [rsp + 0x70]
mov word [rsp + rbx*2 + 0x6e], di
call fcn.1400c51bc
test eax, eax
jne 0x140085076
mov byte [r15 + 0x19d], 1
jmp case.0x14008660f.7
lea rdx, [0x14010e118]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x1400850a6
cmp byte [r12 + 0x50], 0xc
je 0x1400850a6
movzx ecx, byte [r12 + 0x51]
movzx eax, cl
and al, 0xfd
or cl, 2
jmp 0x140085e06
mov r8d, 7
lea rdx, [0x14010e130]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085140
lea rdx, [0x14010e140]
lea rcx, [rsp + 0x7e]
call fcn.1400c51bc
test eax, eax
jne 0x1400850e5
movzx eax, r14b
add eax, eax
mov dword [r15 + 0x78], eax
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0xa
jne 0x140085108
mov ecx, dword [r15 + 0x10]
mov eax, ecx
and eax, 0xfffffffb
or ecx, 4
test r14b, r14b
cmove ecx, eax
mov dword [r15 + 0x10], ecx
jmp case.0x14008660f.7
cmp word [rsp + 0x7e], di
je 0x140085133
lea rcx, [rsp + 0x7e]
call fcn.1400a19d0
mov dword [r15 + 0x78], eax
cmp eax, 0xffffffff
jne case.0x14008660f.7
mov dword [r15 + 0x78], 2
jmp case.0x14008660f.7
movzx eax, r14b
mov dword [r15 + 0x78], eax
jmp case.0x14008660f.7
mov r8d, 6
lea rdx, [0x14010d9a8]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x1400851d4
test r14b, r14b
je case.0x14008660f.7
cmp byte [r12 + 0x50], 0xd
lea rcx, [rsp + 0x7c]
je 0x14008518c
call fcn.1400a19d0
mov dword [r15 + 0x34], eax
cmp eax, 1
jge case.0x14008660f.7
mov dword [r15 + 0x34], edi
jmp case.0x14008660f.7
lea rdx, [0x14010e150]
call fcn.1400c51bc
test eax, eax
jne 0x1400851aa
mov eax, 2
mov dword [r15 + 0x34], eax
jmp case.0x14008660f.7
lea rdx, [r15 + 0x14c]
mov r8b, 1
lea rcx, [rsp + 0x7c]
call fcn.1400a0bb0
test eax, eax
je case.0x1400868a3.68
mov eax, 1
mov dword [r15 + 0x34], eax
jmp case.0x14008660f.7
lea rdx, [0x14010dfe8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085207
test r14b, r14b
je 0x1400851fa
or dword [r15], 0x800000
jmp case.0x14008660f.7
or dword [r15 + 4], 0x800000
jmp case.0x14008660f.7
lea rdx, [0x14010e160]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x14008523a
test r14b, r14b
je 0x14008522d
or dword [r15], 0x200000
jmp case.0x14008660f.7
or dword [r15 + 4], 0x200000
jmp case.0x14008660f.7
mov r8d, 7
lea rdx, [0x14010e170]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x1400852b4
cmp byte [r12 + 0x50], 0xb
jne 0x140085273
test r14b, r14b
je 0x1400857f3
or dword [r15 + 4], 0x8000
jmp case.0x14008660f.7
test r14b, r14b
je 0x1400852a7
or dword [r15], 0x100000
cmp word [rsp + 0x7e], di
je 0x140085299
lea rcx, [rsp + 0x7e]
call fcn.1400a19d0
mov dword [r15 + 0x74], eax
jmp case.0x14008660f.7
mov eax, 0xffffffff
mov dword [r15 + 0x74], eax
jmp case.0x14008660f.7
or dword [r15 + 4], 0x100000
jmp case.0x14008660f.7
lea rdx, [0x14010e180]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x1400852da
test r14b, r14b
je 0x1400852f4
or dword [r15], 0x10000
jmp case.0x14008660f.7
lea rdx, [0x14010e190]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085301
test r14b, r14b
je 0x1400852ce
or dword [r15 + 4], 0x10000
jmp case.0x14008660f.7
lea rdx, [0x14010e1a0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
je 0x14008566f
lea rdx, [0x14010d960]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085345
movzx eax, r14b
xor eax, 1
add eax, 3
mov dword [r15 + 0x194], eax
jmp case.0x14008660f.7
mov r8d, 8
lea rdx, [0x14010e008]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x1400853d9
cmp word [rbp - 0x80], di
je 0x140085377
lea rcx, [rbp - 0x80]
call fcn.1400a19d0
test eax, eax
jne 0x140085377
xor r14b, 1
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x1400853a8
mov edx, edi
test r14b, r14b
sete dl
call qword [sym.imp.USER32.dll_EnableWindow]
movzx eax, byte [r12 + 0x51]
lea rcx, [r12 + 0x51]
test r14b, r14b
je 0x1400853d0
or al, 0x10
mov byte [rcx], al
jmp case.0x14008660f.7
lea rcx, [r12 + 0x51]
test r14b, r14b
je 0x1400853c5
or dword [r15], 0x8000000
movzx eax, byte [rcx]
or al, 0x10
mov byte [rcx], al
jmp case.0x14008660f.7
or dword [r15 + 4], 0x8000000
movzx eax, byte [rcx]
and al, 0xef
mov byte [rcx], al
jmp case.0x14008660f.7
mov r8d, 6
lea rdx, [0x14010e1b0]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085472
cmp word [rsp + 0x7c], di
je 0x14008540d
lea rcx, [rsp + 0x7c]
call fcn.1400a19d0
test eax, eax
jne 0x14008540d
xor r14b, 1
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140085441
mov edx, 4
test r14b, r14b
cmovne edx, edi
call qword [sym.imp.USER32.dll_ShowWindow]
movzx eax, byte [r12 + 0x51]
lea rcx, [r12 + 0x51]
test r14b, r14b
je 0x140085469
or al, 8
mov byte [rcx], al
jmp case.0x14008660f.7
lea rcx, [r12 + 0x51]
test r14b, r14b
je 0x14008545f
or dword [r15 + 4], 0x10000000
movzx eax, byte [rcx]
or al, 8
mov byte [rcx], al
jmp case.0x14008660f.7
or dword [r15], 0x10000000
movzx eax, byte [rcx]
and al, 0xf7
mov byte [rcx], al
jmp case.0x14008660f.7
lea rdx, [0x14010e1c0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085502
movzx eax, byte [r12 + 0x50]
dec eax
cmp eax, 0x12
ja case.0x14008660f.7
cdqe
mov ecx, dword [rsi + rax*4 + 0x87554]
add rcx, rsi
jmp rcx
test r14b, r14b
je 0x1400854b5
or dword [r15 + 4], 0x1f
jmp case.0x14008660f.7
and dword [r15], 0xffffffec
or dword [r15], 0xc
jmp case.0x14008660f.7
or dword [r15 + 4], 0x2000
jmp case.0x14008660f.7
test r14b, r14b
je 0x1400854e1
or dword [r15 + 4], 0x100080
jmp case.0x14008660f.7
or dword [r15], 0x80
jmp case.0x14008660f.7
test r14b, r14b
je 0x140086519
or dword [r15], 0x200
jmp case.0x14008660f.7
mov r8d, 0xa
lea rdx, [0x14010e1d0]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x14008565a
mov rcx, qword [r12 + 0x58]
mov ebx, 0xffffffff
mov dword [r12 + 0x54], ebx
test rcx, rcx
je 0x140085540
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [r12 + 0x58], rdi
lea rdx, [0x140107560]
lea rcx, [rbp - 0x7c]
call fcn.1400c51bc
test eax, eax
jne 0x140085587
test r14b, r14b
je case.0x14008660f.7
movzx eax, byte [r12 + 0x50]
test byte [rax + rsi + 0x10e528], 1
jne 0x140085579
lea rcx, [0x14010cb10]
jmp 0x140086987
mov dword [r12 + 0x54], 0xff000001
jmp case.0x14008660f.7
test r14b, r14b
je 0x140085644
cmp word [rbp - 0x7c], di
je case.0x14008660f.7
movzx eax, byte [r12 + 0x50]
test byte [rax + rsi + 0x10e528], 2
jne 0x1400855b6
lea rcx, [0x14010cb10]
jmp 0x140086987
lea rcx, [rbp - 0x7c]
call fcn.1400a2700
mov dword [r15 + 0x6c], eax
mov r8d, eax
cmp eax, ebx
jne 0x14008560f
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x7c]
call fcn.1400cbc18
mov ecx, eax
movzx r8d, ax
and r8d, 0xffffff00
shr ecx, 0x10
movzx eax, al
shl eax, 0x10
movzx edx, cl
or r8d, edx
or r8d, eax
mov rax, qword [rsp + 0x48]
mov dword [r15 + 0x6c], r8d
cmp word [rax], di
jne case.0x1400868a3.68
cmp r8d, 0xff000000
je 0x140085636
movzx eax, byte [r12 + 0x50]
test byte [rax + rsi + 0x10e528], 4
je 0x140085636
mov ecx, r8d
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [r12 + 0x58], rax
mov eax, dword [r15 + 0x6c]
mov dword [r12 + 0x54], eax
jmp case.0x14008660f.7
mov dword [r12 + 0x54], 0xff000000
mov dword [r15 + 0x6c], 0xff000000
jmp case.0x14008660f.7
lea rdx, [0x14010e1a0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x14008568d
test r14b, r14b
je 0x140085680
or dword [r15], 0x20000
jmp case.0x14008660f.7
or dword [r15 + 4], 0x20000
jmp case.0x14008660f.7
lea rdx, [0x14010e0c0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x1400856ae
mov byte [r15 + 0x19e], r14b
jmp case.0x14008660f.7
mov r8d, 4
lea rdx, [0x1401072b0]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085711
cmp byte [r12 + 0x50], 0xa
jne 0x1400856f5
lea rdx, [0x14010e1e8]
lea rcx, [rsp + 0x78]
call fcn.1400c51bc
test eax, eax
mov ecx, 2
cmovne ecx, edi
mov dword [r15 + 0x14], ecx
jmp case.0x14008660f.7
test r14b, r14b
je case.0x14008660f.7
lea rcx, [rsp + 0x78]
call fcn.1400a19d0
mov dword [r15 + 0x7c], eax
jmp case.0x14008660f.7
lea rdx, [0x14010e1f8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085733
mov dword [r15 + 0x14], 1
jmp case.0x14008660f.7
lea rdx, [0x14010caf8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085755
mov dword [r15 + 0x14], 3
jmp case.0x14008660f.7
lea rdx, [0x14010e208]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085777
mov dword [r15 + 0x14], 4
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0xa
jne 0x140085855
lea rdx, [0x140107330]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x1400857ae
test r14b, r14b
je 0x140085ba0
or dword [r15 + 4], 0x4000
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0xa
jne 0x140085855
mov r8d, 6
lea rdx, [0x140107310]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x14008581d
lea rdx, [0x140107330]
lea rcx, [rsp + 0x7c]
call fcn.1400c51bc
test eax, eax
jne 0x1400857ff
test r14b, r14b
je 0x140085266
or dword [r15], 0x8000
jmp case.0x14008660f.7
mov byte [r15 + 0x19f], r14b
mov rax, qword [r12 + 0x60]
test rax, rax
je case.0x14008660f.7
mov byte [rax + 5], r14b
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0xa
jne 0x140085855
lea rdx, [0x14010e218]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085855
mov ecx, dword [r15 + 0x10]
mov eax, ecx
and eax, 0xfffffffe
or ecx, 1
test r14b, r14b
cmove ecx, eax
mov dword [r15 + 0x10], ecx
jmp case.0x14008660f.7
mov r8d, 5
lea rdx, [0x140108058]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085883
lea rcx, [rsp + 0x7a]
call fcn.1400a19d0
mov dword [r15 + 0x70], eax
jmp case.0x14008660f.7
mov r8d, 2
lea rdx, [0x14010e224]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x1400858e0
cmp word [rsp + 0x74], 0x2d
je 0x1400858e0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x74]
call fcn.1400a1870
mov rcx, qword [rsp + 0x50]
cmp word [rcx], di
jne 0x1400858e0
mov ecx, dword [r15 + 0x10]
test r14b, r14b
je 0x1400858d3
or eax, ecx
mov dword [r15 + 0x10], eax
jmp case.0x14008660f.7
not eax
and eax, ecx
mov dword [r15 + 0x10], eax
jmp case.0x14008660f.7
mov r8d, 9
lea rdx, [0x14010e230]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085918
test r14b, r14b
je case.0x14008660f.7
lea rcx, [rbp - 0x7e]
call fcn.1400a19d0
mov ecx, eax
mov qword [r15 + 0x18], rcx
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 4
jne 0x140085947
lea rdx, [0x140106a20]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085947
test r14b, r14b
je case.0x1400863c9.11
or dword [r15], 1
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 5
jne 0x140085976
lea rdx, [0x14010e248]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085976
test r14b, r14b
je 0x140085f36
or dword [r15], 6
jmp case.0x14008660f.7
lea rdx, [0x140107158]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085a08
movzx ecx, byte [r12 + 0x50]
sub ecx, 9
je 0x140085b97
sub ecx, 1
je 0x1400859f2
sub ecx, 1
je 0x1400859df
cmp ecx, 1
jne case.0x14008660f.7
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140085a63
movzx r8d, r14b
xor r9d, r9d
mov edx, 0xcf
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14008660f.7
or dword [r15 + 4], 0x800
jmp case.0x14008660f.7
test r14b, r14b
je 0x140086596
or dword [r15 + 4], 8
jmp case.0x14008660f.7
test r14b, r14b
je 0x1400854f6
or dword [r15 + 4], 0x200
jmp case.0x14008660f.7
lea rdx, [0x14010e258]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
movzx ecx, byte [r12 + 0x50]
test eax, eax
jne 0x140085a78
sub ecx, 9
je 0x140085a63
sub ecx, 1
je 0x140085a50
sub ecx, 2
je 0x14008614c
cmp ecx, 2
jne case.0x14008660f.7
test r14b, r14b
je case.0x1400864e8.11
or dword [r15], ecx
jmp case.0x14008660f.7
test r14b, r14b
je 0x14008646c
or dword [r15 + 4], 4
jmp case.0x14008660f.7
test r14b, r14b
je 0x1400859d2
or dword [r15], 0x800
jmp case.0x14008660f.7
cmp cl, 0xc
jne 0x140085ab0
lea rdx, [0x14010e268]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085ab0
test r14b, r14b
je 0x140085aa3
or dword [r15], 0x1000
jmp case.0x14008660f.7
or dword [r15 + 4], 0x1000
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0xc
jne 0x140085b01
lea rdx, [0x14010e280]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
je 0x140085df8
cmp byte [r12 + 0x50], 0xc
jne 0x140085b01
lea rdx, [0x14010e290]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085b01
movzx ecx, byte [r12 + 0x51]
movzx eax, cl
or al, 2
and cl, 0xfd
jmp 0x140085e06
movzx eax, byte [r12 + 0x50]
sub al, 0xa
cmp al, 1
ja 0x140085b35
lea rdx, [0x14010e2a8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085b35
movzx ecx, byte [r12 + 0x51]
movzx eax, cl
or al, 0x80
and cl, 0x7f
jmp 0x140085e06
cmp byte [r12 + 0x50], 0xc
jne 0x140085b56
lea rdx, [0x140102b78]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
je case.0x1400854a4.3
lea rdx, [0x14010e2b8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085bac
movzx eax, byte [r12 + 0x50]
cmp al, 0xc
jne 0x140085b8d
test r14b, r14b
je 0x140085b83
or dword [r15], 0x10
jmp case.0x14008660f.7
or dword [r15 + 4], 0x10
jmp case.0x14008660f.7
sub al, 7
cmp al, 1
ja case.0x14008660f.7
test r14b, r14b
je 0x1400857a1
or dword [r15], 0x4000
jmp case.0x14008660f.7
lea rdx, [0x14010e2d0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
movzx ecx, byte [r12 + 0x50]
test eax, eax
jne 0x140085bff
cmp cl, 0xc
jne 0x140085bde
test r14b, r14b
je case.0x1400863c9.16
or dword [r15], 8
jmp case.0x14008660f.7
sub cl, 7
cmp cl, 1
ja case.0x14008660f.7
test r14b, r14b
je 0x1400854c2
or dword [r15], 0x2000
jmp case.0x14008660f.7
cmp cl, 0xc
jne 0x140085ca2
mov r8d, 8
lea rdx, [0x1401073c0]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085ca2
movzx eax, word [rbp - 0x80]
mov word [r15 + 0x198], ax
test r14b, r14b
je 0x140085c78
or dword [r15], 0x20
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140085c98
xor r9d, r9d
mov edx, 0xcc
test ax, ax
jne 0x140085c65
mov r8d, 0x25cf
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14008660f.7
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14008660f.7
or dword [r15 + 4], 0x20
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140085c98
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14008660f.7
mov r8d, 5
lea rdx, [0x14010e2e8]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085cf8
test r14b, r14b
je 0x140085cea
cmp word [rsp + 0x7a], di
je 0x140085cdc
lea rcx, [rsp + 0x7a]
call fcn.1400a19d0
mov dword [r15 + 0x70], eax
jmp case.0x14008660f.7
mov eax, 0xffffffff
mov dword [r15 + 0x70], eax
jmp case.0x14008660f.7
mov eax, 0x80000000
mov dword [r15 + 0x70], eax
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 8
jne 0x140085d27
lea rdx, [0x14010e2f8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085d27
test r14b, r14b
je case.0x1400863c9.11
or dword [r15], 1
jmp case.0x14008660f.7
mov r8d, 4
lea rdx, [0x140107300]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
movzx ecx, byte [r12 + 0x50]
test eax, eax
jne 0x140085da3
sub ecx, 7
je 0x14008627d
sub ecx, 1
je 0x14008627d
sub ecx, 1
je 0x140086132
cmp ecx, 1
jne case.0x14008660f.7
test r14b, r14b
je 0x140085d99
lea rdx, [0x1401072e0]
lea rcx, [rsp + 0x78]
call fcn.1400c51bc
test eax, eax
mov ecx, SafeArrayAllocDescriptor
mov eax, reloc.WSOCK32.dll_recv
cmovne ecx, eax
or dword [r15], ecx
jmp case.0x14008660f.7
or dword [r15 + 4], 0x30
jmp case.0x14008660f.7
cmp cl, 0x10
jne 0x140085dd7
lea rdx, [0x14010e308]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085dd7
test r14b, r14b
je 0x140085fbb
mov eax, dword [r15]
and eax, 0xffffffef
or eax, 0x40
mov dword [r15], eax
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0x11
jne 0x140085eb6
lea rdx, [0x14010e318]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085e1c
movzx ecx, byte [r12 + 0x51]
movzx eax, cl
and al, 0x7f
or cl, 0x80
test r14b, r14b
movzx ecx, cl
movzx eax, al
cmove ecx, eax
mov byte [r12 + 0x51], cl
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0x11
jne 0x140085eb6
lea rdx, [0x14010e328]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140085e4f
test r14b, r14b
je 0x140085b83
or dword [r15], 0x10
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0x11
jne 0x140085eb6
mov r8d, reloc.WSOCK32.dll_ioctlsocket
lea rdx, [0x14010e338]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085eb6
mov byte [r15 + 0x19b], 1
test r14b, r14b
je 0x140085ea3
or dword [r15], 1
lea rcx, [rbp - 0x78]
cmp word [rbp - 0x78], di
setne al
mov byte [r15 + 0x19c], al
call fcn.1400a19d0
mov dword [r15 + 0x40], eax
jmp case.0x14008660f.7
or dword [r15 + 4], 1
mov eax, 0xffffffff
mov dword [r15 + 0x40], eax
jmp case.0x14008660f.7
mov r8d, 4
lea rdx, [0x140104cc0]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
movzx ecx, byte [r12 + 0x50]
test eax, eax
jne 0x140085f40
cmp cl, 0x11
jne 0x140085ef8
test r14b, r14b
je case.0x14008660f.7
lea rcx, [rsp + 0x78]
call fcn.1400a19d0
mov dword [r15 + 0x44], eax
jmp case.0x14008660f.7
cmp cl, 0xb
jne case.0x14008660f.7
movzx edx, word [rsp + 0x78]
mov r8d, 0xffdf
movzx ecx, dx
and cx, r8w
lea eax, [rdx - 0x61]
cmp ax, 0x19
cmova cx, dx
cmp cx, 0x53
jne case.0x14008660f.7
test r14b, r14b
je 0x140085f36
or dword [r15], 6
jmp case.0x14008660f.7
or dword [r15 + 4], 6
jmp case.0x14008660f.7
cmp cl, 0x11
jne 0x140085f7c
mov r8d, 4
lea rdx, [0x14010e358]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085f7c
test r14b, r14b
je case.0x14008660f.7
lea rcx, [rsp + 0x78]
call fcn.1400a19d0
mov dword [r15 + 0x48], eax
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0x11
jne 0x140085fc5
mov r8d, 5
lea rdx, [0x14010e368]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140085fc5
test r14b, r14b
je 0x140085fbb
or dword [r15], 0x40
lea rcx, [rsp + 0x7a]
call fcn.1400a19d0
mov dword [r15 + 0x4c], eax
jmp case.0x14008660f.7
or dword [r15 + 4], 0x40
jmp case.0x14008660f.7
mov r8d, 7
lea rdx, [0x140101058]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
movzx ecx, byte [r12 + 0x50]
test eax, eax
jne 0x1400860a0
cmp cl, 0x11
jne case.0x14008660f.7
test r14b, r14b
je 0x140086640
movzx eax, word [rsp + 0x7e]
mov ecx, eax
mov dword [r15 + 0x50], 0xffffffff
sub ax, 0x61
mov edx, ecx
and edx, 0xffffffdf
cmp ax, 0x19
cmova edx, ecx
cmp edx, 0x42
je 0x140086081
cmp edx, 0x4c
je 0x140086066
cmp edx, 0x52
je 0x140086047
mov eax, edi
cmp edx, 0x54
jne 0x140086090
inc eax
mov dword [r15 + 0x50], edi
mov dword [r15 + 0x50], eax
or dword [r15], 0x100
jmp case.0x14008660f.7
mov eax, 3
mov dword [r15 + 0x50], 3
inc eax
mov dword [r15 + 0x50], eax
or dword [r15], 0x100
jmp case.0x14008660f.7
mov eax, 1
mov dword [r15 + 0x50], eax
inc eax
mov dword [r15 + 0x50], eax
or dword [r15], 0x100
jmp case.0x14008660f.7
mov eax, 2
mov dword [r15 + 0x50], 2
inc eax
mov dword [r15 + 0x50], eax
or dword [r15], 0x100
jmp case.0x14008660f.7
cmp cl, 0x11
jne 0x140086113
mov r8d, 5
lea rdx, [0x14010e378]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x140086113
test r14b, r14b
je case.0x14008660f.7
movzx ebx, word [rsp + 0x7a]
test bx, bx
je case.0x14008660f.7
lea rdx, [rsp + 0x7c]
mov rcx, r13
call fcn.140089430
cmp eax, dword [r13 + 0xa8]
jae case.0x14008660f.7
mov ecx, eax
mov rax, qword [r13 + 0x50]
mov rdx, qword [rax + rcx*8]
cmp bx, 0x31
jne 0x14008610a
mov qword [r15 + 0x58], rdx
jmp case.0x14008660f.7
mov qword [r15 + 0x60], rdx
jmp case.0x14008660f.7
lea rdx, [0x14010e388]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x14008615e
movzx eax, byte [r12 + 0x50]
cmp al, 0x11
jne 0x140086144
test r14b, r14b
je case.0x1400864e8.11
or dword [r15], 2
jmp case.0x14008660f.7
cmp al, 0x12
jne case.0x14008660f.7
test r14b, r14b
je 0x14008638d
or dword [r15], 4
jmp case.0x14008660f.7
mov r8d, 5
lea rdx, [0x14010e3a0]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x14008622e
test r14b, r14b
je case.0x14008660f.7
cmp word [rsp + 0x7a], di
je case.0x14008660f.7
movzx eax, byte [r12 + 0x50]
lea rcx, [rsp + 0x7a]
sub al, 0xd
cmp al, 1
jbe 0x1400861dd
mov byte [r15 + 0x19a], 1
call fcn.1400a19d0
mov edx, 0x2d
mov dword [r15 + 0x38], eax
lea rcx, [rsp + 0x7c]
call fcn.1400c0244
test rax, rax
je case.0x14008660f.7
lea rcx, [rax + 2]
call fcn.1400a19d0
mov dword [r15 + 0x3c], eax
jmp case.0x14008660f.7
lea rdx, [r15 + 0x16c]
call fcn.1400a0aa0
mov dword [r15 + 0x190], eax
test eax, eax
je case.0x1400868a3.68
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je case.0x14008660f.7
cmp byte [r12 + 0x50], 0xd
lea r9, [r15 + 0x16c]
mov r8d, eax
mov edx, 0x1012
mov eax, 0x1004
cmove edx, eax
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0x12
jne 0x14008625d
lea rdx, [0x14010e3b0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x14008625d
test r14b, r14b
je case.0x1400863c9.11
or dword [r15], 1
jmp case.0x14008660f.7
lea rdx, [0x14010e3c0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
movzx ecx, byte [r12 + 0x50]
test eax, eax
jne 0x1400862ad
cmp cl, 0x13
jne 0x140086292
test r14b, r14b
je 0x140086640
or dword [r15], 0x100
jmp case.0x14008660f.7
cmp cl, 0xb
jne case.0x14008660f.7
test r14b, r14b
je case.0x1400863c9.11
or dword [r15], 1
jmp case.0x14008660f.7
cmp cl, 0x13
jne 0x1400862f3
lea rdx, [0x14010e3d0]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x1400862f3
mov eax, dword [r15 + 4]
mov rcx, r15
mov edx, 4
test r14b, r14b
je 0x1400862e8
or dword [r15], 2
bts eax, 7
mov dword [rdx + rcx], eax
jmp case.0x14008660f.7
or eax, 2
mov dword [rdx + rcx], eax
jmp case.0x14008660f.7
cmp byte [r12 + 0x50], 0x18
jne 0x14008634c
mov r8d, 5
lea rdx, [0x140109798]
lea rcx, [rsp + 0x70]
call fcn.1400c53a8
test eax, eax
jne 0x14008634c
mov rcx, qword [0x14012ab98]
lea r8, [rbp + 0x1b0]
lea rdx, [rsp + 0x7a]
call qword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [r15 + reloc.OLEAUT32.dll_OleCreatePictureIndirect], ax
test ax, ax
jne case.0x14008660f.7
lea rcx, [0x14010e3e0]
jmp 0x140086987
lea rdx, [0x1401072c8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140086426
movzx eax, byte [r12 + 0x50]
dec eax
cmp eax, 0x10
ja case.0x14008660f.7
cdqe
test r14b, r14b
je 0x1400863bf
mov ecx, dword [rsi + rax*4 + 0x875a0]
add rcx, rsi
jmp rcx
or dword [r15], 8
or dword [r15 + 4], 4
jmp case.0x14008660f.7
or dword [r15], 1
or dword [r15 + 4], 0x1e
jmp case.0x14008660f.7
or dword [r15], 0x300
jmp case.0x14008660f.7
or dword [r15], 1
or dword [r15 + 4], 2
jmp case.0x14008660f.7
mov ecx, dword [rsi + rax*4 + 0x875e4]
add rcx, rsi
jmp rcx
or dword [r15 + 4], 0x1f
jmp case.0x14008660f.7
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140086403
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x14008660f.7
or dword [r15 + 4], eax
jmp case.0x14008660f.7
mov ecx, dword [r15]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
jne case.0x14008660f.7
and ecx, 0xfffffcff
mov dword [r15], ecx
jmp case.0x14008660f.7
lea rdx, [0x140104f08]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x140086554
movzx eax, byte [r12 + 0x50]
dec eax
test r14b, r14b
je 0x1400864d3
cmp eax, 0x16
ja case.0x14008660f.7
cdqe
mov ecx, dword [rsi + rax*4 + 0x87628]
add rcx, rsi
jmp rcx
or dword [r15 + 4], 8
or dword [r15], 4
jmp case.0x14008660f.7
or dword [r15], 2
or dword [r15 + 4], 0x1d
jmp case.0x14008660f.7
mov ecx, dword [r15]
or dword [r15 + 4], 0x100
bts ecx, 9
mov dword [r15], ecx
movzx eax, byte [r12 + 0x50]
sub al, 5
cmp al, 1
ja case.0x14008660f.7
or ecx, 0x20
mov dword [r15], ecx
jmp case.0x14008660f.7
or dword [r15], 2
or dword [r15 + 4], 1
jmp case.0x14008660f.7
or dword [r15], 0x282
jmp case.0x14008660f.7
or dword [r15], 0x20
jmp case.0x14008660f.7
cmp eax, 0x12
ja case.0x14008660f.7
cdqe
mov ecx, dword [rsi + rax*4 + 0x87684]
add rcx, rsi
jmp rcx
or dword [r15 + 4], 0x20
jmp case.0x14008660f.7
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x140086526
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x14008660f.7
or dword [r15 + 4], 0x200
jmp case.0x14008660f.7
mov ecx, dword [r15]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x14008660f.7
btr ecx, 9
mov dword [r15], ecx
jmp case.0x14008660f.7
or dword [r15 + 4], 0x82
jmp case.0x14008660f.7
lea rdx, [0x140104ef8]
lea rcx, [rsp + 0x70]
call fcn.1400c51bc
test eax, eax
jne 0x14008667b
movzx eax, byte [r12 + 0x50]
test r14b, r14b
je 0x1400865f7
dec eax
cmp eax, 0x12
ja case.0x14008660f.7
cdqe
mov ecx, dword [rsi + rax*4 + 0x876d0]
add rcx, rsi
jmp rcx
or dword [r15 + 4], 4
or dword [r15], 8
jmp case.0x14008660f.7
or dword [r15], 4
or dword [r15 + 4], 8
jmp case.0x14008660f.7
mov ecx, dword [r15 + 4]
or dword [r15], 0x100
bts ecx, 9
mov dword [r15 + 4], ecx
movzx eax, byte [r12 + 0x50]
sub al, 5
cmp al, 1
ja case.0x14008660f.7
or ecx, 0x20
mov dword [r15 + 4], ecx
jmp case.0x14008660f.7
or dword [r15 + 4], 3
jmp case.0x14008660f.7
or dword [r15], 0x280
or dword [r15 + 4], 2
jmp case.0x14008660f.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x14008660f.7
cdqe
mov ecx, dword [rsi + rax*4 + 0x8771c]
add rcx, rsi
jmp rcx
or dword [r15 + 4], 0xc
jmp case.0x14008660f.7
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x14008664d
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x14008660f.7
or dword [r15 + 4], 0x100
jmp case.0x14008660f.7
mov ecx, dword [r15]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x14008660f.7
btr ecx, 8
mov dword [r15], ecx
jmp case.0x14008660f.7
or dword [r15 + 4], 0x80
jmp case.0x14008660f.7
movzx ebx, word [rsp + 0x70]
cmp bx, 0x2d
je 0x1400866ba
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.1400a1870
mov rcx, qword [rsp + 0x58]
cmp word [rcx], di
jne 0x1400866b5
test r14b, r14b
je 0x1400866ac
or dword [r15], eax
jmp case.0x14008660f.7
or dword [r15 + 4], eax
jmp case.0x14008660f.7
movzx ebx, word [rsp + 0x70]
lea eax, [rbx - 0x61]
cmp ax, 0x19
ja 0x1400866cb
mov ecx, 0xffdf
and bx, cx
cmp word [rsp + 0x72], 0
lea rdi, [rsp + 0x72]
jne 0x14008671a
cmp bx, 0x43
je 0x140086704
cmp bx, 0x56
jne case.0x1400868a3.68
mov rcx, qword [r12 + 0x30]
test rcx, rcx
je 0x1400866f7
call fcn.1400c5338
xor r11d, r11d
mov qword [r12 + 0x30], r11
jmp case.0x14008660f.7
test r14b, r14b
jne case.0x14008660f.7
mov dword [r15 + 0x68], 0xff000000
jmp case.0x14008660f.7
xor ecx, ecx
movzx edx, bx
mov esi, ecx
lea rcx, [0x14010e418]
call fcn.1400c0244
test rax, rax
je 0x14008687e
movzx ecx, word [rsp + 0x72]
mov r9d, 0xffdf
movzx r8d, cx
movzx edx, cx
lea eax, [rcx - 0x61]
cmp ax, 0x19
ja 0x140086755
and r8w, r9w
movzx ecx, bx
mov word [rsp + 0x34], r8w
sub ecx, 0x48
je 0x1400867ca
sub ecx, 0xf
je 0x1400867ca
sub ecx, 1
je 0x140086772
cmp ecx, 1
jne 0x1400867db
cmp dx, 0x2b
jne 0x1400867a7
movzx edx, word [rsp + 0x74]
movzx ecx, dx
and cx, r9w
lea eax, [rdx - 0x61]
cmp ax, 0x19
mov eax, 0x4d
cmova cx, dx
cmp ax, cx
jne 0x1400867a7
mov byte [rbp + 0x258], 1
lea rdi, [rsp + 0x76]
jmp 0x1400867db
movzx edx, r8w
mov byte [rbp + 0x258], sil
lea rcx, [0x14010e428]
call fcn.1400c0244
test rax, rax
je 0x1400867db
lea rdi, [rsp + 0x74]
jmp 0x1400867db
cmp r8w, 0x50
lea rax, [rsp + 0x74]
cmovne rax, rdi
mov rdi, rax
mov eax, 1
xor r8d, r8d
mov r9d, eax
mov edx, eax
mov rcx, rdi
call fcn.1400a0f10
mov ecx, eax
sub ecx, 1
je 0x140086828
cmp ecx, 1
je 0x140086813
cmp word [rdi], si
jne 0x14008680b
movzx eax, word [rsp + 0x34]
test ax, ax
jne 0x14008683f
xor r11d, r11d
mov ebx, r11d
jmp 0x140086881
mov rcx, rdi
call fcn.1400d0c04
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
cvttss2si esi, xmm6
jmp 0x14008683a
mov rcx, rdi
call fcn.1400a19d0
mov rsi, rax
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movzx eax, word [rsp + 0x34]
lea ecx, [rbx - 0x58]
cmp cx, 1
jbe 0x14008685e
cmp bx, 0x57
je 0x140086854
cmp bx, 0x48
jne 0x14008687e
test esi, esi
jg 0x14008685e
cmp ax, 0x50
jne 0x14008687e
cmp byte [r13 + 0x112], 0
je 0x14008687e
mov edx, dword [0x14012c64c]
mov r8d, WSAAsyncSelect
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
xor r11d, r11d
movzx eax, bx
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x1400868a3.68
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x87760]
add rcx, rdx
jmp rcx
mov eax, dword [r15 + 0x148]
cmp eax, 0x32
jae case.0x14008660f.7
mov dword [r15 + rax*4 + 0x80], esi
inc dword [r15 + 0x148]
jmp case.0x14008660f.7
mov r8, rdi
mov rdx, r12
mov rcx, r13
call fcn.14007dce0
cmp eax, 0xa0000000
je 0x140086dd3
cmp eax, 0xa00e0001
jne case.0x14008660f.7
mov rax, qword [0x14012c4e8]
lea rdx, [0x1401049c0]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea rcx, [0x14012c670]
xor r8d, r8d
call fcn.14000f470
jmp 0x14008752f
cmp word [rdi], 0
jne 0x14008692e
mov dword [r15 + 0x68], 0xff000000
jmp case.0x14008660f.7
mov rcx, rdi
call fcn.1400a2700
mov dword [r15 + 0x68], eax
cmp eax, 0xffffffff
jne case.0x14008660f.7
mov r8d, reloc.WSOCK32.dll_recv
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.1400cbc18
mov ecx, eax
movzx r8d, ax
and r8d, 0xffffff00
shr ecx, 0x10
movzx eax, al
shl eax, 0x10
movzx edx, cl
or r8d, edx
or r8d, eax
mov rax, qword [rsp + 0x60]
mov dword [r15 + 0x68], r8d
cmp word [rax], 0
je case.0x14008660f.7
lea rcx, [0x140106978]
mov r8d, 9
lea rdx, [rsp + 0x70]
call fcn.140010e40
test eax, eax
je 0x140086dd3
mov rdx, qword [rsp + 0x40]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x1400869b7
cmp ax, 9
jne 0x140086dc2
add rdx, 2
jmp 0x1400869a4
cmp word [rsp + 0x34], 0x50
jne 0x1400869cc
add esi, dword [r13 + 0xd8]
mov dword [r15 + 0x28], esi
jmp case.0x14008660f.7
cmp word [rsp + 0x34], 0x50
jne 0x1400869e1
add esi, dword [r13 + 0xdc]
mov dword [r15 + 0x2c], esi
jmp case.0x14008660f.7
movzx eax, word [rsp + 0x34]
cmp ax, 0x2b
jne 0x140086afd
cmp byte [rbp + 0x258], 0
je 0x140086a08
mov eax, dword [r13 + 0xc8]
jmp 0x140086a0b
mov eax, r11d
movzx r10d, byte [r12 + 0x52]
lea edi, [rax + rsi]
cmp r10b, 0xff
je 0x140086a4a
mov r8d, dword [r13 + 0xa8]
xor dl, dl
mov ecx, r11d
test r8d, r8d
je 0x140086a4a
mov r9, qword [r13 + 0x50]
nop
mov eax, ecx
mov rbx, qword [r9 + rax*8]
cmp byte [rbx + 0x50], 0x13
jne 0x140086a43
cmp dl, r10b
je 0x140086a7c
inc dl
inc ecx
cmp ecx, r8d
jb 0x140086a30
mov eax, dword [r13 + 0xd8]
add eax, dword [r13 + 0xd0]
add eax, edi
cmp dword [r15 + 0x24], 0x80000000
mov dword [r15 + 0x20], eax
jne case.0x14008660f.7
mov eax, dword [r13 + 0xd4]
mov dword [r15 + 0x24], eax
jmp case.0x14008660f.7
test rbx, rbx
je 0x140086a4a
mov r10d, r11d
mov r8, r9
movzx r11d, byte [r12 + 0x53]
mov r9d, dword [r13 + 0xa8]
mov rcx, qword [r8]
cmp byte [rcx + 0x53], r11b
jne 0x140086aab
movzx eax, byte [r12 + 0x52]
cmp byte [rcx + 0x52], al
jne 0x140086aab
inc r10d
add r8, 8
sub r9, 1
jne 0x140086a94
test r10d, r10d
jne 0x140086a4a
mov rdx, qword [rbx + 0x28]
lea r8, [rbp + 0x180]
mov rcx, r13
call fcn.14008c8f0
mov ecx, dword [rbp + 0x180]
add ecx, edi
cmp dword [r15 + 0x24], 0x80000000
mov dword [r15 + 0x20], ecx
jne case.0x14008660f.7
mov ecx, dword [r13 + 0xcc]
add ecx, dword [rbp + 0x184]
mov dword [r15 + 0x24], ecx
jmp case.0x14008660f.7
cmp ax, 0x4d
jne 0x140086b35
mov ecx, dword [r13 + 0xc8]
add ecx, esi
mov dword [r15 + 0x20], ecx
cmp dword [r15 + 0x24], 0x80000000
jne case.0x14008660f.7
mov eax, dword [r13 + 0xe4]
add eax, dword [r13 + 0xcc]
mov dword [r15 + 0x24], eax
jmp case.0x14008660f.7
cmp ax, 0x50
jne 0x140086b7f
mov edx, dword [r13 + 0xd0]
add edx, esi
cmp dword [r15 + 0x24], 0x80000000
mov dword [r15 + 0x20], edx
jne case.0x14008660f.7
mov ecx, dword [r13 + 0xd4]
cmp edx, dword [r13 + 0xd0]
jne 0x140086b76
mov eax, dword [r13 + 0xdc]
add eax, dword [r13 + 0xcc]
add ecx, eax
mov dword [r15 + 0x24], ecx
jmp case.0x14008660f.7
cmp ax, 0x53
jne 0x140086bb7
mov ecx, dword [r13 + 0xe8]
add ecx, esi
cmp dword [r15 + 0x24], 0x80000000
mov dword [r15 + 0x20], ecx
jne case.0x14008660f.7
mov eax, dword [r13 + 0xf4]
add eax, dword [r13 + 0xcc]
mov dword [r15 + 0x24], eax
jmp case.0x14008660f.7
mov dword [r15 + 0x20], esi
jmp 0x140086b10
movzx eax, word [rsp + 0x34]
cmp ax, 0x2b
jne 0x140086cdd
cmp byte [rbp + 0x258], 0
je 0x140086be1
mov eax, dword [r13 + 0xcc]
jmp 0x140086be4
mov eax, r11d
movzx r10d, byte [r12 + 0x52]
lea edi, [rax + rsi]
cmp r10b, 0xff
je 0x140086c2a
mov r8d, dword [r13 + 0xa8]
xor dl, dl
mov ecx, r11d
test r8d, r8d
je 0x140086c2a
mov r9, qword [r13 + 0x50]
nop dword [rax + rax]
mov eax, ecx
mov rbx, qword [r9 + rax*8]
cmp byte [rbx + 0x50], 0x13
jne 0x140086c23
cmp dl, r10b
je 0x140086c5c
inc dl
inc ecx
cmp ecx, r8d
jb 0x140086c10
mov eax, dword [r13 + 0xdc]
add eax, dword [r13 + 0xd4]
add eax, edi
cmp dword [r15 + 0x20], 0x80000000
mov dword [r15 + 0x24], eax
jne case.0x14008660f.7
mov eax, dword [r13 + 0xd0]
mov dword [r15 + 0x20], eax
jmp case.0x14008660f.7
test rbx, rbx
je 0x140086c2a
mov r10d, r11d
mov r8, r9
movzx r11d, byte [r12 + 0x53]
mov r9d, dword [r13 + 0xa8]
mov rcx, qword [r8]
cmp byte [rcx + 0x53], r11b
jne 0x140086c8b
movzx eax, byte [r12 + 0x52]
cmp byte [rcx + 0x52], al
jne 0x140086c8b
inc r10d
add r8, 8
sub r9, 1
jne 0x140086c74
test r10d, r10d
jne 0x140086c2a
mov rdx, qword [rbx + 0x28]
lea r8, [rbp + 0x190]
mov rcx, r13
call fcn.14008c8f0
mov ecx, dword [rbp + 0x194]
add ecx, edi
cmp dword [r15 + 0x20], 0x80000000
mov dword [r15 + 0x24], ecx
jne case.0x14008660f.7
mov ecx, dword [r13 + 0xc8]
add ecx, dword [rbp + 0x190]
mov dword [r15 + 0x20], ecx
jmp case.0x14008660f.7
cmp ax, 0x4d
jne 0x140086d15
mov ecx, dword [r13 + 0xcc]
add ecx, esi
mov dword [r15 + 0x24], ecx
cmp dword [r15 + 0x20], 0x80000000
jne case.0x14008660f.7
mov eax, dword [r13 + 0xe0]
add eax, dword [r13 + 0xc8]
mov dword [r15 + 0x20], eax
jmp case.0x14008660f.7
cmp ax, 0x50
jne 0x140086d5f
mov edx, dword [r13 + 0xd4]
add edx, esi
cmp dword [r15 + 0x20], 0x80000000
mov dword [r15 + 0x24], edx
jne case.0x14008660f.7
mov ecx, dword [r13 + 0xd0]
cmp edx, dword [r13 + 0xd4]
jne 0x140086d56
mov eax, dword [r13 + 0xd8]
add eax, dword [r13 + 0xcc]
add ecx, eax
mov dword [r15 + 0x20], ecx
jmp case.0x14008660f.7
cmp ax, 0x53
jne 0x140086d97
mov ecx, dword [r13 + 0xec]
add ecx, esi
cmp dword [r15 + 0x20], 0x80000000
mov dword [r15 + 0x24], ecx
jne case.0x14008660f.7
mov eax, dword [r13 + 0xf0]
add eax, dword [r13 + 0xc8]
mov dword [r15 + 0x20], eax
jmp case.0x14008660f.7
mov dword [r15 + 0x24], esi
jmp 0x140086cf0
movss dword [r15 + 0x30], xmm6
jmp case.0x14008660f.7
test r14b, r14b
je 0x140086db9
or dword [r15 + 8], esi
jmp case.0x14008660f.7
or dword [r15 + 0xc], esi
jmp case.0x14008660f.7
test ax, ax
je 0x140086dda
lea rsi, [0x140000000]
jmp 0x140084fd5
xor eax, eax
jmp 0x14008752f
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x14008752a
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [r15 + 4]
lea rdi, [r12 + 0x50]
mov r8d, dword [r15]
mov ebx, eax
or ebx, r8d
mov ecx, edx
not ecx
mov r14d, eax
and ebx, ecx
movzx ecx, byte [r12 + 0x50]
add ecx, 0xfffffffe
cmp ecx, 8
ja case.0x140086e39.9
movsxd rax, ecx
lea r9, [0x140000000]
lea rdi, [r12 + 0x50]
mov ecx, dword [r9 + rax*4 + 0x877bc]
add rcx, r9
jmp rcx
mov eax, ebx
xor eax, r14d
and eax, 0xf
xor ebx, eax
jmp 0x140086f97
and ebx, 0xfffffff7
or ebx, 7
jmp 0x140086f97
test bl, 1
je 0x140086e62
and ebx, 0xfffffff1
or ebx, 1
jmp 0x140086e65
and ebx, 0xfffffff0
mov eax, dword [r13 + 0xb0]
mov edi, dword [rbp + 0x270]
cmp edi, eax
jne 0x140086ea9
test dl, 1
je 0x140086f97
mov rcx, qword [r13 + 0x30]
xor r9d, r9d
mov edx, 0x401
mov dword [r13 + 0xb0], 0xffffffff
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_SendMessageW]
or r14d, 1
jmp 0x140086f97
test r8b, 1
je 0x140086f97
cmp eax, dword [r13 + 0xa8]
jae 0x140086f02
mov rcx, rax
mov edx, 0xfffffff0
mov rax, qword [r13 + 0x50]
mov rcx, qword [rax + rcx*8]
mov rcx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [r13 + 0xb0]
mov r9d, 1
mov rcx, qword [r13 + 0x50]
and eax, 0xfffe
mov r8d, eax
mov rcx, qword [rcx + rdx*8]
mov edx, 0xf4
mov rcx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13 + 0x30]
lea r8d, [rdi + 3]
xor r9d, r9d
mov dword [r13 + 0xb0], edi
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140086f97
mov eax, ebx
mov ecx, ebx
and ebx, 0xfffffff3
and eax, 0xfffffff6
or eax, 6
or ebx, 3
and ecx, 6
cmp cl, 6
cmove ebx, eax
jmp 0x140086f97
and ebx, 0xfffffff9
or ebx, 9
jmp 0x140086f97
or ebx, 3
jmp 0x140086f97
mov ecx, ebx
mov eax, ebx
and ebx, 0xfffffff2
and ecx, 0xfffffff1
or ecx, 1
or ebx, 2
test al, 1
cmovne ebx, ecx
jmp 0x140086f97
mov eax, dword [r15 + 0x14]
lea rdi, [r12 + 0x50]
cmp eax, 0xffffffff
je case.0x140086e39.9
mov rcx, qword [r12 + 0x28]
mov r8d, eax
xor r9d, r9d
mov edx, 0x108e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r15 + 0x14]
lea rdi, [r12 + 0x50]
cmp eax, 4
je case.0x140086e39.9
and ebx, 0xfffffffc
or ebx, eax
lea rdi, [r12 + 0x50]
movsxd rdx, dword [r15 + 0x70]
mov rax, rdi
test edx, edx
je 0x14008701c
movzx ecx, byte [rdi]
cmp cl, 0xc
jne 0x140086fef
mov rcx, qword [r12 + 0x28]
xor r9d, r9d
test edx, edx
jns 0x140086fe5
xor r8d, r8d
mov edx, 0xc5
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r15 + 0x70], 0x80000000
je 0x140086fde
test bl, 4
jne 0x140086fde
and ebx, 0xffefff7f
lea rax, [r12 + 0x50]
jmp 0x14008701c
mov r8, rdx
mov edx, 0xc5
jmp 0x140087013
cmp cl, 0xf
jne 0x14008701c
mov rcx, qword [r12 + 0x28]
test edx, edx
jns 0x140087005
xor r9d, r9d
xor r8d, r8d
jmp 0x14008700e
mov r8, rdx
mov r9d, 6
mov edx, 0x403
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, rdi
xor sil, sil
cmp r14d, ebx
je 0x14008713b
movzx ecx, byte [rax]
xor dil, dil
mov sil, 1
cmp cl, 4
je 0x1400870d8
cmp cl, 9
je 0x14008706f
cmp cl, 0x12
jne 0x1400870d0
mov rcx, qword [r12 + 0x28]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x258], eax
mov r15d, 1
jmp 0x1400870f5
mov eax, r14d
and eax, 0x100000
bt ebx, 0x14
jae 0x1400870b6
test eax, eax
jne 0x1400870d0
mov eax, dword [r15 + 0x74]
test eax, eax
jns 0x1400870ae
mov rcx, qword [r12 + 0x28]
lea rdx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x1a8]
sub eax, dword [rbp + 0x1a0]
lea eax, [rax + rax*2]
mov dword [r15 + 0x74], eax
movsxd r8, eax
xor r9d, r9d
jmp 0x1400870c0
test eax, eax
je 0x1400870d0
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [r12 + 0x28]
mov edx, 0x194
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15d, 1
jmp 0x1400870f5
mov rcx, qword [r12 + 0x28]
mov r15d, 1
mov r9d, r15d
movzx r8d, bx
mov edx, 0xf4
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r12 + 0x28]
mov r8d, ebx
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14008711e
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140087142
mov rcx, qword [r12 + 0x28]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r14d
movzx edi, dil
cmovne edi, r15d
jmp 0x140087142
movzx edi, byte [rbp + 0x258]
mov rcx, qword [r12 + 0x28]
mov edx, 0xffffffec
movzx r13d, sil
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [rbp + 0x260]
mov r15d, eax
mov r12d, eax
or r15d, dword [rcx + 8]
mov ecx, dword [rcx + 0xc]
not ecx
and r15d, ecx
cmp eax, r15d
je 0x1400871d9
movzx ecx, sil
test sil, sil
mov eax, 1
cmove ecx, eax
and dil, r13b
movzx esi, cl
movzx r13d, dil
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, r15d
mov edx, 0xffffffec
mov r15, qword [rbp + 0x268]
mov rcx, qword [r15 + 0x28]
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x1400871bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400871d9
mov rcx, qword [r15 + 0x28]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r12d
mov edi, r13d
mov eax, 1
cmovne edi, eax
mov r13, qword [rbp + 0x268]
cmp byte [r13 + 0x50], 0xa
jne 0x14008724f
mov rcx, qword [r13 + 0x28]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, qword [rbp + 0x260]
mov r15, rax
mov eax, dword [r12 + 0x10]
cmp r15d, eax
je 0x140087256
test sil, sil
jne 0x14008721b
mov sil, 1
xor dil, dil
mov rcx, qword [r13 + 0x28]
mov r9, rax
xor r8d, r8d
mov edx, 0x1036
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13 + 0x28]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, r15d
je 0x14008725b
mov dil, 1
jmp 0x140087256
mov r12, qword [rbp + 0x260]
test sil, sil
je 0x140087271
mov eax, dword [rsp + 0x30]
test dil, dil
movzx eax, al
mov ecx, 1
cmovne eax, ecx
mov dword [rsp + 0x30], eax
movzx eax, byte [r13 + 0x50]
lea r15, [0x140000000]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x140087296.13
cdqe
mov ecx, dword [r15 + rax*4 + 0x877e0]
add rcx, r15
jmp rcx
cmp byte [r12 + 0x19a], 0
je case.0x140087296.13
movsxd r9, dword [r12 + 0x3c]
mov edx, 0x46f
movsxd r8, dword [r12 + 0x38]
jmp 0x1400873d9
mov r8, r12
mov rdx, r13
call fcn.14008bed0
test dword [r12 + 4], 0x100
je case.0x140087296.13
xor r9d, r9d
mov edx, 0x41d
jmp 0x1400873d6
mov r8, r12
mov rdx, r13
call fcn.14008c070
jmp case.0x140087296.13
mov eax, dword [r12 + 0x68]
mov ebx, 0xffffffff
cmp eax, ebx
je 0x140087322
mov rcx, qword [r13 + 0x28]
cmp eax, 0xff000000
mov edx, 0x111e
cmove eax, ebx
xor r8d, r8d
mov r9d, eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [r12 + 0x68], ebx
mov eax, dword [r12 + 0x6c]
cmp eax, ebx
je case.0x140087296.13
cmp eax, 0xff000000
mov edx, 0x111d
cmove eax, ebx
mov r9d, eax
jmp 0x1400873d6
mov r9d, ebx
mov r8, r12
mov rdx, r13
call fcn.14008c160
cmp r14d, ebx
je case.0x140087296.13
mov r8d, dword [rbp + 0x258]
xor r9d, r9d
mov edx, 0x402
jmp 0x1400873d9
mov eax, dword [r12 + 0x148]
test eax, eax
je case.0x140087296.13
mov rcx, qword [r13 + 0x28]
lea r9, [r12 + 0x80]
mov r8d, eax
mov edx, 0xcb
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
jmp 0x1400873e7
mov eax, dword [r12 + 0x148]
test eax, eax
je case.0x140087296.13
mov rcx, qword [r13 + 0x28]
lea r9, [r12 + 0x80]
mov r8d, eax
mov edx, 0x192
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
jmp 0x1400873e7
mov eax, dword [r12 + 0x6c]
mov ecx, 0xffffffff
cmp eax, ecx
je case.0x140087296.13
mov r9d, eax
mov edx, 0x2001
xor r8d, r8d
mov rcx, qword [r13 + 0x28]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [rsp + 0x30]
mov edx, dword [r12 + 0x68]
mov eax, 0xffffffff
cmp edx, eax
je 0x1400874a3
movzx r8d, byte [r13 + 0x50]
mov ecx, r8d
sub ecx, 0xa
je 0x14008748c
sub ecx, 1
je 0x140087479
sub ecx, 2
je 0x140087454
cmp ecx, 1
je 0x14008742f
movzx ecx, byte [r8 + r15 + 0x10e528]
not cl
test cl, 0x20
je 0x1400874a1
mov dword [r13 + 0x60], edx
jmp 0x1400874a1
cmp edx, 0xff000000
jne 0x140087444
mov ecx, 8
call qword [sym.imp.USER32.dll_GetSysColor]
mov edx, eax
mov r9d, edx
mov r8d, 1
mov edx, 0x100a
jmp 0x140087497
cmp edx, 0xff000000
jne 0x140087469
mov ecx, 8
call qword [sym.imp.USER32.dll_GetSysColor]
mov edx, eax
mov r9d, edx
mov r8d, 1
mov edx, 0x1006
jmp 0x140087497
cmp edx, 0xff000000
cmove edx, eax
mov r9d, edx
mov edx, 0x111e
jmp 0x140087494
mov r9, rdx
mov edx, 0x1024
xor r8d, r8d
mov rcx, qword [r13 + 0x28]
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
mov eax, dword [r12 + 0x194]
xor r14d, r14d
test eax, eax
je 0x1400874df
mov rcx, qword [r13 + 0x28]
lea edx, [r14 + 0xb]
cmp eax, 3
mov r8d, r14d
sete r8b
xor r9d, r9d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r12 + 0x194], 3
jne 0x1400874df
cmp byte [r13 + 0x50], 0xb
jne 0x1400874e3
test bl, bl
je 0x1400874f3
mov rcx, qword [r13 + 0x28]
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.USER32.dll_InvalidateRect]
test sil, sil
je 0x14008752a
test dil, dil
jne 0x14008752a
mov r9, qword [0x14012cd28]
lea r8, [0x140100be0]
mov qword [rsp + 0x28], r14
lea rdx, [0x140104c50]
lea rcx, [0x14012c670]
mov dword [rsp + 0x20], r14d
call fcn.14000ef80
jmp 0x14008752f
mov eax, 1
mov rbx, qword [rsp + 0x350]
movaps xmm6, xmmword [rsp + 0x300]
add rsp, 0x310
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret