Function at 0x140093880
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
movzx eax, byte [r9 + 8]
mov r15, r9
mov r14, r8
mov rbp, rdx
mov rsi, rcx
cmp al, 0xa
je 0x1400938b4
cmp al, 2
lea rax, [r9 + 0x20]
jne 0x1400938b8
lea rax, [r8 + 0x70]
xor ebx, ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x120], rdi
mov byte [rsp + 0x118], 0
lea r13, [0x140000000]
lea r12d, [rbx + 1]
cmp word [rdx], bx
je 0x140095c0f
movzx eax, word [rbp]
cmp ax, 0x2d
jne 0x1400938f2
xor r12b, r12b
jmp 0x1400938fb
mov r12b, 1
cmp ax, 0x2b
jne 0x1400938ff
add rbp, 2
movzx edx, word [rbp]
test dx, dx
je 0x140095c02
mov rdi, rbp
mov qword [rsp + 0x128], rbp
nop word [rax + rax]
lea rcx, [0x1400e46d0]
mov eax, SafeArrayAllocDescriptor
nop dword [rax]
cmp dx, ax
je 0x140093973
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140093930
movzx edx, word [rdi + 2]
add rdi, 2
mov qword [rsp + 0x128], rdi
test dx, dx
jne 0x140093920
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbp
repne scasw ax, word [rdi]
not rcx
lea rdi, [rbp + rcx*2 - 2]
mov qword [rsp + 0x128], rdi
cmp rdi, rbp
je 0x140095b78
movzx r13d, word [rdi]
lea rdx, [0x1400fe718]
mov rcx, rbp
mov word [rdi], bx
call fcn.1400c900c
test eax, eax
jne 0x1400939a3
mov byte [r14 + 0x1a6], 1
jmp case.0x140094f3f.2
lea rdx, [0x1400fe728]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x1400939d0
cmp byte [r15 + 8], 0xc
je 0x1400939d0
test r12b, r12b
je 0x14009448a
or byte [r15 + 9], 2
jmp case.0x140094f3f.2
lea rdx, [0x1400ecfe0]
mov r8d, 7
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093a75
lea rdx, [0x1400fe740]
lea rcx, [rbp + 0xe]
call fcn.1400c900c
test eax, eax
jne 0x140093a15
neg r12b
sbb eax, eax
and eax, 2
mov dword [r14 + 0x80], eax
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xa
jne 0x140093a35
test r12b, r12b
je 0x140093a2b
or dword [r14 + 0x10], 4
jmp case.0x140094f3f.2
and dword [r14 + 0x10], 0xfffffffb
jmp case.0x140094f3f.2
cmp word [rbp + 0xe], 0
je 0x140093a65
lea rcx, [rbp + 0xe]
call fcn.140014570
mov dword [r14 + 0x80], eax
cmp eax, 0xffffffff
jne case.0x140094f3f.2
mov dword [r14 + 0x80], 2
jmp case.0x140094f3f.2
movzx eax, r12b
mov dword [r14 + 0x80], eax
jmp case.0x140094f3f.2
lea rdx, [0x1400ecf10]
mov r8d, 6
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093b37
test r12b, r12b
je case.0x140094f3f.2
movzx ecx, byte [r15 + 8]
add rbp, 0xc
sub ecx, 0xd
je 0x140093af0
dec ecx
mov rcx, rbp
je 0x140093acb
call fcn.140014570
mov dword [r14 + 0x3c], eax
cmp eax, 1
jge case.0x140094f3f.2
mov dword [r14 + 0x3c], ebx
jmp case.0x140094f3f.2
lea rdx, [r14 + 0x154]
call fcn.1400ab6e0
mov dword [r14 + 0x194], eax
cmp eax, 3
jne case.0x140094f3f.2
or dword [r14], 2
jmp case.0x140094f3f.2
lea rdx, [0x1400fe750]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093b10
mov dword [r14 + 0x3c], 2
jmp case.0x140094f3f.2
lea rdx, [r14 + 0x154]
mov r8b, 1
mov rcx, rbp
call fcn.1400ab7b0
test eax, eax
je case.0x140094f3f.2
mov dword [r14 + 0x3c], 1
jmp case.0x140094f3f.2
lea rdx, [0x1400fe5e0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093b68
test r12b, r12b
je 0x140093b5b
or dword [r14], 0x800000
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x800000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe760]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093b99
test r12b, r12b
je 0x140093b8c
or dword [r14], 0x200000
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x200000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe770]
mov r8d, 7
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093c0d
cmp byte [r15 + 8], 0xb
jne 0x140093bcf
test r12b, r12b
je 0x1400940c1
or dword [r14 + 4], 0x8000
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140093c00
or dword [r14], 0x100000
cmp word [rbp + 0xe], 0
je 0x140093bf4
lea rcx, [rbp + 0xe]
call fcn.140014570
mov dword [r14 + 0x7c], eax
jmp case.0x140094f3f.2
or eax, 0xffffffff
mov dword [r14 + 0x7c], eax
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x100000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe780]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093c31
test r12b, r12b
je 0x140093c49
or dword [r14], 0x10000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe790]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093c56
test r12b, r12b
je 0x140093c25
or dword [r14 + 4], 0x10000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe7a0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093c7e
test r12b, r12b
je 0x140093f31
or dword [r14], 0x20000
jmp case.0x140094f3f.2
lea rdx, [0x1400eb4a8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093ca5
neg r12b
sbb eax, eax
add eax, 4
mov dword [r14 + 0x19c], eax
jmp case.0x140094f3f.2
lea rdx, [0x1400fe618]
mov r8d, 8
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093d1d
cmp word [rbp + 0x10], ax
lea rcx, [rbp + 0x10]
je 0x140093cd8
call fcn.140014570
test eax, eax
jne 0x140093cd8
test r12b, r12b
sete r12b
mov rcx, qword [r15]
test rcx, rcx
je 0x140093cf0
test r12b, r12b
mov edx, ebx
sete dl
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x140093cfc
test r12b, r12b
je 0x140093d0b
or dword [r14], 0x8000000
test r12b, r12b
je 0x140093d13
or byte [r15 + 9], 0x10
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x8000000
and byte [r15 + 9], 0xef
jmp case.0x140094f3f.2
lea rdx, [0x1400fe7b0]
mov r8d, 6
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093d98
cmp word [rbp + 0xc], ax
lea rcx, [rbp + 0xc]
je 0x140093d50
call fcn.140014570
test eax, eax
jne 0x140093d50
test r12b, r12b
sete r12b
mov rcx, qword [r15]
test rcx, rcx
je 0x140093d6b
mov edx, 4
test r12b, r12b
cmovne edx, ebx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x140093d78
test r12b, r12b
je 0x140093d87
or dword [r14 + 4], 0x10000000
test r12b, r12b
je 0x140093d8e
or byte [r15 + 9], 8
jmp case.0x140094f3f.2
or dword [r14], 0x10000000
and byte [r15 + 9], 0xf7
jmp case.0x140094f3f.2
lea rdx, [0x1400fe7c0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093e20
movzx eax, byte [r15 + 8]
dec eax
cmp eax, 0x12
ja case.0x140094f3f.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x9618c]
add rcx, r8
jmp rcx
test r12b, r12b
je 0x140093de0
or dword [r14 + 4], 0x1f
jmp case.0x140094f3f.2
and dword [r14], 0xffffffec
or dword [r14], 0xc
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140093dff
or dword [r14 + 4], 0x100080
jmp case.0x140094f3f.2
or dword [r14], 0x80
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140094390
or dword [r14], 0x200
jmp case.0x140094f3f.2
lea rdx, [0x1400fe7d0]
mov r8d, 0xa
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093efb
movzx eax, byte [r15 + 8]
add rbp, 0x14
cmp al, 0xa
jb 0x140093ebb
cmp al, 0xb
jbe 0x140093e56
cmp al, 0x12
je 0x140093e56
cmp al, 0x19
jne 0x140093ebb
test r12b, r12b
je 0x140093eae
mov rcx, rbp
call fcn.1400ad170
mov dword [r14 + 0x74], eax
cmp eax, 0xffffffff
jne case.0x140094f3f.2
xor edx, edx
mov rcx, rbp
lea r8d, [rdx + 0x10]
call fcn.1400caae0
movzx ecx, ax
shr cx, 8
movzx edi, cl
mov ecx, eax
movzx eax, al
shr ecx, 0x10
shl edi, 8
shl eax, 0x10
movzx edx, cl
or edi, edx
or edi, eax
mov dword [r14 + 0x74], edi
mov rdi, qword [rsp + 0x128]
jmp case.0x140094f3f.2
mov dword [r14 + 0x74], 0xff000000
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140093eec
and byte [r15 + 9], 0xdf
lea rdx, [0x1400eb428]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093ee2
or byte [r15 + 9], 0x40
jmp case.0x140094f3f.2
and byte [r15 + 9], 0xbf
jmp case.0x140094f3f.2
and byte [r15 + 9], 0xbf
or byte [r15 + 9], 0x20
jmp case.0x140094f3f.2
lea rdx, [0x1400fe7a0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
je 0x140093c69
lea rdx, [0x1400fe6d8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140093f3e
mov byte [r14 + 0x1a7], r12b
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x20000
jmp case.0x140094f3f.2
lea rdx, [0x1400eb2e8]
mov r8d, 4
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093f8b
cmp word [rbp + 8], ax
lea rdx, [rbp + 8]
jne 0x140093f6d
mov rax, rbx
mov qword [r14 + 0x20], rbx
jmp case.0x140094f3f.2
lea rcx, [0x1401181e0]
mov r9d, 3
xor r8d, r8d
call fcn.14002ddc0
mov qword [r14 + 0x20], rax
jmp case.0x140094f3f.2
lea rdx, [0x1400eb2b0]
mov r8d, 4
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140093fec
cmp byte [r15 + 8], 0xa
jne 0x140093fce
lea rdx, [0x1400fe7e8]
lea rcx, [rbp + 8]
call fcn.1400c900c
mov ecx, 2
test eax, eax
cmovne ecx, ebx
mov dword [r14 + 0x14], ecx
jmp case.0x140094f3f.2
test r12b, r12b
je case.0x140094f3f.2
lea rcx, [rbp + 8]
call fcn.140014570
mov dword [r14 + 0x84], eax
jmp case.0x140094f3f.2
lea rdx, [0x1400fe7f8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009400c
mov dword [r14 + 0x14], 1
jmp case.0x140094f3f.2
lea rdx, [0x1400eb340]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009402c
mov dword [r14 + 0x14], 3
jmp case.0x140094f3f.2
lea rdx, [0x1400fe808]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009404c
mov dword [r14 + 0x14], 4
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xa
jne 0x14009410c
lea rdx, [0x1400eccf8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094080
test r12b, r12b
je 0x140094535
or dword [r14 + 4], 0x4000
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xa
jne 0x14009410c
lea rdx, [0x1400eccd8]
mov r8d, 6
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x1400940d9
lea rcx, [rbp + 0xc]
lea rdx, [0x1400eccf8]
call fcn.1400c900c
test eax, eax
jne 0x1400940cd
test r12b, r12b
je 0x140093bc2
or dword [r14], 0x8000
jmp case.0x140094f3f.2
mov byte [r14 + 0x1a8], r12b
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xa
jne 0x14009410c
lea rdx, [0x1400fe818]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009410c
test r12b, r12b
je 0x140094102
or dword [r14 + 0x10], 1
jmp case.0x140094f3f.2
and dword [r14 + 0x10], 0xfffffffe
jmp case.0x140094f3f.2
lea rdx, [0x1400e63b0]
mov r8d, 5
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140094137
lea rcx, [rbp + 0xa]
call fcn.140014570
mov dword [r14 + 0x78], eax
jmp case.0x140094f3f.2
lea rdx, [0x1400fe824]
mov r8d, 2
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140094281
lea rbx, [rbp + 4]
nop dword [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14009416f
cmp ax, 9
jne 0x140094175
add rbx, 2
jmp 0x140094160
movzx eax, word [rbx]
test ax, ax
je case.0x140094f3f.2
cmp ax, 0x2d
je case.0x140094f3f.2
cmp ax, 0x2b
jne 0x140094195
add rbx, 2
cmp word [rbx], 0x30
jne 0x1400941c3
movzx eax, word [rbx + 2]
cmp ax, 0x78
je 0x1400941ab
cmp ax, 0x58
jne 0x1400941c3
movzx ecx, word [rbx + 4]
call fcn.1400ca874
test eax, eax
je 0x1400941c3
mov eax, 1
add rbx, 4
jmp 0x1400941c5
xor eax, eax
movzx edi, word [rbx]
xor ecx, ecx
movsxd rsi, eax
cmp edi, 0x20
je 0x140094230
cmp edi, 9
je 0x140094230
test edi, edi
je 0x14009424f
cmp edi, 0x2e
je 0x140093ea1
test rsi, rsi
je 0x140094211
movzx ecx, di
call fcn.1400cade4
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x140094219
movzx ecx, di
call fcn.14000c1f0
mov rdi, qword [rsp + 0x128]
jmp case.0x140094f3f.2
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1400941fc
movzx edi, word [rbx + 2]
add rbx, 2
mov ecx, 1
cmp edi, 0x20
jne 0x1400941d2
nop dword [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14009423f
cmp ax, 9
jne 0x140094245
add rbx, 2
jmp 0x140094230
cmp word [rbx], 0
jne 0x140093ea1
test ecx, ecx
je 0x140093ea1
lea rcx, [rbp + 4]
call fcn.14001bb70
mov rdi, qword [rsp + 0x128]
test r12b, r12b
je 0x140094276
or dword [r14 + 0x10], eax
jmp case.0x140094f3f.2
not eax
and dword [r14 + 0x10], eax
jmp case.0x140094f3f.2
lea rdx, [0x1400fe830]
mov r8d, 9
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x1400942b7
test r12b, r12b
je case.0x140094f3f.2
lea rcx, [rbp + 0x12]
call fcn.14001bb70
mov ecx, eax
mov qword [r14 + 0x18], rcx
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 4
jne 0x1400942e3
lea rdx, [0x1400e6158]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x1400942e3
test r12b, r12b
je 0x140094e4b
or dword [r14], 1
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 5
jne 0x14009430f
lea rdx, [0x1400fe848]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009430f
test r12b, r12b
je 0x140094891
or dword [r14], 6
jmp case.0x140094f3f.2
lea rdx, [0x1400ec408]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009439d
movzx ecx, byte [r15 + 8]
sub ecx, 9
je 0x14009452c
dec ecx
je 0x140094387
dec ecx
je 0x140094374
dec ecx
jne case.0x140094f3f.2
mov rcx, qword [r15]
test rcx, rcx
je 0x14009435f
movzx r8d, r12b
xor r9d, r9d
mov edx, 0xcf
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x140094f3f.2
test r12b, r12b
je 0x1400943f5
or dword [r14], 0x800
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140094566
or dword [r14 + 4], 8
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140093e14
or dword [r14 + 4], 0x200
jmp case.0x140094f3f.2
lea rdx, [0x1400fe858]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094402
movzx ecx, byte [r15 + 8]
sub ecx, 9
je 0x14009435f
dec ecx
je 0x1400943e2
sub ecx, 2
je 0x140094ad1
cmp ecx, 2
jne case.0x140094f3f.2
test r12b, r12b
je case.0x140094e87.11
or dword [r14], 2
jmp case.0x140094f3f.2
test r12b, r12b
je 0x140094ada
or dword [r14 + 4], 4
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x800
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xc
jne 0x140094494
lea rdx, [0x1400fe868]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x14009443e
test r12b, r12b
je 0x140094431
or dword [r14], 0x1000
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x1000
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xc
jne 0x140094494
lea rdx, [0x1400fe880]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094467
test r12b, r12b
je 0x1400944b9
or byte [r15 + 9], 0x80
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xc
jne 0x140094494
lea rdx, [0x1400fe890]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094494
test r12b, r12b
je 0x1400939c6
and byte [r15 + 9], 0xfd
jmp case.0x140094f3f.2
movzx eax, byte [r15 + 8]
cmp al, 0xa
je 0x1400944a1
cmp al, 0xb
jne 0x1400944c3
lea rdx, [0x1400fe8a8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x1400944c3
test r12b, r12b
je 0x14009445d
and byte [r15 + 9], 0x7f
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xc
jne 0x1400944f2
lea rdx, [0x1400e65b0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x1400944f2
test r12b, r12b
je 0x140094584
or dword [r14], 0x2000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe8b8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094541
movzx eax, byte [r15 + 8]
cmp al, 0xc
jne 0x140094520
test r12b, r12b
je 0x1400947be
or dword [r14], 0x10
jmp case.0x140094f3f.2
cmp al, 8
je 0x14009452c
cmp al, 7
jne case.0x140094f3f.2
test r12b, r12b
je 0x140094073
or dword [r14], 0x4000
jmp case.0x140094f3f.2
lea rdx, [0x1400fe8d0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094591
movzx eax, byte [r15 + 8]
cmp al, 0xc
jne 0x14009456f
test r12b, r12b
je 0x14009437d
or dword [r14], 8
jmp case.0x140094f3f.2
cmp al, 8
je case.0x140093dcf.3
cmp al, 7
jne case.0x140094f3f.2
jmp case.0x140093dcf.3
or dword [r14 + 4], 0x2000
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0xc
jne 0x14009463e
lea rdx, [0x1400fe8e8]
mov r8d, 8
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x14009463e
movzx eax, word [rbp + 0x10]
mov word [r14 + 0x1a0], ax
test r12b, r12b
je 0x140094613
or dword [r14], 0x20
mov rcx, qword [r15]
test rcx, rcx
je 0x140094631
xor r9d, r9d
mov edx, 0xcc
test ax, ax
jne 0x1400945fc
mov r8d, 0x25cf
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x118], 1
jmp case.0x140094f3f.2
movzx r8d, ax
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x118], 1
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x20
mov rcx, qword [r15]
test rcx, rcx
je 0x140094631
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x118], 1
jmp case.0x140094f3f.2
lea rdx, [0x1400fe900]
mov r8d, 5
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x14009468d
test r12b, r12b
je 0x140094680
cmp word [rbp + 0xa], ax
je 0x140094674
lea rcx, [rbp + 0xa]
call fcn.140014570
mov dword [r14 + 0x78], eax
jmp case.0x140094f3f.2
or eax, 0xffffffff
mov dword [r14 + 0x78], eax
jmp case.0x140094f3f.2
mov dword [r14 + 0x78], 0x80000000
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 8
jne 0x1400946b9
lea rdx, [0x1400fe910]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x1400946b9
test r12b, r12b
je 0x140094e4b
or dword [r14], 1
jmp case.0x140094f3f.2
lea rdx, [0x1400e3348]
mov r8d, 4
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x14009472d
movzx eax, byte [r15 + 8]
cmp al, 7
jb case.0x140094f3f.2
cmp al, 8
jbe 0x140094c00
cmp al, 9
je 0x1400943d0
cmp al, 0xa
jne case.0x140094f3f.2
test r12b, r12b
je 0x140094723
lea rcx, [rbp + 8]
lea rdx, [0x1400eccb8]
call fcn.1400c900c
mov ecx, SafeArrayAllocDescriptor
test eax, eax
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovne ecx, eax
or dword [r14], ecx
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x30
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x10
jne 0x140094761
lea rdx, [0x1400fe920]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094761
test r12b, r12b
je 0x140094911
mov eax, dword [r14]
and eax, 0xffffffef
or eax, 0x40
mov dword [r14], eax
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x11
jne 0x14009482b
lea rdx, [0x1400fe930]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094792
test r12b, r12b
je 0x1400944b9
or byte [r15 + 9], 0x80
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x11
jne 0x14009482b
lea rdx, [0x1400fe940]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x1400947c8
test r12b, r12b
je 0x1400947be
or dword [r14], 0x10
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x10
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x11
jne 0x14009482b
lea rdx, [0x1400fe950]
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x14009482b
mov byte [r14 + 0x1a4], 1
test r12b, r12b
je 0x140094819
or dword [r14], 1
cmp word [rbp + 0x18], ax
lea rcx, [rbp + 0x18]
setne al
mov byte [r14 + 0x1a5], al
call fcn.140014570
mov dword [r14 + 0x48], eax
jmp case.0x140094f3f.2
or dword [r14 + 4], 1
mov dword [r14 + 0x48], 0xffffffff
jmp case.0x140094f3f.2
lea rdx, [0x1400e6178]
mov r8d, 4
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x14009489b
movzx eax, byte [r15 + 8]
cmp al, 0x11
jne 0x140094868
test r12b, r12b
je case.0x140094f3f.2
lea rcx, [rbp + 8]
call fcn.140014570
mov dword [r14 + 0x4c], eax
jmp case.0x140094f3f.2
cmp al, 0xb
jne case.0x140094f3f.2
movzx ecx, word [rbp + 8]
call fcn.14000c1f0
cmp ax, 0x53
jne case.0x140094f3f.2
test r12b, r12b
je 0x140094891
or dword [r14], 6
jmp case.0x140094f3f.2
or dword [r14 + 4], 6
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x11
jne 0x14009491b
lea rdx, [0x1400fe970]
mov r8d, 4
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x1400948d6
test r12b, r12b
je case.0x140094f3f.2
lea rcx, [rbp + 8]
call fcn.140014570
mov dword [r14 + 0x50], eax
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x11
jne 0x14009491b
lea rdx, [0x1400fe980]
mov r8d, 5
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x14009491b
test r12b, r12b
je 0x140094911
or dword [r14], 0x40
lea rcx, [rbp + 0xa]
call fcn.140014570
mov dword [r14 + 0x54], eax
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x40
jmp case.0x140094f3f.2
lea rdx, [0x1400e3828]
mov r8d, 7
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x1400949c0
cmp byte [r15 + 8], 0x11
jne case.0x140094f3f.2
test r12b, r12b
je 0x140094feb
mov dword [r14 + 0x58], 0xffffffff
movzx ecx, word [rbp + 0xe]
call fcn.14000c1f0
movzx edx, ax
cmp edx, 0x42
je 0x14009498e
cmp edx, 0x4c
je 0x140094984
cmp edx, 0x52
je 0x14009497a
cmp edx, 0x54
jne 0x140094996
mov dword [r14 + 0x58], ebx
jmp 0x140094996
mov dword [r14 + 0x58], 3
jmp 0x140094996
mov dword [r14 + 0x58], 1
jmp 0x140094996
mov dword [r14 + 0x58], 2
mov eax, dword [r14 + 0x58]
test eax, eax
jns 0x1400949ae
or dword [r14], 0x100
mov dword [r14 + 0x58], ebx
jmp case.0x140094f3f.2
inc eax
or dword [r14], 0x100
mov dword [r14 + 0x58], eax
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x11
jne 0x140094a9b
lea rdx, [0x1400fe990]
mov r8d, 5
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140094a9b
test r12b, r12b
je case.0x140094f3f.2
movzx ebx, word [rbp + 0xa]
test bx, bx
je case.0x140094f3f.2
lea rdx, [rbp + 0xc]
lea rcx, [0x1401181e0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
call fcn.14002de40
mov r11, rax
test rax, rax
je case.0x140094f3f.2
cmp byte [rax + 0x23], 0
jne 0x140094a3b
mov r11, qword [rax + 0x10]
test byte [r11 + 0x22], 2
jne case.0x140094f3f.2
mov eax, dword [rsi + 0x20]
lea edi, [rax - 1]
movsxd rcx, edi
cmp edi, eax
jae 0x140093ea1
lea r8, [rcx + rcx*4]
shl r8, 3
nop
mov rdx, qword [rsi + 0x28]
cmp qword [rdx + r8 + 0x10], r11
jne 0x140094a83
lea rcx, [rdi + rdi*4]
lea rax, [rdx + rcx*8]
cmp bx, 0x31
jne 0x140094a7f
mov qword [r14 + 0x60], rax
jmp 0x140094a83
mov qword [r14 + 0x68], rax
dec edi
sub r8, 0x28
cmp edi, dword [rsi + 0x20]
jb 0x140094a60
mov rdi, qword [rsp + 0x128]
jmp case.0x140094f3f.2
lea rdx, [0x1400fe9a0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094ae3
movzx eax, byte [r15 + 8]
cmp al, 0x11
jne 0x140094ac9
test r12b, r12b
je case.0x140094e87.11
or dword [r14], 2
jmp case.0x140094f3f.2
cmp al, 0x12
jne case.0x140094f3f.2
test r12b, r12b
je 0x1400943eb
or dword [r14], 4
jmp case.0x140094f3f.2
lea rdx, [0x1400fe9b8]
mov r8d, 5
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140094bb8
test r12b, r12b
je case.0x140094f3f.2
cmp word [rbp + 0xa], ax
je case.0x140094f3f.2
movzx eax, byte [r15 + 8]
cmp al, 0xd
je 0x140094b5e
cmp al, 0xe
je 0x140094b5e
lea rcx, [rbp + 0xa]
mov byte [r14 + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 1
call fcn.140014570
lea rcx, [rbp + 0xc]
mov edx, 0x2d
mov dword [r14 + 0x40], eax
call fcn.1400ca024
test rax, rax
je case.0x140094f3f.2
lea rcx, [rax + 2]
call fcn.140014570
mov dword [r14 + 0x44], eax
jmp case.0x140094f3f.2
lea rdx, [r14 + 0x174]
lea rcx, [rbp + 0xa]
call fcn.1400ab6e0
mov dword [r14 + 0x198], eax
test eax, eax
je 0x140093ea1
mov rcx, qword [r15]
test rcx, rcx
je 0x140093ea1
cmp byte [r15 + 8], 0xd
mov r8d, eax
mov edx, 0x1012
mov eax, 0x1004
lea r9, [r14 + 0x174]
cmove edx, eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, qword [rsp + 0x128]
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x12
jne 0x140094be4
lea rdx, [0x1400fe9c8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094be4
test r12b, r12b
je 0x140094e4b
or dword [r14], 1
jmp case.0x140094f3f.2
lea rdx, [0x1400fe9d8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094c2f
movzx eax, byte [r15 + 8]
cmp al, 0x13
jne 0x140094c15
test r12b, r12b
je 0x140094feb
or dword [r14], 0x100
jmp case.0x140094f3f.2
cmp al, 0xb
jne case.0x140094f3f.2
test r12b, r12b
je 0x140094e4b
or dword [r14], 1
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x13
jne 0x140094c63
lea rdx, [0x1400eb490]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094c63
test r12b, r12b
je case.0x140094e87.11
or dword [r14], 2
or dword [r14 + 4], 0x80
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 0x18
jne 0x140094cbd
lea rdx, [0x1400e68b8]
mov r8d, 5
mov rcx, rbp
call fcn.1400c9264
test eax, eax
jne 0x140094cbd
mov rcx, qword [0x1401167a0]
lea r8, [rsp + 0x80]
lea rdx, [rbp + 0xa]
call qword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [r14 + 0x1ac], ax
test ax, ax
jne 0x140093ea1
lea r8, [rbp + 0xa]
lea rdx, [0x1400fe9e8]
jmp 0x140095add
lea rdx, [0x1400ecca0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094dad
movzx eax, byte [r15 + 8]
test r12b, r12b
je 0x140094d30
cmp al, 1
je 0x140094d22
cmp al, 2
jbe case.0x140094f3f.2
cmp al, 6
jbe 0x140094d16
cmp al, 0xc
je 0x140094d08
cmp al, 0x11
jne case.0x140094f3f.2
or dword [r14], 8
or dword [r14 + 4], 4
jmp case.0x140094f3f.2
or dword [r14], 1
or dword [r14 + 4], 2
jmp case.0x140094f3f.2
or dword [r14], 0x300
jmp case.0x140094f3f.2
or dword [r14], 1
or dword [r14 + 4], 0x1e
jmp case.0x140094f3f.2
cmp al, 1
je case.0x140094f3f.1
cmp al, 2
jbe case.0x140094f3f.2
cmp al, 6
jbe 0x140094d5e
cmp al, 0xc
je 0x140094e4b
cmp al, 0x11
jne case.0x140094f3f.2
or dword [r14 + 4], 8
jmp case.0x140094f3f.2
mov rcx, qword [r15]
test rcx, rcx
je 0x140094d8a
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x140094f3f.2
or dword [r14 + 4], eax
jmp case.0x140094f3f.2
mov ecx, dword [r14]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
jne case.0x140094f3f.2
and ecx, 0xfffffcff
mov dword [r14], ecx
jmp case.0x140094f3f.2
lea rdx, [0x1400e1ad0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140094eff
movzx eax, byte [r15 + 8]
dec eax
test r12b, r12b
je 0x140094e6a
cmp eax, 0x16
ja case.0x140094f3f.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x961d8]
add rcx, r8
jmp rcx
or dword [r14 + 4], 8
or dword [r14], 4
jmp case.0x140094f3f.2
or dword [r14 + 4], 0xc
jmp case.0x140094f3f.2
or dword [r14], 2
or dword [r14 + 4], 0x1d
jmp case.0x140094f3f.2
or dword [r14], 0x200
or dword [r14 + 4], 0x100
movzx eax, byte [r15 + 8]
mov ecx, dword [r14]
cmp al, 5
je 0x140094e3c
cmp al, 6
jne case.0x140094f3f.2
or ecx, 0x20
mov dword [r14], ecx
jmp case.0x140094f3f.2
or dword [r14], 2
or dword [r14 + 4], 1
jmp case.0x140094f3f.2
or dword [r14], 0x282
jmp case.0x140094f3f.2
or dword [r14], 0x20
jmp case.0x140094f3f.2
cmp eax, 0x12
ja case.0x140094f3f.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x96234]
add rcx, r8
jmp rcx
or dword [r14 + 4], 0x20
jmp case.0x140094f3f.2
or dword [r14], 4
or dword [r14 + 4], 8
jmp case.0x140094f3f.2
mov rcx, qword [r15]
test rcx, rcx
je 0x140094ed1
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x140094f3f.2
or dword [r14 + 4], 0x200
jmp case.0x140094f3f.2
mov ecx, dword [r14]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x140094f3f.2
btr ecx, 9
mov dword [r14], ecx
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x82
jmp case.0x140094f3f.2
lea rdx, [0x1400e1ae0]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140095019
test r12b, r12b
je 0x140094f9a
movzx eax, byte [r15 + 8]
dec eax
cmp eax, 0x12
ja case.0x140094f3f.2
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x96280]
add rcx, r8
jmp rcx
or dword [r14 + 4], 4
or dword [r14], 8
jmp case.0x140094f3f.2
or dword [r14 + 4], 0x200
or dword [r14], 0x100
movzx eax, byte [r15 + 8]
mov ecx, dword [r14 + 4]
cmp al, 5
je 0x140094f73
cmp al, 6
jne case.0x140094f3f.2
or ecx, 0x20
mov dword [r14 + 4], ecx
jmp case.0x140094f3f.2
or dword [r14 + 4], 3
jmp case.0x140094f3f.2
or dword [r14], 0x280
or dword [r14 + 4], 2
jmp case.0x140094f3f.2
movzx eax, byte [r15 + 8]
cmp al, 3
jb case.0x140094f3f.2
cmp al, 6
jbe 0x140094fc8
cmp al, 0x11
je case.0x140094df1.16
cmp al, 0x13
jne case.0x140094f3f.2
or dword [r14 + 4], 0x80
jmp case.0x140094f3f.2
mov rcx, qword [r15]
test rcx, rcx
je 0x140094ff8
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x140094f3f.2
or dword [r14 + 4], 0x100
jmp case.0x140094f3f.2
mov ecx, dword [r14]
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je case.0x140094f3f.2
btr ecx, 8
mov dword [r14], ecx
jmp case.0x140094f3f.2
mov rbx, rbp
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14009502f
cmp ax, 9
jne 0x140095035
add rbx, 2
jmp 0x140095020
movzx eax, word [rbx]
test ax, ax
je 0x140095b5e
cmp ax, 0x2d
je 0x140095113
cmp ax, 0x2b
jne 0x140095055
add rbx, 2
cmp word [rbx], 0x30
jne 0x140095083
movzx eax, word [rbx + 2]
cmp ax, 0x78
je 0x14009506b
cmp ax, 0x58
jne 0x140095083
movzx ecx, word [rbx + 4]
call fcn.1400ca874
test eax, eax
je 0x140095083
mov eax, 1
add rbx, 4
jmp 0x140095085
xor eax, eax
movzx edi, word [rbx]
xor ecx, ecx
movsxd rsi, eax
cmp edi, 0x20
je 0x1400950e0
cmp edi, 9
je 0x1400950e0
test edi, edi
je 0x1400950fb
cmp edi, 0x2e
je 0x140095103
test rsi, rsi
je 0x1400950c2
movzx ecx, di
call fcn.1400cade4
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x1400950ca
movzx ecx, di
call fcn.14000c1f0
jmp 0x140095103
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1400950b8
movzx edi, word [rbx + 2]
add rbx, 2
mov ecx, 1
cmp edi, 0x20
jne 0x140095092
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x1400950ef
cmp ax, 9
jne 0x1400950f5
add rbx, 2
jmp 0x1400950e0
cmp word [rbx], 0
jne 0x140095103
test ecx, ecx
jne 0x140095b56
mov rdi, qword [rsp + 0x128]
mov rsi, qword [rsp + 0x110]
add rbp, 2
cmp word [rbp], 0
jne 0x1400951cd
test r12b, r12b
je 0x14009514d
mov rbx, qword [rsp + 0x138]
test rbx, rbx
je 0x14009514d
cmp byte [rbx + 0x23], 0
jne 0x140095140
mov rax, qword [rbx + 0x10]
jmp 0x140095143
mov rax, rbx
test byte [rax + 0x21], 2
jne 0x1400951d5
movzx ecx, word [rbp - 2]
call fcn.14000c1f0
movzx edx, ax
cmp edx, 0x43
je 0x140095195
cmp edx, 0x47
je 0x140095179
cmp edx, 0x56
jne 0x140095ad2
mov qword [r15 + 0x10], 0
jmp case.0x140094f3f.2
mov rcx, qword [r15 + 0x18]
test rcx, rcx
je 0x140095188
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [r15 + 0x18], 0
jmp case.0x140094f3f.2
test r12b, r12b
jne case.0x140094f3f.2
cmp byte [r15 + 8], 2
je case.0x140094f3f.2
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xff000000
je case.0x140094f3f.2
mov dword [rax], 0xff000000
mov byte [r14 + 0x1a3], 1
jmp case.0x140094f3f.2
mov rbx, qword [rsp + 0x138]
movzx ecx, word [rbp - 2]
call fcn.14000c1f0
movzx edx, ax
add edx, 0xffffffbd
cmp edx, 0x16
ja case.0x140095202.68
lea r8, [0x140000000]
movsxd rax, edx
mov ecx, dword [r8 + rax*4 + 0x962cc]
add rcx, r8
jmp rcx
movzx eax, byte [r15 + 8]
cmp al, 3
je 0x140095bb5
cmp al, 0x12
je 0x140095bb5
lea rcx, [0x1401181e0]
mov r9d, 4
mov r8, rbx
mov rdx, rbp
call fcn.140024f00
mov rdi, rax
test rax, rax
jne 0x140095255
lea rdx, [0x1400fded8]
mov rcx, rbp
call fcn.1400c900c
test eax, eax
jne 0x140095bac
or byte [r15 + 9], 1
movzx eax, byte [r15 + 8]
cmp al, 1
je 0x140095262
cmp al, 2
jne 0x140095269
or dword [r14], 0x100
lea rcx, [r15 + 0x18]
mov rdx, rdi
call fcn.140001930
mov rdi, qword [rsp + 0x128]
jmp case.0x140094f3f.2
cmp dword [r14 + 0x150], 0x32
jae case.0x140094f3f.2
mov rcx, rbp
call fcn.14001bb70
mov ecx, dword [r14 + 0x150]
mov dword [r14 + rcx*4 + 0x88], eax
inc dword [r14 + 0x150]
jmp case.0x140094f3f.2
cmp word [rbp], 0
je 0x140095ae9
lea rcx, [0x1401181e0]
mov r9d, 3
xor r8d, r8d
mov rdx, rbp
call fcn.14002ddc0
mov rdx, rax
test rax, rax
je 0x140095ae9
cmp byte [rax + 0x23], 0
jne 0x1400952ec
mov rdx, qword [rax + 0x10]
movzx ecx, byte [rdx + 0x22]
and cl, 0x22
cmp cl, 2
je 0x140095bf6
xor ecx, ecx
cmp dword [rsi + 0x20], ecx
jbe 0x140095324
mov rax, qword [rsi + 0x28]
add rax, 0x10
nop dword [rax + rax]
cmp qword [rax], rdx
je 0x140095bbe
inc ecx
add rax, 0x28
cmp ecx, dword [rsi + 0x20]
jb 0x140095310
mov qword [r15 + 0x10], rdx
jmp case.0x140094f3f.2
cmp byte [r15 + 8], 2
je case.0x140094f3f.2
mov rcx, rbp
call fcn.1400ad170
mov edi, eax
cmp eax, 0xffffffff
jne 0x140095374
xor edx, edx
mov rcx, rbp
lea r8d, [rdx + 0x10]
call fcn.1400caae0
movzx ecx, ax
shr cx, 8
movzx edi, cl
mov ecx, eax
movzx eax, al
shr ecx, 0x10
shl edi, 8
shl eax, 0x10
movzx edx, cl
or edi, edx
or edi, eax
mov rcx, qword [rsp + 0x30]
cmp dword [rcx], edi
jne 0x14009538a
lea rax, [r14 + 0x70]
cmp rcx, rax
jne 0x140093ea1
mov dword [rcx], edi
mov rdi, qword [rsp + 0x128]
mov byte [r14 + 0x1a3], 1
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
call fcn.14000c1f0
cmp ax, 0x50
jne 0x1400953e9
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x1400953d8
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xd0]
add ecx, eax
mov dword [r14 + 0x30], ecx
jmp case.0x140094f3f.2
mov rcx, rbp
call fcn.140014570
cmp byte [rsi + 0x108], 0
je 0x140095413
cmp eax, 0xffffffff
je 0x140095413
mov edx, dword [0x1401181bc]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r14 + 0x30], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
call fcn.14000c1f0
cmp ax, 0x50
jne 0x140095464
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x140095453
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xd4]
add ecx, eax
mov dword [r14 + 0x34], ecx
jmp case.0x140094f3f.2
mov rcx, rbp
call fcn.140014570
cmp byte [rsi + 0x108], 0
je 0x14009548e
cmp eax, 0xffffffff
je 0x14009548e
mov edx, dword [0x1401181bc]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [r14 + 0x34], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
cmp cx, 0x2b
jne 0x1400955d5
movzx ecx, word [rbp + 2]
lea rdi, [rbp + 2]
call fcn.14000c1f0
cmp ax, 0x4d
jne 0x1400954c8
mov esi, dword [rsi + 0xc0]
mov rbp, qword [rsp + 0x110]
jmp 0x1400954f9
mov rcx, rdi
call fcn.140014570
mov rbp, qword [rsp + 0x110]
cmp byte [rbp + 0x108], 0
mov esi, eax
je 0x1400954f9
mov edx, dword [0x1401181bc]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
movzx ebx, byte [r15 + 0xa]
mov rcx, rbp
movzx edx, bl
call fcn.14009d0b0
mov r11, rax
test rax, rax
je 0x14009559e
xor eax, eax
cmp dword [rbp + 0x20], eax
jbe 0x140095549
mov rcx, qword [rbp + 0x28]
movzx edi, byte [r15 + 0xb]
mov edx, dword [rbp + 0x20]
add rcx, 0xa
nop dword [rax]
cmp byte [rcx + 1], dil
jne 0x14009553c
cmp byte [rcx], bl
jne 0x14009553c
inc eax
add rcx, 0x28
dec rdx
jne 0x140095530
test eax, eax
jne 0x14009559e
mov rdx, qword [r11]
lea r8, [rsp + 0x48]
mov rcx, rbp
call fcn.14009d270
cmp dword [r14 + 0x2c], 0x80000000
mov edx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x4c]
mov rdi, qword [rsp + 0x128]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x3c], eax
lea eax, [rdx + rsi]
mov dword [r14 + 0x28], eax
jne case.0x140094f3f.2
mov rax, qword [rsp + 0x38]
shr rax, 0x20
add eax, dword [rbp + 0xc4]
mov dword [r14 + 0x2c], eax
jmp case.0x140094f3f.2
mov eax, dword [rbp + 0xd0]
mov rdi, qword [rsp + 0x128]
add eax, dword [rbp + 0xc8]
add eax, esi
cmp dword [r14 + 0x2c], 0x80000000
mov dword [r14 + 0x28], eax
jne case.0x140094f3f.2
mov eax, dword [rbp + 0xcc]
mov dword [r14 + 0x2c], eax
jmp case.0x140094f3f.2
call fcn.14000c1f0
cmp ax, 0x4d
jne 0x140095637
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x140095608
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xc0]
add ecx, eax
cmp dword [r14 + 0x2c], 0x80000000
mov dword [r14 + 0x28], ecx
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xdc]
add eax, dword [rsi + 0xc4]
mov dword [r14 + 0x2c], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
call fcn.14000c1f0
cmp ax, 0x50
jne 0x140095697
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x14009566e
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xc8]
add ecx, eax
cmp dword [r14 + 0x2c], 0x80000000
mov dword [r14 + 0x28], ecx
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xcc]
mov dword [r14 + 0x2c], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
call fcn.14000c1f0
cmp ax, 0x53
jne 0x1400956fd
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x1400956ce
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xe0]
add ecx, eax
cmp dword [r14 + 0x2c], 0x80000000
mov dword [r14 + 0x28], ecx
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xec]
add eax, dword [rsi + 0xc4]
mov dword [r14 + 0x2c], eax
jmp case.0x140094f3f.2
mov rcx, rbp
call fcn.140014570
cmp byte [rsi + 0x108], 0
je 0x140095722
mov edx, dword [0x1401181bc]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [r14 + 0x2c], 0x80000000
mov dword [r14 + 0x28], eax
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xdc]
add eax, dword [rsi + 0xc4]
mov dword [r14 + 0x2c], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
cmp cx, 0x2b
jne 0x140095887
movzx ecx, word [rbp + 2]
lea rdi, [rbp + 2]
call fcn.14000c1f0
cmp ax, 0x4d
jne 0x14009577a
mov esi, dword [rsi + 0xc4]
mov rbp, qword [rsp + 0x110]
jmp 0x1400957ab
mov rcx, rdi
call fcn.140014570
mov rbp, qword [rsp + 0x110]
cmp byte [rbp + 0x108], 0
mov esi, eax
je 0x1400957ab
mov edx, dword [0x1401181bc]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
movzx ebx, byte [r15 + 0xa]
mov rcx, rbp
movzx edx, bl
call fcn.14009d0b0
mov r11, rax
test rax, rax
je 0x140095850
xor eax, eax
cmp dword [rbp + 0x20], eax
jbe 0x1400957f9
mov rcx, qword [rbp + 0x28]
movzx edi, byte [r15 + 0xb]
mov edx, dword [rbp + 0x20]
add rcx, 0xa
nop
cmp byte [rcx + 1], dil
jne 0x1400957ec
cmp byte [rcx], bl
jne 0x1400957ec
inc eax
add rcx, 0x28
dec rdx
jne 0x1400957e0
test eax, eax
jne 0x140095850
mov rdx, qword [r11]
lea r8, [rsp + 0x68]
mov rcx, rbp
call fcn.14009d270
mov eax, dword [rsp + 0x6c]
mov edx, dword [rsp + 0x68]
mov rdi, qword [rsp + 0x128]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x40], edx
mov rax, qword [rsp + 0x40]
shr rax, 0x20
add eax, esi
cmp dword [r14 + 0x28], 0x80000000
mov dword [r14 + 0x2c], eax
jne case.0x140094f3f.2
mov eax, dword [rbp + 0xc0]
lea ecx, [rdx + rax]
mov dword [r14 + 0x28], ecx
jmp case.0x140094f3f.2
mov eax, dword [rbp + 0xd4]
mov rdi, qword [rsp + 0x128]
add eax, dword [rbp + 0xcc]
add eax, esi
cmp dword [r14 + 0x28], 0x80000000
mov dword [r14 + 0x2c], eax
jne case.0x140094f3f.2
mov eax, dword [rbp + 0xc8]
mov dword [r14 + 0x28], eax
jmp case.0x140094f3f.2
call fcn.14000c1f0
cmp ax, 0x4d
jne 0x1400958e9
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x1400958ba
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xc4]
add ecx, eax
cmp dword [r14 + 0x28], 0x80000000
mov dword [r14 + 0x2c], ecx
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xd8]
add eax, dword [rsi + 0xc0]
mov dword [r14 + 0x28], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
call fcn.14000c1f0
cmp ax, 0x50
jne 0x140095949
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x140095920
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xcc]
add ecx, eax
cmp dword [r14 + 0x28], 0x80000000
mov dword [r14 + 0x2c], ecx
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xc8]
mov dword [r14 + 0x28], eax
jmp case.0x140094f3f.2
movzx ecx, word [rbp]
call fcn.14000c1f0
cmp ax, 0x53
jne 0x1400959af
lea rcx, [rbp + 2]
call fcn.140014570
cmp byte [rsi + 0x108], 0
mov ecx, eax
je 0x140095980
mov edx, dword [0x1401181bc]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [rsi + 0xe4]
add ecx, eax
cmp dword [r14 + 0x28], 0x80000000
mov dword [r14 + 0x2c], ecx
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xe8]
add eax, dword [rsi + 0xc0]
mov dword [r14 + 0x28], eax
jmp case.0x140094f3f.2
mov rcx, rbp
call fcn.140014570
cmp byte [rsi + 0x108], 0
je 0x1400959d4
mov edx, dword [0x1401181bc]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [r14 + 0x28], 0x80000000
mov dword [r14 + 0x2c], eax
jne case.0x140094f3f.2
mov eax, dword [rsi + 0xd8]
add eax, dword [rsi + 0xc0]
mov dword [r14 + 0x28], eax
jmp case.0x140094f3f.2
mov rcx, rbp
call fcn.14001bba0
cvtsd2ss xmm1, xmm0
movss dword [r14 + 0x38], xmm1
jmp case.0x140094f3f.2
movzx ecx, word [rbp - 2]
call fcn.14000c1f0
cmp ax, 0x45
jne 0x140095ad2
mov rbx, rbp
nop dword [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140095a3f
cmp ax, 9
jne 0x140095a45
add rbx, 2
jmp 0x140095a30
movzx eax, word [rbx]
test ax, ax
je 0x140095ad2
cmp ax, 0x2d
je 0x140095ad2
cmp ax, 0x2b
jne 0x140095a61
add rbx, 2
cmp word [rbx], 0x30
jne 0x140095a8f
movzx eax, word [rbx + 2]
cmp ax, 0x78
je 0x140095a77
cmp ax, 0x58
jne 0x140095a8f
movzx ecx, word [rbx + 4]
call fcn.1400ca874
test eax, eax
je 0x140095a8f
mov eax, 1
add rbx, 4
jmp 0x140095a91
xor eax, eax
movzx edi, word [rbx]
xor ecx, ecx
movsxd rsi, eax
cmp edi, 0x20
je 0x140095b16
nop
cmp edi, 9
je 0x140095b16
test edi, edi
je 0x140095b31
cmp edi, 0x2e
je 0x140095ad2
test rsi, rsi
je 0x140095afc
movzx ecx, di
call fcn.1400cade4
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x140095b04
movzx ecx, di
call fcn.14000c1f0
lea rdx, [0x1400e4d50]
lea r8, [rbp - 2]
lea rcx, [0x1401181e0]
call fcn.1400401e0
mov rax, qword [rsp + 0x128]
mov word [rax], r13w
xor eax, eax
jmp 0x140096171
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x140095aca
movzx edi, word [rbx + 2]
add rbx, 2
mov ecx, 1
cmp edi, 0x20
jne 0x140095aa0
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140095b25
cmp ax, 9
jne 0x140095b2b
add rbx, 2
jmp 0x140095b16
cmp word [rbx], 0
jne 0x140095ad2
test ecx, ecx
je 0x140095ad2
mov rcx, rbp
call fcn.14001bb70
mov rdi, qword [rsp + 0x128]
test r12b, r12b
je 0x140095b50
or dword [r14 + 8], eax
jmp case.0x140094f3f.2
or dword [r14 + 0xc], eax
jmp case.0x140094f3f.2
mov rdi, qword [rsp + 0x128]
mov rcx, rbp
call fcn.14001bb70
test r12b, r12b
je 0x140095b70
or dword [r14], eax
jmp case.0x140094f3f.2
or dword [r14 + 4], eax
mov word [rdi], r13w
mov rbp, rdi
nop dword [rax + rax]
movzx eax, word [rbp]
cmp ax, 0x20
je 0x140095b90
cmp ax, 9
jne 0x140095b96
add rbp, 2
jmp 0x140095b80
cmp word [rbp], 0
je 0x140095c02
mov rsi, qword [rsp + 0x110]
xor ebx, ebx
jmp 0x1400938e3
lea rdx, [0x1400e4448]
jmp 0x140095bc5
lea rdx, [0x1400fea20]
jmp 0x140095bc5
lea rdx, [0x1400feb00]
mov rax, qword [rsp + 0x128]
mov word [rax], r13w
cmp qword [r15], 0
je 0x140095be1
call fcn.14003f550
jmp 0x140096171
lea r8, [rbp - 2]
lea rcx, [0x1401181e0]
call fcn.1400401e0
jmp 0x140096171
lea rdx, [0x1400feaa0]
jmp 0x140095ad9
lea r13, [0x140000000]
mov r12d, 1
mov rcx, qword [r15]
test rcx, rcx
je 0x14009616c
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [r14 + 4]
mov r8d, dword [r14]
mov ecx, edx
mov edi, eax
mov esi, eax
not ecx
or edi, r8d
and edi, ecx
movzx ecx, byte [r15 + 8]
add ecx, 0xfffffffe
cmp ecx, 8
ja case.0x140095c59.9
movsxd rax, ecx
mov ecx, dword [r13 + rax*4 + 0x96328]
add rcx, r13
jmp rcx
mov eax, edi
xor eax, esi
and eax, 0xf
xor edi, eax
jmp case.0x140095c59.9
and edi, 0xfffffff7
or edi, 7
jmp case.0x140095c59.9
test dil, 1
je 0x140095c82
and edi, 0xfffffff1
or edi, 1
jmp 0x140095c85
and edi, 0xfffffff0
mov rbp, qword [rsp + 0x110]
mov ebx, dword [rsp + 0x130]
mov eax, dword [rbp + 0x30]
cmp ebx, eax
jne 0x140095cc8
test dl, 1
je case.0x140095c59.9
mov rcx, qword [rbp + 8]
xor r9d, r9d
mov r8, r12
mov edx, 0x401
mov dword [rbp + 0x30], 0xffffffff
call qword [sym.imp.USER32.dll_SendMessageW]
or esi, 1
jmp case.0x140095c59.9
test r8b, 1
je case.0x140095c59.9
cmp eax, dword [rbp + 0x20]
jae 0x140095d15
mov rcx, qword [rbp + 0x28]
lea rax, [rax + rax*4]
mov edx, 0xfffffff0
mov rcx, qword [rcx + rax*8]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [rbp + 0x30]
mov r9, r12
mov r8d, eax
lea rax, [rcx + rcx*4]
mov rcx, qword [rbp + 0x28]
mov rcx, qword [rcx + rax*8]
and r8d, 0xfffe
mov edx, 0xf4
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 8]
lea r8d, [rbx + 3]
xor r9d, r9d
mov edx, 0x401
mov dword [rbp + 0x30], ebx
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x140095c59.9
mov eax, edi
and eax, 6
cmp al, 6
jne 0x140095d41
and edi, 0xfffffff6
or edi, 6
jmp case.0x140095c59.9
and edi, 0xfffffff3
or edi, 3
jmp case.0x140095c59.9
and edi, 0xfffffff9
or edi, 9
jmp case.0x140095c59.9
test dil, 1
je 0x140095d5f
and edi, 0xfffffff1
or edi, 1
jmp case.0x140095c59.9
and edi, 0xfffffff2
or edi, 2
jmp case.0x140095c59.9
mov eax, dword [r14 + 0x14]
cmp eax, 0xffffffff
je case.0x140095c59.9
mov rcx, qword [r15]
mov r8d, eax
xor r9d, r9d
mov edx, 0x108e
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11d, dword [r14 + 0x14]
cmp r11d, 4
je case.0x140095c59.9
and edi, 0xfffffffc
or edi, r11d
movsxd rax, dword [r14 + 0x78]
test eax, eax
je 0x140095dfe
movzx ecx, byte [r15 + 8]
cmp cl, 0xc
jne 0x140095dd6
mov rcx, qword [r15]
xor r9d, r9d
mov edx, 0xc5
test eax, eax
jns 0x140095df5
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r14 + 0x78], 0x80000000
je 0x140095dfe
test dil, 4
jne 0x140095dfe
and edi, 0xffefff7f
jmp 0x140095dfe
cmp cl, 0xf
jne 0x140095dfe
mov rcx, qword [r15]
mov edx, 0x403
test eax, eax
jns 0x140095def
xor r9d, r9d
xor r8d, r8d
jmp 0x140095df8
mov r9d, 6
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
xor bpl, bpl
cmp esi, edi
je 0x140095ef1
movzx eax, byte [r15 + 8]
xor bl, bl
mov bpl, 1
cmp al, 4
je 0x140095e9c
cmp al, 9
je 0x140095e44
cmp al, 0x12
jne 0x140095eb1
mov rcx, qword [r15]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x128], eax
jmp 0x140095eb1
mov eax, edi
and eax, 0x100000
je 0x140095e85
bt esi, 0x14
jb 0x140095e85
cmp dword [r14 + 0x7c], 0
jge 0x140095e77
mov rcx, qword [r15]
lea rdx, [rsp + 0x58]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [rsp + 0x60]
sub edx, dword [rsp + 0x58]
lea eax, [rdx + rdx*2]
mov dword [r14 + 0x7c], eax
movsxd r8, dword [r14 + 0x7c]
xor r9d, r9d
mov edx, 0x194
jmp 0x140095ea8
test eax, eax
jne 0x140095eb1
bt esi, 0x14
jae 0x140095eb1
xor r9d, r9d
mov edx, 0x194
xor r8d, r8d
jmp 0x140095ea8
movzx r8d, di
mov r9, r12
mov edx, 0xf4
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r15]
mov r8d, edi
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x140095ed8
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140095ef9
mov rcx, qword [r15]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
movzx ebx, bl
cmp eax, esi
cmovne ebx, r12d
jmp 0x140095ef9
movzx ebx, byte [rsp + 0x118]
mov rcx, qword [r15]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r12d, dword [r14 + 8]
mov ecx, dword [r14 + 0xc]
or r12d, eax
not ecx
mov r13d, eax
and r12d, ecx
cmp eax, r12d
je 0x140095f70
test bpl, bpl
jne 0x140095f29
mov bpl, 1
xor bl, bl
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r15]
mov r8d, r12d
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x140095f50
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140095f70
mov rcx, qword [r15]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
movzx ebx, bl
cmp eax, r13d
mov r13d, 1
cmovne ebx, r13d
jmp 0x140095f76
mov r13d, 1
cmp byte [r15 + 8], 0xa
jne 0x140095fd9
mov rcx, qword [r15]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, rax
mov eax, dword [r14 + 0x10]
cmp r12d, eax
je 0x140095fd9
test bpl, bpl
jne 0x140095fa7
mov bpl, 1
xor bl, bl
mov rcx, qword [r15]
mov r9, rax
xor r8d, r8d
mov edx, 0x1036
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r15]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
movzx ebx, bl
cmp eax, r12d
cmovne ebx, r13d
test bpl, bpl
je 0x140095ff5
mov eax, dword [rsp + 0x118]
test bl, bl
movzx eax, al
cmovne eax, r13d
mov dword [rsp + 0x118], eax
movzx eax, byte [r15 + 8]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x140096019.13
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9634c]
add rcx, rdx
jmp rcx
mov rdx, r14
mov rcx, r15
call fcn.14009c740
jmp case.0x140096019.13
mov rdx, r14
mov rcx, r15
call fcn.14009c820
test dword [r14 + 4], 0x100
je case.0x140096019.13
xor r9d, r9d
mov edx, 0x41d
jmp 0x1400960fe
mov rdx, r14
mov rcx, r15
call fcn.14009c990
jmp case.0x140096019.13
mov rdx, r14
mov rcx, r15
call fcn.14009ca70
jmp case.0x140096019.13
mov rcx, qword [rsp + 0x110]
mov r9d, edi
mov r8, r14
mov rdx, r15
call fcn.14009cae0
cmp esi, edi
je case.0x140096019.13
mov r8d, dword [rsp + 0x128]
xor r9d, r9d
mov edx, 0x402
jmp 0x140096101
mov eax, dword [r14 + 0x150]
test eax, eax
je case.0x140096019.13
mov rcx, qword [r15]
lea r9, [r14 + 0x88]
mov r8d, eax
mov edx, 0xcb
call qword [sym.imp.USER32.dll_SendMessageW]
mov dil, 1
jmp 0x140096111
mov eax, dword [r14 + 0x150]
test eax, eax
je case.0x140096019.13
mov rcx, qword [r15]
lea r9, [r14 + 0x88]
mov r8d, eax
mov edx, 0x192
call qword [sym.imp.USER32.dll_SendMessageW]
mov dil, 1
jmp 0x140096111
mov eax, dword [r14 + 0x74]
cmp eax, 0xffffffff
je case.0x140096019.13
mov r9d, eax
mov edx, 0x2001
xor r8d, r8d
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [rsp + 0x118]
mov eax, dword [r14 + 0x19c]
test eax, eax
je 0x14009614b
mov rcx, qword [r15]
cmp eax, 3
mov eax, 0
sete al
xor r9d, r9d
lea edx, [r9 + 0xb]
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r14 + 0x19c], 3
jne 0x14009614b
cmp byte [r15 + 8], 0xb
jne 0x140096150
test dil, dil
je 0x14009615e
mov rcx, qword [r15]
mov r8d, r13d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
test bpl, bpl
je 0x14009616c
test bl, bl
jne 0x14009616c
call fcn.14003f550
mov eax, 1
mov rdi, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret