Function at 0x1800149c0
Capabilities:
Link many functions at runtime
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x840]
sub rsp, 0x940
xor esi, esi
mov r14, r9
mov r15, r8
mov r12d, esi
mov edi, esi
mov qword [rbp - 8], rsi
mov qword [rbp - 0x10], rsi
mov r13d, edx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x40], eax
cmp r13d, 0x7e9
jne 0x180014aaa
cmp r15, 0x1234
jne 0x180014aaa
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rcx, [rbp + 0x101]
xor edx, edx
mov r8d, 0xff
mov byte [rbp + 0x100], sil
mov ebx, eax
call fcn.180008040
lea rdx, [0x18007d100]
lea rcx, [rbp + 0x100]
mov r8d, ebx
call fcn.180001a10
lea r8, [rbp + 0x100]
call fcn.180013870
mov qword [rbp - 0x10], rax
test rax, rax
je 0x180014a8d
mov rcx, rax
call fcn.180013ac0
mov qword [rbp - 8], rax
test rax, rax
jne 0x180014aaa
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rbx, qword [rsp + 0x990]
add rsp, 0x940
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001c260
test eax, eax
je 0x180014c0e
cmp eax, 1
jne 0x180014ac6
call fcn.18001fe80
jmp 0x180014c01
cmp eax, 2
jne 0x180014ad5
call fcn.18001fa80
jmp 0x180014c01
cmp eax, 3
jne 0x180014ae4
call fcn.18001fda0
jmp 0x180014c01
cmp eax, 4
jne 0x180014b1f
cmp qword [0x18007bf88], rsi
je 0x180014c01
lea rcx, [0x18007bfe0]
call fcn.1800366f0
mov rcx, qword [0x18007bf88]
lea r8, [0x180024090]
mov edx, 0x50
call fcn.18001b040
jmp 0x180014c01
cmp eax, 5
jne 0x180014b5a
cmp qword [0x18007bf38], rsi
je 0x180014c01
lea rcx, [0x18007bfe0]
call fcn.1800366f0
mov rcx, qword [0x18007bf38]
lea r8, [0x180024090]
mov edx, 0x50
call fcn.18001b040
jmp 0x180014c01
cmp eax, 6
jne 0x180014b92
cmp qword [0x18007bf20], rsi
je 0x180014c01
lea rcx, [0x18007c000]
call fcn.1800366f0
mov rcx, qword [0x18007bf20]
lea r8, [0x180023aa0]
mov edx, 0x48
call fcn.18001b040
jmp 0x180014c01
cmp eax, 7
jne 0x180014b9e
call fcn.180025610
jmp 0x180014c01
cmp eax, 8
je 0x180014c01
cmp eax, 9
jne 0x180014baf
call fcn.180025340
jmp 0x180014c01
cmp eax, 0xa
jne 0x180014bbb
call fcn.180025f80
jmp 0x180014c01
cmp eax, 0xb
jne 0x180014bc7
call fcn.180026030
jmp 0x180014c01
cmp eax, 0xc
jne 0x180014bd3
call fcn.1800257c0
jmp 0x180014c01
cmp eax, 0xd
jne 0x180014bdf
call fcn.1800220d0
jmp 0x180014c01
cmp eax, 0xe
jne 0x180014beb
call fcn.1800221b0
jmp 0x180014c01
cmp eax, 0xf
jne 0x180014bf7
call fcn.180020080
jmp 0x180014c01
cmp eax, 0x10
jne 0x180014c01
call fcn.180020160
call fcn.18001c260
test eax, eax
jne 0x180014ab7
mov ecx, dword [0x180048620]
mov r11d, 1
mov ebx, ecx
test ecx, ecx
jne 0x180014c97
cmp dword [0x18004861c], esi
je 0x180014c53
cmp r13d, 6
je 0x180014c50
lea eax, [r13 - 8]
cmp eax, 0x3f
ja 0x180014c47
movabs rdx, 0xc000000000110001
bt rdx, rax
jb 0x180014c50
cmp r13d, 0x86
jne 0x180014c53
mov ebx, r11d
test ecx, ecx
jne 0x180014c97
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub eax, dword [0x18007b9b4]
cmp eax, 0xbb8
jb 0x180014c91
mov dword [0x18007b9b4], ecx
mov ecx, 1
mov dword [0x180048624], esi
call fcn.18001c360
mov r11d, 1
mov dword [0x180048624], r11d
jmp 0x180014c97
mov r11d, 1
cmp r13d, 0x8b0
jb 0x180014cb9
cmp r13d, 0x8ba
jae 0x180014cc2
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.1800283d0
jmp 0x180014cd9
cmp r13d, 0x8ba
jb 0x180014cf7
cmp r13d, 0x8bf
jae 0x180014cf7
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.1800281a0
mov rbx, qword [rbp + 0x880]
test eax, eax
je 0x180015337
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015337
test ebx, ebx
jne 0x180014d3c
cmp r13d, 0x84e
jne 0x180015330
cmp r15, 0x1234
jne 0x180015330
mov eax, r14d
mov ebx, 0x8000
and eax, 1
mov dword [0x180048620], eax
mov eax, r14d
and eax, ebx
mov dword [0x18004861c], eax
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r13d, 0x84e
je 0x180014d08
cmp r13d, 6
jne 0x180014da8
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
cmp dword [rax], 0x596235d2
je 0x180014d7f
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014d68
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 6
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
cmp r13d, 0x1c
jne 0x180014e10
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
nop dword [rax + rax]
cmp dword [rax], 0x596235d2
je 0x180014de7
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014dd0
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x1c
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
cmp r13d, 0x86
jne 0x180014e5e
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
cmp dword [rax], 0x596235d2
je 0x180014e4d
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014e36
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
jmp 0x180014a8d
cmp r13d, 8
jne 0x180014ec1
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
cmp dword [rax], 0x596235d2
je 0x180014e98
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014e81
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 8
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
cmp r13d, 0x46
jne 0x180014f24
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
cmp dword [rax], 0x596235d2
je 0x180014efb
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014ee4
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x46
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
cmp r13d, 0x47
jne 0x180014f87
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
cmp dword [rax], 0x596235d2
je 0x180014f5e
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014f47
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x47
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
cmp r13d, 0x18
jne 0x180014ff0
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
nop word [rax + rax]
cmp dword [rax], 0x596235d2
je 0x180014fc7
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014fb0
jmp 0x180015330
cmp dword [0x18007b9c4], edi
jne 0x180015330
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x18
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
cmp r13d, 0x215
jne 0x18001503b
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015330
nop word [rax + rax]
cmp dword [rax], 0x7fae1452
je 0x180014e4d
inc esi
add rax, 4
cmp esi, ecx
jb 0x180015020
jmp 0x180015330
cmp r13d, 0x84
jne 0x180015170
mov rcx, qword [rbp + 0x880]
mov rax, r14
lea rdx, [rbp - 0x58]
shr rax, 0x10
movsx edi, r14w
movsx ebx, ax
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x50]
mov rcx, qword [rbp + 0x880]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp - 0x4c]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x44], eax
mov qword [rsp + 0x58], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rcx, qword [rbp + 0x880]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp edi, dword [rsp + 0x58]
jl 0x180015153
cmp edi, dword [rsp + 0x40]
jge 0x180015153
cmp ebx, dword [rsp + 0x5c]
jl 0x180015153
cmp ebx, dword [rsp + 0x44]
jge 0x180015153
mov r8, qword [0x18007c148]
mov rdx, qword [0x18007c140]
mov r9d, dword [0x18007b9c4]
sub r8, rdx
mov ecx, esi
sar r8, 2
test r8d, r8d
je 0x180015103
mov rax, rdx
nop dword [rax]
cmp dword [rax], 0x592629e2
je 0x18001510b
inc ecx
add rax, 4
cmp ecx, r8d
jb 0x1800150f0
cmp dword [0x18007b0e0], esi
je 0x180015119
test r9d, r9d
jne 0x180015119
mov r14d, dword [0x18007b928]
jmp 0x18001512a
movzx ecx, bx
movzx eax, di
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b928], ecx
test r8d, r8d
je 0x18001532e
cmp dword [rdx], 0x5e1c1dfb
je 0x18001514e
inc esi
add rdx, 4
cmp esi, r8d
jb 0x180015133
mov edi, r12d
jmp 0x180015330
test r9d, r9d
jne 0x180015146
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x84
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
lea eax, [r13 - 0xa0]
cmp eax, 9
jbe 0x180017e8f
cmp r13d, 0x200
jne 0x180015363
mov r8d, dword [0x18007ae58]
mov ebx, 0x8000
add r8d, 0xfffffcb8
je 0x18001522b
mov rdx, qword [0x18007c148]
mov rax, qword [0x18007c140]
mov ecx, esi
sub rdx, rax
sar rdx, 2
test edx, edx
je 0x1800151d3
cmp dword [rax], 0x592629e2
je 0x1800151db
inc ecx
add rax, 4
cmp ecx, edx
jb 0x1800151c1
cmp dword [0x18007b0e0], esi
je 0x1800151ec
cmp dword [0x18007b9c4], esi
jne 0x1800151ec
test rbx, r15
je 0x180014a8d
movsx eax, r14w
lea rdx, [rsp + 0x58]
mov ecx, r8d
mov dword [rsp + 0x58], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [rsp + 0x5c], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [0x18007adec], esi
jne 0x18001522b
movzx ecx, word [rsp + 0x5c]
movzx eax, word [rsp + 0x58]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b928], ecx
test rbx, r15
jne 0x18001531f
cmp dword [0x18007ae70], esi
jne 0x18001531f
cmp dword [0x18007b0e0], esi
jne 0x180015313
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015271
call rax
jmp 0x180015277
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x1800152aa
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x1800152a2
call rax
jmp 0x1800152c0
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x1800152c0
mov rax, qword [0x18007bf18]
test rax, rax
je 0x1800152ba
call rax
jmp 0x1800152c0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x18001531f
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x18001531f
cmp rbx, rdi
je 0x18001531f
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
mov ecx, 0x200
call fcn.1800186e0
mov edi, esi
mov rbx, qword [rbp + 0x880]
mov rax, qword [rbp - 8]
test rax, rax
je 0x180015352
mov rcx, rax
call fcn.180013a10
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 1
jne 0x180017f47
movsxd rax, r12d
jmp 0x180014a8f
cmp r13d, 0x201
jne 0x18001553e
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015437
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x1800153aa
test r9d, r9d
je 0x1800153b8
test r10d, r10d
jne 0x1800153b8
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x1800153cb
test r9d, r9d
je 0x18001541e
test r10d, r10d
jne 0x18001541e
mov ecx, dword [0x18007b928]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x1800153ff
call rax
jmp 0x180015405
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b0e0]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x18001552f
mov byte [0x18007bbfc], 1
mov byte [0x18007bbf8], 1
jmp 0x18001543e
mov r9d, dword [0x18007b0e0]
test rbx, r15
jne 0x18001552f
cmp dword [0x18007ae70], esi
jne 0x18001552f
test r9d, r9d
jne 0x180015523
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015481
call rax
jmp 0x180015487
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x1800154ba
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x1800154b2
call rax
jmp 0x1800154d0
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x1800154d0
mov rax, qword [0x18007bf18]
test rax, rax
je 0x1800154ca
call rax
jmp 0x1800154d0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x18001552f
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x18001552f
cmp rbx, rdi
je 0x18001552f
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
mov ecx, 0x201
jmp 0x180015329
cmp r13d, 0x202
jne 0x180015727
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015620
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x180015585
test r9d, r9d
je 0x180015593
test r10d, r10d
jne 0x180015593
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x1800155a6
test r9d, r9d
je 0x1800155f9
test r10d, r10d
jne 0x1800155f9
mov ecx, dword [0x18007b928]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x1800155da
call rax
jmp 0x1800155e0
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b0e0]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015718
cmp byte [0x18007bd00], sil
mov byte [0x18007bbfc], sil
mov byte [0x18007bbf8], 1
sete byte [0x18007bd00]
jmp 0x180015627
mov r9d, dword [0x18007b0e0]
test rbx, r15
jne 0x180015718
cmp dword [0x18007ae70], esi
jne 0x180015718
test r9d, r9d
jne 0x18001570c
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001566a
call rax
jmp 0x180015670
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x1800156a3
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001569b
call rax
jmp 0x1800156b9
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x1800156b9
mov rax, qword [0x18007bf18]
test rax, rax
je 0x1800156b3
call rax
jmp 0x1800156b9
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015718
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015718
cmp rbx, rdi
je 0x180015718
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
mov ecx, 0x202
jmp 0x180015329
cmp r13d, 0x203
jne 0x1800158d8
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800157d6
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x18001576e
test r9d, r9d
je 0x18001577c
test r10d, r10d
jne 0x18001577c
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x18001578f
test r9d, r9d
je 0x1800157dd
test r10d, r10d
jne 0x1800157dd
mov ecx, dword [0x18007b928]
lea rdx, [rbp - 0x60]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp - 0x60], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp - 0x5c], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x1800157c0
call rax
jmp 0x1800157c6
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp - 0x5c]
movzx eax, word [rbp - 0x60]
shl r14d, 0x10
or r14, rax
mov r9d, dword [0x18007b0e0]
test rbx, r15
jne 0x1800158ce
cmp dword [0x18007ae70], esi
jne 0x1800158ce
test r9d, r9d
jne 0x1800158c2
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015820
call rax
jmp 0x180015826
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180015859
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015851
call rax
jmp 0x18001586f
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001586f
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180015869
call rax
jmp 0x18001586f
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800158ce
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800158ce
cmp rbx, rdi
je 0x1800158ce
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
jmp 0x18001532e
cmp r13d, 0x204
jne 0x180015ab3
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800159ac
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x18001591f
test r9d, r9d
je 0x18001592d
test r10d, r10d
jne 0x18001592d
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x180015940
test r9d, r9d
je 0x180015993
test r10d, r10d
jne 0x180015993
mov ecx, dword [0x18007b928]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x180015974
call rax
jmp 0x18001597a
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b0e0]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015aa4
mov byte [0x18007bbfd], 1
mov byte [0x18007bbf9], 1
jmp 0x1800159b3
mov r9d, dword [0x18007b0e0]
test rbx, r15
jne 0x180015aa4
cmp dword [0x18007ae70], esi
jne 0x180015aa4
test r9d, r9d
jne 0x180015a98
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x1800159f6
call rax
jmp 0x1800159fc
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180015a2f
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015a27
call rax
jmp 0x180015a45
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x180015a45
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180015a3f
call rax
jmp 0x180015a45
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015aa4
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015aa4
cmp rbx, rdi
je 0x180015aa4
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
mov ecx, 0x204
jmp 0x180015329
cmp r13d, 0x205
jne 0x180015c9c
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015b95
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x180015afa
test r9d, r9d
je 0x180015b08
test r10d, r10d
jne 0x180015b08
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x180015b1b
test r9d, r9d
je 0x180015b6e
test r10d, r10d
jne 0x180015b6e
mov ecx, dword [0x18007b928]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x180015b4f
call rax
jmp 0x180015b55
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b0e0]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015c8d
cmp byte [0x18007bd01], sil
mov byte [0x18007bbfd], sil
mov byte [0x18007bbf9], 1
sete byte [0x18007bd01]
jmp 0x180015b9c
mov r9d, dword [0x18007b0e0]
test rbx, r15
jne 0x180015c8d
cmp dword [0x18007ae70], esi
jne 0x180015c8d
test r9d, r9d
jne 0x180015c81
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015bdf
call rax
jmp 0x180015be5
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180015c18
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015c10
call rax
jmp 0x180015c2e
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x180015c2e
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180015c28
call rax
jmp 0x180015c2e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015c8d
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015c8d
cmp rbx, rdi
je 0x180015c8d
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
mov ecx, 0x205
jmp 0x180015329
cmp r13d, 0x207
jne 0x180015d6e
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800157d6
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x180015ce3
test r9d, r9d
je 0x180015cf1
test r10d, r10d
jne 0x180015cf1
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x180015d04
test r9d, r9d
je 0x180015d52
test r10d, r10d
jne 0x180015d52
mov ecx, dword [0x18007b928]
lea rdx, [rbp - 0x60]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp - 0x60], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp - 0x5c], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x180015d35
call rax
jmp 0x180015d3b
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp - 0x5c]
movzx eax, word [rbp - 0x60]
mov r9d, dword [0x18007b0e0]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x1800158ce
mov byte [0x18007bbfe], 1
mov byte [0x18007bbfa], 1
jmp 0x1800157dd
cmp r13d, 0x208
jne 0x180015e4e
mov r11d, dword [0x18007ae58]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800157d6
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
mov r9d, dword [0x18007b0e0]
test eax, eax
jne 0x180015db5
test r9d, r9d
je 0x180015dc3
test r10d, r10d
jne 0x180015dc3
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x180015dd6
test r9d, r9d
je 0x180015e24
test r10d, r10d
jne 0x180015e24
mov ecx, dword [0x18007b928]
lea rdx, [rbp - 0x60]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp - 0x60], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp - 0x5c], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x180015e07
call rax
jmp 0x180015e0d
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp - 0x5c]
movzx eax, word [rbp - 0x60]
mov r9d, dword [0x18007b0e0]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x1800158ce
cmp byte [0x18007bd02], sil
mov byte [0x18007bbfe], sil
mov byte [0x18007bbfa], 1
sete byte [0x18007bd02]
jmp 0x1800157dd
cmp r13d, 0x20a
jne 0x180015fdb
mov eax, dword [0x18007ae58]
mov r9d, dword [0x18007b0e0]
mov ebx, 0x8000
add eax, 0xfffffcb8
je 0x180015edb
mov ecx, 0x5e1c1dfb
call fcn.18001c220
mov r10d, dword [0x18007b9c4]
test eax, eax
jne 0x180015e8e
test r9d, r9d
je 0x180015e9c
test r10d, r10d
jne 0x180015e9c
test rbx, r15
je 0x180014a8d
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x180015eaf
test r9d, r9d
je 0x180015edb
test r10d, r10d
jne 0x180015edb
mov ecx, dword [0x18007b928]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x58], eax
movsx eax, cx
movzx r14d, ax
mov dword [rsp + 0x5c], eax
movzx eax, word [rsp + 0x58]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015fcc
cmp dword [0x18007ae70], esi
jne 0x180015fcc
test r9d, r9d
jne 0x180015fc0
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015f1e
call rax
jmp 0x180015f24
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180015f57
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x180015f4f
call rax
jmp 0x180015f6d
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x180015f6d
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180015f67
call rax
jmp 0x180015f6d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015fcc
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015fcc
cmp rbx, rdi
je 0x180015fcc
cmp dword [0x18007adec], esi
je 0x180014a8d
btr r15, 0xf
mov ecx, 0x20a
jmp 0x180015329
cmp r13d, 0x2a3
jne 0x180016077
mov r9d, dword [0x18007ae58]
add r9d, 0xfffffcb8
je 0x180015330
mov ecx, 0x592629e2
call fcn.18001c220
test eax, eax
jne 0x180016016
cmp dword [0x18007b0e0], esi
je 0x180015330
cmp dword [0x18007b9c4], esi
jne 0x180015330
mov ecx, dword [0x18007b928]
mov r13d, 0x2a1
mov r15, rsi
movsx eax, cx
shr ecx, 0x10
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r9d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007bb28]
test rax, rax
je 0x18001605a
call rax
jmp 0x180016060
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
shl r14d, 0x10
or r14, rax
jmp 0x180015330
cmp r13d, 0x2a2
je 0x180015fe8
mov edi, pe_nt_image_headers64
mov dword [rbp - 0x68], edi
cmp r13d, edi
jne 0x180016199
bt r14, 0x1a
jb 0x180016188
cmp dword [0x18007ae70], esi
jne 0x180016188
cmp dword [0x18007ade0], esi
jne 0x180014a8d
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x1800160dd
call rax
jmp 0x1800160e3
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180016116
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001610e
call rax
jmp 0x18001612c
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001612c
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180016126
call rax
jmp 0x18001612c
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180016188
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180016183
cmp rbx, rdi
jne 0x180014a8d
mov edi, pe_nt_image_headers64
mov ecx, edi
btr r14, 0x1a
call fcn.180018790
jmp 0x18001532e
cmp r13d, 0x101
jne 0x1800162a8
bt r14, 0x1a
jb 0x180016294
cmp dword [0x18007ae70], esi
jne 0x180016294
cmp dword [0x18007ade0], esi
jne 0x180014a8d
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x1800161ee
call rax
jmp 0x1800161f4
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180016227
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001621f
call rax
jmp 0x18001623d
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001623d
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180016237
call rax
jmp 0x18001623d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180016294
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180016294
cmp rbx, rdi
jne 0x180014a8d
mov ecx, 0x101
btr r14, 0x1a
call fcn.180018790
jmp 0x18001532e
cmp r13d, 0x104
jne 0x1800163b7
bt r14, 0x1a
jb 0x1800163a3
cmp dword [0x18007ae70], esi
jne 0x1800163a3
cmp dword [0x18007ade0], esi
jne 0x180014a8d
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x1800162fd
call rax
jmp 0x180016303
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180016336
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001632e
call rax
jmp 0x18001634c
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001634c
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180016346
call rax
jmp 0x18001634c
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800163a3
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800163a3
cmp rbx, rdi
jne 0x180014a8d
mov ecx, 0x104
btr r14, 0x1a
call fcn.180018790
jmp 0x18001532e
cmp r13d, 0x105
jne 0x1800164c6
bt r14, 0x1a
jb 0x1800164b2
cmp dword [0x18007ae70], esi
jne 0x1800164b2
cmp dword [0x18007ade0], esi
jne 0x180014a8d
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001640c
call rax
jmp 0x180016412
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180016445
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001643d
call rax
jmp 0x18001645b
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001645b
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180016455
call rax
jmp 0x18001645b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800164b2
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800164b2
cmp rbx, rdi
jne 0x180014a8d
mov ecx, 0x105
btr r14, 0x1a
call fcn.180018790
jmp 0x18001532e
cmp r13d, 0x106
jne 0x1800165cb
bt r14, 0x1a
jb 0x1800165c1
cmp dword [0x18007ae70], esi
jne 0x1800165c1
cmp dword [0x18007ade0], esi
jne 0x180014a8d
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001651b
call rax
jmp 0x180016521
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180016554
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001654c
call rax
jmp 0x18001656a
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001656a
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180016564
call rax
jmp 0x18001656a
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800165c1
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800165c1
cmp rbx, rdi
jne 0x180014a8d
btr r14, 0x1a
jmp 0x18001532e
cmp r13d, 0x102
jne 0x18001671d
lea eax, [r15 - 0x56]
mov ebx, 0x8000
test al, 0xdf
jne 0x1800165f9
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
jne 0x180014a8d
cmp dword [0x18007b0dc], esi
je 0x1800166f3
bt r14, 0x1a
jb 0x1800166f3
cmp dword [0x18007ae70], esi
jne 0x1800166f3
cmp dword [0x18007ade0], esi
jne 0x180014a8d
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0xffffedcc
mov dword [rsp + 0x44], 0x1236
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001664d
call rax
jmp 0x180016653
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, 2
jne 0x180016686
mov rax, qword [0x18007bfa0]
mov dword [rsp + 0x40], 0x1234
mov dword [rsp + 0x44], 0xffffedca
mov rcx, qword [rsp + 0x40]
test rax, rax
je 0x18001667e
call rax
jmp 0x18001669c
call qword [sym.imp.USER32.dll_WindowFromPoint]
jmp 0x18001669c
mov rax, qword [0x18007bf18]
test rax, rax
je 0x180016696
call rax
jmp 0x18001669c
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rdi, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800166f3
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rdi
je 0x1800166f3
cmp rdi, rsi
jne 0x180014a8d
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
je 0x180016710
movzx ecx, r15b
call fcn.1800251e0
movsx r15, al
btr r14, 0x1a
mov edi, r12d
jmp 0x180015330
cmp r13d, 0x7e9
jne 0x18001691b
cmp r15, 0x1234
jne 0x18001532e
call fcn.1800189f0
mov rdi, qword [rbp - 8]
mov ebx, esi
cmp dword [rdi + 0x1000424], ebx
jbe 0x18001676c
nop word [rax + rax]
mov edx, ebx
add rdx, 0x400009
lea rdx, [rdi + rdx*4]
call fcn.1800017e0
inc ebx
cmp ebx, dword [rdi + 0x1000424]
jb 0x180016750
lea rcx, [rdi + 0x1000024]
xor edx, edx
mov r8d, 0x400
call fcn.180008040
mov rcx, rdi
call fcn.180020240
test eax, eax
je 0x1800167ca
call fcn.18001fb60
test eax, eax
je 0x1800167ca
call fcn.18001ca00
test eax, eax
je 0x1800167ca
mov rcx, rdi
call fcn.1800258a0
test eax, eax
je 0x1800167ca
call fcn.18001ff60
test eax, eax
je 0x1800167ca
mov rcx, rdi
call fcn.180022030
test eax, eax
je 0x1800167ca
mov r12d, 1
mov ebx, r12d
jmp 0x1800167d2
mov ebx, esi
mov r12d, 1
mov ecx, 0x3f1c98f9
call fcn.18001c220
test eax, eax
je 0x1800167e6
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, 0x6a5a450a
call fcn.18001c220
mov ecx, dword [0x18007b0bc]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b0bc], ecx
mov ecx, 0x7d877e7a
call fcn.18001c220
mov ecx, dword [0x18007b0e4]
movups xmm0, xmmword [rdi + 0x1000480]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b0e4], ecx
movaps xmmword [0x18007adf0], xmm0
movups xmm1, xmmword [rdi + 0x1000490]
movaps xmmword [0x18007ae00], xmm1
movups xmm0, xmmword [rdi + 0x10004a0]
movaps xmmword [0x18007ae10], xmm0
movups xmm1, xmmword [rdi + 0x10004b0]
movaps xmmword [0x18007ae20], xmm1
movups xmm0, xmmword [rdi + 0x10004c0]
movaps xmmword [0x18007ae30], xmm0
movups xmm1, xmmword [rdi + 0x10004d0]
movaps xmmword [0x18007ae40], xmm1
movups xmm0, xmmword [rdi + 0x10004e0]
movaps xmmword [0x18007b940], xmm0
movups xmm1, xmmword [rdi + 0x10004f0]
movaps xmmword [0x18007b950], xmm1
movups xmm0, xmmword [rdi + 0x1000500]
movaps xmmword [0x18007b960], xmm0
movups xmm1, xmmword [rdi + 0x1000510]
movaps xmmword [0x18007b970], xmm1
movups xmm0, xmmword [rdi + 0x1000520]
movaps xmmword [0x18007b980], xmm0
movups xmm1, xmmword [rdi + 0x1000530]
movaps xmmword [0x18007b990], xmm1
call fcn.180018850
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x180048624], esi
mov dword [0x18007ae74], eax
test ebx, ebx
je 0x1800168ec
xor ecx, ecx
call fcn.18001c360
test eax, eax
jne 0x1800168ef
mov r12d, esi
mov eax, 1
lea rcx, [0x180076de0]
xor edx, edx
mov r8d, 0x4000
mov dword [0x180048624], eax
mov edi, eax
call fcn.180008040
mov dword [0x18007b9f4], esi
jmp 0x180015330
cmp r13d, 0x7ea
jne 0x18001694d
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov rcx, rbx
call fcn.180017f70
mov edi, 1
mov r12d, eax
jmp 0x180015337
cmp r13d, 0x837
jne 0x180016db9
mov ecx, r15d
mov rax, r15
mov edi, esi
and ecx, 0x80
shr rax, 0x10
mov dword [rbp + 0x888], ecx
movzx eax, ax
mov ecx, r15d
and ecx, 0x40
test r15b, 1
mov dword [rbp - 0x60], eax
cmovne edi, r11d
mov dword [rbp - 0x18], ecx
cmp eax, 2
ja 0x18001532e
cmp r14d, 0xff
ja 0x18001532e
movsxd r12, r14d
xor edx, edx
mov ecx, r14d
mov qword [rsp + 0x58], r12
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, r14d
mov ebx, eax
mov dword [rsp + 0x50], eax
shl ebx, 0x10
or rbx, 1
call fcn.180012ef0
test eax, eax
je 0x1800169d0
bts rbx, 0x18
mov eax, dword [rbp - 0x60]
cmp eax, 1
jne 0x1800169f8
test edi, edi
jne 0x1800169e2
cmp r14d, 0x79
jne 0x1800169ee
bts rbx, 0x1d
mov dword [rbp - 0x68], 0x104
mov ecx, r14d
call fcn.180025f30
jmp 0x180016a2c
test edi, edi
jne 0x180016a0b
cmp r14d, 0x79
je 0x180016a0b
mov dword [rbp - 0x68], 0x101
jmp 0x180016a17
bts rbx, 0x1d
mov dword [rbp - 0x68], 0x105
mov ecx, 0xc0000000
or rbx, rcx
cmp eax, 2
jne 0x180016a2c
mov ecx, r14d
call fcn.1800256b0
cmp dword [rbp - 0x18], esi
mov rax, qword [0x18007ba08]
cmovne rbx, rsi
test rax, rax
je 0x180016a45
xor ecx, ecx
call rax
jmp 0x180016a4b
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
jne 0x180016a6c
mov rcx, qword [rbp + 0x880]
call qword [sym.imp.USER32.dll_SetFocus]
mov r10, qword [rbp + 0x880]
mov rdi, r10
jmp 0x180016a73
mov r10, qword [rbp + 0x880]
mov ecx, 0x797a779e
call fcn.18001c220
test eax, eax
cmove rdi, r10
cmp dword [0x18007b9c4], esi
jne 0x180016a9d
cmp rdi, r10
jne 0x180016a9d
cmp dword [0x18007ae70], esi
jne 0x180016a9d
bts rbx, 0x1a
mov ecx, 0x18d3d20
call fcn.18001c220
test eax, eax
je 0x180016cbf
cmp qword [0x180076dc8], rsi
jne 0x180016b8c
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x72657375
mov dword [rsp + 0x44], 0x642e3233
mov word [rsp + 0x48], 0x6c6c
mov byte [rsp + 0x4a], sil
mov dword [rsp + 0x78], 0x52746547
mov dword [rsp + 0x7c], 0x73696765
mov dword [rbp - 0x80], 0x65726574
mov dword [rbp - 0x7c], 0x77615264
mov dword [rbp - 0x78], 0x75706e49
mov dword [rbp - 0x74], 0x76654474
mov dword [rbp - 0x70], 0x73656369
mov byte [rbp - 0x6c], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x180016b77
lea rcx, [rbp]
xor edx, edx
mov r8d, 0xa0
mov dword [rbp - 0x60], 0xa
call fcn.180008040
lea rdx, [rbp - 0x60]
lea rcx, [rbp]
mov r8d, 0x10
call r12
mov ecx, esi
test eax, eax
je 0x180016b77
lea rdx, [rbp + 2]
cmp word [rdx], 6
je 0x180016c5a
inc ecx
add rdx, 0x10
cmp ecx, eax
jb 0x180016b63
mov rax, qword [0x180076dc8]
test rax, rax
cmove rax, rdi
mov qword [0x180076dc8], rax
cmp qword [0x18007b9a8], rsi
jne 0x180016c70
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x72657375
mov dword [rsp + 0x64], 0x642e3233
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], sil
mov dword [rbp - 0x48], 0x52746547
mov dword [rbp - 0x44], 0x6e497761
mov dword [rbp - 0x40], 0x44747570
mov dword [rbp - 0x3c], 0x63697665
mov dword [rbp - 0x38], 0x73694c65
mov word [rbp - 0x34], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x180016c70
lea rcx, [rbp + 0x200]
xor edx, edx
mov r8d, 0x640
mov dword [rbp - 0x18], 0x64
call fcn.180008040
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x200]
mov r8d, 0x10
call r12
mov edx, esi
test eax, eax
je 0x180016c70
lea rcx, [rbp + 0x200]
nop word [rax + rax]
cmp dword [rcx + 8], 1
jne 0x180016c4e
mov r8, qword [rcx]
test r8, r8
jne 0x180016c69
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016c40
jmp 0x180016c70
mov eax, ecx
add rax, rax
mov rax, qword [rbp + rax*8 + 8]
jmp 0x180016b7e
mov qword [0x18007b9a8], r8
mov rcx, qword [0x180076dc8]
xor r8d, r8d
mov r9d, 0x12345678
mov edx, 0xff
cmp dword [rbp + 0x888], esi
je 0x180016cad
mov eax, dword [0x180076dd4]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016cb3
call qword [sym.imp.USER32.dll_PostMessageA]
mov r10, qword [rbp + 0x880]
mov r12, qword [rsp + 0x58]
cmp dword [0x18007b0cc], esi
je 0x180016d03
mov edx, dword [0x180076dc4]
lea r8, [0x18007ae80]
xor eax, eax
lea rcx, [rdx + rdx*2]
inc edx
mov qword [r8 + rcx*8], rax
mov qword [r8 + rcx*8 + 8], rax
mov qword [r8 + rcx*8 + 0x10], rax
mov eax, dword [rsp + 0x50]
cmp edx, 0xa
mov dword [r8 + rcx*8], r14d
cmovae edx, esi
mov dword [r8 + rcx*8 + 4], eax
mov dword [0x180076dc4], edx
cmp dword [0x180048618], esi
mov r8, r12
je 0x180016d61
mov edx, dword [rbp - 0x68]
mov r9, rbx
mov rcx, rdi
cmp dword [rbp + 0x888], esi
je 0x180016d4c
mov eax, dword [0x180076dd4]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015330
call qword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015330
mov esi, dword [rbp - 0x68]
btr rbx, 0x1a
mov rcx, r10
mov edx, esi
mov r9, rbx
call qword [0x18007b9a0]
xor eax, eax
lea rcx, [rbp - 0x48]
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x48], rdi
mov dword [rbp - 0x40], esi
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
call qword [sym.imp.USER32.dll_TranslateMessage]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015330
cmp r13d, 0x838
jne 0x18001758b
mov rax, r15
mov edi, r15d
mov ecx, esi
shr rax, 0x10
and edi, 0x80
test r15b, 1
cmovne ecx, r11d
test r15b, 2
movzx r13d, ax
mov edx, esi
mov r8d, esi
mov rax, r14
cmovne edx, r11d
test r15b, 4
movsx r9d, r14w
cmovne r8d, r11d
shr rax, 0x10
mov dword [rbp - 0x68], edi
movsx r10d, ax
mov dword [rbp - 0x18], r9d
mov dword [rbp - 0x60], r10d
cmp r13d, 0xa
ja 0x180017f34
mov dword [rsp + 0x50], esi
mov qword [rsp + 0x58], r14
mov ebx, 0x780000
mov eax, 0xff880000
cmp r13d, 1
jne 0x180016e5a
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180016e44
or r12, 2
test r8d, r8d
je 0x180016e4d
or r12, 0x10
mov dword [rsp + 0x50], 0x200
jmp 0x180016f73
cmp r13d, 2
jne 0x180016e70
mov r12, r11
mov dword [rsp + 0x50], 0x201
jmp 0x180016f73
cmp r13d, 8
jne 0x180016e86
mov r12, r11
mov dword [rsp + 0x50], 0x203
jmp 0x180016f73
cmp r13d, 3
jne 0x180016e99
mov dword [rsp + 0x50], 0x202
jmp 0x180016f73
cmp r13d, 4
jne 0x180016eb0
lea r12d, [r13 - 2]
mov dword [rsp + 0x50], 0x204
jmp 0x180016f73
cmp r13d, 5
jne 0x180016ec3
mov dword [rsp + 0x50], 0x205
jmp 0x180016f73
cmp r13d, 6
jne 0x180016ed7
mov eax, 0x207
lea r12d, [r13 + 0xa]
jmp 0x180016f6f
cmp r13d, 7
jne 0x180016ee7
mov eax, 0x208
jmp 0x180016f6f
cmp r13d, 9
jne 0x180016f0d
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180016efb
or r12, 2
test r8d, r8d
je 0x180016f04
or r12, 0x10
movzx r12d, r12w
or r12, rbx
jmp 0x180016f31
cmp r13d, 0xa
jne 0x180016f73
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180016f21
or r12, 2
test r8d, r8d
je 0x180016f2a
or r12, 0x10
movzx r12d, r12w
or r12, rax
mov rcx, qword [rbp + 0x880]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
mov dword [rsp + 0x5c], r10d
call qword [sym.imp.USER32.dll_ClientToScreen]
movzx r9d, word [rsp + 0x5c]
movzx eax, word [rsp + 0x58]
shl r9d, 0x10
mov r11d, 1
or r9, rax
mov eax, 0x20a
mov qword [rsp + 0x58], r9
mov dword [rsp + 0x50], eax
cmp dword [0x18007b9c4], esi
jne 0x180016f8b
cmp dword [0x18007ae70], esi
jne 0x180016f8b
mov ebx, 0x8000
or r12, rbx
cmp r13d, 1
jne 0x180017035
mov rcx, qword [rbp + 0x880]
movsx ebx, word [0x18007b928]
movsx edi, word [0x18007b92a]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov r9d, dword [rbp - 0x60]
mov r8d, dword [rbp - 0x18]
movzx eax, r9w
add ax, word [rsp + 0x44]
movzx edx, ax
movzx eax, r8w
add ax, word [rsp + 0x40]
shl edx, 0x10
movzx ecx, ax
or edx, ecx
mov dword [0x18007b928], edx
mov edx, dword [rsp + 0x40]
sub edx, ebx
mov ebx, dword [rsp + 0x44]
sub ebx, edi
add ebx, r9d
add edx, r8d
je 0x180017006
mov cl, 0x37
mov dword [0x18007bf10], edx
call fcn.180024c00
test ebx, ebx
je 0x180017019
mov edx, ebx
mov cl, 0x38
mov dword [0x18007bf78], ebx
call fcn.180024c00
mov edi, dword [rbp - 0x68]
mov rax, qword [0x18007ba08]
test rax, rax
je 0x180017178
xor ecx, ecx
call rax
jmp 0x18001717e
cmp r13d, 2
je 0x18001715b
cmp r13d, 8
je 0x18001715b
cmp r13d, 3
jne 0x180017076
cmp byte [0x18007bd00], sil
mov byte [0x18007bbfc], sil
mov byte [0x18007bbf8], 1
sete byte [0x18007bd00]
xor edx, edx
xor ecx, ecx
call fcn.180024c00
jmp 0x18001701c
cmp r13d, 4
jne 0x180017096
mov edx, r11d
mov cl, 1
mov byte [0x18007bbfd], 1
mov byte [0x18007bbf9], 1
call fcn.180024c00
jmp 0x18001701c
cmp r13d, 5
jne 0x1800170c6
cmp byte [0x18007bd01], sil
mov cl, 1
mov byte [0x18007bbfd], sil
sete byte [0x18007bd01]
xor edx, edx
mov byte [0x18007bbf9], 1
call fcn.180024c00
jmp 0x18001701c
cmp r13d, 6
jne 0x1800170e9
mov edx, r11d
mov cl, 2
mov byte [0x18007bbfe], 1
mov byte [0x18007bbfa], 1
call fcn.180024c00
jmp 0x18001701c
cmp r13d, 7
jne 0x180017119
cmp byte [0x18007bd02], sil
mov cl, 2
mov byte [0x18007bbfe], sil
sete byte [0x18007bd02]
xor edx, edx
mov byte [0x18007bbfa], 1
call fcn.180024c00
jmp 0x18001701c
cmp r13d, 0xa
jne 0x180017138
mov edx, r11d
mov cl, 4
call fcn.180024c00
mov dword [0x18007bf7c], 0xffffff88
jmp 0x18001701c
cmp r13d, 9
jne 0x18001701c
mov edx, r11d
mov cl, 5
call fcn.180024c00
mov dword [0x18007bf7c], 0x78
jmp 0x18001701c
mov edx, r11d
xor ecx, ecx
mov byte [0x18007bbfc], 1
mov byte [0x18007bbf8], 1
call fcn.180024c00
jmp 0x18001701c
call qword [sym.imp.USER32.dll_GetFocus]
mov rbx, rax
test rax, rax
jne 0x180017196
mov rbx, qword [rbp + 0x880]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetFocus]
mov ecx, 0x797a779e
call fcn.18001c220
mov rcx, qword [rbp + 0x880]
mov r9d, dword [0x18007b928]
test eax, eax
mov edx, 0x84
cmove rbx, rcx
xor r8d, r8d
test edi, edi
je 0x1800171e0
mov eax, dword [0x18007b9c8]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x1800171e6
call qword [sym.imp.USER32.dll_SendMessageA]
cmp r13d, 1
jne 0x18001722a
mov r8, qword [rbp + 0x880]
mov r9d, 0x2000001
lea edx, [r13 + 0x1f]
mov rcx, r8
test edi, edi
je 0x180017224
mov eax, dword [0x18007b9c8]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x18001722a
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x326cd5b9
call fcn.18001c220
test eax, eax
je 0x180017487
cmp qword [0x18007b908], rsi
jne 0x18001731d
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x72657375
mov dword [rsp + 0x64], 0x642e3233
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], sil
mov dword [rsp + 0x78], 0x52746547
mov dword [rsp + 0x7c], 0x73696765
mov dword [rbp - 0x80], 0x65726574
mov dword [rbp - 0x7c], 0x77615264
mov dword [rbp - 0x78], 0x75706e49
mov dword [rbp - 0x74], 0x76654474
mov dword [rbp - 0x70], 0x73656369
mov byte [rbp - 0x6c], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180017305
lea rcx, [rbp]
xor edx, edx
mov r8d, 0xa0
mov dword [rsp + 0x40], 0xa
call fcn.180008040
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
mov r8d, 0x10
call rdi
mov edx, esi
test eax, eax
je 0x180017305
lea rcx, [rbp + 2]
cmp word [rcx], 2
je 0x1800173de
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x1800172f1
mov rax, qword [0x18007b908]
mov edi, dword [rbp - 0x68]
test rax, rax
cmove rax, rbx
mov qword [0x18007b908], rax
cmp qword [0x18007b0c0], rsi
jne 0x1800173f4
lea rcx, [rbp - 0x58]
mov dword [rbp - 0x58], 0x72657375
mov dword [rbp - 0x54], 0x642e3233
mov word [rbp - 0x50], 0x6c6c
mov byte [rbp - 0x4e], sil
mov dword [rbp - 0x48], 0x52746547
mov dword [rbp - 0x44], 0x6e497761
mov dword [rbp - 0x40], 0x44747570
mov dword [rbp - 0x3c], 0x63697665
mov dword [rbp - 0x38], 0x73694c65
mov word [rbp - 0x34], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x1800173f4
lea rcx, [rbp + 0x200]
xor edx, edx
mov r8d, 0x640
mov dword [rbp - 0x68], 0x64
call fcn.180008040
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x200]
mov r8d, 0x10
call rbx
mov edx, esi
test eax, eax
je 0x1800173f4
lea rcx, [rbp + 0x200]
cmp dword [rcx + 8], esi
jne 0x1800173d2
mov r8, qword [rcx]
test r8, r8
jne 0x1800173ed
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x1800173c5
jmp 0x1800173f4
mov eax, edx
add rax, rax
mov rax, qword [rbp + rax*8 + 8]
jmp 0x18001730c
mov qword [0x18007b0c0], r8
mov rcx, qword [0x18007b908]
xor r8d, r8d
mov r9d, 0x12345679
mov edx, 0xff
test edi, edi
je 0x180017460
mov eax, dword [0x18007b9c8]
mov qword [rsp + 0x30], rsi
mov ebx, 1
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
cmp r13d, ebx
jne 0x180017487
mov eax, dword [0x18007b9c8]
mov rcx, qword [0x18007b908]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180017487
call qword [sym.imp.USER32.dll_PostMessageA]
cmp r13d, 1
jne 0x180017487
mov rcx, qword [0x18007b908]
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
call qword [sym.imp.USER32.dll_PostMessageA]
cmp dword [0x18007ade4], esi
mov ecx, dword [rsp + 0x50]
je 0x180017522
lea eax, [rcx - 0x203]
test eax, 0xfffffffa
jne 0x1800174ac
cmp ecx, 0x204
jne 0x180017522
mov edx, dword [0x18007b8f0]
lea rax, [0x18007af70]
shl rdx, 5
add rdx, rax
xor eax, eax
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov eax, dword [rbp - 0x18]
mov dword [rdx], eax
mov eax, dword [rbp - 0x60]
mov dword [rdx + 4], eax
cmp ecx, 0x20a
jne 0x1800174f8
cmp r13d, 9
mov eax, 0xff880000
mov ecx, 0x780000
cmove eax, ecx
mov dword [rdx + 8], eax
mov rbx, qword [rbp + 0x880]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x18007b8f0]
mov ecx, dword [rsp + 0x50]
inc eax
cmp eax, 0xa
cmovae eax, esi
mov dword [0x18007b8f0], eax
jmp 0x180017529
mov rbx, qword [rbp + 0x880]
cmp dword [0x180048610], esi
mov r9, qword [rsp + 0x58]
mov edx, ecx
mov rcx, rbx
mov r8, r12
je 0x18001756a
test edi, edi
je 0x180017562
mov eax, dword [0x18007b9c8]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180017575
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180017575
btr r9, 0x1a
call qword [0x18007b9a0]
mov r13d, dword [rbp + 0x888]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015337
cmp r13d, 0x83a
jne 0x1800175ba
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x180048614], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x83d
jne 0x1800175fa
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
movsx eax, r14w
mov r12d, r11d
mov edi, r11d
mov dword [0x18007bf10], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [0x18007bf78], eax
jmp 0x180015337
cmp r13d, 0x83f
jne 0x18001763f
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov eax, r14d
mov r12d, r11d
mov edi, r11d
btr eax, 0x1f
mov dword [0x18007b9c0], eax
mov rax, r14
shr rax, 0x1f
and eax, 1
mov dword [0x180076dd0], eax
jmp 0x180015337
cmp r13d, 0x863
jne 0x18001767f
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
xorps xmm0, xmm0
mov r12d, r11d
mov edi, r11d
cvtsi2sd xmm0, r14
divsd xmm0, qword [0x180041640]
movsd qword [0x180048628], xmm0
jmp 0x180015337
cmp r13d, 0x842
jne 0x1800176ea
cmp r15, 0x1234
jne 0x18001532e
mov ecx, 0x16cc25d5
call fcn.18001c220
test eax, eax
je 0x1800176e0
call fcn.180025830
mov rcx, rax
mov rdi, rax
call fcn.180012f90
mov edx, r14d
mov rcx, rax
mov rbx, rax
call fcn.1800130a0
mov r12d, eax
test rdi, rdi
je 0x1800176d2
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
test rbx, rbx
je 0x1800176e0
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov edi, 1
jmp 0x180015330
cmp r13d, 0x843
jne 0x180017786
cmp r15, 0x1234
jne 0x18001532e
mov ecx, 0x16cc25d5
call fcn.18001c220
test eax, eax
je 0x180017778
call fcn.180025830
mov ebx, 0xffff
mov rdi, rax
mov esi, ebx
test rax, rax
je 0x180017760
lea rdx, [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetIconInfo]
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x180017742
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x180017751
call qword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [rbp - 0x44]
mov esi, dword [rbp - 0x40]
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
movzx r12d, si
movzx eax, bx
mov edi, 1
shl r12d, 0x10
or r12d, eax
jmp 0x180015330
or r12d, 0xffffffff
lea edi, [r12 + 2]
jmp 0x180015330
cmp r13d, 0x844
jne 0x1800177d2
cmp r15, 0x1234
jne 0x1800177c4
movsxd rax, dword [0x18007b9f4]
cmp eax, 0x1000
jge 0x1800177c4
lea rcx, [0x180076de0]
lea r12d, [rax + 1]
mov edi, r11d
mov dword [rcx + rax*4], r11d
mov dword [0x18007b9f4], r12d
jmp 0x180015330
mov r12d, 0x1388
mov edi, r11d
jmp 0x180015330
cmp r13d, 0x845
jne 0x18001780f
cmp r15, 0x1234
jne 0x18001532e
lea rax, [r14 - 1]
cmp rax, 0xfff
ja 0x180014d31
lea rcx, [0x180076de0]
mov r12d, r11d
mov edi, r11d
mov dword [rcx + r14*4 - 4], esi
jmp 0x180015330
cmp r13d, 0x846
jne 0x180017907
cmp r15, 0x1234
jne 0x18001532e
test r14, r14
jne 0x18001784b
mov dword [0x18007ade0], esi
mov dword [0x18007b0dc], esi
mov dword [0x18007b0e0], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r14, 1
jne 0x180017870
mov dword [0x18007b0e0], r11d
mov dword [0x18007ade0], r11d
mov dword [0x18007b0dc], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r14, 2
jne 0x180017894
mov dword [0x18007b0e0], r11d
mov dword [0x18007ade0], esi
mov dword [0x18007b0dc], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r14, 3
jne 0x1800178b8
mov dword [0x18007b0dc], esi
mov dword [0x18007ade0], r11d
mov dword [0x18007b0e0], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r14, 4
jne 0x1800178de
mov dword [0x18007b0e0], r11d
mov dword [0x18007ade0], r11d
mov dword [0x18007b0dc], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r14, 5
jne 0x180014d31
mov dword [0x18007b0dc], r11d
mov dword [0x18007ade0], r11d
mov dword [0x18007b0e0], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r13d, 0x850
jne 0x180017936
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x18007b9e8], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x851
jne 0x180017962
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov r12d, dword [0x18007b928]
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x852
jne 0x180017991
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x180048618], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x853
jne 0x1800179c0
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x180048610], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x84d
jne 0x1800179ef
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x18007ae70], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x84f
jne 0x180017c4c
cmp r15, 0x1234
jne 0x18001532e
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x336d6d69
mov dword [rsp + 0x44], 0x6c642e32
mov word [rsp + 0x48], 0x6c
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test r14, r14
je 0x180017b2e
test rax, rax
je 0x180016daa
lea rdx, [rbp - 0x58]
mov rcx, rax
mov dword [rbp - 0x58], 0x476d6d49
mov dword [rbp - 0x54], 0x6f437465
mov dword [rbp - 0x50], 0x7865746e
mov word [rbp - 0x4c], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x60]
mov rcx, rsi
mov dword [rsp + 0x60], 0x476d6d49
mov dword [rsp + 0x64], 0x704f7465
mov dword [rsp + 0x68], 0x74536e65
mov rdi, rax
mov dword [rsp + 0x6c], 0x73757461
mov byte [rsp + 0x70], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x78]
mov rcx, rsi
mov dword [rsp + 0x78], 0x536d6d49
mov dword [rsp + 0x7c], 0x704f7465
mov dword [rbp - 0x80], 0x74536e65
mov rbx, rax
mov dword [rbp - 0x7c], 0x73757461
mov byte [rbp - 0x78], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x48]
mov rcx, rsi
mov dword [rbp - 0x48], 0x526d6d49
mov dword [rbp - 0x44], 0x61656c65
mov dword [rbp - 0x40], 0x6f436573
mov r12, rax
mov dword [rbp - 0x3c], 0x7865746e
mov word [rbp - 0x38], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
mov qword [rsp + 0x58], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
jne 0x180017c21
lea edx, [rax + 1]
jmp 0x180017c1b
test rax, rax
je 0x180016daa
lea rdx, [rbp - 0x58]
mov rcx, rax
mov dword [rbp - 0x58], 0x476d6d49
mov dword [rbp - 0x54], 0x6f437465
mov dword [rbp - 0x50], 0x7865746e
mov word [rbp - 0x4c], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x78]
mov rcx, rsi
mov dword [rsp + 0x78], 0x476d6d49
mov dword [rsp + 0x7c], 0x704f7465
mov dword [rbp - 0x80], 0x74536e65
mov rdi, rax
mov dword [rbp - 0x7c], 0x73757461
mov byte [rbp - 0x78], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x60]
mov rcx, rsi
mov dword [rsp + 0x60], 0x536d6d49
mov dword [rsp + 0x64], 0x704f7465
mov dword [rsp + 0x68], 0x74536e65
mov rbx, rax
mov dword [rsp + 0x6c], 0x73757461
mov byte [rsp + 0x70], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x48]
mov rcx, rsi
mov dword [rbp - 0x48], 0x526d6d49
mov dword [rbp - 0x44], 0x61656c65
mov dword [rbp - 0x40], 0x6f436573
mov r12, rax
mov dword [rbp - 0x3c], 0x7865746e
mov word [rbp - 0x38], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007ae58]
add ecx, 0xfffffcb8
mov qword [rsp + 0x58], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
je 0x180017c21
xor edx, edx
mov rcx, rdi
call r12
mov ecx, dword [0x18007ae58]
mov rdx, rdi
add ecx, 0xfffffcb8
call qword [rsp + 0x58]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015330
cmp r13d, 0x847
jne 0x180017c7b
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x18007adec], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x848
jne 0x180017caa
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov dword [0x18007b8f4], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x840
jne 0x180017cd2
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x841
jne 0x180017cfa
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov r12d, r11d
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x849
jne 0x180017d34
mov eax, dword [0x180076dd4]
test r15, r15
mov r12d, r11d
cmovne eax, r15d
test r14, r14
mov edi, r11d
mov dword [0x180076dd4], eax
mov eax, dword [0x18007b9c8]
cmovne eax, r14d
mov dword [0x18007b9c8], eax
jmp 0x180015330
cmp r13d, 0x84a
jne 0x180017df1
cmp r15, 0x1234
jne 0x18001532e
test r14, r14
je 0x180017de0
lea rcx, [rbp + 1]
xor edx, edx
mov r8d, 0xff
mov byte [0x18007b0f0], sil
mov byte [rbp], sil
call fcn.180008040
mov r8d, dword [rsp + 0x40]
lea rdx, [0x18007d200]
lea rcx, [rbp]
call fcn.180001a10
lea r8, [rbp]
call fcn.180013870
mov rdi, rax
test rax, rax
je 0x180017dc8
mov rcx, rax
call fcn.180013ac0
lea edx, [r13 - 0x4a]
lea rcx, [0x18007b0f0]
mov r8, rax
mov rbx, rax
call fcn.180003354
mov rcx, rbx
call fcn.180013a10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, 1
mov dword [0x180076dc0], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
mov dword [0x180076dc0], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015330
cmp r13d, 0x84b
jne 0x180017e26
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
test r14, r14
mov r12d, r11d
mov edi, r11d
setne sil
mov dword [0x180048624], esi
jmp 0x180015337
cmp r13d, 0x854
jne 0x180017e52
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017f40
mov r12d, dword [0x18007b914]
mov edi, r11d
jmp 0x180015337
cmp r13d, 0x84c
jne 0x18001532e
cmp r15, 0x1234
jne 0x18001532e
mov ecx, r11d
mov dword [0x180048624], esi
call fcn.18001c360
mov eax, 1
mov dword [0x180048624], eax
mov r12d, eax
mov edi, eax
jmp 0x180015330
mov eax, dword [0x18007ae58]
add eax, 0xfffffcb8
je 0x180015330
mov rcx, qword [0x18007c148]
mov rax, qword [0x18007c140]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017ed2
nop dword [rax]
cmp dword [rax], 0x592629e2
je 0x180017eda
inc esi
add rax, 4
cmp esi, ecx
jb 0x180017ec0
cmp dword [0x18007b0e0], edi
je 0x180017efd
cmp dword [0x18007b9c4], edi
jne 0x180017efd
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, r13d
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8f
movsx eax, r14w
mov dword [rsp + 0x58], eax
mov eax, r14d
shr eax, 0x10
cmp dword [0x18007adec], edi
cwde
mov dword [rsp + 0x5c], eax
jne 0x180015330
movzx ecx, ax
movzx eax, word [rsp + 0x58]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b928], ecx
jmp 0x180015330
mov r13d, dword [rbp + 0x888]
jmp 0x18001532e
mov edi, esi
jmp 0x180015337
mov rax, qword [0x18007b9a0]
test rax, rax
je 0x180014a8d
mov r9, r14
mov r8, r15
mov edx, r13d
mov rcx, rbx
call rax
jmp 0x180014a8f