Function at 0x14009a3f0
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4a8]
sub rsp, 0x5a8
movzx eax, byte [r9 + 8]
mov rdi, r9
sub al, 2
mov rsi, r8
test al, 0xf7
mov r14, rdx
lea rax, [r9 + 0x20]
mov r15, rcx
jne 0x14009a439
lea rax, [r8 + 0x70]
movzx edx, word [rdx]
lea r12, [0x140000000]
xor ebx, ebx
movaps xmmword [rsp + 0x590], xmm6
mov qword [rsp + 0x48], rax
movaps xmmword [rsp + 0x580], xmm7
mov byte [rsp + 0x30], 0
lea r13d, [rbx + 1]
test dx, dx
je 0x14009d396
lea r9d, [rbx + 0x20]
xorps xmm7, xmm7
cmp dx, 0x2d
jne 0x14009a47e
xor r13b, r13b
jmp 0x14009a487
mov r13b, 1
cmp dx, 0x2b
jne 0x14009a490
movzx edx, word [r14 + 2]
add r14, 2
mov r15, r14
mov r12, r14
test dx, dx
je 0x14009d382
mov qword [rsp + 0x38], r14
mov r8, r14
test r14, r14
je 0x14009a4e5
nop dword [rax]
lea rcx, [0x1400f6260]
movzx eax, r9w
nop dword [rax + rax]
cmp dx, ax
je 0x14009a506
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x14009a4c0
movzx edx, word [r8 + 2]
add r8, 2
mov qword [rsp + 0x38], r8
test dx, dx
jne 0x14009a4b0
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp word [r14 + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14009a4f0
lea r8, [r14 + rax*2]
mov qword [rsp + 0x38], r8
cmp r8, r14
je 0x14009d2c1
movzx eax, word [r8]
lea rdx, str.Section
mov rcx, r14
mov word [rsp + 0x34], ax
mov word [r8], bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a53c
mov byte [rsi + 0x1a6], 1
jmp case.0x14009bd8f.7
lea rdx, str.AltSubmit
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a576
cmp byte [rdi + 8], 0xc
je 0x14009a576
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 2
and al, 0xfd
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
mov r8d, 7
lea rdx, str.Checked
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a61d
lea rdx, str.Gray
lea rcx, [r14 + 0xe]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a5ba
movzx eax, r13b
add eax, eax
mov dword [rsi + 0x80], eax
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0xa
jne 0x14009a5d9
mov ecx, dword [rsi + 0x10]
mov eax, ecx
and eax, 0xfffffffb
or ecx, 4
test r13b, r13b
cmove ecx, eax
mov dword [rsi + 0x10], ecx
jmp case.0x14009bd8f.7
cmp word [r14 + 0xe], 0
je 0x14009a60e
lea rcx, [r14 + 0xe]
call fcn.140014e00
mov dword [rsi + 0x80], eax
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0xffffffff
jne 0x14009d2b3
mov dword [rsi + 0x80], 2
jmp 0x14009d2b3
movzx eax, r13b
mov dword [rsi + 0x80], eax
jmp case.0x14009bd8f.7
mov r8d, 6
lea rdx, str.Choose
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a6ed
test r13b, r13b
je case.0x14009bd8f.7
movzx ecx, byte [rdi + 8]
add r14, 0xc
sub ecx, 0xd
je 0x14009a6a1
cmp ecx, 1
mov rcx, r14
je 0x14009a678
call fcn.140014e00
mov dword [rsi + 0x3c], eax
mov r9d, SafeArrayAllocDescriptor
cmp eax, 1
jge 0x14009d2b3
mov dword [rsi + 0x3c], ebx
jmp 0x14009d2b3
lea rdx, [rsi + 0x154]
call fcn.1400bec60
mov dword [rsi + 0x194], eax
mov r9d, SafeArrayAllocDescriptor
cmp eax, 3
jne 0x14009d2b3
or dword [rsi], 2
jmp 0x14009d2b3
lea rdx, str.None
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a6c1
mov dword [rsi + 0x3c], 2
jmp case.0x14009bd8f.7
lea rdx, [rsi + 0x154]
mov r8b, 1
mov rcx, r14
call fcn.1400bed20
mov r9d, SafeArrayAllocDescriptor
test eax, eax
je 0x14009d2b3
mov dword [rsi + 0x3c], 1
jmp 0x14009d2b3
lea rdx, str.Border
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a721
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a715
or dword [rsi], 0x800000
jmp 0x14009d2b3
or dword [rsi + 4], 0x800000
jmp 0x14009d2b3
lea rdx, str.VScroll
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a755
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a749
or dword [rsi], 0x200000
jmp 0x14009d2b3
or dword [rsi + 4], 0x200000
jmp 0x14009d2b3
mov r8d, 7
lea rdx, str.HScroll
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a7cb
cmp byte [rdi + 8], 0xb
jne 0x14009a78e
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009ae36
or dword [rsi + 4], 0x8000
jmp 0x14009d2b3
test r13b, r13b
je 0x14009a7bf
or dword [rsi], 0x100000
cmp word [r14 + 0xe], 0
je 0x14009a7b2
lea rcx, [r14 + 0xe]
call fcn.140014e00
mov dword [rsi + 0x7c], eax
jmp case.0x14009bd8f.7
mov eax, 0xffffffff
mov dword [rsi + 0x7c], eax
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x100000
jmp case.0x14009bd8f.7
lea rdx, str.Tabstop
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a7f3
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a810
or dword [rsi], 0x10000
jmp 0x14009d2b3
lea rdx, str.NoTab
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a81c
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a7e8
or dword [rsi + 4], 0x10000
jmp 0x14009d2b3
lea rdx, str.Group
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a84a
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ab5a
or dword [rsi], 0x20000
jmp 0x14009d2b3
lea rdx, str.Redraw
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009a873
movzx eax, r13b
xor eax, 1
add eax, 3
mov dword [rsi + 0x19c], eax
jmp case.0x14009bd8f.7
mov r8d, 8
lea rdx, str.Disabled
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a931
cmp word [r14 + 0x10], ax
lea rcx, [r14 + 0x10]
je 0x14009a8a9
call fcn.140014e00
test eax, eax
jne 0x14009a8a9
xor r13b, 1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009a8df
mov edx, ebx
test r13b, r13b
sete dl
call qword [sym.imp.USER32.dll_EnableWindow]
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x10
and al, 0xef
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
test r13b, r13b
je 0x14009a90a
or dword [rsi], 0x8000000
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x10
and al, 0xef
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x8000000
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x10
and al, 0xef
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
mov r8d, 6
lea rdx, str.Hidden
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009a9b2
cmp word [r14 + 0xc], ax
lea rcx, [r14 + 0xc]
je 0x14009a963
call fcn.140014e00
test eax, eax
jne 0x14009a963
xor r13b, 1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009a97e
test r13b, r13b
mov edx, 4
cmovne edx, ebx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x14009a992
test r13b, r13b
je 0x14009a98c
or dword [rsi + 4], 0x10000000
jmp 0x14009a992
or dword [rsi], 0x10000000
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 8
and al, 0xf7
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
lea rdx, str.Wrap
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009aa4a
movzx eax, byte [rdi + 8]
dec eax
cmp eax, 0x12
ja case.0x14009bd8f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9da68]
add rcx, r9
jmp rcx
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009aa03
or dword [rsi + 4], 0x1f
jmp 0x14009d2b3
and dword [rsi], 0xffffffec
or dword [rsi], 0xc
jmp 0x14009d2b3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009aa25
or dword [rsi + 4], 0x100080
jmp 0x14009d2b3
or dword [rsi], 0x80
jmp 0x14009d2b3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b142
or dword [rsi], 0x200
jmp 0x14009d2b3
mov r8d, 0xa
lea rdx, str.Background
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009ab22
movzx ecx, byte [rdi + 8]
add r14, 0x14
sub ecx, 0xa
je 0x14009aac6
sub ecx, 1
je 0x14009aac6
sub ecx, 7
je 0x14009aac6
cmp ecx, 7
je 0x14009aac6
test r13b, r13b
je 0x14009aab9
and byte [rdi + 9], 0xdf
lea rdx, str.Trans
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov r9d, SafeArrayAllocDescriptor
test eax, eax
jne 0x14009aab0
or byte [rdi + 9], 0x40
jmp 0x14009d2b3
and byte [rdi + 9], 0xbf
jmp 0x14009d2b3
and byte [rdi + 9], 0xbf
or byte [rdi + 9], 0x20
jmp case.0x14009bd8f.7
test r13b, r13b
je 0x14009ab16
mov rcx, r14
call fcn.1400c0880
mov dword [rsi + 0x74], eax
cmp eax, 0xffffffff
jne case.0x14009bd8f.7
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov ecx, eax
movzx r8d, ax
shr ecx, 0x10
and r8d, 0xffffff00
movzx edx, cl
movzx eax, al
or r8d, edx
shl eax, 0x10
or r8d, eax
mov dword [rsi + 0x74], r8d
jmp case.0x14009bd8f.7
mov dword [rsi + 0x74], 0xff000000
jmp case.0x14009bd8f.7
lea rdx, str.Group
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009a830
lea rdx, str.Theme
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ab66
mov byte [rsi + 0x1a7], r13b
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x20000
jmp 0x14009d2b3
mov r8d, 4
lea rdx, str.Hwnd
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009acf9
mov r13, qword [rbp + 0x4f0]
lea rbx, [r14 + 8]
mov rcx, qword [r13 + 0x128]
test rcx, rcx
je 0x14009ac89
xor r15d, r15d
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x70]
mov dword [rbp - 0x80], r15d
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x68]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x60], r15d
mov qword [rbp - 0x60], rax
lea r9d, [r15 + 2]
lea rax, str.HasKey
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x70], rax
lea r8, [rbp + 8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
cmp qword [rbp - 0x18], r15
jne 0x14009d2f8
mov rcx, qword [r13 + 0x128]
lea rax, [0x1400e0674]
mov dword [rbp - 0x80], r15d
lea rdx, [rbp - 0x68]
mov qword [rsp + 0x70], rbx
lea r9d, [r15 + 1]
mov dword [rsp + 0x60], r15d
lea r8, [rbp + 8]
mov qword [rsp + 0x50], rax
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
cmp word [rbx + rcx*2 + 2], r15w
lea rcx, [rcx + 1]
jne 0x14009ac50
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsi + 0x1c8], rax
movzx ecx, word [rbx]
lea rbx, [rbx + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14009ac71
jmp case.0x14009bd8f.7
cmp word [rbx], 0
jne 0x14009ac9a
xor eax, eax
mov qword [rsi + 0x20], rax
jmp case.0x14009bd8f.7
lea rax, [rbp + 0x4f8]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
mov rdx, rbx
mov dword [rsp + 0x20], 3
lea rcx, [0x140118bf0]
call fcn.14003d180
test rax, rax
jne 0x14009acf0
cmp byte [rbp + 0x4f8], al
lea rcx, [0x140118bf0]
mov r9d, dword [rsp + 0x40]
mov rdx, rbx
setne al
xor r8d, r8d
inc eax
mov dword [rsp + 0x20], eax
call fcn.14003d6c0
mov qword [rsi + 0x20], rax
jmp case.0x14009bd8f.7
mov r8d, 4
lea rdx, str.Icon
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009ad59
cmp byte [rdi + 8], 0xa
jne 0x14009ad3c
lea rdx, str.Small
lea rcx, [r14 + 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov ecx, 2
cmovne ecx, ebx
mov dword [rsi + 0x14], ecx
jmp case.0x14009bd8f.7
test r13b, r13b
je case.0x14009bd8f.7
lea rcx, [r14 + 8]
call fcn.140014e00
mov dword [rsi + 0x84], eax
jmp case.0x14009bd8f.7
lea rdx, str.Report
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ad79
mov dword [rsi + 0x14], 1
jmp case.0x14009bd8f.7
lea rdx, str.List
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ad99
mov dword [rsi + 0x14], 3
jmp case.0x14009bd8f.7
lea rdx, str.Tile
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009adb9
mov dword [rsi + 0x14], 4
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0xa
jne 0x14009ae80
lea rdx, [0x1400fedb8]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009adf0
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b32d
or dword [rsi + 4], 0x4000
jmp 0x14009d2b3
cmp byte [rdi + 8], 0xa
jne 0x14009ae80
mov r8d, 6
lea rdx, str.NoSort
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009ae4d
lea rcx, [r14 + 0xc]
lea rdx, [0x1400fedb8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ae41
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009a782
or dword [rsi], 0x8000
jmp 0x14009d2b3
mov byte [rsi + 0x1a8], r13b
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0xa
jne 0x14009ae80
lea rdx, str.Grid
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ae80
mov ecx, dword [rsi + 0x10]
mov eax, ecx
and eax, 0xfffffffe
or ecx, 1
test r13b, r13b
cmove ecx, eax
mov dword [rsi + 0x10], ecx
jmp case.0x14009bd8f.7
mov r8d, 5
lea rdx, str.Count
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009aeab
lea rcx, [r14 + 0xa]
call fcn.140014e00
mov dword [rsi + 0x78], eax
jmp case.0x14009bd8f.7
mov r8d, 2
lea rdx, [0x140100794]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b011
lea rdi, [r14 + 4]
nop dword [rax]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009aedf
cmp ax, 9
jne 0x14009aee5
add rdi, 2
jmp 0x14009aed0
test ax, ax
je case.0x14009bd8f.7
cmp ax, 0x2d
je case.0x14009bd8f.7
cmp ax, 0x2b
jne 0x14009af08
lea rax, [rdi + 2]
mov rdi, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14009af40
movzx eax, word [rdi + 2]
mov ecx, 0xffdf
sub ax, 0x58
test cx, ax
jne 0x14009af40
movzx ecx, word [rdi + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14009af40
add rdi, 4
mov r12d, 1
mov esi, r12d
xor r15d, r15d
jmp 0x14009af4a
xor r15d, r15d
mov esi, r15d
lea r12d, [r15 + 1]
movzx ebx, word [rdi]
mov ecx, r15d
cmp ebx, 0x20
je 0x14009afb7
cmp ebx, 9
je 0x14009afb7
test ebx, ebx
je 0x14009afd5
cmp ebx, 0x2e
je case.0x14009bd8f.7
test rsi, rsi
je 0x14009af9f
movzx ecx, bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r15d
sete cl
test ecx, ecx
je 0x14009afa7
test ebx, 0xffffff80
jne case.0x14009bd8f.7
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
jmp case.0x14009bd8f.7
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x14009af81
movzx ebx, word [rdi + 2]
add rdi, 2
mov ecx, r12d
cmp ebx, 0x20
jne 0x14009af55
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009afc6
cmp ax, 9
jne 0x14009afcc
add rdi, 2
jmp 0x14009afb7
test ax, ax
jne case.0x14009bd8f.7
test ecx, ecx
je case.0x14009bd8f.7
lea rcx, [r14 + 4]
call fcn.140025a40
mov rdx, qword [rbp + 0x500]
mov r9d, SafeArrayAllocDescriptor
mov ecx, dword [rdx + 0x10]
test r13b, r13b
je 0x14009b005
or ecx, eax
mov dword [rdx + 0x10], ecx
jmp 0x14009d2b3
not eax
and eax, ecx
mov dword [rdx + 0x10], eax
jmp 0x14009d2b3
mov r8d, 9
lea rdx, str.ImageList
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b048
test r13b, r13b
je case.0x14009bd8f.7
lea rcx, [r14 + 0x12]
call fcn.140025a40
mov ecx, eax
mov qword [rsi + 0x18], rcx
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 4
jne 0x14009b079
lea rdx, str.Default
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b079
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ba15
or dword [rsi], 1
jmp 0x14009d2b3
cmp byte [rdi + 8], 5
jne 0x14009b0aa
lea rdx, str.Check3
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b0aa
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b669
or dword [rsi], 6
jmp 0x14009d2b3
lea rdx, str.ReadOnly
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b14e
movzx ecx, byte [rdi + 8]
sub ecx, 9
je 0x14009b31e
sub ecx, 1
je 0x14009b133
sub ecx, 1
je 0x14009b11b
cmp ecx, 1
jne case.0x14009bd8f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009b101
movzx r8d, r13b
xor r9d, r9d
mov edx, 0xcf
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009bd8f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b1b6
or dword [rsi], 0x800
jmp 0x14009d2b3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b362
or dword [rsi + 4], 8
jmp 0x14009d2b3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009aa3f
or dword [rsi + 4], 0x200
jmp 0x14009d2b3
lea rdx, str.Multi
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b1c2
sub ecx, 9
je 0x14009b101
sub ecx, 1
je 0x14009b19e
sub ecx, 2
je 0x14009b8d7
cmp ecx, 2
jne case.0x14009bd8f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b195
or dword [rsi], 2
jmp 0x14009d2b3
or dword [rsi + 4], 2
jmp 0x14009d2b3
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b8e6
or dword [rsi + 4], 4
jmp 0x14009d2b3
or dword [rsi + 4], 0x800
jmp 0x14009d2b3
cmp cl, 0xc
jne 0x14009b1fb
lea rdx, str.WantReturn
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b1fb
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b1ef
or dword [rsi], 0x1000
jmp 0x14009d2b3
or dword [rsi + 4], 0x1000
jmp 0x14009d2b3
cmp byte [rdi + 8], 0xc
jne 0x14009b26f
lea rdx, str.WantTab
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b235
movzx ecx, byte [rdi + 9]
movzx eax, cl
or cl, 0x80
and al, 0x7f
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0xc
jne 0x14009b26f
lea rdx, str.WantCtrlA
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b26f
movzx ecx, byte [rdi + 9]
movzx eax, cl
and cl, 0xfd
or al, 2
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
movzx eax, byte [rdi + 8]
sub al, 0xa
cmp al, 1
ja 0x14009b2ad
lea rdx, str.WantF2
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b2ad
movzx ecx, byte [rdi + 9]
movzx eax, cl
and cl, 0x7f
or al, 0x80
movzx ecx, cl
test r13b, r13b
movzx eax, al
cmove ecx, eax
mov byte [rdi + 9], cl
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0xc
jne 0x14009b2e1
lea rdx, str.Number
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b2e1
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b37b
or dword [rsi], 0x2000
jmp 0x14009d2b3
lea rdx, str.Lowercase
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b338
movzx eax, byte [rdi + 8]
cmp al, 0xc
jne 0x14009b314
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b5d9
or dword [rsi], 0x10
jmp 0x14009d2b3
sub al, 7
cmp al, 1
ja case.0x14009bd8f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009ade4
or dword [rsi], 0x4000
jmp 0x14009d2b3
lea rdx, str.Uppercase
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b387
cmp cl, 0xc
jne 0x14009b36a
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b12a
or dword [rsi], 8
jmp 0x14009d2b3
sub cl, 7
cmp cl, 1
ja case.0x14009bd8f.7
jmp case.0x14009a9ed.3
or dword [rsi + 4], 0x2000
jmp 0x14009d2b3
cmp cl, 0xc
jne 0x14009b423
mov r8d, 8
lea rdx, str.Password
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b423
movzx eax, word [r14 + 0x10]
mov word [rsi + 0x1a0], ax
test r13b, r13b
je 0x14009b3fc
or dword [rsi], 0x20
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009b419
xor r9d, r9d
mov edx, 0xcc
test ax, ax
jne 0x14009b3e9
mov r8d, 0x25cf
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009bd8f.7
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x20
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009b419
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [rsp + 0x30], 1
jmp case.0x14009bd8f.7
mov r8d, 5
lea rdx, str.Limit
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b474
test r13b, r13b
je 0x14009b467
cmp word [r14 + 0xa], ax
je 0x14009b45a
lea rcx, [r14 + 0xa]
call fcn.140014e00
mov dword [rsi + 0x78], eax
jmp case.0x14009bd8f.7
mov eax, 0xffffffff
mov dword [rsi + 0x78], eax
jmp case.0x14009bd8f.7
mov eax, 0x80000000
mov dword [rsi + 0x78], eax
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 8
jne 0x14009b492
lea rdx, str.Simple
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je case.0x14009a9ed.16
mov r8d, 4
lea rdx, str.Sort
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b50d
sub ecx, 7
je 0x14009b9ed
sub ecx, 1
je 0x14009b9ed
sub ecx, 1
je 0x14009b182
cmp ecx, 1
jne case.0x14009bd8f.7
test r13b, r13b
je 0x14009b504
lea rcx, [r14 + 8]
lea rdx, str.Desc
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov r9d, SafeArrayAllocDescriptor
mov ecx, r9d
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovne ecx, eax
or dword [rsi], ecx
jmp 0x14009d2b3
or dword [rsi + 4], 0x30
jmp case.0x14009bd8f.7
cmp cl, 0x10
jne 0x14009b547
lea rdx, str.Horz
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b547
lea r9d, [rax + 0x20]
test r13b, r13b
je 0x14009b53e
mov eax, dword [rsi]
and eax, 0xffffffef
or eax, 0x40
mov dword [rsi], eax
jmp 0x14009d2b3
or dword [rsi + 4], 0x40
jmp 0x14009d2b3
cmp byte [rdi + 8], 0x11
jne 0x14009b5f3
lea rdx, str.Invert
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009b215
cmp byte [rdi + 8], 0x11
jne 0x14009b5f3
lea rdx, str.NoTicks
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14009b2fd
cmp byte [rdi + 8], 0x11
jne 0x14009b5f3
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, str.TickInterval
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b5f3
mov byte [rsi + 0x1a4], 1
test r13b, r13b
je 0x14009b5e2
or dword [rsi], 1
lea rcx, [r14 + 0x18]
cmp word [r14 + 0x18], ax
setne al
mov byte [rsi + 0x1a5], al
call fcn.140014e00
mov dword [rsi + 0x48], eax
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x10
jmp 0x14009d2b3
or dword [rsi + 4], 1
mov eax, 0xffffffff
mov dword [rsi + 0x48], eax
jmp case.0x14009bd8f.7
mov r8d, 4
lea rdx, str.Line
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b672
cmp cl, 0x11
jne 0x14009b630
test r13b, r13b
je case.0x14009bd8f.7
lea rcx, [r14 + 8]
call fcn.140014e00
mov dword [rsi + 0x4c], eax
jmp case.0x14009bd8f.7
cmp cl, 0xb
jne case.0x14009bd8f.7
movzx ebx, word [r14 + 8]
test ebx, 0xffffff80
jne 0x14009b65a
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009b65a
and ebx, 0xffffffdf
cmp bx, 0x53
jne case.0x14009bd8f.7
jmp 0x14009b093
or dword [rsi + 4], 6
jmp 0x14009d2b3
cmp cl, 0x11
jne 0x14009b6ab
mov r8d, 4
lea rdx, str.Page
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b6ab
test r13b, r13b
je case.0x14009bd8f.7
lea rcx, [r14 + 8]
call fcn.140014e00
mov dword [rsi + 0x50], eax
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0x11
jne 0x14009b6ed
mov r8d, 5
lea rdx, str.Thick
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b6ed
test r13b, r13b
je 0x14009b6e4
or dword [rsi], 0x40
lea rcx, [r14 + 0xa]
call fcn.140014e00
mov dword [rsi + 0x54], eax
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x40
jmp case.0x14009bd8f.7
mov r8d, 7
lea rdx, str.ToolTip
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009b7da
cmp cl, 0x11
jne case.0x14009bd8f.7
test r13b, r13b
je 0x14009b7ce
mov dword [rsi + 0x58], 0xffffffff
movzx ebx, word [r14 + 0xe]
test ebx, 0xffffff80
je 0x14009b73a
lea ecx, [rax - 1]
jmp 0x14009b751
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
mov ecx, dword [rsi + 0x58]
test eax, eax
je 0x14009b751
and ebx, 0xffffffdf
cmp ebx, 0x42
je 0x14009b7b8
cmp ebx, 0x4c
je 0x14009b7a2
cmp ebx, 0x52
je 0x14009b78c
cmp ebx, 0x54
jne 0x14009b778
xor ecx, ecx
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009bd8f.7
test ecx, ecx
jns 0x14009b7bd
xor eax, eax
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009bd8f.7
mov ecx, 3
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009bd8f.7
mov ecx, 1
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009bd8f.7
mov ecx, 2
lea eax, [rcx + 1]
mov dword [rsi + 0x58], eax
or dword [rsi], 0x100
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x100
jmp case.0x14009bd8f.7
cmp cl, 0x11
jne 0x14009b8af
mov r8d, 5
lea rdx, str.Buddy
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b8af
test r13b, r13b
je case.0x14009bd8f.7
movzx ebx, word [r14 + 0xa]
test bx, bx
je case.0x14009bd8f.7
lea rdx, [r14 + 0xc]
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [0x140118bf0]
call fcn.14003d180
mov r9, rax
test rax, rax
je case.0x14009bd8f.7
cmp byte [rax + 0x23], 0
jne 0x14009b855
mov r9, qword [rax + 0x10]
test byte [r9 + 0x22], 2
jne case.0x14009bd8f.7
mov r13, qword [rbp + 0x4f0]
mov eax, dword [r13 + 0x20]
lea r8d, [rax - 1]
cmp r8d, eax
jae case.0x14009bd8f.7
nop dword [rax + rax]
mov eax, r8d
imul rdx, rax, 0x58
add rdx, qword [r13 + 0x28]
cmp qword [rdx + 0x10], r9
jne 0x14009b8a1
cmp bx, 0x31
jne 0x14009b89d
mov qword [rsi + 0x60], rdx
jmp 0x14009b8a1
mov qword [rsi + 0x68], rdx
dec r8d
cmp r8d, dword [r13 + 0x20]
jb 0x14009b880
jmp case.0x14009bd8f.7
lea rdx, str.Vertical
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009b8ee
movzx eax, byte [rdi + 8]
cmp al, 0x11
je 0x14009b182
cmp al, 0x12
jne case.0x14009bd8f.7
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009b1ad
or dword [rsi], 4
jmp 0x14009d2b3
mov r8d, 5
lea rdx, str.Range
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009b9b2
test r13b, r13b
je case.0x14009bd8f.7
cmp word [r14 + 0xa], ax
je case.0x14009bd8f.7
movzx eax, byte [rdi + 8]
lea rcx, [r14 + 0xa]
sub al, 0xd
cmp al, 1
jbe 0x14009b966
mov byte [rsi + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 1
call fcn.140014e00
mov edx, 0x2d
mov dword [rsi + 0x40], eax
lea rcx, [r14 + 0xc]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je case.0x14009bd8f.7
lea rcx, [rax + 2]
call fcn.140014e00
mov dword [rsi + 0x44], eax
jmp case.0x14009bd8f.7
lea rdx, [rsi + 0x174]
call fcn.1400bec60
mov dword [rsi + 0x198], eax
test eax, eax
je case.0x14009bd8f.7
mov rcx, qword [rdi]
test rcx, rcx
je case.0x14009bd8f.7
cmp byte [rdi + 8], 0xd
lea r9, [rsi + 0x174]
mov r8d, eax
mov edx, 0x1012
mov eax, 0x1004
cmove edx, eax
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0x12
jne 0x14009b9d0
lea rdx, str.Smooth
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je case.0x14009a9ed.16
lea rdx, str.Buttons
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
movzx ecx, byte [rdi + 8]
test eax, eax
jne 0x14009ba1e
cmp cl, 0x13
jne 0x14009ba07
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009bdc3
or dword [rsi], 0x100
jmp 0x14009d2b3
cmp cl, 0xb
jne case.0x14009bd8f.7
jmp case.0x14009a9ed.16
or dword [rsi + 4], 1
jmp 0x14009d2b3
cmp cl, 0x13
jne 0x14009ba59
lea rdx, str.Bottom
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009ba59
mov eax, dword [rsi + 4]
test r13b, r13b
je 0x14009ba4e
or dword [rsi], 2
bts eax, 7
mov dword [rsi + 4], eax
jmp case.0x14009bd8f.7
or eax, 2
mov dword [rsi + 4], eax
jmp case.0x14009bd8f.7
cmp byte [rdi + 8], 0x18
jne 0x14009baae
mov r8d, 5
lea rdx, str.Class
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14009baae
mov rcx, qword [0x140115790]
lea r8, [rbp + 0x30]
lea rdx, [r14 + 0xa]
call qword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [rsi + 0x1ac], ax
test ax, ax
jne case.0x14009bd8f.7
lea r8, [r14 + 0xa]
lea rdx, str.Unregistered_window_class.
jmp 0x14009d210
lea rdx, str.Center
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bb96
movzx eax, byte [rdi + 8]
dec eax
cmp eax, 0x10
ja case.0x14009bd8f.7
cdqe
lea r9, [0x140000000]
test r13b, r13b
je 0x14009bb1f
mov ecx, dword [r9 + rax*4 + 0x9dab4]
add rcx, r9
jmp rcx
or dword [rsi], 8
or dword [rsi + 4], 4
jmp case.0x14009bd8f.7
or dword [rsi], 1
or dword [rsi + 4], 0x1e
jmp case.0x14009bd8f.7
or dword [rsi], 0x300
jmp case.0x14009bd8f.7
or dword [rsi], 1
or dword [rsi + 4], 2
jmp case.0x14009bd8f.7
mov ecx, dword [r9 + rax*4 + 0x9daf8]
add rcx, r9
jmp rcx
or dword [rsi + 4], 8
jmp case.0x14009bd8f.7
or dword [rsi + 4], 0x1f
jmp case.0x14009bd8f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009bb6f
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0x300
jne 0x14009d2b3
or dword [rsi + 4], eax
jmp 0x14009d2b3
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
jne 0x14009d2b3
and ecx, 0xfffffcff
mov dword [rsi], ecx
jmp 0x14009d2b3
lea rdx, str.Right
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009bcda
movzx eax, byte [rdi + 8]
dec eax
test r13b, r13b
je 0x14009bc40
cmp eax, 0x16
ja case.0x14009bd8f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9db3c]
add rcx, r9
jmp rcx
or dword [rsi + 4], 8
or dword [rsi], 4
jmp case.0x14009bd8f.7
or dword [rsi], 0x20
jmp case.0x14009bd8f.7
or dword [rsi], 2
or dword [rsi + 4], 0x1d
jmp case.0x14009bd8f.7
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
or dword [rsi + 4], 0x100
bts ecx, 9
mov dword [rsi], ecx
movzx eax, byte [rdi + 8]
sub al, 5
cmp al, 1
ja 0x14009d2b3
or ecx, r9d
mov dword [rsi], ecx
jmp 0x14009d2b3
or dword [rsi], 2
or dword [rsi + 4], 1
jmp case.0x14009bd8f.7
or dword [rsi], 0x282
jmp case.0x14009bd8f.7
cmp eax, 0x12
ja case.0x14009bd8f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9db98]
add rcx, r9
jmp rcx
or dword [rsi + 4], 0x20
jmp case.0x14009bd8f.7
or dword [rsi], 4
or dword [rsi + 4], 8
jmp case.0x14009bd8f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009bca9
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0x300
je 0x14009d2b3
or dword [rsi + 4], 0x200
jmp 0x14009d2b3
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je 0x14009d2b3
btr ecx, 9
mov dword [rsi], ecx
jmp 0x14009d2b3
or dword [rsi + 4], 0x82
jmp case.0x14009bd8f.7
lea rdx, str.Left
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009be00
movzx eax, byte [rdi + 8]
test r13b, r13b
je 0x14009bd6f
dec eax
cmp eax, 0x12
ja case.0x14009bd8f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9dbe4]
add rcx, r9
jmp rcx
or dword [rsi + 4], 4
or dword [rsi], 8
jmp case.0x14009bd8f.7
mov ecx, dword [rsi + 4]
mov r9d, SafeArrayAllocDescriptor
or dword [rsi], 0x100
bts ecx, 9
mov dword [rsi + 4], ecx
movzx eax, byte [rdi + 8]
sub al, 5
cmp al, 1
ja 0x14009d2b3
or ecx, r9d
mov dword [rsi + 4], ecx
jmp 0x14009d2b3
or dword [rsi + 4], 3
jmp case.0x14009bd8f.7
or dword [rsi], 0x280
or dword [rsi + 4], 2
jmp case.0x14009bd8f.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x14009bd8f.7
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x9dc30]
add rcx, r9
jmp rcx
or dword [rsi + 4], 0xc
jmp case.0x14009bd8f.7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009bdcf
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
mov r9d, SafeArrayAllocDescriptor
cmp eax, 0x300
je 0x14009d2b3
or dword [rsi + 4], 0x100
jmp 0x14009d2b3
mov ecx, dword [rsi]
mov r9d, SafeArrayAllocDescriptor
mov eax, ecx
and eax, 0x300
cmp eax, 0x300
je 0x14009d2b3
btr ecx, 8
mov dword [rsi], ecx
jmp 0x14009d2b3
or dword [rsi + 4], 0x80
jmp case.0x14009bd8f.7
mov rdi, r14
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009be12
cmp ax, 9
jne 0x14009be18
add rdi, 2
jmp 0x14009be03
test ax, ax
je 0x14009d299
cmp ax, 0x2d
je 0x14009bf09
cmp ax, 0x2b
jne 0x14009be3b
lea rax, [rdi + 2]
mov rdi, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14009be70
movzx eax, word [rdi + 2]
mov ecx, 0xffdf
sub ax, 0x58
test cx, ax
jne 0x14009be70
movzx ecx, word [rdi + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14009be6e
add rdi, 4
mov esi, 1
xor ebx, ebx
jmp 0x14009be73
xor ebx, ebx
mov rsi, rbx
mov ecx, ebx
movzx ebx, word [rdi]
cmp ebx, 0x20
je 0x14009bee0
nop dword [rax]
cmp ebx, 9
je 0x14009bee0
test ebx, ebx
je 0x14009befa
cmp ebx, 0x2e
je 0x14009bf02
test rsi, rsi
je 0x14009bebe
movzx ecx, bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x14009bec6
test ebx, 0xffffff80
jne 0x14009bf02
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
jmp 0x14009bf02
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x14009bea7
movzx ebx, word [rdi + 2]
add rdi, 2
mov ecx, 1
cmp ebx, 0x20
jne 0x14009be80
nop dword [rax + rax]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009beef
cmp ax, 9
jne 0x14009bef5
add rdi, 2
jmp 0x14009bee0
test ax, ax
jne 0x14009bf02
test ecx, ecx
jne 0x14009d292
mov rsi, qword [rbp + 0x500]
add r14, 2
cmp word [r14], 0
jne 0x14009bfe4
test r13b, r13b
je 0x14009bf3d
mov rax, qword [rbp + 0x518]
test rax, rax
je 0x14009bf3d
cmp byte [rax + 0x23], 0
jne 0x14009bf33
mov rax, qword [rax + 0x10]
test byte [rax + 0x21], 2
jne 0x14009bfe4
movzx ebx, word [r15]
test ebx, 0xffffff80
jne 0x14009bf5d
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009bf5d
and ebx, 0xffffffdf
cmp ebx, 0x43
je 0x14009bfa7
cmp ebx, 0x47
je 0x14009bf84
cmp ebx, 0x56
jne 0x14009d206
mov rcx, qword [rbp + 0x508]
mov qword [rcx + 0x10], 0
jmp case.0x14009bd8f.7
mov rbx, qword [rbp + 0x508]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14009bf9a
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rbx + 0x18], 0
jmp case.0x14009bd8f.7
test r13b, r13b
jne case.0x14009bd8f.7
mov rcx, qword [rbp + 0x508]
cmp byte [rcx + 8], 2
je case.0x14009bd8f.7
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0xff000000
je case.0x14009bd8f.7
mov dword [rax], 0xff000000
mov byte [rsi + 0x1a3], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15]
test ebx, 0xffffff80
jne 0x14009c004
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c004
and ebx, 0xffffffdf
add ebx, 0xffffffbf
cmp ebx, 0x18
ja case.0x14009c025.66
lea r9, [0x140000000]
movsxd rax, ebx
mov ecx, dword [r9 + rax*4 + 0x9dc74]
add rcx, r9
jmp rcx
mov rdi, qword [rbp + 0x508]
movzx eax, byte [rdi + 8]
cmp al, 3
je 0x14009d31d
cmp al, 0x12
je 0x14009d31d
mov rax, qword [rbp + 0x4f0]
mov rcx, qword [rax + 0x128]
test rcx, rcx
je 0x14009c0b3
lea rax, [rsp + 0x70]
mov dword [rbp - 0x80], 0
mov qword [rbp - 0x70], rax
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x58], rax
lea r8, [rbp + 8]
mov qword [rsp + 0x78], 0xffffffffffffffff
xor r9d, r9d
mov rax, qword [rcx]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdx
lea rdx, [rsp + 0x50]
call qword [rax + gethostname]
cmp dword [rsp + 0x60], 6
jne 0x14009c0b3
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jne 0x14009c0f3
mov r8, qword [rbp + 0x518]
lea rcx, [0x140118bf0]
mov r9d, 4
mov rdx, r14
call fcn.140033080
mov rbx, rax
test rax, rax
jne 0x14009c0f3
lea rdx, [0x1400ffcf0]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14009d314
or byte [rdi + 9], 1
movzx eax, byte [rdi + 8]
dec al
cmp al, 1
ja 0x14009c103
or dword [rsi], 0x100
test rbx, rbx
je 0x14009c111
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x14009c120
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rdi + 0x18], rbx
jmp case.0x14009bd8f.7
cmp dword [rsi + 0x150], 0x32
jae case.0x14009bd8f.7
mov rcx, r14
call fcn.140025a40
mov ecx, dword [rsi + 0x150]
mov dword [rsi + rcx*4 + 0x88], eax
inc dword [rsi + 0x150]
jmp case.0x14009bd8f.7
mov r13, qword [rbp + 0x4f0]
mov rcx, qword [r13 + 0x128]
test rcx, rcx
je 0x14009c279
xor r15d, r15d
mov qword [rsp + 0x78], 0xffffffffffffffff
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], 0xffffffffffffffff
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x58]
lea rax, [rsp + 0x70]
mov dword [rsp + 0x60], r15d
mov qword [rbp - 0x50], rax
lea r9d, [r15 + 2]
lea rax, str.HasKey
mov dword [rbp - 0x80], r15d
mov qword [rsp + 0x50], rax
lea r8, [rbp + 8]
mov qword [rsp + 0x70], r14
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
cmp qword [rbp - 0x18], r15
jne 0x14009d326
mov rcx, qword [r13 + 0x128]
lea rax, [0x1400e0674]
mov dword [rsp + 0x60], r15d
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x50], r14
lea r9d, [r15 + 1]
mov dword [rbp - 0x80], r15d
lea r8, [rbp + 8]
mov qword [rsp + 0x70], rax
mov rax, qword [rcx]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x18]
call qword [rax + gethostname]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
cmp word [r14 + rcx*2 + 2], r15w
lea rcx, [rcx + 1]
jne 0x14009c230
lea rcx, [rcx*2 + 2]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rbp + 0x508]
mov qword [rcx + 0x50], rax
nop word [rax + rax]
movzx ecx, word [r14]
lea r14, [r14 + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14009c260
jmp case.0x14009bd8f.7
cmp word [r14], 0
je 0x14009d21c
lea rax, [rsp + 0x36]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x44]
mov rdx, r14
mov dword [rsp + 0x20], 3
lea rcx, [0x140118bf0]
call fcn.14003d180
xor r15d, r15d
mov r8, rax
test rax, rax
jne 0x14009c2e8
mov r9d, dword [rsp + 0x44]
lea rcx, [0x140118bf0]
mov eax, r15d
mov rdx, r14
cmp byte [rsp + 0x36], al
setne al
inc eax
mov dword [rsp + 0x20], eax
call fcn.14003d6c0
mov r8, rax
test rax, rax
je 0x14009d21c
cmp byte [r8 + 0x23], 0
jne 0x14009c2f3
mov r8, qword [r8 + 0x10]
movzx eax, byte [r8 + 0x22]
and al, 0x22
cmp al, 2
je 0x14009d376
mov r9d, dword [r13 + 0x20]
mov edx, r15d
test r9d, r9d
je 0x14009c32a
mov r10, qword [r13 + 0x28]
mov eax, edx
imul rcx, rax, 0x58
cmp qword [rcx + r10 + 0x10], r8
je 0x14009d341
inc edx
cmp edx, r9d
jb 0x14009c312
mov rcx, qword [rbp + 0x508]
mov qword [rcx + 0x10], r8
jmp case.0x14009bd8f.7
mov rcx, qword [rbp + 0x508]
cmp byte [rcx + 8], 2
je case.0x14009bd8f.7
mov rcx, r14
call fcn.1400c0880
mov r8d, eax
cmp eax, 0xffffffff
jne 0x14009c389
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov ecx, eax
movzx r8d, ax
shr ecx, 0x10
and r8d, 0xffffff00
movzx edx, cl
movzx eax, al
or r8d, edx
shl eax, 0x10
or r8d, eax
mov rcx, qword [rsp + 0x48]
cmp dword [rcx], r8d
jne 0x14009c3a0
lea rax, [rsi + 0x70]
cmp rcx, rax
jne case.0x14009bd8f.7
mov dword [rcx], r8d
mov byte [rsi + 0x1a3], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c3cf
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c3cf
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009c416
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c405
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [r13 + 0xd0]
add eax, ecx
mov dword [rsi + 0x30], eax
jmp case.0x14009bd8f.7
mov rcx, r14
call fcn.140014e00
mov rcx, qword [rbp + 0x4f0]
cmp byte [rcx + 0x110], 0
je 0x14009c447
cmp eax, 0xffffffff
je 0x14009c447
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x30], eax
jmp case.0x14009bd8f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c46f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c46f
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009c4b6
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c4a5
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [r13 + 0xd4]
add eax, ecx
mov dword [rsi + 0x34], eax
jmp case.0x14009bd8f.7
mov rcx, r14
call fcn.140014e00
mov rcx, qword [rbp + 0x4f0]
cmp byte [rcx + 0x110], 0
je 0x14009c4e7
cmp eax, 0xffffffff
je 0x14009c4e7
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x34], eax
jmp case.0x14009bd8f.7
movzx eax, word [r14]
cmp eax, 0x2b
jne 0x14009c64e
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009c51b
lea edx, [rax - 0x29]
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c51b
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c531
mov r13, qword [rbp + 0x4f0]
mov edi, dword [r13 + 0xc0]
jmp 0x14009c563
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov edi, eax
cmp byte [r13 + 0x110], 0
je 0x14009c563
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
mov r14, qword [rbp + 0x508]
movzx ebx, byte [r14 + 0xa]
cmp bl, 0xff
je 0x14009c5af
mov r9d, dword [r13 + 0x20]
xor r15d, r15d
xor r8b, r8b
mov edx, r15d
test r9d, r9d
je 0x14009c5af
mov r10, qword [r13 + 0x28]
nop word [rax + rax]
mov eax, edx
imul r11, rax, 0x58
add r11, r10
cmp byte [r11 + 8], 0x13
jne 0x14009c5a8
cmp r8b, bl
je 0x14009c5e4
inc r8b
inc edx
cmp edx, r9d
jb 0x14009c590
mov eax, dword [r13 + 0xd0]
mov r9d, SafeArrayAllocDescriptor
add eax, dword [r13 + 0xc8]
add eax, edi
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], eax
jne 0x14009d2b3
mov eax, dword [r13 + 0xcc]
mov dword [rsi + 0x2c], eax
jmp 0x14009d2b3
test r11, r11
je 0x14009c5af
movzx r8d, byte [r14 + 0xb]
lea rax, [r10 + 0xa]
mov edx, r15d
mov rcx, r9
cmp byte [rax + 1], r8b
jne 0x14009c604
cmp byte [rax], bl
jne 0x14009c604
inc edx
add rax, 0x58
sub rcx, 1
jne 0x14009c5f8
test edx, edx
jne 0x14009c5af
mov rdx, qword [r11]
lea r8, [rbp - 0x48]
mov rcx, r13
call fcn.1400a4ed0
mov ecx, dword [rbp - 0x48]
mov r9d, SafeArrayAllocDescriptor
add ecx, edi
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], ecx
jne 0x14009d2b3
mov ecx, dword [r13 + 0xc4]
add ecx, dword [rbp - 0x44]
mov dword [rsi + 0x2c], ecx
jmp 0x14009d2b3
mov ebx, eax
test eax, 0xffffff80
jne 0x14009c66b
mov edx, 2
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c66b
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c6b0
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c6a1
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xc0]
mov dword [rsi + 0x28], ecx
jmp 0x14009c7eb
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c6d0
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c6d0
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009c732
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c706
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xc8]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], ecx
jne 0x14009d2b3
mov eax, dword [r13 + 0xcc]
mov dword [rsi + 0x2c], eax
jmp 0x14009d2b3
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c752
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c752
and ebx, 0xffffffdf
cmp bx, 0x53
jne 0x14009c7bb
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c788
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xe0]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x2c], 0x80000000
mov dword [rsi + 0x28], ecx
jne 0x14009d2b3
mov eax, dword [r13 + 0xec]
add eax, dword [r13 + 0xc4]
mov dword [rsi + 0x2c], eax
jmp 0x14009d2b3
mov rcx, r14
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
cmp byte [r13 + 0x110], 0
je 0x14009c7e8
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x28], eax
cmp dword [rsi + 0x2c], 0x80000000
mov r9d, SafeArrayAllocDescriptor
jne 0x14009d2b3
mov eax, dword [r13 + 0xdc]
add eax, dword [r13 + 0xc4]
mov dword [rsi + 0x2c], eax
jmp 0x14009d2b3
movzx eax, word [r14]
cmp eax, 0x2b
jne 0x14009c96e
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009c840
lea edx, [rax - 0x29]
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c840
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c856
mov r13, qword [rbp + 0x4f0]
mov edi, dword [r13 + 0xc4]
jmp 0x14009c888
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov edi, eax
cmp byte [r13 + 0x110], 0
je 0x14009c888
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
mov r14, qword [rbp + 0x508]
movzx ebx, byte [r14 + 0xa]
cmp bl, 0xff
je 0x14009c8cf
mov r9d, dword [r13 + 0x20]
xor r15d, r15d
xor r8b, r8b
mov edx, r15d
test r9d, r9d
je 0x14009c8cf
mov r10, qword [r13 + 0x28]
nop
mov eax, edx
imul r11, rax, 0x58
add r11, r10
cmp byte [r11 + 8], 0x13
jne 0x14009c8c8
cmp r8b, bl
je 0x14009c904
inc r8b
inc edx
cmp edx, r9d
jb 0x14009c8b0
mov eax, dword [r13 + 0xd4]
mov r9d, SafeArrayAllocDescriptor
add eax, dword [r13 + 0xcc]
add eax, edi
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], eax
jne 0x14009d2b3
mov eax, dword [r13 + 0xc8]
mov dword [rsi + 0x28], eax
jmp 0x14009d2b3
test r11, r11
je 0x14009c8cf
movzx r8d, byte [r14 + 0xb]
lea rax, [r10 + 0xa]
mov edx, r15d
mov rcx, r9
cmp byte [rax + 1], r8b
jne 0x14009c924
cmp byte [rax], bl
jne 0x14009c924
inc edx
add rax, 0x58
sub rcx, 1
jne 0x14009c918
test edx, edx
jne 0x14009c8cf
mov rdx, qword [r11]
lea r8, [rbp - 0x38]
mov rcx, r13
call fcn.1400a4ed0
mov ecx, dword [rbp - 0x34]
mov r9d, SafeArrayAllocDescriptor
add ecx, edi
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], ecx
jne 0x14009d2b3
mov ecx, dword [r13 + 0xc0]
add ecx, dword [rbp - 0x38]
mov dword [rsi + 0x28], ecx
jmp 0x14009d2b3
mov ebx, eax
test eax, 0xffffff80
jne 0x14009c98b
mov edx, 2
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c98b
and ebx, 0xffffffdf
cmp bx, 0x4d
jne 0x14009c9d0
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009c9c1
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xc4]
mov dword [rsi + 0x2c], ecx
jmp 0x14009cb0b
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009c9f0
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009c9f0
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009ca52
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009ca26
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xcc]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], ecx
jne 0x14009d2b3
mov eax, dword [r13 + 0xc8]
mov dword [rsi + 0x28], eax
jmp 0x14009d2b3
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009ca72
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ca72
and ebx, 0xffffffdf
cmp bx, 0x53
jne 0x14009cadb
lea rcx, [r15 + 4]
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
mov ecx, eax
cmp byte [r13 + 0x110], 0
je 0x14009caa8
mov edx, dword [0x140117b8c]
mov r8d, 0x60
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
add ecx, dword [r13 + 0xe4]
mov r9d, SafeArrayAllocDescriptor
cmp dword [rsi + 0x28], 0x80000000
mov dword [rsi + 0x2c], ecx
jne 0x14009d2b3
mov eax, dword [r13 + 0xe8]
add eax, dword [r13 + 0xc0]
mov dword [rsi + 0x28], eax
jmp 0x14009d2b3
mov rcx, r14
call fcn.140014e00
mov r13, qword [rbp + 0x4f0]
cmp byte [r13 + 0x110], 0
je 0x14009cb08
mov edx, dword [0x140117b8c]
mov r8d, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rsi + 0x2c], eax
cmp dword [rsi + 0x28], 0x80000000
mov r9d, SafeArrayAllocDescriptor
jne 0x14009d2b3
mov eax, dword [r13 + 0xd8]
add eax, dword [r13 + 0xc0]
mov dword [rsi + 0x28], eax
jmp 0x14009d2b3
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cb54
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cb54
and ebx, 0xffffffdf
cmp bx, 0x58
jne 0x14009ccc0
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cb7f
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cb7f
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009cb91
mov byte [rsi + 0x1c0], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cbb2
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cbb2
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009cbc4
mov byte [rsi + 0x1c2], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cbe5
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cbe5
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009cbfa
mov dword [rsi + 0x1b0], 1
jmp case.0x14009bd8f.7
cmp word [r15 + 4], 0
jne 0x14009cc11
mov dword [rsi + 0x1b0], 0x3f800000
jmp case.0x14009bd8f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009cca3
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009cca3
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014e00
test eax, eax
je 0x14009cca3
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014e00
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014e00
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1b0], xmm6
jp case.0x14009bd8f.7
jne case.0x14009bd8f.7
lea rcx, [r15 + 4]
call fcn.140028e90
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1b0], xmm1
jmp case.0x14009bd8f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cce0
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cce0
and ebx, 0xffffffdf
cmp bx, 0x59
jne 0x14009ce4c
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cd0b
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cd0b
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009cd1d
mov byte [rsi + 0x1c1], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cd3e
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cd3e
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009cd50
mov byte [rsi + 0x1c3], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cd71
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cd71
and ebx, 0xffffffdf
cmp bx, 0x50
jne 0x14009cd86
mov dword [rsi + 0x1b4], 1
jmp case.0x14009bd8f.7
cmp word [r15 + 4], 0
jne 0x14009cd9d
mov dword [rsi + 0x1b4], 0x3f800000
jmp case.0x14009bd8f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009ce2f
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009ce2f
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014e00
test eax, eax
je 0x14009ce2f
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014e00
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014e00
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1b4], xmm6
jp case.0x14009bd8f.7
jne case.0x14009bd8f.7
lea rcx, [r15 + 4]
call fcn.140028e90
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1b4], xmm1
jmp case.0x14009bd8f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009ce6c
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ce6c
and ebx, 0xffffffdf
cmp bx, 0x57
jne 0x14009cfa2
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ce97
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ce97
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009cea9
mov byte [rsi + 0x1c0], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009ceca
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009ceca
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009cedc
mov byte [rsi + 0x1c4], 1
jmp case.0x14009bd8f.7
cmp word [r15 + 4], 0
jne 0x14009cef3
mov dword [rsi + 0x1b8], 0x3f800000
jmp case.0x14009bd8f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009cf85
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009cf85
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014e00
test eax, eax
je 0x14009cf85
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014e00
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014e00
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1b8], xmm6
jp case.0x14009bd8f.7
jne case.0x14009bd8f.7
lea rcx, [r15 + 4]
call fcn.140028e90
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1b8], xmm1
jmp case.0x14009bd8f.7
movzx ebx, word [r14]
test ebx, 0xffffff80
jne 0x14009cfc2
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cfc2
and ebx, 0xffffffdf
cmp bx, 0x48
jne case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009cfed
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009cfed
and ebx, 0xffffffdf
cmp bx, 0x52
jne 0x14009cfff
mov byte [rsi + 0x1c1], 1
jmp case.0x14009bd8f.7
movzx ebx, word [r15 + 4]
test ebx, 0xffffff80
jne 0x14009d020
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009d020
and ebx, 0xffffffdf
cmp bx, 0x41
jne 0x14009d032
mov byte [rsi + 0x1c5], 1
jmp case.0x14009bd8f.7
cmp word [r15 + 4], 0
jne 0x14009d049
mov dword [rsi + 0x1bc], 0x3f800000
jmp case.0x14009bd8f.7
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x14009d0db
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
cmp word [rax], 0
je 0x14009d0db
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [rax + 2]
call fcn.140014e00
test eax, eax
je 0x14009d0db
mov edx, 0x2f
lea rcx, [r15 + 4]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
lea rcx, [r15 + 4]
mov rbx, rax
call fcn.140014e00
lea rcx, [rbx + 2]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call fcn.140014e00
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
ucomiss xmm6, xmm7
movss dword [rsi + 0x1bc], xmm6
jp case.0x14009bd8f.7
jne case.0x14009bd8f.7
lea rcx, [r15 + 4]
call fcn.140028e90
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x1bc], xmm1
jmp case.0x14009bd8f.7
mov rcx, r14
call fcn.140028e90
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss dword [rsi + 0x38], xmm1
jmp case.0x14009bd8f.7
movzx ebx, word [r15]
test ebx, 0xffffff80
jne 0x14009d131
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14009d131
and ebx, 0xffffffdf
cmp bx, 0x45
jne 0x14009d206
mov rdi, r14
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009d14f
cmp ax, 9
jne 0x14009d155
add rdi, 2
jmp 0x14009d140
test ax, ax
je 0x14009d206
cmp ax, 0x2d
je 0x14009d206
cmp ax, 0x2b
jne 0x14009d178
lea rax, [rdi + 2]
mov rdi, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14009d1ac
movzx eax, word [rdi + 2]
mov ecx, 0xffdf
sub ax, 0x58
test cx, ax
jne 0x14009d1ac
movzx ecx, word [rdi + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14009d1ac
add rdi, 4
mov esi, 1
xor r15d, r15d
jmp 0x14009d1b2
xor r15d, r15d
mov esi, r15d
movzx ebx, word [rdi]
mov ecx, r15d
cmp ebx, 0x20
je 0x14009d250
cmp ebx, 9
je 0x14009d250
test ebx, ebx
je 0x14009d26a
cmp ebx, 0x2e
je 0x14009d206
test rsi, rsi
je 0x14009d230
movzx ecx, bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r15d
sete cl
test ecx, ecx
je 0x14009d238
test ebx, 0xffffff80
jne 0x14009d206
mov edx, 2
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
lea rdx, str.Invalid_option.
mov r8, r12
lea rcx, [0x140118bf0]
call fcn.14004dc70
movzx eax, word [rsp + 0x34]
mov rcx, qword [rsp + 0x38]
mov word [rcx], ax
xor eax, eax
jmp 0x14009da43
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x14009d1f1
movzx ebx, word [rdi + 2]
add rdi, 2
mov ecx, 1
cmp ebx, 0x20
jne 0x14009d1c1
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14009d25f
cmp ax, 9
jne 0x14009d265
add rdi, 2
jmp 0x14009d250
test ax, ax
jne 0x14009d206
test ecx, ecx
je 0x14009d206
mov rcx, r14
call fcn.140025a40
mov rcx, qword [rbp + 0x500]
mov r9d, SafeArrayAllocDescriptor
test r13b, r13b
je 0x14009d28d
or dword [rcx + 8], eax
jmp 0x14009d2b3
or dword [rcx + 0xc], eax
jmp 0x14009d2b3
mov rsi, qword [rbp + 0x500]
mov rcx, r14
call fcn.140025a40
test r13b, r13b
je 0x14009d2aa
or dword [rsi], eax
jmp case.0x14009bd8f.7
or dword [rsi + 4], eax
mov r9d, SafeArrayAllocDescriptor
mov r8, qword [rsp + 0x38]
movzx eax, word [rsp + 0x34]
mov word [r8], ax
mov r14, r8
movzx edx, word [r14]
cmp dx, 0x20
je 0x14009d2d4
cmp dx, 9
jne 0x14009d2da
add r14, 2
jmp 0x14009d2c4
mov rsi, qword [rbp + 0x500]
mov rdi, qword [rbp + 0x508]
test dx, dx
je 0x14009d382
xor ebx, ebx
jmp 0x14009a473
lea r8, [r14 - 2]
lea rdx, str.The_same_variable_cannot_be_used_for_more_than_one_control.
lea rcx, [0x140118bf0]
call fcn.14004dc70
jmp 0x14009da43
lea rdx, str.Target_label_does_not_exist.
jmp 0x14009d34f
lea rdx, str.This_control_type_should_not_have_an_associated_subroutine.
jmp 0x14009d34f
mov rcx, qword [rbp + 0x508]
cmp qword [rcx], r15
je 0x14009d33c
call fcn.14000e350
jmp 0x14009da43
mov r8, r12
jmp 0x14009d2fc
mov rdi, qword [rbp + 0x508]
lea rdx, str.The_same_variable_cannot_be_used_for_more_than_one_control.
mov rcx, qword [rsp + 0x38]
movzx eax, word [rsp + 0x34]
mov word [rcx], ax
cmp qword [rdi], 0
jne 0x14009d332
mov r8, r12
lea rcx, [0x140118bf0]
call fcn.14004dc70
jmp 0x14009da43
lea rdx, str.A_controls_variable_must_be_global_or_static.
jmp 0x14009d20d
mov r15, qword [rbp + 0x4f0]
lea r12, [0x140000000]
mov r13d, 1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14009da3e
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r8d, dword [rsi]
mov ebx, r8d
mov edx, dword [rsi + 4]
mov r14d, eax
or ebx, eax
mov ecx, edx
not ecx
and ebx, ecx
movzx ecx, byte [rdi + 8]
add ecx, 0xfffffffe
cmp ecx, 8
ja case.0x14009d3db.9
movsxd rax, ecx
mov ecx, dword [r12 + rax*4 + 0x9dcd8]
add rcx, r12
jmp rcx
mov eax, ebx
xor eax, r14d
and eax, 0xf
xor ebx, eax
jmp case.0x14009d3db.9
and ebx, 0xfffffff7
or ebx, 7
jmp case.0x14009d3db.9
test bl, 1
je 0x14009d3fe
and ebx, 0xfffffff1
or ebx, 1
jmp 0x14009d401
and ebx, 0xfffffff0
mov eax, dword [r15 + 0x30]
mov edi, dword [rbp + 0x510]
cmp edi, eax
jne 0x14009d496
test dl, 1
je 0x14009d439
mov rcx, qword [r15 + 8]
xor r9d, r9d
mov r8, r13
mov dword [r15 + 0x30], 0xffffffff
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
or r14d, 1
mov rdi, qword [rbp + 0x508]
movsxd rax, dword [rsi + 0x78]
test eax, eax
je 0x14009d5a3
movzx ecx, byte [rdi + 8]
cmp cl, 0xc
jne 0x14009d57b
mov rcx, qword [rdi]
xor r9d, r9d
mov edx, 0xc5
test eax, eax
jns 0x14009d59a
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rsi + 0x78], 0x80000000
je 0x14009d5a3
test bl, 4
jne 0x14009d5a3
and ebx, 0xffefff7f
jmp 0x14009d5a3
test r8b, 1
je 0x14009d439
cmp eax, dword [r15 + 0x20]
jae 0x14009d4e1
mov rcx, qword [r15 + 0x28]
mov edx, 0xfffffff0
imul r8, rax, 0x58
mov rcx, qword [r8 + rcx]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [r15 + 0x30]
mov r9, r13
imul r10, rcx, 0x58
mov rcx, qword [r15 + 0x28]
mov r8d, eax
and r8d, 0xfffe
mov edx, 0xf4
mov rcx, qword [r10 + rcx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r15 + 8]
lea r8d, [rdi + 3]
xor r9d, r9d
mov dword [r15 + 0x30], edi
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14009d439
mov eax, ebx
and eax, 6
cmp al, 6
jne 0x14009d514
and ebx, 0xfffffff6
or ebx, 6
jmp case.0x14009d3db.9
and ebx, 0xfffffff3
or ebx, 3
jmp case.0x14009d3db.9
and ebx, 0xfffffff9
or ebx, 9
jmp case.0x14009d3db.9
test bl, 1
je 0x14009d53a
and ebx, 0xfffffff1
or ebx, 1
jmp case.0x14009d3db.9
and ebx, 0xfffffff2
or ebx, 2
jmp case.0x14009d3db.9
mov eax, dword [rsi + 0x14]
cmp eax, 0xffffffff
je case.0x14009d3db.9
mov rcx, qword [rdi]
mov r8d, eax
xor r9d, r9d
mov edx, 0x108e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rsi + 0x14]
cmp eax, 4
je case.0x14009d3db.9
and ebx, 0xfffffffc
or ebx, eax
jmp case.0x14009d3db.9
cmp cl, 0xf
jne 0x14009d5a3
mov rcx, qword [rdi]
mov edx, 0x403
test eax, eax
jns 0x14009d594
xor r9d, r9d
xor r8d, r8d
jmp 0x14009d59d
mov r9d, 6
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
xor sil, sil
cmp r14d, ebx
je 0x14009d6a7
mov r12, qword [rbp + 0x508]
xor dil, dil
mov sil, 1
movzx eax, byte [r12 + 8]
cmp al, 4
je 0x14009d64d
cmp al, 9
je 0x14009d5f3
cmp al, 0x12
jne 0x14009d663
mov rcx, qword [r12]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x4f8], eax
jmp 0x14009d663
mov eax, r14d
and eax, 0x100000
bt ebx, 0x14
jae 0x14009d63c
test eax, eax
jne 0x14009d663
mov r15, qword [rbp + 0x500]
mov eax, dword [r15 + 0x7c]
test eax, eax
jns 0x14009d62f
mov rcx, qword [r12]
lea rdx, [rbp - 0x28]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp - 0x20]
sub eax, dword [rbp - 0x28]
lea eax, [rax + rax*2]
mov dword [r15 + 0x7c], eax
movsxd r8, eax
xor r9d, r9d
mov edx, 0x194
jmp 0x14009d659
test eax, eax
je 0x14009d663
xor r9d, r9d
mov edx, 0x194
xor r8d, r8d
jmp 0x14009d659
movzx r8d, bx
mov r9, r13
mov edx, 0xf4
mov rcx, qword [r12]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [r12]
mov r8d, ebx
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14009d68b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14009d6ae
mov rcx, qword [r12]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r14d
movzx edi, dil
cmovne edi, r13d
jmp 0x14009d6ae
movzx edi, byte [rbp + 0x508]
mov rcx, qword [rbp + 0x508]
mov edx, 0xffffffec
movzx r12d, sil
mov rcx, qword [rcx]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r13d, eax
mov r15d, eax
mov rax, qword [rbp + 0x500]
or r15d, dword [rax + 8]
mov ecx, dword [rax + 0xc]
not ecx
and r15d, ecx
cmp r13d, r15d
je 0x14009d749
movzx ecx, sil
test sil, sil
mov eax, 1
cmove ecx, eax
and r12b, dil
movzx esi, cl
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, r15d
mov edx, 0xffffffec
mov r15, qword [rbp + 0x508]
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x14009d72c
movzx edi, r12b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14009d749
mov rcx, qword [r15]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, r13d
movzx edi, r12b
mov eax, 1
cmovne edi, eax
mov r13, qword [rbp + 0x508]
cmp byte [r13 + 8], 0xa
jne 0x14009d7bf
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, qword [rbp + 0x500]
mov r15, rax
mov eax, dword [r12 + 0x10]
cmp r15d, eax
je 0x14009d7c6
test sil, sil
jne 0x14009d78b
mov sil, 1
xor dil, dil
mov rcx, qword [r13]
mov r9, rax
xor r8d, r8d
mov edx, 0x1036
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1037
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, r15d
je 0x14009d7cb
mov dil, 1
jmp 0x14009d7c6
mov r12, qword [rbp + 0x500]
test sil, sil
je 0x14009d7e5
mov eax, dword [rsp + 0x30]
test dil, dil
movzx eax, al
mov r15d, 1
cmovne eax, r15d
mov dword [rsp + 0x30], eax
jmp 0x14009d7eb
mov r15d, 1
movzx eax, byte [r13 + 8]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x14009d80f.13
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x9dcfc]
add rcx, rdx
jmp rcx
cmp byte [r12 + reloc.OLEAUT32.dll_OleCreatePictureIndirect], 0
je case.0x14009d80f.13
cmp dword [r12 + 0x44], 0x7fff
jg 0x14009d859
cmp dword [r12 + 0x40], 0xffff8001
jl 0x14009d859
and byte [r13 + 9], 0x7f
mov edx, 0x465
movzx ecx, word [r12 + 0x40]
movzx eax, word [r12 + 0x44]
shl ecx, 0x10
or ecx, eax
movsxd r9, ecx
jmp 0x14009d98c
or byte [r13 + 9], 0x80
mov edx, 0x46f
movsxd r9, dword [r12 + 0x44]
movsxd r8, dword [r12 + 0x40]
jmp 0x14009d98f
mov r8, r12
mov rdx, r13
call fcn.1400a4530
test dword [r12 + 4], 0x100
je case.0x14009d80f.13
xor r9d, r9d
mov edx, 0x41d
jmp 0x14009d98c
mov r8, r12
mov rdx, r13
call fcn.1400a46a0
jmp case.0x14009d80f.13
cmp byte [r12 + 0x1a3], 0
je 0x14009d8ca
mov r9d, dword [r13 + 0x20]
xor r8d, r8d
mov rcx, qword [r13]
mov edx, 0x111e
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r12 + 0x74]
cmp eax, 0xffffffff
je case.0x14009d80f.13
cmp eax, 0xff000000
jne 0x14009d8ea
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColor]
mov r9d, eax
mov edx, 0x111d
jmp 0x14009d98c
mov rcx, qword [rbp + 0x4f0]
mov r9d, ebx
mov r8, r12
mov rdx, r13
call fcn.1400a4780
cmp r14d, ebx
je case.0x14009d80f.13
mov r8d, dword [rbp + 0x4f8]
xor r9d, r9d
mov edx, 0x402
jmp 0x14009d98f
mov eax, dword [r12 + 0x150]
test eax, eax
je case.0x14009d80f.13
mov rcx, qword [r13]
lea r9, [r12 + 0x88]
mov r8d, eax
mov edx, 0xcb
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
jmp 0x14009d99d
mov eax, dword [r12 + 0x150]
test eax, eax
je case.0x14009d80f.13
mov rcx, qword [r13]
lea r9, [r12 + 0x88]
mov r8d, eax
mov edx, 0x192
call qword [sym.imp.USER32.dll_SendMessageW]
mov bl, 1
jmp 0x14009d99d
mov eax, dword [r12 + 0x74]
cmp eax, 0xffffffff
je case.0x14009d80f.13
mov r9d, eax
mov edx, 0x2001
xor r8d, r8d
mov rcx, qword [r13]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [rsp + 0x30]
mov eax, dword [r12 + 0x19c]
test eax, eax
je 0x14009d9da
mov rcx, qword [r13]
cmp eax, 3
mov eax, 0
sete al
xor r9d, r9d
mov r8, rax
lea edx, [r9 + 0xb]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [r12 + 0x19c], 3
jne 0x14009d9da
cmp byte [r13 + 8], 0xb
jne 0x14009d9de
test bl, bl
je 0x14009d9ed
mov rcx, qword [r13]
mov r8d, r15d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
test sil, sil
je 0x14009da3e
test dil, dil
jne 0x14009da3e
mov rax, qword [0x140112060]
lea rdx, [0x1400f5d5c]
test byte [rax + 0x140], 1
jne 0x14009da28
mov rcx, qword [0x1401156c0]
xor r9d, r9d
mov byte [rsp + 0x20], 1
lea r8, [r9 - 1]
call fcn.1400c4200
jmp 0x14009da3e
mov rcx, qword [0x1401192c0]
lea r9, [0x1400e0674]
xor r8d, r8d
call fcn.14004d3c0
mov eax, 1
movaps xmm7, xmmword [rsp + 0x580]
movaps xmm6, xmmword [rsp + 0x590]
add rsp, 0x5a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret