Function at 0x14009d1d0
Capabilities:
Check os version
Enumerate gui resources
Get file system object information
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b50]
mov eax, 0x2c50
call fcn.1400ab0e0
sub rsp, rax
movaps xmmword [rsp + 0x2c40], xmm6
movaps xmmword [rsp + 0x2c30], xmm7
movaps xmmword [rsp + 0x2c20], xmm8
movaps xmmword [rsp + 0x2c10], xmm9
movaps xmmword [rsp + 0x2c00], xmm10
movaps xmmword [rsp + 0x2bf0], xmm11
movaps xmmword [rsp + 0x2be0], xmm12
movaps xmmword [rsp + 0x2bd0], xmm13
movaps xmmword [rsp + 0x2bc0], xmm14
movaps xmmword [rsp + 0x2bb0], xmm15
mov rax, qword [0x1401222f0]
xor rax, rsp
mov qword [rbp + 0x2aa0], rax
xor r14d, r14d
xorps xmm11, xmm11
mov qword [rsp + 0x70], rcx
mov byte [rsp + 0x62], dl
lea rcx, [rbp + 0x12a2]
mov r8d, 0x1fe
movsd qword [rbp - 0x18], xmm11
movsd qword [rbp - 8], xmm11
movsd qword [rbp + 0x40], xmm11
xor edx, edx
xor sil, sil
mov qword [rbp + 0x20], r14
movaps xmm8, xmm11
movaps xmm10, xmm11
movaps xmm15, xmm11
mov r12d, r14d
mov dword [rsp + 0x68], r14d
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x80], r14
mov qword [rbp - 0x10], r14
mov qword [rbp + 0x50], r14
mov qword [rbp], r14
mov qword [rbp + 8], r14
mov word [rbp + 0x12a0], r14w
call fcn.1400a8b00
xor al, al
lea rcx, [0x1401265d0]
mov qword [rbp + 0x18], r14
mov byte [rsp + 0x64], sil
mov qword [rbp + 0x58], r14
mov byte [rsp + 0x60], sil
mov dword [rbp + 0x10], r14d
mov dword [rbp + 0x14], r14d
mov qword [rbp + 0x60], r14
mov byte [rsp + 0x63], al
call fcn.14006a7a0
mov eax, dword [0x14013d6d0]
mov qword [0x14013d718], r14
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqa xmmword [0x14013d720], xmm1
movdqa xmmword [0x14013d790], xmm1
mov dword [0x14013d6dc], eax
mov rax, qword [0x14013d6e8]
mov qword [0x14013d730], r14
mov qword [0x14013d700], rax
mov eax, dword [0x14013d6d4]
mov qword [0x14013d6e8], r14
mov dword [0x14013d6e0], eax
mov rax, qword [0x14013d6f0]
mov qword [0x14013d6d0], r14
mov qword [0x14013d708], rax
mov eax, dword [0x14013d6d8]
mov qword [0x14013d788], r14
mov dword [0x14013d6e4], eax
mov rax, qword [0x14013d6f8]
mov dword [0x14013d6d8], r14d
movdqa xmmword [0x14013d6f0], xmm0
mov qword [0x14013d710], rax
mov eax, dword [0x14013d740]
mov qword [0x14013d7a0], r14
mov dword [0x14013d74c], eax
mov rax, qword [0x14013d758]
mov qword [0x14013d758], r14
mov qword [0x14013d770], rax
mov eax, dword [0x14013d744]
mov qword [0x14013d740], r14
mov dword [0x14013d750], eax
mov rax, qword [0x14013d760]
mov qword [0x14013d778], rax
mov eax, dword [0x14013d748]
mov dword [0x14013d748], r14d
mov dword [0x14013d754], eax
mov rax, qword [0x14013d768]
mov qword [0x14013d780], rax
mov eax, dword [0x14013d7b0]
movdqa xmmword [0x14013d760], xmm0
mov dword [0x14013d7bc], eax
mov rax, qword [0x14013d7c8]
mov qword [0x14013d7e0], rax
mov eax, dword [0x14013d7b4]
mov ecx, 1
movzx esi, sil
mov dword [0x14013d7c0], eax
mov rax, qword [0x14013d7d0]
lea r8d, [r14 + 0x50]
movdqa xmmword [0x14013d800], xmm1
mov qword [0x14013d7e8], rax
mov eax, dword [0x14013d7b8]
mov qword [0x14013d7b0], r14
mov dword [0x14013d7c4], eax
mov rax, qword [0x14013d7d8]
mov dword [0x14013d7b8], r14d
movdqa xmmword [0x14013d7d0], xmm0
mov qword [0x14013d7f0], rax
movzx eax, byte [0x140126e7a]
mov qword [0x14013d7c8], r14
cmp dword [0x14013d8b0], eax
mov qword [0x14013d7f8], r14
mov qword [0x14013d810], r14
cmovne esi, ecx
lea rcx, [rbp + 0xe10]
xor edx, edx
mov dword [0x14013d8b0], eax
mov word [rbp + 0x1aa0], r14w
call fcn.1400a8b00
mov rax, qword [0x140130f68]
mov rcx, qword [0x140130f58]
mov edx, dword [0x14012cc5c]
mov r9, qword [0x140130f80]
mov r8, qword [0x140130f78]
mov rbx, qword [0x140130f90]
mov qword [0x140130f58], rax
mov eax, dword [0x140130f70]
mov qword [0x140130f68], rcx
mov dword [0x14012cc5c], eax
mov rax, qword [0x140131028]
mov dword [0x140130f70], edx
mov qword [0x140130f60], rax
lea rax, [rbp + 0x60]
lea rdx, [0x140130f70]
mov qword [rsp + 0x30], rax
lea rax, [0x140130f90]
lea rcx, [0x140130f68]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140130f88]
mov qword [rsp + 0x20], rax
call fcn.14007db30
mov r13, qword [0x140130f90]
movsd xmm13, qword [0x1400e44b8]
sub r13, rbx
mov r15, rax
mov qword [0x140131028], rax
add r13, qword [rbp + 0x60]
mov eax, dword [0x14012bcd8]
sub r15, qword [0x140130f60]
mov qword [rbp + 0x38], r13
cmp eax, 1
jbe 0x14009d6af
test eax, eax
jle 0x14009d6af
mov ebx, r12d
mov edi, r12d
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x140130f78]
mov r9, qword [0x140130fd0]
mov r8, qword [rdi + rax + 8]
mov rdx, qword [rdi + rax + 0x10]
sub rdx, qword [rdi + rax]
add rdx, r8
sub r8, qword [rdi + rax]
test r15, r15
je 0x14009d607
mov rax, qword [rbx + r9]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rcx, rdx
sub rcx, qword [rax + 0x8c0]
cvtsi2ss xmm1, r15
cvtsi2ss xmm0, rcx
cvtps2pd xmm2, xmm0
cvtps2pd xmm0, xmm1
mulsd xmm2, xmm13
divsd xmm2, xmm0
jmp 0x14009d60b
movaps xmm2, xmm11
mov rax, qword [rbx + r9]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
mov qword [rax + 0x8c0], rdx
mov rdx, qword [0x140130fd0]
cvtps2pd xmm6, xmm0
test r15, r15
je 0x14009d65b
mov rax, qword [rbx + rdx]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rcx, r8
sub rcx, qword [rax + 0x8c8]
cvtsi2ss xmm1, r15
cvtsi2ss xmm0, rcx
cvtps2pd xmm2, xmm0
cvtps2pd xmm0, xmm1
mulsd xmm2, xmm13
divsd xmm2, xmm0
jmp 0x14009d65f
movaps xmm2, xmm11
mov rax, qword [rbx + rdx]
xorps xmm0, xmm0
mov qword [rsp + 0x20], r12
mov qword [rax + 0x8c8], r8
mov rcx, qword [0x140130fd0]
mov rdx, qword [0x140131028]
cvtsd2ss xmm0, xmm2
movaps xmm2, xmm6
mov rcx, qword [rbx + rcx]
cvtps2pd xmm3, xmm0
call fcn.14004abf0
mov eax, dword [0x14012bcd8]
inc r14d
add rdi, 0x30
add rbx, 8
cmp r14d, eax
jl 0x14009d5b0
jmp 0x14009d6b7
movsd xmm6, qword [rbp + 0x88]
mov rdi, qword [0x140126ab0]
movss xmm14, dword [0x1400e4874]
imul r15, rax
or eax, 0xffffffff
xorps xmm12, xmm12
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x30], r15
test rdi, rdi
je 0x14009de6e
mov r14d, 1
jmp 0x14009d6f3
or eax, 0xffffffff
cmp dword [rdi + 0x60], eax
jne 0x14009d6fe
cmp dword [rdi + 0x54], 0
jne 0x14009d709
mov qword [rdi + 0x5f8], 0
cmp dword [rdi + 0x54], 0xfffffff6
mov rbx, qword [rdi + 0x698]
mov qword [rbp + 0x70], rbx
jne 0x14009ddc6
mov rcx, qword [0x14012bbd8]
lea r9, [rbp + 0xc0]
or r8, 0xffffffffffffffff
mov edx, 0x1053
mov byte [rsp + 0x64], 1
mov dword [rbp + 0xc0], r14d
mov qword [rbp + 0xd0], rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x7c], eax
cmp eax, 0xffffffff
jne 0x14009d779
mov eax, dword [rdi + 0x28]
test al, 2
je 0x14009d779
test al, 1
je 0x14009d76a
cmp byte [0x14012ae0e], 0
jne 0x14009d779
mov rcx, qword [0x14012bbd8]
mov rdx, rdi
call fcn.140053dc0
mov edx, dword [0x14012bcd8]
xor eax, eax
mov qword [rbp - 0x58], rdi
mov r12d, eax
mov ebx, eax
mov r14d, eax
mov r15d, eax
mov r13d, eax
mov ecx, eax
mov dword [rbp - 0x20], edx
test edx, edx
jle 0x14009da2b
mov r9, qword [0x140130f78]
cmp edx, 4
jb 0x14009d9c7
mov eax, edx
and eax, 0x80000003
jge 0x14009d7c0
dec eax
or eax, 0xfffffffc
inc eax
mov r10, qword [0x140130f80]
mov r14, qword [0x140130f88]
xorps xmm7, xmm7
mov r15d, edx
mov ebx, 2
lea r11, [r9 + 0x88]
movdqa xmm4, xmm7
movdqa xmm3, xmm7
movdqa xmm5, xmm7
sub r15d, eax
movdqa xmm8, xmm4
movdqa xmm9, xmm3
mov rdi, rcx
add r10, 0x34
movdqa xmm10, xmm5
movdqa xmm6, xmm7
nop dword [rax]
movd xmm0, dword [r11 - 0x30]
movd xmm2, dword [r11 - 0x60]
movd xmm1, dword [r10 - 0x30]
movsxd r8, r13d
lea eax, [rbx - 1]
add r13d, 4
movsxd rdx, eax
lea rcx, [r8 + r8*2]
add rdi, 4
punpckldq xmm2, xmm0
add rcx, rcx
lea rax, [rdx + rdx*2]
lea r11, [r11 + 0xc0]
movd xmm0, dword [r10 - 0x18]
add rax, rax
lea r10, [r10 + 0x60]
punpckldq xmm1, xmm0
xorps xmm0, xmm0
paddd xmm2, xmm1
movq xmm1, qword [r9 + rcx*8 + 0x20]
punpckldq xmm2, xmm0
movq xmm0, qword [r9 + rcx*8 + 0x18]
movhpd xmm1, qword [r9 + rax*8 + 0x20]
movhpd xmm0, qword [r9 + rax*8 + 0x18]
lea eax, [rbx + 1]
paddq xmm1, xmm0
movq xmm0, qword [r14 + r8*8]
paddq xmm2, xmm5
movhpd xmm0, qword [r14 + rdx*8]
movsxd r8, ebx
movsxd rdx, eax
movdqa xmm5, xmm2
movd xmm2, dword [r11 - 0xc0]
lea rcx, [r8 + r8*2]
add rcx, rcx
lea rax, [rdx + rdx*2]
add ebx, 4
add rax, rax
paddq xmm0, xmm7
paddq xmm4, xmm1
paddq xmm3, xmm1
movd xmm1, dword [r10 - 0x60]
movdqa xmm7, xmm0
movd xmm0, dword [r11 - 0x90]
punpckldq xmm2, xmm0
movd xmm0, dword [r10 - 0x48]
punpckldq xmm1, xmm0
xorps xmm0, xmm0
paddd xmm2, xmm1
movq xmm1, qword [r9 + rcx*8 + 0x20]
movhpd xmm1, qword [r9 + rax*8 + 0x20]
punpckldq xmm2, xmm0
movq xmm0, qword [r9 + rcx*8 + 0x18]
movhpd xmm0, qword [r9 + rax*8 + 0x18]
paddq xmm1, xmm0
paddq xmm2, xmm10
movdqa xmm0, xmm1
paddq xmm0, xmm8
paddq xmm1, xmm9
movdqa xmm10, xmm2
movdqa xmm8, xmm0
movdqa xmm9, xmm1
movq xmm0, qword [r14 + r8*8]
movhpd xmm0, qword [r14 + rdx*8]
paddq xmm0, xmm6
movdqa xmm6, xmm0
cmp r13d, r15d
jl 0x14009d810
movsd xmm10, qword [rbp - 8]
mov edx, dword [rbp - 0x20]
paddq xmm4, xmm8
mov qword [rbp + 0x30], rdi
mov rdi, qword [rbp - 0x28]
mov rcx, qword [rbp + 0x30]
movsd xmm8, qword [rbp - 0x18]
paddq xmm5, xmm2
paddq xmm3, xmm1
movdqa xmm0, xmm5
psrldq xmm0, 8
paddq xmm6, xmm7
paddq xmm5, xmm0
movq r14, xmm5
movdqa xmm0, xmm3
psrldq xmm0, 8
paddq xmm3, xmm0
movq rbx, xmm3
movdqa xmm0, xmm4
psrldq xmm0, 8
paddq xmm4, xmm0
movq r12, xmm4
movdqa xmm0, xmm6
psrldq xmm0, 8
paddq xmm6, xmm0
movq r15, xmm6
cmp r13d, edx
jge 0x14009da2b
mov rax, qword [0x140130f88]
lea r8, [r9 + 0x20]
mov r9, qword [0x140130f80]
lea r10, [rax + rcx*8]
add r9, 4
lea rax, [rcx + rcx*2]
shl rax, 4
add r8, rax
lea rax, [rcx + rcx*2]
sub edx, r13d
lea r9, [r9 + rax*8]
mov r11d, edx
nop
mov eax, dword [r8 + 8]
mov rdx, qword [r8 - 8]
add r15, qword [r10]
add rdx, qword [r8]
add eax, dword [r9]
lea r9, [r9 + 0x18]
add r14, rax
add r12, rdx
add rbx, rdx
lea r8, [r8 + 0x30]
lea r10, [r10 + 8]
dec r11
jne 0x14009da00
xor ecx, ecx
mov rax, r14
mov r8d, 0x444
sub rax, qword [rdi + 0x618]
test rax, rax
cmovg rcx, rax
cmp rcx, qword [rdi + 0x610]
mov qword [rdi + 0x610], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov r8d, 0x443
or sil, al
cmp r14, qword [rdi + 0x618]
mov qword [rdi + 0x618], r14
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, r15
mov r8d, 0x4b0
sub rcx, qword [rdi + 0x628]
or sil, al
cmp rcx, qword [rdi + 0x620]
mov qword [rdi + 0x620], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov r8d, 0x4ab
or sil, al
cmp r15, qword [rdi + 0x628]
mov qword [rdi + 0x628], r15
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
or sil, al
mov rax, r12
sub rax, qword [rdi + 0x600]
cmp qword [0x14012cc90], 0
je 0x14009db46
mov r13, qword [rbp + 0x38]
test r13, r13
je 0x14009db3c
mov r15, qword [rbp - 0x30]
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm1, qword [rdi + 0x620]
cvtsi2ss xmm0, r13
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009db72
mov r15, qword [rbp - 0x30]
movaps xmm1, xmm12
jmp 0x14009db72
mov r15, qword [rbp - 0x30]
test r15, r15
je 0x14009db6a
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm1, rax
cvtsi2ss xmm0, r15
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009db6e
movaps xmm1, xmm12
mov r13, qword [rbp + 0x38]
xorps xmm6, xmm6
cvtss2sd xmm6, xmm1
comisd xmm6, xmm13
jbe 0x14009db84
movaps xmm6, xmm13
add qword [rbp - 0x10], rbx
mov rax, rbx
sub rax, qword [rdi + 0x608]
mov qword [rdi + 0x608], rbx
test r15, r15
je 0x14009dbb9
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm1, rax
cvtsi2ss xmm0, r15
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009dbbd
movaps xmm1, xmm12
mov rdx, qword [0x140131028]
mov rcx, qword [rdi + 0x638]
xorps xmm3, xmm3
xor r14d, r14d
movaps xmm2, xmm6
cvtss2sd xmm3, xmm1
mov qword [rsp + 0x20], r14
call fcn.14004abf0
mov rdx, qword [0x140131028]
movaps xmm3, xmm11
movaps xmm2, xmm11
mov rcx, qword [rdi + 0x430]
mov qword [rsp + 0x20], r14
call fcn.14004abf0
mov rcx, qword [rdi + 0x4f8]
test rcx, rcx
je 0x14009dc27
mov rdx, qword [0x140131028]
movaps xmm3, xmm11
movaps xmm2, xmm11
mov qword [rsp + 0x20], r14
call fcn.14004abf0
test byte [rdi + 0x28], 0x40
je 0x14009dc38
addsd xmm10, xmm6
movsd qword [rbp - 8], xmm10
cmp dword [rdi + 0x54], r14d
je 0x14009dc49
addsd xmm8, xmm6
movsd qword [rbp - 0x18], xmm8
comisd xmm6, xmm15
jbe 0x14009dc58
movaps xmm15, xmm6
mov qword [rbp + 0x28], rdi
cmp r12, qword [rdi + 0x600]
mov qword [rdi + 0x600], r12
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
mov r8d, 0x43f
movzx ecx, al
call fcn.14005c9d0
mov r12d, 1
mov r8d, 0x4a7
or sil, al
mov rax, qword [rbp - 0x58]
mov ecx, r12d
mov dword [rax + 0x10], r14d
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
test al, al
movzx ebx, sil
mov r8d, 0x4a9
mov ecx, r12d
cmovne ebx, r12d
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
test al, al
mov r8d, 0x532
mov ecx, r12d
cmovne ebx, r12d
call fcn.14005c9d0
movzx esi, bl
test al, al
cmovne esi, r12d
ucomisd xmm6, qword [rdi + 0x5e8]
jp 0x14009dd07
jne 0x14009dd07
xor al, al
jmp 0x14009dd0b
movzx eax, r12b
movsd qword [rdi + 0x5e8], xmm6
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
movzx ecx, al
mov r8d, 0x41f
call fcn.14005c9d0
mov r8d, 0x665
mov ecx, r12d
movaps xmm0, xmm6
addsd xmm0, qword [rdi + 0x5f8]
movsd qword [rdi + 0x5f8], xmm0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
call fcn.14005c9d0
or sil, al
mov rax, qword [rdi + 0x68]
test rax, rax
je 0x14009dda7
lea rbx, [rdi + 0x68]
nop dword [rax + rax]
movsd qword [rax + 0x5f8], xmm6
mov rax, qword [rdi + 0x68]
mov rdx, qword [0x14012bbd8]
mov r9d, dword [rax + 0x2c]
mov r8d, 0x665
mov ecx, r12d
call fcn.14005c9d0
mov rbx, qword [rbx]
add rbx, 0x68
or sil, al
mov rax, qword [rbx]
test rax, rax
jne 0x14009dd70
mov r12d, dword [rsp + 0x68]
mov rbx, qword [rbp + 0x70]
mov byte [rsp + 0x61], 1
dec r12d
dec dword [rbp - 0x7c]
mov r14d, 1
jmp 0x14009de47
mov eax, dword [rdi + 0x28]
test al, 2
je 0x14009ddda
test al, 1
je 0x14009de15
cmp byte [0x14012ae0e], 0
je 0x14009de15
cmp dword [rdi + 0x2c], 0xffffffff
je 0x14009de15
mov rcx, qword [0x14012bbd8]
mov rdx, rdi
call fcn.140054560
mov rcx, qword [rsp + 0x70]
lea r9, [rsp + 0x61]
lea rdx, [rbp - 0x80]
mov r8, rdi
mov qword [rbp - 0x58], rdi
mov dword [rbp - 0x7c], 0xffffffff
call fcn.140097890
mov sil, 1
jmp 0x14009de40
mov rcx, qword [rsp + 0x70]
lea r9, [rsp + 0x61]
lea rdx, [rbp - 0x80]
mov r8, rdi
mov qword [rbp - 0x58], rdi
mov dword [rbp - 0x7c], 0xffffffff
call fcn.140097890
movzx esi, sil
test al, al
cmovne esi, r14d
cmp byte [rsp + 0x61], 0
je 0x14009de5e
mov rcx, qword [rbp + 0x20]
inc r12d
mov qword [rbp + 0x20], rdi
mov qword [rdi + 0x690], rcx
mov dword [rsp + 0x68], r12d
mov rdi, rbx
mov qword [rbp - 0x28], rbx
test rbx, rbx
jne 0x14009d6f0
mov r14, qword [0x140130f68]
movss xmm7, dword [0x1400e6408]
movss xmm9, dword [0x1400e4870]
xor ebx, ebx
nop dword [rax + rax]
inc dword [rbp + 0xe40]
mov eax, dword [r14 + 4]
add dword [rbp + 0xe48], eax
mov eax, dword [r14 + 0x60]
add dword [rbp + 0xe50], eax
cmp qword [r14 + 0x50], 0
je 0x14009dec7
mov rcx, qword [r14 + 0x30]
mov rax, qword [r14 + 0x28]
add rax, rcx
add qword [rbp + 0x80], rax
add qword [rbp - 0x10], rcx
mov rdi, qword [0x140126ab0]
test rdi, rdi
je 0x14009def9
mov rcx, qword [r14 + 0x20]
cmp qword [rdi + 0x298], rcx
jne 0x14009deed
mov eax, dword [r14 + 0x50]
cmp dword [rdi + 0x54], eax
je 0x14009e02e
mov rdi, qword [rdi + 0x698]
test rdi, rdi
jne 0x14009ded7
mov eax, dword [r14 + 0x50]
xor edx, edx
mov ecx, 0x410
mov r8d, eax
mov qword [rbp + 0x90], rax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x14009df6b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14009df67
mov rcx, qword [0x140120a98]
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x18]
lea r9d, [r15 + 8]
lea r8, [rbp + 0x90]
mov edx, 0x8335003c
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r15, qword [rbp - 0x18]
test r15, r15
jne 0x14009dfe2
mov eax, dword [r14 + 0x50]
xor edx, edx
mov ecx, 0x1000
mov r8d, eax
mov qword [rbp + 0xb0], rax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov qword [rbp - 8], rax
test rax, rax
jne 0x14009dfe2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14009dfde
mov rcx, qword [0x140120a98]
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 8]
lea r9d, [r15 + 8]
lea r8, [rbp + 0xb0]
mov edx, 0x8335003c
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r15, qword [rbp - 8]
lea rcx, [rbp + 0x1e0]
xor edx, edx
mov r8d, 0x6b0
call fcn.1400a8b00
mov eax, dword [r14 + 0x50]
mov edx, 0x100
mov dword [rbp + 0x234], eax
cmp word [r14 + 0x38], 0
lea rcx, [rbp + 0x18a0]
je 0x14009ed98
movzx r9d, word [r14 + 0x38]
mov r8, qword [r14 + 0x40]
shr r9, 1
call fcn.1400a9844
jmp 0x14009eda4
mov eax, dword [r14 + 0x50]
xor edx, edx
mov ecx, 0x2000000
mov r8d, eax
mov qword [rbp + 0xb8], rax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov qword [rbp - 0x28], rax
test rax, rax
jne 0x14009e0a3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14009e09f
mov rcx, qword [0x140120a98]
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x28]
lea r9d, [r13 + 8]
lea r8, [rbp + 0xb8]
mov edx, 0x8335003c
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r13, qword [rbp - 0x28]
mov rcx, qword [rsp + 0x70]
mov eax, 1
lea r9, [rbp + 0xc0]
or r8, 0xffffffffffffffff
mov edx, 0x1053
mov dword [rbp + 0xc0], eax
mov qword [rbp + 0xd0], rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x7c], eax
mov ecx, dword [rdi + 0x28]
test cl, 2
je 0x14009e0ff
test cl, 1
je 0x14009e0e9
cmp byte [0x14012ae0e], 0
jne 0x14009e0ff
cmp eax, 0xffffffff
jne 0x14009e0ff
mov rcx, qword [0x14012bbd8]
mov rdx, rdi
call fcn.140053dc0
jmp 0x14009e102
mov dword [rdi + 0x2c], eax
mov eax, dword [rbp - 0x7c]
mov r9, qword [0x140131028]
mov r8, r15
mov dword [rsp + 0x28], eax
mov rdx, r13
mov rcx, r14
mov qword [rsp + 0x20], rdi
call fcn.14008f920
mov rcx, qword [r14 + 0x30]
mov r12, qword [r14 + 0x28]
or sil, al
add r12, rcx
mov rax, r12
mov qword [rbp - 0x20], r12
sub rax, qword [rdi + 0x600]
cmp qword [0x14012cc90], 0
je 0x14009e171
mov rax, qword [rbp + 0x38]
test rax, rax
je 0x14009e1a0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm1, qword [rdi + 0x620]
cvtsi2ss xmm0, rax
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009e1a4
cmp dword [rdi + 0x54], 0
jne 0x14009e180
mov rax, rdi
mov qword [rbp + 0x58], rax
jmp 0x14009e1ab
test r15, r15
je 0x14009e1a0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm1, rax
cvtsi2ss xmm0, r15
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009e1a4
movaps xmm1, xmm12
xorps xmm6, xmm6
cvtss2sd xmm6, xmm1
comisd xmm6, xmm13
jbe 0x14009e1b6
movaps xmm6, xmm13
test r15, r15
je 0x14009e1e0
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [rdi + 0x608]
cvtsi2ss xmm0, r15
cvtsi2ss xmm1, rax
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009e1e4
movaps xmm1, xmm12
movsd xmm0, qword [rdi + 0x648]
xorps xmm3, xmm3
mov qword [rdi + 0x608], rcx
comisd xmm0, xmmword [rbp + 0x40]
cvtss2sd xmm3, xmm1
jbe 0x14009e211
cvtpd2ps xmm0, xmm0
mov qword [rbp + 0x68], rdi
cvtps2pd xmm0, xmm0
movsd qword [rbp + 0x40], xmm0
test byte [rdi + 0x28], 0x40
je 0x14009e21c
addsd xmm10, xmm6
cmp dword [rdi + 0x54], 0
mov rdx, qword [0x140131028]
mov rcx, qword [rdi + 0x638]
mov qword [rsp + 0x20], rbx
je 0x14009e25d
cmp qword [r14 + 0x28], 0
movaps xmm2, xmm6
jne 0x14009e242
movaps xmm3, xmm6
call fcn.14004abf0
comisd xmm6, xmm15
addsd xmm8, xmm6
jbe 0x14009e269
movaps xmm15, xmm6
mov qword [rbp + 0x28], rdi
jmp 0x14009e269
movaps xmm3, xmm6
movaps xmm2, xmm11
call fcn.14004abf0
ucomisd xmm6, qword [rdi + 0x5e8]
jp 0x14009e279
jne 0x14009e279
xor al, al
jmp 0x14009e27b
mov al, 1
movsd qword [rdi + 0x5e8], xmm6
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
movzx ecx, al
mov r8d, 0x41f
call fcn.14005c9d0
or sil, al
movaps xmm0, xmm6
addsd xmm0, qword [rdi + 0x5f8]
ucomisd xmm0, qword [rdi + 0x5f8]
jp 0x14009e2bb
jne 0x14009e2bb
xor r15b, r15b
jmp 0x14009e2be
mov r15b, 1
movsd qword [rdi + 0x5f8], xmm0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x665
mov ecx, 1
call fcn.14005c9d0
lea rbx, [rdi + 0x68]
or sil, al
mov rax, qword [rbx]
test rax, rax
je 0x14009e34d
mov r12d, 1
nop word [rax + rax]
movsd xmm0, qword [rax + 0x5f8]
mov r8d, 0x665
mov ecx, r12d
cvtpd2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
addsd xmm1, xmm6
movsd qword [rax + 0x5f8], xmm1
mov rax, qword [rbx]
mov rdx, qword [0x14012bbd8]
mov r9d, dword [rax + 0x2c]
call fcn.14005c9d0
mov rbx, qword [rbx]
add rbx, 0x68
or sil, al
mov rax, qword [rbx]
test rax, rax
jne 0x14009e300
mov r12, qword [rbp - 0x20]
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
movzx ecx, r15b
mov r8d, 0x4a7
call fcn.14005c9d0
dec dword [rsp + 0x68]
mov rdx, rdi
mov rcx, r13
or sil, al
call fcn.14007d020
test al, al
je 0x14009e39c
movsxd r8, dword [rbp - 0x7c]
mov rcx, qword [0x14012bbd0]
or r9, 0xffffffffffffffff
mov edx, 0x7eb
call qword [sym.imp.USER32.dll_PostMessageW]
call fcn.14005e860
mov r15d, dword [rdi + 0x28]
xor bl, bl
shr r15d, 7
and r15b, 1
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jbe 0x14009e3bd
lea rcx, [r14 + 0x100]
jmp 0x14009e3c6
mov bl, 1
lea rcx, [r14 + 0xd0]
mov r9d, dword [r14 + 4]
xor r10d, r10d
mov edx, r10d
test r9d, r9d
je 0x14009e3f9
lea rax, [rcx + 0x48]
mov r8d, r9d
add rcx, 0x44
cmp dword [rcx], 5
jne 0x14009e3ec
cmp dword [rax], 5
jne 0x14009e3ec
inc edx
add rcx, 0x50
add rax, 0x50
dec r8
jne 0x14009e3e0
cmp r9d, edx
jne 0x14009e407
or dword [rdi + 0x28], 0x80
jmp 0x14009e40e
and dword [rdi + 0x28], 0xffffff7f
mov ecx, dword [rdi + 0x28]
movzx eax, r15b
shr ecx, 7
and ecx, 1
cmp cl, r15b
je 0x14009e442
movsxd r8, dword [rbp - 0x7c]
mov rcx, qword [0x14012bbd0]
or r9, 0xffffffffffffffff
mov edx, 0x7eb
call qword [sym.imp.USER32.dll_PostMessageW]
call fcn.14005e860
xor r10d, r10d
lea r15, [rdi + 0x358]
mov rbx, qword [r15]
test rbx, rbx
je 0x14009e457
cmp word [rbx], 0
jne 0x14009e4c0
cmp byte [rdi + 0x2b5], 2
jae 0x14009e4c0
mov edx, dword [rdi + 0x54]
lea rax, [rdi + 0x368]
mov qword [rsp + 0x28], r10
lea r9, [rdi + 0x360]
mov r8, r15
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.140080df0
mov rcx, rbx
call fcn.1400a82b0
mov rax, qword [r15]
inc byte [rdi + 0x2b5]
test rax, rax
je 0x14009e4c0
cmp word [rax], 0
je 0x14009e4c0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x408
mov ecx, 1
call fcn.14005c9d0
or sil, al
movzx eax, byte [rdi + 0x2b4]
movzx r15d, byte [rsp + 0x62]
cmp al, 2
jb 0x14009e4d8
test r15b, r15b
je 0x14009e50a
jmp 0x14009e4e5
test r15b, r15b
jne 0x14009e4e5
inc al
mov byte [rdi + 0x2b4], al
mov edx, dword [rdi + 0x54]
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call fcn.14008f2a0
test al, al
je 0x14009e503
or dword [rdi + 0x28], 0x800
jmp 0x14009e50a
and dword [rdi + 0x28], 0xfffff7ff
test r13, r13
je 0x14009e54c
mov ebx, dword [rdi + 0x2a4]
mov rdx, r13
mov rcx, rdi
mov dword [rbp + 0xa8], ebx
call fcn.14007bb50
xor ecx, ecx
mov dword [rdi + 0x2a4], eax
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
cmp eax, ebx
mov r8d, 0x4af
sete cl
call fcn.14005c9d0
or sil, al
cmp qword [rdi + 0x5d8], 0
jne 0x14009e5da
movzx eax, byte [rdi + 0x5d0]
cmp al, 2
jb 0x14009e56c
test r15b, r15b
je 0x14009e5d0
jmp 0x14009e579
test r15b, r15b
jne 0x14009e579
inc al
mov byte [rdi + 0x5d0], al
mov ecx, dword [rdi + 0x54]
call fcn.140068d90
mov rcx, rdi
mov qword [rdi + 0x5d8], rax
call fcn.14004a710
cmp qword [rdi + 0x5d8], 0
mov byte [rdi + 0x5e0], al
je 0x14009e5e0
cmp byte [rsp + 0x60], 0
jne 0x14009e5b1
call fcn.1400698e0
mov byte [rsp + 0x60], 1
movsxd r8, dword [rbp - 0x7c]
mov rcx, qword [0x14012bbd0]
or r9, 0xffffffffffffffff
mov edx, 0x7eb
call qword [sym.imp.USER32.dll_PostMessageW]
call fcn.14005e860
cmp qword [rdi + 0x5d8], 0
je 0x14009e5e0
inc dword [rbp + 0xe58]
mov ecx, dword [r14 + 0x48]
mov ebx, dword [rdi + 0x630]
mov r8d, 5
mov dword [rdi + 0x630], ecx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
cmp ecx, ebx
setne al
movzx ecx, al
call fcn.14005c9d0
or sil, al
cmp dword [rdi + 0x630], ebx
je 0x14009e64a
mov rax, qword [rbp - 0x58]
mov ebx, dword [rax + 0x630]
cmp ebx, 4
jne 0x14009e633
cmp dword [rax + 0x488], 0
jne 0x14009e633
xor ebx, ebx
mov rcx, qword [0x14012bbd0]
call qword [sym.imp.USER32.dll_GetMenu]
mov edx, ebx
mov rcx, rax
call fcn.1400a0d10
cmp r12, qword [rdi + 0x600]
mov qword [rdi + 0x600], r12
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
mov r8d, 0x43f
movzx ecx, al
call fcn.14005c9d0
mov dword [r14 + 0x84], 0
or sil, al
mov rax, qword [0x14012ccb0]
test rax, rax
je 0x14009e6c5
lea rdx, [rbp + 0x48]
mov rcx, r13
call rax
mov ecx, dword [rbp + 0x48]
mov r8d, 0x683
cmp ecx, dword [rdi + 0x2ac]
mov dword [rdi + 0x2ac], ecx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
or sil, al
mov ecx, dword [r14 + 0x60]
mov r8d, SafeArrayLock
cmp ecx, dword [rdi + 0x78]
mov dword [rdi + 0x78], ecx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0x80]
mov r8d, 0x49b
sub rcx, qword [rdi + 0x3f8]
or sil, al
cmp rcx, qword [rdi + 0x400]
mov qword [rdi + 0x400], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0x80]
mov r8d, 0x423
or sil, al
cmp rcx, qword [rdi + 0x3f8]
mov qword [rdi + 0x3f8], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0x90]
mov r8d, 0x427
or sil, al
cmp rcx, qword [rdi + 0x420]
mov qword [rdi + 0x420], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0x88]
mov r8d, 0x428
or sil, al
cmp rcx, qword [rdi + 0x428]
mov qword [rdi + 0x428], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0xa0]
mov r8d, 9
or sil, al
cmp rcx, qword [rdi + 0x448]
mov qword [rdi + 0x448], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0xb0]
mov r8d, 0xa
or sil, al
cmp rcx, qword [rdi + 0x450]
mov qword [rdi + 0x450], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0xc0]
mov r8d, 0x426
or sil, al
cmp rcx, qword [rdi + 0x418]
mov qword [rdi + 0x418], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
or sil, al
mov ecx, dword [r14 + 0xb8]
mov r8d, 0x4a8
sub ecx, dword [rdi + 0x408]
cmp ecx, dword [rdi + 0x410]
mov dword [rdi + 0x410], ecx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [r14 + 0xb8]
mov r8d, 0x424
or sil, al
mov rax, qword [rbp + 0x18]
cmp rcx, rax
cmova rax, rcx
cmp rcx, qword [rdi + 0x408]
mov qword [rdi + 0x408], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov qword [rbp + 0x18], rax
setne al
movzx ebx, al
mov ecx, ebx
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x4a9
mov ecx, ebx
or sil, al
call fcn.14005c9d0
mov rcx, qword [rdi + 0x430]
or sil, al
test rcx, rcx
je 0x14009e94a
mov rax, qword [rdi + 0x418]
xorps xmm0, xmm0
shr rax, 0xa
cvtsi2sd xmm0, rax
test rax, rax
jns 0x14009e925
addsd xmm0, qword [0x1400e6400]
comisd xmm0, xmmword [rcx + 0x38]
jb 0x14009e94a
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
test rax, rax
jns 0x14009e93d
addss xmm0, xmm7
mulss xmm0, xmm9
cvtps2pd xmm0, xmm0
movsd qword [rcx + 0x38], xmm0
mov rax, qword [rdi + 0x408]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
test rax, rax
jns 0x14009e962
addss xmm0, xmm7
mulss xmm0, dword [0x1400e6378]
mov rdx, qword [0x140131028]
mov rcx, qword [rdi + 0x430]
xor ebx, ebx
movaps xmm3, xmm11
mov qword [rsp + 0x20], rbx
cvtps2pd xmm2, xmm0
call fcn.14004abf0
mov rcx, qword [r14 + 0x78]
cmp rcx, qword [rdi + 0x3f0]
mov qword [rdi + 0x3f0], rcx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
mov r8d, 0x45a
movzx ecx, al
call fcn.14005c9d0
mov rcx, qword [0x14012bbd8]
lea edx, [rbx + 0x23]
or sil, al
call fcn.140055fc0
test al, al
jne 0x14009e9e8
mov rcx, qword [0x14012bbd8]
mov edx, 0x4ac
call fcn.140055fc0
test al, al
je 0x14009eb3c
mov ebx, dword [r14 + 0x50]
lea r8, [0x1400d1428]
lea rcx, [rbp + 0x10a0]
mov edx, 0x100
call fcn.1400a97ac
mov qword [0x14012c588], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
je 0x14009ea49
lea rax, [rbp + 0x10a0]
lea rcx, [0x140096d80]
mov edx, ebx
mov byte [0x14012c584], 0
mov dword [0x14012c580], 0x100
mov qword [0x14012c578], rax
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x14009ea6a
mov rcx, qword [0x14012bbd0]
mov rdx, qword [0x14012c578]
mov r8d, 0x100
mov qword [0x14012c588], rcx
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rcx, qword [0x14012bbd8]
mov r15, qword [0x14012c588]
movzx r12d, byte [rdi + 0x290]
mov edx, 0x4ac
call fcn.140055fc0
test al, al
je 0x14009eaa0
test r15, r15
je 0x14009eaa0
mov rcx, r15
call qword [0x140130ec8]
movzx r12d, al
lea rcx, [rbp + 0x10a0]
lea r9, [rdi + 0x84]
sub r9, rcx
movzx r8d, word [rcx]
movzx edx, word [rcx + r9]
sub r8d, edx
jne 0x14009eac7
add rcx, 2
test edx, edx
jne 0x14009eab1
test r8d, r8d
jne 0x14009ead9
cmp r12b, byte [rdi + 0x290]
jne 0x14009ead9
xor bl, bl
jmp 0x14009eadb
mov bl, 1
lea r8, [rbp + 0x10a0]
lea rcx, [rdi + 0x84]
mov edx, 0x100
mov byte [rdi + 0x290], r12b
call fcn.1400a97ac
mov qword [rdi + 0x288], r15
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
movzx ebx, bl
mov r8d, 0x23
mov ecx, ebx
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x4ac
mov ecx, ebx
or sil, al
call fcn.14005c9d0
or sil, al
xor ebx, ebx
mov ecx, dword [r14 + 4]
mov r8d, 0x429
cmp ecx, dword [rdi + 0x7c]
mov dword [rdi + 0x7c], ecx
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
setne al
movzx ecx, al
call fcn.14005c9d0
mov rdx, qword [rdi + 0x4f8]
or sil, al
test rdx, rdx
je 0x14009ebb9
mov r8, qword [rdi + 0x4e8]
xorps xmm0, xmm0
add r8, qword [rdi + 0x4c8]
add r8, qword [rdi + 0x4a8]
cvtsi2sd xmm0, r8
comisd xmm0, xmmword [rdx + 0x38]
jb 0x14009ebb9
xorps xmm0, xmm0
cvtsi2ss xmm0, r8
mulss xmm0, xmm9
cvtps2pd xmm0, xmm0
movsd qword [rdx + 0x38], xmm0
mov rcx, qword [rdi + 0x4f8]
mov rax, qword [rcx + 0x38]
mov qword [rcx + 0x58], rax
mov rdx, qword [0x140131028]
mov rcx, qword [rdi + 0x4f8]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov qword [rsp + 0x20], rbx
cvtsi2ss xmm0, qword [rdi + 0x4c8]
cvtsi2ss xmm1, qword [rdi + 0x4a8]
cvtps2pd xmm3, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rdi + 0x4e8]
addss xmm1, xmm0
cvtps2pd xmm2, xmm1
call fcn.14004abf0
lea r8, [rdi + 0x490]
lea rcx, [0x14013d6d0]
mov rdx, rdi
call fcn.14004e7a0
lea r8, [rdi + 0x500]
lea rcx, [0x14013d740]
mov rdx, rdi
call fcn.14004e7a0
lea r8, [rdi + 0x568]
lea rcx, [0x14013d7b0]
mov rdx, rdi
call fcn.14004e7a0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r15d, 1
mov r8d, 0x532
mov ecx, r15d
call fcn.14005c9d0
or sil, al
cmp qword [rdi + 0x5d8], 0
je 0x14009ec82
cmp byte [rsp + 0x60], 0
jne 0x14009ec82
call fcn.1400698e0
mov byte [rsp + 0x60], r15b
mov edx, dword [rbp - 0x7c]
mov rcx, rdi
call fcn.140069930
or sil, al
test byte [rdi + 0x28], 0x40
je 0x14009ecea
mov rax, qword [r14 + 0x28]
add rax, qword [r14 + 0x30]
add qword [rbp + 0x50], rax
mov rax, qword [rbp]
add rax, qword [r14 + 0xb8]
mov qword [rbp], rax
mov rax, qword [rbp + 8]
add rax, qword [r14 + 0x90]
inc dword [rbp + 0xe44]
mov qword [rbp + 8], rax
mov eax, dword [r14 + 4]
add dword [rbp + 0xe4c], eax
mov eax, dword [r14 + 0x60]
add dword [rbp + 0xe54], eax
cmp qword [rdi + 0x5d8], 0
je 0x14009ecea
inc dword [rbp + 0xe5c]
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x4a9
mov ecx, r15d
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x532
mov ecx, r15d
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x4a7
mov ecx, r15d
call fcn.14005c9d0
movzx ecx, byte [rdi + 0x18]
xor dl, dl
test cl, cl
je 0x14009ed62
mov eax, dword [rdi + 0x1c]
cmp eax, dword [0x140126c6c]
jge 0x14009ed56
mov dword [rdi + 0x10], 2
mov dword [rdi + 0x14], eax
jmp 0x14009ed6f
test cl, cl
je 0x14009ed62
movzx edx, r15b
mov byte [rdi + 0x18], 0
movzx esi, sil
test dl, dl
mov dword [rdi + 0x10], ebx
cmovne esi, r15d
test r13, r13
je 0x14009ed7d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r14]
test eax, eax
je 0x14009f830
mov r15, qword [rbp - 0x30]
mov r13, qword [rbp + 0x38]
add r14, rax
jmp 0x14009de90
lea r8, str.System_Idle_Process
call fcn.1400a97ac
mov edx, dword [r14 + 0x50]
lea rax, [rbp + 0x14]
lea rsi, [r14 + 0x20]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x10]
lea r9, [rbp + 0x16a0]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0x100
lea rax, [rbp + 0x12a0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x14a0]
mov dword [rsp + 0x30], 0x100
mov qword [rsp + 0x28], rax
mov r8, rsi
mov rcx, r15
mov dword [rsp + 0x20], 0x100
call fcn.14009a5c0
cmp word [rbp + 0x14a0], 0
je 0x14009ee1b
cmp word [rbp + 0x16a0], 0
lea r9, [0x1400d1c90]
jne 0x14009ee22
lea r9, [0x1400d1428]
lea rax, [rbp + 0x16a0]
lea r8, [rbp + 0x14a0]
lea rdx, str._s_s_s
lea rcx, [rbp + 0x22a0]
mov qword [rsp + 0x20], rax
call fcn.14004a790
lea rcx, [rbp + 0x12a0]
call fcn.1400a8238
cmp dword [rbp + 0x10], 0
mov qword [rbp + 0x558], rax
mov eax, dword [rbp + 0x208]
je 0x14009ee71
bts eax, 9
mov dword [rbp + 0x208], eax
cmp dword [rbp + 0x14], 0
je 0x14009ee81
bts eax, 0xd
mov dword [rbp + 0x208], eax
mov r9d, 1
lea rax, [rbp + 0x98]
lea r8, [rbp + 0x491]
lea edx, [r9 + 0x3c]
mov rcx, r15
mov qword [rsp + 0x20], rax
call qword [0x140130d20]
mov rax, qword [0x140131060]
test rax, rax
je 0x14009ef23
mov rcx, r15
call rax
test eax, eax
je 0x14009ef23
mov rax, qword [0x140130f50]
test rax, rax
je 0x14009ef19
lea rdx, [rsp + 0x78]
xor r8d, r8d
mov rcx, r15
mov dword [rsp + 0x78], ebx
call rax
cmp eax, 0x7a
jne 0x14009ef19
mov ecx, dword [rsp + 0x78]
add rcx, rcx
call fcn.1400a82f0
lea rdx, [rsp + 0x78]
mov rcx, r15
mov r8, rax
mov rbx, rax
call qword [0x140130f50]
test eax, eax
jne 0x14009ef11
mov rcx, rbx
call fcn.1400a8238
mov qword [rbp + 0x568], rax
mov rcx, rbx
call fcn.1400a82b0
or dword [rbp + 0x208], 0x1000
mov r12, qword [rbp - 0x30]
mov r9, qword [0x140131028]
or eax, 0xffffffff
mov dword [rbp + 0x5c8], eax
lea rax, [rbp + 0x1e0]
mov rdx, r15
mov r8, r12
mov rcx, r14
mov dword [rsp + 0x28], 0xffffffff
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x668], 0xffffffff
call fcn.14008f920
cmp qword [r14 + 0x58], 0
jne 0x14009ef82
lea rdx, str._None_
lea rcx, [rbp + 0xea0]
call fcn.14004ec00
jmp 0x14009f037
mov ecx, dword [r14 + 0x58]
cmp ecx, 0xfffffff6
jne 0x14009ef94
lea r8, str.Hardware_Interrupts_and_DPCs
jmp 0x14009eff7
mov r8, qword [0x140130f68]
nop dword [rax + rax]
cmp ecx, dword [r8 + 0x50]
jne 0x14009efb4
test rsi, rsi
je 0x14009efc0
mov rax, qword [rsi]
cmp qword [r8 + 0x20], rax
jle 0x14009efc0
mov eax, dword [r8]
test eax, eax
je 0x14009eff0
add r8, rax
jmp 0x14009efa0
cmp word [r8 + 0x38], 0
mov edx, 0x100
lea rcx, [rbp + 0xea0]
je 0x14009efe7
movzx r9d, word [r8 + 0x38]
mov r8, qword [r8 + 0x40]
shr r9, 1
call fcn.1400a9844
jmp 0x14009f008
lea r8, str.System_Idle_Process
jmp 0x14009f003
lea r8, str._Non_existent_Process_
mov edx, 0x100
lea rcx, [rbp + 0xea0]
call fcn.1400a97ac
mov r8d, dword [r14 + 0x58]
lea rdx, str.__d_
lea rcx, [rbp + 0xe60]
call fcn.140079400
lea r8, [rbp + 0xe60]
lea rcx, [rbp + 0xea0]
mov edx, 0x100
call fcn.1400abdb0
mov edx, dword [r14 + 0x50]
lea rax, [rsp + 0x65]
lea r9, [rbp + 0x540]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x548]
lea r8, [rbp + 0x538]
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.140080df0
cmp byte [rsp + 0x65], 0
je 0x14009f078
or dword [rbp + 0x208], 0x400
mov ebx, dword [r14 + 0x50]
lea r8, [0x1400d1428]
lea rcx, [rbp + 0x10a0]
mov edx, 0x100
call fcn.1400a97ac
mov qword [0x14012c588], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
je 0x14009f0d9
lea rax, [rbp + 0x10a0]
lea rcx, [0x140096d80]
mov edx, ebx
mov byte [0x14012c584], 0
mov dword [0x14012c580], 0x100
mov qword [0x14012c578], rax
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x14009f0fa
mov rcx, qword [0x14012bbd0]
mov rdx, qword [0x14012c578]
mov r8d, 0x100
mov qword [0x14012c588], rcx
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rcx, qword [0x14012c588]
mov qword [rbp + 0x468], rcx
test rcx, rcx
je 0x14009f119
call qword [0x140130ec8]
mov byte [rbp + 0x470], al
xor ebx, ebx
mov dword [rbp - 0x20], ebx
cmp dword [rbp + 0x234], ebx
jg 0x14009f12a
mov al, 2
jmp 0x14009f14c
test r15, r15
je 0x14009f14a
lea rdx, [rbp - 0x20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x14009f14a
cmp dword [rbp - 0x20], ebx
sete al
inc al
jmp 0x14009f14c
xor al, al
mov byte [rbp + 0x490], al
cmp byte [rsp + 0x63], bl
jne 0x14009f162
call fcn.14007dd30
mov byte [rsp + 0x63], 1
cmp qword [0x140130da0], rbx
mov r8d, dword [r14 + 0x50]
je 0x14009f1a3
test r8d, r8d
je 0x14009f1a3
mov edx, dword [0x14012c9e4]
mov ecx, ebx
test edx, edx
je 0x14009f1a3
mov rax, qword [0x14012ca38]
add rax, 0x2c
nop dword [rax + rax]
cmp dword [rax], r8d
je 0x14009f2db
inc ecx
add rax, 0x38
cmp ecx, edx
jb 0x14009f190
and dword [rbp + 0x208], 0xffffffdf
lea r8, [0x1400d1428]
lea rcx, [rbp + 0x496]
mov edx, 0x41
call fcn.1400a97ac
lea rcx, [rbp + 0x18a0]
call fcn.1400a8238
lea rdx, [rbp + 0x1e0]
mov rcx, r15
mov qword [rbp + 0x228], rax
call fcn.14007d020
test al, al
jne 0x14009f26e
mov rcx, qword [rbp + 0x528]
mov rax, rbx
mov qword [rbp + 0x890], rbx
test rcx, rcx
je 0x14009f22d
lea r8, [rbp + 0x890]
mov r9d, 0x2b8
xor edx, edx
mov dword [rsp + 0x20], 0x101
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rcx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x890]
mov qword [rbp + 0x218], rax
mov qword [rbp + 0xb50], rbx
mov rax, rbx
test rcx, rcx
je 0x14009f267
lea r8, [rbp + 0xb50]
mov r9d, 0x2b8
xor edx, edx
mov dword [rsp + 0x20], 0x100
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rax, qword [rbp + 0xb50]
mov qword [rbp + 0x220], rax
mov eax, dword [r14 + 0x48]
mov dword [rbp + 0x810], eax
cmp qword [r14 + 0x58], rbx
jne 0x14009f2a0
mov eax, dword [rbp + 0x234]
test eax, eax
je 0x14009f2a0
mov dword [0x14012cc58], eax
mov rax, qword [rsi]
mov qword [0x14012cc60], rax
mov qword [r14 + 0x58], 0xffffffffffffffff
mov eax, dword [r14 + 0x58]
mov qword [rbp + 0x248], rbx
mov dword [rbp + 0x240], eax
mov eax, dword [r14 + 0x60]
mov dword [rbp + 0x258], eax
mov rax, qword [rsi]
xor sil, sil
mov qword [rbp + 0x478], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jbe 0x14009f2e7
lea rcx, [r14 + 0x100]
jmp 0x14009f2f1
or dword [rbp + 0x208], 0x20
jmp 0x14009f1aa
mov sil, 1
lea rcx, [r14 + 0xd0]
mov eax, dword [r14 + 4]
test eax, eax
je 0x14009f30e
add rcx, 0x40
mov edx, eax
nop
mov eax, dword [rcx]
add rcx, 0x50
add rbx, rax
dec rdx
jne 0x14009f300
xor esi, esi
test rbx, rbx
mov eax, esi
mov qword [rbp + 0x870], rsi
cmovg rax, rbx
xor bl, bl
mov qword [rbp + 0x7f8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jbe 0x14009f33c
lea rcx, [r14 + 0x100]
jmp 0x14009f345
mov bl, 1
lea rcx, [r14 + 0xd0]
mov r9d, dword [r14 + 4]
mov edx, esi
test r9d, r9d
je 0x14009f379
lea rax, [rcx + 0x48]
mov r8d, r9d
add rcx, 0x44
nop dword [rax + rax]
cmp dword [rcx], 5
jne 0x14009f36c
cmp dword [rax], 5
jne 0x14009f36c
inc edx
add rcx, 0x50
add rax, 0x50
dec r8
jne 0x14009f360
cmp r9d, edx
jne 0x14009f388
or dword [rbp + 0x208], 0x80
mov edx, dword [rbp + 0x234]
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call fcn.14008f2a0
test al, al
je 0x14009f3ac
or dword [rbp + 0x208], 0x800
jmp 0x14009f3b6
and dword [rbp + 0x208], 0xfffff7ff
lea rcx, [rbp + 0x1e0]
mov rdx, r15
call fcn.14007bb50
mov rcx, qword [rbp + 0x228]
mov dword [rbp + 0x244], esi
mov dword [rbp + 0x484], eax
mov rax, qword [r14 + 0x28]
lea rdx, str.wmiprvse.exe
add rax, qword [r14 + 0x30]
mov qword [rbp + 0x7e0], rax
mov rax, qword [r14 + 0x30]
mov dword [rbp + 0x260], esi
mov qword [rbp + 0x7e8], rax
mov rax, qword [r14 + 0x80]
mov qword [rbp + 0x5d8], rax
mov rax, qword [r14 + 0xb8]
mov qword [rbp + 0x5e8], rax
mov rax, qword [r14 + 0x78]
mov qword [rbp + 0x5d0], rax
mov rax, qword [r14 + 0xc0]
mov qword [rbp + 0x5f8], rax
mov rax, qword [r14 + 0x90]
mov qword [rbp + 0x600], rax
mov rax, qword [r14 + 0x88]
mov qword [rbp + 0x608], rax
call fcn.1400a9bbc
test eax, eax
jne 0x14009f46b
mov ecx, dword [rbp + 0x234]
lea rdx, [rbp + 0x5c0]
call fcn.1400a6220
mov rax, qword [0x14012ccb0]
mov dword [rbp + 0x48c], 0xffffffff
test rax, rax
je 0x14009f48d
lea rdx, [rbp + 0x48c]
mov rcx, r15
call rax
mov rax, qword [r14 + 0xb8]
mov rcx, qword [rbp + 0x18]
cmp rax, rcx
cmova rcx, rax
mov rax, qword [0x140130db8]
mov qword [rbp + 0x18], rcx
test rax, rax
je 0x14009f4d2
mov ecx, dword [r14 + 0x50]
lea rdx, [rbp + 0x260]
call rax
mov ecx, dword [rbp + 0x260]
test eax, eax
mov eax, 0xffffffff
cmove ecx, eax
mov dword [rbp + 0x260], ecx
cmp dword [0x140121a74], esi
je 0x14009f4ec
movsd qword [rbp + 0x7c8], xmm11
movaps xmm6, xmm11
jmp 0x14009f58c
mov rax, qword [r14 + 0x28]
add rax, qword [r14 + 0x30]
cmp qword [0x14012cc90], rsi
je 0x14009f533
cmp dword [0x140126558], 2
jl 0x14009f533
test r13, r13
je 0x14009f553
mov rax, qword [r14 + 0x18]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
test rax, rax
jns 0x14009f520
addss xmm1, xmm7
xorps xmm0, xmm0
mulss xmm1, xmm14
cvtsi2ss xmm0, r13
divss xmm1, xmm0
jmp 0x14009f557
test r12, r12
je 0x14009f553
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm1, rax
cvtsi2ss xmm0, r12
mulss xmm1, xmm14
divss xmm1, xmm0
jmp 0x14009f557
movaps xmm1, xmm12
xorps xmm6, xmm6
cvtss2sd xmm6, xmm1
comisd xmm6, xmm13
jbe 0x14009f569
movaps xmm6, xmm13
test byte [rbp + 0x208], 0x40
movsd qword [rbp + 0x7c8], xmm6
je 0x14009f57f
addsd xmm10, xmm6
cmp dword [rbp + 0x234], esi
je 0x14009f58c
addsd xmm8, xmm6
lea rcx, [rbp + 0xea0]
call fcn.1400a8238
lea rcx, [rbp + 0x22a0]
mov qword [rbp + 0x238], rax
call fcn.1400a8238
or dword [rbp + 0x208], 4
lea rdx, [0x14012b9c0]
mov rcx, rax
mov qword [rbp + 0x250], rax
call fcn.1400a9bbc
test eax, eax
mov eax, dword [rbp + 0x208]
jne 0x14009f5d5
or eax, 0x40
cmp byte [0x14012ae08], sil
jne 0x14009f5e7
test al, 0x40
jne 0x14009f5e7
and eax, 0xfffffffd
jmp 0x14009f5ea
or eax, 2
lea r8, [rbp + 0x10a0]
lea rcx, [rbp + 0x264]
mov edx, 0x100
mov dword [rbp + 0x208], eax
call fcn.1400a97ac
cmp dword [0x140121a74], esi
je 0x14009f618
mov dword [rbp + 0x1f0], esi
jmp 0x14009f650
mov rax, qword [rbp + 0x478]
cmp qword [0x140130f60], rax
jle 0x14009f639
movsd qword [rbp + 0x7c8], xmm11
mov dword [rbp + 0x1f0], esi
jmp 0x14009f643
mov dword [rbp + 0x1f0], 2
mov dword [rbp + 0x1f4], esi
mov byte [rbp + 0x1f8], sil
mov ecx, dword [rbp + 0x234]
mov byte [rbp + 0x7b0], sil
call fcn.140068d90
lea rcx, [rbp + 0x1e0]
mov qword [rbp + 0x7b8], rax
call fcn.14004a710
mov byte [rbp + 0x7c0], al
mov rax, qword [rbp + 0x7b8]
test rax, rax
je 0x14009f6aa
cmp byte [rsp + 0x60], sil
jne 0x14009f69f
call fcn.1400698e0
mov rax, qword [rbp + 0x7b8]
mov byte [rsp + 0x60], 1
test rax, rax
je 0x14009f6aa
inc dword [rbp + 0xe58]
lea rcx, [rbp + 0x1e0]
or edx, 0xffffffff
call fcn.140069930
mov rcx, qword [0x14012bbd0]
mov qword [rbp + 0x820], rsi
mov dword [rbp + 0x1f4], esi
mov eax, dword [r14 + 0x50]
mov r8, rsi
cmp dword [0x140120c98], eax
lea r9, [rbp + 0x1e0]
mov edx, 0x7ee
sete r8b
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [0x140131028]
mov r8, r12
mov rdx, r15
mov rcx, r14
mov dword [rsp + 0x28], 0xffffffff
mov rbx, rax
mov qword [rsp + 0x20], rax
call fcn.14008f920
mov rax, qword [rbx + 0x618]
mov rcx, qword [rbp + 0x20]
mov sil, 1
mov qword [rbx + 0x610], rax
mov rax, qword [rbx + 0x628]
mov qword [rbx + 0x690], rcx
mov qword [rbx + 0x620], rax
mov rax, qword [rbp + 0x528]
mov qword [rbp + 0x20], rbx
test rax, rax
je 0x14009f7aa
cmp word [rax], 0x5b
je 0x14009f7aa
cmp byte [0x14012ae0f], 0
je 0x14009f773
lock inc dword [rbx + 0x24]
lea rcx, [0x1400a1980]
mov r8, rbx
xor edx, edx
call fcn.1400acc08
mov rdx, qword [rbx + 0x348]
mov rcx, qword [rbx + 0x70]
call fcn.140044e90
mov r8d, 2
mov dl, 1
mov qword [rbx + 0x390], rax
cmp byte [0x14012ae18], 0
mov eax, 0
cmovne r8d, eax
mov rcx, rbx
call fcn.1400a44e0
cmp dword [rbx + 0x54], 0
je 0x14009f7bf
comisd xmm6, xmm15
jbe 0x14009f7bf
movaps xmm15, xmm6
mov qword [rbp + 0x28], rbx
test byte [rbp + 0x208], 0x40
je 0x14009f810
mov rax, qword [rbp]
add rax, qword [r14 + 0xb8]
mov qword [rbp], rax
mov rax, qword [rbp + 8]
add rax, qword [r14 + 0x90]
inc dword [rbp + 0xe44]
mov qword [rbp + 8], rax
mov eax, dword [r14 + 4]
add dword [rbp + 0xe4c], eax
mov eax, dword [r14 + 0x60]
add dword [rbp + 0xe54], eax
cmp qword [rbp + 0x7b8], 0
je 0x14009f810
inc dword [rbp + 0xe5c]
test r15, r15
je 0x14009f81e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r14]
test eax, eax
je 0x14009f836
add r14, rax
mov r15, r12
jmp 0x14009de86
mov r12, qword [rbp - 0x30]
jmp 0x14009f83c
xor ebx, ebx
lea r15d, [rbx + 1]
cmp byte [rsp + 0x64], 0
jne 0x14009f9da
cmp byte [0x14012ae08], 0
je 0x14009f9da
lea rcx, [rbp + 0x1e0]
xor edx, edx
mov r8d, 0x6b0
call fcn.1400a8b00
mov r9d, dword [0x14012bcd8]
or dword [rbp + 0x208], 6
or r13d, 0xffffffff
mov byte [rbp + 0x484], 0xff
mov qword [rbp + 0x7b8], rbx
mov dword [rbp + 0x668], 0xffffffff
mov qword [rbp + 0x870], rbx
mov dword [rbp + 0x1f0], ebx
mov dword [rbp + 0x5c8], r13d
mov byte [rbp + 0x490], 2
mov dword [rbp + 0x234], 0xfffffff6
test r9d, r9d
jle 0x14009f953
mov rcx, qword [0x140130f78]
mov r8, qword [0x140130f80]
mov rdx, qword [0x140130f88]
mov r10, qword [rbp + 0x7f8]
mov r11, qword [rbp + 0x7e8]
mov rbx, qword [rbp + 0x7e0]
add rcx, 0x20
mov r14d, r9d
mov r9, qword [rbp + 0x808]
add r8, 4
nop dword [rax]
mov eax, dword [rcx + 8]
lea r8, [r8 + 0x18]
lea rcx, [rcx + 0x30]
add eax, dword [r8 - 0x18]
lea rdx, [rdx + 8]
add r10, rax
mov qword [rbp + 0x7f8], r10
mov rax, qword [rcx - 0x38]
add rax, qword [rcx - 0x30]
add rbx, rax
mov qword [rbp + 0x7e0], rbx
mov rax, qword [rcx - 0x38]
add rax, qword [rcx - 0x30]
add r11, rax
mov qword [rbp + 0x7e8], r11
add r9, qword [rdx - 8]
mov qword [rbp + 0x808], r9
dec r14
jne 0x14009f900
xor ebx, ebx
lea rcx, str.Hardware_Interrupts_and_DPCs
call fcn.1400a8238
lea rcx, str.Interrupts
mov qword [rbp + 0x518], rax
call fcn.1400a8238
lea rcx, str.System
mov qword [rbp + 0x228], rax
mov rax, qword [0x14012cc60]
mov qword [rbp + 0x478], rax
mov eax, dword [0x14012cc58]
mov dword [rbp + 0x240], eax
call fcn.1400a8238
cmp dword [0x140120c98], 0
mov rcx, qword [0x14012bbd0]
mov r8, rbx
lea r9, [rbp + 0x1e0]
sete r8b
mov edx, 0x7ee
mov qword [rbp + 0x238], rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x20]
mov qword [rax + 0x690], rcx
jmp 0x14009f9de
or r13d, 0xffffffff
cmp dword [0x14013d8b0], 0
jne 0x14009faa7
movsxd rax, dword [0x1401270c0]
cmp eax, 0x3e8
je 0x14009faa7
test sil, sil
jne 0x14009faa7
mov rbx, qword [rsp + 0x70]
lea rcx, [0x140126f40]
cmp dword [rcx + rax*4], 0x41f
jne 0x14009faac
lea r9, [rbp - 0x80]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
mov dword [rbp - 0x80], 4
mov qword [rbp - 0x7c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14009faac
nop word [rax + rax]
cmp byte [0x1401270c4], 0
mov rax, qword [rbp - 0x58]
je 0x14009fa6f
movsd xmm0, qword [rdi + 0x5e8]
comisd xmm0, xmmword [rax + 0x5e8]
jmp 0x14009fa7f
movsd xmm0, qword [rax + 0x5e8]
comisd xmm0, xmmword [rdi + 0x5e8]
ja 0x14009faa2
inc dword [rbp - 0x7c]
lea r9, [rbp - 0x80]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
mov rdi, rax
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14009fa50
jmp 0x14009faac
mov sil, 1
jmp 0x14009faac
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x10]
test r12, r12
je 0x14009fada
xorps xmm12, xmm12
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x14013d8b8]
cvtsi2ss xmm0, r12
cvtsi2ss xmm12, rax
mulss xmm12, xmm14
divss xmm12, xmm0
mov qword [0x14013d8b8], rcx
mov rcx, qword [rbp]
xorps xmm7, xmm7
lea r9, [rbp + 0xa0]
lea r8, [rbp + 0x78]
xor edx, edx
movsd qword [rbp + 0xe18], xmm10
cvtss2sd xmm7, xmm12
call fcn.140099560
mov rax, qword [rbp + 8]
mov rdi, qword [rbp + 0x58]
movsd qword [rbp + 0xe28], xmm0
xorps xmm0, xmm0
cqo
and edx, 0x3ff
add rax, rdx
sar rax, 0xa
cvtsi2sd xmm0, rax
mov rax, qword [rbp + 0x18]
mov qword [0x140131040], rax
divsd xmm0, qword [rbp + 0xa0]
mulsd xmm0, xmm13
movsd qword [rbp + 0xe38], xmm0
test rdi, rdi
je 0x14009fc4d
movaps xmm6, xmm13
subsd xmm6, xmm8
comisd xmm11, xmm6
jbe 0x14009fb6c
movaps xmm6, xmm11
lea r9, [rbp + 0xc0]
or r8, 0xffffffffffffffff
mov edx, 0x1053
mov rcx, rbx
mov dword [rbp + 0xc0], r15d
mov qword [rbp + 0xd0], rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x7c], eax
ucomisd xmm6, qword [rdi + 0x5e8]
jp 0x14009fba6
jne 0x14009fba6
xor al, al
jmp 0x14009fba8
mov al, 1
movsd qword [rdi + 0x5e8], xmm6
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
movzx ecx, al
mov r8d, 0x41f
call fcn.14005c9d0
or sil, al
movaps xmm0, xmm6
addsd xmm0, qword [rdi + 0x5f8]
ucomisd xmm0, qword [rdi + 0x5f8]
jp 0x14009fbe7
jne 0x14009fbe7
xor bl, bl
jmp 0x14009fbe9
mov bl, 1
movsd qword [rdi + 0x5f8], xmm0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
mov r8d, 0x665
mov ecx, r15d
call fcn.14005c9d0
mov r9d, dword [rbp - 0x7c]
mov rdx, qword [0x14012bbd8]
movzx ecx, bl
mov r8d, 0x4a7
or sil, al
call fcn.14005c9d0
mov rdx, qword [0x140131028]
mov rcx, qword [rdi + 0x638]
movaps xmm3, xmm6
movaps xmm2, xmm11
xor r14d, r14d
or sil, al
mov qword [rsp + 0x20], r14
call fcn.14004abf0
jmp 0x14009fc50
xor r14d, r14d
test sil, sil
jne 0x14009fca1
cmp dword [rsp + 0x68], 0
je 0x14009fca1
mov rcx, qword [0x14012bbd8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x14009fca1
mov rbx, r14
mov edi, eax
nop dword [rax]
mov rcx, qword [0x14012bbd0]
or r9, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x7eb
call qword [sym.imp.USER32.dll_PostMessageW]
inc rbx
dec rdi
jne 0x14009fc80
comisd xmm8, xmm13
jbe 0x14009fcac
movaps xmm8, xmm13
mov rcx, qword [0x14012bbf8]
lea r9, [rbp + 0x78]
lea r8, [rbp + 0x88]
movsd qword [rbp + 0xe10], xmm8
lea rdx, [rbp + 0xe10]
call fcn.1400a25a0
mov rbx, qword [rbp + 0x28]
test rbx, rbx
je 0x14009fd3d
cmp byte [0x14012ae01], 0
mov eax, dword [rbx + 0x54]
mov r9, qword [rbx + 0x48]
movaps xmm2, xmm15
movq r8, xmm2
lea rcx, [rbp + 0x1aa0]
je 0x14009fd1b
test eax, eax
jle 0x14009fd12
lea rdx, str._02.02f____s:_d
mov dword [rsp + 0x20], eax
call fcn.14004a790
jmp 0x14009fd3d
lea rdx, str._02.02f____s
jmp 0x14009fd38
test eax, eax
jle 0x14009fd31
lea rdx, str._02.0f____s:_d
mov dword [rsp + 0x20], eax
call fcn.14004a790
jmp 0x14009fd3d
lea rdx, str._02.0f____s
call fcn.14004a790
mov rdx, qword [0x140131028]
mov rcx, qword [0x140130ff0]
movsd xmm2, qword [rbp + 0xe10]
lea rax, [rbp + 0x1aa0]
movaps xmm3, xmm7
mov qword [rsp + 0x20], rax
call fcn.14004abf0
cmp dword [0x140126520], 0
je 0x14009fdd8
mov ecx, dword [0x14012bcd8]
mov r9, qword [rbp + 0x68]
mov r8, qword [0x140130ff8]
mov rax, r12
cqo
idiv rcx
mov rcx, qword [0x140131028]
mov rdx, rax
mov rax, qword [0x140131010]
mov qword [rsp + 0x30], rax
mov rax, qword [0x140131008]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140130fe0]
mov qword [rsp + 0x20], rax
call fcn.14004db90
mov r8, qword [rbp + 0x68]
movsd xmm3, qword [rbp + 0x40]
xorps xmm1, xmm1
mov rcx, qword [0x140130ff8]
cvtss2sd xmm1, xmm0
call fcn.1400a1d80
cmp qword [0x14013d820], 0
je 0x14009fdf5
lea rdx, [0x14013d6d0]
lea rcx, [0x14013d818]
call fcn.14004e540
cmp qword [0x14013d840], 0
je 0x14009fe12
lea rdx, [0x14013d740]
lea rcx, [0x14013d838]
call fcn.14004e540
cmp qword [0x14013d860], 0
je 0x14009fe2f
lea rdx, [0x14013d7b0]
lea rcx, [0x14013d858]
call fcn.14004e540
mov rdx, qword [0x14012bbd8]
mov r9d, 0xfffffffe
mov r8d, 0x41f
mov ecx, r15d
call fcn.14005c9d0
mov rdx, qword [0x14012bbd8]
mov r9d, 0xfffffffe
mov r8d, 0x424
mov ecx, r15d
call fcn.14005c9d0
mov rdx, qword [0x14012bbd8]
mov r9d, 0xfffffffe
mov r8d, 0x427
mov ecx, r15d
call fcn.14005c9d0
mov rdx, qword [0x14012bbd8]
mov r9d, 0xfffffffe
mov r8d, 0x672
mov ecx, r15d
call fcn.14005c9d0
mov rcx, qword [0x140130ff0]
mov r8, rbx
movsd xmm1, qword [rbp + 0xe10]
movaps xmm3, xmm15
call fcn.1400a1d80
mov rcx, qword [0x140130fe8]
movsd xmm1, qword [rbp + 0x88]
call fcn.1400a1cc0
mov rcx, qword [0x140131018]
movsd xmm1, qword [rbp + 0x78]
call fcn.1400a24e0
movzx edx, byte [rsp + 0x62]
movzx ebx, sil
test dl, dl
cmovne ebx, r15d
cmp dword [0x140121a74], 0
je 0x14009fff8
mov rcx, qword [0x14012bbd8]
xor r8d, r8d
cmp dword [0x14011e268], r13d
je 0x14009ffcb
xor r9d, r9d
mov edx, 0x1004
mov qword [rbp + 0xf0], 4
mov dword [rbp + 0xf8], r14d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rbp + 0xf4], eax
jge 0x14009fff1
nop word [rax + rax]
mov rcx, qword [0x14012bbd8]
lea r9, [rbp + 0xf0]
xor r8d, r8d
mov edx, 0x104b
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x14011e268]
mov rax, qword [rbp + 0x118]
cmp dword [rax + 0x54], ecx
mov rcx, qword [0x14012bbd8]
je 0x14009ffa7
inc dword [rbp + 0xf4]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov dword [rbp + 0xf0], 4
mov dword [rbp + 0xf8], r14d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rbp + 0xf4], eax
jl 0x14009ff40
jmp 0x14009fff1
movsxd r8, dword [rbp + 0xf4]
mov dword [rbp + 0x1a0], 3
mov dword [rbp + 0x19c], 3
lea r9, [rbp + 0x190]
jmp 0x14009ffe6
mov dword [rbp + 0x150], 3
mov dword [rbp + 0x14c], 3
lea r9, [rbp + 0x140]
mov edx, 0x102b
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x140121a74], r14d
movzx eax, bl
mov rcx, qword [rbp + 0x2aa0]
xor rcx, rsp
call fcn.1400ab140
lea r11, [rsp + 0x2c50]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret