Function at 0x1800149c0
Capabilities:
Link many functions at runtime
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x840]
sub rsp, 0x940
xor esi, esi
mov r14, r9
mov r15, r8
mov edi, esi
mov r12d, esi
mov qword [rbp - 0x10], rsi
mov qword [rbp - 0x18], rsi
mov r13d, edx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x40], eax
cmp r13d, 0x7e9
jne 0x180014aa6
cmp r15, 0x1234
jne 0x180014aa6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rcx, [rbp + 0x101]
xor edx, edx
mov r8d, 0xff
mov byte [rbp + 0x100], sil
mov ebx, eax
call fcn.180008040
lea rdx, [0x18007d070]
lea rcx, [rbp + 0x100]
mov r8d, ebx
call fcn.180001a10
lea r8, [rbp + 0x100]
call fcn.180013870
mov qword [rbp - 0x18], rax
test rax, rax
je 0x180014a89
mov rcx, rax
call fcn.180013ac0
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x180014aa6
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rbx, qword [rsp + 0x990]
add rsp, 0x940
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001bba0
test eax, eax
je 0x180014c0a
cmp eax, 1
jne 0x180014ac2
call fcn.18001f720
jmp 0x180014bfd
cmp eax, 2
jne 0x180014ad1
call fcn.18001f320
jmp 0x180014bfd
cmp eax, 3
jne 0x180014ae0
call fcn.18001f640
jmp 0x180014bfd
cmp eax, 4
jne 0x180014b1b
cmp qword [0x18007bef8], rsi
je 0x180014bfd
lea rcx, [0x18007bf50]
call fcn.180035c00
mov rcx, qword [0x18007bef8]
lea r8, [0x180023720]
mov edx, 0x50
call fcn.18001a980
jmp 0x180014bfd
cmp eax, 5
jne 0x180014b56
cmp qword [0x18007bea8], rsi
je 0x180014bfd
lea rcx, [0x18007bf50]
call fcn.180035c00
mov rcx, qword [0x18007bea8]
lea r8, [0x180023720]
mov edx, 0x50
call fcn.18001a980
jmp 0x180014bfd
cmp eax, 6
jne 0x180014b8e
cmp qword [0x18007be90], rsi
je 0x180014bfd
lea rcx, [0x18007bf70]
call fcn.180035c00
mov rcx, qword [0x18007be90]
lea r8, [0x1800231e0]
mov edx, 0x48
call fcn.18001a980
jmp 0x180014bfd
cmp eax, 7
jne 0x180014b9a
call fcn.180024b20
jmp 0x180014bfd
cmp eax, 8
je 0x180014bfd
cmp eax, 9
jne 0x180014bab
call fcn.1800248b0
jmp 0x180014bfd
cmp eax, 0xa
jne 0x180014bb7
call fcn.180025490
jmp 0x180014bfd
cmp eax, 0xb
jne 0x180014bc3
call fcn.180025540
jmp 0x180014bfd
cmp eax, 0xc
jne 0x180014bcf
call fcn.180024cd0
jmp 0x180014bfd
cmp eax, 0xd
jne 0x180014bdb
call fcn.180021970
jmp 0x180014bfd
cmp eax, 0xe
jne 0x180014be7
call fcn.180021a50
jmp 0x180014bfd
cmp eax, 0xf
jne 0x180014bf3
call fcn.18001f920
jmp 0x180014bfd
cmp eax, 0x10
jne 0x180014bfd
call fcn.18001fa00
call fcn.18001bba0
test eax, eax
jne 0x180014ab3
mov ecx, dword [0x180048620]
mov r11d, 1
mov ebx, ecx
test ecx, ecx
jne 0x180014c93
cmp dword [0x18004861c], esi
je 0x180014c4f
cmp r13d, 6
je 0x180014c4c
lea eax, [r13 - 8]
cmp eax, 0x3f
ja 0x180014c43
movabs rdx, 0xc000000000110001
bt rdx, rax
jb 0x180014c4c
cmp r13d, 0x86
jne 0x180014c4f
mov ebx, r11d
test ecx, ecx
jne 0x180014c93
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub eax, dword [0x18007b934]
cmp eax, 0xbb8
jb 0x180014c8d
mov dword [0x18007b934], ecx
mov ecx, 1
mov dword [0x180048624], esi
call fcn.18001bca0
mov r11d, 1
mov dword [0x180048624], r11d
jmp 0x180014c93
mov r11d, 1
cmp r13d, 0x8b0
jb 0x180014cb5
cmp r13d, 0x8ba
jae 0x180014cbe
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.1800278e0
jmp 0x180014cd5
cmp r13d, 0x8ba
jb 0x180014cf3
cmp r13d, 0x8bf
jae 0x180014cf3
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.1800276b0
mov rbx, qword [rbp + 0x880]
test eax, eax
je 0x180017a1c
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a1c
test ebx, ebx
jne 0x180014d38
cmp r13d, 0x84e
jne 0x180017a15
cmp r15, 0x1234
jne 0x180017a15
mov eax, r14d
mov ebx, 0x8000
and eax, 1
mov dword [0x180048620], eax
mov eax, r14d
and eax, ebx
mov dword [0x18004861c], eax
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r13d, 0x84e
je 0x180014d04
cmp r13d, 6
jne 0x180014da4
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
cmp dword [rax], 0x596235d2
je 0x180014d7b
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014d64
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 6
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
cmp r13d, 0x1c
jne 0x180014e07
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
cmp dword [rax], 0x596235d2
je 0x180014dde
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014dc7
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x1c
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
cmp r13d, 0x86
jne 0x180014e58
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
nop dword [rax]
cmp dword [rax], 0x596235d2
je 0x180014e47
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014e30
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
jmp 0x180014a89
cmp r13d, 8
jne 0x180014ec0
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
nop dword [rax + rax]
cmp dword [rax], 0x596235d2
je 0x180014e97
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014e80
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 8
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
cmp r13d, 0x46
jne 0x180014f23
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
cmp dword [rax], 0x596235d2
je 0x180014efa
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014ee3
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x46
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
cmp r13d, 0x47
jne 0x180014f86
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
cmp dword [rax], 0x596235d2
je 0x180014f5d
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014f46
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x47
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
cmp r13d, 0x18
jne 0x180014ff0
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
nop dword [rax]
cmp dword [rax], 0x596235d2
je 0x180014fc7
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014fb0
jmp 0x180017a15
cmp dword [0x18007b944], edi
jne 0x180017a15
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x18
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
cmp r13d, 0x215
jne 0x18001503b
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180017a15
nop word [rax + rax]
cmp dword [rax], 0x7fae1452
je 0x180014e47
inc esi
add rax, 4
cmp esi, ecx
jb 0x180015020
jmp 0x180017a15
cmp r13d, 0x84
jne 0x180015172
mov rcx, qword [rbp + 0x880]
mov rax, r14
lea rdx, [rsp + 0x60]
shr rax, 0x10
movsx r12d, r14w
movsx ebx, ax
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x880]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x6c]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x44], eax
mov qword [rsp + 0x58], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rcx, qword [rbp + 0x880]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp r12d, dword [rsp + 0x58]
jl 0x180015155
cmp r12d, dword [rsp + 0x40]
jge 0x180015155
cmp ebx, dword [rsp + 0x5c]
jl 0x180015155
cmp ebx, dword [rsp + 0x44]
jge 0x180015155
mov r8, qword [0x18007c0b8]
mov rdx, qword [0x18007c0b0]
mov r9d, dword [0x18007b944]
sub r8, rdx
mov ecx, esi
sar r8, 2
test r8d, r8d
je 0x180015104
mov rax, rdx
cmp dword [rax], 0x592629e2
je 0x18001510c
inc ecx
add rax, 4
cmp ecx, r8d
jb 0x1800150f1
cmp dword [0x18007b060], esi
je 0x18001511a
test r9d, r9d
jne 0x18001511a
mov r14d, dword [0x18007b8a8]
jmp 0x18001512c
movzx ecx, bx
movzx eax, r12w
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b8a8], ecx
test r8d, r8d
je 0x180017a12
cmp dword [rdx], 0x5e1c1dfb
je 0x180015150
inc esi
add rdx, 4
cmp esi, r8d
jb 0x180015135
mov r12d, edi
jmp 0x180017a15
test r9d, r9d
jne 0x180015148
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, 0x84
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
lea eax, [r13 - 0xa0]
cmp eax, 9
jbe 0x180017975
cmp r13d, 0x200
jne 0x1800152cf
mov r8d, dword [0x18007add8]
mov ebx, 0x8000
add r8d, 0xfffffcb8
je 0x18001522d
mov rdx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
mov ecx, esi
sub rdx, rax
sar rdx, 2
test edx, edx
je 0x1800151d5
cmp dword [rax], 0x592629e2
je 0x1800151dd
inc ecx
add rax, 4
cmp ecx, edx
jb 0x1800151c3
cmp dword [0x18007b060], esi
je 0x1800151ee
cmp dword [0x18007b944], esi
jne 0x1800151ee
test rbx, r15
je 0x180014a89
movsx eax, r14w
lea rdx, [rsp + 0x58]
mov ecx, r8d
mov dword [rsp + 0x58], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [rsp + 0x5c], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [0x18007ad6c], esi
jne 0x18001522d
movzx ecx, word [rsp + 0x5c]
movzx eax, word [rsp + 0x58]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b8a8], ecx
test rbx, r15
jne 0x1800152bb
cmp dword [0x18007adf0], esi
jne 0x1800152bb
cmp dword [0x18007b060], esi
jne 0x1800152af
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015256
call rax
jmp 0x18001525c
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800152bb
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800152bb
cmp rbx, rsi
je 0x1800152bb
cmp dword [0x18007ad6c], edi
je 0x180014a89
mov ecx, 0x200
btr r15, 0xf
call fcn.1800181e0
jmp 0x180017a15
cmp r13d, 0x201
jne 0x180015449
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800153a3
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015316
test r9d, r9d
je 0x180015324
test r10d, r10d
jne 0x180015324
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015337
test r9d, r9d
je 0x18001538a
test r10d, r10d
jne 0x18001538a
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x18001536b
call rax
jmp 0x180015371
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015435
mov byte [0x18007bb70], 1
mov byte [0x18007bafc], 1
jmp 0x1800153aa
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015435
cmp dword [0x18007adf0], esi
jne 0x180015435
test r9d, r9d
jne 0x180015429
mov rax, qword [0x18007be88]
test rax, rax
je 0x1800153d0
call rax
jmp 0x1800153d6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015435
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015435
cmp rbx, rsi
je 0x180015435
cmp dword [0x18007ad6c], edi
je 0x180014a89
mov ecx, 0x201
btr r15, 0xf
call fcn.1800181e0
jmp 0x180017a15
cmp r13d, 0x202
jne 0x1800155d1
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x18001552b
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015490
test r9d, r9d
je 0x18001549e
test r10d, r10d
jne 0x18001549e
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x1800154b1
test r9d, r9d
je 0x180015504
test r10d, r10d
jne 0x180015504
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x1800154e5
call rax
jmp 0x1800154eb
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x1800155bd
cmp byte [0x18007bb74], sil
mov byte [0x18007bb70], sil
mov byte [0x18007bafc], 1
sete byte [0x18007bb74]
jmp 0x180015532
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x1800155bd
cmp dword [0x18007adf0], esi
jne 0x1800155bd
test r9d, r9d
jne 0x1800155b1
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015558
call rax
jmp 0x18001555e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x1800155bd
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800155bd
cmp rbx, rsi
je 0x1800155bd
cmp dword [0x18007ad6c], edi
je 0x180014a89
mov ecx, 0x202
btr r15, 0xf
call fcn.1800181e0
jmp 0x180017a15
cmp r13d, 0x203
jne 0x180015721
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015685
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015618
test r9d, r9d
je 0x180015626
test r10d, r10d
jne 0x180015626
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015639
test r9d, r9d
je 0x18001568c
test r10d, r10d
jne 0x18001568c
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x18001566d
call rax
jmp 0x180015673
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
shl r14d, 0x10
or r14, rax
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015717
cmp dword [0x18007adf0], esi
jne 0x180015717
test r9d, r9d
jne 0x18001570b
mov rax, qword [0x18007be88]
test rax, rax
je 0x1800156b2
call rax
jmp 0x1800156b8
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015717
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015717
cmp rbx, rsi
je 0x180015717
cmp dword [0x18007ad6c], edi
je 0x180014a89
btr r15, 0xf
jmp 0x180017a15
cmp r13d, 0x204
jne 0x18001589b
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800157f5
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015768
test r9d, r9d
je 0x180015776
test r10d, r10d
jne 0x180015776
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015789
test r9d, r9d
je 0x1800157dc
test r10d, r10d
jne 0x1800157dc
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x1800157bd
call rax
jmp 0x1800157c3
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015887
mov byte [0x18007bb71], 1
mov byte [0x18007bafd], 1
jmp 0x1800157fc
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015887
cmp dword [0x18007adf0], esi
jne 0x180015887
test r9d, r9d
jne 0x18001587b
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015822
call rax
jmp 0x180015828
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015887
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015887
cmp rbx, rsi
je 0x180015887
cmp dword [0x18007ad6c], edi
je 0x180014a89
mov ecx, 0x204
btr r15, 0xf
call fcn.1800181e0
jmp 0x180017a15
cmp r13d, 0x205
jne 0x180015a23
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x18001597d
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x1800158e2
test r9d, r9d
je 0x1800158f0
test r10d, r10d
jne 0x1800158f0
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015903
test r9d, r9d
je 0x180015956
test r10d, r10d
jne 0x180015956
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015937
call rax
jmp 0x18001593d
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015a0f
cmp byte [0x18007bb75], sil
mov byte [0x18007bb71], sil
mov byte [0x18007bafd], 1
sete byte [0x18007bb75]
jmp 0x180015984
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015a0f
cmp dword [0x18007adf0], esi
jne 0x180015a0f
test r9d, r9d
jne 0x180015a03
mov rax, qword [0x18007be88]
test rax, rax
je 0x1800159aa
call rax
jmp 0x1800159b0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015a0f
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015a0f
cmp rbx, rsi
je 0x180015a0f
cmp dword [0x18007ad6c], edi
je 0x180014a89
mov ecx, 0x205
btr r15, 0xf
call fcn.1800181e0
jmp 0x180017a15
cmp r13d, 0x207
jne 0x180015afa
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015685
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015a6a
test r9d, r9d
je 0x180015a78
test r10d, r10d
jne 0x180015a78
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015a8b
test r9d, r9d
je 0x180015ade
test r10d, r10d
jne 0x180015ade
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015abf
call rax
jmp 0x180015ac5
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015717
mov byte [0x18007bb72], 1
mov byte [0x18007bafe], 1
jmp 0x18001568c
cmp r13d, 0x208
jne 0x180015bdf
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015685
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015b41
test r9d, r9d
je 0x180015b4f
test r10d, r10d
jne 0x180015b4f
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015b62
test r9d, r9d
je 0x180015bb5
test r10d, r10d
jne 0x180015bb5
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x40]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015b96
call rax
jmp 0x180015b9c
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015717
cmp byte [0x18007bb76], sil
mov byte [0x18007bb72], sil
mov byte [0x18007bafe], 1
sete byte [0x18007bb76]
jmp 0x18001568c
cmp r13d, 0x20a
jne 0x180015d0b
mov eax, dword [0x18007add8]
mov r9d, dword [0x18007b060]
mov ebx, 0x8000
add eax, 0xfffffcb8
je 0x180015c6c
mov ecx, 0x5e1c1dfb
call fcn.18001bb60
mov r10d, dword [0x18007b944]
test eax, eax
jne 0x180015c1f
test r9d, r9d
je 0x180015c2d
test r10d, r10d
jne 0x180015c2d
test rbx, r15
je 0x180014a89
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015c40
test r9d, r9d
je 0x180015c6c
test r10d, r10d
jne 0x180015c6c
mov ecx, dword [0x18007b8a8]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x58], eax
movsx eax, cx
movzx r14d, ax
mov dword [rsp + 0x5c], eax
movzx eax, word [rsp + 0x58]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015cf7
cmp dword [0x18007adf0], esi
jne 0x180015cf7
test r9d, r9d
jne 0x180015ceb
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015c92
call rax
jmp 0x180015c98
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp + 0x888]
mov rcx, rax
mov rbx, rax
mov dword [rbp + 0x888], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x888], eax
je 0x180015cf7
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015cf7
cmp rbx, rsi
je 0x180015cf7
cmp dword [0x18007ad6c], edi
je 0x180014a89
mov ecx, 0x20a
btr r15, 0xf
call fcn.1800181e0
jmp 0x180017a15
cmp r13d, 0x2a3
jne 0x180015da7
mov r9d, dword [0x18007add8]
add r9d, 0xfffffcb8
je 0x180017a15
mov ecx, 0x592629e2
call fcn.18001bb60
test eax, eax
jne 0x180015d46
cmp dword [0x18007b060], esi
je 0x180017a15
cmp dword [0x18007b944], esi
jne 0x180017a15
mov ecx, dword [0x18007b8a8]
mov r13d, 0x2a1
mov r15, rsi
movsx eax, cx
shr ecx, 0x10
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], eax
movsx eax, cx
mov ecx, r9d
mov dword [rsp + 0x44], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015d8a
call rax
jmp 0x180015d90
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x44]
movzx eax, word [rsp + 0x40]
shl r14d, 0x10
or r14, rax
jmp 0x180017a15
cmp r13d, 0x2a2
je 0x180015d18
mov r12d, 0x100
cmp r13d, r12d
jne 0x180015e5a
bt r14, 0x1a
jb 0x180015e45
cmp dword [0x18007adf0], esi
jne 0x180015e45
cmp dword [0x18007ad60], esi
jne 0x180014a89
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015dee
call rax
jmp 0x180015df4
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x50], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x50], eax
je 0x180015e45
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015e45
cmp rbx, rsi
jne 0x180014a89
mov ecx, r12d
btr r14, 0x1a
call fcn.180018290
mov r12d, edi
jmp 0x180017a15
cmp r13d, 0x101
jne 0x180015f00
bt r14, 0x1a
jb 0x180015ee9
cmp dword [0x18007adf0], esi
jne 0x180015ee9
cmp dword [0x18007ad60], esi
jne 0x180014a89
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015e92
call rax
jmp 0x180015e98
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x50], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x50], eax
je 0x180015ee9
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015ee9
cmp rbx, rsi
jne 0x180014a89
mov ecx, 0x101
btr r14, 0x1a
call fcn.180018290
mov r12d, edi
jmp 0x180017a15
cmp r13d, 0x104
jne 0x180015fa6
bt r14, 0x1a
jb 0x180015f8f
cmp dword [0x18007adf0], esi
jne 0x180015f8f
cmp dword [0x18007ad60], esi
jne 0x180014a89
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015f38
call rax
jmp 0x180015f3e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x50], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x50], eax
je 0x180015f8f
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015f8f
cmp rbx, rsi
jne 0x180014a89
mov ecx, 0x104
btr r14, 0x1a
call fcn.180018290
mov r12d, edi
jmp 0x180017a15
cmp r13d, 0x105
jne 0x18001604c
bt r14, 0x1a
jb 0x180016035
cmp dword [0x18007adf0], esi
jne 0x180016035
cmp dword [0x18007ad60], esi
jne 0x180014a89
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015fde
call rax
jmp 0x180015fe4
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x50], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x50], eax
je 0x180016035
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180016035
cmp rbx, rsi
jne 0x180014a89
mov ecx, 0x105
btr r14, 0x1a
call fcn.180018290
mov r12d, edi
jmp 0x180017a15
cmp r13d, 0x106
jne 0x1800160e8
bt r14, 0x1a
jb 0x1800160db
cmp dword [0x18007adf0], esi
jne 0x1800160db
cmp dword [0x18007ad60], esi
jne 0x180014a89
mov rax, qword [0x18007be88]
test rax, rax
je 0x180016084
call rax
jmp 0x18001608a
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x50], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x50], eax
je 0x1800160db
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800160db
cmp rbx, rsi
jne 0x180014a89
btr r14, 0x1a
mov r12d, edi
jmp 0x180017a15
cmp r13d, 0x102
jne 0x1800161ce
lea eax, [r15 - 0x56]
mov ebx, 0x8000
test al, 0xdf
jne 0x180016116
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
jne 0x180014a89
cmp dword [0x18007b05c], esi
je 0x1800161a4
bt r14, 0x1a
jb 0x1800161a4
cmp dword [0x18007adf0], esi
jne 0x1800161a4
cmp dword [0x18007ad60], esi
jne 0x180014a89
mov rax, qword [0x18007be88]
test rax, rax
je 0x18001614d
call rax
jmp 0x180016153
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov r12, rax
mov dword [rsp + 0x50], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x50], eax
je 0x1800161a4
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, r12
je 0x1800161a4
cmp r12, rsi
jne 0x180014a89
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
je 0x1800161c1
movzx ecx, r15b
call fcn.180024750
movsx r15, al
btr r14, 0x1a
mov r12d, edi
jmp 0x180017a15
cmp r13d, 0x7e9
jne 0x1800163c7
cmp r15, 0x1234
jne 0x180017a12
call fcn.1800184f0
mov rdi, qword [rbp - 0x10]
mov ebx, esi
cmp dword [rdi + 0x1000424], ebx
jbe 0x18001621c
nop dword [rax + rax]
mov edx, ebx
add rdx, 0x400009
lea rdx, [rdi + rdx*4]
call fcn.1800017e0
inc ebx
cmp ebx, dword [rdi + 0x1000424]
jb 0x180016200
lea rcx, [rdi + 0x1000024]
xor edx, edx
mov r8d, 0x400
call fcn.180008040
mov rcx, rdi
call fcn.18001fae0
test eax, eax
je 0x18001627a
call fcn.18001f400
test eax, eax
je 0x18001627a
call fcn.18001c340
test eax, eax
je 0x18001627a
mov rcx, rdi
call fcn.180024db0
test eax, eax
je 0x18001627a
call fcn.18001f800
test eax, eax
je 0x18001627a
mov rcx, rdi
call fcn.1800218d0
test eax, eax
je 0x18001627a
mov r12d, 1
mov ebx, r12d
jmp 0x180016282
mov ebx, esi
mov r12d, 1
mov ecx, 0x3f1c98f9
call fcn.18001bb60
test eax, eax
je 0x180016296
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, 0x6a5a450a
call fcn.18001bb60
mov ecx, dword [0x18007b03c]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b03c], ecx
mov ecx, 0x7d877e7a
call fcn.18001bb60
mov ecx, dword [0x18007b064]
movups xmm0, xmmword [rdi + 0x1000480]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b064], ecx
movaps xmmword [0x18007ad70], xmm0
movups xmm1, xmmword [rdi + 0x1000490]
movaps xmmword [0x18007ad80], xmm1
movups xmm0, xmmword [rdi + 0x10004a0]
movaps xmmword [0x18007ad90], xmm0
movups xmm1, xmmword [rdi + 0x10004b0]
movaps xmmword [0x18007ada0], xmm1
movups xmm0, xmmword [rdi + 0x10004c0]
movaps xmmword [0x18007adb0], xmm0
movups xmm1, xmmword [rdi + 0x10004d0]
movaps xmmword [0x18007adc0], xmm1
movups xmm0, xmmword [rdi + 0x10004e0]
movaps xmmword [0x18007b8c0], xmm0
movups xmm1, xmmword [rdi + 0x10004f0]
movaps xmmword [0x18007b8d0], xmm1
movups xmm0, xmmword [rdi + 0x1000500]
movaps xmmword [0x18007b8e0], xmm0
movups xmm1, xmmword [rdi + 0x1000510]
movaps xmmword [0x18007b8f0], xmm1
movups xmm0, xmmword [rdi + 0x1000520]
movaps xmmword [0x18007b900], xmm0
movups xmm1, xmmword [rdi + 0x1000530]
movaps xmmword [0x18007b910], xmm1
call fcn.180018350
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x180048624], esi
mov dword [0x18007adf4], eax
test ebx, ebx
je 0x18001639f
xor ecx, ecx
call fcn.18001bca0
mov edi, r12d
test eax, eax
jne 0x1800163a1
mov edi, esi
lea rcx, [0x180076d60]
xor edx, edx
mov r8d, 0x4000
mov dword [0x180048624], r12d
call fcn.180008040
mov dword [0x18007b974], esi
jmp 0x180017a15
cmp r13d, 0x7ea
jne 0x1800163f9
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov rcx, rbx
call fcn.180017a70
mov r12d, 1
mov edi, eax
jmp 0x180017a1c
cmp r13d, 0x837
jne 0x180016875
mov ecx, r15d
mov rax, r15
mov r12d, esi
and ecx, 0x80
shr rax, 0x10
mov dword [rsp + 0x50], ecx
movzx eax, ax
mov ecx, r15d
and ecx, 0x40
test r15b, 1
mov dword [rbp - 0x24], eax
cmovne r12d, r11d
mov dword [rbp - 0x20], ecx
cmp eax, 2
ja 0x180017a12
cmp r14d, 0xff
ja 0x180017a12
movsxd rax, r14d
xor edx, edx
mov ecx, r14d
mov qword [rsp + 0x58], rax
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, r14d
mov ebx, eax
mov dword [rbp - 0x28], eax
shl ebx, 0x10
or rbx, 1
call fcn.180012ef0
test eax, eax
je 0x18001647a
bts rbx, 0x18
mov eax, dword [rbp - 0x24]
cmp eax, 1
jne 0x1800164b2
test r12d, r12d
jne 0x18001649d
cmp r14d, 0x79
je 0x18001649d
mov ecx, r14d
mov r12d, 0x100
call fcn.180025440
jmp 0x1800164e5
mov ecx, r14d
bts rbx, 0x1d
mov r12d, 0x104
call fcn.180025440
jmp 0x1800164e5
test r12d, r12d
jne 0x1800164c5
cmp r14d, 0x79
je 0x1800164c5
mov r12d, 0x101
jmp 0x1800164d0
bts rbx, 0x1d
mov r12d, 0x105
mov ecx, 0xc0000000
or rbx, rcx
cmp eax, 2
jne 0x1800164e5
mov ecx, r14d
call fcn.180024bc0
cmp dword [rbp - 0x20], esi
mov rax, qword [0x18007b988]
cmovne rbx, rsi
test rax, rax
je 0x1800164fe
xor ecx, ecx
call rax
jmp 0x180016504
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
jne 0x180016525
mov rcx, qword [rbp + 0x880]
call qword [sym.imp.USER32.dll_SetFocus]
mov r10, qword [rbp + 0x880]
mov rdi, r10
jmp 0x18001652c
mov r10, qword [rbp + 0x880]
mov ecx, 0x797a779e
call fcn.18001bb60
test eax, eax
cmove rdi, r10
cmp dword [0x18007b944], esi
jne 0x180016556
cmp rdi, r10
jne 0x180016556
cmp dword [0x18007adf0], esi
jne 0x180016556
bts rbx, 0x1a
mov ecx, 0x18d3d20
call fcn.18001bb60
test eax, eax
je 0x180016778
cmp qword [0x180076d48], rsi
jne 0x18001664b
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x72657375
mov dword [rsp + 0x74], 0x642e3233
mov word [rsp + 0x78], 0x6c6c
mov byte [rsp + 0x7a], sil
mov dword [rbp - 0x78], 0x52746547
mov dword [rbp - 0x74], 0x73696765
mov dword [rbp - 0x70], 0x65726574
mov dword [rbp - 0x6c], 0x77615264
mov dword [rbp - 0x68], 0x75706e49
mov dword [rbp - 0x64], 0x76654474
mov dword [rbp - 0x60], 0x73656369
mov byte [rbp - 0x5c], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180016636
lea rcx, [rbp]
xor edx, edx
mov r8d, 0xa0
mov dword [rbp + 0x888], 0xa
call fcn.180008040
lea rdx, [rbp + 0x888]
lea rcx, [rbp]
mov r8d, 0x10
call qword [rsp + 0x40]
mov ecx, esi
test eax, eax
je 0x180016636
lea rdx, [rbp + 2]
cmp word [rdx], 6
je 0x18001671a
inc ecx
add rdx, 0x10
cmp ecx, eax
jb 0x180016622
mov rax, qword [0x180076d48]
test rax, rax
cmove rax, rdi
mov qword [0x180076d48], rax
cmp qword [0x18007b928], rsi
jne 0x180016730
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x72657375
mov dword [rsp + 0x64], 0x642e3233
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], sil
mov dword [rbp - 0x58], 0x52746547
mov dword [rbp - 0x54], 0x6e497761
mov dword [rbp - 0x50], 0x44747570
mov dword [rbp - 0x4c], 0x63697665
mov dword [rbp - 0x48], 0x73694c65
mov word [rbp - 0x44], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180016730
lea rcx, [rbp + 0x200]
xor edx, edx
mov r8d, 0x640
mov dword [rbp - 0x24], 0x64
call fcn.180008040
lea rdx, [rbp - 0x24]
lea rcx, [rbp + 0x200]
mov r8d, 0x10
call qword [rsp + 0x40]
mov edx, esi
test eax, eax
je 0x180016730
lea rcx, [rbp + 0x200]
nop dword [rax]
cmp dword [rcx + 8], 1
jne 0x18001670e
mov r8, qword [rcx]
test r8, r8
jne 0x180016729
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016700
jmp 0x180016730
mov eax, ecx
add rax, rax
mov rax, qword [rbp + rax*8 + 8]
jmp 0x18001663d
mov qword [0x18007b928], r8
mov rcx, qword [0x180076d48]
xor r8d, r8d
mov r9d, 0x12345678
mov edx, 0xff
cmp dword [rsp + 0x50], esi
je 0x18001676b
mov eax, dword [0x180076d54]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016771
call qword [sym.imp.USER32.dll_PostMessageA]
mov r10, qword [rbp + 0x880]
cmp dword [0x18007b04c], esi
je 0x1800167bb
mov edx, dword [0x180076d44]
lea r8, [0x18007ae00]
xor eax, eax
lea rcx, [rdx + rdx*2]
inc edx
mov qword [r8 + rcx*8], rax
mov qword [r8 + rcx*8 + 8], rax
mov qword [r8 + rcx*8 + 0x10], rax
mov eax, dword [rbp - 0x28]
cmp edx, 0xa
mov dword [r8 + rcx*8], r14d
cmovae edx, esi
mov dword [r8 + rcx*8 + 4], eax
mov dword [0x180076d44], edx
cmp dword [0x180048618], esi
mov edx, r12d
je 0x180016819
mov r8, qword [rsp + 0x58]
mov r9, rbx
mov rcx, rdi
cmp dword [rsp + 0x50], esi
je 0x180016804
mov eax, dword [0x180076d54]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a15
call qword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a15
mov rsi, qword [rsp + 0x58]
btr rbx, 0x1a
mov rcx, r10
mov r8, rsi
mov r9, rbx
call qword [0x18007b920]
xor eax, eax
lea rcx, [rbp - 0x58]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x58], rdi
mov dword [rbp - 0x50], r12d
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
call qword [sym.imp.USER32.dll_TranslateMessage]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a15
cmp r13d, 0x838
jne 0x180017078
mov rax, r15
mov ecx, esi
mov edx, esi
shr rax, 0x10
mov r8d, esi
movsx r9d, r14w
movzx ebx, ax
mov eax, r15d
mov dword [rbp - 0x20], r9d
and eax, 0x80
test r15b, 1
mov dword [rsp + 0x50], ebx
cmovne ecx, r11d
test r15b, 2
mov dword [rbp - 0x28], eax
cmovne edx, r11d
test r15b, 4
mov rax, r14
cmovne r8d, r11d
shr rax, 0x10
movsx r10d, ax
mov dword [rbp - 0x24], r10d
cmp ebx, 0xa
ja 0x180017a12
mov dword [rbp + 0x888], esi
mov r12, rsi
mov qword [rsp + 0x58], r14
mov edi, 0x780000
mov eax, 0xff880000
cmp ebx, 1
jne 0x18001691d
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180016905
or r12, 2
test r8d, r8d
je 0x18001690e
or r12, 0x10
mov dword [rbp + 0x888], 0x200
jmp 0x180016a39
cmp ebx, 2
jne 0x180016934
mov r12, r11
mov dword [rbp + 0x888], 0x201
jmp 0x180016a39
cmp ebx, 8
jne 0x18001694b
mov r12, r11
mov dword [rbp + 0x888], 0x203
jmp 0x180016a39
cmp ebx, 3
jne 0x18001695f
mov dword [rbp + 0x888], 0x202
jmp 0x180016a39
cmp ebx, 4
jne 0x180016977
lea r12d, [rbx - 2]
mov dword [rbp + 0x888], 0x204
jmp 0x180016a39
cmp ebx, 5
jne 0x18001698b
mov dword [rbp + 0x888], 0x205
jmp 0x180016a39
cmp ebx, 6
jne 0x18001699e
mov eax, 0x207
lea r12d, [rbx + 0xa]
jmp 0x180016a33
cmp ebx, 7
jne 0x1800169ad
mov eax, 0x208
jmp 0x180016a33
cmp ebx, 9
jne 0x1800169d2
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x1800169c0
or r12, 2
test r8d, r8d
je 0x1800169c9
or r12, 0x10
movzx r12d, r12w
or r12, rdi
jmp 0x1800169f5
cmp ebx, 0xa
jne 0x180016a39
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x1800169e5
or r12, 2
test r8d, r8d
je 0x1800169ee
or r12, 0x10
movzx r12d, r12w
or r12, rax
mov rcx, qword [rbp + 0x880]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
mov dword [rsp + 0x5c], r10d
call qword [sym.imp.USER32.dll_ClientToScreen]
movzx r9d, word [rsp + 0x5c]
movzx eax, word [rsp + 0x58]
shl r9d, 0x10
mov r11d, 1
or r9, rax
mov eax, 0x20a
mov qword [rsp + 0x58], r9
mov dword [rbp + 0x888], eax
cmp dword [0x18007b944], esi
jne 0x180016a55
cmp dword [0x18007adf0], esi
jne 0x180016a55
mov ebx, 0x8000
or r12, rbx
mov ebx, dword [rsp + 0x50]
cmp ebx, 1
jne 0x180016aff
mov rcx, qword [rbp + 0x880]
movsx ebx, word [0x18007b8a8]
movsx edi, word [0x18007b8aa]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov r9d, dword [rbp - 0x24]
mov r8d, dword [rbp - 0x20]
movzx eax, r9w
add ax, word [rsp + 0x44]
movzx edx, ax
movzx eax, r8w
add ax, word [rsp + 0x40]
shl edx, 0x10
movzx ecx, ax
or edx, ecx
mov dword [0x18007b8a8], edx
mov edx, dword [rsp + 0x40]
sub edx, ebx
mov ebx, dword [rsp + 0x44]
sub ebx, edi
add ebx, r9d
add edx, r8d
je 0x180016acf
mov cl, 0x37
mov dword [0x18007be80], edx
call fcn.180024170
test ebx, ebx
je 0x180016ae2
mov edx, ebx
mov cl, 0x38
mov dword [0x18007bee8], ebx
call fcn.180024170
mov ebx, dword [rsp + 0x50]
mov rax, qword [0x18007b988]
test rax, rax
je 0x180016c39
xor ecx, ecx
call rax
jmp 0x180016c3f
cmp ebx, 2
je 0x180016c1c
cmp ebx, 8
je 0x180016c1c
cmp ebx, 3
jne 0x180016b3d
cmp byte [0x18007bb74], sil
mov byte [0x18007bb70], sil
mov byte [0x18007bafc], 1
sete byte [0x18007bb74]
xor edx, edx
xor ecx, ecx
call fcn.180024170
jmp 0x180016ae6
cmp ebx, 4
jne 0x180016b5c
mov edx, r11d
mov cl, 1
mov byte [0x18007bb71], 1
mov byte [0x18007bafd], 1
call fcn.180024170
jmp 0x180016ae6
cmp ebx, 5
jne 0x180016b8b
cmp byte [0x18007bb75], sil
mov cl, 1
mov byte [0x18007bb71], sil
sete byte [0x18007bb75]
xor edx, edx
mov byte [0x18007bafd], 1
call fcn.180024170
jmp 0x180016ae6
cmp ebx, 6
jne 0x180016bad
mov edx, r11d
mov cl, 2
mov byte [0x18007bb72], 1
mov byte [0x18007bafe], 1
call fcn.180024170
jmp 0x180016ae6
cmp ebx, 7
jne 0x180016bdc
cmp byte [0x18007bb76], sil
mov cl, 2
mov byte [0x18007bb72], sil
sete byte [0x18007bb76]
xor edx, edx
mov byte [0x18007bafe], 1
call fcn.180024170
jmp 0x180016ae6
cmp ebx, 0xa
jne 0x180016bfa
mov edx, r11d
mov cl, 4
call fcn.180024170
mov dword [0x18007beec], 0xffffff88
jmp 0x180016ae6
cmp ebx, 9
jne 0x180016ae6
mov edx, r11d
mov cl, 5
call fcn.180024170
mov dword [0x18007beec], 0x78
jmp 0x180016ae6
mov edx, r11d
xor ecx, ecx
mov byte [0x18007bb70], 1
mov byte [0x18007bafc], 1
call fcn.180024170
jmp 0x180016ae6
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
jne 0x180016c57
mov rdi, qword [rbp + 0x880]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetFocus]
mov ecx, 0x797a779e
call fcn.18001bb60
mov rcx, qword [rbp + 0x880]
mov r9d, dword [0x18007b8a8]
test eax, eax
mov edx, 0x84
cmove rdi, rcx
xor r8d, r8d
cmp dword [rbp - 0x28], esi
je 0x180016ca2
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016ca8
call qword [sym.imp.USER32.dll_SendMessageA]
cmp ebx, 1
jne 0x180016ceb
mov r8, qword [rbp + 0x880]
mov r9d, 0x2000001
lea edx, [rbx + 0x1f]
mov rcx, r8
cmp dword [rbp - 0x28], esi
je 0x180016ce5
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016ceb
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x326cd5b9
call fcn.18001bb60
test eax, eax
je 0x180016f5b
cmp qword [0x18007b888], rsi
jne 0x180016ddc
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x72657375
mov dword [rsp + 0x64], 0x642e3233
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], sil
mov dword [rbp - 0x78], 0x52746547
mov dword [rbp - 0x74], 0x73696765
mov dword [rbp - 0x70], 0x65726574
mov dword [rbp - 0x6c], 0x77615264
mov dword [rbp - 0x68], 0x75706e49
mov dword [rbp - 0x64], 0x76654474
mov dword [rbp - 0x60], 0x73656369
mov byte [rbp - 0x5c], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180016dc7
lea rcx, [rbp]
xor edx, edx
mov r8d, 0xa0
mov dword [rsp + 0x50], 0xa
call fcn.180008040
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
mov r8d, 0x10
call qword [rsp + 0x40]
mov edx, esi
test eax, eax
je 0x180016dc7
lea rcx, [rbp + 2]
cmp word [rcx], 2
je 0x180016ea9
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016db3
mov rax, qword [0x18007b888]
test rax, rax
cmove rax, rdi
mov qword [0x18007b888], rax
cmp qword [0x18007b040], rsi
jne 0x180016ebf
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x72657375
mov dword [rsp + 0x74], 0x642e3233
mov word [rsp + 0x78], 0x6c6c
mov byte [rsp + 0x7a], sil
mov dword [rbp - 0x58], 0x52746547
mov dword [rbp - 0x54], 0x6e497761
mov dword [rbp - 0x50], 0x44747570
mov dword [rbp - 0x4c], 0x63697665
mov dword [rbp - 0x48], 0x73694c65
mov word [rbp - 0x44], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180016ebf
lea rcx, [rbp + 0x200]
xor edx, edx
mov r8d, 0x640
mov dword [rsp + 0x40], 0x64
call fcn.180008040
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x200]
mov r8d, 0x10
call rdi
mov edx, esi
test eax, eax
je 0x180016ebf
lea rcx, [rbp + 0x200]
nop dword [rax + rax]
cmp dword [rcx + 8], esi
jne 0x180016e9d
mov r8, qword [rcx]
test r8, r8
jne 0x180016eb8
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016e90
jmp 0x180016ebf
mov eax, edx
add rax, rax
mov rax, qword [rbp + rax*8 + 8]
jmp 0x180016dce
mov qword [0x18007b040], r8
mov edi, dword [rbp - 0x28]
mov rcx, qword [0x18007b888]
xor r8d, r8d
mov r9d, 0x12345679
mov edx, 0xff
test edi, edi
je 0x180016f33
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
cmp ebx, 1
jne 0x180016f5e
mov eax, dword [0x18007b948]
mov rcx, qword [0x18007b888]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016f5e
call qword [sym.imp.USER32.dll_PostMessageA]
cmp ebx, 1
jne 0x180016f5e
mov rcx, qword [0x18007b888]
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180016f5e
mov edi, dword [rbp - 0x28]
cmp dword [0x18007ad64], esi
mov ecx, dword [rbp + 0x888]
je 0x180016ffc
lea eax, [rcx - 0x203]
test eax, 0xfffffffa
jne 0x180016f85
cmp ecx, 0x204
jne 0x180016ffc
mov edx, dword [0x18007b870]
lea rax, [0x18007aef0]
shl rdx, 5
add rdx, rax
xor eax, eax
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov eax, dword [rbp - 0x20]
mov dword [rdx], eax
mov eax, dword [rbp - 0x24]
mov dword [rdx + 4], eax
cmp ecx, 0x20a
jne 0x180016fd0
cmp ebx, 9
mov eax, 0xff880000
mov ecx, 0x780000
cmove eax, ecx
mov dword [rdx + 8], eax
mov rbx, qword [rbp + 0x880]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x18007b870]
mov ecx, dword [rbp + 0x888]
inc eax
cmp eax, 0xa
cmovae eax, esi
mov dword [0x18007b870], eax
jmp 0x180017003
mov rbx, qword [rbp + 0x880]
cmp dword [0x180048610], esi
mov r9, qword [rsp + 0x58]
mov edx, ecx
mov rcx, rbx
mov r8, r12
je 0x18001705e
test edi, edi
je 0x180017049
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a1c
call qword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a1c
btr r9, 0x1a
call qword [0x18007b920]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a1c
cmp r13d, 0x83a
jne 0x1800170a7
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x180048614], r11d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x83d
jne 0x1800170e7
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
movsx eax, r14w
mov edi, r11d
mov r12d, r11d
mov dword [0x18007be80], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [0x18007bee8], eax
jmp 0x180017a1c
cmp r13d, 0x83f
jne 0x18001712c
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov eax, r14d
mov edi, r11d
mov r12d, r11d
btr eax, 0x1f
mov dword [0x18007b940], eax
mov rax, r14
shr rax, 0x1f
and eax, 1
mov dword [0x180076d50], eax
jmp 0x180017a1c
cmp r13d, 0x863
jne 0x18001716c
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
xorps xmm0, xmm0
mov edi, r11d
mov r12d, r11d
cvtsi2sd xmm0, r14
divsd xmm0, qword [0x180041640]
movsd qword [0x180048628], xmm0
jmp 0x180017a1c
cmp r13d, 0x842
jne 0x1800171d7
cmp r15, 0x1234
jne 0x180017a12
mov ecx, 0x16cc25d5
call fcn.18001bb60
test eax, eax
je 0x1800171cc
call fcn.180024d40
mov rcx, rax
mov rsi, rax
call fcn.180012f90
mov edx, r14d
mov rcx, rax
mov rbx, rax
call fcn.1800130a0
mov edi, eax
test rsi, rsi
je 0x1800171be
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyCursor]
test rbx, rbx
je 0x1800171cc
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov r12d, 1
jmp 0x180017a15
cmp r13d, 0x843
jne 0x18001726f
cmp r15, 0x1234
jne 0x180017a12
mov ecx, 0x16cc25d5
call fcn.18001bb60
test eax, eax
je 0x180017263
call fcn.180024d40
mov ebx, 0xffff
mov rdi, rax
mov esi, ebx
test rax, rax
je 0x18001724d
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetIconInfo]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x18001722f
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x18001723e
call qword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [rbp - 0x54]
mov esi, dword [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
movzx edi, si
movzx eax, bx
mov r12d, 1
shl edi, 0x10
or edi, eax
jmp 0x180017a15
or edi, 0xffffffff
lea r12d, [rdi + 2]
jmp 0x180017a15
cmp r13d, 0x844
jne 0x1800172b8
cmp r15, 0x1234
jne 0x1800172ab
movsxd rax, dword [0x18007b974]
cmp eax, 0x1000
jge 0x1800172ab
lea rcx, [0x180076d60]
lea edi, [rax + 1]
mov r12d, r11d
mov dword [rcx + rax*4], r11d
mov dword [0x18007b974], edi
jmp 0x180017a15
mov edi, 0x1388
mov r12d, r11d
jmp 0x180017a15
cmp r13d, 0x845
jne 0x1800172f5
cmp r15, 0x1234
jne 0x180017a12
lea rax, [r14 - 1]
cmp rax, 0xfff
ja 0x180014d2d
lea rcx, [0x180076d60]
mov edi, r11d
mov r12d, r11d
mov dword [rcx + r14*4 - 4], esi
jmp 0x180017a15
cmp r13d, 0x846
jne 0x1800173ed
cmp r15, 0x1234
jne 0x180017a12
test r14, r14
jne 0x180017331
mov dword [0x18007ad60], esi
mov dword [0x18007b05c], esi
mov dword [0x18007b060], esi
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r14, 1
jne 0x180017356
mov dword [0x18007b060], r11d
mov dword [0x18007ad60], r11d
mov dword [0x18007b05c], esi
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r14, 2
jne 0x18001737a
mov dword [0x18007b060], r11d
mov dword [0x18007ad60], esi
mov dword [0x18007b05c], esi
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r14, 3
jne 0x18001739e
mov dword [0x18007b05c], esi
mov dword [0x18007ad60], r11d
mov dword [0x18007b060], esi
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r14, 4
jne 0x1800173c4
mov dword [0x18007b060], r11d
mov dword [0x18007ad60], r11d
mov dword [0x18007b05c], r11d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r14, 5
jne 0x180014d2d
mov dword [0x18007b05c], r11d
mov dword [0x18007ad60], r11d
mov dword [0x18007b060], esi
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r13d, 0x850
jne 0x18001741c
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x18007b968], r14d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x851
jne 0x180017447
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov edi, dword [0x18007b8a8]
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x852
jne 0x180017476
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x180048618], r14d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x853
jne 0x1800174a5
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x180048610], r14d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x84d
jne 0x1800174d4
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x18007adf0], r14d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x84f
jne 0x180017733
cmp r15, 0x1234
jne 0x180017a12
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x336d6d69
mov dword [rsp + 0x44], 0x6c642e32
mov word [rsp + 0x48], 0x6c
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test r14, r14
je 0x180017614
test rax, rax
je 0x180016866
lea rdx, [rsp + 0x60]
mov rcx, rax
mov dword [rsp + 0x60], 0x476d6d49
mov dword [rsp + 0x64], 0x6f437465
mov dword [rsp + 0x68], 0x7865746e
mov word [rsp + 0x6c], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov dword [rsp + 0x70], 0x476d6d49
mov dword [rsp + 0x74], 0x704f7465
mov dword [rsp + 0x78], 0x74536e65
mov rdi, rax
mov dword [rsp + 0x7c], 0x73757461
mov byte [rbp - 0x80], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x78]
mov rcx, rsi
mov dword [rbp - 0x78], 0x536d6d49
mov dword [rbp - 0x74], 0x704f7465
mov dword [rbp - 0x70], 0x74536e65
mov rbx, rax
mov dword [rbp - 0x6c], 0x73757461
mov byte [rbp - 0x68], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x58]
mov rcx, rsi
mov dword [rbp - 0x58], 0x526d6d49
mov dword [rbp - 0x54], 0x61656c65
mov dword [rbp - 0x50], 0x6f436573
mov r12, rax
mov dword [rbp - 0x4c], 0x7865746e
mov word [rbp - 0x48], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
mov qword [rsp + 0x58], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
jne 0x180017708
lea edx, [rax + 1]
jmp 0x180017702
test rax, rax
je 0x180016866
lea rdx, [rsp + 0x60]
mov rcx, rax
mov dword [rsp + 0x60], 0x476d6d49
mov dword [rsp + 0x64], 0x6f437465
mov dword [rsp + 0x68], 0x7865746e
mov word [rsp + 0x6c], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x78]
mov rcx, rsi
mov dword [rbp - 0x78], 0x476d6d49
mov dword [rbp - 0x74], 0x704f7465
mov dword [rbp - 0x70], 0x74536e65
mov rdi, rax
mov dword [rbp - 0x6c], 0x73757461
mov byte [rbp - 0x68], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov dword [rsp + 0x70], 0x536d6d49
mov dword [rsp + 0x74], 0x704f7465
mov dword [rsp + 0x78], 0x74536e65
mov rbx, rax
mov dword [rsp + 0x7c], 0x73757461
mov byte [rbp - 0x80], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x58]
mov rcx, rsi
mov dword [rbp - 0x58], 0x526d6d49
mov dword [rbp - 0x54], 0x61656c65
mov dword [rbp - 0x50], 0x6f436573
mov r12, rax
mov dword [rbp - 0x4c], 0x7865746e
mov word [rbp - 0x48], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
mov qword [rsp + 0x58], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
je 0x180017708
xor edx, edx
mov rcx, rdi
call r12
mov ecx, dword [0x18007add8]
mov rdx, rdi
add ecx, 0xfffffcb8
call qword [rsp + 0x58]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov edi, eax
mov r12d, eax
jmp 0x180017a15
cmp r13d, 0x847
jne 0x180017762
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x18007ad6c], r14d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x848
jne 0x180017791
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov dword [0x18007b874], r14d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x840
jne 0x1800177b9
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x841
jne 0x1800177e1
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x849
jne 0x18001781b
mov eax, dword [0x180076d54]
test r15, r15
mov edi, r11d
cmovne eax, r15d
test r14, r14
mov r12d, r11d
mov dword [0x180076d54], eax
mov eax, dword [0x18007b948]
cmovne eax, r14d
mov dword [0x18007b948], eax
jmp 0x180017a15
cmp r13d, 0x84a
jne 0x1800178d8
cmp r15, 0x1234
jne 0x180017a12
test r14, r14
je 0x1800178c7
lea rcx, [rbp + 1]
xor edx, edx
mov r8d, 0xff
mov byte [0x18007b070], sil
mov byte [rbp], sil
call fcn.180008040
mov r8d, dword [rsp + 0x40]
lea rdx, [0x18007d170]
lea rcx, [rbp]
call fcn.180001a10
lea r8, [rbp]
call fcn.180013870
mov rdi, rax
test rax, rax
je 0x1800178af
mov rcx, rax
call fcn.180013ac0
lea edx, [r13 - 0x4a]
lea rcx, [0x18007b070]
mov r8, rax
mov rbx, rax
call fcn.180003354
mov rcx, rbx
call fcn.180013a10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, 1
mov dword [0x180076d40], r11d
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
mov dword [0x180076d40], esi
mov edi, r11d
mov r12d, r11d
jmp 0x180017a15
cmp r13d, 0x84b
jne 0x18001790d
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
test r14, r14
mov edi, r11d
mov r12d, r11d
setne sil
mov dword [0x180048624], esi
jmp 0x180017a1c
cmp r13d, 0x854
jne 0x180017938
mov rbx, qword [rbp + 0x880]
cmp r15, 0x1234
jne 0x180017a0d
mov edi, dword [0x18007b894]
mov r12d, r11d
jmp 0x180017a1c
cmp r13d, 0x84c
jne 0x180017a12
cmp r15, 0x1234
jne 0x180017a12
mov ecx, r11d
mov dword [0x180048624], esi
call fcn.18001bca0
mov eax, 1
mov dword [0x180048624], eax
mov edi, eax
mov r12d, eax
jmp 0x180017a15
mov eax, dword [0x18007add8]
add eax, 0xfffffcb8
je 0x180017a15
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x1800179b2
nop
cmp dword [rax], 0x592629e2
je 0x1800179ba
inc esi
add rax, 4
cmp esi, ecx
jb 0x1800179a0
cmp dword [0x18007b060], edi
je 0x1800179dd
cmp dword [0x18007b944], edi
jne 0x1800179dd
mov rcx, qword [rbp + 0x880]
mov r9, r14
mov r8, r15
mov edx, r13d
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x180014a8b
movsx eax, r14w
mov dword [rsp + 0x58], eax
mov eax, r14d
shr eax, 0x10
cmp dword [0x18007ad6c], edi
cwde
mov dword [rsp + 0x5c], eax
jne 0x180017a15
movzx ecx, ax
movzx eax, word [rsp + 0x58]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b8a8], ecx
jmp 0x180017a15
mov r12d, esi
jmp 0x180017a1c
mov r12d, esi
mov rbx, qword [rbp + 0x880]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x180017a37
mov rcx, rax
call fcn.180013a10
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r12d, 1
jne 0x180017a45
movsxd rax, edi
jmp 0x180014a8b
mov rax, qword [0x18007b920]
test rax, rax
je 0x180014a89
mov r9, r14
mov r8, r15
mov edx, r13d
mov rcx, rbx
call rax
jmp 0x180014a8b