Function at 0x1400c81d0
Capabilities:
Create thread
Enumerate gui resources
Get graphical window text
Get memory capacity
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x29c0]
mov eax, 0x2ac0
call fcn.1400e1740
sub rsp, rax
movaps xmmword [rsp + 0x2ab0], xmm6
movaps xmmword [rsp + 0x2aa0], xmm7
movaps xmmword [rsp + 0x2a90], xmm8
movaps xmmword [rsp + 0x2a80], xmm9
movaps xmmword [rsp + 0x2a70], xmm10
movaps xmmword [rsp + 0x2a60], xmm11
movaps xmmword [rsp + 0x2a50], xmm12
movaps xmmword [rsp + 0x2a40], xmm13
movaps xmmword [rsp + 0x2a30], xmm14
movaps xmmword [rsp + 0x2a20], xmm15
mov rax, qword [0x1401737a8]
xor rax, rsp
mov qword [rbp + 0x2910], rax
xor eax, eax
mov byte [rsp + 0x73], dl
xor edi, edi
mov qword [rbp - 0x48], rcx
mov r12, rcx
mov qword [rbp + 0x88], rax
xorps xmm10, xmm10
mov dword [rsp + 0x78], eax
xorps xmm9, xmm9
movsd qword [rbp - 0x50], xmm10
xor edx, edx
movsd qword [rbp - 8], xmm9
lea rcx, [rbp + 0x1510]
mov qword [rbp - 0x70], rax
mov r8d, 0x200
mov qword [rbp - 0x10], rdi
mov r15d, eax
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
xor bl, bl
mov qword [rbp - 0x58], rdi
xorps xmm12, xmm12
xorps xmm15, xmm15
xorps xmm13, xmm13
call fcn.1400e36c0
xor al, al
mov qword [rbp - 0x78], rdi
lea rcx, [0x140189740]
mov byte [rsp + 0x74], al
mov byte [rbp - 0x30], bl
mov qword [rbp + 0x80], rdi
mov byte [rsp + 0x70], bl
mov dword [rbp + 0x78], edi
mov dword [rbp + 0x7c], edi
mov qword [rbp + 0x108], rdi
mov byte [rsp + 0x71], bl
call fcn.140095260
mov eax, dword [0x1401a0920]
xorps xmm0, xmm0
mov dword [0x1401a092c], eax
xorps xmm1, xmm1
mov rax, qword [0x1401a0938]
mov qword [0x1401a0950], rax
mov eax, dword [0x1401a0924]
mov dword [0x1401a0930], eax
mov rax, qword [0x1401a0940]
mov qword [0x1401a0958], rax
mov eax, dword [0x1401a0928]
mov dword [0x1401a0934], eax
mov rax, qword [0x1401a0948]
mov qword [0x1401a0960], rax
mov eax, dword [0x1401a0990]
mov dword [0x1401a099c], eax
mov rax, qword [0x1401a09a8]
mov qword [0x1401a09c0], rax
mov eax, dword [0x1401a0994]
mov dword [0x1401a09a0], eax
mov rax, qword [0x1401a09b0]
mov qword [0x1401a09c8], rax
mov eax, dword [0x1401a0998]
mov dword [0x1401a09a4], eax
mov rax, qword [0x1401a09b8]
mov qword [0x1401a09d0], rax
mov eax, dword [0x1401a0a00]
mov dword [0x1401a0a0c], eax
mov rax, qword [0x1401a0a18]
mov qword [0x1401a0a30], rax
mov qword [0x1401a0920], rdi
mov dword [0x1401a0928], edi
mov qword [0x1401a0938], rdi
movdqu xmmword [0x1401a0940], xmm0
mov qword [0x1401a0968], rdi
movdqu xmmword [0x1401a0970], xmm1
mov qword [0x1401a0980], rdi
mov qword [0x1401a0990], rdi
mov dword [0x1401a0998], edi
mov qword [0x1401a09a8], rdi
movdqu xmmword [0x1401a09b0], xmm0
mov qword [0x1401a09d8], rdi
movdqu xmmword [0x1401a09e0], xmm1
mov qword [0x1401a09f0], rdi
mov eax, dword [0x1401a0a04]
mov ecx, 1
mov edx, dword [0x14019008c]
mov r9, qword [0x1401941d0]
mov r8, qword [0x1401941c8]
mov dword [0x1401a0a10], eax
mov rax, qword [0x1401a0a20]
mov qword [0x1401a0a38], rax
mov eax, dword [0x1401a0a08]
mov dword [0x1401a0a14], eax
mov rax, qword [0x1401a0a28]
mov qword [0x1401a0a40], rax
movzx eax, byte [0x14018a00a]
cmp dword [0x1401a0d08], eax
mov dword [0x1401a0d08], eax
mov rax, qword [0x1401941b8]
movzx r14d, bl
cmovne r14d, ecx
mov qword [0x1401a0a00], rdi
mov rcx, qword [0x1401941a8]
mov qword [0x1401941a8], rax
mov eax, dword [0x1401941c0]
mov dword [0x14019008c], eax
mov rax, qword [0x14018fa08]
mov qword [0x1401941b0], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x30], rax
lea rax, [0x1401941e0]
mov qword [rsp + 0x28], rax
mov rax, qword [0x1401941d8]
mov qword [0x1401941b8], rcx
lea rcx, [0x1401941b8]
mov dword [0x1401941c0], edx
lea rdx, [0x1401941c0]
mov qword [rsp + 0x20], rax
mov dword [0x1401a0a08], edi
mov qword [0x1401a0a18], rdi
movdqu xmmword [0x1401a0a20], xmm0
mov qword [0x1401a0a48], rdi
movdqu xmmword [0x1401a0a50], xmm1
mov qword [0x1401a0a60], rdi
mov word [rbp + 0x1910], di
movups xmmword [rbp + 0x990], xmm0
movups xmmword [rbp + 0x9a0], xmm0
movups xmmword [rbp + 0x9b0], xmm0
movups xmmword [rbp + 0x9c0], xmm0
movups xmmword [rbp + 0x9d0], xmm0
call fcn.1400aa600
movsd xmm14, qword [0x140130d88]
mov r13, rax
sub r13, qword [0x1401941b0]
mov qword [0x14018fa08], rax
mov eax, dword [0x14018ed70]
cmp eax, 1
jbe 0x1400c869f
mov esi, edi
test eax, eax
jle 0x1400c869f
xorps xmm7, xmm7
mov ebx, edi
cvtsi2sd xmm7, r13
nop word [rax + rax]
mov rax, qword [0x1401941c8]
mov r9, qword [rdi + rax + 8]
mov r8, qword [rdi + rax + 0x10]
sub r8, qword [rdi + rax]
add r8, r9
sub r9, qword [rdi + rax]
test r13, r13
jne 0x1400c85e4
mov rax, qword [0x14018f9c8]
movaps xmm6, xmm12
movaps xmm3, xmm12
mov rcx, qword [rbx + rax]
mov qword [rcx + 0x8c8], r8
mov rdx, qword [0x14018f9c8]
jmp 0x1400c8659
mov rdx, qword [0x14018f9c8]
xorps xmm0, xmm0
mov rcx, r8
movaps xmm1, xmm12
movaps xmm6, xmm14
movaps xmm3, xmm14
mov rax, qword [rbx + rdx]
sub rcx, qword [rax + 0x8c8]
imul rax, rcx, 0x64
mov rcx, r9
cvtsi2sd xmm0, rax
mov rax, qword [rbx + rdx]
mov qword [rax + 0x8c8], r8
mov rdx, qword [0x14018f9c8]
divsd xmm0, xmm7
mov rax, qword [rbx + rdx]
sub rcx, qword [rax + 0x8d0]
imul rax, rcx, 0x64
maxsd xmm1, xmm0
xorps xmm0, xmm0
minsd xmm6, xmm1
movaps xmm1, xmm12
cvtsi2sd xmm0, rax
divsd xmm0, xmm7
maxsd xmm1, xmm0
minsd xmm3, xmm1
mov rax, qword [rbx + rdx]
movaps xmm2, xmm6
mov qword [rsp + 0x20], r15
mov qword [rax + 0x8d0], r9
mov rcx, qword [0x14018f9c8]
mov rdx, qword [0x14018fa08]
mov rcx, qword [rbx + rcx]
call fcn.140065670
mov eax, dword [0x14018ed70]
inc esi
add rdi, 0x30
add rbx, 8
cmp esi, eax
jl 0x1400c85a0
xor edi, edi
jmp 0x1400c86a4
movsd xmm6, qword [rbp - 0x50]
imul r13, rax
xor edx, edx
mov byte [rsp + 0x72], 0
mov r8d, 0x208
mov qword [rbp - 0x28], r13
lea rcx, [rbp + 0xac0]
call fcn.1400e36c0
mov dword [rbp + 0x70], 0xffffffff
mov qword [rbp - 0x18], rdi
call fcn.140085c90
test al, al
je 0x1400c8725
mov edx, 0x104
mov byte [rsp + 0x72], 1
lea rcx, [rbp + 0xac0]
call fcn.140085c40
lea rdx, [rbp + 0xac0]
lea rcx, [0x1401a0b00]
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x1400c87c6
lea r8, [rbp + 0xac0]
mov edx, 0x104
lea rcx, [0x1401a0b00]
call fcn.1400e86e4
jmp 0x1400c873a
cmp word [0x1401a0b00], 0
je 0x1400c87c6
mov word [0x1401a0b00], di
mov r9d, 2
mov edx, 0x100c
mov rcx, r12
lea r8, [r9 - 3]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
cmp eax, 0xffffffff
je 0x1400c87b2
lea r9, [rbp + 0x10]
mov dword [rbp + 0x10], 4
xor r8d, r8d
mov dword [rbp + 0x14], ebx
mov edx, 0x104b
mov dword [rbp + 0x18], edi
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x1400c878a
mov rax, qword [rbp + 0x38]
mov eax, dword [rax + 0x24]
mov dword [rbp + 0x70], eax
movsxd r8, ebx
lea r9, [rbp + 0x160]
mov edx, 0x102b
mov dword [rbp + 0x170], 3
mov rcx, r12
mov dword [rbp + 0x16c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1009
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, qword [0x140189c38]
mov ecx, 0xffffffff
mov qword [rbp], rdi
test rdi, rdi
je 0x1400c8fa3
jmp 0x1400c87e6
mov ecx, 0xffffffff
lea rax, [rdi + 0x24]
movaps xmm11, xmm13
mov qword [rbp - 0x20], rax
cmp dword [rdi + 0x130], ecx
jne 0x1400c8809
cmp dword [rax], 0
je 0x1400c8809
movsd xmm0, qword [rdi + 0x610]
jmp 0x1400c8811
movaps xmm0, xmm12
mov qword [rbp - 0x20], rax
movsd qword [rdi + 0x610], xmm0
mov ecx, 1
mov ebx, dword [rax]
cmp ebx, 0xfffffff6
mov eax, dword [rbp - 0x30]
mov rsi, qword [rdi + 0x6b0]
movzx eax, al
cmove eax, ecx
mov qword [rbp + 0x98], rsi
cmp byte [rsp + 0x72], 0
mov dword [rbp - 0x30], eax
je 0x1400c8868
mov rcx, qword [rdi + 0x118]
lea rdx, [rbp + 0xac0]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
jne 0x1400c8868
mov eax, dword [rdi + 0xf8]
or eax, 8
jmp 0x1400c8871
mov eax, dword [rdi + 0xf8]
and eax, 0xfffffff7
mov dword [rdi + 0xf8], eax
cmp ebx, 0xfffffff6
je 0x1400c8889
test al, 2
jne 0x1400c8889
cmp dword [rdi + 0xfc], 0xffffffff
jne 0x1400c888d
test al, 8
je 0x1400c88d4
mov rcx, qword [0x14018ec80]
mov rdx, rdi
call fcn.14007c6a0
test al, al
je 0x1400c8f6b
test byte [rdi + 0xf8], 2
jne 0x1400c88cc
lea r9, [rsp + 0x71]
mov qword [rbp + 0x38], rdi
mov r8, rdi
mov dword [rbp + 0x14], 0xffffffff
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.1400c1bd0
mov r14b, 1
jmp 0x1400c8f6b
cmp ebx, 0xfffffff6
jne 0x1400c8f3d
mov rcx, qword [0x14018ec80]
lea r9, [rbp + 0xd0]
mov eax, 1
mov qword [rbp + 0xe0], rdi
mov edx, 0x1053
mov dword [rbp + 0xd0], eax
lea r8, [rax - 2]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x14], eax
cmp eax, 0xffffffff
jne 0x1400c8933
test byte [rdi + 0xf8], 2
je 0x1400c8933
mov rcx, qword [0x14018ec80]
lea r8, [rbp + 0xac0]
mov rdx, rdi
call fcn.14007be40
mov edx, dword [0x14018ed70]
xor eax, eax
mov r9, qword [0x1401941c8]
mov r12d, eax
mov qword [rbp + 0x38], rdi
mov ebx, eax
mov dword [rbp - 0x60], edx
mov esi, eax
mov r15d, eax
mov r13d, eax
mov ecx, eax
test edx, edx
jle 0x1400c8b5a
cmp edx, 4
jb 0x1400c8b5a
mov eax, edx
and eax, 0x80000003
jge 0x1400c8979
dec eax
or eax, 0xfffffffc
inc eax
mov r10, qword [0x1401941d0]
lea r11, [r9 + 0x58]
mov rsi, qword [0x1401941d8]
mov r15d, edx
sub r15d, eax
xorps xmm3, xmm3
add r10, 0x1c
xorps xmm9, xmm9
xorps xmm6, xmm6
xorps xmm7, xmm7
xorps xmm10, xmm10
xorps xmm5, xmm5
xorps xmm4, xmm4
xorps xmm8, xmm8
mov ebx, 2
mov rdi, rcx
nop dword [rax + rax]
movd xmm0, dword [r11]
lea eax, [rbx - 1]
movd xmm2, dword [r11 - 0x30]
lea r11, [r11 + 0xc0]
movd xmm1, dword [r10 - 0x18]
lea r10, [r10 + 0x60]
punpckldq xmm2, xmm0
add rdi, 4
movd xmm0, dword [r10 - 0x60]
punpckldq xmm1, xmm0
xorps xmm0, xmm0
paddd xmm2, xmm1
movsxd rdx, eax
punpckldq xmm2, xmm0
paddq xmm8, xmm2
movsxd r8, r13d
movd xmm2, dword [r11 - 0x90]
add r13d, 4
lea rax, [rdx + rdx*2]
add rax, rax
lea rcx, [r8 + r8*2]
add rcx, rcx
movq xmm0, qword [r9 + rcx*8 + 0x18]
movhpd xmm0, qword [r9 + rax*8 + 0x18]
movq xmm1, qword [r9 + rcx*8 + 0x20]
movhpd xmm1, qword [r9 + rax*8 + 0x20]
lea eax, [rbx + 1]
paddq xmm1, xmm0
movq xmm0, qword [rsi + r8*8]
movhpd xmm0, qword [rsi + rdx*8]
paddq xmm5, xmm1
paddq xmm3, xmm0
movsxd r8, ebx
movd xmm0, dword [r11 - 0x60]
paddq xmm4, xmm1
movd xmm1, dword [r10 - 0x48]
add ebx, 4
punpckldq xmm2, xmm0
movd xmm0, dword [r10 - 0x30]
lea rcx, [r8 + r8*2]
punpckldq xmm1, xmm0
add rcx, rcx
paddd xmm2, xmm1
movsxd rdx, eax
xorps xmm0, xmm0
punpckldq xmm2, xmm0
movq xmm0, qword [r9 + rcx*8 + 0x18]
paddq xmm2, xmm10
movq xmm1, qword [r9 + rcx*8 + 0x20]
lea rax, [rdx + rdx*2]
add rax, rax
movdqa xmm10, xmm2
movhpd xmm0, qword [r9 + rax*8 + 0x18]
movhpd xmm1, qword [r9 + rax*8 + 0x20]
paddq xmm1, xmm0
movq xmm0, qword [rsi + r8*8]
movhpd xmm0, qword [rsi + rdx*8]
paddq xmm6, xmm1
paddq xmm9, xmm0
paddq xmm7, xmm1
cmp r13d, r15d
jl 0x1400c89c0
movsd xmm10, qword [rbp - 0x50]
paddq xmm8, xmm2
mov edx, dword [rbp - 0x60]
movdqa xmm0, xmm8
psrldq xmm0, 8
paddq xmm4, xmm7
paddq xmm8, xmm0
mov qword [rbp + 0x90], rdi
mov rdi, qword [rbp]
movdqa xmm0, xmm4
mov rcx, qword [rbp + 0x90]
paddq xmm5, xmm6
psrldq xmm0, 8
paddq xmm3, xmm9
paddq xmm4, xmm0
movq rsi, xmm8
movdqa xmm0, xmm5
movq rbx, xmm4
psrldq xmm0, 8
paddq xmm5, xmm0
movdqa xmm0, xmm3
psrldq xmm0, 8
movq r12, xmm5
paddq xmm3, xmm0
movq r15, xmm3
cmp r13d, edx
jge 0x1400c8bcc
mov rax, qword [0x1401941d8]
lea r8, [rcx + rcx*2]
add r9, 0x20
shl r8, 4
add r8, r9
mov r9, qword [0x1401941d0]
add r9, 4
lea r10, [rax + rcx*8]
sub edx, r13d
lea rax, [rcx + rcx*2]
mov r11d, edx
lea r9, [r9 + rax*8]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r8 + 8]
add eax, dword [r9]
lea r9, [r9 + 0x18]
mov rdx, qword [r8 - 8]
add rsi, rax
add rdx, qword [r8]
lea r8, [r8 + 0x30]
add r15, qword [r10]
lea r10, [r10 + 8]
add r12, rdx
add rbx, rdx
sub r11, 1
jne 0x1400c8ba0
mov rax, qword [rdi + 0x628]
mov r13d, 0
mov rdx, qword [0x14018ec80]
mov ecx, r13d
mov r8, rsi
sub r8, qword [rdi + 0x630]
test r8, r8
cmovle r8, r13
cmp r8, rax
mov qword [rdi + 0x628], r8
mov r9d, dword [rbp + 0x14]
mov r8d, 0x444
setne cl
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
or r14b, al
mov rax, qword [rdi + 0x630]
mov ecx, r13d
cmp rsi, rax
mov qword [rdi + 0x630], rsi
mov r9d, dword [rbp + 0x14]
mov r8d, 0x443
setne cl
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
or r14b, al
mov rax, qword [rdi + 0x638]
xor esi, esi
mov ecx, esi
mov r8, r15
sub r8, qword [rdi + 0x640]
cmp r8, rax
mov qword [rdi + 0x638], r8
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4b0
setne cl
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
or r14b, al
mov rax, qword [rdi + 0x640]
mov ecx, esi
cmp r15, rax
mov qword [rdi + 0x640], r15
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4ab
setne cl
call fcn.140083cd0
mov r13, qword [rbp - 0x28]
or r14b, al
add qword [rbp - 0x40], rbx
test r13, r13
jne 0x1400c8cc4
movaps xmm6, xmm12
movaps xmm3, xmm12
jmp 0x1400c8d23
xorps xmm0, xmm0
mov rax, r12
sub rax, qword [rdi + 0x618]
xorps xmm2, xmm2
imul rax, rax, 0x64
cvtsi2sd xmm2, r13
mov rcx, rbx
movaps xmm1, xmm12
movaps xmm6, xmm14
movaps xmm3, xmm14
cvtsi2sd xmm0, rax
mov rax, qword [rdi + 0x620]
sub rcx, rax
imul rax, rcx, 0x64
divsd xmm0, xmm2
maxsd xmm1, xmm0
movaps xmm0, xmm12
minsd xmm6, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm2
maxsd xmm0, xmm1
minsd xmm3, xmm0
mov rcx, qword [rdi + 0x650]
movaps xmm2, xmm6
mov qword [rdi + 0x620], rbx
mov rdx, qword [0x14018fa08]
mov qword [rsp + 0x20], rsi
call fcn.140065670
mov rdx, qword [0x14018fa08]
movaps xmm3, xmm12
mov rcx, qword [rdi + 0x440]
movaps xmm2, xmm12
mov qword [rsp + 0x20], rsi
call fcn.140065670
mov rcx, qword [rdi + 0x510]
test rcx, rcx
je 0x1400c8d8a
mov rdx, qword [0x14018fa08]
movaps xmm3, xmm12
movaps xmm2, xmm12
mov qword [rsp + 0x20], rsi
call fcn.140065670
test byte [rdi + 0xf8], 0x40
je 0x1400c8d9e
addsd xmm10, xmm6
movsd qword [rbp - 0x50], xmm10
mov rax, qword [rbp - 0x20]
cmp dword [rax], 0
je 0x1400c8dac
addsd xmm15, xmm6
comisd xmm6, xmm13
jbe 0x1400c8db7
movaps xmm13, xmm6
mov rdx, qword [0x14018ec80]
mov ecx, esi
comisd xmm6, xmm11
mov rax, rdi
mov r8d, 0x43f
cmovbe rax, qword [rbp - 0x70]
mov qword [rbp - 0x70], rax
mov rax, qword [rdi + 0x618]
cmp r12, rax
mov qword [rdi + 0x618], r12
mov r9d, dword [rbp + 0x14]
setne cl
call fcn.140083cd0
or r14b, al
mov r15d, 1
mov rax, qword [rbp + 0x38]
mov r8d, 0x4a7
mov ecx, r15d
mov dword [rax + 0xc], esi
mov r9d, dword [rbp + 0x14]
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
test al, al
mov rdx, qword [0x14018ec80]
mov r8d, 0x4a9
movzx ebx, r14b
mov ecx, r15d
cmovne ebx, r15d
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
test al, al
mov rdx, qword [0x14018ec80]
mov r8d, 0x532
mov ecx, r15d
cmovne ebx, r15d
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
test al, al
movzx r14d, bl
cmovne r14d, r15d
ucomisd xmm6, qword [rdi + 0x600]
jp 0x1400c8e7e
mov ecx, esi
je 0x1400c8e81
mov ecx, r15d
movsd qword [rdi + 0x600], xmm6
mov r8d, 0x41f
mov r9d, dword [rbp + 0x14]
call fcn.140083cd0
movaps xmm0, xmm6
mov r8d, 0x665
addsd xmm0, qword [rdi + 0x610]
mov ecx, r15d
movsd qword [rdi + 0x610], xmm0
mov r9d, dword [rbp + 0x14]
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
or r14b, al
mov rax, qword [rdi + 0x138]
test rax, rax
je 0x1400c8f20
lea rbx, [rdi + 0x138]
nop word [rax + rax]
movsd qword [rax + 0x610], xmm6
mov r8d, 0x665
mov rax, qword [rdi + 0x138]
mov ecx, r15d
mov rdx, qword [0x14018ec80]
mov r9d, dword [rax + 0xfc]
call fcn.140083cd0
mov rbx, qword [rbx]
or r14b, al
add rbx, 0x138
mov rax, qword [rbx]
test rax, rax
jne 0x1400c8ee0
mov r15d, dword [rsp + 0x78]
mov rsi, qword [rbp + 0x98]
dec r15d
dec dword [rbp + 0x14]
mov r12, qword [rbp - 0x48]
mov byte [rsp + 0x71], 1
jmp 0x1400c8f72
lea r9, [rsp + 0x71]
mov qword [rbp + 0x38], rdi
mov r8, rdi
mov dword [rbp + 0x14], 0xffffffff
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.1400c1bd0
test al, al
movzx r14d, r14b
mov eax, 1
cmovne r14d, eax
cmp byte [rsp + 0x71], 0
je 0x1400c8f8f
mov rcx, qword [rbp + 0x88]
inc r15d
mov dword [rsp + 0x78], r15d
mov qword [rdi + 0x6a8], rcx
mov qword [rbp + 0x88], rdi
mov qword [rbp], rsi
mov rdi, rsi
test rsi, rsi
jne 0x1400c87e1
movaps xmm9, xmm12
mov r15, qword [0x1401941b8]
movss xmm11, dword [0x1401310d0]
movss xmm8, dword [0x140132ffc]
mov rdi, qword [rbp - 0x70]
inc dword [rbp + 0x9c0]
mov rbx, rdi
mov eax, dword [r15 + 4]
movaps xmm7, xmm13
add dword [rbp + 0x9c8], eax
mov eax, dword [r15 + 0x60]
add dword [rbp + 0x9d0], eax
cmp qword [r15 + 0x50], 0
je 0x1400c8ff4
mov rax, qword [rbp - 0x40]
add rax, qword [r15 + 0x30]
mov qword [rbp - 0x40], rax
mov rsi, qword [0x140189c38]
xor edi, edi
mov eax, edi
mov dword [rbp - 0x7c], eax
test rsi, rsi
je 0x1400c9090
nop dword [rax + rax]
mov rax, qword [r15 + 0x20]
cmp qword [rsi + 0x368], rax
jne 0x1400c907b
mov eax, dword [r15 + 0x50]
cmp dword [rsi + 0x24], eax
jne 0x1400c907b
mov eax, 1
mov qword [rbp + 0xe0], rsi
lea r9, [rbp + 0xd0]
mov dword [rbp + 0xd0], eax
mov edx, 0x1053
mov rcx, r12
lea r8, [rax - 2]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x14], eax
mov dword [rbp - 0x7c], 1
cmp byte [rsp + 0x72], dil
je 0x1400c90c1
mov rcx, qword [rsi + 0x118]
lea rdx, [rbp + 0xac0]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
jne 0x1400c90be
mov rax, qword [rsi + 0x6b0]
mov rsi, rax
test rax, rax
jne 0x1400c9010
mov eax, dword [rbp - 0x7c]
mov rsi, rdi
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x50], rdi
mov r12, rdi
test eax, eax
je 0x1400ca115
mov eax, dword [r15]
test eax, eax
je 0x1400cb20a
mov r13, qword [rbp - 0x28]
add r15, rax
mov r12, qword [rbp - 0x48]
jmp 0x1400c8fbc
mov eax, dword [rbp + 0x14]
mov ecx, dword [rsi + 0xf8]
test cl, 2
je 0x1400c912a
cmp eax, 0xffffffff
jne 0x1400c912a
test cl, 8
jne 0x1400c912a
mov rcx, qword [0x14018ec80]
lea r8, [rbp + 0xac0]
mov rdx, rsi
call fcn.14007be40
mov eax, dword [rbp + 0x70]
cmp dword [rsi + 0x24], eax
jne 0x1400c913c
movsxd r8, dword [rsi + 0xfc]
lea r9, [rbp + 0x240]
mov edx, 0x102b
mov dword [rbp + 0x250], 3
mov rcx, r12
mov dword [rbp + 0x24c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rbp - 0x18], rsi
jmp 0x1400c913c
mov dword [rsi + 0xfc], eax
test cl, 8
je 0x1400c913c
mov qword [rsi + 0x6c0], rdi
mov eax, dword [r15 + 0x50]
xor edx, edx
mov r8d, eax
mov qword [rbp + 0x110], rax
mov ecx, 0x2000000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp - 0x68], rax
mov r12, rax
mov qword [rbp + 0xb0], rax
test rax, rax
jne 0x1400c91c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1400c91b8
mov rcx, qword [0x140173248]
lea rax, [rbp + 0x104]
mov qword [rsp + 0x38], rdi
lea r9d, [r12 + 8]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x110]
lea rax, [rbp + 0xb0]
mov dword [rsp + 0x28], 8
mov edx, 0x8335003c
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r12, qword [rbp + 0xb0]
mov qword [rbp - 0x68], r12
mov eax, dword [rbp + 0x14]
mov r8, r13
mov r9, qword [0x14018fa08]
mov rdx, r12
mov dword [rsp + 0x28], eax
mov rcx, r15
mov qword [rsp + 0x20], rsi
call fcn.1400ba6e0
mov rcx, qword [r15 + 0x30]
or r14b, al
mov rax, qword [r15 + 0x28]
add rax, rcx
cmp qword [0x1401a0898], rdi
mov qword [rbp + 0xa8], rax
jne 0x1400c9221
cmp dword [rsi + 0x24], edi
jne 0x1400c9221
mov qword [rbp + 0x80], rsi
xorps xmm2, xmm2
cvtsi2sd xmm2, r13
test r13, r13
jne 0x1400c925f
movaps xmm3, xmm12
jmp 0x1400c9289
test r13, r13
jne 0x1400c9230
movaps xmm6, xmm12
movaps xmm3, xmm12
jmp 0x1400c9289
sub rax, qword [rsi + 0x618]
xorps xmm0, xmm0
imul rax, rax, 0x64
xorps xmm2, xmm2
movaps xmm1, xmm12
cvtsi2sd xmm2, r13
movaps xmm6, xmm14
cvtsi2sd xmm0, rax
divsd xmm0, xmm2
maxsd xmm1, xmm0
minsd xmm6, xmm1
xorps xmm0, xmm0
mov rax, rcx
sub rax, qword [rsi + 0x620]
movaps xmm1, xmm12
imul rax, rax, 0x64
movaps xmm3, xmm14
cvtsi2sd xmm0, rax
divsd xmm0, xmm2
maxsd xmm1, xmm0
minsd xmm3, xmm1
movsd xmm0, qword [rsi + 0x660]
comisd xmm0, xmm9
mov qword [rsi + 0x620], rcx
jbe 0x1400c92b1
cvtpd2ps xmm0, xmm0
mov qword [rbp - 0x10], rsi
cvtps2pd xmm9, xmm0
movsd qword [rbp - 8], xmm9
test byte [rsi + 0xf8], 0x40
je 0x1400c92bf
addsd xmm10, xmm6
mov rdx, qword [0x14018fa08]
mov rcx, qword [rsi + 0x650]
mov qword [rsp + 0x20], rdi
cmp dword [rsi + 0x24], edi
je 0x1400c930b
movaps xmm2, xmm6
cmp qword [r15 + 0x28], rdi
jne 0x1400c92e3
movaps xmm3, xmm6
call fcn.140065670
comisd xmm6, xmm13
addsd xmm15, xmm6
jbe 0x1400c92f8
movaps xmm13, xmm6
comisd xmm6, xmm7
mov rdi, rsi
cmovbe rdi, rbx
mov qword [rbp - 0x70], rdi
xor edi, edi
jmp 0x1400c9317
movaps xmm3, xmm6
movaps xmm2, xmm12
call fcn.140065670
ucomisd xmm6, qword [rsi + 0x600]
jp 0x1400c932d
jne 0x1400c932d
mov ecx, edi
mov r13d, 1
jmp 0x1400c9336
mov r13d, 1
mov ecx, r13d
movsd qword [rsi + 0x600], xmm6
mov r8d, 0x41f
mov r9d, dword [rbp + 0x14]
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
movsd xmm0, qword [rsi + 0x610]
or r14b, al
movaps xmm1, xmm0
addsd xmm1, xmm6
ucomisd xmm1, xmm0
jp 0x1400c936e
je 0x1400c9371
mov edi, r13d
movsd qword [rsi + 0x610], xmm1
mov r8d, 0x665
mov r9d, dword [rbp + 0x14]
mov ecx, r13d
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
or r14b, al
lea rbx, [rsi + 0x138]
mov rax, qword [rbx]
test rax, rax
je 0x1400c93ff
nop dword [rax]
nop dword [rax + rax]
movsd xmm0, qword [rax + 0x610]
mov r8d, 0x665
cvtpd2ps xmm0, xmm0
mov ecx, r13d
cvtps2pd xmm1, xmm0
addsd xmm1, xmm6
movsd qword [rax + 0x610], xmm1
mov rax, qword [rbx]
mov rdx, qword [0x14018ec80]
mov r9d, dword [rax + 0xfc]
call fcn.140083cd0
mov rbx, qword [rbx]
or r14b, al
add rbx, 0x138
mov rax, qword [rbx]
test rax, rax
jne 0x1400c93b0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4a7
mov rdx, qword [0x14018ec80]
mov ecx, edi
call fcn.140083cd0
dec dword [rsp + 0x78]
mov rdx, rsi
mov rcx, r12
or r14b, al
call fcn.1400a9760
test al, al
je 0x1400c944f
movsxd r8, dword [rbp + 0x14]
mov edx, 0x7eb
mov rcx, qword [0x14018ec78]
mov r9, 0xffffffffffffffff
call qword [sym.imp.USER32.dll_PostMessageW]
call fcn.140085720
mov ecx, dword [rsi + 0xf8]
xor r11d, r11d
mov r9d, dword [r15 + 4]
mov r10d, ecx
shr r10d, 7
mov edx, r11d
test r9d, r9d
je 0x1400c948c
lea rax, [r15 + 0x148]
mov r8d, r9d
cmp dword [rax - 4], 5
jne 0x1400c9482
cmp dword [rax], 5
jne 0x1400c9482
inc edx
add rax, 0x50
sub r8, 1
jne 0x1400c9475
mov eax, ecx
btr ecx, 7
bts eax, 7
cmp r9d, edx
cmove ecx, eax
mov dword [rsi + 0xf8], ecx
shr ecx, 7
xor ecx, r10d
test cl, 1
je 0x1400c94d2
movsxd r8, dword [rbp + 0x14]
mov edx, 0x7eb
mov rcx, qword [0x14018ec78]
mov r9, 0xffffffffffffffff
call qword [sym.imp.USER32.dll_PostMessageW]
call fcn.140085720
xor r11d, r11d
lea rdi, [rsi + 0x390]
mov r13, qword [rdi]
test r13, r13
je 0x1400c94ed
cmp word [r13], 0
jne 0x1400c96b4
cmp byte [rsi + 0x385], 2
jae 0x1400c96b4
lea r12, [rsi + 0x3a0]
xorps xmm0, xmm0
lea rbx, [rsi + 0x398]
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
test rdi, rdi
je 0x1400c952f
mov qword [rdi], r11
test rbx, rbx
je 0x1400c9537
mov qword [rbx], r11
test r12, r12
je 0x1400c9540
mov qword [r12], r11
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x1400c9676
lea rcx, [rbp + 0x74]
mov qword [rbp + 0x200], 0x40
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x200]
mov rcx, rax
mov r9d, 0x40
xor edx, edx
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
je 0x1400c95a5
mov rcx, qword [rbp - 0x68]
lea rax, [rbp + 0x74]
mov r9d, gethostbyaddr
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x208]
xor edx, edx
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
jne 0x1400c9676
mov rcx, qword [rbp - 0x68]
lea rax, [rbp + 0x74]
mov r9d, 8
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc8]
lea edx, [r9 + 0x12]
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
je 0x1400c9611
xor eax, eax
mov qword [rbp + 0xc8], rax
mov rdx, qword [rbp + 0x210]
test rdx, rdx
je 0x1400c95f5
mov rcx, qword [rbp - 0x68]
mov r9, rbx
mov r8, rdi
mov qword [rsp + 0x20], r12
call fcn.1400a79d0
test rbx, rbx
je 0x1400c963b
cmp qword [rbx], 0
jne 0x1400c9633
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbx], rax
jmp 0x1400c963b
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x1400c95d5
mov rcx, qword [rbp - 0x68]
mov r9, rbx
mov r8, rdi
mov qword [rsp + 0x20], r12
call fcn.1400a76c0
jmp 0x1400c95f5
mov rcx, rbx
call fcn.1400a8b90
test rdi, rdi
je 0x1400c9655
cmp qword [rdi], 0
jne 0x1400c9655
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rdi], rax
test r12, r12
je 0x1400c9676
cmp qword [r12], 0
jne 0x1400c9676
lea rcx, [0x140124a54]
call fcn.1400e81d8
xor ecx, ecx
mov qword [r12], rax
mov word [rax], cx
mov rcx, r13
call fcn.1400e825c
mov rax, qword [rdi]
inc byte [rsi + 0x385]
test rax, rax
je 0x1400c96b0
cmp word [rax], 0
je 0x1400c96b0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x408
mov rdx, qword [0x14018ec80]
mov ecx, 1
call fcn.140083cd0
or r14b, al
mov r12, qword [rbp - 0x68]
movzx eax, byte [rsi + 0x384]
movzx edi, byte [rsp + 0x73]
cmp al, 2
jb 0x1400c96cb
test dil, dil
je 0x1400c9703
jmp 0x1400c96d8
test dil, dil
jne 0x1400c96d8
inc al
mov byte [rsi + 0x384], al
mov edx, dword [rsi + 0x24]
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
call fcn.1400ba180
mov ecx, dword [rsi + 0xf8]
test al, al
je 0x1400c96f9
bts ecx, 0xb
jmp 0x1400c96fd
btr ecx, 0xb
mov dword [rsi + 0xf8], ecx
test r12, r12
je 0x1400c974b
mov ebx, dword [rsi + 0x374]
mov rdx, r12
mov rcx, rsi
mov dword [rbp + 0xf8], ebx
call fcn.1400a8770
mov dword [rsi + 0x374], eax
xor r13d, r13d
mov r9d, dword [rbp + 0x14]
cmp eax, ebx
mov rdx, qword [0x14018ec80]
mov ecx, r13d
sete cl
mov r8d, 0x4af
call fcn.140083cd0
or r14b, al
jmp 0x1400c974e
xor r13d, r13d
cmp qword [rsi + 0x5f0], 0
jne 0x1400c97df
movzx eax, byte [rsi + 0x5e8]
cmp al, 2
jb 0x1400c976e
test dil, dil
je 0x1400c97d5
jmp 0x1400c977b
test dil, dil
jne 0x1400c977b
inc al
mov byte [rsi + 0x5e8], al
mov ecx, dword [rsi + 0x24]
call fcn.140093c60
mov rcx, rsi
mov qword [rsi + 0x5f0], rax
call fcn.140065230
cmp qword [rsi + 0x5f0], 0
mov byte [rsi + 0x5f8], al
je 0x1400c97e5
cmp byte [rsp + 0x70], 0
jne 0x1400c97b3
call fcn.1400947e0
mov byte [rsp + 0x70], 1
movsxd r8, dword [rbp + 0x14]
mov edx, 0x7eb
mov rcx, qword [0x14018ec78]
mov r9, 0xffffffffffffffff
call qword [sym.imp.USER32.dll_PostMessageW]
call fcn.140085720
cmp qword [rsi + 0x5f0], 0
je 0x1400c97e5
inc dword [rbp + 0x9d8]
mov ebx, dword [rsi + 0x648]
mov ecx, r13d
mov eax, dword [r15 + 0x48]
mov r8d, 5
mov rdx, qword [0x14018ec80]
cmp eax, ebx
mov dword [rsi + 0x648], eax
mov r9d, dword [rbp + 0x14]
setne cl
call fcn.140083cd0
or r14b, al
cmp dword [rsi + 0x648], ebx
je case.0x1400c9be2.7
mov rax, qword [rbp + 0x38]
mov ebx, dword [rax + 0x648]
cmp ebx, 4
jne 0x1400c9bb0
cmp dword [rax + 0x4a0], 0
jne 0x1400c9bb0
mov rcx, qword [0x14018ec78]
call qword [sym.imp.USER32.dll_GetMenu]
mov r10, rax
mov r9d, 0x9cbc
mov r8d, 0x9cc1
mov edx, 0x9cbb
mov rcx, r10
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov r8, qword [rbp + 0xa8]
mov ecx, r13d
mov rax, qword [rsi + 0x618]
mov rdx, qword [0x14018ec80]
cmp r8, rax
mov qword [rsi + 0x618], r8
mov r8d, 0x43f
mov r9d, dword [rbp + 0x14]
setne cl
call fcn.140083cd0
or r14b, al
mov eax, dword [r15 + 0x80]
mov dword [r15 + 0x80], eax
mov rax, qword [0x1401a08a8]
test rax, rax
je 0x1400c9901
lea rdx, [rbp + 0xa0]
mov rcx, r12
call rax
mov ecx, dword [rsi + 0x37c]
mov r10d, r13d
mov eax, dword [rbp + 0xa0]
mov r8d, 0x683
mov rdx, qword [0x14018ec80]
cmp eax, ecx
mov dword [rsi + 0x37c], eax
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
or r14b, al
mov ecx, dword [r15 + 0x60]
mov r10d, r13d
mov eax, dword [rsi + 0x148]
mov r8d, SafeArrayUnaccessData
mov rdx, qword [0x14018ec80]
cmp ecx, eax
mov dword [rsi + 0x148], ecx
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov ecx, dword [r15 + 0x80]
or r14b, al
sub rcx, qword [rsi + 0x408]
mov r10d, r13d
mov rax, qword [rsi + 0x410]
mov r8d, 0x49b
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x410], rcx
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov ecx, dword [r15 + 0x80]
or r14b, al
mov rax, qword [rsi + 0x408]
mov r10d, r13d
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x408], rcx
mov r8d, 0x423
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov rcx, qword [r15 + 0x90]
or r14b, al
mov rax, qword [rsi + 0x430]
mov r10d, r13d
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x430], rcx
mov r8d, 0x427
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov rcx, qword [r15 + 0x88]
or r14b, al
mov rax, qword [rsi + 0x438]
mov r10d, r13d
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x438], rcx
mov r8d, 0x428
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov rcx, qword [r15 + 0xa0]
or r14b, al
mov rax, qword [rsi + 0x460]
mov r10d, r13d
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x460], rcx
mov r8d, 9
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov rcx, qword [r15 + 0xb0]
or r14b, al
mov rax, qword [rsi + 0x468]
mov r10d, r13d
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x468], rcx
mov r9d, dword [rbp + 0x14]
setne r10b
mov r8d, 0xa
mov ecx, r10d
call fcn.140083cd0
mov rcx, qword [r15 + 0xc0]
or r14b, al
mov rax, qword [rsi + 0x428]
mov r10d, r13d
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x428], rcx
mov r8d, 0x426
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov r8, qword [r15 + 0xb8]
or r14b, al
sub r8, qword [rsi + 0x418]
mov ecx, r13d
mov rax, qword [rsi + 0x420]
mov rdx, qword [0x14018ec80]
cmp r8, rax
mov qword [rsi + 0x420], r8
mov r8d, 0x4a8
mov r9d, dword [rbp + 0x14]
setne cl
call fcn.140083cd0
mov rcx, qword [r15 + 0xb8]
or r14b, al
cmp rcx, qword [rbp - 0x78]
mov rax, rcx
mov ebx, r13d
mov r8d, 0x424
cmovbe rax, qword [rbp - 0x78]
mov rdi, rax
mov qword [rbp - 0x78], rax
mov rax, qword [rsi + 0x418]
mov qword [rsi + 0x418], rcx
cmp rcx, rax
mov r9d, dword [rbp + 0x14]
mov rdx, qword [0x14018ec80]
setne bl
mov ecx, ebx
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4a9
mov rdx, qword [0x14018ec80]
mov ecx, ebx
or r14b, al
call fcn.140083cd0
mov r8, qword [rsi + 0x440]
or r14b, al
test r8, r8
je 0x1400c9c81
mov rdx, qword [rsi + 0x428]
xorps xmm0, xmm0
shr rdx, 0xa
test rdx, rdx
js 0x1400c9c2f
cvtsi2sd xmm0, rdx
jmp 0x1400c9c47
mov rcx, qword [0x14018ec78]
call qword [sym.imp.USER32.dll_GetMenu]
mov r10, rax
cmp ebx, 0x18
ja case.0x1400c9be2.7
lea rdx, [0x140000000]
movzx eax, byte [rdx + rbx + 0xcbd80]
mov ecx, dword [rdx + rax*4 + 0xcbd60]
add rcx, rdx
jmp rcx
mov r9d, 0x9cc1
mov r8d, r9d
jmp 0x1400c985a
mov r9d, 0x9cc0
jmp 0x1400c9854
mov r9d, 0x9cbf
jmp 0x1400c9854
mov r9d, 0x9cbe
jmp 0x1400c9854
mov r9d, 0x9cbd
jmp 0x1400c9854
mov edx, 0x9cbb
mov r9d, edx
lea r8d, [rdx + 6]
jmp 0x1400c985f
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2sd xmm0, rcx
addsd xmm0, xmm0
comisd xmm0, xmmword [r8 + 0x40]
jb 0x1400c9c81
xorps xmm0, xmm0
test rdx, rdx
js 0x1400c9c5e
cvtsi2ss xmm0, rdx
jmp 0x1400c9c73
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mulss xmm0, xmm11
cvtps2pd xmm0, xmm0
movsd qword [r8 + 0x40], xmm0
mov rcx, qword [rsi + 0x418]
xorps xmm0, xmm0
test rcx, rcx
js 0x1400c9c97
cvtsi2ss xmm0, rcx
jmp 0x1400c9cac
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rdx, qword [0x14018fa08]
movaps xmm3, xmm12
mov rcx, qword [rsi + 0x440]
mulss xmm0, xmm8
mov qword [rsp + 0x20], r13
cvtps2pd xmm2, xmm0
call fcn.140065670
mov rcx, qword [r15 + 0x78]
mov r10d, r13d
mov rax, qword [rsi + 0x400]
mov r8d, 0x45a
mov rdx, qword [0x14018ec80]
cmp rcx, rax
mov qword [rsi + 0x400], rcx
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
movsxd rcx, dword [0x14018a00c]
or r14b, al
mov rax, r13
test rcx, rcx
jle 0x1400c9ece
lea rdx, [0x140000000]
cmp dword [rdx + rax*4 + 0x18a0d0], 0x23
je 0x1400c9d5a
inc rax
cmp rax, rcx
jl 0x1400c9d22
mov rax, r13
nop word [rax + rax]
cmp dword [rdx + rax*4 + 0x18a0d0], 0x4ac
je 0x1400c9d5a
inc rax
cmp rax, rcx
jl 0x1400c9d40
jmp 0x1400c9ece
mov ebx, dword [r15 + 0x50]
lea r8, [0x14011eaa0]
mov edx, 0x100
lea rcx, [rbp + 0xcd0]
call fcn.1400e86e4
mov qword [0x14018f9a0], r13
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
je 0x1400c9db7
lea rax, [rbp + 0xcd0]
mov byte [0x14018f99c], 0
mov edx, ebx
mov qword [0x14018f990], rax
lea rcx, [0x1400c1960]
mov dword [0x14018f998], 0x100
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x1400c9dd8
mov rcx, qword [0x14018ec78]
mov r8d, 0x100
mov rdx, qword [0x14018f990]
mov qword [0x14018f9a0], rcx
call qword [sym.imp.USER32.dll_GetWindowTextW]
movsxd rcx, dword [0x14018a00c]
mov rax, r13
mov rdi, qword [0x14018f9a0]
movzx r11d, byte [rsi + 0x360]
test rcx, rcx
jle 0x1400c9e28
lea rdx, [0x140000000]
nop dword [rax]
cmp dword [rdx + rax*4 + 0x18a0d0], 0x4ac
je 0x1400c9e17
inc rax
cmp rax, rcx
jl 0x1400c9e00
jmp 0x1400c9e28
test rdi, rdi
je 0x1400c9e28
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsHungAppWindow]
mov r11d, eax
lea rcx, [rbp + 0xcd0]
lea r9, [rsi + 0x154]
sub r9, rcx
nop dword [rax]
movzx r8d, word [rcx]
movzx edx, word [rcx + r9]
sub r8d, edx
jne 0x1400c9e56
add rcx, 2
test edx, edx
jne 0x1400c9e40
test r8d, r8d
jne 0x1400c9e69
cmp r11b, byte [rsi + 0x360]
jne 0x1400c9e69
mov ebx, r13d
jmp 0x1400c9e6e
mov ebx, 1
lea r8, [rbp + 0xcd0]
mov byte [rsi + 0x360], r11b
mov edx, 0x100
lea rcx, [rsi + 0x154]
call fcn.1400e86e4
mov qword [rsi + 0x358], rdi
mov r8d, 0x23
mov r9d, dword [rbp + 0x14]
mov ecx, ebx
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4ac
mov rdx, qword [0x14018ec80]
mov ecx, ebx
or r14b, al
call fcn.140083cd0
mov rdi, qword [rbp - 0x78]
or r14b, al
mov ecx, dword [r15 + 4]
mov r10d, r13d
mov eax, dword [rsi + 0x14c]
mov r8d, 0x429
mov rdx, qword [0x14018ec80]
cmp ecx, eax
mov dword [rsi + 0x14c], ecx
mov r9d, dword [rbp + 0x14]
setne r10b
mov ecx, r10d
call fcn.140083cd0
mov rdx, qword [rsi + 0x510]
or r14b, al
test rdx, rdx
je 0x1400c9f57
mov r8, qword [rsi + 0x500]
xorps xmm0, xmm0
add r8, qword [rsi + 0x4e0]
add r8, qword [rsi + 0x4c0]
cvtsi2sd xmm0, r8
comisd xmm0, xmmword [rdx + 0x40]
jb 0x1400c9f57
xorps xmm0, xmm0
cvtsi2ss xmm0, r8
mulss xmm0, xmm11
cvtps2pd xmm0, xmm0
movsd qword [rdx + 0x40], xmm0
mov rcx, qword [rsi + 0x510]
mov rax, qword [rcx + 0x40]
mov qword [rcx + 0x60], rax
mov rdx, qword [0x14018fa08]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rsi + 0x4e0]
mov rcx, qword [rsi + 0x510]
mov qword [rsp + 0x20], r13
xorps xmm1, xmm1
cvtsi2ss xmm1, qword [rsi + 0x4c0]
cvtps2pd xmm3, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rsi + 0x500]
addss xmm1, xmm0
cvtps2pd xmm2, xmm1
call fcn.140065670
lea r8, [rsi + 0x4a8]
mov rdx, rsi
lea rcx, [0x1401a0920]
call fcn.140069070
lea r8, [rsi + 0x518]
mov rdx, rsi
lea rcx, [0x1401a0990]
call fcn.140069070
lea r8, [rsi + 0x580]
mov rdx, rsi
lea rcx, [0x1401a0a00]
call fcn.140069070
mov r9d, dword [rbp + 0x14]
mov ebx, 1
mov rdx, qword [0x14018ec80]
mov ecx, ebx
mov r8d, 0x532
call fcn.140083cd0
or r14b, al
cmp qword [rsi + 0x5f0], 0
je 0x1400ca01d
cmp byte [rsp + 0x70], 0
jne 0x1400ca01d
call fcn.1400947e0
mov byte [rsp + 0x70], bl
mov edx, dword [rbp + 0x14]
mov rcx, rsi
call fcn.140094830
or r14b, al
test byte [rsi + 0xf8], 0x40
je 0x1400ca07c
mov rax, qword [rbp - 0x38]
add rax, qword [r15 + 0xb8]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x58]
add rax, qword [r15 + 0x90]
inc dword [rbp + 0x9c4]
mov qword [rbp - 0x58], rax
mov eax, dword [r15 + 4]
add dword [rbp + 0x9cc], eax
mov eax, dword [r15 + 0x60]
add dword [rbp + 0x9d4], eax
cmp qword [rsi + 0x5f0], 0
je 0x1400ca07c
inc dword [rbp + 0x9dc]
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4a9
mov rdx, qword [0x14018ec80]
mov ecx, ebx
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x532
mov rdx, qword [0x14018ec80]
mov ecx, ebx
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4a7
mov rdx, qword [0x14018ec80]
mov ecx, ebx
call fcn.140083cd0
xor cl, cl
cmp byte [rsi + 0x14], cl
je 0x1400ca0e9
mov eax, dword [rsi + 0x18]
cmp eax, dword [0x140189dfc]
jge 0x1400ca0e2
mov dword [rsi + 0x10], eax
mov dword [rsi + 0xc], 2
jmp 0x1400ca0f7
movzx ecx, bl
mov byte [rsi + 0x14], 0
test cl, cl
movzx r14d, r14b
mov dword [rsi + 0xc], r13d
cmovne r14d, ebx
test r12, r12
je 0x1400ca10e
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x78], rdi
jmp 0x1400c90a3
mov eax, ebx
jmp 0x1400c9094
mov eax, dword [r15 + 0x50]
xor edx, edx
mov r8d, eax
mov qword [rbp + 0xa8], rax
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp], rax
mov r13, rax
test rax, rax
jne 0x1400ca18e
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
cmp eax, 5
jne 0x1400ca188
mov rcx, qword [0x140173248]
lea rax, [rbp + 0xfc]
mov qword [rsp + 0x38], rbx
lea r9d, [r13 + 8]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0xa8]
lea rax, [rbp]
mov dword [rsp + 0x28], 8
mov edx, 0x8335003c
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r13, qword [rbp]
jmp 0x1400ca190
xor ebx, ebx
test r13, r13
jne 0x1400ca20a
mov eax, dword [r15 + 0x50]
xor edx, edx
mov r8d, eax
mov qword [rbp + 0x118], rax
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp - 0x20], rax
mov r13, rax
test rax, rax
jne 0x1400ca20a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1400ca206
mov rcx, qword [0x140173248]
lea rax, [rbp + 0x90]
mov qword [rsp + 0x38], rbx
lea r9d, [r13 + 8]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x118]
lea rax, [rbp - 0x20]
mov dword [rsp + 0x28], 8
mov edx, 0x8335003c
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r13, qword [rbp - 0x20]
xor edx, edx
lea rcx, [rbp + 0x2a0]
mov r8d, 0x6c8
call fcn.1400e36c0
mov eax, dword [r15 + 0x50]
lea rcx, [rbp + 0x1710]
mov dword [rbp + 0x2c4], eax
mov edx, 0x100
movzx eax, word [r15 + 0x38]
test ax, ax
je 0x1400ca24f
mov r8, qword [r15 + 0x40]
mov r9d, eax
shr r9, 1
call fcn.1400e8844
jmp 0x1400ca25b
lea r8, str.System_Idle_Process
call fcn.1400e86e4
mov edx, dword [r15 + 0x50]
lea rax, [rbp + 0x7c]
mov qword [rsp + 0x60], rax
lea rdi, [r15 + 0x20]
lea rax, [rbp + 0x78]
mov r8, rdi
mov qword [rsp + 0x58], rax
lea r9, [rbp + 0x1110]
lea rax, [rsp + 0x7c]
mov rcx, r13
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x1510]
mov dword [rsp + 0x40], 0x100
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x1310]
mov dword [rsp + 0x30], 0x100
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
call fcn.1400c4fa0
cmp word [rbp + 0x1310], 0
je 0x1400ca2e8
cmp word [rbp + 0x1110], 0
lea r9, [0x14011eb8c]
jne 0x1400ca2ef
lea r9, [0x14011eaa0]
lea rax, [rbp + 0x1110]
lea r8, [rbp + 0x1310]
mov qword [rsp + 0x20], rax
lea rdx, str._s_s_s
lea rcx, [rbp + 0x2110]
call fcn.140055830
lea rcx, [rbp + 0x1510]
call fcn.1400e81d8
cmp dword [rbp + 0x78], 0
mov qword [rbp + 0x650], rax
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0x658], eax
movzx eax, byte [rsp + 0x7c]
mov byte [rbp + 0x65c], al
mov eax, dword [rbp + 0x398]
je 0x1400ca355
bts eax, 9
mov dword [rbp + 0x398], eax
cmp dword [rbp + 0x7c], 0
je 0x1400ca365
bts eax, 0xd
mov dword [rbp + 0x398], eax
mov r9d, 1
lea rax, [rbp + 0x100]
lea r8, [rbp + 0x621]
mov qword [rsp + 0x20], rax
mov rcx, r13
lea edx, [r9 + 0x3c]
call sub.ntdll.dll_NtQueryInformationProcess
cmp qword [0x14018fa18], 0
je 0x1400ca47d
mov rax, qword [0x14018fa20]
test rax, rax
je 0x1400ca463
xor r8d, r8d
mov dword [rbp - 0x80], ebx
lea rdx, [rbp - 0x80]
mov rcx, r13
call rax
cmp eax, 0x7a
jne 0x1400ca3fa
mov ecx, dword [rbp - 0x80]
add rcx, rcx
call fcn.1400e8270
mov rbx, rax
lea rdx, [rbp - 0x80]
mov rax, qword [0x14018fa20]
mov r8, rbx
mov rcx, r13
call rax
test eax, eax
jne 0x1400ca3f0
mov rcx, rbx
call fcn.1400e81d8
mov qword [rbp + 0x660], rax
mov rcx, rbx
call fcn.1400e825c
xor ebx, ebx
mov rax, qword [0x1401941a0]
test rax, rax
je 0x1400ca463
mov rcx, qword [rbp + 0x660]
test rcx, rcx
je 0x1400ca463
xor r8d, r8d
mov dword [rbp - 0x80], ebx
lea rdx, [rbp - 0x80]
call rax
cmp eax, 0x7a
jne 0x1400ca463
mov ecx, dword [rbp - 0x80]
add rcx, rcx
call fcn.1400e8270
mov rcx, qword [rbp + 0x660]
lea rdx, [rbp - 0x80]
mov rbx, rax
mov rax, qword [0x1401941a0]
mov r8, rbx
call rax
test eax, eax
jne 0x1400ca45b
mov rcx, rbx
call fcn.1400e81d8
mov qword [rbp + 0x368], rax
mov rcx, rbx
call fcn.1400e825c
mov rax, qword [0x14018fa18]
mov rcx, r13
call rax
test eax, eax
je 0x1400ca47d
or dword [rbp + 0x398], 0x1000
mov r14, qword [rbp - 0x28]
lea rax, [rbp + 0x2a0]
mov r9, qword [0x14018fa08]
mov r8, r14
mov dword [rsp + 0x28], 0xffffffff
mov rdx, r13
mov rcx, r15
mov dword [rbp + 0x698], 0xffffffff
mov dword [rbp + 0x740], 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1400ba6e0
mov rcx, qword [r15 + 0x58]
test rcx, rcx
jne 0x1400ca4df
lea rdx, str._None_
lea rcx, [rbp + 0xed0]
call fcn.1400a51f0
jmp 0x1400ca58b
cmp ecx, 0xfffffff6
jne 0x1400ca4ed
lea r8, str.Hardware_Interrupts_and_DPCs
jmp 0x1400ca54b
mov r8, qword [0x1401941b8]
cmp ecx, dword [r8 + 0x50]
jne 0x1400ca508
test rdi, rdi
je 0x1400ca514
mov rax, qword [rdi]
cmp qword [r8 + 0x20], rax
jle 0x1400ca514
mov eax, dword [r8]
test eax, eax
je 0x1400ca544
add r8, rax
jmp 0x1400ca4f4
movzx eax, word [r8 + 0x38]
lea rcx, [rbp + 0xed0]
mov edx, pe_nt_image_headers64
test ax, ax
je 0x1400ca53b
mov r8, qword [r8 + 0x40]
mov r9d, eax
shr r9, 1
call fcn.1400e8844
jmp 0x1400ca55c
lea r8, str.System_Idle_Process
jmp 0x1400ca557
lea r8, str._Non_existent_Process_
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0xed0]
call fcn.1400e86e4
mov r8d, dword [r15 + 0x58]
lea rdx, str.__d_
lea rcx, [rbp + 0xa80]
call fcn.1400a5250
lea r8, [rbp + 0xa80]
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0xed0]
call fcn.1400f7f64
xorps xmm0, xmm0
xor eax, eax
movdqu xmmword [rbp + 0x630], xmm0
mov qword [rbp + 0x640], rax
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1f0], xmm0
test r13, r13
je 0x1400ca72a
lea rax, [rbp - 0x60]
mov qword [rbp + 0x1c0], 0x40
mov r9d, 0x40
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1c0]
xor edx, edx
mov rcx, r13
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
je 0x1400ca61b
lea rax, [rbp - 0x60]
mov r9d, gethostbyaddr
lea r8, [rbp + 0x1c8]
mov qword [rsp + 0x20], rax
xor edx, edx
mov rcx, r13
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
jne 0x1400ca72a
movzx ebx, byte [rbp + 0x1f8]
lea rax, [rbp - 0x60]
mov r9d, 8
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x98]
mov rcx, r13
and bl, 1
lea edx, [r9 + 0x12]
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
je 0x1400ca6a1
xor eax, eax
mov qword [rbp + 0x98], rax
mov rdx, qword [rbp + 0x1d0]
test rdx, rdx
je 0x1400ca682
lea rax, [rbp + 0x640]
mov rcx, r13
lea r9, [rbp + 0x638]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x630]
call fcn.1400a79d0
cmp qword [rbp + 0x638], 0
jne 0x1400ca6d1
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp + 0x638], rax
jmp 0x1400ca6dd
mov rdx, qword [rbp + 0x98]
test rdx, rdx
je 0x1400ca654
lea rax, [rbp + 0x640]
mov rcx, r13
lea r9, [rbp + 0x638]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x630]
call fcn.1400a76c0
jmp 0x1400ca682
lea rcx, [rbp + 0x638]
call fcn.1400a8b90
cmp qword [rbp + 0x630], 0
jne 0x1400ca6fa
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp + 0x630], rax
cmp qword [rbp + 0x640], 0
jne 0x1400ca71c
lea rcx, [0x140124a54]
call fcn.1400e81d8
xor ecx, ecx
mov qword [rbp + 0x640], rax
mov word [rax], cx
test bl, bl
je 0x1400ca72a
or dword [rbp + 0x398], 0x400
mov ebx, dword [r15 + 0x50]
lea r8, [0x14011eaa0]
mov edx, 0x100
lea rcx, [rbp + 0xcd0]
call fcn.1400e86e4
xor eax, eax
mov qword [0x14018f9a0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
je 0x1400ca789
lea rax, [rbp + 0xcd0]
mov byte [0x14018f99c], 0
mov edx, ebx
mov qword [0x14018f990], rax
lea rcx, [0x1400c1960]
mov dword [0x14018f998], 0x100
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x1400ca7aa
mov rcx, qword [0x14018ec78]
mov r8d, 0x100
mov rdx, qword [0x14018f990]
mov qword [0x14018f9a0], rcx
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rcx, qword [0x14018f9a0]
mov qword [rbp + 0x5f8], rcx
test rcx, rcx
je 0x1400ca7c9
call qword [sym.imp.USER32.dll_IsHungAppWindow]
mov byte [rbp + 0x600], al
xor ebx, ebx
mov dword [rbp - 0x7c], ebx
cmp dword [rbp + 0x2c4], ebx
jg 0x1400ca7da
mov al, 2
jmp 0x1400ca7fc
test r13, r13
je 0x1400ca7fa
lea rdx, [rbp - 0x7c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x1400ca7fa
cmp dword [rbp - 0x7c], ebx
sete al
inc al
jmp 0x1400ca7fc
xor al, al
mov byte [rbp + 0x620], al
cmp byte [rsp + 0x74], bl
jne 0x1400ca812
call fcn.1400aa810
mov byte [rsp + 0x74], 1
mov r8d, dword [r15 + 0x50]
test r8d, r8d
je 0x1400ca845
mov edx, dword [0x1401a0844]
mov ecx, ebx
test edx, edx
je 0x1400ca845
mov rax, qword [0x1401a0888]
add rax, 0x2c
cmp dword [rax], r8d
je 0x1400ca944
inc ecx
add rax, 0x38
cmp ecx, edx
jb 0x1400ca832
and dword [rbp + 0x398], 0xffffffdf
lea r8, [0x14011eaa0]
mov edx, 0x41
lea rcx, [rbp + 0x2c8]
call fcn.1400e86e4
lea rcx, [rbp + 0x1710]
call fcn.1400e81d8
lea rdx, [rbp + 0x2a0]
mov qword [rbp + 0x3b8], rax
mov rcx, r13
call fcn.1400a9760
test al, al
jne 0x1400caca1
mov rcx, qword [rbp + 0x360]
mov edx, 1
call fcn.1400a9570
mov rcx, qword [rbp + 0x360]
xor edx, edx
mov qword [rbp + 0x3a8], rax
call fcn.1400a9570
mov qword [rbp + 0xc0], rax
mov rdi, rax
test rax, rax
je 0x1400cac9d
lea rcx, [0x14018f488]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, ebx
lea r14, [0x140000000]
mov rcx, rbx
cmp qword [r14 + rcx*8 + 0x18f2d8], 0xffffffffffffffff
jne 0x1400ca8f4
inc rcx
cmp rcx, 0x35
jb 0x1400ca8e0
mov rax, qword [r14 + rcx*8 + 0x18f2d8]
test al, 1
je 0x1400ca909
inc edx
shr rax, 1
test al, 1
jne 0x1400ca900
shl ecx, 6
mov r8, rdi
add edx, ecx
mov rcx, qword [0x14018f2d0]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x1400ca950
mov rcx, qword [0x14018f2d0]
mov r8, rdi
mov edx, eax
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x1400ca950
xor eax, eax
mov ebx, eax
jmp 0x1400ca982
or dword [rbp + 0x398], 0x20
jmp 0x1400ca84c
movsxd r9, ebx
mov ecx, ebx
shr r9, 6
and ecx, 0x3f
mov edx, 1
shl rdx, cl
mov r8, qword [r14 + r9*8 + 0x18f2d8]
or rdx, r8
mov qword [r14 + r9*8 + 0x18f2d8], rdx
cmp r8, rdx
je 0x1400ca982
inc dword [0x14018f480]
lea rcx, [0x14018f488]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r12, qword [rbp + 0x360]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp + 0x3b0], ebx
movups xmmword [rbp + 0x970], xmm0
mov qword [rbp + 0x980], rax
mov rbx, 0xffffffffffffffff
mov qword [rbp + 0x988], rax
nop dword [rax]
inc rbx
cmp word [r12 + rbx*2], ax
jne 0x1400ca9c0
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
ja 0x1400cbd51
mov qword [rbp + 0x988], 7
cmp rbx, 8
jae 0x1400caa16
mov qword [rbp + 0x980], rbx
lea rcx, [rbp + 0x970]
add rbx, rbx
mov rdx, r12
mov r8, rbx
call fcn.1400e3010
xor eax, eax
mov word [rbp + rbx + 0x970], ax
jmp 0x1400caa73
mov r14, rbx
or r14, 7
cmp r14, rax
jbe 0x1400caa27
mov r14, rax
jmp 0x1400caa34
cmp r14, 0xa
mov eax, 0xa
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp + 0x970]
call fcn.14004a830
mov qword [rbp + 0x980], rbx
mov rdx, r12
add rbx, rbx
mov qword [rbp + 0x970], rax
mov r8, rbx
mov qword [rbp + 0x988], r14
mov rcx, rax
mov rdi, rax
call fcn.1400e3010
xor eax, eax
mov word [rdi + rbx], ax
mov rdi, qword [0x14018f6a0]
mov r14, rdi
mov rbx, qword [rdi + 8]
cmp byte [rbx + 0x19], 0
jne 0x1400caad7
nop word [rax + rax]
cmp qword [rbp + 0x988], 8
lea rdx, [rbp + 0x970]
lea rcx, [rbx + 0x20]
cmovae rdx, qword [rbp + 0x970]
cmp qword [rcx + 0x18], 8
jb 0x1400caab5
mov rcx, qword [rcx]
call fcn.1400e89f4
test eax, eax
jns 0x1400caac4
mov rbx, qword [rbx + 0x10]
jmp 0x1400caaca
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1400caa90
mov rdi, qword [0x14018f6a0]
cmp byte [r14 + 0x19], 0
mov rcx, qword [rbp - 0x18]
mov r9, qword [rbp - 0x78]
mov rax, qword [rbp - 0x50]
movzx r10d, byte [rsp + 0x70]
mov rbx, rax
mov rdx, qword [rbp + 0x80]
mov r11, qword [rbp - 0x38]
mov r8d, dword [rsp + 0x78]
mov rax, qword [rbp - 0x18]
movsd xmm0, qword [rbp - 8]
mov qword [rbp + 0x138], rcx
mov rcx, qword [rbp - 0x58]
mov qword [rbp + 0x140], rcx
mov rcx, qword [rbp - 0x10]
mov qword [rbp + 0x150], r9
mov qword [rbp - 0x78], r9
mov r9, qword [rbp - 0x58]
mov qword [rbp + 0x128], rcx
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x58], r9
mov r9, qword [rbp - 0x10]
mov qword [rbp + 0x120], rcx
mov qword [rbp - 0x70], rcx
movsd qword [rbp - 8], xmm0
mov byte [rsp + 0x7d], r10b
mov qword [rbp + 0x130], rdx
mov qword [rbp + 0x158], r11
mov dword [rbp - 0x68], r8d
mov qword [rbp - 0x18], rax
mov byte [rsp + 0x70], r10b
mov qword [rbp + 0x80], rdx
mov qword [rbp - 0x38], r11
mov qword [rbp - 0x10], r9
mov dword [rsp + 0x78], r8d
jne 0x1400cac30
cmp qword [r14 + 0x38], 8
lea rdx, [r14 + 0x20]
jb 0x1400cab9a
mov rdx, qword [rdx]
cmp qword [rbp + 0x988], 8
lea rcx, [rbp + 0x970]
cmovae rcx, qword [rbp + 0x970]
call fcn.1400e89f4
test eax, eax
js 0x1400cac29
mov eax, dword [rbp - 0x68]
mov rdi, qword [rbp + 0x120]
mov dword [rsp + 0x78], eax
mov rax, qword [rbp + 0x128]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x158]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0x140]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp + 0x150]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x80], rax
movzx eax, byte [rsp + 0x7d]
mov byte [rsp + 0x70], al
mov rax, qword [rbp + 0x138]
mov qword [rbp - 0x70], rdi
mov rdi, qword [0x14018f6a0]
mov qword [rbp - 0x18], rax
movsd qword [rbp - 8], xmm9
jmp 0x1400cac33
mov rdi, qword [0x14018f6a0]
mov r14, rdi
mov rdx, qword [rbp + 0x988]
mov r12, rbx
cmp rdx, 8
jb 0x1400cac7c
mov rcx, qword [rbp + 0x970]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cac77
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cbd57
call fcn.1400e0fb8
cmp r14, rdi
jne 0x1400cac8e
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.USER32.dll_DestroyIcon]
mov r14, qword [rbp - 0x28]
xor ebx, ebx
movss xmm8, dword [0x140132ffc]
lea rdi, [r15 + 0x20]
mov eax, dword [r15 + 0x48]
mov r10d, dword [rbp + 0x2c4]
mov dword [rbp + 0x8e8], eax
mov rax, qword [r15 + 0x58]
test rax, rax
jne 0x1400cace7
mov eax, ebx
test r10d, r10d
je 0x1400cace7
mov dword [0x140190088], r10d
mov rax, qword [rdi]
mov qword [0x140190090], rax
mov eax, 0xffffffff
mov qword [r15 + 0x58], 0xffffffffffffffff
mov r10d, dword [rbp + 0x2c4]
mov dword [rbp + 0x3d0], eax
mov rdx, rbx
mov qword [rbp + 0x3d8], rbx
mov eax, dword [r15 + 0x60]
mov dword [rbp + 0x3e8], eax
mov rax, qword [rdi]
mov qword [rbp + 0x608], rax
mov eax, dword [r15 + 4]
test eax, eax
je 0x1400cad2f
mov r8d, eax
lea rcx, [r15 + 0x140]
nop dword [rax]
mov eax, dword [rcx]
lea rcx, [rcx + 0x50]
add rdx, rax
sub r8, 1
jne 0x1400cad20
test rdx, rdx
mov qword [rbp + 0x948], rbx
mov rax, rbx
mov ecx, ebx
cmovg rax, rdx
mov qword [rbp + 0x8d0], rax
mov edx, dword [r15 + 4]
test edx, edx
je 0x1400cad77
mov r8d, edx
lea rax, [r15 + 0x148]
nop dword [rax + rax]
cmp dword [rax - 4], 5
jne 0x1400cad6d
cmp dword [rax], 5
jne 0x1400cad6d
inc ecx
add rax, 0x50
sub r8, 1
jne 0x1400cad60
cmp edx, ecx
jne 0x1400cad85
or dword [rbp + 0x398], 0x80
xor r9d, r9d
xor r8d, r8d
mov edx, r10d
mov rcx, r13
call fcn.1400ba180
test al, al
je 0x1400cada6
or dword [rbp + 0x398], 0x800
jmp 0x1400cadb0
and dword [rbp + 0x398], 0xfffff7ff
mov rdx, r13
lea rcx, [rbp + 0x2a0]
call fcn.1400a8770
mov dword [rbp + 0x614], eax
mov dword [rbp + 0x3d4], ebx
mov rax, qword [r15 + 0x30]
add rax, qword [r15 + 0x28]
mov qword [rbp + 0x8b8], rax
mov rax, qword [r15 + 0x30]
mov qword [rbp + 0x8c0], rax
mov dword [rbp + 0x3f0], ebx
mov eax, dword [r15 + 0x80]
mov qword [rbp + 0x6a8], rax
mov rax, qword [r15 + 0xb8]
mov qword [rbp + 0x6b8], rax
mov rax, qword [r15 + 0x78]
mov qword [rbp + 0x6a0], rax
mov rax, qword [r15 + 0xc0]
mov qword [rbp + 0x6c8], rax
mov rax, qword [r15 + 0x90]
mov qword [rbp + 0x6d0], rax
mov rax, qword [r15 + 0x88]
mov qword [rbp + 0x6d8], rax
mov rax, qword [0x1401a08a8]
mov dword [rbp + 0x61c], 0xffffffff
test rax, rax
je 0x1400cae5e
lea rdx, [rbp + 0x61c]
mov rcx, r13
call rax
mov rax, qword [r15 + 0xb8]
lea rdx, [rbp + 0x3f0]
cmp rax, qword [rbp - 0x78]
mov ecx, dword [r15 + 0x50]
cmovbe rax, r12
mov r12, rax
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
mov ecx, dword [rbp + 0x3f0]
test eax, eax
mov eax, 0xffffffff
cmove ecx, eax
cmp dword [reloc.ACLUI.dll_CreateSecurityPage], 0
mov dword [rbp + 0x3f0], ecx
je 0x1400caeb3
movsd qword [rbp + 0x8a0], xmm12
movaps xmm6, xmm12
jmp 0x1400caf12
test r14, r14
jne 0x1400caebe
movaps xmm6, xmm12
jmp 0x1400caeee
mov rax, qword [r15 + 0x30]
xorps xmm2, xmm2
add rax, qword [r15 + 0x28]
xorps xmm0, xmm0
imul rax, rax, 0x64
cvtsi2sd xmm0, r14
movaps xmm1, xmm12
movaps xmm6, xmm14
cvtsi2sd xmm2, rax
divsd xmm2, xmm0
maxsd xmm1, xmm2
minsd xmm6, xmm1
test byte [rbp + 0x398], 0x40
movsd qword [rbp + 0x8a0], xmm6
je 0x1400caf04
addsd xmm10, xmm6
cmp dword [rbp + 0x2c4], 0
je 0x1400caf12
addsd xmm15, xmm6
lea rcx, [rbp + 0xed0]
call fcn.1400e81d8
lea rcx, [rbp + 0x2110]
mov qword [rbp + 0x3c8], rax
call fcn.1400e81d8
or dword [rbp + 0x398], 4
lea rdx, [0x14018ea60]
mov rcx, rax
mov qword [rbp + 0x3e0], rax
call fcn.1400e89f4
test eax, eax
mov eax, dword [rbp + 0x398]
jne 0x1400caf5b
or eax, 0x40
cmp byte [0x14018df9b], 0
jne 0x1400caf6d
test al, 0x40
jne 0x1400caf6d
and eax, 0xfffffffd
jmp 0x1400caf70
or eax, 2
lea r8, [rbp + 0xcd0]
mov dword [rbp + 0x398], eax
mov edx, 0x100
lea rcx, [rbp + 0x3f4]
call fcn.1400e86e4
cmp dword [reloc.ACLUI.dll_CreateSecurityPage], 0
je 0x1400caf9f
mov dword [rbp + 0x2ac], ebx
jmp 0x1400cafd7
mov rax, qword [rbp + 0x608]
cmp qword [0x1401941b0], rax
jle 0x1400cafc0
movsd qword [rbp + 0x8a0], xmm12
mov dword [rbp + 0x2ac], ebx
jmp 0x1400cafca
mov dword [rbp + 0x2ac], 2
mov dword [rbp + 0x2b0], ebx
mov byte [rbp + 0x2b4], 0
mov ecx, dword [rbp + 0x2c4]
mov byte [rbp + 0x888], 0
call fcn.140093c60
lea rcx, [rbp + 0x2a0]
mov qword [rbp + 0x890], rax
call fcn.140065230
mov byte [rbp + 0x898], al
mov rax, qword [rbp + 0x890]
test rax, rax
je 0x1400cb031
cmp byte [rsp + 0x70], 0
jne 0x1400cb026
call fcn.1400947e0
mov rax, qword [rbp + 0x890]
mov byte [rsp + 0x70], 1
test rax, rax
je 0x1400cb031
inc dword [rbp + 0x9d8]
mov edx, 0xffffffff
lea rcx, [rbp + 0x2a0]
call fcn.140094830
mov rcx, qword [0x14018ec78]
lea r9, [rbp + 0x2a0]
mov qword [rbp + 0x8f8], 0
mov r8, rbx
mov dword [rbp + 0x2b0], ebx
mov edx, 0x7ee
mov eax, dword [r15 + 0x50]
cmp dword [0x140170720], eax
sete r8b
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x3b8]
lea rdx, str.wmiprvse.exe
mov rbx, rax
call fcn.1400e89f4
test eax, eax
jne 0x1400cb0aa
xor r8d, r8d
lea rcx, [0x1400a4990]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TrySubmitThreadpoolCallback]
mov r9, qword [0x14018fa08]
mov r8, r14
mov dword [rsp + 0x28], 0xffffffff
mov rdx, r13
mov rcx, r15
mov qword [rsp + 0x20], rbx
call fcn.1400ba6e0
mov rax, qword [rbx + 0x630]
mov r14b, 1
mov rcx, qword [rbp + 0x88]
mov qword [rbx + 0x628], rax
mov rax, qword [rbx + 0x640]
mov qword [rbx + 0x638], rax
mov qword [rbx + 0x6a8], rcx
mov rax, qword [rbp + 0x360]
mov qword [rbp + 0x88], rbx
test rax, rax
je 0x1400cb16c
cmp word [rax], 0x5b
je 0x1400cb16c
cmp byte [0x14018dfa1], 0
je 0x1400cb130
lock inc dword [rbx + 0x20]
mov r8, rbx
lea rcx, [0x1400cd5a0]
xor edx, edx
call fcn.1400f7c20
mov rdx, qword [rbx + 0xc0]
mov rcx, qword [rbx + 0x140]
call fcn.140060bd0
mov qword [rbx + 0xd0], rax
mov r8d, 2
cmp byte [0x14018dfb0], 0
mov eax, 0
movzx edx, r14b
mov rcx, rbx
cmovne r8d, eax
call fcn.1400d7fc0
cmp dword [rbx + 0x24], 0
je 0x1400cb186
comisd xmm6, xmm13
jbe 0x1400cb186
movaps xmm13, xmm6
mov qword [rbp - 0x70], rbx
mov rdi, rbx
jmp 0x1400cb18a
mov rdi, qword [rbp - 0x70]
test byte [rbp + 0x398], 0x40
je 0x1400cb1db
mov rax, qword [rbp - 0x38]
add rax, qword [r15 + 0xb8]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x58]
add rax, qword [r15 + 0x90]
inc dword [rbp + 0x9c4]
mov qword [rbp - 0x58], rax
mov eax, dword [r15 + 4]
add dword [rbp + 0x9cc], eax
mov eax, dword [r15 + 0x60]
add dword [rbp + 0x9d4], eax
cmp qword [rbp + 0x890], 0
je 0x1400cb1db
inc dword [rbp + 0x9dc]
test r13, r13
je 0x1400cb1e9
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r15]
test eax, eax
je 0x1400cb20a
movsd xmm9, qword [rbp - 8]
add r15, rax
mov r13, qword [rbp - 0x28]
mov qword [rbp - 0x78], r12
mov r12, qword [rbp - 0x48]
jmp 0x1400c8fc0
mov rax, qword [rbp - 0x18]
mov r12, qword [rbp - 0x48]
test rax, rax
je 0x1400cb256
mov ecx, 1
mov qword [rbp + 0xe0], rax
mov dword [rbp + 0xd0], ecx
lea r9, [rbp + 0xd0]
mov edx, 0x1053
lea r8, [rcx - 2]
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, eax
xor r9d, r9d
mov edx, 0x1013
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
cmp byte [rbp - 0x30], 0
jne 0x1400cb3fb
cmp byte [0x14018df9b], 0
je 0x1400cb3fb
xor edx, edx
lea rcx, [rbp + 0x2a0]
mov r8d, 0x6c8
call fcn.1400e36c0
mov ecx, dword [0x14018ed70]
xor r13d, r13d
or dword [rbp + 0x398], 6
mov eax, 0xffffffff
mov byte [rbp + 0x614], 0xff
mov qword [rbp + 0x890], r13
mov dword [rbp + 0x740], 0xffffffff
mov dword [rbp + 0x698], eax
mov qword [rbp + 0x948], r13
mov dword [rbp + 0x2ac], r13d
mov byte [rbp + 0x620], 2
mov dword [rbp + 0x2c4], 0xfffffff6
test ecx, ecx
jle 0x1400cb371
mov rdx, qword [0x1401941c8]
mov r15d, ecx
mov r9, qword [0x1401941d0]
add rdx, 0x20
mov r8, qword [0x1401941d8]
add r9, 4
mov r10, qword [rbp + 0x8e0]
mov r11, qword [rbp + 0x8d0]
mov rbx, qword [rbp + 0x8c0]
mov rdi, qword [rbp + 0x8b8]
nop word [rax + rax]
mov eax, dword [rdx + 8]
lea rdx, [rdx + 0x30]
add eax, dword [r9]
lea r9, [r9 + 0x18]
add r11, rax
lea r8, [r8 + 8]
mov qword [rbp + 0x8d0], r11
mov rax, qword [rdx - 0x38]
add rax, qword [rdx - 0x30]
add rdi, rax
mov qword [rbp + 0x8b8], rdi
mov rax, qword [rdx - 0x38]
add rax, qword [rdx - 0x30]
add rbx, rax
mov qword [rbp + 0x8c0], rbx
add r10, qword [r8 - 8]
mov qword [rbp + 0x8e0], r10
sub r15, 1
jne 0x1400cb320
lea rcx, str.Hardware_Interrupts_and_DPCs
call fcn.1400e81d8
lea rcx, str.Interrupts
mov qword [rbp + 0x350], rax
call fcn.1400e81d8
mov qword [rbp + 0x3b8], rax
lea rcx, str.System
mov rax, qword [0x140190090]
mov qword [rbp + 0x608], rax
mov eax, dword [0x140190088]
mov dword [rbp + 0x3d0], eax
call fcn.1400e81d8
cmp dword [0x140170720], r13d
lea r9, [rbp + 0x2a0]
mov rcx, qword [0x14018ec78]
mov r8, r13
sete r8b
mov qword [rbp + 0x3c8], rax
mov edx, 0x7ee
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x88]
mov qword [rax + 0x6a8], rcx
jmp 0x1400cb3fe
xor r13d, r13d
cmp dword [0x1401a0d08], 0
jne 0x1400cb4c9
movsxd rax, dword [0x14018a250]
cmp eax, 0x3e8
je 0x1400cb4c9
test r14b, r14b
jne 0x1400cb4c9
lea rcx, [0x140000000]
mov r15d, 1
cmp dword [rcx + rax*4 + 0x18a0d0], 0x41f
jne 0x1400cb4cf
lea r9, [rbp + 0x10]
mov dword [rbp + 0x10], 4
xor r8d, r8d
mov qword [rbp + 0x14], r15
mov edx, 0x104b
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x1400cb4cf
nop dword [rax + rax]
mov rax, qword [rbp + 0x38]
test rsi, rsi
je 0x1400cb4a2
cmp byte [0x14018a254], 0
movsd xmm1, qword [rsi + 0x600]
je 0x1400cb494
comisd xmm1, xmmword [rax + 0x600]
jmp 0x1400cb4a0
movsd xmm0, qword [rax + 0x600]
comisd xmm0, xmm1
ja 0x1400cb4c3
inc dword [rbp + 0x14]
lea r9, [rbp + 0x10]
xor r8d, r8d
mov edx, 0x104b
mov rcx, r12
mov rsi, rax
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x1400cb470
jmp 0x1400cb4cf
movzx r14d, r15b
jmp 0x1400cb4cf
mov r15d, 1
mov rsi, qword [rbp - 0x28]
xorps xmm1, xmm1
mov rcx, qword [rbp - 0x40]
test rsi, rsi
je 0x1400cb502
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x1401a0d10]
cvtsi2ss xmm0, rsi
cvtsi2ss xmm1, rax
mulss xmm1, dword [0x1401310d4]
divss xmm1, xmm0
mov qword [0x1401a0d10], rcx
movaps xmm8, xmm12
lea rcx, [rbp + 0xa40]
movsd qword [rbp + 0x998], xmm10
cvtps2pd xmm9, xmm1
mov dword [rbp + 0xa40], reloc.WS2_32.dll_getservbyport
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
lea rcx, [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea rcx, [rbp + 0x9e0]
mov dword [rbp + 0x9e0], 0x40
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rax, qword [rbp - 0x38]
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp + 0x9f8]
test rax, rax
je 0x1400cb57d
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
divsd xmm6, xmm0
mulsd xmm6, xmm14
jmp 0x1400cb68b
mov rax, qword [0x14018f9d8]
xorps xmm8, xmm8
movsd xmm1, qword [0x140130d68]
mulsd xmm0, xmm1
movsd qword [rax + 0x40], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp + 0x9e8]
mov rax, qword [0x14018fa00]
mulsd xmm0, xmm1
movsd qword [rax + 0x40], xmm0
mov rcx, qword [rbp + 0x9e8]
sub rcx, qword [rbp + 0x9f0]
js 0x1400cb5cc
cvtsi2sd xmm8, rcx
jmp 0x1400cb5e2
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2sd xmm8, rax
addsd xmm8, xmm8
mov rcx, qword [rbp + 0x9f8]
xorps xmm7, xmm7
mov rax, rcx
mulsd xmm8, xmm1
sub rax, qword [rbp + 0xa00]
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
cvtsi2sd xmm7, rax
movaps xmm6, xmm7
mulsd xmm7, xmm1
mulsd xmm6, xmm14
comisd xmm12, xmm7
divsd xmm6, xmm0
jbe 0x1400cb652
mov rcx, qword [rbp + 0xa58]
xorps xmm7, xmm7
shr rcx, 0xa
test rcx, rcx
js 0x1400cb639
cvtsi2sd xmm7, rcx
jmp 0x1400cb64e
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2sd xmm7, rax
addsd xmm7, xmm7
movaps xmm6, xmm14
mov rdx, qword [rbp - 0x48]
movaps xmm3, xmm12
mov rcx, qword [0x14018fa00]
movaps xmm2, xmm8
mov qword [rsp + 0x20], r13
call fcn.140065670
mov rdx, qword [rbp - 0x48]
movaps xmm3, xmm12
mov rcx, qword [0x14018f9d8]
movaps xmm2, xmm7
mov qword [rsp + 0x20], r13
call fcn.140065670
mov rcx, qword [0x14018fa00]
xorps xmm0, xmm0
mov rax, qword [rbp - 0x58]
mov rdi, qword [rbp + 0x80]
cqo
and edx, 0x3ff
movsd qword [rbp + 0xb8], xmm8
movsd xmm1, qword [rcx + 0x40]
add rax, rdx
mov rcx, qword [rbp - 0x78]
sar rax, 0xa
movsd qword [rbp + 0x9a8], xmm6
mov qword [0x14018fa10], rcx
cvtsi2sd xmm0, rax
divsd xmm0, xmm1
mulsd xmm0, xmm14
movsd qword [rbp + 0x9b8], xmm0
test rdi, rdi
je 0x1400cb7db
movaps xmm0, xmm14
mov dword [rbp + 0xd0], r15d
subsd xmm0, xmm15
mov qword [rbp + 0xe0], rdi
movaps xmm6, xmm12
lea r9, [rbp + 0xd0]
mov edx, 0x1053
mov r8, 0xffffffffffffffff
mov rcx, r12
maxsd xmm6, xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x14], eax
ucomisd xmm6, qword [rdi + 0x600]
jp 0x1400cb73c
mov ecx, r13d
je 0x1400cb73f
mov ecx, r15d
movsd qword [rdi + 0x600], xmm6
mov r8d, 0x41f
mov r9d, dword [rbp + 0x14]
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
movsd xmm0, qword [rdi + 0x610]
or r14b, al
movaps xmm1, xmm0
addsd xmm1, xmm6
ucomisd xmm1, xmm0
jp 0x1400cb77a
mov ebx, r13d
je 0x1400cb77d
mov ebx, r15d
movsd qword [rdi + 0x610], xmm1
mov r8d, 0x665
mov r9d, dword [rbp + 0x14]
mov ecx, r15d
mov rdx, qword [0x14018ec80]
call fcn.140083cd0
mov r9d, dword [rbp + 0x14]
mov r8d, 0x4a7
mov rdx, qword [0x14018ec80]
mov ecx, ebx
or r14b, al
call fcn.140083cd0
mov rdx, qword [0x14018fa08]
or r14b, al
mov rcx, qword [rdi + 0x650]
movaps xmm3, xmm6
movaps xmm2, xmm12
mov qword [rsp + 0x20], r13
call fcn.140065670
test r14b, r14b
jne 0x1400cb835
cmp dword [rsp + 0x78], 0
je 0x1400cb835
mov rcx, qword [0x14018ec80]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x1400cb835
mov rbx, r13
mov edi, eax
nop dword [rax + rax]
mov rcx, qword [0x14018ec78]
mov r9, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x7eb
call qword [sym.imp.USER32.dll_PostMessageW]
inc rbx
sub rdi, 1
jne 0x1400cb810
mov rcx, qword [0x14018ec98]
minsd xmm14, xmm15
lea r9, [rbp + 0xb8]
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x990]
movsd qword [rbp + 0x990], xmm14
call fcn.1400d6700
mov rdi, qword [rbp - 0x70]
test rdi, rdi
je 0x1400cb8d1
cmp byte [0x14018df91], 0
lea rcx, [rbp + 0x1910]
mov eax, dword [rdi + 0x24]
movaps xmm2, xmm13
mov r9, qword [rdi + 0x118]
movq r8, xmm2
je 0x1400cb8af
test eax, eax
jle 0x1400cb8a6
lea rdx, [0x140131028]
mov dword [rsp + 0x20], eax
call fcn.140055830
jmp 0x1400cb8d1
lea rdx, str._02.02f____s
jmp 0x1400cb8cc
test eax, eax
jle 0x1400cb8c5
lea rdx, str._02.0f____s:_d
mov dword [rsp + 0x20], eax
call fcn.140055830
jmp 0x1400cb8d1
lea rdx, str._02.0f____s
call fcn.140055830
movsd xmm2, qword [rbp + 0x990]
lea rax, [rbp + 0x1910]
mov rdx, qword [0x14018fa08]
movaps xmm3, xmm9
mov rcx, qword [0x14018f9e0]
mov qword [rsp + 0x20], rax
call fcn.140065670
cmp dword [0x1401896a8], 0
je 0x1400cb96d
mov ecx, dword [0x14018ed70]
mov rax, rsi
mov r9, qword [rbp - 0x10]
cqo
mov r8, qword [0x14018f9e8]
idiv rcx
mov rcx, qword [0x14018fa08]
mov rdx, rax
mov rax, qword [0x14018f9f8]
mov qword [rsp + 0x30], rax
mov rax, qword [0x14018f9f0]
mov qword [rsp + 0x28], rax
mov rax, qword [0x14018f9d0]
mov qword [rsp + 0x20], rax
call fcn.140068500
movsd xmm3, qword [rbp - 8]
xorps xmm1, xmm1
mov r8, qword [rbp - 0x10]
mov rcx, qword [0x14018f9e8]
cvtss2sd xmm1, xmm0
call fcn.1400d5e20
cmp qword [0x1401a0a70], 0
je 0x1400cb98a
lea rdx, [0x1401a0920]
lea rcx, [0x1401a0a68]
call fcn.140068e10
cmp qword [0x1401a0a90], 0
je 0x1400cb9a7
lea rdx, [0x1401a0990]
lea rcx, [0x1401a0a88]
call fcn.140068e10
cmp qword [0x1401a0ab0], 0
je 0x1400cb9c4
lea rdx, [0x1401a0a00]
lea rcx, [0x1401a0aa8]
call fcn.140068e10
mov rdx, qword [0x14018ec80]
mov r9d, 0xfffffffe
mov r8d, 0x41f
mov ecx, r15d
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
mov r9d, 0xfffffffe
mov r8d, 0x424
mov ecx, r15d
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
mov r9d, 0xfffffffe
mov r8d, 0x427
mov ecx, r15d
call fcn.140083cd0
mov rdx, qword [0x14018ec80]
mov r9d, 0xfffffffe
mov r8d, 0x672
mov ecx, r15d
call fcn.140083cd0
movsd xmm1, qword [rbp + 0x990]
movaps xmm3, xmm13
mov rcx, qword [0x14018f9e0]
mov r8, rdi
call fcn.1400d5e20
movsd xmm1, qword [rbp + 0x148]
mov rcx, qword [0x14018f9d8]
call fcn.1400d5d60
movsd xmm1, qword [rbp + 0xb8]
mov rcx, qword [0x14018fa00]
call fcn.1400d6640
cmp byte [rsp + 0x73], 0
movzx esi, r14b
cmovne esi, r15d
cmp dword [reloc.ACLUI.dll_CreateSecurityPage], 0
je 0x1400cbb98
mov rcx, qword [0x14018ec80]
mov eax, 0xffffffff
xor r8d, r8d
cmp dword [0x14016fa34], eax
je 0x1400cbb6b
xor r9d, r9d
mov qword [rbp + 0x160], 4
mov edx, 0x1004
mov dword [rbp + 0x168], r13d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rbp + 0x164], eax
jge 0x1400cbb91
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [0x14018ec80]
lea r9, [rbp + 0x160]
xor r8d, r8d
mov edx, 0x104b
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x188]
mov eax, dword [0x14016fa34]
cmp dword [rcx + 0x24], eax
mov rcx, qword [0x14018ec80]
je 0x1400cbb47
inc dword [rbp + 0x164]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x160], 4
mov edx, 0x1004
mov dword [rbp + 0x168], r13d
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rbp + 0x164], eax
jl 0x1400cbae0
jmp 0x1400cbb91
movsxd r8, dword [rbp + 0x164]
lea r9, [rbp + 0x9e0]
mov dword [rbp + 0x9f0], 3
mov dword [rbp + 0x9ec], 3
jmp 0x1400cbb86
mov dword [rbp + 0x170], 3
lea r9, [rbp + 0x160]
mov dword [rbp + 0x16c], 3
mov edx, 0x102b
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [reloc.ACLUI.dll_CreateSecurityPage], r13d
mov rdi, qword [0x14018f690]
mov rbx, qword [rdi]
cmp byte [rbx + 0x19], 0
jne 0x1400cbc1c
nop dword [rax + rax]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_DestroyIcon]
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400cbbe8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400cbbe3
nop
cmp rbx, qword [rax + 0x10]
jne 0x1400cbbe3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400cbbd0
mov rbx, rax
jmp 0x1400cbc0f
mov rcx, qword [rax]
mov rbx, rax
cmp byte [rcx + 0x19], 0
jne 0x1400cbc0f
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rcx]
mov rbx, rcx
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400cbc00
cmp byte [rbx + 0x19], 0
je 0x1400cbbb0
mov rdi, qword [0x14018f690]
mov r8, qword [rdi + 8]
lea rdx, [0x14018f690]
lea rcx, [0x14018f690]
call fcn.14009f150
mov qword [rdi + 8], rdi
mov qword [rdi], rdi
mov qword [rdi + 0x10], rdi
mov rdi, qword [0x14018f6a0]
mov qword [0x14018f698], r13
mov rbx, qword [rdi]
cmp byte [rbx + 0x19], 0
jne 0x1400cbcbc
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_DestroyIcon]
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400cbc8b
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400cbc86
cmp rbx, qword [rax + 0x10]
jne 0x1400cbc86
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400cbc73
mov rbx, rax
jmp 0x1400cbcaf
mov rcx, qword [rax]
mov rbx, rax
cmp byte [rcx + 0x19], 0
jne 0x1400cbcaf
nop word [rax + rax]
mov rax, qword [rcx]
mov rbx, rcx
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400cbca0
cmp byte [rbx + 0x19], 0
je 0x1400cbc55
mov rdi, qword [0x14018f6a0]
mov r8, qword [rdi + 8]
lea rdx, [0x14018f6a0]
lea rcx, [0x14018f6a0]
call fcn.14009f150
mov qword [rdi + 8], rdi
movzx eax, sil
mov qword [rdi], rdi
mov qword [rdi + 0x10], rdi
mov qword [0x14018f6a8], r13
mov rcx, qword [rbp + 0x2910]
xor rcx, rsp
call fcn.1400e17a0
lea r11, [rsp + 0x2ac0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400177a0
int3
call fcn.1400e8160
int3