Function at 0x140014490
Capabilities:
Access peb ldr_data
Check for unmoving mouse cursor
Create process on windows
Get system information on windows
Move file

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e98]
mov eax, 0x1f98
call fcn.1400ff8d0
sub rsp, rax
mov ebx, r9d
mov rdi, r8
mov r13, rdx
xor esi, esi
mov qword [rsp + 0x60], rsi
mov r15, qword [0x14017cbb0]
mov byte [0x14017ab19], 1
mov byte [rbp - 0x30], sil
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x50]
call fcn.140041f00
nop
mov r12, qword [0x14017ae30]
mov qword [rsp + 0x58], r12
mov edx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
add rax, rdx
mov qword [rbp + 0x10], rax
mov eax, dword [rax]
cmp dword [0x14017d710], eax
jg 0x14001aa28
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rsi
lea rcx, [rbp + 0x250]
call fcn.14001b2a0
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140005860
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.140005860
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.140005860
nop
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x1290]
call fcn.14012ce40
lea r14, [r15 + 0xdb0]
lea r8, [rbp + 0x1ef8]
xor edx, edx
mov rcx, r14
call fcn.14009c730
mov byte [rbp + 0x1ef8], 1
mov r9b, 1
lea r8, [rbp + 0x1ef8]
lea rdx, str.PauseListOnRightClick
lea rcx, [0x14017c4f0]
call fcn.1400734c0
mov byte [rbp + 0x1ee0], 0
cmp byte [rbp + 0x1ef8], 0
je 0x1400145f5
cmp dword [r15 + 0x3edc], 0
je 0x1400145f5
xor edx, edx
mov rcx, r15
call fcn.140027850
mov byte [rbp + 0x1ee0], 1
cmp ebx, 0xfffffffb
je 0x1400146cf
cmp ebx, 0xfffffffd
jne 0x140016ea1
cmp rdi, qword [r15 + 0x7a0]
je 0x14001461d
cmp rdi, qword [r15 + 0x830]
jne 0x1400146cf
mov rdx, rdi
mov rcx, r15
call fcn.140014230
mov r8d, eax
mov rdx, qword [r15 + 0x740]
mov rcx, r15
call fcn.140014140
movsxd rbx, eax
cmp ebx, 0xffffffff
je 0x140016ea1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1330
mov rcx, qword [r15 + 0x788]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r15 + 0x740]
call fcn.1400757e0
xor r9d, r9d
mov r8, rbx
mov edx, 0x1013
mov rcx, qword [r15 + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x200], 3
mov dword [rbp + 0x1fc], 3
lea r9, [rbp + 0x1f0]
mov r8, rbx
mov edx, 0x102b
mov rcx, qword [r15 + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1043
mov rcx, qword [r15 + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140016ea1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jbe 0x140015f1c
mov edx, 0xc6
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_LoadMenuW]
mov rbx, rax
test rax, rax
jne 0x140014740
mov rax, qword [0x14017cd58]
test rax, rax
jne 0x140014726
lea rcx, str.pl_rsrc_english.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14017cd58], rax
mov edx, 0xc6
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadMenuW]
mov rbx, rax
test rax, rax
je 0x140016ea1
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rdi, rax
test rax, rax
je 0x140016e9a
mov edx, 0x9dfc
mov r8d, 8
mov rcx, rax
call qword [sym.imp.USER32.dll_CheckMenuItem]
call fcn.1400759b0
test al, al
jne 0x1400147d8
mov edx, 0x888d
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x888e
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x888b
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x888a
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x888c
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov rcx, r13
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], esi
mov r9d, dword [rbp + 0x84]
mov r8d, dword [rbp + 0x80]
mov edx, 0x102
mov rcx, rdi
call qword [sym.imp.USER32.dll_TrackPopupMenu]
movsxd rdi, eax
mov dword [rbp - 0x58], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call qword [sym.imp.USER32.dll_DestroyMenu]
lea ecx, [rdi - 0x9d95]
lea rsi, [0x140000000]
cmp ecx, 6
ja case.default.0x140014857
movsxd rax, ecx
mov ecx, dword [rsi + rax*4 + 0x1aaf4]
add rcx, rsi
jmp rcx
lea rcx, [0x140174680]
call fcn.140005110
test al, al
je case.default.0x140014857
mov rdx, r13
lea rcx, [0x140174680]
call fcn.1400050e0
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
mov r13, rdi
cmp edi, 0x8849
jg 0x1400148bc
je case.0x140014c37.40285
lea eax, [rdi - 0x857e]
cmp eax, 0xa
ja case.0x140014c37.40287
cdqe
mov ecx, dword [rsi + rax*4 + 0x1ab10]
add rcx, rsi
jmp rcx
cmp edi, 0x9d57
jg 0x140014c12
je 0x140014c0b
lea eax, [rdi - 0x8853]
cmp eax, 0x48
ja case.0x140014c37.40287
cdqe
movzx eax, byte [rsi + rax + 0x1ab4c]
mov ecx, dword [rsi + rax*4 + 0x1ab3c]
add rcx, rsi
jmp rcx
lea rcx, [0x140174680]
call fcn.140005110
test al, al
je case.0x1400148f1.34899
mov rdx, qword [rbp + 0x1ee8]
lea rcx, [0x140174680]
call fcn.1400050e0
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x140014c37.40287
mov rax, qword [rbp + 0x10]
mov eax, dword [rax]
cmp dword [0x14017d090], eax
jg 0x14001aa6c
lea rcx, [0x14017d258]
call fcn.140009b20
test al, al
jne 0x1400149ab
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x50b
mov rcx, r12
call fcn.140085d00
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
lea rcx, [rbp - 0x28]
call fcn.14003e0e0
nop
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r9, [0x1400befa0]
mov r8, qword [rbp + 0x1ee8]
mov edx, 0x1417
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je 0x140014bec
mov edx, 0x100c
mov r9d, 2
lea r8, [r9 - 3]
mov rbx, qword [rbp + 0x1ef0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov rsi, rax
cmp eax, 0xffffffff
je 0x140014be1
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xa0], 4
mov dword [rbp + 0xa4], esi
lea r9, [rbp + 0xa0]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x140014bbf
mov rdi, qword [rbp + 0xc8]
test rdi, rdi
je 0x140014be1
mov edx, 4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x140014be1
mov rdi, qword [rdi + 0x20]
mov rcx, rdi
call fcn.14000fc60
test al, al
je 0x140014bbf
lea rcx, [rsp + 0x60]
call fcn.1400055e0
nop
xor edx, edx
mov rcx, rdi
call fcn.1400873b0
mov rbx, rax
mov rcx, rdi
call fcn.140087130
mov rcx, rax
lea r8, [rsp + 0x60]
mov rdx, rbx
call fcn.14007e850
lea rdx, [rbp - 0x28]
mov rcx, rdi
call fcn.14000a6f0
test al, al
jne 0x140014b4e
lea rcx, [rbp]
call fcn.1400055e0
nop
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x50c
mov rcx, r12
call fcn.140085d00
mov rdx, rax
mov r9d, dword [rdi + 0x544]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp]
call fcn.140005d70
lea rcx, [rbp]
call fcn.140005690
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp]
call fcn.1400055a0
cmp r13, 0x8854
jne 0x140014bae
lea rcx, [rbp + 0x58]
call fcn.14001b200
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x58]
call fcn.14003f3d0
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x60]
call fcn.14003e100
lea rax, [rbp + 0x178]
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x178]
call fcn.14001b400
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b1a50
nop
lea rcx, [rbp + 0x58]
call fcn.14001b370
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
mov rbx, qword [rbp + 0x1ef0]
movsxd r8, esi
mov edx, 0x100c
mov r9d, 2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
cmp eax, 0xffffffff
jne 0x140014a12
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp - 0x28]
call fcn.14003ded0
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
mov ebx, 0x137
jmp 0x140014c3e
lea eax, [rdi - 0x9d5c]
cmp eax, 0xa1
ja case.0x140014c37.40287
cdqe
movzx eax, byte [rsi + rax + 0x1aba8]
mov ecx, dword [rsi + rax*4 + 0x1ab98]
add rcx, rsi
jmp rcx
mov ebx, 0x13a
mov dword [rbp + 0x1ef8], ebx
mov r9d, 0x1ff
lea r8, [rbp + 0x1a90]
lea edx, [r9 - 0x32]
mov rcx, r12
call fcn.140085d00
mov rdi, rax
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, ebx
mov rcx, r12
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x128
mov rcx, r12
call fcn.140085d00
mov rdx, rax
mov r9, rdi
mov r8, rbx
lea rcx, [rbp - 8]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, dword [rbp + 0x1ef8]
mov rcx, r12
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x136
mov rcx, r12
call fcn.140085d00
mov rdx, rax
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.140005d70
lea rcx, [rbp - 0x50]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp - 8]
call fcn.140005690
mov rdx, rax
mov r9d, 0x1024
mov r8, rbx
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdi, qword [rbp + 0x1ef0]
cmp ax, 6
jne 0x140015f0d
mov edx, 0x100c
mov r9d, 2
lea r8, [r9 - 3]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, rax
cmp eax, 0xffffffff
je 0x140014e52
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xa0], 4
mov dword [rbp + 0xa4], r12d
lea r9, [rbp + 0xa0]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x140014e2f
mov rbx, qword [rbp + 0xc8]
test rbx, rbx
je 0x140014e52
mov edx, 4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x140014e52
mov rbx, qword [rbx + 0x20]
mov rcx, rbx
call fcn.14000fc60
test al, al
je 0x140014e2f
lea rcx, [rbp + 0x10]
call fcn.1400055e0
nop
mov rcx, rbx
call fcn.140087130
mov rdi, rax
xor ebx, ebx
mov rcx, qword [str.mfpmp.exe]
test rcx, rcx
je 0x140014e1f
mov rdx, rcx
mov rcx, rdi
call fcn.1401103e4
test eax, eax
je 0x140014e59
inc rbx
mov rcx, qword [rsi + rbx*8 + 0x145a10]
test rcx, rcx
jne 0x140014e00
lea rcx, [rbp + 0x10]
call fcn.1400055a0
mov rdi, qword [rbp + 0x1ef0]
movsxd r8, r12d
mov edx, 0x100c
mov r9d, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12d, eax
cmp eax, 0xffffffff
jne 0x140014d50
mov r12, qword [rsp + 0x58]
jmp 0x140014ed5
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x14a
mov r12, qword [rsp + 0x58]
mov rcx, r12
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x1034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
mov ebx, eax
lea rcx, [rbp + 0x10]
call fcn.1400055a0
mov rdi, qword [rbp + 0x1ef0]
cmp bx, 7
je 0x140015f0d
jmp 0x140014ed5
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x140014c37.40287
mov rdi, qword [rbp + 0x1ef0]
mov edx, 0x100c
mov r9d, 2
lea r8, [r9 - 3]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rbp + 0x10], rax
cmp eax, 0xffffffff
je 0x140015f0d
mov esi, 1
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xa0], 4
mov dword [rbp + 0xa4], eax
lea r9, [rbp + 0xa0]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x1400150cc
mov rbx, qword [rbp + 0xc8]
test rbx, rbx
je 0x140015f0d
mov edx, 4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x140015f0d
mov rdi, qword [rbx + 0x20]
test rdi, rdi
je 0x1400150c5
mov edx, 0x700
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1400150c5
mov rdx, qword [rbx]
lea rcx, [rsp + 0x48]
call fcn.14003f460
nop
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x50]
call fcn.14003f460
nop
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x68]
call fcn.14003f460
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140005860
nop
xor edx, edx
mov rcx, rdi
call fcn.1400873b0
mov rdx, rax
lea rcx, [rdi + 0x198]
lea r8, [rsp + 0x60]
call fcn.14007e850
cmp r13, 0x9d57
jne 0x140015015
mov r8b, 1
mov rdx, rdi
mov rcx, r15
call fcn.14001b5a0
jmp 0x14001508a
cmp r13, 0x9d5c
jne 0x140015100
lea rcx, [rbp + 0x88]
call fcn.14003ddd0
xor r9d, r9d
lea r8, [rbp + 0x88]
mov edx, dword [rdi + 0x544]
lea rcx, [r15 + 0x47b8]
call fcn.1400c7180
test al, al
jne 0x140015bd0
lea rcx, [rsp + 0x50]
call fcn.140005680
test al, al
jne 0x140015b89
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [rdi + 0x544]
je 0x140015085
mov dl, 1
mov rcx, qword [rbx + 0x20]
call fcn.1400886c0
test al, al
je 0x140015b10
mov esi, 1
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
mov rdi, qword [rbp + 0x1ef0]
movsxd r8, dword [rbp + 0x10]
mov edx, 0x100c
mov r9d, 2
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rbp + 0x10], rax
cmp eax, 0xffffffff
jne 0x140014f00
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
cmp r13, 0x888d
jne 0x140015135
mov r8d, esi
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076d50
mov r8d, 0x40
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076800
jmp 0x14001508a
cmp r13, 0x888e
jne 0x140015180
xor r8d, r8d
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076d50
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076790
cmp eax, 0x40
jne 0x14001508a
lea r8d, [rax - 0x20]
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076800
jmp 0x14001508a
cmp r13, 0x888b
jne 0x1400151d4
lea rcx, [rbp + 0x108]
call fcn.14001b1b0
nop
lea rax, [rbp + 0x40]
mov qword [rbp - 0x78], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b3e70
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp + 0x108]
call fcn.1400060a0
jmp 0x14001508a
lea rax, [r13 - 0x888a]
test rax, 0xfffffffffffffffd
je 0x140015a86
cmp r13, 0x9d66
jne 0x140015207
lea r8, [rsp + 0x78]
mov edx, 0x100
mov rcx, rdi
call fcn.140087aa0
jmp 0x14001508a
cmp r13, 0x9d67
jne 0x140015227
lea r8, [rsp + 0x78]
mov edx, 0x80
mov rcx, rdi
call fcn.140087aa0
jmp 0x14001508a
cmp r13, 0x9d68
jne 0x140015247
lea r8, [rsp + 0x78]
mov edx, 0x8000
mov rcx, rdi
call fcn.140087aa0
jmp 0x14001508a
cmp r13, 0x9d69
jne 0x140015267
lea r8, [rsp + 0x78]
mov edx, 0x20
mov rcx, rdi
call fcn.140087aa0
jmp 0x14001508a
cmp r13, 0x9d6a
jne 0x140015287
lea r8, [rsp + 0x78]
mov edx, 0x4000
mov rcx, rdi
call fcn.140087aa0
jmp 0x14001508a
cmp r13, 0x9d6b
jne 0x1400152a7
lea r8, [rsp + 0x78]
mov edx, 0x40
mov rcx, rdi
call fcn.140087aa0
jmp 0x14001508a
cmp r13, 0x9dfd
jne 0x140015319
lea r8, [rsp + 0x7c]
lea rdx, [rbp + 0x1ef8]
mov rcx, rdi
call fcn.140087c10
test eax, eax
jne 0x1400159bd
cmp word [rsp + 0x7c], 0xffff
jne 0x1400159bd
lea r8, [rsp + 0x7c]
mov rcx, rdi
cmp word [rbp + 0x1ef8], 0xffff
jne 0x140015300
xor edx, edx
call fcn.140087b60
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
mov edx, 0xffffffff
call fcn.140087b60
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d81
jne 0x140015373
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 0x100
mov rcx, r14
call fcn.1400a8090
lea r8, [rsp + 0x78]
mov edx, 0x100
mov rcx, rdi
call fcn.140087aa0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d7c
jne 0x1400153cd
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 0x80
mov rcx, r14
call fcn.1400a8090
lea r8, [rsp + 0x78]
mov edx, 0x80
mov rcx, rdi
call fcn.140087aa0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d7d
jne 0x140015427
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 0x8000
mov rcx, r14
call fcn.1400a8090
lea r8, [rsp + 0x78]
mov edx, 0x8000
mov rcx, rdi
call fcn.140087aa0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d7e
jne 0x140015481
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 0x20
mov rcx, r14
call fcn.1400a8090
lea r8, [rsp + 0x78]
mov edx, 0x20
mov rcx, rdi
call fcn.140087aa0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d7f
jne 0x1400154db
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 0x4000
mov rcx, r14
call fcn.1400a8090
lea r8, [rsp + 0x78]
mov edx, 0x4000
mov rcx, rdi
call fcn.140087aa0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d80
jne 0x140015535
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 0x40
mov rcx, r14
call fcn.1400a8090
lea r8, [rsp + 0x78]
mov edx, 0x40
mov rcx, rdi
call fcn.140087aa0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d7a
jne 0x140015577
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9dfc
jne 0x14001560f
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b33b0
test al, al
je 0x1400155c1
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b34e0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b34e0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b34e0
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b32b0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d8b
jne 0x140015651
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a5e80
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a6990
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d8c
jne 0x14001567e
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a5e80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d9b
jne 0x1400156c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d95
jne 0x140015705
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, esi
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d96
jne 0x14001574d
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 2
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d97
jne 0x140015795
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 3
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d98
jne 0x1400157dd
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 4
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x9d99
jne 0x140015825
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a8c70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, 5
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x8849
jne 0x14001586b
mov edx, 2
mov rcx, rdi
call fcn.1400883c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x48]
call fcn.140005690
mov r8d, 0xffffffff
jmp 0x1400159b2
cmp r13, 0x8587
jne 0x1400158b1
mov edx, 4
mov rcx, rdi
call fcn.1400883c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x48]
call fcn.140005690
mov r8d, 4
jmp 0x1400159b2
cmp r13, 0x8583
jne 0x1400158f7
mov edx, 3
mov rcx, rdi
call fcn.1400883c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x48]
call fcn.140005690
mov r8d, 3
jmp 0x1400159b2
cmp r13, 0x8584
jne 0x14001593a
mov edx, 2
mov rcx, rdi
call fcn.1400883c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x48]
call fcn.140005690
mov r8d, 2
jmp 0x1400159b2
cmp r13, 0x8585
jne 0x140015977
mov edx, esi
mov rcx, rdi
call fcn.1400883c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x48]
call fcn.140005690
mov r8d, esi
jmp 0x1400159b2
cmp r13, 0x8586
jne 0x1400159cc
xor edx, edx
mov rcx, rdi
call fcn.1400883c0
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x48]
call fcn.140005690
xor r8d, r8d
mov rdx, rax
mov rcx, r14
call fcn.1400a7050
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001508a
cmp r13, 0x857e
jne 0x1400159e7
mov edx, 4
mov rcx, rdi
call fcn.1400883c0
jmp 0x14001508a
cmp r13, 0x857f
jne 0x140015a02
mov edx, 3
mov rcx, rdi
call fcn.1400883c0
jmp 0x14001508a
cmp r13, 0x8580
jne 0x140015a1d
mov edx, 2
mov rcx, rdi
call fcn.1400883c0
jmp 0x14001508a
cmp r13, 0x8588
jne 0x140015a35
mov edx, esi
mov rcx, rdi
call fcn.1400883c0
jmp 0x14001508a
cmp r13, 0x8582
jne 0x140015a4d
xor edx, edx
mov rcx, rdi
call fcn.1400883c0
jmp 0x14001508a
cmp r13, 0x889b
jne 0x14001508a
lea rcx, [rsp + 0x60]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b4130
mov dl, 1
mov rcx, r15
call fcn.14003b870
test al, al
je 0x140015b48
jmp 0x14001508a
lea rcx, [rbp + 0x30]
call fcn.14001b1b0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x30]
call fcn.14003f3d0
xor eax, eax
cmp dword [rbp - 0x58], 0x888c
setne al
mov dword [rbp + 0x38], eax
jne 0x140015ad6
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076790
cmp eax, 0x40
jne 0x140015ad6
lea r8d, [rax - 0x20]
mov edx, dword [rbx + 0x18]
lea rcx, [0x14017d640]
call fcn.140076800
lea rax, [rbp + 0x20]
mov qword [rbp - 0x48], rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.14001b320
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b3d70
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp + 0x30]
call fcn.1400060a0
jmp 0x14001508a
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x107
mov rcx, r12
call fcn.140085d00
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x68]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x50]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x48]
call fcn.1400055a0
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x107
mov rcx, r12
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x2000010
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
jmp 0x140015b48
xor r14d, r14d
mov ebx, r14d
lea rcx, [rbp + 0x88]
call fcn.14003dda0
test rax, rax
je 0x140015c23
nop word [rax + rax]
lea rcx, [rbp + 0x250]
call fcn.1400056b0
mov rdx, rax
mov r8b, 1
lea rcx, [r15 + 0x47b8]
call fcn.1400c6ad0
inc ebx
lea rcx, [rbp + 0x88]
call fcn.14003dda0
mov ecx, ebx
cmp rcx, rax
jb 0x140015bf0
mov edx, 9
mov rcx, rdi
call fcn.140087b10
mov rax, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x88]
sub rax, rdx
sar rax, 3
movabs rbx, 0x6db6db6db6db6db7
imul rax, rbx
test rax, rax
je 0x140015ca2
mov rcx, r14
nop dword [rax + rax]
imul rcx, rcx, 0x38
add rcx, rdx
call fcn.1400056b0
xor r8d, r8d
mov rdx, rax
lea rcx, [r15 + 0x47b8]
call fcn.1400c6ca0
inc r14d
mov ecx, r14d
mov rax, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x88]
sub rax, rdx
sar rax, 3
imul rax, rbx
cmp rcx, rax
jb 0x140015c60
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x140014c37.40287
lea rcx, [rbp - 0x28]
call fcn.14001b250
nop
mov rbx, 0xffffffffffffffff
mov dword [rbp - 0x20], ebx
mov rax, qword [0x14017ad88]
mov qword [rbp - 0x18], rax
cmp edi, 0x9d9d
je 0x140015d49
lea r8, [rbp - 0x20]
mov rdx, qword [0x14017ae30]
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400bd750
test al, al
je 0x140015efd
mov r9d, 2
mov r8, rbx
mov edx, 0x100c
mov rbx, qword [rbp + 0x1ef0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov rsi, rax
cmp eax, 0xffffffff
je 0x140015ee2
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xa0], 4
mov dword [rbp + 0xa4], esi
lea r9, [rbp + 0xa0]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x140015ebd
mov rdi, qword [rbp + 0xc8]
test rdi, rdi
je 0x140015edf
mov edx, 4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x140015edf
mov rdi, qword [rdi + 0x20]
mov rcx, rdi
call fcn.14000fc60
test al, al
je 0x140015ebd
mov r12d, dword [rdi + 0x544]
cmp r13, 0x9d84
je 0x140015e20
cmp r13, 0x9d9d
jne 0x140015ea6
lea rcx, [rsp + 0x60]
call fcn.1400055e0
nop
mov rcx, rdi
call fcn.140087130
mov rbx, rax
xor edx, edx
mov rcx, rdi
call fcn.1400873b0
lea r8, [rsp + 0x60]
mov rdx, rax
mov rcx, rbx
call fcn.14007e850
lea rcx, [rsp + 0x60]
call fcn.14003ec10
cmp r13, 0x9d84
jne 0x140015e7f
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x28]
call fcn.14003f3d0
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.1400a7ae0
jmp 0x140015e95
lea rcx, [rsp + 0x60]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7cd0
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
mov rbx, qword [rbp + 0x1ef0]
mov r9d, dword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
movsxd r8, esi
mov edx, 0x100c
mov r9d, 2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
cmp eax, 0xffffffff
jne 0x140015d73
mov edi, dword [rbp - 0x58]
cmp edi, 0x9d84
je 0x140015ef2
cmp edi, 0x9d9d
jne 0x140015efd
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp - 0x28]
call fcn.1400060a0
mov rdi, qword [rbp + 0x1ef0]
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140016ea1
mov rbx, 0xffffffffffffffff
lea r9d, [rbx + 3]
mov r8, rbx
mov edx, 0x100c
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xa0], 4
mov dword [rbp + 0xa4], eax
lea r9, [rbp + 0xa0]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r13, qword [rbp + 0xc8]
test r13, r13
je 0x140016ea8
lea edx, [rbx + 5]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x140016ea8
mov r13, qword [r13 + 0x20]
mov qword [rbp - 0x78], r13
mov edx, 0x8c
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_LoadMenuW]
mov rbx, rax
mov qword [rbp - 0x48], rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rdi, rax
mov qword [rbp], rax
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [r13 + 0x544]
lea rcx, [0x14017c790]
call fcn.1400cc1e0
test rax, rax
je 0x140016073
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
cmp eax, 0x100
jg 0x14001604c
je 0x140016045
sub eax, 0x20
je 0x14001603e
sub eax, 0x20
je 0x140016037
cmp eax, 0x40
jne 0x140016073
mov edx, 0x8028
jmp 0x140016064
mov edx, 0x8023
jmp 0x140016064
mov edx, 0x8021
jmp 0x140016064
mov edx, 0x801f
jmp 0x140016064
cmp eax, 0x4000
je 0x14001605f
cmp eax, 0x8000
jne 0x140016073
lea edx, [rax + 0x20]
jmp 0x140016064
mov edx, 0x8024
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
lea r8, [rsp + 0x7c]
lea rdx, [rbp - 0x34]
mov rcx, r13
call fcn.140087c10
movzx eax, word [rsp + 0x7c]
cmp ax, 0xffff
jne 0x1400160ab
cmp word [rbp - 0x34], ax
jne 0x1400160b4
mov edx, 0x8026
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x1400160b4
test ax, ax
jne 0x1400160b4
mov word [rbp - 0x34], si
call fcn.140002e00
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140005860
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140005860
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140005860
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140005860
nop
call fcn.140002e00
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140005860
nop
mov r12d, dword [r13 + 0x544]
lea rdx, [r13 + 0x198]
test rdx, rdx
jne 0x14001612b
mov r8d, esi
jmp 0x14001613d
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x140016132
lea rcx, [rsp + 0x48]
call fcn.140005a90
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.140087140
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14003f3d0
nop
mov rcx, qword [rbp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
xor edx, edx
mov rcx, r13
call fcn.1400873b0
test rax, rax
jne 0x140016183
mov r8d, esi
jmp 0x14001619b
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140016190
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140005a90
mov rcx, r13
call fcn.140087720
test rax, rax
jne 0x1400161ba
mov r8d, esi
jmp 0x1400161cc
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1400161c1
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140005a90
mov rcx, r13
call fcn.1400880c0
mov qword [rbp + 0x40], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
call fcn.14007e850
lea rcx, [rsp + 0x40]
call fcn.14003ec10
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140041570
add rax, 0x18
mov qword [rbp - 0x80], rax
mov rax, qword [rbp - 0x80]
cmp dword [rax - 0x10], 0
jne 0x140016231
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x80]
call fcn.14003f3d0
lea rax, [rbp - 0x58]
mov qword [rbp + 0x20], rax
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140041570
add rax, 0x18
mov qword [rbp - 0x58], rax
mov r8d, r12d
lea rdx, [rbp - 0x58]
mov rcx, r14
call fcn.1400a9210
mov dword [rbp - 0x58], eax
cmp eax, 0xffffffff
je 0x1400162a2
cmp eax, 1
jg 0x140016272
mov edx, 0x9df7
jmp 0x1400162a7
cmp eax, 3
jg 0x14001627e
mov edx, 0x9dd5
jmp 0x1400162a7
cmp eax, 5
jg 0x14001628a
mov edx, 0x9dd4
jmp 0x1400162a7
cmp eax, 0xa
jg 0x140016296
mov edx, 0x9dd3
jmp 0x1400162a7
cmp eax, 0x14
jg 0x1400162b6
mov edx, 0x8534
jmp 0x1400162a7
mov edx, 0x9dd6
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
lea rax, [rbp + 0x20]
mov qword [rbp + 8], rax
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140041570
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.1400a8ea0
mov dword [rbp + 8], eax
cmp eax, 0xffffffff
je 0x140016324
cmp eax, 1
jg 0x1400162f4
mov edx, 0x9df9
jmp 0x140016329
cmp eax, 3
jg 0x140016300
mov edx, 0x9dfa
jmp 0x140016329
cmp eax, 5
jg 0x14001630c
mov edx, 0x9dc9
jmp 0x140016329
cmp eax, 0xa
jg 0x140016318
mov edx, 0x8531
jmp 0x140016329
cmp eax, 0x14
jg 0x140016338
mov edx, 0x8530
jmp 0x140016329
mov edx, 0x9dc7
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax]
cmp dword [0x14017d750], eax
jg 0x14001aaaf
cmp qword [0x14017ae08], 0
je 0x140016368
cmp qword [0x14017ae18], 0
je 0x140016368
cmp qword [0x14017ae10], 0
jne 0x14001637d
mov r8d, 2
mov rdx, rdi
mov rcx, qword [0x14017ada0]
call fcn.14003b5b0
lea rdi, [r15 + 0x60]
mov rcx, qword [0x14017ada0]
cmp dword [rcx + 0x4738], 1
jne 0x1400163bd
mov r8d, 1
mov rdi, qword [rbp]
mov rdx, rdi
call fcn.14003b5b0
mov r8d, 2
mov rdx, rdi
mov rcx, qword [0x14017ada0]
call fcn.14003b5b0
jmp 0x1400164a2
lea rcx, [rbp - 0x28]
call fcn.14001b250
nop
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400a7270
mov rdi, qword [rbp]
test al, al
jne 0x140016425
mov rax, qword [0x14017ad88]
mov qword [rbp - 0x18], rax
mov edx, 0x9d55
mov r8d, 8
mov rcx, rdi
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov edx, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rdx, rax
mov r9, qword [rbp + 0x40]
mov r8d, 0x9470
mov rcx, qword [0x14017ada0]
call fcn.1400142e0
mov edx, 1
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rdx, rax
mov r9, qword [rbp - 0x18]
mov r8d, 0x9858
mov rcx, qword [0x14017ada0]
call fcn.1400142e0
nop
lea rax, [rbp - 0x28]
mov qword [rbp + 0x20], rax
mov rcx, qword [rbp - 0x28]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
mov edx, 5
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rdi, rax
mov qword [rbp + 0x20], rax
lea r9, [rbp + 0x108]
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400ad8b0
mov byte [rbp + 0x1ef8], al
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], rsi
lea rcx, [r15 + 0x45b0]
xor r8d, r8d
lea rdx, [rbp + 0x58]
call fcn.1400c80f0
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x58]
sub rcx, rdx
sar rcx, 4
test rcx, rcx
je 0x1400165e1
mov rdi, rsi
mov esi, 0x9150
mov r14, qword [rbp + 0x20]
movzx ebx, byte [rbp + 0x1ef8]
shl rdi, 4
add rdx, rdi
lea r8, [rbp - 0x50]
lea rcx, [r15 + 0x45b0]
call fcn.1400c7fd0
lea rcx, [r15 + 0x45b0]
call fcn.1400c9980
test al, al
je 0x140016566
mov rdx, qword [rbp + 0x58]
mov rax, qword [rdi + rdx]
cmp rax, qword [0x14013a170]
jne 0x140016566
mov rax, qword [rdi + rdx + 8]
cmp rax, qword [0x14013a178]
je 0x1400165b0
mov r8d, esi
mov r9, qword [rbp - 0x50]
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_AppendMenuW]
mov rdx, qword [rbp + 0x58]
test bl, bl
je 0x1400165b0
mov rax, qword [rdi + rdx]
cmp rax, qword [rbp + 0x108]
jne 0x1400165b0
mov rax, qword [rdi + rdx + 8]
cmp rax, qword [rbp + 0x110]
jne 0x1400165b0
mov r8d, 8
mov edx, esi
mov rcx, r14
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rdx, qword [rbp + 0x58]
inc esi
lea edi, [rsi - 0x9150]
mov rax, qword [rbp + 0x60]
sub rax, rdx
sar rax, 4
cmp rdi, rax
jb 0x140016520
lea r14, [r15 + 0xdb0]
mov rbx, qword [rbp - 0x48]
mov r13, qword [rbp - 0x78]
xor esi, esi
mov rdi, qword [rbp + 0x20]
cmp byte [rbp + 0x1ef8], 0
jne 0x1400165fe
mov edx, 0x8569
mov r8d, 8
mov rcx, rdi
call qword [sym.imp.USER32.dll_CheckMenuItem]
lea rdi, [r15 + 0x60]
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400a7e80
cmp eax, 0x80
jg 0x140016664
je 0x14001665d
cmp eax, 0xffffffff
je 0x140016656
cmp eax, 0x20
je 0x14001664f
cmp eax, 0x40
jne 0x140016699
mov edx, 0x805d
jmp 0x14001668a
mov edx, 0x805b
jmp 0x14001668a
mov edx, 0x9d27
jmp 0x14001668a
mov edx, 0x8059
jmp 0x14001668a
cmp eax, 0x100
je 0x140016685
cmp eax, 0x4000
je 0x14001667e
cmp eax, 0x8000
jne 0x140016699
lea edx, [rax + 0x5a]
jmp 0x14001668a
mov edx, 0x805c
jmp 0x14001668a
mov edx, 0x8058
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
lea rax, [rbp + 0x30]
mov qword [rbp - 0x78], rax
call fcn.140002e00
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140005860
nop
mov dword [rbp + 0x38], 0xffffffff
lea rax, [rbp + 0x30]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400b3fd0
mov edx, 0x8889
mov rcx, rbx
test al, al
je 0x140016721
xor r8d, r8d
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov ecx, dword [rbp + 0x38]
test ecx, ecx
je 0x140016719
cmp ecx, 1
jne 0x14001672d
mov edx, 0x8885
jmp 0x14001671e
mov edx, 0x8886
mov rcx, rbx
mov r8d, 8
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [rbp + 0x78], 0xffffffff
lea r8, [rbp + 0x78]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076e00
test al, al
je 0x140016772
mov ecx, dword [rbp + 0x78]
test ecx, ecx
je 0x14001675e
cmp ecx, 1
jne 0x140016772
mov edx, 0x8883
jmp 0x140016763
mov edx, 0x8884
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400a51a0
test al, al
jne 0x1400167ca
mov rdx, qword [rsp + 0x48]
lea rcx, [0x14017c7d0]
call fcn.1400d5ed0
test al, al
je 0x1400167de
mov rdx, qword [rsp + 0x48]
mov rcx, r14
call fcn.1400acf70
test al, al
jne 0x1400167de
mov edx, 0x804a
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400adba0
mov edx, 0x8648
mov rcx, rbx
test al, al
je 0x140016804
mov r8d, 8
jmp 0x140016807
xor r8d, r8d
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, qword [rsp + 0x40]
xor edx, edx
mov rcx, r14
call fcn.1400b2650
mov edx, 0x881b
mov rcx, rbx
test al, al
je 0x140016842
mov r8d, 8
jmp 0x140016845
xor r8d, r8d
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov qword [rsp + 0x20], rdi
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov edx, r12d
mov rcx, r14
call fcn.1400ab500
test al, al
je 0x14001687d
mov edx, 0x9dd8
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rdx, qword [rsp + 0x50]
cmp dword [rdx - 0x10], 0
je 0x1400168ab
xor r8d, r8d
mov rcx, r14
call fcn.1400abc60
test al, al
je 0x1400168ab
mov edx, 0x9df2
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400b33b0
mov edx, 0x85e8
mov rcx, rbx
test al, al
je 0x1400168c9
xor r8d, r8d
jmp 0x1400168cf
mov r8d, 8
call qword [sym.imp.USER32.dll_CheckMenuItem]
lea rdx, [rbp + 0x7c]
mov rcx, r13
call fcn.140088330
test al, al
je 0x1400169da
mov eax, dword [rbp + 0x7c]
test eax, eax
je 0x140016920
sub eax, 1
je 0x140016919
sub eax, 1
je 0x140016912
sub eax, 1
je 0x14001690b
cmp eax, 1
jne 0x140016934
mov edx, 0x882f
jmp 0x140016925
mov edx, 0x8561
jmp 0x140016925
mov edx, 0x8554
jmp 0x140016925
mov edx, 0x8560
jmp 0x140016925
mov edx, 0x8555
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rcx, r13
call fcn.1400885d0
test eax, eax
jle 0x140016955
lea edx, [rax + 0x8696]
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov edi, esi
nop word [rax + rax]
lea edx, [rdi + 0x869e]
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
inc edi
cmp edi, 7
jb 0x140016960
xor r8d, r8d
mov edx, 0x86aa
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
lea rdi, [r15 + 0x60]
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400adf60
mov r8d, 8
mov rcx, rbx
test eax, eax
lea edx, [rax + 0x869e]
jns 0x1400169d4
mov edx, 0x86aa
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400a6f20
mov dword [rbp + 0x7c], eax
cmp eax, 3
ja 0x140016a3c
je 0x140016a35
test eax, eax
je 0x140016a2e
sub eax, 1
je 0x140016a27
cmp eax, 1
jne 0x140016a61
mov edx, 0x8556
jmp 0x140016a52
mov edx, 0x8564
jmp 0x140016a52
mov edx, 0x8557
jmp 0x140016a52
mov edx, 0x8565
jmp 0x140016a52
cmp eax, 4
je 0x140016a4d
cmp eax, 0xffffffff
jne 0x140016a61
mov edx, 0x855b
jmp 0x140016a52
mov edx, 0x855c
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [r15 + 0x4778], 1
jbe 0x140016ba0
xor r8d, r8d
mov edx, 0x8546
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
xor r8d, r8d
mov edx, 0x8547
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
cmp dword [r15 + 0x4768], 0
jne 0x140016ba0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x134], rsi
mov qword [rbp + 0x13c], rsi
mov qword [rbp + 0x144], rsi
mov qword [rbp + 0x14c], rsi
mov dword [rbp + 0x154], esi
mov qword [rbp + 0x164], rsi
mov dword [rbp + 0x16c], esi
mov dword [rbp + 0x120], 0x50
mov dword [rbp + 0x124], 0x40
mov dword [rbp + 0x130], 0x8547
mov dword [rbp + 0x160], 0x50
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x497
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov qword [rbp + 0x158], rax
lea r9, [rbp + 0x120]
xor r8d, r8d
mov edx, 0x8547
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [rbp + 0x120], 0x50
mov qword [rbp + 0x124], 0x40
mov dword [rbp + 0x130], 0x8546
mov dword [rbp + 0x160], 0x50
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x497
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov qword [rbp + 0x158], rax
lea r9, [rbp + 0x120]
xor r8d, r8d
mov edx, 0x8546
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetMenuItemInfoW]
lea rax, [rbp + 0x20]
mov qword [rbp - 0x78], rax
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140041570
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.1400a8af0
inc eax
lea rsi, [0x140000000]
cmp eax, 6
ja case.default.0x140016be4
cdqe
mov ecx, dword [rsi + rax*4 + 0x1ac4c]
add rcx, rsi
jmp rcx
mov edx, 0x9d4b
jmp 0x140016c15
mov edx, 0x9d4c
jmp 0x140016c15
mov edx, 0x9d4d
jmp 0x140016c15
mov edx, 0x9d4e
jmp 0x140016c15
mov edx, 0x9d4f
jmp 0x140016c15
mov edx, 0x9d50
jmp 0x140016c15
mov edx, 0x9d51
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
xor r8d, r8d
mov edx, 0x867c
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
xor r8d, r8d
mov edx, 0x8632
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400abfa0
test al, al
je 0x140016c6b
mov edx, 0x867c
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400abd40
test al, al
je 0x140016c90
mov edx, 0x8632
mov r8d, 8
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
xor r8d, r8d
mov rdx, qword [rbp - 0x80]
mov rcx, r14
call fcn.1400ab060
movzx r8d, al
shl r8d, 3
mov edx, 0x873b
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov r9, qword [rsp + 0x70]
mov r8, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x48]
mov rcx, r14
call fcn.1400a5cb0
movzx r8d, al
shl r8d, 3
mov edx, 0x8843
mov rcx, rbx
call qword [sym.imp.USER32.dll_CheckMenuItem]
call fcn.1400759b0
test al, al
jne 0x140016d4e
mov edx, 0x8883
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x8884
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x8889
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x8885
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0x8886
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov rdi, qword [rbp + 0x1ee8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp + 0x84]
mov r8d, dword [rbp + 0x80]
mov edx, 0x102
mov rcx, qword [rbp]
call qword [sym.imp.USER32.dll_TrackPopupMenu]
movsxd rdi, eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call qword [sym.imp.USER32.dll_DestroyMenu]
lea r8, [rbp + 0x1ef8]
xor edx, edx
mov rcx, r14
call fcn.14009c730
lea rcx, [rbp + 0x1a0]
call fcn.140008960
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008b50
lea rbx, [0x140174690]
cmp edi, 0x9150
jl 0x140017187
mov rcx, qword [rbp + 0x60]
sub rcx, qword [rbp + 0x58]
sar rcx, 4
add rcx, 0x9150
cmp rdi, rcx
ja 0x140017187
mov rcx, r14
call fcn.1400938a0
test al, al
jne 0x140016fa4
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rax, [rbp + 0x30]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x30]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
mov rdi, qword [rbp + 0x1ef0]
mov rbx, 0xffffffffffffffff
cmp byte [rbp + 0x1ee0], 0
je 0x140016f3c
mov edx, dword [r15 + 0x3edc]
mov rcx, r15
call fcn.140027850
xor r9d, r9d
mov edx, 0x113
mov r8d, 0x9090
mov rcx, qword [0x14017ada0]
mov rcx, qword [rcx + 0x728]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov edx, 0x113
mov r8d, 0x4001
mov rcx, qword [0x14017ada0]
mov rcx, qword [rcx + 0x728]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 2
mov r8, rbx
mov edx, 0x100c
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
js 0x140016f3c
movsxd r8, eax
xor r9d, r9d
mov edx, 0x1013
mov rcx, qword [r15 + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov rcx, qword [rbp + 0x100]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rbp - 8]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rbp - 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x250]
call fcn.140006030
nop
lea rcx, [rbp + 0x88]
call fcn.14003de20
nop
cmp byte [rbp + 0x51], 0
je 0x140016f90
mov byte [0x14017ab19], 0
add rsp, 0x1f98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea r9, [rbp - 0x48]
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400ad8b0
test al, al
je 0x140017043
lea eax, [rdi - 0x9150]
movsxd rcx, eax
shl rcx, 4
add rcx, qword [rbp + 0x58]
mov rax, qword [rcx]
cmp rax, qword [rbp - 0x48]
jne 0x140017043
mov rax, qword [rcx + 8]
cmp rax, qword [rbp - 0x40]
jne 0x140017043
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400ad750
test al, al
je 0x140017043
mov dl, 1
mov rcx, r15
call fcn.14003b870
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x2cd
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call fcn.1400c17c0
jmp 0x140017490
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400ad750
lea rcx, [0x140174680]
call fcn.140005110
test al, al
je 0x140017107
xor r9d, r9d
mov r8d, 0x1ce
mov rdx, qword [rbp + 0x1ee8]
lea rcx, [0x140174680]
call fcn.140005090
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rax, [rbp + 0x30]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x30]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
jmp 0x140016e8c
lea eax, [rdi - 0x9150]
movsxd r8, eax
shl r8, 4
add r8, qword [rbp + 0x58]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400ad660
movzx ebx, al
mov edx, ebx
xor edx, 1
add edx, 0x2c9
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov ecx, 0x2000000
mov r9d, InitCommonControls
test bl, bl
cmovne r9d, ecx
lea rbx, [0x140174690]
mov qword [rsp + 0x20], rbx
lea r8, str.Process_Lasso
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.1400c17c0
mov dl, 1
mov rcx, r15
call fcn.14003b870
mov rcx, qword [0x14017ada0]
cmp edi, 0x9470
jl 0x140017392
mov eax, dword [rcx + 0x4738]
add eax, 0x9470
cmp edi, eax
ja 0x140017392
cmp edi, 0x94b0
jg 0x140017392
mov rbx, qword [rbp + 0x40]
test rbx, rbx
jne 0x140017235
mov r8, qword [r15 + 0x728]
mov edx, r12d
call fcn.140013fa0
test al, al
je 0x140017316
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rcx, [rbp + 0x30]
call fcn.1400060a0
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
lea rcx, [rbp - 0x80]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x68]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x50]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x48]
call fcn.1400055a0
nop
jmp 0x140016e8c
lea ecx, [rdi - 0x9470]
mov eax, 1
shl rax, cl
test rax, rbx
je 0x140017250
not rax
and rbx, rax
jmp 0x140017253
or rbx, rax
test rbx, rbx
jne 0x1400172a6
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0xbc
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 0x30]
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x140017316
mov rcx, r13
call fcn.140087130
mov rdx, rax
mov rdi, qword [rbp + 0x1ee8]
mov rcx, rdi
call fcn.14004ad80
test al, al
je 0x140017316
mov r9d, 0xffffffff
mov r8, rbx
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
test al, al
jne 0x140017316
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x54e
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, rdi
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rax, [rbp + 0x30]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x30]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
jmp 0x140016e8c
cmp edi, 0x9858
jl 0x140017617
mov eax, dword [rcx + 0x4738]
add eax, 0x9858
cmp edi, eax
ja 0x140017617
cmp edi, 0x9898
jge 0x140017617
lea rcx, [rbp - 0x28]
call fcn.14001b250
nop
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rax
lea rax, [r15 + 0x60]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.1400a7270
mov rdx, qword [rbp - 0x18]
test al, al
cmove rdx, qword [0x14017ad88]
mov qword [rbp - 0x18], rdx
lea ecx, [rdi - 0x9858]
mov eax, 1
shl rax, cl
test rdx, rax
je 0x14001742c
xor rdx, rax
jmp 0x14001742f
or rdx, rax
mov qword [rbp - 0x18], rdx
test rdx, rdx
jne 0x14001747a
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0xbc
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x30
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
jmp 0x140017585
mov rcx, r14
call fcn.1400938a0
test al, al
jne 0x1400174f6
lea rcx, [rbp - 0x28]
call fcn.1400060a0
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rcx, [rbp + 0x30]
call fcn.1400060a0
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
lea rcx, [rbp - 0x80]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x68]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x50]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x48]
call fcn.1400055a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400055a0
jmp 0x140016e9a
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [rbp + 0x1ee8]
call fcn.14004ad80
test al, al
je 0x140017585
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7cd0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x28]
call fcn.14003f3d0
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.1400a7ae0
mov dl, 1
mov rcx, r15
call fcn.14003b870
mov r9d, dword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
test al, al
jne 0x140017585
mov r8, qword [r15 + 0x728]
mov edx, r12d
mov rcx, qword [0x14017ada0]
call fcn.140013fa0
test al, al
jne 0x140017486
lea rax, [rbp - 0x28]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp - 0x28]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rax, [rbp + 0x30]
mov qword [rbp - 0x48], rax
mov rcx, qword [rbp + 0x30]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
jmp 0x140016e8c
lea rcx, [rbp + 0x1f8]
call fcn.140008960
nop
cmp edi, 0x84d9
jg 0x140017ebc
je 0x140017e86
lea ebx, [rdi - 0x801f]
cmp ebx, 0x3e
ja case.0x1400196d1.40252
movsxd rax, ebx
movzx eax, byte [rsi + rax + 0x1ac84]
mov ecx, dword [rsi + rax*4 + 0x1ac68]
add rcx, rsi
jmp rcx
mov rbx, 0xffffffffffffffff
cmp bx, word [rbp - 0x34]
setne r8b
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076730
jmp 0x14001a947
mov rdx, qword [rsp + 0x48]
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
cmp ebx, 9
ja case.0x1400176aa.3
movsxd rax, ebx
mov ecx, dword [rsi + rax*4 + 0x1acc4]
add rcx, rsi
jmp rcx
mov dword [rsp + 0x60], 0x20
mov rbx, qword [rsp + 0x58]
mov rdi, qword [rbp + 0x1ee8]
mov r8d, dword [rsp + 0x60]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076800
test al, al
jne case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x54e
mov rcx, rbx
call fcn.140085d00
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, rdi
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp case.0x1400196d1.40252
mov dword [rsp + 0x60], 0x4000
jmp case.0x1400176aa.3
mov dword [rsp + 0x60], 0x8000
jmp case.0x1400176aa.3
mov dword [rsp + 0x60], 0x80
jmp case.0x1400176aa.3
mov dword [rsp + 0x60], 0x40
jmp case.0x1400176aa.3
mov dword [rsp + 0x60], 0x100
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x14b
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.140085d00
mov rdx, rax
mov r9d, 0x44
lea r8, str.Process_Lasso
mov rdi, qword [rbp + 0x1ee8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne case.0x1400196d1.40252
jmp 0x1400176c0
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
add edi, 0xffff7fa8
cmp edi, 5
ja case.default.0x1400177dd
movsxd rax, edi
mov ecx, dword [rsi + rax*4 + 0x1acec]
add rcx, rsi
jmp rcx
mov dword [rsp + 0x60], 0x40
jmp case.default.0x1400177dd
mov dword [rsp + 0x60], 0x20
jmp case.default.0x1400177dd
mov dword [rsp + 0x60], 0x4000
jmp case.default.0x1400177dd
mov dword [rsp + 0x60], 0x8000
jmp case.default.0x1400177dd
mov dword [rsp + 0x60], 0x80
jmp case.default.0x1400177dd
mov dword [rsp + 0x60], 0x100
lea rcx, [rsp + 0x70]
call fcn.140005690
mov rsi, rax
xor edx, edx
mov rcx, r13
call fcn.1400873b0
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140005690
mov r8, rax
lea rax, [r15 + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov edx, r12d
mov rcx, r14
call fcn.1400a7e80
mov rbx, qword [rsp + 0x60]
cmp eax, ebx
jne 0x1400178a3
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
jmp 0x140017918
cmp ebx, 0x100
jne 0x1400178eb
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
lea edx, [rbx + 0x4b]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov r9d, 0x44
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov r8d, ebx
mov rcx, r14
call fcn.1400a8090
mov r8d, ebx
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076800
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
je 0x1400179a9
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x104
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, InitCommonControls
jmp 0x14001a92d
xor edx, edx
mov rcx, r14
call fcn.14009c700
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x498
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x128
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r9, qword [rsp + 0x40]
mov r8, rbx
lea rcx, [rbp - 8]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x499
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x136
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.140005d70
lea rcx, [rbp - 0x50]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp - 8]
call fcn.140005690
mov rdx, rax
mov r9d, 0x24
mov r8, rbx
mov rbx, qword [rbp + 0x1ee8]
mov rcx, rbx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp ax, 6
jne case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a6d40
test al, al
jne 0x140017b12
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0xbf
mov rcx, rdi
call fcn.140085d00
mov r8, rax
mov r9, qword [rsp + 0x40]
mov edx, 0x400
lea rcx, [rbp + 0x1290]
call fcn.1400060f0
mov r9d, InitCommonControls
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x1290]
mov rcx, rbx
jmp 0x14001a934
mov dl, 1
mov rcx, r15
call fcn.14003b870
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0xc0
mov rcx, rdi
call fcn.140085d00
mov r8, rax
mov r9, qword [rsp + 0x40]
mov edx, 0x400
lea rcx, [rbp + 0x1290]
call fcn.1400060f0
xor r9d, r9d
jmp 0x140017af7
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rcx, rax
call fcn.140089950
test al, al
je 0x140017c4e
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400acf70
test al, al
je 0x140017bbb
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ad070
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x25e
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x1000024
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400acff0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x70]
call fcn.140005690
mov rsi, rax
lea rcx, [rsp + 0x68]
call fcn.140005690
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140005690
mov r8, rax
lea rax, [r15 + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov edx, r12d
mov rcx, r14
call fcn.1400a51a0
test al, al
jne 0x140017d17
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a6990
test al, al
jne 0x14001792a
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0xc2
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov r9, qword [rsp + 0x40]
mov r8, rax
mov edx, 0x400
lea rcx, [rbp + 0x1290]
call fcn.1400060f0
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x4000010
lea rdx, [rbp + 0x1290]
jmp 0x14001a92d
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a5e80
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a5e80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov edx, 0x700
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne case.0x1400196d1.40252
mov rcx, r13
call fcn.1400876c0
test al, al
je case.0x1400196d1.40252
mov rcx, r13
call fcn.140087130
mov r14, rax
lea r8, [rbp - 0x38]
mov rdx, rax
mov r12, qword [rbp + 0x1ee8]
mov rcx, r12
call fcn.140011360
test al, al
je case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov esi, 0x137
mov edx, esi
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
lea edx, [rsi - 0xf]
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r9, r14
mov r8, rbx
lea rcx, [rbp - 8]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, esi
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
lea edx, [rsi - 1]
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.140005d70
cmp byte [rbp - 0x38], 0
jne 0x140017e73
lea rcx, [rbp - 0x50]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp - 8]
call fcn.140005690
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x1000124
mov r8, rbx
mov rcx, r12
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
xor r8d, r8d
mov rdx, r13
mov rcx, r15
call fcn.14001b5a0
jmp case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x253
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, InitCommonControls
mov rcx, qword [r15 + 0x728]
jmp 0x14001a934
cmp edi, 0x8632
jg 0x1400186b6
je 0x140018621
lea eax, [rdi - 0x8530]
cmp eax, 0xf7
ja case.0x1400196d1.40252
cdqe
movzx eax, byte [rsi + rax + 0x1ad3c]
mov ecx, dword [rsi + rax*4 + 0x1ad04]
add rcx, rsi
jmp rcx
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
xor edx, edx
mov rcx, r14
call fcn.14009c700
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ad750
test al, al
je 0x140018259
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x2cc
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x2000040
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call fcn.1400c17c0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov qword [rbp + 0x1f0], r14
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1a0]
call fcn.14003f3d0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1f8]
call fcn.14001b520
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
lea r9, [0x140057e00]
mov r8, qword [r15 + 0x728]
mov edx, 0xdc
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b33b0
test al, al
je 0x140018043
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b34e0
mov r8b, 1
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076730
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b34e0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b34e0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b32b0
xor r8d, r8d
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076730
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov edx, 3
mov rcx, r13
call fcn.1400883c0
test al, al
jne case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x2b8
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov edx, 0x2b9
mov rcx, qword [rsp + 0x58]
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
call fcn.140085d00
mov r8, rbx
mov rcx, qword [r15 + 0x728]
mov rdx, rax
mov r9d, InitCommonControls
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov edx, 1
jmp 0x1400180cc
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
xor edx, edx
jmp 0x1400180cc
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov edx, 2
jmp 0x1400180cc
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov rdx, 0xffffffffffffffff
mov ebx, edx
add edi, 0xffff7aaa
cmp edi, 0xf
ja case.0x1400181ae.34136
movsxd rax, edi
mov ecx, dword [rsi + rax*4 + 0x1ae34]
add rcx, rsi
jmp rcx
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x4e5
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x2000040
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call fcn.1400c17c0
mov ebx, 4
jmp case.0x1400181ae.34136
mov ebx, 3
jmp case.0x1400181ae.34136
mov ebx, 2
jmp case.0x1400181ae.34136
mov ebx, 1
jmp case.0x1400181ae.34136
xor ebx, ebx
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8d, 0xffffffff
mov rcx, r14
call fcn.1400a7050
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov r8d, ebx
mov rcx, r14
call fcn.1400a7050
mov rcx, r13
cmp ebx, 0xffffffff
mov edx, ebx
jne 0x140018254
mov edx, 2
call fcn.1400883c0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.1400056b0
mov rcx, rax
call fcn.14006b7b0
test al, al
je 0x140018301
mov edx, 0x195
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
mov r9d, InitCommonControls
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp case.0x1400196d1.40252
cmp dword [rbp + 8], 0xffffffff
jg 0x140018354
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140018354
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
lea r8d, [rbx + 0x15]
jmp 0x140019ac5
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
cmp dword [rbp + 8], 0xffffffff
jg 0x140018452
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140018452
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
lea r8d, [rbx + 0xb]
jmp 0x140019ac5
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
cmp dword [rbp + 8], 0xffffffff
jg 0x140018540
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140018540
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov r9d, 0x14
mov r8d, r12d
mov rdx, rax
mov rcx, r14
call fcn.1400a93b0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x28]
call fcn.14001b250
nop
lea rcx, [r15 + 0x4758]
call fcn.140077840
mov qword [rbp - 0x18], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x28]
call fcn.14003f3d0
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.1400a7ae0
mov dl, 1
mov rcx, r15
call fcn.14003b870
mov rbx, 0xffffffffffffffff
mov r9d, ebx
mov r8, qword [rbp - 0x18]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
nop
lea rcx, [rbp - 0x28]
call fcn.1400060a0
jmp 0x14001a947
lea rcx, [r15 + 0x4758]
call fcn.140077840
mov r8, rax
mov rbx, 0xffffffffffffffff
mov r9d, ebx
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
jmp 0x14001a947
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400abd40
lea rcx, [rsp + 0x40]
test al, al
je 0x140018682
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400abec0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ac120
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400abe00
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
cmp edi, 0x87c5
jg 0x140018ad2
je 0x140018ab2
lea eax, [rdi - 0x8648]
cmp eax, 0xf3
ja case.0x1400196d1.40252
cdqe
movzx eax, byte [rsi + rax + 0x1ae90]
mov ecx, dword [rsi + rax*4 + 0x1ae74]
add rcx, rsi
jmp rcx
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea edx, [rdi - 0x8696]
mov rcx, r13
call fcn.140088550
test al, al
jne case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
lea edx, [r9 - 0x69]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov edx, 0x397
jmp 0x1400180fd
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov edx, 5
mov rcx, r13
call fcn.140088550
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rcx, r14
call fcn.1400ae090
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, ebx
mov rcx, r14
call fcn.1400ae090
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001a947
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rcx, r14
call fcn.1400ae090
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8d, ebx
mov rcx, r14
call fcn.1400ae090
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
lea r8d, [rdi - 0x869e]
mov rcx, r14
call fcn.1400ae090
test al, al
je 0x14001882e
lea edx, [rdi - 0x869e]
mov rcx, r13
call fcn.140088550
test al, al
jne 0x140019ad0
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
lea edx, [r9 - 0x68]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
lea rdx, str._s__s_n_s
lea rcx, [rbp - 0x50]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
lea edx, [r9 - 0x69]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.140005690
jmp 0x140018117
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x70]
call fcn.140005690
mov rbx, rax
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r8, rbx
mov rcx, r14
call fcn.1400adba0
lea rcx, [rsp + 0x50]
test al, al
je 0x140018906
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ade70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ade70
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ade70
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400add70
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x80]
call fcn.140005680
test al, al
je 0x140018961
mov edx, 0xc1
jmp 0x1400182c8
lea rcx, [rbp - 0x80]
call fcn.140005690
mov rdx, rax
xor r8d, r8d
mov rcx, r14
call fcn.1400ab060
test al, al
jne 0x1400189e4
lea rcx, [rbp - 0x80]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400aae20
test al, al
jne 0x14001792a
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, SetWindowSubclass
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov r8, rax
mov r9, qword [rsp + 0x50]
mov edx, 0x400
lea rcx, [rbp + 0x1290]
call fcn.1400060f0
mov qword [rsp + 0x20], rbx
mov r9d, 0x4000010
lea rdx, [rbp + 0x1290]
jmp 0x14001a92d
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400aaf70
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400aaf70
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400abfa0
lea rcx, [rsp + 0x40]
test al, al
je 0x140018a7e
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ac120
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400abec0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ac060
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x87c5
mov rcx, qword [r15 + 0x728]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400196d1.40252
cmp edi, 0x9c47
jg 0x14001935d
je 0x140019314
lea eax, [rdi - 0x87f3]
cmp eax, 0xa7
ja case.0x1400196d1.40252
cdqe
movzx eax, byte [rsi + rax + 0x1afbc]
mov ecx, dword [rsi + rax*4 + 0x1af84]
add rcx, rsi
jmp rcx
lea rcx, [rsp + 0x60]
call fcn.1400055e0
nop
lea eax, [rdi - 0x887b]
cmp eax, 6
ja case.default.0x140018b31
cdqe
mov ecx, dword [rsi + rax*4 + 0x1b064]
add rcx, rsi
jmp rcx
mov r8d, r12d
lea rdx, [0x14014772c]
lea rcx, [rsp + 0x60]
call fcn.140005d70
jmp case.default.0x140018b31
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x60]
call fcn.14003f3d0
jmp case.default.0x140018b31
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14003f3d0
jmp case.default.0x140018b31
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.14003f3d0
jmp case.default.0x140018b31
lea rcx, [rbp - 0x78]
call fcn.140006f60
lea r8, [rbp - 0x78]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076410
cmp edi, 0x887f
jne 0x140018bca
mov r9, qword [rbp - 0x70]
mov r8, r9
shr r8, 0x20
lea rdx, str._08x_08x
lea rcx, [rsp + 0x60]
call fcn.140005d70
jmp case.default.0x140018b31
cmp edi, 0x8880
jne case.default.0x140018b31
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14007d5e0
jmp case.default.0x140018b31
lea rcx, [rbp - 0x28]
call fcn.14003e0e0
nop
lea rdx, [rbp - 0x28]
mov rcx, r13
call fcn.14000a4a0
test al, al
je 0x140018c0b
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x28]
call fcn.14007d690
nop
lea rcx, [rbp - 0x28]
call fcn.14003ded0
lea rcx, [rsp + 0x60]
call fcn.140005680
test al, al
jne 0x140018c42
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rcx, rax
call fcn.140081030
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x78]
call fcn.14000df60
nop
mov qword [rbp - 0x78], r14
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x70]
call fcn.14003f3d0
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x14005f6b0]
mov r8, qword [r15 + 0x728]
mov edx, 0x1408
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
nop
lea rcx, [rbp - 0x78]
call fcn.14001b4e0
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x78]
call fcn.14000df60
nop
mov qword [rbp - 0x78], r14
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x70]
call fcn.14003f3d0
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x14005d8d0]
mov r8, qword [r15 + 0x728]
mov edx, 0x13f7
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
nop
lea rcx, [rbp - 0x78]
call fcn.14001b4e0
jmp case.0x1400196d1.40252
cmp edi, 0x8884
mov eax, 0
setne al
mov r8d, eax
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076d50
test al, al
jne 0x140018d65
mov edx, 0x545
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
lea r8, str.Process_Lasso
jmp 0x14001811a
cmp edi, 0x8884
jne 0x140018d9d
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076790
cmp eax, 0x40
jne case.0x1400196d1.40252
lea r8d, [rax - 0x20]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076800
jmp case.0x1400196d1.40252
cmp edi, 0x8883
jne case.0x1400196d1.40252
mov r8d, 0x40
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076800
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp + 0x40]
call fcn.14001b1b0
nop
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b3e70
cmp edi, 0x8889
je 0x140018e74
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.14003f3d0
cmp edi, 0x8886
mov eax, 0
setne al
mov dword [rbp + 0x48], eax
lea rax, [rbp - 0x48]
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14001b320
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b3d70
cmp dword [rbp + 0x48], 0
jne 0x140018e74
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076790
cmp eax, 0x40
jne 0x140018e74
lea r8d, [rax - 0x20]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076800
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp + 0x40]
call fcn.1400060a0
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
cmp ax, 1
jne 0x140018eb3
mov edx, 0x521
jmp 0x140018d42
lea rcx, [rsp + 0x40]
call fcn.140005690
mov r8, rax
lea rax, [r15 + 0x60]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
mov rcx, r14
call fcn.1400b2650
lea rcx, [rbp - 0x78]
test al, al
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
je 0x140018f17
lea rdx, [rsp + 0x40]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b2420
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
lea rdx, [rsp + 0x50]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b2420
lea rcx, [0x140174680]
call fcn.140005110
test al, al
je 0x140018f55
mov rdx, qword [rbp + 0x1ee8]
lea rcx, [0x140174680]
call fcn.1400050e0
jmp case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b2360
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x4e5
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x2000040
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call fcn.1400c17c0
mov edx, 4
mov rcx, r13
call fcn.1400883c0
test al, al
jne case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x2b8
mov rcx, rdi
call fcn.140085d00
mov edx, 0x2b9
mov rcx, rdi
jmp 0x140018102
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
mov rax, qword [rbp + 0x10]
mov eax, dword [rax]
cmp dword [0x14017d46c], eax
jg 0x14001a9e5
lea rcx, [0x14017d140]
call fcn.140009b20
test al, al
jne 0x140019052
mov edx, 0x50b
jmp 0x140018d42
lea rcx, [rbp - 0x28]
call fcn.14003e0e0
nop
lea rdx, [rbp - 0x28]
mov rcx, r13
call fcn.14000a4a0
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r9, [0x1400befa0]
mov r8, qword [rbp + 0x1ee8]
mov edx, 0x1417
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je 0x1400191d2
lea rdx, [rbp - 0x28]
mov rcx, r13
call fcn.14000a6f0
test al, al
jne 0x140019118
lea rcx, [rbp + 0x10]
call fcn.1400055e0
nop
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x50c
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov r9d, dword [r13 + 0x544]
mov r8, qword [rsp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.140005d70
lea rcx, [rbp + 0x10]
call fcn.140005690
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [r15 + 0x728]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x10]
call fcn.1400055a0
cmp edi, 0x884f
jne 0x1400191d2
lea rcx, [rbp + 0x178]
call fcn.14001b200
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x178]
call fcn.14003f3d0
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x180]
call fcn.14003e100
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b19d0
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b19d0
lea rax, [rbp - 0x78]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x178]
lea rcx, [rbp - 0x78]
call fcn.14001b400
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b1a50
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp + 0x178]
call fcn.14001b370
nop
lea rcx, [rbp - 0x28]
call fcn.14003ded0
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400b4130
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x80]
call fcn.140005680
test al, al
je 0x14001922b
mov edx, 0xc1
jmp 0x1400182c8
lea rcx, [rsp + 0x70]
call fcn.140005690
mov rdi, rax
lea rcx, [rbp - 0x80]
call fcn.140005690
mov rbx, rax
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov r9, rdi
mov r8, rbx
mov rcx, r14
call fcn.1400a5cb0
lea rcx, [rsp + 0x48]
test al, al
jne 0x1400192a6
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a6b70
test al, al
jne 0x14001792a
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, SetWindowSubclass
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov r9, qword [rsp + 0x50]
jmp 0x140017ce5
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a6030
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a6030
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005690
mov r8, rax
xor r9d, r9d
lea edx, [r9 + 2]
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.SHELL32.dll_SHObjectProperties]
jmp case.0x1400196d1.40252
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.1400769b0
jmp case.0x1400196d1.40252
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076860
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov rcx, qword [rsp + 0x58]
test al, al
je 0x140019353
mov edx, 0x6e
call fcn.140085d00
mov qword [rsp + 0x20], rbx
mov r9d, 0x4000040
jmp 0x14001a92a
mov edx, 0x6d
jmp 0x1400182da
cmp edi, 0x9d0a
jg 0x1400196ac
je 0x14001941c
cmp edi, 0x9c4f
jne case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005680
test al, al
je 0x1400193c0
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x106
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
lea r8, str.Process_Lasso
xor ecx, ecx
mov rdx, rax
lea r9d, [rcx + 0x10]
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp case.0x1400196d1.40252
lea rcx, [rbp + 0x10]
call fcn.1400055e0
nop
mov r8, qword [rsp + 0x50]
lea rdx, str._select__s
lea rcx, [rbp + 0x10]
call fcn.140005d70
lea rcx, [rbp + 0x10]
call fcn.140005690
mov r9, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
lea r8, str.explorer.exe
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rbp + 0x10]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rbp + 0x88]
call fcn.14003ddd0
xor r9d, r9d
lea r8, [rbp + 0x88]
mov edx, r12d
lea rcx, [r15 + 0x47b8]
call fcn.1400c7180
test al, al
je 0x1400194f0
lea rcx, [rbp + 0x88]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp + 0x88]
call fcn.14003ddc0
mov rsi, rax
cmp rbx, rax
je 0x140019493
nop dword [rax]
mov rcx, rbx
call fcn.140005690
mov rdx, rax
mov r8b, 1
lea rcx, [r15 + 0x47b8]
call fcn.1400c6ad0
add rbx, 0x38
cmp rbx, rsi
jne 0x140019470
mov r8d, 1
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.1400768c0
lea rcx, [rbp + 0x88]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp + 0x88]
call fcn.14003ddc0
mov rsi, rax
cmp rbx, rax
je case.0x1400196d1.40252
nop
xor r8d, r8d
mov rdx, qword [rbx]
lea rcx, [r15 + 0x47b8]
call fcn.1400c6ca0
add rbx, 0x38
cmp rbx, rsi
jne 0x1400194d0
jmp case.0x1400196d1.40252
mov edx, 0x700
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x14001950e
lea rdx, str.Process_no_longer_exists.
jmp 0x1400182e2
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
xor r8d, r8d
mov r14, qword [rbp + 0x1ee8]
mov rcx, r14
call fcn.140011360
test al, al
je case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov esi, 0x13a
mov edx, esi
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
lea edx, [rsi - 0x12]
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r9, qword [rsp + 0x48]
mov r8, rbx
lea rcx, [rbp - 8]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, esi
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
lea edx, [rsi - 4]
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.140005d70
lea rcx, [rbp - 0x50]
call fcn.1400056b0
mov rbx, rax
lea rcx, [rbp - 8]
call fcn.1400056b0
mov rdx, rax
lea rsi, [0x140174690]
mov qword [rsp + 0x20], rsi
mov r9d, 0x1000024
mov r8, rbx
mov rcx, r14
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005680
test al, al
je 0x140019643
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x107
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9d, 0x2000010
mov rcx, r14
jmp 0x14001a934
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dl, 1
cmp eax, dword [r13 + 0x544]
jne 0x140019664
xor r8d, r8d
mov rcx, r15
call fcn.140038780
jmp case.0x1400196d1.40252
mov rcx, r13
call fcn.1400886c0
test al, al
jne case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x107
mov rcx, rdi
call fcn.140085d00
lea r8, str.Process_Lasso
mov rcx, r14
mov rdx, rax
mov r9d, InitCommonControls
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp case.0x1400196d1.40252
lea eax, [rdi - 0x9d27]
cmp eax, 0xd3
ja case.0x1400196d1.40252
cdqe
movzx eax, byte [rsi + rax + 0x1b0d8]
mov ecx, dword [rsi + rax*4 + 0x1b080]
add rcx, rsi
jmp rcx
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x28]
call fcn.14001b250
nop
lea rcx, [rsp + 0x70]
call fcn.140005690
mov rsi, rax
lea rcx, [rsp + 0x68]
call fcn.140005690
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140005690
mov r8, rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x38], rax
lea rax, [r15 + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov edx, r12d
mov rcx, r14
call fcn.1400a7270
test al, al
jne 0x14001978f
lea r8, [rbp - 0x20]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076410
mov rbx, 0xffffffffffffffff
mov dword [rbp - 0x20], ebx
jmp 0x140019796
mov rbx, 0xffffffffffffffff
lea r8, [rbp - 0x20]
mov rdx, qword [0x14017ae30]
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400bd750
test al, al
je 0x14001980b
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x28]
call fcn.14003f3d0
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.1400a7ae0
test al, al
je 0x1400197d9
mov dl, 1
mov rcx, r15
call fcn.14003b870
mov r9d, dword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
test al, al
jne 0x14001980b
mov r8, qword [r15 + 0x728]
mov edx, r12d
mov rcx, qword [0x14017ada0]
call fcn.140013fa0
nop
lea rcx, [rbp - 0x28]
call fcn.1400060a0
jmp 0x14001a947
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x78]
call fcn.140006f60
lea r8, [rbp - 0x78]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076410
mov rax, qword [rbp - 0x70]
test rax, rax
cmove rax, qword [0x14017ad88]
mov qword [rbp - 0x70], rax
lea r8, [rbp - 0x78]
mov rdx, qword [0x14017ae30]
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400bd750
test al, al
je case.0x1400196d1.40252
mov r9d, dword [rbp - 0x78]
mov r8, qword [rbp - 0x70]
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
test al, al
jne case.0x1400196d1.40252
mov r8, qword [r15 + 0x728]
mov edx, r12d
mov rcx, qword [0x14017ada0]
call fcn.140013fa0
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7cd0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7cd0
mov dl, 1
mov rcx, r15
call fcn.14003b870
xor edx, edx
mov ecx, edx
mov rax, qword [0x14017ada0]
mov r8d, dword [rax + 0x4738]
cmp ecx, r8d
jae 0x14001992b
add rdx, rdx
or rdx, 1
inc ecx
cmp ecx, 0x40
jb 0x140019918
mov rbx, 0xffffffffffffffff
mov r9d, ebx
mov r8, rdx
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076210
jmp 0x14001a947
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
xor edx, edx
mov rcx, r14
call fcn.14009c700
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rcx, r14
call fcn.1400a8c80
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov r8d, ebx
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001a947
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
xor edx, edx
mov rcx, r14
call fcn.14009c700
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov r8, 0xffffffffffffffff
mov rcx, r14
call fcn.1400a8c80
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
lea r8d, [rdi - 0x9d4b]
mov rcx, r14
call fcn.1400a8c80
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x9d39
mov rcx, qword [r15 + 0x728]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
xor edx, edx
mov rcx, r14
call fcn.14009c700
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001a947
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
cmp dword [rbp + 8], 0xffffffff
jg 0x140019b91
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140019b91
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
lea r8d, [rbx + 6]
jmp 0x140019ac5
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
cmp dword [rbp + 8], 0xffffffff
jg 0x140019c8f
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140019c8f
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
lea r8d, [rbx + 4]
jmp 0x140019ac5
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
cmp dword [rbp + 8], 0xffffffff
jg 0x140019d8d
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140019d8d
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
mov rdx, rax
mov rcx, r14
call fcn.1400a9010
lea rax, [rbp - 0x48]
mov qword [rbp + 0x20], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14003f4f0
nop
lea r8d, [rbx + 2]
jmp 0x140019ac5
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rcx, [rsp + 0x40]
call fcn.1400056b0
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14003f460
nop
mov rbx, 0xffffffffffffffff
mov r9d, ebx
mov r8d, r12d
mov rdx, rax
mov rcx, r14
call fcn.1400a93b0
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp 0x14001a947
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
cmp dword [rbp + 8], 0xffffffff
jg 0x140019ec1
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140019ec1
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov r9d, 0xa
jmp 0x14001855d
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
cmp dword [rbp + 8], 0xffffffff
jg 0x140019f85
cmp dword [rbp - 0x58], 0xffffffff
jg 0x140019f85
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov r9d, 5
jmp 0x14001855d
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
cmp dword [rbp + 8], 0xffffffff
jg 0x14001a049
cmp dword [rbp - 0x58], 0xffffffff
jg 0x14001a049
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov r9d, 3
jmp 0x14001855d
lea rcx, [0x140174680]
call fcn.140005110
test al, al
jne 0x140018f3d
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rcx, rax
call fcn.14006b7b0
test al, al
jne 0x1400182c3
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, qword [r15 + 0x728]
call fcn.14004ad80
test al, al
je case.0x1400196d1.40252
cmp dword [rbp + 8], 0xffffffff
jg 0x14001a10d
cmp dword [rbp - 0x58], 0xffffffff
jg 0x14001a10d
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x191
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, 0x1000034
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov r9d, 1
jmp 0x14001855d
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
lea rcx, [rsp + 0x40]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400a7fb0
mov r8d, 0x20
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076800
mov dl, 1
mov rcx, r15
call fcn.14003b870
jmp case.0x1400196d1.40252
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005680
test al, al
je 0x14001a1da
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0xc1
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov r9d, InitCommonControls
jmp 0x14001a92d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14003f4f0
nop
lea rcx, [rsp + 0x60]
call fcn.14003ec10
lea rcx, [rsp + 0x60]
call fcn.1400056b0
mov rcx, rax
lea rdx, str.svchost.exe
call fcn.140006220
test rax, rax
je 0x14001a25b
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x1df
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x68]
call fcn.140005690
mov rcx, rax
lea rdx, [rbp + 0x100]
call fcn.14007ee40
lea rcx, [rsp + 0x60]
call fcn.140005690
mov rdx, rax
xor r8d, r8d
mov rcx, r14
call fcn.1400abc60
test al, al
jne 0x14001a337
lea rcx, [0x140174680]
call fcn.140005110
test al, al
je 0x14001a2c7
mov rdx, qword [rbp + 0x1ee8]
lea rcx, [0x140174680]
call fcn.1400050e0
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
jmp case.0x1400196d1.40252
call fcn.1400bcd30
test al, al
je 0x14001a2f3
mov rdx, qword [rbp + 0x1ee8]
mov rcx, qword [0x14017ada0]
call fcn.14003bb30
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rbp + 0x100]
call fcn.1400056b0
mov rbx, rax
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rdx, rax
xor r9d, r9d
mov r8, rbx
mov rcx, r14
call fcn.1400ab8f0
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rsp + 0x60]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x60]
call fcn.140005690
mov rdx, rax
xor r8d, r8d
mov rcx, r14
call fcn.1400abb60
test al, al
jne 0x14001a31d
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x1ba
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov r8, rax
mov r9, qword [rsp + 0x50]
mov edx, 0x400
lea rcx, [rbp + 0x1290]
call fcn.1400060f0
mov qword [rsp + 0x20], rbx
mov r9d, 0x4000010
lea r8, str.Process_Lasso
lea rdx, [rbp + 0x1290]
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
jmp 0x14001a328
mov rcx, r14
call fcn.1400938a0
test al, al
je case.0x1400196d1.40252
lea rcx, [rbp - 0x80]
call fcn.140005680
test al, al
je 0x14001a3d9
mov edx, 0xc1
jmp 0x1400182c8
xor edx, edx
mov rcx, r14
call fcn.14009c700
lea rdx, [rbp - 0x80]
lea rcx, [rbp]
call fcn.14003f4f0
nop
lea rcx, [rbp]
call fcn.14003ec10
lea rcx, [rbp]
call fcn.1400056b0
mov rcx, rax
lea rdx, str.svchost.exe
call fcn.140006220
test rax, rax
je 0x14001a45f
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x1df
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
mov r9d, InitCommonControls
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140005690
mov r8, rax
lea rax, [r15 + 0x60]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov edx, r12d
mov rcx, r14
call fcn.1400ab500
test al, al
jne 0x14001a5b8
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ab250
test al, al
jne 0x14001a4d5
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, SetWindowSubclass
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov r9, qword [rbp - 0x80]
jmp 0x14001a60a
lea rcx, [r15 + 0x4758]
call fcn.140077c80
test al, al
je 0x14001a59f
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x2a5
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x1000024
lea r8, str.Process_Lasso
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne 0x14001a59f
lea rcx, [rbp + 0x20]
call fcn.14001b1b0
nop
lea rax, [rbp - 0x78]
mov qword [rbp - 0x48], rax
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x78]
call fcn.14003f4f0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b3e70
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x20]
call fcn.14003f3d0
mov dword [rbp + 0x28], 0
lea rax, [rbp + 0x10]
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x10]
call fcn.14001b320
nop
mov rdx, rax
mov rcx, r14
call fcn.1400b3d70
nop
lea rcx, [rbp + 0x20]
call fcn.1400060a0
mov dl, 1
mov rcx, r15
call fcn.14003b870
nop
lea rcx, [rbp]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rbp - 0x80]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ab330
test al, al
jne 0x14001a59f
lea rcx, [rsp + 0x48]
call fcn.140005690
mov rdx, rax
mov rcx, r14
call fcn.1400ab330
test al, al
jne 0x14001a59f
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, RemoveWindowSubclass
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov r9, qword [rsp + 0x48]
mov r8, rax
mov edx, 0x400
lea rcx, [rbp + 0x1290]
call fcn.1400060f0
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x4000010
lea r8, str.Process_Lasso
lea rdx, [rbp + 0x1290]
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
jmp 0x14001a5aa
lea rcx, [rsp + 0x48]
call fcn.140005680
test al, al
jne case.0x1400196d1.40252
lea rcx, [rbp + 0x10]
call fcn.1400055e0
nop
mov r8, qword [rsp + 0x48]
lea rdx, str.https:__www.google.com_search_q_s
lea rcx, [rbp + 0x10]
call fcn.140005d70
lea rcx, [rbp + 0x10]
call fcn.140005690
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call fcn.14007ef60
nop
lea rcx, [rbp + 0x10]
call fcn.1400055a0
jmp case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005680
mov r9d, 0x3ff
test al, al
je 0x14001a6db
mov edx, 0x106
jmp 0x1400182ce
lea r8, [rbp + 0xa90]
mov edx, 0x139
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x128
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r9, qword [rsp + 0x50]
mov r8, rbx
lea rcx, [rbp - 8]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x139
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x136
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.140005d70
lea rcx, [rbp - 0x50]
call fcn.1400056b0
mov rbx, rax
lea rcx, [rbp - 8]
call fcn.1400056b0
mov rdx, rax
lea rsi, [0x140174690]
mov qword [rsp + 0x20], rsi
mov r9d, 0x1000024
mov r8, rbx
mov rbx, qword [rbp + 0x1ee8]
mov rcx, rbx
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
lea rcx, [rsp + 0x50]
call fcn.140005690
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov rcx, rdi
test eax, eax
jne 0x14001a7fe
mov edx, 0x114
call fcn.140085d00
mov rdx, rax
mov qword [rsp + 0x20], rsi
mov r9d, 0x2000030
mov rcx, rbx
jmp 0x14001a934
mov edx, 0x115
jmp 0x14001a7e3
cmp dword [rbp + 8], 0xffffffff
jne 0x14001a8ff
cmp dword [rbp - 0x58], 0xffffffff
jne 0x14001a8ff
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x188
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x128
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r9, qword [rsp + 0x48]
mov r8, rbx
lea rcx, [rbp - 8]
call fcn.140005d70
mov r9d, 0x3ff
lea r8, [rbp + 0xa90]
mov edx, 0x188
mov rcx, rdi
call fcn.140085d00
mov rbx, rax
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x136
mov rcx, rdi
call fcn.140085d00
mov rdx, rax
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.140005d70
lea rcx, [rbp - 8]
call fcn.140005690
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.140005690
mov rdx, rax
lea rax, [0x140174690]
mov qword [rsp + 0x20], rax
mov r9d, 0x1000024
mov r8, rbx
mov rcx, qword [rbp + 0x1ee8]
call fcn.1400c17c0
cmp ax, 6
jne case.0x1400196d1.40252
mov edx, r12d
lea rcx, [0x14017d640]
call fcn.140076940
jmp case.0x1400196d1.40252
mov r9d, 0x3ff
lea r8, [rbp + 0x290]
mov edx, 0x192
mov rcx, qword [rsp + 0x58]
call fcn.140085d00
mov qword [rsp + 0x20], 0
mov r9d, 0x30
mov rdx, rax
mov rcx, qword [rbp + 0x1ee8]
lea r8, str.Process_Lasso
call fcn.1400c17c0
mov rbx, 0xffffffffffffffff
lea rcx, [rbp + 0x1f8]
call fcn.140008a90
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008a90
nop
lea rax, [rbp + 0x30]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x30]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
lea rcx, [rbp + 0x58]
call fcn.14003ded0
nop
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.140002d70
mov rdi, qword [rbp + 0x1ef0]
jmp 0x140016ea8
lea rcx, [0x14017d46c]
call fcn.1400feccc
cmp dword [0x14017d46c], 0xffffffff
jne 0x140019038
lea rcx, [0x14017d140]
call fcn.140009a10
lea rcx, [0x140136dd0]
call fcn.1400ff03c
nop
lea rcx, [0x14017d46c]
call fcn.1400fec60
jmp 0x140019038
lea rcx, [0x14017d710]
call fcn.1400feccc
cmp dword [0x14017d710], 0xffffffff
jne 0x140014522
lea rcx, [0x14017d640]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, [0x14017d640]
call fcn.1400761a0
nop
lea rcx, [0x14017d710]
call fcn.1400fec60
jmp 0x140014522
lea rcx, [0x14017d090]
call fcn.1400feccc
cmp dword [0x14017d090], 0xffffffff
jne 0x14001494e
lea rcx, [0x14017d258]
call fcn.140009a10
lea rcx, [0x140136e30]
call fcn.1400ff03c
nop
lea rcx, [0x14017d090]
call fcn.1400fec60
jmp 0x14001494e
lea rcx, [0x14017d750]
call fcn.1400feccc
cmp dword [0x14017d750], 0xffffffff
jne 0x14001634a
lea rcx, [0x14017d390]
call fcn.140009a10
lea rcx, [0x140136e00]
call fcn.1400ff03c
nop
lea rcx, [0x14017d750]
call fcn.1400fec60
jmp 0x14001634a