Function at 0x180068850
Capabilities:
Log keystrokes via polling
Open clipboard
Read clipboard data

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe8]
sub rsp, 0x1e8
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov rax, qword [0x18032a080]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r12, r9
mov rsi, r8
mov r13d, edx
mov rdi, rcx
xor r14d, r14d
mov ebx, r14d
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x3c], 1
cmp edx, 0x40b
ja 0x180068ceb
je 0x180068c81
cmp edx, 0x112
ja 0x180068a78
je 0x180068a4d
mov eax, edx
sub eax, 2
je 0x180068a40
sub eax, 1
je 0x1800689a5
sub eax, 2
je 0x1800689a5
sub eax, 0xb
je 0x180068960
cmp eax, 0xf0
jne case.0x180068d28.1132
lea ecx, [r14 + 0x11]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns case.0x180068d28.1132
cmp rsi, 0x56
jne case.0x180068d28.1132
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x18006991f
lea ecx, [rsi - 0x47]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x18006893a
call qword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x18006991f
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetClipboardData]
test rax, rax
je 0x180068955
mov rdx, rax
mov rcx, rdi
call fcn.180067040
call qword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x18006991f
mov word [rcx + 0x7608], 1
mov edx, 0x78
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov edx, 0x68
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov edx, 0x6a
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x18006991f
mov rcx, qword [rcx + 0x75e0]
test rcx, rcx
je 0x1800689be
cmp byte [rcx + 0x938], bl
je 0x1800689be
call fcn.1800b99b0
mov rcx, qword [rdi + 8]
call fcn.1800a8f20
mov rbx, rax
mov rcx, rax
call fcn.18002ad20
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x180068d28.1132
mov rcx, rbx
call fcn.18002ad20
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je case.0x180068d28.1132
mov rcx, rbx
call fcn.18002ad20
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x3c], r14d
mov r9, r12
mov r8, rsi
mov edx, r13d
mov rcx, rdi
call fcn.1801ef778
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.18022a7d0
add rsp, 0x1e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x18006991f
mov rax, qword [rcx]
lea rcx, [rsp + 0x3c]
mov qword [rsp + 0x20], rcx
mov edx, 0x112
mov rcx, rdi
call qword [rax + 0xc8]
mov r14, rax
mov rcx, rdi
call fcn.1800716b0
jmp 0x18006991f
mov eax, r13d
sub eax, 0x113
je 0x180068c6a
sub eax, 0xed
je 0x180068ae2
sub eax, 1
je 0x180068ad8
sub eax, 0x32
je 0x180068abe
cmp eax, 0xad
jne case.0x180068d28.1132
mov rax, qword [rcx]
movzx edx, si
call qword [rax + 0x120]
lea rcx, [rdi + 0x58]
mov edx, eax
call fcn.1801e0df4
jmp case.0x180068d28.1132
xor edx, edx
call fcn.18006afe0
mov rdx, rsi
mov rcx, rdi
call fcn.180067040
mov r14, rax
jmp 0x18006991f
call fcn.1800716b0
jmp case.0x180068d28.1132
movsx eax, r12w
mov dword [rsp + 0x40], eax
mov rax, r12
shr rax, 0x10
cwde
mov dword [rsp + 0x44], eax
call fcn.180067940
mov dword [rsp + 0x4c], eax
cmp eax, 1
ja 0x180068c17
lea rcx, [rdi + 0x58]
mov rdx, qword [rsp + 0x40]
call fcn.1801db714
mov r15, rax
test rax, rax
je 0x180068c17
mov qword [rsp + 0x60], r14
mov byte [rsp + 0x30], bl
mov eax, dword [rsp + 0x4c]
test eax, eax
jne 0x180068c29
mov r8, qword [r15]
lea rdx, [rbp - 0x60]
mov rcx, r15
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov ebx, 1
mov dword [rsp + 0x48], ebx
lea rdx, str.pdf2wordBtnTip
mov rcx, rax
call fcn.1801e3158
test al, al
jne 0x180068c60
mov byte [rsp + 0x38], 0
test bl, 2
je 0x180068b81
and ebx, 0xfffffffd
mov dword [rsp + 0x48], ebx
lea rcx, [rbp + 0x40]
call fcn.1801e3048
nop
test bl, 1
je 0x180068b96
and ebx, 0xfffffffe
mov dword [rsp + 0x48], ebx
lea rcx, [rbp - 0x60]
call fcn.1801e3048
cmp byte [rsp + 0x38], 0
je 0x180068bf8
mov byte [rsp + 0x30], 1
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0xb8]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov rdx, qword [r15]
mov rcx, r15
call qword [rdx + 0xa0]
mov eax, dword [rax]
add eax, ebx
mov dword [rsp + 0x4c], eax
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0xa0]
mov ecx, dword [rax + 4]
sub ecx, 5
mov dword [rsp + 0x50], ecx
mov rax, qword [rsp + 0x4c]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x60]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rcx, qword [rdi + 8]
call fcn.1800a8f20
xor r9d, r9d
movzx r8d, byte [rsp + 0x30]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.1800a91b0
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.180067cf0
jmp case.0x180068d28.1132
cmp eax, 1
jne 0x180068b66
mov rax, qword [r15]
lea rdx, [rbp + 0x40]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov ebx, 2
mov dword [rsp + 0x48], ebx
lea rdx, str.pdf2excelBtnTip
mov rcx, rax
call fcn.1801e3158
test al, al
je 0x180068b66
mov byte [rsp + 0x38], 1
jmp 0x180068b6b
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
call fcn.180068020
mov r14, rax
jmp 0x18006991f
mov edx, esi
call fcn.1800673e0
cmp esi, 0x15
jne 0x180068cd8
lea r8, [rdi + 0x2f30]
mov rdx, qword [rdi + 8]
call fcn.1800199a0
mov byte [rdi + 0x26a0], 1
call fcn.18019dc90
mov rcx, rax
mov r8b, 1
lea edx, [rsi - 0x13]
call fcn.18019dfb0
test al, al
je 0x18006991f
mov rax, qword [rdi + 0x2300]
lea rcx, [rdi + 0x2300]
call qword [rax + 0xa8]
jmp 0x18006991f
mov r8, rsi
mov rcx, rdi
call fcn.180069aa0
mov r14, rax
jmp 0x18006991f
cmp r13d, 0x590
ja 0x180069896
je 0x18006988c
lea eax, [rdx - 0x469]
cmp eax, 0xcd
ja case.0x180068d28.1132
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x699c4]
mov ecx, dword [rdx + rax*4 + 0x69934]
add rcx, rdx
jmp rcx
test rsi, rsi
je case.0x180068d28.1140
movzx edx, r12w
mov rax, r12
shr rax, 0x10
movzx ecx, ax
imul eax, edx, 0x64
xor edx, edx
div ecx
mov ebx, eax
mov edx, eax
mov rcx, qword [r8 + 0x1d0]
call fcn.1801e9704
lea rcx, [rbp + 0x40]
call fcn.1801e2f30
nop
mov r8d, ebx
lea rdx, str._d__
lea rcx, [rbp + 0x40]
call fcn.1801e3720
mov rax, qword [rsi + 0x1d8]
mov rbx, qword [rax]
lea rcx, [rbp + 0x40]
call fcn.180087940
mov rdx, rax
mov rcx, qword [rsi + 0x1d8]
call qword [rbx + 0x58]
nop
lea rcx, [rbp + 0x40]
call fcn.1801e3048
jmp 0x18006991f
mov r8, r12
mov rdx, rsi
mov rcx, rdi
call fcn.18006a510
jmp 0x18006991f
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
xor r8d, r8d
xor edx, edx
call fcn.180071fa0
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x60]
mov edx, esi
mov rcx, rdi
call fcn.18006ca20
test al, al
jne 0x180068e3a
mov rax, qword [rsp + 0x60]
mov r15, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x60]
mov qword [rax + 8], rax
mov qword [rsp + 0x68], r14
cmp r15, qword [rsp + 0x60]
je 0x180068e26
mov rbx, qword [r15]
lea rcx, [r15 + 0x10]
call fcn.180007090
mov edx, gethostbyname
mov rcx, r15
call fcn.18022acec
mov r15, rbx
cmp rbx, qword [rsp + 0x60]
jne 0x180068e03
mov edx, gethostbyname
mov rcx, qword [rsp + 0x60]
call fcn.18022acec
jmp 0x18006991f
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9, r8
mov r8, qword [r8]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.180072950
mov rcx, rdi
call fcn.180067940
lea r8, [rsp + 0x60]
mov edx, eax
mov rcx, rdi
call fcn.18006eb30
nop
mov rax, qword [rsp + 0x60]
mov r15, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x60]
mov qword [rax + 8], rax
mov qword [rsp + 0x68], r14
cmp r15, qword [rsp + 0x60]
je 0x180068ed3
nop word [rax + rax]
mov rbx, qword [r15]
lea rcx, [r15 + 0x10]
call fcn.180007090
mov edx, gethostbyname
mov rcx, r15
call fcn.18022acec
mov r15, rbx
cmp rbx, qword [rsp + 0x60]
jne 0x180068eb0
mov edx, gethostbyname
mov rcx, qword [rsp + 0x60]
call fcn.18022acec
jmp 0x18006991f
mov edx, esi
mov rcx, rdi
call fcn.18006e8b0
jmp 0x18006991f
mov r8, r12
mov rdx, rsi
mov rcx, rdi
call fcn.18006b0e0
jmp 0x18006991f
mov r8, r12
mov rdx, rsi
mov rcx, rdi
call fcn.18006b3e0
jmp 0x18006991f
mov rcx, rdi
call fcn.18006bc50
mov rcx, rdi
call fcn.18006b9a0
jmp 0x18006991f
lea rcx, [rdi + 0x1f60]
mov edx, esi
call fcn.1800d4250
jmp 0x18006991f
lea rcx, [rdi + 0x1f60]
mov edx, esi
call fcn.1800d43e0
jmp 0x18006991f
mov rcx, qword [rdi + 0x75e0]
test rcx, rcx
je 0x180068f7b
cmp byte [rcx + 0x938], bl
je 0x180068f7b
mov byte [rcx + 0x938], bl
mov r8b, 1
xor edx, edx
call fcn.1801e2bf4
lea rdx, str.TabLayoutUserInfo
lea rcx, [rdi + 0x58]
call fcn.1801db704
mov rbx, rax
test rax, rax
je 0x180068fb4
mov r8, qword [rax]
mov edx, WSAStartup
mov rcx, rax
call qword [r8 + 0x108]
mov r8, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [r8 + 0x410]
lea rdx, str.userAvatar
lea rcx, [rdi + 0x58]
call fcn.1801db704
test rax, rax
je 0x180068fd8
lea rdx, str.pngloginuserAvatar.png
mov rcx, rax
call fcn.1801e6b24
mov rcx, rdi
call fcn.18006b9a0
jmp 0x18006991f
xor r8d, r8d
mov dl, 1
mov rcx, qword [rdi + 0x75b8]
call fcn.1800ee300
jmp 0x18006991f
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x75b8]
call fcn.1800ee300
jmp 0x18006991f
mov r8d, 7
mov dl, 1
mov rcx, qword [rdi + 0x75b8]
call fcn.1800ee300
jmp 0x18006991f
mov rcx, qword [rdi + 0x75e0]
test rcx, rcx
je case.0x180068d28.1140
cmp byte [rcx + 0x938], bl
je case.0x180068d28.1140
mov byte [rcx + 0x938], bl
mov r8b, 1
xor edx, edx
call fcn.1801e2bf4
jmp 0x18006991f
lea rdx, str.pdfcwOP
lea rcx, [rdi + 0x58]
call fcn.1801db704
mov rbx, rax
test rax, rax
je 0x180069094
mov r9, qword [rax]
mov r8b, 1
movzx edx, r8b
mov rcx, rax
call qword [r9 + 0x380]
mov edx, 0xffffffff
mov rcx, rbx
call fcn.1801e9a24
lea rdx, str.pdfopBtnPDFSplitPage
lea rcx, [rdi + 0x58]
call fcn.1801db704
mov rbx, rax
test rax, rax
je 0x1800690cd
mov r9, qword [rax]
mov r8b, 1
movzx edx, r8b
mov rcx, rax
call qword [r9 + 0x380]
mov edx, 0xffffffff
mov rcx, rbx
call fcn.1801e9a24
test rsi, rsi
je 0x18006991f
mov rax, qword [rsi + 8]
cmp qword [rsi], rax
je 0x18006991f
lea rcx, [rdi + 0x1b68]
mov rdx, rsi
call fcn.1800d6060
jmp 0x18006991f
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x180291a20]
movdqu xmmword [rsp + 0x70], xmm1
mov word [rsp + 0x60], r14w
mov r8d, 6
lea rdx, str.unpaid
lea rcx, [rsp + 0x60]
call fcn.180007110
nop
mov rbx, qword [rdi + 0x75b8]
lea r15, vtable.RC::IPostResponse.0
mov qword [rbp - 0x60], r15
lea rax, vtable.RC::RCQueryUnionSvip.0
mov qword [rbp - 0x60], rax
lea rcx, [rbp - 0x58]
call fcn.18011e920
nop
mov qword [rbp + 0x18], rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.180007b10
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1800691ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800691a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800691a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18022acec
movdqa xmm0, xmmword [0x180291a20]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r14w
mov rax, qword [rdi + 0x75b8]
cmp byte [rax + 0x722], 0
je 0x1800691fb
cmp byte [rax + 0x119], 0
je 0x1800691fb
cmp byte [rax + 0x725], 0
jne 0x1800691fb
lea rcx, [rbp - 0x60]
call fcn.180038fd0
test al, al
je 0x1800691fb
mov rcx, qword [rdi + 0x75b8]
call fcn.1800c44c0
nop
lea rax, vtable.RC::RCQueryUnionSvip.0
mov qword [rbp - 0x60], rax
lea rcx, [rbp + 0x20]
call fcn.180007090
nop
lea rcx, [rbp - 0x58]
call fcn.18011e9a0
nop
mov qword [rbp - 0x60], r15
mov rcx, rdi
call fcn.18006f910
jmp 0x18006991f
mov edx, 0x6a
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r14w
mov r8d, 5
lea rdx, str.honor
lea rcx, [rsp + 0x60]
call fcn.180007110
nop
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, qword [rdi + 0x75b8]
call fcn.180028270
mov dword [rdi + 0x75c0], 9
mov dword [rdi + 0x75c4], 0x14
xor r9d, r9d
lea edx, [r9 + 0x6a]
mov r8d, 0x7d0
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
jmp 0x18006991f
mov rcx, rdi
call fcn.1800672e0
jmp 0x18006991f
test rsi, rsi
jne 0x1800692cd
mov rcx, rdi
call fcn.180071740
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm1
mov byte [rsp + 0x60], bl
mov r8d, 5
lea rdx, str.pzh24
lea rcx, [rsp + 0x60]
call fcn.180007300
nop
mov rbx, r14
cmp esi, 1
setne bl
call fcn.18018d8c0
mov rcx, rax
mov r8, rbx
lea rdx, [rsp + 0x60]
call fcn.18018dd10
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18006935f
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006935a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006935a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18022acec
movdqa xmm0, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rax, qword [rdi + 0x75b8]
cmp byte [rax + 0x119], 0
je 0x180069427
cmp byte [rax + 0x725], 0
je 0x180069427
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm1
mov byte [rsp + 0x60], 0
mov r8d, 5
lea rdx, str.pzh30
lea rcx, [rsp + 0x60]
call fcn.180007300
nop
call fcn.18018d8c0
mov rcx, rax
mov r8d, 1
lea rdx, [rsp + 0x60]
call fcn.18018dd10
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800694b4
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800694af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800694af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm1
mov byte [rsp + 0x60], 0
mov r8d, 5
lea rdx, str.pzh29
lea rcx, [rsp + 0x60]
call fcn.180007300
nop
call fcn.18018d8c0
mov rcx, rax
mov r8d, 1
lea rdx, [rsp + 0x60]
call fcn.18018dd10
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800694b4
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800694af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800694af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18022acec
movdqa xmm0, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
jmp 0x18006991f
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm1
mov byte [rsp + 0x60], bl
mov r8d, 5
lea rdx, str.pzh25
lea rcx, [rsp + 0x60]
call fcn.180007300
nop
mov rbx, r14
cmp esi, 1
setne bl
call fcn.18018d8c0
mov rcx, rax
mov r8, rbx
lea rdx, [rsp + 0x60]
call fcn.18018dd10
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800694b4
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800694af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800694af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.180007b10
nop
mov rdx, r12
lea rcx, [rsp + 0x60]
call fcn.180007b10
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
call fcn.18006beb0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1800695d0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800695cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800695cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18022acec
movdqa xmm0, xmmword [0x180291a20]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r14w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x180069627
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180069622
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180069622
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18022acec
movdqa xmm0, xmmword [0x180291a20]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r14w
jmp 0x18006991f
mov rcx, qword [rdi + 0x75b8]
cmp byte [rcx + 0x118], bl
je 0x1800696f2
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm1
mov byte [rsp + 0x60], bl
mov r8d, 6
lea rdx, str.pzh315
lea rcx, [rsp + 0x60]
call fcn.180007300
nop
call fcn.18018d8c0
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.18018dc00
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800696d7
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800696d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800696d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18022acec
movdqa xmm0, xmmword [0x180291a30]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov r8b, 1
jmp 0x1800697c9
mov rdx, qword [rcx + 0x1d0]
call fcn.1800cc520
jmp 0x18006991f
mov rcx, rdi
call fcn.18006fc80
jmp 0x18006991f
mov rcx, rdi
call fcn.18006feb0
jmp 0x18006991f
lea rcx, [rdi + 0x58]
lea rdx, str.pdf2wordBtnTip
call fcn.1801db704
mov r15, rax
test rax, rax
je 0x18006991f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xb8]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov rdx, qword [r15]
mov rcx, r15
call qword [rdx + 0xa0]
mov eax, dword [rax]
add eax, ebx
mov dword [rsp + 0x40], eax
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0xa0]
mov ecx, dword [rax + 4]
sub ecx, 5
mov dword [rsp + 0x44], ecx
lea rdx, [rsp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rcx, qword [rdi + 8]
call fcn.1800a8f20
mov r9b, 1
movzx r8d, r9b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1800a91b0
jmp 0x18006991f
mov rcx, rdi
call fcn.180071010
jmp 0x18006991f
mov r8, r12
mov edx, esi
mov rcx, rdi
call fcn.180070e10
jmp 0x18006991f
xor r8d, r8d
mov rdx, qword [rdi + 8]
mov rcx, qword [rdi + 0x75b8]
call fcn.1800823d0
jmp 0x18006991f
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rdx, [0x180271e58]
lea rcx, [rbp - 0x80]
call fcn.180006f30
nop
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call fcn.180067ac0
mov rcx, rdi
call fcn.180071740
jmp 0x18006991f
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rdx, [0x180271e68]
lea rcx, [rbp - 0x80]
call fcn.180006f30
nop
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call fcn.180067ac0
jmp 0x18006991f
mov rdx, qword [rdi + 8]
mov rcx, qword [rdi + 0x75b8]
call fcn.180086060
jmp 0x18006991f
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rdx, [0x180271e80]
lea rcx, [rbp - 0x80]
call fcn.180006f30
nop
jmp 0x1800697f8
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi + 8]
mov rcx, qword [rdi + 0x75b8]
call fcn.1800c73c0
jmp 0x18006991f
call fcn.18019cea0
jmp 0x18006991f
mov eax, r13d
sub eax, 0x591
je 0x18006991a
sub eax, 3
je 0x180069913
sub eax, 1
je 0x1800698d1
sub eax, 0x5f
je 0x1800698c7
cmp eax, 0x5e71
jne case.0x180068d28.1132
cmp esi, 1
sete dl
call fcn.18006afe0
jmp 0x18006991f
mov edx, r12d
call fcn.18006c300
jmp 0x18006991f
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
mov r8d, 0x16
lea rdx, [0x180271e28]
lea rcx, [rbp - 0x80]
call fcn.180007110
nop
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.180067ac0
jmp 0x18006991f
call fcn.180069e00
jmp 0x18006991f
call fcn.18019ccc0
cmp dword [rsp + 0x3c], 0
je 0x180068a0c
mov rax, r14
jmp 0x180068a1d