Function at 0x140094834
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x218
xor edi, edi
mov r12, r9
mov rsi, rcx
mov dword [rsp + 0x88], edi
cmp r9, rdi
jne 0x140094869
mov r12, qword [rcx + 0x40]
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x268], rdx
call fcn.140044ef4
mov rax, qword [rsp + 0x268]
lea rcx, [rsp + 0x70]
lea rbp, [rsp + 0x70]
mov rbx, rax
mov word [rsp + 0x70], di
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x68], rbp
jmp 0x1400948b2
mov edx, 0x3d
cmp dx, cx
je 0x1400948bc
add rax, 2
movzx ecx, word [rax]
cmp cx, di
jne 0x1400948a4
jmp 0x1400948c8
lea rbp, [rax + 2]
mov word [rax], di
mov qword [rsp + 0x68], rbp
mov rcx, rbx
call fcn.140012d94
mov qword [rsp + 0x78], rdi
cmp byte [rsi + 0xd2], dil
jne 0x140094904
test byte [rsi + 0xd], 0xf
jne 0x140094904
lea r8, [rsp + 0x78]
mov r13d, 1
xor r9d, r9d
mov rdx, rbx
mov rcx, rsi
mov byte [rsp + 0x20], r13b
call fcn.1400564f8
jmp 0x140094922
lea r8, [rsp + 0x78]
mov r13d, 1
xor r9d, r9d
mov rdx, rbx
mov rcx, rsi
mov byte [rsp + 0x20], r13b
call fcn.140054c4c
lea rcx, [rsp + 0x90]
call fcn.14004be6c
lea r8, [rsp + 0x90]
xor r9d, r9d
mov rdx, rbp
mov rcx, rsi
mov byte [rsp + 0x20], r13b
call fcn.140056690
mov r11, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x78]
mov ebp, 0x40
mov qword [rsp + 0x40], r11
cmp word [rbx], bp
jne 0x140094b99
lea rdx, str._DeskTopFresh
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, edi
jne 0x140094ad7
mov rdx, qword [rsp + 0x40]
mov dword [rsp + 0x260], 0xfff80000
mov qword [rsp + 0x278], rdx
mov rax, rdx
cmp word [rdx], di
je 0x1400949e5
mov ebp, 0x2c
lea ebx, [rbp + 0xf]
lea ecx, [rbp + 0xe]
lea r15d, [rbp - 9]
cmp bp, word [rax]
je 0x1400949d1
cmp bx, word [rax]
je 0x1400949d1
cmp cx, word [rax]
je 0x1400949d1
cmp r15w, word [rax]
je 0x1400949d1
add rax, 2
cmp word [rax], di
jne 0x1400949b1
jmp 0x1400949e5
mov word [rax], di
mov rdx, qword [rsp + 0x40]
add rax, 2
mov qword [rsp + 0x278], rax
lea rcx, str.clearicon
call fcn.140045ff4
cmp al, dil
je 0x140094a5a
lea rcx, [rsp + 0x268]
call fcn.14004be6c
lea rcx, [rsp + 0x140]
lea rdx, str._userprofile_AppDataLocalMicrosoftWindowsExplorer_thumbcache.db
mov r8d, 0x8e
call fcn.1400ba0e0
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x140]
xor r9d, r9d
mov rcx, rsi
mov byte [rsp + 0x20], r13b
call fcn.140054c4c
mov rcx, qword [rsp + 0x268]
mov edx, r13d
call fcn.14001b390
lea rcx, [rsp + 0x268]
call fcn.140044f24
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x278]
call fcn.14004fc04
mov r11d, dword [rsp + 0x260]
test r11b, 4
je 0x140094a84
call fcn.140003824
jmp 0x140094ab9
cmp r11d, 2
jne 0x140094aaf
lea r8, [0x1400f2078]
lea rdx, str.USER32.DLL
lea rcx, str.UpdatePerUserSystemParameters
xor r9d, r9d
call fcn.140046024
call qword [0x1400f2078]
jmp 0x140094ab9
cmp r11d, edi
jl 0x140094ab9
call fcn.1400a7190
lea rcx, [rsp + 0x90]
call fcn.140044f24
lea rcx, [rsp + 0x78]
call fcn.140044f24
xor eax, eax
jmp 0x140096932
lea rdx, str._TaskIcoMenu
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, edi
jne 0x140094b99
mov r9, qword [rsp + 0x40]
lea rcx, [0x1400da0a8]
mov rdx, r9
call fcn.140045ff4
cmp al, dil
jne 0x140094b51
lea rcx, [0x1400df950]
mov rdx, r9
call fcn.140045ff4
cmp al, dil
jne 0x140094b39
lea rcx, [0x1400d9a4c]
mov rdx, r9
call fcn.140045ff4
cmp al, dil
je 0x140094ab9
cmp byte [0x1400f1c71], dil
je 0x140094b51
lea rcx, [0x1400f2830]
mov byte [0x1400f1c71], dil
call fcn.14004529c
jmp 0x140094ab9
cmp byte [section.flag_dat], dil
je 0x140094b6a
mov rcx, qword [0x1400f1ca8]
mov byte [0x1400f1c71], r13b
jmp 0x140094b8f
mov rcx, qword [0x1400f1e70]
cmp rcx, rdi
je 0x140094ab9
cmp qword [rcx + 0x20], rdi
je 0x140094ab9
mov byte [0x1400f1c71], r13b
mov rcx, qword [rcx + 0x20]
call fcn.140014a50
jmp 0x140094ab9
cmp word [rbx], di
jne 0x140094bab
mov rcx, rsi
call fcn.140015440
jmp 0x140094ab9
cmp bp, word [rbx]
je 0x140094bc2
mov rcx, rsi
call fcn.140015440
cmp r12, rdi
jne 0x140094bc7
jmp 0x140094ab9
cmp r12, rdi
je 0x140094bd1
mov rdx, qword [r12 + 0xb8]
jmp 0x140094bd8
lea rdx, [0x1400d63f4]
lea rcx, [rsp + 0xd0]
call fcn.140058920
movzx ecx, word [rbx]
mov rdx, rbx
mov rax, rbx
mov r15d, 0x3a
jmp 0x140094c07
cmp r15w, cx
jne 0x140094c00
lea rdx, [rax + 2]
add rax, 2
mov cx, word [rax]
cmp cx, di
jne 0x140094bf6
lea rcx, [rsp + 0xa8]
call fcn.140058920
movzx ecx, word [rbx]
mov r11, rdi
mov rax, rbx
mov qword [rsp + 0x268], rbx
mov r10d, 0x2e
cmp cx, di
je 0x140094c58
cmp r10w, cx
cmove r11, rax
add rax, 2
mov cx, word [rax]
cmp cx, di
jne 0x140094c35
cmp r11, rdi
cmovne rax, r11
mov qword [rsp + 0x268], rax
mov r14, rdi
cmp r10w, word [rax]
jne 0x140094c73
mov word [rax], di
add rax, 2
mov qword [rsp + 0x268], rax
mov r14, rax
lea rcx, [rsp + 0x268]
call fcn.140044ef4
mov edx, 9
lea r11d, [rdx + 0x17]
cmp r14, rdi
je 0x140094cbb
mov rcx, qword [rsp + 0x268]
mov r14, rcx
jmp 0x140094cb0
cmp dx, ax
ja 0x140094ca6
cmp ax, 0xd
jbe 0x140094cb8
cmp r11w, ax
je 0x140094cb8
add rcx, 2
movzx eax, word [rcx]
cmp ax, di
jne 0x140094c9b
mov word [rcx], di
mov rbp, qword [rsp + 0x270]
mov edx, 0xa
mov byte [rsp + 0x268], dil
mov r8b, dil
mov qword [rsp + 0xb0], rdx
cmp rbp, rdi
je 0x140094da2
mov rax, rbp
cmp word [rbp], di
je 0x140094da2
lea esi, [rdx + 0x20]
lea ebx, [rdx - 1]
lea r9d, [rdx + 0x74]
cmp bx, word [rax]
ja 0x140094d0a
cmp word [rax], 0xd
jbe 0x140094d95
cmp r11w, word [rax]
je 0x140094d95
cmp r10w, word [rax]
je 0x140094d7f
mov ecx, 0x24
cmp cx, word [rax]
je 0x140094d7f
mov ecx, 0x25
cmp cx, word [rax]
je 0x140094d7f
cmp si, word [rax]
jne 0x140094d39
or r8b, 4
jmp 0x140094d88
cmp r9w, word [rax]
jne 0x140094d88
cmp r9w, word [rax + 2]
jne 0x140094d4c
or r8b, 2
jmp 0x140094d6e
cmp r9w, word [rax]
jne 0x140094d88
cmp r10w, word [rax + 2]
jne 0x140094d5f
or r8b, 8
jmp 0x140094d6e
cmp r9w, word [rax]
jne 0x140094d88
cmp si, word [rax + 2]
jne 0x140094d74
or r8b, dl
add rax, 2
jmp 0x140094d88
cmp r9w, word [rax]
jne 0x140094d88
or r8b, r13b
jmp 0x140094d88
mov cl, byte [rax]
mov byte [rsp + 0x268], cl
add rax, 2
cmp word [rax], di
jne 0x140094cfb
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x260]
mov dword [rsp + 0x278], edi
cmp r8b, dil
je 0x140094dc3
lea rdx, [rsp + 0x90]
mov rcx, rsi
call fcn.14006d810
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0xd8]
call fcn.14004be6c
mov al, byte [rsp + 0x268]
cmp al, dil
je 0x140094dfd
cmp al, 0x2e
je 0x140094dfd
lea r9, [rsp + 0x278]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x40]
mov r8, rbp
call fcn.14005dac8
lea rcx, [rsp + 0xc8]
mov rdx, rbx
call fcn.140058920
mov r11, qword [rsp + 0xc8]
cmp r14, rdi
lea rbp, [0x1400d63f4]
mov qword [rsp + 0xc0], r11
cmovne rbp, r14
mov r14d, 0x40
mov qword [rsp + 0x130], rbp
cmp word [rbx], r14w
je 0x140095d87
lea rax, [0x1400f2c58]
mov qword [rsp + 0xb8], rdi
mov rcx, rax
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov bpl, r13b
mov r14b, dil
mov r10b, dil
mov r12, rsi
mov rsi, qword [rsp + 0xc0]
lea rcx, [rsp + 0x60]
movzx r10d, r10b
cmp r14b, dil
mov edx, r15d
mov r9, rsi
mov qword [rsp + 0x58], rsi
cmovne r10d, r13d
mov qword [rsp + 0x60], rsi
call fcn.1400588ac
mov rax, qword [rsp + 0x60]
mov r14b, dil
cmp r15w, word [rax]
jne 0x140094ec3
mov word [rax], di
mov rsi, qword [rsp + 0x60]
movzx r14d, dil
add rsi, 2
mov qword [rsp + 0x60], rsi
cmp word [rsi], di
cmovne r14d, r13d
cmp bpl, dil
je 0x140094eec
lea rcx, str.this
mov rdx, r9
call fcn.140045ff4
cmp al, dil
je 0x140094eec
mov r9, qword [rsp + 0xd0]
mov r10b, r13b
mov qword [rsp + 0x58], r9
mov rbx, qword [r12 + 0x40]
lea rcx, [0x1400d7440]
mov rdx, r9
mov bpl, dil
call fcn.140045ff4
cmp al, dil
je 0x140094f80
mov r12, qword [r12 + 0x38]
mov rbx, qword [r12 + 0x40]
cmp rbx, rdi
je 0x140094f20
lea r9, [rbx + 0xb8]
jmp 0x140094f44
or dword [rsp + 0x88], r13d
lea rdx, [0x1400d63f4]
lea rcx, [rsp + 0xb0]
call fcn.140058920
lea r9, [rsp + 0xb0]
mov eax, dword [rsp + 0x88]
mov r9, qword [r9]
mov qword [rsp + 0x58], r9
test r13b, al
je 0x140094f74
and eax, 0xfffffffe
lea rcx, [rsp + 0xb0]
mov dword [rsp + 0x88], eax
call fcn.140044f24
mov r9, qword [rsp + 0x58]
mov r10b, r13b
cmp r14b, dil
jne 0x140094e74
mov dword [rsp + 0x9c], r10d
mov byte [rsp + 0x278], bpl
mov rbp, qword [rsp + 0x130]
mov dword [rsp + 0x9c], r10d
mov qword [rsp + 0xc0], rsi
mov rsi, qword [rsp + 0x260]
mov dword [rsp + 0x98], r14d
mov dword [rsp + 0x9c], r10d
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x98], r14d
cmp rbx, rdi
je 0x140095149
cmp rbx, qword [rsp + 0xb8]
je 0x140095149
mov r15d, 0x23
cmp r14b, dil
jne 0x140095007
mov rcx, qword [rbx + 0xb8]
mov rdx, r9
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, edi
je 0x1400951ac
cmp dword [rbx + 0xc8], edi
mov edx, edi
mov dword [rsp + 0x80], edx
jle 0x140095086
mov r12, qword [rsp + 0x58]
mov rcx, rdi
mov qword [rsp + 0xa0], rcx
mov rax, qword [rbx + 0xc0]
mov r14, qword [rax + rcx + 8]
cmp r14, rdi
je 0x140095068
mov rax, qword [r14 + 0xb8]
cmp rax, rdi
je 0x140095068
mov rdx, r12
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, edi
je 0x1400951a9
mov rcx, qword [rsp + 0xa0]
mov edx, dword [rsp + 0x80]
add edx, r13d
add rcx, 0x18
cmp edx, dword [rbx + 0xc8]
mov dword [rsp + 0x80], edx
mov qword [rsp + 0xa0], rcx
jl 0x140095028
mov rax, qword [rbx + 0x130]
mov r14d, edi
cmp dword [rax], edi
jle 0x140095108
mov r12, rdi
mov qword [rsp + 0xa0], rdi
mov rax, qword [rbx + 0x128]
mov rcx, qword [rax]
mov r12, qword [r12 + rcx]
cmp r12, rdi
je 0x1400950e5
mov rcx, qword [r12 + 0x10]
cmp rcx, rdi
je 0x1400950e5
mov rdx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, edi
jne 0x1400950e5
cmp byte [rsp + 0x98], dil
je 0x1400953a3
cmp dword [r12 + 8], 0xf
je 0x14009517a
mov r12, qword [rsp + 0xa0]
mov rax, qword [rbx + 0x130]
add r14d, r13d
add r12, 8
cmp r14d, dword [rax]
mov qword [rsp + 0xa0], r12
jl 0x14009509f
mov r14d, dword [rsp + 0x98]
cmp r14b, dil
jne 0x140095d6e
mov rdx, qword [rsp + 0x58]
lea rcx, [rbx + 0x228]
call fcn.1400a8040
mov r12, rax
cmp rax, rdi
jne 0x140095ad4
mov r12, qword [rsp + 0x50]
mov r10d, dword [rsp + 0x9c]
mov r15d, 0x3a
cmp r10b, dil
jne 0x140095d6e
mov r12, qword [r12 + 0x38]
mov qword [rsp + 0xb8], rbx
cmp r12, rdi
je 0x14009547f
lea rax, [0x1400f1e30]
cmp r12, rax
je 0x14009547f
jmp 0x14009519c
mov rax, qword [r12 + 0x38]
mov r14d, dword [rsp + 0x98]
mov r10d, dword [rsp + 0x9c]
mov r12, qword [rax + 0x208]
mov r15d, 0x3a
mov bpl, byte [rsp + 0x278]
jmp 0x140094e6c
mov rbx, r14
lea rcx, str.MouseCapture
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x14009539c
lea rcx, str.POSTMSG
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x140095214
mov qword [rsp + 0x28], rdi
mov byte [rsp + 0x20], dil
mov rcx, qword [rbx + 0x188]
mov r8, rbx
mov rdx, qword [rsp + 0x68]
mov r9, rsi
call fcn.1400b1b44
mov ebx, eax
mov rcx, qword [rsp + 0x48]
cmp rcx, rdi
je 0x1400968e5
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400968e5
lea rcx, str.SENDMSG
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x140095239
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], r13b
jmp 0x1400951e2
lea rcx, [0x1400d6724]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x1400952e4
mov rax, qword [rbx + 0x188]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0xe0], 3
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf8], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x108], rax
cmp rcx, rdi
je 0x1400952c2
mov qword [rsp + 0x48], rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r9, [rsp + 0xe0]
mov rcx, qword [rbx + 0x20]
mov r8, rbx
mov edx, 0x465
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
jmp 0x1400951fb
lea rcx, [0x1400e0eec]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x1400955b7
lea rcx, [0x1400e0ee8]
mov rdx, rbp
call fcn.140045ff4
mov r12, qword [rbx + 0x20]
cmp al, dil
je 0x14009531c
mov r14d, edi
jmp 0x1400954c0
mov rcx, qword [rsp + 0x48]
cmp rcx, rdi
je 0x140095331
mov qword [rsp + 0x48], rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x110], rdi
mov rcx, r12
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xa8]
lea r9, [rsp + 0xe0]
mov edx, 0x459
mov r8, rbx
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0xf0], rbp
mov qword [rsp + 0xe0], rsi
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14009547f
mov r11, qword [rsp + 0x40]
jmp 0x1400953cd
lea rcx, str.MouseCapture
mov rdx, rbp
call fcn.140045ff4
mov r11, qword [rsp + 0x40]
cmp al, dil
je 0x140095498
cmp word [r11], r15w
je 0x140095498
mov rbx, r12
cmp word [r11], r15w
sete sil
cmp sil, dil
je 0x1400953e3
add r11, 2
mov qword [rsp + 0x40], r11
or dword [rsp + 0x260], 0xffffffff
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
cmp sil, dil
je 0x140095462
cmp dword [rsp + 0x260], edi
jle 0x14009541d
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rbx + 0x188]
call fcn.1400482c4
jmp 0x14009547f
jne 0x14009547f
lea rcx, [0x1400f2c58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [0x1400f2320]
cmp rcx, rdi
je 0x140095453
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov qword [0x1400f2320], rdi
mov qword [0x1400f2328], rdi
mov qword [0x1400f2330], rdi
lea rcx, [0x1400f2c58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14009547f
cmp dword [rsp + 0x260], edi
jle 0x140095477
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.USER32.dll_SetCapture]
jmp 0x14009547f
jne 0x14009547f
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov rcx, qword [rsp + 0x48]
cmp rcx, rdi
je 0x1400968e3
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400968e3
lea rcx, [0x1400e0ee8]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x14009559c
mov rax, qword [r12 + 0x38]
add r14d, 0x1000
mov r12, qword [rax + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov rax, qword [rsp + 0x40]
mov ebp, 0x3f
cmp bp, word [rax]
jne 0x1400955d4
lea rcx, [rsp + 0x268]
call fcn.14004be6c
lea rcx, [rsp + 0x260]
call fcn.14004be6c
add qword [rsp + 0x40], 2
mov ebp, 0x2c
lea ebx, [rbp + 0xf]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x40]
mov r8d, ebx
mov r9d, ebp
call fcn.14004f664
mov r11, qword [rsp + 0x40]
cmp word [r11], di
je 0x140095549
add r11, 2
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov r9d, ebp
mov r8d, ebx
mov qword [rsp + 0x40], r11
call fcn.14004f664
mov r8, qword [rsp + 0x268]
lea r9, str.0x_I64X
mov rdx, r12
mov rcx, rsi
call fcn.14004ec8c
mov r8, qword [rsp + 0x260]
lea r9, str.0x_X
mov edx, r14d
mov rcx, rsi
call fcn.14004ecd0
lea rcx, [rsp + 0x260]
call fcn.140044f24
lea rcx, [rsp + 0x268]
call fcn.140044f24
jmp 0x14009547f
lea rcx, [0x1400e0eec]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x140095844
mov rbx, r12
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov rax, qword [rsp + 0x40]
mov ebp, 0x3f
cmp bp, word [rax]
je 0x14009565b
mov rcx, qword [rsp + 0x48]
cmp rcx, rdi
je 0x1400955e4
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
or dword [rsp + 0x260], 0xffffffff
or dword [rsp + 0x268], 0xffffffff
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov rax, qword [rsp + 0x40]
mov ecx, 0x2a
mov bl, dil
cmp word [rax], cx
jne 0x14009561b
mov bl, byte [rax]
add rax, 2
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
cmp eax, edi
jle 0x1400968e3
cmp bl, dil
je 0x140095fa3
cmp dword [rsp + 0x260], edi
jl 0x1400968e3
mov ecx, edi
setne cl
call qword [sym.imp.USER32.dll_ShowCursor]
jmp 0x1400968e3
lea rcx, [rsp + 0x268]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov r11, qword [rsp + 0x268]
mov rcx, qword [rbx + 0x20]
lea rdx, [rsp + 0x278]
mov qword [rsp + 0x278], r11
call qword [sym.imp.USER32.dll_ScreenToClient]
lea rcx, [rsp + 0x80]
call fcn.14004be6c
lea rcx, [rsp + 0x68]
call fcn.14004be6c
lea rcx, [rsp + 0x58]
call fcn.14004be6c
lea rcx, [rsp + 0x50]
call fcn.14004be6c
lea rcx, [rsp + 0x260]
call fcn.14004be6c
add qword [rsp + 0x40], 2
mov ebp, 0x2c
lea ebx, [rbp + 0xf]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x40]
mov r8d, ebx
mov r9d, ebp
call fcn.14003f640
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x40]
mov r9d, ebp
mov r8d, ebx
call fcn.14003f640
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
mov r9d, ebp
mov r8d, ebx
call fcn.14003f640
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
mov r9d, ebp
mov r8d, ebx
call fcn.14003f640
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov r9d, ebp
mov r8d, ebx
call fcn.14003f640
mov r8, qword [rsp + 0x80]
mov edx, dword [rsp + 0x268]
mov rcx, rsi
call fcn.14004ed64
mov r8, qword [rsp + 0x68]
mov edx, dword [rsp + 0x26c]
mov rcx, rsi
call fcn.14004ed64
mov r8, qword [rsp + 0x58]
mov edx, dword [rsp + 0x278]
mov rcx, rsi
call fcn.14004ed64
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x27c]
mov rcx, rsi
call fcn.14004ed64
mov r11, qword [rsp + 0x260]
cmp word [r11], di
je 0x14009580c
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebp, 0x10
mov bx, ax
mov ecx, ebp
shr ebx, 0xf
and bx, r13w
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea ecx, [rbp + 1]
neg ax
sbb dx, dx
and dx, 4
or bx, dx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea ecx, [rbp - 0xe]
neg ax
sbb dx, dx
and dx, 8
or bx, dx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r8, qword [rsp + 0x260]
neg ax
sbb cx, cx
and cx, bp
or bx, cx
mov rcx, rsi
movzx edx, bx
call fcn.14004ed64
lea rcx, [rsp + 0x260]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x58]
call fcn.140044f24
lea rcx, [rsp + 0x68]
call fcn.140044f24
lea rcx, [rsp + 0x80]
jmp 0x140095592
mov eax, dword [r12 + 8]
cmp eax, 3
je 0x140095853
cmp eax, r13d
jne 0x140095893
cmp word [rbp], di
jne 0x140095893
mov cl, byte [rsp + 0x268]
cmp cl, dil
jne 0x140095893
cmp eax, 3
jne 0x140095873
bt dword [r12 + 0x70], 0x18
jb 0x140095884
cmp eax, r13d
jne 0x140095893
bt dword [r12 + 0x88], 0x18
jae 0x140095893
xor edx, edx
mov rcx, r11
call fcn.14001781c
mov r11, qword [rsp + 0x40]
lea rcx, str.POSTMSG
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x1400958c0
mov qword [rsp + 0x28], rdi
mov byte [rsp + 0x20], dil
mov r8, qword [r12 + 0x38]
lea rcx, [r12 + 0x58]
jmp 0x1400951ec
lea rcx, str.SENDMSG
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x1400958e5
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], r13b
jmp 0x1400958b1
lea rcx, [0x1400d6724]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x14009598e
mov byte [0x1400f1da3], r13b
mov rcx, qword [r12 + 0x38]
cmp rcx, rdi
je 0x140095d6e
lea rax, [r12 + 0x58]
mov qword [rsp + 0x140], 3
mov qword [rsp + 0x148], rdi
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x158], rax
mov rax, qword [rcx + 0x20]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], r13
mov qword [rsp + 0x180], rdi
cmp rcx, rdi
je 0x140095981
mov qword [rsp + 0x48], rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r9, [rsp + 0x140]
jmp 0x1400952ca
lea rcx, str.bkcolor
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x140095a2b
lea rcx, str.Cursor
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x140095a2b
lea rcx, [0x1400e0ec8]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x140095a2b
lea rcx, str.font
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x140095a2b
lea rcx, str.trans
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x140095a2b
lea rcx, str.style
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
jne 0x140095a2b
lea rcx, [0x1400d7200]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x140095a6f
mov rax, qword [rsp + 0x68]
mov r11, rax
mov qword [rsp + 0x40], rax
mov rbx, qword [r12 + 0x38]
mov rcx, qword [rsp + 0x48]
cmp rbx, rdi
je 0x140095d73
mov r13, qword [rbx + 0x20]
cmp rcx, rdi
je 0x140095a57
mov qword [rsp + 0x48], rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0xe8], r11
mov qword [rsp + 0x110], r12
mov rcx, r13
jmp 0x140095349
mov eax, 9
mov rdx, rsi
mov rcx, r12
cmp dword [r12 + 8], eax
lea rax, [rsp + 0x48]
jne 0x140095aaf
mov r8, qword [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x28], rax
mov r9, r11
mov qword [rsp + 0x20], rbp
call fcn.1400627a4
jmp 0x1400951f9
mov r10, qword [r12]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xa8]
mov r9, rbp
mov r8, r11
mov qword [rsp + 0x20], rax
call qword [r10 + 8]
jmp 0x1400951f9
cmp word [rbp], di
jne 0x140095b08
mov rdx, qword [rsp + 0x40]
lea rcx, [rax + 8]
call fcn.140058a38
mov rdx, qword [r12 + 0x18]
cmp word [rdx], di
je 0x14009547f
mov r8, qword [rsp + 0x40]
mov rcx, rsi
call fcn.14004b578
jmp 0x14009547f
lea rcx, str.Enable
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x140095bfa
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x260], edi
movzx ecx, word [rax]
mov eax, 9
sub cx, 0x30
cmp cx, ax
ja 0x140095d6e
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.USER32.dll_GetMenu]
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov rbx, rax
call fcn.14004fc04
cmp rbx, rdi
je 0x140095b8d
mov eax, dword [rsp + 0x260]
mov edx, dword [r12 + 0x28]
mov rcx, qword [r12 + 0x20]
neg eax
sbb r8d, r8d
not r8d
and r8d, 3
bts r8d, 0xa
call qword [sym.imp.USER32.dll_EnableMenuItem]
cmp dword [rsp + 0x260], edi
je 0x140095b9d
and byte [r12], 0xfe
jmp 0x140095ba1
or byte [r12], r13b
lea rdx, [r12 + 0x18]
lea rcx, [rsp + 0x260]
call fcn.140058980
lea rdx, str..Enable
lea rcx, [rsp + 0x260]
call fcn.14004bfa8
test byte [r12], r13b
mov rdx, qword [rsp + 0x260]
lea rax, [0x1400d9b58]
lea r8, [0x1400da228]
mov rcx, rsi
cmovne r8, rax
call fcn.140066cf4
lea rcx, [rsp + 0x260]
jmp 0x140095592
lea rcx, [0x1400e0ea4]
mov rdx, rbp
call fcn.140045ff4
cmp al, dil
je 0x14009547f
mov rax, qword [rsp + 0x40]
mov ebp, 0x3f
cmp bp, word [rax]
jne 0x140095c2a
add rax, 2
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x278]
call fcn.14004be6c
lea rcx, [rsp + 0x268]
call fcn.14004be6c
lea rcx, [rsp + 0x260]
call fcn.14004be6c
mov ebp, 0x2c
lea r8, [rsp + 0x278]
lea ebx, [rbp + 0xf]
lea rdx, [rsp + 0x40]
mov rcx, rsi
mov r9d, ebx
mov word [rsp + 0x20], bp
call fcn.14003f5bc
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x40]
mov r9d, ebx
mov rcx, rsi
mov word [rsp + 0x20], bp
call fcn.14003f5bc
lea r8, [rsp + 0x260]
lea rdx, [rsp + 0x40]
mov r9d, ebx
mov rcx, rsi
mov word [rsp + 0x20], bp
call fcn.14003f5bc
mov r8, qword [r12 + 0x20]
lea rdx, str.0x_p
lea rcx, [rsp + 0x140]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0x278]
lea r8, [rsp + 0x140]
mov rcx, rsi
call fcn.14004b578
movzx r8d, word [r12 + 2]
lea rdx, str.0x_X
lea rcx, [rsp + 0x140]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0x268]
lea r8, [rsp + 0x140]
mov rcx, rsi
call fcn.14004b578
mov r8d, dword [r12 + 0x28]
lea rdx, str.0x_X
lea rcx, [rsp + 0x140]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0x260]
lea r8, [rsp + 0x140]
mov rcx, rsi
call fcn.14004b578
lea rcx, [rsp + 0x260]
call fcn.140044f24
lea rcx, [rsp + 0x268]
call fcn.140044f24
lea rcx, [rsp + 0x278]
jmp 0x140095592
mov rcx, qword [rsp + 0x48]
cmp rcx, rdi
je 0x140096473
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x140096473
lea rcx, str._Cur
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x140095ffd
mov rax, qword [rsp + 0x40]
mov ebp, 0x3f
cmp bp, word [rax]
jne 0x1400955e4
lea rcx, [rsp + 0x60]
call fcn.14004be6c
lea rcx, [rsp + 0x50]
call fcn.14004be6c
lea rcx, [rsp + 0x268]
call fcn.14004be6c
lea rcx, [rsp + 0x260]
call fcn.14004be6c
add qword [rsp + 0x40], 2
mov ebp, 0x2c
lea ebx, [rbp + 0xf]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rsi
mov r9d, ebx
mov word [rsp + 0x20], bp
call fcn.14003f5bc
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x40]
mov r9d, ebx
mov rcx, rsi
mov word [rsp + 0x20], bp
call fcn.14003f5bc
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x40]
mov r9d, ebx
mov rcx, rsi
mov word [rsp + 0x20], bp
call fcn.14003f5bc
lea r8, [rsp + 0x260]
lea rdx, [rsp + 0x40]
mov r9d, ebx
mov rcx, rsi
mov word [rsp + 0x20], bp
call fcn.14003f5bc
lea rcx, [rsp + 0x278]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov r8, qword [rsp + 0x60]
mov edx, dword [rsp + 0x278]
mov rcx, rsi
call fcn.14004ed64
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x27c]
mov rcx, rsi
call fcn.14004ed64
mov rdx, qword [rsp + 0x268]
lea rax, [rsp + 0x268]
lea r12d, [rbp - 0x24]
lea r8, [rsp + 0x278]
mov rcx, rsi
mov r9d, r12d
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rax
call fcn.14005e494
mov r11, qword [rsp + 0x260]
cmp word [r11], di
je 0x140095f3c
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea ebp, [r12 + 8]
mov bx, ax
mov ecx, ebp
shr ebx, 0xf
and bx, r13w
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
neg ax
sbb cx, cx
and cx, 4
or bx, cx
lea ecx, [rbp + 1]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
neg ax
sbb cx, cx
and cx, r12w
or bx, cx
lea ecx, [rbp - 0xe]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r8, qword [rsp + 0x260]
neg ax
sbb cx, cx
and cx, bp
or bx, cx
mov rcx, rsi
movzx edx, bx
call fcn.14004ed64
lea rcx, [rsp + 0x260]
call fcn.140044f24
lea rcx, [rsp + 0x268]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x60]
call fcn.140044f24
lea rcx, [rsp + 0xc8]
call fcn.140044f24
lea rcx, [rsp + 0xd8]
call fcn.140044f24
lea rcx, [rsp + 0xa8]
call fcn.140044f24
lea rcx, [rsp + 0xd0]
call fcn.140044f24
jmp 0x140094ab9
mov rax, qword [rsp + 0x40]
cmp word [rax], di
je 0x1400968e3
cmp word [rax], 0x30
jb 0x140095fc1
cmp word [rax], 0x39
jbe 0x1400968e3
add rax, 2
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
call fcn.14004fc04
cmp eax, edi
jle 0x1400968e3
mov edx, dword [rsp + 0x268]
mov ecx, dword [rsp + 0x260]
call qword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x1400968e3
lea rcx, str._EATEKEYS
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x140096029
mov rcx, qword [rsp + 0x40]
mov rdx, rsi
call fcn.1400aab58
cmp eax, edi
setl dil
jmp 0x1400968e3
lea rcx, str._POSTMSG
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x140096047
mov byte [rsp + 0x260], dil
jmp 0x140096067
lea rcx, str._SENDMSG
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x1400963ae
mov byte [rsp + 0x260], r13b
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x278], edi
mov r12d, edi
mov dword [rsp + 0x268], edi
mov dword [rsp + 0x80], edi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xb8], 0xa
call fcn.14004be6c
mov rax, qword [rsp + 0x40]
mov ebx, 0x3b
cmp r15w, word [rax]
jne 0x14009613e
add rax, 2
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
call fcn.140044ef4
mov rcx, qword [rsp + 0x40]
movzx eax, word [rcx]
mov rdx, rcx
cmp ax, di
je 0x140096102
lea ebp, [rbx - 0xf]
cmp ax, bp
je 0x140096102
cmp ax, bx
je 0x140096102
cmp ax, r15w
je 0x140096102
add rcx, 2
mov qword [rsp + 0x40], rcx
mov ax, word [rcx]
cmp ax, di
jne 0x1400960e1
sub rcx, rdx
sar rcx, 1
mov r8d, ecx
lea rcx, [rsp + 0x58]
call fcn.14004c0cc
mov r11, qword [rsp + 0x40]
cmp word [r11], di
je 0x140096129
add r11, 2
mov qword [rsp + 0x40], r11
lea rdx, [rsp + 0x58]
mov r8b, r13b
mov rcx, rsi
call fcn.1400035d0
mov rax, qword [rsp + 0x40]
mov edx, 0x2a
cmp dx, word [rax]
jne 0x140096291
add rax, 2
lea ebp, [rdx + 0x15]
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0x40], rax
mov r14, rdi
cmp bp, word [rax]
jne 0x1400961c2
add rax, 2
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
call fcn.14004fc04
mov rax, qword [rsp + 0x40]
cmp bp, word [rax]
jne 0x1400961bd
add rax, 2
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
call fcn.14004fc04
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xb0], rcx
mov edx, 0x2a
cmp dx, word [rax]
jne 0x1400961dd
add rax, 2
mov qword [rsp + 0x40], rax
mov rbp, rax
mov qword [rsp + 0xa0], rax
jmp 0x1400961e3
mov r14, rax
mov rbp, rdi
movzx ecx, word [rax]
cmp cx, di
je 0x14009622d
cmp dx, cx
jne 0x140096206
cmp r14, rdi
jne 0x140096206
mov word [rax], di
mov rax, qword [rsp + 0x40]
add rax, 2
mov r14, rax
jmp 0x140096215
cmp cx, bx
je 0x14009621c
cmp cx, r15w
je 0x14009621c
add rax, 2
mov qword [rsp + 0x40], rax
jmp 0x1400961e3
mov word [rax], di
add qword [rsp + 0x40], 2
mov dword [rsp + 0x80], r13d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rdx, r14
mov rcx, rbp
mov dword [rsp + 0x278], eax
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbp, rax
cmp eax, edi
jne 0x1400962bd
mov r13, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rsp + 0x278]
cmp eax, dword [rsp + 0xc0]
jae 0x1400962aa
mov edx, dword [rsp + 0xb0]
xor r8d, r8d
mov rcx, rsi
call fcn.140013908
mov rdx, r14
mov rcx, r13
call qword [sym.imp.USER32.dll_FindWindowW]
mov ebp, eax
cmp eax, edi
je 0x140096255
jmp 0x1400962aa
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
mov ebp, dword [rsp + 0x278]
cmp ebp, edi
jne 0x1400962bd
lea rcx, [rsp + 0x58]
call fcn.140044f24
jmp 0x140096473
mov rdx, qword [rsp + 0x40]
cmp dword [rsp + 0x80], edi
jne 0x1400962df
cmp word [rdx], bx
je 0x1400962d6
cmp word [rdx], r15w
jne 0x140096321
add rdx, 2
mov qword [rsp + 0x40], rdx
mov r15d, 0x23
mov ebx, edi
cmp r15w, word [rdx]
jne 0x1400962fb
add rdx, 2
mov ebx, 0x5000
mov qword [rsp + 0x40], rdx
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
mov r12d, dword [rsp + 0x268]
mov rdx, qword [rsp + 0x40]
cmp eax, edi
jle 0x140096321
add r12d, ebx
mov bl, byte [rsp + 0x260]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
mov rcx, rsi
mov byte [rsp + 0x20], bl
call fcn.14005d83c
cmp eax, edi
jne 0x1400962ae
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
movsxd rcx, ebp
mov edx, r12d
cmp bl, dil
jne 0x140096369
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14009636f
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, qword [rsp + 0x58]
cmp word [rbx], di
je 0x1400963a4
lea rdx, [0x1400de018]
lea rcx, [rsp + 0x140]
mov r8d, eax
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [rsp + 0x140]
mov rdx, rbx
mov rcx, rsi
call fcn.14004b578
lea rcx, [rsp + 0x58]
jmp 0x140096614
lea rcx, str._percent
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x1400963fa
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x260], rdi
call fcn.140005c30
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x260]
lea rcx, [0x1400f1e30]
call fcn.1400423dc
jmp 0x1400968e3
lea rcx, str._POS
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x140096500
mov rax, qword [rsp + 0x40]
mov ebx, edi
mov ebp, 0x3f
cmp word [rax], bp
mov r13w, di
sete bl
cmp bx, di
je 0x140096436
add rax, 2
mov qword [rsp + 0x40], rax
cmp r14w, word [rax]
jne 0x140096448
add rax, 2
mov r13d, r14d
mov qword [rsp + 0x40], rax
or dword [rsp + 0x260], 0xffffffff
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
cmp dword [rsp + 0x260], edi
movsxd rcx, dword [rsp + 0x260]
jg 0x14009647d
mov ebx, 0x80070057
jmp 0x1400968e5
mov rdx, qword [rsp + 0x40]
cmp word [rdx], di
je 0x1400964a2
cmp word [rdx], 0x30
jb 0x140096493
cmp word [rdx], 0x39
jbe 0x1400964a2
cmp r14w, word [rdx]
je 0x1400964a2
add rdx, 2
mov qword [rsp + 0x40], rdx
cmp r13w, di
je 0x1400964c0
cmp r14w, word [rdx]
je 0x1400964c0
sub rdx, 2
mov qword [rsp + 0x40], rdx
mov word [rdx], r14w
mov rdx, qword [rsp + 0x40]
cmp bx, di
je 0x1400964d6
sub rdx, 2
mov qword [rsp + 0x40], rdx
mov word [rdx], bp
mov rdx, qword [rsp + 0x40]
cmp r12, rdi
je 0x1400964e5
mov eax, dword [r12 + 0x220]
jmp 0x1400964e7
mov eax, edi
mov dword [rsp + 0x28], eax
mov r9, rsi
mov r8, rsi
mov qword [rsp + 0x20], rdi
call fcn.1400697ac
jmp 0x1400968e3
lea rcx, str._RMENU
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x14009661e
lea rcx, [rsp + 0x60]
call fcn.14004be6c
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x260], edi
call fcn.14004be6c
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
mov r9d, r15d
mov r8d, 0x3b
call fcn.14004f664
mov r11, qword [rsp + 0x40]
cmp word [r11], di
je 0x14009655f
add r11, 2
mov qword [rsp + 0x40], r11
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov rcx, qword [rsp + 0x40]
call fcn.140015cb4
lea rcx, [rsp + 0x278]
mov qword [rsp + 0x40], rax
call fcn.14004be6c
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x278]
mov qword [rsp + 0x268], rdi
call fcn.1400a6f3c
mov r11, qword [rsp + 0x268]
cmp r11, rdi
je 0x1400965e6
cmp word [r11], di
je 0x1400965e6
mov word [r11 - 2], di
mov rdx, qword [rsp + 0x268]
mov rcx, qword [rsp + 0x278]
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x260]
mov qword [rsp + 0x20], rdi
call fcn.140007814
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call fcn.14004b578
lea rcx, [rsp + 0x278]
call fcn.140044f24
lea rcx, [rsp + 0x50]
call fcn.140044f24
lea rcx, [rsp + 0x60]
call fcn.140044f24
jmp 0x1400968e3
lea rcx, str._IsWindow
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x1400966ef
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov ebp, 0x3f
mov rcx, qword [rax]
movzx r12d, word [rcx]
cmp r12w, bp
jne 0x140096658
add qword [rsp + 0x40], 2
or dword [rsp + 0x260], 0xffffffff
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
mov rax, qword [rsp + 0x40]
movsxd r13, dword [rsp + 0x260]
mov ebx, 0x3b
cmp word [rax], bx
je 0x14009668f
cmp word [rax], r15w
jne 0x140096698
add rax, 2
mov qword [rsp + 0x40], rax
cmp r12w, bp
jne 0x140096473
lea rcx, [rsp + 0x260]
call fcn.14004be6c
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov r9d, r15d
mov r8d, ebx
call fcn.14004f664
mov rcx, r13
call qword [sym.imp.USER32.dll_IsWindow]
mov r8, qword [rsp + 0x260]
mov edx, eax
mov rcx, rsi
call fcn.14004ed18
lea rcx, [rsp + 0x260]
jmp 0x140096614
lea rcx, str._Enable
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x1400967ec
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov ebp, 0x3f
mov rcx, qword [rax]
movzx r12d, word [rcx]
cmp r12w, bp
jne 0x140096729
add qword [rsp + 0x40], 2
or dword [rsp + 0x260], 0xffffffff
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
mov rax, qword [rsp + 0x40]
movsxd r13, dword [rsp + 0x260]
mov ebx, 0x3b
cmp word [rax], bx
je 0x140096760
cmp word [rax], r15w
jne 0x140096769
add rax, 2
mov qword [rsp + 0x40], rax
cmp dword [rsp + 0x260], edi
jle 0x140096473
cmp r12w, bp
jne 0x1400967af
lea rcx, [rsp + 0x260]
call fcn.14004be6c
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov r9d, r15d
mov r8d, ebx
call fcn.14004f664
mov rcx, r13
call qword [sym.imp.USER32.dll_IsWindowEnabled]
jmp 0x1400966d0
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x260], 0xfffffc18
call fcn.14004fc04
cmp dword [rsp + 0x260], edi
jl 0x1400968e3
mov edx, edi
mov rcx, r13
setne dl
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x1400968e3
lea rcx, str._Visible
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
jne 0x140096867
lea rcx, str._Visable
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
jne 0x140096867
lea rcx, str._style
mov rdx, rbx
call fcn.140045ff4
cmp al, dil
je 0x1400968e3
or dword [rsp + 0x260], 0xffffffff
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.140005c0c
cmp dword [rsp + 0x260], edi
jle 0x140096473
movsxd rcx, dword [rsp + 0x260]
mov rdx, qword [rsp + 0x40]
call fcn.14005c088
jmp 0x1400968e3
lea rcx, [rsp + 0x40]
call fcn.140044ef4
mov ebp, 0x3f
mov rcx, qword [rax]
movzx r12d, word [rcx]
cmp r12w, bp
jne 0x140096889
add qword [rsp + 0x40], 2
or dword [rsp + 0x260], 0xffffffff
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.14004fc04
mov r8, qword [rsp + 0x40]
movsxd rdx, dword [rsp + 0x260]
mov ebx, 0x3b
cmp word [r8], bx
je 0x1400968c1
cmp word [r8], r15w
jne 0x1400968ca
add r8, 2
mov qword [rsp + 0x40], r8
cmp dword [rsp + 0x260], edi
jle 0x140096473
movzx r9d, r12w
mov rcx, rsi
call fcn.14005be68
mov ebx, edi
lea rcx, [rsp + 0xc8]
call fcn.140044f24
lea rcx, [rsp + 0xd8]
call fcn.140044f24
lea rcx, [rsp + 0xa8]
call fcn.140044f24
lea rcx, [rsp + 0xd0]
call fcn.140044f24
lea rcx, [rsp + 0x90]
call fcn.140044f24
lea rcx, [rsp + 0x78]
call fcn.140044f24
mov eax, ebx
add rsp, 0x218
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret