Function at 0x140055b20
Capabilities:
Enumerate gui resources
Lock the desktop

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp + 0x20], r9d
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov r14, qword [0x1402af158]
xor eax, eax
movsxd rdi, r9d
movsxd r15, r8d
movsxd r13, edx
mov rsi, rcx
mov ebx, eax
test r14, r14
je 0x140055b9f
cmp qword [r14], rbx
jne 0x140055b86
lea rdx, str.F:CheckPointsTPDrv_builderSuperMan1LibSynList.h
lea rcx, str.m_pItem
mov r8d, 0x60
call fcn.1400be660
mov rcx, qword [r14]
mov rdx, r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
jne 0x140055bc2
mov r14, qword [r14 + 8]
test r14, r14
jne 0x140055b68
xor eax, eax
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r14, qword [r14]
test r14, r14
je 0x140055b9f
mov r12d, dword [rbp + 0x1f0]
mov edx, 1
test r12d, r12d
je 0x140055e17
xor ecx, ecx
mov dword [rsp + 0x78], ecx
cmp edi, 0x1b
jne 0x140055bff
mov eax, dword [0x1402aef40]
add eax, 0xffffdc84
cmp eax, edx
ja 0x140055c18
mov dword [rsp + 0x78], edx
jmp 0x140055c18
cmp edi, 0x49
jne 0x140055c18
mov eax, dword [0x1402aef40]
add eax, 0xffffdc84
cmp eax, edx
cmovbe ecx, edx
mov dword [rsp + 0x78], ecx
lea rax, [rsi + 0xd0]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rbp - 0x80], rax
call fcn.140062790
mov qword [rsp + 0x40], rax
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x48], 1
cmp dword [rax + 0x18], ebx
jne 0x140055c7d
mov r8d, dword [rsp + 0x78]
xor r9d, r9d
mov rcx, r14
lea edx, [r9 + 1]
call fcn.140033080
mov dword [r14 + 0xc44], 1
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x40]
inc dword [rax + 0x18]
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [rsp + 0x48], ebx
jne 0x140055ca3
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x80]
call fcn.140062890
jmp 0x140055b9f
cmp dword [rsi + 0x90], ebx
je 0x140055cce
test byte [r14 + 0x864], 1
je 0x140055cce
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140058020
cmp dword [r14 + 0x7c8], ebx
je 0x140055d5c
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140058020
lea rcx, [rsi + 0x68]
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
call fcn.140041d20
test eax, eax
je 0x140055d5c
cmp eax, dword [rsi + 0x6c]
jae 0x140055d5c
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x140055d5c
cmp word [rcx], bx
je 0x140055d5c
mov edx, dword [r14 + 0x7c8]
dec edx
jne 0x140055d5c
lea r8, [rsp + 0x48]
lea rdx, [0x14015db38]
mov dword [rsp + 0x48], ebx
call fcn.140111e20
mov edx, dword [rsp + 0x48]
test edx, edx
je 0x140055d5c
mov rcx, r14
call fcn.140034750
cmp dword [rsi + 0x90], ebx
je 0x140055d6e
test byte [r14 + 0x864], 1
jne 0x140055d77
cmp dword [r14 + 0x7c8], ebx
je 0x140055da8
cmp edi, 0x39
ja 0x140055da8
movabs rcx, 0x200000010010020
bt rcx, rdi
jae 0x140055da8
mov ecx, edi
call fcn.140059500
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
call fcn.140058020
cmp edi, 0x62
ja case.0x140055dca.4
lea rdx, [0x140000000]
movzx eax, byte [rdx + rdi + 0x57400]
mov ecx, dword [rdx + rax*4 + 0x573f8]
add rcx, rdx
jmp rcx
mov rcx, qword [rsp + 0x40]
add rcx, 0x20
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + 0x18]
test eax, eax
jle 0x140055e0b
dec eax
mov dword [rcx + 0x18], eax
jne 0x140055e0b
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.140033080
mov rcx, qword [rsp + 0x40]
mov dword [r14 + 0xc44], ebx
add rcx, 0x20
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x140055dca.4
lea rax, [rsi + 0xd0]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rbp - 0x80], rax
call fcn.1400647e0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140055b9f
xor edx, edx
mov dword [rsp + 0x78], edx
test r15b, 0x10
je 0x140055e9e
cmp qword [r14 + 0x788], rdx
je 0x140055e9e
mov rcx, qword [0x1402ae2c8]
call qword [sym.imp.USER32.dll_GetDC]
mov ecx, r15d
mov r8d, r12d
sar ecx, 0xc
mov rdx, rax
mov rdi, rax
movzx r9d, cl
mov rcx, r14
mov qword [rsp + 0x20], rbx
dec r9d
call fcn.14002fa20
mov rcx, qword [0x1402ae2c8]
mov rdx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [rbp + 0x1e8]
xor edx, edx
cmp edi, 0x6e
ja case.0x140055ec5.4
lea r8, [0x140000000]
movsxd rax, edi
movzx eax, byte [r8 + rax + 0x57570]
mov ecx, dword [r8 + rax*4 + 0x57464]
add rcx, r8
jmp rcx
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005d970
mov ebx, eax
jmp case.0x140055ec5.4
mov r13d, 1
mov ebx, r13d
jmp 0x14005615d
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005da70
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov edx, r13d
mov rcx, rsi
call fcn.14005e8e0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov edx, r13d
mov rcx, rsi
call fcn.14005e9b0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov edx, edi
mov rcx, rsi
call fcn.14005ded0
mov ebx, eax
jmp case.0x140055ec5.4
test r12d, r12d
je 0x14005601c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne 0x14005601c
lea r9d, [rax + 5]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14005f590
mov ebx, eax
test eax, eax
jne 0x140056021
cmp dword [r14 + 0x848], eax
je 0x140056021
mov rcx, qword [0x1402ae2c8]
shl r13d, 0x10
mov r8, r15
movsxd r9, r13d
mov edx, 0x9002
or r9, 5
call qword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
test r12d, r12d
sete al
jmp 0x140056563
mov ebx, 1
xor eax, eax
test r12d, r12d
sete al
jmp 0x140056563
test r12d, r12d
je case.0x140055ec5.11
mov rbx, qword [r14 + 0xce0]
mov rcx, r14
mov rdx, rbx
call fcn.140031250
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400ca4f0
test al, al
jns case.0x140055ec5.11
mov rdx, qword [r14 + 0xc50]
mov rcx, r14
call fcn.140031250
mov r13d, 1
mov ebx, r13d
jmp 0x140056cb8
mov r13d, 1
test r12d, r12d
je 0x140055ef7
mov edx, r13d
mov rcx, r14
call fcn.140033b60
mov ebx, eax
jmp 0x140056cb8
mov edx, r12d
mov rcx, r14
call fcn.140033b60
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
lea r8d, [rax + 4]
mov r9d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14005e500
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
lea r8d, [rax + 8]
jmp 0x1400560bc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
lea r8d, [rax + 1]
jmp 0x1400560bc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
lea r8d, [rax + 2]
jmp 0x1400560bc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x14005614a
mov r13d, 1
mov ebx, r13d
jmp 0x140056cb8
mov edx, r13d
mov rcx, rsi
call fcn.140060050
mov ebx, eax
mov r13d, 1
xor r15d, r15d
mov r12, qword [rsp + 0x40]
mov edi, dword [r14 + 0xc4c]
test edi, edi
je 0x140056188
lea rcx, [r14 + 0x8a8]
call fcn.1400136b0
mov ecx, r15d
cmp eax, edi
setge cl
test ecx, ecx
jne 0x1400561c7
lea rcx, [r12 + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r12 + 0x18]
test eax, eax
jle 0x1400561bc
dec eax
mov dword [r12 + 0x18], eax
jne 0x1400561bc
xor r9d, r9d
mov r8d, r13d
xor edx, edx
mov rcx, r14
call fcn.140033080
mov dword [r14 + 0xc44], r15d
lea rcx, [r12 + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp - 0x80]
mov rdx, r12
call fcn.140062890
mov eax, ebx
jmp 0x140055ba1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005f930
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005f9a0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne 0x14005601c
test r12d, r12d
je 0x14005601c
lea r9d, [rax + 0x10]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14005f590
mov ebx, eax
xor eax, eax
test r12d, r12d
sete al
jmp 0x140056563
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.140060c80
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.140060cc0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005ec10
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005ed40
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005eeb0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005efe0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov rcx, rsi
call fcn.14005f0b0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140060e50
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140061460
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140055ef1
mov r9d, 1
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.1400615d0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
call fcn.1401009c0
lea rdx, [rbp - 0x70]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.Photos_PhotoCanvas
lea rcx, [rbp - 0x70]
mov r8d, 0x12
call fcn.14010e2f0
test eax, eax
jne 0x140056428
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d610
test eax, eax
je 0x140056428
test r12d, r12d
je 0x1400564c4
mov r9d, 1
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.1400615d0
jmp case.0x140055ec5.4
mov eax, 1
jmp 0x140055ba1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
mov r9d, r15d
mov r8d, edi
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], r12d
call fcn.140060120
mov ebx, eax
jmp case.0x140055ec5.4
test r12d, r12d
sete dl
mov dword [rsp + 0x78], edx
test r12d, r12d
je 0x14005653a
mov edx, 0x10
mov rcx, r14
call fcn.140037670
mov dword [rsp + 0x30], r15d
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov r8d, edi
xor edx, edx
mov rcx, r14
mov dword [rsp + 0x20], ebx
call fcn.140037750
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne 0x14005655f
mov r9d, r12d
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140060280
mov ebx, eax
mov eax, dword [rsp + 0x78]
test eax, eax
je case.0x140055ec5.4
lea rcx, [r14 + 0x50]
call fcn.140012ef0
test al, al
jne case.0x140055ec5.4
xor edx, edx
mov rcx, r14
call fcn.1400200f0
jmp case.0x140055ec5.4
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.4
call qword [sym.imp.USER32.dll_LockWorkStation]
jmp case.0x140055ec5.4
test r12d, r12d
je 0x140055ef1
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140060600
mov ebx, eax
jmp case.0x140055ec5.4
mov r13d, 1
test r12d, r12d
je 0x1400565e3
mov ebx, r13d
jmp 0x1400565f0
mov edx, r13d
mov rcx, r14
call fcn.1400200f0
mov ebx, eax
mov dword [r14 + 0x850], r13d
test r12d, r12d
je 0x14005615d
lea rcx, [r14 + 0x118]
cmp word [rcx], 0
je 0x140056cb8
mov r8, qword [0x1402ae2c8]
xor r9d, r9d
xor edx, edx
call fcn.140104e00
jmp 0x140056cb8
test r12d, r12d
je 0x14005663a
mov r13d, 1
mov ebx, r13d
jmp 0x140056cb8
xor edx, edx
mov rcx, r14
call fcn.1400200f0
jmp 0x140056155
xor r15d, r15d
test r12d, r12d
je 0x14005665f
mov r13d, 1
mov ebx, r13d
jmp 0x140056cbb
mov edx, r15d
mov rcx, r14
cmp dword [r14 + 0x848], edx
sete dl
call fcn.1400200f0
mov r13d, 1
mov ebx, eax
jmp 0x140056160
mov edx, r12d
mov rcx, r14
call fcn.1400200f0
mov ebx, eax
jmp case.0x140055ec5.4
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.140060a40
mov ebx, eax
jmp case.0x140055ec5.4
test r12d, r12d
je 0x14005670b
mov rax, qword [0x1402ae0d0]
lea rcx, [0x1402ae0d0]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x1402ae0d0]
mov edx, eax
mov rax, qword [0x1402ae0d0]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140060af0
mov ebx, eax
jmp case.0x140055ec5.4
mov r12, qword [rsp + 0x40]
cmp edi, 0x45
jne 0x1400567ae
lea rcx, [r12 + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r12 + 0x18]
test eax, eax
jle 0x14005674e
dec eax
mov dword [r12 + 0x18], eax
jne 0x14005674e
lea r8d, [rdi - 0x44]
xor r9d, r9d
xor edx, edx
mov rcx, r14
call fcn.140033080
mov dword [r14 + 0xc44], ebx
lea rcx, [r12 + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [0x1402ae0d0]
lea rcx, [0x1402ae0d0]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x1402ae0d0]
mov edx, eax
mov rax, qword [0x1402ae0d0]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.14005d220
test eax, eax
jne 0x1400567bc
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140060af0
mov ebx, eax
mov r13d, 1
xor r15d, r15d
jmp 0x140056165
mov r13d, 1
xor r15d, r15d
mov ebx, r13d
jmp 0x140056165
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.1400607f0
mov r13d, 1
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 1]
jmp 0x1400567f2
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
xor r9d, r9d
lea r8d, [r15 + 1]
jmp 0x1400567f5
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
mov r9d, 1
mov r8d, r9d
jmp 0x1400567f5
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
xor r9d, r9d
lea r8d, [r15 + 2]
jmp 0x1400567f5
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 1]
lea r8d, [r15 + 2]
jmp 0x1400567f5
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.140060980
lea r13d, [r15 + 1]
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 1]
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.140060980
lea r13d, [r15 + 1]
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 2]
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.140060980
lea r13d, [r15 + 1]
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 3]
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.140060980
lea r13d, [r15 + 1]
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
xor r9d, r9d
mov r8d, 1
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.140060980
mov r13d, 1
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
mov r9d, 1
mov edx, r13d
mov rcx, rsi
mov r8d, r9d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.140060980
lea r13d, [r15 + 1]
mov ebx, eax
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 2]
jmp 0x140056a4e
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 3]
jmp 0x140056a4e
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
xor r9d, r9d
lea r8d, [r15 + 2]
jmp 0x140056a54
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 1]
lea r8d, [r15 + 2]
jmp 0x140056a54
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
mov r9d, 2
mov r8d, r9d
jmp 0x140056a54
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
test eax, eax
jne 0x140056651
lea r9d, [r15 + 3]
lea r8d, [r15 + 2]
jmp 0x140056a54
test r12d, r12d
je 0x140055ef1
mov ecx, 0x32
call fcn.140059500
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
mov rdi, rax
call fcn.140058020
lea rcx, [rsi + 0x68]
mov r9, rdi
mov r8d, r15d
mov edx, r13d
call fcn.140041d20
test eax, eax
je case.0x140055ec5.4
cmp eax, dword [rsi + 0x6c]
jae case.0x140055ec5.4
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rdi, qword [rcx + rax + 8]
test rdi, rdi
je case.0x140055ec5.4
cmp word [rdi], bx
je case.0x140055ec5.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
mov r9, rdi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.140060af0
mov ebx, eax
jmp case.0x140055ec5.4
test r12d, r12d
je 0x140056157
mov rax, qword [0x1402ad8a0]
lea rcx, [0x1402ad8a0]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rax, rax
je case.0x140055ec5.4
cmp qword [rax + 0x10], rbx
je case.0x140055ec5.4
cmp qword [rax + 0x18], rbx
je case.0x140055ec5.4
cmp dword [r14 + 0xb78], 0xf
mov rcx, r14
je 0x140056cc9
mov edx, 0xf
call fcn.140033aa0
mov r13d, 1
xor r15d, r15d
test r12d, r12d
jne 0x1400561d3
jmp 0x140056160
xor edx, edx
jmp 0x140056cad
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
test r12d, r12d
je 0x140056d04
lea r9d, [rax + 1]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.1400615d0
mov r13d, 1
mov ebx, eax
jmp 0x140056d0d
mov r13d, 1
mov ebx, r13d
test byte [r14 + 0x84c], 2
je 0x140056cb8
cmp dword [r14 + 0x848], 0
je 0x140056cb8
test r12d, r12d
je 0x14005615d
mov rcx, qword [r14 + 0x58]
test rcx, rcx
jne 0x140056d37
lea rcx, [r14 + 0x70]
mov rax, qword [rcx]
mov r8d, r13d
mov edx, 0x1000320
call qword [rax + 0x30]
jmp 0x140056cb8
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
xor r15d, r15d
mov r13d, 1
test eax, eax
jne 0x140056657
mov eax, r13d
lea rdx, [0x14022fbb8]
lea rcx, [0x1400fff80]
mov qword [rsp + 0x48], r13
mov qword [0x14022fbb8], rax
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rsp + 0x48], r15d
cmp dword [rsi + 0xbc], ebx
jne 0x140056cbb
mov rax, qword [rsi + 0xc8]
cmp dword [rax - 8], r13d
jle 0x140056dc2
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc8]
call fcn.140007ef0
mov rax, qword [rsi + 0xc0]
mov r15, qword [rsi + 0xc8]
cmp dword [rax - 8], r13d
jle 0x140056de5
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc0]
call fcn.140007ef0
mov rdx, qword [rsi + 0xc0]
lea rcx, [rsp + 0x48]
mov r8, r15
call fcn.140104420
test al, al
je 0x140056e6b
cmp dword [rsp + 0x48], ebx
je 0x140056e10
test byte [rsi + 0x9c], r13b
jne 0x140056cb8
xor r15d, r15d
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x5c], r15
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x58], 0xd
call fcn.14009a550
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x5c], 2
call fcn.14009a550
jmp 0x140056cbb
cmp dword [0x14022fbb8], ebx
je 0x140056e97
cmp dword [0x14022fbbc], ebx
jbe 0x140056e97
cmp dword [0x1402ad730], ebx
jne 0x140056e97
mov rcx, rsi
call fcn.14005f380
mov dword [0x1402ad730], r13d
jmp 0x140056cb8
xor eax, eax
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
lea r9d, [rax + 0x28]
mov edx, r13d
mov dword [rsp + 0x50], r13d
mov dword [0x1402ad730], eax
mov qword [rsp + 0x5c], rax
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x58], 0x5b
call fcn.14009a550
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov r9d, 0x28
mov edx, r13d
mov qword [rsp + 0x58], 9
call fcn.14009a550
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x58], 9
mov dword [rsp + 0x5c], 2
call fcn.14009a550
xor r15d, r15d
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
lea r9d, [r15 + 0x28]
mov edx, r13d
mov dword [rsp + 0x58], 0x5b
mov dword [rsp + 0x5c], 2
call fcn.14009a550
mov dword [rsi + 0xbc], r13d
mov rcx, qword [0x1402ae2c8]
lea r9, [0x1400618e0]
mov r8d, 0x1f4
mov rdx, rsi
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
jne 0x140056cbb
mov dword [rsi + 0xbc], r15d
jmp 0x140056cbb
test r12d, r12d
je 0x140056157
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.11
xor eax, eax
mov dword [rsp + 0x48], eax
mov rax, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x140056fc0
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc8]
call fcn.140007ef0
mov rax, qword [rsi + 0xc0]
mov r15, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x140056fe3
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc0]
call fcn.140007ef0
mov rdx, qword [rsi + 0xc0]
lea rcx, [rsp + 0x48]
mov r8, r15
call fcn.140104420
test al, al
je 0x1400570e5
cmp dword [rsp + 0x48], ebx
je 0x140057081
test byte [rsi + 0x9c], 2
je 0x140057081
mov r13d, 1
xor r15d, r15d
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
lea r9d, [r13 + 0x27]
mov edx, r13d
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x5c], r15
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x58], 0x1b
call fcn.14009a550
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov edx, r13d
mov dword [rsp + 0x58], 0x1b
mov dword [rsp + 0x5c], 2
call fcn.14009a550
mov dword [rsi + 0xbc], r15d
mov dword [0x1402ad730], r15d
jmp 0x140056cbb
mov r13d, 1
xor r15d, r15d
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
lea r9d, [r13 + 0x27]
mov edx, r13d
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x5c], r15
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x58], 0xd
call fcn.14009a550
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov edx, r13d
mov dword [rsp + 0x5c], 2
call fcn.14009a550
mov dword [0x1402ad730], r15d
jmp 0x140056cbb
mov r13d, 1
lea rdx, [0x14022fbb8]
lea rcx, [0x1400fff80]
mov eax, r13d
mov qword [rsp + 0x78], r13
xor r15d, r15d
mov qword [0x14022fbb8], rax
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x14022fbb8], ebx
jne 0x140057121
mov rcx, rsi
call fcn.14005f380
mov dword [0x1402ad730], r15d
jmp 0x140056cbb
test r12d, r12d
je 0x140055ef1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.4
xor eax, eax
mov dword [rsp + 0x48], eax
mov rax, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x14005716e
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc8]
call fcn.140007ef0
mov rax, qword [rsi + 0xc0]
mov r15, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x140057191
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc0]
call fcn.140007ef0
mov rdx, qword [rsi + 0xc0]
lea rcx, [rsp + 0x48]
mov r8, r15
call fcn.140104420
test al, al
je 0x1400571bc
cmp dword [rsp + 0x48], ebx
je 0x1400571bc
test byte [rsi + 0x9c], 4
jne case.0x140055ec5.4
mov r13d, 1
xor r9d, r9d
mov rcx, rsi
mov r8d, r13d
mov edx, r13d
call fcn.14005f180
jmp 0x140056cb8
test r12d, r12d
je 0x140055ef1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.4
xor eax, eax
mov dword [rsp + 0x48], eax
mov rax, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x140057219
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc8]
call fcn.140007ef0
mov rax, qword [rsi + 0xc0]
mov r15, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x14005723c
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc0]
call fcn.140007ef0
mov rdx, qword [rsi + 0xc0]
lea rcx, [rsp + 0x48]
mov r8, r15
call fcn.140104420
test al, al
je 0x140057267
cmp dword [rsp + 0x48], ebx
je 0x140057267
test byte [rsi + 0x9c], 8
jne case.0x140055ec5.4
mov r13d, 1
xor edi, edi
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
lea r9d, [r13 + 0x27]
mov edx, r13d
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x5c], rdi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x58], 0x11
call fcn.14009a550
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov edx, r13d
mov qword [rsp + 0x58], 0xa4
call fcn.14009a550
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov edx, r13d
mov qword [rsp + 0x58], 9
call fcn.14009a550
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov edx, r13d
mov dword [rsp + 0x58], 9
mov dword [rsp + 0x5c], 2
call fcn.14009a550
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x50]
lea rcx, [0x1402ad8a0]
mov edx, r13d
mov dword [rsp + 0x58], 0xa4
mov dword [rsp + 0x5c], 2
call fcn.14009a550
mov dword [rsp + 0x58], 0x11
xor r15d, r15d
jmp 0x140056e44
test r12d, r12d
je 0x140055ef1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.14005d220
test eax, eax
jne case.0x140055ec5.4
xor eax, eax
mov dword [rsp + 0x48], eax
mov edi, eax
nop word [rax + rax]
mov rax, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x14005738c
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc8]
call fcn.140007ef0
mov rax, qword [rsi + 0xc0]
mov r13, qword [rsi + 0xc8]
cmp dword [rax - 8], 1
jle 0x1400573af
mov edx, dword [rax - 0x10]
lea rcx, [rsi + 0xc0]
call fcn.140007ef0
mov rdx, qword [rsi + 0xc0]
lea rcx, [rsp + 0x48]
mov r8, r13
call fcn.140104420
movzx eax, al
test eax, eax
jne 0x1400573df
lea ecx, [rax + 0x32]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jl 0x140057370
jmp case.0x140055ec5.4
xor r15d, r15d
mov r13d, 1
cmp dword [rsp + 0x48], ebx
jne 0x140056cbb
jmp 0x140056e13