Function at 0x140042cb0
Capabilities:
Enumerate gui resources
Lock the desktop

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp + 0x20], r9d
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov r14, qword [0x140271ff8]
xor eax, eax
movsxd rdi, r9d
movsxd r15, r8d
movsxd r13, edx
mov rsi, rcx
mov ebx, eax
test r14, r14
je 0x140042d19
nop dword [rax + rax]
mov rcx, qword [r14]
mov rdx, r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
jne 0x140042d3c
mov r14, qword [r14 + 8]
test r14, r14
jne 0x140042d00
xor eax, eax
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r14, qword [r14]
test r14, r14
je 0x140042d19
mov r12d, dword [rbp + 0x1f0]
mov edx, 1
test r12d, r12d
je 0x140042fdc
xor ecx, ecx
mov dword [rsp + 0x70], ecx
cmp edi, 0x1b
jne 0x140042d79
mov eax, dword [0x140271e30]
add eax, 0xffffdc84
cmp eax, edx
ja 0x140042d92
mov dword [rsp + 0x70], edx
jmp 0x140042d92
cmp edi, 0x49
jne 0x140042d92
mov eax, dword [0x140271e30]
add eax, 0xffffdc84
cmp eax, edx
cmovbe ecx, edx
mov dword [rsp + 0x70], ecx
lea rax, [rsi + 0xb8]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rbp - 0x80], rax
call fcn.14004ed20
mov qword [rsp + 0x40], rax
add rax, 0x20
mov rcx, rax
mov qword [rsp + 0x78], rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x74], 1
cmp dword [rax + 0x18], ebx
jne 0x140042dff
mov r8d, dword [rsp + 0x70]
xor r9d, r9d
mov rcx, r14
lea edx, [r9 + 1]
call fcn.140021fc0
mov dword [r14 + 0xc3c], 1
mov dword [rsp + 0x74], eax
mov rax, qword [rsp + 0x40]
inc dword [rax + 0x18]
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [rsp + 0x74], ebx
jne 0x140042e25
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x80]
call fcn.14004ee10
jmp 0x140042d19
cmp dword [rsi + 0x90], ebx
je 0x140042e9b
test byte [r14 + 0x85c], 1
je 0x140042e9b
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.1400449a0
lea rcx, [rsi + 0x68]
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
call fcn.1400306e0
test eax, eax
je 0x140042e9b
cmp eax, dword [rsi + 0x6c]
jae 0x140042e9b
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x140042e9b
cmp word [rcx], bx
je 0x140042e9b
cmp edi, 0xb
je 0x140042e9b
xor edx, edx
mov r8d, 0x22001
call qword [sym.imp.WINMM.dll_PlaySoundW]
cmp dword [r14 + 0x7c8], ebx
je 0x140042f29
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.1400449a0
lea rcx, [rsi + 0x68]
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
call fcn.1400306e0
test eax, eax
je 0x140042f29
cmp eax, dword [rsi + 0x6c]
jae 0x140042f29
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x140042f29
cmp word [rcx], bx
je 0x140042f29
mov edx, dword [r14 + 0x7c8]
dec edx
jne 0x140042f29
lea r8, [rsp + 0x74]
lea rdx, [0x14012e4f0]
mov dword [rsp + 0x74], ebx
call fcn.1400eb970
mov edx, dword [rsp + 0x74]
test edx, edx
je 0x140042f29
mov rcx, r14
call fcn.1400236d0
cmp dword [rsi + 0x90], ebx
je 0x140042f3b
test byte [r14 + 0x85c], 1
jne 0x140042f44
cmp dword [r14 + 0x7c8], ebx
je 0x140042f75
cmp edi, 0x39
ja 0x140042f75
movabs rcx, 0x200000010010020
bt rcx, rdi
jae 0x140042f75
mov ecx, edi
call fcn.140045e90
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
call fcn.1400449a0
cmp edi, 0x62
ja case.0x140042f97.4
lea rdx, [0x140000000]
movzx eax, byte [rdx + rdi + 0x44158]
mov ecx, dword [rdx + rax*4 + 0x44150]
add rcx, rdx
jmp rcx
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x40]
mov eax, dword [rdx + 0x18]
test eax, eax
jle 0x140042fcf
dec eax
mov dword [rdx + 0x18], eax
jne 0x140042fcf
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.140021fc0
mov dword [r14 + 0xc3c], ebx
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x140042f97.4
lea rax, [rsi + 0xb8]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rbp - 0x80], rax
call fcn.140050c30
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140042d19
xor edx, edx
mov dword [rsp + 0x70], edx
test r15b, 0x10
je 0x140043063
cmp qword [r14 + 0x788], rdx
je 0x140043063
mov rcx, qword [0x1402711c0]
call qword [sym.imp.USER32.dll_GetDC]
mov ecx, r15d
mov r8d, r12d
sar ecx, 0xc
mov rdx, rax
mov rdi, rax
movzx r9d, cl
mov rcx, r14
mov qword [rsp + 0x20], rbx
dec r9d
call fcn.14001ea80
mov rcx, qword [0x1402711c0]
mov rdx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [rbp + 0x1e8]
xor edx, edx
cmp edi, 0x62
ja case.0x14004308a.4
lea r8, [0x140000000]
movsxd rax, edi
movzx eax, byte [r8 + rax + 0x44298]
mov ecx, dword [r8 + rax*4 + 0x441bc]
add rcx, r8
jmp rcx
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004a0b0
mov ebx, eax
jmp case.0x14004308a.4
mov r13d, 1
mov ebx, r13d
jmp 0x140043322
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004a1b0
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov edx, r13d
mov rcx, rsi
call fcn.14004af40
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov edx, r13d
mov rcx, rsi
call fcn.14004b010
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov edx, edi
mov rcx, rsi
call fcn.14004a5f0
mov ebx, eax
jmp case.0x14004308a.4
test r12d, r12d
je 0x1400431e1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne 0x1400431e1
lea r9d, [rax + 5]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14004bbf0
mov ebx, eax
test eax, eax
jne 0x1400431e6
cmp dword [r14 + 0x840], eax
je 0x1400431e6
mov rcx, qword [0x1402711c0]
shl r13d, 0x10
mov r8, r15
movsxd r9, r13d
mov edx, 0x9002
or r9, 5
call qword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
test r12d, r12d
sete al
jmp 0x140043774
mov ebx, 1
xor eax, eax
test r12d, r12d
sete al
jmp 0x140043774
test r12d, r12d
je case.0x14004308a.11
mov rbx, qword [r14 + 0xce8]
mov rcx, r14
mov rdx, rbx
call fcn.1400202b0
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400aa8a0
test al, al
jns case.0x14004308a.11
mov rdx, qword [r14 + 0xc48]
mov rcx, r14
call fcn.1400202b0
mov r13d, 1
mov ebx, r13d
jmp 0x140043be4
mov r13d, 1
test r12d, r12d
je 0x1400430bc
mov edx, r13d
mov rcx, r14
call fcn.140022a30
mov ebx, eax
jmp 0x140043be4
mov edx, r12d
mov rcx, r14
call fcn.140022a30
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
lea r8d, [rax + 4]
mov r9d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004abd0
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
lea r8d, [rax + 8]
jmp 0x140043281
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
lea r8d, [rax + 1]
jmp 0x140043281
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
lea r8d, [rax + 2]
jmp 0x140043281
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x14004330f
mov r13d, 1
mov ebx, r13d
jmp 0x140043be4
mov edx, r13d
mov rcx, rsi
call fcn.14004c6f0
mov ebx, eax
mov r13d, 1
xor r15d, r15d
mov rdi, qword [rsp + 0x40]
mov esi, dword [r14 + 0xc44]
test esi, esi
je 0x14004334d
lea rcx, [r14 + 0x8a0]
call fcn.140032f70
mov ecx, r15d
cmp eax, esi
setge cl
test ecx, ecx
jne 0x140043386
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x18]
test eax, eax
jle 0x14004337c
dec eax
mov dword [rdi + 0x18], eax
jne 0x14004337c
xor r9d, r9d
mov r8d, r13d
xor edx, edx
mov rcx, r14
call fcn.140021fc0
mov dword [r14 + 0xc3c], r15d
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp - 0x80]
mov rdx, rdi
call fcn.14004ee10
mov eax, ebx
jmp 0x140042d1b
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004bf90
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004c000
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne 0x1400431e1
test r12d, r12d
je 0x1400431e1
lea r9d, [rax + 0x10]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14004bbf0
mov ebx, eax
xor eax, eax
test r12d, r12d
sete al
jmp 0x140043774
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004d200
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004d240
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004b270
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004b3a0
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004b510
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004b640
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
mov rcx, rsi
call fcn.14004b710
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004d3d0
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004d950
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x1400430b6
lea r9d, [rax + 1]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
lea rcx, [r14 + 0x50]
call fcn.1400327f0
test al, al
je 0x14004363c
cmp dword [r14 + 0x1034], ebx
jne 0x1400436b4
mov edi, 2
jmp 0x140043641
mov edi, 1
call fcn.1400dc5b0
lea rdx, [rbp - 0x70]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.Photos_PhotoCanvas
lea rcx, [rbp - 0x70]
mov r8d, 0x12
call fcn.1400e7d40
test eax, eax
jne 0x1400436be
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049d60
test eax, eax
je 0x1400436be
mov rcx, rsi
test r12d, r12d
je 0x1400436ad
mov edx, 1
call fcn.14004df30
mov r9d, edi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
jmp case.0x14004308a.4
xor edx, edx
call fcn.14004df30
mov eax, 1
jmp 0x140042d1b
test r12d, r12d
je 0x1400430b6
mov r9d, edi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
mov ebx, eax
jmp case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
mov r9d, r15d
mov r8d, edi
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], r12d
call fcn.14004c7a0
mov ebx, eax
jmp case.0x14004308a.4
test r12d, r12d
sete dl
mov dword [rsp + 0x70], edx
test r12d, r12d
je 0x14004374b
mov edx, 0x10
mov rcx, r14
call fcn.140026730
mov dword [rsp + 0x30], r15d
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov r8d, edi
xor edx, edx
mov rcx, r14
mov dword [rsp + 0x20], ebx
call fcn.140026810
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne 0x140043770
mov r9d, r12d
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004c8e0
mov ebx, eax
mov eax, dword [rsp + 0x70]
test eax, eax
je case.0x14004308a.4
lea rcx, [r14 + 0x50]
call fcn.140031f10
test al, al
jne case.0x14004308a.4
xor edx, edx
mov rcx, r14
call fcn.1400107a0
jmp case.0x14004308a.4
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.4
call qword [sym.imp.USER32.dll_LockWorkStation]
jmp case.0x14004308a.4
test r12d, r12d
je 0x1400430b6
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004cc60
mov ebx, eax
jmp case.0x14004308a.4
mov r13d, 1
test r12d, r12d
je 0x1400437f4
mov ebx, r13d
jmp 0x140043801
mov edx, r13d
mov rcx, r14
call fcn.1400107a0
mov ebx, eax
mov dword [r14 + 0x848], r13d
test r12d, r12d
je 0x140043322
lea rcx, [r14 + 0x118]
cmp word [rcx], 0
je 0x140043be4
mov r8, qword [0x1402711c0]
xor r9d, r9d
xor edx, edx
call fcn.1400dfb40
jmp 0x140043be4
test r12d, r12d
je 0x14004384b
mov r13d, 1
mov ebx, r13d
jmp 0x140043be4
xor edx, edx
mov rcx, r14
call fcn.1400107a0
jmp 0x14004331a
xor r15d, r15d
test r12d, r12d
je 0x140043870
mov r13d, 1
mov ebx, r13d
jmp 0x140043be7
mov edx, r15d
mov rcx, r14
cmp dword [r14 + 0x840], edx
sete dl
call fcn.1400107a0
mov r13d, 1
mov ebx, eax
jmp 0x140043325
mov edx, r12d
mov rcx, r14
call fcn.1400107a0
mov ebx, eax
jmp case.0x14004308a.4
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004cf90
mov ebx, eax
jmp case.0x14004308a.4
test r12d, r12d
je 0x14004391c
mov rax, qword [0x140270fe8]
lea rcx, [0x140270fe8]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x140270fe8]
mov edx, eax
mov rax, qword [0x140270fe8]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004d070
mov ebx, eax
jmp case.0x14004308a.4
cmp edi, 0x45
mov rdi, qword [rsp + 0x40]
jne 0x1400439b9
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x18]
test eax, eax
jle 0x14004395a
dec eax
mov dword [rdi + 0x18], eax
jne 0x14004395a
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.140021fc0
mov dword [r14 + 0xc3c], ebx
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [0x140270fe8]
lea rcx, [0x140270fe8]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x140270fe8]
mov edx, eax
mov rax, qword [0x140270fe8]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.140049970
test eax, eax
jne 0x1400439c7
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004d070
mov ebx, eax
mov r13d, 1
xor r15d, r15d
jmp 0x14004332a
mov r13d, 1
xor r15d, r15d
mov ebx, r13d
jmp 0x14004332a
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
test eax, eax
jne 0x140043862
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.14004ce50
mov r13d, 1
mov ebx, eax
jmp 0x140043be7
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
test eax, eax
jne 0x140043862
lea r9d, [r15 + 1]
jmp 0x1400439fd
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
test eax, eax
jne 0x140043862
xor r9d, r9d
lea r8d, [r15 + 1]
jmp 0x140043a00
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
test eax, eax
jne 0x140043862
mov r9d, 1
mov r8d, r9d
jmp 0x140043a00
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
test eax, eax
jne 0x140043862
xor r9d, r9d
lea r8d, [r15 + 2]
jmp 0x140043a00
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
test eax, eax
jne 0x140043862
lea r9d, [r15 + 1]
lea r8d, [r15 + 2]
jmp 0x140043a00
test r12d, r12d
je 0x1400430b6
mov ecx, 0x32
call fcn.140045e90
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
mov rdi, rax
call fcn.1400449a0
lea rcx, [rsi + 0x68]
mov r9, rdi
mov r8d, r15d
mov edx, r13d
call fcn.1400306e0
test eax, eax
je case.0x14004308a.4
cmp eax, dword [rsi + 0x6c]
jae case.0x14004308a.4
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rdi, qword [rcx + rax + 8]
test rdi, rdi
je case.0x14004308a.4
cmp word [rdi], bx
je case.0x14004308a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
mov r9, rdi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004d070
mov ebx, eax
jmp case.0x14004308a.4
test r12d, r12d
je 0x14004331c
mov rax, qword [0x1402707e0]
lea rcx, [0x1402707e0]
mov edx, 0xc
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rax, rax
je case.0x14004308a.4
cmp qword [rax + 0x10], rbx
je case.0x14004308a.4
cmp qword [rax + 0x18], rbx
je case.0x14004308a.4
cmp dword [r14 + 0xb70], 0x11
mov rcx, r14
je 0x140043bf5
mov edx, 0x11
call fcn.140022970
mov r13d, 1
xor r15d, r15d
test r12d, r12d
jne 0x140043392
jmp 0x140043325
xor edx, edx
jmp 0x140043bd9
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
test r12d, r12d
je 0x140043c30
lea r9d, [rax + 1]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
mov r13d, 1
mov ebx, eax
jmp 0x140043c39
mov r13d, 1
mov ebx, r13d
test byte [r14 + 0x844], 2
je 0x140043be4
cmp dword [r14 + 0x840], 0
je 0x140043be4
test r12d, r12d
je 0x140043322
mov rcx, qword [r14 + 0x58]
test rcx, rcx
jne 0x140043c63
lea rcx, [r14 + 0x70]
mov rax, qword [rcx]
mov r8d, r13d
mov edx, 0x1000320
call qword [rax + 0x30]
jmp 0x140043be4
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
xor r15d, r15d
mov r13d, 1
test eax, eax
jne 0x140043868
mov eax, r13d
lea rdx, [0x1401f1b40]
lea rcx, [0x1400dbcf0]
mov qword [rsp + 0x78], r13
mov qword [0x1401f1b40], rax
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x1401f1b40], ebx
je 0x140043cf0
cmp dword [0x1401f1b44], ebx
jbe 0x140043cf0
cmp dword [0x140270630], ebx
jne 0x140043cf0
mov edx, r13d
mov rcx, rsi
call fcn.14004bab0
mov dword [0x140270630], r13d
jmp 0x140043be7
call fcn.1400510c0
test al, al
jne 0x140043ebb
cmp dword [rsi + 0xb4], ebx
jne 0x140043ebb
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov r9d, 0x28
mov edx, r13d
mov dword [0x140270630], r15d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x54], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x50], 0x5b
call fcn.1400841d0
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov r9d, 0x28
mov edx, r13d
mov qword [rsp + 0x50], 9
call fcn.1400841d0
mov edi, 2
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
lea r9d, [rdi + 0x26]
mov edx, r13d
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], edi
call fcn.1400841d0
lea r9d, [rdi + 0x26]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edx, r13d
mov dword [rsp + 0x50], 0x5b
mov dword [rsp + 0x54], edi
call fcn.1400841d0
mov dword [rsi + 0xb4], r13d
mov rcx, qword [0x1402711c0]
lea r9, [0x14004e040]
mov r8d, 0x1f4
mov rdx, rsi
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
jne 0x140043be7
mov dword [rsi + 0xb4], r15d
jmp 0x140043be7
test r12d, r12d
je 0x14004331c
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.11
call fcn.1400510c0
xor r15d, r15d
mov r13d, 1
test al, al
je 0x140043e86
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edx, r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x54], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x50], 0x1b
call fcn.1400841d0
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edi, 2
mov edx, r13d
mov dword [rsp + 0x50], 0x1b
mov dword [rsp + 0x54], edi
call fcn.1400841d0
mov dword [rsi + 0xb4], r15d
mov dword [0x140270630], r15d
jmp 0x140043be7
mov rax, r13
lea rdx, [0x1401f1b40]
lea rcx, [0x1400dbcf0]
mov qword [rsp + 0x78], r13
mov qword [0x1401f1b40], rax
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x1401f1b40], ebx
jne 0x140043ebb
xor edx, edx
mov rcx, rsi
call fcn.14004bab0
mov dword [0x140270630], r15d
jmp 0x140043be7
test r12d, r12d
je 0x1400430b6
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.4
xor edi, edi
lea r9d, [rax + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rax + 1]
lea rcx, [0x1402707e0]
mov dword [rsp + 0x48], 1
mov qword [rsp + 0x54], rdi
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x50], 0x11
call fcn.1400841d0
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rdi + 1]
lea rcx, [0x1402707e0]
mov qword [rsp + 0x50], 0xa4
call fcn.1400841d0
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rdi + 1]
lea rcx, [0x1402707e0]
mov qword [rsp + 0x50], 0x10
call fcn.1400841d0
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rdi + 1]
lea rcx, [0x1402707e0]
mov qword [rsp + 0x50], 9
call fcn.1400841d0
mov edi, 2
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
lea r9d, [rdi + 0x26]
lea edx, [rdi - 1]
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], edi
call fcn.1400841d0
lea r9d, [rdi + 0x26]
lea r8, [rsp + 0x48]
lea edx, [rdi - 1]
lea rcx, [0x1402707e0]
mov dword [rsp + 0x50], 0x10
mov dword [rsp + 0x54], edi
call fcn.1400841d0
lea r13d, [rdi - 1]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x54], edi
mov dword [rsp + 0x50], 0xa4
call fcn.1400841d0
mov dword [rsp + 0x50], 0x11
xor r15d, r15d
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x54], edi
call fcn.1400841d0
jmp 0x140043be7
test r12d, r12d
je 0x1400430b6
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.4
mov esi, 1
xor edi, edi
lea r9d, [rax + 0x28]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edx, esi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x54], rdi
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x50], 0x11
call fcn.1400841d0
lea r9d, [rsi + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edx, esi
mov qword [rsp + 0x50], 0xa4
call fcn.1400841d0
lea r9d, [rsi + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edx, esi
mov qword [rsp + 0x50], 9
call fcn.1400841d0
lea r9d, [rsi + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
mov edi, 2
mov edx, esi
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], edi
call fcn.1400841d0
mov r13d, esi
jmp 0x140043fce
test r12d, r12d
je 0x1400430b6
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049970
test eax, eax
jne case.0x14004308a.4
lea ecx, [rax + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r13d, 1
xor r15d, r15d
lea r8, [rsp + 0x48]
lea rcx, [0x1402707e0]
lea r9d, [r13 + 0x27]
mov edx, r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x54], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x50], 0xd
call fcn.1400841d0
lea edi, [r13 + 1]
jmp 0x140043fff