Function at 0x140042e90
Capabilities:
Lock the desktop

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp + 0x20], r9d
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov r14, qword [0x14026efa0]
xor eax, eax
movsxd rdi, r9d
movsxd r15, r8d
movsxd r13, edx
mov rsi, rcx
mov ebx, eax
test r14, r14
je 0x140042ef9
nop dword [rax + rax]
mov rcx, qword [r14]
mov rdx, r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
jne 0x140042f1c
mov r14, qword [r14 + 8]
test r14, r14
jne 0x140042ee0
xor eax, eax
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r14, qword [r14]
test r14, r14
je 0x140042ef9
mov r12d, dword [rbp + 0x1f0]
mov edx, 1
test r12d, r12d
je 0x1400431bb
xor ecx, ecx
mov dword [rsp + 0x70], ecx
cmp edi, 0x1b
jne 0x140042f59
mov eax, dword [0x14026edd8]
add eax, 0xffffdc84
cmp eax, edx
ja 0x140042f72
mov dword [rsp + 0x70], edx
jmp 0x140042f72
cmp edi, 0x49
jne 0x140042f72
mov eax, dword [0x14026edd8]
add eax, 0xffffdc84
cmp eax, edx
cmovbe ecx, edx
mov dword [rsp + 0x70], ecx
lea rax, [rsi + 0xb8]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rsp + 0x78], rax
call fcn.14004ecf0
mov qword [rsp + 0x40], rax
add rax, 0x20
mov rcx, rax
mov qword [rbp - 0x80], rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x74], 1
cmp dword [rax + 0x18], ebx
jne 0x140042fdf
mov r8d, dword [rsp + 0x70]
xor r9d, r9d
mov rcx, r14
lea edx, [r9 + 1]
call fcn.140021f50
mov dword [r14 + 0xc3c], 1
mov dword [rsp + 0x74], eax
mov rax, qword [rsp + 0x40]
inc dword [rax + 0x18]
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [rsp + 0x74], ebx
jne 0x140043006
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x78]
call fcn.14004ede0
jmp 0x140042ef9
cmp dword [rsi + 0x90], ebx
je 0x14004307c
test byte [r14 + 0x85c], 1
je 0x14004307c
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140044b10
lea rcx, [rsi + 0x68]
lea r9, str.Sound
mov r8d, r15d
mov edx, r13d
call fcn.140030410
test eax, eax
je 0x14004307c
cmp eax, dword [rsi + 0x6c]
jae 0x14004307c
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x14004307c
cmp word [rcx], bx
je 0x14004307c
cmp edi, 0xb
je 0x14004307c
xor edx, edx
mov r8d, 0x22001
call qword [sym.imp.WINMM.dll_PlaySoundW]
cmp dword [r14 + 0x7c8], ebx
je 0x14004310a
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140044b10
lea rcx, [rsi + 0x68]
lea r9, str.LEDPattern
mov r8d, r15d
mov edx, r13d
call fcn.140030410
test eax, eax
je 0x14004310a
cmp eax, dword [rsi + 0x6c]
jae 0x14004310a
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rcx, qword [rcx + rax + 8]
test rcx, rcx
je 0x14004310a
cmp word [rcx], bx
je 0x14004310a
mov edx, dword [r14 + 0x7c8]
dec edx
jne 0x14004310a
lea r8, [rsp + 0x74]
lea rdx, [0x14012c1e0]
mov dword [rsp + 0x74], ebx
call fcn.1400e9ad0
mov edx, dword [rsp + 0x74]
test edx, edx
je 0x14004310a
mov rcx, r14
call fcn.140023670
cmp dword [rsi + 0x90], ebx
je 0x14004311c
test byte [r14 + 0x85c], 1
jne 0x140043125
cmp dword [r14 + 0x7c8], ebx
je 0x140043156
cmp edi, 0x39
ja 0x140043156
movabs rcx, 0x200000010010020
bt rcx, rdi
jae 0x140043156
mov ecx, edi
call fcn.140046000
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
call fcn.140044b10
cmp edi, 0x62
ja case.0x140043178.4
lea rdx, [0x140000000]
movzx eax, byte [rdx + rdi + 0x442cc]
mov ecx, dword [rdx + rax*4 + 0x442c4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [rsp + 0x40]
mov eax, dword [rdx + 0x18]
test eax, eax
jle 0x1400431af
dec eax
mov dword [rdx + 0x18], eax
jne 0x1400431af
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.140021f50
mov dword [r14 + 0xc3c], ebx
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x140043178.4
lea rax, [rsi + 0xb8]
mov r9d, edi
mov r8d, r15d
mov rcx, rax
mov edx, r13d
mov qword [rsp + 0x78], rax
call fcn.140050cd0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140042ef9
xor edx, edx
mov dword [rsp + 0x70], edx
test r15b, 0x10
je 0x140043243
cmp qword [r14 + 0x788], rdx
je 0x140043243
mov rcx, qword [0x14026e190]
call qword [sym.imp.USER32.dll_GetDC]
mov ecx, r15d
mov r8d, r12d
sar ecx, 0xc
mov rdx, rax
mov rdi, rax
movzx r9d, cl
mov rcx, r14
mov qword [rsp + 0x20], rbx
dec r9d
call fcn.14001ea30
mov rcx, qword [0x14026e190]
mov rdx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [rbp + 0x1e8]
xor edx, edx
cmp edi, 0x62
ja case.0x14004326a.4
lea r8, [0x140000000]
movsxd rax, edi
movzx eax, byte [r8 + rax + 0x4440c]
mov ecx, dword [r8 + rax*4 + 0x44330]
add rcx, r8
jmp rcx
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004a1f0
mov ebx, eax
jmp case.0x14004326a.4
mov r13d, 1
mov ebx, r13d
jmp 0x140043502
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004a2f0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov edx, r13d
mov rcx, rsi
call fcn.14004b080
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov edx, r13d
mov rcx, rsi
call fcn.14004b150
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov edx, edi
mov rcx, rsi
call fcn.14004a730
mov ebx, eax
jmp case.0x14004326a.4
test r12d, r12d
je 0x1400433c1
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne 0x1400433c1
lea r9d, [rax + 5]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14004bbf0
mov ebx, eax
test eax, eax
jne 0x1400433c6
cmp dword [r14 + 0x840], eax
je 0x1400433c6
mov rcx, qword [0x14026e190]
shl r13d, 0x10
mov r8, r15
movsxd r9, r13d
mov edx, 0x9002
or r9, 5
call qword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
test r12d, r12d
sete al
jmp 0x140043955
mov ebx, 1
xor eax, eax
test r12d, r12d
sete al
jmp 0x140043955
test r12d, r12d
je case.0x14004326a.11
mov rbx, qword [r14 + 0xce8]
mov rcx, r14
mov rdx, rbx
call fcn.140020240
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400a9790
test al, al
jns case.0x14004326a.11
mov rdx, qword [r14 + 0xc48]
mov rcx, r14
call fcn.140020240
mov r13d, 1
mov ebx, r13d
jmp 0x140043dc5
mov r13d, 1
test r12d, r12d
je 0x14004329c
mov edx, r13d
mov rcx, r14
call fcn.1400229d0
mov ebx, eax
jmp 0x140043dc5
mov edx, r12d
mov rcx, r14
call fcn.1400229d0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
lea r8d, [rax + 4]
mov r9d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004ad10
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
lea r8d, [rax + 8]
jmp 0x140043461
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
lea r8d, [rax + 1]
jmp 0x140043461
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
lea r8d, [rax + 2]
jmp 0x140043461
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x1400434ef
mov r13d, 1
mov ebx, r13d
jmp 0x140043dc5
mov edx, r13d
mov rcx, rsi
call fcn.14004c6f0
mov ebx, eax
mov r13d, 1
xor r15d, r15d
mov rdi, qword [rsp + 0x40]
mov esi, dword [r14 + 0xc44]
test esi, esi
je 0x14004352d
lea rcx, [r14 + 0x8a0]
call fcn.140032ca0
mov ecx, r15d
cmp eax, esi
setge cl
test ecx, ecx
jne 0x140043566
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x18]
test eax, eax
jle 0x14004355c
dec eax
mov dword [rdi + 0x18], eax
jne 0x14004355c
xor r9d, r9d
mov r8d, r13d
xor edx, edx
mov rcx, r14
call fcn.140021f50
mov dword [r14 + 0xc3c], r15d
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x78]
mov rdx, rdi
call fcn.14004ede0
mov eax, ebx
jmp 0x140042efb
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004bf90
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004c000
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne 0x1400433c1
test r12d, r12d
je 0x1400433c1
lea r9d, [rax + 0x10]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.14004bbf0
mov ebx, eax
xor eax, eax
test r12d, r12d
sete al
jmp 0x140043955
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004d200
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004d240
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004b3b0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004b4e0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004b650
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004b780
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
mov rcx, rsi
call fcn.14004b850
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004d3d0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004d950
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043296
lea r9d, [rax + 1]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
lea rcx, [r14 + 0x50]
call fcn.140032520
test al, al
je 0x14004381d
cmp dword [r14 + 0x1034], ebx
jne 0x140043895
mov edi, 2
jmp 0x140043822
mov edi, 1
call fcn.1400daec0
lea rdx, [rbp - 0x70]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.Photos_PhotoCanvas
lea rcx, [rbp - 0x70]
mov r8d, 0x12
call fcn.1400e5ea0
test eax, eax
jne 0x14004389f
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ea0
test eax, eax
je 0x14004389f
mov rcx, rsi
test r12d, r12d
je 0x14004388e
mov edx, 1
call fcn.14004df20
mov r9d, edi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
jmp case.0x14004326a.4
xor edx, edx
call fcn.14004df20
mov eax, 1
jmp 0x140042efb
test r12d, r12d
je 0x140043296
mov r9d, edi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
mov ebx, eax
jmp case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
mov r9d, r15d
mov r8d, edi
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], r12d
call fcn.14004c7a0
mov ebx, eax
jmp case.0x14004326a.4
test r12d, r12d
sete dl
mov dword [rsp + 0x70], edx
test r12d, r12d
je 0x14004392c
mov edx, 0x10
mov rcx, r14
call fcn.1400265b0
mov dword [rsp + 0x30], r15d
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov r8d, edi
xor edx, edx
mov rcx, r14
mov dword [rsp + 0x20], ebx
call fcn.140026690
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne 0x140043951
mov r9d, r12d
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004c8e0
mov ebx, eax
mov eax, dword [rsp + 0x70]
test eax, eax
je case.0x14004326a.4
lea rcx, [r14 + 0x50]
call fcn.140031c40
test al, al
jne case.0x14004326a.4
xor edx, edx
mov rcx, r14
call fcn.140010940
jmp case.0x14004326a.4
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.4
call qword [sym.imp.USER32.dll_LockWorkStation]
jmp case.0x14004326a.4
test r12d, r12d
je 0x140043296
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004cc60
mov ebx, eax
jmp case.0x14004326a.4
mov r13d, 1
test r12d, r12d
je 0x1400439d5
mov ebx, r13d
jmp 0x1400439e2
mov edx, r13d
mov rcx, r14
call fcn.140010940
mov ebx, eax
mov dword [r14 + 0x848], r13d
test r12d, r12d
je 0x140043502
lea rcx, [r14 + 0x118]
cmp word [rcx], 0
je 0x140043dc5
mov r8, qword [0x14026e190]
xor r9d, r9d
xor edx, edx
call fcn.1400de0a0
jmp 0x140043dc5
test r12d, r12d
je 0x140043a2c
mov r13d, 1
mov ebx, r13d
jmp 0x140043dc5
xor edx, edx
mov rcx, r14
call fcn.140010940
jmp 0x1400434fa
xor r15d, r15d
test r12d, r12d
je 0x140043a51
mov r13d, 1
mov ebx, r13d
jmp 0x140043dc8
mov edx, r15d
mov rcx, r14
cmp dword [r14 + 0x840], edx
sete dl
call fcn.140010940
mov r13d, 1
mov ebx, eax
jmp 0x140043505
mov edx, r12d
mov rcx, r14
call fcn.140010940
mov ebx, eax
jmp case.0x14004326a.4
mov r8d, r12d
mov edx, r13d
mov rcx, rsi
call fcn.14004cf90
mov ebx, eax
jmp case.0x14004326a.4
test r12d, r12d
je 0x140043afd
mov rax, qword [0x14026dfb8]
lea rcx, [0x14026dfb8]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x14026dfb8]
mov edx, eax
mov rax, qword [0x14026dfb8]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004d070
mov ebx, eax
jmp case.0x14004326a.4
cmp edi, 0x45
mov rdi, qword [rsp + 0x40]
jne 0x140043b9a
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x18]
test eax, eax
jle 0x140043b3b
dec eax
mov dword [rdi + 0x18], eax
jne 0x140043b3b
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 1]
call fcn.140021f50
mov dword [r14 + 0xc3c], ebx
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [0x14026dfb8]
lea rcx, [0x14026dfb8]
mov r8d, r15d
mov edx, r13d
call qword [rax + 0xd0]
lea rcx, [0x14026dfb8]
mov edx, eax
mov rax, qword [0x14026dfb8]
call qword [rax + 0x68]
mov r8, r14
mov edx, r15d
mov rcx, rsi
mov rbx, rax
call fcn.140049ab0
test eax, eax
jne 0x140043ba8
mov r9, rbx
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004d070
mov ebx, eax
mov r13d, 1
xor r15d, r15d
jmp 0x14004350a
mov r13d, 1
xor r15d, r15d
mov ebx, r13d
jmp 0x14004350a
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
xor r15d, r15d
test eax, eax
jne 0x140043a43
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 1
call fcn.14004ce50
mov r13d, 1
mov ebx, eax
jmp 0x140043dc8
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
xor r15d, r15d
test eax, eax
jne 0x140043a43
lea r9d, [r15 + 1]
jmp 0x140043bde
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
xor r15d, r15d
test eax, eax
jne 0x140043a43
xor r9d, r9d
lea r8d, [r15 + 1]
jmp 0x140043be1
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
xor r15d, r15d
test eax, eax
jne 0x140043a43
mov r9d, 1
mov r8d, r9d
jmp 0x140043be1
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
xor r15d, r15d
test eax, eax
jne 0x140043a43
xor r9d, r9d
lea r8d, [r15 + 2]
jmp 0x140043be1
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
xor r15d, r15d
test eax, eax
jne 0x140043a43
lea r9d, [r15 + 1]
lea r8d, [r15 + 2]
jmp 0x140043be1
test r12d, r12d
je 0x140043296
mov ecx, 0x32
call fcn.140046000
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
mov r9, rax
mov dword [rsp + 0x20], ebx
mov rdi, rax
call fcn.140044b10
lea rcx, [rsi + 0x68]
mov r9, rdi
mov r8d, r15d
mov edx, r13d
call fcn.140030410
test eax, eax
je case.0x14004326a.4
cmp eax, dword [rsi + 0x6c]
jae case.0x14004326a.4
mov ecx, eax
mov rax, qword [rsi + 0x70]
shl rcx, 5
mov rdi, qword [rcx + rax + 8]
test rdi, rdi
je case.0x14004326a.4
cmp word [rdi], bx
je case.0x14004326a.4
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
mov r9, rdi
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004d070
mov ebx, eax
jmp case.0x14004326a.4
test r12d, r12d
je 0x1400434fc
mov rax, qword [0x14026d7b0]
lea rcx, [0x14026d7b0]
mov edx, 0xc
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rax, rax
je case.0x14004326a.4
cmp qword [rax + 0x10], rbx
je case.0x14004326a.4
cmp qword [rax + 0x18], rbx
je case.0x14004326a.4
cmp dword [r14 + 0xb70], 0x11
mov rcx, r14
je 0x140043dd6
mov edx, 0x11
call fcn.140022910
mov r13d, 1
xor r15d, r15d
test r12d, r12d
jne 0x140043573
jmp 0x140043505
xor edx, edx
jmp 0x140043dba
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
test r12d, r12d
je 0x140043e11
lea r9d, [rax + 1]
mov r8d, r15d
mov edx, r13d
mov rcx, rsi
call fcn.14004daa0
mov r13d, 1
mov ebx, eax
jmp 0x140043e1a
mov r13d, 1
mov ebx, r13d
test byte [r14 + 0x844], 2
je 0x140043dc5
cmp dword [r14 + 0x840], 0
je 0x140043dc5
test r12d, r12d
je 0x140043502
mov rcx, qword [r14 + 0x58]
test rcx, rcx
jne 0x140043e44
lea rcx, [r14 + 0x70]
mov rax, qword [rcx]
mov r8d, r13d
mov edx, 0x1000320
call qword [rax + 0x30]
jmp 0x140043dc5
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
mov r13d, 1
test eax, eax
jne 0x140043410
mov ecx, r13d
call fcn.140051030
test al, al
je 0x140043e95
mov rcx, rsi
call fcn.14004bb20
jmp 0x140043dc5
call fcn.140051160
test al, al
jne 0x140043dc5
cmp dword [rsi + 0xb4], ebx
jne 0x140043dc5
xor eax, eax
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
lea r9d, [rax + 0x28]
mov edx, r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x54], rax
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x50], 0x5b
call fcn.140083b70
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov r9d, 0x28
mov edx, r13d
mov qword [rsp + 0x50], 9
call fcn.140083b70
mov edi, 2
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
lea r9d, [rdi + 0x26]
mov edx, r13d
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], edi
call fcn.140083b70
lea r9d, [rdi + 0x26]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov edx, r13d
mov dword [rsp + 0x50], 0x5b
xor r15d, r15d
mov dword [rsp + 0x54], edi
call fcn.140083b70
mov dword [rsi + 0xb4], r13d
mov rcx, qword [0x14026e190]
lea r9, [0x14004e030]
mov r8d, 0x1f4
mov rdx, rsi
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
jne 0x140043dc8
mov dword [rsi + 0xb4], r15d
jmp 0x140043dc8
test r12d, r12d
je 0x1400434fc
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.11
lea ecx, [rax + 5]
call fcn.140051030
test al, al
jne case.0x14004326a.4
call fcn.140051160
test al, al
je 0x140044030
mov r13d, 1
xor r15d, r15d
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
lea r9d, [r13 + 0x27]
mov edx, r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x54], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x50], 0x1b
call fcn.140083b70
lea r9d, [r13 + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov edi, 2
mov edx, r13d
mov dword [rsp + 0x50], 0x1b
mov dword [rsp + 0x54], edi
call fcn.140083b70
mov dword [rsi + 0xb4], r15d
jmp 0x140043dc8
mov rcx, rsi
call fcn.14004bb20
jmp case.0x14004326a.4
test r12d, r12d
je 0x140043296
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.4
xor edi, edi
lea r9d, [rax + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rax + 1]
lea rcx, [0x14026d7b0]
mov dword [rsp + 0x48], 1
mov qword [rsp + 0x54], rdi
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x50], 0x11
call fcn.140083b70
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rdi + 1]
lea rcx, [0x14026d7b0]
mov qword [rsp + 0x50], 0xa4
call fcn.140083b70
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rdi + 1]
lea rcx, [0x14026d7b0]
mov qword [rsp + 0x50], 0x10
call fcn.140083b70
lea r9d, [rdi + 0x28]
lea r8, [rsp + 0x48]
lea edx, [rdi + 1]
lea rcx, [0x14026d7b0]
mov qword [rsp + 0x50], 9
call fcn.140083b70
mov edi, 2
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
lea r9d, [rdi + 0x26]
lea edx, [rdi - 1]
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], edi
call fcn.140083b70
lea r9d, [rdi + 0x26]
lea r8, [rsp + 0x48]
lea edx, [rdi - 1]
lea rcx, [0x14026d7b0]
mov dword [rsp + 0x50], 0x10
mov dword [rsp + 0x54], edi
call fcn.140083b70
lea r13d, [rdi - 1]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x54], edi
mov dword [rsp + 0x50], 0xa4
call fcn.140083b70
mov dword [rsp + 0x50], 0x11
xor r15d, r15d
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov r9d, 0x28
mov edx, r13d
mov dword [rsp + 0x54], edi
call fcn.140083b70
jmp 0x140043dc8
test r12d, r12d
je 0x140043296
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.4
mov esi, 1
xor edi, edi
lea r9d, [rax + 0x28]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov edx, esi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x54], rdi
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x50], 0x11
call fcn.140083b70
lea r9d, [rsi + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov edx, esi
mov qword [rsp + 0x50], 0xa4
call fcn.140083b70
lea r9d, [rsi + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov edx, esi
mov qword [rsp + 0x50], 9
call fcn.140083b70
lea r9d, [rsi + 0x27]
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
mov edi, 2
mov edx, esi
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], edi
call fcn.140083b70
mov r13d, esi
jmp 0x140044144
test r12d, r12d
je 0x140043296
mov r8, r14
mov edx, r15d
mov rcx, rsi
call fcn.140049ab0
test eax, eax
jne case.0x14004326a.4
lea ecx, [rax + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r13d, 1
xor r15d, r15d
lea r8, [rsp + 0x48]
lea rcx, [0x14026d7b0]
lea r9d, [r13 + 0x27]
mov edx, r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x54], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x50], 0xd
call fcn.140083b70
lea edi, [r13 + 1]
jmp 0x140044175