Function at 0x180014900
Capabilities:
Link many functions at runtime
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc40]
sub rsp, 0xd40
xor esi, esi
mov r14, r9
mov r15, r8
mov r12d, esi
mov edi, esi
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rsi
mov r13d, edx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x48], eax
cmp r13d, 0x7e9
jne 0x180014a08
cmp r15, 0x1234
jne 0x180014a08
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rcx, [rbp + 0x101]
xor edx, edx
mov r8d, 0xff
mov byte [rbp + 0x100], sil
mov ebx, eax
call fcn.180008040
lea rdx, [0x18007d070]
lea rcx, [rbp + 0x100]
mov r8d, ebx
call fcn.180001a10
lea rcx, [rbp + 0x402]
xor edx, edx
mov r8d, 0x1fe
mov word [rbp + 0x400], si
call fcn.180008040
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x100]
call fcn.180013940
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1800149eb
mov rcx, rax
call fcn.180013410
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x180014a08
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rbx, qword [rsp + 0xd90]
add rsp, 0xd40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001ba90
test eax, eax
je 0x180014b6c
cmp eax, 1
jne 0x180014a24
call fcn.18001f700
jmp 0x180014b5f
cmp eax, 2
jne 0x180014a33
call fcn.18001f300
jmp 0x180014b5f
cmp eax, 3
jne 0x180014a42
call fcn.18001f620
jmp 0x180014b5f
cmp eax, 4
jne 0x180014a7d
cmp qword [0x18007bef8], rsi
je 0x180014b5f
lea rcx, [0x18007bf50]
call fcn.180035dd0
mov rcx, qword [0x18007bef8]
lea r8, [0x180023770]
mov edx, 0x50
call fcn.18001a870
jmp 0x180014b5f
cmp eax, 5
jne 0x180014ab8
cmp qword [0x18007bea8], rsi
je 0x180014b5f
lea rcx, [0x18007bf50]
call fcn.180035dd0
mov rcx, qword [0x18007bea8]
lea r8, [0x180023770]
mov edx, 0x50
call fcn.18001a870
jmp 0x180014b5f
cmp eax, 6
jne 0x180014af0
cmp qword [0x18007be90], rsi
je 0x180014b5f
lea rcx, [0x18007bf70]
call fcn.180035dd0
mov rcx, qword [0x18007be90]
lea r8, [0x180023230]
mov edx, 0x48
call fcn.18001a870
jmp 0x180014b5f
cmp eax, 7
jne 0x180014afc
call fcn.180024b70
jmp 0x180014b5f
cmp eax, 8
je 0x180014b5f
cmp eax, 9
jne 0x180014b0d
call fcn.180024900
jmp 0x180014b5f
cmp eax, 0xa
jne 0x180014b19
call fcn.1800254e0
jmp 0x180014b5f
cmp eax, 0xb
jne 0x180014b25
call fcn.180025590
jmp 0x180014b5f
cmp eax, 0xc
jne 0x180014b31
call fcn.180024d20
jmp 0x180014b5f
cmp eax, 0xd
jne 0x180014b3d
call fcn.1800219c0
jmp 0x180014b5f
cmp eax, 0xe
jne 0x180014b49
call fcn.180021aa0
jmp 0x180014b5f
cmp eax, 0xf
jne 0x180014b55
call fcn.18001f900
jmp 0x180014b5f
cmp eax, 0x10
jne 0x180014b5f
call fcn.18001f9e0
call fcn.18001ba90
test eax, eax
jne 0x180014a15
mov ecx, dword [0x180048620]
mov r11d, 1
mov ebx, ecx
test ecx, ecx
jne 0x180014bf5
cmp dword [0x18004861c], esi
je 0x180014bb1
cmp r13d, 6
je 0x180014bae
lea eax, [r13 - 8]
cmp eax, 0x3f
ja 0x180014ba5
movabs rdx, 0xc000000000110001
bt rdx, rax
jb 0x180014bae
cmp r13d, 0x86
jne 0x180014bb1
mov ebx, r11d
test ecx, ecx
jne 0x180014bf5
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub eax, dword [0x18007b934]
cmp eax, 0xbb8
jb 0x180014bef
mov dword [0x18007b934], ecx
mov ecx, 1
mov dword [0x180048624], esi
call fcn.18001bb90
mov r11d, 1
mov dword [0x180048624], r11d
jmp 0x180014bf5
mov r11d, 1
cmp r13d, 0x8b0
jb 0x180014c17
cmp r13d, 0x8ba
jae 0x180014c20
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.180027990
jmp 0x180014c37
cmp r13d, 0x8ba
jb 0x180014c55
cmp r13d, 0x8bf
jae 0x180014c55
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.180027700
mov rbx, qword [rbp + 0xc80]
test eax, eax
je 0x180015227
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015227
test ebx, ebx
jne 0x180014c9a
cmp r13d, 0x84e
jne 0x180015220
cmp r15, 0x1234
jne 0x180015220
mov eax, r14d
mov ebx, 0x8000
and eax, 1
mov dword [0x180048620], eax
mov eax, r14d
and eax, ebx
mov dword [0x18004861c], eax
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r13d, 0x84e
je 0x180014c66
cmp r13d, 6
jne 0x180014d06
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
cmp dword [rax], 0x596235d2
je 0x180014cdd
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014cc6
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 6
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
cmp r13d, 0x1c
jne 0x180014d70
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
nop dword [rax]
cmp dword [rax], 0x596235d2
je 0x180014d47
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014d30
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 0x1c
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
cmp r13d, 0x86
jne 0x180014dbe
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
cmp dword [rax], 0x596235d2
je 0x180014dad
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014d96
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
jmp 0x1800149eb
cmp r13d, 8
jne 0x180014e21
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
cmp dword [rax], 0x596235d2
je 0x180014df8
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014de1
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 8
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
cmp r13d, 0x46
jne 0x180014e84
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
cmp dword [rax], 0x596235d2
je 0x180014e5b
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014e44
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 0x46
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
cmp r13d, 0x47
jne 0x180014ee7
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
cmp dword [rax], 0x596235d2
je 0x180014ebe
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014ea7
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 0x47
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
cmp r13d, 0x18
jne 0x180014f50
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
nop word [rax + rax]
cmp dword [rax], 0x596235d2
je 0x180014f27
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014f10
jmp 0x180015220
cmp dword [0x18007b944], edi
jne 0x180015220
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 0x18
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
cmp r13d, 0x215
jne 0x180014f9b
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180015220
nop word [rax + rax]
cmp dword [rax], 0x7fae1452
je 0x180014dad
inc esi
add rax, 4
cmp esi, ecx
jb 0x180014f80
jmp 0x180015220
cmp r13d, 0x84
jne 0x1800150d0
mov rcx, qword [rbp + 0xc80]
mov rax, r14
lea rdx, [rsp + 0x60]
shr rax, 0x10
movsx edi, r14w
movsx ebx, ax
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x68]
mov rcx, qword [rbp + 0xc80]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x6c]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x4c], eax
mov qword [rsp + 0x58], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rcx, qword [rbp + 0xc80]
lea rdx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp edi, dword [rsp + 0x58]
jl 0x1800150b3
cmp edi, dword [rsp + 0x48]
jge 0x1800150b3
cmp ebx, dword [rsp + 0x5c]
jl 0x1800150b3
cmp ebx, dword [rsp + 0x4c]
jge 0x1800150b3
mov r8, qword [0x18007c0b8]
mov rdx, qword [0x18007c0b0]
mov r9d, dword [0x18007b944]
sub r8, rdx
mov ecx, esi
sar r8, 2
test r8d, r8d
je 0x180015063
mov rax, rdx
nop
cmp dword [rax], 0x592629e2
je 0x18001506b
inc ecx
add rax, 4
cmp ecx, r8d
jb 0x180015050
cmp dword [0x18007b060], esi
je 0x180015079
test r9d, r9d
jne 0x180015079
mov r14d, dword [0x18007b8a8]
jmp 0x18001508a
movzx ecx, bx
movzx eax, di
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b8a8], ecx
test r8d, r8d
je 0x18001521e
cmp dword [rdx], 0x5e1c1dfb
je 0x1800150ae
inc esi
add rdx, 4
cmp esi, r8d
jb 0x180015093
mov edi, r12d
jmp 0x180015220
test r9d, r9d
jne 0x1800150a6
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, 0x84
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
lea eax, [r13 - 0xa0]
cmp eax, 9
jbe 0x180017887
cmp r13d, 0x200
jne 0x180015253
mov r8d, dword [0x18007add8]
mov ebx, 0x8000
add r8d, 0xfffffcb8
je 0x18001518b
mov rdx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
mov ecx, esi
sub rdx, rax
sar rdx, 2
test edx, edx
je 0x180015133
cmp dword [rax], 0x592629e2
je 0x18001513b
inc ecx
add rax, 4
cmp ecx, edx
jb 0x180015121
cmp dword [0x18007b060], esi
je 0x18001514c
cmp dword [0x18007b944], esi
jne 0x18001514c
test rbx, r15
je 0x1800149eb
movsx eax, r14w
lea rdx, [rsp + 0x58]
mov ecx, r8d
mov dword [rsp + 0x58], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [rsp + 0x5c], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [0x18007ad6c], esi
jne 0x18001518b
movzx ecx, word [rsp + 0x5c]
movzx eax, word [rsp + 0x58]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b8a8], ecx
test rbx, r15
jne 0x18001520f
cmp dword [0x18007adf0], esi
jne 0x18001520f
cmp dword [0x18007b060], esi
jne 0x180015203
mov rax, qword [0x18007be88]
test rax, rax
je 0x1800151b0
call rax
jmp 0x1800151b6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x18001520f
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x18001520f
cmp rbx, rdi
je 0x18001520f
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
mov ecx, 0x200
call fcn.1800180d0
mov edi, esi
mov rbx, qword [rbp + 0xc80]
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x180015242
mov rcx, rax
call fcn.180013a60
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 1
jne 0x18001792c
movsxd rax, r12d
jmp 0x1800149ed
cmp r13d, 0x201
jne 0x1800153be
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015327
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x18001529a
test r9d, r9d
je 0x1800152a8
test r10d, r10d
jne 0x1800152a8
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x1800152bb
test r9d, r9d
je 0x18001530e
test r10d, r10d
jne 0x18001530e
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x1800152ef
call rax
jmp 0x1800152f5
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x1800153af
mov byte [0x18007bb70], 1
mov byte [0x18007bafc], 1
jmp 0x18001532e
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x1800153af
cmp dword [0x18007adf0], esi
jne 0x1800153af
test r9d, r9d
jne 0x1800153a3
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015350
call rax
jmp 0x180015356
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x1800153af
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800153af
cmp rbx, rdi
je 0x1800153af
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
mov ecx, 0x201
jmp 0x180015219
cmp r13d, 0x202
jne 0x180015537
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800154a0
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015405
test r9d, r9d
je 0x180015413
test r10d, r10d
jne 0x180015413
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x180015426
test r9d, r9d
je 0x180015479
test r10d, r10d
jne 0x180015479
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x18001545a
call rax
jmp 0x180015460
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015528
cmp byte [0x18007bb74], sil
mov byte [0x18007bb70], sil
mov byte [0x18007bafc], 1
sete byte [0x18007bb74]
jmp 0x1800154a7
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015528
cmp dword [0x18007adf0], esi
jne 0x180015528
test r9d, r9d
jne 0x18001551c
mov rax, qword [0x18007be88]
test rax, rax
je 0x1800154c9
call rax
jmp 0x1800154cf
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015528
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015528
cmp rbx, rdi
je 0x180015528
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
mov ecx, 0x202
jmp 0x180015219
cmp r13d, 0x203
jne 0x18001567d
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800155eb
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x18001557e
test r9d, r9d
je 0x18001558c
test r10d, r10d
jne 0x18001558c
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x18001559f
test r9d, r9d
je 0x1800155f2
test r10d, r10d
jne 0x1800155f2
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x1800155d3
call rax
jmp 0x1800155d9
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
shl r14d, 0x10
or r14, rax
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015673
cmp dword [0x18007adf0], esi
jne 0x180015673
test r9d, r9d
jne 0x180015667
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015614
call rax
jmp 0x18001561a
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015673
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015673
cmp rbx, rdi
je 0x180015673
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
jmp 0x18001521e
cmp r13d, 0x204
jne 0x1800157e8
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180015751
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x1800156c4
test r9d, r9d
je 0x1800156d2
test r10d, r10d
jne 0x1800156d2
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x1800156e5
test r9d, r9d
je 0x180015738
test r10d, r10d
jne 0x180015738
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015719
call rax
jmp 0x18001571f
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x1800157d9
mov byte [0x18007bb71], 1
mov byte [0x18007bafd], 1
jmp 0x180015758
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x1800157d9
cmp dword [0x18007adf0], esi
jne 0x1800157d9
test r9d, r9d
jne 0x1800157cd
mov rax, qword [0x18007be88]
test rax, rax
je 0x18001577a
call rax
jmp 0x180015780
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x1800157d9
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800157d9
cmp rbx, rdi
je 0x1800157d9
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
mov ecx, 0x204
jmp 0x180015219
cmp r13d, 0x205
jne 0x180015961
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800158ca
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x18001582f
test r9d, r9d
je 0x18001583d
test r10d, r10d
jne 0x18001583d
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x180015850
test r9d, r9d
je 0x1800158a3
test r10d, r10d
jne 0x1800158a3
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015884
call rax
jmp 0x18001588a
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015952
cmp byte [0x18007bb75], sil
mov byte [0x18007bb71], sil
mov byte [0x18007bafd], 1
sete byte [0x18007bb75]
jmp 0x1800158d1
mov r9d, dword [0x18007b060]
test rbx, r15
jne 0x180015952
cmp dword [0x18007adf0], esi
jne 0x180015952
test r9d, r9d
jne 0x180015946
mov rax, qword [0x18007be88]
test rax, rax
je 0x1800158f3
call rax
jmp 0x1800158f9
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015952
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015952
cmp rbx, rdi
je 0x180015952
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
mov ecx, 0x205
jmp 0x180015219
cmp r13d, 0x207
jne 0x180015a38
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800155eb
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x1800159a8
test r9d, r9d
je 0x1800159b6
test r10d, r10d
jne 0x1800159b6
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x1800159c9
test r9d, r9d
je 0x180015a1c
test r10d, r10d
jne 0x180015a1c
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x1800159fd
call rax
jmp 0x180015a03
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015673
mov byte [0x18007bb72], 1
mov byte [0x18007bafe], 1
jmp 0x1800155f2
cmp r13d, 0x208
jne 0x180015b1d
mov r11d, dword [0x18007add8]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x1800155eb
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
mov r9d, dword [0x18007b060]
test eax, eax
jne 0x180015a7f
test r9d, r9d
je 0x180015a8d
test r10d, r10d
jne 0x180015a8d
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x180015aa0
test r9d, r9d
je 0x180015af3
test r10d, r10d
jne 0x180015af3
mov ecx, dword [0x18007b8a8]
lea rdx, [rsp + 0x48]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r11d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015ad4
call rax
jmp 0x180015ada
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
mov r9d, dword [0x18007b060]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015673
cmp byte [0x18007bb76], sil
mov byte [0x18007bb72], sil
mov byte [0x18007bafe], 1
sete byte [0x18007bb76]
jmp 0x1800155f2
cmp r13d, 0x20a
jne 0x180015c3a
mov eax, dword [0x18007add8]
mov r9d, dword [0x18007b060]
mov ebx, 0x8000
add eax, 0xfffffcb8
je 0x180015baa
mov ecx, 0x5e1c1dfb
call fcn.18001ba50
mov r10d, dword [0x18007b944]
test eax, eax
jne 0x180015b5d
test r9d, r9d
je 0x180015b6b
test r10d, r10d
jne 0x180015b6b
test rbx, r15
je 0x1800149eb
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x180015b7e
test r9d, r9d
je 0x180015baa
test r10d, r10d
jne 0x180015baa
mov ecx, dword [0x18007b8a8]
movsx eax, cx
shr ecx, 0x10
mov dword [rsp + 0x58], eax
movsx eax, cx
movzx r14d, ax
mov dword [rsp + 0x5c], eax
movzx eax, word [rsp + 0x58]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180015c2b
cmp dword [0x18007adf0], esi
jne 0x180015c2b
test r9d, r9d
jne 0x180015c1f
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015bcc
call rax
jmp 0x180015bd2
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015c2b
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015c2b
cmp rbx, rdi
je 0x180015c2b
cmp dword [0x18007ad6c], esi
je 0x1800149eb
btr r15, 0xf
mov ecx, 0x20a
jmp 0x180015219
cmp r13d, 0x2a3
jne 0x180015cd6
mov r9d, dword [0x18007add8]
add r9d, 0xfffffcb8
je 0x180015220
mov ecx, 0x592629e2
call fcn.18001ba50
test eax, eax
jne 0x180015c75
cmp dword [0x18007b060], esi
je 0x180015220
cmp dword [0x18007b944], esi
jne 0x180015220
mov ecx, dword [0x18007b8a8]
mov r13d, 0x2a1
mov r15, rsi
movsx eax, cx
shr ecx, 0x10
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], eax
movsx eax, cx
mov ecx, r9d
mov dword [rsp + 0x4c], eax
mov rax, qword [0x18007ba98]
test rax, rax
je 0x180015cb9
call rax
jmp 0x180015cbf
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rsp + 0x4c]
movzx eax, word [rsp + 0x48]
shl r14d, 0x10
or r14, rax
jmp 0x180015220
cmp r13d, 0x2a2
je 0x180015c47
mov edi, pe_nt_image_headers64
cmp r13d, edi
jne 0x180015d87
bt r14, 0x1a
jb 0x180015d73
cmp dword [0x18007adf0], esi
jne 0x180015d73
cmp dword [0x18007ad60], esi
jne 0x1800149eb
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015d1c
call rax
jmp 0x180015d22
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015d73
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015d73
cmp rbx, rsi
jne 0x1800149eb
mov ecx, edi
btr r14, 0x1a
call fcn.180018180
mov edi, r12d
jmp 0x180015220
cmp r13d, 0x101
jne 0x180015e2a
bt r14, 0x1a
jb 0x180015e16
cmp dword [0x18007adf0], esi
jne 0x180015e16
cmp dword [0x18007ad60], esi
jne 0x1800149eb
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015dbf
call rax
jmp 0x180015dc5
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015e16
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015e16
cmp rbx, rdi
jne 0x1800149eb
mov ecx, 0x101
btr r14, 0x1a
call fcn.180018180
jmp 0x18001521e
cmp r13d, 0x104
jne 0x180015ecd
bt r14, 0x1a
jb 0x180015eb9
cmp dword [0x18007adf0], esi
jne 0x180015eb9
cmp dword [0x18007ad60], esi
jne 0x1800149eb
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015e62
call rax
jmp 0x180015e68
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015eb9
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015eb9
cmp rbx, rdi
jne 0x1800149eb
mov ecx, 0x104
btr r14, 0x1a
call fcn.180018180
jmp 0x18001521e
cmp r13d, 0x105
jne 0x180015f70
bt r14, 0x1a
jb 0x180015f5c
cmp dword [0x18007adf0], esi
jne 0x180015f5c
cmp dword [0x18007ad60], esi
jne 0x1800149eb
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015f05
call rax
jmp 0x180015f0b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015f5c
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015f5c
cmp rbx, rdi
jne 0x1800149eb
mov ecx, 0x105
btr r14, 0x1a
call fcn.180018180
jmp 0x18001521e
cmp r13d, 0x106
jne 0x180016009
bt r14, 0x1a
jb 0x180015fff
cmp dword [0x18007adf0], esi
jne 0x180015fff
cmp dword [0x18007ad60], esi
jne 0x1800149eb
mov rax, qword [0x18007be88]
test rax, rax
je 0x180015fa8
call rax
jmp 0x180015fae
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbx, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x180015fff
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180015fff
cmp rbx, rdi
jne 0x1800149eb
btr r14, 0x1a
jmp 0x18001521e
cmp r13d, 0x102
jne 0x1800160ef
lea eax, [r15 - 0x56]
mov ebx, 0x8000
test al, 0xdf
jne 0x180016037
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
jne 0x1800149eb
cmp dword [0x18007b05c], esi
je 0x1800160c5
bt r14, 0x1a
jb 0x1800160c5
cmp dword [0x18007adf0], esi
jne 0x1800160c5
cmp dword [0x18007ad60], esi
jne 0x1800149eb
mov rax, qword [0x18007be88]
test rax, rax
je 0x18001606e
call rax
jmp 0x180016074
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rdi, rax
mov dword [rsp + 0x40], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x40], eax
je 0x1800160c5
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
call fcn.1800133a0
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rdi
je 0x1800160c5
cmp rdi, rsi
jne 0x1800149eb
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
je 0x1800160e2
movzx ecx, r15b
call fcn.1800247a0
movsx r15, al
btr r14, 0x1a
mov edi, r12d
jmp 0x180015220
cmp r13d, 0x7e9
jne 0x1800162eb
cmp r15, 0x1234
jne 0x18001521e
call fcn.1800183e0
mov rdi, qword [rbp - 0x18]
mov ebx, esi
cmp dword [rdi + 0x1000424], ebx
jbe 0x18001613c
nop dword [rax]
mov edx, ebx
add rdx, 0x400009
lea rdx, [rdi + rdx*4]
call fcn.1800017e0
inc ebx
cmp ebx, dword [rdi + 0x1000424]
jb 0x180016120
lea rcx, [rdi + 0x1000024]
xor edx, edx
mov r8d, 0x400
call fcn.180008040
mov rcx, rdi
call fcn.18001fac0
test eax, eax
je 0x18001619a
call fcn.18001f3e0
test eax, eax
je 0x18001619a
call fcn.18001c230
test eax, eax
je 0x18001619a
mov rcx, rdi
call fcn.180024e00
test eax, eax
je 0x18001619a
call fcn.18001f7e0
test eax, eax
je 0x18001619a
mov rcx, rdi
call fcn.180021920
test eax, eax
je 0x18001619a
mov r12d, 1
mov ebx, r12d
jmp 0x1800161a2
mov ebx, esi
mov r12d, 1
mov ecx, 0x3f1c98f9
call fcn.18001ba50
test eax, eax
je 0x1800161b6
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, 0x6a5a450a
call fcn.18001ba50
mov ecx, dword [0x18007b03c]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b03c], ecx
mov ecx, 0x7d877e7a
call fcn.18001ba50
mov ecx, dword [0x18007b064]
movups xmm0, xmmword [rdi + 0x1000480]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b064], ecx
movaps xmmword [0x18007ad70], xmm0
movups xmm1, xmmword [rdi + 0x1000490]
movaps xmmword [0x18007ad80], xmm1
movups xmm0, xmmword [rdi + 0x10004a0]
movaps xmmword [0x18007ad90], xmm0
movups xmm1, xmmword [rdi + 0x10004b0]
movaps xmmword [0x18007ada0], xmm1
movups xmm0, xmmword [rdi + 0x10004c0]
movaps xmmword [0x18007adb0], xmm0
movups xmm1, xmmword [rdi + 0x10004d0]
movaps xmmword [0x18007adc0], xmm1
movups xmm0, xmmword [rdi + 0x10004e0]
movaps xmmword [0x18007b8c0], xmm0
movups xmm1, xmmword [rdi + 0x10004f0]
movaps xmmword [0x18007b8d0], xmm1
movups xmm0, xmmword [rdi + 0x1000500]
movaps xmmword [0x18007b8e0], xmm0
movups xmm1, xmmword [rdi + 0x1000510]
movaps xmmword [0x18007b8f0], xmm1
movups xmm0, xmmword [rdi + 0x1000520]
movaps xmmword [0x18007b900], xmm0
movups xmm1, xmmword [rdi + 0x1000530]
movaps xmmword [0x18007b910], xmm1
call fcn.180018240
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x180048624], esi
mov dword [0x18007adf4], eax
test ebx, ebx
je 0x1800162bc
xor ecx, ecx
call fcn.18001bb90
test eax, eax
jne 0x1800162bf
mov r12d, esi
mov eax, 1
lea rcx, [0x180076d60]
xor edx, edx
mov r8d, 0x4000
mov dword [0x180048624], eax
mov edi, eax
call fcn.180008040
mov dword [0x18007b974], esi
jmp 0x180015220
cmp r13d, 0x7ea
jne 0x18001631d
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov rcx, rbx
call fcn.180017960
mov edi, 1
mov r12d, eax
jmp 0x180015227
cmp r13d, 0x837
jne 0x180016795
mov ecx, r15d
mov rax, r15
mov edi, esi
and ecx, 0x80
shr rax, 0x10
mov dword [rsp + 0x40], ecx
movzx eax, ax
mov ecx, r15d
and ecx, 0x40
test r15b, 1
mov dword [rbp - 0x28], eax
cmovne edi, r11d
mov dword [rbp - 0x20], ecx
cmp eax, 2
ja 0x18001521e
cmp r14d, 0xff
ja 0x18001521e
movsxd rax, r14d
xor edx, edx
mov ecx, r14d
mov qword [rsp + 0x58], rax
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, r14d
mov ebx, eax
mov dword [rbp - 0x24], eax
shl ebx, 0x10
or rbx, 1
call fcn.180012ef0
test eax, eax
je 0x18001639d
bts rbx, 0x18
mov eax, dword [rbp - 0x28]
cmp eax, 1
jne 0x1800163d4
test edi, edi
jne 0x1800163bf
cmp r14d, 0x79
je 0x1800163bf
mov ecx, r14d
mov r12d, pe_nt_image_headers64
call fcn.180025490
jmp 0x180016406
mov ecx, r14d
bts rbx, 0x1d
mov r12d, 0x104
call fcn.180025490
jmp 0x180016406
test edi, edi
jne 0x1800163e6
cmp r14d, 0x79
je 0x1800163e6
mov r12d, 0x101
jmp 0x1800163f1
bts rbx, 0x1d
mov r12d, 0x105
mov ecx, 0xc0000000
or rbx, rcx
cmp eax, 2
jne 0x180016406
mov ecx, r14d
call fcn.180024c10
cmp dword [rbp - 0x20], esi
mov rax, qword [0x18007b988]
cmovne rbx, rsi
test rax, rax
je 0x18001641f
xor ecx, ecx
call rax
jmp 0x180016425
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
jne 0x180016446
mov rcx, qword [rbp + 0xc80]
call qword [sym.imp.USER32.dll_SetFocus]
mov r10, qword [rbp + 0xc80]
mov rdi, r10
jmp 0x18001644d
mov r10, qword [rbp + 0xc80]
mov ecx, 0x797a779e
call fcn.18001ba50
test eax, eax
cmove rdi, r10
cmp dword [0x18007b944], esi
jne 0x180016477
cmp rdi, r10
jne 0x180016477
cmp dword [0x18007adf0], esi
jne 0x180016477
bts rbx, 0x1a
mov ecx, 0x18d3d20
call fcn.18001ba50
test eax, eax
je 0x180016698
cmp qword [0x180076d48], rsi
jne 0x18001656c
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x72657375
mov dword [rsp + 0x74], 0x642e3233
mov word [rsp + 0x78], 0x6c6c
mov byte [rsp + 0x7a], sil
mov dword [rbp - 0x78], 0x52746547
mov dword [rbp - 0x74], 0x73696765
mov dword [rbp - 0x70], 0x65726574
mov dword [rbp - 0x6c], 0x77615264
mov dword [rbp - 0x68], 0x75706e49
mov dword [rbp - 0x64], 0x76654474
mov dword [rbp - 0x60], 0x73656369
mov byte [rbp - 0x5c], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180016557
lea rcx, [rbp]
xor edx, edx
mov r8d, 0xa0
mov dword [rbp + 0xc88], 0xa
call fcn.180008040
lea rdx, [rbp + 0xc88]
lea rcx, [rbp]
mov r8d, 0x10
call qword [rsp + 0x48]
mov ecx, esi
test eax, eax
je 0x180016557
lea rdx, [rbp + 2]
cmp word [rdx], 6
je 0x18001663a
inc ecx
add rdx, 0x10
cmp ecx, eax
jb 0x180016543
mov rax, qword [0x180076d48]
test rax, rax
cmove rax, rdi
mov qword [0x180076d48], rax
cmp qword [0x18007b928], rsi
jne 0x180016650
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x72657375
mov dword [rsp + 0x64], 0x642e3233
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], sil
mov dword [rbp - 0x58], 0x52746547
mov dword [rbp - 0x54], 0x6e497761
mov dword [rbp - 0x50], 0x44747570
mov dword [rbp - 0x4c], 0x63697665
mov dword [rbp - 0x48], 0x73694c65
mov word [rbp - 0x44], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180016650
lea rcx, [rbp + 0x600]
xor edx, edx
mov r8d, 0x640
mov dword [rbp - 0x28], 0x64
call fcn.180008040
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x600]
mov r8d, 0x10
call qword [rsp + 0x48]
mov edx, esi
test eax, eax
je 0x180016650
lea rcx, [rbp + 0x600]
nop dword [rax]
cmp dword [rcx + 8], 1
jne 0x18001662e
mov r8, qword [rcx]
test r8, r8
jne 0x180016649
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016620
jmp 0x180016650
mov eax, ecx
add rax, rax
mov rax, qword [rbp + rax*8 + 8]
jmp 0x18001655e
mov qword [0x18007b928], r8
mov rcx, qword [0x180076d48]
xor r8d, r8d
mov r9d, 0x12345678
mov edx, 0xff
cmp dword [rsp + 0x40], esi
je 0x18001668b
mov eax, dword [0x180076d54]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016691
call qword [sym.imp.USER32.dll_PostMessageA]
mov r10, qword [rbp + 0xc80]
cmp dword [0x18007b04c], esi
je 0x1800166db
mov edx, dword [0x180076d44]
lea r8, [0x18007ae00]
xor eax, eax
lea rcx, [rdx + rdx*2]
inc edx
mov qword [r8 + rcx*8], rax
mov qword [r8 + rcx*8 + 8], rax
mov qword [r8 + rcx*8 + 0x10], rax
mov eax, dword [rbp - 0x24]
cmp edx, 0xa
mov dword [r8 + rcx*8], r14d
cmovae edx, esi
mov dword [r8 + rcx*8 + 4], eax
mov dword [0x180076d44], edx
cmp dword [0x180048618], esi
mov edx, r12d
je 0x180016739
mov r8, qword [rsp + 0x58]
mov r9, rbx
mov rcx, rdi
cmp dword [rsp + 0x40], esi
je 0x180016724
mov eax, dword [0x180076d54]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015220
call qword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015220
mov rsi, qword [rsp + 0x58]
btr rbx, 0x1a
mov rcx, r10
mov r8, rsi
mov r9, rbx
call qword [0x18007b920]
xor eax, eax
lea rcx, [rbp - 0x58]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x58], rdi
mov dword [rbp - 0x50], r12d
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
call qword [sym.imp.USER32.dll_TranslateMessage]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015220
cmp r13d, 0x838
jne 0x180016f5f
mov rax, r15
mov ecx, esi
mov edx, esi
shr rax, 0x10
mov r8d, esi
movsx r9d, r14w
movzx edi, ax
mov eax, r15d
mov dword [rbp - 0x20], r9d
and eax, 0x80
test r15b, 1
mov dword [rbp - 0x24], edi
cmovne ecx, r11d
test r15b, 2
mov dword [rsp + 0x40], eax
cmovne edx, r11d
test r15b, 4
mov rax, r14
cmovne r8d, r11d
shr rax, 0x10
movsx r10d, ax
mov dword [rbp - 0x28], r10d
cmp edi, 0xa
ja 0x18001521e
mov dword [rbp + 0xc88], esi
mov qword [rsp + 0x58], r14
mov ebx, 0x780000
mov eax, 0xff880000
cmp edi, 1
jne 0x18001683a
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180016822
or r12, 2
test r8d, r8d
je 0x18001682b
or r12, 0x10
mov dword [rbp + 0xc88], 0x200
jmp 0x180016956
cmp edi, 2
jne 0x180016851
mov r12, r11
mov dword [rbp + 0xc88], 0x201
jmp 0x180016956
cmp edi, 8
jne 0x180016868
mov r12, r11
mov dword [rbp + 0xc88], 0x203
jmp 0x180016956
cmp edi, 3
jne 0x18001687c
mov dword [rbp + 0xc88], 0x202
jmp 0x180016956
cmp edi, 4
jne 0x180016894
lea r12d, [rdi - 2]
mov dword [rbp + 0xc88], 0x204
jmp 0x180016956
cmp edi, 5
jne 0x1800168a8
mov dword [rbp + 0xc88], 0x205
jmp 0x180016956
cmp edi, 6
jne 0x1800168bb
mov eax, 0x207
lea r12d, [rdi + 0xa]
jmp 0x180016950
cmp edi, 7
jne 0x1800168ca
mov eax, 0x208
jmp 0x180016950
cmp edi, 9
jne 0x1800168ef
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x1800168dd
or r12, 2
test r8d, r8d
je 0x1800168e6
or r12, 0x10
movzx r12d, r12w
or r12, rbx
jmp 0x180016912
cmp edi, 0xa
jne 0x180016956
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180016902
or r12, 2
test r8d, r8d
je 0x18001690b
or r12, 0x10
movzx r12d, r12w
or r12, rax
mov rcx, qword [rbp + 0xc80]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], r9d
mov dword [rsp + 0x5c], r10d
call qword [sym.imp.USER32.dll_ClientToScreen]
movzx r9d, word [rsp + 0x5c]
movzx eax, word [rsp + 0x58]
shl r9d, 0x10
mov r11d, 1
or r9, rax
mov eax, 0x20a
mov qword [rsp + 0x58], r9
mov dword [rbp + 0xc88], eax
cmp dword [0x18007b944], esi
jne 0x18001696e
cmp dword [0x18007adf0], esi
jne 0x18001696e
mov ebx, 0x8000
or r12, rbx
cmp edi, 1
jne 0x180016a17
mov rcx, qword [rbp + 0xc80]
movsx ebx, word [0x18007b8a8]
movsx edi, word [0x18007b8aa]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x48], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov r9d, dword [rbp - 0x28]
mov r8d, dword [rbp - 0x20]
movzx eax, r9w
add ax, word [rsp + 0x4c]
movzx edx, ax
movzx eax, r8w
add ax, word [rsp + 0x48]
shl edx, 0x10
movzx ecx, ax
or edx, ecx
mov dword [0x18007b8a8], edx
mov edx, dword [rsp + 0x48]
sub edx, ebx
mov ebx, dword [rsp + 0x4c]
sub ebx, edi
add ebx, r9d
add edx, r8d
je 0x1800169e8
mov cl, 0x37
mov dword [0x18007be80], edx
call fcn.1800241c0
test ebx, ebx
je 0x1800169fb
mov edx, ebx
mov cl, 0x38
mov dword [0x18007bee8], ebx
call fcn.1800241c0
mov edi, dword [rbp - 0x24]
mov rax, qword [0x18007b988]
test rax, rax
je 0x180016b51
xor ecx, ecx
call rax
jmp 0x180016b57
cmp edi, 2
je 0x180016b34
cmp edi, 8
je 0x180016b34
cmp edi, 3
jne 0x180016a55
cmp byte [0x18007bb74], sil
mov byte [0x18007bb70], sil
mov byte [0x18007bafc], 1
sete byte [0x18007bb74]
xor edx, edx
xor ecx, ecx
call fcn.1800241c0
jmp 0x1800169fe
cmp edi, 4
jne 0x180016a74
mov edx, r11d
mov cl, 1
mov byte [0x18007bb71], 1
mov byte [0x18007bafd], 1
call fcn.1800241c0
jmp 0x1800169fe
cmp edi, 5
jne 0x180016aa3
cmp byte [0x18007bb75], sil
mov cl, 1
mov byte [0x18007bb71], sil
sete byte [0x18007bb75]
xor edx, edx
mov byte [0x18007bafd], 1
call fcn.1800241c0
jmp 0x1800169fe
cmp edi, 6
jne 0x180016ac5
mov edx, r11d
mov cl, 2
mov byte [0x18007bb72], 1
mov byte [0x18007bafe], 1
call fcn.1800241c0
jmp 0x1800169fe
cmp edi, 7
jne 0x180016af4
cmp byte [0x18007bb76], sil
mov cl, 2
mov byte [0x18007bb72], sil
sete byte [0x18007bb76]
xor edx, edx
mov byte [0x18007bafe], 1
call fcn.1800241c0
jmp 0x1800169fe
cmp edi, 0xa
jne 0x180016b12
mov edx, r11d
mov cl, 4
call fcn.1800241c0
mov dword [0x18007beec], 0xffffff88
jmp 0x1800169fe
cmp edi, 9
jne 0x1800169fe
mov edx, r11d
mov cl, 5
call fcn.1800241c0
mov dword [0x18007beec], 0x78
jmp 0x1800169fe
mov edx, r11d
xor ecx, ecx
mov byte [0x18007bb70], 1
mov byte [0x18007bafc], 1
call fcn.1800241c0
jmp 0x1800169fe
call qword [sym.imp.USER32.dll_GetFocus]
mov rbx, rax
test rax, rax
jne 0x180016b6f
mov rbx, qword [rbp + 0xc80]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetFocus]
mov ecx, 0x797a779e
call fcn.18001ba50
mov rcx, qword [rbp + 0xc80]
mov r9d, dword [0x18007b8a8]
test eax, eax
mov edx, 0x84
cmove rbx, rcx
xor r8d, r8d
cmp dword [rsp + 0x40], esi
je 0x180016bbb
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016bc1
call qword [sym.imp.USER32.dll_SendMessageA]
cmp edi, 1
jne 0x180016c05
mov r8, qword [rbp + 0xc80]
mov r9d, 0x2000001
lea edx, [rdi + 0x1f]
mov rcx, r8
cmp dword [rsp + 0x40], esi
je 0x180016bff
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016c05
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x326cd5b9
call fcn.18001ba50
test eax, eax
je 0x180016e74
cmp qword [0x18007b888], rsi
jne 0x180016cf9
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x72657375
mov dword [rsp + 0x64], 0x642e3233
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], sil
mov dword [rbp - 0x78], 0x52746547
mov dword [rbp - 0x74], 0x73696765
mov dword [rbp - 0x70], 0x65726574
mov dword [rbp - 0x6c], 0x77615264
mov dword [rbp - 0x68], 0x75706e49
mov dword [rbp - 0x64], 0x76654474
mov dword [rbp - 0x60], 0x73656369
mov byte [rbp - 0x5c], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180016ce4
lea rcx, [rbp]
xor edx, edx
mov r8d, 0xa0
mov dword [rbp - 0x24], 0xa
call fcn.180008040
lea rdx, [rbp - 0x24]
lea rcx, [rbp]
mov r8d, 0x10
call qword [rsp + 0x48]
mov edx, esi
test eax, eax
je 0x180016ce4
lea rcx, [rbp + 2]
nop dword [rax + rax]
cmp word [rcx], 2
je 0x180016dc1
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016cd0
mov rax, qword [0x18007b888]
test rax, rax
cmove rax, rbx
mov qword [0x18007b888], rax
cmp qword [0x18007b040], rsi
jne 0x180016dd7
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x72657375
mov dword [rsp + 0x74], 0x642e3233
mov word [rsp + 0x78], 0x6c6c
mov byte [rsp + 0x7a], sil
mov dword [rbp - 0x58], 0x52746547
mov dword [rbp - 0x54], 0x6e497761
mov dword [rbp - 0x50], 0x44747570
mov dword [rbp - 0x4c], 0x63697665
mov dword [rbp - 0x48], 0x73694c65
mov word [rbp - 0x44], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x180016dd7
lea rcx, [rbp + 0x600]
xor edx, edx
mov r8d, 0x640
mov dword [rsp + 0x48], 0x64
call fcn.180008040
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x600]
mov r8d, 0x10
call rbx
mov edx, esi
test eax, eax
je 0x180016dd7
lea rcx, [rbp + 0x600]
cmp dword [rcx + 8], esi
jne 0x180016db5
mov r8, qword [rcx]
test r8, r8
jne 0x180016dd0
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180016da8
jmp 0x180016dd7
mov eax, edx
add rax, rax
mov rax, qword [rbp + rax*8 + 8]
jmp 0x180016ceb
mov qword [0x18007b040], r8
mov ebx, dword [rsp + 0x40]
mov rcx, qword [0x18007b888]
xor r8d, r8d
mov r9d, 0x12345679
mov edx, 0xff
test ebx, ebx
je 0x180016e4c
mov eax, dword [0x18007b948]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
cmp edi, 1
jne 0x180016e78
mov eax, dword [0x18007b948]
mov rcx, qword [0x18007b888]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180016e78
call qword [sym.imp.USER32.dll_PostMessageA]
cmp edi, 1
jne 0x180016e78
mov rcx, qword [0x18007b888]
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180016e78
mov ebx, dword [rsp + 0x40]
cmp dword [0x18007ad64], esi
mov ecx, dword [rbp + 0xc88]
je 0x180016f16
lea eax, [rcx - 0x203]
test eax, 0xfffffffa
jne 0x180016e9f
cmp ecx, 0x204
jne 0x180016f16
mov edx, dword [0x18007b870]
lea rax, [0x18007aef0]
shl rdx, 5
add rdx, rax
xor eax, eax
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov eax, dword [rbp - 0x20]
mov dword [rdx], eax
mov eax, dword [rbp - 0x28]
mov dword [rdx + 4], eax
cmp ecx, 0x20a
jne 0x180016eea
cmp edi, 9
mov eax, 0xff880000
mov ecx, 0x780000
cmove eax, ecx
mov dword [rdx + 8], eax
mov rdi, qword [rbp + 0xc80]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x18007b870]
mov ecx, dword [rbp + 0xc88]
inc eax
cmp eax, 0xa
cmovae eax, esi
mov dword [0x18007b870], eax
jmp 0x180016f1d
mov rdi, qword [rbp + 0xc80]
cmp dword [0x180048610], esi
mov r9, qword [rsp + 0x58]
mov edx, ecx
mov rcx, rdi
mov r8, r12
je 0x180016f45
test ebx, ebx
je 0x180016724
mov eax, dword [0x18007b948]
jmp 0x1800166fd
btr r9, 0x1a
call qword [0x18007b920]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015220
cmp r13d, 0x83a
jne 0x180016f8e
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x180048614], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x83d
jne 0x180016fce
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
movsx eax, r14w
mov r12d, r11d
mov edi, r11d
mov dword [0x18007be80], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [0x18007bee8], eax
jmp 0x180015227
cmp r13d, 0x83f
jne 0x180017013
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov eax, r14d
mov r12d, r11d
mov edi, r11d
btr eax, 0x1f
mov dword [0x18007b940], eax
mov rax, r14
shr rax, 0x1f
and eax, 1
mov dword [0x180076d50], eax
jmp 0x180015227
cmp r13d, 0x863
jne 0x180017053
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
xorps xmm0, xmm0
mov r12d, r11d
mov edi, r11d
cvtsi2sd xmm0, r14
divsd xmm0, qword [0x180041620]
movsd qword [0x180048628], xmm0
jmp 0x180015227
cmp r13d, 0x842
jne 0x1800170be
cmp r15, 0x1234
jne 0x18001521e
mov ecx, 0x16cc25d5
call fcn.18001ba50
test eax, eax
je 0x1800170b4
call fcn.180024d90
mov rcx, rax
mov rdi, rax
call fcn.180012f90
mov edx, r14d
mov rcx, rax
mov rbx, rax
call fcn.1800130a0
mov r12d, eax
test rdi, rdi
je 0x1800170a6
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
test rbx, rbx
je 0x1800170b4
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov edi, 1
jmp 0x180015220
cmp r13d, 0x843
jne 0x18001715a
cmp r15, 0x1234
jne 0x18001521e
mov ecx, 0x16cc25d5
call fcn.18001ba50
test eax, eax
je 0x18001714c
call fcn.180024d90
mov ebx, 0xffff
mov rdi, rax
mov esi, ebx
test rax, rax
je 0x180017134
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetIconInfo]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x180017116
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x180017125
call qword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [rbp - 0x54]
mov esi, dword [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
movzx r12d, si
movzx eax, bx
mov edi, 1
shl r12d, 0x10
or r12d, eax
jmp 0x180015220
or r12d, 0xffffffff
lea edi, [r12 + 2]
jmp 0x180015220
cmp r13d, 0x844
jne 0x1800171a6
cmp r15, 0x1234
jne 0x180017198
movsxd rax, dword [0x18007b974]
cmp eax, 0x1000
jge 0x180017198
lea rcx, [0x180076d60]
lea r12d, [rax + 1]
mov edi, r11d
mov dword [rcx + rax*4], r11d
mov dword [0x18007b974], r12d
jmp 0x180015220
mov r12d, 0x1388
mov edi, r11d
jmp 0x180015220
cmp r13d, 0x845
jne 0x1800171e3
cmp r15, 0x1234
jne 0x18001521e
lea rax, [r14 - 1]
cmp rax, 0xfff
ja 0x180014c8f
lea rcx, [0x180076d60]
mov r12d, r11d
mov edi, r11d
mov dword [rcx + r14*4 - 4], esi
jmp 0x180015220
cmp r13d, 0x846
jne 0x1800172db
cmp r15, 0x1234
jne 0x18001521e
test r14, r14
jne 0x18001721f
mov dword [0x18007ad60], esi
mov dword [0x18007b05c], esi
mov dword [0x18007b060], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r14, 1
jne 0x180017244
mov dword [0x18007b060], r11d
mov dword [0x18007ad60], r11d
mov dword [0x18007b05c], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r14, 2
jne 0x180017268
mov dword [0x18007b060], r11d
mov dword [0x18007ad60], esi
mov dword [0x18007b05c], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r14, 3
jne 0x18001728c
mov dword [0x18007b05c], esi
mov dword [0x18007ad60], r11d
mov dword [0x18007b060], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r14, 4
jne 0x1800172b2
mov dword [0x18007b060], r11d
mov dword [0x18007ad60], r11d
mov dword [0x18007b05c], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r14, 5
jne 0x180014c8f
mov dword [0x18007b05c], r11d
mov dword [0x18007ad60], r11d
mov dword [0x18007b060], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r13d, 0x850
jne 0x18001730a
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x18007b968], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x851
jne 0x180017336
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov r12d, dword [0x18007b8a8]
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x852
jne 0x180017365
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x180048618], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x853
jne 0x180017394
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x180048610], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x84d
jne 0x1800173c3
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x18007adf0], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x84f
jne 0x180017622
cmp r15, 0x1234
jne 0x18001521e
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x48], 0x336d6d69
mov dword [rsp + 0x4c], 0x6c642e32
mov word [rsp + 0x50], 0x6c
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test r14, r14
je 0x180017503
test rax, rax
je 0x180016786
lea rdx, [rsp + 0x60]
mov rcx, rax
mov dword [rsp + 0x60], 0x476d6d49
mov dword [rsp + 0x64], 0x6f437465
mov dword [rsp + 0x68], 0x7865746e
mov word [rsp + 0x6c], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov dword [rsp + 0x70], 0x476d6d49
mov dword [rsp + 0x74], 0x704f7465
mov dword [rsp + 0x78], 0x74536e65
mov rdi, rax
mov dword [rsp + 0x7c], 0x73757461
mov byte [rbp - 0x80], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x78]
mov rcx, rsi
mov dword [rbp - 0x78], 0x536d6d49
mov dword [rbp - 0x74], 0x704f7465
mov dword [rbp - 0x70], 0x74536e65
mov rbx, rax
mov dword [rbp - 0x6c], 0x73757461
mov byte [rbp - 0x68], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x58]
mov rcx, rsi
mov dword [rbp - 0x58], 0x526d6d49
mov dword [rbp - 0x54], 0x61656c65
mov dword [rbp - 0x50], 0x6f436573
mov r12, rax
mov dword [rbp - 0x4c], 0x7865746e
mov word [rbp - 0x48], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
mov qword [rsp + 0x58], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
jne 0x1800175f7
lea edx, [rax + 1]
jmp 0x1800175f1
test rax, rax
je 0x180016786
lea rdx, [rsp + 0x60]
mov rcx, rax
mov dword [rsp + 0x60], 0x476d6d49
mov dword [rsp + 0x64], 0x6f437465
mov dword [rsp + 0x68], 0x7865746e
mov word [rsp + 0x6c], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x78]
mov rcx, rsi
mov dword [rbp - 0x78], 0x476d6d49
mov dword [rbp - 0x74], 0x704f7465
mov dword [rbp - 0x70], 0x74536e65
mov rdi, rax
mov dword [rbp - 0x6c], 0x73757461
mov byte [rbp - 0x68], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov dword [rsp + 0x70], 0x536d6d49
mov dword [rsp + 0x74], 0x704f7465
mov dword [rsp + 0x78], 0x74536e65
mov rbx, rax
mov dword [rsp + 0x7c], 0x73757461
mov byte [rbp - 0x80], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 0x58]
mov rcx, rsi
mov dword [rbp - 0x58], 0x526d6d49
mov dword [rbp - 0x54], 0x61656c65
mov dword [rbp - 0x50], 0x6f436573
mov r12, rax
mov dword [rbp - 0x4c], 0x7865746e
mov word [rbp - 0x48], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007add8]
add ecx, 0xfffffcb8
mov qword [rsp + 0x58], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
je 0x1800175f7
xor edx, edx
mov rcx, rdi
call r12
mov ecx, dword [0x18007add8]
mov rdx, rdi
add ecx, 0xfffffcb8
call qword [rsp + 0x58]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x180015220
cmp r13d, 0x847
jne 0x180017651
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x18007ad6c], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x848
jne 0x180017680
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov dword [0x18007b874], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x840
jne 0x1800176a8
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x841
jne 0x1800176d0
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov r12d, r11d
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x849
jne 0x18001770a
mov eax, dword [0x180076d54]
test r15, r15
mov r12d, r11d
cmovne eax, r15d
test r14, r14
mov edi, r11d
mov dword [0x180076d54], eax
mov eax, dword [0x18007b948]
cmovne eax, r14d
mov dword [0x18007b948], eax
jmp 0x180015220
cmp r13d, 0x84a
jne 0x1800177e9
cmp r15, 0x1234
jne 0x18001521e
test r14, r14
je 0x1800177d8
lea rcx, [rbp + 1]
xor edx, edx
mov r8d, 0xff
mov byte [0x18007b070], sil
mov byte [rbp], sil
call fcn.180008040
mov r8d, dword [rsp + 0x48]
lea rdx, [0x18007d170]
lea rcx, [rbp]
call fcn.180001a10
lea rcx, [rbp + 0x202]
xor edx, edx
mov r8d, 0x1fe
mov word [rbp + 0x200], si
call fcn.180008040
lea rdx, [rbp + 0x200]
lea rcx, [rbp]
call fcn.180013940
mov rdi, rax
test rax, rax
je 0x1800177c0
mov rcx, rax
call fcn.180013ad0
lea edx, [r13 - 0x4a]
lea rcx, [0x18007b070]
mov r8, rax
mov rbx, rax
call fcn.180003354
mov rcx, rbx
call fcn.180013a60
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, 1
mov dword [0x180076d40], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
mov dword [0x180076d40], esi
mov r12d, r11d
mov edi, r11d
jmp 0x180015220
cmp r13d, 0x84b
jne 0x18001781e
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
test r14, r14
mov r12d, r11d
mov edi, r11d
setne sil
mov dword [0x180048624], esi
jmp 0x180015227
cmp r13d, 0x854
jne 0x18001784a
mov rbx, qword [rbp + 0xc80]
cmp r15, 0x1234
jne 0x180017925
mov r12d, dword [0x18007b894]
mov edi, r11d
jmp 0x180015227
cmp r13d, 0x84c
jne 0x18001521e
cmp r15, 0x1234
jne 0x18001521e
mov ecx, r11d
mov dword [0x180048624], esi
call fcn.18001bb90
mov eax, 1
mov dword [0x180048624], eax
mov r12d, eax
mov edi, eax
jmp 0x180015220
mov eax, dword [0x18007add8]
add eax, 0xfffffcb8
je 0x180015220
mov rcx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x1800178c3
cmp dword [rax], 0x592629e2
je 0x1800178cb
inc esi
add rax, 4
cmp esi, ecx
jb 0x1800178b1
cmp dword [0x18007b060], edi
je 0x1800178ee
cmp dword [0x18007b944], edi
jne 0x1800178ee
mov rcx, qword [rbp + 0xc80]
mov r9, r14
mov r8, r15
mov edx, r13d
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800149ed
movsx eax, r14w
mov dword [rsp + 0x58], eax
mov eax, r14d
shr eax, 0x10
cmp dword [0x18007ad6c], edi
cwde
mov dword [rsp + 0x5c], eax
jne 0x180015220
movzx edx, ax
movzx eax, word [rsp + 0x58]
shl edx, 0x10
or edx, eax
mov dword [0x18007b8a8], edx
jmp 0x180015220
mov edi, esi
jmp 0x180015227
mov rax, qword [0x18007b920]
test rax, rax
je 0x1800149eb
mov r9, r14
mov r8, r15
mov edx, r13d
mov rcx, rbx
call rax
jmp 0x1800149ed