Function at 0x1400e59b0
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x530]
sub rsp, 0x630
mov rax, qword [0x1401b8010]
xor rax, rsp
mov qword [rbp + 0x528], rax
mov r12, r9
mov rsi, r8
mov r15, rcx
xor ebx, ebx
mov dword [rsp + 0x54], ebx
cmp edx, 0x400
jbe 0x1400e6cdd
cmp edx, 0x4ae
je case.0x1400e67ea.3584
cmp edx, 0x783
ja 0x1400e634e
je 0x1400e6343
cmp edx, 0x62b
ja 0x1400e5d9c
je 0x1400e5d80
sub edx, 0x412
je 0x1400e5c99
sub edx, 1
je 0x1400e5c6e
sub edx, 1
je 0x1400e5c64
cmp edx, 1
jne case.0x1400e67ea.3584
mov rax, r8
test r8, r8
je 0x1400e5c46
sub rax, 1
je 0x1400e5c14
cmp rax, 1
jne case.0x1400e67ea.3746
cmp byte [rcx + 0x8c0], bl
jne case.0x1400e67ea.3746
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xe0], bl
mov qword [rbp + 0xe4], rbx
mov qword [rbp + 0xec], rbx
mov dword [rbp + 0xf4], ebx
mov word [rbp + 0xf8], bx
mov byte [rbp + 0xfa], bl
mov qword [rbp + 0x100], rbx
mov r12d, 0x40
mov edx, r12d
lea rcx, [rbp + 0x100]
call fcn.140029040
nop
mov qword [rbp + 0x108], rbx
mov edx, r12d
lea rcx, [rbp + 0x108]
call fcn.140029040
nop
mov qword [rbp + 0x110], rbx
mov edx, r12d
lea rcx, [rbp + 0x110]
call fcn.140029040
nop
mov qword [rbp + 0x118], rbx
mov edx, r12d
lea rcx, [rbp + 0x118]
call fcn.140029040
nop
mov qword [rbp + 0x120], rbx
mov edx, r12d
lea rcx, [rbp + 0x120]
call fcn.140029040
nop
mov qword [rbp + 0x128], rbx
mov edx, r12d
lea rcx, [rbp + 0x128]
call fcn.140029040
nop
mov qword [rbp + 0x130], rbx
mov edx, r12d
lea rcx, [rbp + 0x130]
call fcn.14001c030
nop
mov qword [rbp + 0x138], rbx
mov edx, r12d
lea rcx, [rbp + 0x138]
call fcn.14001c030
nop
mov qword [rbp + 0x140], rbx
mov edx, r12d
lea rcx, [rbp + 0x140]
call fcn.14001c030
nop
mov qword [rbp + 0x148], rbx
mov edx, r12d
lea rcx, [rbp + 0x148]
call fcn.14001c030
nop
mov qword [rbp + 0x150], rbx
mov edx, r12d
lea rcx, [rbp + 0x150]
call fcn.14001c030
nop
mov qword [rbp + 0x158], rbx
mov edx, r12d
lea rcx, [rbp + 0x158]
call fcn.14001c030
nop
mov rcx, qword [r15 + 0x8a8]
mov rax, qword [rcx]
lea rdx, [rbp + 0xd0]
mov rax, qword [rax + 8]
call qword [case.0x140077645.0]
lea rdx, [rbp + 0xd0]
mov rcx, r15
call fcn.1400f1460
nop
lea rcx, [rbp + 0xd0]
call fcn.140028c00
test rsi, rsi
setne dl
mov rcx, r15
call fcn.1400f4200
jmp case.0x1400e67ea.3584
mov qword [rbp + 0x28], r12
mov r8, qword [r9 + 8]
movzx edx, byte [r9]
call fcn.1400ee610
nop
mov edx, 0x10
mov rcx, r12
call fcn.14007e2a0
test rsi, rsi
setne dl
mov rcx, r15
call fcn.1400f4200
jmp case.0x1400e67ea.3584
test r12, r12
setne dl
call fcn.1400eef70
test rsi, rsi
setne dl
mov rcx, r15
call fcn.1400f4200
jmp case.0x1400e67ea.3584
call fcn.1400f9b00
jmp case.0x1400e67ea.3584
mov rdx, rsi
call fcn.1400f94c0
test rsi, rsi
je case.0x1400e67ea.3584
mov rcx, rsi
call fcn.140028c00
mov edx, 0x90
mov rcx, rsi
call fcn.14007e2a0
jmp case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e5d07
mov dword [rbp - 0x70], ebx
call fcn.140005ad0
mov qword [rbp - 0x78], rax
lock inc dword [rbp - 0x70]
mov r12d, 0x40
mov dword [rsp + 0x54], r12d
lea rcx, [rbp - 0x78]
call fcn.140005a30
mov r14d, 0x20
mov dword [rbp - 8], r14d
lea rcx, str.WndProc:_ActivateSeccenter
mov qword [rsp + 0x28], rcx
lea rcx, [0x14016eef0]
mov qword [rsp + 0x20], rcx
lea r9, [0x140000000]
lea r8, [rbp - 8]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e5d0c
mov r12d, dword [rsp + 0x54]
test r12b, 0x40
je 0x1400e5d48
and r12d, 0xffffffbf
mov dword [rsp + 0x54], r12d
mov qword [rbp - 0x78], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x70], eax
cmp eax, 1
js 0x1400e5d44
nop
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x70], eax
cmp eax, 1
jns 0x1400e5d30
lock inc dword [rbp - 0x70]
mov rax, qword [r15 + 0x28]
lea rcx, [r15 + 0x28]
mov rax, qword [rax]
call qword [case.0x140077645.0]
mov rbx, rax
mov rdx, qword [r15 + 0x28]
lea rcx, [r15 + 0x28]
mov rax, qword [rdx]
call qword [case.0x140077645.0]
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.1400b3630
jmp case.0x1400e67ea.3584
mov rax, rsi
shr rax, 0x10
movzx r8d, ax
movzx edx, si
mov byte [rsp + 0x20], bl
call fcn.1400dc4b0
jmp case.0x1400e67ea.3584
add edx, 0xfffff9d4
cmp edx, 0x2d
ja case.0x1400e67ea.3584
lea rdi, [0x140000000]
movzx eax, byte [rdi + rdx + 0xe73dc]
mov ecx, dword [rdi + rax*4 + 0xe73a4]
add rcx, rdi
jmp rcx
mov edx, esi
mov rcx, r15
call fcn.1400ffca0
jmp case.0x1400e67ea.3584
xor r9d, r9d
mov edx, 0x1f6
mov r8d, 0x7d0
mov rcx, qword [r15 + 0x30]
call qword [sym.imp.USER32.dll_SetTimer]
jmp case.0x1400e67ea.3584
cmp byte [r15 + 0x834], bl
je case.0x1400e67ea.3584
mov dl, 1
mov rcx, r15
call fcn.1400e45d0
movzx r14d, si
mov dword [rsp + 0x60], r14d
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.1400d9fc0
test al, al
je case.0x1400e67ea.3584
mov rax, qword [r15 + 0x28]
lea rcx, [r15 + 0x28]
mov rax, qword [rax]
call qword [case.0x140077645.0]
mov rbx, rax
mov rdx, qword [r15 + 0x28]
lea rcx, [r15 + 0x28]
mov rax, qword [rdx]
call qword [case.0x140077645.0]
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.1400b3630
shr rsi, 0x10
movzx r8d, si
mov dword [rsp + 0x20], r12d
mov r9b, 1
mov edx, r14d
mov rcx, r15
call fcn.1400fa000
jmp case.0x1400e67ea.3584
mov rdi, qword [r15 + 0x30]
mov qword [rsp + 0x58], rbx
call fcn.140008c80
lea rdx, [rsp + 0x58]
mov rcx, rdi
mov rax, qword [rax + 0x108]
call qword [case.0x140077645.0]
mov rdi, qword [rsp + 0x58]
call fcn.140008c80
mov rcx, rdi
mov rax, qword [rax + 0xf8]
call qword [case.0x140077645.0]
mov rcx, rbx
test eax, eax
cmove rcx, rdi
mov qword [rsp + 0x60], rcx
lea r8, str.idMainBody
lea rdx, str._id_S_
lea rcx, [rsp + 0x60]
call fcn.140029210
mov r14, rax
mov rdi, qword [rsp + 0x60]
test rdi, rdi
je 0x1400e5f00
call fcn.140008c80
mov rcx, rdi
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
mov rcx, r14
mov rax, qword [rax + 0xf8]
call qword [case.0x140077645.0]
test eax, eax
cmove rbx, r14
mov qword [rsp + 0x60], rbx
test esi, esi
jne 0x1400e5f84
xor edx, edx
mov rcx, r15
call fcn.1400e45d0
xor edx, edx
mov rcx, r15
call fcn.1400e54c0
mov byte [rsp + 0x50], sil
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1400f93c0
mov r8b, 1
lea rdx, str.no_services
lea rcx, [rsp + 0x60]
call fcn.14007b900
xor edx, edx
mov rcx, r15
call fcn.1400e8250
mov byte [rsp + 0x50], sil
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1400d2a50
mov rcx, r15
call fcn.1400ffa00
jmp 0x1400e5fab
xor r8d, r8d
lea rdx, [0x14016ef38]
lea rcx, [rsp + 0x60]
call fcn.14007b900
mov byte [rsp + 0x50], 1
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1400d2a50
nop
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x1400e5fcb
call fcn.140008c80
mov rcx, rbx
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
nop
jmp case.0x1400e67ea.3584
lea rdx, str.CMainDialog::OnBasicUiSettingsChanged
lea rcx, [rbp + 0xd0]
call fcn.140004cf0
nop
mov rbx, qword [r15 + 0x4e8]
cmp rbx, qword [r15 + 0x4f0]
je 0x1400e6048
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x140077645.0]
test al, al
je 0x1400e602b
lea rcx, [0x1401c1718]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbx + 0x20]
lea rcx, [0x1401c1718]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, rsi
je 0x1400e6034
add rbx, 0xa0
jmp 0x1400e5feb
mov rdx, rbx
call fcn.1400fba60
mov rdx, rbx
mov rcx, r15
call fcn.1400fb8c0
nop
lea rcx, [rbp + 0xd0]
call fcn.140004e30
jmp case.0x1400e67ea.3584
lea rdx, str.CMainDialog::OnBasicUiTasksChanged
lea rcx, [rbp + 0xd0]
call fcn.140004cf0
nop
mov rbx, qword [r15 + 0x4e8]
cmp rbx, qword [r15 + 0x4f0]
je 0x1400e60c9
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x140077645.0]
test al, al
je 0x1400e60b4
lea rcx, [0x1401c1718]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbx + 0x20]
lea rcx, [0x1401c1718]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, rsi
je 0x1400e60bd
add rbx, 0xa0
jmp 0x1400e6074
mov rdx, rbx
mov rcx, r15
call fcn.1400fb8c0
nop
lea rcx, [rbp + 0xd0]
call fcn.140004e30
jmp case.0x1400e67ea.3584
mov r8, r12
mov rdx, rsi
mov rcx, r15
call fcn.1400dcf80
jmp case.0x1400e67ea.3584
mov rdx, rsi
mov rcx, r15
call fcn.1400dcc50
jmp case.0x1400e67ea.3584
mov rdx, rsi
mov rcx, r15
call fcn.1400dc920
jmp case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e6179
mov dword [rbp + 0x20], ebx
call fcn.140005ad0
mov qword [rbp + 0x18], rax
lock inc dword [rbp + 0x20]
mov r12d, 0x80
mov dword [rsp + 0x54], r12d
lea rcx, [rbp + 0x18]
call fcn.140005a30
mov r14d, 0x20
mov dword [rsp + 0x60], r14d
lea rcx, str.WM_UPDATE_BASIC_UI_PLUGIN_received
mov qword [rsp + 0x28], rcx
lea rcx, str.CMainDialog::WndProc
mov qword [rsp + 0x20], rcx
mov r9, rdi
lea r8, [rsp + 0x60]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e617e
mov r12d, dword [rsp + 0x54]
test r12b, r12b
jns 0x1400e618c
lea rcx, [rbp + 0x18]
call fcn.140005a60
mov rbx, qword [r15 + 0x4e8]
cmp rbx, qword [r15 + 0x4f0]
je case.0x1400e67ea.3584
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x140077645.0]
test al, al
je 0x1400e61d7
lea rcx, [0x1401c1718]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbx + 0x20]
lea rcx, [0x1401c1718]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, rsi
je 0x1400e61e0
add rbx, 0xa0
jmp 0x1400e6193
mov rdx, rbx
call fcn.1400fba60
jmp case.0x1400e67ea.3584
mov rcx, qword [r15 + 0x30]
mov r8b, 1
mov rdx, rcx
call fcn.1400b3630
mov dword [rsp + 0x20], ebx
mov r9b, 1
mov r8d, r12d
mov edx, esi
mov rcx, r15
call fcn.1400fa000
jmp case.0x1400e67ea.3584
mov dword [rsp + 0x20], 7
jmp 0x1400e6200
cmp qword [r15 + 0x4c8], rbx
je 0x1400e6337
mov r13d, 1
mov dword [rbp + 0x4f0], r13d
lea rax, [0x14015cd1c]
mov qword [rbp + 0x510], rax
mov byte [rbp + 0x520], bl
mov rax, qword [r8]
mov qword [rbp + 0x4f8], rax
mov rax, qword [r8 + 8]
mov qword [rbp + 0x500], rax
mov rax, qword [r8 + 0x10]
mov qword [rbp + 0x508], rax
lea rcx, [r15 + 0x28]
mov rax, qword [rcx]
mov rax, qword [rax]
call qword [case.0x140077645.0]
mov qword [rbp + 0x518], rax
mov rsi, qword [r15 + 0x4c8]
xor dil, dil
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xd0]
call sub.VCRUNTIME140.dll_memset
mov r8d, operator
lea rdx, [rbp + 0xd0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400e6333
lea edx, [r13 + 0x5b]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.VCRUNTIME140.dll_wcsrchr]
test rax, rax
je 0x1400e6333
mov word [rax], bx
lea r8, str._bdhtmldialogs_sc.dll
mov edx, 0x104
lea rcx, [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x1400e6333
lea rdx, str.DisableProtectionDlg
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400e632a
mov rdx, rsi
lea rcx, [rbp + 0x4f0]
call qword [case.0x140077645.0]
movzx edi, al
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movzx ebx, dil
mov dword [r15 + 0x4d0], ebx
jmp case.0x1400e67ea.3584
mov dword [0x1401c1554], esi
jmp case.0x1400e67ea.3584
cmp edx, 0xdf7
ja 0x1400e67bf
je 0x1400e67a5
sub edx, 0x784
je 0x1400e6793
sub edx, 0x385
je 0x1400e646b
sub edx, 0x65
je 0x1400e6426
cmp edx, 0x1fb
jne case.0x1400e67ea.3584
mov rdx, rsi
lea rcx, [rbp + 0x18]
call fcn.1400089e0
mov rbx, rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, str.MainUI.updateRecommendations
lea rdx, [rbp + 0x28]
lea rcx, [r15 + 0x30]
call fcn.14003aa70
mov dword [rsp + 0x54], 0x2000
call fcn.140008c80
mov rcx, rbx
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
lea rcx, [rbp + 0x28]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
test rsi, rsi
je case.0x1400e67ea.3584
call fcn.140008c80
mov rcx, rsi
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
mov edx, 0x10
mov rcx, rsi
call fcn.14007e2a0
jmp case.0x1400e67ea.3584
mov rax, qword [rcx + 0x4f0]
mov rcx, qword [rcx + 0x4e8]
cmp rcx, rax
je case.0x1400e67ea.3584
nop dword [rax]
cmp dword [rcx + 0x28], esi
je 0x1400e6456
add rcx, 0xa0
cmp rcx, rax
jne 0x1400e6440
jmp case.0x1400e67ea.3584
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x140077645.0]
jmp case.0x1400e67ea.3584
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x70], rcx
lea rdx, [r8 + 0x30]
lea rcx, [rsp + 0x60]
call fcn.140008a30
mov r14, rax
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x78], rax
lea rdx, [rsi + 0x10]
lea rcx, [rbp + 0x38]
call fcn.140008a30
mov rdi, rax
mov qword [rbp + 0x28], rax
mov rdx, rsi
lea rcx, [rbp + 0x48]
call fcn.1400089e0
mov qword [rsp + 0x78], rax
lea rax, [fcn.1400089b0]
mov qword [rsp + 0x20], rax
lea r9, [0x140008980]
mov r8d, 3
mov r13d, 0x10
mov edx, r13d
lea rcx, [rbp + 0x4f0]
call fcn.14007ea24
nop
call fcn.140008c80
mov rdx, qword [rsp + 0x78]
lea rcx, [rbp + 0x4f0]
mov rax, qword [rax + 0x410]
call qword [case.0x140077645.0]
call fcn.140008c80
mov rdx, rdi
lea rcx, [rbp + 0x500]
mov rax, qword [rax + 0x410]
call qword [case.0x140077645.0]
call fcn.140008c80
mov rdx, r14
lea rcx, [rbp + 0x510]
mov rax, qword [rax + 0x410]
call qword [case.0x140077645.0]
nop
mov rax, r15
lea rcx, [r15 + 0x30]
test rcx, rcx
cmove rax, rbx
mov rdi, qword [rax + 0x30]
call fcn.140008c80
lea rcx, [rbp + 0x18]
mov rax, qword [rax + 0x3f8]
call qword [case.0x140077645.0]
mov dword [rsp + 0x54], 0x800
call fcn.140008c80
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x4f0]
lea r8d, [r13 - 0xd]
lea rdx, str.MainUI.updateIssues
mov rcx, rdi
mov rax, qword [rax + 0x88]
call qword [case.0x140077645.0]
test eax, eax
jne 0x1400e65b3
cmp dword [rbp + 0x18], 5
jne 0x1400e65b3
cmp dword [rbp + 0x1c], 1
je 0x1400e734c
mov dword [rsp + 0x54], 0x400
lea r9, [fcn.1400089b0]
mov r8d, 3
mov rdx, r13
lea rcx, [rbp + 0x4f0]
call fcn.14007e954
nop
call fcn.140008c80
mov rcx, qword [rsp + 0x78]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
mov rcx, qword [rbp + 0x28]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
mov rcx, r14
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
lea rcx, [rbp + 0x18]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
cmp r12, 1
sete byte [rsp + 0x50]
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1400ee250
mov rdi, qword [r15 + 0x30]
mov qword [rsp + 0x58], rbx
call fcn.140008c80
lea rdx, [rsp + 0x58]
mov rcx, rdi
mov rax, qword [rax + 0x108]
call qword [case.0x140077645.0]
mov rdi, qword [rsp + 0x58]
call fcn.140008c80
mov rcx, rdi
mov rax, qword [rax + 0xf8]
call qword [case.0x140077645.0]
mov rcx, rbx
test eax, eax
cmove rcx, rdi
mov qword [rsp + 0x60], rcx
lea r8, str.idMainTitleReportLogo
lea rdx, str._id_S_
lea rcx, [rsp + 0x60]
call fcn.140029210
mov r14, rax
mov rdi, qword [rsp + 0x60]
test rdi, rdi
je 0x1400e66d0
call fcn.140008c80
mov rcx, rdi
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
mov rcx, r14
mov rax, qword [rax + 0xf8]
call qword [case.0x140077645.0]
test eax, eax
cmove rbx, r14
mov qword [rbp + 0x28], rbx
test rbx, rbx
jne 0x1400e66f6
jmp 0x1400e6742
call fcn.140008c80
mov rcx, rbx
mov rax, qword [rax + 0x170]
cmp r12, 1
jne 0x1400e6717
xor r8d, r8d
lea rdx, [0x140160e74]
jmp 0x1400e6725
lea r8, [0x14015ca34]
lea rdx, [0x140161e8c]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
mov rcx, rbx
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
nop
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1400ede80
test rsi, rsi
je case.0x1400e67ea.3584
lea rcx, [rsi + 0x30]
call fcn.140002e30
lea rcx, [rsi + 0x10]
call fcn.140002e30
nop
call fcn.140008c80
mov rcx, rsi
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
mov edx, 0x50
mov rcx, rsi
call fcn.14007e2a0
jmp case.0x1400e67ea.3584
mov dword [0x1401c155c], esi
mov dword [0x1401c1560], r12d
jmp case.0x1400e67ea.3584
mov rdx, rsi
call fcn.1400da630
mov edx, 0x14
mov rcx, rsi
call fcn.14007e2a0
jmp case.0x1400e67ea.3584
add edx, 0xfffff202
cmp edx, 0xa5
ja case.0x1400e67ea.3584
lea rdi, [0x140000000]
movzx eax, byte [rdi + rdx + 0xe7444]
mov ecx, dword [rdi + rax*4 + 0xe740c]
add rcx, rdi
jmp rcx
mov rcx, r15
call fcn.1400ffa00
test eax, eax
jne 0x1400e684b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0x48], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x4c], eax
mov dword [rbp + 0x58], ebx
lea rdx, [rbp + 0x48]
lea rcx, [0x14010a8b0]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [rbp + 0x58], ebx
jne 0x1400e684b
mov byte [r15 + 0x823], 1
lea rcx, [r15 + 0x28]
mov rax, qword [rcx]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rax, qword [rax + 0x28]
call qword [case.0x140077645.0]
jmp case.0x1400e67ea.3584
lea rcx, [r15 + 0x28]
mov rax, qword [rcx]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe37
mov rax, qword [rax + 0x28]
call qword [case.0x140077645.0]
jmp case.0x1400e67ea.3584
mov edx, esi
lea rcx, [rbp + 0x48]
call fcn.14001b270
mov rbx, rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, str.MainUI.updateNotificationsCount
lea rdx, [rbp + 0x38]
lea rcx, [r15 + 0x30]
call fcn.14003aa70
mov dword [rsp + 0x54], 0x100
call fcn.140008c80
mov rcx, rbx
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
lea rcx, [rbp + 0x38]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
jmp case.0x1400e67ea.3584
shl r12, 0x20
mov eax, esi
add r12, rax
mov qword [rbp + 0x28], r12
mov byte [rsp + 0x20], bl
lea r9, [rbp + 0x28]
mov edx, 0x1e
mov r8d, 0x398
mov rcx, r15
call fcn.1400dc4b0
jmp case.0x1400e67ea.3584
mov dword [rsp + 0x60], esi
mov byte [rsp + 0x20], bl
lea r9, [rsp + 0x60]
mov edx, 0x1e
mov r8d, 0x39a
mov rcx, r15
call fcn.1400dc4b0
jmp case.0x1400e67ea.3584
movsxd rax, esi
mov qword [rbp + 0x28], rax
mov byte [rsp + 0x20], bl
lea r9, [rbp + 0x28]
mov edx, 0x1e
mov r8d, 0x399
mov rcx, r15
call fcn.1400dc4b0
jmp case.0x1400e67ea.3584
mov rcx, r15
call fcn.140100260
jmp case.0x1400e67ea.3584
mov edx, esi
lea rcx, [rbp + 0x18]
call fcn.14001b270
nop
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x48]
call fcn.1400089e0
mov r9, rax
lea r8, str.MainUI.expandMenu
lea rdx, [rbp + 0x38]
lea rcx, [r15 + 0x30]
call fcn.140039900
nop
call fcn.140008c80
lea rcx, [rbp + 0x38]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
lea rcx, [rbp + 0x18]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
jmp case.0x1400e67ea.3584
mov edx, esi
mov rcx, r15
call fcn.1400e5750
jmp case.0x1400e67ea.3584
test rsi, rsi
setne dl
lea rcx, [rbp + 0x18]
call fcn.14001b210
nop
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x48]
call fcn.1400089e0
mov r9, rax
lea r8, str.MainUI.setBdAuxState
lea rdx, [rbp + 0x38]
lea rcx, [r15 + 0x30]
call fcn.140039900
nop
call fcn.140008c80
lea rcx, [rbp + 0x38]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
call fcn.140008c80
lea rcx, [rbp + 0x18]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
jmp case.0x1400e67ea.3584
lea rcx, [r15 + 0x4a8]
mov rax, qword [rcx]
mov rax, qword [rax + 0x70]
call qword [case.0x140077645.0]
test al, al
jne case.0x1400e67ea.3584
mov rdx, rsi
lea rcx, [rbp + 0x48]
call fcn.1400089e0
mov r9, rax
lea r8, str.MainUI.setRiftAlert
lea rdx, [rbp + 0x38]
lea rcx, [r15 + 0x30]
call fcn.140039900
nop
call fcn.140008c80
lea rcx, [rbp + 0x38]
mov rax, qword [rax + 0x400]
call qword [case.0x140077645.0]
nop
jmp case.0x1400e67ea.3584
lea rdx, [rsp + 0x58]
mov rcx, qword [r15 + 0x8c8]
call fcn.14010fe20
mov edx, dword [rsp + 0x58]
lea rcx, [rbp + 0xa8]
call fcn.14001b020
nop
lea r8, [0x14016f260]
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.14000b3b0
nop
lea rcx, [rbp + 0xa8]
call fcn.140002e30
mov edx, dword [rsp + 0x5c]
lea rcx, [rbp + 0x88]
call fcn.14001b020
nop
lea r8, [0x14016f268]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.14000b3b0
nop
lea rcx, [rbp + 0x88]
call fcn.140002e30
lea r13, str.invalid_space_dropdown_container
nop
mov r8, qword [r13]
lea rdx, [rsp + 0x58]
mov rcx, r15
call fcn.14007a840
nop
mov dword [rsp + 0x60], ebx
call fcn.140008c80
lea rdx, [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
mov rax, qword [rax + 0x120]
call qword [case.0x140077645.0]
cmp dword [rsp + 0x60], 0
jne 0x1400e6b70
test rdi, rdi
je 0x1400e6b66
call fcn.140008c80
mov rcx, rdi
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
mov qword [rsp + 0x58], rbx
jmp 0x1400e6cb1
mov qword [rsp + 0x60], rbx
call fcn.140008c80
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, rdi
mov rax, qword [rax + 0x128]
call qword [case.0x140077645.0]
mov r14, qword [rsp + 0x60]
call fcn.140008c80
mov rcx, r14
mov rax, qword [rax + 0xf8]
call qword [case.0x140077645.0]
mov rsi, rbx
test eax, eax
cmove rsi, r14
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x28], rbx
call fcn.140008c80
lea r8, [rbp + 0x28]
xor edx, edx
mov rcx, rsi
mov rax, qword [rax + 0x128]
call qword [case.0x140077645.0]
mov r12, qword [rbp + 0x28]
call fcn.140008c80
mov rcx, r12
mov rax, qword [rax + 0xf8]
call qword [case.0x140077645.0]
mov r14, rbx
test eax, eax
cmove r14, r12
mov qword [rsp + 0x60], r14
lea r12, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae r12, qword [rbp + 0x48]
call fcn.140008c80
mov r8, r12
lea rdx, [0x140166804]
mov rcx, r14
mov rax, qword [rax + 0x1a0]
call qword [case.0x140077645.0]
lea r12, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae r12, qword [rbp + 0x68]
call fcn.140008c80
mov r8, r12
lea rdx, [0x1401622b4]
mov rcx, r14
mov rax, qword [rax + 0x1a0]
call qword [case.0x140077645.0]
nop
test r14, r14
je 0x1400e6c77
call fcn.140008c80
mov rcx, r14
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
nop
test rsi, rsi
je 0x1400e6c92
call fcn.140008c80
mov rcx, rsi
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
nop
test rdi, rdi
je 0x1400e6cac
call fcn.140008c80
mov rcx, rdi
mov rax, qword [rax + 0x100]
call qword [case.0x140077645.0]
mov qword [rsp + 0x58], rbx
add r13, 8
lea rax, [0x1401b9208]
cmp r13, rax
jne 0x1400e6b10
lea rcx, [rbp + 0x68]
call fcn.140002e30
nop
lea rcx, [rbp + 0x48]
call fcn.140002e30
jmp case.0x1400e67ea.3584
cmp edx, 0x113
ja 0x1400e710b
je 0x1400e6ff2
cmp edx, 0x18
je 0x1400e6e95
cmp edx, 0x1c
je 0x1400e6dc0
cmp edx, 0x3d
jne case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e6d78
mov dword [rbp - 0x60], ebx
call fcn.140005ad0
mov qword [rbp - 0x68], rax
lock inc dword [rbp - 0x60]
mov r13d, 0x10
mov dword [rsp + 0x54], r13d
lea rcx, [rbp - 0x68]
call fcn.140005a30
mov r14d, 0x20
mov dword [rbp - 4], r14d
lea rcx, str.WM_GETOBJECT_called
mov qword [rsp + 0x28], rcx
lea rcx, [0x14016f008]
mov qword [rsp + 0x20], rcx
lea r9, [0x140000000]
lea r8, [rbp - 4]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e6d7d
mov r13d, dword [rsp + 0x54]
test r13b, 0x10
je case.0x1400e67ea.3584
and r13d, 0xffffffef
mov dword [rsp + 0x54], r13d
mov qword [rbp - 0x68], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x60], eax
cmp eax, 1
js 0x1400e6db7
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x60], eax
cmp eax, 1
jns 0x1400e6da3
lock inc dword [rbp - 0x60]
jmp case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e6e2e
mov dword [rbp - 0x50], ebx
call fcn.140005ad0
mov qword [rbp - 0x58], rax
lock inc dword [rbp - 0x50]
mov r12d, 4
mov dword [rsp + 0x54], r12d
lea rcx, [rbp - 0x58]
call fcn.140005a30
mov r14d, 0x20
mov dword [rbp], r14d
lea rcx, str.WM_ACTIVATEAPP_called
mov qword [rsp + 0x28], rcx
lea rcx, [0x14016f0c0]
mov qword [rsp + 0x20], rcx
lea r9, [0x140000000]
lea r8, [rbp]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e6e33
mov r12d, dword [rsp + 0x54]
test r12b, 4
je 0x1400e6e6d
and r12d, 0xfffffffb
mov dword [rsp + 0x54], r12d
mov qword [rbp - 0x58], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x50], eax
cmp eax, 1
js 0x1400e6e69
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x50], eax
cmp eax, 1
jns 0x1400e6e55
lock inc dword [rbp - 0x50]
test rsi, rsi
setne dl
mov rcx, qword [r15 + 0x878]
call fcn.1400b7960
test rsi, rsi
je case.0x1400e67ea.3584
mov rcx, r15
call fcn.1400e3b40
jmp case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
mov r14d, 0x20
lea rdi, [0x140000000]
add ecx, eax
je 0x1400e6f0a
mov dword [rbp - 0x40], ebx
call fcn.140005ad0
mov qword [rbp - 0x48], rax
lock inc dword [rbp - 0x40]
mov r13d, 1
mov dword [rsp + 0x54], r13d
lea rcx, [rbp - 0x48]
call fcn.140005a30
mov dword [rbp + 4], r14d
mov dword [rsp + 0x30], esi
lea rcx, str.WndProc:_ShowWindow__d
mov qword [rsp + 0x28], rcx
lea rcx, [0x14016ed50]
mov qword [rsp + 0x20], rcx
mov r9, rdi
lea r8, [rbp + 4]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e6f0f
mov r13d, dword [rsp + 0x54]
test r13b, 1
je 0x1400e6f49
and r13d, 0xfffffffe
mov dword [rsp + 0x54], r13d
mov qword [rbp - 0x48], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x40], eax
cmp eax, 1
js 0x1400e6f45
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x40], eax
cmp eax, 1
jns 0x1400e6f31
lock inc dword [rbp - 0x40]
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e6fad
mov dword [rbp - 0x30], ebx
call fcn.140005ad0
mov qword [rbp - 0x38], rax
lock inc dword [rbp - 0x30]
mov esi, dword [rsp + 0x54]
or esi, 2
mov dword [rsp + 0x54], esi
lea rcx, [rbp - 0x38]
call fcn.140005a30
mov dword [rbp + 8], r14d
lea rcx, str._UILOAD__Seccenter_Show
mov qword [rsp + 0x28], rcx
lea rcx, [0x14016f180]
mov qword [rsp + 0x20], rcx
mov r9, rdi
lea r8, [rbp + 8]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e6fb1
mov esi, dword [rsp + 0x54]
test sil, 2
je case.0x1400e67ea.3584
and esi, 0xfffffffd
mov dword [rsp + 0x54], esi
mov qword [rbp - 0x38], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x30], eax
cmp eax, 1
js 0x1400e6fe9
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x30], eax
cmp eax, 1
jns 0x1400e6fd5
lock inc dword [rbp - 0x30]
jmp case.0x1400e67ea.3584
cmp rsi, 0x191
jne 0x1400e704f
mov ecx, dword [rcx + 0x7a0]
test ecx, ecx
je 0x1400e7043
cmp ecx, 1
lea rcx, [r15 + 0x28]
mov rax, qword [rcx]
mov rax, qword [rax]
je 0x1400e7032
call qword [case.0x140077645.0]
mov rcx, rax
mov rdx, rsi
call qword [sym.imp.USER32.dll_KillTimer]
inc dword [r15 + 0x7a0]
jmp case.0x1400e67ea.3584
call qword [case.0x140077645.0]
mov rcx, rax
xor edx, edx
call qword [sym.imp.WTSAPI32.dll_WTSRegisterSessionNotification]
inc dword [r15 + 0x7a0]
jmp case.0x1400e67ea.3584
cmp rsi, 0x1f5
jne 0x1400e7062
call fcn.1400fc2d0
jmp case.0x1400e67ea.3584
cmp rsi, 0x1f6
jne case.0x1400e67ea.3584
mov rdx, rsi
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.USER32.dll_KillTimer]
cmp byte [r15 + 0x834], bl
je case.0x1400e67ea.3584
mov eax, dword [0x1401c1554]
mov dword [rsp + 0x60], eax
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.1400d9fc0
test al, al
je case.0x1400e67ea.3584
mov r8d, dword [0x1401c155c]
test r8d, r8d
je 0x1400e70f9
mov byte [rsp + 0x20], bl
mov edx, dword [0x1401c1554]
mov rcx, r15
cmp r8d, 0x8c
je 0x1400e70dd
lea r9, [0x1401c1560]
cmp dword [0x1401c1560], ebx
cmove r9, rbx
jmp 0x1400e70f4
mov eax, dword [0x1401c1560]
mov dword [rbp + 0x18], eax
mov qword [rbp + 0x1c], rbx
lea r9, [rbp + 0x18]
mov r8d, 0x8c
call fcn.1400dc4b0
mov dword [0x1401c1554], ebx
mov qword [0x1401c155c], rbx
jmp case.0x1400e67ea.3584
sub edx, 0x2b1
je 0x1400e71d5
cmp edx, 0x2f
jne case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e7188
mov dword [rbp - 0x20], ebx
call fcn.140005ad0
mov qword [rbp - 0x28], rax
lock inc dword [rbp - 0x20]
mov r14d, 0x20
mov dword [rsp + 0x54], r14d
lea rcx, [rbp - 0x28]
call fcn.140005a30
mov dword [rbp + 0xc], r14d
lea rcx, str.WM_DPICHANGED_called
mov qword [rsp + 0x28], rcx
lea rcx, [0x14016efb8]
mov qword [rsp + 0x20], rcx
lea r9, [0x140000000]
lea r8, [rbp + 0xc]
movsx edx, bx
mov rcx, rax
call fcn.140004c90
jmp 0x1400e718d
mov r14d, dword [rsp + 0x54]
test r14b, 0x20
je 0x1400e71c8
and r14d, 0xffffffdf
mov dword [rsp + 0x54], r14d
mov qword [rbp - 0x28], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x20], eax
cmp eax, 1
js 0x1400e71c4
nop
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x20], eax
cmp eax, 1
jns 0x1400e71b0
lock inc dword [rbp - 0x20]
mov rcx, r15
call fcn.140100ce0
jmp case.0x1400e67ea.3584
mov ecx, dword [0x1401c1658]
mov eax, dword [0x1401c165c]
add ecx, eax
je 0x1400e72e1
mov dword [rbp - 0x10], ebx
call fcn.140005ad0
mov qword [rbp - 0x18], rax
lock inc dword [rbp - 0x10]
mov r15d, 8
mov dword [rsp + 0x54], r15d
lea rcx, [rbp - 0x18]
call fcn.140005a30
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
mov edi, eax
mov qword [rsp + 0x78], rbx
mov dword [rbp - 0x80], ebx
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
xor edx, edx
xor ecx, ecx
lea r8d, [r15 - 7]
call qword [sym.imp.WTSAPI32.dll_WTSEnumerateSessionsW]
test eax, eax
je 0x1400e7297
mov r8d, ebx
xor r10b, r10b
mov edx, ebx
mov r11, qword [rsp + 0x78]
mov r9d, dword [rbp - 0x80]
test r9d, r9d
je 0x1400e7289
nop dword [rax + rax]
mov eax, edx
lea rcx, [rax + rax*2]
cmp dword [r11 + rcx*8 + 0x10], 0
jne 0x1400e727a
mov r10b, 1
mov r8d, dword [r11 + rcx*8]
cmp edi, r8d
je 0x1400e7286
inc edx
cmp edx, r9d
jb 0x1400e7260
test r10b, r10b
je 0x1400e7289
mov edi, r8d
mov rcx, r11
call qword [sym.imp.WTSAPI32.dll_WTSFreeMemory]
mov qword [rsp + 0x78], rbx
mov r14d, 0x20
mov dword [rbp + 0x10], r14d
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rsi
lea rax, str.WM_WTSSESSION_CHANGE_reason:__zu__session_id:__zu__current_session:__d
mov qword [rsp + 0x28], rax
lea rax, [0x14016f068]
mov qword [rsp + 0x20], rax
lea r9, [0x140000000]
lea r8, [rbp + 0x10]
movsx edx, bx
mov rcx, qword [rsp + 0x70]
call fcn.140004c90
jmp 0x1400e72e6
mov r15d, dword [rsp + 0x54]
test r15b, 8
je case.0x1400e67ea.3584
and r15d, 0xfffffff7
mov dword [rsp + 0x54], r15d
mov qword [rbp - 0x18], rbx
mov eax, 0xffffffff
lock xadd dword [rbp - 0x10], eax
cmp eax, 1
js 0x1400e731c
call fcn.140005e40
mov eax, 0xffffffff
lock xadd dword [rbp - 0x10], eax
cmp eax, 1
jns 0x1400e7308
lock inc dword [rbp - 0x10]
xor eax, eax
mov rcx, qword [rbp + 0x528]
xor rcx, rsp
call fcn.14007e250
mov rbx, qword [rsp + 0x678]
add rsp, 0x630
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x18]
call fcn.140031980
nop
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.1400318a0
nop
lea rcx, [rbp + 0x88]
call fcn.140002b70
lea rcx, [rbp + 0xa8]
call fcn.140006f90
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.14000b6b0
lea rdx, [0x1401b21b8]
lea rcx, [rbp + 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
int3