Function at 0x18001f810
Capabilities:
Get graphical window text
Inspect section memory permissions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xa20
mov rax, qword [0x1801903f8]
xor rax, rsp
mov qword [rsp + 0xa10], rax
mov eax, dword [0x1801aa490]
xor ebx, ebx
mov r13d, r8d
mov rbp, rdx
mov r12, rcx
cmp eax, 0x8000
ja 0x180020bf8
je 0x180020b90
cmp eax, 0x100
ja 0x18001fe4e
je 0x18001fdd5
dec eax
cmp eax, 0x7f
ja case.0x18001f88c.3
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x21730]
mov ecx, dword [rdx + rax*4 + 0x21710]
add rcx, rdx
jmp rcx
lea rdi, str.TXGuiFoundation
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x18001f911
mov edx, 0xfffffff0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xffffffec
mov rcx, r12
mov edi, eax
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, r12
mov esi, eax
call qword [sym.imp.USER32.dll_GetParent]
bt edi, 0x10
jae 0x18001f8ef
bt edi, 0x12
jae 0x18001f8ef
test rax, rax
jne case.0x18001f88c.3
movabs rbx, 0x100020000
jmp 0x1800216ab
bt esi, 0x13
jae case.0x18001f88c.3
test rax, rax
jne case.0x18001f88c.3
movabs rbx, 0x100020020
jmp 0x1800216ab
lea rdi, str.RichEdit20A
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x18001f93d
cmp r8d, 0x380
jne 0x18001f93d
movabs rbx, 0x100020000
jmp 0x1800216ab
lea rdi, str.TXGFLayerMask
mov rsi, rbp
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rax, 0x100010005
cmp qword [0x1801aa4b0], rax
jne case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
je case.0x18001f88c.3
movabs rbx, 0x100020020
jmp 0x1800216ab
lea rdi, str.TXGuiFoundation
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x18001f9e4
mov edx, 0xfffffff0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0x10
jae case.0x18001f88c.3
bt eax, 0x12
jae case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne case.0x18001f88c.3
movabs rbx, 0x1000020000
jmp 0x1800216ab
lea rdi, str.RICHEDIT
mov rsi, rbp
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
jne 0x18001fa01
cmp r8d, 0x380
je 0x18001f9d5
lea rdi, str.RichEdit20A
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
cmp r8d, 0x380
je 0x18001f9d5
cmp r8d, 0x1004
jmp 0x18001f9cf
lea rdi, str.RichEdit20A
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x18001fa6f
cmp r8d, 0x65
je 0x18001fa60
cmp r8d, 0x401
je 0x18001fa60
cmp r8d, 0x19c6
je 0x18001fa60
cmp r8d, 0x19ed
jne 0x18001fa6f
movabs rbx, 0x201020000
jmp 0x1800216ab
lea rdi, str.__oxFrame.class__
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetUBound
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
je case.0x18001f88c.3
movabs rbx, 0x202020000
jmp 0x1800216ab
lea rdi, str.NETEASE_POPO_UniformMsgWnd
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_DispGetParam
repe cmpsw word [rsi], word [rdi]
jne 0x18001facb
movabs rbx, 0x4000020000
jmp 0x1800216ab
lea rdi, str.Chrome_WidgetWin_0
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetLBound
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call fcn.18002d5b0
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetElement
lea rdx, str.1000000000.unicom_lanxin
lea rcx, [rsp + 0x5f0]
call fcn.18007f320
test eax, eax
jne case.0x18001f88c.3
movabs rbx, 0x4000020000
jmp 0x1800216ab
lea rdi, str.TChatContentControl
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
repe cmpsw word [rsi], word [rdi]
je 0x18001fb88
lea rdi, str.TRichView
mov rsi, rbp
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call fcn.18002d5b0
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rsi, [rsp + 0x5f0]
lea rdi, str.TskMultiChatForm.UnicodeClass
mov ecx, 0x1e
repe cmpsw word [rsi], word [rdi]
jne 0x18001fbf8
movabs rbx, 0x8000020001
jmp 0x1800216ab
lea rsi, [rsp + 0x5f0]
lea rdi, str.TZapMainForm.UnicodeClass
mov ecx, reloc.OLEAUT32.dll_SafeArrayCopy
repe cmpsw word [rsi], word [rdi]
je 0x18001fc96
lea rsi, [rsp + 0x5f0]
lea rdi, str.TConversationForm.UnicodeClass
mov ecx, 0x1f
repe cmpsw word [rsi], word [rdi]
je 0x18001fc96
lea rsi, [rsp + 0x5f0]
lea rdi, str.tSkMainForm.UnicodeClass
mov ecx, reloc.OLEAUT32.dll_SafeArrayPutElement
repe cmpsw word [rsi], word [rdi]
je 0x18001fc96
lea rsi, [rsp + 0x5f0]
lea rdi, str.tSkMainForm
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
je 0x18001fc96
lea rsi, [rsp + 0x5f0]
lea rdi, str.TConversationForm
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetUBound
repe cmpsw word [rsi], word [rdi]
je 0x18001fc96
lea rsi, [rsp + 0x5f0]
lea rdi, str.TZapMainForm
mov ecx, reloc.WS2_32.dll_listen
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x8000020000
jmp 0x1800216ab
lea rdi, str.TXGuiFoundation
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov edx, 0xfffffff0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, r12
mov edi, eax
call qword [sym.imp.USER32.dll_GetParent]
bt edi, 0x10
jae case.0x18001f88c.3
bt edi, 0x12
jae case.0x18001f88c.3
test rax, rax
jne case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x18001fd53
lea rsi, [rsp + 0x5f0]
lea rdi, [0x18012f980]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne 0x18001fd53
movabs rbx, 0x1100010001
jmp 0x1800216ab
movabs rbx, 0x1100020001
jmp 0x1800216ab
lea rdi, str.Chrome_WidgetWin_0
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetLBound
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x103
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, str.CefBrowserWindow
jmp 0x18001fb38
lea rdi, str.RichEdit20A
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x18001fe1a
cmp r8d, 0x1f41
jne 0x18001fe01
movabs rbx, 0x10000020101
jmp 0x1800216ab
cmp r8d, 2
jne case.0x18001f88c.3
movabs rbx, 0x10000020201
jmp 0x1800216ab
lea rdi, str.RichEdit20W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
cmp r8d, 0x4e23
jne case.0x18001f88c.3
movabs rbx, 0x10000020101
jmp 0x1800216ab
cmp eax, 0x1000
ja 0x180020a27
je 0x18002098d
cmp eax, 0x200
je 0x1800206ed
cmp eax, 0x400
je 0x180020333
cmp eax, 0x800
jne case.0x18001f88c.3
lea rdx, str.WindowsForms10.STATIC.app.0.
mov r8d, 0x1c
mov rcx, rbp
call fcn.18007f540
test eax, eax
jne 0x18001fef6
lea r8, [rsp + 0x50]
lea edx, [rax + 7]
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
mov ecx, dword [rsp + 0x50]
test rax, rax
je 0x18001feca
cmp ecx, 7
jne 0x18001feca
movabs rbx, 0x80000020002
jmp 0x1800216ab
cmp ecx, 6
jne 0x18001fede
movabs rbx, 0x80000020000
jmp 0x1800216ab
cmp ecx, 5
jne case.0x18001f88c.3
movabs rbx, 0x80000020000
jmp 0x1800216ab
lea rdx, str.WindowsForms10.Window.8.app.0.
mov r8d, 0x1e
mov rcx, rbp
call fcn.18007f540
test eax, eax
jne 0x1800200a7
lea r8, [rsp + 0x50]
lea edx, [rax + 6]
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
test rax, rax
je case.0x18001f88c.3
cmp dword [rsp + 0x50], 6
jne case.0x18001f88c.3
mov rcx, r12
call fcn.18002d5b0
lea rcx, [rsp + 0x88]
xor edx, edx
mov rsi, rax
mov qword [rsp + 0x540], rax
lea rax, str.WindowsForms10.RichEdit20W.app.0.
mov qword [rsp + 0x548], rax
lea rax, str.WindowsForms10.RichEdit50W.app.0.
mov r8d, 0x318
mov qword [rsp + 0x550], rbx
mov dword [rsp + 0x558], ebx
mov dword [rsp + 0x55c], ebx
mov qword [rsp + 0x578], rax
mov qword [rsp + 0x5a8], rax
mov dword [rsp + 0x560], 2
mov dword [rsp + 0x564], 7
mov dword [rsp + 0x568], ebx
mov qword [rsp + 0x570], rsi
mov qword [rsp + 0x580], rbx
mov dword [rsp + 0x588], ebx
mov dword [rsp + 0x58c], ebx
mov dword [rsp + 0x590], 2
mov dword [rsp + 0x594], 6
mov dword [rsp + 0x598], ebx
mov qword [rsp + 0x5a0], rsi
mov qword [rsp + 0x5b0], rbx
mov dword [rsp + 0x5b8], ebx
mov dword [rsp + 0x5bc], ebx
mov dword [rsp + 0x5c0], 2
mov dword [rsp + 0x5c4], 7
mov dword [rsp + 0x5c8], ebx
mov qword [rsp + 0x80], rbx
call fcn.18007ead0
lea rcx, [rsp + 0x3a0]
xor edx, edx
mov r8d, 0x198
call fcn.18007ead0
mov edi, ebx
mov dword [rsp + 0x38], 1
movsxd rax, edi
mov dword [rsp + 0x30], ebx
lea rcx, [rax + rax*2]
mov r9d, 1
mov rdx, rsi
add rcx, rcx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
lea r8, [rsp + rcx*8 + 0x540]
lea rcx, [rsp + 0x80]
call fcn.18002d9a0
cmp qword [rsp + 0x80], rbx
ja 0x18001fecf
inc edi
cmp edi, 3
jb 0x180020051
jmp case.0x18001f88c.3
lea rdx, str.FxRichEdit
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne 0x18002012f
movabs rax, 0x80001010008
mov rcx, r12
cmp qword [0x1801aa4b0], rax
jne 0x1800200f4
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0xb
jb case.0x18001f88c.3
movabs rbx, 0x80001020000
jmp 0x1800216ab
call fcn.18002d5b0
test rax, rax
je case.0x18001f88c.3
lea r8, str.FxSpecialListView
xor r9d, r9d
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowExW]
movabs rbx, 0x80000020002
neg rax
sbb rcx, rcx
add rbx, rcx
jmp 0x1800216ab
lea rdx, str.Internet_Explorer_Server
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
cmp dword [0x1801b0450], ebx
je 0x180020177
mov rax, qword [0x1801aa4b0]
lea r9, str.CheckIMChatWndType_1_0x_016I64x
lea r8, str.fetion
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
movabs rax, 0x80000010008
cmp qword [0x1801aa4b0], rax
jne case.0x18001f88c.3
lea r8, [rsp + 0x50]
mov edx, 4
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
mov rbp, rax
cmp dword [0x1801b0450], ebx
je 0x1800201d9
mov eax, dword [rsp + 0x50]
lea r9, str.CheckIMChatWndType_2_0x_08x__lu
lea r8, str.fetion
mov dword [rsp + 0x28], eax
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rbp
call fcn.1800b3b40
cmp dword [rsp + 0x50], 4
jne case.0x18001f88c.3
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x103
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x18002025c
lea rax, [rsp + 0x5f0]
lea r9, str.CheckIMChatWndType_3__s
lea r8, str.fetion
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rsi, [rsp + 0x5f0]
lea rdi, str.FetionBaseDialog
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov edx, 5
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
cmp dword [0x1801b0450], ebx
je 0x1800202b4
lea r9, str.CheckIMChatWndType_4_0x_08x
lea r8, str.fetion
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
mov edx, 0xfffffff0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongW]
test rdi, rdi
je case.0x18001f88c.3
bt eax, 0x1c
jae case.0x18001f88c.3
mov edx, 5
mov rcx, rdi
movabs rbx, 0x80000020001
call qword [sym.imp.USER32.dll_GetWindow]
cmp dword [0x1801b0450], 0
mov rdi, rax
je 0x18002031b
lea r9, str.CheckIMChatWndType_5_0x_08x
lea r8, str.fetion
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
test rdi, rdi
je 0x1800216ab
movabs rbx, 0x80000020002
jmp 0x1800216ab
cmp dword [0x1801aa48c], 0x12
je 0x18002062b
lea rdx, str.AEF_RenderWidgetHostHWND
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne 0x18002061e
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov rsi, rax
cmp dword [0x1801b0450], ebx
je 0x180020392
lea r9, str._ALI__CheckIMChatWndType_8.0_1__x__x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
test rsi, rsi
je case.0x18001f88c.3
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 2]
call fcn.18002d5e0
mov rdi, rax
cmp dword [0x1801b0450], ebx
je 0x1800203d7
lea r9, str._ALI__CheckIMChatWndType_8.0_2__x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
test rdi, rdi
je case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x180020446
lea rax, [rsp + 0x5f0]
lea r9, str._ALI__CheckIMChatWndType_8.0_3__s
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rdx, str.SplitterBar
lea rcx, [rsp + 0x5f0]
call fcn.18007f704
test eax, eax
je 0x1800205aa
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetParent]
mov rdi, rax
cmp dword [0x1801b0450], ebx
je 0x180020498
lea r9, str._ALI__CheckIMChatWndType_8.0_31__x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
test rdi, rdi
je case.0x18001f88c.3
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x1800204ea
lea rax, [rsp + 0x5f0]
lea r9, str._ALI__CheckIMChatWndType_8.0_32__s
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rdx, str.SplitterBar
lea rcx, [rsp + 0x5f0]
call fcn.18007f704
test eax, eax
je 0x1800205aa
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetParent]
mov rbp, rax
cmp dword [0x1801b0450], ebx
je 0x18002053c
lea r9, str._ALI__CheckIMChatWndType_8.0_33__x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rdi
call fcn.1800b3b40
test rbp, rbp
je case.0x18001f88c.3
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x18002058e
lea rax, [rsp + 0x5f0]
lea r9, str._ALI__CheckIMChatWndType_8.0_34__s
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rdx, str.SplitterBar
lea rcx, [rsp + 0x5f0]
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x1800205f3
lea rax, [rsp + 0x5f0]
lea r9, str._ALI__CheckIMChatWndType_8.0_4__s
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rdx, str.AEF_WidgetWin_0
lea rcx, [rsp + 0x5f0]
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
movabs rbx, 0x40000020000
jmp 0x1800216ab
cmp dword [0x1801aa48c], 0x12
jne case.0x18001f88c.3
lea rdx, str.AEF_RenderWidgetHostHWND
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
lea edx, [rax + 4]
xor r8d, r8d
mov rcx, r12
call fcn.18002d5e0
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
lea rcx, [rsp + 0x542]
xor edx, edx
mov r8d, RegisterTypeLib
mov word [rsp + 0x540], bx
call fcn.18007ead0
lea rdx, [rsp + 0x540]
mov r8d, 0x50
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x1800206c2
lea rax, [rsp + 0x540]
lea r9, str._ALIQN__CheckIMChatWndType_1___s_
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1800b3b40
lea rdx, str.SplitterBar
lea rcx, [rsp + 0x540]
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
movabs rbx, 0x1200020000
jmp 0x1800216ab
lea rdx, str.MozillaContentWindowClass
mov r8d, reloc.OLEAUT32.dll_SafeArrayPutElement
mov rcx, rbp
call fcn.18007f320
test eax, eax
jne 0x180020777
lea r8, [rsp + 0x50]
lea edx, [rax + 0xa]
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
cmp dword [rsp + 0x50], 0xa
jne case.0x18001f88c.3
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne case.0x18001f88c.3
movabs rbx, 0x20000020002
cmp dword [0x1801b0450], eax
je case.0x18001f88c.3
mov dword [rsp + 0x20], 0x22c
lea r9, str._LSC____d__CheckIMChatWndType_SameTime_9...
lea r8, [0x180131e78]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
call fcn.1800b3b40
jmp 0x1800216ab
lea rdi, str.SysListView32
mov rsi, rbp
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne 0x180020915
test r13d, r13d
je 0x18002079d
cmp r13d, r12d
jne case.0x18001f88c.3
lea rax, str.SWT_Window0
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
lea rax, str.SWT_Window1
mov r8d, 0x206
mov dword [rsp + 0x58], 9
mov dword [rsp + 0x5c], 7
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x60], 8
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
mov edi, ebx
lea rsi, [rsp + 0x68]
nop word [rax + rax]
mov rdx, qword [rsi]
lea rcx, [rsp + 0x5f0]
call fcn.18007f704
test eax, eax
je 0x180020844
inc edi
add rsi, 8
cmp edi, 3
jbe 0x180020820
jmp case.0x18001f88c.3
movsxd rbp, edi
lea r8, [rsp + 0x50]
mov rcx, r12
mov esi, dword [rsp + rbp*4 + 0x58]
mov dword [rsp + 0x50], ebx
mov edx, esi
call fcn.18002d5e0
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
cmp dword [rsp + 0x50], esi
jne case.0x18001f88c.3
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne case.0x18001f88c.3
lea rcx, [rsp + 0x802]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x800], bx
call fcn.18007ead0
lea rdx, [rsp + 0x800]
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
mov rdi, qword [rsp + rbp*8 + 0x68]
lea rdx, [rsp + 0x800]
sub rdi, rdx
nop word [rax + rax]
movzx ecx, word [rdx]
movzx eax, word [rdx + rdi]
sub ecx, eax
jne 0x1800208e3
add rdx, 2
test eax, eax
jne 0x1800208d0
test ecx, ecx
jne case.0x18001f88c.3
movabs rbx, 0x20000020002
cmp dword [0x1801b0450], ecx
je case.0x18001f88c.3
mov dword [rsp + 0x20], 0x24f
lea r9, str._LSC____d__CheckIMChatWndType_SameTime_8...
jmp 0x18002075c
lea rdi, str.RichEdit20A
mov rsi, rbp
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180020941
cmp r13d, 0xda
jne 0x180020941
movabs rbx, 0x20000020000
jmp 0x1800216ab
lea rdi, [0x18012c318]
mov rsi, rbp
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
cmp r13d, 0xe1
jne 0x180020971
movabs rbx, 0x20000020004
jmp 0x1800216ab
cmp r13d, 0xe5
jne case.0x18001f88c.3
movabs rbx, 0x20000020008
jmp 0x1800216ab
lea rdi, str.Internet_Explorer_Server
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayPutElement
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
lea r8, [rsp + 0x50]
mov edx, 2
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
lea rcx, [rsp + 0x802]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x800], bx
mov rdi, rax
call fcn.18007ead0
lea rdx, [rsp + 0x800]
mov r8d, 0x103
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
test rdi, rdi
je case.0x18001f88c.3
lea rsi, [rsp + 0x800]
lea rdi, str.Chat_View
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x100000020001
jmp 0x1800216ab
cmp eax, 0x2000
je 0x180020b3f
cmp eax, 0x4000
jne case.0x18001f88c.3
lea rdi, str.SysHeader32
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180020aa3
lea r8, [rsp + 0x50]
mov edx, 3
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
test r12, r12
je case.0x18001f88c.3
cmp dword [rsp + 0x50], 3
jne case.0x18001f88c.3
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x30000
je case.0x18001f88c.3
movabs rbx, 0x400000020000
jmp 0x1800216ab
lea rdx, str.RichEdit20W
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne 0x180020afc
lea r8, [rsp + 0x50]
lea edx, [rax + 2]
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
mov edx, 0xfffffff0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0xb
jae case.0x18001f88c.3
cmp dword [rsp + 0x50], 2
jne case.0x18001f88c.3
movabs rbx, 0x400000020001
jmp 0x1800216ab
lea rdx, str.ATL:
mov r8d, 4
mov rcx, rbp
call fcn.18007f540
test eax, eax
jne case.0x18001f88c.3
lea edx, [rax - 0x10]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0xb0000
je case.0x18001f88c.3
movabs rbx, 0x400000020001
jmp 0x1800216ab
lea rdi, str.BaseGui
mov rsi, rdx
mov ecx, 8
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov edx, 0xfffffff0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0x10
jae case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne case.0x18001f88c.3
movabs rbx, 0x200000020000
jmp 0x1800216ab
lea rdi, str.RichEdit20A
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
je 0x180020bbc
lea rdi, str.RichEdit20W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov edx, 0xfffffff0
mov rcx, r12
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
test rdi, rdi
je case.0x18001f88c.3
bt eax, 0xb
jae case.0x18001f88c.3
movabs rbx, 0x800000020000
jmp 0x1800216ab
cmp eax, 0x2000000
ja 0x180021295
je 0x1800211c3
cmp eax, 0x80000
ja 0x180020f78
je 0x180020eac
cmp eax, 0x10000
je 0x180020df8
cmp eax, 0x20000
je 0x180020c9f
cmp eax, 0x40000
jne case.0x18001f88c.3
lea rdi, str.RichEdit20A
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
je 0x180020c63
lea rdi, str.RichEdit20W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov edx, 0xfffffff0
mov rcx, r12
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
test rdi, rdi
je case.0x18001f88c.3
bt eax, 0xb
jae case.0x18001f88c.3
movabs rbx, 0x4000000020001
jmp 0x1800216ab
lea rdi, str.Chrome_RenderWidgetHostHWND
mov rsi, rdx
mov ecx, 0x1c
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call fcn.180013e70
mov rbp, rax
test rax, rax
je case.0x18001f88c.3
cmp rax, r12
je case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [0x1801b0450], ebx
je 0x180020d3f
lea rax, [rsp + 0x5f0]
lea r9, str.CheckIMChatWndType__Wnd:_08x____s_
lea r8, str.cloud
mov qword [rsp + 0x28], rax
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], rbp
call fcn.1800b3b40
lea rsi, [rsp + 0x5f0]
lea rdi, [0x18012be28]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
xor eax, eax
lea rdx, [rsp + 0x58]
mov rcx, rbp
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], eax
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp dword [0x1801b0450], ebx
je 0x180020db1
mov eax, dword [rsp + 0x58]
lea r9, str.CheckIMChatWndType___d__d_
lea r8, str.cloud
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x60]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov dword [rsp + 0x20], eax
call fcn.1800b3b40
mov eax, dword [rsp + 0x60]
sub eax, dword [rsp + 0x58]
cmp eax, 0x12c
jle case.0x18001f88c.3
cmp dword [0x1801b0450], ebx
je 0x180020de9
lea r9, str.CheckIMChatWndType_Create__
lea r8, str.cloud
lea rcx, [0x1801afb58]
or edx, 0xffffffff
call fcn.1800b3b40
movabs rbx, 0x2000000010000
jmp 0x1800216ab
lea rdi, str.TPimrve
mov rsi, rdx
mov ecx, 8
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov rcx, r12
call fcn.18002d5b0
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
mov rdi, rax
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x103
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
test rdi, rdi
je case.0x18001f88c.3
lea rsi, [rsp + 0x5f0]
lea rdi, str.Tfm_chat
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
jne 0x180020e80
movabs rbx, 0x1000000020000
jmp 0x1800216ab
lea rsi, [rsp + 0x5f0]
lea rdi, str.Tfm_message
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x1000000020000
jmp 0x1800216ab
lea rdi, str.RichEdit20W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180020efc
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov edx, 0xfffffff0
mov rcx, r12
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
test rdi, rdi
je case.0x18001f88c.3
bt eax, 0xb
jae case.0x18001f88c.3
movabs rbx, 0x8000000020001
jmp 0x1800216ab
lea rdi, [0x18012c318]
mov rsi, rdx
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
mov edx, 0xfffffff0
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
test al, 4
je case.0x18001f88c.3
test al, 0x40
je case.0x18001f88c.3
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov edx, 0xfffffff0
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
test rdi, rdi
je case.0x18001f88c.3
bt eax, 0x10
jb case.0x18001f88c.3
bt eax, 0x11
jb case.0x18001f88c.3
movabs rbx, 0x8000000020002
jmp 0x1800216ab
cmp eax, 0x400000
je 0x18002110b
cmp eax, 0x1000000
jne case.0x18001f88c.3
lea rdi, str.wxWindowNR
mov rsi, rdx
mov ecx, VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180021076
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
lea rcx, [rsp + 0x802]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x800], bx
mov rdi, rax
call fcn.18007ead0
test r12, r12
je 0x180020feb
lea rdx, [rsp + 0x800]
mov r8d, 0x103
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.wxWindow
lea rcx, [rsp + 0x800]
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
call fcn.18007ead0
lea rdx, [rsp + 0x5f0]
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x180021067
lea rsi, [rsp + 0x5f0]
lea rdi, str.LINE
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne 0x180021067
movabs rbx, 0x100000000010001
jmp 0x1800216ab
movabs rbx, 0x100000000020000
jmp 0x1800216ab
lea rdx, str.Qt5QWindowIcon
mov rcx, rbp
call fcn.18007f704
test eax, eax
je 0x1800210a0
lea rdx, str.Qt5152QWindowIcon
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
mov rcx, r12
call fcn.180014e70
lea rcx, [rsp + 0x802]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x800], bx
call fcn.18007ead0
lea rdx, [rsp + 0x800]
mov r8d, 0x104
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x180021067
lea rdx, str.LINE
lea rcx, [rsp + 0x800]
call fcn.18007f704
test eax, eax
jne 0x180021067
movabs rbx, 0x100000000010000
jmp 0x1800216ab
lea rdi, str.RichEdit20W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
je 0x18002115a
lea rdi, str.RICHEDIT50W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
je 0x18002115a
lea rdi, str.SysTreeView32
mov rsi, rdx
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x40000000020004
jmp 0x1800216ab
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov edx, 0xfffffff0
mov rcx, r12
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xffffffec
mov rcx, r12
mov esi, eax
call qword [sym.imp.USER32.dll_GetWindowLongW]
test rdi, rdi
je case.0x18001f88c.3
bt esi, 0xb
jae 0x1800211a2
movabs rbx, 0x40000000020001
jmp 0x1800216ab
bt esi, 0x15
jae case.0x18001f88c.3
test al, 0x10
jne case.0x18001f88c.3
movabs rbx, 0x40000000020002
jmp 0x1800216ab
lea rdi, str.Internet_Explorer_Server
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayPutElement
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
xor r8d, r8d
mov rcx, r12
lea edx, [r8 + 3]
call fcn.18002d5e0
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je case.0x18001f88c.3
mov rcx, r12
call fcn.18002d5b0
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
lea r8, str.RichEdit20W
xor r9d, r9d
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowExW]
lea r8, str.SysTabControl32
xor r9d, r9d
xor edx, edx
mov rcx, rdi
mov rbp, rax
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rsi, rax
test rbp, rbp
je case.0x18001f88c.3
test rax, rax
je case.0x18001f88c.3
mov edx, 0xfffffff4
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xfffffff4
mov rcx, rsi
mov edi, eax
call qword [sym.imp.USER32.dll_GetWindowLongW]
cmp edi, 0x3fc
jne case.0x18001f88c.3
cmp eax, 0x413
jne case.0x18001f88c.3
movabs rbx, 0x200000000020000
jmp 0x1800216ab
cmp eax, 0x20000000
ja 0x1800215ec
je 0x1800214de
cmp eax, 0x4000000
je 0x1800213c8
cmp eax, 0x8000000
je 0x18002137e
cmp eax, 0x10000000
jne case.0x18001f88c.3
lea rdi, str.RichEdit20W
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180021334
mov edx, 0xfffffff4
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, eax
cmp dword [0x1801b0450], ebx
je 0x180021319
mov dword [rsp + 0x28], eax
lea r9, str._KK__CheckIMChatWndType___x____x_
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], r12
call fcn.1800b3b40
cmp edi, 0x7149
jne case.0x18001f88c.3
movabs rbx, 0x1000000000020001
jmp 0x1800216ab
lea rdi, str.imwnd
mov rsi, rdx
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x180021357
movabs rbx, 0x1000000000020002
jmp 0x1800216ab
lea rdi, str.KKMsgSessionClassName
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayAccessData
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x1000000000020003
jmp 0x1800216ab
lea rdi, str.WeChatloginWndForPC
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
repe cmpsw word [rsi], word [rdi]
jne 0x1800213a1
movabs rbx, 0x800000000010000
jmp 0x1800216ab
lea rdi, str.WeChatMainWndForPC
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetLBound
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x800000000020000
jmp 0x1800216ab
lea rdx, str.PptNativeViewerWindow
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne 0x18002148e
test r12, r12
je 0x18002148e
mov rcx, r12
call fcn.18002d5b0
lea rcx, [rsp + 0x5f2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x5f0], bx
mov rdi, rax
call fcn.18007ead0
test rdi, rdi
je 0x18002142c
lea rdx, [rsp + 0x5f0]
mov r8d, 0x103
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [0x1801b0450], ebx
je 0x180021463
lea rax, [rsp + 0x5f0]
lea r9, str._lync__CheckIMChatWndType_1___08x____s_
lea r8, str.lync
mov qword [rsp + 0x28], rax
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], r12
call fcn.1800b3b40
lea rdx, str.LyncConversationWindowClass
lea rcx, [rsp + 0x5f0]
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
movabs rbx, 0x400000000020000
jmp 0x1800216ab
lea rdx, str.IMWindowClass
mov rcx, rbp
call fcn.18007f704
test eax, eax
jne case.0x18001f88c.3
cmp dword [0x1801b0450], ebx
je 0x1800214cf
lea r9, str._lync__CheckIMChatWndType_2___08x____s_
lea r8, str.lync
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x20], r12
call fcn.1800b3b40
movabs rbx, 0x400000000020000
jmp 0x1800216ab
lea rdi, str.Internet_Explorer_Server
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayPutElement
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
xor eax, eax
lea rdx, [rsp + 0x68]
mov rcx, r12
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x74], eax
call qword [sym.imp.USER32.dll_GetWindowRect]
lea r8, [rsp + 0x50]
mov edx, 3
mov rcx, r12
mov dword [rsp + 0x50], ebx
call fcn.18002d5e0
mov rdi, rax
test rax, rax
je case.0x18001f88c.3
xor eax, eax
lea rdx, [rsp + 0x58]
mov rcx, rdi
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], eax
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp dword [0x1801b0450], ebx
je 0x1800215a7
mov eax, dword [rsp + 0x5c]
lea r9, str._imo__CheckIMChatWndType___x__x____d__d__d__d_
lea r8, [0x18012b1a8]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x58]
lea rcx, [0x1801afb58]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x6c]
or edx, 0xffffffff
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.1800b3b40
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x6c]
cmp eax, ecx
jge case.0x18001f88c.3
add eax, 0x64
cmp eax, ecx
jle case.0x18001f88c.3
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x68]
cmp eax, ecx
jg case.0x18001f88c.3
add eax, 0x32
cmp eax, ecx
jle case.0x18001f88c.3
movabs rbx, 0x2000000000020000
jmp 0x1800216ab
cmp eax, 0x40000000
je 0x180021665
cmp eax, 0x80000000
jne case.0x18001f88c.3
lea rdi, str.WeChatLogin
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180021621
movabs rbx, 0x8000000000010000
jmp 0x1800216ab
lea rdi, str.WeWorkWindow
mov rsi, rdx
mov ecx, reloc.WS2_32.dll_listen
repe cmpsw word [rsi], word [rdi]
jne 0x180021641
movabs rbx, 0x8000000000020000
jmp 0x1800216ab
lea rdi, str.WwStandaloneConversationWnd
mov rsi, rdx
mov ecx, 0x1c
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x8000000000040000
jmp 0x1800216ab
lea rdi, str.Chrome_WidgetWin_1
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetLBound
repe cmpsw word [rsi], word [rdi]
je 0x1800216a1
lea rdi, str.StandardFrame_DingTalk
mov rsi, rdx
mov ecx, reloc.OLEAUT32.dll_SafeArrayUnaccessData
repe cmpsw word [rsi], word [rdi]
je 0x1800216a1
lea rdi, str.StandardFrame
mov rsi, rdx
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne case.0x18001f88c.3
movabs rbx, 0x4000000000010000
cmp dword [0x1801b0450], 0
je case.0x18001f88c.3
mov eax, dword [0x1801aa490]
lea r9, str.CheckIMChatWndType___d___08x_
lea r8, [0x18012b1a8]
mov dword [rsp + 0x28], eax
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov dword [rsp + 0x20], 0x493
call fcn.1800b3b40
mov rax, rbx
mov rcx, qword [rsp + 0xa10]
xor rcx, rsp
call fcn.18007e1e0
mov rbx, qword [rsp + 0xa60]
add rsp, 0xa20
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret