Function at 0x1400ca010
Capabilities:
Check for unmoving mouse cursor
Check if file exists
Create process on windows
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x9e0
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x1402a98a8]
xor rax, rsp
mov qword [rsp + 0x9d0], rax
mov r15, rdx
mov rdi, rcx
mov r8, qword [rcx + 0x708]
mov rbx, qword [rdx]
cmp r8, rbx
je 0x1400ca092
cmp qword [rcx + 0x4a8], rbx
je 0x1400ca092
xor r14d, r14d
mov byte [rsp + 0x41], r14b
cmp qword [rcx + 0x668], rbx
je 0x1400ca087
cmp qword [rcx + 0x580], rbx
je 0x1400ca087
xor dl, dl
xor esi, esi
mov r13d, esi
jmp 0x1400ca0a5
mov dl, 1
lea r13, [rcx + 0x650]
jmp 0x1400ca0a3
mov r14b, 1
mov byte [rsp + 0x41], r14b
xor dl, dl
lea r13, [rcx + 0x6f0]
xor esi, esi
mov byte [rsp + 0x40], dl
mov eax, 0x490
mov ecx, 0x568
test r14b, r14b
cmove eax, ecx
lea rcx, [rax + rdi]
mov qword [rsp + 0x50], rcx
mov r12d, dword [r15 + 0x10]
mov eax, r12d
cmp r12d, 0xfffffcb7
ja 0x1400cb1f9
je 0x1400cb13c
add eax, 0xfffff82f
cmp eax, 0x50
ja case.0x1400ca105.2004
lea r9, [0x140000000]
movzx eax, byte [r9 + rax + 0xccebc]
mov ecx, dword [r9 + rax*4 + 0xcce88]
add rcx, r9
jmp rcx
test r13, r13
je case.0x1400ca105.2004
mov eax, dword [r15 + 0x28]
test al, 3
je 0x1400ca153
and al, 1
mov r9, qword [r15 + 0x38]
mov r8, qword [r15 + 0x18]
movzx edx, al
mov rcx, qword [rdi + 0x8d0]
call fcn.14011c670
mov byte [0x1402bf240], 1
mov byte [rdi + 0x97a88], 1
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [r15 + 0x28]
test al, 0x63
je 0x1400ca16d
mov rax, qword [rdi + 0x8d0]
mov rcx, qword [rax + 0x40]
mov byte [rcx + 0x100], 1
mov eax, dword [r15 + 0x28]
test al, 8
je 0x1400ca194
cmp byte [0x1402bf240], 0
je 0x1400ca19f
mov r9d, dword [r15 + 0x6c]
mov r8d, dword [r15 + 0x68]
mov rdx, qword [r15 + 0x60]
mov rcx, r13
call fcn.1401124c0
mov eax, dword [r15 + 0x28]
jmp 0x1400ca198
test al, 3
jne 0x1400ca19f
mov byte [0x1402bf240], 0
bt eax, 0xe
jae case.0x1400ca105.2004
xor r8d, r8d
xor edx, edx
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x1400ca105.2004
test r14b, r14b
je 0x1400ca1cb
mov rbx, qword [rdi + 0x730]
jmp 0x1400ca236
test dl, dl
je 0x1400ca1d8
mov rbx, qword [rdi + 0x690]
jmp 0x1400ca236
cmp rbx, qword [rdi + 0x7a8]
jne 0x1400ca1ea
lea rcx, [rdi + 0x790]
jmp 0x1400ca1fe
cmp rbx, qword [rdi + 0x848]
jne case.0x1400ca105.2004
lea rcx, [rdi + 0x830]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x935
call fcn.14000fa10
mov rbx, rax
call fcn.14004a380
mov rdx, rbx
mov rcx, rax
call fcn.14001ef20
mov rbx, rax
test rax, rax
je case.0x1400ca105.2004
call fcn.14004a380
mov r12d, dword [r15 + 0x10]
cmp r12d, 0x7d3
sete sil
call fcn.14000c990
cmp byte [rax + 0x835], 0
je 0x1400ca2a2
cmp byte [rax + 0xd6], 0
je 0x1400ca2a2
cmp byte [rax + 0xd7], 0
jne 0x1400ca2a2
cmp r12d, 0x7d3
je 0x1400ca2a2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x87e
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
cmp rax, 1
je 0x1400ca2a2
cmp byte [rbx + 0x101], 0
je 0x1400ca2a2
movzx esi, sil
mov r12d, 1
cmp byte [rbx + 0x48], 0
cmovne esi, r12d
movzx edx, sil
mov rcx, rbx
call fcn.140020ba0
jmp case.0x1400ca105.2004
cmp rbx, r8
jne 0x1400ca2bc
xor edx, edx
jmp 0x1400ca2ca
cmp rbx, qword [rdi + 0x668]
jne 0x1400ca2d2
mov edx, 1
mov rcx, rdi
call fcn.14009b370
xor r9d, r9d
mov r8, qword [r15 + 0x18]
mov edx, 0x876
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
mov rsi, rax
mov eax, dword [r15 + 0x70]
cmp eax, dword [0x14022f568]
jne 0x1400ca374
mov r8d, dword [r15 + 0x24]
mov rdx, qword [r15 + 0x18]
mov rcx, qword [rdi + 0x8d0]
call fcn.140114f80
cmp qword [rdi + 0x983e0], 0
je 0x1400ca347
movsxd rbx, esi
xor r9d, r9d
mov r8, rbx
mov edx, 0x8b6
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
test rax, rax
setne r8b
mov rdx, rbx
mov rcx, qword [rdi + 0x983e0]
call fcn.14004a780
mov eax, 0x6f0
mov r8d, 0x650
test r14b, r14b
cmove r8d, eax
add r8, rdi
lea rcx, [rdi + 0x470]
mov rdx, qword [rdi + 0x8d0]
call fcn.140128e60
jmp case.0x1400ca105.2004
cmp eax, dword [0x14022f564]
jne case.0x1400ca105.2004
cmp dword [r15 + 0x24], 0
jne case.0x1400ca105.2004
mov edx, esi
mov rcx, qword [rdi + 0x8d0]
call fcn.140115ec0
test al, al
jne case.0x1400ca105.2004
cmp esi, 0xffffffff
jne 0x1400ca3d5
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa10
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa10
mov esi, eax
mov edx, esi
mov rcx, rdi
call fcn.1400853c0
test al, al
je 0x1400ca493
cmp esi, 0xffffffff
jne 0x1400ca420
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa10
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa10
mov esi, eax
nop dword [rax + rax]
mov eax, esi
cmp esi, 0xffffffff
jne 0x1400ca454
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa10
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa10
movsxd r8, eax
xor r9d, r9d
mov edx, 0x7fe
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
shr rax, 0x18
test al, 1
je case.0x1400ca105.2004
movsxd r8, esi
mov edx, 0x7fc
mov r9d, 0x18
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
jmp 0x1400ca420
cmp esi, 0xffffffff
jne 0x1400ca4c7
mov rbx, qword [rdi + 0x8d0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, rbx
call fcn.14000fa10
mov r8, rax
xor r9d, r9d
mov edx, 0x876
mov rcx, rbx
call fcn.14000fa10
mov esi, eax
mov edx, esi
mov rcx, rdi
call fcn.1400853c0
test al, al
jne case.0x1400ca105.2004
movsxd r8, esi
mov edx, 0x7fb
mov r9d, 0x18
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
jmp case.0x1400ca105.2004
cmp rbx, r8
jne 0x1400ca501
xor edx, edx
jmp 0x1400ca50f
cmp rbx, qword [rdi + 0x668]
jne 0x1400ca517
mov edx, 1
mov rcx, rdi
call fcn.14009b370
mov eax, dword [0x14022f564]
cmp dword [r15 + 0x70], eax
jne case.0x1400ca105.2004
cmp dword [r15 + 0x24], 0
jne case.0x1400ca105.2004
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [0x14021d128]
call fcn.14007b6d0
mov rbx, rax
mov edx, dword [rax]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je case.0x1400ca105.2004
mov edx, dword [rbx + 4]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je case.0x1400ca105.2004
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x1400ca105.2004
cmp rbx, r8
je 0x1400ca5ba
cmp rbx, qword [rdi + 0x668]
jne 0x1400cc6e3
mov rbx, qword [r15 + 0x60]
cmp byte [rdi + 0x97a89], 0
jne 0x1400ca5d1
xor edx, edx
mov rcx, rdi
call fcn.140083ca0
cmp qword [rdi + 0x983e0], 0
je 0x1400cc6e3
xor r9d, r9d
mov r8, rbx
mov edx, 0x8b6
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
test rax, rax
setne r8b
mov rdx, rbx
mov rcx, qword [rdi + 0x983e0]
call fcn.14004a780
mov eax, 1
jmp 0x1400cce31
cmp byte [rdi + 0x97a38], 0
jne case.0x1400ca105.2004
cmp byte [rdi + 0x97a39], 0
jne case.0x1400ca105.2004
call fcn.14000c990
mov rbx, rax
cmp byte [rax + 0xdb], 0
je 0x1400ca64e
movzx edx, word [r15 + 0x20]
mov rcx, rdi
call fcn.140094590
mov esi, 0x1e0
mov edx, 0x328
test r14b, r14b
cmove esi, edx
add rsi, rdi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa0a
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
cmp rax, 1
setg cl
lea r8, [rbx + 0x340]
mov rax, qword [r8 + 8]
sub rax, qword [r8]
test rax, 0xfffffffffffffffe
jne 0x1400ca6bf
cmp byte [r8 + 0x31], 0
jne 0x1400ca6bf
cmp byte [r8 + 0x32], 0
jne 0x1400ca6bf
cmp byte [r8 + 0x33], 0
jne 0x1400ca6bf
cmp byte [r8 + 0x34], 0
jne 0x1400ca6bf
cmp byte [r8 + 0x35], 0
jne 0x1400ca6bf
cmp byte [r8 + 0x30], 0
je 0x1400ca6cf
test cl, cl
jne 0x1400ca6cf
mov edx, dword [r15 + 0x20]
mov rcx, rsi
call fcn.1400128c0
mov edx, dword [r15 + 0x20]
mov rcx, rsi
call fcn.140014840
jmp case.0x1400ca105.2004
test r13, r13
je case.0x1400ca105.2004
cmp dword [r15 + 0x24], 2
jne 0x1400cac51
call fcn.14000c990
mov r12, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], InitCommonControls
mov byte [rsp + 0xf0], 0
mov r15, qword [r15 + 0x18]
cmp r15, 0xffffffffffffffff
jne 0x1400ca751
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d8
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
mov r15, rax
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
cmp byte [r12 + 0xe8], r8b
je 0x1400ca792
mov edx, 0x7d6
call fcn.14000fa10
lea rbx, [rax + 1]
mov rcx, rbx
call fcn.1401812cc
mov rdi, rax
mov r9, rax
mov r8, rbx
mov edx, 0x886
mov rcx, r13
call fcn.14000fa10
jmp 0x1400ca7dc
mov edx, 0x7eb
call fcn.14000fa10
mov rbx, rax
lea rcx, [rax + 1]
call fcn.1401812cc
mov rdi, rax
mov r9, rax
mov r8, rbx
mov edx, 0x7eb
mov rcx, r13
call fcn.14000fa10
mov rcx, r13
call fcn.1400a3860
mov r8, rax
xor r9d, r9d
mov edx, 0x877
mov rcx, r13
call fcn.14000fa10
sub r15, rax
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rdi + r8], 0
jne 0x1400ca7e6
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.140006c20
mov rcx, rdi
call fcn.1401812c4
mov eax, r14d
mov qword [rsp + 0x50], rax
movzx ebx, byte [r12 + 0xe6]
cmp byte [r12 + 0xe7], bl
jne 0x1400ca923
movsxd r11, r15d
test r15d, r15d
js 0x1400cac3f
mov rcx, r11
lea r8, [r11 - 1]
mov r9, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x100]
mov r10, qword [rsp + 0xf0]
cmp rdx, rcx
jbe 0x1400cce70
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
cmp byte [rax + rcx], bl
jne 0x1400ca89a
cmp bl, 0x22
jne 0x1400ca8ac
test rcx, rcx
jle 0x1400ca8ac
cmp rdx, r8
jbe 0x1400cce5e
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
cmp byte [r8 + rax], 0x5c
jne 0x1400ca8ac
dec r11d
dec r8
sub rcx, 1
js 0x1400cac3f
jmp 0x1400ca852
cmp r11d, r14d
je 0x1400cac3f
cmp r15, rdx
jae 0x1400cac3f
mov rdi, r15
cmp rdx, r15
jbe 0x1400cce6a
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
movzx ecx, byte [r12 + 0xe7]
cmp byte [r15 + rax], cl
jne 0x1400ca916
cmp cl, 0x22
jne 0x1400ca91b
test r15, r15
je 0x1400ca91b
lea rcx, [r15 - 1]
cmp rdx, rcx
jbe 0x1400cce64
lea rax, [rsp + 0xf0]
cmp r9, 0x10
cmovae rax, r10
cmp byte [rcx + rax], 0x5c
jne 0x1400ca91b
inc r15
jmp 0x1400ca8b5
mov r14d, r11d
jmp 0x1400cabc2
lea rax, [rsp + 0x150]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x170], rsi
mov ecx, InitCommonControls
call fcn.140181288
mov qword [rsp + 0x150], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x150]
mov rax, qword [rsp + 0x150]
mov qword [rax], rcx
mov ebx, esi
mov rdi, qword [rsp + 0x100]
test rdi, rdi
je 0x1400cabb0
mov r9, rsi
mov r12d, 1
mov r11, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x168]
cmp rdi, rsi
jbe 0x1400cce7c
lea rcx, [rsp + 0xf0]
cmp r11, 0x10
cmovae rcx, qword [rsp + 0xf0]
mov r10, qword [rsp + 0x58]
movzx eax, byte [r10 + 0xe6]
cmp byte [rcx + r9], al
jne 0x1400caac5
lea eax, [rdx + r8]
mov rcx, qword [rsp + 0x160]
test al, 3
jne 0x1400caa2d
lea rax, [rdx + 4]
shr rax, 2
cmp rcx, rax
ja 0x1400caa2d
mov rdx, r12
lea rcx, [rsp + 0x150]
call fcn.1400c9e30
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x160]
lea rax, [rcx*4 - 1]
and r8, rax
mov qword [rsp + 0x168], r8
lea rdi, [r8 + rdx]
dec rcx
mov rax, rdi
shr rax, 2
and rcx, rax
lea rax, [rcx*8]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x158]
cmp qword [rax + rcx], 0
jne 0x1400caa93
mov ecx, InitCommonControls
call fcn.140181288
mov rcx, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x48]
mov qword [rdx + rcx], rax
mov rcx, qword [rsp + 0x158]
mov rax, rdx
and edi, 3
mov rax, qword [rax + rcx]
mov dword [rax + rdi*4], ebx
mov rdx, qword [rsp + 0x170]
inc rdx
mov qword [rsp + 0x170], rdx
mov r8, qword [rsp + 0x168]
mov rdi, qword [rsp + 0x100]
jmp 0x1400cab95
cmp rdi, r9
jbe 0x1400cce76
lea rcx, [rsp + 0xf0]
cmp r11, 0x10
cmovae rcx, qword [rsp + 0xf0]
movzx eax, byte [r10 + 0xe7]
cmp byte [rcx + r9], al
jne 0x1400cab9d
test rdx, rdx
je 0x1400cab9d
mov rax, rsi
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x1400cab19
mov r10, qword [rcx]
test r10, r10
je 0x1400cab19
mov rax, qword [r10]
lea r10, [rdx - 1]
add r10, r8
mov rcx, rsi
test rax, rax
je 0x1400cab33
mov r11, qword [rax]
test r11, r11
je 0x1400cab33
mov rcx, qword [r11]
test rcx, rcx
mov r11, rsi
je 0x1400cab3e
mov r11, qword [rcx]
mov rcx, qword [r11 + 0x10]
dec rcx
mov rax, r10
shr rax, 2
and rcx, rax
and r10d, 3
mov rax, qword [r11 + 8]
mov rcx, qword [rax + rcx*8]
mov r11d, dword [rcx + r10*4]
sub rdx, r12
mov qword [rsp + 0x170], rdx
cmove r8, rsi
mov qword [rsp + 0x168], r8
cmp r11, r15
ja 0x1400cab95
cmp r9, r15
jb 0x1400cab95
cmp r14d, 0xffffffff
je 0x1400cab8b
cmp r11d, r14d
jbe 0x1400cab95
mov r14d, r11d
mov eax, ebx
mov qword [rsp + 0x50], rax
mov r11, qword [rsp + 0x108]
inc ebx
mov r9d, ebx
cmp rdi, r9
ja 0x1400ca9bc
mov r12, qword [rsp + 0x58]
lea rcx, [rsp + 0x150]
call fcn.1400c9d30
mov rdi, qword [rsp + 0x50]
cmp edi, 0xffffffff
je 0x1400cac3f
cmp r14d, 0xffffffff
je 0x1400cac3f
mov rcx, r13
cmp byte [r12 + 0xe8], 0
je 0x1400cabf4
movsxd r8, edi
xor r9d, r9d
mov edx, 0x85d
call fcn.14000fa10
lea eax, [r14 + 1]
movsxd r8, eax
jmp 0x1400cac2e
call fcn.1400a3860
mov r8, rax
xor r9d, r9d
mov edx, 0x877
mov rcx, r13
call fcn.14000fa10
mov rbx, rax
movsxd r8, edi
add r8, rax
xor r9d, r9d
mov edx, 0x85d
mov rcx, r13
call fcn.14000fa10
movsxd r8, r14d
inc r8
add r8, rbx
xor r9d, r9d
mov edx, 0x7ea
mov rcx, r13
call fcn.14000fa10
nop
lea rcx, [rsp + 0xf0]
call fcn.1400045c0
jmp case.0x1400ca105.2004
xor r9d, r9d
mov r8, qword [r15 + 0x18]
mov edx, 0x9ca
mov rcx, r13
call fcn.14000fa10
bt rax, 8
jae case.0x1400ca105.2004
mov r9, qword [r15 + 0x18]
mov edx, 0x9cc
mov r8d, 8
mov rcx, r13
call fcn.14000fa10
mov r14, rax
mov r9, qword [r15 + 0x18]
mov edx, 0x9cd
mov r8d, 8
mov rcx, r13
call fcn.14000fa10
mov rbx, rax
mov rcx, qword [r15 + 0x18]
cmp rcx, r14
jl case.0x1400ca105.2004
cmp rcx, rax
jg case.0x1400ca105.2004
xor r9d, r9d
xor r8d, r8d
mov edx, 0x202
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.USER32.dll_PostMessageW]
mov r8, qword [r15 + 0x18]
mov r9, r8
mov edx, 0x870
mov rcx, r13
call fcn.14000fa10
mov r9, rbx
mov r8, r14
lea rdx, [rsp + 0x128]
mov rcx, r13
call fcn.140113140
nop
lea r8, [rsp + 0x128]
cmp qword [rsp + 0x140], 8
cmovae r8, qword [rsp + 0x128]
mov rax, qword [rdi]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
mov rcx, qword [rax + 0x18]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov r8, qword [rsp + 0x140]
cmp r8, 8
jb 0x1400cad5f
inc r8
mov rdx, qword [rsp + 0x128]
lea rcx, [rsp + 0x128]
call fcn.140007280
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x138], xmm0
mov word [rsp + 0x128], si
jmp case.0x1400ca105.2004
test r13, r13
je case.0x1400ca105.2004
call fcn.14000c990
mov rbx, rax
test byte [r15 + 0x90], 4
je 0x1400cada3
mov rdx, r13
mov rcx, rdi
call fcn.140083ca0
cmp byte [rbx + 8], 0
jne case.0x1400ca105.2004
mov rcx, qword [rdi + 0x8d0]
mov rax, qword [rcx + 0x18]
cmp qword [r15], rax
je 0x1400cae61
cmp byte [rbx + 0xe0], 0
je case.0x1400ca105.2004
xor r9d, r9d
mov r8d, 0x400
lea rdx, [rsp + 0x1d0]
call fcn.140112e20
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x138], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x138], xmm1
mov word [rsp + 0x128], si
lea rax, [rsp + 0x1d0]
mov r14, 0xffffffffffffffff
nop dword [rax + rax]
inc r14
cmp word [rax + r14*2], 0
jne 0x1400cae20
mov r8, r14
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x128]
call fcn.140006d70
nop
lea rcx, [rdi + 0x470]
lea r8, [rsp + 0x128]
mov rdx, r13
call fcn.1401292c0
nop
jmp 0x1400cad39
mov rcx, rdi
call fcn.140085430
cmp byte [rbx + 0xe2], 0
je 0x1400cae8f
mov rax, qword [rdi + 0x8d0]
mov qword [rsp + 0x50], rax
movzx edx, byte [rbx + 0xe3]
lea rcx, [rsp + 0x50]
call fcn.140155bc0
cmp byte [rbx + 0xdc], 0
je 0x1400caece
cmp byte [rbx + 0xe1], 0
je 0x1400caeaa
mov byte [rbx + 0xe1], 0
jmp 0x1400caece
mov eax, 0x6f0
mov r8d, 0x650
test r14b, r14b
cmove r8d, eax
add r8, rdi
lea rcx, [rdi + 0x470]
mov rdx, r13
call fcn.140128e60
test byte [r15 + 0x90], 3
je 0x1400caee0
mov rcx, rdi
call fcn.14009d540
mov rcx, qword [rdi + 0x983e8]
test rcx, rcx
je 0x1400caf0b
cmp byte [rcx + 0x80], 0
jne 0x1400caf0b
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je 0x1400caf0b
mov rcx, qword [rdi + 0x983e8]
call fcn.14006b5c0
mov ecx, 0x1e0
mov edx, 0x328
test r14b, r14b
cmove ecx, edx
add rcx, rdi
xor edx, edx
call fcn.140014840
jmp case.0x1400ca105.2004
test r13, r13
je case.0x1400ca105.2004
mov eax, 0x6f0
mov r8d, 0x650
test r14b, r14b
cmove r8d, eax
add r8, rdi
lea rcx, [rdi + 0x470]
mov rdx, r13
call fcn.140128e60
jmp case.0x1400ca105.2004
xor r9d, r9d
xor r8d, r8d
mov edx, 0x859
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
mov dword [rsp + 0x20], eax
mov r9, qword [r15 + 0x58]
mov r8, qword [r15 + 0x50]
mov edx, dword [r15 + 0x48]
lea rcx, [rsp + 0x150]
call fcn.14011d1c0
mov r8, rax
mov rdx, qword [rdi + 0x97a28]
cmp qword [rdi + 0x97a30], rdx
je 0x1400caff8
mov qword [rsp + 0x50], rdx
mov ecx, dword [rax]
mov dword [rdx], ecx
mov rcx, qword [rax + 8]
mov qword [rdx + 8], rcx
mov rax, qword [rax + 0x10]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x28], rsi
mov qword [rdx + 0x30], rsi
movups xmm0, xmmword [r8 + 0x18]
movups xmmword [rdx + 0x18], xmm0
movups xmm1, xmmword [r8 + 0x28]
movups xmmword [rdx + 0x28], xmm1
mov qword [r8 + 0x28], rsi
mov qword [r8 + 0x30], 7
mov word [r8 + 0x18], si
mov eax, dword [r8 + 0x38]
mov dword [rdx + 0x38], eax
add qword [rdi + 0x97a28], 0x40
jmp 0x1400cb005
lea rcx, [rdi + 0x97a20]
call fcn.1400a0640
nop
lea rcx, [rsp + 0x168]
call fcn.1400068d0
jmp case.0x1400ca105.2004
test r13, r13
je case.0x1400ca105.2004
lea rcx, [rdi + 0x6f0]
call fcn.140116ce0
lea rcx, [rdi + 0x650]
call fcn.140116ce0
cmp byte [rdi + 0x73c], 0
je 0x1400cb054
lea rcx, [rdi + 0x6f0]
call fcn.140116dc0
mov byte [rdi + 0x73c], 0
cmp byte [rdi + 0x69c], 0
je 0x1400cb070
lea rcx, [rdi + 0x650]
call fcn.140116dc0
mov byte [rdi + 0x69c], 0
mov rcx, r13
call fcn.14011c6b0
cmp byte [rdi + 0x97a9c], 0
jne 0x1400cb08a
cmp byte [rdi + 0x97a9d], 0
je 0x1400cb095
mov rdx, qword [r15]
mov rcx, rdi
call fcn.1400890d0
call fcn.14000c990
cmp byte [rdi + 0x97a88], 0
je 0x1400cb0a9
cmp byte [rax + 8], 0
je 0x1400cb0b3
cmp qword [r15 + 0x50], 0x62b
jne 0x1400cb0c4
xor edx, edx
mov rcx, rdi
call fcn.140083ca0
mov byte [rdi + 0x97a88], 0
mov rcx, qword [rdi + 0x983e0]
test rcx, rcx
je case.0x1400ca105.2004
cmp byte [rcx + 0x80], 0
jne case.0x1400ca105.2004
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je case.0x1400ca105.2004
mov rcx, qword [rdi + 0x983e0]
cmp byte [rcx + 0xe8], 0
jne case.0x1400ca105.2004
xor edx, edx
call fcn.14004b5e0
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b110
jmp case.0x1400ca105.2004
mov ecx, 0x1e0
mov edx, 0x328
test r14b, r14b
cmove ecx, edx
add rcx, rdi
mov rdx, qword [r15 + 0x18]
call fcn.1400119c0
jmp case.0x1400ca105.2004
mov rsi, qword [rdi + 0xc58]
cmp dword [r15 + 0x1c], 0
jne 0x1400cb194
mov eax, dword [r15 + 0x28]
mov dword [rsp + 0x48], eax
mov eax, dword [r15 + 0x34]
mov dword [rsp + 0x4c], eax
mov ecx, 0xc58
mov eax, 0xc20
cmp rsi, rbx
cmovne ecx, eax
lea rdx, [rsp + 0x48]
mov rcx, qword [rcx + rdi]
call qword [sym.imp.USER32.dll_ClientToScreen]
lea rcx, [rdi + 0xa18]
mov rdx, qword [rsp + 0x48]
call fcn.14013b780
mov eax, 1
jmp 0x1400cce31
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x78]
call fcn.14019fd40
mov dword [rsp + 0x70], 0x80
mov dword [rsp + 0x74], InitCommonControls
mov r8d, dword [r15 + 0x18]
mov ecx, 0xc58
mov eax, 0xc20
cmp rsi, rbx
cmovne ecx, eax
lea r9, [rsp + 0x70]
mov edx, 0x41c
mov rcx, qword [rcx + rdi]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, r15
xor r8d, r8d
lea edx, [r8 + 0x4e]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400ca105.2004
cmp eax, 0xfffffdd0
ja 0x1400cbab3
cmp eax, 0xfffffdcf
jae 0x1400cb4e5
cmp eax, 0xfffffcc1
je 0x1400cb4c9
cmp eax, 0xfffffdcb
je 0x1400cb315
cmp eax, 0xfffffdcc
je 0x1400cb291
cmp eax, 0xfffffdcd
je 0x1400cb315
cmp eax, 0xfffffdce
jne case.0x1400ca105.2004
movsxd rdx, dword [r15 + 0x18]
call fcn.14004a2c0
mov rsi, rax
call fcn.14004a380
movzx ebx, r14b
xor ebx, 1
cmp byte [rsi + 0x48], 0
je 0x1400cb26e
mov r8d, ebx
mov rdx, rsi
mov rcx, rdi
call fcn.140083590
mov r8d, ebx
mov rdx, rsi
mov rcx, rdi
call fcn.1400c3c60
test al, al
je case.0x1400ca105.2004
mov rcx, rdi
call fcn.1400859c0
jmp case.0x1400ca105.2004
call fcn.14000c990
movzx ebx, byte [rax + 0x88a]
cmp byte [rax + 0x889], 0
je 0x1400cb2b7
lea rcx, [rdi + 0x97900]
xor r8d, r8d
xor edx, edx
call fcn.14012b470
test bl, bl
je case.0x1400ca105.2004
mov rcx, qword [rdi + 0x983e0]
test rcx, rcx
je case.0x1400ca105.2004
cmp byte [rcx + 0x80], 0
jne case.0x1400ca105.2004
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je case.0x1400ca105.2004
mov rcx, qword [rdi + 0x983e0]
call fcn.14004a9b0
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b4a0
mov rax, qword [rdi + 0x983e0]
mov byte [rax + 0xe8], 0
jmp case.0x1400ca105.2004
call fcn.14000c990
movzx esi, byte [rax + 0x88a]
mov byte [rsp + 0x41], sil
movzx esi, byte [rsp + 0x40]
cmp byte [rax + 0x889], 0
je 0x1400cb40a
test r14b, r14b
je 0x1400cb344
mov eax, 0x490
jmp 0x1400cb352
test sil, sil
je 0x1400cb40a
mov eax, 0x568
lea r12, [rdi + rax]
test r12, r12
je 0x1400cb40a
movsxd rdx, dword [r15 + 0x18]
mov rcx, r12
call fcn.14004a2c0
mov qword [rsp + 0x50], rax
call fcn.14004a380
mov rbx, qword [rdi + 0x730]
mov rax, qword [rdi + 0x690]
mov qword [rsp + 0x58], rax
movsxd r8, dword [r15 + 0x18]
lea r9, [rsp + 0x110]
mov edx, 0x130a
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [rsp + 0x110]
mov dword [rsp + 0x48], ecx
mov ecx, dword [rsp + 0x11c]
mov dword [rsp + 0x4c], ecx
lea rdx, [rsp + 0x48]
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rax, qword [rsp + 0x50]
cmp rax, rbx
je 0x1400cb3f9
cmp rax, qword [rsp + 0x58]
je 0x1400cb3f9
lea rcx, [rdi + 0x97900]
mov r9, qword [r12 + 0xb0]
mov r8, rax
mov rdx, qword [rsp + 0x48]
call fcn.140016440
jmp 0x1400cb40a
lea rcx, [rdi + 0x97900]
xor r8d, r8d
xor edx, edx
call fcn.14012b470
cmp byte [rsp + 0x41], 0
je case.0x1400ca105.2004
mov rcx, qword [rdi + 0x983e0]
test rcx, rcx
je case.0x1400ca105.2004
cmp byte [rcx + 0x80], 0
jne case.0x1400ca105.2004
mov rax, qword [rcx]
call qword [rax + 0x58]
test al, al
je case.0x1400ca105.2004
test r14b, r14b
je 0x1400cb44c
mov eax, 0x490
jmp 0x1400cb45a
test sil, sil
je case.0x1400ca105.2004
mov eax, 0x568
lea rcx, [rdi + rax]
test rcx, rcx
je case.0x1400ca105.2004
movsxd rdx, dword [r15 + 0x18]
call fcn.14004a2c0
mov rbx, rax
call fcn.14004a380
cmp rbx, qword [rdi + 0x730]
je 0x1400cb49e
cmp rbx, qword [rdi + 0x690]
je 0x1400cb49e
mov r8, r13
mov rdx, rbx
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b4e0
jmp 0x1400cb4aa
mov rcx, qword [rdi + 0x983e0]
call fcn.14004a9b0
mov rcx, qword [rdi + 0x983e0]
call fcn.14004b4a0
mov rax, qword [rdi + 0x983e0]
mov byte [rax + 0xe8], 1
jmp case.0x1400ca105.2004
mov rcx, qword [rdi]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400ca105.2004
mov r12, qword [r15 + 8]
mov qword [rsp + 0x58], r12
mov ecx, SHCreateDirectory
call qword [sym.imp.USER32.dll_GetKeyState]
movsx r13d, ax
shr r13d, 0x1f
cmp dword [r15 + 0x10], 0xfffffdcf
jne 0x1400cba98
mov rbx, qword [r12 + 0x70]
mov qword [rsp + 0x48], rbx
mov r14, rbx
shr r14, 0x20
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r15, rax
mov rcx, qword [rdi + 0x8d0]
cmp rax, qword [rcx + 0x18]
jne 0x1400cb703
cmp qword [rdi + 0x9d0], 0
jne 0x1400cb6d2
movups xmm0, xmmword [0x14021cc60]
movaps xmmword [rsp + 0x150], xmm0
movups xmm1, xmmword [0x14021cc70]
movaps xmmword [rsp + 0x160], xmm1
mov eax, dword [0x14021cc80]
mov dword [rsp + 0x170], eax
movzx eax, word [0x14021cc84]
mov word [rsp + 0x174], ax
xor eax, eax
mov qword [rsp + 0x176], rax
mov qword [rsp + 0x17e], rax
mov qword [rsp + 0x186], rax
mov word [rsp + 0x18e], ax
movups xmm0, xmmword [0x14021cc88]
movaps xmmword [rsp + 0x190], xmm0
movups xmm1, xmmword [0x14021cc98]
movaps xmmword [rsp + 0x1a0], xmm1
movsd xmm0, qword [0x14021cca8]
movsd qword [rsp + 0x1b0], xmm0
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
xor r9d, r9d
lea r8, [rsp + 0x150]
mov edx, 0x2711
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [rsp + 0x190]
mov edx, 0x2712
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
mov rax, qword [rdi]
lea rcx, [rdi + 0x9c8]
mov byte [rsp + 0x20], 0
mov r9, qword [rdi + 0x979d0]
lea r8, [rsp + 0x110]
mov rdx, qword [rax + 0x18]
call fcn.14002c6e0
lea rcx, [rdi + 0x478]
mov rdx, qword [rdi + 0x9d0]
call fcn.1400792d0
nop
lea rcx, [rsp + 0x110]
call fcn.14004de80
mov qword [rsp + 0x30], rsi
mov rax, qword [rdi + 0x9c8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x4c]
mov r8d, ebx
xor edx, edx
mov rcx, qword [rdi + 0x9d0]
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x1400cba98
mov rax, qword [rdi + 0x648]
cmp r15, qword [rax + 0x18]
je 0x1400cba87
mov rax, qword [rdi + 0x8d8]
cmp r15, qword [rax + 0x18]
je 0x1400cba87
mov rax, qword [rdi]
lea rdx, [rsp + 0x110]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp ebx, dword [rsp + 0x110]
jl 0x1400cb767
cmp ebx, dword [rsp + 0x118]
jg 0x1400cb767
cmp r14d, dword [rsp + 0x114]
jl 0x1400cb767
mov eax, dword [rsp + 0x4c]
cmp eax, dword [rsp + 0x11c]
jle 0x1400cc6e3
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], 7
mov word [rsp + 0x128], si
mov r12d, 1
mov r8d, r12d
lea rdx, [0x1401f4c4c]
lea rcx, [rsp + 0x128]
call fcn.140006d70
nop
mov rax, qword [rdi + 0x8d0]
mov rdx, qword [rax + 0x40]
add rdx, 0xb0
cmp qword [rdx + 0x18], 8
jb 0x1400cb7cd
mov rdx, qword [rdx]
mov r14, 0xffffffffffffffff
inc r14
cmp word [rdx + r14*2], 0
jne 0x1400cb7d4
mov r8, r14
lea rcx, [rsp + 0x128]
call fcn.140006aa0
mov r8, r12
lea rdx, [0x1401f4c4c]
lea rcx, [rsp + 0x128]
call fcn.140006aa0
mov qword [rsp + 0xf0], 2
lea rax, [rsp + 0x128]
cmp qword [rsp + 0x140], 8
cmovae rax, qword [rsp + 0x128]
mov qword [rsp + 0x100], rax
mov eax, dword [rsp + 0x138]
lea eax, [rax*2 + 2]
mov dword [rsp + 0xf8], eax
mov rcx, r15
call qword [sym.imp.USER32.dll_GetParent]
mov r14, rax
mov r8d, 0x104
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, [0x140217680]
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1400cb9f4
mov rcx, qword [rdi]
cmp r14, qword [rcx + 0x18]
je 0x1400cb9f4
mov rcx, qword [rdi + 0x640]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdx, eax
mov rcx, qword [rsp + 0x50]
call fcn.14004a2c0
mov qword [rsp + 0x50], rax
call fcn.14004a380
movzx ebx, byte [rsp + 0x41]
xor ebx, 1
mov rax, qword [rsp + 0x50]
cmp byte [rax + 0x48], 0
je 0x1400cb989
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x160], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x160], xmm1
mov word [rsp + 0x150], si
movdqu xmmword [rsp + 0x1a0], xmm0
movdqu xmmword [rsp + 0x1a0], xmm1
mov word [rsp + 0x190], si
mov rax, qword [rdi]
lea rcx, [rdi + 0x478]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
lea rdx, str.Move_to_new_Notepad_Instance
mov qword [rsp + 0x20], rdx
lea r9, str.Document_is_modified__save_it_then_try_again.
mov r8, qword [rax + 0x18]
lea rdx, str.CannotMoveDoc
call fcn.14007c160
nop
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x1a0], xmm0
mov word [rsp + 0x190], si
movdqu xmmword [rsp + 0x160], xmm0
mov word [rsp + 0x150], si
jmp 0x1400cba0e
mov r9, r15
xor r8d, r8d
mov edx, 0x416
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rdi]
lea r9, [rsp + 0xf0]
mov r8, qword [rax + 8]
mov edx, 0x4a
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
test r13b, r13b
jne 0x1400cba0e
mov r8d, ebx
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
call fcn.1400c3c60
mov rcx, rdi
call fcn.1400952c0
test al, al
je 0x1400cba0e
mov rax, qword [rdi]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400cba0e
movzx edx, r13b
xor edx, 1
inc edx
mov r9d, dword [rsp + 0x4c]
mov r8d, ebx
mov rcx, rdi
call fcn.1400896a0
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 8
jb 0x1400cba56
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cba51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cce82
call fcn.1401812c4
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], 7
mov word [rsp + 0x128], si
mov rax, qword [rsp + 0x58]
mov qword [rax + 0x70], 0
mov eax, r12d
jmp 0x1400cce31
movzx edx, r13b
xor edx, 1
inc edx
mov rcx, rdi
call fcn.140089450
mov r12d, 1
mov rax, qword [rsp + 0x58]
mov qword [rax + 0x70], 0
mov eax, r12d
jmp 0x1400cce31
cmp eax, 0xfffffdd9
je 0x1400ccd9e
cmp eax, 0xfffffdee
je 0x1400cc97d
cmp eax, 0xfffffffb
je 0x1400cbd96
cmp eax, 0xfffffffd
je 0x1400cbc1b
cmp eax, 0xfffffffe
jne case.0x1400ca105.2004
cmp rbx, qword [rdi + 0xbb8]
jne 0x1400cbb74
cmp qword [r15 + 0x18], 5
jne case.0x1400ca105.2004
xor r9d, r9d
xor r8d, r8d
mov edx, 0x88b
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
test rax, rax
sete sil
xor r9d, r9d
mov r8, rsi
mov edx, 0x88a
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
xor r9d, r9d
xor r8d, r8d
mov edx, 0x88b
mov rcx, qword [rdi + 0x8d0]
call fcn.14000fa10
lea rcx, [0x140216ef0]
lea rdx, [0x140216ef8]
test rax, rax
cmovne rdx, rcx
lea rcx, [rdi + 0xba0]
mov r8d, 5
call fcn.14012c000
jmp case.0x1400ca105.2004
cmp rbx, qword [rdi + 0x4a8]
jne 0x1400cbbc2
cmp dword [rdi + 0x9840c], 1
jne 0x1400cbbc2
call fcn.14000c990
cmp byte [rax + 0x835], 0
je 0x1400cbbb3
cmp byte [rax + 0xd6], 0
je 0x1400cbbb3
cmp byte [rax + 0xd7], 0
jne 0x1400cbbb3
call fcn.14004a380
mov rcx, rax
call fcn.14001d2e0
xor edx, edx
mov rcx, rdi
call fcn.14009b370
jmp case.0x1400ca105.2004
cmp rbx, qword [rdi + 0x580]
jne case.0x1400ca105.2004
cmp dword [rdi + 0x9840c], 0
jne case.0x1400ca105.2004
call fcn.14000c990
cmp byte [rax + 0x835], 0
je 0x1400cbc09
cmp byte [rax + 0xd6], 0
je 0x1400cbc09
cmp byte [rax + 0xd7], 0
jne 0x1400cbc09
call fcn.14004a380
mov rcx, rax
call fcn.14001d2e0
mov edx, 1
mov rcx, rdi
call fcn.14009b370
jmp case.0x1400ca105.2004
cmp rbx, qword [rdi + 0xbb8]
jne case.0x1400ca105.2004
mov rax, qword [r15 + 0x18]
cmp rax, 2
jne 0x1400cbcad
lea rbx, [rdi + 0x1bc0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x68]
test al, al
sete r14b
movzx r15d, byte [rdi + 0x484]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x68]
test al, al
jne 0x1400cbc72
mov rax, qword [rbx]
mov r9b, 1
movzx r8d, r15b
mov edx, 0x7d0
mov rcx, rbx
call qword [rax + 0x60]
mov rax, qword [rbx]
mov dl, 1
mov rcx, rbx
call qword [rax + 0x18]
test r14b, r14b
je case.0x1400ca105.2004
lea rcx, [rdi + 0x478]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.GoToLine
mov rdx, qword [rdi + 0x1bd8]
call fcn.1400785c0
jmp case.0x1400ca105.2004
cmp rax, 1
jne 0x1400cbcc5
mov edx, 0xac11
mov rcx, rdi
call fcn.1400b65f0
jmp case.0x1400ca105.2004
test rax, rax
jne 0x1400cbd16
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 5
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x50]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x1400ca105.2004
cmp rax, 3
jne case.0x1400ca105.2004
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [0x14021cd60]
call fcn.14007b6d0
mov rbx, rax
mov edx, dword [rax]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je 0x1400cc6e3
mov edx, dword [rbx + 4]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, rax
test rax, rax
je 0x1400cc6e3
mov rax, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x50]
xor edx, edx
call qword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x1400ca105.2004
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rax, qword [r15]
cmp rax, qword [rdi + 0x4a8]
jne 0x1400cc624
xor edx, edx
mov rcx, rdi
call fcn.14009b370
mov r12d, 1
cmp qword [rdi + 0x9a8], 0
jne 0x1400cc59b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
xor r9d, r9d
lea r8, [0x1401f6168]
mov edx, 0xa02b
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Close_All_BUT_This
mov edx, 0xa02d
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021cdf8]
mov edx, 0xa031
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021ce28]
mov edx, 0xa03a
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021ce58]
mov edx, 0xa040
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x1402167c8]
mov edx, 0xa02e
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021ce80]
mov edx, 0xa030
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021ce98]
mov edx, 0xa039
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021cea8]
mov edx, 0xa038
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Reload
mov edx, 0xa036
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Print
mov edx, 0xa032
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021ced0]
mov edx, 0xa03b
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Open_Containing_Folder_in_cmd
mov edx, 0xa03c
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Open_Containing_Folder_as_Workspace
mov edx, 0xa041
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021cfa8]
mov edx, 0xa03f
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Read_Only
mov edx, 0xa42c
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021cff0]
mov edx, 0xa431
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Full_File_Path_to_Clipboard
mov edx, 0xa42d
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Filename_to_Clipboard
mov edx, 0xa42e
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021d088]
mov edx, 0xa42f
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021cc60]
mov edx, 0x2711
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021cc88]
mov edx, 0x2712
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021d0c8]
mov edx, 0x2713
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, [0x14021d0f8]
mov edx, 0x2714
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
mov rax, qword [rdi]
lea rcx, [rdi + 0x9a0]
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x110]
mov rdx, qword [rax + 0x18]
call fcn.14002c6e0
lea rcx, [rdi + 0x478]
mov rdx, qword [rdi + 0x9a8]
call fcn.140079160
nop
lea rcx, [rsp + 0x110]
call fcn.14004de80
xor r8d, r8d
mov edx, 0xa02e
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetMenuState]
shr eax, 1
not al
test al, 1
mov r14d, 3
mov r8d, r14d
cmovne r8d, esi
mov edx, 0xa02e
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov rax, qword [rdi + 0x8d0]
mov r13, qword [rax + 0x40]
movzx eax, byte [r13 + 0x54]
neg al
sbb r8d, r8d
and r8d, 8
mov edx, 0xa42c
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_CheckMenuItem]
movzx ebx, byte [r13 + 0xac]
test bl, bl
jne 0x1400cc81f
cmp byte [r13 + 0x110], bl
jne 0x1400cc81f
mov al, 1
jmp 0x1400cc821
cmp rax, qword [rdi + 0x580]
jne 0x1400cc643
mov r12d, 1
mov edx, r12d
mov rcx, rdi
call fcn.14009b370
jmp 0x1400cbdc1
cmp rax, qword [rdi + 0xbb8]
jne 0x1400cc6ed
mov rax, qword [r15 + 0x18]
test rax, rax
jne 0x1400cc67f
lea edx, [rax + 5]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x28], rcx
mov rcx, rax
jmp 0x1400cc6cd
cmp rax, 3
jne 0x1400cc6e3
lea rcx, [0x14021cd60]
call fcn.14007b6d0
mov rbx, rax
mov edx, dword [rax]
mov rcx, qword [rdi + 0x979d0]
call qword [sym.imp.USER32.dll_GetSubMenu]
test rax, rax
je 0x1400cc6e3
mov edx, dword [rbx + 4]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
mov rcx, rax
test rax, rax
je 0x1400cc6e3
mov rax, qword [rdi]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
xor edx, edx
mov r8d, dword [rsp + 0x48]
mov r9d, dword [rsp + 0x4c]
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov eax, 1
jmp 0x1400cce31
mov rcx, qword [rdi + 0x983b8]
test rcx, rcx
je 0x1400cc6e3
cmp rax, qword [rcx + 0x18]
jne 0x1400cc6e3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, qword [rcx + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jle 0x1400cbdbb
cmp qword [rdi + 0x9f8], 0
jne 0x1400cc80c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
xor r9d, r9d
lea r8, str.Close_Selected_files
mov edx, 0xa9ed
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
xor r9d, r9d
lea r8, str.Close_others_files
mov edx, 0xa9ee
lea rcx, [rsp + 0x70]
call fcn.14002c540
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14005bb70
nop
lea rcx, [rsp + 0x98]
call fcn.1400068d0
nop
lea rcx, [rsp + 0x78]
call fcn.1400068d0
mov rax, qword [rdi]
lea rcx, [rdi + 0x9f0]
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x110]
mov rdx, qword [rax + 0x18]
call fcn.14002c6e0
lea rcx, [rdi + 0x478]
mov rdx, qword [rdi + 0x9f8]
call fcn.140079160
nop
lea rcx, [rsp + 0x110]
call fcn.14004de80
mov rax, qword [rdi + 0x9f0]
mov rcx, qword [rdi + 0x9f8]
jmp 0x1400cc6c3
xor al, al
mov r8d, r14d
test al, al
cmovne r8d, esi
mov edx, 0xa42c
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov r8d, r14d
test bl, bl
cmovne r8d, esi
mov edx, 0xa431
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
lea r15, [r13 + 0xb0]
mov rcx, r15
cmp qword [r15 + 0x18], 8
jb 0x1400cc86b
mov rcx, qword [r15]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ebx, r14d
test eax, eax
cmovne ebx, esi
mov r8d, ebx
mov edx, 0xa038
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov r8d, ebx
mov edx, 0xa03b
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov r8d, ebx
mov edx, 0xa03c
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
cmp qword [r15 + 0x18], 8
jb 0x1400cc8c2
mov r15, qword [r15]
mov rcx, r15
call fcn.14002a3e0
mov r8d, r14d
test al, al
cmovne r8d, esi
mov edx, 0xa03f
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
movzx r15d, byte [r13 + 0x48]
mov ebx, dword [r13 + 0xa0]
test r15b, r15b
jne 0x1400cc8ff
cmp ebx, 2
je 0x1400cc8ff
mov al, 1
jmp 0x1400cc901
xor al, al
mov r8d, r14d
test al, al
cmovne r8d, esi
mov edx, 0x2713
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
test r15b, r15b
jne 0x1400cc92a
cmp ebx, 2
je 0x1400cc92a
mov al, 1
jmp 0x1400cc92c
xor al, al
test al, al
cmovne r14d, esi
mov r8d, r14d
mov edx, 0x2714
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov qword [rsp + 0x30], rsi
mov rax, qword [rdi + 0x9a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x48]
xor edx, edx
mov rcx, qword [rdi + 0x9a8]
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov eax, r12d
jmp 0x1400cce31
mov qword [r15 + 0xc0], rsi
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rax, qword [rdi]
lea rdx, [rsp + 0x50]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rdi]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_RealChildWindowFromPoint]
mov rbx, rax
mov word [0x1402bf250], si
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor r8d, r8d
lea rdx, [0x1401e6278]
lea rcx, [rsp + 0xf0]
call fcn.140006d70
nop
movsxd rax, dword [r15 + 8]
cmp rbx, qword [rdi + 0xc20]
jne 0x1400ccaea
lea rdx, [rsp + 0xf0]
mov ecx, eax
call fcn.14011dde0
cmp qword [rsp + 0x100], 0x50
jb 0x1400cca75
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cca52
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cce31
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
lea rcx, [r15 + 0x20]
mov edx, 0x50
call fcn.1401a83c0
nop
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400ccac4
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov eax, 1
jmp 0x1400cce31
cmp rbx, qword [rdi + 0x4a8]
jne 0x1400ccc20
mov rdx, rax
lea rcx, [rdi + 0x490]
call fcn.14004a2c0
mov rbx, rax
call fcn.14004a380
lea rdx, [rbx + 0xb0]
cmp qword [rdx + 0x18], 8
jb 0x1400ccb1f
mov rdx, qword [rdx]
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp word [rdx + r14*2], 0
jne 0x1400ccb30
mov r8, r14
lea rcx, [rsp + 0xf0]
call fcn.140006d70
cmp qword [rsp + 0x100], 0x400
jb 0x1400ccba2
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400ccb7f
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cce31
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
mov edx, 0x400
lea rbx, [0x1402bf250]
mov rcx, rbx
call fcn.1401a83c0
mov qword [r15 + 0x18], rbx
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400ccbfa
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov eax, 1
jmp 0x1400cce31
cmp rbx, qword [rdi + 0x580]
jne 0x1400ccd50
mov rdx, rax
lea rcx, [rdi + 0x568]
call fcn.14004a2c0
mov rbx, rax
call fcn.14004a380
lea rdx, [rbx + 0xb0]
cmp qword [rdx + 0x18], 8
jb 0x1400ccc55
mov rdx, qword [rdx]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp word [rdx + r14*2], 0
jne 0x1400ccc60
mov r8, r14
lea rcx, [rsp + 0xf0]
call fcn.140006d70
cmp qword [rsp + 0x100], 0x400
jb 0x1400cccd2
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400cccaf
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cce31
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
mov edx, 0x400
lea rbx, [0x1402bf250]
mov rcx, rbx
call fcn.1401a83c0
mov qword [r15 + 0x18], rbx
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400ccd2a
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov eax, 1
jmp 0x1400cce31
mov r8, qword [rsp + 0x108]
cmp r8, 8
jb 0x1400ccd76
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.140007280
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
xor eax, eax
jmp 0x1400cce31
cmp rbx, qword [rdi + 0x4a8]
je 0x1400ccdb5
cmp rbx, qword [rdi + 0x580]
jne case.0x1400ca105.2004
mov esi, 1
mov rdx, qword [rdi + 0x8d0]
lea rcx, [rdi + 0x97900]
call fcn.1400165b0
mov edx, esi
mov rcx, rdi
call fcn.14009b370
mov rcx, qword [rdi + 0x640]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdx, eax
mov rcx, qword [rdi + 0x640]
call fcn.14004a2c0
test rax, rax
je 0x1400cce1e
mov byte [rdi + 0x97a89], 1
mov r8d, esi
mov rdx, rax
mov rcx, rdi
call fcn.140083590
mov byte [rdi + 0x97a89], 0
xor r8d, r8d
xor edx, edx
lea rcx, [rdi + 0x97900]
call fcn.14012b470
xor eax, eax
mov rcx, qword [rsp + 0x9d0]
xor rcx, rsp
call fcn.1401813e0
lea r11, [rsp + 0x9e0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140006980
int3
call fcn.140006980
int3
call fcn.140006980
int3
call fcn.140006980
nop
call fcn.140006980
int3
call fcn.140006980
nop
call fcn.1401a2d8c
int3