Function at 0x180003140
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Log keystrokes
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x968]
sub rsp, 0xa68
mov rax, qword [0x180047520]
xor rax, rsp
mov qword [rbp + 0x950], rax
xor esi, esi
mov r14, r9
mov r15, r8
mov r13d, edx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
mov r12d, esi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0x600], eax
cmp r13d, 0x7e9
jne 0x1800031fe
cmp r15, 0x1234
jne 0x1800031fe
xor ecx, ecx
call fcn.180007620
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1800031d9
mov rcx, rax
call fcn.180006f90
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x1800031fe
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rbp + 0x950]
xor rcx, rsp
call fcn.180024b60
add rsp, 0xa68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.18000b8b0
test eax, eax
je 0x18000344f
nop dword [rax + rax]
cmp eax, 1
jne 0x18000321f
call fcn.18000e830
jmp 0x180003442
cmp eax, 2
jne 0x18000322e
call fcn.18000e690
jmp 0x180003442
cmp eax, 3
jne 0x18000323d
call fcn.18000e760
jmp 0x180003442
cmp eax, 4
jne 0x180003278
cmp qword [0x18007bf08], rsi
je 0x180003442
lea rcx, [0x18007bb58]
call fcn.180024080
mov rcx, qword [0x18007bf08]
lea r8, [0x180010bf0]
mov edx, 0x50
call fcn.18000b790
jmp 0x180003442
cmp eax, 5
jne 0x1800032b3
cmp qword [0x18007beb8], rsi
je 0x180003442
lea rcx, [0x18007bb58]
call fcn.180024080
mov rcx, qword [0x18007beb8]
lea r8, [0x180010bf0]
mov edx, 0x50
call fcn.18000b790
jmp 0x180003442
cmp eax, 6
jne 0x1800032ee
cmp qword [0x18007bea0], rsi
je 0x180003442
lea rcx, [0x18007bb78]
call fcn.180024080
mov rcx, qword [0x18007bea0]
lea r8, [0x1800111f0]
mov edx, 0x48
call fcn.18000b790
jmp 0x180003442
cmp eax, 7
jne 0x180003329
cmp qword [0x18007bf10], rsi
je 0x180003442
lea rcx, [0x18007bb78]
call fcn.180024080
mov rcx, qword [0x18007bf10]
lea r8, [0x1800111f0]
mov edx, 0x48
call fcn.18000b790
jmp 0x180003442
cmp eax, 8
je 0x180003442
cmp eax, 9
jne 0x18000336d
cmp qword [0x18007bb68], rsi
je 0x180003442
lea rcx, [0x18007beb0]
call fcn.180024080
mov rcx, qword [0x18007bb68]
lea r8, [0x180011730]
mov edx, 0x50
call fcn.18000b790
jmp 0x180003442
cmp eax, 0xa
jne 0x1800033a8
cmp qword [0x18007bf40], rsi
je 0x180003442
lea rcx, [0x18007beb0]
call fcn.180024080
mov rcx, qword [0x18007bf40]
lea r8, [0x180011730]
mov edx, 0x50
call fcn.18000b790
jmp 0x180003442
cmp eax, 0xb
jne 0x1800033e0
cmp qword [0x18007bf30], rsi
je 0x180003442
lea rcx, [0x18007bb50]
call fcn.180024080
mov rcx, qword [0x18007bf30]
lea r8, [0x180011d30]
mov edx, 0x48
call fcn.18000b790
jmp 0x180003442
cmp eax, 0xc
jne 0x180003414
cmp qword [0x18007bee0], rsi
je 0x180003442
lea rcx, [0x18007bb50]
call fcn.180024080
mov rcx, qword [0x18007bee0]
lea r8, [0x180011d30]
mov edx, 0x48
call fcn.18000b790
jmp 0x180003442
cmp eax, 0xd
jne 0x180003420
call fcn.18000fe60
jmp 0x180003442
cmp eax, 0xe
jne 0x18000342c
call fcn.18000ff30
jmp 0x180003442
cmp eax, 0xf
jne 0x180003438
call fcn.18000e910
jmp 0x180003442
cmp eax, 0x10
jne 0x180003442
call fcn.18000e9f0
call fcn.18000b8b0
test eax, eax
jne 0x180003210
mov ecx, dword [0x180048620]
mov r11d, 1
mov ebx, ecx
test ecx, ecx
jne 0x1800034d8
cmp dword [0x18004861c], esi
je 0x180003494
cmp r13d, 6
je 0x180003491
lea eax, [r13 - 8]
cmp eax, 0x3f
ja 0x180003488
movabs rdx, 0xc000000000110001
bt rdx, rax
jb 0x180003491
cmp r13d, 0x86
jne 0x180003494
mov ebx, r11d
test ecx, ecx
jne 0x1800034d8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub eax, dword [0x18007b91c]
cmp eax, 0xbb8
jb 0x1800034d2
mov dword [0x18007b91c], ecx
mov ecx, 1
mov dword [0x180048624], esi
call fcn.18000ace0
mov r11d, 1
mov dword [0x180048624], r11d
jmp 0x1800034d8
mov r11d, 1
cmp r13d, 0x8b0
jb 0x18000350f
cmp r13d, 0x8ba
jae 0x180003518
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.180015460
test eax, eax
je 0x180003ac5
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x18000629a
cmp r13d, 0x8ba
jb 0x180003531
cmp r13d, 0x8bf
jae 0x180003531
mov r9, r14
mov r8, r15
mov ecx, r13d
call fcn.180015bf0
jmp 0x1800034f8
test ebx, ebx
jne 0x180003576
cmp r13d, 0x84e
jne 0x180003ac5
cmp r15, 0x1234
jne 0x180003ac5
mov eax, r14d
mov ebx, 0x8000
and eax, 1
mov dword [0x180048620], eax
mov eax, r14d
and eax, ebx
mov dword [0x18004861c], eax
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x84e
je 0x180003542
cmp r13d, 6
jne 0x1800035df
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x1800035b9
inc esi
add rax, 4
cmp esi, ecx
jb 0x1800035a2
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
mov r9, r14
mov r8, r15
mov edx, 6
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
cmp r13d, 0x1c
jne 0x18000363f
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x180003619
inc esi
add rax, 4
cmp esi, ecx
jb 0x180003602
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
mov r9, r14
mov r8, r15
mov edx, 0x1c
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
cmp r13d, 0x86
jne 0x18000368e
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x18000367c
inc esi
add rax, 4
cmp esi, ecx
jb 0x180003665
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
jmp 0x1800031d9
cmp r13d, 8
jne 0x1800036ee
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x1800036c8
inc esi
add rax, 4
cmp esi, ecx
jb 0x1800036b1
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
mov r9, r14
mov r8, r15
mov edx, 8
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
cmp r13d, 0x46
jne 0x18000374e
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x180003728
inc esi
add rax, 4
cmp esi, ecx
jb 0x180003711
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
mov r9, r14
mov r8, r15
mov edx, 0x46
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
cmp r13d, 0x47
jne 0x1800037ae
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x180003788
inc esi
add rax, 4
cmp esi, ecx
jb 0x180003771
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
mov r9, r14
mov r8, r15
mov edx, 0x47
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
cmp r13d, 0x18
jne 0x18000380e
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x596235d2
je 0x1800037e8
inc esi
add rax, 4
cmp esi, ecx
jb 0x1800037d1
jmp 0x180006297
cmp dword [0x18007b92c], r12d
jne 0x180006297
mov r9, r14
mov r8, r15
mov edx, 0x18
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
cmp r13d, 0x215
jne 0x18000384f
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180003ac5
cmp dword [rax], 0x7fae1452
je 0x18000367c
inc esi
add rax, 4
cmp esi, ecx
jb 0x180003834
jmp 0x180006297
cmp r13d, 0x84
jne 0x18000397f
mov rcx, qword [rsp + 0x48]
mov rax, r14
lea rdx, [rbp - 0x60]
shr rax, 0x10
movsx edi, r14w
movsx ebx, ax
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x58]
mov rcx, qword [rsp + 0x48]
mov dword [rbp + 0x600], eax
mov eax, dword [rbp - 0x54]
lea rdx, [rbp - 0x68]
mov dword [rbp + 0x604], eax
mov qword [rbp - 0x68], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rcx, qword [rsp + 0x48]
lea rdx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp edi, dword [rbp - 0x68]
jl 0x180003964
cmp edi, dword [rbp + 0x600]
jge 0x180003964
cmp ebx, dword [rbp - 0x64]
jl 0x180003964
cmp ebx, dword [rbp + 0x604]
jge 0x180003964
mov r8, qword [0x18007c098]
mov rdx, qword [0x18007c090]
mov r9d, dword [0x18007b92c]
sub r8, rdx
mov ecx, esi
sar r8, 2
test r8d, r8d
je 0x180003913
mov rax, rdx
cmp dword [rax], 0x592629e2
je 0x18000391b
inc ecx
add rax, 4
cmp ecx, r8d
jb 0x180003900
cmp dword [0x18007b044], esi
je 0x180003929
test r9d, r9d
jne 0x180003929
mov r14d, dword [0x18007b88c]
jmp 0x18000393a
movzx ecx, bx
movzx eax, di
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b88c], ecx
test r8d, r8d
je 0x180003ac5
cmp dword [rdx], 0x5e1c1dfb
je 0x18000395b
inc esi
add rdx, 4
cmp esi, r8d
jb 0x180003943
jmp 0x180006297
test r9d, r9d
jne 0x180006297
mov rcx, qword [rsp + 0x48]
mov r9, r14
mov r8, r15
mov edx, 0x84
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
lea eax, [r13 - 0xa0]
cmp eax, 9
jbe 0x180006205
cmp r13d, 0x200
jne 0x180003acc
mov r8d, dword [0x18007adc0]
mov ebx, 0x8000
add r8d, 0xfffffcb8
je 0x180003a35
mov rdx, qword [0x18007c098]
mov rax, qword [0x18007c090]
mov ecx, esi
sub rdx, rax
sar rdx, 2
test edx, edx
je 0x1800039e2
cmp dword [rax], 0x592629e2
je 0x1800039ea
inc ecx
add rax, 4
cmp ecx, edx
jb 0x1800039d0
cmp dword [0x18007b044], esi
je 0x1800039fb
cmp dword [0x18007b92c], esi
jne 0x1800039fb
test rbx, r15
je 0x1800031d9
movsx eax, r14w
lea rdx, [rbp - 0x68]
mov ecx, r8d
mov dword [rbp - 0x68], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [rbp - 0x64], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [0x18007add0], esi
jne 0x180003a35
movzx ecx, word [rbp - 0x64]
movzx eax, word [rbp - 0x68]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b88c], ecx
test rbx, r15
jne 0x180003ab6
cmp dword [0x18007add4], esi
jne 0x180003ab6
cmp dword [0x18007b044], esi
jne 0x180003aaa
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180003a5a
call rax
jmp 0x180003a60
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180003ab6
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180003ab6
cmp rbx, rdi
je 0x180003ab6
cmp dword [0x18007add0], esi
je 0x1800031d9
mov ecx, 0x200
btr r15, 0xf
call fcn.180002950
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x201
jne 0x180003c45
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180003baa
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x180003b13
test r9d, r9d
je 0x180003b21
test r10d, r10d
jne 0x180003b21
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180003b34
test r9d, r9d
je 0x180003b91
test r10d, r10d
jne 0x180003b91
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x180003b6e
call rax
jmp 0x180003b74
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov r9d, dword [0x18007b044]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180003c2f
mov byte [0x18007bb84], 1
mov byte [0x18007bb80], 1
jmp 0x180003bb1
mov r9d, dword [0x18007b044]
test rbx, r15
jne 0x180003c2f
cmp dword [0x18007add4], esi
jne 0x180003c2f
test r9d, r9d
jne 0x180003c23
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180003bd3
call rax
jmp 0x180003bd9
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180003c2f
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180003c2f
cmp rbx, rdi
je 0x180003c2f
cmp dword [0x18007add0], esi
je 0x1800031d9
mov ecx, 0x201
btr r15, 0xf
call fcn.180002950
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x202
jne 0x180003dcc
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180003d31
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x180003c8c
test r9d, r9d
je 0x180003c9a
test r10d, r10d
jne 0x180003c9a
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180003cad
test r9d, r9d
je 0x180003d0a
test r10d, r10d
jne 0x180003d0a
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x180003ce7
call rax
jmp 0x180003ced
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov r9d, dword [0x18007b044]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180003db6
cmp byte [0x18007bc90], sil
mov byte [0x18007bb84], sil
mov byte [0x18007bb80], 1
sete byte [0x18007bc90]
jmp 0x180003d38
mov r9d, dword [0x18007b044]
test rbx, r15
jne 0x180003db6
cmp dword [0x18007add4], esi
jne 0x180003db6
test r9d, r9d
jne 0x180003daa
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180003d5a
call rax
jmp 0x180003d60
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180003db6
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180003db6
cmp rbx, rdi
je 0x180003db6
cmp dword [0x18007add0], esi
je 0x1800031d9
mov ecx, 0x202
btr r15, 0xf
call fcn.180002950
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x203
jne 0x180003f1b
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180003e8a
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x180003e13
test r9d, r9d
je 0x180003e21
test r10d, r10d
jne 0x180003e21
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180003e34
test r9d, r9d
je 0x180003e91
test r10d, r10d
jne 0x180003e91
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x180003e6e
call rax
jmp 0x180003e74
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
shl r14d, 0x10
or r14, rax
mov r9d, dword [0x18007b044]
test rbx, r15
jne 0x180003f0f
cmp dword [0x18007add4], esi
jne 0x180003f0f
test r9d, r9d
jne 0x180003f03
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180003eb3
call rax
jmp 0x180003eb9
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180003f0f
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180003f0f
cmp rbx, rdi
je 0x180003f0f
cmp dword [0x18007add0], esi
je 0x1800031d9
btr r15, 0xf
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x204
jne 0x180004094
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180003ff9
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x180003f62
test r9d, r9d
je 0x180003f70
test r10d, r10d
jne 0x180003f70
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180003f83
test r9d, r9d
je 0x180003fe0
test r10d, r10d
jne 0x180003fe0
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x180003fbd
call rax
jmp 0x180003fc3
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov r9d, dword [0x18007b044]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x18000407e
mov byte [0x18007bb85], 1
mov byte [0x18007bb81], 1
jmp 0x180004000
mov r9d, dword [0x18007b044]
test rbx, r15
jne 0x18000407e
cmp dword [0x18007add4], esi
jne 0x18000407e
test r9d, r9d
jne 0x180004072
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180004022
call rax
jmp 0x180004028
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x18000407e
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x18000407e
cmp rbx, rdi
je 0x18000407e
cmp dword [0x18007add0], esi
je 0x1800031d9
mov ecx, 0x204
btr r15, 0xf
call fcn.180002950
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x205
jne 0x18000421b
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180004180
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x1800040db
test r9d, r9d
je 0x1800040e9
test r10d, r10d
jne 0x1800040e9
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x1800040fc
test r9d, r9d
je 0x180004159
test r10d, r10d
jne 0x180004159
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x180004136
call rax
jmp 0x18000413c
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov r9d, dword [0x18007b044]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180004205
cmp byte [0x18007bc91], sil
mov byte [0x18007bb85], sil
mov byte [0x18007bb81], 1
sete byte [0x18007bc91]
jmp 0x180004187
mov r9d, dword [0x18007b044]
test rbx, r15
jne 0x180004205
cmp dword [0x18007add4], esi
jne 0x180004205
test r9d, r9d
jne 0x1800041f9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x1800041a9
call rax
jmp 0x1800041af
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180004205
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180004205
cmp rbx, rdi
je 0x180004205
cmp dword [0x18007add0], esi
je 0x1800031d9
mov ecx, 0x205
btr r15, 0xf
call fcn.180002950
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x207
jne 0x1800042fc
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180003e8a
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x180004262
test r9d, r9d
je 0x180004270
test r10d, r10d
jne 0x180004270
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180004283
test r9d, r9d
je 0x1800042e0
test r10d, r10d
jne 0x1800042e0
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x1800042bd
call rax
jmp 0x1800042c3
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov r9d, dword [0x18007b044]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180003f0f
mov byte [0x18007bb86], 1
mov byte [0x18007bb82], 1
jmp 0x180003e91
cmp r13d, 0x208
jne 0x1800043eb
mov r11d, dword [0x18007adc0]
mov ebx, 0x8000
add r11d, 0xfffffcb8
je 0x180003e8a
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
mov r9d, dword [0x18007b044]
test eax, eax
jne 0x180004343
test r9d, r9d
je 0x180004351
test r10d, r10d
jne 0x180004351
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180004364
test r9d, r9d
je 0x1800043c1
test r10d, r10d
jne 0x1800043c1
mov ecx, dword [0x18007b88c]
lea rdx, [rbp + 0x600]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r11d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x18000439e
call rax
jmp 0x1800043a4
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov r9d, dword [0x18007b044]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x180003f0f
cmp byte [0x18007bc92], sil
mov byte [0x18007bb86], sil
mov byte [0x18007bb82], 1
sete byte [0x18007bc92]
jmp 0x180003e91
cmp r13d, 0x20a
jne 0x180004509
mov eax, dword [0x18007adc0]
mov r9d, dword [0x18007b044]
mov ebx, 0x8000
add eax, 0xfffffcb8
je 0x180004475
mov ecx, 0x5e1c1dfb
call fcn.18000b750
mov r10d, dword [0x18007b92c]
test eax, eax
jne 0x18000442b
test r9d, r9d
je 0x180004439
test r10d, r10d
jne 0x180004439
test rbx, r15
je 0x1800031d9
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x18000444c
test r9d, r9d
je 0x180004475
test r10d, r10d
jne 0x180004475
mov ecx, dword [0x18007b88c]
movsx eax, cx
shr ecx, 0x10
mov dword [rbp - 0x68], eax
movsx eax, cx
movzx r14d, ax
mov dword [rbp - 0x64], eax
movzx eax, word [rbp - 0x68]
shl r14d, 0x10
or r14, rax
test rbx, r15
jne 0x1800044f3
cmp dword [0x18007add4], esi
jne 0x1800044f3
test r9d, r9d
jne 0x1800044e7
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180004497
call rax
jmp 0x18000449d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x1800044f3
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800044f3
cmp rbx, rdi
je 0x1800044f3
cmp dword [0x18007add0], esi
je 0x1800031d9
mov ecx, 0x20a
btr r15, 0xf
call fcn.180002950
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x2a3
jne 0x1800045b1
mov r9d, dword [0x18007adc0]
add r9d, 0xfffffcb8
je 0x180003ac5
mov ecx, 0x592629e2
call fcn.18000b750
test eax, eax
jne 0x180004544
cmp dword [0x18007b044], esi
je 0x180003ac5
cmp dword [0x18007b92c], esi
jne 0x180003ac5
mov ecx, dword [0x18007b88c]
mov r13d, 0x2a1
mov r15, rsi
movsx eax, cx
shr ecx, 0x10
lea rdx, [rbp + 0x600]
mov dword [rbp + 0x600], eax
movsx eax, cx
mov ecx, r9d
mov dword [rbp + 0x604], eax
mov rax, qword [0x18007ba80]
test rax, rax
je 0x18000458e
call rax
jmp 0x180004594
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r14d, word [rbp + 0x604]
movzx eax, word [rbp + 0x600]
mov edi, esi
shl r14d, 0x10
or r14, rax
jmp 0x18000629a
cmp r13d, 0x2a2
je 0x180004516
cmp r13d, 0x100
jne 0x180004660
bt r14, 0x1a
jb 0x18000464a
cmp dword [0x18007add4], esi
jne 0x18000464a
cmp dword [0x180076d4c], esi
jne 0x1800031d9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x1800045f6
call rax
jmp 0x1800045fc
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x18000464a
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x18000464a
cmp rbx, rdi
jne 0x1800031d9
mov ecx, pe_nt_image_headers64
btr r14, 0x1a
call fcn.1800028b0
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x101
jne 0x180004702
bt r14, 0x1a
jb 0x1800046ec
cmp dword [0x18007add4], esi
jne 0x1800046ec
cmp dword [0x180076d4c], esi
jne 0x1800031d9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180004698
call rax
jmp 0x18000469e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x1800046ec
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800046ec
cmp rbx, rdi
jne 0x1800031d9
mov ecx, 0x101
btr r14, 0x1a
call fcn.1800028b0
mov edi, esi
jmp 0x18000629a
mov edi, 0x104
mov dword [rbp - 0x70], edi
cmp r13d, edi
jne 0x1800047aa
bt r14, 0x1a
jb 0x180004797
cmp dword [0x18007add4], esi
jne 0x180004797
cmp dword [0x180076d4c], esi
jne 0x1800031d9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x18000473e
call rax
jmp 0x180004744
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180004797
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180004792
cmp rbx, rdi
jne 0x1800031d9
mov edi, 0x104
mov ecx, edi
btr r14, 0x1a
call fcn.1800028b0
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x105
jne 0x18000484c
bt r14, 0x1a
jb 0x180004836
cmp dword [0x18007add4], esi
jne 0x180004836
cmp dword [0x180076d4c], esi
jne 0x1800031d9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x1800047e2
call rax
jmp 0x1800047e8
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180004836
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x180004836
cmp rbx, rdi
jne 0x1800031d9
mov ecx, 0x105
btr r14, 0x1a
call fcn.1800028b0
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x106
jne 0x1800048e4
bt r14, 0x1a
jb 0x1800048d8
cmp dword [0x18007add4], esi
jne 0x1800048d8
cmp dword [0x180076d4c], esi
jne 0x1800031d9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180004884
call rax
jmp 0x18000488a
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rbx, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x1800048d8
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rbx
je 0x1800048d8
cmp rbx, rdi
jne 0x1800031d9
btr r14, 0x1a
mov edi, esi
jmp 0x18000629a
cmp r13d, 0x102
jne 0x1800049c0
lea eax, [r15 - 0x56]
mov ebx, 0x8000
test al, 0xdf
jne 0x180004912
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
jne 0x1800031d9
cmp dword [0x18007b040], esi
je 0x180004999
bt r14, 0x1a
jb 0x180004999
cmp dword [0x18007add4], esi
jne 0x180004999
cmp dword [0x180076d4c], esi
jne 0x1800031d9
mov rax, qword [0x18007bc98]
test rax, rax
je 0x180004945
call rax
jmp 0x18000494b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [rbp - 0x70]
mov rcx, rax
mov rdi, rax
mov dword [rbp - 0x70], esi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rbp - 0x70], eax
je 0x180004999
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
call fcn.180001820
mov edx, 4
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp rax, rdi
je 0x180004999
cmp rdi, rsi
jne 0x1800031d9
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
je 0x1800049b6
movzx ecx, r15b
call fcn.180010700
movsx r15, al
btr r14, 0x1a
jmp 0x180006297
cmp r13d, 0x7e9
jne 0x180004bbb
cmp r15, 0x1234
jne 0x180003ac5
call fcn.180002510
mov rdi, qword [rsp + 0x50]
mov ebx, esi
cmp dword [rdi + 0x1000424], ebx
jbe 0x180004a0c
nop
mov edx, ebx
add rdx, 0x400009
lea rdx, [rdi + rdx*4]
call fcn.180007730
inc ebx
cmp ebx, dword [rdi + 0x1000424]
jb 0x1800049f0
lea rcx, [rdi + 0x1000024]
xor edx, edx
mov r8d, 0x400
call fcn.18002add0
mov rcx, rdi
call fcn.18000e270
test eax, eax
je 0x180004a6a
call fcn.18000df00
test eax, eax
je 0x180004a6a
call fcn.18000a110
test eax, eax
je 0x180004a6a
mov rcx, rdi
call fcn.180012bd0
test eax, eax
je 0x180004a6a
call fcn.18000e140
test eax, eax
je 0x180004a6a
mov rcx, rdi
call fcn.18000fc90
test eax, eax
je 0x180004a6a
mov r12d, 1
mov ebx, r12d
jmp 0x180004a72
mov ebx, esi
mov r12d, 1
mov ecx, 0x3f1c98f9
call fcn.18000b750
test eax, eax
je 0x180004a86
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, 0x6a5a450a
call fcn.18000b750
mov ecx, dword [0x18007b028]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b028], ecx
mov ecx, 0x7d877e7a
call fcn.18000b750
mov ecx, dword [0x18007b850]
movups xmm0, xmmword [rdi + 0x1000480]
test eax, eax
cmovne ecx, r12d
mov dword [0x18007b850], ecx
movaps xmmword [0x18007ad60], xmm0
movups xmm1, xmmword [rdi + 0x1000490]
movaps xmmword [0x18007ad70], xmm1
movups xmm0, xmmword [rdi + 0x10004a0]
movaps xmmword [0x18007ad80], xmm0
movups xmm1, xmmword [rdi + 0x10004b0]
movaps xmmword [0x18007ad90], xmm1
movups xmm0, xmmword [rdi + 0x10004c0]
movaps xmmword [0x18007ada0], xmm0
movups xmm1, xmmword [rdi + 0x10004d0]
movaps xmmword [0x18007adb0], xmm1
movups xmm0, xmmword [rdi + 0x10004e0]
movaps xmmword [0x18007b8a0], xmm0
movups xmm1, xmmword [rdi + 0x10004f0]
movaps xmmword [0x18007b8b0], xmm1
movups xmm0, xmmword [rdi + 0x1000500]
movaps xmmword [0x18007b8c0], xmm0
movups xmm1, xmmword [rdi + 0x1000510]
movaps xmmword [0x18007b8d0], xmm1
movups xmm0, xmmword [rdi + 0x1000520]
movaps xmmword [0x18007b8e0], xmm0
movups xmm1, xmmword [rdi + 0x1000530]
movaps xmmword [0x18007b8f0], xmm1
call fcn.180002700
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x180048624], esi
mov dword [0x18007aed0], eax
test ebx, ebx
je 0x180004b8c
xor ecx, ecx
call fcn.18000ace0
test eax, eax
jne 0x180004b8f
mov r12d, esi
mov eax, 1
lea rcx, [0x180076d50]
xor edx, edx
mov r8d, 0x4000
mov dword [0x180048624], eax
mov edi, eax
call fcn.18002add0
mov dword [0x18007b95c], esi
jmp 0x18000629a
cmp r13d, 0x7ea
jne 0x180004beb
cmp r15, 0x1234
jne 0x180003ac5
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
call fcn.180003040
mov edi, 1
mov r12d, eax
jmp 0x18000629f
cmp r13d, 0x837
jne 0x18000512f
mov ecx, r15d
mov rax, r15
mov edi, esi
and ecx, 0x80
shr rax, 0x10
mov dword [rbp - 0x50], ecx
movzx eax, ax
mov ecx, r15d
and ecx, 0x40
test r15b, 1
mov dword [rbp - 0x4c], eax
cmovne edi, r11d
mov dword [rbp - 0x48], ecx
cmp eax, 2
ja 0x180003ac5
cmp r14d, 0xff
ja 0x180003ac5
movsxd r12, r14d
xor edx, edx
mov ecx, r14d
mov qword [rbp - 0x68], r12
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, r14d
mov ebx, eax
mov dword [rsp + 0x40], eax
shl ebx, 0x10
or rbx, 1
call fcn.180001cb0
test eax, eax
je 0x180004c6a
bts rbx, 0x18
mov eax, dword [rbp - 0x4c]
cmp eax, 1
jne 0x180004ce3
test edi, edi
jne 0x180004c85
cmp r14d, 0x79
je 0x180004c85
mov dword [rbp - 0x70], pe_nt_image_headers64
jmp 0x180004c8a
bts rbx, 0x1d
mov ecx, r14d
call fcn.180010520
cmp eax, 0xff
ja 0x180004cc3
lea rdx, [0x180000000]
movsxd rcx, eax
mov r8d, r14d
mov byte [rcx + rdx + 0x7bca0], 0x80
mov byte [rcx + rdx + 0x7bb90], 1
mov edx, 1
movzx ecx, al
call fcn.180010000
cmp dword [rbp - 0x48], esi
mov rax, qword [0x18007b970]
cmovne rbx, rsi
test rax, rax
je 0x180004d80
xor ecx, ecx
call rax
jmp 0x180004d86
test edi, edi
jne 0x180004cf6
cmp r14d, 0x79
je 0x180004cf6
mov dword [rbp - 0x70], 0x101
jmp 0x180004d02
bts rbx, 0x1d
mov dword [rbp - 0x70], 0x105
mov ecx, 0xc0000000
or rbx, rcx
cmp eax, 2
jne 0x180004cc3
mov ecx, r14d
call fcn.180010520
cmp eax, 0xff
ja 0x180004cc3
movsxd rcx, eax
cmp rcx, 0x100
jae 0x180006326
lea rdi, [0x180000000]
mov byte [rcx + rdi + 0x7bca0], sil
mov byte [rcx + rdi + 0x7bb90], 1
cmp byte [rcx + rdi + 0x7bda0], sil
jne 0x180004d61
mov byte [rcx + rdi + 0x7bda0], 1
mov r8d, r14d
xor edx, edx
jmp 0x180004cbb
cmp rcx, 0x100
jae 0x180006320
mov byte [rcx + rdi + 0x7bda0], sil
mov r8d, r14d
xor edx, edx
jmp 0x180004cbb
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
jne 0x180004da3
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.USER32.dll_SetFocus]
mov r10, qword [rsp + 0x48]
mov rdi, r10
jmp 0x180004da8
mov r10, qword [rsp + 0x48]
mov ecx, 0x797a779e
call fcn.18000b750
test eax, eax
cmove rdi, r10
cmp dword [0x18007b92c], esi
jne 0x180004dd2
cmp rdi, r10
jne 0x180004dd2
cmp dword [0x18007add4], esi
jne 0x180004dd2
bts rbx, 0x1a
mov ecx, 0x18d3d20
call fcn.18000b750
test eax, eax
je 0x18000501e
cmp qword [0x180076d38], rsi
jne 0x180004eec
lea rcx, [rbp + 0x600]
mov dword [rbp + 0x600], 0x72657375
mov dword [rbp + 0x604], 0x642e3233
mov word [rbp + 0x608], 0x6c6c
mov byte [rbp + 0x60a], sil
mov dword [rbp + 0x628], 0x52746547
mov dword [rbp + 0x62c], 0x73696765
mov dword [rbp + 0x630], 0x65726574
mov dword [rbp + 0x634], 0x77615264
mov dword [rbp + 0x638], 0x75706e49
mov dword [rbp + 0x63c], 0x76654474
mov dword [rbp + 0x640], 0x73656369
mov byte [rbp + 0x644], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp + 0x628]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x180004ed7
lea rcx, [rbp + 0x650]
xor edx, edx
mov r8d, 0xa0
mov dword [rbp - 0x4c], 0xa
call fcn.18002add0
lea rdx, [rbp - 0x4c]
lea rcx, [rbp + 0x650]
mov r8d, 0x10
call r12
mov ecx, esi
test eax, eax
je 0x180004ed7
lea rdx, [rbp + 0x652]
cmp word [rdx], 6
je 0x180004fbc
inc ecx
add rdx, 0x10
cmp ecx, eax
jb 0x180004ec3
mov rax, qword [0x180076d38]
test rax, rax
cmove rax, rdi
mov qword [0x180076d38], rax
cmp qword [0x18007b910], rsi
jne 0x180004fd5
lea rcx, [rbp + 0x610]
mov dword [rbp + 0x610], 0x72657375
mov dword [rbp + 0x614], 0x642e3233
mov word [rbp + 0x618], 0x6c6c
mov byte [rbp + 0x61a], sil
mov dword [rsp + 0x60], 0x52746547
mov dword [rsp + 0x64], 0x6e497761
mov dword [rsp + 0x68], 0x44747570
mov dword [rsp + 0x6c], 0x63697665
mov dword [rsp + 0x70], 0x73694c65
mov word [rsp + 0x74], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x180004fd5
lea rcx, [rbp - 0x40]
xor edx, edx
mov r8d, 0x640
mov dword [rbp - 0x48], 0x64
call fcn.18002add0
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x40]
mov r8d, 0x10
call r12
mov edx, esi
test eax, eax
je 0x180004fd5
lea rcx, [rbp - 0x40]
cmp dword [rcx + 8], 1
jne 0x180004fb0
mov r8, qword [rcx]
test r8, r8
jne 0x180004fce
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180004fa2
jmp 0x180004fd5
mov eax, ecx
add rax, rax
mov rax, qword [rbp + rax*8 + 0x658]
jmp 0x180004ede
mov qword [0x18007b910], r8
mov rcx, qword [0x180076d38]
xor r8d, r8d
mov r9d, 0x12345678
mov edx, 0xff
cmp dword [rbp - 0x50], esi
je 0x18000500f
mov eax, dword [0x180076d48]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180005015
call qword [sym.imp.USER32.dll_PostMessageA]
mov r10, qword [rsp + 0x48]
mov r12, qword [rbp - 0x68]
cmp dword [0x18007b030], esi
je 0x180005073
mov edx, dword [0x180076d34]
lea r8, [0x180000000]
xor eax, eax
lea rcx, [rdx + rdx*2]
inc edx
mov qword [r8 + rcx*8 + 0x7ade0], rax
mov qword [r8 + rcx*8 + 0x7ade8], rax
mov qword [r8 + rcx*8 + 0x7adf0], rax
mov eax, dword [rsp + 0x40]
cmp edx, 0xa
mov dword [r8 + rcx*8 + 0x7ade0], r14d
cmovae edx, esi
mov dword [r8 + rcx*8 + 0x7ade4], eax
mov dword [0x180076d34], edx
cmp dword [0x180048618], esi
mov r8, r12
je 0x1800050ce
mov edx, dword [rbp - 0x70]
mov r9, rbx
mov rcx, rdi
cmp dword [rbp - 0x50], esi
je 0x1800050b9
mov eax, dword [0x180076d48]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x18000629a
call qword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x18000629a
mov esi, dword [rbp - 0x70]
btr rbx, 0x1a
mov rcx, r10
mov edx, esi
mov r9, rbx
call qword [0x18007b908]
xor eax, eax
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x68], esi
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
call qword [sym.imp.USER32.dll_TranslateMessage]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x18000629a
cmp r13d, 0x838
jne 0x180005904
mov rax, r15
mov ecx, esi
mov edx, esi
shr rax, 0x10
mov r8d, esi
movsx r9d, r14w
movzx edi, ax
mov eax, r15d
mov dword [rbp - 0x48], r9d
and eax, 0x80
test r15b, 1
mov dword [rbp - 0x50], edi
cmovne ecx, r11d
test r15b, 2
mov dword [rbp - 0x70], eax
cmovne edx, r11d
test r15b, 4
mov rax, r14
cmovne r8d, r11d
shr rax, 0x10
movsx r10d, ax
mov dword [rbp - 0x4c], r10d
cmp edi, 0xa
ja 0x180003ac5
mov dword [rsp + 0x40], esi
mov qword [rbp - 0x68], r14
mov ebx, 0x780000
mov eax, 0xff880000
cmp edi, 1
jne 0x1800051ce
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x1800051b8
or r12, 2
test r8d, r8d
je 0x1800051c1
or r12, 0x10
mov dword [rsp + 0x40], 0x200
jmp 0x1800052d3
cmp edi, 2
jne 0x1800051e3
mov r12, r11
mov dword [rsp + 0x40], 0x201
jmp 0x1800052d3
cmp edi, 8
jne 0x1800051f8
mov r12, r11
mov dword [rsp + 0x40], 0x203
jmp 0x1800052d3
cmp edi, 3
jne 0x18000520a
mov dword [rsp + 0x40], 0x202
jmp 0x1800052d3
cmp edi, 4
jne 0x180005220
lea r12d, [rdi - 2]
mov dword [rsp + 0x40], 0x204
jmp 0x1800052d3
cmp edi, 5
jne 0x180005232
mov dword [rsp + 0x40], 0x205
jmp 0x1800052d3
cmp edi, 6
jne 0x180005245
mov eax, 0x207
lea r12d, [rdi + 0xa]
jmp 0x1800052cf
cmp edi, 7
jne 0x180005251
mov eax, 0x208
jmp 0x1800052cf
cmp edi, 9
jne 0x180005276
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180005264
or r12, 2
test r8d, r8d
je 0x18000526d
or r12, 0x10
movzx r12d, r12w
or r12, rbx
jmp 0x180005299
cmp edi, 0xa
jne 0x1800052d3
test ecx, ecx
cmovne r12, r11
test edx, edx
je 0x180005289
or r12, 2
test r8d, r8d
je 0x180005292
or r12, 0x10
movzx r12d, r12w
or r12, rax
mov rcx, qword [rsp + 0x48]
lea rdx, [rbp - 0x68]
mov dword [rbp - 0x68], r9d
mov dword [rbp - 0x64], r10d
call qword [sym.imp.USER32.dll_ClientToScreen]
movzx r9d, word [rbp - 0x64]
movzx eax, word [rbp - 0x68]
shl r9d, 0x10
mov r11d, 1
or r9, rax
mov eax, 0x20a
mov qword [rbp - 0x68], r9
mov dword [rsp + 0x40], eax
cmp dword [0x18007b92c], esi
jne 0x1800052eb
cmp dword [0x18007add4], esi
jne 0x1800052eb
mov ebx, 0x8000
or r12, rbx
cmp edi, 1
jne 0x18000539e
mov rcx, qword [rsp + 0x48]
movsx ebx, word [0x18007b88c]
movsx edi, word [0x18007b88e]
lea rdx, [rbp + 0x600]
mov qword [rbp + 0x600], rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov r9d, dword [rbp - 0x4c]
mov r8d, dword [rbp - 0x48]
movzx eax, r9w
add ax, word [rbp + 0x604]
movzx edx, ax
movzx eax, r8w
add ax, word [rbp + 0x600]
shl edx, 0x10
movzx ecx, ax
or edx, ecx
mov dword [0x18007b88c], edx
mov edx, dword [rbp + 0x600]
sub edx, ebx
mov ebx, dword [rbp + 0x604]
sub ebx, edi
add ebx, r9d
add edx, r8d
je 0x18000536f
mov cl, 0x37
mov dword [0x18007bc94], edx
call fcn.180010290
test ebx, ebx
je 0x180005382
mov edx, ebx
mov cl, 0x38
mov dword [0x18007bef4], ebx
call fcn.180010290
mov edi, dword [rbp - 0x50]
mov rax, qword [0x18007b970]
test rax, rax
je 0x1800054d8
xor ecx, ecx
call rax
jmp 0x1800054de
cmp edi, 2
je 0x1800054bb
cmp edi, 8
je 0x1800054bb
cmp edi, 3
jne 0x1800053dc
cmp byte [0x18007bc90], sil
mov byte [0x18007bb84], sil
mov byte [0x18007bb80], 1
sete byte [0x18007bc90]
xor edx, edx
xor ecx, ecx
call fcn.180010290
jmp 0x180005385
cmp edi, 4
jne 0x1800053fb
mov edx, r11d
mov cl, 1
mov byte [0x18007bb85], 1
mov byte [0x18007bb81], 1
call fcn.180010290
jmp 0x180005385
cmp edi, 5
jne 0x18000542a
cmp byte [0x18007bc91], sil
mov cl, 1
mov byte [0x18007bb85], sil
sete byte [0x18007bc91]
xor edx, edx
mov byte [0x18007bb81], 1
call fcn.180010290
jmp 0x180005385
cmp edi, 6
jne 0x18000544c
mov edx, r11d
mov cl, 2
mov byte [0x18007bb86], 1
mov byte [0x18007bb82], 1
call fcn.180010290
jmp 0x180005385
cmp edi, 7
jne 0x18000547b
cmp byte [0x18007bc92], sil
mov cl, 2
mov byte [0x18007bb86], sil
sete byte [0x18007bc92]
xor edx, edx
mov byte [0x18007bb82], 1
call fcn.180010290
jmp 0x180005385
cmp edi, 0xa
jne 0x180005499
mov edx, r11d
mov cl, 4
call fcn.180010290
mov dword [0x18007bf20], 0xffffff88
jmp 0x180005385
cmp edi, 9
jne 0x180005385
mov edx, r11d
mov cl, 5
call fcn.180010290
mov dword [0x18007bf20], 0x78
jmp 0x180005385
mov edx, r11d
xor ecx, ecx
mov byte [0x18007bb84], 1
mov byte [0x18007bb80], 1
call fcn.180010290
jmp 0x180005385
call qword [sym.imp.USER32.dll_GetFocus]
mov rbx, rax
test rax, rax
jne 0x1800054f4
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetFocus]
mov ecx, 0x797a779e
call fcn.18000b750
mov rcx, qword [rsp + 0x48]
mov r9d, dword [0x18007b88c]
test eax, eax
mov edx, 0x84
cmove rbx, rcx
xor r8d, r8d
cmp dword [rbp - 0x70], esi
je 0x18000553d
mov eax, dword [0x18007b930]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180005543
call qword [sym.imp.USER32.dll_SendMessageA]
cmp edi, 1
jne 0x180005584
mov r8, qword [rsp + 0x48]
mov r9d, 0x2000001
lea edx, [rdi + 0x1f]
mov rcx, r8
cmp dword [rbp - 0x70], esi
je 0x18000557e
mov eax, dword [0x18007b930]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180005584
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x326cd5b9
call fcn.18000b750
test eax, eax
je 0x180005823
cmp qword [0x18007b868], rsi
jne 0x1800056a9
lea rcx, [rbp + 0x610]
mov dword [rbp + 0x610], 0x72657375
mov dword [rbp + 0x614], 0x642e3233
mov word [rbp + 0x618], 0x6c6c
mov byte [rbp + 0x61a], sil
mov dword [rbp + 0x628], 0x52746547
mov dword [rbp + 0x62c], 0x73696765
mov dword [rbp + 0x630], 0x65726574
mov dword [rbp + 0x634], 0x77615264
mov dword [rbp + 0x638], 0x75706e49
mov dword [rbp + 0x63c], 0x76654474
mov dword [rbp + 0x640], 0x73656369
mov byte [rbp + 0x644], sil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp + 0x628]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x600], rax
test rax, rax
je 0x180005694
lea rcx, [rbp + 0x650]
xor edx, edx
mov r8d, 0xa0
mov dword [rbp - 0x50], 0xa
call fcn.18002add0
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x650]
mov r8d, 0x10
call qword [rbp + 0x600]
mov edx, esi
test eax, eax
je 0x180005694
lea rcx, [rbp + 0x652]
nop dword [rax]
cmp word [rcx], 2
je 0x18000576e
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180005680
mov rax, qword [0x18007b868]
test rax, rax
cmove rax, rbx
mov qword [0x18007b868], rax
cmp qword [0x18007b020], rsi
jne 0x180005787
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x60], 0x72657375
mov dword [rbp - 0x5c], 0x642e3233
mov word [rbp - 0x58], 0x6c6c
mov byte [rbp - 0x56], sil
mov dword [rsp + 0x60], 0x52746547
mov dword [rsp + 0x64], 0x6e497761
mov dword [rsp + 0x68], 0x44747570
mov dword [rsp + 0x6c], 0x63697665
mov dword [rsp + 0x70], 0x73694c65
mov word [rsp + 0x74], 0x74
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x180005787
lea rcx, [rbp - 0x40]
xor edx, edx
mov r8d, 0x640
mov dword [rbp + 0x600], 0x64
call fcn.18002add0
lea rdx, [rbp + 0x600]
lea rcx, [rbp - 0x40]
mov r8d, 0x10
call rbx
mov edx, esi
test eax, eax
je 0x180005787
lea rcx, [rbp - 0x40]
cmp dword [rcx + 8], esi
jne 0x180005762
mov r8, qword [rcx]
test r8, r8
jne 0x180005780
inc edx
add rcx, 0x10
cmp edx, eax
jb 0x180005755
jmp 0x180005787
mov eax, edx
add rax, rax
mov rax, qword [rbp + rax*8 + 0x658]
jmp 0x18000569b
mov qword [0x18007b020], r8
mov ebx, dword [rbp - 0x70]
mov rcx, qword [0x18007b868]
xor r8d, r8d
mov r9d, 0x12345679
mov edx, 0xff
test ebx, ebx
je 0x1800057fb
mov eax, dword [0x18007b930]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
cmp edi, 1
jne 0x180005826
mov eax, dword [0x18007b930]
mov rcx, qword [0x18007b868]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], eax
mov eax, 1
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x180005826
call qword [sym.imp.USER32.dll_PostMessageA]
cmp edi, 1
jne 0x180005826
mov rcx, qword [0x18007b868]
mov r9d, 0x12345679
xor r8d, r8d
mov edx, 0xff
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180005826
mov ebx, dword [rbp - 0x70]
cmp dword [0x18007ad50], esi
mov ecx, dword [rsp + 0x40]
je 0x1800058be
lea eax, [rcx - 0x203]
test eax, 0xfffffffa
jne 0x18000584b
cmp ecx, 0x204
jne 0x1800058be
mov edx, dword [0x18007b854]
lea rax, [0x18007aee0]
shl rdx, 5
add rdx, rax
xor eax, eax
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov eax, dword [rbp - 0x48]
mov dword [rdx], eax
mov eax, dword [rbp - 0x4c]
mov dword [rdx + 4], eax
cmp ecx, 0x20a
jne 0x180005896
cmp edi, 9
mov eax, 0xff880000
mov ecx, 0x780000
cmove eax, ecx
mov dword [rdx + 8], eax
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x18007b854]
mov ecx, dword [rsp + 0x40]
inc eax
cmp eax, 0xa
cmovae eax, esi
mov dword [0x18007b854], eax
jmp 0x1800058c3
mov rdi, qword [rsp + 0x48]
cmp dword [0x180048610], esi
mov r9, qword [rbp - 0x68]
mov edx, ecx
mov rcx, rdi
mov r8, r12
je 0x1800058ea
test ebx, ebx
je 0x1800050b9
mov eax, dword [0x18007b930]
jmp 0x180005092
btr r9, 0x1a
call qword [0x18007b908]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x18000629a
cmp r13d, 0x83a
jne 0x18000592c
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x180048614], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x83d
jne 0x180005965
cmp r15, 0x1234
jne 0x180003ac5
movsx eax, r14w
mov r12d, r11d
mov edi, r11d
mov dword [0x18007bc94], eax
mov rax, r14
shr rax, 0x10
cwde
mov dword [0x18007bef4], eax
jmp 0x18000629a
cmp r13d, 0x83f
jne 0x18000598d
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x18007b928], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x863
jne 0x1800059c6
cmp r15, 0x1234
jne 0x180003ac5
xorps xmm0, xmm0
mov r12d, r11d
mov edi, r11d
cvtsi2sd xmm0, r14
divsd xmm0, qword [0x180041660]
movsd qword [0x180048628], xmm0
jmp 0x18000629a
cmp r13d, 0x842
jne 0x180005a31
cmp r15, 0x1234
jne 0x180003ac5
mov ecx, 0x16cc25d5
call fcn.18000b750
test eax, eax
je 0x180005a27
call fcn.180010b10
mov rcx, rax
mov rdi, rax
call fcn.180001b70
mov edx, r14d
mov rcx, rax
mov rbx, rax
call fcn.180001870
mov r12d, eax
test rdi, rdi
je 0x180005a19
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
test rbx, rbx
je 0x180005a27
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov edi, 1
jmp 0x18000629a
cmp r13d, 0x843
jne 0x180005ad2
cmp r15, 0x1234
jne 0x180003ac5
mov ecx, 0x16cc25d5
call fcn.18000b750
test eax, eax
je 0x180005ac4
call fcn.180010b10
mov ebx, 0xffff
mov rdi, rax
mov esi, ebx
test rax, rax
je 0x180005aac
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetIconInfo]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x180005a8b
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x180005a9b
call qword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [rsp + 0x64]
mov esi, dword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyCursor]
movzx r12d, si
movzx eax, bx
mov edi, 1
shl r12d, 0x10
or r12d, eax
jmp 0x18000629a
or r12d, 0xffffffff
lea edi, [r12 + 2]
jmp 0x18000629a
cmp r13d, 0x844
jne 0x180005b1e
cmp r15, 0x1234
jne 0x180005b10
movsxd rax, dword [0x18007b95c]
cmp eax, 0x1000
jge 0x180005b10
lea rcx, [0x180076d50]
lea r12d, [rax + 1]
mov edi, r11d
mov dword [rcx + rax*4], r11d
mov dword [0x18007b95c], r12d
jmp 0x18000629a
mov r12d, 0x1388
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x845
jne 0x180005b5b
cmp r15, 0x1234
jne 0x180003ac5
lea rax, [r14 - 1]
cmp rax, 0xfff
ja 0x18000356b
lea rcx, [0x180076d50]
mov r12d, r11d
mov edi, r11d
mov dword [rcx + r14*4 - 4], esi
jmp 0x18000629a
cmp r13d, 0x846
jne 0x180005c53
cmp r15, 0x1234
jne 0x180003ac5
test r14, r14
jne 0x180005b97
mov dword [0x180076d4c], esi
mov dword [0x18007b040], esi
mov dword [0x18007b044], esi
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r14, 1
jne 0x180005bbc
mov dword [0x18007b044], r11d
mov dword [0x180076d4c], r11d
mov dword [0x18007b040], esi
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r14, 2
jne 0x180005be0
mov dword [0x18007b044], r11d
mov dword [0x180076d4c], esi
mov dword [0x18007b040], esi
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r14, 3
jne 0x180005c04
mov dword [0x18007b040], esi
mov dword [0x180076d4c], r11d
mov dword [0x18007b044], esi
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r14, 4
jne 0x180005c2a
mov dword [0x18007b044], r11d
mov dword [0x180076d4c], r11d
mov dword [0x18007b040], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r14, 5
jne 0x18000356b
mov dword [0x18007b040], r11d
mov dword [0x180076d4c], r11d
mov dword [0x18007b044], esi
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x850
jne 0x180005c7b
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x18007b950], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x851
jne 0x180005ca0
cmp r15, 0x1234
jne 0x180003ac5
mov r12d, dword [0x18007b88c]
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x852
jne 0x180005cc8
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x180048618], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x853
jne 0x180005cf0
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x180048610], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x84d
jne 0x180005d18
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x18007add4], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x84f
jne 0x180005fbc
cmp r15, 0x1234
jne 0x180003ac5
lea rcx, [rbp + 0x600]
mov dword [rbp + 0x600], 0x336d6d69
mov dword [rbp + 0x604], 0x6c642e32
mov word [rbp + 0x608], 0x6c
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test r14, r14
je 0x180005e7f
test rax, rax
je 0x180003500
lea rdx, [rbp - 0x60]
mov rcx, rax
mov dword [rbp - 0x60], 0x476d6d49
mov dword [rbp - 0x5c], 0x6f437465
mov dword [rbp - 0x58], 0x7865746e
mov word [rbp - 0x54], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x610]
mov rcx, rsi
mov dword [rbp + 0x610], 0x476d6d49
mov dword [rbp + 0x614], 0x704f7465
mov dword [rbp + 0x618], 0x74536e65
mov rdi, rax
mov dword [rbp + 0x61c], 0x73757461
mov byte [rbp + 0x620], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x628]
mov rcx, rsi
mov dword [rbp + 0x628], 0x536d6d49
mov dword [rbp + 0x62c], 0x704f7465
mov dword [rbp + 0x630], 0x74536e65
mov rbx, rax
mov dword [rbp + 0x634], 0x73757461
mov byte [rbp + 0x638], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x60]
mov rcx, rsi
mov dword [rsp + 0x60], 0x526d6d49
mov dword [rsp + 0x64], 0x61656c65
mov dword [rsp + 0x68], 0x6f436573
mov r12, rax
mov dword [rsp + 0x6c], 0x7865746e
mov word [rsp + 0x70], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
mov qword [rbp - 0x68], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
jne 0x180005f92
lea edx, [rax + 1]
jmp 0x180005f8c
test rax, rax
je 0x180003500
lea rdx, [rbp - 0x60]
mov rcx, rax
mov dword [rbp - 0x60], 0x476d6d49
mov dword [rbp - 0x5c], 0x6f437465
mov dword [rbp - 0x58], 0x7865746e
mov word [rbp - 0x54], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x628]
mov rcx, rsi
mov dword [rbp + 0x628], 0x476d6d49
mov dword [rbp + 0x62c], 0x704f7465
mov dword [rbp + 0x630], 0x74536e65
mov rdi, rax
mov dword [rbp + 0x634], 0x73757461
mov byte [rbp + 0x638], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x610]
mov rcx, rsi
mov dword [rbp + 0x610], 0x536d6d49
mov dword [rbp + 0x614], 0x704f7465
mov dword [rbp + 0x618], 0x74536e65
mov rbx, rax
mov dword [rbp + 0x61c], 0x73757461
mov byte [rbp + 0x620], r12b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x60]
mov rcx, rsi
mov dword [rsp + 0x60], 0x526d6d49
mov dword [rsp + 0x64], 0x61656c65
mov dword [rsp + 0x68], 0x6f436573
mov r12, rax
mov dword [rsp + 0x6c], 0x7865746e
mov word [rsp + 0x70], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x18007adc0]
add ecx, 0xfffffcb8
mov qword [rbp - 0x68], rax
call rdi
mov rcx, rax
mov rdi, rax
call rbx
test eax, eax
je 0x180005f92
xor edx, edx
mov rcx, rdi
call r12
mov ecx, dword [0x18007adc0]
mov rdx, rdi
add ecx, 0xfffffcb8
call qword [rbp - 0x68]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov r12d, eax
mov edi, eax
jmp 0x18000629a
cmp r13d, 0x847
jne 0x180005fe4
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x18007add0], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x848
jne 0x18000600c
cmp r15, 0x1234
jne 0x180003ac5
mov dword [0x18007b870], r14d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x840
jne 0x18000602d
cmp r15, 0x1234
jne 0x180003ac5
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x841
jne 0x18000604e
cmp r15, 0x1234
jne 0x180003ac5
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x849
jne 0x180006088
mov eax, dword [0x180076d48]
test r15, r15
mov r12d, r11d
cmovne eax, r15d
test r14, r14
mov edi, r11d
mov dword [0x180076d48], eax
mov eax, dword [0x18007b930]
cmovne eax, r14d
mov dword [0x18007b930], eax
jmp 0x18000629a
cmp r13d, 0x84a
jne 0x180006175
cmp r15, 0x1234
jne 0x180003ac5
test r14, r14
je 0x180006164
lea rcx, [rbp + 0x651]
xor edx, edx
mov r8d, 0xff
mov byte [0x18007b050], sil
mov byte [rbp + 0x650], sil
call fcn.18002add0
mov r8d, dword [rbp + 0x600]
lea rdx, [0x18007d150]
lea rcx, [rbp + 0x650]
call fcn.180007960
lea rcx, [rbp + 0x752]
xor edx, edx
mov r8d, 0x1fe
mov word [rbp + 0x750], si
call fcn.18002add0
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0x650]
call fcn.180007080
mov rdi, rax
test rax, rax
je 0x18000614c
mov rcx, rax
call fcn.180006f90
lea edx, [r13 - 0x4a]
lea rcx, [0x18007b050]
mov r8, rax
mov rbx, rax
call fcn.180025958
mov rcx, rbx
call fcn.180007010
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, 1
mov dword [0x180076d30], r11d
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
mov dword [0x180076d30], esi
mov r12d, r11d
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x84b
jne 0x1800061a3
cmp r15, 0x1234
jne 0x180003ac5
test r14, r14
mov r12d, r11d
mov edi, r11d
setne sil
mov dword [0x180048624], esi
jmp 0x18000629a
cmp r13d, 0x854
jne 0x1800061c8
cmp r15, 0x1234
jne 0x180003ac5
mov r12d, dword [0x18007b880]
mov edi, r11d
jmp 0x18000629a
cmp r13d, 0x84c
jne 0x180003ac5
cmp r15, 0x1234
jne 0x180003ac5
mov ecx, r11d
mov dword [0x180048624], esi
call fcn.18000ace0
mov eax, 1
mov dword [0x180048624], eax
mov r12d, eax
mov edi, eax
jmp 0x18000629a
mov eax, dword [0x18007adc0]
add eax, 0xfffffcb8
je 0x180003ac5
mov rcx, qword [0x18007c098]
mov rax, qword [0x18007c090]
sub rcx, rax
sar rcx, 2
test ecx, ecx
je 0x180006242
nop
cmp dword [rax], 0x592629e2
je 0x18000624b
inc esi
add rax, 4
cmp esi, ecx
jb 0x180006230
cmp dword [0x18007b044], r12d
je 0x18000626b
cmp dword [0x18007b92c], r12d
jne 0x18000626b
mov r9, r14
mov r8, r15
mov edx, r13d
mov rcx, rdi
call qword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x1800031db
movsx eax, r14w
mov dword [rbp - 0x68], eax
mov eax, r14d
shr eax, 0x10
cmp dword [0x18007add0], r12d
cwde
mov dword [rbp - 0x64], eax
jne 0x180006297
movzx ecx, ax
movzx eax, word [rbp - 0x68]
shl ecx, 0x10
or ecx, eax
mov dword [0x18007b88c], ecx
mov edi, r12d
mov rsi, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x1800062f0
mov rdx, rax
call fcn.1800069c0
mov ebx, eax
test eax, eax
jns 0x1800062e5
cmp eax, 0xc0000045
jne 0x1800062de
mov rcx, qword [rsp + 0x50]
xor edx, edx
call fcn.180006d70
test al, al
je 0x1800062de
mov rdx, qword [rsp + 0x50]
call fcn.1800069c0
mov ebx, eax
test eax, eax
jns 0x1800062e5
mov ecx, ebx
call fcn.180006cd0
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 1
jne 0x1800062fd
movsxd rax, r12d
jmp 0x1800031db
mov rax, qword [0x18007b908]
test rax, rax
je 0x1800031d9
mov r9, r14
mov r8, r15
mov edx, r13d
mov rcx, rsi
call rax
jmp 0x1800031db
call fcn.180026218
int3
call fcn.180026218
int3