Function at 0x140001800
Capabilities:
Check for foreground window switch
Check for time delay via gettickcount
Get graphical window text
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x10], edx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1228]
mov eax, 0x1328
call fcn.1400e19f0
sub rsp, rax
mov r15d, edx
mov edi, ecx
mov byte [rsp + 0x51], 0
mov r12d, 1
cmp edx, 2
jne 0x14000185d
mov r15d, r12d
mov dword [rbp + 0x1278], r12d
cmp byte [0x14012fe75], 0
jne 0x14000185d
mov byte [0x14012fe75], r12b
mov byte [rsp + 0x51], r12b
xor eax, eax
cmp ecx, 0x8000012f
jne 0x140001885
mov edi, 0xa
mov dword [rbp + 0x1270], edi
movzx r14d, r12b
mov byte [rbp + 0x1288], r12b
mov ebx, edi
mov dword [rsp + 0x44], ebx
jmp 0x1400018a1
cmp ecx, 5
setle r14b
mov byte [rbp + 0x1288], r14b
mov ebx, ecx
mov dword [rsp + 0x44], ecx
jle 0x1400018a1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x48], eax
cmp dword [0x14013032c], 0
je 0x1400018b2
call fcn.140004210
xor sil, sil
mov dword [rsp + 0x70], esi
cmp dword [0x1401320ec], 0
je 0x1400018d5
call fcn.140003ef0
movzx esi, sil
test al, al
cmovne esi, r12d
mov dword [rsp + 0x70], esi
test edi, edi
jle 0x140001919
cmp r15d, r12d
jne 0x140001919
mov byte [rsp + 0x52], r12b
inc dword [0x14012fed0]
cmp byte [0x14012fe74], 0
jne 0x14000191e
xor r9d, r9d
mov edx, 9
mov r8d, 0xa
mov rcx, qword [0x14012fec8]
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
setne byte [0x14012fe74]
jmp 0x14000191e
mov byte [rsp + 0x52], 0
xor r15b, r15b
mov byte [rsp + 0x40], r15b
xor al, al
mov byte [rbp + 0x1280], al
xor r10d, r10d
mov esi, r10d
mov dword [rsp + 0x4c], r10d
movzx ecx, byte [rbp + 0x1270]
mov qword [rbp - 0x18], rcx
mov r12, qword [rbp + 0x1280]
mov r13, qword [rbp + 0x1280]
jmp 0x14000195a
movzx r15d, byte [rsp + 0x40]
test ebx, ebx
jle 0x140001ade
test al, al
jne 0x140001ade
cmp byte [0x14012fe75], al
jne 0x140001aeb
cmp dword [0x140129390], 0
je 0x1400019ec
cmp byte [0x14012fe66], al
jne 0x1400019ec
cmp dword [0x14012fea0], 0
jne 0x140001997
mov eax, 1
jmp 0x1400019ef
mov rcx, qword [0x140129398]
cmp byte [rcx + 0x7a], 0
jne 0x1400019df
cmp dword [rcx + 0x70], 0xffffffff
jle 0x1400019df
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x140129398]
sub eax, dword [rcx + 0x74]
xor r10d, r10d
cmp eax, dword [rcx + 0x70]
jb 0x1400019df
cmp dword [rcx + 0x6c], r10d
je 0x1400019df
mov byte [rcx + 0x7a], 1
cmp byte [rcx + 0xc2], r10b
jne 0x1400019df
mov dword [rcx + 0x88], 5
mov rax, qword [0x140129398]
movzx eax, byte [rax + 0x7a]
jmp 0x1400019ef
mov eax, r10d
mov r9d, 0x311
test eax, eax
cmovne r9d, r10d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x140003d00
inc esi
mov dword [rsp + 0x4c], esi
mov r8d, dword [0x1401319b8]
test r8d, r8d
je 0x140001df4
mov rdi, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x78]
mov ebx, dword [rbp - 0x80]
mov r14, qword [rsp + 0x78]
xor r15b, r15b
lea rax, [0x1401319a8]
mov qword [rbp + 0x60], rax
mov rax, qword [0x1401319b0]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0x74], r8d
mov byte [rbp + 0x78], r15b
lea rax, [rbp + 0x60]
mov qword [0x1401319b0], rax
xor eax, eax
mov edx, eax
mov dword [rbp + 0x70], eax
test r8d, r8d
jle 0x140001ddf
nop word [rax + rax]
movsxd rcx, edx
add rcx, rcx
mov rax, qword [0x1401319a8]
cmp dword [rax + rcx*8 + 8], ebx
jne 0x140001acf
lea rax, [rbp + 0x118]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov r8d, ebx
mov rdx, r14
lea rcx, [rbp + 0x60]
call fcn.140004430
test al, al
jne 0x140001ddc
mov r8d, dword [rbp + 0x74]
mov edx, dword [rbp + 0x70]
inc edx
mov dword [rbp + 0x70], edx
cmp edx, r8d
jl 0x140001a80
jmp 0x140001ddf
cmp byte [0x14012fe75], 0
je 0x140001c9d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x140001c9a
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x1401319a0]
jne 0x140001c9a
cmp dword [0x14012fec0], 0
je 0x140001b32
mov edx, 0xffffffe0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetClassLongW]
cmp eax, 0x8002
je 0x140001b89
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x140001c9a
mov r8d, SafeArrayAllocDescriptor
lea rdx, [rbp + 0x120]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.SysTreeView32
lea rcx, [rbp + 0x120]
call fcn.1400c8244
test eax, eax
je 0x140001b89
lea rdx, str.SysListView32
lea rcx, [rbp + 0x120]
call fcn.1400c8244
test eax, eax
jne 0x140001c9a
cmp dword [0x140129390], 0
je 0x140001bf6
cmp byte [0x14012fe66], 0
jne 0x140001bf6
cmp dword [0x14012fea0], 0
jne 0x140001bab
mov eax, 1
jmp 0x140001bf8
mov rcx, qword [0x140129398]
cmp byte [rcx + 0x7a], 0
jne 0x140001bf0
cmp dword [rcx + 0x70], 0xffffffff
jle 0x140001bf0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x140129398]
sub eax, dword [rcx + 0x74]
cmp eax, dword [rcx + 0x70]
jb 0x140001bf0
cmp dword [rcx + 0x6c], 0
je 0x140001bf0
mov byte [rcx + 0x7a], 1
cmp byte [rcx + 0xc2], 0
jne 0x140001bf0
mov dword [rcx + 0x88], 5
movzx eax, byte [rcx + 0x7a]
jmp 0x140001bf8
xor eax, eax
mov ebx, 0x311
test eax, eax
mov eax, 0xffffffff
cmovne ebx, eax
xor eax, eax
mov dword [rsp + 0x20], eax
mov r9d, 0x1ff
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_PeekMessageW]
mov r9d, ebx
xor edx, edx
mov r8d, 0x20f
lea rcx, [rsp + 0x78]
test eax, eax
je 0x140001d2f
mov edi, dword [rbp - 0x68]
xor eax, eax
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_PeekMessageW]
mov dword [rsp + 0x20], 1
xor edx, edx
lea rcx, [rsp + 0x78]
test eax, eax
jne 0x140001c77
mov r9d, 0x1ff
xor r8d, r8d
call qword [sym.imp.USER32.dll_PeekMessageW]
mov edi, dword [rbp + 0x1270]
jmp 0x140001d3d
mov eax, dword [rbp - 0x68]
sub eax, edi
test eax, eax
jg 0x140001c5d
mov r9d, ebx
mov r8d, 0x20f
call qword [sym.imp.USER32.dll_PeekMessageW]
mov edi, dword [rbp + 0x1270]
jmp 0x140001d3d
xor r10d, r10d
cmp dword [0x140129390], 0
je 0x140001d11
cmp byte [0x14012fe66], 0
jne 0x140001d11
cmp dword [0x14012fea0], 0
jne 0x140001cbf
mov eax, 1
jmp 0x140001d14
mov rcx, qword [0x140129398]
cmp byte [rcx + 0x7a], 0
jne 0x140001d04
cmp dword [rcx + 0x70], 0xffffffff
jle 0x140001d04
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x140129398]
sub eax, dword [rcx + 0x74]
cmp eax, dword [rcx + 0x70]
jb 0x140001d04
cmp dword [rcx + 0x6c], 0
je 0x140001d04
mov byte [rcx + 0x7a], 1
cmp byte [rcx + 0xc2], 0
jne 0x140001d04
mov dword [rcx + 0x88], 5
mov rax, qword [0x140129398]
movzx eax, byte [rax + 0x7a]
jmp 0x140001d14
mov eax, r10d
mov r9d, 0x311
test eax, eax
mov eax, 0
cmovne r9d, eax
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140001a14
mov ebx, dword [rsp + 0x44]
test ebx, ebx
jne 0x140001d71
test r15b, r15b
jne 0x140001d71
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r15b, 1
mov byte [rsp + 0x40], r15b
movzx eax, byte [rbp + 0x1280]
xor r10d, r10d
jmp 0x14000195a
test esi, esi
jne 0x140001da3
test r14b, r14b
je 0x140001da3
test ebx, ebx
jle 0x140001d89
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
mov esi, eax
mov dword [rsp + 0x4c], eax
movzx eax, byte [rbp + 0x1280]
xor r10d, r10d
jmp 0x14000195a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
test r14b, r14b
jne 0x140003d1b
mov ecx, dword [rbp - 0x48]
sub ecx, eax
add ecx, edi
cmp ecx, 5
jle 0x140003d1b
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, byte [rbp + 0x1280]
xor r10d, r10d
jmp 0x14000195a
mov r15b, 1
mov rcx, qword [rbp + 0x60]
mov rax, qword [rbp + 0x68]
mov qword [rcx + 8], rax
test r15b, r15b
jne 0x140003cf6
mov edx, dword [rbp - 0x80]
cmp qword [0x14012fed8], 0
je 0x14000234c
lea eax, [rdx - 0x100]
cmp eax, 9
jbe 0x140001e1f
lea eax, [rdx - 0x200]
cmp eax, 0xe
ja 0x14000234c
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x140001e85
nop dword [rax]
mov edx, 0xffffffe0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetClassLongW]
cmp ax, word [0x1401324d8]
jne 0x140001e5d
mov edx, 0xffffffeb
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rdi, rax
test rax, rax
jne 0x140001e96
mov edx, 0xfffffff0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0x1e
jae 0x140001e82
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rbx, rax
test rax, rax
jne 0x140001e30
mov edx, dword [rbp - 0x80]
xor r10d, r10d
mov qword [rsp + 0x58], r10
mov rbx, qword [rbp - 0x78]
jmp 0x140002353
mov r14, qword [rsp + 0x78]
mov rdx, qword [rax + 0x88]
test rdx, rdx
je 0x140001ec3
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x78]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x140003cf6
mov rsi, rdi
mov qword [rsp + 0x58], rdi
mov edx, dword [rbp - 0x80]
mov rbx, qword [rbp - 0x78]
cmp edx, 0x100
jne 0x140001fee
mov qword [rsp + 0x58], rdi
cmp byte [rdi + 0x118], 0
je 0x140001f72
cmp rbx, 0x25
ja 0x140001f06
movabs rax, 0x2600000200
bt rax, rbx
jb 0x140001f11
mov qword [rsp + 0x58], rdi
cmp rbx, 0x27
jne 0x140001f72
mov rbx, r14
mov rsi, rdi
mov qword [rsp + 0x58], rdi
nop dword [rax]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
sub eax, 3
cmp eax, dword [rdi + 0xb8]
jae 0x140001f46
mov rdx, qword [rdi + 0x60]
mov r8, qword [rdx + rax*8]
cmp qword [r8 + 0x38], rbx
je 0x140002027
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rbx, rax
test rax, rax
je 0x140001f5d
cmp rax, qword [rdi + 0x40]
jne 0x140001f20
xor eax, eax
mov qword [rbp - 0x30], rax
mov rbx, qword [rbp - 0x78]
mov edx, dword [rbp - 0x80]
cmp edx, 0x100
jne 0x140001fee
cmp rbx, 0x1b
je 0x140001fa4
cmp rbx, 9
je 0x140001fa4
cmp rbx, 0x41
jne 0x140001fee
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140001fe7
mov ecx, 0xa5
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140001fe7
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
sub eax, 3
cmp eax, dword [rsi + 0xb8]
jae 0x140001fca
mov rdx, qword [rsi + 0x60]
mov r8, qword [rdx + rax*8]
cmp qword [r8 + 0x38], r14
je 0x1400021de
mov rcx, r14
call qword [sym.imp.USER32.dll_GetParent]
mov r14, rax
test rax, rax
je 0x140001fe1
cmp rax, qword [rsi + 0x40]
jne 0x140001fa4
xor eax, eax
mov qword [rbp - 0x30], rax
mov rbx, qword [rbp - 0x78]
mov edx, dword [rbp - 0x80]
mov rcx, qword [0x140131700]
test rcx, rcx
je 0x140002305
cmp edx, 0x100
jne 0x140002305
cmp rbx, 0xd
jne 0x1400022e6
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1116
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140002084
cmp eax, 0x2af8
je 0x140001f5d
mov r15, qword [rdx + rax*8]
mov qword [rbp - 0x30], r15
test r15, r15
je 0x140001f63
movzx eax, byte [r15 + 0x60]
cmp al, 0xf
je 0x140001f63
xor edi, edi
mov rbx, qword [rbp - 0x78]
cmp al, 0x13
jne 0x1400020a9
mov rdi, r15
lea rax, [rbx - 0x25]
test rax, 0xfffffffffffffffd
jne 0x1400020a9
cmp rbx, 0x27
sete r8b
mov byte [rsp + 0x20], 0
xor r9d, r9d
mov rdx, r15
mov rcx, rsi
call fcn.14008dc70
mov edi, dword [rbp + 0x1270]
movzx r14d, byte [rbp + 0x1288]
mov ebx, dword [rsp + 0x44]
mov esi, dword [rsp + 0x4c]
movzx eax, byte [rbp + 0x1280]
xor r10d, r10d
jmp 0x140001954
lea rax, [rbx - 0x25]
test rax, 0xfffffffffffffffd
je 0x140001f67
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140001f63
mov rbx, qword [rbp - 0x78]
cmp rbx, 9
jne 0x1400020f9
cmp byte [r15 + 0x60], 0xc
jne 0x1400020f9
mov edx, 0xfffffff0
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_GetWindowLongW]
test al, 4
jne 0x140001f63
mov rbx, qword [rbp - 0x78]
test rdi, rdi
jne 0x140002185
movzx r9d, byte [r15 + 0x62]
cmp r9b, 0xff
je 0x140002140
xor dl, dl
xor ecx, ecx
mov r8d, dword [rsi + 0xb8]
test r8d, r8d
je 0x140002140
mov r10, qword [rsi + 0x60]
mov rdi, qword [r10 + rcx*8]
cmp byte [rdi + 0x60], 0x13
jne 0x140002132
cmp dl, r9b
je 0x14000213b
inc dl
inc ecx
cmp ecx, r8d
jb 0x140002121
jmp 0x140002140
test rdi, rdi
jne 0x140002185
xor dl, dl
xor ecx, ecx
mov r8d, dword [rsi + 0xb8]
test r8d, r8d
je 0x140001f67
mov r9, qword [rsi + 0x60]
nop dword [rax + rax]
mov rdi, qword [r9 + rcx*8]
cmp byte [rdi + 0x60], 0x13
jne 0x140002170
test dl, dl
je 0x14000217c
inc dl
inc ecx
cmp ecx, r8d
jb 0x140002160
jmp 0x140001f67
test rdi, rdi
je 0x140001f67
mov rcx, qword [rdi + 0x38]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x140001f63
mov rax, qword [rbp - 0x78]
cmp rax, 0x22
je 0x1400021ca
cmp rax, 9
jne 0x1400021b7
mov ecx, reloc.WSOCK32.dll_recv
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1400021ca
xor r8d, r8d
mov byte [rsp + 0x20], 1
mov r9b, 1
mov rdx, rdi
jmp 0x14000207c
mov r8b, 1
mov byte [rsp + 0x20], r8b
movzx r9d, r8b
mov rdx, rdi
jmp 0x14000207c
cmp eax, 0x2af8
je 0x140001fe1
mov r15, qword [rdx + rax*8]
mov qword [rbp - 0x30], r15
test r15, r15
je 0x140001fe7
cmp byte [r15 + 0x60], 0xc
jne 0x140001fe7
mov rbx, qword [rbp - 0x78]
cmp rbx, 0x1b
je 0x140002282
movzx eax, byte [r15 + 0x61]
cmp rbx, 0x41
je 0x14000225c
test al, al
jns 0x140001feb
mov edx, 0xfffffff0
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0xb
jb 0x140001fe7
lea r9, [0x140104cc4]
mov edx, 0xc2
mov r8d, 1
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140002084
test al, 2
jne 0x140001feb
mov r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, 0xb1
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140002084
xor r10d, r10d
mov ecx, r10d
mov edx, dword [rsi + 0xb0]
test edx, edx
jle 0x14000274a
mov rax, qword [rsi + 0xa0]
add rax, 0xe
cmp dword [rax - 6], 3
jne 0x1400022ac
cmp byte [rax], r10b
je 0x1400022bb
inc ecx
add rax, 0x10
cmp ecx, edx
jl 0x1400022a1
jmp 0x14000274a
xor r9d, r9d
mov edx, 0x414
mov r8d, 0x2af80003
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_PostMessageW]
mov qword [rbp - 0x30], r15
mov rsi, qword [rsp + 0x58]
mov qword [rsp + 0x58], rsi
jmp 0x140002084
cmp rbx, 0x1b
jne 0x140002305
xor r9d, r9d
mov edx, 0x1116
mov r8d, 1
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140002084
cmp dword [rsi + 0xb8], 0
jne 0x140002316
cmp edx, 0x106
je 0x140002350
lea rax, [rsp + 0x78]
mov qword [0x14012feb8], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
xor r10d, r10d
mov qword [0x14012feb8], r10
test eax, eax
jne 0x14000274a
mov rbx, qword [rbp - 0x78]
mov edx, dword [rbp - 0x80]
jmp 0x140002353
mov rbx, qword [rbp - 0x78]
xor r10d, r10d
cmp edx, 0x402
ja 0x1400025e7
je 0x140002620
cmp edx, 0x113
ja 0x14000250d
je 0x1400023fd
cmp edx, 0x12
je 0x1400023e7
cmp edx, 0x4b
je 0x1400023bd
cmp edx, 0x100
jne case.0x140002607.1046
mov rax, qword [0x14012fe90]
cmp qword [rsp + 0x78], rax
jne case.0x140002607.1046
cmp rbx, 0x1b
jne case.0x140002607.1046
xor edx, edx
mov rcx, qword [0x14012fec8]
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x140002084
mov qword [0x14012fe98], r10
mov al, 1
mov byte [rbp + 0x1280], al
mov edi, dword [rbp + 0x1270]
movzx r14d, byte [rbp + 0x1288]
mov ebx, dword [rsp + 0x44]
mov esi, dword [rsp + 0x4c]
jmp 0x140001954
mov edx, 4
lea rcx, [0x1401319c0]
call fcn.140048890
jmp 0x140002084
cmp qword [rbp - 0x70], 0
jne case.0x140002607.1046
mov rax, qword [0x14012fec8]
cmp qword [rsp + 0x78], rax
jne case.0x140002607.1046
cmp dword [0x14013032c], 0
je 0x140002428
call fcn.140004210
cmp dword [0x1401320ec], 0
je 0x14000244b
call fcn.140003ef0
movzx ebx, byte [rsp + 0x70]
test al, al
mov eax, 1
cmovne ebx, eax
mov dword [rsp + 0x70], ebx
jmp 0x14000244f
mov ebx, dword [rsp + 0x70]
cmp dword [rbp + 0x1278], 0
je 0x140003cf6
cmp dword [rsp + 0x44], 1
jl 0x140003cf6
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movzx r14d, byte [rbp + 0x1288]
mov edi, dword [rbp + 0x1270]
test r14b, r14b
jne 0x140002490
mov ecx, dword [rbp - 0x48]
sub ecx, eax
add ecx, edi
cmp ecx, 5
jg 0x140002092
mov dword [0x140132168], eax
cmp byte [rsp + 0x51], 0
je 0x1400024a4
mov byte [0x14012fe75], 0
cmp byte [rsp + 0x52], 0
je 0x1400024f6
mov eax, dword [0x14012fed0]
dec eax
mov dword [0x14012fed0], eax
test edi, edi
jle 0x1400024f6
test eax, eax
jne 0x1400024f6
cmp dword [0x1401320ec], eax
jne 0x1400024f6
cmp dword [0x14013032c], eax
jne 0x1400024f6
cmp byte [0x14012fe74], al
je 0x1400024f6
mov edx, 9
mov rcx, qword [0x14012fec8]
call qword [sym.imp.USER32.dll_KillTimer]
test eax, eax
je 0x1400024f6
mov byte [0x14012fe74], 0
movzx eax, bl
add rsp, 0x1328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov eax, edx
sub eax, 0x312
je 0x140002620
sub eax, 0xee
je case.0x140002607.1045
cmp eax, 1
je case.0x140002607.1045
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x140002590
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x1401319a0]
jne 0x140002590
mov edx, 0xffffffe0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetClassLongW]
cmp eax, 0x8002
jne 0x140002590
lea rax, [rsp + 0x78]
mov qword [0x14012feb8], rax
lea rdx, [rsp + 0x78]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsDialogMessageW]
xor r10d, r10d
mov qword [0x14012feb8], r10
test eax, eax
jne 0x14000274a
mov rdx, qword [0x14012fe88]
test rdx, rdx
je 0x1400025b6
lea r8, [rsp + 0x78]
mov rcx, qword [0x14012fec8]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x140002084
lea rax, [rsp + 0x78]
mov qword [0x14012feb8], rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_DispatchMessageW]
xor r10d, r10d
mov qword [0x14012feb8], r10
jmp 0x14000274a
lea eax, [rdx - 0x414]
cmp eax, 0xa
ja case.0x140002607.1046
lea rdi, [0x140000000]
mov ecx, dword [rdi + rax*4 + 0x3d8c]
add rcx, rdi
jmp rcx
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x140002620
cmp rdi, qword [0x14012fec8]
jne case.0x140002607.1046
lea rdi, [0x140000000]
mov r14, r10
lea eax, [rdx - 0x401]
cmp eax, 0x1d
ja case.0x14000264b.1031
movzx eax, byte [rdi + rax + 0x3dd4]
mov ecx, dword [rdi + rax*4 + 0x3db8]
add rcx, rdi
jmp rcx
mov rdi, qword [rsp + 0x78]
mov edx, 0xffffffe0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassLongW]
cmp ax, word [0x1401324d8]
je 0x140002675
xor eax, eax
mov qword [rsp + 0x58], rax
jmp case.0x140002607.1046
mov edx, 0xffffffeb
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rsi, rax
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140002607.1046
mov rdx, qword [rbp - 0x70]
mov qword [rbp - 0x58], rdx
mov rcx, qword [rbp - 0x78]
movzx r8d, cl
mov dword [rbp - 0x38], r8d
mov r9, rcx
shr r9, 8
mov qword [rbp - 0x18], r9
shr rcx, 0x10
movzx eax, cx
xor r10d, r10d
mov dword [rsp + 0x64], r10d
mov dword [rsp + 0x60], r8d
cmp eax, dword [rsi + 0xb8]
jae 0x1400026db
mov ecx, eax
mov rax, qword [rsi + 0x60]
mov r15, qword [rax + rcx*8]
jmp 0x1400026de
mov r15, r10
mov qword [rbp - 0x30], r15
lea rbx, [rsi + 0xa0]
mov byte [rsp + 0x50], r10b
xor dil, dil
mov byte [rsp + 0x48], dil
lea eax, [r8 - 1]
cmp eax, 0x10
ja case.0x140002711.6
lea r8, [0x140000000]
mov ecx, dword [r8 + rax*4 + 0x3df4]
add rcx, r8
jmp rcx
mov r14, qword [rsi + 0x70]
test r14, r14
je 0x14000274a
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov edx, eax
mov qword [rbp - 0x58], rdx
test eax, eax
jne 0x140002788
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragFinish]
xor r10d, r10d
mov qword [rsi + 0x70], r10
mov ebx, dword [rsp + 0x44]
mov edi, dword [rbp + 0x1270]
movzx r14d, byte [rbp + 0x1288]
mov esi, dword [rsp + 0x4c]
movzx eax, byte [rbp + 0x1280]
jmp 0x140001954
mov dil, 2
mov byte [rsp + 0x48], dil
mov dword [rsp + 0x60], edx
test r15, r15
je 0x14000274a
lea rbx, [r15 + 0x48]
mov byte [rsp + 0x50], 1
jmp case.0x140002711.2
xor r10d, r10d
test rbx, rbx
je case.0x140002711.5
mov rdx, qword [rbx + 8]
test rdx, rdx
je case.0x140002711.5
mov r8d, dword [rsp + 0x60]
nop
cmp byte [rdx + 0x18], 0
jne 0x1400027be
movsxd rcx, dword [rdx + 0x10]
add rcx, rcx
mov rax, qword [rbx]
cmp dword [rax + rcx*8 + 8], r8d
jne 0x1400027be
cmp byte [rax + rcx*8 + 0xe], dil
je 0x1400027d2
mov rdx, qword [rdx + 8]
test rdx, rdx
jne 0x1400027a0
mov edi, r10d
mov edx, dword [rbp - 0x80]
jmp 0x140002c1e
test r14, r14
je 0x1400027e7
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragFinish]
xor r10d, r10d
mov qword [rsi + 0x70], r10
mov qword [rsp + 0x58], rsi
jmp 0x14000274a
test rbx, rbx
je 0x14000285c
mov edx, 0xffffffe0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetClassLongW]
cmp ax, word [0x1401324d8]
je 0x14000281a
xor r10d, r10d
mov esi, r10d
mov qword [rsp + 0x58], r10
jmp 0x140002838
mov edx, 0xffffffeb
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rsi, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x140002854
xor r10d, r10d
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140002854
cmp rax, qword [0x14012fec8]
jne case.0x140002607.1046
mov edx, dword [rbp - 0x80]
jmp 0x140002864
mov edx, dword [rbp - 0x80]
xor r10d, r10d
jmp 0x140002864
mov rsi, r10
mov qword [rsp + 0x58], r10
mov rcx, qword [0x1401320f0]
test rcx, rcx
je 0x1400028a1
mov rax, qword [rbp - 0x70]
mov r12, qword [rcx + 0x30]
test r12, r12
je 0x140002898
nop dword [rax]
cmp dword [r12 + 0x28], eax
je 0x140002893
mov r12, qword [r12 + 0x38]
test r12, r12
jne 0x140002880
jmp 0x140002898
test r12, r12
jne 0x1400028a9
mov rcx, qword [rcx + 0x48]
test rcx, rcx
jne 0x140002874
mov r12, r10
jmp 0x14000274a
cmp qword [r12 + 0x10], 0
je 0x14000274a
mov edi, dword [r12 + 0x2c]
jmp 0x140002c1e
mov eax, dword [0x140130328]
cmp rbx, rax
jae 0x14000274a
mov rax, qword [0x140130320]
mov rsi, qword [rax + rbx*8]
mov qword [rbp + 0x50], rsi
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x140002926
mov rdx, qword [rsi + 8]
call fcn.1400184c0
mov qword [rbp - 0x50], rax
cmp rax, 0
je 0x140003cf6
mov rcx, qword [rsi + 0x20]
movzx edx, byte [rcx]
lea ecx, [rdx - 2]
test cl, 0xfd
je 0x14000291e
cmp dl, 5
jne 0x14000292a
mov rbx, qword [0x14012feb0]
mov qword [rbp - 0x50], rbx
jmp 0x14000292a
xor eax, eax
mov qword [rbp - 0x50], rax
jmp 0x14000292a
mov qword [rbp - 0x50], r10
mov rdx, qword [rbp - 0x70]
mov rcx, rsi
call fcn.14001bbd0
cmp qword [rsi + 0x18], 0
jne 0x140003cf6
xor r10d, r10d
cmp byte [rsi + 0x3e], r10b
je 0x140002960
movzx eax, word [rbp - 0x70]
mov word [0x14013210c], ax
mov edi, dword [rsi + 0x28]
mov edx, dword [rbp - 0x80]
jmp 0x140002c19
mov word [0x14013210c], r10w
mov edi, dword [rsi + 0x28]
mov edx, dword [rbp - 0x80]
jmp 0x140002c19
cmp byte [0x1401320d0], 0
jne 0x14000274a
mov edi, r10d
jmp 0x140002c19
mov r15, rbx
mov qword [rbp - 0x40], rbx
mov rcx, rbx
call fcn.14002e8b0
test rax, rax
jne 0x1400029a8
xor r10d, r10d
mov qword [rbp - 0x40], r10
jmp 0x14000274a
cmp qword [rbx + 0x10], 0
je 0x140002a2a
cmp qword [0x14012fea8], 0
jne 0x1400029d0
cmp dword [0x14013033c], 0
jne 0x1400029d0
test byte [0x1401300ca], 1
jne 0x1400029d0
call fcn.140018850
mov rcx, qword [rbx + 0x10]
cmp qword [rcx + 0x3a8], 0
je 0x1400029fa
xor r10d, r10d
test rbx, rbx
je 0x14000274a
mov edi, r10d
mov edx, dword [rbp - 0x80]
mov rsi, qword [rsp + 0x58]
jmp 0x140002c22
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
cmp dword [0x14012fea0], 0
jne 0x140002a2a
lea rcx, [0x1401319c0]
call fcn.140048470
test al, al
jne 0x140002a2a
mov edx, 6
lea rcx, [0x1401319c0]
call fcn.140048890
xor r10d, r10d
mov qword [rbp - 0x40], r10
jmp 0x14000274a
mov r15, qword [0x14012fea8]
mov qword [rbp - 0x40], r15
test r15, r15
je 0x14000274a
nop word [rax + rax]
cmp r15, rbx
je 0x140002a67
mov r15, qword [r15 + 8]
mov qword [rbp - 0x40], r15
test r15, r15
jne 0x140002a50
jmp 0x14000274a
mov rax, qword [r15 + 0x10]
cmp edx, 0x41c
jne 0x140002a7c
mov rax, qword [rax + 0x3b0]
jmp 0x140002a94
cmp edx, 0x41e
jne 0x140002a8d
mov rax, qword [rax + 0x3c0]
jmp 0x140002a94
mov rax, qword [rax + 0x3b8]
test rax, rax
je 0x14000274a
mov edi, r10d
mov rsi, qword [rsp + 0x58]
jmp 0x140002c22
movzx eax, bx
mov ecx, 0x7fff
and ax, cx
cmp ax, word [0x1401301b4]
jae 0x14000274a
movzx ecx, ax
mov rax, qword [0x140130330]
mov r15, qword [rax + rcx*8]
mov qword [rbp + 0x58], r15
shr rbx, 0x10
test bx, bx
je 0x140002b03
mov r8d, 0xffff
add bx, r8w
mov r13, qword [r15 + 0x28]
je 0x140002afa
nop dword [rax]
mov r13, qword [r13 + 0x18]
add bx, r8w
jne 0x140002af0
test r13, r13
jne 0x140002bc1
cmp edx, 0x400
jne 0x140002b25
mov rax, qword [rbp - 0x70]
shr rax, 0x10
movzx ecx, ax
lea esi, [rcx + 0x3c2bb3]
mov edi, WSAAsyncSelect
sub edi, ecx
jmp 0x140002b2d
mov esi, r10d
mov edi, 0x3c2c17
cmp byte [r15 + 0x19], 0
jne 0x140002b3c
mov r13, r10
jmp 0x14000274a
mov qword [rbp - 0x50], r10
mov rbx, r10
mov r13, qword [r15 + 0x28]
test r13, r13
je 0x140002bb2
nop dword [rax]
cmp byte [r13 + 0x30], 0
je 0x140002ba6
cmp byte [0x14012fed7], 0
je 0x140002b67
cmp byte [r13 + 0x31], 0
je 0x140002ba6
cmp edi, 0x66
lea ecx, [rsi - 0x3c2bb3]
jbe 0x140002b77
mov ecx, reloc.WSOCK32.dll_WSAAsyncSelect
movzx eax, byte [r13 + 0x2c]
cmp ecx, eax
jle 0x140002ba6
mov rcx, qword [r13 + 0x10]
test rcx, rcx
je 0x140002b9c
mov rdx, qword [r15 + 0x20]
call fcn.1400184c0
mov qword [rbp - 0x50], rax
cmp rax, 0
je 0x140002ba6
cmp qword [r13 + 0x10], 0
jne 0x140002be7
mov rbx, r13
mov r13, qword [r13 + 0x18]
test r13, r13
jne 0x140002b50
mov edx, dword [rbp - 0x80]
mov r13, rbx
xor r10d, r10d
test r13, r13
je 0x14000274a
movzx eax, byte [r13 + 0x2b]
cmp byte [r13 + 0x2a], al
jb 0x140002bec
cmp byte [r13 + 0x2e], 0
je 0x140002bd8
mov byte [r13 + 0x2f], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [r13 + 0x20], eax
jmp 0x140002084
mov edx, dword [rbp - 0x80]
jmp 0x140002bb5
mov rax, qword [r13 + 0x10]
test rax, rax
je 0x140002c11
movzx ecx, byte [rax]
lea eax, [rcx - 2]
test al, 0xfd
je 0x140002c11
cmp cl, 5
jne 0x140002c15
mov rax, qword [0x14012feb0]
mov qword [rbp - 0x50], rax
jmp 0x140002c15
mov qword [rbp - 0x50], r10
mov edi, dword [r13 + 0x24]
mov rsi, qword [rsp + 0x58]
mov r15, qword [rbp - 0x40]
mov eax, dword [reloc.WSOCK32.dll_inet_addr]
cmp dword [0x14012fea0], eax
jl 0x140002c8a
test r14, r14
je 0x140002c48
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragFinish]
xor r10d, r10d
mov qword [rsi + 0x70], r10
mov edx, dword [rbp - 0x80]
cmp edx, 0x41b
mov edi, dword [rbp + 0x1270]
movzx r14d, byte [rbp + 0x1288]
mov ebx, dword [rsp + 0x44]
mov esi, dword [rsp + 0x4c]
movzx eax, byte [rbp + 0x1280]
jne 0x140001954
mov rcx, qword [r15 + 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
movzx eax, byte [rbp + 0x1280]
xor r10d, r10d
jmp 0x140001954
mov rax, qword [0x140129398]
cmp edi, dword [rax + 0x68]
jge 0x140002cf0
test r14, r14
je 0x140002cae
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragFinish]
xor r10d, r10d
mov qword [rsi + 0x70], r10
mov edx, dword [rbp - 0x80]
cmp edx, 0x41b
mov edi, dword [rbp + 0x1270]
movzx r14d, byte [rbp + 0x1288]
mov ebx, dword [rsp + 0x44]
mov esi, dword [rsp + 0x4c]
movzx eax, byte [rbp + 0x1280]
jne 0x140001954
mov rcx, qword [r15 + 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
movzx eax, byte [rbp + 0x1280]
xor r10d, r10d
jmp 0x140001954
mov byte [rsp + 0x70], 1
lea eax, [rdx - 0x402]
cmp eax, 0x1c
ja case.0x140002d1b.1027
lea r8, [0x140000000]
movzx eax, byte [r8 + rax + 0x3e40]
mov ecx, dword [r8 + rax*4 + 0x3e38]
add rcx, r8
jmp rcx
mov rax, qword [0x140132078]
mov qword [0x140132080], rax
mov eax, dword [0x140132104]
mov dword [0x140132108], eax
cmp edx, 0x401
jne 0x140002d49
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 8]
jmp 0x140002d51
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x20]
mov qword [0x140132078], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x140132104], eax
inc dword [0x14012fea0]
mov rbx, qword [0x140129398]
add rbx, 0xc8
mov qword [0x140129398], rbx
mov rax, qword [0x14012fe78]
xor esi, esi
test rax, rax
lea rcx, [rax + 0x80]
jne 0x140002d96
mov ecx, esi
test rbx, rbx
lea rax, [rbx + 0x80]
jne 0x140002da5
mov rax, rsi
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movsd xmm0, qword [rcx + 0x40]
movsd qword [rax + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [rbx], xmm1
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm1
movups xmmword [rbx + 0x30], xmm1
movups xmmword [rbx + 0x40], xmm1
movups xmmword [rbx + 0x50], xmm1
movups xmmword [rbx + 0x60], xmm1
movups xmmword [rbx + 0x70], xmm1
mov byte [rbx + 0x7a], 1
mov dword [rbx + 0x68], edi
xor edx, edx
lea rcx, [0x1401319c0]
call fcn.140047c80
movzx eax, byte [rbx + 0xc2]
test al, al
jne 0x140002e15
mov byte [rbx + 0xc2], al
cmp dword [0x140132164], 0
je 0x140002e27
cmp dword [0x140132160], 0
jne 0x140002e2b
test al, al
je 0x140002e61
mov dword [rbx + 0x88], reloc.WSOCK32.dll_recv
mov byte [rbx + 0x7a], 0
test al, al
jne 0x140002e61
cmp dword [0x140132164], 0
jge 0x140002e4f
mov dword [rbx + 0x70], 0xffffffff
jmp 0x140002e61
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbx + 0x74], eax
mov eax, dword [0x140132164]
mov dword [rbx + 0x70], eax
mov rbx, qword [0x140129398]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x140132168], eax
mov edx, dword [rbp - 0x80]
lea eax, [rdx - 0x401]
cmp eax, 0x1d
ja case.0x140002ea1.1032
lea r8, [0x140000000]
movzx eax, byte [r8 + rax + 0x3e80]
mov ecx, dword [r8 + rax*4 + 0x3e60]
add rcx, r8
jmp rcx
movsxd rdi, dword [rsp + 0x64]
lea rcx, [rdi + rdi*2]
inc edi
mov dword [rsp + 0x64], edi
mov dword [rbp + rcx*8 + 0x90], 5
mov rsi, qword [rsp + 0x58]
mov rax, rsi
cmp byte [rsp + 0x50], 0
mov r15, qword [rbp - 0x30]
cmovne rax, r15
mov qword [rbp + rcx*8 + 0x80], rax
mov ebx, dword [rbp - 0x38]
lea eax, [rbx - 1]
cmp eax, 0x10
ja case.0x140002ef4.6
mov ecx, dword [r8 + rax*4 + 0x3ea0]
add rcx, r8
jmp rcx
mov rax, qword [rbp - 0x64]
mov qword [rsp + 0x68], rax
mov rbx, qword [rbp - 0x18]
test r15, r15
je 0x14000312a
test bl, bl
je 0x140003028
mov dword [rbp - 0x28], 0x80000000
movzx ecx, byte [r15 + 0x60]
sub ecx, 9
je 0x140002faa
sub ecx, 1
je 0x140002f77
sub ecx, 1
je 0x140002f49
cmp ecx, 6
jne 0x140002fdb
xor r8d, r8d
mov edx, 0x419
jmp 0x140002fcd
xor r9d, r9d
mov edx, 0x110a
mov r8d, 9
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x140002fdb
mov qword [rbp - 0x28], rax
mov edx, 0x1104
mov r8d, 1
jmp 0x140002fcd
mov edx, 0x100c
mov r9d, 1
mov r8, 0xffffffffffffffff
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, eax
cmp r8, 0xffffffffffffffff
je 0x140002fdb
mov dword [rbp - 0x28], 2
mov edx, 0x100e
jmp 0x140002fcd
xor r9d, r9d
xor r8d, r8d
mov edx, OleCreatePictureIndirect
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
je 0x140002fdb
mov r8, rax
mov edx, RemoveWindowSubclass
lea r9, [rbp - 0x28]
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r15 + 0x38]
cmp dword [rbp - 0x28], 0x80000000
jne 0x140002ff4
lea rdx, [rbp - 0x28]
call qword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x140003006
mov r9d, 2
lea r8, [rbp - 0x28]
xor edx, edx
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [rbp - 0x28]
mov dword [rsp + 0x68], eax
mov eax, dword [rbp - 0x1c]
mov ecx, dword [rbp - 0x24]
sub eax, ecx
jns 0x140003019
inc eax
sar eax, 1
add eax, 2
add eax, ecx
mov dword [rsp + 0x6c], eax
mov rax, qword [rbp - 0x64]
movzx edx, byte [r15 + 0x60]
sub edx, 9
je 0x14000311d
sub edx, 1
je 0x1400030c3
cmp edx, 1
jne 0x14000312a
mov rcx, qword [r15 + 0x38]
test bl, bl
je 0x14000309d
xor r9d, r9d
mov edx, 0x110a
mov r8d, 9
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x68]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
movsxd rcx, edi
lea rcx, [rcx + rcx*2]
shl rcx, 3
lea r8, [rbp + 0x90]
add r8, rcx
mov rax, r15
mov r9d, 5
xor r14d, r14d
jmp 0x14000317e
mov qword [rbp], rax
lea rdx, [rbp]
call qword [sym.imp.USER32.dll_ScreenToClient]
lea r9, [rbp]
xor r8d, r8d
mov edx, 0x1111
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400030e7
test bl, bl
je 0x1400030eb
mov edx, 0x100c
mov r9d, 1
mov r8, 0xffffffffffffffff
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
inc eax
cdqe
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x68]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
movsxd rax, edi
lea rcx, [rax + rax*2]
shl rcx, 3
lea r8, [rbp + 0x90]
add r8, rcx
mov rax, r15
mov r9d, 5
xor r14d, r14d
jmp 0x14000317e
xor r9d, r9d
xor r8d, r8d
mov edx, OleCreatePictureIndirect
jmp 0x1400030d9
lea rdx, [rsp + 0x68]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
movsxd rax, edi
lea rcx, [rax + rax*2]
lea rcx, [rcx*8]
lea r8, [rbp + 0x90]
add r8, rcx
test r15, r15
je 0x140003165
mov rax, r15
mov r9d, 5
xor r14d, r14d
jmp 0x14000317e
mov qword [rbp + rcx + 0x88], 0xffffffffffffffff
lea rax, [0x140104c70]
xor r14d, r14d
mov r9d, r14d
lea edx, [rdi + 1]
mov dword [r8], r9d
mov qword [rbp + rcx + 0x80], rax
movsxd rax, edx
lea rcx, [rax + rax*2]
lea edi, [rdx + 1]
mov edx, 1
mov dword [rbp + rcx*8 + 0x90], edx
mov rax, qword [rbp - 0x58]
mov qword [rbp + rcx*8 + 0x80], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
inc edi
mov dword [rbp + rcx*8 + 0x90], edx
mov rax, r14
test bl, bl
sete al
mov qword [rbp + rcx*8 + 0x80], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
inc edi
mov dword [rbp + rcx*8 + 0x90], edx
movsxd rax, dword [rsp + 0x68]
mov qword [rbp + rcx*8 + 0x80], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
inc edi
mov dword [rsp + 0x64], edi
mov dword [rbp + rcx*8 + 0x90], edx
movsxd rax, dword [rsp + 0x6c]
mov qword [rbp + rcx*8 + 0x80], rax
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_htonl]
jmp 0x140003630
mov rax, qword [rbp - 0x64]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov edx, 0xffffffec
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xffffffef
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SetWindowLongW]
lea r10, [rbp + 0x80]
movsxd rcx, edi
test r15, r15
je 0x140003270
mov r8, r15
mov r9d, 5
jmp 0x14000328c
lea rax, [rcx + rcx*2]
mov qword [rbp + rax*8 + 0x88], 0xffffffffffffffff
lea r8, [0x140104c70]
xor eax, eax
mov r9d, eax
lea rax, [rcx + rcx*2]
lea edx, [rdi + 1]
mov dword [r10 + rax*8 + 0x10], r9d
mov qword [r10 + rax*8], r8
movsxd rax, edx
lea rcx, [rax + rax*2]
lea rbx, [rbp + 0x80]
lea rbx, [rbx + rcx*8]
lea edi, [rdx + 1]
mov rcx, r14
call fcn.1400816f0
mov dword [rbx + 0x10], 5
mov qword [rbx], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
lea rbx, [rbp + 0x80]
lea rbx, [rbx + rcx*8]
inc edi
cmp byte [rsi + 0x122], 0
je 0x1400032f8
mov r8d, dword [0x1401319a4]
mov edx, 0x60
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_MulDiv]
jmp 0x1400032fc
mov eax, dword [rsp + 0x68]
mov dword [rbx + 0x10], 1
cdqe
mov qword [rbx], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
lea rbx, [rbp + 0x80]
lea rbx, [rbx + rcx*8]
inc edi
mov dword [rsp + 0x64], edi
cmp byte [rsi + 0x122], 0
je 0x140003341
mov r8d, dword [0x1401319a4]
mov edx, 0x60
mov ecx, dword [rsp + 0x6c]
call qword [sym.imp.KERNEL32.dll_MulDiv]
jmp 0x140003345
mov eax, dword [rsp + 0x6c]
mov dword [rbx + 0x10], 1
cdqe
mov qword [rbx], rax
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragFinish]
xor eax, eax
mov qword [rsi + 0x70], rax
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_htonl]
movzx ebx, byte [rsp + 0x48]
mov r14d, dword [rsp + 0x60]
cmp byte [rsp + 0x50], 0
lea rcx, [r15 + 0x48]
jne 0x140003385
lea rcx, [rsi + 0xa0]
lea rax, [rbp + 0x110]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov byte [rsp + 0x20], bl
mov r9d, r14d
mov r8d, edi
lea rdx, [rbp + 0x80]
call fcn.14009b6e0
mov rcx, qword [rsi + 0x40]
mov r8d, dword [rbp - 0x38]
test rcx, rcx
je 0x14000372b
mov eax, r8d
sub eax, 1
je 0x1400036c9
cmp eax, 1
jne 0x14000372b
cmp qword [rbp + 0x110], 0
jne 0x14000374a
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
setne cl
cmp cl, byte [rsi + 0x125]
je 0x140003689
mov byte [rsi + 0x125], cl
mov rdx, qword [rsi]
mov rcx, rsi
test eax, eax
je 0x140003686
call qword [rdx + reloc.WSOCK32.dll_htonl]
jmp 0x140003689
cmp ebx, 4
jne 0x14000361b
movsxd rax, edi
lea rcx, [rax + rax*2]
inc edi
mov eax, 1
mov dword [rbp + rcx*8 + 0x90], eax
movsx rax, byte [rbp - 0x18]
mov qword [rbp + rcx*8 + 0x80], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
lea rbx, [rbp + 0x80]
lea rbx, [rbx + rcx*8]
inc edi
mov r14, qword [rbp - 0x58]
movzx eax, r14w
cmp byte [rsi + 0x122], 0
je 0x140003483
mov r8d, dword [0x1401319a4]
mov edx, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rbx + 0x10], 1
cdqe
mov qword [rbx], rax
movsxd rax, edi
lea rcx, [rax + rax*2]
lea rbx, [rbp + 0x80]
lea rbx, [rbx + rcx*8]
inc edi
mov dword [rsp + 0x64], edi
mov rax, r14
shr rax, 0x10
movzx eax, ax
cmp byte [rsi + 0x122], 0
je 0x1400034ce
mov r8d, dword [0x1401319a4]
mov edx, 0x60
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rbx + 0x10], 1
cdqe
mov qword [rbx], rax
jmp case.0x140002ef4.17
cmp byte [r15 + 0x60], 0x17
jne 0x1400035ba
cmp ebx, 7
jne 0x1400035ba
mov dword [rbp + 0x160], recv
mov rbx, qword [rbp - 0x58]
lea eax, [rbx - 1]
mov dword [rbp + 0x164], eax
lea r9, [rbp + 0x160]
xor r8d, r8d
mov edx, 0x703
mov rcx, qword [r15 + 0x38]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
test rax, rax
movzx edx, r11w
je 0x140003536
movzx edx, word [rbp + 0x170]
movsxd rax, edi
lea rcx, [rax + rax*2]
lea rcx, [rcx*8]
mov r9, rcx
lea r10, [rbp + 0x90]
test dx, dx
je 0x14000356c
mov qword [rbp + rcx + 0x88], 0xffffffffffffffff
lea rax, [rbp + 0x170]
mov r8d, r11d
jmp 0x140003575
movsxd rax, ebx
mov r8d, 1
lea edx, [rdi + 1]
mov dword [r10 + r9], r8d
mov qword [rbp + rcx + 0x80], rax
movsxd rax, edx
lea rcx, [rax + rax*2]
lea edi, [rdx + 1]
mov dword [rsp + 0x64], edi
mov dword [rbp + rcx*8 + 0x90], r11d
lea rax, [rbp + 0x1d0]
mov qword [rbp + rcx*8 + 0x80], rax
mov qword [rbp + rcx*8 + 0x88], 0xffffffffffffffff
jmp case.0x140002ef4.17
movsxd rax, edi
lea rcx, [rax + rax*2]
inc edi
mov dword [rsp + 0x64], edi
mov edx, 1
mov dword [rbp + rcx*8 + 0x90], edx
mov rax, qword [rbp - 0x58]
mov qword [rbp + rcx*8 + 0x80], rax
mov eax, ebx
sub eax, 0xa
je 0x1400035f8
sub eax, edx
je 0x1400035f1
cmp eax, 2
je 0x1400035f8
jmp 0x14000361b
cmp byte [r15 + 0x60], 0xa
jne 0x14000361b
movsxd rax, edi
lea rcx, [rax + rax*2]
inc edi
mov dword [rsp + 0x64], edi
mov dword [rbp + rcx*8 + 0x90], edx
movzx eax, byte [rbp - 0x18]
dec rax
mov qword [rbp + rcx*8 + 0x80], rax
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_htonl]
cmp ebx, 5
jne 0x140003369
xor r14d, r14d
movzx ebx, byte [rsp + 0x48]
test r15, r15
je 0x14000336e
lea r8d, [rdi - 1]
lea rcx, [r15 + 0x48]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rsi
mov byte [rsp + 0x20], bl
mov r14d, dword [rsp + 0x60]
mov r9d, r14d
lea rdx, [rbp + 0x98]
call fcn.14009b6e0
cmp eax, 7
je 0x140003678
cmp qword [rsi + 0x40], 0
jne 0x140003373
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x140003c97
call qword [rdx + reloc.WSOCK32.dll_recv]
cmp dword [0x14012fea0], 0
jne 0x14000374a
lea rcx, [0x1401319c0]
call fcn.140048470
test al, al
jne 0x14000374a
mov edx, 4
lea rcx, [0x1401319c0]
call fcn.140048890
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x140003c97
xor eax, eax
mov ecx, eax
mov edx, dword [rsi + 0xb0]
test edx, edx
jle 0x140003731
mov rax, qword [rsi + 0xa0]
add rax, 0xe
cmp dword [rax - 6], 1
jne 0x1400036ed
cmp byte [rax], 0
je 0x1400036f9
inc ecx
add rax, 0x10
cmp ecx, edx
jl 0x1400036e2
jmp 0x140003731
mov edx, 0xffffffec
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x10
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x64], edi
jmp 0x140003731
cmp r8d, 1
jne 0x14000374a
movsxd rax, edi
sub rax, 3
lea rax, [rax + rax*2]
mov rcx, qword [rbp + rax*8 + 0x80]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x140003c97
mov rsi, qword [rsp + 0x58]
test rsi, rsi
je 0x14000377b
mov rax, qword [rsi + 0x40]
mov qword [rbx + 0x38], rax
mov rax, qword [rsi + 0x40]
mov qword [rbx + 0x40], rax
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_htonl]
mov rbx, qword [r12 + 0x20]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WSOCK32.dll_htonl]
xor r8d, r8d
mov dword [rbp + 0x10], r8d
mov rax, qword [r12]
mov qword [rbp], rax
mov qword [rbp + 8], 0xffffffffffffffff
mov edx, r8d
mov rax, qword [r12 + 0x20]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x1400037c1
cmp rcx, r12
je 0x1400037c6
mov rcx, qword [rcx + 0x38]
inc edx
test rcx, rcx
jne 0x1400037b1
mov edx, 0xffffffff
mov eax, 1
mov dword [rbp + 0x28], eax
lea ecx, [rdx + 1]
mov qword [rbp + 0x18], rcx
mov dword [rbp + 0x40], 5
mov qword [rbp + 0x30], rbx
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bce0]
jne 0x1400037ff
call fcn.140007a98
mov rcx, qword [0x14012bcd8]
xor r8d, r8d
cmp rcx, qword [0x14012bcd0]
jb 0x140003819
mov rax, qword [0x140132068]
mov qword [rcx], rax
mov rcx, qword [0x14012bcd8]
add rcx, 0x18
mov qword [0x14012bcd8], rcx
mov qword [rcx], r8
lea rax, str.Menu
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], r8d
mov rcx, qword [r12 + 0x10]
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], 3
lea r9, [rbp]
xor r8d, r8d
mov rdx, rcx
call fcn.140091c10
mov rax, qword [0x14012bcd8]
sub rax, 0x18
mov qword [0x14012bcd8], rax
cmp rax, qword [0x14012bcd0]
jb 0x140003888
mov rax, qword [rax]
mov qword [0x14012bcf8], rax
mov qword [0x140132068], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WSOCK32.dll_recv]
test rsi, rsi
je 0x140003c97
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x140003c97
mov rax, qword [rbp - 0x50]
mov qword [rbx + 0x38], rax
mov rsi, qword [rbp + 0x50]
movzx eax, byte [rsi + 0x35]
mov byte [rbx + 0xc5], al
mov rax, qword [rsi + 0x20]
mov qword [rbx + 0x80], rax
movzx eax, byte [rsi + 0x39]
cmp byte [rsi + 0x38], al
jae 0x140003c97
mov byte [0x14013210e], 0
inc byte [rsi + 0x38]
xor eax, eax
mov dword [rbp + 0x10], eax
mov rax, qword [rsi + 8]
mov qword [rbp], rax
mov qword [rbp + 8], 0xffffffffffffffff
mov byte [rsp + 0x20], 0
mov r9d, 1
lea r8, [rbp]
mov rdx, qword [0x140132078]
mov rcx, rsi
call fcn.14009b470
dec byte [rsi + 0x38]
jmp 0x140003c97
call qword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
je 0x140003951
mov ecx, recv
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14000394a
mov ecx, reloc.WSOCK32.dll_ntohs
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x14000394a
mov eax, 2
jmp 0x140003954
mov eax, 1
jmp 0x140003954
mov rax, rsi
mov edi, 1
mov dword [rbp + 0x10], edi
mov qword [rbp], rax
mov byte [0x1401320d0], dil
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bce0]
jne 0x140003983
call fcn.140007a98
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bcd0]
jb 0x14000399d
mov rax, qword [0x140132068]
mov qword [rcx], rax
mov rcx, qword [0x14012bcd8]
add rcx, 0x18
mov qword [0x14012bcd8], rcx
mov qword [rcx], rsi
lea rax, [0x140104cc8]
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], esi
mov qword [rsp + 0x20], rsi
mov r9d, edi
mov r8d, edi
lea rdx, [rbp]
lea rcx, [0x1401320a0]
call fcn.14009b550
mov rax, qword [0x14012bcd8]
sub rax, 0x18
mov qword [0x14012bcd8], rax
cmp rax, qword [0x14012bcd0]
jb 0x140003a00
mov rax, qword [rax]
mov qword [0x14012bcf8], rax
mov qword [0x140132068], rax
mov byte [0x1401320d0], 0
jmp 0x140003c97
mov dword [rbp + 0x10], 5
mov rbx, qword [r15 + 0x10]
mov qword [rbp], rbx
mov rbx, qword [rbx + 0x3a8]
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bce0]
jne 0x140003a3e
call fcn.140007a98
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bcd0]
jb 0x140003a58
mov rax, qword [0x140132068]
mov qword [rcx], rax
mov rcx, qword [0x14012bcd8]
add rcx, 0x18
mov qword [0x14012bcd8], rcx
mov qword [rcx], rsi
lea rax, str.InputHook
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], esi
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 1
lea r9, [rbp]
xor r8d, r8d
mov rdx, rbx
mov rcx, rbx
call fcn.140091c10
mov rax, qword [0x14012bcd8]
sub rax, 0x18
mov qword [0x14012bcd8], rax
cmp rax, qword [0x14012bcd0]
jb 0x140003ac4
mov rax, qword [rax]
mov qword [0x14012bcf8], rax
mov qword [0x140132068], rax
mov rcx, qword [r15 + 0x10]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x140003c97
mov dword [rbp + 0x10], 5
mov r8, qword [r15 + 0x10]
mov qword [rbp], r8
mov r9d, 1
mov dword [rbp + 0x28], r9d
mov rcx, qword [rbp - 0x70]
movzx eax, cl
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x40], r9d
sar rcx, 0x10
movzx eax, cx
mov qword [rbp + 0x30], rax
cmp edx, 0x41c
jne 0x140003b17
mov rbx, qword [r8 + 0x3b0]
jmp 0x140003b1e
mov rbx, qword [r8 + 0x3c0]
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bce0]
jne 0x140003b3a
call fcn.140007a98
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bcd0]
jb 0x140003b54
mov rax, qword [0x140132068]
mov qword [rcx], rax
mov rcx, qword [0x14012bcd8]
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 3
lea r9, [rbp]
add rcx, 0x18
mov qword [0x14012bcd8], rcx
lea rax, str.InputHook
mov dword [rcx + 0x10], esi
mov qword [rcx + 8], rax
mov qword [rcx], rsi
xor r8d, r8d
mov rdx, rbx
mov rcx, rbx
call fcn.140091c10
mov rax, qword [0x14012bcd8]
sub rax, 0x18
mov qword [0x14012bcd8], rax
cmp rax, qword [0x14012bcd0]
jb 0x140003c97
mov rax, qword [rax]
mov qword [0x14012bcf8], rax
mov qword [0x140132068], rax
jmp 0x140003c97
mov rax, qword [rbp - 0x70]
mov word [rbp - 0x10], ax
sar rax, 0x10
mov word [rbp - 0xe], ax
mov word [rbp - 0xc], si
mov dword [rbp + 0x10], 5
mov rbx, qword [r15 + 0x10]
mov qword [rbp], rbx
mov dword [rbp + 0x28], esi
lea rax, [rbp - 0x10]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], 0xffffffffffffffff
mov rbx, qword [rbx + 0x3b8]
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bce0]
jne 0x140003c22
call fcn.140007a98
mov rcx, qword [0x14012bcd8]
cmp rcx, qword [0x14012bcd0]
jb 0x140003c3c
mov rax, qword [0x140132068]
mov qword [rcx], rax
mov rcx, qword [0x14012bcd8]
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 2
lea r9, [rbp]
jmp 0x140003b6a
mov r15, qword [rbp + 0x58]
movzx eax, byte [r15 + 0x10]
add al, 0x64
cmp al, 3
ja 0x140003c6e
movzx eax, word [rbp - 0x70]
mov qword [rbx + 0x40], rax
mov rax, qword [rbp - 0x50]
mov qword [rbx + 0x38], rax
movzx eax, byte [r13 + 0x2c]
mov byte [rbx + 0xc5], al
mov rax, qword [r13 + 0x10]
mov qword [rbx + 0x80], rax
mov rdx, r13
mov rcx, r15
call fcn.140019310
call fcn.140004780
cmp dword [rbp + 0x1278], 0
je 0x140003cf6
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movzx r14d, byte [rbp + 0x1288]
mov edi, dword [rbp + 0x1270]
test r14b, r14b
jne 0x140003cce
mov ecx, dword [rbp - 0x48]
sub ecx, eax
add ecx, edi
cmp ecx, 5
jg 0x140002092
mov dword [0x140132168], eax
mov al, 1
mov byte [rbp + 0x1280], al
movzx r14d, al
mov byte [rbp + 0x1288], al
mov ebx, dword [rsp + 0x44]
mov esi, dword [rsp + 0x4c]
xor r10d, r10d
jmp 0x140001954
mov edi, dword [rbp + 0x1270]
mov ebx, dword [rsp + 0x44]
xor r10d, r10d
movzx r14d, byte [rbp + 0x1288]
mov esi, dword [rsp + 0x4c]
movzx eax, byte [rbp + 0x1280]
jmp 0x140001954
mov dword [0x140132168], eax
cmp byte [rsp + 0x51], 0
je 0x140003d2f
mov byte [0x14012fe75], 0
cmp byte [rsp + 0x52], 0
je 0x140003d81
mov eax, dword [0x14012fed0]
dec eax
mov dword [0x14012fed0], eax
test edi, edi
jle 0x140003d81
test eax, eax
jne 0x140003d81
cmp dword [0x1401320ec], eax
jne 0x140003d81
cmp dword [0x14013032c], eax
jne 0x140003d81
cmp byte [0x14012fe74], al
je 0x140003d81
mov edx, 9
mov rcx, qword [0x14012fec8]
call qword [sym.imp.USER32.dll_KillTimer]
test eax, eax
je 0x140003d81
mov byte [0x14012fe74], 0
movzx eax, byte [rsp + 0x70]
jmp 0x1400024f9