Function at 0x1400ebb60
Capabilities:
Capture webcam image
Get common file path
Hide graphical window
Open clipboard

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x16a0]
mov eax, 0x17a0
call fcn.140057430
sub rsp, rax
mov qword [rbp - 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x17f8], rbx
mov rax, qword [0x140136e20]
xor rax, rsp
mov qword [rbp + 0x1690], rax
mov rbx, r8
mov r13, rdx
mov rsi, rcx
mov r15, r8
shr r15, 0x10
mov qword [rsp + 0x60], r15
xor r12d, r12d
mov ecx, 0x2710
mov edx, 0x3e8
test r15w, r15w
jne 0x1400ebd8e
movzx eax, bx
sub ax, cx
cmp ax, dx
ja 0x1400ebc09
movzx edx, bx
lea r8, [rbp + 0x1270]
mov rcx, qword [rsi + 0x1300]
call fcn.1400df8c0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1270]
mov rcx, rsi
call fcn.1400deb30
jmp 0x1400ebd8e
test r15w, r15w
jne 0x1400ebd8e
mov ecx, 0x2ee0
movzx eax, bx
sub ax, cx
cmp ax, dx
ja 0x1400ebd8e
movzx edi, bx
sub edi, ecx
mov qword [rsp + 0x50], r12
mov ecx, 0x20
call fcn.14004b164
test rax, rax
je 0x1400ebd5f
mov qword [rsp + 0x48], rax
mov qword [rax], rax
mov rax, qword [rsp + 0x48]
mov qword [rax + 8], rax
mov qword [rsp + 0x40], r12
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + 0x270]
lea rdx, [rbp + 0x1270]
mov ecx, reloc.SHELL32.dll_ILRemoveLastID
call fcn.140092e10
lea rcx, [rsi + 0x1338]
lea rdx, [rbp + 0x1270]
call qword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
jne 0x1400ebca1
lea rdx, [0x1401402e0]
jmp 0x1400ebcb3
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.1400d1d80
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
movsxd r8, edi
cmp rax, rcx
je 0x1400ebce2
mov edx, dword [rdx + r8*4]
cmp dword [rax + 0x10], edx
je 0x1400ebcd6
mov rax, qword [rax]
cmp rax, rcx
jne 0x1400ebcc7
jmp 0x1400ebce2
mov ecx, r12d
cmp dword [rax + 0x14], ecx
sete cl
mov dword [rax + 0x14], ecx
mov rcx, qword [rsi + 0xa50]
lea rdx, [rsp + 0x48]
mov rax, qword [rcx]
test edi, edi
jne 0x1400ebd11
lea r8d, [rdi + 1]
call qword [rax + 0x278]
lea rcx, [rsi + 0x38]
mov rax, qword [rcx]
mov edx, dword [rsi + 0x1b88]
call qword [rax + 0x20]
jmp 0x1400ebd1b
xor r8d, r8d
call qword [rax + 0x278]
nop
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x48]
mov qword [rax + 8], rax
mov qword [rsp + 0x50], r12
mov rax, qword [rsp + 0x48]
cmp rcx, rax
je 0x1400ebd55
nop
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
mov rax, qword [rsp + 0x48]
cmp rdi, rax
jne 0x1400ebd40
mov rcx, rax
call fcn.14004b088
jmp 0x1400ebd8e
mov qword [rsp + 0x68], r12
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x58]
call fcn.14004b2d4
lea rdx, vtable.std::bad_alloc.0
mov qword [rbp + 0x58], rdx
lea rdx, [0x140132320]
lea rcx, [rbp + 0x58]
call fcn.14004d894
int3
mov eax, 0x4c50
add eax, ebx
mov ecx, 0x3e7
cmp ax, cx
ja 0x1400ebeea
movzx r8d, bx
xor r9d, r9d
lea edx, [rcx + 0x32]
mov rcx, qword [rsi + 0x3f0]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je 0x1400ebeea
movsxd r14, eax
lea r9, [rbp + 0x18]
mov r8, r14
mov edx, 0x417
mov rcx, qword [rsi + 0x3f0]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp + 0x230]
mov rcx, qword [rbp + 0x28]
call fcn.1400924a0
cmp dword [rbp + 0x834], 1
jne 0x1400ebe12
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x838]
mov rcx, rsi
call fcn.1400deb30
jmp 0x1400ebeea
call qword [sym.imp.USER32.dll_CreatePopupMenu]
mov rdi, rax
mov dword [rbp + 0xc0], 0x28
mov dword [rbp + 0xc4], reloc.SHELL32.dll_ILFindLastID
mov dword [rbp + 0xc8], 0x8000000
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetMenuInfo]
mov r11, qword [rbp + 0xa40]
cmp dword [r11 + 0x604], 0
jne 0x1400ebe7b
mov rcx, qword [r11 + 0x828]
test rcx, rcx
je 0x1400ebe7b
lea rdx, [rbp + 0xa50]
call fcn.1400924a0
lea r8, [rbp + 0xa50]
jmp 0x1400ebe7e
xor r8d, r8d
mov dword [0x14013b2e4], 0x2710
xor r9d, r9d
mov rdx, rdi
mov rcx, rsi
call fcn.1400df270
lea r9, [rbp + 0x58]
mov r8, r14
mov edx, 0x41d
mov rcx, qword [rsi + 0x3f0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 2
lea r8, [rbp + 0x58]
xor edx, edx
mov rcx, qword [rsi + 0x3f0]
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r12d
mov r9d, dword [rbp + 0x64]
mov r8d, dword [rbp + 0x58]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov eax, 0xbf68
cmp bx, ax
jb 0x1400ebf2c
movzx r8d, bx
xor r9d, r9d
mov edx, 0x419
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je 0x1400ebfc8
lea r8, [0x1401048dc]
mov edx, eax
mov rcx, rsi
call fcn.1400e17e0
jmp 0x1400ebfc8
mov eax, 0xb798
cmp bx, ax
jb 0x1400ebfc8
movzx r8d, bx
xor r9d, r9d
mov edx, 0x419
mov rcx, qword [rsi + 0x3f8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je 0x1400ebfc8
movsxd r8, eax
lea r9, [rbp + 0x38]
mov edx, 0x417
mov rcx, qword [rsi + 0x3f8]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x1400ebfc8
mov rdx, r12
mov qword [rsp + 0x40], rdx
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x1400ebf9a
lea rdx, [rsp + 0x40]
call fcn.140094590
mov edi, eax
mov rdx, qword [rsp + 0x40]
jmp 0x1400ebf9f
mov edi, 0x80004005
lea rcx, [rsi + 0x38]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
call qword [rax + 0x50]
test edi, edi
js 0x1400ebfc8
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
movzx eax, bx
cmp eax, 0x9d85
jg 0x1400ece26
je 0x1400ece15
cmp eax, 0x9c78
jg 0x1400ec008
je case.0x1400ed592.45019
cmp eax, 0x13a9
je case.0x1400ec033.40057
cmp eax, 0x1f42
jne case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c7a50
jmp case.0x1400edd40.60006
sub eax, 0x9c79
cmp eax, 0xeb
ja case.0x1400edd40.60006
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0xedef8]
mov ecx, dword [rdx + rax*4 + 0xeddd0]
add rcx, rdx
jmp rcx
mov rcx, rsi
call fcn.1400a9e30
jmp case.0x1400edd40.60006
lea rdx, [rsi + 0x1338]
mov qword [rbp + 0x218], 7
mov qword [rbp + 0x210], r12
mov word [rbp + 0x200], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp + 0x200]
call fcn.140009a30
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x1400ec09a
lea rcx, [rbp + 0x200]
call fcn.140094330
cmp qword [rbp + 0x218], 8
jb case.0x1400edd40.60006
mov rcx, qword [rbp + 0x200]
call fcn.14004b088
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400e5c90
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c6fc0
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400e59b0
jmp case.0x1400edd40.60006
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400edd40.60006
lea rcx, [rsi + 0x1338]
xor edx, edx
call fcn.1400e7860
jmp case.0x1400edd40.60006
lea rcx, [rsi + 0x1338]
mov edx, 1
call fcn.1400e7860
jmp case.0x1400edd40.60006
mov dword [rsi + 0xf3c0], 1
mov rdi, qword [rsi + 0x12c0]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0xcc], 2
mov dword [rbp + 0xd0], 2
lea r9, [rbp + 0xc0]
or r8, 0xffffffffffffffff
mov edx, 0x102b
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea edx, [r9 + 0xb]
lea r8d, [r9 + 1]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SetFocus]
jmp case.0x1400edd40.60006
mov dword [rsi + 0xf3c8], 1
mov eax, dword [rsi + 0xf3d0]
mov dword [rsi + 0xf3d4], eax
mov rcx, qword [rsi + 0x12c0]
call fcn.140090460
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SetFocus]
jmp case.0x1400edd40.60006
mov rdx, qword [rsi + 0x12c0]
mov rcx, rsi
call fcn.1400c9d20
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SetFocus]
jmp case.0x1400edd40.60006
mov dword [rsi + 0xf3c4], 1
mov rdi, qword [rsi + 0x12c0]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0xcc], r12d
jmp 0x1400ec14f
mov edx, 1
mov rcx, rsi
call fcn.1400c6160
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400c6160
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c7600
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c4de0
jmp case.0x1400edd40.60006
cmp dword [rsi + 0xed48], 0
sete r12b
mov dword [rsi + 0xed48], r12d
neg r12d
sbb edx, edx
and edx, 5
mov rcx, qword [rsi + 0x70]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call fcn.1400a3df0
jmp case.0x1400edd40.60006
cmp dword [rsi + 0xed54], 0
sete r12b
mov dword [rsi + 0xed54], r12d
neg r12d
sbb edx, edx
and edx, 5
mov rcx, qword [rsi + 0x80]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call fcn.1400a3df0
jmp case.0x1400edd40.60006
cmp dword [rsi + 0xed50], 0
sete r12b
mov dword [rsi + 0xed50], r12d
mov rdx, qword [rsi + 0x3e8]
mov r8d, r12d
mov rcx, rsi
call fcn.1400c3280
mov rcx, rsi
call fcn.1400c9c00
mov rcx, rsi
call fcn.1400a3df0
jmp case.0x1400edd40.60006
cmp dword [rsi + 0xed58], 0
sete r12b
mov dword [rsi + 0xed58], r12d
mov rdx, qword [rsi + 0xb0]
jmp 0x1400ec2d6
cmp dword [rsi + 0xed5c], 0
sete r12b
mov dword [rsi + 0xed5c], r12d
mov rdx, qword [rsi + 0x3f0]
jmp 0x1400ec2d6
xor r9d, r9d
xor r8d, r8d
mov edx, 0x41b
mov rcx, qword [rsi + 0xb0]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400edd40.60006
mov r9, rsi
lea r8, [0x1400da990]
mov rdx, r13
mov ecx, 0xb2
call fcn.140001150
jmp case.0x1400edd40.60006
test rsi, rsi
lea r8, [rsi + 0x38]
jne 0x1400ec371
mov r8, r12
mov rdx, r13
lea rcx, [rbp + 0xc0]
call fcn.1400d6ce0
cmp dword [rbp + 0xf0], 0
jne 0x1400ec3b7
movzx edx, word [rbp + 0xd8]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rax, vtable.CBaseDialog.0
mov qword [rbp + 0xc0], rax
mov rbx, qword [rbp + 0x108]
test rbx, rbx
je case.0x1400edd40.60006
mov rax, qword [rbx + 8]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], r12
cmp rcx, qword [rbx + 8]
je 0x1400ec402
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
cmp rdi, qword [rbx + 8]
jne 0x1400ec3f1
mov rcx, qword [rbx + 8]
call fcn.14004b088
mov rcx, rbx
call fcn.14004b088
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c3340
jmp case.0x1400edd40.60006
mov edx, 1
mov rcx, rsi
call fcn.1400c3800
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400c3800
jmp case.0x1400edd40.60006
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
call qword [rax + 0x1d8]
jmp case.0x1400edd40.60006
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
call qword [rax + 0xc8]
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c9bc0
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c38a0
jmp case.0x1400edd40.60006
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea r8, [rbp + 0x1270]
mov edx, 0x104
call qword [rax + 0x68]
mov rbx, r12
mov qword [rsp + 0x50], rbx
mov ecx, 0x38
call fcn.14004b164
mov r13, rax
test rax, rax
je 0x1400ec6f6
mov qword [rsp + 0x48], rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov r9d, 2
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
cmp eax, 0xffffffff
je 0x1400ec5ed
movabs r15, 0x666666666666665
nop
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea r8, [rbp + 0x1480]
mov edx, r14d
call qword [rax + 0x60]
mov qword [rbp + 0x88], 7
mov qword [rbp + 0x80], r12
mov word [rbp + 0x70], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x1480]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp + 0x1480]
lea rcx, [rbp + 0x70]
call fcn.140009a30
nop
lea r8, [rbp + 0x70]
mov rdx, qword [r13 + 8]
mov rcx, r13
call fcn.14000a770
mov rdx, rax
mov rax, r15
sub rax, rbx
cmp rax, 1
jb 0x1400ec5e0
inc rbx
mov qword [rsp + 0x50], rbx
mov qword [r13 + 8], rdx
mov rax, qword [rdx + 8]
mov qword [rax], rdx
cmp qword [rbp + 0x88], 8
jb 0x1400ec59b
mov rcx, qword [rbp + 0x70]
call fcn.14004b088
mov qword [rbp + 0x88], 7
mov qword [rbp + 0x80], r12
mov word [rbp + 0x70], r12w
movsxd r8, r14d
mov edx, 0x100c
mov r9d, 2
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14d, eax
cmp eax, 0xffffffff
jne 0x1400ec500
mov r15, qword [rsp + 0x60]
jmp 0x1400ec5ed
lea rcx, str.list_T__too_long
call fcn.14002ba2c
nop
lea rax, [rbp - 0x18]
mov qword [rbp + 0x58], rax
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x18]
call fcn.14000b220
mov rbx, rax
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r12
mov word [rbp - 0x40], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x1270]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp + 0x1270]
lea rcx, [rbp - 0x40]
call fcn.140009a30
nop
mov eax, dword [rsi + 0xee20]
mov dword [rsp + 0x20], eax
mov r9, rbx
lea r8, [rbp - 0x40]
mov rdx, qword [rsi + 0x68]
lea rcx, [rbp + 0xc0]
call fcn.1400cd880
cmp dword [rbp + 0xf0], 0
jne 0x1400ec697
movzx edx, word [rbp + 0xd8]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rcx, [rbp + 0xc0]
call fcn.1400cd300
nop
mov rdi, qword [r13]
mov qword [r13], r13
mov qword [r13 + 8], r13
cmp rdi, r13
je 0x1400ec6e9
mov rbx, qword [rdi]
cmp qword [rdi + 0x28], 8
jb 0x1400ec6c8
mov rcx, qword [rdi + 0x10]
call fcn.14004b088
mov qword [rdi + 0x28], 7
mov qword [rdi + 0x20], r12
mov word [rdi + 0x10], r12w
mov rcx, rdi
call fcn.14004b088
mov rdi, rbx
cmp rbx, r13
jne 0x1400ec6b5
mov rcx, r13
call fcn.14004b088
jmp case.0x1400edd40.60006
mov qword [rsp + 0x68], r12
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x18]
call fcn.14004b2d4
lea rdx, vtable.std::bad_alloc.0
mov qword [rbp + 0x18], rdx
lea rdx, [0x140132320]
lea rcx, [rbp + 0x18]
call fcn.14004d894
int3
mov r9d, 2
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rax
cmp eax, 0xffffffff
je case.0x1400edd40.60006
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea r8, [rbp + 0x1270]
call qword [rax + 0x60]
mov qword [rbp - 0x50], 7
mov qword [rbp - 0x58], r12
mov word [rbp - 0x68], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x1270]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp + 0x1270]
lea rcx, [rbp - 0x68]
call fcn.140009a30
lea r8, [rbp - 0x68]
mov rdx, r13
lea rcx, [rbp + 0xc0]
call fcn.1400adf70
cmp dword [rbp + 0xf0], 0
jne 0x1400ec7e3
movzx edx, word [rbp + 0xd8]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rcx, [rbp + 0xc0]
call fcn.1400ac650
jmp case.0x1400edd40.60006
mov r13, r12
mov qword [rsp + 0x50], r12
mov ecx, 0x38
call fcn.14004b164
mov rbx, rax
test rax, rax
je 0x1400eca81
mov qword [rsp + 0x48], rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov r9d, 2
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
cmp eax, 0xffffffff
je 0x1400ec94c
movabs r15, 0x666666666666665
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea r8, [rbp + 0x1270]
mov edx, r14d
call qword [rax + 0x60]
mov qword [rbp + 0xb0], 7
mov qword [rbp + 0xa8], r12
mov word [rbp + 0x98], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x1270]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp + 0x1270]
lea rcx, [rbp + 0x98]
call fcn.140009a30
nop
lea r8, [rbp + 0x98]
mov rdx, qword [rbx + 8]
mov rcx, rbx
call fcn.14000a770
mov rdx, rax
mov rax, r15
sub rax, r13
cmp rax, 1
jb 0x1400ec93f
inc r13
mov qword [rsp + 0x50], r13
mov qword [rbx + 8], rdx
mov rax, qword [rdx + 8]
mov qword [rax], rdx
cmp qword [rbp + 0xb0], 8
jb 0x1400ec8f7
mov rcx, qword [rbp + 0x98]
call fcn.14004b088
mov qword [rbp + 0xb0], 7
mov qword [rbp + 0xa8], r12
mov word [rbp + 0x98], r12w
movsxd r8, r14d
mov edx, 0x100c
mov r9d, 2
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14d, eax
cmp eax, 0xffffffff
jne 0x1400ec850
mov r15, qword [rsp + 0x60]
jmp 0x1400ec94c
lea rcx, str.list_T__too_long
call fcn.14002ba2c
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp]
call fcn.14000b220
mov r9d, dword [rsi + 0xee20]
mov r8, rax
mov rdx, qword [rsi + 0x68]
lea rcx, [rbp + 0xc0]
call fcn.1400db310
cmp dword [rbp + 0xf0], 0
jne 0x1400ec9ab
movzx edx, word [rbp + 0xd8]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rax, vtable.CDestroyFilesDialog.0
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x110]
call fcn.14000a6f0
mov rcx, qword [rbp + 0x110]
call fcn.14004b088
lea rax, vtable.CBaseDialog.0
mov qword [rbp + 0xc0], rax
mov r13, qword [rbp + 0x108]
test r13, r13
je 0x1400eca2a
mov rax, qword [r13 + 8]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [r13 + 8]
mov qword [rax + 8], rax
mov qword [r13 + 0x10], r12
cmp rcx, qword [r13 + 8]
je 0x1400eca18
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
cmp rdi, qword [r13 + 8]
jne 0x1400eca07
mov rcx, qword [r13 + 8]
call fcn.14004b088
mov rcx, r13
call fcn.14004b088
nop
mov rdi, qword [rbx]
mov qword [rbx], rbx
mov qword [rbx + 8], rbx
cmp rdi, rbx
je 0x1400eca74
nop dword [rax]
mov r13, qword [rdi]
cmp qword [rdi + 0x28], 8
jb 0x1400eca53
mov rcx, qword [rdi + 0x10]
call fcn.14004b088
mov qword [rdi + 0x28], 7
mov qword [rdi + 0x20], r12
mov word [rdi + 0x10], r12w
mov rcx, rdi
call fcn.14004b088
mov rdi, r13
cmp r13, rbx
jne 0x1400eca40
mov rcx, rbx
call fcn.14004b088
jmp case.0x1400edd40.60006
mov qword [rsp + 0x68], r12
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x18]
call fcn.14004b2d4
lea rdx, vtable.std::bad_alloc.0
mov qword [rbp + 0x18], rdx
lea rdx, [0x140132320]
lea rcx, [rbp + 0x18]
call fcn.14004d894
int3
mov edx, reloc.SHELL32.dll_ILRemoveLastID
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 5
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, ILFindLastID
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 0x27
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 0xa
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 3
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 4
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 0x3b
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILClone
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov edx, 0x31
mov rcx, rsi
call fcn.1400c8750
jmp case.0x1400edd40.60006
mov rcx, qword [0x1401495b8]
test rcx, rcx
jne 0x1400ec18d
mov rcx, rsi
call fcn.1400c2c80
jmp case.0x1400edd40.60006
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x1400ecbcf
mov r9d, 0x104
lea r8, [rbp + 0x1480]
xor edx, edx
mov rcx, rax
call qword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1480]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, str.Explorer_Help.chm
lea rcx, [rbp + 0x1480]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
mov qword [rsp + 0x60], r12
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x1480]
call fcn.140094590
test eax, eax
js 0x1400ecc2d
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x68]
call fcn.140092f10
test eax, eax
jne case.0x1400edd40.60006
mov rcx, qword [0x1401495b0]
mov qword [rbp + 0xd0], rcx
mov dword [rbp + 0xd8], 0xef
mov qword [rbp + 0xe0], r13
mov byte [rbp + 0xf4], 0
mov qword [rbp + 0x108], r12
mov dword [rbp + 0xf0], r12d
lea rax, vtable.CHelpFileMissingDialog.0
mov qword [rbp + 0xc0], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, r13
mov edx, 0xef
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rax, vtable.CBaseDialog.0
mov qword [rbp + 0xc0], rax
mov rbx, qword [rbp + 0x108]
test rbx, rbx
je case.0x1400edd40.60006
mov rax, qword [rbx + 8]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], r12
cmp rcx, qword [rbx + 8]
je 0x1400ec402
nop
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
cmp rdi, qword [rbx + 8]
jne 0x1400eccd0
jmp 0x1400ec402
mov rcx, qword [0x1401495b0]
mov qword [rbp + 0xd0], rcx
mov dword [rbp + 0xd8], 0x78
mov qword [rbp + 0xe0], r13
mov byte [rbp + 0xf4], 0
mov qword [rbp + 0x108], r12
mov dword [rbp + 0xf0], r12d
lea rax, vtable.CAboutDialog.0
mov qword [rbp + 0xc0], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, r13
mov edx, 0x78
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rax, vtable.CBaseDialog.0
mov qword [rbp + 0xc0], rax
mov rbx, qword [rbp + 0x108]
test rbx, rbx
je case.0x1400edd40.60006
mov rax, qword [rbx + 8]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], r12
cmp rcx, qword [rbx + 8]
je 0x1400ec402
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
cmp rdi, qword [rbx + 8]
jne 0x1400ecd87
jmp 0x1400ec402
mov edx, 1
mov rcx, rsi
call fcn.1400a9f20
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400a9f20
jmp case.0x1400edd40.60006
mov rcx, qword [rsi + 0xa8]
jmp 0x1400ec18d
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.USER32.dll_SetFocus]
xor r9d, r9d
mov edx, 0x14f
lea r8d, [r9 + 1]
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c3640
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0x1b94]
mov rcx, rsi
call fcn.1400a9010
jmp case.0x1400edd40.60006
lea rcx, [rsi + 0xee70]
call fcn.14008f1a0
jmp case.0x1400edd40.60006
cmp eax, 0xafca
jg 0x1400ed560
je case.0x1400ec033.40093
sub eax, 0x9d8b
cmp eax, 0x64
ja case.0x1400edd40.60006
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0xee06c]
mov ecx, dword [rdx + rax*4 + 0xedfe4]
add rcx, rdx
jmp rcx
mov rcx, rsi
call fcn.1400c4a00
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400e5c40
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400e5b60
jmp case.0x1400edd40.60006
cmp dword [rsi + 0xed60], 0
sete r12b
mov dword [rsi + 0xed60], r12d
mov rdx, qword [rsi + 0x3f8]
jmp 0x1400ec2d6
cmp dword [rsi + 0xed64], 0
sete r12b
mov dword [rsi + 0xed64], r12d
mov rdx, qword [rsi + 0x400]
jmp 0x1400ec2d6
mov rcx, rsi
call fcn.1400c33e0
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400caf20
jmp case.0x1400edd40.60006
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov ecx, 0x20
call fcn.14004b164
test rax, rax
je 0x1400ed182
mov qword [rsp + 0x48], rax
mov qword [rax], rax
mov rax, qword [rsp + 0x48]
mov qword [rax + 8], rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + 0x270]
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
call qword [rax + 0x70]
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x11]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 3]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
lea rdx, [rbp - 0x78]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x31]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x12]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x60]
mov r8, rbx
mov edx, 0x10000000
call qword [rax + 0x38]
test eax, eax
jne 0x1400ed027
lea rcx, [rsi + 0xf330]
jmp 0x1400ed0e6
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x78]
mov r8, rbx
mov edx, 0x10000000
call qword [rax + 0x38]
test eax, eax
jne 0x1400ed04f
lea rcx, [rsi + 0xf348]
jmp 0x1400ed0e6
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r9, qword [rbp - 0x78]
mov r8, rbx
mov edx, 0x10000000
call qword [rax + 0x38]
test eax, eax
jne 0x1400ed073
lea rcx, [rsi + 0xf360]
jmp 0x1400ed0e6
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r9, qword [rbp - 0x80]
mov r8, rbx
mov edx, 0x10000000
call qword [rax + 0x38]
test eax, eax
jne 0x1400ed097
lea rcx, [rsi + 0xf378]
jmp 0x1400ed0e6
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x70]
mov r8, rbx
mov edx, 0x10000000
call qword [rax + 0x38]
test eax, eax
jne 0x1400ed0bc
lea rcx, [rsi + 0xf390]
jmp 0x1400ed0e6
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r9, qword [rsp + 0x68]
mov r8, rbx
mov edx, 0x10000000
call qword [rax + 0x38]
test eax, eax
lea rcx, [rsi + 0xf3a8]
je 0x1400ed0e6
lea rcx, [rsi + 0xf318]
lea rdx, [rsp + 0x48]
call fcn.14000bef0
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x48]
mov qword [rax + 8], rax
mov qword [rsp + 0x50], r12
cmp rcx, qword [rsp + 0x48]
je 0x1400ed122
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
cmp rdi, qword [rsp + 0x48]
jne 0x1400ed110
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.SHELL32.dll_ILFindLastID]
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x48]
mov qword [rax + 8], rax
mov qword [rsp + 0x50], r12
mov rax, qword [rsp + 0x48]
cmp rcx, rax
je 0x1400ed175
nop word [rax + rax]
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
mov rax, qword [rsp + 0x48]
cmp rdi, rax
jne 0x1400ed160
mov rcx, rax
call fcn.14004b088
jmp case.0x1400edd40.60006
mov qword [rbp + 0x58], r12
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x18]
call fcn.14004b2d4
lea rdx, vtable.std::bad_alloc.0
mov qword [rbp + 0x18], rdx
lea rdx, [0x140132320]
lea rcx, [rbp + 0x18]
call fcn.14004d894
int3
lea r8, [rsi + 0x48]
mov rdx, r13
lea rcx, [rbp + 0xc0]
call fcn.1400dc000
cmp dword [rbp + 0xf0], 0
jne 0x1400ed1f9
movzx edx, word [rbp + 0xd8]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [0x140098920]
mov r8, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x12c0]
call qword [sym.imp.USER32.dll_InvalidateRect]
lea rax, vtable.CBaseDialog.0
mov qword [rbp + 0xc0], rax
mov rbx, qword [rbp + 0x108]
test rbx, rbx
je case.0x1400edd40.60006
mov rax, qword [rbx + 8]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], r12
cmp rcx, qword [rbx + 8]
je 0x1400ec402
nop dword [rax]
mov rdi, qword [rcx]
call fcn.14004b088
mov rcx, rdi
cmp rdi, qword [rbx + 8]
jne 0x1400ed250
jmp 0x1400ec402
mov rcx, rsi
call fcn.1400c3730
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c7820
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c53f0
jmp case.0x1400edd40.60006
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], r12d
jmp 0x1400ed2ba
dec eax
mov dword [rsi + 0x1b94], eax
movsxd r8, dword [rsi + 0x1b94]
xor r9d, r9d
mov edx, 0x130c
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 1
mov rcx, rsi
call fcn.1400a97d0
jmp case.0x1400edd40.60006
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 1
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 2
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 2
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 3
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 3
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 4
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 4
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 5
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 5
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 6
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 6
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 7
jle 0x1400ed2b2
mov dword [rsi + 0x1b94], 7
jmp 0x1400ed2ba
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1304
mov rcx, qword [rsi + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [rax - 1]
mov dword [rsi + 0x1b94], ecx
movsxd r8, ecx
jmp 0x1400ed2c1
xor r8d, r8d
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400df7c0
jmp case.0x1400edd40.60006
mov r8d, 1
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400df7c0
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400df720
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400df670
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400dfbd0
jmp case.0x1400edd40.60006
mov dword [0x140149280], r12d
mov r9, rsi
lea r8, [0x1400eb030]
mov rdx, qword [rsi + 0x68]
mov ecx, 0xd3
call fcn.140001150
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0xf270]
cmp edx, 0xffffffff
je case.0x1400edd40.60006
lea r8, [0x140104914]
mov rcx, rsi
call fcn.1400e17e0
jmp case.0x1400edd40.60006
mov r9, rsi
lea r8, [0x1400e1cb0]
mov rdx, qword [rsi + 0x68]
mov ecx, 0xd8
call fcn.140001150
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400e14e0
jmp case.0x1400edd40.60006
mov edx, dword [rsi + 0xf270]
mov rcx, rsi
call fcn.1400e1df0
jmp case.0x1400edd40.60006
mov dword [rsi + 0xed54], r12d
xor edx, edx
jmp 0x1400ec2a3
mov rcx, rsi
call fcn.1400c5540
jmp case.0x1400edd40.60006
cmp eax, 0xbb80
jg 0x1400ed768
je 0x1400ed75b
sub eax, 0xafcb
cmp eax, 0x13
ja case.0x1400edd40.60006
cdqe
lea rdx, [0x140000000]
mov eax, dword [rdx + rax*4 + 0xee0d4]
add rax, rdx
jmp rax
mov rcx, rsi
call fcn.1400c5020
jmp case.0x1400edd40.60006
lea rcx, [rsi + 0x1338]
call fcn.140095d30
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400e5b00
jmp case.0x1400edd40.60006
mov edx, 1
mov rcx, rsi
call fcn.1400e5b00
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400e5960
jmp case.0x1400edd40.60006
mov edx, 1
mov rcx, rsi
call fcn.1400e5be0
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400e5be0
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400e5a00
jmp case.0x1400edd40.60006
xor edx, edx
mov rcx, rsi
call fcn.1400cb080
jmp case.0x1400edd40.60006
mov edx, 1
mov rcx, rsi
call fcn.1400cb080
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400a3ee0
jmp case.0x1400edd40.60006
lea rcx, [rsi + 0x38]
mov rax, qword [rcx]
mov edx, dword [rsi + 0x1b88]
call qword [rax + 0x20]
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c4b20
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c54c0
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c5310
jmp case.0x1400edd40.60006
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], r12
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
call qword [rax + 0x70]
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x30], r12d
lea r9, [rbp + 0x18]
lea r8, [0x1400e3540]
mov rdx, r13
mov ecx, 0xb3
call fcn.140001150
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, rsi
call fcn.1400df520
jmp case.0x1400edd40.60006
mov r9, rsi
lea r8, [0x1400c0400]
mov rdx, qword [rsi + 0x68]
mov ecx, 0xb4
call fcn.140001150
jmp case.0x1400edd40.60006
mov rcx, qword [0x1401495c0]
test rcx, rcx
jne 0x1400ec18d
mov rcx, qword [rsi + 0xa50]
mov rax, qword [rcx]
lea r8, [rbp + 0x1270]
mov edx, 0x104
call qword [rax + 0x68]
mov ecx, 0x350
call fcn.14004b164
mov qword [rbp + 0x58], rax
test rax, rax
je 0x1400ed736
lea r9, [rsi + 0x38]
lea r8, [rbp + 0x1270]
mov rdx, r13
mov rcx, rax
call fcn.1400b3a40
mov r12, rax
lea rdx, [rsi + 0x30]
mov rcx, r12
call fcn.140098a90
mov qword [0x1401495c0], rax
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400c5700
jmp case.0x1400edd40.60006
mov rcx, rsi
call fcn.1400ea850
jmp case.0x1400edd40.60006
cmp eax, 0xea60
jg 0x1400edd23
je 0x1400edd1c
sub eax, 0xc350
cmp eax, 0x8b
ja case.0x1400edd40.60006
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0xee260]
mov ecx, dword [rdx + rax*4 + 0xee124]
add rcx, rdx
jmp rcx
mov edx, 1
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 3
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 4
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 2
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 5
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 6
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 8
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 9
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0xa
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0xb
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILFindLastID
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILFindLastID
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILClone
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILClone
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILFindLastID
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILRemoveLastID
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILClone
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILIsParent
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILIsParent
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILCombine
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILCombine
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILIsParent
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, ILCombine
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILCombine
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x1a
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x1b
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 7
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x1d
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x1e
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x1f
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x20
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x21
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x22
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x23
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x24
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x25
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x26
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x27
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 0x28
mov rcx, rsi
call fcn.1400c3050
jmp case.0x1400edd40.60006
mov edx, 1
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 3
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 4
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 2
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 5
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 6
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 8
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 9
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0xa
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0xb
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILFindLastID
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILFindLastID
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILClone
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILClone
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILFindLastID
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILRemoveLastID
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILClone
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILIsParent
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILIsParent
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILCombine
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILCombine
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILIsParent
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, ILCombine
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, reloc.SHELL32.dll_ILCombine
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x1a
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x1b
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 7
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x1d
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x1e
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x1f
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x20
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x21
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x22
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x23
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x24
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x25
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x26
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x27
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 0x28
mov rcx, rsi
call fcn.1400c2fa0
jmp case.0x1400edd40.60006
mov edx, 6
jmp 0x1400edd71
sub eax, 0xea61
cmp eax, 7
ja case.0x1400edd40.60006
cdqe
lea rdx, [0x140000000]
mov eax, dword [rdx + rax*4 + 0xee2ec]
add rax, rdx
jmp rax
mov edx, 7
jmp 0x1400edd71
mov edx, 8
jmp 0x1400edd71
mov edx, 1
jmp 0x1400edd71
mov edx, 2
jmp 0x1400edd71
mov edx, 3
jmp 0x1400edd71
mov edx, 4
jmp 0x1400edd71
mov edx, 5
movsxd rax, dword [rsi + 0x1b88]
mov rcx, qword [rsi + rax*8 + 0x408]
mov rax, qword [rcx]
call qword [rax + 0x28]
cmp r15w, 7
jne 0x1400edda0
lea rdx, [rsi + 0x1338]
mov rcx, qword [rsi + 0xa8]
call fcn.140091cd0
mov eax, 1
mov rcx, qword [rbp + 0x1690]
xor rcx, rsp
call fcn.14004ae00
mov rbx, qword [rsp + 0x17f8]
add rsp, 0x17a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret